Function at 0x690c6e7c
Capabilities:
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
mov ebx, edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x690c71a3
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.690c4e5c
test al, al
je 0x690c718d
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.6900c510
mov eax, dword [ebp - 0x4c]
call fcn.6900c1d4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.6900c168
test al, al
je 0x690c6f30
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10], 0
jne 0x690c6f30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.6900c168
test al, al
je 0x690c6f13
push 0x80
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.690056a4
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.690056a4
push eax
call sub.kernel32.dll_DeleteFileA
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.690056a4
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.690056a4
push eax
call sub.kernel32.dll_MoveFileA
mov eax, dword [ebp - 4]
mov byte [eax + 0x11], 0
mov eax, dword [ebp - 4]
call fcn.690c4ec8
mov edx, dword [ebp - 4]
mov dword [edx + 8], eax
mov esi, 0x690c71b4
lea edi, [ebp - 0x48]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
call fcn.6903a0a8
add eax, 0x2a
mov dword [ebp - 0x38], eax
call fcn.6900e5b8
fstp qword [ebp - 0x30]
wait
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov dword [ebp - 0x28], eax
mov dl, 1
mov eax, dword [0x6901f880]
call fcn.69004194
mov ecx, eax
mov dl, 1
mov eax, dword [0x69037578]
call fcn.6903a024
mov dword [ebp - 8], eax
xor ecx, ecx
push ebp
push 0x690c7186
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov edx, 0x691532e8
mov ecx, 2
mov eax, dword [ebp - 8]
call fcn.6903a25c
lea edx, [ebp - 0x48]
mov ecx, 0x28
mov eax, dword [ebp - 8]
call fcn.6903a25c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
xor ecx, ecx
xor edx, edx
call fcn.6903a224
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0xc]
mov eax, ebx
call fcn.6903a0a8
cdq
push edx
push eax
mov edx, dword [ebx + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
call fcn.69024450
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [edx + 0xc]
add eax, eax
add eax, 0xb
cmp eax, dword [edx + 0x10]
jae 0x690c7007
xchg edx, eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x28]
xor edx, edx
push ebp
push 0x690c715a
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.6903a224
push 0xffff
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov dl, 1
mov eax, dword [0x6901f77c]
call fcn.69024668
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x690c7122
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x38]
cdq
push edx
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0xc]
call fcn.69024450
xor eax, eax
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x10]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.69024418
mov eax, dword [ebp - 0xc]
call fcn.690241b4
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
call fcn.6903a0a8
push eax
mov eax, dword [ebp - 8]
call fcn.6903a098
pop edx
xchg edx, eax
sub eax, edx
cdq
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x18]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.69024418
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0xc]
call fcn.69024450
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx]
sub eax, dword [ebp - 0x20]
sbb edx, dword [ebp - 0x1c]
push edx
push eax
mov eax, dword [ebp - 0xc]
call fcn.690833c8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
cdq
push edx
push eax
mov eax, dword [ebp - 0xc]
call fcn.690241d4
lea edx, [ebp - 0x10]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.69024418
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x690c7129
mov eax, dword [ebp - 0xc]
call fcn.690041c4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x690c71aa
lea eax, [ebp - 0x4c]
call fcn.69005214
ret