Function at 0x140280367
Capabilities:
Delete file
Execute command

Disassembly:
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x14000577c
lea rdx, [0x1400878f8]
mov rcx, qword [0x1400794c8]
call fcn.14000d080
lea rdx, [0x14000d250]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000578a
lea rcx, [0x14008790c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400057ca
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400057c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140075e2c
mov rax, rbx
mov rcx, qword [rsp + 0x80]
sub rax, rcx
cmp rax, 0x19
jb 0x140005b31
lea r9, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r9, qword [rsp + 0x70]
mov qword [rsp + 0x30], Ordinal_32
lea rax, str.:GamesRustdiscordvoite
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.14000e790
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x14000585b
lea rdx, [0x1400878f8]
mov rcx, qword [0x1400794c8]
call fcn.14000d080
lea rdx, [0x14000d250]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140005869
lea rcx, [0x14008790c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400058a9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400058a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140075e2c
mov rax, rbx
mov rcx, qword [rsp + 0x80]
sub rax, rcx
cmp rax, 0x1a
jb 0x140005b36
lea r9, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r9, qword [rsp + 0x70]
mov qword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_26
lea rax, str.:GamesRustgalaxy.bundle
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.14000e790
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x14000593a
lea rdx, [0x1400878f8]
mov rcx, qword [0x1400794c8]
call fcn.14000d080
lea rdx, [0x14000d250]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140005948
lea rcx, [0x14008790c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140005988
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005983
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005983
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140075e2c
mov rax, qword [rsp + 0x80]
sub rbx, rax
cmp rbx, 0x18
jb 0x140005b3b
lea r9, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r9, qword [rsp + 0x70]
mov qword [rsp + 0x30], Ordinal_32
lea rcx, str.:GamesRustofflinetray
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x40]
call fcn.14000e790
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x140005a16
lea rdx, [0x1400878f8]
mov rcx, qword [0x1400794c8]
call fcn.14000d080
lea rdx, [0x14000d250]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140005a24
lea rcx, [0x14008790c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140005a65
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140075e2c
nop
lea rcx, [0x140087890]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n____GkClean_n
mov rcx, qword [0x1400794c8]
call fcn.14000d080
lea rdx, [0x14000d250]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._n1._invis.hack_n2._Crystal_n3._clarity.cc_n4.
mov rcx, qword [0x1400794c8]
call fcn.14000d080
lea rdx, [0x14000d250]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140005afc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005af7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005af7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140075e2c
xor eax, eax
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140075b80
add rsp, 0xa0
pop rbx
ret
call fcn.140001f00
call fcn.140001f00
call fcn.140001f00
int3
mov qword [rsp + 0x68], r9
ja 0x140356138
lea rdx, [r9 + rdx*4 + 0x4b9f6c3a]
or edx, dword [rsp + 0x64]
mov rdi, rdx
lea rsi, [rsi + r9 - 0x1a2fd805]
call fcn.1402cc358
and rbp, 0x18e04b32
mov rbp, qword [rsp + 0x30]
mov rbp, qword [rbp + riz]
movabs r10, 0x44c3a224d5d5868
add rbx, rbx
cmp bx, 0x234f
jns 0x14000574d
test edx, ebx
lea rbp, [rbp + rdx - 0x6142a093]
call fcn.1402b542c