Function at 0x14000d330
Capabilities:
Delete file
Get file size
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x58]
sub rsp, 0x140
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x140001178]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rbx, rcx
mov qword [rsp + 0x70], rcx
mov r8b, 0x2e
mov rdx, rcx
lea rcx, [rbp - 8]
call fcn.14000a710
mov rdi, rax
mov rax, qword [rax + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rax, rdx
jae 0x14000d3a4
lea rcx, [rax + 1]
mov qword [rdi + 0x10], rcx
mov rcx, rdi
cmp rdx, 0x10
jb 0x14000d39c
mov rcx, qword [rdi]
mov word [rcx + rax], 0x7a
jmp 0x14000d3b6
mov r9b, 0x7a
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rdi
call fcn.14000a7e0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rdi + 0x10]
movdqu xmmword [rbp - 0x58], xmm1
xor r14d, r14d
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r14b
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x14000d409
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x68]
mov word [rax + rcx], 0x69
jmp 0x14000d41c
mov r9b, 0x69
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x68]
call fcn.14000a7e0
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rbp - 0x18], xmm1
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x14000d46e
lea rax, [rcx + 1]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x28]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x28]
mov word [rax + rcx], 0x70
jmp 0x14000d481
mov r9b, 0x70
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x28]
call fcn.14000a7e0
movups xmm0, xmmword [rbp - 0x28]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rbp - 0x18]
movups xmmword [rbp - 0x78], xmm1
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14000d4cd
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da63
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov r8b, 0x2e
mov rdx, rbx
lea rcx, [rbp + 0x18]
call fcn.14000a710
mov rdi, rax
mov rax, qword [rax + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rax, rdx
jae 0x14000d519
lea rcx, [rax + 1]
mov qword [rdi + 0x10], rcx
mov rcx, rdi
cmp rdx, 0x10
jb 0x14000d511
mov rcx, qword [rdi]
mov word [rcx + rax], 0x64
jmp 0x14000d52b
mov r9b, 0x64
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rdi
call fcn.14000a7e0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rdi + 0x10]
movdqu xmmword [rbp - 0x58], xmm1
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x14000d57b
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x68]
mov word [rax + rcx], 0x6c
jmp 0x14000d58e
mov r9b, 0x6c
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x68]
call fcn.14000a7e0
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rbp - 0x18], xmm1
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x14000d5e0
lea rax, [rcx + 1]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x28]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x28]
mov word [rax + rcx], 0x6c
jmp 0x14000d5f3
mov r9b, 0x6c
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x28]
call fcn.14000a7e0
movups xmm0, xmmword [rbp - 0x28]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rbp - 0x18]
movups xmmword [rbp - 0x38], xmm1
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x14000d63e
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d639
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da69
call fcn.14001132c
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rcx, qword [rsp + 0x78]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, eax
mov qword [rsp + 0x50], rcx
call fcn.140017a0c
mov rsi, rax
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x60]
mov r8d, dword [rsp + 0x50]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14000d948
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rsi, rsi
je 0x14000d948
mov dword [rsp + 0x70], 0x5d
mov byte [rsp + 0x74], 1
movzx ecx, byte [rsi + 3]
shl rcx, 8
movzx eax, byte [rsi + 2]
or rcx, rax
shl rcx, 8
movzx eax, byte [rsi + 1]
or rcx, rax
shl rcx, 8
movzx eax, byte [rsi]
or rcx, rax
mov qword [rsp + 0x58], rcx
call fcn.140017a0c
mov rdi, rax
sub qword [rsp + 0x50], 4
lea r8, [rsi + 4]
lea rax, [0x140001fb0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x64]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 5
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.140010a10
test eax, eax
je 0x14000d75c
mov rcx, rdi
call fcn.140017a04
jmp 0x14000d765
test rdi, rdi
jne 0x14000d83e
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14000d7a0
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d79b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da6f
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x14000d7ed
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da75
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000da18
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000da13
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000da51
jmp 0x14000da10
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rcx, qword [rbp - 0x48]
mov r8, qword [rsp + 0x58]
mov rdx, rdi
call fcn.14000da90
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14000d8aa
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da7b
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x14000d8f7
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da81
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000da18
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000da13
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000da57
jmp 0x14000da10
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14000d983
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d97e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da87
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x14000d9d0
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d9cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000da4b
call fcn.14001132c
movdqa xmm0, xmmword [0x140001eb0]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000da18
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000da13
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000da5d
mov rcx, r8
call fcn.14001132c
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140011700
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1400153f4
nop
call fcn.1400153f4
int3
call fcn.1400153f4
int3
call fcn.1400153f4
nop
call fcn.1400153f4
int3
call fcn.1400153f4
int3
call fcn.1400153f4
nop
call fcn.1400153f4
nop
call fcn.1400153f4
nop
call fcn.1400153f4
nop
call fcn.1400153f4
int3