Function at 0x40e7d0
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x28
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x43f080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x44052c]
mov eax, dword [0x440528]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x22], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x21], al
mov dword [ebp - 0x28], 0x5dbdd7c9
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
sub eax, 0x825e4857
je 0x40ea31
jmp 0x40e836
mov eax, dword [ebp - 0x30]
sub eax, 0x85aa248d
je 0x40eac4
jmp 0x40e849
mov eax, dword [ebp - 0x30]
sub eax, 0x8c059d41
je 0x40ebcb
jmp 0x40e85c
mov eax, dword [ebp - 0x30]
sub eax, 0xa3a3f619
je 0x40eb45
jmp 0x40e86f
mov eax, dword [ebp - 0x30]
sub eax, 0xa72cc519
je 0x40ec97
jmp 0x40e882
mov eax, dword [ebp - 0x30]
sub eax, 0xbbc5b741
je 0x40ea51
jmp 0x40e895
mov eax, dword [ebp - 0x30]
sub eax, 0xbd1261ed
je 0x40ea25
jmp 0x40e8a8
mov eax, dword [ebp - 0x30]
sub eax, 0xc0347d23
je 0x40ecd7
jmp 0x40e8bb
mov eax, dword [ebp - 0x30]
sub eax, 0x162dfd4f
je 0x40eb60
jmp 0x40e8ce
mov eax, dword [ebp - 0x30]
sub eax, 0x17397229
je 0x40ec46
jmp 0x40e8e1
mov eax, dword [ebp - 0x30]
sub eax, 0x1c2213cb
je 0x40ec52
jmp 0x40e8f4
mov eax, dword [ebp - 0x30]
sub eax, 0x21a2d550
je 0x40ecb4
jmp 0x40e907
mov eax, dword [ebp - 0x30]
sub eax, 0x303c5e0a
je 0x40e9c9
jmp 0x40e91a
mov eax, dword [ebp - 0x30]
sub eax, 0x3932fe90
je 0x40ecc8
jmp 0x40e92d
mov eax, dword [ebp - 0x30]
sub eax, 0x4fa6cb56
je 0x40eca3
jmp 0x40e940
mov eax, dword [ebp - 0x30]
sub eax, 0x5ab399b7
je 0x40ec70
jmp 0x40e953
mov eax, dword [ebp - 0x30]
sub eax, 0x5dbdd7c9
je 0x40e97e
jmp 0x40e966
mov eax, dword [ebp - 0x30]
sub eax, 0x721f07de
je 0x40ec8b
jmp 0x40e979
jmp 0x40ece1
mov bl, byte [ebp - 0x22]
mov dh, byte [ebp - 0x21]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x21a2d550
mov ecx, 0x303c5e0a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov ecx, dword [ebp - 0x2c]
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
mov eax, dword [0x44052c]
mov ecx, dword [0x440528]
mov edx, eax
sub edx, 0x43de06c0
sub edx, 1
add edx, 0x43de06c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21a2d550
mov ecx, 0xbd1261ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov dword [ebp - 0x28], 0x825e4857
jmp 0x40ece1
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0xbbc5b741
jmp 0x40ece1
mov ecx, dword [0x44052c]
mov eax, dword [0x440528]
mov edx, ecx
sub edx, 0x66813dd0
sub edx, 1
add edx, 0x66813dd0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3932fe90
mov ecx, 0x85aa248d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov eax, dword [ebp - 0x1c]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x15], al
mov ecx, dword [0x44052c]
mov eax, dword [0x440528]
mov edx, ecx
add edx, 0x5c37ea06
sub edx, 1
sub edx, 0x5c37ea06
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3932fe90
mov ecx, 0xa3a3f619
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov dl, byte [ebp - 0x15]
mov eax, 0x4fa6cb56
mov ecx, 0x162dfd4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov ecx, dword [0x44052c]
mov eax, dword [0x440528]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc0347d23
mov ecx, 0x8c059d41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov ecx, dword [0x44052c]
mov eax, dword [0x440528]
mov edx, ecx
sub edx, 0x7ead7376
sub edx, 1
add edx, 0x7ead7376
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc0347d23
mov ecx, 0x17397229
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov dword [ebp - 0x28], 0x1c2213cb
jmp 0x40ece1
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0x5ab399b7
jmp 0x40ece1
mov edx, dword [ebp - 0x10]
mov eax, 0x721f07de
mov ecx, 0xa72cc519
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x40ece1
mov dword [ebp - 0x28], 0x4fa6cb56
jmp 0x40ece1
mov dword [ebp - 0x28], 0x4fa6cb56
jmp 0x40ece1
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004275c0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x2c]
push eax
mov eax, esp
mov dword [eax], ecx
mov dword [ebp - 0x28], 0x303c5e0a
jmp 0x40ece1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], 0x85aa248d
jmp 0x40ece1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], 0x8c059d41
jmp 0x40e820