Function at 0x40b190
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x45f360
push 0x42cb90
mov eax, dword fs:[0]
push eax
sub esp, 0x674
mov eax, dword [0x463184]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, ecx
xor eax, eax
mov word [ebp - 0x42c], ax
push 0x206
push eax
lea eax, [ebp - 0x42a]
push eax
call fcn.0042d630
xor eax, eax
mov word [ebp - 0x224], ax
push 0x206
push eax
lea eax, [ebp - 0x222]
push eax
call fcn.0042d630
push 0x250
push 0
lea eax, [ebp - 0x67c]
push eax
call fcn.0042d630
add esp, 0x24
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b220
sub ecx, edx
sar ecx, 1
lfence
lea eax, [ebp - 0x224]
cmp ecx, 0x104
jae 0x40b251
push esi
push 0x104
push eax
call fcn.0043b25a
add esp, 0xc
jmp 0x40b26b
push 0x103
push esi
push 0x104
push eax
call fcn.0043b072
add esp, 0x10
xor eax, eax
mov word [ebp - 0x1e], ax
lea esi, [ebp - 0x224]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x40b274
sub esi, ecx
sar esi, 1
mov edi, esi
jne 0x40b28f
lea edi, [ebp - 0x224]
jmp 0x40b2c6
dec esi
mov eax, 0x5c
cmp ax, word [ebp + esi*2 - 0x224]
je 0x40b2bd
push 0x45a9cc
push 0x104
lea eax, [ebp - 0x224]
push eax
call fcn.0043b1eb
add esp, 0xc
test eax, eax
cmove esi, edi
lea edi, [ebp - 0x224]
lea edi, [edi + esi*2]
mov dword [ebp - 0x680], edi
lea ecx, [ebp - 0x224]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b2d5
sub ecx, edx
sar ecx, 1
lfence
lea eax, [ebp - 0x224]
cmp ecx, 0x104
jae 0x40b30c
push eax
push 0x104
lea eax, [ebp - 0x42c]
push eax
call fcn.0043b25a
add esp, 0xc
jmp 0x40b32f
push 0x103
push eax
push 0x104
lea eax, [ebp - 0x42c]
push eax
call fcn.0043b072
add esp, 0x10
xor eax, eax
mov word [ebp - 0x226], ax
push 0x45ac54
mov edx, 0x104
lea ecx, [ebp - 0x42c]
call fcn.0040b7e0
add esp, 4
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x684], esi
cmp esi, 0xffffffff
je 0x40b4d9
test dword [ebp - 0x67c], 0x10
jne 0x40b3f7
lea eax, [ebp - 0x650]
push eax
mov edx, 0x104
lea ecx, [ebp - 0x224]
call fcn.0040b7e0
add esp, 4
test bl, bl
je 0x40b3af
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 1
je 0x40b4ae
mov dword [ebp - 4], 0
push 4
push 0
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov dword [ebp - 4], 0xfffffffe
jmp 0x40b4ae
cmp byte [ebp + 8], 0
je 0x40b4b4
mov ecx, 0x45ac5c
lea eax, [ebp - 0x650]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40b436
test dx, dx
je 0x40b432
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40b436
add eax, 4
add ecx, 4
test dx, dx
jne 0x40b410
xor eax, eax
jmp 0x40b43b
sbb eax, eax
or eax, 1
test eax, eax
je 0x40b4b4
mov ecx, 0x45ac60
lea eax, [ebp - 0x650]
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40b476
test dx, dx
je 0x40b472
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40b476
add eax, 4
add ecx, 4
test dx, dx
jne 0x40b450
xor eax, eax
jmp 0x40b47b
sbb eax, eax
or eax, 1
test eax, eax
je 0x40b4b4
lea eax, [ebp - 0x650]
push eax
mov edx, 0x104
lea ecx, [ebp - 0x224]
call fcn.0040b7e0
push 0x45ac54
push ebx
push 1
mov dl, 1
lea ecx, [ebp - 0x224]
call fcn.0040b190
add esp, 0x10
xor eax, eax
mov word [edi + 2], ax
lea eax, [ebp - 0x67c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40b366
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
or esi, 0xffffffff
jmp 0x40b360
xor eax, eax
mov word [edi], ax
test bl, bl
je 0x40b4f4
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp eax, 1
je 0x40b51e
mov dword [ebp - 4], 1
push 4
push 0
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x40b517
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0042b03b
mov esp, ebp
pop ebp
ret