Function at 0x10018688
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x1001885a
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x28], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x64]
movzx eax, byte [eax]
test eax, eax
je 0x10018715
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 4]
mov dword [eax], 0
jmp 0x100186f3
mov eax, dword [ebp - 4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, dword [ebp - 4]
cmp dword [eax], 2
jge 0x10018710
mov eax, dword [ebp - 4]
push dword [eax]
mov ecx, dword [ebp - 0x38]
call fcn.1000c5cf
mov dword [eax], 5
jmp 0x100186e8
jmp 0x10018858
mov dword [ebp - 0x18], 0x34e1
mov dword [ebp - 0x58], str.yfgwpj_mmtqbadhs_xfgqkhf_xnuvof_jljnhca_gmthha_lfwg_vsgm_oclsrxggg_aopixm_nmysjh_rcbi_pcthq_umcymqnjh
cmp dword [ebp - 0x18], 0x3798
jle 0x1001879b
and dword [ebp - 0x14], 0
jmp 0x10018739
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x7086
jge 0x1001879b
and dword [ebp - 0x10], 0
jmp 0x1001874f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2f9a
jge 0x10018799
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
sar eax, cl
cdq
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x88]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0x88]
call fcn.1000c2ee
jmp 0x10018748
jmp 0x10018732
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x18], 0x318b
jge 0x100187b3
push dword [ebp - 0x58]
call fcn.1004139c
pop ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 0x7213
mov dword [ebp - 0x44], str.etccnejb_gob_okcyxl_mykk_jluh_jyxxweok_fxuicj
cmp dword [ebp - 0x1c], 0x744b
jle 0x10018827
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
and dword [ebp - 8], 0
jmp 0x100187e5
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x6aa5
jge 0x10018827
and dword [ebp - 0xc], 0
jmp 0x100187fb
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xbf8
jge 0x10018825
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
shl eax, cl
cdq
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x100187f4
jmp 0x100187de
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
movzx eax, word [eax]
push eax
mov ecx, dword [ebp - 0x3c]
call fcn.1000c4b5
cmp dword [ebp - 0x1c], 0x7155
jge 0x10018858
mov edx, dword [ebp - 0x44]
mov ecx, 0x1006cbb8
call fcn.1000e58f
jmp 0x1001887b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x4c], eax
push 0x1fad
push dword [ebp - 0x4c]
push 1
push dword [ebp - 0x54]
call fcn.10012c48
add esp, 0x10
mov esp, ebp
pop ebp
ret