Function at 0x435ad4
Capabilities:
Delete file

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffcb8
mov byte [esp], al
mov esi, dword [0x4be538]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
xor eax, eax
mov al, byte [esp]
add ax, 0x87
dec eax
call fcn.004aa600
push eax
mov ax, 0x63
call fcn.004aa600
pop edx
call fcn.004ae1b0
mov ax, 0x62
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4bedb0]
mov ecx, 0x15
call fcn.004b12b8
test al, al
je 0x435f21
call fcn.004ae0a4
mov al, 0xf
call fcn.00421294
test al, al
je 0x435f21
mov eax, esi
call fcn.004b2314
fistp qword [esp + 8]
wait
push dword [esp + 0xc]
push dword [esp + 0xc]
push 0
push 2
call fcn.004af060
test eax, eax
je 0x435b7f
mov ax, 0xc8
call fcn.004aa600
mov edx, 3
call fcn.004b12a8
jmp 0x435f21
cmp byte [esp], 2
jne 0x435bc0
push dword [esp + 0xc]
push dword [esp + 0xc]
push 0
push 4
call fcn.004af060
test eax, eax
je 0x435bc0
push 0
push 4
mov ax, 0xc7
call fcn.004aa600
call fcn.004ae0e4
mov eax, dword [0x4bedb0]
mov edx, 3
call fcn.004b12a8
jmp 0x435f21
fild qword [esp + 8]
fdiv dword [0x435f2c]
add esp, 0xfffffff8
fistp qword [esp]
wait
xor eax, eax
call fcn.004adfd4
test al, al
je 0x435f21
mov edx, esi
lea eax, [esp + 0x48]
call fcn.004b81b0
mov eax, dword [0x4be4e0]
mov byte [eax], 0
mov bl, 1
lea ebp, [esp + 0x148]
mov eax, dword [0x4beccc]
mov byte [eax], bl
mov eax, 1
call fcn.004ae058
mov al, 0x16
call fcn.00421294
test al, al
je 0x435f21
mov edx, esi
mov eax, ebp
call fcn.004b81b0
inc ebx
add ebp, 0x100
cmp bl, 3
jne 0x435bfc
lea eax, [esp + 0x48]
mov ecx, 0x8000000
mov edx, 0x80000000
call fcn.004adc9c
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0xffffffff
jne 0x435c61
lea edx, [esp + 0x48]
mov ax, 1
call fcn.004acdac
jmp 0x435f21
mov ax, 0x64
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4bec98]
call fcn.004b81b0
mov eax, dword [0x4bec98]
xor edx, edx
call fcn.004ad8ec
mov bl, 1
lea esi, [esp + 0x148]
lea ebp, [esp + 0x14]
push 0
push esi
call sub.kernel32.dll__lcreat
mov dword [ebp], eax
inc ebx
add ebp, 4
add esi, 0x100
cmp bl, 3
jne 0x435c8f
mov bl, 1
lea esi, [esp + 0x3c]
mov eax, 0xe000
call fcn.00402504
mov dword [esi], eax
inc ebx
add esi, 4
cmp bl, 4
jne 0x435caf
mov byte [esp + 0x28], 0
push 0xe000
mov eax, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x18]
push eax
call sub.kernel32.dll__hread
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fild qword [esp + 0x20]
faddp st(1)
fistp qword [esp + 0x20]
wait
cmp byte [esp], 1
jne 0x435d3e
mov edx, dword [esp + 0x30]
sar edx, 1
jns 0x435d01
adc edx, 0
test dx, dx
jbe 0x435da6
mov ax, 1
movzx ecx, ax
add ecx, ecx
mov ebx, dword [esp + 0x3c]
mov bl, byte [ebx + ecx - 2]
movzx esi, ax
mov edi, dword [esp + 0x40]
mov byte [edi + esi - 1], bl
mov ebx, dword [esp + 0x3c]
mov cl, byte [ebx + ecx - 1]
mov ebx, dword [esp + 0x44]
mov byte [ebx + esi - 1], cl
inc eax
dec dx
jne 0x435d0e
jmp 0x435da6
mov edx, dword [esp + 0x30]
test edx, edx
jns 0x435d49
add edx, 3
sar edx, 2
test dx, dx
jbe 0x435da6
mov ax, 1
movzx ecx, ax
shl ecx, 2
mov ebx, dword [esp + 0x3c]
mov bl, byte [ebx + ecx - 4]
movzx esi, ax
add esi, esi
mov edi, dword [esp + 0x40]
mov byte [edi + esi - 2], bl
mov ebx, dword [esp + 0x3c]
mov bl, byte [ebx + ecx - 3]
mov edi, dword [esp + 0x40]
mov byte [edi + esi - 1], bl
mov ebx, dword [esp + 0x3c]
mov bl, byte [ebx + ecx - 2]
mov edi, dword [esp + 0x44]
mov byte [edi + esi - 2], bl
mov ebx, dword [esp + 0x3c]
mov cl, byte [ebx + ecx - 1]
mov ebx, dword [esp + 0x44]
mov byte [ebx + esi - 1], cl
inc eax
dec dx
jne 0x435d55
mov bl, 1
lea edi, [esp + 0x14]
lea eax, [esp + 0x40]
mov dword [esp + 0x2c], eax
lea ebp, [esp + 0x34]
lea esi, [esp + 0x48]
mov eax, dword [esp + 0x30]
sar eax, 1
jns 0x435dc7
adc eax, 0
push eax
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
push eax
mov eax, dword [edi]
push eax
call sub.kernel32.dll__hwrite
mov dword [ebp], eax
mov eax, dword [esp + 0x30]
sar eax, 1
jns 0x435de5
adc eax, 0
cmp eax, dword [ebp]
jle 0x435df7
mov edx, esi
mov ax, 5
call fcn.004acdac
jmp 0x435e63
inc ebx
add esi, 0x100
add ebp, 4
add dword [esp + 0x2c], 4
add edi, 4
cmp bl, 3
jne 0x435dbc
fild qword [esp + 0x20]
fmul dword [0x435f30]
fild qword [esp + 8]
fdivp st(1)
call fcn.004028e8
mov edx, dword [0x4be344]
mov byte [edx], al
mov eax, dword [0x4be344]
mov al, byte [eax]
mov edx, dword [0x4be8d0]
cmp al, byte [edx]
je 0x435e41
call fcn.004b5c48
call fcn.004ae0a4
mov eax, dword [0x4bed48]
cmp byte [eax], 0
jne 0x435e5e
cmp dword [esp + 0x30], 0x7000
jge 0x435cc9
mov byte [esp + 0x28], 1
mov bl, 1
lea esi, [esp + 0x3c]
mov eax, dword [esi]
call fcn.00402524
inc ebx
add esi, 4
cmp bl, 4
jne 0x435e69
mov eax, dword [esp + 0x10]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [0x4bed48]
cmp byte [eax], 0
je 0x435ebd
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [esp + 0x18]
push eax
call sub.kernel32.dll_CloseHandle_1
lea eax, [esp + 0x148]
push eax
call sub.kernel32.dll_DeleteFileA_1
lea eax, [esp + 0x248]
push eax
call sub.kernel32.dll_DeleteFileA_1
jmp 0x435f21
call fcn.004adbe0
mov ax, 0xfe
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4bec98]
call fcn.004b81b0
mov eax, dword [0x4bec98]
mov dl, 2
call fcn.004ad8ec
mov bl, 1
lea esi, [esp + 0x14]
mov eax, dword [esi]
push eax
call sub.kernel32.dll_FlushFileBuffers
mov eax, dword [esi]
push eax
call sub.kernel32.dll_CloseHandle_1
inc ebx
add esi, 4
cmp bl, 3
jne 0x435ee9
call fcn.004adbe0
cmp byte [esp + 0x28], 0
je 0x435f21
mov ax, 0x13a
call fcn.004aa600
mov edx, 4
call fcn.004b12a8
add esp, 0x348
pop ebp
pop edi
pop esi
pop ebx
ret