Function at 0x100324d0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100711db
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x1008c274]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x27c], 0
mov byte [ebp - 0x1c9], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
call fcn.10008f30
lea ecx, [ebp - 0x28]
call fcn.1000d4f0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x268], ecx
mov ecx, dword [ebp - 0x268]
call fcn.10008f30
lea ecx, [ebp - 0x40]
call fcn.1000d4f0
mov byte [ebp - 4], 3
push str..
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x58]
push eax
call fcn.1002fa20
add esp, 0xc
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
push ecx
lea ecx, [ebp - 0x40]
call fcn.1000a0f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
call fcn.10006c00
mov byte [ebp - 4], 3
lea edx, [ebp - 0x40]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1ec], ecx
mov edx, dword [ebp - 0x1d0]
cmp dword [edx + 0x14], 0x10
jb 0x100325c9
mov dword [ebp - 0x1e8], 1
jmp 0x100325d3
mov dword [ebp - 0x1e8], 0
movzx eax, byte [ebp - 0x1e8]
test eax, eax
je 0x100325ec
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [ecx]
mov dword [ebp - 0x1ec], edx
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x274], eax
lea ecx, [ebp - 0x1c8]
push ecx
mov edx, dword [ebp - 0x274]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xffffffff
je 0x10032ab9
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x19c]
cmp edx, 0x2e
je 0x100328c7
lea eax, [ebp - 0x28]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x218], ecx
mov edx, dword [ebp - 0x218]
cmp dword [edx + 0x10], 0
jae 0x1003265e
call fcn.1000d570
push 0
lea ecx, [ebp - 0x28]
call fcn.1000aef0
push 0x10075890
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x88]
push ecx
call fcn.1002fa20
add esp, 0xc
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x220], edx
mov byte [ebp - 4], 5
lea eax, [ebp - 0x19c]
push eax
mov ecx, dword [ebp - 0x220]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.1002f9c0
add esp, 0xc
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
push eax
lea ecx, [ebp - 0x28]
call fcn.1000a0f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.10006c00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.10006c00
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c8]
and ecx, 0x10
je 0x1003275e
movzx edx, byte [ebp + 0xc]
test edx, edx
je 0x10032752
movzx eax, byte [ebp + 0xc]
push eax
lea ecx, [ebp - 0x28]
push ecx
call fcn.100324d0
add esp, 8
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
je 0x10032750
mov edx, dword [ebp - 0x1f0]
mov dword [ebp - 0x228], edx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x228]
jmp 0x10032aeb
jmp 0x10032759
mov byte [ebp - 0x1c9], 1
jmp 0x100328c7
lea eax, [ebp - 0x28]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x1d4], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1f8], edx
mov eax, dword [ebp - 0x1d4]
cmp dword [eax + 0x14], 0x10
jb 0x10032797
mov dword [ebp - 0x1f4], 1
jmp 0x100327a1
mov dword [ebp - 0x1f4], 0
movzx ecx, byte [ebp - 0x1f4]
test ecx, ecx
je 0x100327ba
mov edx, dword [ebp - 0x1d4]
mov eax, dword [edx]
mov dword [ebp - 0x1f8], eax
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0x230], ecx
push 0x80
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x10032815
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x234]
jmp 0x10032aeb
lea eax, [ebp - 0x28]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x1d8]
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x1d8]
cmp dword [eax + 0x14], 0x10
jb 0x1003284e
mov dword [ebp - 0x1fc], 1
jmp 0x10032858
mov dword [ebp - 0x1fc], 0
movzx ecx, byte [ebp - 0x1fc]
test ecx, ecx
je 0x10032871
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx]
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x23c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x100328c7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x240], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x240]
jmp 0x10032aeb
lea eax, [ebp - 0x1c8]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x1003261f
mov edx, dword [ebp - 0x1dc]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x12
je 0x10032944
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x244]
jmp 0x10032aeb
movzx ecx, byte [ebp - 0x1c9]
test ecx, ecx
jne 0x10032ab9
mov edx, dword [ebp + 8]
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x1e0]
cmp dword [edx + 0x14], 0x10
jb 0x1003298c
mov dword [ebp - 0x208], 1
jmp 0x10032996
mov dword [ebp - 0x208], 0
movzx eax, byte [ebp - 0x208]
test eax, eax
je 0x100329af
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [ecx]
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x264], eax
push 0x80
mov ecx, dword [ebp - 0x264]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x10032a0a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
jmp 0x10032aeb
mov edx, dword [ebp + 8]
mov dword [ebp - 0x254], edx
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x1e4]
cmp dword [edx + 0x14], 0x10
jb 0x10032a43
mov dword [ebp - 0x210], 1
jmp 0x10032a4d
mov dword [ebp - 0x210], 0
movzx eax, byte [ebp - 0x210]
test eax, eax
je 0x10032a66
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [ecx]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x258]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
test eax, eax
jne 0x10032ab9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x25c], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x25c]
jmp 0x10032aeb
mov dword [ebp - 0x260], 0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004c5a5
mov esp, ebp
pop ebp
ret