Function at 0x47a870
Capabilities:
Check if file exists
Delete file
Enumerate files on windows
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ed4fd
mov eax, dword fs:[0]
push eax
sub esp, 0x274
mov eax, dword [0x53f100]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax - 0xc]
test eax, eax
jne 0x47a8ca
push 0x506f1c
call fcn.004cbe7a
add esp, 4
push eax
push 0x506f1c
lea ecx, [ebp + 0xc]
call fcn.004253b1
lea ecx, [ebp - 0x260]
push ecx
push ecx
mov esi, esp
mov dword [ebp - 0x268], esp
mov dword [ebp - 0x264], esi
call fcn.004bcd4c
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x47a8fa
push 0x80004005
call fcn.00422000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov ebx, 0x4ff58c
shr ebx, 0x10
mov byte [ebp - 4], 2
mov dword [ebp - 0x26c], ebx
test ebx, ebx
jne 0x47a93b
mov ecx, 0x4ff58c
movzx edi, cx
push edi
call fcn.004c4eeb
test eax, eax
je 0x47a955
push edi
push eax
mov ecx, esi
call fcn.00424e60
jmp 0x47a955
push 0x4ff58c
call fcn.004cbe7a
add esp, 4
push eax
push 0x4ff58c
mov ecx, esi
call fcn.004253b1
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0xc]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x264], esp
mov esi, esp
push eax
call fcn.00425422
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 4
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov dword [ebp - 0x278], esp
mov esi, esp
push eax
call fcn.00425422
add eax, 0x10
mov dword [esi], eax
add esp, 4
lea edi, [ebp - 0x27c]
mov byte [ebp - 4], 1
call fcn.00477ed0
mov eax, dword [eax]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff0
mov dword [ebp - 0x268], esi
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x47a9d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, 0xffffffff
je 0x47ac01
push ecx
mov esi, esp
mov dword [ebp - 0x278], esp
mov dword [ebp - 0x270], esi
call fcn.004bcd4c
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x47a8f0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 5
test ebx, ebx
jne 0x47aa37
mov ecx, 0x4ff58c
movzx edi, cx
push edi
call fcn.004c4eeb
test eax, eax
je 0x47aa51
push edi
push eax
mov ecx, esi
call fcn.00424e60
jmp 0x47aa51
push 0x4ff58c
call fcn.004cbe7a
add esp, 4
push eax
push 0x4ff58c
mov ecx, esi
call fcn.004253b1
push ecx
mov byte [ebp - 4], 6
mov esi, esp
mov dword [ebp - 0x270], esp
mov dword [ebp - 0x274], esi
call fcn.004bcd4c
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x47a8f0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 7
test ecx, 0xffff0000
jne 0x47aab2
mov edx, ecx
movzx edi, dx
push edi
call fcn.004c4eeb
test eax, eax
je 0x47aad0
push edi
push eax
mov ecx, esi
call fcn.00424e60
jmp 0x47aad0
lea eax, [ebp - 0x234]
push eax
call fcn.004cbe7a
add esp, 4
push eax
lea ecx, [ebp - 0x234]
push ecx
mov ecx, esi
call fcn.004253b1
mov byte [ebp - 4], 8
mov esi, dword [ebp + 8]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x274], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x47ab07
cmp eax, dword [esi]
jne 0x47ab07
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x47ab42
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x47abf5
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004cb905
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
lea edi, [ebp - 0x264]
mov byte [ebp - 4], 1
call fcn.00477ed0
add esp, 0xc
test byte [ebp - 0x260], 0x10
jne 0x47abb0
mov ecx, dword [ebp - 0x264]
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push ecx
call esi
mov edx, dword [ebp - 0x264]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edx
call edi
test eax, eax
jne 0x47abb0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x47abb0
mov ecx, dword [ebp - 0x264]
call fcn.0047f590
mov eax, dword [ebp - 0x264]
push 0
push eax
call esi
mov ecx, dword [ebp - 0x264]
push ecx
call edi
mov eax, dword [ebp - 0x264]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x47abd2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x268]
lea ecx, [ebp - 0x260]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x47abfa
mov ebx, dword [ebp - 0x26c]
jmp 0x47a9e1
call fcn.004265d7
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
push eax
call fcn.00425422
add esp, 4
lea esi, [eax + 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x47ac2a
test al, 0x10
je 0x47ac2a
mov edi, 1
jmp 0x47ac2c
xor edi, edi
lea eax, [esi - 0x10]
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x47ac48
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
test edi, edi
sete cl
mov byte [ebp - 4], 0
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov esi, ecx
mov ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x47ac76
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47ac9c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004cb516
mov esp, ebp
pop ebp
ret