Function at 0x60e340
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x68fafb
mov eax, dword fs:[0]
push eax
mov eax, 0x1164
call fcn.00673e40
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x1170]
mov ecx, 0x459
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x6aac14]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
call fcn.0060e240
mov ecx, eax
call fcn.00603950
mov dword [ebp - 0x102c], eax
lea ecx, [ebp - 0x1050]
call fcn.00603500
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1050]
push eax
push 0x6a
call fcn.00605700
add esp, 8
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax + 0x1ac]
test ecx, ecx
je 0x60e3eb
mov edx, dword [ebp - 0x18]
movzx eax, byte [edx + 0x1a1]
test eax, eax
je 0x60e3eb
mov ecx, dword [ebp - 0x18]
add ecx, 0x1ac
mov dword [ebp - 0x1170], ecx
jmp 0x60e3f7
mov edx, dword [ebp - 0x102c]
mov dword [ebp - 0x1170], edx
call fcn.00668b80
push eax
mov eax, dword [ebp - 0x102c]
push eax
mov ecx, dword [ebp - 0x102c]
push ecx
mov edx, dword [ebp - 0x102c]
push edx
lea ecx, [ebp - 0x1050]
call fcn.00603950
push eax
mov eax, dword [ebp - 0x1170]
push eax
push 0x752b
push 0x5a76
push str.3L5vpaqm0Nf4eTc3L5S4ualkLVW46G2n6o6qvy0lKQZofu4ieNa7ODc3L4W_KX7nLVWhg
push 0x17e
call fcn.00655c40
add esp, 0x10
push eax
lea ecx, [ebp - 0x1020]
push ecx
call fcn.0061e1c0
add esp, 0x20
mov dword [ebp - 0x105c], eax
lea eax, [ebp - 0x1020]
push eax
push 0x178c
push 0x4ca1
push str.vahA_26gIRQ4OHv2ehghQ
push 0x77b1
call fcn.00655b80
add esp, 0x10
push eax
call fcn.00654400
add esp, 8
mov dword [ebp - 0x1068], 0
jmp 0x60e49e
mov eax, dword [ebp - 0x1068]
add eax, 1
mov dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x1068]
cmp eax, dword [ebp - 0x105c]
jg 0x60e4d1
mov eax, dword [ebp - 0x1068]
movzx ecx, word [ebp + eax*2 - 0x1020]
cmp ecx, 9
jne 0x60e4cf
xor eax, eax
mov ecx, dword [ebp - 0x1068]
mov word [ebp + ecx*2 - 0x1020], ax
jmp 0x60e48f
mov ecx, dword [ebp - 0x18]
add ecx, 0x88
call fcn.00603950
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, esp
call fcn.00673bc2
test eax, eax
je 0x60e529
mov ecx, dword [ebp - 0x18]
add ecx, 0x88
call fcn.00603950
push eax
push 0x648
push 0x1cb0
push str.vahA_26gIRQ4OHv2Yta4r13uhgqKxnKFWqx8w
push 0x34e6
call fcn.00655b80
add esp, 0x10
push eax
call fcn.00654400
add esp, 8
jmp 0x60e56d
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00673bc2
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x88
call fcn.00603950
push eax
push 0x7e5b
push 0x19b0
push str.vahA_26gIRQ4OHv2YtS5uP1jaIT6q5nLlWrm8lagTqKqG3u1Q4Ouw2ehXhQ
push 0x5a87
call fcn.00655b80
add esp, 0x10
push eax
call fcn.00654400
add esp, 0xc
push 0x2a3d
push 0x3db9
push str.qoV15uOwtr1W_e6hkKJd2A
push 0x3009
call fcn.00655b80
add esp, 0x10
push eax
call fcn.00665dd0
add esp, 4
mov dword [ebp - 0x1074], eax
push 0x1e
push 0
lea eax, [ebp - 0x109c]
push eax
call fcn.00673dc0
add esp, 0xc
mov dword [ebp - 0x1098], 3
lea eax, [ebp - 0x1020]
mov dword [ebp - 0x1094], eax
mov eax, 0x1494
mov word [ebp - 0x108c], ax
mov esi, esp
lea eax, [ebp - 0x109c]
push eax
call dword [ebp - 0x1074]
cmp esi, esp
call fcn.00673bc2
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0x10a8]
push eax
push 0x794b
push str.vahA_26gIRQ4OHv2Z57yea5nIJD6v20jaRc4dj1i64Oquvf
push 0x5382
call fcn.00655b80
add esp, 0xc
push eax
call fcn.00654400
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1050]
call fcn.006038c0
push edx
mov ecx, ebp
push eax
lea edx, [0x60e65c]
call fcn.00673be5
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00673bb3
add esp, 0x1170
cmp ebp, esp
call fcn.00673bc2
mov esp, ebp
pop ebp
ret