Function at 0x10023740
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4e4
mov eax, dword [0x1004f0a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x4da]
push ecx
mov dword [ebp - 0x4e0], edi
mov word [ebp - 0x4dc], ax
call fcn.1000ae30
mov edx, dword [ebp + 0x10]
add esp, 0xc
push edx
push esi
call fcn.10028a90
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynW]
add esp, 4
push eax
lea eax, [ebp - 0x4dc]
push eax
call ebx
cmp esi, 0xc
je 0x10023997
cmp esi, 0xa
je 0x10023997
cmp esi, 0xe
je 0x10023997
cmp esi, 0x13
je 0x10023997
cmp esi, 9
jne 0x100237d3
call fcn.1001d960
test eax, eax
jne 0x10023997
xor ecx, ecx
push 0x62
push ecx
lea edx, [ebp - 0x66]
push edx
xor edi, edi
mov word [ebp - 0x68], cx
call fcn.1000ae30
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x2d2]
push ecx
mov word [ebp - 0x2d4], ax
call fcn.1000ae30
push esi
call fcn.10028ab0
add esp, 0x1c
mov esi, eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov dword [ebp - 0x4e4], eax
lea ebx, [ebx]
test edi, edi
jne 0x10023832
push 0x32
push esi
lea edx, [ebp - 0x68]
push edx
call ebx
jmp 0x10023919
xor eax, eax
push 0x62
push eax
lea ecx, [ebp - 0xca]
push ecx
mov word [ebp - 0xcc], ax
call fcn.1000ae30
add esp, 0xc
push 0x32
push esi
lea edx, [ebp - 0xcc]
push edx
call ebx
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push edi
lea ecx, [ebp - 0xcc]
push ecx
push str._s_d
lea edx, [ebp - 0x68]
push 0x32
push edx
call fcn.1000c37d
lea eax, [ebp - 0x68]
add esp, 0x14
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10023887
sub eax, edx
sar eax, 1
cmp eax, 8
jbe 0x10023904
jmp 0x100238a0
test eax, eax
je 0x10023984
lea eax, [ebp - 0xcc]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100238b1
sub eax, edx
push edi
lea edx, [ebp - 0xcc]
push edx
sar eax, 1
xor ecx, ecx
push str._s_d
mov word [ebp + eax*2 - 0xce], cx
lea eax, [ebp - 0x68]
push 0x32
push eax
call fcn.1000c37d
lea eax, [ebp - 0x68]
add esp, 0x14
lea edx, [eax + 2]
jmp 0x100238f0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100238f0
sub eax, edx
sar eax, 1
cmp eax, 8
ja 0x100238a0
mov ecx, dword [ebp - 0x4e4]
push 0x32
push ecx
lea edx, [ebp - 0x68]
push edx
call fcn.1001e290
add esp, 0xc
push 0x104
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
inc edi
call ebx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x2d4]
push 1
push ecx
call fcn.1001cb20
add esp, 8
lea edx, [ebp - 0x2d4]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1002396e
cmp edi, 0x3e8
jl 0x10023820
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push edx
call ebx
jmp 0x100239bd
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ae1e
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x4dc]
push ecx
push edi
call ebx
push esi
call fcn.10028ab0
add esp, 4
push eax
push edi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.1000ae1e
mov esp, ebp
pop ebp
ret