Function at 0x1070e70
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xca8
mov eax, dword [0x10d0620]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
xor ebx, ebx
push 0x24c
lea eax, [ebp - 0xc84]
push ebx
push eax
mov dword [ebp - 0xc9c], esi
mov dword [ebp - 0xc8c], edi
mov dword [ebp - 0xc88], ebx
call sub.msvcrt.dll_memset
push 0x106ee1d
push 4
push dword [ebp + 0x10]
mov dword [ebp - 0xc90], ebx
push edi
mov dword [ebp - 0xc94], ebx
call dword [sym.imp.msvcrt.dll_qsort]
add esp, 0x1c
push esi
xor eax, eax
mov word [ebp - 0x61c], ax
mov esi, 0x104
push esi
lea eax, [ebp - 0x61c]
push eax
call fcn.0102e082
mov edi, eax
test edi, edi
je 0x1070efe
push edi
push 0x10d9013b
jmp 0x1070f37
push esi
lea eax, [ebp - 0x61c]
push eax
call fcn.010704fe
mov edi, eax
test edi, edi
je 0x1070f19
push edi
push 0x10dc013b
jmp 0x1070f37
push 0x1013ba8
push esi
lea eax, [ebp - 0x61c]
push eax
call fcn.0102e0bc
mov edi, eax
test edi, edi
je 0x1070f50
push edi
push 0x10df013b
call fcn.0108c55a
test edi, edi
je 0x1070f50
push edi
push 0x1329013b
call fcn.0108c55a
jmp 0x1071403
lea eax, [ebp - 0xc88]
push eax
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xc98], eax
cmp eax, 0xffffffff
jne 0x1070f97
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
je 0x10713cf
cmp eax, 2
je 0x10713cf
push eax
call fcn.01091f0e
mov edi, eax
push edi
push 0x1338013b
jmp 0x1070f46
test dword [ebp - 0xc88], 0x10
jne 0x1071098
xor eax, eax
cmp ax, word [ebp - 0xc5c]
je 0x1071098
push 0x106ee1d
push 4
push dword [ebp + 0x10]
lea eax, [ebp - 0xc5c]
push dword [ebp - 0xc8c]
mov dword [ebp - 0xca0], eax
lea eax, [ebp - 0xca0]
push eax
call dword [sym.imp.msvcrt.dll_bsearch]
add esp, 0x14
test eax, eax
jne 0x1071098
lea eax, [ebp - 0xc5c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1070ff3
sub eax, edx
sar eax, 1
lea esi, [eax + 1]
test ebx, ebx
jne 0x107102c
push 4
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc90], eax
test eax, eax
jne 0x107105c
mov edi, 0x8007000e
push edi
push 0x1355013b
jmp 0x10713e9
cmp ebx, 0xf4240
jae 0x1071167
push 0x42
lea eax, [ebx*4 + 4]
push eax
push dword [ebp - 0xc90]
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
test eax, eax
je 0x107113c
mov dword [ebp - 0xc90], eax
lea eax, [esi + esi]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [ebp - 0xc90]
mov dword [ecx + ebx*4], eax
test eax, eax
je 0x107114c
lea ecx, [ebp - 0xc5c]
push ecx
push esi
push eax
call fcn.0102e082
mov edi, eax
inc ebx
mov dword [ebp - 0xc94], ebx
test edi, edi
jne 0x107115c
lea eax, [ebp - 0xc88]
push eax
push dword [ebp - 0xc98]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1070f97
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x10713db
test ebx, ebx
je 0x10713cf
mov esi, 0x1004310
push esi
call fcn.0109c1a8
cmp dword [0x10d2280], 1
pop ecx
jle 0x10712c5
and dword [ebp - 0xc8c], 0
test ebx, ebx
jbe 0x10713c8
mov esi, 0x208
mov ecx, dword [ebp - 0xc8c]
push dword [ebp - 0xc9c]
lea eax, [ebp - 0x414]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0xc90]
mov ebx, dword [eax + ecx*4]
xor eax, eax
mov word [ebp - 0x414], ax
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0102e082
mov edi, eax
test edi, edi
je 0x1071177
push edi
push 0x10d9013b
jmp 0x10711ac
mov edi, 0x8007000e
push edi
push 0x1364013b
jmp 0x10713e9
mov edi, 0x8007000e
push edi
push 0x1375013b
jmp 0x10713e9
push edi
push 0x137f013b
jmp 0x10713e9
mov edi, 0x80070216
push edi
push 0x136c013b
jmp 0x10713e9
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.010704fe
mov edi, eax
test edi, edi
je 0x1071192
push edi
push 0x10dc013b
jmp 0x10711ac
push ebx
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0102e0bc
mov edi, eax
test edi, edi
je 0x10711b9
push edi
push 0x10df013b
call fcn.0108c55a
test edi, edi
jne 0x1071276
lea eax, [ebp - 0x414]
push eax
push 0x30c
call fcn.0108bc14
push eax
push 0x100cfc4
call fcn.0109c1a8
add esp, 0xc
lea eax, [ebp - 0xca4]
push eax
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0102ec4a
mov edi, eax
test edi, edi
jne 0x1071281
mov eax, dword [ebp - 0xca4]
inc eax
cmp eax, 0x104
jbe 0x1071243
push 0x1013b9c
mov ebx, 0x20d
push ebx
lea eax, [ebp - 0xa38]
push eax
call fcn.0102e082
mov edi, eax
test edi, edi
jne 0x107128c
lea eax, [ebp - 0x414]
push eax
push ebx
lea eax, [ebp - 0xa38]
push eax
call fcn.0102e0bc
mov edi, eax
test edi, edi
jne 0x1071297
lea ebx, [ebp - 0xa38]
jmp 0x1071249
mov ebx, dword [ebp - 0xca8]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x10712a2
inc dword [ebp - 0xc8c]
mov eax, dword [ebp - 0xc8c]
cmp eax, dword [ebp - 0xc94]
jb 0x10710f7
mov esi, 0x1004310
jmp 0x10713c8
push edi
push 0x13a4013b
jmp 0x10713e9
push edi
push 0x13ac013b
jmp 0x10713e9
push edi
push 0x13b4013b
jmp 0x10713e9
push edi
push 0x13b7013b
jmp 0x10713e9
call fcn.01091f43
push ebx
mov edi, eax
push edi
push 0
push 0
call fcn.0108bcf3
push edi
push 0x13bf013b
push ebx
call fcn.0108c595
jmp 0x10713ee
push 0xb08
call fcn.0108bc14
push eax
call fcn.0109c1a8
push esi
call fcn.0109c1a8
and dword [ebp - 0xc8c], 0
pop ecx
pop ecx
test ebx, ebx
jbe 0x1071398
mov esi, 0x208
mov eax, dword [ebp - 0xc90]
mov ecx, dword [ebp - 0xc8c]
mov ebx, dword [eax + ecx*4]
push dword [ebp - 0xc9c]
xor eax, eax
mov word [ebp - 0x414], ax
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0102e082
mov edi, eax
test edi, edi
je 0x107132a
push edi
push 0x10d9013b
jmp 0x107135f
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.010704fe
mov edi, eax
test edi, edi
je 0x1071345
push edi
push 0x10dc013b
jmp 0x107135f
push ebx
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0102e0bc
mov edi, eax
test edi, edi
je 0x1071368
push edi
push 0x10df013b
call fcn.0108c55a
test edi, edi
jne 0x10713d3
lea eax, [ebp - 0x414]
push eax
push 0x1001d5c
call fcn.0109c1a8
inc dword [ebp - 0xc8c]
mov eax, dword [ebp - 0xc8c]
pop ecx
pop ecx
cmp eax, dword [ebp - 0xc94]
jb 0x10712f1
mov esi, 0x1004310
push esi
call fcn.0109c1a8
mov dword [esp], 0x100409c
push 0x1007398
push 0x1013b90
push 0xb09
call fcn.0108bc14
push eax
call fcn.0109c1a8
push esi
call fcn.0109c1a8
add esp, 0x14
push esi
call fcn.0109c1a8
pop ecx
xor edi, edi
jmp 0x10713ee
push edi
push 0x13d3013b
jmp 0x10713e9
push eax
call fcn.01091f0e
mov edi, eax
push edi
push 0x138d013b
call fcn.0108c55a
cmp dword [ebp - 0xc98], 0xffffffff
je 0x1071403
push dword [ebp - 0xc98]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
xor ebx, ebx
cmp dword [ebp - 0xc94], ebx
jbe 0x1071427
mov eax, dword [ebp - 0xc90]
push dword [eax + ebx*4]
call esi
inc ebx
cmp ebx, dword [ebp - 0xc94]
jb 0x1071413
push dword [ebp - 0xc90]
call esi
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01077dc7
leave
ret 0xc