Function at 0x4147a0
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0x9f440c9f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
sub eax, 0x942f1c16
je 0x414b2a
jmp 0x4147da
mov eax, dword [ebp - 0x20]
sub eax, 0x9f440c9f
je 0x41490f
jmp 0x4147ed
mov eax, dword [ebp - 0x20]
sub eax, 0xacf4ac4d
je 0x414aa3
jmp 0x414800
mov eax, dword [ebp - 0x20]
sub eax, 0xaee11618
je 0x414bde
jmp 0x414813
mov eax, dword [ebp - 0x20]
sub eax, 0xd4e2330a
je 0x414bea
jmp 0x414826
mov eax, dword [ebp - 0x20]
sub eax, 0xdd6756c6
je 0x414c00
jmp 0x414839
mov eax, dword [ebp - 0x20]
sub eax, 0xfc2f6453
je 0x414bd2
jmp 0x41484c
mov eax, dword [ebp - 0x20]
sub eax, 0x18e126d8
je 0x414bb7
jmp 0x41485f
mov eax, dword [ebp - 0x20]
sub eax, 0x19378750
je 0x414c0c
jmp 0x414872
mov eax, dword [ebp - 0x20]
sub eax, 0x3726c821
je 0x4149d6
jmp 0x414885
mov eax, dword [ebp - 0x20]
sub eax, 0x40999108
je 0x414adc
jmp 0x414898
mov eax, dword [ebp - 0x20]
sub eax, 0x484cf639
je 0x414bf1
jmp 0x4148ab
mov eax, dword [ebp - 0x20]
sub eax, 0x4a963891
je 0x4149e2
jmp 0x4148be
mov eax, dword [ebp - 0x20]
sub eax, 0x52ec8283
je 0x414bab
jmp 0x4148d1
mov eax, dword [ebp - 0x20]
sub eax, 0x5b52d74f
je 0x414abe
jmp 0x4148e4
mov eax, dword [ebp - 0x20]
sub eax, 0x65a36a9b
je 0x414a55
jmp 0x4148f7
mov eax, dword [ebp - 0x20]
sub eax, 0x67460be9
je 0x414955
jmp 0x41490a
jmp 0x414c16
mov eax, dword [0x446584]
mov ecx, dword [0x446580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x484cf639
mov ecx, 0x67460be9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x446584]
mov eax, dword [0x446580]
mov edx, ecx
add edx, 0xff5deefb
sub edx, 1
sub edx, 0xff5deefb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x484cf639
mov ecx, 0x3726c821
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov dword [ebp - 0x1c], 0x4a963891
jmp 0x414c16
mov ecx, dword [0x446584]
mov eax, dword [0x446580]
mov edx, ecx
sub edx, 0x812b692
sub edx, 1
add edx, 0x812b692
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdd6756c6
mov ecx, 0x65a36a9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov eax, dword [0x446584]
mov ecx, dword [0x446580]
mov edx, eax
sub edx, 0x38c37647
sub edx, 1
add edx, 0x38c37647
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd6756c6
mov ecx, 0xacf4ac4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov dl, byte [ebp - 0x11]
mov eax, 0xd4e2330a
mov ecx, 0x5b52d74f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0x40999108
jmp 0x414c16
mov eax, dword [0x446584]
mov ecx, dword [0x446580]
mov edx, eax
sub edx, 0x3e072b79
sub edx, 1
add edx, 0x3e072b79
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x19378750
mov ecx, 0x942f1c16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov eax, dword [ebp - 0x10]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov ecx, dword [0x446584]
mov eax, dword [0x446580]
mov edx, ecx
add edx, 0xe31e975e
sub edx, 1
sub edx, 0xe31e975e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x19378750
mov ecx, 0x52ec8283
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov dword [ebp - 0x1c], 0x18e126d8
jmp 0x414c16
mov dl, byte [ebp - 9]
mov eax, 0xfc2f6453
mov ecx, 0xaee11618
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x414c16
mov dword [ebp - 0x1c], 0xd4e2330a
jmp 0x414c16
mov dword [ebp - 0x1c], 0xd4e2330a
jmp 0x414c16
add esp, 0x1c
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0x67460be9
jmp 0x414c16
mov dword [ebp - 0x1c], 0x65a36a9b
jmp 0x414c16
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], 0x942f1c16
jmp 0x4147c4