Function at 0x4781c0
Capabilities:
Check if file exists
Delete file
Get file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x4b13a3
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x4cf640]
xor eax, ebp
mov dword [ebp + 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
cmp dword [edi + 0x14], 0
je 0x478745
mov ebx, 8
cmp dword [edi + 0x18], ebx
lea esi, [edi + 4]
jb 0x478213
mov eax, dword [esi]
jmp 0x478215
mov eax, esi
test eax, eax
je 0x478253
cmp word [eax], 0
je 0x478253
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x478253
test al, 0x10
jne 0x478253
cmp dword [edi + 0x18], ebx
jb 0x478236
mov esi, dword [esi]
test esi, esi
je 0x478745
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 1
sete al
test al, al
je 0x478745
push edi
lea ecx, [ebp + 0x3c]
mov dword [ebp - 4], 0
call fcn.00449580
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 1
call fcn.00448fc0
test al, al
je 0x478739
push 1
push 3
lea ecx, [ebp - 0x98]
call fcn.0040a960
lea eax, [ebp - 0x90]
push 0x4b8eec
push eax
mov byte [ebp - 4], 2
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e00]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.DPNH
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e04]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.SDPC
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e08]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
push str.SEPC
lea edx, [ebp - 0x90]
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e0c]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.MWSFMH
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e10]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.MWSFTH
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e14]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.SWSC
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e18]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.AWSC
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e1c]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push str.AWSFMH
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e20]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push 0x4b8ea8
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e24]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push 0x4b8ea4
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 6
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
mov ecx, dword [0x4d1e28]
add esp, 8
push ecx
mov ecx, eax
call fcn.0040a720
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push 0x4b8ea0
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 2
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
movzx ecx, byte [0x4d1e2c]
add esp, 8
push ecx
mov ecx, eax
call fcn.00478060
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp - 0x90]
push 0x4b8e9c
push edx
call fcn.0041f6f0
add esp, 8
push 9
push eax
call fcn.004482f0
add esp, 8
push 2
mov ecx, eax
call fcn.00448540
push 9
push eax
call fcn.004482f0
movzx ecx, byte [0x4d1e2d]
add esp, 8
push ecx
mov ecx, eax
call fcn.00478060
push 0x4b7a00
push eax
call fcn.0041f6f0
add esp, 8
lea edx, [ebp + 0x1c]
xor ebx, ebx
push edx
lea ecx, [ebp - 0x98]
mov dword [ebp + 0x38], ebx
call fcn.00408060
mov esi, eax
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 3
call fcn.00408060
mov esi, dword [esi + 0x14]
mov edi, 0x10
cmp dword [eax + 0x18], edi
mov byte [ebp - 4], 4
jb 0x4786ce
mov eax, dword [eax + 4]
jmp 0x4786d1
add eax, 4
lea ecx, [ebp + 0x38]
push ecx
push esi
push eax
lea ecx, [ebp + 0x3c]
call fcn.00449130
cmp dword [ebp + 0x18], edi
jb 0x4786f0
mov edx, dword [ebp + 4]
push edx
call fcn.00478d09
add esp, 4
cmp dword [ebp + 0x34], edi
mov esi, 0xf
mov dword [ebp + 0x18], esi
mov dword [ebp + 0x14], ebx
mov byte [ebp + 4], 0
jb 0x478710
mov eax, dword [ebp + 0x20]
push eax
call fcn.00478d09
add esp, 4
lea ecx, [ebp - 0x44]
mov dword [ebp + 0x34], esi
mov dword [ebp + 0x30], ebx
mov byte [ebp + 0x20], 0
mov byte [ebp - 4], 1
call fcn.004066d0
lea ecx, [ebp - 0x44]
push ecx
mov dword [ebp - 0x44], 0x4b6aec
call fcn.00496530
add esp, 4
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0
call fcn.004492d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x68]
xor ecx, ebp
call fcn.00478cd0
add ebp, 0x6c
mov esp, ebp
pop ebp
ret