Function at 0x5aca80
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61c5b0
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x6aab00]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x5acc95
mov dword [ebp - 4], eax
push eax
call fcn.005ac760
add esp, 4
mov dword [ebp - 0x28], eax
test eax, eax
je 0x5acb46
push 2
call fcn.005ac760
mov edi, eax
push 0
push 0x6000000
push 3
push 0x80010000
push esi
call fcn.005ac0f0
add esp, 0x18
mov ebx, eax
cmp ebx, 0xffffffff
je 0x5acb46
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 1
push 0x10010
call fcn.0044cd98
add esp, 4
mov esi, eax
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], 0x7ffffffa
lea eax, [ebp - 0x2c]
push eax
push 0x10010
push esi
push 1
push ebx
call edi
test eax, eax
je 0x5acb5a
mov byte [ebp - 4], 1
push esi
call fcn.0044cdc7
add esp, 4
mov byte [ebp - 4], 0
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx ecx, word [esi]
push ecx
mov edx, dword [esi + 4]
push edx
lea eax, [esi + 0xc]
push eax
call fcn.0054ee00
add esp, 0xc
movzx edi, word [esi]
shr edi, 1
mov dword [ebp - 0x20], edi
mov ecx, 0x7ffffffa
sub ecx, edi
cmp ecx, 0x60
jb 0x5acb2e
mov eax, edi
mov dword [ebp - 0x24], eax
mov ecx, 0x5c
lea esp, [esp]
test eax, eax
je 0x5acba8
dec eax
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x14]
cmp word [edx + eax*2 + 0xc], cx
je 0x5acba8
dec edi
mov dword [ebp - 0x20], edi
jmp 0x5acb90
mov eax, dword [ebp - 0x1c]
sub eax, edi
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [esi + edi*2 + 0xc]
push ecx
call fcn.005ac9b0
add esp, 8
test al, al
jne 0x5acbf7
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
push edx
call fcn.0044cdc7
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edi
lea ecx, [edi + edi]
mov dword [esi + 8], ecx
mov dword [esi], 1
mov dword [esi + 4], 0
push 0xa
push 0x10010
push esi
lea edx, [ebp - 0x34]
push edx
push ebx
call dword [ebp - 0x28]
test eax, eax
je 0x5acc56
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
push eax
call fcn.0044cdc7
add esp, 4
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
push edx
call fcn.0044cdc7
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 4], 0xffffffff
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret