Function at 0x427f0d
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x74], ebx
call fcn.00426ae7
push ebx
lea edi, [esi + 0x10]
push 0x104
push edi
mov dword [ebp - 0x78], edi
call fcn.0040258e
mov dword [ebp - 0x50], eax
test eax, eax
jge 0x427f65
push ebx
push 0x428d50
push 0x428d14
push 1
call fcn.004173ad
jmp 0x4287f7
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x427fa7
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push eax
push edi
push 0x428cc0
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x14
call esi
test eax, eax
jle 0x427f9f
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x50], eax
jmp 0x4287fa
push edi
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov ebx, eax
test ebx, ebx
je 0x4287de
push 0x41b150
push ebx
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
je 0x427ffa
push 0x428cb0
push ebx
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
je 0x427ffa
push 0x428c58
push 0x428d14
push 1
call fcn.004173ad
add esp, 0xc
mov dword [ebp - 0x50], 0x80070057
jmp 0x4287fa
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea ebx, [esi + 0x234]
push ebx
push 0x409aa0
push 1
push 0
push 0x40d890
call edi
mov dword [ebp - 0x50], eax
test eax, eax
jge 0x428029
push eax
push 0x428bf0
jmp 0x427f54
mov ebx, dword [ebx]
test ebx, ebx
jne 0x428036
push 0x428bb8
jmp 0x427fdf
push ebx
lea ecx, [esi + 0x288]
call fcn.0040d826
lea ebx, [esi + 0x218]
push ebx
push 0x40d9fc
push 0x17
push 0
push 0x40d954
call edi
mov dword [ebp - 0x50], eax
test eax, eax
jl 0x4287fa
mov ecx, dword [esi + 0x234]
mov eax, dword [ebx]
mov edx, dword [eax]
push 0x428ba8
push ecx
push eax
call dword [edx + 0xc]
mov dword [ebp - 0x50], eax
test eax, eax
jge 0x42808a
push eax
push 0x428b60
jmp 0x427f54
lea edi, [esi + 0x22c]
push edi
push dword [ebp - 0x74]
mov ecx, esi
call fcn.004266e1
mov dword [ebp - 0x50], eax
test eax, eax
jge 0x4280bf
push eax
push dword [ebp - 0x74]
push 0x428af8
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x14
jmp 0x4287fa
push dword [ebp - 0x78]
mov ecx, dword [edi]
mov eax, dword [ebx]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
and dword [ebp - 0x74], 0
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, 0x80070057
je 0x4280f3
cmp eax, 0x8007000d
je 0x4280f3
cmp eax, 0x80070026
je 0x4280f3
cmp eax, 0x800710d2
jne 0x428136
push dword [ebp - 0x78]
push 0x41d378
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x78]
mov eax, dword [ebx]
push dword [edi]
mov ecx, dword [eax]
add dword [ebp - 0x74], 0x64
push eax
call dword [ecx + 0xc]
lea ecx, [esi + 0x23c]
mov dword [ebp - 0x50], eax
call fcn.00425d2f
cmp dword [ebp - 0x74], eax
jb 0x4280d4
cmp dword [ebp - 0x50], 0
jge 0x428149
push dword [ebp - 0x78]
push 0x41d328
jmp 0x427f54
add esi, 0x238
push esi
call fcn.0040c91d
mov dword [ebp - 0x50], eax
test eax, eax
jge 0x428167
push eax
push 0x41d2b8
jmp 0x427f54
mov esi, dword [esi]
mov eax, dword [ebx]
mov ecx, dword [eax]
push 0x40b1dc
push esi
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x50], eax
test eax, eax
jge 0x428189
push eax
push 0x41d248
jmp 0x427f54
sub esp, 0x10
mov eax, dword [ebp - 0x60]
mov edi, esp
mov esi, 0x40b0fc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
and dword [ebp - 0x58], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
mov esi, 0x40b10c
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x22c
mov eax, dword [eax]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0040c3fe
push eax
lea ecx, [ebp - 0x58]
call fcn.0040aca8
push dword [ebx]
mov ecx, dword [ebp - 0x60]
call fcn.00427d81
test eax, eax
jge 0x4281e5
push eax
push 0x41d1d0
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x10
push 0x40b198
mov esi, 0x428d14
push esi
push 4
call fcn.004173ad
add esp, 0xc
push dword [ebx]
lea ecx, [ebp - 0x64]
call fcn.00405889
lea ecx, [ebp - 0x88]
call fcn.004055a8
cmp dword [ebp - 0x80], 0xffffffff
jle 0x428222
push 0xffffffffffffffff
lea ecx, [ebp - 0x88]
call fcn.00402625
push 0x1000
push dword [0x43728c]
push 0x64
push dword [0x437288]
push dword [ebp - 0x64]
call fcn.0040cd8b
push dword [ebp - 0x84]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x50], eax
call fcn.00402625
xor edi, edi
cmp dword [ebp - 0x50], edi
jge 0x428291
push dword [ebp - 0x50]
push dword [ebp - 0x78]
push 0x41d158
push esi
push 1
call fcn.004173ad
add esp, 0x14
mov eax, dword [ebp - 0x64]
cmp eax, edi
je 0x42827b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
cmp eax, edi
je 0x4287fa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4287fa
lea eax, [ebp - 0x54]
push eax
push 0x409aa0
push 1
push edi
push 0x40b0ec
mov dword [ebp - 0x54], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x4282d4
push dword [ebp - 0x78]
push 0x428aa8
push esi
push 1
call fcn.004173ad
mov eax, dword [ebp - 0x54]
add esp, 0x10
cmp eax, edi
je 0x42826e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42826e
mov eax, dword [ebx]
mov ecx, dword [eax]
push 0x40b188
push dword [ebp - 0x54]
push eax
call dword [ecx + 0xc]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x4282f5
push dword [ebp - 0x78]
push 0x428a48
jmp 0x4282ba
push edi
push dword [ebp - 0x54]
mov dword [ebp - 0x5c], edi
call fcn.0040c3c9
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040aca8
mov esi, dword [ebp - 0x60]
mov eax, dword [esi + 0x238]
push edi
push eax
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
call fcn.0040c3c9
push eax
lea ecx, [ebp - 0x70]
call fcn.0040aca8
mov eax, dword [esi + 0x238]
push edi
push eax
call fcn.0040ad49
push eax
lea ecx, [ebp - 0x68]
call fcn.0040aca8
mov eax, dword [esi + 0x234]
push edi
push eax
call fcn.0040c3c9
push eax
lea ecx, [ebp - 0x6c]
call fcn.0040aca8
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x5c]
push dword [ebp - 0x58]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
jge 0x4283f8
mov eax, dword [ebx]
push dword [ebp - 0x54]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
cmp dword [ebp - 0x54], edi
je 0x428389
push edi
lea eax, [ebp - 0x54]
push eax
call fcn.0040c554
cmp dword [ebp - 0x5c], edi
je 0x428398
push edi
lea eax, [ebp - 0x5c]
push eax
call fcn.0040c554
lea eax, [ebp - 0x54]
push eax
push 0x40abfc
push 0x17
push edi
push 0x40b12c
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x4284c9
mov eax, dword [ebx]
mov ecx, dword [eax]
push 0x40b174
push dword [ebp - 0x54]
push eax
call dword [ecx + 0xc]
cmp eax, edi
jl 0x4284c9
push edi
push dword [ebp - 0x54]
call fcn.0040c3c9
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040aca8
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x5c]
push dword [ebp - 0x58]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
jl 0x4284c9
push edi
push dword [ebp - 0x54]
mov dword [ebp - 0x60], edi
call fcn.0040ad49
push eax
lea ecx, [ebp - 0x60]
call fcn.0040aca8
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x70]
push dword [ebp - 0x60]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x4284a7
push 0x41d0f8
push 0x428d14
push 1
call fcn.004173ad
mov eax, dword [ebp - 0x60]
add esp, 0xc
cmp eax, edi
je 0x428448
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x6c]
cmp eax, edi
je 0x428455
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, edi
je 0x428462
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x70]
cmp eax, edi
je 0x42846f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
cmp eax, edi
je 0x42847c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
cmp eax, edi
je 0x428489
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
cmp eax, edi
je 0x428496
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x58], edi
je 0x4287fa
mov eax, dword [ebp - 0x58]
jmp 0x428286
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x68]
push eax
call dword [ecx + 0x1c]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x60], edi
je 0x42850a
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42850a
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x70]
push dword [ebp - 0x58]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x4284f8
push 0x41d090
push 0x428d14
push 1
call fcn.004173ad
add esp, 0xc
jmp 0x428448
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x68]
push eax
call dword [ecx + 0x1c]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x42852b
push dword [ebp - 0x78]
push 0x4289d8
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x10
jmp 0x428448
mov eax, dword [ebx]
lea ecx, [esi + 0x298]
push ecx
push eax
call fcn.0040d041
test eax, eax
jge 0x428544
mov dword [esi + 0x298], edi
push 0x48
lea eax, [ebp - 0x4c]
push edi
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x4c]
push edx
push eax
call dword [ecx + 0x1c]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x4285de
lea eax, [ebp - 0x4c]
push eax
call fcn.00408c14
push dword [ebp - 0x50]
push 0x41d020
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x10
mov eax, dword [ebp - 0x6c]
cmp eax, edi
je 0x428594
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, edi
je 0x4285a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x70]
cmp eax, edi
je 0x4285ae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
cmp eax, edi
je 0x4285bb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
cmp eax, edi
je 0x4285c8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
cmp eax, edi
je 0x42849f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42849f
mov eax, dword [esi + 0x238]
push 0xfffffffffffffffe
push 1
push 0x20
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0040ad7e
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00408c14
cmp dword [ebp - 0x50], edi
jge 0x428612
push dword [ebp - 0x50]
push 0x41cfc0
jmp 0x428578
lea eax, [ebp - 0x7c]
push eax
push 0x409aa0
push 1
push edi
push 0x40b11c
mov dword [ebp - 0x7c], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x42865e
push eax
push 0x428980
push 0x428d14
push 1
call fcn.004173ad
add esp, 0x10
mov eax, dword [ebp - 0x7c]
cmp eax, edi
je 0x428587
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x428587
cmp dword [ebp - 0x7c], edi
je 0x428717
mov eax, dword [ebx]
mov ecx, dword [eax]
push 0x428958
push dword [ebp - 0x7c]
push eax
call dword [ecx + 0xc]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x428686
push eax
push 0x428908
jmp 0x428639
push edi
push dword [ebp - 0x7c]
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x74], edi
call fcn.0040c3c9
push eax
lea ecx, [ebp - 0x74]
call fcn.0040aca8
mov eax, dword [esi + 0x234]
push edi
push eax
call fcn.0040ad49
push eax
lea ecx, [ebp - 0x60]
call fcn.0040aca8
cmp dword [ebp - 0x74], edi
je 0x428709
cmp dword [ebp - 0x60], edi
je 0x428700
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push dword [ebp - 0x74]
push dword [ebp - 0x60]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
mov dword [ebp - 0x50], eax
jge 0x428700
push eax
push 0x428890
push 0x428d14
push 1
call fcn.004173ad
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
add esp, 0x10
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x428648
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x60], edi
je 0x428717
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebx]
lea ecx, [esi + 0x21c]
call fcn.0040aee1
push dword [ebx]
lea ecx, [esi + 0x220]
call fcn.0040af15
push dword [esi + 0x22c]
lea ecx, [esi + 0x224]
call fcn.0040af49
push dword [esi + 0x22c]
lea ecx, [esi + 0x230]
call fcn.0040af7d
push dword [ebx]
lea ecx, [esi + 0x228]
call fcn.0040afa0
push dword [ebp - 0x54]
lea ebx, [esi + 0x28c]
mov ecx, ebx
call fcn.0040afd5
push dword [ebp - 0x54]
lea ecx, [esi + 0x290]
call fcn.00425e74
cmp dword [esi + 0x21c], edi
je 0x4287be
cmp dword [esi + 0x220], edi
je 0x4287be
cmp dword [esi + 0x224], edi
je 0x4287be
cmp dword [esi + 0x230], edi
je 0x4287be
cmp dword [esi + 0x228], edi
je 0x4287be
cmp dword [ebx], edi
je 0x4287be
cmp dword [esi + 0x290], edi
je 0x4287be
mov ecx, esi
call fcn.004261bb
jmp 0x428648
push dword [ebp - 0x78]
push 0x428840
push 0x428d14
push 1
call fcn.004173ad
mov dword [ebp - 0x50], 0x80004002
jmp 0x428645
push edi
push 0x428810
push 0x428d14
push 1
call fcn.004173ad
mov dword [ebp - 0x50], 0x80070057
add esp, 0x10
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x50]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004013d7
leave
ret 4