Function at 0x14001167c
Capabilities:
Delete file

Disassembly:
jmp 0x14001bfc0
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x708
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x12a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x728]
mov rax, qword [0x14002c040]
xor rax, rbp
mov qword [rbp + 0x6d0], rax
lea rcx, [0x140032103]
call fcn.1400118d9
nop
lea rdx, str.https:__example.com_yourfile.exe
lea rcx, [rbp + 8]
call fcn.1400113ed
nop
lea rdx, str.example_file
lea rcx, [rbp + 0x48]
call fcn.1400113ed
nop
mov edx, 8
lea rcx, [rbp + 0x88]
call fcn.140011483
nop
lea r8, [0x140027608]
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x4b8]
call fcn.140011703
lea r8, [rbp + 0x88]
mov rdx, rax
lea rcx, [rbp + 0x4f8]
call fcn.140011302
lea r8, str..exe
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.14001182a
lea rcx, [rbp + 0x4f8]
call fcn.14001118b
lea rcx, [rbp + 0x4b8]
call fcn.14001118b
nop
lea rdx, str.YourProcess.exe
lea rcx, [rbp + 0x108]
call fcn.1400112da
nop
lea rdx, [0x140027638]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e1
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x554], 5
lea rdx, [rbp + 0x554]
lea rcx, [rbp + 0x538]
call fcn.140011203
mov rcx, rax
call fcn.14001119f
nop
lea rcx, [rbp + 0x108]
call fcn.1400118c0
movzx eax, al
test eax, eax
je 0x14001c20b
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x578]
call fcn.140011735
mov qword [rbp + 0x6c8], rax
lea rdx, [0x140027660]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e1
mov rcx, qword [rbp + 0x6c8]
mov rdx, rcx
mov rcx, rax
call fcn.1400117fd
lea rdx, [0x140027650]
mov rcx, rax
call fcn.1400110e1
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x578]
call fcn.14001118b
nop
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 8]
call fcn.140011690
movzx eax, al
test eax, eax
je 0x14001c206
lea rdx, [0x140027668]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e1
lea rdx, [rbp + 0xc8]
mov rcx, rax
call fcn.1400117fd
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x5d4], 2
lea rdx, [rbp + 0x5d4]
lea rcx, [rbp + 0x5b8]
call fcn.140011203
mov rcx, rax
call fcn.14001119f
nop
lea rcx, [rbp + 0xc8]
call fcn.140011136
nop
jmp 0x14001c37d
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x5f8]
call fcn.140011735
mov qword [rbp + 0x6c8], rax
lea rdx, [0x140027660]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e1
mov rcx, qword [rbp + 0x6c8]
mov rdx, rcx
mov rcx, rax
call fcn.1400117fd
lea rdx, [0x140027680]
mov rcx, rax
call fcn.1400110e1
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x5f8]
call fcn.14001118b
nop
mov dword [rbp + 0x654], 2
lea rdx, [rbp + 0x654]
lea rcx, [rbp + 0x638]
call fcn.140011203
mov rcx, rax
call fcn.14001119f
nop
mov r8d, 0x104
lea rdx, [rbp + 0x150]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jbe 0x14001c359
mov dword [rbp + 0x694], 2
lea rdx, [rbp + 0x694]
lea rcx, [rbp + 0x678]
call fcn.140011203
mov rcx, rax
call fcn.14001119f
nop
lea rcx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x14001c316
lea rdx, [0x1400276a0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e1
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14001c357
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x6c4], eax
lea rdx, [0x1400276b8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110e1
mov ecx, dword [rbp + 0x6c4]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14001c37d
lea rdx, [0x1400276d0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110e1
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x6b4], 0
lea rcx, [rbp + 0x108]
call fcn.1400117c6
lea rcx, [rbp + 0xc8]
call fcn.14001118b
lea rcx, [rbp + 0x88]
call fcn.14001118b
lea rcx, [rbp + 0x48]
call fcn.14001118b
lea rcx, [rbp + 8]
call fcn.14001118b
mov eax, dword [rbp + 0x6b4]
mov edi, eax
lea rcx, [rbp - 0x20]
lea rdx, [0x140025de0]
call fcn.140011767
mov eax, edi
mov rcx, qword [rbp + 0x6d0]
xor rcx, rbp
call fcn.140011442
lea rsp, [rbp + 0x6e8]
pop rdi
pop rbp
ret