Function at 0x1400ed320
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x310], rbx
mov rax, qword [0x1403eaa10]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov byte [rsp + 0x20], dl
mov rsi, rcx
lea rax, [0x140323de0]
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], rax
lea edx, [rax + 1]
lea rcx, [rsp + 0x28]
call fcn.1401e9030
mov eax, dword [rsp + 0x30]
inc eax
movsxd rdx, eax
mov r9d, 1
lea r8, [0x14032967c]
mov rcx, qword [rsp + 0x28]
call fcn.14029b4d8
mov edx, 1
lea rcx, [rsp + 0x28]
call fcn.1401ea290
nop
lea r8, [rsp + 0x28]
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400d1690
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401e9030
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x40]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x38]
call fcn.14029b4d8
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401ea290
nop
cmp dword [rsp + 0x60], 0
jle 0x1400ed40d
mov rcx, qword [rsp + 0x58]
call fcn.140298600
nop
cmp dword [rsp + 0x30], 0
jle 0x1400ed41e
mov rcx, qword [rsp + 0x28]
call fcn.140298600
lea rdx, [rbp - 0x80]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400ed60b
nop word [rax + rax]
mov eax, dword [rbp - 0x80]
cmp word [rbp - 0x54], 0x2e
jne 0x1400ed452
test al, 0x10
jne 0x1400ed5aa
or rbx, 0xffffffffffffffff
test al, 0x10
lea rax, [rbp - 0x54]
je 0x1400ed510
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400ed462
xor eax, eax
mov qword [rsp + 0x50], rax
test ebx, ebx
jne 0x1400ed485
lea rax, [0x140323de0]
mov qword [rsp + 0x48], rax
jmp 0x1400ed4ab
mov edx, ebx
lea rcx, [rsp + 0x48]
call fcn.1401e9030
movsxd r9, ebx
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
lea r8, [rbp - 0x54]
mov rcx, qword [rsp + 0x48]
call fcn.14029b4d8
mov edx, ebx
lea rcx, [rsp + 0x48]
call fcn.1401ea290
nop
lea r8, [rsp + 0x48]
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.1400d1690
nop
cmp dword [rsp + 0x50], 0
jle 0x1400ed4dc
mov rcx, qword [rsp + 0x48]
call fcn.140298600
movzx eax, byte [rsp + 0x20]
test al, al
je 0x1400ed4fa
movzx edx, al
lea rcx, [rsp + 0x68]
call fcn.1400ed320
test al, al
je 0x1400ed5c0
cmp dword [rsp + 0x70], 0
jle 0x1400ed5aa
mov rcx, qword [rsp + 0x68]
jmp 0x1400ed5a5
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400ed510
xor eax, eax
mov qword [rsp + 0x30], rax
test ebx, ebx
jne 0x1400ed533
lea rax, [0x140323de0]
mov qword [rsp + 0x28], rax
jmp 0x1400ed559
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.1401e9030
movsxd r9, ebx
mov eax, dword [rsp + 0x30]
inc eax
movsxd rdx, eax
lea r8, [rbp - 0x54]
mov rcx, qword [rsp + 0x28]
call fcn.14029b4d8
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.1401ea290
nop
lea r8, [rsp + 0x28]
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400d1690
nop
cmp dword [rsp + 0x30], 0
jle 0x1400ed58a
mov rcx, qword [rsp + 0x28]
call fcn.140298600
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400ed5f1
cmp dword [rsp + 0x60], 0
jle 0x1400ed5aa
mov rcx, qword [rsp + 0x58]
call fcn.140298600
lea rdx, [rbp - 0x80]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x1400ed5d8
jmp 0x1400ed440
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
cmp dword [rsp + 0x70], 0
jle 0x1400ed60b
mov rcx, qword [rsp + 0x68]
jmp 0x1400ed606
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
setne bl
jmp 0x1400ed60d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [rsp + 0x60], 0
jle 0x1400ed60b
mov rcx, qword [rsp + 0x58]
call fcn.140298600
xor bl, bl
cmp dword [rsp + 0x40], 0
jle 0x1400ed61e
mov rcx, qword [rsp + 0x38]
call fcn.140298600
movzx eax, bl
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.140297ff0
mov rbx, qword [rsp + 0x310]
add rsp, 0x2e0
pop rdi
pop rsi
pop rbp
ret