Function at 0x11dcb4b0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
sub esp, 0xea0
push ebx
push ebp
mov ebp, dword [esp + 0xeac]
xor ebx, ebx
cmp ebp, ebx
push esi
je 0x11dcb789
push ebp
call fcn.11e67d05
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x11dcb789
cmp esi, 0x104
jae 0x11dcb789
push edi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x67a]
mov word [esp + 0x678], bx
push esi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x67c]
push ebp
push eax
call fcn.11e674bf
lea eax, [esp + esi*2 + 0x684]
add esp, 0xc
cmp word [eax - 2], 0x5c
je 0x11dcb529
mov word [eax], 0x5c
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x882]
mov word [esp + 0x880], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x678]
push 0x104
lea edx, [esp + 0x884]
push ecx
push edx
stosw word es:[edi], ax
call fcn.11e674bf
lea eax, [esp + 0x88c]
push str..sdd
push eax
call fcn.11e67470
mov ecx, 0x93
xor eax, eax
lea edi, [esp + 0x440]
mov dword [esp + 0x43c], ebx
rep stosd dword es:[edi], eax
add esp, 0x14
lea ecx, [esp + 0x428]
lea edx, [esp + 0x880]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x11dcb770
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x222]
mov word [esp + 0x220], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1a]
mov word [esp + 0x18], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x220]
push 0x104
rep stosd dword es:[edi], eax
lea eax, [esp + 0x67c]
lea ecx, [esp + 0x224]
push eax
push ecx
call fcn.11e674bf
lea edx, [esp + 0x460]
lea eax, [esp + 0x22c]
push edx
push eax
call fcn.11e67470
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x2c]
push 0x104
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x238]
lea edx, [esp + 0x30]
push ecx
push edx
call fcn.11e674bf
push 0x120afe0c
call fcn.11e67d05
mov edi, eax
lea eax, [esp + 0x244]
push eax
call fcn.11e67d05
mov esi, eax
push str..sdm
sub esi, edi
mov dword [esp + 0x40], ebx
call fcn.11e67d05
push eax
lea ecx, [esp + esi*2 + 0x48]
push str..sdm
push ecx
call fcn.11e674bf
push str..sdm
call fcn.11e67d05
add eax, esi
lea edx, [esp + 0x54]
push edx
mov word [esp + eax*2 + 0x58], bx
call fcn.11dbbe80
add esp, 0x40
cmp eax, 0xffffffff
je 0x11dcb728
mov ecx, 0x109
xor eax, eax
lea edi, [esp + 0xa8c]
mov dword [esp + 0xa88], ebx
rep stosd dword es:[edi], eax
lea eax, [esp + 0xa88]
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.11def3e0
add esp, 8
test eax, eax
je 0x11dcb71d
mov edx, dword [esp + 0x440]
mov eax, dword [esp + 0x43c]
mov ecx, dword [esp + 0xa9c]
push edx
mov edx, dword [esp + 0xa9c]
push eax
push ecx
push edx
call fcn.11dbc8b0
add esp, 0x10
test eax, eax
jne 0x11dcb752
mov eax, dword [esp + 0xa90]
mov ecx, dword [esp + 0x444]
cmp eax, ecx
jne 0x11dcb752
mov ecx, dword [esp + 0xa94]
mov eax, dword [esp + 0x448]
cmp ecx, eax
jne 0x11dcb752
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x428]
test al, 1
je 0x11dcb744
and al, 0xfe
push eax
lea eax, [esp + 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [esp + 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [esp + 0x428]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x11dcb5d8
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0xeb4]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xea0
ret
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xea0
ret