Function at 0x406340
Capabilities:
Delete directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3f8
mov eax, dword [0x42a21c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x3cc], 0
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3f4], 1
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3b4], 0x76
jmp 0x406396
mov eax, dword [ebp - 0x3b4]
add eax, 1
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x118
jg 0x406573
push 0x104
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x3b4]
push edx
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x108]
test eax, eax
je 0x40656e
lea ecx, [ebp - 0x108]
push ecx
call fcn.0040f970
add esp, 4
test eax, eax
je 0x40656e
mov edx, dword [0x42b32c]
mov dword [ebp - 0x3c0], edx
cmp dword [ebp - 0x3c0], 0
je 0x40656e
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0
je 0x406569
mov ecx, dword [ebp - 0x3b8]
cmp dword [ecx + 0xc], 0
je 0x406569
mov edx, dword [ebp - 0x3b8]
mov eax, dword [edx]
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x3b8]
mov edx, dword [ecx + 0xc]
push edx
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x420590
lea ecx, [ebp - 0x310]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 4
push str.DIR
lea ecx, [ebp - 0x108]
push ecx
call fcn.00410f90
add esp, 0xc
test eax, eax
jne 0x4064a2
lea edx, [ebp - 0x310]
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov dword [ebp - 0x3c4], eax
jmp 0x40651e
lea eax, [ebp - 0x310]
push eax
call fcn.00410533
add esp, 4
mov dword [ebp - 0x3c4], eax
push 0x420478
lea ecx, [ebp - 0x310]
push ecx
call fcn.00401320
add esp, 8
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x40651e
mov dword [ebp - 0x3bc], 1
cmp dword [ebp - 0x3bc], 0xa
jge 0x40651e
mov edx, dword [ebp - 0x3bc]
add edx, 0x30
mov eax, dword [ebp - 0x3c8]
mov byte [eax], dl
lea ecx, [ebp - 0x310]
push ecx
call fcn.00410533
add esp, 4
mov edx, dword [ebp - 0x3bc]
add edx, 1
mov dword [ebp - 0x3bc], edx
jmp 0x4064e4
cmp dword [ebp - 0x3c4], 0
je 0x406569
cmp dword [ebp - 0x3c4], 0
jne 0x406569
cmp dword [ebp - 0x3b4], 0x76
jl 0x406569
cmp dword [ebp - 0x3b4], 0x118
jg 0x406569
push 0
lea eax, [ebp - 0x310]
push eax
call fcn.004112f8
add esp, 8
test eax, eax
je 0x406569
mov ecx, dword [ebp - 0x3cc]
add ecx, 1
mov dword [ebp - 0x3cc], ecx
jmp 0x4063f2
jmp 0x406387
push 0x104
lea edx, [ebp - 0x108]
push edx
push 0x38
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
mov dword [ebp - 0x3b4], 0x119
jmp 0x4065a4
mov eax, dword [ebp - 0x3b4]
add eax, 1
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x12c
jg 0x406651
push 0x104
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x3b4]
push edx
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x108]
test eax, eax
je 0x40664c
lea ecx, [ebp - 0x108]
push ecx
call fcn.0040f970
add esp, 4
test eax, eax
je 0x40664c
push 0x42b218
lea edx, [ebp - 0x310]
push edx
call fcn.0040f870
add esp, 8
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x310]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 4
push str.DIR
lea edx, [ebp - 0x108]
push edx
call fcn.00410f90
add esp, 0xc
test eax, eax
jne 0x40663d
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
jmp 0x40664c
lea ecx, [ebp - 0x310]
push ecx
call fcn.00410533
add esp, 4
jmp 0x406595
mov dword [ebp - 0x3b0], 0x80000000
mov dword [ebp - 0x3ac], str..ofb
mov dword [ebp - 0x3a8], 0x80000000
mov dword [ebp - 0x3a4], str..ofs
mov dword [ebp - 0x3a0], 0x80000000
mov dword [ebp - 0x39c], str.ofb_auto_file
mov dword [ebp - 0x398], 0x80000000
mov dword [ebp - 0x394], str.ofs_auto_file
mov dword [ebp - 0x390], 0x80000000
mov dword [ebp - 0x38c], str.CLSID0CEF79D8_D373_11D3_A7D3_00062962BF17
mov dword [ebp - 0x388], 0x80000000
mov dword [ebp - 0x384], str.IEOnflow.IEOnflow1
mov dword [ebp - 0x380], 0x80000000
mov dword [ebp - 0x37c], str.IEOnflow.IEOnflow1.6
mov dword [ebp - 0x378], 0x80000000
mov dword [ebp - 0x374], str.IEOnflow.IEOnflow1.7
mov dword [ebp - 0x370], 0x80000000
mov dword [ebp - 0x36c], str.Interface0CEF79D7_D373_11D3_A7D3_00062962BF17
mov dword [ebp - 0x368], 0x80000000
mov dword [ebp - 0x364], str.TypeLib0CEF79CB_D373_11D3_A7D3_00062962BF17
mov dword [ebp - 0x360], 0x80000002
mov dword [ebp - 0x35c], str.SOFTWAREClasses.ofb
mov dword [ebp - 0x358], 0x80000002
mov dword [ebp - 0x354], str.SOFTWAREClassesofb_auto_file
mov dword [ebp - 0x350], 0x80000002
mov dword [ebp - 0x34c], str.SOFTWAREClassesofs_auto_file
mov dword [ebp - 0x348], 0x80000002
mov dword [ebp - 0x344], str.SOFTWAREClassesCLSID0CEF79D8_D373_11D3_A7D3_00062962BF17
mov dword [ebp - 0x340], 0x80000002
mov dword [ebp - 0x33c], str.SOFTWAREClassesInterface0CEF79D7_D373_11D3_A7D3_00062962BF17
mov dword [ebp - 0x338], 0x80000002
mov dword [ebp - 0x334], str.SOFTWAREClassesTypelib0CEF79CB_D373_11D3_A7D3_00062962BF17
mov dword [ebp - 0x330], 0x80000002
mov dword [ebp - 0x32c], str.SOFTWAREMicrosoftInternet_ExplorerPluginsMIME_video_x_onflow
mov dword [ebp - 0x328], 0x80000002
mov dword [ebp - 0x324], str.SoftwareMicrosoftWindowsCurrentVersionUninstallOnflow
mov dword [ebp - 0x320], 0x80000001
mov dword [ebp - 0x31c], str.SoftwareNetscapeNetscape_NavigatorDefault_Plugin
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x3f0], 0x80000002
mov dword [ebp - 0x3ec], str.SOFTWAREMicrosoftInternet_ExplorerPluginsExtension
mov dword [ebp - 0x3e8], str.Content_Type
mov dword [ebp - 0x3e4], 0x4202e4
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 0
mov dword [ebp - 0x3d4], 0
call fcn.00405d90
mov dword [ebp - 0x3b4], 0
jmp 0x406851
mov edx, dword [ebp - 0x3b4]
add edx, 1
mov dword [ebp - 0x3b4], edx
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp + eax*8 - 0x3ac], 0
je 0x406887
mov ecx, dword [ebp - 0x3b4]
mov edx, dword [ebp + ecx*8 - 0x3ac]
push edx
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp + eax*8 - 0x3b0]
push ecx
call fcn.00406920
add esp, 8
jmp 0x406842
mov dword [ebp - 0x3b4], 0
jmp 0x4068a2
mov edx, dword [ebp - 0x3b4]
add edx, 1
mov dword [ebp - 0x3b4], edx
mov eax, dword [ebp - 0x3b4]
shl eax, 4
cmp dword [ebp + eax - 0x3ec], 0
je 0x406903
mov ecx, dword [ebp - 0x3b4]
shl ecx, 4
mov edx, dword [ebp + ecx - 0x3e4]
push edx
mov eax, dword [ebp - 0x3b4]
shl eax, 4
mov ecx, dword [ebp + eax - 0x3e8]
push ecx
mov edx, dword [ebp - 0x3b4]
shl edx, 4
mov eax, dword [ebp + edx - 0x3ec]
push eax
mov ecx, dword [ebp - 0x3b4]
shl ecx, 4
mov edx, dword [ebp + ecx - 0x3f0]
push edx
call fcn.00406ab0
add esp, 0x10
jmp 0x406893
mov eax, dword [ebp - 0x3d0]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040af7c
mov esp, ebp
pop ebp
ret