Function at 0x14000be00
Capabilities:
Delete file

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
movaps xmmword [rsp + 0x60], xmm6
mov rdi, rdx
mov rbx, rcx
mov dword [rsp + 0x38], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 7
mov qword [rsp + 0x54], 0
mov word [rsp + 0x5c], 0
mov byte [rsp + 0x59], 1
mov byte [rsp + 0x5c], 1
mov byte [rsp + 0x5b], 1
lea rcx, str.key.bin:_
lea r8, [rsp + 0x38]
mov edx, 7
call fcn.140046150
mov r12, rdx
test rax, rax
jne 0x14000be9b
mov qword [rsp + 0x28], r12
lea rsi, [rsp + 0x28]
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.14001a740
mov rdi, rax
mov rcx, r12
call sub.kernel32.dll_CloseHandle
mov r12, rdi
test rdi, rdi
je 0x14000beb4
mov rax, r12
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor esi, esi
xorps xmm6, xmm6
lea rax, [rsp + 0x28]
mov qword [rsp + 0x30], rax
nop word cs:[rax + rax]
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x40]
movups xmmword [rax], xmm6
mov dword [rsp + 0x50], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x59], 1
mov edx, 7
lea rcx, str.key.bin:_
lea r8, [rsp + 0x38]
call fcn.140046150
mov r12, rdx
test rax, rax
jne 0x14000be9b
mov qword [rsp + 0x28], r12
mov edx, 0x20
mov ecx, 8
call fcn.140057e30
mov rdi, rax
test rax, rax
mov eax, 0x20
cmove rdi, rax
je 0x14000c0f9
call fcn.140015dc0
test rax, rax
je 0x14000c108
mov r12, qword [rax]
inc qword [r12]
je 0x14000c131
inc esi
lea r13, [r12 + 0x10]
lea rbp, [r12 + 0x120]
mov rax, qword [r12 + 0x110]
xor r15d, r15d
nop word [rax + rax]
cmp rax, 0x40
jb 0x14000bfd9
mov rax, qword [r12 + 0x158]
test rax, rax
jle 0x14000bfc0
cmp qword [r12 + 0x160], 0
js 0x14000bfc0
add rax, 0xffffffffffffff00
mov qword [r12 + 0x158], rax
mov rcx, rbp
mov rdx, r13
call fcn.1400161a0
jmp 0x14000bfcb
mov rcx, rbp
mov rdx, r13
call fcn.140015c50
mov qword [r12 + 0x110], 0
xor eax, eax
mov edx, 0x40
sub rdx, rax
mov ebx, 0x20
sub rbx, r15
lea ecx, [rdx*4]
cmp rcx, rbx
cmovb rbx, rcx
lea rcx, [rbx + 3]
mov r14d, ecx
shr r14d, 2
cmp r14, rdx
ja 0x14000c0d9
and ecx, 0x7c
cmp ebx, ecx
ja 0x14000c0e2
lea rdx, [rax*4]
add rdx, r13
lea rcx, [rdi + r15]
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r14, qword [r12 + 0x110]
mov qword [r12 + 0x110], r14
add r15, rbx
mov rax, r14
cmp r15, 0x20
jb 0x14000bf80
dec qword [r12]
jne 0x14000c070
dec qword [r12 + 8]
jne 0x14000c070
mov rcx, qword [0x1400810e8]
xor edx, edx
mov r8, r12
call fcn.1400615a4
nop dword [rax + rax]
mov r8d, 0x20
lea rcx, [rsp + 0x28]
mov rdx, rdi
call fcn.14001a740
mov r12, rax
mov rcx, qword [0x1400810e8]
xor edx, edx
mov r8, rdi
call fcn.1400615a4
mov rcx, qword [rsp + 0x28]
call sub.kernel32.dll_CloseHandle
test r12, r12
jne 0x14000be9b
cmp esi, 7
jne 0x14000bed0
lea rcx, str.key.bin:_
mov edx, 7
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.14001a670
lea r8, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rand_core_0.6.4_src_impls.rs
jmp 0x14000c0ef
mov r14, rbx
mov rdx, rcx
lea r8, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rand_core_0.6.4_src_impls.rs
mov rcx, r14
call fcn.14000f4f0
jmp 0x14000c131
mov ecx, 1
mov rdx, rdi
call fcn.14000e2b0
jmp 0x14000c131
lea rax, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_std_src_threadlocal.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x140073ce3]
lea r9, [0x1400730c0]
lea r8, [rsp + 0x38]
mov edx, 0x46
call fcn.1400108e0
ud2