Function at 0x48c730
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d0
mov eax, dword [0x4e26d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
push esi
push 0
push 0x410
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3c4], ebx
mov dword [ebp - 0x3b8], 0
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x3b8], edi
test edi, edi
je 0x48ca2b
cmp edi, 0xffffffff
je 0x48ca2b
call fcn.00448900
xor eax, eax
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1c]
push eax
push edi
mov dword [ebp - 0xc], 0
call fcn.0048cc80
add esp, 8
test al, al
je 0x48c9e3
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x3b0], 0
push eax
push 0x310
lea eax, [ebp - 0x3ac]
push eax
push dword [ebp - 0x3b4]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x48c9e3
cmp dword [ebp - 0x3b0], 0x310
jne 0x48c9e3
lea ecx, [ebp - 0x34]
call fcn.0043fee0
lea eax, [ebp - 0x34]
push eax
call fcn.004427a0
add esp, 4
test al, al
je 0x48c9d7
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x3ac]
push eax
push esi
push edi
call fcn.0048cc10
add esp, 0x10
test al, al
je 0x48c9d7
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0x3b4], 0
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0048cd50
add esp, 8
mov esi, eax
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test esi, esi
je 0x48c9be
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x3bc], 0
push eax
push 8
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x3c0], 0
push eax
push dword [ebp - 0x3a4]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x48c8ee
cmp dword [ebp - 0x3b0], 8
jne 0x48c8ee
lea eax, [ebp - 0x3b0]
push eax
push 0x50
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x3d0]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x48c8ee
cmp dword [ebp - 0x3b0], 0x50
jne 0x48c8ee
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3c0], eax
cmp dword [ebx + 0x14], 8
jb 0x48c8f6
mov ebx, dword [ebx]
push 0x4c762c
push ebx
call fcn.00499c8d
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x48c9be
cmp dword [ebp - 8], 8
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c8], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004903c0
mov edi, eax
add esp, 4
cmp dword [edi + 0x14], 0x10
jb 0x48c935
mov edi, dword [edi]
push str.crash_reporter
push str.process_type
push dword [ebp - 0x3c0]
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c8]
call fcn.00490400
push eax
push edi
push str.OPERA_CRASHLOG_V1_desktop__s__d_windows__release_r_n_S_caused_exception__X_at_address__012lX__BASE:_00000000__r_n_r_nmetadata:_r_n_S__S__r_n_r_nminidump:_r_n
push ebx
call fcn.0049cbe3
add esp, 0x24
test eax, eax
jle 0x48c993
mov edi, dword [ebp - 0x3b4]
push ebx
push edi
push 1
push esi
call fcn.00498a90
add esp, 0x10
cmp eax, edi
jne 0x48c993
push ebx
call fcn.0049ac7a
add esp, 4
cmp eax, 0xffffffff
je 0x48c993
mov bl, 1
jmp 0x48c995
xor bl, bl
lea ecx, [ebp - 0x4c]
call fcn.004049cf
test bl, bl
jne 0x48c9b6
mov eax, dword [ebp - 0x3c4]
cmp dword [eax + 0x14], 8
jb 0x48c9af
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, dword [ebp - 0x3b8]
jmp 0x48c9c0
xor bl, bl
test esi, esi
je 0x48c9d9
push esi
call fcn.00492cb0
add esp, 4
lea ecx, [ebp - 0x34]
call fcn.0043ff00
jmp 0x48c9e5
xor bl, bl
lea ecx, [ebp - 0x34]
call fcn.0043ff00
jmp 0x48c9e5
xor bl, bl
cmp dword [ebp - 8], 8
jb 0x48c9f6
push dword [ebp - 0x1c]
call fcn.00492cb0
add esp, 4
xor eax, eax
mov dword [ebp - 8], 7
mov dword [ebp - 0xc], 0
mov word [ebp - 0x1c], ax
call fcn.00448900
push edi
call fcn.00454e60
add esp, 4
mov al, bl
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0049653f
mov esp, ebp
pop ebp
ret