Function at 0x5a9e1f
Capabilities:
Delete file

Disassembly:
push ebp
sub esp, 0x64
mov eax, 0x6b0a09
call fcn.00640244
sub esp, 0x30
cmp byte [0x7acdb1], 0
push ebx
push esi
push edi
je 0x5aa08f
push dword [0x7a1ca8]
call fcn.0048ff1e
push dword [0x7a1ca4]
mov byte [ebp + 0x66], al
call fcn.0048ff1e
xor esi, esi
mov byte [ebp + 0x67], al
push 0x714618
lea ecx, [ebp]
mov ebx, esi
call fcn.00429973
xor edi, edi
mov dword [ebp - 4], esi
inc edi
lea eax, [ebp]
push edi
push eax
call fcn.004730e2
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429973
lea eax, [ebp + 0x18]
push eax
call fcn.00460380
push esi
push edi
lea ecx, [ebp]
mov byte [ebp - 4], 2
call fcn.004281f2
push str.helper.btinstall
lea ecx, [ebp - 0x24]
call fcn.00429973
push edi
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 3
push eax
call fcn.004730e2
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429973
lea eax, [ebp + 0x30]
push eax
call fcn.00460380
push esi
push edi
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.004281f2
lea eax, [ebp + 0x18]
push eax
call fcn.0046103f
mov byte [ebp + 0x65], al
lea eax, [ebp + 0x30]
push eax
call fcn.0046103f
mov dl, byte [ebp + 0x66]
mov cl, al
mov al, byte [ebp + 0x67]
mov esi, 0x7b1748
test dl, dl
jne 0x5a9f06
test al, al
je 0x5a9f43
xor ebx, ebx
cmp byte [ebp + 0x65], bl
je 0x5a9f17
test cl, cl
setne bl
add ebx, 2
jmp 0x5a9f1c
test cl, cl
setne bl
test dl, dl
jne 0x5a9f24
test al, al
je 0x5a9f43
cmp dword [0x7e14cc], ebx
jne 0x5a9f43
mov ecx, esi
call fcn.00501db9
test al, al
je 0x5a9f43
mov ecx, esi
call fcn.00501e95
jmp 0x5aa077
mov ecx, 0x7e1750
call fcn.005a7b49
test eax, eax
jne 0x5aa077
mov eax, dword [0x7e14cc]
cmp eax, edi
jne 0x5a9fcd
cmp ebx, edi
je 0x5aa068
push 0x64
mov ecx, esi
call fcn.00503d3b
push dword [0x7a1ca4]
call fcn.0048564e
test al, al
jne 0x5aa068
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
jae 0x5a9f8e
lea eax, [ebp + 0x18]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push str.helper
lea ecx, [ebp]
call fcn.00429973
push edi
lea eax, [ebp]
mov byte [ebp - 4], 6
push eax
call fcn.004730e2
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429973
lea eax, [ebp + 0x48]
push eax
call fcn.00460380
mov byte [ebp - 4], 8
lea ecx, [ebp]
jmp 0x5aa03f
cmp eax, 2
jne 0x5aa068
cmp ebx, eax
je 0x5aa068
push 0x64
mov ecx, esi
call fcn.00503d3b
push dword [0x7a1ca8]
call fcn.0048564e
test al, al
jne 0x5aa068
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x5aa002
lea eax, [ebp + 0x30]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push str.helper
lea ecx, [ebp - 0x3c]
call fcn.00429973
push edi
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 9
push eax
call fcn.004730e2
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429973
lea eax, [ebp + 0x48]
push eax
call fcn.00460380
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3c]
push 0
push edi
call fcn.004281f2
cmp dword [ebp + 0x5c], 8
mov eax, dword [ebp + 0x48]
jae 0x5aa053
lea eax, [ebp + 0x48]
push eax
call fcn.00460e1e
push 0
push edi
lea ecx, [ebp + 0x48]
mov byte [ebp - 4], 5
call fcn.004281f2
mov ecx, 0x7e1750
call fcn.005a7961
call fcn.005a89f2
push 0
push edi
lea ecx, [ebp + 0x30]
call fcn.004281f2
push 0
push edi
lea ecx, [ebp + 0x18]
call fcn.004281f2
jmp 0x5aa0b3
mov esi, 0x7b1748
mov ecx, esi
call fcn.00501cbe
cmp eax, 1
jne 0x5aa0b3
push 0x1f4
mov ecx, esi
call fcn.00503d3b
mov ecx, esi
call fcn.005035d8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x68]
pop ebp
ret