Function at 0x4096d0
Capabilities:
Check if file exists
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x24
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x1e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x24], 0x51a145a4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
sub eax, 0x9a76c56c
je 0x4098d3
jmp 0x409736
mov eax, dword [ebp - 0x2c]
sub eax, 0x9bb58b0c
je 0x409924
jmp 0x409749
mov eax, dword [ebp - 0x2c]
sub eax, 0xae063d73
je 0x4098c7
jmp 0x40975c
mov eax, dword [ebp - 0x2c]
sub eax, 0xb2b1d7d9
je 0x4098e7
jmp 0x40976f
mov eax, dword [ebp - 0x2c]
sub eax, 0xdd6bf80e
je 0x409910
jmp 0x409782
mov eax, dword [ebp - 0x2c]
sub eax, 0xe25be3ff
je 0x409a5b
jmp 0x409795
mov eax, dword [ebp - 0x2c]
sub eax, 0xea1b5f0c
je 0x409a80
jmp 0x4097a8
mov eax, dword [ebp - 0x2c]
sub eax, 0x2c26bf53
je 0x409997
jmp 0x4097bb
mov eax, dword [ebp - 0x2c]
sub eax, 0x3788a518
je 0x409a1c
jmp 0x4097ce
mov eax, dword [ebp - 0x2c]
sub eax, 0x43c5b747
je 0x409a6c
jmp 0x4097e1
mov eax, dword [ebp - 0x2c]
sub eax, 0x497bc6cb
je 0x409a4f
jmp 0x4097f4
mov eax, dword [ebp - 0x2c]
sub eax, 0x4ef261b4
je 0x409a28
jmp 0x409807
mov eax, dword [ebp - 0x2c]
sub eax, 0x51a145a4
je 0x409845
jmp 0x40981a
mov eax, dword [ebp - 0x2c]
sub eax, 0x57ea4103
je 0x409a43
jmp 0x40982d
mov eax, dword [ebp - 0x2c]
sub eax, 0x636787aa
je 0x40986b
jmp 0x409840
jmp 0x409a96
mov al, byte [ebp - 0x1e]
mov cl, byte [ebp - 0x1d]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43c5b747
mov ecx, 0x636787aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x409a96
mov ecx, dword [ebp - 0x28]
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax], ecx
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
mov edx, eax
add edx, 0x9966df28
sub edx, 1
sub edx, 0x9966df28
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43c5b747
mov ecx, 0xae063d73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x409a96
mov dword [ebp - 0x24], 0x9a76c56c
jmp 0x409a96
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], 0xb2b1d7d9
jmp 0x409a96
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov edx, eax
mov eax, 0xe25be3ff
mov ecx, 0xdd6bf80e
cmp edx, 0xffffffff
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x409a96
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0x9bb58b0c
jmp 0x409a96
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
add edx, 0x4ff94eea
sub edx, 1
sub edx, 0x4ff94eea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea1b5f0c
mov ecx, 0x2c26bf53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x409a96
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x10], eax
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
sub edx, 0x5e45ff9d
sub edx, 1
add edx, 0x5e45ff9d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea1b5f0c
mov ecx, 0x3788a518
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x409a96
mov dword [ebp - 0x24], 0x4ef261b4
jmp 0x409a96
mov edx, dword [ebp - 0x10]
mov eax, 0x57ea4103
mov ecx, 0x497bc6cb
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x409a96
mov dword [ebp - 0x24], 0xe25be3ff
jmp 0x409a96
mov dword [ebp - 0x24], 0xe25be3ff
jmp 0x409a96
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0041b800
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x28]
push eax
mov eax, esp
mov dword [eax], ecx
mov dword [ebp - 0x24], 0x636787aa
jmp 0x409a96
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x24], 0x2c26bf53
jmp 0x409720