Function at 0x426dd5
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x2a4
mov eax, 0x5a44d7
call fcn.0043b389
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x2ac], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4274ac
call fcn.0042607b
test al, al
je 0x426e20
or dword [edi + 0x6b], 0x77192ab4
test al, 0x66
sub dword [edi + 0x7f13caf9], ecx
inc ebp
jg 0x426e5a
xchg edi, eax
xchg ebp, eax
mov byte [0xe45bc028], al
add al, 0x33
mov bl, 0xee
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x426e61
call fcn.00425c70
test al, al
je 0x4274ac
adc eax, 0x394e1015
xor ecx, dword [eax]
mov bl, 0xdb
jecxz 0x426e13
pop ecx
xchg byte [ebx], dh
hlt
adc byte [esi + 0x64be9], bl
add byte [eax + 8], ch
add al, byte [eax]
add byte [ebx], dh
fisttp dword [ebp - 0x2177b]
call dword [ebx + 0x50]
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.004463a0
add esp, 0xc
mov dword [ebp - 0x234], 7
xor eax, eax
mov dword [ebp - 0x238], ebx
lea ecx, [ebp - 0x248]
mov word [ebp - 0x248], ax
push ebx
push 0x5a7890
call fcn.00402100
mov dword [ebp - 4], ebx
call fcn.00425f67
test al, al
je 0x426ebf
rcl dword [edi], 0x45
xchg edi, eax
adc eax, 0x9d4ab8fe
or al, 0x60
mov al, byte [0x3a145a64]
sub eax, 0xffffffac
in eax, dx
invalid
call fcn.00425c70
test al, al
je 0x426ee7
sbb byte [ebx - 0x7f], ch
jb 0x426edc
mov esp, 0x953db477
out dx, al
ljmp 0x8822
invalid
call fcn.00425a8d
test al, al
je 0x426f06
or al, 0x22
leave
mov esp, ebp
pop ss
or eax, 0x3a342b23
outsb dx, byte [esi]
pushal
push edi
adc bl, byte [eax + 0x3b]
dec ebx
sub dl, byte [ebp - 0x6e]
push cs
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x2a8]
push eax
call fcn.00428b04
pop ecx
pop ecx
mov byte [ebp - 4], 1
call fcn.0042607b
test al, al
je 0x426f4c
push ebp
push edx
imul byte [edi - 0x532e2fe6]
les eax, [esi - 0x4fd188bc]
adc bh, bl
ja 0x426fc5
inc eax
call fcn.00425ff1
test al, al
je 0x426f70
popfd
invalid
call fcn.00425fac
test al, al
je 0x426f92
cmp ebx, dword [esp + ecx*4 + 0x7a]
xor ebx, dword [esi + 0x36c64ef4]
shl esp, 0xf8
in al, 0xf8
jnp 0x426fbb
pop ds
dec esp
mov eax, dword [0xce896d85]
sahf
jmp 0x426f84
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x278]
push eax
call fcn.00428eec
pop ecx
pop ecx
mov byte [ebp - 4], 2
call fcn.00425a48
test al, al
je 0x426fc7
dec edx
push ebp
pop esi
mov esp, 0x6a74f215
push ds
lodsb al, byte [esi]
rcl esp, cl
je 0x426f41
popal
popal
mov edi, 0x8db7b944
test eax, ebp
mov ecx, 0xe8858db7
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.00428eec
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 3
push eax
call fcn.0043254a
add esp, 0xc
call fcn.00425cb5
test al, al
je 0x427006
std
invalid
in al, dx
invalid
jno 0x426fb4
adc dword [edx - 0x5f], esp
push esp
xor al, 0xe4
movsb byte es:[edi], byte [esi]
shr byte [ecx - 0x17c7d280], cl
jb 0x426fef
call fcn.00426036
test al, al
je 0x42702f
sub esi, eax
invalid
add ebx, ecx
stc
pop ss
adc cl, byte [eax - 0x6c]
add ch, dl
pop ss
and dword [ebx - 0x7fb7791], eax
invalid
call fcn.00425a48
test al, al
je 0x427056
mov ah, 0x53
fimul dword [edi + 0x59b0a984]
sti
cmp dword [ebx], esp
movsd dword es:[edi], dword [esi]
add ah, ah
ficomp word [ebx - 0x7b]
aam 0x3a
xor dword [ecx], 0x23
mov byte [esi + 0x4d539961], cl
cli
and dword [ebp - 0x25f7b], ecx
call dword [eax - 0x18]
call 0x59427117
lea eax, [ebp - 0x260]
push eax
call fcn.0043254a
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x260]
call fcn.00427f60
test eax, eax
jne 0x4270c3
call fcn.00425f22
test al, al
je 0x427093
adc al, 0xa
xor ah, byte [edi + ebx]
cmp al, 0xe6
and bl, dh
xor ah, byte [esi + 0x33332743]
wait
cmp word [ebp - 0x218], 0
jne 0x4270a1
xor eax, eax
jmp 0x4270ae
lea eax, [ebp - 0x218]
push eax
call fcn.00454a97
pop ecx
test eax, ebp
std
invalid
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.00402100
jmp 0x427141
call fcn.00425e98
test al, al
je 0x4270e9
pushfd
pop ebx
loop 0x42711e
mov word [eax - 0x7d45d058], cs
dec esi
clc
push esi
add ebx, dword [eax - 0x488a3c9c]
cmp eax, 0x6bdae5af
stc
jnp 0x4270bc
jl 0x427123
call fcn.00425c70
test al, al
je 0x427112
pop eax
imul edx, dword [ecx], 0x1a58243d
outsb dx, byte [esi]
jle 0x4270a2
imul ebp, eax, 0xe8028a8b
div esp
cmc
sbb byte [eax + 0x1fef0ac5], 0x8b
fld xword [esp + esi*4 - 0x11f81a]
mov ch, 0x54
std
invalid
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x290]
push eax
call fcn.00428db4
pop ecx
pop ecx
add byte [ecx + 0x59], bl
push eax
lea ecx, [ebp - 0x248]
call fcn.00403870
push 0
push 1
lea ecx, [ebp - 0x290]
call fcn.0042548f
lea esi, [eax - 3]
invalid
and dword [ebp - 0x2b0], 0
call fcn.00425ff1
test al, al
je 0x427167
inc edx
fisttp qword [edx - 0x41632f9f]
out dx, al
adc dword [edx], edx
and ebp, eax
invalid
and dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
xor eax, eax
mov dword [ebp - 0x21c], 7
push eax
push 0x5a7890
mov word [ebp - 0x230], ax
call fcn.00402100
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x230]
call fcn.00401fe0
call fcn.00425f67
test al, al
je 0x4271d4
loopne 0x427137
sub eax, 0x74c8f3d6
in eax, 0xce
jno 0x42720b
pop ebp
mov ch, 0xf4
inc edx
pop ds
aam 0x67
xchg edx, eax
add al, 0x9f
cld
js 0x427218
rcr dword [esi + 0x7c6c81e4], cl
mov ebx, 0xffe82ae8
inc dword [eax + eax*8 + 0x58f91974]
call fcn.00425a03
test al, al
je 0x4271f6
stc
pop eax
push es
xlatb
xchg ebx, eax
jmp 0x6deeefc3
call fcn.00425cb5
test al, al
je 0x42721b
sub dword [ebp - 0x2f], ebx
adc al, 0xa4
push esi
pop ss
je 0x427212
stosd dword es:[edi], eax
pop ss
salc
pop ds
inc ebx
lahf
invalid
mov dh, 0xab
out 0x8a, eax
std
inc edi
dec edi
popfd
mov cl, 0x6a
push dword [ebx]
fisttp dword [ebp - 0x2a77b]
call dword [ebx + 0x50]
push 0xffffffffffffffff
xor ebx, ebx
lea eax, [ebp - 0x2a8]
push ebx
push eax
lea ecx, [ebp - 0x230]
call fcn.00405110
mov esi, str..fcb
push esi
call fcn.00454a97
pop ecx
push eax
push esi
lea ecx, [ebp - 0x230]
call fcn.00405220
mov eax, dword [ebp - 0x2b0]
test eax, eax
jle 0x42728c
cdq
push edx
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.00428680
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.00405110
push ebx
push 1
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.0042548f
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42736f
call fcn.00425c70
test al, al
je 0x4272d3
sahf
pop edx
pop ecx
invalid
mov ah, 0x81
ficomp dword [esp + ebx - 0x17c0171d]
invalid
call fcn.00425b17
test al, al
je 0x4272fa
insb byte es:[edi], dx
or ebp, ecx
retf 0xb830
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x42736f
call fcn.00425b17
test al, al
je 0x427341
cmc
stosb byte es:[edi], al
cmc
mov gs, ebp
adc bh, 0x2b
push esp
adc ebx, dword [edx + 0x78]
sub al, 0x9b
inc ecx
scasb al, byte es:[edi]
adc dword [0x9cc20dd1], ecx
dec edx
ja 0x427335
or eax, 0x774a9cc2
cli
jecxz 0x427362
pop ds
push ds
jecxz 0x4272cd
mov ebx, dword [ebp - 0x2b0]
cmp ebx, 0xa
jge 0x427466
popfd
push eax
std
invalid
push 0
inc ebx
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x2b0], ebx
call fcn.0042548f
jmp 0x427167
std
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push dword [ebp - 0x2ac]
call fcn.0045514e
pop ecx
pop ecx
call fcn.00425dc9
test al, al
je 0x4273b1
xlatb
imul edx, dword [edx + 0x2f16dd7c], 0xc
mov ebx, 0xb6dc83f9
mov ebx, 0xcec74d23
cmp ch, dh
inc ecx
cmp eax, 0xe7a6e81d
invalid
call fcn.00425b5c
test al, al
je 0x4273d2
lcall 0x2e80, 0x9defca6c
int1
pop ecx
dec eax
mov bh, 0xc1
or dword [esi - 0x77], esp
dec ebx
ja 0x4273b1
int3
call fcn.00425be6
test al, al
je 0x4273f3
cmp bl, dl
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x230]
push eax
call esi
test eax, eax
je 0x427433
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 5
cmovae eax, dword [ebp - 0x230]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ebx, dword [ebp - 0x2ac]
push ebx
call esi
test eax, eax
je 0x427466
call fcn.00425d84
test al, al
je 0x42745b
xchg esi, eax
das
out dx, eax
cmp eax, 0xa8155e03
mov al, bl
cmp edx, 0xe14e764a
pop ebp
sub dword [edx + 5], 0x6a
add byte [ebx - 1], dl
adc eax, sym.imp.KERNEL32.dll_MoveFileExW
push 5
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
xor ebx, ebx
lea ecx, [ebp - 0x230]
xor esi, esi
push ebx
inc esi
push esi
call fcn.0042548f
push ebx
push esi
lea ecx, [ebp - 0x260]
call fcn.0042548f
push ebx
push esi
lea ecx, [ebp - 0x278]
call fcn.0042548f
push ebx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.0042548f
push ebx
push esi
lea ecx, [ebp - 0x248]
call fcn.0042548f
call fcn.0043b344
ret