Function at 0x14000ab00
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rbx, rcx
cmp byte [rcx + 0xa0], 1
je 0x14000ab3a
call fcn.14000bfd0
mov rcx, rbx
call fcn.14000c2c0
mov rcx, qword [rbx + 8]
cmp rcx, 0xffffffffffffffff
je 0x14000ab4a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14000e3e0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14000d270
mov esi, eax
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14000aba7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aba2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ae4a
call fcn.140021138
test esi, esi
js 0x14000ae25
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14000e4c0
nop
mov r8d, 4
lea rdx, str..sys
mov rcx, rax
call fcn.140012f60
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14000ac45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ac40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ae50
call fcn.140021138
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], bx
cmp qword [rsp + 0x40], 0
jne 0x14000ac6a
mov esi, 0xc0000001
jmp 0x14000ade7
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.14000f5d0
nop
call fcn.14002c180
movsxd rcx, eax
movabs rax, 0x1c926b9d39431d5f
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0x23d6df
sub rcx, rax
add ecx, 0xdd9d
movsxd r14, ecx
mov rcx, r14
call fcn.14002166c
mov rdi, rax
test r14, r14
je 0x14000ad02
nop dword [rax]
call fcn.14002c180
mov r9d, eax
mov eax, 0x80808081
imul r9d
add edx, r9d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r9d, ecx
mov byte [rbx + rdi], r9b
inc rbx
cmp rbx, r14
jb 0x14000acd0
mov r8, r14
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.14000f6f0
lea rcx, [rsp + 0x78]
call fcn.140010160
test rax, rax
jne 0x14000ad4f
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea r9, [rsp + 0x70]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.140009c20
mov rcx, rdi
call fcn.140021138
nop word [rax + rax]
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000ad60
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x78]
call fcn.14000f320
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x6c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x18], rax
lea rcx, [rbp + 0x18]
call fcn.1400206bc
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14000ae25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ae44
call fcn.140021138
mov eax, esi
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.14002e15c
int3
call fcn.14002e15c
nop
call fcn.14002e15c
nop
int3