Function at 0x39e9f9e8
Capabilities:
Delete file

Disassembly:
push 0x7c
mov eax, 0x39ebdc7e
call fcn.39eaecb8
mov esi, dword [ebp + 8]
push esi
lea ecx, [ebp - 0x38]
call fcn.39eb4742
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
jae 0x39e9fa11
lea eax, [ebp - 0x34]
push ebx
push eax
call fcn.39eb4742
pop ecx
pop ecx
test eax, eax
je 0x39e9fa6c
push esi
lea eax, [ebp - 0x88]
push eax
call fcn.39ea2499
mov byte [ebp - 4], 1
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x38]
call fcn.39eb4742
mov byte [ebp - 4], bl
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x88]
call fcn.39eb4742
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
jae 0x39e9fa5a
lea eax, [ebp - 0x34]
push ebx
push eax
call fcn.39eb4742
pop ecx
pop ecx
test eax, eax
je 0x39e9fa6f
jmp 0x39e9fc39
xor esi, esi
inc esi
push 0x39e0b880
lea ecx, [ebp - 0x54]
call fcn.39eb4742
mov byte [ebp - 4], 2
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov byte [ebp - 4], 3
sub esp, 0x1c
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x5c], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 4
lea eax, [ebp - 0x6c]
push eax
sub esp, 0x1c
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x58], esp
push eax
call fcn.39eb4742
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
call fcn.39ea30ae
cmp al, bl
je 0x39e9fc20
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x68]
sub eax, ecx
and eax, 0xfffffff0
cmp eax, 0x10
jne 0x39e9fc20
mov eax, dword [ecx + 8]
sub eax, dword [ecx + 4]
push 0x1c
cdq
pop edi
idiv edi
cmp eax, esi
jne 0x39e9fc20
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x14]
xor ecx, ecx
push 2
add eax, 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.39eb4742
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x14]
add eax, 2
push eax
push ebx
push dword [ebp - 0x58]
call fcn.39e6fce0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 4]
add esp, 0x10
cmp dword [eax + 0x18], 8
jb 0x39e9fb3e
mov ecx, dword [eax + 4]
jmp 0x39e9fb41
lea ecx, [eax + 4]
mov eax, dword [eax + 0x14]
push ecx
add eax, 2
push eax
push dword [ebp - 0x58]
call fcn.39eb4742
mov esi, 0x39e0b874
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x58]
movsw word es:[edi], word [esi]
mov dword [ebp - 0x5c], ebx
call fcn.39eb4742
mov edi, dword [sym.imp.kernel32.dll_DeleteFileW]
add esp, 0x18
jmp 0x39e9fba0
push ebx
push esi
call fcn.39eb4742
pop ecx
pop ecx
test eax, eax
jne 0x39e9fb8f
push esi
call edi
test eax, eax
je 0x39e9fbf4
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
call fcn.39eb4742
add esp, 0xc
mov esi, eax
cmp esi, ebx
jne 0x39e9fb7b
push dword [ebp - 0x58]
call fcn.39eb4742
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
pop ecx
jae 0x39e9fbbb
lea eax, [ebp - 0x34]
push eax
call edi
test eax, eax
je 0x39e9fbfd
call fcn.39ea6050
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.39e9f9ac
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.39eb4742
mov al, 1
jmp 0x39e9fc49
push dword [ebp - 0x58]
call fcn.39eb4742
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.39e9f9ac
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push 1
jmp 0x39e9fc3f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.39e9f9ac
mov byte [ebp - 4], bl
push ebx
push esi
lea ecx, [ebp - 0x54]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push esi
lea ecx, [ebp - 0x38]
call fcn.39eb4742
xor al, al
call fcn.39eaed4a
ret 4