Function at 0x47e1e0
Capabilities:
Check if file exists

Disassembly:
push 0xffffffffffffffff
push 0x49eca7
mov eax, dword fs:[0]
push eax
sub esp, 0xa60
mov eax, dword [0x4cacfc]
xor eax, esp
mov dword [esp + 0xa5c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4cacfc]
xor eax, esp
push eax
lea eax, [esp + 0xa74]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 0x934]
xor ebx, ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x24], ebx
call fcn.00415b60
mov edi, 0x1f01ff
mov ebp, 0x1200a9
test al, al
je 0x47e24a
mov dword [esp + 0x1c], edi
jmp 0x47e272
mov ecx, dword [esi + 0x938]
call fcn.00415b60
test al, al
je 0x47e263
mov dword [esp + 0x1c], 0x1301bf
jmp 0x47e272
mov ecx, dword [esi + 0x93c]
call fcn.00415b60
mov dword [esp + 0x1c], ebp
mov ecx, dword [esi + 0x940]
call fcn.00415b60
test al, al
je 0x47e285
mov dword [esp + 0x14], edi
mov ecx, dword [esi + 0x944]
call fcn.00415b60
test al, al
je 0x47e29c
or dword [esp + 0x14], 0x1301bf
mov ecx, dword [esi + 0x948]
call fcn.00415b60
test al, al
je 0x47e2af
or dword [esp + 0x14], ebp
mov ecx, dword [esi + 0x94c]
call fcn.00415b60
test al, al
je 0x47e2c2
or dword [esp + 0x14], ebp
mov ecx, dword [esi + 0x950]
call fcn.00415b60
test al, al
je 0x47e2d9
or dword [esp + 0x14], 0x120089
mov ecx, dword [esi + 0x954]
call fcn.00415b60
test al, al
je 0x47e2f0
or dword [esp + 0x14], 0x100116
cmp dword [esp + 0x14], ebx
jne 0x47e2fa
mov dword [esp + 0x14], ebp
mov ecx, dword [esi + 0x958]
mov eax, dword [ecx + 0x698]
mov edx, dword [eax + 8]
add ecx, 0x698
call edx
cmp eax, 4
ja case.0x47e316.0
jmp dword [eax*4 + 0x47e794]
mov dword [esp + 0x18], 0x14
jmp 0x47e34d
mov dword [esp + 0x18], 0xa
jmp 0x47e34d
mov dword [esp + 0x18], 5
jmp 0x47e34d
mov dword [esp + 0x18], 1
jmp 0x47e34d
mov dword [esp + 0x18], 0xffffffff
lea ecx, [esp + 0xb4]
call fcn.00401f60
push 0x208
lea edi, [esi + 0xb74]
push ebx
push edi
mov dword [esp + 0xa88], ebx
call fcn.00487630
push 0x208
lea ebp, [esi + 0xd7c]
push ebx
push ebp
call fcn.00487630
push 0x208
lea ebx, [esi + 0xf84]
push 0
push ebx
call fcn.00487630
mov ecx, dword [esi + 0x930]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
add esp, 0x24
lea edx, [esp + 0x30]
push edx
call eax
push eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0xa80], 1
call fcn.00402240
lea ecx, [esp + 0x30]
mov byte [esp + 0xa7c], 0
call fcn.00401fd0
lea ecx, [esp + 0xb4]
call fcn.00402010
mov ecx, edi
movzx edx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 2
test dx, dx
jne 0x47e3e0
mov ecx, dword [esi + 0x928]
mov edx, dword [ecx]
mov edx, dword [edx + 0x28]
lea eax, [esp + 0x30]
push eax
call edx
push eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0xa80], 2
call fcn.00402240
lea ecx, [esp + 0x30]
mov byte [esp + 0xa7c], 0
call fcn.00401fd0
lea ecx, [esp + 0xb4]
call fcn.00402010
mov edx, ebp
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
test cx, cx
jne 0x47e437
mov ecx, dword [esi + 0x92c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x30]
push edx
call eax
push eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0xa80], 3
call fcn.00402240
lea ecx, [esp + 0x30]
mov byte [esp + 0xa7c], 0
call fcn.00401fd0
lea ecx, [esp + 0xb4]
call fcn.00402010
mov edx, ebx
mov edi, edi
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
test cx, cx
jne 0x47e490
lea ecx, [esp + 0x24]
push ecx
push 0x1f6
push ebp
push 0
call sub.NETAPI32.dll_NetShareGetInfo
test eax, eax
jne 0x47e54b
mov edx, dword [esp + 0x24]
push edx
call sub.NETAPI32.dll_NetApiBufferFree
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ebx
push eax
push 0
push ecx
push 0
push edx
push 0x4ac730
push ebp
push edi
mov dword [esp + 0x48], 0
call fcn.00479a20
add esp, 0x24
mov ebx, eax
push edi
test ebx, ebx
je 0x47e521
push 0x4ac744
push 0x104
push 0x4d04b0
call fcn.00466960
mov eax, dword [esi + 4]
push 0x4ac75c
push eax
call fcn.004772b0
add esp, 0x18
jmp 0x47e73e
push 0x4ac770
push 0x104
push 0x4d04b0
call fcn.00466960
mov ecx, dword [esi + 4]
push 0x4ac788
push ecx
call fcn.004772b0
add esp, 0x18
jmp 0x47e73e
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47e585
mov edx, dword [esi + 4]
push 0x4ac79c
push edx
call fcn.004772b0
add esp, 8
lea ecx, [esp + 0xb4]
mov dword [esp + 0xa7c], 0xffffffff
call fcn.00401fd0
xor eax, eax
jmp 0x47e76a
push edi
call dword [sym.imp.SHLWAPI.dll_PathIsNetworkPathW]
test eax, eax
je 0x47e59b
mov eax, dword [esi + 4]
push 0x4ac7a8
push eax
jmp 0x47e55f
mov eax, ebp
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x47e5a0
sub eax, edx
sar eax, 1
jne 0x47e5bc
mov ecx, dword [esi + 4]
push 0x4ac7b4
push ecx
jmp 0x47e55f
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
push ebx
push edx
push 0
push eax
push 0x4ac7c8
push ebp
push edi
call fcn.00477b90
add esp, 0x1c
push 0
test eax, eax
jne 0x47e6ec
mov ecx, dword [esp + 0x18]
push ecx
push 0x4ac7dc
push edi
call fcn.0046e420
add esp, 0x10
test eax, eax
jne 0x47e60a
mov edx, dword [esi + 4]
push 0x4ac7f0
push edx
call fcn.004772b0
add esp, 8
call fcn.004784d0
test eax, eax
jne 0x47e621
push eax
call fcn.00478510
add esp, 4
jmp 0x47e6b7
lea ecx, [esp + 0x138]
call fcn.004658d0
mov eax, dword [esi + 4]
push 0
push connect
push connect
push connect
push connect
push pe_nt_image_headers32
push 0xce0000
push 0
push eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0xaa0], 4
call fcn.00401370
push 0x4ac804
lea ecx, [esp + 0x13c]
call fcn.00464e10
push 0x4ac81c
lea ecx, [esp + 0x13c]
call fcn.00464e20
push 0
lea ecx, [esp + 0x13c]
call fcn.00464e50
lea ecx, [esp + 0x138]
call fcn.00401480
lea ecx, [esp + 0x138]
mov byte [esp + 0xa7c], 0
call fcn.00465a50
call fcn.004795d0
push edi
push 0x4ac828
push 0x104
push 0x4d04b0
mov dword [esp + 0x30], 1
call fcn.00466960
mov ecx, dword [esi + 4]
push 0x4ac840
push ecx
call fcn.004772b0
add esp, 0x18
jmp 0x47e73a
push 0
lea edx, [esp + 0x30]
push edx
push 0x400
push eax
push 0
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [esp + 0x28]
mov ecx, dword [esi + 4]
push eax
push ecx
call fcn.004772b0
mov edx, dword [esp + 0x30]
add esp, 8
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
push 0x4ac848
push 0x104
push 0x4d04b0
call fcn.00466960
add esp, 0x10
mov ebx, dword [esp + 0x20]
push 0x4d04b0
mov dword [esi + 0x968], ebx
call fcn.00470070
add esp, 4
lea ecx, [esp + 0xb4]
mov dword [esp + 0xa7c], 0xffffffff
call fcn.00401fd0
mov eax, ebx
mov ecx, dword [esp + 0xa74]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa5c]
xor ecx, esp
call fcn.00486dc0
add esp, 0xa6c
ret