Function at 0x43dae0
Capabilities:
Check if file exists
Get file attributes
Set current directory

Disassembly:
sub esp, 0x498
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x4ac]
xor eax, eax
mov dword [esp + 0x1c], 0x90020
mov ebp, ecx
mov word [esp + 0x20], ax
mov ebx, edi
test edi, edi
je 0x43db41
movzx eax, word [edi]
test ax, ax
je 0x43db41
mov esi, eax
lea ecx, [esp + 0x1c]
mov edx, 0x20
nop dword [eax + eax]
cmp si, dx
je 0x43db7c
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x43db20
movzx eax, word [ebx + 2]
add ebx, 2
mov esi, eax
test ax, ax
jne 0x43db12
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43db46
sub ecx, edx
sar ecx, 1
lea ebx, [edi + ecx*2]
xor edi, edi
mov esi, ebx
sub esi, dword [esp + 0x4ac]
sar esi, 1
cmp esi, 0x20
jb 0x43db99
mov eax, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov edi, ebx
nop
movzx eax, word [edi]
cmp eax, 0x20
je 0x43db8d
cmp eax, 9
jne 0x43db92
add edi, 2
jmp 0x43db80
test ax, ax
jne 0x43db5a
jmp 0x43db58
cmp word [ebx], 0
mov ebx, dword [esp + 0x4ac]
je 0x43dbc2
push esi
lea eax, [esp + 0x6c]
push ebx
push eax
call fcn.004aa2f4
add esp, 0xc
xor eax, eax
mov word [esp + esi*2 + 0x68], ax
lea esi, [esp + 0x68]
jmp 0x43dbc4
mov esi, ebx
push 0x4d5f4c
push esi
mov byte [esp + 0x1c], 0
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e809
push 0x4d6624
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
sete byte [esp + 0x14]
test eax, eax
je 0x43e809
push 0x4d66a0
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43dd51
test edi, edi
jne 0x43dc43
push edi
call dword [sym.imp.KERNEL32.DLL_SetDllDirectoryW]
test eax, eax
jne 0x43dd6a
push 0x4cdea8
push 0x4cfd58
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
movzx eax, word [edi]
mov ecx, eax
cmp eax, 0x22
je 0x43dc54
mov edx, ecx
cmp eax, 0x27
jne 0x43dc78
lea esi, [edi + 2]
push 0
push esi
call fcn.0049c891
movzx ecx, word [edi]
add esp, 8
mov edx, ecx
cmp word [eax - 2], cx
jne 0x43dc78
xor ecx, ecx
mov edi, esi
mov word [eax - 2], cx
movzx edx, word [esi]
cmp dx, 0x2a
jne 0x43dcb8
movzx eax, word [edi + 2]
mov edx, eax
mov esi, eax
and eax, 0xffdf
add edx, 0xffffff9f
movzx ecx, ax
cmp dx, 0x19
mov eax, esi
cmova ecx, eax
cmp cx, 0x49
jne 0x43dcb8
movzx eax, word [edi + 4]
add edi, 4
mov bl, 1
cmp eax, 0x20
je 0x43dcb3
cmp eax, 9
jne 0x43dcba
add edi, 2
jmp 0x43dcba
xor bl, bl
push edi
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.0044c220
test eax, eax
je 0x43e994
mov edi, dword [esp + 0x14]
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x43dcfc
test al, 0x10
je 0x43dcfc
push edi
call dword [sym.imp.KERNEL32.DLL_SetDllDirectoryW]
push edi
mov esi, eax
call fcn.0049ee02
add esp, 4
test esi, esi
jmp 0x43dc1f
push edi
mov esi, 3
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov dword [esp + 0x10], eax
test eax, eax
je 0x43dd26
lea eax, [esp + 0x10]
push eax
push edi
push 1
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleExW]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43dd39
test bl, bl
jne 0x43dd39
push edi
push 0x4d3a68
mov ecx, ebp
call fcn.0040d630
mov esi, eax
push edi
call fcn.0049ee02
mov eax, esi
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d66b4
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43dd7c
mov byte [0x4e7eec], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d66cc
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43de55
test edi, edi
je 0x43de39
push 0x4d66ec
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43de39
push 0x4d66f8
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43ddde
mov dword [0x4e3800], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6708
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43de0c
mov dword [0x4e3800], 3
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d2d98
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e51c
mov dword [0x4e3800], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov dword [0x4e3800], 2
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6718
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43deec
test edi, edi
je 0x43ded3
cmp word [edi], ax
je 0x43ded3
push 0x4d68d8
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43ded3
cmp word [edi], 0x31
jne 0x43de93
cmp word [edi + 2], 0
je 0x43ded3
push 0x4d68e4
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43deba
cmp word [edi], 0x30
jne 0x43e4dc
cmp word [edi + 2], 0
jne 0x43e4dc
mov byte [0x4e7cdf], 0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov byte [0x4e7cdf], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d1cb0
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e09f
cmp dword [ebp + 0x58], eax
jne 0x43e081
mov esi, dword [0x4e37f8]
mov eax, dword [esi + 0x18]
cmp eax, dword [ebp + 0x1c]
jne 0x43e081
test edi, edi
jne 0x43df34
mov dword [esi + 0x58], edi
lea eax, [edi + 3]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov ecx, edi
call fcn.00413c60
mov dword [esi + 0x58], eax
test eax, eax
jne 0x43dd6a
mov ebx, dword [ebp + 0x1c]
test ebx, ebx
je 0x43df50
dec dword [ebp + 0x28]
mov ecx, ebp
call fcn.0044f3a0
mov ecx, dword [ebp + 0x1c]
call fcn.004144b0
cmp eax, 1
je 0x43df8d
cmp eax, 0xa00e0001
jne 0x43e994
push 0x4cdea8
push 0x4d1758
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
cmp word [edi], 0
je 0x43dfeb
mov esi, edi
lea ecx, [esi + 2]
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x43dfa0
sub esi, ecx
sar esi, 1
lea eax, [esi + esi]
lea ecx, [eax + 2]
mov dword [esp + 0x10], eax
call fcn.0047e400
mov ecx, eax
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x43ea25
test esi, esi
mov esi, dword [esp + 0x10]
je 0x43dfe3
push esi
push edi
push ecx
call fcn.0049c940
mov ecx, dword [esp + 0x20]
add esp, 0xc
xor eax, eax
mov word [ecx + esi], ax
jmp 0x43dff0
mov ecx, 0x4cdea8
mov eax, dword [0x4e37f8]
push 0
push 0
push 0
mov eax, dword [eax + 0x58]
push 0
push 3
mov dword [eax + 0xc], ecx
mov ecx, ebp
mov esi, dword [ebp + 0x1c]
call fcn.00440020
test eax, eax
je 0x43df6f
push 0
push 0
push 6
push edi
mov ecx, ebp
call fcn.0043eb30
test eax, eax
je 0x43df6f
push 0
push 0
push 0
push 0
push 4
mov ecx, ebp
call fcn.00440020
test eax, eax
je 0x43df6f
mov ecx, dword [esi + 0x28]
mov edx, dword [0x4e37f8]
mov eax, dword [edx + 0x58]
mov dword [ecx + 0xc], eax
mov dword [ebp + 0x1c], ebx
mov dword [edx + 0x18], ebx
test ebx, ebx
je 0x43dd6a
push dword [ebp + 0x28]
lea ecx, [ebp + 0x24]
push ebx
call fcn.0044df50
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4cdea8
push 0x4d407c
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d672c
