Function at 0x10017370
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10033c08
mov eax, dword fs:[0]
push eax
sub esp, 0x8bc
mov eax, dword [0x10048034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x8c8], 0
mov dword [ebp - 0x864], 7
mov dword [ebp - 0x868], 0
mov word [ebp - 0x878], ax
mov dword [ebp - 4], eax
test ebx, ebx
je 0x1001775a
push ebx
lea ecx, [ebp - 0x828]
call fcn.10001690
lea edx, [ebp - 0x828]
lea ecx, [ebp - 0x8ac]
mov byte [ebp - 4], 1
call fcn.100099e0
push eax
lea ecx, [ebp - 0x828]
call fcn.1000b1e0
cmp dword [ebp - 0x898], 8
mov esi, dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
jb 0x1001741c
push dword [ebp - 0x8ac]
call esi
add esp, 4
cmp dword [ebp - 0x818], 0
jne 0x1001744c
push 0x10036bc0
mov ecx, edi
call fcn.10001690
lea ecx, [ebp - 0x828]
call fcn.100016f0
lea ecx, [ebp - 0x878]
call fcn.100016f0
jmp 0x10017792
mov dword [ebp - 0x87c], 0
mov byte [ebp - 4], 2
cmp dword [ebp - 0x814], 8
lea eax, [ebp - 0x828]
cmovae eax, dword [ebp - 0x828]
push 0
push eax
push 1
lea ecx, [ebp - 0x87c]
call fcn.1001a010
push ebx
lea ecx, [ebp - 0x87c]
call fcn.1001a1a0
lea ecx, [ebp - 0x87c]
call fcn.1001a160
push 0x80
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 1
call fcn.10019fe0
lea ecx, [ebp - 0x848]
call fcn.100161a0
lea edx, [ebp - 0x848]
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 3
call fcn.10016550
mov byte [ebp - 4], 4
cmp dword [ebp - 0x84c], 8
lea edx, [ebp - 0x860]
cmovae edx, dword [ebp - 0x860]
cmp dword [ebp - 0x814], 8
lea ecx, [ebp - 0x828]
cmovae ecx, dword [ebp - 0x828]
call fcn.100164a0
test eax, eax
je 0x100175c1
push 0x10036bc0
mov ecx, edi
call fcn.10001690
cmp dword [ebp - 0x84c], 8
jb 0x10017530
push dword [ebp - 0x860]
call esi
add esp, 4
xor eax, eax
cmp dword [ebp - 0x834], 8
mov word [ebp - 0x860], ax
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], 7
jb 0x1001755d
push dword [ebp - 0x848]
call esi
add esp, 4
xor eax, eax
cmp dword [ebp - 0x814], 8
mov word [ebp - 0x848], ax
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], 7
jb 0x1001758a
push dword [ebp - 0x828]
call esi
add esp, 4
xor eax, eax
cmp dword [ebp - 0x864], 8
mov dword [ebp - 0x814], 7
mov dword [ebp - 0x818], 0
mov word [ebp - 0x828], ax
jb 0x10017792
push dword [ebp - 0x878]
call esi
jmp 0x1001778f
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x80e]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
cmp dword [ebp - 0x834], 8
lea eax, [ebp - 0x848]
cmovae eax, dword [ebp - 0x848]
push eax
push str.http:__bd.xingcloud.com_logcollector_upload
push str._s_ts_s
lea eax, [ebp - 0x810]
push 0x400
push eax
call dword [sym.imp.MSVCR110.dll_swprintf_s]
add esp, 0x14
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x82c], 0
call fcn.100035e0
mov dword [ebp - 0x830], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0x814], 8
lea eax, [ebp - 0x828]
cmovae eax, dword [ebp - 0x828]
push eax
lea ecx, [ebp - 0x8ac]
call fcn.10001690
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 6
call fcn.10001690
push 0xc350
push 1
push 0
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x8ac]
push eax
lea edx, [ebp - 0x894]
lea ecx, [ebp - 0x8c4]
mov byte [ebp - 4], 7
call fcn.1000e920
add esp, 0x14
lea ecx, [ebp - 0x878]
push eax
call fcn.1000b1e0
cmp dword [ebp - 0x8b0], 8
jb 0x100176bb
push dword [ebp - 0x8c4]
call esi
add esp, 4
xor eax, eax
cmp dword [ebp - 0x880], 8
mov dword [ebp - 0x8b0], 7
mov dword [ebp - 0x8b4], 0
mov word [ebp - 0x8c4], ax
jb 0x100176ec
push dword [ebp - 0x894]
call esi
add esp, 4
xor eax, eax
cmp dword [ebp - 0x898], 8
mov dword [ebp - 0x880], 7
mov dword [ebp - 0x884], 0
mov word [ebp - 0x894], ax
jb 0x1001771d
push dword [ebp - 0x8ac]
call esi
add esp, 4
lea eax, [ebp - 0x878]
push eax
mov ecx, edi
call fcn.10006360
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x830]
push eax
push dword [eax]
lea eax, [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x830]
call fcn.100030f0
push dword [ebp - 0x830]
call esi
add esp, 4
jmp 0x1001751c
xor eax, eax
push eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
push 0x10036bc0
mov ecx, edi
mov word [edi], ax
call fcn.100019a0
cmp dword [ebp - 0x864], 8
jb 0x10017792
push dword [ebp - 0x878]
call dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret