Function at 0x10b018f
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2f4
mov eax, dword [0x10cf230]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
sub esp, 0x5c
push 0x17
pop ecx
mov edi, esp
mov dword [ebp - 0x288], esi
push 0x10252a8
mov dword [ebp - 4], eax
mov dword [ebp - 0x298], ebx
rep movsd dword es:[edi], dword [esi]
call fcn.01081545
and dword [ebp - 0x254], 0
xor eax, eax
mov ecx, 0x93
lea edi, [ebp - 0x250]
rep stosd dword es:[edi], eax
add esp, 0x60
lea ecx, [ebp - 0x2f4]
mov dword [ebp - 0x258], 1
call fcn.0107e139
lea ecx, [ebp - 0x268]
call fcn.010424ee
lea ecx, [ebp - 0x284]
call fcn.010424ee
lea ecx, [ebp - 0x294]
call fcn.010424ee
test ebx, ebx
mov esi, 0x10ee5c0
jne 0x10b022d
mov edi, 0x80004003
jmp 0x10b02db
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x268]
push eax
push 0
call fcn.0107f08b
mov edi, eax
test edi, edi
jl 0x10b02db
push 0xffffffffffffffff
push 0x10023c0
lea ecx, [ebp - 0x268]
call fcn.01043145
mov edi, eax
test edi, edi
jl 0x10b02db
push 0xffffffffffffffff
push dword [ebp - 0x268]
lea ecx, [ebp - 0x284]
call fcn.01042ec9
mov edi, eax
test edi, edi
jl 0x10b02db
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x278]
push ecx
push eax
push dword [ebp - 0x268]
call fcn.0109f0cf
mov edi, eax
test edi, edi
jl 0x10b02db
cmp dword [ebp - 0x278], 0
jne 0x10b02a8
push 0x1025248
jmp 0x10b02d2
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x278]
push ecx
push eax
push dword [ebp - 0x268]
call fcn.0109f18e
mov edi, eax
test edi, edi
jl 0x10b02db
cmp dword [ebp - 0x278], 0
je 0x10b0323
push 0x10251f8
call fcn.01081545
pop ecx
xor edi, edi
inc edi
push 0x10251cc
call fcn.01081545
pop ecx
lea ecx, [ebp - 0x294]
call fcn.01042e75
lea ecx, [ebp - 0x284]
call fcn.01042e75
lea ecx, [ebp - 0x268]
call fcn.01042e75
lea ecx, [ebp - 0x2f4]
call fcn.0104163c
mov ecx, dword [ebp - 4]
mov eax, edi
call fcn.01041c5f
pop edi
pop esi
pop ebx
leave
ret 0xc
push 0xffffffffffffffff
push 0x10251c4
lea ecx, [ebp - 0x268]
call fcn.01043145
mov edi, eax
test edi, edi
jl 0x10b02db
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x25c], eax
je 0x10b04b4
mov eax, dword [0x10ee5c0]
jmp 0x10b037d
push eax
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x10b0381
add esi, 4
mov eax, dword [esi]
test eax, eax
jne 0x10b0364
cmp dword [esi], 0
jne 0x10b042b
and dword [ebp - 0x258], 0
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x274]
call fcn.01043594
push 0x7d
lea ecx, [ebp - 0x274]
call fcn.01042808
mov esi, eax
test esi, esi
jle 0x10b045f
mov ebx, 0x101dbf0
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push ebx
lea ecx, [ebp - 0x274]
call fcn.01042976
test eax, eax
jne 0x10b045f
lea eax, [ebp + esi*2 - 0x226]
push eax
lea ecx, [ebp - 0x274]
call fcn.01042e59
push 0x101dc08
lea ecx, [ebp - 0x274]
call fcn.010428cf
test al, al
jne 0x10b0416
push 0x101dc20
lea ecx, [ebp - 0x274]
call fcn.010428cf
test al, al
je 0x10b045f
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x258], 1
call fcn.01042e75
lea eax, [ebp - 0x228]
push eax
push 0x1025184
call fcn.01081545
pop ecx
pop ecx
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x10b047d
mov esi, 0x10ee5c0
jmp 0x10b035d
lea eax, [ebp - 0x228]
push eax
push 0x1025130
call fcn.01081545
pop ecx
pop ecx
lea ecx, [ebp - 0x274]
call fcn.01042e75
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x258], 0
je 0x10b02d8
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x25c], eax
jne 0x10b04be
mov edi, 0x8000ffff
jmp 0x10b02db
lea eax, [ebp - 0x228]
push eax
push 0x101c5e0
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
pop ecx
pop ecx
je 0x10b066d
lea eax, [ebp - 0x228]
push eax
push 0x101c3e0
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x10b066d
and dword [ebp - 0x258], 0
cmp dword [0x10ee5c0], 0
mov esi, 0x10ee5c0
je 0x10b053a
push dword [esi]
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x10b0530
add esi, 4
cmp dword [esi], 0
jne 0x10b0511
jmp 0x10b053a
mov dword [ebp - 0x258], 1
cmp dword [esi], 0
jne 0x10b05df
and dword [ebp - 0x258], 0
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x274]
call fcn.01043594
push 0x7d
lea ecx, [ebp - 0x274]
call fcn.01042808
mov esi, eax
test esi, esi
jle 0x10b05d4
push 0x101dbf0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push 0x101dbf0
lea ecx, [ebp - 0x274]
call fcn.01042976
test eax, eax
jne 0x10b05d4
lea eax, [ebp + esi*2 - 0x226]
push eax
lea ecx, [ebp - 0x274]
call fcn.01042e59
push 0x101dc08
lea ecx, [ebp - 0x274]
call fcn.010428cf
test al, al
jne 0x10b05ca
push 0x101dc20
lea ecx, [ebp - 0x274]
call fcn.010428cf
test al, al
je 0x10b05d4
mov dword [ebp - 0x258], 1
lea ecx, [ebp - 0x274]
call fcn.01042e75
cmp dword [ebp - 0x258], 0
je 0x10b065a
push 0xffffffffffffffff
push dword [ebp - 0x284]
lea ecx, [ebp - 0x294]
call fcn.01042ec9
mov edi, eax
xor esi, esi
cmp edi, esi
jl 0x10b068a
push 0xffffffffffffffff
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x294]
call fcn.01043145
mov edi, eax
cmp edi, esi
jl 0x10b068a
push dword [ebp - 0x294]
push 0x10250f0
call fcn.01081545
pop ecx
pop ecx
push dword [ebp - 0x294]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x10b0777
push esi
push dword [ebp - 0x294]
push 5
push 4
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
jmp 0x10b066d
lea eax, [ebp - 0x228]
push eax
push 0x1025078
call fcn.01081545
pop ecx
pop ecx
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10b04be
xor esi, esi
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp edi, esi
jl 0x10b02db
push 0x80
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x10b07a9
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
je 0x10b07a9
push dword [ebp - 0x284]
push 0x1025020
call fcn.01081545
pop ecx
pop ecx
push esi
push dword [ebp - 0x284]
push 5
push 0x10
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
cmp dword [ebp + 0x10], esi
je 0x10b0770
lea ecx, [ebp - 0x268]
call fcn.01042c9c
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x268]
push eax
push esi
call fcn.0107f08b
mov edi, eax
cmp edi, esi
jl 0x10b02db
push dword [ebp - 0x268]
call dword [sym.imp.SHLWAPI.dll_PathRemoveBackslashW]
push dword [ebp - 0x268]
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x10b0770
push dword [ebp - 0x268]
lea ecx, [ebp - 0x2f4]
push esi
call fcn.0107f141
mov edi, eax
cmp edi, esi
jl 0x10b02db
push esi
push dword [ebp - 0x298]
lea eax, [ebp - 0x2f4]
push eax
call fcn.010b018f
mov edi, eax
cmp edi, esi
jl 0x10b02db
xor edi, edi
jmp 0x10b02db
call ebx
cmp eax, esi
jne 0x10b0782
push 0x57
pop eax
cmp eax, esi
jg 0x10b078f
call ebx
cmp eax, esi
jne 0x10b07a2
push 0x57
pop eax
jmp 0x10b07a2
call ebx
cmp eax, esi
jne 0x10b0798
push 0x57
pop eax
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
jmp 0x10b068a
call ebx
cmp eax, esi
jne 0x10b07b4
push 0x57
pop eax
cmp eax, esi
jg 0x10b07c1
call ebx
cmp eax, esi
jne 0x10b07d4
push 0x57
pop eax
jmp 0x10b07d4
call ebx
cmp eax, esi
jne 0x10b07ca
push 0x57
pop eax
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
push edi
push dword [ebp - 0x284]
push 0x1024fc0
call fcn.01081545
add esp, 0xc
jmp 0x10b02db