Function at 0x440eb0
Capabilities:
Check for time delay via gettickcount
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x488
push ebx
push ebp
push esi
mov esi, dword [0x4d3df0]
mov ebx, ecx
push edi
mov dword [esp + 0x20], ebx
cmp word [esi], 0
jne 0x440eed
mov eax, dword [0x4ce8c8]
push 1
mov dword [eax + 0x30], 0x57
call fcn.0042cfe0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, 0x4c6ab8
mov ecx, esi
call fcn.0040ab90
push 0
test eax, eax
jne 0x440f35
call dword [sym.imp.KERNEL32.dll_SetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
sete byte [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x4ce8c8]
push dword [esp + 0x14]
mov dword [ecx + 0x30], eax
mov ecx, ebx
call fcn.0042cfe0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.00420860
cmp eax, 0x104
jb 0x440f60
mov eax, dword [0x4ce8c8]
mov ecx, ebx
push 1
mov dword [eax + 0x30], 0x6f
call fcn.0042cfe0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x248]
xor edi, edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
jne 0x440fa3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x4ce8c8]
push 0x18
push edi
push edi
mov dword [ecx + 0x30], eax
mov ecx, dword [0x4d166c]
call fcn.00401ac0
lea eax, [edi + 1]
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x40]
sub ecx, esi
nop dword [eax]
movzx eax, word [esi]
lea esi, [esi + 2]
mov word [ecx + esi - 2], ax
test ax, ax
jne 0x440fb0
lea eax, [esp + 0x40]
push 0x5c
push eax
call fcn.0048ca9c
add esp, 8
test eax, eax
je 0x440ff1
xor ecx, ecx
mov word [eax + 2], cx
lea ecx, [esp + 0x40]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x440fe0
sub ecx, edx
sar ecx, 1
jmp 0x440ffa
xor eax, eax
xor ecx, ecx
mov word [esp + 0x40], ax
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [esp + 0x40]
mov esi, dword [esp + 0x14]
lea eax, [eax + ecx*2]
mov dword [esp + 0x1c], eax
mov eax, 0x103
sub eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [0x4ce8c8]
mov ebx, dword [esp + 0x18]
mov dword [eax + 0x30], edi
call ebp
mov edx, dword [0x4ce8c8]
sub eax, dword [0x4d49c4]
cmp eax, dword [edx + 0xd8]
jbe 0x44106d
push 0
push 0
push 0
push 0
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x441060
mov edx, 1
or ecx, 0xffffffff
call fcn.00401e60
call ebp
mov edx, dword [0x4ce8c8]
mov dword [0x4d49c4], eax
test byte [esp + 0x248], 0x10
jne 0x4410e3
lea ecx, [esp + 0x274]
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x441081
sub ecx, esi
sar ecx, 1
cmp ecx, ebx
jbe 0x44109d
mov dword [edx + 0x30], 0x6f
jmp 0x4410de
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x274]
mov eax, ecx
sub edx, eax
nop dword [eax]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x4410b0
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4410df
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x4ce8c8]
mov dword [ecx + 0x30], eax
inc edi
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x441026
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x20]
push edi
call fcn.0042d090
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret