Function at 0x402cb1
Capabilities:
Delete directory
Enumerate files on windows
Get common file path
Get file attributes
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaa4
mov eax, dword [0x415050]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, 0x103
xor ebx, ebx
push esi
lea eax, [ebp - 0x73f]
push ebx
push eax
mov byte [ebp - 0x740], bl
call fcn.00407070
add esp, 0xc
lea eax, [ebp - 0xa98]
push eax
lea eax, [ebp - 0x740]
push eax
mov dword [ebp - 0xa98], 0x104
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryA]
test eax, eax
je 0x402fc0
push esi
lea eax, [ebp - 0x637]
push ebx
push eax
mov byte [ebp - 0x638], bl
call fcn.00407070
add esp, 0xc
lea eax, [ebp - 0x740]
push eax
lea eax, [ebp - 0x638]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str..
lea eax, [ebp - 0x638]
push eax
call edi
push esi
lea eax, [ebp - 0x10f]
push ebx
push eax
mov byte [ebp - 0x110], bl
call fcn.00407070
push esi
lea eax, [ebp - 0x52f]
push ebx
push eax
mov byte [ebp - 0x530], bl
call fcn.00407070
push esi
lea eax, [ebp - 0x217]
push ebx
push eax
mov byte [ebp - 0x218], bl
call fcn.00407070
add esp, 0x24
lea eax, [ebp - 0x530]
push eax
push ebx
push ebx
push 0x1a
push ebx
mov dword [ebp - 0xa98], 0x104
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0x218]
push eax
push ebx
push ebx
push 0x1c
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xa98]
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 0x413704
lea eax, [ebp - 0x110]
push eax
call edi
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x530]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
mov edi, eax
lea eax, [ebp - 0x530]
sub edi, eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [eax + edi - 1]
mov dword [ebp - 0xaa0], eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
lea ecx, [ebp - 0x218]
sub eax, ecx
mov dword [ebp - 0xa94], eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0xa94]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xa9c], eax
cmp edi, ebx
jbe 0x402fc0
cmp ecx, ebx
jbe 0x402fc0
lea eax, [ebp - 0xa90]
push eax
lea eax, [ebp - 0x638]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xa94], eax
cmp eax, 0xffffffff
je 0x402fbc
push esi
lea eax, [ebp - 0x31f]
push ebx
push eax
mov byte [ebp - 0x320], bl
call fcn.00407070
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfA]
lea eax, [ebp - 0xa64]
push eax
lea eax, [ebp - 0x740]
push eax
push 0x4131ec
lea eax, [ebp - 0x320]
push 0x104
push eax
call edi
add esp, 0x20
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 0x10
je 0x402f94
cmp byte [ebp - 0xa64], 0x2e
je 0x402f94
mov eax, dword [ebp - 0xaa0]
lea eax, [ebp + eax - 0x530]
push eax
lea eax, [ebp - 0x320]
push eax
push str._s_s
lea eax, [ebp - 0x848]
push 0x104
push eax
call edi
mov eax, dword [ebp - 0xa9c]
lea eax, [ebp + eax - 0x218]
push eax
lea eax, [ebp - 0x320]
push eax
push str._s_s
lea eax, [ebp - 0x950]
push 0x104
push eax
call edi
lea ecx, [ebp - 0x848]
call fcn.00401858
push esi
lea eax, [ebp - 0x427]
push ebx
push eax
mov byte [ebp - 0x428], bl
call fcn.00407070
lea ecx, [ebp - 0x848]
lea edi, [ebp - 0x428]
call fcn.00402779
push str.text_links_arcadeweb.com
mov eax, edi
push 0x104
push eax
call fcn.0040421d
add esp, 0x40
mov eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov eax, edi
push eax
call fcn.004022f1
lea eax, [ebp - 0x950]
push eax
call fcn.00402a2e
pop ecx
pop ecx
lea eax, [ebp - 0xa90]
push eax
push dword [ebp - 0xa94]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x402e80
push dword [ebp - 0xa94]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov al, 1
jmp 0x402fc2
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00404175
leave
ret