Function at 0x434120
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x354
mov eax, dword [0x4b0650]
xor eax, esp
mov dword [esp + 0x350], eax
push ebx
push esi
push edi
mov edi, dword [esp + 0x364]
push edi
mov dword [esp + 0x10], edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 1
je 0x434158
xor eax, 1
push eax
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x104
xor ebx, ebx
lea eax, [esp + 0x25c]
push ebx
push eax
call fcn.00460750
lea eax, [esp + 0x264]
add esp, 0xc
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434180
sub eax, edx
mov edx, eax
mov eax, edi
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434192
mov ecx, 0x103
sub eax, esi
sub ecx, edx
cmp ecx, eax
jae 0x4341c8
lea eax, [esp + 0x258]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4341b2
sub eax, edx
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x4341db
mov eax, edi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4341d0
sub eax, edx
push eax
lea edx, [esp + 0x25c]
push edi
push edx
call fcn.004619ff
lea eax, [esp + 0x264]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4341f7
sub eax, edx
cmp eax, 0x103
jae 0x434220
lea eax, [esp + 0x258]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434213
sub eax, edx
jmp 0x434225
mov eax, 0x103
mov byte [esp + eax + 0x258], bl
lea eax, [esp + 0x258]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434236
sub eax, edx
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x43426b
lea eax, [esp + 0x258]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434257
sub eax, edx
mov edx, 0x103
sub edx, eax
jmp 0x434270
mov edx, 1
lea eax, [esp + 0x258]
lea esi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434280
sub eax, esi
je 0x434309
lea eax, [esp + 0x258]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434297
sub eax, esi
cmp byte [esp + eax + 0x257], 0x5c
je 0x434309
push edx
lea edx, [esp + 0x25c]
push 0x49a4f0
push edx
call fcn.004619ff
lea eax, [esp + 0x264]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4342d0
sub eax, edx
cmp eax, 0x103
jae 0x4342fd
lea eax, [esp + 0x258]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4342f0
sub eax, edx
jmp 0x434302
mov eax, 0x103
mov byte [esp + eax + 0x258], bl
lea eax, [esp + 0x258]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434313
sub eax, edx
mov ecx, 0x103
sub ecx, eax
cmp ecx, 3
jae 0x434348
lea eax, [esp + 0x258]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434334
sub eax, edx
mov ecx, 0x103
sub ecx, eax
jmp 0x43434d
mov ecx, 3
push ecx
lea edx, [esp + 0x25c]
push 0x49b0a0
push edx
call fcn.004619ff
lea eax, [esp + 0x264]
add esp, 0xc
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434370
sub eax, edx
cmp eax, 0x103
jae 0x43439d
lea eax, [esp + 0x258]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434390
sub eax, edx
jmp 0x4343a2
mov eax, 0x103
mov byte [esp + eax + 0x258], bl
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x25c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x4343dd
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x350]
xor ecx, esp
call fcn.004601ff
add esp, 0x354
ret
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x18], 0x10
je 0x43467c
push 0x104
lea edx, [esp + 0x15c]
push ebx
push edx
call fcn.00460750
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
nop
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434410
sub eax, edx
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434424
mov ecx, 0x103
sub eax, esi
sub ecx, edx
cmp ecx, eax
jae 0x43445a
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434444
sub eax, edx
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x43446c
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434461
sub eax, edx
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x160]
push eax
call fcn.004619ff
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434490
sub eax, edx
cmp eax, 0x103
jae 0x4344bd
lea eax, [esp + 0x158]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4344b0
sub eax, edx
jmp 0x4344c2
mov eax, 0x103
mov byte [esp + eax + 0x158], bl
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4344d3
sub eax, edx
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x434508
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4344f4
sub eax, edx
mov edx, 0x103
sub edx, eax
jmp 0x43450d
mov edx, 1
lea eax, [esp + 0x158]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434517
sub eax, esi
je 0x43459a
lea eax, [esp + 0x158]
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434530
sub eax, esi
cmp byte [esp + eax + 0x157], 0x5c
je 0x43459a
push edx
lea edx, [esp + 0x15c]
push 0x49a4f0
push edx
call fcn.004619ff
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434565
sub eax, edx
cmp eax, 0x103
jae 0x43458e
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434581
sub eax, edx
jmp 0x434593
mov eax, 0x103
mov byte [esp + eax + 0x158], bl
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4345a4
sub eax, edx
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4345b8
mov ecx, 0x103
sub eax, esi
sub ecx, edx
cmp ecx, eax
jae 0x4345ee
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4345d8
sub eax, edx
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x434600
lea eax, [esp + 0x44]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4345f5
sub eax, edx
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x160]
push eax
call fcn.004619ff
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434620
sub eax, edx
cmp eax, 0x103
jae 0x434661
lea eax, [esp + 0x158]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434640
lea ecx, [esp + 0x158]
sub eax, edx
push ecx
mov byte [esp + eax + 0x15c], bl
call ebp
jmp 0x434929
lea ecx, [esp + 0x158]
mov eax, 0x103
push ecx
mov byte [esp + eax + 0x15c], bl
call ebp
jmp 0x434929
lea edx, [esp + 0x44]
push 0x49b09c
push edx
call fcn.00461d28
add esp, 8
test eax, eax
je 0x434929
lea eax, [esp + 0x44]
push 0x49b098
push eax
call fcn.00461d28
add esp, 8
test eax, eax
je 0x434929
push 0x104
lea ecx, [esp + 0x15c]
push ebx
push ecx
call fcn.00460750
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4346d0
sub eax, edx
mov edx, eax
mov eax, dword [esp + 0x10]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4346e4
mov ecx, 0x103
sub eax, esi
sub ecx, edx
cmp ecx, eax
jae 0x43471a
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434704
sub eax, edx
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x43472c
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434721
sub eax, edx
mov edx, dword [esp + 0x10]
push eax
push edx
lea eax, [esp + 0x160]
push eax
call fcn.004619ff
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434750
sub eax, edx
cmp eax, 0x103
jae 0x43477d
lea eax, [esp + 0x158]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434770
sub eax, edx
jmp 0x434782
mov eax, 0x103
mov byte [esp + eax + 0x158], bl
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434793
sub eax, edx
mov ecx, 0x103
sub ecx, eax
cmp ecx, 1
jae 0x4347c8
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4347b4
sub eax, edx
mov edx, 0x103
sub edx, eax
jmp 0x4347cd
mov edx, 1
lea eax, [esp + 0x158]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4347d7
sub eax, esi
je 0x43485a
lea eax, [esp + 0x158]
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4347f0
sub eax, esi
cmp byte [esp + eax + 0x157], 0x5c
je 0x43485a
push edx
lea edx, [esp + 0x15c]
push 0x49a4f0
push edx
call fcn.004619ff
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434825
sub eax, edx
cmp eax, 0x103
jae 0x43484e
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434841
sub eax, edx
jmp 0x434853
mov eax, 0x103
mov byte [esp + eax + 0x158], bl
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434864
sub eax, edx
mov edx, eax
lea eax, [esp + 0x44]
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434878
mov ecx, 0x103
sub eax, esi
sub ecx, edx
cmp ecx, eax
jae 0x4348ae
lea eax, [esp + 0x158]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434898
sub eax, edx
mov ecx, eax
mov eax, 0x103
sub eax, ecx
jmp 0x4348c0
lea eax, [esp + 0x44]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4348b5
sub eax, edx
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x160]
push eax
call fcn.004619ff
lea eax, [esp + 0x164]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4348e0
sub eax, edx
cmp eax, 0x103
jae 0x43490d
lea eax, [esp + 0x158]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434900
sub eax, edx
jmp 0x434912
mov eax, 0x103
lea ecx, [esp + 0x158]
push ecx
mov byte [esp + eax + 0x15c], bl
call fcn.00434120
add esp, 4
lea edx, [esp + 0x18]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4343e4
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov ecx, dword [esp + 0x360]
pop ebp
pop edi
neg eax
pop esi
sbb eax, eax
pop ebx
xor ecx, esp
neg eax
call fcn.004601ff
add esp, 0x354
ret