Function at 0x1800063b0
Capabilities:
Check if file exists
Delete file

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x200
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rsp + 0x230], rbx
mov rax, qword [0x1800654c0]
xor rax, rsp
mov qword [rsp + 0x1f8], rax
mov rbp, rdx
mov rdi, rcx
xor ebx, ebx
mov dword [rsp + 0x20], ebx
call fcn.1800061d0
test eax, eax
je 0x1800063fe
lea eax, [rbx + 1]
jmp 0x18000681e
and dword [rsp + 0x58], 0xfffffe00
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.180003b90
mov rdi, rax
mov esi, 1
mov dword [rsp + 0x20], esi
lea rcx, [rsp + 0xd0]
call fcn.180016218
nop
mov dword [rsp + 0x20], 3
movzx r9d, sil
lea r8, [rsp + 0x50]
mov rdx, rdi
mov rcx, rax
call fcn.18001631c
test al, al
je 0x180006468
cmp byte [rsp + 0x58], 7
jne 0x180006468
xor dil, dil
jmp 0x18000646b
mov dil, 1
lea rcx, [rsp + 0xd0]
call fcn.180006850
nop
cmp qword [rsp + 0x98], 0x10
jb 0x180006491
mov rcx, qword [rsp + 0x80]
call fcn.180033b90
test dil, dil
je 0x1800064ab
mov byte [rbp], 1
lea rcx, [rsp + 0x50]
call fcn.18001c2f4
xor eax, eax
jmp 0x18000681e
lea r8, [0x180052572]
lea rdx, str.attachment
lea rcx, [rsp + 0x50]
call fcn.18001d4c0
test rax, rax
je 0x180006708
lea r8, [0x180052572]
lea rdx, str.attachment
lea rcx, [rsp + 0x50]
call fcn.18001d2a8
cmp byte [rax + 8], 4
jne 0x180006708
lea r8, [0x180052572]
lea rdx, str.attachment
lea rcx, [rsp + 0x50]
call fcn.18001d2a8
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.18001c494
nop
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.180003b00
nop
cmp qword [rsp + 0x98], 0x10
jb 0x18000653d
mov rcx, qword [rsp + 0x80]
call fcn.180033b90
mov qword [rsp + 0x98], recvfrom
mov qword [rsp + 0x90], rbx
mov byte [rsp + 0x80], 0
lea rcx, [rsp + 0x1d8]
cmp qword [rsp + 0x1f0], 8
cmovae rcx, qword [rsp + 0x1d8]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1800066bf
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x50]
call fcn.18001de5c
nop
cmp qword [rax + 0x20], 0x10
jb 0x1800065a1
mov rdx, qword [rax + 8]
jmp 0x1800065a5
lea rdx, [rax + 8]
mov qword [rsp + 0x48], recvfrom
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x30], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x28]
call fcn.180001d80
nop
lea rdx, [rsp + 0x1d8]
cmp qword [rsp + 0x1f0], 8
cmovae rdx, qword [rsp + 0x1d8]
lea rcx, [rsp + 0x28]
call fcn.180006000
mov edi, eax
cmp qword [rsp + 0x48], 0x10
jb 0x18000660d
mov rcx, qword [rsp + 0x30]
call fcn.180033b90
mov qword [rsp + 0x48], recvfrom
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x30], 0
cmp qword [rsp + 0xc8], 0x10
jb 0x180006638
mov rcx, qword [rsp + 0xb0]
call fcn.180033b90
test edi, edi
je 0x18000667a
lea r8, [0x180052583]
lea rdx, str.i_notremove
lea rcx, [rsp + 0x50]
call fcn.18001d4c0
test rax, rax
jne 0x18000667a
lea rcx, [rsp + 0x1d8]
cmp qword [rsp + 0x1f0], 8
cmovae rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
cmp qword [rsp + 0x1f0], 8
jb 0x180006692
mov rcx, qword [rsp + 0x1d8]
call fcn.180033b90
mov qword [rsp + 0x1f0], 7
mov qword [rsp + 0x1e8], rbx
mov word [rsp + 0x1d8], bx
lea rcx, [rsp + 0x50]
call fcn.18001c2f4
mov eax, edi
jmp 0x18000681e
mov byte [rbp], 1
cmp qword [rsp + 0x1f0], 8
jb 0x1800066db
mov rcx, qword [rsp + 0x1d8]
call fcn.180033b90
mov qword [rsp + 0x1f0], 7
mov qword [rsp + 0x1e8], rbx
mov word [rsp + 0x1d8], bx
lea rcx, [rsp + 0x50]
call fcn.18001c2f4
xor eax, eax
jmp 0x18000681e
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.18001de5c
nop
cmp qword [rax + 0x20], 0x10
jb 0x180006725
mov rdx, qword [rax + 8]
jmp 0x180006729
lea rdx, [rax + 8]
mov r8d, 0x46c
lea rcx, str.cacheableRpt
call fcn.180004d80
mov rdi, rax
cmp qword [rsp + 0x98], 0x10
jb 0x180006756
mov rcx, qword [rsp + 0x80]
call fcn.180033b90
mov qword [rsp + 0x98], recvfrom
mov qword [rsp + 0x90], rbx
mov byte [rsp + 0x80], 0
test rdi, rdi
je 0x180006812
mov dword [rsp + 0x20], esi
and dword [rsp + 0x1d8], 0xfffffe00
mov qword [rsp + 0x1e0], rbx
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x48], recvfrom
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x30], 0
lea r9, [rsp + 0x1d0]
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.180030b24
nop
cmp qword [rsp + 0x48], 0x10
jb 0x1800067e2
mov rcx, qword [rsp + 0x30]
call fcn.180033b90
mov qword [rsp + 0x48], recvfrom
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x30], 0
lea rcx, [rsp + 0x1d0]
call fcn.18001c2f4
mov rcx, rdi
call fcn.18002fbe4
cmp dword [rsp + 0x20], 0
cmove ebx, esi
lea rcx, [rsp + 0x50]
call fcn.18001c2f4
mov eax, ebx
mov rcx, qword [rsp + 0x1f8]
xor rcx, rsp
call fcn.1800336d0
mov rbx, qword [rsp + 0x230]
add rsp, 0x200
pop rdi
pop rsi
pop rbp
ret