Function at 0x1e00660f
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push esi
xor esi, esi
cmp dword [0x1e032b90], esi
je 0x1e00662d
mov dword [0x1e032b94], esi
jmp 0x1e006932
push dword [0x1e02e544]
call fcn.1e012269
mov eax, dword [0x1e02e788]
cmp eax, esi
je 0x1e006675
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01facf
jmp 0x1e006660
mov eax, dword [ebp - 0xc]
push dword [eax]
call sym.MIGISM.dll_IsmReleaseMemory
lea eax, [ebp - 0x10]
push eax
call fcn.1e01f7c8
test eax, eax
jne 0x1e00664d
push dword [0x1e02e788]
call fcn.1e01f76e
mov dword [0x1e02e788], esi
mov eax, dword [0x1e02e78c]
cmp eax, esi
je 0x1e0066cf
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01facf
jmp 0x1e0066ba
call fcn.1e002bd4
test eax, eax
jne 0x1e0066a7
cmp dword [0x1e02e794], esi
je 0x1e0066a7
mov eax, dword [ebp - 0xc]
push dword [eax]
push 2
call sym.MIGISM.dll_IsmSendMessageToApp
mov eax, dword [ebp - 0xc]
push dword [eax]
call sym.MIGISM.dll_IsmReleaseMemory
lea eax, [ebp - 0x10]
push eax
call fcn.1e01f7c8
test eax, eax
jne 0x1e00668a
push dword [0x1e02e78c]
call fcn.1e01f76e
mov dword [0x1e02e78c], esi
mov eax, dword [0x1e02e790]
cmp eax, esi
je 0x1e006720
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01facf
jmp 0x1e00670b
cmp dword [0x1e02e794], esi
je 0x1e0066f8
mov eax, dword [ebp - 0xc]
push dword [eax]
push 3
call sym.MIGISM.dll_IsmSendMessageToApp
mov eax, dword [ebp - 0xc]
push dword [eax]
call sym.MIGISM.dll_IsmReleaseMemory
lea eax, [ebp - 0x10]
push eax
call fcn.1e01f7c8
test eax, eax
jne 0x1e0066e4
push dword [0x1e02e790]
call fcn.1e01f76e
mov dword [0x1e02e790], esi
push ebx
xor ebx, ebx
inc ebx
mov dword [0x1e02e794], esi
mov dword [0x1e032b94], esi
mov dword [0x1e02e56c], ebx
call fcn.1e0190e4
mov eax, dword [0x1e02e558]
cmp eax, esi
je 0x1e00677b
cmp dword [0x1e02e55c], esi
jne 0x1e00677b
push esi
push eax
call fcn.1e01b304
test eax, eax
je 0x1e006763
push ebx
push dword [0x1e02e558]
call fcn.1e027247
push dword [0x1e02e558]
push esi
call fcn.1e01c0cf
mov dword [0x1e02e558], esi
mov dword [0x1e02e568], esi
mov eax, dword [0x1e032b9c]
cmp eax, esi
je 0x1e0067ed
push eax
call fcn.1e0032ab
push eax
push dword [0x1e032b9c]
call fcn.1e0031f5
push dword [0x1e02e574]
push dword [0x1e032b9c]
call fcn.1e017416
test eax, eax
jne 0x1e0067e7
push dword [0x1e0331f8]
call sub.LOG.dll_LogBegin
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1e032b9c]
push dword [eax]
push 0x417
push 0x1e0016f4
call sub.LOG.dll_LogW
add esp, 0x10
call sub.LOG.dll_LogEnd
push esi
push dword [0x1e032b9c]
call fcn.1e017416
mov dword [0x1e032b9c], esi
mov eax, dword [0x1e02e570]
cmp eax, esi
je 0x1e006803
push eax
push esi
call fcn.1e01c0cf
mov dword [0x1e02e570], esi
mov eax, dword [0x1e032be8]
cmp eax, esi
je 0x1e00683f
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1e01facf
jmp 0x1e00682a
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x10]
push eax
call fcn.1e01f7c8
test eax, eax
jne 0x1e006818
push dword [0x1e032be8]
call fcn.1e01f76e
mov dword [0x1e032be8], esi
push edi
push ebx
call fcn.1e0107b1
call fcn.1e01346a
call fcn.1e00ba8b
call fcn.1e010809
call fcn.1e014a49
call fcn.1e0050ba
call fcn.1e005177
mov eax, dword [0x1e032bf4]
cmp eax, esi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x1e00687c
push eax
call edi
mov dword [0x1e032bf4], esi
mov eax, dword [0x1e032bf0]
cmp eax, esi
je 0x1e00688e
push eax
call edi
mov dword [0x1e032bf0], esi
push 0x1e032bc0
call fcn.1e01f4b1
mov eax, dword [0x1e032bec]
cmp eax, esi
pop edi
je 0x1e0068ae
push eax
call fcn.1e01f76e
mov dword [0x1e032bec], esi
mov eax, dword [0x1e032be4]
cmp eax, esi
je 0x1e0068c3
push eax
call fcn.1e01fc58
mov dword [0x1e032be4], esi
mov eax, dword [0x1e032be0]
cmp eax, esi
je 0x1e0068d8
push eax
call fcn.1e01fc58
mov dword [0x1e032be0], esi
mov eax, dword [0x1e02e020]
cmp eax, 0xffffffff
je 0x1e0068ef
push eax
call fcn.1e027079
or dword [0x1e02e020], 0xffffffff
push ebx
call fcn.1e026dd1
push ebx
call fcn.1e021835
cmp word [0x1e02e578], si
je 0x1e006916
push ebx
push 0x1e02e578
call fcn.1e027247
mov word [0x1e02e578], si
call fcn.1e0273ac
call fcn.1e02902c
call fcn.1e01b17a
mov dword [0x1e032b90], ebx
mov dword [0x1e02e56c], esi
pop ebx
pop esi
leave
ret