Function at 0x140018370
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rdi, rcx
xor esi, esi
mov rcx, qword [rcx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x1a
jb 0x14001a30e
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400183c1
mov rax, qword [rdi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1a
lea r9, str.Suspicious_file_detected:
lea rcx, [rbp + 0x17]
call fcn.140023680
nop
mov r8d, 0x1a
lea rdx, str._nDo_you_want_to_delete_it_
lea rcx, [rbp + 0x17]
call fcn.140020d50
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 7], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov r9d, 0x33
lea r8, str.File_Alert
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ebx, eax
mov dword [rbp - 0x11], eax
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x14001848b
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018486
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a314
call fcn.140025360
movdqa xmm0, xmmword [0x140053ff0]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x1400184d7
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400184d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a308
call fcn.140025360
movdqa xmm0, xmmword [0x140053ff0]
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x17], 0
call fcn.14000b0a0
movsx r9d, al
call fcn.14000b090
movsx ecx, al
imul r9d, ecx
call fcn.14000b0d0
movsx r10d, al
lea eax, [r9 + r9*2]
lea r11d, [r10 + rax*2]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r11d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mov rax, rsi
cmp ebx, 6
sete al
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm1, xmm0
movsd qword [rbp - 0x19], xmm1
lea eax, [r9 + r9*4]
lea r14d, [r10 + rax*2]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r14d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
mov ebx, 0xa
cmp eax, ecx
je 0x1400185dc
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
je 0x1400185dc
mov r11d, ebx
jmp 0x140018636
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r10d
lea eax, [rax + r9*2]
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018632
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r11d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r11d, xmm0
jmp 0x140018636
mov r11d, dword [rbp - 0x11]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r10d
add eax, r9d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, r11d
xor edx, edx
test eax, eax
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
je 0x140019b70
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14005bcd0]
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
mov rcx, rdi
call fcn.140016a00
movzx eax, al
movd xmm2, eax
cvtdq2pd xmm2, xmm2
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r14d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001872f
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
je 0x14001872f
mov r9d, ebx
jmp 0x1400187c2
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x1400187be
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r9d, xmm0
jmp 0x1400187c2
mov r9d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r13d, [rdx + rdx]
call fcn.14000b0d0
movsx esi, al
add esi, r13d
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, esi
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
mov r8d, eax
call fcn.14000b0a0
movsx r14d, al
call fcn.14000b090
movsx r15d, al
call fcn.14000b0d0
movsx r12d, al
movsx ecx, byte [0x14005bcd3]
sub r8d, ecx
imul r8d, r9d
test r8d, r8d
je 0x140018f14
lea rdx, str.File_in_use__attempting_to_terminate_associated_process_before_deleting.
lea rcx, [0x14005c4f0]
call fcn.140021a20
mov rcx, rax
call fcn.140021cd0
mov edx, r15d
imul edx, r14d
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea eax, [rax + rdx*8]
add eax, r12d
movsx r8d, byte [0x14005bcd0]
xor edx, edx
div r8d
movsx edx, byte [0x14005bcd3]
cmp eax, edx
je 0x14001a2e7
mov rcx, rdi
call fcn.140016ec0
movzx eax, al
movd xmm2, eax
cvtdq2pd xmm2, xmm2
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018937
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
je 0x140018937
mov r10d, ebx
jmp 0x1400189ac
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, esi
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x1400189a8
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r10d, xmm0
jmp 0x1400189ac
mov r10d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*2]
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx edx, byte [0x14005bcd3]
sub eax, edx
imul eax, r10d
test eax, eax
je 0x1400189ff
lea rdx, str.File_successfully_deleted.
jmp 0x14001a2d3
call fcn.14000b0d0
movsx ecx, al
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add ecx, r13d
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0b0
movsx r11d, al
call fcn.14000b0e0
movsx edi, al
call fcn.14000b0c0
movsx esi, al
movsx edx, byte [0x14005e1b0]
imul edx, r11d
sub edx, edi
add edx, esi
movsx eax, byte [0x14005bcd4]
add eax, edx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018afa
movsx ecx, byte [0x14005e1b0]
imul ecx, r11d
lea edx, [rcx + rcx*4]
sub edx, edi
add edx, esi
movsx ecx, byte [0x14005bcd4]
add ecx, edx
je 0x140018afa
mov r10d, ebx
jmp 0x140018b8d
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018b89
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r10d, xmm0
jmp 0x140018b8d
mov r10d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
imul r9d, edx, 7
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, r10d
test eax, eax
je 0x140018f01
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f60]
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018c68
movsx ecx, byte [0x14005e1b0]
imul ecx, r11d
lea edx, [rcx + rcx*4]
sub edx, edi
add edx, esi
movsx ecx, byte [0x14005bcd4]
add ecx, edx
jne 0x140018cbf
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018cbf
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [0x14005bcd0]
movzx eax, byte [0x14005bcd3]
movsd xmm0, qword [rbp - 0x19]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*4]
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018df5
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x140018e86
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140018e83
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si ebx, xmm0
jmp 0x140018e86
mov ebx, dword [rbp - 0x11]
call fcn.14000b0a0
movsx r9d, al
call fcn.14000b090
movsx ecx, al
imul r9d, ecx
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, ebx
test eax, eax
je 0x14001a2e7
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f68]
jmp 0x14001a03d
lea rdx, str.Failed_to_delete_file_after_terminating_process.
lea rcx, [0x14005c670]
jmp 0x14001a2da
mov ecx, r15d
imul ecx, r14d
lea edx, [rcx + rcx*2]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea eax, [rax + rdx*2]
add eax, r12d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0b0
movsx r11d, al
call fcn.14000b0e0
movsx r14d, al
call fcn.14000b0c0
movsx r15d, al
movsx ecx, byte [0x14005e1b0]
imul ecx, r11d
lea edx, [rcx + rcx*4]
sub edx, r14d
add edx, r15d
movsx eax, byte [0x14005bcd4]
add eax, edx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019018
movsx ecx, byte [0x14005e1b0]
imul ecx, r11d
lea edx, [rcx + rcx*4]
sub edx, r14d
add edx, r15d
movsx ecx, byte [0x14005bcd4]
add ecx, edx
je 0x140019018
mov r10d, ebx
jmp 0x14001908d
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, esi
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019089
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r10d, xmm0
jmp 0x14001908d
mov r10d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx r9d, al
call fcn.14000b090
movsx ecx, al
imul r9d, ecx
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
mov r8d, eax
call fcn.14000b0a0
movsx r9d, al
call fcn.14000b090
movsx esi, al
call fcn.14000b0d0
movsx r12d, al
movsx ecx, byte [0x14005bcd3]
sub r8d, ecx
imul r8d, r10d
test r8d, r8d
je 0x14001940b
movsx ecx, byte [0x14005bcd2]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
movsx ecx, byte [0x14005bcd4]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f40]
movsd qword [rbp - 0x19], xmm1
mov ecx, esi
imul ecx, r9d
lea edx, [rcx + rcx*4]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea eax, [rax + rdx*2]
add eax, r12d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019173
movsx ecx, byte [0x14005e1b0]
imul ecx, r11d
lea edx, [rcx + rcx*4]
sub edx, r14d
add edx, r15d
movsx ecx, byte [0x14005bcd4]
add ecx, edx
jne 0x1400191ca
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x1400191ca
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [0x14005bcd0]
movzx eax, byte [0x14005bcd3]
movsd xmm0, qword [rbp - 0x19]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*4]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*8]
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x1400192fd
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x14001938e
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001938b
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si ebx, xmm0
jmp 0x14001938e
mov ebx, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*4]
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, ebx
test eax, eax
je 0x14001a2e7
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f58]
jmp 0x14001a03d
mov ecx, esi
imul ecx, r9d
imul eax, ecx, 7
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
add eax, r12d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140019447
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019504
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
je 0x140019504
mov r9d, ebx
jmp 0x140019597
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019593
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r9d, xmm0
jmp 0x140019597
mov r9d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, r9d
test eax, eax
je 0x14001960b
lea rdx, str.File_deleted:
lea rcx, [0x14005c4f0]
call fcn.140021a20
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400195fa
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.1400237e0
jmp 0x14001a2df
call fcn.14000b0a0
movsx r9d, al
call fcn.14000b090
movsx ecx, al
imul r9d, ecx
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
add r8d, r8d
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx eax, byte [0x14005bcd4]
add eax, r8d
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001973e
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
je 0x14001973e
mov r9d, ebx
jmp 0x1400197d1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x1400197cd
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r9d, xmm0
jmp 0x1400197d1
mov r9d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, r9d
test eax, eax
je 0x140019b3f
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f58]
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x1400198c6
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x14001991d
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001991d
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [0x14005bcd0]
movzx eax, byte [0x14005bcd3]
movsd xmm0, qword [rbp - 0x19]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*8]
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea r9d, [rcx + rdx*4]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r9d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019a52
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x140019ae3
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019ae0
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si ebx, xmm0
jmp 0x140019ae3
mov ebx, dword [rbp - 0x11]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r9d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, ebx
test eax, eax
je 0x14001a2e7
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f40]
jmp 0x14001a03d
lea rdx, str.Failed_to_delete_file:
lea rcx, [0x14005c670]
call fcn.140021a20
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140019b5f
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.1400237e0
jmp 0x14001a2df
lea ecx, [r9 + r10]
lea ecx, [rcx + r9*8]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0b0
movsx r13d, al
mov r10d, r13d
call fcn.14000b0e0
mov byte [rbp - 0xd], al
movsx r11d, al
call fcn.14000b0c0
mov byte [rbp - 0xc], al
movsx edi, al
movsx r8d, byte [0x14005e1b0]
imul r8d, r13d
shl r8d, 2
sub r8d, r11d
add r8d, edi
movsx eax, byte [0x14005bcd4]
add eax, r8d
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r14d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019c52
movsx ecx, byte [0x14005e1b0]
imul ecx, r10d
lea edx, [rcx + rcx*4]
sub edx, r11d
add edx, edi
movsx ecx, byte [0x14005bcd4]
add ecx, edx
je 0x140019c52
mov r9d, ebx
jmp 0x140019ce5
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019ce1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si r9d, xmm0
jmp 0x140019ce5
mov r9d, dword [rbp - 0x11]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
mov r8d, eax
call fcn.14000b0a0
movsx r14d, al
call fcn.14000b090
movsx r15d, al
call fcn.14000b0d0
movsx r12d, al
movsx ecx, byte [0x14005bcd3]
sub r8d, ecx
imul r8d, r9d
test r8d, r8d
je 0x14001a11e
movsx ecx, byte [0x14005bcd2]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
movsx ecx, byte [0x14005bcd4]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
addsd xmm1, xmm1
movsd qword [rbp - 0x19], xmm1
mov ecx, r15d
imul ecx, r14d
lea edx, [rcx + rcx*4]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea eax, [rax + rdx*2]
add eax, r12d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019dc9
movsx ecx, byte [0x14005e1b0]
imul ecx, r10d
lea edx, [rcx + rcx*4]
sub edx, r11d
add edx, edi
movsx ecx, byte [0x14005bcd4]
add ecx, edx
jne 0x140019e20
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019e20
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [0x14005bcd0]
movzx eax, byte [0x14005bcd3]
movsd xmm0, qword [rbp - 0x19]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*2]
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea r9d, [rcx + rdx*8]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r9d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019f55
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x140019fe6
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x140019fe3
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si ebx, xmm0
jmp 0x140019fe6
mov ebx, dword [rbp - 0x11]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r9d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, ebx
test eax, eax
je 0x14001a2e7
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140053f50]
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
xor edx, edx
movsx ecx, byte [0x14005bcd0]
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a0be
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x14001a2e7
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [0x14005bcd0]
movzx eax, byte [0x14005bcd3]
movsd xmm0, qword [rbp - 0x19]
jmp 0x14001a2e7
mov ecx, r15d
imul ecx, r14d
lea edx, [rcx + rcx*2]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea eax, [rax + rdx*2]
add eax, r12d
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a2e7
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14005bcd4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
cmp dword [rbp - 0x11], 2
sete sil
xorps xmm0, xmm0
cvtsi2sd xmm0, rsi
mulsd xmm1, xmm0
movsd qword [rbp - 0x19], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a1f7
movsx ecx, byte [0x14005e1b0]
imul ecx, r13d
lea edx, [rcx + rcx*4]
movsx eax, byte [rbp - 0xd]
sub edx, eax
movsx eax, byte [rbp - 0xc]
add edx, eax
movsx ecx, byte [0x14005bcd4]
add ecx, edx
jne 0x14001a288
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
cmp eax, ecx
je 0x14001a285
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x19]
cvttsd2si ebx, xmm0
jmp 0x14001a288
mov ebx, dword [rbp - 0x11]
call fcn.14000b0a0
movsx r9d, al
call fcn.14000b090
movsx ecx, al
imul r9d, ecx
call fcn.14000b0d0
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, ecx
movsx ecx, byte [0x14005bcd0]
xor edx, edx
div ecx
movsx ecx, byte [0x14005bcd3]
sub eax, ecx
imul eax, ebx
test eax, eax
je 0x14001a2e7
lea rdx, str.User_chose_not_to_delete_the_file.
lea rcx, [0x14005c4f0]
call fcn.140021a20
mov rcx, rax
call fcn.140021cd0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400307e0
int3
call fcn.14000a530
nop
call fcn.1400307e0
nop
int3