Function at 0x5f1c9c
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x5f1ca4
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x5f1fca
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
call fcn.005fbdcc
dec eax
test eax, eax
jl 0x5f1f9e
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 8]
push eax
mov eax, dword [ebp + 8]
mov edx, dword [eax - 8]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0xc]
mov ecx, dword [ebp - 0x14]
call fcn.005f5058
test al, al
je 0x5f1f92
mov eax, dword [ebp + 8]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x14]
call fcn.005f1864
pop ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.00406a5c
mov eax, dword [ebp + 8]
push eax
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x14]
call fcn.005f18d4
pop ecx
call fcn.0047459c
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea eax, [ebp - 0xc]
mov edx, 0x5f1fe8
call fcn.0047525c
push dword [ebp - 4]
push 0x5f2008
push dword [ebp - 0xc]
lea eax, [ebp - 8]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 4]
call fcn.00521dc8
test al, al
je 0x5f1db5
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00522030
test al, al
jne 0x5f1db5
push 0x5f201c
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.00471bc4
push dword [ebp - 0x2c]
push 0x5f2044
lea eax, [ebp - 0x28]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x28]
xor edx, edx
call fcn.0051eae8
jmp 0x5f1fa2
xor eax, eax
push ebp
push 0x5f1df7
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0047192c
mov eax, dword [ebp - 0x30]
call fcn.00521e28
test al, al
jne 0x5f1ded
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
call fcn.0047192c
mov eax, dword [ebp - 0x34]
call fcn.00521e88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5f1e01
mov eax, dword [ebp - 4]
call fcn.00406a94
mov edx, eax
lea eax, [ebp - 0x38]
call fcn.00406bb4
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x10]
call fcn.00406a94
mov edx, eax
lea eax, [ebp - 0x3c]
call fcn.00406bb4
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
pop edx
call fcn.00521fb0
test eax, eax
jne 0x5f1e6f
push 0x5f2064
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 4]
call fcn.00471bc4
push dword [ebp - 0x44]
push 0x5f2044
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x40]
xor edx, edx
call fcn.0051eae8
jmp 0x5f1fa2
lea ecx, [ebp - 0x48]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov edx, dword [ebp - 0x14]
call fcn.005fc05c
cmp dword [ebp - 0x48], 0
je 0x5f1f49
lea ecx, [ebp - 0x4c]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov edx, dword [ebp - 0x14]
call fcn.005fbfb4
cmp dword [ebp - 0x4c], 0
je 0x5f1f29
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x50]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov edx, dword [ebp - 0x14]
call fcn.005fbfb4
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
xor ecx, ecx
call fcn.005fc3a4
mov eax, dword [ebp - 4]
call fcn.004713d4
test al, al
je 0x5f1ef8
push 0
lea ecx, [ebp - 0x54]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov edx, dword [ebp - 0x14]
call fcn.005fc05c
mov edx, dword [ebp - 0x54]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.005f5a64
jmp 0x5f1f49
push 0x5f208c
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 4]
call fcn.00471bc4
push dword [ebp - 0x5c]
push 0x5f20b8
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x58]
xor edx, edx
call fcn.0051eae8
jmp 0x5f1f49
push 0
lea ecx, [ebp - 0x60]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov edx, dword [ebp - 0x14]
call fcn.005fc05c
mov edx, dword [ebp - 0x60]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.005f5a64
mov eax, dword [ebp - 8]
call fcn.00521dc8
test al, al
je 0x5f1f75
mov eax, dword [ebp - 8]
call fcn.00521f48
test al, al
jne 0x5f1f75
mov eax, dword [ebp - 8]
call fcn.00406a94
mov ecx, 1
xor edx, edx
call fcn.0052206c
mov eax, dword [ebp + 8]
mov ebx, dword [eax - 0x10]
mov dword [ebp - 0x64], ebx
mov eax, dword [ebp - 0x64]
call fcn.00406a94
push eax
call sub.kernel32.dll_DeleteFileW
cmp eax, 1
sbb eax, eax
inc eax
inc dword [ebp - 0x14]
dec dword [ebp - 0x18]
jne 0x5f1ce0
mov byte [ebp - 0xd], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5f1fd1
lea eax, [ebp - 0x60]
mov edx, 0x10
call fcn.00406a00
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00406a00
ret