Function at 0x180003fd0
Capabilities:
Delete file

Disassembly:
mov r11, rsp
push rbp
push r13
sub rsp, 0x78
mov rbp, qword [0x18000d9c8]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, rbp
cmp rax, 7
jb 0x180004321
cmp qword [0x18000d9d0], 0xf
xorps xmm0, xmm0
mov qword [r11 + 0x10], rbx
xorps xmm1, xmm1
mov qword [r11 + 0x18], rsi
mov ebx, 0xf
mov qword [r11 + 0x20], rdi
lea rsi, [r11 - 0x48]
mov qword [r11 - 0x18], r12
mov edi, ebx
mov qword [r11 - 0x20], r14
lea r12, [0x18000d9b8]
mov qword [r11 - 0x28], r15
lea r14, [rbp + 7]
mov r15, r12
movabs rax, 0x8000000000000000
cmova r15, qword [0x18000d9b8]
mov ecx, 0x16
movups xmmword [rsp + 0x40], xmm0
movdqu xmmword [rsp + 0x50], xmm1
cmp r14, rbx
jbe 0x1800040cb
mov rdi, r14
or rdi, rbx
cmp rdi, r13
jbe 0x180004092
mov rdi, r13
add rax, 0x27
mov rcx, rax
call fcn.1800070d4
test rax, rax
je 0x180004152
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1800040c6
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1800040a6
xor esi, esi
jmp 0x1800040c6
cmp rcx, 0x1000
jb 0x1800040be
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004315
jmp 0x180004073
call fcn.1800070d4
mov rsi, rax
mov qword [rsp + 0x40], rsi
mov r8, rbp
mov qword [rsp + 0x50], r14
mov rdx, r15
mov qword [rsp + 0x58], rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [str.TJ_lock]
lea rcx, [rsp + 0x40]
mov dword [rsi + rbp], eax
movzx eax, word [0x18000952c]
mov word [rsi + rbp + 4], ax
movzx eax, byte [0x18000952e]
mov byte [rsi + rbp + 6], al
mov byte [rsi + r14], 0
cmp qword [rsp + 0x58], rbx
cmova rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rdx, qword [rsp + 0x58]
cmp rdx, rbx
jbe 0x18000415e
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004159
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004159
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800070a0
mov rsi, qword [0x18000d9c8]
mov rax, r13
sub rax, rsi
cmp rax, 7
jb 0x18000430f
cmp qword [0x18000d9d0], rbx
lea rbp, [rsi + 7]
xorps xmm0, xmm0
lea rdi, [rsp + 0x40]
cmova r12, qword [0x18000d9b8]
xorps xmm1, xmm1
movups xmmword [rsp + 0x40], xmm0
movdqu xmmword [rsp + 0x50], xmm1
cmp rbp, rbx
jbe 0x18000421e
mov rbx, rbp
or rbx, 0xf
cmp rbx, r13
jbe 0x1800041df
movabs rax, 0x8000000000000000
mov rbx, r13
add rax, 0x27
mov rcx, rax
call fcn.1800070d4
test rax, rax
je 0x1800042cd
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180004219
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1800041f9
xor edi, edi
jmp 0x180004219
cmp rcx, 0x1000
jb 0x180004211
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000431b
jmp 0x1800041c0
call fcn.1800070d4
mov rdi, rax
mov qword [rsp + 0x40], rdi
mov r8, rsi
mov qword [rsp + 0x50], rbp
mov rdx, r12
mov qword [rsp + 0x58], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [str.TJ_lock]
lea rcx, [rsp + 0x40]
mov dword [rdi + rsi], eax
mov edx, 0x80000000
movzx eax, word [0x18000952c]
mov word [rdi + rsi + 4], ax
movzx eax, byte [0x18000952e]
mov byte [rdi + rsi + 6], al
mov byte [rdi + rbp], 0
cmp qword [rsp + 0x58], 0xf
mov qword [rsp + 0x30], 0
cmova rcx, qword [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdx, qword [rsp + 0x58]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1800042d9
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800042d4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800042d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800070a0
mov r14, qword [rsp + 0x68]
cmp rbx, 0xffffffffffffffff
mov r12, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xa8]
setne al
mov rsi, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x98]
mov r15, qword [rsp + 0x60]
add rsp, 0x78
pop r13
pop rbp
ret
call fcn.180001390
int3
call fcn.1800012f0
int3
call fcn.1800012f0
int3
call fcn.180001390
int3