Function at 0x100428f0
Capabilities:
Delete file
Move file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100b8feb
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x100d3fe0]
xor eax, esp
mov dword [esp + 0x5c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x100d3fe0]
xor eax, esp
push eax
lea eax, [esp + 0x74]
mov dword fs:[0], eax
mov edi, dword [esp + 0x84]
lea eax, [edi - 0x7530]
mov esi, ecx
cmp eax, 8
ja case.default.0x1004293a
jmp dword [eax*4 + 0x10042f48]
mov eax, dword [esi + 4]
push 0x7538
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, esi
call fcn.100355c0
jmp case.default.0x1004293a
call fcn.1003d620
jmp case.default.0x1004293a
call fcn.10038cf0
jmp case.default.0x1004293a
call fcn.1003b200
jmp case.default.0x1004293a
call fcn.10039160
push edi
lea ecx, [esi + 0x74]
call fcn.1000b260
jmp case.default.0x1004293a
mov ecx, sym.dllproject.dll_cmjGetInfo
test ecx, ecx
je case.default.0x1004293a
call sym.dllproject.dll_cmjGetInfo
test eax, eax
jne case.default.0x1004293a
movzx edx, word [esi + 0x104b8]
mov eax, dword [esi + 0x104bc]
push edx
push eax
lea ecx, [esi + 0x24]
call fcn.100345b0
mov ecx, dword [esi + 0x10ebc]
mov eax, str.server
lea edx, [esp + 0x34]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x104b8]
push edx
mov dword [esp + 0x44], ecx
mov ecx, dword [esi + 0x104bc]
push eax
push ecx
mov dword [esp + 0x48], str.magic
mov dword [esp + 0x50], 0x100bad1e
call sym.dllproject.dll_cmjConnect
add esp, 0xc
jmp case.default.0x1004293a
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, 8
mov ecx, 0x100d7d10
lea edx, [esp + 0x4c]
mov edi, edi
mov edi, dword [edx]
cmp edi, dword [ecx]
jne 0x10042a39
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x10042a20
jmp case.default.0x1004293a
movzx edi, byte [ecx]
movzx eax, byte [edx]
sub eax, edi
jne 0x10042a65
movzx eax, byte [edx + 1]
movzx edi, byte [ecx + 1]
sub eax, edi
jne 0x10042a65
movzx eax, byte [edx + 2]
movzx edi, byte [ecx + 2]
sub eax, edi
jne 0x10042a65
movzx eax, byte [edx + 3]
movzx ecx, byte [ecx + 3]
sub eax, ecx
sar eax, 0x1f
mov ebx, 1
or eax, ebx
je case.default.0x1004293a
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
mov dword [0x100d7d14], eax
xor eax, eax
mov dword [0x100d7d10], edx
movzx edx, ax
push edx
mov dword [esp + 0x3a], eax
mov dword [esp + 0x3e], eax
mov dword [esp + 0x42], eax
mov word [esp + 0x46], ax
xor ecx, ecx
movzx eax, ax
push eax
movzx ecx, cx
push ecx
lea edx, [esp + 0x68]
push str._04d__02d__02d
push edx
call fcn.100807c6
mov eax, dword [esi + 0x10458]
mov ecx, dword [esi + 0x1045c]
mov edx, dword [esi + 0x10460]
mov dword [esp + 0x3c], eax
add esp, 0x14
lea eax, [esi + 0x10464]
mov dword [esp + 0x54], ecx
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x5c], edx
call fcn.1000a660
mov ecx, dword [0x100d302c]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x18], ecx
push 0x100bae9c
lea edx, [esi + 0x70]
push edx
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x88], bl
call fcn.10013ca0
mov eax, dword [eax]
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x84], 2
call fcn.100098f0
mov eax, dword [esp + 0x30]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea edx, [eax - 0xc]
mov byte [esp + 0x7c], bl
cmp edx, dword [0x100d3028]
je 0x10042b60
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10042b60
mov eax, dword [esp + 0x30]
add eax, 0xfffffff4
push eax
call fcn.1007f6d5
add esp, 4
push 0x100bae9c
lea eax, [esi + 0x6c]
push eax
lea ecx, [esp + 0x34]
push ecx
call fcn.10013ca0
mov eax, dword [eax]
mov edx, dword [eax - 8]
push eax
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x84], 3
call fcn.100098f0
mov eax, dword [esp + 0x2c]
lea ecx, [eax - 0xc]
mov byte [esp + 0x7c], bl
cmp ecx, dword [0x100d3028]
je 0x10042bb8
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10042bb8
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff4
push eax
call fcn.1007f6d5
add esp, 4
mov edx, dword [esi + 0x10478]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.100332f0
add esp, 8
mov eax, dword [eax]
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x84], 4
call fcn.100098f0
mov eax, dword [esp + 0x24]
lea edx, [eax - 0xc]
mov byte [esp + 0x7c], bl
cmp edx, dword [0x100d3028]
je 0x10042c11
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10042c11
mov eax, dword [esp + 0x24]
add eax, 0xfffffff4
push eax
call fcn.1007f6d5
add esp, 4
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x100bae9c
push 0x100bae9c
call ebp
push eax
lea ecx, [esp + 0x20]
call fcn.100098f0
push str..bmp
lea eax, [esp + 0x24]
push eax
xor edi, edi
call fcn.10011cf0
test al, al
je 0x10042c44
mov edi, ebx
mov ecx, dword [0x100d78f4]
cmp dword [ecx + 0x10480], 0
jne 0x10042c62
test edi, edi
jne 0x10042c62
mov eax, dword [esp + 0x20]
mov edx, dword [eax - 8]
push eax
push edx
jmp 0x10042c6f
push str..bmpzip
push str..bmpzip
call ebp
push eax
lea ecx, [esp + 0x20]
call fcn.100098f0
lea eax, [esp + 0x18]
push eax
lea ecx, [esi + 0x10eb8]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.10022c50
push str..magicdesklist3
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0x88], 5
call fcn.10013ca0
mov edx, dword [esp + 0x14]
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push edx
mov byte [esp + 0x80], 6
call ebp
mov eax, dword [esp + 0x1c]
push eax
call ebp
mov ecx, dword [0x100d78f4]
cmp dword [ecx + 0x10480], 0
jne 0x10042d08
test edi, edi
jne 0x10042d08
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x28]
push edx
mov edx, dword [esp + 0x18]
push eax
push ecx
push edx
lea ecx, [esi + 0x10a44]
call fcn.10015d50
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov edx, dword [esp + 0x1c]
push edx
call fcn.100332a0
add esp, 4
test eax, eax
jne 0x10042db1
test edi, edi
jne 0x10042d2c
mov eax, dword [0x100d78f4]
mov dword [eax + 0x10480], ebx
mov ecx, dword [0x100d78f4]
cmp dword [ecx + 0x105e4], 0
jne 0x10042d72
push 0x28
call fcn.10080587
add esp, 4
mov dword [esp + 0x28], eax
mov byte [esp + 0x7c], 7
test eax, eax
je 0x10042d5f
mov edx, dword [esi + 4]
push edx
mov ecx, eax
call fcn.10011c50
jmp 0x10042d61
xor eax, eax
mov edx, dword [0x100d78f4]
mov byte [esp + 0x7c], 6
mov dword [edx + 0x105e4], eax
mov eax, dword [0x100d78f4]
mov ecx, dword [eax + 0x105e4]
push 0
call fcn.100118b0
mov ecx, dword [esp + 0x14]
mov edx, dword [0x100d78f4]
push ecx
mov ecx, dword [edx + 0x105e4]
call fcn.10011c20
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call dword [0x100c9020]
mov edx, dword [esp + 0x14]
push edx
call ebp
mov eax, dword [esi + 0x1047c]
mov ecx, dword [0x100d78f4]
mov ecx, dword [ecx + 0x10488]
push eax
call fcn.10037b80
test eax, eax
je 0x10042e17
mov edx, dword [esi + 0x1047c]
mov ecx, dword [edx + 0x78]
test ecx, ecx
je 0x10042e17
call fcn.10017390
test al, al
je 0x10042e17
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x100d78f4]
push eax
add ecx, 0x24
call fcn.10034620
test eax, eax
je 0x10042e17
add dword [esi + 0x10478], ebx
mov eax, dword [esi + 0x10478]
push eax
push str.CAPTURE_INDEX
lea ecx, [esi + 0x10410]
call fcn.10023e80
lea ecx, [esp + 0x5c]
push ecx
lea edi, [esi + 0x10468]
push edi
call fcn.10009570
test al, al
je 0x10042e88
lea edx, [esp + 0x5c]
push edx
mov ecx, edi
call fcn.10009830
mov edi, dword [edi]
push edi
lea ecx, [esp + 0x4c]
mov dword [esi + 0x10478], ebx
call fcn.10006410
mov eax, dword [eax]
push eax
lea edi, [esi + 0x10410]
push str.TO_DATE
mov ecx, edi
mov byte [esp + 0x84], 8
call fcn.10023fd0
lea ecx, [esp + 0x48]
mov byte [esp + 0x7c], 6
call fcn.10001810
mov eax, dword [esi + 0x10478]
push eax
push str.CAPTURE_INDEX
mov ecx, edi
call fcn.10023e80
mov eax, dword [esp + 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100d3028]
je 0x10042eb7
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10042eb7
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff4
push edx
call fcn.1007f6d5
add esp, 4
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100d3028]
je 0x10042ee0
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10042ee0
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.1007f6d5
add esp, 4
mov eax, dword [esp + 0x18]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100d3028]
je 0x10042f02
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x10042f02
push esi
call fcn.1007f6d5
add esp, 4
mov esi, dword [esp + 0x20]
lea edx, [esi - 0xc]
cmp edx, dword [0x100d3028]
je case.default.0x1004293a
add esi, 0xfffffff4
push esi
call edi
test eax, eax
jg case.default.0x1004293a
push esi
call fcn.1007f6d5
add esp, 4
mov ecx, dword [esp + 0x74]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5c]
xor ecx, esp
call fcn.1007fec9
add esp, 0x6c
ret 4