Function at 0x1000b17b4
Capabilities:
Check if file exists
Delete file
Enumerate files on windows
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x290
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov edi, 0x288
or r15, 0xffffffffffffffff
mov rbx, rdx
mov rcx, rdi
mov r13, r15
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor r14d, r14d
mov rsi, rax
cmp rax, r14
jne 0x1000b1847
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b183d
test byte [rcx + 0x1c], 2
je 0x1000b183d
cmp byte [rcx + 0x19], 1
jb 0x1000b183d
mov rcx, qword [rcx + 0x10]
lea edx, [r15 + 0x50]
lea r8, [0x1000036a8]
mov r9d, edi
call fcn.10001c878
mov eax, 0x8007000e
jmp 0x1000b1b68
mov edi, 0x412
mov rcx, rdi
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r12, rax
cmp rax, r14
jne 0x1000b189d
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b1893
test byte [rcx + 0x1c], 2
je 0x1000b1893
cmp byte [rcx + 0x19], 1
jb 0x1000b1893
mov rcx, qword [rcx + 0x10]
lea r8, [0x1000036a8]
mov edx, 0x50
mov r9d, edi
call fcn.10001c878
mov ebx, 0x8007000e
jmp 0x1000b1b48
mov ebp, 0x144
cmp rbx, r14
jne 0x1000b18c8
lea edx, [rbp - 0x3f]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call fcn.1000b2b5c
cmp eax, r14d
mov ebx, eax
jl 0x1000b1b48
jmp 0x1000b1961
xor eax, eax
mov rcx, r15
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 0x104
jb 0x1000b18fa
lea r8, [0x10000b190]
lea rcx, [0x10000b0c0]
mov edx, 0x84f
call fcn.10009a050
xor eax, eax
mov rcx, r15
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
cmp word [rbx + rcx*2 - 4], 0x5c
jne 0x1000b1928
lea r8, [0x10000b450]
lea rcx, [0x10000b0c0]
mov edx, 0x850
call fcn.10009a050
mov rdx, rbp
mov rcx, rsi
sub rbx, rsi
lea rax, [rdx + 0x7ffffeba]
cmp rax, r14
je 0x1000b1954
movzx eax, word [rbx + rcx]
cmp ax, r14w
je 0x1000b1954
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b1931
cmp rdx, r14
jne 0x1000b195d
sub rcx, 2
mov word [rcx], r14w
lea r8, [0x100002934]
mov rdx, rbp
mov rcx, rsi
call fcn.100059424
xor eax, eax
mov rcx, r15
mov rdi, rsi
mov ebx, r14d
repne scasw ax, word [rdi]
not rcx
add rcx, 7
cmp rcx, rbp
jb 0x1000b19a5
lea r8, [0x10000b4c8]
lea rcx, [0x10000b0c0]
mov edx, 0x860
call fcn.10009a050
lea r8, [0x1000028b8]
mov rdx, rbp
mov rcx, rsi
call fcn.100059424
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1000b1b48
xor eax, eax
mov rcx, r15
mov rdi, rsi
repne scasw ax, word [rdi]
mov edi, 0x209
not rcx
add rcx, 0x13
cmp rcx, rdi
jb 0x1000b19fd
lea r8, [0x10000b510]
lea rcx, [0x10000b0c0]
mov edx, 0x86a
call fcn.10009a050
mov rbp, rsi
mov rdx, rdi
mov rcx, r12
sub rbp, r12
lea rax, [rdx + 0x7ffffdf5]
cmp rax, r14
je 0x1000b1a2c
movzx eax, word [rcx + rbp]
cmp ax, r14w
je 0x1000b1a2c
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b1a09
cmp rdx, r14
jne 0x1000b1a35
sub rcx, 2
mov word [rcx], r14w
lea r8, [0x100002934]
mov rdx, rdi
mov rcx, r12
call fcn.100059424
lea r8, [0x1000028c8]
mov rdx, rdi
mov rcx, r12
call fcn.100059424
lea r8, [0x1000081d4]
mov rdx, rdi
mov rcx, r12
call fcn.100059424
lea rdx, [rsp + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r13, rax
cmp rax, r15
je 0x1000b1b48
xor eax, eax
mov rcx, r15
mov rdi, rsi
repne scasw ax, word [rdi]
lea rdi, [rsp + 0x5c]
not rcx
lea rdx, [rcx - 1]
mov rcx, r15
repne scasw ax, word [rdi]
mov edi, 0x209
not rcx
lea rax, [rdx + rcx + 1]
cmp rax, rdi
jb 0x1000b1ad0
lea r8, [0x10000b560]
lea rcx, [0x10000b0c0]
mov edx, 0x880
call fcn.10009a050
mov rdx, rdi
mov rcx, r12
lea rax, [rdx + 0x7ffffdf5]
cmp rax, r14
je 0x1000b1af9
movzx eax, word [rcx + rbp]
cmp ax, r14w
je 0x1000b1af9
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b1ad6
cmp rdx, r14
jne 0x1000b1b02
sub rcx, 2
mov word [rcx], r14w
lea r8, [0x100002934]
mov rdx, rdi
mov rcx, r12
call fcn.100059424
lea r8, [rsp + 0x5c]
mov rdx, rdi
mov rcx, r12
call fcn.100059424
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [rsp + 0x30]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, r14d
jne 0x1000b1a89
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, r12
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp r13, r15
je 0x1000b1b66
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, ebx
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.10014e600
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret