Function at 0x140005030
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
movzx r14d, word [0x14004ff9c]
mov r15d, 0x2f
movzx edx, word [0x14004ffa0]
mov r12, rcx
movzx ecx, word [0x14004ffa2]
xor dx, r15w
movzx r9d, word [0x14004ff9e]
xor cx, r15w
movzx eax, word [0x14004ffa4]
lea ebx, [r15 + 0x1f]
xor dx, r15w
mov word [rbp - 0x49], r15w
xor cx, r15w
mov word [rbp - 0x37], dx
xor r14w, r15w
mov word [rbp - 0x35], cx
movzx r8d, r15w
lea edi, [rbx + 0x11]
xor r8w, r15w
lea esi, [rbx - 0x3f]
xor r14w, r15w
mov word [rbp - 0x3d], r8w
lea r10d, [r15 - 0x2d]
mov word [rbp - 0x3b], r14w
lea r11d, [r15 + 0x13]
xor r9w, r15w
xor ax, r15w
lea rdx, [rbp - 0x47]
xor r10w, r15w
lea rcx, [rbp + 0x17]
xor r11w, r15w
mov word [rbp - 0x47], r10w
xor r9w, r15w
mov word [rbp - 0x45], r11w
xor ax, r15w
mov word [rbp - 0x39], r9w
xor di, r15w
mov word [rbp - 0x33], ax
xor si, r15w
mov word [rbp - 0x41], di
xor bx, r15w
mov word [rbp - 0x3f], si
xor r14d, r14d
mov word [rbp - 0x43], bx
mov r8, r12
mov word [rbp - 0x31], r14w
call fcn.1400027a0
movzx r11d, word [0x14004ffaa]
lea r10d, [r15 + 0x4a]
movzx r9d, word [0x14004ffac]
mov esi, 1
movzx ecx, word [0x14004ffae]
mov ebx, 0x64
movzx eax, word [str.Franklin_Gothic]
xor r11w, si
xor r9w, si
mov word [rbp - 0x49], si
xor cx, si
mov word [rbp - 0x35], r14w
movzx edx, bx
xor r11w, si
xor r9w, si
mov word [rbp - 0x3d], r11w
xor cx, si
mov word [rbp - 0x3b], r9w
xor r15w, si
mov word [rbp - 0x39], cx
xor bx, si
mov word [rbp - 0x47], r15w
xor r10w, si
mov word [rbp - 0x45], bx
xor dx, si
mov word [rbp - 0x43], r10w
movzx r8d, si
mov word [rbp - 0x41], dx
xor r8w, si
xor ax, si
xor edi, edi
mov word [rbp - 0x3f], r8w
xor ax, si
mov word [rbp - 0x37], ax
movdqa xmm0, xmmword [0x140050410]
lea rax, [rbp - 0x47]
movdqu xmmword [rbp + 7], xmm0
mov qword [rbp - 9], r14
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], di
jne 0x1400051e0
lea rdx, [rbp - 0x47]
lea rcx, [rbp - 9]
call fcn.140002600
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x29]
call fcn.140004910
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 9]
call fcn.140002500
mov rcx, rax
call fcn.140004d50
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 9]
call fcn.140002500
lea rdx, [rbp - 0x29]
mov rbx, rax
lea rcx, [rbp - 0x49]
call fcn.140002500
mov rdx, rbx
mov rcx, rax
call fcn.140004b60
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [r12 + 0x18], 8
mov rcx, r12
jb 0x14000525b
mov rcx, qword [r12]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp qword [rbp - 0x11], 8
lea rcx, [rbp - 0x29]
cmovae rcx, qword [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1400052b5
mov rcx, qword [rbp - 0x29]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052b0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005373
call fcn.14001bfa4
mov rdx, qword [rbp + 0x2f]
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], r14w
cmp rdx, 8
jb 0x140005302
mov rcx, qword [rbp + 0x17]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052fd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005373
call fcn.14001bfa4
mov rdx, qword [r12 + 0x18]
cmp rdx, 8
jb 0x14000533f
mov rcx, qword [r12]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000533a
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005373
mov rcx, r8
call fcn.14001bfa4
lea r11, [rsp + 0xa0]
mov qword [r12 + 0x10], r14
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov qword [r12 + 0x18], 7
mov word [r12], r14w
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140025ba8
int3