Function at 0x27026bc1
Capabilities:
Check if file exists
Get disk information
Get file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x488]
sub esp, 0x508
mov eax, dword [0x270b313c]
xor eax, ebp
mov dword [ebp + 0x484], eax
push esi
push edi
xor edi, edi
mov eax, 0x168
mov esi, ecx
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x74], edi
cmp dword [ebp + 0x490], eax
jae 0x27026bfb
mov eax, dword [ebp + 0x490]
push eax
lea eax, [ebp + 0x1b4]
push esi
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
or dword [ebp - 0x68], 0xffffffff
add esp, 0xc
xor eax, eax
push edi
mov word [esi], ax
mov dword [ebp - 0x6c], edi
call sub.KERNEL32.dll_SetLastError
mov dword [ebp - 0x5c], 0x1000
push ebx
push dword [ebp - 0x5c]
call dword [sym.imp.msvcrt.dll_malloc]
mov ebx, eax
pop ecx
mov dword [ebp - 0x60], ebx
cmp ebx, edi
je 0x27026f8c
push edi
call sub.KERNEL32.dll_SetLastError
mov eax, dword [ebp - 0x5c]
shr eax, 1
push eax
push ebx
push edi
call sub.KERNEL32.dll_QueryDosDeviceW
call sub.KERNEL32.dll_GetLastError
mov esi, eax
cmp esi, 0x7a
jne 0x27026c74
push ebx
call dword [sym.imp.msvcrt.dll_free]
shl dword [ebp - 0x5c], 1
cmp dword [ebp - 0x5c], 0xf4240
pop ecx
mov dword [ebp - 0x60], edi
jb 0x27026c27
mov eax, dword [ebp - 0x60]
cmp eax, edi
je 0x27026f8c
cmp esi, edi
jne 0x27026f8c
mov ebx, eax
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x27026c8c
jmp 0x27026d90
cmp dword [ebp - 0x58], 2
jne 0x27026d7a
push 0x3a
pop eax
cmp ax, word [ebx + 2]
jne 0x27026d7a
push 0x104
lea eax, [ebp - 0x54]
push eax
push ebx
call sub.KERNEL32.dll_QueryDosDeviceW
test eax, eax
jbe 0x27026d7a
lea eax, [ebp - 0x54]
push ebx
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
mov esi, eax
pop ecx
pop ecx
cmp esi, edi
je 0x27026d2f
xor eax, eax
mov word [esi], ax
lea eax, [ebp - 0x54]
push 0x5c
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
mov edi, eax
mov ax, word [ebx]
pop ecx
pop ecx
mov word [esi], ax
test edi, edi
je 0x27026d2d
push 0x5c
add esi, 4
push esi
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
test eax, eax
je 0x27026d2d
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
inc ecx
inc ecx
test dx, dx
jne 0x27026d12
sub ecx, esi
sar ecx, 1
inc ecx
push ecx
push eax
push edi
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
xor edi, edi
lea eax, [ebp - 0x54]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x27026d35
sub eax, edx
sar eax, 1
mov esi, eax
push esi
lea eax, [ebp + 0x1b4]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x27026d7a
push 0x5c
pop eax
cmp ax, word [ebp + esi*2 + 0x1b4]
je 0x27026e0d
cmp ax, word [ebp + esi*2 - 0x56]
je 0x27026e0d
mov eax, dword [ebp - 0x58]
lea ebx, [ebx + eax*2 + 2]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x27026d86
sub eax, edx
sar eax, 1
mov dword [ebp - 0x58], eax
cmp eax, edi
ja 0x27026c9b
push str.Mpr.dll
call sub.KERNEL32.dll_LoadLibraryW
mov dword [ebp - 0x6c], eax
cmp eax, edi
je 0x27026f8c
push str.WNetOpenEnumW
push eax
call sub.KERNEL32.dll_GetProcAddress
push str.WNetEnumResourceW
push dword [ebp - 0x6c]
mov esi, eax
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x68]
push eax
push edi
push edi
push edi
push 1
call esi
test eax, eax
jne 0x27026f8c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x78], SysReAllocString
cmp dword [ebp - 0x70], edi
jg 0x27026ea8
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x64]
jb 0x27026e62
mov dword [ebp - 0x64], eax
jmp 0x27026e87
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x27026e12
sub eax, edx
sar eax, 1
inc eax
push eax
lea eax, [ebp + 0x1b4]
push ebx
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
lea ecx, [ebp + esi*2 + 0x1b4]
mov eax, ecx
add esp, 0xc
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
cmp si, di
jne 0x27026e3f
sub eax, edx
sar eax, 1
inc eax
push eax
push ecx
lea eax, [ebp + 0x1b4]
push eax
call dword [sym.imp.msvcrt.dll_wcsncat]
jmp 0x27026f82
push dword [ebp - 0x60]
call dword [sym.imp.msvcrt.dll_free]
push dword [ebp - 0x64]
call dword [sym.imp.msvcrt.dll_malloc]
pop ecx
pop ecx
mov dword [ebp - 0x60], eax
cmp eax, edi
je 0x27026f4e
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x5c], eax
mov esi, dword [ebp - 0x60]
or dword [ebp - 0x70], 0xffffffff
lea eax, [ebp - 0x64]
push eax
push esi
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x68]
call dword [ebp - 0x7c]
cmp eax, edi
jne 0x27026f3d
mov dword [ebp - 0x58], esi
mov eax, dword [ebp - 0x58]
mov esi, dword [eax + 0x14]
cmp esi, edi
je 0x27026f28
cmp word [esi], 0x5c
jne 0x27026f28
lea ebx, [esi + 2]
cmp word [ebx], 0x5c
jne 0x27026f28
lea eax, [ebp + 0x1b6]
push ebx
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x27026f26
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x27026edc
sub eax, edx
sar eax, 1
add eax, eax
cmp word [eax + esi], 0x5c
je 0x27026efa
cmp word [eax + edi], 0x5c
jne 0x27026f26
push 0x5c
lea esi, [edi - 2]
movzx ebx, word [esi]
pop eax
push esi
mov word [esi], ax
call sub.KERNEL32.dll_GetFileAttributesW
mov word [esi], bx
cmp eax, 0xffffffff
je 0x27026f26
lea eax, [ebp + 0x1b4]
sub edi, eax
sar edi, 1
cmp dword [ebp - 0x78], edi
jbe 0x27026f26
mov dword [ebp - 0x78], edi
xor edi, edi
dec dword [ebp - 0x70]
cmp dword [ebp - 0x58], edi
je 0x27026df7
add dword [ebp - 0x58], 0x20
jmp 0x27026df7
cmp eax, 0xea
jne 0x27026f4e
mov eax, dword [ebp - 0x64]
add eax, eax
mov dword [ebp - 0x64], eax
jmp 0x27026f28
mov eax, dword [ebp - 0x78]
cmp eax, 0x7fffffff
jae 0x27026f8c
lea ecx, [ebp + eax*2 + 0x1b4]
mov eax, ecx
lea esi, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x27026f64
sub eax, esi
sar eax, 1
inc eax
push eax
push ecx
lea eax, [ebp + 0x1b6]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
mov dword [ebp - 0x74], 1
add esp, 0xc
cmp dword [ebp - 0x68], 0xffffffff
pop ebx
je 0x27026fae
cmp dword [ebp - 0x6c], edi
je 0x27026fae
push str.WNetCloseEnum
push dword [ebp - 0x6c]
call sub.KERNEL32.dll_GetProcAddress
push dword [ebp - 0x68]
call eax
or dword [ebp - 0x68], 0xffffffff
cmp dword [ebp - 0x60], edi
je 0x27026fbd
push dword [ebp - 0x60]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov esi, dword [ebp + 0x490]
mov edi, dword [ebp - 0x80]
lea eax, [esi - 1]
push eax
lea eax, [ebp + 0x1b4]
push eax
push edi
call dword [sym.imp.msvcrt.dll_wcsncpy]
mov ecx, dword [ebp + 0x484]
xor eax, eax
add esp, 0xc
mov word [edi + esi*2 - 2], ax
mov eax, dword [ebp - 0x74]
pop edi
xor ecx, ebp
pop esi
call fcn.27088f70
add ebp, 0x488
leave
ret