Function at 0x43e139
Capabilities:
Get file attributes
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
push edi
mov eax, edx
mov edi, ecx
xor ecx, ecx
mov dword [ebp - 8], eax
mov dword [ebp - 4], edi
mov ebx, ecx
cmp eax, 0xffffffff
je 0x43e3c0
mov esi, dword [ebp + 8]
test esi, esi
je 0x43e3c0
mov edx, 0x407dac
mov ecx, esi
call fcn.00423e4b
test eax, eax
jne 0x43e2dc
mov edx, 0x407dd0
mov ecx, esi
call fcn.00423e4b
test eax, eax
jne 0x43e2dc
test edi, edi
je 0x43e1f3
mov edx, 0x40000000
mov ecx, edi
call fcn.0042f3ae
test eax, eax
jne 0x43e1f3
mov ecx, edi
call fcn.004302a1
test eax, eax
je 0x43e1b3
mov edx, dword [eax]
xor eax, eax
jmp 0x43e1b7
xor eax, eax
mov edx, eax
mov edi, dword [ebp + 0xc]
test edx, edx
je 0x43e1f6
test edi, edi
je 0x43e31b
cmp word [edi], ax
je 0x43e1f6
call fcn.0043df7a
test eax, eax
jns 0x43e1e4
push eax
push 0x267
mov ecx, 0x407e08
call fcn.0043f87d
mov ecx, dword [ebp - 4]
mov edx, 0x40000000
call fcn.00429b20
jmp 0x43e1f6
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x43e31b
xor ebx, ebx
lea eax, [ebp - 0x10]
push ebx
push ebx
push eax
push esi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
call dword [sym.imp.ntdll.dll_RtlDosPathNameToNtPathName_U]
test al, al
je 0x43e2ff
push ebx
push ebx
push 0x4020
push 1
push 7
push 0x80
lea eax, [ebp - 0x10]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x18]
push ebx
push eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x18], ebx
push eax
push 0x100080
lea eax, [ebp - 4]
mov dword [ebp - 0x14], ebx
push eax
mov dword [ebp - 0x30], 0x18
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0x40
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.ntdll.dll_NtCreateFile]
test eax, eax
js 0x43e2ff
push 0x28
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push 0x15
push 0x28
mov esi, eax
lea eax, [ebp - 0x18]
push esi
push eax
push dword [ebp - 4]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
test eax, eax
js 0x43e2e3
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x43e29e
sub ecx, edx
lea eax, [esi + 4]
sar ecx, 1
push ecx
push eax
push edi
call dword [sym.imp.msvcrt.dll_wcsncmp]
add esp, 0xc
test eax, eax
jne 0x43e2e3
test esi, esi
je 0x43e2d3
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 4]
call dword [sym.imp.ntdll.dll_NtClose]
xor eax, eax
jmp 0x43e3c5
test esi, esi
je 0x43e2f6
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 4]
call dword [sym.imp.ntdll.dll_NtClose]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x43e304
sub ecx, edx
sar ecx, 1
lea ebx, [ecx + ecx]
lea eax, [ebx + 0xa]
jmp 0x43e325
push 8
mov dword [ebp + 0xc], 0x4052b4
pop eax
push eax
push 8
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
xor esi, esi
test edi, edi
jne 0x43e369
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00411710
test eax, eax
jns 0x43e360
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00411710
mov esi, eax
jmp 0x43e365
mov esi, 0x80004005
test esi, esi
js 0x43e3bc
mov dword [edi], ebx
test ebx, ebx
je 0x43e381
push dword [ebp + 0xc]
shr ebx, 1
lea ecx, [edi + 4]
lea edx, [ebx + 1]
call fcn.00422ab9
mov esi, eax
test esi, esi
js 0x43e3ac
push 0x28
push dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push edi
push eax
push dword [ebp - 8]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
test eax, eax
jns 0x43e3ac
mov esi, eax
or esi, 0x10000000
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, esi
jmp 0x43e3c5
mov eax, 0x80070057
pop edi
pop esi
pop ebx
leave
ret 8