Function at 0x100025e90
Capabilities:
Check if file exists
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x2b0
mov rax, qword [0x100036110]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov rsi, rcx
lea rcx, [rsp + 0x54]
xor edi, edi
xor edx, edx
mov r8d, 0x24c
mov dword [rsp + 0x50], edi
call sub.msvcrt.dll_memset
mov r11, rdi
mov rbp, rdi
cmp rsi, rdi
je 0x100025f04
mov r11d, 0x7fffffff
mov rcx, rsi
mov ebx, edi
mov rax, r11
cmp word [rcx], di
je 0x100025efc
add rcx, 2
sub rax, 1
jne 0x100025eed
cmp rax, rdi
jne 0x100025f36
mov r11, rdi
mov ebx, 0x80070057
cmp ebx, edi
cmovl r11, rdi
cmp ebx, edi
jge 0x100025f3b
lea rdi, [0x100005b90]
lea r8, [0x100005b60]
mov r9, rsi
mov rcx, rdi
mov edx, 0x20f
call fcn.1000267e8
jmp 0x100026343
sub r11, rax
jmp 0x100025f09
cmp r11, 3
ja 0x100025f69
lea rdi, [0x100005b90]
lea r8, [0x100005bb8]
mov r9, rsi
mov edx, 0x214
mov rcx, rdi
mov ebx, 0x80070057
call fcn.1000267e8
jmp 0x100026347
mov ecx, 0x104
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rdi, rax
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x100025fbb
lea r8, [0x100005be0]
mov edx, 0x21c
lea rdi, [0x100005b90]
mov rcx, rdi
call fcn.1000267e8
mov ebx, 0x8007000e
jmp 0x100026327
mov ebx, 0x208
xor edx, edx
mov rcx, rax
mov r8, rbx
call sub.msvcrt.dll_memset
mov ecx, 0x104
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbp, rax
test rax, rax
jne 0x100026001
lea r8, [0x100005c18]
lea edx, [rbx + 0x18]
jmp 0x100025fa2
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
lea r8, [0x100005c58]
mov r9, rsi
mov edx, 0x104
mov rcx, rdi
call fcn.1000218a0
mov ebx, eax
test eax, eax
jns 0x10002604e
lea rdi, [0x100005b90]
lea r8, [0x1000020e0]
mov r9, rsi
mov rcx, rdi
mov edx, 0x224
call fcn.1000267e8
jmp 0x100026327
lea rdx, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x30], rax
cmp rax, rcx
jne 0x10002608b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rdi
lea rdi, [0x100005b90]
lea r8, [0x100002130]
mov edx, 0x227
jmp 0x1000262c7
lea rdi, [0x100005b90]
lea rdx, [0x100005c68]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x100026181
lea rdx, [0x100005c6c]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x100026181
lea rax, [rsp + 0x7c]
lea r8, [0x100002188]
mov r9, rsi
mov edx, 0x104
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.1000218a0
mov ebx, eax
test eax, eax
js 0x1000261e2
test byte [rsp + 0x50], 0x10
mov rcx, rbp
je 0x10002611a
call fcn.100025e90
mov ebx, eax
test eax, eax
jns 0x100026181
mov r9, rbp
lea r8, [0x100005ca0]
mov edx, 0x23d
jmp 0x1000262df
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x100026181
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100005cd0]
mov r9, rbp
mov edx, 0x244
mov rcx, rdi
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x20], eax
call fcn.1000267e8
mov r11d, dword [rsp + 0x38]
cmp r11d, 2
je 0x100026181
cmp r11d, 3
je 0x100026181
lea r8, [0x100005d08]
mov edx, 0x247
mov rcx, rdi
call fcn.1000267e8
xor edx, edx
mov rcx, rbp
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x1000261cf
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100026092
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x100026208
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x100026208
lea r8, [0x1000021e0]
mov edx, 0x253
mov rcx, rdi
call fcn.1000267e8
jmp 0x1000262e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rbp
mov edx, 0x249
jmp 0x1000262c0
lea rax, [rsp + 0x7c]
lea r8, [0x100005c78]
mov r9, rsi
mov edx, 0x236
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1000267e8
jmp 0x1000262e7
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x10002623e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, [0x100005d58]
lea r8, [0x100005d68]
mov edx, 0x25f
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.1000267e8
jmp 0x100026244
or qword [rsp + 0x30], 0xffffffffffffffff
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x1000262e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100005d88]
mov r9, rsi
mov edx, 0x271
mov rcx, rdi
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x20], eax
call fcn.1000267e8
mov r11d, dword [rsp + 0x38]
cmp r11d, 3
je 0x1000262e7
cmp r11d, 2
je 0x1000262e7
lea r8, [0x100005d08]
mov edx, 0x275
mov rcx, rdi
call fcn.1000267e8
xor edx, edx
mov rcx, rsi
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x1000262e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rsi
mov edx, 0x277
lea r8, [0x100005d30]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov eax, 0x80004005
test ebx, ebx
cmovns ebx, eax
mov rcx, rdi
call fcn.1000267e8
mov rax, qword [rsp + 0x30]
or rcx, 0xffffffffffffffff
cmp rax, rcx
je 0x100026327
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x100026327
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, [0x100005d58]
lea r8, [0x100005d68]
mov edx, 0x282
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.1000267e8
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x100026336
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
test rbp, rbp
je 0x100026343
mov rcx, rbp
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
test ebx, ebx
jns 0x10002637a
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
mov ecx, ebx
call fcn.100021dec
mov r11, qword [rsp + 0x30]
lea r8, [0x100001b60]
mov r9d, ebx
mov edx, 0x289
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.1000267e8
mov eax, ebx
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.100033670
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret