Function at 0x75a2737f
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ebx
push esi
push edi
push 0xffffffffffffffff
xor ebx, ebx
push 0x80000002
push eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], ebx
call dword [ecx + 0x60]
push eax
lea ecx, [ebp - 0x18]
call fcn.759cbe5f
cmp dword [eax], ebx
je 0x75a27799
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push 0xffffffffffffffff
push ebx
push 0x759d7c48
push eax
call dword [ecx + 0x38]
push eax
lea ecx, [ebp - 8]
call fcn.759cbe5f
cmp dword [eax], ebx
je 0x75a27799
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x2c]
push edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x10], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
push eax
lea ecx, [ebp - 0x10]
call fcn.759cbe5f
mov edi, 0x75bc8fe0
cmp dword [eax], ebx
jne 0x75a27461
cmp dword [ebp - 0x2c], 1
jne 0x75a27461
push 1
lea ecx, [ebp - 0x38]
call fcn.759b87f0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], edi
mov esi, dword [eax]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x20], eax
add esi, 0x14
call fcn.759c6ee9
push eax
push ebx
push dword [ebp - 0x20]
call dword [esi]
push eax
lea ecx, [ebp - 0x10]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75a27447
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x38]
call fcn.759b87d1
push 1
lea ecx, [ebp - 0x38]
call fcn.759b87f0
call fcn.759d7938
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], ebx
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x28], eax
call dword [ecx + 0x20]
mov edi, eax
mov eax, dword [ebp + 8]
mov esi, dword [eax]
lea ecx, [ebp - 0x14]
add esi, 0x3c
call fcn.759c6f3c
push eax
push edi
push dword [ebp + 8]
call dword [esi]
mov esi, eax
cmp esi, ebx
jne 0x75a274eb
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x5c]
mov esi, eax
cmp esi, ebx
jne 0x75a274eb
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], edi
add esi, 0x90
call fcn.75b31763
push eax
lea ecx, [ebp - 0x1c]
call fcn.759c6ee9
push eax
push edi
push 0x75a277c0
push ebx
push dword [ebp - 0x30]
call dword [esi]
mov esi, eax
mov byte [ebp - 1], bl
cmp esi, ebx
je 0x75a274ef
mov byte [ebp - 1], 1
test byte [ebp - 0x24], 1
je 0x75a27501
and dword [ebp - 0x24], 0xfffffffe
lea ecx, [ebp - 0x48]
call fcn.759cc6cc
mov eax, dword [ebp - 0x14]
cmp byte [ebp - 1], bl
je 0x75a27543
cmp eax, ebx
je 0x75a27513
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x38]
call fcn.759b87d1
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x75a2779f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x75a2779f
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xc]
call fcn.759c7add
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push 6
push ebx
push eax
call dword [ecx + 0xbc]
mov esi, eax
mov eax, dword [ebp - 0xc]
push eax
cmp esi, ebx
je 0x75a2758e
mov ecx, dword [eax]
call dword [ecx + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
jmp 0x75a27509
mov dword [ebp - 0x20], ebx
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov edi, dword [ebp + 8]
mov esi, dword [edi]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
add esi, 0x70
call fcn.759c6f3c
push eax
push 3
push dword [ebp - 0x30]
push edi
call dword [esi]
mov esi, eax
cmp esi, ebx
je 0x75a275d7
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x75a2757d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x75a2757d
mov edi, 0x759f732c
mov eax, dword [ebp - 0x20]
mov dword [ebp + 8], ebx
mov esi, dword [eax]
lea ecx, [ebp + 8]
mov dword [ebp - 0x30], eax
add esi, 0x14
call fcn.759c6f3c
push eax
push 1
push dword [edi - 4]
push dword [ebp - 0x30]
call dword [esi]
push eax
lea ecx, [ebp - 0x10]
call fcn.759cbe5f
cmp dword [eax], ebx
jne 0x75a2762e
mov eax, dword [ebp + 8]
push dword [edi]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
push dword [ebp - 0x30]
mov esi, eax
push esi
call fcn.75a1f29f
mov eax, dword [esi]
pop ecx
pop ecx
push esi
call dword [eax + 8]
mov eax, dword [ebp + 8]
cmp eax, ebx
je 0x75a2763b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
add edi, 0xc
cmp edi, 0x759f73f8
jl 0x75a275dc
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
push eax
lea ecx, [ebp - 0x10]
call fcn.759cbe5f
cmp dword [ebp - 0x10], ebx
je 0x75a27675
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [ebp - 0x10]
jmp 0x75a275c8
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov esi, eax
cmp esi, ebx
jne 0x75a2769b
push dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x18]
mov esi, eax
cmp esi, ebx
je 0x75a27726
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x34]
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x1c]
cmp eax, 5
jne 0x75a275c8
cmp dword [0x75bc8ca8], ebx
je 0x75a276ff
mov eax, dword [esi]
or dword [ebp - 0x24], 2
push 1
push 1
push esi
call dword [eax + 0x48]
push ebx
push ebx
mov edi, eax
mov eax, 0x759b7ff8
push eax
push eax
push eax
push eax
push eax
push eax
mov eax, dword [edi]
push edi
call dword [eax + 0x20]
push eax
push ebx
push ebx
push 9
call fcn.759c26bf
add esp, 0x30
jmp 0x75a27702
mov edi, dword [ebp + 8]
test byte [ebp - 0x24], 2
je 0x75a2770e
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov eax, dword [esi]
push esi
call dword [eax + 8]
push 0x5dd
call fcn.75a203dc
pop ecx
mov esi, eax
jmp 0x75a275c8
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x75a27733
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x75a27749
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x38]
call fcn.759b87d1
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x75a2777b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, ebx
je 0x75a27788
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x75a27795
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x75a277bb
mov esi, dword [0x75bc82c8]
mov eax, dword [ebp - 8]
cmp eax, ebx
je 0x75a277ac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x75a277b9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret