Function at 0x402e90
Capabilities:
Check if file exists
Delete file
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40ecb8
mov eax, dword fs:[0]
push eax
sub esp, 0x238
mov eax, dword [0x41507c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x216]
mov dword [ebp - 4], 0
push ecx
mov word [ebp - 0x218], ax
call fcn.0040ca90
mov edx, dword [0x40f2fc]
mov ecx, dword [0x40f300]
add esp, 0xc
push 0x29
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [0x40f304]
mov dword [eax + 4], ecx
mov ecx, dword [0x40f308]
mov dword [eax + 8], edx
lea esi, [ebp - 0x218]
mov dword [eax + 0xc], ecx
call fcn.004017a0
mov eax, dword [ebp + 0x44]
add esp, 0x14
cmp dword [ebp + 0x58], 8
jae 0x402f27
lea eax, [ebp + 0x44]
push eax
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x402f62
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x402f62
lea ecx, [ebp - 0x218]
call fcn.00401840
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x402f9b
push str.GetNativeSystemInfo
push eax
call ebx
test eax, eax
je 0x402f8e
lea edx, [ebp - 0x244]
push edx
call eax
jmp 0x402f9b
lea eax, [ebp - 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0x244]
cmp ax, 9
je 0x402fb2
cmp ax, 6
jne 0x4030ad
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea ecx, [ebp - 0x220]
push str.Kernel32.dll
mov dword [ebp - 0x21c], ecx
call edi
mov esi, eax
test esi, esi
je 0x402fef
push str.Wow64DisableWow64FsRedirection
push esi
call ebx
test eax, eax
je 0x402fe8
lea edx, [ebp - 0x21c]
push edx
call eax
jmp 0x402fef
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [0x40f2ec]
mov edx, dword [0x40f2f0]
push 0x25
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [0x40f2f4]
mov dword [eax + 4], edx
mov edx, dword [0x40f2f8]
mov dword [eax + 8], ecx
lea esi, [ebp - 0x218]
mov dword [eax + 0xc], edx
call fcn.004017a0
mov eax, dword [ebp + 0x44]
add esp, 0x14
cmp dword [ebp + 0x58], 8
jae 0x403033
lea eax, [ebp + 0x44]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x403076
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x403076
lea ecx, [ebp - 0x218]
call fcn.00401840
mov eax, dword [ebp - 0x220]
push str.Kernel32.dll
mov dword [ebp - 0x21c], eax
call edi
mov esi, eax
test esi, esi
je 0x4030ad
push str.Wow64RevertWow64FsRedirection
push esi
call ebx
test eax, eax
je 0x4030a6
lea ecx, [ebp - 0x21c]
push ecx
call eax
jmp 0x4030ad
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea esi, [ebp + 8]
call fcn.00401720
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00408d89
mov esp, ebp
pop ebp
ret