Function at 0x4727f1
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov eax, 0x4f1fc0
call fcn.004eadec
sub esp, 0x58
push ebx
push esi
push edi
push 0x819a
lea eax, [ebp - 0x20]
call fcn.004017db
mov eax, dword [eax]
mov esi, dword [ebp + 8]
mov ebx, dword [sym.imp.USER32.dll_MessageBoxW]
pop ecx
push 0x23
push dword [0x52224c]
push eax
push dword [esi + 4]
call ebx
mov edi, eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x47283e
push eax
call fcn.004013aa
xor eax, eax
cmp edi, 2
je 0x472b9b
cmp edi, 6
sete al
push 2
push 0xffffffffffffffff
mov dword [ebp - 0x1c], eax
lea eax, [esi + 0x504]
push eax
mov dword [ebp - 0x20], eax
call fcn.004386a1
mov edi, eax
cmp edi, 0xffffffff
jne 0x4728bf
mov eax, dword [esi + 0xf0]
test eax, eax
je 0x47287b
mov eax, dword [eax + 4]
jmp 0x47287d
xor eax, eax
test eax, eax
jle 0x472b99
push 0x8197
lea eax, [ebp + 8]
call fcn.004017db
pop ecx
push 0x30
push dword [0x52224c]
push dword [eax]
push dword [esi + 4]
call ebx
mov eax, dword [ebp + 8]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x472b99
push eax
call fcn.004013aa
jmp 0x472b99
xor ebx, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 4], ebx
push edi
lea eax, [ebp - 0x40]
call fcn.0041c6d3
push 2
push edi
push dword [ebp - 0x20]
call fcn.004386a1
mov edi, eax
cmp edi, 0xffffffff
jne 0x4728d0
xor eax, eax
cmp dword [ebp - 0x1c], ebx
push 2
setne al
inc eax
imul eax, dword [ebp - 0x3c]
imul eax, eax, 0x105
inc eax
push eax
call dword [sym.imp.MSVCRT.dll_calloc]
cmp dword [ebp - 0x3c], ebx
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
jle 0x472b82
cmp eax, ebx
je 0x472b91
cmp dword [ebp - 0x3c], ebx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ebx
jle 0x472a8b
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x3c]
jae 0x472bac
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 0xf0]
call fcn.0045d964
mov edi, dword [eax]
cmp edi, ebx
je 0x472957
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
cmp edi, ebx
jne 0x472964
mov byte [ebp - 4], 0
jmp 0x472a7c
push edi
call fcn.00414227
test eax, eax
je 0x472986
push 0xffffffffffffffff
push 0xe102
push 0x111
push dword [0x522248]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
lea eax, [ebp - 0x24]
call fcn.0049a177
mov eax, dword [eax]
push 0x4fb8f4
push eax
call dword [sym.imp.MSVCRT.dll__wcsicmp]
mov ebx, eax
mov eax, dword [ebp - 0x24]
neg ebx
sbb bl, bl
add eax, 0xfffffff4
pop ecx
inc bl
cmp eax, dword [0x51a43c]
pop ecx
je 0x4729bb
push eax
call fcn.004013aa
test bl, bl
jne 0x472a6f
push edi
lea eax, [ebp - 0x30]
call fcn.00404868
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4729fc
test al, 0x10
jne 0x4729fc
push dword [ebp - 0x30]
mov ebx, dword [ebp - 0x10]
push ebx
call dword [sym.imp.MSVCRT.dll_wcscpy]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax - 8]
pop ecx
lea ebx, [ebx + eax*2 + 2]
pop ecx
mov dword [ebp - 0x10], ebx
jmp 0x4729ff
mov ebx, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], 0
je 0x472a5b
lea eax, [ebp - 0x30]
push eax
mov esi, 0x521324
push esi
lea eax, [ebp - 0x28]
call fcn.004300f5
lea eax, [ebp - 0x30]
push eax
call fcn.00430157
mov esi, dword [ebp - 0x28]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x472a47
test al, 0x10
jne 0x472a47
push esi
push ebx
call dword [sym.imp.MSVCRT.dll_wcscpy]
mov eax, dword [esi - 8]
pop ecx
lea eax, [ebx + eax*2 + 2]
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [esi - 0xc]
cmp eax, dword [0x51a43c]
je 0x472a58
push eax
call fcn.004013aa
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x472a6f
push eax
call fcn.004013aa
mov eax, edi
mov byte [ebp - 4], 0
call fcn.00404842
xor ebx, ebx
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x3c]
jl 0x47292d
xor eax, eax
push 6
pop ecx
lea edi, [ebp - 0x5c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esi + 4]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
mov dword [ebp - 0x5c], 3
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x50], 0x40
mov dword [ebp - 0x4e], ebx
je 0x472ad6
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
jne 0x472b82
cmp dword [ebp - 0x4e], ebx
jne 0x472b82
mov eax, dword [esi + 0xf0]
cmp eax, ebx
je 0x472ae5
mov eax, dword [eax + 0x1c]
jmp 0x472ae8
or eax, 0xffffffff
cmp dword [0x521c14], ebx
mov dword [ebp - 0x10], eax
je 0x472b02
cmp dword [0x521b68], ebx
mov dword [ebp - 0x1c], 1
jne 0x472b05
mov dword [ebp - 0x1c], ebx
mov edi, dword [ebp - 0x3c]
dec edi
cmp edi, ebx
jl 0x472b50
cmp edi, dword [ebp - 0x3c]
jae 0x472bac
mov eax, dword [ebp - 0x40]
mov ebx, dword [eax + edi*4]
cmp ebx, dword [ebp - 0x10]
jge 0x472b26
dec dword [ebp - 0x10]
jmp 0x472b2c
jne 0x472b2c
or dword [ebp - 0x10], 0xffffffff
push dword [ebp - 0x1c]
push 1
push dword [esi + 0xf0]
call fcn.0045fcda
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xf0]
inc dword [eax + 0x24]
dec edi
mov esi, dword [ebp + 8]
jns 0x472b0d
xor ebx, ebx
mov eax, dword [esi + 0xf0]
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x1c], ecx
mov eax, dword [esi + 0xf0]
push dword [eax + 4]
mov eax, dword [ebp - 0x20]
call fcn.0047704f
push ebx
or eax, 0xffffffff
mov ecx, esi
call fcn.0046c707
push 0x521500
call fcn.0049c8f4
cmp dword [ebp - 0x18], ebx
je 0x472b91
push dword [ebp - 0x18]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
lea eax, [ebp - 0x40]
call fcn.00421580
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4
push 0x80070057
call fcn.004010ca
int3