Function at 0x40ebf5
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov eax, 0x41bc06
call fcn.00418610
sub esp, 0xa98
mov eax, dword [0x427480]
push esi
mov esi, dword [ebp + 8]
push edi
xor eax, ebp
xor edi, edi
cmp esi, edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xaa0], esi
je 0x40ee99
cmp word [esi], di
je 0x40ee99
push esi
call fcn.0040eaca
test al, al
pop ecx
je 0x40ee99
push esi
lea ecx, [ebp - 0x84c]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
cmp dword [ebp - 0x834], 8
mov eax, dword [ebp - 0x848]
mov dword [ebp - 4], edi
jae 0x40ec61
lea eax, [ebp - 0x848]
mov ecx, dword [ebp - 0x838]
mov ax, word [eax + ecx*2 - 2]
cmp ax, 0x5c
je 0x40ec89
cmp ax, 0x2f
je 0x40ec89
push 0x41dac0
lea ecx, [ebp - 0x84c]
call dword [0x41d1f8]
mov word [ebp - 0x420], di
xor eax, eax
cmp dword [ebp - 0x834], 8
mov ecx, 0x81
lea edi, [ebp - 0x41e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x848]
jae 0x40ecb6
lea eax, [ebp - 0x848]
mov esi, dword [sym.imp.MSVCR71.dll_swprintf]
push ebx
push eax
lea eax, [ebp - 0x420]
push str._s.
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0xa9c]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xaa4], eax
je 0x40ee82
mov ebx, 0x41e3d8
mov edi, dword [sym.imp.MSVCR71.dll__wcsicmp]
lea eax, [ebp - 0xa70]
push 0x41e3d4
push eax
call edi
test eax, eax
pop ecx
pop ecx
je 0x40ee39
lea eax, [ebp - 0xa70]
push 0x41e3cc
push eax
call edi
test eax, eax
pop ecx
pop ecx
je 0x40ee39
test byte [ebp - 0xa9c], 0x10
je 0x40ed97
and word [ebp - 0x218], 0
xor eax, eax
cmp dword [ebp - 0x834], 8
mov ecx, 0x81
lea edi, [ebp - 0x216]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x848]
jae 0x40ed64
lea eax, [ebp - 0x848]
lea ecx, [ebp - 0xa70]
push ecx
push eax
lea eax, [ebp - 0x218]
push ebx
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.0040ebf5
add esp, 0x14
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x40ee39
lea eax, [ebp - 0xa70]
push str.Thumbs.db
push eax
call edi
test eax, eax
pop ecx
pop ecx
jne 0x40edf0
and word [ebp - 0x628], ax
cmp dword [ebp - 0x834], 8
mov ecx, 0x81
lea edi, [ebp - 0x626]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x848]
jae 0x40edd6
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x628]
push str._sThumbs.db
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x628]
jmp 0x40ee32
cmp dword [ebp - 0x834], 8
mov eax, dword [ebp - 0x848]
jae 0x40ee05
lea eax, [ebp - 0x848]
lea ecx, [ebp - 0xa70]
push ecx
push eax
lea eax, [ebp - 0x830]
push ebx
push eax
call esi
add esp, 0x10
push 0x80
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xa9c]
push eax
push dword [ebp - 0xaa4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40ecf7
push dword [ebp - 0xaa4]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0xaa0]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push dword [ebp - 0xaa0]
call fcn.0040eaca
mov bl, al
neg bl
sbb bl, bl
pop ecx
inc bl
jmp 0x40ee84
xor bl, bl
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84c]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov al, bl
pop ebx
jmp 0x40eea6
push 0x132b3a1
call fcn.0040f124
pop ecx
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
xor ecx, ebp
pop esi
call fcn.004186c1
leave
ret