Function at 0x1000ad80
Capabilities:
Delete file
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1160
call fcn.1001cbb0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x1098], 0
push 0x410
push 0
lea eax, [ebp - 0xff4]
push eax
call fcn.1000deb0
add esp, 0xc
mov ecx, 0x20
mov word [ebp - 0xffc], cx
xor edx, edx
mov word [ebp - 0xffa], dx
mov eax, 0x22
mov word [ebp - 0xff8], ax
xor ecx, ecx
mov word [ebp - 0xff6], cx
call fcn.100101be
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x10fc], edx
mov edx, dword [ebp - 0x10fc]
add edx, 1
mov dword [ebp - 0x10fc], edx
mov dword [ebp - 0x10c4], 0
jmp 0x1000ae1f
mov eax, dword [ebp - 0x10c4]
add eax, 1
mov dword [ebp - 0x10c4], eax
mov ecx, dword [ebp - 0x10c4]
cmp ecx, dword [ebp - 0x10fc]
jge 0x1000afd1
mov edx, dword [0x100245dc]
mov dword [ebp - 0x7c], edx
mov eax, dword [0x100245e0]
mov dword [ebp - 0x78], eax
mov ecx, dword [0x100245e4]
mov dword [ebp - 0x74], ecx
mov edx, dword [0x100245e8]
mov dword [ebp - 0x70], edx
mov eax, dword [0x100245ec]
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x100245f0]
mov dword [ebp - 0x144], ecx
mov edx, dword [0x100245f4]
mov dword [ebp - 0x140], edx
mov eax, dword [0x100245f8]
mov dword [ebp - 0x13c], eax
mov ecx, dword [0x100245fc]
mov dword [ebp - 0x138], ecx
mov edx, dword [0x10024600]
mov dword [ebp - 0x134], edx
mov eax, dword [0x10024604]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x109c], 0
jmp 0x1000aebd
mov ecx, dword [ebp - 0x109c]
add ecx, 1
mov dword [ebp - 0x109c], ecx
cmp dword [ebp - 0x109c], 7
jge 0x1000af36
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000af02
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x7c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x109c]
mov cl, byte [ebp + edx - 0x7c]
mov byte [ebp + eax - 0x8d8], cl
jmp 0x1000af31
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x144]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x109c]
mov cl, byte [ebp + edx - 0x144]
mov byte [ebp + eax - 0x8d8], cl
jmp 0x1000aeae
mov edx, 1
imul eax, edx, 7
mov dword [ebp - 0x1160], eax
cmp dword [ebp - 0x1160], 0x104
jae 0x1000af52
jmp 0x1000af57
call fcn.1000c8c4
mov ecx, dword [ebp - 0x1160]
mov byte [ebp + ecx - 0x8d8], 0
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0x8d8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x115c], eax
mov dword [ebp - 0x1020], 0
push 0
lea eax, [ebp - 0x1020]
push eax
lea ecx, [ebp - 0x8d8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x8d8]
push edx
mov eax, dword [ebp - 0x115c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x115c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000ae10
lea edx, [ebp - 0xff8]
push edx
lea eax, [ebp - 0xff4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
call fcn.100101be
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x10cc], edx
mov edx, dword [ebp - 0x10cc]
add edx, 1
mov dword [ebp - 0x10cc], edx
mov dword [ebp - 0x10c8], 0
jmp 0x1000b022
mov eax, dword [ebp - 0x10c8]
add eax, 1
mov dword [ebp - 0x10c8], eax
mov ecx, dword [ebp - 0x10c8]
cmp ecx, dword [ebp - 0x10cc]
jge 0x1000b1d5
mov edx, dword [0x10024608]
mov dword [ebp - 0x18], edx
mov eax, dword [0x1002460c]
mov dword [ebp - 0x14], eax
mov ecx, dword [0x10024610]
mov dword [ebp - 0x10], ecx
mov edx, dword [0x10024614]
mov dword [ebp - 0xc], edx
mov eax, dword [0x10024618]
mov dword [ebp - 8], eax
mov ecx, dword [0x1002461c]
mov dword [ebp - 0x12c], ecx
mov edx, dword [0x10024620]
mov dword [ebp - 0x128], edx
mov eax, dword [0x10024624]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x10024628]
mov dword [ebp - 0x120], ecx
mov edx, dword [0x1002462c]
mov dword [ebp - 0x11c], edx
mov eax, dword [0x10024630]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x10a0], 0
jmp 0x1000b0c0
mov ecx, dword [ebp - 0x10a0]
add ecx, 1
mov dword [ebp - 0x10a0], ecx
cmp dword [ebp - 0x10a0], 0xa
jge 0x1000b139
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000b105
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10a0]
mov cl, byte [ebp + edx - 0x18]
mov byte [ebp + eax - 0xbe4], cl
jmp 0x1000b134
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x12c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10a0]
mov cl, byte [ebp + edx - 0x12c]
mov byte [ebp + eax - 0xbe4], cl
jmp 0x1000b0b1
mov edx, 1
imul eax, edx, 0xa
mov dword [ebp - 0x1158], eax
cmp dword [ebp - 0x1158], 0x104
jae 0x1000b155
jmp 0x1000b15a
call fcn.1000c8c4
mov ecx, dword [ebp - 0x1158]
mov byte [ebp + ecx - 0xbe4], 0
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0xbe4]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1154], eax
lea eax, [ebp - 0x1054]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x1024], 0
push 0
lea ecx, [ebp - 0x1024]
push ecx
push 0x10
lea edx, [ebp - 0x1054]
push edx
mov eax, dword [ebp - 0x1154]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x1154]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000b013
mov edx, dword [ebp + 0x14]
push edx
lea eax, [ebp - 0xff4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0x10d4], edx
mov edx, dword [ebp - 0x10d4]
add edx, 1
mov dword [ebp - 0x10d4], edx
mov dword [ebp - 0x10d0], 0
jmp 0x1000b223
mov eax, dword [ebp - 0x10d0]
add eax, 1
mov dword [ebp - 0x10d0], eax
mov ecx, dword [ebp - 0x10d0]
cmp ecx, dword [ebp - 0x10d4]
jge 0x1000b3f5
mov edx, dword [0x10024634]
mov dword [ebp - 0x54], edx
mov eax, dword [0x10024638]
mov dword [ebp - 0x50], eax
mov ecx, dword [0x1002463c]
mov dword [ebp - 0x4c], ecx
mov edx, dword [0x10024640]
mov dword [ebp - 0x48], edx
mov eax, dword [0x10024644]
mov dword [ebp - 0x44], eax
mov ecx, dword [0x10024648]
mov dword [ebp - 0x114], ecx
mov edx, dword [0x1002464c]
mov dword [ebp - 0x110], edx
mov eax, dword [0x10024650]
mov dword [ebp - 0x10c], eax
mov ecx, dword [0x10024654]
mov dword [ebp - 0x108], ecx
mov edx, dword [0x10024658]
mov dword [ebp - 0x104], edx
mov eax, dword [0x1002465c]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x10a4], 0
jmp 0x1000b2c1
mov ecx, dword [ebp - 0x10a4]
add ecx, 1
mov dword [ebp - 0x10a4], ecx
cmp dword [ebp - 0x10a4], 8
jge 0x1000b33a
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000b306
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10a4]
mov cl, byte [ebp + edx - 0x54]
mov byte [ebp + eax - 0x7d4], cl
jmp 0x1000b335
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10a4]
mov cl, byte [ebp + edx - 0x114]
mov byte [ebp + eax - 0x7d4], cl
jmp 0x1000b2b2
mov edx, 1
shl edx, 3
mov dword [ebp - 0x1150], edx
cmp dword [ebp - 0x1150], 0x104
jae 0x1000b356
jmp 0x1000b35b
call fcn.1000c8c4
mov eax, dword [ebp - 0x1150]
mov byte [ebp + eax - 0x7d4], 0
push 0
push 0x80
push 3
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x7d4]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x114c], eax
lea edx, [ebp - 0x1064]
push edx
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x1000], 0
push 0
lea eax, [ebp - 0x1000]
push eax
push 0x10
lea ecx, [ebp - 0x1064]
push ecx
mov edx, dword [ebp - 0x114c]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x114c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x80
lea ecx, [ebp - 0x7d4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x7d4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1000b214
lea eax, [ebp - 0xff8]
push eax
lea ecx, [ebp - 0xff4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0xffc]
push edx
lea eax, [ebp - 0xff4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0x10f0], edx
mov edx, dword [ebp - 0x10f0]
add edx, 1
mov dword [ebp - 0x10f0], edx
mov dword [ebp - 0x10d8], 0
jmp 0x1000b45a
mov eax, dword [ebp - 0x10d8]
add eax, 1
mov dword [ebp - 0x10d8], eax
mov ecx, dword [ebp - 0x10d8]
cmp ecx, dword [ebp - 0x10f0]
jge 0x1000b63e
mov edx, dword [0x10024660]
mov dword [ebp - 0x90], edx
mov eax, dword [0x10024664]
mov dword [ebp - 0x8c], eax
mov ecx, dword [0x10024668]
mov dword [ebp - 0x88], ecx
mov edx, dword [0x1002466c]
mov dword [ebp - 0x84], edx
mov eax, dword [0x10024670]
mov dword [ebp - 0x80], eax
mov ecx, dword [0x10024674]
mov dword [ebp - 0xfc], ecx
mov edx, dword [0x10024678]
mov dword [ebp - 0xf8], edx
mov eax, dword [0x1002467c]
mov dword [ebp - 0xf4], eax
mov ecx, dword [0x10024680]
mov dword [ebp - 0xf0], ecx
mov edx, dword [0x10024684]
mov dword [ebp - 0xec], edx
mov eax, dword [0x10024688]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x10a8], 0
jmp 0x1000b504
mov ecx, dword [ebp - 0x10a8]
add ecx, 1
mov dword [ebp - 0x10a8], ecx
cmp dword [ebp - 0x10a8], 8
jge 0x1000b583
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000b54f
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10a8]
mov cl, byte [ebp + edx - 0x90]
mov byte [ebp + eax - 0x6d0], cl
jmp 0x1000b57e
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0xfc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10a8]
mov cl, byte [ebp + edx - 0xfc]
mov byte [ebp + eax - 0x6d0], cl
jmp 0x1000b4f5
mov edx, 1
shl edx, 3
mov dword [ebp - 0x1148], edx
cmp dword [ebp - 0x1148], 0x104
jae 0x1000b59f
jmp 0x1000b5a4
call fcn.1000c8c4
mov eax, dword [ebp - 0x1148]
mov byte [ebp + eax - 0x6d0], 0
push 0
push 0x80
push 3
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x6d0]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1140], eax
lea edx, [ebp - 0x1074]
push edx
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x1004], 0
push 0
lea eax, [ebp - 0x1004]
push eax
push 0x10
lea ecx, [ebp - 0x1074]
push ecx
mov edx, dword [ebp - 0x1140]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x1140]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x80
lea ecx, [ebp - 0x6d0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x6d0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1000b44b
mov eax, dword [ebp + 0x18]
push eax
lea ecx, [ebp - 0xff4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
call fcn.100101be
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x10e8], edx
mov edx, dword [ebp - 0x10e8]
add edx, 1
mov dword [ebp - 0x10e8], edx
mov dword [ebp - 0x10ec], 0
jmp 0x1000b68c
mov eax, dword [ebp - 0x10ec]
add eax, 1
mov dword [ebp - 0x10ec], eax
mov ecx, dword [ebp - 0x10ec]
cmp ecx, dword [ebp - 0x10e8]
jge 0x1000b83e
mov edx, dword [0x1002468c]
mov dword [ebp - 0x68], edx
mov eax, dword [0x10024690]
mov dword [ebp - 0x64], eax
mov ecx, dword [0x10024694]
mov dword [ebp - 0x60], ecx
mov edx, dword [0x10024698]
mov dword [ebp - 0x5c], edx
mov eax, dword [0x1002469c]
mov dword [ebp - 0x58], eax
mov ecx, dword [0x100246a0]
mov dword [ebp - 0xe4], ecx
mov edx, dword [0x100246a4]
mov dword [ebp - 0xe0], edx
mov eax, dword [0x100246a8]
mov dword [ebp - 0xdc], eax
mov ecx, dword [0x100246ac]
mov dword [ebp - 0xd8], ecx
mov edx, dword [0x100246b0]
mov dword [ebp - 0xd4], edx
mov eax, dword [0x100246b4]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x10ac], 0
jmp 0x1000b72a
mov ecx, dword [ebp - 0x10ac]
add ecx, 1
mov dword [ebp - 0x10ac], ecx
cmp dword [ebp - 0x10ac], 7
jge 0x1000b7a3
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000b76f
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10ac]
mov cl, byte [ebp + edx - 0x68]
mov byte [ebp + eax - 0x5cc], cl
jmp 0x1000b79e
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0xe4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10ac]
mov cl, byte [ebp + edx - 0xe4]
mov byte [ebp + eax - 0x5cc], cl
jmp 0x1000b71b
mov edx, 1
imul eax, edx, 7
mov dword [ebp - 0x113c], eax
cmp dword [ebp - 0x113c], 0x104
jae 0x1000b7bf
jmp 0x1000b7c4
call fcn.1000c8c4
mov ecx, dword [ebp - 0x113c]
mov byte [ebp + ecx - 0x5cc], 0
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0x5cc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1138], eax
mov dword [ebp - 0x1008], 0
push 0
lea eax, [ebp - 0x1008]
push eax
lea ecx, [ebp - 0x5cc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x5cc]
push edx
mov eax, dword [ebp - 0x1138]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x1138]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000b67d
mov edx, dword [ebp + 8]
push edx
call fcn.1000aab0
add esp, 4
mov dword [ebp - 0x1098], eax
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0x10e0], edx
mov edx, dword [ebp - 0x10e0]
add edx, 1
mov dword [ebp - 0x10e0], edx
mov dword [ebp - 0x10e4], 0
jmp 0x1000b88d
mov eax, dword [ebp - 0x10e4]
add eax, 1
mov dword [ebp - 0x10e4], eax
mov ecx, dword [ebp - 0x10e4]
cmp ecx, dword [ebp - 0x10e0]
jge 0x1000ba5f
mov edx, dword [0x100246b8]
mov dword [ebp - 0x40], edx
mov eax, dword [0x100246bc]
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x100246c0]
mov dword [ebp - 0x38], ecx
mov edx, dword [0x100246c4]
mov dword [ebp - 0x34], edx
mov eax, dword [0x100246c8]
mov dword [ebp - 0x30], eax
mov ecx, dword [0x100246cc]
mov dword [ebp - 0x174], ecx
mov edx, dword [0x100246d0]
mov dword [ebp - 0x170], edx
mov eax, dword [0x100246d4]
mov dword [ebp - 0x16c], eax
mov ecx, dword [0x100246d8]
mov dword [ebp - 0x168], ecx
mov edx, dword [0x100246dc]
mov dword [ebp - 0x164], edx
mov eax, dword [0x100246e0]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x10b0], 0
jmp 0x1000b92b
mov ecx, dword [ebp - 0x10b0]
add ecx, 1
mov dword [ebp - 0x10b0], ecx
cmp dword [ebp - 0x10b0], 8
jge 0x1000b9a4
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000b970
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x40]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10b0]
mov cl, byte [ebp + edx - 0x40]
mov byte [ebp + eax - 0x4c8], cl
jmp 0x1000b99f
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10b0]
mov cl, byte [ebp + edx - 0x174]
mov byte [ebp + eax - 0x4c8], cl
jmp 0x1000b91c
mov edx, 1
shl edx, 3
mov dword [ebp - 0x1134], edx
cmp dword [ebp - 0x1134], 0x104
jae 0x1000b9c0
jmp 0x1000b9c5
call fcn.1000c8c4
mov eax, dword [ebp - 0x1134]
mov byte [ebp + eax - 0x4c8], 0
push 0
push 0x80
push 3
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x4c8]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1130], eax
lea edx, [ebp - 0x1084]
push edx
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x100c], 0
push 0
lea eax, [ebp - 0x100c]
push eax
push 0x10
lea ecx, [ebp - 0x1084]
push ecx
mov edx, dword [ebp - 0x1130]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x1130]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x80
lea ecx, [ebp - 0x4c8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x4c8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1000b87e
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0xff4]
push edx
call fcn.1000ab70
add esp, 0xc
mov dword [ebp - 0x1098], eax
call fcn.100101be
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x1110], edx
mov edx, dword [ebp - 0x1110]
add edx, 1
mov dword [ebp - 0x1110], edx
mov dword [ebp - 0x10dc], 0
jmp 0x1000bab9
mov eax, dword [ebp - 0x10dc]
add eax, 1
mov dword [ebp - 0x10dc], eax
mov ecx, dword [ebp - 0x10dc]
cmp ecx, dword [ebp - 0x1110]
jge 0x1000bc6c
mov edx, dword [0x100246e4]
mov dword [ebp - 0x2c], edx
mov eax, dword [0x100246e8]
mov dword [ebp - 0x28], eax
mov ecx, dword [0x100246ec]
mov dword [ebp - 0x24], ecx
mov edx, dword [0x100246f0]
mov dword [ebp - 0x20], edx
mov eax, dword [0x100246f4]
mov dword [ebp - 0x1c], eax
mov ecx, dword [0x100246f8]
mov dword [ebp - 0x1bc], ecx
mov edx, dword [0x100246fc]
mov dword [ebp - 0x1b8], edx
mov eax, dword [0x10024700]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [0x10024704]
mov dword [ebp - 0x1b0], ecx
mov edx, dword [0x10024708]
mov dword [ebp - 0x1ac], edx
mov eax, dword [0x1002470c]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x10b4], 0
jmp 0x1000bb57
mov ecx, dword [ebp - 0x10b4]
add ecx, 1
mov dword [ebp - 0x10b4], ecx
cmp dword [ebp - 0x10b4], 0xa
jge 0x1000bbd0
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000bb9c
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10b4]
mov cl, byte [ebp + edx - 0x2c]
mov byte [ebp + eax - 0xae0], cl
jmp 0x1000bbcb
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x1bc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10b4]
mov cl, byte [ebp + edx - 0x1bc]
mov byte [ebp + eax - 0xae0], cl
jmp 0x1000bb48
mov edx, 1
imul eax, edx, 0xa
mov dword [ebp - 0x112c], eax
cmp dword [ebp - 0x112c], 0x104
jae 0x1000bbec
jmp 0x1000bbf1
call fcn.1000c8c4
mov ecx, dword [ebp - 0x112c]
mov byte [ebp + ecx - 0xae0], 0
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0xae0]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1128], eax
lea eax, [ebp - 0x1094]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x1010], 0
push 0
lea ecx, [ebp - 0x1010]
push ecx
push 0x10
lea edx, [ebp - 0x1094]
push edx
mov eax, dword [ebp - 0x1128]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x1128]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000baaa
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0x110c], edx
mov edx, dword [ebp - 0x110c]
add edx, 1
mov dword [ebp - 0x110c], edx
mov dword [ebp - 0x10f4], 0
jmp 0x1000bca9
mov eax, dword [ebp - 0x10f4]
add eax, 1
mov dword [ebp - 0x10f4], eax
mov ecx, dword [ebp - 0x10f4]
cmp ecx, dword [ebp - 0x110c]
jge 0x1000be90
mov edx, dword [0x10024710]
mov dword [ebp - 0xcc], edx
mov eax, dword [0x10024714]
mov dword [ebp - 0xc8], eax
mov ecx, dword [0x10024718]
mov dword [ebp - 0xc4], ecx
mov edx, dword [0x1002471c]
mov dword [ebp - 0xc0], edx
mov eax, dword [0x10024720]
mov dword [ebp - 0xbc], eax
mov ecx, dword [0x10024724]
mov dword [ebp - 0x1a4], ecx
mov edx, dword [0x10024728]
mov dword [ebp - 0x1a0], edx
mov eax, dword [0x1002472c]
mov dword [ebp - 0x19c], eax
mov ecx, dword [0x10024730]
mov dword [ebp - 0x198], ecx
mov edx, dword [0x10024734]
mov dword [ebp - 0x194], edx
mov eax, dword [0x10024738]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x10b8], 0
jmp 0x1000bd56
mov ecx, dword [ebp - 0x10b8]
add ecx, 1
mov dword [ebp - 0x10b8], ecx
cmp dword [ebp - 0x10b8], 8
jge 0x1000bdd5
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000bda1
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10b8]
mov cl, byte [ebp + edx - 0xcc]
mov byte [ebp + eax - 0x3c4], cl
jmp 0x1000bdd0
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x1a4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10b8]
mov cl, byte [ebp + edx - 0x1a4]
mov byte [ebp + eax - 0x3c4], cl
jmp 0x1000bd47
mov edx, 1
shl edx, 3
mov dword [ebp - 0x1144], edx
cmp dword [ebp - 0x1144], 0x104
jae 0x1000bdf1
jmp 0x1000bdf6
call fcn.1000c8c4
mov eax, dword [ebp - 0x1144]
mov byte [ebp + eax - 0x3c4], 0
push 0
push 0x80
push 3
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x3c4]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1124], eax
lea edx, [ebp - 0x1034]
push edx
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x1014], 0
push 0
lea eax, [ebp - 0x1014]
push eax
push 0x10
lea ecx, [ebp - 0x1034]
push ecx
mov edx, dword [ebp - 0x1124]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x1124]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x80
lea ecx, [ebp - 0x3c4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x3c4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1000bc9a
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.1000acd0
add esp, 8
mov dword [ebp - 0x1098], eax
call fcn.100101be
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x1104], edx
mov edx, dword [ebp - 0x1104]
add edx, 1
mov dword [ebp - 0x1104], edx
mov dword [ebp - 0x1108], 0
jmp 0x1000bee3
mov eax, dword [ebp - 0x1108]
add eax, 1
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x1108]
cmp ecx, dword [ebp - 0x1104]
jge 0x1000c0ab
mov edx, dword [0x1002473c]
mov dword [ebp - 0xb8], edx
mov eax, dword [0x10024740]
mov dword [ebp - 0xb4], eax
mov ecx, dword [0x10024744]
mov dword [ebp - 0xb0], ecx
mov edx, dword [0x10024748]
mov dword [ebp - 0xac], edx
mov eax, dword [0x1002474c]
mov dword [ebp - 0xa8], eax
mov ecx, dword [0x10024750]
mov dword [ebp - 0x15c], ecx
mov edx, dword [0x10024754]
mov dword [ebp - 0x158], edx
mov eax, dword [0x10024758]
mov dword [ebp - 0x154], eax
mov ecx, dword [0x1002475c]
mov dword [ebp - 0x150], ecx
mov edx, dword [0x10024760]
mov dword [ebp - 0x14c], edx
mov eax, dword [0x10024764]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x10bc], 0
jmp 0x1000bf90
mov ecx, dword [ebp - 0x10bc]
add ecx, 1
mov dword [ebp - 0x10bc], ecx
cmp dword [ebp - 0x10bc], 0xa
jge 0x1000c00f
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000bfdb
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10bc]
mov cl, byte [ebp + edx - 0xb8]
mov byte [ebp + eax - 0x9dc], cl
jmp 0x1000c00a
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x15c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10bc]
mov cl, byte [ebp + edx - 0x15c]
mov byte [ebp + eax - 0x9dc], cl
jmp 0x1000bf81
mov edx, 1
imul eax, edx, 0xa
mov dword [ebp - 0x1120], eax
cmp dword [ebp - 0x1120], 0x104
jae 0x1000c02b
jmp 0x1000c030
call fcn.1000c8c4
mov ecx, dword [ebp - 0x1120]
mov byte [ebp + ecx - 0x9dc], 0
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0x9dc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x111c], eax
lea eax, [ebp - 0x1044]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov dword [ebp - 0x1018], 0
push 0
lea ecx, [ebp - 0x1018]
push ecx
push 0x10
lea edx, [ebp - 0x1044]
push edx
mov eax, dword [ebp - 0x111c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x111c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000bed4
movzx edx, byte [ebp + 0x1c]
test edx, edx
je 0x1000c0c5
mov eax, dword [ebp + 8]
push eax
call fcn.1000ac00
add esp, 4
mov dword [ebp - 0x1098], eax
call fcn.100101be
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x10f8], edx
mov edx, dword [ebp - 0x10f8]
add edx, 1
mov dword [ebp - 0x10f8], edx
mov dword [ebp - 0x1100], 0
jmp 0x1000c102
mov eax, dword [ebp - 0x1100]
add eax, 1
mov dword [ebp - 0x1100], eax
mov ecx, dword [ebp - 0x1100]
cmp ecx, dword [ebp - 0x10f8]
jge 0x1000c2c9
mov edx, dword [str.HIJKLMNOPQRSTUVWXYZ]
mov dword [ebp - 0xa4], edx
mov eax, dword [0x1002476c]
mov dword [ebp - 0xa0], eax
mov ecx, dword [0x10024770]
mov dword [ebp - 0x9c], ecx
mov edx, dword [0x10024774]
mov dword [ebp - 0x98], edx
mov eax, dword [0x10024778]
mov dword [ebp - 0x94], eax
mov ecx, dword [str.0123456789nopqrstuvwxyz]
mov dword [ebp - 0x18c], ecx
mov edx, dword [0x10024780]
mov dword [ebp - 0x188], edx
mov eax, dword [0x10024784]
mov dword [ebp - 0x184], eax
mov ecx, dword [0x10024788]
mov dword [ebp - 0x180], ecx
mov edx, dword [0x1002478c]
mov dword [ebp - 0x17c], edx
mov eax, dword [0x10024790]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x10c0], 0
jmp 0x1000c1af
mov ecx, dword [ebp - 0x10c0]
add ecx, 1
mov dword [ebp - 0x10c0], ecx
cmp dword [ebp - 0x10c0], 7
jge 0x1000c22e
call fcn.100101be
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x1000c1fa
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10c0]
mov cl, byte [ebp + edx - 0xa4]
mov byte [ebp + eax - 0x2c0], cl
jmp 0x1000c229
call fcn.100101be
mov esi, eax
lea edx, [ebp - 0x18c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x10c0]
mov cl, byte [ebp + edx - 0x18c]
mov byte [ebp + eax - 0x2c0], cl
jmp 0x1000c1a0
mov edx, 1
imul eax, edx, 7
mov dword [ebp - 0x1118], eax
cmp dword [ebp - 0x1118], 0x104
jae 0x1000c24a
jmp 0x1000c24f
call fcn.1000c8c4
mov ecx, dword [ebp - 0x1118]
mov byte [ebp + ecx - 0x2c0], 0
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0x2c0]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1114], eax
mov dword [ebp - 0x101c], 0
push 0
lea eax, [ebp - 0x101c]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x2c0]
push edx
mov eax, dword [ebp - 0x1114]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x1114]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000c0f3
mov eax, dword [ebp - 0x1098]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000c794
mov esp, ebp
pop ebp
ret