Function at 0x10f8a8a
Capabilities:
Delete file

Disassembly:
push 0x38
mov eax, 0x11bbdc7
call fcn.010aa5f6
xor ebx, ebx
cmp dword [ebp + 8], ebx
jne 0x10f8abb
push 0x101bf0c
push 0x101b990
push 0x6a
call fcn.010f17c2
add esp, 0xc
mov eax, 0x80070057
jmp 0x10f8e1a
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
call fcn.0107f04e
or dword [ebp - 0x18], 0xffffffff
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.010f4e48
push dword [ebp + 8]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.010f8183
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 0xc]
mov byte [ebp - 4], 2
push dword [ebp + 8]
push ebx
call fcn.010f5a9e
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xc]
push ebx
push ebx
push 2
push ebx
push ebx
push 0xc00c0000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
mov dword [ebp - 0x18], edi
cmp edi, 0xffffffff
jne 0x10f8b42
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10f8b3b
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
jmp 0x10f8da5
push 1
push edi
call fcn.011aba80
mov esi, eax
cmp esi, ebx
jge 0x10f8b5a
push 0x173
jmp 0x10f8d9f
push edi
lea ecx, [ebp - 0x44]
call fcn.010f4e58
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
or dword [ebp - 0x18], 0xffffffff
push 1
lea ecx, [ebp - 0x44]
call fcn.010f4f5c
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push ebx
push 0x12c
push ebx
call fcn.0112876f
push dword [ebp - 0x10]
mov esi, eax
call fcn.010f8568
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x10f8bb5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
cmp esi, ebx
jge 0x10f8bc3
push 0x167
jmp 0x10f8d9f
push dword [ebp + 0x10]
lea eax, [ebp - 0x44]
push dword [ebp + 8]
push eax
push dword [ebp - 0x14]
call fcn.010f86f7
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x10f8bef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
push ebx
push 0x101bf04
lea ecx, [ebp - 0x20]
call fcn.010a6752
cmp eax, 0xffffffff
je 0x10f8c09
xor esi, esi
jmp 0x10f8da5
push 5
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], 0x101bee8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
call fcn.010f4f5c
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
xor edi, edi
push edi
push 0x101bee4
lea eax, [ebp + 0xc]
push 4
push eax
call fcn.010f76dd
add esp, 0x10
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x30]
push eax
push 0x12e
push ebx
call fcn.0112876f
push dword [ebp - 0x10]
mov esi, eax
call fcn.010f8568
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x10f8c7c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
cmp esi, ebx
jl 0x10f8d93
push edi
push 0x149
call fcn.010f1702
pop ecx
pop ecx
push 2
push dword [ebp + 0x10]
lea eax, [ebp - 0x44]
push dword [ebp + 8]
push eax
push dword [ebp - 0x14]
call fcn.010f87dc
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x10f8cbf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x10f8ccf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
inc edi
cmp edi, 5
jb 0x10f8c2f
push 3
lea ecx, [ebp - 0x44]
call fcn.010f4f5c
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
xor edi, edi
push edi
push 0x101bee4
lea eax, [ebp + 0xc]
push 4
push eax
call fcn.010f76dd
add esp, 0x10
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
lea eax, [ebp - 0x30]
push eax
push 0x12d
push ebx
call fcn.0112876f
push dword [ebp - 0x10]
mov esi, eax
call fcn.010f8568
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x10f8d3c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
cmp esi, ebx
jl 0x10f8d9a
push edi
push 0x148
call fcn.010f1702
pop ecx
pop ecx
push 1
push dword [ebp + 0x10]
lea eax, [ebp - 0x44]
push dword [ebp + 8]
push eax
push dword [ebp - 0x14]
call fcn.010f87dc
mov esi, eax
cmp esi, ebx
jl 0x10f8da5
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x10f8d77
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x10f8d87
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
inc edi
cmp edi, 3
jb 0x10f8cef
jmp 0x10f8da5
push 0x169
jmp 0x10f8d9f
push 0x168
call fcn.010f17c2
pop ecx
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x10f8db5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x10f8dc5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x18], 0xffffffff
je 0x10f8dd4
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.010f514f
cmp eax, ebx
jge 0x10f8de6
cmp esi, ebx
jl 0x10f8dea
mov esi, eax
cmp esi, ebx
jge 0x10f8df6
mov eax, dword [ebp - 0x1c]
push dword [eax + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call fcn.010a9620
pop ecx
lea ecx, [ebp - 0x20]
call fcn.0107d6e4
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.010f52d5
lea ecx, [ebp - 0x1c]
call fcn.0107d6e4
mov eax, esi
call fcn.010aa6e2
ret 0xc