Function at 0x10010e90
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x100701e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x31c
push ebx
push esi
push edi
mov ebx, dword [esp + 0x338]
mov edi, dword [esp + 0x33c]
push edi
mov dword [esp + 0x334], 0
lea esi, [ebx + 0x18]
mov ecx, esi
call fcn.1001e430
test eax, eax
jne 0x100110ee
mov ecx, esi
call fcn.1001f000
test eax, eax
jne 0x10010fbf
push eax
push edi
mov ecx, ebx
call fcn.10014db0
test eax, eax
jge 0x10010f5f
push edi
mov ecx, ebx
call fcn.10013940
test eax, eax
je 0x10010f5f
mov esi, dword [esp + 0x344]
mov dword [esp + 0x330], 0xffffffff
mov eax, dword [esi]
cmp eax, esi
mov dword [esp + 0xc], eax
je 0x10010f48
lea eax, [esp + 0x14]
push 0
push eax
lea ecx, [esp + 0x14]
call fcn.10015d20
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
push edx
lea ecx, [esp + 0x348]
call fcn.10015cb0
cmp dword [esp + 0xc], esi
jne 0x10010f1e
mov eax, dword [esp + 0x344]
push eax
call fcn.1003c010
add esp, 4
xor eax, eax
jmp 0x10011120
mov esi, dword [esp + 0x344]
mov dword [esp + 0x330], 0xffffffff
mov eax, dword [esi]
cmp eax, esi
mov dword [esp + 0xc], eax
je 0x10010fa5
lea ecx, [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x14]
call fcn.10015d20
mov edx, dword [eax]
lea eax, [esp + 0x14]
push edx
push eax
lea ecx, [esp + 0x348]
call fcn.10015cb0
cmp dword [esp + 0xc], esi
jne 0x10010f7b
mov ecx, dword [esp + 0x344]
push ecx
call fcn.1003c010
add esp, 4
mov eax, 0x80004005
jmp 0x10011120
mov ecx, esi
call fcn.1001ef90
mov edi, eax
push 0x2f
push edi
call dword [sym.imp.MSVCRT.dll_strrchr]
add esp, 8
test eax, eax
je 0x100110b0
push edi
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionA]
test eax, eax
je 0x100110b0
push eax
call fcn.100146b0
add esp, 4
test eax, eax
je 0x100110b0
lea edx, [esp + 0x1c]
push edx
push edi
call fcn.100146f0
add esp, 8
test eax, eax
je 0x100110b0
mov al, byte [esp + 0x340]
sub esp, 0xc
mov esi, esp
mov dword [esp + 0x1c], esp
push 0x18
mov byte [esi], al
call fcn.1003bfe0
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [esi + 4], eax
mov dword [esi + 8], 0
mov eax, dword [esp + 0x354]
add esp, 4
mov ecx, dword [eax]
push eax
push ecx
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.10008e90
mov edx, dword [eax]
mov ecx, esi
push edx
call fcn.100158a0
lea eax, [esp + 0x28]
push eax
push edi
push ebx
call fcn.10011140
lea ecx, [esp + 0x1c]
mov esi, eax
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea edx, [esp + 0x10]
mov eax, dword [esp + 0x344]
mov dword [esp + 0x330], 0xffffffff
push eax
mov ecx, dword [eax]
push ecx
push edx
lea ecx, [esp + 0x34c]
call fcn.10015910
mov eax, dword [esp + 0x344]
push eax
call fcn.1003c010
add esp, 4
jmp 0x1001111e
mov eax, dword [esp + 0x344]
mov dword [esp + 0x330], 0xffffffff
push eax
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x34c]
call fcn.10015910
mov edx, dword [esp + 0x344]
push edx
call fcn.1003c010
add esp, 4
mov eax, 0x80004005
jmp 0x10011120
mov ecx, ebx
call fcn.10013b40
mov esi, eax
lea ecx, [esp + 0x340]
neg esi
sbb esi, esi
mov dword [esp + 0x330], 0xffffffff
and esi, 0x7fffbffb
add esi, 0x80004005
call fcn.100152a0
mov eax, esi
mov ecx, dword [esp + 0x328]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x328
ret 0x14