Function at 0x417010
Capabilities:
Check if file exists
Get file attributes
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5c0280
push eax
mov dword fs:[0], esp
sub esp, 0x1b8
mov edx, dword [esp + 0x1c8]
lea eax, [esp + 0x68]
push ebx
push ebp
push esi
xor ebp, ebp
push edi
push ebp
push ebp
push ebp
push ebp
push 0x100
lea ecx, [esp + 0x18c]
push eax
push ecx
push edx
call fcn.0057f830
add esp, 0x20
cmp eax, ebp
jne 0x41789b
lea eax, [esp + 0x78]
push ebp
push eax
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x7c], ebp
mov word [esp + 0x78], bp
call fcn.00402800
xor esi, esi
mov dword [esp + 0x1d0], ebp
mov dword [esp + 0x20], esi
mov dword [esp + 0x28], ebp
mov word [esp + 0x24], bp
mov edi, dword [esp + 0x6c]
mov byte [esp + 0x1d0], 1
cmp edi, ebp
jne 0x4170a5
lea edi, [esp + 0x70]
mov eax, dword [0x691b58]
cmp eax, ebp
jne 0x4170b3
mov eax, 0x691b5c
mov ecx, 0x668280
test ecx, ecx
je 0x41722f
cmp eax, ebp
je 0x41722f
mov edx, str.idmmzcc5
test edx, edx
je 0x41722f
cmp edi, ebp
je 0x41722f
push eax
lea ecx, [esp + 0x60]
call fcn.00403af0
push str.idmmzcc5
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 2
call fcn.00403af0
push edi
lea ecx, [esp + 0x54]
mov byte [esp + 0x1d4], 3
call fcn.00403af0
mov bl, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], bl
call fcn.00401070
push 0x668280
lea ecx, [esp + 0x3c]
call fcn.00401e50
mov esi, dword [esp + 0x40]
lea ecx, [esp + 0x50]
mov byte [esp + 0x1d0], 5
call fcn.00401ed0
push eax
call fcn.00591712
add esp, 4
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00591712
mov ebp, eax
add esp, 4
lea ecx, [esp + 0x5c]
add ebp, esi
call fcn.00401ed0
push eax
call fcn.00591712
add ebp, edi
lea esi, [eax + ebp + 4]
lea ebp, [esi + esi]
push ebp
call fcn.005a9fe9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x20], edi
je 0x4171e6
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x50]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x18]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x64]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x44]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x30]
push esi
push eax
call fcn.005916a2
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00591712
add esp, 0x1c
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], bl
call fcn.00401070
lea ecx, [esp + 0x50]
mov byte [esp + 0x1d0], 3
call fcn.00401070
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 2
call fcn.00401070
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d0], 1
call fcn.00401070
mov esi, dword [esp + 0x20]
xor ebp, ebp
cmp esi, ebp
je 0x417259
push esi
call fcn.00591712
lea eax, [esi + eax*2]
add esp, 4
cmp esi, eax
jae 0x417255
cmp word [esi], 0x2f
jne 0x41724e
mov word [esi], 0x5c
add esi, 2
cmp esi, eax
jb 0x417243
mov esi, dword [esp + 0x20]
xor ecx, ecx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], ecx
mov word [esp + 0x30], bp
cmp esi, ebp
mov byte [esp + 0x1d0], 6
mov eax, esi
jne 0x41727a
lea eax, [esp + 0x24]
mov edx, 0x665f68
test edx, edx
je 0x417357
cmp eax, ebp
je 0x417357
push eax
lea ecx, [esp + 0x3c]
call fcn.00403af0
mov bl, 7
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d0], bl
call fcn.00401070
push 0x665f68
lea ecx, [esp + 0x60]
call fcn.00401e50
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 8
call fcn.00401ed0
push eax
call fcn.00591712
lea esi, [eax + esi + 2]
lea ebp, [esi + esi]
push ebp
