Function at 0x40aa80
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x20
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0xa646decf
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
sub eax, 0x9c7e163d
je 0x40ad38
jmp 0x40aaab
mov eax, dword [ebp - 0x24]
sub eax, 0xa646decf
je 0x40abe0
jmp 0x40aabe
mov eax, dword [ebp - 0x24]
sub eax, 0xb1c11d28
je 0x40ae9f
jmp 0x40aad1
mov eax, dword [ebp - 0x24]
sub eax, 0xcf17f654
je 0x40aeab
jmp 0x40aae4
mov eax, dword [ebp - 0x24]
sub eax, 0xd3b63415
je 0x40acc5
jmp 0x40aaf7
mov eax, dword [ebp - 0x24]
sub eax, 0xeda7df85
je 0x40adbf
jmp 0x40ab0a
mov eax, dword [ebp - 0x24]
sub eax, 0xa0414b7
je 0x40aec6
jmp 0x40ab1d
mov eax, dword [ebp - 0x24]
sub eax, 0xb6dba50
je 0x40ae4a
jmp 0x40ab30
mov eax, dword [ebp - 0x24]
sub eax, 0xfb0b4d3
je 0x40ac65
jmp 0x40ab43
mov eax, dword [ebp - 0x24]
sub eax, 0x24663b0e
je 0x40ac1f
jmp 0x40ab56
mov eax, dword [ebp - 0x24]
sub eax, 0x364dae2a
je 0x40ada4
jmp 0x40ab69
mov eax, dword [ebp - 0x24]
sub eax, 0x453a1a4e
je 0x40ae98
jmp 0x40ab7c
mov eax, dword [ebp - 0x24]
sub eax, 0x49fe32bc
je 0x40adcb
jmp 0x40ab8f
mov eax, dword [ebp - 0x24]
sub eax, 0x4ff8bbd6
je 0x40ad98
jmp 0x40aba2
mov eax, dword [ebp - 0x24]
sub eax, 0x68ad9b5d
je 0x40add7
jmp 0x40abb5
mov eax, dword [ebp - 0x24]
sub eax, 0x6fe1fb2f
je 0x40acb9
jmp 0x40abc8
mov eax, dword [ebp - 0x24]
sub eax, 0x78dc586e
je 0x40ac04
jmp 0x40abdb
jmp 0x40aecd
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0x78dc586e
jmp 0x40aecd
mov edx, dword [ebp - 0x14]
mov eax, 0x68ad9b5d
mov ecx, 0x24663b0e
cmp edx, 0xffffffff
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov eax, dword [0x43555c]
mov ecx, dword [0x435558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1c11d28
mov ecx, 0xfb0b4d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [0x43555c]
mov ecx, dword [0x435558]
mov edx, eax
sub edx, 0x64d27763
sub edx, 1
add edx, 0x64d27763
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1c11d28
mov ecx, 0x6fe1fb2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov dword [ebp - 0x1c], 0xd3b63415
jmp 0x40aecd
mov ecx, dword [0x43555c]
mov eax, dword [0x435558]
mov edx, ecx
sub edx, 0x36cd7523
sub edx, 1
add edx, 0x36cd7523
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcf17f654
mov ecx, 0x9c7e163d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [0x43555c]
mov ecx, dword [0x435558]
mov edx, eax
sub edx, 0xb78dfa89
sub edx, 1
add edx, 0xb78dfa89
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf17f654
mov ecx, 0x4ff8bbd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov dword [ebp - 0x1c], 0x364dae2a
jmp 0x40aecd
mov edx, dword [ebp - 0xc]
mov eax, 0xeda7df85
mov ecx, 0x49fe32bc
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov dword [ebp - 0x1c], 0x68ad9b5d
jmp 0x40aecd
mov dword [ebp - 0x1c], 0x68ad9b5d
jmp 0x40aecd
mov ecx, dword [0x43555c]
mov eax, dword [0x435558]
mov edx, ecx
sub edx, 0x3c0185ec
sub edx, 1
add edx, 0x3c0185ec
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0414b7
mov ecx, 0xb6dba50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
mov eax, dword [0x43555c]
mov ecx, dword [0x435558]
mov edx, eax
sub edx, 0x681c6e01
sub edx, 1
add edx, 0x681c6e01
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa0414b7
mov ecx, 0x453a1a4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40aecd
add esp, 0x20
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1c], 0xfb0b4d3
jmp 0x40aecd
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x1c], 0x9c7e163d
jmp 0x40aecd
mov dword [ebp - 0x1c], 0xb6dba50
jmp 0x40aa95