Function at 0x402160
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0xffffffffffffffff
push 0x428b3a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x180
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4352dc]
mov dword [esp + 0x198], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x198], 2
call fcn.0041aa92
lea ecx, [esp + 0x28]
mov byte [esp + 0x198], 3
call fcn.0041aa92
mov eax, dword [esp + 0x1a0]
mov byte [esp + 0x198], 4
mov ecx, dword [eax - 8]
mov al, byte [ecx + eax - 1]
cmp al, 0x5c
je 0x4021e1
push 0x5c
lea ecx, [esp + 0x1a4]
call fcn.0041f2e6
lea eax, [esp + 0x1a0]
lea ecx, [esp + 0x14]
push eax
call fcn.0041eccc
push 0x435140
lea ecx, [esp + 0x18]
mov byte [esp + 0x19c], 5
call fcn.0041f2bf
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x50]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x40238b
mov ebp, dword [esp + 0x1a4]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov bl, 6
test byte [esp + 0x50], 0x16
jne 0x402286
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x18]
push eax
call fcn.0041f0e0
lea ecx, [esp + 0x1a0]
push ecx
lea ecx, [esp + 0x14]
call fcn.0041eccc
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0x19c], bl
call fcn.0041f2fb
mov eax, dword [esp + 0x10]
push eax
call edi
lea ecx, [esp + 0x10]
inc ebp
mov byte [esp + 0x198], 5
call fcn.0041ef57
lea ecx, [esp + 0x50]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x402232
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x50]
push edx
push eax
xor edi, edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov dword [esp + 0x20], eax
test byte [esp + 0x50], 0x10
je 0x40236a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
lea ecx, [esp + 0x7c]
push 0x43513c
push ecx
call esi
test eax, eax
je 0x40236a
lea edx, [esp + 0x7c]
push 0x435138
push edx
call esi
test eax, eax
je 0x40236a
xor esi, esi
test edi, edi
jle 0x402318
cmp esi, dword [esp + 0x30]
jge 0x402318
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x7c]
push ecx
mov eax, dword [eax + esi*4]
push eax
call fcn.0040c034
add esp, 8
test eax, eax
jg 0x402318
inc esi
cmp esi, edi
jl 0x4022f4
push ebp
push ecx
lea eax, [esp + 0x84]
mov edx, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x1a8]
push eax
push ecx
push edx
call fcn.0041f1ec
call fcn.00402160
add esp, 8
mov esi, eax
lea edx, [esp + 0x7c]
lea eax, [esp + 0x1a0]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.0041f1ec
mov eax, dword [eax]
push eax
call ebx
lea ecx, [esp + 0x10]
call fcn.0041ef57
cmp esi, ebp
je 0x40236a
inc edi
mov esi, dword [esp + 0x20]
lea edx, [esp + 0x50]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4022b9
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x40238f
mov ebp, dword [esp + 0x24]
lea ecx, [esp + 0x14]
mov byte [esp + 0x198], 4
call fcn.0041ef57
lea ecx, [esp + 0x28]
mov byte [esp + 0x198], 3
call fcn.0041aac5
lea ecx, [esp + 0x3c]
mov byte [esp + 0x198], 2
call fcn.0041aac5
lea ecx, [esp + 0x18]
mov byte [esp + 0x198], 1
call fcn.0041ef57
lea ecx, [esp + 0x1c]
mov byte [esp + 0x198], 0
call fcn.0041ef57
lea ecx, [esp + 0x1a0]
mov dword [esp + 0x198], 0xffffffff
call fcn.0041ef57
mov ecx, dword [esp + 0x190]
pop edi
mov eax, ebp
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x18c
ret