Function at 0x1d36cd0
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x230
mov eax, dword [0x1d8f008]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov bl, 1
cmp dword [0x1da3250], 0
je 0x1d36d08
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.01cc3f9d
mov eax, ebx
add esp, 0x230
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, dword [0x1da323c]
test esi, esi
je 0x1d36e0d
test byte [0x1d92fac], 1
je 0x1d36cf1
xorps xmm0, xmm0
movups xmmword [ebp - 0x22c], xmm0
movups xmmword [ebp - 0x23c], xmm0
mov dword [ebp - 0x21c], 0
cmp byte [esi + 0xb], 0
jns 0x1d36d42
mov esi, dword [esi]
lea eax, [ebp - 0x23c]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x1d36d7f
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x21c], 0x40000001
sbb eax, 0
jb 0x1d36d7f
mov eax, dword [0x1da323c]
cmp byte [eax + 0xb], 0
jns 0x1d36d78
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [0x1da323c]
cmp byte [eax + 0xb], 0
jns 0x1d36d8c
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1d82350]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x1da3250], eax
mov bl, 1
inc eax
cmp eax, 1
ja 0x1d36cf1
lea esi, [ebp - 0x216]
push 0x206
push 0xff
push esi
call fcn.01cc71b0
add esp, 0xc
mov word [esi - 2], 0
lea edi, [ebp - 0x218]
push edi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
add eax, 0xfffffefb
cmp eax, 0xfffffefc
jae 0x1d36ea9
xor ebx, ebx
jmp 0x1d36cf1
push 0xc
call fcn.01cc3150
add esp, 4
mov esi, eax
lea edi, [ebp - 0x218]
push 0x208
push 0xff
push edi
call fcn.01cc71b0
add esp, 0xc
push 0x104
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov ecx, esi
push edi
call fcn.01cf1750
movzx eax, byte [esi + 0xb]
test al, al
js 0x1d36e62
and eax, 0x7f
mov ecx, esi
jmp 0x1d36e67
mov eax, dword [esi + 4]
mov ecx, dword [esi]
test eax, eax
je 0x1d36e90
add eax, eax
test eax, eax
je 0x1d36e90
lea edx, [eax - 2]
cmp word [ecx + eax - 2], 0x5c
mov eax, edx
jne 0x1d36e6d
cmp edx, 0xfffffffe
je 0x1d36e90
sar edx, 1
inc edx
mov ecx, esi
push 0xffffffffffffffff
push edx
call fcn.01d035f0
mov ecx, esi
push 9
push str.debug.log
call fcn.01cb8fd0
mov dword [0x1da323c], esi
jmp 0x1d36d16
mov esi, dword [0x1da323c]
push edi
call fcn.01cdd136
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.01d1b7e0
mov ecx, dword [0x1da323c]
call fcn.01cf1630
cmp word [eax], 0x5c
je 0x1d36ee4
mov ecx, dword [0x1da323c]
push 1
push 0x1d7c774
call fcn.01cb8fd0
mov ecx, dword [0x1da323c]
push 9
push str.debug.log
call fcn.01cb8fd0
mov eax, dword [0x1da323c]
cmp byte [eax + 0xb], 0
jns 0x1d36f03
mov eax, dword [eax]
movaps xmm0, xmmword [0x1d82350]
sub esp, 0x1c
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x1da3250], eax
inc eax
cmp eax, 1
ja 0x1d36cf1
mov dword [0x1da3250], 0
jmp 0x1d36e06