Function at 0x10078260
Capabilities:
Delete file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011cb8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x81c
push esi
push edi
lea edi, [ebp - 0x82c]
mov ecx, 0x207
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 4], 0
push 0x258
push 0
lea eax, [ebp - 0x270]
push eax
call fcn.100f3c30
add esp, 0xc
push 0x258
lea ecx, [ebp - 0x270]
push ecx
call fcn.10102294
add esp, 8
push 0x258
push 0
lea edx, [ebp - 0x4d0]
push edx
call fcn.100f3c30
add esp, 0xc
lea ecx, [ebx + 8]
call fcn.10069aa0
mov dword [ebp - 0x808], eax
xor eax, eax
mov byte [ebp - 0x7c5], al
xor ecx, ecx
mov byte [ebp - 0x7c6], cl
movzx edx, byte [ebp - 0x7c5]
push edx
movzx eax, byte [ebp - 0x7c6]
push eax
movzx ecx, byte [ebp - 0x7c7]
push ecx
lea ecx, [ebp - 0x4f0]
call fcn.100a8050
mov ecx, eax
call fcn.10099f00
mov dword [ebp - 0x80c], eax
mov edx, dword [ebp - 0x808]
push edx
lea eax, [ebp - 0x270]
push eax
mov ecx, dword [ebp - 0x80c]
push ecx
lea edx, [ebp - 0x4d0]
push edx
call fcn.10032100
add esp, 0x10
movzx eax, byte [0x101ca83c]
test eax, eax
jne 0x100783f4
xor ecx, ecx
mov byte [ebp - 0x7c8], cl
xor edx, edx
mov byte [ebp - 0x7c9], dl
movzx eax, byte [ebp - 0x7c8]
push eax
movzx ecx, byte [ebp - 0x7c9]
push ecx
movzx edx, byte [ebp - 0x7ca]
push edx
lea ecx, [ebp - 0x510]
call fcn.100a80b0
mov ecx, eax
call fcn.10099f00
push eax
lea eax, [ebp - 0x4d0]
push eax
call fcn.100fb0ff
add esp, 8
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0
je 0x100783ed
mov ecx, dword [ebp - 0x4f4]
push ecx
call fcn.100f68ea
add esp, 4
mov esi, esp
lea edx, [ebp - 0x4d0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, esp
call fcn.1011a7c1
nop
mov byte [0x101ca83c], 1
xor eax, eax
mov byte [ebp - 0x7cb], al
xor ecx, ecx
mov byte [ebp - 0x7cc], cl
movzx edx, byte [ebp - 0x7cb]
push edx
movzx eax, byte [ebp - 0x7cc]
push eax
movzx ecx, byte [ebp - 0x7cd]
push ecx
lea ecx, [ebp - 0x530]
call fcn.100a8110
mov ecx, eax
call fcn.10099f00
push eax
lea edx, [ebp - 0x4d0]
push edx
call fcn.100fb0ff
add esp, 8
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
je 0x100785e4
push 0
call fcn.1006b050
add esp, 4
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], edx
lea eax, [ebp - 0x540]
push eax
call fcn.1006b030
add esp, 4
mov dword [ebp - 0x548], eax
push 0x258
push 0
lea ecx, [ebp - 0x7a8]
push ecx
call fcn.100f3c30
add esp, 0xc
mov edx, dword [ebp - 0x548]
mov eax, dword [edx]
mov dword [ebp - 0x810], eax
mov ecx, dword [ebp - 0x548]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x814], edx
mov eax, dword [ebp - 0x548]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x818], ecx
xor edx, edx
mov byte [ebp - 0x7ce], dl
xor eax, eax
mov byte [ebp - 0x7cf], al
movzx ecx, byte [ebp - 0x7ce]
push ecx
movzx edx, byte [ebp - 0x7cf]
push edx
movzx eax, byte [ebp - 0x7d0]
push eax
lea ecx, [ebp - 0x7c0]
call fcn.100a8170
mov ecx, eax
call fcn.10099f00
mov dword [ebp - 0x81c], eax
mov ecx, dword [ebp - 0x810]
push ecx
mov edx, dword [ebp - 0x814]
push edx
mov eax, dword [ebp - 0x818]
push eax
mov ecx, dword [ebp - 0x81c]
push ecx
lea edx, [ebp - 0x7a8]
push edx
call fcn.10032100
add esp, 0x14
mov eax, dword [ebx + 0x20]
push eax
lea ecx, [ebp - 0x7e8]
call fcn.10069b60
mov dword [ebp - 0x820], eax
mov ecx, dword [ebp - 0x820]
mov dword [ebp - 0x824], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x824]
push edx
push 0x10173ca0
lea eax, [ebp - 0x800]
push eax
call fcn.100a8280
add esp, 0xc
mov dword [ebp - 0x828], eax
mov ecx, dword [ebp - 0x828]
call fcn.10069aa0
push eax
lea ecx, [ebp - 0x7a8]
push ecx
call fcn.10100670
add esp, 8
lea ecx, [ebp - 0x800]
call fcn.10069ad0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7e8]
call fcn.10069ad0
nop
lea edx, [ebx + 0x24]
mov dword [ebp - 0x7c4], edx
mov eax, dword [ebp - 0x7c4]
push eax
lea ecx, [ebp - 0x7a8]
push ecx
mov edx, dword [ebp - 0x514]
push edx
call fcn.1006a780
add esp, 0xc
mov dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x514]
push eax
call fcn.100f68ea
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebx + 8]
call fcn.10069ad0
nop
push edx
mov ecx, ebp
push eax
lea edx, [0x10078618]
call fcn.1011a76d
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret