Function at 0x6990dc
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffecc
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
call fcn.00405e1c
xor eax, eax
push ebp
push 0x6993ea
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.004b4980
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
mov ecx, dword [eax]
call dword [ecx + 0x88]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
call fcn.004b4980
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
add eax, 0xdc
call fcn.004059d4
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x500]
call fcn.005c84a8
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
add eax, 0xd0
call fcn.00405c24
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4b8]
call fcn.0058fbec
test al, al
je 0x6991f9
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.004b4980
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 0x699404
call fcn.00405cb4
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x6bbcc0]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
call fcn.004b49b0
push 0
push 0
mov eax, dword [0x6bbcc0]
mov eax, dword [eax]
mov eax, dword [eax + 0x380]
call fcn.00504d1c
xor eax, eax
push ebp
push 0x699319
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
mov edx, dword [eax]
call dword [edx + 0x94]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4f8]
call fcn.004b4980
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
call fcn.006037f0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
mov edx, dword [eax]
call dword [edx + 0x5c]
test al, al
je 0x69930c
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.0040ab7c
mov edx, dword [ebp - 0x28]
mov eax, 0x699420
call fcn.00405f7c
test eax, eax
je 0x69927e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
mov dl, 1
call fcn.0060216c
jmp 0x69928e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
xor edx, edx
call fcn.0060216c
xor eax, eax
push ebp
push 0x699305
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.0040c1bc
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
mov edx, dword [ebp - 4]
call fcn.0060348c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x69930c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x448]
call fcn.005f44a4
mov edx, 0x699430
mov eax, dword [ebp - 8]
call fcn.006983e8
mov eax, dword [ebp - 4]
call fcn.00405e2c
push eax
call sub.KERNEL32.DLL_DeleteFileA
mov edx, 0x699468
mov eax, dword [ebp - 8]
call fcn.006983e8
mov byte [ebp - 9], 1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x69939d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6993f1
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004059a4
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004059a4
lea eax, [ebp - 0x1c]
call fcn.00405980
lea eax, [ebp - 0x18]
call fcn.004061a8
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004059a4
lea eax, [ebp - 4]
call fcn.00405980
ret