Function at 0x418360
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x30
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov eax, dword [0x4bd080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
mov edx, ecx
add edx, 0xa3294fae
sub edx, 1
sub edx, 0xa3294fae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x2a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x29], al
mov dword [ebp - 0x30], 0x828155fc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
sub eax, 0x828155fc
je 0x4186b8
jmp 0x4183ce
mov eax, dword [ebp - 0x38]
sub eax, 0x82c0334d
je 0x418a1f
jmp 0x4183e1
mov eax, dword [ebp - 0x38]
sub eax, 0x83e101ed
je 0x418d4b
jmp 0x4183f4
mov eax, dword [ebp - 0x38]
sub eax, 0x84a3fec1
je 0x418b41
jmp 0x418407
mov eax, dword [ebp - 0x38]
sub eax, 0x8657f353
je 0x41873e
jmp 0x41841a
mov eax, dword [ebp - 0x38]
sub eax, 0x8925f113
je 0x418798
jmp 0x41842d
mov eax, dword [ebp - 0x38]
sub eax, 0x8d31f878
je 0x4188e0
jmp 0x418440
mov eax, dword [ebp - 0x38]
sub eax, 0x8f16aeb8
je 0x418c51
jmp 0x418453
mov eax, dword [ebp - 0x38]
sub eax, 0x92d332f4
je 0x418752
jmp 0x418466
mov eax, dword [ebp - 0x38]
sub eax, 0x995273ac
je 0x418c5d
jmp 0x418479
mov eax, dword [ebp - 0x38]
sub eax, 0x9f755a86
je 0x418dbe
jmp 0x41848c
mov eax, dword [ebp - 0x38]
sub eax, 0xa626c4b8
je 0x4189d9
jmp 0x41849f
mov eax, dword [ebp - 0x38]
sub eax, 0xa7043d35
je 0x418ca3
jmp 0x4184b2
mov eax, dword [ebp - 0x38]
sub eax, 0xa9cbfdbf
je 0x4189cd
jmp 0x4184c5
mov eax, dword [ebp - 0x38]
sub eax, 0xad374a50
je 0x418e11
jmp 0x4184d8
mov eax, dword [ebp - 0x38]
sub eax, 0xb3ac30f6
je 0x418e20
jmp 0x4184eb
mov eax, dword [ebp - 0x38]
sub eax, 0xb513e78a
je 0x418b4d
jmp 0x4184fe
mov eax, dword [ebp - 0x38]
sub eax, 0xb71c046a
je 0x418b6b
jmp 0x418511
mov eax, dword [ebp - 0x38]
sub eax, 0xc2e12960
je 0x418bb1
jmp 0x418524
mov eax, dword [ebp - 0x38]
sub eax, 0xcaf67309
je 0x418732
jmp 0x418537
mov eax, dword [ebp - 0x38]
sub eax, 0xd3e72f62
je 0x418c36
jmp 0x41854a
mov eax, dword [ebp - 0x38]
sub eax, 0xd6b28ca1
je 0x418e05
jmp 0x41855d
mov eax, dword [ebp - 0x38]
sub eax, 0xe01c5b58
je 0x418aeb
jmp 0x418570
mov eax, dword [ebp - 0x38]
sub eax, 0xefd95713
je 0x418813
jmp 0x418583
mov eax, dword [ebp - 0x38]
sub eax, 0x9f87874
je 0x418a65
jmp 0x418596
mov eax, dword [ebp - 0x38]
sub eax, 0xecff1f7
je 0x418df6
jmp 0x4185a9
mov eax, dword [ebp - 0x38]
sub eax, 0x133a29c0
je 0x418a80
jmp 0x4185bc
mov eax, dword [ebp - 0x38]
sub eax, 0x20cd2adf
je 0x418cf1
jmp 0x4185cf
mov eax, dword [ebp - 0x38]
sub eax, 0x20d88a55
je 0x4186de
jmp 0x4185e2
mov eax, dword [ebp - 0x38]
sub eax, 0x265a90e7
je 0x4188d4
jmp 0x4185f5
mov eax, dword [ebp - 0x38]
sub eax, 0x2b79dd53
je 0x418e3b
jmp 0x418608
mov eax, dword [ebp - 0x38]
sub eax, 0x33229bbe
je 0x418dcf
jmp 0x41861b
mov eax, dword [ebp - 0x38]
sub eax, 0x3469de41
je 0x41894c
jmp 0x41862e
mov eax, dword [ebp - 0x38]
sub eax, 0x3e10aef2
je 0x418dde
jmp 0x418641
mov eax, dword [ebp - 0x38]
sub eax, 0x3f62b8c3
je 0x418861
jmp 0x418654
mov eax, dword [ebp - 0x38]
sub eax, 0x3f90dd53
je 0x418dea
jmp 0x418667
mov eax, dword [ebp - 0x38]
sub eax, 0x566d8357
je 0x418e2f
jmp 0x41867a
mov eax, dword [ebp - 0x38]
sub eax, 0x5a280290
je 0x4188fe
jmp 0x41868d
mov eax, dword [ebp - 0x38]
sub eax, 0x5bb5d7ef
je 0x418c2a
jmp 0x4186a0
mov eax, dword [ebp - 0x38]
sub eax, 0x7984fd8f
je 0x418cfd
jmp 0x4186b3
jmp 0x418e42
mov al, byte [ebp - 0x2a]
mov cl, byte [ebp - 0x29]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e10aef2
mov ecx, 0x20d88a55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
mov edx, eax
sub edx, 0x60006454
sub edx, 1
add edx, 0x60006454
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e10aef2
mov ecx, 0xcaf67309
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0x8657f353
jmp 0x418e42
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov dword [eax], ecx
mov dword [ebp - 0x30], 0x92d332f4
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x33229bbe
mov ecx, 0x8925f113
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
mov edx, ecx
add edx, 0x131abfd7
sub edx, 1
sub edx, 0x131abfd7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x33229bbe
mov ecx, 0xefd95713
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
mov edx, eax
add edx, 0x8992f3c0
sub edx, 1
sub edx, 0x8992f3c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3f90dd53
mov ecx, 0x3f62b8c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
mov edx, ecx
add edx, 0xa96bdfc0
sub edx, 1
sub edx, 0xa96bdfc0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3f90dd53
mov ecx, 0x265a90e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0x8d31f878
jmp 0x418e42
mov eax, dword [ebp - 0x24]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0x5a280290
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
mov edx, eax
sub edx, 0xc551e4b7
sub edx, 1
add edx, 0xc551e4b7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xecff1f7
mov ecx, 0x3469de41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [ebp - 0x20]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x19], al
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
mov edx, ecx
add edx, 0xbba3886c
sub edx, 1
sub edx, 0xbba3886c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xecff1f7
mov ecx, 0xa9cbfdbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0xa626c4b8
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6b28ca1
mov ecx, 0x82c0334d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6b28ca1
mov ecx, 0x9f87874
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dl, byte [ebp - 0x19]
mov eax, 0x7984fd8f
mov ecx, 0x133a29c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xad374a50
mov ecx, 0xe01c5b58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
mov edx, eax
sub edx, 0x7b776e73
sub edx, 1
add edx, 0x7b776e73
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad374a50
mov ecx, 0x84a3fec1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0xb513e78a
jmp 0x418e42
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x30], 0xb71c046a
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb3ac30f6
mov ecx, 0xc2e12960
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [ebp - 0x14]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xd], al
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb3ac30f6
mov ecx, 0x5bb5d7ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0xd3e72f62
jmp 0x418e42
mov dl, byte [ebp - 0xd]
mov eax, 0x8f16aeb8
mov ecx, 0x995273ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0x7984fd8f
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x566d8357
mov ecx, 0xa7043d35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
mov edx, eax
sub edx, 0x3432c44d
sub edx, 1
add edx, 0x3432c44d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x566d8357
mov ecx, 0x20cd2adf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov dword [ebp - 0x30], 0x7984fd8f
jmp 0x418e42
mov eax, dword [0x4be6b8]
mov ecx, dword [0x4be6b4]
mov edx, eax
add edx, 0x2edbe1f8
sub edx, 1
sub edx, 0x2edbe1f8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2b79dd53
mov ecx, 0x83e101ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov ecx, dword [0x4be6b8]
mov eax, dword [0x4be6b4]
mov edx, ecx
add edx, 0x3088a23b
sub edx, 1
sub edx, 0x3088a23b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2b79dd53
mov ecx, 0x9f755a86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x418e42
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004a4e10
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], 0x8925f113
jmp 0x418e42
mov dword [ebp - 0x30], 0x20d88a55
jmp 0x418e42
mov dword [ebp - 0x30], 0x3f62b8c3
jmp 0x418e42
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], 0x3469de41
jmp 0x418e42
mov dword [ebp - 0x30], 0x82c0334d
jmp 0x418e42
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], 0xe01c5b58
jmp 0x418e42
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0xc2e12960
jmp 0x418e42
mov dword [ebp - 0x30], 0xa7043d35
jmp 0x418e42
mov dword [ebp - 0x30], 0x83e101ed
jmp 0x4183b8