Function at 0x48afac
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff2a0
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x1d58], edx
mov dword [ebp - 0x1d5c], edx
mov dword [ebp - 0x1d60], edx
mov dword [ebp - 0x1d4c], edx
mov dword [ebp - 0x1d50], edx
mov dword [ebp - 0x1d54], edx
mov dword [ebp - 0x1d3c], edx
mov dword [ebp - 0x1d40], edx
mov dword [ebp - 0x1d44], edx
mov esi, eax
lea edi, [ebp - 0x1d35]
mov ecx, 0x749
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor eax, eax
push ebp
push 0x48b2ba
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x48b282
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x1d40]
mov edx, 1
lea eax, [ebp - 0x1d35]
call fcn.0048b3e0
push dword [ebp - 0x1d40]
push 0x48b2d0
lea eax, [ebp - 0x1d44]
lea edx, [ebp - 0x1ba3]
mov ecx, 0xc9
call fcn.00404d98
push dword [ebp - 0x1d44]
lea eax, [ebp - 0x1d3c]
mov edx, 3
call fcn.00404ebc
mov ebx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d48], ebx
mov eax, dword [ebp - 0x1d48]
call fcn.00404fb8
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
lea ecx, [ebp - 0x1d50]
mov edx, 1
lea eax, [ebp - 0x1d35]
call fcn.0048b3e0
push dword [ebp - 0x1d50]
push 0x48b2d0
lea eax, [ebp - 0x1d54]
lea edx, [ebp - 0x1ba3]
mov ecx, 0xc9
call fcn.00404d98
push dword [ebp - 0x1d54]
lea eax, [ebp - 0x1d4c]
mov edx, 3
call fcn.00404ebc
mov eax, dword [ebp - 0x1d4c]
call fcn.00409954
test al, al
jne 0x48b278
lea ecx, [ebp - 0x1d5c]
mov edx, 1
lea eax, [ebp - 0x1d35]
call fcn.0048b3e0
push dword [ebp - 0x1d5c]
push 0x48b2d0
lea eax, [ebp - 0x1d60]
lea edx, [ebp - 0x1ba3]
mov ecx, 0xc9
call fcn.00404d98
push dword [ebp - 0x1d60]
lea eax, [ebp - 0x1d58]
mov edx, 3
call fcn.00404ebc
mov ebx, dword [ebp - 0x1d58]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
mov dword [ebp - 0x1d48], ebx
mov eax, dword [ebp - 0x1d48]
call fcn.00404fb8
push eax
call sub.kernel32.dll_CreateFileA
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x16b2]
inc eax
call fcn.00402eac
mov ebx, eax
push 0x48b2dc
push 0x48b2e4
mov ecx, dword [0x4bd7f8]
mov dl, 1
mov eax, dword [0x4178c8]
call fcn.0041ca2c
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov edx, 0x3a6e
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
call dword [esi + 0x14]
mov edx, ebx
mov ecx, dword [ebp - 0x16b2]
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
call dword [esi + 0xc]
mov esi, dword [ebp - 0x16b2]
shr esi, 3
test esi, esi
jl 0x48b238
inc esi
xor ecx, ecx
mov eax, ecx
and eax, 0x8000007f
jns 0x48b1dc
dec eax
or eax, 0xffffff80
inc eax
mov edx, dword [ebp + eax*8 - 0x16aa]
mov dword [ebp - 8], edx
mov edx, dword [ebp + eax*8 - 0x16a6]
mov dword [ebp - 4], edx
mov eax, ebx
xor edx, edx
push edx
push eax
mov eax, ecx
add eax, eax
add eax, eax
add eax, eax
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push eax
mov eax, ebx
xor edx, edx
push edx
push eax
mov eax, ecx
add eax, eax
add eax, eax
add eax, eax
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov edx, dword [eax + 4]
mov eax, dword [eax]
sub eax, dword [ebp - 8]
sbb edx, dword [ebp - 4]
pop edi
mov dword [edi], eax
mov dword [edi + 4], edx
inc ecx
dec esi
jne 0x48b1ce
mov eax, dword [ebp - 0x10]
call fcn.00403c48
mov edx, ebx
mov ecx, dword [ebp - 0x16b2]
mov eax, dword [ebp - 0xc]
call fcn.004098d8
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_CloseHandle
mov eax, ebx
call fcn.00402ec8
cmp word [ebp - 0x461], 1
jne 0x48b278
push 2
lea eax, [ebp - 0x1ba3]
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48b28c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48b2c1
lea eax, [ebp - 0x1d60]
mov edx, 6
call fcn.00404b4c
lea eax, [ebp - 0x1d44]
mov edx, 3
call fcn.00404b4c
ret