Function at 0x6511b4
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x6516c5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x6516dc
call fcn.0064f0e0
mov eax, 0x651700
call fcn.006508d4
mov eax, 0x651718
call fcn.006508d4
mov eax, 0x651734
call fcn.006508d4
mov eax, 0x651754
call fcn.006508d4
mov eax, 0x651778
call fcn.006508d4
mov eax, 0x6517ac
call fcn.006508d4
call fcn.0062df2c
test al, al
je 0x651354
mov eax, 0x6517e4
call fcn.0044a448
test al, al
jne 0x6512b2
mov dl, 1
mov eax, dword [0x45f3cc]
call fcn.00404db8
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x6512ab
push dword fs:[eax]
mov dword fs:[eax], esp
mov esi, 0x12
mov ebx, 0x66b4cc
push 0x6517fc
push dword [ebx]
push 0x651830
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00406180
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
add ebx, 4
dec esi
jne 0x65125e
mov edx, 0x6517e4
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6512b2
mov eax, dword [ebp - 8]
call fcn.00404de8
ret
lea eax, [ebp - 4]
mov edx, 0x651848
call fcn.00405e68
call fcn.0062e04c
test al, al
je 0x6512d5
lea eax, [ebp - 4]
mov edx, 0x651868
call fcn.004060b8
lea eax, [ebp - 4]
mov edx, 0x651880
call fcn.004060b8
mov eax, dword [ebp - 4]
call fcn.0064f0e0
push 0
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [0x6300e8]
call fcn.00630338
mov eax, 0x6517e4
call fcn.0044a448
test al, al
je 0x651354
xor eax, eax
push ebp
push 0x65134d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x6518b8
call fcn.00405e68
push 0
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [0x6300e8]
call fcn.00630338
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x651354
push 0x6518d0
call sub.kernel32.dll_DeleteFileA
ret
xor edx, edx
push ebp
push 0x65137b
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, 0x6518e8
mov eax, 0x651908
call fcn.00650e94
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6513be
lea eax, [ebp - 0x18]
mov ecx, 0x65191c
mov edx, dword [0x77e22c]
call fcn.00406104
mov eax, dword [ebp - 0x18]
call fcn.0044a448
test al, al
je 0x651497
xor eax, eax
push ebp
push 0x65148d
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x643220]
call fcn.00643914
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x65147c
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00643be8
mov edx, 0x651938
mov eax, dword [ebp - 0xc]
call fcn.00644538
mov dl, 1
mov eax, dword [ebp - 0xc]
call fcn.00643be8
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x8d], 0
je 0x651466
movzx eax, byte [0x651940]
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.00642a5c
mov ecx, 0x1f01ff
mov edx, 0x651908
mov ebx, dword [eax]
call dword [ebx + 0x20]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x651483
lea eax, [ebp - 0xc]
call fcn.00451f1c
ret
xor eax, eax
push ebp
push 0x651591
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x643220]
call fcn.00643914
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x651580
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00643be8
mov edx, 0x65194c
mov eax, dword [ebp - 0xc]
call fcn.00644538
mov dl, 1
mov eax, dword [ebp - 0xc]
call fcn.00643be8
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x8d], 0
je 0x65151c
movzx eax, byte [0x651940]
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.00642a5c
mov ecx, 0x1f01ff
mov edx, 0x651908
mov ebx, dword [eax]
call dword [ebx + 0x20]
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00643be8
mov edx, 0x651964
mov eax, dword [ebp - 0xc]
call fcn.00644538
mov dl, 1
mov eax, dword [ebp - 0xc]
call fcn.00643be8
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x8d], 0
je 0x65156a
movzx eax, byte [0x651940]
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.00642a5c
mov ecx, 0x1f01ff
mov edx, 0x651908
mov ebx, dword [eax]
call dword [ebx + 0x20]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x651587
lea eax, [ebp - 0xc]
call fcn.00451f1c
ret