Function at 0x100cd15
Capabilities:
Delete file
Get hostname
Get session user name
Print debug messages

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x1010004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x80], eax
xor ebx, ebx
xor eax, eax
push 7
mov word [ebp - 0x24], ax
pop ecx
lea edi, [ebp - 0x22]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x8c], 0x10
mov dword [ebp - 0x7c], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp esi, ebx
je 0x100cdf4
cmp dword [ebp - 0x70], ebx
je 0x100cdf4
lea eax, [ebp - 0x84]
push eax
push 0x104
push esi
call fcn.01003c74
mov esi, eax
cmp esi, ebx
jl 0x100d714
cmp dword [ebp - 0x84], ebx
je 0x100cdf4
lea eax, [ebp - 0x88]
push eax
push 0x3c
push dword [ebp - 0x70]
call fcn.01003c74
mov esi, eax
cmp esi, ebx
jl 0x100d714
cmp dword [ebp - 0x88], ebx
jne 0x100cdfe
mov esi, 0x80070057
jmp 0x100d714
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov esi, eax
cmp esi, ebx
jl 0x100d714
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x7c], 1
call fcn.0100c4df
mov esi, eax
cmp esi, ebx
jl 0x100d714
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x1002784
call esi
mov dword [ebp - 0x6c], eax
cmp eax, ebx
je 0x100d69c
push 0x100277c
call esi
mov dword [ebp - 0x64], eax
cmp eax, ebx
je 0x100d69c
push 0x1002774
call esi
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
push 0x1002734
call esi
mov dword [ebp - 0x30], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x5c]
push edx
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xd0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x5c]
push eax
call dword [ecx + 0x54]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x5c]
cmp eax, ebx
je 0x100cec0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x5c], ebx
cmp dword [ebp - 0x28], ebx
je 0x100ced1
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
push dword [ebp - 0x30]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x78], ebx
je 0x100cf4b
push dword [ebp - 0x78]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xc8]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x58]
push eax
call dword [ecx + 0x54]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100cf3b
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x58]
cmp eax, ebx
je 0x100cf4b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x58], ebx
push 0x1002718
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x38]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xbc]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100cf8f
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x1002708
call esi
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
push 0x1002700
call esi
mov esi, eax
mov dword [ebp - 0x30], esi
cmp esi, ebx
je 0x100d69c
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 8
pop eax
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x28]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], esi
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x30], ebx
call dword [ecx + 0xd4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xb4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x2c]
push eax
call dword [ecx + 0xc0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d03c
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d04c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10026e0
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xd4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
push ebx
lea eax, [ebp - 0x50]
push eax
call fcn.0100cc03
test eax, eax
jl 0x100d0e7
push dword [ebp - 0x50]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x30], eax
cmp eax, ebx
je 0x100d69c
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x30], ebx
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xb4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x2c]
push eax
call dword [ecx + 0xc0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d112
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x50], ebx
je 0x100d12b
push dword [ebp - 0x50]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d13b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10026c4
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xd4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
push ebx
lea eax, [ebp - 0x54]
push eax
call fcn.0100c942
test eax, eax
jl 0x100d1d6
push dword [ebp - 0x54]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x30], eax
cmp eax, ebx
je 0x100d69c
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x30], ebx
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xb4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x2c]
push eax
call dword [ecx + 0xc0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d201
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x54], ebx
je 0x100d21a
push dword [ebp - 0x54]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d22a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10026a8
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xd4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
lea eax, [ebp - 0x74]
push eax
push ebx
push 2
call sub.Secur32.dll_GetUserNameExW
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
jne 0x100d319
mov eax, dword [ebp - 0x74]
lea eax, [eax + eax + 2]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
mov dword [ebp - 0x60], esi
cmp esi, ebx
je 0x100d69c
lea eax, [ebp - 0x74]
push eax
push esi
push 2
call sub.Secur32.dll_GetUserNameExW
test al, al
je 0x100d305
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x30], eax
cmp eax, ebx
je 0x100d69c
