Function at 0x41df40
Capabilities:
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4ad321
push eax
mov dword fs:[0], esp
sub esp, 0xe4
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call fcn.0041cae0
test al, al
jne 0x41e305
lea ecx, [ebp + 0x65c]
call fcn.0048dab0
test al, al
jne 0x41e305
lea esi, [ebp + 0xc]
push esi
call dword [sym.imp.kernel32.dll_DeleteFileA]
test eax, eax
je 0x41e305
push 0
push 1
push 1
push esi
lea ecx, [ebp + 0x238]
call fcn.00485470
test al, al
je 0x41e305
mov ecx, dword [ebp + 0xd00]
mov eax, dword [ebp + 0xd04]
lea esi, [ebp + 0xcfc]
push ecx
push eax
push eax
call fcn.0041ff30
add esp, 0xc
mov edi, eax
mov eax, dword [esi + 8]
mov ecx, esi
push eax
push edi
call fcn.00443ee0
lea ebx, [ebp + 0xd0c]
mov dword [esi + 8], edi
mov eax, dword [ebx + 8]
mov esi, dword [ebx + 4]
cmp eax, eax
mov dword [esp + 0x18], esi
mov edx, eax
je 0x41e012
mov edi, dword [esp + 0x18]
mov ecx, 0x19
mov esi, edx
add edx, 0x64
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x18]
add edi, 0x64
cmp edx, eax
mov dword [esp + 0x18], edi
jne 0x41dff1
mov esi, edi
mov eax, dword [ebx + 8]
mov ecx, ebx
push eax
push esi
call fcn.00443ee0
mov dword [ebx + 8], esi
mov byte [ebp + 0xd1c], 0
mov byte [ebp + 0xd1d], 1
mov byte [ebp + 0xd1e], 0
mov byte [ebp + 0xd1f], 0
mov byte [ebp + 0xd20], 1
mov dword [ebp + 0xd24], 0
mov al, byte [0x4d83ac]
mov byte [esp + 0x2c], al
mov ecx, 0x31
xor eax, eax
lea edi, [esp + 0x2d]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x1c]
push ecx
stosb byte es:[edi], al
call dword [sym.imp.kernel32.dll_GetLocalTime]
push 1
lea edx, [esp + 0x20]
push 1
lea eax, [esp + 0x34]
push edx
push eax
call fcn.00488fc0
mov ecx, dword [0x4d5f90]
add esp, 0x10
mov dword [esp + 0x14], ecx
mov dword [esp + 0xfc], 0
xor esi, esi
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x41e127
mov edx, dword [ebp + 0x230]
sub edx, eax
sar edx, 2
cmp esi, edx
jae 0x41e127
mov eax, dword [0x4d5f90]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x22c]
mov byte [esp + 0xfc], 1
test esi, esi
jne 0x41e0e7
mov ecx, dword [eax]
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x1c]
push 0x4c952c
push ecx
jmp 0x41e0fa
mov ecx, dword [eax + esi*4]
call fcn.0044bcd0
push eax
lea edx, [esp + 0x1c]
push str.__r_n_t__s_
push edx
call fcn.004a0e91
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x14]
push eax
call fcn.004a381e
lea ecx, [esp + 0x18]
mov byte [esp + 0xfc], 0
call fcn.004a3625
inc esi
jmp 0x41e09f
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 8], 4
jne 0x41e13f
push str._Unknown____
lea ecx, [esp + 0x18]
call fcn.004a37e2
mov edx, dword [0x4d5f90]
mov dword [esp + 0x10], edx
mov edi, dword [esp + 0x108]
mov byte [esp + 0xfc], 2
mov ecx, edi
call fcn.00420340
test al, al
jne 0x41e177
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x2c]
push eax
mov ecx, edi
call fcn.0044bcd0
push eax
push esi
jmp 0x41e186
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x2c]
push edx
push str.Ability_Mail_Server_1.15
push eax
lea ecx, [esp + 0x1c]
push str.To:__s_r_nFrom:___s__r_nDate:__s_r_nSubject:_Mail_System_Error___Incoming_Mail_Blocked_r_n
push ecx
call fcn.004a0e91
mov edx, dword [esp + 0x24]
add esp, 0x14
mov ecx, ebp
push 0
push edx
call fcn.0041caf0
test al, al
je 0x41e2e0
push 0
push str.The_following_mail_was_blocked...
mov ecx, ebp
call fcn.0041caf0
test al, al
je 0x41e2e0
lea eax, [ebp + 0xaf9]
push eax
lea eax, [esp + 0x14]
push str._r_nSubject:__s
push eax
call fcn.004a0e91
mov ecx, dword [esp + 0x1c]
add esp, 0xc
push 0
push ecx
mov ecx, ebp
call fcn.0041caf0
test al, al
je 0x41e2e0
lea ebx, [ebp + 0x114]
mov ecx, ebx
call fcn.0044bcd0
push eax
lea edx, [esp + 0x14]
push str.From:_____s
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov ecx, ebp
push 0
push eax
call fcn.0041caf0
test al, al
je 0x41e2e0
mov ecx, dword [esp + 0x104]
lea edx, [esp + 0x10]
push ecx
push str._r_nThe_reason_being..._r_n_r_n_s
push edx
call fcn.004a0e91
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov ecx, ebp
push 0
push eax
call fcn.0041caf0
test al, al
je 0x41e2e0
mov al, byte [esp + 0x10c]
mov ecx, edi
test al, al
je 0x41e297
call fcn.00420340
test al, al
jne 0x41e28b
mov ecx, edi
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x14]
push str._r_nThe_sender_was_sent_a_bounce_back_message_and_should_be_r_naware_of_the_failure._If_you_feel_this_error_is_wrong__r_nyou_should_contact_the_adminstrator:__s
push ecx
call fcn.004a0e91
add esp, 0xc
jmp 0x41e2ce
lea edx, [esp + 0x10]
push str._r_nThe_sender_was_sent_a_bounce_back_message_and_should_be_r_naware_of_the_failure._If_you_feel_this_error_is_wrong__r_nyou_should_contact_the_adminstrator.
push edx
jmp 0x41e2c6
call fcn.00420340
test al, al
jne 0x41e2bc
mov ecx, edi
call fcn.0044bcd0
push eax
lea eax, [esp + 0x14]
push str._r_nIf_you_feel_this_error_is_wrong__you_should_contact_r_nthe_adminstrator:__s
push eax
call fcn.004a0e91
add esp, 0xc
jmp 0x41e2ce
lea ecx, [esp + 0x10]
push str._r_nIf_you_feel_this_error_is_wrong__you_should_contact_r_nthe_adminstrator.
push ecx
call fcn.004a0e91
add esp, 8
mov edx, dword [esp + 0x10]
push 0
push edx
mov ecx, ebp
call fcn.0041caf0
test al, al
jne 0x41e322
lea ecx, [esp + 0x10]
mov byte [esp + 0xfc], 0
call fcn.004a3625
lea ecx, [esp + 0x14]
mov dword [esp + 0xfc], 0xffffffff
call fcn.004a3625
xor al, al
mov ecx, dword [esp + 0xf4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xf0
ret 0xc
mov edi, str.Mail_System_Error___Incoming_Mail_Blocked
or ecx, 0xffffffff
xor eax, eax
push 0x4d83ac
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
lea edi, [ebp + 0xaf9]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.00420240
push 0
mov ecx, ebp
call fcn.0041caa0
lea ecx, [esp + 0x10]
mov bl, al
mov byte [esp + 0xfc], 0
call fcn.004a3625
lea ecx, [esp + 0x14]
mov dword [esp + 0xfc], 0xffffffff
call fcn.004a3625
mov al, bl
jmp 0x41e307