Function at 0x100014e0
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000475b
mov eax, dword fs:[0]
push eax
sub esp, 0x18c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
imul ebx, ecx, 0x3e8
lea eax, [ebp - 0x180]
push 0xb0
push 0
push eax
mov dword [ebp - 0x188], ebx
call sub.VCRUNTIME140.dll_memset
push str.gfas.log
lea ecx, [ebp - 0x180]
call fcn.10002d00
lea ecx, [ebp - 0x17c]
mov dword [ebp - 4], 0
call fcn.10003160
test eax, eax
jne 0x1000156b
push eax
mov eax, dword [ebp - 0x180]
lea ecx, [ebp - 0x180]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
push str.gfas.log
call edi
push 0
mov esi, eax
lea eax, [ebp - 0x18]
push 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.gfas.log
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xb0
lea eax, [ebp - 0xd0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push str.fgasb.log
lea ecx, [ebp - 0xd0]
call fcn.10002d00
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 1
call fcn.10003160
test eax, eax
jne 0x10001605
push eax
mov eax, dword [ebp - 0xd0]
lea ecx, [ebp - 0xd0]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
push str.fgasb.log
call edi
push 0
mov esi, eax
lea eax, [ebp - 0x20]
push 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [ebp - 0x1c]
xor ecx, ecx
sub ebx, dword [ebp - 0x14]
mov edx, 0x3886594b
sub ecx, dword [ebp - 0x18]
mov edi, 0x346dc5d6
sbb ebx, 0
add ecx, dword [ebp - 0x20]
mov eax, ecx
adc ebx, 0
mul edx
mov eax, ecx
mov dword [ebp - 0x184], ebx
mov esi, edx
mov ecx, 0x3886594b
mul edi
mov edi, eax
mov dword [ebp - 0x18c], edx
mov eax, ebx
mul ecx
mov ebx, edx
mov ecx, eax
mov eax, dword [ebp - 0x184]
mov edx, 0x346dc5d6
mul edx
add ecx, esi
mov dword [ebp - 0x184], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [ebp - 0x18c]
adc ecx, 0
xor eax, eax
add ebx, ecx
mov ecx, dword [ebp - 0x184]
adc eax, eax
add ecx, ebx
adc edx, eax
shrd ecx, edx, 0xb
shr edx, 0xb
test edx, edx
ja 0x100016d8
jb 0x100016c1
cmp ecx, dword [ebp - 0x188]
jae 0x100016d8
mov eax, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
push str.fgasb.log
call eax
add esp, 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
push str.fgasb.log
call eax
add esp, 4
lea ecx, [ebp - 0xd0]
call fcn.10001720
lea ecx, [ebp - 0x180]
call fcn.10001720
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10003535
mov esp, ebp
pop ebp
ret