Function at 0x436460
Capabilities:
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d0a4b
mov eax, dword fs:[0]
push eax
mov eax, 0x14c4
call fcn.005720c0
mov eax, dword [0x649fe8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x14c8], ebx
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0058db90
push 0x200
lea eax, [ebp - 0xc38]
push 0
push eax
call fcn.0058db90
push ebx
lea eax, [ebp - 0x628]
push 0x104
push eax
call fcn.00594e56
push 0x61ffe4
lea eax, [ebp - 0x628]
push 0x104
push eax
call fcn.00594e56
add esp, 0x30
lea eax, [ebp - 0x14c0]
push eax
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x14c4], eax
cmp eax, 0xffffffff
je 0x4367a8
mov ebx, eax
lea eax, [ebp - 0x1494]
push 0x61fff0
push eax
call fcn.00596793
add esp, 8
test eax, eax
je 0x43678b
lea eax, [ebp - 0x1494]
push 0x620014
push eax
call fcn.00596793
add esp, 8
test eax, eax
je 0x43678b
test byte [ebp - 0x14c0], 0x10
jne 0x43678b
lea eax, [ebp - 0xc38]
push eax
push 0
push 0
lea eax, [ebp - 0x1494]
push 0
push eax
call fcn.005966df
xor eax, eax
mov dword [ebp - 0x1244], 7
add esp, 0x14
mov dword [ebp - 0x1248], 0
mov word [ebp - 0x1258], ax
cmp word [ebp - 0x1494], ax
je 0x4365af
lea eax, [ebp - 0x1494]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4365a0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1494]
push eax
lea ecx, [ebp - 0x1258]
call fcn.00409e30
lea eax, [ebp - 0x1258]
push eax
call fcn.004370a0
mov ebx, dword [0x65b754]
mov esi, eax
mov edi, dword [ebp - 0x1244]
cmp esi, ebx
je 0x436617
cmp dword [esi + 0x24], 8
lea ecx, [esi + 0x10]
lea edx, [ecx + 0x10]
jb 0x4365ee
mov ecx, dword [ecx]
push dword [edx]
cmp edi, 8
lea eax, [ebp - 0x1258]
push ecx
cmovae eax, dword [ebp - 0x1258]
push dword [ebp - 0x1248]
push eax
call fcn.00413a20
shr eax, 0x1f
add esp, 0x10
test al, al
je 0x436619
mov esi, ebx
cmp edi, 8
jb 0x436633
lea eax, [edi + 1]
push eax
push dword [ebp - 0x1258]
lea ecx, [ebp - 0x1258]
call fcn.00409f30
lea eax, [ebp - 0xc38]
push 0x61fff4
push eax
call fcn.00596793
add esp, 8
test eax, eax
jne 0x436785
cmp esi, dword [0x65b754]
jne 0x436785
push 0x208
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0058db90
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0058db90
push 0x208
lea eax, [ebp - 0x1240]
push 0
push eax
call fcn.0058db90
push dword [ebp - 0x14c8]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.005961f3
push 0x61ff8c
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00594e56
lea eax, [ebp - 0x1494]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00594e56
add esp, 0x48
lea edx, [ebp - 0x420]
lea ecx, [ebp - 0x218]
call fcn.00436330
test eax, eax
js 0x436785
lea ecx, [ebp - 0x1240]
call fcn.00436060
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x1258]
call fcn.00409d50
push dword [0x65b078]
mov edx, dword [0x65ae70]
lea ecx, [ebp - 0x1258]
call fcn.0043af00
add esp, 4
lea ecx, [ebp - 0x1258]
mov bl, al
call fcn.00409d10
test bl, bl
jne 0x4367c6
lea eax, [ebp - 0x1494]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00409d50
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1270]
push dword [ebp - 0x14c8]
push eax
push ecx
lea eax, [ebp - 0x14d0]
push eax
call fcn.00437180
lea ecx, [ebp - 0x1270]
mov dword [ebp - 4], 0xffffffff
call fcn.00409d10
mov ebx, dword [ebp - 0x14c4]
lea eax, [ebp - 0x14c0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x436510
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00571951
mov esp, ebp
pop ebp
ret
test byte [0x65a8ac], 0x40
lea eax, [ebp - 0x218]
je 0x4367e0
push 3
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x4367f9
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x200
lea eax, [ebp - 0xe38]
push 0
push eax
call fcn.0058db90
push 0x200
lea eax, [ebp - 0x1038]
push 0
push eax
call fcn.0058db90
push 0x208
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.0058db90
push 0
push 0
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0xe38]
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.005966df
lea eax, [ebp - 0xe38]
push eax
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.005961f3
add esp, 0x44
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.00594e56
mov edx, dword [0x65aca8]
lea ecx, [ebp - 0x1258]
add esp, 0xc
call fcn.00436040
cmp dword [eax + 0x14], 8
jb 0x43689f
mov eax, dword [eax]
lea ecx, [ebp - 0x830]
mov edx, eax
push ecx
call fcn.00437f90
mov eax, dword [ebp - 0x1244]
add esp, 4
cmp eax, 8
jb 0x4368ce
inc eax
lea ecx, [ebp - 0x1258]
push eax
push dword [ebp - 0x1258]
call fcn.00409f30
push 0
lea eax, [ebp - 0x218]
push eax
push 0x1005
push 4
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
cmp dword [0x65a8b8], 0
jne 0x436956
push 0x208
lea eax, [ebp - 0xa38]
mov dword [0x65a8b8], 1
push 0
push eax
call fcn.0058db90
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.005961f3
add esp, 0x18
lea eax, [ebp - 0xa38]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x436956
lea eax, [ebp - 0xa38]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push 0x104
push 0x65a8bc
call fcn.005961f3
add esp, 0xc
push dword [ebp - 0x14c4]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov al, 1
jmp 0x4367aa