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x30], ebx
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xb4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
push dword [ebp - 0x60]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x60], ebx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x2c]
push eax
call dword [ecx + 0xc0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d344
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d354
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1002690
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xd4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x80], ebx
je 0x100d39b
push dword [ebp - 0x80]
jmp 0x100d3b4
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x100d401
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x30], eax
cmp eax, ebx
je 0x100d69c
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x30], ebx
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xb4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x2c]
push eax
call dword [ecx + 0xc0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x38]
push eax
call dword [ecx + 0x54]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d443
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d453
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x38]
push dword [ebp - 0x64]
push dword [ebp - 0x34]
call fcn.0100c582
mov esi, eax
cmp esi, ebx
jne 0x100d714
push 0x1002680
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xbc]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d4b9
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
push 0x1002660
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
push 0x17
mov dword [ebp - 0x44], eax
pop eax
lea edx, [ebp - 0x2c]
push edx
push dword [ebp - 0x28]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xd4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xb4]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x2c]
push eax
call dword [ecx + 0xc0]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x3c]
push eax
call dword [ecx + 0x54]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d567
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d577
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x100d591
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x3c], ebx
push dword [ebp - 0x38]
push dword [ebp - 0x64]
push dword [ebp - 0x34]
call fcn.0100c582
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x100264c
call edi
mov dword [ebp - 0x28], eax
cmp eax, ebx
je 0x100d69c
push dword [ebp - 0x70]
call edi
mov dword [ebp - 0x30], eax
cmp eax, ebx
je 0x100d69c
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push dword [ebp - 0x28]
push eax
call dword [ecx + 0xbc]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x30]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x6c]
mov esi, eax
cmp esi, ebx
jne 0x100d714
cmp dword [ebp - 0x28], ebx
je 0x100d615
push dword [ebp - 0x28]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x28], ebx
push dword [ebp - 0x30]
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov ecx, dword [ebp - 0x30]
cmp eax, ebx
je 0x100d62b
mov byte [ecx], bl
inc ecx
dec eax
jne 0x100d625
push dword [ebp - 0x30]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x3c]
mov dword [ebp - 0x30], ebx
push eax
call dword [ecx + 0x54]
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x100d65e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x3c], ebx
push dword [ebp - 0x38]
push dword [ebp - 0x6c]
push dword [ebp - 0x34]
call fcn.0100c582
mov esi, eax
cmp esi, ebx
jne 0x100d714
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0x88]
mov esi, eax
cmp esi, ebx
jne 0x100d714
push dword [ebp - 0x68]
call edi
mov dword [ebp - 0x30], eax
cmp eax, ebx
jne 0x100d6a3
mov esi, 0x8007000e
jmp 0x100d714
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
sub esp, 0x10
mov edi, esp
push dword [ebp - 0x34]
lea esi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x30], ebx
movsd dword es:[edi], dword [esi]
call dword [eax + 0x108]
mov esi, eax
cmp esi, ebx
jne 0x100d714
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x68]
call fcn.0100db58
mov esi, eax
cmp esi, ebx
jge 0x100d714
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x100d709
push 0x1002610
jmp 0x100d70e
push 0x10025b8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x28], ebx
je 0x100d727
push dword [ebp - 0x28]
call edi
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x30], ebx
je 0x100d731
push dword [ebp - 0x30]
call edi
cmp dword [ebp - 0x6c], ebx
je 0x100d73b
push dword [ebp - 0x6c]
call edi
cmp dword [ebp - 0x64], ebx
je 0x100d745
push dword [ebp - 0x64]
call edi
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x100d752
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x100d762
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x100d772
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x5c]
cmp eax, ebx
je 0x100d782
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x5c], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x100d792
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x58]
cmp eax, ebx
je 0x100d7a2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x54], ebx
je 0x100d7b8
push dword [ebp - 0x54]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0x50], ebx
je 0x100d7ce
push dword [ebp - 0x50]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0x60], ebx
je 0x100d7e4
push dword [ebp - 0x60]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x7c], ebx
je 0x100d7f9
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01009dc4
leave
ret 0x14