Function at 0x75af8b38
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [ebp + 0x20]
push ebx
xor ebx, ebx
push esi
mov esi, 0x75bc8fe0
push edi
push 1
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], 0x75af91f0
mov dword [ebp - 0x44], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [eax], ebx
call fcn.759b87f0
mov eax, dword [ebp + 0x18]
mov edi, dword [eax]
lea ecx, [ebp - 0x1c]
add edi, 0xb4
call fcn.759c6ee9
push eax
lea ecx, [ebp - 0x10]
call fcn.759c6f3c
push eax
push dword [ebp + 8]
push dword [ebp + 0x18]
call dword [edi]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75af90f3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edi, dword [ebp - 0x10]
push eax
call dword [ecx + 0x20]
mov ecx, dword [edi]
push ebx
lea edx, [ebp - 0x44]
push edx
push eax
push edi
call dword [ecx + 0x34]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [ebp - 4], ebx
jne 0x75af90f3
cmp dword [ebp - 0x44], ebx
je 0x75af90f3
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
push eax
lea ecx, [ebp - 0x28]
call fcn.759cbe5f
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x34]
push dword [ebp + 0x14]
mov edi, eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], edi
call fcn.759ca326
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
cmp eax, 5
je 0x75af8c41
cmp eax, 2
je 0x75af8c41
xor ecx, ecx
jmp 0x75af8c44
xor ecx, ecx
inc ecx
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
cmp dword [ebp + 0x24], ebx
je 0x75af8c57
cmp dword [ebp + 0x1c], ebx
je 0x75af8cf2
cmp dword [0x75bcc8ec], ebx
jne 0x75af8cf2
cmp eax, 3
jne 0x75af8cf2
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edi, dword [ebp - 0x10]
push eax
call dword [ecx + 0x20]
push dword [ebp + 0xc]
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0x3c]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [ebp - 4], ebx
je 0x75af8c97
mov dword [ebp - 8], 0x643
lea ecx, [ebp - 0x54]
call fcn.759b87d1
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [0x75bc8fe0]
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x75af8cd0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
cmp eax, ebx
je 0x75af8cdd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x75af8cea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
jmp 0x75af91c5
call fcn.75a3aae6
push eax
lea ecx, [ebp - 0x40]
call fcn.759c755e
mov eax, dword [ebp + 0x1c]
sub eax, ebx
je 0x75af8d1f
dec eax
je 0x75af8d16
dec eax
jne 0x75af8d26
mov dword [ebp - 0x2c], 0x75af91f8
jmp 0x75af8d26
mov dword [ebp - 0x2c], 0x75af9200
jmp 0x75af8d26
mov dword [ebp - 0x2c], 0x75af91f0
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov edi, dword [ebp + 0x18]
mov esi, dword [edi]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x4c], eax
add esi, 0x3c
call fcn.759c6f3c
push eax
push dword [ebp - 0x4c]
push edi
call dword [esi]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75af90ea
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
push ebx
lea ecx, [ebp - 0x18]
mov dword [ebp + 0x18], eax
add esi, 0x90
call fcn.759c6ee9
push eax
push 1
push dword [ebp - 0x2c]
push ebx
push dword [ebp + 0x18]
call dword [esi]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75af90ea
mov esi, dword [edi]
lea ecx, [ebp - 0x24]
add esi, 0x48
call fcn.759c6f3c
push eax
push ebx
push ebx
push edi
call dword [esi]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75af90e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov esi, dword [ebp - 0x10]
push eax
call dword [ecx + 0x20]
mov ecx, dword [esi]
lea edx, [ebp - 0x3c]
push edx
push eax
push esi
call dword [ecx + 0x4c]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75af90e1
push 5
call fcn.759c9083
pop ecx
push eax
lea ecx, [ebp - 0xc]
call fcn.759cbe5f
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push ebx
push 0x10000
push eax
call dword [ecx + 0x1c]
push 0xc
call fcn.759c9083
pop ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.759cbe5f
push dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov eax, dword [esi]
push 1
push esi
call dword [eax + 0x3c]
push dword [ebp - 0x18]
mov eax, dword [esi]
push 3
push esi
call dword [eax + 0x3c]
mov eax, dword [esi]
push ebx
push 4
push esi
call dword [eax + 0x34]
push dword [ebp - 0x3c]
mov eax, dword [esi]
push 5
push esi
call dword [eax + 0x34]
cmp dword [0x75bcc8ec], 2
jne 0x75af8e7d
push ebx
lea ecx, [ebp - 0x34]
call fcn.759c6f3c
push eax
push edi
call fcn.75a96d5a
add esp, 0xc
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [ebp - 4], ebx
jne 0x75af8e71
push dword [ebp - 0x34]
mov eax, dword [esi]
push 0xc
push esi
call dword [eax + 0x38]
test eax, eax
jne 0x75af8e7d
mov dword [ebp - 8], 0x643
jmp 0x75af90fd
push dword [ebp - 0xc]
mov ecx, 0x75bcc9a0
push 0xa000000
mov dword [ebp + 0x18], ebx
call fcn.759d14b0
cmp eax, 2
jne 0x75af8ea3
mov dword [ebp - 8], 0x642
jmp 0x75af90fd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, dword [0x75bcc8c8]
push esi
push dword [ebp - 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
mov edi, ebx
jmp 0x75af9063
mov eax, dword [ebp - 4]
mov eax, dword [eax]
push 1
push dword [ebp - 4]
call dword [eax + 0x1c]
mov dword [ebp - 0x20], eax
cmp eax, 0x938
jne 0x75af8f3e
mov eax, 0x10000
add dword [ebp - 0x38], eax
lea ecx, [ebp - 0x4c]
add edi, eax
call fcn.75a95cfc
test al, al
je 0x75af904a
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push 2
push 1
push eax
call dword [ecx + 0x34]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push edi
push 2
push eax
call dword [ecx + 0x34]
push dword [ebp - 0xc]
mov ecx, 0x75bcc9a0
push 0xa000000
xor edi, edi
call fcn.759d14b0
cmp eax, 2
jne 0x75af904a
jmp 0x75af8e97
mov eax, dword [ebp - 0x20]
cmp eax, 0x923
je 0x75af90a9
cmp eax, 0x935
je 0x75af90a9
cmp eax, 0x93f
je 0x75af8e97
cmp eax, 0x92b
je 0x75af90a9
cmp eax, 0x93e
je 0x75af90a9
cmp eax, 0x51d
je 0x75af8fda
cmp eax, 0x51e
je 0x75af8fda
cmp eax, 0x94e
jne 0x75af8f96
mov dword [ebp - 8], 0x15
jmp 0x75af8fe1
cmp eax, 0x51b
jne 0x75af8fa6
mov dword [ebp - 8], 0x70
jmp 0x75af8fe1
cmp eax, 0x519
jne 0x75af8fb6
mov dword [ebp - 8], 0x1e
jmp 0x75af8fe1
cmp eax, 0x524
jne 0x75af8fd1
cmp dword [ebp + 0x18], 1
jge 0x75af8fc8
inc dword [ebp + 0x18]
jmp 0x75af903d
mov dword [ebp - 8], 0x3b
jmp 0x75af8fe1
mov dword [ebp - 8], 0x800300fd
jmp 0x75af8fe1
mov dword [ebp - 8], 0x6e
mov eax, dword [ebp - 4]
push dword [ebp - 8]
mov dword [ebp - 0x48], eax
call fcn.75acd097
pop ecx
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 4]
mov ecx, 0x75bcc9a0
push 0x1000005
call fcn.759d14b0
sub eax, 4
je 0x75af9034
dec eax
mov eax, dword [esi]
je 0x75af9029
push 8
jmp 0x75af9044
push 0x80
push 4
push esi
call dword [eax + 0x34]
cmp dword [ebp - 0x20], 0x524
jne 0x75af904a
mov eax, dword [esi]
push 0x100
push 4
push esi
call dword [eax + 0x34]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push esi
push dword [ebp - 0x14]
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [ebp - 4], ebx
jne 0x75af8ed2
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push 2
push 1
push eax
call dword [ecx + 0x34]
sub edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
add edi, dword [ebp - 0x3c]
mov ecx, dword [eax]
push edi
push 2
push eax
call dword [ecx + 0x34]
push dword [ebp - 0xc]
mov ecx, 0x75bcc9a0
push 0xa000000
call fcn.759d14b0
cmp eax, 2
jne 0x75af90a9
mov dword [ebp - 8], 0x642
cmp dword [ebp - 8], ebx
jne 0x75af90fd
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edi, dword [ebp - 0x14]
push eax
call dword [ecx + 0x20]
push dword [ebp + 0xc]
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0x3c]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [ebp - 4], ebx
jne 0x75af8e71
mov eax, dword [ebp + 0x20]
mov dword [eax], 1
jmp 0x75af9154
mov dword [ebp - 8], 0x643
jmp 0x75af90fa
mov dword [ebp - 8], 0x660
jmp 0x75af90fa
mov dword [ebp - 8], 2
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
test eax, eax
je 0x75af9154
mov edi, dword [ebp - 0x14]
cmp edi, ebx
je 0x75af9154
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
mov dword [ebp + 0x20], edi
call dword [ecx + 0x20]
mov edi, dword [edi]
lea ecx, [ebp - 0x30]
mov dword [ebp + 0x18], eax
add edi, 0x3c
call fcn.759c6ee9
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x20]
call dword [edi]
push eax
lea ecx, [ebp - 4]
call fcn.759cbe5f
cmp dword [ebp - 4], ebx
jne 0x75af9154
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x54]
call fcn.759b87d1
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x75af918d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
cmp eax, ebx
je 0x75af919a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
je 0x75af91a4
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0xc]
cmp eax, ebx
je 0x75af91b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x75af91be
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x75af91cb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x75af91d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x75af91e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret