Function at 0x18009a1c0
Capabilities:
Delete directory

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 0x38], rcx
mov rax, qword [0x1800eb0a8]
xor rax, rbp
mov qword [rbp - 8], rax
mov ecx, dword [0x18184c944]
mov eax, dword [0x18184c940]
mov edx, ecx
sub edx, 0x1468d88e
sub edx, 1
add edx, 0x1468d88e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [rbp - 0x2a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [rbp - 0x29], al
mov dword [rbp - 0x30], 0x1cedb769
mov eax, dword [rbp - 0x30]
mov dword [rbp - 0x3c], eax
sub eax, 0x89834f7e
je 0x18009a5e2
jmp 0x18009a233
mov eax, dword [rbp - 0x3c]
sub eax, 0x8c57ef23
je 0x18009a7e4
jmp 0x18009a246
mov eax, dword [rbp - 0x3c]
sub eax, 0xa05605df
je 0x18009a6ef
jmp 0x18009a259
mov eax, dword [rbp - 0x3c]
sub eax, 0xa33dc000
je 0x18009a8bb
jmp 0x18009a26c
mov eax, dword [rbp - 0x3c]
sub eax, 0xa434f0c7
je 0x18009a83a
jmp 0x18009a27f
mov eax, dword [rbp - 0x3c]
sub eax, 0xa558a822
je 0x18009a6b2
jmp 0x18009a292
mov eax, dword [rbp - 0x3c]
sub eax, 0xa6519357
je 0x18009a92d
jmp 0x18009a2a5
mov eax, dword [rbp - 0x3c]
sub eax, 0xb1200620
je 0x18009a533
jmp 0x18009a2b8
mov eax, dword [rbp - 0x3c]
sub eax, 0xb2c6364d
je 0x18009a949
jmp 0x18009a2cb
mov eax, dword [rbp - 0x3c]
sub eax, 0xb8780081
je 0x18009a4dd
jmp 0x18009a2de
mov eax, dword [rbp - 0x3c]
sub eax, 0xc391ca70
je 0x18009a426
jmp 0x18009a2f1
mov eax, dword [rbp - 0x3c]
sub eax, 0xc72adb99
je 0x18009a8fa
jmp 0x18009a304
mov eax, dword [rbp - 0x3c]
sub eax, 0xd1aca8b4
je 0x18009a7f0
jmp 0x18009a317
mov eax, dword [rbp - 0x3c]
sub eax, 0xdd880a3d
je 0x18009a8c7
jmp 0x18009a32a
mov eax, dword [rbp - 0x3c]
sub eax, 0xe16c2cff
je 0x18009a6cd
jmp 0x18009a33d
mov eax, dword [rbp - 0x3c]
sub eax, 0xf1be7f75
je 0x18009a663
jmp 0x18009a350
mov eax, dword [rbp - 0x3c]
sub eax, 0xfc8110cd
je 0x18009a5ba
jmp 0x18009a363
mov eax, dword [rbp - 0x3c]
sub eax, 0x4265377
je 0x18009a5c6
jmp 0x18009a376
mov eax, dword [rbp - 0x3c]
sub eax, 0xe829a42
je 0x18009a93d
jmp 0x18009a389
mov eax, dword [rbp - 0x3c]
sub eax, 0x1910fdc1
je 0x18009a6e3
jmp 0x18009a39c
mov eax, dword [rbp - 0x3c]
sub eax, 0x1cedb769
je 0x18009a400
jmp 0x18009a3af
mov eax, dword [rbp - 0x3c]
sub eax, 0x325bd2de
je 0x18009a8dc
jmp 0x18009a3c2
mov eax, dword [rbp - 0x3c]
sub eax, 0x412117da
je 0x18009a76b
jmp 0x18009a3d5
mov eax, dword [rbp - 0x3c]
sub eax, 0x4482ba3d
je 0x18009a97f
jmp 0x18009a3e8
mov eax, dword [rbp - 0x3c]
sub eax, 0x6d0a5200
je 0x18009a4e9
jmp 0x18009a3fb
jmp 0x18009a986
mov al, byte [rbp - 0x2a]
mov cl, byte [rbp - 0x29]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc72adb99
mov ecx, 0xc391ca70
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov rcx, qword [rbp - 0x38]
mov eax, 0x10
mov qword [rbp - 0x48], rax
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov rdx, rsp
mov qword [rbp - 0x28], rdx
call fcn.1800e0a50
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov qword [rax], rcx
mov ecx, dword [0x18184c944]
mov eax, dword [0x18184c940]
mov edx, ecx
sub edx, 0xc7a51bc4
sub edx, 1
add edx, 0xc7a51bc4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc72adb99
mov ecx, 0xb8780081
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov dword [rbp - 0x30], 0x6d0a5200
jmp 0x18009a986
mov eax, dword [0x18184c944]
mov ecx, dword [0x18184c940]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa6519357
mov ecx, 0xb1200620
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov qword [rbp - 0x18], rax
mov ecx, dword [0x18184c944]
mov eax, dword [0x18184c940]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa6519357
mov ecx, 0xfc8110cd
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov dword [rbp - 0x30], 0x4265377
jmp 0x18009a986
mov rax, qword [rbp - 0x18]
cmp rax, 0
sete al
and al, 1
mov byte [rbp - 0xd], al
mov dword [rbp - 0x30], 0x89834f7e
jmp 0x18009a986
mov ecx, dword [0x18184c944]
mov eax, dword [0x18184c940]
mov edx, ecx
add edx, 0x1a6d2b32
sub edx, 1
sub edx, 0x1a6d2b32
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe829a42
mov ecx, 0xf1be7f75
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov eax, dword [0x18184c944]
mov ecx, dword [0x18184c940]
mov edx, eax
add edx, 0xd5a9af68
sub edx, 1
sub edx, 0xd5a9af68
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe829a42
mov ecx, 0xa558a822
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov dl, byte [rbp - 0xd]
mov eax, 0xa05605df
mov ecx, 0xe16c2cff
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov rax, qword [rbp - 0x28]
mov dword [rax], 0xffffffff
mov dword [rbp - 0x30], 0x1910fdc1
jmp 0x18009a986
mov dword [rbp - 0x30], 0xdd880a3d
jmp 0x18009a986
mov ecx, dword [0x18184c944]
mov eax, dword [0x18184c940]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb2c6364d
mov ecx, 0x412117da
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
add rsp, 0x20
mov edx, eax
mov ecx, 0xffffffff
xor eax, eax
cmp edx, 1
cmove ecx, eax
mov rax, qword [rbp - 0x28]
mov dword [rax], ecx
mov eax, dword [0x18184c944]
mov ecx, dword [0x18184c940]
mov edx, eax
add edx, 0x3a5ff288
sub edx, 1
sub edx, 0x3a5ff288
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2c6364d
mov ecx, 0x8c57ef23
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov dword [rbp - 0x30], 0xd1aca8b4
jmp 0x18009a986
mov eax, dword [0x18184c944]
mov ecx, dword [0x18184c940]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4482ba3d
mov ecx, 0xa434f0c7
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov ecx, dword [0x18184c944]
mov eax, dword [0x18184c940]
mov edx, ecx
add edx, 0x804e1d26
sub edx, 1
sub edx, 0x804e1d26
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4482ba3d
mov ecx, 0xa33dc000
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x18009a986
mov dword [rbp - 0x30], 0xdd880a3d
jmp 0x18009a986
mov rax, qword [rbp - 0x28]
mov eax, dword [rax]
mov dword [rbp - 0xc], eax
mov dword [rbp - 0x30], 0x325bd2de
jmp 0x18009a986
mov eax, dword [rbp - 0xc]
mov dword [rbp - 0x4c], eax
mov rcx, qword [rbp - 8]
xor rcx, rbp
sub rsp, 0x20
call fcn.1800e09d0
mov eax, dword [rbp - 0x4c]
mov rsp, rbp
pop rbp
ret
mov rcx, qword [rbp - 0x38]
mov eax, 0x10
mov qword [rbp - 0x58], rax
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x58]
call fcn.1800e0a50
sub rsp, rax
mov rax, rsp
mov qword [rax], rcx
mov dword [rbp - 0x30], 0xc391ca70
jmp 0x18009a986
mov rax, qword [rbp - 0x20]
mov dword [rbp - 0x30], 0xb1200620
jmp 0x18009a986
mov dword [rbp - 0x30], 0xf1be7f75
jmp 0x18009a986
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
add rsp, 0x20
mov edx, eax
mov ecx, 0xffffffff
xor eax, eax
cmp edx, 1
cmove ecx, eax
mov rax, qword [rbp - 0x28]
mov dword [rax], ecx
mov dword [rbp - 0x30], 0x412117da
jmp 0x18009a986
mov dword [rbp - 0x30], 0xa434f0c7
jmp 0x18009a21d