Function at 0x4024f3
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x30c
mov eax, 0x4b5a58
call fcn.004880ba
mov dword [ebp - 0x314], ecx
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x58]
xor ebx, ebx
mov dword [ebp - 0x318], edi
push edi
mov dword [ebp - 0x310], ebx
call fcn.0040204a
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x58]
and dword [ebp - 4], ebx
dec eax
push eax
call fcn.0040247a
push 0x5c
push 1
lea ecx, [ebp - 0x58]
call fcn.00402207
push 0x4ba944
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00401fbc
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 1
push eax
call fcn.00401e5a
add esp, 0x14
cmp dword [eax + 0x14], 8
jb 0x40256f
mov eax, dword [eax]
lea ecx, [ebp - 0x308]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push 0
push 1
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.004018f7
push 0
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0
call fcn.004018b3
cmp esi, 0xffffffff
jne 0x4025ad
xor bl, bl
jmp 0x40287d
mov edi, dword [ebp - 0x314]
test byte [ebp - 0x308], 0x10
je 0x4027db
and dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp word [ebp - 0x2dc], ax
je 0x4025e7
lea eax, [ebp - 0x2dc]
push eax
call fcn.00487fd4
pop ecx
push eax
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00401b04
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
or ebx, 1
push eax
mov dword [ebp - 0x310], ebx
call fcn.00401f0a
pop ecx
pop ecx
or ebx, 2
mov dword [ebp - 4], 3
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x310], ebx
jb 0x40262b
mov eax, dword [eax]
push 0x4ba948
push eax
call fcn.004b5865
pop ecx
pop ecx
test eax, eax
je 0x4026b6
and dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp word [ebp - 0x2dc], ax
je 0x402663
lea eax, [ebp - 0x2dc]
push eax
call fcn.00487fd4
pop ecx
push eax
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x40]
call fcn.00401b04
push 4
pop eax
or ebx, eax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x310], ebx
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00401f0a
pop ecx
or ebx, 8
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x40269e
mov eax, dword [eax]
push 0x4ba94c
push eax
call fcn.004b5865
mov byte [ebp - 0x309], 1
pop ecx
pop ecx
test eax, eax
jne 0x4026bd
mov byte [ebp - 0x309], 0
test bl, 8
je 0x4026d4
push 0
push 1
lea ecx, [ebp - 0x88]
and ebx, 0xfffffff7
call fcn.004018b3
test bl, 4
je 0x4026e8
push 0
push 1
lea ecx, [ebp - 0x40]
and ebx, 0xfffffffb
call fcn.004018f7
test bl, 2
je 0x4026fc
push 0
push 1
lea ecx, [ebp - 0x70]
and ebx, 0xfffffffd
call fcn.004018b3
and dword [ebp - 4], 0
test bl, 1
je 0x402714
push 0
push 1
lea ecx, [ebp - 0x28]
and ebx, 0xfffffffe
call fcn.004018f7
cmp byte [ebp - 0x309], 0
je 0x402831
and dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp word [ebp - 0x2dc], ax
je 0x402748
lea eax, [ebp - 0x2dc]
push eax
call fcn.00487fd4
pop ecx
push eax
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00401b04
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00401f0a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x40277a
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00401fbc
add esp, 0xc
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 7
jb 0x402797
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x40]
call fcn.00401422
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 8
push eax
mov ecx, edi
call fcn.004024f3
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.004018b3
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.004018b3
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004018b3
lea ecx, [ebp - 0x28]
jmp 0x402824
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00401e5a
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 9
push ecx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00402027
add esp, 0x14
cmp dword [eax + 0x14], 8
jb 0x40280b
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.004018f7
lea ecx, [ebp - 0x88]
push 0
push 1
mov byte [ebp - 4], 0
call fcn.004018f7
lea eax, [ebp - 0x308]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4025b3
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [ebp - 0x318]
lea eax, [ebp - 0x70]
push edi
push eax
call fcn.00401e5a
pop ecx
pop ecx
cmp dword [eax + 0x14], 8
jb 0x402868
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.004018f7
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.004018b3
mov al, bl
call fcn.00488078
ret 4