Function at 0x140005714
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], r12
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
and dword [rbp - 0x10], 0
lea rcx, [rbp - 0x30]
and qword [rbp - 0x18], 0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 8], eax
mov qword [rbp - 0x20], rbx
mov dword [rbp - 0xc], 0x490
call fcn.140004d50
mov r12d, eax
test eax, eax
je 0x140005a42
mov ecx, dword [0x14000b6a0]
cmp ecx, 2
jne 0x14000582b
mov r9, qword [rbp - 0x28]
mov rcx, rbx
mov r8, qword [0x14000b6c0]
mov rdx, qword [0x14000b6b8]
call fcn.140005014
mov ecx, eax
cmp eax, 0x80041064
jne 0x1400057aa
mov r9, qword [rbp - 0x28]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140005014
mov ecx, eax
test ecx, ecx
je 0x140005a2e
mov eax, ecx
movzx r8d, cx
and eax, 0xffff0000
cmp eax, 0x80070000
cmovne r8d, ecx
cmp r8d, 0x52e
jne 0x1400057d8
lea rcx, [0x14000f738]
jmp 0x140005803
cmp r8d, 5
jne 0x1400057e7
lea rcx, [0x1400104e0]
jmp 0x140005803
cmp r8d, 8
jne 0x1400057f6
lea rcx, [0x14000d208]
jmp 0x140005803
cmp r8d, 0x35
jne 0x14000580e
lea rcx, [0x14000eab8]
lea rdx, [rbp - 0x60]
call fcn.1400031d8
jmp 0x14000581f
lea rdx, [0x14000fa30]
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [0x14000f938]
jmp 0x140005a11
cmp ecx, 3
jne 0x1400058bd
lea rcx, [rbp - 0x30]
call fcn.1400041b0
mov r8d, eax
test eax, eax
je 0x140005a2e
and eax, 0xffff0000
cmp eax, 0x80070000
jne 0x140005858
movzx r8d, r8w
cmp r8d, 0x52e
jne 0x14000586a
lea rcx, [0x14000f738]
jmp 0x140005895
cmp r8d, 5
jne 0x140005879
lea rcx, [0x1400104e0]
jmp 0x140005895
cmp r8d, 8
jne 0x140005888
lea rcx, [0x14000d208]
jmp 0x140005895
cmp r8d, 0x35
jne 0x1400058a0
lea rcx, [0x14000eab8]
lea rdx, [rbp - 0x60]
call fcn.1400031d8
jmp 0x1400058b1
lea rdx, [0x14000fa30]
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [0x1400107b0]
jmp 0x140005a11
mov r9, qword [rbp - 0x28]
mov rcx, rbx
mov r8, qword [0x14000b6c0]
mov rdx, qword [0x14000b6b8]
call fcn.140005014
mov ecx, eax
cmp eax, 0x80041064
jne 0x1400058f3
mov r9, qword [rbp - 0x28]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140005014
mov ecx, eax
test ecx, ecx
je 0x140005a2e
mov eax, ecx
movzx r8d, cx
and eax, 0xffff0000
cmp eax, 0x80070000
cmovne r8d, ecx
cmp r8d, 0x52e
jne 0x140005921
lea rcx, [0x14000f738]
jmp 0x14000594c
cmp r8d, 5
jne 0x140005930
lea rcx, [0x1400104e0]
jmp 0x14000594c
cmp r8d, 8
jne 0x14000593f
lea rcx, [0x14000d208]
jmp 0x14000594c
cmp r8d, 0x35
jne 0x140005957
lea rcx, [0x14000eab8]
lea rdx, [rbp - 0x60]
call fcn.1400031d8
jmp 0x140005968
lea rdx, [0x14000fa30]
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9, [rbp - 0x60]
mov r8, rbx
lea rdx, [0x14000f938]
mov ecx, 3
call fcn.140006e5c
cmp dword [0x14000b168], 0
je 0x140005a22
lea rcx, [rbp - 0x30]
call fcn.1400041b0
mov r8d, eax
test eax, eax
je 0x140005a2e
and eax, 0xffff0000
cmp eax, 0x80070000
jne 0x1400059b1
movzx r8d, r8w
cmp r8d, 0x52e
jne 0x1400059c3
lea rcx, [0x14000f738]
jmp 0x1400059ee
cmp r8d, 5
jne 0x1400059d2
lea rcx, [0x1400104e0]
jmp 0x1400059ee
cmp r8d, 8
jne 0x1400059e1
lea rcx, [0x14000d208]
jmp 0x1400059ee
cmp r8d, 0x35
jne 0x1400059f9
lea rcx, [0x14000eab8]
lea rdx, [rbp - 0x60]
call fcn.1400031d8
jmp 0x140005a0a
lea rdx, [0x14000fa30]
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [0x140010060]
lea r9, [rbp - 0x60]
mov r8, rbx
mov ecx, 3
call fcn.140006e5c
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x140005a42
mov r8, rbx
lea rdx, [0x14000fce8]
mov ecx, 3
call fcn.140006e5c
mov rbx, qword [rbp - 0x28]
test rbx, rbx
je 0x140005a5f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140005a7c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r11, [rsp + 0x80]
mov eax, r12d
mov rbx, qword [r11 + 0x10]
mov r12, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret