Function at 0x1006dd30
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f73e
mov eax, dword fs:[0]
push eax
mov eax, 0x7908
call fcn.10057280
mov eax, dword [0x10085510]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
push edi
mov dword [ebp - 0x7904], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ebx, ebx
push 0x77ff
lea eax, [ebp - 0x784f]
push ebx
push eax
mov dword [ebp - 4], ebx
mov byte [ebp - 0x7850], bl
call fcn.100568e0
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 0x14]
push ecx
push edx
push 0x77ff
lea eax, [ebp - 0x7850]
push 0x7800
push eax
call fcn.10054287
lea ecx, [ebp - 0x7914]
push ecx
call fcn.100542a7
lea edx, [ebp - 0x7914]
push edx
lea eax, [ebp - 0x7900]
push eax
call fcn.10054a56
push 0x3f
lea ecx, [ebp - 0x4f]
push ebx
push ecx
mov byte [ebp - 0x50], bl
call fcn.100568e0
mov edx, dword [ebp - 0x7900]
mov eax, dword [ebp - 0x78fc]
mov ecx, dword [ebp - 0x78f8]
push edx
push eax
push ecx
lea edx, [ebp - 0x50]
push str.__02d:_02d:_02d_
push edx
call fcn.1006c840
lea eax, [ebp - 0x78a4]
add esp, 0x4c
push eax
call fcn.1006d090
lea ecx, [ebp - 0x78a4]
push ecx
lea edx, [ebp - 0x78dc]
push str.___:
push edx
mov byte [ebp - 4], 1
call fcn.10005210
push 0x1007db2c
push eax
lea eax, [ebp - 0x78c0]
push eax
mov byte [ebp - 4], 2
call fcn.100051c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x78a4]
mov byte [ebp - 4], 3
call fcn.10003fa0
mov esi, 0x10
cmp dword [ebp - 0x78ac], esi
jb 0x1006de6e
mov ecx, dword [ebp - 0x78c0]
push ecx
call fcn.10053416
add esp, 4
mov dword [ebp - 0x78ac], 0xf
mov dword [ebp - 0x78b0], ebx
mov byte [ebp - 0x78c0], bl
mov byte [ebp - 4], 1
cmp dword [ebp - 0x78c8], esi
jb 0x1006de9f
mov edx, dword [ebp - 0x78dc]
push edx
call fcn.10053416
add esp, 4
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x7888]
push ecx
mov ecx, edi
call fcn.1006dca0
lea edx, [ebp - 0x7888]
push edx
lea eax, [ebp - 0x78dc]
push str.___:
push eax
mov byte [ebp - 4], 4
call fcn.10005210
push 0x1007db2c
push eax
lea ecx, [ebp - 0x78c0]
push ecx
mov byte [ebp - 4], 5
call fcn.100051c0
add esp, 0x18
push eax
lea ecx, [ebp - 0x7888]
mov byte [ebp - 4], 6
call fcn.10003fa0
cmp dword [ebp - 0x78ac], esi
jb 0x1006df0d
mov edx, dword [ebp - 0x78c0]
push edx
call fcn.10053416
add esp, 4
mov dword [ebp - 0x78ac], 0xf
mov dword [ebp - 0x78b0], ebx
mov byte [ebp - 0x78c0], bl
cmp dword [ebp - 0x78c8], esi
jb 0x1006df3a
mov eax, dword [ebp - 0x78dc]
push eax
call fcn.10053416
add esp, 4
mov dword [ebp - 0x7858], 0xf
mov dword [ebp - 0x785c], ebx
mov byte [ebp - 0x786c], bl
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 7
lea esi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1006df60
sub eax, esi
push eax
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x786c]
call fcn.10004990
