Function at 0x1000e00c
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d561d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1ac0
call fcn.10022c40
push esi
push edi
lea edi, [ebp - 0x1acc]
mov ecx, 0x6b0
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1aa4], 0xffffffff
mov dword [ebp - 0x83c], 1
lea ecx, [ebp - 0x838]
call fcn.100acad7
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1444]
call fcn.100acad7
mov byte [ebp - 4], 1
mov esi, esp
push 0x400
lea eax, [ebp - 0x103c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp esi, esp
call fcn.10021b10
push 0x5c
lea ecx, [ebp - 0x103c]
push ecx
call fcn.1000f490
add esp, 8
mov dword [ebp - 0x144c], eax
cmp dword [ebp - 0x144c], 0
je 0x1000e0bf
mov edx, dword [ebp - 0x144c]
mov word [edx], 0
push 0x10107038
lea ecx, [ebp - 0x1450]
call fcn.10069cfa
mov byte [ebp - 4], 2
push 0x100f5438
push 0x100f543c
lea ecx, [ebp - 0x1450]
call fcn.1004f447
push 0
lea ecx, [ebp - 0x1450]
call fcn.1006a88b
push eax
lea eax, [ebp - 0x103c]
push eax
push 0x100f5440
lea ecx, [ebp - 0x838]
push ecx
call fcn.100503de
add esp, 0x10
push 0
lea ecx, [ebp - 0x1450]
call fcn.1006a88b
push eax
lea edx, [ebp - 0x103c]
push edx
push str._s_s.raw
lea eax, [ebp - 0x1444]
push eax
call fcn.100503de
add esp, 0x10
mov byte [ebp - 0x1ac4], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x1ac3]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov byte [ebp - 0x82c], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x82b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov byte [ebp - 0x1aa0], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1a9f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1440], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x143f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov esi, esp
push 0
push 0
push 0x1e
lea ecx, [ebp - 0x1ac4]
push ecx
push 0xffffffffffffffff
push str.ASUS_Live_Update
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
push 0
push 0x1e
lea edx, [ebp - 0x82c]
push edx
push 0xffffffffffffffff
push str.ASUS_Update
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
push 0
push 0x400
lea eax, [ebp - 0x1aa0]
push eax
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x838]
call fcn.1006a88b
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1440]
push ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x1444]
call fcn.1006a88b
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x1040], 0
mov esi, esp
lea edx, [ebp - 0x16a0]
push edx
push 0
lea ecx, [ebp - 0x838]
call fcn.1006a88b
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x1040], eax
cmp dword [ebp - 0x1040], 0xffffffff
je 0x1000e2ab
mov dword [ebp - 0x83c], 0
mov esi, esp
mov eax, dword [ebp - 0x1040]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp esi, esp
call fcn.10021b10
cmp dword [ebp - 0x83c], 0
jne 0x1000e2d8
lea ecx, [ebp - 0x1440]
push ecx
lea edx, [ebp - 0x1aa0]
push edx
lea eax, [ebp - 0x1ac4]
push eax
lea ecx, [ebp - 0x1ac4]
push ecx
call fcn.1000d983
add esp, 0x10
mov word [ebp - 0x80c], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x80a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x834], 0xd
mov word [ebp - 0x832], 0xa
mov word [ebp - 0x830], 0
mov esi, esp
push 0
push 0x80
push 4
push 0
push 1
push 0x40000000
lea ecx, [ebp - 0x1444]
call fcn.100acc14
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x1aa4], eax
cmp dword [ebp - 0x1aa4], 0xffffffff
je 0x1000e5af
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.10021b10
cmp eax, 0xb7
jne 0x1000e384
mov esi, esp
push 2
push 0
push 0xffffffffffffffe8
mov edx, dword [ebp - 0x1aa4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp esi, esp
call fcn.10021b10
jmp 0x1000e442
push 0xfe
push 0xff
push str._C_C
lea eax, [ebp - 0x80c]
push eax
call fcn.10022150
add esp, 0x10
mov esi, esp
push 0
lea ecx, [ebp - 0x1448]
push ecx
lea edx, [ebp - 0x80c]
push edx
call fcn.10022340
add esp, 4
push eax
lea eax, [ebp - 0x80c]
push eax
mov ecx, dword [ebp - 0x1aa4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea edx, [ebp - 0x834]
push edx
push 0
mov ecx, 0x10107038
call fcn.1006a88b
push eax
push str._product_name__s___s
lea eax, [ebp - 0x80c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea ecx, [ebp - 0x1448]
push ecx
lea edx, [ebp - 0x80c]
push edx
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea eax, [ebp - 0x80c]
push eax
mov ecx, dword [ebp - 0x1aa4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea edx, [ebp - 0x834]
push edx
mov eax, dword [ebp + 8]
push eax
push str._zip_path___s___zip_path__s
lea ecx, [ebp - 0x80c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea edx, [ebp - 0x1448]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x1aa4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea eax, [ebp - 0x834]
push eax
push str.__product__s
lea ecx, [ebp - 0x80c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea edx, [ebp - 0x1448]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x1aa4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
mov eax, dword [ebp - 0x1aa4]
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp esi, esp
call fcn.10021b10
mov esi, esp
mov ecx, dword [ebp - 0x1aa4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.10021b10
lea edx, [ebp - 0x1aa0]
push edx
lea eax, [ebp - 0x1440]
push eax
lea ecx, [ebp - 0x1ac4]
push ecx
lea edx, [ebp - 0x1ac4]
push edx
call fcn.1000d5eb
add esp, 0x10
push 0
lea ecx, [ebp - 0x1444]
call fcn.1006a88b
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x1ac8], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1450]
call fcn.1006a0d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1444]
call fcn.1006a0d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x838]
call fcn.1006a0d0
mov eax, dword [ebp - 0x1ac8]
jmp 0x1000e5ef
mov dword [ebp - 0x1acc], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1450]
call fcn.1006a0d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1444]
call fcn.1006a0d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x838]
call fcn.1006a0d0
mov eax, dword [ebp - 0x1acc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x1acc
cmp ebp, esp
call fcn.10021b10
mov esp, ebp
pop ebp
ret