Function at 0x40a790
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x28
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [0x439080]
xor eax, ebp
mov dword [ebp - 8], eax
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
add edx, 0xdf505f9e
sub edx, 1
sub edx, 0xdf505f9e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x1e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x24], 0xb5fbf55e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
sub eax, 0x984cf092
je 0x40a98e
jmp 0x40a7fd
mov eax, dword [ebp - 0x2c]
sub eax, 0xa41af9af
je 0x40a9cf
jmp 0x40a810
mov eax, dword [ebp - 0x2c]
sub eax, 0xb5fbf55e
je 0x40a8d3
jmp 0x40a823
mov eax, dword [ebp - 0x2c]
sub eax, 0xbc2d1e82
je 0x40a8f9
jmp 0x40a836
mov eax, dword [ebp - 0x2c]
sub eax, 0xbf3c8bb4
je 0x40aa30
jmp 0x40a849
mov eax, dword [ebp - 0x2c]
sub eax, 0xca8f0562
je 0x40aa09
jmp 0x40a85c
mov eax, dword [ebp - 0x2c]
sub eax, 0xd07edba0
je 0x40aa3c
jmp 0x40a86f
mov eax, dword [ebp - 0x2c]
sub eax, 0x10f5be14
je 0x40a9ef
jmp 0x40a882
mov eax, dword [ebp - 0x2c]
sub eax, 0x329e2a86
je 0x40a99a
jmp 0x40a895
mov eax, dword [ebp - 0x2c]
sub eax, 0x57a54bae
je 0x40a9b4
jmp 0x40a8a8
mov eax, dword [ebp - 0x2c]
sub eax, 0x6b22bca9
je 0x40aa24
jmp 0x40a8bb
mov eax, dword [ebp - 0x2c]
sub eax, 0x7e8d7ee5
je 0x40aa4c
jmp 0x40a8ce
jmp 0x40aa69
mov al, byte [ebp - 0x1e]
mov cl, byte [ebp - 0x1d]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e8d7ee5
mov ecx, 0xbc2d1e82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40aa69
mov ecx, dword [ebp - 0x28]
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x18], eax
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0x87dddc2c
sub edx, 1
add edx, 0x87dddc2c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7e8d7ee5
mov ecx, 0x984cf092
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40aa69
mov dword [ebp - 0x24], 0x329e2a86
jmp 0x40aa69
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x24], 0x57a54bae
jmp 0x40aa69
mov dl, byte [ebp - 0x11]
mov eax, 0xd07edba0
mov ecx, 0xa41af9af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40aa69
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0x10f5be14
jmp 0x40aa69
mov eax, dword [ebp - 0x10]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov dword [ebp - 0x24], 0xca8f0562
jmp 0x40aa69
mov dl, byte [ebp - 9]
mov eax, 0x6b22bca9
mov ecx, 0xbf3c8bb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40aa69
mov dword [ebp - 0x24], 0xd07edba0
jmp 0x40aa69
mov dword [ebp - 0x24], 0xd07edba0
jmp 0x40aa69
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00423340
lea esp, [ebp - 4]
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x28]
push eax
mov eax, esp
mov dword [eax], ecx
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x24], 0xbc2d1e82
jmp 0x40a7e7