Function at 0x140033740
Capabilities:
Delete file
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xe0
xor r14d, r14d
lea ecx, [r14 + 0x2e]
xor edx, edx
call fcn.140001240
movzx ebx, ax
mov word [rbp - 0x59], ax
lea ecx, [rdx + 0x73]
lea edx, [rcx - 0x72]
call fcn.140001240
mov word [rbp - 0x57], ax
lea ecx, [rdx + 0x78]
lea edx, [rcx - 0x77]
call fcn.140001240
mov word [rbp - 0x55], ax
lea ecx, [rdx + 0x71]
lea edx, [rcx - 0x70]
call fcn.140001240
mov word [rbp - 0x53], ax
xor ecx, ecx
lea edx, [rcx + 4]
call fcn.140001240
movzx edi, ax
mov word [rbp - 0x51], ax
lea edx, [rcx + 5]
movzx ecx, word [0x140049c1a]
call fcn.140001240
mov word [rbp - 0x4f], ax
lea edx, [r14 + 6]
movzx ecx, word [0x140049c1c]
call fcn.140001240
mov word [rbp - 0x4d], ax
lea edx, [r14 + 7]
movzx ecx, word [0x140049c1e]
call fcn.140001240
mov word [rbp - 0x4b], ax
lea edx, [r14 + 8]
movzx ecx, word [0x140049c20]
call fcn.140001240
mov word [rbp - 0x49], ax
xor eax, eax
mov word [rbp - 0x47], ax
mov edx, r14d
mov esi, 0x133
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x59]
lea rcx, [rcx + rax*2]
lea eax, [rsi + rdx]
xor word [rcx], ax
inc edx
cmp edx, 9
jb 0x140033810
mov word [rbp - 0x47], r14w
mov qword [rbp + 0x27], r14
mov qword [rbp + 0x37], r14
mov qword [rbp + 0x3f], 7
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 0x27]
call fcn.14003bc10
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x19]
call fcn.140033070
nop
mov word [rbp - 0x59], bx
mov ecx, 0x65
lea edx, [rcx - 0x64]
call fcn.140001240
mov word [rbp - 0x57], ax
lea ecx, [rdx + 0x77]
lea edx, [rcx - 0x76]
call fcn.140001240
mov word [rbp - 0x55], ax
lea ecx, [rdx + 0x63]
lea edx, [rcx - 0x62]
call fcn.140001240
mov word [rbp - 0x53], ax
mov word [rbp - 0x51], di
lea edx, [rcx - 0x60]
movzx ecx, word [0x140049c2a]
call fcn.140001240
mov word [rbp - 0x4f], ax
mov edx, 6
movzx ecx, word [0x140049c2c]
call fcn.140001240
mov word [rbp - 0x4d], ax
mov edx, 7
movzx ecx, word [0x140049c2e]
call fcn.140001240
mov word [rbp - 0x4b], ax
mov edx, 8
movzx ecx, word [0x140049c30]
call fcn.140001240
mov word [rbp - 0x49], ax
xor eax, eax
mov word [rbp - 0x47], ax
mov edx, r14d
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x59]
lea rcx, [rcx + rax*2]
lea eax, [rsi + rdx]
xor word [rcx], ax
inc edx
cmp edx, 9
jb 0x1400338f0
mov word [rbp - 0x47], r14w
mov qword [rbp + 7], r14
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], 7
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 7]
call fcn.14003bc10
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.140033070
nop
mov ecx, 0x2d
xor edx, edx
call fcn.140001240
mov word [rbp - 0x59], ax
lea ecx, [rdx + 0x6d]
lea edx, [rcx - 0x6c]
call fcn.140001240
mov word [rbp - 0x57], ax
lea ecx, [rdx + 0x60]
lea edx, [rcx - 0x5f]
call fcn.140001240
mov word [rbp - 0x55], ax
lea ecx, [rdx + 0x6e]
lea edx, [rcx - 0x6d]
call fcn.140001240
mov word [rbp - 0x53], ax
lea ecx, [rdx + 0x1d]
lea edx, [rcx - 0x1c]
call fcn.140001240
mov word [rbp - 0x51], ax
xor ecx, ecx
lea edx, [rcx + 5]
call fcn.140001240
mov word [rbp - 0x4f], ax
lea edx, [rcx + 6]
movzx ecx, word [0x140049c3c]
call fcn.140001240
mov word [rbp - 0x4d], ax
mov edx, 7
movzx ecx, word [0x140049c3e]
call fcn.140001240
mov word [rbp - 0x4b], ax
mov edx, 8
movzx ecx, word [0x140049c40]
call fcn.140001240
mov word [rbp - 0x49], ax
mov edx, 9
movzx ecx, word [0x140049c42]
call fcn.140001240
mov word [rbp - 0x47], ax
mov edx, 0xa
movzx ecx, word [0x140049c44]
call fcn.140001240
mov word [rbp - 0x45], ax
xor eax, eax
mov word [rbp - 0x43], ax
mov eax, r14d
movsxd rcx, eax
lea rdx, [rbp - 0x59]
lea rdx, [rdx + rcx*2]
lea ecx, [rsi + rax]
xor word [rdx], cx
inc eax
cmp eax, 0xb
jb 0x140033a02
mov word [rbp - 0x43], r14w
lea rax, [rbp - 0x59]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140033a30
movabs rax, 0x7ffffffffffffffe
mov rdx, qword [rbp - 9]
sub rax, rdx
cmp rax, rcx
jb 0x140033c34
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x59]
lea rcx, [rbp + 0x27]
call fcn.14003ccd0
nop
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14002ff80
mov rcx, rax
call fcn.1400335d0
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 7]
call fcn.14002ff80
mov rcx, rax
call fcn.140033460
lea rax, [rbp + 7]
mov qword [rbp + 0x67], rax
lea rdx, [rbp + 0x27]
lea rcx, [rbp + 7]
call fcn.14002ff80
mov rbx, rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x59]
call fcn.14002ff80
nop
mov rdx, rbx
mov rcx, rax
call fcn.140033270
mov ecx, 0x1770
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 8
jb 0x140033b85
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033b7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140033b7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003de0c
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x140033bc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033bc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140033bc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003de0c
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r14w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x140033c1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140033c17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003de0c
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.14002ce60
nop
int3