Function at 0x10023ef0
Capabilities:
Delete file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100905c0
push 0x1005aa50
mov eax, dword fs:[0]
push eax
sub esp, 0x640
mov eax, dword [0x1009cbc0]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, edx
mov ebx, ecx
mov dword [ebp - 0x648], ebx
xor eax, eax
mov word [ebp - 0x42c], ax
push 0x206
push eax
lea eax, [ebp - 0x42a]
push eax
call fcn.10055aa0
xor eax, eax
mov word [ebp - 0x224], ax
push 0x206
push eax
lea eax, [ebp - 0x222]
push eax
call fcn.10055aa0
xor eax, eax
mov word [ebp - 0x634], ax
push 0x206
push eax
lea eax, [ebp - 0x632]
push eax
call fcn.10055aa0
add esp, 0x24
mov dword [ebp - 0x644], 0
xor eax, eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x638], eax
mov dword [ebp - 4], eax
mov dword [ebp - 4], 1
cmp dword [ebx + 0x6718], eax
je 0x10024369
mov eax, dword [0x100e28b0]
test eax, eax
je 0x10023fd1
add eax, 0xa8c0
cmp eax, esi
ja 0x10024369
mov dword [0x100e28b0], esi
mov dword [ebx + 0x50], 1
lea eax, [ebp - 0x644]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
je 0x10024099
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x10024023
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1002407f
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002405e
mov byte [esi + 0xffff], 0
push esi
push str.SendMonitorModeFilesToCosmos
push 1
mov edx, 0x21b
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x10024076
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
mov eax, edi
jmp 0x10024396
movzx eax, byte [ebp - 0x635]
push eax
movzx eax, byte [ebp - 0x636]
push eax
mov ecx, dword [ebp - 0x638]
movzx eax, ch
push eax
movzx eax, cl
push eax
movzx eax, byte [ebp - 0x639]
push eax
movzx eax, byte [ebp - 0x63a]
push eax
mov ecx, dword [ebp - 0x63c]
movzx eax, ch
push eax
movzx eax, cl
push eax
movzx eax, word [ebp - 0x63e]
push eax
movzx eax, word [ebp - 0x640]
push eax
push dword [ebp - 0x644]
push str._08X_04X_04X_02X_02X_02X_02X_02X_02X_02X_02X
lea eax, [ebp - 0x634]
push eax
call fcn.10004ed0
push str.mbae.arc
push 0x100e1fb0
push 0x10086350
lea eax, [ebp - 0x42c]
push eax
call fcn.10004ed0
add esp, 0x44
lea eax, [ebp - 0x634]
push eax
push 0x100e2608
push 0x10086724
push str._sMON__s__s.arc
lea eax, [ebp - 0x224]
push eax
call fcn.10004ed0
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [eax + 0x1e]
mov dword [ebp - 0x64c], esi
mov dword [ebp - 0x650], 0
push 0x1000a
call fcn.1005218a
mov ebx, eax
push 0x2000a
call fcn.1005218a
add esp, 8
mov edi, eax
test ebx, ebx
je 0x10024229
test edi, edi
je 0x10024229
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x42c]
push eax
push str.Archive:__s_____s
push 0xffff
push edi
call fcn.1005211a
add esp, 0x14
test eax, eax
jle 0x10024214
xor eax, eax
mov word [edi + 0x1fffe], ax
push 0xfffffffffffffffe
push edi
call fcn.10051b84
push 0xffffffffffffffff
push edi
inc eax
push eax
push ebx
lea eax, [ebp - 0x650]
push eax
call fcn.10052d14
add esp, 0x1c
test eax, eax
je 0x100241ec
push esi
push edi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.10052604
add esp, 0xc
push edi
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call esi
jmp 0x100241f2
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push dword [ebp - 0x64c]
push ebx
push str.SendMonitorModeFilesToCosmos
push 4
mov edx, 0x225
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x10024243
push esi
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x1002423b
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call esi
test ebx, ebx
je 0x10024250
push ebx
call fcn.10052152
add esp, 4
test edi, edi
je 0x1002425d
push edi
call fcn.10052152
add esp, 4
xor ecx, ecx
call fcn.10027fa0
test eax, eax
jne 0x10024284
push str.mbae_arc
lea eax, [ebp - 0x224]
push eax
mov edx, eax
lea ecx, [ebp - 0x42c]
call fcn.1002b350
add esp, 8
mov eax, dword [ebp - 0x648]
mov dword [eax + 0x6718], 0
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1002435b
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
add eax, 0x1e
mov dword [ebp - 0x648], eax
call edi
lea ebx, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov edi, eax
test edi, edi
jne 0x100242e8
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call esi
jmp 0x10024340
push 0x100865c0
push 0xffff
push edi
call fcn.10052136
add esp, 0xc
push ebx
test eax, eax
jle 0x10024323
mov byte [edi + 0xffff], 0
push edi
push str.SendMonitorModeFilesToCosmos
push 1
mov edx, 0x236
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x10024337
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call esi
push edi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
mov eax, dword [ebp - 0x648]
jmp 0x10024396
mov dword [ebp - 4], 0
call fcn.1002437e
jmp 0x1002438d
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
jmp 0x10024394
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1005132c
mov esp, ebp
pop ebp
ret