Function at 0x1400132a0
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x140106010]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
xor r15d, r15d
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
lea r8d, [r15 + 6]
lea rdx, [0x1400dfef0]
lea rcx, [rbp - 0x40]
call fcn.140009140
nop
lea r8, [rbp - 0x40]
lea rdx, [0x140107610]
lea rcx, [rbp + 0x50]
call fcn.1400853e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14001335a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013355
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d4e
call fcn.140091bc0
mov word [rbp - 0x40], r15w
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rcx, qword [rbp + 0x50]
lea rdx, [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140013cdc
movabs r12, 0x7ffffffffffffffe
movabs r13, 0x7fffffffffffffff
nop dword [rax + rax]
test byte [rbp + 0x70], 0x10
jne 0x140013cbd
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
lea rax, [rbp + 0x9c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400133d0
lea rdx, [rbp + 0x9c]
lea rcx, [rbp - 0x20]
call fcn.140009140
nop
lea r8, [rbp - 0x20]
lea rdx, [0x140107610]
lea rcx, [rbp + 0x20]
call fcn.1400853e0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140013441
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001343c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d5a
call fcn.140091bc0
mov word [rbp - 0x20], r15w
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
call fcn.14007f3e0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x140013463
lock inc dword [rcx + 8]
mov rcx, qword [rax + 8]
mov rax, qword [rax]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rcx
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1400154a0
test al, al
jne 0x140013558
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
lea rcx, str.Invalid_file:__s
call fcn.14007de10
lea rdx, [rbp + 0x20]
lea rcx, [rbp]
call fcn.140085940
cmp qword [rax + 0x18], 8
jb 0x1400134b4
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x1400134fd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400134f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d60
call fcn.140091bc0
mov word [rbp], r15w
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140013c7d
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140013553
mov rbx, qword [rbp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14007fe1f.0]
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140013553
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14007fe1f.0]
nop
jmp 0x140013c7d
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov r8d, 7
lea rdx, str.command
lea rcx, [rsp + 0x60]
call fcn.140009300
nop
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
mov rax, qword [rax + 0x48]
call qword [case.0x14007fe1f.0]
mov rcx, qword [rax]
mov rax, qword [rcx]
mov rax, qword [rax + 0x38]
call qword [case.0x14007fe1f.0]
mov rbx, rax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400135ee
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400135e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d66
call fcn.140091bc0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14001360e
mov rcx, qword [rbx]
lea rdx, str.clean_completion
call fcn.14009b2d8
lea r9, [rbp + 0x20]
test eax, eax
jne 0x140013932
cmp qword [rbp + 0x38], 8
cmovae r9, qword [rbp + 0x20]
cmp qword [rbx + 0x18], 0x10
jb 0x14001363a
mov rbx, qword [rbx]
lea r8, str.Finish_deferred_response
mov rdx, rbx
lea rcx, str.Command__S____s:__s
call fcn.14007de10
lea rcx, [rbp + 0x40]
call fcn.140012850
mov rdi, qword [rbp + 0x30]
cmp rdi, 2
jae 0x1400136f2
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
lea rsi, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rsi, qword [rbp + 0x20]
cmp rdi, 8
jae 0x1400136aa
movups xmm0, xmmword [rsi]
mov qword [rsp + 0x30], rdi
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x38], 7
lea rcx, [rsp + 0x20]
jmp 0x1400138df
mov rbx, rdi
or rbx, 7
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, r13
ja 0x140013d6c
lfence
add rcx, rcx
call fcn.140009ca0
mov qword [rsp + 0x20], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140096e20
mov qword [rsp + 0x30], rdi
jmp 0x1400138cb
lea rax, [rbp + 0x20]
mov rcx, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
cmovae rax, rcx
cmp word [rax], 0x5c
jne 0x14001374c
lea rax, [rbp + 0x20]
cmp rdx, 8
cmovae rax, rcx
cmp word [rax + 2], 0x5c
jne 0x14001374c
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
mov rbx, rdi
lea rsi, [rbp + 0x20]
cmp rdx, 8
cmovae rsi, rcx
cmp rdi, 8
jae 0x1400136ad
jmp 0x14001368a
lea rax, [rbp + 0x20]
cmp rdx, 8
cmovae rax, rcx
movzx ecx, word [rax]
call fcn.1400a5d14
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x20]
test eax, eax
je 0x140013856
lea rax, [rbp + 0x20]
cmp rcx, 8
cmovae rax, rdx
cmp word [rax + 2], 0x3a
jne 0x140013856
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov r8d, 4
lea rdx, [0x1400e1620]
lea rcx, [rbp - 0x80]
call fcn.140009140
