Function at 0x140176fc0
Capabilities:
Delete file

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1c8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x140], 0xfffffffffffffffe
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140176ff6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rsi, [rbp - 0x58]
mov rcx, rsi
call fcn.140172c70
mov rcx, rsi
call fcn.1401cd9f0
mov ebx, eax
lea rcx, [rbp - 0x58]
call fcn.140173050
test bl, bl
je 0x140177144
lea r14, [rbp + 0xb0]
mov rcx, r14
call fcn.140173390
mov qword [rbp + 0x130], r14
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0xd0], rax
mov ecx, dword [0x140838628]
lea eax, [rcx - 1]
imul eax, ecx
test al, 1
mov ecx, 0x87cb3ba
mov esi, 0x6d399cbb
cmove esi, ecx
mov r9d, dword [0x14083862c]
cmp r9d, 0xa
cmovl esi, ecx
cmp qword [rbp + 0xc8], 8
mov ecx, 0xd23b8eb7
mov edi, 0xa9ffcfb1
cmovae edi, ecx
mov ecx, 0x9a784426
mov r8d, 0x4b103473
nop word [rax + rax]
cmp ecx, 0xd23b8eb7
je 0x1401770b7
cmp ecx, 0xa9ffcfb1
je 0x14017714b
cmp ecx, 0x9a784426
jne 0x140177090
mov rdx, qword [rbp + 0xd0]
mov ecx, edi
jmp 0x140177090
test al, 1
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rcx]
sete byte [rbp + 0x13f]
cmp r9d, 0xa
setl byte [rbp + 0x13e]
mov ecx, 0xa48a7391
nop word [rax + rax]
cmp ecx, 0x4b103472
jg 0x140177100
cmp ecx, 0xa48a7391
je 0x140177117
cmp ecx, 0x87cb3ba
jne 0x1401770e0
jmp 0x14017713a
cmp ecx, 0x4b103473
je 0x140177136
cmp ecx, 0x6d399cbb
jne 0x1401770e0
mov ecx, 0x4b103473
jmp 0x1401770e0
movzx ebx, byte [rbp + 0x13f]
cmp byte [rbp + 0x13e], 0
mov ecx, 0x6d399cbb
cmovne ecx, r8d
test bl, bl
cmovne ecx, r8d
jmp 0x1401770e0
mov ecx, esi
jmp 0x1401770e0
mov ecx, 0xa9ffcfb1
jmp 0x140177090
xor esi, esi
jmp 0x140177791
mov dword [rsp + 0x20], 1
lea rcx, [rbp - 0x58]
mov r8d, Ordinal_35
mov r9d, 0x40
call fcn.1401834a0
mov r15, qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call r15
movsxd rdi, eax
call r15
movsxd rcx, eax
imul rcx, rdi
movabs rdx, 0x431bde82d7b634db
mov rax, rcx
imul rdx
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x13
add rdx, rax
imul rax, rdx, 0x1e8480
neg rax
lea rbx, [rcx + rax]
add rbx, 0x8af0
mov rcx, rbx
call fcn.140384228
mov rsi, rax
test rbx, rbx
je 0x1401771fa
xor edi, edi
nop word cs:[rax + rax]
nop
call r15
cdqe
imul rcx, rax, 0xffffffff80808081
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
shr ecx, 7
add ecx, edx
add ecx, eax
mov byte [rsi + rdi], cl
add rdi, 1
cmp rbx, rdi
jne 0x1401771d0
lea rcx, [rbp - 0x58]
mov rdx, rsi
mov r8, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
je 0x14017763e
mov qword [rbp + 0x128], rsi
movups xmm0, xmmword [0x1403ed1ae]
movups xmmword [rbp + 0x10e], xmm0
movups xmm0, xmmword [0x1403ed1a0]
movaps xmmword [rbp + 0x100], xmm0
movups xmm0, xmmword [0x1403ed190]
movaps xmmword [rbp + 0xf0], xmm0
movups xmm0, xmmword [0x1403ed180]
movaps xmmword [rbp + 0xe0], xmm0
mov eax, dword [0x140837bc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140837bcc], 0xa
setl cl
or cl, al
mov r8d, 0xd7bdbe26
mov eax, 0x9ff818d8
cmove r8d, eax
movups xmm0, xmmword [0x1403ed170]
mov r10d, 0x4c71b2d0
cmove r10d, eax
mov r12d, 0x49a707cd
mov eax, 0x56177c87
cmove r12d, eax
movaps xmmword [rbp + 0xd0], xmm0
mov ecx, 0x59b3702b
cmove ecx, eax
mov eax, dword [0x14083a5cc]
lea r15d, [rax - 1]
imul r15d, eax
test r15b, 1
mov edx, 0x96f0b618
mov edi, 0xe1993bbe
cmove edi, edx
mov r9d, dword [0x14083a5d0]
cmp r9d, 0xa
cmovl edi, edx
mov ebx, 0x8f055b54
mov r11d, 0xc81085f4
mov r13d, 0x989ee261
jmp 0x140177310
mov ebx, 0x4c71b2d0
nop word cs:[rax + rax]
nop dword [rax]
mov edx, ebx
cmp ebx, 0x49a707cc
jg 0x140177350
cmp edx, 0x9ff818d7
jle 0x140177380
cmp edx, 0x9ff818d8
je 0x1401772fd
mov ebx, ecx
cmp edx, 0x854fa70
je 0x140177310
mov ebx, edx
cmp edx, 0xd7bdbe26
jne 0x140177310
jmp 0x1401775e6
cmp edx, 0x56177c86
jg 0x1401773b0
cmp edx, 0x49a707cd
je 0x140177482
mov ebx, edx
cmp edx, 0x4c71b2d0
jne 0x140177310
mov ebx, r8d
jmp 0x140177310
cmp edx, 0x8f055b54
je 0x14017748c
mov ebx, edx
cmp edx, 0x9d0d8744
jne 0x140177310
mov ebx, r10d
jmp 0x140177310
cmp edx, 0x56177c87
je 0x140177508
mov ebx, edx
cmp edx, 0x59b3702b
jne 0x140177310
xor edx, edx
mov ebx, 0x91ee4feb
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0xa3749723
je 0x1401775b1
cmp ebx, 0x989ee261
je 0x140177420
cmp ebx, 0x91ee4feb
jne 0x1401773e0
mov dword [rbp + 0x130], edx
mov ebx, dword [rbp + 0x130]
cmp ebx, 0x27
mov ebx, 0xa3749723
cmovl ebx, r13d
jmp 0x1401773e0
movsxd rdx, dword [rbp + 0x130]
movsxd rbx, dword [rbp + 0x130]
imul rax, rbx, 0x5397829d
mov rsi, rax
shr rsi, 0x3f
sar rax, 0x24
add eax, esi
imul eax, eax, 0x31
sub ebx, eax
mov eax, 0xffc9
sub eax, ebx
add ebx, 0x36
and eax, 0xc96a
and ebx, 0x3695
or ebx, eax
xor bx, word [rbp + rdx*2 + 0xd0]
xor ebx, 0xc96a
mov word [rbp + rdx*2 + 0xd0], bx
mov edx, dword [rbp + 0x130]
add edx, 1
jmp 0x1401773cc
mov ebx, 0x9d0d8744
jmp 0x140177310
test r15b, 1
sete byte [rbp + 0x13f]
cmp r9d, 0xa
setl byte [rbp + 0x13e]
mov ebx, 0xd403daac
movzx edx, word [rbp + 0x11c]
nop
cmp ebx, 0xd403daab
jg 0x1401774d0
cmp ebx, 0x96f0b618
je 0x1401775b9
cmp ebx, 0xc81085f4
jne 0x1401774b0
mov ebx, edi
jmp 0x1401774b0
cmp ebx, 0xe1993bbe
je 0x140177501
cmp ebx, 0xd403daac
jne 0x1401774b0
movzx r14d, byte [rbp + 0x13f]
cmp byte [rbp + 0x13e], 0
mov ebx, 0xe1993bbe
cmovne ebx, r11d
test r14b, r14b
cmovne ebx, r11d
jmp 0x1401774b0
mov ebx, 0xc81085f4
jmp 0x1401774b0
xor edx, edx
mov ebx, 0x91ee4feb
nop
cmp ebx, 0xa3749723
je 0x1401775dc
cmp ebx, 0x989ee261
je 0x140177550
cmp ebx, 0x91ee4feb
jne 0x140177510
mov dword [rbp + 0x130], edx
mov eax, dword [rbp + 0x130]
cmp eax, 0x27
mov ebx, 0xa3749723
cmovl ebx, r13d
jmp 0x140177510
movsxd rdx, dword [rbp + 0x130]
movsxd rax, dword [rbp + 0x130]
imul rsi, rax, 0x5397829d
mov rbx, rsi
shr rbx, 0x3f
sar rsi, 0x24
add esi, ebx
imul esi, esi, 0x31
sub eax, esi
mov esi, 0xffc9
sub esi, eax
add eax, 0x36
and esi, 0xc96a
and eax, 0x3695
or eax, esi
xor ax, word [rbp + rdx*2 + 0xd0]
xor eax, 0xc96a
mov word [rbp + rdx*2 + 0xd0], ax
mov edx, dword [rbp + 0x130]
add edx, 1
jmp 0x14017750a
mov ebx, r12d
jmp 0x140177310
test dx, dx
setne byte [rbp + 0x130]
cmp byte [rbp + 0x130], 0
mov ebx, 0x9d0d8744
mov eax, 0x854fa70
cmovne ebx, eax
jmp 0x140177310
mov ebx, 0x59b3702b
jmp 0x140177310
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x130], rax
mov rdx, qword [rbp + 0x130]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140176ab0
lea r14, [rbp + 0xb0]
mov rsi, qword [rbp + 0x128]
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
mov rcx, rbx
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::put_wchar_t____ptr64]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::flush_void____ptr64]
lea rcx, [rbp - 0x58]
call fcn.1401836a0
mov rcx, rsi
call fcn.1403841f4
mov qword [rbp + 0x130], r14
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0xd0], rax
mov ecx, dword [0x140838628]
lea eax, [rcx - 1]
imul eax, ecx
test al, 1
mov ecx, 0x87cb3ba
mov esi, 0x6d399cbb
cmove esi, ecx
mov r9d, dword [0x14083862c]
cmp r9d, 0xa
cmovl esi, ecx
cmp qword [rbp + 0xc8], 8
mov ecx, 0xd23b8eb7
mov edi, 0xa9ffcfb1
cmovae edi, ecx
mov edx, 0x9a784426
mov r8d, 0x4b103473
nop dword [rax]
cmp edx, 0xd23b8eb7
je 0x1401776d7
cmp edx, 0xa9ffcfb1
je 0x140177764
cmp edx, 0x9a784426
jne 0x1401776b0
mov rcx, qword [rbp + 0xd0]
mov edx, edi
jmp 0x1401776b0
test al, 1
mov rcx, qword [rbp + 0x130]
mov rcx, qword [rcx]
sete byte [rbp + 0x13f]
cmp r9d, 0xa
setl byte [rbp + 0x13e]
mov edx, 0xa48a7391
nop word [rax + rax]
cmp edx, 0x4b103472
jg 0x140177720
cmp edx, 0xa48a7391
je 0x140177737
cmp edx, 0x87cb3ba
jne 0x140177700
jmp 0x14017775a
cmp edx, 0x4b103473
je 0x140177756
cmp edx, 0x6d399cbb
jne 0x140177700
mov edx, 0x4b103473
jmp 0x140177700
movzx ebx, byte [rbp + 0x13f]
cmp byte [rbp + 0x13e], 0
mov edx, 0x6d399cbb
cmovne edx, r8d
test bl, bl
cmovne edx, r8d
jmp 0x140177700
mov edx, esi
jmp 0x140177700
mov edx, 0xa9ffcfb1
jmp 0x1401776b0
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
sete sil
lea rdi, [rbp + 0x50]
mov rcx, rdi
call fcn.1401a8c40
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
lea rcx, [rbp + 0xb0]
call fcn.140173050
mov eax, esi
add rsp, 0x1c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret