Function at 0x14004ce40
Capabilities:
Delete file

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x640
movaps xmmword [r11 - 0x38], xmm6
mov rax, qword [0x140099038]
xor rax, rsp
mov qword [rsp + 0x620], rax
mov qword [rsp + 0x40], rdx
mov rdi, rcx
mov qword [rsp + 0x60], rcx
xor esi, esi
mov dword [rsp + 0x70], esi
mov word [rcx + 0x51], si
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa0], xmm0
mov qword [r11 - 0x5b8], rsi
movdqu xmmword [rsp + 0x78], xmm0
mov qword [r11 - 0x5e0], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
lea ecx, [rsi + 0x48]
call fcn.140050344
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], 7
mov word [rsp + 0x120], si
lea r8d, [rsi + 1]
lea rdx, [0x14008ab38]
lea rcx, [rsp + 0x120]
call fcn.14001d430
nop
lea r15, [rdi + 0x18]
mov r8, qword [r15 + 0x10]
mov qword [rsp + 0x48], r8
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, r8
mov rcx, qword [rsp + 0x130]
cmp rax, rcx
jb 0x14004df5a
mov qword [rsp + 0x68], r15
cmp qword [r15 + 0x18], 8
jb 0x14004cf48
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
lea r13, [rsp + 0x120]
cmp qword [rsp + 0x138], 8
cmovae r13, qword [rsp + 0x120]
mov qword [rsp + 0x210], rsi
mov qword [rsp + 0x218], rsi
lea r12, [r8 + rcx]
mov edi, 7
lea rbx, [rsp + 0x200]
cmp r12, rdi
jbe 0x14004d04d
mov rdi, r12
or rdi, 7
cmp rdi, rdx
jbe 0x14004cfa7
mov rdi, rdx
mov r14, 0xfffffffffffffffe
mov rcx, r14
jmp 0x14004cfdd
mov edx, 0xa
cmp rdi, rdx
cmovb rdi, rdx
lea rcx, [rdi + 1]
movabs rdx, 0x7fffffffffffffff
cmp rcx, rdx
ja 0x14004df60
add rcx, rcx
cmp rcx, 0x1000
jb 0x14004d016
mov r14, 0xfffffffffffffffe
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004df60
mov rcx, rax
call fcn.140050344
test rax, rax
je 0x14004ddd1
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov r8, qword [rsp + 0x48]
mov qword [rsp + 0x200], rbx
jmp 0x14004d054
test rcx, rcx
je 0x14004d039
call fcn.140050344
mov rbx, rax
mov r8, qword [rsp + 0x48]
mov r14, 0xfffffffffffffffe
mov qword [rsp + 0x200], rax
jmp 0x14004d054
mov rbx, rsi
mov r14, 0xfffffffffffffffe
mov qword [rsp + 0x200], rbx
jmp 0x14004d054
mov r14, 0xfffffffffffffffe
mov qword [rsp + 0x210], r12
mov qword [rsp + 0x218], rdi
lea rdi, [r8 + r8]
mov r8, rdi
mov rdx, qword [rsp + 0x68]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + rbx]
mov r8, qword [rsp + 0x130]
add r8, r8
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + r12*2], si
mov qword [rsp + 0x1f0], rsi
mov edi, 0xf
mov qword [rsp + 0x1f8], rdi
mov byte [rsp + 0x1e0], 0
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xf8], rdi
mov byte [rsp + 0xe0], 0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x1e0]
call fcn.14004fc70
nop
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], rsi
lea r12, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae r12, qword [rsp + 0x1e0]
mov rbx, qword [rsp + 0x1f0]
cmp rbx, 0x10
jae 0x14004d126
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0xc0], xmm0
jmp 0x14004d1a3
mov rdi, rbx
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14004d17d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004df66
mov rcx, rax
call fcn.140050344
mov rcx, rax
test rax, rax
je 0x14004d176
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004d18c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14004d189
call fcn.140050344
jmp 0x14004d18c
mov rax, rsi
mov qword [rsp + 0xc0], rax
lea r8, [rbx + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rdi
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x1c0]
call fcn.14001e040
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x40]
mov r13, qword [rdx + 0x10]
movabs rax, 0x7ffffffffffffffe
mov rcx, rax
sub rcx, r13
cmp rcx, 1
jb 0x14004df6c
cmp qword [rdx + 0x18], 8
jb 0x14004d1ff
mov rdx, qword [rdx]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xf8], rsi
lea r12, [r13 + 1]
mov edi, 7
lea rbx, [rsp + 0xe0]
cmp r12, rdi
jbe 0x14004d2bd
mov rdi, r12
or rdi, 7
cmp rdi, rax
jbe 0x14004d23a
mov rdi, rax
jmp 0x14004d26a
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea r14, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x14004df72
add r14, r14
cmp r14, 0x1000
jb 0x14004d29b
lea rcx, [r14 + 0x27]
cmp rcx, r14
jbe 0x14004df72
call fcn.140050344
test rax, rax
je 0x14004d294
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rdx, qword [rsp + 0x40]
jmp 0x14004d2b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r14, r14
je 0x14004d2b2
mov rcx, r14
call fcn.140050344
mov rbx, rax
mov rdx, qword [rsp + 0x40]
jmp 0x14004d2b5
mov rbx, rsi
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xf0], r12
mov qword [rsp + 0xf8], rdi
lea rdi, [r13*2]
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x2e
mov word [rdi + rbx], ax
mov word [rbx + r12*2], si
mov r9, qword [rsp + 0x48]
lea r8, [rsp + 0xe0]
lea rcx, [rsp + 0x220]
call fcn.14004cc80
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 8
jb 0x14004d355
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d34f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d34f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 8
jb 0x14004d3a0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d39b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d39b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], si
mov r14, qword [rsp + 0x60]
lea rcx, [r14 + 0x10]
lea rdx, [rsp + 0x220]
call fcn.140049460
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x200]
call fcn.14004b410
cmp qword [r15 + 0x18], 8
jb 0x14004d3f1
mov r15, qword [r15]
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xf8], 7
mov word [rsp + 0xe0], si
mov r8, 0xffffffffffffffff
inc r8
cmp word [r15 + r8*2], 0
jne 0x14004d414
mov rdx, r15
lea rcx, [rsp + 0xe0]
call fcn.14001d430
nop
lea rdi, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae rdi, qword [rsp + 0xe0]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], si
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x14004d480
mov rdx, rdi
lea rcx, [rsp + 0x100]
call fcn.14001d430
mov r13d, 0xf
mov dword [rsp + 0x70], r13d
mov rdx, qword [rsp + 0xf8]
cmp rdx, 8
jb 0x14004d4f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d4ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d4ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xf8], 7
mov word [rsp + 0xe0], si
mov rbx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
cmp rbx, rax
je 0x14004da0a
nop word [rax + rax]
cmp qword [rsp + 0x110], 0
jne 0x14004d635
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], rsi
mov r14, qword [rbx + 0x10]
mov r15, rbx
cmp qword [rbx + 0x18], 8
jb 0x14004d560
mov r15, qword [rbx]
cmp r14, 8
jae 0x14004d58c
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], r14
mov edi, 7
mov qword [rsp + 0xd8], rdi
jmp 0x14004d6dc
mov rdi, r14
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14004dfb3
add rcx, rcx
cmp rcx, 0x1000
jb 0x14004d5f6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004dfb3
mov rcx, rax
call fcn.140050344
mov rcx, rax
test rax, rax
je 0x14004da21
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004d605
test rcx, rcx
je 0x14004d602
call fcn.140050344
jmp 0x14004d605
mov rax, rsi
mov qword [rsp + 0xc0], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xd0], r14
mov qword [rsp + 0xd8], rdi
jmp 0x14004d6dc
lea rdi, [rsp + 0x3d0]
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 8
cmovae rdx, qword [rsp + 0x100]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14004d67b
mov rdx, qword [rbx]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], 7
mov word [rsp + 0xc0], si
lea rax, [rsp + 0x3d0]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14004d6b4
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0xc0]
call fcn.14001d430
mov rdi, qword [rsp + 0xd8]
or r13d, 0x10
lea rcx, [rsp + 0xc0]
cmp rdi, 8
cmovae rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14004d787
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rcx, rdi
test eax, eax
je 0x14004d781
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x14004d787
lea r8, [rsp + 0x1c0]
lea rdx, [rsp + 0x240]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x40], rax
jmp 0x14004d78c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rsi
mov r14, qword [rsp + 0xd0]
lea r15, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae r15, qword [rsp + 0xc0]
cmp r14, 8
