Function at 0x61769c
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push ebx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x6179c5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1d8]
cmp byte [eax + 0x21], 2
jne 0x6176f9
mov eax, dword [ebp - 4]
add eax, 0x2a8
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1a8]
call fcn.004054bc
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x12c]
inc ecx
mov eax, dword [ebp - 4]
lea edx, [eax + 0x2a8]
mov eax, dword [ebp - 4]
call fcn.005ff818
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1d8]
cmp byte [eax + 0x21], 1
jne 0x6177a3
mov eax, dword [ebp - 4]
lea ecx, [eax + 0x2a8]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x12c]
inc edx
mov eax, dword [ebp - 4]
call fcn.005ff660
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2a8], 0
jne 0x617754
lea edx, [ebp - 8]
mov eax, 0xbb
call fcn.0040b690
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x5f6624]
call fcn.0040fea4
call fcn.00404de0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a8]
call fcn.0040b80c
test al, al
je 0x61777a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a8]
call fcn.0040592c
push eax
call sub.kernel32.dll_DeleteFileA_1
mov eax, dword [ebp - 4]
cmp word [eax + 0x232], 0
je 0x6177a3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x12c]
inc ecx
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x234]
call dword [ebx + 0x230]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10c], 0
jne 0x6177e8
push 0xffff
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x105]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x108]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x2a8]
mov dl, 1
mov eax, dword [0x5f179c]
call fcn.005f1914
mov edx, dword [ebp - 4]
mov dword [edx + 0x284], eax
jmp 0x61781d
mov eax, dword [ebp - 4]
cmp byte [eax + 0x270], 0
je 0x61780b
mov dl, 1
mov eax, dword [0x41f860]
call fcn.00404430
mov edx, dword [ebp - 4]
mov dword [edx + 0x284], eax
jmp 0x61781d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x130]
mov edx, dword [ebp - 4]
mov dword [edx + 0x284], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x271], 0
je 0x61784f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x274]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x274]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x284]
call fcn.0042559c
mov cl, 2
mov dl, 1
mov eax, dword [0x5f3694]
call fcn.005f5d9c
mov edx, dword [ebp - 4]
mov dword [edx + 0x298], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x298]
mov byte [eax + 0x18], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x298]
mov byte [eax + 4], 0
mov cl, 2
mov dl, 1
mov eax, dword [0x5f3694]
call fcn.005f5d9c
mov edx, dword [ebp - 4]
mov dword [edx + 0x29c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x29c]
mov byte [eax + 0x18], 7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.005ff538
add ebx, eax
mov edx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x298]
call fcn.005f02cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.005ff538
add ebx, eax
mov edx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x29c]
call fcn.005f02cc
mov dl, 1
mov eax, dword [0x5f3584]
call fcn.005f5158
mov edx, dword [ebp - 4]
mov dword [edx + 0x2a0], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x270], 0
jne 0x617926
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x158]
cmp byte [eax + 0x28], 0
je 0x6179aa
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x158]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a0]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a0]
cmp word [eax + 0x18], 0
jbe 0x61797b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a0]
cmp dword [eax + 0x1c], 0
jne 0x61797b
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.005fd8cc
mov eax, dword [ebp - 0xc]
call fcn.005f2e1c
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x2a0]
mov dword [edx + 0x1c], eax
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a0]
call fcn.005f5afc
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a0]
call fcn.005f5a50
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2a0]
mov byte [eax + 0x28], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6179cc
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0040548c
ret