Function at 0x683760
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
xor edi, edi
mov dword [0x9dd478], edi
call esi
mov ebx, dword [esp + 0x14]
mov dword [0x9dd480], eax
cmp ebx, edi
je 0x6839d8
cmp word [ebx], di
je 0x6839d8
mov ebp, dword [esp + 0x18]
cmp ebp, edi
je 0x6839d8
cmp word [ebp], di
je 0x6839d8
cmp dword [0x9dd484], edi
jne 0x6837ce
mov dword [0x9dd478], 2
mov dword [0x9dd47c], 0x2242
call esi
pop edi
pop esi
mov dword [0x9dd480], eax
pop ebp
xor eax, eax
pop ebx
ret
mov dword [0x9dd478], edi
call esi
push ebx
mov dword [0x9dd480], eax
call fcn.005fc40b
add esp, 4
test eax, eax
je 0x68389a
push edi
push edi
push 3
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 7
push SysReAllocString
push ebx
call edi
mov esi, eax
cmp esi, 0xffffffff
jne 0x68384f
mov dword [0x9dd478], 3
mov dword [0x9dd47c], 0x1f94
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x9dd480], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x9dd478], 0x23
mov dword [0x9dd47c], 0x2252
call esi
pop edi
pop esi
mov dword [0x9dd480], eax
pop ebp
xor eax, eax
pop ebx
ret
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
push 0
push 0
push esi
call fcn.00682450
add esp, 0x10
mov dword [esp + 0x14], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x14]
cmp eax, 4
je 0x6838ba
cmp eax, 3
jne 0x683827
mov eax, dword [esp + 0x1c]
push eax
push 0
push ebp
push ebx
call fcn.0068a8f0
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
ret
mov dword [0x9dd478], 1
mov dword [0x9dd47c], 0x1f85
call esi
mov dword [0x9dd480], eax
jmp 0x68382d
xor esi, esi
push esi
push esi
push 3
push esi
push 7
push SysReAllocString
push ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
call edi
mov ebx, eax
cmp ebx, 0xffffffff
je 0x683960
push esi
push 0x80
push 4
push esi
push esi
push 0xc0000000
push ebp
call edi
mov esi, eax
cmp esi, 0xffffffff
jne 0x683932
push ebp
call fcn.006a31f0
add esp, 4
cmp eax, esi
je 0x683988
test al, 1
je 0x683988
and al, 0xfe
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push 0x80
push 3
push 0
push 1
push 0xc0000000
push ebp
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x683988
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov ecx, dword [esp + 0x1c]
mov edi, 1
push ecx
push esi
push ebx
call fcn.00683a00
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x6839ab
mov dword [0x9dd478], 3
mov dword [0x9dd47c], 0x226a
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
mov dword [0x9dd480], eax
mov eax, dword [esp + 0xc]
pop ebp
pop ebx
ret
mov dword [0x9dd478], 4
mov dword [0x9dd47c], 0x228c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [esp + 0x18]
mov dword [0x9dd480], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
cmp esi, 0xffffffff
je 0x6839bc
push esi
call ebx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x6839cf
test edi, edi
je 0x6839cf
push ebp
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
ret
mov dword [0x9dd478], 1
mov dword [0x9dd47c], 0x223c
call esi
pop edi
pop esi
mov dword [0x9dd480], eax
pop ebp
xor eax, eax
pop ebx
ret