Function at 0x479e80
Capabilities:
Check if file exists
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56dfe8
mov eax, dword fs:[0]
push eax
sub esp, 0x4f0
mov eax, dword [0x5cb464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x46c], ebx
mov edi, dword [ebp + 8]
lea eax, [ebx + 0x44]
mov esi, dword [ebp + 0xc]
xorps xmm0, xmm0
movlpd qword [ebp - 0x478], xmm0
push eax
mov dword [ebp - 0x478], eax
call fcn.005264aa
add esp, 4
test eax, eax
je 0x479ee6
push eax
call fcn.0052672f
add esp, 4
mov byte [ebp - 0x474], 1
mov ecx, edi
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x479f16
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x438]
call fcn.0048c6c0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 1
push eax
add ebx, 0x34
mov dword [ebp - 0x454], 0
lea eax, [ebp - 0x454]
mov dword [ebp - 0x468], ebx
push eax
mov ecx, ebx
call fcn.0048d3f0
mov eax, dword [ebx]
mov edi, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x464], edi
cmp edi, eax
je 0x479fd2
cmp dword [edi + 0x24], 8
lea edx, [edi + 0x10]
mov ebx, dword [edx + 0x10]
jb 0x479f84
mov edx, dword [edx]
cmp dword [ebp - 0x424], 8
lea ecx, [ebp - 0x438]
mov eax, dword [ebp - 0x428]
cmovae ecx, dword [ebp - 0x438]
cmp ebx, eax
cmovb eax, ebx
push eax
push edx
push ecx
call fcn.0048c7e0
add esp, 0xc
test eax, eax
jne 0x479fc5
mov eax, dword [ebp - 0x428]
cmp ebx, eax
jbe 0x479fc1
or eax, 0xffffffff
jmp 0x479fc5
sbb eax, eax
neg eax
shr eax, 0x1f
test al, al
mov eax, dword [ebp - 0x458]
je 0x479fda
mov edi, eax
mov dword [ebp - 0x464], edi
cmp edi, eax
jne 0x47a0dc
call fcn.0041c100
mov ecx, eax
test ecx, ecx
je 0x47a8c8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x458], eax
push 0x58fff0
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.0040e980
test al, al
jne 0x47a029
push 0xd
push 0x58fff0
lea ecx, [ebp - 0x458]
call fcn.0040fb90
push 0x58fff0
mov byte [ebp - 4], 3
call fcn.00435810
mov eax, dword [ebp - 0x458]
add esp, 4
mov edi, eax
mov edx, 0x400
sub edi, esi
nop dword [eax]
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x47a06e
movzx ecx, word [esi + edi]
test cx, cx
je 0x47a06e
mov word [esi], cx
add esi, 2
sub edx, 1
jne 0x47a050
test edx, edx
lea ecx, [esi - 2]
cmovne ecx, esi
xor edx, edx
mov word [ecx], dx
lea edx, [eax - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x47a093
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor ebx, ebx
mov edx, dword [ebp - 0x424]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x47a869
mov ecx, dword [ebp - 0x438]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47a85f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47a8d2
jmp 0x47a85f
cmp dword [edi + 0x3c], 8
lea ebx, [edi + 0x28]
mov dword [ebp - 0x45c], ebx
mov eax, ebx
jb 0x47a0ef
mov eax, dword [ebx]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47a146
cmp dword [ebx + 0x14], 8
jb 0x47a102
mov ebx, dword [ebx]
push ebx
push 0x59000c
call fcn.00435810
mov ecx, dword [ebp - 0x468]
add esp, 8
mov ebx, 1
push edi
call fcn.00489920
mov esi, eax
lea ecx, [esi + 0x10]
call fcn.0041a7e0
push 0x44
push esi
call fcn.0046956a
mov ecx, dword [ebp - 0x46c]
add esp, 8
call fcn.0047ab90
jmp 0x47a095
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004cc090
add esp, 0xc
lea eax, [ebp - 0x438]
cmp dword [ebp - 0x424], 8
cmovae eax, dword [ebp - 0x438]
push 0x58fe64
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x47a205
push ecx
mov dword [ebp - 0x454], esp
call fcn.0041c100
mov ecx, eax
test ecx, ecx
je 0x47a8d7
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x454]
add eax, 0x10
mov dword [ecx], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 4
push eax
call fcn.0040e980
test al, al
jne 0x47a1f9
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47a1d7
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x454]
push eax
call fcn.0040fb90
mov byte [ebp - 4], 1
call fcn.0048fdd0
add esp, 4
add edi, 0x10
cmp dword [edi + 0x14], 8
jb 0x47a210
mov edi, dword [edi]
call fcn.0041c100
mov ecx, eax
test ecx, ecx
je 0x47a8e1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x458], eax
push edi
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 5
call fcn.0040e980
test al, al
jne 0x47a26c
test edi, edi
jne 0x47a249
xor ecx, ecx
jmp 0x47a25f
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47a250
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x458]
call fcn.0040fb90
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 6
cmovae eax, dword [ebp - 0x438]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x47a34e
mov ebx, 1
nop dword [eax + eax]
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
push ebx
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x458]
push str._s___d_
push eax
call fcn.00410650
mov edi, dword [ebp - 0x458]
add esp, 0x10
push edi
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x47a2e4
inc ebx
cmp ebx, 0x3e8
jl 0x47a2a0
mov ebx, dword [ebp - 0x45c]
cmp dword [ebx + 0x14], 8
mov eax, ebx
jb 0x47a2f4
mov eax, dword [ebx]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x45c], eax
jb 0x47a30a
mov ebx, dword [ebx]
push edi
push ebx
push str.DecFile:_s_to_sourcepath:_s
call fcn.00435810
add esp, 0xc
cmp dword [ebp - 0x45c], 0
jne 0x47a58c
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
cmp eax, 0xb7
jne 0x47a405
mov byte [ebp - 4], 7
call fcn.0041c100
mov ecx, eax
test ecx, ecx
je 0x47a8eb
jmp 0x47a356
mov edi, dword [ebp - 0x458]
jmp 0x47a2ea
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 8
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x454]
push 0x590074
push eax
call fcn.00410650
mov eax, dword [ebp - 0x454]
add esp, 0xc
mov ebx, eax
mov edx, 0x400
sub ebx, esi
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x47a3be
movzx ecx, word [esi + ebx]
test cx, cx
je 0x47a3be
mov word [esi], cx
add esi, 2
sub edx, 1
jne 0x47a3a0
test edx, edx
lea ecx, [esi - 2]
cmovne ecx, esi
xor edx, edx
or ebx, 0xffffffff
mov word [ecx], dx
lea edx, [eax - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x47a3e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x47a3fa
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x45c]
jmp 0x47a095
call ebx
cmp eax, 0x20
jne 0x47a49b
mov byte [ebp - 4], 9
call fcn.0041c100
mov ecx, eax
test ecx, ecx
je 0x47a8f5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0xa
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x454]
push 0x59009c
push eax
call fcn.00410650
mov eax, dword [ebp - 0x454]
add esp, 0xc
mov ebx, eax
mov edx, 0x400
sub ebx, esi
nop dword [eax]
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x47a3be
movzx ecx, word [esi + ebx]
test cx, cx
je 0x47a3be
mov word [esi], cx
add esi, 2
sub edx, 1
jne 0x47a470
jmp 0x47a3be
push dword [ebp + 0x10]
push esi
call ebx
push eax
call fcn.0048eb70
add esp, 0xc
lea eax, [ebp - 0x438]
lea ecx, [ebp - 0x450]
push eax
call fcn.0041a330
push 1
push 0x5900c0
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xb
call fcn.00434120
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47a4d7
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x450]
call fcn.00434120
cmp dword [ebp - 0x43c], 8
lea edx, [ebp - 0x450]
mov ebx, dword [ebp - 0x450]
mov ecx, 0x400
cmovae edx, ebx
sub edx, esi
lea eax, [ecx + 0x7ffffbfe]
test eax, eax
je 0x47a52e
movzx eax, word [esi + edx]
test ax, ax
je 0x47a52e
mov word [esi], ax
add esi, 2
sub ecx, 1
jne 0x47a510
test ecx, ecx
mov byte [ebp - 4], 6
lea eax, [esi - 2]
cmovne eax, esi
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x43c]
cmp eax, 8
jb 0x47a579
lea ecx, [eax*2 + 2]
mov eax, ebx
cmp ecx, 0x1000
jb 0x47a56f
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47a8ff
push ecx
push ebx
call fcn.0046956a
add esp, 8
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jmp 0x47a3f0
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
cmovae eax, dword [ebp - 0x438]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
or ebx, 0xffffffff
test eax, eax
je 0x47a829
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
lea ecx, [ebp - 0x4f8]
cmovae eax, dword [ebp - 0x438]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x4fc], ecx
test eax, eax
jne 0x47a5e9
xor edx, edx
mov dword [ebp - 0x4fc], edx
jmp 0x47a6e7
mov ecx, eax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x47a5f0
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea esi, [eax*4]
mov dword [ebp - 0x454], eax
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x4fc]
push esi
push eax
call fcn.0042fac0
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x4fc]
mov esi, dword [ebp - 0x460]
push dword [ebp - 0x454]
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x470], ecx
test eax, eax
jne 0x47a6d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x47a6d3
push 0
push 0
push 0
push 0
push dword [ebp - 0x454]
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea eax, [ebp - 0x4f8]
push 0x80
push eax
lea eax, [ebp - 0x4fc]
push esi
push eax
call fcn.0042fac0
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x4fc]
push dword [ebp - 0x454]
push dword [ebp - 0x460]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x47a6d9
mov ecx, dword [ebp - 0x470]
test ecx, ecx
jne 0x47a904
mov edx, dword [ebp - 0x4fc]
mov ecx, edx
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47a710
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x450]
call fcn.004342a0
mov eax, dword [ebp - 0x4fc]
lea ecx, [ebp - 0x4f8]
cmp eax, ecx
je 0x47a73f
push eax
call fcn.004f50f5
add esp, 4
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.004cc090
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.004f9ad2
add esp, 0x18
mov byte [ebp - 4], 0xf
call fcn.0041c100
mov ecx, eax
test ecx, ecx
je 0x47a923
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x460]
push str._s.blpfs
push eax
call fcn.00410650
mov esi, dword [ebp - 0x460]
add esp, 0xc
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x47a7eb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x43c]
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x47a829
mov ecx, dword [ebp - 0x450]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47a81f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47a92d
push edx
push ecx
call fcn.0046956a
add esp, 8
push dword [ebp - 0x464]
mov ecx, dword [ebp - 0x468]
call fcn.00489920
mov esi, eax
lea ecx, [esi + 0x10]
call fcn.0041a7e0
push 0x44
push esi
call fcn.0046956a
mov ecx, dword [ebp - 0x46c]
add esp, 8
call fcn.0047ab90
jmp 0x47a3e5
push edx
push ecx
call fcn.0046956a
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
push dword [ebp - 0x478]
mov dword [ebp - 4], 0x11
call fcn.0052651f
add esp, 4
test eax, eax
je 0x47a8a8
push eax
call fcn.0052672f
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046997a
mov esp, ebp
pop ebp
ret 0xc
push 0x80004005
call fcn.00408fa0
call fcn.004d5908
push 0x80004005
call fcn.00408fa0
push 0x80004005
call fcn.00408fa0
push 0x80004005
call fcn.00408fa0
push 0x80004005
call fcn.00408fa0
call fcn.004d5908
push 0x80
lea eax, [ebp - 0x4f8]
push eax
push dword [ebp - 0x4fc]
call fcn.0042fb40
add esp, 0xc
call fcn.00424ce0
push 0x80004005
call fcn.00408fa0
call fcn.004d5908
int3