Function at 0x1400274f0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1f8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x160], xmm7
movaps xmmword [rbp + 0x150], xmm6
mov qword [rbp + 0x148], 0xfffffffffffffffe
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x100], xmm0
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x140027b55
mov rdi, rax
cmp rax, 0xf
ja 0x14002757d
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], 0xf
lea rcx, [rbp + 0x100]
mov rdx, rsi
mov r8, rdi
call fcn.1400adb90
lea rdi, [rbp + rdi + 0x100]
jmp 0x1400275ea
mov r15, rdi
or r15, 0xf
cmp r15, 0x17
mov r14d, 0x16
cmovae r14, r15
cmp r14, 0xfff
jb 0x1400275b5
add r14, 0x28
mov rcx, r14
call fcn.140117ae8
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400275c4
lea rcx, [r14 + 1]
call fcn.140117ae8
mov rbx, rax
mov r15, r14
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], r15
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400adb90
add rdi, rbx
mov byte [rdi], 0
mov rdi, qword [rbp + 0x110]
mov rax, rdi
shr rax, 2
movabs rcx, 0x1fffffffffffffff
cmp rax, rcx
je 0x140027b5a
cmp qword [rbp + 0x118], 0x10
jb 0x140027621
mov rbx, qword [rbp + 0x100]
jmp 0x140027628
lea rbx, [rbp + 0x100]
lea r15, [rdi + 4]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x120], xmm0
movabs rcx, 0x7fffffffffffffff
cmp r15, 0x10
jb 0x140027686
mov rax, r15
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, rcx
cmovae r12, rcx
cmp r12, 0xfff
jb 0x140027695
lea rcx, [r12 + 0x28]
call fcn.140117ae8
mov r14, rax
add r14, 0x27
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x1400276a2
mov r12d, 0xf
lea r14, [rbp + 0x120]
jmp 0x1400276a9
lea rcx, [r12 + 1]
call fcn.140117ae8
mov r14, rax
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], r12
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400adb90
mov dword [r14 + rdi], 0x2a2e2a5c
mov byte [r14 + rdi + 4], 0
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x140027718
mov rcx, qword [rbp + 0x100]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140027713
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140027b4f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
movaps xmm0, xmmword [rbp + 0x120]
movaps xmm1, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x110], xmm1
movaps xmmword [rbp + 0x100], xmm0
cmp qword [rbp + 0x118], 0x10
jb 0x14002775a
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
jne 0x140027775
jmp 0x140027ad9
lea rcx, [rbp + 0x100]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
je 0x140027ad9
mov rdi, rax
lea rbx, [rbp - 0x60]
mov r14, qword [sym.imp.KERNEL32.dll_FindNextFileA]
xorps xmm6, xmm6
jmp 0x1400277a6
call fcn.140117b2c
mov rcx, rdi
mov rdx, rbx
call r14
test eax, eax
je 0x140027ad0
cmp byte [rbp - 0x34], 0x2e
je 0x140027795
movaps xmmword [rbp + 0x130], xmm6
movaps xmmword [rbp + 0x120], xmm6
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x140027b4a
mov r13, rax
cmp rax, 0xf
ja 0x140027810
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 0xf
lea rcx, [rbp + 0x120]
mov rdx, rsi
mov r8, r13
call fcn.1400adb90
lea r13, [rbp + r13 + 0x120]
jmp 0x14002788c
mov qword [rbp + 0x138], 0xf
mov rbx, r13
or rbx, 0xf
cmp rbx, 0x17
mov r15d, 0x16
cmovae r15, rbx
cmp r15, 0xfff
jb 0x14002785a
add r15, 0x28
mov rcx, r15
call fcn.140117ae8
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
mov r15, rbx
jmp 0x140027866
lea rcx, [r15 + 1]
call fcn.140117ae8
mov r12, rax
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], r15
mov rcx, r12
mov rdx, rsi
mov r8, r13
call fcn.1400adb90
add r13, r12
mov byte [r13], 0
mov r13, qword [rbp + 0x130]
movabs rax, 0x7fffffffffffffff
cmp r13, rax
je 0x140027b45
cmp qword [rbp + 0x138], 0x10
lea r15, [rbp + 0x120]
jb 0x1400278c3
mov r15, qword [rbp + 0x120]
lea rbx, [r13 + 1]
movaps xmmword [rbp + 0xe0], xmm6
movaps xmmword [rbp + 0xf0], xmm6
mov r14d, 0xf
lea r12, [rbp + 0xe0]
cmp rbx, 0x10
jb 0x14002793a
mov r14, rbx
or r14, 0xf
cmp r14, 0x17
mov ecx, 0x16
cmovb r14, rcx
cmp r14, rax
cmovae r14, rax
cmp r14, 0xfff
jb 0x140027927
lea rcx, [r14 + 0x28]
call fcn.140117ae8
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140027933
lea rcx, [r14 + 1]
call fcn.140117ae8
mov r12, rax
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], r14
mov rcx, r12
mov rdx, r15
mov r8, r13
call fcn.1400adb90
mov word [r12 + r13], 0x5c
lea rbx, [rbp - 0x34]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rcx, [rbp + 0xe0]
mov rdx, rbx
mov r8, rax
call fcn.140012d60
mov r13, qword [rax]
movups xmm7, xmmword [rax + 8]
mov rbx, qword [rax + 0x18]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rax, qword [rbp + 0x138]
cmp rax, 0x10
jb 0x1400279de
mov rcx, qword [rbp + 0x120]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400279d9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140027b4f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
mov qword [rbp + 0x120], r13
movups xmmword [rbp + 0x128], xmm7
mov qword [rbp + 0x138], rbx
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x140027a46
mov rcx, qword [rbp + 0xe0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140027a33
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140027b4f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
mov r13, qword [rbp + 0x120]
mov rbx, qword [rbp + 0x138]
cmp rbx, 0x10
lea rax, [rbp + 0x120]
cmovb r13, rax
test byte [rbp - 0x60], 0x10
jne 0x140027a70
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x140027a78
mov rcx, r13
call fcn.1400274f0
mov rax, qword [rbp + 0x138]
cmp rax, 0x10
lea rbx, [rbp - 0x60]
mov r14, qword [sym.imp.KERNEL32.dll_FindNextFileA]
jb 0x140027795
mov rcx, qword [rbp + 0x120]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140027790
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140027b4f
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x140027790
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x140027b23
mov rcx, qword [rbp + 0x100]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140027b1e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140027b4f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
movaps xmm6, xmmword [rbp + 0x150]
movaps xmm7, xmmword [rbp + 0x160]
add rsp, 0x1f8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140003290
call fcn.140003290
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.140003290
call fcn.140003290
int3