Function at 0x48d3dd
Capabilities:
Check if file exists
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x218
mov eax, dword [0x4e22e4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 0x1ff
lea eax, [ebp - 0x203]
mov edi, ecx
mov ebx, edx
push 0
push eax
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x218], esi
mov byte [ebp - 0x204], 0
call fcn.00401f80
add esp, 0xc
mov edx, edi
call fcn.00439c75
test eax, eax
jne 0x48d55b
mov edx, ebx
call fcn.00439c75
test eax, eax
jne 0x48d55b
test esi, esi
jne 0x48d455
mov dword [ebp - 0x218], 0x4af213
push 0x200
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.00401f80
push edi
call fcn.00401a80
add esp, 0x10
cmp eax, 0x104
jb 0x48d56c
mov eax, edi
call fcn.00439e40
push ebx
mov esi, eax
call fcn.0043833c
mov edi, eax
pop ecx
mov dword [ebp - 0x214], edi
test esi, esi
je 0x48d550
test edi, edi
je 0x48d549
push edi
push esi
call fcn.00403e4c
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
test eax, eax
jne 0x48d533
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x48d533
mov edi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test bl, 2
je 0x48d4ef
xor ebx, 2
push ebx
push esi
call edi
push dword [ebp - 0x214]
push esi
call fcn.00403e4c
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
test eax, eax
jne 0x48d533
test bl, 4
je 0x48d513
xor ebx, 4
push ebx
push esi
call edi
push dword [ebp - 0x214]
push esi
call fcn.00403e4c
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
test eax, eax
jne 0x48d533
test bl, 1
je 0x48d533
xor ebx, 1
push ebx
push esi
call edi
push dword [ebp - 0x214]
push esi
call fcn.00403e4c
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
push esi
call fcn.00401a00
push dword [ebp - 0x214]
call fcn.00401a00
jmp 0x48d61f
push esi
call fcn.00401a00
pop ecx
test edi, edi
je 0x48d55b
push edi
call fcn.00401a00
pop ecx
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401317
leave
ret
push ebx
push edi
call fcn.00403f1f
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
test eax, eax
jne 0x48d62e
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x48d55b
mov edi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test bl, 2
je 0x48d5c5
xor ebx, 2
push ebx
push dword [ebp - 0x210]
call edi
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
call fcn.00403f1f
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
test eax, eax
jne 0x48d62e
test bl, 4
je 0x48d5f3
xor ebx, 4
push ebx
push dword [ebp - 0x210]
call edi
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
call fcn.00403f1f
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
test eax, eax
jne 0x48d62e
test bl, 1
je 0x48d55b
xor ebx, 1
push ebx
push dword [ebp - 0x210]
call edi
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
call fcn.00403f1f
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
pop ecx
pop ecx
je 0x48d55b
xor edi, edi
push edi
push 4
push edi
push dword [ebp - 0x208]
call fcn.00403f36
add esp, 0x10
test eax, eax
je 0x48d67f
inc dword [0x4fa93c]
cmp dword [0x4fa93c], 0xa
jge 0x48d67f
push str._GetLastError_
push dword [ebp - 0x20c]
lea eax, [ebp - 0x204]
push dword [ebp - 0x210]
push str.:2:fopen_wrapper___s_____s___EAP:_setvbuf__IONBF__FAILED:__s
push 0x200
push eax
call fcn.004392ef
add esp, 0x18
xor ebx, ebx
cmp dword [0x4faee0], ebx
je 0x48d717
cmp edi, 0xff
jge 0x48d6a1
inc edi
cmp dword [edi*4 + 0x4faee0], ebx
jne 0x48d68d
jmp 0x48d717
xor edi, edi
or edx, 0xffffffff
xor eax, eax
mov ecx, dword [eax*4 + 0x4fb2e0]
cmp ecx, edx
jae 0x48d6b7
mov edi, eax
mov edx, ecx
inc eax
cmp eax, 0x100
jl 0x48d6a8
inc dword [0x4fa9dc]
cmp dword [0x4fa9dc], 0xa
jge 0x48d6fa
push dword [edi*4 + 0x4fa9e0]
lea eax, [ebp - 0x204]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push str.:8:fopen_wrapper___s_____s___EAP:_the_register_is_full__This_indicates_an_fopen_fclose_leak__The_oldest_entry___s__has_been_deleted.
push 0x200
push eax
call fcn.004392ef
add esp, 0x18
lea esi, [edi*4 + 0x4fa9e0]
mov eax, dword [esi]
mov dword [edi*4 + 0x4faee0], ebx
cmp eax, ebx
je 0x48d717
push eax
call fcn.00401a00
pop ecx
mov dword [esi], ebx
mov eax, dword [ebp - 0x208]
mov esi, edi
mov dword [esi*4 + 0x4faee0], eax
call fcn.0041a877
push dword [ebp - 0x210]
mov dword [esi*4 + 0x4fb2e0], eax
call fcn.00401a80
pop ecx
push 1
push dword [ebp - 0x218]
mov ebx, eax
call fcn.00401a80
pop ecx
lea eax, [eax + ebx + 0xa]
push eax
call fcn.00401a3a
pop ecx
pop ecx
mov dword [esi*4 + 0x4fa9e0], eax
test eax, eax
jne 0x48d777
and dword [esi*4 + 0x4faee0], eax
mov eax, dword [ebp - 0x208]
jmp 0x48d55d
push dword [ebp - 0x210]
push eax
call fcn.00401ba0
push str.rwbt
push dword [ebp - 0x20c]
mov byte [edi + 0x4fade0], 0
call fcn.00439609
add esp, 0x10
test eax, eax
je 0x48d7a8
mov byte [edi + 0x4fade0], 1
push 0x4b20ec
push dword [ebp - 0x20c]
call fcn.00439609
pop ecx
pop ecx
test eax, eax
je 0x48d7c5
or byte [edi + 0x4fade0], 2
push 0x4b20f0
push dword [ebp - 0x20c]
call fcn.00439609
pop ecx
pop ecx
test eax, eax
je 0x48d7e2
or byte [edi + 0x4fade0], 4
push 0x4b20f4
push dword [ebp - 0x20c]
call fcn.00439609
pop ecx
pop ecx
test eax, eax
je 0x48d7ff
or byte [edi + 0x4fade0], 8
push 0x4af460
push dword [ebp - 0x20c]
call fcn.00439609
pop ecx
pop ecx
test eax, eax
je 0x48d81c
or byte [edi + 0x4fade0], 0x10
push 0x4b20f8
push dword [ebp - 0x20c]
call fcn.00439609
pop ecx
pop ecx
test eax, eax
je 0x48d839
or byte [edi + 0x4fade0], 0x20
mov eax, dword [esi*4 + 0x4fa9e0]
push dword [ebp - 0x218]
lea eax, [eax + ebx + 1]
push eax
mov dword [esi*4 + 0x4fb6e0], eax
call fcn.00401ba0
mov eax, dword [ebp + 0xc]
pop ecx
pop ecx
lea edx, [ebp - 0x204]
mov dword [esi*4 + 0x4fbae0], eax
call fcn.00439c75
test eax, eax
jne 0x48d76c
cmp dword [0x4fbee0], eax
jne 0x48d76c
and dword [0x4fbee0], eax
jmp 0x48d76c