Function at 0x1000edc0
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001c505
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x220
mov dword [ebp - 0x1d0], 0
jmp 0x1000edfa
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x541a930c
lea ecx, [ebp - 0x42]
call fcn.10012b40
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1d0]
or ecx, 1
mov dword [ebp - 0x1d0], ecx
mov edx, dword [ebp - 0x1d8]
push edx
lea ecx, [ebp - 0x2c]
call fcn.100014a0
mov eax, dword [ebp - 0x1d0]
or eax, 2
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.1000d850
add esp, 4
movzx edx, al
test edx, edx
jne 0x1000eea2
push 0x218a3781
lea ecx, [ebp - 0x5a]
call fcn.10012bc0
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1d0]
or eax, 4
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1dc], 0
jne 0x1000eea2
mov dword [ebp - 0x1e0], 0
jmp 0x1000eeac
mov dword [ebp - 0x1e0], 1
mov cl, byte [ebp - 0x1e0]
mov byte [ebp - 0xd], cl
mov edx, dword [ebp - 0x1d0]
and edx, 4
je 0x1000eecf
and dword [ebp - 0x1d0], 0xfffffffb
lea ecx, [ebp - 0x5a]
call fcn.10010b30
mov eax, dword [ebp - 0x1d0]
and eax, 2
je 0x1000eee9
and dword [ebp - 0x1d0], 0xfffffffd
lea ecx, [ebp - 0x2c]
call fcn.10001520
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1d0]
and ecx, 1
je 0x1000ef0a
and dword [ebp - 0x1d0], 0xfffffffe
lea ecx, [ebp - 0x42]
call fcn.100109e0
movzx edx, byte [ebp - 0xd]
test edx, edx
je 0x1000ef17
jmp 0x1000f030
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.100021e0
movzx eax, al
test eax, eax
je 0x1000ef83
mov ecx, 0xa24e24a
push ecx
lea ecx, [ebp - 0x78]
call fcn.10012cc0
mov dword [ebp - 0x1e4], eax
push 0x1cce9e7c
lea ecx, [ebp - 0x94]
call fcn.10012c40
mov dword [ebp - 0x1e8], eax
push 0x10
mov edx, dword [ebp - 0x1e4]
push edx
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.1000d800
add esp, 0xc
lea ecx, [ebp - 0x94]
call fcn.10010a70
lea ecx, [ebp - 0x78]
call fcn.1000b930
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3caaa510
lea ecx, [ebp - 0xc5]
call fcn.10012d40
mov dword [ebp - 0x1fc], eax
mov edx, dword [ebp - 0x1fc]
push edx
call fcn.1000ecf0
add esp, 4
lea ecx, [ebp - 0xc5]
call fcn.10010aa0
push 0x475fc030
lea ecx, [ebp - 0xce]
call fcn.10012dc0
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
push eax
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0xce]
call fcn.10010ad0
push 0x2577091d
lea ecx, [ebp - 0xdc]
call fcn.10012e40
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x204]
push ecx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0xdc]
call fcn.1000a7a0
mov edx, 0xe09d5fa9
push edx
lea ecx, [ebp - 0x103]
call fcn.10012ec0
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
push eax
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x103]
call fcn.10010b00
push 0x888916e8
lea ecx, [ebp - 0x11b]
call fcn.10012f40
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x20c]
push ecx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x11b]
call fcn.10010b30
push 0x541a9408
lea ecx, [ebp - 0x131]
call fcn.10012b40
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x210]
push edx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x131]
call fcn.100109e0
mov eax, 0x95f72345
push eax
lea ecx, [ebp - 0x143]
call fcn.10012fc0
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x214]
push ecx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x143]
call fcn.100108f0
push 0x7c9ec672
lea ecx, [ebp - 0x15a]
call fcn.10013040
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x218]
push edx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x15a]
call fcn.10010b60
mov eax, 0xc7dfb354
push eax
lea ecx, [ebp - 0x169]
call fcn.100130c0
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x21c]
push ecx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x169]
call fcn.100109b0
push 0x7344695e
lea ecx, [ebp - 0x17f]
call fcn.10013140
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x220]
push edx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x17f]
call fcn.100109e0
mov eax, 0xecd2278c
push eax
lea ecx, [ebp - 0x198]
call fcn.100131c0
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x224]
push ecx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x198]
call fcn.100108c0
push 0x50bac45a
lea ecx, [ebp - 0x1af]
call fcn.10013240
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x228]
push edx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x1af]
call fcn.10010b60
mov eax, 0xd9c3464d
push eax
lea ecx, [ebp - 0x1c9]
call fcn.100132c0
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
push ecx
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x1c9]
call fcn.10010a40
jmp 0x1000f2c2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret