Function at 0x140003420
Capabilities:
Delete file
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x14000c040]
xor rax, rsp
mov qword [rbp - 0x21], rax
mov r12, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xor edi, edi
mov qword [rbp - 0x31], rdi
mov ebx, 0xf
mov qword [rbp - 0x29], rbx
mov byte [rbp - 0x41], dil
movabs r13, 0x7fffffffffffffff
mov r15d, dword [0x14000c098]
movdqa xmm8, xmmword [0x1400089c0]
movdqa xmm7, xmmword [0x1400089d0]
movdqa xmm9, xmmword [str.3333]
movdqa xmm6, xmmword [0x1400089e0]
movdqa xmm10, xmmword [0x140008950]
mov esi, 0xe
nop word [rax + rax]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140008628]
movups xmmword [rbp - 0x69], xmm0
movups xmm1, xmmword [0x140008638]
movups xmmword [rbp - 0x59], xmm1
mov eax, dword [0x140008648]
mov dword [rbp - 0x49], eax
mov ecx, edi
cmp r15d, 2
jl 0x140003612
movdqa xmmword [rbp - 0x79], xmm7
lea rdx, [rbp - 0x65]
mov r8d, dword [rbp - 0x79]
nop
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm10
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm10
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x140003520
cmp ecx, 0x24
jge 0x14000364e
movsxd rax, ecx
lea r8, [rbp - 0x69]
add r8, rax
nop dword [rax]
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, cl
sub al, dl
add al, 0x30
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x24
jl 0x140003620
lea rdx, [rbp - 0x69]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005be0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp - 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005dc0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x1400036d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rcx]
movsxd r9, dword [rax + 4]
add rcx, r9
xor r8d, r8d
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
mov r8d, 0xa
mov rdx, r13
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
jmp 0x1400034d0
movzx eax, word [0x1400087c0]
mov word [rsp + 0x20], ax
cmp byte [0x1400087c1], 0
je 0x1400036ef
mov byte [rsp + 0x20], 0x79
xor byte [rsp + 0x21], 0x31
lea rcx, [rsp + 0x20]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140003700
lea rcx, [rbp - 0x41]
mov rsi, qword [rbp - 0x41]
mov r14, qword [rbp - 0x29]
cmp r14, 0xf
cmova rcx, rsi
mov rbx, qword [rbp - 0x31]
cmp rbx, rax
jne 0x140003749
test rbx, rbx
je 0x1400038ad
mov r8, rbx
lea rdx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
jne 0x1400038ad
movzx eax, word [0x14000867c]
mov word [rsp + 0x20], ax
cmp byte [0x14000867d], 0
je 0x140003768
mov byte [rsp + 0x20], 0x59
xor byte [rsp + 0x21], 0x31
lea rcx, [rsp + 0x20]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140003774
lea rcx, [rbp - 0x41]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x1400037b1
test rbx, rbx
je 0x1400038ad
mov r8, rbx
lea rdx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
jne 0x1400038ad
movzx eax, word [0x1400088b4]
mov word [rsp + 0x20], ax
cmp byte [0x1400088b5], 0
je 0x1400037d0
mov byte [rsp + 0x20], 0x6e
xor byte [rsp + 0x21], 0x31
lea rcx, [rsp + 0x20]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400037e0
lea rcx, [rbp - 0x41]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x14000381d
test rbx, rbx
je 0x140003a4c
mov r8, rbx
lea rdx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
jne 0x140003a4c
movzx eax, word [0x14000864c]
mov word [rsp + 0x20], ax
cmp byte [0x14000864d], 0
je 0x14000383c
mov byte [rsp + 0x20], 0x4e
xor byte [rsp + 0x21], 0x31
lea rcx, [rsp + 0x20]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140003850
lea rcx, [rbp - 0x41]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x14000388d
test rbx, rbx
je 0x140003a4c
mov r8, rbx
lea rdx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
jne 0x140003a4c
mov r8d, 0xa
mov rdx, r13
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
mov ebx, 0xf
jmp 0x1400034c1
mov rcx, r12
call fcn.140005480
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0xa
call fcn.140001290
lea rdx, [rbp - 0x69]
call fcn.140003a60
mov r9, rax
cmp byte [rax + 0x21], 0
je 0x140003a2f
cmp r15d, 2
jl 0x1400039f0
movdqa xmmword [rbp - 0x79], xmm7
mov rcx, rax
mov edx, dword [rbp - 0x79]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm10
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm10
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add edi, 8
lea rcx, [rcx + 8]
cmp edi, 0x20
jl 0x140003900
cmp edi, 0x22
jge 0x140003a2f
movsxd r8, edi
add r8, r9
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, dil
sub al, cl
add al, 0x30
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 0x22
jl 0x140003a00
mov rdx, r9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005be0
call fcn.140003140
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140003140
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3