Function at 0x4118da
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
sub esp, 0x354
push ebx
push esi
mov esi, dword [esp + 0x360]
xor ebx, ebx
test esi, esi
je 0x411bab
cmp byte [esi], bl
je 0x411bab
push ebp
mov ebp, 0x104
lea eax, [esp + 0x10]
push ebp
push esi
push eax
call sub.MSVCRT.dll_strncpy
push esi
mov byte [esp + 0x124], bl
call sub.MSVCRT.dll_strlen
add esp, 0x10
test eax, eax
je 0x41193d
cmp eax, ebp
jge 0x41193d
cmp byte [eax + esi - 1], 0x5c
je 0x41193d
lea eax, [esp + 0x10]
push 0x471420
push eax
call sub.MSVCRT.dll_strcat
pop ecx
pop ecx
push edi
push ebp
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x264]
push eax
call sub.MSVCRT.dll_strncpy
mov edi, dword [esp + 0x378]
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, 0x47141c
mov byte [esp + 0x360], bl
test edi, edi
je 0x411a71
cmp byte [edi], bl
je 0x411a71
push esi
push edi
call sub.MSVCRT.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x411a71
test byte [esp + 0x370], 1
je 0x411a6b
lea eax, [esp + 0x25c]
push eax
push str._s.
lea eax, [esp + 0x1c]
push 0x104
push eax
call sub.MSVCRT.dll__snprintf
add esp, 0x10
lea eax, [esp + 0x11c]
push eax
lea eax, [esp + 0x18]
push eax
call ebp
mov esi, eax
cmp esi, 0xffffffff
je 0x411a66
lea eax, [esp + 0x148]
push eax
lea eax, [esp + 0x260]
push eax
push str._s_s
lea eax, [esp + 0x20]
push 0x104
push eax
call sub.MSVCRT.dll__snprintf
add esp, 0x14
test byte [esp + 0x11c], 0x10
je 0x411a48
lea eax, [esp + 0x148]
push 0x471434
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x411a48
lea eax, [esp + 0x148]
push 0x471438
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x411a48
push dword [esp + 0x370]
lea eax, [esp + 0x18]
push edi
push eax
call fcn.004118da
lea eax, [esp + 0x11c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4119d5
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
inc esi
jmp 0x411a75
mov esi, dword [esp + 0x10]
jmp 0x411a75
mov edi, esi
mov esi, ebx
push edi
lea eax, [esp + 0x260]
push eax
push str._s_s
lea eax, [esp + 0x20]
push 0x104
push eax
call sub.MSVCRT.dll__snprintf
add esp, 0x14
lea eax, [esp + 0x11c]
push eax
lea eax, [esp + 0x18]
push eax
call ebp
mov ebp, eax
cmp ebp, 0xffffffff
je 0x411ba9
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [esp + 0x148]
push eax
lea eax, [esp + 0x260]
push eax
push str._s_s
lea eax, [esp + 0x20]
push 0x104
push eax
call sub.MSVCRT.dll__snprintf
add esp, 0x14
test byte [esp + 0x11c], 0x10
je 0x411b38
test esi, esi
jne 0x411b59
test byte [esp + 0x370], 1
je 0x411b59
lea eax, [esp + 0x148]
push 0x471434
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x411b59
lea eax, [esp + 0x148]
push 0x471438
push eax
call sub.MSVCRT.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x411b59
push dword [esp + 0x370]
lea eax, [esp + 0x18]
push edi
push eax
call fcn.004118da
jmp 0x411b59
test byte [esp + 0x370], 2
je 0x411b4e
push pe_nt_image_headers32
lea eax, [esp + 0x18]
push eax
call ebx
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [esp + 0x11c]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x411ab5
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
test byte [esp + 0x370], 2
je 0x411b90
push pe_nt_image_headers32
lea eax, [esp + 0x260]
push eax
call ebx
test esi, esi
je 0x411b99
xor ebx, ebx
inc ebx
jmp 0x411ba9
lea eax, [esp + 0x25c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov ebx, eax
pop edi
pop ebp
pop esi
mov eax, ebx
pop ebx
add esp, 0x354
ret 0xc