Function at 0x48d770
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0xffffffffffffffff
push 0x4b00c4
mov eax, dword fs:[0]
push eax
mov eax, 0x169cc
call fcn.0049ebb0
mov eax, dword [0x4c03a0]
xor eax, esp
mov dword [esp + 0x169c8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c03a0]
xor eax, esp
push eax
lea eax, [esp + 0x169e0]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x169f0]
xor ebp, ebp
test byte [0x4f9c30], 1
jne 0x48d7f1
or dword [0x4f9c30], 1
mov dword [esp + 0x169e8], ebp
mov ecx, 0x4f9540
call fcn.00485620
push 0x4b0b20
call fcn.004a0d23
add esp, 4
mov dword [esp + 0x169e8], 0xffffffff
mov ecx, 0x4f9540
mov dword [0x4f823c], 0x4f9540
call fcn.004655e0
mov ecx, 0x4f9638
call fcn.004655e0
mov ecx, 0x4f9730
call fcn.004655e0
cmp dword [0x4dbca4], ebp
mov byte [0x4f9c2f], 0
setne al
mov byte [0x4f9c2e], al
cmp ebx, ebp
jne 0x48d85d
mov ecx, dword [0x4dc210]
mov edx, dword [0x4c93a8]
push 0x4f9540
push 0x488300
push ecx
push str.FINDFILES
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
test eax, eax
je 0x48e039
push 0x48ae00
push ebp
push ebp
push 7
call fcn.00481ad0
push 0x4b5848
call fcn.0047fdb0
cmp ebx, ebp
je 0x48d8ca
xor eax, eax
jmp 0x48d880
mov cl, byte [eax + 0x4e69c4]
mov byte [esp + eax + 0x4dd0], cl
inc eax
test cl, cl
jne 0x48d880
mov byte [0x4f9c28], cl
push 0x4b175c
mov ecx, 0x4f9730
mov byte [0x4f9c2a], 1
mov byte [0x4f9c29], 1
call fcn.00465960
mov eax, dword [0x4e81f4]
push eax
mov ecx, 0x4f9540
call fcn.00416a00
jmp 0x48d999
cmp byte [0x4f9828], 0
mov byte [esp + 0x4dd0], 0
je 0x48d999
cmp byte [0x4f9c2b], 0
je 0x48d902
lea edi, [esp + 0x4dd0]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48d8f0
mov cx, word [0x4b5844]
mov word [edi], cx
cmp byte [0x4f9c2c], 0
je 0x48d925
lea edi, [esp + 0x4dd0]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48d913
mov dx, word [0x4b5840]
mov word [edi], dx
cmp byte [0x4f9c2d], 0
je 0x48d947
lea edi, [esp + 0x4dd0]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48d936
mov ax, word [0x4b583c]
mov word [edi], ax
lea edi, [esp + 0x4dd0]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48d950
mov cx, word [str.htc]
mov eax, 0x4f9828
mov word [edi], cx
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48d970
lea edi, [esp + 0x4dd0]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x48d981
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [0x4dbca4], ebp
je 0x48d9bb
lea edx, [esp + 0x61dc]
push edx
lea eax, [esp + 0x59e0]
push eax
mov ecx, 0x4e0c60
call fcn.004134e0
cmp byte [0x4f9c28], 0
mov dword [0x4f8238], ebp
mov byte [0x4f81e4], 0
mov byte [0x4f81e5], 1
je 0x48d9e8
cmp byte [0x4f9c2e], 0
jne 0x48d9e8
mov ecx, 2
jmp 0x48d9ea
xor ecx, ecx
mov eax, 0x4f9638
cmp ebx, ebp
je 0x48d9f5
mov eax, ebx
push ebp
push ebp
push ecx
push eax
lea ecx, [esp + 0x29b4]
call fcn.0045e680
mov dword [esp + 0x169e8], 1
lea ecx, [esp + 0xcc8]
call fcn.004680f0
lea ecx, [esp + 0xcec]
call fcn.004680f0
lea ecx, [esp + 0xd10]
call fcn.004680f0
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x29a8]
call fcn.0045f070
test eax, eax
jne 0x48df83
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x48da60
cmp dword [0x4dc1c0], ebp
jne 0x48df83
call fcn.00445860
mov eax, dword [0x4f8238]
cmp eax, ebp
je 0x48da94
movzx edx, byte [0x4f9c2e]
push edx
push eax
mov eax, dword [0x4db884]
push eax
call fcn.0048a820
mov dword [0x4f8238], ebp
cmp byte [esp + 0xb4], 0x2e
jne 0x48daaf
cmp byte [esp + 0xb5], 0x5c
lea ecx, [esp + 0xb6]
je 0x48dab6
lea ecx, [esp + 0xb4]
lea edx, [esp + 0x5ddc]
lea ecx, [ecx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x48dac0
push 0x50
lea ecx, [esp + 0x5de0]
push ecx
call fcn.00445670
push eax
push 0x523
call fcn.0045be10
push eax
lea edx, [esp + 0x55e4]
push edx
call fcn.0049e635
mov ecx, dword [0x4db884]
add esp, 0xc
lea eax, [esp + 0x55dc]
push eax
push 0x9b
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
cmp byte [0x4f9c2a], 0
je 0x48db55
mov ecx, 0x4f9730
call fcn.004654e0
mov ecx, 0x4f9730
call fcn.00465ac0
mov esi, eax
cmp esi, ebp
je 0x48db55
push ebp
lea edx, [esp + 0xb8]
push edx
push esi
call fcn.00444950
test al, al
jne 0x48dbab
mov ecx, 0x4f9730
call fcn.00465ac0
mov esi, eax
cmp esi, ebp
jne 0x48db32
cmp byte [0x4f9c29], 0
je 0x48df67
mov ecx, 0x4f9540
call fcn.004654e0
mov ecx, 0x4f9540
call fcn.00465ac0
cmp eax, ebp
je 0x48df67
mov edi, edi
push 4
lea edx, [esp + 0xb8]
push edx
push eax
call fcn.00444950
test al, al
jne 0x48de7d
mov ecx, 0x4f9540
call fcn.00465ac0
cmp eax, ebp
jne 0x48db80
jmp 0x48df67
cmp byte [esi], 0x2a
mov bl, 1
jne 0x48dbe3
cmp byte [esi + 1], 0
jne 0x48dbe3
cmp byte [0x4f9c2e], 0
jne 0x48dbec
push 1
push ebp
push ebp
push ebp
push ebp
lea eax, [esp + 0xc8]
push eax
mov ecx, 0x4e0c60
call fcn.00413620
mov bl, al
test bl, bl
je 0x48db55
cmp byte [0x4f9c2e], 0
je 0x48dbf3
mov byte [0x4e28a2], 1
cmp byte [esp + 0x4dd0], 0
push 1
setne cl
movzx edx, cl
push edx
lea eax, [esp + 0x4bc]
push eax
lea ecx, [esp + 0xc0]
push ecx
mov ecx, 0x4e0c60
call fcn.00414490
cmp eax, 2
je 0x48df83
cmp eax, 1
jne 0x48db55
push eax
push ebp
push ebp
push ebp
lea edx, [esp + 0x51ec]
push edx
lea eax, [esp + 0xc8]
push eax
mov ecx, 0x4e0c60
mov byte [esp + 0x51f4], 0
call fcn.00413620
lea ecx, [esp + 0x51dc]
push ecx
lea edx, [esp + 0xb8]
push edx
call fcn.00465330
test eax, eax
je 0x48dd02
lea eax, [esp + 0x51dc]
push eax
call edi
cmp eax, 0xffffffff
jne 0x48df67
push 0x4b1778
lea ecx, [esp + 0x51e0]
push ecx
call fcn.0044f4f0
lea edx, [esp + 0x51dc]
push edx
lea eax, [esp + 0xb8]
push eax
call fcn.00465330
test eax, eax
je 0x48dcc4
lea ecx, [esp + 0x51dc]
push ecx
call edi
cmp eax, 0xffffffff
jne 0x48df67
push 0x4b177c
lea edx, [esp + 0x51e0]
push edx
call fcn.0044f4f0
lea eax, [esp + 0x51dc]
push eax
lea ecx, [esp + 0xb8]
push ecx
call fcn.00465330
test eax, eax
je 0x48dd02
lea edx, [esp + 0x51dc]
push edx
call edi
cmp eax, 0xffffffff
jne 0x48df67
test bl, bl
je 0x48df67
cmp byte [esp + 0x4dd0], 0
mov ecx, 0x4e0c60
jne 0x48ddcf
push 1
lea eax, [esp + 0x1d78]
push eax
xor ebx, ebx
call fcn.00412a10
test al, al
je 0x48df67
jmp 0x48dd40
cmp dword [0x4dc1c0], ebp
jne 0x48df67
inc ebx
test bl, 0x1f
jne 0x48dd57
call fcn.00445860
mov ecx, 0x4f9540
call fcn.004654e0
mov ecx, 0x4f9540
call fcn.00465ac0
cmp eax, ebp
je 0x48ddae
nop
push 4
lea ecx, [esp + 0x1d78]
push ecx
push eax
call fcn.00444950
test al, al
jne 0x48dd94
mov ecx, 0x4f9540
call fcn.00465ac0
cmp eax, ebp
jne 0x48dd70
jmp 0x48ddae
push 0x4b1914
lea edx, [esp + 0x1d78]
push edx
lea eax, [esp + 0xbc]
push eax
call fcn.00485740
push 1
lea ecx, [esp + 0x1d78]
push ecx
mov ecx, 0x4e0c60
call fcn.00412a10
test al, al
jne 0x48dd40
jmp 0x48df67
lea edx, [esp + 0x14]
push edx
call fcn.00413570
call fcn.0047b3d0
push 0x4e79f4
push 0x4e75f4
mov ecx, 0x4e0c60
call fcn.00413520
mov eax, dword [esp + 0x24]
mov ecx, dword [0x4e81f4]
mov dword [0x4e6194], eax
call fcn.004655e0
mov ecx, 0x4f9540
call fcn.004654e0
mov ecx, 0x4f9540
call fcn.00465ac0
cmp eax, ebp
je 0x48de3a
mov edi, edi
mov ecx, dword [0x4e81f4]
push eax
call fcn.00465960
mov ecx, 0x4f9540
call fcn.00465ac0
cmp eax, ebp
jne 0x48de20
lea ecx, [esp + 0x4dd0]
push ecx
push 0x4b5834
push 0x4e69c3
mov byte [0x4e58b2], 1
mov dword [0x4e5854], ebp
mov dword [0x4e5878], ebp
call fcn.0049e635
add esp, 0xc
mov ecx, 0x4e0c60
mov byte [0x4e69a5], 1
call fcn.004111f0
jmp 0x48df67
cmp byte [esp + 0x4dd0], 0
jne 0x48deb5
lea eax, [esp + 0xb4]
push eax
push ebp
lea ecx, [esp + 0x4dd8]
push ecx
push ebp
push ebp
call fcn.00433b10
push ebp
push ebp
push ebp
push ebp
lea edx, [esp + 0x69ec]
push edx
call fcn.00433b10
jmp 0x48df67
lea ecx, [esp + 0x1154]
call fcn.0042ea90
mov byte [esp + 0x169e8], 2
push ebp
push 1
lea eax, [esp + 0x4bc]
push eax
lea ecx, [esp + 0xc0]
push ecx
lea ecx, [esp + 0x1164]
call fcn.0042ee80
test al, al
je 0x48df53
lea edx, [esp + 0xb4]
push edx
push ebp
lea eax, [esp + 0x4dd8]
push eax
push ebp
push ebp
call fcn.00433b10
push 0x10000
lea ecx, [esp + 0x69e0]
push ecx
lea ecx, [esp + 0x115c]
call fcn.0042f6b0
cmp eax, ebp
je 0x48df53
push ebp
push ebp
push ebp
push eax
lea edx, [esp + 0x69ec]
push edx
call fcn.00433b10
push 0x10000
lea eax, [esp + 0x69e0]
push eax
lea ecx, [esp + 0x115c]
call fcn.0042f6b0
cmp eax, ebp
jne 0x48df25
mov byte [esp + 0x169e8], 1
lea ecx, [esp + 0x1154]
call fcn.0042ee50
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x29a8]
call fcn.0045f070
test eax, eax
je 0x48da60
mov eax, dword [0x4f8238]
mov byte [0x4f81e5], 0
cmp eax, ebp
je 0x48dfad
movzx edx, byte [0x4f9c2e]
push edx
push eax
mov eax, dword [0x4db884]
push eax
call fcn.0048a820
mov dword [0x4f8238], ebp
push 0x270
mov byte [0x4f81e4], 0
call fcn.0045be10
mov ecx, dword [0x4db884]
push eax
push 0x9b
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
cmp dword [0x4dc1c0], ebp
je 0x48dfe8
mov edx, dword [0x4db884]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x48dfed
call fcn.0047f980
cmp dword [0x4dbca4], ebp
je 0x48e022
cmp byte [0x4f9c2f], 0
jne 0x48e018
lea eax, [esp + 0x61dc]
push eax
lea ecx, [esp + 0x59e0]
push ecx
mov ecx, 0x4e0c60
call fcn.00413320
mov ecx, 0x4dff38
call fcn.004428f0
mov dword [esp + 0x169e8], 0xffffffff
lea ecx, [esp + 0x29a4]
call fcn.0045e8f0
mov ecx, dword [esp + 0x169e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x169c8]
xor ecx, esp
call fcn.0049e626
add esp, 0x169d8
ret 4