Function at 0x403ccd
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa5c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov dword [ebp - 0xa58], eax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0xa54], eax
mov eax, dword [0x408680]
push edi
mov dword [ebp - 0xa5c], eax
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x418], ax
xor ebx, ebx
lea eax, [ebp - 0x416]
push ebx
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push edi
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
lea eax, [ebp - 0x418]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x406d88
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push ebx
push ebx
push ebx
lea eax, [ebp - 0xa50]
push eax
push ebx
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x403d81
xor al, al
jmp 0x403f78
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpW]
test byte [ebp - 0xa50], 0x10
push 0x406d90
lea eax, [ebp - 0xa24]
push eax
jne 0x403eb4
call ebx
test eax, eax
je 0x403f4d
push 0x406d94
lea eax, [ebp - 0xa24]
push eax
call ebx
test eax, eax
je 0x403f4d
lea eax, [ebp - 0xa24]
push eax
push 0x406394
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x403f4d
push 0x208
push eax
lea eax, [ebp - 0x210]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x210]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4065a4
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
cmp dword [ebp - 0xa58], 0
je 0x403e8a
cmp dword [ebp - 0xa54], 0
je 0x403e8a
xor eax, eax
push 0x3e6
push eax
mov word [ebp - 0x800], ax
lea eax, [ebp - 0x7fe]
push eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0x800]
push str.ck_W_Rd
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
lea eax, [ebp - 0x800]
push eax
push dword [ebp - 0xa54]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, dword [ebp - 0xa58]
call fcn.00403a21
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x403f4d
push 4
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x403f4d
call ebx
test eax, eax
je 0x403f4d
push 0x406d94
lea eax, [ebp - 0xa24]
push eax
call ebx
test eax, eax
je 0x403f4d
lea eax, [ebp - 0xa24]
push eax
push 0x406394
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x403f4d
push 0x208
push eax
lea eax, [ebp - 0x210]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x210]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4065a4
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push dword [ebp - 0xa54]
mov ecx, dword [ebp - 0xa5c]
push dword [ebp - 0xa58]
lea eax, [ebp - 0x210]
push eax
call fcn.00403a4e
lea eax, [ebp - 0xa50]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x403d87
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
dec eax
neg eax
sbb al, al
inc al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004052f0
leave
ret 0x10