Function at 0x442460
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
mov eax, 0x4abed8
call fcn.0044c320
sub esp, 0x19c
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x58]
call fcn.00442ae0
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], ebx
mov esi, dword [ebp + 8]
mov byte [ebp - 4], 2
cmp esi, ebx
je 0x4429ad
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
mov eax, dword [edi + 0x34]
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00417673
cmp dword [ebp - 0x30], ebx
je 0x44297a
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x4424d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0x30]
call fcn.00417673
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
jne 0x44250c
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 3
cmp ecx, ebx
je 0x442503
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 2
jmp 0x442981
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push 0x4bf768
push eax
call dword [ecx + 0x34]
lea eax, [ebp - 0x40]
push eax
call sub.MFC42.DLL_CTime::GetTickCount
cmp dword [ebp - 0x3c], ebx
je 0x442547
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call dword [sym.imp.MSVCRT.dll_difftime]
pop ecx
pop ecx
call sub.MSVCRT.dll__ftol
cmp eax, 0x278d00
jl 0x442969
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x442557
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
push 0x4bf6c4
push esi
call dword [eax + 0x6c]
cmp dword [ebp - 0x10], ebx
je 0x442969
push 1
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.____FreeGarbageFile
call sub.MFC42.DLL_CString::CString_2
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.adlog
call sub.MFC42.DLL_CString::CString_2
mov byte [ebp - 4], 4
call fcn.0043e218
mov eax, dword [ebp - 0x10]
add esp, 0xc
mov ecx, dword [eax]
push eax
call dword [ecx + 0x74]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x4425ba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x18]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x60]
test eax, eax
jne 0x4426a3
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::CString_5
lea eax, [ebp + 8]
mov byte [ebp - 4], 7
push eax
push 0x4bf610
push dword [ebp - 0x18]
call dword [sym.imp.BasicCtrlDll.dll_long_int___cdecl_GetQQDataStr_struct_IQQData___char_const___class_CString__]
add esp, 0xc
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::CString_5
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 8
mov ebx, dword [eax - 8]
lea esi, [ebx - 1]
test esi, esi
jl 0x442675
push 1
lea eax, [ebp - 0x20]
push esi
push eax
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::Mid
push 0x4b8d7c
mov byte [ebp - 4], 9
push dword [ebp - 0x20]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
je 0x442641
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call sub.MFC42.DLL_CString::CString
dec esi
jns 0x442609
jmp 0x442675
inc esi
push ebx
lea eax, [ebp - 0x24]
push esi
push eax
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x50]
call fcn.00442dc0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
xor ebx, ebx
jmp 0x4425aa
lea ecx, [ebp - 0x28]
call sub.MFC42.DLL_CString::CString_5
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CString::CString_5
push 0x4ed680
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString_1
lea eax, [ebp + 8]
add edi, 0x15c
push eax
lea eax, [ebp - 0x24]
push edi
push eax
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x28]
push 0x4ec280
push eax
lea eax, [ebp + 8]
push eax
call sub.MFC42.DLL_operator_3
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xf
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x1a8]
push eax
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x24], eax
je 0x442951
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
lea eax, [ebp - 0x17c]
push 0x4edf04
push eax
call esi
test eax, eax
je 0x442913
lea eax, [ebp - 0x17c]
push 0x4edf00
push eax
call esi
test eax, eax
je 0x442913
lea eax, [ebp - 0x17c]
lea ecx, [ebp - 0x1c]
push eax
call sub.MFC42.DLL_CString::CString_2
push 0x4b8dfc
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString_2
push 0x2e
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::ReverseFind
cmp eax, ebx
jl 0x4427d7
inc eax
lea ecx, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call sub.MFC42.DLL_CString::Mid_1
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::MakeLower
mov esi, dword [sym.imp.MSVCRT.dll__mbscmp]
push 0x4edefc
push dword [ebp + 8]
call esi
pop ecx
test eax, eax
pop ecx
je 0x442809
push 0x4edef8
push dword [ebp + 8]
call esi
pop ecx
test eax, eax
pop ecx
jne 0x4428fb
mov edi, dword [ebp - 0x50]
xor esi, esi
test edi, edi
jle 0x442851
lea eax, [ebp - 0x5c]
push esi
push eax
lea ecx, [ebp - 0x58]
call fcn.00442b1d
push dword [eax]
mov byte [ebp - 4], 0x13
push dword [ebp - 0x1c]
call dword [sym.imp.MSVCRT.dll__mbscmp]
mov ebx, eax
pop ecx
neg ebx
pop ecx
mov byte [ebp - 4], 0x11
sbb bl, bl
lea ecx, [ebp - 0x5c]
inc bl
call sub.MFC42.DLL_CString::CString
test bl, bl
jne 0x4429ca
inc esi
cmp esi, edi
jl 0x442812
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CString::CString_5
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x44]
push eax
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x38]
call sub.MFC42.DLL_CString::CString_5
push dword [ebp - 0x20]
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x16
push str.____free_file__s
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea eax, [ebp - 0x38]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x64], esp
push eax
call sub.MFC42.DLL_CString::CString_3
push ecx
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0x68], esp
push str.adlog
call sub.MFC42.DLL_CString::CString_2
mov byte [ebp - 4], 0x16
call fcn.0043e218
add esp, 0xc
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::CString
xor ebx, ebx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x1a8]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x44274c
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp + 8]
push eax
call sub.MFC42.DLL_CTime::GetTickCount
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
push eax
mov edx, dword [ecx]
push 0x4bf768
push ecx
call dword [edx + 0x18]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x44297a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 2
cmp eax, ebx
je 0x44298b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x44299c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
and byte [ebp - 4], 0
cmp eax, ebx
je 0x4429ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.00442bb1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4
push 1
push esi
lea ecx, [ebp - 0x58]
call fcn.00442b56
jmp 0x4428f9