Function at 0x486778
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x486b4a
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
mov eax, dword [0x651c78]
cmp byte [eax], 0
jne 0x4867ec
mov eax, dword [0x651e34]
mov edx, 0x486b64
call fcn.004053e0
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
call fcn.00422d78
test al, al
jne 0x4867ec
mov eax, dword [0x651c78]
mov byte [eax], 1
mov edx, dword [0x651ef8]
mov edx, dword [edx]
mov eax, dword [0x651e34]
mov ecx, 0x486b78
call fcn.004056a4
call fcn.004855ac
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
call fcn.00422d78
test al, al
je 0x486b27
xor edx, edx
push ebp
push 0x486b1d
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [0x651e34]
mov ecx, dword [ecx]
lea eax, [ebp - 0x10]
mov edx, 0x486b90
call fcn.004056a4
mov eax, dword [ebp - 0x10]
mov edx, dword [0x651a7c]
call fcn.00486320
xor ebx, ebx
mov esi, 0x20
mov edi, 0x651494
lea eax, [ebp - 0x14]
mov edx, dword [edi]
call fcn.00405584
mov eax, dword [ebp - 0x14]
call fcn.00463a8c
test eax, eax
jne 0x48685c
mov bl, 1
jmp 0x486862
add edi, 4
dec esi
jne 0x486842
test bl, bl
je 0x486873
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486b27
lea eax, [ebp - 4]
call fcn.00486714
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00486eb4
mov eax, 0x486b9c
call fcn.004864ac
mov edx, dword [0x651df8]
mov dword [edx], eax
mov eax, 0x486bb0
call fcn.004864ac
mov edx, dword [0x651e50]
mov dword [edx], eax
mov eax, 0x486bc4
call fcn.004864ac
mov edx, dword [0x651b98]
mov dword [edx], eax
mov eax, 0x486bd8
call fcn.004864ac
mov edx, dword [0x651c88]
mov dword [edx], eax
mov eax, 0x486bec
call fcn.004864ac
mov edx, dword [0x652018]
mov dword [edx], eax
mov eax, 0x486c00
call fcn.004864ac
mov edx, dword [0x65208c]
mov dword [edx], eax
mov eax, 0x486c14
call fcn.004864ac
mov edx, dword [0x651ddc]
mov dword [edx], eax
mov eax, 0x486c28
call fcn.004864ac
mov edx, dword [0x651e28]
mov dword [edx], eax
mov eax, 0x486c3c
call fcn.004864ac
mov edx, dword [0x651b7c]
mov dword [edx], eax
mov eax, 0x486c50
call fcn.004864ac
mov edx, dword [0x651dd8]
mov dword [edx], eax
mov eax, 0x486c6c
call fcn.004864ac
mov edx, dword [0x651e1c]
mov dword [edx], eax
mov eax, 0x486c88
call fcn.004864ac
mov edx, dword [0x651b70]
mov dword [edx], eax
mov eax, 0x486ca4
call fcn.004864ac
mov edx, dword [0x6520a4]
mov dword [edx], eax
mov eax, 0x486cb4
call fcn.004864ac
mov edx, dword [0x6520fc]
mov dword [edx], eax
mov eax, 0x486cc8
call fcn.004864ac
mov edx, dword [0x651ea8]
mov dword [edx], eax
mov eax, 0x486cdc
call fcn.004864ac
mov edx, dword [0x651f08]
mov dword [edx], eax
mov eax, 0x486cf0
call fcn.004864ac
mov edx, dword [0x65211c]
mov dword [edx], eax
mov eax, 0x486d08
call fcn.004864ac
mov edx, dword [0x651960]
mov dword [edx], eax
mov eax, 0x486d20
call fcn.004864ac
mov edx, dword [0x651abc]
mov dword [edx], eax
mov eax, 0x486d38
call fcn.004864ac
mov edx, dword [0x651b20]
mov dword [edx], eax
mov eax, 0x486d50
call fcn.004864ac
mov edx, dword [0x651eec]
mov dword [edx], eax
mov eax, 0x486d68
call fcn.004864ac
mov edx, dword [0x651f2c]
mov dword [edx], eax
mov eax, 0x486d84
call fcn.004864ac
mov edx, dword [0x651c54]
mov dword [edx], eax
mov eax, 0x486d9c
call fcn.004864ac
mov edx, dword [0x651cb0]
mov dword [edx], eax
mov eax, 0x486db8
call fcn.004864ac
mov edx, dword [0x651cac]
mov dword [edx], eax
mov eax, 0x486dd0
call fcn.004864ac
mov edx, dword [0x651d04]
mov dword [edx], eax
mov eax, 0x486dec
call fcn.004864ac
mov edx, dword [0x6519e0]
mov dword [edx], eax
mov eax, 0x486e04
call fcn.004864ac
mov edx, dword [0x651a34]
mov dword [edx], eax
mov eax, 0x486e20
call fcn.004864ac
mov edx, dword [0x652008]
mov dword [edx], eax
mov eax, 0x486e38
call fcn.004864ac
mov edx, dword [0x652070]
mov dword [edx], eax
mov eax, 0x486e54
call fcn.004864ac
mov edx, dword [0x651b4c]
mov dword [edx], eax
mov eax, 0x486e6c
call fcn.004864ac
mov edx, dword [0x651bcc]
mov dword [edx], eax
mov eax, 0x486e88
call fcn.004864ac
mov edx, dword [0x651a98]
mov dword [edx], eax
mov eax, 0x486ea0
call fcn.004864ac
mov edx, dword [0x651ae8]
mov dword [edx], eax
mov byte [ebp - 9], 1
mov eax, dword [0x651e34]
mov eax, dword [eax]
mov edx, 0x486b64
call fcn.004057b4
je 0x486b13
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486b27
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486b51
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004053b0
lea eax, [ebp - 4]
call fcn.0040538c
ret