Function at 0x1001d936
Capabilities:
Delete file

Disassembly:
mov eax, 0x10060495
call fcn.1005f648
sub esp, 0x1c
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], ecx
je 0x1001dabc
xor ebx, ebx
cmp byte [ebp + 0x14], bl
je 0x1001da7c
mov edi, dword [ebp + 0x28]
mov dword [edi], ebx
cmp dword [edi], 3
jg 0x1001daf7
mov esi, dword [ebp + 0x1c]
mov dword [ebp + 8], 0xb44cf592
lea ecx, [ebp - 0x28]
push 3
call fcn.100017ce
push ecx
push 1
lea eax, [ebp - 0x28]
mov dword [ebp - 4], ebx
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.1001b2ba
mov eax, dword [edi]
xor edx, edx
mov eax, dword [edi]
add esp, 0x10
mov ecx, dword [edi]
mov eax, dword [ebp - 0x10]
inc ecx
mov eax, dword [eax]
cmp ecx, dword [eax]
mov eax, dword [esi]
setle dl
add edx, dword [eax + 8]
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], edx
mov ecx, dword [edi]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp + 0x1c]
mov eax, dword [eax]
mov dword [eax], ecx
mov dword [ebp + 8], ecx
xor ecx, ecx
mov esi, dword [edi]
mov edi, dword [edi]
mov edx, dword [edx]
mov eax, dword [ebp + 8]
cmp eax, 0x1580eb60
setl cl
mov edx, dword [edx + esi*4]
mov esi, dword [ebp + 0x1c]
sub edx, ecx
xor ecx, ecx
mov eax, dword [esi]
cmp edx, dword [eax + edi*4]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp + 0x28]
setle cl
mov eax, dword [eax]
mov edx, dword [eax]
mov eax, dword [edi]
sub ecx, eax
imul ecx, edx
mov dword [ebp - 0x18], edx
test ecx, ecx
je 0x1001da0c
test edx, edx
je 0x1001da0c
xor edx, edx
inc edx
jmp 0x1001da0e
mov edx, ebx
mov eax, dword [esi]
xor ecx, ecx
cmp edx, dword [eax]
mov edx, dword [ebp + 0x38]
setge cl
imul eax, ecx, 0x2a5b
sub eax, dword [ebp - 0x18]
mov dword [edx], eax
mov eax, dword [ebp + 0x18]
mov eax, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [edi]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [edx]
neg ecx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
mov eax, dword [eax]
imul edx, dword [eax]
mov eax, 0x8a82fb34
sub edx, 0x51dbd7cc
cmp eax, edx
mov eax, dword [ebp + 0x18]
sbb ecx, ecx
inc ecx
mov eax, dword [eax]
sub ecx, eax
mov dword [ebp + 8], ecx
lea ecx, [ebp - 0x28]
or dword [ebp - 4], 0xffffffff
call fcn.10001830
inc dword [edi]
cmp dword [edi], 3
jle 0x1001d972
jmp 0x1001daf7
mov edx, dword [ebp + 0x20]
cmp dword [edx], ebx
jne 0x1001daa5
cmp dword [edx], 0x693009c
jg 0x1001daa8
cmp dword [edx], ebx
je 0x1001da94
xor esi, esi
inc esi
jmp 0x1001da96
mov esi, ebx
mov eax, dword [edx]
xor ecx, ecx
cmp esi, eax
mov eax, dword [edx]
setge cl
sub ecx, eax
je 0x1001daa8
xor ebx, ebx
inc ebx
mov ecx, dword [edx]
mov eax, dword [edx]
add ecx, ebx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp + 0x10]
sete dl
mov dword [eax], edx
jmp 0x1001daf7
cmp byte [ebp + 0x2c], 0
je 0x1001dae7
mov edx, dword [ebp + 0x34]
mov dword [edx], 0
cmp dword [edx], 1
jge 0x1001daf7
mov esi, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xaf11
inc dword [edx]
cmp dword [edx], 1
jl 0x1001dad3
jmp 0x1001daf7
mov eax, dword [ebp + 0x30]
cmp byte [eax], 0
je 0x1001daf7
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret