Function at 0x442a70
Capabilities:
Check if file exists
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5756b0
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x5bd250]
xor eax, esp
mov dword [esp + 0x68], eax
push ebx
push esi
push edi
mov eax, dword [0x5bd250]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov esi, ecx
push 0xffffffffffffffff
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [esi + 0x18], 0
je 0x442acd
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov al, 1
jmp 0x442d06
push 0xf
push str.countly.sqlite
lea ecx, [esp + 0x50]
mov dword [esp + 0x64], 0xf
mov dword [esp + 0x60], 0
mov byte [esp + 0x50], 0
call fcn.004072b0
lea eax, [esp + 0x48]
mov dword [esp + 0x88], 0
push eax
mov edx, esi
lea ecx, [esp + 0x64]
call fcn.00429530
add esp, 4
mov byte [esp + 0x88], 2
cmp dword [esp + 0x5c], 0x10
jb 0x442b2b
push dword [esp + 0x48]
call fcn.0053ce3a
add esp, 4
cmp dword [esp + 0x74], 0x10
lea ecx, [esp + 0x60]
push 0
cmovae ecx, dword [esp + 0x64]
lea edx, [esi + 0x18]
push 6
mov dword [esp + 0x64], 0xf
mov dword [esp + 0x60], 0
mov byte [esp + 0x50], 0
call fcn.004bc0b0
add esp, 8
test eax, eax
je 0x442b71
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor bl, bl
jmp 0x442cf1
cmp dword [esp + 0x74], 0x10
lea eax, [esp + 0x60]
cmovae eax, dword [esp + 0x60]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004146d0
add esp, 8
mov byte [esp + 0x88], 3
lea eax, [esp + 0x30]
cmp dword [esp + 0x44], 8
cmovae eax, dword [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, eax
cmp ecx, 0xffffffff
je 0x442bca
cmp dword [esp + 0x44], 8
lea eax, [esp + 0x30]
cmovae eax, dword [esp + 0x30]
or ecx, 2
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push str.CREATE_TABLE_IF_NOT_EXISTS_events__evtid_INTEGER_PRIMARY_KEY__event_TEXT_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], 0
call fcn.004065a0
mov byte [esp + 0x88], 4
lea ecx, [esp + 0x14]
cmp dword [esp + 0x2c], 0x10
lea eax, [esp + 0x18]
push ecx
cmovae eax, dword [esp + 0x1c]
push 0
push 0
push eax
push dword [esi + 0x18]
call fcn.00495d30
add esp, 0x14
test eax, eax
je 0x442c27
cmp eax, 0xb
je 0x442c76
cmp eax, 0x20a
je 0x442c76
cmp eax, 0x30a
je 0x442c76
cmp eax, 0xa
je 0x442c76
push 0x33
push str.CREATE_TABLE_IF_NOT_EXISTS_settings__deviceid_TEXT_
lea ecx, [esp + 0x20]
call fcn.004072b0
cmp dword [esp + 0x2c], 0x10
lea ecx, [esp + 0x14]
push ecx
push 0
lea eax, [esp + 0x20]
cmovae eax, dword [esp + 0x20]
push 0
push eax
push dword [esi + 0x18]
call fcn.00495d30
add esp, 0x14
test eax, eax
je 0x442c94
cmp eax, 0xb
je 0x442c76
cmp eax, 0x20a
je 0x442c76
cmp eax, 0x30a
je 0x442c76
cmp eax, 0xa
jne 0x442c94
mov ecx, dword [esi + 0x18]
xor edx, edx
call fcn.004ba220
push dword [esi + 0x1c]
mov dword [esi + 0x18], 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor bl, bl
jmp 0x442c9f
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov bl, 1
cmp dword [esp + 0x2c], 0x10
jb 0x442cb2
push dword [esp + 0x18]
call fcn.0053ce3a
add esp, 4
cmp dword [esp + 0x44], 8
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
jb 0x442cda
push dword [esp + 0x30]
call fcn.0053ce3a
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp dword [esp + 0x74], 0x10
jb 0x442d04
push dword [esp + 0x60]
call fcn.0053ce3a
add esp, 4
mov al, bl
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.0053f9bc
mov esp, ebp
pop ebp
ret