Function at 0x1001f32f
Capabilities:
Delete file

Disassembly:
mov eax, 0x10044ba0
call fcn.10033d28
sub esp, 0x88
mov eax, dword [0x1005392c]
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], eax
push edi
mov esi, ecx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov eax, dword [esi + 0x150]
mov edi, dword [eax]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], edi
jmp 0x1001f410
lea eax, [edi + 0xc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10001bd5
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 1
jae 0x1001f38f
lea eax, [ebp - 0x28]
push ebx
push eax
call fcn.10035388
cmp eax, 0xffffffff
pop ecx
pop ecx
jne 0x1001f3a2
mov dword [edi + 0x28], ebx
jmp 0x1001f3ee
push dword [ebp - 0x70]
lea eax, [ebp - 0x2c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x90], esp
push eax
call fcn.10001bd5
lea eax, [ebp - 0x4c]
push eax
mov ecx, esi
call fcn.1001e47b
cmp dword [ebp - 0x38], ebx
mov byte [ebp - 4], 2
je 0x1001f3e3
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x8c]
mov dword [edi + 0x28], 1
call fcn.1000340e
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.1000151f
inc dword [ebp - 0x70]
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.1000151f
lea ecx, [ebp - 0x6c]
call fcn.100175a4
mov eax, dword [esi + 0x150]
mov edi, dword [ebp - 0x6c]
cmp edi, eax
jne 0x1001f373
lea ecx, [ebp - 0x7c]
call fcn.1001765a
mov edi, dword [ebp - 0x88]
mov byte [ebp - 4], 3
jmp 0x1001f499
push edi
lea ecx, [ebp - 0x4c]
call fcn.10001bd5
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 4
call fcn.1001dcf8
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x78]
je 0x1001f456
inc dword [eax + 0x28]
jmp 0x1001f487
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
call fcn.10001bd5
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 5
call fcn.10017dd5
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.1000151f
push ebx
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.1000151f
add edi, 0x1c
cmp edi, dword [ebp - 0x84]
jne 0x1001f42c
push 0x100464df
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x6c], ebx
call fcn.10001cde
mov eax, dword [ebp - 0x78]
mov edi, dword [eax]
cmp edi, eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x70], edi
je 0x1001f4ee
mov eax, dword [ebp - 0x6c]
cmp dword [edi + 0x28], eax
jle 0x1001f4de
push 0xffffffffffffffff
lea eax, [edi + 0xc]
push ebx
push eax
lea ecx, [ebp - 0x68]
call fcn.10001a1c
mov eax, dword [edi + 0x28]
mov dword [ebp - 0x6c], eax
lea ecx, [ebp - 0x70]
call fcn.100175a4
mov edi, dword [ebp - 0x70]
cmp edi, dword [ebp - 0x78]
jne 0x1001f4c1
cmp dword [ebp - 0x74], 1
jne 0x1001f510
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x68]
lea edi, [esi + 0xec]
push eax
mov ecx, edi
call fcn.10001a1c
mov dword [esi + 0x148], ebx
jmp 0x1001f57f
cmp dword [ebp - 0x74], ebx
jne 0x1001f561
lea ecx, [ebp - 0x6c]
call fcn.10021a5e
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 7
call fcn.10023d47
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0xec]
push eax
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.10001a1c
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.1000151f
lea ecx, [ebp - 0x6c]
mov dword [esi + 0x148], ebx
mov byte [ebp - 4], 6
call fcn.10021a67
jmp 0x1001f57f
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x68]
lea edi, [esi + 0xec]
push eax
mov ecx, edi
call fcn.10001a1c
mov dword [esi + 0x148], 1
cmp dword [esi + 0x100], ebx
jne 0x1001f61f
lea ecx, [ebp - 0x70]
call fcn.10021a5e
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 9
call fcn.10023d47
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.10001a1c
push ebx
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.1000151f
mov eax, dword [esi + 0x150]
mov dword [esi + 0x148], ebx
mov ecx, dword [eax]
mov dword [ebp - 0x6c], ecx
jmp 0x1001f60f
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10001bd5
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x1001f5ec
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.1000151f
lea ecx, [ebp - 0x6c]
call fcn.100175a4
mov eax, dword [esi + 0x150]
mov ecx, dword [ebp - 0x6c]
cmp ecx, eax
jne 0x1001f5d4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 6
call fcn.10021a67
push ebx
push 1
lea ecx, [ebp - 0x68]
call fcn.1000151f
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.10017daa
lea ecx, [ebp - 0x8c]
call fcn.10002a7d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.100341e0
pop edi
pop esi
pop ebx
leave
ret