Function at 0x4d9a50
Capabilities:
Get file system object information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5101fd
mov eax, dword fs:[0]
push eax
mov eax, 0x13c0
call fcn.004df410
mov eax, dword [0x556620]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x13b4], esi
cmp dword [esi + 0xdc], 0
jne 0x4d9a9d
mov eax, 0x80004005
jmp 0x4da147
cmp dword [esi + 0x5c], 0
jne 0x4d9aaa
xor eax, eax
jmp 0x4da147
xorps xmm0, xmm0
mov dword [ebp - 0x1060], 0
movq qword [ebp - 0x1068], xmm0
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1060], 0
push 0x52dc44
lea ecx, [ebp - 0x105c]
mov dword [ebp - 4], 0
call fcn.00407370
lea eax, [ebp - 0x1068]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x105c]
push eax
lea eax, [esi + 0x4c]
push eax
call fcn.0041be00
add esp, 0xc
mov byte [ebp - 4], 0
cmp dword [ebp - 0x1048], 8
mov ebx, eax
mov dword [ebp - 0x13bc], ebx
jb 0x4d9b35
push dword [ebp - 0x105c]
call fcn.0040823e
add esp, 4
xor edi, edi
test ebx, ebx
je 0x4da114
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
mov dword [ebp - 0x13c0], ecx
lea ecx, [ecx]
mov eax, dword [ebp - 0x1068]
add eax, ecx
mov dword [ebp - 0x1048], 7
xor ecx, ecx
mov dword [ebp - 0x104c], 0
push 0xffffffffffffffff
push ecx
mov word [ebp - 0x105c], cx
lea ecx, [ebp - 0x105c]
push eax
call fcn.00407980
cmp dword [ebp - 0x104c], 0
mov byte [ebp - 4], 2
jne 0x4d9bb5
cmp dword [ebp - 0x1048], 8
mov byte [ebp - 4], 0
jb 0x4da0f9
push dword [ebp - 0x105c]
call fcn.0040823e
add esp, 4
jmp 0x4da0f9
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.0041a3c0
add esp, 0xc
test al, al
je 0x4d9b91
push 0x40
lea eax, [ebp - 0x10ac]
push 0
push eax
call fcn.004dead0
add esp, 0xc
lea ecx, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push ecx
push eax
lea ecx, [ebp - 0x10ac]
call fcn.00467b00
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 3
call fcn.0046aa50
test al, al
jne 0x4d9c42
lea ecx, [ebp - 0x10a8]
mov byte [ebp - 4], 4
call fcn.004185b0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 2
call fcn.004185b0
jmp 0x4d9b91
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.00494af0
add esp, 8
test al, al
jne 0x4d9c7a
lea ecx, [ebp - 0x10a8]
mov byte [ebp - 4], 5
call fcn.004185b0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 2
call fcn.004185b0
jmp 0x4d9b91
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x4da0db
lea edx, [ebp - 0x10f0]
mov dword [ebp - 0x10f0], eax
push edx
mov dword [ebp - 0x106c], eax
lea edx, [ebp - 0x106c]
mov eax, dword [esi + 0xdc]
push edx
push 0
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
test eax, eax
js 0x4d9ec0
mov ecx, dword [ebp - 0x10f0]
test ecx, ecx
je 0x4d9ec6
push 0x30
lea eax, [ebp - 0x1040]
push 0
push eax
call fcn.004dead0
add esp, 0xc
mov dword [ebp - 0x1040], 0x37050003
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x1038], 1
cmovae eax, dword [ebp - 0x105c]
push eax
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1018], 0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test eax, eax
je 0x4d9d47
mov dword [ebp - 0x1030], 0x3704001f
mov dword [ebp - 0x1028], eax
push 0x2b0
lea eax, [ebp - 0x13ac]
mov dword [ebp - 0x13b0], 0
push 0
push eax
call fcn.004dead0
add esp, 0xc
lea ecx, [ebp - 0x13b0]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0x200
push 0x2b4
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x4d9daf
lea eax, [ebp - 0x13a4]
mov dword [ebp - 0x1020], 0x3001001f
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x10f8]
push edx
lea edx, [ebp - 0x1040]
mov dword [ebp - 0x10f8], 0
push edx
mov ecx, dword [eax]
push 3
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x4d9ec0
mov ecx, dword [ebp - 0x10f8]
test ecx, ecx
je 0x4d9ec0
xor ebx, ebx
cmp dword [ecx], ebx
jbe 0x4d9eae
xor eax, eax
mov dword [ebp - 0x1044], eax
lea ecx, [ecx]
cmp dword [eax + ecx + 0xc], 0x80040103
movq xmm0, qword [eax + ecx + 4]
movq qword [ebp - 0x13cc], xmm0
jne 0x4d9e96
push dword [ebp - 0x1028]
call fcn.004d7fc0
push dword [ebp - 0x1018]
mov edi, eax
call fcn.004d7fc0
add esp, 8
mov esi, eax
test edi, edi
je 0x4d9e7d
test esi, esi
je 0x4d9e74
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x1040]
push 0
push edx
mov dword [ebp - 0x1030], 0x3704001e
mov dword [ebp - 0x1028], edi
mov dword [ebp - 0x1020], 0x3001001e
mov dword [ebp - 0x1018], esi
mov ecx, dword [eax]
push 3
push eax
call dword [ecx + 0x20]
push edi
call fcn.004039c2
add esp, 4
test esi, esi
je 0x4d9e8a
push esi
call fcn.004039c2
add esp, 4
mov eax, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x10f8]
inc ebx
add eax, 0xc
mov dword [ebp - 0x1044], eax
cmp ebx, dword [ecx]
jb 0x4d9e00
mov esi, dword [ebp - 0x13b4]
mov eax, dword [esi + 0xac]
push ecx
mov eax, dword [eax + 4]
call eax
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x10f0]
mov dword [ebp - 0x10f4], 0
test ecx, ecx
je 0x4da0be
mov eax, dword [ecx]
lea edx, [ebp - 0x10f4]
push edx
push 3
push 1
push 0x53de60
push 0x37010102
push ecx
call dword [eax + 0x1c]
test eax, eax
js 0x4da0b8
cmp dword [ebp - 0x10f4], 0
je 0x4da0b8
push 0x40
lea eax, [ebp - 0x10ec]
push 0
push eax
call fcn.004dead0
add esp, 0xc
lea eax, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea ecx, [ebp - 0x10ec]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push 0
push eax
call fcn.00467b00
lea ecx, [ebp - 0x10ec]
mov byte [ebp - 4], 6
call fcn.0046aa50
test al, al
je 0x4da0b1
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.0046b5e0
test al, al
je 0x4da0b1
push 0x1000
xor edi, edi
lea eax, [ebp - 0x1010]
push edi
push eax
call fcn.004dead0
add esp, 0xc
mov dword [ebp - 0x1044], edi
lea eax, [ebp - 0x1044]
push edi
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call ebx
test eax, eax
je 0x4da06f
jmp 0x4d9fc0
mov edx, dword [ebp - 0x1044]
test edx, edx
je 0x4da069
lea esi, [ebp - 0x1010]
jmp 0x4d9fe0
mov eax, dword [ebp - 0x10f4]
lea edi, [ebp - 0x10fc]
push edi
push edx
mov dword [ebp - 0x10fc], 0
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x10]
mov ecx, dword [ebp - 0x10fc]
mov edi, eax
test ecx, ecx
je 0x4da0aa
mov edx, dword [ebp - 0x1044]
cmp ecx, edx
ja 0x4da0aa
test edi, edi
js 0x4da069
sub edx, ecx
add esi, ecx
mov dword [ebp - 0x1044], edx
test edx, edx
jne 0x4d9fe0
push 0x1000
push edx
lea eax, [ebp - 0x1010]
push eax
call fcn.004dead0
add esp, 0xc
lea eax, [ebp - 0x1044]
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call ebx
test eax, eax
jne 0x4d9fc0
mov esi, dword [ebp - 0x13b4]
mov eax, dword [ebp - 0x10f4]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x10f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x10ec]
mov dword [ebp - 0x10f4], 0
mov byte [ebp - 4], 3
call fcn.00450e30
mov ecx, dword [ebp - 0x10f0]
jmp 0x4da0c3
mov edi, 0x8004000d
jmp 0x4da069
mov edi, 0x8004000c
jmp 0x4da06f
mov ecx, dword [ebp - 0x10f0]
mov edi, 0x80004005
test ecx, ecx
je 0x4da0db
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x10]
mov eax, dword [ebp - 0x10f0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 2
call fcn.00450e30
lea ecx, [ebp - 0x105c]
mov byte [ebp - 4], 0
call fcn.00408450
mov ecx, dword [ebp - 0x13c0]
add ecx, 0x18
dec dword [ebp - 0x13bc]
mov dword [ebp - 0x13c0], ecx
jne 0x4d9b50
mov eax, dword [ebp - 0x1068]
test eax, eax
je 0x4da145
push dword [ebp - 0x106c]
lea ecx, [ebp - 0x13b5]
push ecx
push dword [ebp - 0x1064]
push eax
call fcn.00408200
push dword [ebp - 0x1068]
call fcn.0040823e
add esp, 0x14
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401580
mov esp, ebp
pop ebp
ret