Function at 0x558010
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x558018
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x5582b5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 4]
call fcn.00558f38
push 0
push 0
mov eax, dword [0x5a1a7c]
mov eax, dword [eax]
mov ecx, 0x5582cc
mov edx, 0x5582f0
call fcn.00473834
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x55822d
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x10]
call fcn.0043382c
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp byte [eax + 0x20], 0
jne 0x5581e7
mov eax, dword [ebp - 4]
cmp word [eax + 0x4a], 0
je 0x5580b5
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x4c]
call dword [ebx + 0x48]
push ebp
mov eax, dword [ebp - 0x14]
call fcn.00557948
pop ecx
xor eax, eax
push ebp
push 0x558196
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0x558318
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
call fcn.00409870
push dword [ebp - 0x20]
push 0x558338
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00404bac
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x5a1a7c]
mov eax, dword [eax]
mov edx, 0x5582f0
call fcn.00473834
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
cmp eax, 6
ja case.0x558118.5
jmp dword [eax*4 + 0x55811f]
push ebp
mov eax, dword [ebp - 0x14]
call fcn.00557ab4
pop ecx
jmp case.0x558118.5
push ebp
mov eax, dword [ebp - 0x14]
call fcn.00557c90
pop ecx
jmp case.0x558118.5
push ebp
mov eax, dword [ebp - 0x14]
call fcn.00557cac
pop ecx
jmp case.0x558118.5
push ebp
mov eax, dword [ebp - 0x14]
call fcn.00557d4c
pop ecx
jmp case.0x558118.5
push ebp
call fcn.00557de0
pop ecx
jmp case.0x558118.5
push ebp
mov eax, dword [ebp - 0x14]
call fcn.00557f70
pop ecx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 4]
call fcn.0055962c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5581cc
mov edx, 0x1f4
mov eax, dword [ebp - 4]
call fcn.005593bc
mov eax, dword [ebp - 8]
call fcn.00404ce4
push eax
call sub.kernel32.dll_DeleteFileA
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0055874c
mov eax, dword [ebp - 4]
cmp word [eax + 0x52], 0
je 0x558214
mov eax, dword [ebp - 0x14]
cmp byte [eax + 0x20], 0
jne 0x558214
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x54]
call dword [ebx + 0x50]
mov edx, 0x32
mov eax, dword [ebp - 4]
call fcn.005593bc
inc dword [ebp - 0x10]
dec dword [ebp - 0x18]
jne 0x55807b
push 0
push 0
push 0x558344
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 8]
call fcn.00409870
push dword [ebp - 0x28]
push 0x558338
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00404bac
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x5a1a7c]
mov eax, dword [eax]
mov edx, 0x5582f0
call fcn.00473834
push 0
push 0
mov eax, dword [0x5a1a7c]
mov eax, dword [eax]
mov ecx, 0x558368
mov edx, 0x5582f0
call fcn.00473834
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5582bc
lea eax, [ebp - 0x28]
mov edx, 4
call fcn.00404858
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404858
ret