Function at 0x100083aa
Capabilities:
Delete file
Move file

Disassembly:
mov eax, 0x1000bb04
call fcn.1000b5d0
sub esp, 0x248
push ebx
push edi
mov edi, dword [ebp + 8]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor ebx, ebx
cmp eax, ebx
je 0x100083d4
push 1
pop eax
jmp 0x1000852e
mov al, byte [ebp + 0xb]
push esi
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0x1c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
push edi
call esi
pop ecx
push eax
push edi
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], ebx
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.1000853c
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x2c], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push edi
call esi
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1000832a
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x252]
mov word [ebp - 0x254], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x100084ab
cmp word [eax], bx
je 0x100084ab
mov ecx, dword [ebp - 0x38]
cmp ecx, ebx
jne 0x1000848d
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push eax
push ecx
push str._s_s
lea eax, [ebp - 0x254]
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
jmp 0x100084e7
mov ecx, dword [ebp - 0x48]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
cmp ecx, ebx
jne 0x100084b9
mov ecx, eax
mov esi, dword [ebp - 0x38]
cmp esi, ebx
jne 0x100084c2
mov esi, eax
push ecx
push ebx
call dword [sym.imp.MSVCRT.dll_time]
pop ecx
push eax
push esi
push 0x1000f8f4
lea eax, [ebp - 0x254]
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x18
push 1
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExW]
pop edi
lea eax, [ebp - 0x254]
push edi
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x1000850f
push 4
lea eax, [ebp - 0x254]
push ebx
push eax
call esi
mov ebx, edi
push edi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
or dword [ebp - 4], 0xffffffff
push edi
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, ebx
pop esi
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
leave
ret