Function at 0x488514
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4888e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
mov eax, dword [0x634c90]
cmp byte [eax], 0
jne 0x488588
mov eax, dword [0x634e58]
mov edx, 0x488900
call fcn.0040541c
mov eax, dword [0x634e58]
mov eax, dword [eax]
call fcn.00405858
call fcn.00423088
test al, al
jne 0x488588
mov eax, dword [0x634c90]
mov byte [eax], 1
mov edx, dword [0x634f20]
mov edx, dword [edx]
mov eax, dword [0x634e58]
mov ecx, 0x488914
call fcn.004056e0
call fcn.00487348
mov eax, dword [0x634e58]
mov eax, dword [eax]
call fcn.00405858
call fcn.00423088
test al, al
je 0x4888c3
xor edx, edx
push ebp
push 0x4888b9
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [0x634e58]
mov ecx, dword [ecx]
lea eax, [ebp - 0x10]
mov edx, 0x48892c
call fcn.004056e0
mov eax, dword [ebp - 0x10]
mov edx, dword [0x634a94]
call fcn.004880bc
xor ebx, ebx
mov esi, 0x20
mov edi, 0x6344b0
lea eax, [ebp - 0x14]
mov edx, dword [edi]
call fcn.004055c0
mov eax, dword [ebp - 0x14]
call fcn.00462330
test eax, eax
jne 0x4885f8
mov bl, 1
jmp 0x4885fe
add edi, 4
dec esi
jne 0x4885de
test bl, bl
je 0x48860f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4888c3
lea eax, [ebp - 4]
call fcn.004884b0
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00488c50
mov eax, 0x488938
call fcn.00488248
mov edx, dword [0x634e1c]
mov dword [edx], eax
mov eax, 0x48894c
call fcn.00488248
mov edx, dword [0x634e74]
mov dword [edx], eax
mov eax, 0x488960
call fcn.00488248
mov edx, dword [0x634bb0]
mov dword [edx], eax
mov eax, 0x488974
call fcn.00488248
mov edx, dword [0x634ca0]
mov dword [edx], eax
mov eax, 0x488988
call fcn.00488248
mov edx, dword [0x635048]
mov dword [edx], eax
mov eax, 0x48899c
call fcn.00488248
mov edx, dword [0x6350bc]
mov dword [edx], eax
mov eax, 0x4889b0
call fcn.00488248
mov edx, dword [0x634e00]
mov dword [edx], eax
mov eax, 0x4889c4
call fcn.00488248
mov edx, dword [0x634e4c]
mov dword [edx], eax
mov eax, 0x4889d8
call fcn.00488248
mov edx, dword [0x634b94]
mov dword [edx], eax
mov eax, 0x4889ec
call fcn.00488248
mov edx, dword [0x634dfc]
mov dword [edx], eax
mov eax, 0x488a08
call fcn.00488248
mov edx, dword [0x634e40]
mov dword [edx], eax
mov eax, 0x488a24
call fcn.00488248
mov edx, dword [0x634b88]
mov dword [edx], eax
mov eax, 0x488a40
call fcn.00488248
mov edx, dword [0x6350d4]
mov dword [edx], eax
mov eax, 0x488a50
call fcn.00488248
mov edx, dword [0x635130]
mov dword [edx], eax
mov eax, 0x488a64
call fcn.00488248
mov edx, dword [0x634ed0]
mov dword [edx], eax
mov eax, 0x488a78
call fcn.00488248
mov edx, dword [0x634f30]
mov dword [edx], eax
mov eax, 0x488a8c
call fcn.00488248
mov edx, dword [0x635150]
mov dword [edx], eax
mov eax, 0x488aa4
call fcn.00488248
mov edx, dword [0x63497c]
mov dword [edx], eax
mov eax, 0x488abc
call fcn.00488248
mov edx, dword [0x634ad4]
mov dword [edx], eax
mov eax, 0x488ad4
call fcn.00488248
mov edx, dword [0x634b38]
mov dword [edx], eax
mov eax, 0x488aec
call fcn.00488248
mov edx, dword [0x634f14]
mov dword [edx], eax
mov eax, 0x488b04
call fcn.00488248
mov edx, dword [0x634f58]
mov dword [edx], eax
mov eax, 0x488b20
call fcn.00488248
mov edx, dword [0x634c6c]
mov dword [edx], eax
mov eax, 0x488b38
call fcn.00488248
mov edx, dword [0x634cc8]
mov dword [edx], eax
mov eax, 0x488b54
call fcn.00488248
mov edx, dword [0x634cc4]
mov dword [edx], eax
mov eax, 0x488b6c
call fcn.00488248
mov edx, dword [0x634d24]
mov dword [edx], eax
mov eax, 0x488b88
call fcn.00488248
mov edx, dword [0x6349f8]
mov dword [edx], eax
mov eax, 0x488ba0
call fcn.00488248
mov edx, dword [0x634a4c]
mov dword [edx], eax
mov eax, 0x488bbc
call fcn.00488248
mov edx, dword [0x635038]
mov dword [edx], eax
mov eax, 0x488bd4
call fcn.00488248
mov edx, dword [0x6350a0]
mov dword [edx], eax
mov eax, 0x488bf0
call fcn.00488248
mov edx, dword [0x634b64]
mov dword [edx], eax
mov eax, 0x488c08
call fcn.00488248
mov edx, dword [0x634be4]
mov dword [edx], eax
mov eax, 0x488c24
call fcn.00488248
mov edx, dword [0x634ab0]
mov dword [edx], eax
mov eax, 0x488c3c
call fcn.00488248
mov edx, dword [0x634b00]
mov dword [edx], eax
mov byte [ebp - 9], 1
mov eax, dword [0x634e58]
mov eax, dword [eax]
mov edx, 0x488900
call fcn.004057f0
je 0x4888af
mov eax, dword [0x634e58]
mov eax, dword [eax]
call fcn.00405858
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4888c3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4888ed
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004053ec
lea eax, [ebp - 4]
call fcn.004053c8
ret