Function at 0x4f4540
Capabilities:
Get file system object information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52be6d
mov eax, dword fs:[0]
push eax
mov eax, 0x13c0
call fcn.004f9af0
mov eax, dword [0x579630]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x13b4], esi
cmp dword [esi + 0xdc], 0
jne 0x4f458d
mov eax, 0x80004005
jmp 0x4f4c37
cmp dword [esi + 0x5c], 0
jne 0x4f459a
xor eax, eax
jmp 0x4f4c37
xorps xmm0, xmm0
mov dword [ebp - 0x1060], 0
movq qword [ebp - 0x1068], xmm0
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1060], 0
push 0x54bd1c
lea ecx, [ebp - 0x105c]
mov dword [ebp - 4], 0
call fcn.004076f0
lea eax, [ebp - 0x1068]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x105c]
push eax
lea eax, [esi + 0x4c]
push eax
call fcn.00421d60
add esp, 0xc
mov byte [ebp - 4], 0
cmp dword [ebp - 0x1048], 8
mov ebx, eax
mov dword [ebp - 0x13bc], ebx
jb 0x4f4625
push dword [ebp - 0x105c]
call fcn.004085be
add esp, 4
xor edi, edi
test ebx, ebx
je 0x4f4c04
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
mov dword [ebp - 0x13c0], ecx
lea ecx, [ecx]
mov eax, dword [ebp - 0x1068]
add eax, ecx
mov dword [ebp - 0x1048], 7
xor ecx, ecx
mov dword [ebp - 0x104c], 0
push 0xffffffffffffffff
push ecx
mov word [ebp - 0x105c], cx
lea ecx, [ebp - 0x105c]
push eax
call fcn.00407d00
cmp dword [ebp - 0x104c], 0
mov byte [ebp - 4], 2
jne 0x4f46a5
cmp dword [ebp - 0x1048], 8
mov byte [ebp - 4], 0
jb 0x4f4be9
push dword [ebp - 0x105c]
call fcn.004085be
add esp, 4
jmp 0x4f4be9
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.0041fe40
add esp, 0xc
test al, al
je 0x4f4681
push 0x40
lea eax, [ebp - 0x10ac]
push 0
push eax
call fcn.004f9050
add esp, 0xc
lea ecx, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push ecx
push eax
lea ecx, [ebp - 0x10ac]
call fcn.00473bd0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 3
call fcn.00477e00
test al, al
jne 0x4f4732
lea ecx, [ebp - 0x10a8]
mov byte [ebp - 4], 4
call fcn.00410ed0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 2
call fcn.00410ed0
jmp 0x4f4681
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.004a75e0
add esp, 8
test al, al
jne 0x4f476a
lea ecx, [ebp - 0x10a8]
mov byte [ebp - 4], 5
call fcn.00410ed0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 2
call fcn.00410ed0
jmp 0x4f4681
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x4f4bcb
lea edx, [ebp - 0x10f0]
mov dword [ebp - 0x10f0], eax
push edx
mov dword [ebp - 0x106c], eax
lea edx, [ebp - 0x106c]
mov eax, dword [esi + 0xdc]
push edx
push 0
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
test eax, eax
js 0x4f49b0
mov ecx, dword [ebp - 0x10f0]
test ecx, ecx
je 0x4f49b6
push 0x30
lea eax, [ebp - 0x1040]
push 0
push eax
call fcn.004f9050
add esp, 0xc
mov dword [ebp - 0x1040], 0x37050003
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x1038], 1
cmovae eax, dword [ebp - 0x105c]
push eax
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1018], 0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test eax, eax
je 0x4f4837
mov dword [ebp - 0x1030], 0x3704001f
mov dword [ebp - 0x1028], eax
push 0x2b0
lea eax, [ebp - 0x13ac]
mov dword [ebp - 0x13b0], 0
push 0
push eax
call fcn.004f9050
add esp, 0xc
lea ecx, [ebp - 0x13b0]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0x200
push 0x2b4
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x4f489f
lea eax, [ebp - 0x13a4]
mov dword [ebp - 0x1020], 0x3001001f
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x10f8]
push edx
lea edx, [ebp - 0x1040]
mov dword [ebp - 0x10f8], 0
push edx
mov ecx, dword [eax]
push 3
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x4f49b0
mov ecx, dword [ebp - 0x10f8]
test ecx, ecx
je 0x4f49b0
xor ebx, ebx
cmp dword [ecx], ebx
jbe 0x4f499e
