Function at 0x1000cbf0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Delete file
Get file attributes
Move file
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100287b3
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x10032f68]
xor eax, esp
mov dword [esp + 0xcc], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10032f68]
xor eax, esp
push eax
lea eax, [esp + 0xe4]
mov dword fs:[0], eax
mov edi, dword [esp + 0xf4]
mov ebx, ecx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push str._slist__loading...
push 1
push 0x10034838
mov dword [esp + 0x64], eax
call fcn.100146a0
add esp, 0xc
xor ebp, ebp
cmp byte [esp + 0xf8], 0
je 0x1000cc87
mov eax, dword [ebx + 0x20]
mov ecx, dword [eax + 4]
lea esi, [ebx + 8]
push ecx
mov ecx, esi
call fcn.1000c280
mov eax, dword [esi + 0x18]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x18]
mov dword [esi + 0x1c], ebp
mov dword [eax], eax
mov esi, dword [esi + 0x18]
mov dword [esi + 8], esi
cmp dword [edi + 0x18], 8
lea esi, [edi + 4]
jb 0x1000cc94
mov eax, dword [esi]
jmp 0x1000cc96
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1000cca6
test al, 0x10
je 0x1000ccc8
cmp dword [edi + 0x18], 8
jb 0x1000ccae
mov esi, dword [esi]
push esi
push str.slist.dat_path_is_no_exist:_s
push 1
push 0x10034838
call fcn.100146a0
add esp, 0x10
jmp 0x1000d267
lea edx, [esp + 0x24]
push edx
push edi
lea eax, [esp + 0x1c]
push eax
mov ecx, ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
call fcn.10009010
test al, al
je 0x1000d267
mov edi, dword [esp + 0x24]
mov esi, dword [esp + 0x28]
mov ecx, edi
add ecx, 0xfffffffe
mov eax, esi
adc eax, 0xffffffff
cmp eax, ebp
ja 0x1000d246
jb 0x1000cd16
cmp ecx, 0x7cffe
ja 0x1000d246
cmp edi, 2
jne 0x1000cd45
cmp esi, ebp
jne 0x1000cd45
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.slist.dat_empty
push 1
push 0x10034838
call fcn.100146a0
add esp, 0xc
mov al, 1
jmp 0x1000d269
shrd edi, esi, 1
shr esi, 1
mov edx, esi
mov esi, edi
add esi, 4
xor ecx, ecx
mov eax, esi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100153bb
add esi, esi
push esi
mov ebp, eax
push 0
push ebp
mov dword [esp + 0x48], ebp
call fcn.10015800
add esp, 0x10
push 0
lea eax, [esp + 0x1c]
push eax
push esi
mov esi, dword [esp + 0x20]
push ebp
push esi
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
mov dword [esp + 0x30], esi
test edi, edi
je 0x1000ce0c
mov eax, dword [esp + 0x18]
cmp eax, 2
jbe 0x1000ce0c
shr eax, 1
xor ecx, ecx
add eax, 4
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100153bb
mov esi, eax
mov eax, dword [esp + 0x1c]
shr eax, 1
lea ecx, [eax + eax + 8]
push ecx
push 0
push esi
mov dword [esp + 0x40], esi
call fcn.10015800
mov edx, dword [esp + 0x28]
add edx, 0xfffffffe
push edx
lea eax, [ebp + 2]
push eax
push esi
call fcn.100158c0
mov ecx, dword [esp + 0x34]
add esp, 0x1c
add ecx, 0xfffffffe
mov dword [esp + 0x24], ecx
jmp 0x1000ce10
mov dword [esp + 0x24], esi
mov eax, ebp
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x1000ce15
mov edx, dword [0x1002f274]
mov dword [eax], edx
mov cx, word [0x1002f278]
mov word [eax + 4], cx
xor eax, eax
lea edi, [ebp + 2]
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
cmp edi, eax
je 0x1000d1ee
jmp 0x1000ce54
mov edi, dword [esp + 0x14]
xor edx, edx
cmp dx, word [edi]
je 0x1000d1ee
push 0x1002f274
push edi
call fcn.100154be
xor ebx, ebx
add esp, 8
cmp eax, ebx
je 0x1000ce87
xor ecx, ecx
xor edx, edx
mov word [eax], cx
mov word [eax + 2], dx
add eax, 4
mov dword [esp + 0x14], eax
jmp 0x1000ce8b
mov dword [esp + 0x14], ebx
xor eax, eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
xor esi, esi
jmp 0x1000ceb0
push 0x1002a9c4
push edi
call fcn.100154be
add esp, 8
cmp eax, ebx
je 0x1000ced4
mov dword [esp + esi*4 + 0x3c], edi
xor ecx, ecx
inc esi
cmp esi, 7
mov word [eax], cx
lea edi, [eax + 2]
jl 0x1000ceb0
cmp esi, ebx
je 0x1000d1d7
cmp esi, 4
jl 0x1000d1c0
mov edi, dword [esp + 0x44]
xor ebx, ebx
cmp edi, ebx
je 0x1000d1c0
mov eax, edi
lea edx, [eax + 2]
jmp 0x1000cf00
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1000cf00
sub eax, edx
sar eax, 1
je 0x1000d1c0
push edi
call fcn.10008020
add esp, 4
test eax, eax
jne 0x1000cf3c
push edi
push 0x1002ae40
push 1
push 0x10034838
call fcn.100146a0
add esp, 0x10
jmp 0x1000d1d7
lea ecx, [esp + 0x78]
call fcn.10009b40
push edi
lea ecx, [esp + 0x80]
mov dword [esp + 0xf0], ebx
call fcn.1000a730
mov esi, dword [esp + 0x3c]
mov ecx, esi
mov eax, 0x1002ae3c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1000cf8a
cmp dx, bx
je 0x1000cf86
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1000cf8a
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x1000cf64
xor eax, eax
jmp 0x1000cf8f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1000cf9d
mov dword [esp + 0x78], 1
jmp 0x1000cfdf
mov ecx, esi
mov eax, 0x1002ae38
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1000cfca
cmp dx, bx
je 0x1000cfc6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1000cfca
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x1000cfa4
xor eax, eax
jmp 0x1000cfcf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1000d1aa
mov dword [esp + 0x78], 2
mov edx, dword [esp + 0x48]
push edx
call fcn.10016765
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x50]
add esp, 4
mov dword [esp + 0x9c], edx
cmp eax, ebx
je 0x1000d014
push eax
call fcn.1001675a
add esp, 4
mov dword [esp + 0xa0], eax
jmp 0x1000d01b
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x1000d030
push eax
lea ecx, [esp + 0xa8]
call fcn.1000a730
mov eax, dword [esp + 0x54]
cmp eax, ebx
je 0x1000d045
push eax
lea ecx, [esp + 0xc4]
call fcn.1000a730
cmp dword [esp + 0xbc], 8
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x68]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xa8]
jae 0x1000d068
lea eax, [esp + 0xa8]
push str.Halowp.exe
push eax
call fcn.100154be
add esp, 8
test eax, eax
je 0x1000d081
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x20], ecx
push 0
call fcn.10015c25
mov ebp, eax
add esp, 4
mov edi, ebp
sub edi, dword [esp + 0x98]
mov ebx, edx
mov esi, ebx
sbb esi, dword [esp + 0x9c]
xor eax, eax
cmp esi, eax
jl 0x1000d13e
jg 0x1000d0b7
cmp edi, dword [esp + 0x20]
jbe 0x1000d13e
mov edx, dword [esp + 0x44]
push edx
call fcn.10008020
add esp, 4
test eax, eax
je 0x1000d107
cmp dword [esp + 0xa0], 0
je 0x1000d107
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1000d107
mov ecx, dword [esp + 0x44]
push 4
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x1000d107
push str.ShareList:_MoveFileEx_Failed
push 1
push 0x10034838
call fcn.100146a0
add esp, 0xc
mov edx, dword [esp + 0xa0]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x9c]
push edx
mov edx, dword [esp + 0x9c]
push eax
push ecx
push edx
push esi
push edi
push ebx
push ebp
push str.now:_I64d_interval:_I64d_item.CreateTime:_I64d_Dir:_s_DelFile:_d
push 1
push 0x10034838
call fcn.100146a0
add esp, 0x2c
jmp 0x1000d194
cmp dword [esp + 0x78], 2
jne 0x1000d14b
inc dword [esp + 0x34]
jmp 0x1000d14f
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x40]
push eax
call fcn.100166d4
add esp, 4
push eax
lea ecx, [esp + 0x60]
call fcn.1000a6f0
lea ecx, [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x60]
push edx
add ecx, 8
mov byte [esp + 0xf4], 1
call fcn.1000c9f0
mov ecx, eax
call fcn.1000b020
lea ecx, [esp + 0x5c]
call fcn.10009940
lea ecx, [esp + 0x78]
mov dword [esp + 0xec], 0xffffffff
call fcn.10009b70
jmp 0x1000d1d7
push str.no_such_file_type
push 1
push 0x10034838
call fcn.100146a0
add esp, 0xc
jmp 0x1000d194
push 7
push esi
push str.i_d_Number_d._format_error
push 1
push 0x10034838
call fcn.100146a0
add esp, 0x14
cmp dword [esp + 0x14], 0
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x30]
mov ebx, dword [esp + 0x1c]
jne 0x1000ce50
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x34]
mov eax, dword [ebx + 0x24]
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x64]
push eax
push str._slist__load_finish__cost__dms__total__d._hash__d__md5__d
push 1
push 0x10034838
call fcn.100146a0
mov eax, dword [esp + 0x40]
add esp, 0x1c
push eax
push esi
mov ecx, ebx
call fcn.1000b080
test esi, esi
je 0x1000d235
push esi
call fcn.10015c76
add esp, 4
test ebp, ebp
je 0x1000d242
push ebp
call fcn.10015c76
add esp, 4
mov al, 1
jmp 0x1000d269
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
push edi
push str.slist.dat_small_or_big_fileSize:_u
push 1
push 0x10034838
call fcn.100146a0
add esp, 0x14
xor al, al
mov ecx, dword [esp + 0xe4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.100157eb
add esp, 0xdc
ret 8