Function at 0x442edb
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov eax, 0x4e9258
call fcn.004e1580
sub esp, 0x154
push ebx
push esi
push edi
push 1
lea eax, [ebp + 8]
pop esi
push eax
mov dword [ebp - 4], esi
call fcn.00442d87
test eax, eax
pop ecx
je 0x443125
lea eax, [ebp + 0xc]
push eax
call fcn.00442d87
test eax, eax
pop ecx
je 0x443125
push dword [ebp + 0xc]
mov ebx, dword [sym.imp.MSVCRT.dll__mbscmp]
push dword [ebp + 8]
call ebx
pop ecx
test eax, eax
pop ecx
je 0x443109
push 0x52c274
lea ecx, [ebp + 8]
call fcn.004e090c
lea eax, [ebp - 0x160]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x443125
lea eax, [ebp - 0x134]
push 0x52c270
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
jne 0x443125
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x160]
push eax
push edi
call esi
test eax, eax
je 0x443125
lea eax, [ebp - 0x134]
push 0x52c26c
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
jne 0x443125
lea eax, [ebp - 0x160]
push eax
push edi
call esi
test eax, eax
je 0x443013
mov esi, str.Thumbs.db
lea eax, [ebp - 0x134]
push esi
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
pop ecx
test eax, eax
pop ecx
jne 0x44306c
lea eax, [ebp + 8]
lea ecx, [ebp - 0x14]
push eax
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [ebp - 0x14]
push 3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
mov eax, dword [eax - 8]
add eax, 0xfffffffd
push eax
call sub.MFC42.DLL_CString::Delete
push esi
lea ecx, [ebp - 0x14]
call fcn.004e090c
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp + 8]
push 4
lea ecx, [ebp + 8]
mov eax, dword [eax - 8]
add eax, 0xfffffffc
push eax
call sub.MFC42.DLL_CString::Delete
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
test eax, eax
je 0x443073
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString_3
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 3
push eax
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call sub.MFC42.DLL_CString::CString_1
call fcn.00442d05
pop ecx
test eax, eax
pop ecx
je 0x44307a
xor esi, esi
jmp 0x4430fd
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
jmp 0x443109
push dword [ebp + 0xc]
push dword [ebp - 0x10]
call ebx
pop ecx
test eax, eax
pop ecx
jne 0x44308d
push 1
pop esi
jmp 0x4430fd
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x18]
push eax
call sub.MFC42.DLL_CString::CString_1
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 4
push eax
call fcn.00442e04
test eax, eax
pop ecx
jne 0x4430af
xor esi, esi
jmp 0x4430f1
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call ebx
pop ecx
test eax, eax
pop ecx
jne 0x4430c2
push 1
pop esi
jmp 0x4430f1
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call sub.MFC42.DLL_CString::CString_1
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x20], esp
push eax
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString_1
mov byte [ebp - 4], 4
call fcn.00442edb
pop ecx
mov esi, eax
pop ecx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
and byte [ebp - 4], 0
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call sub.MFC42.DLL_CString::CString
mov eax, esi
jmp 0x44313f
and byte [ebp - 4], 0
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call sub.MFC42.DLL_CString::CString
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret