Function at 0x405ec0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58a3a5
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x5f31c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [ebx + 0xc]
mov dword [ebx + 0x10], 0
call fcn.00404600
lea ecx, [ebx + 8]
call fcn.00404600
mov dword [ebp - 4], 1
call fcn.0042b4c7
mov ecx, eax
mov byte [ebp - 4], 0
test ecx, ecx
je 0x406125
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 4], 2
mov eax, dword [edi + 0xc]
sub eax, 1
je 0x406033
sub eax, 1
je 0x406011
sub eax, 4
jne 0x406066
mov esi, dword [ebp + 0xc]
mov ecx, ebx
push esi
call fcn.00406140
mov byte [ebp - 4], 4
call fcn.0042b4c7
mov ecx, eax
mov byte [ebp - 4], 3
test ecx, ecx
je 0x40612f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0xc], eax
push esi
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 5
push str.ca_d
push eax
call fcn.00404820
mov eax, dword [ebp + 0xc]
add esp, 8
add eax, 0xfffffff0
mov esi, esp
mov dword [ebp + 8], esi
mov dword [ebp + 8], eax
push eax
call fcn.00403fb0
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00409860
mov esi, eax
test esi, esi
je 0x405fde
push 0
push ecx
mov ecx, esp
push str.ignoreFailure
call fcn.00401f10
mov ecx, edi
call fcn.0041ebd0
test al, al
jne 0x405fde
mov dword [0x5f7b98], 1
mov edx, dword [ebp + 8]
or eax, 0xffffffff
mov byte [ebp - 4], 2
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405ffa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
lea esi, [ebx + 0xc]
je 0x406069
push 0xd
push str.Action_failed
mov ecx, esi
call fcn.00409f30
jmp 0x406069
mov esi, dword [ebp + 0xc]
mov ecx, ebx
push esi
push edi
call fcn.00403c90
test eax, eax
je 0x406043
push esi
mov ecx, ebx
call fcn.00406140
push edi
mov ecx, ebx
call fcn.004031d0
jmp 0x406066
mov esi, dword [ebp + 0xc]
mov ecx, ebx
push esi
push edi
call fcn.00403c90
test eax, eax
jne 0x406056
push 0x10
lea esi, [ebx + 0xc]
push str.Condition_failed
mov ecx, esi
call fcn.00409f30
jmp 0x406069
push esi
mov ecx, ebx
call fcn.00406140
push edi
mov ecx, ebx
call fcn.004026e0
lea esi, [ebx + 0xc]
push dword [ebx + 0x10]
lea eax, [ebp - 0x10]
push 0x59bfd4
push eax
call fcn.00404820
add esp, 0xc
mov ecx, 0x5f7ba0
push dword [esi]
mov esi, dword [ebp - 0x10]
push dword [ebx + 8]
push esi
push dword [edi + 4]
push str.AddActionResult
call fcn.0040b090
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x4060e8
test edi, edi
js 0x406120
cmp edi, eax
jge 0x406120
mov eax, dword [ebx + 0x18]
mov eax, dword [eax + edi*4]
sub eax, 0x10
push eax
call fcn.00403fb0
add esp, 4
mov dword [ebp + 0xc], eax
lea ecx, [eax + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4060e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebx + 0x1c]
inc edi
cmp edi, eax
jl 0x4060a1
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0x14]
call fcn.0042d946
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40610c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.0042a442
push 0x80004005
call fcn.00403c70
push 0x80004005
call fcn.00403c70
int3