Function at 0x47fe10
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x810
mov ecx, dword [0x5b8ec0]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x5b86e0]
cmp eax, dword [ecx + 8]
jg 0x4805fd
cmp dword [0x5b86ac], 0
push ebx
push esi
push edi
je 0x4805f4
xor eax, eax
mov dword [ebp - 0xc], 0
push eax
push 0x104
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
call fcn.00402d00
cmp dword [ebp - 8], 8
lea eax, [ebp - 0x1c]
push dword [ebp - 0xc]
cmovae eax, dword [ebp - 0x1c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
xor eax, eax
mov dword [ebp - 0x6c], 0
push 0x592f38
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
call fcn.00450b50
lea ecx, [eax + 1]
cmp dword [ebp - 0xc], ecx
lea eax, [ebp - 0x1c]
cmovb ecx, dword [ebp - 0xc]
cmp dword [ebp - 8], 8
push ecx
cmovae eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x7c]
push eax
call fcn.00402e60
mov edx, dword [ebp - 8]
cmp edx, 8
jb 0x47ff05
mov ecx, dword [ebp - 0x1c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47fefb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48074f
push edx
push ecx
call fcn.0053140c
add esp, 8
mov esi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x4c]
xor eax, eax
mov dword [ebp - 0x3c], 0
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x38], 7
lea eax, [esi + 6]
push eax
call fcn.0040c1b0
cmp dword [ebp - 0x68], 8
lea eax, [ebp - 0x7c]
push esi
cmovae eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x4c]
push eax
call fcn.00402350
push 6
push str.theme_
lea ecx, [ebp - 0x4c]
call fcn.00402350
mov edi, dword [ebp + 8]
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x47ff59
mov eax, dword [edi]
push dword [edi + 0x10]
lea ecx, [ebp - 0x4c]
push eax
call fcn.00402350
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov edx, dword [ebp - 0x38]
cmp edx, 8
jb 0x47ffc3
mov ecx, dword [ebp - 0x4c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47ffb9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480754
push edx
push ecx
call fcn.0053140c
add esp, 8
mov edx, dword [ebp - 0x20]
lea ecx, [ebp - 0x34]
mov ebx, dword [ebp - 0x34]
cmp edx, 8
mov eax, dword [ebp - 0x24]
cmovae ecx, ebx
cmp word [ecx + eax*2 - 8], 0x2e
je 0x47fff2
push 4
push str..xml
lea ecx, [ebp - 0x34]
call fcn.00402350
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x34]
cmp edx, 8
mov dword [ebp - 4], 0
lea eax, [ebp - 4]
lea esi, [ebp - 0x34]
push eax
cmovae esi, ebx
call dword [sym.imp.KERNEL32.dll_Wow64DisableWow64FsRedirection]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
cmp esi, 0xffffffff
je 0x4805e4
test esi, 0x10
jne 0x4805e4
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00421bc0
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
push 0
cmovae eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x1ec]
push eax
call fcn.00421e80
test al, al
je 0x4805d9
lea eax, [ebp - 0x604]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.004220c0
lea ecx, [ebp - 0x604]
call fcn.004218a0
test al, al
je 0x4805d9
cmp dword [edi + 0x14], 8
jb 0x48008e
mov edi, dword [edi]
push edi
push str.LoadTheme:_s_n
call fcn.00472040
add esp, 8
lea ecx, [ebp - 0x604]
call fcn.004218b0
mov edx, eax
mov dword [ebp - 0xc], 0
mov ecx, edx
mov dword [ebp - 8], 7
xor eax, eax
mov word [ebp - 0x1c], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4800c2
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x1c]
call fcn.00402e60
mov ebx, dword [ebp - 8]
lea edi, [ebp - 0x1c]
mov esi, dword [ebp - 0x1c]
cmp ebx, 8
cmovae edi, esi
cmp dword [ebp - 0xc], 6
jne 0x480509
mov ecx, 0x598b44
mov edx, 6
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x480509
add ecx, 2
sub edx, 1
jne 0x480100
xor eax, eax
mov dword [ebp - 0x3c], edx
mov word [ebp - 0x4c], ax
lea ecx, [ebp - 0x604]
mov dword [ebp - 0x54], eax
mov word [ebp - 0x64], ax
lea eax, [ebp - 0x3f8]
push eax
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x50], 7
call fcn.00421850
lea ecx, [ebp - 0x3f8]
call fcn.004218a0
test al, al
je 0x480439
nop dword [eax + eax]
lea ecx, [ebp - 0x3f8]
call fcn.004218b0
mov edx, eax
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x480170
sub edx, esi
lea ecx, [ebp - 0x1c]
sar edx, 1
push edx
push eax
call fcn.00402e60
lea eax, [ebp - 0x1c]
push str.Color
push eax
call fcn.00407200
add esp, 8
test al, al
je 0x48038b
lea ecx, [ebp - 0x3f8]
call fcn.00421a30
xor edx, edx
mov dword [ebp - 4], eax
mov ecx, 7
mov dword [ebp - 0x9c], 0
xor edi, edi
mov dword [ebp - 0x98], ecx
mov word [ebp - 0xac], dx
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x80], ecx
mov word [ebp - 0x94], dx
test eax, eax
jle 0x480337
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x3f8]
call fcn.004218d0
mov edx, eax
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x480201
sub edx, esi
lea ecx, [ebp - 0x4c]
sar edx, 1
push edx
push eax
call fcn.00402e60
push edi
lea ecx, [ebp - 0x3f8]
call fcn.00421920
mov edx, eax
lea esi, [edx + 2]
nop dword [eax + eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x480230
sub edx, esi
lea ecx, [ebp - 0x64]
sar edx, 1
push edx
push eax
call fcn.00402e60
cmp dword [ebp - 0x38], 8
lea esi, [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x3c]
cmovae esi, eax
