Function at 0x140003d60
Capabilities:
Delete file
Execute command
Move file
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
lea rcx, [rbp - 9]
call fcn.1400029d0
nop
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp + 7]
sub rax, rcx
cmp rax, 8
jae 0x140003d9c
call fcn.140001470
int3
lea r9, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova r9, qword [rbp - 9]
mov qword [rsp + 0x30], 8
lea rax, [0x1400b46b0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x37]
call fcn.140005b10
nop
mov rax, qword [rbp + 7]
sub rbx, rax
cmp rbx, 8
jae 0x140003de1
call fcn.140001470
int3
lea r9, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova r9, qword [rbp - 9]
mov qword [rsp + 0x30], 8
lea rcx, [0x1400b46c0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x39]
call fcn.140005b10
nop
lea rax, [rbp - 0x39]
cmp qword [rbp - 0x21], 0xf
cmova rax, qword [rbp - 0x39]
mov qword [rbp - 0x19], rax
mov rax, qword [rbp - 0x29]
mov qword [rbp - 0x11], rax
call fcn.140092b00
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
lea r8, [rbp - 0x19]
mov edx, eax
lea rcx, [rbp + 0x17]
call fcn.140002ad0
nop
lea rcx, [rbp + 0x17]
call fcn.140003380
movzx ebx, al
mov rdx, qword [rbp + 0x2f]
cmp rdx, 7
jbe 0x140003e9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003e95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093434
test bl, bl
je 0x140003eb2
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0xf
cmova rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0xf
cmova rdx, qword [rbp - 0x39]
lea rcx, [rbp + 0x37]
cmp qword [rbp + 0x4f], 0xf
cmova rcx, qword [rbp + 0x37]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
lea rdx, [rbp + 0x37]
lea rcx, [rbp + 0x17]
call fcn.140004540
mov rdx, rax
lea rcx, [0x1400b4680]
call fcn.140003470
mov ecx, 0xfffffff5
test al, al
je 0x140003f62
mov ebx, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400b46d0]
call fcn.140001270
mov ebx, 7
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x37]
call fcn.140002820
lea rcx, [0x1400b438c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ebx, reloc.WS2_32.dll_inet_ntoa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400b46e8]
call fcn.140001270
mov ebx, 7
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400b438c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3