Function at 0x102bb5e
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 0x10], esi
call fcn.0102afe3
mov dword [ebp - 0xc], eax
call fcn.01028ad7
mov edx, dword [ebp - 0x48]
push 0xffffffffffffffc1
pop ecx
and edx, ecx
push 0x40
mov dword [ebp - 0x18], eax
pop eax
or edx, eax
mov dword [ebp - 0x48], edx
mov edx, dword [ebp - 0x38]
and edx, ecx
or edx, eax
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x28]
and edx, ecx
mov ebx, dword [ebp + 8]
or edx, eax
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x78]
and edx, ecx
or edx, eax
mov dword [ebp - 0x78], edx
mov edx, dword [ebp - 0x68]
and edx, ecx
or edx, eax
mov dword [ebp - 0x68], edx
mov edx, dword [ebp - 0x58]
and edx, ecx
or edx, eax
cmp ebx, esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x14], esi
je 0x102bc13
push 0x10033a4
push ebx
call fcn.01028e39
pop ecx
pop ecx
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 0x10]
call fcn.0102b1dd
mov edi, eax
cmp edi, esi
jl 0x102c0a2
cmp ebx, esi
je 0x102bc3a
push 0x100337c
push ebx
call fcn.01028e39
pop ecx
pop ecx
push 0x58
call fcn.0102a2cd
cmp eax, esi
pop ecx
je 0x102bc52
mov ecx, eax
call fcn.0102b290
mov dword [ebp + 0x10], eax
jmp 0x102bc55
mov dword [ebp + 0x10], esi
cmp dword [ebp + 0x10], esi
jne 0x102bc64
mov edi, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x102c0a2
mov ecx, dword [ebp + 0x10]
xor eax, eax
cmp dword [ebp - 0xc], esi
setne al
lea eax, [eax*4 + 4]
or eax, 0x12
push eax
call fcn.01032ba0
mov edi, eax
cmp edi, esi
jl 0x102c092
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x78]
push eax
call fcn.01032c92
mov edi, eax
cmp edi, esi
jl 0x102c092
mov ecx, dword [ebp + 0x10]
push esi
lea eax, [ebp - 0x68]
push eax
call fcn.01032c49
mov edi, eax
cmp edi, esi
jl 0x102c092
cmp dword [ebp - 0xc], esi
je 0x102bcd3
mov ecx, dword [ebp + 0x10]
push 1
lea eax, [ebp - 0x58]
push eax
call fcn.01032c49
mov edi, eax
cmp edi, esi
jl 0x102c092
lea eax, [ebp - 4]
push eax
call fcn.0103329f
mov edi, eax
cmp edi, esi
jl 0x102c092
cmp ebx, esi
je 0x102bcfb
push dword [ebp - 4]
push 0x1003358
push ebx
call fcn.01028e39
add esp, 0xc
cmp dword [ebp - 4], esi
jbe 0x102bef9
cmp ebx, esi
je 0x102bd19
push dword [ebp - 4]
push 0x1003338
push ebx
call fcn.01028e39
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 4]
call fcn.01033166
mov edi, eax
cmp edi, esi
jl 0x102c092
push esi
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 4]
call fcn.010331d1
mov edi, eax
cmp edi, esi
jl 0x102c092
push 1
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 4]
call fcn.010331d1
mov edi, eax
cmp edi, esi
jl 0x102c092
lea ecx, [ebp - 0x48]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
je 0x102bedb
lea ecx, [ebp - 0x38]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
je 0x102bedb
cmp dword [ebp - 0xc], esi
je 0x102bdc4
lea ecx, [ebp - 0x28]
call fcn.01006e57
push eax
call fcn.0102919f
cmp ebx, esi
mov dword [ebp - 8], eax
je 0x102bdc4
cmp eax, esi
mov eax, 0x100332c
jne 0x102bdb2
mov eax, 0x100331c
push eax
push dword [ebp - 4]
push 0x10032f4
push ebx
call fcn.01028e39
add esp, 0x10
cmp dword [ebp - 0x18], esi
je 0x102bde8
cmp dword [ebp - 0xc], esi
je 0x102bde8
cmp dword [ebp - 8], esi
jne 0x102bde8
cmp ebx, esi
je 0x102bef0
push dword [ebp - 4]
push 0x10032b4
jmp 0x102bee7
cmp ebx, esi
je 0x102bdfd
push dword [ebp - 4]
push 0x1003280
push ebx
call fcn.01028e39
add esp, 0xc
push esi
lea ecx, [ebp - 0x78]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x48]
call fcn.01006e57
push eax
call fcn.01028a2e
add esp, 0xc
test eax, eax
je 0x102c073
push esi
lea ecx, [ebp - 0x68]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x38]
call fcn.01006e57
push eax
call fcn.01028a2e
add esp, 0xc
test eax, eax
je 0x102c073
cmp dword [ebp - 8], esi
je 0x102be6b
push esi
lea ecx, [ebp - 0x58]
call fcn.01006e57
push eax
lea ecx, [ebp - 0x28]
call fcn.01006e57
push eax
call fcn.01028a2e
add esp, 0xc
test eax, eax
je 0x102c073
cmp ebx, esi
je 0x102be8e
push dword [ebp - 4]
push 0x100324c
push ebx
call fcn.01028e39
push dword [ebp - 4]
push 0x1003218
push ebx
call fcn.01028e39
add esp, 0x18
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
push eax
xor eax, eax
cmp dword [ebp - 8], esi
setne al
neg ecx
sbb ecx, ecx
and ecx, 4
or eax, ecx
push eax
push dword [ebp + 0x10]
call fcn.0102b8d6
test eax, eax
jge 0x102bf25
cmp ebx, esi
je 0x102bec8
push dword [ebp - 4]
push 0x10031e8
push ebx
call fcn.01028e39
add esp, 0xc
cmp dword [ebp - 0x14], esi
jne 0x102bf10
cmp ebx, esi
je 0x102bef0
push dword [ebp - 4]
push 0x10031ac
jmp 0x102bee7
cmp ebx, esi
je 0x102bef0
push dword [ebp - 4]
push 0x1003178
push ebx
call fcn.01028e39
add esp, 0xc
dec dword [ebp - 4]
jne 0x102bd04
cmp ebx, esi
je 0x102bf84
push 0x1003150
push ebx
call fcn.01028e39
pop ecx
pop ecx
jmp 0x102bf84
cmp ebx, esi
je 0x102bf48
push dword [ebp - 4]
push 0x1003108
push ebx
call fcn.01028e39
add esp, 0xc
cmp ebx, esi
je 0x102bf48
push dword [ebp - 4]
push 0x10030c0
push ebx
call fcn.01028e39
push dword [ebp - 4]
push 0x1003088
push ebx
call fcn.01028e39
add esp, 0x18
push dword [ebp - 8]
push dword [ebp + 0x10]
push dword [ebp - 0x10]
call fcn.0102b496
mov edi, eax
cmp edi, esi
jl 0x102c092
cmp ebx, esi
je 0x102bf75
push dword [ebp - 4]
push 0x1003054
push ebx
call fcn.01028e39
add esp, 0xc
mov eax, dword [ebp + 0x14]
cmp eax, esi
je 0x102bf84
mov ecx, dword [ebp + 0x10]
mov dword [eax], ecx
mov dword [ebp + 0x10], esi
mov dword [ebp + 0xc], esi
mov dword [ebp - 4], 2
cmp dword [ebp + 0xc], 3
jae 0x102c092
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 4]
xor ebx, ebx
call fcn.01033166
mov edi, eax
cmp edi, esi
jl 0x102c092
push esi
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 4]
call fcn.010331d1
mov edi, eax
cmp edi, esi
jl 0x102c092
push 1
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 4]
call fcn.010331d1
mov edi, eax
cmp edi, esi
jl 0x102c092
lea ecx, [ebp - 0x48]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
je 0x102c005
lea ecx, [ebp - 0x48]
call fcn.01006e57
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x102c073
inc ebx
lea ecx, [ebp - 0x38]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
je 0x102c02d
lea ecx, [ebp - 0x38]
call fcn.01006e57
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x102c073
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x28]
call fcn.01006e57
push eax
call fcn.0102919f
test eax, eax
je 0x102c055
lea ecx, [ebp - 0x28]
call fcn.01006e57
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x102c073
xor ebx, ebx
inc ebx
cmp ebx, esi
je 0x102c05e
mov dword [ebp + 0xc], esi
jmp 0x102c061
inc dword [ebp + 0xc]
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x3e8
jb 0x102bf8e
jmp 0x102c092
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x102c087
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, esi
jl 0x102c092
mov edi, 0x8000ffff
mov eax, dword [ebp + 0x10]
cmp eax, esi
je 0x102c09f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ebx, dword [ebp + 8]
cmp dword [ebp - 0x10], esi
je 0x102c0b0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp ebx, esi
je 0x102c0c3
push edi
push 0x1003028
push ebx
call fcn.01028e39
add esp, 0xc
cmp dword [ebp - 0x4c], esi
je 0x102c0d0
lea ecx, [ebp - 0x58]
call fcn.010069f9
cmp dword [ebp - 0x5c], esi
je 0x102c0dd
lea ecx, [ebp - 0x68]
call fcn.010069f9
cmp dword [ebp - 0x6c], esi
je 0x102c0ea
lea ecx, [ebp - 0x78]
call fcn.010069f9
cmp dword [ebp - 0x1c], esi
je 0x102c0f7
lea ecx, [ebp - 0x28]
call fcn.010069f9
cmp dword [ebp - 0x2c], esi
je 0x102c104
lea ecx, [ebp - 0x38]
call fcn.010069f9
cmp dword [ebp - 0x3c], esi
je 0x102c111
lea ecx, [ebp - 0x48]
call fcn.010069f9
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10