Function at 0x140001d70
Capabilities:
Delete file

Disassembly:
jmp 0x14001afc0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0x200
mov rdi, rsp
mov ecx, 0x80
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x210]
mov qword [rsp + 0x1c8], 0xfffffffffffffffe
lea rcx, [0x1401e7a30]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140001901
nop
call fcn.14000132f
mov ecx, 0x8007
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x1401e79d8]
call fcn.140001cee
cmp dword [rsp + 0x210], 1
jne 0x14001b100
lea rcx, [rsp + 0x68]
call fcn.1400019a6
nop
lea rcx, [rsp + 0x88]
call fcn.140002018
nop
lea rcx, [rsp + 0x68]
call fcn.14000187f
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1400012d0
lea rcx, [rsp + 0x88]
call fcn.1400020a9
test eax, eax
jl 0x14001b08b
mov dword [rsp + 0x1d0], 1
jmp 0x14001b096
mov dword [rsp + 0x1d0], 0
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0
jne 0x14001b0dd
mov edx, 0x80004005
lea rcx, [rsp + 0x1a8]
call fcn.14000159b
mov eax, dword [rax]
mov dword [rsp + 0x1a4], eax
lea rdx, [0x1401df3b8]
lea rcx, [rsp + 0x1a4]
call fcn.1400a2ad0
xor eax, eax
test eax, eax
jne 0x14001b06d
lea rcx, [rsp + 0x88]
call fcn.14000208b
nop
lea rcx, [rsp + 0x68]
call fcn.140001212
jmp 0x14001b3e0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e7a08]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.14000230b
movzx eax, al
test eax, eax
je 0x14001b180
lea rcx, [0x1401e79d0]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.1400023b5
nop
mov dword [rsp + 0x20], 2
lea r9, [0x1401e79f8]
lea r8, [0x1401e79f0]
mov dl, 1
lea rcx, [rsp + 0xc8]
call fcn.1400022f7
nop
lea rcx, [rsp + 0xc8]
call fcn.140002374
jmp 0x14001b3e0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e7a18]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.14000230b
movzx eax, al
test eax, eax
je 0x14001b298
lea rcx, [0x1401e79d0]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.1400023b5
nop
mov r8d, 0x9e
mov dl, 1
lea rcx, [rsp + 0xf8]
call fcn.140001550
lea rcx, [rsp + 0x38]
call fcn.140001875
call fcn.1400018bb
lea r8, [0x14017229c]
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.140001113
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1e0], rax
lea r8, [0x1401e7a30]
mov rdx, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x1b8]
call fcn.140001cf8
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f0], rax
mov rcx, qword [rsp + 0x1f0]
call fcn.14000110e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x1b8]
call fcn.140001195
nop
lea rcx, [rsp + 0x1b0]
call fcn.140001195
nop
lea rcx, [rsp + 0xf8]
call fcn.140002374
jmp 0x14001b3e0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e7a00]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.14000230b
movzx eax, al
test eax, eax
je 0x14001b308
lea rcx, [0x1401e79d0]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1400023b5
nop
xor r9d, r9d
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x128]
call fcn.1400016e5
nop
lea rcx, [rsp + 0x128]
call fcn.140002374
jmp 0x14001b3e0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e7a10]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.14000230b
movzx eax, al
test eax, eax
je 0x14001b375
lea rcx, [0x1401e79d0]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.1400023b5
nop
mov r8d, 0x9e
mov dl, 1
lea rcx, [rsp + 0x158]
call fcn.140001f78
nop
lea rcx, [rsp + 0x158]
call fcn.140002374
jmp 0x14001b3e0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e7a20]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.14000230b
movzx eax, al
test eax, eax
je 0x14001b3e0
lea rcx, [0x1401e79d0]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.1400023b5
nop
mov r8d, 0x9e
mov dl, 1
lea rcx, [rsp + 0x188]
call fcn.1400015dc
nop
lea rcx, [rsp + 0x188]
call fcn.140002374
mov dword [rsp + 0x1c0], 0
lea rcx, [rsp + 0x38]
call fcn.140001046
mov eax, dword [rsp + 0x1c0]
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1401783b8]
call fcn.14009e8b0
mov rax, rdi
add rsp, 0x200
pop rdi
ret