Function at 0x1001dbfd
Capabilities:
Delete file

Disassembly:
mov eax, 0x10063dbc
call fcn.10063438
sub esp, 0x48
push ebx
push esi
xor esi, esi
lea ecx, [ebp - 0x48]
inc esi
push esi
call fcn.1001a8b6
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x1747
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1001dc3e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30], 0x99841b3c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001dc30
mov dword [ebp - 0x14], ebx
jmp 0x1001dc59
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov dword [eax + ecx*4], 0xbb67
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001dc49
mov dword [ebp - 0x14], ebx
jmp 0x1001dc71
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x24], 0x2579253a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001dc63
mov dword [ebp - 0x30], ebx
jmp 0x1001dcc9
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001dcc6
push esi
lea ecx, [ebp - 0x3c]
call fcn.1001a8b6
mov dword [ebp - 0x1c], ebx
jmp 0x1001dca8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0xeaa29c14
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001dc98
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c]
dec dword [eax]
mov dword [ebp - 0x24], 0x837182ab
call fcn.1001a938
dec dword [ebp - 0x18]
jns 0x1001dc8a
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 8
jne 0x1001dc7b
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x20], ebx
je 0x1001dd1c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x30], ebx
jne 0x1001dceb
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setl dl
mov eax, dword [eax]
add eax, 0xb65c
add eax, edx
je 0x1001dd0c
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x28], 0xffff
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x24]
jl 0x1001dd1f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x48]
or dword [ebp - 4], 0xffffffff
call fcn.1001a938
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x1001dd3e
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadMenuW]
mov dword [ebp - 0x14], 0xd41e
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0x3dc99cdf
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], esi
push 4
call fcn.1001a8b6
mov dword [ebp - 0x1c], ebx
jmp 0x1001dd74
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001dd64
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x1001ddc3
mov eax, dword [ebp - 0x18]
mov ecx, 0xbbb4f5ac
mov eax, dword [ebp - 0x14]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x14]
jne 0x1001ddae
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1001ddb0
mov ecx, esi
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov ecx, esi
neg eax
sbb eax, eax
inc eax
sub eax, 0x8633
jne 0x1001ddc5
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
add eax, ecx
neg eax
je 0x1001ddd5
mov edx, esi
cmp dword [ebp - 0x14], ebx
jne 0x1001ddd7
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
sete cl
neg ecx
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], 0xfffa
mov eax, dword [ebp - 0x28]
cmp eax, 0x8bbd
setne cl
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x18]
je 0x1001de40
push edi
push 3
mov dword [ebp - 0x14], ebx
pop edi
jmp 0x1001de35
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x1001de32
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x18]
jns 0x1001de1e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x1001de16
mov dword [ebp - 0x20], esi
pop edi
jmp 0x1001de4f
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x1001de4f
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x54]
call fcn.1001a938
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret