Function at 0x140001d7a
Capabilities:
Delete file

Disassembly:
jmp 0x140019680
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0x200
mov rdi, rsp
mov ecx, 0x80
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x210]
mov qword [rsp + 0x1c8], 0xfffffffffffffffe
lea rcx, [0x1401e3360]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14000190b
nop
call fcn.140001334
mov ecx, 0x8007
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x1401e3368]
call fcn.140001cf8
cmp dword [rsp + 0x210], 1
jne 0x1400197c0
lea rcx, [rsp + 0x68]
call fcn.1400019ab
nop
lea rcx, [rsp + 0x88]
call fcn.140002018
nop
lea rcx, [rsp + 0x68]
call fcn.140001889
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1400012d5
lea rcx, [rsp + 0x88]
call fcn.1400020a9
test eax, eax
jl 0x14001974b
mov dword [rsp + 0x1d0], 1
jmp 0x140019756
mov dword [rsp + 0x1d0], 0
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0
jne 0x14001979d
mov edx, 0x80004005
lea rcx, [rsp + 0x1a8]
call fcn.14000159b
mov eax, dword [rax]
mov dword [rsp + 0x1a4], eax
lea rdx, [0x1401db250]
lea rcx, [rsp + 0x1a4]
call fcn.1400a1400
xor eax, eax
test eax, eax
jne 0x14001972d
lea rcx, [rsp + 0x88]
call fcn.14000208b
nop
lea rcx, [rsp + 0x68]
call fcn.140001217
jmp 0x140019aa0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e3378]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.140002310
movzx eax, al
test eax, eax
je 0x140019840
lea rcx, [0x1401e3380]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.1400023ba
nop
mov dword [rsp + 0x20], 2
lea r9, [0x1401e3390]
lea r8, [0x1401e33a0]
mov dl, 1
lea rcx, [rsp + 0xc8]
call fcn.1400022fc
nop
lea rcx, [rsp + 0xc8]
call fcn.140002379
jmp 0x140019aa0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e33b0]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.140002310
movzx eax, al
test eax, eax
je 0x140019958
lea rcx, [0x1401e3380]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.1400023ba
nop
mov r8d, 0x9e
mov dl, 1
lea rcx, [rsp + 0xf8]
call fcn.140001550
lea rcx, [rsp + 0x38]
call fcn.14000187f
call fcn.1400018c5
lea r8, [0x14016e46c]
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.140001113
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1e0], rax
lea r8, [0x1401e3360]
mov rdx, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x1b8]
call fcn.140001d02
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f0], rax
mov rcx, qword [rsp + 0x1f0]
call fcn.14000110e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x1b8]
call fcn.14000119a
nop
lea rcx, [rsp + 0x1b0]
call fcn.14000119a
nop
lea rcx, [rsp + 0xf8]
call fcn.140002379
jmp 0x140019aa0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e33b8]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.140002310
movzx eax, al
test eax, eax
je 0x1400199c8
lea rcx, [0x1401e3380]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1400023ba
nop
xor r9d, r9d
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x128]
call fcn.1400016e5
nop
lea rcx, [rsp + 0x128]
call fcn.140002379
jmp 0x140019aa0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e33c0]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.140002310
movzx eax, al
test eax, eax
je 0x140019a35
lea rcx, [0x1401e3380]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.1400023ba
nop
mov r8d, 0x9e
mov dl, 1
lea rcx, [rsp + 0x158]
call fcn.140001f7d
nop
lea rcx, [rsp + 0x158]
call fcn.140002379
jmp 0x140019aa0
mov eax, 8
imul rax, rax, 1
lea rdx, [0x1401e33c8]
mov rcx, qword [rsp + 0x218]
mov rcx, qword [rcx + rax]
call fcn.140002310
movzx eax, al
test eax, eax
je 0x140019aa0
lea rcx, [0x1401e3380]
call fcn.14000110e
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.1400023ba
nop
mov r8d, 0x9e
mov dl, 1
lea rcx, [rsp + 0x188]
call fcn.1400015dc
nop
lea rcx, [rsp + 0x188]
call fcn.140002379
mov dword [rsp + 0x1c0], 0
lea rcx, [rsp + 0x38]
call fcn.140001046
mov eax, dword [rsp + 0x1c0]
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1401731f8]
call fcn.14009d1e0
mov rax, rdi
add rsp, 0x200
pop rdi
ret