Function at 0x439d80
Capabilities:
Delete file
Enumerate files on windows
Get disk size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc98
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x280]
push eax
call fcn.00471260
push 0
call fcn.0069c84d
add esp, 4
push 0
mov edi, eax
push str.AutoDeleteEnabled
mov eax, str.Settings
call fcn.00480fe0
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
or ebp, 0xffffffff
test al, al
je 0x439ec5
push 0x1e
push str.AutoDeleteDuration
mov eax, str.Settings
call fcn.004811b0
mov esi, eax
imul esi, esi, 0x15180
cmp word [esp + 0x280], 0
mov dword [esp + 0x28], ebp
je 0x439ec5
push 0x6bc0cc
push 0x6bc14c
lea ecx, [esp + 0x698]
push ecx
lea eax, [esp + 0x28c]
call fcn.004ad3a0
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x694]
push eax
call ebx
cmp eax, ebp
mov dword [esp + 0x28], eax
je 0x439ec5
cmp word [esp + 0x58], 0x2e
jne 0x439e50
mov ax, word [esp + 0x5a]
test ax, ax
je 0x439e9a
cmp ax, 0x2e
jne 0x439e50
cmp word [esp + 0x5c], 0
je 0x439e9a
test dword [esp + 0x2c], 0x106
jne 0x439e9a
push 0x6bc0cc
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x490]
push edx
lea eax, [esp + 0x28c]
call fcn.004ad3a0
lea eax, [esp + 0x488]
call fcn.00401fb0
mov ecx, edi
sub ecx, eax
cmp ecx, esi
jle 0x439e9a
lea edx, [esp + 0x488]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x439eba
cmp dword [esp + 0x28], ebp
jne 0x439e30
jmp 0x439ec5
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push str.AutoDelete
mov eax, str.Settings
call fcn.00480fe0
test al, al
je 0x43a075
lea eax, [esp + 0x690]
push eax
call fcn.00471260
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x69c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x439f15
mov ecx, ebp
mov eax, SysReAllocString
jmp 0x439f1d
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
shrd ecx, eax, 0xa
shr eax, 0xa
test ecx, ecx
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
jge 0x439f36
fadd qword [0x7235b8]
fmul qword [0x7238d0]
push 0x12c
push str.WarnSpaceBelow
mov eax, str.Settings
fstp qword [esp + 0x20]
call fcn.004811b0
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fcomp qword [esp + 0x18]
fnstsw ax
test ah, 5
jnp 0x43a075
cmp word [esp + 0x280], 0
mov dword [esp + 0x28], ebp
je 0x43a067
push 0x6bc0cc
push 0x6bc14c
lea edx, [esp + 0xaa8]
push edx
lea eax, [esp + 0x28c]
call fcn.004ad3a0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xaa4]
push ecx
call ebx
cmp eax, ebp
mov dword [esp + 0x28], eax
je 0x43a067
cmp word [esp + 0x58], 0x2e
jne 0x439fd7
mov ax, word [esp + 0x5a]
test ax, ax
je 0x43a024
cmp ax, 0x2e
jne 0x439fd7
cmp word [esp + 0x5c], 0
je 0x43a024
test dword [esp + 0x2c], 0x106
jne 0x43a024
push 0x6bc0cc
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x490]
push eax
lea eax, [esp + 0x28c]
call fcn.004ad3a0
lea eax, [esp + 0x488]
call fcn.00401fb0
cmp edi, eax
jle 0x43a024
lea edx, [esp + 0x488]
lea esi, [esp + 0x898]
mov edi, eax
call fcn.004011d0
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x2c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x43a058
cmp dword [esp + 0x28], ebp
jne 0x439fb7
lea ecx, [esp + 0x898]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esp + 0x28], ebp
lea ecx, [esp + 0x898]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret