Function at 0x40aa60
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x24
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [0x43a080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x43b594]
mov eax, dword [0x43b590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x1e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x24], 0xdd946a76
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
sub eax, 0x8437e366
je 0x40ad03
jmp 0x40aac6
mov eax, dword [ebp - 0x2c]
sub eax, 0x9e8fb755
je 0x40ad37
jmp 0x40aad9
mov eax, dword [ebp - 0x2c]
sub eax, 0xa3cce13c
je 0x40afa8
jmp 0x40aaec
mov eax, dword [ebp - 0x2c]
sub eax, 0xa400b0b5
je 0x40aeb0
jmp 0x40aaff
mov eax, dword [ebp - 0x2c]
sub eax, 0xaad10044
je 0x40afd2
jmp 0x40ab12
mov eax, dword [ebp - 0x2c]
sub eax, 0xc7087ad7
je 0x40ad0f
jmp 0x40ab25
mov eax, dword [ebp - 0x2c]
sub eax, 0xce65edd9
je 0x40ad52
jmp 0x40ab38
mov eax, dword [ebp - 0x2c]
sub eax, 0xdd946a76
je 0x40ac47
jmp 0x40ab4b
mov eax, dword [ebp - 0x2c]
sub eax, 0xe7554766
je 0x40ac92
jmp 0x40ab5e
mov eax, dword [ebp - 0x2c]
sub eax, 0xed39b350
je 0x40ae02
jmp 0x40ab71
mov eax, dword [ebp - 0x2c]
sub eax, 0x8799fc
je 0x40af8b
jmp 0x40ab84
mov eax, dword [ebp - 0x2c]
sub eax, 0xe6038f0
je 0x40adf6
jmp 0x40ab97
mov eax, dword [ebp - 0x2c]
sub eax, 0x12be7a1e
je 0x40af7f
jmp 0x40abaa
mov eax, dword [ebp - 0x2c]
sub eax, 0x26cd8fed
je 0x40ae48
jmp 0x40abbd
mov eax, dword [ebp - 0x2c]
sub eax, 0x2cd0b30b
je 0x40aebc
jmp 0x40abd0
mov eax, dword [ebp - 0x2c]
sub eax, 0x3e95312d
je 0x40afb7
jmp 0x40abe3
mov eax, dword [ebp - 0x2c]
sub eax, 0x40f24bdb
je 0x40ada0
jmp 0x40abf6
mov eax, dword [ebp - 0x2c]
sub eax, 0x41b30ea6
je 0x40af0a
jmp 0x40ac09
mov eax, dword [ebp - 0x2c]
sub eax, 0x455e38e2
je 0x40af73
jmp 0x40ac1c
mov eax, dword [ebp - 0x2c]
sub eax, 0x4d761544
je 0x40af58
jmp 0x40ac2f
mov eax, dword [ebp - 0x2c]
sub eax, 0x7ccf7dc7
je 0x40af9c
jmp 0x40ac42
jmp 0x40afd9
mov bl, byte [ebp - 0x1e]
mov dh, byte [ebp - 0x1d]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7ccf7dc7
mov ecx, 0xe7554766
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov ecx, dword [0x43b594]
mov eax, dword [0x43b590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7ccf7dc7
mov ecx, 0x8437e366
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov dword [ebp - 0x24], 0xc7087ad7
jmp 0x40afd9
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], 0x9e8fb755
jmp 0x40afd9
mov edx, dword [ebp - 0x18]
mov eax, 0x8799fc
mov ecx, 0xce65edd9
cmp edx, 0xffffffff
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov eax, dword [0x43b594]
mov ecx, dword [0x43b590]
mov edx, eax
sub edx, 0xd689c79c
sub edx, 1
add edx, 0xd689c79c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa3cce13c
mov ecx, 0x40f24bdb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x43b594]
mov ecx, dword [0x43b590]
mov edx, eax
add edx, 0xc9268a41
sub edx, 1
sub edx, 0xc9268a41
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa3cce13c
mov ecx, 0xe6038f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov dword [ebp - 0x24], 0xed39b350
jmp 0x40afd9
mov eax, dword [0x43b594]
mov ecx, dword [0x43b590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e95312d
mov ecx, 0x26cd8fed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xd], al
mov eax, dword [0x43b594]
mov ecx, dword [0x43b590]
mov edx, eax
add edx, 0x28385078
sub edx, 1
sub edx, 0x28385078
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e95312d
mov ecx, 0xa400b0b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov dword [ebp - 0x24], 0x2cd0b30b
jmp 0x40afd9
mov eax, dword [0x43b594]
mov ecx, dword [0x43b590]
mov edx, eax
add edx, 0xa4077e81
sub edx, 1
sub edx, 0xa4077e81
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaad10044
mov ecx, 0x41b30ea6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov eax, dword [0x43b594]
mov ecx, dword [0x43b590]
mov edx, eax
add edx, 0x26d0b3eb
sub edx, 1
sub edx, 0x26d0b3eb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaad10044
mov ecx, 0x4d761544
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov dl, byte [ebp - 0xd]
mov eax, 0x455e38e2
mov ecx, 0x12be7a1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x40afd9
mov dword [ebp - 0x24], 0x8799fc
jmp 0x40afd9
mov dword [ebp - 0x24], 0x8799fc
jmp 0x40afd9
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00423ec0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x24], 0xe7554766
jmp 0x40afd9
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0x40f24bdb
jmp 0x40afd9
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x24], 0x26cd8fed
jmp 0x40afd9
mov dword [ebp - 0x24], 0x41b30ea6
jmp 0x40aab0