Function at 0x11f05f30
Capabilities:
Delete file
Get file size
Move file

Disassembly:
push 0xffffffffffffffff
push 0x11fc52f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
xor ebx, ebx
push edi
mov dword [0x12135738], ebx
call ebp
mov esi, dword [esp + 0x24]
mov dword [0x12135740], eax
cmp esi, ebx
je 0x11f06160
cmp esi, 0xffffffff
je 0x11f06160
mov eax, dword [esp + 0x28]
mov edi, 1
cmp eax, ebx
je 0x11f05f8e
push eax
call fcn.11e67d05
add esp, 4
test eax, eax
jne 0x11f05f90
xor edi, edi
cmp dword [0x12135744], ebx
jne 0x11f05fb1
mov dword [0x12135738], 2
mov dword [0x1213573c], 0x23e
jmp 0x11f06174
push ebx
push esi
call fcn.11ee6b00
add esp, 8
cmp eax, ebx
je 0x11f05fd4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
lea eax, [esp + 0x10]
mov dword [esp + 0x10], ebx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, dword [esp + 0x34]
xor ecx, ecx
cmp edx, ebx
setne cl
mov ebp, ecx
cmp ebp, ebx
je 0x11f06001
cmp dword [esp + 0x10], ebx
jne 0x11f06001
cmp eax, ebx
jne 0x11f06001
xor ebp, ebp
mov edx, dword [0x11fd6250]
mov esi, 1
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], ebx
cmp edi, ebx
mov ebx, dword [esp + 0x40]
je 0x11f06060
mov eax, dword [0x12135c78]
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x34]
push eax
push ecx
push 0x1204f154
push edx
call fcn.11f307e0
add esp, 0x10
test eax, eax
je 0x11f060c3
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
push ebx
push 0xffffffffffffffff
push 0
push eax
push ecx
call fcn.11ee3e00
add esp, 0x14
test eax, eax
je 0x11f060e9
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
push ebx
push eax
push ecx
push edx
call fcn.11f05700
add esp, 0x14
test eax, eax
jne 0x11f0610a
xor esi, esi
test edi, edi
je 0x11f0613a
test ebp, ebp
je 0x11f060a1
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x34]
push eax
jmp 0x11f06135
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x11f0613a
mov edx, dword [esp + 0x34]
push edx
call fcn.11f30600
add esp, 4
jmp 0x11f0613a
mov dword [0x12135738], 0x24
mov dword [0x1213573c], 0x25d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x12135740], eax
mov esi, 1
jmp 0x11f0613a
mov dword [0x12135738], 0x28
mov dword [0x1213573c], 0x265
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x12135740], eax
jmp 0x11f0613a
test edi, edi
mov esi, 1
je 0x11f0613a
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
push 3
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x11f0613a
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x34]
or esi, 0xffffffff
push edx
call fcn.11e7f410
lea ecx, [esp + 0x34]
mov dword [esp + 0x1c], 0xffffffff
call fcn.11e7f280
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
mov dword [0x12135738], 1
mov dword [0x1213573c], 0x233
call ebp
mov ecx, dword [esp + 0x14]
pop edi
pop esi
mov dword [0x12135740], eax
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret