Function at 0x4cd550
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x240
mov eax, dword [0x521014]
xor eax, ebp
mov dword [esp + 0x238], eax
mov bl, 1
cmp dword [0x526e48], 0
je 0x4cd590
mov ecx, dword [esp + 0x238]
xor ecx, ebp
call fcn.0048b980
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, dword [0x526e38]
test esi, esi
je 0x4cd681
test byte [0x522bb0], 1
je 0x4cd578
xorps xmm0, xmm0
movaps xmmword [esp + 0x10], xmm0
movaps xmmword [esp], xmm0
mov dword [esp + 0x20], 0
cmp byte [esi + 0xb], 0
jns 0x4cd5c3
mov esi, dword [esi]
mov eax, esp
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x4cd5f8
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x20], 0x40000001
sbb eax, 0
jb 0x4cd5f8
mov eax, dword [0x526e38]
cmp byte [eax + 0xb], 0
jns 0x4cd5f1
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [0x526e38]
cmp byte [eax + 0xb], 0
jns 0x4cd605
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x50cc50]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x526e48], eax
mov bl, 1
inc eax
cmp eax, 1
ja 0x4cd578
lea esi, [esp + 0x32]
push 0x206
push 0xff
push esi
call fcn.0048ef90
add esp, 0xc
mov word [esi - 2], 0
lea esi, [esp + 0x30]
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
je 0x4cd67a
cmp eax, 0x104
jbe 0x4cd77d
xor ebx, ebx
jmp 0x4cd578
push 0xc
call fcn.0048b346
add esp, 4
mov esi, eax
lea edi, [esp + 0x30]
push 0x208
push 0xff
push edi
call fcn.0048ef90
add esp, 0xc
push 0x104
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
push edi
call fcn.004a4ac6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4cd82d
mov ebx, eax
cmp eax, 5
jae 0x4cd6e3
mov byte [esi + 0xb], bl
mov eax, esi
test ebx, ebx
jne 0x4cd707
jmp 0x4cd71a
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0048b346
add esp, 4
mov dword [esi], eax
or edi, 0x80000000
mov dword [esi + 8], edi
lea edi, [esp + 0x30]
mov dword [esi + 4], ebx
mov ecx, ebx
add ecx, ebx
push ecx
push edi
push eax
mov edi, eax
call fcn.0048e490
mov eax, edi
add esp, 0xc
mov word [eax + ebx*2], 0
movzx eax, byte [esi + 0xb]
test al, al
jns 0x4cd72b
mov eax, dword [esi + 4]
mov ecx, esi
push eax
push 0x5c
call fcn.0046d7d0
cmp eax, 0xffffffff
mov bl, 1
je 0x4cd766
movzx ecx, byte [esi + 0xb]
mov edx, ecx
test cl, cl
jns 0x4cd749
mov edx, dword [esi + 4]
cmp edx, eax
jbe 0x4cd834
mov edx, eax
inc edx
test cl, cl
js 0x4cd812
mov word [esi + eax*2 + 2], 0
mov byte [esi + 0xb], dl
mov ecx, esi
push str.debug.log
call fcn.00440280
mov dword [0x526e38], esi
jmp 0x4cd59e
mov ecx, dword [0x526e38]
push esi
call fcn.00437900
mov ecx, dword [0x526e38]
movzx eax, byte [ecx + 0xb]
test al, al
js 0x4cd823
mov edx, ecx
cmp word [edx + eax*2 - 2], 0x5c
je 0x4cd7b5
push 0x506338
call fcn.00440280
mov ecx, dword [0x526e38]
push str.debug.log
call fcn.00440280
mov eax, dword [0x526e38]
cmp byte [eax + 0xb], 0
jns 0x4cd7cc
mov eax, dword [eax]
movaps xmm0, xmmword [0x50cc50]
sub esp, 0x1c
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x526e48], eax
inc eax
cmp eax, 1
ja 0x4cd578
mov dword [0x526e48], 0
jmp 0x4cd67a
mov ecx, dword [esi]
mov word [ecx + eax*2 + 2], 0
mov dword [esi + 4], edx
jmp 0x4cd766
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
jmp 0x4cd79d
mov ecx, esi
call fcn.004cb7c0
mov ecx, esi
call fcn.004cb7d0
int3