Function at 0x486a68
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x486a70
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x486fa7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x496dfc]
mov edx, 0x486fc0
call fcn.004056a8
jne 0x486ac5
xor eax, eax
push ebp
push 0x486abb
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00442520
mov edx, dword [eax]
call dword [edx + 0x18]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486ac5
lea eax, [ebp - 0xc]
call fcn.004866d8
mov edx, dword [ebp - 0xc]
mov eax, 0x496e28
call fcn.004052d4
lea eax, [ebp - 0x10]
mov ecx, 0x486fcc
mov edx, dword [0x496e28]
call fcn.00405598
mov eax, dword [ebp - 0x10]
call fcn.00487154
lea eax, [ebp - 0x14]
mov ecx, 0x486fcc
mov edx, dword [0x496e28]
call fcn.00405598
mov eax, dword [ebp - 0x14]
call fcn.00409e7c
test al, al
jne 0x486b2f
lea eax, [ebp - 0x18]
mov ecx, 0x486fcc
mov edx, dword [0x496e28]
call fcn.00405598
mov eax, dword [ebp - 0x18]
call fcn.0040a588
lea eax, [ebp - 0x20]
mov ecx, 0x486fdc
mov edx, dword [0x496e28]
call fcn.00405598
mov eax, dword [ebp - 0x20]
call fcn.00405710
mov edx, eax
lea eax, [ebp - 0x1c]
call fcn.00405478
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x24]
call fcn.00405710
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
lea eax, [ebp - 0x28]
mov ecx, 0x486fdc
mov edx, dword [0x496e28]
call fcn.00405598
mov edx, dword [ebp - 0x28]
mov eax, dword [0x496e2c]
call fcn.0048688c
test al, al
jne 0x486ba1
mov eax, 0x486fec
call fcn.004417cc
jmp 0x486f77
mov eax, dword [0x4912a4]
mov eax, dword [eax]
call fcn.0046dc14
lea eax, [ebp - 0x2c]
mov ecx, 0x486fdc
mov edx, dword [0x496e28]
call fcn.00405598
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x496dd0]
mov eax, dword [eax + 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x30]
lea eax, [ebp - 0x30]
mov ecx, 0x486fcc
mov edx, dword [0x496e28]
call fcn.00405598
mov edx, dword [ebp - 0x30]
mov eax, dword [0x496dd0]
mov eax, dword [eax + 0x37c]
call fcn.0047ffe4
mov eax, dword [0x496dd0]
mov ebx, dword [eax + 0x37c]
mov byte [ebx + 0x39], 1
mov byte [ebx + 0x50], 1
mov byte [ebx + 0x40], 1
mov eax, dword [0x496e20]
mov edx, 0x487004
call fcn.004056a8
jne 0x486c30
lea eax, [ebx + 0x44]
mov edx, 0x487010
call fcn.004052d4
jmp 0x486c58
lea ecx, [ebp - 0x34]
mov edx, 0x487024
mov eax, dword [0x496dec]
call fcn.00485a18
mov edx, dword [ebp - 0x34]
mov eax, dword [0x496dd0]
mov eax, dword [eax + 0x37c]
add eax, 0x44
call fcn.004052d4
xor eax, eax
push ebp
push 0x486c80
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x496dd0]
mov eax, dword [eax + 0x37c]
call fcn.004808d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486c9e
lea eax, [ebp - 4]
call fcn.00405280
mov dl, 1
mov eax, dword [0x423738]
call fcn.00423808
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x486d09
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000002
mov eax, dword [ebp - 8]
call fcn.004238a8
xor ecx, ecx
mov edx, 0x487044
mov eax, dword [ebp - 8]
call fcn.0042390c
test al, al
je 0x486cf3
lea ecx, [ebp - 4]
mov edx, 0x487080
mov eax, dword [ebp - 8]
call fcn.00423c78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486d10
mov eax, dword [ebp - 8]
call fcn.00423878
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486fae
lea eax, [ebp - 0x60]
mov edx, 0xf
call fcn.004052a4
lea eax, [ebp - 0x20]
mov edx, 6
call fcn.004052a4
lea eax, [ebp - 4]
call fcn.00405280
ret