Function at 0x180004a20
Capabilities:
Check if file exists
Delete file
Enumerate files on windows

Disassembly:
push rdi
sub rsp, 0x8d0
mov rax, qword [0x1800964f0]
xor rax, rsp
mov qword [rsp + 0x8b0], rax
cmp dword [reloc.WS2_32.dll_accept], 0
mov rdi, rcx
je 0x180004e13
mov qword [rsp + 0x8f0], rbp
xor ebp, ebp
lea rcx, [rsp + 0x4b1]
xor edx, edx
mov r8d, 0x1ff
mov dword [reloc.WS2_32.dll_accept], ebp
mov byte [rsp + 0x4b0], bpl
call fcn.180055310
lea rcx, [rsp + 0x6b1]
xor edx, edx
mov r8d, 0x1ff
mov byte [rsp + 0x6b0], bpl
call fcn.180055310
lea rcx, [rsp + 0x1a1]
xor edx, edx
mov r8d, 0x1ff
mov byte [rsp + 0x1a0], bpl
call fcn.180055310
lea rdx, str.Application_
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x180004e0b
sub rax, rdi
lea rcx, [rsp + 0x4b0]
mov rdx, rdi
mov r8, rax
mov qword [rsp + 0x8e8], rbx
call fcn.180054180
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x4b0]
repne scasb al, byte [rdi]
mov rax, qword [str.Application]
mov rcx, rbp
mov qword [rdi - 1], rax
mov eax, dword [0x180080250]
mov dword [rdi + 7], eax
movzx eax, byte [0x180080254]
mov byte [rdi + 0xb], al
nop word [rax + rax]
movzx eax, byte [rsp + rcx + 0x4b0]
inc rcx
mov byte [rsp + rcx + 0x6af], al
test al, al
jne 0x180004b20
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x6b0]
repne scasb al, byte [rdi]
mov eax, dword [str..]
lea rdx, [rsp + 0x60]
mov dword [rdi - 1], eax
movzx eax, byte [0x18008025c]
lea rcx, [rsp + 0x6b0]
mov byte [rdi + 3], al
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180004e03
mov qword [rsp + 0x8c8], rsi
mov qword [rsp + 0x8c0], r12
mov r12d, 0x414
nop
lea rcx, [rsp + 0x3a0]
xor edx, edx
mov r8d, 0x104
call fcn.180055310
mov rdx, rbp
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x8c]
inc rdx
mov byte [rsp + rdx + 0x39f], al
test al, al
jne 0x180004bb0
lea rsi, [rsp + 0x3a0]
lea rdi, [0x180080260]
mov ecx, 2
repe cmpsb byte [rsi], byte [rdi]
je 0x180004ddd
lea rsi, [rsp + 0x3a0]
lea rdi, [0x180080264]
mov ecx, 3
repe cmpsb byte [rsi], byte [rdi]
je 0x180004ddd
test byte [rsp + 0x60], 0x10
je 0x180004ddd
lea rcx, [rsp + 0x1a0]
xor edx, edx
mov r8d, 0x200
call fcn.180055310
mov rdx, rbp
movzx eax, byte [rsp + rdx + 0x4b0]
inc rdx
mov byte [rsp + rdx + 0x19f], al
test al, al
jne 0x180004c21
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1a0]
repne scasb al, byte [rdi]
movzx eax, word [0x180080268]
or rcx, 0xffffffffffffffff
mov word [rdi - 1], ax
xor eax, eax
lea rdi, [rsp + 0x1a0]
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x8c]
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
mov byte [rdi + rcx - 2], al
test al, al
jne 0x180004c70
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1a0]
repne scasb al, byte [rdi]
mov rax, qword [str.installer_setup.exe]
lea rcx, [rsp + 0x1a0]
mov qword [rdi - 1], rax
mov rax, qword [0x180080278]
mov qword [rdi + 7], rax
mov eax, dword [0x180080280]
mov dword [rdi + 0xf], eax
movzx eax, byte [0x180080284]
mov byte [rdi + 0x13], al
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x180004ddd
lea rcx, [rsp + 0x1a0]
xor edx, edx
mov r8d, 0x200
call fcn.180055310
mov rdx, rbp
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x4b0]
inc rdx
mov byte [rsp + rdx + 0x19f], al
test al, al
jne 0x180004cf0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1a0]
repne scasb al, byte [rdi]
movzx eax, word [0x180080268]
or rcx, 0xffffffffffffffff
mov word [rdi - 1], ax
xor eax, eax
lea rdi, [rsp + 0x1a0]
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x8c]
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
mov byte [rdi + rcx - 2], al
test al, al
jne 0x180004d40
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1a0]
repne scasb al, byte [rdi]
mov rax, qword [str.installer.]
lea rcx, [rsp + 0x20]
mov qword [rdi - 1], rax
mov eax, dword [0x180080290]
mov dword [rdi + 7], eax
movzx eax, word [0x180080294]
mov word [rdi + 0xb], ax
movzx eax, byte [0x180080296]
mov byte [rdi + 0xd], al
xor eax, eax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x38], rbp
mov word [rsp + 0x40], r12w
mov qword [rsp + 0x30], rax
call qword [sym.imp.SHELL32.dll_SHFileOperationA]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180004b90
mov r12, qword [rsp + 0x8c0]
mov rsi, qword [rsp + 0x8c8]
mov rbx, qword [rsp + 0x8e8]
mov rbp, qword [rsp + 0x8f0]
mov rcx, qword [rsp + 0x8b0]
xor rcx, rsp
call fcn.180050540
add rsp, 0x8d0
pop rdi
ret