Function at 0x463c81
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x2a4
mov eax, 0x5c1a2a
call fcn.004aa3a5
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x2ac], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x46449b
test dword [ebp + edi*8 - 1], edx
invalid
call fcn.0046068d
test al, al
je 0x463cc1
cmp ebp, esi
loop 0x463c95
push edi
test ah, dh
invalid
insb byte es:[edi], dx
aam 0x54
clc
call fcn.004603db
test al, al
je 0x463ce3
add edx, eax
xchg edx, eax
sub eax, 0x676267cd
int1
dec esi
jecxz 0x463cbc
sub esi, dword [ecx + ebx*8]
aam 0xe0
retf 0x69a5
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x463d54
call fcn.0046075c
test al, al
je 0x463d16
stosd dword es:[edi], eax
jmp 0xc051b47b
call fcn.00460129
test al, al
je 0x463d30
sbb byte [ebx - 0x59], bl
add ebx, dword [eax + esi*8 + 0x7c]
movsd dword es:[edi], dword [esi]
inc ecx
aas
sub esi, 0xffffffce
lodsb al, byte [esi]
cmc
xchg ecx, eax
dec esp
call fcn.0046009f
test al, al
je 0x46449b
adc ah, byte [ebx]
xlatb
aas
mov esi, 0xb8fe5f89
push 0xffffffffffffff8c
adc al, 0x34
xlatb
aaa
bound edx, qword [eax + 0x747e9]
add byte [eax + 8], ch
add al, byte [eax]
add byte [ebx], dh
fisttp dword [ebp - 0x2177b]
call dword [ebx + 0x50]
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.00486960
add esp, 0xc
mov dword [ebp - 0x234], 7
xor eax, eax
mov dword [ebp - 0x238], ebx
lea ecx, [ebp - 0x248]
mov word [ebp - 0x248], ax
push ebx
push 0x625f30
call fcn.00402510
mov dword [ebp - 4], ebx
call fcn.00460579
test al, al
je 0x463db4
invalid
call fcn.00460351
test al, al
je 0x463ddc
invalid
sub eax, 0xb26ab07b
int3
call fcn.0046082b
test al, al
je 0x463dfd
xor ebp, edi
mov bl, 0xc7
into
mov ebp, 0xbf318456
bound ecx, qword [ebx + 0x461c2d3]
iretd
mov edi, 0xc2d38b62
popal
add al, 0xcf
push cs
jae 0x463e46
fcmove st(0), st(4)
mov cl, 0x8b
call fcn.0046082b
test al, al
je 0x463e1e
mov bl, 0x86
clc
xchg al, bh
mov ss, word [edi + eax*4]
mov ch, 0x5f
mov edx, 0x75a8c3c2
idiv dword [esi + 0x69]
push ebp
sub byte [ebx + 0x69], ch
or cl, byte [edx]
into
ja 0x463e07
call fcn.00460282
test al, al
je 0x463e45
pop edi
invalid
jo 0x463db7
imul ebp, ebp, 0x23
test dword [edx + 0x23], ebx
jo 0x463dee
pop esp
mov esi, 0x983695f9
aam 0x26
cmp dl, ch
xchg dword [ebp + 0x6d], eax
jns 0x463eab
mov dword [0x8d0244f7], eax
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x2a8]
push eax
call fcn.0047161b
pop ecx
pop ecx
mov byte [ebp - 4], 1
call fcn.00460420
test al, al
je 0x463e8e
test eax, ebp
std
invalid
sub cl, bl
ret
call fcn.0046023d
test al, al
je 0x463ead
pushal
aas
in eax, dx
movsb byte es:[edi], byte [esi]
cld
sub eax, 0xbd97dc89
xchg edx, eax
imul edx, dword [ecx + 0x1f], 7
xor dh, byte [ebp + 0xde9ed72]
jmp 0xc6c926bd
call fcn.00460534
test al, al
je 0x463ecb
imul eax, dword [eax - 0x2e9965a8], 0xf59384da
inc esi
pushal
not dword [esi]
rcr dx, 1
test byte [ebx - 0x89fb90b], dl
push ss
scasb al, byte es:[edi]
jno 0x463e78
jb 0x463ee3
int1
sbb eax, ebp
fcmovb st(0), st(5)
invalid
call fcn.004604aa
test al, al
je 0x463ef4
cmp esp, dword [ebp - 0x18]
insb byte es:[edi], dx
adc al, 0x13
je 0x463eba
xor eax, 0xe7d71a2d
imul dword [eax + 0x72]
and dword [eax + 0x1413e001], ecx
stc
jb 0x463f06
mov byte [ecx], al
loopne 0x463efc
adc al, 0xf9
mov al, 0x54
jmp 0xef4cd1ee
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x278]
push eax
call fcn.004719f9
mov ch, bh
invalid
pop ecx
pop ecx
mov byte [ebp - 4], 2
call fcn.00460717
test al, al
je 0x463f2b
mov dword [eax], esi
sbb dword [edx - 0x6f], ebx
and al, 0xbf
daa
mov esp, 0xa13223cb
sar byte [edi - 0x5f], cl
loopne 0x463f37
or al, 0xb
sbb dword [ebp - 0x3b5418], edx
inc dword [eax + eax*8 - 0x7bf8e78c]
leave
call fcn.004603db
test al, al
je 0x463f4c
pop es
test cl, cl
or edx, edx
xchg esi, eax
in eax, dx
in al, 0x51
lea ebp, [edi + 0x14]
ret 0xfdc4
call fcn.0046082b
test al, al
je 0x463f71
dec esi
aam 0x11
push ss
jne 0x463f15
xchg edx, eax
pop ss
push 0x43
mov ds, word [ebx + 0x44c29f60]
salc
mov edx, 0xe8d60742
sbb eax, 0x5f466a8e
push cs
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.004719f9
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 3
push eax
call fcn.0046e6ca
add esp, 0xc
call fcn.004601b3
test al, al
je 0x463fb3
in eax, 0xbe
cdq
call 0xca0551e8
sbb dh, byte [ecx + 0x14]
cdq
pop es
or dword [edx + 0x7c877770], eax
call fcn.004604aa
test al, al
je 0x463fdc
lodsb al, byte [esi]
jecxz 0x464017
invalid
dec edi
stc
mov cl, 0x49
in eax, dx
rcl byte [edx], 0xc2
sub eax, 0x8148de1e
xor eax, 0xfda0858d
invalid
lea eax, [ebp - 0x260]
push eax
call fcn.0046e6ca
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x260]
call fcn.00463912
test eax, eax
jne 0x46409f
call fcn.004606d2
test al, al
je 0x464025
mov al, 0x1c
xor ecx, 0xc71d25ef
xor cl, ah
test esp, eax
pop esp
invalid
les ebx, [esi + eax*8 + 0x15]
push ds
push cs
xor ebp, dword [0x426ccc6c]
dec edx
xchg al, ch
push ds
invalid
call fcn.00460648
test al, al
je 0x46404e
jnp 0x4640af
in al, dx
jl 0x463fce
xchg ebp, eax
jno 0x464090
cmp esi, eax
inc esi
inc ebx
adc eax, 0xb097b0ca
mov bh, byte [edx - 0x60]
test al, 3
out dx, al
sub byte [0x93811da2], ah
sahf
push ebp
lodsd eax, dword [esi]
call fcn.004607e6
test al, al
je 0x46406f
dec ecx
xchg edi, eax
outsd dx, dword [esi]
cdq
add byte [edi + ebx*8], bl
adc al, 0x96
cdq
jmp 0x90cf8a3
cmp word [ebp - 0x218], 0
jne 0x46407d
xor eax, eax
jmp 0x46408a
lea eax, [ebp - 0x218]
push eax
call 0x51464081
call fcn.0049899e
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.00402510
jmp 0x4640e9
call dword [eax - 0x73]
lea edi, [eax - 0x17000003]
jae 0x46407f
stc
invalid
call fcn.004607e6
test al, al
je 0x4640ba
cmp cl, byte [esi + 0x6a]
xchg ecx, eax
mov edx, 0x95d6c5ca
salc
xchg ebp, eax
insb byte es:[edi], dx
mov edi, 0xb23a3652
fsub dword [edi - 0x2ab4a01]
invalid
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x290]
push eax
call fcn.004718c1
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.00403f10
push 0
push 1
lea ecx, [ebp - 0x290]
call fcn.00402450
and dword [ebp - 0x2b0], 0
call fcn.004607e6
test al, al
je 0x464109
invalid
aam 0x69
cmp edx, dword [edx + 0x196031af]
xlatb
sbb al, dl
nop
dec ecx
sub al, 0xc7
jno 0x4640f2
call fcn.004600e4
test al, al
salc
mov edi, 0xc084ffff
je 0x464123
mov ebx, 0x18c58eb3
adc al, 0x85
clc
xor ah, byte [0x6c74f2dc]
add dh, bl
call fcn.00460129
test al, al
je 0x464141
invalid
and dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
xor eax, eax
mov dword [ebp - 0x21c], 7
push eax
push 0x625f30
mov word [ebp - 0x230], ax
call fcn.00402510
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x230]
call fcn.00402760
call fcn.00460534
test al, al
je 0x4641a5
stc
jmp [edx - 1]
stc
invalid
test dword [ecx], esi
pop esp
inc edi
pop ss
scasb al, byte es:[edi]
or al, 0xd4
jno 0x464184
sbb eax, 0xa3ed4b25
adc bl, byte [ebp + 0x46]
mov al, byte [0xe8e1d0da]
jbe 0x46416a
call fcn.00460420
test al, al
je 0x4641c3
invalid
push esp
cdq
std
ror byte [eax + 0x73], 1
ja 0x4641be
imul edi, dword [eax - 3], 0x4aa36d8
pop esp
push ecx
aaa
cmp ebx, eax
call fcn.004607a1
test al, al
je 0x4641e3
jge 0x464191
invalid
push 0xffffffffffffffff
xor ebx, ebx
lea eax, [ebp - 0x2a8]
push ebx
push eax
lea ecx, [ebp - 0x230]
call fcn.004042c0
mov esi, str..ccc
push esi
call fcn.0049899e
pop ecx
push eax
push esi
lea ecx, [ebp - 0x230]
call fcn.00404190
mov eax, dword [ebp - 0x2b0]
test eax, eax
jle 0x464254
cdq
push edx
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.00470fad
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.004042c0
push ebx
push 1
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.00402450
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x464363
call fcn.004606d2
test al, al
je 0x464296
push ebx
sub byte [eax], bl
loopne 0x46424b
mov esp, 0xf658cedd
mov ecx, 0x3249e986
aas
inc ecx
push eax
test al, 0x45
invalid
call fcn.00460465
test al, al
je 0x4642b8
sti
cld
add al, 0x95
mov esp, dword [edx - 0x3a7d882c]
pop ss
xlatb
ret 0x3f30
call fcn.00460282
test al, al
je 0x4642d5
cmp ebp, dword [ecx]
mov ebx, 0xc8a606e
into
add eax, 0x46ec9625
mov byte [0x673c1705], al
outsb dx, byte [esi]
add eax, 0xfde4bd83
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x464363
call fcn.0046068d
test al, al
je 0x464313
int3
call fcn.0046023d
test al, al
je 0x464335
movsb byte es:[edi], byte [esi]
jnp 0x4642f4
inc ebx
mov ecx, 0x647ca94d
cld
xor ch, 0xb1
aam 0x47
cdq
jne 0x4642dc
hlt
mov ebx, dword [ebp - 0x2b0]
cmp ebx, 0xa
jge 0x464455
push 0
inc ebx
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x2b0], ebx
call fcn.00402450
jmp 0x464141
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push dword [ebp - 0x2ac]
call fcn.00494b22
pop ecx
pop ecx
call fcn.00460351
test al, al
je 0x4643a1
mov ah, 0xbe
dec edi
add ebp, ebp
xor byte [eax - 0x279e116d], dh
push esp
pop dword [ebp + edx*2 - 0x46779df0]
call fcn.004602c7
test al, al
je 0x4643c1
xchg edi, eax
mov esi, 0xe0fc2b5
push ss
out dx, al
les ebx, [esi + 0xbe57eb1]
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x230]
push eax
call esi
test eax, eax
je 0x464401
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 5
cmovae eax, dword [ebp - 0x230]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ebx, dword [ebp - 0x2ac]
push ebx
call esi
test eax, eax
je 0x464455
call fcn.004600e4
test al, al
je 0x46442d
invalid
call fcn.004601b3
test al, al
je 0x46444a
add dword [edx + ebp + 0x72ed633d], edi
or al, byte [ebp + 0x14]
xchg word [edi], bp
inc ebx
jmp fcn.004644a1
push 5
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
xor ebx, ebx
lea ecx, [ebp - 0x230]
xor esi, esi
push ebx
inc esi
push esi
call fcn.00402450
push ebx
push esi
lea ecx, [ebp - 0x260]
call fcn.00402450
push ebx
push esi
lea ecx, [ebp - 0x278]
call fcn.00402450
push ebx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.00402450
push ebx
push esi
lea ecx, [ebp - 0x248]
call fcn.00402450
call fcn.004aa360
ret