Function at 0x1000b16c4
Capabilities:
Check if file exists
Delete file
Enumerate files on windows
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x290
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov edi, 0x288
or r15, 0xffffffffffffffff
mov rbx, rdx
mov rcx, rdi
mov r13, r15
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor r14d, r14d
mov rsi, rax
cmp rax, r14
jne 0x1000b1757
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b174d
test byte [rcx + 0x1c], 2
je 0x1000b174d
cmp byte [rcx + 0x19], 1
jb 0x1000b174d
mov rcx, qword [rcx + 0x10]
lea edx, [r15 + 0x50]
lea r8, [0x1000036e8]
mov r9d, edi
call fcn.10001c7dc
mov eax, 0x8007000e
jmp 0x1000b1a78
mov edi, 0x412
mov rcx, rdi
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r12, rax
cmp rax, r14
jne 0x1000b17ad
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b17a3
test byte [rcx + 0x1c], 2
je 0x1000b17a3
cmp byte [rcx + 0x19], 1
jb 0x1000b17a3
mov rcx, qword [rcx + 0x10]
lea r8, [0x1000036e8]
mov edx, 0x50
mov r9d, edi
call fcn.10001c7dc
mov ebx, 0x8007000e
jmp 0x1000b1a58
mov ebp, 0x144
cmp rbx, r14
jne 0x1000b17d8
lea edx, [rbp - 0x3f]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call fcn.1000b2a6c
cmp eax, r14d
mov ebx, eax
jl 0x1000b1a58
jmp 0x1000b1871
xor eax, eax
mov rcx, r15
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 0x104
jb 0x1000b180a
lea r8, [0x10000b220]
lea rcx, [0x10000b150]
mov edx, 0x84f
call fcn.100099ad8
xor eax, eax
mov rcx, r15
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
cmp word [rbx + rcx*2 - 4], 0x5c
jne 0x1000b1838
lea r8, [0x10000b4e0]
lea rcx, [0x10000b150]
mov edx, 0x850
call fcn.100099ad8
mov rdx, rbp
mov rcx, rsi
sub rbx, rsi
lea rax, [rdx + 0x7ffffeba]
cmp rax, r14
je 0x1000b1864
movzx eax, word [rbx + rcx]
cmp ax, r14w
je 0x1000b1864
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b1841
cmp rdx, r14
jne 0x1000b186d
sub rcx, 2
mov word [rcx], r14w
lea r8, [0x100002954]
mov rdx, rbp
mov rcx, rsi
call fcn.1000590dc
xor eax, eax
mov rcx, r15
mov rdi, rsi
mov ebx, r14d
repne scasw ax, word [rdi]
not rcx
add rcx, 7
cmp rcx, rbp
jb 0x1000b18b5
lea r8, [0x10000b558]
lea rcx, [0x10000b150]
mov edx, 0x860
call fcn.100099ad8
lea r8, [0x1000028d8]
mov rdx, rbp
mov rcx, rsi
call fcn.1000590dc
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1000b1a58
xor eax, eax
mov rcx, r15
mov rdi, rsi
repne scasw ax, word [rdi]
mov edi, 0x209
not rcx
add rcx, 0x13
cmp rcx, rdi
jb 0x1000b190d
lea r8, [0x10000b5a0]
lea rcx, [0x10000b150]
mov edx, 0x86a
call fcn.100099ad8
mov rbp, rsi
mov rdx, rdi
mov rcx, r12
sub rbp, r12
lea rax, [rdx + 0x7ffffdf5]
cmp rax, r14
je 0x1000b193c
movzx eax, word [rcx + rbp]
cmp ax, r14w
je 0x1000b193c
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b1919
cmp rdx, r14
jne 0x1000b1945
sub rcx, 2
mov word [rcx], r14w
lea r8, [0x100002954]
mov rdx, rdi
mov rcx, r12
call fcn.1000590dc
lea r8, [0x1000028e8]
mov rdx, rdi
mov rcx, r12
call fcn.1000590dc
lea r8, [0x100008254]
mov rdx, rdi
mov rcx, r12
call fcn.1000590dc
lea rdx, [rsp + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r13, rax
cmp rax, r15
je 0x1000b1a58
xor eax, eax
mov rcx, r15
mov rdi, rsi
repne scasw ax, word [rdi]
lea rdi, [rsp + 0x5c]
not rcx
lea rdx, [rcx - 1]
mov rcx, r15
repne scasw ax, word [rdi]
mov edi, 0x209
not rcx
lea rax, [rdx + rcx + 1]
cmp rax, rdi
jb 0x1000b19e0
lea r8, [0x10000b5f0]
lea rcx, [0x10000b150]
mov edx, 0x880
call fcn.100099ad8
mov rdx, rdi
mov rcx, r12
lea rax, [rdx + 0x7ffffdf5]
cmp rax, r14
je 0x1000b1a09
movzx eax, word [rcx + rbp]
cmp ax, r14w
je 0x1000b1a09
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b19e6
cmp rdx, r14
jne 0x1000b1a12
sub rcx, 2
mov word [rcx], r14w
lea r8, [0x100002954]
mov rdx, rdi
mov rcx, r12
call fcn.1000590dc
lea r8, [rsp + 0x5c]
mov rdx, rdi
mov rcx, r12
call fcn.1000590dc
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [rsp + 0x30]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, r14d
jne 0x1000b1999
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, r12
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp r13, r15
je 0x1000b1a76
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, ebx
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.10014e480
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret