Function at 0x47af1f
Capabilities:
Delete file

Disassembly:
push ebp
sub esp, 0x5bc
lea ebp, [esp - 4]
mov eax, dword [0x590cec]
xor eax, ebp
mov dword [ebp + 0x5bc], eax
push 0x424
mov eax, 0x536af5
call fcn.004f41f7
mov esi, dword [ebp + 0x5c8]
mov edi, ecx
xor ebx, ebx
push 1
lea ecx, [ebp + 0x438]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], ebx
call fcn.0049bf21
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.004063ed
lea ecx, [ebp + 0x58c]
mov byte [ebp - 4], 2
call fcn.00467ae9
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 3
call fcn.004967bb
mov byte [ebp - 4], 4
cmp esi, ebx
jne 0x47afff
mov dword [edi + 0x18], 2
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 3
call fcn.004967c4
lea ecx, [ebp + 0x58c]
mov byte [ebp - 4], 2
call fcn.00467b0a
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.004064c1
lea ecx, [ebp + 0x438]
mov byte [ebp - 4], 0
call fcn.0049c363
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x5bc]
xor ecx, ebp
call fcn.004f41b5
add ebp, 0x5c0
leave
ret 8
push 0x545510
push esi
lea ecx, [ebp + 0x438]
call fcn.0049c37f
cmp eax, ebx
jne 0x47b01d
mov dword [edi + 0x18], 5
jmp 0x47af9f
mov dword [ebp - 0x14], 0x50534546
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp + 0x5cc], ebx
je 0x47b039
mov dword [ebp - 0x20], 1
push 4
pop esi
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
mov dword [ebp - 0x14], 1
call fcn.0049bfd5
push 0x20
pop ebx
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
mov dword [ebp - 0x14], ebx
call fcn.0049bfd5
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x14], eax
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
and dword [ebp - 0x14], 0
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
xor esi, esi
cmp esi, dword [edi + 0xc]
jge 0x47b0f8
push esi
lea ecx, [edi + 4]
call fcn.0042fbc5
test eax, eax
je 0x47b0f5
push dword [eax]
lea ecx, [ebp + 0x438]
push eax
call fcn.0049c05d
inc esi
jmp 0x47b0d5
lea ecx, [ebp + 0x438]
call fcn.0049c2ae
push 0x554900
push dword [ebp - 0x18]
lea ecx, [ebp + 0x438]
call fcn.0049c37f
test eax, eax
jne 0x47b128
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x47b014
lea ecx, [ebp + 0x438]
call fcn.0049c0e5
push 0
add eax, 0xffffffe0
push ebx
lea ecx, [ebp + 0x438]
mov dword [ebp - 0x14], eax
call fcn.0049bf53
push dword [ebp - 0x14]
call fcn.004b6e34
mov esi, eax
pop ecx
test esi, esi
jne 0x47b162
mov dword [edi + 0x18], 4
jmp 0x47b1f3
push dword [ebp - 0x14]
lea ecx, [ebp + 0x438]
push esi
call fcn.0049bff5
cmp eax, dword [ebp - 0x14]
je 0x47b185
push esi
call fcn.004b6e29
mov dword [edi + 0x18], 7
jmp 0x47b1f2
push 0
push dword [ebp - 0x14]
lea ecx, [ebp + 0x58c]
push esi
call fcn.004682c6
cmp dword [ebp + 0x5cc], 0
mov dword [ebp - 0x1c], eax
je 0x47b216
push 0xd
push str.j7:m0S1ndL1
lea ecx, [ebp - 0x430]
call fcn.004967de
push dword [ebp - 0x14]
lea ecx, [ebp - 0x430]
push esi
call fcn.0049684e
push 0
push ebx
lea ecx, [ebp + 0x438]
call fcn.0049bf53
push dword [ebp - 0x14]
lea ecx, [ebp + 0x438]
push esi
call fcn.0049c05d
cmp eax, dword [ebp - 0x14]
je 0x47b216
push esi
call fcn.004b6e29
mov dword [edi + 0x18], 8
pop ecx
lea ecx, [ebp + 0x438]
call fcn.0049c2ae
push dword [ebp - 0x18]
lea ecx, [ebp]
call fcn.00489793
lea ecx, [ebp]
call fcn.0048a958
jmp 0x47af9f
push esi
call fcn.004b6e29
pop ecx
push 0
push 0x10
lea ecx, [ebp + 0x438]
call fcn.0049bf53
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x438]
call fcn.0049bfd5
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 3
call fcn.004967c4
lea ecx, [ebp + 0x58c]
mov byte [ebp - 4], 2
call fcn.00467b0a
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.004064c1
lea ecx, [ebp + 0x438]
mov byte [ebp - 4], 0
call fcn.0049c363
xor eax, eax
inc eax
jmp 0x47afda