Function at 0x57ddf4
Capabilities:
Delete file

Disassembly:
jmp 0x620d90
mov eax, dword [esp + 4]
test eax, eax
push ebp
push esi
push edi
js 0x620fa2
mov ecx, eax
and ecx, 0x78000000
cmp ecx, 0x18000000
jne 0x620fa2
mov ebp, eax
and ebp, 0xffff
cmp ebp, 0x64
jge 0x620fa2
mov esi, dword [ebp*4 + 0xb62594]
xor edi, edi
cmp esi, edi
je 0x620fa2
mov edx, dword [esi]
shl edx, 0x10
and eax, 0x7ff0000
cmp edx, eax
jne 0x620fa2
cmp dword [esi + 8], edi
je 0x620e1e
mov eax, dword [esi + 0x18]
cmp eax, edi
je 0x620dff
push eax
call fcn.0057ea29
add esp, 4
mov dword [esi + 0x18], edi
mov eax, dword [esi + 0xc]
push eax
call fcn.0057de62
mov ecx, dword [esi + 0x1c]
push edi
push ecx
call fcn.0057e39e
add esp, 0xc
mov dword [esi + 0xc], edi
mov dword [esi + 0x1c], edi
mov dword [esi + 8], edi
push ebx
mov ebx, 1
cmp dword [esi + 0xd0], ebx
jne 0x620e3f
lea edx, [esi + 0xd4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [esi + 0xd0], edi
cmp dword [esi + 0xc0], ebx
jne 0x620e6b
mov eax, dword [esi + 0x48]
mov ebx, dword [eax]
push edi
push 0x200
push edi
call fcn.0057bb3a
mov ecx, dword [esi + 0x48]
mov edx, dword [ebx + 0x84]
push eax
push edi
push ecx
call edx
mov ebx, 1
mov eax, dword [esi + 0x718]
cmp eax, edi
je 0x620e84
push eax
call fcn.0057cf76
add esp, 4
mov dword [esi + 0x718], edi
mov eax, dword [esi + 0x4c]
cmp eax, edi
je 0x620e96
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x4c], edi
mov eax, dword [esi + 0x48]
cmp eax, edi
je 0x620ea8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x48], edi
mov eax, dword [esi + 0x44]
cmp eax, edi
je 0x620eba
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x44], edi
mov eax, dword [esi + 0x40]
cmp eax, edi
je 0x620ecc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x40], edi
mov eax, dword [esi + 0x3c]
cmp eax, edi
je 0x620ede
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x3c], edi
mov eax, dword [esi + 0x38]
cmp eax, edi
je 0x620ef0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x38], edi
mov eax, dword [esi + 0x34]
cmp eax, edi
je 0x620f02
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x34], edi
mov eax, dword [esi + 0x60]
cmp eax, edi
je 0x620f14
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x60], edi
mov eax, dword [esi + 0x5c]
cmp eax, edi
je 0x620f26
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x5c], edi
mov eax, dword [esi + 0x50]
cmp eax, edi
je 0x620f38
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x50], edi
mov eax, dword [esi + 0x58]
cmp eax, edi
je 0x620f4a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x58], edi
mov eax, dword [esi + 0x54]
cmp eax, edi
je 0x620f5c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x54], edi
mov eax, dword [esi + 0x30]
cmp eax, edi
je 0x620f6e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0x30], edi
mov eax, dword [esi + 0x2dc]
cmp eax, edi
je 0x620f85
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x2dc], edi
push esi
call fcn.0057cf76
add esp, 4
mov dword [ebp*4 + 0xb62594], edi
sub dword [0xb62724], ebx
pop ebx
pop edi
pop esi
xor eax, eax
pop ebp
ret
pop edi
pop esi
or eax, 0xffffffff
pop ebp
ret