Function at 0x100025ec0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x2b0
mov rax, qword [0x100036110]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov rsi, rcx
lea rcx, [rsp + 0x54]
xor edi, edi
xor edx, edx
mov r8d, 0x24c
mov dword [rsp + 0x50], edi
call sub.msvcrt.dll_memset
mov r11, rdi
mov rbp, rdi
cmp rsi, rdi
je 0x100025f34
mov r11d, 0x7fffffff
mov rcx, rsi
mov ebx, edi
mov rax, r11
cmp word [rcx], di
je 0x100025f2c
add rcx, 2
sub rax, 1
jne 0x100025f1d
cmp rax, rdi
jne 0x100025f66
mov r11, rdi
mov ebx, 0x80070057
cmp ebx, edi
cmovl r11, rdi
cmp ebx, edi
jge 0x100025f6b
lea rdi, [0x100005b90]
lea r8, [0x100005b60]
mov r9, rsi
mov rcx, rdi
mov edx, 0x20f
call fcn.100026818
jmp 0x100026373
sub r11, rax
jmp 0x100025f39
cmp r11, 3
ja 0x100025f99
lea rdi, [0x100005b90]
lea r8, [0x100005bb8]
mov r9, rsi
mov edx, 0x214
mov rcx, rdi
mov ebx, 0x80070057
call fcn.100026818
jmp 0x100026377
mov ecx, 0x104
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.100033792
mov rdi, rax
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x100025feb
lea r8, [0x100005be0]
mov edx, 0x21c
lea rdi, [0x100005b90]
mov rcx, rdi
call fcn.100026818
mov ebx, 0x8007000e
jmp 0x100026357
mov ebx, 0x208
xor edx, edx
mov rcx, rax
mov r8, rbx
call sub.msvcrt.dll_memset
mov ecx, 0x104
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.100033792
mov rbp, rax
test rax, rax
jne 0x100026031
lea r8, [0x100005c18]
lea edx, [rbx + 0x18]
jmp 0x100025fd2
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
lea r8, [0x100005c58]
mov r9, rsi
mov edx, 0x104
mov rcx, rdi
call fcn.1000218d0
mov ebx, eax
test eax, eax
jns 0x10002607e
lea rdi, [0x100005b90]
lea r8, [0x1000020e0]
mov r9, rsi
mov rcx, rdi
mov edx, 0x224
call fcn.100026818
jmp 0x100026357
lea rdx, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x30], rax
cmp rax, rcx
jne 0x1000260bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rdi
lea rdi, [0x100005b90]
lea r8, [0x100002130]
mov edx, 0x227
jmp 0x1000262f7
lea rdi, [0x100005b90]
lea rdx, [0x100005c68]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x1000261b1
lea rdx, [0x100005c6c]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x1000261b1
lea rax, [rsp + 0x7c]
lea r8, [0x100002188]
mov r9, rsi
mov edx, 0x104
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.1000218d0
mov ebx, eax
test eax, eax
js 0x100026212
test byte [rsp + 0x50], 0x10
mov rcx, rbp
je 0x10002614a
call fcn.100025ec0
mov ebx, eax
test eax, eax
jns 0x1000261b1
mov r9, rbp
lea r8, [0x100005ca0]
mov edx, 0x23d
jmp 0x10002630f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1000261b1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100005cd0]
mov r9, rbp
mov edx, 0x244
mov rcx, rdi
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x20], eax
call fcn.100026818
mov r11d, dword [rsp + 0x38]
cmp r11d, 2
je 0x1000261b1
cmp r11d, 3
je 0x1000261b1
lea r8, [0x100005d08]
mov edx, 0x247
mov rcx, rdi
call fcn.100026818
xor edx, edx
mov rcx, rbp
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x1000261ff
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1000260c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x100026238
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x100026238
lea r8, [0x1000021e0]
mov edx, 0x253
mov rcx, rdi
call fcn.100026818
jmp 0x100026317
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rbp
mov edx, 0x249
jmp 0x1000262f0
lea rax, [rsp + 0x7c]
lea r8, [0x100005c78]
mov r9, rsi
mov edx, 0x236
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.100026818
jmp 0x100026317
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x10002626e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, [0x100005d58]
lea r8, [0x100005d68]
mov edx, 0x25f
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.100026818
jmp 0x100026274
or qword [rsp + 0x30], 0xffffffffffffffff
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x100026317
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100005d88]
mov r9, rsi
mov edx, 0x271
mov rcx, rdi
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x20], eax
call fcn.100026818
mov r11d, dword [rsp + 0x38]
cmp r11d, 3
je 0x100026317
cmp r11d, 2
je 0x100026317
lea r8, [0x100005d08]
mov edx, 0x275
mov rcx, rdi
call fcn.100026818
xor edx, edx
mov rcx, rsi
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x100026317
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rsi
mov edx, 0x277
lea r8, [0x100005d30]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov eax, 0x80004005
test ebx, ebx
cmovns ebx, eax
mov rcx, rdi
call fcn.100026818
mov rax, qword [rsp + 0x30]
or rcx, 0xffffffffffffffff
cmp rax, rcx
je 0x100026357
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x100026357
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, [0x100005d58]
lea r8, [0x100005d68]
mov edx, 0x282
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.100026818
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x100026366
call fcn.10003379e
test rbp, rbp
je 0x100026373
mov rcx, rbp
call fcn.10003379e
test ebx, ebx
jns 0x1000263aa
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
mov ecx, ebx
call fcn.100021e1c
mov r11, qword [rsp + 0x30]
lea r8, [0x100001b60]
mov r9d, ebx
mov edx, 0x289
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.100026818
mov eax, ebx
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.1000336c0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret