Function at 0x4aa2a6
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push esi
mov esi, ecx
cmp byte [esi + 0x3f], 0
je 0x4aa2bc
xor al, al
jmp 0x4aa5fc
push edi
call fcn.004a9dd4
mov edi, eax
mov ecx, edi
mov dword [ebp - 4], edi
call fcn.004a3890
test al, al
jne 0x4aa2f3
push dword [0x550628]
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x40], 0x30
call fcn.004693e3
pop ecx
pop ecx
jmp 0x4aa338
cmp byte [0x54afd4], 0
je 0x4aa348
call fcn.004887dd
mov edx, eax
mov ecx, edi
call fcn.00472102
test al, al
jne 0x4aa348
push 0x4f3aa0
push dword [0x550640]
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x40], 0x34
call fcn.004693e3
add esp, 0xc
cmp eax, 6
je 0x4aa348
mov dl, 1
mov ecx, edi
call fcn.0046b197
xor al, al
jmp 0x4aa5fb
mov eax, dword [esi + 0x20]
mov eax, dword [eax + 0x168]
cmp byte [eax + 0x28], 0
push ebx
jne 0x4aa3b1
test dword [esi + 0x34], 0x200
jne 0x4aa3ba
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ecx, edi
lea ebx, [ecx + 2]
mov dx, word [ecx]
inc ecx
inc ecx
test dx, dx
jne 0x4aa36d
sub ecx, ebx
sar ecx, 1
cmp eax, 0xffffffff
je 0x4aa384
test al, 0x10
jne 0x4aa390
test ecx, ecx
jle 0x4aa3b1
cmp word [edi + ecx*2 - 2], 0x5c
jne 0x4aa3b1
mov ecx, dword [esi + 0x20]
call fcn.0040a126
mov edx, eax
mov ecx, edi
call fcn.004a307f
mov dl, 1
mov ecx, edi
mov ebx, eax
call fcn.0046b197
mov dword [ebp - 4], ebx
mov edi, ebx
test dword [esi + 0x34], 0x200
je 0x4aa3cb
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + 0x168]
push edi
call fcn.00441708
jmp 0x4aa3da
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + 0x168]
push edi
call fcn.00442311
push 0x4e6
mov ecx, esi
call fcn.00467b79
movzx ebx, al
neg ebx
sbb ebx, ebx
push 0x4b4
mov ecx, esi
and ebx, 0x10
call fcn.00467b79
movzx edi, al
neg edi
sbb edi, edi
and edi, 0x40
or edi, ebx
mov ebx, dword [esi + 0x38]
push 0x4b2
mov ecx, esi
call fcn.00467b79
mov ecx, dword [ebx]
movzx eax, al
neg eax
sbb eax, eax
and eax, 2
and ecx, 0xffffffad
or eax, ecx
or eax, edi
push 0x606
mov ecx, esi
mov dword [ebx], eax
call fcn.00467b79
neg al
sbb al, al
inc al
mov byte [0x54b1c2], al
mov eax, dword [esi + 0x30]
xor ebx, ebx
xor edi, edi
cmp dword [eax + 0x14], ebx
je 0x4aa478
mov ecx, dword [esi + 0x30]
push edi
call fcn.00429b51
test al, al
jne 0x4aa46f
mov ecx, dword [esi + 0x30]
push edi
call fcn.00429af0
mov eax, dword [eax + 0x10]
cmp eax, ebx
je 0x4aa46f
mov byte [eax + 0x24], bl
mov eax, dword [esi + 0x30]
inc edi
cmp edi, dword [eax + 0x14]
jne 0x4aa44f
mov edi, 0x200
test dword [esi + 0x34], edi
jne 0x4aa4a6
push 0x5c
push dword [ebp - 4]
call sub.MSVCRT.dll_wcsrchr
pop ecx
pop ecx
cmp eax, ebx
je 0x4aa499
xor ecx, ecx
mov word [eax], cx
jmp 0x4aa4a6
mov ecx, dword [ebp - 4]
mov dl, 1
call fcn.0046b197
mov dword [ebp - 4], ebx
mov edx, dword [ebp - 4]
cmp edx, ebx
je 0x4aa4b7
mov ecx, 0x54b920
call fcn.004a3651
push ebx
push 0x4be
mov ecx, esi
call fcn.004a9737
mov ecx, eax
call fcn.0048dc82
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
call fcn.00413418
mov ecx, dword [ebp - 0xc]
mov dl, 1
call fcn.0046b197
mov ecx, dword [esi + 0x20]
mov dword [ebp - 8], ebx
test dword [esi + 0x34], edi
je 0x4aa507
call fcn.0040d195
mov ecx, eax
call fcn.0048bfe7
mov edx, eax
lea ecx, [ebp - 8]
call fcn.0048d7ba
jmp 0x4aa50f
call fcn.004087a6
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x20]
mov edx, dword [ebp - 8]
push ebx
push dword [eax]
call fcn.0041e7b6
test al, al
jne 0x4aa529
mov byte [esi + 0x3e], bl
jmp 0x4aa538
push dword [esi + 0x28]
mov ecx, dword [esi + 0x20]
xor dl, dl
mov byte [esi + 0x3e], 1
call dword [esi + 0x24]
cmp byte [esi + 0x41], bl
je 0x4aa5ee
call fcn.004336a1
mov dword [ebp - 0x14], eax
cmp eax, ebx
je 0x4aa5ee
mov eax, dword [esi + 4]
push 0x5d6
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 4], eax
call fcn.0046e3c9
mov esi, dword [esi + 0x20]
mov ecx, esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x10], esi
call fcn.00490c85
test al, al
je 0x4aa5e1
push 4
push 1
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.0048e987
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x1004
push dword [ebp - 4]
call esi
xor edi, edi
cmp eax, ebx
mov dword [ebp - 0x18], eax
jle 0x4aa5e1
push 0xf000
push edi
push 0x102c
push dword [ebp - 4]
call esi
shr eax, 0xc
dec eax
je 0x4aa5db
mov ecx, dword [ebp - 0x14]
push edi
call fcn.004335fe
cmp eax, ebx
je 0x4aa5db
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00435491
inc edi
cmp edi, dword [ebp - 0x18]
jl 0x4aa5ad
lea ecx, [ebp - 0x24]
call fcn.0048e45f
call fcn.0046e3e5
mov ecx, dword [ebp - 8]
mov dl, 1
call fcn.0046b197
mov al, 1
pop ebx
pop edi
pop esi
leave
ret