Function at 0x1000b6e0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001ca72
mov eax, dword fs:[0]
push eax
sub esp, 0x21c
mov eax, dword [0x10027008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c4], ecx
call fcn.10001c20
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x1000b730
push 0x80004005
call fcn.10002580
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 4], 0
call fcn.10001c20
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x1000b763
push 0x80004005
call fcn.10002580
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x1d8], edi
mov byte [ebp - 4], 1
call fcn.10001c20
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x1000b793
push 0x80004005
call fcn.10002580
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1c8], esi
push 0x2b
lea eax, [ebp - 0x1bf]
mov byte [ebp - 4], 2
push 0
push eax
mov byte [ebp - 0x1c0], 0
call fcn.1000e7e0
add esp, 0xc
lea eax, [ebp - 0x194]
push 0x8c
push 0
push eax
call fcn.1000e7e0
add esp, 0xc
lea ecx, [ebp - 0x108]
call fcn.1000b540
mov eax, dword [ebp - 0x1c4]
push 0
push 0
push 0xf0
mov byte [ebp - 4], 3
push dword [eax + 0x5c]
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x1000b81c
mov ecx, dword [ebp - 0x1c4]
call fcn.1000af10
mov dword [ebp - 0x1c4], 1
jmp 0x1000be4e
mov ebx, dword [ebp - 0x1c4]
lea ecx, [ebp - 0x1dc]
push ecx
lea eax, [ebx + 0x44]
mov ecx, eax
mov dword [ebp - 0x1e0], eax
call fcn.10009da0
lea eax, [ebx + 0x48]
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1cc], eax
push ecx
mov ecx, eax
call fcn.10009da0
mov ebx, dword [ebp - 0x1dc]
mov edi, dword [ebp - 0x1d8]
mov eax, dword [ebx - 0xc]
test eax, eax
je 0x1000be29
cmp eax, 0x10
jg 0x1000be29
mov eax, dword [edi - 0xc]
test eax, eax
je 0x1000be29
cmp eax, 0x10
jg 0x1000be29
mov eax, dword [ebp - 0x1c4]
push 0
add eax, 0x58
push 0
push 0xf0
mov dword [ebp - 0x1e4], eax
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageA]
push ecx
lea ecx, [ebp - 0x1d0]
test eax, eax
je 0x1000b8c0
call fcn.1000bff0
add esp, 4
push dword [eax]
push 0x10023494
jmp 0x1000b8cf
call fcn.1000bff0
add esp, 4
push dword [eax]
push 0x10023498
push str.autologin
push str.userinfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x1d0]
call fcn.100024e0
mov eax, dword [ebp - 0x1c4]
push 0
push 0
push 0xf0
push dword [eax + 0x54]
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x1000b9c3
lea ecx, [ebp - 0x1d0]
call fcn.10003c10
lea ecx, [ebp - 0x1d4]
call fcn.10003c10
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1d0]
push eax
mov byte [ebp - 4], 5
call fcn.10009da0
mov ecx, dword [ebp - 0x1cc]
lea eax, [ebp - 0x1d4]
push eax
call fcn.10009da0
push ecx
lea ecx, [ebp - 0x1cc]
call fcn.1000bff0
add esp, 4
push dword [eax]
push dword [ebp - 0x1d0]
push str.user
push str.userinfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x1cc]
call fcn.100024e0
push ecx
lea ecx, [ebp - 0x1cc]
call fcn.1000bff0
add esp, 4
push dword [eax]
push dword [ebp - 0x1d4]
push str.password
push str.userinfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x1cc]
call fcn.100024e0
lea ecx, [ebp - 0x1d4]
call fcn.100024e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
jmp 0x1000b9e0
push ecx
lea ecx, [ebp - 0x1cc]
call fcn.1000bff0
add esp, 4
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x1cc]
call fcn.100024e0
lea eax, [ebp - 0x1c0]
push eax
mov eax, dword [0x10029910]
push edi
push ebx
mov eax, dword [eax + 0x10]
call eax
lea ecx, [eax + 4]
cmp ecx, 0x10
ja case.default.0x1000ba04
jmp dword [ecx*4 + 0x1000bedc]
push dword [ebp - 0x16c]
lea eax, [ebp - 0x218]
push dword [ebp - 0x170]
push eax
call fcn.10001120
add esp, 0xc
lea eax, [ebp - 0x208]
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push eax
call fcn.10001120
add esp, 0xc
lea eax, [ebp - 0x228]
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
push eax
call fcn.10001120
mov ecx, dword [ebp - 0x1c4]
add esp, 0xc
movdqu xmm0, xmmword [eax]
movdqu xmmword [ebp - 0x1f8], xmm0
call fcn.1000a1c0
movdqu xmm0, xmmword [ebp - 0x1f8]
pextrw eax, xmm0, 6
movzx eax, ax
push eax
pextrw eax, xmm0, 5
movzx eax, ax
push eax
pextrw eax, xmm0, 4
movzx eax, ax
push eax
pextrw eax, xmm0, 3
movzx eax, ax
push eax
pextrw eax, xmm0, 1
movzx eax, ax
push eax
movd eax, xmm0
movzx eax, ax
push eax
lea eax, [ebp - 0x1c8]
push 0x100231ac
push eax
call fcn.10003af0
mov ecx, dword [ebp - 0x1e4]
add esp, 0x20
call fcn.10004a50
mov esi, dword [ebp - 0x1c8]
test eax, eax
mov eax, dword [ebp - 0x1c4]
je 0x1000bb0a
push 0x1388
push 0
push 0x40
push 0x100231e8
push esi
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxTimeoutA]
push 1
push dword [0x100299b4]
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x1000be44
push 0x40
push 0x1002296c
push esi
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
push dword [0x100299b4]
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x1000be44
push 0x10
push 0x1002296c
push 0x100228f0
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x1002349c
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x100234a8
jmp 0x1000be35
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x138]
jl 0x1000bb80
push 0x40
push 0x1002296c
push 0x10023220
jmp 0x1000be35
push dword [ebp - 0x144]
push dword [ebp - 0x148]
cmp eax, dword [ebp - 0x130]
jge 0x1000bc0c
lea ecx, [ebp - 0x70]
call fcn.100012b0
mov esi, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
call fcn.100012b0
add esp, 0x10
mov edx, eax
mov byte [ebp - 4], 7
cmp dword [esi + 0x14], 0x10
jb 0x1000bbc7
mov esi, dword [esi]
cmp dword [edx + 0x14], 0x10
jb 0x1000bbcf
mov edx, dword [edx]
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0x134]
push eax
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x134]
push esi
push eax
push edx
lea eax, [ebp - 0x1c8]
push 0x10023258
push eax
call fcn.10003af0
add esp, 0x18
lea ecx, [ebp - 0x40]
call fcn.100024b0
lea ecx, [ebp - 0x70]
jmp 0x1000bc75
lea ecx, [ebp - 0x28]
call fcn.100012b0
mov esi, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
call fcn.100012b0
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 9
cmp dword [esi + 0x14], 0x10
jb 0x1000bc3f
mov esi, dword [esi]
cmp dword [ecx + 0x14], 0x10
jb 0x1000bc47
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x134]
push eax
push esi
push ecx
lea eax, [ebp - 0x1c8]
push 0x100232f8
push eax
call fcn.10003af0
add esp, 0x14
lea ecx, [ebp - 0x58]
call fcn.100024b0
lea ecx, [ebp - 0x28]
call fcn.100024b0
mov eax, dword [ebp - 0x1c4]
mov esi, dword [ebp - 0x1c8]
push 0x44
push 0x1002296c
push esi
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
cmp eax, 6
jne 0x1000be1b
mov eax, dword [ebp - 0x1c4]
push 0
push 0xf5
push dword [eax + 0x4c]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x1000be44
push 0x10
push 0x1002296c
push 0x10023354
jmp 0x1000be35
mov eax, dword [ebp - 0x1c4]
push 0x10
push 0x1002296c
push 0x1002337c
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push ebx
lea ecx, [ebp - 0xac]
mov byte [ebp - 0xc8], 0
call fcn.1000c0b0
push edi
lea ecx, [ebp - 0x94]
call fcn.1000c0b0
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x108]
call fcn.1000c0f0
jmp 0x1000be44
push 0x10
push 0x1002296c
push 0x10023390
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x100233a0
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x100233c0
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x100233dc
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x100233e8
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x10022fa0
jmp 0x1000be0a
push 0x10
push 0x1002296c
push 0x10023410
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x10023420
jmp 0x1000be35
push 0x10
push 0x1002296c
push 0x10022fd8
jmp 0x1000be35
call dword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x10029918]
push eax
lea eax, [ebp - 0x1c8]
push 0x10023430
push eax
call fcn.10003af0
mov esi, dword [ebp - 0x1c8]
add esp, 0xc
push 0x10
push 0x1002296c
push esi
jmp 0x1000be35
push eax
lea eax, [ebp - 0x1c8]
push 0x10023468
push eax
call fcn.10003af0
mov esi, dword [ebp - 0x1c8]
add esp, 0xc
push 0x10
push 0x1002296c
push esi
mov eax, dword [ebp - 0x1c4]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push dword [0x100299b4]
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x1000be44
push 0x10
push 0x10022980
push 0x1002347c
mov eax, dword [ebp - 0x1c4]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x1c4], 0
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 2
call fcn.1000b620
lea edx, [esi - 0x10]
mov byte [ebp - 4], 1
or esi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x1000be7d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, esi
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1000be9a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x1000beb8
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000d362
mov esp, ebp
pop ebp
ret 0x10