Function at 0x10382cd
Capabilities:
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push 0xa94
push 0x103a538
call fcn.0103a164
xor ebx, ebx
mov dword [ebp - 0xa90], ebx
or dword [ebp - 0xaa0], 0xffffffff
mov dword [ebp - 0xa9c], ebx
mov dword [ebp - 0xa98], ebx
mov dword [ebp - 0xa94], ebx
cmp dword [0x103d020], ebx
jne 0x1038310
mov dword [ebp - 0xa90], ebx
jmp 0x1038605
mov dword [ebp - 4], ebx
push dword [ebp + 8]
mov esi, 0x104
push esi
lea eax, [ebp - 0x42c]
push eax
call fcn.0102cc3f
test eax, eax
jl 0x10385d8
lea eax, [ebp - 0x42c]
push eax
call fcn.010351d3
test eax, eax
je 0x10385d8
push dword [ebp + 8]
push esi
lea eax, [ebp - 0x634]
push eax
call fcn.0102cc3f
test eax, eax
jl 0x10385cc
push 0x2e
lea eax, [ebp - 0x634]
push eax
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
cmp eax, ebx
je 0x10385cc
xor ecx, ecx
mov word [eax], cx
inc eax
inc eax
push eax
lea eax, [ebp - 0x634]
push eax
push 0x102b8c8
push esi
lea eax, [ebp - 0x83c]
push eax
call fcn.0102e0ec
add esp, 0x14
test eax, eax
jl 0x10385cc
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0x83c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xaa0], eax
cmp eax, 0xffffffff
jne 0x10383ca
mov dword [ebp - 0xa90], ebx
jmp 0x10385e2
mov eax, dword [0x103d020]
shl eax, 2
push eax
call fcn.0103696e
mov dword [ebp - 0xa9c], eax
cmp eax, ebx
jne 0x10383f1
mov dword [ebp - 0xa90], 8
jmp 0x10385e2
mov ecx, dword [0x103d020]
shl ecx, 2
push ecx
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x42c]
push eax
push esi
lea eax, [ebp - 0x224]
push eax
call fcn.0102cc3f
test eax, eax
jl 0x10385cc
push ebx
push esi
lea eax, [ebp - 0xa60]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.010353b3
test eax, eax
je 0x10385cc
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.API_MS_Win_Core_Misc_L1_1_0.dll_lstrlenW]
mov edi, eax
inc edi
push edi
lea eax, [ebp - 0x224]
push eax
push edi
push eax
push 0x100
push 0x7f
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [ebp - 0xa94], ebx
mov dword [ebp - 0xaa4], ebx
cmp ebx, dword [ebp - 0xa98]
jae 0x10384e8
mov eax, dword [ebp - 0xa9c]
lea esi, [eax + ebx*4]
lea eax, [ebp - 0x224]
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jge 0x103851b
mov eax, dword [0x103d020]
cmp dword [ebp - 0xa98], eax
jae 0x10384b3
mov eax, dword [ebp - 0xa98]
sub eax, ebx
shl eax, 2
jmp 0x10384cc
mov ecx, dword [ebp - 0xa9c]
mov ecx, dword [ecx + eax*4 - 4]
mov dword [ebp - 0xa94], ecx
sub eax, ebx
lea eax, [eax*4 - 4]
push eax
push esi
lea eax, [esi + 4]
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
and dword [esi], 0
mov esi, 0x104
cmp ebx, dword [ebp - 0xa98]
ja 0x103855a
cmp ebx, dword [0x103d020]
jae 0x103855a
lea eax, [edi + edi]
push eax
call fcn.0103696e
mov ecx, dword [ebp - 0xa9c]
lea ecx, [ecx + ebx*4]
mov dword [ecx], eax
test eax, eax
jne 0x1038526
mov dword [ebp - 0xa90], 8
xor ebx, ebx
jmp 0x10385e2
inc ebx
mov esi, 0x104
jmp 0x103846b
lea ecx, [ebp - 0x224]
push ecx
push edi
push eax
call fcn.0102cc3f
test eax, eax
jge 0x1038544
mov dword [ebp - 0xa90], 0xd
jmp 0x1038514
mov eax, dword [ebp - 0xa98]
cmp eax, dword [0x103d020]
jae 0x1038566
inc dword [ebp - 0xa98]
jmp 0x1038566
lea eax, [ebp - 0x224]
mov dword [ebp - 0xa94], eax
mov edi, dword [ebp - 0xa94]
test edi, edi
je 0x10385ad
lea eax, [ebp - 0x224]
cmp edi, eax
jne 0x1038583
test byte [ebp - 0xa8c], 1
je 0x103858f
push 0x80
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x224]
cmp edi, eax
je 0x10385ad
push edi
call fcn.010369af
and dword [ebp - 0xa94], 0
lea eax, [ebp - 0xa8c]
push eax
push dword [ebp - 0xaa0]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
xor ebx, ebx
test eax, eax
jne 0x1038405
jmp 0x10385e2
mov dword [ebp - 0xa90], 0xd
jmp 0x10385e2
mov dword [ebp - 0xa90], 0x57
mov dword [ebp - 4], 0xfffffffe
jmp 0x1038605
mov edi, dword [ebp - 0xa9c]
cmp edi, ebx
je 0x1038636
xor esi, esi
cmp dword [0x103d020], ebx
jbe 0x1038630
lea eax, [edi + esi*4]
cmp dword [eax], ebx
je 0x1038627
push dword [eax]
call fcn.010369af
inc esi
cmp esi, dword [0x103d020]
jb 0x1038619
push edi
call fcn.010369af
cmp dword [ebp - 0xa94], ebx
je 0x1038657
lea eax, [ebp - 0x224]
cmp dword [ebp - 0xa94], eax
je 0x1038657
push dword [ebp - 0xa94]
call fcn.010369af
cmp dword [ebp - 0xaa0], 0xffffffff
je 0x103866c
push dword [ebp - 0xaa0]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0xa90]
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_SetLastError]
xor eax, eax
cmp dword [ebp - 0xa90], ebx
sete al
call fcn.0103a1ac
ret 4