Function at 0x100cb1b00
Capabilities:
Delete file

Disassembly:
push rbp
mov rbp, rsp
lea rsp, [rsp - 0x440]
mov qword [rbp - 0x3f8], rbx
mov qword [rbp - 0x3f0], rdi
mov qword [rbp - 0x3e8], rsi
mov qword [rbp - 0x3e0], r12
mov qword [rbp - 0x3d8], r13
mov rbx, rcx
mov qword [rbp - 8], 0
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x3d0], 0
mov qword [rbp - 0x3c8], 0
mov qword [rbp - 0x3c0], 0
mov qword [rbp - 0x3b8], 0
mov qword [rbp - 0x3b0], 0
mov qword [rbp - 0x3a8], 0
mov qword [rbp - 0x88], 0
nop
mov sil, 0
cmp dword [rbx + 0x9c4], 3
jne 0x100cb1dad
mov rcx, qword [rbx + 0x7b0]
lea rdx, [rbp - 0x88]
call fcn.100dc1ed0
cmp qword [rbp - 0x88], 0
jne 0x100cb1ca1
mov dword [rsp + 0x20], 1
lea r8, [rbx + 0x9e2]
lea rcx, [rbp - 0x2a0]
movabs r9, 7
movabs rdx, 0xff
call fcn.100c87f80
lea rax, [rbp - 0x2a0]
mov qword [rbp - 0x1a0], rax
lea rax, [0x100e71408]
mov qword [rbp - 0x198], rax
mov dword [rsp + 0x20], 1
lea r8, [rbx + 0x9f6]
lea rcx, [rbp - 0x3a0]
movabs r9, 0xb
movabs rdx, 0xff
call fcn.100c87f80
lea rax, [rbp - 0x3a0]
mov qword [rbp - 0x190], rax
lea r8, [rbp - 0x1a0]
lea rcx, [rbp - 0x188]
movabs r9, 2
movabs rdx, 0xff
call fcn.100c87ce0
lea rdx, [rbp - 0x188]
lea rcx, [rbp - 0x88]
mov r8d, 0
call fcn.100c8df50
mov rdx, qword [rbp - 0x88]
mov rcx, qword [rbx + 0x7b0]
call fcn.100dc5b60
jmp 0x100cb2284
mov dword [rsp + 0x20], 1
lea r8, [rbx + 0x9f6]
lea rcx, [rbp - 0x3a0]
movabs r9, 0xb
movabs rdx, 0xff
call fcn.100c87f80
lea rdi, [rbp - 0x3a0]
mov rcx, qword [rbx + 0x7b0]
lea rdx, [rbp - 0x3a8]
call fcn.100dc1ed0
mov rdx, qword [rbp - 0x3a8]
mov rcx, rdi
call fcn.100c8e740
test rax, rax
jne 0x100cb2284
mov rcx, qword [rbx + 0x7b0]
lea rdx, [rbp - 0x80]
call fcn.100dc1ed0
mov dword [rsp + 0x20], 1
lea r8, [rbx + 0x9f6]
lea rcx, [rbp - 0x2a0]
movabs r9, 0xb
movabs rdx, 0xff
call fcn.100c87f80
lea r8, [rbp - 0x2a0]
lea r9, [0x100e71408]
lea rcx, [rbp - 0x3a0]
movabs rdx, 0xff
call fcn.100c87bb0
lea rdx, [rbp - 0x3a0]
lea rcx, [rbp - 0x3a8]
mov r8d, 0
call fcn.100c8df50
mov rcx, qword [rbp - 0x3a8]
lea rdx, [rbp - 0x80]
movabs r8, 8
call fcn.100c8ec60
mov rcx, qword [rbx + 0x7b0]
mov rdx, qword [rbp - 0x80]
call fcn.100dc5b60
jmp 0x100cb2284
cmp byte [rbx + 0x9c0], 0
jne 0x100cb1dcb
lea rdx, str.You_are_trying_to_apply_system_wide_operation_while_running_as_normal_user._Start_activator_with__Run_As_Administrator__to_perform_this_action_
mov rcx, rbx
mov r8d, 1
call fcn.100cb52e0
cmp byte [rbx + 0xa34], 0
je 0x100cb1dd9
mov sil, 1
jmp 0x100cb1e07
mov dword [rsp + 0x20], 0
mov r9d, 3
lea rdx, str.Do_you_want_to_continue__All_services_and_applications_related_to_SolidWorks_will_be_closed._r_n_r_nPlease_save_your_work_and_press_Continue.
lea rcx, str.Confirm_loaders_removal
mov r8d, 3
call fcn.100dd0490
cmp eax, 6
sete sil
test sil, sil
je 0x100cb2283
mov dword [rbp - 0x58], 0xffffffff
mov dword [rbp - 0x54], 0
mov dword [rbp - 0x60], 0
mov dword [rbp - 0x68], 0
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x78], 0
lea rcx, [0x100e756b8]
movabs rdx, 1
call fcn.100ccf110
mov rsi, rax
mov di, 0
lea rcx, [rbp - 0x3b0]
call fcn.100c8d4f0
movzx eax, di
lea rdx, [rax + 0x7e1]
lea rcx, [rbp - 0x3b8]
call fcn.100ce14a0
mov rdx, qword [rbp - 0x3b8]
lea r8, [0x100e714e0]
lea rcx, [rbp - 0x3b0]
mov r9d, 0
call fcn.100c8d680
mov rdx, qword [rbp - 0x3b0]
mov rcx, qword [rbx + 0x980]
mov rax, qword [rbx + 0x980]
mov rax, qword [rax]
call qword [rax + 0xd0]
test al, al
je 0x100cb1ed6
mov r8, rsi
movzx edx, di
mov rcx, rbx
call fcn.100cbb850
movzx eax, di
lea eax, [eax + 1]
mov di, ax
jmp 0x100cb1e58
mov rcx, rsi
call fcn.100ccf0a0
movsxd rax, eax
mov qword [rbp - 0x90], rax
lea rdx, [0x100e72a48]
lea r9, [rbp - 0x90]
lea rcx, [rbp - 8]
movabs r8, 1
call fcn.100c91ae0
mov rcx, rsi
call fcn.100ccf0a0
lea r12d, [eax - 1]
mov di, 0
cmp r12w, di
jb 0x100cb1f59
sub di, 1
nop
add di, 1
movzx edx, di
mov rcx, rsi
call fcn.100ccef60
mov rdx, qword [rax + 0x10]
test rdx, rdx
jne 0x100cb1f48
lea rdx, [0x100f45460]
mov rcx, qword [rbp - 8]
movzx eax, di
mov qword [rcx + rax*8], rdx
cmp r12w, di
ja 0x100cb1f28
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x58]
mov edx, 0
call qword [0x100f49cd0]
test eax, eax
jne 0x100cb2284
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
mov rax, qword [0x100f469f0]
mov qword [rsp + 0x30], rax
mov rcx, rsi
call fcn.100ccf0a0
mov edx, eax
mov ecx, dword [rbp - 0x58]
mov r8, qword [rbp - 8]
mov r9d, 0
call qword [0x100f49ce0]
test eax, eax
je 0x100cb1fc0
mov ecx, dword [rbp - 0x58]
call qword [0x100f49d20]
jmp 0x100cb2284
mov r12d, 0xea
jmp 0x100cb2017
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x68]
mov ecx, dword [rbp - 0x58]
mov r9, qword [rbp - 0x70]
call qword [0x100f49cf0]
mov r12d, eax
test r12d, r12d
je 0x100cb2020
mov eax, dword [rbp - 0x68]
mov dword [rbp - 0x60], eax
cmp qword [rbp - 0x70], 0
je 0x100cb2004
mov rcx, qword [rbp - 0x70]
call fcn.100c94d60
mov eax, dword [rbp - 0x60]
imul rdx, rax, 0x29c
lea rcx, [rbp - 0x70]
call fcn.100c94d00
cmp r12d, 0xea
je 0x100cb1fc8
test r12d, r12d
je 0x100cb203c
mov rcx, qword [rbp - 0x70]
call fcn.100c94d60
mov ecx, dword [rbp - 0x58]
call qword [0x100f49d20]
jmp 0x100cb2284
cmp dword [rbp - 0x78], 0
je 0x100cb2110
mov eax, dword [rbp - 0x60]
lea r13d, [eax - 1]
mov di, 0
cmp r13w, di
jb 0x100cb2110
sub di, 1
nop
nop
add di, 1
mov rcx, qword [rbp - 0x70]
movzx eax, di
imul rdx, rax, 0x29c
cmp dword [rcx + rdx + 0x28c], 3
je 0x100cb20d2
imul rax, rax, 0x29c
cmp dword [rcx + rax + 0x294], 0
jne 0x100cb20d2
mov dword [rsp + 0x20], 2
mov rdx, qword [rbp - 0x70]
movzx eax, di
imul rax, rax, 0x29c
lea r8, [rdx + rax]
mov ecx, dword [rbp - 0x58]
movabs r9, 0
movabs rdx, 0
call qword [0x100f49cc0]
mov r12d, eax
jmp 0x100cb2106
mov rdx, qword [rbp - 0x70]
movzx eax, di
imul rax, rax, 0x29c
cmp dword [rdx + rax + 0x298], 0
jne 0x100cb2106
mov rdx, qword [rbp - 0x70]
movzx eax, di
imul rax, rax, 0x29c
mov edx, dword [rdx + rax]
mov rcx, rbx
call fcn.100cade50
mov r12d, eax
cmp r13w, di
ja 0x100cb2068
mov ecx, dword [rbp - 0x58]
movabs r8, 0
mov edx, 0
call qword [0x100f49d00]
mov r12d, eax
test r12d, r12d
je 0x100cb215c
mov rcx, qword [rbp - 0x70]
call fcn.100c94d60
mov ecx, dword [rbp - 0x58]
call qword [0x100f49d20]
lea rdx, [0x100e71264]
mov rcx, rbx
mov r8d, 1
call fcn.100cb52e0
jmp 0x100cb225c
mov rcx, rsi
call fcn.100ccf0a0
lea esi, [eax - 1]
mov di, 0
cmp si, di
jb 0x100cb2241
sub di, 1
nop
nop
add di, 1
mov rdx, qword [rbp - 8]
movzx eax, di
mov rdx, qword [rdx + rax*8]
lea rcx, [rbp - 0x3c0]
call fcn.100c90330
mov rcx, qword [rbp - 0x3c0]
call fcn.100ceaec0
test al, al
je 0x100cb2238
mov r13d, 0
jmp 0x100cb21cc
add r13d, 1
cmp r13d, 0xa
jg 0x100cb21e0
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep
mov rdx, qword [rbp - 8]
movzx eax, di
mov rcx, qword [rdx + rax*8]
call sub.kernel32.dll_DeleteFileW
test eax, eax
je 0x100cb21b8
cmp r13d, 0xa
jle 0x100cb2238
lea rcx, [rbp - 0x3c8]
call fcn.100c8f1b0
mov rdx, qword [rbp - 8]
movzx eax, di
mov rdx, qword [rdx + rax*8]
lea rcx, [rbp - 0x3d0]
call fcn.100c8f470
mov r8, qword [rbp - 0x3d0]
lea rdx, [0x100e714ec]
lea rcx, [rbp - 0x3c8]
call fcn.100c8f590
mov rdx, qword [rbp - 0x3c8]
mov rcx, rbx
mov r8d, 0
call fcn.100cb52e0
cmp si, di
ja 0x100cb2180
mov ecx, dword [rbp - 0x58]
movabs r8, 0
mov edx, 0
call qword [0x100f49d10]
mov r12d, eax
mov rcx, qword [rbp - 0x70]
call fcn.100c94d60
mov ecx, dword [rbp - 0x58]
call qword [0x100f49d20]
lea rdx, [0x100e7151c]
mov rcx, rbx
mov r8d, 0
call fcn.100cb52e0
nop
mov rcx, rbp
call fcn.100cb1a70
mov rbx, qword [rbp - 0x3f8]
mov rdi, qword [rbp - 0x3f0]
mov rsi, qword [rbp - 0x3e8]
mov r12, qword [rbp - 0x3e0]
mov r13, qword [rbp - 0x3d8]
lea rsp, [rbp]
pop rbp
ret