Function at 0x50ecd7
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x648
mov dword [ebp - 0x644], ecx
push 0x5b7cb4
lea eax, [ebp - 0x204]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EliStartPage_v50.12
lea ecx, [ebp - 0x204]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
push str..tmp
lea edx, [ebp - 0x204]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x540]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x540]
push edx
call fcn.00401fca
add esp, 4
lea eax, [ebp - 0x540]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
movsx edx, byte [ebp + ecx - 0x544]
cmp edx, 0x2e
jne 0x50eda5
mov eax, dword [ebp - 0x33c]
movsx ecx, byte [ebp + eax - 0x543]
cmp ecx, 0x4a
jne 0x50eda5
mov edx, dword [ebp - 0x33c]
movsx eax, byte [ebp + edx - 0x542]
cmp eax, 0x41
jne 0x50eda5
mov ecx, dword [ebp - 0x33c]
movsx edx, byte [ebp + ecx - 0x541]
cmp edx, 0x52
je 0x50edf6
mov eax, dword [ebp - 0x33c]
movsx ecx, byte [ebp + eax - 0x544]
cmp ecx, 0x2e
jne 0x50edf1
mov edx, dword [ebp - 0x33c]
movsx eax, byte [ebp + edx - 0x543]
cmp eax, 0x5a
jne 0x50edf1
mov ecx, dword [ebp - 0x33c]
movsx edx, byte [ebp + ecx - 0x542]
cmp edx, 0x49
jne 0x50edf1
mov eax, dword [ebp - 0x33c]
movsx ecx, byte [ebp + eax - 0x541]
cmp ecx, 0x50
je 0x50edf6
jmp 0x50f0a5
push 0x5b8f38
lea edx, [ebp - 0x640]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x104
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.MSVCRT.dll__getcwd]
add esp, 8
movsx ecx, byte [ebp - 0x43e]
cmp ecx, 0x5c
jne 0x50ee58
movsx edx, byte [ebp - 0x43d]
test edx, edx
jne 0x50ee58
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x440]
push ecx
push 0x5b3fb4
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
jmp 0x50ee78
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x440]
push ecx
push str._s_s
lea edx, [ebp - 0x640]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.004136d0
add esp, 8
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x330]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 4]
push edx
call fcn.00413704
add esp, 0xc
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], 0
jmp 0x50eec5
mov ecx, dword [ebp - 0x334]
add ecx, 1
mov dword [ebp - 0x334], ecx
mov edx, dword [ebp - 0x334]
cmp edx, dword [ebp - 0x338]
jge 0x50f06a
lea eax, [ebp - 0x330]
push eax
mov ecx, dword [ebp - 0x334]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.00413704
add esp, 0xc
lea eax, [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
movsx edx, byte [ebp + ecx - 0x32d]
cmp edx, 0x2f
jne 0x50ef26
mov ecx, dword [ebp - 0x644]
call fcn.0050e6b5
jmp 0x50eeb6
mov ecx, dword [ebp - 0x644]
call fcn.0050e709
lea eax, [ebp - 0x32c]
push eax
mov ecx, dword [ebp + 8]
push ecx
push str._s_____s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, dword [ebp - 0x644]
add ecx, 0x540
call sub.MFC42.DLL_CWnd::SetWindowTextA
lea edx, [ebp - 0x32c]
push edx
lea eax, [ebp - 0x540]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x540]
push ecx
call fcn.004f812c
add esp, 4
test eax, eax
je 0x50ef93
jmp 0x50eeb6
mov ecx, dword [ebp - 0x644]
call fcn.0050e75d
lea edx, [ebp - 0x204]
push edx
mov eax, dword [ebp - 0x334]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.00413877
add esp, 0xc
push 0
lea edx, [ebp - 0x204]
push edx
call fcn.004f9b07
add esp, 8
test eax, eax
jne 0x50f046
mov ecx, dword [ebp - 0x644]
call fcn.0050e7b1
push 0x5b6404
lea eax, [ebp - 0x32c]
push eax
mov ecx, dword [ebp + 8]
push ecx
push str._s_____s____Detectado__s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, dword [ebp - 0x644]
add ecx, 0x3c0
call fcn.0050f650
push 0x5b6404
lea edx, [ebp - 0x32c]
push edx
lea eax, [ebp - 0x640]
push eax
push str._s_____s____Detectado__s_n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0
lea ecx, [ebp - 0x204]
push ecx
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.MSVCRT.dll_remove]
add esp, 4
jmp 0x50eeb6
mov eax, dword [ebp - 4]
push eax
call fcn.004139a7
add esp, 4
and eax, 0xff
test eax, eax
je 0x50f093
mov ecx, dword [ebp - 4]
push ecx
call fcn.00413912
add esp, 4
mov dword [ebp - 0x648], eax
jmp 0x50f0a5
mov edx, dword [ebp - 4]
push edx
call fcn.0040ba2f
add esp, 4
mov dword [ebp - 0x648], eax
mov esp, ebp
pop ebp
ret 4