Function at 0x10101d4c
Capabilities:
Delete file
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x101dc354]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x7c], ecx
push ebx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x88]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, edx
push 1
push 0x101dd068
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
call fcn.100ad791
push edi
push esi
lea eax, [ebp - 0x6c]
push 0x10037980
push eax
call fcn.100a6b40
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x10101e0e
push edi
push 0x10037994
push 1
push esi
push 0x4000000
call fcn.100ab973
add esp, 0x14
jmp 0x10102061
lea eax, [ebp - 0x68]
push eax
push ecx
push 6
push 0
mov ecx, ebx
call fcn.1011f281
test eax, eax
js 0x10101e3d
push 4
push edi
lea edx, [ebp - 0x68]
xor ecx, ecx
call fcn.10102299
mov esi, eax
test esi, esi
jns 0x10101e65
push edi
push 0x100379cc
jmp 0x10101df9
lea esi, [eax + 0x7ff8fb70]
neg esi
sbb esi, esi
and esi, eax
jge 0x10101e65
push 0x10037a04
push 1
push esi
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x10102061
lea eax, [ebp - 0x54]
push eax
push ecx
push 7
push 0
mov ecx, ebx
call fcn.1011f281
test eax, eax
js 0x10101e97
push 4
push edi
lea edx, [ebp - 0x54]
xor ecx, ecx
call fcn.10102299
mov esi, eax
test esi, esi
jns 0x10101e97
push edi
push 0x10037a2c
jmp 0x10101df9
mov edx, edi
mov ecx, ebx
call fcn.101020da
mov esi, eax
test esi, esi
jns 0x10101ead
push 0x10037a64
jmp 0x10101e50
lea eax, [ebp - 0x40]
push eax
push ecx
push 8
push 0
mov ecx, ebx
call fcn.1011f281
test eax, eax
js 0x10101edc
mov edx, edi
lea ecx, [ebp - 0x40]
call fcn.101017a4
mov esi, eax
test esi, esi
jns 0x10101ef4
push edi
push 0x10037a84
jmp 0x10101df9
lea esi, [eax + 0x7ff8fb70]
neg esi
sbb esi, esi
and esi, eax
jge 0x10101ef4
push 0x10037abc
jmp 0x10101e50
lea eax, [ebp - 0x2c]
push eax
push ecx
push 0xd
push 0
mov ecx, ebx
call fcn.1011f281
test eax, eax
js 0x10101f23
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.101025a7
mov esi, eax
test esi, esi
jns 0x10101f3b
push edi
push 0x10037ae4
jmp 0x10101df9
lea esi, [eax + 0x7ff8fb70]
neg esi
sbb esi, esi
and esi, eax
jge 0x10101f3b
push 0x10037b1c
jmp 0x10101e50
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x7c]
push edi
call fcn.10102162
mov esi, eax
test esi, esi
jns 0x10101f58
push edi
push 0x10037b44
jmp 0x10101df9
lea edx, [ebp - 0x74]
mov ecx, edi
call fcn.101160cd
mov esi, eax
test esi, esi
jns 0x10101f73
push edi
push 0x10037b70
jmp 0x10101df9
mov ecx, ebx
call fcn.1011eb75
mov esi, eax
test esi, esi
jns 0x10101f8b
push edi
push 0x10037ba4
jmp 0x10101df9
mov esi, dword [ebp - 0x6c]
push 0x80
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
lea eax, [ebp - 0x70]
mov edx, 0x10037bd0
push eax
mov ecx, esi
call fcn.100eb869
mov esi, eax
test esi, esi
jns 0x10101fc1
push 0x10037bd8
jmp 0x10101e50
mov esi, dword [ebp - 0x70]
push 0x80
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
push edi
mov edx, 0x10035a5c
mov ecx, ebx
call fcn.100ff1db
push edi
mov edx, 0x100205b8
mov ecx, ebx
call fcn.100ff1db
lea eax, [ebp - 0x18]
push eax
push ecx
push 3
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.1011f281
push edi
test eax, eax
js 0x10102049
lea ecx, [ebp - 0x18]
call fcn.1011edb9
mov esi, eax
test esi, esi
jns 0x1010202b
push edi
push 0x10037c10
push 1
push esi
push 0x4000000
call fcn.100ab973
add esp, 0x14
xor eax, eax
lea ecx, [ebp - 0x18]
push eax
push eax
push eax
call fcn.100ad654
cmp eax, 0x80070103
jne 0x10102061
lea ecx, [ebp - 0x18]
call fcn.1011eb75
jmp 0x10102061
push 0x10037c40
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x14
xor esi, esi
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x10102072
add eax, 0xfffffffc
push eax
call fcn.100b84f9
pop ecx
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x10102083
add eax, 0xfffffffc
push eax
call fcn.100b84f9
pop ecx
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x10102094
add eax, 0xfffffffc
push eax
call fcn.100b84f9
pop ecx
lea ecx, [ebp - 0x88]
call fcn.100aa570
lea ecx, [ebp - 0x18]
call fcn.100aab88
lea ecx, [ebp - 0x2c]
call fcn.100aab88
lea ecx, [ebp - 0x40]
call fcn.100aab88
lea ecx, [ebp - 0x54]
call fcn.100aab88
lea ecx, [ebp - 0x68]
call fcn.100aab88
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100b88c0
leave
ret 8