Function at 0x100a6d60
Capabilities:
Delete directory
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101a94bc
mov eax, dword fs:[0]
push eax
sub esp, 0x4a0
mov eax, dword [0x1022c684]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x47c]
call fcn.100ac330
mov byte [ebp - 4], 1
push 0x101c7210
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x490]
push ecx
call fcn.10090bb0
add esp, 0xc
mov dword [ebp - 0x49c], eax
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4a0]
call fcn.10004390
push eax
lea ecx, [ebp - 0x47c]
call fcn.100ac660
mov dword [ebp - 0x480], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x490]
call fcn.10005e00
cmp dword [ebp - 0x480], 0
je 0x100a7061
lea ecx, [ebp - 0x47c]
call fcn.100ac5a0
test eax, eax
jne 0x100a704b
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x47c]
call fcn.100ac390
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x488]
push ecx
lea ecx, [ebp - 0x484]
call fcn.10005d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x484]
call fcn.100ab8e0
lea ecx, [ebp - 0x47c]
call fcn.100ac610
test eax, eax
je 0x100a6ec6
movzx edx, byte [ebp + 0xc]
test edx, edx
jne 0x100a6ec6
movzx eax, byte [ebp + 0x10]
test eax, eax
jne 0x100a6e94
push 0x5c
lea ecx, [ebp - 0x484]
call fcn.1009f6e0
push eax
push 0x101c7218
lea ecx, [ebp - 0x484]
call fcn.10004220
cmp eax, 0xffffffff
jne 0x100a6ec1
movzx ecx, byte [ebp + 0x10]
push ecx
movzx edx, byte [ebp + 0xc]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x494], esp
lea eax, [ebp - 0x488]
push eax
call fcn.10005d60
mov dword [ebp - 0x4a4], eax
call fcn.100a6d60
add esp, 0xc
jmp 0x100a702d
lea ecx, [ebp - 0x488]
call fcn.10004390
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x100a702d
push 0x5c
lea ecx, [ebp - 0x488]
call fcn.1009f6e0
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jle 0x100a6f51
mov ecx, dword [ebp - 0x48c]
add ecx, 1
push ecx
lea edx, [ebp - 0x498]
push edx
lea ecx, [ebp - 0x488]
call fcn.1001a420
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x4ac]
push ecx
lea ecx, [ebp - 0x484]
call fcn.10003ea0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x498]
call fcn.10005e00
jmp 0x100a6f63
lea edx, [ebp - 0x488]
push edx
lea ecx, [ebp - 0x484]
call fcn.10003ea0
push 0
push str..exe
lea ecx, [ebp - 0x484]
call fcn.10004220
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jle 0x100a6fbf
lea ecx, [ebp - 0x484]
call fcn.10005e60
sub eax, 4
cmp dword [ebp - 0x48c], eax
jne 0x100a6fbf
lea ecx, [ebp - 0x484]
call fcn.100ab8e0
lea ecx, [ebp - 0x484]
call fcn.100043a0
push eax
call fcn.100a9730
add esp, 4
mov dword [ebp - 0x48c], eax
push 0
push 0x101c7230
lea ecx, [ebp - 0x484]
call fcn.10004220
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jle 0x100a701b
lea ecx, [ebp - 0x484]
call fcn.10005e60
sub eax, 4
cmp dword [ebp - 0x48c], eax
jne 0x100a701b
lea ecx, [ebp - 0x484]
call fcn.100ab8e0
lea ecx, [ebp - 0x484]
call fcn.100043a0
push eax
call fcn.100a95a0
add esp, 4
mov dword [ebp - 0x48c], eax
lea ecx, [ebp - 0x488]
call fcn.10004390
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x484]
call fcn.10005e00
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x488]
call fcn.10005e00
lea ecx, [ebp - 0x47c]
call fcn.100ac820
mov dword [ebp - 0x480], eax
jmp 0x100a6dfb
lea ecx, [ebp - 0x47c]
call fcn.100ac880
lea ecx, [ebp + 8]
call fcn.10004390
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x47c]
call fcn.100ac370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.10005e00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1016f6a2
mov esp, ebp
pop ebp
ret