Function at 0x140045bb0
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x580]
sub rsp, 0x680
mov rax, qword [0x14017a608]
xor rax, rsp
mov qword [rbp + 0x570], rax
mov r15, rdx
mov r13, rcx
mov rcx, qword [0x14017a048]
lea rsi, [0x14017a048]
cmp rcx, rsi
je 0x140045c1a
test byte [rcx + 0x1c], 1
je 0x140045c1a
cmp byte [rcx + 0x19], 4
jb 0x140045c1a
mov rcx, qword [rcx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x14e
call fcn.140006b98
or dword [rsp + 0x30], 0xffffffff
xor r12d, r12d
mov qword [rsp + 0x38], r12
mov r14d, r12d
test r15, r15
jne 0x140045c39
mov eax, 0x80004003
jmp 0x140046073
lea rdi, str.WsbMountedVolumes
mov r8d, 0x11
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.msvcrt.dll_wcsncmp]
nop dword [rax + rax]
test eax, eax
jne 0x140045dbb
mov rbx, qword [0x14017a048]
cmp rbx, rsi
je 0x140045c94
test byte [rbx + 0x1c], 1
je 0x140045c94
cmp byte [rbx + 0x19], 4
jb 0x140045c94
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x14f
call fcn.140006b98
mov rbx, qword [0x14017a048]
mov r14d, 0x208
lea rcx, [rsp + 0x40]
mov r8d, r14d
xor edx, edx
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x40]
mov edx, 0x104
sub rdi, rax
lea rcx, [rsp + 0x40]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140045cdd
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140045cdd
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140045cbb
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r12w
mov rax, rdx
neg rax
sbb edi, edi
not edi
and edi, 0x8007007a
test rdx, rdx
je 0x140045fe7
mov ebx, 0x104
lea r8, [0x140157a78]
mov edx, ebx
lea rcx, [rsp + 0x40]
call fcn.14005485c
mov edi, eax
test eax, eax
js 0x140045d5f
lea r8, str.WsbMountedVolumeFile_lu
mov edx, ebx
lea rcx, [rsp + 0x40]
call fcn.14005485c
mov edi, eax
test eax, eax
js 0x140045d5f
lea r8, [rsp + 0x30]
mov rcx, r15
lea rdx, [rsp + 0x40]
call qword [sym.imp.msvcrt.dll_swscanf_s]
nop dword [rax + rax]
cmp eax, 1
je 0x140045d6b
mov edi, 0x80070057
mov rbx, qword [0x14017a048]
jmp 0x140045fe7
mov r8, r14
lea rcx, [rsp + 0x40]
xor edx, edx
call sub.msvcrt.dll_memset
mov r8, r14
lea rcx, [rbp + 0x360]
xor edx, edx
call sub.msvcrt.dll_memset
mov r9d, dword [rsp + 0x30]
lea r8, str._GlobalrootDeviceHarddiskVolume_lu
mov rdx, rbx
lea rcx, [rbp + 0x360]
call fcn.1400102c4
mov edi, eax
test eax, eax
js 0x140045d5f
lea rsi, [rbp + 0x360]
mov r14d, 1
jmp 0x140045dbe
mov rsi, r15
mov rcx, rsi
call fcn.14011e760
mov edi, eax
test eax, eax
jns 0x140045e07
mov rbx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rbx, rax
je 0x140045e0e
test byte [rbx + 0x1c], 1
je 0x140045e0e
cmp byte [rbx + 0x19], 2
jb 0x140045e0e
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x150
mov dword [rsp + 0x20], edi
mov r9, rsi
call fcn.140011330
mov rbx, qword [0x14017a048]
test r14d, r14d
je 0x140045fe0
lea rcx, [rsp + 0x38]
call fcn.140093334
mov r14, qword [rsp + 0x38]
mov edi, eax
test eax, eax
jns 0x140045e74
mov rbx, qword [0x14017a048]
lea rsi, [0x14017a048]
cmp rbx, rsi
je 0x140045fc7
test byte [rbx + 0x1c], 1
je 0x140045fc7
cmp byte [rbx + 0x19], 2
jb 0x140045fc7
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x151
xor r9d, r9d
call fcn.140006bc4
jmp 0x140045fc0
xor edx, edx
lea rcx, [rbp + 0x150]
mov r8d, 0x208
call sub.msvcrt.dll_memset
mov r9, r14
mov qword [rsp + 0x20], r15
lea r8, [0x14015a818]
mov edx, 0x104
lea rcx, [rbp + 0x150]
call fcn.1400102c4
mov edi, eax
test eax, eax
js 0x140045fb9
lea rcx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x140045f79
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x140045ee8
movzx esi, ax
or esi, 0x80070000
mov rbx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rbx, rax
je 0x140045f26
test byte [rbx + 0x1c], 1
je 0x140045f26
cmp byte [rbx + 0x19], 2
jb 0x140045f26
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x152
mov r9d, esi
call fcn.140006bc4
mov rbx, qword [0x14017a048]
lea eax, [rsi + 0x7ff8fffe]
cmp eax, 1
jbe 0x140045f43
test esi, esi
jns 0x140045f79
mov edi, esi
lea rsi, [0x14017a048]
jmp 0x140045fc7
lea rsi, [0x14017a048]
cmp rbx, rsi
je 0x140045f80
test byte [rbx + 0x1c], 1
je 0x140045f80
cmp byte [rbx + 0x19], 3
jb 0x140045f80
mov rcx, qword [rbx + 0x10]
lea r9, [rbp + 0x150]
mov edx, 0x153
lea r8, [0x14015aeb8]
call fcn.1400112c8
jmp 0x140045f80
lea rsi, [0x14017a048]
mov eax, dword [r13 + 0x24]
test eax, eax
jne 0x140045fa4
lea r8, str.m_numNetworkShareVolumes___0
mov edx, 0x1b1e
lea rcx, str.base_stor_blbengine_serviceengine.cpp
call fcn.14008ac24
mov eax, dword [r13 + 0x24]
sub eax, 1
mov dword [r13 + 0x24], eax
jne 0x140045fb9
call fcn.140135e28
test eax, eax
cmovs edi, eax
jmp 0x140045fc0
lea rsi, [0x14017a048]
mov rbx, qword [0x14017a048]
test r14, r14
je 0x140045fe7
mov rcx, r14
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
jmp 0x140045d5f
lea rsi, [0x14017a048]
cmp rbx, rsi
je 0x140046044
test byte [rbx + 0x1c], 1
je 0x140046017
cmp byte [rbx + 0x19], 4
jb 0x140046017
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x154
mov r9d, edi
call fcn.140006bc4
mov rbx, qword [0x14017a048]
cmp rbx, rsi
je 0x140046044
test byte [rbx + 0x1c], 1
je 0x140046044
cmp byte [rbx + 0x19], 4
jb 0x140046044
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x155
call fcn.140006b98
mov rbx, qword [0x14017a048]
test edi, edi
jns 0x140046071
cmp rbx, rsi
je 0x140046071
test byte [rbx + 0x1c], 1
je 0x140046071
cmp byte [rbx + 0x19], 2
jb 0x140046071
mov rcx, qword [rbx + 0x10]
lea r8, [0x14015aeb8]
mov edx, 0x156
mov r9d, edi
call fcn.140006bc4
mov eax, edi
mov rcx, qword [rbp + 0x570]
xor rcx, rsp
call fcn.140001d90
mov rbx, qword [rsp + 0x6d0]
add rsp, 0x680
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret