Function at 0x403421
Capabilities:
Check for time delay via gettickcount
Delete directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
lea ebp, [esp - 0x1d8]
sub esp, 0x258
mov eax, dword [0x418420]
xor eax, ebp
mov dword [ebp + 0x1d4], eax
cmp dword [0x41aa00], 0
mov eax, dword [ebp + 0x1e4]
push ebx
mov ebx, dword [ebp + 0x1e0]
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], eax
jne 0x40368d
test ebx, ebx
je 0x403669
cmp byte [ebx], 0
je 0x403669
push ebx
call fcn.00409910
cmp eax, 4
pop ecx
jb 0x403669
push esi
push ebx
mov esi, 0x105
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.00409539
push eax
call section..text
add esp, 0x10
test al, al
jne 0x4034ad
push 0x7e2
push str.sfxhead.c
call fcn.0040256a
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.0040129b
push 0x414448
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.004093fb
push eax
call section..text
add esp, 0x18
test al, al
jne 0x4034e0
push 0x7e4
jmp 0x4034a3
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x78], eax
je 0x403642
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.00409539
push eax
call section..text
add esp, 0x10
test al, al
je 0x403655
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.0040129b
cmp byte [ebp + 0xbc], 0
pop ecx
pop ecx
je 0x403566
lea eax, [ebp + 0xbc]
push eax
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.004093fb
push eax
call section..text
add esp, 0x10
test al, al
jne 0x403588
push 0x7ed
jmp 0x4034a3
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 0xcc]
push esi
push eax
call fcn.004093fb
push eax
call section..text
add esp, 0x10
test al, al
je 0x40365f
test byte [ebp - 0x74], 0x10
je 0x4035fd
cmp byte [ebp + 0xbc], 0
push 0x414444
je 0x4035b6
lea eax, [ebp + 0xbc]
push eax
call fcn.00409e30
test eax, eax
pop ecx
pop ecx
je 0x40362c
lea eax, [ebp + 0xbc]
jmp 0x4035c8
lea eax, [ebp - 0x48]
push eax
call fcn.00409e30
test eax, eax
pop ecx
pop ecx
je 0x40362c
lea eax, [ebp - 0x48]
push 0x414440
push eax
call fcn.00409e30
test eax, eax
pop ecx
pop ecx
je 0x40362c
push dword [ebp - 0x80]
lea eax, [ebp + 0xcc]
push eax
call fcn.00403421
test al, al
pop ecx
pop ecx
jne 0x40362c
lea eax, [ebp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
jmp 0x40362c
call edi
lea ebx, [eax + 0x3e8]
jmp 0x403616
call fcn.00401672
test eax, eax
pop ecx
je 0x403629
call fcn.004021bf
call edi
cmp ebx, eax
lea eax, [ebp + 0xcc]
push eax
ja 0x403607
call fcn.00401693
pop ecx
mov ebx, dword [ebp - 0x7c]
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x403504
pop edi
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
pop esi
jmp 0x40368f
push 0x7ea
jmp 0x4034a3
push 0x7ef
jmp 0x4034a3
push 0
mov ecx, 0x7d0
call fcn.00402748
push eax
mov ecx, 0x401
call fcn.00402748
push eax
push dword [0x41a9f0]
call dword [sym.imp.USER32.dll_MessageBoxA]
xor al, al
mov ecx, dword [ebp + 0x1d4]
xor ecx, ebp
pop ebx
call fcn.00409326
add ebp, 0x1d8
leave
ret