Function at 0x1000c50b
Capabilities:
Delete file

Disassembly:
push 0x40
mov eax, 0x10084391
call fcn.1006a09e
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
push eax
mov ecx, 0x10099908
call fcn.10002a34
push ecx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x28], esp
mov esi, esp
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push eax
mov ecx, 0x10099954
call fcn.10002a34
push esi
call fcn.10007c00
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea esi, [ebp - 0x1c]
call fcn.10009d65
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x1c]
add esp, 4
add eax, 0xfffffff0
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x30], esp
mov esi, esp
call fcn.10002aac
add eax, 0x10
mov dword [esi], eax
call fcn.10007b09
pop ecx
test al, al
je 0x1000c78b
mov dword [ebp - 0x18], edi
push 3
push ebx
push closesocket
mov byte [ebp - 4], 2
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
call fcn.1000b010
test eax, eax
jne 0x1000c76e
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x3c]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], edi
call fcn.1000afda
mov ebx, dword [ebp - 0x3c]
lea eax, [ebx + 1]
push eax
call fcn.1005fb39
pop ecx
mov esi, eax
push ebx
push esi
lea eax, [ebp - 0x18]
push eax
mov byte [esi], 0
call fcn.1000af9d
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
cmp dword [ebp - 0x18], edi
je 0x1000c5f2
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x18], edi
test bl, bl
je 0x1000c76e
mov eax, dword [ebp - 0x3c]
mov byte [eax + esi], 0
lea eax, [ebp - 0x2c]
push esi
push eax
call fcn.1000724e
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], edi
add esp, 4
mov byte [ebp - 4], 4
mov eax, esp
mov dword [ebp - 0x30], esp
push eax
mov ecx, 0x10099958
call fcn.10002a34
push ecx
mov byte [ebp - 4], 5
mov eax, esp
mov dword [ebp - 0x28], esp
push eax
mov ecx, 0x1009995c
call fcn.10002a34
push ecx
mov byte [ebp - 4], 6
mov eax, esp
mov dword [ebp - 0x24], esp
push eax
mov ecx, 0x10099960
call fcn.10002a34
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2c]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x20], esp
mov esi, esp
call fcn.10002aac
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 4
call fcn.1000918c
xor eax, eax
add esp, 0x14
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x48], edi
jbe 0x1000c75b
mov esi, dword [ebp - 0x4c]
lea ecx, [eax + 1]
cmp ecx, dword [ebp - 0x48]
jae 0x1000c74d
cmp eax, dword [ebp - 0x48]
jae 0x1000c7a1
push ecx
shl eax, 2
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x30], eax
mov eax, dword [eax + esi]
sub eax, 0x10
mov ebx, esp
call fcn.10002aac
add eax, 0x10
mov dword [ebx], eax
lea eax, [ebp - 0x24]
push eax
call fcn.10007777
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + esi + 4]
add esp, 4
sub eax, 0x10
mov dword [ebp - 0x38], esp
mov ebx, esp
call fcn.10002aac
add eax, 0x10
mov dword [ebx], eax
lea eax, [ebp - 0x20]
push eax
call fcn.10007777
push 0x48
mov byte [ebp - 4], 9
call fcn.1005fc55
add esp, 0xc
cmp eax, edi
je 0x1000c714
push dword [ebp + 8]
mov edi, eax
call fcn.1000b97e
mov edi, eax
lea eax, [ebp - 0x20]
push eax
push edi
lea eax, [ebp - 0x24]
call fcn.1000baaf
mov ebx, dword [ebp + 8]
push edi
mov byte [edi + 0x44], 1
call fcn.1000c2fd
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
call fcn.10002b29
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
call fcn.10002b29
mov eax, dword [ebp - 0x28]
xor edi, edi
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp eax, dword [ebp - 0x48]
jb 0x1000c693
lea esi, [ebp - 0x4c]
call fcn.1000258e
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
call fcn.10002b29
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
setne byte [ebp - 0x11]
cmp dword [ebp - 0x18], edi
je 0x1000c78b
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.10002b29
mov al, byte [ebp - 0x11]
call fcn.1006a176
ret 4
push 0x80070057
call fcn.10002b60
int3