Function at 0x427ef0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x2c]
mov dword [ebp - 4], eax
call fcn.00408b30
mov dword [ebp - 8], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
xor eax, eax
push fcn.00427eb0
push ebp
push 0x414780
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x10]
xor eax, eax
call fcn.00414e90
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 8]
call fcn.004274b0
lea eax, [ebp - 0x14]
call fcn.00403c90
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x1c]
call fcn.00449ab0
mov eax, dword [ebp - 0x1c]
mov ecx, 3
mov edx, 2
call fcn.00409980
mov edx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
call fcn.00408b60
mov edx, 0x5992f4
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x427fb7
mov edx, dword [0x665d38]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
jmp 0x4280d8
mov edx, 0x599304
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x427fe9
mov edx, dword [0x665d3c]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
jmp 0x4280d8
mov edx, 0x599314
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x42801b
mov edx, dword [0x665d40]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
jmp 0x4280d8
mov edx, 0x599324
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x42804d
mov edx, dword [0x665d44]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
jmp 0x4280d8
mov edx, 0x599334
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x42807c
mov edx, dword [0x665d44]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
jmp 0x4280d8
mov edx, 0x599344
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x4280ab
mov edx, dword [0x665d48]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
jmp 0x4280d8
mov edx, 0x599354
mov eax, dword [ebp - 0x14]
call fcn.00409720
test eax, eax
jne 0x4280d8
mov edx, dword [0x665d48]
mov eax, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.00427a60
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
call fcn.00427ba0
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [0x665ce4]
mov ecx, 0x599118
mov eax, 0x599364
call fcn.00426f10
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 8]
mov ecx, 1
call fcn.00409a30
mov dword [ebp - 0xc], eax
test eax, eax
je 0x428140
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
lea ecx, [eax - 1]
mov eax, dword [ebp - 8]
mov edx, 1
call fcn.00409980
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.00408b60
push 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [0x665ce4]
mov ecx, 0x599118
mov eax, 0x599364
call fcn.00426f10
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x18]
call fcn.004274b0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x28]
lea eax, [ebp - 8]
mov ecx, 2
call fcn.00408ef0
lea eax, [ebp - 0x2c]
call fcn.00403c90
push 0
mov edx, dword [ebp - 4]
mov ecx, str..exe
lea eax, [ebp - 0x2c]
call fcn.00408c60
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 8]
lea ecx, [ebp - 0x10]
call fcn.004273d0
lea eax, [ebp - 0x10]
call fcn.00403c90
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x2c]
call fcn.0042b950
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4281cf
mov eax, 0x6622f0
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.00427eb0
mov esp, ebp
pop ebp
ret