Function at 0x1e005cfe
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
xor esi, esi
cmp dword [0x1e02eb70], esi
je 0x1e005d1a
mov dword [0x1e02eb74], esi
jmp 0x1e006026
push dword [0x1e02a524]
call fcn.1e00f9d8
mov eax, dword [0x1e02a768]
cmp eax, esi
je 0x1e005d62
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01bbd1
jmp 0x1e005d4d
mov eax, dword [ebp - 0xc]
push dword [eax]
call sym.MIGISM.dll_IsmReleaseMemory
lea eax, [ebp - 0x10]
push eax
call fcn.1e01b8e9
test eax, eax
jne 0x1e005d3a
push dword [0x1e02a768]
call fcn.1e01b8a1
mov dword [0x1e02a768], esi
mov eax, dword [0x1e02a76c]
cmp eax, esi
je 0x1e005dc2
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01bbd1
jmp 0x1e005dad
call fcn.1e002cd6
test eax, eax
jne 0x1e005d9a
cmp dword [0x1e02a774], esi
je 0x1e005d9a
mov eax, dword [0x1e02ebbc]
cmp eax, esi
je 0x1e005d9a
mov ecx, dword [ebp - 0xc]
push dword [ecx]
push 2
call eax
mov eax, dword [ebp - 0xc]
push dword [eax]
call sym.MIGISM.dll_IsmReleaseMemory
lea eax, [ebp - 0x10]
push eax
call fcn.1e01b8e9
test eax, eax
jne 0x1e005d77
push dword [0x1e02a76c]
call fcn.1e01b8a1
mov dword [0x1e02a76c], esi
mov eax, dword [0x1e02a770]
cmp eax, esi
je 0x1e005e19
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01bbd1
jmp 0x1e005e04
cmp dword [0x1e02a774], esi
je 0x1e005df1
mov eax, dword [0x1e02ebbc]
cmp eax, esi
je 0x1e005df1
mov ecx, dword [ebp - 0xc]
push dword [ecx]
push 3
call eax
mov eax, dword [ebp - 0xc]
push dword [eax]
call sym.MIGISM.dll_IsmReleaseMemory
lea eax, [ebp - 0x10]
push eax
call fcn.1e01b8e9
test eax, eax
jne 0x1e005dd7
push dword [0x1e02a770]
call fcn.1e01b8a1
mov dword [0x1e02a770], esi
push ebx
xor ebx, ebx
inc ebx
mov dword [0x1e02a774], esi
mov dword [0x1e02eb74], esi
mov dword [0x1e02a548], ebx
call fcn.1e0159bb
mov eax, dword [0x1e02a534]
cmp eax, esi
je 0x1e005e74
cmp dword [0x1e02a538], esi
jne 0x1e005e74
push esi
push eax
call fcn.1e0175b1
test eax, eax
je 0x1e005e5c
push ebx
push dword [0x1e02a534]
call fcn.1e0238ff
push dword [0x1e02a534]
push esi
call fcn.1e018041
mov dword [0x1e02a534], esi
mov dword [0x1e02a544], esi
mov eax, dword [0x1e02eb7c]
cmp eax, esi
je 0x1e005ee6
push eax
call fcn.1e003316
push eax
push dword [0x1e02eb7c]
call fcn.1e003265
push dword [0x1e02a550]
push dword [0x1e02eb7c]
call fcn.1e0140a5
test eax, eax
jne 0x1e005ee0
push dword [0x1e02f1d8]
call sub.LOG.dll_LogBegin
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1e02eb7c]
push dword [eax]
push 0x417
push 0x1e0016e8
call sub.LOG.dll_LogW
add esp, 0x10
call sub.LOG.dll_LogEnd
push esi
push dword [0x1e02eb7c]
call fcn.1e0140a5
mov dword [0x1e02eb7c], esi
mov eax, dword [0x1e02a54c]
cmp eax, esi
je 0x1e005efc
push eax
push esi
call fcn.1e018041
mov dword [0x1e02a54c], esi
mov eax, dword [0x1e02ebc8]
cmp eax, esi
je 0x1e005f38
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01bbd1
jmp 0x1e005f23
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x10]
push eax
call fcn.1e01b8e9
test eax, eax
jne 0x1e005f11
push dword [0x1e02ebc8]
call fcn.1e01b8a1
mov dword [0x1e02ebc8], esi
push edi
push ebx
call fcn.1e00e15a
call fcn.1e010926
call fcn.1e00a7d8
call fcn.1e00e1a9
call fcn.1e011a5d
call fcn.1e004ae6
mov eax, dword [0x1e02ebd4]
cmp eax, esi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x1e005f70
push eax
call edi
mov dword [0x1e02ebd4], esi
mov eax, dword [0x1e02ebd0]
cmp eax, esi
je 0x1e005f82
push eax
call edi
mov dword [0x1e02ebd0], esi
push 0x1e02eba0
call fcn.1e01b2eb
mov eax, dword [0x1e02ebcc]
cmp eax, esi
pop edi
je 0x1e005fa2
push eax
call fcn.1e01b8a1
mov dword [0x1e02ebcc], esi
mov eax, dword [0x1e02ebc4]
cmp eax, esi
je 0x1e005fb7
push eax
call fcn.1e01b645
mov dword [0x1e02ebc4], esi
mov eax, dword [0x1e02ebc0]
cmp eax, esi
je 0x1e005fcc
push eax
call fcn.1e01b645
mov dword [0x1e02ebc0], esi
mov eax, dword [section..data]
cmp eax, 0xffffffff
je 0x1e005fe3
push eax
call fcn.1e022774
or dword [section..data], 0xffffffff
push ebx
call fcn.1e022504
push ebx
call fcn.1e01d504
cmp word [0x1e02a558], si
je 0x1e00600a
push ebx
push 0x1e02a558
call fcn.1e0238ff
mov word [0x1e02a558], si
call fcn.1e023a1b
call fcn.1e02553d
call fcn.1e01744e
mov dword [0x1e02eb70], ebx
mov dword [0x1e02a548], esi
pop ebx
pop esi
leave
ret