Function at 0x1104e179
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x4f0
mov eax, 0x1105ca64
call fcn.11056857
mov ebx, dword [ebp + 8]
xor edi, edi
xor eax, eax
mov dword [ebp - 0x238], edi
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov dword [ebp - 4], edi
test ebx, ebx
je 0x1104e1bb
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
push ebx
call esi
pop ecx
push eax
push ebx
jmp 0x1104e21f
mov ebx, 0x208
lea eax, [ebp - 0x218]
push ebx
push edi
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea eax, [ebp - 0x218]
push eax
call esi
pop ecx
jmp 0x1104e209
movzx ecx, word [ebp + eax*2 - 0x218]
cmp ecx, 0x5c
je 0x1104e23b
cmp ecx, 0x2f
je 0x1104e23b
dec eax
test eax, eax
jg 0x1104e1f6
lea eax, [ebp - 0x218]
push eax
call esi
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.11007e21
cmp dword [ebp - 0x238], 0
jne 0x1104e251
or edi, 0xffffffff
jmp 0x1104e2f5
add eax, eax
cmp eax, ebx
jae 0x1104e554
xor ecx, ecx
mov word [ebp + eax - 0x218], cx
jmp 0x1104e20d
lea eax, [ebp - 0x248]
mov dword [ebp - 0x220], edi
push eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], edi
call fcn.11043512
push 0x11069554
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.11046f0c
add esp, 0xc
lea ecx, [ebp - 0x230]
push eax
call fcn.11043f95
lea ecx, [ebp - 0x290]
call fcn.11007dbe
mov ebx, 0x1106c70c
push ebx
call esi
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x230]
call fcn.11046811
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x4f8]
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x4fc], esi
cmp esi, 0xffffffff
jne 0x1104e307
lea ecx, [ebp - 0x230]
call fcn.11007dbe
lea ecx, [ebp - 0x248]
call fcn.11007dbe
mov eax, edi
jmp 0x1104e54e
lea eax, [ebp - 0x4f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebx, edi
test eax, eax
je 0x1104e52f
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x290]
call fcn.110064d5
push 0x1106c714
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 2
call fcn.110466f7
test al, al
jne 0x1104e502
push 0x1106c718
lea ecx, [ebp - 0x290]
call fcn.110466f7
test al, al
jne 0x1104e502
test byte [ebp - 0x4f8], 0x10
je 0x1104e3e9
push 0x11069554
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.11046f0c
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 3
push ecx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.11043851
add esp, 0x18
lea ecx, [ebp - 0x230]
push eax
call fcn.11043f95
lea ecx, [ebp - 0x278]
call fcn.11007dbe
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.11007dbe
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.1104e179
pop ecx
add ebx, eax
jmp 0x1104e502
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x260]
call fcn.110064d5
mov eax, dword [ebp - 0x250]
mov byte [ebp - 4], 4
cmp eax, 4
jbe 0x1104e4f7
push 4
add eax, 0xfffffffc
mov dword [ebp - 0x268], edi
xor ecx, ecx
mov dword [ebp - 0x264], 7
push eax
lea eax, [ebp - 0x260]
mov word [ebp - 0x278], cx
push eax
lea ecx, [ebp - 0x278]
call fcn.110468f5
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x260]
call fcn.11043f95
lea ecx, [ebp - 0x278]
call fcn.11007dbe
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
push str..DLL
cmovae eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x1104e4f7
push 0x11069554
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.11046f0c
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 5
push ecx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.11043851
add esp, 0x18
lea ecx, [ebp - 0x230]
push eax
call fcn.11043f95
lea ecx, [ebp - 0x278]
call fcn.11007dbe
lea ecx, [ebp - 0x2a8]
call fcn.11007dbe
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1104e4f7
inc ebx
lea ecx, [ebp - 0x260]
call fcn.11007dbe
lea eax, [ebp - 0x4f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 1
mov esi, eax
call fcn.11007dbe
test esi, esi
mov esi, dword [ebp - 0x4fc]
jne 0x1104e31f
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x230]
call fcn.11007dbe
lea ecx, [ebp - 0x248]
call fcn.11007dbe
mov eax, ebx
call fcn.11056801
ret
call fcn.110576fe
int3