Function at 0x4315c0
Capabilities:
Check for time delay via gettickcount
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
sub esp, 0x9cc
mov al, byte [esp + 0x9e0]
test al, al
push esi
mov esi, dword [esp + 0x9d8]
mov dword [esp + 0x10], ecx
jne 0x431610
mov ecx, dword [0x45de54]
push 0
push 0xffffffffffffffff
push 0x452c78
call fcn.0043e8a0
test esi, esi
je 0x431667
cmp byte [esi], 0
je 0x431667
mov eax, dword [esp + 0x9dc]
test eax, eax
jne 0x431610
mov dword [esp + 0x9dc], 1
mov eax, dword [esp + 0x9d4]
push 0x3f
push eax
lea ecx, [esp + 0x15c]
push ecx
call fcn.00443880
push 0x207
lea edx, [esp + 0x3c8]
push esi
push edx
mov byte [esp + 0x1ab], 0
call fcn.00443880
lea eax, [esp + 0x3d0]
add esp, 0x18
mov byte [esp + 0x5bf], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x431657
sub eax, edx
cmp eax, 0x208
jb 0x431673
xor eax, eax
pop esi
add esp, 0x9cc
ret 0x14
push 0x207
lea eax, [esp + 0x3bc]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call fcn.00443880
lea edx, [esp + 0x1bc]
push 0x5c
push edx
mov byte [esp + 0x3cb], 0
call fcn.00444bf0
add esp, 0x14
test eax, eax
je 0x4316b1
mov byte [eax + 1], 0
jmp 0x4316b9
mov byte [esp + 0x1b0], 0
lea eax, [esp + 0x3b8]
push 0x5c
push eax
call fcn.00444bf0
add esp, 8
test eax, eax
je 0x4316d2
inc eax
jmp 0x4316d9
lea eax, [esp + 0x3b8]
push 0x4567b0
push eax
mov dword [esp + 0x14], eax
call fcn.00409fc0
add esp, 8
test eax, eax
jne 0x4316fa
mov dword [esp + 0x9dc], 2
push ebx
push ebp
push edi
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x3c8]
push edx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
xor ebx, ebx
xor ebp, ebp
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
je 0x4319eb
jmp 0x431733
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
call esi
sub eax, dword [0x45ef34]
cmp eax, 5
jbe 0x43176d
push 0
push 0
push 0
push 0
lea eax, [esp + 0x1b0]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x431766
push 0
push 0xffffffffffffffff
call fcn.00401650
add esp, 8
call esi
mov dword [0x45ef34], eax
test byte [esp + 0x20], 0x10
je 0x4317ae
mov edi, 0x4523c4
lea esi, [esp + 0x4c]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x4319c8
mov edi, 0x4523c0
lea esi, [esp + 0x4c]
mov ecx, 2
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x4319c8
cmp dword [esp + 0x9e8], 1
jmp 0x4317b6
cmp dword [esp + 0x9e8], 3
je 0x4319c8
mov al, byte [esp + 0x160]
test al, al
lea esi, [esp + 0x160]
je 0x431989
mov edi, 1
movsx ecx, byte [esi]
push ecx
call fcn.00443ce6
add eax, 0xffffffd5
add esp, 4
cmp eax, 0x33
ja case.0x4317f6.44
movzx edx, byte [eax + 0x431b78]
jmp dword [edx*4 + 0x431b4c]
mov ebp, edi
jmp case.0x4317f6.44
mov ebp, 2
jmp case.0x4317f6.44
mov ebp, 3
jmp case.0x4317f6.44
cmp ebp, edi
jne 0x431827
mov eax, dword [esp + 0x20]
or eax, edi
jmp 0x431979
cmp ebp, 2
jne 0x431838
mov eax, dword [esp + 0x20]
and eax, 0xfffffffe
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, edi
jmp 0x431979
cmp ebp, edi
jne 0x43185c
mov eax, dword [esp + 0x20]
or eax, 0x20
jmp 0x431979
cmp ebp, 2
jne 0x43186d
mov eax, dword [esp + 0x20]
and eax, 0xffffffdf
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, 0x20
jmp 0x431979
cmp ebp, edi
jne 0x431892
mov eax, dword [esp + 0x20]
or eax, 4
jmp 0x431979
cmp ebp, 2
jne 0x4318a3
mov eax, dword [esp + 0x20]
and eax, 0xfffffffb
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, 4
jmp 0x431979
cmp ebp, edi
jne 0x4318c8
mov eax, dword [esp + 0x20]
or eax, 2
jmp 0x431979
cmp ebp, 2
jne 0x4318d9
mov eax, dword [esp + 0x20]
and eax, 0xfffffffd
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, 2
jmp 0x431979
cmp ebp, edi
jne 0x4318fd
mov eax, dword [esp + 0x20]
or eax, 0x80
jmp 0x431979
cmp ebp, 2
jne 0x43190d
mov eax, dword [esp + 0x20]
and eax, 0xffffff7f
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, 0x80
jmp 0x431979
cmp ebp, edi
jne 0x43192c
mov eax, dword [esp + 0x20]
or eax, 0x1000
jmp 0x431979
cmp ebp, 2
jne 0x43193c
mov eax, dword [esp + 0x20]
and eax, 0xffffefff
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, 0x1000
jmp 0x431979
cmp ebp, edi
jne 0x43195b
mov eax, dword [esp + 0x20]
or eax, 0x100
jmp 0x431979
cmp ebp, 2
jne 0x43196b
mov eax, dword [esp + 0x20]
and eax, 0xfffffeff
jmp 0x431979
cmp ebp, 3
jne case.0x4317f6.44
mov eax, dword [esp + 0x20]
xor eax, 0x100
mov dword [esp + 0x20], eax
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4317d7
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x1c0]
push ecx
push str._s_s
lea edx, [esp + 0x5d8]
push 0x208
push edx
call fcn.0043c2b0
mov eax, dword [esp + 0x34]
add esp, 0x14
push eax
lea ecx, [esp + 0x5d0]
push ecx
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
test eax, eax
jne 0x4319c8
inc ebx
mov esi, dword [esp + 0x10]
lea edx, [esp + 0x20]
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x43172d
push esi
mov dword [esp + 0x18], ebx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov ebx, dword [esp + 0x9ec]
test bl, bl
je 0x431b22
lea eax, [esp + 0x1bc]
push eax
push str._s.
lea ecx, [esp + 0x7dc]
push 0x208
push ecx
call fcn.0043c2b0
add esp, 0x10
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x7d8]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x431b22
mov ebp, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
call esi
sub eax, dword [0x45ef34]
cmp eax, 5
jbe 0x431a80
push 0
push 0
push 0
push 0
lea ecx, [esp + 0x1b0]
push ecx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x431a79
push 0
push 0xffffffffffffffff
call fcn.00401650
add esp, 8
call esi
mov dword [0x45ef34], eax
test byte [esp + 0x20], 0x10
je 0x431b01
mov edi, 0x4523c4
lea esi, [esp + 0x4c]
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x431b01
mov edi, 0x4523c0
lea esi, [esp + 0x4c]
mov ecx, 2
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x431b01
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x1c4]
push eax
push str._s_s_s
lea ecx, [esp + 0x5dc]
push 0x208
push ecx
call fcn.0043c2b0
mov edx, dword [esp + 0xa00]
add esp, 0x18
push 1
push ebx
push edx
lea eax, [esp + 0x5d8]
push eax
lea ecx, [esp + 0x170]
push ecx
mov ecx, dword [esp + 0x30]
call fcn.004315c0
add ebp, eax
mov esi, dword [esp + 0x10]
lea edx, [esp + 0x20]
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x431a40
push esi
call dword [sym.imp.KERNEL32.DLL_FindClose]
jmp 0x431b26
mov ebp, dword [esp + 0x14]
mov al, byte [esp + 0x9f0]
test al, al
jne 0x431b3d
mov ecx, dword [0x45de54]
push ebp
call fcn.0043fa40
pop edi
mov eax, ebp
pop ebp
pop ebx
pop esi
add esp, 0x9cc
ret 0x14