Function at 0x40c5da
Capabilities:
Delete directory
Delete file

Disassembly:
push 0xa4
mov eax, 0x41cee5
call fcn.0041bcbb
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x84], edi
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor esi, esi
mov dword [ebp - 0xa4], esi
call fcn.00406c5a
mov dword [eax], eax
mov dword [ebp - 0xa8], eax
mov dword [eax + 4], eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x98], esi
call fcn.00406c5a
mov dword [eax], eax
mov dword [ebp - 0x9c], eax
mov dword [eax + 4], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x8c], esi
call fcn.0040c977
mov dword [eax], eax
mov dword [ebp - 0x90], eax
mov dword [eax + 4], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 2
call fcn.0040ca63
pop ecx
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
jb 0x40c672
mov eax, dword [eax]
push eax
lea edi, [ebp - 0x90]
call fcn.0040c4c6
pop ecx
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00401953
mov edi, dword [ebp - 0x90]
mov ebx, dword [edi]
jmp 0x40c78d
test byte [ebx + 8], 0x10
je 0x40c71c
lea eax, [ebx + 0x34]
push eax
lea esi, [ebp - 0x48]
call fcn.00401798
push dword [ebp - 0x84]
lea ecx, [ebp - 0x74]
push ecx
mov byte [ebp - 4], 4
call fcn.0040cab9
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0040cadd
add esp, 0xc
push dword [ebp + 0xc]
mov byte [ebp - 4], 6
push eax
call fcn.0040c5da
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.00401953
push 1
lea esi, [ebp - 0x74]
call fcn.00401953
push 1
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00401953
lea eax, [ebx + 0x34]
push eax
lea esi, [ebp - 0x2c]
call fcn.00401798
mov byte [ebp - 4], 7
lea edi, [ebp - 0x9c]
jmp 0x40c76c
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebx + 0xc]
mov esi, dword [ebp - 0xac]
sbb esi, dword [ebx + 0x10]
mov dword [ebp - 0x80], eax
js 0x40c756
jg 0x40c739
test eax, eax
jb 0x40c756
mov eax, dword [ebp + 0xc]
push 8
cdq
push 0x61c46800
push edx
push eax
call fcn.00419000
cmp esi, edx
jl 0x40c78b
jg 0x40c756
cmp dword [ebp - 0x80], eax
jbe 0x40c78b
lea eax, [ebx + 0x34]
push eax
lea esi, [ebp - 0x2c]
call fcn.00401798
mov byte [ebp - 4], 8
lea edi, [ebp - 0xa8]
lea eax, [ebp - 0x2c]
push eax
call fcn.0040c90f
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00401953
mov edi, dword [ebp - 0x90]
mov ebx, dword [ebx]
cmp ebx, edi
jne 0x40c69c
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ecx]
mov dword [ebp - 0x7c], eax
cmp eax, ecx
je 0x40c7ee
jmp 0x40c7a9
mov eax, dword [ebp - 0x7c]
push dword [ebp - 0x84]
lea ebx, [eax + 8]
lea eax, [ebp - 0x48]
push eax
call fcn.0040cb03
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x40c7c5
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.00401953
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0xa8]
jne 0x40c7a6
mov edi, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ecx]
mov dword [ebp - 0x7c], eax
cmp eax, ecx
je 0x40c847
jmp 0x40c802
mov eax, dword [ebp - 0x7c]
push dword [ebp - 0x84]
lea ebx, [eax + 8]
lea eax, [ebp - 0x48]
push eax
call fcn.0040cb03
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x40c81e
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.00401953
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0x9c]
jne 0x40c7ff
mov edi, dword [ebp - 0x90]
mov eax, dword [edi]
mov dword [edi], edi
mov dword [edi + 4], edi
cmp eax, edi
je 0x40c861
mov esi, dword [eax]
push eax
call fcn.00410320
pop ecx
mov eax, esi
cmp esi, edi
jne 0x40c852
push edi
call fcn.00410320
pop ecx
lea ebx, [ebp - 0x9c]
call fcn.004012d3
push dword [ebp - 0x9c]
call fcn.00410320
pop ecx
lea ebx, [ebp - 0xa8]
call fcn.004012d3
push dword [ebp - 0xa8]
call fcn.00410320
pop ecx
call fcn.0041bd05
ret