Function at 0x410bd0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x630
mov eax, dword [0x43d00c]
mov esi, dword [ebp + 8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
call fcn.00420010
add esp, 4
cmp eax, 0x103
ja 0x410c52
lea edi, [ebp - 0x422]
push 0x208
push 0
push edi
call fcn.00415350
add esp, 0xc
push 0
push edi
push 0x104
push esi
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
je 0x410c52
lea ebx, [ebp - 0x62a]
push 0x208
push 0
push ebx
call fcn.00415350
add esp, 0xc
push edi
push ebx
call dword [sym.imp.SHLWAPI.dll_PathCanonicalizeW]
test eax, eax
je 0x410c52
push ebx
push esi
call fcn.0041d5c6
add esp, 8
test eax, eax
je 0x410c6e
xor ebx, ebx
mov ecx, dword [ebp - 0x10]
and bl, 1
xor ecx, ebp
call fcn.00412fa1
mov eax, ebx
add esp, 0x630
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x104
push esi
push edi
call fcn.00420489
add esp, 0xc
push edi
call dword [sym.imp.SHLWAPI.dll_PathStripToRootW]
test eax, eax
je 0x410c52
cmp word [esi], 0x5c
jne 0x410c99
push edi
call dword [sym.imp.SHLWAPI.dll_PathIsUNCServerShareW]
test eax, eax
je 0x410c52
lea esi, [ebp - 0x21a]
push 0x20a
push 0
push esi
call fcn.00415350
add esp, 0xc
push 0x104
push ebx
push esi
call fcn.00420489
add esp, 0xc
lea edi, [ebp - 0x630]
mov dword [ebp - 0x630], 0
push edi
push 0x4384c0
push esi
call fcn.0042051a
add esp, 0xc
test eax, eax
je 0x410e63
mov esi, eax
mov dword [ebp - 0x63c], eax
jmp 0x410d2b
test ecx, ecx
lea edi, [ebp - 0x630]
jne 0x410e65
push edi
push 0x4384c0
push 0
call fcn.0042051a
add esp, 0xc
mov esi, eax
push eax
push dword [ebp - 0x63c]
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test esi, esi
mov esi, dword [ebp - 0x63c]
je 0x410e63
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
je 0x410cfe
push 0
push 0x2200000
push 3
push 0
push 7
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp eax, 0xffffffff
je 0x410dc7
push 0x4000
call fcn.00412763
add esp, 4
mov esi, eax
push 0x4000
push 0
push eax
call fcn.00415350
add esp, 0xc
mov dword [ebp - 0x634], 0
push 0
lea eax, [ebp - 0x634]
push eax
push 0x4000
push esi
push 0
push 0
push 0x900a8
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x410dda
mov eax, dword [esi]
cmp eax, 0xa000000c
je 0x410de8
cmp eax, 0xa0000003
mov dword [ebp - 0x638], 1
jne 0x410dfd
cmp word [esi + 0xa], 5
jae 0x410e01
xor ebx, ebx
jmp 0x410e38
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
mov ecx, 1
setne bl
jmp 0x410e47
mov dword [ebp - 0x638], 1
mov bl, 1
jmp 0x410e38
cmp word [esi + 0xa], 5
jae 0x410e0e
mov dword [ebp - 0x638], 1
xor ebx, ebx
jmp 0x410e38
mov bl, 1
jmp 0x410e38
movzx eax, word [esi + 8]
and eax, 0xfffffffe
lea eax, [esi + eax + 0x10]
jmp 0x410e19
movzx eax, word [esi + 8]
and eax, 0xfffffffe
lea eax, [esi + eax + 0x14]
push 4
push 0x4384b4
push eax
call fcn.0042044f
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
or bl, cl
mov dword [ebp - 0x638], ecx
push esi
call fcn.0041276c
add esp, 4
mov ecx, dword [ebp - 0x638]
mov eax, edi
inc eax
cmp eax, 2
jb 0x410cf0
push edi
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, esi
jmp 0x410cf0
xor ebx, ebx
xor bl, 1
jmp 0x410c54