Function at 0x1000b200
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1015f0b0
mov eax, dword fs:[0]
push eax
mov eax, 0x1064
call fcn.1015dc90
mov eax, dword [0x101ed004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov edx, dword [edi + 0x60]
mov eax, edx
mov ecx, dword [edi + 0x64]
or eax, ecx
je 0x1000b254
cmp dword [edi + 0x418], edx
jne 0x1000b254
cmp dword [edi + 0x41c], ecx
je 0x1000b681
cmp dword [edi + 0x70], 0
je 0x1000b2ca
mov ecx, dword [edi + 0x3f4]
test ecx, ecx
je 0x1000b28e
mov eax, dword [ecx]
mov eax, dword [eax + 0x48]
call eax
test edx, edx
jl 0x1000b28e
jg 0x1000b276
cmp eax, 0xffffffff
jb 0x1000b28e
push 0
push 0
push 0xa0000405
lea ecx, [edi + 8]
call fcn.1000baa0
xor eax, eax
jmp 0x1000b686
cmp dword [edi + 0x70], 0
je 0x1000b2ca
mov eax, dword [edi + 0x420]
test eax, eax
jle 0x1000b2bf
push eax
movzx eax, word [edi + 0x40c]
push eax
push 0x101d1f1c
push 0xffff
push dword [edi + 0x408]
call fcn.1000d3a0
add esp, 0x14
mov ebx, dword [edi + 0x404]
jmp 0x1000b414
cmp dword [edi + 0x40], 0xa
jne 0x1000b38a
cmp dword [edi + 0x3f4], 0
je 0x1000b40e
cmp dword [edi + 0x420], 1
jl 0x1000b40e
jne 0x1000b345
push 1
push str.._03d
push 0xffff
push dword [edi + 0x410]
call fcn.1000d3a0
add esp, 0x10
push dword [edi + 0x404]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [edi + 0x404]
mov ecx, dword [edi + 0x3f4]
call fcn.100264c0
test eax, eax
je 0x1000b3e0
mov ecx, dword [edi + 0xf0]
test ecx, ecx
je 0x1000b345
push dword [edi + 0x404]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x18]
mov eax, dword [edi + 0x420]
inc eax
push eax
push str.._03d
push 0xffff
push dword [edi + 0x410]
call fcn.1000d3a0
mov ecx, dword [edi + 0xf0]
add esp, 0x10
test ecx, ecx
je 0x1000b2bf
push dword [edi + 0x404]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x18]
mov ebx, dword [edi + 0x404]
jmp 0x1000b414
cmp dword [edi + 0x3f4], 0
je 0x1000b40e
mov eax, dword [edi + 0x420]
cmp eax, 1
jl 0x1000b40e
push eax
movzx eax, word [edi + 0x40c]
push eax
push 0x101d1f1c
push 0xffff
push dword [edi + 0x408]
call fcn.1000d3a0
add esp, 0x14
push dword [edi + 0x404]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [edi + 0x404]
mov ecx, dword [edi + 0x3f4]
call fcn.100264c0
test eax, eax
jne 0x1000b3f8
push 0
push 0
push 0xa0000080
lea ecx, [edi + 8]
call fcn.1000baa0
xor eax, eax
jmp 0x1000b686
mov ecx, dword [edi + 0xf0]
test ecx, ecx
je 0x1000b40e
push dword [edi + 0x404]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x18]
mov ebx, dword [edi + 0x400]
push 0x158
call fcn.101427a2
add esp, 4
mov esi, eax
mov dword [ebp - 0x106c], esi
push 0x158
push 0
push esi
call fcn.10143f10
add esp, 0xc
lea eax, [edi + 0x158]
mov ecx, esi
push eax
call fcn.10025b90
mov ecx, dword [edi + 0x60]
mov esi, eax
or ecx, dword [edi + 0x64]
mov eax, 1
mov dword [ebp - 0x106c], esi
mov dword [ebp - 0x1014], 0
je 0x1000b46f
cmp dword [edi + 0x3e4], 0
je 0x1000b471
xor eax, eax
push 0
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x1014]
mov ecx, esi
push eax
push ebx
call fcn.10025d20
test eax, eax
jne 0x1000b4b6
push eax
push ebx
push dword [ebp - 0x1014]
lea ecx, [edi + 8]
call fcn.1000baa0
test esi, esi
je 0x1000b6e6
mov eax, dword [esi + 4]
lea ecx, [esi + 4]
push 1
call dword [eax]
xor eax, eax
jmp 0x1000b686
mov eax, dword [edi + 0x3ec]
lea ecx, [edi + 0x3e8]
cmp eax, dword [ecx + 8]
je 0x1000b4cf
mov dword [eax], esi
add dword [ecx + 4], 4
jmp 0x1000b4dc
lea edx, [ebp - 0x106c]
push edx
push eax
call fcn.1000ce80
cmp dword [edi + 0x70], 0
mov eax, dword [edi + 0x60]
mov ecx, dword [edi + 0x64]
mov dword [edi + 0x3f4], esi
mov dword [edi + 0x418], eax
mov dword [edi + 0x41c], ecx
je 0x1000b67b
cmp dword [edi + 0x40], 0
je 0x1000b51c
push 0
push 0
push 0xa0000408
lea ecx, [edi + 8]
call fcn.1000baa0
xor eax, eax
jmp 0x1000b686
cmp dword [edi + 0x420], 0
jne 0x1000b67b
push 0x50
lea eax, [ebp - 0x1068]
push 0
push eax
call fcn.10143f10
add esp, 8
lea eax, [edi + 0x158]
lea ecx, [ebp - 0x1068]
push eax
call fcn.100123b0
push 1
mov dword [ebp - 4], 0
push dword [edi + 0x70]
call fcn.100125f0
test eax, eax
je 0x1000b6a2
xor edx, edx
lea ecx, [ebp - 0x1068]
call fcn.10002550
mov esi, eax
test edx, edx
jl 0x1000b6a2
jg 0x1000b588
test esi, esi
je 0x1000b6a2
mov ecx, 0x1000
mov dword [ebp - 0x1024], 0
cmp esi, ecx
mov dword [ebp - 0x1014], 0
mov eax, esi
cmovg eax, ecx
test eax, eax
je 0x1000b605
lea ecx, [ebp - 0x1014]
push ecx
push eax
lea eax, [ebp - 0x1010]
push eax
lea ecx, [ebp - 0x1068]
call fcn.100127e0
mov ebx, dword [ebp - 0x1014]
test ebx, ebx
je 0x1000b605
test eax, eax
je 0x1000b605
mov ecx, dword [ebp - 0x102c]
test ecx, ecx
je 0x1000b5ea
mov eax, dword [ecx]
lea edx, [ebp - 0x1010]
push ebx
push edx
call dword [eax]
push 1
push 1
push ebx
lea eax, [ebp - 0x1010]
mov ecx, edi
push eax
call fcn.1000c020
test eax, eax
je 0x1000b61b
sub esi, ebx
jmp 0x1000b588
push 1
push 1
push 0xc
push str.BANDIZIPSFX
mov ecx, edi
call fcn.1000c020
test eax, eax
jne 0x1000b625
mov eax, 0xa0000030
jmp 0x1000b6a7
cmp dword [edi + 0x414], 0
je 0x1000b649
cmp dword [edi + 0x41c], 0
jg 0x1000b649
jl 0x1000b642
cmp dword [edi + 0x418], 0
ja 0x1000b649
mov eax, 0xa0000409
jmp 0x1000b6a7
lea ecx, [ebp - 0x1068]
mov dword [ebp - fcn.10002f70], vtable.CArkWinIn.1.0
mov dword [ebp - method.CArkWinIn.virtual_0], vtable.CArkWinIn.0
call fcn.10012cc0
mov eax, dword [ebp - 0x1054]
test eax, eax
je 0x1000b67b
push eax
call fcn.10146720
add esp, 4
inc dword [edi + 0x420]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10142783
mov esp, ebp
pop ebp
ret
mov eax, 0xa0000404
push 0
push 0
push eax
lea ecx, [edi + 8]
call fcn.1000baa0
lea ecx, [ebp - 0x1068]
mov dword [ebp - fcn.10002f70], vtable.CArkWinIn.1.0
mov dword [ebp - method.CArkWinIn.virtual_0], vtable.CArkWinIn.0
call fcn.10012cc0
mov eax, dword [ebp - 0x1054]
test eax, eax
je 0x1000b6e6
push eax
call fcn.10146720
add esp, 4
xor eax, eax
jmp 0x1000b686