Function at 0x48d620
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov edx, eax
xor eax, eax
mov ecx, 0x40
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x458]
lea esi, [ebp - 0x458]
push ebx
lea ebx, [ebp - 0x358]
sub esp, 0x4ec
mov word [ebp - 0x4bb], ax
xor eax, eax
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x358]
mov ecx, 0x40
mov byte [ebp - 0x4b9], 0
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x258]
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x4bb]
lea eax, [ebp - 0x258]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov eax, dword [edx]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__splitpath]
mov dword [esp], edi
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x4b8], eax
call sub.msvcrt.dll_strlen
mov byte [esp + 8], 0
lea ecx, [ebp - 0x4b8]
add eax, edi
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.005465a0
mov edx, esi
sub esp, 0xc
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x48d6cc
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x7fffffff
sbb edx, 3
sub eax, dword [ebp - 0x4b4]
sub edx, esi
cmp edx, eax
ja 0x48da7c
mov dword [esp + 4], edx
lea ecx, [ebp - 0x4b8]
mov dword [esp], esi
call fcn.004e3cf8
lea eax, [ebp - 0x498]
mov edx, dword [ebp - 0x4b4]
sub esp, 8
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4b8]
mov byte [esp + 8], 0
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00546660
sub esp, 0xc
mov edx, ebx
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x48d75c
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x7fffffff
sbb edx, 3
sub eax, dword [ebp - 0x49c]
sub edx, ebx
cmp edx, eax
ja 0x48da70
mov dword [esp + 4], edx
lea ecx, [ebp - 0x4a0]
mov dword [esp], ebx
call fcn.004e3cf8
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x49c]
sub esp, 8
cmp eax, 1
jbe 0x48da88
mov dword [esp + 4], 2
lea ecx, [ebp - 0x4a0]
mov dword [esp], 0xc821d2
call fcn.004e3cf8
mov eax, dword [ebp - 0x4a0]
sub esp, 8
lea esi, [ebp - 0x158]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
sub esp, 8
mov ebx, eax
cmp eax, 0xffffffff
je 0x48da55
mov byte [esp + 8], 0
lea eax, [ebp - 0x480]
lea ecx, [ebp - 0x488]
mov dword [esp + 4], 0xc8218f
mov dword [esp], 0xc8218f
mov dword [ebp - 0x488], eax
call fcn.005465a0
sub esp, 0xc
jmp 0x48d8c6
mov dword [ebp - 0x484], edi
mov edi, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x480], edi
test eax, eax
je 0x48d9bc
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x468], ecx
mov dword [ebp - 0x46c], 0
lea edi, [ebp - 0x468]
mov byte [eax], 0
mov eax, dword [ebp - 0x470]
cmp eax, edi
je 0x48d898
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x488]
mov dword [esp], eax
call sub.msvcrt.dll_remove
test eax, eax
jne 0x48da60
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
sub esp, 8
test eax, eax
je 0x48d9f2
test byte [ebp - 0x158], 0x10
jne 0x48d8ae
cmp byte [ebp - 0x12c], 0x2e
je 0x48d8ae
lea eax, [ebp - 0x468]
mov edx, dword [ebp - 0x4b4]
mov byte [esp + 8], 0
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x4b8]
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00546660
lea edi, [ebp - 0x12c]
sub esp, 0xc
mov edx, edi
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x48d914
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x7fffffff
sbb edx, 3
sub eax, dword [ebp - 0x46c]
sub edx, edi
cmp edx, eax
ja 0x48da64
mov dword [esp + 4], edx
lea ecx, [ebp - 0x470]
mov dword [esp], edi
call fcn.004e3cf8
mov edx, dword [ebp - 0x470]
lea edi, [ebp - 0x468]
sub esp, 8
mov eax, dword [ebp - 0x488]
cmp edx, edi
je 0x48d9d0
mov ecx, dword [ebp - 0x468]
mov edi, dword [ebp - 0x46c]
mov dword [ebp - 0x4cc], ecx
lea ecx, [ebp - 0x480]
cmp eax, ecx
jne 0x48d841
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x484], edi
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x468]
mov dword [ebp - 0x470], eax
jmp 0x48d873
lea eax, [ebp - 0x470]
lea ecx, [ebp - 0x488]
mov dword [esp], eax
call fcn.004e3cf0
mov eax, dword [ebp - 0x470]
sub esp, 4
jmp 0x48d873
mov esi, 1
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x488]
lea ebx, [ebp - 0x480]
sub esp, 4
cmp eax, ebx
je 0x48da1b
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x4a0]
lea ebx, [ebp - 0x498]
cmp eax, ebx
je 0x48da33
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x4b8]
lea ebx, [ebp - 0x4b0]
cmp eax, ebx
je 0x48da4b
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, 1
jmp 0x48da1b
xor esi, esi
jmp 0x48d9f7
mov dword [esp], 0xc82190
call fcn.004e3bd8
mov dword [esp], 0xc82190
call fcn.004e3bd8
mov dword [esp], 0xc82190
call fcn.004e3bd8
mov dword [esp], 0xc82190
call fcn.004e3bd8
mov ebx, eax
jmp 0x54fbda
mov eax, dword [ebp - 0x4b8]
lea esi, [ebp - 0x4b0]
cmp eax, esi
je 0x54fbf2
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov dword [esp], ebx
call sub.libgcc_s_dw2_1.dll__Unwind_Resume
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x214]
cmp eax, edx
je 0x54fc12
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x2f8]
je 0x54fc28
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov ecx, dword [ebp - 0x2f4]
call fcn.00499140
mov dword [esp], ebx
call sub.libgcc_s_dw2_1.dll__Unwind_Resume
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [ebp - 0x2f0]
jne 0x54fc20
jmp 0x54fc28