Function at 0x415af0
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x538
mov dword [ebp - 0x51c], eax
mov eax, dword [0x4ab5d8]
mov dword [ebp - 0x524], edx
mov dword [ebp - 0x518], ecx
mov esi, dword [eax + 0x130c]
test esi, esi
je 0x415c4e
mov edi, dword [sym.imp.ucrtbase.dll_strcmp]
mov ebx, esi
mov dword [ebp - 0x520], esi
mov esi, edi
mov edi, dword [ebp - 0x51c]
jmp 0x415b4b
mov ebx, dword [ebx + 8]
test ebx, ebx
je 0x415c48
mov dword [esp + 4], edi
mov eax, dword [ebx]
mov dword [esp], eax
call esi
test eax, eax
jne 0x415b40
xor ecx, ecx
mov eax, dword [ebx + 4]
lea edx, [ebp - 0x514]
call fcn.00415990
mov dword [ebp - 0x520], eax
inc eax
je 0x415c3d
mov edx, dword [ebp - 0x524]
lea esi, [ebp - 0x40c]
dec edx
cmp edx, dword [ebp - 0x518]
jge 0x415c1d
mov eax, ebx
mov ebx, edx
mov edx, eax
jmp 0x415c08
xor eax, eax
mov ecx, 0x100
mov edi, esi
rep stosd dword es:[edi], eax
lea ecx, [ebx*4]
mov edi, dword [edx + 0x14]
mov eax, dword [edi + ecx + 4]
mov ecx, dword [edi + ecx]
cmp eax, ecx
je 0x415bdf
mov edi, dword [ebp - 0x520]
dec eax
sub eax, ecx
add ecx, edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [ebp - 0x51c], edx
call sub.ucrtbase.dll_memcpy
mov edx, dword [ebp - 0x51c]
inc ebx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], str._d_t_s_n
mov dword [ebp - 0x51c], edx
call fcn.004218d0
cmp dword [ebp - 0x518], ebx
mov edx, dword [ebp - 0x51c]
jle 0x415c1d
test ebx, ebx
js 0x415c14
mov eax, dword [edx + 0x10]
dec eax
cmp eax, ebx
jg 0x415b98
inc ebx
cmp dword [ebp - 0x518], ebx
jg 0x415c08
mov eax, dword [ebp - 0x520]
mov ebx, dword [ebp - 0x514]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_UnmapViewOfFile]
push eax
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_CloseHandle]
push eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [ebp - 0x520]
mov eax, dword [ebp - 0x51c]
mov dword [esp + 4], 0x5c
mov dword [esp], eax
mov ebx, dword [sym.imp.ucrtbase.dll_strrchr]
call ebx
test eax, eax
je 0x415ef8
inc eax
mov dword [ebp - 0x520], eax
test esi, esi
je 0x415ca8
mov edi, dword [sym.imp.ucrtbase.dll_strcmp]
mov ebx, dword [ebp - 0x520]
jmp 0x415c8f
mov esi, dword [esi + 8]
test esi, esi
je 0x415ca8
mov dword [esp + 4], ebx
mov eax, dword [esi]
mov dword [esp], eax
call edi
test eax, eax
jne 0x415c88
mov ebx, esi
jmp 0x415b5a
mov eax, dword [ebp - 0x51c]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_GetFileAttributesA]
mov dword [ebp - 0x52c], eax
call eax
inc eax
push edx
jne 0x415d48
mov eax, dword [0x4ab5d8]
mov eax, dword [eax + 0x1310]
mov dword [ebp - 0x528], eax
test eax, eax
je 0x415f53
mov edi, dword [ebp - 0x51c]
lea ebx, [ebp - 0x510]
mov esi, edi
lea esi, [esi]
mov al, byte [esi]
test al, al
je 0x415e28
cmp al, 0x2f
je 0x415e28
mov ecx, esi
inc esi
cmp al, 0x5c
jne 0x415cf0
lea esi, [ecx + 1]
mov eax, dword [ebp - 0x528]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x104
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SearchPathA]
sub esp, 0x18
test eax, eax
je 0x415cf0
mov esi, ebx
jmp 0x415d61
mov eax, dword [ebp - 0x51c]
lea esi, [ebp - 0x510]
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_strcpy]
mov edx, esi
mov eax, dword [ebp - 0x51c]
call fcn.00415890
lea edx, [ebp - 0x514]
mov ebx, eax
lea ecx, [eax + 0xc]
mov eax, esi
call fcn.00415990
mov dword [ebp - 0x520], eax
cmp eax, 0xffffffff
je 0x415c3d
mov ecx, dword [ebx + 0xc]
mov dword [ebx + 0x10], 1
add ecx, eax
cmp eax, ecx
jae 0x415f6e
mov edx, 1
inc eax
cmp byte [eax - 1], 0xa
jne 0x415db3
inc edx
mov dword [ebx + 0x10], edx
cmp eax, ecx
jne 0x415da8
inc edx
lea eax, [edx*4]
mov dword [ebx + 0x10], edx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov edi, dword [ebp - 0x520]
mov dword [ebx + 0x14], eax
mov dword [eax], 0
mov ecx, dword [ebx + 0xc]
lea eax, [edi + ecx]
cmp edi, eax
jae 0x415f62
mov eax, edi
mov esi, 1
nop
inc eax
cmp byte [eax - 1], 0xa
jne 0x415e05
mov edx, dword [ebx + 0x14]
mov ecx, eax
sub ecx, edi
mov dword [edx + esi*4], ecx
inc esi
mov ecx, dword [ebx + 0xc]
lea edx, [edi + ecx]
cmp eax, edx
jb 0x415df0
shl esi, 2
mov edx, dword [ebp - 0x520]
sub eax, edx
mov edx, dword [ebx + 0x14]
mov dword [edx + esi], eax
jmp 0x415b77
mov ecx, esi
test al, al
jne 0x415d09
mov ecx, dword [0x4ab2f4]
test ecx, ecx
je 0x415f24
lea esi, [ebp - 0x510]
lea ebx, [ebp - 0x40c]
mov edi, dword [sym.imp.ucrtbase.dll_strlen]
jmp 0x415ea6
mov dl, byte [ebp + eax - 0x511]
cmp dl, 0x2f
je 0x415e72
cmp dl, 0x5c
je 0x415e72
mov byte [ebp + eax - 0x510], 0x2f
inc eax
mov edx, dword [ebp - 0x520]
add eax, esi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcpy]
mov dword [esp], esi
mov eax, dword [ebp - 0x52c]
call eax
inc eax
push ecx
jne 0x415ee9
mov dword [esp + 4], esi
mov dword [esp], str.Unable_to_access_file__s_n
call fcn.004218d0
mov eax, dword [ebp - 0x51c]
mov dword [esp + 8], str.Enter_path_to_file__s___cr__to_end_search_:
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x100
mov dword [esp], ebx
call fcn.00415aa0
mov dword [esp + 8], 0x104
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00422e60
mov dword [esp], esi
call edi
test eax, eax
jne 0x415e58
cmp byte [ebp - 0x510], 0
jne 0x415d61
jmp 0x415f41
mov eax, dword [ebp - 0x51c]
mov dword [esp + 4], 0x2f
mov dword [esp], eax
call ebx
test eax, eax
jne 0x415c6f
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x520], eax
jmp 0x415c76
mov eax, dword [ebp - 0x51c]
mov dword [esp], str.Unable_to_access_file__s_n
mov dword [esp + 4], eax
call fcn.004218d0
mov byte [ebp - 0x510], 0
xor edx, edx
mov eax, dword [ebp - 0x51c]
call fcn.00415890
jmp 0x415c3d
mov dword [ebp - 0x528], 0x43ece3
jmp 0x415cdf
xor eax, eax
mov esi, 4
jmp 0x415e17
mov eax, 8
mov edx, 2
jmp 0x415dbf