Function at 0x140089ac4
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rax
pushf
mov eax, 0x2600fe8b
pushf
not eax
add eax, 0x5f8809fc
xor eax, 0x1a7b437a
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x45bb0ece
xor eax, 0x33b885ce
rol eax, 0xb5
popf
cmp eax, 0xa
jne 0x140089b01
popf
pop rax
jmp 0x14008a298
cmp eax, 5
jne 0x140089b10
popf
pop rax
jmp 0x140089f7d
cmp eax, 0x12
jne 0x140089b1f
popf
pop rax
jmp 0x14008a6b3
cmp eax, 3
jne 0x140089b2e
popf
pop rax
jmp 0x140089e63
cmp eax, 0xc
jne 0x140089b3d
popf
pop rax
jmp 0x14008a3c0
cmp eax, 7
jne 0x140089b4c
popf
pop rax
jmp 0x14008a0c5
cmp eax, 0xd
jne 0x140089b5b
popf
pop rax
jmp 0x14008a42d
cmp eax, 9
jne 0x140089b6a
popf
pop rax
jmp 0x14008a22a
cmp eax, 0x10
jne 0x140089b79
popf
pop rax
jmp 0x14008a590
cmp eax, 0xe
jne 0x140089b88
popf
pop rax
jmp 0x14008a498
cmp eax, 0
jne 0x140089b97
popf
pop rax
jmp 0x140089c0f
cmp eax, 6
jne 0x140089ba6
popf
pop rax
jmp 0x14008a021
cmp eax, 0xb
jne 0x140089bb5
popf
pop rax
jmp 0x14008a317
cmp eax, 4
jne 0x140089bc4
popf
pop rax
jmp 0x140089eff
cmp eax, 0xf
jne 0x140089bd3
popf
pop rax
jmp 0x14008a4da
cmp eax, 0x11
jne 0x140089be2
popf
pop rax
jmp 0x14008a609
cmp eax, 1
jne 0x140089bf1
popf
pop rax
jmp 0x140089d63
cmp eax, 8
jne 0x140089c00
popf
pop rax
jmp 0x14008a159
cmp eax, 2
jne 0x140089c0f
popf
pop rax
jmp 0x140089e08
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x2b38492b
pushf
not eax
add eax, 0x63575915
xor eax, 0xa9fbcee
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x64adbf8c
xor eax, 0x385a2b2f
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x347bf675
xor eax, 0x6c15174e
rol eax, 0x25
popf
call fcn.14009bcb8
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x2270], rax
mov rbp, rcx
lea r8, [0x1a1b88325]
pushf
sub r8, 0x61b5a9c5
popf
mov r9, rcx
mov ebx, 0x230c3b06
pushf
not ebx
add ebx, 0x3eed2ac0
xor ebx, 0x49ff00cd
rol ebx, 0xf1
popf
pushf
not ebx
add ebx, 0xb37c702
xor ebx, 0x2c4b22c2
rol ebx, 0xfa
popf
mov edx, ebx
lea rcx, [rsp + 0x270]
call fcn.14006f690
mov edi, eax
cmp eax, ebx
jge 0x140089d1c
push rax
pushf
mov eax, 0x4ef9e3fd
pushf
not eax
add eax, 0x418ad4b9
xor eax, 0x23ff73fa
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa45d627
xor eax, 0x747d2f53
rol eax, 1
popf
pushf
not eax
add eax, 0x18dd85b7
xor eax, 0x3d1c1c62
rol eax, 9
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x3db1ec53
pushf
not eax
add eax, 0x591ef323
xor eax, 0x31962716
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x57869c9e
xor eax, 0x256de463
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x363a0d6
xor eax, 0x276740a1
rol eax, 0xb0
popf
jmp 0x140089af2
dec edi
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x270]
push rdi
not edi
add ebx, edi
pop rdi
add ebx, 1
jmp 0x140089d7c
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140089dc2
push rax
pushf
mov eax, 0x7df4c230
pushf
not eax
add eax, 0x2cdb404e
xor eax, 0x156a0c65
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x36035203
xor eax, 0x7027ee6f
rol eax, 0xf1
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x99ffa27d
pushf
not eax
add eax, 0x20f6be56
xor eax, 0x78e965
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x641931dd
xor eax, 0xdc2ec70
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x75af0ae
xor eax, 0x4d4e4d0f
rol eax, 0xca
popf
jmp 0x140089af2
nop
push rax
pushf
mov eax, 0xb509fb46
pushf
not eax
add eax, 0x793b3fd0
xor eax, 0x5e4bc9c
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x30892d47
xor eax, 0x360b4b8a
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x50d7ba46
xor eax, 0x2d46b804
rol eax, 0xea
popf
pushf
not eax
add eax, 0x5995d483
xor eax, 0x12bc01c1
rol eax, 4
popf
jmp 0x140089af2
movzx edx, word [rsp + 0x4c]
movzx ecx, word [rsp + 0x4e]
cmp dx, 0x2e
jne 0x140089ea6
push rax
pushf
mov eax, 0x97cf74bd
pushf
not eax
add eax, 0x6ace3825
xor eax, 0x22ac00be
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x522cd0ef
xor eax, 0x148dcfc2
rol eax, 0xd8
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x8bdf227e
pushf
not eax
add eax, 0x5f73ed9b
xor eax, 0xcee4754
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x4b26381b
xor eax, 0x18fbb7df
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x5f140f6f
xor eax, 0x1838baf
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x3708b730
xor eax, 0x2e8c1f0
rol eax, 0x94
popf
jmp 0x140089af2
test cx, cx
je 0x140089f4a
push rax
pushf
mov eax, 0xc7a1fe2e
pushf
not eax
add eax, 0x6d344030
xor eax, 0x6c0ed5ca
rol eax, 0x86
popf
pushf
not eax
add eax, 0x21b904ed
xor eax, 0x13b4cd53
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x756fd6ab
xor eax, 0x282697cf
rol eax, 0xdf
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0xa109c696
pushf
not eax
add eax, 0x32136009
xor eax, 0x76f1e8dd
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x55facc8b
xor eax, 0x726d4d4a
rol eax, 0x83
popf
jmp 0x140089af2
cmp dx, dx
jne 0x140089fdb
push rax
pushf
mov eax, 0xbcbb5fe7
pushf
not eax
add eax, 0x38729b77
xor eax, 0x57d2e78e
rol eax, 0xe
popf
pushf
not eax
add eax, 0x52592975
xor eax, 0x35c2ca2f
rol eax, 0x17
popf
pushf
not eax
add eax, 0xda33d76
xor eax, 0x21a5cb5f
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x1e2ba993
xor eax, 0x7a9737b9
rol eax, 7
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0xbc63cb5c
pushf
not eax
add eax, 0x11d735d9
xor eax, 0x325ce2e
rol eax, 0xea
popf
pushf
not eax
add eax, 0x70cf0ab1
xor eax, 0x3af814ff
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xeef9001
xor eax, 0x59c9f746
rol eax, 0xae
popf
jmp 0x140089af2
cmp cx, dx
jne 0x14008a07f
push rax
pushf
mov eax, 0xa5bbf489
pushf
not eax
add eax, 0x41f07c36
xor eax, 0x5e2fd1b9
rol eax, 0x75
popf
pushf
not eax
add eax, 0x4fddb636
xor eax, 0xd27f7ba
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x66470605
xor eax, 0x4526d425
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x14429b62
xor eax, 0x4154f24e
rol eax, 0x4e
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x4f6c4781
pushf
not eax
add eax, 0xbe07df0
xor eax, 0x63e51a68
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x593ec55e
xor eax, 0x35f68b24
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x77be75bd
xor eax, 0x1505e539
rol eax, 0x2a
popf
jmp 0x140089af2
cmp word [rsp + 0x50], 0
je 0x14008a113
push rax
pushf
mov eax, 0xbf06e368
pushf
not eax
add eax, 0x767320b7
xor eax, 0x1302054
rol eax, 0x17
popf
pushf
not eax
add eax, 0x7999416c
xor eax, 0x4335f601
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x277c1b40
xor eax, 0x5c0b5cea
rol eax, 0xac
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x46eefe3
pushf
not eax
add eax, 0x26180eaa
xor eax, 0xf023456
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x343d2cfa
xor eax, 0x5a794a3e
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x46743576
xor eax, 0x54e041c1
rol eax, 0xfd
popf
jmp 0x140089af2
movsxd rax, edi
lea rcx, [rsp + 0x270]
movsxd rdx, ebx
lea r9, [rsp + 0x4c]
lea r8, [0x19da03285]
pushf
sub r8, 0x5d9d5919
popf
lea rcx, [rcx + rax*2]
call fcn.14006f690
cmp eax, ebx
jge 0x14008a1d1
push rax
pushf
mov eax, 0xf160f3cb
pushf
not eax
add eax, 0x6a2799fc
xor eax, 0x73e18a3
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x143124be
xor eax, 0x4ee8cddb
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x47f6aaa8
xor eax, 0x649e39f5
rol eax, 0xb3
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0xde9f8257
pushf
not eax
add eax, 0x7edc869e
xor eax, 0x4be353a4
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x478d1adf
xor eax, 0x54967116
rol eax, 0xd
popf
pushf
not eax
add eax, 0x3097aab9
xor eax, 0x79562661
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x7ee60a0c
xor eax, 0x5c658c85
rol eax, 0xfb
popf
jmp 0x140089af2
mov eax, dword [rsp + 0x20]
test al, 0x10
je 0x14008a265
push rax
pushf
mov eax, 0x12922f7
pushf
not eax
add eax, 0x19570114
xor eax, 0x4c0a1007
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x742f2713
xor eax, 0x200618f7
rol eax, 0x73
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0xdc7bcee6
pushf
not eax
add eax, 0x16783082
xor eax, 0x2299faac
rol eax, 0x96
popf
pushf
not eax
add eax, 0x289cbd71
xor eax, 0x5ad2e40a
rol eax, 0x51
popf
jmp 0x140089af2
bt eax, 0xa
jae 0x14008a2e4
push rax
pushf
mov eax, 0xf6748b46
pushf
not eax
add eax, 0x23a92fa
xor eax, 0x1352ffc1
rol eax, 0x20
popf
pushf
not eax
add eax, 0x276fc338
xor eax, 0x3947ac12
rol eax, 0x77
popf
pushf
not eax
add eax, 0x7b0a8fca
xor eax, 0xf6eed16
rol eax, 0x56
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0xe8fc188e
pushf
not eax
add eax, 0x7e93c67a
xor eax, 0x4f8e09f2
rol eax, 0x68
popf
pushf
not eax
add eax, 0x6398227a
xor eax, 0x49f4084f
rol eax, 0x5c
popf
jmp 0x140089af2
cmp dword [rsp + 0x44], 0xa000000c
jne 0x14008a37a
push rax
pushf
mov eax, 0x41299b62
pushf
not eax
add eax, 0x1c607d09
xor eax, 0x3d41886c
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x6b6406b7
xor eax, 0x2cfa8069
rol eax, 0x98
popf
pushf
not eax
add eax, 0x5584b5e8
xor eax, 0x24c62436
rol eax, 0x89
popf
pushf
not eax
add eax, 0x56e762f0
xor eax, 0x2fb3cb4e
rol eax, 0xec
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x452b04a4
pushf
not eax
add eax, 0x50a61912
xor eax, 0x31d95703
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x7837c40b
xor eax, 0xc27464
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x75c59f3a
xor eax, 0x7fee1512
rol eax, 0x32
popf
jmp 0x140089af2
lea rcx, [rsp + 0x270]
jmp 0x14008a3c9
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x14008a4da
lea rcx, [rsp + 0x270]
call fcn.140089ac4
jmp 0x14008a4da
lea rcx, [rsp + 0x270]
jmp 0x14008a4a1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
push rax
pushf
mov eax, 0x68363fe3
pushf
not eax
add eax, 0x7d149527
xor eax, 0x396bcaa1
rol eax, 0x82
popf
pushf
not eax
add eax, 0x28f736ba
xor eax, 0x7220b4f1
rol eax, 0x5a
popf
jmp 0x140089af2
lea rdx, [rsp + 0x20]
mov rcx, rsi
jmp 0x14008a4e3
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14008a54a
push rax
pushf
mov eax, 0x92071da3
pushf
not eax
add eax, 0x28be241f
xor eax, 0x7633365b
rol eax, 0x86
popf
pushf
not eax
add eax, 0x5563d77f
xor eax, 0x320c44ad
rol eax, 0x34
popf
pushf
not eax
add eax, 0x18f7ea34
xor eax, 0x480a4525
rol eax, 0x56
popf
pushf
not eax
add eax, 0x5db4d8f0
xor eax, 0x2630457f
rol eax, 0xa7
popf
jmp 0x140089af2
push rax
pushf
mov eax, 0x1aee3a51
pushf
not eax
add eax, 0x976dd73
xor eax, 0x7f3d045a
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x5dace903
xor eax, 0x723caa1b
rol eax, 0x17
popf
pushf
not eax
add eax, 0x4f02e995
xor eax, 0x77788da9
rol eax, 0x38
popf
jmp 0x140089af2
mov rcx, rsi
jmp 0x14008a594
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rbp
jmp 0x14008a59e
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x14008a5a5
dec eax
neg eax
sbb eax, eax
jmp 0x14008a6b3
mov eax, 0xbb9fd312
pushf
not eax
add eax, 0x4fd5c101
xor eax, 0x2d2589a1
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x79c6963d
xor eax, 0x474fc8a2
rol eax, 0xde
popf
pushf
not eax
add eax, 0x361746b1
xor eax, 0x71d75239
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x744b1c4e
xor eax, 0x38d7df0c
rol eax, 0xcb
popf
push rax
pushf
mov eax, 0x666804d5
pushf
not eax
add eax, 0x229518d4
xor eax, 0xa158850
rol eax, 0x45
popf
pushf
not eax
add eax, 0x3075756e
xor eax, 0x387b3c1e
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x11c8a88a
xor eax, 0x4a9f0195
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x4235722c
xor eax, 0x684db4fb
rol eax, 0xf6
popf
jmp 0x140089af2
mov rcx, qword [rsp + 0x2270]
xor rcx, rsp
call fcn.140098f5b
lea r11, [rsp + 0x2280]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret