Function at 0x401e62
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe88
and byte [ebp - 0x118], 0
push ebx
push esi
push edi
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
and byte [ebp - 0x320], 0
mov ecx, 0x81
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x31f]
rep stosd dword es:[edi], eax
and byte [ebp - 0x62c], 0
mov ecx, 0xc2
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x62b]
rep stosd dword es:[edi], eax
and byte [ebp - 0x730], 0
push 0x40
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x72f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, 0x104
lea eax, [ebp - 0x118]
push edi
push eax
push dword [0x4056b0]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x730]
push eax
call ebx
and dword [ebp - 0x10], 0
lea eax, [ebp - 0x10]
push eax
push 2
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea eax, [ebp - 0x320]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x320]
push 0x405358
push eax
call esi
lea eax, [ebp - 0x118]
push edi
push eax
push 0x4489
push dword [0x405768]
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x401f5e
lea eax, [ebp - 0x118]
push str.WebEx_Record__Player
push eax
call ebx
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x320]
push eax
call esi
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x62c]
push eax
call ebx
lea eax, [ebp - 0x62c]
push 0x405358
push eax
call esi
lea eax, [ebp - 0x118]
push edi
push eax
push reloc.KERNEL32.dll_GetFileAttributesA
push dword [0x405768]
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x401fb7
lea eax, [ebp - 0x118]
push str.WebEx_Player
push eax
call ebx
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x62c]
push eax
call esi
lea eax, [ebp - 0x62c]
push str..LNK
push eax
call esi
xor edi, edi
push edi
mov dword [ebp - 0xc], edi
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 4]
push eax
push 0x4041c0
push 1
push edi
push 0x4041b0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4020b4
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push 0x4041d0
mov ecx, dword [eax]
push eax
call dword [ecx]
test eax, eax
jl 0x4020ab
mov word [ebp - 0xe88], di
mov ecx, 0x185
xor eax, eax
lea edi, [ebp - 0xe86]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xe88]
push 0x30c
push eax
lea eax, [ebp - 0x62c]
push 0xffffffffffffffff
xor edi, edi
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 8]
lea edx, [ebp - 0xe88]
push edi
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
push 6
push edi
mov ecx, dword [eax]
lea edx, [ebp - 0x118]
push 0x104
push edx
push eax
call dword [ecx + 0xc]
cmp dword [ebp - 0x14], edi
jne 0x4020a0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x730]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4020a0
mov dword [ebp - 0xc], 1
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
xor edi, edi
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [ebp - 0xc], edi
je 0x402186
and byte [ebp - 0xb7c], 0
mov ecx, 0xc2
xor eax, eax
lea edi, [ebp - 0xb7b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x62c]
push eax
call ebx
lea eax, [ebp - 0x62c]
push str..
push eax
call esi
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x62c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x62c]
push eax
call ebx
lea eax, [ebp - 0x62c]
push 0x405358
push eax
call esi
cmp edi, 0xffffffff
je 0x402179
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0xb7c]
push eax
call ebx
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0xb7c]
push eax
call esi
lea eax, [ebp - 0xb7c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x870]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x402133
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret