Function at 0x556278
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x556280
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x556527
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 8]
mov eax, dword [0x586750]
mov eax, dword [eax]
call fcn.00471e6c
lea edx, [ebp - 0xc]
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050f318
lea eax, [ebp - 0xc]
call fcn.004b7c30
lea edx, [ebp - 0x10]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
push dword [ebp - 0x10]
lea edx, [ebp - 0x14]
mov eax, dword [0x50adf8]
call fcn.0050e0a0
push dword [ebp - 0x14]
push 0x556540
push dword [ebp - 0xc]
push 0x55654c
lea eax, [ebp - 4]
mov edx, 5
call fcn.0040553c
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4ba2d8]
call fcn.004bb818
mov esi, eax
mov eax, dword [ebx + 0x3a8]
mov eax, dword [eax + 0x280]
push eax
mov ecx, 0x55655c
mov edx, 0x556570
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, esi
call fcn.004041e0
mov ecx, dword [ebp - 4]
mov edx, dword [ebx + 0x370]
mov eax, dword [ebx + 0xe44]
call fcn.0052c4d0
mov eax, dword [ebx + 0x3a8]
mov eax, dword [eax + 0x280]
sub eax, 1
jb 0x55636d
je 0x5563ae
dec eax
je 0x5563ec
dec eax
je 0x55642a
jmp 0x556466
lea edx, [ebp - 0x18]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
push dword [ebp - 0x18]
lea edx, [ebp - 0x1c]
mov eax, dword [0x50adf8]
call fcn.0050e0a0
push dword [ebp - 0x1c]
push 0x556540
push dword [ebp - 0xc]
push 0x556580
lea eax, [ebp - 4]
mov edx, 5
call fcn.0040553c
jmp 0x556466
lea edx, [ebp - 0x20]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
push dword [ebp - 0x20]
lea edx, [ebp - 0x24]
mov eax, dword [0x50adf8]
call fcn.0050e0a0
push dword [ebp - 0x24]
push 0x556540
push dword [ebp - 0xc]
push 0x556598
lea eax, [ebp - 4]
mov edx, 5
call fcn.0040553c
jmp 0x556466
lea edx, [ebp - 0x28]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
push dword [ebp - 0x28]
lea edx, [ebp - 0x2c]
mov eax, dword [0x50adf8]
call fcn.0050e0a0
push dword [ebp - 0x2c]
push 0x556540
push dword [ebp - 0xc]
push 0x5565b0
lea eax, [ebp - 4]
mov edx, 5
call fcn.0040553c
jmp 0x556466
lea edx, [ebp - 0x30]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
push dword [ebp - 0x30]
lea edx, [ebp - 0x34]
mov eax, dword [0x50adf8]
call fcn.0050e0a0
push dword [ebp - 0x34]
push 0x556540
push dword [ebp - 0xc]
push 0x5565c8
lea eax, [ebp - 4]
mov edx, 5
call fcn.0040553c
mov ecx, dword [ebp - 4]
mov edx, ebx
mov eax, dword [ebx + 0xe44]
call fcn.0052c4d0
lea edx, [ebp - 0x38]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
lea eax, [ebp - 0x38]
mov edx, 0x5565e0
call fcn.00405474
mov eax, dword [ebp - 0x38]
call fcn.0040a510
test al, al
je 0x5564d4
lea edx, [ebp - 0x3c]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.005229c8
lea eax, [ebp - 0x3c]
mov edx, 0x5565e0
call fcn.00405474
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x40]
call fcn.00405638
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
lea edx, [ebp - 0x44]
mov eax, dword [0x586a98]
mov eax, dword [eax]
call fcn.00512754
lea eax, [ebp - 0x44]
mov edx, 0x5565f8
call fcn.00405474
mov edx, dword [ebp - 0x44]
mov eax, dword [ebx + 0x4b0]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55652e
lea eax, [ebp - 0x44]
call fcn.004051a8
lea eax, [ebp - 0x3c]
mov edx, 0xf
call fcn.004051cc
ret