Function at 0x140011500
Capabilities:
Delete directory
Enumerate files on windows
Enumerate files recursively
Get file attributes
Move file
Set file attributes

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
mov eax, 0x1700
call fcn.1400ea040
sub rsp, rax
mov rax, qword [0x14012df80]
xor rax, rsp
mov qword [rsp + 0x16f0], rax
xor ebx, ebx
mov esi, r8d
mov dword [rsp + 0x24], r8d
lea r8d, [rbx + 1]
mov rbp, rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov edi, ebx
mov dword [rsp + 0x20], ebx
call fcn.140011290
test eax, eax
je 0x140011b42
test esi, esi
je 0x140011574
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x140011574
and eax, 0xfffffffe
mov rcx, rbp
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rax, [rsp + 0x4a0]
mov rdi, rbp
mov edx, 0x410
lea rcx, [rsp + 0x4a0]
mov esi, ebx
sub rdi, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400115b5
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400115b5
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011591
jmp 0x1400115ba
test rdx, rdx
jne 0x1400115c3
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], bx
jne 0x1400116f3
lea rdi, [rsp + 0x4a0]
lea rax, [rsp + 0xed0]
mov edx, 0x410
lea rcx, [rsp + 0xed0]
mov esi, ebx
sub rdi, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140011614
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011614
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400115f0
jmp 0x140011619
test rdx, rdx
jne 0x140011622
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], bx
jne 0x1400116f3
lea rdx, [0x1400fb380]
lea rcx, [rsp + 0xed0]
call fcn.14002ae40
lea rdi, [rsp + 0xed0]
lea rax, [rsp + 0x4a0]
sub rdi, rax
mov edx, 0x410
lea rcx, [rsp + 0x4a0]
mov esi, ebx
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140011687
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011687
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011663
jmp 0x14001168c
test rdx, rdx
jne 0x140011695
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov eax, ebx
mov word [rcx], bx
sete al
test eax, eax
je 0x1400116f3
lea rdi, [rsp + 0x4a0]
lea rax, [rsp + 0xcc0]
mov edx, 0x104
sub rdi, rax
lea rcx, [rsp + 0xcc0]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x1400116e7
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400116e7
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400116c3
jmp 0x1400116ec
test rdx, rdx
jne 0x1400116f0
sub rcx, 2
mov word [rcx], bx
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
mov rbp, rax
je 0x140011b40
test byte [rsp + 0x40], 0x10
je 0x14001191a
lea rsi, [0x1400fc3b0]
lea rdi, [rsp + 0x6c]
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
je 0x140011aea
lea rsi, [0x1400fc3b4]
lea rdi, [rsp + 0x6c]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
je 0x140011aea
mov rdi, qword [rsp + 0x28]
lea rax, [rsp + 0x4a0]
mov edx, 0x410
lea rcx, [rsp + 0x4a0]
mov esi, ebx
sub rdi, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140011795
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011795
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011771
jmp 0x14001179a
test rdx, rdx
jne 0x1400117a3
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], bx
jne 0x140011aea
lea rdi, [rsp + 0x4a0]
lea rax, [rsp + 0xed0]
mov edx, 0x410
lea rcx, [rsp + 0xed0]
mov esi, ebx
sub rdi, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400117f4
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400117f4
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400117d0
jmp 0x1400117f9
test rdx, rdx
jne 0x140011802
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], bx
jne 0x140011aea
lea rdx, [rsp + 0x6c]
lea rcx, [rsp + 0xed0]
call fcn.14002ae40
lea rdi, [rsp + 0xed0]
lea rax, [rsp + 0x4a0]
sub rdi, rax
mov edx, 0x410
lea rcx, [rsp + 0x4a0]
mov esi, ebx
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140011865
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011865
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011841
jmp 0x14001186a
test rdx, rdx
jne 0x140011873
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov eax, ebx
mov word [rcx], bx
sete al
test eax, eax
je 0x140011aea
lea rdi, [rsp + 0x4a0]
lea rax, [rsp + 0x290]
mov edx, 0x104
lea rcx, [rsp + 0x290]
mov esi, ebx
sub rdi, rax
nop
nop
nop
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x1400118d4
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400118d4
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400118b0
jmp 0x1400118d9
test rdx, rdx
jne 0x1400118e2
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov eax, ebx
mov word [rcx], bx
sete al
test eax, eax
je 0x140011aea
mov r8d, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x290]
call fcn.140011500
mov edi, dword [rsp + 0x20]
add edi, eax
mov dword [rsp + 0x20], edi
jmp 0x140011aee
mov rdi, qword [rsp + 0x28]
lea rax, [rsp + 0x4a0]
mov edx, 0x410
lea rcx, [rsp + 0x4a0]
mov esi, ebx
sub rdi, rax
nop
nop
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140011964
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011964
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011940
jmp 0x140011969
test rdx, rdx
jne 0x140011972
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], bx
jne 0x140011aea
lea rdi, [rsp + 0x4a0]
lea rax, [rsp + 0xed0]
mov edx, 0x410
lea rcx, [rsp + 0xed0]
mov esi, ebx
sub rdi, rax
nop
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400119c4
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400119c4
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400119a0
jmp 0x1400119c9
test rdx, rdx
jne 0x1400119d2
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], bx
jne 0x140011aea
lea rdx, [rsp + 0x6c]
lea rcx, [rsp + 0xed0]
call fcn.14002ae40
lea rdi, [rsp + 0xed0]
lea rax, [rsp + 0x4a0]
sub rdi, rax
mov edx, 0x410
lea rcx, [rsp + 0x4a0]
mov esi, ebx
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140011a35
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011a35
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011a11
jmp 0x140011a3a
test rdx, rdx
jne 0x140011a43
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov eax, ebx
mov word [rcx], bx
sete al
test eax, eax
je 0x140011aea
lea rdi, [rsp + 0x4a0]
lea rax, [rsp + 0x290]
mov edx, 0x104
lea rcx, [rsp + 0x290]
mov esi, ebx
sub rdi, rax
nop
nop
nop
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140011aa4
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140011aa4
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140011a80
jmp 0x140011aa9
test rdx, rdx
jne 0x140011ab2
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov eax, ebx
mov word [rcx], bx
sete al
test eax, eax
je 0x140011aea
mov r8d, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x290]
call fcn.140011b70
mov edi, dword [rsp + 0x20]
cmp eax, 0x80000000
je 0x140011aee
add edi, eax
mov dword [rsp + 0x20], edi
jmp 0x140011aee
mov edi, dword [rsp + 0x20]
lea rdx, [rsp + 0x40]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140011713
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rsi, qword [rsp + 0x28]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x140011b39
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x140011b39
lea r8d, [rax - 0x1c]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ebx, 1
jmp 0x140011b42
mov edi, ebx
or eax, 0xffffffff
test ebx, ebx
cmovne eax, edi
mov rcx, qword [rsp + 0x16f0]
xor rcx, rsp
call fcn.1400cd6e0
mov rbx, qword [rsp + 0x1738]
add rsp, 0x1700
pop rdi
pop rsi
pop rbp
ret