Function at 0x18005f6e0
Capabilities:
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov rax, qword [0x180163140]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor esi, esi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp - 0x19], rax
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x19]
call fcn.18006449c
nop
lea rax, [rbp + 0x27]
cmp qword [rbp + 0x3f], 0xf
cmova rax, qword [rbp + 0x27]
mov qword [rbp - 0x19], rax
mov rax, qword [rbp + 0x37]
mov qword [rbp - 0x11], rax
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x41]
call fcn.180033540
nop
lea rax, str..start
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 6
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.180033540
nop
lea rdi, [rbp - 0x41]
cmp qword [rbp - 0x29], 7
cmova rdi, qword [rbp - 0x41]
mov rax, qword [rbp - 0x31]
lea rdx, [rdi + rax*2]
mov rbx, rdx
mov rcx, rdi
call fcn.1800382f4
jmp 0x18005f7b3
cmp word [rax], 0x5c
je 0x18005f7af
cmp word [rax], 0x2f
jne 0x18005f7b8
add rax, 2
cmp rax, rdx
jne 0x18005f7a3
cmp rax, rdx
je 0x18005f7d5
lea rcx, [rbx - 2]
cmp word [rcx], 0x5c
je 0x18005f7d5
cmp word [rcx], 0x2f
je 0x18005f7d5
mov rbx, rcx
cmp rax, rcx
jne 0x18005f7bd
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800a1950
mov rcx, rax
mov r9d, 0x2e
cmp rbx, rax
je 0x18005f816
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18005f816
cmp word [rax], r9w
jne 0x18005f885
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18005f813
cmp word [rdx], r9w
je 0x18005f816
mov rcx, rax
sub rcx, rdi
sar rcx, 1
cmp qword [rbp - 0x31], rcx
jb 0x18005f992
mov qword [rbp - 0x31], rcx
lea rax, [rbp - 0x41]
cmp qword [rbp - 0x29], 7
cmova rax, qword [rbp - 0x41]
mov word [rax + rcx*2], si
cmp qword [rbp + 0x17], rsi
je 0x18005f8a2
lea rax, [rbp + 7]
cmp qword [rbp + 0x1f], 7
cmova rax, qword [rbp + 7]
cmp word [rax], r9w
je 0x18005f8a2
mov rcx, qword [rbp - 0x31]
cmp rcx, qword [rbp - 0x29]
jae 0x18005f890
lea rax, [rcx + 1]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x41]
cmp qword [rbp - 0x29], 7
cmova rax, qword [rbp - 0x41]
mov dword [rax + rcx*2], gethostbyname
jmp 0x18005f8a2
cmp word [rax], r9w
je 0x18005f813
sub rax, 2
cmp rbx, rax
jne 0x18005f87f
jmp 0x18005f816
mov r8b, byte [rbp - 0x49]
mov edx, 1
lea rcx, [rbp - 0x41]
call fcn.1800540d8
lea rdx, [rbp + 7]
cmp qword [rbp + 0x1f], 7
cmova rdx, qword [rbp + 7]
mov r8, qword [rbp + 0x17]
lea rcx, [rbp - 0x41]
call fcn.180038560
nop
lea rcx, [rbp + 7]
call fcn.180013ea8
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x41]
call fcn.180060728
cmp qword [rax + 0x18], 0xf
jbe 0x18005f8de
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x18005f8f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0x1000
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x18005f92a
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, rbx
jb 0x18005f924
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005f998
call fcn.1800a4700
nop
lea rcx, [rbp - 0x41]
call fcn.180013ea8
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x18005f967
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, rbx
jb 0x18005f962
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005f98c
call fcn.1800a4700
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1800a46e0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.1800aabb4
nop
call fcn.180020fe0
nop
call fcn.1800aabb4
int3