Function at 0x10005d00
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x1001c460]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x21c], 0x10019bbc
mov dword [ebp - 0x218], 0x100199c4
mov dword [ebp - 0x214], 0x100199c8
mov dword [ebp - 0x210], str.System
mov dword [ebp - 0x20c], str.Session
mov dword [ebp - 0x208], 0x100199dc
mov dword [ebp - 0x204], 0x100199e0
mov dword [ebp - 0x200], 0x10019bc0
mov dword [ebp - 0x1fc], 0x100199e4
mov dword [ebp - 0x1f8], 0x10019bc4
mov dword [ebp - 0x1f4], str.UPNP
mov dword [ebp - 0x1f0], str.NetSvc
mov dword [ebp - 0x1ec], 0x100199f8
mov dword [ebp - 0x1e8], 0x100199fc
mov dword [ebp - 0x1e4], str.WNet
mov dword [ebp - 0x1e0], 0x10019a08
mov dword [ebp - 0x1dc], str.Event
mov dword [ebp - 0x1d8], 0x10019a14
mov dword [ebp - 0x1d4], str.Clip
mov dword [ebp - 0x1d0], str.Audio
mov dword [ebp - 0x1cc], str.DHCP
mov dword [ebp - 0x1c8], str.Service
mov dword [ebp - 0x1c4], str.Serv
mov dword [ebp - 0x1c0], 0x10019be0
mov dword [ebp - 0x1bc], str.Proc
mov dword [ebp - 0x1b8], 0x10019bec
mov dword [ebp - 0x1b4], str.Update
mov dword [ebp - 0x1b0], str.Services
mov dword [ebp - 0x1ac], 0x10019a50
mov dword [ebp - 0x1a8], 0x10019a54
mov dword [ebp - 0x1a4], str.Sysapp
mov dword [ebp - 0x1a0], 0x10019bf0
mov dword [ebp - 0x19c], 0x10019a64
mov dword [ebp - 0x198], 0x10019a60
mov dword [ebp - 0x194], str.Policy
mov dword [ebp - 0x190], 0x10019bf4
mov dword [ebp - 0x18c], 0x10019bf8
mov dword [ebp - 0x188], 0x10019bfc
mov dword [ebp - 0x184], 0x10019c00
mov dword [ebp - 0x180], 0x10019c04
mov dword [ebp - 0x17c], str.Intel
mov dword [ebp - 0x178], 0x10019c10
mov dword [ebp - 0x174], 0x10019c14
mov dword [ebp - 0x170], 0x10019c18
mov dword [ebp - 0x16c], str.Netc
mov dword [ebp - 0x168], str.Apps
mov dword [ebp - 0x164], str.loga
mov dword [ebp - 0x160], 0x10019c34
mov dword [ebp - 0x15c], 0x10019c38
mov dword [ebp - 0x158], 0x10019c3c
mov dword [ebp - 0x154], 0x10019c40
mov dword [ebp - 0x150], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.10007725
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.10007725
add esp, 4
xor esi, esi
call fcn.10007737
cdq
mov ecx, 0x1a
idiv ecx
inc esi
add dl, 0x61
mov byte [ebp + esi - 0x45], dl
cmp esi, 3
jl 0x10005f53
push 0x14
mov byte [ebp - 0x41], 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x44]
push 0x10019a90
push edx
call fcn.10007737
cdq
mov ecx, 0x32
idiv ecx
lea eax, [ebp - 0x148]
mov edx, dword [ebp + edx*4 - 0x21c]
push edx
push 0x1001e768
push str._s_s_s._s
push eax
call fcn.1000747f
add esp, 0x18
lea ecx, [ebp - 0x148]
push ecx
call edi
push 0
push 0
push 3
push 0
push 1
push connect
lea edx, [ebp - 0x148]
push edx
call ebx
cmp eax, 0xffffffff
je 0x10005fe2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10005f42
mov esi, dword [ebp - 0x14c]
push 0x104
push 0
push esi
call fcn.1000c490
add esp, 0xc
lea eax, [ebp - 0x148]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000680f
mov esp, ebp
pop ebp
ret