Function at 0x408000
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4abc1d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x64c
mov al, byte [esp + 3]
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00410c90
mov ebx, dword [esp + 0x66c]
or ecx, 0xffffffff
mov edi, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov esi, ecx
lea ecx, [esp + 0x18]
push esi
mov dword [esp + 0x2c], esi
call fcn.00410dd0
test al, al
je 0x40807f
mov edi, dword [esp + 0x18]
mov ecx, esi
mov edx, ecx
mov esi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, edx
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
call fcn.00410db0
lea ecx, [esp + 0x14]
lea esi, [ebp + 0x50]
xor edi, edi
push ecx
mov ecx, esi
mov dword [esp + 0x668], edi
mov dword [esp + 0x28], esi
call fcn.0048a7b0
push 1
lea ecx, [esp + 0x18]
mov dword [esp + 0x668], 0xffffffff
call fcn.00410c90
mov ecx, ebp
call fcn.0048a6c0
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x40847d
mov edx, dword [ebp + 0x24]
sub edx, eax
sar edx, 2
cmp edi, edx
jae 0x40847d
mov ecx, dword [eax + edi*4]
push ebx
call fcn.00406770
test al, al
jne 0x4080e3
inc edi
jmp 0x4080b8
push 0
lea ecx, [esp + 0x148]
call fcn.00413ea0
mov eax, dword [ebp + 0x20]
lea esi, [edi*4]
xor edi, edi
lea ecx, [esp + 0x144]
mov edx, dword [esi + eax]
push edi
push ecx
push edx
push 1
mov ecx, ebp
mov dword [esp + 0x674], 1
call fcn.00408540
test al, al
jne 0x4081c2
mov ecx, ebp
call fcn.0048a6d0
mov al, byte [esp + 0x13]
push edi
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00410c90
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
lea ecx, [esp + 0x18]
push ebp
call fcn.00410dd0
test al, al
je 0x40817d
mov edi, dword [esp + 0x18]
mov ecx, ebp
mov edx, ecx
mov esi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
call fcn.00410db0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x668], 2
call fcn.0048a9f0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x668], 1
call fcn.00410c90
lea ecx, [esp + 0x144]
mov dword [esp + 0x664], 0xffffffff
call fcn.00414790
jmp 0x408517
lea ecx, [esp + 0x144]
call fcn.00416450
mov al, byte [esp + 0x670]
test al, al
je 0x40822e
push edi
lea ecx, [esp + 0x148]
call fcn.00415d10
mov cl, byte [esp + 0x13]
mov dword [esp + 0x18], edi
mov byte [esp + 0x14], cl
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
lea edx, [esp + 0x14]
push edi
lea eax, [esp + 0x148]
push edx
push eax
mov ecx, ebp
mov byte [esp + 0x670], 3
call fcn.0040acb0
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x664], 1
push ecx
call fcn.004a2a3d
add esp, 4
jmp 0x40823c
push 1
lea ecx, [esp + 0x148]
call fcn.00415d10
mov eax, dword [ebp + 0x20]
lea edx, [esp + 0x144]
push edx
mov ecx, ebp
mov eax, dword [esi + eax]
push eax
push 1
call fcn.0040a530
test al, al
jne 0x4082f8
mov ecx, ebp
call fcn.0048a6d0
mov cl, byte [esp + 0x13]
push edi
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
call fcn.00410c90
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
lea ecx, [esp + 0x18]
push ebp
call fcn.00410dd0
test al, al
je 0x4082b3
mov edi, dword [esp + 0x18]
mov ecx, ebp
mov edx, ecx
mov esi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
call fcn.00410db0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x668], 4
call fcn.0048a9f0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x668], 1
call fcn.00410c90
lea ecx, [esp + 0x144]
mov dword [esp + 0x664], 0xffffffff
call fcn.00414790
jmp 0x408517
push str.___book
push ebx
lea ecx, [esp + 0x44]
push 0x105
push ecx
mov ecx, ebp
call fcn.0040c8d0
mov edi, dword [sym.imp.kernel32.dll_DeleteFileA]
lea edx, [esp + 0x3c]
push edx
call edi
push str.___data
push ebx
lea eax, [esp + 0x44]
push 0x105
push eax
mov ecx, ebp
call fcn.0040c8d0
lea ecx, [esp + 0x3c]
push ecx
call edi
push str.___autoresponse
push ebx
lea edx, [esp + 0x44]
push 0x105
push edx
mov ecx, ebp
call fcn.0040c8d0
lea eax, [esp + 0x3c]
push eax
call edi
push str.___signature
push ebx
lea ecx, [esp + 0x44]
push 0x105
push ecx
mov ecx, ebp
call fcn.0040c8d0
lea edx, [esp + 0x3c]
push edx
call edi
push str.___lastlogintime
push ebx
lea eax, [esp + 0x44]
push 0x105
push eax
mov ecx, ebp
call fcn.0040c8d0
lea ecx, [esp + 0x3c]
push ecx
call edi
mov eax, dword [ebp + 0x20]
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x4083a4
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x38], ecx
lea edi, [esi + eax + 4]
cmp edi, ecx
je 0x4083cf
lea esi, [edi - 4]
push edi
mov ecx, esi
call fcn.00410830
mov eax, dword [esp + 0x38]
add edi, 4
add esi, 4
cmp edi, eax
jne 0x4083b9
mov edi, dword [ebp + 0x24]
lea esi, [edi - 4]
cmp esi, edi
je 0x4083e7
mov ecx, esi
call fcn.00410840
add esi, 4
cmp esi, edi
jne 0x4083d9
mov esi, dword [ebp + 0x24]
mov ecx, ebp
add esi, 0xfffffffc
mov dword [ebp + 0x24], esi
call fcn.0048a6d0
mov al, byte [esp + 0x13]
mov edi, ebx
mov byte [esp + 0x14], al
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x18], esi
push ecx
push ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
call fcn.00410d10
lea ecx, [esp + 0x14]
mov byte [esp + 0x664], 5
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0048a9f0
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40845f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x408456
cmp al, 0xff
je 0x408456
dec al
mov byte [ecx], al
jmp 0x40845f
push ecx
call fcn.004a2a3d
add esp, 4
lea ecx, [esp + 0x144]
mov dword [esp + 0x664], 0xffffffff
call fcn.00414790
mov al, 1
jmp 0x408519
mov ecx, ebp
call fcn.0048a6d0
mov dl, byte [esp + 0x13]
push 0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2c], dl
call fcn.00410c90
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
lea ecx, [esp + 0x2c]
push ebp
call fcn.00410dd0
test al, al
je 0x4084db
mov edi, dword [esp + 0x2c]
mov ecx, ebp
mov eax, ecx
mov esi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x30], ebp
mov byte [ecx + ebp], 0
lea edx, [esp + 0x28]
mov ecx, esi
push edx
mov dword [esp + 0x668], 6
call fcn.0048a9f0
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x408517
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40850e
cmp al, 0xff
je 0x40850e
dec al
mov byte [ecx], al
jmp 0x408517
push ecx
call fcn.004a2a3d
add esp, 4
xor al, al
mov ecx, dword [esp + 0x65c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x658
ret 8