Function at 0x43f8ad
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
mov edi, ecx
push 0
push 0xffffffffffffffff
lea eax, [edi + 0xb4]
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], edi
call fcn.004478d7
mov esi, dword [ebp + 8]
push edi
mov ecx, esi
call fcn.0043eb01
test eax, eax
jne 0x43f918
mov eax, dword [0x497644]
cmp eax, 0x497644
je 0x43f909
test byte [eax + 0x1c], 1
je 0x43f909
cmp byte [eax + 0x19], 2
jb 0x43f909
push 0x474c14
push 0xc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0040d1fe
add esp, 0x10
lea ecx, [ebp - 0x10]
call fcn.004478fe
xor eax, eax
jmp 0x43fb66
push ebx
xor ebx, ebx
inc ebx
cmp dword [esi + 0x54], ebx
je 0x43f95a
cmp dword [esi + 0x58], ebx
je 0x43f95a
cmp dword [esi + 0x60], ebx
je 0x43f95a
cmp dword [esi + 0x64], ebx
je 0x43f95a
cmp dword [esi + 0x68], ebx
je 0x43f95a
cmp dword [esi + 0x6c], ebx
je 0x43f95a
cmp dword [esi + 0x70], ebx
je 0x43f95a
cmp dword [esi + 0x74], ebx
je 0x43f95a
cmp dword [esi + 0x78], ebx
je 0x43f95a
cmp dword [esi + 0x7c], ebx
je 0x43f95a
cmp dword [esi + 0x90], ebx
jne 0x43fad0
mov ecx, edi
call fcn.0044a3d4
test eax, eax
jne 0x43f9a2
mov eax, dword [0x497644]
cmp eax, 0x497644
je 0x43fb5b
test byte [eax + 0x1c], bl
je 0x43fb5b
cmp byte [eax + 0x19], 2
jb 0x43fb5b
push 0x474c14
push 0xd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0040d1fe
add esp, 0x10
jmp 0x43fb5b
mov eax, dword [esi + 0x80]
cmp dword [eax - 0xc], 0
je 0x43fad0
push 0x497a28
lea ecx, [ebp + 8]
call fcn.004037fc
mov eax, dword [esi + 0x80]
lea ecx, [ebp + 8]
push ecx
push eax
call fcn.0042df63
pop ecx
pop ecx
test al, al
je 0x43fb24
lea eax, [ebp + 8]
push str.DbgHelp.dll
push eax
call fcn.0042e4ce
pop ecx
pop ecx
test al, al
je 0x43fb24
push dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
call edi
cmp eax, 0xffffffff
jne 0x43fa5a
mov esi, dword [esi + 0x80]
lea eax, [ebp + 8]
push eax
push esi
call fcn.0042df63
pop ecx
pop ecx
test al, al
je 0x43fa2b
lea eax, [ebp + 8]
push 0x474c30
push eax
call fcn.0042e4ce
pop ecx
pop ecx
test al, al
jne 0x43fa5a
mov eax, dword [0x497644]
cmp eax, 0x497644
je 0x43fb50
test byte [eax + 0x1c], bl
je 0x43fb50
cmp byte [eax + 0x19], 2
jb 0x43fb50
push 0x474c14
push 0xf
jmp 0x43fb42
push dword [ebp + 8]
call edi
cmp eax, 0xffffffff
je 0x43fadf
mov esi, dword [ebp - 4]
add esi, 0x78
mov ecx, esi
call fcn.0044c8b2
push 8
push dword [ebp + 8]
mov ecx, esi
call fcn.0044c7f2
test al, al
jne 0x43fb17
mov ecx, esi
call fcn.0043a10c
test al, al
jne 0x43fb17
mov eax, dword [0x497644]
cmp eax, 0x497644
je 0x43fac3
test byte [eax + 0x1c], bl
je 0x43fac3
cmp byte [eax + 0x19], 2
jb 0x43fac3
push dword [ebp + 8]
push 0x474c14
push 0x10
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.004347c2
add esp, 0x14
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00403af7
xor ebx, ebx
lea ecx, [ebp - 0x10]
call fcn.004478fe
mov eax, ebx
jmp 0x43fb65
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x497644]
cmp ecx, 0x497644
je 0x43fb17
test byte [ecx + 0x1c], bl
je 0x43fb17
cmp byte [ecx + 0x19], 2
jb 0x43fb17
push eax
push dword [ebp + 8]
push 0x474c14
push 0x11
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0042b189
add esp, 0x18
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00403af7
jmp 0x43fad0
mov eax, dword [0x497644]
cmp eax, 0x497644
je 0x43fb50
test byte [eax + 0x1c], bl
je 0x43fb50
cmp byte [eax + 0x19], 2
jb 0x43fb50
push 0x474c14
push 0xe
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0040d1fe
add esp, 0x10
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00403af7
lea ecx, [ebp - 0x10]
call fcn.004478fe
xor eax, eax
pop ebx
pop edi
pop esi
leave
ret 4