Function at 0x1001d3f0
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100201a3
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x1002b014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1002b524]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1002b7c0]
cmp eax, dword [ecx + 4]
jle 0x1001d497
push 0x1002b7c0
call fcn.1001d797
add esp, 4
cmp dword [0x1002b7c0], 0xffffffff
jne 0x1001d497
push str.kernel32.dll
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x1001d478
push str.GetTickCount64
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001d478
call eax
jmp 0x1001d485
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], 0
push 0x1002b7c0
mov dword [0x1002b7c4], eax
call fcn.1001d74d
add esp, 4
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push str.kernel32.dll
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x1001d4c7
push str.GetTickCount64
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001d4c7
call eax
jmp 0x1001d4d4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], 0
sub eax, dword [0x1002b7c4]
push eax
lea eax, [ebp - 0x14]
push str._08d
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
add esp, 0xc
lea eax, [ebp + 8]
lea ecx, [ebp - 0x14]
push eax
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
push 0x100277f0
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::Append_1]
push 0x10021474
push 0x100277f4
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__5]
cmp dword [0x1002b034], 0
je 0x1001d57c
push 0x104
push 0x1002b5b8
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x2e
push 0x1002b5b8
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
test eax, eax
je 0x1001d567
push 0x100277f8
xor ecx, ecx
push 0x104
push 0x1002b5b8
mov word [eax], cx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
add esp, 0xc
push 0x1002b5b8
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [0x1002b034], 0
cmp dword [0x1002b5a4], 0
je 0x1001d5e9
push 0x10027804
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push 0x1002b5b8
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
mov eax, dword [ebp - 0x18]
add esp, 0xc
test eax, eax
je 0x1001d5d3
push dword [ebp - 0x14]
push 0x10023764
push eax
call fcn.1001d3d0
add esp, 0xc
push dword [ebp - 0x18]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
add esp, 4
push dword [ebp - 0x18]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
cmp dword [0x1002b5a4], 2
jne 0x1001d5e9
push 0
push 0
push dword [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_AfxMessageBox]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001d656
mov esp, ebp
pop ebp
ret