Function at 0x48e4f0
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov edx, eax
xor eax, eax
mov ecx, 0x40
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x458]
lea esi, [ebp - 0x458]
push ebx
lea ebx, [ebp - 0x358]
sub esp, 0x4ec
mov word [ebp - 0x4bb], ax
xor eax, eax
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x358]
mov ecx, 0x40
mov byte [ebp - 0x4b9], 0
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x258]
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x4bb]
lea eax, [ebp - 0x258]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov eax, dword [edx]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__splitpath]
mov dword [esp], edi
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x4b8], eax
call sub.msvcrt.dll_strlen
mov byte [esp + 8], 0
lea ecx, [ebp - 0x4b8]
add eax, edi
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00547520
mov edx, esi
sub esp, 0xc
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x48e59c
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x7fffffff
sbb edx, 3
sub eax, dword [ebp - 0x4b4]
sub edx, esi
cmp edx, eax
ja 0x48e94c
mov dword [esp + 4], edx
lea ecx, [ebp - 0x4b8]
mov dword [esp], esi
call fcn.004e4bc8
lea eax, [ebp - 0x498]
mov edx, dword [ebp - 0x4b4]
sub esp, 8
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4b8]
mov byte [esp + 8], 0
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.005475e0
sub esp, 0xc
mov edx, ebx
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x48e62c
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x7fffffff
sbb edx, 3
sub eax, dword [ebp - 0x49c]
sub edx, ebx
cmp edx, eax
ja 0x48e940
mov dword [esp + 4], edx
lea ecx, [ebp - 0x4a0]
mov dword [esp], ebx
call fcn.004e4bc8
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x49c]
sub esp, 8
cmp eax, 1
jbe 0x48e958
mov dword [esp + 4], 2
lea ecx, [ebp - 0x4a0]
mov dword [esp], 0xc833f2
call fcn.004e4bc8
mov eax, dword [ebp - 0x4a0]
sub esp, 8
lea esi, [ebp - 0x158]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
sub esp, 8
mov ebx, eax
cmp eax, 0xffffffff
je 0x48e925
mov byte [esp + 8], 0
lea eax, [ebp - 0x480]
lea ecx, [ebp - 0x488]
mov dword [esp + 4], 0xc833af
mov dword [esp], 0xc833af
mov dword [ebp - 0x488], eax
call fcn.00547520
sub esp, 0xc
jmp 0x48e796
mov dword [ebp - 0x484], edi
mov edi, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x480], edi
test eax, eax
je 0x48e88c
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x468], ecx
mov dword [ebp - 0x46c], 0
lea edi, [ebp - 0x468]
mov byte [eax], 0
mov eax, dword [ebp - 0x470]
cmp eax, edi
je 0x48e768
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x488]
mov dword [esp], eax
call sub.msvcrt.dll_remove
test eax, eax
jne 0x48e930
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
sub esp, 8
test eax, eax
je 0x48e8c2
test byte [ebp - 0x158], 0x10
jne 0x48e77e
cmp byte [ebp - 0x12c], 0x2e
je 0x48e77e
lea eax, [ebp - 0x468]
mov edx, dword [ebp - 0x4b4]
mov byte [esp + 8], 0
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x4b8]
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.005475e0
lea edi, [ebp - 0x12c]
sub esp, 0xc
mov edx, edi
mov ecx, dword [edx]
add edx, 4
lea eax, [ecx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x48e7e4
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea ecx, [edx + 2]
cmove edx, ecx
mov ecx, eax
add cl, al
mov eax, 0x7fffffff
sbb edx, 3
sub eax, dword [ebp - 0x46c]
sub edx, edi
cmp edx, eax
ja 0x48e934
mov dword [esp + 4], edx
lea ecx, [ebp - 0x470]
mov dword [esp], edi
call fcn.004e4bc8
mov edx, dword [ebp - 0x470]
lea edi, [ebp - 0x468]
sub esp, 8
mov eax, dword [ebp - 0x488]
cmp edx, edi
je 0x48e8a0
mov ecx, dword [ebp - 0x468]
mov edi, dword [ebp - 0x46c]
mov dword [ebp - 0x4cc], ecx
lea ecx, [ebp - 0x480]
cmp eax, ecx
jne 0x48e711
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x484], edi
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x468]
mov dword [ebp - 0x470], eax
jmp 0x48e743
lea eax, [ebp - 0x470]
lea ecx, [ebp - 0x488]
mov dword [esp], eax
call fcn.004e4bc0
mov eax, dword [ebp - 0x470]
sub esp, 4
jmp 0x48e743
mov esi, 1
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x488]
lea ebx, [ebp - 0x480]
sub esp, 4
cmp eax, ebx
je 0x48e8eb
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x4a0]
lea ebx, [ebp - 0x498]
cmp eax, ebx
je 0x48e903
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x4b8]
lea ebx, [ebp - 0x4b0]
cmp eax, ebx
je 0x48e91b
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, 1
jmp 0x48e8eb
xor esi, esi
jmp 0x48e8c7
mov dword [esp], 0xc833b0
call fcn.004e4aa8
mov dword [esp], 0xc833b0
call fcn.004e4aa8
mov dword [esp], 0xc833b0
call fcn.004e4aa8
mov dword [esp], 0xc833b0
call fcn.004e4aa8
mov ebx, eax
jmp 0x550b6a
mov eax, dword [ebp - 0x4b8]
lea esi, [ebp - 0x4b0]
cmp eax, esi
je 0x550b82
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov dword [esp], ebx
call sub.libgcc_s_dw2_1.dll__Unwind_Resume
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x214]
cmp eax, edx
je 0x550ba2
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x2f8]
je 0x550bb8
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov ecx, dword [ebp - 0x2f4]
call fcn.0049a010
mov dword [esp], ebx
call sub.libgcc_s_dw2_1.dll__Unwind_Resume
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [ebp - 0x2f0]
jne 0x550bb0
jmp 0x550bb8