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e0d7
test edi, edi
je 0x43dd6a
mov ecx, edi
call fcn.00481e30
mov dword [0x4e3d60], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6748
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e224
test edi, edi
je 0x43dd6a
mov edx, 0x4d32f4
mov ecx, edi
call fcn.00481a00
mov ebx, eax
test ebx, ebx
je 0x43e19c
movzx eax, word [ebx]
test ax, ax
je 0x43dd6a
mov esi, eax
nop dword [eax]
mov ecx, 0x4d6760
mov edx, 9
nop word [eax + eax]
cmp si, dx
je 0x43e163
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x43e130
movzx eax, word [ebx + 2]
add ebx, 2
mov esi, eax
test ax, ax
jne 0x43e120
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x64
lea eax, [ebx + 2]
push eax
push 0x4e3c90
call fcn.004aa2f4
add esp, 0xc
xor eax, eax
xor edx, edx
mov word [0x4e3d58], ax
mov ecx, 0x4e3c90
call fcn.00483a90
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 7
push 0x4d6768
push edi
call fcn.0049ee82
add esp, 0xc
test eax, eax
jne 0x43e1c7
mov byte [0x4e38b9], al
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4e7e7a
push 0x4e7da0
push 0x4e7da1
push 0x4e7da2
push 0x4e38ba
push 0x4e7da5
push 0x4e7da3
push 0x4e38bb
push 0x4e38bc
push 0x4e7da4
push 0x4e3d5c
push 0x4e7da8
mov edx, 0x4e7dac
mov ecx, edi
call fcn.004167f0
add esp, 0x30
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6778
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e287
test edi, edi
je 0x43dd6a
mov ecx, edi
call fcn.00481e30
cmp eax, 0xff
jle 0x43e268
mov eax, 0xff
mov byte [0x4e38bd], al
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov ecx, 1
cmp eax, ecx
cmovl eax, ecx
mov byte [0x4e38bd], al
lea eax, [ecx + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d67a4
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e31e
test edi, edi
je 0x43e305
cmp word [edi], ax
je 0x43e305
push 0x4d68d8
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e305
cmp word [edi], 0x31
jne 0x43e2c5
cmp word [edi + 2], 0
je 0x43e305
push 0x4d68e4
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e2ec
cmp word [edi], 0x30
jne 0x43e4dc
cmp word [edi + 2], 0
jne 0x43e4dc
mov byte [0x4e7e7c], 0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov byte [0x4e7e7c], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d67c8
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e381
test edi, edi
je 0x43dd6a
mov ecx, edi
call fcn.00481e30
cmp eax, 0xff
jle 0x43e362
mov eax, 0xff
mov dword [0x4e37f4], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov ecx, 1
cmp eax, ecx
cmovl eax, ecx
mov dword [0x4e37f4], eax
lea eax, [ecx + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d67e0
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e418
test edi, edi
je 0x43e3ff
cmp word [edi], ax
je 0x43e3ff
push 0x4d68d8
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e3ff
cmp word [edi], 0x31
jne 0x43e3bf
cmp word [edi + 2], 0
je 0x43e3ff
push 0x4d68e4
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e3e6
cmp word [edi], 0x30
jne 0x43e51c
cmp word [edi + 2], 0
jne 0x43e51c
mov byte [0x4e7e7b], 0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov byte [0x4e7e7b], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6800
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e450
test edi, edi
je 0x43dd6a
mov ecx, edi
call fcn.00481e30
mov dword [0x4e3808], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6824
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e47b
mov byte [0x4e7eee], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6848
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e4f6
test edi, edi
je 0x43e4bd
movzx eax, word [edi]
cmp eax, 0x22
je 0x43e49e
cmp eax, 0x27
jne 0x43e4bd
lea esi, [edi + 2]
push 0
push esi
call fcn.0049c891
add esp, 8
mov cx, word [eax - 2]
cmp cx, word [edi]
jne 0x43e4bd
xor ecx, ecx
mov edi, esi
mov word [eax - 2], cx
mov ecx, edi
call fcn.0040c160
cmp eax, 0xffffffff
mov dword [ebp + 0x6d8], eax
setne cl
mov byte [ebp + 0x6d7], cl
jne 0x43dd6a
push edi
push 0x4d3adc
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d6864
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e54f
test edi, edi
je 0x43e536
mov ecx, edi
call fcn.00481e30
test eax, eax
js 0x43e51c
cmp eax, 0x64
jle 0x43e538
push ebx
push 0x4d3adc
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
xor eax, eax
mov byte [0x4e7e79], al
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d687c
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43e6a9
test edi, edi
mov eax, 0x4cdea8
push 0x2c
cmovne eax, edi
mov edi, eax
mov dword [esp + 0x18], eax
push edi
call fcn.0049c891
mov ecx, eax
add esp, 8
mov ebx, 0x4cdea8
test ecx, ecx
je 0x43e5ca
lea ebx, [ecx + 2]
nop
movzx eax, word [ebx]
cmp eax, 0x20
je 0x43e59d
cmp eax, 9
jne 0x43e5a2
add ebx, 2
jmp 0x43e590
lea eax, [ecx - 2]
cmp eax, edi
jbe 0x43e5c4
nop dword [eax]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x43e5bd
cmp ecx, 9
jne 0x43e5c4
sub eax, 2
cmp eax, edi
ja 0x43e5b0
xor ecx, ecx
mov word [eax + 2], cx
cmp word [edi], 0
mov esi, 3
je 0x43e61a
xor esi, esi
nop word [eax + eax]
push dword [esi*4 + 0x4d84bc]
push edi
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e61a
inc esi
cmp esi, 4
jne 0x43e5e0
push dword [esp + 0x4ac]
mov ecx, ebp
push 0x4d3adc
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
cmp word [ebx], 0
mov edi, 2
je 0x43e664
xor edi, edi
nop word [eax + eax]
push dword [edi*4 + 0x4d84ac]
push ebx
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e664
inc edi
cmp edi, 4
jne 0x43e630
push ebx
push 0x4d6888
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
test esi, esi
je 0x43e66d
cmp esi, 3
jne 0x43e673
mov dword [0x4e7ce8], edi
cmp esi, 1
je 0x43e67d
cmp esi, 3
jne 0x43e683
mov dword [0x4e3d6c], edi
cmp esi, 2
je 0x43e691
cmp esi, 3
jne 0x43dd6a
mov dword [0x4e380c], edi
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d68b4
push esi
call fcn.0049ed01
add esp, 8
test eax, eax
jne 0x43db6a
test edi, edi
jne 0x43e6e1
push 0x4cdea8
push 0x4d6640
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0xa
push 0x4ce024
push edi
call fcn.0049ee82
add esp, 0xc
test eax, eax
jne 0x43e7b8
movzx eax, word [edi + 0x14]
test ax, ax
je 0x43dd6a
cmp eax, 0x20
je 0x43e714
cmp eax, 9
jne 0x43e7b8
lea ebx, [edi + 0x16]
mov ecx, ebx
nop dword [eax]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x43e72d
cmp eax, 9
jne 0x43e732
add ecx, 2
jmp 0x43e720
test ax, ax
je 0x43dd6a
mov ebx, ecx
mov edx, eax
nop
cmp dx, 0x20
je 0x43e75a
cmp dx, 9
je 0x43e75a
movzx eax, word [ebx + 2]
add ebx, 2
mov edx, eax
test ax, ax
jne 0x43e740
mov esi, ebx
mov eax, 0x20
