Function at 0x10006dd1
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1003c82d
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x1004a300]
xor eax, esp
mov dword [esp + 0x98], eax
push ebx
push esi
push edi
mov eax, dword [0x1004a300]
xor eax, esp
push eax
lea eax, [esp + 0xb0]
mov dword fs:[0], eax
lea edi, [esp + 0x8c]
call fcn.10006834
push str..tmp
mov eax, edi
push eax
lea eax, [esp + 0x78]
xor ebx, ebx
push eax
mov dword [esp + 0xc4], ebx
call fcn.10005fde
add esp, 0xc
push 8
pop esi
mov byte [esp + 0xb8], 1
xor eax, eax
mov dword [esp + 0x14], esi
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x1000704d
mov edi, dword [esp + 0x74]
cmp dword [esp + 0x88], esi
jae 0x10006e75
lea edi, [esp + 0x74]
call fcn.10009f6d
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x88], esi
jae 0x10006e8b
lea eax, [esp + 0x74]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call edi
cmp dword [0x1004bcd4], ebx
je 0x10006eec
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x18]
cmp eax, 0x1d4c0
jbe 0x10006eec
mov ecx, dword [0x1004bcc4]
cmp dword [0x1004bcd8], esi
jae 0x10006ec0
mov ecx, 0x1004bcc4
mov eax, dword [esp + 0x90]
cmp dword [esp + 0xa4], esi
jae 0x10006ed7
lea eax, [esp + 0x90]
mov edx, dword [0x1004bcd4]
add edx, edx
push edx
push ecx
push eax
call fcn.1000a5c6
jmp 0x10006ff8
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x88], esi
jae 0x10006efd
lea eax, [esp + 0x74]
push eax
call fcn.1000691a
pop ecx
test al, al
je 0x10006ff8
lea eax, [esp + 0x1c]
push eax
call fcn.1001ed83
push str.dYPyKFyIaLZ8HyWEstzAvMaUveagvJ9TM1pHVueEcQhB27UKJxn94K3bYBIAMrK5iKrLXi4DebRt1c8W_AxG5QJBYVYzBuOW3rWZZ0ylIMfX8YU5PDfQAo0yNG8CIy31qGMMKhGSQMrQ3ubZZfrxMJ7MeIhRa09nqybaufWG9nx1kfReqgN2PfpivMNxJnWPUVZ991M7UIOgZ2udlQ
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 2
call fcn.10001789
push ebx
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x58]
push eax
mov byte [esp + 0xc4], 3
call fcn.100080e4
push eax
lea eax, [esp + 0x20]
mov byte [esp + 0xbc], 4
call fcn.10008085
push ebx
push 1
lea ecx, [esp + 0x58]
call fcn.10001a41
push ebx
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xc0], 2
call fcn.10001a41
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0xa4], esi
jae 0x10006f8d
lea ecx, [esp + 0x90]
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x88], esi
jae 0x10006f9e
lea eax, [esp + 0x74]
lea edx, [esp + 0x1c]
push edx
push ecx
push eax
call fcn.1001e86d
add esp, 0xc
test eax, eax
je 0x10006fc6
push 0xffffffffffffffff
push 0x1004bcc0
xor ebx, ebx
lea eax, [esp + 0x94]
call fcn.10001a8c
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x88], esi
jae 0x10006fd7
lea eax, [esp + 0x74]
push eax
call edi
lea esi, [esp + 0x1c]
mov byte [esp + 0xb8], 1
call fcn.10008643
push dword [esp + 0x1c]
call fcn.10022f31
pop ecx
push 8
pop esi
mov eax, dword [esp + 0x90]
cmp dword [esp + 0xa4], esi
jae 0x1000700f
lea eax, [esp + 0x90]
push eax
call fcn.1000a08f
add dword [0x1004d5a8], eax
adc dword [0x1004d5ac], edx
mov eax, dword [0x1004d5ac]
cmp eax, dword [0x1004bcac]
jb 0x1000704d
ja 0x1000703d
mov eax, dword [0x1004d5a8]
cmp eax, dword [0x1004bca8]
jbe 0x1000704d
call fcn.10006c52
mov dword [0x1004d5a8], eax
mov dword [0x1004d5ac], edx
push ebx
push 1
lea esi, [esp + 0x78]
call fcn.10001b39
push ebx
push 1
lea esi, [esp + 0x94]
call fcn.10001b39
mov ecx, dword [esp + 0xb0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.10022b9f
mov esp, ebp
pop ebp
ret 8