Function at 0x10053fb6
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e3870
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x101a12fc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov byte [0x101b9e5f], 0
mov dword [0x101b9788], 0
mov byte [0x101b978c], 0
mov al, byte [esi + 0x50]
mov byte [0x101b9e5e], al
test al, al
je 0x100536eb
lea eax, [ebp - 0x88]
push 0x101b99a8
push eax
call fcn.1009ef60
mov edi, 0x101a04d4
mov dword [ebp - 0xf0], eax
add esp, 8
cmp eax, edi
je 0x100536bd
cmp dword [0x101a04e8], 8
jb 0x10053698
push dword [0x101a04d4]
call fcn.100dd8b4
mov eax, dword [ebp - 0xf0]
add esp, 4
xor ecx, ecx
mov dword [0x101a04e8], 7
mov word [0x101a04d4], cx
mov ecx, edi
push eax
mov dword [0x101a04e4], 0
call fcn.10020eb0
cmp dword [ebp - 0x74], 8
jb 0x100536d1
push dword [ebp - 0x88]
call fcn.100dd8b4
add esp, 4
xorps xmm0, xmm0
mov dword [0x101a0448], 0x101ba158
movdqu xmmword [0x101ba158], xmm0
jmp 0x10053790
lea edi, [esi + 4]
lea eax, [ebp - 0xa0]
push edi
push eax
call fcn.1009ef30
mov ecx, eax
add esp, 8
mov eax, 0x101a04d4
mov dword [ebp - 0xf0], ecx
cmp ecx, eax
je 0x10053756
cmp dword [0x101a04e8], 8
jb 0x10053731
push dword [0x101a04d4]
call fcn.100dd8b4
mov ecx, dword [ebp - 0xf0]
add esp, 4
mov eax, 0x101a04d4
xor edx, edx
mov dword [0x101a04e8], 7
push ecx
mov ecx, eax
mov dword [0x101a04e4], 0
mov word [0x101a04d4], dx
call fcn.10020eb0
cmp dword [ebp - 0x8c], 8
jb 0x1005376d
push dword [ebp - 0xa0]
call fcn.100dd8b4
add esp, 4
cmp dword [edi + 0x14], 0x10
jb 0x10053775
mov edi, dword [edi]
push 0xffffffffffffffff
push edi
push 0x104
push 0x101b99a8
call dword [0x100ef3a0]
add esp, 0x10
mov edi, 0x101a04d4
cmp dword [0x101a04e8], 8
mov eax, edi
push 2
cmovae eax, dword [0x101a04d4]
push 0
push eax
call fcn.100d082c
add esp, 0xc
mov dword [0x101b9f68], eax
test eax, eax
je 0x100537c2
mov byte [0x101b9e5c], 0
cmp eax, 1
jne 0x100537c9
mov byte [0x101b9e5c], 1
lea eax, [ebp - 0xb8]
push 0x101b99a8
push eax
call fcn.1009ef60
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x100537e5
mov eax, dword [eax]
push 0
push eax
call fcn.100d0838
add esp, 8
mov byte [0x101b9ce3], al
cmp dword [ebp - 0xa4], 8
jb 0x10053811
push dword [ebp - 0xb8]
call fcn.100dd8b4
mov al, byte [0x101b9ce3]
add esp, 4
test al, al
je 0x10053838
push 0x101b9ab0
call fcn.100ca410
add esp, 4
test al, al
jne 0x10053838
push str.Error_debugging_DLL__loaddll.exe_not_found__n
call fcn.10044d60
add esp, 4
jmp 0x10054051
push 0x101b99a8
push 0
call fcn.100461a0
add esp, 8
cmp byte [esi + 0x50], 0
jne 0x10053c0b
push 0
push 0
call fcn.10045490
add esp, 8
call fcn.100280e0
test al, al
jne 0x1005387d
call fcn.100280a0
test eax, eax
je 0x1005387d
cmp byte [eax], 0
je 0x1005387d
push eax
lea ecx, [esi + 0x1c]
call fcn.10018390
lea eax, [esi + 0x1c]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.1009ef30
mov ecx, eax
add esp, 8
mov eax, 0x101a04ec
mov dword [ebp - 0xf4], ecx
cmp ecx, eax
je 0x100538e8
cmp dword [0x101a0500], 8
jb 0x100538c3
push dword [0x101a04ec]
call fcn.100dd8b4
mov ecx, dword [ebp - 0xf4]
add esp, 4
mov eax, 0x101a04ec
xor edx, edx
mov dword [0x101a0500], 7
push ecx
mov ecx, eax
mov dword [0x101a04fc], 0
mov word [0x101a04ec], dx
call fcn.10020eb0
cmp dword [ebp - 0xd4], 8
jb 0x100538ff
push dword [ebp - 0xe8]
call fcn.100dd8b4
add esp, 4
lea eax, [esi + 0x34]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.1009ef30
mov ecx, eax
add esp, 8
mov eax, 0x101a0504
mov dword [ebp - 0xf4], ecx
cmp ecx, eax
je 0x1005396a
cmp dword [0x101a0518], 8
jb 0x10053945
push dword [0x101a0504]
call fcn.100dd8b4
mov ecx, dword [ebp - 0xf4]
add esp, 4
mov eax, 0x101a0504
xor edx, edx
mov dword [0x101a0518], 7
push ecx
mov ecx, eax
mov dword [0x101a0514], 0
mov word [0x101a0504], dx
call fcn.10020eb0
cmp dword [ebp - 0xbc], 8
jb 0x10053981
push dword [ebp - 0xd0]
call fcn.100dd8b4
add esp, 4
cmp byte [0x101b9ce3], 0
mov eax, 0x101a0504
mov ecx, 0x101a04ec
je 0x100539c8
cmp dword [0x101a0518], 8
cmovae eax, dword [0x101a0504]
cmp dword [0x101a0500], 8
push eax
cmovae ecx, dword [0x101a04ec]
cmp dword [0x101a04e8], 8
push ecx
cmovae edi, dword [0x101a04d4]
push edi
call fcn.1004b2e0
jmp 0x100539fa
cmp dword [0x101a0518], 8
cmovae eax, dword [0x101a0504]
cmp dword [0x101a0500], 8
push eax
cmovae ecx, dword [0x101a04ec]
cmp dword [0x101a04e8], 8
push ecx
cmovae edi, dword [0x101a04d4]
push edi
call fcn.100d0844
add esp, 0xc
mov dword [0x101a0448], eax
test eax, eax
jne 0x10053b51
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [0x100ef84c]
sub esp, 0x18
mov byte [ebp - 0xe9], al
mov ecx, esp
push esi
push str.winerror__x
push ecx
call fcn.1009f310
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
call fcn.1009ce80
add esp, 0x1c
mov dword [ebp - 4], 0
cmp esi, 0x2e4
jne 0x10053afe
cmp byte [ebp - 0xe9], 0
jne 0x10053b07
mov esi, dword [0x100ef930]
push str.The_executable_you_are_trying_to_debug_requires_elevation._Restart_as_admin_
call esi
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.1009ef60
push str.Elevation
mov byte [ebp - 4], 1
call esi
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1009ef60
add esp, 0x18
cmp dword [ebp - 0x5c], 8
lea ecx, [ebp - 0x70]
push 0x24
cmovae ecx, dword [ebp - 0x70]
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
push ecx
cmovae eax, dword [ebp - 0x58]
push eax
mov byte [ebp - 4], 2
call dword [0x100ef8d0]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x10053ae8
call fcn.10052c60
test al, al
je 0x10053ae8
mov dword [0x101a0448], 0x101b9e4c
call dword [0x100ef83c]
lea ecx, [ebp - 0x70]
call fcn.1000c950
lea ecx, [ebp - 0x58]
call fcn.1000c950
jmp 0x10053b37
lea ecx, [ebp - 0x70]
call fcn.1000c950
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.1000c950
jmp 0x10053b14
cmp byte [ebp - 0xe9], 0
je 0x10053b14
push str.__uiAccess_true_
lea ecx, [ebp - 0x28]
call fcn.100079d0
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
