Function at 0x140002cf1
Capabilities:
Create process on windows
Self delete

Disassembly:
push rbp
push rbx
sub rsp, 0x388
lea rbp, [rsp + 0x80]
lea rax, [rbp + 0x1e0]
mov rcx, rax
call sym.get_self_path_abi:cxx11___
lea rax, [rbp + 0x200]
mov r8d, 2
lea rdx, str.hidden_folder
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_char__14___std::filesystem::__cxx11.path__char_const_____14___std::filesystem::__cxx11::path::format_
lea rax, [rbp + 0x230]
mov rcx, rax
call method.std::filesystem.temp_directory_path_abi:cxx11___
lea rax, [rbp + 0x1b0]
lea rcx, [rbp + 0x200]
lea rdx, [rbp + 0x230]
mov r8, rcx
mov rcx, rax
call method.std::filesystem::__cxx11.operator__std::filesystem::__cxx11::path_const__std::filesystem::__cxx11::path_const_
lea rax, [rbp + 0x230]
mov rcx, rax
call fcn.1400a36a0
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1400a36a0
lea rdx, [rbp + 0x1e0]
lea rax, [rbp + 0x290]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::filesystem::__cxx11.path__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::filesy
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x290]
mov rcx, rax
call method.std::filesystem::__cxx11::path.filename___const
lea rax, [rbp + 0x180]
lea rcx, [rbp + 0x260]
lea rdx, [rbp + 0x1b0]
mov r8, rcx
mov rcx, rax
call method.std::filesystem::__cxx11.operator__std::filesystem::__cxx11::path_const__std::filesystem::__cxx11::path_const_
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.1400a36a0
lea rax, [rbp + 0x290]
mov rcx, rax
call fcn.1400a36a0
lea rax, [rbp + 0x180]
mov rcx, rax
call method.std::filesystem.exists_std::filesystem::__cxx11::path_const_
test al, al
je 0x140002f65
lea rax, [rbp - 0x50]
mov r8d, 0x10
lea rdx, str.delete_self.bat
mov rcx, rax
call method.std::basic_ofstream_char__std::char_traits_char___.basic_ofstream_char_const__std::_Ios_Openmode_
lea rax, [rbp - 0x50]
lea rdx, str.:loop_n
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp - 0x50]
lea rdx, str.del__
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x180]
mov rcx, rax
call method.std::filesystem::__cxx11::path.string___const
lea rax, [rbp + 0x2c0]
mov rdx, rax
mov rcx, rbx
call method.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std.allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char
mov rcx, rax
lea rax, [0x1400fd22d]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp + 0x2c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x50]
lea rdx, str.if_exist__
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x180]
mov rcx, rax
call method.std::filesystem::__cxx11::path.string___const
lea rax, [rbp + 0x2e0]
mov rdx, rax
mov rcx, rbx
call method.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std.allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char
mov rcx, rax
lea rax, str.__goto_loop_n
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp + 0x2e0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x50]
lea rdx, str.del__0_n
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp - 0x50]
mov rcx, rax
call method.std::basic_ofstream_char__std::char_traits_char___.close__
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
lea r8, str.delete_self.bat
lea rax, str.open
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.SHELL32.dll_ShellExecuteA]
call rax
lea rax, str.Scheduled_deletion_of_the_program_from_hidden_folder._n
mov rdx, rax
mov rax, qword [0x140103d10]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp - 0x50]
mov rcx, rax
call method.std::basic_ofstream_char__std::char_traits_char___.basic_ofstream__
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.1400a36a0
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.1400a36a0
lea rax, [rbp + 0x1e0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140003069
add rsp, 0x388
pop rbx
pop rbp
ret