Function at 0x140207b40
Capabilities:
Delete file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r15
sub rsp, 0x40
mov rbp, qword [rcx + 0x8648]
mov rbx, rcx
mov rcx, rbp
call fcn.140205ce0
xor r15d, r15d
cmp dword [rbx + 0x80], r15d
je 0x140207ce7
mov edx, dword [rbx + 0x40cc]
lea rcx, [0x14063eaa8]
inc edx
call fcn.14020bdf0
mov edi, r15d
mov eax, edi
lea rcx, [0x14063eac0]
mov edx, edi
mov r8d, dword [rbx + rax*4 + 0x40d0]
call fcn.14020bdf0
inc edi
cmp edi, dword [rbx + 0x40cc]
jbe 0x140207b84
mov edx, dword [rbx + 0xc8]
lea rcx, [0x14063eae8]
inc edx
call fcn.14020bdf0
mov edi, r15d
nop dword [rax]
mov eax, edi
lea rcx, [0x14063eb00]
mov edx, edi
mov r8d, dword [rbx + rax*4 + 0xcc]
call fcn.14020bdf0
inc edi
cmp edi, dword [rbx + 0xc8]
jbe 0x140207bc0
cmp dword [rbx + 0x9c], r15d
lea rax, [0x14063eb48]
lea rcx, [0x14063eb28]
cmovne rcx, rax
call fcn.14020bdf0
cmp dword [rbx + 0x85c0], r15d
jne 0x140207c1a
lea rcx, [0x14063eb68]
call fcn.14020bdf0
jmp 0x140207ce7
mov esi, r15d
mov eax, dword [rbx + 0xc8]
cmp dword [rbx + 0x9c], r15d
jne 0x140207c80
nop dword [rax]
mov edi, r15d
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax + 1]
mov r8d, edi
mov rax, qword [rbx + 0x8668]
mov edx, esi
imul ecx, esi
add ecx, edi
mov r9d, dword [rax + rcx*8]
lea rcx, [0x14063eb90]
call fcn.14020bdf0
mov eax, dword [rbx + 0xc8]
inc edi
cmp edi, eax
jbe 0x140207c40
inc esi
cmp esi, dword [rbx + 0x40cc]
jbe 0x140207c30
jmp 0x140207ce7
mov edi, r15d
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax + 1]
mov r8d, edi
mov rax, qword [rbx + 0x8668]
imul ecx, esi
add ecx, edi
shl ecx, 2
mov r9d, dword [rax + rcx*8]
lea rdx, [rax + rcx*8]
mov eax, dword [rax + rcx*8 + 0x18]
lea rcx, [0x14063ebc0]
mov dword [rsp + 0x30], eax
mov eax, dword [rdx + 0x10]
mov dword [rsp + 0x28], eax
mov eax, dword [rdx + 8]
mov edx, esi
mov dword [rsp + 0x20], eax
call fcn.14020bdf0
mov eax, dword [rbx + 0xc8]
inc edi
cmp edi, eax
jbe 0x140207c90
inc esi
cmp esi, dword [rbx + 0x40cc]
jbe 0x140207c80
mov rcx, rbx
call fcn.14020c410
mov rdx, rbp
mov rcx, rbx
call fcn.140205c10
cmp qword [rbx + 0x86a0], r15
jbe 0x14020800c
mov rbp, qword [rbx + 0xb8]
mov rdi, r15
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x80], r14
mov r14, qword [rbx + 0x8668]
nop word [rax + rax]
mov rdx, qword [rbx + 0x8698]
mov rcx, rbx
mov rdx, qword [rdx + rdi*8]
call fcn.140205c10
mov rax, qword [rbx + 0x86a0]
inc rdi
cmp rdi, rax
jb 0x140207d30
mov rdi, r15
test rax, rax
je 0x140207d80
nop word [rax + rax]
mov rax, qword [rbx + 0x8b48]
xor edx, edx
mov r8, qword [rax + rdi*8]
mov rcx, r8
call qword [r8 + 0x48]
inc rdi
cmp rdi, qword [rbx + 0x86a0]
jb 0x140207d60
mov r12, r15
cmp dword [rbx + 0x9c], 1
jne 0x140207d9e
cmp dword [rbx + 0x80dc], r15d
je 0x140207d9e
movzx eax, byte [rbx + 0x8638]
jmp 0x140207da3
mov eax, 1
cmp r12, rax
jae 0x140207edc
mov r13, r15
mov rdi, r12
mov rsi, r15
nop word [rax + rax]
mov rdx, rbp
mov r8, qword [r14 + rdi*8]
cmp dword [rbx + 0x9c], r15d
jne 0x140207de8
mov rcx, qword [rbx + 0x8b48]
mov rcx, qword [rcx + rsi*8]
call fcn.140208910
inc rdi
jmp 0x140207eb0
movzx eax, byte [rbx + 0x8638]
mov r9, qword [rbx + 0x8b48]
imul rax, rsi
cmp dword [rbx + 0x80dc], r15d
jne 0x140207e99
mov rcx, qword [r9 + rax*8]
call fcn.140208910
movzx eax, byte [rbx + 0x8638]
inc rdi
cmp al, 1
jbe 0x140207e44
mov rcx, qword [rbx + 0x8b48]
mov rdx, rbp
mov r8, qword [r14 + rdi*8]
imul rax, rsi
mov rcx, qword [rcx + rax*8 + 8]
call fcn.140208910
movzx eax, byte [rbx + 0x8638]
inc rdi
cmp al, 2
jbe 0x140207e71
mov rcx, qword [rbx + 0x8b48]
mov rdx, rbp
mov r8, qword [r14 + rdi*8]
movzx eax, al
imul rax, rsi
mov rcx, qword [rcx + rax*8 + 0x10]
call fcn.140208910
movzx eax, byte [rbx + 0x8638]
inc rdi
cmp al, 3
jbe 0x140207eb0
mov rcx, qword [rbx + 0x8b48]
mov rdx, rbp
mov r8, qword [r14 + rdi*8]
movzx eax, al
imul rax, rsi
mov rcx, qword [rcx + rax*8 + 0x18]
call fcn.140208910
inc rdi
jmp 0x140207eb0
lea rcx, [rax + r12]
mov rcx, qword [r9 + rcx*8]
call fcn.140208910
movzx eax, byte [rbx + 0x8638]
add rdi, rax
mov eax, dword [rbx + 0xc8]
inc rsi
cmp rsi, rax
jbe 0x140207dc0
mov eax, dword [rbx + 0x40cc]
inc r13
cmp r13, rax
jbe 0x140207db2
inc r12
jmp 0x140207d83
mov rax, qword [rbx + 0x86e8]
imul rax, qword [rbx + 0x86e0]
mov rcx, qword [rbx + 0x86a0]
imul rax, qword [rbx + 0xa0]
mov r14, qword [rsp + 0x80]
mov r13, qword [rsp + 0x78]
mov r12, qword [rsp + 0x70]
cmp rax, 0x4000000
jb 0x140207fb5
test rcx, rcx
je 0x140207f92
nop dword [rax]
mov rax, qword [rbx + 0x8b48]
test rax, rax
je 0x140207f6c
mov rcx, qword [rax + r15*8]
test rcx, rcx
je 0x140207f6c
mov rcx, qword [rcx]
test rcx, rcx
je 0x140207f57
call fcn.1402dfbac
mov rcx, qword [rbx + 0x8b50]
mov rcx, qword [rcx + r15*8]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x140207fa5
mov rax, qword [rbx + 0x8b48]
mov rcx, qword [rax + r15*8]
test rcx, rcx
je 0x140207f6c
call fcn.1402d83b4
mov rax, qword [rbx + 0x8b50]
test rax, rax
je 0x140207f86
mov rcx, qword [rax + r15*8]
test rcx, rcx
je 0x140207f86
call fcn.1402d83b4
inc r15
cmp r15, qword [rbx + 0x86a0]
jb 0x140207f20
mov rcx, qword [rbx + 0x8b50]
test rcx, rcx
je 0x140207fe8
call fcn.1402d83b4
jmp 0x140207fe8
mov eax, 0xffffffff
add rsp, 0x40
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret
test rcx, rcx
je 0x140207fe8
nop word [rax + rax]
mov rax, qword [rbx + 0x8b48]
test rax, rax
je 0x140207fdc
lea rcx, [rax + r15*8]
mov rax, qword [rax + r15*8]
test rax, rax
je 0x140207fdc
call qword [rax + 0x28]
inc r15
cmp r15, qword [rbx + 0x86a0]
jb 0x140207fc0
mov rcx, qword [rbx + 0x8b48]
call fcn.1402d83b4
mov rcx, qword [rbx + 0x8698]
call fcn.1402d83b4
mov rcx, qword [rbx + 0x8668]
call fcn.1402d83b4
xor eax, eax
add rsp, 0x40
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret