Function at 0x1800dddbc
Capabilities:
Delete file
Execute command

Disassembly:
push rbp
push rdi
sub rsp, 0xd08
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x246
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x180203940]
xor rax, rbp
mov qword [rbp + 0xcc8], rax
lea rcx, [0x18025f840]
call fcn.180136f34
lea rdx, str.VRChat
lea rcx, [rbp + 0x748]
call fcn.18008e524
mov rcx, rax
call fcn.1800db91c
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x18020f3e0], rax
mov dword [rbp + 0x7a4], 0x3e8
lea rdx, [rbp + 0x7a4]
lea rcx, [rbp + 0x788]
call fcn.18005b53c
mov rcx, rax
call fcn.18005cec8
cmp qword [0x18020f3e0], 0
je 0x1800dddf9
lea rax, [rbp + 0x7c8]
mov qword [rbp + 0x808], rax
mov edx, 0xa
mov rcx, qword [rbp + 0x808]
call fcn.1800dd5ac
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
mov rcx, qword [rbp + 0xcb0]
call fcn.1800a9edc
lea rdx, [0x1801cc9c8]
lea rcx, [rbp + 0x824]
call fcn.18008e310
mov rcx, rax
call fcn.1800db6fc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x18020f3b0]
call fcn.180007764
mov rcx, qword [0x18020f3b0]
call fcn.18000783c
lea rdx, [rbp + 0x8c8]
lea rcx, [rbp + 0x8a4]
call fcn.180097e78
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xcb0]
lea rcx, [rbp + 0x868]
call fcn.1800514c0
nop
lea rcx, [rbp + 0x868]
call fcn.1800561c8
movzx eax, al
test eax, eax
jne 0x1800ddf2f
mov dword [rbp + 0xcb8], 1
jmp 0x1800ddf39
mov dword [rbp + 0xcb8], 0
mov al, byte [rbp + 0xcb8]
mov byte [rbp + 0x844], al
lea rcx, [rbp + 0x868]
call fcn.180053800
nop
lea rcx, [rbp + 0x8c8]
call fcn.180007090
movzx eax, byte [rbp + 0x844]
test eax, eax
je 0x1800ddfce
lea rdx, [rbp + 0x968]
lea rcx, [rbp + 0x944]
call fcn.18009b270
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xcb0]
lea rcx, [rbp + 0x908]
call fcn.1800514c0
nop
lea rcx, [rbp + 0x908]
call fcn.1800d9734
nop
lea rcx, [rbp + 0x908]
call fcn.180053800
nop
lea rcx, [rbp + 0x968]
call fcn.180007090
lea rdx, [rbp + 0xa28]
lea rcx, [rbp + 0xa04]
call fcn.18009d1a4
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xcb0]
lea rcx, [rbp + 0x9c8]
call fcn.1800514c0
nop
lea rcx, [rbp + 0x9c8]
call fcn.1800561c8
movzx eax, al
test eax, eax
jne 0x1800de02c
mov dword [rbp + 0xcb8], 1
jmp 0x1800de036
mov dword [rbp + 0xcb8], 0
mov al, byte [rbp + 0xcb8]
mov byte [rbp + 0x9a4], al
lea rcx, [rbp + 0x9c8]
call fcn.180053800
nop
lea rcx, [rbp + 0xa28]
call fcn.180007090
movzx eax, byte [rbp + 0x9a4]
test eax, eax
je 0x1800de0eb
lea rdx, [rbp + 0xa88]
lea rcx, [rbp + 0xa64]
call fcn.18009e254
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
mov rdx, qword [rbp + 0xcb0]
lea rcx, [rbp + 0x10]
call fcn.18001f788
nop
lea rcx, [rbp + 0xa88]
call fcn.180007090
lea rcx, [rbp + 0x10]
call fcn.180021d8c
movzx eax, al
test eax, eax
je 0x1800de0dd
lea rcx, [rbp + 0x10]
call fcn.18002190c
nop
lea rcx, [rbp + 0x10]
call fcn.180020e8c
jmp 0x1800de1bd
lea rdx, [rbp + 0xae8]
lea rcx, [rbp + 0xac4]
call fcn.18009f454
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
mov rcx, qword [rbp + 0xcb0]
call fcn.180008190
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
lea rcx, [rbp + 0xae8]
call fcn.180007090
lea rdx, [rbp + 0xb48]
lea rcx, [rbp + 0xb24]
call fcn.1800a0040
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
mov rdx, qword [rbp + 0xcb0]
lea rcx, [rbp + 0x140]
call fcn.18001f788
nop
lea rcx, [rbp + 0xb48]
call fcn.180007090
lea rcx, [rbp + 0x140]
call fcn.180021d8c
movzx eax, al
test eax, eax
je 0x1800de1b1
lea rcx, [rbp + 0x140]
call fcn.18002190c
nop
lea rcx, [rbp + 0x140]
call fcn.180020e8c
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [0x18020f3b8]
lea r8, [0x180046aec]
xor edx, edx
xor ecx, ecx
call fcn.1800aed98
mov edx, Ordinal_41
lea rcx, [rbp + 0xb88]
call fcn.1800dd5ac
mov qword [rbp + 0xca8], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0xcb0], rax
mov rdx, qword [rbp + 0xcb0]
lea rcx, [0x1801fd178]
call fcn.1800202a8
nop
lea rcx, [rbp + 0xb88]
call fcn.180007090
mov edx, 1
lea rcx, [rbp + 0x270]
call fcn.180017508
nop
lea rax, [rbp + 0x280]
mov qword [rbp + 0xca8], rax
lea rdx, [rbp + 0xbe8]
lea rcx, [rbp + 0xbc4]
call fcn.1800a06c4
mov qword [rbp + 0xcb0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rbp + 0xcb8], rax
mov rdx, qword [rbp + 0xcb8]
mov rax, qword [rbp + 0xca8]
mov rcx, rax
call fcn.180015f04
lea rdx, [0x1801fd178]
mov rcx, rax
call fcn.180015f04
nop
lea rcx, [rbp + 0xbe8]
call fcn.180007090
call fcn.18001b5ec
mov qword [rbp + 0xca8], rax
lea rax, [rbp + 0xc28]
mov qword [rbp + 0xc68], rax
mov rdx, qword [rbp + 0xc68]
lea rcx, [rbp + 0x270]
call fcn.18001cf88
mov qword [rbp + 0xcb0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rbp + 0xcb8], rax
mov rax, qword [rbp + 0xcb8]
mov qword [rbp + 0xcc0], rax
mov r8b, 1
mov rdx, qword [rbp + 0xcc0]
mov rcx, qword [rbp + 0xca8]
call fcn.18002382c
call fcn.1800de3b8
call fcn.1800dd200
lea rdx, str.___Creating_Hooks_n
lea rcx, [rbp + 0xc88]
call fcn.18008c9f8
mov rcx, rax
call fcn.1800db09c
mov rcx, rax
call fcn.1800de7ec
call fcn.1800aaf8c
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [0x18020f3b8]
lea r8, [0x1800a7de4]
xor edx, edx
xor ecx, ecx
call fcn.1800aed98
call fcn.1800af15c
lea rcx, [0x1800b0cf0]
call fcn.1800a65ac
lea rcx, [0x1800c5fec]
call fcn.1800a6570
nop
lea rcx, [rbp + 0x270]
call fcn.180019f98
lea rcx, [rbp - 0x30]
lea rdx, reloc.WS2_32.dll_closesocket
call fcn.180136ec0
mov rcx, qword [rbp + 0xcc8]
xor rcx, rbp
call fcn.180137000
lea rsp, [rbp + 0xcd8]
pop rdi
pop rbp
ret