Function at 0x467555
Capabilities:
Check if file exists
Delete file
Get common file path
Set registry value

Disassembly:
push 0x27c
mov eax, 0x5c4389
call fcn.0058ec94
lea esi, [ebp - 0x288]
call fcn.0048e9e0
xor ebx, ebx
mov dword [ebp - 4], ebx
xor eax, eax
push 0x208
mov word [ebp - 0x220], ax
lea eax, [ebp - 0x21e]
push ebx
push eax
call fcn.00586790
add esp, 0xc
push 0x104
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.004085b5
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x268]
push 0x68e400
push ecx
mov ecx, eax
call fcn.004116ea
pop ecx
pop ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x25c]
call fcn.004085f6
push dword [ebp - 0x268]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4678e9
lea eax, [ebp - 0x264]
push eax
call fcn.00487d50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x25c]
mov dword [esp], 0x68c34c
push ecx
mov ecx, eax
call fcn.004116ea
pop ecx
pop ecx
mov byte [ebp - 4], 5
push dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x25c]
call fcn.004085f6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.004085f6
lea eax, [ebp - 0x264]
push eax
call fcn.00487d50
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x25c]
mov dword [esp], 0x68c358
push ecx
mov ecx, eax
call fcn.004116ea
pop ecx
pop ecx
mov byte [ebp - 4], 7
push dword [eax]
call esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x25c]
call fcn.004085f6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.004085f6
lea eax, [ebp - 0x264]
push eax
call fcn.00487d50
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x25c]
mov dword [esp], 0x68c36c
push ecx
mov ecx, eax
call fcn.004116ea
pop ecx
pop ecx
mov byte [ebp - 4], 9
push dword [eax]
call esi
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x25c]
call fcn.004085f6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.004085f6
push dword [ebp - 0x268]
call esi
lea ecx, [ebp - 0x258]
call fcn.00428caf
mov byte [ebp - 4], 0xa
xor edi, edi
lea eax, [ebp - 0x258]
call fcn.0042b255
mov esi, eax
lea eax, [ebp - 0x280]
push eax
mov byte [ebp - 0x25d], 0
call fcn.0040fdb0
mov byte [ebp - 4], 0xb
cmp word [esi], bx
je 0x4678c7
mov ecx, str.msbtsc
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x467753
cmp dx, bx
je 0x46774f
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x467753
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x46772d
xor eax, eax
jmp 0x467758
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x467765
mov byte [ebp - 0x25d], 1
jmp 0x4677ae
push esi
lea eax, [ebp - 0x25c]
push eax
call fcn.004085b5
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x280]
call fcn.00416ae3
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x25c]
call fcn.004085f6
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x46779c
sub eax, edx
sar eax, 1
lea edi, [edi + eax + 1]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x4677b3
sub eax, edx
sar eax, 1
lea esi, [esi + eax*2 + 2]
cmp word [esi], bx
jne 0x467726
cmp byte [ebp - 0x25d], 0
je 0x4678c7
inc edi
push edi
lea esi, [ebp - 0x23c]
call fcn.0042b233
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x274]
mov dword [ebp - 0x25c], ebx
sar eax, 2
mov dword [ebp - 0x264], ebx
test eax, eax
jbe 0x467887
xor edi, edi
lea eax, [ebp - 0x23c]
call fcn.0042b255
mov edi, dword [ebp - 0x264]
mov ebx, eax
add ebx, dword [ebp - 0x25c]
lea esi, [ebp - 0x280]
call fcn.0041e10a
mov eax, dword [eax]
movzx ecx, word [eax]
inc eax
mov word [ebx], cx
inc eax
inc ebx
inc ebx
test cx, cx
jne 0x467833
mov edi, dword [ebp - 0x264]
lea esi, [ebp - 0x280]
call fcn.0041e10a
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
mov ecx, dword [ebp - 0x25c]
inc dword [ebp - 0x264]
lea eax, [ecx + eax*2 + 2]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x274]
sar eax, 2
cmp dword [ebp - 0x264], eax
jb 0x46780b
xor ebx, ebx
mov eax, dword [ebp - 0x228]
add eax, eax
push eax
xor edi, edi
lea eax, [ebp - 0x23c]
call fcn.0042b255
push eax
push 7
push str.BootExecute
push str.SYSTEMCurrentControlSetControlSession_Manager
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov byte [ebp - 4], 0xb
push ebx
push 1
lea esi, [ebp - 0x23c]
call fcn.00409da6
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x280]
push eax
call fcn.0041e0e0
mov byte [ebp - 4], 3
push ebx
push 1
lea esi, [ebp - 0x258]
call fcn.00409da6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x268]
call fcn.004085f6
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x288]
call fcn.0048ea20
call fcn.0058ed17
ret