Function at 0x64608ea4
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
and dword [ebp - 4], 0
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 8], ecx
push edi
inc ebx
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64608eef
test dword [eax + 0x1c], 0x200
je 0x64608eef
cmp byte [eax + 0x19], 4
jb 0x64608eef
push dword [eax + 0x14]
mov edx, 0x64602d30
push dword [eax + 0x10]
push 0x33
pop ecx
call fcn.6460534c
mov eax, dword [0x6461800c]
mov ecx, dword [ebp - 8]
mov edi, dword [ebp + 0x1c]
test edi, edi
jne 0x64608f2e
cmp eax, 0x6461800c
je 0x64608f26
test dword [eax + 0x1c], 0x200
je 0x64608f26
cmp byte [eax + 0x19], 2
jb 0x64608f26
push 0x57
push 0x6460253c
push dword [eax + 0x14]
mov edx, 0x64602d30
push dword [eax + 0x10]
push 0x34
pop ecx
call fcn.6460539a
push 0x57
pop eax
jmp 0x64609119
and dword [edi], 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x14]
push dword [ebp + 8]
call fcn.646078d5
mov esi, eax
test esi, esi
je 0x64608f50
cmp esi, 0x2d02
jne 0x64608f85
xor ebx, ebx
mov ecx, dword [ebp - 8]
push edi
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.646086e1
mov esi, eax
test esi, esi
je 0x64608ff4
cmp esi, 0x2d03
jne 0x64608fc8
xor esi, esi
test ebx, ebx
jne 0x64608ff4
lea esi, [eax + 1]
jmp 0x64609038
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64609038
test dword [eax + 0x1c], 0x200
je 0x64609038
cmp byte [eax + 0x19], 2
jb 0x64609038
push 0
push 0x6460257c
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x35
mov edx, 0x64602d30
pop ecx
call fcn.6460539a
jmp 0x64609038
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64609038
test dword [eax + 0x1c], 0x200
je 0x64609038
cmp byte [eax + 0x19], 2
jb 0x64609038
push 0
push 0x646025a8
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x36
jmp 0x64608fbb
mov ecx, dword [edi]
test ecx, ecx
jne 0x6460901b
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x64609117
call fcn.6460ec38
mov dword [edi], eax
test eax, eax
jne 0x64609117
mov esi, 0x2cfd
jmp 0x64609038
mov edx, dword [ebp - 4]
test edx, edx
je 0x64609117
call fcn.64611ca6
test eax, eax
jne 0x646090d4
mov esi, 0x2cfb
cmp dword [ebp - 4], 0
je 0x64609085
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x64609079
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64609079
test dword [eax + 0x1c], 0x200
je 0x64609079
cmp byte [eax + 0x19], 5
jb 0x64609079
push dword [eax + 0x14]
mov edx, 0x64602d30
push dword [eax + 0x10]
push 0x38
pop ecx
call fcn.6460534c
mov ecx, dword [ebp - 4]
call fcn.6460d3c9
and dword [ebp - 4], 0
cmp dword [edi], 0
je 0x64609117
push dword [edi]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x646090c8
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646090c8
test dword [eax + 0x1c], 0x200
je 0x646090c8
cmp byte [eax + 0x19], 5
jb 0x646090c8
push dword [eax + 0x14]
mov edx, 0x64602d30
push dword [eax + 0x10]
push 0x39
pop ecx
call fcn.6460534c
mov ecx, dword [edi]
call fcn.6460d3c9
and dword [edi], 0
jmp 0x64609117
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x6460910f
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x6460910f
test dword [eax + 0x1c], 0x200
je 0x6460910f
cmp byte [eax + 0x19], 5
jb 0x6460910f
push dword [eax + 0x14]
mov edx, 0x64602d30
push dword [eax + 0x10]
push 0x37
pop ecx
call fcn.6460534c
mov ecx, dword [ebp - 4]
call fcn.6460d3c9
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x18