Function at 0x4ec000
Capabilities:
Delete directory
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f0
mov eax, dword [0x568fd0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x234], ebx
call fcn.004e94f0
cmp dword [esi + 0x14], 0x104
jb 0x4ec040
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00501b9a
mov esp, ebp
pop ebp
ret
cmp byte [ebp + 0xc], bl
jne 0x4ec0e2
lea ecx, [ebp - 0x25c]
call fcn.004ee080
lea eax, [ebp - 0x25c]
push eax
push esi
call fcn.004eb570
add esp, 8
test al, al
je 0x4ec0a7
cmp byte [ebp - 0x254], bl
je 0x4ec0a7
cmp dword [esi + 0x18], 8
jb 0x4ec07b
mov esi, dword [esi + 4]
jmp 0x4ec07e
add esi, 4
push esi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
lea ecx, [ebp - 0x25c]
setne bl
call fcn.004d9590
pop esi
mov al, bl
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00501b9a
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x18], 8
jb 0x4ec0b2
mov eax, dword [esi + 4]
jmp 0x4ec0b5
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x25c]
test eax, eax
je 0x4ec0dd
call fcn.004d9590
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00501b9a
mov esp, ebp
pop ebp
ret
call fcn.004d9590
xor ecx, ecx
push 0x208
push ecx
lea edx, [ebp - 0x20e]
push edx
mov word [ebp - 0x210], cx
call fcn.005033b0
add esp, 0xc
cmp byte [0x56cf45], bl
je 0x4ec14e
call fcn.004d9c10
cmp eax, 1
jg 0x4ec13b
mov ebx, 1
push ebx
push 0x6a
push str.._file_util_win.cc
lea ecx, [ebp - 0x2f0]
call fcn.004da9b0
add eax, 4
push str.copying
push eax
call fcn.00409d70
add esp, 8
test bl, 1
je 0x4ec14e
lea ecx, [ebp - 0x2f0]
and ebx, 0xfffffffe
call fcn.004da3f0
cmp dword [esi + 0x18], 8
jb 0x4ec159
mov ecx, dword [esi + 4]
jmp 0x4ec15c
lea ecx, [esi + 4]
lea edx, [ebp - 0x210]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4ec162
xor eax, eax
cmp byte [ebp + 0xc], 0
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], eax
mov word [ebp - 0x214], ax
lea eax, [ebp - 0x210]
mov ecx, 0x414
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 3
mov dword [ebp - 0x228], eax
mov word [ebp - 0x220], cx
jne 0x4ec1de
mov edx, 0x1494
mov word [ebp - 0x220], dx
cmp byte [0x56cf45], 0
je 0x4ec22c
call fcn.004d9c10
cmp eax, 1
jg 0x4ec219
push 1
push 0x74
push str.._file_util_win.cc
lea ecx, [ebp - 0x2f0]
or ebx, 2
call fcn.004da9b0
add eax, 4
push str.Performing_shell_operation
push eax
call fcn.00409d70
add esp, 8
test bl, 2
je 0x4ec22c
lea ecx, [ebp - 0x2f0]
and ebx, 0xfffffffd
call fcn.004da3f0
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
cmp byte [0x56cf45], 0
mov esi, eax
je 0x4ec28e
call fcn.004d9c10
cmp eax, 1
jg 0x4ec27e
push 1
push 0x77
push str.._file_util_win.cc
lea ecx, [ebp - 0x2f0]
or ebx, 4
call fcn.004da9b0
push esi
add eax, 4
push str.Done:
push eax
call fcn.00409d70
add esp, 8
mov ecx, eax
call fcn.00408ef0
test bl, 4
je 0x4ec28e
lea ecx, [ebp - 0x2f0]
call fcn.004da3f0
cmp dword [ebp - 0x21e], 0
jne 0x4ec02e
test esi, esi
je 0x4ec2be
cmp esi, 2
je 0x4ec2be
cmp esi, 0x402
je 0x4ec2be
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00501b9a
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.00501b9a
mov esp, ebp
pop ebp
ret