Function at 0x41fde0
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59ea52
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x627a40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x2ac], eax
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42059d
call fcn.004360f0
test al, al
je 0x41fe49
or al, 0x48
hlt
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x41fe8a
call fcn.00436550
test al, al
je 0x42059d
xor ah, al
xor eax, 0x37ddc417
ret 0x6b4d
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00576f50
add esp, 0xc
lea ecx, [ebp - 0x290]
push 0x619488
call fcn.004039f0
mov dword [ebp - 4], 0
call fcn.00435f30
test al, al
je 0x41fed1
test al, 0xf5
wait
sub al, 0xef
xor eax, 0x63e353b3
daa
mov byte [ebp - 0x17f11105], 0x7a
add word [eax], ax
call fcn.00436550
test al, al
je 0x41fef9
js 0x41ff21
mov al, 0x41
xchg bp, ax
jl 0x41fed8
push esp
mov bl, 0x65
pop eax
and edx, ebp
hlt
call fcn.004362b0
test al, al
je 0x41ff18
wait
inc edi
arpl word [0x8b4f5b9d], di
retf 0x5921
bound ecx, qword [esi - 0x2177a73]
invalid
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
add dword [eax], eax
add bh, bh
adc eax, sym.imp.KERNEL32.dll_GetTempPathW
mov edx, dword [ebp - 0x2ac]
lea ecx, [ebp - 0x278]
call fcn.004228e0
mov byte [ebp - 4], 1
call fcn.004360f0
test al, al
je 0x41ff5b
pop esp
cpuid
mov ss, word [ecx + 0x66]
jae 0x41ff72
add byte [edx + 0x2d6e9113], ah
rol byte [edx - 0x17d0c45e], cl
mov al, 0x60
add dword [eax], eax
call fcn.00436010
test al, al
je 0x41ff7f
or al, 0xb6
in eax, 0x20
lea edx, [edi + 0x20]
enter 0xfffffffffffff6da, 0xffffffffffffffae
xor byte [ecx], bh
and eax, 0xe7108ff2
dec esp
mov esi, 0x28071250
sbb byte [esi + 0x601ce86f], ch
add dword [eax], eax
invalid
call fcn.00435fa0
test al, al
je 0x41ffa1
mov dh, 0x66
jnp 0x41ffc8
sbb ebx, eax
jae 0x41ff16
mov ebx, 0x9721edb4
pushal
adc esp, dword [esi + 0x4cdce849]
popal
xchg ecx, eax
clc
salc
int1
mov edx, dword [ebp - 0x2ac]
lea ecx, [ebp - 0x260]
call fcn.00422b40
mov byte [ebp - 4], 2
call fcn.00436240
test al, al
je 0x41ffd3
and byte [edi], dl
xor dword [ecx], eax
mov ah, 0x81
xchg dword [ecx + 0x49], ebp
xchg esp, eax
inc edi
invalid
xor dword [eax + 0x74], edi
mov word [ebp - 0x2176b], cs
dec dword [ebp - 0x24773]
invalid
lea edx, [ebp - 0x218]
lea ecx, [ebp - 0x248]
call fcn.00422b40
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 3
call fcn.00429250
call fcn.004365c0
test al, al
je 0x42000c
xchg esi, eax
outsd dx, dword [esi]
push 0xffffffffffffffbf
mov esi, 0x9eca4582
in al, 0xc1
insd dword es:[edi], dx
jno 0x41ffcf
retf
call fcn.00436080
test al, al
je 0x420035
and ebx, eax
std
push ecx
mov al, 0xae
mov ebp, 0xbbec2095
or eax, 0x40ad95f7
popfd
scasb al, byte es:[edi]
das
cmp esi, ecx
push esp
daa
cmp edx, ebp
mov eax, ebp
mov al, 0x57
mov esp, 0x6206e823
add dword [eax], eax
call fcn.00436240
test al, al
je 0x42005c
inc esi
xchg ebp, eax
loopne 0x42007a
xor ah, al
push ecx
mov bl, 0xbb
xor eax, 0x232b4754
sar dword ss:[ebx + 0x27], 0x5f
aas
add eax, 0x8b1a8949
les edi, [eax - 0x72f630be]
lea edi, [eax - 0x17000003]
jmp 0x8d4200f9
lea ecx, [ebp - 0x248]
call fcn.00429250
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x248]
call fcn.00404a90
test eax, eax
jne 0x4200e8
sal byte [ebp + 0x6b], 0xe8
pop esi
add dword [eax], eax
call fcn.00435ec0
test al, al
je 0x420097
invalid
cmp word [ebp - 0x218], 0
jne 0x4200bb
xor ecx, ecx
lea eax, [ebp - 0x218]
push ecx
push eax
lea ecx, [ebp - 0x290]
call fcn.00403d10
jmp 0x42015f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4200c4
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x290]
call fcn.00403d10
jmp 0x42015f
call fcn.00435e50
test al, al
je 0x42010e
nop
xchg ecx, eax
aad 0xe8
mov ebp, 0x4ef5714e
out 0x84, al
jnp 0x42009f
xor edi, ecx
salc
sbb esp, dword [edi + 0x32fa76f2]
and al, 0x5e
cld
arpl word [ecx + 0x643de880], cx
add dword [eax], eax
call fcn.00436550
test al, al
je 0x420137
sub eax, 0x51bbca4a
daa
xchg dword [edi + edx*2 - 0x7b41926b], ecx
add dh, byte [esi + 0x33]
das
invalid
mov edx, dword [ebp - 0x2ac]
lea ecx, [ebp - 0x2a8]
call fcn.00422cf0
push eax
lea ecx, [ebp - 0x290]
call fcn.00403970
lea ecx, [ebp - 0x2a8]
call fcn.00402d00
mov dword [ebp - 0x2b0], 0
call fcn.00436010
test al, al
je 0x420190
adc eax, 0x578e3d6f
mov ecx, 0x3e511208
test dword [edx - 0x36524bed], 0xa5c89606
push edi
invalid
xor eax, eax
mov dword [ebp - 0x21c], 7
push eax
push 0x619488
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00403d10
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x230]
call fcn.00403e10
call fcn.00435f30
test al, al
je 0x420200
pushal
xchg dword [edx + 0x63790af3], edi
inc ebx
cmp dl, dh
xor eax, dword [edi]
dec esp
sub al, byte [edi - 0x1afb7258]
outsb dx, byte [esi]
inc ecx
aad 0x4a
arpl word [ebx + 0x79], bp
dec ebp
jnp 0x420267
enter 0xffffffffffffe87c, 0xffffffffffffffcb
pop edi
add dword [eax], eax
call fcn.004361d0
test al, al
je 0x420222
cmp ecx, ebx
int 0xda
mov edx, 0x472d720e
or dh, byte [ebp - 0x2ea7c1d8]
out 0x3b, al
jbe 0x420241
or eax, 0xfe11c5de
aam 0xe8
cdq
arpl word [ecx], ax
add byte [eax + eax*8 + 0x76031c74], al
aaa
call fcn.004365c0
test al, al
je 0x420247
add esi, dword [esi + 0x37]
invalid
jle 0x4202bf
cmp ebp, dword [ebx + 0x68]
pop ss
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x230]
call fcn.0040bf30
push 4
push str..fcb
lea ecx, [ebp - 0x230]
call fcn.0040be00
mov eax, dword [ebp - 0x2b0]
test eax, eax
jle 0x4202c0
std
invalid
cdq
lea ecx, [ebp - 0x2a8]
push edx
push eax
call fcn.00421850
add esp, 8
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.0040bf30
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x294]
cmp eax, 8
jb 0x4202c0
inc eax
lea ecx, [ebp - 0x2a8]
push eax
push dword [ebp - 0x2a8]
call fcn.00404090
inc dword [ebx - 0x21b43]
dec dword [eax]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4203b6
call fcn.00436550
test al, al
je 0x420307
stosb byte es:[edi], al
dec esp
lahf
xchg ch, bh
cld
jecxz 0x4202fb
retf 0x2958
nop
push ebx
mov edx, 0xed78a974
bnd call 0x852a80ab
pushal
add dword [eax], eax
call fcn.00436390
test al, al
je 0x42032e
add ebp, dword [ebp - 0xedbff7a]
sub edi, dword [edx + 0x3a]
push edx
xor dl, dh
xchg ebx, eax
bound esp, qword [eax + edi*2]
jmp 0x7d28596f
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4203b6
call fcn.00436390
pushal
add dword [eax], eax
test al, al
je 0x420375
jle 0x42034e
mov dword [edx - 0x34], ebx
nop
sbb byte [ecx], dl
mov esi, 0x7dfd4bc5
std
cmpsd dword [esi], dword es:[edi]
popal
mov edx, 0x35da3c7b
add cl, dh
ljmp 0x8b21
mov ebx, dword [ebp - 0x2b0]
cmp ebx, 0xa
jge 0x4204b0
inc ebx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2b0], ebx
cmp eax, 8
jb 0x420190
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00404090
jmp 0x420190
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push dword [ebp - 0x2ac]
call fcn.00584155
add esp, 8
call fcn.00436780
test al, al
je 0x4203f9
push es
pop edx
loop 0x42042e
sub dword [0x98620f3], edx
fdiv qword [ebp - 0x60]
mov edx, dword [ebp - 0x5e7eb80e]
mov esi, 0xe8b53132
add ah, byte [eax + 1]
add byte [eax + eax*8 - 0x5b6fe78c], al
call fcn.00436400
test al, al
je 0x42041a
nop
movsb byte es:[edi], byte [esi]
xor ch, byte [ecx - 0x7f]
mov al, 0x6e
call 0xcfb5ad4a
jb 0x4203e6
mov al, byte [0x326e1d41]
out 0xa5, eax
jg 0x420463
call fcn.00435de0
test al, al
je 0x42043b
jae 0x420415
int 0x6c
or eax, dword [edi]
in al, dx
pop dword [esi]
push es
xchg ebp, eax
fiadd word [ecx + 8]
test edx, esp
adc ecx, dword [ebx]
mov al, 0x70
cmpsd dword [esi], dword es:[edi]
inc ecx
or byte [ebp - 0x4ff4ec1e], al
jo 0x4203de
imul esp, edx, 0xbd832306
in al, 0xfd
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x230]
push eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x42047d
test eax, edx
std
invalid
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 5
cmovae eax, dword [ebp - 0x230]
push 0
push eax
call ebx
mov ebp, 0xfffffde4
or byte [ebp - 0x22f7b], cl
jmp [edx + 5]
push dword [ebp - 0x2ac]
call esi
test eax, eax
je 0x4204b0
call fcn.00436710
test al, al
je 0x4204a4
push edx
loop 0x42042b
aad 0x9e
jmp 0x420443
push 5
push 0
push dword [ebp - 0x2ac]
call ebx
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x4204ce
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00404090
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x4204ec
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00404090
xor eax, eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x238], 0
cmp eax, 8
jb 0x420527
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00404090
xor eax, eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x250], 0
cmp eax, 8
jb 0x420562
inc eax
lea ecx, [ebp - 0x278]
push eax
push dword [ebp - 0x278]
call fcn.00404090
xor eax, eax
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x268], 0
cmp eax, 8
jb 0x42059d
inc eax
lea ecx, [ebp - 0x290]
push eax
push dword [ebp - 0x290]
call fcn.00404090
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00570ea9
mov esp, ebp
pop ebp
ret