Function at 0x42d5b0
Capabilities:
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x378
push ebx
push ebp
push esi
mov esi, dword [esp + 0x390]
xor ebx, ebx
push edi
mov edi, dword [esp + 0x38c]
mov dword [esi + 0xb10], ebx
mov dword [esi + 0x1c6], ebx
mov dword [esi + 0x1ca], ebx
mov dword [esi + 0x1ce], ebx
mov dword [esi + 0x1d2], ebx
mov dword [esi + 0x1c2], ebx
mov ecx, dword [edi + 0x46]
lea eax, [esi + 0x3c22]
push ecx
push eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], 0xfffffffd
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0x1aa]
lea ebp, [esi + 0x3e36]
cmp eax, ebx
je 0x42d634
push ebx
push 0x18b
call fcn.00433fe0
jmp 0x42d650
mov edx, dword [esi + 0xdec]
mov eax, dword [esi + 0xb30]
push edx
push eax
push ebx
push 0x187
call fcn.00433fe0
add esp, 8
push eax
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [esi + 0xb30]
mov edx, dword [esi + 0xdec]
add esp, 0x10
lea ecx, [eax + 1]
push eax
push edx
push ebp
mov dword [esi + 0xb30], ecx
call fcn.0042bfb0
add esp, 0xc
test eax, eax
je 0x42d68f
pop edi
pop esi
pop ebp
mov eax, 9
pop ebx
add esp, 0x378
ret
mov eax, dword [edi + 0x46]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [edi + 0x46]
mov dword [edi + 0x18], eax
xor edx, edx
push esi
cmp byte [eax + ecx - 1], 0x2f
mov word [edi + 0x2a], 0xffff
mov eax, dword [esi + 0x1aa]
sete dl
cmp eax, ebx
mov dword [esp + 0x20], edx
je 0x42d6de
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
push ecx
push ebx
call fcn.00434dd0
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov dword [edi + 8], eax
mov dword [esp + 0x1c], ebx
jmp 0x42d726
mov ecx, dword [edi + 0x36]
lea edx, [esp + 0x18]
lea eax, [esp + 0x1c]
push edx
push eax
push ecx
call fcn.00434dd0
mov ecx, dword [esp + 0x24]
add esp, 0x10
cmp eax, ebx
je 0x42d796
cmp ecx, 0xfffffffe
jl 0x42d796
mov dword [edi + 8], eax
cmp dword [esi + 0x1e6], ebx
je 0x42d726
cmp dword [esi + 0x1ea], ebx
je 0x42d726
mov eax, dword [esp + 0x18]
and al, 0xdf
mov dword [esp + 0x18], eax
mov ax, word [esi + 0xdf0]
test ah, 0x80
je 0x42d75a
test ah, 0x10
je 0x42d75a
cmp dword [esi + 0x1fa], ebx
je 0x42d75a
cmp dword [esi + 0xe90], ebx
je 0x42d75a
mov edx, dword [esi + 0xe94]
mov dword [edi + 8], edx
mov eax, dword [esi + 0xe98]
mov dword [esp + 0x18], eax
cmp ecx, 0xfffffffe
jne 0x42d76b
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 0xda4]
mov dword [esi + 0x2e], 0xffffffff
cmp eax, ebx
mov dword [esi + 0x56], ebx
je 0x42d7af
mov ecx, dword [edi + 0x36]
push eax
push ecx
call fcn.0042d4d0
add esp, 8
test eax, eax
je 0x42d7af
mov dword [esp + 0x10], ebx
jmp 0x42d7b9
cmp ecx, 0xfffffffd
je 0x42d70c
pop edi
pop esi
pop ebp
mov eax, 0x12
pop ebx
add esp, 0x378
ret
mov edx, dword [esi + 0xd7c]
mov dword [esp + 0x10], edx
push edi
call fcn.00435000
mov eax, dword [esp + 0x20]
add esp, 4
cmp eax, ebx
je 0x42d7df
xor ebp, ebp
xor ecx, ecx
mov dword [esi + 0x2a], 0xffffffff
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
jmp 0x42d7f6
cmp dword [esi + 0x1aa], ebx
je 0x42d80d
mov dword [esi + 0x2a], 0xffffffff
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
cmp dword [esi + 0x1aa], ebx
je 0x42d850
mov eax, dword [esi + 0x1ae]
cdq
mov dword [esi + 0x36], eax
mov dword [esi + 0x3a], edx
jmp 0x42d86a
mov eax, dword [edi + 0x36]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.0042e9f0
add esp, 4
push ebx
push 0x8000080
push 3
push ebx
push 3
push Ordinal_4
push ebp
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esi + 0x2a], eax
jne 0x42d7ee
pop edi
pop esi
pop ebp
mov eax, 0x12
pop ebx
add esp, 0x378
ret
mov ecx, dword [esi + 0x2a]
push ecx
call fcn.00435550
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov dword [esi + 0x36], eax
add esp, 4
mov dword [esi + 0x3a], edx
cmp ecx, ebx
jne 0x42d872
xor ebp, ebp
jmp 0x42d87c
cmp ebp, 0xffffffff
jne 0x42d880
mov ebp, 8
mov dword [esp + 0x10], ebp
mov edx, dword [esi + 0xd80]
mov eax, ebp
neg edx
sbb edx, edx
mov word [edi + 4], 8
and edx, 0xfffff500
add edx, 0xb14
neg eax
sbb eax, eax
mov word [edi], dx
mov edx, dword [esp + 0x1c]
and eax, 0xa
add eax, 0xa
cmp edx, ebx
mov word [edi + 2], ax
je 0x42d8bc
mov dword [edi + 0xc], ebx
jmp 0x42d8c5
mov eax, dword [edi + 8]
shl eax, 0x10
mov dword [edi + 0xc], eax
cmp dword [esi + 0xda8], ebx
mov eax, 9
je 0x42d924
mov word [edi + 4], ax
test byte [esi + 0xdf1], 0x80
jne 0x42d90f
cmp dword [esi + 0x1a6], ebx
jne 0x42d90f
cmp edx, ebx
jne 0x42d907
mov ecx, dword [esi + 0x2a]
push esi
push ecx
call fcn.0042e7d0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
add esp, 8
mov dword [edi + 0xc], eax
and word [edi + 4], 0xfff7
jmp 0x42d924
cmp edx, ebx
jne 0x42d920
mov edx, dword [edi + 8]
shl edx, 0x10
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x1c]
mov word [edi + 4], ax
mov ax, word [edi + 4]
cmp ebp, ebx
mov word [edi + 0x2c], ax
mov word [edi + 6], bp
jne 0x42d93c
cmp ecx, ebx
jl 0x42d93c
mov eax, ecx
jmp 0x42d93e
xor eax, eax
mov dword [edi + 0x10], eax
xor eax, eax
cmp ecx, ebx
mov word [edi + 0x28], bx
setl al
dec eax
and eax, ecx
cmp word [edi + 0x2a], 0xffff
mov dword [edi + 0x14], eax
jne 0x42d966
mov word [edi + 0x2a], bx
mov dword [esp + 0x28], 1
mov eax, dword [esi + 0xd80]
cmp eax, ebx
mov eax, dword [esp + 0x18]
je 0x42d979
and eax, 0xff
mov dword [edi + 0x2e], eax
mov ecx, dword [esi + 0xdd0]
mov dword [edi + 0x32], ecx
mov dword [esi + 0x3d26], ebx
test byte [esi + 0xdf1], 0x80
mov dword [esi + 0x32], ebx
je 0x42d9c4
mov ax, word [esi + 0xdf2]
mov word [edi + 0x28], ax
mov eax, dword [esi + 0xda8]
cmp eax, ebx
jne 0x42d9c4
cmp edx, ebx
jne 0x42d9c4
cmp ebp, ebx
jne 0x42d9c4
mov ecx, dword [esi + 0x2a]
push esi
push ecx
call fcn.0042e7d0
add esp, 8
mov dword [edi + 0xc], eax
cmp dword [esi + 0x1fa], ebx
je 0x42dacf
test byte [esi + 0xdf1], 0x10
jne 0x42dacf
mov edx, dword [edi + 0x46]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [esp + 0x174]
push edx
push eax
call ebx
mov ecx, dword [edi + 0x36]
lea edx, [esp + 0x284]
push ecx
push edx
call ebx
mov eax, dword [edi + 8]
mov edx, dword [esi + 0x1fe]
mov ebp, dword [edi + 0x2e]
xor ecx, ecx
mov cx, word [edi + 8]
push edx
shr eax, 0x10
mov dword [esp + 0x27c], eax
lea eax, [esp + 0x178]
push eax
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], ebp
call dword [esi + 0x1fa]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x174]
push ecx
call ebx
mov edx, eax
mov eax, dword [edi + 0x46]
push eax
mov dword [esp + 0x28], edx
call ebx
mov ecx, dword [esp + 0x24]
cmp ecx, eax
jle 0x42da81
mov edx, dword [edi + 0x46]
push edx
call fcn.00448616
add esp, 4
lea eax, [esp + 0x174]
push eax
call ebx
add eax, 2
push eax
call fcn.00448866
add esp, 4
mov dword [edi + 0x46], eax
mov edx, dword [edi + 0x46]
lea ecx, [esp + 0x174]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [edi + 0x46]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, dword [esp + 0x280]
mov ecx, dword [esp + 0x27c]
mov edx, dword [esp + 0x278]
mov dword [edi + 0x18], eax
mov eax, ebp
and ecx, 0xffff
xor eax, ebx
shl edx, 0x10
and eax, 0x27
add ecx, edx
xor eax, ebp
mov dword [edi + 8], ecx
mov dword [edi + 0x2e], eax
mov ebx, dword [esp + 0x390]
push esi
push ebx
push edi
call fcn.00436f30
add esp, 0xc
test eax, eax
jne 0x42dfa6
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x18]
lea eax, [ecx + edx + 0x1e]
mov edx, dword [esi + 0xdd0]
add edx, eax
mov eax, dword [esi + 0xda8]
test eax, eax
mov dword [esi + 0xdd0], edx
je 0x42db6c
mov ecx, dword [edi + 0xc]
push esi
push ebx
push ecx
push eax
call fcn.00437c70
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x42db51
push esi
push 0
push 0x188
call fcn.00433fe0
add esp, 8
push eax
push ebp
call fcn.0042f690
mov edx, dword [esi + 0x2a]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret
mov edx, dword [edi + 0x10]
mov eax, 0xc
add edx, eax
mov dword [edi + 0x10], edx
mov ecx, dword [esi + 0xdd0]
add ecx, eax
mov dword [esi + 0xdd0], ecx
mov eax, dword [ebx]
xor ebp, ebp
push 1
push ebp
push ebp
push eax
call fcn.004354e0
push esi
push ebp
push ebp
mov dword [esi + 0x32], ebp
call fcn.0042e970
add esp, 0x1c
mov dword [esi + 0x3d2a], eax
test byte [esi + 0xdf1], 0x80
je 0x42db9d
mov dword [esi + 0xe04], ebp
cmp dword [esp + 0x10], 8
jne 0x42dc0a
mov ecx, dword [ebx]
push esi
push ecx
call fcn.00438260
add esp, 8
test eax, eax
jne 0x42dc1d
cmp dword [esp + 0x28], ebp
je 0x42dbc0
mov word [edi + 0x2a], 0xffff
lea edx, [esp + 0x10]
push esi
lea eax, [edi + 0x2a]
push edx
push eax
call fcn.00439020
mov eax, dword [esi + 0xd88]
lea ebp, [edi + 4]
push esi
push ebp
push eax
call fcn.00438740
mov cl, byte [edi + 0x2c]
mov al, byte [ebp]
xor cl, al
push esi
and ecx, 6
xor word [edi + 0x2c], cx
call fcn.00438da0
push esi
mov ebp, eax
call fcn.00438310
mov edx, dword [esi + 4]
add esp, 0x20
mov dword [ebx], edx
jmp 0x42dcd5
push 0x2000
call fcn.00448866
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x42dc2d
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
add esp, 0x378
ret
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x42dcc9
mov eax, dword [esi + 0x3a]
mov ecx, dword [esi + 0x36]
mov edx, dword [esp + 0x2c]
push 0
push 0
push eax
push ecx
push edx
call fcn.0042be30
mov eax, dword [esi + 0x8e]
add esp, 0x14
test eax, eax
jne 0x42dcc3
mov eax, dword [esi + 0x1aa]
push esi
test eax, eax
push 0x2000
push ebp
je 0x42dc7f
call fcn.0042e500
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x20], eax
cmp ecx, eax
jmp 0x42dc8f
call fcn.0042e3f0
xor edx, edx
add esp, 0xc
mov dword [esp + 0x20], eax
cmp edx, eax
sbb eax, eax
neg eax
test eax, eax
je 0x42dcb9
mov eax, dword [esp + 0x20]
push esi
push ebx
push eax
push ebp
call fcn.00437f00
mov ecx, dword [esp + 0x30]
add esp, 0x10
cmp eax, ecx
jne 0x42dcf1
mov eax, dword [esi + 0x8e]
test eax, eax
je 0x42dc5c
mov eax, dword [esi + 0x8e]
test eax, eax
je 0x42dcc9
mov dword [esi], 9
push ebp
call fcn.00448616
mov ebp, dword [esi + 0x32]
add esp, 4
cmp dword [esi], 0
je 0x42dd37
mov edx, dword [esi + 0x2a]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret
push ebp
call fcn.00448616
mov ecx, dword [esi + 0x2a]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test byte [esi + 0xdf1], 0x80
je 0x42dd27
mov eax, dword [esi + 0x8e]
pop edi
neg eax
sbb eax, eax
pop esi
and al, 0xfb
pop ebp
add eax, 0xe
pop ebx
add esp, 0x378
ret
pop edi
pop esi
pop ebp
mov eax, 0xa
pop ebx
add esp, 0x378
ret
mov eax, dword [esi + 0x2a]
cmp eax, 0xffffffff
je 0x42dd56
cmp dword [esp + 0x20], 0xffffffff
je 0x42de7f
cmp eax, 0xffffffff
je 0x42dd56
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8000
test word [esi + 0xdf0], ax
je 0x42dd7a
mov ecx, dword [esi + 0xe04]
mov edx, dword [esi + 0xdd0]
add edx, ecx
mov dword [esi + 0xdd0], edx
jmp 0x42dd80
add dword [esi + 0xdd0], ebp
mov ecx, dword [esi + 0x3d2a]
mov edx, dword [esi + 0xdd0]
mov dword [edi + 0xc], ecx
mov dword [edi + 0x10], ebp
mov ecx, dword [esi + 0xda8]
mov dword [esp + 0x24], edx
test ecx, ecx
je 0x42dda6
add ebp, 0xc
mov dword [edi + 0x10], ebp
mov ecx, dword [esi + 0x1a6]
test ecx, ecx
je 0x42ddc1
mov edx, dword [esi + 0x1c6]
and edx, 0x7fffffff
mov dword [edi + 0x14], edx
jmp 0x42ddc7
mov ecx, dword [esi + 0x32]
mov dword [edi + 0x14], ecx
test word [esi + 0xdf0], ax
jne 0x42dea7
mov edx, dword [edi + 0x32]
mov eax, dword [ebx]
push 0
push 0
push edx
push eax
call fcn.004354e0
and eax, edx
add esp, 0x10
cmp eax, 0xffffffff
je 0x42de64
mov eax, dword [esi + 0x1a6]
mov ebp, dword [edi + 0xc]
test eax, eax
jne 0x42de0a
mov eax, 0xfff7
and word [edi + 0x2c], ax
and word [edi + 4], ax
jmp 0x42de1d
mov eax, dword [esi + 0xda8]
test eax, eax
je 0x42de1d
mov ecx, dword [edi + 8]
shl ecx, 0x10
mov dword [edi + 0xc], ecx
mov eax, dword [esp + 0x10]
push esi
mov word [edi + 6], ax
push ebx
neg eax
sbb eax, eax
push edi
and eax, 0xa
add eax, 0xa
mov word [edi + 2], ax
call fcn.00436f30
add esp, 0xc
mov dword [edi + 0xc], ebp
test eax, eax
jne 0x42dfa6
mov edx, dword [esp + 0x24]
mov eax, dword [ebx]
push 0
push 0
push edx
push eax
call fcn.004354e0
and eax, edx
add esp, 0x10
cmp eax, 0xffffffff
jne 0x42de8f
push esi
push 0
push 0x189
call fcn.00433fe0
add esp, 8
push eax
push 0xb
call fcn.0042f690
add esp, 0xc
pop edi
pop esi
pop ebp
mov eax, 0xb
pop ebx
add esp, 0x378
ret
mov eax, 0x8000
test word [esi + 0xdf0], ax
jne 0x42dea7
mov eax, dword [esi + 0x1a6]
test eax, eax
je 0x42dece
cmp dword [esp + 0x10], 8
je 0x42deb4
test byte [edi + 4], 8
je 0x42dece
push esi
push ebx
push edi
call fcn.004371f0
add esp, 0xc
test eax, eax
jne 0x42dfa6
add dword [esi + 0xdd0], 0x10
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x42deef
mov eax, dword [edi + 0x3a]
mov ecx, dword [edi + 0x3e]
cmp eax, ecx
je 0x42dee8
push eax
call fcn.00448616
add esp, 4
mov dword [edi + 0x1c], 0
mov eax, dword [esi + 0x1aa]
test eax, eax
je 0x42df1e
mov ecx, dword [esp + 0x2c]
push ecx
push 2
push 0x2c1
call fcn.00433fe0
add esp, 8
lea edx, [esp + 0x34]
push eax
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x42df97
mov eax, dword [esi + 0x1e6]
test eax, eax
je 0x42df6b
mov eax, dword [esi + 0x1ea]
test eax, eax
je 0x42df6b
mov eax, dword [edi + 0x36]
lea ecx, [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x30]
push edx
call fcn.0042e9f0
add esp, 4
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
and al, 0xdf
lea ecx, [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edx, dword [edi + 0x36]
push edx
push 2
push 0x2bf
call fcn.00433fe0
add esp, 8
push eax
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x3c]
push ecx
call fcn.0042e9f0
add esp, 0x10
lea edx, [esp + 0x30]
push edx
call fcn.0042d040
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret