Function at 0x140005280
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push rbp
sub rsp, 0x220
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x198], 0xfffffffffffffffe
mov qword [rbp + 0x190], rcx
mov rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x170]
lea r8, str..
call fcn.1400094c0
lea rcx, [rbp + 0x170]
call fcn.140008310
mov rcx, rax
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rbp + 0x28], rax
mov rax, 0xffffffffffffffff
cmp qword [rbp + 0x28], rax
sete al
mov byte [rbp - 0x21], al
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000531c
jmp 0x140005b8f
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000534e
jmp 0x140005b8f
mov al, byte [rbp - 0x21]
test al, 1
jne 0x14000535e
jmp 0x140005432
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005390
jmp 0x140005b94
mov dword [rbp + 0x24], 1
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400053c9
jmp 0x140005b94
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400053fb
jmp 0x140005ba0
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000542d
jmp 0x140005ba0
jmp 0x140005a4e
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005464
jmp 0x140005ba5
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005496
jmp 0x140005ba5
jmp 0x14000549b
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400054cd
jmp 0x140005baa
lea rax, [rbp + 0x30]
add rax, 0x2c
mov qword [rbp - 0x30], rax
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000550b
jmp 0x140005baa
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000553d
jmp 0x140005baf
mov rcx, qword [rbp - 0x30]
lea rdx, [0x140047a00]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
setne al
mov byte [rbp - 0x31], al
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005588
jmp 0x140005baf
mov al, byte [rbp - 0x31]
test al, 1
jne 0x140005598
jmp 0x1400058f5
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400055ca
jmp 0x140005bc4
lea rax, [rbp + 0x30]
add rax, 0x2c
mov qword [rbp - 0x40], rax
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005608
jmp 0x140005bc4
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000563a
jmp 0x140005bc9
mov rcx, qword [rbp - 0x40]
lea rdx, [0x1400479ff]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
setne al
mov byte [rbp - 0x41], al
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005685
jmp 0x140005bc9
mov al, byte [rbp - 0x41]
test al, 1
jne 0x140005695
jmp 0x1400058f5
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400056c7
jmp 0x140005bde
lea rax, [rbp + 0x30]
add rax, 0x2c
mov qword [rbp - 0x58], rax
mov rax, qword [rbp + 0x190]
mov qword [rbp - 0x50], rax
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005710
jmp 0x140005bde
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005742
jmp 0x140005be3
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005774
jmp 0x140005be3
mov rdx, qword [rbp - 0x50]
lea r8, [0x1400479d0]
lea rcx, [rbp - 0x20]
call fcn.1400094c0
jmp 0x14000578d
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400057bf
jmp 0x140005be8
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400057f1
jmp 0x140005be8
mov r8, qword [rbp - 0x58]
mov rcx, rbp
lea rdx, [rbp - 0x20]
call fcn.140009af0
jmp 0x140005806
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005838
jmp 0x140005bed
lea rcx, [rbp - 0x20]
call fcn.1400069b0
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005873
jmp 0x140005bed
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400058a5
jmp 0x140005bfb
mov rcx, rbp
call fcn.140008310
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, rbp
call fcn.1400069b0
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400058f0
jmp 0x140005bfb
jmp 0x1400058f5
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005927
jmp 0x140005c19
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005959
jmp 0x140005c19
mov rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 0
jne 0x14000549b
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400059a2
jmp 0x140005c1e
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rbp + 0x24], 0
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400059e5
jmp 0x140005c1e
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005a17
jmp 0x140005c34
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005a49
jmp 0x140005c34
jmp 0x140005a4e
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005a80
jmp 0x140005c39
lea rcx, [rbp + 0x170]
call fcn.1400069b0
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005abe
jmp 0x140005c39
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005af0
jmp 0x140005c4a
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005b22
jmp 0x140005c4a
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005b54
jmp 0x140005c4f
mov eax, dword [0x14004a36c]
mov ecx, dword [0x14004a370]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140005b86
jmp 0x140005c4f
add rsp, 0x220
pop rbp
ret
jmp 0x14000531c
mov dword [rbp + 0x24], 1
jmp 0x140005390
jmp 0x1400053fb
jmp 0x140005464
jmp 0x1400054cd
mov rcx, qword [rbp - 0x30]
lea rdx, [0x140047a00]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
jmp 0x14000553d
jmp 0x1400055ca
mov rcx, qword [rbp - 0x40]
lea rdx, [0x1400479ff]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
jmp 0x14000563a
jmp 0x1400056c7
jmp 0x140005742
jmp 0x1400057bf
lea rcx, [rbp - 0x20]
call fcn.1400069b0
jmp 0x140005838
mov rcx, rbp
call fcn.140008310
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, rbp
call fcn.1400069b0
jmp 0x1400058a5
jmp 0x140005927
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rbp + 0x24], 0
jmp 0x1400059a2
jmp 0x140005a17
lea rcx, [rbp + 0x170]
call fcn.1400069b0
jmp 0x140005a80
jmp 0x140005af0
jmp 0x140005b54