Function at 0x40be20
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47ac5b
mov eax, dword fs:[0]
push eax
sub esp, 0x5bc
mov eax, dword [0x498e04]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5bc], ecx
mov byte [ebp - 0x444], 0
push 0x103
push 0
lea eax, [ebp - 0x443]
push eax
call fcn.00449d00
add esp, 0xc
mov byte [ebp - 0x33c], 0
push 0x103
push 0
lea ecx, [ebp - 0x33b]
push ecx
call fcn.00449d00
add esp, 0xc
mov byte [ebp - 0x22c], 0
push 0x103
push 0
lea edx, [ebp - 0x22b]
push edx
call fcn.00449d00
add esp, 0xc
mov byte [ebp - 0x11c], 0
push 0x103
push 0
lea eax, [ebp - 0x11b]
push eax
call fcn.00449d00
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044ab20
add esp, 4
add eax, 8
push eax
call fcn.00448fa1
add esp, 4
mov dword [ebp - 0x59c], eax
mov edx, dword [ebp - 0x59c]
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0
jne 0x40befe
jmp 0x40c293
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x448]
push ecx
call fcn.0044aa20
add esp, 8
push 0x482c34
mov edx, dword [ebp - 0x448]
push edx
call fcn.0044aa30
add esp, 8
push 0x140
push 0
lea eax, [ebp - 0x58c]
push eax
call fcn.00449d00
add esp, 0xc
lea ecx, [ebp - 0x58c]
push ecx
mov edx, dword [ebp - 0x448]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x448], 0
je 0x40bf83
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x5a0], eax
mov ecx, dword [ebp - 0x5a0]
push ecx
call fcn.0044a9ac
add esp, 4
mov dword [ebp - 0x448], 0
xor edx, edx
cmp dword [ebp - 0x230], 0xffffffff
setne dl
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x120], 0
je 0x40c286
mov eax, dword [ebp - 0x58c]
and eax, 0x10
je 0x40c080
movsx ecx, byte [ebp - 0x560]
cmp ecx, 0x2e
je 0x40c07b
mov edx, dword [ebp + 8]
push edx
call fcn.0044ab20
add esp, 4
mov esi, eax
lea eax, [ebp - 0x560]
push eax
call fcn.0044ab20
add esp, 4
lea ecx, [esi + eax + 3]
push ecx
call fcn.00448fa1
add esp, 4
mov dword [ebp - 0x5a4], eax
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x590], edx
cmp dword [ebp - 0x590], 0
je 0x40c07b
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x590]
push ecx
call fcn.0044aa20
add esp, 8
lea edx, [ebp - 0x560]
push edx
mov eax, dword [ebp - 0x590]
push eax
call fcn.0044aa30
add esp, 8
push 0x48e1f4
mov ecx, dword [ebp - 0x590]
push ecx
call fcn.0044aa30
add esp, 8
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x590]
push eax
mov ecx, dword [ebp - 0x5bc]
call fcn.0040be20
mov ecx, dword [ebp - 0x590]
mov dword [ebp - 0x5a8], ecx
mov edx, dword [ebp - 0x5a8]
push edx
call fcn.0044a9ac
add esp, 4
jmp 0x40c267
mov eax, dword [ebp + 8]
push eax
call fcn.0044ab20
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x560]
push ecx
call fcn.0044ab20
add esp, 4
lea edx, [esi + eax + 3]
push edx
call fcn.00448fa1
add esp, 4
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0
je 0x40c267
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x594]
push edx
call fcn.0044aa20
add esp, 8
push 0x48e1f4
mov eax, dword [ebp - 0x594]
push eax
call fcn.0044aa30
add esp, 8
lea ecx, [ebp - 0x560]
push ecx
mov edx, dword [ebp - 0x594]
push edx
call fcn.0044aa30
add esp, 8
mov eax, dword [ebp - 0x594]
push eax
push 0x482c30
lea ecx, [ebp - 0x444]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x444]
push eax
call fcn.0040bd10
add esp, 8
push str._rc2_
lea ecx, [ebp - 0x444]
push ecx
call fcn.0040c2b0
add esp, 8
test eax, eax
jne 0x40c168
push str._rc_
lea edx, [ebp - 0x444]
push edx
call fcn.0040c2b0
add esp, 8
test eax, eax
je 0x40c18a
lea eax, [ebp - 0x560]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push str._src_s
lea edx, [ebp - 0x33c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x40c1aa
lea eax, [ebp - 0x560]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x482c10
lea edx, [ebp - 0x33c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x33c]
push ecx
call fcn.0040bd10
add esp, 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jle 0x40c23f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b0], esp
lea edx, [ebp - 0x33c]
push edx
call fcn.00418640
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b4], esp
lea edx, [ebp - 0x444]
push edx
call fcn.00418640
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0041b690
add esp, 0x30
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x5b8], ecx
mov edx, dword [ebp - 0x5b8]
push edx
call fcn.0044a9ac
add esp, 4
lea eax, [ebp - 0x58c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x120], eax
jmp 0x40bf9c
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00449ce2
mov esp, ebp
pop ebp
ret 8