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.14000fa80
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14001383e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013839
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d72
call fcn.140091bc0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov rbx, qword [rsp + 0x38]
jmp 0x1400138d0
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
mov rsi, qword [rbp + 0x30]
mov rbx, rsi
lea rdi, [rbp + 0x20]
cmp rcx, 8
cmovae rdi, rdx
cmp rsi, 8
jae 0x14001388b
movups xmm0, xmmword [rdi]
mov qword [rsp + 0x30], rsi
jmp 0x140013692
or rbx, 7
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, r13
ja 0x140013d7e
lfence
add rcx, rcx
call fcn.140009ca0
mov qword [rsp + 0x20], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140096e20
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x20]
cmp rbx, 8
cmovae rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140013927
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013922
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d78
call fcn.140091bc0
mov word [rsp + 0x20], r15w
jmp 0x140013c30
cmp qword [rbp + 0x38], 8
cmovae r9, qword [rbp + 0x20]
cmp qword [rbx + 0x18], 0x10
jb 0x140013946
mov rbx, qword [rbx]
lea r8, str.Not_supported
mov rdx, rbx
lea rcx, str.Command__S____s:__s
call fcn.14007de10
mov rdi, qword [rbp + 0x30]
cmp rdi, 2
jae 0x1400139f5
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
lea rsi, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rsi, qword [rbp + 0x20]
cmp rdi, 8
jae 0x1400139ad
movups xmm0, xmmword [rsi]
mov qword [rsp + 0x50], rdi
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 7
lea rcx, [rsp + 0x40]
jmp 0x140013be2
mov rbx, rdi
or rbx, 7
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, r13
ja 0x140013d84
lfence
add rcx, rcx
call fcn.140009ca0
mov qword [rsp + 0x40], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140096e20
mov qword [rsp + 0x50], rdi
jmp 0x140013bce
lea rax, [rbp + 0x20]
mov rcx, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
cmovae rax, rcx
cmp word [rax], 0x5c
jne 0x140013a4f
lea rax, [rbp + 0x20]
cmp rdx, 8
cmovae rax, rcx
cmp word [rax + 2], 0x5c
jne 0x140013a4f
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov rbx, rdi
lea rsi, [rbp + 0x20]
cmp rdx, 8
cmovae rsi, rcx
cmp rdi, 8
jae 0x1400139b0
jmp 0x14001398d
lea rax, [rbp + 0x20]
cmp rdx, 8
cmovae rax, rcx
movzx ecx, word [rax]
call fcn.1400a5d14
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x20]
test eax, eax
je 0x140013b59
lea rax, [rbp + 0x20]
cmp rcx, 8
cmovae rax, rdx
cmp word [rax + 2], 0x3a
jne 0x140013b59
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
mov r8d, 4
lea rdx, [0x1400e1620]
lea rcx, [rbp - 0x60]
call fcn.140009140
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.14000fa80
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140013b41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d8a
call fcn.140091bc0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
mov rbx, qword [rsp + 0x58]
jmp 0x140013bd3
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov rsi, qword [rbp + 0x30]
mov rbx, rsi
lea rdi, [rbp + 0x20]
cmp rcx, 8
cmovae rdi, rdx
cmp rsi, 8
jae 0x140013b8e
movups xmm0, xmmword [rdi]
mov qword [rsp + 0x50], rsi
jmp 0x140013995
or rbx, 7
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, r13
ja 0x140013d48
lfence
add rcx, rcx
call fcn.140009ca0
mov qword [rsp + 0x40], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140096e20
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
lea rcx, [rsp + 0x40]
cmp rbx, 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140013c2a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013c25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d90
call fcn.140091bc0
mov word [rsp + 0x40], r15w
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140013c7d
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140013c7d
mov rbx, qword [rbp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14007fe1f.0]
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140013c7d
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14007fe1f.0]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140013cbd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140013cb8
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d96
call fcn.140091bc0
lea rdx, [rbp + 0x70]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400133a0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 8
jb 0x140013d18
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d54
call fcn.140091bc0
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.140091ba0
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400026e0
nop
call fcn.14009b188
nop
call fcn.14009b188
nop
call fcn.14009b188
nop
call fcn.14009b188
int3
call fcn.14009b188
int3
call fcn.1400026e0
int3
call fcn.14009b188
int3
call fcn.14009b188
int3
call fcn.1400026e0
int3
call fcn.1400026e0
int3
call fcn.14009b188
int3
call fcn.14009b188
nop
call fcn.14009b188
int3