Function at 0x51e910
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57ffb9
mov eax, dword fs:[0]
push eax
sub esp, 0x2b8
mov eax, dword [0x5b107c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2c0], ecx
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x144], eax
mov byte [ebp - 0x154], al
lea eax, [ebp + 8]
push eax
mov edi, 0xf
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x140], edi
call fcn.00404e10
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x128], ebx
mov byte [ebp - 0x138], bl
push str..
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 2
call fcn.00520230
mov eax, dword [ebp - 0x154]
mov esi, 0x10
cmp dword [ebp - 0x140], esi
jae 0x51e9b3
lea eax, [ebp - 0x154]
lea ecx, [ebp - 0x2b4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x2bc], eax
cmp eax, 0xffffffff
jne 0x51ea3b
mov edi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
cmp dword [ebp - 0x124], esi
jb 0x51e9e6
mov edx, dword [ebp - 0x138]
push edx
call edi
add esp, 4
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x128], ebx
mov byte [ebp - 0x138], bl
cmp dword [ebp - 0x140], esi
jb 0x51ea10
mov eax, dword [ebp - 0x154]
push eax
call edi
add esp, 4
mov dword [ebp - 0x140], 0xf
mov dword [ebp - 0x144], ebx
mov byte [ebp - 0x154], bl
cmp dword [ebp + 0x1c], esi
jb 0x51ea34
mov ecx, dword [ebp + 8]
push ecx
call edi
add esp, 4
xor eax, eax
jmp 0x51ed2a
lea edx, [ebp + 8]
push edx
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x154]
call fcn.00404e10
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [ebp - 0x288], 0x2e
je 0x51ec56
mov eax, dword [ebp - 0x2b4]
cmp eax, 0x2010
je 0x51eae7
cmp eax, esi
je 0x51eae7
lea eax, [ebp - 0x154]
push eax
or eax, 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00404e10
push 0x586400
lea eax, [ebp - 0x138]
call fcn.00520230
lea ecx, [ebp - 0x288]
push ecx
lea eax, [ebp - 0x138]
call fcn.00520230
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jae 0x51eabe
lea eax, [ebp - 0x138]
push 0xfffffffffffffffe
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jae 0x51eadb
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x51ec4d
mov ecx, dword [ebp - 0x144]
dec ecx
lea eax, [ebp - 0x154]
call fcn.005234d0
cmp byte [eax], 0x5c
jne 0x51ebdc
xor eax, eax
lea edx, [ebp - 0x154]
mov dword [ebp - 0x160], eax
mov byte [ebp - 0x170], al
push edx
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x15c], edi
call fcn.00404e10
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 3
call fcn.00520230
push 0x586400
lea eax, [ebp - 0x170]
call fcn.00520230
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x15c], esi
jae 0x51eb67
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
sub esp, 0x1c
mov esi, esp
lea eax, [ebp - 0x11c]
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], 0
mov dword [ebp - 0x2c4], esp
mov byte [esi], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x51eb96
sub eax, edx
mov edi, eax
lea eax, [ebp - 0x11c]
call fcn.004051c0
mov ecx, dword [ebp - 0x2c0]
call fcn.0051e910
mov byte [ebp - 4], 2
cmp dword [ebp - 0x15c], 0x10
jb 0x51ebd4
mov edx, dword [ebp - 0x170]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
lea esi, [edi + 1]
lea eax, [ebp - 0x154]
push eax
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x138]
call fcn.00404e10
push 0x586400
lea eax, [ebp - 0x138]
call fcn.00520230
lea ecx, [ebp - 0x288]
push ecx
lea eax, [ebp - 0x138]
call fcn.00520230
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jae 0x51ec29
lea eax, [ebp - 0x138]
push 0xfffffffffffffffe
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jae 0x51ec46
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
test eax, eax
setne byte [ebp - 0x2b5]
mov eax, dword [ebp - 0x2bc]
lea edx, [ebp - 0x2b4]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x51ea3b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x51ec9c
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x140], esi
jae 0x51ec91
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov bl, 1
jmp 0x51eca2
mov bl, byte [ebp - 0x2b5]
mov eax, dword [ebp - 0x2bc]
test eax, eax
je 0x51ecb3
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
movzx edi, bl
mov ebx, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
cmp dword [ebp - 0x124], esi
jb 0x51ecd0
mov ecx, dword [ebp - 0x138]
push ecx
call ebx
add esp, 4
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x128], 0
mov byte [ebp - 0x138], 0
cmp dword [ebp - 0x140], esi
jb 0x51ecff
mov edx, dword [ebp - 0x154]
push edx
call ebx
add esp, 4
mov dword [ebp - 0x140], 0xf
mov dword [ebp - 0x144], 0
mov byte [ebp - 0x154], 0
cmp dword [ebp + 0x1c], esi
jb 0x51ed28
mov eax, dword [ebp + 8]
push eax
call ebx
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005762ee
mov esp, ebp
pop ebp
ret 0x1c