Function at 0x439bc0
Capabilities:
Get file attributes

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4a2d9b
push eax
mov dword fs:[0], esp
sub esp, 0x528
push esi
mov esi, ecx
mov eax, dword [esi + 0x90]
test eax, eax
je 0x439bef
xor eax, eax
jmp 0x439e1b
push ebx
push ebp
push edi
lea edi, [esi + 0x14]
push edi
call fcn.0047d99c
mov ebx, dword [esp + 0x548]
push ebx
lea ecx, [esp + 0x14]
call fcn.00402ca3
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 0xc]
or ebp, 0xffffffff
test eax, eax
mov dword [esp + 0x540], 0
jl 0x439c45
push 0x4a8bb0
push ecx
call fcn.00410474
mov ecx, dword [esp + 0x18]
add esp, 8
test eax, eax
je 0x439c45
sub eax, ecx
cmp eax, ebp
jne 0x439d1a
mov eax, dword [ecx - 0xc]
test eax, eax
jl 0x439c91
push 0x4adbe8
push ecx
call fcn.00410474
mov ecx, dword [esp + 0x18]
add esp, 8
test eax, eax
je 0x439c6c
sub eax, ecx
cmp eax, ebp
jne 0x439d1a
mov eax, dword [ecx - 0xc]
test eax, eax
jl 0x439c91
push 0x4b23d0
push ecx
call fcn.00410474
add esp, 8
test eax, eax
je 0x439c91
sub eax, dword [esp + 0x10]
cmp eax, ebp
jne 0x439d1a
push 0x104
lea eax, [esp + 0x234]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jbe 0x439d1a
push 0
push 0
lea ecx, [esp + 0x138]
push ecx
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x240]
push eax
call fcn.00411cd6
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x34c]
push edx
push 0
push 0
push ebx
call fcn.00411cd6
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x360]
push ecx
lea edx, [esp + 0x160]
push edx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x46c]
push ecx
call fcn.0046f150
add esp, 0x3c
lea edx, [esp + 0x434]
push edx
lea ecx, [esp + 0x14]
call fcn.00402c91
call fcn.0048f258
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 8]
push 0x3010
push 0
push 0
push 0
push ecx
push eax
call dword [sym.imp.USER32.dll_LoadImageA]
test eax, eax
mov dword [edi], eax
jne 0x439d68
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x540], ebp
lea edx, [eax + 0xc]
lock xadd dword [edx], ebp
dec ebp
test ebp, ebp
jg 0x439d61
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
jmp 0x439e18
lea ecx, [esp + 0x18]
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
jne 0x439da1
mov edx, dword [edi]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [edi], 0
mov dword [esp + 0x540], ebp
lea ecx, [eax + 0xc]
lock xadd dword [ecx], ebp
dec ebp
jmp 0x439d55
lea eax, [esp + 0x10]
mov ebx, 1
lea ecx, [esi + 0x24]
push eax
mov dword [esi + 0x20], ebx
call fcn.00406118
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test bl, al
je 0x439dcb
mov dword [esi + 0x8c], ebx
movzx eax, word [esp + 0x2a]
cmp eax, 8
mov dword [esi + 0x9c], eax
jle 0x439de6
push ebp
push ebp
push 0
mov ecx, esi
call fcn.00438a10
mov ecx, esi
call fcn.00438350
mov ecx, esi
call fcn.00438c70
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x540], ebp
lea edx, [eax + 0xc]
lock xadd dword [edx], ebp
dec ebp
test ebp, ebp
jg 0x439e16
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, ebx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x52c]
pop esi
mov dword fs:[0], ecx
add esp, 0x534
ret 4