Function at 0x1021363
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xab0
mov eax, dword [0x1030118]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x16
pop eax
mov dword [ebp - 0xa80], eax
lea eax, [ebp - 0xa60]
push eax
xor edx, edx
mov dword [ebp - 0xa88], 0x19
mov dword [ebp - 0xa70], 0x1d
mov dword [ebp - 0xa78], 0x1f
call fcn.0101f727
lea eax, [ebp - 0xa20]
push eax
call fcn.0101f727
lea eax, [ebp - 0xa54]
push eax
call fcn.0101f727
lea eax, [ebp - 0xa6c]
push eax
call fcn.0101f727
lea eax, [ebp - 0xa3c]
push eax
call fcn.0101f727
mov edi, 0xfde9
push edi
push edx
xor eax, eax
push 0x17
mov word [ebp - 0x60c], ax
mov eax, dword [ebx]
push 0x836
push dword [eax + 0x1c]
lea eax, [ebp - 0xa60]
push eax
mov dword [ebp - 0xa30], edx
mov dword [ebp - 0xa2c], edx
mov dword [ebp - 0xa48], edx
call fcn.010204bb
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebp - 0xa60]
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebx]
mov eax, dword [eax + 0xc]
add eax, 0x20
shl eax, 0xa
add eax, ecx
push eax
lea eax, [ebp - 0xa20]
push eax
mov dword [ebp - 0xa10], ecx
call fcn.0101f791
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebx]
mov eax, dword [eax + 0xc]
add eax, 0x20
shl eax, 9
push eax
lea eax, [ebp - 0xa54]
push eax
call fcn.0101f791
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebx]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x102153a
push ecx
push dword [eax + 4]
lea eax, [ebp - 0x60c]
push 0x100245c
push 0x208
push eax
call fcn.0101d67b
add esp, 0x14
test eax, eax
jge 0x10214ba
mov esi, eax
jmp 0x1021dd2
lea eax, [ebp - 0xa28]
push eax
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0x60c]
push eax
call fcn.0101f4d6
mov esi, eax
test esi, esi
jne 0x1021dd2
lea eax, [ebp - 0xa28]
push eax
lea eax, [ebp - 0xa2c]
push eax
push edi
push dword [ebp - 0xa28]
push dword [ebp - 0xa30]
call fcn.0101f3f1
mov esi, eax
test esi, esi
jne 0x1021dd2
mov edi, dword [ebp - 0xa2c]
lea eax, [ebx + 0x7e8]
push eax
push 0x1004b68
lea eax, [ebp - 0x404]
push 0x400
push eax
mov dword [ebp - 0xa48], 1
call fcn.0101d67b
add esp, 0x10
jmp 0x1021548
xor eax, eax
mov edi, 0x1001920
mov word [ebp - 0x404], ax
lea edx, [ebp - 0x404]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1021553
push 1
sub eax, esi
sar eax, 1
push eax
push edx
push 0x1d
pop eax
push eax
mov eax, 0x1004b2c
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1021591
push 1
sub eax, edx
sar eax, 1
push eax
push edi
push 0x16
pop eax
push eax
mov eax, 0x1004afc
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebx]
xor edi, edi
cmp dword [eax + 0x10], edi
jne 0x10215e1
cmp dword [eax + 0x14], edi
jne 0x10215e1
mov eax, 0x1001920
xor ecx, ecx
jmp 0x102161f
lea eax, [ebp - 0xa3c]
push eax
call fcn.0101f76f
lea eax, [ebx + 0xc98]
push eax
push 0x1004ad8
lea eax, [ebp - 0xa3c]
push edi
push eax
call fcn.0102049d
mov esi, eax
add esp, 0x10
cmp esi, edi
jne 0x1021dd2
mov eax, dword [ebp - 0xa3c]
mov ecx, dword [ebp - 0xa38]
push 1
push ecx
push eax
push 0x19
pop eax
push eax
mov eax, 0x1004aa4
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
push 1
push eax
mov eax, 0x1001920
push eax
push 0x18
pop eax
push eax
mov eax, 0x1004a70
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebx]
cmp dword [eax + 0x3c], esi
je 0x10216b0
cmp dword [eax + 0xc], esi
je 0x10216b0
push 1
xor eax, eax
push eax
mov eax, 0x1001920
push eax
push 0x16
pop eax
push eax
mov eax, 0x1004a40
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
jmp 0x10216c8
push 1
push 0x16
pop eax
push eax
mov eax, 0x1004a40
push eax
lea eax, [ebp - 0xa14]
push eax
call fcn.0101f9e0
mov esi, eax
test esi, esi
jne 0x1021dd2
push 1
push eax
mov eax, 0x1001920
push eax
push 0x17
pop eax
push eax
mov eax, 0x1004a10
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0xa40], eax
lea eax, [ebp - 0xa54]
push eax
push ebx
call fcn.01020f0c
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0xa28], edx
cmp edx, ecx
je 0x1021cb8
cmp dword [eax + 0x40], 0
je 0x1021768
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x1021768
push dword [eax + 0xc]
push dword [ebp - 0xa24]
call ecx
mov eax, dword [ebp - 0xa44]
mov edi, dword [ebp - 0xa28]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0xa10], eax
lea eax, [ebp - 0xa54]
push eax
push dword [ebp - 0xa24]
push edi
push ebx
call fcn.01021184
mov esi, eax
test esi, esi
jne 0x1021dd2
push dword [ebp - 0xa24]
lea eax, [ebp - 0x404]
push dword [ebp - 0xa24]
push 0x10049c0
push 0x400
push eax
call fcn.0101d67b
lea ecx, [ebp - 0x404]
mov eax, ecx
add esp, 0x14
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
test si, si
jne 0x10217d4
push 1
sub eax, edx
sar eax, 1
push eax
push ecx
push 0x11
pop eax
push eax
mov eax, 0x1004998
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
push 1
push eax
mov eax, 0x1001920
push eax
push 0x10
pop eax
push eax
mov eax, 0x1004974
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
push dword [edi + 0x10]
lea eax, [ebp - 0xa20]
push dword [edi + 0xc]
push eax
call fcn.0101f94e
mov esi, eax
test esi, esi
jne 0x1021dd2
mov edi, dword [ebp - 0xa24]
cmp edi, 1
jbe 0x1021879
lea eax, [edi - 1]
push eax
push 0x10048e0
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
add esp, 0x10
jmp 0x1021892
push 0x10048b4
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
add esp, 0xc
lea edx, [ebp - 0x404]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x102189d
push 1
sub eax, esi
sar eax, 1
push eax
push edx
push 0x1d
pop eax
push eax
mov eax, 0x1004878
push eax
push 0x1f
pop eax
push eax
mov eax, 0x1004838
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa8c
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [ebx]
cmp edi, dword [eax + 0xc]
jae 0x1021906
lea eax, [edi + 1]
push eax
push 0x10047e8
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
add esp, 0x10
jmp 0x102191f
push 0x10048b4
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
add esp, 0xc
lea edx, [ebp - 0x404]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x102192a
push 1
sub eax, esi
sar eax, 1
push eax
push edx
push dword [ebp - 0xa88]
mov eax, 0x10047b4
push eax
push 0x1b
pop eax
push eax
mov eax, 0x100477c
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa8c
mov esi, eax
test esi, esi
jne 0x1021dd2
push edi
push 0x1001d7c
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
lea ecx, [ebp - 0x404]
mov eax, ecx
add esp, 0x10
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
test si, si
jne 0x1021994
push 1
sub eax, edx
sar eax, 1
push eax
push ecx
push 0x17
pop eax
push eax
mov eax, 0x100474c
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov edi, dword [ebp - 0xa28]
push 0x200
lea eax, [ebp - 0x404]
push eax
add edi, 0xc4
push edi
call fcn.0101fc37
mov esi, eax
test esi, esi
jne 0x1021dd2
lea edx, [ebp - 0x404]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1021a00
push 1
sub eax, esi
sar eax, 1
push eax
push edx
push 0x16
pop eax
push eax
mov eax, 0x100471c
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
push 0x200
lea eax, [ebp - 0x404]
push eax
push edi
call fcn.0101fcbe
mov esi, eax
test esi, esi
jne 0x1021dd2
lea edx, [ebp - 0x404]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1021a60
sub eax, esi
push 1
sar eax, 1
push eax
push edx
push dword [ebp - 0xa80]
mov eax, 0x10046ec
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
push 1
push eax
mov eax, 0x1001920
push eax
push dword [ebp - 0xa70]
mov eax, 0x10046b0
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov edi, dword [ebp - 0xa28]
push dword [edi + 0x10]
lea eax, [ebp - 0xa20]
push dword [edi + 0xc]
push eax
call fcn.0101f94e
mov esi, eax
test esi, esi
jne 0x1021dd2
mov eax, dword [edi + 0x58]
mov esi, dword [edi + 0x54]
mov ecx, dword [edi + 0x8c]
test eax, eax
je 0x1021b6d
cmp ecx, 0x64
jle 0x1021b6d
cmp ecx, 0x2f4
jge 0x1021b28
push ecx
push 0x1004688
lea eax, [ebp - 0xa0c]
push 0x400
push eax
call fcn.0101d67b
add esp, 0x10
jmp 0x1021b31
xor eax, eax
mov word [ebp - 0xa0c], ax
push esi
lea eax, [ebp - 0xa0c]
push eax
push esi
push 0x1004608
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
lea ecx, [ebp - 0x404]
mov eax, ecx
add esp, 0x18
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
test si, si
jne 0x1021b5e
jmp 0x1021c34
mov eax, dword [ebx]
cmp dword [eax + 0x38], 0
je 0x1021bff
lea eax, [ebp - 0xa6c]
push eax
push 0x2ea
push edi
push ebx
call fcn.01020797
mov esi, eax
test esi, esi
jne 0x1021dd2
lea eax, [ebp - 0xa3c]
push eax
call fcn.0101f76f
lea eax, [ebx + 0xbd0]
push eax
lea eax, [ebx + 0x8b0]
push eax
push 0x10045d4
lea eax, [ebp - 0xa3c]
push esi
push eax
call fcn.0102049d
mov esi, eax
add esp, 0x14
test esi, esi
jne 0x1021dd2
push dword [ebp - 0xa68]
lea eax, [ebp - 0xa3c]
push dword [ebp - 0xa6c]
push eax
call fcn.0101f8c8
mov esi, eax
test esi, esi
jne 0x1021dd2
mov ecx, dword [ebp - 0xa3c]
mov eax, dword [ebp - 0xa38]
jmp 0x1021c38
lea eax, [ebx + 0x8b0]
push eax
push 0x1004548
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0101d67b
lea ecx, [ebp - 0x404]
mov eax, ecx
add esp, 0x10
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
test si, si
jne 0x1021c2a
sub eax, edx
sar eax, 1
push 1
push eax
push ecx
push dword [ebp - 0xa78]
mov eax, 0x1004508
push eax
push 0x21
pop eax
push eax
mov eax, 0x10044c0
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa8c
mov esi, eax
test esi, esi
jne 0x1021dd2
push 1
push eax
mov eax, 0x1001920
push eax
push 0x15
pop eax
push eax
mov eax, 0x1004494
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
mov ecx, dword [edi]
mov eax, dword [ebx]
inc dword [ebp - 0xa24]
mov dword [ebp - 0xa28], ecx
cmp ecx, dword [eax + 8]
jne 0x1021750
mov eax, dword [ebx]
cmp dword [eax + 0x40], 0
je 0x1021ccf
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x1021ccf
mov eax, dword [eax + 0xc]
push eax
inc eax
push eax
call ecx
mov eax, dword [ebp - 0xa44]
push 1
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa40]
push 0x15
mov dword [ebp - 0xa10], eax
pop eax
push eax
mov eax, 0x1004494
push eax
lea eax, [ebp - 0xa14]
push eax
call fcn.0101f9e0
mov esi, eax
test esi, esi
jne 0x1021dd2
push 1
push eax
mov eax, 0x1001920
push eax
push 0x12
pop eax
push eax
mov eax, 0x100446c
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.0101fa20
mov esi, eax
test esi, esi
jne 0x1021dd2
push dword [ebp - 0xa50]
lea eax, [ebp - 0xa20]
push dword [ebp - 0xa54]
push eax
call fcn.0101f94e
mov esi, eax
test esi, esi
jne 0x1021dd2
push dword [ebp - 0xa10]
lea eax, [ebp - 0xa20]
push dword [ebp - 0xa14]
push eax
call fcn.0101f8c8
mov esi, eax
test esi, esi
jne 0x1021dd2
push 9
pop ecx
lea edi, [ebp - 0xab0]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xa1c]
add eax, eax
mov dword [ebp - 0xaa0], eax
xor eax, eax
inc eax
mov dword [ebp - 0xa98], eax
mov dword [ebp - 0xa94], eax
lea eax, [ebp - 0xab0]
push eax
push dword [ebx + 4]
mov dword [ebp - 0xaac], 0x1004460
mov dword [ebp - 0xaa8], 0x1004454
call fcn.01020034
mov esi, eax
test esi, esi
jne 0x1021dd2
lea eax, [ebp - 0xa60]
push eax
call fcn.0101f747
lea eax, [ebp - 0xa54]
push eax
call fcn.0101f747
lea eax, [ebp - 0xa20]
push eax
call fcn.0101f747
lea eax, [ebp - 0xa6c]
push eax
call fcn.0101f747
lea eax, [ebp - 0xa3c]
push eax
call fcn.0101f747
xor edi, edi
cmp dword [ebp - 0xa30], edi
je 0x1021e24
push dword [ebp - 0xa30]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [ebp - 0xa2c], edi
je 0x1021e40
push dword [ebp - 0xa2c]
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0xa48], edi
je 0x1021e60
cmp esi, edi
jne 0x1021e60
mov eax, dword [ebx]
cmp dword [eax + 0x24], edi
je 0x1021e60
lea eax, [ebp - 0x60c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0101bc5d
leave
ret 4