Function at 0x41afec
Capabilities:
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x27c
mov eax, dword [0x47a008]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x26c], 0
mov eax, ecx
push ebx
push esi
push edi
xor esi, esi
mov dword [ebp - 0x270], edx
or edi, 0xffffffff
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x268], edi
test eax, eax
jne 0x41b038
mov ebx, 0x80070057
jmp 0x41b253
lea edx, [ebp - 0x260]
call fcn.00422f71
mov ebx, eax
test ebx, ebx
js 0x41b253
cmp dword [ebp - 0x260], esi
jne 0x41b05c
xor ebx, ebx
jmp 0x41b25a
lea eax, [ebp - 0x26c]
mov edx, 0x408a98
push eax
push ecx
mov ecx, dword [ebp - 0x274]
call fcn.00423d05
mov ebx, eax
mov dword [ebp - 0x264], ebx
test ebx, ebx
js 0x41b253
push 0x250
lea eax, [ebp - 0x258]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push eax
lea ecx, [ebp - 0x268]
call fcn.0041e1d1
mov edi, dword [ebp - 0x268]
test edi, edi
je 0x41b244
cmp edi, 0xffffffff
je 0x41b244
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x41b140
mov eax, dword [eax + 4]
and dword [ebp - 0x27c], 0
test eax, eax
je 0x41b140
mov esi, dword [ebp - 0x27c]
mov edi, eax
mov ebx, dword [ebp - 0x270]
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x22c]
push 0xffffffffffffffff
push ecx
push 0xffffffffffffffff
push dword [eax + esi*4]
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
jne 0x41b129
mov dword [ebp - 0x260], 1
inc esi
cmp esi, edi
jb 0x41b0fd
mov esi, dword [ebp - 0x25c]
mov edi, dword [ebp - 0x268]
mov ebx, dword [ebp - 0x264]
push 0xffffffffffffffff
push 0x408a9c
push 0xffffffffffffffff
lea eax, [ebp - 0x22c]
push eax
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
je 0x41b20d
push 0xffffffffffffffff
push 0x408aa0
push 0xffffffffffffffff
lea eax, [ebp - 0x22c]
push eax
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
je 0x41b20d
cmp dword [ebp - 0x260], 0
jne 0x41b20d
test esi, esi
je 0x41b1a5
mov ecx, esi
call fcn.0042986c
and dword [ebp - 0x25c], 0
lea eax, [ebp - 0x25c]
push eax
push ecx
mov ecx, dword [ebp - 0x274]
lea edx, [ebp - 0x22c]
call fcn.00423d05
mov ebx, eax
mov dword [ebp - 0x264], ebx
test ebx, ebx
js 0x41b2a0
test byte [ebp - 0x258], 0x10
mov esi, dword [ebp - 0x25c]
je 0x41b1f2
mov ecx, esi
call fcn.0041cee0
mov ebx, eax
mov dword [ebp - 0x264], ebx
test ebx, ebx
js 0x41b253
jmp 0x41b20d
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x41b244
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x41b244
push 0x250
lea eax, [ebp - 0x258]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x258]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41b0d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x41b25a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.004263e0
mov ebx, eax
mov ecx, ebx
call fcn.004298bc
mov ecx, ebx
call fcn.004298d9
test edi, edi
je 0x41b271
cmp edi, 0xffffffff
je 0x41b271
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
test esi, esi
je 0x41b27c
mov ecx, esi
call fcn.0042986c
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x41b28d
mov ecx, eax
call fcn.0042986c
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00459020
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.004298bc
mov esi, dword [ebp - 0x25c]
jmp 0x41b25a