Function at 0x46cc22
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x526245
mov eax, dword fs:[0]
push eax
sub esp, 0x554
mov eax, dword [0x5770a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x544], ecx
lea ecx, [ebp - 0x248]
call fcn.0040b2fe
and dword [ebp - 4], 0
lea eax, [ebp - 0x248]
push eax
call fcn.004822ed
pop ecx
movzx eax, al
test eax, eax
je 0x46d04e
push 0x539a50
lea ecx, [ebp - 0x260]
call fcn.00409053
mov byte [ebp - 4], 1
push 0x5c
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00481988
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x260]
call fcn.0040a62b
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
lea eax, [ebp - 0x260]
mov dword [ebp - 0x548], eax
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
mov byte [ebp - 4], 3
push 0x539adc
lea ecx, [ebp - 0x278]
call fcn.00409053
mov byte [ebp - 4], 8
push 0x5c
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.00481988
add esp, 0x10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x278]
call fcn.0040a62b
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x278]
mov dword [ebp - 0x54c], eax
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a8]
call fcn.0040a5f1
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x510]
push eax
push dword [ebp - 0x528]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0xffffffff
je 0x46cff0
push 0x539ae0
lea eax, [ebp - 0x4e4]
push eax
call fcn.004cf523
pop ecx
pop ecx
test eax, eax
je 0x46cda3
push 0x539ae4
lea eax, [ebp - 0x4e4]
push eax
call fcn.004cf523
pop ecx
pop ecx
test eax, eax
jne 0x46cda8
jmp 0x46cfc2
mov eax, dword [ebp - 0x510]
and eax, 0x10
je 0x46cdb8
jmp 0x46cfc2
push str.TCLSHost
call fcn.004cc4f3
pop ecx
push eax
push str.TCLSHost
lea eax, [ebp - 0x4e4]
push eax
call fcn.004d7559
add esp, 0xc
test eax, eax
jne 0x46cfc2
push 0x208
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.004b0090
add esp, 0xc
lea eax, [ebp - 0x4e4]
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.004cc3b7
add esp, 0xc
push 0x2d
lea eax, [ebp - 0x218]
push eax
call fcn.004b02b1
pop ecx
pop ecx
mov dword [ebp - 0x514], eax
push 0x2e
lea eax, [ebp - 0x218]
push eax
call fcn.004b02b1
pop ecx
pop ecx
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x514], 0
je 0x46cfc2
cmp dword [ebp - 0x51c], 0
je 0x46cfc2
mov eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x514]
jbe 0x46cfc2
mov eax, dword [ebp - 0x514]
inc eax
inc eax
mov dword [ebp - 0x514], eax
xor eax, eax
mov ecx, dword [ebp - 0x51c]
mov word [ecx], ax
push dword [ebp - 0x514]
call fcn.004cea77
pop ecx
mov dword [ebp - 0x524], eax
mov dword [ebp - 0x520], edx
xorps xmm0, xmm0
movlpd qword [ebp - 0x538], xmm0
lea eax, [ebp - 0x538]
push eax
call fcn.004d7e48
pop ecx
mov eax, dword [ebp - 0x524]
or eax, dword [ebp - 0x520]
je 0x46cfc2
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0x524]
mov ecx, dword [ebp - 0x534]
sbb ecx, dword [ebp - 0x520]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], ecx
cmp dword [ebp - 0x53c], 0
jl 0x46cfc2
jg 0x46cf07
cmp dword [ebp - 0x540], 0x93a80
jbe 0x46cfc2
lea eax, [ebp - 0x4e4]
push eax
lea ecx, [ebp - 0x290]
call fcn.00409053
mov byte [ebp - 4], 0xf
push 0x5c
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00481988
add esp, 0x10
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x530], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x530]
call fcn.0040a5f1
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2c0]
call fcn.0040a62b
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x550], eax
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x290]
call fcn.0040a62b
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x290]
mov dword [ebp - 0x554], eax
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x510]
push eax
push dword [ebp - 0x518]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x46cd75
push dword [ebp - 0x518]
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [ebp - 0x518], 0xffffffff
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2a8]
call fcn.0040a62b
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x558], eax
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 3
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0
lea eax, [ebp - 0x230]
mov dword [ebp - 0x55c], eax
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov dword [ebp - 4], 0x22
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x248]
mov dword [ebp - 0x560], eax
mov dword [ebp - 4], 0x23
mov dword [ebp - 4], 0x24
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ad99f
leave
ret