Function at 0x1002d7a0
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100600ab
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x1007a274]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x27c], 0
mov byte [ebp - 0x1c9], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
call fcn.10008f30
lea ecx, [ebp - 0x28]
call fcn.1000d4f0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x268], ecx
mov ecx, dword [ebp - 0x268]
call fcn.10008f30
lea ecx, [ebp - 0x40]
call fcn.1000d4f0
mov byte [ebp - 4], 3
push str..
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x58]
push eax
call fcn.1002afb0
add esp, 0xc
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
push ecx
lea ecx, [ebp - 0x40]
call fcn.1000a0f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
call fcn.10006c00
mov byte [ebp - 4], 3
lea edx, [ebp - 0x40]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1ec], ecx
mov edx, dword [ebp - 0x1d0]
cmp dword [edx + 0x14], 0x10
jb 0x1002d899
mov dword [ebp - 0x1e8], 1
jmp 0x1002d8a3
mov dword [ebp - 0x1e8], 0
movzx eax, byte [ebp - 0x1e8]
test eax, eax
je 0x1002d8bc
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [ecx]
mov dword [ebp - 0x1ec], edx
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x274], eax
lea ecx, [ebp - 0x1c8]
push ecx
mov edx, dword [ebp - 0x274]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xffffffff
je 0x1002dd89
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x19c]
cmp edx, 0x2e
je 0x1002db97
lea eax, [ebp - 0x28]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x218], ecx
mov edx, dword [ebp - 0x218]
cmp dword [edx + 0x10], 0
jae 0x1002d92e
call fcn.1000d570
push 0
lea ecx, [ebp - 0x28]
call fcn.1000aef0
push 0x10063820
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x88]
push ecx
call fcn.1002afb0
add esp, 0xc
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x220], edx
mov byte [ebp - 4], 5
lea eax, [ebp - 0x19c]
push eax
mov ecx, dword [ebp - 0x220]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.1002af50
add esp, 0xc
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
push eax
lea ecx, [ebp - 0x28]
call fcn.1000a0f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.10006c00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.10006c00
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c8]
and ecx, 0x10
je 0x1002da2e
movzx edx, byte [ebp + 0xc]
test edx, edx
je 0x1002da22
movzx eax, byte [ebp + 0xc]
push eax
lea ecx, [ebp - 0x28]
push ecx
call fcn.1002d7a0
add esp, 8
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
je 0x1002da20
mov edx, dword [ebp - 0x1f0]
mov dword [ebp - 0x228], edx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x228]
jmp 0x1002ddbb
jmp 0x1002da29
mov byte [ebp - 0x1c9], 1
jmp 0x1002db97
lea eax, [ebp - 0x28]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x1d4], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1f8], edx
mov eax, dword [ebp - 0x1d4]
cmp dword [eax + 0x14], 0x10
jb 0x1002da67
mov dword [ebp - 0x1f4], 1
jmp 0x1002da71
mov dword [ebp - 0x1f4], 0
movzx ecx, byte [ebp - 0x1f4]
test ecx, ecx
je 0x1002da8a
mov edx, dword [ebp - 0x1d4]
mov eax, dword [edx]
mov dword [ebp - 0x1f8], eax
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0x230], ecx
push 0x80
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x1002dae5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x234]
jmp 0x1002ddbb
lea eax, [ebp - 0x28]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x1d8]
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x1d8]
cmp dword [eax + 0x14], 0x10
jb 0x1002db1e
mov dword [ebp - 0x1fc], 1
jmp 0x1002db28
mov dword [ebp - 0x1fc], 0
movzx ecx, byte [ebp - 0x1fc]
test ecx, ecx
je 0x1002db41
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx]
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x23c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1002db97
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x240], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x240]
jmp 0x1002ddbb
lea eax, [ebp - 0x1c8]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x1002d8ef
mov edx, dword [ebp - 0x1dc]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x12
je 0x1002dc14
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x244]
jmp 0x1002ddbb
movzx ecx, byte [ebp - 0x1c9]
test ecx, ecx
jne 0x1002dd89
mov edx, dword [ebp + 8]
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x1e0]
cmp dword [edx + 0x14], 0x10
jb 0x1002dc5c
mov dword [ebp - 0x208], 1
jmp 0x1002dc66
mov dword [ebp - 0x208], 0
movzx eax, byte [ebp - 0x208]
test eax, eax
je 0x1002dc7f
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [ecx]
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x264], eax
push 0x80
mov ecx, dword [ebp - 0x264]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x1002dcda
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
jmp 0x1002ddbb
mov edx, dword [ebp + 8]
mov dword [ebp - 0x254], edx
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x1e4]
cmp dword [edx + 0x14], 0x10
jb 0x1002dd13
mov dword [ebp - 0x210], 1
jmp 0x1002dd1d
mov dword [ebp - 0x210], 0
movzx eax, byte [ebp - 0x210]
test eax, eax
je 0x1002dd36
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [ecx]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x258]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
test eax, eax
jne 0x1002dd89
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x25c], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x25c]
jmp 0x1002ddbb
mov dword [ebp - 0x260], 0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x40]
call fcn.10006c00
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
call fcn.10006c00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003eb91
mov esp, ebp
pop ebp
ret