Function at 0x438c3c
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffd84
mov ebx, eax
mov esi, dword [0x48d550]
mov al, byte [ebx + 0x54]
cmp al, 9
je 0x438c69
cmp al, 0xa
je 0x438c69
cmp al, 0xb
je 0x438c69
cmp al, 0xc
je 0x438c69
cmp al, 0xd
jne 0x438d0c
cmp byte [esi + 0x1d7c], 0
jne 0x439765
mov edx, dword [0x48d3ac]
mov dl, byte [edx]
mov eax, ebx
call fcn.004328ac
test al, al
je 0x439765
cmp byte [esi + 0x1d7b], 0
jne 0x438c9d
mov edi, 2
jmp 0x438ca2
mov edi, 3
mov dword [esp + 0x278], edi
fild dword [esp + 0x278]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, 0x1df
call fcn.0040bc04
call fcn.0040f4d4
mov eax, dword [0x48da44]
push eax
push 0
push 0x180
mov eax, dword [0x49ba70]
push eax
call sub.user32.dll_SendMessageA
mov eax, edi
mov edx, dword [0x48d3ac]
mov byte [edx], al
push 0
mov eax, edi
dec eax
push eax
push 0x186
mov eax, dword [0x49ba70]
push eax
call sub.user32.dll_SendMessageA
mov byte [esi + edi + 0x1d79], 1
mov eax, ebx
call fcn.004327cc
cmp byte [ebx + 0x54], 1
jne 0x438d1c
push 4
mov eax, dword [ebx]
push eax
call sub.user32.dll_EndDialog
cmp byte [ebx + 0x54], 0x38
jne 0x438d4d
mov al, byte [esi + 0x18f1]
mov byte [esi + 0x188e], al
mov dl, 0x47
mov ax, 0x2b
call fcn.0042d52c
test eax, eax
je 0x439765
mov al, byte [esi + 0x188e]
mov byte [esi + 0x18f1], al
mov al, byte [ebx + 0x54]
cmp al, 0x2f
je 0x438d58
cmp al, 0x30
jne 0x438d83
mov al, byte [esi + 0x1875]
mov byte [esi + 0x188e], al
mov dl, 0x47
mov ax, 0x2b
call fcn.0042d52c
test eax, eax
je 0x439765
mov al, byte [esi + 0x188e]
mov byte [esi + 0x1875], al
mov al, byte [ebx + 0x54]
cmp al, 0x48
je 0x438d8e
cmp al, 0xf
jne 0x438dd0
push 0xff
mov eax, dword [0x48da44]
push eax
push 0x71
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItemTextA
xor eax, eax
call fcn.0042aef4
test al, al
je 0x438dd0
mov ecx, dword [0x48da44]
mov eax, ebx
mov dx, 0x71
call fcn.0042d910
mov edx, dword [0x48da44]
lea eax, [esi + 0x400]
call fcn.00405c48
mov al, byte [ebx + 0x54]
cmp al, 3
je 0x438ddf
cmp al, 5
jne 0x438ea1
mov edx, dword [0x48d944]
lea eax, [esp + 0x160]
call fcn.00405c48
push 0x439770
lea eax, [esp + 0x164]
push eax
call sub.kernel32.dll_lstrcatA
push 0x64
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItem
mov edi, eax
lea eax, [esp + 0x160]
mov edx, edi
call fcn.00432e78
lea eax, [esp + 0x160]
push eax
push 0
push 0x40d
mov eax, dword [0x48d858]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov edx, dword [0x48d498]
mov dword [edx], eax
lea eax, [esp + 0x160]
push eax
call sub.kernel32.dll_DeleteFileA_1
mov eax, dword [0x48d498]
cmp dword [eax], 0
jge 0x438e75
mov eax, dword [0x48d498]
mov eax, dword [eax]
neg eax
push eax
mov eax, dword [0x48d748]
mov eax, dword [eax]
push eax
push 0xb1
push edi
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d498]
cmp dword [eax], 1
jne 0x438ea1
mov ax, 0x233
call fcn.0040bc04
mov edx, 4
call fcn.00411d74
push 0
push 0
push 0xb1
push edi
call sub.user32.dll_SendMessageA
cmp byte [ebx + 0x54], 2
jne 0x438f87
mov eax, dword [ebx + 0x18]
test eax, eax
jl 0x438f87
mov edx, dword [0x48d830]
push edx
push 0xff
mov edx, eax
mov eax, dword [ebx + 4]
xor ecx, ecx
call fcn.0040b4b8
mov ax, 0x7b
call fcn.0040bc04
mov edx, dword [0x48d830]
call fcn.0040f5a0
mov eax, dword [0x48da44]
mov edx, 0x13
call fcn.00411d74
test al, al
je 0x439765
mov eax, dword [0x48d944]
push eax
push 0xff
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 4]
mov ecx, 2
call fcn.0040b4b8
