Function at 0x1006ceb3
Capabilities:
Delete file

Disassembly:
mov eax, 0x100beefe
call fcn.100a0664
sub esp, 0x38
and dword [ebp - 4], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push dword [0x1010ca34]
mov ebx, ecx
lea ecx, [ebp - 0x14]
call fcn.10028018
cmp byte [0x10110001], 0
mov byte [ebp - 4], 1
je 0x1006cf09
cmp dword [ebp - 0x14], 0
mov bl, byte [0x10110002]
je 0x1006cf02
cmp dword [ebp - 0x14], 0xffffffff
je 0x1006cf02
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov al, bl
jmp 0x1006d1ca
call fcn.100a5850
mov dword [ebp - 0x28], eax
push 4
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1003b386
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 2
call fcn.10043106
pop ecx
push dword [ebp - 0x18]
mov byte [ebp - 4], 3
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x1006cf57
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], esp
mov ecx, esp
push eax
call fcn.100033f5
call fcn.10029e5b
pop ecx
mov edi, str.writetest
push edi
lea ecx, [ebp - 0x18]
call fcn.1000c121
call fcn.1009e3fc
push str.EMPTY
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.100057f4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax - 0xc]
mov edx, dword [esi]
push ecx
push eax
push dword [ebp - 0x18]
mov ecx, esi
mov byte [ebp - 4], 4
call dword [edx + 4]
test eax, eax
je 0x1006cfc9
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], esp
mov ecx, esp
push eax
call fcn.100033f5
lea eax, [ebp - 0x24]
push eax
call fcn.10054478
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.100046db
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.10001ccd
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1c]
call fcn.1000272b
test eax, eax
je 0x1006d084
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1010dc04
lea ecx, [ebp - 0x24]
mov esi, eax
call fcn.1005d077
push dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push dword [ebp - 0x1c]
mov byte [ebp - 4], 6
push esi
push str.Cache_write_test_failed._Err:__d__Expected:___s__Actual:___s_
push eax
call fcn.1000c6e6
mov ecx, dword [ebp + 8]
add esp, 0x14
test ecx, ecx
je 0x1006d01d
lea eax, [ebp - 0x24]
push eax
call fcn.100046db
push 1
push ecx
lea eax, [ebp - 0x24]
mov dword [ebp + 8], esp
mov ecx, esp
push eax
call fcn.100033f5
mov ecx, ebx
call fcn.1006aba1
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
mov byte [0x10110002], 0
call fcn.10001ccd
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.10001ccd
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.10001ccd
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.10001ccd
cmp dword [ebp - 0x14], 0
je 0x1006d07d
cmp dword [ebp - 0x14], 0xffffffff
je 0x1006d07d
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor al, al
jmp 0x1006d1ca
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.10001ccd
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.10001ccd
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
mov esi, 0x100c503c
push esi
call fcn.100057f4
push ecx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 7
call fcn.100033f5
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push edi
mov byte [ebp - 4], 8
call fcn.100057f4
mov byte [ebp - 4], 2
call fcn.100437c0
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push esi
call fcn.100057f4
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
mov byte [ebp - 4], 9
call fcn.100057f4
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push edi
mov byte [ebp - 4], 0xa
call fcn.100057f4
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 2
call fcn.10043464
add esp, 0x10
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
call fcn.1000272b
test eax, eax
je 0x1006d16f
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x1006d147
push str.Registry_write_test_failed
call fcn.100049c6
push 1
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.Registry_write_test_failed
call fcn.100057f4
mov ecx, ebx
call fcn.1006aba1
mov ecx, dword [ebp - 0x24]
mov byte [0x10110002], 0
jmp 0x1006d055
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push esi
call fcn.100057f4
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push edi
mov byte [ebp - 4], 0xc
call fcn.100057f4
mov byte [ebp - 4], 0xb
call fcn.10043af4
pop ecx
pop ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.10001ccd
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.10001ccd
cmp dword [ebp - 0x14], 0
je 0x1006d1c1
cmp dword [ebp - 0x14], 0xffffffff
je 0x1006d1c1
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [0x10110002], 1
mov al, 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4