Function at 0x14000cad0
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
mov qword [rbp - 0x61], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1400f7080]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov ebx, edx
xor r14d, r14d
mov dword [rsp + 0x24], r14d
mov rax, qword [rcx + 0x60]
mov qword [rbp - 0x29], r14
mov r12d, 7
mov word [rbp - 0x39], r14w
mov qword [rbp - 0x21], r12
test rax, rax
jne 0x14000cb34
lea esi, [rax + 1]
jmp 0x14000cb5b
lea rdx, [rcx + 0x50]
lea r8, [rax - 0xb]
cmp rax, r8
cmovb r8, rax
cmp qword [rdx + 0x18], 8
jb 0x14000cb4d
mov rdx, qword [rdx]
lea rcx, [rbp - 0x39]
call fcn.140002160
mov esi, 3
mov edi, esi
mov qword [rbp - 9], r14
mov qword [rbp - 1], r12
mov word [rbp - 0x19], r14w
sub ebx, 1
je 0x14000cee4
cmp ebx, 1
jne 0x14000cee4
lea r8d, [rbx + 7]
lea rdx, str.programs
lea rcx, [rbp - 0x19]
call fcn.140002160
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r14
movdqa xmm0, xmmword [0x1400e5d00]
movdqu xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x59], r14w
or esi, 4
mov dword [rsp + 0x24], esi
mov rbx, qword [rbp - 9]
lea rdx, [rbx + 9]
lea rcx, [rbp - 0x59]
call fcn.140009b70
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, rbx
lea rcx, [rbp - 0x59]
call fcn.140009600
mov r8d, 9
lea rdx, [0x1400da308]
lea rcx, [rbp - 0x59]
call fcn.140009600
mov r8d, 3
lea rdx, [0x1400da2c0]
lea rcx, [rbp - 0x59]
call fcn.140009600
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r12
mov word [rax], r14w
or edi, 0xc
and edi, 0xfffffffb
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x14000cc6d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf97
call fcn.1400a508c
movdqa xmm0, xmmword [0x1400e5d00]
movdqu xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x59], r14w
lea r8, [rbp - 0x79]
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.140009440
mov rsi, qword [rbp - 0x71]
mov rbx, rsi
mov r15, qword [rbp - 0x79]
sub rbx, r15
sar rbx, 5
movzx r9d, byte [rsp + 0x20]
mov r8, rbx
mov rdx, rsi
mov rcx, r15
call fcn.14000ebe0
cmp rbx, 4
jbe 0x14000ce50
lea r13, [r15 + 0x20]
xor ecx, ecx
nop word [rax + rax]
mov r14d, edi
mov dword [rsp + 0x28], edi
mov qword [rbp - 0x49], rcx
mov qword [rbp - 0x41], r12
mov word [rbp - 0x59], cx
or edi, 0x10
mov dword [rsp + 0x24], edi
mov rdx, qword [r15 + 0x10]
add rdx, qword [rbp - 0x29]
lea rcx, [rbp - 0x59]
call fcn.140009b70
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rdx, qword [rbp - 0x39]
mov r8, qword [rbp - 0x29]
lea rcx, [rbp - 0x59]
call fcn.140009600
mov rdx, r15
mov rbx, r15
cmp qword [r15 + 0x18], 8
jb 0x14000cd26
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
lea rcx, [rbp - 0x59]
call fcn.140009600
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14000cd51
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp r13, rsi
je 0x14000cda3
mov r14, r13
sub r14, r15
xor r13d, r13d
nop
lea rdi, [r14 + rbx]
cmp rbx, rdi
je 0x14000cd8d
mov rcx, rbx
call fcn.1400020f0
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [r14 + rbx + 0x10], r13
mov qword [r14 + rbx + 0x18], r12
mov word [rdi], r13w
add rbx, 0x20
lea rax, [r14 + rbx]
cmp rax, rsi
jne 0x14000cd60
lea r13, [r15 + 0x20]
mov r14d, dword [rsp + 0x28]
add rsi, 0xffffffffffffffe0
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14000cde6
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000cde1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000cfa3
mov rcx, r8
call fcn.1400a508c
xor ecx, ecx
mov qword [rsi + 0x10], rcx
mov qword [rsi + 0x18], r12
mov word [rsi], cx
mov qword [rbp - 0x71], rsi
mov edi, r14d
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x14000ce3c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfa9
call fcn.1400a508c
xor ecx, ecx
mov rax, rsi
sub rax, r15
sar rax, 5
cmp rax, 4
ja 0x14000ccd0
mov ebx, 0x30000
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x14000ce96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf9d
call fcn.1400a508c
nop
test r15, r15
je 0x14000cede
mov rdx, rsi
mov rcx, r15
call fcn.1400056e0
mov rdx, qword [rbp - 0x69]
sub rdx, r15
and rdx, 0xffffffffffffffe0
mov rax, r15
cmp rdx, 0x1000
jb 0x14000ced6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfaf
mov rcx, r15
call fcn.1400a508c
mov r12, qword [rbp - 1]
jmp 0x14000cee9
mov ebx, 0xc0030004
cmp r12, 8
jb 0x14000cf26
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfb5
call fcn.1400a508c
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x14000cf62
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf91
call fcn.1400a508c
mov eax, ebx
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400a4a60
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400a8f10
nop
call fcn.1400a8f10
nop
call fcn.1400a8f10
nop
call fcn.1400a8f10
nop
call fcn.1400a8f10
nop
call fcn.1400a8f10
nop
call fcn.1400a8f10
int3