Function at 0x1000cc50
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
mov eax, dword [0x100b2370]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x258], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x25c]
add ecx, 2
mov dword [ebp - 0x294], ecx
mov edx, dword [ebp - 0x25c]
mov ax, word [edx]
mov word [ebp - 0x27e], ax
add dword [ebp - 0x25c], 2
cmp word [ebp - 0x27e], 0
jne 0x1000cc85
mov ecx, dword [ebp - 0x25c]
sub ecx, dword [ebp - 0x294]
sar ecx, 1
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x298]
mov dword [ebp - 0x264], edx
push 0x100a51a4
push 0x104
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp + 8]
lea edx, [ecx + eax*2]
push edx
call fcn.10049780
add esp, 0xc
lea eax, [ebp - 0x254]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x274], eax
xor edx, edx
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp + 8]
mov word [ecx + eax*2], dx
cmp dword [ebp - 0x274], 0xffffffff
jne 0x1000cd1f
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1000cf69
mov dword [ebp - 0x270], 0x100a51a8
lea edx, [ebp - 0x228]
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
mov cx, word [eax]
mov word [ebp - 0x27a], cx
mov edx, dword [ebp - 0x270]
cmp cx, word [edx]
jne 0x1000cd9b
cmp word [ebp - 0x27a], 0
je 0x1000cd8f
mov eax, dword [ebp - 0x268]
mov cx, word [eax + 2]
mov word [ebp - 0x27c], cx
mov edx, dword [ebp - 0x270]
cmp cx, word [edx + 2]
jne 0x1000cd9b
add dword [ebp - 0x268], 4
add dword [ebp - 0x270], 4
cmp word [ebp - 0x27c], 0
jne 0x1000cd35
mov dword [ebp - 0x288], 0
jmp 0x1000cda6
sbb eax, eax
or eax, 1
mov dword [ebp - 0x288], eax
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x28c], ecx
cmp dword [ebp - 0x28c], 0
je 0x1000cee6
mov dword [ebp - 0x26c], 0x100a51ac
lea edx, [ebp - 0x228]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x260]
mov cx, word [eax]
mov word [ebp - 0x278], cx
mov edx, dword [ebp - 0x26c]
cmp cx, word [edx]
jne 0x1000ce3b
cmp word [ebp - 0x278], 0
je 0x1000ce2f
mov eax, dword [ebp - 0x260]
mov cx, word [eax + 2]
mov word [ebp - 0x276], cx
mov edx, dword [ebp - 0x26c]
cmp cx, word [edx + 2]
jne 0x1000ce3b
add dword [ebp - 0x260], 4
add dword [ebp - 0x26c], 4
cmp word [ebp - 0x276], 0
jne 0x1000cdd5
mov dword [ebp - 0x284], 0
jmp 0x1000ce46
sbb eax, eax
or eax, 1
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x290], ecx
cmp dword [ebp - 0x290], 0
je 0x1000cee6
lea edx, [ebp - 0x228]
push edx
push 0x104
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp + 8]
lea edx, [ecx + eax*2]
push edx
call fcn.10049780
add esp, 0xc
mov eax, dword [ebp - 0x254]
and eax, 0x10
je 0x1000ceb5
push 0x100a51b4
push 0x104
mov ecx, dword [ebp + 8]
push ecx
call fcn.10049714
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
call fcn.1000cc50
add esp, 4
mov dword [ebp - 0x258], eax
jmp 0x1000cedb
push 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1000cedb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0x1000cee6
jmp 0x1000cf24
lea edx, [ebp - 0x254]
push edx
mov eax, dword [ebp - 0x274]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1000cf1f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x12
jne 0x1000cf1d
mov dword [ebp - 0x258], 0
jmp 0x1000cf24
jmp 0x1000cd1f
xor ecx, ecx
mov edx, dword [ebp - 0x264]
mov eax, dword [ebp + 8]
mov word [eax + edx*2], cx
mov ecx, dword [ebp - 0x274]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x258], 0
jne 0x1000cf63
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x1000cf63
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10048fad
mov esp, ebp
pop ebp
ret