Function at 0x41f270
Capabilities:
Delete file

Disassembly:
mov ecx, dword [eax + 4]
push ebx
push ebp
mov ebp, dword [esp + 0xc]
dec ecx
push esi
push edi
mov dword [esp + 0x14], 0
cmp ecx, 8
ja case.default.0x41f28d
jmp dword [ecx*4 + 0x41f604]
cmp dword [eax], 0x220
jb 0x41f5e6
mov esi, dword [eax + 0x14]
push esi
push str.pDeleteFileRequest__szFilePath:__s
call fcn.00404c20
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, eax
test esi, esi
jne 0x41f2c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x14]
mov dword [ebp], esi
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x434
jb 0x41f5e6
mov esi, dword [eax + 0x14]
mov eax, dword [esi]
push eax
push str.pDeleteValueRequest__hKeyRoot:__08X
call fcn.00404c20
lea ebx, [esi + 4]
push ebx
push str.pDeleteValueRequest__szSubKey:__s
call fcn.00404c20
lea edi, [esi + 0x20c]
push edi
push str.pDeleteValueRequest__szValueName:__s
call fcn.00404c20
mov ecx, dword [esi + 0x414]
push ecx
push str.pDeleteValueRequest__dwSessionId:__d
call fcn.00404c20
mov edx, dword [esi + 0x418]
push edx
push str.pDeleteValueRequest__isWin64Registry:__d
call fcn.00404c20
mov eax, dword [esi + 0x418]
mov ecx, dword [esi + 0x414]
add esp, 0x28
push eax
push ecx
mov ecx, dword [esi]
push ebx
lea ebx, [esp + 0x20]
mov edx, edi
call fcn.0041e840
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x1c
jb 0x41f5e6
mov esi, dword [eax + 0x14]
mov edx, dword [esi]
push edx
push str.pKillProcessRequest__dwProcessId:__d
call fcn.00404c20
mov eax, dword [esi]
add esp, 8
lea ebx, [esp + 0x14]
call fcn.0041eb30
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x1c
jb 0x41f5e6
mov esi, dword [eax + 0x14]
mov eax, dword [esi]
push eax
push str.pScanTrayRequest__dwProcessId:__d
call fcn.00404c20
mov ecx, dword [esi]
add esp, 8
push ecx
call fcn.0041ebb0
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x83c
jb 0x41f5e6
mov esi, dword [eax + 0x14]
mov edx, dword [esi]
push edx
push str.pSetValueRequest__hKeyRoot:__08X
call fcn.00404c20
lea edi, [esi + 4]
push edi
push str.pSetValueRequest__szSubKey:__s
call fcn.00404c20
lea ebx, [esi + 0x20c]
push ebx
push str.pSetValueRequest__szValueName:__s
call fcn.00404c20
mov eax, dword [esi + 0x81c]
push eax
push str.pSetValueRequest__dwSessionId:__d
call fcn.00404c20
mov ecx, dword [esi + 0x818]
push ecx
push str.pSetValueRequest__dwSizeofData:__d
call fcn.00404c20
mov edx, dword [esi + 0x820]
push edx
push str.pSetValueRequest__isWin64Registry:__d
call fcn.00404c20
mov eax, dword [esi + 0x820]
mov ecx, dword [esi + 0x81c]
add esp, 0x30
push eax
mov eax, dword [esi + 0x818]
push ecx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esi + 0x414]
push eax
lea ecx, [esi + 0x418]
push ecx
mov ecx, dword [esi]
push edx
mov edx, ebx
call fcn.0041ecc0
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x220
jb 0x41f5e6
mov esi, dword [eax + 0x14]
push esi
push str.pRemoveDirectoryRequest__szDirectoryPath:__s
call fcn.00404c20
add esp, 8
lea eax, [esp + 0x14]
push eax
mov eax, esi
call fcn.0041eff0
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x220
jb 0x41f5e6
mov esi, dword [eax + 0x14]
push esi
push str.pStartServiceRequest__szServiceName:__s
call fcn.00404c20
add esp, 8
lea ebx, [esp + 0x14]
mov eax, esi
call fcn.0041f030
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0x22c
jb 0x41f5e6
mov esi, dword [eax + 0x14]
push esi
push str.pChangeServiceConfigRequest__szServiceName:__s
call fcn.00404c20
mov ecx, dword [esi + 0x208]
push ecx
push str.pChangeServiceConfigRequest__dwServiceType:__d
call fcn.00404c20
mov edx, dword [esi + 0x20c]
push edx
push str.pChangeServiceConfigRequest__dwStartType:__d
call fcn.00404c20
mov eax, dword [esi + 0x210]
push eax
push str.pChangeServiceConfigRequest__dwErrorControl:__d
call fcn.00404c20
mov ecx, dword [esi + 0x210]
mov edx, dword [esi + 0x20c]
mov eax, dword [esi + 0x208]
add esp, 0x20
push ecx
push edx
push eax
lea ebx, [esp + 0x20]
mov eax, esi
call fcn.0041f100
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp dword [eax], 0xa24
jb 0x41f5e6
mov esi, dword [eax + 0x14]
push esi
push str.pWriteLogRequest__szLogPath:__s
call fcn.00404c20
mov ecx, dword [esi + 0x208]
push ecx
push str.pWriteLogRequest__dwSize:__d
call fcn.00404c20
mov eax, dword [esi + 0x208]
add esp, 0x10
push eax
lea eax, [esi + 0x20c]
push esi
lea ebx, [esp + 0x1c]
call fcn.0041f1e0
mov dword [ebp], eax
mov edx, dword [esp + 0x14]
mov dword [ebp + 4], edx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 4