Function at 0x45a1a9
Capabilities:
Delete directory
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push 0x2b8
mov eax, 0x5e561e
call fcn.00470bca
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x28]
push eax
call fcn.00404170
and dword [ebp - 4], 0
lea eax, [ebp - 0x28]
push eax
call fcn.00457fdf
mov ebx, 0x5e9bd4
pop ecx
test eax, eax
jne 0x45a1ec
push ebx
call fcn.00491bc7
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.00405d30
call fcn.00453c3f
test al, al
je 0x45a20b
pop edi
fistp qword [edi]
leave
cli
pop es
xor edi, dword [esi + 0x155bf979]
movsb byte es:[edi], byte [esi]
invalid
and dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x70]
call fcn.00404140
mov esi, 0x5eb438
mov byte [ebp - 4], 2
push esi
call fcn.00491bc7
pop ecx
push eax
push esi
lea ecx, [ebp - 0x70]
call fcn.00405d30
cmp dword [ebp - 0x5c], 8
lea ecx, [ebp - 0x2c0]
lea eax, [ebp - 0x70]
cmovae eax, dword [ebp - 0x70]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2c4], eax
call fcn.00453bb5
test al, al
je 0x45a28d
cdq
invalid
inc ebp
sbb edi, dword [eax + 0x23071263]
inc ebp
or byte [eax], dh
outsd dx, dword [esi]
jno 0x45a267
pop ds
dec byte [edx + 0x64]
mov ds, word [eax]
insb byte es:[edi], dx
call 0x558eae23
fsubr dword [ecx]
jbe 0x45a2e3
xlatb
call fcn.00453651
call fcn.00453651
test al, al
je 0x45a2af
jbe 0x45a2e8
sal byte [eax - 0x58f0236f], 1
ror byte [0xa0cd91b9], cl
aas
fist word [edi - 0x6d98aa70]
aam 0x7f
adc ch, al
dec edi
xchg esi, eax
invalid
call fcn.00453903
test al, al
je 0x45a2d4
push cs
sub edi, dword [edx - 0x590984bd]
mov ecx, 0x17fc7514
inc ebp
adc byte [ebx], 0x76
pop ebp
pop ebp
sub al, 0x73
push ss
ret 0xb48d
mov esi, dword [ebp - 0x2c4]
cmp esi, 0xffffffff
je 0x45a3fe
push 0x2e
pop ebx
mov edi, 0x5e9bd4
wait
pop esi
add byte [ebp - 0x2bf7b], cl
call dword [eax + 0x56]
lea eax, [ebp - 0x2c0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x45a3fe
cmp word [ebp - 0x294], bx
je 0x45a2eb
cmp word [ebp - 0x292], 0
je 0x45a2eb
cmp word [ebp - 0x292], bx
jne 0x45a327
cmp word [ebp - 0x290], 0
je 0x45a2eb
test byte [ebp - 0x2c0], 0x10
lea eax, [ebp - 0x28]
je 0x45a3a3
push eax
lea ecx, [ebp - 0x58]
call fcn.00404140
cmp word [ebp - 0x294], 0
mov byte [ebp - 4], 3
jne 0x45a34e
xor eax, eax
jmp 0x45a35b
lea eax, [ebp - 0x294]
push eax
call fcn.00491bc7
pop ecx
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405d30
push edi
call fcn.00491bc7
pop ecx
push eax
push edi
lea ecx, [ebp - 0x58]
call fcn.00405d30
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.0045a1a9
pop ecx
push 0
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.0041ed70
jmp 0x45a2eb
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x40]
call fcn.00402a70
cmp word [ebp - 0x294], 0
jne 0x45a3be
xor eax, eax
jmp 0x45a3cb
lea eax, [ebp - 0x294]
push eax
call fcn.00491bc7
pop ecx
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x40]
call fcn.00405d30
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00404170
call fcn.0045c3e3
add esp, 0x18
jmp 0x45a2eb
call fcn.00453765
test al, al
je 0x45a426
pop esp
mov eax, 0x26f8e995
push es
push edi
xchg edx, eax
push ebx
sub eax, 0x7947a37d
mov dh, 0xdf
xchg esp, eax
xchg dword [edx + 0x25e30d23], ebx
and bl, byte [eax + 0x171983c8]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 0x20
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
xor ebx, ebx
lea ecx, [ebp - 0x70]
push ebx
push 1
call fcn.0041ed70
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.0041ed70
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.0041ed70
call fcn.00470b74
ret