jae 0x14004d7e9
movups xmm6, xmmword [r15]
movups xmmword [rsp + 0x148], xmm6
mov qword [rsp + 0x160], 7
jmp 0x14004d88d
mov rdi, r14
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14004dfbf
add rcx, rcx
cmp rcx, 0x1000
jb 0x14004d853
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004dfbf
mov rcx, rax
call fcn.140050344
mov rcx, rax
test rax, rax
je 0x14004da28
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004d862
test rcx, rcx
je 0x14004d85f
call fcn.140050344
jmp 0x14004d862
mov rax, rsi
mov qword [rsp + 0x148], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x160], rdi
movups xmm6, xmmword [rsp + 0x148]
mov qword [rsp + 0x158], r14
mov rdi, qword [rsp + 0x50]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rsi
mov ecx, 0x48
call fcn.140050344
mov r8, rax
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x40]
mov qword [r8 + 0x20], rax
movups xmmword [r8 + 0x28], xmm6
movups xmm0, xmmword [rsp + 0x158]
movups xmmword [r8 + 0x38], xmm0
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], 7
mov word [rsp + 0x148], si
mov qword [r8], rdi
mov qword [r8 + 8], rdi
mov qword [r8 + 0x10], rdi
mov word [r8 + 0x18], 0
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], esi
cmp byte [rcx + 0x19], 0
jne 0x14004d95f
mov rax, qword [r8 + 0x20]
nop
mov qword [rsp + 0x1a0], rcx
cmp rax, qword [rcx + 0x20]
jae 0x14004d94e
mov dword [rsp + 0x1a8], 1
mov rcx, qword [rcx]
jmp 0x14004d959
mov dword [rsp + 0x1a8], esi
mov rcx, qword [rcx + 0x10]
cmp byte [rcx + 0x19], 0
je 0x14004d930
movabs rax, 0x38e38e38e38e38e
cmp qword [rsp + 0x58], rax
je 0x14004dfb9
mov qword [rsp + 0x98], rsi
movups xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0x1a0], xmm0
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x50]
call fcn.14003ae60
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, 8
jb 0x14004d9e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d9de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004da2f
call fcn.1400505d0
add rbx, 0x20
mov rax, qword [rsp + 0xa8]
cmp rbx, rax
jne 0x14004d530
mov dword [rsp + 0x70], r13d
mov rbx, qword [rsp + 0xa0]
mov r14, qword [rsp + 0x60]
sub rax, rbx
sar rax, 5
mov rcx, qword [rsp + 0x58]
cmp rcx, rax
jne 0x14004df78
jmp 0x14004da36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub ecx, dword [r14 + 0x44]
inc ecx
test ecx, ecx
cmovle ecx, esi
mov dword [rsp + 0x68], ecx
mov ebx, esi
mov dword [rsp + 0x60], ebx
mov rdi, qword [rsp + 0x50]
mov rdi, qword [rdi]
lea r14, vtable.iusl::File.0
mov qword [rsp + 0x40], rdi
nop
cmp rdi, qword [rsp + 0x50]
je 0x14004dba4
cmp ebx, dword [rsp + 0x68]
je 0x14004dba4
mov qword [rsp + 0x140], r14
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x148]
call fcn.1400239e0
mov qword [rsp + 0x168], rsi
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x3d0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x148]
cmp qword [rsp + 0x160], 8
cmovae rcx, qword [rsp + 0x148]
lea rdx, [rsp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x14004db39
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rax, qword [rsp + 0x140]
lea rcx, [rsp + 0x140]
mov rax, qword [rax + 0x18]
call qword [0x14007f8e0]
lea rcx, [rsp + 0x148]
cmp qword [rsp + 0x160], 8
cmovae rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14004dfc5
jmp 0x14004db39
inc ebx
mov dword [rsp + 0x60], ebx
lea rcx, [rsp + 0x140]
call fcn.140048ef0
mov rax, qword [rdi + 0x10]
cmp byte [rax + 0x19], 0
je 0x14004db80
mov rax, qword [rdi + 8]
cmp byte [rax + 0x19], 0
jne 0x14004db73
cmp rdi, qword [rax + 0x10]
jne 0x14004db73
mov rdi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14004db60
mov rdi, rax
mov qword [rsp + 0x40], rax
jmp 0x14004da60
mov rdi, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14004da5a
mov rdi, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14004db90
jmp 0x14004da5a
mov r14, qword [rsp + 0x80]
mov rax, r14
mov rbx, qword [rsp + 0x78]
sub rax, rbx
sar rax, 5
test rax, rax
je 0x14004dc7d
lea rcx, [rsp + 0xe0]
call fcn.1400239c0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.140048e60
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x78]
call fcn.140048e50
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14003d940
test al, al
je 0x14004e060
lea rcx, [rsp + 0x40]
call fcn.14004e1a0
mov rdx, rax
lea r8, [0x14008ab70]
lea rcx, [rsp + 0xc0]
call fcn.14003f850
nop
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.140024090
nop
lea rcx, [rsp + 0xc0]
call fcn.14001d2e0
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x40]
call fcn.14004e180
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x78]
call fcn.140048e50
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14003d940
test al, al
je 0x14004e060
jmp 0x14004dc05
mov rdx, qword [rsp + 0x118]
cmp rdx, 8
jb 0x14004dcc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dcc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dcc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], si
mov rdx, qword [rsp + 0x238]
cmp rdx, 8
jb 0x14004dd2f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dd2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dd2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], si
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0x10
jb 0x14004dd92
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dd8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dd8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 8
jb 0x14004ddde
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ddd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ddd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 8
jb 0x14004de2a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004de24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004de24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
nop
mov r8, qword [rsp + 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140041620
mov edx, 0x48
mov rcx, qword [rsp + 0x50]
call fcn.1400505d0
nop
test rbx, rbx
je 0x14004deb1
mov rdi, rbx
cmp rbx, r14
je 0x14004de71
nop
mov rcx, rdi
call fcn.140025b40
add rdi, 0x20
cmp rdi, r14
jne 0x14004de60
mov rdx, qword [rsp + 0x88]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14004dea8
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dea8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400505d0
nop
mov rdi, qword [rsp + 0xa0]
test rdi, rdi
je 0x14004df28
mov rbx, qword [rsp + 0xa8]
cmp rdi, rbx
je 0x14004dee9
nop dword [rax + rax]
mov rcx, rdi
call fcn.140025b40
add rdi, 0x20
cmp rdi, rbx
jne 0x14004ded0
mov rdi, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xb0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x14004df20
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004df20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400505d0
mov rcx, qword [rsp + 0x620]
xor rcx, rsp
call fcn.140050320
lea r11, [rsp + 0x640]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.14001d2c0
nop
call fcn.14001d220
nop
call fcn.14001d220
nop
call fcn.14001d2c0
int3
call fcn.14001d220
nop
lea rcx, [rsp + 0x140]
call fcn.14001dc80
nop
mov rcx, rax
call fcn.14004e1b0
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.14001dd70
lea rdx, [0x140095020]
lea rcx, [rsp + 0x250]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.14001d220
nop
call fcn.1400370e0
nop
call fcn.14001d220
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0xe0]
call fcn.1400239e0
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.14001ded0
mov rdi, rax
lea rcx, [rsp + 0x370]
call fcn.14001dc80
nop
lea rdx, str.Error_when_deleting_file:
mov rcx, rax
call fcn.140024ad0
mov rdx, rdi
mov rcx, rax
call fcn.14003ac60
lea rdx, str.Last_error:
mov rcx, rax
call fcn.140024ad0
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.14002f630
mov rdx, rax
lea rcx, [rsp + 0x2b0]
call fcn.14001dd70
lea rdx, [0x140095020]
lea rcx, [rsp + 0x2b0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xc0]
call fcn.1400239e0
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14001ded0
mov rdi, rax
lea rcx, [rsp + 0x370]
call fcn.14001dc80
nop
lea rdx, str.Unable_to_remove_file_s_:
mov rcx, rax
call fcn.140024ad0
mov rcx, rax
mov rdx, rdi
call fcn.14003ac60
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.14001dd70
lea rdx, [0x140095020]
lea rcx, [rsp + 0x310]
call sub.VCRUNTIME140.dll__CxxThrowException
int3