Function at 0x100f0b84
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
sub esp, 0x8d8
lea ebp, [esp - 4]
mov eax, dword [0x101c6444]
xor eax, ebp
mov dword [ebp + 0x8d8], eax
push 0x2c
mov eax, 0x1018c0f6
call fcn.1015d10b
mov eax, dword [ebp + 0x8e4]
push eax
lea ecx, [ebp + 0x250]
mov dword [ebp - 0x1c], eax
call fcn.100019a0
xor ebx, ebx
push ebx
lea ecx, [ebp + 0x288]
mov dword [ebp - 4], ebx
mov dword [ebp + 0x2a0], 7
call fcn.1002bde0
lea eax, [ebp + 0x288]
push eax
lea eax, [ebp + 0x250]
push eax
mov byte [ebp - 4], 1
call fcn.100f6be6
cmp dword [ebp + 0x2a0], 8
mov eax, dword [ebp + 0x28c]
pop ecx
pop ecx
jae 0x100f0c06
lea eax, [ebp + 0x28c]
push eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 0xd], 1
call fcn.1015b9e5
mov esi, 0x208
push esi
mov edi, eax
lea eax, [ebp + 0x2c0]
push ebx
push eax
call fcn.101580b0
push esi
lea eax, [ebp + 0x4c8]
push ebx
push eax
call fcn.101580b0
mov eax, dword [ebp - 0x1c]
add esp, 0x1c
cmp byte [eax + edi - 1], 0x5c
push dword [ebp - 0x14]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp + 0x2c0]
jne 0x100f0c64
push str._s.
push eax
call edi
push dword [ebp - 0x14]
push 0x1019ab40
jmp 0x100f0c74
push 0x1019ab30
push eax
call edi
push dword [ebp - 0x14]
push 0x1019ab28
lea eax, [ebp + 0x4c8]
push eax
call edi
add esp, 0x18
lea eax, [ebp]
push eax
lea eax, [ebp + 0x2c0]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
jne 0x100f0cde
mov byte [ebp - 0xd], bl
push ebx
push 1
lea ecx, [ebp + 0x288]
call fcn.1002be10
push ebx
push 1
lea ecx, [ebp + 0x250]
call fcn.10001b20
mov al, byte [ebp - 0xd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8d8]
xor ecx, ebp
call fcn.101586e7
add ebp, 0x8dc
leave
ret
lea ecx, [ebp]
push ecx
push eax
jmp 0x100f0e48
lea eax, [ebp + 0x2c]
push eax
push 0x1019ab00
call fcn.1015db18
test eax, eax
pop ecx
pop ecx
je 0x100f0e41
lea eax, [ebp + 0x2c]
push eax
push 0x1019aaf8
call fcn.1015db18
test eax, eax
pop ecx
pop ecx
je 0x100f0e41
test byte [ebp], 0x10
push esi
lea eax, [ebp + 0x6d0]
push ebx
push eax
je 0x100f0e0c
call fcn.101580b0
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp + 0x4c8]
push eax
lea eax, [ebp + 0x6d0]
push str._s_s_
push eax
call edi
add esp, 0x1c
lea eax, [ebp + 0x6d0]
push eax
lea ecx, [ebp + 0x26c]
call fcn.100ef749
push ebx
lea ecx, [ebp + 0x2a4]
mov dword [ebp + 0x2bc], 0xf
call fcn.10001ce0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.100019a0
lea eax, [ebp - 0x38]
push 1
push eax
mov byte [ebp - 4], 4
call fcn.101031c8
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x15], al
mov byte [ebp - 4], 3
call fcn.10001b20
cmp byte [ebp - 0x15], bl
lea eax, [ebp + 0x2a4]
push eax
lea eax, [ebp + 0x26c]
push eax
je 0x100f0dc0
call fcn.100f6be1
jmp 0x100f0dc5
call fcn.100f6a5b
cmp dword [ebp + 0x2bc], 0x10
mov eax, dword [ebp + 0x2a8]
pop ecx
pop ecx
jae 0x100f0ddc
lea eax, [ebp + 0x2a8]
push eax
call fcn.100f0b84
test al, al
pop ecx
jne 0x100f0dea
mov byte [ebp - 0xd], bl
push ebx
push 1
lea ecx, [ebp + 0x2a4]
call fcn.10001b20
push ebx
push 1
lea ecx, [ebp + 0x26c]
mov byte [ebp - 4], 1
call fcn.1002be10
jmp 0x100f0e41
call fcn.101580b0
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp + 0x4c8]
push eax
lea eax, [ebp + 0x6d0]
push str._s_s
push eax
call edi
add esp, 0x1c
lea eax, [ebp + 0x6d0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x100f0e41
mov byte [ebp - 0xd], bl
lea eax, [ebp]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100f0ce8
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp + 0x4c8]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x100f0e74
xor al, al
jmp 0x100f0e77
mov al, byte [ebp - 0xd]
mov byte [ebp - 0xd], al
jmp 0x100f0c9c