Function at 0x1400eb4a0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x310], rbx
mov rax, qword [0x140415a10]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov byte [rsp + 0x20], dl
mov rsi, rcx
lea rax, [0x140346ce0]
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], rax
lea edx, [rax + 1]
lea rcx, [rsp + 0x28]
call fcn.1401fcb40
mov eax, dword [rsp + 0x30]
inc eax
movsxd rdx, eax
mov r9d, 1
lea r8, [0x14034c84c]
mov rcx, qword [rsp + 0x28]
call fcn.1402ba94c
mov edx, 1
lea rcx, [rsp + 0x28]
call fcn.1401fde50
nop
lea r8, [rsp + 0x28]
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400d2ba0
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x40]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x38]
call fcn.1402ba94c
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401fde50
nop
cmp dword [rsp + 0x60], 0
jle 0x1400eb58d
mov rcx, qword [rsp + 0x58]
call fcn.1402b7350
nop
cmp dword [rsp + 0x30], 0
jle 0x1400eb59e
mov rcx, qword [rsp + 0x28]
call fcn.1402b7350
lea rdx, [rbp - 0x80]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400eb78b
nop word [rax + rax]
mov eax, dword [rbp - 0x80]
cmp word [rbp - 0x54], 0x2e
jne 0x1400eb5d2
test al, 0x10
jne 0x1400eb72a
or rbx, 0xffffffffffffffff
test al, 0x10
lea rax, [rbp - 0x54]
je 0x1400eb690
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400eb5e2
xor eax, eax
mov qword [rsp + 0x50], rax
test ebx, ebx
jne 0x1400eb605
lea rax, [0x140346ce0]
mov qword [rsp + 0x48], rax
jmp 0x1400eb62b
mov edx, ebx
lea rcx, [rsp + 0x48]
call fcn.1401fcb40
movsxd r9, ebx
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
lea r8, [rbp - 0x54]
mov rcx, qword [rsp + 0x48]
call fcn.1402ba94c
mov edx, ebx
lea rcx, [rsp + 0x48]
call fcn.1401fde50
nop
lea r8, [rsp + 0x48]
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.1400d2ba0
nop
cmp dword [rsp + 0x50], 0
jle 0x1400eb65c
mov rcx, qword [rsp + 0x48]
call fcn.1402b7350
movzx eax, byte [rsp + 0x20]
test al, al
je 0x1400eb67a
movzx edx, al
lea rcx, [rsp + 0x68]
call fcn.1400eb4a0
test al, al
je 0x1400eb740
cmp dword [rsp + 0x70], 0
jle 0x1400eb72a
mov rcx, qword [rsp + 0x68]
jmp 0x1400eb725
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400eb690
xor eax, eax
mov qword [rsp + 0x30], rax
test ebx, ebx
jne 0x1400eb6b3
lea rax, [0x140346ce0]
mov qword [rsp + 0x28], rax
jmp 0x1400eb6d9
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.1401fcb40
movsxd r9, ebx
mov eax, dword [rsp + 0x30]
inc eax
movsxd rdx, eax
lea r8, [rbp - 0x54]
mov rcx, qword [rsp + 0x28]
call fcn.1402ba94c
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.1401fde50
nop
lea r8, [rsp + 0x28]
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400d2ba0
nop
cmp dword [rsp + 0x30], 0
jle 0x1400eb70a
mov rcx, qword [rsp + 0x28]
call fcn.1402b7350
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400eb771
cmp dword [rsp + 0x60], 0
jle 0x1400eb72a
mov rcx, qword [rsp + 0x58]
call fcn.1402b7350
lea rdx, [rbp - 0x80]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x1400eb758
jmp 0x1400eb5c0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
cmp dword [rsp + 0x70], 0
jle 0x1400eb78b
mov rcx, qword [rsp + 0x68]
jmp 0x1400eb786
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
setne bl
jmp 0x1400eb78d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [rsp + 0x60], 0
jle 0x1400eb78b
mov rcx, qword [rsp + 0x58]
call fcn.1402b7350
xor bl, bl
cmp dword [rsp + 0x40], 0
jle 0x1400eb79e
mov rcx, qword [rsp + 0x38]
call fcn.1402b7350
movzx eax, bl
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.1402b6d40
mov rbx, qword [rsp + 0x310]
add rsp, 0x2e0
pop rdi
pop rsi
pop rbp
ret