Function at 0x4095e0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4311e3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [esi + 4]
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0xf4], 4
je 0x409640
call fcn.00408390
mov eax, dword [esi + 4]
cmp eax, ebp
je 0x40963d
mov ecx, dword [eax - 4]
lea edi, [eax - 4]
push 0x4084c0
push ecx
push 0x38
push eax
call fcn.00415fe9
push edi
call fcn.004277e3
add esp, 4
mov dword [esi + 4], ebp
mov edi, dword [esp + 0x118]
mov edx, edi
imul edx, edx, 0x38
add edx, 4
push ebx
push edx
mov dword [esi + 8], edi
call fcn.004277e8
add esp, 4
cmp eax, ebp
je 0x40967c
push 0x4084c0
push 0x4084f0
push edi
lea ebx, [eax + 4]
push 0x38
push ebx
mov dword [eax], edi
call fcn.0041613c
mov eax, ebx
jmp 0x40967e
xor eax, eax
mov dword [esi + 4], eax
mov eax, dword [esi + 0xc]
xor edx, edx
div edi
cmp edi, ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], eax
jle 0x409a01
xor edi, edi
mov dword [esp + 0x14], ebp
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x100]
mov dword [edi + eax], esi
mov edx, dword [esi + 4]
mov ebx, dword [edi + edx + 4]
lea ebp, [edi + edx + 4]
sub ebx, 0x10
lea eax, [ecx - 0x10]
cmp eax, ebx
je 0x409709
mov edx, dword [ebx + 0xc]
test edx, edx
jl 0x4096fd
mov edx, dword [eax]
cmp edx, dword [ebx]
jne 0x4096fd
push eax
call fcn.00401b40
mov dword [esp + 0x14], eax
add esp, 4
or ecx, 0xffffffff
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4096f1
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0x10
mov dword [ebp], eax
jmp 0x409709
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, ebp
call fcn.00401ce0
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x104]
mov dword [edi + ecx + 0xc], edx
mov eax, dword [esi + 4]
mov ebx, dword [edi + eax + 8]
mov ecx, dword [esp + 0x108]
lea ebp, [edi + eax + 8]
sub ebx, 0x10
lea eax, [ecx - 0x10]
cmp eax, ebx
je 0x40977c
mov edx, dword [ebx + 0xc]
test edx, edx
jl 0x409770
mov edx, dword [eax]
cmp edx, dword [ebx]
jne 0x409770
push eax
call fcn.00401b40
mov dword [esp + 0x14], eax
add esp, 4
or ecx, 0xffffffff
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x409764
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0x10
mov dword [ebp], eax
jmp 0x40977c
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, ebp
call fcn.00401ce0
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x10c]
mov dword [edi + ecx + 0x10], edx
mov eax, dword [esi + 4]
mov ebx, dword [edi + eax + 0x14]
mov ecx, dword [esp + 0x110]
lea ebp, [edi + eax + 0x14]
sub ebx, 0x10
lea eax, [ecx - 0x10]
cmp eax, ebx
je 0x4097ef
mov edx, dword [ebx + 0xc]
test edx, edx
jl 0x4097e3
mov edx, dword [eax]
cmp edx, dword [ebx]
jne 0x4097e3
push eax
call fcn.00401b40
mov dword [esp + 0x14], eax
add esp, 4
or ecx, 0xffffffff
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4097d7
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0x10
mov dword [ebp], eax
jmp 0x4097ef
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, ebp
call fcn.00401ce0
mov ecx, dword [esi + 4]
mov ebx, dword [edi + ecx + 0x18]
lea ebp, [edi + ecx + 0x18]
mov ecx, dword [esp + 0x114]
sub ebx, 0x10
lea eax, [ecx - 0x10]
cmp eax, ebx
je 0x409854
mov edx, dword [ebx + 0xc]
test edx, edx
jl 0x409848
mov edx, dword [eax]
cmp edx, dword [ebx]
jne 0x409848
push eax
call fcn.00401b40
mov dword [esp + 0x14], eax
add esp, 4
or ecx, 0xffffffff
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40983c
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0x10
mov dword [ebp], eax
jmp 0x409854
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, ebp
call fcn.00401ce0
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x120]
mov dword [edi + ecx + 0x2c], edx
mov eax, dword [esi + 4]
mov dword [edi + eax + 0x28], 0
call fcn.004282b2
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x118]
push eax
push ecx
lea edx, [esp + 0x18]
push str._s__d
push edx
mov byte [esp + 0x108], 5
call fcn.004030b0
mov ebp, dword [esp + 0x20]
push 0
push ebp
call fcn.004158c7
add esp, 0x18
cmp eax, 0xffffffff
je 0x4098f5
push 2
push ebp
call fcn.004158c7
add esp, 8
cmp eax, 0xffffffff
jne 0x4098ee
push 4
push str._tmp
lea ecx, [esp + 0x18]
call fcn.00401de0
mov ebp, dword [esp + 0x10]
push 0
push ebp
call fcn.004158c7
add esp, 8
cmp eax, 0xffffffff
jne 0x4098b8
jmp 0x4098f5
push ebp
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esi + 4]
mov ebx, dword [edi + eax + 0x1c]
lea ecx, [edi + eax + 0x1c]
lea eax, [ebp - 0x10]
sub ebx, 0x10
cmp eax, ebx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
je 0x409956
mov edx, dword [ebx + 0xc]
test edx, edx
jl 0x40994c
mov edx, dword [eax]
cmp edx, dword [ebx]
jne 0x40994c
push eax
call fcn.00401b40
mov ebp, eax
add esp, 4
or ecx, 0xffffffff
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x409941
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add ebp, 0x10
mov dword [eax], ebp
jmp 0x409956
mov eax, dword [ebp - 0xc]
push eax
push ebp
call fcn.00401ce0
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x18]
dec eax
cmp ebx, eax
mov eax, dword [esp + 0x14]
jge 0x409980
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x1c]
mov dword [edi + ecx + 0x20], eax
mov ecx, dword [esi + 4]
add eax, edx
mov dword [edi + ecx + 0x24], eax
jmp 0x409991
mov edx, dword [esi + 4]
mov dword [edi + edx + 0x20], eax
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
mov dword [edi + ecx + 0x24], edx
mov eax, dword [esi + 4]
push 0
push 0
push 0
push 0
add eax, edi
push eax
push 0x4092c0
call fcn.0042815b
mov edx, dword [eax + 0x28]
mov ecx, dword [esi + 4]
mov dword [esp + ebx*4 + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [edi + ecx + 0x30], edx
mov byte [esp + 0xf8], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4099da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
add edx, eax
mov eax, dword [esp + 0x11c]
inc ebx
add edi, 0x38
cmp ebx, eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], edx
jl 0x40969e
xor ebp, ebp
mov ecx, dword [esi + 8]
xor eax, eax
cmp ecx, ebp
pop ebx
jle 0x409a25
mov ecx, dword [esi + 4]
add ecx, 0x34
cmp dword [ecx], 3
je 0x409b1e
mov edx, dword [esi + 8]
inc eax
add ecx, 0x38
cmp eax, edx
jl 0x409a11
xor eax, eax
xor ecx, ecx
cmp eax, ebp
mov eax, dword [esp + 0xfc]
sete cl
add eax, 0xfffffff0
mov byte [esp + 0xf4], 3
lea edx, [eax + 0xc]
mov esi, ecx
mov ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x409a5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x104]
add eax, 0xfffffff0
mov byte [esp + 0xf4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409a84
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10c]
add eax, 0xfffffff0
mov byte [esp + 0xf4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409aad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x110]
add eax, 0xfffffff0
mov byte [esp + 0xf4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409ad6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x114]
add eax, 0xfffffff0
mov dword [esp + 0xf4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409b02
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xec]
pop edi
mov eax, esi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0xec
ret 0x24
mov eax, 1
jmp 0x409a27