Function at 0x1800058fc
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov ecx, 0xf00
xor edi, edi
call fcn.180015180
test rax, rax
mov rbx, rax
je 0x180005a1a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
or r8d, 0xffffffff
mov rdx, rbx
lea ecx, [rax - 1]
mov dword [rsp + 0x60], eax
mov byte [rcx + rbx], dil
mov esi, ecx
lea rcx, [0x180036aef]
call fcn.180008c84
test eax, eax
jne 0x180005a08
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x70]
mov rcx, rbx
mov byte [rsi + rbx], 0x31
call fcn.180004c10
test eax, eax
jne 0x1800059ff
mov rbp, qword [rsp + 0x70]
mov edx, dword [rsp + 0x60]
lea r9, [rsp + 0x68]
lea r8, [0x1800370ad]
mov rcx, rbp
call fcn.18002a9a8
test rax, rax
je 0x1800059ed
mov edx, dword [rsp + 0x60]
mov rsi, rax
sub eax, ebp
add eax, dword [rsp + 0x68]
lea r9, [rsp + 0x68]
lea r8, [0x1800370ad]
mov ecx, eax
sub edx, eax
add rcx, rbp
call fcn.18002a9a8
test rax, rax
jne 0x180005999
test rsi, rsi
je 0x1800059ed
mov eax, dword [rsp + 0x68]
lea rdx, str._s:_r
mov rcx, rsi
mov byte [rax + rsi], dil
call qword [sym.imp.SHLWAPI.dll_StrTrimA]
xor edx, edx
mov rcx, rsi
call fcn.180017b98
mov rdi, rax
mov rcx, qword [0x1800339a8]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [0x1800339a8]
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rdi, rdi
je 0x180005a48
mov rcx, rdi
call fcn.18000bc88
test eax, eax
jne 0x180005a3f
mov rcx, qword [0x1800339a8]
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edi, edi
test rdi, rdi
jne 0x180005c16
mov r12, qword [0x1800339e0]
test r12, r12
je 0x180005c16
movsxd r15, dword [r12 + 8]
mov ebp, r15d
mov r14, r15
mov rcx, qword [r12]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
mov rcx, qword [rcx + r14*8]
xor r9d, r9d
call fcn.180017260
test eax, eax
jne 0x180005be0
mov rax, qword [rsp + 0x68]
mov dx, 0x2e
xor edi, edi
mov rcx, rax
mov qword [rsp + 0x60], rax
xor esi, esi
mov r13, rax
call qword [sym.imp.SHLWAPI.dll_StrChrA]
test rax, rax
mov r11, rax
je 0x180005ba7
mov ebx, r11d
mov r9d, 3
sub ebx, r13d
lea r13, [r11 + 1]
je 0x180005aca
test esi, esi
je 0x180005ad4
cmp ebx, r9d
jbe 0x180005adb
xor esi, esi
test ebx, ebx
je 0x180005b56
cmp ebx, r9d
cmova ebx, r9d
xor ecx, ecx
lea rdx, [r11 - 1]
mov r10b, 0x30
mov al, byte [rdx]
sub al, r10b
cmp al, 9
ja 0x180005af9
add ecx, 1
sub rdx, 1
add ebx, 0xffffffff
jne 0x180005ae4
test ecx, ecx
je 0x180005b05
test esi, esi
je 0x180005b0f
test ebx, ebx
je 0x180005b0b
xor esi, esi
test ecx, ecx
je 0x180005b56
test esi, esi
jne 0x180005b1f
movsxd rax, ecx
mov r8, r11
sub r8, rax
mov qword [rsp + 0x60], r8
jmp 0x180005b24
mov r8, qword [rsp + 0x60]
add esi, 1
cmp esi, r9d
jne 0x180005b56
mov al, byte [r13]
xor ecx, ecx
cmp al, r10b
jl 0x180005b54
mov rdx, r13
cmp al, 0x39
jg 0x180005b4c
add rdx, 1
add ecx, 1
mov al, byte [rdx]
cmp al, r10b
jge 0x180005b3a
test ecx, ecx
jne 0x180005bfd
xor esi, esi
mov dx, 0x2e
mov rcx, r13
call qword [sym.imp.SHLWAPI.dll_StrChrA]
test rax, rax
mov r11, rax
jne 0x180005aaf
lea r9d, [rax + 3]
cmp esi, r9d
jne 0x180005ba7
mov rcx, qword [0x1800339a8]
lea r8d, [rbx + 1]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
mov rdi, rax
je 0x180005ba7
mov rdx, qword [rsp + 0x60]
mov r8, rbx
mov rcx, rax
call sub.ntdll.dll_memcpy
mov byte [rbx + rdi], 0
mov r8, qword [rsp + 0x68]
mov rcx, qword [0x1800339a8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rdi, rdi
je 0x180005be0
mov rcx, rdi
call fcn.18000bc88
test eax, eax
jne 0x180005c11
mov rcx, qword [0x1800339a8]
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edi, edi
add ebp, 1
add r14, 1
cmp ebp, dword [r12 + 0xc]
jne 0x180005bf3
xor ebp, ebp
xor r14d, r14d
cmp ebp, r15d
je 0x180005c16
jmp 0x180005a63
cmp ecx, r9d
mov ebx, r13d
cmovg ecx, r9d
sub ebx, r8d
add ebx, ecx
jmp 0x180005b73
mov dword [r12 + 8], ebp
mov rax, rdi
mov rbx, qword [rsp + 0x78]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret