Function at 0x434be0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x4db576
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x260
mov eax, dword [0x4f4e90]
push esi
mov dword [esp + 4], eax
mov dword [esp + 0x26c], 0
mov dword [esp + 8], eax
mov esi, dword [esp + 0x274]
mov byte [esp + 0x26c], 1
test esi, esi
jne 0x434c2b
xor eax, eax
jmp 0x434c32
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
lea ecx, [esp + 0x10]
call fcn.00409040
mov eax, str..
test eax, eax
je 0x434c51
push str..
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str..
push eax
lea ecx, [esp + 0x10]
call fcn.00417ee0
mov edx, dword [esp + 8]
lea ecx, [esp + 0x14]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0xc], eax
jne 0x434ced
mov eax, dword [esp + 8]
mov edx, dword [0x4f40f0]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x434caa
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x434caa
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004d7f79
add esp, 4
mov eax, dword [esp + 4]
mov edx, dword [0x4f40f0]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x434cd5
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x434cd5
mov edx, dword [esp + 4]
add edx, 0xfffffff4
push edx
call fcn.004d7f79
add esp, 4
xor eax, eax
pop esi
mov ecx, dword [esp + 0x260]
mov dword fs:[0], ecx
add esp, 0x26c
ret
push ebx
mov ebx, dword [sym.imp.MSVCRT.dll_wcscmp]
push ebp
mov ebp, dword [esp + 0x280]
push edi
mov edi, dword [esp + 0x288]
lea eax, [esp + 0x4c]
push 0x4f53e4
push eax
call ebx
add esp, 8
test eax, eax
je 0x434e1d
lea ecx, [esp + 0x4c]
push 0x4f7938
push ecx
call ebx
add esp, 8
test eax, eax
je 0x434e1d
test ebp, ebp
jne 0x434d51
lea edx, [esp + 0x4c]
push str.desktop.ini
push edx
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x434e1d
test esi, esi
jne 0x434d59
xor eax, eax
jmp 0x434d60
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
lea ecx, [esp + 0x18]
call fcn.00409040
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push 1
mov dword [esp + 0x24], 0x5c
call fcn.00417ee0
lea ecx, [esp + 0x4c]
test ecx, ecx
jne 0x434d8f
xor eax, eax
jmp 0x434d9a
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esp + 0x4c]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.00417ee0
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x434dc6
and al, 0xfe
push eax
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test byte [esp + 0x20], 0x10
je 0x434de9
mov ecx, dword [esp + 0x10]
push edi
push ebp
push ecx
call fcn.00434be0
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x434e1d
test edi, edi
je 0x434e12
lea eax, [esp + 0x4c]
push str.index.dat
push eax
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x434e12
lea ecx, [esp + 0x4c]
push ecx
push esi
call fcn.00434ec0
add esp, 8
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x434d04
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x14]
mov edx, dword [0x4f40f0]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
pop edi
lea ecx, [eax - 0xc]
pop ebp
cmp ecx, edx
pop ebx
je 0x434e74
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x434e74
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004d7f79
add esp, 4
mov eax, dword [esp + 4]
mov edx, dword [0x4f40f0]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x434e9f
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x434e9f
mov edx, dword [esp + 4]
add edx, 0xfffffff4
push edx
call fcn.004d7f79
add esp, 4
mov ecx, dword [esp + 0x264]
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x26c
ret