Function at 0x4149f0
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x20
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x82bbb36b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
sub eax, 0x82bbb36b
je 0x414b53
jmp 0x414a1e
mov eax, dword [ebp - 0x24]
sub eax, 0xaa03a680
je 0x414e3c
jmp 0x414a31
mov eax, dword [ebp - 0x24]
sub eax, 0xb04eb2d6
je 0x414e0b
jmp 0x414a44
mov eax, dword [ebp - 0x24]
sub eax, 0xb1faa492
je 0x414e2d
jmp 0x414a57
mov eax, dword [ebp - 0x24]
sub eax, 0xba6d577f
je 0x414b71
jmp 0x414a6a
mov eax, dword [ebp - 0x24]
sub eax, 0xe6595917
je 0x414dff
jmp 0x414a7d
mov eax, dword [ebp - 0x24]
sub eax, 0xf992df7d
je 0x414ca2
jmp 0x414a90
mov eax, dword [ebp - 0x24]
sub eax, 0x5fe6381
je 0x414d63
jmp 0x414aa3
mov eax, dword [ebp - 0x24]
sub eax, 0x11ae4a90
je 0x414d57
jmp 0x414ab6
mov eax, dword [ebp - 0x24]
sub eax, 0x14ad0d2e
je 0x414b9e
jmp 0x414ac9
mov eax, dword [ebp - 0x24]
sub eax, 0x1e4bbc6a
je 0x414b8c
jmp 0x414adc
mov eax, dword [ebp - 0x24]
sub eax, 0x2d1f3fc2
je 0x414ce8
jmp 0x414aef
mov eax, dword [ebp - 0x24]
sub eax, 0x37b65723
je 0x414db1
jmp 0x414b02
mov eax, dword [ebp - 0x24]
sub eax, 0x38b09e41
je 0x414e12
jmp 0x414b15
mov eax, dword [ebp - 0x24]
sub eax, 0x3a02fe04
je 0x414c96
jmp 0x414b28
mov eax, dword [ebp - 0x24]
sub eax, 0x5a6422fc
je 0x414c11
jmp 0x414b3b
mov eax, dword [ebp - 0x24]
sub eax, 0x620cffd3
je 0x414d3c
jmp 0x414b4e
jmp 0x414e43
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0xba6d577f
jmp 0x414e43
mov edx, dword [ebp - 0x18]
mov eax, 0xb04eb2d6
mov ecx, 0x1e4bbc6a
cmp edx, 0xffffffff
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0x14ad0d2e
jmp 0x414e43
mov ecx, dword [0x447574]
mov eax, dword [0x447570]
mov edx, ecx
add edx, 0x7fb5e2b8
sub edx, 1
sub edx, 0x7fb5e2b8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x38b09e41
mov ecx, 0x5a6422fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x10], eax
mov ecx, dword [0x447574]
mov eax, dword [0x447570]
mov edx, ecx
add edx, 0xd0550e57
sub edx, 1
sub edx, 0xd0550e57
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x38b09e41
mov ecx, 0x3a02fe04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov dword [ebp - 0x20], 0xf992df7d
jmp 0x414e43
mov eax, dword [0x447574]
mov ecx, dword [0x447570]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1faa492
mov ecx, 0x2d1f3fc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov eax, dword [ebp - 0x10]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov eax, dword [0x447574]
mov ecx, dword [0x447570]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1faa492
mov ecx, 0x620cffd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov dl, byte [ebp - 9]
mov eax, 0x11ae4a90
mov ecx, 0x5fe6381
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov dword [ebp - 0x20], 0xb04eb2d6
jmp 0x414e43
mov eax, dword [0x447574]
mov ecx, dword [0x447570]
mov edx, eax
sub edx, 0xa1363af1
sub edx, 1
add edx, 0xa1363af1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa03a680
mov ecx, 0x37b65723
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov eax, dword [0x447574]
mov ecx, dword [0x447570]
mov edx, eax
sub edx, 0xff7c6428
sub edx, 1
add edx, 0xff7c6428
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa03a680
mov ecx, 0xe6595917
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x414e43
mov dword [ebp - 0x20], 0xb04eb2d6
jmp 0x414e43
add esp, 0x20
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x20], 0x5a6422fc
jmp 0x414e43
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], 0x2d1f3fc2
jmp 0x414e43
mov dword [ebp - 0x20], 0x37b65723
jmp 0x414a08