Function at 0x180086920
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
sub rsp, 0x310
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180186e80]
movabs rsi, 0x1ff919c82842cdc8
lea rbx, [rax*8]
movabs r14, 0xbcaadf2bb81e0fe9
mov rax, qword [0x180186e90]
movabs rdi, 0xbc9388068023e2c6
movabs r15, 0x42efc67ddba22523
mov r8, qword [rax + rbx]
movabs rax, 0xbccbdf4db87b0f8d
mov qword [rbp], rax
test r8, r8
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xbcbd8872804fe2b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x42efc61adbc42540
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymmword [rbp + 0x60], ymm1
vzeroupper
je 0x180086b9c
lea rcx, [rbp + 0x60]
mov r9, r8
sub r9, rcx
nop dword [rax]
movsx ecx, word [r9 + rax]
movsx edx, word [rax]
lea rax, [rax + 2]
test cx, cx
je 0x180086a46
cmp cx, dx
je 0x180086a30
sub ecx, edx
jne 0x180086b9c
movabs rax, 0xc88aba47da7f619c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xd9e5e76be551c2a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x3683b31cbdc74103
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x6a9e70ae462daee8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x4d860d88284dfc2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x99750ec218989d93
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x2ba663e741399d5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x99752ce222fdf1fa
mov qword [rbp], rax
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
mov qword [rbp + 0x48], rax
movabs rax, 0xbcaadf2bb81e0fcb
vxorps xmm2, xmm2, xmmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmmword [rbp + 0xa0], xmm2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], rdi
mov rax, qword [rbp]
vzeroupper
jmp 0x180086ce1
movzx ecx, word [0x180188fe0]
lea rax, [rbp + 0xc0]
test cx, cx
je 0x180086bd0
lea rdx, [0x180188fe0]
lea r9, [rbp + 0xc0]
sub rdx, r9
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x180086bc0
xor edx, edx
mov word [rax], dx
movzx ecx, word [r8]
test cx, cx
je 0x180086bf2
sub r8, rax
mov word [rax], cx
add rax, 2
movzx ecx, word [r8 + rax]
test cx, cx
jne 0x180086be1
lea rcx, [rbp + 0xc0]
mov word [rax], dx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x180086ce1
mov rcx, qword [0x180186e90]
mov r8, qword [0x180186e98]
add rcx, rbx
lea rdx, [rcx + 8]
sub r8, rdx
call fcn.1800d35f0
sub qword [0x180186e98], 8
movabs rax, 0x9cceba5dd7736a9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xcee6ef6fe64d8da5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2b89e613b4cb5142
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x1ff919ea0878a8a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xbcaadf2bb81e0fcb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], rdi
mov rax, qword [rbp]
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret