Function at 0x435860
Capabilities:
Check if file exists
Copy file
Delete file
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x463df6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x418
push esi
push edi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], 0
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push str.SafeboxKrnl.sys
stosw word es:[edi], ax
lea eax, [esp + 0x21c]
push 0x47a9a8
push eax
call esi
push str.SafeboxKrnl.sys
lea ecx, [esp + 0x14]
push 0x47b1c8
push ecx
call esi
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea edx, [esp + 0x10]
push edx
call esi
test eax, eax
je 0x435ac5
mov eax, dword [0x46f42c]
mov dword [esp + 8], eax
mov dword [esp + 0x428], 0
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
lea ecx, [esp + 0x10]
push eax
push ecx
mov byte [esp + 0x430], 1
call fcn.00402170
lea edx, [esp + 0x14]
lea eax, [esp + 0x220]
push edx
push eax
call fcn.00402170
add esp, 0x10
lea ecx, [esp + 0x218]
push ecx
call esi
test eax, eax
je 0x4359b2
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xc]
push edx
push eax
call fcn.004554ed
add esp, 8
test eax, eax
jle 0x4359b2
lea ecx, [esp + 0x10]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0x21c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov eax, dword [esp + 0xc]
mov ecx, dword [0x46f430]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x435a09
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x435a09
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
jmp 0x435a01
lea eax, [esp + 0x218]
push eax
call esi
test eax, eax
jne 0x435a50
lea ecx, [esp + 0x218]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov eax, dword [esp + 0xc]
mov edx, dword [0x46f430]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x435a09
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x435a09
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 8]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x435a34
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x435a34
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004535f0
add esp, 4
pop edi
mov eax, 1
pop esi
mov ecx, dword [esp + 0x418]
mov dword fs:[0], ecx
add esp, 0x424
ret
mov eax, dword [esp + 0xc]
mov edx, dword [0x46f430]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x435a81
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x435a81
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 8]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x435aac
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x435aac
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004535f0
add esp, 4
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x418]
mov dword fs:[0], ecx
add esp, 0x424
ret
lea eax, [esp + 0x218]
push eax
call esi
test eax, eax
je 0x435aac
lea ecx, [esp + 0x10]
push 0
lea edx, [esp + 0x21c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x420]
pop edi
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x424
ret