Function at 0x10273e3
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x111027c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
or dword [ebp - 0x24], 0xffffffff
mov ebx, ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027439
test byte [eax + 0x1c], 1
je 0x1027439
cmp byte [eax + 0x19], 4
jb 0x1027439
push 0x10023f8
push 0x207
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
lea eax, [ebp - 0x20]
push eax
push edi
push edi
push dword [ebx + 0x140]
call fcn.010df4ce
mov esi, eax
cmp esi, edi
jl 0x10279b4
lea eax, [ebp - 0x30]
push eax
push 0x7fffffff
push dword [ebx + 0x140]
mov dword [ebp - 0x30], edi
call fcn.01025c7f
mov esi, eax
cmp esi, edi
jl 0x10279b4
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x20]
call fcn.010d4b56
mov esi, eax
cmp esi, edi
jge 0x10274c3
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10279b9
test byte [eax + 0x1c], 1
je 0x10279b9
cmp byte [eax + 0x19], 2
jb 0x10279b9
push esi
push dword [ebp - 0x20]
push 0x10023f8
push 0x208
jmp 0x10279a9
cmp dword [ebp - 0x18], edi
je 0x1027755
xor edi, edi
cmp dword [ebp - 0x1c], edi
je 0x10274df
push dword [ebp - 0x1c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x18]
push edi
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x30]
lea eax, [ecx + eax*2 + 2]
push eax
call fcn.0107c9fc
mov esi, eax
cmp esi, edi
jl 0x10279b4
push 3
push 0x1002ae4
push dword [ebp - 0x1c]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x10275bb
xor esi, esi
cmp dword [ebx + 0xfc], edi
jbe 0x1027546
xor edi, edi
mov eax, dword [ebx + 0x7c]
push dword [edi + eax + 0x54]
call fcn.0107dd0d
test al, al
jne 0x1027544
inc esi
add edi, 0x138
cmp esi, dword [ebx + 0xfc]
jb 0x1027525
xor edi, edi
cmp esi, dword [ebx + 0xfc]
jne 0x1027721
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1027721
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027721
test byte [eax + 0x1c], 1
je 0x1027721
cmp byte [eax + 0x19], 2
jb 0x1027721
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x102759b
and eax, 0xffff
or eax, 0x80070000
push eax
mov eax, dword [0x111024c]
push 0x10023f8
push 0x209
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fa8
jmp 0x1027721
mov esi, dword [ebp - 0x1c]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x10275c3
sub eax, edx
sar eax, 1
cmp eax, 0x24
jb 0x10276f1
xor eax, eax
mov word [esi + 0x48], ax
mov esi, 0x1007124
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
jne 0x10276ca
push 4
pop ecx
mov edi, 0x1007124
lea esi, [ebp - 0x14]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x1027626
push 0x1002ec8
push 0x30a3
push 0x1002460
call fcn.0107b644
mov edx, dword [ebx + 0xfc]
and dword [ebp - 0x28], 0
test edx, edx
jbe 0x1027658
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x7c]
add eax, 0x44
push 4
pop ecx
lea edi, [ebp - 0x14]
mov esi, eax
xor ebx, ebx
repe cmpsd dword [esi], dword es:[edi]
je 0x1027658
inc dword [ebp - 0x28]
add eax, 0x138
cmp dword [ebp - 0x28], edx
jb 0x102763d
cmp dword [ebp - 0x28], edx
jne 0x1027721
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1027721
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027721
test byte [eax + 0x1c], 1
je 0x1027721
cmp byte [eax + 0x19], 2
jb 0x1027721
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10276aa
and eax, 0xffff
or eax, 0x80070000
push eax
push dword [ebp - 0x18]
mov eax, dword [0x111024c]
push 0x10023f8
push 0x20a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
jmp 0x1027721
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027721
test byte [eax + 0x1c], 1
je 0x1027721
cmp byte [eax + 0x19], 3
jb 0x1027721
push dword [ebp - 0x18]
push 0x10023f8
push 0x20b
jmp 0x1027716
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027721
test byte [eax + 0x1c], 1
je 0x1027721
cmp byte [eax + 0x19], 3
jb 0x1027721
push dword [ebp - 0x18]
push 0x10023f8
push 0x20c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
push dword [ebp - 0x18]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
push edi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x24]
mov dword [ebp - 0x18], edi
push dword [ebp - 0x20]
call fcn.010d4cff
mov esi, eax
cmp esi, edi
jl 0x10279b4
mov ebx, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jne 0x10274ce
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [ebp - 0x24], 0xffffffff
xor edi, edi
cmp dword [ebp - 0x20], edi
je 0x1027775
push dword [ebp - 0x20]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x20], edi
lea eax, [ebp - 0x20]
push eax
push edi
push edi
push edi
push dword [ebx + 0x140]
call fcn.010df384
mov esi, eax
cmp esi, edi
jl 0x10279b4
cmp dword [ebp - 0x18], edi
je 0x10277aa
push 0x1002eb0
push 0x30da
push 0x1002460
call fcn.0107b644
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x20]
call fcn.010d4b56
mov esi, eax
cmp esi, edi
jge 0x10277f8
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10279b9
test byte [eax + 0x1c], 1
je 0x10279b9
cmp byte [eax + 0x19], 3
jb 0x10279b9
push esi
push dword [ebp - 0x20]
push 0x10023f8
push 0x20d
jmp 0x10279a9
cmp dword [ebp - 0x18], edi
je 0x10279b4
mov ebx, dword [ebp - 0x30]
lea ebx, [ebx + ebx + 2]
xor edi, edi
cmp dword [ebp - 0x1c], edi
je 0x102781b
push dword [ebp - 0x1c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x1c], edi
push edi
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
add eax, ebx
push eax
call fcn.0107c9fc
mov esi, eax
cmp esi, edi
jl 0x10279b4
mov esi, dword [ebp - 0x1c]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x102783d
sub eax, edx
sar eax, 1
cmp eax, 0x24
jb 0x1027924
xor eax, eax
mov word [esi + 0x48], ax
mov esi, 0x1007124
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
jne 0x10278fd
mov edi, dword [ebp - 0x2c]
push 4
add edi, 0xd0
pop ecx
lea esi, [ebp - 0x14]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x1027954
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1027954
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027954
test byte [eax + 0x1c], 1
je 0x1027954
cmp byte [eax + 0x19], 3
jb 0x1027954
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10278dd
and eax, 0xffff
or eax, 0x80070000
push eax
push dword [ebp - 0x18]
mov eax, dword [0x111024c]
push 0x10023f8
push 0x20e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
jmp 0x1027954
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027954
test byte [eax + 0x1c], 1
je 0x1027954
cmp byte [eax + 0x19], 3
jb 0x1027954
push dword [ebp - 0x18]
push 0x10023f8
push 0x20f
jmp 0x1027949
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027954
test byte [eax + 0x1c], 1
je 0x1027954
cmp byte [eax + 0x19], 3
jb 0x1027954
push dword [ebp - 0x18]
push 0x10023f8
push 0x210
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
push dword [ebp - 0x18]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
push edi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x24]
mov dword [ebp - 0x18], edi
push dword [ebp - 0x20]
call fcn.010d4cff
mov esi, eax
cmp esi, edi
jl 0x1027983
cmp dword [ebp - 0x18], edi
jne 0x1027808
jmp 0x10279b4
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10279b9
test byte [eax + 0x1c], 1
je 0x10279b9
cmp byte [eax + 0x19], 2
jb 0x10279b9
push esi
push dword [ebp - 0x20]
push 0x10023f8
push 0x211
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
mov eax, dword [0x111024c]
xor edi, edi
cmp dword [ebp - 0x20], edi
je 0x10279ce
push dword [ebp - 0x20]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [0x111024c]
cmp dword [ebp - 0x18], edi
je 0x10279e1
push dword [ebp - 0x18]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [0x111024c]
cmp dword [ebp - 0x1c], edi
je 0x10279f4
push dword [ebp - 0x1c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [0x111024c]
cmp dword [ebp - 0x24], 0xffffffff
je 0x1027a08
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1027a30
test byte [eax + 0x1c], 1
je 0x1027a30
cmp byte [eax + 0x19], 4
jb 0x1027a30
push 0x10023f8
push 0x212
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f798
leave
ret