Function at 0x1032c4a
Capabilities:
Check if file exists
Delete file
Get file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x5a8
mov eax, dword [0x10413a0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x598], esi
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ebx
mov dword [ebp - 0x58c], ebx
mov edi, 0x104
cmp eax, ebx
je 0x1032c9c
push 0xc
push edi
lea ecx, [ebp - 0x108]
push ecx
push eax
call fcn.0101354d
jmp 0x1032ca2
mov byte [ebp - 0x108], bl
lea eax, [ebp - 0x108]
push eax
call fcn.0103232b
push esi
push 0x37
mov dword [ebp - 0x5a8], eax
call fcn.010281fa
push eax
lea eax, [ebp - 0x478]
push 0x168
push eax
call fcn.01007bcb
add esp, 0x10
lea eax, [ebp - 0x478]
push eax
call fcn.0102965e
cmp dword [0x1041b50], ebx
jne 0x1032d17
push 0x800
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [0x1041b50], eax
cmp eax, ebx
jne 0x1032d17
push 2
push 2
call fcn.0102b944
push dword [ebp - 0x5a8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, ebx
jmp 0x10336d5
push dword [ebp - 0x598]
call fcn.01012e56
push ebx
push eax
mov dword [ebp - 0x584], eax
call fcn.0101c59b
mov dword [0x1043624], eax
cmp eax, ebx
jne 0x1032dd6
cmp dword [0x104381c], 4
je 0x1032d98
lea eax, [ebp - 0x310]
push eax
push dword [ebp - 0x584]
call fcn.010137b1
push ebx
lea eax, [ebp - 0x310]
push eax
call fcn.0101c59b
mov dword [0x1043624], eax
cmp eax, ebx
jne 0x1032dab
push 2
push dword [ebp - 0x584]
call fcn.0101c59b
mov dword [0x1043624], eax
cmp eax, ebx
je 0x1032d8f
mov dword [0x1041c94], 1
jmp 0x1032dce
cmp dword [0x104381c], 4
jne 0x1032dce
push dword [ebp - 0x584]
call fcn.01007110
push 5
pop ebx
jmp 0x1032d04
lea eax, [ebp - 0x584]
push eax
call fcn.01012ee8
lea eax, [ebp - 0x310]
push eax
call fcn.010134ed
mov dword [ebp - 0x584], eax
mov eax, dword [0x1043624]
cmp eax, ebx
je 0x10333c9
push 2
push 0x1004fa0
push eax
call fcn.0101c861
push 0x108
mov dword [ebp - 0x588], eax
lea eax, [ebp - 0x580]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
cmp dword [ebp - 0x588], ebx
je 0x1033258
push 0x38
push 0x1043780
push dword [ebp - 0x588]
call fcn.0101ca72
cmp eax, 0x38
jne 0x1033242
cmp dword [0x1043780], 0x1087
jne 0x10333d9
mov esi, 0x2bc
cmp dword [0x104376c], ebx
jne 0x1032e67
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [0x104376c], eax
cmp eax, ebx
jne 0x1032e67
push dword [ebp - 0x584]
call fcn.01007110
push 2
push 2
call fcn.0102b944
push esi
push dword [0x104376c]
push dword [ebp - 0x588]
call fcn.0101ca72
cmp eax, esi
jne 0x1033242
mov eax, dword [0x104378c]
cmp eax, 1
jle 0x1032ed3
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [0x1041a08], eax
cmp eax, ebx
jne 0x1032eb0
push dword [ebp - 0x584]
call fcn.01007110
push 2
push 2
call fcn.0102b944
push dword [0x104378c]
push dword [0x1041a08]
push dword [ebp - 0x588]
call fcn.0101ca72
cmp eax, dword [0x104378c]
jne 0x1033242
push ebx
push 1
push dword [ebp - 0x588]
call fcn.0101c811
push 2
push 0x1006450
push dword [0x1043624]
call fcn.0101c861
mov dword [ebp - 0x588], eax
cmp eax, ebx
je 0x1032f2b
mov esi, 0x800
push esi
push dword [0x1041b50]
