Function at 0x403370
Capabilities:
Delete file
Get file attributes
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x44d3c8
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x4651b0]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4651b0]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
push 0x4681f4
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
inc dword [0x468354]
mov dword [esp + 0x1c], vtable.FileRemover.0
xor ebx, ebx
mov dword [esp + 0x68], ebx
mov esi, dword [0x468348]
xor ebp, ebp
cmp esi, dword [0x46834c]
jbe 0x4033d6
call fcn.00438e02
mov edi, dword [0x46833c]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], esi
jmp 0x4033f0
mov esi, dword [0x46834c]
cmp dword [0x468348], esi
jbe 0x403403
call fcn.00438e02
cmp edi, ebx
je 0x40340f
cmp edi, dword [0x46833c]
je 0x403414
call fcn.00438e02
cmp dword [esp + 0x18], esi
je 0x403581
cmp edi, ebx
jne 0x403444
call fcn.00438e02
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x10]
jb 0x403437
call fcn.00438e02
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x403448
add eax, 4
jmp 0x40344a
mov eax, dword [edi]
jmp 0x403429
xor eax, eax
push eax
push 0x46823c
lea edi, [esp + 0x28]
call fcn.00404ce0
add esp, 8
mov byte [esp + 0x68], 1
push 0xffffffffffffffff
xor edx, edx
mov esi, 7
push ebx
lea ecx, [esp + 0x48]
mov dword [esp + 0x60], esi
mov dword [esp + 0x5c], ebx
mov word [esp + 0x4c], dx
call fcn.00401670
mov dword [esp + 0x3c], vtable.TString.0
mov edi, 8
mov byte [esp + 0x68], 3
cmp dword [esp + 0x38], edi
jb 0x4034a6
mov eax, dword [esp + 0x24]
push eax
call fcn.00438e12
add esp, 4
xor ecx, ecx
mov dword [esp + 0x38], esi
mov esi, dword [esp + 0x44]
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], cx
cmp dword [esp + 0x58], edi
jae 0x4034c3
lea esi, [esp + 0x44]
push ebx
push esi
call fcn.0043922e
add esp, 8
cmp eax, 0xffffffff
jne 0x4034d7
lea ebp, [eax + 2]
jmp 0x403514
mov ebp, dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
push esi
call ebp
push esi
test al, 0x10
je 0x4034f0
lea ecx, [esp + 0x20]
call fcn.00405bc0
jmp 0x40350e
call ebp
test al, 1
je 0x403501
and eax, 0xfffffffe
push eax
push esi
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
neg eax
sbb eax, eax
neg eax
mov ebp, eax
cmp eax, ebx
je 0x403562
mov byte [esp + 0x68], bl
mov dword [esp + 0x3c], vtable.TString.0
cmp dword [esp + 0x58], edi
jb 0x403533
mov edx, dword [esp + 0x44]
push edx
call fcn.00438e12
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, ebx
jne 0x40355e
call fcn.00438e02
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x10]
jb 0x403550
call fcn.00438e02
add dword [esp + 0x18], 0x20
mov edi, dword [esp + 0x14]
jmp 0x4033f0
mov eax, dword [eax]
jmp 0x403542
mov byte [esp + 0x68], bl
mov dword [esp + 0x3c], vtable.TString.0
cmp dword [esp + 0x58], edi
jb 0x403581
mov edx, dword [esp + 0x44]
push edx
call fcn.00438e12
add esp, 4
cmp ebp, ebx
je 0x4035c9
mov ebx, dword [0x46834c]
cmp dword [0x468348], ebx
jbe 0x403598
call fcn.00438e02
mov edi, dword [0x468348]
mov esi, dword [0x46833c]
cmp edi, dword [0x46834c]
jbe 0x4035b1
call fcn.00438e02
mov eax, dword [0x46833c]
push ebx
push esi
push edi
push eax
lea ecx, [esp + 0x24]
push ecx
mov edi, 0x46833c
call fcn.00404280
push 0x4681f4
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov eax, ebp
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.00438b17
add esp, 0x58
ret