Function at 0x1000f620
Capabilities:
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x674
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x670], eax
push ebx
mov ebx, dword [ebp + 8]
xor eax, eax
push esi
push edi
push 0x206
push eax
mov word [esp + 0x270], ax
lea eax, [esp + 0x272]
push eax
mov dword [esp + 0x20], ecx
call fcn.100567e0
xor eax, eax
push 0x206
push eax
mov word [esp + 0x484], ax
lea eax, [esp + 0x486]
push eax
call fcn.100567e0
push ebx
lea eax, [esp + 0x48c]
push 0x104
push eax
call fcn.10055fa4
push str..
lea eax, [esp + 0x498]
push 0x104
push eax
call fcn.10055f38
add esp, 0x30
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x10], eax
cmp eax, 0xffffffff
jne 0x1000f6e0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x670]
xor ecx, esp
call fcn.10056351
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
jmp 0x1000f6f0
mov ecx, 0x100e3f24
lea eax, [esp + 0x44]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1000f726
test dx, dx
je 0x1000f722
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1000f726
add eax, 4
add ecx, 4
test dx, dx
jne 0x1000f700
xor eax, eax
jmp 0x1000f72b
sbb eax, eax
or eax, 1
test eax, eax
je 0x1000f856
mov eax, 0x100e3f28
lea ecx, [esp + 0x44]
lea esp, [esp]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1000f766
test dx, dx
je 0x1000f762
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1000f766
add ecx, 4
add eax, 4
test dx, dx
jne 0x1000f740
xor eax, eax
jmp 0x1000f76b
sbb eax, eax
or eax, 1
test eax, eax
je 0x1000f856
test edi, edi
jne 0x1000f791
lea eax, [esp + 0x44]
push str.desktop.ini
push eax
call fcn.10056d04
add esp, 8
test eax, eax
je 0x1000f856
push ebx
lea eax, [esp + 0x26c]
push 0x104
push eax
call fcn.10055fa4
push 0x100dd6d4
lea eax, [esp + 0x278]
push 0x104
push eax
call fcn.10055f38
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x284]
push 0x104
push eax
call fcn.10055f38
add esp, 0x24
lea eax, [esp + 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x1000f7f9
and eax, 0xfffffffe
push eax
lea eax, [esp + 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test byte [esp + 0x18], 0x10
je 0x1000f823
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x268]
push esi
push edi
push eax
call fcn.1000f620
lea eax, [esp + 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x1000f856
test esi, esi
je 0x1000f848
lea eax, [esp + 0x44]
push 0x100e3f48
push eax
call fcn.10056d04
add esp, 8
test eax, eax
jne 0x1000f848
lea eax, [esp + 0x44]
push eax
push ebx
call fcn.1000f4d0
lea eax, [esp + 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1000f6f0
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x67c]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10056351
mov esp, ebp
pop ebp
ret 0xc