Function at 0x105f409
Capabilities:
Delete file
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x69c
mov eax, dword [0x1075fb8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov dword [ebp - 0x624], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
or dword [ebp - 0x628], 0xffffffff
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x620], ebx
mov eax, dword [0x1075004]
mov esi, 0x1075004
cmp eax, esi
je 0x105f471
test byte [eax + 0x1c], 2
je 0x105f471
cmp byte [eax + 0x19], 5
jb 0x105f471
push 0x1005484
push 0x3f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010090c5
push dword [ebp - 0x624]
push edi
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x105f497
mov eax, dword [ebp - 0x62c]
mov dword [eax], 1
xor eax, eax
jmp 0x105f748
lea eax, [ebp - 0x20c]
push eax
push ebx
push 0x1005494
push edi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
jne 0x105f4f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x620], eax
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f742
test byte [eax + 0x1c], 2
je 0x105f742
cmp byte [eax + 0x19], 2
jb 0x105f742
push dword [ebp - 0x620]
push 0x1005484
push 0x40
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
jmp 0x105f742
push 2
push ebx
push ebx
push 3
push ebx
push 3
push ebx
lea eax, [ebp - 0x20c]
push eax
call fcn.0105e538
mov dword [ebp - 0x630], eax
cmp eax, 0xffffffff
jne 0x105f559
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x620], eax
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f6f7
test byte [eax + 0x1c], 2
je 0x105f6f7
cmp byte [eax + 0x19], 2
jb 0x105f6f7
push dword [ebp - 0x620]
push 0x1005484
push 0x41
jmp 0x105f6ec
lea eax, [ebp - 0x20c]
push 0x5c
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
push dword [ebp - 0x624]
mov dword [ebp - 0x634], eax
mov edi, 0x208
push edi
lea eax, [ebp - 0x61c]
push eax
call fcn.01009a5d
cmp eax, ebx
mov dword [ebp - 0x624], eax
jge 0x105f5ca
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f5c1
test byte [eax + 0x1c], 2
je 0x105f5c1
cmp byte [eax + 0x19], 2
jb 0x105f5c1
movzx ecx, word [ebp - 0x624]
push ecx
push 0x1005484
push 0x42
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
movzx eax, word [ebp - 0x624]
jmp 0x105f611
push dword [ebp - 0x634]
lea eax, [ebp - 0x61c]
push edi
push eax
call fcn.0100e740
mov edi, eax
cmp edi, ebx
jge 0x105f619
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f60e
test byte [eax + 0x1c], 2
je 0x105f60e
cmp byte [eax + 0x19], 2
jb 0x105f60e
movzx ecx, di
push ecx
push 0x1005484
push 0x43
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
movzx eax, di
mov dword [ebp - 0x620], eax
jmp 0x105f66a
push 2
push ebx
push ebx
push 3
push ebx
push 3
push ebx
lea eax, [ebp - 0x61c]
push eax
call fcn.0105e538
mov dword [ebp - 0x628], eax
cmp eax, 0xffffffff
jne 0x105f78c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x620], eax
cmp eax, 8
je 0x105f759
cmp eax, 0xe
je 0x105f759
mov dword [ebp - 0x620], ebx
mov eax, dword [ebp - 0x62c]
mov dword [eax], ebx
push dword [ebp - 0x630]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
test eax, eax
jne 0x105f6af
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f6af
test byte [eax + 0x1c], 2
je 0x105f6af
cmp byte [eax + 0x19], 2
jb 0x105f6af
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1075004]
push 0x1005484
push 0x47
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
cmp dword [ebp - 0x628], 0xffffffff
je 0x105f6f7
push dword [ebp - 0x628]
call edi
test eax, eax
jne 0x105f6f7
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f6f7
test byte [eax + 0x1c], 2
je 0x105f6f7
cmp byte [eax + 0x19], 2
jb 0x105f6f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1075004]
push 0x1005484
push 0x48
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x105f742
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f742
test byte [eax + 0x1c], 2
je 0x105f742
cmp byte [eax + 0x19], 2
jb 0x105f742
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x1075004]
push 0x1005484
push 0x49
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100a6e9
mov eax, dword [ebp - 0x620]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0105bb63
leave
ret 0xc
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f66a
test byte [eax + 0x1c], 2
je 0x105f66a
cmp byte [eax + 0x19], 2
jb 0x105f66a
push dword [ebp - 0x620]
push 0x1005484
push 0x44
jmp 0x105f82e
mov edi, dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
lea eax, [ebp - 0x69c]
push eax
push dword [ebp - 0x630]
call edi
test eax, eax
jne 0x105f7e1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x620], eax
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f66a
test byte [eax + 0x1c], 2
je 0x105f66a
cmp byte [eax + 0x19], 2
jb 0x105f66a
push dword [ebp - 0x620]
push 0x1005484
push 0x45
jmp 0x105f82e
lea eax, [ebp - 0x668]
push eax
push dword [ebp - 0x628]
call edi
test eax, eax
jne 0x105f83e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x620], eax
mov eax, dword [0x1075004]
cmp eax, esi
je 0x105f66a
test byte [eax + 0x1c], 2
je 0x105f66a
cmp byte [eax + 0x19], 2
jb 0x105f66a
push dword [ebp - 0x620]
push 0x1005484
push 0x46
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
jmp 0x105f66a
mov eax, dword [ebp - 0x670]
cmp eax, dword [ebp - 0x63c]
jne 0x105f662
mov eax, dword [ebp - 0x66c]
cmp eax, dword [ebp - 0x638]
jne 0x105f662
mov eax, dword [ebp - 0x680]
cmp eax, dword [ebp - 0x64c]
jne 0x105f662
mov eax, dword [ebp - 0x62c]
mov dword [eax], 1
jmp 0x105f66a