Function at 0x4396a4
Capabilities:
Delete file

Disassembly:
sub esp, 0x21c
mov eax, dword [0x511038]
xor eax, dword [esp + 0x21c]
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x224], eax
mov eax, dword [esi + 0xffc]
xor ebx, ebx
cmp eax, ebx
push edi
jne 0x439a6d
cmp dword [esp + 0x230], ebx
mov eax, dword [esi + 0x10a4]
je 0x4399c8
cmp eax, 1
jne 0x439708
mov ecx, dword [esi + 0x16c]
call fcn.0043f9f0
mov eax, dword [esi + 0x10ac]
mov ecx, dword [esi]
push eax
mov dword [esi + 0x2a0], ebx
call fcn.004135d0
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x2a4]
call fcn.0044efd0
jmp 0x439a6d
cmp eax, 2
jne 0x43972f
mov ecx, dword [esi + 0x16c]
call fcn.0043f9f0
mov ecx, esi
call fcn.0042a020
mov ecx, dword [esi + 0x16c]
call fcn.0043fcf0
jmp 0x439a6d
cmp eax, 3
je 0x43975e
cmp eax, 4
jne 0x439775
mov ecx, dword [esi + 0x16c]
mov edx, dword [ecx + 0xb4]
push edx
call fcn.0043e810
mov ecx, dword [esi + 0x16c]
call fcn.0043b9b0
cmp dword [esi + 0xffc], ebx
jne 0x439769
mov ecx, dword [esi + 0x16c]
call fcn.0043f9f0
mov ecx, esi
call fcn.0042db70
jmp 0x439a6d
cmp eax, 5
jne 0x43978a
mov ecx, dword [esi + 0x16c]
call fcn.0043f9f0
jmp 0x439a66
cmp eax, 0xb
jne 0x4397af
mov eax, dword [esi + 0x16c]
mov dword [eax + 0x100], 1
mov ecx, dword [esi + 0x16c]
call fcn.0043dfc0
jmp 0x439a6d
cmp eax, 0xd
jne 0x4398a8
mov ecx, dword [esi + 0x10e0]
push ecx
lea edx, [esp + 0x2c]
push 0x5087f0
push edx
call fcn.004c723c
mov ecx, dword [esi + 0x290]
lea eax, [esp + 0x34]
push eax
add ecx, 0xc
push ecx
lea edx, [esp + 0x13c]
push str._s_s.cml
push edx
call fcn.004c723c
add esp, 0x1c
lea eax, [esp + 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
lea ebp, [esi + 0x170]
push str.lab_deleted
mov ecx, ebp
call fcn.00423be0
mov ecx, dword [esi + 0x2a4]
push eax
call fcn.004112d0
push 1
mov ecx, esi
call fcn.00436310
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x2ac]
push 3
call fcn.0044ec90
mov edx, dword [eax + 0x74]
cmp dword [edx + 8], ebx
je 0x439881
mov eax, dword [esi]
add eax, 0x334
lea edi, [esp + 0x28]
lea ebx, [ebx]
mov dl, byte [edi]
mov cl, dl
cmp dl, byte [eax]
jne 0x439874
cmp cl, bl
je 0x439870
mov dl, byte [edi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0x439874
add edi, 2
add eax, 2
cmp cl, bl
jne 0x439850
xor eax, eax
jmp 0x439879
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x439a6d
push 0x50880c
mov ecx, ebp
call fcn.00423be0
push eax
mov eax, dword [esi]
add eax, 0x334
push 0x50881c
push eax
call fcn.004c723c
add esp, 0xc
jmp 0x439a6d
cmp eax, 7
jne 0x43998f
mov ebp, dword [esi + 0x10e0]
mov ecx, dword [esi + 0x290]
push ebp
call fcn.004492d0
mov edi, eax
cmp edi, ebx
jle 0x4398ca
dec edi
push ebp
mov ecx, esi
call fcn.0042b120
mov ecx, esi
call fcn.00435810
mov ecx, dword [esi + 0x290]
mov edx, dword [ecx + 4]
cmp dword [edx + 8], ebx
jle 0x439a6d
push edi
call fcn.004490d0
mov edi, eax
mov eax, dword [esi]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax + 0x2a4]
push 3
call fcn.0044ec90
push edi
lea ecx, [esp + 0x1c]
push ecx
mov ebp, eax
lea edx, [esp + 0x18]
push edx
mov ecx, ebp
call fcn.00452960
cmp edi, ebx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp + 0x6c], ecx
mov dword [ebp + 0x70], eax
je 0x439981
mov eax, dword [esi]
mov ecx, dword [eax + 0x2a4]
push 3
call fcn.0044ec90
push edi
lea ecx, [esp + 0x14]
push ecx
mov ebp, eax
lea edx, [esp + 0x28]
push edx
mov ecx, ebp
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
call fcn.00452960
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp + 0x6c], ecx
mov dword [ebp + 0x70], eax
mov ecx, dword [esi + 0x290]
push edi
call fcn.004492d0
cmp eax, ebx
jle 0x439981
mov edi, eax
push 1
mov ecx, ebp
call fcn.004529b0
dec edi
jne 0x439975
mov eax, dword [esi + 0x290]
mov dword [eax + 8], ebx
jmp 0x439a6d
cmp eax, 9
jne 0x4399a2
push 3
mov ecx, esi
call fcn.00436210
jmp 0x439a6d
cmp eax, 0xa
jne 0x4399b5
push 4
mov ecx, esi
call fcn.00436210
jmp 0x439a6d
cmp eax, ebx
je 0x439a6d
mov dword [esi + 0x10a4], ebx
jmp 0x439a6d
cmp eax, 1
jne 0x4399ee
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x2a4]
call fcn.0044efd0
mov edx, dword [esi + 0x10ac]
mov ecx, dword [esi + 0x16c]
push edx
call fcn.0043ef70
jmp 0x439a6d
cmp eax, 2
jne 0x439a05
mov eax, dword [esi]
mov ecx, dword [eax + 0x2a4]
call fcn.0044efd0
jmp 0x439718
cmp eax, 3
jne 0x439a20
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x2a4]
call fcn.0044efd0
mov ecx, esi
call fcn.0042db70
jmp 0x439a6d
cmp eax, 4
jne 0x439a3b
mov edx, dword [esi]
mov ecx, dword [edx + 0x2a4]
call fcn.0044efd0
mov ecx, esi
call fcn.0042db70
jmp 0x439a6d
cmp eax, 5
jne 0x439a6d
mov eax, dword [esi + 0x16c]
cmp dword [eax + 0x104], ebx
je 0x439a66
mov ecx, dword [esi + 0x290]
mov edx, dword [ecx + 8]
push edx
mov ecx, esi
call fcn.0042b120
mov ecx, esi
call fcn.00435810
mov ecx, esi
call fcn.00435a30
mov ecx, dword [esp + 0x228]
xor ecx, dword [esp + 0x22c]
pop edi
pop esi
pop ebp
pop ebx
call fcn.004c72c5
add esp, 0x21c
ret 4