Function at 0x442950
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa44
mov eax, dword [0x48602c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xa44], ecx
mov eax, dword [ebp + 8]
push eax
call sub.NTHelp.dll_int___cdecl_Help32::FileIsExist_wchar_t__
add esp, 4
test eax, eax
je 0x442983
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp - 0xa44]
add edx, 0x109a
push edx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
jne 0x4429bd
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xa44]
add ecx, 0x109a
push ecx
push str.NAME
push 0x470c58
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp - 0xa44]
add edx, 0x104c
push edx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
jne 0x4429f7
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xa44]
add ecx, 0x104c
push ecx
push str.GUID
push 0x470c70
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp - 0xa44]
add edx, 0x119a
push edx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
jne 0x442adf
mov byte [ebp - 0x218], 0
push 0x103
push 0
lea eax, [ebp - 0x217]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0xa44]
add edx, 0x119a
push edx
call sub.NTHelp.dll_void___cdecl_Help32::Wchartochar_wchar_t_const___char___int_
add esp, 0xc
mov byte [ebp - 0x110], 0
push 0x103
push 0
lea eax, [ebp - 0x10f]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x218]
push edx
call sub.NTHelp.dll_int___cdecl_Help32::Encrypto_unsigned_char___unsigned_char___int_
add esp, 0xc
mov word [ebp - 0x420], 0
push 0x206
push 0
lea eax, [ebp - 0x41e]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x420]
push ecx
lea edx, [ebp - 0x110]
push edx
call sub.NTHelp.dll_void___cdecl_Help32::Chartowchar_char_const___wchar_t___int_
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x420]
push ecx
push str.TOKEN
push str.LOCAL
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp - 0xa44]
add edx, 0x14a2
push edx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
jne 0x442b19
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xa44]
add ecx, 0x14a2
push ecx
push 0x470c94
push 0x470c9c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp - 0xa44]
cmp dword [edx + 0x19a0], 0
jbe 0x442b7b
mov word [ebp - 0x628], 0
push 0x206
push 0
lea eax, [ebp - 0x626]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
push 0xa
lea edx, [ebp - 0x628]
push edx
mov eax, dword [ebp - 0xa44]
mov ecx, dword [eax + 0x19a0]
push ecx
call dword [sym.imp.MSVCR80.dll__itow]
add esp, 0xc
push eax
push str.PORT
push str.LOGIN
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp dword [ebp + 0x10], 0
je 0x442c98
cmp dword [ebp + 0xc], 0
je 0x442c98
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0xc]
push eax
push str.USER
push 0x470ccc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp + 0x10]
push ecx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
jne 0x442c7f
mov byte [ebp - 0x838], 0
push 0x103
push 0
lea edx, [ebp - 0x837]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x838]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call sub.NTHelp.dll_void___cdecl_Help32::Wchartochar_wchar_t_const___char___int_
add esp, 0xc
mov byte [ebp - 0x730], 0
push 0x103
push 0
lea edx, [ebp - 0x72f]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x730]
push eax
lea ecx, [ebp - 0x838]
push ecx
call sub.NTHelp.dll_int___cdecl_Help32::Encrypto_unsigned_char___unsigned_char___int_
add esp, 0xc
mov word [ebp - 0xa40], 0
push 0x206
push 0
lea edx, [ebp - 0xa3e]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x208
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x730]
push ecx
call sub.NTHelp.dll_void___cdecl_Help32::Chartowchar_char_const___wchar_t___int_
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0xa40]
push eax
push 0x470cd4
push 0x470ce0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x442c98
mov ecx, dword [ebp + 8]
push ecx
push 0x470ce8
push str.PASS
push 0x470cf8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp + 8]
push edx
call sub.NTHelp.dll_int___cdecl_Help32::FileIsExist_wchar_t__
add esp, 4
test eax, eax
je 0x442cb4
push 2
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043ad38
mov esp, ebp
pop ebp
ret 0xc