Function at 0x1000f28a
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0xc4
mov eax, 0x1004f064
call fcn.10035b95
mov esi, ecx
cmp byte [esi + 0x3c], 0
mov dword [ebp - 0x78], esi
jne 0x1000f2de
cmp dword [esi + 0x38], 8
jb 0x1000f2af
mov eax, dword [esi + 0x24]
jmp 0x1000f2b2
lea eax, [esi + 0x24]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000f2de
cmp dword [esi + 0x38], 8
jb 0x1000f2c8
mov eax, dword [esi + 0x24]
jmp 0x1000f2cb
lea eax, [esi + 0x24]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x1000f2de
mov al, 1
call fcn.10035c18
ret
lea ebx, [esi + 0x20]
lea eax, [ebp - 0x48]
push ebx
push eax
call fcn.10012f25
pop ecx
pop ecx
and dword [ebp - 4], 0
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000f2fd
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x1000f323
lea ecx, [ebp - 0x48]
call fcn.10012c20
test eax, eax
jne 0x1000f323
push eax
push 1
lea ecx, [ebp - 0x48]
call fcn.100029d6
xor al, al
jmp 0x1000f2d8
push 0x1005450e
lea ecx, [ebp - 0x64]
call fcn.100039b0
mov byte [ebp - 4], 1
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov eax, dword [esi]
mov dword [ebp - 0x88], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x7c], eax
mov eax, dword [esi]
lea edi, [ebp - 0x80]
lea esi, [ebp - 0x88]
mov dword [ebp - 0x80], eax
call fcn.1001a036
test al, al
jne 0x1000f3e9
call fcn.10006d58
mov ecx, dword [eax + 0x34]
mov ecx, dword [ecx]
add eax, 0x1c
mov eax, dword [eax]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x6c], eax
lea esi, [ebp - 0x88]
call fcn.10006d58
mov ecx, dword [eax + 0x34]
add eax, 0x1c
mov eax, dword [eax]
lea edi, [ebp - 0x74]
lea esi, [ebp - 0x6c]
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], eax
call fcn.1001a036
test al, al
jne 0x1000f3d6
call fcn.10006d58
mov esi, eax
call fcn.100111f0
test al, al
je 0x1000f3cc
lea esi, [ebp - 0x6c]
call fcn.10006d58
push 0xffffffffffffffff
add eax, 0x1c
push 0
lea esi, [ebp - 0x64]
call fcn.100065c1
lea esi, [ebp - 0x6c]
call fcn.1000fcbe
jmp 0x1000f37d
lea esi, [ebp - 0x88]
call fcn.10010033
mov esi, dword [ebp - 0x78]
jmp 0x1000f347
xor edi, edi
cmp dword [ebp - 0x50], edi
je 0x1000f466
lea ecx, [ebp - 0x64]
lea esi, [ebp - 0x2c]
call fcn.1000f6b6
push str.config15
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 2
call fcn.100039b0
push str.config4
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.100039b0
mov eax, esi
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0x78]
mov byte [ebp - 4], 4
call fcn.1000ea11
push edi
push 1
lea ecx, [ebp - 0xd0]
call fcn.1000383a
push edi
push 1
lea ecx, [ebp - 0xb4]
call fcn.1000383a
push edi
push 1
mov ecx, esi
call fcn.1000383a
xor esi, esi
mov dword [ebp - 0x70], edi
mov byte [ebp - 4], 5
jmp 0x1000f492
xor edi, edi
cmp dword [ebp - 0x70], edi
je 0x1000f484
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x70], edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 5
jge 0x1000f4ad
mov ecx, ebx
lea edi, [ebp - 0x70]
call fcn.10012f72
test eax, eax
je 0x1000f471
push 8
pop esi
cmp dword [ebx + 0x18], esi
jb 0x1000f4da
mov eax, dword [ebx + 4]
jmp 0x1000f4dd
cmp dword [ebp - 0x70], edi
je 0x1000f4bb
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
push edi
push 1
lea ecx, [ebp - 0x64]
call fcn.1000383a
push edi
push 1
lea ecx, [ebp - 0x48]
call fcn.100029d6
mov al, bl
jmp 0x1000f2d8
lea eax, [ebx + 4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000f547
cmp dword [ebx + 0x18], esi
jb 0x1000f4f2
mov eax, dword [ebx + 4]
jmp 0x1000f4f5
lea eax, [ebx + 4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x1000f533
cmp dword [ebx + 0x18], esi
jb 0x1000f50a
mov eax, dword [ebx + 4]
jmp 0x1000f50d
lea eax, [ebx + 4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10002648
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.10012db4
push 0
push 1
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.100029d6
jmp 0x1000f547
cmp dword [ebx + 0x18], esi
jb 0x1000f53d
mov eax, dword [ebx + 4]
jmp 0x1000f540
lea eax, [ebx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ecx + 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx]
mov dword [ebp - 0x6c], eax
mov eax, dword [ecx + 0x18]
mov dword [ebp - 0x8c], eax
mov eax, dword [ecx]
lea edi, [ebp - 0x90]
lea esi, [ebp - 0x6c]
mov dword [ebp - 0x90], eax
call fcn.1001a036
test al, al
jne 0x1000f69e
call fcn.10006d58
mov ecx, dword [eax + 0x34]
mov ecx, dword [ecx]
add eax, 0x1c
mov eax, dword [eax]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x80], eax
lea esi, [ebp - 0x6c]
call fcn.10006d58
mov ecx, dword [eax + 0x34]
mov eax, dword [eax + 0x1c]
lea edi, [ebp - 0x98]
lea esi, [ebp - 0x80]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
call fcn.1001a036
test al, al
jne 0x1000f68e
call fcn.10006d58
lea esi, [eax + 0x1c]
lea ecx, [ebp - 0xd0]
call fcn.10012b5d
mov edi, eax
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 7
call fcn.10006d58
mov esi, eax
lea ecx, [ebp - 0xb4]
call fcn.10012b5d
mov dword [ebp - 0x84], eax
lea esi, [ebp - 0x6c]
mov byte [ebp - 4], 8
call fcn.10006d58
mov esi, eax
lea ecx, [ebp - 0x2c]
call fcn.10012b5d
push 8
pop esi
cmp dword [ebx + 0x18], esi
jb 0x1000f61a
mov edx, dword [ebx + 4]
jmp 0x1000f61d
lea edx, [ebx + 4]
cmp dword [edi + 0x18], esi
jb 0x1000f627
mov edi, dword [edi + 4]
jmp 0x1000f62a
add edi, 4
mov ecx, dword [ebp - 0x84]
cmp dword [ecx + 0x18], esi
jb 0x1000f63a
mov ecx, dword [ecx + 4]
jmp 0x1000f63d
add ecx, 4
cmp dword [eax + 0x18], esi
jb 0x1000f647
mov eax, dword [eax + 4]
jmp 0x1000f64a
add eax, 4
push edx
push edi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.100029d6
push esi
push 1
lea ecx, [ebp - 0xb4]
call fcn.100029d6
push esi
push 1
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 5
call fcn.100029d6
lea esi, [ebp - 0x80]
call fcn.1000fcbe
jmp 0x1000f593
lea esi, [ebp - 0x6c]
call fcn.10010033
mov ecx, dword [ebp - 0x78]
jmp 0x1000f557
cmp dword [ebp - 0x70], 0
je 0x1000f6ad
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
xor edi, edi
jmp 0x1000f4bd