Function at 0x10147cc
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x1021360]
cmp eax, 0x1021360
je 0x10147fb
test dword [eax + 0x1c], 0x20000000
je 0x10147fb
push 0x1002b3c
push 0x31
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009101
push ebx
push esi
push edi
push 1
push 0x999
push 0x100332c
lea ecx, [ebp - 0x5c]
call fcn.0100c063
or dword [ebp - 8], 0xffffffff
xor esi, esi
xor eax, eax
mov dword [ebp - 0x38], esi
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor ebx, ebx
stosd dword es:[edi], eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x20], 0x1002828
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], esi
mov eax, 0x9a5
cmp dword [ebp + 0xc], esi
jne 0x1014857
mov dword [ebp - 0x5c], 0x80070057
mov word [ebp - 0x56], ax
jmp 0x1014aad
mov word [ebp - 0x58], ax
mov eax, dword [ebp + 0x10]
cmp eax, esi
jne 0x1014869
mov eax, 0x9a6
jmp 0x1014847
mov edi, dword [ebp + 0x14]
mov ecx, 0x9a6
mov word [ebp - 0x58], cx
cmp edi, esi
jne 0x101487e
lea eax, [ecx + 1]
jmp 0x1014847
lea edx, [ebp - 0xc]
mov ecx, 0x9a7
push edx
mov word [ebp - 0x58], cx
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x5c], esi
call dword [ecx + 0x1c]
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9a9
jl 0x101484e
mov word [ebp - 0x58], ax
cmp dword [edi], esi
je 0x10148ed
lea ebx, [eax + 0xa]
push dword [ebp + 0xc]
call fcn.0100fc38
cmp eax, esi
mov dword [ebp - 0x5c], eax
jl 0x101490b
push dword [edi]
mov eax, ebx
push dword [ebp - 0xc]
mov word [ebp - 0x58], ax
push dword [ebp + 8]
call fcn.0101005c
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9b5
jl 0x101484e
add edi, 0x18
mov word [ebp - 0x58], ax
cmp dword [edi], esi
jne 0x10148ab
mov edi, dword [ebp + 0x14]
mov ebx, esi
lea eax, [ebp - 4]
push eax
call fcn.01014299
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9bc
jge 0x1014914
mov word [ebp - 0x56], ax
jmp 0x1014a92
mov word [ebp - 0x56], bx
jmp 0x1014aad
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push dword [ebp + 0xc]
push dword [ebp - 4]
call fcn.01012cda
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9bf
jl 0x1014902
mov ecx, dword [ebp - 4]
push dword [ebp + 0x10]
add ecx, 4
mov word [ebp - 0x58], ax
call fcn.01011ab6
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9c0
jl 0x1014902
jmp 0x10149b5
push dword [ebp + 0xc]
call fcn.0100fc38
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9c7
jl 0x1014902
mov word [ebp - 0x58], ax
mov eax, dword [edi + 0xc]
add eax, ebx
push eax
push ebx
push dword [ebp - 4]
call fcn.01010ea9
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9c9
jl 0x1014902
push edi
push dword [ebp - 0xc]
mov word [ebp - 0x58], ax
push dword [ebp + 8]
call fcn.01012228
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9cb
jl 0x1014902
add ebx, dword [edi + 0xc]
add edi, 0x18
mov word [ebp - 0x58], ax
cmp dword [edi], esi
jne 0x1014958
call fcn.010094af
test eax, eax
jne 0x1014a92
lea eax, [ebp - 0x20]
push eax
call fcn.01011377
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9dc
jl 0x1014902
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
mov edi, 0x1002b4c
push esi
mov edx, edi
lea ecx, [ebp - 0x20]
mov word [ebp - 0x58], ax
call fcn.0100f151
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9dd
jl 0x1014902
push esi
push 0x80
push 2
push esi
xor ebx, ebx
inc ebx
push ebx
push 0x40000000
push dword [ebp - 0x20]
mov word [ebp - 0x58], ax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
je 0x1014a3a
cmp eax, esi
jne 0x1014a4c
call fcn.0100d43e
mov dword [ebp - 0x5c], eax
mov eax, 0x9e6
jmp 0x1014902
mov ecx, 0x9e6
push eax
mov dword [ebp - 0x5c], esi
mov word [ebp - 0x58], cx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
or dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0xc]
mov dword [ebp - 0x10], ebx
push dword [ebp + 8]
mov dword [ebp - 0x38], edi
call fcn.01012228
mov dword [ebp - 0x5c], eax
cmp eax, esi
mov eax, 0x9ef
jl 0x1014902
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 4]
cmp eax, esi
je 0x1014a9f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x10], esi
je 0x1014aad
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, dword [ebp - 0x5c]
lea ecx, [ebp - 0x20]
call fcn.0100e697
cmp dword [ebp - 8], 0xffffffff
je 0x1014acc
cmp dword [ebp - 8], esi
je 0x1014acc
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc]
cmp eax, esi
je 0x1014ad9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x5c]
call fcn.0100c22a
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10