Function at 0x42a271
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
and dword [ebp - 4], 0
mov eax, 0x44b534
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 8], eax
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x42a294
mov eax, dword [ecx]
jmp 0x42a29d
mov edx, dword [esi + 8]
test edx, edx
je 0x42a29d
mov eax, dword [edx]
mov edx, dword [esi + 0xc]
mov dword [ebp + 8], eax
test edx, edx
je 0x42a2ac
mov eax, dword [edx]
mov dword [ebp - 8], eax
lea ebx, [ecx + 0x2c]
test ecx, ecx
jne 0x42a2ec
mov eax, dword [edx + 0x10]
lea ebx, [edx + 0x40]
mov dword [ebp - 0x10], eax
mov eax, dword [edx + 0x14]
and dword [ebp - 0x18], 0
lea edi, [ebp - 0x24]
and dword [ebp - 0x14], 0
mov dword [ebp - 0xc], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
test ecx, ecx
je 0x42a2f7
xor eax, eax
test edx, edx
setne al
add eax, 0x20000150
jmp 0x42a306
mov eax, dword [ecx + 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [ecx + 0x1c]
jmp 0x42a2bf
mov eax, dword [esi + 8]
neg eax
sbb eax, eax
and eax, 3
add eax, 0x2000014f
push dword [ebx]
push str.download
push dword [ebp - 8]
push dword [ebp + 8]
push eax
push 2
call fcn.00405602
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 4]
add esp, 0x18
push eax
push edi
call fcn.00444440
test eax, eax
je 0x42a38a
mov eax, dword [ebp - 4]
test al, 1
je 0x42a38a
and eax, 0xfffffffe
push eax
push edi
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x42a38a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x42a35f
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x42a366
mov esi, 0x80004005
push esi
push 0x568
push str.apply.cpp
call fcn.00403821
push edi
push str.Failed_to_clear_readonly_bit_on_payload_destination_path:__ls
push esi
call fcn.00440237
add esp, 0xc
jmp 0x42a433
and dword [ebp - 0x20], 0
mov dword [ebp - 0x24], fcn.00429b69
mov dword [ebp - 0x1c], esi
mov eax, dword [ebx]
push 0x62
pop ecx
cmp cx, word [eax]
jne 0x42a3e9
push 0x69
pop ecx
cmp cx, word [eax + 2]
jne 0x42a3e9
push 0x74
pop ecx
cmp cx, word [eax + 4]
jne 0x42a3e9
push 0x73
pop edx
cmp dx, word [eax + 6]
jne 0x42a3e9
movzx ecx, word [eax + 8]
mov dword [ebp + 0xc], 0x3a
cmp word [ebp + 0xc], cx
je 0x42a3dc
cmp dx, cx
jne 0x42a3e9
mov ecx, dword [ebp + 0xc]
cmp cx, word [eax + 0xa]
jne 0x42a3e9
push edi
push ebx
lea eax, [ebp - 0x24]
push eax
call fcn.0042de46
jmp 0x42a41c
mov eax, dword [esi]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x18], 0x429a82
push eax
push edi
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push ebx
call fcn.004464b7
mov esi, eax
test esi, esi
jns 0x42a433
push edi
push dword [ebx]
push str.Failed_attempt_to_download_URL:__ls_to:__ls
push esi
call fcn.00440237
add esp, 0x10
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8