Function at 0x7ff7ec6196f0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x160]
sub rsp, 0x260
mov r13, rcx
movabs rax, 0xa2859a2188e92381
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x50], rax
movabs r14, 0xeefb7cec873f02d2
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x48], rax
movabs r15, 0xa2859a2188e909dd
mov qword [rbp + 0x1a8], r15
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x50], xmm0
lea r8, [rbp - 0x50]
mov rdx, rcx
lea rcx, [rbp]
call fcn.7ff7ec617ce0
cmp qword [rax + 0x18], 0x10
jb 0x7ff7ec6197a1
mov rax, qword [rax]
lea rdx, [rbp + 0x20]
mov rcx, rax
call qword [sym.imp.kernel32.dll_FindFirstFileA]
mov rbx, rax
mov qword [rbp + 0x1b0], rax
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x7ff7ec6197f6
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7ec6197f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7ec6197f1
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7ec61e988
xor esi, esi
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 0xf
mov byte [rbp], sil
cmp rbx, 0xffffffffffffffff
jne 0x7ff7ec61982b
xor al, al
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x260
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movabs r12, 0xa2859a2188e927f3
movabs rbx, 0xa2859a2188e909f3
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
lea rax, [rbp + 0x4c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7ec619862
lea rdx, [rbp + 0x4c]
lea rcx, [rsp + 0x20]
call fcn.7ff7ec5666c0
nop
mov qword [rbp + 0x1a8], rbx
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x80], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x78], rax
mov qword [rbp + 0x1a8], r15
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x30], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x28], rax
movdqa xmm0, xmmword [rbp - 0x80]
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7ec6198e0
lea rcx, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x38]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0x30]
cmp r8, rax
jne 0x7ff7ec61991b
lea rdx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x7ff7ec6199b7
mov qword [rbp + 0x1a8], r12
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x70], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x68], rax
mov qword [rbp + 0x1a8], r15
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x20], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7ec619980
lea rcx, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x38]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0x30]
cmp r8, rax
jne 0x7ff7ec6199f7
lea rdx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff7ec6199f7
cmp rdi, 0x10
jb 0x7ff7ec619cca
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x7ff7ec6199ea
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7ec619d22
mov rcx, rbx
call fcn.7ff7ec61e988
jmp 0x7ff7ec619cca
movabs rax, 0xa2859a2188e90981
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x60], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x1a8], r15
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x1a8], r14
mov rax, qword [rbp + 0x1a8]
mov qword [rbp - 8], rax
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x60], xmm0
mov r12, qword [r13 + 0x10]
lea rax, [rbp - 0x60]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x7ff7ec619a67
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r12
cmp rax, rbx
jb 0x7ff7ec619d2f
mov r15, r13
cmp qword [r13 + 0x18], 0x10
jb 0x7ff7ec619a97
mov r15, qword [r13]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
lea r14, [rbx + r12]
mov edi, 0xf
lea rsi, [rsp + 0x60]
cmp r14, rdi
jbe 0x7ff7ec619b30
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x7ff7ec619ad4
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x7ff7ec619afb
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x7ff7ec619b1a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff7ec619d29
mov rcx, rax
call fcn.7ff7ec61e94c
test rax, rax
je 0x7ff7ec619d0d
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x7ff7ec619b2b
test rcx, rcx
je 0x7ff7ec619b29
call fcn.7ff7ec61e94c
mov rsi, rax
jmp 0x7ff7ec619b2b
xor esi, esi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov r8, r12
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r12]
mov r8, rbx
lea rdx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], 0
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.7ff7ec566630
xor esi, esi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x7ff7ec619beb
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7ec619be6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7ec619d14
call fcn.7ff7ec61e988
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
test byte [rbp + 0x20], 0x10
je 0x7ff7ec619c10
call fcn.7ff7ec6196f0
jmp 0x7ff7ec619c23
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.kernel32.dll_DeleteFileA]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x7ff7ec619c60
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7ec619c5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7ec619d1b
call fcn.7ff7ec61e988
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x7ff7ec619cac
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7ec619ca7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7ec619d22
call fcn.7ff7ec61e988
movabs r12, 0xa2859a2188e927f3
movabs r15, 0xa2859a2188e909dd
movabs r14, 0xeefb7cec873f02d2
lea rdx, [rbp + 0x20]
mov rbx, qword [rbp + 0x1b0]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_FindNextFileA]
test eax, eax
jne 0x7ff7ec619835
mov rcx, rbx
call qword [sym.imp.kernel32.dll_FindClose]
cmp qword [r13 + 0x18], 0x10
jb 0x7ff7ec619cfa
mov r13, qword [r13]
mov rcx, r13
call qword [sym.imp.kernel32.dll_RemoveDirectoryA]
test eax, eax
setne al
jmp 0x7ff7ec619810
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.7ff7ec566470
int3
call fcn.7ff7ec566500
int3