Function at 0x46fdc0
Capabilities:
Check if file exists
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x567d38
mov eax, dword fs:[0]
push eax
sub esp, 0x4f0
mov eax, dword [0x5c3484]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x46c], ebx
mov edi, dword [ebp + 8]
lea eax, [ebx + 0x44]
mov esi, dword [ebp + 0xc]
xorps xmm0, xmm0
movlpd qword [ebp - 0x478], xmm0
push eax
mov dword [ebp - 0x478], eax
call fcn.0051ad06
add esp, 4
test eax, eax
je 0x46fe26
push eax
call fcn.0051af8b
add esp, 4
mov byte [ebp - 0x474], 1
mov ecx, edi
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46fe56
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x438]
call fcn.00483380
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 1
push eax
add ebx, 0x34
mov dword [ebp - 0x454], 0
lea eax, [ebp - 0x454]
mov dword [ebp - 0x468], ebx
push eax
mov ecx, ebx
call fcn.00484290
mov eax, dword [ebx]
mov edi, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x464], edi
cmp edi, eax
je 0x46ff12
cmp dword [edi + 0x24], 8
lea edx, [edi + 0x10]
mov ebx, dword [edx + 0x10]
jb 0x46fec4
mov edx, dword [edx]
cmp dword [ebp - 0x424], 8
lea ecx, [ebp - 0x438]
mov eax, dword [ebp - 0x428]
cmovae ecx, dword [ebp - 0x438]
cmp ebx, eax
cmovb eax, ebx
push eax
push edx
push ecx
call fcn.00483520
add esp, 0xc
test eax, eax
jne 0x46ff05
mov eax, dword [ebp - 0x428]
cmp ebx, eax
jbe 0x46ff01
or eax, 0xffffffff
jmp 0x46ff05
sbb eax, eax
neg eax
shr eax, 0x1f
test al, al
mov eax, dword [ebp - 0x458]
je 0x46ff1a
mov edi, eax
mov dword [ebp - 0x464], edi
cmp edi, eax
jne 0x47001c
call fcn.0041acd0
mov ecx, eax
test ecx, ecx
je 0x470808
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x458], eax
push 0x5881f8
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.0040da50
test al, al
jne 0x46ff69
push 0xd
push 0x5881f8
lea ecx, [ebp - 0x458]
call fcn.0040ec60
push 0x5881f8
mov byte [ebp - 4], 3
call fcn.00434480
mov eax, dword [ebp - 0x458]
add esp, 4
mov edi, eax
mov edx, 0x400
sub edi, esi
nop dword [eax]
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x46ffae
movzx ecx, word [esi + edi]
test cx, cx
je 0x46ffae
mov word [esi], cx
add esi, 2
sub edx, 1
jne 0x46ff90
test edx, edx
lea ecx, [esi - 2]
cmovne ecx, esi
xor edx, edx
mov word [ecx], dx
lea edx, [eax - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46ffd3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor ebx, ebx
mov edx, dword [ebp - 0x424]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x4707a9
mov ecx, dword [ebp - 0x438]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47079f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x470812
jmp 0x47079f
cmp dword [edi + 0x3c], 8
lea ebx, [edi + 0x28]
mov dword [ebp - 0x45c], ebx
mov eax, ebx
jb 0x47002f
mov eax, dword [ebx]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x470086
cmp dword [ebx + 0x14], 8
jb 0x470042
mov ebx, dword [ebx]
push ebx
push 0x588214
call fcn.00434480
mov ecx, dword [ebp - 0x468]
add esp, 8
mov ebx, 1
push edi
call fcn.00480540
mov esi, eax
lea ecx, [esi + 0x10]
call fcn.004192a0
push 0x44
push esi
call fcn.0045f7ba
mov ecx, dword [ebp - 0x46c]
add esp, 8
call fcn.00470ad0
jmp 0x46ffd5
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004c14d0
add esp, 0xc
lea eax, [ebp - 0x438]
cmp dword [ebp - 0x424], 8
cmovae eax, dword [ebp - 0x438]
push 0x58806c
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x470145
push ecx
mov dword [ebp - 0x454], esp
call fcn.0041acd0
mov ecx, eax
test ecx, ecx
je 0x470817
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x454]
add eax, 0x10
mov dword [ecx], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 4
push eax
call fcn.0040da50
test al, al
jne 0x470139
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x470117
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x454]
push eax
call fcn.0040ec60
mov byte [ebp - 4], 1
call fcn.00486d70
add esp, 4
add edi, 0x10
cmp dword [edi + 0x14], 8
jb 0x470150
mov edi, dword [edi]
call fcn.0041acd0
mov ecx, eax
test ecx, ecx
je 0x470821
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x458], eax
push edi
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 5
call fcn.0040da50
test al, al
jne 0x4701ac
test edi, edi
jne 0x470189
xor ecx, ecx
jmp 0x47019f
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x470190
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x458]
call fcn.0040ec60
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 6
cmovae eax, dword [ebp - 0x438]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x47028e
mov ebx, 1
nop dword [eax + eax]
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
push ebx
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x458]
push str._s___d_
push eax
call fcn.0040f720
mov edi, dword [ebp - 0x458]
add esp, 0x10
push edi
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x470224
inc ebx
cmp ebx, 0x3e8
jl 0x4701e0
mov ebx, dword [ebp - 0x45c]
cmp dword [ebx + 0x14], 8
mov eax, ebx
jb 0x470234
mov eax, dword [ebx]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x45c], eax
jb 0x47024a
mov ebx, dword [ebx]
push edi
push ebx
push str.DecFile:_s_to_sourcepath:_s
call fcn.00434480
add esp, 0xc
cmp dword [ebp - 0x45c], 0
jne 0x4704cc
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
cmp eax, 0xb7
jne 0x470345
mov byte [ebp - 4], 7
call fcn.0041acd0
mov ecx, eax
test ecx, ecx
je 0x47082b
jmp 0x470296
mov edi, dword [ebp - 0x458]
jmp 0x47022a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 8
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x454]
push 0x58827c
push eax
call fcn.0040f720
mov eax, dword [ebp - 0x454]
add esp, 0xc
mov ebx, eax
mov edx, 0x400
sub ebx, esi
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x4702fe
movzx ecx, word [esi + ebx]
test cx, cx
je 0x4702fe
mov word [esi], cx
add esi, 2
sub edx, 1
jne 0x4702e0
test edx, edx
lea ecx, [esi - 2]
cmovne ecx, esi
xor edx, edx
or ebx, 0xffffffff
mov word [ecx], dx
lea edx, [eax - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x470325
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x47033a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x45c]
jmp 0x46ffd5
call ebx
cmp eax, 0x20
jne 0x4703db
mov byte [ebp - 4], 9
call fcn.0041acd0
mov ecx, eax
test ecx, ecx
je 0x470835
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0xa
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x454]
push 0x5882a4
push eax
call fcn.0040f720
mov eax, dword [ebp - 0x454]
add esp, 0xc
mov ebx, eax
mov edx, 0x400
sub ebx, esi
nop dword [eax]
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x4702fe
movzx ecx, word [esi + ebx]
test cx, cx
je 0x4702fe
mov word [esi], cx
add esi, 2
sub edx, 1
jne 0x4703b0
jmp 0x4702fe
push dword [ebp + 0x10]
push esi
call ebx
push eax
call fcn.00485b10
add esp, 0xc
lea eax, [ebp - 0x438]
lea ecx, [ebp - 0x450]
push eax
call fcn.00418da0
push 1
push 0x5882c8
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xb
call fcn.00432e20
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x470417
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x450]
call fcn.00432e20
cmp dword [ebp - 0x43c], 8
lea edx, [ebp - 0x450]
mov ebx, dword [ebp - 0x450]
mov ecx, 0x400
cmovae edx, ebx
sub edx, esi
lea eax, [ecx + 0x7ffffbfe]
test eax, eax
je 0x47046e
movzx eax, word [esi + edx]
test ax, ax
je 0x47046e
mov word [esi], ax
add esi, 2
sub ecx, 1
jne 0x470450
test ecx, ecx
mov byte [ebp - 4], 6
lea eax, [esi - 2]
cmovne eax, esi
