Function at 0x1000c270
Capabilities:
Delete file
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10121283
mov eax, dword fs:[0]
push eax
sub esp, 0x200
mov eax, dword [0x1015d2f0]
xor eax, esp
mov dword [esp + 0x1f8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1015d2f0]
xor eax, esp
push eax
lea eax, [esp + 0x214]
mov dword fs:[0], eax
mov eax, dword [esp + 0x224]
mov dword [esp + 0x1c], eax
add eax, 0x20
push str.ShiftLog
push eax
lea eax, [esp + 0x80]
mov edi, ecx
mov esi, edx
push eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], esi
call fcn.10008390
add esp, 0xc
lea ecx, [esp + 0x78]
xor ebx, ebx
push ecx
mov dword [esp + 0x220], ebx
call fcn.10032350
add esp, 4
test al, al
jne 0x1000c302
cmp dword [esp + 0x90], 0x10
jmp 0x1000c708
push 1
push 0x1013af20
lea ecx, [esp + 0x80]
call fcn.10006400
push 0xffffffffffffffff
push ebx
push edi
lea ecx, [esp + 0x84]
call fcn.10006300
push 1
push 0x1013af20
lea ecx, [esp + 0x80]
call fcn.10006400
push esi
lea esi, [esp + 0x24]
call fcn.10032260
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x228], 1
call fcn.10006300
mov ebp, 0x10
mov byte [esp + 0x21c], bl
cmp dword [esp + 0x38], ebp
jb 0x1000c37c
mov eax, dword [esp + 0x24]
push eax
call fcn.100f4085
add esp, 4
push 2
push 0x1013afe0
lea ecx, [esp + 0x80]
call fcn.10006400
mov eax, dword [esp + 0x7c]
cmp dword [esp + 0x90], ebp
jae 0x1000c3a0
lea eax, [esp + 0x7c]
lea ecx, [esp + 0xcc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [esp + 0x3c], eax
cmp eax, 0xffffffff
je 0x1000c701
lea esp, [esp]
cmp byte [esp + 0xf8], 0x2e
je 0x1000c6df
test byte [esp + 0xcc], 0x10
jne 0x1000c6df
push 4
mov esi, 0xf
push str.log_
lea ecx, [esp + 0xb8]
mov dword [esp + 0xd0], esi
mov dword [esp + 0xcc], ebx
mov byte [esp + 0xbc], bl
call fcn.10004290
mov byte [esp + 0x21c], 2
lea eax, [esp + 0xf8]
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1000c430
sub eax, esi
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x9c]
call fcn.10004290
mov byte [esp + 0x21c], 3
mov ecx, dword [esp + 0xc4]
push ecx
push ebx
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0xa0]
call fcn.100043c0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xa0]
mov byte [esp + 0x228], 4
call fcn.100057a0
mov byte [esp + 0x21c], 3
cmp dword [esp + 0x38], ebp
jb 0x1000c4a3
mov eax, dword [esp + 0x24]
push eax
call fcn.100f4085
add esp, 4
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xac], ebp
jae 0x1000c4ba
lea eax, [esp + 0x98]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xc4]
push ecx
push eax
push edx
push ebx
lea ecx, [esp + 0xc0]
call fcn.10005970
test eax, eax
lea eax, [esp + 0xf8]
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
lea edx, [eax + 1]
jne 0x1000c604
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1000c500
sub eax, edx
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x48]
call fcn.10004290
mov ecx, dword [esp + 0x1c]
push edi
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x48]
lea edi, [esp + 0x28]
mov byte [esp + 0x224], 5
call fcn.1000b3b0
mov byte [esp + 0x21c], 6
cmp dword [eax + 0x18], ebp
jb 0x1000c54c
mov esi, dword [eax + 4]
jmp 0x1000c54f
lea esi, [eax + 4]
mov edi, 0xf
mov eax, esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1000c565
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x64]
call fcn.10004290
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push ebx
push edx
mov byte [esp + 0x224], 7
call fcn.100043a0
push eax
call fcn.100f39b6
add esp, 4
push eax
lea eax, [esp + 0x68]
push eax
call fcn.10008540
push eax
call fcn.10008730
cmp dword [esp + 0x74], ebp
jb 0x1000c5bd
mov ecx, dword [esp + 0x60]
push ecx
call fcn.100f4085
add esp, 4
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
cmp dword [esp + 0x38], ebp
jb 0x1000c5dc
mov edx, dword [esp + 0x24]
push edx
call fcn.100f4085
add esp, 4
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
cmp dword [esp + 0x58], ebp
jb 0x1000c68d
mov eax, dword [esp + 0x44]
push eax
call fcn.100f4085
add esp, 4
jmp 0x1000c68d
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1000c604
sub eax, edx
push eax
lea ecx, [esp + 0xfc]
push ecx
lea ecx, [esp + 0x48]
call fcn.10004290
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push edi
push edx
lea edx, [esp + 0x48]
lea edi, [esp + 0x28]
mov byte [esp + 0x224], 8
call fcn.1000b3b0
cmp dword [eax + 0x18], ebp
jb 0x1000c648
mov eax, dword [eax + 4]
jmp 0x1000c64b
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x38], ebp
jb 0x1000c665
mov eax, dword [esp + 0x24]
push eax
call fcn.100f4085
add esp, 4
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
cmp dword [esp + 0x58], ebp
jb 0x1000c688
mov ecx, dword [esp + 0x44]
push ecx
call fcn.100f4085
add esp, 4
mov edi, 0xf
cmp dword [esp + 0xac], ebp
jb 0x1000c6a6
mov edx, dword [esp + 0x98]
push edx
call fcn.100f4085
add esp, 4
mov byte [esp + 0x21c], bl
mov dword [esp + 0xac], edi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0xc8], ebp
jb 0x1000c6db
mov eax, dword [esp + 0xb4]
push eax
call fcn.100f4085
add esp, 4
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x3c]
lea ecx, [esp + 0xcc]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1000c3c0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esp + 0x90], ebp
jb 0x1000c717
mov edx, dword [esp + 0x7c]
push edx
call fcn.100f4085
add esp, 4
mov ecx, dword [esp + 0x214]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1f8]
xor ecx, esp
call fcn.100f30a6
add esp, 0x20c
ret 4