Function at 0x140025b10
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1f8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x160], xmm7
movaps xmmword [rbp + 0x150], xmm6
mov qword [rbp + 0x148], 0xfffffffffffffffe
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x100], xmm0
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x140026175
mov rdi, rax
cmp rax, 0xf
ja 0x140025b9f
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], 0xf
lea rcx, [rbp + 0x100]
mov rdx, rsi
mov r8, rdi
call fcn.1400adb90
add rdi, rbp
add rdi, 0x100
jmp 0x140025c0c
mov r15, rdi
or r15, 0xf
cmp r15, 0x17
mov r14d, 0x16
cmovae r14, r15
cmp r14, 0xfff
jb 0x140025bd7
add r14, 0x28
mov rcx, r14
call fcn.140117ae8
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140025be6
lea rcx, [r14 + 1]
call fcn.140117ae8
mov rbx, rax
mov r15, r14
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], r15
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400adb90
add rdi, rbx
mov byte [rdi], 0
mov rdi, qword [rbp + 0x110]
mov rax, rdi
shr rax, 2
movabs rcx, 0x1fffffffffffffff
cmp rax, rcx
je 0x14002617a
cmp qword [rbp + 0x118], 0x10
jb 0x140025c43
mov rbx, qword [rbp + 0x100]
jmp 0x140025c4a
lea rbx, [rbp + 0x100]
lea r15, [rdi + 4]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x120], xmm0
movabs rcx, 0x7fffffffffffffff
cmp r15, 0x10
jb 0x140025ca8
mov rax, r15
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, rcx
cmovae r12, rcx
cmp r12, 0xfff
jb 0x140025cb7
lea rcx, [r12 + 0x28]
call fcn.140117ae8
mov r14, rax
add r14, 0x27
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140025cc4
mov r12d, 0xf
lea r14, [rbp + 0x120]
jmp 0x140025ccb
lea rcx, [r12 + 1]
call fcn.140117ae8
mov r14, rax
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], r12
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400adb90
mov dword [r14 + rdi], 0x2a2e2a5c
mov byte [r14 + rdi + 4], 0
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x140025d3a
mov rcx, qword [rbp + 0x100]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140025d35
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002616f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
movaps xmm0, xmmword [rbp + 0x120]
movaps xmm1, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x110], xmm1
movaps xmmword [rbp + 0x100], xmm0
cmp qword [rbp + 0x118], 0x10
jb 0x140025d7c
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
jne 0x140025d97
jmp 0x1400260f9
lea rcx, [rbp + 0x100]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
je 0x1400260f9
mov rdi, rax
lea rbx, [rbp - 0x60]
mov r14, qword [sym.imp.KERNEL32.dll_FindNextFileA]
xorps xmm6, xmm6
jmp 0x140025dc6
call fcn.140117b2c
mov rcx, rdi
mov rdx, rbx
call r14
test eax, eax
je 0x1400260f0
cmp byte [rbp - 0x34], 0x2e
je 0x140025db5
movaps xmmword [rbp + 0x130], xmm6
movaps xmmword [rbp + 0x120], xmm6
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14002616a
mov r13, rax
cmp rax, 0xf
ja 0x140025e30
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 0xf
lea rcx, [rbp + 0x120]
mov rdx, rsi
mov r8, r13
call fcn.1400adb90
add r13, rbp
add r13, 0x120
jmp 0x140025eac
mov qword [rbp + 0x138], 0xf
mov rbx, r13
or rbx, 0xf
cmp rbx, 0x17
mov r15d, 0x16
cmovae r15, rbx
cmp r15, 0xfff
jb 0x140025e7a
add r15, 0x28
mov rcx, r15
call fcn.140117ae8
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
mov r15, rbx
jmp 0x140025e86
lea rcx, [r15 + 1]
call fcn.140117ae8
mov r12, rax
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], r15
mov rcx, r12
mov rdx, rsi
mov r8, r13
call fcn.1400adb90
add r13, r12
mov byte [r13], 0
mov r13, qword [rbp + 0x130]
movabs rax, 0x7fffffffffffffff
cmp r13, rax
je 0x140026165
cmp qword [rbp + 0x138], 0x10
lea r15, [rbp + 0x120]
jb 0x140025ee3
mov r15, qword [rbp + 0x120]
lea rbx, [r13 + 1]
movaps xmmword [rbp + 0xe0], xmm6
movaps xmmword [rbp + 0xf0], xmm6
mov r14d, 0xf
lea r12, [rbp + 0xe0]
cmp rbx, 0x10
jb 0x140025f5a
mov r14, rbx
or r14, 0xf
cmp r14, 0x17
mov ecx, 0x16
cmovb r14, rcx
cmp r14, rax
cmovae r14, rax
cmp r14, 0xfff
jb 0x140025f47
lea rcx, [r14 + 0x28]
call fcn.140117ae8
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140025f53
lea rcx, [r14 + 1]
call fcn.140117ae8
mov r12, rax
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], r14
mov rcx, r12
mov rdx, r15
mov r8, r13
call fcn.1400adb90
mov word [r12 + r13], 0x5c
lea rbx, [rbp - 0x34]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rcx, [rbp + 0xe0]
mov rdx, rbx
mov r8, rax
call fcn.140012d60
mov r13, qword [rax]
movups xmm7, xmmword [rax + 8]
mov rbx, qword [rax + 0x18]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rax, qword [rbp + 0x138]
cmp rax, 0x10
jb 0x140025ffe
mov rcx, qword [rbp + 0x120]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140025ff9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002616f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
mov qword [rbp + 0x120], r13
movups xmmword [rbp + 0x128], xmm7
mov qword [rbp + 0x138], rbx
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x140026066
mov rcx, qword [rbp + 0xe0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140026053
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002616f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
mov r13, qword [rbp + 0x120]
mov rbx, qword [rbp + 0x138]
cmp rbx, 0x10
lea rax, [rbp + 0x120]
cmovb r13, rax
test byte [rbp - 0x60], 0x10
jne 0x140026090
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x140026098
mov rcx, r13
call fcn.140025b10
mov rax, qword [rbp + 0x138]
cmp rax, 0x10
lea rbx, [rbp - 0x60]
mov r14, qword [sym.imp.KERNEL32.dll_FindNextFileA]
jb 0x140025db5
mov rcx, qword [rbp + 0x120]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140025db0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002616f
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x140025db0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x140026143
mov rcx, qword [rbp + 0x100]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002613e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002616f
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140117b2c
movaps xmm6, xmmword [rbp + 0x150]
movaps xmm7, xmmword [rbp + 0x160]
add rsp, 0x1f8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140003290
call fcn.140003290
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.140003290
call fcn.140003290
int3