Function at 0x1006e0a7
Capabilities:
Delete file

Disassembly:
push 0x38
mov eax, 0x1011418d
call fcn.100604ea
mov esi, edx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], ecx
call fcn.10061a4b
mov ecx, eax
call fcn.100619d3
mov ebx, dword [ebp + 0x20]
test eax, eax
jne 0x1006e0d6
test ebx, ebx
je 0x1006e2a6
xor edi, edi
test ebx, ebx
jne 0x1006e0eb
call fcn.10008258
mov edi, eax
test edi, edi
je 0x1006e2a6
cmp dword [ebp + 0x10], 0
jne 0x1006e10b
push 0
push 0
push 2
push 0
push 1
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
jmp 0x1006e146
push esi
lea ecx, [ebp - 0x10]
call fcn.100026e3
and dword [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.1006797f
push ecx
push 0
push 2
push ecx
mov ecx, dword [ebp - 0x10]
mov edx, 0x40000000
push 1
call fcn.10008224
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.10002a86
cmp esi, 0xffffffff
jne 0x1006e157
mov ecx, edi
call fcn.10008209
jmp 0x1006e2a6
cmp dword [ebp + 0x10], 0
je 0x1006e173
push 0xf
pop ecx
call fcn.10008812
test eax, eax
je 0x1006e173
xor ecx, ecx
push ecx
push ecx
push ecx
push esi
call eax
jmp 0x1006e17f
xor eax, eax
push eax
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x1006e19d
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x18]
test ebx, ebx
jne 0x1006e204
test eax, eax
jg 0x1006e1ad
mov eax, 0x493e0
mov ebx, dword [ebp + 0x14]
test ebx, ebx
jg 0x1006e1b9
mov ebx, 0x4e20
push dword [ebp + 0x1c]
push ecx
push dword [ebp + 0xc]
push ecx
push ecx
lea ecx, [ebp - 0x44]
push ecx
push 0x1006e3b0
lea ecx, [ebp - 0x14]
push ecx
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.Mozilla_4.0__compatible__MSIE_8.0__Windows_NT_6.1_
call fcn.100026e3
push ecx
mov ecx, esp
mov dword [ebp - 4], 1
push dword [ebp - 0x18]
call fcn.100026e3
or dword [ebp - 4], 0xffffffff
mov edx, ebx
mov ecx, edi
call fcn.1006e421
add esp, 0x2c
jmp 0x1006e263
mov dword [ebp - 0x1c], eax
test eax, eax
jg 0x1006e212
mov dword [ebp - 0x1c], 0x493e0
mov ebx, dword [ebp + 0x14]
test ebx, ebx
jg 0x1006e21e
mov ebx, 0x4e20
push dword [ebp + 0xc]
lea eax, [ebp - 0x44]
push ecx
push ecx
push eax
push 0x1006e3b0
lea eax, [ebp - 0x14]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.Mozilla_4.0__compatible__MSIE_8.0__Windows_NT_6.1_
call fcn.100026e3
push ecx
mov ecx, esp
mov dword [ebp - 4], 2
push dword [ebp - 0x18]
call fcn.100026e3
mov edx, dword [ebp - 0x1c]
mov ecx, ebx
or dword [ebp - 4], 0xffffffff
call fcn.10015d40
add esp, 0x20
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x1006e277
mov ecx, edi
call fcn.10008209
mov eax, dword [ebp - 0x14]
add eax, 0xffffff38
cmp eax, 0x63
ja 0x1006e28d
test ebx, ebx
je 0x1006e28d
mov eax, dword [ebp - 0x3c]
jmp 0x1006e2a8
cmp dword [ebp + 0x10], 0
jne 0x1006e29e
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1006e2a6
mov ecx, dword [ebp - 0x20]
call fcn.100081c1
xor eax, eax
call fcn.100604b3
ret