Function at 0x1000d261
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov dword [ebp - 0x44], edx
xor edx, edx
push ebx
inc edx
cmp byte [ebp + 0x18], 0
push esi
push edi
mov byte [ebp - 0x20], dl
je 0x1000d294
lea eax, [ebp + 0x1b]
mov byte [ebp + 0x1b], 0
push eax
mov edx, 0x5fba
call fcn.1000e1b2
pop ecx
jmp 0x1000d684
cmp byte [ebp + 0x10], 0
je 0x1000d2a7
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1000d684
mov ebx, dword [ebp + 0xc]
xor ecx, ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], edx
push 3
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x10], ecx
pop edi
jmp 0x1000d2ce
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2c], 0xbe1d925b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000d2c0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 2
push 0xffffffffffffffff
pop esi
cmp dword [ebp - 0x14], ecx
jl 0x1000d3b3
mov dword [ebp - 8], 0x54d8142
mov dword [ebp - 0x10], ecx
jmp 0x1000d305
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x54], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000d2fb
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 2
jg 0x1000d3a7
mov dword [ebp - 0x1c], esi
xor ecx, ecx
mov dword [ebp - 0x10], 0x4ea14c55
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
imul edx, eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x2c]
cmp edx, eax
setne cl
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x10]
add eax, ecx
je 0x1000d353
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0xc]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setl dl
cmp dword [ebp + eax*4 - 0x2c], edx
jne 0x1000d377
cmp dword [ebp - 0x24], 0
jne 0x1000d377
xor edx, edx
jmp 0x1000d37a
xor edx, edx
inc edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 8]
setg cl
add ecx, 0xfffff9a9
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jle 0x1000d317
xor ecx, ecx
dec dword [ebp - 0x14]
jns 0x1000d2ef
xor edx, edx
inc edx
mov dword [ebp - 8], 0x2dafbbd
mov dword [ebp - 0xc], ecx
jmp 0x1000d3cd
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x48], 0xfffffffd
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x1000d3bf
mov dword [ebp - 0xc], ecx
jmp 0x1000d3e1
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x40], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1000d3d7
mov dword [ebp - 0xc], ecx
jmp 0x1000d3f6
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x70], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x1000d3ec
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], ecx
jl 0x1000d537
mov dword [ebp - 0x10], 0xed23b618
mov dword [ebp - 8], esi
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], 0x4129b857
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], ecx
jl 0x1000d52c
push ecx
push 0x7bbe
mov dword [ebp - 0x14], 0x9565e08c
push ecx
mov dword [ebp - 8], 5
mov dword [ebp - 8], ecx
mov ecx, 0x29c
push edx
mov dword [ebp - 8], 0xfffffff6
mov edx, 0x24a1
call fcn.1000bc86
add esp, 0x10
xor ecx, ecx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ecx
jl 0x1000d521
mov dword [ebp - 8], 0xfffffff9
lea eax, [ebp - 0x15]
mov dword [ebp - 8], 0xb4ef66b1
mov edx, 0x43ee
mov dword [ebp - 8], ecx
mov dword [ebp - 8], 0xfffffffa
push ecx
mov dword [ebp - 8], 0x9bdd7770
mov byte [ebp - 0x15], cl
xor cl, cl
push eax
call fcn.1000d1a7
mov dword [ebp - 0x1c], 0x24e3
cmp dword [ebp - 0x1c], 0x24f5
pop ecx
pop ecx
jle 0x1000d500
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
xor esi, esi
xor edi, edi
mov eax, edi
lea ecx, [ebp - 0x88]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000d4d8
mov eax, dword [eax]
push eax
call fcn.1003cd2f
pop ecx
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.10003730
inc edi
cmp edi, 0x3100
jl 0x1000d4bc
inc esi
cmp esi, 0x240c
jl 0x1000d4ba
dec dword [ebp - 0xc]
cmp dword [ebp - 0x1c], 0x2186
jge 0x1000d517
push str.iqisast_japepd_mezr_gmrymrsw_kyrr_zvvobi_btepwu_dqg_pgeu_rapsmplh_lahwzhi_wvlhqrg_mytugt_ehrgw
call fcn.1003cd2f
pop ecx
dec dword [ebp - 0x14]
xor ecx, ecx
jmp 0x1000d45e
dec dword [ebp - 0x10]
xor edx, edx
inc edx
jmp 0x1000d41e
dec dword [ebp - 0x3c]
or esi, 0xffffffff
jmp 0x1000d3fe
lea eax, [ebp - 0x16]
mov byte [ebp - 0x16], cl
push eax
mov edx, 0x773f
call fcn.1000df3a
movzx eax, word [ebx]
lea edx, [ebp - 0x34]
mov dword [ebp - 0x30], eax
xor ebx, ebx
push 0x70cd
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.1000d11b
mov dword [ebp - 0x10], esi
add esp, 0x10
mov dword [ebp - 0x10], 0x1a
jmp 0x1000d58e
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x14], 0x12
jmp 0x1000d585
call fcn.1000c2fa
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff5
jg 0x1000d57d
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jne 0x1000d571
mov edi, dword [ebp - 0x34]
mov esi, ebx
mov cl, byte [esi + edi]
mov dl, 0x14
call fcn.10011f47
mov byte [esi + edi], al
inc esi
cmp esi, 2
jb 0x1000d598
mov dword [ebp - 0x10], 0x7e2799ac
or edx, 0xffffffff
mov dword [ebp - 8], 0xc9cc1417
xor ecx, ecx
mov dword [ebp - 8], 5
inc ecx
mov dword [ebp - 8], 0x89a69576
mov dword [ebp - 8], ebx
mov dword [ebp - 8], 0xed1e12aa
mov dword [ebp - 8], edx
mov dword [ebp - 8], 0xab06c0e2
mov dword [ebp - 8], edx
mov dword [ebp - 8], 0xca1a1f05
mov dword [ebp - 8], 0xfffffffb
mov dword [ebp - 8], 0xe74a6e8f
mov dword [ebp - 8], 0x74a71a6e
mov dword [ebp - 0x14], ebx
jmp 0x1000d613
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x38], 0x80bfe737
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000d605
mov dword [ebp - 0x10], ebx
jmp 0x1000d674
mov dword [ebp - 8], 0xfffffffc
mov dword [ebp - 8], ebx
mov dword [ebp - 8], 0xb101aae4
mov dword [ebp - 8], 0x4b64b5c6
mov dword [ebp - 8], edx
mov dword [ebp - 8], 0xefa5f9c7
mov dword [ebp - 8], edx
mov dword [ebp - 8], 0x45dcefbd
mov dword [ebp - 8], ecx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1000d662
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0xd2edc755
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000d654
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 8], eax
dec dword [ebp - 0x38]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xa
jle 0x1000d61d
mov ecx, dword [ebp - 0x44]
mov ax, word [ebp - 0x30]
mov word [ecx], ax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret