Function at 0x41839c
Capabilities:
Delete file
Enumerate files on windows
Read .ini file

Disassembly:
mov eax, 0x4445e4
call fcn.004361ac
sub esp, 0x18c
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
mov esi, dword [edi + 0x24]
lea ecx, [edi + 0x1c]
call fcn.00406944
mov ecx, dword [edi + 0x20]
push 0xffffffffffffffff
mov dword [ebp - 0x38], ecx
push eax
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x2c], eax
call fcn.00406579
and dword [ebp - 4], 0
push str.System
lea ecx, [ebp - 0x18]
call fcn.00406b97
lea eax, [ebp - 0x18]
push str.EINFO.CFG
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00406a74
add esp, 0xc
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.0040656d
test esi, esi
mov byte [ebp - 4], 2
jne 0x418422
push str._Autoup__CPdList::CopyEngine_CData_pData___Error_pData_is_NULL
push 1
pop esi
push esi
call fcn.00408aae
pop ecx
pop ecx
jmp 0x418962
lea ecx, [ebp - 0x28]
call fcn.00406944
push eax
push 0xffffffffffffffff
push str.Newest
push str.E_INFO
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0xffffffff
mov dword [ebp - 0x20], eax
jne 0x418505
lea eax, [ebp - 0x18]
push 0x44d338
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00406a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.00406947
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.004065ed
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x10]
push eax
call fcn.00406944
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
xor eax, eax
cmp edi, 0xffffffff
setne al
and dword [ebp - 0x34], 0
and dword [ebp - 0x30], 0
test eax, eax
je 0x4184fe
test byte [ebp - 0x198], 0x10
je 0x4184ee
cmp byte [ebp - 0x16c], 0x2e
je 0x4184ee
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jge 0x4184ee
lea eax, [ebp - 0x184]
push 8
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00436b60
lea eax, [ebp - 0x16c]
push eax
call fcn.00436621
add esp, 0x10
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x198]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x41849f
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov al, byte [0x4629d8]
push 7
mov byte [ebp - 0x58], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x57]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esi + 0x1dc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.004065ac
cmp dword [ebx + 0x814], 1
mov byte [ebp - 4], 4
jne 0x4185db
test byte [esi + 0x1cc], 1
je 0x4185db
mov ecx, dword [0x4629dc]
lea eax, [esi + 0x94]
push 0
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403bb6
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00406947
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.004065ed
lea ecx, [ebp - 0x1c]
lea edi, [esi + 0x1d4]
call fcn.00406944
push eax
mov ecx, edi
call fcn.00406944
push eax
push str._Autoup__CPdList::CopyEngine__m_pdServer_Extract__s___s_
push 1
call fcn.00408aae
add esp, 0x10
lea ecx, [ebp - 0x1c]
push 0
push 0
call fcn.00406944
push eax
mov ecx, edi
call fcn.00406944
push eax
mov ecx, ebx
call fcn.0041797d
test eax, eax
jne 0x4185db
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._Autoup__CPdList::CopyEngine__Extract___Error_____GetLastError___d_
push 1
call fcn.0040874d
add esp, 0xc
xor esi, esi
jmp 0x418956
lea ecx, [ebp - 0x24]
call fcn.0040656d
and dword [ebp - 0x14], 0
mov byte [ebp - 4], 6
lea edi, [esi + 0x94]
mov ecx, dword [0x4629dc]
call fcn.00404548
inc dword [ebp - 0x20]
lea eax, [ebp - 0x58]
push dword [ebp - 0x20]
push 0x44d7a8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00406a74
add esp, 0x18
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 7
call fcn.00406947
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.004065ed
lea ecx, [ebp - 0x10]
call fcn.00406944
push eax
call fcn.00405739
pop ecx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.00406947
push edi
lea ecx, [ebp - 0x10]
call fcn.00406b97
lea ecx, [ebp - 0x10]
call fcn.00406944
push eax
lea ecx, [ebp - 0x1c]
call fcn.00406944
push eax
push str._Autoup__CPdList::CopyEngine_Source__Destination___CopyEngine__s___s_
push 1
call fcn.00408aae
add esp, 0x10
lea ecx, [ebp - 0x10]
push 0
call fcn.00406944
push eax
lea ecx, [ebp - 0x1c]
call fcn.00406944
push eax
call fcn.00405b2f
add esp, 0xc
test eax, eax
jne 0x4186c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._Autoup__CPdList::CopyEngine__CopyEngine__GetLastError___d_
push 1
call fcn.0040874d
add esp, 0xc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x64
jl 0x4185f1
jmp 0x4186e1
add esi, 0xc
push 0
push esi
lea ecx, [ebp - 0x10]
call fcn.00406944
push eax
push 0
call fcn.004059a7
add esp, 0x10
cmp dword [ebp - 0x38], 0
je 0x4187f7
push dword [ebp + 8]
mov ecx, ebx
call fcn.0041b1e3
push eax
mov ecx, ebx
push dword [ebp - 0x20]
push dword [ebp + 8]
call fcn.0041a6d7
test eax, eax
jne 0x4187f7
push dword [ebp - 0x24]
push str._Autoup__CPdList::CopyEngine__Remove_Newest_system_number_v3pro32e.dll___s_
push 1
call fcn.00408aae
add esp, 0xc
lea ecx, [ebp - 0x24]
call fcn.00406944
push eax
call fcn.00405858
mov eax, dword [0x4629dc]
pop ecx
mov esi, str.moduler.scd
mov eax, dword [eax + 0xc]
lea ebx, [eax - 1]
cmp ebx, 0xffffffff
jae 0x41876f
mov eax, dword [0x4629dc]
push ebx
lea ecx, [eax + 4]
call fcn.00407252
mov edi, eax
push esi
lea eax, [edi + 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x41876c
test byte [edi + 0x1cc], 4
jne 0x4187e2
dec ebx
jmp 0x41873c
push str._Autoup__CPdList::CopyEngine__Brahma_Copy_Error_On_Flight_Engine____Brahma_Engine__Delete_moduler.scd_
push 1
call fcn.00408aae
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp + 8]
push dword [ebp - 0x2c]
call fcn.00406579
push 0x44ee38
lea ecx, [ebp + 8]
mov byte [ebp - 4], 8
call fcn.00406b97
lea eax, [ebp + 8]
push esi
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00406a74
add esp, 0xc
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.00406947
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.004065ed
lea ecx, [ebp + 8]
call fcn.00406944
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.004065ed
jmp 0x4187f0
push str._Autoup__CPdList::CopyEngine__Brahma_Copy_Error_On_Brahma_Engine____Brahma_Engine
push 1
call fcn.00408aae
pop ecx
pop ecx
xor esi, esi
jmp 0x41894a
lea ecx, [ebp - 0x28]
call fcn.00406944
push eax
lea eax, [ebp - 0x58]
push eax
push str.Newest
push str.E_INFO
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov esi, eax
lea eax, [ebp - 0x58]
push eax
push str._Autoup__CPdList::CopyEngine__Dr_fSetEngineInfo_WritePrivateProfileString_Newest_:__s
push 1
pop edi
push edi
call fcn.00408aae
add esp, 0xc
test esi, esi
je 0x41883e
push str._Autoup__CPdList::CopyEngine__WritePrivateProfileString_:_SUCCESS
push edi
call fcn.00408aae
pop ecx
pop ecx
jmp 0x418853
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._Autoup__CPdList::CopyEngine__WritePrivateProfileString__GetLastError___d_
push edi
call fcn.00408aae
add esp, 0xc
inc dword [ebx + 0x84c]
lea eax, [ebp - 0x18]
push 0x44d338
push eax
lea eax, [ebp + 8]
push eax
call fcn.00406a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call fcn.00406947
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.004065ed
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x10]
push eax
call fcn.00406944
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
xor eax, eax
cmp esi, 0xffffffff
setne al
test eax, eax
je 0x418941
test byte [ebp - 0x198], 0x10
je 0x41892e
cmp byte [ebp - 0x16c], 0x2e
je 0x41892e
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x41892e
push dword [0x4502f4]
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x41892e
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00406a74
add esp, 0xc
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call fcn.00406944
push eax
call fcn.00405858
pop ecx
mov ecx, dword [0x4629dc]
call fcn.00404548
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.004065ed
lea eax, [ebp - 0x198]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x4188a7
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, edi
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.004065ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.004065ed
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.004065ed
and byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004065ed
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004065ed
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4