Function at 0x10100f7f
Capabilities:
Delete file

Disassembly:
push ebp
sub esp, 0x208
lea ebp, [esp - 4]
mov eax, dword [0x101f6410]
xor eax, ebp
mov dword [ebp + 0x208], eax
push 0x88
mov eax, 0x10191dcb
call fcn.10145d80
mov eax, dword [ebp + 0x218]
xor edi, edi
cmp dword [ebp + 0x214], edi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x40], ecx
mov eax, 0x101b3eb8
jne 0x10100fc6
mov eax, 0x101b3eac
push eax
xor ebx, ebx
push str.GetVersionStr:version.dat__s_n
inc ebx
push ebx
call fcn.10104e0d
add esp, 0xc
push str.version.dat
lea ecx, [ebp - 0x2c]
call fcn.10007b11
mov esi, eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 4], edi
call fcn.1011f70e
pop ecx
push esi
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], bl
call fcn.100100f8
lea ecx, [ebp - 0x34]
call fcn.10003b75
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.10003b75
push dword [ebp - 0x1c]
call fcn.1011c944
test eax, eax
pop ecx
je 0x1010102c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.http:__toolbar.baidu.com_update_version.dat
lea ecx, [ebp - 0x3c]
call fcn.10007b11
cmp dword [ebp + 0x214], edi
mov byte [ebp - 4], 5
je 0x101013ea
mov eax, dword [0x101f3028]
mov dword [ebp - 0x10], eax
push 0x1019f188
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.10007b11
push eax
push str.Start_Page
push str.SOFTWAREMicrosoftInternet_ExplorerMain
lea eax, [ebp - 0x14]
push SysReAllocString
push eax
mov byte [ebp - 4], 7
call fcn.10120490
add esp, 0x14
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.10003b75
push 0x104
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call fcn.10011725
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.10007845
lea ecx, [ebp - 0x18]
call fcn.10003b75
mov eax, dword [0x101f3028]
mov dword [ebp - 0x38], eax
mov esi, dword [ebp - 0x14]
push 0x2000
lea eax, [ebp - 0x54]
push eax
push 0x825
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x54], 0x824
call fcn.1000401e
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_UrlEscapeW]
test eax, eax
jne 0x10101104
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
call fcn.100041f7
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x14]
call fcn.10007845
jmp 0x1010114a
lea ecx, [ebp - 0x94]
call fcn.10116120
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xc
call fcn.10116282
test al, al
je 0x1010113b
cmp dword [ebp - 0x60], 0xffffffff
je 0x1010113b
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x14]
call fcn.10007845
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xb
call fcn.10116185
push 0x206
lea eax, [ebp + 2]
push edi
push eax
mov word [ebp], di
call fcn.10146c80
lea eax, [ebp]
push eax
call fcn.10092b65
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], edi
push edi
lea eax, [ebp - 0x2c]
push eax
push 0x101a0944
push edi
mov byte [ebp - 4], 0xd
call fcn.10119348
add esp, 0x20
cmp eax, edi
jne 0x10101198
mov eax, dword [ebp - 0x2c]
cmp eax, edi
je 0x10101198
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
call dword [ecx + 0x20]
mov esi, 0x101f84e8
mov ecx, esi
call fcn.100519c2
cmp eax, 2
mov dword [ebp - 0x18], eax
jne 0x101011af
mov dword [ebp - 0x18], ebx
mov ecx, esi
call fcn.10053370
mov ecx, esi
mov dword [ebp - 0x44], eax
call fcn.10053429
mov ecx, esi
mov dword [ebp - 0x48], eax
call fcn.100534e5
mov ecx, esi
mov dword [ebp - 0x50], eax
call fcn.100535a4
mov ecx, esi
mov dword [ebp - 0x24], eax
call fcn.1004e1c6
mov ebx, eax
cmp ebx, edi
jne 0x101011f5
push edi
call fcn.10146fd5
pop ecx
mov ebx, eax
push ebx
mov ecx, esi
call fcn.1004e261
mov ecx, esi
call fcn.100547fa
push edi
mov ecx, esi
mov dword [ebp - 0x28], eax
call fcn.10054824
mov ecx, esi
call fcn.10053663
test eax, eax
push edi
je 0x10101330
call fcn.10146fd5
pop ecx
mov ecx, esi
mov dword [ebp - 0x20], eax
call fcn.10052389
push eax
push dword [ebp - 0x20]
mov ecx, esi
call fcn.10052e29
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x10]
push str.__sms_dt_dns_dhp
push eax
call fcn.10004662
mov eax, dword [ebp - 0x14]
add esp, 0x18
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x10]
call fcn.1000e791
mov eax, dword [0x101f3028]
mov dword [ebp - 0x20], eax
push ebx
push dword [ebp - 0x24]
mov ecx, esi
push dword [ebp - 0x50]
mov byte [ebp - 4], 0xe
push dword [ebp - 0x48]
push dword [ebp - 0x44]
push dword [ebp - 0x34]
call fcn.10052d8f
push eax
mov ecx, esi
call fcn.10051ad3
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push str.showing_daddress_dtop_dlogin_dwebimlogin_dwebimmsgzero_dwebimlightedtimes_dwebimmsgcount_dit_d
push eax
call fcn.10004662
mov eax, dword [ebp - 0x20]
add esp, 0x2c
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x10]
call fcn.1000e791
mov eax, dword [0x101f3028]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x18]
push str.tts_d
push eax
mov byte [ebp - 4], 0xf
call fcn.10004662
mov eax, dword [ebp - 0x18]
add esp, 0xc
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x10]
call fcn.1000e791
mov eax, dword [0x101f3028]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x10
call fcn.1011c4cf
fmul qword [0x101a1c98]
call fcn.10148200
push eax
lea eax, [ebp - 0x24]
push str.iev_d
push eax
call fcn.10004662
mov eax, dword [ebp - 0x24]
add esp, 0xc
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x10]
call fcn.1000e791
lea ecx, [ebp - 0x24]
call fcn.10003b75
lea ecx, [ebp - 0x18]
call fcn.10003b75
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.10003b75
jmp 0x1010134b
call fcn.10146fd5
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x10]
push str.__st_d
push eax
call fcn.10004662
add esp, 0x14
push edi
mov ecx, esi
call fcn.100533d0
push 1
mov ecx, esi
call fcn.1005348c
push edi
mov ecx, esi
call fcn.10053548
push edi
mov ecx, esi
call fcn.10053607
push edi
mov ecx, esi
call fcn.100523d8
push edi
mov ecx, esi
call fcn.10052e78
push edi
call fcn.10146fd5
pop ecx
mov ecx, esi
mov ebx, eax
call fcn.10054040
mov ecx, esi
mov dword [ebp - 0x28], eax
call fcn.100540bf
mov ecx, ebx
sub ecx, eax
cmp ecx, dword [ebp - 0x28]
jbe 0x101013ae
mov ecx, esi
call fcn.1004e5ee
push ebx
mov ecx, esi
call fcn.10054103
mov eax, dword [ebp - 0x10]
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x3c]
call fcn.1000e791
mov eax, dword [ebp - 0x2c]
cmp eax, edi
mov byte [ebp - 4], 0xb
je 0x101013ce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x38]
call fcn.10003b75
lea ecx, [ebp - 0x14]
call fcn.10003b75
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call fcn.10003b75
push edi
push 0x4e20
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.10007ade
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
mov byte [ebp - 4], 0x11
call fcn.10007ade
mov byte [ebp - 4], 5
call fcn.1011af35
add esp, 0x10
cmp eax, edi
jne 0x10101470
push str.GetVersionStr:Failed_to_download_version.dat_n
push 1
call fcn.10104e0d
pop ecx
pop ecx
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x3c]
call fcn.10003b75
lea ecx, [ebp - 0x1c]
call fcn.10003b75
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x208]
xor ecx, ebp
call fcn.10145d71
add ebp, 0x20c
leave
ret 8
lea eax, [ebp - 0x30]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
mov dword [ebp - 0x30], edi
call fcn.10007ade
mov ecx, dword [ebp - 0x40]
call fcn.10100e7d
push dword [ebp - 0x1c]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, edi
jle 0x101014b7
push dword [ebp - 0x30]
lea ecx, [ebp - 0x40]
call fcn.10005f82
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x4c]
push edi
mov dword [ecx], eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x30], edi
je 0x101014c5
push dword [ebp - 0x30]
call fcn.10145563
pop ecx
push esi
push str.GetVersionStr:version.dat_ccXML:_d_n
push 1
call fcn.10104e0d
add esp, 0xc
mov edi, esi
jmp 0x10101439