Function at 0x402f9c
Capabilities:
Delete directory

Disassembly:
push ebp
push ebx
mov edx, 0xa
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x402fa3
mov edx, dword [esp + 0x34]
lea ecx, [esp]
call fcn.00405060
mov dword [esp + 4], 1
push dword [0x41354c]
call fcn.0040ca6a
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413598]
push dword [0x413ad0]
push dword [0x413ad0]
call fcn.0040ca2a
mov edx, dword [0x412320]
add dword [esp], edx
call fcn.004055e0
lea eax, [esp + 0xc]
push eax
call fcn.0040f520
push dword [esp + 8]
push dword [esp + 4]
call fcn.004024e7
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
pop eax
mov dword [0x4134ec], eax
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x10]
jl 0x403268
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x4135d8]
shl ebx, 3
add ebp, ebx
mov edx, dword [ebp]
push dword [0x413ad0]
call fcn.0040f600
lea eax, [esp + 0x18]
push eax
call fcn.0040f520
mov ebx, dword [0x4134d0]
cmp ebx, 1
je 0x4030f7
push dword [esp + 0x14]
push 1
call fcn.0040cee0
and eax, eax
je 0x4030f7
push 1
call fcn.0040cbf0
push dword [0x413ad0]
push dword [0x413ad0]
push 1
push dword [esp + 0x20]
call fcn.00405680
inc dword [0x413ad0]
mov edx, 0x412023
pop ecx
mov dword [0x413ad0], ecx
add ecx, dword [0x412320]
call fcn.0040f5a0
jne 0x4030f2
mov edx, dword [esp + 0x18]
push dword [0x413ad0]
call fcn.0040f600
mov edx, dword [esp + 0x18]
call fcn.0040f600
mov edx, 0x41204b
call fcn.0040f600
lea eax, [esp + 0x1c]
push eax
call fcn.0040f520
jmp 0x40325e
push dword [esp + 0x14]
push 1
call fcn.0040ce10
and eax, eax
je 0x4031f9
push dword [0x413ad0]
push dword [esp + 0x18]
mov edx, dword [0x4135d4]
push dword [0x413ad0]
call fcn.0040f600
push dword [0x413ad0]
push dword [0x413ad0]
mov eax, dword [esp + 0x30]
cdq
push edx
push eax
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.00405860
pop eax
mov edx, dword [0x412320]
add dword [esp], edx
call fcn.004085cd
pop dword [0x413ad0]
mov ebx, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x1c], ebx
push dword [esp + 0x1c]
pop eax
mov dword [0x4134ec], eax
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x4135d8]
shl ebx, 3
add ebp, ebx
push dword [ebp + 4]
pop eax
mov dword [0x4134e8], eax
push dword [0x4134e8]
mov ebx, dword [0x4135c4]
add ebx, dword [esp + 0x24]
push ebx
push 1
call fcn.0040cf90
push 1
call fcn.0040cbf0
mov ebx, dword [esp + 0x20]
add ebx, dword [0x4134e8]
mov dword [esp + 0x20], ebx
push dword [0x4135e0]
call fcn.00409cad
mov edx, dword [esp + 0x14]
push dword [0x413ad0]
call fcn.0040f600
mov ebp, dword [0x4135e4]
lea eax, [ebp + 8]
push eax
call fcn.0040f520
push dword [esp + 0x14]
call fcn.0040e090
push eax
pop eax
mov dword [ebp + 0xc], eax
jmp 0x40325e
push dword [0x413ad0]
push dword [0x413ad0]
push 1
push dword [esp + 0x20]
call fcn.00405680
inc dword [0x413ad0]
mov edx, 0x412023
pop ecx
mov dword [0x413ad0], ecx
add ecx, dword [0x412320]
call fcn.0040f5a0
jne 0x40325e
mov edx, dword [esp + 0x18]
push dword [0x413ad0]
call fcn.0040f600
mov edx, dword [esp + 0x18]
call fcn.0040f600
mov edx, 0x41204b
call fcn.0040f600
lea eax, [esp + 0x1c]
push eax
call fcn.0040f520
inc dword [esp + 0x10]
jno 0x40302d
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413ad0]
push 0x41204b
push dword [esp + 0x30]
call fcn.00405ad0
mov edx, dword [0x412320]
add dword [esp], edx
call fcn.00405190
mov edx, dword [0x412320]
add dword [esp], edx
call fcn.004052c0
pop dword [0x413ad0]
mov ebx, eax
and ebx, ebx
jle 0x40336d
push dword [0x413ad0]
push 0x24
mov edx, dword [0x413504]
push dword [0x413ad0]
call fcn.0040f600
mov edx, str._r_n_r_n
call fcn.0040f600
mov edx, dword [esp + 0x24]
call fcn.0040f600
mov edx, 0x41204b
call fcn.0040f600
mov edx, dword [0x4134e0]
call fcn.0040f600
inc dword [0x413ad0]
push dword [0x4135bc]
mov edx, dword [0x412320]
add dword [esp + 4], edx
call fcn.004080d0
pop dword [0x413ad0]
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x24]
cmp ebx, 7
jne 0x40336d
call fcn.00403d0b
push dword [0x413558]
call fcn.0040ca1c
push dword [0x4135b8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push dword [0x413544]
call fcn.0040ca1c
push dword [0x4135b4]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x4017bc
mov eax, 1
jmp 0x403376
push dword [esp]
call fcn.0040f5d0
push dword [esp + 0x18]
call fcn.0040f5d0
push dword [esp + 0x14]
call fcn.0040f5d0
push dword [esp + 8]
call fcn.0040f5d0
add esp, 0x28
pop ebx
pop ebp
ret 4