Function at 0x46fcd2
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rbp + 0x10], rcx
mov rax, qword [0x005d3b90]
mov eax, dword [rax]
test eax, eax
jne 0x46ffcb
mov rax, qword [0x00c6cc60]
test rax, rax
jne 0x46fd11
mov edx, 0
mov ecx, 0
call fcn.00446b22
mov qword [0x00c6cc60], rax
mov edx, 1
lea rcx, [0x005b5d1c]
call fcn.004468f9
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0044764d
mov rdx, rax
mov rax, qword [0x00c6cc60]
mov rcx, rax
call fcn.00446cf0
mov rax, qword [0x00c6cdc8]
test rax, rax
jne 0x46fd62
mov edx, 0
mov ecx, 0
call fcn.00446b22
mov qword [0x00c6cdc8], rax
mov rax, qword [0x00c6cdd0]
test rax, rax
jne 0x46fd84
mov edx, 0
mov ecx, 0
call fcn.00446b22
mov qword [0x00c6cdd0], rax
mov rdx, qword [0x00c6cc60]
mov rax, qword [0x00c6cdc8]
mov rcx, rax
call fcn.00446cf0
mov rax, qword [0x00c6cdc8]
mov eax, dword [rax + 8]
mov dword [0x00c6cc58], eax
mov eax, dword [0x00c6cc58]
test eax, eax
jle 0x46fe17
mov rax, qword [0x00c6cdc8]
mov rdx, qword [rax]
mov eax, dword [0x00c6cc58]
cdqe
sub rax, 1
add rax, rdx
movzx eax, byte [rax]
cmp al, 0x2f
je 0x46fdf4
mov rax, qword [0x00c6cdc8]
mov rdx, qword [rax]
mov eax, dword [0x00c6cc58]
cdqe
sub rax, 1
add rax, rdx
movzx eax, byte [rax]
cmp al, 0x5c
jne 0x46fe06
mov rax, qword [0x00c6cdc8]
mov edx, dword [0x00c6cc58]
mov dword [rax + 8], edx
jmp 0x46fe17
mov eax, dword [0x00c6cc58]
sub eax, 1
mov dword [0x00c6cc58], eax
jmp 0x46fdaa
mov eax, dword [0x00c6cc58]
test eax, eax
jne 0x46fe2f
mov rax, qword [0x00c6cdc8]
mov dword [rax + 8], 0
mov dword [0x00c6cdd8], 0
mov rax, qword [0x00c6cc60]
mov rcx, rax
call fcn.004399c5
lea rdx, [0x00c6cc80]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindFirstFileA]
call rax
mov qword [0x00c6cdc0], rax
mov rax, qword [0x00c6cdc0]
cmp rax, 0xffffffffffffffff
jne 0x46fe7e
mov ecx, 0x35
call fcn.004450ba
jmp 0x46ffcf
mov eax, dword [0x00c6cc80]
and eax, 0x10
test eax, eax
jne 0x46ff7a
lea rcx, [0x00c6ccac]
call sub.msvcrt.dll_strlen
add eax, 1
mov edx, eax
lea rcx, [0x00c6ccac]
call fcn.004468f9
mov rdx, rax
mov rax, qword [0x00c6cdc8]
mov rcx, rax
call fcn.0044764d
mov rdx, rax
mov rax, qword [0x00c6cdd0]
mov rcx, rax
call fcn.00446cf0
mov rax, qword [0x00c6cdd0]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_DeleteFileA]
call rax
test eax, eax
sete al
test al, al
je 0x46ff6b
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [0x00c6cc58], eax
mov eax, dword [0x00c6cc58]
cmp eax, 5
je 0x46ff2a
mov eax, dword [0x00c6cc58]
cmp eax, 0x13
je 0x46ff2a
mov eax, dword [0x00c6cc58]
cmp eax, 0x21
je 0x46ff2a
mov eax, dword [0x00c6cc58]
cmp eax, 0x20
jne 0x46ff4c
mov rax, qword [0x00c6cdc0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
call rax
mov ecx, 0x37
call fcn.004450ba
jmp 0x46ffcf
mov rax, qword [0x00c6cdc0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
call rax
mov ecx, 0x35
call fcn.004450ba
jmp 0x46ffcf
mov eax, dword [0x00c6cdd8]
add eax, 1
mov dword [0x00c6cdd8], eax
mov rax, qword [0x00c6cdc0]
lea rdx, [0x00c6cc80]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextFileA]
call rax
test eax, eax
setne al
test al, al
je 0x46ffa2
jmp 0x46fe7e
mov rax, qword [0x00c6cdc0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
call rax
mov eax, dword [0x00c6cdd8]
test eax, eax
jne 0x46ffce
mov ecx, 0x35
call fcn.004450ba
jmp 0x46ffcf
nop
jmp 0x46ffcf
nop
add rsp, 0x20
pop rbp
ret