Function at 0x459210
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0xffffffffffffffff
push 0x5bcf70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
push ebx
push ebp
push esi
push edi
xor eax, eax
xor edi, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
mov word [esp + 0x18], ax
mov esi, dword [0x687b08]
mov dword [esp + 0x4c], eax
cmp esi, eax
jne 0x459254
mov esi, 0x687b0c
mov ecx, 0x65bff8
test ecx, ecx
je 0x459371
cmp esi, eax
je 0x459371
mov edx, str.idmmkb.dll
test edx, edx
je 0x459371
push ecx
lea ecx, [esp + 0x3c]
call fcn.00401e50
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 1
call fcn.00403af0
mov bl, 2
push str.idmmkb.dll
lea ecx, [esp + 0x24]
mov byte [esp + 0x50], bl
call fcn.00403af0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 3
call fcn.00401070
mov esi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005a1be9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x459340
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x20]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x30]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x40]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 1
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
test eax, eax
jne 0x459379
lea eax, [esp + 0x18]
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459390
mov edi, 1
mov dword [esp + 0x10], edi
mov esi, dword [0x687b08]
test esi, esi
jne 0x45939f
mov esi, 0x687b0c
mov edx, 0x65bff8
test edx, edx
je 0x4594b8
test esi, esi
je 0x4594b8
mov eax, str.Uninstall.exe
test eax, eax
je 0x4594b8
push edx
lea ecx, [esp + 0x24]
call fcn.00401e50
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 4
call fcn.00403af0
push str.Uninstall.exe
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], 5
call fcn.00403af0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 6
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005a1be9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x45948a
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x30]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x28]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], 5
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 4
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4594c4
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4594d1
inc edi
mov dword [esp + 0x10], edi
mov esi, dword [0x687b08]
test esi, esi
jne 0x4594e0
mov esi, 0x687b0c
mov edx, 0x65bff8
test edx, edx
je 0x4595ff
test esi, esi
je 0x4595ff
mov eax, str.IDManTypeInfo.tlb
test eax, eax
je 0x4595ff
push edx
lea ecx, [esp + 0x24]
call fcn.00401e50
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 7
call fcn.00403af0
mov bl, 8
push str.IDManTypeInfo.tlb
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.00403af0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 9
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005a1be9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x4595cc
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x30]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x28]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 7
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x45960b
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459618
inc edi
mov dword [esp + 0x10], edi
mov esi, dword [0x687b08]
test esi, esi
jne 0x459627
mov esi, 0x687b0c
mov edx, 0x65bff8
test edx, edx
je 0x459746
test esi, esi
je 0x459746
mov eax, 0x65db98
test eax, eax
je 0x459746
push edx
lea ecx, [esp + 0x24]
call fcn.00401e50
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0xa
call fcn.00403af0
mov bl, 0xb
push 0x65db98
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.00403af0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0xc
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005a1be9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x459713
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x30]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x28]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0xa
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x459752
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x45975f
inc edi
mov dword [esp + 0x10], edi
mov esi, dword [0x687b08]
test esi, esi
jne 0x45976e
mov esi, 0x687b0c
mov edx, 0x65bff8
test edx, edx
je 0x45988d
test esi, esi
je 0x45988d
mov eax, 0x65db6c
test eax, eax
je 0x45988d
push edx
lea ecx, [esp + 0x24]
call fcn.00401e50
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0xd
call fcn.00403af0
mov bl, 0xe
push 0x65db6c
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.00403af0
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0xf
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005a1be9
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x45985a
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x30]
call fcn.00401ed0
push eax
lea ecx, [esp + 0x28]
call fcn.00401ed0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0xd
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x459899
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4598a2
inc edi
mov eax, dword [0x687b08]
test eax, eax
jne 0x4598b0
mov eax, 0x687b0c
push str.IEExt.htm
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4598d0
lea eax, [esp + 0x18]
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4598d9
inc edi
push str.IEGetAll.htm
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459909
inc edi
push str.IDMGrHlp.exe
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459939
inc edi
push 0x65cdbc
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459969
inc edi
push 0x65dacc
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459999
inc edi
push str.downlWithIDM.dll
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4599c9
inc edi
push 0x65da8c
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x4599f9
inc edi
call fcn.004368b0
test eax, eax
je 0x459af6
push str.IDMShellExt64.dll
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459a36
inc edi
push str.IDMIECC64.dll
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459a66
inc edi
push str.IDMGetAll64.dll
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459a96
inc edi
push str.downlWithIDM64.dll
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459ac6
inc edi
push str.idmbrbtn64.dll
mov ecx, 0x687b08
call fcn.00401ed0
push eax
push 0x65bff8
lea ecx, [esp + 0x20]
call fcn.004104f0
lea ecx, [esp + 0x14]
call fcn.00401ed0
push eax
call ebx
cmp eax, 0xffffffff
jne 0x459af6
inc edi
lea ecx, [esp + 0x14]
mov dword [esp + 0x4c], 0xffffffff
call fcn.00401070
mov ecx, dword [esp + 0x44]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x40
ret