Function at 0x418c60
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
mov eax, dword [0x447004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x290], edx
xorps xmm0, xmm0
mov dword [ebp - 0x264], esi
push edi
movlpd qword [ebp - 0x26c], xmm0
mov ebx, dword [esi + 0x1c]
mov ecx, dword [esi + 0xc]
add ebx, 0x40
movq qword [ebp - 0x280], xmm0
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x260], ebx
test ecx, ecx
jne 0x418cc8
lea eax, [ecx + 1]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00425576
mov esp, ebp
pop ebp
ret
mov eax, dword [esi]
lea edi, [ecx + 1]
mov ecx, 0x10
mov dword [ebp - 0x274], 0
cmp edi, ecx
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x25c], 0
mov edx, dword [eax]
cmovb edi, ecx
mov dword [ebp - 0x28c], edi
mov ecx, dword [edx]
add ecx, eax
lea eax, [ebp - 0x274]
push eax
mov eax, edi
imul eax, ebx
push eax
mov eax, dword [edx + 4]
push ecx
call eax
add esp, 0xc
test eax, eax
je 0x4191ff
mov ecx, dword [ebp - 0x274]
lea eax, [ebp - 0x274]
test ecx, ecx
cmovne eax, ecx
test eax, eax
je 0x4191f7
mov ecx, dword [esi + 0x44]
xor edx, edx
mov eax, dword [esi + 0x3c]
mov word [ecx + eax], dx
mov ebx, dword [esi + 0x3c]
mov edi, dword [esi]
test ebx, ebx
jne 0x418d51
xor esi, esi
jmp 0x418d77
mov esi, ebx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x418d56
sub esi, ecx
sar esi, 1
je 0x418d77
movzx eax, word [ebx + esi*2 - 2]
cmp eax, 0x2f
je 0x418d76
cmp eax, 0x5c
jne 0x418d77
dec esi
mov edx, dword [edi]
lea eax, [ebp - 0x27c]
push eax
lea eax, [esi*2 + 6]
push eax
mov ecx, dword [edx]
mov eax, dword [edx + 4]
add ecx, edi
push ecx
call eax
add esp, 0xc
test eax, eax
je 0x41918e
mov edi, dword [ebp - 0x27c]
lea eax, [ebp - 0x27c]
test edi, edi
cmovne eax, edi
test eax, eax
je 0x419186
add esi, esi
push esi
push ebx
push edi
call fcn.00426ea0
mov eax, 0x5c
add esp, 0xc
mov word [esi + edi], ax
mov dword [esi + edi + 2], 0x2a
mov eax, dword [ebp - 0x280]
test eax, eax
je 0x418def
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x280], 0
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x27c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x280], eax
mov ebx, 0xa0
cmp eax, 0xffffffff
jne 0x418e36
mov dword [ebp - 0x280], 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
lea ecx, [ebp - 0x268]
cmove eax, ebx
mov edx, eax
call fcn.0041b5e0
jmp 0x418e51
lea eax, [ebp - 0x268]
push eax
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x280]
call fcn.00420f00
add esp, 4
test eax, eax
jne 0x418e5c
xor edi, edi
jmp 0x419143
mov ebx, dword [ebp - 0x274]
sub ebx, dword [ebp - 0x260]
mov dword [ebp - 0x284], ebx
nop
cmp word [ebp - 0x22c], 0
mov dword [ebp - 0x288], ebx
je 0x41913e
lea ecx, [ebp - 0x22c]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x418e90
mov esi, dword [ebp - 0x264]
sub ecx, edx
sar ecx, 1
lea edi, [ecx + ecx]
mov ecx, dword [esi + 0x1c]
cmp ecx, edi
jae 0x4190a0
mov eax, ecx
shr eax, 1
cmp word [ebp + eax*2 - 0x22c], 0x2e
jne 0x4190a0
mov edx, dword [esi + 0x18]
lea esi, [ebp - 0x22c]
sub ecx, 4
jb 0x418ee5
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x418eea
add edx, 4
add esi, 4
sub ecx, 4
jae 0x418ed4
cmp ecx, 0xfffffffc
je 0x418f27
mov al, byte [edx]
cmp al, byte [esi]
jne 0x4190a0
cmp ecx, 0xfffffffd
je 0x418f27
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x4190a0
cmp ecx, 0xfffffffe
je 0x418f27
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x4190a0
cmp ecx, 0xffffffff
je 0x418f27
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
jne 0x4190a0
mov ecx, dword [ebp - 0x260]
lea eax, [edi + 2]
cmp eax, ecx
ja 0x4190a0
mov ebx, dword [ebp - 0x25c]
xor edi, edi
test ebx, ebx
je 0x418fa4
mov esi, ebx
sub esi, edi
shr esi, 1
add esi, edi
mov eax, esi
imul eax, ecx
lea ecx, [ebp - 0x22c]
add eax, dword [ebp - 0x274]
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x418f86
test dx, dx
je 0x418f82
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x418f86
add ecx, 4
add eax, 4
test dx, dx
jne 0x418f60
xor eax, eax
jmp 0x418f8b
sbb eax, eax
or eax, 1
neg eax
test eax, eax
jle 0x418f96
lea edi, [esi + 1]
jmp 0x418f9a
jns 0x418fa6
mov ebx, esi
mov ecx, dword [ebp - 0x260]
cmp edi, ebx
jb 0x418f44
mov esi, edi
mov ecx, dword [ebp - 0x260]
mov edi, esi
mov eax, dword [ebp - 0x25c]
imul edi, ecx
sub eax, esi
imul eax, ecx
add edi, dword [ebp - 0x274]
push eax
push edi
lea eax, [edi + ecx]
push eax
call fcn.00426ea0
mov ecx, dword [ebp - 0x25c]
add esp, 0xc
mov ebx, dword [ebp - 0x284]
inc ecx
add ebx, dword [ebp - 0x260]
mov dword [ebp - 0x25c], ecx
mov dword [ebp - 0x284], ebx
test edi, edi
je 0x41902d
lea ecx, [ebp - 0x22c]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419000
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x22c]
push eax
push edi
call fcn.00426ea0
mov ecx, dword [ebp - 0x25c]
add esp, 0xc
mov esi, dword [ebp - 0x264]
mov eax, dword [esi + 0xc]
inc eax
cmp ecx, eax
jne 0x4190a0
mov eax, dword [esi + 0x44]
dec ecx
add eax, dword [esi + 0x3c]
mov edx, 0x2f
mov dword [ebp - 0x25c], ecx
lea esi, [eax + 2]
mov word [eax], dx
test esi, esi
je 0x419081
test ebx, ebx
je 0x419081
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419060
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push ebx
push esi
call fcn.00426ea0
add esp, 0xc
mov eax, dword [ebp - 0x264]
mov ebx, dword [ebp - 0x288]
mov dword [ebp - 0x284], ebx
push dword [eax + 0x3c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x419106
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x4190d4
lea eax, [ebp - 0x268]
push eax
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x280]
call fcn.00420f00
add esp, 4
jmp 0x4190ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x4190f8
mov edx, eax
lea ecx, [ebp - 0x268]
call fcn.0041b5e0
test eax, eax
jne 0x418e70
xor edi, edi
jmp 0x419143
xor eax, eax
mov word [ebp - 0x22c], ax
jmp 0x418e70
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x268]
mov esi, eax
test esi, esi
mov eax, 0xa0
cmove esi, eax
test ecx, ecx
je 0x419131
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, ecx
push eax
mov eax, dword [edx + 4]
call eax
add esp, 4
mov ecx, esi
call fcn.0041b480
mov esi, eax
xor edi, edi
jmp 0x419149
mov edi, 1
mov esi, dword [ebp - 0x268]
mov eax, dword [ebp - 0x264]
mov ebx, dword [eax]
mov eax, dword [ebp - 0x280]
test eax, eax
je 0x41916c
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x280], 0
mov ecx, dword [ebx]
lea eax, [ebp - 0x27c]
push eax
push 0
mov eax, dword [ecx]
add eax, ebx
push eax
mov eax, dword [ecx + 4]
call eax
add esp, 0xc
jmp 0x4191ae
mov esi, dword [ebp - 0x268]
jmp 0x4191ac
mov edx, dword [ebp - 0x268]
test edx, edx
je 0x4191a7
mov ecx, dword [edx]
mov eax, dword [ecx]
add eax, edx
push eax
mov eax, dword [ecx + 4]
call eax
add esp, 4
mov esi, 0x4479a8
xor edi, edi
mov eax, dword [ebp - 0x264]
mov edx, dword [eax]
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x4191f1
mov ecx, dword [edx]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x28c]
imul eax, dword [ebp - 0x260]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x274]
push eax
mov eax, dword [ecx]
add eax, edx
push 0
push eax
mov eax, dword [ecx + 4]
call eax
add esp, 0xc
test edi, edi
jne 0x419255
jmp 0x419206
mov esi, dword [ebp - 0x268]
jmp 0x419204
mov esi, 0x4479a8
xor edi, edi
mov ebx, dword [ebp - 0x290]
test ebx, ebx
jne 0x419236
test esi, esi
je 0x419255
mov ecx, dword [esi]
mov eax, dword [ecx]
add eax, esi
push eax
mov eax, dword [ecx + 4]
call eax
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00425576
mov esp, ebp
pop ebp
ret
mov edx, dword [ebx + 4]
test edx, edx
je 0x41924c
mov ecx, dword [edx]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
add eax, edx
push eax
call ecx
add esp, 4
mov dword [ebx + 4], esi
mov dword [ebx], 0x19
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00425576
mov esp, ebp
pop ebp
ret