Function at 0x2e0411c4
Capabilities:
Delete file

Disassembly:
push 0x278
mov eax, 0x2e101fc7
call fcn.2e01c44f
mov eax, dword [ebp + 8]
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x238], ebx
mov ecx, dword [eax]
lea edx, [ebp - 0x238]
push edx
push eax
mov dword [ebp - 4], ebx
call dword [ecx + 0x1a0]
mov eax, dword [esi + 0x2c]
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x23c], ebx
call dword [ecx + 0x18]
inc eax
test eax, eax
jle 0x2e04181a
mov dword [ebp - 0x234], ebx
mov ecx, dword [ebp - 0x23c]
mov byte [ebp - 4], 1
cmp ecx, ebx
jne 0x2e041249
push dword [ebp - 0x238]
lea eax, [ebp - 0x234]
push eax
call fcn.2e02bc08
mov edi, dword [ebp - 0x234]
cmp edi, ebx
jne 0x2e04127e
mov byte [ebp - 4], bl
jmp 0x2e0417fe
mov eax, dword [esi + 0x2c]
mov edx, dword [eax]
dec ecx
push ecx
push eax
call dword [edx + 0x28]
push eax
lea ecx, [ebp - 0x234]
call fcn.2e040066
mov edi, dword [ebp - 0x234]
cmp edi, dword [ebp - 0x238]
jne 0x2e04123d
mov byte [ebp - 4], bl
cmp edi, ebx
je 0x2e0417fe
jmp 0x2e0417f8
mov dword [ebp - 0x22c], ebx
mov eax, dword [edi]
lea ecx, [ebp - 0x22c]
push ecx
push edi
mov byte [ebp - 4], 2
call dword [eax + 0x20]
cmp dword [ebp - 0x22c], ebx
je 0x2e0417f5
lea eax, [ebp - 0x228]
push eax
push 0x206
push dword [ebp - 0x22c]
mov ecx, esi
mov dword [ebp - 0x228], ebx
call fcn.2e03f593
test eax, eax
jne 0x2e0417e1
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
lea edx, [ebp - 0x278]
push edx
push eax
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
push ebx
push ebx
push 1
push eax
call dword [ecx + 0xbc]
mov esi, dword [ebp - 0x228]
cmp esi, ebx
je 0x2e0417b0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x280], eax
lea eax, [esi + 0x20]
mov dword [ebp - 0x284], edi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x2e04131a
sub eax, ecx
je 0x2e041798
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0xffffffffffffffff
lea eax, [esi + 0x20]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x218]
push eax
call fcn.2e02338b
inc eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x240], ebx
lea eax, [ebp - 0x240]
push eax
push ebx
push 0x4001012
push ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x224], ebx
call dword [sym.imp.ole32.dll_StgCreateDocfile]
cmp eax, ebx
jl 0x2e041784
mov eax, dword [ebp - 0x240]
mov ecx, dword [eax]
lea edx, [ebp - 0x224]
push edx
push ebx
push ebx
push 0x1012
push 0x2e0041e4
push eax
call dword [ecx + 0xc]
cmp eax, ebx
jl 0x2e041772
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x254]
push edx
push 4
lea edx, [ebp - 0x274]
push edx
mov dword [ebp - 0x254], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
cmp eax, ebx
jl 0x2e041762
mov eax, dword [ebp - 0x224]
mov edi, dword [eax]
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.2e02338b
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x224]
call dword [edi + 0x10]
cmp eax, ebx
jl 0x2e041762
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x250], ebx
lea eax, [ebp - 0x250]
push eax
mov byte [ebp - 4], 4
call fcn.2e07a5dd
fild dword [esi + 0xc]
fld qword [0x2e003130]
push ecx
push ecx
fdiv st(1), st(0)
lea eax, [ebp - 0x284]
fxch st(1)
fstp dword [ebp - 0x21c]
fld dword [ebp - 0x21c]
fimul dword [esi + 0x14]
fld qword [0x2e0036c8]
fdiv st(1), st(0)
fxch st(1)
fstp dword [ebp - 0x21c]
fld dword [ebp - 0x21c]
fstp dword [esp + 4]
fild dword [esi + 8]
fdivrp st(2)
fxch st(1)
fstp dword [ebp - 0x21c]
fld dword [ebp - 0x21c]
fimul dword [esi + 0x10]
fdivrp st(1)
fstp dword [ebp - 0x21c]
fld dword [ebp - 0x21c]
fstp dword [esp]
push ebx
push dword [ebp - 0x240]
push ebx
push 0x2e006c10
push eax
call fcn.2e05f1bc
mov ecx, dword [ebp - 0x284]
mov eax, dword [ecx]
call dword [eax + 0x58]
cmp eax, 6
jne 0x2e04174e
mov edi, dword [ebp - 0x230]
push 0xffffffffffffffff
lea eax, [ebp - 0x284]
push eax
push dword [edi + 0x40]
call fcn.2e082a02
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x244], ebx
mov eax, dword [edi + 0x40]
mov ecx, dword [eax]
lea edx, [ebp - 0x248]
push edx
push eax
mov byte [ebp - 4], 6
call dword [ecx + 0xe4]
mov eax, dword [ebp - 0x248]
cmp eax, ebx
je 0x2e041710
mov ecx, dword [eax]
lea edx, [ebp - 0x244]
push edx
push 0x2e006bf0
push eax
call dword [ecx]
mov eax, dword [ebp - 0x244]
cmp eax, ebx
je 0x2e041710
lea edx, [ebp - 0x24c]
push edx
mov dword [ebp - 0x24c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov ecx, dword [ebp - 0x24c]
cmp ecx, ebx
je 0x2e041710
mov eax, dword [esi + 0x10]
cmp eax, dword [esi + 0x14]
sete byte [ebp - 0x21d]
cmp byte [ebp - 0x21d], bl
je 0x2e041571
fld dword [0x2e0041e0]
jmp 0x2e041573
fldz
xor eax, eax
fstp dword [ebp - 0x21c]
lea edi, [ebp - 0x270]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea edx, [ebp - 0x270]
push edx
stosd dword es:[edi], eax
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
cmp dword [ebp - 0x268], 0xa
jg 0x2e0415b6
cmp dword [ebp - 0x264], 0xa
jg 0x2e0415b6
mov eax, 0x96
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], eax
mov eax, 0x190
cmp dword [ebp - 0x268], eax
mov esi, 0x258
jg 0x2e0415d0
cmp dword [ebp - 0x264], esi
jle 0x2e041632
fild dword [ebp - 0x268]
mov dword [ebp - 0x268], eax
fstp dword [ebp - 0x25c]
fild dword [ebp - 0x264]
fstp dword [ebp - 0x258]
fld dword [ebp - 0x25c]
fdivr qword [0x2e0041d8]
fmul dword [ebp - 0x258]
call fcn.2e067b51
cmp eax, esi
mov dword [ebp - 0x264], eax
jle 0x2e041632
fld dword [ebp - 0x258]
fdivr qword [0x2e0041d0]
fmul dword [ebp - 0x25c]
call fcn.2e067b51
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], esi
fld dword [ebp - 0x21c]
mov eax, dword [ebp - 0x24c]
mov edx, dword [eax]
sub esp, 0x14
push 5
pop ecx
mov edi, esp
lea esi, [ebp - 0x270]
rep movsd dword es:[edi], dword [esi]
push ecx
lea ecx, [ebp - 0x218]
fstp dword [esp]
push ecx
push eax
call dword [edx + 0xa0]
test eax, eax
jne 0x2e04170a
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
fldz
mov esi, dword [ebp - 0x230]
push ecx
push ecx
fst dword [esp + 4]
mov edi, eax
mov eax, dword [esi]
fstp dword [esp]
push edi
push esi
call dword [eax + 0x88]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp - 0x228]
mov ecx, 0x190
cmp dword [edi + 0x10], ecx
push 0xfffffffffffffffd
pop eax
jle 0x2e0416b1
mov dword [edi + 0x10], ecx
mov ecx, dword [edi + 0x10]
cmp ecx, ebx
mov dword [ebp - 0x21c], ecx
jle 0x2e0416db
fild dword [ebp - 0x21c]
fdivr qword [0x2e0036c8]
fmul qword [0x2e003690]
fadd qword [0x2e003140]
call fcn.2e067b51
mov ecx, dword [esi]
push eax
push esi
call dword [ecx + 0x184]
cmp byte [ebp - 0x21d], bl
jne 0x2e0416fd
mov eax, dword [edi + 0x14]
sub eax, dword [edi + 0x10]
cmp eax, 0xffffffff
jl 0x2e0416fd
cmp eax, 9
jle 0x2e041700
xor eax, eax
inc eax
mov ecx, dword [esi]
push eax
push esi
call dword [ecx + 0x80]
mov esi, dword [ebp - 0x228]
mov eax, dword [ebp - 0x230]
mov eax, dword [eax + 0x40]
mov ecx, dword [eax]
push ebx
push ebx
push 1
push eax
call dword [ecx + 0xbc]
mov eax, dword [ebp - 0x244]
mov byte [ebp - 4], 5
cmp eax, ebx
je 0x2e04173a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x248]
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x2e04174e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x250]
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x2e041762
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x224]
cmp eax, ebx
je 0x2e041772
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edi, [esi + 0x20]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [edi], bl
mov edi, dword [ebp - 0x234]
mov eax, dword [ebp - 0x240]
mov byte [ebp - 4], 2
cmp eax, ebx
je 0x2e041798
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [esi + 0x124]
cmp ecx, ebx
je 0x2e0417a9
push 1
call fcn.2e03f411
push esi
call fcn.2e01957b
pop ecx
mov ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x228]
push eax
push 0x206
push dword [ebp - 0x22c]
mov dword [ebp - 0x228], ebx
call fcn.2e03f593
test eax, eax
je 0x2e0412c8
mov esi, dword [ebp - 0x230]
mov eax, dword [ebp - 0x22c]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x2e0417f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov eax, dword [esi + 0x2c]
mov ecx, dword [eax]
inc dword [ebp - 0x23c]
push eax
call dword [ecx + 0x18]
inc eax
cmp dword [ebp - 0x23c], eax
jl 0x2e041211
mov eax, dword [ebp - 0x238]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x2e04182e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call fcn.2e01c4d2
ret 4