Function at 0x4676c0
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc78
mov eax, dword [0x4af6f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor eax, eax
push edi
push 0x1fe
push eax
mov word [ebp - 0xc], ax
mov dword [ebp - 0xa], eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x81c], ax
lea eax, [ebp - 0x81a]
push eax
call fcn.0046f6e0
push 0x100
lea eax, [ebp - 0x81c]
xor edi, edi
push eax
push 0x100
lea eax, [ebp - 0x414]
push eax
push 0x104
lea eax, [ebp - 0xa24]
push eax
push 3
lea eax, [ebp - 0xc]
push eax
push esi
call fcn.00472eb6
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x492f94
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.0046ebde
add esp, 0x50
lea eax, [ebp - 0xc74]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, dword [ebp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0xc78], eax
cmp eax, 0xffffffff
je 0x467858
mov cx, word [ebp - 0xc46]
mov ax, word [ebp - 0xc48]
test cx, cx
jne 0x4677af
cmp ax, 0x2e
je 0x467835
cmp word [ebp - 0xc44], 0
jne 0x4677c4
cmp ax, 0x2e
jne 0x4677c4
cmp cx, ax
je 0x467835
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x492f94
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.0046ebde
mov eax, dword [ebp - 0xc74]
add esp, 0x14
test al, 0x10
jne 0x467835
test al, 1
je 0x46780a
and eax, 0xfffffffe
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, eax
test edi, edi
jne 0x467835
test ebx, 0x100
je 0x467835
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.004683a0
add esp, 8
lea eax, [ebp - 0xc74]
push eax
push dword [ebp - 0xc78]
call esi
test eax, eax
jne 0x467792
push dword [ebp - 0xc78]
call dword [sym.imp.KERNEL32.dll_FindClose]
test bl, 2
je 0x467948
lea eax, [ebp - 0x61c]
push eax
push 0x492fa0
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.0046ebde
add esp, 0x10
lea eax, [ebp - 0xc74]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
test esi, esi
je 0x46795b
cmp esi, 0xffffffff
je 0x46795b
jmp 0x4678b0
mov cx, word [ebp - 0xc46]
mov ax, word [ebp - 0xc48]
test cx, cx
jne 0x4678c9
cmp ax, 0x2e
je 0x46792b
cmp word [ebp - 0xc44], 0
jne 0x4678de
cmp ax, 0x2e
jne 0x4678de
cmp cx, ax
je 0x46792b
test byte [ebp - 0xc74], 0x10
je 0x46792b
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x492fac
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.0046ebde
lea eax, [ebp - 0x214]
push ebx
push eax
call fcn.004676c0
add esp, 0x24
mov edi, eax
lea eax, [ebp - 0xc74]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4678b0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046ebfa
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046ebfa
mov esp, ebp
pop ebp
ret