Function at 0x409eb0
Capabilities:
Check if file exists
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x20
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x1d793f9
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
sub eax, 0x8f232454
je 0x40a13c
jmp 0x409edb
mov eax, dword [ebp - 0x24]
sub eax, 0x961d8b59
je 0x40a157
jmp 0x409eee
mov eax, dword [ebp - 0x24]
sub eax, 0xe1bada1b
je 0x40a003
jmp 0x409f01
mov eax, dword [ebp - 0x24]
sub eax, 0xf6688c73
je 0x40a23b
jmp 0x409f14
mov eax, dword [ebp - 0x24]
sub eax, 0x1d793f9
je 0x409fd7
jmp 0x409f27
mov eax, dword [ebp - 0x24]
sub eax, 0x69705bd
je 0x40a21c
jmp 0x409f3a
mov eax, dword [ebp - 0x24]
sub eax, 0x17839dc7
je 0x40a228
jmp 0x409f4d
mov eax, dword [ebp - 0x24]
sub eax, 0x1c31e72a
je 0x40a22f
jmp 0x409f60
mov eax, dword [ebp - 0x24]
sub eax, 0x1fa5a7b1
je 0x40a116
jmp 0x409f73
mov eax, dword [ebp - 0x24]
sub eax, 0x45286e93
je 0x40a10a
jmp 0x409f86
mov eax, dword [ebp - 0x24]
sub eax, 0x4760e81c
je 0x40a163
jmp 0x409f99
mov eax, dword [ebp - 0x24]
sub eax, 0x6fce7b64
je 0x40a091
jmp 0x409fac
mov eax, dword [ebp - 0x24]
sub eax, 0x73906263
je 0x40a1a9
jmp 0x409fbf
mov eax, dword [ebp - 0x24]
sub eax, 0x7ed04120
je 0x40a01e
jmp 0x409fd2
jmp 0x40a242
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x1c], 0xe1bada1b
jmp 0x40a242
mov dl, byte [ebp - 0x11]
mov eax, 0x17839dc7
mov ecx, 0x7ed04120
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40a242
mov ecx, dword [0x43b554]
mov eax, dword [0x43b550]
mov edx, ecx
add edx, 0xbff2d86
sub edx, 1
sub edx, 0xbff2d86
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1c31e72a
mov ecx, 0x6fce7b64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40a242
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43b554]
mov eax, dword [0x43b550]
mov edx, ecx
sub edx, 0xf11664cd
sub edx, 1
add edx, 0xf11664cd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1c31e72a
mov ecx, 0x45286e93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40a242
mov dword [ebp - 0x1c], 0x1fa5a7b1
jmp 0x40a242
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov dword [ebp - 0x1c], 0x8f232454
jmp 0x40a242
mov dl, byte [ebp - 9]
mov eax, 0x961d8b59
mov ecx, 0x4760e81c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40a242
mov dword [ebp - 0x1c], 0x17839dc7
jmp 0x40a242
mov eax, dword [0x43b554]
mov ecx, dword [0x43b550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf6688c73
mov ecx, 0x73906263
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40a242
mov ecx, dword [0x43b554]
mov eax, dword [0x43b550]
mov edx, ecx
add edx, 0xf44cff64
sub edx, 1
sub edx, 0xf44cff64
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf6688c73
mov ecx, 0x69705bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40a242
mov dword [ebp - 0x1c], 0x17839dc7
jmp 0x40a242
add esp, 0x20
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1c], 0x6fce7b64
jmp 0x40a242
mov dword [ebp - 0x1c], 0x73906263
jmp 0x409ec5