Function at 0x1400ebcf0
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x408
mov rax, qword [0x140165340]
xor rax, rsp
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x30], 0
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x410]
call fcn.1400b76c0
movzx eax, al
test eax, eax
je 0x1400ec87d
xor r8d, r8d
xor edx, edx
mov ecx, 2
call fcn.140099c90
vmovss xmm1, dword [0x1401547e0]
mov ecx, 1
call fcn.140098890
vmovss xmm0, dword [0x1401547dc]
call fcn.140060700
lea rdx, [0x140185ba0]
lea rcx, [rsp + 0x330]
call fcn.14002d520
nop
mov eax, 8
mov eax, eax
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx]
mov eax, dword [rax + rcx]
cmp dword [0x140185ce8], eax
jle 0x1400ebdde
lea rcx, [0x140185ce8]
call fcn.14011da18
cmp dword [0x140185ce8], 0xffffffff
jne 0x1400ebdde
mov edx, 0x18
lea rcx, [0x140185cd0]
call fcn.140006ee0
lea rcx, [0x140185cd0]
call fcn.14002c1d0
lea rcx, [0x140127a50]
call fcn.14011de6c
lea rcx, [0x140185ce8]
call fcn.14011d9b8
mov edx, 0x18
lea rcx, [rsp + 0x308]
call fcn.140006ee0
lea rcx, [rsp + 0x308]
call fcn.14002c1d0
nop
lea rcx, [0x140185cd0]
call fcn.1400ed130
xor r8d, r8d
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0x1a8]
call fcn.14003d980
nop
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x320]
call fcn.1400ead60
nop
lea rax, [rsp + 0x320]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1a8]
call fcn.14003b860
mov edx, 0x10
lea rcx, [rsp + 0x2e8]
call fcn.140006ee0
lea rax, [rsp + 0x228]
mov qword [rsp + 0x68], rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x68]
call fcn.1400ebcb0
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x2e8]
call fcn.1400eae70
nop
mov edx, 0x10
lea rcx, [rsp + 0x2f8]
call fcn.140006ee0
lea rax, [rsp + 0x238]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x78]
call fcn.1400ebcb0
mov qword [rsp + 0x80], rax
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x2f8]
call fcn.1400eaf10
nop
jmp 0x1400ebef4
lea rcx, [rsp + 0x2e8]
call fcn.1400eade0
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x2e8]
call fcn.1400eae20
movzx eax, al
test eax, eax
je 0x1400ec0c8
lea rcx, [rsp + 0x2e8]
call fcn.1400eadc0
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
call fcn.1400ea680
movzx eax, al
test eax, eax
je 0x1400ebfbe
xor r8d, r8d
lea rdx, [0x14014d2b0]
lea rcx, [rsp + 0x1c8]
call fcn.1400edf40
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x50]
call fcn.1400ea670
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0x88]
call fcn.1400ea230
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x30]
or eax, 2
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x1c8]
mov rcx, qword [rsp + 0x90]
call fcn.1400ea3a0
movzx eax, al
test eax, eax
je 0x1400ebfbe
mov dword [rsp + 0x38], 1
jmp 0x1400ebfc6
mov dword [rsp + 0x38], 0
movzx eax, byte [rsp + 0x38]
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
and eax, 2
test eax, eax
je 0x1400ebfed
and dword [rsp + 0x30], 0xfffffffd
lea rcx, [rsp + 0x268]
call fcn.14003b860
nop
mov eax, dword [rsp + 0x30]
and eax, 1
test eax, eax
je 0x1400ec00a
and dword [rsp + 0x30], 0xfffffffe
lea rcx, [rsp + 0x1c8]
call fcn.14003b860
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x1400ec0c3
mov rcx, qword [rsp + 0x50]
call fcn.1400ea670
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x2a8]
mov rcx, qword [rsp + 0x98]
call fcn.1400ea1a0
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x288]
mov rcx, qword [rsp + 0xb0]
call fcn.1400e9e30
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xc0], rax
mov rdx, qword [rsp + 0xc0]
lea rcx, [0x140185cd0]
call fcn.1400ed2b0
nop
lea rcx, [rsp + 0x288]
call fcn.140007940
nop
lea rcx, [rsp + 0x2a8]
call fcn.14003b860
jmp 0x1400ebee7
lea rcx, [rsp + 0x2f8]
call fcn.1400eaeb0
nop
lea rcx, [rsp + 0x2e8]
call fcn.1400eaeb0
nop
lea rcx, [rsp + 0x320]
call fcn.1400eaeb0
lea rax, [0x140185cd0]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.140007d60
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x60]
call fcn.140007d50
mov qword [rsp + 0xc8], rax
jmp 0x1400ec12e
mov rax, qword [rsp + 0x40]
add rax, 0x20
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xc8]
cmp qword [rsp + 0x40], rax
je 0x1400ec176
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xd0], rax
mov rcx, qword [rsp + 0xd0]
call fcn.14002d3b0
mov qword [rsp + 0xd8], rax
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x308]
call fcn.1400ed070
jmp 0x1400ec120
lea rcx, [rsp + 0x308]
call fcn.14003f4a0
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x308]
call fcn.1400ed050
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x20], 0xffffffff
mov r9d, dword [rsp + 0x48]
mov r8, qword [rsp + 0xe0]
lea rdx, [0x140182540]
lea rcx, str.ConfigFiles
call fcn.1400b4480
call fcn.1400993f0
vmovss xmm0, dword [0x1401547b4]
call fcn.140060700
vmovss xmm2, dword [0x140154754]
vmovss xmm1, dword [0x1401547b4]
lea rcx, [rsp + 0xe8]
call fcn.14000ad60
lea rdx, [rsp + 0xe8]
lea rcx, [0x14014d290]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec281
cmp dword [0x140182540], 0
jl 0x1400ec281
movsxd rax, dword [0x140182540]
mov qword [rsp + 0xf0], rax
lea rcx, [0x140185cd0]
call fcn.1400e7db0
mov rcx, qword [rsp + 0xf0]
cmp rcx, rax
jae 0x1400ec281
movsxd rax, dword [0x140182540]
mov rdx, rax
lea rcx, [0x140185cd0]
call fcn.1400ed0a0
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.14002d520
nop
lea rcx, [rsp + 0x350]
call fcn.1400f50a0
nop
lea rcx, [rsp + 0x350]
call fcn.140007940
vmovss xmm2, dword [0x140154754]
vmovss xmm1, dword [0x1401547b4]
lea rcx, [rsp + 0xf8]
call fcn.14000ad60
lea rdx, [rsp + 0xf8]
lea rcx, [0x14014d2a0]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec35f
cmp dword [0x140182540], 0
jl 0x1400ec35f
movsxd rax, dword [0x140182540]
mov qword [rsp + 0x100], rax
lea rcx, [0x140185cd0]
call fcn.1400e7db0
mov rcx, qword [rsp + 0x100]
cmp rcx, rax
jae 0x1400ec35f
movsxd rax, dword [0x140182540]
mov rdx, rax
lea rcx, [0x140185cd0]
call fcn.1400ed0a0
mov rdx, rax
lea rcx, [rsp + 0x370]
call fcn.14002d520
nop
lea rdx, [0x14012b5ef]
lea rcx, [rsp + 0x1e8]
call fcn.140007970
nop
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x370]
call fcn.1400f1430
nop
lea rcx, [rsp + 0x1e8]
call fcn.140007940
nop
lea rcx, [rsp + 0x370]
call fcn.140007940
vmovss xmm2, dword [0x140154754]
vmovss xmm1, dword [0x1401547b4]
lea rcx, [rsp + 0x108]
call fcn.14000ad60
lea rdx, [rsp + 0x108]
lea rcx, [0x14014d2e8]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec3d6
cmp dword [0x140182540], 0
jl 0x1400ec3d6
movsxd rax, dword [0x140182540]
mov qword [rsp + 0x110], rax
lea rcx, [0x140185cd0]
call fcn.1400e7db0
mov rcx, qword [rsp + 0x110]
cmp rcx, rax
jae 0x1400ec3d6
xor edx, edx
lea rcx, [0x14014d2c8]
call fcn.1400624f0
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140062db0
movzx eax, al
test eax, eax
je 0x1400ec5be
xor edx, edx
lea rcx, [0x14014d2f8]
call fcn.14009aac0
vxorps xmm2, xmm2, xmm2
vmovss xmm1, dword [0x140154778]
lea rcx, [rsp + 0x118]
call fcn.14000ad60
lea rdx, [rsp + 0x118]
lea rcx, [0x14013137c]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec436
call fcn.140062b10
vmovss xmm1, dword [0x14015489c]
vxorps xmm0, xmm0, xmm0
call fcn.140060290
vxorps xmm2, xmm2, xmm2
vmovss xmm1, dword [0x140154778]
lea rcx, [rsp + 0x120]
call fcn.14000ad60
lea rdx, [rsp + 0x120]
lea rcx, [0x14013133c]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec5b9
movsxd rax, dword [0x140182540]
mov rdx, rax
lea rcx, [0x140185cd0]
call fcn.1400ed0a0
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.14002d520
nop
lea r8, [0x14013135c]
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0x2c8]
call fcn.140039460
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x130], rax
lea r8, [rsp + 0x390]
mov rdx, qword [rsp + 0x130]
lea rcx, [rsp + 0x3d0]
call fcn.1400ed850
nop
lea rcx, [rsp + 0x2c8]
call fcn.140007940
lea rcx, [rsp + 0x3d0]
call fcn.14002d3b0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x1400ec598
lea rdx, [rsp + 0x190]
lea rcx, [0x140185cd0]
call fcn.1400ed0d0
mov qword [rsp + 0x140], rax
movsxd rax, dword [0x140182540]
mov qword [rsp + 0x138], rax
mov r8, qword [rsp + 0x138]
lea rdx, [rsp + 0x198]
mov rcx, qword [rsp + 0x140]
call fcn.1400ed000
mov rax, qword [rax]
mov qword [rsp + 0x148], rax
mov r8, qword [rsp + 0x148]
lea rdx, [rsp + 0x1a0]
lea rcx, [0x140185cd0]
call fcn.1400ed1d0
mov dword [0x140182540], 0xffffffff
call fcn.140062b10
nop
lea rcx, [rsp + 0x3d0]
call fcn.140007940
nop
lea rcx, [rsp + 0x390]
call fcn.140007940
call fcn.140062e40
vmovss xmm2, dword [0x140154754]
vmovss xmm1, dword [0x1401547b4]
lea rcx, [rsp + 0x150]
call fcn.14000ad60
lea rdx, [rsp + 0x150]
lea rcx, [0x14014d328]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec604
xor edx, edx
lea rcx, str.reallyReset
call fcn.1400624f0
xor edx, edx
lea rcx, [0x14014d308]
call fcn.140062db0
movzx eax, al
test eax, eax
je 0x1400ec6b8
xor edx, edx
lea rcx, str.Are_you_sure_
call fcn.14009aac0
vxorps xmm2, xmm2, xmm2
vmovss xmm1, dword [0x140154778]
lea rcx, [rsp + 0x158]
call fcn.14000ad60
lea rdx, [rsp + 0x158]
lea rcx, [0x1401313cc]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec664
call fcn.140062b10
vmovss xmm1, dword [0x14015489c]
vxorps xmm0, xmm0, xmm0
call fcn.140060290
vxorps xmm2, xmm2, xmm2
vmovss xmm1, dword [0x140154778]
lea rcx, [rsp + 0x160]
call fcn.14000ad60
lea rdx, [rsp + 0x160]
lea rcx, [0x1401313dc]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec6b3
call fcn.1400ec8a0
call fcn.140062b10
call fcn.140062e40
mov r8b, 1
xor edx, edx
mov ecx, 1
call fcn.140099c90
lea rcx, [0x14014d348]
call fcn.14009f750
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x80
lea rdx, str.NewConfig
lea rcx, [0x1401313b4]
call fcn.1400a3d90
vmovss xmm1, dword [0x14015489c]
vxorps xmm0, xmm0, xmm0
call fcn.140060290
vmovss xmm2, dword [0x140154754]
vmovss xmm1, dword [0x1401547b4]
lea rcx, [rsp + 0x168]
call fcn.14000ad60
lea rdx, [rsp + 0x168]
lea rcx, [0x14014d368]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec7ea
lea rdx, str.NewConfig
lea rcx, [rsp + 0x248]
call fcn.140007970
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x178], rax
lea r8, str..yml
mov rdx, qword [rsp + 0x178]
lea rcx, [rsp + 0x3b0]
call fcn.1400ed800
nop
lea rcx, [rsp + 0x248]
call fcn.140007940
lea rdx, [0x14012b5f6]
lea rcx, [rsp + 0x208]
call fcn.140007970
nop
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x3b0]
call fcn.1400f1430
nop
lea rcx, [rsp + 0x208]
call fcn.140007940
nop
lea rcx, [rsp + 0x3b0]
call fcn.140007940
vmovss xmm1, dword [0x14015489c]
vxorps xmm0, xmm0, xmm0
call fcn.140060290
vmovss xmm2, dword [0x140154754]
vmovss xmm1, dword [0x1401547b4]
lea rcx, [rsp + 0x180]
call fcn.14000ad60
lea rdx, [rsp + 0x180]
lea rcx, [0x14014d358]
call fcn.14009bbf0
movzx eax, al
test eax, eax
je 0x1400ec85c
lea rcx, [rsp + 0x330]
call fcn.14002d3b0
mov qword [rsp + 0x188], rax
mov rdx, qword [rsp + 0x188]
mov rcx, qword [0x140185a48]
call fcn.1400e0830
call fcn.1400b77a0
nop
lea rcx, [rsp + 0x308]
call fcn.14003f4d0
nop
lea rcx, [rsp + 0x330]
call fcn.140007940
mov rcx, qword [rsp + 0x3f0]
xor rcx, rsp
call fcn.14011d870
add rsp, 0x408
ret