Function at 0x105634e
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1198
call fcn.010720e0
mov eax, dword [0x1080bec]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 8]
push ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0x1198], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push esi
push 0x1005ba4
mov esi, 0x1005b84
push esi
call fcn.0106cc01
test eax, eax
jne 0x10567f4
push ebx
push 0x1005ce0
push 0x1005c6c
push esi
call fcn.0106cc01
test eax, eax
jne 0x10567f4
mov ax, word [edi + 0x8c]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
shr eax, 0xe
and eax, 1
push eax
lea eax, [ebp - 0x1184]
push 0x10032cc
push eax
call esi
and dword [ebp - 0x1188], 0
add esp, 0xc
test word [edi + 0x8c], 0x1fff
lea ebx, [ebp + eax*2 - 0x1184]
jbe 0x1056487
mov eax, dword [edi + 0x90]
mov ecx, dword [ebp - 0x1188]
mov eax, dword [eax + ecx*4]
test byte [eax + 0x182], 1
mov dword [ebp - 0x118c], eax
je 0x1056467
and dword [ebp - 0x1194], 0
cmp word [eax + 0x140], 0
jbe 0x1056467
add eax, 0x142
mov dword [ebp - 0x1190], eax
mov eax, dword [ebp - 0x1190]
movzx eax, word [eax]
push eax
push 0x1005cd8
push ebx
call esi
add dword [ebp - 0x1190], 2
lea ebx, [ebx + eax*2]
mov eax, dword [ebp - 0x118c]
movzx eax, word [eax + 0x140]
add esp, 0xc
inc dword [ebp - 0x1194]
cmp dword [ebp - 0x1194], eax
jl 0x105642d
inc dword [ebp - 0x1188]
xor eax, eax
mov ax, word [edi + 0x8c]
and eax, 0x1fff
cmp dword [ebp - 0x1188], eax
jl 0x10563f3
push dword [ebp - 0x1198]
lea eax, [ebp - 0x1184]
push eax
push 0x1005c60
push 0x1005c48
call fcn.0106cc01
test eax, eax
jne 0x10567f4
movzx eax, word [edi + 0x8c]
shr eax, 0xf
push eax
lea eax, [ebp - 0x1184]
push 0x10032cc
push eax
call esi
and dword [ebp - 0x1188], 0
add esp, 0xc
test word [edi + 0x8c], 0x1fff
lea eax, [ebp + eax*2 - 0x1184]
mov dword [ebp - 0x1190], eax
jbe 0x1056584
mov eax, dword [edi + 0x90]
mov ecx, dword [ebp - 0x1188]
mov ebx, dword [eax + ecx*4]
test byte [ebx + 0x182], 1
jne 0x1056564
and dword [ebp - 0x1194], 0
cmp word [ebx + 0x140], 0
jbe 0x1056564
lea eax, [ebx + 0x142]
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0x118c]
movzx eax, word [eax]
push eax
push 0x1005cd8
push dword [ebp - 0x1190]
call esi
mov ecx, dword [ebp - 0x1190]
add dword [ebp - 0x118c], 2
lea eax, [ecx + eax*2]
mov dword [ebp - 0x1190], eax
movzx eax, word [ebx + 0x140]
add esp, 0xc
inc dword [ebp - 0x1194]
cmp dword [ebp - 0x1194], eax
jl 0x105651f
inc dword [ebp - 0x1188]
xor eax, eax
mov ax, word [edi + 0x8c]
and eax, 0x1fff
cmp dword [ebp - 0x1188], eax
jl 0x10564ea
push dword [ebp - 0x1198]
lea eax, [ebp - 0x1184]
push eax
push 0x1005c30
push 0x1005c48
call fcn.0106cc01
test eax, eax
jne 0x10567f4
movzx eax, word [edi + 2]
push eax
lea eax, [ebp - 0x1184]
push 0x10032cc
push eax
call esi
add esp, 0xc
push dword [ebp - 0x1198]
lea eax, [ebp - 0x1184]
push eax
push 0x1005c20
push 0x1005c0c
call fcn.0106cc01
test eax, eax
jne 0x10567f4
and dword [ebp - 0x1188], eax
cmp word [edi + 2], ax
jbe 0x10566e7
lea ebx, [edi + 5]
push 0
push ebx
lea eax, [ebp - 0x84]
push eax
call fcn.0106d586
push ebx
push dword [0x1085d50]
call sub.NMAPI.dll_GetAddressInfo
mov dword [ebp - 0x118c], eax
push 0
lea eax, [ebx + 0x16]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0106d586
lea eax, [ebx + 0x16]
push eax
push dword [0x1085d50]
call sub.NMAPI.dll_GetAddressInfo
test eax, eax
lea edx, [eax + 0x16]
jne 0x1056640
mov edx, 0x1002860
mov eax, dword [ebp - 0x118c]
test eax, eax
lea ecx, [eax + 0x16]
jne 0x1056652
mov ecx, 0x1002860
movzx eax, byte [ebx - 1]
push edx
push ecx
lea ecx, [ebp - 0x44]
push ecx
push dword [ebx + 0x16]
lea ecx, [ebp - 0x84]
push ecx
push dword [ebx]
mov ecx, eax
shr ecx, 1
and ecx, 3
push ecx
and eax, 1
push eax
lea eax, [ebp - 0x1184]
push 0x1005c98
push eax
call esi
mov eax, dword [ebp - 0x1188]
inc eax
push eax
push 0x1005bf4
mov dword [ebp - 0x118c], eax
lea eax, [ebp - 0x104]
push 0x1005be8
push eax
call esi
add esp, 0x38
push dword [ebp - 0x1198]
lea eax, [ebp - 0x1184]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x1005c0c
call fcn.0106cc01
test eax, eax
jne 0x10567f4
movzx ecx, word [edi + 2]
mov eax, dword [ebp - 0x118c]
add ebx, 0x2d
cmp eax, ecx
mov dword [ebp - 0x1188], eax
jl 0x10565f5
xor eax, eax
cmp dword [edi + 0x94], eax
jle 0x10567e2
lea ebx, [edi + 0x98]
mov dword [ebp - 0x1190], ebx
inc eax
push eax
push 0x1431
mov dword [ebp - 0x118c], eax
call fcn.0106bcca
push eax
lea eax, [ebp - 0x184]
push eax
call esi
xor eax, eax
add esp, 0xc
cmp dword [ebx], eax
jle 0x10567c7
add ebx, 0xd
inc eax
push eax
push 0x1005bb4
mov dword [ebp - 0x1194], eax
lea eax, [ebp - 0x104]
push 0x1005be8
push eax
call esi
mov eax, dword [ebx - 9]
add esp, 0x10
and eax, 1
cmp byte [ebx - 5], 1
jne 0x105675a
or eax, 2
movzx ecx, word [ebx]
push ecx
movzx ecx, word [ebx - 2]
push ecx
push eax
lea eax, [ebp - 0x1184]
push 0x1005c7c
push eax
call esi
movzx ecx, word [ebx]
add esp, 0x14
push ecx
lea ecx, [ebx + 2]
lea eax, [ebp + eax*2 - 0x1184]
push ecx
push eax
call fcn.0106c0b5
push dword [ebp - 0x1198]
lea eax, [ebp - 0x1184]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x184]
push eax
call fcn.0106cc01
test eax, eax
jne 0x10567f4
mov eax, dword [ebp - 0x1194]
mov ecx, dword [ebp - 0x1190]
add ebx, 0x1b
cmp eax, dword [ecx]
jl 0x105672d
mov ebx, ecx
mov eax, dword [ebp - 0x118c]
add ebx, 0x70
cmp eax, dword [edi + 0x94]
mov dword [ebp - 0x1190], ebx
jl 0x1056701
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01070ac3
leave
ret 0xc
xor eax, eax
jmp 0x10567e5