Function at 0x160036088
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push r14
sub rsp, 0x2d0
mov qword [rax - 0x238], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x160270bd8]
xor rax, rsp
mov qword [rsp + 0x2c0], rax
mov rsi, rcx
mov qword [rsp + 0x50], rcx
xor ebx, ebx
cmp dword [rcx + 0x60], ebx
je 0x160036131
cmp dword [rcx + 0x8df8], ebx
jne 0x160091ba0
mov qword [rsp + 0x40], rbx
lea rcx, [rsi + 0x8c48]
call fcn.160032370
mov rdi, rax
test rax, rax
jne 0x160091d55
mov r14d, ebx
cmp dword [rsi + 0x8df8], ebx
jne 0x160091df4
mov eax, r14d
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsp
call fcn.16006e590
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
xor eax, eax
jmp 0x160036107
lea rdi, [rcx + 0x8c68]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.16012bff0
nop
mov rax, qword [rdi]
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, rdi
mov rax, qword [rax + 0x28]
call qword [case.0x16003fc5a.0]
mov edi, eax
mov dword [rsp + 0xb8], ebx
lea rax, [rsp + 0xf8]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], CreateErrorInfo
mov word [rsp + 0xf8], bx
lea rax, fcn.160019c60
mov qword [rsp + 0xe0], rax
lea rax, [0x1601bc540]
mov qword [rsp + 0xc8], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x2a4], rbx
mov dword [rsp + 0x2a0], ebx
lea rax, [0x1601bfd48]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x2b0], ebx
mov r14d, 4
test edi, edi
js 0x160091d2b
mov dword [rsp + 0x40], ebx
mov edx, r14d
lea rcx, [rsp + 0x60]
call fcn.1600c6a14
mov edi, dword [rsp + 0x68]
test edi, edi
js 0x160091d2b
mov r8d, r14d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.1600c6664
mov edi, dword [rsp + 0x68]
test edi, edi
js 0x160091d2b
mov edx, dword [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.1600c6a14
mov edi, dword [rsp + 0x68]
test edi, edi
js 0x160091d2b
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x60]
call fcn.16012c1ac
mov edi, dword [rsp + 0x68]
test edi, edi
js 0x160091d2b
dec dword [rsi + 0x8dfc]
mov r8d, dword [rsp + 0x2a0]
mov ecx, r8d
shr ecx, 2
and ecx, 1
mov eax, r8d
shr eax, 1
and eax, 1
and r8d, 1
lea rdx, [rsp + 0x2a4]
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsi + 0x38]
call fcn.16006a56c
mov edi, eax
mov edx, eax
call fcn.16012cadc
test eax, eax
jne 0x160091c54
mov edi, ebx
jmp 0x160091c54
lea rcx, [rsp + 0xb0]
call fcn.16012c0f8
nop
lea rcx, [rsp + 0x60]
call fcn.16012c174
mov r14d, ebx
cmp edi, 0x80070026
cmovne r14d, edi
jmp 0x1600360f8
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.160056f6c
mov r14d, eax
lea rcx, [rdi + 8]
call fcn.160002750
mov rcx, rdi
call fcn.160031c48
test r14d, r14d
jne 0x1600360f5
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x40], rdx
dec dword [rsi + 0x8dfc]
mov r8d, dword [rdx + 0x1f0]
lea rcx, [rdx + 0x1f4]
mov r9d, r8d
shr r9d, 2
and r9d, 1
mov eax, r8d
shr eax, 1
and eax, 1
and r8d, 1
add rdx, 0x18
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov rcx, qword [rsi + 0x38]
call fcn.16006a56c
nop
lea rcx, [rsp + 0x40]
call fcn.160002750
nop
jmp 0x1600360d8
lea rcx, [rsi + 0x8c80]
or rdx, 0xffffffffffffffff
call fcn.160057738
mov rcx, qword [rsi + 0x8d60]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
nop
jmp 0x160036104