Function at 0x1007f41
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Delete file
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x80
push ebx
push esi
push edi
push dword [ebp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ebx, ebx
mov byte [ebp - 1], bl
call edi
test eax, eax
je 0x1008026
push dword [ebp + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1001200
call esi
test eax, eax
jne 0x100800f
push 0x20a
call fcn.0100906e
mov edi, eax
mov dword [esp], 0x105
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1007fff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x80]
push eax
push ebx
push ebx
push 8
push ebx
push ebx
push ebx
push ebx
push edi
mov dword [ebp - 0x80], 0x44
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x50], bx
mov word [ebp - 0x4e], bx
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp - 0x20]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
call esi
push dword [ebp - 0x1c]
call esi
push edi
call fcn.01009062
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10
push dword [ebp + 0x10]
push 0x10011f8
call esi
test eax, eax
jne 0x1008026
mov byte [ebp - 1], 1
call fcn.01008832
push dword [0x1004010]
mov esi, dword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
push ebx
push ebx
push ebx
call esi
cmp eax, ebx
mov dword [ebp + 0x10], eax
je 0x1008006
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp eax, 0xb7
jne 0x100808a
cmp byte [ebp - 1], bl
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
je 0x1008061
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
jmp 0x1008080
push dword [0x1004014]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
cmp edi, ebx
je 0x1008080
push edi
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
push edi
call esi
push dword [ebp + 0x10]
call esi
jmp 0x1008006
push dword [0x1004014]
push ebx
push ebx
push ebx
call esi
cmp eax, ebx
mov dword [ebp - 8], eax
jne 0x10080aa
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x1008006
cmp byte [ebp - 1], bl
je 0x10080b4
call fcn.01008639
call fcn.010087e4
test eax, eax
je 0x10080c7
call fcn.01007649
jmp 0x10081eb
mov eax, dword [ebp + 8]
mov dword [0x1004088], eax
call fcn.010085f2
push 0x1004084
mov dword [0x1004094], ebx
call dword [fcn.01001124]
pop ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [0x100408c], eax
call fcn.01008ace
cmp eax, ebx
je 0x10080bd
push eax
call edi
test eax, eax
je 0x10080bd
call fcn.01008da5
test eax, eax
je 0x10080bd
call fcn.01007ea9
test eax, eax
je 0x10081eb
call fcn.01008a80
test eax, eax
je 0x100812f
push dword [ebp + 0x14]
push dword [0x1004090]
call dword [sym.imp.msvcrt.dll_exit]
call fcn.01008cc0
cdq
sub eax, edx
mov esi, eax
sar esi, 1
inc esi
call fcn.01007762
cmp eax, esi
jle 0x1008151
mov dword [0x1004080], 0x36ee80
jmp 0x100815b
call fcn.010089c2
mov dword [0x1004080], eax
push ebx
push 0x7530
mov esi, 0x140
push esi
push dword [0x1004090]
call dword [sym.imp.msvcrt.dll__acmdln]
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
push 0xff
push dword [0x1004080]
lea eax, [ebp - 0x10]
push ebx
push eax
push 2
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, 0x102
jne 0x10081d1
cmp dword [0x1004080], 0x36ee80
jne 0x10081ca
call fcn.01008cc0
cdq
sub eax, edx
mov edi, eax
sar edi, 1
inc edi
call fcn.01007762
cmp eax, edi
jg 0x10081ca
call fcn.010089c2
mov dword [0x1004080], eax
call fcn.01007c74
jmp 0x100817f
cmp eax, ebx
jne 0x1008202
call fcn.01008639
call fcn.01008da5
test eax, eax
jne 0x100817f
call fcn.01007649
xor ebx, ebx
inc ebx
push dword [ebp + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
call esi
push dword [ebp - 8]
call esi
mov eax, ebx
jmp 0x1008008
cmp eax, 1
jne 0x100822c
push esi
push dword [0x1004090]
call dword [sym.imp.msvcrt.dll__c_exit]
push ebx
push 0x7530
push esi
push dword [0x1004090]
call dword [sym.imp.msvcrt.dll__acmdln]
jmp 0x100817f
cmp eax, 2
jne 0x100817f
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
test eax, eax
je 0x100817f
cmp dword [ebp - 0x38], 0x12
je 0x10081e8
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.msvcrt.dll__initterm]
lea eax, [ebp - 0x3c]
push eax
call dword [fcn.0100110c]
jmp 0x100817f