Function at 0x411a30
Capabilities:
Delete file
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
sub esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0x57069fd1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
sub eax, 0x8a9d4393
je 0x411bb9
jmp 0x411a6a
mov eax, dword [ebp - 0x20]
sub eax, 0x8ac85b73
je 0x411e8f
jmp 0x411a7d
mov eax, dword [ebp - 0x20]
sub eax, 0xbc09b6c5
je 0x411dc6
jmp 0x411a90
mov eax, dword [ebp - 0x20]
sub eax, 0xbf83af78
je 0x411dd2
jmp 0x411aa3
mov eax, dword [ebp - 0x20]
sub eax, 0xcbdc1507
je 0x411ce6
jmp 0x411ab6
mov eax, dword [ebp - 0x20]
sub eax, 0xe3341675
je 0x411eb1
jmp 0x411ac9
mov eax, dword [ebp - 0x20]
sub eax, 0xe3fab5b0
je 0x411d78
jmp 0x411adc
mov eax, dword [ebp - 0x20]
sub eax, 0xf55d0cdd
je 0x411c59
jmp 0x411aef
mov eax, dword [ebp - 0x20]
sub eax, 0x1f70a8ff
je 0x411ebd
jmp 0x411b02
mov eax, dword [ebp - 0x20]
sub eax, 0x464c99aa
je 0x411e18
jmp 0x411b15
mov eax, dword [ebp - 0x20]
sub eax, 0x57069fd1
je 0x411b9f
jmp 0x411b28
mov eax, dword [ebp - 0x20]
sub eax, 0x5ddb3962
je 0x411d0d
jmp 0x411b3b
mov eax, dword [ebp - 0x20]
sub eax, 0x688fdaf4
je 0x411be6
jmp 0x411b4e
mov eax, dword [ebp - 0x20]
sub eax, 0x764c7562
je 0x411e83
jmp 0x411b61
mov eax, dword [ebp - 0x20]
sub eax, 0x76e6be16
je 0x411bd4
jmp 0x411b74
mov eax, dword [ebp - 0x20]
sub eax, 0x773def0b
je 0x411e96
jmp 0x411b87
mov eax, dword [ebp - 0x20]
sub eax, 0x7b723c7f
je 0x411cf2
jmp 0x411b9a
jmp 0x411ec4
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
setne al
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x1c], 0x8a9d4393
jmp 0x411ec4
mov dl, byte [ebp - 0x11]
mov eax, 0x8ac85b73
mov ecx, 0x76e6be16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0x688fdaf4
jmp 0x411ec4
mov ecx, dword [0x443564]
mov eax, dword [0x443560]
mov edx, ecx
add edx, 0xd29440e9
sub edx, 1
sub edx, 0xd29440e9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x773def0b
mov ecx, 0xf55d0cdd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 9], al
mov ecx, dword [0x443564]
mov eax, dword [0x443560]
mov edx, ecx
add edx, 0x2e6ea8ce
sub edx, 1
sub edx, 0x2e6ea8ce
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x773def0b
mov ecx, 0xcbdc1507
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov dword [ebp - 0x1c], 0x7b723c7f
jmp 0x411ec4
mov dl, byte [ebp - 9]
mov eax, 0x5ddb3962
mov ecx, 0xbf83af78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov ecx, dword [0x443564]
mov eax, dword [0x443560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe3341675
mov ecx, 0xe3fab5b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov eax, dword [0x443564]
mov ecx, dword [0x443560]
mov edx, eax
add edx, 0xc2ea440c
sub edx, 1
sub edx, 0xc2ea440c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3341675
mov ecx, 0xbc09b6c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov dword [ebp - 0x1c], 0x8ac85b73
jmp 0x411ec4
mov eax, dword [0x443564]
mov ecx, dword [0x443560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1f70a8ff
mov ecx, 0x464c99aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov ecx, dword [0x443564]
mov eax, dword [0x443560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1f70a8ff
mov ecx, 0x764c7562
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x411ec4
mov dword [ebp - 0x1c], 0x8ac85b73
jmp 0x411ec4
add esp, 0x1c
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
sub esp, 4
mov dword [ebp - 0x1c], 0xf55d0cdd
jmp 0x411ec4
mov dword [ebp - 0x1c], 0xe3fab5b0
jmp 0x411ec4
mov dword [ebp - 0x1c], 0x464c99aa
jmp 0x411a54