cmp ebx, 4
jne 0x480283
mov ecx, str.name
mov edx, ebx
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x480280
add ecx, 2
sub edx, 1
jne 0x480267
lea ecx, [ebp - 0xac]
jmp 0x4802b7
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x38], 8
lea esi, [ebp - 0x4c]
cmovae esi, eax
cmp ebx, 5
jne 0x4802cb
mov eax, str.value
mov edx, ebx
sub esi, eax
nop dword [eax + eax]
mov cx, word [eax + esi]
cmp cx, word [eax]
jne 0x4802cb
add eax, 2
sub edx, 1
jne 0x4802a0
lea ecx, [ebp - 0x94]
cmp dword [ebp - 0x50], 8
lea eax, [ebp - 0x64]
push dword [ebp - 0x54]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00402e60
inc edi
cmp edi, dword [ebp - 4]
jl 0x4801f0
cmp dword [ebp - 0x9c], 0
je 0x4802f4
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00408570
add esp, 8
mov edx, dword [ebp - 0x80]
cmp edx, 8
jb 0x480331
mov ecx, dword [ebp - 0x94]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x480327
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48074f
push edx
push ecx
call fcn.0053140c
add esp, 8
mov ecx, dword [ebp - 0x98]
xor eax, eax
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
mov word [ebp - 0x94], ax
cmp ecx, 8
jb 0x48038b
lea edx, [ecx*2 + 2]
mov ecx, dword [ebp - 0xac]
mov eax, ecx
cmp edx, 0x1000
jb 0x480381
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48074f
push edx
push ecx
call fcn.0053140c
add esp, 8
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.00421800
mov esi, eax
lea edi, [ebp - 0x3f8]
mov ecx, 0x83
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x3f8]
call fcn.004218a0
test al, al
jne 0x480160
mov edx, dword [ebp - 0x50]
cmp edx, 8
jb 0x4803f9
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4803ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push edx
push ecx
call fcn.0053140c
add esp, 8
mov eax, dword [ebp - 0x38]
cmp eax, 8
jb 0x480433
mov ecx, dword [ebp - 0x4c]
lea edx, [eax*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x480429
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push edx
push ecx
call fcn.0053140c
add esp, 8
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 8]
cmp ebx, 8
jb 0x48046d
lea ebx, [ebx*2 + 2]
mov eax, esi
cmp ebx, 0x1000
jb 0x480463
mov esi, dword [esi - 4]
add ebx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push ebx
push esi
call fcn.0053140c
add esp, 8
lea ecx, [ebp - 0x1ec]
call fcn.00421c00
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x4804b2
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4804a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push edx
push ecx
call fcn.0053140c
add esp, 8
mov edx, dword [ebp - 0x68]
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
cmp edx, 8
jb 0x480500
mov ecx, dword [ebp - 0x7c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4804f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push edx
push ecx
call fcn.0053140c
add esp, 8
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret
cmp ebx, 8
jb 0x48053d
lea ebx, [ebx*2 + 2]
mov eax, esi
cmp ebx, 0x1000
jb 0x480533
mov esi, dword [esi - 4]
add ebx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push ebx
push esi
call fcn.0053140c
add esp, 8
lea ecx, [ebp - 0x1ec]
call fcn.00421c00
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x480582
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x480578
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push edx
push ecx
call fcn.0053140c
add esp, 8
mov edx, dword [ebp - 0x68]
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
cmp edx, 8
jb 0x4805f4
mov ecx, dword [ebp - 0x7c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4805c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x480759
push edx
push ecx
call fcn.0053140c
add esp, 8
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1ec]
call fcn.00421c00
lea ecx, [ebp - 0x34]
call fcn.00403070
lea ecx, [ebp - 0x7c]
call fcn.00403070
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret
push 0x5b86e0
call fcn.00531854
add esp, 4
cmp dword [0x5b86e0], 0xffffffff
jne 0x47fe39
xor eax, eax
mov dword [0x5b8694], 0
xorps xmm0, xmm0
mov dword [0x5b8698], 7
push 6
push str.center
mov ecx, 0x5b8684
mov word [0x5b8684], ax
mov dword [0x5b86ac], eax
mov dword [0x5b86b0], 7
mov word [0x5b869c], ax
mov dword [0x5b86c4], eax
mov dword [0x5b86c8], 7
mov word [0x5b86b4], ax
movups xmmword [0x5b8610], xmm0
mov dword [0x5b8620], eax
mov dword [0x5b8624], eax
mov dword [0x5b8628], 0x1010100
mov dword [0x5b862c], 0x10100
mov word [0x5b8630], 1
mov dword [0x5b8634], eax
mov dword [0x5b8638], eax
mov dword [0x5b863c], eax
mov dword [0x5b8640], 0x1000101
mov dword [0x5b8644], 0x101
movups xmmword [0x5b8648], xmm0
mov dword [0x5b8668], eax
movups xmmword [0x5b8658], xmm0
mov dword [0x5b86cc], 0xffffffff
mov dword [0x5b86d0], 0xffffffff
mov dword [0x5b866c], 0x48
mov byte [0x5b8670], al
mov dword [0x5b8674], 0x48
mov byte [0x5b8678], al
mov byte [0x5b86dc], al
mov byte [0x5b8680], al
call fcn.00402e60
push 8
push str.gray.xml
mov ecx, 0x5b869c
call fcn.00402e60
push 0
push 0x592f34
mov ecx, 0x5b86b4
call fcn.00402e60
push 0x577bb0
call fcn.00531682
push 0x5b86e0
call fcn.0053180a
add esp, 8
jmp 0x47fe39
call fcn.0055d660
call fcn.0055d660
call fcn.0055d660
int3