Function at 0x424e2c
Capabilities:
Check if file exists
Delete directory
Delete registry key

Disassembly:
push 0x70
mov eax, 0x59de89
call fcn.005693c7
mov dword [ebp - 0x74], ecx
call fcn.00421ecd
mov ecx, eax
call fcn.00406f33
push eax
lea ecx, [ebp - 0x58]
call fcn.00402ac4
and dword [ebp - 4], 0
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x48], 0
je 0x425136
call fcn.0042aa9c
test al, al
je 0x424e7e
mov edx, dword [edx - 0x2da69dc8]
jo 0x424e8b
div byte [eax + 0x4956adcd]
add byte [ebp + 0x47565d63], 0xe8
retf
call fcn.0042ad4e
test al, al
je 0x424ea3
mov esp, 0xfd1df192
or eax, 0x32626cfb
sbb eax, 0x6cfb0dfd
bound esi, qword [edx]
sub ebp, dword [esi - 0x5b0e29fe]
add eax, 0x622dac2f
invalid
call fcn.0042af76
test al, al
je 0x424ec1
int3
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x28]
call fcn.00402a71
mov esi, str.WnConfig.exe
mov byte [ebp - 4], 1
push esi
call fcn.00578706
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00408c34
call fcn.0042aea7
test al, al
je 0x424f0c
adc dword [edi], ebx
int3
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x28]
push eax
call esi
push 1
xor ebx, ebx
lea ecx, [ebp - 0x28]
test eax, eax
pop eax
push 0xffffffffffffffff
cmovne ebx, eax
lea eax, [ebp - 0x58]
push 0
push eax
call fcn.004036b6
mov edi, 0x5a4c14
push edi
call fcn.00578706
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00408c34
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call esi
test eax, eax
push 1
pop eax
cmovne ebx, eax
mov dword [ebp - 0x78], ebx
call fcn.0042ab6b
test al, al
je 0x424f94
call 0x2368825
add al, 0x3c
push esp
adc ah, byte [ebx]
jns 0x424f84
lodsb al, byte [esi]
mov ch, 0xab
mov ebp, 0x814f676b
bound edx, qword [eax]
sbb eax, dword [ebp + ebx*2 - 0x5f]
dec edi
and dword [edx + 0x10], 0xa15d441b
xchg esi, eax
and dword [edi - 0x39], ebx
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x424fe6
call fcn.00421ecd
mov ecx, eax
call fcn.00406f3f
push eax
lea ecx, [ebp - 0x70]
call fcn.00402ac4
cmp dword [ebp - 0x60], 0
mov byte [ebp - 4], 2
je 0x424fd5
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
cmovae eax, dword [ebp - 0x70]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402ac4
mov ecx, dword [ebp - 0x74]
call fcn.00425e82
xor eax, eax
lea ecx, [ebp - 0x70]
inc eax
push 0
push eax
mov byte [ebp - 4], al
call fcn.00403628
call fcn.0042af76
test al, al
je 0x42500a
imul ebp, ebp, 8
sub eax, 0x7a48dcbe
or bh, ch
sbb al, 0x2e
inc ecx
lea edi, [edi]
hlt
cmp dword [ebp + 8], 0
je 0x425018
mov ecx, dword [ebp - 0x74]
call fcn.00425671
call fcn.0042a9cd
test al, al
je 0x42503a
mov byte [0x8a83fee9], al
lodsb al, byte [esi]
mov ds, ebx
add ch, cl
sbb eax, 0xca2c247d
salc
push esi
pop edx
salc
out 0xd4, al
invalid
call fcn.00421ecd
mov ecx, eax
call fcn.00406f3f
push eax
lea ecx, [ebp - 0x40]
call fcn.00402ac4
cmp dword [ebp - 0x30], 0
mov byte [ebp - 4], 3
je 0x42509e
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42509e
mov esi, str.WanNengWBInput
push esi
call fcn.00578706
pop ecx
push eax
push 0
push esi
lea ecx, [ebp - 0x40]
call fcn.00403968
cmp eax, 0xffffffff
je 0x42509e
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
call fcn.0042af76
test al, al
je 0x4250bb
imul dword [edx + 0x7b]
mov cl, 0xa4
jo 0x425031
xor esp, dword [edx - 0x731e92cc]
push ss
add bh, 0x5c
outsb dx, byte [esi]
push ebp
mov eax, dword [0x5b35e8]
add byte [eax + eax*8 + 0x26141774], al
call fcn.0042abf5
pop ebx
add byte [eax], al
test al, al
je 0x4250db
adc al, 0x26
imul dword [edx - 9]
mov esi, eax
fbld tbyte [edx + 0x26]
pop esi
jle 0x4250bd
cmc
jno 0x42511f
sub al, 0x38
push ss
adc ebp, eax
mov esp, 0x84000059
sal byte [ebx + ebx - 0x6e], 0xf9
call fcn.0042aa9c
test al, al
je 0x4250ff
xchg edx, eax
stc
and eax, 0x5ec0e18b
push ss
inc esi
in al, dx
rcr ebx, cl
and byte [ecx], ch
sal byte [esi + 0x62], 1
daa
out dx, eax
inc ebx
insd dword es:[edi], dx
jne 0x425165
pop es
mov byte [eax], ah
mov al, 0x83
jge 0x4250be
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
or byte [ebp + 0x430fa845], cl
inc ebp
test al, 0x50
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x78], 0
je 0x425120
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x10], bl
adc byte [edx], ch
push 0
push ebx
lea ecx, [ebp - 0x40]
call fcn.00403628
push 0
push ebx
lea ecx, [ebp - 0x28]
call fcn.00403628
push 0
push ebx
lea ecx, [ebp - 0x58]
call fcn.00403628
call fcn.00569382
ret 4