Function at 0x100c5a6f
Capabilities:
Delete file

Disassembly:
push ebp
sub esp, 0x208
lea ebp, [esp - 4]
mov eax, dword [0x1019c8c8]
xor eax, ebp
mov dword [ebp + 0x208], eax
push 0x84
mov eax, 0x10148020
call fcn.101018b2
mov eax, dword [ebp + 0x218]
xor edi, edi
cmp dword [ebp + 0x214], edi
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], ecx
mov eax, 0x10162d78
jne 0x100c5ab6
mov eax, 0x10162d6c
push eax
xor ebx, ebx
push str.GetVersionStr:version.dat__s_n
inc ebx
push ebx
call fcn.100c93e3
add esp, 0xc
push str.version.dat
lea ecx, [ebp - 0x2c]
call fcn.1000587e
mov esi, eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 4], edi
call fcn.100dfb58
pop ecx
push esi
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], bl
call fcn.1000c751
lea ecx, [ebp - 0x1c]
call fcn.100015d9
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.100015d9
push dword [ebp - 0x14]
call fcn.100dd2fb
test eax, eax
pop ecx
je 0x100c5b1c
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.http:__toolbar.baidu.com_update_version.dat
lea ecx, [ebp - 0x38]
call fcn.1000587e
cmp dword [ebp + 0x214], edi
mov byte [ebp - 4], 5
je 0x100c5e4f
mov eax, dword [0x1019a028]
mov dword [ebp - 0x20], eax
push 0x10152f84
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
call fcn.1000587e
push eax
push str.Start_Page
push str.SOFTWAREMicrosoftInternet_ExplorerMain
lea eax, [ebp - 0x10]
push SysReAllocString
push eax
mov byte [ebp - 4], 7
call fcn.100e08cd
add esp, 0x14
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.100015d9
push 0x104
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000e702
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call fcn.10005459
lea ecx, [ebp - 0x18]
call fcn.100015d9
mov eax, dword [0x1019a028]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x10]
push 0x2000
lea eax, [ebp - 0x50]
push eax
push 0x825
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x50], 0x824
call fcn.10001a82
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_UrlEscapeW]
test eax, eax
jne 0x100c5bf4
push 0xffffffffffffffff
lea ecx, [ebp - 0x28]
call fcn.10001c5b
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
call fcn.10005459
jmp 0x100c5c3a
lea ecx, [ebp - 0x90]
call fcn.100d7b79
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
call fcn.100d7cdb
test al, al
je 0x100c5c2b
cmp dword [ebp - 0x5c], 0xffffffff
je 0x100c5c2b
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x10]
call fcn.10005459
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xb
call fcn.100d7bde
push 0x206
lea eax, [ebp + 2]
push edi
push eax
mov word [ebp], di
call fcn.101027c0
lea eax, [ebp]
push eax
call fcn.10073843
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], edi
push edi
lea eax, [ebp - 0x34]
push eax
push 0x1015413c
push edi
mov byte [ebp - 4], 0xd
call fcn.100da62b
add esp, 0x20
cmp eax, edi
jne 0x100c5c88
mov eax, dword [ebp - 0x34]
cmp eax, edi
je 0x100c5c88
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [ecx + 0x20]
mov esi, 0x1019e718
mov ecx, esi
call fcn.10037a13
cmp eax, 2
mov dword [ebp - 0x1c], eax
jne 0x100c5c9f
mov dword [ebp - 0x1c], ebx
mov ecx, esi
call fcn.10039327
mov ecx, esi
mov dword [ebp - 0x24], eax
call fcn.100393e0
mov ecx, esi
mov dword [ebp - 0x40], eax
call fcn.1003949c
mov ecx, esi
mov dword [ebp - 0x4c], eax
call fcn.10039555
mov ecx, esi
mov dword [ebp - 0x44], eax
call fcn.100355b5
mov ebx, eax
cmp ebx, edi
jne 0x100c5ce5
push edi
call fcn.101029ff
pop ecx
mov ebx, eax
push ebx
mov ecx, esi
call fcn.10035650
mov ecx, esi
call fcn.10039614
test eax, eax
push edi
je 0x100c5d92
call fcn.101029ff
pop ecx
mov ecx, esi
mov dword [ebp - 0x18], eax
call fcn.100383da
push eax
push dword [ebp - 0x18]
mov ecx, esi
call fcn.10038de0
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x20]
push str.__sms_dt_dns_dhp
push eax
call fcn.100020c6
mov eax, dword [ebp - 0x10]
add esp, 0x18
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x20]
call fcn.1000bdcb
mov eax, dword [0x1019a028]
mov dword [ebp - 0x18], eax
push ebx
push dword [ebp - 0x44]
mov ecx, esi
push dword [ebp - 0x4c]
mov byte [ebp - 4], 0xe
push dword [ebp - 0x40]
push dword [ebp - 0x24]
push dword [ebp - 0x2c]
call fcn.10038d46
push eax
mov ecx, esi
call fcn.10037b24
push eax
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push str.showing_daddress_dtop_dlogin_dwebimlogin_dwebimmsgzero_dwebimlightedtimes_dwebimmsgcount_dit_d
push eax
call fcn.100020c6
mov eax, dword [ebp - 0x18]
add esp, 0x2c
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x20]
call fcn.1000bdcb
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
call fcn.100015d9
jmp 0x100c5dad
call fcn.101029ff
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x20]
push str.__st_d
push eax
call fcn.100020c6
add esp, 0x14
push edi
mov ecx, esi
call fcn.10039387
push 1
mov ecx, esi
call fcn.10039443
push edi
mov ecx, esi
call fcn.100394fc
push edi
mov ecx, esi
call fcn.100395b8
push edi
mov ecx, esi
call fcn.10038429
push edi
mov ecx, esi
call fcn.10038e2f
push edi
call fcn.101029ff
pop ecx
mov ecx, esi
mov ebx, eax
call fcn.10039ff1
mov ecx, esi
mov dword [ebp - 0x24], eax
call fcn.1003a070
mov ecx, ebx
sub ecx, eax
cmp ecx, dword [ebp - 0x24]
jbe 0x100c5e10
mov ecx, esi
call fcn.100359dd
push ebx
mov ecx, esi
call fcn.1003a0b4
mov eax, dword [ebp - 0x20]
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x38]
call fcn.1000bdcb
mov eax, dword [ebp - 0x34]
cmp eax, edi
mov byte [ebp - 4], 0xb
je 0x100c5e30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x28]
call fcn.100015d9
lea ecx, [ebp - 0x10]
call fcn.100015d9
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.100015d9
xor ebx, ebx
inc ebx
push ebx
push 0x4e20
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.1000584b
push ecx
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x40], esp
push eax
mov byte [ebp - 4], 0xf
call fcn.1000584b
mov byte [ebp - 4], 5
call fcn.100dbabe
add esp, 0x10
cmp eax, edi
jne 0x100c5ed4
push str.GetVersionStr:
push ebx
call fcn.100c93e3
pop ecx
pop ecx
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x38]
call fcn.100015d9
lea ecx, [ebp - 0x14]
call fcn.100015d9
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x208]
xor ecx, ebp
call fcn.101018a3
add ebp, 0x20c
leave
ret 8
lea eax, [ebp - 0x30]
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
mov dword [ebp - 0x30], edi
call fcn.1000584b
mov ecx, dword [ebp - 0x3c]
call fcn.100c596d
push dword [ebp - 0x14]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, edi
jle 0x100c5f1b
push dword [ebp - 0x30]
lea ecx, [ebp - 0x3c]
call fcn.10003abd
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x48]
push edi
mov dword [ecx], eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x30], edi
je 0x100c5f29
push dword [ebp - 0x30]
call fcn.10101095
pop ecx
push esi
push str.GetVersionStr:version.dat_ccXML:_d_n
push ebx
call fcn.100c93e3
add esp, 0xc
mov edi, esi
jmp 0x100c5e9d