Function at 0x401ef4
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively
Set current directory

Disassembly:
mov eax, 0x411687
call fcn.004111a0
sub esp, 0x184
mov al, byte [ebp + 0xb]
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x14], ebx
mov byte [ebp - 0x30], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov esi, dword [ebp + 8]
mov dword [ebp - 4], ebx
cmp esi, ebx
je 0x402112
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x40], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
push 1
lea eax, [ebp + 0xb]
push ebx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
mov byte [ebp + 0xb], 0x2a
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int__unsigned_int_const]
mov edi, eax
push 1
lea eax, [ebp + 0xb]
push ebx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp + 0xb], 0x3f
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int__unsigned_int_const]
cmp edi, ebx
jge 0x401fe8
cmp eax, ebx
jge 0x401fe8
push 1
lea eax, [ebp + 0xb]
push ebx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp + 0xb], 0x5c
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int__unsigned_int_const]
cmp eax, ebx
jge 0x401fce
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x30]
push dword [eax]
mov eax, dword [ebp - 0x10]
add eax, 4
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov esi, 0x419020
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const___unsigned_int_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x30]
push dword [eax]
lea eax, [ebp - 0x40]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
jmp 0x402102
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
cmp eax, ebx
jne 0x401ff7
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0x190]
xor edi, edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x402038
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
or dword [ebp - 4], esi
push 1
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
xor eax, eax
jmp 0x40215b
mov al, byte [ebp + 0xb]
push ebx
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call fcn.00401558
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 2
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x50]
mov byte [ebp - 0x50], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0x164]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push dword [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
call fcn.0040151e
push 1
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0x190]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4020c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x4020ca
push 1
pop edi
cmp edi, ebx
je 0x402052
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
cmp esi, eax
je 0x4020f6
mov eax, dword [esi + 0xc]
cmp eax, ebx
jne 0x4020e6
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
mov ecx, dword [ebp - 0x10]
push eax
call fcn.00401ef4
mov esi, dword [esi]
cmp esi, dword [ebp - 0x1c]
jne 0x4020da
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.0040145e
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
jmp 0x40212e
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x30]
push dword [eax]
lea eax, [edi + 0x14]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov ecx, edi
call fcn.00401e9f
cmp dword [ebp - 0x28], ebx
je 0x402149
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x40213f
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x14], eax
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4