Function at 0x44f100
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x364
mov eax, dword [0x4d1698]
xor eax, esp
mov dword [esp + 0x360], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea edx, [esp + 0x25c]
push edi
mov dword [esp + 0x14], esi
mov eax, esi
sub edx, esi
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x44f130
lea eax, [esp + 0x260]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x44f142
mov cx, word [0x4bac84]
mov dl, byte [0x4bac86]
mov word [eax], cx
mov byte [eax + 2], dl
lea edx, [esp + 0x158]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x44f168
lea edi, [esp + 0x158]
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x44f180
mov ax, word [0x4aeee8]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x264]
push edx
mov word [edi], ax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
xor eax, eax
mov dword [esp + 0x10], edi
cmp edi, 0xffffffff
je 0x44f2e5
jmp 0x44f1c0
mov cl, byte [esp + eax + 0x158]
mov byte [esp + eax + 0x260], cl
inc eax
test cl, cl
jne 0x44f1c0
mov ebx, dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [esp + 0x18]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x44f2cc
lea esi, [esp + 0x44]
call fcn.0044f090
test eax, eax
jne 0x44f1d9
mov eax, esi
mov edx, esi
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44f200
lea edi, [esp + 0x158]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x44f211
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov al, byte [esp + 0x18]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test al, 0x10
je 0x44f27c
lea ecx, [esp + 0x158]
push ecx
call fcn.0044f100
add esp, 4
test eax, eax
je 0x44f2fa
lea edx, [esp + 0x158]
push edx
call ebx
xor eax, eax
jmp 0x44f260
mov cl, byte [esp + eax + 0x260]
mov byte [esp + eax + 0x158], cl
inc eax
test cl, cl
jne 0x44f260
mov edi, dword [esp + 0x10]
jmp 0x44f1d9
test al, 1
je 0x44f293
push 0x80
lea eax, [esp + 0x15c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x158]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x44f31c
xor eax, eax
jmp 0x44f2b0
mov cl, byte [esp + eax + 0x260]
mov byte [esp + eax + 0x158], cl
inc eax
test cl, cl
jne 0x44f2b0
mov edi, dword [esp + 0x10]
jmp 0x44f1d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x44f33e
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x14]
push ecx
call ebx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x360]
xor ecx, esp
call fcn.0048c97b
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x360]
xor ecx, esp
call fcn.0048c97b
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x360]
xor ecx, esp
call fcn.0048c97b
mov esp, ebp
pop ebp
ret
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x36c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0048c97b
mov esp, ebp
pop ebp
ret