Function at 0x1800781b0
Capabilities:
Delete file

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1e0
mov qword [r11 - 0x88], 0xfffffffffffffffe
mov r12, rcx
xor ebx, ebx
mov dword [r11 + 0x10], ebx
cmp dword [0x1802802b4], ebx
je 0x18007866b
lea rax, [0x1802802b0]
mov qword [r11 - 0x78], rax
mov edx, 0xffffffff
mov rcx, qword [0x1802802b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
dec dword [0x1802802b4]
mov byte [rsp + 0x1a8], 1
lea rax, vtable.WKObjectArray_class_WKString_.0
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], 5
lea edx, [rbx + 5]
lea rcx, [rsp + 0x78]
call sym.WebKeyAPICPPDLLx64.dll_public:_void___cdecl_WKArray_class_WKObject____ptr64____ptr64_::Grow_unsigned_long_long_unsigned___int64_____ptr64
nop
lea rax, vtable.FileFind.0
mov qword [rsp + 0xd0], rax
lea r15, vtable.WKString.0
mov qword [rsp + 0xe0], r15
mov byte [rsp + 0xe8], bl
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], r15
mov byte [rsp + 0x110], bl
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], bl
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
lea rdx, str..wk30
lea rcx, [rsp + 0x48]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
mov qword [rsp + 0xa0], r15
mov byte [rsp + 0xa8], bl
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xc0], rbx
mov rdx, qword [r12 + 0x10]
lea rcx, [rsp + 0xa0]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
mov dword [rsp + 0x228], 1
lea rdx, [0x1801ca568]
mov r14, qword [rsp + 0x58]
cmp qword [rsp + 0x68], rbx
cmovne rdx, r14
lea rcx, [rsp + 0xa0]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Concate_char_const____ptr64____ptr64
lea rdi, [0x1801ca568]
mov rsi, qword [rsp + 0xb0]
cmp qword [rsp + 0xc0], rbx
cmovne rdi, rsi
mov qword [rsp + 0x20], r15
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rbx
mov rdx, rdi
lea rcx, [rsp + 0x20]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
mov rdx, rdi
lea rcx, [rsp + 0x108]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
mov rdi, qword [rsp + 0x30]
test rdi, rdi
je 0x18007841e
lea edx, [rbx + 0x5c]
mov rcx, rdi
call fcn.180154428
test rax, rax
je 0x18007841e
sub eax, edi
cmp eax, 0xffffffff
je 0x18007841e
movsxd r8, eax
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x20]
call sym.WebKeyAPICPPDLLx64.dll_public:_class_WKString___cdecl_WKString::Left_unsigned_long_long_unsigned___int64_____ptr64
nop
cmp qword [rax + 0x20], rbx
lea rdx, [0x1801ca568]
je 0x1800783e5
mov rdx, qword [rax + 0x10]
lea rcx, [rsp + 0xe0]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
mov qword [rsp + 0x1b0], r15
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x18007840d
call fcn.1801525f4
lea r13, vtable.WKObject.0
mov qword [rsp + 0x1b0], r13
jmp 0x180078439
lea rdx, reloc.WLDAP32.dll_Ordinal_46
lea rcx, [rsp + 0xe0]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
lea r13, vtable.WKObject.0
test rdi, rdi
je 0x180078446
mov rcx, rdi
call fcn.1801525f4
mov dword [rsp + 0x228], ebx
test rsi, rsi
je 0x18007845b
mov rcx, rsi
call fcn.1801525f4
nop
test r14, r14
je 0x180078468
mov rcx, r14
call fcn.1801525f4
mov qword [rsp + 0x130], r15
mov byte [rsp + 0x138], 0
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], r15
mov byte [rsp + 0x160], 0
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x178], rbx
mov qword [rsp + 0x180], rbx
mov byte [rsp + 0x188], 0
mov rdi, qword [rsp + 0x80]
mov r14, qword [rsp + 0x78]
nop word [rax + rax]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xd0]
call fcn.180040660
test al, al
je 0x180078593
lea rcx, [rsp + 0x230]
call fcn.180164668
sub rax, qword [rsp + 0x180]
cmp rax, 0x708
jle 0x1800784e0
mov ecx, Ordinal_41
call fcn.180152604
mov rsi, rax
mov qword [rsp + 0x238], rax
mov qword [rax], r15
mov byte [rax + 8], 0
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbx
mov rdx, qword [rsp + 0x168]
mov rcx, rax
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
cmp rdi, qword [rsp + 0x88]
jne 0x18007857f
mov rdx, qword [rsp + 0x90]
add rdx, rdi
lea rcx, [rsp + 0x78]
call sym.WebKeyAPICPPDLLx64.dll_public:_void___cdecl_WKArray_class_WKObject____ptr64____ptr64_::Grow_unsigned_long_long_unsigned___int64_____ptr64
mov rdi, qword [rsp + 0x80]
mov r14, qword [rsp + 0x78]
mov qword [r14 + rdi*8], rsi
inc rdi
mov qword [rsp + 0x80], rdi
jmp 0x1800784e0
mov rsi, rbx
test rdi, rdi
je 0x1800785c4
nop dword [rax + rax]
mov rax, qword [r14 + rsi*8]
cmp qword [rax + 0x20], 0
lea rcx, [0x1801ca568]
je 0x1800785b6
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
inc rsi
cmp rsi, rdi
jb 0x1800785a0
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x1800785d6
call fcn.1801525f4
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x1800785e9
call fcn.1801525f4
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x1800785fc
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x18007860e
call fcn.1801525f4
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x180078621
call fcn.1801525f4
nop
test rdi, rdi
je 0x180078641
mov rcx, qword [r14 + rbx*8]
test rcx, rcx
je 0x180078639
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
inc rbx
cmp rbx, rdi
jb 0x180078626
test r14, r14
je 0x18007864f
mov rcx, r14
call fcn.1801525f4
nop
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [0x1802802b8]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
inc dword [0x1802802b4]
jmp 0x180078679
lea r15, vtable.WKString.0
lea r13, vtable.WKObject.0
mov qword [r12], r15
mov rcx, qword [r12 + 0x10]
test rcx, rcx
je 0x18007868c
call fcn.1801525f4
mov qword [r12], r13
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret