Function at 0x1001b0ac
Capabilities:
Delete file

Disassembly:
push 0x174
mov eax, 0x100759b7
call fcn.1004e336
mov ebx, edx
mov dword [ebp - 0x16c], ebx
mov esi, ecx
mov dword [ebp - 0x174], esi
mov eax, dword [ebp + 8]
mov edx, str.Softwareprojonepodlp_smprule_
mov edi, dword [ebp + 0x10]
and dword [ebp - 0x170], 0
push ecx
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp + 0xc]
push 0x10089e84
mov dword [ebp - 0x180], eax
call fcn.10032725
test eax, eax
je 0x1001b488
push dword [ebp - 0x180]
lea ecx, [ebp - 0x168]
push dword [ebp - 0x17c]
push ebx
push esi
call fcn.10004b14
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [edi]
mov ecx, dword [eax]
mov dword [ebp - 0x178], ecx
cmp ecx, eax
je 0x1001b1de
lea esi, [ecx + 0x10]
cmp dword [esi + 0x14], 8
jb 0x1001b13c
mov eax, dword [esi]
jmp 0x1001b13e
mov eax, esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
mov byte [ebp - 4], 1
test eax, eax
je 0x1001b199
push eax
lea ecx, [ebp - 0x58]
call fcn.1000587d
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.10003a11
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10001785
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.10001805
push ebx
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
call fcn.100065b4
cmp dword [esi + 0x14], 8
jb 0x1001b1a1
mov esi, dword [esi]
push esi
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x168]
call fcn.10004cd6
push ebx
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.10001805
lea ecx, [ebp - 0x178]
call fcn.1000657a
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [edi]
jne 0x1001b12f
mov esi, dword [ebp - 0x174]
lea ecx, [ebp - 0x40]
call fcn.100200e0
push 3
pop ebx
mov byte [ebp - 4], bl
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x168]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.10004dd4
test al, al
je 0x1001b451
push 0
push 0
lea ecx, [ebp - 0x28]
call fcn.10039ec1
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x174], esp
push esi
call fcn.1003910e
push str.mail_from
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.1003a121
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.1003932a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x174], esp
push dword [ebp - 0x16c]
call fcn.1003910e
push str.mail_to
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.1003a121
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.1003932a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x16c], esp
push dword [ebp - 0x17c]
call fcn.1003910e
push 0x1008b53c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.1003a121
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.1003932a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x16c], esp
push dword [ebp - 0x180]
call fcn.1003910e
push 0x100896f4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.1003a121
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.1003932a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x16c], esp
push dword [edi + 4]
call fcn.1003903d
push str.attach_count
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.1003a121
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.1003932a
cmp dword [ebp + 0x14], 0
je 0x1001b349
push 0x1008b560
lea ecx, [ebp - 0x70]
call fcn.1000587d
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x170], 1
push eax
call fcn.10003a11
pop ecx
pop ecx
mov dword [ebp - 4], 0xc
jmp 0x1001b383
push 0x1008b56c
lea ecx, [ebp - 0x58]
call fcn.1000587d
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x88]
mov dword [ebp - 0x170], 4
push eax
call fcn.10003a11
pop ecx
pop ecx
push 0xc
mov dword [ebp - 4], 0xe
pop ebx
sub esp, 0x18
mov dword [ebp - 0x170], ebx
mov ecx, esp
mov dword [ebp - 0x16c], esp
push eax
call fcn.1003910e
push str.ml_process
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xf
call fcn.1003a121
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.1003932a
test bl, 8
je 0x1001b3d0
push 0
push 1
lea ecx, [ebp - 0x88]
and ebx, 0xfffffff7
call fcn.10001805
test bl, 4
je 0x1001b3e4
push 0
push 1
lea ecx, [ebp - 0x58]
and ebx, 0xfffffffb
call fcn.100065b4
test bl, 2
je 0x1001b3fb
push 0
push 1
lea ecx, [ebp - 0xa0]
and ebx, 0xfffffffd
call fcn.10001805
mov dword [ebp - 4], 5
test bl, 1
je 0x1001b413
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.100065b4
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x40]
call fcn.100201c5
test al, al
jne 0x1001b447
push str.mail_report_failed__delete_eml
call fcn.1002f692
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
pop ecx
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x28]
call fcn.10039283
jmp 0x1001b471
cmp dword [ebp - 0x2c], 8
lea esi, [ebp - 0x40]
cmovae esi, dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push str.write_eml_err__eml:_ls__err:_d
call fcn.10034d47
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.100065b4
lea ecx, [ebp - 0x168]
call fcn.1001ae05
call fcn.1004e2e0
ret