Function at 0x40e1c0
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], 0xf469e87f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
sub eax, 0x952f45d7
je 0x40e535
jmp 0x40e1e8
mov eax, dword [ebp - 0x20]
sub eax, 0xbfcbd319
je 0x40e45f
jmp 0x40e1fb
mov eax, dword [ebp - 0x20]
sub eax, 0xc0258799
je 0x40e502
jmp 0x40e20e
mov eax, dword [ebp - 0x20]
sub eax, 0xcb4fc53f
je 0x40e529
jmp 0x40e221
mov eax, dword [ebp - 0x20]
sub eax, 0xec264bc0
je 0x40e350
jmp 0x40e234
mov eax, dword [ebp - 0x20]
sub eax, 0xf469e87f
je 0x40e2e4
jmp 0x40e247
mov eax, dword [ebp - 0x20]
sub eax, 0x2aff2e7
je 0x40e4dc
jmp 0x40e25a
mov eax, dword [ebp - 0x20]
sub eax, 0x4614de7
je 0x40e3ec
jmp 0x40e26d
mov eax, dword [ebp - 0x20]
sub eax, 0xbf480ad
je 0x40e4e8
jmp 0x40e280
mov eax, dword [ebp - 0x20]
sub eax, 0x1c60ab10
je 0x40e54b
jmp 0x40e293
mov eax, dword [ebp - 0x20]
sub eax, 0x5896c179
je 0x40e3d1
jmp 0x40e2a6
mov eax, dword [ebp - 0x20]
sub eax, 0x6603e0e4
je 0x40e53c
jmp 0x40e2b9
mov eax, dword [ebp - 0x20]
sub eax, 0x667f1e78
je 0x40e302
jmp 0x40e2cc
mov eax, dword [ebp - 0x20]
sub eax, 0x6a0efd81
je 0x40e51d
jmp 0x40e2df
jmp 0x40e561
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0x667f1e78
jmp 0x40e561
mov eax, dword [0x43e53c]
mov ecx, dword [0x43e538]
mov edx, eax
sub edx, 0xd5c83fd8
sub edx, 1
add edx, 0xd5c83fd8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6603e0e4
mov ecx, 0xec264bc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40e561
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x43e53c]
mov eax, dword [0x43e538]
mov edx, ecx
sub edx, 0xa5234870
sub edx, 1
add edx, 0xa5234870
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6603e0e4
mov ecx, 0x5896c179
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40e561
mov dl, byte [ebp - 0x11]
mov eax, 0x952f45d7
mov ecx, 0x4614de7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40e561
mov ecx, dword [0x43e53c]
mov eax, dword [0x43e538]
mov edx, ecx
add edx, 0x6cdfcca0
sub edx, 1
sub edx, 0x6cdfcca0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1c60ab10
mov ecx, 0xbfcbd319
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40e561
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43e53c]
mov eax, dword [0x43e538]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1c60ab10
mov ecx, 0x2aff2e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40e561
mov dword [ebp - 0x1c], 0xbf480ad
jmp 0x40e561
mov eax, dword [ebp - 0x10]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov dword [ebp - 0x1c], 0xc0258799
jmp 0x40e561
mov dl, byte [ebp - 9]
mov eax, 0x6a0efd81
mov ecx, 0xcb4fc53f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x40e561
mov dword [ebp - 0x1c], 0x952f45d7
jmp 0x40e561
mov dword [ebp - 0x1c], 0x952f45d7
jmp 0x40e561
add esp, 0x1c
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0xec264bc0
jmp 0x40e561
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x1c], 0xbfcbd319
jmp 0x40e1d2