Function at 0x457cc5
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push 0x320
mov eax, 0x51a8aa
call fcn.004d8af2
mov ebx, ecx
mov dword [ebp - 0x308], ebx
mov dword [ebp - 0x308], ebx
xor ecx, ecx
xor eax, eax
mov dword [ebp - 4], ecx
lea edi, [ebp - 0xa8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
and dword [ebp - 0x324], 0
lea eax, [ebp - 0x324]
and dword [ebp - 0x320], 0
push eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
jne 0x457d88
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
push 0xb42
cmovle ecx, eax
mov eax, 0x80004005
test ecx, ecx
cmovs eax, ecx
push eax
push ecx
mov ecx, esp
call fcn.0040687a
lea ecx, [ebp - 0x31c]
call fcn.00406620
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 1
push eax
mov ecx, ebx
call fcn.0040121b
mov ecx, dword [ebp - 0x314]
add ecx, 0xfffffff0
call fcn.00407189
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
jmp 0x4581de
push 0x250
lea eax, [ebp - 0x2f8]
push 0
push eax
call fcn.004d9f30
push 0x5489d0
lea edx, [ebp + 8]
lea ecx, [ebp - 0x30c]
call fcn.00409442
add esp, 0x10
lea eax, [ebp - 0x2f8]
push eax
push dword [ebp - 0x30c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x310], esi
mov byte [ebp - 4], 3
cmp esi, 0xffffffff
je 0x4581af
mov eax, dword [0x57d3ec]
push 7
pop edx
cmp byte [eax + 1], 0
jne 0x458189
test byte [ebp - 0x2f8], 0x10
jne 0x45816e
xor eax, eax
lea edi, [ebp - 0x98]
stosd dword es:[edi], eax
xor ecx, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], edx
mov word [ebp - 0x98], ax
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], edx
mov word [ebp - 0x40], ax
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], edx
mov word [ebp - 0x28], ax
lea edi, [ebp - 0x80]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], edx
mov word [ebp - 0x80], ax
lea edi, [ebp - 0x68]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x54], edx
mov word [ebp - 0x68], ax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x28]
push eax
sub esp, 0x18
lea eax, [ebp - 0x2cc]
mov ecx, esp
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x98]
push eax
call fcn.004ae9f4
mov edx, esi
mov ecx, edi
call fcn.00457b39
add esp, 0x24
test al, al
je 0x457ff3
xor eax, eax
lea edi, [ebp - 0x50]
cmp dword [ebp - 0x84], 8
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x98]
cmovae eax, dword [ebp - 0x98]
push eax
call fcn.004e4b85
cmp dword [ebp - 0x2c], 8
mov word [ebp - 0x50], ax
mov eax, esi
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.004e4b85
cmp dword [ebp - 0x14], 8
mov word [ebp - 0x4e], ax
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.004e4b85
movzx ecx, ax
add esp, 0xc
mov eax, 0x76c
mov word [ebp - 0x4a], cx
cmp word [ebp - 0x50], ax
jb 0x457ff3
mov eax, dword [ebp - 0x4e]
dec eax
cmp ax, 0xb
ja 0x457ff3
lea eax, [ecx - 1]
cmp ax, 0x1e
ja 0x457ff3
and dword [ebp - 0x318], 0
lea eax, [ebp - 0x318]
and dword [ebp - 0x314], 0
push eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
je 0x457ff3
push 0
push 0x2710
push dword [ebp - 0x320]
push dword [ebp - 0x324]
call fcn.004d8de0
xor ecx, ecx
mov edi, eax
push ecx
push 0x2710
push dword [ebp - 0x314]
mov esi, edx
push dword [ebp - 0x318]
call fcn.004d8de0
sub edi, eax
sbb esi, edx
mov dword [ebp - 0x300], esi
js 0x457ff3
jg 0x457f97
cmp edi, 0xa4cb800
jb 0x457ff3
push 0x53d64c
lea edx, [ebp + 8]
lea ecx, [ebp - 0x308]
call fcn.00409442
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 9
push ecx
mov edx, eax
lea ecx, [ebp - 0x328]
call fcn.00409442
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x328]
mov esi, eax
add ecx, 0xfffffff0
call fcn.00407189
mov ecx, dword [ebp - 0x308]
add ecx, 0xfffffff0
call fcn.00407189
test esi, esi
jne 0x457ff3
call fcn.00406710
mov eax, dword [ebp - 0x54]
mov edi, 0x1000
cmp eax, 8
jb 0x458044
mov ecx, dword [ebp - 0x68]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x300], ecx
cmp eax, edi
jb 0x45803b
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.00405c9b
mov eax, dword [ebp - 0x2fc]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x300]
push eax
push ecx
call fcn.004d840d
pop ecx
pop ecx
and dword [ebp - 0x58], 0
xor eax, eax
push 7
mov word [ebp - 0x68], ax
mov eax, dword [ebp - 0x6c]
pop esi
mov dword [ebp - 0x54], esi
cmp eax, 8
jb 0x4580a0
mov ecx, dword [ebp - 0x80]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
cmp eax, edi
jb 0x458097
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.00405c9b
mov eax, dword [ebp - 0x300]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2fc]
push eax
push ecx
call fcn.004d840d
pop ecx
pop ecx
and dword [ebp - 0x70], 0
xor eax, eax
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x6c], esi
cmp eax, 8
jb 0x4580f9
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
cmp eax, edi
jb 0x4580f0
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.00405c9b
mov eax, dword [ebp - 0x300]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2fc]
push eax
push ecx
call fcn.004d840d
pop ecx
pop ecx
and dword [ebp - 0x18], 0
xor eax, eax
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], esi
cmp eax, 8
jb 0x458152
mov ecx, dword [ebp - 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
cmp eax, edi
jb 0x458149
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.00405c9b
mov eax, dword [ebp - 0x300]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2fc]
push eax
push ecx
call fcn.004d840d
pop ecx
pop ecx
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x98]
xor eax, eax
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 3
call fcn.004d627e
mov esi, dword [ebp - 0x310]
lea eax, [ebp - 0x2f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jmp 0x457dd3
push 0xb4b
push 0x80004004
push ecx
mov ecx, esp
push str.User_abort
call fcn.00406fea
mov ecx, ebx
call fcn.00406620
push dword [ebp - 0x310]
jmp 0x4581c4
and dword [ebx], 0
lea ecx, [ebx + 8]
and dword [ebx + 4], 0
call fcn.0040687a
cmp esi, 0xffffffff
je 0x4581ca
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x30c]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov eax, ebx
call fcn.004d8aa1
ret