Function at 0x4831d4
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4835ca
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
mov eax, dword [0x59ec00]
cmp byte [eax], 0
jne 0x483248
mov eax, dword [0x59edbc]
mov edx, 0x4835e4
call fcn.004053e0
mov eax, dword [0x59edbc]
mov eax, dword [eax]
call fcn.0040581c
call fcn.00422bb8
test al, al
jne 0x483248
mov eax, dword [0x59ec00]
mov byte [eax], 1
mov edx, dword [0x59ee80]
mov edx, dword [edx]
mov eax, dword [0x59edbc]
mov ecx, 0x4835f8
call fcn.004056a4
call fcn.00482250
mov eax, dword [0x59edbc]
mov eax, dword [eax]
call fcn.0040581c
call fcn.00422bb8
test al, al
je 0x4835a7
xor edx, edx
push ebp
push 0x48359d
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [0x59edbc]
mov ecx, dword [ecx]
lea eax, [ebp - 0x10]
mov edx, 0x483610
call fcn.004056a4
mov eax, dword [ebp - 0x10]
mov edx, dword [0x59e9f8]
call fcn.00482d7c
xor ebx, ebx
mov esi, 0x20
mov edi, 0x59e404
lea eax, [ebp - 0x14]
mov edx, dword [edi]
call fcn.00405584
mov eax, dword [ebp - 0x14]
call fcn.00463a5c
test eax, eax
jne 0x4832b8
mov bl, 1
jmp 0x4832be
add edi, 4
dec esi
jne 0x48329e
test bl, bl
je 0x4832cf
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4835a7
lea eax, [ebp - 4]
call fcn.00483170
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00483964
mov eax, 0x48361c
call fcn.00482f08
mov edx, dword [0x59ed80]
mov dword [edx], eax
mov eax, 0x483630
call fcn.00482f08
mov edx, dword [0x59edd8]
mov dword [edx], eax
mov eax, 0x483644
call fcn.00482f08
mov edx, dword [0x59eb24]
mov dword [edx], eax
mov eax, 0x483658
call fcn.00482f08
mov edx, dword [0x59ec10]
mov dword [edx], eax
mov eax, 0x48366c
call fcn.00482f08
mov edx, dword [0x59efac]
mov dword [edx], eax
mov eax, 0x483680
call fcn.00482f08
mov edx, dword [0x59f020]
mov dword [edx], eax
mov eax, 0x483694
call fcn.00482f08
mov edx, dword [0x59ed64]
mov dword [edx], eax
mov eax, 0x4836a8
call fcn.00482f08
mov edx, dword [0x59edb0]
mov dword [edx], eax
mov eax, 0x4836bc
call fcn.00482f08
mov edx, dword [0x59eb04]
mov dword [edx], eax
mov eax, 0x4836d0
call fcn.00482f08
mov edx, dword [0x59ed60]
mov dword [edx], eax
mov eax, 0x4836ec
call fcn.00482f08
mov edx, dword [0x59eda4]
mov dword [edx], eax
mov eax, 0x483708
call fcn.00482f08
mov edx, dword [0x59eaf8]
mov dword [edx], eax
mov eax, 0x483724
call fcn.00482f08
mov edx, dword [0x59f038]
mov dword [edx], eax
mov eax, 0x483734
call fcn.00482f08
mov edx, dword [0x59f090]
mov dword [edx], eax
mov eax, 0x483748
call fcn.00482f08
mov edx, dword [0x59ee30]
mov dword [edx], eax
mov eax, 0x48375c
call fcn.00482f08
mov edx, dword [0x59ee90]
mov dword [edx], eax
mov eax, 0x483770
call fcn.00482f08
mov edx, dword [0x59f0b0]
mov dword [edx], eax
mov eax, 0x483788
call fcn.00482f08
mov edx, dword [0x59e8d0]
mov dword [edx], eax
mov eax, 0x4837a0
call fcn.00482f08
mov edx, dword [0x59ea44]
mov dword [edx], eax
mov eax, 0x4837b8
call fcn.00482f08
mov edx, dword [0x59eaa8]
mov dword [edx], eax
mov eax, 0x4837d0
call fcn.00482f08
mov edx, dword [0x59eec0]
mov dword [edx], eax
mov eax, 0x4837e8
call fcn.00482f08
mov edx, dword [0x59ef14]
mov dword [edx], eax
mov eax, 0x483800
call fcn.00482f08
mov edx, dword [0x59ee74]
mov dword [edx], eax
mov eax, 0x483818
call fcn.00482f08
mov edx, dword [0x59eeb4]
mov dword [edx], eax
mov eax, 0x483834
call fcn.00482f08
mov edx, dword [0x59ebe0]
mov dword [edx], eax
mov eax, 0x48384c
call fcn.00482f08
mov edx, dword [0x59ec38]
mov dword [edx], eax
mov eax, 0x483868
call fcn.00482f08
mov edx, dword [0x59ec34]
mov dword [edx], eax
mov eax, 0x483880
call fcn.00482f08
mov edx, dword [0x59ec8c]
mov dword [edx], eax
mov eax, 0x48389c
call fcn.00482f08
mov edx, dword [0x59e958]
mov dword [edx], eax
mov eax, 0x4838b4
call fcn.00482f08
mov edx, dword [0x59e9b0]
mov dword [edx], eax
mov eax, 0x4838d0
call fcn.00482f08
mov edx, dword [0x59ef9c]
mov dword [edx], eax
mov eax, 0x4838e8
call fcn.00482f08
mov edx, dword [0x59f004]
mov dword [edx], eax
mov eax, 0x483904
call fcn.00482f08
mov edx, dword [0x59ead4]
mov dword [edx], eax
mov eax, 0x48391c
call fcn.00482f08
mov edx, dword [0x59eb58]
mov dword [edx], eax
mov eax, 0x483938
call fcn.00482f08
mov edx, dword [0x59ea14]
mov dword [edx], eax
mov eax, 0x483950
call fcn.00482f08
mov edx, dword [0x59ea70]
mov dword [edx], eax
mov byte [ebp - 9], 1
mov eax, dword [0x59edbc]
mov eax, dword [eax]
mov edx, 0x4835e4
call fcn.004057b4
je 0x483593
mov eax, dword [0x59edbc]
mov eax, dword [eax]
call fcn.0040581c
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4835a7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4835d1
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004053b0
lea eax, [ebp - 4]
call fcn.0040538c
ret