Function at 0x591b08
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x7e
push 0
push 0
dec ecx
jne 0x591b11
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov ebx, ecx
mov byte [ebp - 9], dl
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405f18
xor eax, eax
push ebp
push 0x5921f9
push dword fs:[eax]
mov dword fs:[eax], esp
test bl, bl
jne 0x591e1a
mov eax, dword [ebp - 4]
call fcn.0040b8f0
test al, al
je 0x5921ce
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x1d8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
mov ecx, 0x592210
mov edx, dword [ebp - 4]
call fcn.00405db0
mov edx, dword [ebp - 0x3a8]
lea eax, [ebp - 0x3a4]
call fcn.004039a4
lea eax, [ebp - 0x1d8]
call fcn.00403728
lea eax, [ebp - 0x3a4]
call fcn.00403734
xor esi, esi
jmp 0x591db7
lea edx, [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00403f9c
lea eax, [ebp - 0x1d8]
call fcn.00404008
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
mov eax, dword [ebp - 8]
mov edx, 0x592220
call fcn.00405ec0
jne 0x591be0
inc esi
cmp esi, 6
jne 0x591db7
lea edx, [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00403f9c
lea eax, [ebp - 0x1d8]
call fcn.00404008
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00403f9c
lea eax, [ebp - 0x1d8]
call fcn.00404008
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00403f9c
lea eax, [ebp - 0x1d8]
call fcn.00404008
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00403f9c
lea eax, [ebp - 0x1d8]
call fcn.00404008
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
mov eax, dword [0x5dbd88]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x591d45
mov esi, 1
lea ecx, [ebp - 0x3ac]
mov edx, esi
dec edx
mov eax, dword [0x5dbd88]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3ac]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
lea ecx, [ebp - 0x3b8]
mov edx, esi
dec edx
mov eax, dword [0x5dbd88]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x3b8]
lea edx, [ebp - 0x3b4]
call fcn.0058fff8
mov eax, dword [ebp - 0x3b4]
lea edx, [ebp - 0x3b0]
call fcn.0058feb0
mov edx, dword [ebp - 0x3b0]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591cb2
jmp 0x591d45
lea edx, [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00403f9c
lea eax, [ebp - 0x1d8]
call fcn.00404008
lea eax, [ebp - 0x1d8]
call fcn.00403cf0
test al, al
je 0x591d2c
mov edx, 0x59222c
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
mov edx, 0x592240
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 0x3bc]
mov eax, 0x592240
call fcn.0058fff8
mov edx, dword [ebp - 0x3bc]
lea eax, [ebp - 0x3a4]
call fcn.00406248
call fcn.0040444c
lea eax, [ebp - 0x1d8]
call fcn.00403cf0
test al, al
je 0x591ba4
lea eax, [ebp - 0x1d8]
call fcn.00403b4c
lea eax, [ebp - 0x3a4]
call fcn.00403b4c
mov eax, dword [ebp - 4]
call fcn.00405f28
mov ebx, eax
push ebx
call sub.kernel32.dll_DeleteFileA
push ebx
lea eax, [ebp - 0x3c0]
mov ecx, 0x592210
mov edx, dword [ebp - 4]
call fcn.00405db0
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_MoveFileA
jmp 0x5921ce
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x1d8]
call fcn.004039a4
lea eax, [ebp - 0x1d8]
call fcn.00403734
mov eax, dword [0x5dbcd8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x591e75
mov esi, 1
lea ecx, [ebp - 0x3c4]
mov edx, esi
dec edx
mov eax, dword [0x5dbcd8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c4]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591e48
mov dl, 0x24
lea eax, [ebp - 0x1d8]
call fcn.00404410
call fcn.0040444c
mov eax, dword [0x5dbcd8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x591ec9
mov esi, 1
lea ecx, [ebp - 0x3c8]
mov edx, esi
dec edx
mov eax, dword [0x5dbcdc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c8]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591e9c
mov dl, 0x24
lea eax, [ebp - 0x1d8]
call fcn.00404410
call fcn.0040444c
mov eax, dword [0x5dbce8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x591f1d
mov esi, 1
lea ecx, [ebp - 0x3cc]
mov edx, esi
dec edx
mov eax, dword [0x5dbce8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3cc]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591ef0
mov dl, 0x24
lea eax, [ebp - 0x1d8]
call fcn.00404410
call fcn.0040444c
mov eax, dword [0x5dbcec]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x591f71
mov esi, 1
lea ecx, [ebp - 0x3d0]
mov edx, esi
dec edx
mov eax, dword [0x5dbcec]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3d0]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591f44
mov dl, 0x24
lea eax, [ebp - 0x1d8]
call fcn.00404410
call fcn.0040444c
mov eax, dword [0x5dbcf0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x591fc5
mov esi, 1
lea ecx, [ebp - 0x3d4]
mov edx, esi
dec edx
mov eax, dword [0x5dbcf0]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3d4]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591f98
mov dl, 0x24
lea eax, [ebp - 0x1d8]
call fcn.00404410
call fcn.0040444c
mov eax, dword [0x5dbce4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x592019
mov esi, 1
lea ecx, [ebp - 0x3d8]
mov edx, esi
dec edx
mov eax, dword [0x5dbce4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3d8]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x591fec
mov dl, 0x24
lea eax, [ebp - 0x1d8]
call fcn.00404410
call fcn.0040444c
lea edx, [ebp - 0x3dc]
mov eax, 0x592258
call fcn.0058fff8
mov edx, dword [ebp - 0x3dc]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 0x3e0]
mov eax, 0x59226c
call fcn.0058fff8
mov edx, dword [ebp - 0x3e0]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 0x3e4]
mov eax, 0x592280
call fcn.0058fff8
mov edx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
cmp byte [ebp - 9], 0
jne 0x5920c5
lea edx, [ebp - 8]
mov eax, dword [0x5dbd28]
call fcn.0058a7a4
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
jmp 0x5920d0
lea eax, [ebp - 0x1d8]
call fcn.0040444c
mov eax, dword [0x5dbd88]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
test ebx, ebx
jle 0x59215d
mov esi, 1
lea ecx, [ebp - 0x3e8]
mov edx, esi
dec edx
mov eax, dword [0x5dbd88]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
lea ecx, [ebp - 0x3f4]
mov edx, esi
dec edx
mov eax, dword [0x5dbd88]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x3f4]
lea edx, [ebp - 0x3f0]
call fcn.0058fff8
mov eax, dword [ebp - 0x3f0]
lea edx, [ebp - 0x3ec]
call fcn.0058feb0
mov edx, dword [ebp - 0x3ec]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
inc esi
dec ebx
jne 0x5920e5
mov edx, 0x59222c
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
mov edx, dword [0x5dbca4]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
mov edx, 0x592240
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 0x3f8]
mov eax, 0x592240
call fcn.0058fff8
mov edx, dword [ebp - 0x3f8]
lea eax, [ebp - 0x1d8]
call fcn.00406248
call fcn.0040444c
lea eax, [ebp - 0x1d8]
call fcn.00403b4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x592200
lea eax, [ebp - 0x3f8]
mov edx, 0x15
call fcn.00405abc
lea eax, [ebp - 8]
mov edx, 2
call fcn.00405abc
ret