Function at 0x597340
Capabilities:
Delete file
Move file

Disassembly:
push 0x49c
mov eax, 0x60c187
call fcn.004db4be
and dword [ebp - 0x490], 0
lea ecx, [ebp - 0x494]
push 0x67476c
call fcn.0040d2ee
and dword [ebp - 4], 0
mov esi, 0x63a8d4
push esi
call fcn.00505bb3
pop ecx
push esi
push eax
lea ecx, [ebp - 0x494]
call fcn.0040f454
mov edi, dword [ebp - 0x494]
mov ecx, edi
call fcn.00596970
mov ecx, dword [0x673514]
xor eax, eax
mov dword [ebp - 0x498], ecx
mov dword [ebp - 0x480], eax
test ecx, ecx
jle 0x597669
push eax
mov ecx, 0x673510
call fcn.0042b6f7
mov ebx, dword [eax]
mov eax, dword [0x668294]
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x484], eax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x47c]
push dword [ebp - 0x480]
push edi
push str._s_04d.ttbl
push eax
call fcn.0040cefd
mov eax, dword [0x668294]
push str..tmp
mov dword [ebp - 0x48c], eax
call fcn.00505bb3
mov esi, dword [ebp - 0x47c]
lea ecx, [ebp - 0x48c]
add esp, 0x14
push str..tmp
push eax
push esi
push dword [esi - 8]
call fcn.0040f4c7
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x484]
call fcn.0040d242
mov ecx, dword [ebp - 0x48c]
add ecx, 0xfffffff4
cmp ecx, 0x668010
je 0x597441
call fcn.00407965
mov edi, dword [ebp - 0x484]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebx + 0x2c], 0
jne 0x5974d2
lea eax, [ebx + 0x18]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.0040d36e
push esi
mov esi, dword [ebp - 0x4a0]
push esi
call fcn.005073b0
pop ecx
test eax, eax
pop ecx
setne al
lea ecx, [esi - 0xc]
mov byte [ebp - 0x485], al
cmp ecx, 0x668010
je 0x597493
call fcn.00407965
mov al, byte [ebp - 0x485]
test al, al
je 0x59753f
lea eax, [ebx + 0x14]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.0040d36e
mov esi, dword [ebp - 0x4a4]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [esi - 0xc]
cmp ecx, 0x668010
je 0x5974c8
call fcn.00407965
push edi
mov ecx, ebx
call fcn.00471a45
jmp 0x59753f
push 1
push edi
mov ecx, ebx
call fcn.00593d60
test eax, eax
jne 0x597545
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebx + 0x18]
push eax
lea ecx, [ebp - 0x49c]
call fcn.0040d36e
mov esi, dword [ebp - 0x49c]
cmp dword [esi - 8], 0
je 0x59752f
mov ecx, esi
call fcn.00414841
test eax, eax
je 0x59752f
push dword [ebp - 0x47c]
push esi
call fcn.005073b0
pop ecx
pop ecx
test eax, eax
je 0x59752f
push edi
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push edi
mov ecx, ebx
call fcn.00471a45
lea ecx, [esi - 0xc]
cmp ecx, 0x668010
je 0x59753f
call fcn.00407965
mov esi, dword [ebp - 0x47c]
lea ecx, [edi - 0xc]
mov edi, 0x668010
cmp ecx, edi
je 0x597556
call fcn.00407965
lea ecx, [esi - 0xc]
mov byte [ebp - 4], 0
cmp ecx, edi
je 0x597566
call fcn.00407965
mov eax, dword [ebp - 0x480]
mov ebx, dword [ebp - 0x498]
inc eax
mov edi, dword [ebp - 0x494]
mov dword [ebp - 0x480], eax
cmp eax, ebx
jl 0x5973ac
xor ecx, ecx
mov edi, 0x668010
mov dword [ebp - 0x480], ecx
mov eax, dword [0x668294]
push ecx
push dword [ebp - 0x494]
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x47c], eax
lea eax, [ebp - 0x484]
push str._s_04d.ttbl
push eax
call fcn.0040cefd
mov eax, dword [0x668294]
mov esi, str..tmp
push esi
mov dword [ebp - 0x48c], eax
call fcn.00505bb3
add esp, 0x14
lea ecx, [ebp - 0x48c]
push esi
mov esi, dword [ebp - 0x484]
push eax
push esi
push dword [esi - 8]
call fcn.0040f4c7
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x47c]
call fcn.0040d242
mov ecx, dword [ebp - 0x48c]
add ecx, 0xfffffff4
cmp ecx, edi
je 0x597611
call fcn.00407965
mov edi, dword [ebp - 0x47c]
mov ecx, edi
call fcn.00414841
test eax, eax
je 0x597631
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [edi - 0xc]
mov edi, 0x668010
cmp ecx, edi
je 0x597642
call fcn.00407965
lea ecx, [esi - 0xc]
cmp ecx, edi
je 0x59764e
call fcn.00407965
mov ecx, dword [ebp - 0x480]
inc ecx
mov dword [ebp - 0x480], ecx
cmp ecx, ebx
jl 0x597594
mov edi, dword [ebp - 0x494]
lea ecx, [ebp - 0x478]
call fcn.00420dfc
mov eax, dword [0x668294]
mov esi, str..ttbl
push esi
mov dword [ebp - 0x484], eax
call fcn.00505bb3
pop ecx
push esi
push eax
push edi
push dword [edi - 8]
lea ecx, [ebp - 0x484]
call fcn.0040f4c7
mov esi, dword [ebp - 0x484]
lea ecx, [ebp - 0x478]
push esi
call fcn.00420f3c
lea ecx, [esi - 0xc]
mov ebx, eax
cmp ecx, 0x668010
je 0x5976c0
call fcn.00407965
test ebx, ebx
je 0x5977bf
mov esi, dword [ebp - 0x490]
mov edi, dword [ebp - 0x498]
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x478]
call fcn.00420e25
lea ecx, [ebp - 0x480]
or esi, 1
push ecx
push str._04d.ttbl
push dword [eax]
call fcn.0043bc7f
add esp, 0xc
cmp eax, 1
jne 0x597719
cmp dword [ebp - 0x480], 0
jl 0x597719
cmp dword [ebp - 0x480], edi
jge 0x597719
mov bl, al
jmp 0x59771b
xor bl, bl
mov ecx, dword [ebp - 0x49c]
and esi, 0xfffffffe
add ecx, 0xfffffff4
mov dword [ebp - 0x490], esi
cmp ecx, 0x668010
je 0x59773a
call fcn.00407965
test bl, bl
jne 0x5977a6
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x478]
call fcn.00420e25
mov esi, dword [ebp - 0x4a4]
cmp dword [esi - 8], 8
jne 0x597763
mov ebx, 0x668010
jmp 0x597794
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0x478]
call fcn.00420e5d
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x4a0]
mov ebx, 0x668010
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x597794
call fcn.00407965
lea ecx, [esi - 0xc]
cmp ecx, ebx
je 0x5977a0
call fcn.00407965
mov esi, dword [ebp - 0x490]
lea ecx, [ebp - 0x478]
call fcn.00420ff4
test eax, eax
jne 0x5976d4
mov edi, dword [ebp - 0x494]
mov eax, dword [0x668294]
mov esi, str..ttbl.tmp
push esi
mov dword [ebp - 0x498], eax
call fcn.00505bb3
pop ecx
push esi
push eax
push edi
push dword [edi - 8]
lea ecx, [ebp - 0x498]
call fcn.0040f4c7
mov esi, dword [ebp - 0x498]
lea ecx, [ebp - 0x478]
push esi
call fcn.00420f3c
lea ecx, [esi - 0xc]
mov ebx, eax
mov esi, 0x668010
cmp ecx, esi
je 0x59780c
call fcn.00407965
test ebx, ebx
je 0x59784b
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x478]
call fcn.00420e5d
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x49c]
add ecx, 0xfffffff4
cmp ecx, esi
je 0x59783c
call fcn.00407965
lea ecx, [ebp - 0x478]
call fcn.00420ff4
test eax, eax
jne 0x597810
lea ecx, [ebp - 0x478]
call fcn.0042101e
lea ecx, [edi - 0xc]
cmp ecx, esi
je 0x597862
call fcn.00407965
call fcn.004db46d
ret