Function at 0x646082c2
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
and dword [ebp - 4], 0
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 8], ecx
push edi
inc ebx
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x6460830d
test dword [eax + 0x1c], 0x200
je 0x6460830d
cmp byte [eax + 0x19], 4
jb 0x6460830d
push dword [eax + 0x14]
mov edx, 0x64601f74
push dword [eax + 0x10]
push 0x33
pop ecx
call fcn.64604453
mov eax, dword [0x64617004]
mov ecx, dword [ebp - 8]
mov edi, dword [ebp + 0x1c]
test edi, edi
jne 0x6460834c
cmp eax, 0x64617004
je 0x64608344
test dword [eax + 0x1c], 0x200
je 0x64608344
cmp byte [eax + 0x19], 2
jb 0x64608344
push 0x57
push 0x64601764
push dword [eax + 0x14]
mov edx, 0x64601f74
push dword [eax + 0x10]
push 0x34
pop ecx
call fcn.64604495
push 0x57
pop eax
jmp 0x64608537
and dword [edi], 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x14]
push dword [ebp + 8]
call fcn.64606d15
mov esi, eax
test esi, esi
je 0x6460836e
cmp esi, 0x2d02
jne 0x646083a3
xor ebx, ebx
mov ecx, dword [ebp - 8]
push edi
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.64607b06
mov esi, eax
test esi, esi
je 0x64608412
cmp esi, 0x2d03
jne 0x646083e6
xor esi, esi
test ebx, ebx
jne 0x64608412
lea esi, [eax + 1]
jmp 0x64608456
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608456
test dword [eax + 0x1c], 0x200
je 0x64608456
cmp byte [eax + 0x19], 2
jb 0x64608456
push 0
push 0x646017a4
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x35
mov edx, 0x64601f74
pop ecx
call fcn.64604495
jmp 0x64608456
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608456
test dword [eax + 0x1c], 0x200
je 0x64608456
cmp byte [eax + 0x19], 2
jb 0x64608456
push 0
push 0x646017d0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x36
jmp 0x646083d9
mov ecx, dword [edi]
test ecx, ecx
jne 0x64608439
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x64608535
call fcn.6460e639
mov dword [edi], eax
test eax, eax
jne 0x64608535
mov esi, 0x2cfd
jmp 0x64608456
mov edx, dword [ebp - 4]
test edx, edx
je 0x64608535
call fcn.646114c6
test eax, eax
jne 0x646084f2
mov esi, 0x2cfb
cmp dword [ebp - 4], 0
je 0x646084a3
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x64608497
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608497
test dword [eax + 0x1c], 0x200
je 0x64608497
cmp byte [eax + 0x19], 5
jb 0x64608497
push dword [eax + 0x14]
mov edx, 0x64601f74
push dword [eax + 0x10]
push 0x38
pop ecx
call fcn.64604453
mov ecx, dword [ebp - 4]
call fcn.6460ce29
and dword [ebp - 4], 0
cmp dword [edi], 0
je 0x64608535
push dword [edi]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x646084e6
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x646084e6
test dword [eax + 0x1c], 0x200
je 0x646084e6
cmp byte [eax + 0x19], 5
jb 0x646084e6
push dword [eax + 0x14]
mov edx, 0x64601f74
push dword [eax + 0x10]
push 0x39
pop ecx
call fcn.64604453
mov ecx, dword [edi]
call fcn.6460ce29
and dword [edi], 0
jmp 0x64608535
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x6460852d
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x6460852d
test dword [eax + 0x1c], 0x200
je 0x6460852d
cmp byte [eax + 0x19], 5
jb 0x6460852d
push dword [eax + 0x14]
mov edx, 0x64601f74
push dword [eax + 0x10]
push 0x37
pop ecx
call fcn.64604453
mov ecx, dword [ebp - 4]
call fcn.6460ce29
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x18