Function at 0x100182d0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b433
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x10080060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 2
lea eax, [ebp - 0x2c]
push eax
call fcn.1000a490
add esp, 8
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10002760
push eax
push str._lslogkernel
lea esi, [ebp - 0x68]
call fcn.10040762
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.10018b40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
push ecx
push 0x100185a0
push 0
push 0
push 0
lea ecx, [ebp - 0x68]
call fcn.10002760
push eax
call fcn.1003ef3b
lea ecx, [ebp - 0x88]
call fcn.10018b40
mov byte [ebp - 4], 3
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x4c]
call fcn.10019880
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], edx
jmp 0x1001839c
push 0
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x90]
call fcn.10018e70
lea ecx, [ebp - 0xc8]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10018bd0
push eax
lea ecx, [ebp - 0x90]
call fcn.10035040
movzx edx, al
test edx, edx
je 0x10018549
push 0
push 0
lea ecx, [ebp - 0x90]
call fcn.10018e50
mov ecx, eax
call fcn.10002760
push eax
call fcn.1003f524
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x90]
call fcn.10018e50
mov ecx, eax
call fcn.10002760
push eax
push str.dir:_ls__size:_I64d
call fcn.10050c4d
add esp, 0x10
cmp dword [ebp - 0x98], 0
ja 0x10018431
cmp dword [ebp - 0x9c], 0x1000000
jbe 0x10018544
lea ecx, [ebp - 0x88]
call fcn.10018df0
push 0
push 0
lea edx, [ebp - 0x88]
push edx
push 0x100185a0
push 0
lea ecx, [ebp - 0x90]
call fcn.10018e50
mov ecx, eax
call fcn.10002760
push eax
call fcn.1003ef3b
lea ecx, [ebp - 0x88]
call fcn.10018c00
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], 0
cmp dword [ebp - 0xb0], 4
ja 0x1001848f
jmp 0x10018388
mov eax, dword [ebp - 0xb0]
sub eax, 4
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0xa8]
call fcn.1000cad0
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xd0]
push ecx
lea ecx, [ebp - 0x88]
call fcn.10019880
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], eax
jmp 0x100184fb
push 0
lea ecx, [ebp - 0xd8]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.10018e70
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xac]
jae 0x10018544
lea ecx, [ebp - 0xa8]
call fcn.10018e50
mov ecx, eax
call fcn.10002760
push eax
push str.Test_Clear_LogFile:_ls
call fcn.10050c4d
add esp, 8
lea ecx, [ebp - 0xa8]
call fcn.10018e50
mov ecx, eax
call fcn.10002760
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x100184d8
jmp 0x10018388
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
call fcn.10017bf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.10017bf0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10002740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.10002740
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10052989
mov esp, ebp
pop ebp
ret