Function at 0x4ab130
Capabilities:
Create thread
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f8
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x2f8]
mov ecx, 0xbe
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x5ddc34]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
push 0x590d84
mov ecx, dword [ebp + 8]
call fcn.00404660
movzx eax, al
test eax, eax
je 0x4ab181
mov ecx, dword [ebp - 0xc]
sub ecx, 0x20
call fcn.004018a7
jmp 0x4ab4fb
push 0x590da0
mov ecx, dword [ebp + 8]
call fcn.00404660
movzx eax, al
test eax, eax
je 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x4a0]
jne 0x4ab1c9
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 0xc]
sub ecx, 0x20
call fcn.00410c30
jmp 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x4a4]
je 0x4ab1f1
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x4ac]
jne 0x4ab207
mov esi, esp
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp esi, esp
call fcn.004f4cf0
jmp 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x4c0]
jne 0x4ab2e5
movzx eax, byte [0x5d874a]
test eax, eax
je 0x4ab2e0
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x700], 0
jl 0x4ab2be
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x700], 8
jge 0x4ab2be
push str.._update.local
lea eax, [ebp - 0x21c]
push eax
call fcn.00401bd6
add esp, 8
mov esi, esp
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, esp
call fcn.004f4cf0
mov esi, esp
push 0
push 0
mov eax, dword [ebp - 0xc]
sub eax, 0x20
push eax
push 0x401618
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp esi, esp
call fcn.004f4cf0
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
je 0x4ab2bc
mov esi, esp
mov eax, dword [ebp - 0x228]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.004f4cf0
jmp 0x4ab2e0
mov esi, esp
push 0x40
push 0x590d58
push 0x590dd4
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax - 0x1c]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.004f4cf0
jmp 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x4a8]
jne 0x4ab41c
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x700], 0
jl 0x4ab3f5
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x700], 8
jge 0x4ab3f5
mov esi, esp
push 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x4a8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x4a8]
mov edx, dword [eax + 0xd8]
call edx
cmp esi, esp
call fcn.004f4cf0
movzx eax, byte [0x5d874a]
test eax, eax
je 0x4ab3e8
mov esi, esp
push 0
push 0
mov eax, dword [ebp - 0xc]
sub eax, 0x20
push eax
push 0x401618
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp esi, esp
call fcn.004f4cf0
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
je 0x4ab39d
mov esi, esp
mov eax, dword [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.004f4cf0
jmp 0x4ab3e6
mov esi, esp
push 0x40
push 0x590d58
push 0x590df8
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax - 0x1c]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.004f4cf0
mov esi, esp
push 1
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x4a8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x4a8]
mov edx, dword [eax + 0xd8]
call edx
cmp esi, esp
call fcn.004f4cf0
jmp 0x4ab3f3
mov ecx, dword [ebp - 0xc]
sub ecx, 0x20
call fcn.00401523
jmp 0x4ab417
mov esi, esp
push 0x40
push 0x590d58
push 0x590e20
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax - 0x1c]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.004f4cf0
jmp 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [ecx]
mov esi, esp
mov ecx, dword [edx + 0x108]
mov edx, dword [eax + 0xc0]
call edx
cmp esi, esp
call fcn.004f4cf0
cmp eax, 0xffff0001
jne 0x4ab4ba
push 0x5901d4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [ecx]
mov esi, esp
mov ecx, dword [edx + 0x108]
mov edx, dword [eax + 0xb8]
call edx
cmp esi, esp
call fcn.004f4cf0
mov ecx, eax
call fcn.004046a0
movzx eax, al
test eax, eax
je 0x4ab4b8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [ecx]
mov esi, esp
mov ecx, dword [edx + 0x108]
mov edx, dword [eax + 0xb8]
call edx
cmp esi, esp
call fcn.004f4cf0
mov ecx, eax
call fcn.00403c20
push eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x20
call fcn.00401aeb
jmp 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [ecx]
mov esi, esp
mov ecx, dword [edx + 0x108]
mov edx, dword [eax + 0xc0]
call edx
cmp esi, esp
call fcn.004f4cf0
cmp eax, 0xffff0002
jne 0x4ab4fb
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
push ecx
mov ecx, dword [ebp - 0xc]
sub ecx, 0x20
call fcn.004012a8
push edx
mov ecx, ebp
push eax
lea edx, [0x4ab52c]
call fcn.004f4c90
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004f4d70
add esp, 0x2f8
cmp ebp, esp
call fcn.004f4cf0
mov esp, ebp
pop ebp
ret 4