Function at 0x467e00
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc78
mov eax, dword [0x4b06f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor eax, eax
push edi
push 0x1fe
push eax
mov word [ebp - 0xc], ax
mov dword [ebp - 0xa], eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.0046fe20
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x81c], ax
lea eax, [ebp - 0x81a]
push eax
call fcn.0046fe20
push 0x100
lea eax, [ebp - 0x81c]
xor edi, edi
push eax
push 0x100
lea eax, [ebp - 0x414]
push eax
push 0x104
lea eax, [ebp - 0xa24]
push eax
push 3
lea eax, [ebp - 0xc]
push eax
push esi
call fcn.004735f6
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x493f94
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.0046f31e
add esp, 0x50
lea eax, [ebp - 0xc74]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, dword [ebp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0xc78], eax
cmp eax, 0xffffffff
je 0x467f98
mov cx, word [ebp - 0xc46]
mov ax, word [ebp - 0xc48]
test cx, cx
jne 0x467eef
cmp ax, 0x2e
je 0x467f75
cmp word [ebp - 0xc44], 0
jne 0x467f04
cmp ax, 0x2e
jne 0x467f04
cmp cx, ax
je 0x467f75
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x493f94
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.0046f31e
mov eax, dword [ebp - 0xc74]
add esp, 0x14
test al, 0x10
jne 0x467f75
test al, 1
je 0x467f4a
and eax, 0xfffffffe
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, eax
test edi, edi
jne 0x467f75
test ebx, 0x100
je 0x467f75
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00468ae0
add esp, 8
lea eax, [ebp - 0xc74]
push eax
push dword [ebp - 0xc78]
call esi
test eax, eax
jne 0x467ed2
push dword [ebp - 0xc78]
call dword [sym.imp.KERNEL32.dll_FindClose]
test bl, 2
je 0x468088
lea eax, [ebp - 0x61c]
push eax
push 0x493fa0
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.0046f31e
add esp, 0x10
lea eax, [ebp - 0xc74]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
test esi, esi
je 0x46809b
cmp esi, 0xffffffff
je 0x46809b
jmp 0x467ff0
mov cx, word [ebp - 0xc46]
mov ax, word [ebp - 0xc48]
test cx, cx
jne 0x468009
cmp ax, 0x2e
je 0x46806b
cmp word [ebp - 0xc44], 0
jne 0x46801e
cmp ax, 0x2e
jne 0x46801e
cmp cx, ax
je 0x46806b
test byte [ebp - 0xc74], 0x10
je 0x46806b
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x493fac
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.0046f31e
lea eax, [ebp - 0x214]
push ebx
push eax
call fcn.00467e00
add esp, 0x24
mov edi, eax
lea eax, [ebp - 0xc74]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x467ff0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046f33a
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046f33a
mov esp, ebp
pop ebp
ret