Function at 0x1400137b0
Capabilities:
Delete file

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x40
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rbp
movzx edi, r9b
mov r13, r8
mov r14, rdx
mov rsi, rcx
call fcn.14003f3fc
mov rbp, qword [rax + 8]
cmp byte [rbp + 0x27d], 0
jne 0x140013802
mov rcx, qword [rsi + 0x50]
cmp dword [rcx - 0x10], 0
je 0x140013802
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test dil, dil
je 0x140013821
lea rcx, [rbp + 0x1a0]
lea r8, str._big.dmp
lea rdx, str..dmp
call fcn.1400169b0
lea rax, [0x140208520]
lea rdx, str.Normal
test dil, dil
cmovne rdx, rax
or rbx, 0xffffffffffffffff
xor r12d, r12d
test rdx, rdx
jne 0x140013847
mov ecx, r12d
jmp 0x140013858
xor eax, eax
mov rcx, rbx
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
lea rcx, [rsi + 0x68]
call fcn.1400016b0
call fcn.14002dca4
mov rdx, rax
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
jne 0x140013884
mov ecx, 0x80004005
call fcn.140001900
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
call fcn.14002dca4
mov rdx, rax
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400138b6
mov ecx, 0x80004005
call fcn.140001900
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x20], rax
call fcn.14002dca4
mov rcx, rax
test rax, rax
setne r12b
test r12d, r12d
jne 0x1400138e7
mov ecx, 0x80004005
call fcn.140001900
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.140012d90
test al, al
jne 0x140013978
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140013931
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140013951
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
dec ebx
test ebx, ebx
jg 0x14001396e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 0x80004005
jmp 0x140013a7d
cmp byte [rbp + 0x27e], 0
je 0x1400139d0
mov rcx, rsi
call fcn.140013aa0
mov edi, eax
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1400139ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400139cb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140013a5e
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.1400209e0
nop
mov rax, qword [rax]
mov rcx, rsi
cmp dword [rax - 0x10], 0
jne 0x1400139f1
call fcn.140013aa0
jmp 0x1400139fc
mov r8, r13
mov rdx, r14
call fcn.140013ff0
mov edi, eax
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140013a1e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140013a3e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140013a5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
dec ebx
test ebx, ebx
jg 0x140013a7b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, edi
mov rbx, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x80]
add rsp, 0x40
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret