Function at 0x409a40
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], 0x8efd21cb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
sub eax, 0x8efd21cb
je 0x409b64
jmp 0x409a68
mov eax, dword [ebp - 0x20]
sub eax, 0xa0f3b28e
je 0x409b82
jmp 0x409a7b
mov eax, dword [ebp - 0x20]
sub eax, 0xad9fa538
je 0x409d51
jmp 0x409a8e
mov eax, dword [ebp - 0x20]
sub eax, 0xae82fedc
je 0x409d5d
jmp 0x409aa1
mov eax, dword [ebp - 0x20]
sub eax, 0xb404e79e
je 0x409c82
jmp 0x409ab4
mov eax, dword [ebp - 0x20]
sub eax, 0xb628502b
je 0x409d90
jmp 0x409ac7
mov eax, dword [ebp - 0x20]
sub eax, 0xc2d8c9e0
je 0x409d84
jmp 0x409ada
mov eax, dword [ebp - 0x20]
sub eax, 0xcb9f4151
je 0x409c64
jmp 0x409aed
mov eax, dword [ebp - 0x20]
sub eax, 0xde278a47
je 0x409bc8
jmp 0x409b00
mov eax, dword [ebp - 0x20]
sub eax, 0xdee3c388
je 0x409c49
jmp 0x409b13
mov eax, dword [ebp - 0x20]
sub eax, 0xfa36e3b8
je 0x409d97
jmp 0x409b26
mov eax, dword [ebp - 0x20]
sub eax, 0x1ef1f8b1
je 0x409da6
jmp 0x409b39
mov eax, dword [ebp - 0x20]
sub eax, 0x7166faa3
je 0x409cf5
jmp 0x409b4c
mov eax, dword [ebp - 0x20]
sub eax, 0x74c7725f
je 0x409d78
jmp 0x409b5f
jmp 0x409db0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0xa0f3b28e
jmp 0x409db0
mov eax, dword [0x43354c]
mov ecx, dword [0x433548]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa36e3b8
mov ecx, 0xde278a47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409db0
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x43354c]
mov eax, dword [0x433548]
mov edx, ecx
add edx, 0x6039820
sub edx, 1
sub edx, 0x6039820
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa36e3b8
mov ecx, 0xdee3c388
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409db0
mov dl, byte [ebp - 0x11]
mov eax, 0xb628502b
mov ecx, 0xcb9f4151
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409db0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0xb404e79e
jmp 0x409db0
mov ecx, dword [0x43354c]
mov eax, dword [0x433548]
mov edx, ecx
sub edx, 0xcebfda05
sub edx, 1
add edx, 0xcebfda05
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1ef1f8b1
mov ecx, 0x7166faa3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409db0
mov eax, dword [ebp - 0x10]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov eax, dword [0x43354c]
mov ecx, dword [0x433548]
mov edx, eax
sub edx, 0x3a1aa797
sub edx, 1
add edx, 0x3a1aa797
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ef1f8b1
mov ecx, 0xad9fa538
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409db0
mov dword [ebp - 0x1c], 0xae82fedc
jmp 0x409db0
mov dl, byte [ebp - 9]
mov eax, 0x74c7725f
mov ecx, 0xc2d8c9e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x409db0
mov dword [ebp - 0x1c], 0xb628502b
jmp 0x409db0
mov dword [ebp - 0x1c], 0xb628502b
jmp 0x409db0
add esp, 0x1c
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0xde278a47
jmp 0x409db0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], 0x7166faa3
jmp 0x409a52