Function at 0x4dd670
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
lea ebp, [esp - 0xd8]
sub esp, 0xd8
push 0xffffffffffffffff
push 0x6537a1
mov eax, dword fs:[0]
push eax
sub esp, 0x190
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0xd4], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x20], esi
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp + 0xc8], edi
mov dword [ebp + 0xd0], edi
xor eax, eax
mov word [ebp + 0xcc], ax
mov byte [ebp - 4], 1
mov byte [ebp - 0x11], al
lea ecx, [ebp]
call fcn.00461370
mov byte [ebp - 4], 2
push edi
lea ecx, [ebp]
push ecx
mov edx, dword [ebp + 0xe0]
push edx
lea ecx, [esi + 8]
call fcn.005e9ab0
test al, al
je 0x4dd888
mov esi, dword [ebp + 0x74]
cmp esi, edi
mov eax, esi
jne 0x4dd709
lea eax, [ebp + 0x78]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4dd710
sub eax, edx
sar eax, 1
je 0x4dd822
cmp esi, edi
mov eax, esi
jne 0x4dd72e
lea eax, [ebp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4dd822
mov eax, dword [ebp + 0x74]
cmp eax, edi
jne 0x4dd748
lea eax, [ebp + 0x78]
push eax
lea ecx, [ebp + 0xc8]
call fcn.004017f0
mov byte [ebp - 0x11], 1
lea ecx, [ebp - 0x19c]
call fcn.004b23c0
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0xa4]
mov eax, dword [eax - 0xc]
cmp eax, 5
lea eax, [ebp + 0xa4]
jg 0x4dd77e
lea eax, [ebp + 0x50]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc8]
cmp eax, edi
jne 0x4dd790
lea eax, [ebp + 0xcc]
push edi
push ecx
push eax
lea ecx, [ebp - 0x19c]
call fcn.004b31f0
mov ebx, eax
mov dword [ebp - 0x1c], edi
push 0x18
call fcn.005f43f8
add esp, 4
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 4
cmp eax, edi
je 0x4dd7c1
mov ecx, eax
call fcn.004d4120
mov edi, eax
mov byte [ebp - 4], 3
test edi, edi
je 0x4dd8e7
mov ecx, dword [ebp + 0xe0]
mov dword [edi], ecx
mov esi, ebx
test esi, esi
je 0x4dd8ca
lea ecx, [ebp - 0x2c]
call fcn.004cffc0
mov byte [ebp - 4], 5
mov edx, dword [esi]
mov eax, dword [edx + 4]
push eax
push 0x678ea8
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00402f70
add esp, 0xc
lea edx, [ebp - 0x2c]
push edx
lea ecx, [edi + 4]
call fcn.004dcf50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.004343b0
mov esi, dword [esi + 0x1c]
inc dword [ebp - 0x1c]
jmp 0x4dd7d7
cmp byte [ebp + 0x3e], 4
jne 0x4dd872
mov esi, dword [ebp + 0x5c]
cmp esi, edi
mov eax, esi
jne 0x4dd834
lea eax, [ebp + 0x60]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4dd837
sub eax, edx
sar eax, 1
je 0x4dd872
cmp esi, edi
mov eax, esi
jne 0x4dd851
lea eax, [ebp + 0x60]
push eax
call fcn.004641c0
add esp, 4
cmp eax, 0xffffffff
je 0x4dd872
mov eax, dword [ebp + 0x5c]
cmp eax, edi
jne 0x4dd748
lea eax, [ebp + 0x60]
jmp 0x4dd748
mov ecx, dword [0x75e22c]
cmp ecx, edi
je 0x4dd888
push 1
push str.Error_839415
call fcn.004c1740
mov byte [ebp - 4], 1
lea ecx, [ebp]
call fcn.004614c0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc8]
call fcn.00401210
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xd4]
xor ecx, ebp
call fcn.0062016f
add ebp, 0xd8
mov esp, ebp
pop ebp
ret 4
push edi
push 0x13fb
push 0x111
mov edi, dword [ebp - 0x20]
mov eax, dword [edi + 0x55c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4dd8ea
mov edi, dword [ebp - 0x20]
test ebx, ebx
je 0x4dd8fa
push ebx
lea ecx, [ebp - 0x19c]
call fcn.004aff60
mov ecx, dword [ebp + 0xe0]
push ecx
mov ecx, edi
call fcn.004ce020
push 0
push 0
push 0x1425
mov edx, dword [edi + 0x560]
push edx
mov esi, dword [sym.imp.USER32.dll_PostMessageA]
call esi
inc dword [edi + 0x4f8]
push 0
push 0x1427
push 0x111
mov eax, dword [edi + 0x424]
push eax
call esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19c]
call fcn.004b13d0
mov byte [ebp - 4], 1
lea ecx, [ebp]
call fcn.004614c0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc8]
call fcn.00401210
mov dword [ebp - 4], 0xffffffff
jmp 0x4dd8a3