Function at 0x1400262c0
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x49], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400a12e0]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor ebx, ebx
mov dword [rbp - 0x51], ebx
mov r13b, bl
mov byte [rbp - 0x59], bl
cmp dword [0x1400b6880], ebx
je 0x14002679f
lea rdx, [0x1400a1490]
lea rcx, [rbp - 0x41]
call fcn.14001376c
nop
mov qword [rbp - 9], rbx
mov qword [rbp - 1], 7
mov word [rbp - 0x19], bx
mov r14, qword [0x1400a1c50]
test r14, r14
je 0x14002678c
lea esi, [rbx + 1]
lea r12d, [rbx + 4]
cmp byte [r14 + 0x18], bl
je 0x14002677d
mov rdx, qword [0x1400a14a0]
lea rcx, [rbp - 0x41]
call fcn.140004910
mov rdx, qword [r14 + 0x10]
lea rcx, [rbp - 0x41]
call fcn.140005b0c
lea rdx, str..bin
lea rcx, [rbp - 0x41]
call fcn.140005b0c
lea rcx, [rbp - 0x41]
cmp qword [rbp - 0x29], 8
cmovae rcx, qword [rbp - 0x41]
mov rax, qword [0x1400a14a0]
lea rdi, [rcx + rax*2]
lea rcx, [rbp - 0x41]
cmovae rcx, qword [rbp - 0x41]
mov r8d, 0x10
lea rdx, [0x140080184]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wfsopen]
nop dword [rax + rax]
mov r15, rax
test rax, rax
je 0x1400267e1
cmp byte [0x1400a1c4e], bl
je 0x1400263fa
lea rbx, [rbp - 0x41]
cmp qword [rbp - 0x29], 8
cmovae rbx, qword [rbp - 0x41]
mov ecx, 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
mov rcx, rax
mov r8, rbx
lea rdx, str.Writing__ls_n
call fcn.140051858
xor ebx, ebx
movzx r8d, word [r14 + 0xc]
mov r9d, r8d
shr r9d, 0xa
and r8d, 0x3ff
lea rdx, str.LANGUAGE_0x_x_0x_x_n
lea rcx, [0x1400b6770]
call fcn.140006878
lea rcx, [0x1400b6770]
cmp byte [0x1400a1c46], bl
je 0x140026457
lea r8, [0x1400a14f0]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae r8, qword [0x1400a14f0]
mov r9, rdi
lea rdx, str.1_11___ls__ls__n
call fcn.140006878
jmp 0x140026466
mov r8, rdi
lea rdx, str.1_11___ls__n
call fcn.140006878
mov dword [rbp - 0x55], ebx
mov eax, dword [0x1400b6880]
mov dword [rbp + 0x17], eax
mov r9, r15
mov r8, r12
mov rdx, rsi
lea rcx, [rbp + 0x17]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fwrite]
nop dword [rax + rax]
movsxd rcx, dword [0x1400b6880]
lea rdx, [rcx + rcx*2]
lea r12, [rax + rdx*4]
mov rdi, qword [0x1400b6888]
test rdi, rdi
je 0x1400266f8
jmp 0x1400264b1
mov esi, 1
mov eax, dword [rdi + 8]
mov dword [rbp + 7], eax
mov eax, dword [rdi + 0xc]
mov dword [rbp + 0xb], eax
mov dword [rbp + 0xf], r12d
mov r9, r15
mov r8d, 0xc
mov rdx, rsi
lea rcx, [rbp + 7]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fwrite]
nop dword [rax + rax]
mov dword [rdi + 0x10], ebx
mov rsi, qword [rdi + 0x18]
mov ecx, ebx
test rsi, rsi
je 0x140026596
xor ecx, ecx
xor ebx, ebx
mov eax, dword [rdi + 0xc]
cmp dword [rsi + 8], eax
ja 0x140026592
xor ecx, ecx
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x140026573
mov edx, dword [r14 + 0xc]
cmp dword [rax + 8], edx
je 0x140026525
cmp byte [rax + 0xc], 0
cmovne rcx, rax
mov rax, qword [rax]
test rax, rax
jne 0x14002650e
jmp 0x140026528
mov rcx, rax
test rcx, rcx
je 0x140026573
xor r8d, r8d
mov r9d, dword [rcx + 0x10]
xor edx, edx
test r9d, r9d
je 0x140026560
mov r10, qword [rcx + 0x18]
cmp word [r10 + rdx*2], 0xa
jne 0x140026559
test edx, edx
je 0x140026556
lea eax, [rdx - 1]
cmp word [r10 + rax*2], 0xd
je 0x140026559
inc r8d
inc edx
cmp edx, r9d
jne 0x14002653f
lea eax, [r8 + r9]
lea eax, [rax*2 + 8]
and eax, 0xfffffffc
add dword [rdi + 0x10], eax
jmp 0x140026581
mov rdx, r14
mov rcx, rsi
call fcn.140025b24
mov r13b, 1
mov ecx, dword [rdi + 0x10]
mov ebx, ecx
mov rsi, qword [rsi]
test rsi, rsi
jne 0x1400264f3
mov byte [rbp - 0x59], r13b
cmp byte [0x1400a1c4e], 0
je 0x1400265c7
mov ecx, 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
mov rcx, rax
mov dword [rsp + 0x20], ebx
mov r9d, dword [rdi + 0xc]
mov r8d, dword [rdi + 8]
lea rdx, str.______08lx_..__08lx_____lu_bytes_n
call fcn.140051858
mov ecx, dword [rdi + 0x10]
mov eax, ecx
add r12, rax
mov rdi, qword [rdi]
xor ebx, ebx
test rdi, rdi
jne 0x1400264ac
mov rdi, qword [0x1400b6888]
test rdi, rdi
je 0x1400266f8
mov r13d, dword [rbp - 0x55]
mov rsi, qword [rdi + 0x18]
test rsi, rsi
je 0x1400266e8
mov eax, dword [rdi + 0xc]
cmp dword [rsi + 8], eax
ja 0x1400266e4
mov rcx, rbx
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x1400266d8
mov edx, dword [r14 + 0xc]
cmp dword [rax + 8], edx
je 0x140026631
cmp byte [rax + 0xc], bl
cmovne rcx, rax
mov rax, qword [rax]
test rax, rax
jne 0x14002661b
jmp 0x140026634
mov rcx, rax
test rcx, rcx
je 0x1400266d8
lea rdx, [rbp - 0x19]
call fcn.140025a54
movzx eax, word [rbp - 9]
mov edx, 4
add ax, dx
add ax, ax
mov ecx, 0xfffc
and ax, cx
mov word [rbp - 0x21], ax
lea r12d, [rdx - 3]
mov word [rbp - 0x1f], r12w
mov r9, r15
mov r8d, edx
mov edx, r12d
lea rcx, [rbp - 0x21]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fwrite]
nop dword [rax + rax]
mov rbx, rax
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
add r8, r8
mov r9, r15
mov edx, r12d
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fwrite]
nop dword [rax + rax]
add rbx, rax
add r13d, r12d
movzx eax, bx
movzx r8d, word [rbp - 0x21]
sub r8, rax
je 0x1400266d6
mov r9, r15
mov edx, r12d
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fwrite]
nop dword [rax + rax]
xor ebx, ebx
mov rsi, qword [rsi]
test rsi, rsi
jne 0x1400265fb
mov dword [rbp - 0x55], r13d
mov rdi, qword [rdi]
test rdi, rdi
jne 0x1400265ee
mov r13b, byte [rbp - 0x59]
cmp byte [0x1400a1c4e], bl
je 0x140026733
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_ftell]
nop dword [rax + rax]
mov ebx, eax
mov ecx, 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
mov rcx, rax
mov r9d, ebx
mov r8d, dword [rbp - 0x55]
lea rdx, str.____Total_of__lu_messages___lu_bytes_n
call fcn.140051858
xor ebx, ebx
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fclose]
nop dword [rax + rax]
lea rcx, [rbp - 0x41]
test r13b, r13b
je 0x140026763
cmp qword [rbp - 0x29], 8
cmovae rcx, qword [rbp - 0x41]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop dword [rax + rax]
jmp 0x140026772
cmp qword [rbp - 0x29], 8
cmovae rcx, qword [rbp - 0x41]
call fcn.14001d570
mov r12d, 4
lea esi, [r12 - 3]
mov rax, qword [r14]
mov r14, rax
test rax, rax
jne 0x140026348
lea rcx, [rbp - 0x19]
call fcn.140006700
nop
lea rcx, [rbp - 0x41]
call fcn.140006700
cmp qword [0x1400a6108], rbx
je 0x1400267ad
call fcn.140022e94
test r13b, r13b
sete al
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140050950
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp - 0x41]
cmp qword [rbp - 0x29], 8
cmovae r8, qword [rbp - 0x41]
lea rdx, str.unable_to_open_output_file____ls
mov ecx, esi
call fcn.14001d744
nop
lea rcx, [rbp - 0x19]
call fcn.140006700
nop
lea rcx, [rbp - 0x41]
call fcn.140006700
xor al, al
jmp 0x1400267b3