Function at 0x64608282
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
and dword [ebp - 4], 0
push ebx
push esi
push edi
mov dword [ebp - 8], 1
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x646082cb
test dword [eax + 0x1c], 0x200
je 0x646082cb
cmp byte [eax + 0x19], 4
jb 0x646082cb
push dword [eax + 0x14]
mov edx, 0x64601f68
push dword [eax + 0x10]
push 0x33
pop ecx
call fcn.64604453
mov eax, dword [0x64617004]
mov ebx, dword [ebp + 0x1c]
test ebx, ebx
jne 0x6460830a
cmp eax, 0x64617004
je 0x64608302
test dword [eax + 0x1c], 0x200
je 0x64608302
cmp byte [eax + 0x19], 2
jb 0x64608302
push 0x57
push 0x64601764
push dword [eax + 0x14]
mov edx, 0x64601f68
push dword [eax + 0x10]
push 0x34
pop ecx
call fcn.64604495
push 0x57
pop eax
jmp 0x646084ea
and dword [ebx], 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x14]
push dword [ebp + 8]
call fcn.64606cd5
mov edi, dword [ebp - 4]
mov esi, eax
test esi, esi
je 0x64608331
cmp esi, 0x2d02
jne 0x64608364
and dword [ebp - 8], 0
push ebx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.64607ac6
mov esi, eax
test esi, esi
je 0x646083d3
cmp esi, 0x2d03
jne 0x646083a7
xor esi, esi
cmp dword [ebp - 8], esi
jne 0x646083d3
lea esi, [eax + 1]
jmp 0x64608415
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608415
test dword [eax + 0x1c], 0x200
je 0x64608415
cmp byte [eax + 0x19], 2
jb 0x64608415
push 0
push 0x646017a4
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x35
mov edx, 0x64601f68
pop ecx
call fcn.64604495
jmp 0x64608415
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608415
test dword [eax + 0x1c], 0x200
je 0x64608415
cmp byte [eax + 0x19], 2
jb 0x64608415
push 0
push 0x646017d0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x36
jmp 0x6460839a
mov ecx, dword [ebx]
test ecx, ecx
jne 0x646083f9
test edi, edi
je 0x646084e8
mov ecx, edi
call fcn.6460e5b9
mov dword [ebx], eax
test eax, eax
jne 0x646084e8
mov esi, 0x2cfd
jmp 0x64608415
test edi, edi
je 0x646084e8
mov edx, edi
call fcn.64611445
test eax, eax
jne 0x646084a8
mov esi, 0x2cfb
test edi, edi
je 0x64608459
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x64608452
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608452
test dword [eax + 0x1c], 0x200
je 0x64608452
cmp byte [eax + 0x19], 5
jb 0x64608452
push dword [eax + 0x14]
mov edx, 0x64601f68
push dword [eax + 0x10]
push 0x38
pop ecx
call fcn.64604453
mov ecx, edi
call fcn.6460cda9
cmp dword [ebx], 0
je 0x646084e8
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x6460849c
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x6460849c
test dword [eax + 0x1c], 0x200
je 0x6460849c
cmp byte [eax + 0x19], 5
jb 0x6460849c
push dword [eax + 0x14]
mov edx, 0x64601f68
push dword [eax + 0x10]
push 0x39
pop ecx
call fcn.64604453
mov ecx, dword [ebx]
call fcn.6460cda9
and dword [ebx], 0
jmp 0x646084e8
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x646084e1
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x646084e1
test dword [eax + 0x1c], 0x200
je 0x646084e1
cmp byte [eax + 0x19], 5
jb 0x646084e1
push dword [eax + 0x14]
mov edx, 0x64601f68
push dword [eax + 0x10]
push 0x37
pop ecx
call fcn.64604453
mov ecx, edi
call fcn.6460cda9
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x18