Function at 0x10084230
Capabilities:
Delete file
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x374
mov eax, dword [0x10438fc0]
xor eax, esp
mov dword [esp + 0x370], eax
push ebx
mov ebx, ecx
cmp byte [ebx + 0x55], 0
push esi
push edi
mov byte [ebx + 0x54], 0
je 0x10084833
mov ecx, dword [ebx + 0xc]
mov byte [ebx + 0x55], 0
mov eax, dword [ecx]
mov edx, dword [eax + 0x78]
call edx
test eax, eax
jle 0x10084790
cmp byte [ebx + 0x4c], 0
je 0x10084499
fld qword [0x10448f30]
mov ecx, dword [ebx + 0xc]
fstp qword [esp + 0x90]
lea edx, [esp + 0x90]
fldz
push edx
fst qword [esp + 0x9c]
fst qword [esp + 0xa4]
fstp qword [esp + 0xac]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc0]
call eax
fld qword [esp + 0x90]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.MSVCR100.dll__isnan]
add esp, 8
test eax, eax
je 0x100842d4
fldz
jmp 0x100842f2
fld qword [esp + 0xa8]
fsub qword [esp + 0x98]
fld qword [esp + 0xa0]
fsub qword [esp + 0x90]
fmulp st(1)
mov ecx, dword [ebx + 0xc]
fstp qword [esp + 0x60]
mov edx, dword [ecx]
mov eax, dword [edx + 0x78]
call eax
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
fdivr qword [esp + 0x60]
call sub.MSVCR100.dll__CIsqrt
fstp qword [ebx + 0x260]
fldz
mov ecx, ebx
fst qword [ebx + 0x270]
fstp qword [ebx + 0x268]
call fcn.10084cd0
mov eax, ebx
call fcn.10084d00
test al, al
jne 0x10084351
mov eax, 0x8004120f
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.10148524
mov esp, ebp
pop ebp
ret
mov esi, dword [ebx + 0x58]
xor edi, edi
push edi
push edi
xor ecx, ecx
call fcn.10023560
nop
mov esi, dword [ebx + 0x58]
mov dword [esp + 0x44], edi
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
je 0x10084481
push edi
lea ecx, [esp + 0x48]
push ecx
push 0x10
lea edx, [esp + 0xc4]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1008448d
mov dword [esi + 8], edi
mov esi, dword [ebx + 0x58]
mov dword [esp + 0x44], edi
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
je 0x10084481
push edi
lea ecx, [esp + 0x48]
push ecx
push 4
lea edx, [esp + 0x64]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1008448d
mov dword [esi + 8], edi
cmp dword [esp + 0x44], edi
jbe 0x10084792
fld qword [esp + 0xb8]
lea esi, [ebx + 0x68]
fsub qword [ebx + 0x18]
mov dword [esp + 0xcc], edi
fnstcw word [esp + 0x3c]
mov dword [esp + 0xc8], 5
fdiv qword [ebx + 0x260]
movzx eax, word [esp + 0x3c]
or eax, 0xc00
mov dword [esp + 0x40], eax
fldcw word [esp + 0x40]
fistp qword [esp + 0x60]
mov ecx, dword [esp + 0x60]
mov edx, ecx
shr ecx, 1
shl edx, 0x1f
fldcw word [esp + 0x3c]
and ecx, 0x3fffffff
mov dword [esp + 0x21c], ecx
lea ecx, [esp + 0xc8]
fld qword [esp + 0xc0]
fsub qword [ebx + 0x20]
fnstcw word [esp + 0x3c]
fdiv qword [ebx + 0x260]
movzx eax, word [esp + 0x3c]
or eax, 0xc00
mov dword [esp + 0x40], eax
fldcw word [esp + 0x40]
fistp qword [esp + 0x60]
mov eax, dword [esp + 0x60]
and eax, 0x7fffffff
or eax, edx
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x58]
fldcw word [esp + 0x3c]
call fcn.100abb20
jmp 0x10084360
mov dword [esi + 8], 6
jmp 0x10084792
mov dword [esi + 8], 0xfffffffe
jmp 0x10084792
lea edx, [ebx + 0x270]
lea esi, [ebx + 0x268]
lea eax, [ebx + 0x50]
lea ecx, [ebx + 0x260]
call fcn.100b0be0
test eax, eax
js 0x1008484d
fld qword [ebx + 0x260]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x100847ec
mov ecx, ebx
call fcn.10084cd0
mov eax, ebx
call fcn.10084d00
test al, al
je 0x10084337
mov esi, dword [ebx + 0x58]
push 0
push 0
xor ecx, ecx
call fcn.10023560
fld qword [0x10448f30]
mov esi, dword [ebx + 0x58]
fstp qword [esp + 0x70]
fldz
push 0x20
fst qword [esp + 0x7c]
lea ecx, [esp + 0x70]
fst qword [esp + 0x84]
lea edx, [esp + 0x74]
fstp qword [esp + 0x8c]
call fcn.100235b0
test al, al
je 0x10084790
lea esp, [esp]
mov esi, dword [ebx + 0x58]
push 4
lea ecx, [esp + 0x70]
lea edx, [esp + 0x64]
call fcn.100235b0
test al, al
je 0x10084790
cmp dword [esp + 0x6c], 0
jbe 0x10084790
lea edi, [ebx + 0x28]
lea esi, [esp + 0x70]
call fcn.10019b60
mov dword [esp + 0x5c], 0
lea edi, [ebx + 0x260]
fld qword [edi]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x10084675
lea esi, [esp + 0x70]
call fcn.100195e0
fsub qword [ebx + 0x18]
fnstcw word [esp + 0x3c]
fdiv qword [edi]
movzx eax, word [esp + 0x3c]
or eax, 0xc00
mov dword [esp + 0x40], eax
fldcw word [esp + 0x40]
fistp qword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x40], eax
fldcw word [esp + 0x3c]
call fcn.10019640
fsub qword [ebx + 0x20]
fnstcw word [esp + 0x3c]
fdiv qword [edi]
movzx eax, word [esp + 0x3c]
or eax, 0xc00
mov dword [esp + 0x54], eax
fldcw word [esp + 0x54]
fistp qword [esp + 0x48]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x54], ecx
fldcw word [esp + 0x3c]
call fcn.10019610
fsub qword [ebx + 0x18]
fnstcw word [esp + 0x3c]
fdiv qword [edi]
movzx eax, word [esp + 0x3c]
or eax, 0xc00
mov dword [esp + 0x48], eax
fldcw word [esp + 0x48]
fistp qword [esp + 0x48]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x58], edx
fldcw word [esp + 0x3c]
call fcn.10019670
fsub qword [ebx + 0x20]
mov esi, dword [esp + 0x58]
fnstcw word [esp + 0x3c]
fdiv qword [edi]
movzx eax, word [esp + 0x3c]
or eax, 0xc00
mov dword [esp + 0x48], eax
mov ecx, esi
sub ecx, dword [esp + 0x40]
inc ecx
fldcw word [esp + 0x48]
fistp qword [esp + 0x48]
mov edx, dword [esp + 0x48]
mov eax, edx
sub eax, dword [esp + 0x54]
fldcw word [esp + 0x3c]
mov dword [esp + 0x44], edx
inc eax
imul eax, ecx
cmp eax, dword [ebx + 0x48]
jbe 0x1008467d
mov eax, dword [esp + 0x5c]
inc eax
add edi, 8
mov dword [esp + 0x5c], eax
cmp eax, 3
jl 0x1008456f
jmp 0x1008467d
mov edx, dword [esp + 0x44]
mov esi, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
cmp ecx, 2
jg 0x10084698
fld qword [ebx + ecx*8 + 0x260]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x1008469d
dec ecx
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x40]
mov eax, edx
sub eax, dword [esp + 0x54]
mov edi, esi
sub edi, ecx
inc eax
inc edi
imul eax, edi
cmp eax, dword [ebx + 0x48]
ja 0x10084803
test esi, esi
js 0x10084803
test edx, edx
js 0x10084803
mov dword [esp + 0x3c], ecx
cmp ecx, esi
ja 0x10084776
mov edi, dword [esp + 0x54]
cmp edi, edx
ja 0x10084767
mov eax, dword [esp + 0x5c]
mov edx, ecx
shr ecx, 1
shl edx, 0x1f
and ecx, 0x3fffffff
shl eax, 0x1e
or ecx, eax
mov dword [esp + 0x48], edx
mov dword [esp + 0xb4], ecx
lea esi, [ebx + 0x68]
jmp 0x1008471b
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0xb4]
mov eax, edi
and eax, 0x7fffffff
or eax, edx
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x374], ecx
lea ecx, [esp + 0x220]
mov dword [esp + 0x224], 0
mov dword [esp + 0x220], 5
call fcn.100abb20
inc edi
cmp edi, dword [esp + 0x44]
jbe 0x10084710
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x3c]
inc ecx
mov dword [esp + 0x3c], ecx
cmp ecx, dword [esp + 0x58]
jbe 0x100846d5
mov esi, dword [ebx + 0x58]
push 0x20
lea ecx, [esp + 0x70]
lea edx, [esp + 0x74]
call fcn.100235b0
test al, al
jne 0x10084530
xor edi, edi
mov esi, dword [ebx + 0x58]
cmp esi, edi
je 0x100847d9
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
je 0x100847af
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0xffffffff
cmp byte [esi + 0xc], 0
je 0x100847be
mov ecx, dword [esi]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebx + 0x58]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [ebx + 0x58]
cmp esi, edi
je 0x100847d6
call fcn.1002e860
mov dword [ebx + 0x58], edi
push edi
lea ecx, [ebx + 0x68]
call fcn.100acfd0
cmp eax, edi
jl 0x1008484d
push ebx
call fcn.10084a70
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.10148524
mov esp, ebp
pop ebp
ret
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_CreateErrorInfo]
push 0
push 0x80041202
push 0x1044ebe0
call fcn.10025150
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.10148524
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x64], 0
sete cl
movzx edx, cl
push edx
lea ecx, [ebx + 0x68]
call fcn.100acfd0
test eax, eax
js 0x1008484d
mov eax, dword [ebx + 0x60]
mov ecx, dword [esp + 0x37c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10148524
mov esp, ebp
pop ebp
ret