Function at 0x101a45f7
Capabilities:
Delete file

Disassembly:
sub esp, 0x230
mov eax, dword [0x1023904c]
xor eax, esp
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x23c]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x244]
push edi
mov dword [esp + 0x2c], eax
test eax, eax
je 0x101a4628
and dword [eax], 0
push 0
mov ecx, esi
call fcn.101ae70c
and dword [esi + 0xa4], 0xffffff7f
mov esi, dword [0x10244b00]
mov ebx, dword [esi + 0x14]
mov edi, eax
test edi, edi
js 0x101a4965
cmp dword [esp + 0x244], 0
jne 0x101a4965
mov eax, dword [esi + 0xc2c]
push 0x23c
push 0x102448c0
push dword [0x10244afc]
mov dword [0x102448d4], eax
mov eax, dword [esi]
push esi
call dword [eax + 8]
test eax, eax
jne 0x101a468b
mov edi, 0x8003001d
jmp 0x101a4791
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x13c]
push eax
mov esi, 0x104
push esi
push dword [ebx + 0x18]
call dword [sym.imp.kernel32.dll_GetFullPathNameA]
test eax, eax
jne 0x101a46d2
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, dword [0x10244b00]
mov edi, eax
test edi, edi
jle 0x101a4965
and edi, 0xffff
or edi, 0x80070000
jmp 0x101a4965
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x101a46e4
mov edi, 0x800a0034
jmp 0x101a4791
mov byte [eax], 0
push esi
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x140]
push eax
push dword [ebx + 0x18]
call fcn.101b2c88
mov esi, dword [0x10244b00]
test eax, eax
jne 0x101a4711
mov edi, 0x80028ca3
jmp 0x101a4965
cmp dword [esi + 0xc], 0
jne 0x101a4729
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.1015692e
mov esi, dword [0x10244b00]
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x101a4958
cmp dword [ebx + 0x28], edi
je 0x101a4758
lea eax, [esp + 0x30]
push eax
push dword [ebx + 0x28]
mov ecx, esi
call fcn.101cf447
mov esi, dword [0x10244b00]
mov edi, eax
test edi, edi
jne 0x101a4958
mov edx, dword [esi + 4]
mov edi, 0x408
test edx, edx
je 0x101a4780
mov esi, dword [esi + 8]
mov ecx, dword [esi]
lea ebp, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101a476c
sub ecx, ebp
add edi, 3
add edi, ecx
add esi, 4
dec edx
jne 0x101a4767
push edi
call fcn.1000ac41
mov esi, eax
test esi, esi
jne 0x101a479c
mov edi, 0x8007000e
mov esi, dword [0x10244b00]
jmp 0x101a4965
push 0x101a49e0
push edi
push esi
call dword [sym.imp.msvcr100.dll__mbscpy_s]
mov eax, dword [0x10244b00]
xor ebp, ebp
add esp, 0xc
cmp dword [eax + 4], ebp
jbe 0x101a47f3
push 0x1001e7f0
push edi
push esi
call dword [sym.imp.msvcr100.dll__mbscat_s]
mov eax, dword [0x10244b00]
mov eax, dword [eax + 8]
push dword [eax + ebp*4]
push edi
push esi
call dword [sym.imp.msvcr100.dll__mbscat_s]
push 0x101a49e8
push edi
push esi
call dword [sym.imp.msvcr100.dll__mbscat_s]
mov eax, dword [0x10244b00]
add esp, 0x24
inc ebp
cmp ebp, dword [eax + 4]
jb 0x101a47b8
mov eax, dword [ebx + 4]
test al, 1
je 0x101a4801
mov ebp, dword [ebx + 0x2c]
test ebp, ebp
jne 0x101a4803
xor ebp, ebp
mov edx, dword [ebx + 0x24]
mov ecx, 0x1000adc8
mov dword [esp + 0x24], edx
mov dword [esp + 0x1c], ecx
test edx, edx
jne 0x101a481b
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], 0x101a49ec
test al, 4
jne 0x101a482b
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], 0x101a4a04
test al, 2
jne 0x101a483b
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0x101a4a0c
test al, 8
jne 0x101a484f
mov dword [esp + 0x18], 0x101a4a14
test ebp, ebp
je 0x101a4857
mov dword [esp + 0x1c], ebp
mov edx, esi
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x101a485c
sub edx, ecx
mov ecx, esi
lea eax, [ecx + 1]
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101a486e
push dword [esp + 0x24]
movzx eax, word [ebx + 0xa]
push dword [esp + 0x24]
sub ecx, dword [esp + 0x18]
push dword [esp + 0x1c]
mov dword [esp + 0x1c], ecx
push eax
movzx eax, word [ebx + 8]
push eax
movzx eax, word [ebx + 0xe]
push eax
movzx eax, word [ebx + 0xc]
push eax
push dword [esp + 0x34]
xor ecx, ecx
push dword [ebx + 0x10]
test ebp, ebp
push dword [ebx + 0x18]
setne cl
push 0x101a4a1d
lea eax, [esp + 0x60]
sub edi, edx
lea ecx, [ecx*2 + 0x20]
push ecx
push dword [esp + 0x4c]
push ecx
push eax
mov eax, dword [esp + 0x4c]
push 0x101a4a28
add eax, esi
push edi
push eax
call dword [sym.imp.msvcr100.dll_sprintf_s]
mov ebp, dword [esp + 0x74]
add esp, 0x48
push ebp
push 0
push esi
push dword [ebx + 0x1c]
push 0x101a4abc
call fcn.101d1281
push esi
mov edi, eax
call fcn.1000ac28
test edi, edi
js 0x101a4791
test ebp, ebp
je 0x101a491e
cmp dword [ebp], 0
je 0x101a491e
mov eax, dword [0x10239088]
push dword [ebp]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
and dword [ebp], 0
push 0x101a4ac8
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x101a4791
push 0x101a4ad8
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x101a494c
push 0
push 0
push dword [ebx + 0x18]
call eax
push esi
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x101a4791
mov eax, edi
or eax, 0x800a0000
neg edi
sbb edi, edi
and edi, eax
test byte [ebx + 4], 0x10
jne 0x101a498b
xor ebp, ebp
cmp dword [esi + 4], ebp
jbe 0x101a498b
mov eax, dword [esi + 8]
push dword [eax + ebp*4]
call dword [sym.imp.msvcr100.dll_remove]
mov esi, dword [0x10244b00]
inc ebp
pop ecx
cmp ebp, dword [esi + 4]
jb 0x101a4972
test esi, esi
je 0x101a499c
mov ecx, esi
call fcn.101cf610
push esi
call fcn.1000ac28
and dword [0x10244b00], 0
cmp dword [esp + 0x244], 0
jne 0x101a49be
test byte [ebx + 4], 0x10
jne 0x101a49be
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.kernel32.dll_DeleteFileA]
push edi
call fcn.1000b028
mov ecx, dword [esp + 0x23c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10001e57
add esp, 0x230
ret 0xc