Function at 0x1007cd10
Capabilities:
Check for time delay via gettickcount
Delete file
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x62c
mov eax, dword [0x100b400c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x62c], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [edx + 4]
sub ecx, dword [edx]
mov dword [ebp - 0x628], edx
imul ecx
push ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push esi
push edi
cmp eax, 1
jb 0x1007cf71
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
lea eax, [ebp - 0x20c]
push 0
push 0x1c
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x20c]
push eax
push str._sTempAnvsoft
push eax
call fcn.100077f0
add esp, 0xc
lea ecx, [ebp - 0x20c]
call fcn.100049e0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ebx, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
push eax
call ebx
add esp, 4
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
push 0x64
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
push eax
call ebx
add esp, 4
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
push 0x64
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call ebx
add esp, 4
push edi
push esi
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push str._smerge__d_d_d.txt
push eax
call fcn.100077f0
push 0x100a5930
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x620]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
add esp, 0x24
test eax, eax
jne 0x1007cf71
mov ebx, dword [ebp - 0x628]
xor ecx, ecx
mov dword [ebp - 0x624], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebx + 4]
mov esi, dword [ebx]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1007cf05
xor edi, edi
cmp dword [edi + esi + 0x14], 8
lea ecx, [edi + esi]
jb 0x1007ce7c
mov ecx, dword [ecx]
call fcn.1007c570
mov esi, eax
test esi, esi
je 0x1007cf55
push esi
lea eax, [ebp - 0x61c]
push str.file__s_n
push eax
call fcn.1007d170
lea eax, [ebp - 0x61c]
add esp, 0xc
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1007ceb0
push dword [ebp - 0x620]
sub eax, edx
push eax
lea eax, [ebp - 0x61c]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push esi
call fcn.1008029f
mov ecx, dword [ebx + 4]
mov eax, 0x2aaaaaab
mov esi, dword [ebx]
add esp, 0x14
inc dword [ebp - 0x624]
sub ecx, esi
imul ecx
add edi, 0x18
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x624], eax
jb 0x1007ce70
push dword [ebp - 0x620]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea edx, [ebp - 0x414]
add esp, 4
lea esi, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1007cf20
mov ecx, dword [ebp - 0x62c]
lea eax, [ebp - 0x414]
sub edx, esi
sar edx, 1
push edx
push eax
call fcn.100052a0
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007fac0
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x620]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 4]
or eax, 0xffffffff
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1007fac0
mov esp, ebp
pop ebp
ret