Function at 0x1009c420
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018c4ef
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x101e40b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x290], esi
mov edx, dword [ebp + 8]
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], edx
mov eax, dword [edx]
test eax, eax
js 0x1009cc87
cmp eax, dword [esi + 0x78]
jg 0x1009cc87
imul edi, eax, 0x88
add edi, esi
cmp byte [edi + 0xd4], 0
je 0x1009cc93
cmp byte [edi + 0xcd], 0
je 0x1009cc93
mov eax, dword [edx + 0xc]
cmp eax, dword [edi + 0xc8]
jl 0x1009cc93
mov ecx, dword [edx + 0x14]
mov eax, dword [edx + 0x10]
cmp ecx, dword [edi + 0xec]
jl 0x1009c4e1
jg 0x1009c4c4
cmp eax, dword [edi + 0xe8]
jb 0x1009c4e1
sub eax, dword [edi + 0xe8]
sbb ecx, dword [edi + 0xec]
test ecx, ecx
jg 0x1009c4e1
jl 0x1009c4dd
cmp eax, 0x15180
jae 0x1009c4e1
mov cl, 1
jmp 0x1009c4e3
xor cl, cl
mov eax, dword [edi + 0xd0]
shl eax, 0x14
test cl, cl
je 0x1009c500
cmp dword [edi + 0xf4], eax
jbe 0x1009c524
inc dword [edi + 0xf0]
jmp 0x1009c50a
mov dword [edi + 0xf0], 0
cmp dword [edi + 0xf8], 0
lea ecx, [edi + 0xf8]
je 0x1009c524
call fcn.10097560
mov edx, dword [ebp - 0x288]
cmp dword [edi + 0xf8], 0
jne 0x1009cc83
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 0x10]
push eax
mov dword [edi + 0xe4], eax
lea eax, [ebp - 0x2b4]
push ecx
push eax
mov dword [edi + 0xe0], ecx
mov dword [edi + 0xf4], 0
call fcn.10097950
movups xmm0, xmmword [eax]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x220], ecx
movups xmmword [ebp - 0x240], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x230], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x27c], xmm0
mov dword [ebp - 0x274], 0
movups xmm0, xmmword [eax + 0x10]
mov eax, ecx
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x27c]
push eax
movups xmmword [ebp - 0x26c], xmm0
mov dword [ebp - 0x27c], 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov dword [ebp - 0x248], 0
add esp, 0x10
mov dword [ebp - 0x244], 0
mov dword [edi + 0xe8], eax
mov dword [edi + 0xec], edx
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
mov byte [ebp - 4], 1
lea eax, [edi + 0x98]
push eax
lea ecx, [ebp - 0x258]
call fcn.100495a0
lea eax, [edi + 0xb0]
push eax
lea ecx, [ebp - 0x21c]
call fcn.100495a0
push 0x1f4
lea eax, [ebp - 0x204]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp byte [edi + 0xce], 0
je 0x1009c743
mov eax, dword [ebp - 0x230]
inc eax
push eax
mov eax, dword [ebp - 0x22c]
add eax, 0x76c
push eax
lea eax, [ebp - 0x204]
push str._04d__02d_
push eax
call fcn.10049d60
lea ecx, [ebp - 0x204]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009c6b1
mov eax, dword [ebp - 0x208]
sub ecx, edx
mov edx, dword [ebp - 0x20c]
sub eax, edx
mov dword [ebp - 0x288], ecx
mov dword [ebp - 0x284], edx
push ecx
cmp ecx, eax
ja 0x1009c723
cmp dword [ebp - 0x208], 0x10
lea eax, [ecx + edx]
lea esi, [ebp - 0x21c]
mov dword [ebp - 0x20c], eax
cmovae esi, dword [ebp - 0x21c]
lea eax, [ebp - 0x204]
push eax
lea eax, [esi + edx]
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x288]
add esp, 0xc
mov ecx, dword [ebp - 0x284]
add eax, esi
mov esi, dword [ebp - 0x290]
mov byte [eax + ecx], 0
jmp 0x1009c743
lea eax, [ebp - 0x204]
mov byte [ebp - 0x284], 0
push eax
push dword [ebp - 0x284]
push ecx
lea ecx, [ebp - 0x21c]
call fcn.1004eb20
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x284], esp
push eax
call fcn.1003c8e0
mov byte [ebp - 4], 2
mov byte [ebp - 4], 1
call fcn.10098fa0
add esp, 0x18
test al, al
jne 0x1009c795
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x284], esp
push eax
call fcn.1003c8e0
mov byte [ebp - 4], 3
mov byte [ebp - 4], 1
call fcn.10099050
add esp, 0x18
cmp dword [esi + 0x3c], 0x10
lea eax, [esi + 0x28]
jb 0x1009c7a0
mov eax, dword [eax]
cmp dword [ebp - 0x244], 0x10
lea edx, [ebp - 0x258]
lea ecx, [esi + 0x40]
cmovae edx, dword [ebp - 0x258]
cmp dword [ecx + 0x14], 0x10
jb 0x1009c7bf
mov ecx, dword [ecx]
push dword [edi + 0xf0]
push eax
push dword [ebp - 0x23c]
mov eax, dword [ebp - 0x230]
push dword [ebp - 0x238]
inc eax
push dword [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x22c]
add eax, 0x76c
push eax
push edx
push ecx
lea eax, [ebp - 0x204]
push str._s__s__04d_02d_02d_02d_02d__s__03u.log
push eax
call fcn.10049d60
lea ecx, [ebp - 0x204]
add esp, 0x2c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009c810
mov eax, dword [ebp - 0x208]
sub ecx, edx
mov edx, dword [ebp - 0x20c]
sub eax, edx
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x288], edx
push ecx
cmp ecx, eax
ja 0x1009c882
cmp dword [ebp - 0x208], 0x10
lea eax, [ecx + edx]
lea esi, [ebp - 0x21c]
mov dword [ebp - 0x20c], eax
cmovae esi, dword [ebp - 0x21c]
lea eax, [ebp - 0x204]
push eax
lea eax, [esi + edx]
