Function at 0x5007e0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x5ceaec
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x65b4e4]
xor eax, esp
mov dword [esp + 0x2a8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, esp
push eax
lea eax, [esp + 0x2c0]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x2d0]
xor ebp, ebp
cmp ecx, ebp
je 0x500985
cmp byte [ecx], 0
je 0x500985
mov edi, 0xf
mov eax, ecx
mov dword [esp + 0x178], edi
mov dword [esp + 0x174], ebp
mov byte [esp + 0x164], 0
lea esi, [eax + 1]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x500855
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x168]
call fcn.004098b0
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x164]
mov dword [esp + 0x2cc], ebp
call fcn.00425330
mov ecx, eax
call fcn.004258b0
cmp byte [eax], 0x5c
je 0x5008a2
push 0x5c
push 1
lea ecx, [esp + 0x168]
call fcn.00407090
push 1
push 2
lea ecx, [esp + 0xe8]
call fcn.0040b160
push 0x5f32d8
lea ecx, [esp + 0x164]
push ecx
lea edx, [esp + 0xe8]
push edx
mov byte [esp + 0x2d4], 1
call fcn.00409360
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0xe4]
call fcn.00409610
mov ebx, 0x10
cmp dword [eax + 0x18], ebx
jb 0x500900
mov eax, dword [eax + 4]
jmp 0x500903
add eax, 4
lea ecx, [esp + 0x17c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp dword [esp + 0x50], ebx
mov esi, eax
mov dword [esp + 0x14], esi
jb 0x50092b
mov edx, dword [esp + 0x3c]
push edx
call fcn.00594e98
add esp, 4
cmp esi, 0xffffffff
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebp
mov byte [esp + 0x3c], 0
jne 0x5009b2
lea ecx, [esp + 0x12c]
mov byte [esp + 0x2c8], 0
call fcn.00409f20
lea eax, [esp + 0x12c]
push eax
mov dword [esp + method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.005cccbe
add esp, 4
cmp dword [esp + 0x178], ebx
jb 0x500985
mov ecx, dword [esp + 0x164]
push ecx
call fcn.00594e98
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x2c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2a8]
xor ecx, esp
call fcn.005b0968
add esp, 0x2b8
ret
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 2
lea ecx, [esp + 0x68]
call fcn.0040b160
lea edx, [esp + 0x1a8]
push edx
lea eax, [esp + 0x164]
push eax
lea ecx, [esp + 0x68]
push ecx
mov byte [esp + 0x2d4], 2
call fcn.00409360
add esp, 8
push eax
call fcn.00409c80
mov edx, dword [esp + 0x184]
and edx, ebx
add esp, 8
cmp dl, bl
jne 0x500a93
mov edi, 0x5f32e0
lea esi, [esp + 0x1a8]
mov ecx, 2
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x500a72
mov edi, 0x5f32dc
lea esi, [esp + 0x1a8]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x500a72
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x64]
call fcn.00409610
cmp dword [eax + 0x18], ebx
mov byte [esp + 0x2c8], 3
jb 0x500a52
mov eax, dword [eax + 4]
jmp 0x500a55
add eax, 4
push eax
call fcn.005007e0
add esp, 4
cmp dword [esp + 0x34], ebx
jb 0x500b03
mov ecx, dword [esp + 0x20]
push ecx
jmp 0x500afb
lea ecx, [esp + 0xac]
mov byte [esp + 0x2c8], 1
call fcn.00409f20
lea edx, [esp + 0xac]
push edx
jmp 0x500b1f
push 1
call ebp
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x64]
call fcn.00409610
cmp dword [eax + 0x18], ebx
jb 0x500aaf
mov eax, dword [eax + 4]
jmp 0x500ab2
add eax, 4
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
cmp dword [esp + 0x34], ebx
jb 0x500ace
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00594e98
add esp, 4
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x64]
call fcn.00409610
cmp dword [eax + 0x18], ebx
jb 0x500ae6
mov eax, dword [eax + 4]
jmp 0x500ae9
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x34], ebx
jb 0x500b03
mov eax, dword [esp + 0x20]
push eax
call fcn.00594e98
add esp, 4
lea ecx, [esp + 0xac]
mov byte [esp + 0x2c8], 1
call fcn.00409f20
lea ecx, [esp + 0xac]
push ecx
mov dword [esp + 0xb0], vtable.std::ios_base.0
call fcn.005cccbe
mov esi, dword [esp + 0x18]
add esp, 4
lea edx, [esp + 0x17c]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x5009b8
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x178]
cmp ecx, ebx
mov edi, dword [esp + 0x164]
mov eax, edi
jae 0x500b6f
lea eax, [esp + 0x164]
mov edx, dword [esp + 0x174]
lea esi, [eax + edx]
test esi, esi
je 0x500ba1
cmp ecx, ebx
mov eax, edi
jae 0x500b8a
lea eax, [esp + 0x164]
cmp eax, esi
ja 0x500ba1
cmp ecx, ebx
mov eax, edi
jae 0x500b9b
lea eax, [esp + 0x164]
add eax, edx
cmp esi, eax
jbe 0x500ba6
call fcn.005b0913
push 1
lea ecx, [esp + 0x58]
lea eax, [esp + 0x164]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], esi
call fcn.004ff1e0
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x16c]
call fcn.004ff220
cmp dword [esp + 0x178], ebx
mov eax, dword [esp + 0x164]
jae 0x500bf4
lea eax, [esp + 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [esp + 0x12c]
mov esi, eax
mov byte [esp + 0x2c8], 0
call fcn.00409f20
lea edx, [esp + 0x12c]
push edx
mov dword [esp + method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.005cccbe
add esp, 4
cmp dword [esp + 0x178], ebx
jb 0x500c45
mov eax, dword [esp + 0x164]
push eax
call fcn.00594e98
add esp, 4
mov eax, esi
jmp 0x50098a