Function at 0x1400cf2e0
Capabilities:
Delete file

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5f0
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov rax, qword [0x14030bc70]
xor rax, rsp
mov qword [rsp + 0x5e0], rax
mov qword [rsp + 0x40], r9
mov r15, r8
mov r14, rcx
mov r13, qword [rsp + 0x650]
mov r12d, 1
mov dword [rsp + 0x30], r12d
mov dword [r13], 0
lea rsi, [rcx + 0x74]
cmp byte [rsi], 0
jne 0x1400cf35f
mov rcx, r8
call fcn.1400a9d70
mov edx, eax
mov rcx, r14
call fcn.1400d10e0
test eax, eax
jne 0x1400cf35f
mov dword [r13], r12d
mov eax, r12d
jmp 0x1400cf6f8
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x1a0]
call fcn.140141ad0
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x90]
call fcn.140141ad0
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x2b0]
call fcn.140141ad0
mov eax, dword [0x140312158]
movzx ebx, ax
inc eax
mov dword [0x140312158], eax
lea rcx, [rsp + 0x38]
call fcn.1401541c8
mov edi, dword [rsp + 0x38]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx r9d, word [rsp + 0x5e]
shl r9d, 0x10
add r9d, ebx
mov rax, qword [r14 + 0x20]
mov rcx, qword [rax + 0xb0]
add rcx, 0x2684
mov qword [rsp + 0x20], rcx
mov r8d, edi
lea rdx, str.snapshot_04X_04X._s
lea rcx, [rsp + 0x2b0]
call fcn.1400a61e0
mov rax, qword [r14 + 0x20]
mov rcx, qword [rax + 0xb0]
add rcx, 0x247c
lea rdx, [rsp + 0x90]
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rdx], al
lea rcx, [rcx + 1]
lea rdx, [rdx + 1]
test al, al
jne 0x1400cf420
lea rcx, [rsp + 0x90]
call fcn.1400f7c20
lea rcx, [rsp + 0x90]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1400cf450
lea r8, [rsp + 0x2b0]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1400cf470
mov edx, 0x2e
lea rcx, [rsp + 0x90]
call fcn.1401421b8
mov rbx, rax
test rax, rax
je 0x1400cf4df
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
lea r9, [rsp + 0x90]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.1400ce0a0
lea rcx, [rsp + 0x60]
lea rax, [rsp + 0x60]
sub rbx, rax
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rbx + rcx + 1], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400cf4d0
lea rcx, [rsp + 0x1a0]
sub rcx, rsi
nop word [rax + rax]
movzx eax, byte [rsi]
mov byte [rcx + rsi], al
lea rsi, [rsi + 1]
test al, al
jne 0x1400cf4f0
lea rcx, [rsp + 0x1a0]
call fcn.1400f7c20
lea rcx, [rsp + 0x1a0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1400cf516
lea rdx, [rsp + 0x2b0]
xor r8d, r8d
nop word [rax + rax]
movzx eax, byte [rdx + r8]
mov byte [rcx + r8], al
lea r8, [r8 + 1]
test al, al
jne 0x1400cf530
lea rdx, [rsp + 0x70]
lea rcx, [0x140285c9d]
call fcn.1400a8580
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x90]
mov rdx, qword [rsp + 0x40]
mov rcx, r15
call fcn.1400a7820
test eax, eax
je 0x1400cf698
cmp dword [r15 + 0x21c], 0
jne 0x1400cf58e
mov rcx, r15
call fcn.1400a7440
xor edx, edx
mov rcx, r15
call fcn.1400a8b60
mov rcx, qword [r14 + 0x68]
mov rax, qword [rcx]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x90]
call qword [rax + 0x28]
mov r12d, eax
mov dword [rsp + 0x30], eax
test eax, eax
je 0x1400cf66b
inc dword [r14 + 0x194]
lea rcx, [r15 + 0x3c]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1400cf64c
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x4d0]
call fcn.140141ad0
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x3c0]
call fcn.140141ad0
or edx, 0xffffffff
lea rcx, [rsp + 0x3c0]
call fcn.1400fb150
lea r9, [rsp + 0x3c0]
lea r8, [r15 + 0x3c]
lea rdx, str.Unable_to_delete_file___s__:__s
lea rcx, [rsp + 0x4d0]
call fcn.1400a61e0
mov rax, qword [r14]
lea r9, [rsp + 0x4d0]
lea r8, [0x1402181c8]
xor edx, edx
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1400cf6bb
mov rax, qword [r14]
lea r9, [rsp + 0x1a0]
lea r8, str.DataPush::ProcessDisplayFile_End___s
mov edx, 3
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1400cf6bb
mov rax, qword [r14]
lea r9, [r15 + 0x3c]
lea rcx, [rsp + 0x1a0]
mov qword [rsp + 0x20], rcx
lea r8, str.DataPush::ProcessDisplayFile_SendFile___s__s__failed___
xor edx, edx
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_recv]
mov dword [r13], 1
jmp 0x1400cf6bb
mov rax, qword [r14]
lea r9, [r15 + 0x3c]
lea rcx, [rsp + 0x1a0]
mov qword [rsp + 0x20], rcx
lea r8, str.DataPush::ProcessDisplayFile_CreateFileNewPassword___s__s__failed___
xor edx, edx
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_recv]
lea rcx, [rsp + 0x90]
call fcn.1400fafb0
test eax, eax
je 0x1400cf6ee
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1400cf6ee
xor edx, edx
lea rcx, [rsp + 0x90]
call fcn.1400fd640
nop
jmp 0x1400cf6f5
mov eax, r12d
mov rcx, qword [rsp + 0x5e0]
xor rcx, rsp
call fcn.140113910
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret