Function at 0x4e4b40
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
mov edi, dword [ebp + 0x10]
cmp edi, 2
jae 0x4e4ba2
xor edi, edi
inc edi
mov esi, 0x2000
mov dword [ebp - 0x10], 0
mov ebx, esi
shr ebx, 0xc
and bl, byte [0x5571e4]
push edi
push esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
sete cl
and cl, byte [ebp - 0x10]
and cl, bl
cmp cl, 1
je 0x4e4bcd
test eax, eax
je 0x4e4b92
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
xchg dword [0x5571d8], eax
xor eax, eax
jmp 0x4e4b8a
lea eax, [edi - 2]
cmp eax, 6
ja case.default.0x4e4bb3
mov esi, 0x3000
jmp dword [eax*4 + 0x53642c]
mov edi, 4
mov al, 1
mov dword [ebp - 0x10], eax
jmp 0x4e4b5e
mov edi, 0x40
jmp case.0x4e4bb3.2
mov ebx, edi
mov edi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4bea
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4c1e
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4c56
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4c8e
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4cc6
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4cfe
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4d36
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4d6e
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4da6
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push esi
push dword [ebp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
jne 0x4e4b8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [eax - 0x5ae]
cmp ecx, 2
jb 0x4e4dde
cmp eax, 0x27b
jne 0x4e4b92
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4e4b92
int3
mov edi, 0x20
jmp case.0x4e4bb3.2