Function at 0x436e60
Capabilities:
Delete file
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x489ea6
mov eax, dword fs:[0]
push eax
sub esp, 0xd38
mov eax, dword [0x4b9b20]
xor eax, esp
mov dword [esp + 0xd30], eax
push ebx
push esi
push edi
mov eax, dword [0x4b9b20]
xor eax, esp
push eax
lea eax, [esp + 0xd48]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x18]
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
mov dword [esp + 0x2c], ecx
mov ecx, 0x22b
lea edi, [esp + 0x27c]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], 0
movsw word es:[edi], word [esi]
call fcn.00439390
lea ecx, [esp + 0x14]
call fcn.00425d10
push 0x216
lea edx, [esp + 0x68]
push 0
push edx
mov dword [esp + 0xd5c], 0
call fcn.004660d0
add esp, 0xc
push 0x100000
push 0
push 0
lea ecx, [esp + 0x48]
call fcn.0045458a
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x38]
push 0
push 0
push 0
push 0
push 0
push esi
push ebx
lea eax, [esp + 0x58]
push eax
push edi
mov byte [esp + 0xd74], 1
call fcn.00431850
add esp, 0x24
lea ecx, [esp + 0x3c]
test eax, eax
je 0x436f64
mov dword [esp + 0x64], 0x64
call fcn.0045466f
lea ecx, [esp + 0x3c]
mov dword [esp + 0x6c], eax
call fcn.004545e6
mov dword [esp + 0x68], eax
jmp 0x437035
call fcn.004545e6
test eax, eax
je 0x436f76
push eax
call fcn.004664b5
add esp, 4
test ebx, ebx
je 0x436f9d
push esi
push 0
push 0xfffffffffffffffc
call ebx
add esp, 0xc
test al, al
jne 0x436f9d
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], al
call fcn.0045490a
jmp 0x43720b
xor edx, edx
push 0x208
push edx
lea eax, [esp + 0xb36]
push eax
mov word [esp + 0xb38], dx
call fcn.004660d0
push 0
push 0
push 0
push 0
push esi
push ebx
lea ecx, [esp + 0xb50]
push ecx
push edi
call fcn.004312d0
add esp, 0x2c
test eax, eax
jne 0x436fee
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], al
call fcn.0045490a
jmp 0x43720b
test ebx, ebx
je 0x437015
push esi
push 0
push 0
call ebx
add esp, 0xc
test al, al
jne 0x437015
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], al
call fcn.0045490a
jmp 0x43720b
push 0x104
lea edx, [esp + 0xb30]
push edx
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0x70], 0x64
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x18]
call fcn.00436a90
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd50], 0
call fcn.0045490a
push 0x216
lea edx, [esp + 0x68]
push 0
push edx
call fcn.004660d0
push 0x8ae
call fcn.00466592
push 0x8ae
mov ebx, eax
push 0
push ebx
call fcn.004660d0
mov ecx, 0x22b
lea esi, [esp + 0x298]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
push 0x496870
push 0x20100506
push ebx
movsw word es:[edi], word [esi]
call fcn.004340f0
push 0x20100506
push 0x8ae
push ebx
call fcn.00434180
add esp, 0x34
test eax, eax
je 0x43720b
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x68], 1
mov dword [esp + 0x70], 0x8ae
mov dword [esp + 0x6c], ebx
call fcn.00436a90
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x4371d6
xor ebx, ebx
cmp esi, eax
jb 0x43710f
call fcn.0046858f
mov edi, dword [esp + 0x20]
cmp dword [ebx + edi], 1
je 0x4371b0
mov ecx, dword [esp + 0x24]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp esi, ecx
jb 0x43713d
call fcn.0046858f
mov edi, dword [esp + 0x20]
cmp dword [ebx + edi], 0x64
je 0x4371b0
mov ecx, dword [esp + 0x24]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x437167
call fcn.0046858f
mov edi, dword [esp + 0x20]
cmp dword [ebx + edi + 4], 0
je 0x4371b0
push esi
lea ecx, [esp + 0x18]
call fcn.00434930
cmp dword [eax + 8], 0
je 0x4371ac
push 0x20
lea ecx, [esp + 0x464]
push ecx
push esi
lea ecx, [esp + 0x20]
call fcn.00434930
mov edx, dword [eax + 8]
push edx
push esi
lea ecx, [esp + 0x24]
call fcn.00434930
mov eax, dword [eax + 4]
push eax
call fcn.0043a670
add esp, 0x10
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
sub ecx, edi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
add ebx, 0x216
cmp esi, eax
jb 0x43710f
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push ecx
push edx
lea eax, [esp + 0x468]
push eax
sub esp, 0x18
lea edx, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.00436700
mov eax, dword [ebp + 0xc]
push eax
call fcn.00435960
add esp, 0x28
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edx, ecx
sub edx, esi
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x43730b
xor ebx, ebx
cmp edi, eax
jb 0x437243
call fcn.0046858f
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
cmp dword [ebx + esi + 4], 0
je 0x43727f
sub ecx, esi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x43726a
call fcn.0046858f
mov esi, dword [esp + 0x20]
mov edx, dword [ebx + esi + 4]
push edx
call fcn.004664b5
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
add esp, 4
sub ecx, esi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43729f
call fcn.0046858f
mov esi, dword [esp + 0x20]
lea ecx, [ebx + esi + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x4372df
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x20]
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4372d0
call fcn.0046858f
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edx, ecx
sub edx, esi
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x437243
xor edi, edi
cmp esi, edi
je 0x43731a
push esi
call fcn.004435be
add esp, 4
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
call fcn.004435be
mov eax, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0xd48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd30]
xor ecx, esp
call fcn.00466d50
mov esp, ebp
pop ebp
ret