Function at 0x418100
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x30
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov eax, dword [0x4a4080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
mov edx, ecx
add edx, 0x3e0b2688
sub edx, 1
sub edx, 0x3e0b2688
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x2a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x29], al
mov dword [ebp - 0x30], 0x20c91999
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
sub eax, 0x82d76292
je 0x41861d
jmp 0x41816e
mov eax, dword [ebp - 0x38]
sub eax, 0x92cccbaa
je 0x41880d
jmp 0x418181
mov eax, dword [ebp - 0x38]
sub eax, 0x9372a9a0
je 0x418bb3
jmp 0x418194
mov eax, dword [ebp - 0x38]
sub eax, 0x97c7b85d
je 0x418796
jmp 0x4181a7
mov eax, dword [ebp - 0x38]
sub eax, 0xaab594a0
je 0x418b7b
jmp 0x4181ba
mov eax, dword [ebp - 0x38]
sub eax, 0xb161cacf
je 0x418ac2
jmp 0x4181cd
mov eax, dword [ebp - 0x38]
sub eax, 0xb5871e19
je 0x418548
jmp 0x4181e0
mov eax, dword [ebp - 0x38]
sub eax, 0xbb75f175
je 0x418528
jmp 0x4181f3
mov eax, dword [ebp - 0x38]
sub eax, 0xbea8e73c
je 0x418611
jmp 0x418206
mov eax, dword [ebp - 0x38]
sub eax, 0xc1f28456
je 0x4187a2
jmp 0x418219
mov eax, dword [ebp - 0x38]
sub eax, 0xcbb013b9
je 0x418b87
jmp 0x41822c
mov eax, dword [ebp - 0x38]
sub eax, 0xcd0cf178
je 0x418c95
jmp 0x41823f
mov eax, dword [ebp - 0x38]
sub eax, 0xd0e79206
je 0x4188d0
jmp 0x418252
mov eax, dword [ebp - 0x38]
sub eax, 0xd8ce2f81
je 0x418ccb
jmp 0x418265
mov eax, dword [ebp - 0x38]
sub eax, 0xdb103f28
je 0x418982
jmp 0x418278
mov eax, dword [ebp - 0x38]
sub eax, 0xe24c0808
je 0x418a03
jmp 0x41828b
mov eax, dword [ebp - 0x38]
sub eax, 0xe2650f7d
je 0x418cda
jmp 0x41829e
mov eax, dword [ebp - 0x38]
sub eax, 0xf1e07df7
je 0x418ce6
jmp 0x4182b1
mov eax, dword [ebp - 0x38]
sub eax, 0xfa1f6dfb
je 0x418876
jmp 0x4182c4
mov eax, dword [ebp - 0x38]
sub eax, 0xfea4e137
je 0x4184dc
jmp 0x4182d7
mov eax, dword [ebp - 0x38]
sub eax, 0x197b8582
je 0x418ca1
jmp 0x4182ea
mov eax, dword [ebp - 0x38]
sub eax, 0x1a284d8a
je 0x418a7c
jmp 0x4182fd
mov eax, dword [ebp - 0x38]
sub eax, 0x20c91999
je 0x418491
jmp 0x418310
mov eax, dword [ebp - 0x38]
sub eax, 0x22ed3b05
je 0x418b98
jmp 0x418323
mov eax, dword [ebp - 0x38]
sub eax, 0x25eaa0c9
je 0x418934
jmp 0x418336
mov eax, dword [ebp - 0x38]
sub eax, 0x2743756c
je 0x418596
jmp 0x418349
mov eax, dword [ebp - 0x38]
sub eax, 0x2c3f073e
je 0x4186d7
jmp 0x41835c
mov eax, dword [ebp - 0x38]
sub eax, 0x2eb19c7f
je 0x418cb0
jmp 0x41836f
mov eax, dword [ebp - 0x38]
sub eax, 0x31214784
je 0x4186cb
jmp 0x418382
mov eax, dword [ebp - 0x38]
sub eax, 0x3791e457
je 0x418a36
jmp 0x418395
mov eax, dword [ebp - 0x38]
sub eax, 0x3df7923d
je 0x418534
jmp 0x4183a8
mov eax, dword [ebp - 0x38]
sub eax, 0x43639858
je 0x418c89
jmp 0x4183bb
mov eax, dword [ebp - 0x38]
sub eax, 0x46929d75
je 0x41871d
jmp 0x4183ce
mov eax, dword [ebp - 0x38]
sub eax, 0x47fc90d8
je 0x418b2d
jmp 0x4183e1
mov eax, dword [ebp - 0x38]
sub eax, 0x53d7c497
je 0x41885b
jmp 0x4183f4
mov eax, dword [ebp - 0x38]
sub eax, 0x55f60d2d
je 0x418928
jmp 0x418407
mov eax, dword [ebp - 0x38]
sub eax, 0x5c4b4e70
je 0x41866b
jmp 0x41841a
mov eax, dword [ebp - 0x38]
sub eax, 0x5c692c26
je 0x418cf5
jmp 0x41842d
mov eax, dword [ebp - 0x38]
sub eax, 0x5d19728c
je 0x418a2a
jmp 0x418440
mov eax, dword [ebp - 0x38]
sub eax, 0x6be93a2d
je 0x41888a
jmp 0x418453
mov eax, dword [ebp - 0x38]
sub eax, 0x7285adc8
je 0x418d01
jmp 0x418466
mov eax, dword [ebp - 0x38]
sub eax, 0x77dbe25f
je 0x418c1e
jmp 0x418479
mov eax, dword [ebp - 0x38]
sub eax, 0x7b9ce6b2
je 0x418a0f
jmp 0x41848c
jmp 0x418d08
mov bl, byte [ebp - 0x2a]
mov dh, byte [ebp - 0x29]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd0cf178
mov ecx, 0xfea4e137
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcd0cf178
mov ecx, 0xbb75f175
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0x3df7923d
jmp 0x418d08
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov dword [eax], ecx
mov dword [ebp - 0x30], 0xb5871e19
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
mov edx, eax
sub edx, 0x503261fc
sub edx, 1
add edx, 0x503261fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x197b8582
mov ecx, 0x2743756c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
mov edx, ecx
sub edx, 0xd5c5cfb4
sub edx, 1
add edx, 0xd5c5cfb4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x197b8582
mov ecx, 0xbea8e73c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0x82d76292
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
mov edx, eax
sub edx, 0x1148c0a3
sub edx, 1
add edx, 0x1148c0a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2eb19c7f
mov ecx, 0x5c4b4e70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [ebp - 0x24]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x20], eax
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
mov edx, eax
add edx, 0x168375c1
sub edx, 1
sub edx, 0x168375c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2eb19c7f
mov ecx, 0x31214784
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0x2c3f073e
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8ce2f81
mov ecx, 0x46929d75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [ebp - 0x20]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x19], al
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd8ce2f81
mov ecx, 0x97c7b85d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0xc1f28456
jmp 0x418d08
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe2650f7d
mov ecx, 0x92cccbaa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
mov edx, eax
sub edx, 0xf5896bbe
sub edx, 1
add edx, 0xf5896bbe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe2650f7d
mov ecx, 0x53d7c497
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dl, byte [ebp - 0x19]
mov eax, 0xcbb013b9
mov ecx, 0xfa1f6dfb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], 0x6be93a2d
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22ed3b05
mov ecx, 0xd0e79206
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x14], eax
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22ed3b05
mov ecx, 0x55f60d2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0x25eaa0c9
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
mov edx, eax
sub edx, 0x99709360
sub edx, 1
add edx, 0x99709360
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf1e07df7
mov ecx, 0xdb103f28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [ebp - 0x14]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xd], al
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
mov edx, ecx
add edx, 0x9fd1e612
sub edx, 1
sub edx, 0x9fd1e612
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf1e07df7
mov ecx, 0xe24c0808
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0x7b9ce6b2
jmp 0x418d08
mov dl, byte [ebp - 0xd]
mov eax, 0x5d19728c
mov ecx, 0x3791e457
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0xcbb013b9
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9372a9a0
mov ecx, 0x1a284d8a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c692c26
mov ecx, 0xb161cacf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5c692c26
mov ecx, 0x47fc90d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov eax, dword [0x4a56b8]
mov ecx, dword [0x4a56b4]
mov edx, eax
sub edx, 0x353a66dd
sub edx, 1
add edx, 0x353a66dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9372a9a0
mov ecx, 0xaab594a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0xcbb013b9
jmp 0x418d08
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0048b3b0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x30], 0xd0e79206
jmp 0x418d08
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7285adc8
mov ecx, 0x77dbe25f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov ecx, dword [0x4a56b8]
mov eax, dword [0x4a56b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7285adc8
mov ecx, 0x43639858
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418d08
mov dword [ebp - 0x30], 0x1a284d8a
jmp 0x418d08
mov dword [ebp - 0x30], 0xfea4e137
jmp 0x418d08
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], 0x2743756c
jmp 0x418d08
mov eax, dword [ebp - 0x24]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x30], 0x5c4b4e70
jmp 0x418d08
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], 0x46929d75
jmp 0x418d08
mov dword [ebp - 0x30], 0x92cccbaa
jmp 0x418d08
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0xdb103f28
jmp 0x418d08
mov dword [ebp - 0x30], 0xb161cacf
jmp 0x418d08
mov dword [ebp - 0x30], 0x77dbe25f
jmp 0x418158