Function at 0x140002150
Capabilities:
Create thread
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0x98
mov rax, qword [0x14000e010]
xor rax, rsp
mov qword [rbp - 9], rax
mov rdi, r9
mov r14, r8
mov r12, rdx
mov r15, rcx
mov r13, qword [rbp + 0x77]
mov rsi, qword [rbp + 0x7f]
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], 7
lea ecx, [rbx + 0x20]
call fcn.1400072a0
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x49], 9
mov qword [rbp - 0x41], 0xf
movups xmm0, xmmword [str.C:Google]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400097a0]
mov word [rax + 0x10], cx
mov word [rax + 0x12], bx
lea rcx, [rbp - 0x59]
call fcn.140001ba0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x140002222
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000221d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000221d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400075fc
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14000222f
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140002242
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x48
call fcn.1400072a0
mov rbx, rax
mov qword [rbp - 0x59], rax
mov rdx, r12
mov rcx, rax
call fcn.1400070c0
nop
lea rcx, [rbx + 0x20]
mov rdx, r15
call fcn.1400070c0
nop
lea r12, [0x140001dd0]
mov qword [rbx + 0x40], r12
mov qword [rbp - 0x59], rbx
lea rax, [rbp - 0x21]
mov qword [rsp + 0x28], rax
xor r15d, r15d
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x140007080]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x29], rax
test rax, rax
je 0x140002489
lea ecx, [r15 + 0x48]
call fcn.1400072a0
mov rbx, rax
mov qword [rbp - 0x59], rax
mov rdx, rdi
mov rcx, rax
call fcn.1400070c0
nop
lea rcx, [rbx + 0x20]
mov rdx, r14
call fcn.1400070c0
nop
mov qword [rbx + 0x40], r12
mov qword [rbp - 0x59], rbx
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x140007080]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x39], rax
test rax, rax
je 0x140002479
lea ecx, [r15 + 0x48]
call fcn.1400072a0
mov rbx, rax
mov qword [rbp - 0x59], rax
mov rdx, rsi
mov rcx, rax
call fcn.1400070c0
nop
lea rcx, [rbx + 0x20]
mov rdx, r13
call fcn.1400070c0
nop
mov qword [rbx + 0x40], r12
mov qword [rbp - 0x59], rbx
lea rax, [rbp - 0x11]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x140007080]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x140002469
cmp dword [rbp - 0x21], r15d
je 0x14000245d
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x21], eax
je 0x140002451
movaps xmm0, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x59], xmm0
xor edx, edx
lea rcx, [rbp - 0x59]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002445
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x29], xmm0
cmp dword [rbp - 0x31], eax
je 0x14000245d
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x31], eax
je 0x140002451
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x59], xmm0
xor edx, edx
lea rcx, [rbp - 0x59]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002445
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x39], xmm0
cmp dword [rbp - 0x11], eax
je 0x14000245d
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x11], eax
je 0x140002451
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x59], xmm0
xor edx, edx
lea rcx, [rbp - 0x59]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002445
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ecx, dword [rbp - 0x31]
mov edx, dword [rbp - 0x21]
test edx, edx
jne 0x14000242d
test ecx, ecx
jne 0x14000242d
mov al, 1
jmp 0x14000242f
xor al, al
test ecx, ecx
je 0x14000243a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
test edx, edx
je 0x140002499
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x31], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x21], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.140007280
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret