Function at 0x101563f
Capabilities:
Delete directory

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa34
mov eax, dword [0x102a0ec]
push edi
mov dword [ebp - 4], eax
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0x61c]
push eax
mov edi, 0x208
push 0
mov dword [ebp - 0xa34], edi
call fcn.01015d58
test eax, eax
je 0x101591b
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0x824]
push eax
push 1
mov dword [ebp - 0xa34], edi
call fcn.01015d58
test eax, eax
je 0x101591b
push 4
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0x414]
push eax
mov dword [ebp - 0xa34], edi
call fcn.01016266
test eax, eax
je 0x101591b
push 5
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0xa34], edi
call fcn.01016266
test eax, eax
je 0x101591b
push ebx
push esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push edi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
mov esi, dword [sym.imp.SHELL32.dll_SHChangeNotify]
pop ecx
mov dword [ebp - 0xa30], eax
mov ebx, 0x1000
je 0x1015751
lea ecx, [ebp - 0xa34]
push ecx
push eax
mov dword [ebp - 0xa34], edi
call fcn.01016047
test eax, eax
je 0x1015745
push dword [ebp - 0xa30]
call fcn.010131b3
push dword [ebp - 0xa30]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0
push dword [ebp - 0xa30]
push 5
push ebx
call esi
push dword [ebp - 0xa30]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
push edi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
mov dword [ebp - 0xa30], eax
je 0x10157c2
lea ecx, [ebp - 0xa34]
push ecx
push eax
xor eax, eax
cmp dword [ebp + 8], eax
mov dword [ebp - 0xa34], edi
sete al
push eax
call fcn.010161e9
test eax, eax
je 0x10157b6
push dword [ebp - 0xa30]
call fcn.01018429
test eax, eax
je 0x10157b6
push dword [ebp - 0xa30]
call fcn.010131b3
push dword [ebp - 0xa30]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0
push dword [ebp - 0xa30]
push 5
push 0x10
call esi
push dword [ebp - 0xa30]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
call fcn.010134b7
push edi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
mov dword [ebp - 0xa30], eax
je 0x1015815
lea ecx, [ebp - 0xa34]
push ecx
push eax
push 0
mov dword [ebp - 0xa34], edi
call fcn.01015cd2
test eax, eax
je 0x1015809
push dword [ebp - 0xa30]
call fcn.010131b3
push 0
push dword [ebp - 0xa30]
push 5
push ebx
call esi
push dword [ebp - 0xa30]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
push 0x104
lea eax, [ebp - 0xa2c]
push eax
push 2
push dword [0x102aec0]
call dword [sym.imp.USER32.dll_LoadStringW]
push edi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
mov dword [ebp - 0xa30], eax
je 0x1015890
push edi
push eax
call fcn.01028264
test eax, eax
mov edi, dword [ebp - 0xa30]
jl 0x1015889
push edi
call fcn.01016cfc
lea eax, [ebp - 0xa2c]
push eax
push 0x104
push edi
call fcn.0100d4ff
push edi
call fcn.01018429
test eax, eax
je 0x1015889
push edi
call fcn.010131b3
push edi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0
push edi
push 5
push 0x10
call esi
push edi
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
call fcn.01013667
lea eax, [ebp - 0x61c]
push eax
call fcn.010131b3
lea eax, [ebp - 0x824]
push eax
call fcn.010131b3
lea eax, [ebp - 0x414]
push eax
call fcn.010131b3
lea eax, [ebp - 0x20c]
push eax
call fcn.010131b3
mov edi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea eax, [ebp - 0x414]
push eax
call edi
lea eax, [ebp - 0x20c]
push eax
call edi
xor edi, edi
push edi
lea eax, [ebp - 0x61c]
push eax
push 5
push ebx
call esi
push edi
lea eax, [ebp - 0x824]
push eax
push 5
push ebx
call esi
push edi
lea eax, [ebp - 0x414]
push eax
push 5
push ebx
call esi
push edi
lea eax, [ebp - 0x20c]
push eax
push 5
push ebx
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
pop esi
pop ebx
mov ecx, dword [ebp - 4]
pop edi
call fcn.0101672d
leave
ret 4