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x43c]
cmp eax, 8
jb 0x4704b9
lea ecx, [eax*2 + 2]
mov eax, ebx
cmp ecx, 0x1000
jb 0x4704af
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47083f
push ecx
push ebx
call fcn.0045f7ba
add esp, 8
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jmp 0x470330
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
cmovae eax, dword [ebp - 0x438]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
or ebx, 0xffffffff
test eax, eax
je 0x470769
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
lea ecx, [ebp - 0x4f8]
cmovae eax, dword [ebp - 0x438]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x4fc], ecx
test eax, eax
jne 0x470529
xor edx, edx
mov dword [ebp - 0x4fc], edx
jmp 0x470627
mov ecx, eax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x470530
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea esi, [eax*4]
mov dword [ebp - 0x454], eax
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x4fc]
push esi
push eax
call fcn.0042e210
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x4fc]
mov esi, dword [ebp - 0x460]
push dword [ebp - 0x454]
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x470], ecx
test eax, eax
jne 0x470619
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x470613
push 0
push 0
push 0
push 0
push dword [ebp - 0x454]
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea eax, [ebp - 0x4f8]
push 0x80
push eax
lea eax, [ebp - 0x4fc]
push esi
push eax
call fcn.0042e210
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x4fc]
push dword [ebp - 0x454]
push dword [ebp - 0x460]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x470619
mov ecx, dword [ebp - 0x470]
test ecx, ecx
jne 0x470844
mov edx, dword [ebp - 0x4fc]
mov ecx, edx
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x470650
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x450]
call fcn.00432fa0
mov eax, dword [ebp - 0x4fc]
lea ecx, [ebp - 0x4f8]
cmp eax, ecx
je 0x47067f
push eax
call fcn.004ea545
add esp, 4
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.004c14d0
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
cmovae eax, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.004eef22
add esp, 0x18
mov byte [ebp - 4], 0xf
call fcn.0041acd0
mov ecx, eax
test ecx, ecx
je 0x470863
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x460]
push str._s.blpfs
push eax
call fcn.0040f720
mov esi, dword [ebp - 0x460]
add esp, 0xc
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x47072b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x43c]
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x470769
mov ecx, dword [ebp - 0x450]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47075f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47086d
push edx
push ecx
call fcn.0045f7ba
add esp, 8
push dword [ebp - 0x464]
mov ecx, dword [ebp - 0x468]
call fcn.00480540
mov esi, eax
lea ecx, [esi + 0x10]
call fcn.004192a0
push 0x44
push esi
call fcn.0045f7ba
mov ecx, dword [ebp - 0x46c]
add esp, 8
call fcn.00470ad0
jmp 0x470325
push edx
push ecx
call fcn.0045f7ba
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
push dword [ebp - 0x478]
mov dword [ebp - 4], 0x11
call fcn.0051ad7b
add esp, 4
test eax, eax
je 0x4707e8
push eax
call fcn.0051af8b
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045fbca
mov esp, ebp
pop ebp
ret 0xc
push 0x80004005
call fcn.00408070
call fcn.004cad68
push 0x80004005
call fcn.00408070
push 0x80004005
call fcn.00408070
push 0x80004005
call fcn.00408070
push 0x80004005
call fcn.00408070
call fcn.004cad68
push 0x80
lea eax, [ebp - 0x4f8]
push eax
push dword [ebp - 0x4fc]
call fcn.0042e290
add esp, 0xc
call fcn.00423800
push 0x80004005
call fcn.00408070
call fcn.004cad68
int3