Function at 0x5b6100
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff44
push ebx
push esi
xor eax, eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x34], eax
xor eax, eax
push ebp
push 0x5b6640
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xb1], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
call fcn.005bc984
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x158]
push eax
call sub.kernel32.dll_DeleteFileW
lea eax, [ebp - 0x34]
call fcn.006267c8
lea eax, [ebp - 0x34]
call fcn.0062b120
call fcn.006562d0
mov edx, dword [0x672408]
mov dword [edx], eax
call fcn.006562d0
mov edx, dword [0x6727f4]
mov dword [edx], eax
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x25], 0
mov byte [ebp - 0xab], 0
call fcn.004b52d4
mov dword [ebp - 0xc], eax
call fcn.00656280
mov edx, dword [0x672984]
mov dword [edx], eax
call fcn.006562d0
mov edx, dword [0x6725c0]
mov dword [edx], eax
call fcn.00656a20
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 6]
mov edx, 6
call fcn.00660d08
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0xa8], 1
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
call fcn.006562d0
mov dword [ebp - 0x38], eax
mov byte [ebp - 0xaa], 0
mov byte [ebp - 0xa9], 0
xor eax, eax
mov dword [ebp - 0x2c], eax
mov edx, 0x5b665c
mov eax, dword [ebp - 0xc]
call fcn.004b5854
mov ebx, eax
lea eax, [ebx + 0x34]
mov edx, 0x5b6668
call fcn.004038bc
lea edx, [ebp - 0xbc]
mov eax, 0x5b6698
call fcn.005420f4
mov ecx, dword [ebp - 0xbc]
mov edx, 0x5b66bc
mov eax, ebx
call fcn.004b5638
push ebp
mov al, 3
call fcn.005ad9b8
pop ecx
push ebp
mov al, 5
call fcn.005ad9b8
pop ecx
mov edx, 0x5b66cc
mov eax, dword [ebp - 0xc]
call fcn.004b5854
mov ebx, eax
lea eax, [ebx + 0x34]
mov edx, 0x5b66e0
call fcn.004038bc
lea edx, [ebp - 0xbc]
mov eax, 0x5b6700
call fcn.005420f4
mov ecx, dword [ebp - 0xbc]
mov edx, 0x5b66bc
mov eax, ebx
call fcn.004b5638
mov edx, 0x5b6724
mov eax, ebx
call fcn.004b5854
mov esi, eax
mov ecx, 0x5b673c
mov edx, 0x5b674c
mov eax, esi
call fcn.004b5638
lea edx, [ebp - 0xbc]
mov eax, 0x5b6758
call fcn.00542198
mov ecx, dword [ebp - 0xbc]
mov edx, 0x5b6770
mov eax, esi
call fcn.004b5638
mov ecx, 0x5b6780
mov edx, 0x5b679c
mov eax, esi
call fcn.004b5638
mov edx, 0x5b6724
mov eax, ebx
call fcn.004b5854
mov esi, eax
mov ecx, 0x5b67ac
mov edx, 0x5b674c
mov eax, esi
call fcn.004b5638
lea edx, [ebp - 0xbc]
mov eax, 0x5b67bc
call fcn.005420f4
mov ecx, dword [ebp - 0xbc]
mov edx, 0x5b6770
mov eax, esi
call fcn.004b5638
mov ecx, 0x5b67fc
mov edx, 0x5b679c
mov eax, esi
call fcn.004b5638
mov edx, 0x5b6724
mov eax, ebx
call fcn.004b5854
mov ebx, eax
mov ecx, 0x5b6818
mov edx, 0x5b674c
mov eax, ebx
call fcn.004b5638
lea edx, [ebp - 0xbc]
mov eax, 0x5b6828
call fcn.00542198
mov ecx, dword [ebp - 0xbc]
mov edx, 0x5b6770
mov eax, ebx
call fcn.004b5638
mov ecx, 0x5b6848
mov edx, 0x5b679c
mov eax, ebx
call fcn.004b5638
push ebp
lea edx, [ebp - 0xbc]
mov eax, 0x5b6864
call fcn.00542138
mov edx, dword [ebp - 0xbc]
mov eax, 0x5b687c
call fcn.005ada9c
pop ecx
mov edx, 0x5b6898
mov eax, dword [ebp - 0xc]
call fcn.004b587c
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, 0x34
mov edx, 0x5b68a8
call fcn.004038bc
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x30], 1
push ebp
call fcn.005aed0c
pop ecx
push ebp
call fcn.005ae104
pop ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x590]
mov ebx, dword [eax + 0x18]
dec ebx
cmp ebx, 0
jl 0x5b6409
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x590]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + ebx*4]
mov dword [eax + 0x38], ebx
dec ebx
cmp ebx, 0xffffffff
jne 0x5b63ee
push ebp
call fcn.005b2034
pop ecx
push ebp
call fcn.005b2470
pop ecx
push ebp
call fcn.005b2e90
pop ecx
mov eax, dword [ebp - 0x14]
call fcn.005add64
mov edx, 0x5b68d4
mov eax, dword [ebp - 0x14]
call fcn.004b587c
mov ebx, eax
push ebp
mov eax, dword [ebp + 8]
add eax, 0xffffffcc
mov ecx, ebx
mov edx, dword [ebp - 0x14]
call fcn.005b6028
pop ecx
call fcn.004da2b4
test byte [eax + 0x2d], 0x40
je 0x5b6477
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x24]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
call fcn.005c0358
mov edx, dword [ebp + 8]
cmp eax, dword [edx - 0x20]
jne 0x5b6477
mov edx, 0x5b68e4
mov eax, ebx
call fcn.004b587c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x1cc]
mov ebx, dword [eax + 0x18]
dec ebx
cmp ebx, 0
jl 0x5b64b7
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x1cc]
mov edx, dword [eax + 0x1c]
mov edx, dword [edx + ebx*4]
cmp byte [edx + 0xc8], 0
je 0x5b64b1
mov edx, dword [ebp + 8]
mov edx, ebx
call fcn.00656e70
dec ebx
cmp ebx, 0xffffffff
jne 0x5b648c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov dl, byte [0x5b68e8]
cmp dl, byte [eax + 0x58c]
je 0x5b64dd
push ebp
mov al, 1
call fcn.005af3c8
pop ecx
push ebp
mov al, 2
call fcn.005af3c8
pop ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x18]
dec eax
test eax, eax
jl 0x5b6546
inc eax
mov dword [ebp - 0xb8], eax
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax + ebx*4]
lea eax, [esi + 0x34]
mov ecx, dword [esi + 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00403b24
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + ebx*4]
cmp eax, dword [ebp - 0x14]
jne 0x5b6527
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x24]
mov edx, dword [ebp + 8]
sub eax, dword [edx - 0x34]
shl eax, 9
jmp 0x5b6529
xor eax, eax
test eax, eax
setg dl
push edx
mov ecx, eax
mov edx, 0x5b68f4
mov eax, esi
call fcn.004b5d14
inc ebx
dec dword [ebp - 0xb8]
jne 0x5b64f1
mov eax, dword [ebp - 0x38]
call fcn.004028c0
mov eax, dword [ebp - 0xb0]
call fcn.00656ff0
mov eax, dword [0x6725c0]
mov eax, dword [eax]
call fcn.004028c0
mov eax, dword [0x672984]
mov eax, dword [eax]
call fcn.004028c0
mov eax, dword [ebp - 0xc]
call fcn.004b5e0c
mov eax, dword [0x672408]
mov eax, dword [eax]
mov dl, 1
call fcn.00658220
mov eax, dword [0x672958]
mov byte [eax], 1
mov eax, dword [0x6726e0]
mov byte [eax], 0
cmp byte [ebp - 0xb1], 0
jne 0x5b65bf
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov edx, dword [eax + 0x158]
mov eax, dword [ebp - 0x34]
call fcn.004b4fe4
test al, al
jne 0x5b65bf
mov byte [ebp - 0xb1], 2
mov eax, dword [0x6726e0]
mov byte [eax], 1
mov eax, dword [0x672958]
mov byte [eax], 0
mov eax, dword [0x672408]
mov eax, dword [eax]
call fcn.004028c0
mov eax, dword [0x672408]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6727f4]
mov eax, dword [eax]
call fcn.004028c0
mov eax, dword [ebp - 0x34]
call fcn.0062b708
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x44]
mov eax, dword [eax + 0x158]
mov ecx, 1
mov edx, 0xc0000000
call fcn.00660d68
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x44]
mov dword [edx + 0x15c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5b6647
lea eax, [ebp - 0xbc]
call fcn.00403274
lea eax, [ebp - 0x34]
call fcn.00403880
ret