Function at 0x41c530
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x457f44
mov eax, dword fs:[0]
push eax
sub esp, 0x34c
mov eax, dword [0x47706c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x328], ecx
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.00403170
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x41c59d
mov byte [ebp - 0x321], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00403dd0
mov al, byte [ebp - 0x321]
jmp 0x41c921
lea edx, [ebp + 8]
push edx
lea ecx, [ebp - 0x28]
call fcn.00403ff0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.00403cb0
movzx eax, al
test eax, eax
jne 0x41c60e
lea ecx, [ebp - 0x344]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0041d130
mov ecx, eax
call fcn.0041d100
movzx edx, word [eax]
cmp edx, 0x5c
je 0x41c5f8
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x28]
call fcn.0041d130
mov ecx, eax
call fcn.0041d100
movzx ecx, word [eax]
cmp ecx, 0x2f
jne 0x41c60e
lea ecx, [ebp - 0x28]
call fcn.00403ce0
sub eax, 1
push eax
lea ecx, [ebp - 0x28]
call fcn.0041d190
jmp 0x41c5bc
mov byte [ebp - 0x322], 0x5c
mov byte [ebp - 0x323], 0x2f
lea edx, [ebp - 0x322]
push edx
lea eax, [ebp - 0x323]
push eax
lea ecx, [ebp - 0x34c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00416440
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp - 0x28]
call fcn.004164c0
mov ecx, dword [eax]
push ecx
call fcn.00416680
add esp, 0x10
push 0x46e610
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00409de0
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x320]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00403d00
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x32c], eax
lea edx, [ebp - 0x2f4]
push edx
lea ecx, [ebp - 0x58]
call fcn.00403f30
mov byte [ebp - 4], 3
push 0x46e57c
lea eax, [ebp - 0x58]
push eax
call fcn.0041d260
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c87e
push 0x46e618
lea edx, [ebp - 0x58]
push edx
call fcn.0041d260
add esp, 8
movzx eax, al
test eax, eax
je 0x41c87e
push 0x46e5c4
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.00409de0
add esp, 0xc
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x334], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x334]
push edx
lea eax, [ebp - 0x40]
push eax
call fcn.00409ef0
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa0]
call fcn.00403dd0
lea ecx, [ebp - 0x40]
call fcn.00403d00
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
and ecx, 0x10
je 0x41c78e
push 4
push 0
lea ecx, [ebp - 0x40]
call fcn.00403d00
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x354], esp
lea ecx, [ebp - 0x40]
call fcn.00403d00
push eax
mov ecx, esi
call fcn.00403f30
mov ecx, dword [ebp - 0x328]
call fcn.0041c530
jmp 0x41c872
lea ecx, [ebp - 0x40]
call fcn.00403d00
push eax
lea ecx, [ebp - 0x70]
call fcn.00403f30
mov byte [ebp - 4], 7
lea edx, [ebp - 0x70]
push edx
mov ecx, dword [ebp - 0x328]
call fcn.0041c0e0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.00403dd0
lea ecx, [ebp - 0x40]
call fcn.00403d00
push eax
push str.delete_file._file_s
push 2
push 0x47b0a0
call fcn.0040db30
add esp, 0x10
lea ecx, [ebp - 0x40]
call fcn.00403ce0
push eax
lea ecx, [ebp - 0x40]
call fcn.00403d00
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.00411740
add esp, 0xc
mov byte [ebp - 4], 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x358], esp
push 0x4680c6
call fcn.00404420
push 0x32
push 0
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [ebp - 0x328]
call fcn.0041cd20
mov dword [ebp - 0x33c], eax
mov edx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x340]
push eax
call fcn.0040ffe0
mov ecx, eax
call fcn.0040feb0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb8]
call fcn.00404250
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00404250
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00403dd0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.00403dd0
lea ecx, [ebp - 0x320]
push ecx
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41c691
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x41c8dd
lea ecx, [ebp - 0x28]
call fcn.00403d00
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x28]
call fcn.00403d00
push eax
push str.delete_dir._dir_s
push 4
push 0x47b0a0
call fcn.0040db30
add esp, 0x10
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x324], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.00403dd0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00403dd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00403dd0
mov al, byte [ebp - 0x324]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041f4e5
mov esp, ebp
pop ebp
ret 0x18