Function at 0x5ad174
Capabilities:
Delete directory
Delete file

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov esi, eax
xor eax, eax
push ebp
push 0x5ad46b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x21
push 0x5ad478
push 0x5ad4b8
push 0
call sub.user32.dll_MessageBoxW
cmp eax, 2
je 0x5ad450
lea edx, [ebp - 0xc]
xor eax, eax
call fcn.004045f4
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00414e68
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x5ad1e3
mov eax, ebx
sub eax, 0xa
cmp word [eax], 2
je 0x5ad1e3
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00406c44
mov ebx, eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x5ad200
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x5ad200
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00406c44
test eax, eax
je 0x5ad209
sub eax, 4
mov eax, dword [eax]
cmp word [ebx + eax*2 - 2], 0x5c
je 0x5ad21e
lea eax, [ebp - 8]
mov edx, 0x5ad53c
call fcn.00407bdc
lea eax, [ebp - 4]
mov ecx, 0x5ad54c
mov edx, dword [ebp - 8]
call fcn.00407c9c
mov eax, dword [ebp - 4]
call fcn.00407854
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.00407974
mov eax, dword [ebp - 0x10]
call fcn.00407854
push eax
call sub.kernel32.dll_DeleteFileW
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x5ad271
mov eax, dword [ebp - 4]
call fcn.00414b70
test al, al
je 0x5ad271
mov eax, dword [ebp - 4]
call fcn.005ad090
jmp 0x5ad450
lea eax, [ebp - 4]
mov ecx, 0x5ad570
mov edx, dword [ebp - 8]
call fcn.00407c9c
mov eax, dword [ebp - 4]
call fcn.00407854
mov edx, eax
lea eax, [ebp - 0x14]
call fcn.00407974
mov eax, dword [ebp - 0x14]
call fcn.00407854
push eax
call sub.kernel32.dll_DeleteFileW
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x5ad2c4
mov eax, dword [ebp - 4]
call fcn.00414b70
test al, al
je 0x5ad2c4
mov eax, dword [ebp - 4]
call fcn.005ad090
jmp 0x5ad450
mov ecx, 0x5ad598
mov dl, 1
mov eax, dword [0x44ccb4]
call fcn.0044f08c
mov ebx, eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5ad60c
mov edx, 0x5ad628
mov eax, ebx
call fcn.0044f120
push dword [ebp - 8]
push 0x5ad53c
push 0x5ad650
push 0x5ad674
lea eax, [ebp - 4]
mov edx, 4
call fcn.00407d80
mov eax, dword [ebp - 4]
call fcn.00407854
mov edx, eax
lea eax, [ebp - 0x18]
call fcn.00407974
mov eax, dword [ebp - 0x18]
call fcn.00407854
push eax
call sub.kernel32.dll_DeleteFileW
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5ad68c
mov edx, 0x5ad628
mov eax, ebx
call fcn.0044f120
push dword [ebp - 8]
push 0x5ad53c
push 0x5ad650
push 0x5ad53c
push 0x5ad650
push 0x5ad674
lea eax, [ebp - 4]
mov edx, 6
call fcn.00407d80
mov eax, dword [ebp - 4]
call fcn.00407854
mov edx, eax
lea eax, [ebp - 0x1c]
call fcn.00407974
mov eax, dword [ebp - 0x1c]
call fcn.00407854
push eax
call sub.kernel32.dll_DeleteFileW
push dword [ebp - 8]
push 0x5ad53c
push 0x5ad650
push 0x5ad6ac
lea eax, [ebp - 4]
mov edx, 4
call fcn.00407d80
mov eax, dword [ebp - 4]
call fcn.00407854
mov edx, eax
lea eax, [ebp - 0x20]
call fcn.00407974
mov eax, dword [ebp - 0x20]
call fcn.00407854
push eax
call sub.kernel32.dll_DeleteFileW
push dword [ebp - 8]
push 0x5ad53c
push 0x5ad650
lea eax, [ebp - 4]
mov edx, 3
call fcn.00407d80
mov eax, dword [ebp - 4]
call fcn.00407854
push eax
call sub.kernel32.dll_RemoveDirectoryW
mov eax, ebx
call fcn.004057b8
mov dl, 1
mov eax, dword [0x44bcf8]
call fcn.0044d45c
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.0044d544
xor ecx, ecx
mov edx, 0x5ad6d8
mov eax, ebx
call fcn.0044d68c
mov edx, 0x5ad650
mov eax, ebx
call fcn.0044d9a8
mov eax, ebx
call fcn.004057b8
push 0x40
push 0x5ad740
push 0x5ad758
push 0
call sub.user32.dll_MessageBoxW
mov eax, esi
call fcn.005acd8c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ad472
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004077c0
ret