Function at 0x140002370
Capabilities:
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x288
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x200], 0xfffffffffffffffe
mov qword [rbp + 0x118], rdx
mov rdi, rcx
lea rsi, [rbp - 0x50]
mov r8d, 0x13e
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x148], rdi
mov rcx, rdi
mov rdx, rsi
call sub.KERNEL32.dll_FindFirstFileA
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140002c75
lea r15, [rbp + 0xe0]
mov rax, qword [rbp + 0x118]
lea rcx, [rax - 1]
mov qword [rbp + 0x150], rcx
lea r14, [rax - 2]
lea r13, [rbp + 0x170]
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x110], r14
nop word cs:[rax + rax]
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x160], 1
xor r8d, r8d
lea rsi, [rbp - 0x24]
jmp 0x14000244f
mov r8, qword [rbp + 0x168]
inc rsi
mov rax, qword [rbp + 0x160]
mov byte [rax + r8], bl
mov r8, qword [rbp + 0x168]
inc r8
mov qword [rbp + 0x168], r8
cmp rsi, r15
je 0x140002480
movzx ebx, byte [rsi]
test bl, bl
je 0x140002480
cmp r8, qword [rbp + 0x158]
jne 0x140002437
lea rcx, [rbp + 0x158]
mov rdx, r8
call fcn.140007a90
jmp 0x140002430
test byte [rbp - 0x50], 0x10
jne 0x1400025a0
cmp r14, qword [rbp + 0x150]
ja 0x140002d9e
mov rax, qword [rbp + 0x160]
mov rcx, qword [rbp + 0x148]
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1c8], r14
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], r8
mov r8d, 2
lea rcx, [rbp + 0xf0]
lea rdx, [rbp + 0x1c0]
call fcn.140004bd0
mov rcx, qword [rbp + 0xf8]
mov rdx, qword [rbp + 0x100]
mov rax, rdx
mov qword [rbp + 0x140], rcx
nop word cs:[rax + rax]
test rax, rax
je 0x140002cab
lea rsi, [rax - 1]
cmp byte [rcx + rax - 1], 0x2e
mov rax, rsi
jne 0x140002500
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x128], 1
xor r15d, r15d
mov qword [rbp + 0x190], rdx
jmp 0x140002558
inc rsi
mov rax, qword [rbp + 0x128]
mov byte [rax + r15], bl
mov r15, qword [rbp + 0x130]
inc r15
mov qword [rbp + 0x130], r15
cmp rsi, rdx
jae 0x140002600
movzx ebx, byte [rcx + rsi]
cmp r15, qword [rbp + 0x120]
jne 0x140002540
lea rcx, [rbp + 0x120]
mov rdx, r15
call fcn.140007a90
mov r15, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x140]
mov rdx, qword [rbp + 0x190]
jmp 0x140002540
mov rdx, qword [rbp + 0x160]
lea rcx, [rbp + 0x1c0]
call fcn.14001d000
cmp qword [rbp + 0x1c0], 0
jne 0x140002d60
mov rax, qword [rbp + 0x168]
cmp rax, 2
je 0x140002a27
cmp rax, 1
jne 0x140002a40
mov rcx, qword [rbp + 0x160]
cmp byte [rcx], 0x2e
jne 0x140002a40
jmp 0x140002c20
mov r12, qword [0x14002c008]
mov r14, qword [0x14002c010]
shl r14, 4
add r14, r12
mov rax, qword [rbp + 0x128]
mov qword [rbp + 0x198], rax
jmp 0x140002640
add r12, 0x10
test r13b, r13b
mov r13, rsi
jne 0x140002750
cmp r12, r14
je 0x1400029cd
mov rdx, qword [r12]
mov r8, qword [r12 + 8]
mov rcx, r13
call fcn.14001a150
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x170], rax
jne 0x140002cc8
mov rax, qword [rbp + 0x178]
mov qword [rbp + 0x1f0], rax
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x1e8], rax
mov rcx, r13
mov rdx, qword [rbp + 0x198]
mov r8, r15
call fcn.14001a150
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x170], rax
jne 0x140002d14
mov rsi, r13
mov rbx, qword [rbp + 0x178]
mov rdi, qword [rbp + 0x180]
mov r8, qword [rbp + 0x1e8]
cmp r8, rdi
jne 0x140002700
mov rcx, qword [rbp + 0x1f0]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete r13b
mov byte [rbx], 0
test rdi, rdi
jne 0x14000270b
jmp 0x14000271c
xor r13d, r13d
mov byte [rbx], 0
test rdi, rdi
je 0x14000271c
mov r8d, 1
mov rcx, rbx
mov rdx, rdi
call fcn.140007c10
mov rcx, qword [rbp + 0x1f0]
mov byte [rcx], 0
mov rdx, qword [rbp + 0x1e8]
test rdx, rdx
je 0x140002630
mov r8d, 1
call fcn.140007c10
jmp 0x140002630
mov r15, qword [rbp + 0x190]
test r15, r15
js 0x140002ec4
movzx eax, byte [0x14002c131]
mov edx, 1
mov rcx, r15
call fcn.140007c00
test rax, rax
mov rdx, qword [rbp + 0x140]
lea r14, [0x1400217ee]
je 0x140002eb5
mov rdi, rax
mov rcx, rax
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1a8], 1
mov qword [rbp + 0x1b0], 0
mov rsi, rdi
add rsi, r15
xor edx, edx
mov qword [rbp + 0x1e8], rdi
jmp 0x1400027ee
inc rdi
mov rax, qword [rbp + 0x1a8]
mov byte [rax + rdx], bl
mov rdx, qword [rbp + 0x1b0]
inc rdx
mov qword [rbp + 0x1b0], rdx
cmp rdi, rsi
je 0x140002820
movzx ebx, byte [rdi]
cmp rdx, qword [rbp + 0x1a0]
jne 0x1400027d0
lea rcx, [rbp + 0x1a0]
call fcn.140007a90
mov rdx, qword [rbp + 0x1b0]
mov r15, qword [rbp + 0x190]
jmp 0x1400027d0
lea rsi, str..peter
jmp 0x14000284e
inc rsi
mov rax, qword [rbp + 0x1a8]
mov byte [rax + rdx], bl
mov rdx, qword [rbp + 0x1b0]
inc rdx
mov qword [rbp + 0x1b0], rdx
cmp rsi, r14
je 0x140002880
movzx ebx, byte [rsi]
cmp rdx, qword [rbp + 0x1a0]
jne 0x140002830
lea rcx, [rbp + 0x1a0]
call fcn.140007a90
mov rdx, qword [rbp + 0x1b0]
mov r15, qword [rbp + 0x190]
jmp 0x140002830
mov rcx, r13
mov rdx, qword [rbp + 0x1e8]
mov r8, r15
call fcn.14001a150
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x170], rax
jne 0x140002dd4
mov rax, qword [rbp + 0x178]
mov qword [rbp + 0x1f0], rax
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x198], rax
mov rdx, qword [rbp + 0x1a8]
mov r8, qword [rbp + 0x1b0]
mov byte [rbp + 0x1fe], 1
mov rcx, r13
call fcn.14001a150
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x170], rax
jne 0x140002e20
mov r8, qword [rbp + 0x178]
mov r9, qword [rbp + 0x180]
mov byte [rbp + 0x1fe], 0
mov rcx, qword [rbp + 0x1f0]
mov rdx, qword [rbp + 0x198]
call fcn.140004e50
mov rcx, r13
mov rdx, qword [rbp + 0x1e8]
mov r8, qword [rbp + 0x190]
call fcn.14001a150
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x170], rax
jne 0x140002e6c
mov rcx, qword [rbp + 0x178]
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1f0], rcx
call sub.KERNEL32.dll_DeleteFileA
mov rcx, qword [rbp + 0x1f0]
mov byte [rcx], 0
mov rdx, qword [rbp + 0x198]
test rdx, rdx
mov rsi, qword [rbp + 0x190]
je 0x140002997
mov r8d, 1
call fcn.140007c10
mov rdx, qword [rbp + 0x1a0]
test rdx, rdx
mov rdi, qword [rbp + 0x1e8]
je 0x1400029bc
mov rcx, qword [rbp + 0x1a8]
mov r8d, 1
call fcn.140007c10
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call fcn.140007c10
mov rdx, qword [rbp + 0x120]
test rdx, rdx
je 0x1400029eb
mov rcx, qword [rbp + 0x128]
mov r8d, 1
call fcn.140007c10
mov rdx, qword [rbp + 0xf0]
test rdx, rdx
mov rdi, qword [rbp + 0x108]
mov r14, qword [rbp + 0x110]
lea r15, [rbp + 0xe0]
je 0x140002c20
mov r8d, 1
mov rcx, qword [rbp + 0x140]
call fcn.140007c10
jmp 0x140002c20
mov rcx, qword [rbp + 0x160]
cmp byte [rcx], 0x2e
jne 0x140002a40
cmp byte [rcx + 1], 0x2e
je 0x140002c20
nop dword [rax]
cmp r14, qword [rbp + 0x150]
ja 0x140002db9
mov rcx, qword [rbp + 0x160]
mov rdx, qword [rbp + 0x148]
mov qword [rbp + 0x1c0], rdx
mov qword [rbp + 0x1c8], r14
mov qword [rbp + 0x1d0], rcx
mov qword [rbp + 0x1d8], rax
mov r8d, 2
lea rcx, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
call fcn.140004bd0
mov rsi, qword [rbp + 0x1a8]
mov rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1c8], rax
lea rax, [0x140021768]
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], 2
mov qword [rbp + 0x138], rsi
mov byte [rbp + 0x1ff], 1
mov r8d, 2
mov rcx, r13
lea rdx, [rbp + 0x1c0]
call fcn.140004bd0
mov rdx, qword [rbp + 0x1a0]
test rdx, rdx
je 0x140002b02
mov r8d, 1
mov rcx, rsi
call fcn.140007c10
mov r15, qword [rbp + 0x180]
mov qword [rbp + 0x1b0], r15
movups xmm0, xmmword [rbp + 0x170]
movaps xmmword [rbp + 0x1a0], xmm0
mov rcx, qword [rbp + 0x1a0]
mov r8, qword [rbp + 0x1a8]
cmp r15, 0x10
jae 0x140002b5b
xor edx, edx
test r15, r15
je 0x140002b52
nop dword [rax]
cmp byte [r8 + rdx], 0
je 0x140002ba8
inc rdx
cmp r15, rdx
jne 0x140002b40
mov rdx, r15
xor eax, eax
test rax, rax
jne 0x140002b90
jmp 0x140002bb2
mov qword [rbp + 0x1f0], rcx
mov byte [rbp + 0x1fd], 0
xor ecx, ecx
mov qword [rbp + 0x1e8], r8
mov rdx, r8
mov r8, r15
call fcn.14001cde0
mov r8, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x1f0]
test rax, rax
je 0x140002bb2
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x140002ecb
mov rax, r8
jmp 0x140002bf2
mov eax, 1
test rax, rax
jne 0x140002b90
mov qword [rbp + 0x1f0], rcx
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1e8], r8
mov qword [rbp + 0x1c8], r8
mov qword [rbp + 0x1d0], r15
mov byte [rbp + 0x1fd], 1
lea rcx, [rbp + 0x1c0]
call fcn.14001a320
mov r15, rdx
mov r8, qword [rbp + 0x1e8]
mov qword [rbp + 0x138], r8
mov byte [rbp + 0x1ff], 0
mov rcx, rax
mov rdx, r15
call fcn.140002370
mov rdi, qword [rbp + 0x108]
mov r14, qword [rbp + 0x110]
lea r15, [rbp + 0xe0]
mov rcx, rdi
lea rdx, [rbp - 0x50]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
je 0x140002c57
mov rdx, qword [rbp + 0x158]
test rdx, rdx
je 0x140002410
mov rcx, qword [rbp + 0x160]
mov r8d, 1
call fcn.140007c10
jmp 0x140002410
mov rdx, qword [rbp + 0x158]
test rdx, rdx
je 0x140002c75
mov rcx, qword [rbp + 0x160]
mov r8d, 1
call fcn.140007c10
mov rcx, qword [rbp + 0x148]
mov byte [rcx], 0
mov rdx, qword [rbp + 0x118]
test rdx, rdx
je 0x140002c96
mov r8d, 1
call fcn.140007c10
nop
add rsp, 0x288
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [0x1400217a0]
lea r8, [0x1400217d0]
mov edx, 0x2b
call fcn.140020980
jmp 0x140002f19
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x1d0], xmm1
movaps xmmword [rbp + 0x1c0], xmm0
lea rax, [0x140021880]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021470]
lea r8, [rbp + 0x1c0]
mov edx, 0x2b
call fcn.140020cb0
jmp 0x140002f19
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x1d0], xmm1
movaps xmmword [rbp + 0x1c0], xmm0
lea rax, [0x140021898]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021470]
lea r8, [rbp + 0x1c0]
mov edx, 0x2b
call fcn.140020cb0
jmp 0x140002f19
movups xmm0, xmmword [rbp + 0x1c8]
movaps xmmword [rbp + 0x170], xmm0
lea rax, [0x140021838]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021490]
lea r8, [rbp + 0x170]
mov edx, 0x2b
call fcn.140020cb0
jmp 0x140002f19
lea r8, [0x140021788]
mov rcx, r14
mov rdx, qword [rbp + 0x150]
call fcn.140020dd0
jmp 0x140002f19
lea r8, [0x140021850]
mov rcx, r14
mov rdx, qword [rbp + 0x150]
call fcn.140020dd0
jmp 0x140002f19
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x1d0], xmm1
movaps xmmword [rbp + 0x1c0], xmm0
lea rax, [0x1400217f0]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021470]
lea r8, [rbp + 0x1c0]
mov edx, 0x2b
call fcn.140020cb0
jmp 0x140002f19
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x1d0], xmm1
movaps xmmword [rbp + 0x1c0], xmm0
lea rax, [0x140021808]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021470]
lea r8, [rbp + 0x1c0]
mov edx, 0x2b
call fcn.140020cb0
jmp 0x140002f19
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x1d0], xmm1
movaps xmmword [rbp + 0x1c0], xmm0
lea rax, [0x140021820]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021470]
lea r8, [rbp + 0x1c0]
mov edx, 0x2b
call fcn.140020cb0
jmp 0x140002f19
mov ecx, 1
mov rdx, r15
call fcn.1400207c0
jmp 0x140002f19
call fcn.14001a110
jmp 0x140002f19
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1e8], r8
mov qword [rbp + 0x1c8], r8
mov qword [rbp + 0x1d0], r15
mov qword [rbp + 0x1d8], rdx
lea rax, [0x140021868]
mov qword [rsp + 0x20], rax
lea rcx, [0x140021420]
lea r9, [0x140021470]
lea r8, [rbp + 0x1c0]
mov edx, 0x2b
call fcn.140020cb0
ud2