Function at 0x486ed0
Capabilities:
Delete file
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x519a7b
mov eax, dword fs:[0]
push eax
sub esp, 0x240
push ebx
push ebp
push esi
push edi
mov eax, dword [0x56c3c0]
xor eax, esp
push eax
lea eax, [esp + 0x254]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00488210
mov esi, dword [esp + 0x268]
push esi
call fcn.0047dc40
add esp, 4
test eax, eax
jne 0x486f34
push esi
call fcn.0047e180
add esp, 4
test al, al
jne 0x486f34
xor eax, eax
jmp 0x487430
lea ecx, [esp + 0x14]
call fcn.00484740
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x34], 1
mov dword [esp + 0x38], 0x64
xor esi, esi
push 0x216
lea eax, [esp + 0x40]
push ebx
push eax
call fcn.004d5720
mov ecx, dword [esp + esi*4 + 0x40]
add esp, 0xc
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], ecx
push edx
lea ecx, [esp + 0x18]
call fcn.00484c60
inc esi
cmp esi, 2
jb 0x486f56
mov edi, dword [esp + 0x264]
mov esi, dword [esp + 0x278]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x18]
push ecx
push edi
push esi
call fcn.00483a30
add esp, 0x10
test eax, eax
je 0x487302
mov ebp, dword [esp + 0x30]
cmp ebp, ebx
je 0x487302
cmp esi, ebx
jne 0x486fe8
mov edx, dword [esp + 0x270]
mov eax, dword [esp + 0x26c]
push edx
push eax
lea ecx, [ebp + 0x1e4]
push ecx
lea edx, [esp + 0x20]
push edx
push edi
call fcn.0047eb80
add esp, 0x14
test eax, eax
jmp 0x487014
cmp esi, 1
jne 0x48701a
mov eax, dword [esp + 0x270]
mov ecx, dword [esp + 0x26c]
push eax
push ecx
lea edx, [ebp + 0x1e4]
push edx
lea eax, [esp + 0x20]
push eax
push edi
call fcn.00480350
add esp, 0x14
test al, al
je 0x487302
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x48713d
cmp edi, eax
jb 0x487050
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 1
je 0x487119
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x487080
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 0x64
je 0x487119
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4870b0
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x487119
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4870dd
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 8], 0
je 0x487119
push 0x20
lea ecx, [ebp + 0x1e4]
push ecx
push edi
lea ecx, [esp + 0x20]
call fcn.0047e590
mov edx, dword [eax + 8]
push edx
push edi
lea ecx, [esp + 0x24]
call fcn.0047e590
mov eax, dword [eax + 4]
push eax
call fcn.004897b0
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
add esp, 0x10
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x487050
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4872f8
xor ebx, ebx
cmp edi, eax
jb 0x48716d
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 0x64
jne 0x4872d4
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x48719d
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x487269
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4871ce
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 8], 0
je 0x487269
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4871ff
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ebp, [ebx + ecx]
cmp edi, eax
jb 0x487222
call fcn.004d84ce
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x274]
mov eax, dword [esp + 0x270]
mov esi, dword [esp + 0x26c]
mov ecx, dword [ebx + ecx + 4]
push edx
mov edx, dword [esp + 0x26c]
push eax
mov eax, dword [ebp + 8]
push esi
push edx
push eax
push ecx
call fcn.00476590
add esp, 0x18
test eax, eax
je 0x487302
test esi, esi
je 0x4872cc
mov edx, dword [esp + 0x270]
push edx
jmp 0x4872bf
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x487289
call fcn.004d84ce
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x274]
mov ebp, dword [esp + 0x270]
mov esi, dword [esp + 0x26c]
mov eax, dword [esp + 0x268]
push edx
push ebp
push esi
push eax
lea ecx, [ebx + ecx + 0xc]
push ecx
call fcn.004763a0
add esp, 0x14
test eax, eax
je 0x487302
test esi, esi
je 0x4872cc
push ebp
push 0
push 0
call esi
add esp, 0xc
test al, al
je 0x487302
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x48716d
mov dword [esp + 0x2c], 1
jmp 0x48730a
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x487404
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenW]
xor ebx, ebx
cmp edi, eax
jb 0x487340
call fcn.004d84ce
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x48737c
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x487367
call fcn.004d84ce
mov ecx, dword [esp + 0x20]
mov ecx, dword [ebx + ecx + 4]
push ecx
call fcn.004d5b05
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 4
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x48739c
call fcn.004d84ce
mov ecx, dword [esp + 0x20]
lea ecx, [ebx + ecx + 0xc]
push ecx
call ebp
test eax, eax
je 0x4873d8
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x20]
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4873c9
call fcn.004d84ce
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x487340
xor esi, esi
cmp ecx, esi
je 0x487413
push ecx
call fcn.004910f4
add esp, 4
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
call fcn.004910f4
mov eax, dword [esp + 0x30]
add esp, 4
mov ecx, dword [esp + 0x254]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24c
ret