Function at 0x1006be52
Capabilities:
Delete file
Get file size
Read file on windows
Set file attributes
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
push esi
xor esi, esi
push edi
push esi
call fcn.100680fb
mov eax, dword [ebp + 0x10]
pop ecx
cmp eax, esi
je 0x1006be6d
mov dword [eax], esi
mov ebx, dword [ebp + 8]
cmp ebx, esi
je 0x1006c0e0
cmp word [ebx], si
je 0x1006c0e0
mov edi, dword [ebp + 0xc]
cmp edi, esi
je 0x1006c0e0
cmp word [edi], si
je 0x1006c0e0
push ebx
call fcn.10073be5
test al, 0x10
pop ecx
mov dword [ebp - 0x24], eax
je 0x1006beaf
push 0x2ae1
push 0x1d
jmp 0x1006c0e7
push edi
call fcn.10073be5
cmp eax, 0xffffffff
pop ecx
mov dword [ebp - 4], eax
je 0x1006bece
test al, 0x10
je 0x1006bece
push 0x2aeb
push 0x1e
jmp 0x1006c0e7
mov edi, 0x80
push esi
push edi
push 3
push esi
push 7
push connect
push ebx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
call fcn.1006c0f5
add esp, 0x1c
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
je 0x1006c06d
cmp dword [ebp - 4], 0xffffffff
je 0x1006bf15
test byte [ebp - 4], 1
je 0x1006bf15
mov eax, dword [ebp - 4]
and al, 0xfe
push eax
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
push edi
push 4
push esi
push 1
push 0xc0000000
push dword [ebp + 0xc]
call fcn.1006c0f5
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffff
je 0x1006c07d
xor eax, eax
cmp dword [ebp - 4], 0xffffffff
lea edi, [ebp - 0x38]
mov dword [ebp - 0x3c], esi
sete al
mov dword [ebp - 0x10], eax
xor eax, eax
stosd dword es:[edi], eax
lea edi, [ebp - 0x30]
mov dword [ebp - 0x34], esi
stosd dword es:[edi], eax
lea edi, [ebp - 0x28]
mov dword [ebp - 0x2c], esi
stosd dword es:[edi], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileTime]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], esi
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push dword [ebp - 0x18]
push eax
push ebx
call fcn.100615fb
add esp, 0xc
test eax, eax
je 0x1006c086
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x10], 1
call edi
push esi
push esi
push esi
push ebx
call edi
mov edi, 0x10000
push edi
call fcn.1007e238
pop ecx
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xc], esi
push edi
push esi
push dword [ebp - 4]
call fcn.1007e1e0
add esp, 0xc
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push esi
push eax
push edi
push dword [ebp - 4]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1006c00a
cmp dword [ebp - 8], esi
je 0x1006c013
lea eax, [ebp - 0x20]
push esi
push eax
mov dword [ebp - 0x20], esi
push dword [ebp - 8]
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1006c01c
jmp 0x1006bfc4
push 0x2b3f
push 0xd
jmp 0x1006c023
mov dword [ebp - 0x1c], 1
jmp 0x1006c031
push 0x2b4d
push 0xe
call fcn.100680dd
pop ecx
mov dword [ebp - 0xc], 1
pop ecx
push dword [ebp - 4]
call fcn.1007de95
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp dword [ebp - 0x1c], esi
je 0x1006c094
cmp dword [ebp - 0xc], esi
jne 0x1006c094
test byte [ebp + 0x14], 1
mov dword [ebp - 0x14], 1
je 0x1006c094
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
jmp 0x1006c094
push 0x2b03
push 3
call fcn.100680dd
pop ecx
pop ecx
jmp 0x1006c0db
push 0x2b16
push 4
jmp 0x1006c08d
push 0x2b29
push 0x25
call fcn.100680dd
pop ecx
pop ecx
push dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
cmp ebx, 0xffffffff
je 0x1006c0a7
push ebx
call edi
cmp dword [ebp - 0x14], esi
je 0x1006c0c0
test byte [ebp + 0x14], 2
je 0x1006c0db
push dword [ebp - 0x24]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x1006c0db
cmp dword [ebp - 0x10], esi
je 0x1006c0db
mov eax, dword [ebp + 0x10]
cmp eax, esi
je 0x1006c0d2
mov dword [eax], 1
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x14]
jmp 0x1006c0f0
push 0x2ad9
push 1
call fcn.100680dd
pop ecx
xor eax, eax
pop ecx
pop edi
pop esi
pop ebx
leave
ret