Function at 0x409a00
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x20
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x8ef52324
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
sub eax, 0x8a3b5c7d
je 0x409f83
jmp 0x409a2b
mov eax, dword [ebp - 0x24]
sub eax, 0x8ef52324
je 0x409b99
jmp 0x409a3e
mov eax, dword [ebp - 0x24]
sub eax, 0x94bac13f
je 0x409ec1
jmp 0x409a51
mov eax, dword [ebp - 0x24]
sub eax, 0x9b80b7fe
je 0x409e3c
jmp 0x409a64
mov eax, dword [ebp - 0x24]
sub eax, 0xa6fba528
je 0x409de4
jmp 0x409a77
mov eax, dword [ebp - 0x24]
sub eax, 0xa72a5adf
je 0x409e7b
jmp 0x409a8a
mov eax, dword [ebp - 0x24]
sub eax, 0xd872f26b
je 0x409e63
jmp 0x409a9d
mov eax, dword [ebp - 0x24]
sub eax, 0xddb55211
je 0x409c93
jmp 0x409ab0
mov eax, dword [ebp - 0x24]
sub eax, 0xefed3bd1
je 0x409c04
jmp 0x409ac3
mov eax, dword [ebp - 0x24]
sub eax, 0xf9a37810
je 0x409f34
jmp 0x409ad6
mov eax, dword [ebp - 0x24]
sub eax, 0x415a70
je 0x409f5c
jmp 0x409ae9
mov eax, dword [ebp - 0x24]
sub eax, 0x4710bf0
je 0x409e48
jmp 0x409afc
mov eax, dword [ebp - 0x24]
sub eax, 0x15e968e5
je 0x409cae
jmp 0x409b0f
mov eax, dword [ebp - 0x24]
sub eax, 0x233179ad
je 0x409cf4
jmp 0x409b22
mov eax, dword [ebp - 0x24]
sub eax, 0x322b43fa
je 0x409f68
jmp 0x409b35
mov eax, dword [ebp - 0x24]
sub eax, 0x37ef8e81
je 0x409d6d
jmp 0x409b48
mov eax, dword [ebp - 0x24]
sub eax, 0x3fa203aa
je 0x409f3b
jmp 0x409b5b
mov eax, dword [ebp - 0x24]
sub eax, 0x41290623
je 0x409d79
jmp 0x409b6e
mov eax, dword [ebp - 0x24]
sub eax, 0x4cb1abf3
je 0x409c87
jmp 0x409b81
mov eax, dword [ebp - 0x24]
sub eax, 0x5e9aa04e
je 0x409e6f
jmp 0x409b94
jmp 0x409f8a
mov ecx, dword [0x43659c]
mov eax, dword [0x436598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3fa203aa
mov ecx, 0xefed3bd1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x14], eax
mov ecx, dword [0x43659c]
mov eax, dword [0x436598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3fa203aa
mov ecx, 0x4cb1abf3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov dword [ebp - 0x1c], 0xddb55211
jmp 0x409f8a
mov edx, dword [ebp - 0x14]
mov eax, 0xa72a5adf
mov ecx, 0x15e968e5
cmp edx, 0xffffffff
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov eax, dword [0x43659c]
mov ecx, dword [0x436598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x415a70
mov ecx, 0x233179ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43659c]
mov eax, dword [0x436598]
mov edx, ecx
add edx, 0x574d0306
sub edx, 1
sub edx, 0x574d0306
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x415a70
mov ecx, 0x37ef8e81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov dword [ebp - 0x1c], 0x41290623
jmp 0x409f8a
mov ecx, dword [0x43659c]
mov eax, dword [0x436598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x322b43fa
mov ecx, 0xa6fba528
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [0x43659c]
mov ecx, dword [0x436598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x322b43fa
mov ecx, 0x9b80b7fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov dword [ebp - 0x1c], 0x4710bf0
jmp 0x409f8a
mov edx, dword [ebp - 0xc]
mov eax, 0xd872f26b
mov ecx, 0x5e9aa04e
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov dword [ebp - 0x1c], 0xa72a5adf
jmp 0x409f8a
mov dword [ebp - 0x1c], 0xa72a5adf
jmp 0x409f8a
mov eax, dword [0x43659c]
mov ecx, dword [0x436598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8a3b5c7d
mov ecx, 0x94bac13f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
mov ecx, dword [0x43659c]
mov eax, dword [0x436598]
mov edx, ecx
add edx, 0xfb3225dc
sub edx, 1
sub edx, 0xfb3225dc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8a3b5c7d
mov ecx, 0xf9a37810
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409f8a
add esp, 0x20
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x1c], 0xefed3bd1
jmp 0x409f8a
mov dword [ebp - 0x1c], 0x233179ad
jmp 0x409f8a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x1c], 0xa6fba528
jmp 0x409f8a
mov dword [ebp - 0x1c], 0x94bac13f
jmp 0x409a15