Function at 0x18000dd60
Capabilities:
Delete directory
Delete file
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov rax, qword [0x180092078]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov r14, rdx
xor r12d, r12d
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea r8d, [r12 + 1]
lea rdx, [0x180063308]
lea rcx, [rsp + 0x40]
call fcn.18000bc80
nop
lea r8, [rsp + 0x40]
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180010cf0
nop
cmp qword [rax + 0x18], 8
jb 0x18000dde0
mov rax, qword [rax]
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18000de32
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000de2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1da
call fcn.180027be4
movdqa xmm0, xmmword [0x1800535b0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000de88
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000de83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1e0
call fcn.180027be4
movdqa xmm0, xmmword [0x1800535b0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r12w
cmp r15, 0xffffffffffffffff
je 0x18000e065
movabs r13, 0x7ffffffffffffffe
mov edx, 0xa
lea rcx, [rdx - 0xb]
test byte [rbp - 0x60], 0x10
jne 0x18000e047
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x34]
mov rbx, rcx
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x18000dee0
cmp rbx, r13
ja 0x18000e1f8
mov qword [rsp + 0x58], 7
cmp rbx, 8
jae 0x18000df23
mov qword [rsp + 0x50], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp - 0x34]
lea rcx, [rsp + 0x40]
call fcn.180029a20
mov word [rsp + rbx + 0x40], r12w
jmp 0x18000df7a
mov rsi, rbx
or rsi, 7
cmp rsi, r13
jbe 0x18000df34
mov rsi, r13
jmp 0x18000df3c
cmp rsi, 0xa
cmovb rsi, rdx
mov rdx, rsi
add rdx, 1
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.180001b00
mov rdi, rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp - 0x34]
mov rcx, rax
call fcn.180029a20
mov word [rdi + rbx], r12w
lea r8, [rsp + 0x40]
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.180010cf0
nop
cmp qword [rax + 0x18], 8
jb 0x18000df96
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18000dfe0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dfdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1ec
call fcn.180027be4
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000e033
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e02e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1f2
call fcn.180027be4
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
lea rdx, [rbp - 0x60]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x18000deb0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, r14
cmp qword [r14 + 0x18], 8
jb 0x18000e072
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x18000e1a4
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea r8d, [rax + 0xe]
lea rdx, str.pending_delete
lea rcx, [rsp + 0x40]
call fcn.18000bc80
nop
lea r8, [rsp + 0x40]
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180010cf0
nop
cmp qword [rax + 0x18], 8
jb 0x18000e0c1
mov rax, qword [rax]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18000e12f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e12a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1e6
call fcn.180027be4
movdqa xmm0, xmmword [0x1800535b0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000e181
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e17c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1d4
call fcn.180027be4
movdqa xmm0, xmmword [0x1800535b0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r12w
cmp rbx, 0xffffffffffffffff
je 0x18000e1a4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.180028080
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
int3
call fcn.180001488
int3