Function at 0x401e40
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x494
mov eax, dword [0x4926cc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
mov ebx, ecx
push eax
mov dword [ebp - 0x480], ebx
call fcn.0045a8b0
push dword [ebx + 0x24]
lea eax, [ebp - 0x210]
push 0x104
push eax
call fcn.0045457c
push str.update_
lea eax, [ebp - 0x210]
push 0x104
push eax
call fcn.004544c5
push str..log
lea eax, [ebp - 0x210]
push 0x104
push eax
call fcn.004544c5
xor eax, eax
add esp, 0x30
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x210]
xor edi, edi
push eax
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0x488], edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, eax
mov dword [ebp - 0x484], ecx
cmp ecx, 0xffffffff
je 0x402114
jmp 0x401f00
test byte [ebp - 0x478], 0x10
jne 0x401fd9
mov eax, dword [ebp - 0x470]
inc dword [ebp - 0x47c]
cmp eax, esi
jb 0x401f25
test esi, esi
jne 0x401fd9
cmp word [ebp - 0x44c], 0
mov esi, eax
mov dword [ebp - 0x490], esi
je 0x401fc2
lea esi, [ebp - 0x44c]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x401f44
sub esi, ecx
sar esi, 1
cmp edi, esi
jg 0x401f90
mov edi, 2
cmp esi, edi
jle 0x401f66
add edi, edi
cmp edi, esi
jl 0x401f60
lea eax, [edi*2 + 2]
push eax
push ebx
call fcn.00455561
add esp, 8
test eax, eax
je 0x401f8f
mov ecx, dword [ebp - 0x48c]
xor edx, edx
mov ebx, eax
mov word [eax + ecx*2], dx
mov dword [ebp - 0x488], edi
inc edi
push esi
lea eax, [ebp - 0x44c]
push eax
push edi
push ebx
call fcn.00454b08
mov edi, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x484]
add esp, 0x10
xor eax, eax
mov word [ebx + esi*2], ax
mov dword [ebp - 0x48c], esi
mov esi, dword [ebp - 0x490]
jmp 0x401fd9
test ebx, ebx
je 0x401fd9
xor eax, eax
xor edi, edi
mov word [ebx], ax
mov dword [ebp - 0x488], edi
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x478]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ecx, dword [ebp - 0x484]
test eax, eax
jne 0x401f00
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x47c], 9
jle 0x402107
mov eax, dword [ebp - 0x480]
xor esi, esi
mov eax, dword [eax + 0x24]
xor edi, edi
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], esi
mov dword [ebp - 0x218], esi
mov dword [ebp - 0x214], esi
test eax, eax
je 0x40208e
cmp word [eax], si
je 0x40208e
mov esi, eax
lea ecx, [esi + 2]
jmp 0x402050
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x402050
sub esi, ecx
sar esi, 1
push esi
lea ecx, [ebp - 0x224]
call fcn.004045c0
mov edi, dword [ebp - 0x224]
push esi
push dword [ebp - 0x480]
push eax
push edi
call fcn.00454b08
add esp, 0x10
xor eax, eax
mov word [edi + esi*2], ax
mov dword [ebp - 0x220], esi
test ebx, ebx
je 0x4020cf
cmp word [ebx], 0
je 0x4020cf
mov ecx, ebx
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4020a0
sub ecx, edx
sar ecx, 1
lea eax, [esi + ecx]
push eax
lea ecx, [ebp - 0x224]
call fcn.004045c0
mov edi, dword [ebp - 0x224]
push ebx
push eax
push edi
call fcn.004544c5
add esp, 0xc
test edi, edi
je 0x4020db
cmp word [edi], 0
mov eax, edi
jne 0x4020e0
mov eax, 0x481274
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test edi, edi
je 0x4020f4
push edi
call fcn.004547da
add esp, 4
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x402107
push eax
call fcn.004547da
add esp, 4
test ebx, ebx
je 0x402114
push ebx
call fcn.004547da
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00452ca6
mov esp, ebp
pop ebp
ret