Function at 0x406730
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42bd0a
mov eax, dword fs:[0]
push eax
sub esp, 0x4d4
mov eax, dword [0x438040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 1
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
jg 0x40677d
mov byte [ebp - 4], 0
lea edx, [eax - 0x10]
or ebx, 0xffffffff
jmp 0x4067ee
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x40678e
or ebx, 0xffffffff
jmp 0x4067e4
call fcn.00401920
mov ecx, eax
test ecx, ecx
je 0x406eeb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x4bc], eax
lea edx, [ebp - 0x4bc]
mov byte [ebp - 4], 2
xor ecx, ecx
call fcn.004072a0
test al, al
jne 0x406828
mov byte [ebp - 4], 1
or ebx, 0xffffffff
mov edx, dword [ebp - 0x4bc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4067e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406802
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
lea edx, [eax - 0x10]
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x406821
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor al, al
jmp 0x406ecf
push fcn.00401300
push fcn.00401320
push 6
push 4
lea eax, [ebp - 0x238]
push eax
call fcn.0040fb39
lea edx, [ebp - 0x238]
mov byte [ebp - 4], 3
xor ecx, ecx
call fcn.004072a0
lea edx, [ebp - 0x234]
mov ecx, 0x19
call fcn.004072a0
lea edx, [ebp - 0x230]
mov ecx, 0x16
call fcn.004072a0
lea edx, [ebp - 0x22c]
mov ecx, 0xb
call fcn.004072a0
lea edx, [ebp - 0x228]
mov ecx, 0x17
call fcn.004072a0
lea edx, [ebp - 0x224]
mov ecx, 2
call fcn.004072a0
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x498]
call fcn.00407490
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x228]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00407b30
mov byte [ebp - 4], 3
or ebx, 0xffffffff
mov edx, dword [ebp - 0x498]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4068ee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x498]
call fcn.00407490
add esp, 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x224]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00407b30
mov byte [ebp - 4], 3
mov eax, ebx
mov edx, dword [ebp - 0x498]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406936
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x4a8], 0
lea eax, [ebp - 0x4a8]
mov byte [ebp - 4], 7
push eax
push 0x434128
push 0x17
push 0
push 0x42d2b0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x4b8], eax
test eax, eax
js 0x406ef5
mov dword [ebp - 0x4b4], 0
mov byte [ebp - 4], 8
lea edx, [ebp - 0x4b4]
mov eax, dword [ebp - 0x4a8]
push edx
push 0x42d2c0
push eax
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
mov dword [ebp - 0x4b8], edi
test edi, edi
js 0x406f0c
push 0xc
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x490], 0
call fcn.0040fb09
mov edx, eax
add esp, 4
mov dword [edx], edx
mov dword [edx + 4], edx
mov dword [ebp - 0x494], edx
mov byte [ebp - 4], 9
xor eax, eax
mov dword [ebp - 0x4a4], eax
cmp eax, 6
jge 0x406d93
lea esi, [ebp - 0x238]
lea esi, [esi + eax*4]
push 0x433f24
mov edx, esi
mov dword [ebp - 0x4d4], esi
lea ecx, [ebp - 0x49c]
call fcn.00402e00
add esp, 4
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x49c]
cmp dword [eax - 0xc], 4
jge 0x406a22
mov byte [ebp - 4], 9
lea edx, [eax - 0x10]
jmp 0x406d6d
push 0x4340cc
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0x498]
call fcn.00402e00
add esp, 4
lea eax, [ebp - 0x488]
mov byte [ebp - 4], 0xb
push eax
push dword [ebp - 0x498]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x4c8], eax
cmp eax, 0xffffffff
je 0x406d38
lea eax, [ebp - 0x45c]
push eax
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0x4b0]
call fcn.00402e00
add esp, 4
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x4b4]
push 0
push dword [ebp - 0x4b0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov edi, eax
mov dword [ebp - 0x4d8], edi
mov dword [ebp - 0x4b8], edi
test edi, edi
js 0x406cf6
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.00411790
mov eax, dword [ebp - 0x4a8]
lea edx, [ebp - 0x220]
add esp, 0xc
mov ecx, dword [eax]
push 0
push 0
push 0x104
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x406cf6
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.004031f0
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0xd
call fcn.00401c20
mov eax, dword [ebp - 0x4ac]
test eax, eax
je 0x406f23
push eax
push dword [ebp + 8]
call fcn.00418c0e
add esp, 8
test eax, eax
jne 0x406cd5
push dword [ebp - 0x4b0]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x4a4], 4
jl 0x406cd5
push 0x4340d8
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0x4c4]
call fcn.00402e00
add esp, 4
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
mov byte [ebp - 4], 0xe
push dword [ebp - 0x4c4]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x406c1f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x406c1f
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0x4c0], 0
push eax
push dword [esi]
lea ecx, [ebp - 0x489]
call fcn.00405dc0
cmp dword [ebp - 0x4c0], 1
jne 0x406c1f
push 0x80
push dword [esi]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push dword [esi]
lea ecx, [ebp - 0x4a0]
call fcn.004031f0
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0xf
call fcn.00405880
mov ecx, dword [ebp - 0x4a0]
call fcn.00405930
test al, al
je 0x406bfe
push dword [ebp - 0x4a0]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov byte [ebp - 4], 0xe
mov eax, ebx
mov edx, dword [ebp - 0x4a0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406c1f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esi]
call fcn.00401a60
test al, al
je 0x406cb4
cmp dword [ebp - 0x490], 0x15555555
mov edi, dword [ebp - 0x494]
je 0x406f2d
lea eax, [ebp - 0x494]
mov dword [ebp - 0x4e0], eax
mov byte [ebp - 4], 0x10
push 0xc
mov dword [ebp - 0x4dc], 0
call fcn.0040fb09
mov esi, eax
add esp, 4
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x4dc], esi
mov ecx, dword [ebp + eax*4 - 0x238]
sub ecx, 0x10
call fcn.00401350
add eax, 0x10
mov dword [ebp - 0x4dc], 0
mov dword [esi + 8], eax
inc dword [ebp - 0x490]
mov eax, dword [edi + 4]
mov dword [esi], edi
mov dword [esi + 4], eax
mov dword [edi + 4], esi
mov edi, dword [ebp - 0x4d8]
mov dword [eax], esi
mov esi, dword [ebp - 0x4d4]
mov byte [ebp - 4], 0xd
mov eax, ebx
mov edx, dword [ebp - 0x4c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406cd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov eax, ebx
mov edx, dword [ebp - 0x4ac]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406cf6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov eax, ebx
mov edx, dword [ebp - 0x4b0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406d17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x488]
push eax
push dword [ebp - 0x4c8]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x406a61
mov eax, dword [ebp - 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 4], 0xa
mov eax, ebx
mov edx, dword [ebp - 0x498]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406d60
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x49c]
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406d81
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x4a4]
mov edx, dword [ebp - 0x494]
inc eax
jmp 0x4069d3
mov esi, dword [edx]
cmp esi, edx
je 0x406db7
nop dword [eax]
push dword [esi + 8]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov eax, dword [esi]
mov esi, eax
mov edx, dword [ebp - 0x494]
cmp eax, edx
jne 0x406da0
call fcn.00407d30
mov eax, dword [ebp - 0x494]
push 0
push 0
push 0
mov dword [eax], eax
mov eax, dword [ebp - 0x494]
push 0x8000000
mov dword [eax + 4], eax
mov dword [ebp - 0x490], 0
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov edx, dword [ebp - 0x494]
call fcn.00407d30
push 0xc
push dword [ebp - 0x494]
call fcn.0040fafb
mov byte [ebp - 4], 7
add esp, 8
mov eax, dword [ebp - 0x4b4]
test eax, eax
je 0x406e17
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x4a8]
test eax, eax
je 0x406e3c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x406e3c
mov dword [ebp - 4], 3
call dword [sym.imp.ole32.dll_CoUninitialize]
push fcn.00401300
push 6
push 4
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 2
test edi, edi
push eax
setns byte [ebp - 0x489]
call fcn.0040fbad
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x4bc]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406e8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406eaa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x406ec9
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0x489]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040f7c4
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004016f0
mov dword [ebp - 0x4cc], eax
lea eax, [ebp - 0x4cc]
push 0x436a70
push eax
call fcn.004118ea
push 0x436a70
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0x4d0], edi
push eax
call fcn.004118ea
push 0x80004005
call fcn.004016f0
push str.list_too_long
call fcn.0040f77f
int3