Function at 0x447ae1
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x740
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 4], ebx
call fcn.00446b24
push 0x65
pop esi
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], esi
call fcn.00446124
mov ecx, dword [0x4b2db4]
test ecx, ecx
je 0x447bb6
mov eax, dword [ecx]
call dword [eax + 4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00417b10
push 0x403aa8
lea ecx, [ebp - 0x20]
call fcn.00419000
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x38]
call fcn.004180c0
xor edi, edi
lea ecx, [ebp - 0x20]
push edi
push 1
mov bl, al
call fcn.00419dd0
test bl, bl
je 0x447b71
push 0x403aa8
lea ecx, [ebp - 0x20]
call fcn.00419000
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x38]
call fcn.00418710
push edi
push 1
lea ecx, [ebp - 0x20]
call fcn.00419dd0
push edi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x38]
call fcn.00418b10
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004462d4
mov bl, al
lea ecx, [ebp - 0x20]
push edi
neg bl
push 1
sbb bl, bl
call fcn.0041a230
lea ecx, [ebp - 0x38]
inc bl
je 0x447baf
mov esi, dword [ebp - 4]
call fcn.00417990
jmp 0x447dee
call fcn.00417990
xor ebx, ebx
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00446ebd
pop ecx
pop ecx
test al, al
jne 0x447deb
xor eax, eax
mov word [ebp - 0x70], ax
mov word [ebp - 0x278], ax
lea eax, [ebp - 0x278]
push eax
push dword [ebp + 8]
call fcn.00446c5c
pop ecx
pop ecx
test al, al
je 0x447dee
mov ecx, dword [0x4b2db4]
test ecx, ecx
je 0x447c21
mov eax, dword [ecx]
push ebx
call dword [eax + 8]
test al, al
je 0x447c21
mov ecx, dword [0x4b2db4]
push ebx
mov eax, dword [ecx]
call dword [eax + 0xc]
test eax, eax
je 0x447c21
mov esi, 0x2711
jmp 0x447dee
xor eax, eax
mov word [ebp - 0x488], ax
mov word [ebp - 0x690], ax
mov word [ebp - 0x27c], ax
mov word [ebp - 0x484], ax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x278]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0x6c]
push eax
call fcn.004476b8
add esp, 0x14
mov byte [ebp - 5], al
or edi, 0xffffffff
test al, al
jne 0x447d2a
mov esi, 0x104
lea eax, [ebp - 0x278]
push esi
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, esi
jae 0x447d1e
test eax, eax
je 0x447d1e
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00447e78
pop ecx
pop ecx
test eax, eax
je 0x447d1e
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x484]
push esi
push eax
call fcn.00447f32
push 0x40160c
lea eax, [ebp - 0x484]
push esi
push eax
call fcn.00447f0a
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x690]
push esi
push eax
call fcn.00447f32
push 0x4016b0
lea eax, [ebp - 0x690]
push esi
push eax
call fcn.00447f0a
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
lea eax, [ebp - 0x484]
add esp, 0x30
push eax
call esi
cmp eax, edi
je 0x447d1e
lea eax, [ebp - 0x690]
push eax
call esi
cmp eax, edi
jne 0x447d2a
mov dword [ebp - 4], 0x66
jmp 0x447dbf
mov ecx, dword [0x4b2db4]
test ecx, ecx
je 0x447d39
mov eax, dword [ecx]
call dword [eax + 0x20]
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00447145
add esp, 0x10
test al, al
jne 0x447dbf
call fcn.0041fc00
cmp eax, 2
jg 0x447da8
push 2
push 0x3ea
xor ebx, ebx
lea ecx, [ebp - 0x740]
push 0x4015b0
inc ebx
call fcn.0041fca0
push dword [ebp - 4]
add eax, 8
push 0x401590
push eax
call fcn.0041b870
pop ecx
pop ecx
mov ecx, eax
call fcn.00420720
test bl, 1
je 0x447db8
lea ecx, [ebp - 0x740]
call fcn.0041fcf0
mov dword [ebp - 4], 0x67
cmp byte [ebp - 5], 0
je 0x447deb
call fcn.0044767d
test al, al
je 0x447deb
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00446a79
add esp, 0xc
mov esi, dword [ebp - 4]
lea ecx, [ebp - 0x6c]
call fcn.00446144
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret