Function at 0x100118a8
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008b913
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14c
push esi
and dword [ebp - 0x7c], 0
mov dword [ebp - 0x14], 1
push 2
lea ecx, [ebp - 0xe4]
call fcn.10016f88
and dword [ebp - 4], 0
mov dword [ebp - 0x5c], 0
jmp 0x100118f3
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1001190f
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xe4]
call fcn.10016ff9
mov dword [eax], 0xfffffffa
jmp 0x100118ec
cmp dword [ebp - 0x14], 5
jge 0x10011921
mov dword [ebp - 0x9c], 1
jmp 0x10011928
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x9c], eax
jl 0x10011944
or eax, 0xffffffff
je 0x10011944
mov dword [ebp - 0xd8], 1
jmp 0x1001194b
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0xffffffff
je 0x1001195d
mov dword [ebp - 0x70], 1
jmp 0x10011961
and dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 0xffffffff
jne 0x10011973
mov dword [ebp - 0xb8], 1
jmp 0x1001197a
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
inc eax
jne 0x1001198f
cmp dword [ebp - 0x14], 0
jne 0x1001198f
and dword [ebp - 0x78], 0
jmp 0x10011996
mov dword [ebp - 0x78], 1
cmp dword [ebp - 0x78], 1
jne 0x100119a8
mov dword [ebp - 0xc0], 1
jmp 0x100119af
and dword [ebp - 0xc0], 0
push 1
lea ecx, [ebp - 0xe4]
call fcn.10016ff9
mov dword [eax], 0xfffffffe
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc0]
lea eax, [eax + ecx - 2]
cmp eax, dword [ebp - 0x14]
je 0x100119d8
cmp dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 1
jl 0x100119ea
cmp dword [ebp - 0x14], 0
jne 0x100119ea
and dword [ebp - 0x80], 0
jmp 0x100119f1
mov dword [ebp - 0x80], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x80]
lea eax, [ecx + eax + 0x7a42ad5e]
test eax, eax
je 0x10011b01
mov dword [ebp - 0x58], 0xa885c82f
mov dword [ebp - 0x64], 0x17854c3e
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
je 0x10011a45
push 1
lea ecx, [ebp - 0xe4]
call fcn.10016ff9
cmp dword [eax], 0
je 0x10011a45
mov dword [ebp - 0xc8], 1
jmp 0x10011a4c
and dword [ebp - 0xc8], 0
push 1
lea ecx, [ebp - 0xe4]
call fcn.10016ff9
mov ecx, dword [ebp - 0xc8]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10011a89
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x14], eax
jg 0x10011a89
push 1
lea ecx, [ebp - 0xe4]
call fcn.10016ff9
cmp dword [eax], 0
jne 0x10011a89
and dword [ebp - 0xd0], 0
jmp 0x10011a93
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xd0], eax
je 0x10011aaa
mov dword [ebp - 0x88], 1
jmp 0x10011ab1
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x88], eax
jg 0x10011ac8
mov dword [ebp - 0xd4], 1
jmp 0x10011acf
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xd4], eax
jne 0x10011ae3
mov dword [ebp - 0x68], 1
jmp 0x10011ae7
and dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x68]
sub esi, dword [ebp - 0xe8]
push 1
lea ecx, [ebp - 0xe4]
call fcn.10016ff9
mov dword [eax], esi
jmp 0x10011b2d
mov dword [ebp - 0x104], 0x1d70
mov dword [ebp - 0x10c], 0x24d8f3b1
lea eax, [ebp - 0x104]
push eax
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.10014942
add esp, 0xc
push 0
call fcn.10012ee0
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
call fcn.10016ff4
lea ecx, [ebp - 0x148]
call fcn.10016e80
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0x76820624
push 1
lea ecx, [ebp - 0x128]
call fcn.10016f88
mov byte [ebp - 4], 2
mov dword [ebp - 0x28], 0x79c4185a
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x128]
push eax
push 0
call fcn.10016840
add esp, 0xc
push 0x2402
push 0
lea eax, [ebp - 0x24]
push eax
push 0x68e2
call fcn.10014a9f
add esp, 0x10
mov dword [ebp - 0x24], 0
jmp 0x10011bb5
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10011c83
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x100], 0xffffffff
push dword [ebp - 0x24]
lea ecx, [ebp - 0x128]
call fcn.10016ff9
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], 0xffffffed
jmp 0x10011bf9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xb
jne 0x10011c7e
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0xfc], 0xfffffffc
push 0x777a
push 1
lea eax, [ebp - 0x2c]
push eax
call fcn.100117b8
add esp, 0xc
mov dword [ebp - 0x2c], 0
jmp 0x10011c33
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xd
jl 0x10011c79
mov dword [ebp - 0x38], 0xffffffe7
jmp 0x10011c49
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffee
jle 0x10011c77
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0
push 0x11cb
push 0x4992
call fcn.100117ff
add esp, 0x18
jmp 0x10011c42
jmp 0x10011c2c
jmp 0x10011bf2
jmp 0x10011bae
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.10016ff4
push dword [ebp + 0xc]
lea ecx, [ebp - 0x148]
call fcn.10016f51
and dword [ebp - 0x34], 0
jmp 0x10011cad
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp + 0xc]
jae 0x10011fd4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x18], 0xe8b01213
mov dword [ebp - 0x40], 0
jmp 0x10011cde
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10011cf1
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x50], 0x5683
jmp 0x10011cd7
mov dword [ebp - 0x10], 1
jmp 0x10011d01
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10011f93
mov dword [ebp - 0x11c], 0xc2076acb
mov dword [ebp - 0x118], 0xc2076acb
mov dword [ebp - 0x114], 0xc2076acb
mov dword [ebp - 0x110], 0xc2076acb
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x50]
mov edx, dword [ebp - 0x10]
imul ecx, dword [ebp + edx*4 - 0x50]
cmp dword [ebp + eax*4 - 0x50], ecx
