Function at 0x5f20d4
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x16
push 0
push 0
dec ecx
jne 0x5f20dd
push ecx
xchg dword [ebp - 4], ecx
push ebx
mov byte [ebp - 0x1d], cl
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x5f274d
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x1e], 0
push 0x5f276c
mov eax, dword [ebp - 8]
push dword [eax + 4]
push 0x5f2788
lea ecx, [ebp - 0x28]
mov dl, 1
movzx eax, byte [ebp - 0x1d]
call fcn.00471248
push dword [ebp - 0x28]
push 0x5f27a4
lea edx, [ebp - 0x2c]
movzx eax, byte [ebp + 8]
call fcn.00470c58
push dword [ebp - 0x2c]
push 0x5f27b4
lea eax, [ebp - 0x24]
mov edx, 7
call fcn.00406fc0
mov eax, dword [ebp - 0x24]
xor edx, edx
call fcn.0051eae8
mov eax, dword [0x6132a4]
mov byte [eax], 0
cmp byte [ebp - 0x1d], 0
je 0x5f21bd
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x3fc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x3f4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc]
call fcn.005f5374
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x3f8]
movzx ecx, byte [ebp + 8]
mov eax, dword [ebp - 0xc]
call fcn.005f350c
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x388]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x380]
call fcn.005322d8
mov eax, dword [0x61308c]
mov eax, dword [eax]
call fcn.004d12ec
jmp 0x5f21c7
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x1f], 0
xor eax, eax
push ebp
push 0x5f26f0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
call fcn.00525770
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 4]
call fcn.00406e1c
lea eax, [ebp - 4]
mov edx, 0x5f27cc
call fcn.00406e1c
mov eax, dword [ebp - 8]
call fcn.005fce48
test al, al
jne 0x5f24cf
mov eax, dword [ebp - 8]
call fcn.005fd4d0
test eax, eax
jle 0x5f24cf
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00479680
mov eax, dword [ebp - 0x30]
call fcn.0047141c
test al, al
jne 0x5f2246
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
call fcn.00479680
mov eax, dword [ebp - 0x34]
call fcn.00471440
movzx eax, byte [0x5f27d0]
push eax
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 8]
call fcn.005fde88
mov eax, dword [ebp - 0x3c]
mov ecx, 0x5f27cc
mov edx, 0x5f27e0
call fcn.0047a0b0
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x1c]
call fcn.00471bc4
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
call fcn.00406edc
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
call fcn.005fe5c0
test al, al
je 0x5f243f
push 0x5f27f0
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x10]
call fcn.00471bc4
push dword [ebp - 0x44]
push 0x5f27b4
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x40]
xor edx, edx
call fcn.0051eae8
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x478]
mov ecx, 0x5f2810
mov edx, 0x5f2834
call fcn.005e286c
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x5c], 1
mov byte [ebp - 0x58], 0
mov dword [ebp - 0x54], 1
mov byte [ebp - 0x50], 0
lea edx, [ebp - 0x5c]
mov ecx, 1
mov eax, 0x5f2858
call fcn.00472498
mov edx, dword [ebp - 0x4c]
pop eax
call fcn.00406e1c
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x3f0]
call fcn.004e22e8
mov eax, dword [0x61308c]
mov eax, dword [eax]
call fcn.004d12ec
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 8]
call fcn.005fe1a8
push eax
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 8]
call fcn.005fe080
mov eax, dword [ebp - 0x60]
push eax
push 0
push 0
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.005fde88
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.005ed438
test al, al
jne 0x5f23b2
push 0x5f27f0
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x10]
call fcn.00471bc4
push dword [ebp - 0x6c]
push 0x5f2880
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x68]
xor edx, edx
call fcn.0051eae8
call fcn.00405308
jmp 0x5f26fa
xor edx, edx
mov eax, 0x5f28a0
call fcn.0051eae8
mov eax, dword [ebp - 8]
mov edx, dword [eax + 8]
lea eax, [ebp - 0x74]
mov ecx, dword [ebp - 0x1c]
call fcn.00406edc
mov eax, dword [ebp - 0x74]
call fcn.00406a94
mov edx, eax
lea eax, [ebp - 0x70]
call fcn.00406bb4
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x10]
call fcn.00406a94
mov edx, eax
lea eax, [ebp - 0x78]
call fcn.00406bb4
mov eax, dword [ebp - 0x78]
xor ecx, ecx
pop edx
call fcn.00521fb0
test eax, eax
jne 0x5f244b
push 0x5f28d0
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x10]
call fcn.00471bc4
push dword [ebp - 0x80]
push 0x5f2880
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x7c]
xor edx, edx
call fcn.0051eae8
call fcn.00405308
jmp 0x5f26fa
xor edx, edx
mov eax, 0x5f28f4
call fcn.0051eae8
mov eax, dword [ebp - 0x10]
call fcn.00406a94
push eax
call sub.kernel32.dll_DeleteFileW
push 0
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
call fcn.00479680
mov eax, dword [ebp - 0x84]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 8]
call fcn.005fe0f8
mov eax, dword [ebp - 0x88]
push eax
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 0x10]
call fcn.00471bc4
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 8]
lea eax, [ebp - 0x8c]
call fcn.00406edc
mov eax, dword [ebp - 0x8c]
pop edx
pop ecx
call fcn.005f5a64
xor edx, edx
mov eax, 0x5f2938
call fcn.0051eae8
mov byte [ebp - 0x1f], 1
jmp 0x5f2584
mov eax, dword [ebp - 8]
call fcn.005fce48
test al, al
jne 0x5f24eb
mov eax, dword [ebp - 8]
call fcn.005fcef8
test al, al
je 0x5f2584
push 0x5f2974
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x10]
call fcn.00471bc4
push dword [ebp - 0x98]
push 0x5f27b4
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00406fc0
mov eax, dword [ebp - 0x94]
xor edx, edx
call fcn.0051eae8
push ebp
call fcn.005f1930
pop ecx
test al, al
jne 0x5f2547
xor edx, edx
mov eax, 0x5f2994
call fcn.0051eae8
call fcn.00405308
jmp 0x5f26fa
xor edx, edx
mov eax, 0x5f29c0
call fcn.0051eae8
push ebp
call fcn.005f1c9c
pop ecx
test al, al
jne 0x5f2574
xor edx, edx
mov eax, 0x5f29f8
call fcn.0051eae8
call fcn.00405308
jmp 0x5f26fa
xor edx, edx
mov eax, 0x5f2a2c
call fcn.0051eae8
mov byte [ebp - 0x1f], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5f26fa
cmp byte [ebp - 0x1d], 0
je 0x5f26ef
cmp byte [ebp - 0x1f], 0
je 0x5f26b8
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x394]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x380]
call fcn.005322d8
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x478]
mov ecx, 0x5f2a64
mov edx, 0x5f2b00
call fcn.005e286c
mov eax, dword [ebp - 0xa0]
push eax
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 8]
call fcn.005fd728
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0x11
lea edx, [ebp - 0xa8]
xor ecx, ecx
pop eax
call fcn.00472498
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x410]
call fcn.004e22e8
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x46c], 5
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x38c]
mov dl, 1
call fcn.004c0918
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x478]
mov ecx, 0x5f2b28
mov edx, 0x5f2b28
call fcn.005e286c
push dword [ebp - 0xb4]
push 0x5f2b3c
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x46c]
call fcn.00470c58
push dword [ebp - 0xb8]
push 0x5f2b50
lea eax, [ebp - 0xb0]
mov edx, 4
call fcn.00406fc0
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x40c]
call fcn.005dae48
jmp 0x5f26e3
mov eax, dword [0x6131f4]
cmp dword [eax], 0
je 0x5f26e3
mov eax, dword [0x6132a4]
cmp byte [eax], 0
jne 0x5f26e3
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x390]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x380]
call fcn.005322d8
mov eax, dword [0x61308c]
mov eax, dword [eax]
call fcn.004d12ec
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5f2754
lea eax, [ebp - 0xb8]
mov edx, 4
call fcn.00406a00
lea eax, [ebp - 0xa0]
mov edx, 0x11
call fcn.00406a00
lea eax, [ebp - 0x4c]
mov edx, 0xb
call fcn.00406a00
lea eax, [ebp - 0x1c]
call fcn.004069f8
lea eax, [ebp - 0x10]
call fcn.004069f8
lea eax, [ebp - 4]
call fcn.004069f8
ret