Function at 0x14000fc28
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x960
mov rax, qword [0x14007cb88]
xor rax, rsp
mov qword [rsp + 0x950], rax
mov rbx, rdx
mov qword [rsp + 0x198], rdx
mov dword [rsp + 0x128], ecx
xor edx, edx
mov r8d, 0x98
lea rcx, [rsp + 0x6a0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x4d0
lea rcx, [rsp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
nop
mov esi, 1
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call fcn.14002eb44
movzx ecx, byte [0x14009c737]
xor edi, edi
test al, al
cmovne ecx, esi
mov byte [0x14009c737], cl
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call fcn.14002eb44
movzx ecx, byte [0x14009c736]
test al, al
cmovne ecx, esi
mov byte [0x14009c736], cl
mov edx, esi
lea rcx, [0x14000fa28]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rax, [0x140087b18]
mov qword [0x1400981e8], rax
lea rdx, [0x140012f90]
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
lea rdx, [0x140012f90]
lea ecx, [rsi + 0xe]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
mov r14, qword [rbx]
or rsi, 0xffffffffffffffff
inc rsi
cmp word [r14 + rsi*2], di
jne 0x14000fd29
add rsi, 3
lea rcx, [rsi + rsi]
call fcn.14002adb4
mov rbx, rax
lea r8, [0x1400783e8]
mov rdx, rsi
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov r8, r14
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
lea r8, [0x1400783e8]
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov qword [0x140086ab8], rbx
mov r12d, 0x3f
mov dword [rsp + 0x170], r12d
mov dword [rsp + 0x114], edi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x108], rdi
lea r8, [0x140077c18]
xor edx, edx
lea rcx, [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wdupenv_s]
mov rbx, qword [rsp + 0x108]
test rbx, rbx
je 0x14000fff5
mov ecx, 0x1f8
call fcn.14002ad68
mov r13, rax
mov qword [rsp + 0x130], rax
mov r14, rax
mov qword [rsp + 0x178], rax
mov rcx, rbx
call fcn.14002ae14
mov rbx, rax
mov qword [rsp + 0x148], rax
test rax, rax
je 0x140010c34
mov r15b, dil
mov byte [rsp + 0x110], dil
mov edx, 0x20
movabs rsi, 0x100002600
lea r8d, [rdx + 2]
lea r9d, [rdx + 0x3c]
movzx ecx, word [rbx]
test cx, cx
je 0x14000ffed
cmp cx, dx
ja 0x14000fe55
movzx eax, cx
bt rsi, rax
jae 0x14000fe55
add rbx, 2
mov qword [rsp + 0x148], rbx
movzx ecx, word [rbx]
jmp 0x14000fe36
test cx, cx
je 0x14000ffe8
mov rsi, rbx
mov qword [rsp + 0x140], rbx
mov qword [r14], rbx
add r14, 8
mov qword [rsp + 0x178], r14
mov ecx, dword [rsp + 0x114]
lea eax, [rcx + 2]
inc ecx
mov dword [rsp + 0x114], ecx
cmp eax, r12d
jle 0x14000fefd
add r12d, r12d
mov dword [rsp + 0x170], r12d
movsxd rdx, r12d
shl rdx, 3
mov rcx, r13
call fcn.14002ade8
mov r13, rax
mov qword [rsp + 0x130], rax
test rax, rax
jne 0x14000fed5
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x108], rdi
jmp 0x1400103d3
movsxd rax, dword [rsp + 0x114]
lea r14, [rax*8]
add r14, r13
mov qword [rsp + 0x178], r14
mov edx, 0x20
lea r8d, [rdx + 2]
lea r9d, [rdx + 0x3c]
movzx eax, word [rbx]