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x284]
add esp, 0xc
mov ecx, dword [ebp - 0x288]
add eax, esi
mov esi, dword [ebp - 0x290]
mov byte [eax + ecx], 0
jmp 0x1009c8a2
lea eax, [ebp - 0x204]
mov byte [ebp - 0x284], 0
push eax
push dword [ebp - 0x284]
push ecx
lea ecx, [ebp - 0x21c]
call fcn.1004eb20
cmp dword [ebp - 0x208], 0x10
lea eax, [ebp - 0x21c]
push 0x101b5f08
cmovae eax, dword [ebp - 0x21c]
lea ecx, [edi + 0xf8]
push eax
call fcn.100974e0
cmp dword [edi + 0xf8], 0
je 0x1009cb5f
test eax, eax
js 0x1009cb5f
cmp dword [edi + 0xdc], 0
mov dword [edi + 0xf4], eax
jl 0x1009cb56
jg 0x1009c8fe
cmp dword [edi + 0xd8], 0
jbe 0x1009cb56
mov eax, dword [edi + 0x100]
cmp eax, 7
jbe 0x1009ca12
test eax, eax
je 0x1009ca12
mov esi, dword [edi + 0xfc]
push 0
mov esi, dword [esi]
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
sub eax, dword [edi + 0xd8]
sbb edx, dword [edi + 0xdc]
cmp dword [esi + 0xc], edx
jg 0x1009ca12
jl 0x1009c948
cmp dword [esi + 8], eax
jae 0x1009ca12
mov eax, dword [edi + 0xfc]
mov eax, dword [eax]
add eax, 0x10
cmp dword [eax + 0x14], 0x10
jb 0x1009c95b
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x234]
call fcn.10006830
mov byte [ebp - 4], 4
lea eax, [ebp - 0x234]
cmp dword [ebp - 0x220], 0x10
cmovae eax, dword [ebp - 0x234]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x220]
cmp edx, 0x10
jb 0x1009c9c7
mov ecx, dword [ebp - 0x234]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1009c9bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1009cb2b
push edx
push ecx
call fcn.10177d58
add esp, 8
mov eax, dword [edi + 0xfc]
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0xf
mov byte [ebp - 0x234], 0
mov edx, dword [eax]
push edx
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [ecx], eax
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
dec dword [edi + 0x100]
call fcn.1009df30
cmp dword [edi + 0x100], 0
jne 0x1009c915
cmp dword [edi + 0x100], 0
je 0x1009ca5e
mov eax, dword [edi + 0xfc]
cmp dword [ebp - 0x208], 0x10
mov edx, dword [eax + 4]
lea eax, [ebp - 0x21c]
cmovae eax, dword [ebp - 0x21c]
cmp dword [edx + 0x24], 0x10
lea ecx, [edx + 0x10]
jb 0x1009ca44
mov ecx, dword [edx + 0x10]
push dword [ebp - 0x20c]
mov edx, dword [edx + 0x20]
push eax
call fcn.1009e500
add esp, 8
test al, al
jne 0x1009cb56
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x238], edx
call fcn.1003c8e0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x23c]
mov esi, dword [edi + 0xfc]
push ecx
mov dword [ebp - 0x28c], 1
mov eax, dword [esi + 4]
push eax
push esi
mov dword [ebp - 0x284], eax
call fcn.1009e440
mov edx, eax
mov ecx, 0x6666665
mov eax, dword [edi + 0x100]
sub ecx, eax
cmp ecx, 1
jae 0x1009cad5
push str.list_T__too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
inc eax
mov dword [edi + 0x100], eax
mov eax, dword [ebp - 0x284]
mov dword [esi + 4], edx
mov dword [eax], edx
mov eax, 1
mov dword [ebp - 0x28c], eax
and eax, 0xfffffffe
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x220]
cmp edx, 0x10
jb 0x1009cb3b
mov ecx, dword [ebp - 0x234]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1009cb31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1009cb31
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10177d58
add esp, 8
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0xf
mov byte [ebp - 0x234], 0
mov byte [ebp - 0x27d], 1
jmp 0x1009cbc2
cmp dword [ebp - 0x208], 0x10
lea eax, [ebp - 0x21c]
cmovae eax, dword [ebp - 0x21c]
push eax
lea eax, [ebp - 0x204]
push str.log4z:_can_not_open_log_file__s.__r_n
push eax
call fcn.10049d60
add esp, 0xc
mov ecx, esi
push 6
push str.____________________________r_n
call fcn.1009a7f0
push 6
lea eax, [ebp - 0x204]
mov ecx, esi
push eax
call fcn.1009a7f0
push 6
push str.____________________________r_n
mov ecx, esi
call fcn.1009a7f0
mov byte [edi + 0xcd], 0
mov byte [ebp - 0x27d], 0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x208]
cmp edx, 0x10
jb 0x1009cc02
mov ecx, dword [ebp - 0x21c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1009cbf8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1009cbf8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10177d58
add esp, 8
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x244]
cmp edx, 0x10
jb 0x1009cc60
mov ecx, dword [ebp - 0x258]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1009cc56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1009cc56
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10177d58
add esp, 8
mov al, byte [ebp - 0x27d]
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
jmp 0x1009cc95
mov al, 1
jmp 0x1009cc95
push 6
push str.log4z:_openLogger_can_not_open__invalide_logger_id___r_n
call fcn.1009a7f0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10177d47
mov esp, ebp
pop ebp
ret 4