Function at 0x10002730
Capabilities:
Delete file

Disassembly:
mov eax, dword [0x101f1d98]
sub esp, 0x34
test eax, eax
push ebx
push ebp
push esi
push edi
je 0x10002759
push str.IsMatch_______
push str.GetTxt
push 0xffffffffffffffff
push 0x101f1d2c
call fcn.100066b0
add esp, 0x10
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0x48]
xor ebp, ebp
xor esi, esi
mov dword [eax], ebp
mov dword [0x101ae188], 0xffffffff
test ebx, ebx
je 0x10002980
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x10002980
push edi
lea ecx, [esp + 0x28]
call fcn.10032fc0
lea ecx, [esp + 0x34]
call fcn.10038400
lea ecx, [esp + 0x20]
lea edx, [esp + 0x34]
push ecx
push edx
push edi
mov dword [esp + 0x2c], ebp
call fcn.10011f80
mov eax, dword [esp + 0x44]
xor edi, edi
add esp, 0xc
cmp eax, edi
je 0x10002979
cmp dword [esp + 0x20], edi
je 0x10002979
push ebx
lea ecx, [esp + 0x1c]
call fcn.10032fc0
lea eax, [esp + 0x48]
push eax
call fcn.10010e10
add esp, 4
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x18]
call fcn.10032d60
lea edx, [esp + 0x48]
lea ecx, [esp + 0x10]
push edx
call fcn.10032d60
mov eax, dword [esp + 0x14]
push eax
call fcn.100112e0
add esp, 4
test eax, eax
je 0x10002829
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.10032d60
call fcn.100116d0
add esp, 8
cmp dword [0x101f1d98], edi
je 0x10002854
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push str.IsMatch___s___s_
push str.GetTxt
push 0xffffffffffffffff
push 0x101f1d2c
call fcn.100066b0
add esp, 0x18
lea edx, [esp + 0x48]
lea ecx, [esp + 0x4c]
push edx
call fcn.10032d60
push 0x101ae698
lea ecx, [esp + 0x50]
call fcn.10036fd0
push 0x80
mov eax, dword [esp + 0x50]
push eax
call fcn.10017240
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x34]
lea edx, [esp + 0x30]
push ecx
push edx
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x2c]
push edi
lea ecx, [esp + 0x34]
push 0x6400000
push ecx
push edx
push eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x44], edi
call fcn.10002370
add esp, 0x28
test eax, eax
je 0x10002972
cmp dword [esp + 0x28], edi
je 0x10002903
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x34]
push ecx
push edx
push eax
call fcn.10001120
add esp, 0xc
test eax, eax
je 0x100028ea
mov ecx, dword [esp + 0x58]
mov dword [ecx], 1
lea edx, [esp + 0x2c]
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.10001ad0
add esp, 8
mov esi, 1
jmp 0x10002931
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x20]
push ecx
push edx
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x3c]
push eax
push ecx
push edx
call fcn.10001280
add esp, 0x14
mov esi, eax
mov eax, dword [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x4c]
call fcn.10033760
lea ecx, [esp + 0x10]
call fcn.10033760
lea ecx, [esp + 0x14]
call fcn.10033760
lea ecx, [esp + 0x48]
call fcn.10033760
lea ecx, [esp + 0x18]
call fcn.10033760
lea ecx, [esp + 0x34]
call fcn.10038410
lea ecx, [esp + 0x24]
call fcn.10033760
jmp 0x10002985
mov ebp, 2
jmp 0x10002931
mov ebp, 2
jmp 0x1000295e
mov ebp, 1
mov eax, dword [0x101f1d98]
test eax, eax
je 0x100029a9
push ebp
push esi
push str.IsMatch______d_____d_
push str.GetTxt
push 0xffffffffffffffff
push 0x101f1d2c
call fcn.100066b0
add esp, 0x18
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret 0x14