Function at 0x476760
Capabilities:
Check if file exists
Delete file
Get common file path
Move file

Disassembly:
push 0x2a4
mov eax, 0x4c2679
call fcn.00435dbd
mov ebx, dword [ebp + 8]
push ebx
mov dword [ebp - 0x2b0], ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x476f28
call fcn.00477cef
test al, al
je 0x4767a8
push edi
push esp
push esp
pop ebp
pop ebp
push esi
pop ecx
pop edx
pop esp
pop edx
push eax
push eax
push edi
push edx
pop edx
push ebp
pop edx
push esi
pop edx
push ebp
push eax
pop esp
pop edx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x476826
call fcn.0047820e
test al, al
je 0x4767d6
pop edi
pop edi
push edi
push eax
push edx
push esp
push ebp
push ebp
push ebp
pop esi
pop edx
pop ebx
push eax
pop eax
push edi
pop ecx
pop ebx
pop ecx
pop ebp
pop esp
push edx
push edi
push eax
push edi
pop ebx
push edx
call fcn.00477e8d
test al, al
je 0x4767f8
push ecx
push eax
push edi
push ebp
pop ecx
push ebp
pop esp
push ebp
pop edx
push ebp
push esp
push eax
pop ecx
push esi
pop ebx
pop esp
pop ebp
push esi
pop edi
push eax
pop esp
push esp
push edi
pop edi
push ebx
call fcn.004780fa
test al, al
je 0x476f28
push eax
pop ebp
pop esi
push edx
pop esp
pop edi
push ebp
pop esp
push ebp
push esi
push eax
pop ebx
push esi
pop edx
pop ebp
push esi
pop edi
push ebp
push esi
push esi
push esp
pop eax
push eax
pop esp
pop ebx
push edi
pop ecx
push ebp
jmp 0x476f28
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.00479e90
add esp, 0xc
mov dword [ebp - 0x234], 7
xor eax, eax
mov dword [ebp - 0x238], ebx
lea ecx, [ebp - 0x248]
mov word [ebp - 0x248], ax
push ebx
push 0x4c403c
call fcn.00402460
mov dword [ebp - 4], ebx
call fcn.00477fe6
test al, al
je 0x47688f
pop ebp
push ebx
pop eax
push edx
pop ebp
pop ecx
push esi
push edi
pop esi
push esp
push esp
push eax
pop esi
pop eax
push eax
push ebx
push ecx
pop ebp
pop ecx
pop ebp
push edx
push ecx
pop edi
push esp
push ecx
push edx
pop ebp
push esp
call fcn.0047813f
test al, al
je 0x4768b4
push ebx
push esi
pop edi
pop edi
pop edx
push esi
push esp
pop edi
push esi
pop eax
pop ecx
push eax
push esp
pop ebx
pop edx
push esp
push eax
pop esi
pop esp
push ecx
pop eax
push edx
push ecx
push edi
pop esp
push eax
push esi
pop eax
call fcn.00477e48
test al, al
je 0x4768dd
push eax
pop ecx
push ebp
push edx
push edx
push edi
pop ebx
push edx
push ebx
push edi
pop ecx
push edi
push eax
pop ebx
push ebp
push edx
pop edx
push esi
pop edi
pop edi
pop edx
push edi
push ebp
pop esi
pop esp
push ecx
pop esi
pop esi
pop ebp
pop eax
pop edi
pop eax
call fcn.00477fa1
test al, al
je 0x476901
push ebp
pop esp
push edx
push esp
push ebp
pop ebp
pop ebx
push esi
push edx
pop edi
pop ecx
push ebx
push ebx
push edx
push ebp
pop ebp
pop esi
pop eax
push ebp
pop ebp
pop ecx
pop ecx
push edx
push edx
pop eax
push eax
pop esp
call fcn.00478253
test al, al
je 0x476924
push eax
pop ebx
push edi
pop edi
push ebp
push ecx
pop eax
pop edx
push esi
pop edi
push esp
pop ecx
push esi
push eax
pop edx
pop ebx
pop eax
push esi
pop esi
pop esp
push ebx
push esi
push edx
push esp
pop edx
pop esi
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push dword [ebp - 0x2b0]
lea eax, [ebp - 0x2a8]
push eax
call fcn.004744ca
pop ecx
pop ecx
mov byte [ebp - 4], 1
call fcn.004781c9
test al, al
je 0x476974
push ecx
push esi
pop esp
push ebx
pop edi
push ecx
push ebp
push esi
pop edx
pop esp
push eax
pop eax
pop ecx
pop ebp
push ebp
push esp
push ecx
push ecx
push edi
pop esi
push ebp
push esi
push esp
pop ebp
pop esp
pop ecx
pop eax
pop eax
pop ebx
call fcn.00477e8d
test al, al
je 0x47698d
push ebx
push edi
pop esp
pop ebx
push ebp
pop ecx
push esp
push ebx
push ecx
pop eax
pop ebx
pop eax
pop eax
push eax
pop edx
push esp
call fcn.00478367
test al, al
je 0x4769b6
pop edx
push edx
pop ebx
pop edx
push esp
push ebx
push ebp
push esp
pop edx
pop esp
push ecx
push edi
push edi
pop esi
push ebx
push ecx
pop ebx
push ebp
pop edi
push edx
pop edx
pop ebp
push eax
push esi
push ebx
push ecx
push esp
pop esi
push edi
pop ebx
pop edi
pop ebp
call fcn.00477dbe
test al, al
je 0x4769dc
push ebp
push eax
push edx
push esp
pop ebp
pop ecx
push ebp
pop edi
pop esp
pop ebx
pop esi
push esp
push ecx
pop edx
pop edi
push esp
push edx
pop ebp
push eax
push edi
push edx
push esi
push edi
push ecx
pop ebp
pop esi
pop esi
pop edi
push esi
push dword [ebp - 0x2b0]
lea eax, [ebp - 0x278]
push eax
call fcn.00474981
pop ecx
pop ecx
mov byte [ebp - 4], 2
call fcn.00477d34
test al, al
je 0x476a1a
push ecx
push ecx
push ebx
pop eax
pop esi
push ebx
push esi
push ecx
pop ebp
push edi
push edi
pop ebx
pop eax
pop ebp
push esp
pop eax
pop edx
pop esp
pop esi
push edx
pop ebp
push ecx
push ebx
push edi
push esi
push ecx
pop edi
push esp
push esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.00474981
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 3
push eax
call fcn.00475066
add esp, 0xc
call fcn.00477d34
test al, al
je 0x476a5e
pop ebp
pop esp
pop edi
push ecx
pop edx
push ecx
push ebx
pop edx
push eax
push edx
pop ecx
pop esp
push edi
pop ebp
push ecx
pop ebp
pop ecx
pop esi
pop ecx
pop ebp
push edx
lea eax, [ebp - 0x260]
push eax
call fcn.00475066
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x260]
call fcn.00429b36
test eax, eax
jne 0x476b23
call fcn.004782dd
test al, al
je 0x476aae
push eax
pop ecx
push ebx
push edx
push eax
push edx
push edx
pop eax
push edx
push esp
push esi
push esi
push eax
push esi
push ebx
pop ecx
push esp
push esi
pop edx
push esp
push eax
push edx
pop ecx
push ebx
pop ebp
push esp
pop esp
pop ebp
pop eax
push edx
pop ebp
push ebx
call fcn.0047802b
test al, al
je 0x476ac7
push ebp
push ecx
pop esi
push esp
push ebx
pop eax
push edi
pop esp
pop eax
push edx
push esi
pop edi
push ecx
pop ebp
pop esi
pop ebp
call fcn.0047820e
test al, al
je 0x476af0
push ebp
push ecx
push ebp
pop edi
push esp
push esp
pop edx
push edi
push eax
push ebx
pop eax
push esp
push eax
push esp
push ebx
pop esi
push edi
pop ecx
push ebp
push edx
pop eax
push edx
push ebp
pop esp
pop edx
pop eax
pop edx
pop edi
push eax
push esi
push ecx
pop esi
cmp word [ebp - 0x218], 0
jne 0x476afe
xor eax, eax
jmp 0x476b0b
lea eax, [ebp - 0x218]
push eax
call fcn.0047d993
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.00402460
jmp 0x476bb1
call fcn.00477ed2
test al, al
je 0x476b4a
pop edx
push edx
pop edx
pop esi
push esi
pop edx
pop esp
pop edi
push esp
pop esi
push ecx
push ebp
pop esp
pop esp
push ebp
pop edx
pop edx
pop esi
pop ecx
pop esp
push esi
push ebx
pop eax
pop ebx
pop ecx
push edi
push ebx
pop ebx
pop ebp
pop edi
call fcn.00477d79
test al, al
je 0x476b66
push esp
push ecx
push ecx
pop edx
push ebx
pop esp
push edi
push esi
pop ecx
push eax
pop ecx
pop edi
pop ecx
push ebp
pop eax
push ebx
push edi
push ebx
push edx
call fcn.00477f17
test al, al
je 0x476b82
push edx
push esi
push edi
pop edi
pop esp
push ebx
push ecx
pop esi
pop edx
pop eax
pop eax
pop ebx
push ebx
pop ecx
pop ebx
pop ecx
pop ebp
push esi
push esi
push dword [ebp - 0x2b0]
lea eax, [ebp - 0x290]
push eax
call fcn.00474663
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.004262b2
push 0
push 1
lea ecx, [ebp - 0x290]
call fcn.0040230d
and dword [ebp - 0x2ac], 0
call fcn.00477f5c
test al, al
je 0x476bdd
pop eax
pop eax
pop ebp
push ecx
pop ecx
push eax
pop edx
push ecx
pop ebx
pop ecx
pop esp
push edi
pop edi
push ebp
push esp
push ebp
push ebx
pop esp
push esp
push edi
push edi
push edi
pop edx
pop ecx
pop ebp
push eax
push ebx
pop ebx
call fcn.00477fa1
test al, al
je 0x476c05
pop eax
push esi
pop esi
push ebp
push ebx
pop edx
pop edi
pop edi
push ecx
pop edx
pop ebx
push esi
pop edx
push ebp
pop esi
pop esi
push ebx
pop esp
push eax
push ebp
pop ebx
pop edi
push edi
push edi
push esi
push esp
push esi
pop edi
push ecx
pop esp
pop ebx
call fcn.00478367
test al, al
je 0x476c25
push eax
pop ecx
pop eax
push eax
pop edx
pop ebx
pop ecx
pop ebp
push esi
pop ebp
push eax
push ebp
pop edi
push esi
push edi
push esp
push esi
push esp
push eax
push eax
pop esp
pop eax
pop eax
mov ebx, dword [ebp - 0x2ac]
and dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
xor eax, eax
mov dword [ebp - 0x21c], 7
push eax
push 0x4c403c
mov word [ebp - 0x230], ax
call fcn.00402460
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x230]
call fcn.004023a4
call fcn.00477cef
test al, al
je 0x476c9f
push ecx
push edi
push ebp
push ebx
pop ebx
pop ebp
pop ecx
push edi
push ecx
pop esi
push esp
pop edx
push edi
push ebp
pop ebp
push ebx
pop ebp
pop esi
push ebp
pop ebx
push ecx
push esp
pop ecx
push ebx
push ebx
pop esi
pop esi
pop edx
pop ebx
push ebx
pop ebp
push ecx
mov ebx, dword [ebp - 0x2ac]
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x230]
call fcn.00427195
push str..ccc
call fcn.0047d993
pop ecx
push eax
push str..ccc
lea ecx, [ebp - 0x230]
call fcn.00427234
test ebx, ebx
jle 0x476d10
mov eax, ebx
cdq
push edx
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.00475c7d
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.00427195
push 0
push 1
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.0040230d
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x476e0c
call fcn.00477caa
test al, al
je 0x476d53
push ecx
pop ecx
push eax
push eax
pop eax
pop ebp
push ebp
pop eax
push ebp
pop ecx
pop eax
push edx
push edx
push ecx
push ebx
push ebx
pop ebx
mov ebx, dword [ebp - 0x2ac]
call fcn.00477cef
test al, al
je 0x476d73
push edx
push eax
push esi
push ebp
push ebx
pop esi
push ecx
pop edx
pop esp
push ebx
push edx
push esi
pop eax
pop edx
push ebx
push ebp
push ebx
pop esp
pop ecx
push edi
pop ebp
push esi
pop edi
call fcn.00477e03
test al, al
je 0x476d96
push edx
push edi
push ecx
push esi
push esi
push ecx
push edx
pop eax
pop esp
push edx
push esi
push ebp
pop ebp
pop edi
push edi
pop esi
pop edi
push ebp
push ecx
pop esp
push ecx
push edi
pop esi
pop ebp
push ecx
push edi
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x476e0c
call fcn.00478070
test al, al
je 0x476de4
push ebx
push ebx
push esi
pop edi
push ebx
pop edx
pop ebx
pop edx
pop ebp
push ecx
pop esp
pop esi
push ebx
push esp
push esi
pop edx
pop ecx
push esi
push ebx
pop esp
push edi
push ecx
push esp
pop ecx
pop ebp
push edi
pop esp
push esi
push edi
pop esp
pop esi
pop ebp
mov ebx, dword [ebp - 0x2ac]
cmp ebx, 0xa
jge 0x476ee2
push 0
inc ebx
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x2ac], ebx
call fcn.0040230d
jmp 0x476c2b
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push dword [ebp - 0x2b0]
call fcn.0048691a
pop ecx
pop ecx
call fcn.00478253
test al, al
je 0x476e47
push ecx
push ecx
pop ebp
pop esi
push edi
pop ecx
pop ebx
pop eax
pop ebx
push edi
push edi
push ecx
pop esi
pop ecx
pop edi
pop edi
call fcn.00478298
test al, al
je 0x476e6e
push ebp
push ecx
pop eax
push eax
pop edx
push esp
pop esp
pop ebp
pop esp
push esi
pop edi
pop edi
pop eax
pop ebp
push edi
pop eax
pop ecx
pop ecx
push ecx
pop esi
push esp
pop edi
pop esi
pop ebp
pop esi
pop edx
pop esi
pop esi
pop ebx
pop esi
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x230]
push eax
call ebx
test eax, eax
je 0x476eae
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 5
cmovae eax, dword [ebp - 0x230]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, dword [ebp - 0x2b0]
push esi
call ebx
test eax, eax
je 0x476ee2
call fcn.00478184
test al, al
je 0x476ed7
pop ecx
pop ebx
push edi
pop eax
pop ebx
pop edi
push eax
push ebx
push edi
push ebx
push eax
push edi
pop ecx
push ebx
pop eax
pop eax
push ebx
pop edi
push ebx
push 5
push 0
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
xor esi, esi
lea ecx, [ebp - 0x230]
xor ebx, ebx
push esi
inc ebx
push ebx
call fcn.0040230d
push esi
push ebx
lea ecx, [ebp - 0x260]
call fcn.0040230d
push esi
push ebx
lea ecx, [ebp - 0x278]
call fcn.0040230d
push esi
push ebx
lea ecx, [ebp - 0x2a8]
call fcn.0040230d
push esi
push ebx
lea ecx, [ebp - 0x248]
call fcn.0040230d
call fcn.00435d67
ret