Function at 0x44f612
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x46c
mov eax, dword [0x4963dc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x4999d8]
push ebx
xor ebx, ebx
mov dword [ebp - 0x464], ecx
push esi
mov byte [ebp - 0x451], bl
mov dword [ebp - 0x460], ebx
mov dword [ebp - 0x45c], ebx
push edi
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x468], eax
lea eax, [ebp - 0x450]
push ebx
push eax
mov dword [ebp - 0x46c], edx
mov dword [0x4999d8], eax
call sub.VCRUNTIME140.dll__setjmp3
pop ecx
pop ecx
test eax, eax
jne 0x44f90c
cmp dword [ebp - 0x46c], ebx
jne 0x44f6f4
call fcn.0044e01d
test eax, eax
jne 0x44f69b
mov ecx, 0x90016
call fcn.0040be1c
xor edi, edi
inc edi
mov dword [ebp - 0x45c], edi
jmp 0x44f6a1
mov edi, dword [ebp - 0x45c]
mov ecx, dword [0x49b03c]
mov ecx, dword [ecx + 0x41e5]
call fcn.0045d979
cmp eax, 0xffffffff
je 0x44f6cc
push dword [ebp - 0x464]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x44f6cc
test al, 0x10
je 0x44f6fa
mov ecx, 0x9001a
call fcn.0040be1c
mov eax, dword [0x49b03c]
xor edi, edi
inc edi
mov dword [ebp - 0x45c], edi
or dword [eax + 0x41e5], 0xffffffff
mov byte [eax + 0x85], 1
jmp 0x44f6fa
mov edi, dword [ebp - 0x45c]
test edi, edi
jne 0x44f8f5
push ebx
push 0x80
push 2
push ebx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0xc0000000
push dword [ebp - 0x464]
call ebx
mov esi, eax
cmp esi, 0xffffffff
jne 0x44f746
xor eax, eax
push eax
push eax
push 3
push eax
push eax
push 0xc0000000
push dword [ebp - 0x464]
call ebx
mov esi, eax
cmp esi, 0xffffffff
je 0x44f8f5
mov ebx, dword [0x49b03c]
mov ecx, dword [ebx]
call fcn.004587b3
test eax, eax
je 0x44f774
mov eax, dword [eax + 0x10]
mov edx, dword [eax]
lea eax, [ebp - 0x410]
push eax
push 0x400
lea ecx, [edx + 4]
mov edx, dword [edx]
call fcn.00485f81
jmp 0x44f77b
mov byte [ebp - 0x410], 0
cmp dword [ebx + 0x41ed], 0
jne 0x44f790
xor ecx, ecx
inc ecx
call fcn.0045ba62
test eax, eax
je 0x44f7a5
push 0x1500a7
mov edx, 0x400
lea ecx, [ebp - 0x410]
call fcn.004592e1
mov eax, dword [0x49b03c]
mov eax, dword [eax + 0x4219]
test eax, eax
je 0x44f7bc
mov dword [ebp - 0x458], eax
jmp 0x44f7d9
call fcn.00422089
push 1
xor eax, eax
lea ecx, [ebp - 0x458]
push eax
push eax
push eax
call fcn.0045a5b6
mov eax, dword [ebp - 0x458]
test eax, eax
je 0x44f7e8
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ebx, eax
jmp 0x44f7ee
lea ebx, [ebp - 0x451]
cmp byte [ebx], 0
mov eax, ebx
je 0x44f80a
mov cl, byte [eax]
cmp cl, 0xd
je 0x44f801
cmp cl, 0xa
jne 0x44f804
mov byte [eax], 0x20
inc eax
cmp byte [eax], 0
jne 0x44f7f5
mov ecx, 0x1500e7
call fcn.0045baa2
mov edx, eax
mov ecx, esi
call fcn.0041ec35
test eax, eax
je 0x44f8bf
push 0xa
push 1
push 0xc
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.Mso20Win32Client.dll_Ordinal_1373]
lea edx, [ebp - 0x10]
mov ecx, esi
call fcn.0041ec35
test eax, eax
je 0x44f8bf
lea edx, [ebp - 0x410]
mov ecx, esi
call fcn.0041ec35
test eax, eax
je 0x44f8bf
mov edx, ebx
mov ecx, esi
call fcn.0041ec35
test eax, eax
je 0x44f8bf
mov ecx, esi
call fcn.0044f3f4
test eax, eax
je 0x44f8bf
mov ecx, esi
call fcn.0044f552
test eax, eax
je 0x44f8bf
cmp dword [ebp - 0x46c], 0
mov eax, dword [0x49b03c]
je 0x44f89a
mov ecx, dword [eax + 0x41e5]
cmp ecx, 0xffffffff
je 0x44f89a
call fcn.0045d979
mov eax, dword [0x49b03c]
xor ecx, ecx
mov dword [eax + 0x41e5], esi
inc ecx
mov dword [eax + 0x41e9], ecx
test byte [eax + 0x4239], cl
jne 0x44f8b7
mov dword [eax + 0x4221], ecx
mov dword [ebp - 0x460], ecx
jmp 0x44f8c6
mov ecx, esi
call fcn.0045d979
cmp dword [ebp - 0x458], 0
je 0x44f8f5
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [0x49b03c]
mov ecx, dword [ebp - 0x458]
cmp ecx, dword [eax + 0x4219]
je 0x44f8f5
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0x460], 0
jne 0x44f90c
test edi, edi
jne 0x44f90c
mov ecx, 0x90018
call fcn.0040be1c
mov eax, dword [ebp - 0x468]
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [0x4999d8], eax
xor ecx, ebp
mov eax, dword [ebp - 0x460]
pop ebx
call fcn.0048dc69
mov esp, ebp
pop ebp
ret