Function at 0x40341b
Capabilities:
Delete directory

Disassembly:
push ebp
push ebx
mov edx, 0xa
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x403422
mov edx, dword [esp + 0x34]
lea ecx, [esp]
call fcn.00404060
mov dword [esp + 4], 1
push dword [0x40e418]
call fcn.00408165
push dword [0x40e778]
push dword [0x40e778]
push 0x40d023
push dword [esp + 0x10]
push dword [esp + 0x10]
call fcn.00404450
lea eax, [esp + 0xc]
push eax
call fcn.0040ac60
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.0040ace0
jne 0x4034e8
mov ebx, dword [esp + 4]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, edx
and ebx, ebx
jne 0x4034bf
push dword [esp + 8]
call fcn.00404560
push eax
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x40e498]
shl ebx, 3
add ebp, ebx
pop eax
mov dword [ebp + 4], eax
mov ebx, dword [esp + 0xc]
inc ebx
mov dword [esp + 0xc], ebx
jmp 0x4034e6
mov edx, dword [esp + 8]
push dword [0x40e778]
call fcn.0040ad10
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x40e498]
shl ebx, 3
add ebp, ebx
lea eax, [ebp]
push eax
call fcn.0040ac60
jmp 0x4034ea
jmp 0x4034f8
mov ebx, dword [esp + 4]
inc ebx
mov dword [esp + 4], ebx
jmp 0x40344e
push dword [esp + 0xc]
pop eax
mov dword [0x40e3c4], eax
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x10]
jl 0x403724
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x40e498]
shl ebx, 3
add ebp, ebx
mov edx, dword [ebp]
push dword [0x40e778]
call fcn.0040ad10
lea eax, [esp + 0x18]
push eax
call fcn.0040ac60
push dword [0x40e778]
push dword [esp + 0x18]
push dword [0x40e778]
mov edx, str.b2eincfile
call fcn.0040ad10
push dword [0x40e778]
push dword [0x40e778]
mov eax, dword [esp + 0x24]
cdq
push edx
push eax
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.004043c0
pop eax
mov edx, dword [0x40d304]
add dword [esp], edx
call fcn.00404de1
pop dword [0x40e778]
mov ebx, dword [0x40e3a8]
cmp ebx, 1
je 0x4035b7
push dword [esp + 0x14]
push 1
call fcn.00408700
and eax, eax
je 0x4035b7
mov eax, 1
jmp 0x4035b9
xor eax, eax
and eax, eax
je 0x403659
push 1
call fcn.00408410
push dword [0x40e778]
push 0x23
mov edx, dword [0x40e3bc]
push dword [0x40e778]
call fcn.0040ad10
mov edx, 0x40d021
call fcn.0040ad10
mov edx, dword [esp + 0x20]
call fcn.0040ad10
mov edx, 0x40d021
call fcn.0040ad10
mov edx, dword [0x40e3d0]
call fcn.0040ad10
inc dword [0x40e778]
push dword [0x40e430]
mov edx, dword [0x40d304]
add dword [esp + 4], edx
call fcn.004048e4
pop dword [0x40e778]
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
cmp ebx, 7
jne 0x403644
jmp 0x40371a
mov ebx, dword [esp + 0x18]
cmp ebx, 2
jne 0x403659
call fcn.00403bd8
xor eax, eax
jmp 0x40381c
push dword [esp + 0x14]
push 1
call fcn.00408630
and eax, eax
je 0x4036ee
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x40e498]
shl ebx, 3
add ebp, ebx
push dword [ebp + 4]
pop eax
mov dword [esp + 0x1c], eax
push dword [esp + 0x1c]
mov ebx, dword [0x40e484]
add ebx, dword [esp + 0x24]
push ebx
push 1
call fcn.00408830
push 1
call fcn.00408410
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x1c]
mov dword [esp + 0x20], ebx
push dword [0x40e4a0]
call fcn.00405670
mov edx, dword [esp + 0x14]
push dword [0x40e778]
call fcn.0040ad10
mov ebp, dword [0x40e4a4]
lea eax, [ebp + 8]
push eax
call fcn.0040ac60
push dword [esp + 0x14]
call fcn.00409890
push eax
pop eax
mov dword [ebp + 0xc], eax
jmp 0x40371a
mov edx, dword [esp + 0x24]
push dword [0x40e778]
call fcn.0040ad10
mov edx, dword [esp + 0x18]
call fcn.0040ad10
mov edx, 0x40d11a
call fcn.0040ad10
lea eax, [esp + 0x28]
push eax
call fcn.0040ac60
inc dword [esp + 0x10]
jno 0x40350a
push dword [0x40e778]
push dword [0x40e778]
push dword [0x40e778]
push dword [0x40e778]
push dword [0x40e778]
push 0x40d11a
push dword [esp + 0x3c]
call fcn.00404890
mov edx, dword [0x40d304]
add dword [esp], edx
call fcn.00404230
mov edx, dword [0x40d304]
add dword [esp], edx
call fcn.00404100
pop dword [0x40e778]
mov ebx, eax
and ebx, ebx
jle 0x403813
push dword [0x40e778]
push 0x24
mov edx, dword [0x40e3e4]
push dword [0x40e778]
call fcn.0040ad10
mov edx, str._r_n_r_n
call fcn.0040ad10
mov edx, dword [esp + 0x30]
call fcn.0040ad10
mov edx, 0x40d11a
call fcn.0040ad10
mov edx, dword [0x40e3b8]
call fcn.0040ad10
inc dword [0x40e778]
push dword [0x40e480]
mov edx, dword [0x40d304]
add dword [esp + 4], edx
call fcn.004048e4
pop dword [0x40e778]
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
cmp ebx, 7
jne 0x403813
call fcn.00403bd8
push dword [0x40e424]
call fcn.0040827c
push dword [0x40e47c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x4020f8
mov eax, 1
jmp 0x40381c
push dword [esp]
call fcn.0040ad70
push dword [esp + 0x24]
call fcn.0040ad70
push dword [esp + 0x14]
call fcn.0040ad70
push dword [esp + 8]
call fcn.0040ad70
add esp, 0x28
pop ebx
pop ebp
ret 4