Function at 0x40fbf4
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov eax, 0x4288dd
call fcn.0041de0c
sub esp, 0x1d8
mov eax, dword [0x434450]
push ebx
push esi
push edi
push 0xf
pop esi
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x189], bl
mov dword [ebp - 0x14], esi
call fcn.0040dee6
push ebx
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], esi
call fcn.0040dee6
push dword [ebp + 8]
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 1
call fcn.0040e5d9
push 0x42a9f4
push eax
lea eax, [ebp - 0x1ac]
push eax
mov byte [ebp - 4], 2
call fcn.0040fba6
add esp, 0xc
or esi, 0xffffffff
push esi
push ebx
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.0040e3d9
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x1ac]
call fcn.0040dfd1
push ebx
push edi
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 1
call fcn.0040dfd1
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
jae 0x40fc9f
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x188]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, esi
mov dword [ebp - 0x190], eax
je 0x40fe24
cmp byte [ebp - 0x15c], 0x2e
je 0x40fdb7
push esi
push ebx
lea ecx, [ebp - 0x2c]
call fcn.0040e01a
push dword [ebp + 8]
lea ecx, [ebp - 0x1e4]
call fcn.0040e5d9
push 0x429924
push eax
lea eax, [ebp - 0x1ac]
push eax
mov byte [ebp - 4], 4
call fcn.0040fba6
lea ecx, [ebp - 0x15c]
push ecx
push eax
lea eax, [ebp - 0x1c8]
push eax
mov byte [ebp - 4], 5
call fcn.0040fba6
add esp, 0x18
push esi
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.0040e3d9
push ebx
push edi
lea ecx, [ebp - 0x1c8]
call fcn.0040dfd1
push ebx
push edi
lea ecx, [ebp - 0x1ac]
call fcn.0040dfd1
push ebx
push edi
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 1
call fcn.0040dfd1
test byte [ebp - 0x188], 0x10
je 0x40fd84
cmp byte [ebp + 0xc], bl
je 0x40fd7b
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x40fd65
lea eax, [ebp - 0x28]
push dword [ebp + 0xc]
push eax
call fcn.0040fbf4
cmp eax, ebx
pop ecx
pop ecx
je 0x40fdb7
mov esi, eax
jmp 0x40fe26
mov byte [ebp - 0x189], 1
jmp 0x40fdb7
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x40fd90
lea eax, [ebp - 0x28]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
je 0x40fe19
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x40fdac
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x40fe19
lea eax, [ebp - 0x188]
push eax
push dword [ebp - 0x190]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, edi
je 0x40fcbb
push dword [ebp - 0x190]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0x12
jne 0x40fd74
cmp byte [ebp - 0x189], bl
jne 0x40fe24
push 0x80
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
je 0x40fe12
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
test eax, eax
jne 0x40fe24
call esi
jmp 0x40fd74
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40fd74
xor esi, esi
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.0040dfd1
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040dfd1
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.0041e1ae
leave
ret