Function at 0x100035ec
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x25c
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
push edi
xor ebx, ebx
push ebx
mov byte [ebp - 2], bl
call esi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
je 0x10003613
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c60
push 0x1000936c
push 0x10009368
lea eax, [ebp - 0x25c]
push str.LOAD_s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 8
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.100083c0
add esp, 0x1c
test eax, eax
jne 0x10003c60
push ebx
call esi
test eax, eax
je 0x10003681
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c60
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 0x1c], eax
call esi
test eax, eax
je 0x100036c3
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jle 0x10003c60
push eax
mov byte [ebp - 2], 1
mov dword [0x1000a4e4], eax
call fcn.100034a2
cmp eax, dword [0x1000a4e4]
pop ecx
jne 0x10003c60
push ebx
call esi
test eax, eax
je 0x10003706
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c60
push ebx
call esi
test eax, eax
je 0x1000373b
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
cmp eax, ebx
pop ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ebx
jle 0x1000397d
push ebx
call esi
test eax, eax
je 0x1000376f
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c60
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 8], eax
call esi
test eax, eax
je 0x100037b1
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp dword [ebp - 8], ebx
je 0x1000396e
push ebx
call esi
test eax, eax
je 0x100037d6
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c60
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 0x1c], eax
call esi
test eax, eax
je 0x10003818
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x158]
push eax
call fcn.10002660
push dword [ebp - 8]
lea eax, [ebp - 0x158]
push eax
push dword [ebp + 8]
call fcn.100028e1
add esp, 0x10
test al, al
je 0x10003c60
lea eax, [ebp - 0x158]
push eax
call fcn.10006a9a
test al, al
pop ecx
jne 0x10003876
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1000396e
push ebx
call esi
test eax, eax
je 0x10003880
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea ecx, [ebp - 0x54]
call fcn.10005a4e
test al, al
je 0x10003966
push ebx
mov dword [ebp - 0x18], ebx
call esi
test eax, eax
je 0x100038af
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
add eax, 0x7530
push 1
push eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 8], eax
call fcn.10006506
test al, al
je 0x10003936
push 3
push 0x10009224
push dword [ebp - 0x18]
call fcn.100083c0
add esp, 0xc
test eax, eax
jne 0x1000390d
push 4
push 0x10009358
push 1
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.1000637b
push ebx
call esi
test eax, eax
je 0x10003917
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x54]
call fcn.100066ed
jmp 0x1000394a
push 4
push 0x10009358
push 1
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.1000637b
push ebx
call esi
test eax, eax
je 0x10003954
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea ecx, [ebp - 0x54]
call fcn.10006021
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x20]
jl 0x10003765
lea ecx, [ebp - 0x54]
call fcn.10005a4e
test al, al
je 0x10003c58
push ebx
call esi
test eax, eax
je 0x10003997
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c58
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 0x1c], eax
call esi
test eax, eax
je 0x100039d9
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
jle 0x10003c58
push ebx
call esi
test eax, eax
je 0x10003a01
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c58
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 0x28], eax
call esi
test eax, eax
je 0x10003a43
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
mov dword [ebp - 0x18], ebx
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c58
push ebx
call esi
test eax, eax
je 0x10003a7b
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 0x18], eax
call esi
test eax, eax
je 0x10003aa4
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10003c58
push ebx
call esi
test eax, eax
je 0x10003ad9
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x10]
push eax
call fcn.100025cc
pop ecx
push ebx
mov dword [ebp - 0x20], eax
call esi
test eax, eax
je 0x10003b02
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp - 0x20]
inc eax
push eax
mov dword [ebp - 0x2c], eax
call fcn.10005260
push dword [ebp - 0x20]
mov dword [ebp - 8], eax
push eax
push dword [ebp + 8]
call fcn.1000698b
add esp, 0x10
test al, al
je 0x10003c4f
push ebx
call esi
test eax, eax
je 0x10003b45
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 1], bl
call esi
test eax, eax
je 0x10003b6a
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
push 2
push dword [ebp - 0x28]
lea ecx, [ebp - 0x54]
call fcn.10006506
test al, al
je 0x10003bcc
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x18]
jge 0x10003ba3
mov byte [ebp - 1], 1
push ebx
call esi
test eax, eax
je 0x10003bad
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.100066ed
jmp 0x10003bd0
mov byte [ebp - 1], 1
cmp byte [ebp - 1], bl
je 0x10003c33
push ebx
call esi
test eax, eax
je 0x10003bdf
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x54]
push dword [ebp - 8]
push 3
push dword [ebp - 0x28]
call fcn.1000637b
push ebx
call esi
test eax, eax
je 0x10003c0e
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 4
lea eax, [ebp - 0x18]
push eax
push 2
push dword [ebp - 0x28]
lea ecx, [ebp - 0x54]
call fcn.1000637b
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.100066ed
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c]
jl 0x100039f7
jmp 0x10003c58
push dword [ebp - 8]
call fcn.10005280
pop ecx
lea ecx, [ebp - 0x54]
call fcn.10006021
mov al, byte [ebp - 2]
pop edi
pop esi
pop ebx
leave
ret