Function at 0x1800ca7f0
Capabilities:
Delete file

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x88
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov byte [rsp + 0x40], 0
mov dword [rsp + 0x44], 0
mov rax, qword [rsp + 0x90]
mov rdx, qword [rax + 8]
lea rcx, [rsp + 0x20]
call fcn.180077450
nop
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800ca852
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 1
mov rcx, rax
call fcn.1800b1450
mov rcx, qword [rsp + 0x90]
call fcn.1800c7c90
movzx eax, al
test eax, eax
jne 0x1800ca88c
mov dword [rsp + 0x44], 0xffff9ffa
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 5
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800ca8ca
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
je 0x1800ca8f0
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 0xa
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800ca92e
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 0x78
mov rcx, rax
call fcn.18000122b
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x90]
add rcx, 0xb8
call fcn.18000122b
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x90]
add rcx, 0xd8
call fcn.18000122b
mov rcx, qword [rsp + 0x58]
mov r9, rcx
mov r8d, 1
mov rcx, qword [rsp + 0x60]
mov rdx, rcx
mov rcx, rax
mov rax, qword [rsp + 0x90]
call qword [rax + 0x220]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x40]
test eax, eax
jne 0x1800ca9d4
mov edx, 1
mov rcx, qword [rsp + 0x90]
call fcn.1800c83f0
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x40]
test eax, eax
jne 0x1800ca9d4
mov dword [rsp + 0x44], 0xffff9fff
jmp 0x1800cac00
mov byte [rsp + 0x40], 1
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 0x1e
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800caa17
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
mov rcx, qword [rsp + 0x90]
call fcn.1800c8700
movzx eax, al
test eax, eax
jne 0x1800caa38
mov dword [rsp + 0x44], 0xffff9ff9
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, SafeArraySetRecordInfo
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800caa76
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
mov edx, dword [rsp + 0x98]
mov rcx, qword [rsp + 0x90]
call fcn.1800c8ed0
movzx eax, al
test eax, eax
jne 0x1800caa9e
mov dword [rsp + 0x44], 0xffff9ff8
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 0x32
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800caadc
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1800cab4f
mov rax, qword [rsp + 0x90]
add rax, 0x98
mov rcx, rax
call fcn.18000122b
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x90]
add rcx, 0xd8
call fcn.18000122b
mov r9d, 1
mov r8d, 1
mov rcx, qword [rsp + 0x68]
mov rdx, rcx
mov rcx, rax
mov rax, qword [rsp + 0x90]
call qword [rax + 0x228]
test eax, eax
jne 0x1800cab4a
mov dword [rsp + 0x44], 0xffff9ffe
jmp 0x1800cac00
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 0x3c
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
call fcn.180076cf0
movzx eax, al
test eax, eax
je 0x1800cab8a
mov dword [rsp + 0x44], 0xffffed00
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90]
call qword [rax + SafeArrayCopy]
movzx eax, al
test eax, eax
jne 0x1800cabb1
mov dword [rsp + 0x44], 0xffff9ffd
jmp 0x1800cac00
mov rax, qword [rsp + 0x90]
add rax, 8
mov edx, 0x64
mov rcx, rax
call fcn.1800b1450
mov rax, qword [rsp + 0x90]
add rax, 0x1f8
mov rcx, rax
call fcn.18000122b
mov rcx, rax
call fcn.1800376d0
test eax, eax
jne 0x1800cabf6
mov dword [rsp + 0x44], 0xffff9ffc
jmp 0x1800cac00
xor eax, eax
test eax, eax
jne 0x1800ca82d
cmp dword [rsp + 0x44], 0xffffed00
jne 0x1800cac4b
mov rax, qword [rsp + 0x90]
add rax, 0x1f8
mov rcx, rax
call fcn.18000122b
mov rcx, rax
call fcn.1800376d0
test eax, eax
je 0x1800cac4b
mov rax, qword [rsp + 0x90]
add rax, 0x1f8
mov rcx, rax
call fcn.18000122b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1800cacb4
mov rax, qword [rsp + 0x90]
add rax, 0x98
mov rcx, rax
call fcn.18000122b
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x90]
add rcx, 0xd8
call fcn.18000122b
mov r9d, 1
mov r8d, 1
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
mov rcx, rax
mov rax, qword [rsp + 0x90]
call qword [rax + 0x228]
test eax, eax
jne 0x1800cacb4
mov dword [rsp + 0x44], 0xffff9ffe
mov rax, qword [rsp + 0x90]
add rax, 0x78
mov rcx, rax
call fcn.18000122b
mov rcx, rax
call fcn.180039430
test eax, eax
jne 0x1800cacf0
mov rax, qword [rsp + 0x90]
add rax, 0x78
mov rcx, rax
call fcn.18000122b
mov rcx, rax
call fcn.18003aff0
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x20]
call fcn.180083300
mov eax, dword [rsp + 0x48]
add rsp, 0x88
ret