Function at 0x436227
Capabilities:
Delete directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x278
mov eax, 0x4acb1c
call fcn.004a76a9
mov dword [ebp - 0x274], edx
mov esi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x268]
mov edi, ebx
mov dword [ebp - 0x27c], edi
call fcn.0040d765
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], ebx
call fcn.0040d765
mov byte [ebp - 4], 1
test esi, esi
je 0x436489
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
push eax
push esi
lea ecx, [ebp - 0x268]
call fcn.0040d7bf
lea ecx, [ebp - 0x268]
call fcn.00434ad2
mov esi, dword [ebp - 0x268]
lea eax, [ebp - 0x278]
push esi
push str._s.
push eax
call fcn.0040ecfb
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x278]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x280], eax
cmp eax, 0xffffffff
je 0x43648f
lea eax, [ebp - 0x234]
push 0x4c3ac8
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
pop ecx
pop ecx
test eax, eax
je 0x43642b
lea eax, [ebp - 0x234]
push 0x4c3b44
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
pop ecx
pop ecx
test eax, eax
je 0x43642b
test byte [ebp - 0x260], 0x10
je 0x43639b
lea ecx, [ebp - 0x270]
call fcn.0040d765
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 2
push eax
push esi
lea eax, [ebp - 0x270]
push str._s_s_
push eax
call fcn.0040ecfb
mov edx, dword [ebp + 8]
add esp, 0x10
cmp edx, 0xffffffff
je 0x436355
test edx, edx
jne 0x436355
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x270]
jmp 0x436423
mov edi, dword [ebp - 0x270]
lea eax, [edx - 1]
test edx, edx
mov ecx, edx
mov edx, dword [ebp - 0x274]
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.00436227
pop ecx
test eax, eax
jne 0x436384
cmp dword [ebp - 0x274], eax
je 0x436474
lea ecx, [edi - 0x10]
mov byte [ebp - 4], 1
call fcn.0040bb70
mov edi, dword [ebp - 0x27c]
jmp 0x43642b
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x26c]
call fcn.0040d6dc
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 3
call fcn.0040d519
lea eax, [ebp - 0x26c]
push eax
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x284]
call fcn.00415b53
pop ecx
or edi, 1
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4363f3
mov byte [ebp - 0x261], 1
cmp dword [ebp - 0x274], eax
je 0x4363f9
mov byte [ebp - 0x261], bl
mov ecx, dword [ebp - 0x284]
and edi, 0xfffffffe
mov dword [ebp - 0x27c], edi
lea ecx, [ecx - 0x10]
call fcn.0040bb70
cmp byte [ebp - 0x261], 0
jne 0x43647e
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
call fcn.0040bb70
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4362ca
mov edi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push esi
call edi
lea ecx, [ebp - 0x268]
call fcn.00434b5b
mov esi, dword [ebp - 0x268]
push esi
call edi
xor ebx, ebx
inc ebx
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x43648f
lea ecx, [edi - 0x10]
call fcn.0040bb70
jmp 0x436466
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
jmp 0x436477
mov esi, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x278]
lea ecx, [ecx - 0x10]
call fcn.0040bb70
lea ecx, [esi - 0x10]
call fcn.0040bb70
mov eax, ebx
call fcn.004a7658
ret