Function at 0x1068b10
Capabilities:
Delete file
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x874
mov eax, dword [0x1077400]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x848], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
mov dword [ebp - 0x828], eax
mov eax, dword [ebp + 0x1c]
push 6
mov dword [ebp - 0x844], ecx
pop ecx
mov dword [ebp - 0x850], eax
xor eax, eax
lea edi, [ebp - 0x870]
push 0x206
mov dword [ebp - 0x874], ebx
rep stosd dword es:[edi], eax
mov word [ebp - 0x824], ax
lea eax, [ebp - 0x822]
push ebx
push eax
mov dword [ebp - 0x84c], esi
mov dword [ebp - 0x83c], ebx
mov dword [ebp - 0x830], ebx
mov dword [ebp - 0x858], ebx
mov dword [ebp - 0x840], ebx
mov dword [ebp - 0x838], ebx
mov dword [ebp - 0x854], ebx
mov dword [ebp - 0x834], ebx
mov dword [ebp - 0x82c], ebx
call sub.msvcrt.dll_memset
mov eax, dword [esi]
add esp, 0xc
lea ecx, [ebp - 0x83c]
push ecx
push esi
call dword [eax + 0x14]
mov esi, eax
cmp esi, ebx
jl 0x1068fb5
mov eax, dword [ebp - 0x83c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov esi, eax
cmp esi, ebx
jl 0x1068fb5
mov eax, dword [ebp - 0x83c]
mov ecx, dword [eax]
lea edx, [ebp - 0x858]
push edx
lea edx, [ebp - 0x830]
push edx
push 1
push eax
call dword [ecx + 0xc]
mov esi, eax
cmp esi, ebx
jl 0x1068fb5
push dword [ebp - 0x830]
lea ecx, [ebp - 0x840]
call fcn.01068672
cmp dword [ebp - 0x840], ebx
jne 0x1068c29
mov esi, 0x80004002
jmp 0x1068fb5
push dword [ebp - 0x830]
lea ecx, [ebp - 0x838]
call fcn.01068655
cmp dword [ebp - 0x838], ebx
je 0x1068c1f
push 0x80
push 0x100c
push dword [ebp - 0x838]
call fcn.01069617
mov esi, eax
cmp esi, ebx
jl 0x1068fb5
sub esp, 0x10
mov edi, esp
mov esi, 0x1005fdc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x100a
push dword [ebp - 0x838]
movsd dword es:[edi], dword [esi]
call fcn.0106965a
mov esi, eax
cmp esi, ebx
jl 0x1068fb5
push dword [ebp + 0x14]
push dword [ebp - 0x828]
push dword [ebp + 0x18]
push dword [ebp - 0x830]
push dword [ebp - 0x84c]
call fcn.010696e6
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jge 0x1068d4b
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push esi
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push ebx
push eax
call sub.msvcrt.dll_memset
mov esi, dword [ebp - 0x844]
add esp, 0x18
push 0x103
lea eax, [ebp - 0x20c]
push eax
push 0x1b58
push dword [esi + 4]
call edi
test eax, eax
je 0x1068d4b
push 0x103
lea eax, [ebp - 0x414]
push eax
push 0x1b5c
push dword [esi + 4]
call edi
test eax, eax
je 0x1068d4b
push 1
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
push dword [esi + 8]
call fcn.0106855f
cmp eax, 2
jne 0x1068d4b
mov esi, 0x80004004
jmp 0x1068fb5
push 0x1010f24
call fcn.01021611
mov dword [ebp - 0x854], eax
cmp eax, ebx
jne 0x1068d69
mov esi, 0x8007000e
jmp 0x1068fb5
lea ecx, [ebp - 0x61c]
push ecx
push ebx
push 0x1010f1c
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [ebp - 0x84c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1068d97
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp dword [ebp - 0x84c], ebx
je 0x1068fb5
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x61c]
push 0x2e
push eax
call sub.msvcrt.dll_wcsrchr
mov esi, dword [ebp - 0x848]
pop ecx
pop ecx
xor ecx, ecx
mov word [eax], cx
cmp esi, ebx
je 0x1068df0
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x24]
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
push 0x103
lea eax, [ebp - 0x824]
push eax
mov eax, dword [ebp - 0x844]
push 0x1b5d
push dword [eax + 4]
call edi
test eax, eax
jne 0x1068e1a
mov esi, 0x80004005
jmp 0x1068fb5
push 0x228
call sub.MFC42u.dll_operatornew
pop ecx
cmp eax, ebx
je 0x1068e39
push esi
mov ecx, eax
call fcn.01069c97
mov dword [ebp - 0x834], eax
jmp 0x1068e3f
mov dword [ebp - 0x834], ebx
cmp dword [ebp - 0x834], ebx
je 0x1068d5f
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
mov dword [ebp - 0x874], 0x1c
mov dword [ebp - 0x86c], 0x4000
mov dword [ebp - 0x82c], ebx
call sub.msvcrt.dll_memset
push 1
lea eax, [ebp - 0x61c]
push eax
push 0x1010fe4
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.010166de
mov esi, eax
add esp, 0x20
cmp esi, ebx
jl 0x1068fb5
mov dword [ebp - 0x828], 1
mov eax, dword [ebp - 0x834]
mov ecx, dword [eax]
lea edx, [ebp - 0x20c]
push edx
push eax
call dword [ecx + 0x14]
mov esi, eax
cmp esi, ebx
jl 0x1068fb5
push dword [ebp - 0x828]
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.010166de
mov esi, eax
add esp, 0x10
cmp esi, ebx
jl 0x1068fb5
mov edi, dword [ebp - 0x848]
cmp edi, ebx
je 0x1068f16
mov eax, dword [edi]
lea ecx, [ebp - 0x20c]
push ecx
mov ecx, edi
call dword [eax + 0xc]
push dword [ebp - 0x834]
mov eax, dword [ebp - 0x840]
mov ecx, dword [eax]
lea edx, [ebp - 0x874]
push edx
push eax
call dword [ecx + 0x10]
mov esi, eax
cmp edi, ebx
je 0x1068f44
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x2c]
test eax, eax
jne 0x1068d41
cmp esi, 0x80210003
jne 0x1068f51
cmp dword [ebp + 0x18], ebx
jne 0x1068fb3
cmp esi, ebx
jl 0x1068fb5
inc dword [ebp - 0x82c]
inc dword [ebp - 0x828]
cmp dword [ebp + 0x18], ebx
je 0x1068fb5
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call sub.msvcrt.dll_memset
push dword [ebp - 0x828]
lea eax, [ebp - 0x61c]
push eax
push 0x1010fe4
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.010166de
mov esi, eax
add esp, 0x20
cmp esi, ebx
jge 0x1068eb6
jmp 0x1068fb5
xor esi, esi
mov ecx, dword [ebp - 0x848]
cmp ecx, ebx
je 0x1068fc4
mov eax, dword [ecx]
call dword [eax + 4]
cmp esi, ebx
jl 0x1068ff8
push dword [ebp - 0x850]
mov ecx, dword [ebp - 0x844]
push dword [ebp - 0x82c]
lea eax, [ebp - 0x61c]
push eax
call fcn.01068861
mov esi, eax
cmp esi, ebx
jge 0x1068ff8
push dword [ebp - 0x850]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor edi, edi
inc edi
cmp dword [ebp - 0x82c], edi
jb 0x1069059
xor eax, eax
push 0x206
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push ebx
push eax
call sub.msvcrt.dll_memset
push edi
lea eax, [ebp - 0x61c]
push eax
push 0x1010fe4
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.010166de
add esp, 0x20
test eax, eax
jl 0x1069050
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
inc edi
cmp edi, dword [ebp - 0x82c]
jbe 0x1069003
mov eax, dword [ebp - 0x834]
cmp eax, ebx
je 0x1069069
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x854]
call fcn.0101e9ef
mov eax, dword [ebp - 0x830]
cmp eax, ebx
je 0x106908a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x830], ebx
mov eax, dword [ebp - 0x83c]
cmp eax, ebx
je 0x10690a0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x83c], ebx
mov eax, dword [ebp - 0x838]
cmp eax, ebx
je 0x10690b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x840]
cmp eax, ebx
je 0x10690c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0101d9bb
leave
ret 0x18