Function at 0x402a00
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get common file path
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bcac2
mov eax, dword fs:[0]
push eax
sub esp, 0x2f0
mov eax, dword [0x4e2210]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x274], 0xffffffff
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x270]
call fcn.00405a00
mov dword [ebp - 4], 0
push 0x4cdd2c
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x2a8]
push edx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2d4], eax
lea eax, [ebp - 0x264]
push eax
mov ecx, dword [ebp - 0x2d4]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x274], eax
lea ecx, [ebp - 0x2a8]
call fcn.00417fc0
cmp dword [ebp - 0x274], 0xffffffff
jne 0x402ac2
mov dword [ebp - 0x268], 1
jmp 0x403062
mov ecx, dword [ebp - 0x264]
and ecx, 0x10
je 0x402c33
push 0x4cdd30
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x402c2e
push 0x4cdd34
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x402c2e
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 4
mov dword [ebp - 0x280], 0
jmp 0x402b34
mov ecx, dword [ebp - 0x280]
add ecx, 1
mov dword [ebp - 0x280], ecx
mov edx, dword [ebp - 0x280]
cmp edx, dword [ebp - 0x278]
jge 0x402b6f
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax*4 + 0x4e3ba8]
push ecx
lea edx, [ebp - 0x238]
push edx
call fcn.0049d802
add esp, 8
test eax, eax
jne 0x402b6d
mov dword [ebp - 0x27c], 1
jmp 0x402b25
cmp dword [ebp - 0x27c], 0
jne 0x402c2e
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x2ac]
push edx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 1
push 0x4cdd3c
mov ecx, dword [ebp - 0x2dc]
push ecx
lea edx, [ebp - 0x2b0]
push edx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp - 0x2e4]
call fcn.004683f0
push eax
call fcn.00402a00
add esp, 0xc
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2b0]
call fcn.00417fc0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ac]
call fcn.00417fc0
cmp dword [ebp - 0x26c], 0
jne 0x402c2e
jmp 0x403062
jmp 0x403031
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 2
mov dword [ebp - 0x28c], 0
jmp 0x402c62
mov eax, dword [ebp - 0x28c]
add eax, 1
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x28c]
cmp ecx, dword [ebp - 0x284]
jge 0x402c9d
mov edx, dword [ebp - 0x28c]
mov eax, dword [edx*4 + 0x4e3bb8]
push eax
lea ecx, [ebp - 0x238]
push ecx
call fcn.0049d802
add esp, 8
test eax, eax
jne 0x402c9b
mov dword [ebp - 0x288], 1
jmp 0x402c53
cmp dword [ebp - 0x288], 0
jne 0x403031
cmp dword [ebp + 0xc], 0
je 0x402d7e
lea edx, [ebp - 0x238]
push edx
call fcn.0049d109
add esp, 4
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jle 0x402d7e
push 0x4cdd40
mov eax, dword [ebp - 0x290]
lea ecx, [ebp + eax*2 - 0x240]
push ecx
call fcn.0049d802
add esp, 8
test eax, eax
jne 0x402d7e
lea edx, [ebp - 0x294]
push edx
call fcn.00403180
add esp, 4
mov byte [ebp - 4], 3
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x294]
call fcn.00403b80
push 0
lea ecx, [ebp - 0x294]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x294]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jne 0x402d6f
cmp dword [ebp + 0x10], 0
je 0x402d6f
push 4
push 0
lea ecx, [ebp - 0x294]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x294]
call fcn.00417fc0
lea ecx, [ebp - 0x238]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x2b4]
push eax
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2e8], eax
push 0
mov ecx, dword [ebp - 0x2e8]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x2b4]
call fcn.00417fc0
lea ecx, [ebp - 0x238]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x2b8]
push eax
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x26c], eax
lea ecx, [ebp - 0x2b8]
call fcn.00417fc0
cmp dword [ebp - 0x26c], 0
jne 0x403031
lea ecx, [ebp - 0x238]
push ecx
lea ecx, [ebp - 0x298]
call fcn.00405a00
mov byte [ebp - 4], 4
push 4
lea edx, [ebp - 0x2c0]
push edx
lea ecx, [ebp - 0x298]
call fcn.00403bf0
mov dword [ebp - 0x2f0], eax
push 0x4cdd4c
mov eax, dword [ebp - 0x2f0]
push eax
call fcn.00403da0
add esp, 8
mov byte [ebp - 0x2b9], al
lea ecx, [ebp - 0x2c0]
call fcn.00417fc0
movzx ecx, byte [ebp - 0x2b9]
test ecx, ecx
je 0x402fde
lea ecx, [ebp - 0x29c]
call fcn.00417fe0
mov byte [ebp - 4], 5
push 0x105
lea ecx, [ebp - 0x29c]
call fcn.004055f0
push eax
push 0
push 0x4cdd58
lea ecx, [ebp - 0x270]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [ebp - 0x2a0], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x29c]
call fcn.004055c0
cmp dword [ebp - 0x2a0], 0
jne 0x402ef0
lea edx, [ebp - 0x238]
push edx
mov eax, dword [ebp - 0x270]
push eax
push str._s_s.tmp
lea ecx, [ebp - 0x29c]
push ecx
call fcn.00405770
add esp, 0x10
jmp 0x402f02
lea ecx, [ebp - 0x29c]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2f4], eax
lea ecx, [ebp - 0x29c]
call fcn.004683f0
push eax
mov ecx, dword [ebp - 0x2f4]
call fcn.004683f0
push eax
call fcn.0049d893
add esp, 8
mov dword [ebp - 0x26c], eax
lea ecx, [ebp - 0x2c4]
call fcn.00417fc0
cmp dword [ebp - 0x26c], 0
jne 0x402f77
push 4
push 0
lea ecx, [ebp - 0x29c]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x402fcd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp + 0x10], 0
je 0x402fcd
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x2c8]
push ecx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2f8], eax
push 4
push 0
mov ecx, dword [ebp - 0x2f8]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x2c8]
call fcn.00417fc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x29c]
call fcn.00417fc0
jmp 0x403022
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x2fc], eax
push 4
push 0
mov ecx, dword [ebp - 0x2fc]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x2cc]
call fcn.00417fc0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x298]
call fcn.00417fc0
lea edx, [ebp - 0x264]
push edx
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jne 0x402ac2
mov dword [ebp - 0x268], 1
cmp dword [ebp - 0x274], 0xffffffff
je 0x403078
mov ecx, dword [ebp - 0x274]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x270]
call fcn.004683f0
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov edx, dword [ebp - 0x268]
mov dword [ebp - 0x2d0], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.00417fc0
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049d270
mov esp, ebp
pop ebp
ret