Function at 0x40dee1
Capabilities:
Delete directory
Delete file
Enumerate files on windows

Disassembly:
push 0x46c
mov eax, 0x476e30
call fcn.00442c61
mov esi, dword [ebp + 8]
lea edi, [esi + 0x3c]
push edi
call fcn.0040cd0d
mov dword [esi + 0x108], eax
push edi
lea eax, [esi + 0x58]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.0040cf2f
add esp, 0x10
mov eax, dword [esi + 0x108]
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp eax, 3
jne 0x40df52
cmp dword [ebp - 0x50], 8
lea eax, [esi + 0x13c]
mov dword [ebp - 0x470], eax
push eax
mov eax, dword [ebp - 0x64]
jae 0x40df3c
lea eax, [ebp - 0x64]
push ecx
mov ecx, esp
mov dword [ebp - 0x460], esp
push eax
call fcn.00409bbf
call fcn.00414ea5
jmp 0x40dfa3
cmp eax, 2
lea eax, [esi + 0x13c]
mov dword [ebp - 0x470], eax
push eax
mov eax, dword [ebp - 0x64]
jne 0x40df86
cmp dword [ebp - 0x50], 8
jae 0x40df70
lea eax, [ebp - 0x64]
push ecx
mov ecx, esp
mov dword [ebp - 0x460], esp
push eax
call fcn.00409bbf
call fcn.00415b76
jmp 0x40dfa3
cmp dword [ebp - 0x50], 8
jae 0x40df8f
lea eax, [ebp - 0x64]
push ecx
mov ecx, esp
mov dword [ebp - 0x460], esp
push eax
call fcn.00409bbf
call fcn.00415296
pop ecx
pop ecx
push 0x498d34
lea ecx, [ebp - 0x46c]
call fcn.00421c6c
cmp dword [edi + 0x14], 8
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 1
push eax
jb 0x40dfca
mov eax, dword [edi]
jmp 0x40dfcc
mov eax, edi
push ecx
mov ecx, esp
mov dword [ebp - 0x460], esp
push eax
call fcn.00409bbf
call fcn.00414d67
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x46c]
call fcn.00403f05
push eax
lea ecx, [ebp - 0x48]
call fcn.0040cbd3
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 2
call fcn.00425c32
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.0040b970
lea ecx, [ebp - 0x208]
call fcn.0041cc6a
mov edi, eax
sub esp, 0x1c
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x460], esp
push eax
mov byte [ebp - 4], 5
call fcn.0040ca36
mov eax, dword [edi]
lea ecx, [ebp - 0x10c]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 7
call fcn.0041cc09
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00425bc8
lea eax, [ebp - 0xd4]
push eax
push dword [esi + 0x114]
lea eax, [esi + 4]
push dword [esi + 0x110]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040fd80
mov edi, eax
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 9
call fcn.0040fc8d
push edi
push eax
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 4], 0xa
call fcn.0040cedd
add esp, 0x2c
push ebx
push 1
lea ecx, [ebp - 0xb8]
call fcn.0040b970
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xd
call fcn.0040b970
call fcn.0040d6e3
mov ecx, eax
call fcn.0040f354
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xd4]
push ecx
lea ecx, [eax + 0x74]
call fcn.0040c654
mov edi, 0x47d818
push edi
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040cf90
add esp, 0xc
mov dword [ebp - 0x464], eax
mov byte [ebp - 4], 0xe
call fcn.0040d6e3
mov ecx, eax
call fcn.0040f354
push dword [ebp - 0x464]
lea ecx, [eax + 0xac]
call fcn.0040cc26
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.0040b970
push 0x498d34
lea ecx, [ebp - 0x468]
call fcn.00421c6c
lea eax, [ebp - 0x468]
push eax
lea eax, [esi + 0x3c]
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xf
jb 0x40e16f
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [ebp - 0x460], esp
push eax
call fcn.00409bbf
call fcn.00414de8
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x468]
call fcn.00403f05
push eax
lea ecx, [ebp - 0x80]
call fcn.0040cbd3
push 0x47d810
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0x10
call fcn.0040cf90
add esp, 0xc
cmp dword [ebp - 0x88], 8
mov eax, dword [ebp - 0x9c]
mov byte [ebp - 4], 0x11
jae 0x40e1cf
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x458]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x464], eax
cmp eax, 0xffffffff
jne 0x40e272
mov byte [ebp - 0x459], bl
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040b970
push ebx
push esi
lea ecx, [ebp - 0x80]
call fcn.0040b970
mov ecx, dword [ebp - 0x468]
add ecx, 0xfffffff0
call fcn.0040125c
push ebx
push esi
lea ecx, [ebp - 0xf0]
call fcn.0040b970
push ebx
push esi
lea ecx, [ebp - 0xd4]
call fcn.0040b970
push ebx
push esi
lea ecx, [ebp - 0x10c]
call fcn.0040bd1a
push ebx
push esi
lea ecx, [ebp - 0x128]
call fcn.0040bd1a
mov ecx, dword [ebp - 0x46c]
add ecx, 0xfffffff0
call fcn.0040125c
push ebx
push esi
lea ecx, [ebp - 0x64]
call fcn.0040b970
mov al, byte [ebp - 0x459]
call fcn.00442ce4
ret
mov dword [ebp - 0x474], 1
test byte [ebp - 0x458], 0x20
je 0x40e3d8
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040cbd3
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x12
mov edx, eax
jae 0x40e2ac
lea edx, [ebp - 0x2c]
mov eax, edx
cmp dword [ebp - 0x18], 8
mov ecx, dword [ebp - 0x1c]
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x2c]
jae 0x40e2be
lea ecx, [ebp - 0x2c]
push fcn.0044543d
push edx
push eax
push ecx
lea eax, [ebp - 0x478]
push eax
call fcn.0040c386
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040cf2f
mov eax, dword [ebp - 0x474]
cdq
push edx
push eax
lea eax, [ebp - 0x144]
push eax
mov byte [ebp - 4], 0x13
call fcn.0040ccb6
mov dword [ebp - 0x460], eax
push 0x47d80c
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x160]
push eax
mov byte [ebp - 4], 0x14
call fcn.0040cf90
push dword [ebp - 0x460]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.0040cedd
add esp, 0x44
push edi
push eax
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x16
call fcn.0040cffe
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.0040b970
push ebx
push 1
lea ecx, [ebp - 0x160]
call fcn.0040b970
push ebx
push 1
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x1a
call fcn.0040b970
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.0040ddf4
pop ecx
pop ecx
cmp al, bl
je 0x40e397
inc dword [esi + 0x140]
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x40e3a3
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
inc dword [ebp - 0x474]
push ebx
push 1
lea ecx, [ebp - 0xb8]
call fcn.0040b970
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.0040b970
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.0040b970
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x464]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40e27c
push dword [ebp - 0x464]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x6c], 8
mov eax, dword [ebp - 0x80]
jae 0x40e40b
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov esi, dword [esi + 0x140]
cmp esi, 0xa
je 0x40e42b
mov eax, dword [ebp - 0x470]
cmp esi, dword [eax]
je 0x40e42b
xor al, al
jmp 0x40e42d
mov al, 1
mov byte [ebp - 0x459], al
jmp 0x40e1f2