Function at 0x100b4ca8
Capabilities:
Delete file
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [0x10193514]
mov ecx, dword [0x10193518]
lea edx, [eax - 1]
imul edx, eax
test dl, 1
sete byte [ebp - 0x11]
cmp ecx, 0xa
setl byte [ebp - 0x12]
mov eax, 0x3dd66a2f
mov esi, 0x104
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp eax, 0xeffbcdbe
jle 0x100b4d48
cmp eax, 0x3227593a
jle 0x100b4da5
cmp eax, 0x49741284
jle 0x100b4e49
cmp eax, 0x56949267
jle 0x100b4f47
cmp eax, 0x6b057199
jg 0x100b50db
cmp eax, 0x56949268
je 0x100b50f0
cmp eax, 0x56ec0792
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8d1562d8
mov ecx, 0x33197127
jmp 0x100b53bf
cmp eax, 0xc4fdc814
jle 0x100b4df9
cmp eax, 0xe363f3a8
jle 0x100b4ec8
cmp eax, 0xeae9b73b
jg 0x100b4f72
cmp eax, 0xe363f3a9
je 0x100b510d
cmp eax, 0xe46ef7eb
je 0x100b512a
cmp eax, 0xeaaf6237
jne 0x100b4ce6
push eax
sub esp, 0x100
mov eax, esp
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, 0x94a62b98
jmp 0x100b4ce6
cmp eax, 0x11dc726c
jle 0x100b4f11
cmp eax, 0x19f4f273
jg 0x100b4fb0
cmp eax, 0x11dc726d
je 0x100b5141
cmp eax, 0x131e60ba
je 0x100b515c
cmp eax, 0x18034715
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xec5efb99
mov ecx, 0xef9460ef
jmp 0x100b53bf
cmp eax, 0x98006735
jg 0x100b4e7f
cmp eax, 0x94a62b97
jle 0x100b4fee
cmp eax, 0x94a62b98
je 0x100b5166
cmp eax, 0x96874fb2
je 0x100b5194
cmp eax, 0x97f535da
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe46ef7eb
mov ecx, 0xeae9b73c
jmp 0x100b53bf
cmp eax, 0x399cb5a5
jg 0x100b5021
cmp eax, 0x3227593b
je 0x100b51b1
cmp eax, 0x33197127
je 0x100b51c8
cmp eax, 0x37f96643
jne 0x100b4ce6
mov eax, 0xf3f89ed6
jmp 0x100b4ce6
cmp eax, 0xa558a8d5
jle 0x100b5055
cmp eax, 0xa558a8d6
je 0x100b51e5
cmp eax, 0xab68017b
je 0x100b5202
cmp eax, 0xacb91bb3
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xce2b7aa7
mov ecx, 0xeffbcdbf
jmp 0x100b53bf
cmp eax, 0xce2b7aa6
jle 0x100b5088
cmp eax, 0xce2b7aa7
je 0x100b521f
cmp eax, 0xcfe5787c
je 0x100b523c
cmp eax, 0xdc01a876
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x96874fb2
mov ecx, 0xa558a8d6
jmp 0x100b53bf
cmp eax, 0xf7a5b53e
jle 0x100b50a8
cmp eax, 0xf7a5b53f
je 0x100b5259
cmp eax, 0xfabf18bf
je 0x100b5276
cmp eax, 0x57ace9f
jne 0x100b4ce6
mov eax, 0xab68017b
jmp 0x100b4ce6
cmp eax, 0x49741285
je 0x100b52a0
cmp eax, 0x532eaf75
je 0x100b52aa
cmp eax, 0x5528f68b
jne 0x100b4ce6
mov eax, 0xc4fdc815
jmp 0x100b4ce6
cmp eax, 0xeae9b73c
je 0x100b5307
cmp eax, 0xec5efb99
je 0x100b5331
cmp eax, 0xef9460ef
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xce2b7aa7
mov ecx, 0xf3f89ed6
jmp 0x100b53bf
cmp eax, 0x19f4f274
je 0x100b533b
cmp eax, 0x1ee74e34
je 0x100b5355
cmp eax, 0x272996c2
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x49741285
mov ecx, 0x131e60ba
jmp 0x100b53bf
cmp eax, 0x83e7fc3f
je 0x100b535f
cmp eax, 0x8d1562d8
jne 0x100b53d1
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3227593b
mov ecx, 0xfabf18bf
jmp 0x100b53bf
cmp eax, 0x399cb5a6
je 0x100b5379
cmp eax, 0x3dd66a2f
jne 0x100b53de
mov cl, byte [ebp - 0x11]
cmp byte [ebp - 0x12], 0
mov eax, 0x735c340c
mov edx, 0x56949268
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x100b4ce6
cmp eax, 0x98006736
je 0x100b5383
cmp eax, 0x98c39a6e
jne 0x100b53eb
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x11dc726d
mov ecx, 0x532eaf75
jmp 0x100b53bf
cmp eax, 0xc4fdc815
je 0x100b538d
cmp eax, 0xca53ffa0
jne 0x100b4ce6
mov eax, 0x97f535da
jmp 0x100b4ce6
cmp eax, 0xeffbcdbf
je 0x100b53a7
cmp eax, 0xf3f89ed6
jne 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6b05719a
mov ecx, 0x414f8b0a
jmp 0x100b53bf
cmp eax, 0x735c340c
jne 0x100b53f8
mov eax, 0x56949268
jmp 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x735c340c
mov ecx, 0xe363f3a9
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x96874fb2
mov ecx, 0x98c39a6e
jmp 0x100b53bf
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call edi
push dword [ebp - 0x10]
call ebx
mov eax, 0xeae9b73c
jmp 0x100b4ce6
push eax
sub esp, 0x100
mov eax, esp
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, 0x532eaf75
jmp 0x100b4ce6
mov eax, 0x83e7fc3f
jmp 0x100b4ce6
push eax
sub esp, 0x100
mov eax, esp
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeaaf6237
mov ecx, 0x98006736
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeaaf6237
mov ecx, 0x94a62b98
jmp 0x100b53bf
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call edi
push dword [ebp - 0x10]
call ebx
mov eax, 0xfabf18bf
jmp 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x49741285
mov ecx, 0x272996c2
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ee74e34
mov ecx, 0xf7a5b53f
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x57ace9f
mov ecx, 0xcfe5787c
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9adf7cf0
mov ecx, 0x8beb81a6
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8d1562d8
mov ecx, 0x97f535da
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ee74e34
mov ecx, 0x399cb5a6
jmp 0x100b53bf
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call edi
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3227593b
mov ecx, 0xca53ffa0
jmp 0x100b53bf
mov eax, 0x272996c2
jmp 0x100b4ce6
push eax
sub esp, 0x100
mov eax, esp
sub esp, 0x10
mov ecx, 0x104
mov esi, esp
mov dword [ebp - 0x10], eax
push ecx
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [esi], 0x6665445c
mov dword [esi + 4], 0x746c7561
mov dword [esi + 8], 0x79656b2e
mov byte [esi + 0xc], 0
mov dword [ebp - 0x18], esi
mov esi, 0x104
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x11dc726d
mov ecx, 0xdc01a876
jmp 0x100b53bf
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call edi
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe46ef7eb
mov ecx, 0x56ec0792
jmp 0x100b53bf
mov eax, 0x18034715
jmp 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x57ace9f
mov ecx, 0xab68017b
jmp 0x100b53bf
mov eax, 0xf7a5b53f
jmp 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xec5efb99
mov ecx, 0x18034715
jmp 0x100b53bf
mov eax, 0x19f4f274
jmp 0x100b4ce6
mov eax, 0x98c39a6e
jmp 0x100b4ce6
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5528f68b
mov ecx, 0x8527cb84
jmp 0x100b53bf
mov eax, dword [0x10193514]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5528f68b
mov ecx, 0xc4fdc815
cmove eax, ecx
cmp dword [0x10193518], 0xa
cmovl eax, ecx
jmp 0x100b4ce6
cmp eax, 0x8beb81a6
jne 0x100b4ce6
jmp 0x100b5403
cmp eax, 0x414f8b0a
jne 0x100b4ce6
jmp 0x100b5403
cmp eax, 0x9adf7cf0
jne 0x100b4ce6
jmp 0x100b5403
cmp eax, 0x6b05719a
jne 0x100b4ce6
call fcn.100b15ce
push 0
call fcn.10159be0
int3