Function at 0x140006ad0
Capabilities:
Delete file
Execute command

Disassembly:
push rdi
sub rsp, 0x260
mov rax, qword [0x1401af080]
xor rax, rsp
mov qword [rsp + 0x250], rax
mov edx, Ordinal_27
lea rcx, [rsp + 0xc0]
call fcn.1400036a0
lea rax, [rsp + 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.140006d70
mov rcx, rax
call fcn.14000bc70
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.14000d1a0
mov qword [rsp + 0x40], rax
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0xc0]
lea rcx, [0x1401c2b90]
call fcn.1401790a0
nop
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
lea rdx, [0x1401966b4]
mov rcx, qword [rsp + 0x48]
call fcn.14000d1a0
mov qword [rsp + 0x50], rax
mov r8, qword [rsp + 0x50]
lea rdx, [rsp + 0xf8]
lea rcx, [0x1401c2b90]
call fcn.1401803b0
nop
lea r8, [rsp + 0xf8]
lea rdx, [0x1401966bc]
lea rcx, [rsp + 0xd8]
call fcn.140015680
nop
mov edx, 0x108
lea rcx, [rsp + 0x140]
call fcn.1400036a0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, Ordinal_35
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x140]
call fcn.14000bae0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000c020
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0xc0]
call fcn.14000c050
mov qword [rsp + 0x60], rax
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x140]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x140]
call fcn.14000b9f0
lea r8, [rsp + 0xf8]
lea rdx, str.start_C:
lea rcx, [rsp + 0x118]
call fcn.140015680
nop
lea rcx, [rsp + 0x118]
call fcn.14000cd70
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0xd8]
call fcn.14000cd70
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x140006d0d
lea rdx, str.Failed_to_delete_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140015750
lea rdx, [rsp + 0xd8]
mov rcx, rax
call fcn.140015b30
lea rdx, [0x1401966d0]
mov rcx, rax
call fcn.140015750
mov qword [rsp + 0x68], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x34], eax
mov edx, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x1401966cc]
mov rcx, rax
call fcn.140015750
mov qword [rsp + 0x70], rax
lea rdx, [0x140015b80]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x118]
call fcn.14000d0a0
nop
lea rcx, [rsp + 0x140]
call fcn.140006da0
nop
lea rcx, [rsp + 0xd8]
call fcn.14000d0a0
nop
lea rcx, [rsp + 0xf8]
call fcn.14000d0a0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000c070
nop
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.1401823c0
add rsp, 0x260
pop rdi
ret