mov eax, dword [0x48d944]
push eax
call sub.kernel32.dll_DeleteFileA_1
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x438f3a
mov edx, dword [0x48d944]
mov ax, 4
call fcn.0040de10
jmp 0x438f87
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 4]
call fcn.0040b368
dec dword [ebx + 0x1c]
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x438f60
cmp eax, dword [ebx + 0x18]
jne 0x438f57
dec dword [ebx + 0x18]
mov eax, ebx
call fcn.00432da0
jmp 0x438f87
mov eax, ebx
xor ecx, ecx
mov dx, 3
call fcn.0042e904
mov eax, ebx
xor ecx, ecx
mov dx, 4
call fcn.0042e904
mov eax, ebx
xor ecx, ecx
mov dx, 1
call fcn.0042e904
cmp byte [ebx + 0x54], 0x45
jne 0x438f99
mov eax, ebx
mov edx, 1
call fcn.0043977c
cmp byte [ebx + 0x54], 0x44
jne 0x438ffc
mov dl, 0x40
mov ax, 0x20
call fcn.0042d52c
dec eax
jne 0x438ffc
mov eax, dword [0x48d208]
mov dl, 1
call fcn.00406564
cmp byte [esi + 0x18dc], 0
je 0x438fdf
mov eax, dword [0x48da44]
call fcn.0042ebc0
mov ecx, dword [0x48da44]
mov eax, ebx
mov dx, 0x30a
call fcn.0042d910
jmp 0x438ff0
mov ecx, dword [0x48d208]
mov eax, ebx
mov dx, 0x30a
call fcn.0042d910
mov eax, dword [0x48d208]
xor edx, edx
call fcn.00406564
cmp byte [ebx + 0x54], 0x1e
jne 0x439114
push 9
lea eax, [esp + 0x164]
push eax
push 4
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItemTextA
mov eax, dword [0x48c338]
push eax
lea eax, [esp + 0x164]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x439047
mov eax, ebx
mov ecx, dword [0x48c33c]
mov dx, 4
call fcn.0042d910
jmp 0x4390f0
mov eax, dword [0x48c344]
push eax
lea eax, [esp + 0x164]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x4390b5
mov eax, dword [0x48d930]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x8d], 0
jne 0x43908f
mov edx, dword [0x48d930]
mov edx, dword [edx]
mov ecx, dword [0x48d524]
cmp byte [eax + 0x8e], 0
je 0x4390a2
mov eax, ebx
mov ecx, dword [0x48c348]
mov dx, 4
call fcn.0042d910
jmp 0x4390f0
mov eax, ebx
mov ecx, dword [0x48c338]
mov dx, 4
call fcn.0042d910
jmp 0x4390f0
mov eax, dword [0x48c348]
push eax
lea eax, [esp + 0x164]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x4390df
mov eax, ebx
mov ecx, dword [0x48c338]
mov dx, 4
call fcn.0042d910
jmp 0x4390f0
mov eax, ebx
mov ecx, dword [0x48c344]
mov dx, 4
call fcn.0042d910
push 0x30a
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItem
mov edi, eax
push edi
call sub.user32.dll_SetFocus
push 0
push 0
push 0xb1
push edi
call sub.user32.dll_SendMessageA
cmp byte [ebx + 0x54], 0x39
jne 0x439144
mov dl, 0x3d
mov ax, 0x10
call fcn.0042d52c
dec eax
jne 0x439140
mov al, byte [esi + 0x18a2]
call fcn.00430420
mov ecx, eax
mov eax, ebx
mov dx, 0x65
call fcn.0042d910
mov byte [ebx + 0x54], 0x39
cmp byte [ebx + 0x54], 0x36
jne 0x439151
mov eax, dword [ebx]
call fcn.004389b0
cmp byte [ebx + 0x54], 0x2b
jne 0x439160
mov eax, ebx
mov dl, 1
call fcn.00438a98
cmp byte [ebx + 0x54], 0x3e
jne 0x4391e5
cmp dword [ebx + 0x18], 0xffffffff
jle 0x4391e5
mov dx, word [ebx + 0x18]
mov eax, ebx
call fcn.0042c390
movsx eax, ax
mov edx, dword [0x48d498]
mov dword [edx], eax
push 0
push 0xc
push 0x111
mov eax, dword [0x48d498]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d498]
mov eax, dword [eax]
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x55e], 0
jne 0x4391e5
mov eax, ebx
xor ecx, ecx
mov dx, 4
call fcn.0042e904
mov ax, 0x27b
call fcn.0040bc04
push eax
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 4]
mov ecx, 4
call fcn.0040b4e4
cmp byte [ebx + 0x54], 0x2d
jne 0x43938d
mov ax, 0x7c
call fcn.0040bc04
mov edx, 0x66
call fcn.00411d74
test al, al
je 0x439765
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
lea edx, [esi + 0x200]
mov eax, dword [0x48da44]
call fcn.00405c48
mov eax, dword [0x48d700]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov byte [esp + 0x4c], 0
lea eax, [esp + 0x20]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_FindFirstFileA
mov edi, eax
jmp 0x43934a
lea edx, [esi + 0x200]
mov eax, dword [0x48da44]
call fcn.00405c48
lea eax, [esp + 0x4c]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
cmp byte [esi + 0x18d8], 0
je 0x4392ea
mov eax, dword [0x48da44]
mov ecx, 0x10000000
mov edx, 0x80000000
call fcn.0040eba4
mov ebp, eax
push 0
push 0
push 0x110
push ebp
call sub.kernel32.dll_SetFilePointer_1
push 2
mov eax, dword [0x48db3c]
push eax
push ebp
call sub.kernel32.dll__lread
push 1
push 0
mov eax, dword [0x48db3c]
movzx eax, word [eax]
add eax, 2
add eax, 8
add eax, 8
add eax, 0x10
add eax, 8
push eax
push ebp
call sub.kernel32.dll_SetFilePointer_1
push 1
lea eax, [esp + 0x10]
push eax
push ebp
call sub.kernel32.dll__lread
push ebp
call sub.kernel32.dll_CloseHandle_1
cmp byte [esi + 0x18d8], 0
je 0x4392fa
cmp byte [esp + 0xc], 1
jne 0x439335
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_DeleteFileA_1
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x439320
mov edx, dword [0x48da44]
mov ax, 4
call fcn.0040de10
jmp 0x439335
mov eax, dword [0x48da44]
call fcn.0040ebbc
or ecx, 0xffffffff
or edx, 0xffffffff
call fcn.00412668
lea eax, [esp + 0x20]
push eax
push edi
call sub.kernel32.dll_FindNextFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x439355
cmp byte [esp + 0x4c], 0
jne 0x439259
push edi
call sub.kernel32.dll_FindClose
mov eax, ebx
xor edx, edx
call fcn.0042c318
mov eax, ebx
call fcn.0042de74
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
push 2
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SetFocus
cmp byte [ebx + 0x54], 0x3a
jne 0x4395a2
mov eax, dword [ebx + 4]
call fcn.0040b530
mov esi, eax
cmp esi, 2
jge 0x4393b9
push 1
mov edx, dword [ebx + 0x18]
mov eax, ebx
mov cl, 1
call fcn.0043b188
jmp 0x43957d
cmp esi, dword [ebx + 0x1c]
jne 0x4393d0
mov eax, ebx
xor ecx, ecx
mov dx, 0x3e8
call fcn.0042eefc
jmp 0x439765
mov dword [esp + 0x278], esi
fild dword [esp + 0x278]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, 0xd0
call fcn.0040bc04
call fcn.0040f4d4
mov eax, dword [0x48da44]
mov edx, 0x13
call fcn.00411d74
test al, al
je 0x439765
mov eax, dword [ebx + 0x1c]
mov dword [esp + 4], eax
cmp dword [esp + 4], 0x3e7
jle 0x43942d
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
push 4
push 0x1000
mov eax, dword [0x48d4cc]
mov eax, dword [eax]
push eax
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov ebp, eax
test ebp, ebp
jne 0x43946c
mov eax, dword [0x48d4cc]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.00412abc
mov edx, eax
mov ax, 0xb
call fcn.0040de10
jmp 0x439765
mov eax, dword [ebx + 0x1c]
dec eax
mov dword [esp], eax
mov dword [esp + 0x18], 0xffffffff
mov esi, dword [esp]
test esi, esi
jl 0x4394df
inc esi
xor edi, edi
lea eax, [ebx + 0x22]
mov edx, 0x24
call fcn.00405a9c
mov dword [ebx + 0x22], 8
mov dword [ebx + 0x32], 2
mov dword [ebx + 0x26], edi
lea edx, [ebx + 0x22]
mov eax, dword [ebx + 4]
call fcn.0040b320
test eax, eax
je 0x4394db
mov eax, dword [ebx + 0x2e]
and eax, 2
cmp eax, 2
jne 0x4394db
mov eax, ebx
mov edx, edi
call fcn.0043b15c
test eax, eax
jle 0x4394d0
add eax, ebp
dec eax
mov byte [eax], 1
cmp dword [esp + 0x18], 0xffffffff
jne 0x4394db
mov dword [esp + 0x18], edi
inc edi
dec esi
jne 0x439485
mov eax, dword [0x48d4cc]
mov eax, dword [eax]
mov dword [esp], eax
xor eax, eax
mov dword [esp + 8], eax
mov esi, dword [esp]
test esi, esi
jle 0x439517
mov edi, 1
lea eax, [edi + ebp]
dec eax
cmp byte [eax], 0
je 0x439513
mov eax, edi
sub eax, dword [esp + 8]
call fcn.0040d338
inc dword [esp + 8]
inc edi
dec esi
jne 0x4394fb
push 0x4000
mov eax, dword [esp + 4]
push eax
push ebp
call sub.kernel32.dll_VirtualFree_1
mov eax, ebx
xor edx, edx
call fcn.0042c318
cmp dword [esp + 4], 0x3e7
jle 0x43954c
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
mov eax, ebx
mov edx, 1
call fcn.0042db98
mov eax, dword [esp + 0x18]
mov dword [ebx + 0x18], eax
push 3
mov edx, eax
mov eax, dword [ebx + 4]
mov ecx, 3
call fcn.0040b488
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 4]
xor ecx, ecx
call fcn.0040b3dc
mov eax, dword [0x48d510]
cmp dword [eax], 0
jle 0x439591
mov eax, dword [0x48d4cc]
cmp dword [eax], 0
jg 0x439595
xor ecx, ecx
jmp 0x439597
mov cl, 1
mov eax, ebx
mov dx, 1
call fcn.0042e904
mov al, byte [ebx + 0x54]
cmp al, 0x20
je 0x4395ad
cmp al, 0x21
jne 0x4395e6
push 0xe
mov eax, dword [0x48d210]
mov eax, dword [eax]
push eax
mov eax, dword [0x48d210]
mov eax, dword [eax]
push eax
mov eax, dword [0x48d3c0]
push eax
mov eax, dword [0x48d298]
mov eax, dword [eax]
push eax
push 4
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.winspool.drv_DocumentPropertiesA
mov eax, ebx
xor edx, edx
call fcn.0042e7dc
cmp byte [ebx + 0x54], 0x2c
jne 0x439765
push 0xff
mov eax, dword [0x48d370]
push eax
push 0x68
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItemTextA
call sub.user32.dll_GetFocus
mov dword [esp + 0x10], eax
mov edi, 1
lea esi, [esp + 0x260]
push 0xc
mov eax, dword [0x48da44]
push eax
lea eax, [edi + 0xc8]
push eax
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItemTextA
test eax, eax
jne 0x439648
mov edx, edi
add dx, 0xc8
mov eax, ebx
call fcn.0042d854
jmp 0x439765
push 0xc
mov eax, dword [0x48d830]
push eax
lea eax, [edi + 0xcb]
push eax
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItemTextA
test eax, eax
jne 0x439676
mov edx, edi
add dx, 0xcb
mov eax, ebx
call fcn.0042d854
jmp 0x439765
push 0x83b
push esi
mov edx, dword [0x48d830]
mov eax, dword [0x48da44]
mov ecx, 0x7bc
call fcn.00418610
mov ebp, eax
and ebp, 0xff
push esi
push esi
call sub.kernel32.dll_LocalFileTimeToFileTime
test ebp, ebp
je 0x4396bf
mov edx, edi
add dx, 0xc8
dec ebp
lea eax, [ebp + ebp*2]
add dx, ax
mov eax, ebx
call fcn.0042d854
jmp 0x439765
inc edi
add esi, 8
cmp edi, 4
jne 0x43961a
lea eax, [esp + 0x270]
push eax
lea eax, [esp + 0x26c]
push eax
lea ecx, [esp + 0x268]
mov edx, dword [0x48d370]
mov al, 1
call fcn.004147cc
test al, al
jne 0x439705
mov edx, dword [0x48d370]
mov ax, 0xa
call fcn.0040de10
jmp 0x43975b
push 5
mov eax, dword [0x48da44]
push eax
push 0x67
mov eax, dword [ebx]
push eax
call sub.user32.dll_GetDlgItemTextA
mov eax, dword [0x48da44]
mov dl, 0x41
call fcn.00405cf8
test eax, eax
jne 0x439737
push 0x439778
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov ecx, dword [0x48da44]
mov eax, ebx
mov dx, 0x67
call fcn.0042d910
mov ax, 0x112
call fcn.0040bc04
mov edx, 4
call fcn.00411d74
mov eax, dword [esp + 0x10]
push eax
call sub.user32.dll_SetFocus
add esp, 0x27c
pop ebp
pop edi
pop esi
pop ebx
ret