Function at 0x10126a5
Capabilities:
Delete file
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x470
mov eax, dword [0x1030118]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
inc edi
xor ebx, ebx
mov dword [ebp - 0x468], edi
cmp dword [0x1035904], ebx
je 0x1012603
mov ecx, dword [ebp + 8]
cmp dword [0x1030024], ecx
jne 0x10122e3
xor esi, esi
jmp 0x10127a6
mov eax, ecx
sub eax, ebx
je 0x10123e6
dec eax
je 0x1012352
dec eax
je 0x101232c
dec eax
je 0x101255a
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012603
test byte [eax + 0x1c], 1
je 0x1012603
push ecx
push reloc.KERNEL32.dll_SetFilePointer
push TlsFree
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010062be
jmp 0x1012603
push dword [0x1035900]
call fcn.010110b5
push edi
push dword [0x1035900]
call fcn.01011014
mov dword [ebp - 0x45c], 0x1030078
jmp 0x101257b
mov eax, dword [0x103591c]
cmp eax, ebx
je 0x101236e
push eax
push dword [0x1035900]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x103591c], ebx
mov eax, dword [0x1035920]
cmp eax, ebx
je 0x101238a
push eax
push dword [0x1035900]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x1035920], ebx
push ebx
call fcn.01011795
push edi
push dword [0x1035900]
call fcn.0101107c
push edi
push dword [0x1035900]
call fcn.01011014
mov eax, dword [0x1035b60]
cmp eax, ebx
je 0x10123bd
push eax
call fcn.01022ebc
mov dword [0x1035b60], ebx
push VariantCopy
push ebx
push ebx
push ebx
push ebx
push 0xfffffffffffffffe
push dword [0x1035900]
mov dword [ebp - 0x45c], 0x1030028
mov dword [ebp - 0x460], ebx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x1012581
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push 0x103590c
call esi
push 0x1035914
call esi
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0x3e8
push edi
push dword [0x1035900]
mov dword [0x1035b48], ebx
call esi
mov dword [0x103591c], eax
cmp eax, ebx
jne 0x1012473
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jne 0x101242f
mov eax, 0x54f
cmp eax, ebx
mov esi, eax
jle 0x101243f
and esi, 0xffff
or esi, 0x80070000
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x10127ab
test byte [ecx + 0x1c], 1
je 0x10127ab
push eax
push reloc.KERNEL32.dll_SetFilePointer
push 0x1c
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010062be
jmp 0x10127ab
push ebx
push 0x1f4
push 2
push dword [0x1035900]
call esi
mov dword [0x1035920], eax
cmp eax, ebx
jne 0x10124b0
mov eax, dword [section..data]
cmp eax, section..data
je 0x10124b0
test byte [eax + 0x1c], 2
je 0x10124b0
push reloc.KERNEL32.dll_SetFilePointer
push 0x1d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010054b7
push VariantCopy
push ebx
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push dword [0x1035900]
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.0100634b
mov dword [ebp - 0x468], eax
cmp eax, ebx
jne 0x101255a
mov esi, dword [0x1035930]
mov ecx, 0x115
lea edi, [ebp - 0x458]
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x420], 0xffffffff
jne 0x1012557
xor eax, eax
lea edi, [ebp - 0x470]
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x470], eax
mov eax, dword [0x1035900]
mov dword [ebp - 0x46c], eax
push 0x1035b60
lea eax, [ebp - 0x470]
push eax
call fcn.01023b06
cmp eax, ebx
je 0x1012557
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x1012551
test byte [ecx + 0x1c], 1
je 0x1012551
push eax
push reloc.KERNEL32.dll_SetFilePointer
push 0x1e
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010062be
mov dword [0x1035b60], ebx
xor edi, edi
inc edi
push dword [0x1035900]
call fcn.010110d0
push ebx
push dword [0x1035900]
call fcn.01011014
mov dword [ebp - 0x45c], 0x1030064
mov dword [ebp - 0x460], edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0x45c], ebx
je 0x101260d
push ebx
push dword [0x1035b40]
push 0x416
push dword [0x1035904]
call esi
test eax, eax
jne 0x10125c2
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012603
test byte [eax + 0x1c], 1
je 0x1012603
push reloc.KERNEL32.dll_SetFilePointer
push reloc.KERNEL32.dll_TlsFree
jmp 0x10125f8
push dword [ebp - 0x45c]
push dword [0x1035b40]
push 0x443
push dword [0x1035904]
call esi
test eax, eax
jne 0x101260d
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012603
test byte [eax + 0x1c], 1
je 0x1012603
push reloc.KERNEL32.dll_SetFilePointer
push GdipAlloc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010054b7
mov esi, 0x80004005
jmp 0x10127a6
cmp dword [ebp + 8], 1
mov edi, 0x401
lea ebx, [edi - 0x13]
jne 0x1012631
mov dword [ebp - 0x45c], 0x1030050
mov dword [ebp - 0x464], 0x3ea
jmp 0x101264b
cmp dword [ebp + 8], 0
jne 0x101270a
mov dword [ebp - 0x45c], 0x10300a0
mov dword [ebp - 0x464], ebx
push 0
push dword [0x1035b44]
push 0x416
push dword [0x1035904]
call esi
test eax, eax
jne 0x1012692
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012688
test byte [eax + 0x1c], 1
je 0x1012688
push reloc.KERNEL32.dll_SetFilePointer
push reloc.USER32.dll_SetWindowPos
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010054b7
mov esi, 0x80004005
jmp 0x10127a4
push dword [ebp - 0x45c]
push dword [0x1035b44]
push 0x443
push dword [0x1035904]
call esi
test eax, eax
jne 0x10126ca
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012688
test byte [eax + 0x1c], 1
je 0x1012688
push reloc.KERNEL32.dll_SetFilePointer
push 0x23
jmp 0x101267d
cmp dword [ebp - 0x464], ebx
jne 0x101270a
xor eax, eax
cmp dword [ebp - 0x468], eax
sete al
push eax
push ebx
push edi
push dword [0x1035904]
call esi
test eax, eax
jne 0x101270a
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012688
test byte [eax + 0x1c], 1
je 0x1012688
push reloc.KERNEL32.dll_SetFilePointer
push 0x24
jmp 0x101267d
movzx ebx, word [ebp - 0x460]
push ebx
push 0x3e9
push edi
push dword [0x1035904]
call esi
test eax, eax
jne 0x101274a
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012688
test byte [eax + 0x1c], 1
je 0x1012688
push reloc.KERNEL32.dll_SetFilePointer
push 0x25
jmp 0x101267d
push ebx
push 0x3ed
push edi
push dword [0x1035904]
call esi
test eax, eax
jne 0x1012783
mov eax, dword [section..data]
cmp eax, section..data
je 0x1012688
test byte [eax + 0x1c], 1
je 0x1012688
push reloc.KERNEL32.dll_SetFilePointer
push 0x26
jmp 0x101267d
push dword [0x1035900]
call fcn.01010a42
push dword [0x1035904]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [ebp + 8]
mov dword [0x1030024], eax
xor esi, esi
xor ebx, ebx
cmp dword [ebp + 8], ebx
jne 0x10127fc
cmp esi, ebx
jge 0x10127fc
mov eax, dword [0x103591c]
cmp eax, ebx
je 0x10127cb
push eax
push dword [0x1035900]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x103591c], ebx
mov eax, dword [0x1035920]
cmp eax, ebx
je 0x10127e7
push eax
push dword [0x1035900]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x1035920], ebx
mov eax, dword [0x1035b60]
cmp eax, ebx
je 0x10127fc
push eax
call fcn.01022ebc
mov dword [0x1035b60], ebx
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0101bc5d
leave
ret 4