Function at 0x180016450
Capabilities:
Accept command line arguments
Delete file

Disassembly:
sub rsp, 0x368
mov dword [rsp + 0x2c], 0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x2c]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
je 0x1800165c2
cmp dword [rsp + 0x2c], 2
jne 0x1800165c2
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x158]
call fcn.180004d10
lea rcx, [rsp + 0x1f8]
call fcn.1800160a0
lea r8, [0x180059fa8]
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.18001b180
lea r8, [rsp + 0x158]
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.18001b270
lea rcx, [rsp + 0x1d8]
call fcn.180001a30
lea rcx, [rsp + 0x1f8]
call fcn.180001a30
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x38], 0
jmp 0x180016524
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0x64
jae 0x180016572
lea rcx, [rsp + 0x118]
call fcn.180016220
movzx eax, al
test eax, eax
jne 0x180016542
jmp 0x180016572
lea rcx, [rsp + 0x118]
call fcn.180006f90
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 1
jne 0x180016565
jmp 0x180016572
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180016517
cmp dword [rsp + 0x28], 1
jne 0x1800165a8
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x20]
call fcn.1800169b0
mov rcx, rax
call fcn.180017730
xor r9d, r9d
lea r8, [0x1800599bc]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rsp + 0x118]
call fcn.180001a30
lea rcx, [rsp + 0x158]
call fcn.180001a30
lea rcx, [rsp + 0xd0]
call fcn.180016170
lea rcx, [rsp + 0x21]
call fcn.180001bd0
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0xd0]
call fcn.180006fb0
mov rax, qword [rax]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xd0]
call fcn.180007060
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x78], rax
mov r9, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x1b8]
call fcn.18000dbb0
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x218]
call fcn.180015fd0
lea rcx, [rsp + 0x218]
call fcn.180001a30
lea rdx, [rsp + 0x26a]
lea rcx, [rsp + 0x22]
call fcn.180016a50
mov rcx, rax
call fcn.1800176f0
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.180004d10
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x48]
call fcn.1800162d0
lea rcx, [rsp + 0x178]
call fcn.180001a30
lea rcx, [rsp + 0x48]
call fcn.1800068e0
movzx eax, al
test eax, eax
je 0x1800168ae
lea rdx, [0x1800599bd]
lea rcx, [rsp + 0x198]
call fcn.1800073b0
lea rdx, [rsp + 0x2e2]
lea rcx, [rsp + 0x23]
call fcn.180016af0
mov rcx, rax
call fcn.1800176b0
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.180004d10
lea rdx, [rsp + 0x286]
lea rcx, [rsp + 0x24]
call fcn.180016a50
mov rcx, rax
call fcn.1800176f0
mov r8, rax
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x238]
call fcn.18001b0c0
mov rcx, rax
call fcn.180006f90
mov rdx, rax
lea rcx, [rsp + 0xb8]
call fcn.18001cca0
lea rcx, [rsp + 0x238]
call fcn.180001a30
lea rcx, [rsp + 0xb8]
call fcn.1800068e0
movzx eax, al
test eax, eax
jne 0x180016826
lea rcx, [rsp + 0xb8]
call fcn.180017770
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0xb8]
call fcn.1800102d0
mov qword [rsp + 0x88], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
call fcn.180013630
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0xb8]
call fcn.1800177a0
lea rcx, [rsp + 0x138]
call fcn.180001a30
lea rcx, [rsp + 0x198]
call fcn.1800072b0
lea rcx, [rsp + 0x48]
call fcn.1800177a0
lea rcx, [rsp + 0x1b8]
call fcn.1800072b0
lea rcx, [rsp + 0xd0]
call fcn.180001a30
mov eax, dword [rsp + 0x30]
jmp 0x180016936
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x25]
call fcn.180016bc0
mov rcx, rax
call fcn.180018990
mov qword [rsp + 0x90], rax
lea rdx, [rsp + 0x2a2]
lea rcx, [rsp + 0x26]
call fcn.180016b90
mov rcx, rax
call fcn.180017670
mov qword [rsp + 0x98], rax
xor r9d, r9d
mov r8, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rsp + 0xb8]
call fcn.1800177a0
lea rcx, [rsp + 0x138]
call fcn.180001a30
lea rcx, [rsp + 0x198]
call fcn.1800072b0
jmp 0x180016906
lea rcx, [rsp + 0x48]
call fcn.1800068e0
movzx eax, al
test eax, eax
jne 0x180016906
lea rcx, [rsp + 0x48]
call fcn.180017770
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x48]
call fcn.1800102d0
mov qword [rsp + 0xa8], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
call fcn.180013630
mov qword [rsp + 0x100], rax
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0x48]
call fcn.1800177a0
lea rcx, [rsp + 0x1b8]
call fcn.1800072b0
lea rcx, [rsp + 0xd0]
call fcn.180001a30
mov eax, dword [rsp + 0x34]
add rsp, 0x368
ret