Function at 0x47ddf0
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4815ad
mov eax, dword fs:[0]
push eax
mov eax, 0x26844
call fcn.00425c40
mov eax, dword [0x4a71b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2683c], ecx
push 0x4a0068
lea ecx, [ebp - 0x267a4]
call fcn.00402220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x267a4]
push eax
mov ecx, dword [ebp - 0x2683c]
mov edx, dword [ecx + 0x4e4]
mov eax, dword [ebp - 0x2683c]
mov ecx, dword [eax + 0x4e4]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x26718], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x267a4]
call fcn.00401190
cmp dword [ebp - 0x26718], 0
jne 0x47de8c
xor eax, eax
jmp 0x47e68c
push 0x4a0070
lea ecx, [ebp - 0x8e0]
call fcn.00402220
mov dword [ebp - 4], 1
push 0x4a0074
lea ecx, [ebp - 0x254]
call fcn.00402220
mov byte [ebp - 4], 2
push str.RunExe
lea ecx, [ebp - 0x267c0]
call fcn.00402220
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x267c0]
push ecx
mov edx, dword [ebp - 0x2683c]
mov eax, dword [edx + 0x4e4]
mov ecx, dword [ebp - 0x2683c]
mov ecx, dword [ecx + 0x4e4]
mov edx, dword [eax]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x8e4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x267c0]
call fcn.00401190
cmp dword [ebp - 0x8e4], 0
je 0x47df26
mov ecx, dword [ebp - 0x8e4]
call fcn.00401210
push eax
lea ecx, [ebp - 0x8e0]
call fcn.004011d0
push str.RunParam
lea ecx, [ebp - 0x267dc]
call fcn.00402220
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x267dc]
push ecx
mov edx, dword [ebp - 0x2683c]
mov eax, dword [edx + 0x4e4]
mov ecx, dword [ebp - 0x2683c]
mov ecx, dword [ecx + 0x4e4]
mov edx, dword [eax]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x26728], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x267dc]
call fcn.00401190
cmp dword [ebp - 0x26728], 0
je 0x47df95
mov ecx, dword [ebp - 0x26728]
call fcn.00401210
push eax
lea ecx, [ebp - 0x254]
call fcn.004011d0
call fcn.00409af0
mov ecx, eax
call fcn.0047ed70
push 0x4a009c
lea ecx, [ebp - 0x238]
call fcn.00402220
mov byte [ebp - 4], 5
cmp dword [ebp - 0x26718], 0
je 0x47dfd5
mov ecx, dword [ebp - 0x26718]
call fcn.00401210
push eax
lea ecx, [ebp - 0x238]
call fcn.004011d0
push 0
push 0
push 0x468
call fcn.00409af0
mov ecx, eax
call dword [sym.imp.DuiLib32.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov word [ebp - 0x21c], 0
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.004101c0
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
lea ecx, [ebp - 0x238]
call fcn.00401210
push eax
call fcn.00478ed0
add esp, 8
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x58c]
call fcn.00402220
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x58c]
push ecx
mov edx, dword [ebp - 0x2683c]
add edx, 0x338
push edx
lea eax, [ebp - 0x5a8]
push eax
call fcn.0040a450
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5a8]
call fcn.00401210
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47e093
lea ecx, [ebp - 0x5a8]
call fcn.00401210
push eax
call fcn.00479460
add esp, 4
mov ecx, dword [ebp - 0x2683c]
add ecx, 0x338
push ecx
lea edx, [ebp - 0x570]
push edx
call fcn.00479630
add esp, 8
mov byte [ebp - 4], 8
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x267f8]
push ecx
call fcn.00479630
add esp, 8
mov dword [ebp - 0x26840], eax
mov ecx, dword [ebp - 0x26840]
call fcn.00402b40
push eax
lea edx, [ebp - 0x554]
push edx
call fcn.0040fe10
add esp, 8
lea ecx, [ebp - 0x267f8]
call fcn.00402b20
lea ecx, [ebp - 0x570]
call fcn.00402b40
push eax
lea eax, [ebp - 0x354]
push eax
call fcn.0040fe10
add esp, 8
lea ecx, [ebp - 0x26714]
call fcn.00480060
mov byte [ebp - 4], 9
sub esp, 0x300
mov ecx, 0xc0
lea esi, [ebp - 0x554]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x26714]
call fcn.00480300
lea ecx, [ebp - 0x26714]
call fcn.00480010
lea ecx, [ebp - 0x8c4]
call fcn.00401cd0
fldz
fstp qword [ebp - 0x26724]
mov ecx, 1
test ecx, ecx
je 0x47e281
lea ecx, [ebp - 0x26714]
call fcn.0047fcf0
test eax, eax
je 0x47e1f6
lea edx, [ebp - 0x8c4]
push edx
lea ecx, [ebp - 0x26714]
call fcn.0047f900
fld qword [ebp - 0x5b4]
fstp qword [ebp - 0x26724]
fld qword [ebp - 0x26724]
fdiv qword [ebp - 0x5bc]
mov eax, dword [ebp - 0x2683c]
fstp dword [eax + 0x4ec]
mov ecx, dword [ebp - 0x2683c]
fld dword [ecx + 0x4ec]
fmul qword [0x4a0da0]
call fcn.0045e960
mov dword [ebp - 0x2672c], eax
mov edx, dword [ebp - 0x2672c]
push edx
push 0
push 0x465
call fcn.00409af0
mov ecx, eax
call dword [sym.imp.DuiLib32.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x26714]
call fcn.0047fcd0
test eax, eax
je 0x47e27c
lea eax, [ebp - 0x8c4]
push eax
lea ecx, [ebp - 0x26714]
call fcn.0047f900
fld qword [ebp - 0x5b4]
fstp qword [ebp - 0x26724]
fld qword [ebp - 0x26724]
fdiv qword [ebp - 0x5bc]
mov ecx, dword [ebp - 0x2683c]
fstp dword [ecx + 0x4ec]
mov edx, dword [ebp - 0x2683c]
fld dword [edx + 0x4ec]
fmul qword [0x4a0da0]
call fcn.0045e960
mov dword [ebp - 0x26730], eax
mov eax, dword [ebp - 0x26730]
push eax
push 0
push 0x465
call fcn.00409af0
mov ecx, eax
call dword [sym.imp.DuiLib32.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x47e281
jmp 0x47e15d
fld qword [ebp - 0x5bc]
fcomp qword [ebp - 0x26724]
fnstsw ax
test ah, 0x44
jp 0x47e2a7
fldz
fcomp qword [ebp - 0x26724]
fnstsw ax
test ah, 0x44
jp 0x47e358
mov ecx, dword [ebp - 0x2683c]
fld1
fstp dword [ecx + 0x4ec]
push 0x64
push 0
push 0x467
call fcn.00409af0
mov ecx, eax
call dword [sym.imp.DuiLib32.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x267fc], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x26714]
call fcn.0047fd10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x570]
call fcn.00402b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5a8]
call fcn.00401190
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x58c]
call fcn.00401190
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x238]
call fcn.00401190
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x254]
call fcn.00401190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e0]
call fcn.00401190
mov eax, dword [ebp - 0x267fc]
jmp 0x47e68c
push 0x64
push 0
push 0x465
call fcn.00409af0
mov ecx, eax
call dword [sym.imp.DuiLib32.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x4a00a0
lea ecx, [ebp - 0x26750]
call fcn.00402220
mov byte [ebp - 4], 0xa
mov edx, dword [0x4a0a64]
push edx
push 0x2e
lea ecx, [ebp - 0x58c]
call fcn.00409d60
push eax
push 0
lea eax, [ebp - 0x26818]
push eax
lea ecx, [ebp - 0x58c]
call fcn.00409d80
mov dword [ebp - 0x26844], eax
mov ecx, dword [ebp - 0x26844]
mov dword [ebp - 0x26848], ecx
mov byte [ebp - 4], 0xb
push str..exe
mov edx, dword [ebp - 0x26848]
push edx
lea eax, [ebp - 0x2676c]
push eax
call fcn.0040a4e0
add esp, 0xc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x26818]
call fcn.00401190
push 0x4a00b0
lea ecx, [ebp - 0x8e0]
push ecx
call fcn.0040a570
add esp, 8
movzx edx, al
test edx, edx
je 0x47e41f
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x2676c]
call fcn.004011b0
lea ecx, [ebp - 0x2676c]
push ecx
mov edx, dword [ebp - 0x2683c]
add edx, 0x338
push edx
lea eax, [ebp - 0x26834]
push eax
call fcn.0040a450
add esp, 0xc
mov dword [ebp - 0x2684c], eax
mov ecx, dword [ebp - 0x2684c]
mov dword [ebp - 0x26850], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x26850]
push edx
lea ecx, [ebp - 0x26750]
call fcn.004011b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x26834]
call fcn.00401190
lea ecx, [ebp - 0x26750]
call fcn.00401210
push eax
lea ecx, [ebp - 0x5a8]
call fcn.00401210
push eax
call fcn.00478cf0
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x26750]
call fcn.00401210
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47e586
lea ecx, [ebp - 0x26750]
call fcn.00401210
push eax
call fcn.00478b00
add esp, 4
test eax, eax
je 0x47e586
push 0x4a00b4
lea eax, [ebp - 0x254]
push eax
call fcn.0040a590
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x47e50b
lea ecx, [ebp - 0x26750]
call fcn.00401210
push eax
call fcn.00479010
add esp, 4
jmp 0x47e586
push 0x4a00b8
lea ecx, [ebp - 0x26788]
call fcn.00402220
mov byte [ebp - 4], 0xf
push 0x4a00bc
lea ecx, [ebp - 0x26788]
call fcn.004011f0
lea edx, [ebp - 0x26750]
push edx
lea ecx, [ebp - 0x26788]
call fcn.00409d40
push 0x4a00c0
lea ecx, [ebp - 0x26788]
call fcn.004011f0
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x26788]
call fcn.00409d40
lea ecx, [ebp - 0x26788]
call fcn.00401210
push eax
call fcn.00479010
add esp, 4
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x26788]
call fcn.00401190
push 0
push 0
push 0x466
call fcn.00409af0
mov ecx, eax
call dword [sym.imp.DuiLib32.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
push str.RMConfig
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x26734], eax
cmp dword [ebp - 0x26734], 0
je 0x47e5d5
push 0
push 0
push 0x1b71
mov ecx, dword [ebp - 0x26734]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x26750]
call fcn.00401210
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2676c]
call fcn.00401190
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x26750]
call fcn.00401190
mov dword [ebp - 0x26838], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x26714]
call fcn.0047fd10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x570]
call fcn.00402b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5a8]
call fcn.00401190
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x58c]
call fcn.00401190
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x238]
call fcn.00401190
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x254]
call fcn.00401190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e0]
call fcn.00401190
mov eax, dword [ebp - 0x26838]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040fd10
mov esp, ebp
pop ebp
ret