Function at 0x456cf0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0xffffffffffffffff
push 0x5b2160
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
push ebx
push ebp
push esi
push edi
xor eax, eax
xor edi, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
mov word [esp + 0x18], ax
mov esi, dword [0x679ff8]
mov dword [esp + 0x4c], eax
cmp esi, eax
jne 0x456d34
mov esi, 0x679ffc
mov ecx, 0x64f028
test ecx, ecx
je 0x456e51
cmp esi, eax
je 0x456e51
mov edx, str.idmmkb.dll
test edx, edx
je 0x456e51
push ecx
lea ecx, [esp + 0x3c]
call fcn.00401f20
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 1
call fcn.00403ba0
mov bl, 2
push str.idmmkb.dll
lea ecx, [esp + 0x24]
mov byte [esp + 0x50], bl
call fcn.00403ba0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 3
call fcn.00401070
mov esi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
call fcn.00401fa0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401fa0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005970d9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x456e20
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x20]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x30]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x40]
call fcn.00401fa0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 1
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
test eax, eax
jne 0x456e59
lea eax, [esp + 0x18]
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x456e70
mov edi, 1
mov dword [esp + 0x10], edi
mov esi, dword [0x679ff8]
test esi, esi
jne 0x456e7f
mov esi, 0x679ffc
mov edx, 0x64f028
test edx, edx
je 0x456f98
test esi, esi
je 0x456f98
mov eax, str.Uninstall.exe
test eax, eax
je 0x456f98
push edx
lea ecx, [esp + 0x24]
call fcn.00401f20
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 4
call fcn.00403ba0
push str.Uninstall.exe
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], 5
call fcn.00403ba0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 6
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401fa0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005970d9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x456f6a
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x30]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x28]
call fcn.00401fa0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], 5
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 4
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x456fa4
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x456fb1
inc edi
mov dword [esp + 0x10], edi
mov esi, dword [0x679ff8]
test esi, esi
jne 0x456fc0
mov esi, 0x679ffc
mov edx, 0x64f028
test edx, edx
je 0x4570df
test esi, esi
je 0x4570df
mov eax, str.IDManTypeInfo.tlb
test eax, eax
je 0x4570df
push edx
lea ecx, [esp + 0x24]
call fcn.00401f20
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 7
call fcn.00403ba0
mov bl, 8
push str.IDManTypeInfo.tlb
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.00403ba0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 9
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401fa0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005970d9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x4570ac
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x30]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x28]
call fcn.00401fa0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 7
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4570eb
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4570f8
inc edi
mov dword [esp + 0x10], edi
mov esi, dword [0x679ff8]
test esi, esi
jne 0x457107
mov esi, 0x679ffc
mov edx, 0x64f028
test edx, edx
je 0x457226
test esi, esi
je 0x457226
mov eax, 0x650bc0
test eax, eax
je 0x457226
push edx
lea ecx, [esp + 0x24]
call fcn.00401f20
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0xa
call fcn.00403ba0
mov bl, 0xb
push 0x650bc0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.00403ba0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0xc
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401fa0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005970d9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x4571f3
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x30]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x28]
call fcn.00401fa0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0xa
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x457232
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x45723f
inc edi
mov dword [esp + 0x10], edi
mov esi, dword [0x679ff8]
test esi, esi
jne 0x45724e
mov esi, 0x679ffc
mov edx, 0x64f028
test edx, edx
je 0x45736d
test esi, esi
je 0x45736d
mov eax, 0x650b94
test eax, eax
je 0x45736d
push edx
lea ecx, [esp + 0x24]
call fcn.00401f20
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0xd
call fcn.00403ba0
mov bl, 0xe
push 0x650b94
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.00403ba0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0xf
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401fa0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005970d9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x45733a
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x30]
call fcn.00401fa0
push eax
lea ecx, [esp + 0x28]
call fcn.00401fa0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0xd
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x457379
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457382
inc edi
mov eax, dword [0x679ff8]
test eax, eax
jne 0x457390
mov eax, 0x679ffc
push str.IEExt.htm
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4573b0
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4573b9
inc edi
push str.IEGetAll.htm
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4573e9
inc edi
push str.IDMGrHlp.exe
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457419
inc edi
push 0x64fde4
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457449
inc edi
push 0x650af4
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457479
inc edi
push str.downlWithIDM.dll
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4574a9
inc edi
push 0x650ab4
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4574d9
inc edi
call fcn.00434b00
test eax, eax
je 0x4575d6
push str.IDMShellExt64.dll
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457516
inc edi
push str.IDMIECC64.dll
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457546
inc edi
push str.IDMGetAll64.dll
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x457576
inc edi
push str.downlWithIDM64.dll
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4575a6
inc edi
push str.idmbrbtn64.dll
mov ecx, 0x679ff8
call fcn.00401fa0
push eax
push 0x64f028
lea ecx, [esp + 0x20]
call fcn.00410270
lea ecx, [esp + 0x14]
call fcn.00401fa0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4575d6
inc edi
lea ecx, [esp + 0x14]
mov dword [esp + 0x4c], 0xffffffff
call fcn.00401070
mov ecx, dword [esp + 0x44]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x40
ret