Function at 0x4ad06476
Capabilities:
Check if file exists
Get file attributes

Disassembly:
or dword [esi + 0x18], 8
mov dword [0x4ad33af0], 1
jmp 0x4ad065c6
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [0x4ad2ba04], ebx
mov eax, dword [esi]
cmp eax, ebx
push edi
mov dword [ebp - 8], 0x4ad34844
je 0x4ad08d3f
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
mov dword [ebp - 4], eax
push dword [esi]
call fcn.4ad01a8d
mov edi, eax
cmp word [edi], 0x3a
je 0x4ad16cef
push 0x250
call fcn.4ad0176c
mov dword [esi + 0x14], eax
movzx edi, word [edi]
xor eax, eax
mov ax, word [0x4ad33b8c]
cmp di, ax
mov dword [ebp + 8], edi
je 0x4ad0e772
push eax
push dword [esi]
call fcn.4ad01a67
mov edi, eax
test edi, edi
je 0x4ad08d0e
inc edi
inc edi
mov ebx, dword [sym.imp.msvcrt.dll__wcsicmp]
push 0x4ad01ab0
push edi
call ebx
test eax, eax
pop ecx
pop ecx
je 0x4ad0e772
push 0x4ad01aa8
push edi
call ebx
test eax, eax
pop ecx
pop ecx
je 0x4ad0e772
cmp dword [0x4ad2fa60], 4
jne 0x4ad0653f
cmp dword [0x4ad33b44], 1
je 0x4ad0653f
cmp dword [0x4ad33b48], 1
jne 0x4ad06567
and dword [0x4ad33b48], 0
push dword [esi]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4ad0660a
and dword [0x4ad2ba04], 0
cmp ebx, 0xffffffff
je 0x4ad06567
test bl, 0x10
jne 0x4ad0e772
mov edx, dword [esi]
xor ebx, ebx
inc ebx
xor edi, edi
mov ecx, edx
mov ax, word [ecx]
test ax, ax
je 0x4ad0658c
cmp ax, word [0x4ad33b8c]
je 0x4ad065db
cmp ax, 0x3a
je 0x4ad065df
inc ecx
inc ecx
inc ebx
jmp 0x4ad06570
test edi, edi
mov dword [esi + 8], edi
je 0x4ad08d35
cmp word [edi], ax
lea eax, [edi + 2]
je 0x4ad16dbf
mov dword [esi + 0xc], eax
push 0x2a
push edi
call fcn.4ad01323
test eax, eax
jne 0x4ad0602f
push 0x3f
push edi
call fcn.4ad01323
test eax, eax
jne 0x4ad0602f
push 0x2e
push edi
call fcn.4ad01323
mov dword [esi + 0x10], eax
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
leave
ret 4
mov edi, ecx
jmp 0x4ad06587
cmp ebx, 2
jne 0x4ad06587
jmp 0x4ad065db
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4ad2ba04], eax
jmp 0x4ad06559
mov edi, dword [esi]
test edi, edi
je 0x4ad08d47
push edi
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
cmp eax, 2
jb 0x4ad064f3
cmp word [edi + 2], 0x3a
je 0x4ad16dab
jmp 0x4ad064f3
mov dword [esi + 0xc], edx
mov edi, edx
jmp 0x4ad065a6
mov dword [ebp - 4], ebx
jmp 0x4ad064a8
xor eax, eax
jmp 0x4ad08d1c
xor eax, eax
jmp 0x4ad0e7bc
mov ax, word [0x4ad33b8c]
cmp word [ebp + 8], ax
je 0x4ad16db3
push dword [esi]
call fcn.4ad0e7e7
test al, al
jne 0x4ad0e7d4
mov edi, dword [ebp - 4]
lea edi, [edi + edi + 0xa]
push edi
call fcn.4ad0176c
test eax, eax
je 0x4ad08d4b
mov eax, dword [esi]
test eax, eax
je 0x4ad08d4b
push eax
push edi
call fcn.4ad0176c
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
test eax, eax
mov dword [esi], eax
je 0x4ad0e7d4
cmp dword [ebp - 8], 0
je 0x4ad0e7d4
push dword [ebp - 8]
push eax
call dword [sym.imp.msvcrt.dll_wcscat]
pop ecx
pop ecx
mov eax, dword [esi + 0x14]
mov dword [eax], 0x10
jmp 0x4ad06567
cmp dword [ebp - 4], 2
jle 0x4ad064bb
mov word [edi], bx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_SetErrorMode]
dec edi
dec edi
call ebx
push 0x8000
push dword [esi]
mov dword [ebp - 0xc], eax
call fcn.4ad02e7f
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
je 0x4ad16d4c
push eax
call fcn.4ad02c7d
test eax, eax
jne 0x4ad16d34
push dword [ebp + 8]
call fcn.4ad0beea
test eax, eax
je 0x4ad16d4c
push dword [ebp + 8]
call fcn.4ad02c7d
test eax, eax
jne 0x4ad16d99
push dword [ebp + 8]
call fcn.4ad0beea
test eax, eax
jmp 0x4ad16d97
inc edi
inc edi
mov word [edi], 0x3a
cmp dword [0x4ad2fa60], 4
jne 0x4ad16d82
cmp dword [0x4ad33b40], 0
jne 0x4ad16d76
push dword [esi]
push 1
push 0x236b
call fcn.4ad0606f
add esp, 0xc
mov dword [0x4ad33b38], 1
jmp 0x4ad16d93
push dword [esi]
push 1
push 0x236b
call fcn.4ad0606f
add esp, 0xc
cmp dword [ebp + 8], 0xffffffff
je 0x4ad16da1
push dword [ebp + 8]
call fcn.4ad02e18
push dword [ebp - 0xc]
call ebx
jmp 0x4ad064bb
add edi, 4
jmp 0x4ad064f3
mov dword [ebp - 8], 0x4ad34846
jmp 0x4ad0e782
mov eax, edi
jmp 0x4ad065a3