xor eax, eax
mov dword [ebp - 0x1044], eax
lea ecx, [ecx]
cmp dword [eax + ecx + 0xc], 0x80040103
movq xmm0, qword [eax + ecx + 4]
movq qword [ebp - 0x13cc], xmm0
jne 0x4f4986
push dword [ebp - 0x1028]
call fcn.004f2ab0
push dword [ebp - 0x1018]
mov edi, eax
call fcn.004f2ab0
add esp, 8
mov esi, eax
test edi, edi
je 0x4f496d
test esi, esi
je 0x4f4964
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x1040]
push 0
push edx
mov dword [ebp - 0x1030], 0x3704001e
mov dword [ebp - 0x1028], edi
mov dword [ebp - 0x1020], 0x3001001e
mov dword [ebp - 0x1018], esi
mov ecx, dword [eax]
push 3
push eax
call dword [ecx + 0x20]
push edi
call fcn.004039d2
add esp, 4
test esi, esi
je 0x4f497a
push esi
call fcn.004039d2
add esp, 4
mov eax, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x10f8]
inc ebx
add eax, 0xc
mov dword [ebp - 0x1044], eax
cmp ebx, dword [ecx]
jb 0x4f48f0
mov esi, dword [ebp - 0x13b4]
mov eax, dword [esi + 0xac]
push ecx
mov eax, dword [eax + 4]
call eax
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x10f0]
mov dword [ebp - 0x10f4], 0
test ecx, ecx
je 0x4f4bae
mov eax, dword [ecx]
lea edx, [ebp - 0x10f4]
push edx
push 3
push 1
push 0x55e8d0
push 0x37010102
push ecx
call dword [eax + 0x1c]
test eax, eax
js 0x4f4ba8
cmp dword [ebp - 0x10f4], 0
je 0x4f4ba8
push 0x40
lea eax, [ebp - 0x10ec]
push 0
push eax
call fcn.004f9050
add esp, 0xc
lea eax, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea ecx, [ebp - 0x10ec]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push 0
push eax
call fcn.00473bd0
lea ecx, [ebp - 0x10ec]
mov byte [ebp - 4], 6
call fcn.00477e00
test al, al
je 0x4f4ba1
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.00478b70
test al, al
je 0x4f4ba1
push 0x1000
xor edi, edi
lea eax, [ebp - 0x1010]
push edi
push eax
call fcn.004f9050
add esp, 0xc
mov dword [ebp - 0x1044], edi
lea eax, [ebp - 0x1044]
push edi
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call ebx
test eax, eax
je 0x4f4b5f
jmp 0x4f4ab0
mov edx, dword [ebp - 0x1044]
test edx, edx
je 0x4f4b59
lea esi, [ebp - 0x1010]
jmp 0x4f4ad0
mov eax, dword [ebp - 0x10f4]
lea edi, [ebp - 0x10fc]
push edi
push edx
mov dword [ebp - 0x10fc], 0
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x10]
mov ecx, dword [ebp - 0x10fc]
mov edi, eax
test ecx, ecx
je 0x4f4b9a
mov edx, dword [ebp - 0x1044]
cmp ecx, edx
ja 0x4f4b9a
test edi, edi
js 0x4f4b59
sub edx, ecx
add esi, ecx
mov dword [ebp - 0x1044], edx
test edx, edx
jne 0x4f4ad0
push 0x1000
push edx
lea eax, [ebp - 0x1010]
push eax
call fcn.004f9050
add esp, 0xc
lea eax, [ebp - 0x1044]
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call ebx
test eax, eax
jne 0x4f4ab0
mov esi, dword [ebp - 0x13b4]
mov eax, dword [ebp - 0x10f4]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x10f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x10ec]
mov dword [ebp - 0x10f4], 0
mov byte [ebp - 4], 3
call fcn.0045bc00
mov ecx, dword [ebp - 0x10f0]
jmp 0x4f4bb3
mov edi, 0x8004000d
jmp 0x4f4b59
mov edi, 0x8004000c
jmp 0x4f4b5f
mov ecx, dword [ebp - 0x10f0]
mov edi, 0x80004005
test ecx, ecx
je 0x4f4bcb
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x10]
mov eax, dword [ebp - 0x10f0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 2
call fcn.0045bc00
lea ecx, [ebp - 0x105c]
mov byte [ebp - 4], 0
call fcn.004087d0
mov ecx, dword [ebp - 0x13c0]
add ecx, 0x18
dec dword [ebp - 0x13bc]
mov dword [ebp - 0x13c0], ecx
jne 0x4f4640
mov eax, dword [ebp - 0x1068]
test eax, eax
je 0x4f4c35
push dword [ebp - 0x106c]
lea ecx, [ebp - 0x13b5]
push ecx
push dword [ebp - 0x1064]
push eax
call fcn.00408580
push dword [ebp - 0x1068]
call fcn.004085be
add esp, 0x14
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401590
mov esp, ebp
pop ebp
ret