Function at 0x1400cb8c0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x2f0], rbx
mov rax, qword [0x140216b40]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov rbx, rdx
mov qword [rsp + 0x50], rcx
call fcn.14004b618
mov rcx, rax
test rax, rax
jne 0x1400cb915
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
call fcn.14004b618
mov rcx, rax
test rax, rax
jne 0x1400cb93c
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x20], rax
mov rdx, qword [rbx]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.14004e8f8
lea rdx, [0x140187400]
or rsi, 0xffffffffffffffff
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400cb970
mov r8d, eax
lea rcx, [rsp + 0x28]
call fcn.14004e8f8
mov rdx, qword [rbx]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.14004e8f8
lea rdx, [0x1401d2bec]
mov rax, rsi
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400cb9a2
mov r8d, eax
lea rcx, [rsp + 0x20]
call fcn.14004e8f8
lea rdx, [rsp + 0x60]
mov rdi, qword [rsp + 0x28]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x38], rax
cmp rax, 0xffffffffffffffff
je 0x1400cbd78
mov rdx, qword [rsp + 0x20]
lea rcx, [rdx - 0x18]
lea rbx, [rdi - 0x18]
cmp rcx, rbx
je 0x1400cba40
cmp dword [rbx + 0x10], 0
jl 0x1400cba27
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400cba27
call fcn.14004ecac
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400cba1c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rdi, 0x18
mov qword [rsp + 0x28], rdi
jmp 0x1400cba3a
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.14004edac
mov rdi, qword [rsp + 0x28]
mov rax, qword [rsp + 0x38]
nop
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x1400cbd55
call fcn.14004b618
test rax, rax
je 0x1400cbd4a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x74]
lea rax, [rbp - 0x74]
test rax, 0xffffffffffff0000
jne 0x1400cbab8
movzx ecx, cx
xor edx, edx
call fcn.14004ae14
test rax, rax
je 0x1400cbbd1
lea rcx, [rbp - 0x74]
movzx r8d, cx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14004f058
mov rbx, qword [rsp + 0x30]
jmp 0x1400cbbd1
lea rax, [rbp - 0x74]
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400cbac0
test esi, esi
jne 0x1400cbb39
lea rdx, [rbx - 0x18]
mov rcx, qword [rdx]
mov qword [rsp + 0x40], rcx
cmp dword [rdx + 8], esi
je 0x1400cbbcd
cmp dword [rdx + 0x10], esi
jge 0x1400cbb02
cmp dword [rbx - 0xc], esi
jl 0x1400cbd02
xor ecx, ecx
mov dword [rbx - 0x10], ecx
mov word [rbx], cx
or rsi, 0xffffffffffffffff
jmp 0x1400cbbd3
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cbb20
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
mov rdi, qword [rsp + 0x28]
jmp 0x1400cbbd1
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x40], eax
lea rdx, [rbp - 0x74]
sub rdx, rbx
sar rdx, 1
mov qword [rsp + 0x48], rdx
test esi, esi
js 0x1400cbd3f
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400cbb7e
mov edx, esi
lea rcx, [rsp + 0x30]
call fcn.14004ed24
mov rbx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x40]
mov rcx, rbx
cmp rdx, rax
ja 0x1400cbb9c
lea r8, [rbx + rdx*2]
movsxd rdx, dword [rbx - 0xc]
mov r9d, esi
call fcn.14004f17c
jmp 0x1400cbbb2
movsxd r9, esi
add r9, r9
movsxd rdx, dword [rbx - 0xc]
add rdx, rdx
lea r8, [rbp - 0x74]
call fcn.1400cf8c0
cmp esi, dword [rbx - 0xc]
jg 0x1400cbd34
mov dword [rbx - 0x10], esi
movsxd rax, esi
xor ecx, ecx
mov word [rbx + rax*2], cx
or rsi, 0xffffffffffffffff
jmp 0x1400cbbd3
or rsi, 0xffffffffffffffff
xor ecx, ecx
movzx eax, word [rbx]
cmp ax, word [0x140191aa0]
jne 0x1400cbbfd
movzx eax, word [rbx + 2]
cmp ax, word [0x140191aa2]
jne 0x1400cbbfd
movzx eax, word [rbx + 4]
cmp ax, word [0x140191aa4]
jne 0x1400cbbfd
mov eax, ecx
jmp 0x1400cbc02
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400cbc28
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cba35
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400cba35
lea rcx, [rbp - 0x74]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400cbc30
mov r8d, eax
lea rdx, [rbp - 0x74]
lea rcx, [rsp + 0x20]
call fcn.14004e8f8
test byte [rsp + 0x60], 0x10
je 0x1400cbc76
lea rdx, [rsp + 0x20]
mov rcx, qword [rsp + 0x50]
call fcn.1400cb8c0
test eax, eax
je 0x1400cbd0d
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x1400cbc81
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rsi, qword [rsp + 0x20]
add rsi, 0xffffffffffffffe8
lea rcx, [rdi - 0x18]
cmp rcx, rsi
je 0x1400cbce5
cmp dword [rsi + 0x10], 0
jl 0x1400cbcd3
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x1400cbcd3
call fcn.14004ecac
or ecx, 0xffffffff
lock xadd dword [rsi + 0x10], ecx
mov rbx, rax
sub ecx, 1
jg 0x1400cbcc3
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
mov rbx, qword [rsp + 0x30]
jmp 0x1400cbce5
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.14004edac
nop
lea rdx, [rbx - 0x18]
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jle 0x1400cbc1a
jmp 0x1400cba35
mov ecx, 0x80070057
call fcn.14004a980
nop
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cbd78
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400cbd78
mov ecx, 0x80070057
call fcn.14004a980
int3
mov ecx, 0x80070057
call fcn.14004a980
nop
mov ecx, 0x80004005
call fcn.14004a980
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
cmp eax, 0x12
jne 0x1400cbd72
call qword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, 1
jmp 0x1400cbd7a
call qword [sym.imp.KERNEL32.dll_FindClose]
xor ebx, ebx
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cbd99
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400cbdb6
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, ebx
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.1400dd830
mov rbx, qword [rsp + 0x2f0]
add rsp, 0x2c0
pop rdi
pop rsi
pop rbp
ret