Function at 0x14006520c
Capabilities:
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x330
mov rax, qword [0x1403c2018]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r14d, edx
mov r15, rcx
mov qword [rsp + 0x48], rcx
xor r12d, r12d
test rcx, rcx
je 0x140065764
lea r13d, [r12 + 7]
lea rbx, [0x1403cd1e8]
cmp qword [0x1403cd1f8], r12
jne 0x140065281
mov r8d, r13d
lea rdx, str.Install
mov rcx, rbx
call fcn.14001b664
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rbx, qword [0x1403cd1e8]
mov qword [rbp - 0x80], r12
movdqa xmm0, xmmword [0x140364f60]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov r8d, 1
lea rdx, [0x1403613ec]
lea rcx, [rbp - 0x80]
call fcn.14001b664
nop
or rsi, 0xffffffffffffffff
mov r9, rsi
inc r9
cmp word [r15 + r9*2], r12w
jne 0x1400652c5
mov r8, r15
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.14006618c
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r13
mov word [rax], r12w
mov r8, rsi
inc r8
cmp word [rbx + r8*2], r12w
jne 0x14006530b
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140019e88
mov qword [rsp + 0x20], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r13
mov word [rax], r12w
mov r8d, 5
lea rdx, [0x1402fbd90]
lea rcx, [rsp + 0x20]
call fcn.140019e88
mov qword [rbp - 0x58], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r13
mov word [rax], r12w
lea rcx, [rsp + 0x20]
call fcn.14001b814
nop
lea rcx, [rsp + 0x60]
call fcn.14001b814
nop
lea rcx, [rbp - 0x80]
call fcn.14001b814
mov qword [rsp + 0x40], rsi
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp - 0x30]
call fcn.14003a220
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rdx, qword [rbp - 0x58]
mov rcx, qword [str.84__]
mov rax, qword [rcx]
lea r8, [rbp - 0x30]
mov rax, qword [rax + 8]
call qword [str.0B__]
mov rbx, rax
mov qword [rsp + 0x40], rax
cmp rax, rsi
jne 0x140065420
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 2]
test ecx, 0xffffffee
jne 0x140065410
cmp eax, 0x13
je 0x140065410
mov edi, 1
jmp 0x140065423
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
jmp 0x140065423
mov edi, r12d
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov qword [rsp + 0x70], r12
test edi, edi
js 0x14006558d
cmp edi, 1
je 0x14006558d
lea rcx, [rbp - 0x30]
call fcn.140064f08
test al, al
jne 0x140065533
test byte [rbp - 0x30], 0x10
jne 0x140065533
mov ecx, 0x104
lea rax, [rbp - 4]
cmp word [rax], r12w
je 0x140065476
add rax, 2
sub rcx, 1
jne 0x140065466
test rcx, rcx
je 0x140065533
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov word [rsp + 0x20], r12w
lea rax, [rbp - 4]
mov r8, rsi
inc r8
cmp word [rax + r8*2], r12w
jne 0x14006549b
lea rdx, [rbp - 4]
lea rcx, [rsp + 0x20]
call fcn.14001b664
nop
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.140019c78
mov rax, qword [rbp - 0x1c]
mov qword [rbp - 0x60], rax
mov rsi, qword [rsp + 0x68]
cmp rsi, qword [rsp + 0x70]
je 0x140065509
mov qword [rsi], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.140019c78
mov rax, qword [rbp - 0x60]
mov qword [rsi + 0x20], rax
add qword [rsp + 0x68], 0x28
jmp 0x14006551b
lea r8, [rbp - 0x80]
mov rdx, rsi
lea rcx, [rsp + 0x60]
call fcn.140064468
nop
lea rcx, [rbp - 0x80]
call fcn.14001b814
nop
lea rcx, [rsp + 0x20]
call fcn.14001b814
or rsi, 0xffffffffffffffff
test edi, edi
js 0x14006558d
cmp rbx, rsi
je 0x140065588
mov rcx, qword [str.84__]
mov rax, qword [rcx]
lea r8, [rbp - 0x30]
mov rdx, rbx
mov rax, qword [rax + 0x10]
call qword [str.0B__]
test eax, eax
jne 0x140065579
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x140065581
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
jmp 0x140065431
mov edi, r12d
jmp 0x140065439
mov edi, 1
jmp 0x14006558d
mov edi, 0x8000ffff
mov qword [rsp + 0x50], r14
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
movabs rax, 0x6666666666666667
sub rcx, r8
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r14
jbe 0x140065702
mov rsi, r8
mov r13, r12
test rdx, rdx
je 0x14006562e
xor r14d, r14d
movabs r15, 0x6666666666666667
lea rdx, [rsi + 0x20]
lea rcx, [r8 + 0x20]
add rcx, r14
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
mov r8, qword [rsp + 0x60]
test eax, eax
jg 0x1400655fc
lea rsi, [r14 + r8]
mov r13, r12
inc r12
add r14, 0x28
mov rcx, qword [rsp + 0x68]
sub rcx, r8
mov rax, r15
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r12, rdx
jb 0x1400655db
mov r15, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
xor r12d, r12d
test r15, r15
je 0x14006565c
mov eax, 0x104
mov rcx, r15
cmp word [rcx], r12w
je 0x14006564e
add rcx, 2
sub rax, 1
jne 0x14006563e
neg rax
sbb eax, eax
not eax
and eax, 0x80070057
jmp 0x140065661
mov eax, 0x80070057
test eax, eax
js 0x1400656ca
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x140065672
mov r8, qword [rsi]
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.14010a9a8
nop
cmp qword [rsi + 0x18], 8
jb 0x140065689
mov rsi, qword [rsi]
mov r9, rsi
lea r8, str.Removing_old_logfile_:__ls
lea rdx, str.Logger
mov ecx, 1
call fcn.140065bb0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400656f1
lea rcx, [rbp - 0x80]
call fcn.14001b814
mov r8, qword [rsp + 0x60]
test edi, edi
js 0x140065702
lea rax, [r13*4]
add rax, r13
lea r8, [r8 + rax*8]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.1400660f8
jmp 0x140065592
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
lea rcx, [rbp - 0x80]
call fcn.14001b814
nop
lea rcx, [rsp + 0x60]
call fcn.140065dc0
nop
cmp rbx, 0xffffffffffffffff
je 0x14006572b
mov rcx, qword [str.84__]
mov rax, qword [rcx]
mov rdx, rbx
mov rax, qword [rax + 0x18]
call qword [str.0B__]
nop
lea rcx, [rbp - 0x58]
call fcn.14001b814
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140038910
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.14001b7b0
int3