Function at 0x1039873
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
and dword [ebp - 4], 0
push ebx
push esi
push edi
mov eax, dword [0x1075004]
mov esi, 0x1075004
cmp eax, esi
je 0x10398b0
test byte [eax + 0x1c], 4
je 0x10398b0
cmp byte [eax + 0x19], 5
jb 0x10398b0
mov ebx, 0x1002380
push ebx
push 0x42
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010090c5
jmp 0x10398b5
mov ebx, 0x1002380
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
call fcn.01036d8b
mov edi, dword [ebp - 4]
test eax, eax
jne 0x10398f8
mov eax, dword [0x1075004]
cmp eax, esi
je 0x1039b56
test byte [eax + 0x1c], 4
je 0x1039b56
cmp byte [eax + 0x19], 2
jb 0x1039b56
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push 0x43
jmp 0x1039b46
push edi
call fcn.01034bc5
test eax, eax
je 0x1039b56
mov eax, dword [edi + 0x144]
mov esi, dword [edi + 0x140]
push eax
push esi
mov dword [ebp - 4], eax
call fcn.01035402
test eax, eax
jne 0x1039994
mov eax, dword [0x1075004]
cmp eax, 0x1075004
je 0x1039950
test byte [eax + 0x1c], 4
je 0x1039950
cmp byte [eax + 0x19], 2
jb 0x1039950
push dword [edi + 0xc]
push dword [edi + 8]
push dword [ebp - 4]
push esi
push ebx
push 0x44
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01034303
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1039b56
mov eax, dword [0x1075004]
cmp eax, 0x1075004
je 0x1039b56
test byte [eax + 0x1c], 4
je 0x1039b56
cmp byte [eax + 0x19], 2
jb 0x1039b56
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
push ebx
push 0x45
jmp 0x10399f6
mov ecx, dword [edi + 0x20]
cmp ecx, 2
jne 0x10399aa
mov ecx, dword [edi + 0x148]
neg ecx
sbb ecx, ecx
and ecx, 0x3f
inc ecx
push ecx
push 0
lea ecx, [edi + 0xfc]
push ecx
push eax
push 0x1077f70
call fcn.01038d43
mov esi, eax
test esi, esi
jne 0x1039a0b
mov eax, dword [0x1075004]
cmp eax, 0x1075004
je 0x1039b56
test byte [eax + 0x1c], 4
je 0x1039b56
cmp byte [eax + 0x19], 2
jb 0x1039b56
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
push ebx
push 0x46
mov eax, dword [0x1075004]
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100a6e9
jmp 0x1039b56
mov eax, dword [edi + 0x588]
mov dword [esi + 0x590], eax
lea eax, [edi + 0x388]
push eax
mov ebx, 0x100
push ebx
lea eax, [esi + 0x390]
push eax
call fcn.01009a5d
test eax, eax
jge 0x1039a64
mov ecx, dword [0x1075004]
cmp ecx, 0x1075004
je 0x1039b56
test byte [ecx + 0x1c], 4
je 0x1039b56
cmp byte [ecx + 0x19], 2
jb 0x1039b56
push eax
push 0x1002380
push 0x47
jmp 0x1039aaa
lea eax, [edi + 0x14c]
push eax
push ebx
lea eax, [esi + 0x180]
push eax
call fcn.01009a5d
test eax, eax
jge 0x1039aba
mov ecx, dword [0x1075004]
cmp ecx, 0x1075004
je 0x1039b56
test byte [ecx + 0x1c], 4
je 0x1039b56
cmp byte [ecx + 0x19], 2
jb 0x1039b56
push eax
push 0x1002380
push 0x48
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0102ca9d
jmp 0x1039b56
push dword [ebp + 8]
call fcn.0105ccae
cmp dword [ebp + 8], 0
mov dword [esi + 0x2c], eax
je 0x1039af7
test eax, eax
jne 0x1039af7
mov eax, dword [0x1075004]
cmp eax, 0x1075004
je 0x1039b56
test byte [eax + 0x1c], 4
je 0x1039b56
cmp byte [eax + 0x19], 2
jb 0x1039b56
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1002380
push 0x49
jmp 0x1039b46
mov eax, dword [edi + 8]
push dword [esi + 0x34]
mov dword [esi + 8], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
call fcn.0105c5dc
push dword [edi + 0x28]
call fcn.0105ccae
mov dword [esi + 0x34], eax
cmp dword [edi + 0x28], 0
je 0x1039b5d
test eax, eax
jne 0x1039b5d
mov eax, dword [0x1075004]
cmp eax, 0x1075004
je 0x1039b56
test byte [eax + 0x1c], 4
je 0x1039b56
cmp byte [eax + 0x19], 2
jb 0x1039b56
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1002380
push 0x4a
mov eax, dword [0x1075004]
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102ca9d
xor esi, esi
jmp 0x1039beb
mov eax, dword [edi + 0x148]
mov dword [esi + 0x160], eax
mov eax, dword [esi + 0x5e8]
test eax, 0x200
je 0x1039b84
mov eax, dword [esi + 0x15c]
inc dword [eax + 0xe4]
jmp 0x1039ba6
test ebx, eax
je 0x1039b96
mov eax, dword [esi + 0x15c]
inc dword [eax + 0xe0]
jmp 0x1039ba6
test al, al
jns 0x1039ba6
mov eax, dword [esi + 0x15c]
inc dword [eax + 0xe8]
mov eax, dword [edi + 0x378]
mov dword [esi + 0x380], eax
mov eax, dword [edi + 0x37c]
mov dword [esi + 0x384], eax
mov eax, dword [edi + 0x380]
mov dword [esi + 0x388], eax
mov eax, dword [edi + 0x384]
mov dword [esi + 0x38c], eax
mov eax, dword [edi + 0x30]
mov dword [esi + 0x3c], eax
mov eax, dword [edi + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x14], eax
xor esi, esi
inc esi
push edi
call fcn.0105c5dc
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 4