Function at 0x10002974
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x25c
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetClassNameA]
push edi
xor ebx, ebx
push ebx
push ebx
push ebx
mov byte [ebp - 2], bl
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x1000303c
push str.ER4U
lea eax, [ebp - 0x25c]
push str.LOAD_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 8
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10006b00
add esp, 0x18
test eax, eax
jne 0x1000303c
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x1000303c
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
pop ecx
push ebx
push ebx
push ebx
mov dword [ebp - 8], eax
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
mov eax, dword [ebp - 8]
cmp eax, ebx
jle 0x1000303c
push eax
push 0xfde8
mov byte [ebp - 2], 1
mov dword [0x100084e4], eax
call fcn.1000287a
cmp eax, dword [0x100084e4]
pop ecx
pop ecx
jne 0x1000303c
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x1000303c
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
cmp eax, ebx
pop ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ebx
jle 0x10002d94
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x1000303c
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
cmp eax, ebx
pop ecx
mov dword [ebp - 8], eax
je 0x10002d85
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x1000303c
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
pop ecx
push ebx
push ebx
push ebx
mov dword [ebp - 0x20], eax
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x158]
push eax
call fcn.10001ca1
push dword [ebp - 8]
lea eax, [ebp - 0x158]
push eax
push dword [ebp + 8]
call fcn.10001f35
add esp, 0x10
test al, al
je 0x1000303c
lea eax, [ebp - 0x158]
push eax
call fcn.10005699
test al, al
pop ecx
jne 0x10002c61
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x10002d85
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea ecx, [ebp - 0x54]
call fcn.10004a05
test al, al
je 0x10002d7d
push ebx
push ebx
push ebx
mov dword [ebp - 0x14], ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x14]
push ecx
add eax, 0x7530
push 1
push eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 8], eax
call fcn.10005309
test al, al
je 0x10002d42
push 3
push 0x10007224
push dword [ebp - 0x14]
call fcn.10006b00
add esp, 0xc
test eax, eax
jne 0x10002d0e
push 4
push 0x10007304
push 1
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.100051a0
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.100054cd
jmp 0x10002d56
push 4
push 0x10007304
push 1
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.100051a0
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea ecx, [ebp - 0x54]
call fcn.10004e44
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jl 0x10002b4c
lea ecx, [ebp - 0x54]
call fcn.10004a05
test al, al
je 0x10003034
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x10003034
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
cmp eax, ebx
pop ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
jle 0x10003034
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0xc
test al, al
je 0x10003034
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
mov dword [ebp - 0x1c], eax
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
mov dword [ebp - 0x14], ebx
call fcn.1000563e
add esp, 0x10
test al, al
je 0x10003034
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
mov dword [ebp - 0x14], eax
push 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0x10
test al, al
je 0x10003034
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x10]
push eax
call fcn.10001bf4
mov dword [ebp - 0x28], eax
inc eax
push eax
mov dword [ebp - 0x30], eax
call fcn.10004307
push dword [ebp - 0x28]
mov dword [ebp - 8], eax
push eax
push dword [ebp + 8]
call fcn.1000563e
add esp, 0x14
test al, al
je 0x1000302b
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
push 2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 1], bl
call fcn.10005309
test al, al
je 0x10002f92
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x14]
jge 0x10002f5e
mov byte [ebp - 1], 1
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x54]
call fcn.100054cd
jmp 0x10002f96
mov byte [ebp - 1], 1
cmp byte [ebp - 1], bl
je 0x1000300f
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push dword [ebp - 0x30]
lea ecx, [ebp - 0x54]
push dword [ebp - 8]
push 3
push dword [ebp - 0x1c]
call fcn.100051a0
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push 4
lea eax, [ebp - 0x14]
push eax
push 2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x54]
call fcn.100051a0
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.100054cd
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jl 0x10002dfc
jmp 0x10003034
push dword [ebp - 8]
call fcn.100042fd
pop ecx
lea ecx, [ebp - 0x54]
call fcn.10004e44
mov al, byte [ebp - 2]
pop edi
pop esi
pop ebx
leave
ret