Function at 0x12ea6f70
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x13063dc8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
mov eax, dword [0x13199068]
push ebp
push esi
xor ebp, ebp
mov esi, ecx
cmp eax, ebp
mov dword [esp + 0x10], esi
je 0x12ea6faf
push str.CTDocPolicy::DoJudge_1
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
xor eax, eax
push ebx
mov dword [esp + 0x60], eax
push edi
lea ecx, [esp + 0x60]
xor edi, edi
mov dword [esp + 0x68], eax
push ecx
mov dword [esp + 0x38], edi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x64], ebp
mov dword [esp + 0x70], eax
call fcn.12e31de0
push 0x8000
mov dword [esp + 0x58], eax
call fcn.12e6efd0
mov ebx, dword [esp + 0x88]
add esp, 8
test eax, eax
je 0x12ea7019
lea edx, [esp + 0x60]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
push ebx
mov ecx, 0x131c3208
call fcn.12ee2de0
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x84]
mov eax, dword [edx]
cmp eax, ebp
mov eax, dword [esp + 0x38]
jne 0x12ea7037
cmp eax, ebp
je 0x12ea7037
mov edi, 1
mov dword [esp + 0x34], edi
cmp dword [0x13199068], ebp
je 0x12ea7055
push edi
push eax
push str.CTDocPolicy::DoJudge_2___d___d_
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
cmp dword [esi + 0xc], ebp
je 0x12ea74ba
push 1
call fcn.12e6efd0
add esp, 4
test eax, eax
je 0x12ea74ba
cmp dword [esp + 0x10], 2
je 0x12ea74ba
mov ecx, ebx
call fcn.12e02880
test eax, eax
je 0x12ea74ba
lea eax, [esi + 0x10]
push ebp
push eax
lea ecx, [esp + 0x5c]
call fcn.12f56170
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x2c]
push ecx
lea eax, [esp + 0x24]
push edx
lea ecx, [esp + 0x2c]
push eax
lea edx, [esp + 0x34]
push ecx
push edx
push 1
mov ecx, ebx
mov dword [esp + 0x90], ebp
mov dword [esp + 0x48], 1
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x34], ebp
call fcn.12e02d00
test eax, eax
je 0x12ea747c
push 0xffffffffffffffff
lea ecx, [esp + 0x58]
call fcn.12f56200
mov edi, dword [esi + 4]
mov ebx, dword [esi + 8]
cmp edi, ebp
mov dword [esp + 0x44], ebx
je 0x12ea749a
cmp ebx, ebp
jbe 0x12ea749a
cmp dword [0x13199068], ebp
je 0x12ea7126
push str.CTDocPolicy::DoJudge_4
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x48], eax
cmp edi, ebp
je 0x12ea73bb
cmp ebx, 0x38
jb 0x12ea73bb
mov ecx, dword [edi]
cmp ebx, ecx
jb 0x12ea73bb
mov eax, dword [edi + 0x34]
lea edx, [eax + 0x38]
cmp ecx, edx
jne 0x12ea73bb
cmp eax, ebp
je 0x12ea7179
lea ecx, [edi + 0x38]
cmp ecx, ebp
je 0x12ea7179
test al, 1
jne 0x12ea73bb
shr eax, 1
cmp word [ecx + eax*2 - 2], bp
jne 0x12ea73bb
cmp dword [edi + 4], ebp
jne 0x12ea73d9
mov eax, dword [edi + 0xc]
mov dword [esp + 0x4c], 1
cmp eax, ebp
je 0x12ea719b
cmp eax, dword [esp + 0x48]
jb 0x12ea735a
call fcn.12e6efa0
cmp dword [edi + 0x10], ebp
je 0x12ea71ad
cmp eax, ebp
je 0x12ea7378
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
push edi
mov ecx, esi
call fcn.12ea68b0
mov ebx, eax
cmp ebx, ebp
jne 0x12ea7237
mov edx, dword [esp + 0x80]
test byte [edx + 0xa00], 0x20
je 0x12ea7237
cmp dword [esp + 0x30], 2
jne 0x12ea7237
mov eax, dword [esp + 0x1c]
mov ecx, edx
push eax
call fcn.12e02870
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x30]
push ecx
push edx
push eax
push edi
mov ecx, esi
call fcn.12ea68b0
mov ebx, eax
mov eax, dword [0x13199068]
cmp eax, ebp
je 0x12ea725c
mov ecx, dword [esp + 0x8c]
push ecx
push ebx
push str.CTDocPolicy::DoJudge_10_1__lu_0x_lx
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
cmp dword [0x13199068], ebp
je 0x12ea725c
mov edx, dword [esp + 0x8c]
push edx
push ebx
push str.CTDocPolicy::DoJudge_10__lu_0x_lx
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
cmp ebx, ebp
je 0x12ea73a0
mov eax, dword [esp + 0x8c]
cmp eax, ebp
je 0x12ea7275
mov dword [eax], 1
cmp dword [0x13199068], ebp
je 0x12ea729b
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
push ecx
push str.CTDocPolicy::DoJudge_12__lu
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x10
mov esi, dword [edi + 0x14]
xor edx, edx
and esi, 3
lea eax, [esp + 0x40]
cmp esi, 2
lea ecx, [esp + 0x3c]
sete dl
push edx
push eax
push ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
call fcn.12e03060
cmp dword [esp + 0x3c], ebp
je 0x12ea731a
mov edx, dword [esp + 0x84]
cmp dword [edx], ebp
jne 0x12ea731a
cmp dword [esp + 0x34], ebp
jne 0x12ea731a
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x18]
push eax
push edi
call fcn.12ea6a00
test eax, eax
je 0x12ea731a
mov eax, dword [0x13199068]
mov dword [esp + 0x34], 1
cmp eax, ebp
je 0x12ea731a
push str.CTDocPolicy::DoJudge_13
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
cmp dword [esp + 0x40], ebp
je 0x12ea7332
mov ecx, dword [esp + 0x80]
push ecx
mov ecx, dword [esp + 0x1c]
push edi
call fcn.12ea8950
cmp dword [0x13199068], ebp
je 0x12ea734f
push esi
push str.CTDocPolicy::DoJudge_15__lu
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x10
cmp esi, 3
jne 0x12ea7396
mov eax, dword [esp + 0x4c]
jmp 0x12ea739c
cmp dword [0x13199068], ebp
je 0x12ea73a0
push str.CTDocPolicy::DoJudge_7
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
jmp 0x12ea73a0
cmp dword [0x13199068], ebp
je 0x12ea73a0
push str.CTDocPolicy::DoJudge_8
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
jmp 0x12ea73a0
xor eax, eax
mov dword [esp + 0x10], esi
cmp eax, ebp
je 0x12ea73f7
mov eax, dword [edi]
mov ebx, dword [esp + 0x44]
sub ebx, eax
add edi, eax
cmp ebx, ebp
mov dword [esp + 0x44], ebx
jbe 0x12ea7414
mov esi, dword [esp + 0x18]
jmp 0x12ea7130
cmp dword [0x13199068], ebp
je 0x12ea7418
push str.CTDocPolicy::DoJudge_5
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
jmp 0x12ea7418
cmp dword [0x13199068], ebp
je 0x12ea7418
push str.CTDocPolicy::DoJudge_6
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
jmp 0x12ea7418
cmp dword [0x13199068], ebp
je 0x12ea7414
push ebx
push str.CTDocPolicy::DoJudge_16__lu
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x10
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x54]
call fcn.12f56220
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 2
mov dword [esp + 0x30], eax
jg 0x12ea749e
cmp dword [esp + 0x10], 2
je 0x12ea749e
lea edx, [esp + 0x1c]
lea eax, [esp + 0x2c]
push edx
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x34]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x34], ebp
call fcn.12e02d00
test eax, eax
jne 0x12ea70e5
cmp dword [0x13199068], ebp
je 0x12ea749e
push str.CTDocPolicy::DoJudge_3
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
jmp 0x12ea749e
mov dword [esp + 0x10], ebp
lea ecx, [esp + 0x54]
mov dword [esp + 0x78], 0xffffffff
call fcn.12f561d0
mov ebx, dword [esp + 0x80]
mov edi, dword [esp + 0x34]
cmp edi, ebp
je 0x12ea756b
mov ecx, ebx
call fcn.12e030e0
test eax, eax
jne 0x12ea756b
cmp dword [0x13199068], ebp
je 0x12ea74ed
push str.CTDocPolicy::DoJudge____1
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
cmp dword [esp + 0x50], ebp
je 0x12ea756b
cmp dword [0x13199068], ebp
je 0x12ea750f
push str.CTDocPolicy::DoJudge____2
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [ebx + 0x9ec]
push ebp
cmp eax, ebp
je 0x12ea7527
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x64]
push edx
push ebx
push eax
jmp 0x12ea752e
push ebp
lea ecx, [esp + 0x68]
push ebp
push ecx
mov ecx, ebx
call fcn.12e02880
push eax
mov ecx, 0x131a91d0
call fcn.12e0c2d0
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x60]
mov dword [edx], eax
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x64]
mov dword [eax], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0x14]
pop edi
cmp eax, ebp
pop ebx
je 0x12ea759e
push eax
call fcn.12f5c51d
add esp, 4
test eax, eax
jbe 0x12ea758d
mov eax, dword [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0xc]
push ecx
call fcn.12f5c050
add esp, 4
mov dword [esp + 0xc], ebp
cmp dword [0x13199068], ebp
je 0x12ea75d4
mov esi, dword [esp + 8]
push esi
push str.CTDocPolicy::DoJudge_17__lu
push str.DocRule
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x10
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
add esp, 0x6c
ret 0x10
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 8]
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x6c
ret 0x10