Function at 0x4144a0
Capabilities:
Check if file exists
Get file attributes
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5b2fc0
push eax
mov dword fs:[0], esp
sub esp, 0x1b8
mov edx, dword [esp + 0x1c8]
lea eax, [esp + 0x68]
push ebx
push ebp
push esi
xor ebp, ebp
push edi
push ebp
push ebp
push ebp
push ebp
push 0x100
lea ecx, [esp + 0x18c]
push eax
push ecx
push edx
call fcn.00572960
add esp, 0x20
cmp eax, ebp
jne 0x414d2b
lea eax, [esp + 0x78]
push ebp
push eax
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x7c], ebp
mov word [esp + 0x78], bp
call fcn.00402800
xor esi, esi
mov dword [esp + 0x1d0], ebp
mov dword [esp + 0x20], esi
mov dword [esp + 0x28], ebp
mov word [esp + 0x24], bp
mov edi, dword [esp + 0x6c]
mov byte [esp + 0x1d0], 1
cmp edi, ebp
jne 0x414535
lea edi, [esp + 0x70]
mov eax, dword [0x6825a8]
cmp eax, ebp
jne 0x414543
mov eax, 0x6825ac
mov ecx, 0x6590c0
test ecx, ecx
je 0x4146bf
cmp eax, ebp
je 0x4146bf
mov edx, str.idmmzcc5
test edx, edx
je 0x4146bf
cmp edi, ebp
je 0x4146bf
push eax
lea ecx, [esp + 0x60]
call fcn.00403ad0
push str.idmmzcc5
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 2
call fcn.00403ad0
push edi
lea ecx, [esp + 0x54]
mov byte [esp + 0x1d4], 3
call fcn.00403ad0
mov bl, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], bl
call fcn.00401070
push 0x6590c0
lea ecx, [esp + 0x3c]
call fcn.00401e50
mov esi, dword [esp + 0x40]
lea ecx, [esp + 0x50]
mov byte [esp + 0x1d0], 5
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
mov ebp, eax
add esp, 4
lea ecx, [esp + 0x5c]
add ebp, esi
call fcn.00401ed0
push eax
call fcn.00584816
add ebp, edi
lea esi, [eax + ebp + 4]
lea ebp, [esi + esi]
push ebp
call fcn.0059cff9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x20], edi
je 0x414676
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x50]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x18]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x64]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x44]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x30]
push esi
push eax
call fcn.005847a6
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00584816
add esp, 0x1c
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], bl
call fcn.00401070
lea ecx, [esp + 0x50]
mov byte [esp + 0x1d0], 3
call fcn.00401070
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 2
call fcn.00401070
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d0], 1
call fcn.00401070
mov esi, dword [esp + 0x20]
xor ebp, ebp
cmp esi, ebp
je 0x4146e9
push esi
call fcn.00584816
lea eax, [esi + eax*2]
add esp, 4
cmp esi, eax
jae 0x4146e5
cmp word [esi], 0x2f
jne 0x4146de
mov word [esi], 0x5c
add esi, 2
cmp esi, eax
jb 0x4146d3
mov esi, dword [esp + 0x20]
xor ecx, ecx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], ecx
mov word [esp + 0x30], bp
cmp esi, ebp
mov byte [esp + 0x1d0], 6
mov eax, esi
jne 0x41470a
lea eax, [esp + 0x24]
mov edx, 0x656f5c
test edx, edx
je 0x4147e7
cmp eax, ebp
je 0x4147e7
push eax
lea ecx, [esp + 0x3c]
call fcn.00403ad0
mov bl, 7
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d0], bl
call fcn.00401070
push 0x656f5c
lea ecx, [esp + 0x60]
call fcn.00401e50
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 8
call fcn.00401ed0
push eax
call fcn.00584816
lea esi, [eax + esi + 2]
lea ebp, [esi + esi]
push ebp
call fcn.0059cff9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x2c], edi
je 0x4147c0
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x60]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x34]
push esi
push eax
call fcn.005847a6
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00584816
add esp, 0x14
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d0], bl
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 6
call fcn.00401070
mov ecx, dword [esp + 0x2c]
xor ebp, ebp
cmp ecx, ebp
mov eax, ecx
jne 0x4147f1
lea eax, [esp + 0x30]
push 0x5c
push eax
call fcn.00584766
add esp, 8
cmp eax, ebp
je 0x41490a
add eax, 2
mov word [eax], bp
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x414816
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x41490a
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x414832
lea eax, [esp + 0x30]
add eax, 6
push 0x5c
push eax
call fcn.00584c8f
mov esi, eax
add esp, 8
cmp esi, ebp
je 0x41490a
mov bl, 9
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x414858
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x20], ebp
mov word [esp + 0x1c], bp
call fcn.00401ee0
mov eax, dword [esp + 0x14]
mov byte [esp + 0x1d0], bl
cmp eax, ebp
mov ecx, eax
jne 0x414884
lea ecx, [esp + 0x18]
mov eax, dword [esp + 0x2c]
cmp eax, ebp
jne 0x414890
lea eax, [esp + 0x30]
mov edx, esi
sub edx, eax
sar edx, 1
mov word [ecx + edx*2], bp
mov eax, dword [esp + 0x14]
cmp eax, ebp
jne 0x4148a6
lea eax, [esp + 0x18]
push ebp
push eax
call fcn.00471550
add esp, 8
test eax, eax
jne 0x4148ce
mov eax, dword [esp + 0x14]
cmp eax, ebp
jne 0x4148c0
lea eax, [esp + 0x18]
push ebp
push eax
call fcn.00471730
add esp, 8
test eax, eax
je 0x4148f9
add esi, 2
push 0x5c
push esi
call fcn.00584c8f
add esp, 8
lea ecx, [esp + 0x14]
mov esi, eax
mov byte [esp + 0x1d0], 6
call fcn.00401070
cmp esi, ebp
jne 0x41484c
jmp 0x41490a
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 6
call fcn.00401070
push 0x2000
call fcn.005850c0
add esp, 4
cmp eax, ebp
mov dword [esp + 0x68], eax
jne 0x41495f
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d0], 1
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 0
call fcn.00401070
lea ecx, [esp + 0x6c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00401070
mov eax, 0xffffff98
jmp 0x414d2b
xor ebp, ebp
mov byte [esp + 0x13], 0
mov dword [esp + 0x44], ebp
mov dword [esp + 0x4c], ebp
mov word [esp + 0x48], bp
mov eax, dword [esp + 0x1d8]
mov byte [esp + 0x1d0], 0xa
push eax
call fcn.00572e10
mov ebx, eax
add esp, 4
cmp ebx, ebp
jne 0x414cc8
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x4149a1
lea eax, [esp + 0x24]
push 0x6590b8
push eax
call fcn.00585e7f
mov esi, eax
add esp, 8
cmp esi, ebp
jne 0x414ac7
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x4149c5
lea eax, [esp + 0x24]
mov ecx, str._s
test ecx, ecx
je 0x414a9e
cmp eax, ebp
je 0x414a9e
push eax
lea ecx, [esp + 0x3c]
call fcn.00403ad0
lea ecx, [esp + 0x44]
mov byte [esp + 0x1d0], 0xb
call fcn.00401070
push str._s
lea ecx, [esp + 0x60]
call fcn.00401e50
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 0xc
call fcn.00401ed0
push eax
call fcn.00584816
lea esi, [eax + esi + 2]
lea ebp, [esi + esi]
push ebp
call fcn.0059cff9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x44], edi
je 0x414a7a
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x60]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x4c]
push esi
push eax
call fcn.005847a6
mov ecx, dword [esp + 0x54]
push ecx
call fcn.00584816
add esp, 0x14
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d0], 0xb
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 0xa
call fcn.00401070
xor ebp, ebp
mov eax, dword [esp + 0x44]
cmp eax, ebp
jne 0x414aaa
lea eax, [esp + 0x48]
push 0x6590b8
push eax
call fcn.00585e7f
mov esi, eax
add esp, 8
cmp esi, ebp
je 0x414cc8
mov byte [esp + 0x13], 1
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x1d8]
push 0x2000
push edi
push edx
call fcn.00573150
mov ebx, eax
add esp, 0xc
cmp ebx, ebp
jl 0x414b1c
jle 0x414b1c
push esi
push 1
push ebx
push edi
call fcn.00585d15
add esp, 0x10
cmp eax, 1
jne 0x414b19
mov eax, dword [esp + 0x1d8]
push 0x2000
push edi
push eax
call fcn.00573150
mov ebx, eax
add esp, 0xc
cmp ebx, ebp
jge 0x414ae7
jmp 0x414b1c
or ebx, 0xffffffff
push esi
call fcn.00585c98
lea ecx, [esp + 0x7c]
push str.idmcchandler.dll
push ecx
call fcn.00584910
add esp, 0xc
test eax, eax
jne 0x414b52
lea edx, [esp + 0x78]
push str.idmcchandler64.dll
push edx
call fcn.00584910
add esp, 8
test eax, eax
je 0x414ca2
mov al, byte [esp + 0x13]
test al, al
je 0x414b68
mov eax, dword [esp + 0x44]
cmp eax, ebp
jne 0x414b74
lea eax, [esp + 0x48]
jmp 0x414b74
mov eax, dword [esp + 0x20]
cmp eax, ebp
jne 0x414b74
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x5c], ebp
mov word [esp + 0x58], bp
call fcn.00401ee0
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], ebp
mov word [esp + 0x18], bp
lea eax, [esp + 0x78]
push str.idmcchandler.dll
push eax
mov byte [esp + 0x1d8], 0xe
call fcn.00584910
add esp, 8
mov ecx, 0x659064
test eax, eax
jne 0x414bc0
mov ecx, 0x65903c
mov eax, dword [0x682588]
cmp eax, ebp
jne 0x414bce
mov eax, 0x68258c
push ecx
push eax
push 0x656fdc
lea ecx, [esp + 0x20]
call fcn.004101b0
mov eax, dword [esp + 0x14]
cmp eax, ebp
mov ecx, eax
jne 0x414bec
lea ecx, [esp + 0x18]
mov eax, dword [esp + 0x50]
cmp eax, ebp
jne 0x414bf8
lea eax, [esp + 0x54]
push ebp
push ebp
push ecx
push eax
call fcn.004711b0
add esp, 0x10
test eax, eax
jne 0x414c80
lea ecx, [esp + 0x38]
call fcn.00414d50
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 0xf
call fcn.00401ed0
push eax
push 0x659038
lea ecx, [esp + 0x40]
call fcn.00413150
push ebp
push ebp
lea ecx, [esp + 0x40]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x5c]
call fcn.00401ed0
push eax
call fcn.004711b0
add esp, 0x10
test eax, eax
je 0x414c6f
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x3c]
call fcn.00401ed0
push eax
call fcn.00414480
add esp, 8
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d0], 0xe
call fcn.00401070
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d0], 0xd
call fcn.00401070
lea ecx, [esp + 0x50]
mov byte [esp + 0x1d0], 0xa
call fcn.00401070
mov al, byte [esp + 0x13]
test al, al
je 0x414ccc
lea ecx, [esp + 0x20]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x48]
call fcn.00401ed0
push eax
call fcn.00414480
add esp, 8
jmp 0x414ccc
mov edi, dword [esp + 0x68]
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.00573340
push edi
call fcn.005849df
add esp, 8
lea ecx, [esp + 0x44]
mov byte [esp + 0x1d0], 6
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d0], 1
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 0
call fcn.00401070
lea ecx, [esp + 0x6c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00401070
mov eax, ebx
mov ecx, dword [esp + 0x1c8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c4
ret