Function at 0x10048f5f
Capabilities:
Delete file
Get keyboard layout

Disassembly:
mov eax, 0x1006b303
call fcn.100699bc
sub esp, 0x68
push ebx
push esi
push edi
xor edi, edi
mov esi, ecx
inc edi
push edi
push esi
call fcn.10043795
pop ecx
xor ebx, ebx
mov dword [ebp - 0x1c], 0xee76f502
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x10048f99
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10048f8b
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10048fad
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [ebp - 0x1c], ebx
jmp 0x10048fcd
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10048fc1
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x2c], ebx
jne 0x10048fd2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10048fb2
push esi
call fcn.1002b32b
movdqa xmm0, xmmword [0x10006cc0]
pop ecx
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x48]
push dword [ebp - 0x34]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x48], ebx
push eax
lea eax, [ebp - 0x64]
mov dword [ebp - 0x44], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x40], ebx
call fcn.10016adb
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004901d
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
push 3
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x100491cf
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x100491cc
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], 0x51c8b9ba
mov dword [ebp - 0x24], ebx
jmp 0x100491ba
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1004906a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0xc4185a1f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1004905c
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], esi
jg 0x100491b7
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], esi
jg 0x10049194
mov edi, dword [ebp - 0x48]
push dword [ebp - 0x34]
movdqa xmm0, xmmword [0x10006d00]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
mov dword [ebp - 0x54], ebx
push eax
push ebx
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], ebx
movdqu xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x4c], ebx
call fcn.10016adb
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], 0xb300a9e1
mov dword [eax], ebx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
cmp dword [eax + ecx*4], ebx
jne 0x100490fa
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
cmp dword [eax + ecx*4], ebx
jne 0x100490e7
cmp dword [ebp - 0x1c], ebx
jne 0x100490e7
mov eax, ebx
jmp 0x100490ea
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
dec eax
cmp eax, 1
ja 0x100490fa
mov eax, ebx
jmp 0x100490fd
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
xor edx, edx
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x48]
setg dl
sub edx, dword [edi + 8]
imul edx, dword [eax + esi*4]
test edx, edx
je 0x10049121
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x48]
cmp dword [ecx + eax*4], 0x5f1bb130
jg 0x1004913f
cmp dword [ecx], ebx
je 0x1004913f
xor eax, eax
inc eax
jmp 0x10049141
mov eax, ebx
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10049167
push 0xe66
push 0x25a1
push 0xe83
push 0x18c1
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov eax, dword [ebp - 0x54]
push 3
pop esi
inc dword [eax]
cmp dword [eax], esi
jle 0x100490c8
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
cmp dword [eax + ecx*4], ebx
lea ecx, [ebp - 0x54]
call fcn.100156dd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x10049092
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100491a8
push 0xf06
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], esi
jle 0x1004907c
xor edi, edi
inc edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x1004904d
dec dword [ebp - 0x20]
jns 0x10049037
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10049028
lea ecx, [ebp - 0x48]
call fcn.100156dd
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret