Function at 0x10069c2
Capabilities:
Delete file
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa24
mov eax, dword [0x100d608]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x9e8]
push eax
push 0x1001898
push 4
xor ebx, ebx
push ebx
mov esi, ecx
push 0x1001ae4
mov dword [ebp - 0x9e4], esi
mov dword [ebp - 0x9e8], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
mov dword [ebp - 0x9d0], eax
jge 0x1006a92
mov eax, 0x80070422
cmp dword [ebp - 0x9d0], eax
jne 0x1007202
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.0100a889
push dword [0x100d908]
mov edi, dword [eax + 0x104]
push 0x79
lea ecx, [ebp - 0x7ac]
call fcn.01006328
push ebx
push 0xffff
push 0x20
push ebx
push edi
push dword [eax + 0x104]
push dword [0x100d908]
push dword [esi + 0x45c]
call dword [fcn.01001cfc]
mov esi, 0x10017c8
lea ecx, [ebp - 0x7ac]
mov dword [ebp - 0x7ac], esi
call fcn.01004813
mov dword [ebp - 0x118], esi
lea ecx, [ebp - 0x118]
jmp 0x10071fd
push ebx
push dword [ebp - 0x9e8]
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
lea eax, [ebp - 0x69c]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
cmp eax, ebx
mov dword [ebp - 0x9d0], eax
jl 0x1006ad2
push 0x32
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x69c]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [ebp - 0x9d0], eax
xor eax, eax
push 0x206
mov word [ebp - 0x68c], ax
lea eax, [ebp - 0x68a]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x9cc]
call fcn.01005d94
lea ecx, [ebp - 0x8bc]
call fcn.01005e26
push dword [0x100d908]
lea ecx, [ebp - 0x8bc]
push 0x119
call fcn.01005cec
cmp dword [ebp - 0x9d0], ebx
jl 0x1007183
push dword [ebp - 0x8c8]
lea eax, [ebp - 0x68c]
push eax
mov ecx, esi
call fcn.010036cc
cmp eax, ebx
mov dword [ebp - 0x9d0], eax
jl 0x1007183
lea eax, [ebp - 0x68c]
push eax
mov dword [ebp - 0x9d8], ebx
mov dword [ebp - 0x9e0], ebx
mov dword [ebp - 0x9f0], ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x118
push dword [0x100d908]
lea ecx, [ebp - 0x9fc]
mov dword [ebp - 0xa04], eax
mov dword [ebp - 0x9fc], ebx
call fcn.010038fc
lea ecx, [esi + 0x230]
mov dword [ebp - 0x9f8], ebx
call fcn.010046ed
test eax, eax
jbe 0x1006bb8
push dword [esi + 0x334]
lea ecx, [ebp - 0x9f8]
call fcn.010037d8
test byte [0x100d970], 1
mov dword [ebp - 0x9ec], ebx
jne 0x1006c0c
mov esi, 0x1001a34
mov edi, 0x100d930
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x1001a44
mov edi, 0x100d940
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x1001a54
mov edi, 0x100d950
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [0x100d970], 1
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x1001a64
mov edi, 0x100d960
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x9e4]
mov eax, 0x100d930
mov dword [ebp - 0x9d4], ebx
jmp 0x1006c1f
mov esi, dword [ebp - 0x9e4]
push 4
pop ecx
mov edi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x1006cd2
add dword [ebp - 0x9d4], 0x10
add eax, 0x10
cmp dword [ebp - 0x9d4], 0x40
jb 0x1006c19
mov eax, dword [ebp - 0x9e8]
mov ecx, dword [eax]
lea edx, [ebp - 0x9f0]
push edx
lea edx, [ebp - 0x9e0]
push edx
lea edx, [ebp - 0x9d8]
push edx
push dword [ebp - 0x9fc]
mov edx, dword [ebp - 0x9e4]
push dword [ebp - 0xa04]
push dword [edx + 0x45c]
push dword [ebp - 0x9f8]
push ebx
push eax
call dword [ecx + 0x28]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x9d0], eax
cmp eax, ebx
jne 0x1007090
cmp dword [ebp - 0x9d8], ebx
jle 0x100710c
xor edi, edi
cmp dword [ebp - 0x9d8], ebx
jle 0x1006d33
mov eax, dword [ebp - 0x9e0]
push 0x101
push dword [eax + edi*4]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x1006d19
inc edi
cmp edi, dword [ebp - 0x9d8]
jl 0x1006caf
jmp 0x1006d33
mov eax, dword [ebp - 0x9e4]
push dword [eax + 0x45c]
lea eax, [ebp - 0x9e0]
push eax
lea eax, [ebp - 0x9d8]
push eax
lea eax, [ebp - 0x9f0]
push eax
push dword [ebp - 0x9fc]
mov dword [ebp - 0x9ec], 1
push dword [ebp - 0xa04]
push dword [ebp - 0x9f8]
call sub.ScanSetting.DLL_GetDefaultProfileScan
jmp 0x1006c81
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1006d2d
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x9d0], eax
push 0x1001894
lea ecx, [ebp - 0x7ac]
call fcn.01005d94
cmp dword [ebp - 0x9d0], ebx
jl 0x1006ddf
mov eax, dword [ebp - 0x9f0]
cmp eax, ebx
je 0x1006ddf
lea edx, [ebp - 0x9d4]
push edx
mov dword [ebp - 0x9d4], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c]
test eax, eax
jl 0x1006dcf
push 7
lea ecx, [ebp - 0x120]
call fcn.0100a9f1
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x120]
push eax
push dword [ebp - 0x9d4]
call fcn.0100ab06
neg al
sbb al, al
inc al
lea ecx, [ebp - 0x120]
mov byte [ebp - 0x9d9], al
call fcn.0100a9e1
cmp byte [ebp - 0x9d9], bl
je 0x1006dcf
push dword [0x100d908]
lea ecx, [ebp - 0x7ac]
push 0x119
call fcn.01005cec
mov eax, dword [ebp - 0x9d4]
cmp eax, ebx
je 0x1006ddf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
push 0x206
mov word [ebp - 0x484], ax
lea eax, [ebp - 0x482]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x68c]
push eax
push 0x104
lea eax, [ebp - 0x484]
push eax
call fcn.010045e1
cmp eax, ebx
mov dword [ebp - 0x9d0], eax
jl 0x100704f
push 0x1001870
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x1006ef2
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0x484]
push eax
push dword [ebp - 0x6a8]
push 0x1001858
push 0x100182c
call edi
lea eax, [ebp - 0x484]
push eax
push 0x1001828
push 0x1001810
push 0x100182c
call edi
xor eax, eax
push 0x210
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x109
lea eax, [ebp - 0x218]
push eax
push dword [0x100d908]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
dec eax
cmp eax, 0x102
ja 0x1006efc
push 0x1001808
push 0x109
lea eax, [ebp - 0x218]
push eax
call fcn.0100461b
cmp eax, ebx
mov dword [ebp - 0x9d0], eax
jl 0x100704f
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x10017f0
push 0x100182c
call edi
jmp 0x1006efc
mov dword [ebp - 0x9d0], 0x80004005
cmp dword [ebp - 0x9d0], ebx
jl 0x100704f
lea eax, [ebp - 0x9d4]
push eax
push 0x10017e0
push 3
push ebx
push 0x1001c9c
mov dword [ebp - 0x9d4], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jl 0x1007033
mov eax, dword [ebp - 0x9d4]
lea edx, [ebp - 0xa00]
push edx
lea edx, [ebp - 0x68c]
push edx
mov dword [ebp - 0xa00], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x1007023
mov eax, dword [ebp - 0xa00]
lea edx, [ebp - 0x9f4]
push edx
mov dword [ebp - 0x9f4], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov edi, eax
cmp edi, ebx
jl 0x1007013
mov eax, dword [ebp - 0x9f4]
lea edx, [ebp - 0x9d0]
push edx
mov dword [ebp - 0x9d0], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov edi, eax
cmp edi, ebx
jl 0x1007013
cmp dword [ebp - 0x9ec], ebx
je 0x1006fb2
or dword [ebp - 0x9d0], 0x408
jmp 0x1006fbc
or dword [ebp - 0x9d0], 0x800
mov eax, dword [ebp - 0x9f4]
push dword [ebp - 0x9d0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov edi, eax
cmp edi, ebx
jl 0x1007013
push 0x65
push dword [0x100d908]
lea ecx, [ebp - 0x9d0]
mov dword [ebp - 0x9d0], ebx
call fcn.010038fc
mov eax, dword [ebp - 0x9d4]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x9d0]
push ebx
push 1
push dword [ebp - 0xa00]
push eax
call dword [ecx + 0x10]
push dword [ebp - 0x9d0]
mov edi, eax
call esi
mov eax, dword [ebp - 0x9f4]
cmp eax, ebx
je 0x1007023
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa00]
cmp eax, ebx
je 0x1007033
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x9d4]
cmp eax, ebx
je 0x1007043
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, 0x8004a001
je 0x1006f08
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0x9ec], eax
lea eax, [ebp - 0x9ec]
push eax
push 1
call fcn.01003726
push dword [ebp - 0x9ec]
mov dword [ebp - 0x9d0], eax
call esi
mov dword [ebp - 0x7ac], 0x10017c8
jmp 0x1007101
cmp dword [ebp - 0x9d0], 0x80210015
jne 0x100710c
push dword [0x100d908]
lea ecx, [ebp - 0x7ac]
push 0x7a
call fcn.01006328
push dword [0x100d908]
mov edi, dword [eax + 0x104]
push 0x79
lea ecx, [ebp - 0x118]
call fcn.01006328
push ebx
push 0xfffe
push 0x20
push ebx
push edi
push dword [eax + 0x104]
push dword [0x100d908]
push ebx
call dword [fcn.01001cfc]
mov edi, 0x10017c8
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], edi
call fcn.01004813
mov dword [ebp - 0x7ac], edi
lea ecx, [ebp - 0x7ac]
call fcn.01004813
cmp dword [ebp - 0x9e0], ebx
je 0x100715b
push dword [ebp - 0x9e0]
mov ecx, dword [ebp - 0x9e4]
push dword [ebp - 0x9d8]
call fcn.01003726
xor edi, edi
cmp dword [ebp - 0x9d8], ebx
mov dword [ebp - 0x9d0], eax
jle 0x100714f
mov eax, dword [ebp - 0x9e0]
push dword [eax + edi*4]
call esi
inc edi
cmp edi, dword [ebp - 0x9d8]
jl 0x100713b
push dword [ebp - 0x9e0]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push dword [ebp - 0x9f8]
call esi
push dword [ebp - 0x9fc]
call esi
push dword [ebp - 0xa04]
call esi
mov eax, dword [ebp - 0x9f0]
cmp eax, ebx
je 0x1007183
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 6
xor eax, eax
pop ecx
lea edi, [ebp - 0xa20]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x68c]
mov dword [ebp - 0xa1c], eax
mov eax, 0x414
mov word [ebp - 0xa14], ax
lea eax, [ebp - 0xa24]
push eax
mov dword [ebp - 0xa24], ebx
mov dword [ebp - 0xa20], 3
mov dword [ebp - 0xa18], ebx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
je 0x10071db
mov dword [ebp - 0x9d0], 0x8000ffff
mov esi, 0x10017c8
lea ecx, [ebp - 0x8bc]
mov dword [ebp - 0x8bc], esi
call fcn.01004813
mov dword [ebp - 0x9cc], esi
lea ecx, [ebp - 0x9cc]
call fcn.01004813
mov eax, dword [ebp - 0x9e8]
cmp eax, ebx
je 0x1007212
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x9d0]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0100a24f
leave
ret