Function at 0x100a33a0
Capabilities:
Delete directory
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1019f5fc
mov eax, dword fs:[0]
push eax
sub esp, 0x4a0
mov eax, dword [0x10222354]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x47c]
call fcn.100aa370
mov byte [ebp - 4], 1
push 0x101bc500
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x490]
push ecx
call fcn.1008d070
add esp, 0xc
mov dword [ebp - 0x49c], eax
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4a0]
call fcn.10007f90
push eax
lea ecx, [ebp - 0x47c]
call fcn.100aa6a0
mov dword [ebp - 0x480], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x490]
call fcn.1000ba80
cmp dword [ebp - 0x480], 0
je 0x100a36a1
lea ecx, [ebp - 0x47c]
call fcn.100aa5e0
test eax, eax
jne 0x100a368b
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x47c]
call fcn.100aa3d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x488]
push ecx
lea ecx, [ebp - 0x484]
call fcn.1000b9e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x484]
call fcn.100a7f00
lea ecx, [ebp - 0x47c]
call fcn.100aa650
test eax, eax
je 0x100a3506
movzx edx, byte [ebp + 0xc]
test edx, edx
jne 0x100a3506
movzx eax, byte [ebp + 0x10]
test eax, eax
jne 0x100a34d4
push 0x5c
lea ecx, [ebp - 0x484]
call fcn.1009bd70
push eax
push 0x101bc508
lea ecx, [ebp - 0x484]
call fcn.10007e20
cmp eax, 0xffffffff
jne 0x100a3501
movzx ecx, byte [ebp + 0x10]
push ecx
movzx edx, byte [ebp + 0xc]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x494], esp
lea eax, [ebp - 0x488]
push eax
call fcn.1000b9e0
mov dword [ebp - 0x4a4], eax
call fcn.100a33a0
add esp, 0xc
jmp 0x100a366d
lea ecx, [ebp - 0x488]
call fcn.10007f90
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x100a366d
push 0x5c
lea ecx, [ebp - 0x488]
call fcn.1009bd70
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jle 0x100a3591
mov ecx, dword [ebp - 0x48c]
add ecx, 1
push ecx
lea edx, [ebp - 0x498]
push edx
lea ecx, [ebp - 0x488]
call fcn.1001df90
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x4ac]
push ecx
lea ecx, [ebp - 0x484]
call fcn.10007b80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x498]
call fcn.1000ba80
jmp 0x100a35a3
lea edx, [ebp - 0x488]
push edx
lea ecx, [ebp - 0x484]
call fcn.10007b80
push 0
push str..exe
lea ecx, [ebp - 0x484]
call fcn.10007e20
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jle 0x100a35ff
lea ecx, [ebp - 0x484]
call fcn.1000bae0
sub eax, 4
cmp dword [ebp - 0x48c], eax
jne 0x100a35ff
lea ecx, [ebp - 0x484]
call fcn.100a7f00
lea ecx, [ebp - 0x484]
call fcn.10007fa0
push eax
call fcn.100a5b50
add esp, 4
mov dword [ebp - 0x48c], eax
push 0
push 0x101bc520
lea ecx, [ebp - 0x484]
call fcn.10007e20
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jle 0x100a365b
lea ecx, [ebp - 0x484]
call fcn.1000bae0
sub eax, 4
cmp dword [ebp - 0x48c], eax
jne 0x100a365b
lea ecx, [ebp - 0x484]
call fcn.100a7f00
lea ecx, [ebp - 0x484]
call fcn.10007fa0
push eax
call fcn.100a59c0
add esp, 4
mov dword [ebp - 0x48c], eax
lea ecx, [ebp - 0x488]
call fcn.10007f90
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x484]
call fcn.1000ba80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x488]
call fcn.1000ba80
lea ecx, [ebp - 0x47c]
call fcn.100aa860
mov dword [ebp - 0x480], eax
jmp 0x100a343b
lea ecx, [ebp - 0x47c]
call fcn.100aa8c0
lea ecx, [ebp + 8]
call fcn.10007f90
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x47c]
call fcn.100aa3b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.1000ba80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10165d18
mov esp, ebp
pop ebp
ret