Function at 0x486764
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x486b36
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
mov eax, dword [0x651c78]
cmp byte [eax], 0
jne 0x4867d8
mov eax, dword [0x651e34]
mov edx, 0x486b50
call fcn.004053e0
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
call fcn.00422d78
test al, al
jne 0x4867d8
mov eax, dword [0x651c78]
mov byte [eax], 1
mov edx, dword [0x651ef8]
mov edx, dword [edx]
mov eax, dword [0x651e34]
mov ecx, 0x486b64
call fcn.004056a4
call fcn.00485598
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
call fcn.00422d78
test al, al
je 0x486b13
xor edx, edx
push ebp
push 0x486b09
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [0x651e34]
mov ecx, dword [ecx]
lea eax, [ebp - 0x10]
mov edx, 0x486b7c
call fcn.004056a4
mov eax, dword [ebp - 0x10]
mov edx, dword [0x651a7c]
call fcn.0048630c
xor ebx, ebx
mov esi, 0x20
mov edi, 0x651494
lea eax, [ebp - 0x14]
mov edx, dword [edi]
call fcn.00405584
mov eax, dword [ebp - 0x14]
call fcn.00463a8c
test eax, eax
jne 0x486848
mov bl, 1
jmp 0x48684e
add edi, 4
dec esi
jne 0x48682e
test bl, bl
je 0x48685f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486b13
lea eax, [ebp - 4]
call fcn.00486700
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00486ea0
mov eax, 0x486b88
call fcn.00486498
mov edx, dword [0x651df8]
mov dword [edx], eax
mov eax, 0x486b9c
call fcn.00486498
mov edx, dword [0x651e50]
mov dword [edx], eax
mov eax, 0x486bb0
call fcn.00486498
mov edx, dword [0x651b98]
mov dword [edx], eax
mov eax, 0x486bc4
call fcn.00486498
mov edx, dword [0x651c88]
mov dword [edx], eax
mov eax, 0x486bd8
call fcn.00486498
mov edx, dword [0x652018]
mov dword [edx], eax
mov eax, 0x486bec
call fcn.00486498
mov edx, dword [0x65208c]
mov dword [edx], eax
mov eax, 0x486c00
call fcn.00486498
mov edx, dword [0x651ddc]
mov dword [edx], eax
mov eax, 0x486c14
call fcn.00486498
mov edx, dword [0x651e28]
mov dword [edx], eax
mov eax, 0x486c28
call fcn.00486498
mov edx, dword [0x651b7c]
mov dword [edx], eax
mov eax, 0x486c3c
call fcn.00486498
mov edx, dword [0x651dd8]
mov dword [edx], eax
mov eax, 0x486c58
call fcn.00486498
mov edx, dword [0x651e1c]
mov dword [edx], eax
mov eax, 0x486c74
call fcn.00486498
mov edx, dword [0x651b70]
mov dword [edx], eax
mov eax, 0x486c90
call fcn.00486498
mov edx, dword [0x6520a4]
mov dword [edx], eax
mov eax, 0x486ca0
call fcn.00486498
mov edx, dword [0x6520fc]
mov dword [edx], eax
mov eax, 0x486cb4
call fcn.00486498
mov edx, dword [0x651ea8]
mov dword [edx], eax
mov eax, 0x486cc8
call fcn.00486498
mov edx, dword [0x651f08]
mov dword [edx], eax
mov eax, 0x486cdc
call fcn.00486498
mov edx, dword [0x65211c]
mov dword [edx], eax
mov eax, 0x486cf4
call fcn.00486498
mov edx, dword [0x651960]
mov dword [edx], eax
mov eax, 0x486d0c
call fcn.00486498
mov edx, dword [0x651abc]
mov dword [edx], eax
mov eax, 0x486d24
call fcn.00486498
mov edx, dword [0x651b20]
mov dword [edx], eax
mov eax, 0x486d3c
call fcn.00486498
mov edx, dword [0x651eec]
mov dword [edx], eax
mov eax, 0x486d54
call fcn.00486498
mov edx, dword [0x651f2c]
mov dword [edx], eax
mov eax, 0x486d70
call fcn.00486498
mov edx, dword [0x651c54]
mov dword [edx], eax
mov eax, 0x486d88
call fcn.00486498
mov edx, dword [0x651cb0]
mov dword [edx], eax
mov eax, 0x486da4
call fcn.00486498
mov edx, dword [0x651cac]
mov dword [edx], eax
mov eax, 0x486dbc
call fcn.00486498
mov edx, dword [0x651d04]
mov dword [edx], eax
mov eax, 0x486dd8
call fcn.00486498
mov edx, dword [0x6519e0]
mov dword [edx], eax
mov eax, 0x486df0
call fcn.00486498
mov edx, dword [0x651a34]
mov dword [edx], eax
mov eax, 0x486e0c
call fcn.00486498
mov edx, dword [0x652008]
mov dword [edx], eax
mov eax, 0x486e24
call fcn.00486498
mov edx, dword [0x652070]
mov dword [edx], eax
mov eax, 0x486e40
call fcn.00486498
mov edx, dword [0x651b4c]
mov dword [edx], eax
mov eax, 0x486e58
call fcn.00486498
mov edx, dword [0x651bcc]
mov dword [edx], eax
mov eax, 0x486e74
call fcn.00486498
mov edx, dword [0x651a98]
mov dword [edx], eax
mov eax, 0x486e8c
call fcn.00486498
mov edx, dword [0x651ae8]
mov dword [edx], eax
mov byte [ebp - 9], 1
mov eax, dword [0x651e34]
mov eax, dword [eax]
mov edx, 0x486b50
call fcn.004057b4
je 0x486aff
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486b13
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486b3d
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004053b0
lea eax, [ebp - 4]
call fcn.0040538c
ret