Function at 0x4273ad
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x2a4
mov eax, 0x5a5d71
call fcn.0043caa9
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x2ac], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x427a84
call fcn.004266e3
test al, al
je 0x4273f8
push ebx
lodsd eax, dword [esi]
clc
into
invalid
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x427439
call fcn.004262d8
test al, al
je 0x427a84
mov edi, 0xd922f916
mov edi, 0xb6e50fde
add al, 0xe7
inc esi
pop ebx
inc eax
mov ah, 0x4a
pushal
test byte [edi + esi + 0x29fd11d6], ah
mov dword [0xdbbe2fcd], eax
pop ss
jmp 0x427a84
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.00447ad0
add esp, 0xc
mov dword [ebp - 0x234], 7
xor eax, eax
mov dword [ebp - 0x238], ebx
lea ecx, [ebp - 0x248]
mov word [ebp - 0x248], ax
push ebx
push 0x5a98a4
call fcn.00402110
mov dword [ebp - 4], ebx
call fcn.004265cf
test al, al
je 0x427497
adc eax, 0x56e87621
pop eax
outsb dx, byte [esi]
bnd ret
call fcn.004262d8
test al, al
je 0x4274bf
not byte [ebx + 0x31845965]
aaa
cmp eax, 0xc1166ec8
adc byte [eax + edx*8], bl
push ds
mov cl, 0x3a
sahf
ljmp 0xc597
call fcn.004260f5
test al, al
je 0x4274de
outsd dx, dword [esi]
and byte [edx - 0x35f280a6], cl
mov esp, 0x973cef40
out 0x93, eax
add dh, ah
pop dword [esi + esi*8 + 0x4f]
not byte [ebp - 0x73]
test eax, ebp
std
invalid
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x2a8]
push eax
call fcn.00429078
pop ecx
pop ecx
mov byte [ebp - 4], 1
call fcn.004266e3
test al, al
je 0x427524
jns 0x42749e
pop esp
fimul word [eax - 0x3f]
salc
mov byte [edi], ch
pop es
js 0x42755f
jmp 0xc0b54506
call fcn.00426659
test al, al
je 0x427548
lodsd eax, dword [esi]
out 0x71, eax
cmp al, 0x60
mov dword [0xc27d1e24], eax
push ebp
push ss
std
mov ah, 0x8a
into
fcmovb st(0), st(4)
imul edi, dword [esi - 0x73a913dc], 0xfff0c7e8
inc dword [eax + eax*8 - 0x7c38e68c]
cmp eax, 0x4035f021
sub al, 0xcd
mov eax, dword [0x85745f00]
call fcn.00426614
test al, al
je 0x42756a
mov dword [ebx + 0x35f0213d], 0xa1cd2c40
add byte [edi + 0x74], bl
test esp, ecx
clc
cmp ecx, dword [esi - 0x1b7ffab7]
inc eax
xchg edi, eax
pushal
int3
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x278]
push eax
call fcn.0042944b
pop ecx
pop ecx
mov byte [ebp - 4], 2
call fcn.004260b0
test al, al
je 0x42759f
in al, dx
test al, 0xfd
sub al, 0xd4
mov dl, 0x5f
inc esp
cmc
fsub qword [ecx - 0x3dd5aa10]
sbb eax, 0x7f085878
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042944b
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 3
push eax
call fcn.0042a914
add esp, 0xc
call fcn.0042631d
test al, al
je 0x4275de
push edx
xor eax, dword [eax]
add byte [ebx + 0x53e80cc4], al
push ebx
in eax, dx
invalid
push cs
ror dword [ecx + edx], 1
pop ss
push esi
inc ecx
inc ebp
fsub dword [ebx - 0x6bcc39aa]
add eax, 0xf0bbe824
invalid
call fcn.0042669e
test al, al
je 0x427607
out 0x16, eax
and dword [ebp + eax*4 + 0x464eb4f], ebp
dec ebp
aas
mov ecx, 0x118f46c2
mov al, 0xf4
fldcw word [eax - 0x36d3d605]
jecxz 0x4275ed
jmp 0x427653
sal byte [edx - 0x32], cl
inc esp
or eax, 0xeaa4e838
invalid
call fcn.004260b0
test al, al
je 0x42762e
dec esp
aaa
cmc
pop esi
cli
stosd dword es:[edi], eax
scasd eax, dword es:[edi]
sub ebp, eax
pop esi
jecxz 0x4275be
push eax
into
jge 0x4275c6
test dh, dl
js 0x427652
push edx
adc ch, byte [ecx + ebx*2 + 0x2fcda5c4]
push edi
fisttp dword [ebp - 0x25f7b]
call dword [eax - 0x18]
fidiv dword [edx]
add byte [eax], al
lea eax, [ebp - 0x260]
push eax
call fcn.0042a914
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x260]
call fcn.00428511
test eax, eax
jne 0x42769b
call fcn.0042658a
test al, al
je 0x42766b
xor al, 0xef
out dx, eax
invalid
or eax, ebp
cmp ch, 0x73
add dh, al
pop es
pushfd
adc dword [ecx + 1], edi
and byte [eax], 0x5c
cmp dword [0xe8bd8366], 0xfffffffd
invalid
cmp word [ebp - 0x218], 0
jne 0x427679
xor eax, eax
jmp 0x427686
lea eax, [ebp - 0x218]
push eax
call fcn.004561c7
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.00402110
jmp 0x427719
call fcn.00426500
test al, al
je 0x4276c1
sbb al, 0x7e
cmp dword [ebp + 0x41], esp
xor eax, 0x2b4df360
wait
retf 0xd54a
call fcn.004262d8
test al, al
je 0x4276ea
xor byte [ebx], ch
cli
lea ecx, [edi + 0x73]
fidivr word [ebx + 0x5f]
jnp 0x427732
rol dword [0x7bca71c], 1
jle 0x427756
jns 0x4276d1
dec eax
sbb al, 0xdc
salc
ror al, 0xb6
cmp byte [eax + 0x6f], al
push 0xb5ffeff4
push esp
std
invalid
push dword [ebp - 0x2ac]
lea eax, [ebp - 0x290]
push eax
call fcn.00429313
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.00403910
push 0
push 1
lea ecx, [ebp - 0x290]
call fcn.004254f0
and dword [ebp - 0x2b0], 0
call fcn.00426659
test al, al
je 0x42773f
out dx, al
int3
test eax, 0xafcd97fd
or eax, 0xedee67fd
and ebp, dword cs:[esi - 0x21f5a7d]
invalid
and dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
xor eax, eax
mov dword [ebp - 0x21c], 7
add byte [eax], al
push eax
push 0x5a98a4
mov word [ebp - 0x230], ax
call fcn.00402110
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x230]
call fcn.00401ff0
call fcn.004265cf
test al, al
je 0x4277ac
invalid
salc
invalid
invalid
call fcn.0042606b
test al, al
je 0x4277ce
loope 0x427796
push edx
sbb eax, 0x7e52d581
idiv byte [ecx]
imul esp, dword [ebx + eax*4 + 0x10], 0x1664167e
xlatb
mov bl, 0xbd
js 0x427783
sub eax, ebp
dec edx
jmp 0x4277d1
call fcn.0042631d
test al, al
je 0x4277f3
invalid
inc eax
hlt
push 0xffffffffffffffff
xor ebx, ebx
lea eax, [ebp - 0x2a8]
push ebx
push eax
lea ecx, [ebp - 0x230]
call fcn.004051b0
mov esi, str..fcb
push esi
call fcn.004561c7
pop ecx
push eax
push esi
lea ecx, [ebp - 0x230]
call fcn.004052c0
mov eax, dword [ebp - 0x2b0]
test eax, eax
jle 0x427864
cdq
push edx
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.00428bf4
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.004051b0
push ebx
push 1
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 4
call fcn.004254f0
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x427947
call fcn.004262d8
test al, al
je 0x4278ab
inc dword [eax + eax*8 - 0x11b3e48c]
dec esp
out dx, al
insd dword es:[edi], dx
mov esi, 0x8b9f7381
dec esi
xor al, 0x5c
pop ss
sti
in al, 0xe0
pop eax
lodsb al, byte [esi]
jp 0x42788b
cmp al, 0xc2
xor eax, 0xbc1322db
and al, 0xe8
iretd
call fcn.0042617f
test al, al
je 0x4278d2
mov byte [0x995a9748], al
mov al, byte [0xf8cdc1f7]
mov bl, 0xb1
lea eax, [edx + 0x32]
stc
inc edx
xor bh, cl
das
daa
or al, 0x78
jle 0x4278c1
aad 0x3b
xor eax, 0xd688359f
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x427947
call fcn.0042617f
test al, al
je 0x427919
lodsb al, byte [esi]
dec ebx
inc ecx
sbb ebx, edi
cdq
xor edx, esp
cmpsd dword [esi], dword es:[edi]
jecxz 0x4278b4
lcall 0x9360, 0x7321e6b1
mov eax, 0xac748d88
xchg eax, eax
add edx, dword [edi]
fisttp dword [ebp + edi*8 - 0x75]
popfd
push eax
std
invalid
mov ebx, dword [ebp - 0x2b0]
cmp ebx, 0xa
jge 0x427a3e
push 0
inc ebx
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x2b0], ebx
call fcn.004254f0
jmp 0x42773f
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push dword [ebp - 0x2ac]
call fcn.0045687e
pop ecx
pop ecx
call fcn.00426431
test al, al
je 0x427989
pop esi
test ah, bl
xor byte [0x1db0a429], bh
mov eax, 0x34fd8243
mov dword [0x2420f8ea], eax
in eax, dx
push 0xfffffffffffffff8
mov ebp, eax
call 0xc0c7798f
call fcn.004261c4
test al, al
je 0x4279aa
sub eax, 0x1c061b79
mov esi, 0xa3930ec9
cmp eax, 0xded045e8
out 0xd8, al
sub al, 0xc6
insb byte es:[edi], dx
call 0xe91e8e28
lahf
call 0xc0c779b0
call fcn.0042624e
test al, al
sal byte [eax + ebx - 0x46], 0x2d
shl ah, cl
cmc
je 0x4279cb
mov edx, 0xf5e4d22d
inc edx
ja 0x4279b0
mov dl, 0x27
cmp eax, 0xc44307c2
inc ebp
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x230]
push eax
call esi
test eax, eax
je 0x427a0b
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 5
cmovae eax, dword [ebp - 0x230]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ebx, dword [ebp - 0x2ac]
push ebx
call esi
test eax, eax
je 0x427a3e
call fcn.004263ec
test al, al
je 0x427a33
push 0xe35fee6e
pop edx
mov dword [0xc6bbc163], eax
pop ds
wait
invalid
push 5
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
xor ebx, ebx
lea ecx, [ebp - 0x230]
xor esi, esi
push ebx
inc esi
push esi
call fcn.004254f0
push ebx
push esi
lea ecx, [ebp - 0x260]
call fcn.004254f0
push ebx
push esi
lea ecx, [ebp - 0x278]
call fcn.004254f0
push ebx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.004254f0
push ebx
push esi
lea ecx, [ebp - 0x248]
call fcn.004254f0
call fcn.0043ca64
ret