Function at 0x10006d90
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb4c
mov eax, dword [0x1002e678]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x103
lea eax, [ebp - 0x20b]
push 0
push eax
mov byte [ebp - 0x20c], 0
call fcn.1000fc30
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.1000fc30
push 0x3ff
lea eax, [ebp - 0x60b]
push 0
push eax
mov byte [ebp - 0x60c], 0
call fcn.1000fc30
push 0x3ff
lea eax, [ebp - 0xa0b]
push 0
push eax
mov byte [ebp - 0xa0c], 0
call fcn.1000fc30
add esp, 0x30
lea eax, [ebp - 0xa0c]
push 0x2800
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor ecx, ecx
jmp 0x10006e30
mov al, byte [ebp + ecx - 0xa0c]
mov byte [ebp + ecx - 0x60c], al
lea ecx, [ecx + 1]
test al, al
jne 0x10006e30
lea eax, [ebp - 0x60c]
push 0x5c
push eax
call fcn.10010170
mov edx, eax
add esp, 8
test edx, edx
je 0x10006e78
mov ecx, dword [str.LogABC]
mov dword [edx + 1], ecx
mov cx, word [0x10023974]
mov word [edx + 5], cx
mov al, byte [0x10023976]
mov byte [edx + 7], al
xor ecx, ecx
lea ebx, [ebx]
mov al, byte [ebp + ecx - 0x60c]
mov byte [ebp + ecx - 0x20c], al
lea ecx, [ecx + 1]
test al, al
jne 0x10006e80
lea ecx, [ebp - 0x20c]
dec ecx
lea esp, [esp]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x10006ea0
mov eax, dword [str..]
mov dword [ecx], eax
mov al, byte [0x10023b24]
mov byte [ecx + 4], al
push ebx
lea eax, [ebp - 0xb4c]
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x10007032
push esi
push edi
jmp 0x10006ee0
test byte [ebp - 0xb4c], 0x10
je 0x10006f6b
cmp byte [ebp - 0xb20], 0x2e
je 0x10007013
xor ecx, ecx
lea esp, [esp]
mov al, byte [ebp + ecx - 0x60c]
mov byte [ebp + ecx - 0x108], al
lea ecx, [ecx + 1]
test al, al
jne 0x10006f00
lea edi, [ebp - 0x108]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10006f20
mov ax, word [0x10023978]
lea edx, [ebp - 0xb20]
mov word [edi], ax
mov esi, edx
jmp 0x10006f40
mov al, byte [edx]
inc edx
test al, al
jne 0x10006f40
lea edi, [ebp - 0x108]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10006f50
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x10007013
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0xb20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10006f94
test dl, dl
je 0x10006f90
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10006f94
add eax, 2
add ecx, 2
test dl, dl
jne 0x10006f74
xor eax, eax
jmp 0x10006f99
sbb eax, eax
or eax, 1
test eax, eax
je 0x10007013
xor eax, eax
nop
mov cl, byte [ebp + eax - 0x60c]
mov byte [ebp + eax - 0x108], cl
lea eax, [eax + 1]
test cl, cl
jne 0x10006fa0
lea edi, [ebp - 0x108]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10006fc0
mov ax, word [0x10023978]
lea edx, [ebp - 0xb20]
mov word [edi], ax
mov esi, edx
jmp 0x10006fe0
mov al, byte [edx]
inc edx
test al, al
jne 0x10006fe0
lea edi, [ebp - 0x108]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10006ff0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x108]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0xb4c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10006ee0
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.1000ef85
mov esp, ebp
pop ebp
ret