Function at 0x203f09
Capabilities:
Delete file
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00203f09
xor esi, esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
mov ebx, 0x20ca68
push ebx
call fcn.00201a5c
push 0
mov edx, 0x20cfc4
call fcn.0020a15c
mov ebx, esp
push ebx
call fcn.0020a0df
call fcn.002023f5
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
call fcn.0020a174
lea ebx, [ebp - 0x9c]
call fcn.0020a0df
mov edx, dword [0x20ca68]
call fcn.0020a0c8
mov edx, 0x20cfd0
call fcn.0020a15c
call fcn.0020af60
lea ebx, [ebp - 0xa0]
call fcn.0020a0df
mov edx, dword [ebp - 0xa0]
call fcn.0020a0c8
xor ebx, ebx
mov word [ebp - 0x46], 0xb
mov ecx, pe_nt_image_headers32
mov eax, 1
mov dx, 0x20c1
call fcn.00208360
call fcn.002068a8
mov word [ebp - 0x46], 0xb
mov edx, dword [ebp - 0x9c]
call fcn.0020a0c8
call fcn.002082b4
xor ecx, ecx
mov eax, 0xb
call fcn.00208a28
mov edx, 0x20cefc
call fcn.0020a15c
lea ebx, [ebp - 0x9c]
call fcn.0020a0df
lea ebx, [ebp - 0xa0]
call fcn.0020a4c5
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
fldcw word [ebp - 0x10]
mov esi, eax
cmp esi, 0
je 0x20449a
push 0
mov edx, 0x20cfe4
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca70], eax
push 0
mov edx, 0x20cff4
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca74], eax
push 0
mov edx, 0x20d00c
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca78], eax
push 0
mov edx, 0x20d024
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca7c], eax
push 0
mov edx, 0x20d040
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca80], eax
push 0
mov edx, 0x20d058
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca84], eax
push 0
mov edx, 0x20d074
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca88], eax
push 0
mov edx, 0x20d08c
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca8c], eax
push 0
mov edx, 0x20d09c
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca90], eax
push 0
mov edx, 0x20d0ac
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca94], eax
push 0
mov edx, 0x20d0c8
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca98], eax
push 0
mov edx, 0x20d0e4
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20ca9c], eax
push 0
mov edx, 0x20d0fc
call fcn.0020a15c
mov ebx, esp
call fcn.00209a99
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
fldcw word [ebp - 0x10]
mov dword [0x20caa0], eax
xor eax, eax
mov edx, dword [0x20ca60]
call fcn.0020a0c8
mov dword [ebp - 0x30], eax
call fcn.0020a094
cmp eax, dword [ebp - 0x30]
jle 0x204324
mov edx, dword [0x20ca68]
call fcn.0020a0c8
mov edx, 0x20cfa8
call fcn.0020a15c
call fcn.0020af60
call fcn.00205275
mov edx, 0x20d10c
call fcn.0020a15c
call fcn.00209714
call fcn.0020af60
call fcn.00205395
mov edx, 0x20cf2c
call fcn.0020a15c
call fcn.0020961c
call fcn.0020af60
mov edx, 0x20d114
call fcn.0020a15c
call fcn.0020af60
lea ebx, [ebp - 0xa8]
call fcn.0020a0df
push 0
xor eax, eax
mov ebx, esp
push ebx
mov dword [ebx], eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
lea ebx, [ebp - 0xa8]
push ebx
mov ebx, 0x20ca60
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.00201b7e
add esp, 4
push 0
mov edx, 0x20d120
call fcn.0020a15c
mov ebx, esp
push ebx
call fcn.0020a0df
call fcn.002023f5
mov ebx, eax
pop eax
call fcn.0020890a
mov eax, ebx
call fcn.0020a174
lea ebx, [ebp - 0xac]
call fcn.0020a0df
mov edx, dword [0x20ca68]
call fcn.0020a0c8
call fcn.00205395
mov edx, 0x20cf2c
call fcn.0020a15c
call fcn.0020961c
call fcn.0020af60
mov edx, 0x20d114
call fcn.0020a15c
call fcn.0020af60
lea ebx, [ebp - 0xa8]
call fcn.0020a0df
mov edx, dword [ebp - 0xa8]
call fcn.0020a0c8
xor ebx, ebx
mov word [ebp - 0x46], 0xb
mov ecx, pe_nt_image_headers32
mov eax, 1
mov dx, 0x20c4
call fcn.00208360
call fcn.002068a8
mov word [ebp - 0x46], 0xb
mov edx, dword [ebp - 0xac]
call fcn.0020a0c8
call fcn.002082b4
xor ecx, ecx
mov eax, 0xb
call fcn.00208a28
mov edx, 0x20cefc
call fcn.0020a15c
lea ebx, [ebp - 0xac]
call fcn.0020a0df
mov edx, dword [0x20ca64]
call fcn.0020a0c8
mov ecx, 1
mov eax, 2
call fcn.00207fdf
call fcn.00208360
call fcn.002080b1
mov ebx, 0x20ca64
push ebx
lea ebx, [ebp - 0xa8]
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.0020208e
lea ebx, [ebp - 0xa8]
call fcn.0020a4c5
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
fldcw word [ebp - 0x10]
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xa0]
call fcn.0020a4c5
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xa8]
call fcn.0020a4c5
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
fldcw word [ebp - 0x10]
cmp dword [0x20ca5c], 0
jne 0x20449a
mov ebx, 0x20ca64
push ebx
call fcn.00201378
call fcn.00209f9c
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 4