Function at 0x423526
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [0x62aa54]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x20c]
push esi
push edi
push 0x208
push 0
push eax
mov dword [ebp - 0x210], ebx
call fcn.0056f390
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x214], eax
call fcn.0042ab6b
test al, al
je 0x42358c
mov al, byte [0xe911a24e]
pop es
adc edx, dword [ecx + 0x57]
lea edi, [0x187ecc82]
adc al, 0x7e
jb 0x4235be
jmp 0x57934881
mov edx, 0x351105a4
out 0x59, al
loopne 0x423575
call fcn.0042aa12
test al, al
je 0x4235b3
xor dword [eax + eax], 0x1e74c084
xor al, 0x20
or edx, 0x5f845daf
mulps xmm7, xmmword [ecx + edi*4]
cld
adc al, 0x19
and dword fs:[ecx], 0x64
les eax, [esi - 0x4158236d]
sbb dword [ebx + eax*4 + 0x21], esp
les eax, fs:[esi - 0x4158236d]
leave
jnp 0x4235a3
push es
sbb eax, dword [ebx - 0x21343]
inc dword [eax]
cmp dword [ebp - 0x214], 0
jne 0x423764
add byte [eax], al
push dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
push 0x5a0b58
push eax
call fcn.00408d5e
lea eax, [ebp - 0x20c]
push str..fcb
push eax
call fcn.00572b2d
add esp, 0x14
mov dword [ebp - 0x214], eax
call fcn.0042ae62
test al, al
je 0x42360b
sal dword [0xc4078fa4], 5
mov edi, 0x6620e386
xchg edx, eax
and eax, 0xe89c6823
pop ebx
jne 0x42360f
call fcn.0042ab6b
test al, al
je 0x423633
add byte [eax + eax*8 + 0x16391f74], al
cmp dword [esi], edx
xchg dword [edx - 0x14728717], edi
test al, 0xa1
scasd eax, dword es:[edi]
xchg edi, eax
ret 0x4b32
call fcn.0042a988
test al, al
je 0x423652
test byte [ebp + 0x39], 0xa5
sar dword [eax + 0x4f9ade1f], 1
arpl word [edx - 0x58467eab], di
dec ebp
int1
popal
sub eax, 0xbd832d64
in al, dx
std
invalid
cmp dword [ebp - 0x214], 0
je 0x42366a
push 5
push 0
push dword [ebp - 0x210]
jmp 0x42375e
call fcn.0042ab6b
test al, al
je 0x42368e
lcall 0xfbba, 0xd8408d69
clc
sbb eax, 0x506b9cb7
not dword [edi]
cmpsd dword [esi], dword es:[edi]
dec edx
adc dword [esi - 0x4f3e3939], ecx
pop edx
int1
cmc
invalid
call fcn.0042aa12
test al, al
je 0x4236b5
xchg esi, eax
std
or ch, byte [ebx - 0x4d092db1]
cmp al, 0xb9
ror dword [edi + 0x41], cl
mul byte es:[ebx + 0x2d537d18]
jb 0x4236ba
mov al, byte [0x2ea94afc]
popal
inc edi
push esi
xor esi, esi
mov edi, str..fcb
pop edx
add al, ch
push ecx
jae 0x4236c0
call fcn.0042aa12
test al, al
je 0x4236e4
add byte [eax + eax*8 + 0x4fd11f74], al
or al, 0x68
xchg ecx, eax
movsb byte es:[edi], byte [esi]
add ebp, esi
ror dword [edi + 0xc], 1
push 0xee03a491
adc al, 0x5b
loop 0x423747
mov dl, 0x25
pushal
into
inc esp
loop 0x423702
pushal
sub eax, 0x79b4312c
std
salc
fmul dword [ebx]
cmpsd dword [esi], dword es:[edi]
mov esi, 0xfdf09d8b
invalid
mov ebx, dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
test esi, esi
jne 0x423706
push edi
push ebx
push 0x5a0ac0
push eax
call fcn.00408d5e
add esp, 0x10
les edx, [eax]
jmp 0x423717
push esi
push edi
push ebx
push str._s_s_d
push eax
call fcn.00408d5e
add esp, 0x14
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x423744
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x423744
cmp esi, 0xa
jg 0x423764
inc esi
jmp 0x4236bc
lea eax, [ebp - 0x20c]
push eax
push ebx
call fcn.0057c21a
pop ecx
pop ecx
push 5
push 0
lea eax, [ebp - 0x20c]
push eax
std
invalid
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0056935c
mov esp, ebp
pop ebp
ret 4