Function at 0x10071120
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1014b013
mov eax, dword fs:[0]
push eax
sub esp, 0x254
mov eax, dword [0x1018d0d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x250], ecx
mov esi, dword [eax]
mov eax, dword [eax + 4]
sub esi, 0x28de80
mov dword [ebp - 0x254], esi
sbb eax, 0
mov dword [ebp - 0x258], eax
call fcn.10075520
mov ebx, eax
test ebx, ebx
je 0x1007139a
mov ecx, ebx
mov edi, ebx
call fcn.100756b0
push 0x101566d8
mov ecx, edi
mov ebx, eax
call fcn.10074d10
lea ecx, [ebp - 0x23c]
push 0xfde9
mov dword [ebp - 0x240], ecx
lea ecx, [ebp - 0x240]
push eax
call fcn.10069910
mov edx, dword [ebp - 0x240]
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0
cmp word [edx], ax
jne 0x100711e1
xor ecx, ecx
jmp 0x100711fb
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100711e6
sub ecx, esi
mov esi, dword [ebp - 0x254]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.1000c2b0
mov eax, dword [ebp - 0x240]
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 2
cmp eax, ecx
je 0x10071222
push eax
call fcn.1011bc41
add esp, 4
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
fldz
mov ecx, 0x101790e8
cmovae eax, dword [ebp - 0x28]
test eax, eax
mov dword [ebp - 0x244], 0
fstp qword [ebp - 0x24c]
cmovne ecx, eax
lea eax, [ebp - 0x24c]
push eax
push 0
push 0x400
push ecx
call dword [sym.imp.OLEAUT32.dll_VarDateFromDisp]
test eax, eax
jns 0x1007129b
cmp eax, 0x80020005
jne 0x10071280
fldz
fstp qword [ebp - 0x24c]
mov dword [ebp - 0x244], 1
jmp 0x1007137a
fld qword [0x1017a1f0]
fstp qword [ebp - 0x24c]
mov dword [ebp - 0x244], 1
jmp 0x1007137a
fld qword [ebp - 0x24c]
lea eax, [ebp - 0x38]
push eax
sub esp, 8
mov dword [ebp - 0x244], 0
fstp qword [esp]
call dword [sym.imp.OLEAUT32.dll_UnRegisterTypeLib]
mov cx, word [ebp - 0x38]
mov eax, 0x76c
cmp cx, ax
jae 0x100712cf
xor ecx, ecx
xor eax, eax
jmp 0x10071305
movzx eax, word [ebp - 0x2c]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x2e]
push eax
movzx eax, word [ebp - 0x30]
push eax
movzx eax, word [ebp - 0x32]
push eax
movzx eax, word [ebp - 0x36]
push eax
movzx eax, cx
lea ecx, [ebp - 0x260]
push eax
call fcn.10067470
mov ecx, dword [ebp - 0x260]
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x258]
jg 0x1007131a
jl 0x10071313
cmp ecx, esi
jae 0x1007131a
mov eax, 1
jmp 0x1007131c
xor eax, eax
test al, al
je 0x1007137a
push str.path
mov ecx, edi
call fcn.10074d10
lea ecx, [ebp - 0x138]
push 0xfde9
mov dword [ebp - 0x13c], ecx
lea ecx, [ebp - 0x13c]
push eax
call fcn.10069910
push dword [ebp - 0x13c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x13c]
lea ecx, [ebp - 0x138]
cmp eax, ecx
je 0x1007136e
push eax
call fcn.1011bc41
add esp, 4
mov ecx, dword [ebp - 0x250]
push edi
call fcn.10075d20
cmp dword [ebp - 0x14], 8
mov dword [ebp - 4], 0xffffffff
jb 0x10071392
push dword [ebp - 0x28]
call fcn.1011a1ea
add esp, 4
test ebx, ebx
jne 0x10071183
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1011a3e5
mov esp, ebp
pop ebp
ret 8