Function at 0x140006a00
Capabilities:
Check if file exists
Delete file
Enumerate files on windows
Get file attributes
Set file attributes

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x478
mov qword [rsp + 0x3e8], 0xfffffffffffffffe
mov rax, qword [0x14002e260]
xor rax, rsp
mov qword [rsp + 0x460], rax
mov dword [rsp + 0x58], 1
mov byte [rsp + 0x24], 0
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140009950
mov r9, qword [0x1400256b8]
xor r8d, r8d
mov rdx, qword [rsp + 0x480]
lea rcx, [rsp + 0x30]
call fcn.140009160
nop
lea rcx, str..
call fcn.140015fd0
mov qword [rsp + 0x288], rax
mov r8, qword [rsp + 0x288]
lea rdx, str..
lea rcx, [rsp + 0x30]
call fcn.140008f00
cmp qword [rsp + 0x50], 0x10
jb 0x140006aa7
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x3f0], rax
jmp 0x140006ab4
lea rax, [rsp + 0x38]
mov qword [rsp + 0x3f0], rax
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x3f0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x1a0], rax
cmp qword [rsp + 0x1a0], 0xffffffffffffffff
jne 0x140006afd
mov byte [rsp + 0x1ac], 0
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x30]
call fcn.140009950
mov al, byte [rsp + 0x1ac]
jmp 0x140006f1e
cmp dword [rsp + 0x58], 0
je 0x140006eee
mov eax, dword [rsp + 0x60]
and eax, 0x10
test eax, eax
jne 0x140006b1e
mov eax, dword [rsp + 0x60]
and eax, 4
test eax, eax
je 0x140006b37
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [rsp + 0x58], eax
jmp 0x140006afd
lea rcx, [rsp + 0x30]
call fcn.140008040
lea r8, [0x14002570c]
mov rdx, qword [rsp + 0x480]
lea rcx, [rsp + 0x1b0]
call fcn.14000da00
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x400], rax
lea r8, [rsp + 0x8c]
mov rdx, qword [rsp + 0x400]
lea rcx, [rsp + 0x1d8]
call fcn.14000da00
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x308], rax
mov r9, qword [0x1400256b8]
xor r8d, r8d
mov rdx, qword [rsp + 0x308]
lea rcx, [rsp + 0x30]
call fcn.140009160
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x1d8]
call fcn.140009950
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x1b0]
call fcn.140009950
cmp qword [rsp + 0x50], 0x10
jb 0x140006c03
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x410], rax
jmp 0x140006c10
lea rax, [rsp + 0x38]
mov qword [rsp + 0x410], rax
mov rcx, qword [rsp + 0x410]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [rsp + 0x1a8], eax
cmp dword [rsp + 0x1a8], 0xffffffff
je 0x140006c66
cmp qword [rsp + 0x50], 0x10
jb 0x140006c46
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x418], rax
jmp 0x140006c53
lea rax, [rsp + 0x38]
mov qword [rsp + 0x418], rax
mov edx, 0x80
mov rcx, qword [rsp + 0x418]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea r8, [rsp + 0x30]
lea rdx, str.__del_file:
lea rcx, [rsp + 0x200]
call fcn.14000d8f0
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x428], rax
mov rcx, qword [rsp + 0x428]
call fcn.1400019b0
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x200]
call fcn.140009950
cmp qword [rsp + 0x50], 0x10
jb 0x140006cce
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x430], rax
jmp 0x140006cdb
lea rax, [rsp + 0x38]
mov qword [rsp + 0x430], rax
mov rcx, qword [rsp + 0x430]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x438], eax
cmp dword [rsp + 0x438], 5
je 0x140006d17
cmp dword [rsp + 0x438], 0x21
je 0x140006d17
jmp 0x140006ed2
cmp dword [rsp + 0x20], 0x21
jne 0x140006ddb
cmp dword [0x14003fa1c], 0x1f
jae 0x140006ddb
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rsp + 0x30]
lea rdx, str.__del_file:
lea rcx, [rsp + 0x228]
call fcn.14000d8f0
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x448], rax
mov rcx, qword [rsp + 0x448]
call fcn.1400019b0
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x228]
call fcn.140009950
cmp qword [rsp + 0x50], 0x10
jb 0x140006da2
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x450], rax
jmp 0x140006daf
lea rax, [rsp + 0x38]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov eax, dword [0x14003fa1c]
add eax, 1
mov dword [0x14003fa1c], eax
jmp 0x140006d17
cmp qword [rsp + 0x50], 0x10
jb 0x140006df2
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x368], rax
jmp 0x140006dff
lea rax, [rsp + 0x38]
mov qword [rsp + 0x368], rax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x338], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x258]
call fcn.140009950
mov rcx, qword [rsp + 0x368]
call fcn.140015fd0
mov qword [rsp + 0x360], rax
mov r8, qword [rsp + 0x360]
mov rdx, qword [rsp + 0x368]
lea rcx, [rsp + 0x258]
call fcn.14000a980
nop
lea rcx, [rsp + 0x258]
call fcn.140006f40
movzx eax, al
test eax, eax
jne 0x140006e75
mov dword [rsp + 0x458], 1
jmp 0x140006e80
mov dword [rsp + 0x458], 0
movzx eax, byte [rsp + 0x458]
mov byte [rsp + 0x250], al
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x258]
call fcn.140009950
movzx eax, byte [rsp + 0x250]
test eax, eax
je 0x140006ecd
mov byte [rsp + 0x280], 0
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x30]
call fcn.140009950
mov al, byte [rsp + 0x280]
jmp 0x140006f1e
mov byte [rsp + 0x24], 1
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [rsp + 0x58], eax
jmp 0x140006afd
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindClose]
movzx eax, byte [rsp + 0x24]
mov byte [rsp + 0x281], al
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x30]
call fcn.140009950
mov al, byte [rsp + 0x281]
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.140016780
add rsp, 0x478
ret