Function at 0x18002543a
Capabilities:
Delete file

Disassembly:
push rax
pushf
mov eax, 0xedf237db
pushf
not eax
add eax, 0xb8a35900
xor eax, 0x82d3e650
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xeafb2d14
xor eax, 0xa3d43c93
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xc234ee4a
xor eax, 0x8abe32e5
rol eax, 0x73
popf
cmp eax, 4
jne 0x18002548a
popf
pop rax
jmp 0x1800258cb
cmp eax, 0
jne 0x180025499
popf
pop rax
jmp 0x18002555c
cmp eax, 3
jne 0x1800254a8
popf
pop rax
jmp 0x18002583c
cmp eax, 1
jne 0x1800254b7
popf
pop rax
jmp 0x18002566f
cmp eax, 0xd
jne 0x1800254c6
popf
pop rax
jmp 0x180025d40
cmp eax, 7
jne 0x1800254d5
popf
pop rax
jmp 0x18002598a
cmp eax, 0xe
jne 0x1800254e4
popf
pop rax
jmp 0x180025d8c
cmp eax, 0xb
jne 0x1800254f3
popf
pop rax
jmp 0x180025c95
cmp eax, 0xc
jne 0x180025502
popf
pop rax
jmp 0x180025ce0
cmp eax, 8
jne 0x180025511
popf
pop rax
jmp 0x180025aba
cmp eax, 5
jne 0x180025520
popf
pop rax
jmp 0x180025918
cmp eax, 2
jne 0x18002552f
popf
pop rax
jmp 0x180025776
cmp eax, 9
jne 0x18002553e
popf
pop rax
jmp 0x180025b6d
cmp eax, 0xa
jne 0x18002554d
popf
pop rax
jmp 0x180025c35
cmp eax, 6
jne 0x18002555c
popf
pop rax
jmp 0x180025976
mov r11, rsp
push rbx
sub rsp, 0x60
mov rcx, qword [0x18000ea88]
movabs rbx, 0x12700306757ef80b
pushf
not rbx
add rbx, 0x53e94442
xor rbx, 0x6e4868b9
rol rbx, 0x3d
popf
pushf
not rbx
add rbx, 0x61fa303f
xor rbx, 0x47f5eb8d
rol rbx, 0x66
popf
pushf
not rbx
add rbx, 0x4cafd103
xor rbx, 0x46d04758
rol rbx, 0xd4
popf
mov rax, rbx
sub rax, rcx
cmp rax, 4
jb 0x180025616
push rax
pushf
mov eax, 0x5e2ae6ff
pushf
not eax
add eax, 0x86d4af57
xor eax, 0xb5ac375a
rol eax, 0x20
popf
pushf
not eax
add eax, 0xa6a9a35f
xor eax, 0xf17412cd
rol eax, 0x46
popf
pushf
not eax
add eax, 0xbd45d08b
xor eax, 0x87582948
rol eax, 0x1e
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0xdd19a8f4
pushf
not eax
add eax, 0xdc08d130
xor eax, 0x9bf95597
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xbd1ca6b1
xor eax, 0x938ccc91
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa5460fa0
xor eax, 0xed655c91
rol eax, 9
popf
pushf
not eax
add eax, 0xa3479573
xor eax, 0x951c3550
rol eax, 0xb5
popf
jmp 0x18002547b
cmp qword [0x18000ea90], 0xf
mov qword [r11 + 0x10], rbp
lea rbp, [0x1d3beb75f]
pushf
sub rbp, 0x53be108f
popf
mov qword [r11 - 0x38], 4
mov qword [r11 + 0x18], rdi
lea rdi, [0x1d7d24d10]
pushf
sub rdi, 0x57d16298
popf
mov qword [r11 - 0x40], rbp
mov r9, rdi
cmova r9, qword [0x18000ea78]
mov qword [r11 - 0x48], rcx
lea rcx, [r11 - 0x28]
call fcn.1800291bb
cmp qword [rsp + 0x58], 0xf
lea rcx, [rsp + 0x40]
cmova rcx, qword [rsp + 0x40]
jmp 0x1800256d9
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x180025743
push rax
pushf
mov eax, 0xbb4c27a4
pushf
not eax
add eax, 0xf4e70ed1
xor eax, 0xb1e3cfcd
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xb381354f
xor eax, 0xa12d511b
rol eax, 0x79
popf
pushf
not eax
add eax, 0xb95dea91
xor eax, 0xd9bd6ee9
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xa681e712
xor eax, 0x9a3cf3c4
rol eax, 0xe3
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0x9bba7c70
pushf
not eax
add eax, 0xcf6bbe5e
xor eax, 0xb89efd94
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xfe1c1b1d
xor eax, 0x8490e760
rol eax, 0x57
popf
jmp 0x18002547b
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800257e3
push rax
pushf
mov eax, 0xd7f5a6c1
pushf
not eax
add eax, 0xefd1852a
xor eax, 0xa49ab312
rol eax, 0x41
popf
pushf
not eax
add eax, 0xaf088e61
xor eax, 0xc816f90a
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xa5094c37
xor eax, 0x8b1f5b3d
rol eax, 0x70
popf
pushf
not eax
add eax, 0xc75c06a9
xor eax, 0x8c425606
rol eax, 0x86
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0xe21b7f6
pushf
not eax
add eax, 0xb690f20e
xor eax, 0xb1eb1ba7
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf2cb74c3
xor eax, 0x87edf5ac
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x88b9daf2
xor eax, 0xa9b29756
rol eax, 0x32
popf
pushf
not eax
add eax, 0x9d6f99f8
xor eax, 0xe9145196
rol eax, 0x2e
popf
jmp 0x18002547b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180025884
push rax
pushf
mov eax, 0x2d0816fe
pushf
not eax
add eax, 0x9eeb361b
xor eax, 0xde7e612b
rol eax, 0x64
popf
pushf
not eax
add eax, 0xb3c935c3
xor eax, 0xb9f1d248
rol eax, 0x13
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0x713558d6
pushf
not eax
add eax, 0xeef4c9eb
xor eax, 0x8f65cc14
rol eax, 0x21
popf
pushf
not eax
add eax, 0xdf37ebf8
xor eax, 0xa1e38b97
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x935b665a
xor eax, 0x94aaba29
rol eax, 0xa9
popf
jmp 0x18002547b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0xd3abebc0
pushf
not eax
add eax, 0x88b1f8c2
xor eax, 0xc90d9421
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x9a967c33
xor eax, 0x98455d5f
rol eax, 0x83
popf
pushf
not eax
add eax, 0xb3702595
xor eax, 0xb491238e
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x8b5153b5
xor eax, 0xfb3cd4ff
rol eax, 0xda
popf
jmp 0x18002547b
mov rax, qword [0x18000ea88]
sub rbx, rax
cmp rbx, 4
jb 0x180025d40
cmp qword [0x18000ea90], 0xf
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], 4
cmova rdi, qword [0x18000ea78]
mov r9, rdi
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
call fcn.1800291bb
cmp qword [rsp + 0x58], 0xf
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], 0
mov edx, 0xd6ff7397
pushf
not edx
add edx, 0xa22901a9
xor edx, 0xc3f160b5
rol edx, 0xf0
popf
pushf
not edx
add edx, 0xabd9453c
xor edx, 0xbd357c63
rol edx, 0x91
popf
cmova rcx, qword [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
jmp 0x180025a1a
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdx, qword [rsp + 0x58]
mov rbx, rax
cmp rdx, 0xf
jbe 0x180025a74
push rax
pushf
mov eax, 0x8bb36417
pushf
not eax
add eax, 0xc31cf5f3
xor eax, 0xbc7fcbf1
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xbdd21046
xor eax, 0xf8c0efa3
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xd737c4d8
xor eax, 0x89ada5f8
rol eax, 0x7d
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0x67a9a8f1
pushf
not eax
add eax, 0xeba882f7
xor eax, 0x9cd61909
rol eax, 0x68
popf
pushf
not eax
add eax, 0x954fa02b
xor eax, 0x8243b8de
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xe3a79f8a
xor eax, 0xb6ddb0ba
rol eax, 0x50
popf
jmp 0x18002547b
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025b27
push rax
pushf
mov eax, 0xcd364cfd
pushf
not eax
add eax, 0xbf102ce7
xor eax, 0xbc8bfca3
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xa957c355
xor eax, 0xe9b29393
rol eax, 0x93
popf
pushf
not eax
add eax, 0xedaa2027
xor eax, 0xd03176c6
rol eax, 0x67
popf
pushf
not eax
add eax, 0xfbb2a7b9
xor eax, 0xff49e633
rol eax, 0x2c
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0x29feaafc
pushf
not eax
add eax, 0xf9c33415
xor eax, 0xa98ad240
rol eax, 0x80
popf
pushf
not eax
add eax, 0xa35c9c34
xor eax, 0xf9c654ff
rol eax, 6
popf
pushf
not eax
add eax, 0xcf087f7e
xor eax, 0x9d02164c
rol eax, 0x33
popf
jmp 0x18002547b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180025bdb
push rax
pushf
mov eax, 0x42f3ca92
pushf
not eax
add eax, 0xf99fe61e
xor eax, 0xa14e043d
rol eax, 0x17
popf
pushf
not eax
add eax, 0x9d9d4a77
xor eax, 0xd0431ba2
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xa6a4a2c5
xor eax, 0xb828d42c
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x88936b8d
xor eax, 0xcf8ebd39
rol eax, 0xc0
popf
jmp 0x18002547b
push rax
pushf
mov eax, 0x11c6ff1e
pushf
not eax
add eax, 0x9308a57e
xor eax, 0xe22bb39f
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xd0a24da1
xor eax, 0x979d655e
rol eax, 0x10
popf
pushf
not eax
add eax, 0xde093f3c
xor eax, 0xd7538841
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x81f0fe3d
xor eax, 0xf0216d0f
rol eax, 4
popf
jmp 0x18002547b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0x8e21f1ca
pushf
not eax
add eax, 0xd64d4ea7
xor eax, 0x978a1956
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xe6a95b0e
xor eax, 0x97421db0
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xed3b279c
xor eax, 0xf86db638
rol eax, 0xa8
popf
jmp 0x18002547b
mov rbp, qword [rsp + 0x78]
cmp rbx, 0xffffffffffffffff
mov rdi, qword [rsp + 0x80]
setne al
add rsp, 0x60
pop rbx
ret
call fcn.18002cf03
int3
call fcn.18002cf03
int3