Function at 0x565150
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x636ab9
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x12c
mov eax, dword [0x6b278c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x108], ecx
lea ecx, [ebp - 0x4c]
call fcn.0040e480
mov dword [ebp - 4], 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x108]
call fcn.00564a90
movzx ecx, al
test ecx, ecx
jne 0x5651ce
mov byte [ebp - 0xc9], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0040e530
mov al, byte [ebp - 0xc9]
jmp 0x565469
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x108]
call fcn.00563730
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.0047e5d0
mov dword [ebp - 0x10c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.0047cfa0
mov dword [ebp - 0x110], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call fcn.0040e460
mov dword [ebp - 0x114], eax
push 1
mov ecx, dword [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x58]
call fcn.0047e680
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x58]
call fcn.0047e890
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x11c], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x70]
call fcn.0047d110
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe4]
call fcn.0047d0a0
lea ecx, [ebp - 0x70]
call fcn.0047d730
mov byte [ebp - 0x11d], al
movzx eax, byte [ebp - 0x11d]
test eax, eax
jne 0x5653b3
push 0x65a978
lea ecx, [ebp - 0x70]
call fcn.0047d240
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.0040e3a0
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 6
push str.title
lea ecx, [ebp - 0x70]
call fcn.0047d240
mov dword [ebp - 0x12c], eax
mov edx, dword [ebp - 0x12c]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0040e3a0
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 7
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa8]
call fcn.00410c40
mov dword [ebp - 0x134], eax
mov byte [ebp - 4], 8
push 0x65a984
lea ecx, [ebp - 0xa8]
call fcn.0040e440
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.0040e420
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x108]
call fcn.00563850
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x13c], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x13c]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.004161f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.0040e530
lea ecx, [ebp - 0x70]
call fcn.0047d750
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa8]
call fcn.0040e3e0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc4]
call fcn.0040e3e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8c]
call fcn.0040e3e0
jmp 0x565273
lea ecx, [ebp - 0x70]
call fcn.0047d7e0
lea ecx, [ebp - 0x58]
call fcn.0047e700
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.0047d0a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.0047e630
jmp 0x565406
mov dword [ebp - 4], 1
jmp 0x565432
lea ecx, [ebp - 0x4c]
call fcn.0040e5d0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 0x102], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0040e3e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0040e530
mov al, byte [ebp - 0x102]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b4b30
mov esp, ebp
pop ebp
ret 8