Function at 0x40c5a3
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov eax, 0x417e85
call int.00414c40
sub esp, 0xa98
mov eax, dword [0x4233f0]
push esi
mov esi, dword [ebp + 8]
push edi
xor eax, ebp
xor edi, edi
cmp esi, edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xaa0], esi
je 0x40c847
cmp word [esi], di
je 0x40c847
push esi
call fcn.0040c478
test al, al
pop ecx
je 0x40c847
push esi
lea ecx, [ebp - 0x84c]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
cmp dword [ebp - 0x834], 8
mov eax, dword [ebp - 0x848]
mov dword [ebp - 4], edi
jae 0x40c60f
lea eax, [ebp - 0x848]
mov ecx, dword [ebp - 0x838]
mov ax, word [eax + ecx*2 - 2]
cmp ax, 0x5c
je 0x40c637
cmp ax, 0x2f
je 0x40c637
push 0x41a960
lea ecx, [ebp - 0x84c]
call dword [0x41a180]
mov word [ebp - 0x420], di
xor eax, eax
cmp dword [ebp - 0x834], 8
mov ecx, 0x81
lea edi, [ebp - 0x41e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x848]
jae 0x40c664
lea eax, [ebp - 0x848]
mov esi, dword [sym.imp.MSVCR71.dll_swprintf]
push ebx
push eax
lea eax, [ebp - 0x420]
push str._s.
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0xa9c]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xaa4], eax
je 0x40c830
mov ebx, 0x41b138
mov edi, dword [sym.imp.MSVCR71.dll__wcsicmp]
lea eax, [ebp - 0xa70]
push 0x41b134
push eax
call edi
test eax, eax
pop ecx
pop ecx
je 0x40c7e7
lea eax, [ebp - 0xa70]
push 0x41b12c
push eax
call edi
test eax, eax
pop ecx
pop ecx
je 0x40c7e7
test byte [ebp - 0xa9c], 0x10
je 0x40c745
and word [ebp - 0x218], 0
xor eax, eax
cmp dword [ebp - 0x834], 8
mov ecx, 0x81
lea edi, [ebp - 0x216]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x848]
jae 0x40c712
lea eax, [ebp - 0x848]
lea ecx, [ebp - 0xa70]
push ecx
push eax
lea eax, [ebp - 0x218]
push ebx
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.0040c5a3
add esp, 0x14
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x40c7e7
lea eax, [ebp - 0xa70]
push str.Thumbs.db
push eax
call edi
test eax, eax
pop ecx
pop ecx
jne 0x40c79e
and word [ebp - 0x628], ax
cmp dword [ebp - 0x834], 8
mov ecx, 0x81
lea edi, [ebp - 0x626]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x848]
jae 0x40c784
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x628]
push str._sThumbs.db
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x628]
jmp 0x40c7e0
cmp dword [ebp - 0x834], 8
mov eax, dword [ebp - 0x848]
jae 0x40c7b3
lea eax, [ebp - 0x848]
lea ecx, [ebp - 0xa70]
push ecx
push eax
lea eax, [ebp - 0x830]
push ebx
push eax
call esi
add esp, 0x10
push 0x80
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xa9c]
push eax
push dword [ebp - 0xaa4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40c6a5
push dword [ebp - 0xaa4]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0xaa0]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push dword [ebp - 0xaa0]
call fcn.0040c478
mov bl, al
neg bl
sbb bl, bl
pop ecx
inc bl
jmp 0x40c832
xor bl, bl
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84c]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov al, bl
pop ebx
jmp 0x40c854
push 0x132b3a1
call fcn.0040cad2
pop ecx
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
xor ecx, ebp
pop esi
call fcn.00414cf1
leave
ret