Function at 0x47e750
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x43c
push ebx
push esi
mov esi, edx
push edi
cmp eax, 1
je 0x47e76d
cmp eax, 2
je 0x47e76d
xor bh, bh
jmp 0x47e76f
mov bh, 1
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x34]
push eax
push 0x104
push ecx
call edi
lea ecx, [esp + 0x30]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47e790
sub ecx, edx
sar ecx, 1
je 0x47e7b0
cmp word [esp + ecx*2 + 0x2e], 0x5c
jne 0x47e7b0
xor eax, eax
mov word [esp + ecx*2 + 0x2e], ax
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x240]
push eax
push 0x104
push esi
call edi
lea ecx, [esp + 0x23c]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47e7d0
sub ecx, edx
sar ecx, 1
je 0x47e7f6
cmp word [esp + ecx*2 + 0x23a], 0x5c
jne 0x47e7f6
xor eax, eax
mov word [esp + ecx*2 + 0x23a], ax
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x47e9c0
test al, 0x10
je 0x47e9c0
mov bl, byte [esp + 0x450]
test bl, bl
je 0x47e8a5
movzx esi, word [esp + 0x30]
test esi, 0xffffff80
jne 0x47e840
push 1
push esi
call fcn.004d4154
add esp, 8
test eax, eax
je 0x47e840
or esi, 0x20
movzx edi, word [esp + 0x23c]
test edi, 0xffffff80
jne 0x47e862
push 1
push edi
call fcn.004d4154
add esp, 8
test eax, eax
je 0x47e862
or edi, 0x20
cmp si, di
jne 0x47e86f
cmp word [esp + 0x32], 0x3a
je 0x47e8a5
movzx eax, bh
lea edx, [esp + 0x23c]
push 0
push eax
lea ecx, [esp + 0x38]
call fcn.0047e750
add esp, 8
test al, al
je 0x47e9c0
mov dl, 1
lea ecx, [esp + 0x30]
call fcn.0047e9d0
pop edi
pop esi
pop ebx
add esp, 0x43c
ret
lea eax, [esp + 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x47e8ce
test al, 0x10
je 0x47e9c0
test bh, bh
je 0x47e9c0
test bl, bl
jne 0x47e915
jmp 0x47e8e8
test bl, bl
jne 0x47e915
xor edx, edx
lea ecx, [esp + 0x23c]
call fcn.00461a90
test al, al
je 0x47e9c0
lea ecx, [esp + 0x30]
add ecx, 0xfffffffe
nop
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x47e8f0
mov eax, dword [0x511748]
mov dword [ecx], eax
mov eax, dword [0x51174c]
mov dword [ecx + 4], eax
mov ax, word [0x511750]
mov word [ecx + 8], ax
lea ecx, [esp + 0x30]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47e920
sub ecx, edx
sar ecx, 1
xor eax, eax
mov word [esp + ecx*2 + 0x32], ax
lea ecx, [esp + 0x23c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47e940
xor eax, eax
sub ecx, edx
sar ecx, 1
xorps xmm0, xmm0
mov dword [esp + 0x10], eax
mov dword [esp + 0x2a], eax
movlpd qword [esp + 0x22], xmm0
mov word [esp + ecx*2 + 0x23e], ax
lea eax, [esp + 0x30]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x23c]
mov dword [esp + 0x1c], eax
movzx eax, bl
xor eax, 1
inc eax
cmp dword [esp + 0x44c], 2
mov dword [esp + 0x14], eax
mov eax, 0x614
mov word [esp + 0x20], ax
jne 0x47e9a6
mov eax, 0x615
mov word [esp + 0x20], ax
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
pop edi
test eax, eax
pop esi
sete al
pop ebx
add esp, 0x43c
ret
pop edi
pop esi
xor al, al
pop ebx
add esp, 0x43c
ret