Function at 0x4196a4
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3e4
mov eax, dword [0x67ccf0]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov dword [ebp - 0x3d4], ecx
mov ecx, 0x6a0b58
push 0xa
call fcn.0044c78d
push str.MYMC00000001
mov edi, eax
mov ecx, 0x6909e8
push 0x80000002
mov dword [ebp - 0x3d8], edi
call fcn.0041645e
mov dword [ebp - 0x3e4], eax
test eax, eax
jne 0x419700
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 8]
xor al, al
jmp 0x419a61
push ebx
push esi
push 0x560670
push str..IniPROFILEID.ini
call dword [sym.imp.MSVCR120.dll_fopen]
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
xor ebx, ebx
pop ecx
pop ecx
test eax, eax
je 0x419863
push eax
call dword [sym.imp.MSVCR120.dll_fclose]
push 0xc8
lea eax, [ebp - 0xcc]
push ebx
push eax
call sub.MSVCR120.dll_memset
movzx ebx, byte [ebp + 8]
lea eax, [ebp - 0x1cc]
push ebx
push str.ACCOUNT_d
push eax
call esi
push str..IniPROFILEID.ini
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x1cc]
push str.UserName
push eax
call fcn.005422f5
mov edi, dword [ebp - 0x3d4]
lea eax, [ebp - 0xcc]
push 0x11
push eax
lea esi, [edi + 0x7c]
push esi
call fcn.005032d6
push str..IniPROFILEID.ini
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x1cc]
push str.PassWord
push eax
call fcn.005422f5
add esp, 0x48
lea eax, [ebp - 0xcc]
add edi, 0x8d
push 0x11
push eax
push edi
call fcn.005032d6
push 0x11
lea eax, [ebp - 0xcc]
push esi
push eax
call fcn.005032d6
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
lea eax, [ebp - 0x1cc]
push ebx
push str.MSOMSO
push str._s_UserName__d
push eax
call esi
add esp, 0x28
lea eax, [ebp - 0xcc]
mov ecx, 0x6909e8
push eax
push 1
lea eax, [ebp - 0x1cc]
push eax
push str.MYMC00000001
call fcn.00416531
push 0x11
lea eax, [ebp - 0xcc]
push edi
push eax
call fcn.005032d6
push ebx
push str.MSOMSO
lea eax, [ebp - 0x1cc]
push str._s_PassWord__d
push eax
call esi
add esp, 0x1c
lea eax, [ebp - 0xcc]
mov ecx, 0x6909e8
push eax
push 1
lea eax, [ebp - 0x1cc]
push eax
push str.MYMC00000001
call fcn.00416531
cmp byte [ebp + 8], 3
jne 0x41985b
push str..IniPROFILEID.ini
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, dword [ebp - 0x3d8]
xor ebx, ebx
movzx eax, byte [ebp + 8]
push eax
push str.MSOMSO
mov dword [ebp - 0x3d8], eax
lea eax, [ebp - 0x3cc]
push str._s_UserName__d
push eax
call esi
mov esi, dword [ebp - 0x3d4]
lea eax, [ebp - 0x3cc]
add esp, 0x10
mov ecx, 0x6909e8
add esi, 0x7c
push 0x11
push 1
push eax
push str.MYMC00000001
call fcn.004164af
push eax
push esi
call fcn.005032d6
push dword [ebp - 0x3d8]
lea eax, [ebp - 0x3cc]
push str.MSOMSO
push str._s_PassWord__d
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x1c
lea eax, [ebp - 0x3cc]
mov ecx, 0x6909e8
push 0x11
push 1
push eax
push str.MYMC00000001
call fcn.004164af
push eax
mov eax, dword [ebp - 0x3d4]
add eax, 0x8d
push eax
call fcn.005032d6
push 0xfe
lea eax, [ebp - 0x2cb]
mov byte [ebp - 0x2cc], bl
push ebx
push eax
call sub.MSVCR120.dll_memset
mov eax, 0xe6
add esp, 0x18
cmp byte [esi], 0
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 0x3cd], al
mov byte [ebp - 0x3dc], al
je 0x4199c9
mov ecx, dword [ebp - 0x3d4]
cmp byte [ecx + 0x8d], 0
je 0x4199c9
push 5
push str.NULL
push esi
call fcn.00550232
add esp, 0xc
test eax, eax
je 0x4199c9
mov eax, dword [ebp - 0x3d4]
push 5
add eax, 0x8d
push str.NULL
push eax
call fcn.00550232
add esp, 0xc
test eax, eax
je 0x4199c9
mov eax, 0x82
mov word [ebp - 0x3d3], 0xff82
mov dword [ebp - 0x3dc], eax
lea ecx, [ebp - 0x2cc]
mov ax, word [ebp - 0x3d3]
sub ecx, esi
mov word [ebp - 0x3d4], ax
mov al, byte [esi]
mov byte [ecx + esi], al
inc esi
test al, al
jne 0x4199a5
mov al, byte [ebp - 0x3d3]
mov byte [ebp - 0x3cd], al
mov al, byte [ebp - 0x3d4]
mov dword [ebp - 0x3e0], eax
jmp 0x4199f1
mov eax, dword [ebp - 0x3d8]
mov ecx, 0x6ab460
inc eax
push eax
push 0xa4e
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0xc
push 0x118
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
test eax, eax
je 0x419a09
mov ecx, eax
call fcn.004172a1
mov ebx, eax
lea ecx, [ebp - 0x2cc]
lea edx, [ebx + 4]
mov eax, ecx
sub edx, eax
mov al, byte [ecx]
mov byte [edx + ecx], al
inc ecx
test al, al
jne 0x419a16
mov eax, dword [ebp - 0x3e0]
movzx edx, al
movzx eax, byte [ebp - 0x3cd]
shl edx, 8
or edx, eax
mov eax, dword [ebp - 0x3dc]
shl edx, 8
movzx ecx, al
or edx, ecx
lea ecx, [edi + 0x934]
mov dword [ebx], edx
mov edx, dword [ecx]
push ebx
call dword [edx + 8]
push dword [ebp - 0x3e4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.005500ac
mov esp, ebp
pop ebp
ret 4