Function at 0x140195340
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
lea rbp, [r11 - 0x3b8]
sub rsp, 0x4a0
mov rax, qword [0x14024fa28]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov qword [r11 + 0x18], r12
mov rsi, rcx
mov qword [r11 + 0x20], r13
mov ebx, 1
mov qword [r11 - 0x20], r14
mov rax, 0xffffffffffffffff
mov qword [r11 - 0x28], r15
mov r15d, edx
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140195390
xor r12d, r12d
lfence
mov edx, 0x104
lea rcx, [rbp + 0x170]
mov r8, rsi
cmp rax, rdx
jae 0x1401953bc
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
jmp 0x1401953d0
mov r9d, 0x103
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x376], r12w
mov r13d, 0x5c
cmp word [rbp + 0x170], r12w
je 0x140195472
xor edx, edx
lea rcx, [rbp + 0x170]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp r13w, word [rax - 2]
je 0x140195472
lea rax, [rbp + 0x170]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp word [rax + rcx*2], r12w
jne 0x140195410
lea rax, [rcx + 1]
cmp rax, 0x104
jae 0x140195472
lea rax, [rcx + 2]
mov edx, 0x104
lea r8, [0x1401f1088]
cmp rax, rdx
ja 0x14019544a
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
jmp 0x140195472
lfence
lea rax, [rbp + 0x170]
sub rdx, rcx
mov r9d, 0x103
sub r9, rcx
lea rcx, [rax + rcx*2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x376], r12w
lea rax, [rbp + 0x170]
mov rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], r12w
jne 0x140195480
lea rax, [rcx + 1]
cmp rax, 0x104
jae 0x1401954e2
lea rax, [rcx + 4]
lfence
mov edx, 0x104
lea r8, [0x1401ffc48]
cmp rax, rdx
ja 0x1401954bd
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
jmp 0x1401954e2
lea rax, [rbp + 0x170]
sub rdx, rcx
mov r9d, 0x103
sub r9, rcx
lea rcx, [rax + rcx*2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x376], r12w
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1401956e2
mov qword [rsp + 0x4c8], rdi
nop dword [rax]
test byte [rsp + 0x20], 0x10
jne 0x1401956bb
mov rax, 0xffffffffffffffff
inc rax
cmp word [rsi + rax*2], r12w
jne 0x140195522
lfence
mov edx, 0x104
lea rcx, [rbp + 0x170]
mov r8, rsi
cmp rax, rdx
jae 0x14019554b
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
jmp 0x14019555f
mov r9d, 0x103
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x376], r12w
cmp word [rbp + 0x170], r12w
je 0x1401955f3
xor edx, edx
lea rcx, [rbp + 0x170]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp r13w, word [rax - 2]
je 0x1401955f3
lea rax, [rbp + 0x170]
mov rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], r12w
jne 0x140195591
lea rax, [rcx + 1]
cmp rax, 0x104
jae 0x1401955f3
lea rax, [rcx + 2]
mov edx, 0x104
lea r8, [0x1401f1088]
cmp rax, rdx
ja 0x1401955cb
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
jmp 0x1401955f3
lfence
lea rax, [rbp + 0x170]
sub rdx, rcx
mov r9d, 0x103
sub r9, rcx
lea rcx, [rax + rcx*2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x376], r12w
lea rax, [rbp + 0x170]
mov rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], r12w
jne 0x140195601
lea rax, [rcx + 1]
cmp rax, 0x104
jae 0x140195679
lea rdx, [rsp + 0x4c]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r12w
jne 0x140195623
inc rax
lea r8, [rsp + 0x4c]
add rax, rcx
mov edx, 0x104
cmp rax, rdx
ja 0x140195651
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
jmp 0x140195679
lfence
lea rax, [rbp + 0x170]
sub rdx, rcx
mov r9d, 0x103
sub r9, rcx
lea rcx, [rax + rcx*2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x376], r12w
mov edi, 5
mov ebx, r12d
test ebx, ebx
jne 0x1401956bb
mov edx, 0x80
lea rcx, [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rcx, [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
dec edi
mov ebx, eax
test eax, eax
jne 0x1401956b7
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jg 0x140195681
lea rdx, [rsp + 0x20]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140195510
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdi, qword [rsp + 0x4c8]
mov r14, qword [rsp + 0x498]
test r15d, r15d
mov r15, qword [rsp + 0x490]
mov r13, qword [rsp + 0x4d8]
mov r12, qword [rsp + 0x4d0]
je 0x14019572b
test ebx, ebx
je 0x14019572b
mov rcx, rsi
call fcn.1401958c0
test al, al
je 0x140195724
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
and eax, ebx
jmp 0x14019572d
mov eax, 1
jmp 0x14019572d
mov eax, ebx
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.1401c5190
add rsp, 0x4a0
pop rsi
pop rbx
pop rbp
ret