Function at 0x1400fa8d0
Capabilities:
Delete file

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0xb20
mov qword [rsp + 0xad0], 0xfffffffffffffffe
mov dword [rsp + 0xac8], 0
lea rcx, [rsp + 0xb0]
call fcn.14000c880
nop
lea rax, [rsp + 0xa98]
mov qword [rsp + 0xaa0], rax
mov rdx, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0xaa0]
call fcn.140002100
mov qword [rsp + 0xad8], rax
mov rdx, qword [rsp + 0xad8]
lea rcx, [rsp + 0xb0]
call fcn.1401d50b0
cmp dword [rsp + 0xb40], 0
je 0x1400fa978
mov eax, dword [rsp + 0xb40]
mov dword [rsp + 0x248], eax
lea rcx, [rsp + 0xb0]
call fcn.1401bf080
lea rcx, [rsp + 0x78]
call fcn.140006ef0
nop
cmp dword [rsp + 0xb48], 0
je 0x1400fa9cc
mov r8d, dword [rsp + 0xb48]
mov edx, dword [rsp + 0x248]
lea rcx, [rsp + 0x410]
call fcn.1401d1810
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x410]
call fcn.1401bee60
nop
lea rcx, [rsp + 0x410]
call fcn.140014ec0
jmp 0x1400faa01
mov edx, dword [rsp + 0x248]
lea rcx, [rsp + 0x750]
call fcn.1401d18c0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x750]
call fcn.1401bee60
nop
lea rcx, [rsp + 0x750]
call fcn.140014ec0
lea rcx, [rsp + 0x20]
call fcn.14008257c
nop
mov dword [rsp + 0xa90], 0
jmp 0x1400faa2a
mov eax, dword [rsp + 0xa90]
add eax, 1
mov dword [rsp + 0xa90], eax
movsxd rbx, dword [rsp + 0xa90]
lea rcx, [rsp + 0x78]
call fcn.140006f70
cmp rbx, rax
jae 0x1400faa78
movsxd rdx, dword [rsp + 0xa90]
lea rcx, [rsp + 0x78]
call fcn.140006fa0
mov rcx, rax
add rcx, 0x1a0
call fcn.14000f8f0
mov rcx, rax
call fcn.1400a99f8
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.14000cdc0
jmp 0x1400faa19
lea rcx, [rsp + 0x48]
call fcn.1400767b0
nop
xor r8d, r8d
mov rdx, qword [rsp + 0xb38]
lea rcx, [rsp + 0x48]
call fcn.1400768b4
test eax, eax
jne 0x1400faafc
lea rdx, [0x14021ded4]
mov rcx, qword [rsp + 0xb30]
call fcn.140002100
mov eax, dword [rsp + 0xac8]
or eax, 1
mov dword [rsp + 0xac8], eax
lea rcx, [rsp + 0x48]
call fcn.14007680c
nop
lea rcx, [rsp + 0x20]
call fcn.14008259c
nop
lea rcx, [rsp + 0x78]
call fcn.140006f40
nop
lea rcx, [rsp + 0xb0]
call fcn.140014ec0
mov rax, qword [rsp + 0xb30]
jmp 0x1400fadfd
lea rcx, [rsp + 0x48]
call fcn.1400764bc
lea rcx, [rsp + 0x3f8]
call fcn.140002de0
nop
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x48]
call fcn.140076d08
nop
lea rdx, [rsp + 0xab0]
lea rcx, [rsp + 0x48]
call fcn.140076b30
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0xae8], rax
lea rdx, [rsp + 0xaa8]
lea rcx, [rsp + 0x48]
call fcn.140076dd4
mov qword [rsp + 0xaf0], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0xaf8], rax
mov rcx, qword [rsp + 0xae8]
call fcn.140001a40
mov r8d, eax
lea rdx, [rsp + 0xa8]
mov rcx, qword [rsp + 0xaf8]
call fcn.140006a00
nop
lea rcx, [rsp + 0xaa8]
call fcn.140001490
nop
lea rcx, [rsp + 0xab0]
call fcn.140001490
mov dword [rsp + 0x3f0], 0
xor eax, eax
cmp eax, 1
je 0x1400fad6d
lea rcx, [rsp + 0x20]
call fcn.140012e60
test rax, rax
jle 0x1400fac8f
lea rcx, [rsp + 0x400]
call fcn.140001a40
mov ebx, eax
lea rcx, [rsp + 0xa8]
call fcn.140001a40
mov r8d, ebx
sub r8d, eax
lea rdx, [rsp + 0xab8]
lea rcx, [rsp + 0x400]
call fcn.140006b20
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0xb08], rax
lea rcx, [rsp + 0x20]
call fcn.140012e60
mov rdx, rax
sub rdx, 1
lea rcx, [rsp + 0x20]
call fcn.14000d010
mov ecx, dword [rax]
mov eax, dword [rsp + 0x3f0]
lea r9d, [rcx + rax + 1]
mov r8, qword [rsp + 0xb08]
mov r8, qword [r8]
lea rdx, [0x14021e168]
lea rcx, [rsp + 0x3f8]
call fcn.140002c70
nop
lea rcx, [rsp + 0xab8]
call fcn.140001490
jmp 0x1400fad17
lea rcx, [rsp + 0x400]
call fcn.140001a40
mov ebx, eax
lea rcx, [rsp + 0xa8]
call fcn.140001a40
mov r8d, ebx
sub r8d, eax
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x400]
call fcn.140006b20
mov qword [rsp + 0xb10], rax
mov rax, qword [rsp + 0xb10]
mov qword [rsp + 0xb18], rax
mov r9d, dword [rsp + 0x3f0]
add r9d, 1
mov r8, qword [rsp + 0xb18]
mov r8, qword [r8]
lea rdx, [0x14021e390]
lea rcx, [rsp + 0x3f8]
call fcn.140002c70
nop
lea rcx, [rsp + 0xac0]
call fcn.140001490
lea rcx, [rsp + 0x3f8]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400768b4
test eax, eax
jne 0x1400fad3a
jmp 0x1400fad6d
lea rcx, [rsp + 0x3f8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 1
jne 0x1400fad57
jmp 0x1400fad6d
mov eax, dword [rsp + 0x3f0]
add eax, 1
mov dword [rsp + 0x3f0], eax
jmp 0x1400fabc7
lea rcx, [rsp + 0x48]
call fcn.1400763e8
lea rdx, [rsp + 0x3f8]
mov rcx, qword [rsp + 0xb30]
call fcn.140001430
mov eax, dword [rsp + 0xac8]
or eax, 1
mov dword [rsp + 0xac8], eax
lea rcx, [rsp + 0xa8]
call fcn.140001490
nop
lea rcx, [rsp + 0x400]
call fcn.140001490
nop
lea rcx, [rsp + 0x3f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x48]
call fcn.14007680c
nop
lea rcx, [rsp + 0x20]
call fcn.14008259c
nop
lea rcx, [rsp + 0x78]
call fcn.140006f40
nop
lea rcx, [rsp + 0xb0]
call fcn.140014ec0
mov rax, qword [rsp + 0xb30]
add rsp, 0xb20
pop rbx
ret