Function at 0x6c10e210
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, edx
push edi
mov edi, ecx
push esi
push ebx
mov ebx, eax
sub esp, 0x4c
test byte [0x6c1450b0], 8
jne 0x6c10e350
mov dword [esp], 0
call fcn.6c12c120
cmp dword [esp + 0x60], 1
mov dword [esp], edi
mov eax, 1
mov edx, dword [esp + 0x64]
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
adc eax, 0
mov dword [esp + 4], 0x40000000
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
call dword [sym.imp.kernel32.dll_CreateFileW]
sub esp, 0x1c
mov esi, eax
cmp eax, 0xffffffff
je 0x6c10e33c
mov ecx, dword [esp + 0x68]
mov edx, ebp
mov eax, ebx
call fcn.6c10d570
mov ebp, eax
test eax, eax
jne 0x6c10e318
mov eax, dword [ebx + 0x48]
cmp eax, 0xffffffff
jne 0x6c10e300
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebx + 0x40]
sub esp, 4
test byte [eax + 0x13], 0x10
je 0x6c10e2ef
mov dword [esp + 0x38], ebp
xor eax, eax
test ebp, ebp
je 0x6c10e4b8
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x10], 8
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x64
mov eax, dword [ebx + 0x14]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.6c13eb60
test ebp, ebp
je 0x6c10e330
add esp, 0x4c
mov eax, ebp
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], eax
call dword [sym.imp.ws2_32.dll_closesocket]
mov dword [ebx + 0x48], 0xffffffff
sub esp, 4
jmp 0x6c10e2a1
lea edx, [esp + 0x34]
mov eax, ebx
call fcn.6c10ad10
test eax, eax
jne 0x6c10e398
xor ebp, ebp
jmp 0x6c10e299
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_DeleteFileW]
sub esp, 4
add esp, 0x4c
xor ebp, ebp
pop ebx
mov eax, ebp
pop esi
pop edi
pop ebp
ret
mov eax, ecx
call fcn.6c109ca0
mov esi, eax
mov eax, ebp
call fcn.6c109ca0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.lpszRemoteFile__s__lpszNewFile__s__n
mov dword [esp + 8], str.FTP_FtpGetFileW
mov dword [esp + 4], 0x6c1450b0
mov dword [esp], 3
call fcn.6c10a080
jmp 0x6c10e22a
mov eax, dword [esp + 0x34]
mov dword [esp + 0x28], eax
test byte [0x6c1450b0], 8
jne 0x6c10e4d8
mov dword [esp + 4], 1
mov dword [esp], 0x2000
call dword [sym.imp.ucrtbase.dll_calloc]
mov ebp, eax
test eax, eax
je 0x6c10e531
mov dword [esp + 0x2c], ebx
mov ebx, dword [esp + 0x28]
jmp 0x6c10e40c
test eax, eax
je 0x6c10e4c8
lea ecx, [esp + 0x38]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x2000
mov dword [esp + 4], ebp
mov dword [esp], ebx
call fcn.6c130c10
cmp eax, 0xffffffff
jne 0x6c10e3e0
mov ebx, dword [esp + 0x2c]
test byte [0x6c1450b0], 8
jne 0x6c10e508
mov dword [esp], ebp
call dword [sym.imp.ucrtbase.dll_free]
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [sym.imp.ws2_32.dll_closesocket]
mov eax, ebx
sub esp, 4
mov edx, dword [esp + 0x6c]
call fcn.6c10aab0
test eax, eax
je 0x6c10e327
mov ebp, 1
cmp eax, 0xe2
je 0x6c10e299
mov edx, 0x2efe
cmp eax, 0x1aa
je 0x6c10e4a4
mov edx, 0x2eef
cmp eax, 0x212
je 0x6c10e4a4
cmp eax, 0x1a9
mov edx, 0x2efd
mov eax, 0x2ee3
cmovne edx, eax
mov dword [esp], edx
xor ebp, ebp
call fcn.6c12c120
jmp 0x6c10e299
call fcn.6c12dcd0
jmp 0x6c10e2c4
mov ebx, dword [esp + 0x2c]
jmp 0x6c10e43e
mov dword [esp + 0xc], 0x6c147b7c
mov dword [esp + 8], str.FTP_RetrieveFileData
mov dword [esp + 4], 0x6c1450b0
mov dword [esp], 3
call fcn.6c10a080
jmp 0x6c10e3ad
mov dword [esp + 0xc], str.Data_transfer_complete_n
mov dword [esp + 8], str.FTP_RetrieveFileData
mov dword [esp + 4], 0x6c1450b0
mov dword [esp], 3
call fcn.6c10a080
jmp 0x6c10e43e
mov dword [esp], 0xe
call fcn.6c12c120
jmp 0x6c10e447