Function at 0x10027650
Capabilities:
Delete directory
Enumerate files on windows
Enumerate files recursively
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009db96
mov eax, dword fs:[0]
push eax
sub esp, 0x2e4
mov eax, dword [0x100c34c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push 0xffffffffffffffff
push eax
push ecx
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.10011ff0
mov dword [ebp - 4], 0
mov edx, 0x20
lea ecx, [ebp - 0x40]
call fcn.1001d3d0
cmp dword [ebp - 0x30], 0
je 0x1002791d
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x40]
call fcn.10026180
cmp eax, 1
sete al
test al, al
je 0x1002791d
push str..
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x58]
call fcn.10014bb0
add esp, 4
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x2f0]
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x10027726
xor bl, bl
jmp 0x100278f2
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
lea eax, [ebp - 0x2c4]
push eax
push 0x100adb18
call fcn.10078359
add esp, 8
test eax, eax
je 0x100278d7
lea eax, [ebp - 0x2c4]
push eax
push 0x100adb1c
call fcn.10078359
add esp, 8
test eax, eax
je 0x100278d7
push ecx
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0xa0]
call fcn.1002a190
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c4]
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.10024110
add esp, 4
mov byte [ebp - 4], 4
cmp dword [ebp - 0x8c], 8
jb 0x100277af
push dword [ebp - 0xa0]
call fcn.10076e4c
add esp, 4
xor eax, eax
cmp dword [ebp - 0x14], 8
mov word [ebp - 0xa0], ax
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x100277f4
and eax, 0xfffffffe
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x28]
push eax
push ecx
call ebx
test byte [ebp - 0x2f0], 0x10
lea eax, [ebp - 0x28]
je 0x1002785a
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x70]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.100109a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.10027650
mov byte [ebp - 4], 4
cmp dword [ebp - 0x5c], 8
jb 0x10027832
push dword [ebp - 0x70]
call fcn.10076e4c
add esp, 4
xor eax, eax
cmp dword [ebp - 0x14], 8
mov word [ebp - 0x70], ax
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x100278ae
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x88]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.100109a0
mov byte [ebp - 4], 6
mov dl, 1
lea ecx, [ebp - 0x88]
call fcn.10027970
mov byte [ebp - 4], 4
cmp dword [ebp - 0x74], 8
jb 0x10027897
push dword [ebp - 0x88]
call fcn.10076e4c
add esp, 4
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x14], 8
jb 0x100278c3
push dword [ebp - 0x28]
call fcn.10076e4c
add esp, 4
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
lea eax, [ebp - 0x2f0]
push eax
push esi
call edi
test eax, eax
jne 0x10027732
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov bl, 1
mov byte [ebp - 4], 0
cmp dword [ebp - 0x44], 8
jb 0x10027907
push dword [ebp - 0x58]
call fcn.10076e4c
add esp, 4
xor eax, eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
jmp 0x1002791f
xor bl, bl
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 8
jb 0x10027937
push dword [ebp - 0x40]
call fcn.10076e4c
add esp, 4
xor eax, eax
mov word [ebp - 0x40], ax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10076e3d
mov esp, ebp
pop ebp
ret