Function at 0x1000b2580
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x2b0
mov rax, qword [0x10010f190]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
and qword [rsp + 0x28], 0
mov rax, rdx
mov dword [rsp + 0x20], r8d
lea rdx, [0x1000193c8]
xor edi, edi
test rax, rax
cmovne rdx, rax
lea r9, [rsp + 0x28]
xor r8d, r8d
mov rsi, rcx
call fcn.1000b2490
mov rbp, qword [rsp + 0x28]
mov ebx, eax
test eax, eax
je 0x1000b25e9
xor r9d, r9d
mov edx, 0xd42019a
xor ecx, ecx
jmp 0x1000b269a
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
lea rsi, [rcx + reloc.certcli.dll_Ordinal_260]
xor ecx, ecx
lea rdx, [rsi + rsi]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rdi, rax
test rax, rax
jne 0x1000b2627
mov ebx, 0x8007000e
xor r9d, r9d
mov edx, 0xd49019a
mov r8d, ebx
xor ecx, ecx
jmp 0x1000b269d
mov r8, rbp
mov rdx, rsi
mov rcx, rax
call fcn.100038b1c
mov edx, 0x5c
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_wcsrchr]
lea rdx, [rsp + 0x50]
add rax, 2
mov rcx, rax
mov qword [rsp + 0x40], rax
sub rcx, rdi
shr rcx, 1
mov ecx, ecx
sub rsi, rcx
mov rcx, rbp
mov qword [rsp + 0x30], rsi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
jne 0x1000b26ae
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov ebx, eax
cmp eax, 0x80070002
je 0x1000b26a7
cmp eax, 0x80070003
je 0x1000b26a7
xor r9d, r9d
mov edx, 0xd5b019a
mov rcx, rbp
mov r8d, eax
call fcn.1000b51b8
jmp 0x1000b27b8
xor ebx, ebx
jmp 0x1000b27b8
mov rbp, rax
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x7c]
mov rdx, rsi
call fcn.100038b1c
test byte [rsp + 0x50], 0x10
je 0x1000b27f9
cmp dword [rsp + 0x20], 0
je 0x1000b2794
lea rdx, [rsp + 0x7c]
lea rcx, [0x100016208]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x1000b2794
lea rdx, [rsp + 0x7c]
lea rcx, [0x1000275f0]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x1000b2794
xor edx, edx
mov rcx, rdi
lea r8d, [rdx + 1]
call fcn.1000b2580
mov esi, eax
test eax, eax
je 0x1000b2734
xor r9d, r9d
mov r8d, eax
mov edx, 0xda0019a
mov rcx, rdi
call fcn.1000b51b8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x1000b2773
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
cmp eax, 0x80070002
je 0x1000b2773
cmp eax, 0x80070003
je 0x1000b2773
test esi, esi
mov r8d, eax
mov edx, 0xdac019a
cmove esi, eax
xor r9d, r9d
mov rcx, rdi
call fcn.1000b51b8
test esi, esi
je 0x1000b278f
test ebx, ebx
mov r8d, esi
mov edx, 0xd71019a
cmove ebx, esi
xor r9d, r9d
mov rcx, rdi
call fcn.1000b51b8
mov rsi, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1000b26b1
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbp, qword [rsp + 0x28]
test rbp, rbp
je 0x1000b27c6
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rdi, rdi
je 0x1000b27d4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, ebx
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.1000ef870
mov rbx, qword [rsp + 0x2e0]
add rsp, 0x2b0
pop rdi
pop rsi
pop rbp
ret
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1000b2794
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
test ebx, ebx
mov edx, 0xd82019a
cmove ebx, eax
xor r9d, r9d
mov r8d, eax
mov rcx, rdi
call fcn.1000b51b8
jmp 0x1000b2794