Function at 0x1000eed0
Capabilities:
Delete file
Resume thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10135d67
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x103b2018]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov esi, ecx
lea eax, [esp + 0x1c]
push eax
call sub.NirvanaUtils.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_GetExePath_void_
add esp, 4
push eax
lea ecx, [esp + 0x1c]
push ecx
mov edi, 0x1036d0c4
mov dword [esp + 0x50], 0
call fcn.100095f0
add esp, 8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x48], 2
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x1036d0dc
call dword [0x101377ac]
push 1
lea ebp, [esi + 0x10]
lea eax, [esp + 0x2c]
push ebp
push eax
mov byte [esp + 0x5c], 3
call sub.NirvanaUtils.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_URLEncode3_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____
add esp, 4
mov byte [esp + 0x58], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
push ecx
mov edi, 0x1036d0e0
call fcn.100095f0
add esp, 4
mov byte [esp + 0x5c], 5
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call dword [0x1013761c]
mov byte [esp + 0x5c], 6
call sub.NirvanaUtils.dll_int___cdecl_WriteTextFile_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____bool__class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char_____unsigned_int_
add esp, 0x14
lea ecx, [esp + 0x20]
mov byte [esp + 0x48], 2
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x1036d0dc
call dword [0x101377ac]
lea eax, [esp + 0x30]
push 0
push eax
mov byte [esp + 0x58], 7
mov ebx, edi
call sub.NirvanaUtils.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_AppGetRunningPath_void_
mov byte [esp + 0x58], 8
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
push ecx
mov edi, 0x1036d0e4
call fcn.100095f0
add esp, 8
lea edx, [esp + 0x34]
push edx
call sub.NirvanaUtils.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_GetEXEVersion_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____
push eax
lea eax, [esp + 0x38]
push eax
mov edi, ebx
mov byte [esp + 0x64], 9
call fcn.100095f0
add esp, 0xc
mov byte [esp + 0x58], 0xa
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
push ecx
call sub.NirvanaUtils.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_URLEncode3_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____
add esp, 4
mov byte [esp + 0x5c], 0xb
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x48], esp
push edx
call dword [0x1013761c]
mov byte [esp + 0x5c], 0xe
call sub.NirvanaUtils.dll_int___cdecl_WriteTextFile_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____bool__class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char_____unsigned_int_
add esp, 0x14
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], 2
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push ebp
call dword [0x1013761c]
mov ecx, esi
call sym.NirvanaBiz.dll_public:_class_CAccountInfo____thiscall_CBaiduUser::GetAccountInfoFor_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____
mov dword [esi + 0x6c], eax
test eax, eax
jne 0x1000f125
push eax
call dword [sym.imp.MSVCR90.dll__time64]
add esp, 4
mov dword [esp + 0x34], eax
push str._H:_M:_S
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x40], edx
call fcn.10005710
mov byte [esp + 0x48], 0xf
mov ecx, dword [eax]
mov edx, dword [esi + 0x64]
push ecx
push str.mAccI_invalid__s
push edx
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
add esp, 0xc
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], 2
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0x40
call sub.mfc90u.dll_new
add esp, 4
mov dword [esp + 0x34], eax
mov byte [esp + 0x48], 0x10
test eax, eax
je 0x1000f101
mov ecx, eax
call sym.NirvanaBiz.dll_public:_void___thiscall_CAccountInfo::constructor_void_
jmp 0x1000f103
xor eax, eax
mov byte [esp + 0x48], 2
push ebp
lea ecx, [eax + 8]
mov dword [esi + 0x6c], eax
call dword [0x101375f4]
mov ecx, dword [esi + 0x6c]
lea eax, [esi + 0x14]
push eax
add ecx, 0x14
call dword [0x101375f4]
push 0x8c
call sub.mfc90u.dll_new
add esp, 4
mov dword [esp + 0x34], eax
mov byte [esp + 0x48], 0x11
test eax, eax
je 0x1000f153
mov ecx, dword [esi + 0xb4]
mov edx, dword [esi + 0x6c]
push ecx
push esi
push edx
push eax
call fcn.10015070
jmp 0x1000f155
xor eax, eax
mov byte [esp + 0x48], 2
mov dword [esi + 0x68], eax
mov byte [eax + 0x4c], 1
mov eax, dword [esi + 0x64]
mov ecx, dword [esi + 0x68]
mov dword [ecx + 0x54], eax
mov ebx, dword [esi + 0x68]
call fcn.100158c0
test eax, eax
jne 0x1000f196
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
xor al, al
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0xb4]
mov byte [esi + 0x38], 1
push 0x10137da4
lea ecx, [esp + 0x18]
mov byte [eax + 0x322], 1
call dword [0x10137604]
lea eax, [esp + 0x14]
push eax
push ecx
mov bl, 0x12
mov byte [esp + 0x50], bl
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.user_domain
call dword [0x10137604]
push ecx
mov ecx, esp
mov byte [esp + 0x54], 0x13
mov dword [esp + 0x3c], esp
push ecx
mov ecx, esi
call sym.NirvanaBiz.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CBaiduUser::GetBaiduID_void_
mov byte [esp + 0x54], bl
call sub.NirvanaUtils.dll_int___cdecl_GetProfileValue_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____
mov edx, dword [esp + 0x20]
add esp, 0xc
cmp dword [edx - 0xc], 0
je 0x1000f243
push 0
push 0x1036d140
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Find]
cmp eax, 0xffffffff
je 0x1000f243
push 0
push 0x1036d144
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Find]
cmp eax, 0xffffffff
jne 0x1000f243
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 5
jl 0x1000f243
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x20]
call dword [0x101375f4]
jmp 0x1000f277
mov ecx, esi
call sym.NirvanaBiz.dll_protected:_bool___thiscall_CBaiduUser::FetchUserDomain_void_
test al, al
jne 0x1000f277
mov eax, dword [esi + 0xb4]
cmp dword [eax + 0x624], 0
je 0x1000f277
mov eax, dword [eax + 0x624]
mov edx, dword [eax + 4]
lea ecx, [eax + 4]
mov eax, dword [edx + 4]
push 0
push 0
push 0xbe9
call eax
mov ecx, esi
call sym.NirvanaBiz.dll_protected:_bool___thiscall_CBaiduUser::FetchIsAPIUser_void_
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x1000f2a2
mov eax, dword [eax + 0x624]
mov edx, dword [eax + 4]
lea ecx, [eax + 4]
mov eax, dword [edx + 8]
push 0
push 1
push 0xbe3
call eax
push 6
mov ecx, esi
call sym.NirvanaBiz.dll_public:_void___thiscall_CBaiduUser::SetBgLoginCount_int_
cmp byte [esi + 0x37], 0
jne 0x1000f2df
push 0
push 4
push 0
push 0
push esi
push sym.NirvanaBiz.dll_public:_static_unsigned_int___cdecl_CBaiduUser::BackgroundLogin_void__
call sub.mfc90u.dll_AfxBeginThread_1
mov dword [esi + 0x60], eax
mov dword [eax + 0x28], 0
mov eax, dword [esi + 0x60]
mov ecx, dword [eax + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov byte [esi + 0x37], 1
push 0
push 0
push 0
push 0
push esi
push sym.NirvanaBiz.dll_public:_static_unsigned_int___cdecl_CBaiduUser::LoginHeartBeat_void__
call sub.mfc90u.dll_AfxBeginThread_1
cmp dword [esi + 0xb4], 0
mov dword [esi + 0x5c], eax
je 0x1000f36e
lea edx, [esp + 0x28]
push edx
mov ecx, esi
call sym.NirvanaBiz.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CBaiduUser::GetBaiduUserName_void_
mov ecx, eax
mov byte [esp + 0x48], 0x14
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::AllocSysString]
lea ecx, [esp + 0x28]
mov edi, eax
mov byte [esp + 0x48], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call sym.NirvanaBiz.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CBaiduUser::GetBaiduID_void_
mov ecx, eax
mov byte [esp + 0x48], 0x15
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::AllocSysString]
lea ecx, [esp + 0x28]
mov ebp, eax
mov byte [esp + 0x48], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [esi + 0xb4]
mov eax, dword [ecx + 0x624]
mov edx, dword [eax + 4]
lea ecx, [eax + 4]
mov eax, dword [edx + 8]
push ebp
push edi
push 0xbd7
call eax
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov al, 1
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret