Function at 0x140002510
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x350
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
movabs rax, 0xfa840b829b2db44c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xb22e1a7a4d1ce9d9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xcdaf35272e3de2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rdi, 0xb03b65df2b589df6
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs r13, 0xfaea0bf09b48b427
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rsi, 0xb21c1a494d70e9bc
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs r14, 0xcb6f33e7287de01
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
vmovdqu ymm0, ymmword [rbp + 0xd0]
vpxor ymm1, ymm0, ymmword [rbp + 0x170]
vmovdqu ymmword [rbp + 0xd0], ymm1
lea rcx, [rbp + 0xd0]
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8, rax
movabs rax, 0x95a36e93f23ed163
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x50], rcx
movabs rax, 0xb270753b391e86ff
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x58], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x140], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x50], xmm0
lea rdx, [rbp + 0x50]
mov rcx, r8
call fcn.140002070
mov qword [0x1400ce560], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
movabs rbx, 0xfab60bde9b14b47b
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs r15, 0xb21c1a254d11e9f2
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x60], xmm0
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r8, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400027fb
movabs rax, 0xfa8f789ff70bc069
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x10], rcx
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0x18], rcx
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0x968e259cf72cc049
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xb21c1a494d70e9d0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.140008440
lea rax, [r12 - 1]
jmp 0x140002eb2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1400ce580], xmm0
movups xmmword [0x1400ce590], xmm0
movups xmmword [0x1400ce5a0], xmm0
movups xmmword [0x1400ce5b0], xmm0
movups xmmword [0x1400ce5c0], xmm0
movups xmmword [0x1400ce5d0], xmm0
mov dword [0x1400ce5e0], eax
movabs rax, 0x928d6d95ff2bd646
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0xc2737424211b83d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x74c1854b06f4ac70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0xf67e219c6919e78f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0xe7c0f077e67d216c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x9ff9da16a1ba053f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xd629bdea3e01e4f2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rcx, 0x7b6ae55bf0fe579a
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xa98dbc3cac34692b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xc9ac8e45f3eb5570
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xd629bdea6458bca5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x120], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], r12
lea rax, [rbp + 0x100]
mov r8, 0xffffffffffffffff
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x1400029f0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0xb0]
call fcn.14000a400
nop
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
add r8d, 0xa
movsxd rdi, r8d
test r8d, r8d
jle 0x140002ab2
mov rbx, r12
movabs r14, 0x842108421084211
lea r15, [0x1400ce580]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, r14
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x1f
sub rcx, rax
lea rax, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rax, qword [rbp + 0xb0]
movzx eax, byte [rax + rcx]
mov byte [rbx + r15], al
inc rbx
cmp rbx, rdi
jl 0x140002a51
movabs rbx, 0xfab60bde9b14b47b
movabs r15, 0xb21c1a254d11e9f2
lea rcx, [rbp + 0x20]
call fcn.1400022a0
nop
cmp qword [rbp + 0x30], 0
je 0x140002e10
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rcx, qword [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x1e0]
call fcn.140007c70
nop
mov r8d, 0x8708
lea rdx, [0x1400b1850]
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
lea rcx, [rbp + 0x1e8]
test al, al
je 0x140002bb9
call fcn.1400081a0
test rax, rax
jne 0x140002b5c
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1e0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x1dc], edx
lea rcx, [rbp + 0x1e8]
call fcn.140007c00
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x288]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x140002e10
call fcn.1400081a0
test rax, rax
jne 0x140002be6
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1e0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x1dc], edx
lea rcx, [rbp + 0x1e8]
call fcn.140007c00
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x288]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x20]
call fcn.14000d250
test al, al
jne 0x140002c64
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rcx, qword [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
jmp 0x140002e10
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x80], xmm0
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140002e08
movabs rax, 0x9684799be827c049
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xb21c1a4928088c92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
lea rax, [rbp + 0x10]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140002d66
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x90]
call fcn.14000a400
nop
lea rcx, [rbp + 0x90]
call fcn.14000e7a0
mov qword [0x1400ce5e8], rax
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140002ddf
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002dd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002dd3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
mov rax, qword [0x1400ce5e8]
mov rcx, rbx
test rax, rax
je 0x140002e0b
call fcn.1400053c0
mov rcx, rbx
test al, al
je 0x140002e0b
call fcn.1400062c0
mov rcx, rbx
test al, al
je 0x140002e0b
call fcn.140003fe0
test al, al
jne 0x140002e17
mov rcx, rbx
call fcn.140002ee0
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140002e5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140002eaf
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002eaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002eaa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
mov rax, rbx
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret