Function at 0x419040
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
sub esp, 0x29c
push ebx
mov edx, ecx
push edi
xor ebx, ebx
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x5d]
mov byte [esp + 0x5c], bl
rep stosd dword es:[edi], eax
mov ecx, 0xf
lea edi, [esp + 0x1d]
mov byte [esp + 0x1c], al
mov dword [esp + 0x18], edx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x5c]
mov dword [esp + 8], ebx
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, dword [edx + 0x1c]
mov dword [esp + 0xc], ebx
cmp eax, ebx
mov dword [esp + 0x10], 0x104
push 0x429e1c
je 0x4190b8
push eax
push str._s_s
lea eax, [esp + 0x68]
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x14
jmp 0x4190d0
push str._s
lea ecx, [esp + 0x64]
push 0x104
push ecx
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
lea edx, [esp + 0x164]
lea eax, [esp + 0x5c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
jne 0x4190f7
pop edi
xor al, al
pop ebx
add esp, 0x29c
ret
push ebp
push esi
lea ebp, [esp + 0x14]
mov esi, 0x429e60
lea eax, [esp + 0x198]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x41912d
test cl, cl
je 0x419129
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x41912d
add eax, 2
add esi, 2
test cl, cl
jne 0x419109
xor eax, eax
jmp 0x419132
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4191e9
mov esi, 0x429e5c
lea eax, [esp + 0x198]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x41916a
test cl, cl
je 0x419166
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x41916a
add eax, 2
add esi, 2
test cl, cl
jne 0x419146
xor eax, eax
jmp 0x41916f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4191e9
mov eax, dword [esp + 0x16c]
and eax, 0x10
test al, al
jne 0x4191e9
mov ecx, dword [esp + 0x18c]
mov esi, dword [esp + 0x10]
add esi, ecx
push 0x10c
mov dword [esp + 0x14], esi
call dword [sym.imp.MSVCRT.dll_malloc]
mov edi, eax
add esp, 4
test edi, edi
mov dword [ebp], edi
je 0x419206
mov ecx, 0x43
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, dword [ebp]
lea edx, [esp + 0x198]
push 0x104
push edx
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x198]
mov ebx, dword [esp + 0x20]
add esp, 0xc
mov dword [ecx + 0x104], edx
mov ebp, dword [ebp]
add ebp, 0x108
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x16c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4190fd
jmp 0x41920a
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x20], 0x40
call fcn.00419530
mov eax, dword [esp + 0x10]
mov ebp, dword [sym.imp.MSVCRT.dll_free]
cmp eax, 0xa00000
mov edi, ebx
jbe 0x419312
test ebx, ebx
je 0x419328
cmp dword [esp + 0x10], 0xa00000
jbe 0x419312
mov esi, ebx
lea eax, [esp + 0x24]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x419287
test cl, cl
je 0x419283
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x419287
add eax, 2
add esi, 2
test cl, cl
jne 0x419263
xor eax, eax
jmp 0x41928c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4192ef
mov eax, dword [esp + 0x20]
push ebx
push 0x429e1c
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4192bc
push eax
push str._s_s_s
lea ecx, [esp + 0x74]
push 0x104
push ecx
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x18
jmp 0x4192d4
push 0x429e48
lea edx, [esp + 0x70]
push 0x104
push edx
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x14
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebx + 0x104]
mov eax, dword [esp + 0x10]
sub eax, ecx
mov dword [esp + 0x10], eax
mov ebx, dword [ebx + 0x108]
push edi
call ebp
add esp, 4
mov edi, ebx
test ebx, ebx
jne 0x41924f
pop esi
pop ebp
pop edi
mov al, 1
pop ebx
add esp, 0x29c
ret
test edi, edi
je 0x419328
mov esi, dword [edi + 0x108]
push edi
call ebp
add esp, 4
mov edi, esi
test esi, esi
jne 0x419316
pop esi
pop ebp
pop edi
mov al, 1
pop ebx
add esp, 0x29c
ret