Function at 0x102c41d
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x50
push esi
push edi
xor esi, esi
xor edi, edi
cmp dword [ebp + 8], esi
je 0x102c6de
mov eax, dword [ebp - 0x10]
push ebx
push 0x40
and eax, 0xffffffc1
pop ebx
or eax, ebx
push 0x44
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0xc], esi
call fcn.0102a2cd
cmp eax, esi
pop ecx
je 0x102c464
mov ecx, eax
call fcn.010328bb
mov dword [ebp + 8], eax
jmp 0x102c467
mov dword [ebp + 8], esi
cmp dword [ebp + 8], esi
jne 0x102c487
cmp dword [ebp - 4], esi
mov edi, reloc.OLEAUT32.dll_SysReAllocString
je 0x102c6dd
lea ecx, [ebp - 0x10]
call fcn.010069f9
jmp 0x102c6dd
mov ecx, dword [ebp + 8]
push 1
call fcn.01032ba0
mov edi, eax
cmp edi, esi
jl 0x102c6c7
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x10]
push eax
call fcn.01032c92
mov edi, eax
cmp edi, esi
jl 0x102c6c7
lea ecx, [ebp - 0x10]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
jne 0x102c6c7
mov ecx, dword [ebp - 0x20]
push 0xffffffffffffffc1
pop eax
and ecx, eax
or ecx, ebx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x40]
and ecx, eax
or ecx, ebx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x30]
and ecx, eax
or ecx, ebx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x50]
and ecx, eax
push 1
lea eax, [ebp - 0x20]
or ecx, ebx
push eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
call fcn.01029e72
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push 0x10034ac
lea eax, [ebp - 0x20]
push eax
call fcn.01006e85
mov edi, eax
cmp edi, esi
jl 0x102c6a0
xor ebx, ebx
inc ebx
push ebx
lea ecx, [ebp - 0x10]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x20]
call fcn.01006e57
push eax
call fcn.01028a2e
add esp, 0xc
test eax, eax
je 0x102c606
push ebx
lea eax, [ebp - 0x40]
push eax
call fcn.01029e72
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push 0x1003498
lea eax, [ebp - 0x40]
push eax
call fcn.01006e85
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push ebx
lea eax, [ebp - 0x20]
push eax
call fcn.01029e72
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push 0x1003484
lea eax, [ebp - 0x20]
push eax
call fcn.01006e85
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push esi
lea ecx, [ebp - 0x40]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x20]
call fcn.01006e57
push eax
call fcn.01028a2e
add esp, 0xc
test eax, eax
jne 0x102c606
lea ecx, [ebp - 0x10]
call fcn.01006e57
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call edi
lea ecx, [ebp - 0x40]
call fcn.01006e57
push eax
call edi
mov edi, 0x8000ffff
jmp 0x102c6a0
push ebx
lea eax, [ebp - 0x30]
push eax
call fcn.01029e72
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push 0x1003468
lea eax, [ebp - 0x30]
push eax
call fcn.01006e85
mov edi, eax
cmp edi, esi
jl 0x102c6a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x50]
call fcn.01006e6f
mov edi, eax
cmp edi, esi
jl 0x102c693
push 0xffffffffffffffff
push 0x1001914
push esi
lea ecx, [ebp - 0x50]
call fcn.01006c0b
mov edi, eax
cmp edi, esi
jl 0x102c693
lea ecx, [ebp - 0x30]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
je 0x102c693
push esi
lea ecx, [ebp - 0x50]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x30]
call fcn.01006e57
push eax
call fcn.01028a2e
add esp, 0xc
test eax, eax
jne 0x102c693
mov edi, 0x8000ffff
cmp dword [ebp - 0x44], esi
je 0x102c6a0
lea ecx, [ebp - 0x50]
call fcn.010069f9
cmp dword [ebp - 0x24], esi
je 0x102c6ad
lea ecx, [ebp - 0x30]
call fcn.010069f9
cmp dword [ebp - 0x34], esi
je 0x102c6ba
lea ecx, [ebp - 0x40]
call fcn.010069f9
cmp dword [ebp - 0x14], esi
je 0x102c6c7
lea ecx, [ebp - 0x20]
call fcn.010069f9
cmp dword [ebp - 4], esi
je 0x102c6d4
lea ecx, [ebp - 0x10]
call fcn.010069f9
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
pop ebx
mov eax, edi
pop edi
pop esi
leave
ret 4