Function at 0x100611d0
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100a1e60
push eax
mov eax, 0x1474
mov dword fs:[0], esp
call fcn.1009d950
push ebx
lea edx, [ebp - 0x1480]
push esi
mov eax, edx
mov esi, 0x800
push edi
sub ecx, eax
lea eax, [esi + 0x7ffff7fe]
test eax, eax
je 0x1006122b
movzx eax, word [ecx + edx]
test ax, ax
je 0x10061224
mov word [edx], ax
add edx, 2
sub esi, 1
jne 0x10061204
jmp 0x10061228
test esi, esi
jne 0x1006122b
sub edx, 2
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
xor eax, eax
mov word [edx], ax
lea eax, [ebp - 0x1480]
push eax
call ebx
mov edi, eax
test edi, edi
je 0x10061292
lea ecx, [ebp - 0x230]
mov esi, edi
mov eax, ecx
mov edx, 0x104
sub esi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x10061288
movzx eax, word [esi + ecx]
test ax, ax
je 0x10061281
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x10061256
sub ecx, 2
xor eax, eax
mov word [ecx], ax
mov word [edi], ax
jmp 0x1006129b
test edx, edx
jne 0x10061288
sub ecx, 2
xor eax, eax
mov word [ecx], ax
mov word [edi], ax
jmp 0x1006129b
xor eax, eax
mov word [ebp - 0x230], ax
mov edx, 0x800
lea eax, [ebp - 0x1480]
cmp word [eax], 0
je 0x100612b4
add eax, 2
sub edx, 1
jne 0x100612a6
mov ecx, 0x800
mov esi, edx
mov eax, ecx
sub eax, edx
neg esi
sbb esi, esi
and esi, eax
test edx, edx
je 0x10061309
lea eax, [ebp - 0x1480]
lea eax, [eax + esi*2]
sub ecx, esi
je 0x10061301
mov edi, 0x100b4bf4
mov edx, SysReAllocString
sub edi, eax
test edx, edx
je 0x10061304
movzx esi, word [edi + eax]
test si, si
je 0x100612fd
mov word [eax], si
dec edx
add eax, 2
sub ecx, 1
jne 0x100612e2
jmp 0x10061301
test ecx, ecx
jne 0x10061304
sub eax, 2
xor ecx, ecx
mov word [eax], cx
lea edx, [ebp - 0x480]
lea ecx, [ebp - 0x1480]
call fcn.1004d830
mov edi, eax
cmp edi, 0xffffffff
je 0x100614b3
jmp 0x10061330
test byte [ebp - 0x480], 0x10
jne 0x10061496
lea eax, [ebp - 0x454]
push eax
call ebx
mov esi, eax
test esi, esi
je 0x10061496
cmp word [ebp - 0x230], 0
je 0x10061378
push esi
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10061378
mov word [ebp - 0x230], ax
jmp 0x10061496
cmp word [esi], 0x2e
jne 0x10061496
movzx eax, word [esi + 2]
add esi, 2
push eax
call fcn.10086fcc
add esp, 4
cmp ax, 0x7a
jne 0x1006139b
add esi, 2
movzx eax, word [esi]
test ax, ax
je 0x100613ce
mov ecx, eax
push 4
push ecx
call fcn.1008a9ec
add esp, 8
test eax, eax
je 0x100613c4
movzx eax, word [esi + 2]
add esi, 2
mov ecx, eax
test ax, ax
jne 0x100613a5
jmp 0x100613ce
cmp word [esi], 0
jne 0x10061496
lea eax, [ebp - 0x1480]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x1480]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ebx, dword [ebp - 0x480]
test bl, 1
je 0x10061447
push 0x104
lea eax, [ebp - 0x1480]
and ebx, 0xfffffffe
push eax
lea ecx, [ebp - 0x18]
call fcn.1004d280
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x1006141a
mov ecx, dword [eax]
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10061440
push eax
call fcn.10086818
add esp, 4
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0xffffffff
push 0x104
lea eax, [ebp - 0x1480]
push eax
lea ecx, [ebp - 0x24]
call fcn.1004d280
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x10061464
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x10061489
push eax
call fcn.10086818
add esp, 4
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
lea eax, [ebp - 0x480]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10061330
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret