Function at 0x418bb0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a93bc
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x4e0240]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
push esi
push str.DeleteFolder__s
call fcn.00411cc0
push 0x24c
lea eax, [ebp - 0x25c]
push 0
push eax
mov dword [ebp - 0x260], 0
call fcn.0046e590
add esp, 0x14
push esi
lea ecx, [ebp - 0x26c]
call fcn.00402008
push 0x4b7f8c
push eax
lea ecx, [ebp - 0x27c]
push ecx
mov dword [ebp - 4], 0
call fcn.0040336c
mov eax, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x260]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff0
mov dword [ebp - 0x268], ebx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418c6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x26c]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418c96
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp ebx, 0xffffffff
je 0x418e7b
mov ebx, 4
jmp 0x418cb0
mov ecx, 0x4b7f88
lea eax, [ebp - 0x234]
jmp 0x418cc0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x418ce4
test dx, dx
je 0x418ce0
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x418ce4
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x418cc0
xor eax, eax
jmp 0x418ce9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x418e59
mov ecx, 0x4b7f80
lea eax, [ebp - 0x234]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x418d24
test dx, dx
je 0x418d20
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x418d24
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x418d00
xor eax, eax
jmp 0x418d29
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x418e59
push esi
lea ecx, [ebp - 0x270]
call fcn.00402008
push 0x4b7c70
push eax
lea ecx, [ebp - 0x278]
push ecx
mov dword [ebp - 4], 1
call fcn.0040336c
lea edx, [ebp - 0x234]
push edx
push eax
lea eax, [ebp - 0x264]
push eax
mov byte [ebp - 4], 2
call fcn.0040336c
add esp, 0x18
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418d96
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x270]
add eax, 0xfffffff0
mov byte [ebp - 4], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418dbc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test byte [ebp - 0x260], 0x10
je 0x418dd6
mov ecx, dword [ebp - 0x264]
push ecx
call fcn.00418bb0
add esp, 4
jmp 0x418e30
mov edx, dword [ebp - 0x264]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.toDel
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x274]
push ecx
call fcn.0040336c
mov eax, dword [eax]
mov edx, dword [ebp - 0x264]
add esp, 0xc
push eax
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418e30
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x264]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418e59
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [ebp - 0x268]
lea ecx, [ebp - 0x260]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x418cb0
mov ebx, dword [ebp - 0x268]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046e452
mov esp, ebp
pop ebp
ret