Function at 0x1400141b0
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [rcx + 0x10]
mov r14, rcx
mov r8, qword [rcx + 8]
mov edx, 0x104
mov rcx, qword [rcx]
mov r9d, dword [rax]
mov r8, qword [r8]
mov rcx, qword [rcx]
call fcn.1400a8478
movabs rax, 0xd6a5629ffb6b5f15
movabs rsi, 0xa5b89f0b6b8c1503
mov qword [rbp - 0x40], rax
movabs r15, 0x7c7a43d5f57f66fd
movabs rax, 0x1e7cb44310f59166
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x38], rax
movabs r12, 0x7f94d6a806b4fd82
movabs rax, 0xfd7fced6d106acfd
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x30], rax
movabs r13, 0xe66fa662a0d8dcc4
movabs rax, 0x6fe662a6d8a0c4dc
mov qword [rbp - 0x10], r12
mov qword [rbp - 0x28], rax
xor ecx, ecx
mov qword [rbp - 8], r13
nop word [rax + rax]
movzx eax, word [rbp + rcx*2 - 0x40]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x40], ax
and edi, 3
jne 0x1400142fe
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3e], ax
and edx, 3
jne 0x140014360
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, 3
jne 0x140014389
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jne 0x1400143b3
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x1400143c1
cmp rcx, 4
jne 0x14001428e
mov eax, dword [rbp - 0x36]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x36], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x3e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x3e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x3c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
movzx eax, word [rbp + rcx*2 - 0x3a]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
jmp 0x1400143eb
cmp rcx, 3
jne 0x1400142b1
mov eax, dword [rbp - 0x36]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, ecx
jmp 0x14001439b
cmp rcx, 2
jne 0x1400142d5
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jmp 0x1400143c1
cmp rcx, 1
jne 0x1400143c1
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
test rdi, rdi
jne 0x1400143de
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x1400143eb
test rcx, rcx
jne 0x1400143eb
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x36]
rol ax, 8
mov word [rbp + rcx*2 - 0x36], ax
test rdx, rdx
jne 0x140014408
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140014416
cmp rcx, 0xffffffffffffffff
jne 0x140014416
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x34]
rol ax, 8
mov word [rbp + rcx*2 - 0x34], ax
test r8, r8
jne 0x140014433
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140014441
cmp rcx, 0xfffffffffffffffe
jne 0x140014441
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x32]
rol ax, 8
mov word [rbp + rcx*2 - 0x32], ax
test r9, r9
jne 0x14001445e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14001446c
cmp rcx, 0xfffffffffffffffd
jne 0x14001446c
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
add rcx, 8
cmp rcx, 8
jb 0x140014270
movdqa xmm0, xmmword [rbp - 0x20]
xor ecx, ecx
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
nop dword [rax + rax]
movzx eax, word [rbp + rcx*2 - 0x30]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x30], ax
and edi, 3
jne 0x14001451e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2e], ax
and edx, 3
jne 0x140014580
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
and r8d, 3
jne 0x1400145a9
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
and r9d, 3
jne 0x1400145d3
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x1400145e1
cmp rcx, 4
jne 0x1400144ae
mov eax, dword [rbp - 0x26]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x26], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x2e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x2e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x2c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
movzx eax, word [rbp + rcx*2 - 0x2a]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
movzx eax, word [rbp + rcx*2 - 0x28]
rol ax, 8
mov word [rbp + rcx*2 - 0x28], ax
jmp 0x14001460b
cmp rcx, 3
jne 0x1400144d1
mov eax, dword [rbp - 0x26]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x2c]
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
and r8d, ecx
jmp 0x1400145bb
cmp rcx, 2
jne 0x1400144f5
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x2a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
and r9d, 3
jmp 0x1400145e1
cmp rcx, 1
jne 0x1400145e1
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x28]
rol ax, 8
mov word [rbp + rcx*2 - 0x28], ax
test rdi, rdi
jne 0x1400145fe
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14001460b
test rcx, rcx
jne 0x14001460b
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x26]
rol ax, 8
mov word [rbp + rcx*2 - 0x26], ax
test rdx, rdx
jne 0x140014628
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140014636
cmp rcx, 0xffffffffffffffff
jne 0x140014636
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x24]
rol ax, 8
mov word [rbp + rcx*2 - 0x24], ax
test r8, r8
jne 0x140014653
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140014661
cmp rcx, 0xfffffffffffffffe
jne 0x140014661
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x22]
rol ax, 8
mov word [rbp + rcx*2 - 0x22], ax
test r9, r9
jne 0x14001467e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14001468c
cmp rcx, 0xfffffffffffffffd
jne 0x14001468c
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
add rcx, 8
cmp rcx, 8
jb 0x140014490
movdqa xmm0, xmmword [rbp - 0x30]
lea r8, [rbp - 0x40]
mov rcx, qword [r14]
mov r9d, 0xc
pxor xmm0, xmmword [rbp - 0x10]
mov edx, 0x104
movdqa xmmword [rbp - 0x30], xmm0
mov rcx, qword [rcx]
call fcn.1400a8378
mov rax, qword [r14 + 0x10]
mov edx, 0x104
mov r8, qword [r14 + 8]
mov rcx, qword [r14 + 0x18]
mov r9d, dword [rax]
mov r8, qword [r8]
mov rcx, qword [rcx]
call fcn.1400a8478
movabs rax, 0xd6a5629ffb6b5f15
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x40], rax
xor ecx, ecx
movabs rax, 0x4b7cb44310f59166
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x38], rax
movabs rax, 0xfd7fced6d106acfd
mov qword [rbp - 0x30], rax
movabs rax, 0x6fe662a6d8a0c4dc
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r13
nop dword [rax]
movzx eax, word [rbp + rcx*2 - 0x40]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x40], ax
and edi, 3
jne 0x1400147be
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3e], ax
and edx, 3
jne 0x140014820
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, 3
jne 0x140014849
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jne 0x140014873
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140014881
cmp rcx, 4
jne 0x14001474e
mov eax, dword [rbp - 0x36]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x36], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x3e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x3e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x3c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
movzx eax, word [rbp + rcx*2 - 0x3a]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
jmp 0x1400148ab
cmp rcx, 3
jne 0x140014771
mov eax, dword [rbp - 0x36]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, ecx
jmp 0x14001485b
cmp rcx, 2
jne 0x140014795
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jmp 0x140014881
cmp rcx, 1
jne 0x140014881
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
test rdi, rdi
jne 0x14001489e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x1400148ab
test rcx, rcx
jne 0x1400148ab
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x36]
rol ax, 8
mov word [rbp + rcx*2 - 0x36], ax
test rdx, rdx
jne 0x1400148c8
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x1400148d6
cmp rcx, 0xffffffffffffffff
jne 0x1400148d6
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x34]
rol ax, 8
mov word [rbp + rcx*2 - 0x34], ax
test r8, r8
jne 0x1400148f3
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140014901
cmp rcx, 0xfffffffffffffffe
jne 0x140014901
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x32]
rol ax, 8
mov word [rbp + rcx*2 - 0x32], ax
test r9, r9
jne 0x14001491e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14001492c
cmp rcx, 0xfffffffffffffffd
jne 0x14001492c
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
add rcx, 8
cmp rcx, 8
jb 0x140014730
movdqa xmm0, xmmword [rbp - 0x20]
xor eax, eax
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
nop dword [rax + rax]
movzx ecx, word [rbp + rax*2 - 0x30]
mov rdi, rax
rol cx, 8
mov word [rbp + rax*2 - 0x30], cx
and edi, 3
jne 0x1400149de
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
movzx ecx, word [rbp + rax*2 - 0x2e]
lea rdx, [rax + 1]
rol cx, 8
mov word [rbp + rax*2 - 0x2e], cx
and edx, 3
jne 0x140014a40
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
movzx ecx, word [rbp + rax*2 - 0x2c]
lea r8, [rax - 2]
rol cx, 8
mov word [rbp + rax*2 - 0x2c], cx
and r8d, 3
jne 0x140014a69
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
movzx ecx, word [rbp + rax*2 - 0x2a]
lea r9, [rax - 1]
rol cx, 8
mov word [rbp + rax*2 - 0x2a], cx
and r9d, 3
jne 0x140014a93
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014aa1
cmp rax, 4
jne 0x14001496e
mov ecx, dword [rbp - 0x26]
lea rdx, [rax + 1]
bswap ecx
mov dword [rbp - 0x26], ecx
lea r8, [rax - 2]
movzx ecx, word [rbp + rax*2 - 0x2e]
lea r9, [rax - 1]
rol cx, 8
and edx, 3
mov word [rbp + rax*2 - 0x2e], cx
and r8d, 3
movzx ecx, word [rbp + rax*2 - 0x2c]
and r9d, 3
rol cx, 8
mov word [rbp + rax*2 - 0x2c], cx
movzx ecx, word [rbp + rax*2 - 0x2a]
rol cx, 8
mov word [rbp + rax*2 - 0x2a], cx
movzx ecx, word [rbp + rax*2 - 0x28]
rol cx, 8
mov word [rbp + rax*2 - 0x28], cx
jmp 0x140014acb
cmp rax, 3
jne 0x140014991
mov ecx, dword [rbp - 0x26]
lea r8, [rax - 2]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x2c]
rol cx, 8
mov word [rbp + rax*2 - 0x2c], cx
and r8d, eax
jmp 0x140014a7b
cmp rax, 2
jne 0x1400149b5
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x2a]
lea r9, [rax - 1]
rol cx, 8
mov word [rbp + rax*2 - 0x2a], cx
and r9d, 3
jmp 0x140014aa1
cmp rax, 1
jne 0x140014aa1
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x28]
rol cx, 8
mov word [rbp + rax*2 - 0x28], cx
test rdi, rdi
jne 0x140014abe
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014acb
test rax, rax
jne 0x140014acb
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x26]
rol cx, 8
mov word [rbp + rax*2 - 0x26], cx
test rdx, rdx
jne 0x140014ae8
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014af6
cmp rax, 0xffffffffffffffff
jne 0x140014af6
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x24]
rol cx, 8
mov word [rbp + rax*2 - 0x24], cx
test r8, r8
jne 0x140014b13
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014b21
cmp rax, 0xfffffffffffffffe
jne 0x140014b21
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x22]
rol cx, 8
mov word [rbp + rax*2 - 0x22], cx
test r9, r9
jne 0x140014b3e
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014b4c
cmp rax, 0xfffffffffffffffd
jne 0x140014b4c
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
add rax, 8
cmp rax, 8
jb 0x140014950
movdqa xmm0, xmmword [rbp - 0x30]
lea r8, [rbp - 0x40]
mov rcx, qword [r14 + 0x18]
mov r9d, 0xc
pxor xmm0, xmmword [rbp - 0x10]
mov edx, 0x104
movdqa xmmword [rbp - 0x30], xmm0
mov rcx, qword [rcx]
call fcn.1400a8378
mov rax, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov edx, 0x81
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov rsi, qword [rax]
lea r8d, [r9 + 1]
mov rax, qword [r14 + 0x18]
mov rdi, qword [rax]
mov rax, qword [r14 + 0x20]
mov rcx, rdi
mov rbx, qword [rax]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rdx, [rax - 1]
cmp rdx, 0xfffffffffffffffd
ja 0x140014bee
mov rcx, rax
call qword [sym.imp.ntdll.dll_NtClose]
mov rcx, rdi
call fcn.140002de0
test eax, eax
jne 0x140014c22
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, rsi
call fcn.140002de0
test eax, eax
jne 0x140014c01
or qword [rbx], 0x80
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rsi
call fcn.140002de0
test eax, eax
je 0x140014c39
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x140014c01
or qword [rbx], 0x10
jmp 0x140014c01