Function at 0x10032b00
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017d6cd
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x101e6040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x90], eax
xor eax, eax
cmp dword [esi + 0x868], 0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x98], edx
mov eax, dword [ecx + eax*4 - 4]
mov dword [ebp - 0x94], eax
je 0x10032b69
xor eax, eax
jmp 0x1003326c
xor edi, edi
mov dword [ebp - 0x88], edi
mov eax, dword [0x101c5980]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
test edi, edi
js 0x10032bae
cmp edi, dword [esi + 0x24]
jge 0x10032bae
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax + edi*4]
jmp 0x10032bb0
xor ecx, ecx
mov eax, dword [ebp + 8]
mov dword [esi + 0x1b48], ecx
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
cmp eax, edi
jne 0x10032bc9
add dword [ebp + 8], 4
mov ecx, dword [ecx]
mov eax, dword [0x101c5980]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
test edx, edx
je 0x10032c2b
cmp word [edx], 0
je 0x10032c2b
test ecx, ecx
je 0x10032c2b
mov edi, edx
lea edx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x10032bf7
sub edi, edx
sar edi, 1
je 0x10032c25
push edi
push dword [ebp - 0x98]
push ecx
call fcn.1015c248
mov ecx, dword [ebp - 0x20]
add esp, 0xc
test eax, eax
jne 0x10032c25
lea ecx, [ecx + edi*2]
mov dword [ebp - 0x20], ecx
mov edi, dword [ebp - 0x88]
mov eax, dword [ebp - 0x90]
test eax, eax
je 0x10032c7b
cmp word [eax], 0
je 0x10032c7b
push eax
lea ecx, [ebp - 0x1c]
call fcn.1000bc60
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x10032c5f
mov eax, dword [ebp - 0x1c]
movzx ecx, word [eax + ecx*2 - 2]
mov eax, ecx
cmp ecx, 0x5c
je 0x10032c69
cmp eax, 0x2f
je 0x10032c69
push 0x5c
lea ecx, [ebp - 0x1c]
call fcn.1000bbf0
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x10032c88
push eax
lea ecx, [ebp - 0x1c]
call fcn.1000bb40
jmp 0x10032c88
test ecx, ecx
je 0x10032c88
push ecx
lea ecx, [ebp - 0x1c]
call fcn.1000bc60
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push edi
push dword [esi + 0x1b48]
call fcn.10057630
mov eax, dword [esi + 0x1b48]
mov ecx, dword [esi + 0x868]
mov edi, dword [eax + 0x24]
shr edi, 4
and edi, 1
mov dword [ebp - 0x24], edi
test ecx, ecx
je 0x10032cc6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi + 0x868], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x88]
jne 0x10032e30
xor eax, eax
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
movups xmmword [ebp - 0x60], xmm0
mov word [ebp - 0x50], 0x100
mov byte [ebp - 0x4e], al
movlpd qword [ebp - 0x48], xmm0
mov dword [ebp - 0x40], 0xff
mov byte [ebp - 0x3c], al
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1c]
mov ecx, edx
mov eax, dword [esi + 0x1b48]
mov dword [ebp - 0x80], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x8c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10032d45
sub ecx, dword [ebp - 0x8c]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x78]
call fcn.10008d20
mov eax, dword [esi + 0x72c]
mov dword [ebp - 0x60], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x54], eax
mov eax, dword [esi + 0x744]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x5c], edi
push eax
push dword [esi + 0x730]
mov eax, dword [esi + 0x728]
call eax
add esp, 0xc
mov dword [esi + 0x868], eax
test eax, eax
jne 0x10032e22
mov eax, dword [esi + 0x1b48]
mov edi, dword [esi + 8]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x8c], eax
mov dword [esi + 0x74c], edx
test edi, edi
je 0x10032de6
cmp edx, 0xa0000059
je 0x10032de6
mov ecx, dword [edi]
lea eax, [esi + 0x754]
push eax
push 0
push dword [ebp - 0x8c]
push edx
push edi
call dword [ecx + 0x14]
mov edx, dword [ebp - 0x20]
cmp byte [esi + 0x734], 0
je 0x10032df9
mov dword [esi + 0x748], 1
mov eax, dword [ebp - 0x94]
xor edi, edi
mov dword [ebp - 0x84], edi
cmp dword [ebp - 0x88], eax
je 0x1003319f
cmp edx, 0xa0000017
je 0x1003319f
mov edi, dword [ebp - 0x24]
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0
call fcn.100031a0
jmp 0x10032e3a
mov dword [esi + 0x868], 0
test edi, edi
jne 0x10033146
mov ecx, dword [esi + 0x868]
test ecx, ecx
je 0x10032e67
mov eax, dword [esi + 0x1b48]
mov edx, dword [ecx]
push dword [eax + 0x1c]
push dword [eax + 0x18]
mov eax, dword [edx + 0x28]
call eax
test eax, eax
je 0x100331d6
mov ecx, dword [esi + 0x1b48]
mov eax, dword [ecx + 0x2c]
cmp eax, 0x197
jg 0x10032e90
je 0x10032e8b
test eax, eax
je 0x10032e97
cmp eax, 0x195
jne 0x10032e97
mov edi, 0x32
jmp 0x10032ea0
or edi, 0xffffffff
jmp 0x10032ea0
cmp eax, 0x198
je 0x10032e9b
xor edi, edi
jmp 0x10032ea0
mov edi, 0x46
push ecx
mov ecx, esi
call fcn.10033300
mov ecx, dword [esi + 0x1b48]
mov eax, dword [esi + 0x1b4c]
mov dword [ebp - 0x24], eax
cmp dword [ecx + 0x2c], 0x197
jne 0x10032f32
mov eax, dword [esi + 0x868]
test eax, eax
je 0x1003313f
push dword [ebp - 0x90]
push eax
push ecx
mov ecx, esi
call fcn.10033d90
mov edi, eax
mov dword [ebp - 0x84], edi
test edi, edi
jne 0x1003313f
mov ecx, dword [esi + 0x868]
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
or eax, edx
jne 0x100332c6
mov ecx, dword [esi + 0x868]
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
call eax
mov dword [ebp - 0x28], edi
test eax, eax
je 0x10033289
push eax
call fcn.101565d5
add esp, 4
mov edi, eax
jmp 0x1003328b
cmp dword [eax + 0x8c], 0
jne 0x1003313f
lea ecx, [esi + 0x838]
push ecx
push dword [eax + 0x48]
call fcn.100bac40
push ecx
push dword [esi + 0x1b48]
mov ecx, esi
mov dword [esi + 0x870], 0
mov dword [esi + 0x874], 0
call fcn.10033390
test eax, eax
je 0x10033215
mov eax, dword [esi + 0x1b48]
cmp dword [eax + 0x2c], 0
jne 0x10032fa1
lea ecx, [esi + 0x838]
push ecx
push dword [esi + 0x868]
mov ecx, esi
push eax
call fcn.10032640
mov dword [ebp - 0x84], eax
jmp 0x1003300c
push 1
push dword [eax + 0x7c]
mov ecx, esi
push dword [eax + 0x78]
call fcn.100343f0
mov dword [ebp - 0x84], eax
test eax, eax
je 0x10033215
mov eax, dword [esi + 0x1b48]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x1c]
mov eax, dword [esi + 0x878]
mov dword [eax + 0x2e40], ecx
mov ecx, esi
mov dword [eax + 0x2e44], edx
mov byte [eax + 0x2e58], 0
mov eax, dword [esi + 0x1b48]
cmp dword [eax + 0x68], 0
setne al
movzx eax, al
push eax
push edi
call fcn.100342e0
mov edi, eax
mov dword [ebp - 0x84], edi
test edi, edi
je 0x100332c6
mov edi, dword [esi + 0x868]
test edi, edi
je 0x100330c0
mov eax, dword [esi + 0x1b48]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x100330c0
mov ecx, dword [esi + 0x730]
push edi
push eax
call fcn.100551d0
mov eax, dword [edi]
add esp, 8
mov ecx, edi
mov eax, dword [eax + 0x24]
push 0
call eax
test eax, eax
jne 0x100330c0
cmp dword [esi + 0x74c], eax
jne 0x1003313f
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x44]
call eax
mov edx, dword [esi + 8]
cmp eax, 0x70
jne 0x10033088
mov dword [esi + 0x74c], 0xa0000054
test edx, edx
je 0x100330ad
lea eax, [esi + 0x754]
push eax
push 0
push dword [ebp - 0x20]
push 0xa0000054
jmp 0x100330a7
mov dword [esi + 0x74c], 0xa0000030
test edx, edx
je 0x100330ad
lea eax, [esi + 0x754]
push eax
push 0
push dword [ebp - 0x20]
push 0xa0000030
mov ecx, dword [edx]
push edx
call dword [ecx + 0x14]
cmp byte [esi + 0x734], 0
je 0x100330c0
mov dword [esi + 0x748], 1
cmp dword [esi + 0x74c], 0
jne 0x1003313f
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x18], 0
je 0x100330d7
lea ecx, [eax + 0x6c]
jmp 0x100330d9
xor ecx, ecx
push ecx
add eax, 0x48
lea ecx, [esi + 0x838]
push eax
call fcn.100bb650
test al, al
je 0x100330f9
mov dword [ebp - 0x84], 1
jmp 0x1003313f
mov edx, dword [esi + 8]
mov dword [esi + 0x74c], 0xa0000018
test edx, edx
je 0x10033124
mov ecx, dword [edx]
lea eax, [esi + 0x754]
push eax
push 0
push dword [esi + 0x1b48]
push 0xa0000018
push edx
call dword [ecx + 0x14]
cmp byte [esi + 0x734], 0
je 0x10033137
mov dword [esi + 0x748], 1
xor eax, eax
mov dword [ebp - 0x84], eax
mov ecx, esi
call fcn.10057910
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x10033165
cmp eax, dword [0x101c5980]
je 0x10033165
push eax
call fcn.10154f5a
add esp, 4
mov edi, dword [ebp - 0x88]
mov eax, dword [0x101c5980]
inc edi
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x88], edi
cmp edi, dword [ebp - 0x94]
ja 0x1003324a
mov edx, dword [ebp - 0x98]
jmp 0x10032b71
lea ecx, [ebp - 0x78]
call fcn.100031a0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x100331c6
cmp eax, dword [0x101c5980]
je 0x100331c6
push eax
call fcn.10154f5a
add esp, 4
mov eax, dword [0x101c5980]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
jmp 0x10033250
mov edx, dword [esi + 8]
mov edi, dword [esi + 0x1b48]
mov dword [esi + 0x74c], 0xa0000042
test edx, edx
je 0x10033202
mov ecx, dword [edx]
lea eax, [esi + 0x754]
push eax
push 0
push edi
push 0xa0000042
push edx
call dword [ecx + 0x14]
cmp byte [esi + 0x734], 0
je 0x10033215
mov dword [esi + 0x748], 1
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x10033234
cmp eax, dword [0x101c5980]
je 0x10033234
push eax
call fcn.10154f5a
add esp, 4
mov eax, dword [0x101c5980]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], eax
mov edi, dword [ebp - 0x84]
mov ecx, dword [esi + 0x868]
test ecx, ecx
je 0x1003326a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi + 0x868], 0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x14
xor edi, edi
mov dword [ebp - 0x24], edi
mov byte [ebp - 4], 2
mov ecx, dword [esi + 0x868]
test ecx, ecx
je 0x100332ac
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi + 0x868], 0
test edi, edi
je 0x100332c0
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
call fcn.10154f5a
add esp, 4
mov edi, dword [ebp - 0x84]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x100332e5
cmp eax, dword [0x101c5980]
je 0x100332e5
push eax
call fcn.10154f5a
add esp, 4
mov eax, dword [0x101c5980]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
jmp 0x10033250