Function at 0x438e30
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x66c
mov eax, dword [0x4c8678]
xor eax, esp
mov dword [esp + 0x668], eax
push ebx
mov ebx, dword [esp + 0x674]
push esi
push edi
push ebx
mov dword [esp + 0x10], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x438e68
xor eax, 1
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x208
xor edi, edi
lea eax, [esp + 0x470]
push edi
push eax
call fcn.004700e0
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438e90
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, ebx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ea6
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x438eea
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ed0
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x438eff
mov eax, ebx
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438ef0
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x470]
push ebx
push edx
call fcn.0047150f
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x438f20
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f20
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x438f51
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f40
sub eax, edx
sar eax, 1
jmp 0x438f56
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
jmp 0x438f70
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f70
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x438fad
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438f95
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x438fb2
mov edx, 1
lea eax, [esp + 0x46c]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438fc0
sub eax, esi
sar eax, 1
je 0x43905e
lea eax, [esp + 0x46c]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x438fe0
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x46a], 0x5c
je 0x43905e
push edx
lea edx, [esp + 0x470]
push 0x4af774
push edx
call fcn.0047150f
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439020
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439051
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439040
sub eax, edx
sar eax, 1
jmp 0x439056
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
jmp 0x439070
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439070
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 3
jae 0x4390ad
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439095
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
jmp 0x4390b2
mov ecx, 3
push ecx
lea edx, [esp + 0x470]
push 0x4b046c
push edx
call fcn.0047150f
lea eax, [esp + 0x478]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4390d2
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439103
lea eax, [esp + 0x46c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4390f2
sub eax, edx
sar eax, 1
jmp 0x439108
mov eax, 0x103
mov word [esp + eax*2 + 0x46c], di
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x470]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x439144
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x668]
xor ecx, esp
call fcn.0046fb90
add esp, 0x66c
ret
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x439150
cmp dword [esp + 0x18], 0x10
je 0x439456
push 0x208
lea edx, [esp + 0x26c]
push edi
push edx
call fcn.004700e0
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x439180
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439180
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 2]
jmp 0x4391a0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4391a0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x4391de
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4391c4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x4391f4
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4391e5
sub eax, edx
sar eax, 1
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x270]
push eax
call fcn.0047150f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439214
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439245
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439234
sub eax, edx
sar eax, 1
jmp 0x43924a
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439260
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x43929d
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439285
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x4392a2
mov edx, 1
lea eax, [esp + 0x268]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4392b0
sub eax, esi
sar eax, 1
je 0x43934e
lea eax, [esp + 0x268]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4392d0
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x266], 0x5c
je 0x43934e
push edx
lea edx, [esp + 0x26c]
push 0x4af774
push edx
call fcn.0047150f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439310
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439341
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439330
sub eax, edx
sar eax, 1
jmp 0x439346
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
jmp 0x439360
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439360
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 2]
jmp 0x439380
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439380
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x4393be
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4393a4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x4393d4
lea eax, [esp + 0x44]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4393c5
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x270]
push eax
call fcn.0047150f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4393f4
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x43943a
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439414
sub eax, edx
lea ecx, [esp + 0x268]
sar eax, 1
push ecx
mov word [esp + eax*2 + 0x26c], di
call ebp
jmp 0x439772
lea ecx, [esp + 0x268]
mov eax, 0x103
push ecx
mov word [esp + eax*2 + 0x26c], di
call ebp
jmp 0x439772
lea edx, [esp + 0x44]
push 0x4b0468
push edx
call fcn.0047147e
add esp, 8
test eax, eax
je 0x439772
lea eax, [esp + 0x44]
push 0x4b0460
push eax
call fcn.0047147e
add esp, 8
test eax, eax
je 0x439772
push 0x208
lea ecx, [esp + 0x26c]
push edi
push ecx
call fcn.004700e0
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4394b0
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 2]
jmp 0x4394d0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4394d0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x43950e
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4394f4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x439524
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439515
sub eax, edx
sar eax, 1
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x270]
push eax
call fcn.0047150f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439544
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439575
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439564
sub eax, edx
sar eax, 1
jmp 0x43957a
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439590
sub eax, edx
sar eax, 1
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x4395cd
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4395b5
sub eax, edx
sar eax, 1
mov edx, 0x103
sub edx, eax
jmp 0x4395d2
mov edx, 1
lea eax, [esp + 0x268]
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4395e0
sub eax, esi
sar eax, 1
je 0x43967e
lea eax, [esp + 0x268]
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439600
sub eax, esi
sar eax, 1
cmp word [esp + eax*2 + 0x266], 0x5c
je 0x43967e
push edx
lea edx, [esp + 0x26c]
push 0x4af774
push edx
call fcn.0047150f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439640
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439671
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439660
sub eax, edx
sar eax, 1
jmp 0x439676
mov eax, 0x103
mov word [esp + eax*2 + 0x268], di
lea eax, [esp + 0x268]
lea edx, [eax + 2]
jmp 0x439690
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439690
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 2]
jmp 0x4396b0
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4396b0
sub eax, esi
mov ecx, 0x103
sar eax, 1
sub ecx, edx
cmp ecx, eax
jae 0x4396ee
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4396d4
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x439704
lea eax, [esp + 0x44]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4396f5
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x270]
push eax
call fcn.0047150f
lea eax, [esp + 0x274]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439724
sub eax, edx
sar eax, 1
cmp eax, 0x103
jae 0x439755
lea eax, [esp + 0x268]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x439744
sub eax, edx
sar eax, 1
jmp 0x43975a
mov eax, 0x103
lea ecx, [esp + 0x268]
push ecx
mov word [esp + eax*2 + 0x26c], di
call fcn.00438e30
add esp, 4
lea edx, [esp + 0x18]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x439150
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [esp + 0x678]
pop ebp
pop edi
neg eax
pop esi
sbb eax, eax
pop ebx
xor ecx, esp
neg eax
call fcn.0046fb90
add esp, 0x66c
ret