Function at 0x401be0
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cf929
mov eax, dword fs:[0]
push eax
sub esp, 0xbc
push ebx
push esi
push edi
mov eax, dword [0x50f52c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1c], edi
mov esi, dword [edi + 0xc]
mov dword [ebp - 0x20], 1
cmp esi, dword [edi + 0x10]
jbe 0x401c24
call fcn.004b32e0
mov edi, dword [edi]
mov dword [ebp - 0x14], esi
add esi, 0x1c
mov dword [ebp - 0x10], esi
xor ebx, ebx
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax + 0x10]
cmp dword [eax + 0xc], esi
jbe 0x401c44
call fcn.004b32e0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
cmp edi, ebx
je 0x401c4e
cmp edi, eax
je 0x401c53
call fcn.004b32e0
cmp dword [ebp - 0x14], esi
jae 0x401f28
cmp edi, ebx
jne 0x401cdc
call fcn.004b32e0
xor eax, eax
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x10]
jb 0x401c74
call fcn.004b32e0
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x78], ebx
je 0x401c85
cmp dword [ebp + 8], ebx
je 0x401ef5
cmp edi, ebx
jne 0x401ce0
call fcn.004b32e0
xor eax, eax
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x10]
jb 0x401c9d
call fcn.004b32e0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x14], 8
jb 0x401ca8
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x401ef5
cmp edi, ebx
jne 0x401ce4
call fcn.004b32e0
xor eax, eax
mov edx, dword [ebp - 0x14]
cmp edx, dword [eax + 0x10]
jb 0x401ccf
call fcn.004b32e0
mov esi, dword [ebp - 0x10]
cmp dword [esi + 0x14], 8
jb 0x401ce8
mov eax, dword [esi]
jmp 0x401cea
mov eax, dword [edi]
jmp 0x401c67
mov eax, dword [edi]
jmp 0x401c90
mov eax, dword [edi]
jmp 0x401cc2
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0xa
push str.CONFIGPAGE
test eax, eax
je 0x401df8
xor eax, eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x38], ax
call fcn.00401860
mov dword [ebp - 4], ebx
cmp edi, ebx
jne 0x401df1
call fcn.004b32e0
xor eax, eax
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x10]
jb 0x401d37
call fcn.004b32e0
add esi, 0xfffffffc
push esi
lea edx, [ebp - 0x74]
push 0x4e2540
push edx
call fcn.00401a30
mov byte [ebp - 4], 1
push 0x4e253c
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00401b00
add esp, 0x18
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
push ecx
push eax
call fcn.00419d40
mov byte [ebp - 4], 1
cmp dword [ebp - 0x94], 8
jb 0x401d8c
mov edx, dword [ebp - 0xa8]
push edx
call fcn.004b29fa
add esp, 4
mov esi, 7
xor eax, eax
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], bl
cmp dword [ebp - 0x5c], 8
jb 0x401dbb
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004b29fa
add esp, 4
xor edx, edx
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], ebx
mov word [ebp - 0x70], dx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], 8
jb 0x401de0
mov eax, dword [ebp - 0x38]
push eax
call fcn.004b29fa
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x38], cx
jmp 0x401ef5
mov eax, dword [edi]
jmp 0x401d2a
xor edx, edx
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], ebx
mov word [ebp - 0x54], dx
call fcn.00401860
mov dword [ebp - 4], 3
cmp edi, ebx
jne 0x401f1d
call fcn.004b32e0
xor eax, eax
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x10]
jb 0x401e36
call fcn.004b32e0
add esi, 0xfffffffc
push esi
lea edx, [ebp - 0xc8]
push 0x4e2518
push edx
call fcn.00401a30
mov byte [ebp - 4], 4
push 0x4e253c
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.00401b00
add esp, 0x18
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x58]
push ecx
push eax
call fcn.00419d40
mov byte [ebp - 4], 4
cmp dword [ebp - 0x78], 8
jb 0x401e8b
mov edx, dword [ebp - 0x8c]
push edx
call fcn.004b29fa
add esp, 4
mov esi, 7
xor eax, eax
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x7c], ebx
mov word [ebp - 0x8c], ax
mov byte [ebp - 4], 3
cmp dword [ebp - 0xb0], 8
jb 0x401ebb
mov ecx, dword [ebp - 0xc4]
push ecx
call fcn.004b29fa
add esp, 4
xor edx, edx
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb4], ebx
mov word [ebp - 0xc4], dx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x40], 8
jb 0x401ee9
mov eax, dword [ebp - 0x54]
push eax
call fcn.004b29fa
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], ebx
mov word [ebp - 0x54], cx
cmp edi, ebx
jne 0x401f24
call fcn.004b32e0
xor eax, eax
mov edx, dword [ebp - 0x14]
cmp edx, dword [eax + 0x10]
jb 0x401f0d
call fcn.004b32e0
mov eax, 0x9c
add dword [ebp - 0x14], eax
add dword [ebp - 0x10], eax
jmp 0x401c31
mov eax, dword [edi]
jmp 0x401e29
mov eax, dword [edi]
jmp 0x401f00
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4