Function at 0x18008d7e0
Capabilities:
Delete file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov qword [rbp - 0x41], 0xfffffffffffffffe
mov qword [rsp + 0xe8], rbx
mov rax, qword [0x18012b010]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r13, r8
mov r12, rdx
mov rsi, rcx
mov rcx, r8
call fcn.18000a100
mov rcx, r12
call fcn.180005da8
test al, al
jne 0x18008da3f
mov rcx, rsi
call fcn.180005da8
test al, al
jne 0x18008da3f
xor r15d, r15d
cmp byte [rsi + 0x38], r15b
jne 0x18008d8f7
mov r8, rsi
lea rdx, [rbp - 0x29]
call fcn.180090090
nop
xor eax, eax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x39], r15
mov word [rbp - 0x31], ax
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x39]
call fcn.1800771b0
xor eax, eax
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 1]
call fcn.18000deb0
nop
mov byte [rbp - 0x49], r15b
lea r8, [rsi + 0x20]
lea r9, [rbp - 0x49]
mov rdx, rsi
call fcn.18008f650
test al, al
jne 0x18008d8c7
cmp byte [rbp - 0x49], al
je 0x18008d8c7
mov rcx, rsi
call fcn.18000618c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rbp - 1]
call fcn.18000df10
nop
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x18008d8e4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x39], r15
mov word [rbp - 0x31], 0
lea rcx, [rbp - 0x29]
call fcn.180005de4
mov byte [rsi + 0x38], 1
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
cmp rcx, rax
je 0x18008da3f
mov r14d, r15d
sub rax, rcx
sar rax, 7
test rax, rax
je 0x18008da58
mov rdi, r15
nop
shl rdi, 7
add rdi, rcx
mov rcx, rdi
call fcn.18000618c
mov rbx, rax
mov rcx, r12
call fcn.18000618c
mov rcx, rax
mov rdx, rbx
call fcn.1800aef28
test eax, eax
je 0x18008d968
inc r14d
mov rcx, qword [rsi + 0x20]
mov edi, r14d
mov rax, qword [rsi + 0x28]
sub rax, rcx
sar rax, 7
cmp rdi, rax
jb 0x18008d920
jmp 0x18008da58
mov rcx, r12
call fcn.180005da8
test al, al
jne 0x18008da3f
xor eax, eax
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], rax
mov dword [rbp - 9], eax
lea r8, [rbp - 0x29]
mov rcx, r12
call fcn.18006df50
test al, al
je 0x18008da3f
mov edx, dword [rbp - 0x21]
shl rdx, 0x20
mov eax, dword [rbp - 0x25]
add rdx, rax
mov r8d, dword [rbp - 0x11]
shl r8, 0x20
mov eax, dword [rbp - 0x15]
add r8, rax
mov ecx, dword [rbp - 0xd]
shl rcx, 0x20
mov eax, dword [rbp - 9]
add rcx, rax
cmp qword [rdi + 0x60], rcx
jne 0x18008da3f
cmp qword [rdi + 0x68], r8
jne 0x18008da3f
cmp qword [rdi + 0x70], rdx
jne 0x18008da3f
cmp byte [rsi + 0x39], 0
je 0x18008da48
lea rcx, [rdi + 0x40]
call fcn.180005da8
test al, al
jne 0x18008da3f
lea rcx, [rbp - 1]
call fcn.180005e80
nop
lea r8, [rbp - 1]
mov rdx, r12
call fcn.180090690
test al, al
jne 0x18008da11
lea rcx, [rbp - 1]
call fcn.18000a100
lea rcx, [rdi + 0x40]
call fcn.18000618c
mov rbx, rax
lea rcx, [rbp - 1]
call fcn.18000618c
mov rcx, rax
mov rdx, rbx
call fcn.1800aef28
nop
lea rcx, [rbp - 1]
test eax, eax
je 0x18008da43
call fcn.180005de4
xor eax, eax
jmp 0x18008da5b
call fcn.180005de4
lea rdx, [rdi + 0x20]
mov rcx, r13
call fcn.18000669c
mov r15d, dword [rdi + 0x78]
mov eax, r15d
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1800a0260
mov rbx, qword [rsp + 0xe8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret