Function at 0x140013720
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [rcx + 0x10]
mov r14, rcx
mov r8, qword [rcx + 8]
mov edx, 0x104
mov rcx, qword [rcx]
mov r9d, dword [rax]
mov r8, qword [r8]
mov rcx, qword [rcx]
call fcn.1400a8478
movabs rax, 0xd7a57f9fe26b5f15
movabs rsi, 0xa5b89f0b6b8c1503
mov qword [rbp - 0x40], rax
movabs r15, 0x7c7a43d5f57f66fd
movabs rax, 0x147ca74314f58e66
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x38], rax
movabs r12, 0x7f94d6a806b4fd82
movabs rax, 0xec7fcdd69a06eefd
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x30], rax
movabs r13, 0xe66fa662a0d8dcc4
movabs rax, 0x6fe662a6d8a0a1dc
mov qword [rbp - 0x10], r12
mov qword [rbp - 0x28], rax
xor ecx, ecx
mov qword [rbp - 8], r13
nop word [rax + rax]
movzx eax, word [rbp + rcx*2 - 0x40]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x40], ax
and edi, 3
jne 0x14001386e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3e], ax
and edx, 3
jne 0x1400138d0
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, 3
jne 0x1400138f9
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jne 0x140013923
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013931
cmp rcx, 4
jne 0x1400137fe
mov eax, dword [rbp - 0x36]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x36], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x3e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x3e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x3c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
movzx eax, word [rbp + rcx*2 - 0x3a]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
jmp 0x14001395b
cmp rcx, 3
jne 0x140013821
mov eax, dword [rbp - 0x36]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, ecx
jmp 0x14001390b
cmp rcx, 2
jne 0x140013845
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jmp 0x140013931
cmp rcx, 1
jne 0x140013931
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
test rdi, rdi
jne 0x14001394e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14001395b
test rcx, rcx
jne 0x14001395b
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x36]
rol ax, 8
mov word [rbp + rcx*2 - 0x36], ax
test rdx, rdx
jne 0x140013978
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013986
cmp rcx, 0xffffffffffffffff
jne 0x140013986
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x34]
rol ax, 8
mov word [rbp + rcx*2 - 0x34], ax
test r8, r8
jne 0x1400139a3
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x1400139b1
cmp rcx, 0xfffffffffffffffe
jne 0x1400139b1
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x32]
rol ax, 8
mov word [rbp + rcx*2 - 0x32], ax
test r9, r9
jne 0x1400139ce
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x1400139dc
cmp rcx, 0xfffffffffffffffd
jne 0x1400139dc
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
add rcx, 8
cmp rcx, 8
jb 0x1400137e0
movdqa xmm0, xmmword [rbp - 0x20]
xor ecx, ecx
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
nop dword [rax + rax]
movzx eax, word [rbp + rcx*2 - 0x30]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x30], ax
and edi, 3
jne 0x140013a8e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2e], ax
and edx, 3
jne 0x140013af0
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
and r8d, 3
jne 0x140013b19
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
and r9d, 3
jne 0x140013b43
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140013b51
cmp rcx, 4
jne 0x140013a1e
mov eax, dword [rbp - 0x26]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x26], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x2e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x2e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x2c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
movzx eax, word [rbp + rcx*2 - 0x2a]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
movzx eax, word [rbp + rcx*2 - 0x28]
rol ax, 8
mov word [rbp + rcx*2 - 0x28], ax
jmp 0x140013b7b
cmp rcx, 3
jne 0x140013a41
mov eax, dword [rbp - 0x26]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x2c]
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
and r8d, ecx
jmp 0x140013b2b
cmp rcx, 2
jne 0x140013a65
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x2a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
and r9d, 3
jmp 0x140013b51
cmp rcx, 1
jne 0x140013b51
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x28]
rol ax, 8
mov word [rbp + rcx*2 - 0x28], ax
test rdi, rdi
jne 0x140013b6e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140013b7b
test rcx, rcx
jne 0x140013b7b
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x26]
rol ax, 8
mov word [rbp + rcx*2 - 0x26], ax
test rdx, rdx
jne 0x140013b98
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140013ba6
cmp rcx, 0xffffffffffffffff
jne 0x140013ba6
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x24]
rol ax, 8
mov word [rbp + rcx*2 - 0x24], ax
test r8, r8
jne 0x140013bc3
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140013bd1
cmp rcx, 0xfffffffffffffffe
jne 0x140013bd1
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x22]
rol ax, 8
mov word [rbp + rcx*2 - 0x22], ax
test r9, r9
jne 0x140013bee
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x140013bfc
cmp rcx, 0xfffffffffffffffd
jne 0x140013bfc
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
add rcx, 8
cmp rcx, 8
jb 0x140013a00
movdqa xmm0, xmmword [rbp - 0x30]
lea r8, [rbp - 0x40]
mov rcx, qword [r14]
mov r9d, select
pxor xmm0, xmmword [rbp - 0x10]
mov edx, 0x104
movdqa xmmword [rbp - 0x30], xmm0
mov rcx, qword [rcx]
call fcn.1400a8378
mov rax, qword [r14 + 0x10]
mov edx, 0x104
mov r8, qword [r14 + 8]
mov rcx, qword [r14 + 0x18]
mov r9d, dword [rax]
mov r8, qword [r8]
mov rcx, qword [rcx]
call fcn.1400a8478
movabs rax, 0xd7a57f9fe26b5f15
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x40], rax
xor ecx, ecx
movabs rax, 0x147ca74314f58e66
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x38], rax
movabs rax, 0xec7fcdd69a06b3fd
mov qword [rbp - 0x30], rax
movabs rax, 0x6fe662a6d8a0a1dc
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r13
nop dword [rax]
movzx eax, word [rbp + rcx*2 - 0x40]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x40], ax
and edi, 3
jne 0x140013d2e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3e], ax
and edx, 3
jne 0x140013d90
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, 3
jne 0x140013db9
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jne 0x140013de3
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013df1
cmp rcx, 4
jne 0x140013cbe
mov eax, dword [rbp - 0x36]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x36], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x3e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x3e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x3c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
movzx eax, word [rbp + rcx*2 - 0x3a]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
jmp 0x140013e1b
cmp rcx, 3
jne 0x140013ce1
mov eax, dword [rbp - 0x36]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, ecx
jmp 0x140013dcb
cmp rcx, 2
jne 0x140013d05
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jmp 0x140013df1
cmp rcx, 1
jne 0x140013df1
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
test rdi, rdi
jne 0x140013e0e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013e1b
test rcx, rcx
jne 0x140013e1b
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x36]
rol ax, 8
mov word [rbp + rcx*2 - 0x36], ax
test rdx, rdx
jne 0x140013e38
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013e46
cmp rcx, 0xffffffffffffffff
jne 0x140013e46
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x34]
rol ax, 8
mov word [rbp + rcx*2 - 0x34], ax
test r8, r8
jne 0x140013e63
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013e71
cmp rcx, 0xfffffffffffffffe
jne 0x140013e71
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x32]
rol ax, 8
mov word [rbp + rcx*2 - 0x32], ax
test r9, r9
jne 0x140013e8e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x140013e9c
cmp rcx, 0xfffffffffffffffd
jne 0x140013e9c
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
add rcx, 8
cmp rcx, 8
jb 0x140013ca0
movdqa xmm0, xmmword [rbp - 0x20]
xor eax, eax
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
nop dword [rax + rax]
movzx ecx, word [rbp + rax*2 - 0x30]
mov rdi, rax
rol cx, 8
mov word [rbp + rax*2 - 0x30], cx
and edi, 3
jne 0x140013f4e
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
movzx ecx, word [rbp + rax*2 - 0x2e]
lea rdx, [rax + 1]
rol cx, 8
mov word [rbp + rax*2 - 0x2e], cx
and edx, 3
jne 0x140013fb0
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
movzx ecx, word [rbp + rax*2 - 0x2c]
lea r8, [rax - 2]
rol cx, 8
mov word [rbp + rax*2 - 0x2c], cx
and r8d, 3
jne 0x140013fd9
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
movzx ecx, word [rbp + rax*2 - 0x2a]
lea r9, [rax - 1]
rol cx, 8
mov word [rbp + rax*2 - 0x2a], cx
and r9d, 3
jne 0x140014003
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014011
cmp rax, 4
jne 0x140013ede
mov ecx, dword [rbp - 0x26]
lea rdx, [rax + 1]
bswap ecx
mov dword [rbp - 0x26], ecx
lea r8, [rax - 2]
movzx ecx, word [rbp + rax*2 - 0x2e]
lea r9, [rax - 1]
rol cx, 8
and edx, 3
mov word [rbp + rax*2 - 0x2e], cx
and r8d, 3
movzx ecx, word [rbp + rax*2 - 0x2c]
and r9d, 3
rol cx, 8
mov word [rbp + rax*2 - 0x2c], cx
movzx ecx, word [rbp + rax*2 - 0x2a]
rol cx, 8
mov word [rbp + rax*2 - 0x2a], cx
movzx ecx, word [rbp + rax*2 - 0x28]
rol cx, 8
mov word [rbp + rax*2 - 0x28], cx
jmp 0x14001403b
cmp rax, 3
jne 0x140013f01
mov ecx, dword [rbp - 0x26]
lea r8, [rax - 2]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x2c]
rol cx, 8
mov word [rbp + rax*2 - 0x2c], cx
and r8d, eax
jmp 0x140013feb
cmp rax, 2
jne 0x140013f25
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x2a]
lea r9, [rax - 1]
rol cx, 8
mov word [rbp + rax*2 - 0x2a], cx
and r9d, 3
jmp 0x140014011
cmp rax, 1
jne 0x140014011
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x28]
rol cx, 8
mov word [rbp + rax*2 - 0x28], cx
test rdi, rdi
jne 0x14001402e
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x14001403b
test rax, rax
jne 0x14001403b
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x26]
rol cx, 8
mov word [rbp + rax*2 - 0x26], cx
test rdx, rdx
jne 0x140014058
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014066
cmp rax, 0xffffffffffffffff
jne 0x140014066
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x24]
rol cx, 8
mov word [rbp + rax*2 - 0x24], cx
test r8, r8
jne 0x140014083
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x140014091
cmp rax, 0xfffffffffffffffe
jne 0x140014091
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
movzx ecx, word [rbp + rax*2 - 0x22]
rol cx, 8
mov word [rbp + rax*2 - 0x22], cx
test r9, r9
jne 0x1400140ae
mov ecx, dword [rbp - 0x2e]
bswap ecx
mov dword [rbp - 0x2e], ecx
jmp 0x1400140bc
cmp rax, 0xfffffffffffffffd
jne 0x1400140bc
mov ecx, dword [rbp - 0x26]
bswap ecx
mov dword [rbp - 0x26], ecx
add rax, 8
cmp rax, 8
jb 0x140013ec0
movdqa xmm0, xmmword [rbp - 0x30]
lea r8, [rbp - 0x40]
mov rcx, qword [r14 + 0x18]
mov r9d, select
pxor xmm0, xmmword [rbp - 0x10]
mov edx, 0x104
movdqa xmmword [rbp - 0x30], xmm0
mov rcx, qword [rcx]
call fcn.1400a8378
mov rax, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov edx, 0x81
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov rsi, qword [rax]
lea r8d, [r9 + 1]
mov rax, qword [r14 + 0x18]
mov rdi, qword [rax]
mov rax, qword [r14 + 0x20]
mov rcx, rdi
mov rbx, qword [rax]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rdx, [rax - 1]
cmp rdx, 0xfffffffffffffffd
ja 0x14001415e
mov rcx, rax
call qword [sym.imp.ntdll.dll_NtClose]
mov rcx, rdi
call fcn.140002de0
test eax, eax
jne 0x14001418f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, rsi
call fcn.140002de0
test eax, eax
jne 0x14001416e
or qword [rbx], 0x40
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rsi
call fcn.140002de0
test eax, eax
je 0x1400141a6
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x14001416e
or qword [rbx], 8
jmp 0x14001416e