Function at 0x5180b0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
push ebx
push esi
push edi
call fcn.00516de0
mov ebx, eax
xor edi, edi
cmp ebx, edi
jne 0x5180d5
mov dword [0x578c08], 0x10000
jmp 0x5180f3
cmp dword [ebx], 1
je 0x5180e6
mov dword [0x578c08], 0x80000
jmp 0x5180f3
mov esi, dword [ebx + 4]
call fcn.00512c40
mov dword [0x578c08], eax
xor eax, eax
mov dword [ebp - 0x138], eax
mov byte [ebp - 0x134], al
mov dword [ebp - 0x10], edi
cmp ebx, edi
jne 0x518114
mov dword [0x578c08], 0x10000
jmp 0x518182
cmp dword [ebx], 1
je 0x518125
mov dword [0x578c08], 0x80000
jmp 0x518182
mov esi, dword [ebx + 4]
mov ecx, dword [esi]
or edx, 0xffffffff
cmp dword [ecx + 4], edx
jg 0x518139
mov ecx, 0x10000
jmp 0x51817c
cmp dword [esi + 4], edx
je 0x51814a
mov edi, ecx
call fcn.00515e50
or edx, 0xffffffff
xor edi, edi
mov eax, dword [esi]
mov dword [esi + 4], edx
mov eax, dword [eax + 4]
mov dword [ebp - 0x138], eax
mov byte [ebp - 0x134], 0
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edi
xor ecx, ecx
mov dword [0x578c08], ecx
xor esi, esi
mov dword [ebp - 4], eax
cmp eax, edi
jle 0x518203
jmp 0x518190
mov dword [ebp - 0x138], edi
mov byte [ebp - 0x134], 0
mov dword [ebp - 0x10], edi
cmp ebx, edi
je 0x5181dc
cmp dword [ebx], 1
je 0x5181c4
mov dword [0x578c08], 0x80000
cmp dword [ebx], 1
je 0x5181e8
mov dword [0x578c08], 0x80000
jmp 0x5181fd
mov eax, dword [ebx + 4]
lea ecx, [ebp - 0x138]
push ecx
push esi
push eax
call fcn.005165e0
mov dword [0x578c08], eax
jmp 0x5181b3
mov dword [0x578c08], 0x10000
jmp 0x5181fd
mov eax, dword [ebx + 4]
lea edx, [ebp - 0x134]
push edx
push esi
call fcn.00516ec0
mov dword [0x578c08], eax
inc esi
cmp esi, dword [ebp - 4]
jl 0x518190
cmp ebx, edi
jne 0x518216
mov dword [0x578c08], 0x10000
jmp 0x5182dc
cmp dword [ebx], 1
je 0x51822a
mov dword [0x578c08], 0x80000
jmp 0x5182dc
mov esi, dword [ebx + 4]
cmp dword [esi + 4], 0xffffffff
je 0x51823a
mov edi, dword [esi]
call fcn.00515e50
mov edi, dword [esi]
mov dword [esi + 4], 0xffffffff
test edi, edi
je 0x518280
cmp dword [edi + 0x7c], 0
je 0x518252
call fcn.00515e50
mov eax, dword [edi]
mov dword [ebp - 4], eax
test eax, eax
je 0x518277
cmp byte [eax + 0x10], 0
je 0x51826e
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 4]
push eax
call fcn.0040490d
add esp, 4
push edi
call fcn.004f7040
add esp, 4
mov dword [esi], 0
mov eax, dword [esi + 0x138]
mov dword [0x578c08], 0
test eax, eax
je 0x5182a3
push eax
call fcn.0040490d
add esp, 4
mov eax, dword [esi + 0x13c]
mov dword [esi + 0x138], 0
test eax, eax
je 0x5182c0
push eax
call fcn.0040490d
add esp, 4
push esi
mov dword [esi + 0x13c], 0
call fcn.0040490d
add esp, 4
push ebx
call fcn.0040490d
add esp, 4
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.C:Program_Files__x86_Bonjour32cvsd.xml
call esi
push str.C:Program_Files__x86_Bonjour32decvsd.xml
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret