Function at 0x487dd0
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x31c
mov eax, dword [0x56800c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ecx, str.sumatrapdfcache
call fcn.004615d0
mov edi, eax
test edi, edi
je 0x4880b5
mov edx, str..png
mov ecx, edi
call fcn.0041cdf0
mov esi, eax
mov dword [ebp - 0x2b8], 0
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x25c], esi
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x2b4], eax
call fcn.0040be50
lea eax, [ebp - 0x258]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov dword [ebp - 0x260], ebx
cmp ebx, 0xffffffff
je 0x488075
jmp 0x487e60
test byte [ebp - 0x258], 0x10
jne 0x487ed8
lea eax, [ebp - 0x22c]
push eax
call fcn.004c91a0
mov esi, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x2c0]
add esp, 4
mov dword [ebp - 0x264], eax
lea eax, [esi + 1]
push eax
call fcn.0040c470
test al, al
jne 0x487e9b
xor eax, eax
mov byte [eax], al
mov eax, dword [ebp - 0x2b4]
lea ebx, [eax + esi*4]
mov eax, dword [ebp - 0x2c0]
cmp eax, esi
jbe 0x487ec1
sub eax, esi
shl eax, 2
push eax
lea eax, [ebx + 4]
push ebx
push eax
call fcn.004bdaf0
add esp, 0xc
lea eax, [esi + 1]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x264]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x487e60
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x308]
mov dword [ebp - 0x310], 0
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x30c], eax
call fcn.0040be50
lea eax, [ebp - 0x318]
push eax
call fcn.0048b090
xor ebx, ebx
cmp dword [ebp - 0x318], ebx
jbe 0x487f92
cmp ebx, 0x14
jae 0x487f92
mov eax, dword [ebp - 0x30c]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx]
call fcn.00487cb0
mov esi, eax
push 0
test esi, esi
je 0x487f81
mov ecx, esi
call fcn.0041cc50
push eax
lea ecx, [ebp - 0x2c0]
call fcn.004012b0
cmp eax, 0xffffffff
je 0x487f80
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0040c0e0
push eax
call fcn.004bf8aa
add esp, 4
push esi
call fcn.004bf8aa
inc ebx
add esp, 4
cmp ebx, dword [ebp - 0x318]
jb 0x487f36
xor ebx, ebx
cmp dword [ebp - 0x2c0], ebx
jbe 0x488043
lea edx, [ebx + 0x5c]
lea ecx, [ebx + 0x2f]
jmp 0x487fb0
mov eax, dword [ebp - 0x2b4]
mov esi, dword [eax + ebx*4]
movzx eax, word [esi]
cmp dx, ax
je 0x487fc6
cmp cx, ax
jne 0x487fc9
add esi, 2
mov ecx, edi
xor edx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x260], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x487fd6
sub ecx, dword [ebp - 0x260]
sar ecx, 1
movzx eax, word [edi + ecx*2 - 2]
mov ecx, 0x5c
cmp cx, ax
je 0x488007
mov ecx, 0x2f
cmp cx, ax
je 0x488007
mov edx, 0x4f06a4
push esi
mov ecx, edi
call fcn.00419a10
add esp, 4
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x488025
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call fcn.004bf8aa
mov ecx, 0x2f
inc ebx
add esp, 4
lea edx, [ecx + 0x2d]
cmp ebx, dword [ebp - 0x2c0]
jb 0x487fb0
mov ecx, dword [ebp - 0x30c]
lea eax, [ebp - 0x308]
cmp ecx, eax
je 0x48806f
mov edx, dword [ebp - 0x2c8]
push ecx
test edx, edx
jne 0x488068
call fcn.004bf8aa
add esp, 4
jmp 0x48806f
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
mov esi, dword [ebp - 0x25c]
lea ecx, [ebp - 0x2c0]
call fcn.0040c180
mov ecx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2b0]
cmp ecx, eax
je 0x4880ac
mov edx, dword [ebp - 0x270]
push ecx
test edx, edx
jne 0x4880a5
call fcn.004bf8aa
add esp, 4
jmp 0x4880ac
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
push esi
call fcn.004bf8aa
add esp, 4
push edi
call fcn.004bf8aa
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004bcb15
mov esp, ebp
pop ebp
ret