Function at 0x18003a3bc
Capabilities:
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov rax, qword [0x1801170a0]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor esi, esi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp - 0x19], rax
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x19]
call fcn.180042b74
nop
lea rax, [rbp + 0x27]
cmp qword [rbp + 0x3f], 0x10
cmovae rax, qword [rbp + 0x27]
mov qword [rbp - 0x19], rax
mov rax, qword [rbp + 0x37]
mov qword [rbp - 0x11], rax
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x41]
call fcn.18003b334
nop
lea rax, str..start
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 6
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.18003b334
nop
lea rdi, [rbp - 0x41]
cmp qword [rbp - 0x29], 8
cmovae rdi, qword [rbp - 0x41]
mov rax, qword [rbp - 0x31]
lea rdx, [rdi + rax*2]
mov rbx, rdx
mov rcx, rdi
call fcn.18003bbcc
jmp 0x18003a47d
cmp word [rax], 0x5c
je 0x18003a479
cmp word [rax], 0x2f
jne 0x18003a482
add rax, 2
cmp rax, rdx
jne 0x18003a46d
cmp rax, rdx
je 0x18003a49f
lea rcx, [rbx - 2]
cmp word [rcx], 0x5c
je 0x18003a49f
cmp word [rcx], 0x2f
je 0x18003a49f
mov rbx, rcx
cmp rax, rcx
jne 0x18003a487
mov r8d, 0x3a
mov rcx, rbx
call fcn.18007d090
mov rcx, rax
mov r9d, 0x2e
cmp rbx, rax
je 0x18003a4e0
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18003a4e0
cmp word [rax], r9w
jne 0x18003a54f
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18003a4dd
cmp word [rdx], r9w
je 0x18003a4e0
mov rcx, rax
sub rcx, rdi
sar rcx, 1
cmp qword [rbp - 0x31], rcx
jb 0x18003a65d
lea rax, [rbp - 0x41]
cmp qword [rbp - 0x29], 8
cmovae rax, qword [rbp - 0x41]
mov qword [rbp - 0x31], rcx
mov word [rax + rcx*2], si
cmp qword [rbp + 0x17], rsi
je 0x18003a56c
lea rax, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rax, qword [rbp + 7]
cmp word [rax], r9w
je 0x18003a56c
mov rcx, qword [rbp - 0x31]
cmp rcx, qword [rbp - 0x29]
jae 0x18003a55a
lea rax, [rcx + 1]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x41]
cmp qword [rbp - 0x29], 8
cmovae rax, qword [rbp - 0x41]
mov dword [rax + rcx*2], gethostbyname
jmp 0x18003a56c
cmp word [rax], r9w
je 0x18003a4dd
sub rax, 2
cmp rbx, rax
jne 0x18003a549
jmp 0x18003a4e0
mov r8b, byte [rbp - 0x49]
mov edx, 1
lea rcx, [rbp - 0x41]
call fcn.18003bca4
lea rdx, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rdx, qword [rbp + 7]
mov r8, qword [rbp + 0x17]
lea rcx, [rbp - 0x41]
call fcn.18003bfa4
nop
lea rcx, [rbp + 7]
call fcn.18001a4d8
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x41]
call fcn.18003b9b8
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 0x10
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x18003a5bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0x1000
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x18003a5f5
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, rbx
jb 0x18003a5ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003a663
call fcn.18007f000
nop
lea rcx, [rbp - 0x41]
call fcn.18001a4d8
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0x10
jb 0x18003a632
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, rbx
jb 0x18003a62d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003a657
call fcn.18007f000
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.18007efe0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.180085f74
nop
call fcn.180004328
nop
call fcn.180085f74
int3