mov dword [0x101a0448], 0x101b9e4c
cmovae eax, dword [ebp - 0x28]
push eax
push str.Error_starting_process__CreateProcess___s___n
call fcn.10044d60
add esp, 8
cmp dword [ebp - 0x14], 0x10
jb 0x10054051
push dword [ebp - 0x28]
call fcn.100dd8b4
add esp, 4
jmp 0x10054051
mov edi, dword [sym.imp.KERNEL32.dll_IsWow64Process]
lea ecx, [ebp - 0xfc]
push ecx
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf0], 0
push dword [eax]
call edi
test eax, eax
je 0x10053bf4
lea eax, [ebp - 0xf0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
test eax, eax
je 0x10053bf4
cmp dword [ebp - 0xf0], 0
je 0x10053bd9
cmp dword [ebp - 0xfc], 0
je 0x10053be2
mov eax, dword [0x101a0448]
push 1
push dword [eax + 8]
push str._pid
call fcn.100bba20
mov eax, dword [0x101a0448]
add esp, 0xc
push 0x101b9794
push 0xf01ff
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x10053c49
mov dword [0x101b9794], eax
jmp 0x10053c49
cmp dword [ebp - 0xfc], 0
je 0x10053ba0
push str.Use_x64dbg_to_debug_this_process_
call fcn.10044e50
add esp, 4
jmp 0x10054051
push str.IsWow64Process_failed_
call fcn.10044e50
add esp, 4
call fcn.100d07f6
jmp 0x10054051
cmp dword [0x101a0500], 8
mov eax, 0x101a04ec
mov dword [0x101a04fc], 0
cmovae eax, dword [0x101a04ec]
xor ecx, ecx
mov word [eax], cx
mov eax, 0x101a0504
cmp dword [0x101a0518], 8
mov dword [0x101a0514], ecx
cmovae eax, dword [0x101a0504]
mov word [eax], cx
push dword [esi]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0x1004c310
push 0x10
mov dword [esi], 0
call fcn.100d0850
push 0x1004da00
push 0x11
call fcn.100d0850
push 0x1004cb40
push 0xe
call fcn.100d0850
push 0x1004dc10
push 0xf
call fcn.100d0850
push 0x100507e0
push 0x17
call fcn.100d0850
push 0x1004e9d0
push 0x12
call fcn.100d0850
push 0x10050f60
push 0x13
call fcn.100d0850
push 0x1004fe00
push 0x14
call fcn.100d0850
add esp, 0x40
push 0x1004d050
push 0x18
call fcn.100d0850
push 0x1004cf60
push 0x1a
call fcn.100d0850
push 0
call dword [0x100ef800]
push 0
call dword [0x100ef8a8]
push 0x101b99a8
call dword [0x100ef7e0]
mov edi, dword [0x100ef38c]
push 0x101b99a8
push 0x104
push 0x101b9e60
call edi
mov ecx, 0x101b9e60
add esp, 0x28
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10053d10
sub ecx, edx
cmp byte [ecx + 0x101b9e60], 0x5c
je 0x10053d30
test ecx, ecx
je 0x10053d4a
dec ecx
cmp byte [ecx + 0x101b9e60], 0x5c
jne 0x10053d22
test ecx, ecx
je 0x10053d4a
lea eax, [ecx + 0x101b9e61]
push eax
push 0x104
push 0x101b9e60
call edi
add esp, 0xc
push 0x101b9e60
call dword [0x100ef7f4]
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], 0x101b99a8
push eax
push 0
call fcn.10092270
add esp, 0xc
cmp byte [esi + 0x50], 0
je 0x10053d90
mov eax, dword [esi + 0x4c]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xf4]
push eax
push 0xf
call fcn.10092270
add esp, 8
push 0
push 1
call fcn.10045490
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 8
cmp byte [esi + 0x50], 0
je 0x10053e51
push 0x1004c1b0
push dword [0x101a0448]
push 1
push dword [esi + 0x4c]
call fcn.100d0874
add esp, 0x10
test al, al
jne 0x10053e80
mov eax, dword fs:[0x18]
sub esp, 0x18
mov esi, dword [eax + 0xbf4]
mov eax, esp
push esi
push str.ntstatus__X
push eax
call fcn.1009f310
add esp, 0xc
lea eax, [ebp - 0x40]
push eax
call fcn.1009ce80
add esp, 0x1c
mov dword [ebp - 4], 3
cmp esi, 0xc0000048
jne 0x10053e1e
push str.Process_is_already_being_debugged_
call dword [0x100ef930]
add esp, 4
lea ecx, [ebp - 0x40]
push eax
call fcn.10018390
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push str.Attach_to_process_failed:__s_n
call fcn.10044d60
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x10053e80
push dword [ebp - 0x40]
call fcn.100dd8b4
add esp, 4
jmp 0x10053e80
mov eax, dword [0x101a0448]
push dword [eax]
call edi
mov eax, dword [0x101a0448]
push dword [eax + 4]
call edi
mov eax, dword [0x101a0448]
mov dword [eax + 4], 0
mov eax, dword [0x101a0448]
mov dword [eax], 0
call fcn.100d0868
call fcn.10045410
lea eax, [ebp - 0x104]
mov dword [ebp - 0x104], 0
push eax
push 1
call fcn.10092270
push 1
call fcn.100d0862
add esp, 0xc
lea ecx, [ebp - 0xe9]
call fcn.1004a030
mov ecx, 0x101b9fa0
call fcn.10021a30
mov eax, dword [0x101b9fa0]
lea ecx, [ebp - 0xf8]
push ecx
mov dword [ebp - 0xf8], eax
mov ecx, 0x101b9fa8
mov eax, dword [0x101b9fa8]
push 0x10
push eax
mov dword [0x101b9fac], eax
lea eax, [ebp - 0x108]
push eax
call fcn.1008d1d0
cmp byte [ebp - 0xe9], 0
mov dword [0x101b9fb4], 7
mov dword [0x101b9fb8], 8
jbe 0x10053f3c
cmp byte [0x101bac41], 0
je 0x10053f31
dec dword [0x101bb5c4]
jne 0x10053f3c
push 0x101bbf80
mov dword [0x101bb5c0], 0
call dword [0x101bc9d8]
jmp 0x10053f3c
push 0x101bc940
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, 0x101a0478
call fcn.1004a6f0
call fcn.10051740
push 1
call fcn.100821b0
add esp, 4
call fcn.100a8980
call fcn.100bccc0
mov ecx, 0x101bca00
call fcn.100ab710
push 0
push 0
mov ecx, 0x101bca00
call fcn.100ab9b0
push 3
call dword [0x100ef800]
call dword [0x100ef93c]
push str.Debugging_stopped_
call fcn.10044e50
mov eax, dword [0x101a0448]
push 1
push 0
push 0x100f6dfc
mov dword [eax + 4], 0
mov eax, dword [0x101a0448]
mov dword [eax], 0
call fcn.100bba20
push 1
push 0
push str._pid
call fcn.100bba20
mov eax, dword [0x101b9794]
add esp, 0x20
test eax, eax
je 0x10053fdb
push eax
call edi
mov dword [0x101b9794], 0
mov eax, dword [0x101b9d44]
test eax, eax
je 0x10053ff1
push eax
call edi
mov dword [0x101b9d44], 0
cmp dword [0x101a052c], 0
mov dword [0x101b9f68], 0
mov dword [0x101b9f64], 0
mov dword [0x101b9790], 0
je 0x10054051
cmp dword [0x101a0530], 8
mov esi, 0x101a051c
mov eax, esi
cmovae eax, dword [0x101a051c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0x101a0530], 8
mov dword [0x101a052c], 0
cmovae esi, dword [0x101a051c]
xor eax, eax
mov word [esi], ax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100dd9b4
mov esp, ebp
pop ebp
ret