Function at 0x437930
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x66c
mov eax, dword [0x4b6640]
xor eax, esp
mov dword [esp + 0x668], eax
push ebx
mov ebx, dword [esp + 0x674]
push esi
push edi
push ebx
mov dword [esp + 0x10], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x437968
xor eax, 1
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x208
xor edi, edi
lea eax, [esp + 0x470]
push edi
push eax
call fcn.00462ef0
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437990
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, ebx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4379a6
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x4379ea
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4379d0
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x4379ff
mov eax, ebx
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4379f0
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x470]
push ebx
push edx
call fcn.004642af
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x437a20
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437a20
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x437a51
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437a40
sub eax, edx
sar eax, 1
jmp 0x437a56
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
jmp 0x437a70
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437a70
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x437aad
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437a95
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x437ab2
mov edx, 1
lea eax, [esp + 0x46c]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ac0
sub eax, esi
sar eax, 1
je 0x437b5e
lea eax, [esp + 0x46c]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ae0
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x46a], 0x5c
je 0x437b5e
push edx
lea edx, [esp + 0x470]
push 0x4a05a4
push edx
call fcn.004642af
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437b20
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x437b51
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437b40
sub eax, edx
sar eax, 1
jmp 0x437b56
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
jmp 0x437b70
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437b70
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 3
jae 0x437bad
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437b95
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
jmp 0x437bb2
mov ecx, 3
push ecx
lea edx, [esp + 0x470]
push 0x4a11f4
push edx
call fcn.004642af
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437bd2
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x437c03
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437bf2
sub eax, edx
sar eax, 1
jmp 0x437c08
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x470]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x437c44
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x668]
xor ecx, esp
call fcn.004629a0
add esp, 0x66c
ret
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x437c50
cmp dword [esp + 0x18], 0x10
je 0x437f56
push 0x208
lea edx, [esp + 0x26c]
push edi
push edx
call fcn.00462ef0
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x437c80
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437c80
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 2]
jmp 0x437ca0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ca0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x437cde
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437cc4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x437cf4
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ce5
sub eax, edx
sar eax, 1
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x270]
push eax
call fcn.004642af
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437d14
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x437d45
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437d34
sub eax, edx
sar eax, 1
jmp 0x437d4a
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437d60
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x437d9d
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437d85
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x437da2
mov edx, 1
lea eax, [esp + 0x268]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437db0
sub eax, esi
sar eax, 1
je 0x437e4e
lea eax, [esp + 0x268]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437dd0
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x266], 0x5c
je 0x437e4e
push edx
lea edx, [esp + 0x26c]
push 0x4a05a4
push edx
call fcn.004642af
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437e10
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x437e41
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437e30
sub eax, edx
sar eax, 1
jmp 0x437e46
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
jmp 0x437e60
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437e60
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 2]
jmp 0x437e80
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437e80
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x437ebe
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ea4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x437ed4
lea eax, [esp + 0x44]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ec5
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x270]
push eax
call fcn.004642af
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ef4
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x437f3a
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437f14
sub eax, edx
lea ecx, [esp + 0x268]
sar eax, 1
push ecx
mov word [esp + eax*2 + 0x26c], di
call ebp
jmp 0x438272
lea ecx, [esp + 0x268]
mov eax, 0x103
push ecx
mov word [esp + eax*2 + 0x26c], di
call ebp
jmp 0x438272
lea edx, [esp + 0x44]
push 0x4a11f0
push edx
call fcn.0046421e
add esp, 8
test eax, eax
je 0x438272
lea eax, [esp + 0x44]
push 0x4a11e8
push eax
call fcn.0046421e
add esp, 8
test eax, eax
je 0x438272
push 0x208
lea ecx, [esp + 0x26c]
push edi
push ecx
call fcn.00462ef0
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437fb0
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 2]
jmp 0x437fd0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437fd0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x43800e
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x437ff4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x438024
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438015
sub eax, edx
sar eax, 1
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x270]
push eax
call fcn.004642af
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438044
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438075
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438064
sub eax, edx
sar eax, 1
jmp 0x43807a
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438090
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x4380cd
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4380b5
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x4380d2
mov edx, 1
lea eax, [esp + 0x268]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4380e0
sub eax, esi
sar eax, 1
je 0x43817e
lea eax, [esp + 0x268]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438100
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x266], 0x5c
je 0x43817e
push edx
lea edx, [esp + 0x26c]
push 0x4a05a4
push edx
call fcn.004642af
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438140
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438171
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438160
sub eax, edx
sar eax, 1
jmp 0x438176
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
jmp 0x438190
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438190
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 2]
jmp 0x4381b0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4381b0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x4381ee
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4381d4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x438204
lea eax, [esp + 0x44]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4381f5
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x270]
push eax
call fcn.004642af
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438224
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438255
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438244
sub eax, edx
sar eax, 1
jmp 0x43825a
mov eax, 0x103
lea ecx, [esp + 0x268]
push ecx
mov word [esp + eax*2 + 0x26c], di
call fcn.00437930
add esp, 4
lea edx, [esp + 0x18]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x437c50
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [esp + 0x678]
pop ebp
pop edi
neg eax
pop esi
sbb eax, eax
pop ebx
xor ecx, esp
neg eax
call fcn.004629a0
add esp, 0x66c
ret