Function at 0x14001cf80
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x140189090]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov r14, rcx
mov qword [rsp + 0xa0], rcx
xor edi, edi
mov r12d, edi
mov dword [rsp + 0x34], edi
mov dword [rsp + 0x38], edi
test rdx, rdx
je 0x14001d7a4
cmp word [rdx], di
je 0x14001d7a4
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], di
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp word [rdx + r8*2], di
jne 0x14001d004
lea rcx, [rsp + 0xa8]
call fcn.140009050
nop
cmp byte [r14 + 0x30], 0
je 0x14001d422
lea rcx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rcx, qword [rsp + 0xa8]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea r13, [0x14015b7e0]
mov rdx, r13
test rax, rax
cmovne rdx, rax
mov qword [rsp + 0x40], rdi
movdqa xmm0, xmmword [0x140166ab0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], di
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001d073
lea rcx, [rsp + 0x40]
call fcn.140009050
nop
xor r8d, r8d
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x40]
call fcn.140024fb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008fe0
nop
mov qword [rsp + 0xe8], rdi
mov r15, rdi
mov qword [rsp + 0xf8], rdi
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x100], r12
mov byte [rsp + 0xe8], r15b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x130]
call fcn.1400fb5b0
lea rcx, [rsp + 0x130]
call fcn.14000eed0
nop
mov edx, ebx
lea rcx, [rsp + 0x140]
call fcn.14000f240
mov rdx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
test byte [rcx + rdx + 0x10], 6
jne 0x14001d143
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x130]
call fcn.140019270
mov r12, qword [rsp + 0x100]
mov r15, qword [rsp + 0xf8]
lea rcx, [rsp + 0x130]
call fcn.14000e7b0
nop
mov qword [rsp + 0x60], rdi
movdqa xmm0, xmmword [0x140166ac0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x34], 7
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x108]
call fcn.14001b3f0
mov r8d, 1
lea rdx, [0x140157a5c]
lea rcx, [rsp + 0x60]
call fcn.1400093b0
mov qword [rsp + 0x80], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x90], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x34], reloc.WS2_32.dll_ntohs
lea rdx, [rsp + 0xe8]
cmp r12, 0x10
cmovae rdx, qword [rsp + 0xe8]
mov r8, r15
lea rcx, [rsp + 0x80]
call fcn.1400093b0
mov qword [rsp + 0x40], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x34], 0x1f
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], 7
mov word [rsp + 0xc8], di
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x40]
call fcn.14001b5c0
nop
lea rdx, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rdx, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd8]
lea rcx, [rsp + 0x108]
call fcn.140009050
nop
lea rcx, [rsp + 0xc8]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x40]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x80]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400091f0
lea rcx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rcx, qword [rsp + 0xa8]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov rdx, r13
test rax, rax
cmovne rdx, rax
mov qword [rsp + 0x40], rdi
movdqa xmm0, xmmword [0x140166ab0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], di
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001d314
lea rcx, [rsp + 0x40]
call fcn.140009050
mov r12d, 0x3b
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x108]
call fcn.140024fb0
nop
lea rcx, [rsp + 0x108]
cmp rcx, rax
je 0x14001d37f
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001d36e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x108]
call fcn.140009050
nop
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x40]
call fcn.140008fe0
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xa8]
call fcn.140024a70
nop
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140024c30
nop
lea rcx, [rsp + 0xa8]
cmp rcx, rax
je 0x14001d3ec
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001d3db
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.140009050
nop
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x80]
call fcn.140008fe0
nop
lea rcx, [rsp + 0xe8]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x108]
call fcn.140008fe0
jmp 0x14001d429
lea r13, [0x14015b7e0]
cmp qword [r14 + 0x28], 0
je 0x14001d449
lea rdx, [rsp + 0xa8]
lea rcx, [r14 + 8]
call fcn.140022810
test eax, eax
je 0x14001d795
xor edx, edx
mov rcx, r14
call fcn.14001cf80
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xc8], 0
lea rbx, [r14 + 0x38]
mov qword [rsp + 0xe8], rbx
mov edx, 0xffffffff
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
sete r15b
mov byte [rsp + 0x30], r15b
test eax, eax
jne 0x14001d4bb
mov eax, dword [rbx + 0x10]
test eax, eax
jne 0x14001d4b6
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, eax
mov qword [rbx + 8], rax
mov eax, dword [rbx + 0x10]
inc eax
mov dword [rbx + 0x10], eax
mov byte [rsp + 0xf0], r15b
cmp qword [r14 + 0x28], 0
je 0x14001d525
lea rdx, [rsp + 0xa8]
lea rcx, [r14 + 8]
call fcn.140022810
test eax, eax
jne 0x14001d525
test r15b, r15b
je 0x14001d503
sub dword [rbx + 0x10], 1
jns 0x14001d4ef
mov dword [rbx + 0x10], edi
jmp 0x14001d4f5
cmp dword [rbx + 0x10], 0
jne 0x14001d4f9
mov qword [rbx + 8], rdi
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
nop
lea rcx, [rsp + 0xc8]
call fcn.1400091f0
nop
lea rcx, [rsp + 0xa8]
call fcn.140008fe0
xor eax, eax
jmp 0x14001d7af
lea rcx, [rsp + 0xa8]
lea rax, [r14 + 8]
cmp rax, rcx
je 0x14001d560
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rdx, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb8]
mov rcx, rax
call fcn.140009050
xor ecx, ecx
call fcn.140027380
mov dword [rsp + 0x20], 1
lea r9, str.Logger
xor r8d, r8d
lea rdx, [0x14001cc30]
mov rcx, rax
call fcn.140027650
cmp dword [rax + 0x40], 0
jle 0x14001d718
lea rdx, [0x14015bbb8]
mov rcx, r14
call fcn.14001d970
test al, al
jne 0x14001d5fd
lea r15, [r14 + 8]
mov rcx, r15
cmp qword [r15 + 0x18], 8
jb 0x14001d5b6
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14001d5ee
mov edx, 0x80
mov rcx, r15
call fcn.140025da0
mov edx, dword [0x140189cc0]
mov rcx, r15
call fcn.140025da0
cmp qword [r15 + 0x18], 8
jb 0x14001d5e5
mov r15, qword [r15]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [0x14015bbb8]
mov rcx, r14
call fcn.14001d970
lea rcx, [r14 + 8]
cmp qword [rcx + 0x18], 8
jb 0x14001d60b
mov rcx, qword [rcx]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test rax, rax
cmovne r13, rax
mov qword [rsp + 0x60], rdi
movdqa xmm0, xmmword [0x140166ab0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], di
inc rsi
cmp word [r13 + rsi*2], 0
jne 0x14001d630
mov r8, rsi
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.140009050
bts r12d, 7
xor r8d, r8d
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.140024fb0
or r12d, 0x40
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
mov qword [rsp + 0x40], rdi
movdqa xmm0, xmmword [0x140166ac0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
bts r12d, 8
mov dword [rsp + 0x34], r12d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x80]
call fcn.14001b3f0
lea rcx, [rsp + 0xc8]
call fcn.1400091f0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0xc8], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rsp + 0xd8], xmm1
movdqa xmm0, xmmword [0x140166ac0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x80]
call fcn.140008fe0
nop
jmp 0x14001d718
cmp byte [rsp + 0x30], 0
je 0x14001d73d
sub dword [rbx + 0x10], 1
jns 0x14001d72a
mov dword [rbx + 0x10], edi
jmp 0x14001d730
cmp dword [rbx + 0x10], 0
jne 0x14001d734
mov qword [rbx + 8], rdi
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp qword [rsp + 0xd8], 0
je 0x14001d787
xor ecx, ecx
call fcn.140027380
mov dword [rsp + 0x20], 1
lea r9, str.Logger
xor r8d, r8d
lea rdx, [0x14001cc30]
mov rcx, rax
call fcn.140027650
mov r9b, 1
mov r8, r14
lea rdx, [rsp + 0xc8]
mov rcx, rax
call fcn.14001dfd0
nop
lea rcx, [rsp + 0xc8]
call fcn.1400091f0
nop
lea rcx, [rsp + 0xa8]
call fcn.140008fe0
jmp 0x14001d7ab
mov dl, 1
call fcn.14001d7e0
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.1400f89b0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret