Function at 0x4219e0
Capabilities:
Get file attributes
Hide graphical window
Read file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push esi
mov eax, dword [ebp + 0xc]
mov dword [0x4538c4], eax
mov dword [0x4538c8], 0
mov dword [0x4538cc], 0
push 0x60000
push 0x40
call fcn.00401030
mov dword [ebp - 8], eax
push dword [ebp - 8]
call sub.kernel32.dll_GlobalLock
push dword [ebp - 8]
push 4
push dword [ebp + 0xc]
call sub.user32.dll_SetWindowLongA
cmp dword [ebp + 8], 1
jne 0x421a32
jmp 0x421bbe
cmp dword [ebp + 8], 2
jne 0x421a72
mov dword [ebp - 0x10], 0x45cf22
push pe_nt_image_headers32
push 0x12c
push dword [0x450156]
push dword [0x450152]
push 0
push dword [ebp + 0xc]
call fcn.0041f2fd
mov dword [ebp - 4], eax
mov dword [0x4538cc], eax
inc dword [0x44f339]
jmp 0x421bbe
mov dword [ebp - 0x10], 0x45cf22
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x45cf22
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
je 0x421abd
mov dword [ebp - 0xc], eax
push 0
lea eax, [ebp - 0x14]
push eax
push 0x5fffc
push dword [ebp - 8]
push dword [ebp - 0xc]
call sub.kernel32.dll_ReadFile
push dword [ebp - 0xc]
call sub.kernel32.dll_CloseHandle
jmp 0x421af1
push dword [ebp + 0xc]
push 0
call fcn.0041bdc7
push 0
push 0
push 0x10
push dword [ebp + 0xc]
call sub.user32.dll_SendMessageA
push 0x10
push 0x44f25f
push 0x44ecd3
push dword [0x4538b0]
call sub.user32.dll_MessageBoxA
pop esi
leave
ret 8
mov esi, dword [ebp - 8]
mov eax, dword [esi]
cmp eax, 0x66
jae 0x421b18
push dword [ebp - 8]
push eax
call fcn.0042176b
mov dword [ebp - 8], eax
mov esi, eax
push dword [ebp - 8]
push 4
push dword [ebp + 0xc]
call sub.user32.dll_SetWindowLongA
jmp 0x421b51
cmp eax, 0x66
jbe 0x421b51
push dword [ebp + 0xc]
push 0
call fcn.0041bdc7
push 0
push 0
push 0x10
push dword [ebp + 0xc]
call sub.user32.dll_SendMessageA
push 0x10
push 0x44f25f
push 0x44ecd3
push dword [0x4538b0]
call sub.user32.dll_MessageBoxA
pop esi
leave
ret 8
xor eax, eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], eax
mov dword [esi + 0x80], eax
mov dword [esi + 0x88], eax
add esi, 0x90
push dword [ebp + 0xc]
pop dword [esi + 0xc]
mov dword [esi + 4], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x151], eax
push esi
call fcn.0041e37f
mov dword [ebp - 4], eax
mov dword [0x4538cc], eax
add esi, 0x175
jmp 0x421bb9
xor eax, eax
push dword [ebp - 4]
pop dword [esi + 0xc]
mov dword [esi + 4], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x151], eax
push esi
call fcn.00421958
push esi
call fcn.0041e37f
add esi, 0x175
cmp dword [esi], 0
jne 0x421b93
push 0xffde
push 0xfffffffffffffff4
push dword [ebp - 4]
call sub.user32.dll_SetWindowLongA
push dword [ebp - 4]
push 0xffffffffffffffeb
push dword [ebp + 0xc]
call sub.user32.dll_SetWindowLongA
push dword [ebp - 0x10]
push dword [ebp + 0xc]
call sub.user32.dll_SetWindowTextA
push dword [ebp - 0x10]
push dword [ebp + 0xc]
call fcn.004367ec
cmp dword [ebp + 8], 2
jne 0x421c1a
push 0x800
push 0x45cf22
push dword [ebp - 4]
push 0x46c
push dword [ebp + 0xc]
call fcn.00408423
push 0
push dword [ebp + 0xc]
call fcn.00421733
push 2
push 0
push dword [ebp - 8]
push 0x482
push dword [ebp + 0xc]
call fcn.00408423
push 0x45cf22
call sub.kernel32.dll_GetFileAttributesA
and eax, 1
push eax
push 8
push dword [ebp + 0xc]
call sub.user32.dll_SetWindowLongA
push dword [ebp + 0xc]
push 0
call fcn.0041bdc7
push 0
push 1
push 0x86
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
call fcn.0044130e
push 0
push dword [ebp - 4]
call fcn.0041c8a0
cmp dword [0x453990], 0
je 0x421c86
push 0
push dword [0x453990]
call sub.user32.dll_ShowWindow
pop esi
leave
ret 8