Function at 0x40aeea
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4294db
call fcn.00427a40
sub esp, 0x88
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x50]
mov byte [eax], 1
call fcn.00403c38
lea ecx, [ebp - 0x28]
call fcn.004025e2
mov edi, dword [ebp + 8]
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x50]
mov eax, dword [edi]
mov dword [ebp - 4], ebx
push eax
call fcn.00403eef
test al, al
je 0x40b139
mov eax, dword [esi + 0x5c]
cmp eax, 2
je 0x40b127
cmp eax, ebx
jne 0x40b00e
mov ecx, edi
call fcn.00402a7a
inc eax
mov ecx, edi
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00408516
lea ecx, [ebp - 0x28]
mov edx, eax
push ecx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.004025be
push dword [ebp - 0x5c]
mov byte [ebp - 4], 3
call fcn.00402103
pop ecx
lea edx, [ebp + 8]
push edx
mov dl, byte [esi + 0xd0]
neg dl
lea ebx, [esi + 0xc8]
mov eax, dword [esi + 0x2c]
sbb edx, edx
and edx, ebx
lea ebx, [esi + 0xb0]
push edx
mov dl, byte [esi + 0xbe]
neg dl
sbb edx, edx
mov ecx, dword [eax]
and edx, ebx
push edx
lea edx, [ebp - 0x50]
push dword [esi + 0x64]
push edx
lea edx, [ebp - 0x38]
push edx
push dword [ebp - 0x18]
push eax
call dword [ecx + 0x14]
xor ebx, ebx
cmp eax, ebx
je 0x40afaf
mov esi, eax
jmp 0x40afca
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x40b002
dec eax
je 0x40affb
dec eax
je 0x40aff7
dec eax
je 0x40aff0
dec eax
je 0x40afe7
dec eax
je 0x40afe0
mov esi, 0x80004005
push dword [ebp - 0x18]
call fcn.00402103
push dword [ebp - 0x28]
call fcn.00402103
pop ecx
jmp 0x40b131
mov esi, 0x80004004
jmp 0x40afca
mov dword [esi + 0x5c], 3
jmp 0x40b002
mov dword [esi + 0x5c], 2
xor esi, esi
jmp 0x40afca
mov dword [esi + 0x5c], 1
push dword [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00402103
pop ecx
mov eax, dword [esi + 0x5c]
cmp eax, 3
jne 0x40b050
mov ecx, edi
call fcn.00406395
test al, al
jne 0x40b044
push edi
mov ecx, esi
push dword [0x42cbac]
call fcn.0040aa3f
cmp eax, ebx
je 0x40b03a
mov esi, eax
jmp 0x40b129
mov esi, 0x80004005
jmp 0x40b129
mov byte [esi + 0x160], 1
jmp 0x40b1ba
cmp eax, 4
jne 0x40b0c4
push edi
lea ecx, [ebp - 0x18]
call fcn.004026b5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00406395
test al, al
jne 0x40b07e
push edi
mov ecx, esi
push dword [0x42cbac]
call fcn.0040aa3f
jmp 0x40b0a4
mov ecx, dword [edi]
mov edx, dword [ebp - 0x18]
call fcn.0040392c
test al, al
jne 0x40b0b7
call fcn.00404631
lea ecx, [ebp - 0x18]
push edi
push ecx
mov ecx, esi
push dword [0x42cbb0]
push eax
call fcn.0040ab3d
cmp eax, ebx
mov esi, eax
jne 0x40b0af
mov esi, 0x80004005
push dword [ebp - 0x18]
jmp 0x40afcd
push dword [ebp - 0x18]
call fcn.00402103
jmp 0x40b1b9
mov eax, dword [ebp - 0x30]
mov ecx, dword [edi]
shr eax, 4
test al, 1
je 0x40b0e6
call fcn.0040391f
test al, al
jne 0x40b1ba
push edi
push dword [0x42cbb8]
jmp 0x40b118
call fcn.004043c1
test al, al
je 0x40b1ba
mov ecx, dword [edi]
call fcn.00403b0b
test al, al
jne 0x40b1ba
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x40b1ba
push edi
push dword [0x42cbb4]
mov ecx, esi
call fcn.0040aaac
cmp eax, ebx
jne 0x40b033
xor esi, esi
push dword [ebp - 0x28]
call fcn.00402103
pop ecx
mov eax, esi
jmp 0x40b1ca
mov ecx, dword [edi]
call fcn.00404cb0
mov esi, eax
cmp esi, ebx
jl 0x40b1ba
mov eax, dword [edi]
cmp word [eax + esi*2 + 2], bx
je 0x40b1ba
push edi
lea ecx, [ebp - 0x18]
call fcn.004026b5
cmp esi, dword [ebp - 0x14]
mov byte [ebp - 4], 5
jae 0x40b16b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], esi
mov word [eax + esi*2], bx
lea ecx, [ebp - 0x94]
call fcn.00403c38
lea ecx, [ebp - 0x6c]
call fcn.004025e2
push ebx
lea ecx, [ebp - 0x94]
push dword [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.00403eef
test al, al
je 0x40b1a8
mov edx, dword [ebp - 0x74]
test dl, 1
je 0x40b1a8
mov ecx, dword [ebp - 0x18]
and edx, 0xfffffffe
call fcn.004038fe
push dword [ebp - 0x6c]
call fcn.00402103
push dword [ebp - 0x18]
call fcn.00402103
pop ecx
pop ecx
mov eax, dword [ebp + 0xc]
push dword [ebp - 0x28]
mov byte [eax], bl
call fcn.00402103
pop ecx
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8