Function at 0x1007503a
Capabilities:
Delete file

Disassembly:
push 0x1c
mov eax, 0x1013fabf
call fcn.101018b2
push 0
call fcn.100e4442
pop ecx
call fcn.100db982
call fcn.1007433f
lea eax, [ebp - 0x1c]
mov ebx, 0x1019e718
push eax
mov ecx, ebx
call fcn.100375dd
lea ecx, [ebp - 0x1c]
call fcn.100015d9
mov eax, dword [0x1019a028]
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
push 0x6b
lea ecx, [ebp - 0x14]
call fcn.1000201d
test eax, eax
jne 0x10075097
push 0x1015d8dc
lea ecx, [ebp - 0x14]
call fcn.10001cbf
push dword [ebp - 0x14]
mov edi, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallBaiduBarX
push str.DisplayName
push edi
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
call fcn.100dfc9c
mov eax, dword [0x1019a028]
add esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, 0x80
push eax
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.10001a82
push eax
push 0x1000
push dword [0x1019fa90]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.10001c5b
mov eax, dword [ebp - 0x10]
cmp dword [eax - 8], 0
jne 0x10075100
push 0x1015d8bc
lea ecx, [ebp - 0x10]
call fcn.10001cbf
push dword [ebp - 0x10]
push str.DisplayVersion
push edi
push esi
call fcn.100dfc9c
push 0x1015d894
push str.Publisher
push edi
push esi
call fcn.100dfc9c
push str.http:__www.baidu.com_search_sobar.html
push str.HelpLink
push edi
push esi
call fcn.100dfc9c
push str.http:__toolbar.baidu.com_
push str.URLUpdateInfo
push edi
push esi
call fcn.100dfc9c
add esp, 0x40
push 0x1015d7c0
push str.Enable_Browser_Extensions
push str.SoftwareMicrosoftInternet_ExplorerMain
push SysReAllocString
call fcn.100dfc9c
lea eax, [ebp - 0x20]
push eax
call fcn.100deb14
add esp, 0x14
push 0x5c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.1001c421
push dword [ebp - 0x20]
push str.InstallLocation
push edi
push esi
call fcn.100dfc9c
lea eax, [ebp - 0x1c]
push eax
call fcn.100deb14
push dword [eax]
mov byte [ebp - 4], 3
call fcn.100dee1d
shr eax, 0xa
add esp, 0x18
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 2
call fcn.100015d9
cmp dword [ebp - 0x18], 0
jne 0x100751bd
mov dword [ebp - 0x18], 0x800
push dword [ebp - 0x18]
push str.EstimatedSize
push edi
push esi
call fcn.100dfc56
mov eax, dword [0x1019a028]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 4
call fcn.100deb14
add esp, 0x14
push 0x1015c6b8
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 5
call fcn.100058db
push 0
push dword [eax]
lea eax, [ebp - 0x1c]
push str.__s___d
push eax
mov byte [ebp - 4], 6
call fcn.100020c6
add esp, 0x10
lea ecx, [ebp - 0x18]
call fcn.100015d9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.100015d9
push dword [ebp - 0x1c]
push str.DisplayIcon
push edi
push esi
call fcn.100dfc9c
mov eax, dword [0x1019a028]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 7
call fcn.100deb14
add esp, 0x14
push str.BarBroker.exe
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 8
call fcn.100058db
push 0x1015c704
push 0x1015d6b8
push dword [eax]
lea eax, [ebp - 0x18]
push str.__s____s___s
push eax
mov byte [ebp - 4], 9
call fcn.100020c6
add esp, 0x14
lea ecx, [ebp - 0x24]
call fcn.100015d9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.100015d9
push dword [ebp - 0x18]
push str.UninstallString
push edi
push esi
call fcn.100dfc9c
add esp, 0x10
push 0
push str.AllVoice_State
mov edi, str.software_baiduBaiduToolbarNoAD
mov esi, 0x1019ee20
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc56
add esp, 0x10
push 0
push str.AllFlash_State
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc56
add esp, 0x10
push 0
push str.AllPic_State
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc56
add esp, 0x10
push str..hao123.com
push 0x1015d5b4
mov edi, str.software_baiduBaiduToolbarNoADPage_Allow
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str..baidu.com
push 0x1015d590
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str..youa.com
push 0x1015d570
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str..skycn.com
push 0x1015d54c
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str..skycn.net
push 0x1015d528
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str..baifubao.com
push 0x1015d500
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._ad.
push 0x101567d8
mov edi, str.software_baiduBaiduToolbarNoADPage_Block
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str.http:__ad_0_9_.
push 0x1015934c
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str.http:__ads.
push 0x10159244
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str.banner.
push 0x101594d8
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._advpic
push 0x1015a1cc
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push 0x1015d410
push 0x1015d40c
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push 0x1015d3fc
push 0x1015d3f8
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._banner_img_
push 0x1015b318
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push 0x1015d3bc
push 0x1015d3b8
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push 0x1015d390
push 0x1015d38c
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._adv_
push 0x1015d374
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._images_ad_
push 0x1015d350
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._ads_
push 0x10155368
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._advlink_
push 0x1015d320
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._banner
push 0x1015d304
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str.http:__ad.
push 0x1015d2e4
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str._adImages_
push 0x1015d2c0
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str..swf_a_z_
push 0x1015d2a0
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push str.images.sohu.com_cs_button_
push 0x1015d25c
push edi
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
mov ecx, ebx
call fcn.10037391
test eax, eax
je 0x100755b4
call sym.BaiduBarX.DLL_SetDefSearch
mov ecx, ebx
call fcn.100373f2
test eax, eax
je 0x100755c4
call sym.BaiduBarX.DLL_SetHomePageToBaidu
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.B580CF65_E151_49C3_B73F_70B13FCA8E86
call fcn.1000587e
call fcn.100e4da8
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.77FEF28E_EB96_44FF_B511_3185DEA48697
call fcn.1000587e
call fcn.100e4da8
pop ecx
push 1
mov ecx, ebx
call fcn.10037a40
lea eax, [ebp - 0x24]
push eax
call fcn.100de6a3
mov dword [esp], str.iexp_log.txt
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xa
call fcn.100058db
push dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call esi
lea ecx, [ebp - 0x28]
call fcn.100015d9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.100015d9
lea eax, [ebp - 0x24]
push eax
call fcn.100de6a3
mov dword [esp], str.medialog.dat
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xb
call fcn.100058db
push dword [eax]
call esi
lea ecx, [ebp - 0x28]
call fcn.100015d9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.100015d9
push 0x1015d210
call fcn.10076830
pop ecx
call fcn.10074801
call fcn.1007497a
mov ecx, ebx
call fcn.100355b5
test eax, eax
jne 0x10075698
push eax
call fcn.101029ff
pop ecx
push eax
mov ecx, ebx
call fcn.10035650
push 1
mov ecx, ebx
call fcn.100392df
lea ecx, [ebp - 0x18]
call fcn.100015d9
lea ecx, [ebp - 0x1c]
call fcn.100015d9
lea ecx, [ebp - 0x20]
call fcn.100015d9
lea ecx, [ebp - 0x10]
call fcn.100015d9
lea ecx, [ebp - 0x14]
call fcn.100015d9
xor eax, eax
inc eax
call fcn.1010198a
ret