Function at 0x415d50
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x500660
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x567e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x2ac], edi
test edi, edi
je 0x416241
test ebx, ebx
je 0x416241
cmp word [edi], 0
je 0x416241
push 0x250
lea eax, [ebp - 0x2a8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x58]
push edi
push eax
call fcn.00417670
add esp, 0x14
lea ecx, [ebp - 0x40]
push eax
call fcn.00405690
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x415e27
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415e1d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x415e1d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov ecx, ebx
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415e30
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x40]
call fcn.004038f0
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x2b0], esi
mov byte [ebp - 4], 1
test esi, esi
je 0x4161ab
cmp esi, 0xffffffff
je 0x4161ab
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 2
mov edi, edi
lea eax, [ebp - 0x58]
push edi
push eax
call fcn.00417670
mov edi, eax
add esp, 8
lea eax, [ebp - 0x28]
cmp eax, edi
je 0x415f3e
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415ef4
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415eea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415e17
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov dword [ebp - 0x18], 0
xor eax, eax
mov word [ebp - 0x28], ax
mov dword [ebp - 0x14], 7
mov eax, dword [edi]
mov dword [ebp - 0x28], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x20], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x415f78
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415f6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x415e17
push edx
push ecx
call fcn.004c6f6f
add esp, 8
lea ecx, [ebp - 0x27c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415f81
sub ecx, edx
lea eax, [ebp - 0x27c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.004038f0
test byte [ebp - 0x2a8], 0x10
je 0x416046
mov ecx, 0x5183c0
lea eax, [ebp - 0x27c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x415fde
test dx, dx
je 0x415fda
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x415fde
add eax, 4
add ecx, 4
test dx, dx
jne 0x415fb8
xor eax, eax
jmp 0x415fe3
sbb eax, eax
or eax, 1
test eax, eax
je 0x416076
mov ecx, 0x5183c4
lea eax, [ebp - 0x27c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41601c
test dx, dx
je 0x416018
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41601c
add eax, 4
add ecx, 4
test dx, dx
jne 0x415ff6
xor eax, eax
jmp 0x416021
sbb eax, eax
or eax, 1
test eax, eax
je 0x416076
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push ebx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00415d50
mov edi, eax
add esp, 8
test edi, edi
js 0x41615b
jmp 0x416076
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x416076
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 4
cmovae eax, dword [ebp - 0x28]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x416093
lea eax, [ebp - 0x2a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x4160ce
mov edi, dword [ebp - 0x2ac]
jmp 0x415ea0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4160a5
movzx eax, ax
or eax, 0x80070000
push eax
push str.DeleteFile_Failed:_0x_08x.
push str.kupdate::KPathUtil::DeleteDirMatchFiles
push 0x18d
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcutilKPathUtil.cpp
push 0
call fcn.00412230
add esp, 0x18
mov edi, 0x80004005
jmp 0x41615b
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
mov eax, 0x516d70
mov dword [ebp - 0x2b0], esi
mov cx, word [ebx]
cmp cx, word [eax]
jne 0x416108
test cx, cx
je 0x416104
mov cx, word [ebx + 2]
cmp cx, word [eax + 2]
jne 0x416108
add ebx, 4
add eax, 4
test cx, cx
jne 0x4160e2
xor eax, eax
jmp 0x41610d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x416159
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x416159
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x416133
movzx eax, ax
or eax, 0x80070000
push eax
push str.Failed_RemoveDirectory:_0x_08x.
push str.kupdate::KPathUtil::DeleteDirMatchFiles
push 0x195
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcutilKPathUtil.cpp
push 0
call fcn.00412230
add esp, 0x18
mov edi, 0x80004005
jmp 0x41615b
xor edi, edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x416195
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41618b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41622d
push edx
push ecx
call fcn.004c6f6f
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
jmp 0x4161f1
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0x12
je 0x4161ef
cmp eax, 3
je 0x4161ef
call edi
mov edi, eax
test edi, edi
jle 0x4161ce
movzx edi, di
or edi, 0x80070000
push edi
push str.FindFirstFile_Failed:_0x_08x.
push str.kupdate::KPathUtil::DeleteDirMatchFiles
push 0x176
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcutilKPathUtil.cpp
push 0
call fcn.00412230
add esp, 0x18
jmp 0x4161f1
xor edi, edi
test esi, esi
je 0x416201
cmp esi, 0xffffffff
je 0x416201
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x41623d
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416233
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x416233
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov eax, edi
jmp 0x416264
push str.Invalid_Args.
push str.kupdate::KPathUtil::DeleteDirMatchFiles
push 0x162
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcutilKPathUtil.cpp
push 0
call fcn.00412230
add esp, 0x14
mov eax, 0x80070057
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c6f8b
mov esp, ebp
pop ebp
ret