Function at 0x427d90
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x618
mov eax, dword [0x57c870]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x214], 1
mov dword [ebp - 0x210], 0
mov al, byte [0x5c6ca9]
mov byte [ebp - 0x418], al
push 0xfe
push 0
lea ecx, [ebp - 0x417]
push ecx
call fcn.005323e0
add esp, 0xc
mov dl, byte [0x5c6caa]
mov byte [ebp - 0x618], dl
push 0xfe
push 0
lea eax, [ebp - 0x617]
push eax
call fcn.005323e0
add esp, 0xc
mov cl, byte [0x5c6cab]
mov byte [ebp - 0x208], cl
push 0xfe
push 0
lea edx, [ebp - 0x207]
push edx
call fcn.005323e0
add esp, 0xc
mov al, byte [0x5c6cac]
mov byte [ebp - 0x318], al
push 0xfe
push 0
lea ecx, [ebp - 0x317]
push ecx
call fcn.005323e0
add esp, 0xc
mov dl, byte [0x5c6cad]
mov byte [ebp - 0x518], dl
push 0xfe
push 0
lea eax, [ebp - 0x517]
push eax
call fcn.005323e0
add esp, 0xc
mov cl, byte [0x5c6cae]
mov byte [ebp - 0x108], cl
push 0xfe
push 0
lea edx, [ebp - 0x107]
push edx
call fcn.005323e0
add esp, 0xc
mov dword [ebp - 4], 0
cmp dword [0x55c710], 1
jne 0x427e9b
mov eax, 1
jmp 0x4281b9
lea eax, [ebp - 0x318]
push eax
call fcn.00427d30
add esp, 4
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx]
test edx, edx
jne 0x427ebc
or eax, 0xffffffff
jmp 0x4281b9
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x418]
push ecx
call fcn.00532580
add esp, 8
lea edx, [ebp - 0x418]
push edx
call fcn.00532e80
add esp, 4
movsx eax, byte [ebp + eax - 0x419]
cmp eax, 0x5c
jne 0x427f02
lea ecx, [ebp - 0x418]
push ecx
call fcn.00532e80
add esp, 4
mov byte [ebp + eax - 0x419], 0
lea edx, [ebp - 0x318]
push edx
push 0x5c
lea eax, [ebp - 0x418]
push eax
push str._s_c_s.DLL
lea ecx, [ebp - 0x618]
push ecx
call fcn.00532706
add esp, 0x14
lea edx, [ebp - 0x418]
push edx
call fcn.004925f0
add esp, 4
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x427fc0
call fcn.00488340
cmp eax, 0xa
je 0x427f62
call fcn.00488340
cmp eax, 0xe
je 0x427f62
call fcn.00488340
cmp eax, 0xf
jne 0x427fc0
push 0
push 0x40000080
push 2
push 0
push 0
push 0x1f01ff
lea eax, [ebp - 0x618]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xffffffff
jne 0x427f99
mov dword [ebp - 4], 0
jmp 0x427fbe
mov ecx, dword [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x618]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x214]
jmp 0x4281b9
jmp 0x427fe7
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x55d884
lea eax, [ebp - 0x618]
push eax
call fcn.00535474
add esp, 8
mov dword [ebp - 4], eax
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
cmp dword [ebp - 4], 0
jne 0x4280b2
mov dword [ebp - 0x214], 0xffffffff
cmp dword [0x5f65e0], 0
jne 0x42801a
push str.You_do_not_have_Write_Privileges_to_the_following_directory:
lea ecx, [ebp - 0x208]
push ecx
call fcn.00532580
add esp, 8
jmp 0x428030
lea edx, [ebp - 0x208]
push edx
push 0x55d8c8
push 0
call fcn.0046d1b0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
push 0xa
push 0x55d8dc
lea ecx, [ebp - 0x618]
push ecx
call fcn.00532706
add esp, 0x10
lea edx, [ebp - 0x618]
push edx
lea eax, [ebp - 0x208]
push eax
call fcn.00532590
add esp, 8
cmp dword [ebp + 0xc], 1
jne 0x4280ad
cmp dword [0x5f65e0], 0
jne 0x42808f
push str.You_do_not_have_Write_Privileges_to_the_following_directory
push 0x5c6caf
push 0x55d920
lea ecx, [ebp - 0x208]
push ecx
call fcn.00422b80
add esp, 0x10
jmp 0x4280ad
push 0x55d924
push 0x5c6cb0
push 0x55d938
lea edx, [ebp - 0x208]
push edx
call fcn.00422b80
add esp, 0x10
jmp 0x4281b3
cmp dword [ebp - 4], 0
je 0x4281b3
mov eax, dword [ebp - 4]
push eax
call fcn.00535898
add esp, 4
lea ecx, [ebp - 0x618]
push ecx
call fcn.00429360
add esp, 4
push 0x55d948
lea edx, [ebp - 0x618]
push edx
call fcn.0042eaa0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4281b3
mov dword [ebp - 0x214], 0xffffffff
mov eax, dword [ebp - 4]
push eax
call fcn.00431d50
add esp, 4
lea ecx, [ebp - 0x518]
push ecx
push 0x55d94c
push 0
call fcn.0046d1b0
add esp, 0xc
lea edx, [ebp - 0x108]
push edx
push 0x55d964
push 0
call fcn.0046d1b0
add esp, 0xc
cmp dword [0x5f65e0], 0
jne 0x428161
mov eax, dword [ebp + 8]
push eax
push 0xa
push 0xa
push str.You_do_not_have_Delete_privileges_to_the_following_directory:_c_c_s
lea ecx, [ebp - 0x208]
push ecx
call fcn.00532706
add esp, 0x14
jmp 0x42818f
mov edx, dword [ebp + 8]
push edx
push 0xa
push 0xa
lea eax, [ebp - 0x518]
push eax
push 0xa
push 0xa
lea ecx, [ebp - 0x108]
push ecx
push str._s_c_c_s_c_c_s
lea edx, [ebp - 0x208]
push edx
call fcn.00532706
add esp, 0x24
cmp dword [ebp + 0xc], 1
jne 0x4281b3
push 0x55d9cc
push 0x5c6cb1
push 0x55d9e4
lea eax, [ebp - 0x208]
push eax
call fcn.00422b80
add esp, 0x10
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00532783
mov esp, ebp
pop ebp
ret