Function at 0x402ab0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x930
mov eax, dword [0x4c32cc]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x103
xor esi, esi
lea eax, [ebp - 0x323]
push esi
push eax
mov byte [ebp - 0x324], 0
call fcn.004a3190
add esp, 0xc
push 0x103
lea ecx, [ebp - 0x113]
push esi
push ecx
mov byte [ebp - 0x114], 0
call fcn.004a3190
add esp, 0xc
push 0x103
lea edx, [ebp - 0x21b]
push esi
push edx
mov byte [ebp - 0x21c], 0
call fcn.004a3190
add esp, 0xc
push 0x3fc
lea eax, [ebp - 0x920]
push esi
push eax
mov dword [ebp - 0x924], esi
call fcn.004a3190
xor ebx, ebx
add esp, 0xc
mov dword [ebp - 0x928], ebx
cmp dword [0x4cd38c], esi
je 0x402b4c
call fcn.0048fcc0
push 0x104
push str.EDGEBrowserBasePath
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x324]
mov edx, 0x80000001
mov dword [0x4cd38c], esi
mov dword [0x4d1bc0], 2
call fcn.0048e050
add esp, 0xc
lea edi, [ebp - 0x524]
call fcn.00404400
test eax, eax
je 0x402dfd
mov al, byte [ebp - 0x524]
test al, al
je 0x402bbe
jmp 0x402ba0
cmp al, 0x3b
jne 0x402bac
mov dword [ebp + ebx*4 - 0x924], esi
inc ebx
mov al, byte [ebp + esi - 0x523]
inc esi
test al, al
jne 0x402ba0
mov dword [ebp - 0x928], ebx
lea ecx, [ebx + 1]
push 4
push ecx
call fcn.004a02a3
mov edi, eax
add esp, 8
mov dword [ebp - 0x92c], edi
test edi, edi
jne 0x402be9
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a01d6
mov esp, ebp
pop ebp
ret
xor esi, esi
test ebx, ebx
js 0x402c78
push 1
push 0x104
call fcn.004a02a3
add esp, 8
mov ebx, eax
mov dword [edi + esi*4], ebx
test esi, esi
jne 0x402c19
mov eax, dword [ebp - 0x924]
lea ecx, [ebp - 0x524]
jmp 0x402c5e
cmp esi, dword [ebp - 0x928]
jne 0x402c46
mov edi, dword [ebp + esi*4 - 0x928]
lea edx, [ebp - 0x524]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub eax, edi
lea ecx, [ebp + edi - 0x523]
mov edi, dword [ebp - 0x92c]
jmp 0x402c5e
mov ecx, dword [ebp + esi*4 - 0x928]
mov eax, dword [ebp + esi*4 - 0x924]
sub eax, ecx
dec eax
lea ecx, [ebp + ecx - 0x523]
push eax
push ecx
push ebx
call fcn.004a0310
inc esi
add esp, 0xc
cmp esi, dword [ebp - 0x928]
jle 0x402bf3
mov ebx, dword [ebp - 0x928]
xor esi, esi
test ebx, ebx
jle 0x402ddd
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov eax, dword [ebp - 0x92c]
mov eax, dword [eax + esi*4]
push eax
test esi, esi
jne 0x402cb1
push 0x4b19e0
lea ecx, [ebp - 0x114]
push 0x104
push ecx
call fcn.00402830
add esp, 0x10
jmp 0x402cf0
cmp esi, 4
jge 0x402cd0
lea edx, [ebp - 0x324]
push edx
push str._s_s
push 0x104
lea eax, [ebp - 0x114]
push eax
jmp 0x402ce8
lea ecx, [ebp - 0x324]
push ecx
push str._s_s
push 0x104
lea edx, [ebp - 0x114]
push edx
call fcn.00402830
add esp, 0x14
lea eax, [ebp - 0x114]
push eax
call edi
cmp eax, 0xffffffff
je 0x402dce
test al, 0x10
je 0x402dce
cmp esi, 4
jge 0x402d28
mov ecx, dword [ebp + 8]
push 1
push ecx
push 0
push 0x487110
lea edx, [ebp - 0x114]
push edx
jmp 0x402dc6
push str.INetCookies
lea eax, [ebp - 0x114]
push eax
push str._s_s
lea ecx, [ebp - 0x21c]
push 0x104
push ecx
call fcn.00402830
add esp, 0x14
lea edx, [ebp - 0x21c]
push edx
call edi
cmp eax, 0xffffffff
je 0x402d7b
test al, 0x10
je 0x402d7b
mov eax, dword [ebp + 8]
push 1
push eax
push 0
lea ecx, [ebp - 0x21c]
push 0x487110
push ecx
call fcn.00486f10
add esp, 0x14
push str.MicrosoftEdgeCookies
lea edx, [ebp - 0x114]
push edx
push str._s_s
lea eax, [ebp - 0x21c]
push 0x104
push eax
call fcn.00402830
add esp, 0x14
lea ecx, [ebp - 0x21c]
push ecx
call edi
cmp eax, 0xffffffff
je 0x402dce
test al, 0x10
je 0x402dce
mov edx, dword [ebp + 8]
push 1
push edx
push 0
push 0x487110
lea eax, [ebp - 0x21c]
push eax
call fcn.00486f10
add esp, 0x14
inc esi
cmp esi, ebx
jl 0x402c88
mov edi, dword [ebp - 0x92c]
xor esi, esi
test ebx, ebx
jle 0x402df4
mov ecx, dword [edi + esi*4]
push ecx
call fcn.004a0269
inc esi
add esp, 4
cmp esi, ebx
jl 0x402de3
push edi
call fcn.004a0269
add esp, 4
mov ecx, dword [ebp - 8]
mov eax, dword [0x4cd38c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a01d6
mov esp, ebp
pop ebp
ret