Function at 0x4555f2
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
push ebx
push esi
push edi
mov edi, 0x4bc518
mov eax, edi
xor esi, esi
test eax, eax
mov ebx, ecx
mov dword [ebp - 4], esi
je 0x455617
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
push eax
lea ecx, [ebx + 0x260]
call fcn.004039ec
push esi
call dword [sym.imp.ole32.dll_OleInitialize]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, ebx
call fcn.00451537
mov edi, eax
cmp edi, esi
mov dword [ebp - 0x18], edi
je 0x455ab7
push esi
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x1032
push edi
call esi
push 0
push 0
push 0x1004
push edi
mov dword [ebp - 0x14], eax
call esi
mov edx, eax
mov eax, dword [ebp - 0x14]
push 7
mov dword [ebx + 0xa4], edi
mov dword [ebx + 0xa8], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x3c]
cmp dword [ebp - 0x14], eax
push 1
rep stosd dword es:[edi], eax
pop edi
mov dword [ebp - 0x10], edx
mov dword [ebx + 0xac], edx
mov dword [ebp - 0x40], 0x20
mov dword [ebp - 0x3c], edi
jne 0x455774
cmp edx, edi
jne 0x4556b1
mov dword [ebp - 4], edi
push 0xa1
lea eax, [ebp - 0xc]
jmp 0x4556c0
mov dword [ebp - 4], 2
push 0xa2
lea eax, [ebp - 0x18]
push eax
call fcn.00461337
mov eax, dword [eax]
pop ecx
pop ecx
push eax
lea ecx, [ebx + 0x214]
push dword [ebp - 0x10]
push str._d__s
push ecx
call fcn.00403d66
add esp, 0x10
test byte [ebp - 4], 2
je 0x4556f4
and dword [ebp - 4], 0xfffffffd
lea ecx, [ebp - 0x18]
call fcn.004038fb
test byte [ebp - 4], 1
je 0x455702
lea ecx, [ebp - 0xc]
call fcn.004038fb
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0x40]
mov edi, 0x851f
push eax
mov eax, dword [ebx + 0xdc]
push edi
push 0x440
push dword [eax + 0x224]
call esi
lea esi, [ebx + 0x214]
lea ecx, [ebx + 0x218]
push esi
call fcn.00403a8c
push 0x80
push ecx
mov ecx, esp
push esi
call fcn.004038b5
mov eax, dword [ebx + 0xdc]
push edi
push dword [eax + 0x224]
call fcn.0048ebf6
mov ecx, dword [ebx + 0xdc]
add esp, 0x10
call fcn.00475dc6
cmp dword [0x4c3234], 4
jne 0x455ab7
jmp 0x4559e8
cmp dword [ebp - 0x14], edi
jne 0x4558ab
lea ecx, [ebp - 0x60]
call fcn.0042e7d7
mov edi, dword [ebp - 0x18]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x5c], edi
call fcn.004300af
cmp eax, 0xffffffff
je 0x4559cd
push eax
push edi
mov ecx, ebx
call fcn.00453383
test eax, eax
mov dword [ebp - 0xc], eax
je 0x4559cd
cmp dword [ebx + 0x1bc], 0
je 0x4559cd
push eax
lea ecx, [ebp - 0x20]
call fcn.0048938d
mov eax, dword [0x4af550]
lea edx, [ebp - 0x168]
push edx
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0x1bc]
push 0x8000
push dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
lea eax, [ebp - 8]
push 0
push eax
lea esi, [ebp - 0x168]
sub esp, 0x108
push 0x42
pop ecx
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.0048d88e
add esp, 0x110
cmp dword [0x4c3234], 4
jne 0x455825
lea eax, [ebp - 8]
lea ecx, [ebx + 0x260]
push eax
call fcn.00403a8c
mov eax, dword [ebp - 8]
cmp dword [eax - 8], 0
je 0x4559a8
mov eax, dword [ebx + 0x1bc]
mov dword [ebp - 0x10], 0x20088000
test eax, eax
je 0x455853
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0xc]
push edx
push 1
push eax
call dword [ecx + 0x24]
push dword [ebp - 0xc]
call dword [sym.imp.SHELL32.dll_ILFree]
test byte [ebp - 0xd], 0x20
je 0x4559b7
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x4559b7
cmp eax, 0xffffffff
je 0x4559b7
cmp dword [0x4c684c], 1
jle 0x45591b
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp - 0x20]
call fcn.004893ad
lea ecx, [ebp - 0x60]
call fcn.0042e86b
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4c3234], 4
jne 0x4558bf
mov ecx, dword [ebx + 0xdc]
call fcn.00478151
lea eax, [ebp - 0x40]
mov edi, 0x851f
push eax
mov eax, dword [ebx + 0xdc]
push edi
push 0x440
mov dword [ebp - 0x34], 2
push dword [eax + 0x224]
call esi
mov ecx, dword [ebx + 0xdc]
xor eax, eax
cmp dword [0x4c684c], 2
sete al
mov dword [ebp - 0x10], eax
call fcn.00475dc6
cmp dword [ebp - 0x14], 1
jne 0x4559f8
mov dword [ebp - 4], 4
push 0x9f
lea eax, [ebp - 8]
jmp 0x455a07
lea eax, [ebp - 0x40]
mov edi, 0x851f
push eax
mov eax, dword [ebx + 0xdc]
push edi
push 0x440
mov dword [ebp - 0x34], 3
push dword [eax + 0x224]
call dword [sym.imp.USER32.dll_SendMessageW]
lea esi, [ebx + 0x218]
lea eax, [ebp - 8]
push eax
mov ecx, esi
call fcn.00403a8c
push 0x80
push ecx
mov ecx, esp
push esi
call fcn.004038b5
mov eax, dword [ebx + 0xdc]
push edi
push dword [eax + 0x224]
call fcn.0048ebf6
add esp, 0x10
cmp dword [0x4c3234], 4
jne 0x45598b
mov ecx, dword [ebx + 0xdc]
call fcn.00478151
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp - 0x20]
call fcn.004893ad
lea ecx, [ebp - 0x60]
call fcn.0042e86b
jmp 0x455ab7
cmp dword [ebp - 0xc], 0
je 0x4559b7
push dword [ebp - 0xc]
call dword [sym.imp.SHELL32.dll_ILFree]
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp - 0x20]
call fcn.004893ad
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x60]
call fcn.0042e86b
push 0
push 0x1b208
push 0x111
push dword [ebx + 4]
call esi
mov esi, eax
mov ecx, dword [ebx + 0xdc]
call fcn.00478151
jmp 0x455ab7
mov dword [ebp - 4], 8
push 0xa0
lea eax, [ebp - 0xc]
push eax
call fcn.00461337
mov eax, dword [eax]
pop ecx
pop ecx
lea esi, [ebx + 0x214]
push eax
push dword [ebp - 0x14]
push str._d__s
push esi
call fcn.00403d66
add esp, 0x10
test byte [ebp - 4], 8
je 0x455a3b
and dword [ebp - 4], 0xfffffff7
lea ecx, [ebp - 0xc]
call fcn.004038fb
test byte [ebp - 4], 4
je 0x455a49
lea ecx, [ebp - 8]
call fcn.004038fb
push esi
lea ecx, [ebx + 0x218]
call fcn.00403a8c
push 0x80
push ecx
mov ecx, esp
push esi
call fcn.004038b5
mov eax, dword [ebx + 0xdc]
push edi
push dword [eax + 0x224]
call fcn.0048ebf6
add esp, 0x10
cmp dword [0x4c684c], 0
je 0x455aac
cmp dword [ebx + 0x3c], 0
je 0x455ab7
push dword [ebp - 0x14]
mov ecx, ebx
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.00455abe
cmp eax, 0xffffffff
jne 0x455aac
push dword [ebp - 0x14]
mov ecx, ebx
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.004561b5
mov ecx, dword [ebx + 0xdc]
call fcn.00475dc6
pop edi
pop esi
pop ebx
leave
ret 4