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x78a4]
push edx
mov ecx, eax
call fcn.100048a0
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x7888]
push ecx
mov ecx, eax
call fcn.100048a0
push 2
push 0x1007d24c
mov ecx, eax
call fcn.10004990
lea edx, [ebp - 0x7850]
mov esi, eax
lea eax, [edx + 1]
mov cl, byte [edx]
inc edx
cmp cl, bl
jne 0x1006dfb4
sub edx, eax
push edx
lea edx, [ebp - 0x7850]
push edx
mov ecx, esi
call fcn.10004990
cmp dword [edi + 0x84], ebx
jne 0x1006e046
cmp dword [ebp - 0x7858], 0x10
jb 0x1006dfec
mov eax, dword [ebp - 0x786c]
push eax
call fcn.10053416
add esp, 4
cmp dword [ebp - 0x7874], 0x10
mov esi, 0xf
mov byte [ebp - 0x786c], bl
mov dword [ebp - 0x785c], ebx
mov dword [ebp - 0x7858], esi
jb 0x1006e01b
mov ecx, dword [ebp - 0x7888]
push ecx
call fcn.10053416
add esp, 4
cmp dword [ebp - 0x7890], 0x10
mov dword [ebp - 0x7874], esi
mov dword [ebp - 0x7878], ebx
mov byte [ebp - 0x7888], bl
jb 0x1006e3cc
mov edx, dword [ebp - 0x78a4]
push edx
jmp 0x1006e3c4
mov ecx, edi
call fcn.1006d330
test eax, eax
je 0x1006dfd4
push 1
push 0x1007d60c
lea ecx, [ebp - 0x786c]
call fcn.10004990
cmp dword [edi + 0x78], ebx
jne 0x1006e175
cmp dword [edi + 0x40], ebx
jne 0x1006e10c
lea eax, [ebp - 0x78c0]
push eax
call fcn.1006d170
add esp, 4
push 4
push str.Log
lea ecx, [ebp - 0x78c0]
mov byte [ebp - 4], 8
call fcn.10004990
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x790c], esp
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x78c0]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.10004ab0
call fcn.1006cb20
add esp, 0x1c
cmp eax, ebx
jne 0x1006e0eb
sub esp, 0x1c
lea eax, [ebp - 0x78c0]
mov ecx, esp
mov dword [ebp - 0x790c], esp
push eax
call fcn.10005920
call fcn.1006cb60
add esp, 0x1c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x78c0]
push ecx
lea ecx, [edi + 0x30]
call fcn.10004ab0
lea ecx, [ebp - 0x78c0]
mov byte [ebp - 4], 7
call fcn.10003c90
cmp dword [edi + 0x5c], ebx
jne 0x1006e13c
lea edx, [ebp - 0x78dc]
push edx
call fcn.1006d090
add esp, 4
push eax
lea ecx, [edi + 0x4c]
mov byte [ebp - 4], 9
call fcn.10003fa0
lea ecx, [ebp - 0x78dc]
mov byte [ebp - 4], 7
call fcn.10003c90
push 0xffffffffffffffff
push ebx
lea eax, [edi + 0x30]
lea ecx, [edi + 0x68]
push eax
call fcn.100048a0
push 1
push 0x1007f170
mov ecx, eax
call fcn.10004990
push 0xffffffffffffffff
push ebx
lea ecx, [edi + 0x4c]
push ecx
mov ecx, eax
call fcn.100048a0
push 4
push str..log
mov ecx, eax
call fcn.10004990
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x790c], esp
push 0xffffffffffffffff
push ebx
lea esi, [edi + 0x68]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
push esi
mov byte [ecx], bl
call fcn.10004ab0
call fcn.1006cae0
add esp, 0x1c
cmp eax, ebx
jne 0x1006e1df
cmp dword [esi + 0x14], 0x10
jb 0x1006e1ae
mov eax, dword [esi]
jmp 0x1006e1b0
mov eax, esi
push 0x1007e9f0
push eax
lea edx, [ebp - 0x7904]
push edx
mov dword [ebp - 0x7904], ebx
call fcn.10053b83
add esp, 0xc
test eax, eax
jne 0x1006e279
mov eax, dword [ebp - 0x7904]
push eax
jmp 0x1006e271
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x790c], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
push esi
mov byte [ecx], bl
call fcn.10004ab0
call fcn.1006ca40
add esp, 0x1c
push ebx
push 0x400
push edx
push eax
call fcn.10057120
push ebx
push 0x400
push edx
push eax
call fcn.10057120
cmp edx, ebx
jl 0x1006e279
jg 0x1006e22c
cmp eax, 0xa
jb 0x1006e279
cmp dword [esi + 0x14], 0x10
jb 0x1006e236
mov eax, dword [esi]
jmp 0x1006e238
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esi + 0x14], 0x10
jb 0x1006e249
mov eax, dword [esi]
jmp 0x1006e24b
mov eax, esi
push 0x1007e9f0
push eax
lea ecx, [ebp - 0x7904]
push ecx
mov dword [ebp - 0x7904], ebx
call fcn.10053b83
add esp, 0xc
test eax, eax
jne 0x1006e279
mov edx, dword [ebp - 0x7904]
push edx
call fcn.10053c37
add esp, 4
cmp dword [esi + 0x14], 0x10
mov dword [ebp - 0x7908], ebx
jb 0x1006e287
mov esi, dword [esi]
push 0x1007d4a8
lea eax, [ebp - 0x7908]
push esi
push eax
call fcn.10053b83
add esp, 0xc
test eax, eax
je 0x1006e312
cmp dword [ebp - 0x7858], 0x10
jb 0x1006e2b8
mov ecx, dword [ebp - 0x786c]
push ecx
call fcn.10053416
add esp, 4
cmp dword [ebp - 0x7874], 0x10
mov esi, 0xf
mov dword [ebp - 0x7858], esi
mov dword [ebp - 0x785c], ebx
mov byte [ebp - 0x786c], bl
jb 0x1006e2e7
mov edx, dword [ebp - 0x7888]
push edx
call fcn.10053416
add esp, 4
cmp dword [ebp - 0x7890], 0x10
mov dword [ebp - 0x7874], esi
mov dword [ebp - 0x7878], ebx
mov byte [ebp - 0x7888], bl
jb 0x1006e3cc
mov eax, dword [ebp - 0x78a4]
push eax
jmp 0x1006e3c4
mov eax, dword [ebp - 0x786c]
mov esi, 0x10
cmp dword [ebp - 0x7858], esi
jae 0x1006e32b
lea eax, [ebp - 0x786c]
mov ecx, dword [ebp - 0x7908]
mov edx, dword [ebp - 0x785c]
push ecx
push 1
push edx
push eax
call fcn.10053e02
mov eax, dword [ebp - 0x7908]
push eax
call fcn.1005874c
mov ecx, dword [ebp - 0x7908]
push ecx
call fcn.10053c37
add esp, 0x18
cmp dword [ebp - 0x7858], esi
jb 0x1006e373
mov edx, dword [ebp - 0x786c]
push edx
call fcn.10053416
add esp, 4
cmp dword [ebp - 0x7874], 0x10
mov esi, 0xf
mov dword [ebp - 0x7858], esi
mov dword [ebp - 0x785c], ebx
mov byte [ebp - 0x786c], bl
jb 0x1006e3a2
mov eax, dword [ebp - 0x7888]
push eax
call fcn.10053416
add esp, 4
cmp dword [ebp - 0x7890], 0x10
mov dword [ebp - 0x7874], esi
mov dword [ebp - 0x7878], ebx
mov byte [ebp - 0x7888], bl
jb 0x1006e3cc
mov ecx, dword [ebp - 0x78a4]
push ecx
call fcn.10053416
add esp, 4
push edi
mov dword [ebp - 0x7890], esi
mov dword [ebp - 0x7894], ebx
mov byte [ebp - 0x78a4], bl
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10052dab
mov esp, ebp
pop ebp
ret