Function at 0x1400c45b0
Capabilities:
Delete file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x4b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0x4e8], rbx
mov rax, qword [0x14025a030]
xor rax, rsp
mov qword [rsp + 0x4a8], rax
mov r13, r9
mov rbp, r8
mov rbx, rcx
lea rcx, [rsp + 0x130]
call fcn.1400c3a10
nop
mov rdx, rax
mov rcx, r13
call fcn.1400c4f30
nop
lea rcx, [rsp + 0x2c0]
call fcn.1400c50c0
nop
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x270]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x248]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x220]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x178]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x148]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov edi, eax
mov esi, 1
test eax, eax
jne 0x1400c4797
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c4797
mov r8, qword [rcx]
mov edx, 0x1388
call qword [r8 + 0x10]
test eax, eax
je 0x1400c4797
mov r8d, esi
lea edx, [rdi + 2]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x40]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x40]
call fcn.140002150
mov rcx, rax
lea rdx, str.Unable_to_impersonate_logged_on_user
call fcn.1400023c0
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x3e8]
cmp qword [rsp + 0x400], 8
cmovae r8, qword [rsp + 0x3e8]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x3f8]
mov edx, 0x1388
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
mov rcx, rbx
call fcn.1400c61c0
mov rbx, rax
mov qword [rsp + 0x30], rax
test edi, edi
je 0x1400c47b1
call qword [sym.imp.ADVAPI32.dll_RevertToSelf]
test rbx, rbx
jne 0x1400c48a7
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c48a0
mov rax, qword [rcx]
mov edx, 0x1388
call qword [rax + 0x10]
test eax, eax
je 0x1400c48a0
mov r8d, esi
lea edx, [rbx + 2]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x40]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x40]
call fcn.140002150
mov rcx, rax
lea rdx, str.Unable_to_get_InstallInfo
call fcn.1400023c0
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x3e8]
cmp qword [rsp + 0x400], 8
cmovae r8, qword [rsp + 0x3e8]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x3f8]
mov edx, 0x1388
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
nop
xor eax, eax
jmp 0x1400c4f08
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c4ca8
mov rax, qword [rcx]
mov edx, 0x7d0
call qword [rax + 0x10]
test eax, eax
je 0x1400c4999
mov r8d, esi
mov edx, 2
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x40]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x40]
call fcn.140002150
mov rcx, rax
lea rdx, str.Application_path:
call fcn.1400023c0
mov rcx, rax
mov rdx, qword [rbx]
call fcn.140002150
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x3e8]
cmp qword [rsp + 0x400], 8
cmovae r8, qword [rsp + 0x3e8]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x3f8]
mov edx, 0x7d0
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c4ca8
mov rax, qword [rcx]
mov edx, 0x7d0
call qword [rax + 0x10]
test eax, eax
je 0x1400c4a9e
mov r8d, esi
mov edx, 2
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x2f0]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x2f0]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x2f0]
call fcn.140002150
mov rcx, rax
lea rdx, str.Profile_path:
call fcn.1400023c0
mov rcx, rax
mov rdx, qword [rbx + 0x10]
call fcn.140002150
lea rdx, [rsp + 0x458]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x460]
cmp qword [rsp + 0x478], 8
cmovae r8, qword [rsp + 0x460]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x470]
mov edx, 0x7d0
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x458]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c4ca8
mov rax, qword [rcx]
mov edx, 0x7d0
call qword [rax + 0x10]
test eax, eax
je 0x1400c4ba3
mov r8d, esi
mov edx, 2
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x130]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x130]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x130]
call fcn.140002150
mov rcx, rax
lea rdx, str.Preferences_path:
call fcn.1400023c0
mov rcx, rax
mov rdx, qword [rbx + 0x20]
call fcn.140002150
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x410]
cmp qword [rsp + 0x428], 8
cmovae r8, qword [rsp + 0x410]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x420]
mov edx, 0x7d0
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c4ca8
mov rax, qword [rcx]
mov edx, 0x7d0
call qword [rax + 0x10]
test eax, eax
je 0x1400c4ca8
mov r8d, esi
mov edx, 2
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x130]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x130]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x130]
call fcn.140002150
mov rcx, rax
lea rdx, str.WebData_path:
call fcn.1400023c0
mov rcx, rax
mov rdx, qword [rbx + 0x30]
call fcn.140002150
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x410]
cmp qword [rsp + 0x428], 8
cmovae r8, qword [rsp + 0x410]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x420]
mov edx, 0x7d0
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
lea rcx, [rsp + 0x480]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void____ptr64]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void____ptr64]
nop
lea r8, [rsp + 0x430]
lea rdx, [rsp + 0x480]
mov rcx, rbx
call fcn.1400c3b10
test eax, eax
jne 0x1400c4e0e
mov rcx, qword [0x140260548]
test rcx, rcx
je 0x1400c4de0
mov rax, qword [rcx]
mov edx, 0x1388
call qword [rax + 0x10]
test eax, eax
je 0x1400c4de0
mov r8d, esi
mov edx, 2
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int____ptr64]
nop
call qword [sym.imp.MSVCP90.dll_public:_static_class_std::locale_const____ptr64___cdecl_std::locale::classic_void_]
mov r8, rax
mov rax, qword [rsp + 0x130]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x130]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_class_std::locale___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::imbue_class_std::locale_const____ptr64____ptr64]
lea rcx, [rsp + 0x20]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::locale::destructor_void____ptr64]
lea rdx, str._Chrome::BrowserInfo::Query_
lea rcx, [rsp + 0x130]
call fcn.140002150
mov rcx, rax
lea rdx, str.Unable_to_make_temp_files
call fcn.1400023c0
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void____ptr64]
nop
lea r8, [rsp + 0x410]
cmp qword [rsp + 0x428], 8
cmovae r8, qword [rsp + 0x410]
mov rcx, qword [0x140260548]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x420]
mov edx, 0x1388
call qword [rax + 0x20]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void____ptr64]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x480]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
jmp 0x1400c4f08
mov rdx, r13
mov rcx, rbx
call fcn.1400c3f50
xor edi, edi
test eax, eax
setne dil
mov rdx, r13
mov rcx, rbp
call fcn.1400c40b0
test eax, eax
je 0x1400c4e38
test edi, edi
je 0x1400c4e38
mov edi, esi
jmp 0x1400c4e3a
xor edi, edi
mov r8, r13
lea rdx, [rsp + 0x480]
mov rcx, rbx
call fcn.1400c42c0
test eax, eax
je 0x1400c4e59
test edi, edi
je 0x1400c4e59
mov ebp, esi
jmp 0x1400c4e5b
xor ebp, ebp
xor r12d, r12d
xor edi, edi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9d, [r12 + 0xa]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x430]
mov rcx, rbx
call fcn.1400c3de0
test eax, eax
je 0x1400c4ec4
mov rdi, qword [rsp + 0x20]
mov qword [rsp + 0x28], rdi
mov r8, r13
mov rdx, rdi
mov rcx, rbx
call fcn.1400c4460
mov r12d, eax
lea rcx, [rsp + 0x438]
cmp qword [rsp + 0x450], 8
cmovae rcx, qword [rsp + 0x438]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
test rdi, rdi
je 0x1400c4ed4
mov r8, qword [rdi]
mov edx, esi
mov rcx, rdi
call qword [r8]
test r12d, r12d
je 0x1400c4edd
test ebp, ebp
jne 0x1400c4edf
xor esi, esi
lea rcx, [rsp + 0x430]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x480]
call qword [sym.imp.MSVCP90.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, esi
mov rcx, qword [rsp + 0x4a8]
xor rcx, rsp
call fcn.140155650
mov rbx, qword [rsp + 0x4e8]
add rsp, 0x4b0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret