Function at 0x1000c1e0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x1004136b
mov eax, dword fs:[0]
push eax
mov eax, 0xce80
call fcn.10027440
mov eax, dword [0x10050fc0]
xor eax, esp
mov dword [esp + 0xce7c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10050fc0]
xor eax, esp
push eax
lea eax, [esp + 0xce94]
mov dword fs:[0], eax
mov ebp, ecx
push 0x2f78
xor ebx, ebx
lea eax, [esp + 0x428]
push ebx
push eax
call fcn.10027470
add esp, 0xc
push 0x10052560
lea ecx, [esp + 0x18]
mov dword [esp + 0x628], ebx
call fcn.10001ea0
push 0xd
push str._authmail.flg
lea ecx, [esp + 0x1c]
mov dword [esp + 0xcea4], ebx
call fcn.10006640
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [0x100f21f8]
mov dword [esp + 0x420], edx
xor eax, eax
nop
mov cl, byte [eax + 0x100f21fc]
mov byte [esp + eax + 0x424], cl
inc eax
cmp cl, bl
jne 0x1000c280
mov edx, dword [0x100c3100]
cmp edx, ebx
je 0x1000c2be
mov eax, 0x2f7c
lea esi, [esp + 0x420]
call fcn.10027440
mov ecx, 0xbdf
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x2f7c
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov dword [esp + 0xce9c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000c2e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x87b4
lea ecx, [esp + 0x46e0]
push ebx
push ecx
call fcn.10027470
mov edx, dword [0x100e99f8]
add esp, 0xc
mov dword [esp + 0x48dc], ebx
mov dword [esp + 0x46d8], edx
xor eax, eax
jmp 0x1000c320
mov cl, byte [eax + 0x100e99fc]
mov byte [esp + eax + 0x46dc], cl
inc eax
cmp cl, bl
jne 0x1000c320
mov edx, dword [0x100c30fc]
cmp edx, ebx
je 0x1000c35e
mov eax, 0x87b8
lea esi, [esp + 0x46d8]
call fcn.10027440
mov ecx, 0x21ee
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x87b8
push 0x400
lea eax, [esp + 0x24]
push ebx
push eax
call fcn.10027470
mov ecx, dword [0x100e94a0]
add esp, 0xc
mov dword [esp + 0x220], ebx
mov dword [esp + 0x1c], ecx
xor eax, eax
mov cl, byte [eax + 0x100e94a4]
mov byte [esp + eax + 0x20], cl
inc eax
cmp cl, bl
jne 0x1000c384
mov eax, dword [0x100c30f8]
cmp eax, ebx
je 0x1000c3ba
sub esp, 0x404
mov ecx, 0x101
lea esi, [esp + 0x420]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x404
push 0x9ec
lea edx, [esp + 0x3cf0]
push ebx
push edx
call fcn.10027470
mov eax, dword [0x100e8a68]
add esp, 0xc
mov dword [esp + 0x3ce8], eax
mov dword [esp + 0x3eec], ebx
xor eax, eax
jmp 0x1000c3f0
mov cl, byte [eax + 0x100e8a6c]
mov byte [esp + eax + 0x3cec], cl
inc eax
cmp cl, bl
jne 0x1000c3f0
mov eax, dword [0x100c30f4]
cmp eax, ebx
je 0x1000c429
sub esp, 0x9f0
mov ecx, 0x27c
lea esi, [esp + 0x46d8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x9f0
push 0x2954
lea ecx, [esp + 0x428]
push ebx
push ecx
call fcn.10027470
mov edx, dword [0x100e6080]
add esp, 0xc
mov dword [esp + 0x624], ebx
mov dword [esp + 0x420], edx
xor eax, eax
jmp 0x1000c460
mov cl, byte [eax + 0x100e6084]
mov byte [esp + eax + 0x424], cl
inc eax
cmp cl, bl
jne 0x1000c460
mov edx, dword [0x100c30f0]
cmp edx, ebx
je 0x1000c49e
mov eax, 0x2958
lea esi, [esp + 0x420]
call fcn.10027440
mov ecx, 0xa56
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x2958
push 0x38c4
lea eax, [esp + 0x428]
push ebx
push eax
call fcn.10027470
mov ecx, dword [0x100e27b8]
add esp, 0xc
mov dword [esp + 0x624], ebx
mov dword [esp + 0x420], ecx
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x100e27bc]
mov byte [esp + eax + 0x424], cl
inc eax
cmp cl, bl
jne 0x1000c4d0
mov edx, dword [0x100c30ec]
cmp edx, ebx
je 0x1000c50e
mov eax, 0x38c8
lea esi, [esp + 0x420]
call fcn.10027440
mov ecx, 0xe32
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x38c8
mov edx, dword [0x10103864]
mov dword [0x100fd4d8], ebx
cmp edx, ebx
je 0x1000c53e
mov eax, 0x5cec
call fcn.10027440
mov ecx, 0x173b
mov esi, 0x100fd3d8
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x5cec
mov eax, dword [0x10103ab4]
mov dword [0x100c65e8], ebx
cmp eax, ebx
je 0x1000c569
sub esp, 0x10c
mov ecx, 0x43
mov esi, 0x100c64e8
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x10c
mov eax, dword [0x1010571c]
mov dword [0x100c5e90], ebx
cmp eax, ebx
je 0x1000c594
sub esp, 0x610
mov ecx, 0x184
mov esi, 0x100c5d90
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x610
mov eax, dword [0x10106c74]
mov dword [0x100c5028], ebx
cmp eax, ebx
je 0x1000c5bf
sub esp, 0xc20
mov ecx, 0x308
mov esi, 0x100c5028
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0xc20
mov eax, dword [0x10131d54]
mov dword [0x10103218], ebx
cmp eax, ebx
je 0x1000c5ea
sub esp, 0x508
mov ecx, 0x142
mov esi, 0x10103218
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x508
mov eax, dword [0x10131da0]
mov dword [0x10103868], ebx
cmp eax, ebx
je 0x1000c615
sub esp, 0x108
mov ecx, 0x42
mov esi, 0x10103868
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x108
mov edx, dword [0x10131da4]
mov dword [0x10103ab8], ebx
cmp edx, ebx
je 0x1000c645
mov eax, 0x1698
call fcn.10027440
mov ecx, 0x5a6
mov esi, 0x10103ab8
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x1698
mov eax, dword [0x10131da8]
mov dword [0x10105198], ebx
cmp eax, ebx
je 0x1000c670
sub esp, 0x584
mov ecx, 0x161
mov esi, 0x10105198
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call eax
add esp, 0x584
mov edx, dword [0x10131dac]
mov dword [0x10105768], ebx
cmp edx, ebx
je 0x1000c6a0
mov eax, 0x150c
call fcn.10027440
mov ecx, 0x543
mov esi, 0x10105768
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x150c
mov edx, dword [0x10131db0]
mov dword [0x10106cc0], ebx
cmp edx, ebx
je 0x1000c6d0
mov eax, 0x2b094
call fcn.10027440
mov ecx, 0xac25
mov esi, 0x10106cc0
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call edx
add esp, 0x2b094
cmp dword [0x10131de8], ebx
je 0x1000c719
mov eax, dword [0x10131dc0]
cmp eax, ebx
je 0x1000c719
lea edx, [esp + 0x18]
push edx
push 0x10052768
mov dword [esp + 0x20], ebx
call eax
mov eax, dword [0x10131de8]
push 0x66754
push 0x10052768
push eax
call fcn.10029ac0
mov eax, dword [0x10131dec]
add esp, 0xc
cmp eax, ebx
je 0x1000c719
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ecx, ebp
call fcn.10004190
xor eax, eax
mov ecx, dword [esp + 0xce94]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xce7c]
xor ecx, esp
call fcn.1002742c
add esp, 0xce8c
ret