Function at 0x14000cec0
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x3b8]
sub rsp, 0x4a0
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1402cb768]
xor rax, rsp
mov qword [rbp + 0x390], rax
movzx r15d, dl
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp - 0x70]
call fcn.1401de4e0
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp + 0x90]
call fcn.1401de4e0
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp + 0x190]
call fcn.1401de4e0
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp + 0x290]
call fcn.1401de4e0
lea rcx, [rsp + 0x58]
call fcn.140037c70
nop
call fcn.1400311c4
mov rcx, rax
test rax, rax
jne 0x14000cf6f
mov ecx, 0x80004005
call fcn.140009c20
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
lea rcx, str.ASM4242DevInfo.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r14 + 6]
lea rcx, str.ASM4242DevInfo.txt
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
lea r8d, [r14 + 2]
lea rdx, str.ASM4242DevInfo.txt
lea rcx, [rsp + 0x58]
call fcn.14003852c
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x58]
mov rax, qword [rsp + 0x58]
call qword [rax + 0x58]
xor sil, sil
or rdi, 0xffffffffffffffff
test r15b, r15b
je 0x14000d2cd
nop
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp - 0x70]
call fcn.1401de4e0
mov rax, qword [0x1402de1f0]
movzx ecx, byte [r14 + rax + 0x1071]
movzx edx, byte [r14 + rax + 0x1070]
movzx r10d, byte [r14 + rax + 0x106f]
movzx r11d, byte [r14 + rax + 0x106e]
movzx ebx, byte [r14 + rax + 0x106d]
movzx r9d, byte [r14 + rax + 0x106c]
movzx r8d, sil
inc r8d
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ebx
lea rdx, str._02d:_02X_02X_02X__02X_02X__02X_r_n
lea rcx, [rsp + 0x50]
call fcn.140009a90
mov r8, qword [rsp + 0x50]
mov eax, dword [r8 - 0x10]
inc eax
movsxd rdx, eax
lea rcx, [rbp - 0x70]
call fcn.14000d560
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp + 0x90]
call fcn.1401de4e0
xor r8d, r8d
lea rdx, [0x140280a88]
lea rcx, [rsp + 0x50]
call fcn.140009510
mov r8, qword [0x1402de1f0]
mov r8, qword [r14 + r8 + 0x12bf]
lea rdx, str.DownStream__1_:__s_n
lea rcx, [rsp + 0x50]
call fcn.140009a90
mov r8, qword [0x1402de1f0]
mov r8, qword [r14 + r8 + 0x12bf]
lea rdx, str.DownStream__2_:__s_n
lea rcx, [rsp + 0x50]
call fcn.14000d530
mov r8, qword [rsp + 0x50]
mov eax, dword [r8 - 0x10]
inc eax
movsxd rdx, eax
lea rcx, [rbp + 0x90]
call fcn.14000d560
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp + 0x190]
call fcn.1401de4e0
xor r8d, r8d
lea rdx, [0x140280a88]
lea rcx, [rsp + 0x50]
call fcn.140009510
mov r8, qword [0x1402de1f0]
mov r8, qword [r14 + r8 + 0x1330]
lea rdx, str.XHCI__1_:__s_n
lea rcx, [rsp + 0x50]
call fcn.140009a90
mov r8, qword [0x1402de1f0]
mov r8, qword [r14 + r8 + 0x1368]
lea rdx, str.XHCI__2_:__s_n
lea rcx, [rsp + 0x50]
call fcn.14000d530
mov r8, qword [rsp + 0x50]
mov eax, dword [r8 - 0x10]
inc eax
movsxd rdx, eax
lea rcx, [rbp + 0x190]
call fcn.14000d560
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp + 0x290]
call fcn.1401de4e0
xor r8d, r8d
lea rdx, [0x140280a88]
lea rcx, [rsp + 0x50]
call fcn.140009510
mov r8, qword [0x1402de1f0]
mov r8, qword [r14 + r8 + 0x13b0]
lea rdx, str.DP__1_:__s_n
lea rcx, [rsp + 0x50]
call fcn.140009a90
mov r8, qword [0x1402de1f0]
mov r8, qword [r14 + r8 + 0x13f8]
lea rdx, str.DP__2_:__s_n_n
lea rcx, [rsp + 0x50]
call fcn.14000d530
mov rbx, qword [rsp + 0x50]
mov eax, dword [rbx - 0x10]
inc eax
movsxd rdx, eax
mov r8, rbx
lea rcx, [rbp + 0x290]
call fcn.14000d560
lea rax, [rbp - 0x70]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d222
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x58]
call fcn.1400388fc
lea rax, [rbp + 0x90]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d244
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x58]
call fcn.1400388fc
lea rax, [rbp + 0x190]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000d270
lea rdx, [rbp + 0x190]
lea rcx, [rsp + 0x58]
call fcn.1400388fc
lea rax, [rbp + 0x290]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d295
lea rdx, [rbp + 0x290]
lea rcx, [rsp + 0x58]
call fcn.1400388fc
lea rcx, [rsp + 0x58]
call fcn.140038400
inc sil
add r14, 0x40e
cmp sil, r15b
jb 0x14000d000
lea rcx, [rsp + 0x58]
call fcn.14003810c
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14000d2f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x58]
call fcn.140037da4
mov eax, 1
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.1401d87c0
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret