Function at 0x140029598
Capabilities:
Delete directory

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
mov rbx, rcx
xor edi, edi
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x1400295b9
call fcn.1400012c0
mov qword [rbx + 8], rdi
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x1400295cb
call fcn.1400012c0
mov qword [rbx + 0x28], rdi
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x1400295dd
call fcn.1400012c0
mov qword [rbx + 0x30], rdi
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1400295ef
call fcn.1400012c0
mov qword [rbx + 0x38], rdi
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x140029601
call fcn.1400012c0
mov qword [rbx + 0x40], rdi
mov rcx, qword [rbx + 0x48]
test rcx, rcx
je 0x140029613
call fcn.1400012c0
mov qword [rbx + 0x48], rdi
mov rcx, qword [rbx + 0x50]
test rcx, rcx
je 0x140029625
call fcn.1400012c0
mov qword [rbx + 0x50], rdi
lea rcx, [rbx + 0x58]
call fcn.140029fdc
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140029640
call fcn.1400012c0
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029650
call fcn.1400012c0
mov qword [rbx], rdi
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140029662
call fcn.1400012c0
mov qword [rbx + 0x20], rdi
lea rcx, [rbx + 0x60]
call fcn.140029fdc
lea rcx, [rbx + 0x68]
call fcn.140029fdc
lea rcx, [rbx + 0x70]
call fcn.140029fdc
lea rcx, [rbx + 0x78]
call fcn.140029fdc
mov rcx, qword [rbx + 0x88]
test rcx, rcx
je 0x14002969e
call fcn.1400012c0
mov qword [rbx + 0x88], rdi
mov rcx, qword [rbx + 0x90]
test rcx, rcx
je 0x1400296b6
call fcn.1400012c0
mov qword [rbx + 0x90], rdi
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x1400296ce
call fcn.1400012c0
mov qword [rbx + 0xa0], rdi
mov rcx, qword [rbx + 0xa8]
test rcx, rcx
je 0x1400296e6
call fcn.1400012c0
mov qword [rbx + 0xa8], rdi
mov rcx, qword [rbx + 0xb0]
test rcx, rcx
je 0x1400296fe
call fcn.1400012c0
mov qword [rbx + 0xb0], rdi
mov rcx, qword [rbx + 0xb8]
test rcx, rcx
je 0x140029716
call fcn.1400012c0
mov qword [rbx + 0xb8], rdi
mov rcx, qword [rbx + 0xc0]
test rcx, rcx
je 0x14002972e
call fcn.1400012c0
mov qword [rbx + 0xc0], rdi
mov rcx, qword [rbx + 0xc8]
test rcx, rcx
je 0x140029746
call fcn.1400012c0
mov qword [rbx + 0xc8], rdi
mov rcx, qword [rbx + 0xd0]
test rcx, rcx
je 0x14002975e
call fcn.1400012c0
mov qword [rbx + 0xd0], rdi
mov rcx, qword [rbx + 0xd8]
test rcx, rcx
je 0x140029776
call fcn.1400012c0
mov qword [rbx + 0xd8], rdi
mov rcx, qword [rbx + 0xe0]
test rcx, rcx
je 0x14002978e
call fcn.1400012c0
mov qword [rbx + 0xe0], rdi
mov rcx, qword [rbx + 0xe8]
test rcx, rcx
je 0x1400297a6
call fcn.1400012c0
mov qword [rbx + 0xe8], rdi
mov rcx, qword [rbx + 0xf0]
test rcx, rcx
je 0x1400297be
call fcn.1400012c0
mov qword [rbx + 0xf0], rdi
mov rcx, qword [rbx + 0xf8]
test rcx, rcx
je 0x1400297d6
call fcn.1400012c0
mov qword [rbx + 0xf8], rdi
mov rcx, qword [rbx + 0x100]
test rcx, rcx
je 0x1400297ee
call fcn.1400012c0
mov qword [rbx + 0x100], rdi
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x14002984d
lea rdx, str..WMC_
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsstr]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x80]
test rax, rax
je 0x140029829
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], edi
call fcn.14001cf64
jmp 0x140029835
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x14002984d
call fcn.1400012c0
mov qword [rbx + 0x80], rdi
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140029874
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140029874
call fcn.1400012c0
mov qword [rbx + 0x10], rdi
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret