Function at 0x4b9140
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x50406c
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x5364d0]
xor eax, esp
mov dword [esp + 0x240], eax
push ebx
push esi
push edi
mov eax, dword [0x5364d0]
xor eax, esp
push eax
lea eax, [esp + 0x258]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x14]
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 0x18]
xor esi, esi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], esi
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x264], esi
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx + 0x10]
push 0x2020
push ecx
push eax
call edx
cmp eax, esi
jge 0x4b91ed
mov dword [esp + 0x260], 0xffffffff
mov eax, dword [esp + 0x14]
cmp eax, esi
je 0x4b9461
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x4b9461
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], esi
cmp eax, esi
je 0x4b9429
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
lea edx, [esp + 0x1c]
push edx
push 1
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jne 0x4b9429
mov edi, dword [esp + 0x18]
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x34]
push edx
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x268], 1
mov ecx, dword [eax]
push 1
push eax
mov eax, dword [ecx + 0x24]
mov esi, 0x20000000
mov dword [esp + 0x44], esi
call eax
test dword [esp + 0x34], esi
jne 0x4b926c
mov byte [esp + 0x260], 0
test edi, edi
je 0x4b941d
push edi
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4b941d
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x2c]
push ecx
push edx
call fcn.00445740
mov esi, eax
mov dword [esp + 0x40], esi
mov byte [esp + 0x260], 2
mov eax, dword [ebx + 0x188]
mov edi, dword [sym.imp.SHELL32.dll_ILIsEqual]
test eax, eax
je 0x4b92a1
push eax
push esi
call edi
test eax, eax
jne 0x4b9315
mov eax, dword [ebx + 0x180]
test eax, eax
je 0x4b92b3
push eax
push esi
call edi
test eax, eax
jne 0x4b9315
mov eax, dword [ebx + 0x184]
test eax, eax
je 0x4b92c5
push eax
push esi
call edi
test eax, eax
jne 0x4b9315
mov eax, dword [ebx + 0x17c]
push eax
mov eax, dword [esp + 0x30]
push eax
call edi
test eax, eax
jne 0x4b9340
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x4e]
push edx
mov word [esp + 0x50], cx
call fcn.004e8fe0
add esp, 0xc
lea eax, [esp + 0x44]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x4b9340
lea ecx, [esp + 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4b9340
test al, 0x10
jne 0x4b9340
test esi, esi
je 0x4b9320
push esi
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [esp + 0x260], 0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b941d
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4b941d
mov eax, dword [esp + 0x1c]
mov edi, dword [eax]
mov ebx, dword [ebp + 0x1c]
lea edx, [edi + 1]
mov dword [eax], edx
mov eax, dword [esp + 0x20]
push esi
push eax
inc ebx
call dword [sym.imp.SHELL32.dll_ILIsEqual]
push eax
push ebx
push edi
mov edi, dword [esp + 0x30]
push edi
mov ecx, esi
call fcn.004b8f70
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x17c]
push eax
push esi
call dword [sym.imp.SHELL32.dll_ILIsEqual]
test eax, eax
je 0x4b93e6
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x28]
push edx
push 0x50db8c
mov byte [esp + 0x268], 3
mov edx, dword [esp + 0x20]
mov ecx, dword [eax]
push 0
push edx
push eax
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
jl 0x4b93ce
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
push ebx
push ecx
mov ecx, dword [esp + 0x30]
push edx
push eax
push esi
push ecx
mov ecx, edi
call fcn.004b9140
mov byte [esp + 0x260], 2
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4b93e6
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp + 0x1c]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
add ecx, 2
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push esi
push edi
call fcn.004b9490
mov byte [esp + 0x260], 0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b9419
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4b91fd
mov ecx, dword [ebp + 0x1c]
mov edx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x10]
inc ecx
push ecx
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x30]
push ebx
call fcn.004b9490
mov dword [esp + 0x260], 0xffffffff
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4b9461
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [esp + 0x258]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x240]
xor ecx, esp
call fcn.004e3edb
mov esp, ebp
pop ebp
ret 0x18