Function at 0x436e60
Capabilities:
Delete file
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x489fc6
mov eax, dword fs:[0]
push eax
sub esp, 0xd38
mov eax, dword [0x4b9b20]
xor eax, esp
mov dword [esp + 0xd30], eax
push ebx
push esi
push edi
mov eax, dword [0x4b9b20]
xor eax, esp
push eax
lea eax, [esp + 0xd48]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x18]
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
mov dword [esp + 0x2c], ecx
mov ecx, 0x22b
lea edi, [esp + 0x27c]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], 0
movsw word es:[edi], word [esi]
call fcn.00439390
lea ecx, [esp + 0x14]
call fcn.004366a0
push 0x216
lea edx, [esp + 0x68]
push 0
push edx
mov dword [esp + 0xd5c], 0
call fcn.004661f0
add esp, 0xc
push 0x100000
push 0
push 0
lea ecx, [esp + 0x48]
call fcn.00454466
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x38]
push 0
push 0
push 0
push 0
push 0
push esi
push ebx
lea eax, [esp + 0x58]
push eax
push edi
mov byte [esp + 0xd74], 1
call fcn.004317e0
add esp, 0x24
lea ecx, [esp + 0x3c]
test eax, eax
je 0x436f64
mov dword [esp + 0x64], 0x64
call fcn.0045455d
lea ecx, [esp + 0x3c]
mov dword [esp + 0x6c], eax
call fcn.004544c2
mov dword [esp + 0x68], eax
jmp 0x437035
call fcn.004544c2
test eax, eax
je 0x436f76
push eax
call fcn.004665d5
add esp, 4
test ebx, ebx
je 0x436f9d
push esi
push 0
push 0xfffffffffffffffc
call ebx
add esp, 0xc
test al, al
jne 0x436f9d
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], al
call fcn.004547f9
jmp 0x43720b
xor edx, edx
push 0x208
push edx
lea eax, [esp + 0xb36]
push eax
mov word [esp + 0xb38], dx
call fcn.004661f0
push 0
push 0
push 0
push 0
push esi
push ebx
lea ecx, [esp + 0xb50]
push ecx
push edi
call fcn.00431260
add esp, 0x2c
test eax, eax
jne 0x436fee
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], al
call fcn.004547f9
jmp 0x43720b
test ebx, ebx
je 0x437015
push esi
push 0
push 0
call ebx
add esp, 0xc
test al, al
jne 0x437015
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], al
call fcn.004547f9
jmp 0x43720b
push 0x104
lea edx, [esp + 0xb30]
push edx
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0x70], 0x64
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x18]
call fcn.00436a90
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], 0
call fcn.004547f9
push 0x216
lea edx, [esp + 0x68]
push 0
push edx
call fcn.004661f0
push 0x8ae
call fcn.004666b2
push 0x8ae
mov ebx, eax
push 0
push ebx
call fcn.004661f0
mov ecx, 0x22b
lea esi, [esp + 0x298]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
push 0x4968b8
push 0x20100506
push ebx
movsw word es:[edi], word [esi]
call fcn.00434090
push 0x20100506
push 0x8ae
push ebx
call fcn.00434120
add esp, 0x34
test eax, eax
je 0x43720b
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x68], 1
mov dword [esp + 0x70], 0x8ae
mov dword [esp + 0x6c], ebx
call fcn.00436a90
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x4371d6
xor ebx, ebx
cmp esi, eax
jb 0x43710f
call fcn.004686af
mov edi, dword [esp + 0x20]
cmp dword [ebx + edi], 1
je 0x4371b0
mov ecx, dword [esp + 0x24]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp esi, ecx
jb 0x43713d
call fcn.004686af
mov edi, dword [esp + 0x20]
cmp dword [ebx + edi], 0x64
je 0x4371b0
mov ecx, dword [esp + 0x24]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x437167
call fcn.004686af
mov edi, dword [esp + 0x20]
cmp dword [ebx + edi + 4], 0
je 0x4371b0
push esi
lea ecx, [esp + 0x18]
call fcn.004348d0
cmp dword [eax + 8], 0
je 0x4371ac
push 0x20
lea ecx, [esp + 0x464]
push ecx
push esi
lea ecx, [esp + 0x20]
call fcn.004348d0
mov edx, dword [eax + 8]
push edx
push esi
lea ecx, [esp + 0x24]
call fcn.004348d0
mov eax, dword [eax + 4]
push eax
call fcn.0043a670
add esp, 0x10
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
add ebx, 0x216
cmp esi, eax
jb 0x43710f
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push ecx
push edx
lea eax, [esp + 0x468]
push eax
sub esp, 0x18
lea edx, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.00436700
mov eax, dword [ebp + 0xc]
push eax
call fcn.00435900
add esp, 0x28
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edx, ecx
sub edx, esi
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x43730b
xor ebx, ebx
cmp edi, eax
jb 0x437243
call fcn.004686af
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
cmp dword [ebx + esi + 4], 0
je 0x43727f
sub ecx, esi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x43726a
call fcn.004686af
mov esi, dword [esp + 0x20]
mov edx, dword [ebx + esi + 4]
push edx
call fcn.004665d5
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
add esp, 4
sub ecx, esi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43729f
call fcn.004686af
mov esi, dword [esp + 0x20]
lea ecx, [ebx + esi + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x4372df
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x20]
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4372d0
call fcn.004686af
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edx, ecx
sub edx, esi
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x437243
xor edi, edi
cmp esi, edi
je 0x43731a
push esi
call fcn.004435c9
add esp, 4
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
call fcn.004435c9
mov eax, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0xd48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd30]
xor ecx, esp
call fcn.00466e70
mov esp, ebp
pop ebp
ret