Function at 0x47cdaa
Capabilities:
Delete file
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x56afe8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, ecx
mov dword [ebp - 0x244], edi
call fcn.00403a64
push eax
lea ecx, [ebp - 0x248]
call fcn.00402a6b
call fcn.0047ed68
test eax, eax
jne 0x47ce79
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x20c]
push ebx
push eax
call sub.msvcrt.dll_memset
push str._install
push dword [edi + 0xc]
lea eax, [ebp - 0x20c]
push str.__s___s
push 0x104
push eax
call fcn.004329e6
add esp, 0x20
lea ecx, [ebp - 0x238]
call fcn.0044d515
push ebx
push ebx
push 1
push ebx
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], ebx
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
lea ecx, [ebp - 0x238]
call fcn.0046997b
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [edi + 0x20a4], ebx
jne 0x47ce69
mov ecx, dword [edi + 0x2094]
push ebx
push ebx
push 6
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x238]
call fcn.0044d825
jmp 0x47d09b
push esi
lea esi, [edi + 0x10]
push dword [esi]
push dword [edi + 0xc]
call fcn.0047b3b6
pop ecx
pop ecx
test eax, eax
je 0x47d081
xor ebx, ebx
cmp dword [edi + 0x20a8], ebx
je 0x47cea2
mov ecx, edi
call fcn.0047d246
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [edi + 0x2098]
push eax
push 0x528004
lea eax, [ebp - 0x240]
push esi
push eax
call fcn.00413428
add esp, 0xc
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004133f1
mov ecx, dword [ebp - 0x240]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.004042e9
call fcn.00403a64
push eax
lea ecx, [ebp - 0x240]
call fcn.00402a6b
push 0x208
lea eax, [ebp - 0x20c]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push str.MacromedFlash
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0047b3de
pop ecx
push dword [edi + 0x209c]
lea eax, [ebp - 0x20c]
push eax
call esi
mov edi, dword [ebp - 0x23c]
lea eax, [ebp - 0x224]
push ebx
push edi
push eax
call fcn.0045997a
add esp, 0xc
lea eax, [ebp - 0x224]
cmp dword [ebp - 0x210], 8
jb 0x47cf79
mov eax, dword [ebp - 0x224]
push eax
lea ecx, [ebp - 0x23c]
call fcn.00402af5
lea ecx, [ebp - 0x23c]
call fcn.00403f8e
mov esi, dword [ebp - 0x244]
lea ecx, [esi + 0x20a0]
call fcn.00403f8e
mov eax, dword [esi + 0x20a0]
mov esi, dword [ebp - 0x23c]
cmp dword [eax - 0xc], ebx
jne 0x47cfc2
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x47d042
push 3
lea eax, [ebp - 0x20c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x47d042
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x23c]
call fcn.00402af5
lea eax, [ebp - 0x23c]
mov ecx, 0x574f55
push eax
call fcn.0047db58
mov ecx, dword [ebp - 0x23c]
lea ecx, [ecx - 0x10]
call fcn.004042e9
lea ecx, [esi - 0x10]
call fcn.004042e9
lea ecx, [ebp - 0x224]
call fcn.00410d88
mov ecx, dword [ebp - 0x240]
lea ecx, [ecx - 0x10]
call fcn.004042e9
lea ecx, [edi - 0x10]
call fcn.004042e9
mov eax, dword [ebp - 0x244]
push ebx
push ebx
push 6
mov ecx, dword [eax + 0x2094]
jmp 0x47d096
mov eax, dword [ebp - 0x244]
push ebx
push ebx
push 5
mov ecx, dword [eax + 0x2094]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [esi - 0x10]
call fcn.004042e9
lea ecx, [ebp - 0x224]
call fcn.00410d88
mov ecx, dword [ebp - 0x240]
lea ecx, [ecx - 0x10]
call fcn.004042e9
lea ecx, [edi - 0x10]
call fcn.004042e9
jmp 0x47d09a
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [edi + 0x2094]
xor ebx, ebx
push ebx
push ebx
push 5
mov eax, dword [ecx]
call dword [eax]
pop esi
mov ecx, dword [ebp - 0x248]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.00522d04
leave
ret