Function at 0x4043f0
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x20
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x5f435149
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
sub eax, 0x89753f87
je 0x404615
jmp 0x40441b
mov eax, dword [ebp - 0x24]
sub eax, 0xa2bfb789
je 0x4046fc
jmp 0x40442e
mov eax, dword [ebp - 0x24]
sub eax, 0xb429899b
je 0x404694
jmp 0x404441
mov eax, dword [ebp - 0x24]
sub eax, 0xd23eb527
je 0x404742
jmp 0x404454
mov eax, dword [ebp - 0x24]
sub eax, 0xe5b71246
je 0x40473b
jmp 0x404467
mov eax, dword [ebp - 0x24]
sub eax, 0xef623a50
je 0x40458a
jmp 0x40447a
mov eax, dword [ebp - 0x24]
sub eax, 0x2128bc00
je 0x40463c
jmp 0x40448d
mov eax, dword [ebp - 0x24]
sub eax, 0x217dc422
je 0x404621
jmp 0x4044a0
mov eax, dword [ebp - 0x24]
sub eax, 0x4014ce1e
je 0x404723
jmp 0x4044b3
mov eax, dword [ebp - 0x24]
sub eax, 0x450a4473
je 0x404708
jmp 0x4044c6
mov eax, dword [ebp - 0x24]
sub eax, 0x59d87b4f
je 0x40472f
jmp 0x4044d9
mov eax, dword [ebp - 0x24]
sub eax, 0x5dd13ff0
je 0x404763
jmp 0x4044ec
mov eax, dword [ebp - 0x24]
sub eax, 0x5f435149
je 0x404517
jmp 0x4044ff
mov eax, dword [ebp - 0x24]
sub eax, 0x62827c46
je 0x40464e
jmp 0x404512
jmp 0x404779
mov ecx, dword [0x41c384]
mov eax, dword [0x41c380]
mov edx, ecx
add edx, 0x628dbbc9
sub edx, 1
sub edx, 0x628dbbc9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd23eb527
mov ecx, 0xef623a50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x404779
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x14], eax
mov ecx, dword [0x41c384]
mov eax, dword [0x41c380]
mov edx, ecx
add edx, 0x52dd30e2
sub edx, 1
sub edx, 0x52dd30e2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd23eb527
mov ecx, 0x89753f87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x404779
mov dword [ebp - 0x1c], 0x217dc422
jmp 0x404779
mov edx, dword [ebp - 0x14]
mov eax, 0xe5b71246
mov ecx, 0x2128bc00
cmp edx, 0xffffffff
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x404779
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0x62827c46
jmp 0x404779
mov eax, dword [0x41c384]
mov ecx, dword [0x41c380]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dd13ff0
mov ecx, 0xb429899b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x404779
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov eax, dword [0x41c384]
mov ecx, dword [0x41c380]
mov edx, eax
add edx, 0x7781746b
sub edx, 1
sub edx, 0x7781746b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dd13ff0
mov ecx, 0xa2bfb789
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x404779
mov dword [ebp - 0x1c], 0x450a4473
jmp 0x404779
mov dl, byte [ebp - 9]
mov eax, 0x4014ce1e
mov ecx, 0x59d87b4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x404779
mov dword [ebp - 0x1c], 0xe5b71246
jmp 0x404779
mov dword [ebp - 0x1c], 0xe5b71246
jmp 0x404779
add esp, 0x20
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x1c], 0xef623a50
jmp 0x404779
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x1c], 0xb429899b
jmp 0x404405