Function at 0x1400a73d0
Capabilities:
Check if file exists
Delete file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov r15, rdx
mov r14, rcx
xor r13d, r13d
mov dword [rbp - 0x10], r13d
lea r12, [0x1402aa8a0]
mov rcx, qword [0x1402aa8a0]
cmp rcx, r12
je 0x1400a7427
test byte [rcx + 0x44], 2
je 0x1400a7427
cmp byte [rcx + 0x41], 4
jb 0x1400a7427
lea edx, [r13 + 0x26]
lea r8, [0x140232820]
mov rcx, qword [rcx + 0x38]
call fcn.140024300
mov r14, qword [r14 + 0x10]
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r13w
mov dword [rbp - 0x10], 1
lea rbx, [r15 + 0x10]
mov rcx, qword [rbx]
mov rsi, 0xffffffffffffffff
mov rax, rsi
lea rax, [rax + 1]
cmp word [r14 + rax*2], 0
jne 0x1400a7454
lea rdx, [rax + rcx]
lea rcx, [rbp - 0x30]
call fcn.140033b60
cmp qword [r15 + 0x18], 8
jb 0x1400a7477
mov r15, qword [r15]
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x1400a74b9
lea rdi, [rcx + rdx]
mov qword [rbp - 0x20], rdi
lea rbx, [rbp - 0x30]
cmp r8, 8
cmovae rbx, qword [rbp - 0x30]
lea r8, [rdx + rdx]
lea rcx, [rbx + rcx*2]
mov rdx, r15
call fcn.140132e10
mov word [rbx + rdi*2], r13w
jmp 0x1400a74d0
lfence
mov qword [rsp + 0x20], rdx
mov r9, r15
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.14001c380
inc rsi
cmp word [r14 + rsi*2], 0
jne 0x1400a74d0
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x18]
sub rax, rcx
lfence
cmp rsi, rax
ja 0x1400a751e
mov rdi, qword [rbp - 0x20]
add rdi, rsi
mov qword [rbp - 0x20], rdi
lea rbx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rbx, qword [rbp - 0x30]
lea r8, [rsi + rsi]
lea rcx, [rbx + rcx*2]
mov rdx, r14
call fcn.140132e10
mov word [rbx + rdi*2], r13w
jmp 0x1400a7535
mov qword [rsp + 0x20], rsi
mov r9, r14
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.14001c380
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.DLL_DeleteFileW]
test eax, eax
sete bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400a758e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7589
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a7636
call fcn.14013ff64
test bl, bl
je 0x1400a75ef
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
cmp eax, 2
jne 0x1400a75bb
mov rcx, qword [0x1402aa8a0]
cmp rcx, r12
je 0x1400a761c
test byte [rcx + 0x44], al
je 0x1400a761c
cmp byte [rcx + 0x41], 5
jb 0x1400a761c
lea edx, [rax + 0x25]
jmp 0x1400a760c
mov rcx, qword [0x1402aa8a0]
cmp rcx, r12
je 0x1400a75eb
test byte [rcx + 0x44], 2
je 0x1400a75eb
cmp byte [rcx + 0x41], 5
jb 0x1400a75eb
mov edx, 0x28
mov r9d, ebx
lea r8, [0x140232820]
mov rcx, qword [rcx + 0x38]
call fcn.1400268d0
mov eax, ebx
jmp 0x1400a761e
mov rcx, qword [0x1402aa8a0]
cmp rcx, r12
je 0x1400a761c
test byte [rcx + 0x44], 2
je 0x1400a761c
cmp byte [rcx + 0x41], 5
jb 0x1400a761c
mov edx, 0x29
lea r8, [0x140232820]
mov rcx, qword [rcx + 0x38]
call fcn.140024300
xor eax, eax
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400e0284
int3