Function at 0x416a20
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
lea eax, [esi - 3]
cmp eax, 2
jae 0x416a62
mov esi, 4
movzx ebx, byte [0x46e688]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test bl, bl
je 0x416a58
test eax, eax
je 0x416a7d
test eax, eax
setne al
pop esi
pop edi
pop ebx
pop ebp
ret
cmp esi, 7
ja case.0x416a6b.3
jmp dword [esi*4 + 0x458cf8]
mov esi, 0x40
jmp case.0x416a6b.2
xor eax, eax
jmp 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416a95
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
jmp 0x416af0
mov esi, 0x20
jmp case.0x416a6b.2
push 0x4000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x416a58
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
jmp 0x416b11
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416ace
cmp eax, 0x27b
jne 0x416a79
jmp 0x416ace
int3
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416b2d
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416b69
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416ba5
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416be1
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416c1d
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416c59
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416c95
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push 0x1000
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x416a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x416cd1
cmp eax, 0x27b
jne 0x416a79
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x416a79