push eax
call fcn.0101ca72
cmp eax, esi
jne 0x1033242
push ebx
push 1
push dword [ebp - 0x588]
call fcn.0101c811
mov dword [ebp - 0x588], ebx
push 2
push dword [0x1043624]
push 0x1004f88
call fcn.0100d126
mov esi, eax
cmp esi, ebx
je 0x1032fb7
push ebx
push edi
lea eax, [ebp - 0x108]
push eax
push ebx
lea eax, [ebp - 0x594]
push eax
push esi
mov dword [ebp - 0x594], 0x11170
call fcn.0100c58e
test eax, eax
jne 0x1032f79
lea eax, [ebp - 0x108]
push eax
call fcn.0103232b
mov dword [0x10419f4], eax
push ebx
push edi
lea eax, [ebp - 0x108]
push eax
push ebx
lea eax, [ebp - 0x594]
push eax
push esi
mov dword [ebp - 0x594], 0x11171
call fcn.0100c58e
test eax, eax
jne 0x1032faf
lea eax, [ebp - 0x108]
push eax
call fcn.0103232b
mov dword [0x1041b38], eax
push 1
push esi
call fcn.0100cf53
cmp dword [0x1041b38], ebx
jne 0x1032fce
push 0x1004f54
call fcn.0103232b
mov dword [0x1041b38], eax
push 2
push dword [0x1043624]
push 0x1004f80
call fcn.0100d126
mov dword [ebp - 0x58c], eax
lea eax, [ebp - 0x584]
push eax
call fcn.01012ee8
cmp dword [ebp - 0x58c], ebx
je 0x1033493
push ebx
push 0x108
lea eax, [ebp - 0x580]
push eax
push ebx
lea eax, [ebp - 0x590]
push eax
push dword [ebp - 0x58c]
mov dword [ebp - 0x590], 0x2710
call fcn.0100c58e
cmp eax, ebx
jne 0x1033242
push ebx
lea eax, [ebp - 0x584]
push eax
push dword [ebp - 0x580]
lea eax, [ebp - 0x57c]
push eax
call fcn.0101c487
test eax, eax
je 0x1033064
cmp dword [ebp - 0x584], ebx
je 0x103307a
lea eax, [ebp - 0x584]
push eax
call fcn.01012ee8
jmp 0x103307a
lea eax, [ebp - 0x57c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x103323b
mov dword [ebp - 0x590], 1
push ebx
push 0x108
lea eax, [ebp - 0x580]
push eax
push ebx
lea eax, [ebp - 0x590]
push eax
push dword [ebp - 0x58c]
call fcn.0100c58e
test eax, eax
jne 0x1033486
push 0x3d
lea eax, [ebp - 0x57c]
push eax
call fcn.0100bd56
mov esi, eax
cmp esi, ebx
je 0x1033230
cmp dword [0x1041b20], ebx
jne 0x10330ec
push 0x40
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x10330e6
mov ecx, eax
call fcn.0103859c
mov dword [0x1041b20], eax
jmp 0x10330ec
mov dword [0x1041b20], ebx
push 0xc
push edi
lea eax, [ebp - 0x108]
mov byte [esi], bl
push eax
inc esi
push esi
call fcn.0101354d
mov eax, dword [ebp - 0x590]
mov ecx, dword [0x1041b50]
test byte [ecx + eax*8 - 2], 4
jne 0x1033158
cmp dword [ebp - 0x5a0], ebx
je 0x1033158
push 0xffffffffffffffff
push dword [ebp - 0x5a8]
lea eax, [ebp - 0x108]
push 0xffffffffffffffff
push eax
push 1
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringA]
cmp eax, 2
jne 0x1033158
push 0xffffffffffffffff
push dword [ebp - 0x5a0]
push 0xffffffffffffffff
push esi
push 1
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringA]
cmp eax, 2
jne 0x1033417
mov ecx, dword [ebp - 0x590]
mov eax, dword [0x1041b50]
lea eax, [eax + ecx*8]
movsx ecx, word [eax - 2]
test cl, 1
je 0x10331eb
test cl, 2
je 0x10331d5
lea eax, [ebp - 0x450]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x10331eb
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push 0x108
lea eax, [ebp - 0x580]
push eax
push ebx
lea eax, [ebp - 0x590]
push eax
push dword [ebp - 0x58c]
mov dword [ebp - 0x590], 0x2710
call fcn.0100c58e
test eax, eax
je 0x1033242
push dword [ebp - 0x598]
lea eax, [ebp - 0x57c]
push edi
push eax
call fcn.0100e041
jmp 0x1033242
push 1
lea ecx, [ebp - 0x584]
push ecx
push dword [eax - 8]
push esi
call fcn.0101c487
test eax, eax
je 0x103318e
lea eax, [ebp - 0x57c]
push eax
push dword [0x1041b20]
call fcn.010385ca
cmp dword [ebp - 0x584], ebx
je 0x1033224
push dword [ebp - 0x584]
push dword [0x1041b20]
call fcn.010385ca
lea eax, [ebp - 0x584]
push eax
call fcn.01012ee8
jmp 0x1033230
push esi
push dword [0x1041b20]
call fcn.010385ca
inc dword [ebp - 0x590]
jmp 0x1033084
and dword [0x1043788], 0xffffffdf
cmp dword [ebp - 0x588], ebx
je 0x1033258
push ebx
push 1
push dword [ebp - 0x588]
call fcn.0101c811
cmp dword [ebp - 0x58c], ebx
jne 0x10332bf
push 2
push dword [0x1043624]
mov esi, 0x2710
push 0x1004f88
mov dword [ebp - 0x590], esi
call fcn.0100d126
mov dword [ebp - 0x58c], eax
cmp eax, ebx
je 0x10332cc
push ebx
push 0x108
lea ecx, [ebp - 0x580]
push ecx
push ebx
lea ecx, [ebp - 0x590]
push ecx
push eax
mov dword [ebp - 0x590], esi
call fcn.0100c58e
test eax, eax
je 0x10332bf
push dword [ebp - 0x598]
lea eax, [ebp - 0x57c]
push edi
push eax
call fcn.0100e041
push 1
push dword [ebp - 0x58c]
call fcn.0100cf53
mov eax, dword [0x1041a08]
cmp eax, ebx
je 0x10332e2
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x1041a08], ebx
xor esi, esi
inc esi
push esi
push dword [0x1043624]
call fcn.0101c6d0
mov dword [0x1043624], ebx
call fcn.0103123a
cmp dword [ebp - 0x59c], ebx
jne 0x10336c7
mov eax, dword [0x1043788]
and eax, 0x20
push eax
push edi
lea eax, [ebp - 0x57c]
push eax
call fcn.0103c743
mov dword [0x10419f0], eax
cmp eax, ebx
jne 0x1033396
cmp dword [0x1041c94], ebx
je 0x10336c7
push dword [ebp - 0x598]
lea eax, [ebp - 0x20c]
push edi
push eax
call fcn.0100e041
push 0x1005024
push edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0103210b
lea eax, [ebp - 0x57c]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.0100bdfd
test eax, eax
je 0x10336c7
mov eax, dword [0x1043788]
and eax, 0x20
push eax
push edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0103c743
mov dword [0x10419f0], eax
cmp eax, ebx
je 0x10336c7
push eax
push edi
push dword [ebp - 0x598]
call fcn.0100e041
mov ecx, dword [0x1041b20]
mov dword [ebp - 0x59c], esi
cmp ecx, ebx
je 0x1032d17
push 1
call fcn.010311c8
mov dword [0x1041b20], ebx
jmp 0x1032d17
push dword [ebp - 0x584]
call fcn.01007110
jmp 0x1032d04
push ebx
push 1
push dword [ebp - 0x588]
call fcn.0101c811
push 1
push dword [0x1043624]
call fcn.0101c6d0
push dword [ebp - 0x584]
mov dword [0x1043624], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x584]
push eax
call fcn.01012ee8
jmp 0x1032da3
cmp dword [ebp - 0x588], ebx
je 0x103342d
push ebx
push 1
push dword [ebp - 0x588]
call fcn.0101c811
push 1
push dword [ebp - 0x58c]
call fcn.0100cf53
mov eax, dword [0x1041a08]
cmp eax, ebx
je 0x1033450
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x1041a08], ebx
push 1
push dword [0x1043624]
call fcn.0101c6d0
mov dword [0x1043624], ebx
call fcn.0103123a
mov ecx, dword [0x1041b20]
cmp ecx, ebx
je 0x1033479
push 1
call fcn.010311c8
mov dword [0x1041b20], ebx
push 4
jmp 0x1032da5
push 1
push dword [ebp - 0x58c]
call fcn.0100cf53
cmp dword [0x1041b20], ebx
jne 0x10334c8
push 0x40
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x10334b0
mov ecx, eax
call fcn.0103859c
jmp 0x10334b2
xor eax, eax
push dword [0x1041768]
mov dword [0x1041b20], eax
push 0x1004f54
push eax
call fcn.01038639
cmp dword [0x1043794], ebx
je 0x1033615
push 2
push dword [0x1043624]
push 0x1004fb0
call fcn.0100d126
mov dword [ebp - 0x58c], eax
cmp eax, ebx
je 0x1033615
xor eax, eax
inc eax
cmp dword [0x1043794], eax
mov dword [ebp - 0x594], eax
jl 0x1033608
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push 0x104
lea eax, [ebp - 0x108]
push eax
push ebx
lea eax, [ebp - 0x594]
push eax
push dword [ebp - 0x58c]
call fcn.0100c58e
test eax, eax
jne 0x10335f0
push 0x3d
lea eax, [ebp - 0x108]
push eax
call fcn.0100bd56
mov esi, eax
cmp esi, ebx
je 0x10335f0
mov byte [esi], bl
push 1
inc esi
push esi
call fcn.010118a2
mov dword [ebp - 0x59c], eax
cmp eax, ebx
je 0x10335f0
push 0x100642c
push eax
call edi
mov ecx, dword [ebp - 0x594]
imul ecx, ecx, 0xc
push 0x1006440
push dword [ebp - 0x59c]
mov dword [ecx + 0x1041990], eax
call edi
mov ecx, dword [ebp - 0x594]
imul ecx, ecx, 0xc
mov dword [ecx + 0x104198c], eax
cmp eax, ebx
jne 0x10335d5
cmp dword [0x104388c], ebx
je 0x10335f0
push esi
push 0x90
call fcn.010281fa
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.01007bcb
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
call fcn.0102b50a
jmp 0x10335f0
lea eax, [ebp - 0x108]
push eax
call fcn.0103232b
mov ecx, dword [ebp - 0x594]
imul ecx, ecx, 0xc
mov dword [ecx + 0x1041988], eax
inc dword [ebp - 0x594]
mov eax, dword [ebp - 0x594]
cmp eax, dword [0x1043794]
jle 0x103350f
push 1
push dword [ebp - 0x58c]
call fcn.0100cf53
mov eax, dword [0x104376c]
cmp dword [eax + 0x24], ebx
je 0x103369e
lea esi, [eax + 0x1c]
mov eax, 0x10437d0
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push eax
movsd dword es:[edi], dword [esi]
call fcn.01020878
mov eax, dword [0x10438c0]
cmp eax, ebx
je 0x103369e
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
cmp dword [0x10437a0], ebx
jne 0x1033671
push eax
call esi
test eax, eax
je 0x1033671
push dword [0x10438c0]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
je 0x1033671
push 9
push dword [0x10438c0]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x10438c0]
call esi
push eax
push dword [0x10437dc]
push dword [0x10437d8]
push dword [0x10437d4]
push dword [0x10437d0]
push dword [0x10438c0]
call dword [sym.imp.USER32.dll_MoveWindow]
cmp dword [0x10419f0], ebx
jne 0x10336b6
push dword [ebp - 0x598]
call fcn.0103232b
mov dword [0x10419f0], eax
push dword [ebp - 0x5a8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 2
pop eax
jmp 0x10336d5
push dword [ebp - 0x5a8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0103d1ec
leave
ret 4