Function at 0x10009f83
Capabilities:
Delete file

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x10
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x10009f8b
call fcn.1001c480
push 1
push dword [0x10024044]
call fcn.10019224
mov ebx, eax
and ebx, ebx
jne 0x10009fb8
jmp 0x1000a319
push 0
push 0
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [esp + 0x10], eax
push 4
push 8
push dword [esp + 0x18]
call sub.KERNEL32.dll_HeapAlloc
mov dword [esp + 0x14], eax
lea eax, str.Debug
push eax
call fcn.100195b4
and eax, eax
je 0x1000a00d
push 0
lea eax, str.Cleanup
push eax
call fcn.100196a8
mov dword [0x100241f4], eax
lea eax, str.Portable
push eax
call fcn.100195b4
and eax, eax
je 0x1000a064
push edx
call fcn.1001c2e0
pop edx
push eax
push 0x1001f028
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea eax, [0x1001f028]
push eax
lea eax, str.CleanupDirectory
push eax
call fcn.10019891
call fcn.10016182
add dword [esp], edx
call fcn.10012366
lea eax, [esp + 0x1c]
push eax
call fcn.1001c380
push dword [esp + 0x18]
lea edx, [0x1001f028]
pop ecx
call fcn.10016130
je 0x1000a094
mov edx, dword [0x10023f50]
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c320
lea eax, [esp + 0x1c]
push eax
call fcn.1001c380
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.CleanupDirectory:
push edx
call fcn.1001c320
mov edx, dword [esp + 0x20]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.1000b9c1
call fcn.100161a0
push dword [esp + 0x18]
call fcn.10019eaa
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c320
lea edx, [0x1001f5d6]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.100186e0
lea eax, [esp + 0x1c]
push eax
call fcn.1001c380
push dword [esp + 0x18]
call fcn.100182d0
mov dword [esp + 0x1c], eax
lea eax, str.Cleanup
push eax
call fcn.100195b4
and eax, eax
je 0x1000a312
call fcn.100196ef
call fcn.10019719
and eax, eax
je 0x1000a312
push edx
call fcn.1001c2e0
pop edx
push eax
push 0x1001f028
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
call fcn.10019769
call fcn.10016182
add dword [esp], edx
call fcn.10012366
lea eax, [esp + 0xc]
push eax
call fcn.1001c380
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.Cleanup:
push edx
call fcn.1001c320
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.1000b9c1
call fcn.100161a0
push 0
push dword [esp + 0x1c]
push dword [esp + 0x10]
call fcn.10003964
and eax, eax
je 0x1000a1d8
xor eax, eax
jmp 0x1000a1dd
mov eax, 1
and eax, eax
je 0x1000a20d
push 0
push dword [0x10024014]
push dword [esp + 0x10]
call fcn.10003964
and eax, eax
je 0x1000a1fd
xor eax, eax
jmp 0x1000a202
mov eax, 1
and eax, eax
je 0x1000a20d
mov eax, 1
jmp 0x1000a20f
xor eax, eax
and eax, eax
je 0x1000a250
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.Cleanup:_Wrong_path_
push edx
call fcn.1001c320
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.1000b9c1
call fcn.100161a0
jmp 0x1000a140
mov edx, dword [esp + 8]
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c320
lea edx, [0x1001f22a]
push edx
call fcn.1001c320
lea eax, [esp + 8]
push eax
call fcn.1001c380
push 0
mov eax, dword [esp + 8]
mov ebx, eax
push dword [esp + 8]
call fcn.100182d0
mov edi, eax
add edi, edi
add ebx, edi
add ebx, 0xfffffffe
mov eax, ebx
call fcn.10016100
lea ebp, [esp + 0x20]
mov dword [ebp + 4], 3
mov word [ebp + 0x10], 0x414
mov eax, dword [esp + 4]
mov dword [ebp + 8], eax
lea eax, [esp + 0x20]
push eax
call sub.SHELL32.dll_SHFileOperationW
mov dword [esp + 0xc], eax
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.Cleanup:
push edx
call fcn.1001c320
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
mov eax, dword [esp + 0x1c]
cdq
push edx
push eax
call fcn.10018170
pop eax
call fcn.10016182
add dword [esp], edx
call fcn.1000b9c1
call fcn.100161a0
jmp 0x1000a140
call fcn.100196dd
xor eax, eax
push dword [esp + 0x18]
call fcn.1001c4e0
push dword [esp]
call fcn.1001c4e0
push dword [esp + 8]
call fcn.1001c4e0
push dword [esp + 4]
call fcn.1001c4e0
add esp, 0x40
pop edi
pop ebx
pop ebp
ret 0x10