Function at 0x535020
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6599b8
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x755898]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x58], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [edi + 0x240], 2
jne 0x5352dc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
xor eax, eax
mov word [ebp - 0x1c], ax
lea esi, [ebx + 1]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
push ecx
mov ecx, edi
call fcn.00534b20
mov dword [ebp - 0x5c], ebx
cmp dword [0x75aba4], ebx
je 0x5350a4
mov eax, dword [ebp - 0x20]
cmp eax, ebx
jne 0x535098
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x5350c0
mov eax, dword [ebp - 0x20]
cmp eax, ebx
jne 0x5350ae
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.004aa320
add esp, 8
test eax, eax
jne 0x5352d0
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
xor edx, edx
mov word [ebp - 0x28], dx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x20]
cmp eax, ebx
jne 0x5350dd
lea eax, [ebp - 0x1c]
mov ecx, dword [0x75ad10]
push ecx
push eax
mov edx, dword [0x75bcf8]
push edx
lea ecx, [ebp - 0x2c]
call fcn.004021b0
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x5350fe
lea eax, [ebp - 0x28]
push 4
mov ecx, dword [0x75c0dc]
push ecx
push eax
push ebx
call fcn.00472710
add esp, 0x10
cmp eax, 6
jne 0x535282
mov edx, dword [ebp - 0x20]
cmp edx, ebx
mov eax, edx
jne 0x535126
lea eax, [ebp - 0x1c]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x535130
sub eax, esi
sar eax, 1
cmp edx, ebx
mov ecx, edx
jne 0x535148
lea ecx, [ebp - 0x1c]
cmp word [ecx + eax*2 - 2], 0x5c
je 0x535160
push 0x676978
lea ecx, [ebp - 0x20]
call fcn.00405300
mov edx, dword [ebp - 0x20]
cmp edx, ebx
mov eax, edx
jne 0x535169
lea eax, [ebp - 0x1c]
push 0x5c
add eax, 6
push eax
call fcn.0061ee70
add esp, 8
mov esi, eax
mov bl, 3
jmp 0x535180
test esi, esi
je 0x5352c2
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x535192
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x38]
call fcn.00402180
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x38]
test eax, eax
mov ecx, eax
jne 0x5351aa
lea ecx, [ebp - 0x34]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x5351b4
lea eax, [ebp - 0x1c]
mov edx, esi
sub edx, eax
sar edx, 1
xor eax, eax
mov word [ecx + edx*2], ax
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x5351ca
lea eax, [ebp - 0x34]
push 1
push eax
call fcn.004aa320
add esp, 8
test eax, eax
jne 0x5352a1
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x5351e7
lea eax, [ebp - 0x34]
push 1
push eax
call fcn.004aa500
add esp, 8
test eax, eax
jne 0x5352a1
xor esi, esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], esi
xor ecx, ecx
mov word [ebp - 0x40], cx
mov byte [ebp - 4], 4
push esi
push esi
lea edx, [ebp - 0x58]
push edx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [0x75ad10]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [0x75bcfc]
push edx
lea ecx, [ebp - 0x44]
call fcn.004021b0
mov eax, dword [ebp - 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x44]
cmp eax, esi
jne 0x535257
lea eax, [ebp - 0x40]
push 0x30
push 0x675d88
push eax
mov ecx, dword [edi + 0x20]
push ecx
call fcn.00472710
add esp, 0x10
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x44]
call fcn.00401210
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x38]
call fcn.00401210
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401210
xor eax, eax
jmp 0x535491
push 0x5c
add esi, 2
push esi
call fcn.0061ee70
add esp, 8
mov esi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x38]
call fcn.00401210
jmp 0x535180
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401210
xor ebx, ebx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401210
mov byte [ebp - 0x51], 0
mov eax, dword [edi + 0x74]
add eax, 0x298
cmp dword [eax], ebx
je 0x5352f0
mov eax, dword [eax]
jmp 0x5352f3
add eax, 4
push eax
lea ecx, [ebp - 0x50]
call fcn.00402180
mov byte [ebp - 4], 5
mov eax, dword [edi + 0x74]
mov esi, dword [eax + 0x294]
mov dl, byte [eax + 0x2b9]
mov byte [ebp - 0x53], dl
mov bl, byte [eax + 0x2a4]
mov ecx, edi
call fcn.00534f20
mov eax, dword [edi + 0x74]
cmp esi, dword [eax + 0x294]
jne 0x535368
cmp esi, 2
jne 0x53536c
cmp dword [eax + 0x298], 0
je 0x535340
mov eax, dword [eax + 0x298]
jmp 0x535345
add eax, 0x29c
mov ecx, dword [ebp - 0x50]
test ecx, ecx
jne 0x53534f
lea ecx, [ebp - 0x4c]
push eax
push ecx
call fcn.0062280a
add esp, 8
test eax, eax
jne 0x535368
mov eax, dword [edi + 0x74]
cmp bl, byte [eax + 0x2a4]
je 0x53536c
mov byte [ebp - 0x51], 1
mov eax, dword [edi + 0x74]
mov cl, byte [ebp - 0x53]
cmp cl, byte [eax + 0x2b9]
je 0x535380
mov byte [ebp - 0x51], 1
jmp 0x53538d
cmp byte [ebp - 0x51], 0
je 0x535479
mov edi, dword [ebp - 0x58]
xor bl, bl
mov byte [ebp - 0x52], bl
cmp dword [eax + 0xb0], 0x3e8
jle 0x5353bc
push 4
push 0x1436
push 0x111
mov edx, dword [eax + 0x418]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov bl, 1
mov byte [ebp - 0x52], bl
mov byte [ebp - 4], 6
mov ecx, dword [edi + 0x74]
add ecx, 0x100
call fcn.005e31c0
xor esi, esi
mov dword [ebp - 0x60], esi
mov ecx, dword [edi + 0x74]
mov eax, dword [ecx + 0xb0]
cmp esi, eax
jge 0x535423
push esi
call fcn.004d12c0
test bl, bl
je 0x53541a
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 0x74]
mov edi, dword [ecx + 0xb0]
mov eax, esi
imul eax, eax, 0x64
cdq
idiv edi
test eax, eax
jle 0x53541a
push eax
push 0x143e
push 0x111
mov ecx, dword [ecx + 0x418]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
inc esi
mov dword [ebp - 0x60], esi
mov edi, dword [ebp - 0x58]
jmp 0x5353d3
mov dword [ebp - 4], 5
jmp 0x53543c
push 0
push 0x1437
push 0x111
mov edi, dword [ebp - 0x58]
mov edx, dword [edi + 0x74]
mov eax, dword [edx + 0x418]
push eax
mov esi, dword [sym.imp.USER32.dll_PostMessageA]
call esi
test bl, bl
je 0x535479
push 0
push 0x143d
push 0x111
mov ecx, dword [edi + 0x74]
mov edx, dword [ecx + 0x410]
push edx
call esi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.00401210
mov dword [ebp - 4], 0xffffffff
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0061d2ff
mov esp, ebp
pop ebp
ret