Function at 0x140026330
Capabilities:
Delete directory
Delete file
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x380
mov rdi, rcx
xor edx, edx
lea rcx, [rsp + 0x130]
mov r8d, 0x104
call fcn.14002e170
lea rax, [rsp + 0x130]
mov r9, rdi
sub r9, rax
lea rdx, [rsp + 0x130]
mov r8d, 0x104
nop word [rax + rax]
lea rax, [r8 + 0x7ffffefa]
test rax, rax
je 0x1400263a0
movzx eax, byte [r9 + rdx]
test al, al
je 0x1400263a0
mov byte [rdx], al
inc rdx
sub r8, 1
jne 0x140026380
test r8, r8
lea rax, [rdx - 1]
mov ecx, 0x104
cmovne rax, rdx
mov byte [rax], 0
lea rax, [rsp + 0x130]
nop dword [rax + rax]
cmp byte [rax], 0
je 0x1400263ce
inc rax
sub rcx, 1
jne 0x1400263c0
xor esi, esi
mov edx, 0x80070057
test rcx, rcx
cmovne edx, esi
je 0x1400263e7
mov eax, 0x104
sub rax, rcx
jmp 0x1400263ea
mov rax, rsi
test edx, edx
js 0x140026443
mov edx, 0x104
lea rcx, [rsp + 0x130]
lea rcx, [rcx + rax]
sub rdx, rax
je 0x140026435
add rax, 0x7ffffefa
lea r9, [0x1400867fc]
add rax, rdx
sub r9, rcx
test rax, rax
je 0x140026435
movzx r8d, byte [r9 + rcx]
test r8b, r8b
je 0x140026435
mov byte [rcx], r8b
dec rax
inc rcx
sub rdx, 1
jne 0x140026417
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], sil
xor edx, edx
lea rcx, [rsp + 0x240]
mov r8d, 0x140
call fcn.14002e170
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140026639
nop dword [rax + rax]
test byte [rsp + 0x240], 0x10
jne 0x140026617
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x104
call fcn.14002e170
lea rax, [rsp + 0x20]
mov r8, rdi
sub r8, rax
lea rcx, [rsp + 0x20]
mov edx, 0x104
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x1400264e0
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400264e0
mov byte [rcx], al
inc rcx
sub rdx, 1
jne 0x1400264c0
lea rax, [rcx - 1]
test rdx, rdx
cmovne rax, rcx
mov ecx, 0x104
mov byte [rax], sil
lea rax, [rsp + 0x20]
cmp byte [rax], sil
je 0x140026506
inc rax
sub rcx, 1
jne 0x1400264f8
test rcx, rcx
mov edx, 0x80070057
cmovne edx, esi
je 0x14002651d
mov eax, 0x104
sub rax, rcx
jmp 0x140026520
mov rax, rsi
test edx, edx
js 0x14002657c
mov edx, 0x104
lea rcx, [rsp + 0x20]
lea rcx, [rcx + rax]
sub rdx, rax
je 0x14002656e
add rax, 0x7ffffefa
lea r9, [0x14007d45c]
add rax, rdx
sub r9, rcx
nop word [rax + rax]
test rax, rax
je 0x14002656e
movzx r8d, byte [rcx + r9]
test r8b, r8b
je 0x14002656e
mov byte [rcx], r8b
dec rax
inc rcx
sub rdx, 1
jne 0x140026550
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], sil
mov ecx, 0x104
lea rax, [rsp + 0x20]
cmp byte [rax], sil
je 0x140026594
inc rax
sub rcx, 1
jne 0x140026586
test rcx, rcx
mov edx, 0x80070057
cmovne edx, esi
je 0x1400265ab
mov eax, 0x104
sub rax, rcx
jmp 0x1400265ae
mov rax, rsi
test edx, edx
js 0x14002660c
mov edx, 0x104
lea rcx, [rsp + 0x20]
lea rcx, [rcx + rax]
sub rdx, rax
je 0x1400265fe
add rax, 0x7ffffefa
lea r9, [rsp + 0x26c]
add rax, rdx
sub r9, rcx
nop dword [rax]
test rax, rax
je 0x1400265fe
movzx r8d, byte [rcx + r9]
test r8b, r8b
je 0x1400265fe
mov byte [rcx], r8b
dec rax
inc rcx
sub rdx, 1
jne 0x1400265e0
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], sil
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0x240]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140026480
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret