Function at 0x100f6a8
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x230
mov eax, dword [0x10161d4]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x220], 1
call fcn.0101057d
test edi, edi
je 0x100f9b7
test esi, esi
je 0x100f9b7
push 8
mov esi, 0x1048
push esi
lea ecx, [ebp - 0x230]
call fcn.01010647
test eax, eax
mov dword [ebp - 0x218], eax
jne 0x100f71e
mov edi, 0x8007000e
jmp 0x100f9bc
push 0x100
push 0
push 0
push edi
push esi
push 0x824
push eax
call fcn.01005a33
mov edi, eax
test edi, edi
jl 0x100f9bc
push ebx
mov dword [ebp - 0x21c], 3
mov esi, 0x105
mov ebx, 0x100286c
xor eax, eax
cmp dword [ebp + 0x18], eax
je 0x100f785
push 0x100
push eax
push eax
push dword [ebp - 0x214]
lea eax, [ebp - 0x210]
push 0x20a
push esi
push eax
call fcn.01005a33
mov edi, eax
test edi, edi
jl 0x100f9b4
jmp 0x100f7cb
push 0x1002860
push dword [ebp - 0x214]
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0100e6d7
mov edi, eax
test edi, edi
jl 0x100f9b4
cmp dword [ebp - 0x220], 0
je 0x100f7cb
lea eax, [ebp - 0x210]
push eax
call fcn.0101035a
test eax, eax
je 0x100f97a
and dword [ebp - 0x220], 0
push 0
push dword [ebp + 0x14]
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x218]
push ebx
push dword [ebp - 0x224]
call fcn.0100f47e
mov edi, eax
test edi, edi
jge 0x100f85b
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x218]
push ebx
push 0x1002900
push edi
call fcn.01013512
add esp, 0x14
push ebx
push dword [ebp - 0x214]
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0100e6d7
test eax, eax
jl 0x100f9b4
cmp dword [ebp + 0x18], 0
je 0x100f9a6
lea eax, [ebp - 0x210]
push eax
call fcn.01010233
test eax, eax
je 0x100f9a6
push dword [ebp - 0x214]
push ebx
push 0x10028cc
call fcn.010134f6
add esp, 0xc
jmp 0x100f8d5
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push ebx
push 0x10028ac
call fcn.010134f6
add esp, 0x10
cmp dword [ebp + 0x18], 0
jne 0x100f8c1
push 0x1002860
push dword [ebp - 0x214]
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0100e6d7
push ebx
push esi
lea eax, [ebp - 0x210]
push eax
call fcn.0100e83d
mov edi, eax
test edi, edi
jl 0x100f9b4
lea eax, [ebp - 0x210]
push eax
call fcn.0100f161
mov edi, eax
test edi, edi
jl 0x100f9a6
push ebx
push dword [ebp - 0x214]
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0100e6d7
push 0
push 0
lea eax, [ebp - 0x210]
push eax
call fcn.01013d10
mov edi, eax
test edi, edi
lea eax, [ebp - 0x210]
jl 0x100f988
mov edi, 0x1002848
push edi
push dword [ebp - 0x214]
push eax
call fcn.01010266
test eax, eax
je 0x100f97a
push edi
push dword [ebp - 0x214]
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0100e6d7
mov edi, eax
test edi, edi
jl 0x100f9b4
push 0x824
push dword [ebp - 0x218]
lea eax, [ebp - 0x210]
push eax
call fcn.0100f45d
mov edi, eax
test edi, edi
jl 0x100f9a6
cmp edi, 1
je 0x100f9a4
mov eax, dword [ebp - 0x218]
cmp word [eax], 0
je 0x100f9a4
push 0
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x100f99d
dec dword [ebp - 0x21c]
jns 0x100f753
jmp 0x100f9a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jg 0x100f991
mov edi, eax
jmp 0x100f9b4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x100f9b4
and eax, 0xffff
or eax, 0x80070000
jmp 0x100f984
mov edi, 0x80004004
jmp 0x100f9a6
xor edi, edi
cmp dword [ebp - 0x21c], 0
jge 0x100f9b4
mov edi, 0x80004005
pop ebx
jmp 0x100f9bc
mov edi, 0x80070057
lea ecx, [ebp - 0x230]
call fcn.0101059b
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
call fcn.0100c0c3
leave
ret 0x14