Function at 0x48b340
Capabilities:
Copy file
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fe6cb
mov eax, dword fs:[0]
push eax
sub esp, 0x494
mov eax, dword [0x5552b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x216]
mov esi, edx
xor eax, eax
push ebx
push ecx
mov dword [ebp - 0x490], edi
mov dword [ebp - 0x494], esi
mov word [ebp - 0x218], ax
call fcn.004e8ba0
push 0x24c
lea edx, [ebp - 0x464]
push ebx
push edx
mov dword [ebp - 0x468], ebx
call fcn.004e8ba0
add esp, 0x18
lea eax, [ebp - 0x468]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x46c], eax
cmp eax, 0xffffffff
je 0x48b5bb
lea eax, [ebp - 0x43c]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x48b3e0
sub eax, edx
sar eax, 1
cmp eax, 8
jb 0x48b592
sub esp, 0x1c
mov ecx, esp
xor edx, edx
lea eax, [ebp - 0x43c]
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x498], esp
mov word [ecx], dx
lea esi, [eax + 2]
jmp 0x48b420
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x48b420
sub eax, esi
sar eax, 1
push eax
lea eax, [ebp - 0x43c]
call fcn.0048c0c0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], ebx
mov word [ecx], ax
mov eax, edi
mov dword [ebp - 0x49c], esp
lea esi, [eax + 2]
lea ecx, [ecx]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x48b460
sub eax, esi
sar eax, 1
push eax
mov eax, edi
call fcn.0048c0c0
mov dword [ebp - 4], 0xffffffff
call fcn.004b6fc0
add esp, 0x38
cmp eax, dword [0x562da4]
jl 0x48b592
push 0x208
lea ecx, [ebp - 0x218]
push ebx
push ecx
call fcn.004e8ba0
mov esi, dword [ebp - 0x494]
mov eax, esi
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x48b4b2
sub eax, edx
sar eax, 1
add eax, 0xfffffffd
push eax
lea edx, [ebp - 0x218]
push esi
push edx
call fcn.004e5481
lea eax, [ebp - 0x43c]
add esp, 0xc
mov edx, eax
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x48b4e0
lea edi, [ebp - 0x218]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x48b4f6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], eax
mov word [ebp - 0x470], ax
rep movsb byte es:[edi], byte [esi]
lea edx, [ebp - 0x48c]
lea eax, [ebp - 0x218]
mov ecx, 0x614
push edx
mov dword [ebp - 0x48c], ebx
mov dword [ebp - 0x488], 3
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], ebx
mov word [ebp - 0x47c], cx
mov dword [ebp - 0x47a], ebx
mov dword [ebp - 0x476], ebx
mov dword [ebp - 0x472], ebx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edi, dword [ebp - 0x490]
mov ecx, dword [ebp - 0x46c]
lea eax, [ebp - 0x468]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x48b3d3
mov edx, dword [ebp - 0x46c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e4746
mov esp, ebp
pop ebp
ret