Function at 0x433280
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x4d5ec6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x260
mov eax, dword [0x4eee90]
push esi
mov dword [esp + 4], eax
mov dword [esp + 0x26c], 0
mov dword [esp + 8], eax
mov esi, dword [esp + 0x274]
mov byte [esp + 0x26c], 1
test esi, esi
jne 0x4332cb
xor eax, eax
jmp 0x4332d2
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
lea ecx, [esp + 0x10]
call fcn.00408e00
mov eax, str..
test eax, eax
je 0x4332f1
push str..
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str..
push eax
lea ecx, [esp + 0x10]
call fcn.00417030
mov edx, dword [esp + 8]
lea ecx, [esp + 0x14]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0xc], eax
jne 0x43338d
mov eax, dword [esp + 8]
mov edx, dword [0x4ee0f0]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x43334a
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x43334a
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004d2909
add esp, 4
mov eax, dword [esp + 4]
mov edx, dword [0x4ee0f0]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x433375
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x433375
mov edx, dword [esp + 4]
add edx, 0xfffffff4
push edx
call fcn.004d2909
add esp, 4
xor eax, eax
pop esi
mov ecx, dword [esp + 0x260]
mov dword fs:[0], ecx
add esp, 0x26c
ret
push ebx
mov ebx, dword [sym.imp.MSVCRT.dll_wcscmp]
push ebp
mov ebp, dword [esp + 0x280]
push edi
mov edi, dword [esp + 0x288]
lea eax, [esp + 0x4c]
push 0x4ef3e4
push eax
call ebx
add esp, 8
test eax, eax
je 0x4334bd
lea ecx, [esp + 0x4c]
push 0x4f1754
push ecx
call ebx
add esp, 8
test eax, eax
je 0x4334bd
test ebp, ebp
jne 0x4333f1
lea edx, [esp + 0x4c]
push str.desktop.ini
push edx
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x4334bd
test esi, esi
jne 0x4333f9
xor eax, eax
jmp 0x433400
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
lea ecx, [esp + 0x18]
call fcn.00408e00
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push 1
mov dword [esp + 0x24], 0x5c
call fcn.00417030
lea ecx, [esp + 0x4c]
test ecx, ecx
jne 0x43342f
xor eax, eax
jmp 0x43343a
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esp + 0x4c]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.00417030
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x433466
and al, 0xfe
push eax
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test byte [esp + 0x20], 0x10
je 0x433489
mov ecx, dword [esp + 0x10]
push edi
push ebp
push ecx
call fcn.00433280
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x4334bd
test edi, edi
je 0x4334b2
lea eax, [esp + 0x4c]
push str.index.dat
push eax
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x4334b2
lea ecx, [esp + 0x4c]
push ecx
push esi
call fcn.00433560
add esp, 8
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4333a4
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x14]
mov edx, dword [0x4ee0f0]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
pop edi
lea ecx, [eax - 0xc]
pop ebp
cmp ecx, edx
pop ebx
je 0x433514
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x433514
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004d2909
add esp, 4
mov eax, dword [esp + 4]
mov edx, dword [0x4ee0f0]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x43353f
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x43353f
mov edx, dword [esp + 4]
add edx, 0xfffffff4
push edx
call fcn.004d2909
add esp, 4
mov ecx, dword [esp + 0x264]
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x26c
ret