sub esi, ecx
sar esi, 1
inc esi
cmp esi, 0x20
cmova esi, eax
lea eax, [esp + 0x28]
dec esi
push esi
push ecx
push eax
call fcn.004aa2f4
add esp, 0xc
xor eax, eax
mov word [esp + esi*2 + 0x28], ax
lea eax, [esp + 0x28]
push 0x4d68c8
push eax
call fcn.0049ed01
add esp, 8
test eax, eax
je 0x43e717
push 0
lea edx, [esp + 0x2c]
mov ecx, 0x4bd514
call fcn.00484100
add esp, 4
test eax, eax
jne 0x43e717
push dword [ebp + 0x6c4]
lea eax, [esp + 0xac]
push 0x4d68c8
push 0x4bd514
push 0x4ce024
push edi
push 0x4d68f0
push 0x200
push eax
call fcn.004816a0
add esp, 0x20
lea eax, [esp + 0xa8]
mov ecx, ebp
push 0x4cdea8
push eax
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
test edi, edi
jne 0x43e827
push ebx
push 0x4d6640
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
movzx eax, word [edi]
mov ecx, eax
cmp eax, 0x22
je 0x43e838
mov edx, ecx
cmp eax, 0x27
jne 0x43e85c
lea esi, [edi + 2]
push 0
push esi
call fcn.0049c891
movzx ecx, word [edi]
add esp, 8
mov edx, ecx
cmp word [eax - 2], cx
jne 0x43e85c
xor ecx, ecx
mov edi, esi
mov word [eax - 2], cx
movzx edx, word [esi]
movzx eax, dx
mov dword [esp + 0x10], eax
test ax, ax
jne 0x43e886
push 0x4cdea8
push 0x4d3adc
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
cmp eax, 0x2a
jne 0x43e8cd
movzx eax, word [edi + 2]
mov edx, eax
mov esi, eax
and eax, 0xffdf
add edx, 0xffffff9f
movzx ecx, ax
cmp dx, 0x19
mov eax, esi
cmova ecx, eax
cmp cx, 0x49
jne 0x43e8c9
movzx eax, word [edi + 4]
cmp eax, 0x20
je 0x43e8bb
cmp eax, 9
jne 0x43e8c9
movzx eax, word [edi + 6]
add edi, 6
mov byte [esp + 0x10], 1
jmp 0x43e8d5
mov eax, dword [esp + 0x10]
mov byte [esp + 0x10], 0
movzx eax, ax
cmp ax, 0x3c
jne 0x43e983
push 0x3e
push edi
call fcn.0049c891
mov esi, eax
add esp, 8
test esi, esi
je 0x43e983
cmp word [esi + 2], 0
jne 0x43e983
xor eax, eax
add edi, 2
mov word [esi], ax
call fcn.004502a0
mov dword [esp + 0x14], eax
mov ecx, esi
lea eax, [esp + 0x1b]
sub ecx, edi
push eax
lea eax, [esp + 0x1e]
sar ecx, 1
push eax
push ecx
push edi
mov ecx, ebp
call fcn.00443460
mov edi, dword [esp + 0x14]
test edi, edi
je 0x43e941
push edi
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryW]
push edi
call fcn.0049ee02
add esp, 4
mov al, byte [esp + 0x1a]
test al, al
jne 0x43e95d
cmp byte [esp + 0x1b], al
jne 0x43dd6a
cmp byte [esp + 0x10], al
jne 0x43dd6a
mov ecx, 0x3e
mov word [esi], cx
test al, al
jne 0x43e994
push ebx
push 0x4d666c
mov ecx, ebp
call fcn.0040d630
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push edi
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.0044c220
test eax, eax
jne 0x43e9a3
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov esi, dword [esp + 0x24]
push esi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x43e9db
test al, 0x10
je 0x43e9db
push esi
call fcn.004501f0
add esp, 4
push esi
call fcn.0049ee02
mov eax, 3
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
call fcn.004502a0
push dword [esp + 0x10]
mov ecx, ebp
mov ebx, eax
push dword [esp + 0x18]
push esi
call fcn.0043b060
neg eax
sbb edi, edi
and edi, 3
test ebx, ebx
je 0x43ea0d
push ebx
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryW]
push ebx
call fcn.0049ee02
add esp, 4
push esi
call fcn.0049ee02
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
call fcn.0040dba0
int3