Function at 0x10016f30
Capabilities:
Delete directory
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064a89
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x100834b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x35], cl
xor edi, edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 4], edi
cmp dword [ebp + 0x18], edi
je 0x1001732a
push 1
sub esp, 8
lea ecx, [ebp + 8]
call fcn.1001a620
push eax
push edi
lea ecx, [ebp + 8]
call fcn.10012210
push 1
sub esp, 8
lea ecx, [ebp + 8]
call fcn.1001a6a0
lea ecx, [eax + 1]
cmp dword [ebp + 0x18], ecx
jae 0x10016fa4
push str.invalid_string_position
call fcn.10049027
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
mov dword [ebp + 0x18], ecx
cmovae eax, dword [ebp + 8]
xor edx, edx
mov word [eax + ecx*2], dx
cmp dword [ebp + 0x18], edx
je 0x1001732a
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edx
push eax
mov word [ecx], ax
lea eax, [ebp + 8]
push eax
call fcn.100122c0
lea ecx, [ebp - 0x70]
call fcn.10017860
mov esi, eax
add esp, 0x18
lea eax, [ebp + 8]
cmp eax, esi
je 0x10017023
cmp dword [ebp + 0x1c], 8
jb 0x10017006
push dword [ebp + 8]
call fcn.1002506b
add esp, 4
xor eax, eax
mov dword [ebp + 0x1c], 7
push esi
lea ecx, [ebp + 8]
mov dword [ebp + 0x18], 0
mov word [ebp + 8], ax
call fcn.10017f80
cmp dword [ebp - 0x5c], 8
jb 0x10017034
push dword [ebp - 0x70]
call fcn.1002506b
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x1c], xmm0
movdqu xmmword [ebp - 0x2c], xmm0
call fcn.10049102
push ecx
lea edx, [ebp + 8]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.10018b20
add esp, 4
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x1001706f
mov eax, dword [eax]
push 0
push eax
lea ecx, [ebp - 0x2c]
call fcn.100491ce
mov byte [ebp - 4], 1
mov esi, eax
cmp dword [ebp - 0x5c], 8
jb 0x10017091
push dword [ebp - 0x70]
call fcn.1002506b
add esp, 4
test esi, esi
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
je 0x100172eb
nop
lea ecx, [ebp - 0x2c]
call fcn.10049376
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x2c]
lea eax, [ebp - 0x4c]
push eax
call fcn.1004942a
mov byte [ebp - 4], 3
or edi, 1
mov eax, dword [eax]
mov ecx, 0x1007526c
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x3c], edi
jmp 0x100170d0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100170f6
test dx, dx
je 0x100170f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100170f6
add eax, 4
add ecx, 4
test dx, dx
jne 0x100170d0
xor eax, eax
jmp 0x100170fb
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x10017158
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1004942a
or edi, 2
mov ecx, 0x10075278
mov dword [ebp - 0x34], edi
mov eax, dword [eax]
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10017146
test dx, dx
je 0x10017142
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10017146
add eax, 4
add ecx, 4
test dx, dx
jne 0x10017120
xor eax, eax
jmp 0x1001714b
sbb eax, eax
or eax, 1
test eax, eax
mov byte [ebp - 0x2d], 0
sete al
test al, al
je 0x1001715c
mov byte [ebp - 0x2d], 1
mov eax, dword [ebp - 0x34]
test al, 2
je 0x1001718c
mov edx, dword [ebp - 0x54]
and eax, 0xfffffffd
add edx, 0xfffffff0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], eax
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10017189
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 4], 1
test al, 1
je 0x100171ba
mov edx, dword [ebp - 0x4c]
and eax, 0xfffffffe
add edx, 0xfffffff0
mov dword [ebp - 0x34], eax
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100171ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x2d], 0
jne 0x100172de
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10049477
push 0x80
push dword [eax]
call esi
mov edx, dword [ebp - 0x44]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100171f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
push 0x10
mov eax, dword [eax + 0x38]
call eax
lea ecx, [ebp - 0x2c]
test eax, eax
je 0x10017358
lea eax, [ebp - 0x58]
mov byte [ebp - 0x2d], 1
push eax
call fcn.10049477
mov esi, eax
mov byte [ebp - 4], 4
mov edx, 1
mov ecx, dword [esi]
sub edx, dword [ecx - 4]
mov ecx, dword [ecx - 8]
or ecx, edx
jge 0x1001723b
push 0
mov ecx, esi
call fcn.100183c0
mov esi, dword [esi]
sub esp, 0x18
mov edx, esp
xor eax, eax
mov dword [edx + 0x14], 7
mov dword [edx + 0x10], 0
mov word [edx], ax
cmp word [esi], ax
jne 0x1001725e
xor ecx, ecx
jmp 0x10017272
mov ecx, esi
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017263
sub ecx, edi
sar ecx, 1
push ecx
push esi
mov ecx, edx
call fcn.10012630
mov cl, byte [ebp - 0x2d]
call fcn.10016f30
mov byte [ebp - 4], 1
add esp, 0x18
mov edx, dword [ebp - 0x58]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100172a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10049477
push dword [eax]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov edx, dword [ebp - 0x50]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100172d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp dword [ebp - 0x40], 0
mov edi, dword [ebp - 0x34]
jne 0x100170a0
lea ecx, [ebp - 0x2c]
call fcn.10049182
cmp byte [ebp - 0x35], 0
je 0x1001731e
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
push 0x80
cmovae eax, dword [ebp + 8]
push eax
call esi
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.10049132
cmp dword [ebp + 0x1c], 8
jb 0x1001733b
push dword [ebp + 8]
call fcn.1002506b
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002fef0
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x48]
push eax
call fcn.10049477
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp - 0x48]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100172de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100172de