Function at 0x140030190
Capabilities:
Delete directory
Delete file
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x380
mov rdi, rcx
xor edx, edx
lea rcx, [rsp + 0x130]
mov r8d, 0x104
call fcn.140038310
lea rax, [rsp + 0x130]
mov r9, rdi
sub r9, rax
lea rdx, [rsp + 0x130]
mov r8d, 0x104
nop word [rax + rax]
lea rax, [r8 + 0x7ffffefa]
test rax, rax
je 0x140030200
movzx eax, byte [r9 + rdx]
test al, al
je 0x140030200
mov byte [rdx], al
inc rdx
sub r8, 1
jne 0x1400301e0
test r8, r8
lea rax, [rdx - 1]
mov ecx, 0x104
cmovne rax, rdx
mov byte [rax], 0
lea rax, [rsp + 0x130]
nop dword [rax + rax]
cmp byte [rax], 0
je 0x14003022e
inc rax
sub rcx, 1
jne 0x140030220
xor esi, esi
mov eax, 0x104
sub rax, rcx
test rcx, rcx
cmove rax, rsi
je 0x14003029c
mov edx, 0x104
lea rcx, [rsp + 0x130]
lea rcx, [rcx + rax]
sub rdx, rax
je 0x14003028e
add rax, 0x7ffffefa
lea r9, [0x14009405c]
add rax, rdx
sub r9, rcx
nop word [rax + rax]
test rax, rax
je 0x14003028e
movzx r8d, byte [r9 + rcx]
test r8b, r8b
je 0x14003028e
mov byte [rcx], r8b
dec rax
inc rcx
sub rdx, 1
jne 0x140030270
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], sil
xor edx, edx
lea rcx, [rsp + 0x240]
mov r8d, 0x140
call fcn.140038310
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140030479
nop dword [rax]
nop dword [rax + rax]
test byte [rsp + 0x240], 0x10
jne 0x140030457
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x104
call fcn.140038310
lea rax, [rsp + 0x20]
mov r8, rdi
sub r8, rax
lea rcx, [rsp + 0x20]
mov edx, 0x104
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140030340
movzx eax, byte [r8 + rcx]
test al, al
je 0x140030340
mov byte [rcx], al
inc rcx
sub rdx, 1
jne 0x140030320
lea rax, [rcx - 1]
test rdx, rdx
cmovne rax, rcx
mov ecx, 0x104
mov byte [rax], sil
lea rax, [rsp + 0x20]
cmp byte [rax], sil
je 0x140030366
inc rax
sub rcx, 1
jne 0x140030358
mov eax, 0x104
sub rax, rcx
test rcx, rcx
cmove rax, rsi
je 0x1400303cc
mov edx, 0x104
lea rcx, [rsp + 0x20]
lea rcx, [rcx + rax]
sub rdx, rax
je 0x1400303be
add rax, 0x7ffffefa
lea r9, [0x140094060]
add rax, rdx
sub r9, rcx
nop dword [rax]
test rax, rax
je 0x1400303be
movzx r8d, byte [rcx + r9]
test r8b, r8b
je 0x1400303be
mov byte [rcx], r8b
dec rax
inc rcx
sub rdx, 1
jne 0x1400303a0
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], sil
mov ecx, 0x104
lea rax, [rsp + 0x20]
cmp byte [rax], sil
je 0x1400303e4
inc rax
sub rcx, 1
jne 0x1400303d6
mov eax, 0x104
sub rax, rcx
test rcx, rcx
cmove rax, rsi
je 0x14003044c
mov edx, 0x104
lea rcx, [rsp + 0x20]
lea rcx, [rcx + rax]
sub rdx, rax
je 0x14003043e
add rax, 0x7ffffefa
lea r9, [rsp + 0x26c]
add rax, rdx
sub r9, rcx
nop dword [rax]
test rax, rax
je 0x14003043e
movzx r8d, byte [rcx + r9]
test r8b, r8b
je 0x14003043e
mov byte [rcx], r8b
dec rax
inc rcx
sub rdx, 1
jne 0x140030420
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], sil
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0x240]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1400302e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret