Function at 0x40bef0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x428df8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
mov esi, dword [esp + 0x4c]
push edi
mov edi, ecx
push esi
lea ecx, [esp + 0x24]
call fcn.0041efc1
lea ecx, [esp + 0x24]
mov dword [esp + 0x48], 0
call fcn.0040dcaa
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x4c], 1
call fcn.0041efc1
push 0x4330a0
lea ecx, [esp + 0x54]
mov byte [esp + 0x4c], 2
call fcn.0041f013
lea eax, [esp + 0x18]
push 1
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x50], 3
call fcn.0041e062
mov ecx, dword [esp + 0x50]
mov eax, dword [eax]
push ecx
push eax
call fcn.0040ef2e
add esp, 8
lea ecx, [esp + 0x18]
test eax, eax
setne bl
call fcn.0041ef53
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 2
call fcn.0041ef53
test bl, bl
je 0x40bfc3
push 0x4330a0
lea ecx, [esp + 0x54]
call fcn.0041f013
lea edx, [esp + 0x50]
lea ecx, [esp + 0x14]
push edx
mov byte [esp + 0x4c], 4
call fcn.0041f36b
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 2
call fcn.0041ef53
push 0x434110
lea ecx, [esp + 0x54]
call fcn.0041f013
lea eax, [esp + 0x50]
lea ecx, [esp + 0x14]
push eax
mov byte [esp + 0x4c], 5
call fcn.0041f36b
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 2
call fcn.0041ef53
mov ecx, dword [esp + 0x14]
push 0
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040dd6d
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x40c360
mov bl, 6
lea ecx, [esp + 0x24]
call fcn.0040df8d
mov edx, dword [esp + 0x24]
push 0x10
lea ecx, [esp + 0x28]
mov esi, eax
call dword [edx + 0x38]
test eax, eax
je 0x40c0e9
lea ecx, [esp + 0x24]
call fcn.0040df54
test eax, eax
jne 0x40c0e9
lea eax, [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
call fcn.0040e0f4
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], bl
push ecx
lea ecx, [esp + 0x28]
call fcn.0040e05c
push 0x434108
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 7
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c0c2
push str.Microsoft
lea ecx, [esp + 0x14]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c0c2
push 0x4340ec
lea ecx, [esp + 0x14]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c0b4
push 0x4340e4
lea ecx, [esp + 0x14]
call fcn.0041e178
cmp eax, 0xffffffff
je 0x40c0ce
mov edx, dword [esp + 0x18]
mov ecx, edi
push edx
call fcn.0040bef0
jmp 0x40c0ce
mov eax, dword [esp + 0x18]
mov ecx, edi
push eax
call fcn.0040cfc0
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], bl
call fcn.0041ef53
mov byte [esp + 0x48], 2
lea ecx, [esp + 0x10]
jmp 0x40c353
mov edx, dword [esp + 0x24]
push 0x10
lea ecx, [esp + 0x28]
call dword [edx + 0x38]
test eax, eax
jne 0x40c358
lea ecx, [esp + 0x24]
call fcn.0040df54
test eax, eax
jne 0x40c358
lea eax, [esp + 0x50]
lea ecx, [esp + 0x24]
push eax
call fcn.0040e0f4
push 0x4340e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x4c], 8
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340dc
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340d4
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340cc
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340c4
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340b8
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340ac
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x4340a4
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x43409c
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434094
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x43408c
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434084
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x43407c
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434074
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434064
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x43405c
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434048
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x43403c
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434028
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push str.9495
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434010
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x434008
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x433ffc
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
jne 0x40c32e
push 0x433ff0
lea ecx, [esp + 0x54]
call fcn.0041e178
cmp eax, 0xffffffff
je 0x40c34a
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
call fcn.0040e05c
mov eax, dword [eax]
push eax
call ebp
lea ecx, [esp + 0x1c]
call fcn.0041ef53
mov byte [esp + 0x48], 2
lea ecx, [esp + 0x50]
call fcn.0041ef53
test esi, esi
jne 0x40c012
lea ecx, [esp + 0x24]
call fcn.0040dd23
add edi, 0x24
push str.360sedata_bookmarks.dat
lea edx, [esp + 0x54]
push edi
push edx
call fcn.0041f1e8
mov eax, dword [eax]
push eax
call ebp
lea ecx, [esp + 0x50]
call fcn.0041ef53
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 1
call fcn.0041ef53
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], 0
call fcn.0040dce7
lea ecx, [esp + 0x20]
mov dword [esp + 0x48], 0xffffffff
call fcn.0041ef53
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 4