test ax, ax
je 0x14000ffdb
cmp ax, dx
je 0x14000ff14
cmp ax, 9
jne 0x14000ff1d
test r15b, r15b
je 0x14000ffca
movzx ecx, ax
cmp ecx, 0xa
je 0x14000ffc0
cmp ecx, 0xd
je 0x14000ffc0
cmp ecx, r8d
je 0x14000ffa0
lea rcx, [rsi + 2]
cmp ax, r9w
je 0x14000ff51
mov word [rsi], ax
mov rsi, rcx
mov qword [rsp + 0x140], rcx
jmp 0x14000ffaf
add rbx, 2
mov qword [rsp + 0x148], rbx
cmp word [rbx], r8w
jne 0x14000ff69
mov word [rsi], r8w
jmp 0x14000ff44
mov word [rsi], r9w
mov rsi, rcx
mov qword [rsp + 0x140], rcx
movzx eax, word [rbx]
test ax, ax
je 0x14000ff9b
cmp ax, dx
jne 0x14000ff8a
test r15b, r15b
je 0x14000ff9b
mov word [rcx], ax
add rsi, 2
mov qword [rsp + 0x140], rsi
jmp 0x14000ffaf
jmp 0x14000ff00
test r15b, r15b
sete r15b
mov byte [rsp + 0x110], r15b
add rbx, 2
mov qword [rsp + 0x148], rbx
jmp 0x14000fefd
mov word [rbx], dx
mov eax, edx
jmp 0x14000ff00
test ax, ax
je 0x14000ffdb
add rbx, 2
mov qword [rsp + 0x148], rbx
mov word [rsi], di
movabs rsi, 0x100002600
jmp 0x14000fe2a
mov qword [r14], rdi
jmp 0x1400103f5
movabs rsi, 0x100002600
mov dword [rsp + 0x124], 0x3f
mov r13d, edi
mov dword [rsp + 0x174], edi
mov r14, rdi
mov qword [rsp + 0x180], rdi
lea r8, str._ML_
xor edx, edx
lea rcx, [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wdupenv_s]
mov rbx, qword [rsp + 0x108]
test rbx, rbx
je 0x140010265
mov ecx, 0x1f8
call fcn.14002ad68
mov r14, rax
mov qword [rsp + 0x180], rax
mov r15, rax
mov qword [rsp + 0x188], rax
mov rcx, rbx
call fcn.14002ae14
mov rbx, rax
mov qword [rsp + 0x158], rax
test rax, rax
je 0x140010c48
mov r12b, dil
mov byte [rsp + 0x111], dil
movzx ecx, word [rbx]
test cx, cx
je 0x14001024c
mov edx, 0x20
cmp cx, dx
ja 0x1400100be
movzx eax, cx
bt rsi, rax
jae 0x1400100be
add rbx, 2
mov qword [rsp + 0x158], rbx
movzx ecx, word [rbx]
jmp 0x14001009f
test cx, cx
je 0x140010247
mov rsi, rbx
mov qword [rsp + 0x150], rbx
mov qword [r15], rbx
add r15, 8
mov qword [rsp + 0x188], r15
lea eax, [r13 + 2]
inc r13d
mov dword [rsp + 0x174], r13d
mov ecx, dword [rsp + 0x124]
cmp eax, ecx
jle 0x140010152
add ecx, ecx
mov dword [rsp + 0x124], ecx
movsxd rdx, ecx
shl rdx, 3
mov rcx, r14
call fcn.14002ade8
mov r14, rax
mov qword [rsp + 0x180], rax
test rax, rax
jne 0x14001013e
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x108], rdi
jmp 0x1400103d3
movsxd rax, r13d
lea r15, [r14 + rax*8]
mov qword [rsp + 0x188], r15
mov edx, 0x20
mov r8d, 0x22
lea r9d, [r8 + 0x3a]
movzx eax, word [rbx]
test ax, ax
je 0x14001023a
cmp ax, dx
je 0x140010173
cmp ax, 9
jne 0x14001017c
test r12b, r12b
je 0x140010229
movzx ecx, ax
cmp ecx, 0xa
je 0x14001021f
cmp ecx, 0xd
je 0x14001021f
cmp ecx, r8d
je 0x1400101ff
lea rcx, [rsi + 2]
cmp ax, r9w
je 0x1400101b0
mov word [rsi], ax
mov rsi, rcx
mov qword [rsp + 0x150], rcx
jmp 0x14001020e
add rbx, 2
mov qword [rsp + 0x158], rbx
cmp word [rbx], r8w
jne 0x1400101c8
mov word [rsi], r8w
jmp 0x1400101a3
mov word [rsi], r9w
mov rsi, rcx
mov qword [rsp + 0x150], rcx
movzx eax, word [rbx]
test ax, ax
je 0x1400101fa
cmp ax, dx
jne 0x1400101e9
test r12b, r12b
je 0x1400101fa
mov word [rcx], ax
add rsi, 2
mov qword [rsp + 0x150], rsi
jmp 0x14001020e
jmp 0x14001015f
test r12b, r12b
sete r12b
mov byte [rsp + 0x111], r12b
add rbx, 2
mov qword [rsp + 0x158], rbx
jmp 0x14001015c
mov word [rbx], dx
mov eax, edx
jmp 0x14001015f
test ax, ax
je 0x14001023a
add rbx, 2
mov qword [rsp + 0x158], rbx
mov word [rsi], di
movabs rsi, 0x100002600
jmp 0x14001008e
mov qword [r15], rdi
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x108], rdi
mov ecx, dword [rsp + 0x128]
lea r15d, [rcx + r13]
mov r12d, dword [rsp + 0x114]
add r15d, r12d
mov dword [rsp + 0x120], r15d
mov esi, edi
mov dword [rsp + 0x100], edi
mov qword [rsp + 0x138], rdi
test r12d, r12d
jg 0x14001057e
cmp ecx, 1
jg 0x14001057e
test r13d, r13d
jg 0x14001057e
lea r8, str._ML_CMDFLAGS
xor edx, edx
lea rcx, [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wdupenv_s]
mov rbx, qword [rsp + 0x108]
test rbx, rbx
je 0x1400108ce
movsxd rcx, r15d
shl rcx, 3
call fcn.14002ad68
mov r13, rax
mov qword [rsp + 0x138], rax
mov r15, rax
mov qword [rsp + 0x190], rax
mov rcx, rbx
call fcn.14002ae14
mov rbx, rax
mov qword [rsp + 0x168], rax
test rax, rax
je 0x140010c5c
mov r12b, dil
mov byte [rsp + 0x112], dil
movzx ecx, word [rbx]
test cx, cx
je 0x140010526
mov edx, 0x20
movabs r8, 0x100002600
cmp cx, dx
ja 0x140010357
bt r8, rcx
jae 0x140010357
add rbx, 2
mov qword [rsp + 0x168], rbx
movzx ecx, word [rbx]
jmp 0x14001033b
test cx, cx
je 0x140010521
mov r14, rbx
mov qword [rsp + 0x160], rbx
mov qword [r15], rbx
add r15, 8
mov qword [rsp + 0x190], r15
lea eax, [rsi + 2]
inc esi
mov dword [rsp + 0x100], esi
mov ecx, dword [rsp + 0x120]
cmp eax, ecx
jle 0x140010434
add ecx, ecx
mov dword [rsp + 0x120], ecx
movsxd rdx, ecx
shl rdx, 3
mov rcx, r13
call fcn.14002ade8
mov r13, rax
mov qword [rsp + 0x138], rax
test rax, rax
jne 0x140010419
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x108], rdi
cmp byte [0x140086a5b], dil
jne 0x1400103e1
call fcn.140012838
mov ecx, 0x3f6
call fcn.140016a1c
movabs rsi, 0x100002600
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x14000ffff
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x108], rdi
jmp 0x14000ffff
movsxd rax, esi
lea r15, [rax*8]
add r15, r13
mov qword [rsp + 0x190], r15
mov edx, 0x20
mov r8d, 0x22
lea r9d, [r8 + 0x3a]
movzx eax, word [rbx]
test ax, ax
je 0x14001051d
cmp ax, dx
je 0x140010455
cmp ax, 9
jne 0x14001045e
test r12b, r12b
je 0x14001050c
movzx ecx, ax
cmp ecx, 0xa
je 0x140010502
cmp ecx, 0xd
je 0x140010502
cmp ecx, r8d
je 0x1400104e2
lea rcx, [r14 + 2]
cmp ax, r9w
je 0x140010493
mov word [r14], ax
mov r14, rcx
mov qword [rsp + 0x160], rcx
jmp 0x1400104f1
add rbx, 2
mov qword [rsp + 0x168], rbx
cmp word [rbx], r8w
jne 0x1400104ab
mov word [r14], r8w
jmp 0x140010486
mov word [r14], r9w
mov r14, rcx
mov qword [rsp + 0x160], rcx
movzx eax, word [rbx]
test ax, ax
je 0x1400104dd
cmp ax, dx
jne 0x1400104cc
test r12b, r12b
je 0x1400104dd
mov word [rcx], ax
add r14, 2
mov qword [rsp + 0x160], r14
jmp 0x1400104f1
jmp 0x140010441
test r12b, r12b
sete r12b
mov byte [rsp + 0x112], r12b
add rbx, 2
mov qword [rsp + 0x168], rbx
jmp 0x14001043e
mov word [rbx], dx
mov eax, edx
jmp 0x140010441
test ax, ax
je 0x14001051d
add rbx, 2
mov qword [rsp + 0x168], rbx
mov word [r14], di
jmp 0x140010320
mov qword [r15], rdi
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x108], rdi
test esi, esi
je 0x140010c70
mov byte [0x14009ccf3], 1
lea ecx, [rsi + 5]
movsxd rdx, ecx
mov eax, 8
mul rdx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14002adb4
mov qword [0x140087b08], rax
mov rdx, r13
jmp 0x1400108c7
movsxd rdx, r15d
shl rdx, 3
xor ecx, ecx
call fcn.14002ade8
mov r11, rax
mov qword [rsp + 0x138], rax
mov edx, edi
mov dword [rsp + 0x100], edx
mov r10d, edi
mov dword [rsp + 0x12c], edi
mov r9d, 0xfffd
mov rbx, qword [rsp + 0x130]
mov r8d, 1
cmp r10d, r12d
jge 0x140010611
movsxd rax, r10d
mov rcx, qword [rbx + rax*8]
movzx eax, word [rcx]
sub ax, 0x2d
test r9w, ax
jne 0x1400105f3
cmp word [rcx + 2], 0x6c
jne 0x1400105f3
cmp word [rcx + 4], 0x69
jne 0x1400105f3
cmp word [rcx + 6], 0x6e
jne 0x1400105f3
cmp word [rcx + 8], 0x6b
je 0x140010611
movsxd rax, edx
mov qword [r11 + rax*8], rcx
add edx, r8d
mov dword [rsp + 0x100], edx
add r10d, r8d
mov dword [rsp + 0x12c], r10d
jmp 0x1400105be
mov r9d, r8d
mov dword [rsp + 0x118], r8d
mov esi, dword [rsp + 0x128]
mov r15, qword [rsp + 0x198]
cmp r9d, esi
jge 0x14001068a
movsxd rax, r9d
mov rcx, qword [r15 + rax*8]
movzx eax, word [rcx]
sub ax, 0x2d
mov ebx, 0xfffd
test bx, ax
mov rbx, qword [rsp + 0x130]
jne 0x14001068a
cmp word [rcx + 2], 0x6c
jne 0x14001066c
cmp word [rcx + 4], 0x69
jne 0x14001066c
cmp word [rcx + 6], 0x6e
jne 0x14001066c
cmp word [rcx + 8], 0x6b
je 0x14001068a
movsxd rax, edx
mov qword [r11 + rax*8], rcx
add edx, r8d
mov dword [rsp + 0x100], edx
add r9d, r8d
mov dword [rsp + 0x118], r9d
jmp 0x14001062b
mov r8d, edi
mov dword [rsp + 0x11c], edi
cmp r8d, r13d
jge 0x1400106f4
movsxd rax, r8d
mov rcx, qword [r14 + rax*8]
movzx eax, word [rcx]
sub ax, 0x2d
mov r12d, 0xfffd
test r12w, ax
mov r12d, dword [rsp + 0x114]
jne 0x1400106f4
cmp word [rcx + 2], 0x6c
jne 0x1400106d7
cmp word [rcx + 4], 0x69
jne 0x1400106d7
cmp word [rcx + 6], 0x6e
jne 0x1400106d7
cmp word [rcx + 8], 0x6b
je 0x1400106f4
movsxd rax, edx
mov qword [r11 + rax*8], rcx
inc edx
mov dword [rsp + 0x100], edx
inc r8d
mov dword [rsp + 0x11c], r8d
jmp 0x140010694
cmp r9d, esi
jge 0x140010752
movsxd rax, r9d
mov rcx, qword [r15 + rax*8]
movzx eax, word [rcx]
sub ax, 0x2d
mov ebx, 0xfffd
test bx, ax
mov rbx, qword [rsp + 0x130]
jne 0x140010735
cmp word [rcx + 2], 0x6c
jne 0x140010735
cmp word [rcx + 4], 0x69
jne 0x140010735
cmp word [rcx + 6], 0x6e
jne 0x140010735
cmp word [rcx + 8], 0x6b
je 0x140010752
movsxd rax, edx
mov qword [r11 + rax*8], rcx
inc edx
mov dword [rsp + 0x100], edx
inc r9d
mov dword [rsp + 0x118], r9d
jmp 0x1400106f4
cmp r8d, r13d
jge 0x1400107b2
movsxd rax, r8d
mov rcx, qword [r14 + rax*8]
movzx eax, word [rcx]
sub ax, 0x2d
mov r12d, 0xfffd
test r12w, ax
mov r12d, dword [rsp + 0x114]
jne 0x140010795
cmp word [rcx + 2], 0x6c
jne 0x140010795
cmp word [rcx + 4], 0x69
jne 0x140010795
cmp word [rcx + 6], 0x6e
jne 0x140010795
cmp word [rcx + 8], 0x6b
je 0x1400107b2
movsxd rax, edx
mov qword [r11 + rax*8], rcx
inc edx
mov dword [rsp + 0x100], edx
inc r8d
mov dword [rsp + 0x11c], r8d
jmp 0x140010752
cmp r10d, r12d
jge 0x1400107db
movsxd rax, r10d
mov rcx, qword [rbx + rax*8]
movsxd rax, edx
mov qword [r11 + rax*8], rcx
inc edx
mov dword [rsp + 0x100], edx
inc r10d
mov dword [rsp + 0x12c], r10d
jmp 0x1400107b2
cmp r9d, esi
jge 0x140010804
movsxd rax, r9d
mov rcx, qword [r15 + rax*8]
movsxd rax, edx
mov qword [r11 + rax*8], rcx
inc edx
mov dword [rsp + 0x100], edx
inc r9d
mov dword [rsp + 0x118], r9d
jmp 0x1400107db
cmp r8d, r13d
jge 0x14001082d
movsxd rax, r8d
mov rcx, qword [r14 + rax*8]
movsxd rax, edx
mov qword [r11 + rax*8], rcx
inc edx
mov dword [rsp + 0x100], edx
inc r8d
mov dword [rsp + 0x11c], r8d
jmp 0x140010804
test rbx, rbx
je 0x14001083b
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r14, r14
je 0x140010849
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea r8, [rsp + 0x138]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x120]
call fcn.140010c7c
mov esi, dword [rsp + 0x100]
test esi, esi
je 0x140010c70
lea eax, [rsi + 5]
movsxd rcx, eax
mov eax, 8
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14002adb4
mov qword [0x140087b08], rax
movsxd rdx, dword [0x140086514]
lea r8, str._nologo
mov qword [rax + rdx*8], r8
inc edx
mov dword [0x140086514], edx
add qword [0x140087b00], 8
mov rdx, qword [rsp + 0x138]
mov ecx, esi
call fcn.140011fc0
test esi, esi
je 0x140010c70
cmp byte [0x14007ce0c], dil
je 0x14001092a
cmp qword [0x140086aa8], rdi
jne 0x140010909
cmp byte [0x140086a62], dil
jne 0x1400108ff
cmp byte [0x140086a5b], dil
jne 0x1400108ff
call fcn.140012838
mov ecx, 0x3f9
call fcn.140016a1c
cmp byte [0x140086a60], dil
jne 0x14001094e
cmp byte [0x140087b31], dil
jne 0x14001094e
cmp byte [0x140087b3b], dil
je 0x140010c75
jmp 0x14001094e
mov rcx, qword [0x140086a68]
test rcx, rcx
je 0x14001093c
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
mov rcx, qword [0x140086a80]
test rcx, rcx
je 0x14001094e
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
cmp byte [0x140086a5b], dil
jne 0x14001095c
call fcn.140012838
jmp 0x140010bfa
cmp byte [0x14007ce0c], dil
sete dil
mov eax, edi
mov rcx, qword [rsp + 0x950]
xor rcx, rsp
call fcn.1400361e0
lea r11, [rsp + 0x960]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
xor r8d, r8d
xor edx, edx
mov ecx, 0x3ec
call fcn.140016748
call fcn.140012efc
xor r8d, r8d
xor edx, edx
mov ecx, 0x3ec
call fcn.140016748
call fcn.140012efc
xor r8d, r8d
xor edx, edx
mov ecx, 0x3ec
call fcn.140016748
call fcn.140012efc
call fcn.1400128a8
call fcn.140012bec
nop
int3