Function at 0x4060c0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x432438
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0xa
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], ebp
call fcn.004261d7
mov dword [esp + 0x6c], 0
call fcn.00401d80
mov ebx, eax
push str.FILE_LIST__
lea ecx, [esp + 0x18]
add ebx, 0xc0
call fcn.00426b49
test ebx, ebx
mov byte [esp + 0x6c], 1
je 0x406227
mov edi, dword [ebx + 0x28]
mov eax, dword [ebx + 0x2c]
cmp edi, eax
je 0x406227
mov esi, dword [edi + 4]
test esi, esi
jne 0x406137
mov esi, 0x43464c
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
push ecx
push eax
push esi
call fcn.00414100
add esp, 0xc
test eax, eax
jne 0x406219
push esi
lea ecx, [esp + 0x1c]
call fcn.00426b49
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push eax
mov byte [esp + 0x70], 2
call fcn.0042586f
mov ecx, edi
call fcn.00403b90
mov eax, dword [edi + 4]
test eax, eax
jne 0x406180
xor ebp, ebp
jmp 0x406185
mov ebp, dword [edi + 8]
add ebp, eax
mov ecx, edi
call fcn.00403b90
mov esi, dword [edi + 4]
cmp esi, ebp
je 0x4061a6
movsx ecx, byte [esi]
push ecx
call fcn.00413a2d
add esp, 4
mov byte [esi], al
inc esi
cmp esi, ebp
jne 0x406193
lea edx, [esp + 0x1c]
push edi
push edx
lea ecx, [ebx + 4]
call fcn.004043d0
mov eax, dword [ebx + 8]
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
je 0x4061cd
mov eax, dword [ecx + 0x20]
test eax, eax
jne 0x4061d2
mov eax, 0x43464c
jmp 0x4061d2
mov eax, 0x443a8c
push eax
lea ecx, [esp + 0x28]
call fcn.00426b49
mov eax, dword [eax]
lea ecx, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x1c]
push eax
mov byte [esp + 0x74], 3
call fcn.0042638f
mov ecx, eax
call fcn.00426c64
lea ecx, [esp + 0x24]
mov byte [esp + 0x6c], 2
call fcn.00426adb
lea ecx, [esp + 0x18]
mov byte [esp + 0x6c], 1
call fcn.00426adb
mov ebp, dword [esp + 0x28]
mov eax, dword [ebx + 0x2c]
add edi, 0x10
cmp edi, eax
jne 0x40612b
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x43f1c8
call fcn.00426b49
lea ecx, [esp + 0x14]
push ecx
call fcn.004016e0
add esp, 8
mov edx, dword [esp + 0x10]
mov byte [esp + 0x6c], 4
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esp + 0x38]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
neg eax
sbb eax, eax
test eax, eax
mov dword [esp + 0x20], eax
je 0x4062fb
mov bl, 6
mov eax, dword [0x43f5ec]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x38]
mov byte [esp + 0x78], bl
call fcn.00426455
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00426850
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
mov byte [esp + 0x78], 7
call fcn.00426850
mov ecx, ebp
mov byte [esp + 0x74], bl
call fcn.004063b0
push 0x12c
call esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x6c], 5
call fcn.00426adb
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 4
call fcn.00426adb
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x406271
lea ecx, [esp + 0x48]
call fcn.0040bbe2
mov eax, dword [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x74], 8
call fcn.0040bca5
test eax, eax
jne 0x406330
push 0x43f1e0
push 0x3e8
mov ecx, ebp
call fcn.0042b66a
jmp 0x406354
push 0x43f1cc
push 0x3e8
mov ecx, ebp
call fcn.0042b66a
push 0x12c
call esi
call fcn.00401d80
mov ecx, eax
call fcn.00402fc0
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 4
call fcn.0040bc1f
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], 1
call fcn.00426adb
lea ecx, [esp + 0x14]
mov byte [esp + 0x6c], 0
call fcn.00426adb
lea ecx, [esp + 0x2c]
mov dword [esp + 0x6c], 0xffffffff
call fcn.00426274
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x60
ret