Function at 0x46ffa0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
sub esp, 0x43c
push ebx
push ebp
mov ebp, dword [esp + 0x448]
push esi
mov esi, edx
push edi
cmp ebp, 1
je 0x46ffc1
cmp ebp, 2
je 0x46ffc1
xor bh, bh
jmp 0x46ffc3
mov bh, 1
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x38]
push eax
push 0x104
push ecx
call edi
lea ecx, [esp + 0x34]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46ffe2
sub ecx, edx
sar ecx, 1
je 0x470002
cmp word [esp + ecx*2 + 0x32], 0x5c
jne 0x470002
xor eax, eax
mov word [esp + ecx*2 + 0x32], ax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x244]
push eax
push 0x104
push esi
call edi
lea ecx, [esp + 0x240]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x470021
sub ecx, edx
sar ecx, 1
je 0x470047
cmp word [esp + ecx*2 + 0x23e], 0x5c
jne 0x470047
xor eax, eax
mov word [esp + ecx*2 + 0x23e], ax
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x47021c
test al, 0x10
je 0x47021c
mov bl, byte [esp + 0x454]
test bl, bl
je 0x4700fe
movzx edi, word [esp + 0x34]
mov ebp, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test edi, 0xffffff80
jne 0x470094
push 1
push edi
call ebp
add esp, 8
test eax, eax
je 0x470094
or edi, 0x20
movzx esi, word [esp + 0x240]
test esi, 0xffffff80
jne 0x4700b3
push 1
push esi
call ebp
add esp, 8
test eax, eax
je 0x4700b3
or esi, 0x20
cmp di, si
jne 0x4700c0
cmp word [esp + 0x36], 0x3a
je 0x4700f7
movzx eax, bh
lea edx, [esp + 0x240]
push 0
push eax
lea ecx, [esp + 0x3c]
call fcn.0046ffa0
add esp, 8
test al, al
je 0x47021c
mov dl, 1
lea ecx, [esp + 0x34]
call fcn.00470230
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x43c
ret
mov ebp, dword [esp + 0x450]
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x470127
test al, 0x10
je 0x47021c
test bh, bh
je 0x47021c
test bl, bl
jne 0x470175
jmp 0x470141
test bl, bl
jne 0x470175
xor edx, edx
lea ecx, [esp + 0x240]
call fcn.00452e20
test al, al
je 0x47021c
lea ecx, [esp + 0x34]
add ecx, 0xfffffffe
nop dword [eax + eax]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x470150
mov eax, dword [0x4ddb60]
mov dword [ecx], eax
mov eax, dword [0x4ddb64]
mov dword [ecx + 4], eax
mov ax, word [0x4ddb68]
mov word [ecx + 8], ax
lea ecx, [esp + 0x34]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x470180
sub ecx, edx
sar ecx, 1
xor eax, eax
mov word [esp + ecx*2 + 0x36], ax
lea ecx, [esp + 0x240]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4701a0
xor eax, eax
sub ecx, edx
sar ecx, 1
xorps xmm0, xmm0
mov dword [esp + 0x14], eax
mov dword [esp + 0x2e], eax
movlpd qword [esp + 0x26], xmm0
mov word [esp + ecx*2 + 0x242], ax
lea eax, [esp + 0x34]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x240]
mov dword [esp + 0x20], eax
movzx eax, bl
xor eax, 1
inc eax
mov dword [esp + 0x18], eax
mov eax, 0x614
mov word [esp + 0x24], ax
cmp ebp, 2
jne 0x470201
mov eax, 0x615
mov word [esp + 0x24], ax
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
pop edi
pop esi
test eax, eax
pop ebp
sete al
pop ebx
add esp, 0x43c
ret
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x43c
ret