Function at 0x140001cd0
Capabilities:
Delete file

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x160
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xd8], 0xfffffffffffffffe
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140001d00
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rsi, [rbp - 0x50]
mov rcx, rsi
call section..text
mov rcx, rsi
call fcn.14000b3a0
mov ebx, eax
mov rax, qword [rbp - 0x38]
cmp rax, 8
jb 0x140001d5c
mov rcx, qword [rbp - 0x50]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140001d57
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140001f5b
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1401658ec
test bl, bl
je 0x140001ead
lea rsi, [rbp + 0xb8]
mov rcx, rsi
call fcn.140001380
cmp qword [rbp + 0xd0], 8
jb 0x140001d84
mov rsi, qword [rbp + 0xb8]
mov dword [rsp + 0x20], 1
lea rcx, [rbp - 0x50]
mov rdx, rsi
mov r8d, Ordinal_35
mov r9d, 0x40
call fcn.140004a50
mov rbx, qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call rbx
movsxd rsi, eax
call rbx
movsxd rcx, eax
imul rcx, rsi
movabs rdx, 0x431bde82d7b634db
mov rax, rcx
imul rdx
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x13
add rdx, rax
imul rax, rdx, 0x1e8480
neg rax
lea rdi, [rcx + rax]
add rdi, 0x8af0
mov rcx, rdi
call fcn.140165f54
mov rsi, rax
test rdi, rdi
je 0x140001e29
xor r14d, r14d
nop
call rbx
cdqe
imul rcx, rax, 0xffffffff80808081
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
shr ecx, 7
add ecx, edx
add ecx, eax
mov byte [rsi + r14], cl
inc r14
cmp rdi, r14
jne 0x140001e00
lea rcx, [rbp - 0x50]
mov rdx, rsi
mov r8, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
je 0x140001e89
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.____Error_dumping
call fcn.140060410
mov rdi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rdi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
mov rcx, rdi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::put_wchar_t____ptr64]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::flush_void____ptr64]
lea rcx, [rbp - 0x50]
call fcn.14005e940
mov rcx, rsi
call fcn.1401658ec
cmp qword [rbp + 0xd0], 8
jb 0x140001eb4
mov rcx, qword [rbp + 0xb8]
jmp 0x140001ebb
xor esi, esi
jmp 0x140001f4b
lea rcx, [rbp + 0xb8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
sete sil
lea rdi, [rbp + 0x58]
mov rax, qword [rbp - 0x50]
movsxd rax, dword [rax + 4]
lea rcx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rax - 0x50], rcx
mov rax, qword [rbp - 0x50]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0xa8]
mov dword [rbp + rax - 0x54], ecx
lea rcx, [rbp - 0x48]
call fcn.1400379d0
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
mov rax, qword [rbp + 0xd0]
cmp rax, 8
jb 0x140001f4b
mov rcx, qword [rbp + 0xb8]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140001f46
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140001f5b
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1401658ec
mov eax, esi
add rsp, 0x160
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3