jge 0x10011d57
mov dword [ebp - 0xbc], 1
jmp 0x10011d5e
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xbc]
sub ecx, dword [ebp + eax*4 - 0x50]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x50]
je 0x10011d83
mov dword [ebp - 0xa4], 1
jmp 0x10011d8a
and dword [ebp - 0xa4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa4]
sub ecx, dword [ebp + eax - 0x50]
push 4
pop eax
shl eax, 1
cmp ecx, dword [ebp + eax - 0x11c]
jne 0x10011db4
mov dword [ebp - 0xcc], 1
jmp 0x10011dbb
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, dword [ebp - 0xcc]
jle 0x10011dd6
mov dword [ebp - 0xac], 1
jmp 0x10011ddd
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 1
jne 0x10011df2
mov dword [ebp - 0xc4], 1
jmp 0x10011df9
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xc4], eax
je 0x10011e10
mov dword [ebp - 0xb4], 1
jmp 0x10011e17
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
cmp dword [ebp - 0xb4], eax
jl 0x10011e3f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0
jne 0x10011e3f
and dword [ebp - 0x84], 0
jmp 0x10011e49
mov dword [ebp - 0x84], 1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10011e65
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 0
je 0x10011ead
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf8], 0xfffffffc
cmp dword [ebp - 0xf4], 0
je 0x10011e87
jmp 0x10011f93
push 0x7b15
push 0x52f1
push 0x213c
push 1
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.100117ff
add esp, 0x18
jmp 0x10011ec8
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x10011ec8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0x18], 0x19
jmp 0x10011ed8
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff0
jne 0x10011f8e
mov dword [ebp - 0x60], 0
jmp 0x10011ef2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10011f08
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x158], 0
jmp 0x10011eeb
mov dword [ebp - 0x30], 0
jmp 0x10011f18
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10011f75
mov dword [ebp - 0x44], 0
jmp 0x10011f2e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10011f44
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x108], 0xfffffff7
jmp 0x10011f27
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x98], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x98]
mov dword [ebp + eax - 0x108], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x98]
mov dword [ebp + eax - 0x158], ecx
jmp 0x10011f11
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x10011f89
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x10011ed1
jmp 0x10011cfa
mov eax, dword [ebp + 0x10]
add eax, dword [ebp - 0x34]
xor edx, edx
div dword [0x10094680]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
movzx eax, byte [eax + edx]
push eax
mov eax, dword [ebp + 0x10]
add eax, dword [ebp - 0x34]
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
movzx eax, byte [ecx + eax]
push eax
call fcn.1000b318
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.10016f12
jmp 0x10011ca6
push 1
lea ecx, [ebp - 0x94]
call fcn.10016f88
mov byte [ebp - 4], 3
mov dword [ebp - 0xec], 0xfd52a42b
mov dword [ebp - 0x48], 0
jmp 0x10011fff
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1001201b
push dword [ebp - 0x48]
lea ecx, [ebp - 0x94]
call fcn.10016ff9
mov dword [eax], 0x9f9b3198
jmp 0x10011ff8
push 0
lea ecx, [ebp - 0x94]
call fcn.10016ff9
mov dword [eax], 0xffffffe3
jmp 0x10012054
push 0
lea ecx, [ebp - 0x94]
call fcn.10016ff9
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.10016ff9
cmp dword [eax], 0xe
jl 0x100121c5
mov dword [ebp - 0x54], 0
jmp 0x1001207a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1001208d
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1c], 0xf506e60b
jmp 0x10012073
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c], 0
jmp 0x100120b2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0xffffffff
jg 0x100121c0
mov dword [ebp - 0x3c], 0x3a3f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ebp + eax - 0x1c], ecx
jge 0x100120e5
mov dword [ebp - 0xa8], 1
jmp 0x100120ec
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0x5b1510af
jle 0x1001210a
cmp dword [ebp - 0x3c], 0
je 0x1001210a
mov dword [ebp - 0xb0], 1
jmp 0x10012111
and dword [ebp - 0xb0], 0
mov esi, dword [ebp - 0x3c]
mov eax, 0x89b1ab44
sub eax, dword [ebp - 0xb0]
sub esi, eax
push 0
lea ecx, [ebp - 0x94]
call fcn.10016ff9
cmp esi, dword [eax]
jle 0x1001213b
mov dword [ebp - 0x6c], 1
jmp 0x1001213f
and dword [ebp - 0x6c], 0
cmp dword [ebp - 0x6c], 0xffffffff
jg 0x10012151
mov dword [ebp - 0xf0], 1
jmp 0x10012158
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x12c], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.10016ff9
mov eax, dword [eax]
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1c]
jl 0x10012188
mov dword [ebp - 0x74], 1
jmp 0x1001218c
and dword [ebp - 0x74], 0
push 0
lea ecx, [ebp - 0x94]
call fcn.10016ff9
mov ecx, dword [ebp - 0x74]
imul ecx, dword [eax]
imul ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xec], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x100121bb
jmp 0x1001209d
jmp 0x1001209d
jmp 0x10012030
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x94]
call fcn.10016ff4
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp + 8]
call fcn.10016e91
mov eax, dword [ebp - 0x7c]
or eax, 1
mov dword [ebp - 0x7c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x148]
call fcn.10016eea
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret