Function at 0x40cc89
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4c0f5d
mov eax, dword fs:[0]
push eax
sub esp, 0x288
mov eax, dword [0x50e7dc]
xor eax, esp
mov dword [esp + 0x280], eax
push ebx
push esi
push edi
mov eax, dword [0x50e7dc]
xor eax, esp
push eax
lea eax, [esp + 0x298]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, 0x511110
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c], edi
call fcn.00404f19
xor ebx, ebx
push esi
lea ecx, [esp + 0x18]
mov dword [esp + 0x2a4], ebx
call fcn.00404f19
push edi
lea ecx, [esp + 0x18]
mov byte [esp + 0x2a4], 1
call fcn.0040608f
push 0x4daf0c
lea ecx, [esp + 0x18]
call fcn.00410081
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
jne 0x40cd6a
xor esi, esi
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00401713
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401713
mov eax, esi
mov ecx, dword [esp + 0x298]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x280]
xor ecx, esp
call fcn.0049f533
mov esp, ebp
pop ebp
ret
push 4
pop esi
mov ecx, 0x4d62cc
lea eax, [esp + 0x68]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40cd9a
cmp dx, bx
je 0x40cd96
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40cd9a
add eax, esi
add ecx, esi
cmp dx, bx
jne 0x40cd76
xor eax, eax
jmp 0x40cd9f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x40ced2
mov ecx, 0x4daf14
lea eax, [esp + 0x68]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40cdd4
cmp dx, bx
je 0x40cdd0
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40cdd4
add eax, esi
add ecx, esi
cmp dx, bx
jne 0x40cdb0
xor eax, eax
jmp 0x40cdd9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x40ced2
cmp dword [ebp + 0xc], ebx
jne 0x40cdff
lea eax, [esp + 0x68]
push str.desktop.ini
push eax
call fcn.004a1037
pop ecx
pop ecx
test eax, eax
je 0x40ced2
push dword [esp + 0x18]
lea ecx, [esp + 0x14]
call fcn.0040608f
lea edi, [esp + 0x10]
call fcn.0040ffae
lea eax, [esp + 0x68]
push eax
mov ecx, edi
call fcn.00410081
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x40ce3b
and eax, 0xfffffffe
push eax
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test byte [esp + 0x3c], 0x10
je 0x40ce5a
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call fcn.0040cc89
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x40ced2
cmp dword [ebp + 0x10], ebx
je 0x40ce83
lea eax, [esp + 0x68]
push str.index.dat
push eax
call fcn.004a1037
pop ecx
pop ecx
test eax, eax
jne 0x40ce83
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x68]
push eax
call fcn.0040cfc0
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x40ced2
push str.CInternetExplorer::EmptyDirectory__DeleteFile_failed
lea ecx, [esp + 0x24]
call fcn.00404bd0
mov byte [esp + 0x2a0], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.004018c5
pop ecx
pop ecx
push ebx
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x2a8], 1
call fcn.004058b3
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40cd6d
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
inc esi
jmp 0x40cd2c