Function at 0x41789d
Capabilities:
Delete file

Disassembly:
mov eax, 0x4dc603
call fcn.004d1d50
sub esp, 0x144
mov eax, dword [0x52e400]
push esi
mov esi, dword [ebp + 8]
xor eax, ebp
push edi
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x90], esi
call fcn.00415f74
and dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], eax
and dword [ebp - 4], 0
push str..xlspi
lea eax, [ebp - 0x84]
push esi
push eax
call fcn.00416cf1
add esp, 0xc
cmp dword [ebp - 0x7c], 0
je 0x417b63
mov ecx, edi
call fcn.00416fe4
push dword [ebp - 0x7c]
mov ecx, edi
call fcn.004172e3
mov eax, dword [ebp - 0x80]
mov esi, dword [eax]
cmp esi, eax
je 0x417b63
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP71.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP71.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
call fcn.0044fced
add esp, 0xc
lea ecx, [ebp - 0x78]
call fcn.00413264
push 2
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 3
call fcn.0048d5d7
push 1
push 0x1b6
push 1
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVCP71.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_ifstream_char__struct_std::char_traits_char__::constructor_char_const___int__int_]
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
call fcn.0048d9af
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_ifstream_char__struct_std::char_traits_char__::close_void_]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
push 0x4ef154
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 5
call fcn.0048d7e7
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0048d6eb
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x94]
test eax, eax
mov byte [ebp - 4], 5
je 0x4179f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push str.Agent
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x78]
call fcn.0048d7e7
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.0048d6eb
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x9c]
test eax, eax
mov byte [ebp - 4], 5
je 0x417a2b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push str.UnDefaultThunder
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x78]
call fcn.0048d7e7
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.0048d6eb
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x8c]
test eax, eax
mov byte [ebp - 4], 5
je 0x417a61
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push str.SetDefaultThunder
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
call fcn.0048d7e7
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.0048d6eb
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x98]
test eax, eax
mov byte [ebp - 4], 5
je 0x417a97
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push str.Browser
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x78]
call fcn.0048d7e7
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.0048d45c
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xb
call dword [sym.imp.MSVCP71.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xa
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov eax, dword [ebp - 0x88]
test eax, eax
mov byte [ebp - 4], 5
je 0x417af5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x58]
push eax
mov ecx, edi
call fcn.0041785d
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP71.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_ifstream_char__struct_std::char_traits_char__::vbase_dtor_void_]
mov eax, dword [ebp - 0x78]
test eax, eax
mov byte [ebp - 4], 2
je 0x417b3e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x80]
jne 0x417918
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84]
call fcn.00416f90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
xor ecx, ebp
pop esi
call fcn.004d1da7
leave
ret