Function at 0x416ed0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45b06b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14c
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
push 1
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x34], esi
call fcn.00443c65
xor edi, edi
push 0x476a10
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.0044b1ad
mov eax, dword [esi + 0x1c]
mov ecx, dword [ebp - 0x14]
add eax, 8
push ecx
mov eax, dword [eax]
push eax
call fcn.00427aab
add esp, 8
lea ecx, [ebp - 0x14]
test eax, eax
sete bl
call fcn.0044b0ed
test bl, bl
je 0x416f4e
mov edx, dword [esi + 0x1c]
test byte [edx + 0x18], 4
jne 0x416f4e
mov ecx, esi
call fcn.00416d70
mov eax, dword [esi + 0x1c]
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.kernel32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x416f65
mov edi, 1
mov ecx, dword [esi + 0x1c]
mov edx, dword [0x464270]
push edx
push 8
mov eax, dword [ecx + 8]
lea ecx, [ebp - 0xc4]
push eax
call fcn.00443d67
mov eax, dword [ebp - 0xc4]
xor ebx, ebx
mov ecx, dword [eax + 4]
cmp dword [ebp + ecx - 0xbc], ebx
je 0x416fad
mov edx, dword [esi + 0x1c]
test byte [edx + 0x18], 4
jne 0x41759e
mov ecx, esi
call fcn.00416d70
jmp 0x41759e
cmp edi, ebx
je 0x417209
lea eax, [ebp - 0x158]
mov dword [ebp - 0x158], 0x94
push eax
call dword [sym.imp.kernel32.dll_GetVersionExA]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x154]
push 0x4731a4
push ecx
push 0x4731a0
push edx
push 0x47319c
push eax
push 0x473184
lea ecx, [ebp - 0xb8]
call fcn.00444078
mov ecx, eax
call fcn.00443eb0
mov ecx, eax
call fcn.00444078
mov ecx, eax
call fcn.00443eb0
mov ecx, eax
call fcn.00444078
mov ecx, eax
call fcn.00443eb0
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
lea ecx, [esi + 4]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0044ae62
lea edx, [esi + 8]
lea ecx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 1
call fcn.0044ae62
lea eax, [esi + 0xc]
lea ecx, [ebp - 0x54]
push eax
mov byte [ebp - 4], 2
call fcn.0044ae62
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
lea eax, [esi + 0x18]
mov dword [ebp - 0x50], ecx
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
mov dword [ebp - 0x4c], edx
call fcn.0044ae62
mov ecx, dword [esi + 0x1c]
lea edx, [esi + 0x20]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x60], 0x460134
mov eax, dword [edx]
mov dword [ebp - 0x40], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x3c], ecx
mov edx, dword [edx + 8]
mov dword [ebp - 0x38], edx
mov al, byte [ebp - 0x1d]
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x30], al
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov bl, 6
push 0x4768ec
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.0044b15b
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0x14]
push ecx
push edx
mov byte [ebp - 4], 7
call fcn.00418d40
add esp, 8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call fcn.0044b0ed
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x417143
mov ecx, dword [ebp - 0x28]
mov eax, 0x66666667
sub ecx, ebx
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x417143
push 0
lea ecx, [ebx + 0xc]
call fcn.0044b51d
push 0x47316c
lea ecx, [ebp - 0xb8]
mov edi, eax
call fcn.00444078
push edi
mov ecx, eax
call fcn.00444078
push 0xa
mov ecx, eax
call fcn.00443e12
push 0x4175f0
mov ecx, eax
call fcn.004175d0
mov ebx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], ecx
mov edi, ebx
cmp edi, dword [ebp - 0x14]
je 0x417165
push 0
mov ecx, edi
call fcn.004184f0
mov ebx, dword [ebp - 0x2c]
add edi, 0x14
jmp 0x41714f
push ebx
call fcn.0044ed74
add esp, 4
jmp 0x417179
lea edx, [ebp - 0x5c]
lea ecx, [esi + 4]
push edx
mov dword [ebp - 4], 4
call fcn.0044b226
lea eax, [ebp - 0x58]
lea ecx, [esi + 8]
push eax
call fcn.0044b226
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [esi + 0xc]
call fcn.0044b226
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x48]
mov dword [esi + 0x10], edx
push ecx
lea ecx, [esi + 0x18]
mov dword [esi + 0x14], eax
call fcn.0044b226
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
lea eax, [esi + 0x20]
mov dword [esi + 0x1c], edx
mov edx, dword [ebp - 0x3c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 4], edx
mov edx, dword [esi]
mov dword [eax + 8], ecx
lea eax, [ebp - 0xc4]
push eax
mov ecx, esi
call dword [edx + 8]
push 0x4175f0
push 0xa
lea ecx, [ebp - 0xb8]
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0
call fcn.00416b20
push 0x47312c
lea ecx, [ebp - 0xb8]
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov ecx, dword [0x473e34]
mov dword [ebp - 0x1c], ecx
lea edx, [esi + 0x20]
mov byte [ebp - 4], 9
push edx
call fcn.00428466
xor edx, edx
lea ecx, [eax + 0x14]
mov dx, word [esi + 0x24]
push ecx
push edx
push eax
lea eax, [ebp - 0x1c]
push 0x47311c
push eax
call fcn.0044949e
mov ecx, dword [ebp - 0x1c]
add esp, 0x18
push ecx
push 0x473110
lea ecx, [ebp - 0xb8]
call fcn.00444078
mov ecx, eax
call fcn.00444078
mov eax, dword [esi + 8]
lea ecx, [ebp - 0xb8]
push eax
push 0x473100
call fcn.00444078
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov eax, dword [esi + 0xc]
lea ecx, [ebp - 0xb8]
push eax
push 0x4730ec
call fcn.00444078
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov edx, dword [esi + 0x10]
lea ecx, [ebp - 0xb8]
push edx
push 0x4730dc
call fcn.00444078
mov ecx, eax
call fcn.00443eb0
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov ecx, esi
call fcn.00417f60
lea edi, [esi + 0x18]
lea ecx, [ebp - 0x18]
push edi
mov ebx, eax
call fcn.0044ae62
push 0x4730d8
push 0x472e78
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.00448e4e
cmp ebx, 1
jne 0x4173af
push 0x476a10
lea ecx, [ebp - 0x14]
call fcn.0044b1ad
mov eax, dword [ebp - 0x14]
mov edi, dword [edi]
push eax
push edi
call fcn.00427aab
add esp, 8
lea ecx, [ebp - 0x14]
test eax, eax
setne bl
call fcn.0044b0ed
test bl, bl
je 0x417399
mov ecx, dword [ebp - 0x18]
push ecx
push 0x4730c4
lea ecx, [ebp - 0xb8]
call fcn.00444078
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov eax, dword [esi + 0x14]
test eax, eax
je 0x4174af
push eax
push 0x4730b4
jmp 0x417488
test ebx, ebx
push 0x476a10
jne 0x417423
lea ecx, [ebp - 0x14]
call fcn.0044b1ad
mov edx, dword [ebp - 0x14]
mov edi, dword [edi]
push edx
push edi
call fcn.00427aab
add esp, 8
lea ecx, [ebp - 0x14]
test eax, eax
setne bl
call fcn.0044b0ed
test bl, bl
je 0x417410
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xb8]
push eax
push 0x47309c
call fcn.00444078
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov eax, dword [esi + 0x14]
test eax, eax
je 0x4174af
push eax
push 0x47308c
jmp 0x417488
lea ecx, [ebp - 0x14]
call fcn.0044b1ad
mov ecx, dword [ebp - 0x14]
mov edi, dword [edi]
push ecx
push edi
call fcn.00427aab
add esp, 8
lea ecx, [ebp - 0x14]
test eax, eax
setne bl
call fcn.0044b0ed
test bl, bl
je 0x41747b
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0xb8]
push edx
push 0x473078
call fcn.00444078
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov eax, dword [esi + 0x14]
test eax, eax
je 0x4174af
push eax
push 0x473068
lea ecx, [ebp - 0xb8]
call fcn.00444078
mov ecx, eax
call fcn.00443eb0
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov eax, dword [esi]
lea ecx, [ebp - 0xc4]
push ecx
mov ecx, esi
call dword [eax + 0xc]
push 0x476a10
lea ecx, [ebp - 0x14]
call fcn.0044b1ad
mov edx, dword [ebp - 0x14]
mov eax, dword [esi + 4]
push edx
push eax
call fcn.00427aab
add esp, 8
lea ecx, [ebp - 0x14]
test eax, eax
setne bl
call fcn.0044b0ed
test bl, bl
je 0x41751b
mov eax, dword [esi + 4]
lea ecx, [ebp - 0xb8]
push eax
push 0x473054
call fcn.00444078
mov ecx, eax
call fcn.00444078
push 0x4175f0
push 0xa
mov ecx, eax
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
push 0x47312c
lea ecx, [ebp - 0xb8]
call fcn.00444078
mov edi, eax
push 0x4175f0
push 0xa
mov ecx, edi
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
push 0x4175f0
push 0xa
mov ecx, edi
call fcn.00443e12
mov ecx, eax
call fcn.004175d0
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 4]
mov eax, dword [ebp + ecx - 0xbc]
test eax, eax
je 0x41757b
mov edx, dword [esi + 0x1c]
test byte [edx + 0x18], 4
jne 0x41757b
mov ecx, esi
call fcn.00416d70
lea ecx, [ebp - 0xc4]
call fcn.00443dba
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.0044b0ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.0044b0ed
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0xffffffff
call fcn.00443d26
lea ecx, [ebp - 0xb0]
call fcn.00443bec
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret