Function at 0x4701a5
Capabilities:
Check if file exists

Disassembly:
push dword [ebx]
shr bl, 3
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x2a4
mov eax, 0x6fc57c
call fcn.00458b7c
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x2ac], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47089d
call fcn.0045ffbd
test al, al
je 0x4701ef
add byte [esi + 0x5b], cl
push esi
invalid
call fcn.00460116
test al, al
je 0x470216
xor edi, dword [ecx + ebp]
cmp ebx, dword [ecx - 0x37eefa59]
pop esi
push cs
jg 0x470196
push cs
cmp edx, dword [0xf88c17a]
adc al, 0xd
push esi
mov ah, 5
push es
unpcklps xmm1, xmmword [0x605b456]
aaa
push 0xb5ffdeca
push esp
std
invalid
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x470277
call fcn.00460383
test al, al
je 0x47024a
dec edi
xchg edx, eax
dec ecx
cmp dword [edi], edx
cmp byte [ebx], ch
xor al, 0x1e
push ebp
xor al, 0x50
xor byte [ecx + 2], ah
invalid
call fcn.00460047
test al, al
je 0x47089d
jns 0x47020b
push edx
outsd dx, dword [esi]
sub ebx, 0x11678279
mov ah, 0xc3
cmp al, 0xc7
mov edx, dword [edx + 0x373011e6]
and byte [esp + eax*2], ch
wait
cmp byte [ecx + ebp*8 + 0x26], dh
push es
add byte [eax], al
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.004ea000
add esp, 0xc
mov dword [ebp - 0x234], 7
xor eax, eax
mov dword [ebp - 0x238], ebx
lea ecx, [ebp - 0x248]
mov word [ebp - 0x248], ax
push ebx
push 0x7943cc
call fcn.00420aa0
mov dword [ebp - 4], ebx
call fcn.004602b4
test al, al
je 0x4702d5
adc edx, dword [esi]
xor esp, dword [edi]
mov ah, 0x72
adc ch, al
imul byte [eax]
loopne 0x470339
mov ebx, 0xa63eec06
call fcn.0046015b
test al, al
je 0x4702fb
xor eax, 0x244c0735
pushal
mov ah, 0xe8
jmp 0x22fb7029
call 0xb4b441d3
and dh, byte [edi + ebx*8]
clc
jno 0x470344
push ds
adc dword [ebx - 0x5144ea28], eax
test byte [esi - 0x5e], bl
aaa
call fcn.0045ffbd
test al, al
je 0x47031e
out 0xd8, al
fmul qword es:[esi + 0x39]
sub ebp, esi
scasb al, byte es:[edi]
sbb dword [ebx - 0x3550969a], eax
nop
dec ebx
xchg ebx, eax
into
inc eax
jle 0x4702e5
fld1
cwde
ror byte [ebp - 0x2177b], 0xff
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov ebx, dword [ebp - 0x2ac]
lea eax, [ebp - 0x2a8]
push ebx
push eax
std
invalid
call fcn.0045d617
pop ecx
pop ecx
mov byte [ebp - 4], 1
call fcn.0045ff33
test al, al
je 0x470377
push edi
test al, 0x6f
jg 0x470387
pop es
mov dword [ebp + 0x2b], edi
and dword [eax], esi
enter 0xfffffffffffff18a, 0xffffffffffffffa3
aaa
imul edx, dword [esi + ecx*2 - 0x6ddfc2fd], 0x79
and byte [edi - 0x178df2c4], 0x5e
mov ebx, dword [ebp - 0x2ac]
call fcn.0046026f
test al, al
je 0x470397
cmp edi, dword [edx - 0x7b]
mov ebx, 0xf703e4b5
cli
idiv edx
push ecx
jmp 0x4703a6
lea eax, [ebp - 0x278]
push ebx
push eax
call fcn.0045da45
pop ecx
pop ecx
mov byte [ebp - 4], 2
call fcn.0046026f
test al, al
je 0x4703cc
xchg dword [eax], esp
je 0x47033e
imul ecx, dword [ecx + 0x4a], 0x5d
invalid
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0045da45
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 3
push eax
call fcn.0045f320
add esp, 0xc
call fcn.0045fe64
test al, al
je 0x470414
fcom qword [ebp + 0x23]
cld
insb byte es:[edi], dx
jnp 0x470410
add al, 0x49
leave
in al, 0xa9
mov dh, 0xfd
invalid
bound esi, qword [edx - 0x1f1798b2]
invalid
call fcn.004602f9
test al, al
je 0x470432
sbb eax, 0x16839698
jge 0x47049d
invalid
lea eax, [ebp - 0x260]
push eax
call fcn.0045f320
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x260]
call fcn.0045fb71
test eax, eax
jne 0x4704f4
call fcn.00460047
test al, al
je 0x47047e
mov edi, 0xcd84e2bb
pop esp
mov ebx, 0x18472f60
sub eax, 0x7d8baa57
inc esp
pop esi
mov ebx, 0xd53de120
pop edi
and byte [ecx], bh
call fcn.0045fea9
test al, al
je 0x4704a4
push ebp
pop edx
mov ebx, 0xd8e8b1e
mov cl, 0xd9
pop edi
or eax, 0x6f7c2b14
lodsb al, byte [esi]
out 0xe3, eax
push esp
daa
pop ds
test eax, 0xa71c01a7
cmpsd dword [esi], dword es:[edi]
add dword [edi], ebx
aam 0x66
ret 0x31e8
call fcn.0045fdda
test al, al
je 0x4704c4
sub eax, 0xa2d15a2f
daa
xchg edi, eax
invalid
cmp word [ebp - 0x218], 0
jne 0x4704d2
xor eax, eax
jmp 0x4704df
lea eax, [ebp - 0x218]
push eax
call fcn.004f2ba9
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
call 0x514704e4
lea ecx, [ebp - 0x248]
call fcn.00420aa0
jmp 0x470544
call fcn.0046008c
test al, al
je 0x470515
add byte [ecx - 0x32aa4d22], 0x2d
lock add dword [edx + 0x101e5f5], ebx
jae 0x4704e2
mov cs, eax
out dx, eax
push cs
mov eax, dword [0xff7d26db]
mov ch, 0x54
std
invalid
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x290]
push eax
call fcn.0045d8de
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.004224b0
push 0
push 1
lea ecx, [ebp - 0x290]
call fcn.004209e0
xor esi, esi
mov dword [ebp - 0x2b0], esi
call fcn.00460002
test al, al
je 0x47056c
xlatb
retf 0xe6e6
call fcn.004601e5
test al, al
je 0x47058e
inc edi
dec edi
mov byte [0x419c3623], al
retf 0xf218
and dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
xor eax, eax
mov dword [ebp - 0x21c], 7
push eax
push 0x7943cc
mov word [ebp - 0x230], ax
call fcn.00420aa0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x230]
call fcn.00420cf0
call fcn.004602f9
test al, al
je 0x4705ed
daa
aas
clc
pop esi
into
dec ebx
cmp dword [ebx], edx
enter 0xffffffffffffd165, 0x2c
push ebx
mov al, 0xd7
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x230]
call fcn.00422840
push str..aee
call fcn.004f2ba9
pop ecx
push eax
push str..aee
lea ecx, [ebp - 0x230]
call fcn.00422710
test esi, esi
jle 0x47065e
mov eax, esi
cdq
push edx
push eax
lea eax, [ebp - 0x290]
push eax
call int.00471e4f
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.00422840
push 0
push 1
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.004209e0
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x470756
call fcn.0045feee
test al, al
je 0x47069f
pop ecx
adc bh, byte [esi]
ret 0x518d
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x470756
call fcn.0046026f
test al, al
je 0x4706df
push edx
jecxz 0x47066b
fist dword [edi - 0x6bb6765d]
pop ecx
invalid
call fcn.00460047
test al, al
je 0x470703
add ecx, edi
inc edx
mov bh, 0x14
sbb edx, dword [edx]
invalid
call fcn.00460383
test al, al
je 0x470728
lahf
dec ecx
pop edx
xor bl, bl
rcr dword [ebx + esi - 0x3aaee59e], cl
mov ecx, 0xae7c9398
inc edx
test dword [esi], eax
mov eax, 0xdc222d9e
cmp byte [edi - 0x75], cl
mov ch, 0x50
std
invalid
mov esi, dword [ebp - 0x2b0]
cmp esi, 0xa
jge 0x470857
push 0
inc esi
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x2b0], esi
call fcn.004209e0
jmp 0x47058e
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
mov ebx, dword [ebp - 0x2ac]
cmovae eax, dword [ebp - 0x230]
push eax
push ebx
call fcn.004fde03
pop ecx
pop ecx
call fcn.0046033e
test al, al
je 0x470795
ja 0x470796
xchg dword [edi + 0x5f], ecx
in al, dx
invalid
call fcn.00460002
test al, al
je 0x4707c1
push 0x84fffef8
sal byte [ebx - 5], 0x66
lodsd eax, dword [esi]
sti
lodsw ax, word [esi]
lds esp, [esi + 0x2a]
fmul qword [ecx]
cmp bh, byte [edx]
mov ah, byte [0x56bba12c]
push edx
insw word es:[edi], dx
daa
jmp 0x94dff7f8
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4707ff
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 5
cmovae eax, dword [ebp - 0x230]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x470857
call fcn.0045ff78
test al, al
je 0x470831
jne 0x470795
lodsb al, byte [esi]
push ebx
cmc
fdiv qword [edx - 0x1a]
adc eax, 0x44c10e84
das
out 0x9d, eax
xchg esi, eax
lodsb al, byte [esi]
invalid
call fcn.0046022a
test al, al
je 0x47084c
mov byte [ebp + 0x2b29c60d], 0
and eax, 0xcc1027d7
arpl word [esp + ecx - 0x3e], cx
cld
sub ebp, dword [edx + 5]
push 5
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
xor ebx, ebx
lea ecx, [ebp - 0x230]
xor esi, esi
push ebx
inc esi
push esi
call fcn.004209e0
push ebx
push esi
lea ecx, [ebp - 0x260]
call fcn.004209e0
push ebx
push esi
lea ecx, [ebp - 0x278]
call fcn.004209e0
push ebx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.004209e0
push ebx
push esi
lea ecx, [ebp - 0x248]
call fcn.004209e0
call fcn.00458b37
ret