Function at 0x4347b0
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc90
mov eax, dword [0x4b1120]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x628], ax
xor ecx, ecx
mov dword [ebp - 0x626], ecx
xor edx, edx
mov word [ebp - 0x620], dx
push 0x1fe
push 0
lea eax, [ebp - 0x61e]
push eax
call fcn.00447660
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xa38], cx
push 0x1fe
push 0
lea edx, [ebp - 0xa36]
push edx
call fcn.00447660
add esp, 0xc
mov dword [ebp - 0x62c], 0
push 0x100
lea eax, [ebp - 0xa38]
push eax
push 0x100
lea ecx, [ebp - 0x620]
push ecx
push 0x104
lea edx, [ebp - 0x210]
push edx
push 3
lea eax, [ebp - 0x628]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044af7d
add esp, 0x24
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x628]
push eax
push 0x49777c
push 0x104
lea ecx, [ebp - 0x420]
push ecx
call fcn.00447c36
add esp, 0x14
lea edx, [ebp - 0xc90]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0xffffffff
je 0x4349b4
lea ecx, [ebp - 0xc64]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x214]
movzx eax, word [edx + 2]
test eax, eax
jne 0x4348cf
mov ecx, dword [ebp - 0x214]
movzx edx, word [ecx]
cmp edx, 0x2e
jne 0x4348cf
jmp 0x43498b
mov eax, dword [ebp - 0x214]
movzx ecx, word [eax + 4]
test ecx, ecx
jne 0x4348ff
mov edx, dword [ebp - 0x214]
movzx eax, word [edx]
cmp eax, 0x2e
jne 0x4348ff
mov ecx, dword [ebp - 0x214]
movzx edx, word [ecx + 2]
cmp edx, 0x2e
jne 0x4348ff
jmp 0x43498b
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0x420]
push ecx
push 0x497788
push 0x104
lea edx, [ebp - 0x838]
push edx
call fcn.00447c36
add esp, 0x14
mov eax, dword [ebp - 0xc90]
and eax, 0x10
jne 0x43498b
mov ecx, dword [ebp - 0xc90]
and ecx, 1
je 0x434953
mov edx, dword [ebp - 0xc90]
and edx, 0xfffffffe
push edx
lea eax, [ebp - 0x838]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x838]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0
jne 0x43498b
mov edx, dword [ebp + 0xc]
and edx, 0x100
je 0x43498b
push 0
lea eax, [ebp - 0x838]
push eax
call fcn.004370b0
add esp, 8
lea ecx, [ebp - 0xc90]
push ecx
mov edx, dword [ebp - 0xa3c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4348a0
mov eax, dword [ebp - 0xa3c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp + 0xc]
and ecx, 2
je 0x434af1
lea edx, [ebp - 0x420]
push edx
push 0x497794
push 0x104
lea eax, [ebp - 0x838]
push eax
call fcn.00447c36
add esp, 0x10
lea ecx, [ebp - 0xc90]
push ecx
lea edx, [ebp - 0x838]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0
je 0x434a0c
cmp dword [ebp - 0xa3c], 0xffffffff
jne 0x434a13
xor eax, eax
jmp 0x434af7
lea eax, [ebp - 0xc64]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x214]
movzx edx, word [ecx + 2]
test edx, edx
jne 0x434a42
mov eax, dword [ebp - 0x214]
movzx ecx, word [eax]
cmp ecx, 0x2e
jne 0x434a42
jmp 0x434ac8
mov edx, dword [ebp - 0x214]
movzx eax, word [edx + 4]
test eax, eax
jne 0x434a6f
mov ecx, dword [ebp - 0x214]
movzx edx, word [ecx]
cmp edx, 0x2e
jne 0x434a6f
mov eax, dword [ebp - 0x214]
movzx ecx, word [eax + 2]
cmp ecx, 0x2e
jne 0x434a6f
jmp 0x434ac8
mov edx, dword [ebp - 0xc90]
and edx, 0x10
je 0x434ac8
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0x620]
push ecx
mov edx, dword [ebp - 0x214]
push edx
lea eax, [ebp - 0x420]
push eax
push 0x4977a0
push 0x104
lea ecx, [ebp - 0x838]
push ecx
call fcn.00447c36
add esp, 0x1c
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x838]
push eax
call fcn.004347b0
add esp, 8
mov dword [ebp - 0x62c], eax
lea ecx, [ebp - 0xc90]
push ecx
mov edx, dword [ebp - 0xa3c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x434a13
mov eax, dword [ebp - 0xa3c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x62c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447645
mov esp, ebp
pop ebp
ret