Function at 0x10015128
Capabilities:
Delete file

Disassembly:
push 8
mov eax, 0x1007a661
call fcn.1005d4a1
mov ebx, ecx
mov edi, edx
call fcn.1001b617
push ebx
lea ebx, [ebp - 0x14]
call fcn.1001d384
mov eax, dword [0x100a1f08]
cmp dword [0x100a1f04], eax
pop ecx
mov esi, eax
jbe 0x1001515b
call fcn.10055955
cmp dword [ebp - 0x14], 0
je 0x1001516a
cmp dword [ebp - 0x14], 0x100a1f00
je 0x1001516f
call fcn.10055955
cmp dword [ebp - 0x10], esi
je 0x10015203
mov ebx, dword [ebp + 8]
test ebx, ebx
jne 0x1001540f
push dword [0x100a1ee8]
call fcn.1001c0c7
test eax, eax
pop ecx
je 0x10015292
lea esi, [ebp - 0x14]
call fcn.10016eeb
mov dword [eax + 0xe4], 8
call fcn.1001ddcc
call fcn.1001dec6
test al, al
je 0x10015225
mov al, byte [0x1009ecfc]
test al, al
jne 0x1001521a
mov eax, dword [0x1009ed00]
cmp eax, 1
mov byte [0x100a1e18], 1
jne 0x1001520d
push 0x40041
push 0x1008be54
push 0x1008be60
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x10015225
mov byte [0x100a1e10], 0x10
and dword [0x100a1e20], 0
mov eax, edi
call fcn.10014555
xor eax, eax
call fcn.1005d579
ret 4
test eax, eax
jne 0x10015225
mov byte [0x100a1e10], 0x11
jmp 0x100151f5
cmp al, 1
jne 0x10015225
mov byte [0x100a1e18], 0
lea esi, [ebp - 0x14]
call fcn.10016eeb
push dword [eax + 0xec]
call fcn.1001d141
test eax, eax
pop ecx
je 0x100152d0
call fcn.10016eeb
mov ebx, dword [eax + 0xec]
call fcn.1001d09c
test eax, eax
je 0x10015275
call fcn.10016eeb
mov dword [eax + 0xe4], 8
call fcn.10016eeb
mov dword [eax + 0xf0], 0x64
jmp 0x100152d0
call dword [section..data]
lea esi, [ebp - 0x14]
call fcn.10016eeb
add eax, 0xe8
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x100152d0
cmp byte [0x100a1d64], 0
je 0x100152a9
mov eax, dword [edi + 0x34]
test eax, eax
je 0x100152b0
call fcn.100121d8
jmp 0x100152b0
mov eax, edi
call fcn.10014555
lea esi, [ebp - 0x14]
call fcn.10016eeb
mov dword [eax + 0xe4], 6
and dword [0x100a1e20], 0
mov byte [0x100a1e10], 3
call fcn.1001d522
test al, al
je 0x10015310
cmp byte [0x100a1d64], 0
je 0x10015475
cmp byte [0x100a1e10], 1
jne 0x10015475
mov eax, dword [edi + 0x34]
test eax, eax
je 0x10015203
cmp dword [eax + 0x2b0], 1
jl 0x10015203
jmp 0x10015480
call fcn.1001d485
test al, al
je 0x1001538a
xor ebx, ebx
inc ebx
cmp dword [0x100a1d74], ebx
jne 0x10015333
mov byte [0x100a1e2c], bl
mov ebx, edi
call fcn.100161f2
jmp 0x1001537b
lea eax, [ebp + 8]
push str._r_n_r_nQQ
mov byte [0x100a1e2c], 0
lea ecx, [edi + 0xec]
push eax
mov dword [edi + 0xe0], ebx
call fcn.10009b0b
pop ecx
pop ecx
push ebx
mov dword [ebp - 4], 2
push dword [ebp + 8]
call fcn.10014e15
mov ecx, dword [edi + 0x34]
push 0
call fcn.10012733
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.10001981
mov dword [edi + 0xe4], 1
jmp 0x10015203
call fcn.1001d5b3
test al, al
je 0x10015401
xor ebx, ebx
inc ebx
cmp dword [0x100a1d74], ebx
jne 0x100153ad
mov byte [0x100a1e2c], bl
mov ebx, edi
call fcn.100161f2
jmp 0x100153f5
lea eax, [ebp - 0x10]
push str._r_n_r_nQQ
mov byte [0x100a1e2c], 0
lea ecx, [edi + 0xec]
push eax
mov dword [edi + 0xe0], ebx
call fcn.10009b0b
pop ecx
pop ecx
push ebx
mov dword [ebp - 4], 3
push dword [ebp - 0x10]
call fcn.10014e15
mov ecx, dword [edi + 0x34]
push 0
call fcn.10012389
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.10001981
and dword [edi + 0xe4], 0
jmp 0x10015203
push dword [edi + 4]
call fcn.1001bb41
pop ecx
jmp 0x10015203
lea esi, [ebp - 0x14]
call fcn.10016eeb
mov dword [eax + 0xe4], 7
lea eax, [ebp + 8]
mov dword [0x100a1e20], ebx
mov ebx, dword [0x100a1ee8]
push eax
mov byte [0x100a1e10], 4
call fcn.1001cfe1
pop ecx
mov dword [ebp - 4], 1
push dword [eax]
push 0x1008bea8
push 0x100a1ec8
call fcn.10009cda
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
add esp, 0xc
add eax, 0xfffffff0
call fcn.10001981
cmp byte [0x100a1d64], 0
je 0x100151fc
mov eax, dword [edi + 0x34]
test eax, eax
je 0x10015203
call fcn.100121d8
jmp 0x10015203