Function at 0x403b10
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40bce0
mov eax, dword fs:[0]
push eax
sub esp, 0x250
mov eax, dword [0x410654]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
push 0x104
push eax
push 0x105
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x24c], esi
push eax
lea eax, [ebp - 0x248]
mov dword [ebp - 0x24c], ecx
push eax
mov dword [ebp - 0x224], 0x3f005c
mov dword [ebp - 0x220], 0x5c003f
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
add esp, 0x14
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.ntdll.dll_RtlInitUnicodeString]
push 0
push 0
push 0x60
push 1
push 1
push 0x80
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x23c], 0x18
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x254]
push 0
push eax
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x238], 0
push eax
lea eax, [ebp - 0x244]
mov dword [ebp - 0x230], 0x40
push 0x120089
push eax
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
call fcn.004062e0
add esp, 0x2c
test eax, eax
je 0x403c69
lea ecx, [ebp - 0x23d]
call fcn.004036b0
mov edi, eax
cmp byte [edi + 0x25], 0
je 0x403c40
push 0x151db3d9
push 0x8b8d6531
push 0
push 0x25
push edi
call fcn.00401450
add esp, 0x14
mov byte [edi + 0x25], 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
call fcn.00404f90
xorps xmm0, xmm0
add esp, 8
movq qword [esi], xmm0
mov dword [esi], 0
mov dword [esi + 4], 0
jmp 0x403dc1
push 5
push 0x18
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x244]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
mov ebx, eax
test ebx, ebx
je 0x403ce9
lea ecx, [ebp - 0x23d]
call fcn.00402bb0
mov edi, eax
cmp byte [edi + 0x1f], 0
je 0x403cbb
push 0x51f57db5
push 0x1f156fd1
push 0
push 0x1f
push edi
call fcn.00401450
add esp, 0x14
mov byte [edi + 0x1f], 0
push ebx
push edi
call fcn.00404f90
push dword [ebp - 0x244]
call fcn.004062d0
xorps xmm0, xmm0
add esp, 0xc
movq qword [esi], xmm0
mov dword [esi], 0
mov dword [esi + 4], 0
jmp 0x403dc1
mov ebx, dword [ebp - 0x234]
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x25c], edi
push 0
push 0
push ebx
push edi
lea eax, [ebp - 0x254]
mov dword [ebp - 4], 0
push eax
push 0
push 0
push 0
push dword [ebp - 0x244]
call fcn.00406360
add esp, 0x28
mov dword [ebp - 0x248], eax
test eax, eax
je 0x403da0
lea ecx, [ebp - 0x23d]
call fcn.00402c80
mov ebx, eax
cmp byte [ebx + 0x1a], 0
je 0x403d64
push 0x27ada77d
push 0xef277b71
push 0
push 0x1a
push ebx
call fcn.00401450
add esp, 0x14
mov byte [ebx + 0x1a], 0
push dword [ebp - 0x248]
push ebx
call fcn.00404f90
add esp, 8
push dword [ebp - 0x244]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi], 0
mov dword [esi + 4], 0
test edi, edi
je 0x403dc1
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x403dbe
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x250]
push dword [ebp - 0x244]
mov dword [ecx], eax
call fcn.004062d0
mov dword [esi], edi
mov dword [esi + 4], ebx
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00408be8
mov esp, ebp
pop ebp
ret