Function at 0x402faa
Capabilities:
Delete directory

Disassembly:
push ebp
push ebx
mov edx, 0xa
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x402fb1
mov edx, dword [esp + 0x34]
lea ecx, [esp]
call fcn.00405060
mov dword [esp + 4], 1
push dword [0x4134d8]
call fcn.0040c58a
push dword [0x413a50]
push dword [0x413a50]
push dword [0x413524]
push dword [0x413a50]
push dword [0x413a50]
call fcn.0040c54a
mov edx, dword [0x412324]
add dword [esp], edx
call fcn.004055e0
lea eax, [esp + 0xc]
push eax
call fcn.0040f040
push dword [esp + 8]
push dword [esp + 4]
call fcn.004024e7
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
pop eax
mov dword [0x413478], eax
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x10]
jl 0x403276
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x413564]
shl ebx, 3
add ebp, ebx
mov edx, dword [ebp]
push dword [0x413a50]
call fcn.0040f120
lea eax, [esp + 0x18]
push eax
call fcn.0040f040
mov ebx, dword [0x41345c]
cmp ebx, 1
je 0x403105
push dword [esp + 0x14]
push 1
call fcn.0040ca00
and eax, eax
je 0x403105
push 1
call fcn.0040c710
push dword [0x413a50]
push dword [0x413a50]
push 1
push dword [esp + 0x20]
call fcn.00405680
inc dword [0x413a50]
mov edx, 0x412023
pop ecx
mov dword [0x413a50], ecx
add ecx, dword [0x412324]
call fcn.0040f0c0
jne 0x403100
mov edx, dword [esp + 0x18]
push dword [0x413a50]
call fcn.0040f120
mov edx, dword [esp + 0x18]
call fcn.0040f120
mov edx, 0x412050
call fcn.0040f120
lea eax, [esp + 0x1c]
push eax
call fcn.0040f040
jmp 0x40326c
push dword [esp + 0x14]
push 1
call fcn.0040c930
and eax, eax
je 0x403207
push dword [0x413a50]
push dword [esp + 0x18]
mov edx, dword [0x413560]
push dword [0x413a50]
call fcn.0040f120
push dword [0x413a50]
push dword [0x413a50]
mov eax, dword [esp + 0x30]
cdq
push edx
push eax
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.00405860
pop eax
mov edx, dword [0x412324]
add dword [esp], edx
call fcn.004085cd
pop dword [0x413a50]
mov ebx, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x1c], ebx
push dword [esp + 0x1c]
pop eax
mov dword [0x413478], eax
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x413564]
shl ebx, 3
add ebp, ebx
push dword [ebp + 4]
pop eax
mov dword [0x413474], eax
push dword [0x413474]
mov ebx, dword [0x413550]
add ebx, dword [esp + 0x24]
push ebx
push 1
call fcn.0040cab0
push 1
call fcn.0040c710
mov ebx, dword [esp + 0x20]
add ebx, dword [0x413474]
mov dword [esp + 0x20], ebx
push dword [0x41356c]
call fcn.004097ad
mov edx, dword [esp + 0x14]
push dword [0x413a50]
call fcn.0040f120
mov ebp, dword [0x413570]
lea eax, [ebp + 8]
push eax
call fcn.0040f040
push dword [esp + 0x14]
call fcn.0040dbb0
push eax
pop eax
mov dword [ebp + 0xc], eax
jmp 0x40326c
push dword [0x413a50]
push dword [0x413a50]
push 1
push dword [esp + 0x20]
call fcn.00405680
inc dword [0x413a50]
mov edx, 0x412023
pop ecx
mov dword [0x413a50], ecx
add ecx, dword [0x412324]
call fcn.0040f0c0
jne 0x40326c
mov edx, dword [esp + 0x18]
push dword [0x413a50]
call fcn.0040f120
mov edx, dword [esp + 0x18]
call fcn.0040f120
mov edx, 0x412050
call fcn.0040f120
lea eax, [esp + 0x1c]
push eax
call fcn.0040f040
inc dword [esp + 0x10]
jno 0x40303b
push dword [0x413a50]
push dword [0x413a50]
push dword [0x413a50]
push dword [0x413a50]
push dword [0x413a50]
push 0x412050
push dword [esp + 0x30]
call fcn.00405ad0
mov edx, dword [0x412324]
add dword [esp], edx
call fcn.00405190
mov edx, dword [0x412324]
add dword [esp], edx
call fcn.004052c0
pop dword [0x413a50]
mov ebx, eax
and ebx, ebx
jle 0x40337b
push dword [0x413a50]
push 0x24
mov edx, dword [0x413490]
push dword [0x413a50]
call fcn.0040f120
mov edx, str._r_n_r_n
call fcn.0040f120
mov edx, dword [esp + 0x24]
call fcn.0040f120
mov edx, 0x412050
call fcn.0040f120
mov edx, dword [0x41346c]
call fcn.0040f120
inc dword [0x413a50]
push dword [0x413548]
mov edx, dword [0x412324]
add dword [esp + 4], edx
call fcn.004080d0
pop dword [0x413a50]
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x24]
cmp ebx, 7
jne 0x40337b
call fcn.00403d19
push dword [0x4134e4]
call fcn.0040c53c
push dword [0x413544]
call sub.KERNEL32.DLL_RemoveDirectoryA
push dword [0x4134d0]
call fcn.0040c53c
push dword [0x413540]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x4017ab
mov eax, 1
jmp 0x403384
push dword [esp]
call fcn.0040f0f0
push dword [esp + 0x18]
call fcn.0040f0f0
push dword [esp + 0x14]
call fcn.0040f0f0
push dword [esp + 8]
call fcn.0040f0f0
add esp, 0x28
pop ebx
pop ebp
ret 4