Function at 0x140090ef0
Capabilities:
Delete file

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x160
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xd8], 0xfffffffffffffffe
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140090f20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rsi, [rbp - 0x50]
mov rcx, rsi
call fcn.14008fc50
mov rcx, rsi
call fcn.1400af620
mov ebx, eax
lea rcx, [rbp - 0x50]
call fcn.1400a5220
cmp dword [0x1406e7e60], 0xa
jl 0x140090f62
mov eax, dword [0x1406e7e64]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140090f62
nop dword [rax]
jmp 0x140090f60
cmp dword [0x1406e856c], 0xa
jl 0x140090f82
mov eax, dword [0x1406e8568]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140090f82
nop dword [rax]
jmp 0x140090f80
cmp dword [0x1406e7be8], 0xa
jl 0x140090fa2
mov eax, dword [0x1406e7bec]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140090fa2
nop dword [rax]
jmp 0x140090fa0
test bl, bl
je 0x140091102
lea rsi, [rbp + 0xb8]
mov rcx, rsi
call fcn.14008ffb0
cmp qword [rbp + 0xd0], 8
jb 0x140090fca
mov rsi, qword [rbp + 0xb8]
mov dword [rsp + 0x20], 1
lea rcx, [rbp - 0x50]
mov rdx, rsi
mov r8d, Ordinal_35
mov r9d, 0x40
call fcn.140094230
mov r14, qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call r14
mov esi, eax
call r14
movsxd rdx, esi
movsxd rcx, eax
imul rcx, rdx
movabs rdx, 0x431bde82d7b634db
mov rax, rcx
imul rdx
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x13
add rdx, rax
imul rax, rdx, 0x1e8480
neg rax
lea rdi, [rcx + rax]
add rdi, 0x8af0
mov rcx, rdi
call fcn.1401fc498
mov rsi, rax
test rdi, rdi
je 0x14009107a
xor ebx, ebx
nop dword [rax + rax]
call r14
cdqe
imul rcx, rax, 0xffffffff80808081
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
shr ecx, 7
add ecx, edx
add ecx, eax
mov byte [rsi + rbx], cl
add rbx, 1
cmp rdi, rbx
jne 0x140091050
lea rcx, [rbp - 0x50]
mov rdx, rsi
mov r8, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
je 0x1400910b9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.____Error_dumping_shit_inside_the_disk
call fcn.140090c40
mov rcx, rax
call fcn.140090e60
lea rcx, [rbp - 0x48]
call fcn.1400a2f90
test rax, rax
jne 0x1400910e7
mov rax, qword [rbp - 0x50]
movsxd rax, dword [rax + 4]
lea rcx, [rax + rbp]
add rcx, 0xffffffffffffffb0
mov edx, dword [rbp + rax - 0x40]
or edx, 2
xor r8d, r8d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
mov rcx, rsi
call fcn.1401fc464
cmp qword [rbp + 0xd0], 8
jb 0x140091114
mov rcx, qword [rbp + 0xb8]
jmp 0x14009111b
xor esi, esi
mov eax, esi
add rsp, 0x160
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
lea rcx, [rbp + 0xb8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
sete sil
cmp dword [0x1406e7c30], 0xa
jl 0x140091152
mov eax, dword [0x1406e7c34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140091152
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x140091150
lea rdi, [rbp + 0x58]
mov rcx, rdi
call fcn.1400a2ba0
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
lea rcx, [rbp + 0xb8]
call fcn.1400a5220
cmp dword [0x1406e7e60], 0xa
jl 0x140091192
mov eax, dword [0x1406e7e64]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140091192
nop dword [rax]
jmp 0x140091190
cmp dword [0x1406e856c], 0xa
jl 0x1400911b2
mov eax, dword [0x1406e8568]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400911b2
nop dword [rax]
jmp 0x1400911b0
cmp dword [0x1406e7be8], 0xa
jl 0x140091104
mov eax, dword [0x1406e7bec]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140091104
nop word cs:[rax + rax]
nop
jmp 0x1400911e0