Function at 0x473ff0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0xffffffffffffffff
push 0x613488
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
push ebx
xor eax, eax
xor ebx, ebx
push esi
push edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
mov word [esp + 0x14], ax
mov esi, dword [0x6ec738]
mov dword [esp + 0x48], eax
cmp esi, eax
jne 0x474033
mov esi, 0x6ec73c
mov ecx, 0x6bc11c
push ebp
test ecx, ecx
je 0x474151
cmp esi, eax
je 0x474151
mov edx, 0x6be350
test edx, edx
je 0x474151
push ecx
lea ecx, [esp + 0x3c]
call fcn.00402350
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 1
call fcn.0040e020
mov bl, 2
push 0x6be350
lea ecx, [esp + 0x24]
mov byte [esp + 0x50], bl
call fcn.0040e020
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 3
call fcn.00401070
mov esi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005f6c5c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x474120
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x20]
call fcn.004023d0
push eax
lea ecx, [esp + 0x30]
call fcn.004023d0
push eax
lea ecx, [esp + 0x40]
call fcn.004023d0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 1
call fcn.00401070
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
test eax, eax
jne 0x474159
lea eax, [esp + 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call edi
cmp eax, 0xffffffff
jne 0x474170
mov ebx, 1
mov dword [esp + 0x10], ebx
mov esi, dword [0x6ec738]
test esi, esi
jne 0x47417f
mov esi, 0x6ec73c
mov edx, 0x6bc11c
test edx, edx
je 0x47429e
test esi, esi
je 0x47429e
mov eax, 0x6bd84c
test eax, eax
je 0x47429e
push edx
lea ecx, [esp + 0x24]
call fcn.00402350
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 4
call fcn.0040e020
mov bl, 5
push 0x6bd84c
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.0040e020
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 6
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005f6c5c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x47426b
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
lea ecx, [esp + 0x30]
call fcn.004023d0
push eax
lea ecx, [esp + 0x28]
call fcn.004023d0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 4
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4742aa
lea eax, [esp + 0x18]
push eax
call edi
cmp eax, 0xffffffff
jne 0x4742b7
inc ebx
mov dword [esp + 0x10], ebx
mov esi, dword [0x6ec738]
test esi, esi
jne 0x4742c6
mov esi, 0x6ec73c
mov edx, 0x6bc11c
test edx, edx
je 0x4743e5
test esi, esi
je 0x4743e5
mov eax, 0x6be318
test eax, eax
je 0x4743e5
push edx
lea ecx, [esp + 0x24]
call fcn.00402350
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 7
call fcn.0040e020
mov bl, 8
push 0x6be318
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.0040e020
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 9
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005f6c5c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x4743b2
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
lea ecx, [esp + 0x30]
call fcn.004023d0
push eax
lea ecx, [esp + 0x28]
call fcn.004023d0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 7
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4743f1
lea eax, [esp + 0x18]
push eax
call edi
cmp eax, 0xffffffff
jne 0x4743fe
inc ebx
mov dword [esp + 0x10], ebx
mov esi, dword [0x6ec738]
test esi, esi
jne 0x47440d
mov esi, 0x6ec73c
mov edx, 0x6bc11c
test edx, edx
je 0x47452c
test esi, esi
je 0x47452c
mov eax, 0x6be3b0
test eax, eax
je 0x47452c
push edx
lea ecx, [esp + 0x24]
call fcn.00402350
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0xa
call fcn.0040e020
mov bl, 0xb
push 0x6be3b0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.0040e020
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0xc
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005f6c5c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x4744f9
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
lea ecx, [esp + 0x30]
call fcn.004023d0
push eax
lea ecx, [esp + 0x28]
call fcn.004023d0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0xa
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x474538
lea eax, [esp + 0x18]
push eax
call edi
cmp eax, 0xffffffff
jne 0x474545
inc ebx
mov dword [esp + 0x10], ebx
mov esi, dword [0x6ec738]
test esi, esi
jne 0x474554
mov esi, 0x6ec73c
mov edx, 0x6bc11c
test edx, edx
je 0x474673
test esi, esi
je 0x474673
mov eax, 0x6be368
test eax, eax
je 0x474673
push edx
lea ecx, [esp + 0x24]
call fcn.00402350
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0xd
call fcn.0040e020
mov bl, 0xe
push 0x6be368
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.0040e020
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0xf
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005f6c5c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x474640
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
lea ecx, [esp + 0x30]
call fcn.004023d0
push eax
lea ecx, [esp + 0x28]
call fcn.004023d0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0xd
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x47467f
lea eax, [esp + 0x18]
push eax
call edi
cmp eax, 0xffffffff
jne 0x47468c
inc ebx
mov dword [esp + 0x10], ebx
mov esi, dword [0x6ec738]
test esi, esi
jne 0x47469b
mov esi, 0x6ec73c
mov edx, 0x6bc11c
test edx, edx
je 0x4747ba
test esi, esi
je 0x4747ba
mov eax, 0x6be304
test eax, eax
je 0x4747ba
push edx
lea ecx, [esp + 0x24]
call fcn.00402350
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 0x10
call fcn.0040e020
mov bl, 0x11
push 0x6be304
lea ecx, [esp + 0x3c]
mov byte [esp + 0x50], bl
call fcn.0040e020
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 0x12
call fcn.00401070
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea ebp, [esi + esi]
push ebp
call fcn.005f6c5c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x14], edi
je 0x474787
mov ecx, ebp
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x38]
call fcn.004023d0
push eax
lea ecx, [esp + 0x30]
call fcn.004023d0
push eax
lea ecx, [esp + 0x28]
call fcn.004023d0
push eax
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], bl
call fcn.00401070
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0x10
call fcn.00401070
lea ecx, [esp + 0x20]
mov byte [esp + 0x4c], 0
call fcn.00401070
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [esp + 0x14]
pop ebp
test eax, eax
jne 0x4747c7
lea eax, [esp + 0x14]
push eax
call edi
cmp eax, 0xffffffff
jne 0x4747d0
inc ebx
mov eax, dword [0x6ec738]
test eax, eax
jne 0x4747de
mov eax, 0x6ec73c
push 0x6be2e8
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4747fe
lea eax, [esp + 0x14]
push eax
call edi
cmp eax, 0xffffffff
jne 0x474807
inc ebx
mov eax, dword [0x6ec738]
test eax, eax
jne 0x474815
mov eax, 0x6ec73c
push 0x6c19fc
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x474835
lea eax, [esp + 0x14]
push eax
call edi
cmp eax, 0xffffffff
jne 0x47483e
inc ebx
mov eax, dword [0x6ec738]
test eax, eax
jne 0x47484c
mov eax, 0x6ec73c
push 0x6bd550
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x47486c
lea eax, [esp + 0x14]
push eax
call edi
cmp eax, 0xffffffff
jne 0x474875
inc ebx
push 0x6be2c8
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x4748a5
inc ebx
push 0x6c2da8
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x4748d5
inc ebx
push 0x6be24c
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474905
inc ebx
push 0x6c04cc
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474935
inc ebx
push 0x6c2d8c
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474965
inc ebx
push 0x6bd260
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474995
inc ebx
push 0x6be2ac
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x4749c5
inc ebx
call fcn.00445c70
test eax, eax
je 0x474af2
push 0x6be268
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474a02
inc ebx
push 0x6be28c
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474a32
inc ebx
push 0x6be384
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474a62
inc ebx
push 0x6c2d6c
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474a92
inc ebx
push 0x6c2d44
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474ac2
inc ebx
push 0x6be22c
mov ecx, 0x6ec738
call fcn.004023d0
push eax
push 0x6bc11c
lea ecx, [esp + 0x1c]
call fcn.0040f650
lea ecx, [esp + 0x10]
call fcn.004023d0
push eax
call edi
cmp eax, 0xffffffff
jne 0x474af2
inc ebx
lea ecx, [esp + 0x10]
mov dword [esp + 0x48], 0xffffffff
call fcn.00401070
mov ecx, dword [esp + 0x40]
pop edi
mov eax, ebx
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x40
ret