Function at 0x438760
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x66c
mov eax, dword [0x4b9658]
xor eax, esp
mov dword [esp + 0x668], eax
push ebx
mov ebx, dword [esp + 0x674]
push esi
push edi
push ebx
mov dword [esp + 0x10], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x438798
xor eax, 1
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x208
xor edi, edi
lea eax, [esp + 0x470]
push edi
push eax
call fcn.00464a50
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4387c0
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, ebx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4387d6
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x43881a
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438800
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x43882f
mov eax, ebx
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438820
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x470]
push ebx
push edx
call fcn.00465e0f
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x438850
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438850
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438881
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438870
sub eax, edx
sar eax, 1
jmp 0x438886
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
jmp 0x4388a0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4388a0
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x4388dd
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4388c5
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x4388e2
mov edx, 1
lea eax, [esp + 0x46c]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4388f0
sub eax, esi
sar eax, 1
je 0x43898e
lea eax, [esp + 0x46c]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438910
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x46a], 0x5c
je 0x43898e
push edx
lea edx, [esp + 0x470]
push 0x4a25b4
push edx
call fcn.00465e0f
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438950
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438981
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438970
sub eax, edx
sar eax, 1
jmp 0x438986
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
jmp 0x4389a0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4389a0
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 3
jae 0x4389dd
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4389c5
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
jmp 0x4389e2
mov ecx, 3
push ecx
lea edx, [esp + 0x470]
push 0x4a32ac
push edx
call fcn.00465e0f
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438a02
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438a33
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438a22
sub eax, edx
sar eax, 1
jmp 0x438a38
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x470]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x438a74
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x668]
xor ecx, esp
call fcn.00464500
add esp, 0x66c
ret
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x438a80
cmp dword [esp + 0x18], 0x10
je 0x438d86
push 0x208
lea edx, [esp + 0x26c]
push edi
push edx
call fcn.00464a50
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x438ab0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ab0
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 2]
jmp 0x438ad0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ad0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x438b0e
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438af4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x438b24
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438b15
sub eax, edx
sar eax, 1
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x270]
push eax
call fcn.00465e0f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438b44
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438b75
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438b64
sub eax, edx
sar eax, 1
jmp 0x438b7a
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438b90
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x438bcd
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438bb5
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x438bd2
mov edx, 1
lea eax, [esp + 0x268]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438be0
sub eax, esi
sar eax, 1
je 0x438c7e
lea eax, [esp + 0x268]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438c00
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x266], 0x5c
je 0x438c7e
push edx
lea edx, [esp + 0x26c]
push 0x4a25b4
push edx
call fcn.00465e0f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438c40
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438c71
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438c60
sub eax, edx
sar eax, 1
jmp 0x438c76
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
jmp 0x438c90
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438c90
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 2]
jmp 0x438cb0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438cb0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x438cee
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438cd4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x438d04
lea eax, [esp + 0x44]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438cf5
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x270]
push eax
call fcn.00465e0f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438d24
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438d6a
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438d44
sub eax, edx
lea ecx, [esp + 0x268]
sar eax, 1
push ecx
mov word [esp + eax*2 + 0x26c], di
call ebp
jmp 0x4390a2
lea ecx, [esp + 0x268]
mov eax, 0x103
push ecx
mov word [esp + eax*2 + 0x26c], di
call ebp
jmp 0x4390a2
lea edx, [esp + 0x44]
push 0x4a32a8
push edx
call fcn.00465d7e
add esp, 8
test eax, eax
je 0x4390a2
lea eax, [esp + 0x44]
push 0x4a32a0
push eax
call fcn.00465d7e
add esp, 8
test eax, eax
je 0x4390a2
push 0x208
lea ecx, [esp + 0x26c]
push edi
push ecx
call fcn.00464a50
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438de0
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 2]
jmp 0x438e00
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438e00
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x438e3e
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438e24
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x438e54
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438e45
sub eax, edx
sar eax, 1
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x270]
push eax
call fcn.00465e0f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438e74
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438ea5
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438e94
sub eax, edx
sar eax, 1
jmp 0x438eaa
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ec0
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x438efd
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ee5
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x438f02
mov edx, 1
lea eax, [esp + 0x268]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f10
sub eax, esi
sar eax, 1
je 0x438fae
lea eax, [esp + 0x268]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f30
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x266], 0x5c
je 0x438fae
push edx
lea edx, [esp + 0x26c]
push 0x4a25b4
push edx
call fcn.00465e0f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f70
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438fa1
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f90
sub eax, edx
sar eax, 1
jmp 0x438fa6
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
jmp 0x438fc0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438fc0
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 2]
jmp 0x438fe0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438fe0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x43901e
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439004
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x439034
lea eax, [esp + 0x44]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439025
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x270]
push eax
call fcn.00465e0f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439054
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439085
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439074
sub eax, edx
sar eax, 1
jmp 0x43908a
mov eax, 0x103
lea ecx, [esp + 0x268]
push ecx
mov word [esp + eax*2 + 0x26c], di
call fcn.00438760
add esp, 4
lea edx, [esp + 0x18]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x438a80
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [esp + 0x678]
pop ebp
pop edi
neg eax
pop esi
sbb eax, eax
pop ebx
xor ecx, esp
neg eax
call fcn.00464500
add esp, 0x66c
ret