Function at 0x55ba70
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5adc37
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x614040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov ecx, dword [0x61ff28]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x30], 0x61fed0
mov dword [ebp - 0x34], 2
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [0x61ff28]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx]
call dword [eax + 0x28]
inc eax
mov byte [0x61ff40], 0
push 0x61ff20
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push 0x61ff1c
push eax
lea eax, [ebp - 0x14]
push eax
call dword [0x61f960]
test al, al
jne 0x55bc0e
push 0x61ff14
call dword [0x61f96c]
mov eax, dword [0x61ff14]
shr eax, 8
mov byte [0x61ff40], al
cmp al, 0xa
je 0x55bc0e
cmp al, 0xb
je 0x55bc0e
cmp al, 0xc
je 0x55bc0e
cmp al, 0xd
je 0x55bc0e
cmp al, 0x1b
je 0x55bc0e
cmp al, 0x1c
je 0x55bc0e
cmp al, 0x94
je 0x55bc0e
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, eax
mov edi, edi
cmp edi, dword [ebp - 0x14]
jae 0x55bbf9
mov eax, dword [0x61ff28]
mov ecx, dword [0x61ff28]
mov eax, dword [eax]
call dword [eax + 0x18]
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00589860
mov byte [ebp - 4], 1
mov eax, dword [0x61ff28]
mov ecx, dword [0x61ff28]
mov eax, dword [eax]
call dword [eax + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.00402f60
lea ecx, [ebp + 0x14]
call fcn.00402b30
mov byte [ebp - 4], 3
lea eax, [ebp + 0x14]
push dword [ebp - 0x1c]
push edi
push 4
push dword [ebp + 0xc]
push str._s__0d_s
push eax
call fcn.00402d50
mov esi, dword [ebp + 0x14]
add esp, 0x18
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x55bbd7
push esi
call ebx
lea ecx, [ebp + 0x14]
call fcn.00402b60
lea ecx, [ebp + 0xc]
call fcn.00402b60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.00402b60
inc edi
jmp 0x55bb60
push 0x6098b4
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0x6c8
push eax
call fcn.0052d791
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [esi], ecx
add dword [0x61ff24], ecx
cmp dword [ebp - 0x18], 0x10e6
jne 0x55bc58
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x28]
inc eax
cmp dword [ebp - 0x14], eax
jb 0x55bc52
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x28]
inc eax
mov dword [ebp - 0x14], eax
mov dword [esi], 1
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.00589860
mov byte [ebp - 4], 4
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x14]
push eax
lea ecx, [ebp - 0x20]
call fcn.00402f60
mov byte [ebp - 4], 5
call fcn.00414eab
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x55bca5
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 6
lea eax, [ebp + 0x14]
push dword [ebp - 0x24]
push dword [ebp - 0x14]
push 4
push dword [ebp - 0x20]
push str._s__0d_s
push eax
call fcn.00402d50
mov esi, dword [ebp + 0x14]
add esp, 0x18
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x55bce7
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [0x61ff28]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [ebp - 0x14], eax
jne 0x55bd81
mov eax, dword [0x61fee8]
sub eax, dword [0x61fee4]
test eax, 0xfffffffc
jne 0x55bd1f
mov eax, dword [0x61fef4]
sub eax, dword [0x61fef0]
test eax, 0xfffffffc
je 0x55bd28
cmp dword [ebp + 0xc], 0x1faf
jne 0x55bd81
movzx eax, byte [0x61ff40]
add eax, 0xfffffff6
cmp eax, 3
ja case.default.0x55bd37
jmp dword [eax*4 + 0x55be28]
mov dword [0x61ff14], 0x90a00
jmp case.default.0x55bd37
mov dword [0x61ff14], 0x90b00
jmp case.default.0x55bd37
mov dword [0x61ff14], 0x90a01
jmp case.default.0x55bd37
mov dword [0x61ff14], 0x90b01
push 0x6098b4
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x6ed
push eax
call fcn.0052d791
mov ecx, dword [0x61ff28]
push dword [ebp - 0x18]
mov eax, dword [ecx]
call dword [eax + 0x12c]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 5
or esi, 0xffffffff
lea ecx, [edx + 0xc]
mov edi, 1
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x55bdb7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov ecx, esi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x55bdd7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x55be12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x55be12
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10