Function at 0x100098a1
Capabilities:
Delete file
Delete registry key

Disassembly:
push 0xd8
mov eax, 0x1006fd81
call fcn.100521f6
mov eax, dword [ebp + 8]
push 0x10094a30
lea esi, [ebp - 0x9c]
mov dword [ebp - 0xc4], eax
call fcn.100040e3
and dword [ebp - 4], 0
lea eax, [ebp - 0xe4]
push eax
call fcn.10024300
pop ecx
xor ebx, ebx
inc ebx
mov byte [ebp - 4], bl
mov esi, dword [ebp - 0xd8]
cmp esi, dword [ebp - 0xd4]
jbe 0x100098f3
call fcn.1004cee2
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], esi
mov esi, dword [ebp - 0xd4]
cmp dword [ebp - 0xd8], esi
jbe 0x10009918
call fcn.1004cee2
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xc8], esi
lea edi, [ebp - 0xcc]
lea esi, [ebp - 0xc0]
mov dword [ebp - 0xcc], eax
call fcn.10004957
test al, al
je 0x10009c5b
call fcn.1001ce5e
push eax
lea esi, [ebp - 0x80]
call fcn.10004103
lea eax, [ebp - 0x9c]
push eax
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.10004103
push str.Extensions8Temp
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.100040e3
lea eax, [ebp - 0x48]
push eax
mov eax, esi
mov byte [ebp - 4], 4
call fcn.1002770a
pop ecx
xor edi, edi
push edi
push ebx
mov byte [ebp - 4], 3
call fcn.1000457f
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x80]
call fcn.1002770a
lea eax, [ebp - 0x80]
mov dword [esp], str.807849B3_40D8_42E3_8001_D541FD7CEBFB.qrx
call fcn.10004b80
test eax, eax
jne 0x10009a90
mov edi, 0x10094c38
push edi
lea esi, [ebp - 0x2c]
call fcn.100040e3
push str.Html
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.100040e3
lea eax, [ebp - 0x2c]
push eax
mov eax, esi
mov byte [ebp - 4], 6
call fcn.1002770a
pop ecx
push 0
push ebx
mov byte [ebp - 4], 5
call fcn.1000457f
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x100099ff
lea eax, [ebp - 0x28]
push eax
lea esi, [ebp - 0xb8]
call fcn.100040e3
mov eax, esi
mov byte [ebp - 4], 7
call fcn.10027878
push 0
push ebx
mov byte [ebp - 4], 5
call fcn.1000457f
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x10009a2e
lea eax, [ebp - 0x44]
push edi
call fcn.1002cbe6
pop ecx
push edi
lea esi, [ebp - 0x64]
call fcn.100040e3
push str.manifest.json
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 8
call fcn.100040e3
lea eax, [ebp - 0x64]
push eax
mov eax, esi
mov byte [ebp - 4], 9
call fcn.1002770a
pop ecx
xor edi, edi
push edi
push ebx
call fcn.1000457f
cmp dword [ebp - 0x4c], 8
mov eax, dword [ebp - 0x60]
jae 0x10009a77
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
push ebx
lea esi, [ebp - 0x64]
call fcn.1000457f
lea esi, [ebp - 0x2c]
jmp 0x10009be3
push str.0508DF1F_2AB6_4fac_A99E_45BBBF24E1E6.qrx
lea eax, [ebp - 0x80]
call fcn.10004b80
test eax, eax
jne 0x10009bee
push str.SOFTWARETencentQQBrowserextensions80508DF1F_2AB6_4fac_A99E_45BBBF24E1E6
push reloc.gdiplus.dll_Ordinal_1
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
push 0x10094a30
lea esi, [ebp - 0x2c]
call fcn.100040e3
push str.Extensions80508DF1F_2AB6_4fac_A99E_45BBBF24E1E6
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 0xa
call fcn.100040e3
lea eax, [ebp - 0x2c]
push eax
mov eax, esi
mov byte [ebp - 4], 0xb
call fcn.1002770a
pop ecx
push edi
push ebx
mov byte [ebp - 4], 0xa
call fcn.1000457f
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x10009afd
lea eax, [ebp - 0x28]
push eax
lea esi, [ebp - 0xb8]
call fcn.100040e3
mov eax, esi
mov byte [ebp - 4], 0xc
call fcn.10027878
push edi
push ebx
call fcn.1000457f
push edi
push ebx
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.1000457f
mov edi, 0x10094c38
push edi
lea esi, [ebp - 0x64]
call fcn.100040e3
push 0x10077118
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.100040e3
lea eax, [ebp - 0x64]
push eax
mov eax, esi
mov byte [ebp - 4], 0xe
call fcn.1002770a
pop ecx
push 0
push ebx
mov byte [ebp - 4], 0xd
call fcn.1000457f
cmp dword [ebp - 0x4c], 8
mov eax, dword [ebp - 0x60]
jae 0x10009b73
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x10009b86
lea eax, [ebp - 0x44]
push edi
call fcn.1002cbe6
pop ecx
push edi
lea esi, [ebp - 0x2c]
call fcn.100040e3
push str.manifest.json
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 0xf
call fcn.100040e3
lea eax, [ebp - 0x2c]
push eax
mov eax, esi
mov byte [ebp - 4], 0x10
call fcn.1002770a
pop ecx
xor edi, edi
push edi
push ebx
call fcn.1000457f
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x10009bcf
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
push ebx
lea esi, [ebp - 0x2c]
call fcn.1000457f
lea esi, [ebp - 0x64]
push edi
push ebx
mov byte [ebp - 4], 3
call fcn.1000457f
mov ecx, dword [ebp - 0xc4]
lea esi, [ecx + 0x134]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop edi
idiv edi
mov edx, dword [ebp - 0x44]
add eax, 4
cmp dword [ebp - 0x30], 8
jae 0x10009c15
lea edx, [ebp - 0x44]
cmp eax, 0x2d
jge 0x10009c27
push ebx
push edx
push ecx
mov ebx, eax
call fcn.1000b54d
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x80]
push eax
mov eax, esi
call fcn.1000bbf5
push 0
push ebx
lea esi, [ebp - 0x48]
call fcn.1000457f
push 0
push ebx
lea esi, [ebp - 0x80]
mov byte [ebp - 4], bl
call fcn.1000457f
lea esi, [ebp - 0xc0]
call fcn.1000bdc7
jmp 0x10009905
lea esi, [ebp - 0xe4]
call fcn.10004651
push dword [ebp - 0xe4]
call fcn.1004dd0c
pop ecx
push 0
push ebx
lea esi, [ebp - 0x9c]
call fcn.1000457f
mov eax, ebx
call fcn.10052279
ret 4