Function at 0x1600c2d34
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x328]
sub rsp, 0x420
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x160270bd8]
xor rax, rsp
mov qword [rbp + 0x310], rax
mov rsi, rcx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x1600c304d
movzx ecx, word [rcx]
movzx eax, word [0x1601d4934]
cmp ecx, eax
je 0x1600c304d
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.160040aa8
nop
lea rcx, [rbp + 0x20]
call fcn.16005a594
mov rax, qword [rbp + 0x20]
or r9d, 0xffffffff
mov r8d, dword [rbp + 0x34]
lea rdx, [0x1601f9c78]
lea rcx, [rbp + 0x20]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
lea rdx, [rbp + 0xc0]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov rbx, rax
mov qword [rsp + 0x78], rax
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1600c2fa8
movzx ecx, word [rbp + 0xec]
movzx eax, word [0x1601d5250]
sub ecx, eax
jne 0x1600c2e0f
movzx ecx, word [rbp + 0xee]
movzx eax, word [0x1601d5252]
sub ecx, eax
test ecx, ecx
je 0x1600c2f90
movzx ecx, word [rbp + 0xec]
movzx eax, word [0x1601f9cd8]
sub ecx, eax
jne 0x1600c2e4b
movzx ecx, word [rbp + 0xee]
movzx eax, word [0x1601f9cda]
sub ecx, eax
jne 0x1600c2e4b
movzx ecx, word [rbp + 0xf0]
movzx eax, word [0x1601f9cdc]
sub ecx, eax
test ecx, ecx
je 0x1600c2f90
mov rax, qword [rbp + 0x20]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x20]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
lea rcx, [rbp + 0x20]
call fcn.16005a594
mov rax, qword [rbp + 0x20]
or r9d, 0xffffffff
mov r8d, dword [rbp + 0x34]
lea rdx, [rbp + 0xec]
lea rcx, [rbp + 0x20]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
mov rcx, qword [rbp + 0x28]
test byte [rbp + 0xc0], 0x10
je 0x1600c2eb0
call fcn.1600c2d34
jmp 0x1600c2f90
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
test eax, eax
jne 0x1600c2f90
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x60], eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x20]
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x90], xmm1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
mov rsi, qword [rbp + 0x328]
mov r9d, dword [rsp + 0x60]
lea r8, [rbp - 0x80]
lea rdx, str.MSS:_Cleanup_cannot_delete__ls_in_Windows_Search_Data_Directory_with_error_0x_X.
mov ecx, 0x3000000
call fcn.1600f0a4c
mov rcx, rax
and dword [rsp + 0x50], 0
and qword [rsp + 0x48], 0
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x38], rsi
lea rax, str.DelNode
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x20], pe_nt_image_headers64
xor r9d, r9d
mov edx, 0xf0000
call fcn.1600ecb60
mov rsi, qword [rsp + 0x68]
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
jne 0x1600c2ddf
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1600c2fbb
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_RemoveDirectoryW]
test eax, eax
jne 0x1600c303d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x60], eax
cmp eax, 0x91
je 0x1600c303d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rdi, qword [rbp + 0x328]
mov r9d, dword [rsp + 0x60]
mov r8, rsi
lea rdx, str.MSS:_Cleanup_cannot_delete_Directory__ls_in_Windows_Search_Data_Directory_with_error_0x_X.
mov ecx, 0x3000000
call fcn.1600f0a4c
mov rcx, rax
and dword [rsp + 0x50], 0
and qword [rsp + 0x48], 0
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x38], rdi
lea rax, str.DelNode
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x20], VarUI4FromDisp
xor r9d, r9d
mov edx, 0xf0000
call fcn.1600ecb60
xor edi, edi
jmp 0x1600c3042
mov edi, 1
lea rcx, [rbp + 0x20]
call fcn.160040b2c
jmp 0x1600c304f
xor edi, edi
mov eax, edi
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.16006e590
lea r11, [rsp + 0x420]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret