Function at 0x45de30
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x484
mov eax, dword [ebp + 8]
mov al, byte [eax + 1]
push ebx
mov cl, 1
cmp cl, al
push esi
sbb esi, esi
mov dl, 2
cmp dl, al
push edi
sbb edi, edi
and edi, dword [0x4d85e8]
mov ecx, 3
cmp cl, al
sbb ebx, ebx
and ebx, dword [0x4d85ec]
mov dl, 4
cmp dl, al
sbb ecx, ecx
and ecx, dword [0x4d85f0]
mov edx, 5
cmp dl, al
sbb edx, edx
and edx, dword [0x4d85f4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edx
mov edx, 6
cmp dl, al
sbb edx, edx
and edx, dword [0x4d85f8]
mov dword [esp + 0x18], edx
mov dl, 7
cmp dl, al
sbb eax, eax
and eax, dword [0x4d85fc]
and esi, dword [0x4d85e4]
mov dword [esp + 0x1c], eax
je 0x45debf
mov ecx, esi
call fcn.0041a1d0
mov ecx, dword [esp + 0x14]
test edi, edi
je 0x45dece
mov ecx, edi
call fcn.0041a1d0
mov ecx, dword [esp + 0x14]
test ebx, ebx
je 0x45dedd
mov ecx, ebx
call fcn.0041a1d0
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x45dee6
call fcn.0041a1d0
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x45def3
call fcn.0041a1d0
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x45df00
call fcn.0041a1d0
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x45df0d
call fcn.0041a1d0
mov eax, dword [ebp + 0xc]
push 0x2a
push eax
mov byte [esp + 0x17], 0
call fcn.00499df9
add esp, 8
test eax, eax
jne 0x45df4a
mov ecx, dword [ebp + 0xc]
push 0x3f
push ecx
call fcn.00499df9
add esp, 8
test eax, eax
jne 0x45df4a
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x45df6c
jmp 0x45e158
mov ecx, dword [ebp + 0xc]
lea eax, [esp + 0x240]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x45e158
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea edx, [esp + 0x10]
push edx
push 0x4ad810
push 1
push 0
push 0x4ad820
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x45e14b
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x24]
push edx
push 0x4ad830
push eax
mov eax, dword [ecx]
call eax
test eax, eax
js 0x45e13f
mov eax, dword [esp + 0x24]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
push 0
push edx
push eax
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x45e133
test esi, esi
je 0x45dffb
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push 2
push 0
push 0x104
lea edx, [esp + 0x3c]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ecx
push esi
call fcn.004825d0
test edi, edi
je 0x45e026
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x20]
push 0x104
lea ecx, [esp + 0x34]
push ecx
push eax
call edx
push 1
push 0
push 0xffffffffffffffff
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004825d0
test ebx, ebx
je 0x45e051
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push 0x104
lea edx, [esp + 0x34]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ecx
push ebx
call fcn.004825d0
mov esi, dword [esp + 0x14]
test esi, esi
je 0x45e080
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x18]
push 0x104
lea ecx, [esp + 0x34]
push ecx
push eax
call edx
push 1
push 0
push 0xffffffffffffffff
lea eax, [esp + 0x3c]
push eax
push esi
call fcn.004825d0
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
test esi, esi
jne 0x45e090
test edi, edi
je 0x45e0ee
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push 0x104
lea edx, [esp + 0x38]
push edx
push eax
mov eax, dword [ecx + 0x40]
call eax
test esi, esi
je 0x45e0c0
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ecx
push esi
call fcn.004825d0
test edi, edi
je 0x45e0ee
cmp word [esp + 0x30], 0
je 0x45e0e7
mov eax, dword [esp + 0x28]
xor edx, edx
test eax, eax
setns dl
push 0x18
add eax, edx
cdq
push edx
push eax
mov eax, edi
call fcn.004010e0
jmp 0x45e0ee
mov ecx, edi
call fcn.0041a1d0
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x45e117
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
push eax
mov eax, dword [ecx + 0x38]
call eax
mov eax, dword [esp + 0x2c]
cdq
push 0x18
push edx
push eax
mov eax, esi
call fcn.004010e0
mov ecx, dword [0x4d8ea8]
push 1
push 0
push 0xffffffffffffffff
push 0x4af9cc
push ecx
call fcn.004825d0
mov byte [esp + 0xf], 1
mov eax, dword [esp + 0x24]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [esp + 0xf], 0
jne 0x45e1a3
mov eax, dword [0x4d4b04]
test byte [eax + 0x100], 1
jne 0x45e186
mov ecx, dword [0x4d8ea8]
push 1
push 0
push 0xffffffffffffffff
push 0x4b356c
push ecx
call fcn.004825d0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edi, dword [ebp + 8]
push 0x4af9bc
push 0
push 0x4b356c
call fcn.00439a40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 8