Function at 0x1400b6100
Capabilities:
Delete directory
Delete file

Disassembly:
mov r11, rsp
push rdi
sub rsp, 0x110
mov qword [r11 - 0x38], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x140001640]
xor rax, rsp
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x38], rcx
mov qword [r11 - 0x30], rcx
xor eax, eax
mov qword [r11 - 0x28], rax
mov qword [r11 - 0x20], rax
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rbx
mov word [rsp + 0x40], bx
or rsi, 0xffffffffffffffff
mov r9, rsi
xor r8d, r8d
mov rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.14002bf60
nop
lea ecx, [rbx + 0x38]
call fcn.1400ed86c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400b61bd
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x28], rax
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], rbx
mov word [rax], bx
mov dword [rax + 0x20], ebx
mov qword [rax + 0x24], 0xffff
mov dword [rax + 0x2c], 0xffff
mov qword [rax + 0x30], rbx
jmp 0x1400b61c0
mov rax, rbx
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rbx
lea r8, [rsp + 0xf8]
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.140046860
nop
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call fcn.140143340
nop
cmp qword [rsp + 0x58], 8
jb 0x1400b621e
mov rcx, qword [rsp + 0x40]
call fcn.1400ed78c
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rbx
mov word [rsp + 0x40], bx
nop dword [rax]
nop word [rax + rax]
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa0], xmm0
mov rax, qword [rsp + 0xa0]
cmp qword [rsp + 0xf0], rax
setne byte [rsp + 0x20]
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov rdi, qword [rsp + 0xa8]
test rdi, rdi
je 0x1400b62b0
mov eax, esi
lock xadd dword [rdi + 8], eax
dec eax
jne 0x1400b62b0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + ioctlsocket]
mov eax, esi
lock xadd dword [rdi + 0xc], eax
dec eax
jne 0x1400b62b0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + select]
cmp byte [rsp + 0x20], 0
je 0x1400b6464
xor r8d, r8d
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xb0]
call fcn.140143ff0
mov rdx, qword [rsp + 0xf0]
cmp dword [rax], 3
jne 0x1400b634c
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x28], rax
cmp qword [rdx + 0x18], 8
jb 0x1400b62f7
mov rdx, qword [rdx]
mov qword [rsp + 0xd0], 7
mov qword [rsp + 0xc8], rbx
mov word [rsp + 0xb8], bx
cmp word [rdx], 0
jne 0x1400b631e
mov r8, rbx
jmp 0x1400b632c
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400b6321
lea rcx, [rsp + 0xb8]
call fcn.14003ca90
nop
lea rcx, [rsp + 0xb8]
call fcn.1400b6100
jmp 0x1400b6450
xor r8d, r8d
lea rcx, [rsp + 0xd8]
call fcn.140143ff0
cmp dword [rax], 2
jne 0x1400b6450
mov rcx, qword [rsp + 0xf0]
cmp qword [rcx + 0x18], 8
jb 0x1400b6377
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
setne al
mov byte [rsp + 0x21], al
test al, al
jne 0x1400b643b
mov rdx, qword [rsp + 0xf0]
cmp qword [rdx + 0x18], 8
jb 0x1400b63a0
mov rdx, qword [rdx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], rbx
mov word [rsp + 0x80], bx
cmp word [rdx], 0
jne 0x1400b63dc
mov r8, rbx
jmp 0x1400b63eb
mov r8, rsi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400b63e0
lea rcx, [rsp + 0x80]
call fcn.14003ca90
nop
lea rcx, [rsp + 0x80]
call fcn.140040bb0
nop
cmp qword [rsp + 0x98], 8
jb 0x1400b641f
mov rcx, qword [rsp + 0x80]
call fcn.1400ed78c
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], rbx
mov word [rsp + 0x80], bx
jmp 0x1400b6450
xor edx, edx
lea rcx, [rsp + 0xf0]
call fcn.1401436b0
jmp 0x1400b6240
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x28], rax
mov rdi, qword [rsp + 0xf8]
test rdi, rdi
je 0x1400b64a6
mov eax, esi
lock xadd dword [rdi + 8], eax
dec eax
jne 0x1400b64a6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + ioctlsocket]
mov eax, esi
lock xadd dword [rdi + 0xc], eax
dec eax
jne 0x1400b64a6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + select]
mov rdi, qword [rsp + 0x38]
cmp qword [rdi + 0x18], 8
jb 0x1400b64b7
mov rcx, qword [rdi]
jmp 0x1400b64ba
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
setne al
test al, al
jne 0x1400b6548
cmp qword [rdi + 0x18], 8
jb 0x1400b64d5
mov rdx, qword [rdi]
jmp 0x1400b64d8
mov rdx, rdi
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x78], 7
mov qword [rsp + 0x70], rbx
mov word [rsp + 0x60], bx
cmp word [rdx], 0
jne 0x1400b6500
mov rsi, rbx
jmp 0x1400b650a
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x1400b6500
mov r8, rsi
lea rcx, [rsp + 0x60]
call fcn.14003ca90
nop
lea rcx, [rsp + 0x60]
call fcn.140040bb0
nop
cmp qword [rsp + 0x78], 8
jb 0x1400b6535
mov rcx, qword [rsp + 0x60]
call fcn.1400ed78c
mov qword [rsp + 0x78], 7
mov qword [rsp + 0x70], rbx
mov word [rsp + 0x60], bx
cmp qword [rdi + 0x18], 8
jb 0x1400b6557
mov rcx, qword [rdi]
call fcn.1400ed78c
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.1400efba0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret