Function at 0x5ab685
Capabilities:
Delete file

Disassembly:
push ebp
sub esp, 0x64
mov eax, 0x6b2e2a
call fcn.006426c4
sub esp, 0x30
cmp byte [0x7b0fd1], 0
push ebx
push esi
push edi
je 0x5ab904
push dword [0x7a5e10]
call fcn.004901fc
push dword [0x7a5e0c]
mov byte [ebp + 0x66], al
call fcn.004901fc
xor esi, esi
mov byte [ebp + 0x67], al
push 0x717898
lea ecx, [ebp]
mov ebx, esi
call fcn.00429d77
xor edi, edi
mov dword [ebp - 4], esi
inc edi
lea eax, [ebp]
push edi
push eax
call fcn.00473ac8
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429d77
lea eax, [ebp + 0x18]
push eax
call fcn.00460bac
push esi
push edi
lea ecx, [ebp]
mov byte [ebp - 4], 2
call fcn.004285f6
push 0x7178c0
lea ecx, [ebp - 0x24]
call fcn.00429d77
push edi
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 3
push eax
call fcn.00473ac8
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429d77
lea eax, [ebp + 0x30]
push eax
call fcn.00460bac
push esi
push edi
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.004285f6
lea eax, [ebp + 0x18]
push eax
call fcn.00461896
mov byte [ebp + 0x65], al
lea eax, [ebp + 0x30]
push eax
call fcn.00461896
mov dl, byte [ebp + 0x66]
mov esi, 0x7b5960
mov cl, byte [ebp + 0x67]
test dl, dl
jne 0x5ab76a
test cl, cl
je 0x5ab7b8
cmp byte [ebp + 0x65], 0
je 0x5ab785
test al, al
je 0x5ab779
push 3
pop ebx
jmp 0x5ab78c
push 2
pop eax
mov ebx, eax
mov dword [0x7e58ec], eax
jmp 0x5ab78c
xor ebx, ebx
test al, al
setne bl
test dl, dl
jne 0x5ab794
test cl, cl
je 0x5ab7b8
cmp dword [0x7e58ec], ebx
jne 0x5ab7b8
mov ecx, esi
call fcn.005026b1
test al, al
je 0x5ab7b8
push 0
push 0x125
call fcn.0048d97a
jmp 0x5ab8ec
mov ecx, 0x7e5b78
call fcn.005a9387
test eax, eax
jne 0x5ab8ec
mov eax, dword [0x7e58ec]
cmp eax, edi
jne 0x5ab842
cmp ebx, edi
je 0x5ab8dd
push 0x64
mov ecx, esi
call fcn.00504763
push dword [0x7a5e0c]
call fcn.004858f6
test al, al
jne 0x5ab8dd
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
jae 0x5ab803
lea eax, [ebp + 0x18]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push str.helper
lea ecx, [ebp]
call fcn.00429d77
push edi
lea eax, [ebp]
mov byte [ebp - 4], 6
push eax
call fcn.00473ac8
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429d77
lea eax, [ebp + 0x48]
push eax
call fcn.00460bac
mov byte [ebp - 4], 8
lea ecx, [ebp]
jmp 0x5ab8b4
cmp eax, 2
jne 0x5ab8dd
cmp ebx, eax
je 0x5ab8dd
push 0x64
mov ecx, esi
call fcn.00504763
push dword [0x7a5e10]
call fcn.004858f6
test al, al
jne 0x5ab8dd
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x5ab877
lea eax, [ebp + 0x30]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push str.helper
lea ecx, [ebp - 0x3c]
call fcn.00429d77
push edi
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 9
push eax
call fcn.00473ac8
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00429d77
lea eax, [ebp + 0x48]
push eax
call fcn.00460bac
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3c]
push 0
push edi
call fcn.004285f6
cmp dword [ebp + 0x5c], 8
mov eax, dword [ebp + 0x48]
jae 0x5ab8c8
lea eax, [ebp + 0x48]
push eax
call fcn.00461675
push 0
push edi
lea ecx, [ebp + 0x48]
mov byte [ebp - 4], 5
call fcn.004285f6
mov ecx, 0x7e5b78
call fcn.005a919f
call fcn.005aa258
push 0
push edi
lea ecx, [ebp + 0x30]
call fcn.004285f6
push 0
push edi
lea ecx, [ebp + 0x18]
call fcn.004285f6
jmp 0x5ab928
mov esi, 0x7b5960
mov ecx, esi
call fcn.00502566
cmp eax, 1
jne 0x5ab928
push 0x1f4
mov ecx, esi
call fcn.00504763
mov ecx, esi
call fcn.00503fa2
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x68]
pop ebp
ret