Function at 0x1000c340
Capabilities:
Check if file exists
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10134be8
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x101957cc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov ecx, 0x1016f2b8
mov eax, dword [ebp + 8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1000c39d
test dx, dx
je 0x1000c399
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1000c39d
add eax, 4
add ecx, 4
test dx, dx
jne 0x1000c377
xor eax, eax
jmp 0x1000c3a2
sbb eax, eax
or eax, 1
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
je 0x1000c86c
mov esi, dword [0x10195004]
push 0x3e
mov dword [ebp - 0x24], esi
call fcn.1001e484
add esp, 4
test eax, eax
je 0x1000c3f7
push 0x30
lea esi, [eax + 0xc]
mov dword [eax], 1
xor ecx, ecx
mov dword [eax + 4], 0x18
push 0x1016f310
mov dword [eax + 8], 0x18
push esi
mov word [eax + 0x3c], cx
mov dword [ebp - 0x24], esi
call fcn.100c4b90
add esp, 0xc
mov byte [ebp - 4], 1
mov edi, dword [0x10195004]
push 0x3e
mov dword [ebp - 0x28], edi
call fcn.1001e484
add esp, 4
test eax, eax
je 0x1000c442
push 0x30
lea edi, [eax + 0xc]
mov dword [eax], 1
xor ecx, ecx
mov dword [eax + 4], 0x18
push str.FoxitWordStrokeHelperx86
mov dword [eax + 8], 0x18
push edi
mov word [eax + 0x3c], cx
mov dword [ebp - 0x28], edi
call fcn.100c4b90
add esp, 0xc
mov eax, dword [0x10195004]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
push esi
mov byte [ebp - 4], 4
lea eax, [ebp - 0x20]
push dword [ebp + 8]
push str._s_s.dll
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10007e90
add esp, 0x14
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff4
mov dword [ebp - 0x20], eax
cmp eax, dword [section..data]
je 0x1000c491
push eax
call ebx
test eax, eax
jg 0x1000c491
push dword [ebp - 0x20]
call fcn.1001e47f
add esp, 4
push edi
mov byte [ebp - 4], 4
lea eax, [ebp - 0x20]
push dword [ebp + 8]
push str._s_s.dll
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10007e90
add esp, 0x14
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff4
mov dword [ebp - 0x20], eax
cmp eax, dword [section..data]
je 0x1000c4d5
push eax
call ebx
test eax, eax
jg 0x1000c4d5
push dword [ebp - 0x20]
call fcn.1001e47f
add esp, 4
push dword [ebp - 0x1c]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000c65a
xor ecx, ecx
mov dword [ebp - 0x20], ecx
nop dword [eax + eax]
mov eax, dword [0x10195004]
mov dword [ebp - 0x14], eax
push ecx
push esi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2c]
push dword [ebp + 8]
push str._s_s__d.dll
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10007e90
add esp, 0x18
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff4
mov dword [ebp - 0x30], eax
cmp eax, dword [section..data]
je 0x1000c53d
push eax
call ebx
test eax, eax
jg 0x1000c53d
push dword [ebp - 0x30]
call fcn.1001e47f
add esp, 4
mov byte [ebp - 4], 7
push dword [ebp - 0x14]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000c597
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1000c597
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff4
mov dword [ebp - 0x30], eax
cmp eax, dword [section..data]
je 0x1000c582
push eax
call ebx
test eax, eax
jg 0x1000c582
push dword [ebp - 0x30]
call fcn.1001e47f
add esp, 4
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0xa
jl 0x1000c4f0
jmp 0x1000c65a
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1001e5d5
mov ebx, eax
push 0
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1001e5d5
push dword [ebx]
push dword [eax]
call fcn.100e3046
add esp, 0x20
test eax, eax
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x30]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c5fa
push eax
call ebx
test eax, eax
jg 0x1000c5fa
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c621
push eax
call ebx
test eax, eax
jg 0x1000c621
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
cmp byte [ebp - 0xd], 0
je 0x1000c62d
mov byte [ebp - 4], 0xd
jmp 0x1000c637
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff4
mov dword [ebp - 0x30], eax
cmp eax, dword [section..data]
je 0x1000c65a
push eax
call ebx
test eax, eax
jg 0x1000c65a
push dword [ebp - 0x30]
call fcn.1001e47f
add esp, 4
push dword [ebp - 0x18]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000c7da
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [0x10195004]
mov dword [ebp - 0x14], eax
push ecx
push edi
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x30]
push dword [ebp + 8]
push str._s_s__d.dll
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10007e90
add esp, 0x18
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c6bd
push eax
call ebx
test eax, eax
jg 0x1000c6bd
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
mov byte [ebp - 4], 0xf
push dword [ebp - 0x14]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000c717
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1000c717
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c702
push eax
call ebx
test eax, eax
jg 0x1000c702
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x64
jl 0x1000c670
jmp 0x1000c7da
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1001e5d5
mov ebx, eax
push 0
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1001e5d5
push dword [ebx]
push dword [eax]
call fcn.100e3046
add esp, 0x20
test eax, eax
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x30]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c77a
push eax
call ebx
test eax, eax
jg 0x1000c77a
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c7a1
push eax
call ebx
test eax, eax
jg 0x1000c7a1
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
cmp byte [ebp - 0xd], 0
je 0x1000c7ad
mov byte [ebp - 4], 0x15
jmp 0x1000c7b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c7da
push eax
call ebx
test eax, eax
jg 0x1000c7da
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x18]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c807
push eax
call ebx
test eax, eax
jg 0x1000c807
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff4
mov dword [ebp - 0x2c], eax
cmp eax, dword [section..data]
je 0x1000c82e
push eax
call ebx
test eax, eax
jg 0x1000c82e
push dword [ebp - 0x2c]
call fcn.1001e47f
add esp, 4
add edi, 0xfffffff4
mov byte [ebp - 4], 0x19
cmp edi, dword [section..data]
je 0x1000c84d
push edi
call ebx
test eax, eax
jg 0x1000c84d
push edi
call fcn.1001e47f
add esp, 4
add esi, 0xfffffff4
mov byte [ebp - 4], 0x1a
cmp esi, dword [section..data]
je 0x1000c86c
push esi
call ebx
test eax, eax
jg 0x1000c86c
push esi
call fcn.1001e47f
add esp, 4
mov dword [ebp - 4], 0x1b
mov esi, dword [ebp + 8]
add esi, 0xfffffff4
cmp esi, dword [section..data]
je 0x1000c891
push esi
call ebx
test eax, eax
jg 0x1000c891
push esi
call fcn.1001e47f
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret