Function at 0x550cf0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59cb54
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x5da084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x164], edi
mov esi, ecx
mov dword [ebp - 0x15c], esi
push pe_nt_image_headers32
lea eax, [ebp - 0x14c]
mov byte [ebp - 0x155], 1
push 0
push eax
call fcn.00570cd0
add esp, 0xc
mov dword [ebp - 0x150], 0x114
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x55103e
cmp dword [ebp - 0x14c], 0xa
jb 0x55103e
lea ecx, [ebp - 0x160]
call fcn.00414d80
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0
call fcn.00434820
test al, al
jne 0x550e11
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x550e04
mov eax, dword [ecx]
push 3
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x550e04
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailymain_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x42
mov dword [ebp - 0x44], str.sibcrux::DeleteFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.failed_to_obtain_current_user_HKCU_key___using_special_HKCU_name
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xec]
call fcn.00416960
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0
call fcn.00430bd0
mov eax, 0x80000001
mov dword [ebp - 0x15c], eax
jmp 0x550e17
mov eax, dword [ebp - 0x15c]
push ecx
mov dword [ebp - 0x164], eax
lea ecx, [ebp - 0x164]
push esi
lea eax, [ebp - 0x28]
push eax
call fcn.00554e90
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x28]
call fcn.00554780
or edi, 0xffffffff
test al, al
jne 0x550f29
mov ecx, dword [0x5dfbe0]
mov byte [ebp - 0x155], al
test ecx, ecx
je 0x550f29
mov eax, dword [ecx]
push 1
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x550f29
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x154], eax
push ecx
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 3
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailymain_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x4a
mov dword [ebp - 0x44], str.sibcrux::DeleteFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.CsCleanupCloudFolder:_failed_to_remove_CloudStorageProviderEntry:_entry
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xec]
call fcn.00416960
lea edx, [ebp - 0x154]
mov ecx, eax
call fcn.005432e0
mov edx, str._err
mov ecx, eax
call fcn.00416960
lea edx, [ebp - 0x160]
mov ecx, eax
call fcn.005432e0
lea ecx, [ebp - 0xec]
call fcn.00430bd0
mov byte [ebp - 4], 2
mov eax, edi
mov ecx, dword [ebp - 0x154]
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x550f29
cmp dword [ecx + 4], 0
jle 0x550f29
push ecx
call fcn.00577de8
add esp, 4
mov eax, dword [ebp - 0x15c]
cmp eax, 0x80000001
je 0x550fae
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x550fae
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x550fae
mov eax, dword [ecx]
push 1
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x550fae
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailymain_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x50
mov dword [ebp - 0x44], str.sibcrux::DeleteFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.failed_to_close_hkcu_handle
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xec]
call fcn.00416960
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 2
call fcn.00430bd0
mov ecx, dword [esi]
sub ecx, 0x10
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x154], eax
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 6
call fcn.00548270
mov esi, dword [ebp - 0x154]
push 0
push esi
push 0x13005
push 0x1000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
test eax, eax
jg 0x551007
cmp dword [esi + 4], 0
jle 0x551007
push esi
call fcn.00577de8
add esp, 4
lea ecx, [ebp - 0x28]
call fcn.00550c30
mov eax, dword [ebp - 0x160]
add eax, 0xfffffff0
lock xadd dword [eax + 8], edi
dec edi
test edi, edi
jg 0x5513d7
cmp dword [eax + 4], 0
jle 0x5513d7
push eax
call fcn.00577de8
add esp, 4
jmp 0x5513d7
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
mov esi, 0xf
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x28], 0x656e6f4e
lea ecx, [ebp - 0x154]
mov dword [ebp - 4], 7
call fcn.00414d80
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.00414da0
push edi
lea edx, [ebp - 0x154]
call fcn.0054ccc0
add esp, 4
lea ecx, [ebp - 0x154]
or edi, 0xffffffff
test al, al
jne 0x551143
call fcn.00414da0
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x551388
mov eax, dword [ecx]
push 5
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x551388
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 5
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailymain_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x5d
mov dword [ebp - 0x44], str.sibcrux::DeleteFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.CsCleanupCloudFolder:_cannot_get_favorites:
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xec]
call fcn.00416960
mov edx, dword [ebp - 0x164]
mov ecx, eax
call fcn.005432e0
lea ecx, [ebp - 0xec]
call fcn.00430bd0
jmp 0x551388
call fcn.00548270
mov ecx, str.Links
call fcn.00416660
push eax
push ecx
lea ecx, [ebp - 0x154]
call fcn.00544af0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax]
sub ecx, 0x10
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x160], eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xa
call fcn.005482f0
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x16c]
call fcn.00548610
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xb
call fcn.00544730
mov byte [ebp - 4], 0xa
mov eax, edi
mov ecx, dword [ebp - 0x16c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x5511d0
cmp dword [ecx + 4], 0
jle 0x5511d0
push ecx
call fcn.00577de8
add esp, 4
push 0x5cb398
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x15c]
call fcn.00545ce0
add esp, 4
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x160]
push dword [eax - 0x10]
lea ecx, [eax - 0x10]
mov dword [ebp - 0x168], ecx
lea ecx, [ebp - 0x15c]
push eax
call fcn.00544af0
mov ecx, str..lnk
call fcn.00416660
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.00544af0
mov esi, dword [ebp - 0x164]
lea edx, [ebp - 0x3c]
push esi
lea ecx, [ebp - 0x15c]
call fcn.00548fb0
mov ecx, dword [0x5dfbe0]
add esp, 4
mov byte [ebp - 0x16c], al
test ecx, ecx
je 0x5512e3
mov eax, dword [ecx]
push 5
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x5512e3
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 5
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailymain_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x68
mov dword [ebp - 0x44], str.sibcrux::DeleteFavoritesItem
mov byte [ebp - 0x40], 1
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xec]
push dword [ebp - 0x16c]
mov edx, str.CsCleanupCloudFolder:_delete_from_favorites:
call fcn.00416960
mov ecx, eax
call fcn.00414bf0
mov edx, 0x5cc858
mov ecx, eax
call fcn.00416960
mov edx, esi
mov ecx, eax
call fcn.005432e0
mov edx, 0x5bc664
mov ecx, eax
call fcn.00416960
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xc
call fcn.00430bd0
mov ecx, dword [ebp - 0x154]
lea ecx, [ecx - 0x10]
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x164], eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0xe
call fcn.00548270
mov esi, dword [ebp - 0x164]
push 0
push esi
push 0x13005
push 0x1000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
test eax, eax
jg 0x551340
cmp dword [esi + 4], 0
jle 0x551340
push esi
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x15c]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551364
cmp dword [ecx + 4], 0
jle 0x551364
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x168]
mov eax, edi
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551385
cmp dword [ecx + 4], 0
jle 0x551385
push ecx
call fcn.00577de8
add esp, 4
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x154]
add eax, 0xfffffff0
lock xadd dword [eax + 8], edi
dec edi
test edi, edi
jg 0x5513aa
cmp dword [eax + 4], 0
jle 0x5513aa
push eax
call fcn.00577de8
add esp, 4
cmp esi, 0x10
jb 0x5513d7
mov ecx, dword [ebp - 0x28]
inc esi
mov eax, ecx
cmp esi, 0x1000
jb 0x5513cd
mov ecx, dword [eax - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5513f8
push esi
push ecx
call fcn.0056ebaf
add esp, 8
mov al, byte [ebp - 0x155]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056eb71
mov esp, ebp
pop ebp
ret
call fcn.00578112
int3