Function at 0x140004ff0
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push rbp
sub rsp, 0xa0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x18], 0xfffffffffffffffe
mov qword [rbp + 0x10], rcx
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000503e
jmp 0x140005929
mov rcx, qword [rbp + 0x10]
mov eax, 0x10
mov qword [rbp - 0x28], rax
call fcn.1400451b0
sub rsp, rax
mov rax, rsp
mov qword [rbp], rax
mov eax, 0x20
mov qword [rbp - 0x10], rax
call fcn.1400451b0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov eax, 0x140
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rdx, rsp
mov qword [rbp - 0x30], rdx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rdx, rsp
mov qword [rbp - 0x20], rdx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x10]
mov rdx, rsp
mov qword [rbp - 0x18], rdx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x10]
mov rdx, rsp
mov qword [rbp - 8], rdx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp]
mov rdx, rsp
mov qword [rbp + 8], rdx
mov qword [rax], rcx
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000510b
jmp 0x140005929
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000513d
jmp 0x140005945
mov rcx, qword [rbp - 0x38]
mov rax, qword [rbp]
mov rdx, qword [rax]
lea r8, str..
sub rsp, 0x20
call fcn.140008a40
mov rcx, qword [rbp - 0x38]
call fcn.140007a90
mov rdx, qword [rbp - 0x30]
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x20]
mov qword [rax], rcx
mov rcx, 0xffffffffffffffff
cmp qword [rax], rcx
sete al
mov byte [rbp - 0x39], al
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400051c6
jmp 0x140005945
mov al, byte [rbp - 0x39]
test al, 1
jne 0x1400051d6
jmp 0x1400052ad
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005208
jmp 0x140005991
mov rax, qword [rbp - 0x18]
mov dword [rax], 1
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005244
jmp 0x140005991
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005276
jmp 0x1400059a0
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400052a8
jmp 0x1400059a0
jmp 0x1400058ae
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400052df
jmp 0x1400059a5
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005311
jmp 0x1400059a5
jmp 0x140005316
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005348
jmp 0x1400059aa
mov rax, qword [rbp - 0x30]
add rax, 0x2c
mov qword [rbp - 0x48], rax
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005386
jmp 0x1400059aa
mov rcx, qword [rbp - 0x48]
sub rsp, 0x20
lea rdx, [0x1400469f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add rsp, 0x20
cmp eax, 0
je 0x140005734
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400053d9
jmp 0x1400059af
mov rax, qword [rbp - 0x30]
add rax, 0x2c
mov qword [rbp - 0x50], rax
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005417
jmp 0x1400059af
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005449
jmp 0x1400059b4
mov rcx, qword [rbp - 0x50]
sub rsp, 0x20
lea rdx, [0x1400469ef]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add rsp, 0x20
cmp eax, 0
setne al
mov byte [rbp - 0x51], al
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000549c
jmp 0x1400059b4
mov al, byte [rbp - 0x51]
test al, 1
jne 0x1400054ac
jmp 0x140005734
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400054de
jmp 0x1400059d1
mov rax, qword [rbp - 0x30]
add rax, 0x2c
mov qword [rbp - 0x60], rax
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000551c
jmp 0x1400059d1
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000554e
jmp 0x1400059d6
mov rax, qword [rbp]
mov rax, qword [rax]
mov qword [rbp - 0x68], rax
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000558b
jmp 0x1400059d6
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp + 8]
sub rsp, 0x20
lea r8, [0x1400469c0]
call fcn.140008a40
add rsp, 0x20
jmp 0x1400055ac
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400055de
jmp 0x1400059db
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005610
jmp 0x1400059db
mov r8, qword [rbp - 0x60]
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp - 8]
sub rsp, 0x20
call fcn.140009160
add rsp, 0x20
jmp 0x14000562e
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005660
jmp 0x1400059e0
mov rcx, qword [rbp + 8]
sub rsp, 0x20
call fcn.1400066e0
mov rcx, qword [rbp - 8]
call fcn.140007a90
add rsp, 0x20
mov qword [rbp - 0x70], rax
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400056b0
jmp 0x1400059e0
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400056e2
jmp 0x1400059ff
mov rcx, qword [rbp - 0x70]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rbp - 8]
call fcn.1400066e0
add rsp, 0x20
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000572f
jmp 0x1400059ff
jmp 0x140005734
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005766
jmp 0x140005a1f
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005798
jmp 0x140005a1f
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400057ca
jmp 0x140005a24
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov qword [rbp - 0x78], rax
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005807
jmp 0x140005a24
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x78]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
add rsp, 0x20
cmp eax, 0
jne 0x140005316
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005858
jmp 0x140005a29
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindClose]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400058a9
jmp 0x140005a29
jmp 0x1400058ae
mov rcx, qword [rbp - 0x38]
sub rsp, 0x20
call fcn.1400066e0
add rsp, 0x20
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400058f1
jmp 0x140005a4d
mov eax, dword [0x14004936c]
mov ecx, dword [0x140049370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005923
jmp 0x140005a4d
lea rsp, [rbp + 0x20]
pop rbp
ret
mov rcx, qword [rbp + 0x10]
mov eax, 0x10
call fcn.1400451b0
sub rsp, rax
mov rax, rsp
mov qword [rax], rcx
jmp 0x14000503e
mov rcx, qword [rbp - 0x38]
mov rax, qword [rbp]
mov rdx, qword [rax]
lea r8, str..
sub rsp, 0x20
call fcn.140008a40
mov rcx, qword [rbp - 0x38]
call fcn.140007a90
mov rdx, qword [rbp - 0x30]
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x20]
mov qword [rax], rcx
jmp 0x14000513d
mov rax, qword [rbp - 0x18]
mov dword [rax], 1
jmp 0x140005208
jmp 0x140005276
jmp 0x1400052df
jmp 0x140005348
jmp 0x1400053d9
mov rcx, qword [rbp - 0x50]
sub rsp, 0x20
lea rdx, [0x1400469ef]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add rsp, 0x20
jmp 0x140005449
jmp 0x1400054de
jmp 0x14000554e
jmp 0x1400055de
mov rcx, qword [rbp + 8]
sub rsp, 0x20
call fcn.1400066e0
mov rcx, qword [rbp - 8]
call fcn.140007a90
add rsp, 0x20
jmp 0x140005660
mov rcx, qword [rbp - 0x70]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rbp - 8]
call fcn.1400066e0
add rsp, 0x20
jmp 0x1400056e2
jmp 0x140005766
jmp 0x1400057ca
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindClose]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0
jmp 0x140005858
jmp 0x1400058f1