Function at 0x473d50
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c6b8b
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x4fad60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, 7
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x68], 0x506238
mov dword [0x50624c], esi
mov dword [0x506248], ebx
mov word [0x506238], ax
mov dword [ebp - 4], ebx
xor ecx, ecx
mov dword [0x506268], esi
mov dword [0x506264], ebx
mov word [0x506254], cx
xor edx, edx
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x64], dx
push 0x1c
lea eax, [ebp - 0x48]
push eax
push 0x473d40
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
neg eax
sbb eax, eax
and eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.0044f340
add esp, 4
cmp eax, ebx
je 0x474035
lea edx, [ebp - 0x64]
push edx
mov ecx, edx
call fcn.0044dcc0
xor eax, eax
add esp, 4
mov dword [ebp - 0x18], esi
mov word [ebp - 0x2c], ax
push 3
mov eax, 0x4e7280
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
call fcn.00403e70
lea ecx, [ebp - 0x64]
push ecx
mov edx, esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.0044e150
add esp, 4
mov edi, eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.00409010
mov esi, 8
cmp dword [ebp - 0x34], esi
jb 0x473e55
mov edx, dword [ebp - 0x48]
push edx
call fcn.00490a16
add esp, 4
xor eax, eax
mov edi, 7
mov byte [ebp - 4], 2
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
cmp dword [ebp - 0x18], esi
jb 0x473e7b
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00490a16
add esp, 4
xor edx, edx
push 0xa
mov eax, str.iRadar.dll
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.00403e70
lea eax, [ebp - 0x64]
push eax
mov edx, esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.0044e150
add esp, 4
mov edi, eax
mov esi, 0x506238
mov byte [ebp - 4], 6
call fcn.00409010
mov esi, 8
cmp dword [ebp - 0x34], esi
jb 0x473ed1
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00490a16
add esp, 4
xor edx, edx
mov edi, 7
mov byte [ebp - 4], 2
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], dx
cmp dword [ebp - 0x18], esi
jb 0x473ef7
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00490a16
add esp, 4
lea ecx, [ebp - 0x64]
push ecx
call fcn.0044dcc0
add esp, 4
xor edx, edx
push 3
mov eax, 0x4e72a0
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.00403e70
lea eax, [ebp - 0x64]
push eax
mov edx, esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 7
call fcn.0044e150
add esp, 4
mov edi, eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 8
call fcn.00409010
mov edi, 8
cmp dword [ebp - 0x34], edi
jb 0x473f57
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00490a16
add esp, 4
xor edx, edx
mov esi, 7
mov byte [ebp - 4], 2
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], dx
cmp dword [ebp - 0x18], edi
jb 0x473f7d
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00490a16
add esp, 4
mov dword [ebp - 0x18], esi
xor ecx, ecx
push 0xa
mov eax, str.iRadar.dll
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], cx
call fcn.00403e70
lea edx, [ebp - 0x64]
push edx
mov edx, esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.0044e150
add esp, 4
mov edi, eax
mov esi, 0x506254
mov byte [ebp - 4], 0xa
call fcn.00409010
mov edi, 8
cmp dword [ebp - 0x34], edi
jb 0x473fd3
mov eax, dword [ebp - 0x48]
push eax
call fcn.00490a16
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], cx
cmp dword [ebp - 0x18], edi
jb 0x473ff4
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00490a16
add esp, 4
mov eax, dword [0x506238]
cmp dword [0x50624c], edi
jae 0x474006
mov eax, 0x506238
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call esi
cmp eax, 0xffffffff
je 0x47403a
shr eax, 4
not eax
and eax, 1
je 0x47403a
mov eax, dword [0x506254]
cmp dword [0x506268], edi
jae 0x474030
mov eax, 0x506254
push eax
call esi
jmp 0x47403a
mov edi, 8
cmp dword [ebp - 0x50], edi
jb 0x47404b
mov eax, dword [ebp - 0x64]
push eax
call fcn.00490a16
add esp, 4
mov eax, 0x506238
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00490a21
mov esp, ebp
pop ebp
ret