Function at 0x1400d3b70
Capabilities:
Delete file

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], r8
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xa0
mov qword [rsp + 0x38], 0xfffffffffffffffe
movaps xmmword [r11 - 0x48], xmm6
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
movsd xmm6, qword [0x140136a50]
movsd qword [rsp + 0x20], xmm6
mov r9, r8
lea r8, [rsp + 0x40]
mov r14, rdx
mov r13, rcx
call fcn.1400d3310
mov dword [rsp + 0x30], eax
mov rcx, qword [r13 + 0x70]
mov r8, qword [r13 + 0x68]
cmp r8, rcx
je 0x1400d3bfc
mov rdx, rcx
call fcn.140037700
mov rbx, rax
mov rdx, qword [r13 + 0x70]
mov rcx, rax
call fcn.140037290
mov qword [r13 + 0x70], rbx
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
sub rbp, rsi
sar rbp, 3
test rbp, rbp
je 0x1400d3c72
mov rbx, rsi
mov rdi, rbp
nop dword [rax + rax]
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x80], eax
lea r9, [rsp + 0x60]
mov r8, rbx
mov rdx, r14
mov rcx, r13
call fcn.1400d02f0
lea rdx, [rsp + 0x60]
lea rcx, [r13 + 0x68]
call fcn.140036c20
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400d3c69
call fcn.14005e094
add rbx, 8
dec rdi
jne 0x1400d3c20
mov rbx, qword [r13 + 0x40]
cmp rbx, qword [r13 + 0x48]
je 0x1400d3c93
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 8
cmp rbx, qword [r13 + 0x48]
jne 0x1400d3c80
mov rdx, qword [r13 + 0x48]
mov rbx, qword [r13 + 0x40]
cmp rbx, rdx
je 0x1400d3cc5
mov rax, rdx
sub rax, rdx
sar rax, 3
lea rdi, [rax*8]
mov r8, rdi
mov rcx, rbx
call fcn.14005e960
lea r11, [rdi + rbx]
mov qword [r13 + 0x48], r11
test rbp, rbp
je 0x1400d3d14
mov rdi, rsi
nop dword [rax]
xor ebx, ebx
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400d3d0b
nop
inc ebx
cmp ebx, 0xa
jge 0x1400d3d0b
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.1400c7670
test al, al
je 0x1400d3d0b
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400d3ce0
add rdi, 8
dec rbp
jne 0x1400d3cd0
cmp dword [rsp + 0x30], 3
jne 0x1400d3d6a
test rsi, rsi
je 0x1400d3d66
cmp rsi, qword [rsp + 0x48]
je 0x1400d3d5e
nop word [rax + rax]
mov rdx, qword [rsi]
sub rdx, 0x18
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400d3d4e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rsi, 8
cmp rsi, qword [rsp + 0x48]
jne 0x1400d3d30
mov rsi, qword [rsp + 0x40]
mov rcx, rsi
call fcn.14005e094
xor al, al
jmp 0x1400d3dc8
movsd xmm0, qword [r13 + 0xa8]
addsd xmm0, xmm6
movsd qword [r13 + 0xa8], xmm0
test rsi, rsi
je 0x1400d3dc6
cmp rsi, qword [rsp + 0x48]
je 0x1400d3dbe
nop dword [rax]
mov rdx, qword [rsi]
sub rdx, 0x18
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400d3dae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rsi, 8
cmp rsi, qword [rsp + 0x48]
jne 0x1400d3d90
mov rsi, qword [rsp + 0x40]
mov rcx, rsi
call fcn.14005e094
mov al, 1
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret