Function at 0x45dcf0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x484
mov eax, dword [ebp + 8]
mov al, byte [eax + 1]
push ebx
mov cl, 1
cmp cl, al
push esi
sbb esi, esi
mov dl, 2
cmp dl, al
push edi
sbb edi, edi
and edi, dword [0x4d85e8]
mov ecx, 3
cmp cl, al
sbb ebx, ebx
and ebx, dword [0x4d85ec]
mov dl, 4
cmp dl, al
sbb ecx, ecx
and ecx, dword [0x4d85f0]
mov edx, 5
cmp dl, al
sbb edx, edx
and edx, dword [0x4d85f4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edx
mov edx, 6
cmp dl, al
sbb edx, edx
and edx, dword [0x4d85f8]
mov dword [esp + 0x18], edx
mov dl, 7
cmp dl, al
sbb eax, eax
and eax, dword [0x4d85fc]
and esi, dword [0x4d85e4]
mov dword [esp + 0x1c], eax
je 0x45dd7f
mov ecx, esi
call fcn.0041a0e0
mov ecx, dword [esp + 0x14]
test edi, edi
je 0x45dd8e
mov ecx, edi
call fcn.0041a0e0
mov ecx, dword [esp + 0x14]
test ebx, ebx
je 0x45dd9d
mov ecx, ebx
call fcn.0041a0e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x45dda6
call fcn.0041a0e0
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x45ddb3
call fcn.0041a0e0
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x45ddc0
call fcn.0041a0e0
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x45ddcd
call fcn.0041a0e0
mov eax, dword [ebp + 0xc]
push 0x2a
push eax
mov byte [esp + 0x17], 0
call fcn.00499cc9
add esp, 8
test eax, eax
jne 0x45de0a
mov ecx, dword [ebp + 0xc]
push 0x3f
push ecx
call fcn.00499cc9
add esp, 8
test eax, eax
jne 0x45de0a
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x45de2c
jmp 0x45e018
mov ecx, dword [ebp + 0xc]
lea eax, [esp + 0x240]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x45e018
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea edx, [esp + 0x10]
push edx
push 0x4ad810
push 1
push 0
push 0x4ad820
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x45e00b
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x24]
push edx
push 0x4ad830
push eax
mov eax, dword [ecx]
call eax
test eax, eax
js 0x45dfff
mov eax, dword [esp + 0x24]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
push 0
push edx
push eax
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x45dff3
test esi, esi
je 0x45debb
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push 2
push 0
push 0x104
lea edx, [esp + 0x3c]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ecx
push esi
call fcn.004824a0
test edi, edi
je 0x45dee6
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x20]
push 0x104
lea ecx, [esp + 0x34]
push ecx
push eax
call edx
push 1
push 0
push 0xffffffffffffffff
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004824a0
test ebx, ebx
je 0x45df11
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push 0x104
lea edx, [esp + 0x34]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ecx
push ebx
call fcn.004824a0
mov esi, dword [esp + 0x14]
test esi, esi
je 0x45df40
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x18]
push 0x104
lea ecx, [esp + 0x34]
push ecx
push eax
call edx
push 1
push 0
push 0xffffffffffffffff
lea eax, [esp + 0x3c]
push eax
push esi
call fcn.004824a0
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
test esi, esi
jne 0x45df50
test edi, edi
je 0x45dfae
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push 0x104
lea edx, [esp + 0x38]
push edx
push eax
mov eax, dword [ecx + 0x40]
call eax
test esi, esi
je 0x45df80
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ecx
push esi
call fcn.004824a0
test edi, edi
je 0x45dfae
cmp word [esp + 0x30], 0
je 0x45dfa7
mov eax, dword [esp + 0x28]
xor edx, edx
test eax, eax
setns dl
push 0x18
add eax, edx
cdq
push edx
push eax
mov eax, edi
call fcn.004010e0
jmp 0x45dfae
mov ecx, edi
call fcn.0041a0e0
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x45dfd7
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
push eax
mov eax, dword [ecx + 0x38]
call eax
mov eax, dword [esp + 0x2c]
cdq
push 0x18
push edx
push eax
mov eax, esi
call fcn.004010e0
mov ecx, dword [0x4d8ea8]
push 1
push 0
push 0xffffffffffffffff
push 0x4af9cc
push ecx
call fcn.004824a0
mov byte [esp + 0xf], 1
mov eax, dword [esp + 0x24]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [esp + 0xf], 0
jne 0x45e063
mov eax, dword [0x4d4b04]
test byte [eax + 0x100], 1
jne 0x45e046
mov ecx, dword [0x4d8ea8]
push 1
push 0
push 0xffffffffffffffff
push 0x4b356c
push ecx
call fcn.004824a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edi, dword [ebp + 8]
push 0x4af9bc
push 0
push 0x4b356c
call fcn.004399f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 8