Function at 0x10056470
Capabilities:
Delete file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10090d35
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x70
mov eax, dword [0x100ab080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.100257a0
test al, al
je 0x100566f9
call fcn.10028f00
lea ecx, [ebp - 0x74]
lea edx, [eax + 0x7c]
call fcn.1001bc10
mov edi, eax
mov dword [ebp - 4], 0
call fcn.10047190
mov esi, eax
lea ecx, [ebp - 0x80]
push esi
call fcn.10047770
lea eax, [esi + 0x88]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x2c]
call fcn.1001cea0
lea ecx, [ebp - 0x80]
call fcn.100476c0
push edi
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
push eax
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x5c]
call fcn.10026800
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x10056551
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10056547
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10056717
push ecx
push edx
call fcn.100666c9
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x60]
cmp ecx, 7
jbe 0x1005658f
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10056585
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10056717
push ecx
push edx
call fcn.100666c9
add esp, 8
xor eax, eax
mov dword [ebp - 0x64], 0
cmp dword [ebp - 0x48], 7
mov word [ebp - 0x74], ax
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push 0
push eax
mov dword [ebp - 0x60], 7
call fcn.10076b76
add esp, 8
test eax, eax
je 0x100565c2
cmp eax, 0xd
jne 0x100565d8
cmp dword [ebp - 0x48], 7
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x100565e1
mov byte [ebp - 0x75], 1
jmp 0x100566c0
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push 0x1009e474
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
call fcn.10003c90
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
xor eax, eax
mov dword [ebp - 0x30], 7
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x5c]
call fcn.100228d0
mov ecx, dword [ebp - 0x30]
add esp, 4
test eax, eax
sete byte [ebp - 0x75]
cmp ecx, 7
jbe 0x10056676
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1005666c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005671c
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp ecx, 7
jbe 0x100566c0
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100566b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005671c
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [ebp - 0x48]
cmp ecx, 7
jbe 0x100566f6
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100566ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005671c
push ecx
push edx
call fcn.100666c9
add esp, 8
mov al, byte [ebp - 0x75]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1006636c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.10070c0f
call fcn.10070c0f
int3