call fcn.005a9fe9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x2c], edi
je 0x417330
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x60]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x34]
push esi
push eax
call fcn.005916a2
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00591712
add esp, 0x14
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d0], bl
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 6
call fcn.00401070
mov ecx, dword [esp + 0x2c]
xor ebp, ebp
cmp ecx, ebp
mov eax, ecx
jne 0x417361
lea eax, [esp + 0x30]
push 0x5c
push eax
call fcn.00591662
add esp, 8
cmp eax, ebp
je 0x41747a
add eax, 2
mov word [eax], bp
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x417386
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x41747a
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x4173a2
lea eax, [esp + 0x30]
add eax, 6
push 0x5c
push eax
call fcn.00591b7f
mov esi, eax
add esp, 8
cmp esi, ebp
je 0x41747a
mov bl, 9
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x4173c8
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x20], ebp
mov word [esp + 0x1c], bp
call fcn.00401ee0
mov eax, dword [esp + 0x14]
mov byte [esp + 0x1d0], bl
cmp eax, ebp
mov ecx, eax
jne 0x4173f4
lea ecx, [esp + 0x18]
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x417400
lea eax, [esp + 0x30]
mov edx, esi
sub edx, eax
sar edx, 1
mov word [ecx + edx*2], bp
mov eax, dword [esp + 0x14]
cmp eax, ebp
jne 0x417416
lea eax, [esp + 0x18]
push ebp
push eax
call fcn.00474270
add esp, 8
test eax, eax
jne 0x41743e
mov eax, dword [esp + 0x14]
cmp eax, ebp
jne 0x417430
lea eax, [esp + 0x18]
push ebp
push eax
call fcn.00474450
add esp, 8
test eax, eax
je 0x417469
add esi, 2
push 0x5c
push esi
call fcn.00591b7f
add esp, 8
lea ecx, [esp + 0x14]
mov esi, eax
mov byte [esp + 0x1d0], 6
call fcn.00401070
cmp esi, ebp
jne 0x4173bc
jmp 0x41747a
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 6
call fcn.00401070
push 0x2000
call fcn.00591fb0
add esp, 4
cmp eax, ebp
mov dword [esp + 0x68], eax
jne 0x4174cf
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d0], 1
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 0
call fcn.00401070
lea ecx, [esp + 0x6c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00401070
mov eax, 0xffffff98
jmp 0x41789b
xor ebp, ebp
mov byte [esp + 0x13], 0
mov dword [esp + 0x44], ebp
mov dword [esp + 0x4c], ebp
mov word [esp + 0x48], bp
mov eax, dword [esp + 0x1d8]
mov byte [esp + 0x1d0], 0xa
push eax
call fcn.0057fce0
mov ebx, eax
add esp, 4
cmp ebx, ebp
jne 0x417838
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x417511
lea eax, [esp + 0x24]
push 0x668278
push eax
call fcn.00592d6f
mov esi, eax
add esp, 8
cmp esi, ebp
jne 0x417637
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x417535
lea eax, [esp + 0x24]
mov ecx, str._s
test ecx, ecx
je 0x41760e
cmp eax, ebp
je 0x41760e
push eax
lea ecx, [esp + 0x3c]
call fcn.00403af0
lea ecx, [esp + 0x44]
mov byte [esp + 0x1d0], 0xb
call fcn.00401070
push str._s
lea ecx, [esp + 0x60]
call fcn.00401e50
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 0xc
call fcn.00401ed0
push eax
call fcn.00591712
lea esi, [eax + esi + 2]
lea ebp, [esi + esi]
push ebp
call fcn.005a9fe9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x44], edi
je 0x4175ea
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x60]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x4c]
push esi
push eax
call fcn.005916a2
mov ecx, dword [esp + 0x54]
push ecx
call fcn.00591712
add esp, 0x14
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d0], 0xb
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 0xa
call fcn.00401070
xor ebp, ebp
mov eax, dword [esp + 0x44]
cmp eax, ebp
jne 0x41761a
lea eax, [esp + 0x48]
push 0x668278
push eax
call fcn.00592d6f
mov esi, eax
add esp, 8
cmp esi, ebp
je 0x417838
mov byte [esp + 0x13], 1
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x1d8]
push 0x2000
push edi
push edx
call fcn.00580020
mov ebx, eax
add esp, 0xc
cmp ebx, ebp
jl 0x41768c
jle 0x41768c
push esi
push 1
push ebx
push edi
call fcn.00592c05
add esp, 0x10
cmp eax, 1
jne 0x417689
mov eax, dword [esp + 0x1d8]
push 0x2000
push edi
push eax
call fcn.00580020
mov ebx, eax
add esp, 0xc
cmp ebx, ebp
jge 0x417657
jmp 0x41768c
or ebx, 0xffffffff
push esi
call fcn.00592b88
lea ecx, [esp + 0x7c]
push str.idmcchandler2.dll
push ecx
call fcn.00591800
add esp, 0xc
test eax, eax
jne 0x4176c2
lea edx, [esp + 0x78]
push str.idmcchandler2_64.dll
push edx
call fcn.00591800
add esp, 8
test eax, eax
je 0x417812
mov al, byte [esp + 0x13]
test al, al
je 0x4176d8
mov eax, dword [esp + 0x44]
cmp eax, ebp
jne 0x4176e4
lea eax, [esp + 0x48]
jmp 0x4176e4
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x4176e4
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x5c], ebp
mov word [esp + 0x58], bp
call fcn.00401ee0
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], ebp
mov word [esp + 0x18], bp
lea eax, [esp + 0x78]
push str.idmcchandler2.dll
push eax
mov byte [esp + 0x1d8], 0xe
call fcn.00591800
add esp, 8
mov ecx, 0x668220
test eax, eax
jne 0x417730
mov ecx, 0x6681f4
mov eax, dword [0x691b38]
cmp eax, ebp
jne 0x41773e
mov eax, 0x691b3c
push ecx
push eax
push 0x665ff4
lea ecx, [esp + 0x20]
call fcn.0040cec0
mov eax, dword [esp + 0x14]
cmp eax, ebp
mov ecx, eax
jne 0x41775c
lea ecx, [esp + 0x18]
mov eax, dword [esp + 0x50]
cmp eax, ebp
jne 0x417768
lea eax, [esp + 0x54]
push ebp
push ebp
push ecx
push eax
call fcn.00473ed0
add esp, 0x10
test eax, eax
jne 0x4177f0
lea ecx, [esp + 0x38]
call fcn.004178c0
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 0xf
call fcn.00401ed0
push eax
push 0x6681f0
lea ecx, [esp + 0x40]
call fcn.00415cc0
push ebp
push ebp
lea ecx, [esp + 0x40]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x5c]
call fcn.00401ed0
push eax
call fcn.00473ed0
add esp, 0x10
test eax, eax
je 0x4177df
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x3c]
call fcn.00401ed0
push eax
call fcn.00416ff0
add esp, 8
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 0xe
call fcn.00401070
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 0xd
call fcn.00401070
lea ecx, [esp + 0x50]
mov byte [esp + 0x1d0], 0xa
call fcn.00401070
mov al, byte [esp + 0x13]
test al, al
je 0x41783c
lea ecx, [esp + 0x20]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x48]
call fcn.00401ed0
push eax
call fcn.00416ff0
add esp, 8
jmp 0x41783c
mov edi, dword [esp + 0x68]
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.00580210
push edi
call fcn.005918cf
add esp, 8
lea ecx, [esp + 0x44]
mov byte [esp + 0x1d0], 6
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d0], 1
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 0
call fcn.00401070
lea ecx, [esp + 0x6c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00401070
mov eax, ebx
mov ecx, dword [esp + 0x1c8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c4
ret