Function at 0x1400c68e4
Capabilities:
Check if file exists
Delete file
Enumerate files on windows
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x290
mov rax, qword [0x14017d140]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov rbx, rcx
mov esi, 0x288
or r13, 0xffffffffffffffff
mov ecx, esi
mov r14, r13
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
xor r15d, r15d
mov rdi, rax
test rax, rax
jne 0x1400c6976
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x1400c696c
test byte [rcx + 0x1c], 2
je 0x1400c696c
cmp byte [rcx + 0x19], 1
jb 0x1400c696c
mov rcx, qword [rcx + 0x10]
lea edx, [rdi + 0x4f]
lea r8, [0x14000bbb0]
mov r9d, esi
call fcn.14001de24
mov eax, 0x8007000e
jmp 0x1400c6c78
mov esi, 0x412
mov ecx, esi
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
mov rbp, rax
test rax, rax
jne 0x1400c69ca
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x1400c69c0
test byte [rcx + 0x1c], 2
je 0x1400c69c0
cmp byte [rcx + 0x19], 1
jb 0x1400c69c0
mov rcx, qword [rcx + 0x10]
lea edx, [rbp + 0x50]
lea r8, [0x14000bbb0]
mov r9d, esi
call fcn.14001de24
mov ebx, 0x8007000e
jmp 0x1400c6c56
lea r12, [0x14000b1d0]
mov esi, 0x144
test rbx, rbx
jne 0x1400c69f4
xor edx, edx
mov rcx, rdi
call fcn.1400c7b84
mov ebx, eax
test eax, eax
js 0x1400c6c56
jmp 0x1400c6a7d
mov rax, r13
inc rax
cmp word [rbx + rax*2], r15w
jne 0x1400c69f7
cmp rax, 0x104
jb 0x1400c6a1d
lea r8, [0x14000b298]
mov edx, 0x84f
mov rcx, r12
call fcn.1400a8be8
mov rax, r13
inc rax
cmp word [rbx + rax*2], r15w
jne 0x1400c6a20
cmp word [rbx + rax*2 - 2], 0x5c
jne 0x1400c6a46
lea r8, [0x14000b550]
mov edx, 0x850
mov rcx, r12
call fcn.1400a8be8
mov rdx, rsi
mov rcx, rdi
sub rbx, rdi
lea rax, [rdx + 0x7ffffeba]
test rax, rax
je 0x1400c6a70
movzx eax, word [rbx + rcx]
test ax, ax
je 0x1400c6a70
mov word [rcx], ax
add rcx, 2
dec rdx
jne 0x1400c6a4f
test rdx, rdx
jne 0x1400c6a79
sub rcx, 2
mov word [rcx], r15w
lea r8, [0x140001800]
mov rdx, rsi
mov rcx, rdi
call fcn.14006892c
mov ebx, r15d
mov rax, r13
inc rax
cmp word [rdi + rax*2], r15w
jne 0x1400c6a95
add rax, 8
cmp rax, rsi
jb 0x1400c6abc
lea r8, [0x14000b5c8]
mov edx, 0x860
mov rcx, r12
call fcn.1400a8be8
lea r8, [0x140001878]
mov rdx, rsi
mov rcx, rdi
call fcn.14006892c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, reloc.ADVAPI32.dll_TraceEvent
je 0x1400c6c56
mov rax, r13
inc rax
cmp word [rdi + rax*2], r15w
jne 0x1400c6ae3
add rax, 0x14
mov r12d, 0x209
cmp rax, r12
jb 0x1400c6b14
lea r8, [0x14000b610]
lea rcx, [0x14000b1d0]
mov edx, 0x86a
call fcn.1400a8be8
mov rsi, rdi
mov rdx, r12
mov rcx, rbp
sub rsi, rbp
lea rax, [rdx + 0x7ffffdf5]
test rax, rax
je 0x1400c6b41
movzx eax, word [rsi + rcx]
test ax, ax
je 0x1400c6b41
mov word [rcx], ax
add rcx, 2
dec rdx
jne 0x1400c6b20
test rdx, rdx
jne 0x1400c6b4a
sub rcx, 2
mov word [rcx], r15w
lea r8, [0x140001800]
mov rdx, r12
mov rcx, rbp
call fcn.14006892c
lea r8, [0x140001850]
mov rdx, r12
mov rcx, rbp
call fcn.14006892c
lea r8, [0x140004f10]
mov rdx, r12
mov rcx, rbp
call fcn.14006892c
lea rdx, [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
cmp rax, r13
je 0x1400c6c56
mov rcx, r13
inc rcx
cmp word [rdi + rcx*2], r15w
jne 0x1400c6ba1
lea rdx, [rsp + 0x5c]
mov rax, r13
inc rax
cmp word [rdx + rax*2], r15w
jne 0x1400c6bb3
add rax, 2
add rax, rcx
cmp rax, r12
jb 0x1400c6be1
lea r8, [0x14000b660]
lea rcx, [0x14000b1d0]
mov edx, 0x880
call fcn.1400a8be8
mov rdx, r12
mov rcx, rbp
lea rax, [rdx + 0x7ffffdf5]
test rax, rax
je 0x1400c6c08
movzx eax, word [rsi + rcx]
test ax, ax
je 0x1400c6c08
mov word [rcx], ax
add rcx, 2
dec rdx
jne 0x1400c6be7
test rdx, rdx
jne 0x1400c6c11
sub rcx, 2
mov word [rcx], r15w
lea r8, [0x140001800]
mov rdx, r12
mov rcx, rbp
call fcn.14006892c
lea r8, [rsp + 0x5c]
mov rdx, r12
mov rcx, rbp
call fcn.14006892c
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [rsp + 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400c6b9e
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_]
cmp r14, r13
je 0x1400c6c76
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, ebx
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.140168920
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret