Function at 0x27597650
Capabilities:
Check if file exists
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x275ac036
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x275ba2ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
push ebx
push 0x2752db90
lea eax, [ebp - 0x120]
push eax
push 0x2752db28
mov esi, ecx
lea ecx, [ebp - 0x11c]
push 2
push ecx
mov dword [ebp - 0x120], ebx
call fcn.2753a320
add esp, 0x18
mov eax, dword [esi + 0x38]
cmp eax, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], ebx
je 0x27597710
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp eax, ebx
jne 0x2759770d
cmp dword [ebp - 0x120], ebx
jl 0x2759770d
call edi
test eax, eax
jg 0x275976d8
call edi
jmp 0x275976e4
call edi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.27595010
test al, al
je 0x2759770d
mov edx, dword [ebp - 0x120]
push edx
push 0x2752daec
push 0x2752da88
push ebx
call fcn.27595fd0
add esp, 0x10
mov dword [esi + 0x38], ebx
mov eax, dword [esi + 0x24]
mov ecx, dword [eax - 0xc]
add esi, 0x24
cmp ecx, ebx
je 0x27597864
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x27597864
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, ebx
jne 0x27597780
cmp dword [ebp - 0x120], ebx
jl 0x27597780
call edi
test eax, eax
jg 0x2759774f
call edi
jmp 0x2759775b
call edi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.27595010
test al, al
je 0x27597780
mov eax, dword [esi]
push eax
push 0x2752da30
push 0x2752d9c8
push ebx
call fcn.27595fd0
add esp, 0x10
mov eax, dword [esi]
push eax
lea ecx, [ebp - 0x124]
call fcn.2753f400
push 0x275176bc
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 1
call fcn.27550480
mov eax, dword [ebp - 0x124]
mov edx, dword [eax - 0xc]
mov byte [edx + eax - 1], bl
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x13c], ecx
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x134], eax
push ecx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov word [ebp - 0x128], ax
mov dword [ebp - 0x140], 3
mov word [ebp - 0x134], 0x414
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
mov eax, dword [esi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
or eax, ecx
jge 0x27597826
push ebx
mov ecx, esi
call fcn.27538df0
mov eax, dword [esi]
cmp dword [eax - 8], ebx
jge 0x27597837
push 0x80070057
call fcn.27538a70
mov dword [eax - 0xc], ebx
mov edx, dword [esi]
mov word [edx], bx
mov eax, dword [ebp - 0x124]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x27597864
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0xffffffff
call fcn.2753a430
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.2757f388
mov esp, ebp
pop ebp
ret