Function at 0x419e60
Capabilities:
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4acfd2
push eax
mov dword fs:[0], esp
sub esp, 0x43c
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.0048a6c0
push str.configdomainmaps.dta
call fcn.00485230
add esp, 4
test al, al
je 0x419eb4
push str.configdomainmaps.dta
call dword [sym.imp.kernel32.dll_DeleteFileA]
test eax, eax
jne 0x419eb4
mov ecx, esi
call fcn.0048a6d0
xor al, al
jmp 0x41a32c
lea ecx, [esp + 0x28]
call fcn.004853d0
xor ebp, ebp
lea ecx, [esp + 0x28]
push ebp
push 1
push 1
push str.configdomainmaps.dta
mov dword [esp + 0x464], ebp
call fcn.00485470
test al, al
je 0x419ef8
push str.098371287283_2
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
jne 0x419f1a
lea ecx, [esp + 0x28]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x28]
mov dword [esp + 0x454], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x41a32c
xor edi, edi
mov eax, dword [esi + 0x20]
cmp eax, ebp
je 0x41a306
mov ecx, dword [esi + 0x24]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jae 0x41a306
push 0x4c8da0
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + edi*4]
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
mov edx, dword [0x4d5f90]
mov dword [esp + 0x10], edx
mov eax, dword [esi + 0x20]
mov byte [esp + 0x454], 1
mov ecx, dword [eax + edi*4]
call fcn.004193c0
sub eax, ebp
je 0x419f97
dec eax
je 0x419f90
dec eax
jne 0x419fa5
push str.TODOMAIN
jmp 0x419f9c
push str.TOADDRESS
jmp 0x419f9c
push str.NONE
lea ecx, [esp + 0x14]
call fcn.004a371e
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x28]
push eax
call fcn.004856d0
test al, al
je 0x41a21c
lea ecx, [esp + 0x10]
mov byte [esp + 0x454], 0
call fcn.004a3625
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + edi*4]
call fcn.00419370
mov ecx, eax
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + edi*4]
call fcn.00419380
push eax
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
mov eax, dword [esi + 0x20]
push ebp
mov ecx, dword [eax + edi*4]
call fcn.00419390
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.00486390
add esp, 0xc
mov eax, dword [eax + 4]
mov byte [esp + 0x454], 2
cmp eax, ebp
jne 0x41a03b
mov eax, 0x4b49e4
push eax
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x454], 0
sete bl
cmp eax, ebp
je 0x41a077
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41a06e
cmp al, 0xff
je 0x41a06e
dec al
mov byte [ecx], al
jmp 0x41a077
push ecx
call fcn.004a2a3d
add esp, 4
test bl, bl
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
jne 0x419eef
mov edx, dword [0x4d5f90]
mov dword [esp + 0x10], edx
mov eax, dword [esi + 0x20]
mov byte [esp + 0x454], 3
mov ecx, dword [eax + edi*4]
call fcn.004193b0
test al, al
je 0x41a0b3
push 0x4c8d9c
jmp 0x41a0b8
push 0x4c8dd8
lea ecx, [esp + 0x14]
call fcn.004a371e
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x28]
push eax
call fcn.004856d0
test al, al
je 0x41a258
lea ecx, [esp + 0x10]
mov byte [esp + 0x454], 0
call fcn.004a3625
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + edi*4]
call fcn.004193a0
push eax
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
mov ecx, dword [0x4d5f90]
mov dword [esp + 0x10], ecx
mov eax, dword [esi + 0x20]
mov byte [esp + 0x454], 4
mov ecx, dword [eax + edi*4]
call fcn.00419470
test al, al
je 0x41a12d
push 0x4c8d9c
jmp 0x41a132
push 0x4c8dd8
lea ecx, [esp + 0x14]
call fcn.004a371e
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x28]
push edx
call fcn.004856d0
test al, al
je 0x41a294
lea ecx, [esp + 0x10]
mov byte [esp + 0x454], 0
call fcn.004a3625
mov eax, dword [0x4d5f90]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x20]
mov byte [esp + 0x454], 5
mov ecx, dword [eax + edi*4]
call fcn.00419480
test al, al
je 0x41a189
push 0x4c8d9c
jmp 0x41a18e
push 0x4c8dd8
lea ecx, [esp + 0x18]
call fcn.004a371e
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x41a2cd
lea ecx, [esp + 0x14]
mov byte [esp + 0x454], 0
call fcn.004a3625
push 0x4c8dd8
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
push 0x4c8dd8
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
push 0x4c8dd8
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
push 0x4c8d98
lea ecx, [esp + 0x2c]
call fcn.004856d0
test al, al
je 0x419eef
inc edi
jmp 0x419f1c
lea ecx, [esp + 0x28]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x454], 0
call fcn.004a3625
lea ecx, [esp + 0x28]
mov dword [esp + 0x454], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x41a32c
lea ecx, [esp + 0x28]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x454], 0
call fcn.004a3625
lea ecx, [esp + 0x28]
mov dword [esp + 0x454], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x41a32c
lea ecx, [esp + 0x28]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x454], 0
call fcn.004a3625
lea ecx, [esp + 0x28]
mov dword [esp + 0x454], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x41a32c
lea ecx, [esp + 0x28]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x14]
mov byte [esp + 0x454], 0
call fcn.004a3625
lea ecx, [esp + 0x28]
mov dword [esp + 0x454], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x41a32c
lea ecx, [esp + 0x28]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x28]
mov dword [esp + 0x454], 0xffffffff
call fcn.00485420
mov al, 1
mov ecx, dword [esp + 0x44c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x448
ret