Function at 0x4072a0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x425578
mov eax, dword fs:[0]
push eax
sub esp, 0x154
mov eax, dword [0x437068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 1
push 0x104
mov dword [ebp - 4], 0
call fcn.0040f672
push 1
push 0x104
mov ebx, eax
call fcn.0040f672
mov esi, eax
add esp, 0x10
mov dword [ebp - 0x158], esi
test esi, esi
je 0x407600
test ebx, ebx
je 0x407600
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp + 8]
mov edx, esi
cmovae ecx, dword [ebp + 8]
sub edx, ecx
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x407320
lea ecx, [esi - 1]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x407330
mov ax, word [0x4337b8]
mov edx, ebx
mov word [ecx], ax
mov al, byte [0x4337ba]
mov byte [ecx + 2], al
lea ecx, [ebp + 8]
cmp dword [ebp + 0x1c], 0x10
cmovae ecx, dword [ebp + 8]
sub edx, ecx
nop word [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x407360
lea edi, [ebx - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x407370
mov ax, word [0x4335f8]
mov word [edi], ax
lea eax, [ebp - 0x150]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
mov dword [ebp - 0x154], edi
cmp edi, 0xffffffff
jne 0x4073c2
push str.Cannot_delete_install_n
call fcn.004071d0
add esp, 4
push esi
call fcn.0040ec8b
add esp, 4
push ebx
call fcn.0040ec8b
add esp, 4
jmp 0x407600
mov edx, esi
mov ecx, ebx
sub edx, ebx
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x4073d0
nop dword [eax]
lea eax, [ebp - 0x124]
push eax
push 0x4337d4
call fcn.004071d0
add esp, 8
lea eax, [ebp - 0x150]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x4075ae
mov ecx, 0x4337b0
lea eax, [ebp - 0x124]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407435
test dl, dl
je 0x407431
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407435
add eax, 2
add ecx, 2
test dl, dl
jne 0x407415
xor eax, eax
jmp 0x40743a
sbb eax, eax
or eax, 1
test eax, eax
je 0x4073e0
mov ecx, 0x4337b4
lea eax, [ebp - 0x124]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407470
test dl, dl
je 0x40746c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407470
add eax, 2
add ecx, 2
test dl, dl
jne 0x407450
xor eax, eax
jmp 0x407475
sbb eax, eax
or eax, 1
test eax, eax
je 0x4073e0
lea edx, [ebp - 0x124]
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x407485
sub edx, esi
lea edi, [ebx - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407491
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test byte [ebp - 0x150], 0x10
je 0x407538
sub esp, 0x18
mov ecx, ebx
mov edx, esp
lea esi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], al
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4074d0
sub ecx, esi
push ecx
push ebx
mov ecx, edx
call fcn.00405550
call fcn.004072a0
add esp, 0x18
test eax, eax
je 0x407578
mov eax, dword [ebp - 0x150]
mov ecx, 0x80
cmp eax, 0x80
push ebx
cmovne eax, ecx
mov dword [ebp - 0x150], eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov esi, dword [ebp - 0x158]
mov edx, ebx
mov ecx, esi
sub edx, esi
nop
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x407520
mov edi, dword [ebp - 0x154]
jmp 0x4073e0
push ebx
mov dword [ebp - 0x150], 0x80
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x407597
mov esi, dword [ebp - 0x158]
mov edx, ebx
mov ecx, esi
sub edx, esi
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x407560
mov edi, dword [ebp - 0x154]
jmp 0x4073e0
push dword [ebp - 0x158]
call fcn.0040ec8b
add esp, 4
push ebx
call fcn.0040ec8b
add esp, 4
push dword [ebp - 0x154]
jmp 0x4075fa
push dword [ebp - 0x154]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0x158]
jmp 0x4073ac
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
cmp eax, 0x12
jne 0x4075e8
call fcn.0040ec8b
add esp, 4
push ebx
call fcn.0040ec8b
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov esi, eax
jmp 0x407602
call fcn.0040ec8b
add esp, 4
push ebx
call fcn.0040ec8b
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x407632
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407628
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407650
push edx
push ecx
call fcn.00409840
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004096fc
mov esp, ebp
pop ebp
ret
call fcn.0040f622
int3