Function at 0x4275e0
Capabilities:
Delete file

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x910
mov rbp, rsp
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x908], 0
mov qword [rbp + 0x900], 0
mov qword [rbp + 0x8f8], 0
mov qword [rbp + 0x8f0], 0
mov qword [rbp + 0x8e8], 0
mov qword [rbp + 0x8e0], 0
mov qword [rbp + 0x370], 0
nop
mov ebx, 1
add dword [0x0043ab24], 1
cmp dword [0x0043ab24], 0xc8
jne 0x427758
mov dword [0x0043ab24], 0
lea rcx, [rbp + 0x900]
call fcn.004099f0
movsxd rax, dword [0x0043ab24]
mov rcx, qword [0x00432f68]
mov ecx, dword [rcx]
cqo
idiv rcx
test rdx, rdx
jne 0x4282db
mov rax, qword [0x00432ef8]
mov byte [rax], 1
lea rcx, [0x0042852c]
call fcn.00410c80
test al, al
je 0x4277b1
lea rcx, [rbp + 0x8e8]
lea rdx, [0x00428548]
call fcn.00409fd0
jmp 0x4277c4
lea rcx, [rbp + 0x8e8]
lea rdx, [0x00428568]
call fcn.0041c0d0
mov rcx, qword [0x00432e40]
mov rdx, qword [rbp + 0x8e8]
call fcn.00409f40
lea rcx, [rbp + 0xf8]
mov rdx, qword [rbp + 0x8e8]
xor r8, r8
call fcn.0040ac80
mov rcx, qword [rbp + 0xf8]
call fcn.0041a2b0
cmp qword [rbp + 0x8e8], 0
jne 0x427816
lea rcx, [rbp + 0x8e8]
lea rdx, [0x00428548]
call fcn.00409fd0
lea rcx, [rbp + 0x8f0]
call fcn.004099f0
lea rcx, [rbp + 0xf0]
lea rdx, [0x00428588]
mov rax, qword [0x00432f30]
mov r8, qword [rax]
call fcn.0040b220
mov rcx, qword [rbp + 0xf0]
call fcn.0040ae00
mov rcx, rax
lea rdx, [0x0042859a]
call sub.user32.dll_FindWindowW
test rax, rax
setbe al
test byte [0x0043ab09], al
jne 0x427871
cmp byte [0x0043ab09], 0
jne 0x427893
lea rcx, [rbp + 0x908]
mov edx, 0xe061
mov r8, qword [rbp + 0x8e8]
mov rax, qword [0x00432e68]
mov r9, qword [rax]
call fcn.004143f0
xor eax, eax
mov rcx, qword [rbp + 0x908]
test rcx, rcx
je 0x4278a4
mov eax, dword [rcx - 4]
cmp eax, 1
jle 0x4282db
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0x908]
xor r8, r8
call fcn.0040ac80
mov rcx, qword [rbp + 0xe8]
call fcn.0041a2b0
mov rax, qword [rbp + 0x908]
movzx rsi, word [rax]
cmp si, 0x31
jne 0x4278f3
lea rcx, [rbp + 0x900]
lea rdx, [0x004285a8]
call fcn.00409fd0
cmp si, 0x57
jne 0x427932
lea rcx, [rbp + 0x908]
mov edx, 1
mov r8d, 1
call fcn.0040b4a0
lea rcx, [rbp + 0xe0]
mov rdx, qword [rbp + 0x908]
xor r8, r8
call fcn.0040ac80
mov rcx, qword [rbp + 0xe0]
call fcn.00419ec0
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x55
jne 0x42798b
lea rcx, [rbp + 0x908]
mov edx, 1
mov r8d, 1
call fcn.0040b4a0
mov rcx, qword [rbp + 0x908]
call fcn.0040ae00
xor ecx, ecx
lea rdx, [0x004285bc]
mov r8, rax
xor r9, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 1
mov rax, qword [0x00432e00]
call qword [rax]
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x50
jne 0x42799d
call fcn.00411ac0
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x48
jne 0x4279af
call fcn.0041c320
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x53
jne 0x427a26
lea rcx, [rbp + 0x908]
mov edx, 1
mov r8d, 1
call fcn.0040b4a0
lea rcx, [rbp + 0xd8]
lea rdx, [0x004285e4]
mov r8, qword [rbp + 0x908]
call fcn.0040b220
mov rcx, qword [rbp + 0xd8]
call fcn.0040ae00
xor ecx, ecx
lea rdx, [0x004285bc]
lea r8, [0x004285c6]
mov r9, rax
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov rax, qword [0x00432e00]
call qword [rax]
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x36
jne 0x427ac5
xor eax, eax
mov rcx, qword [rbp + 0x908]
test rcx, rcx
je 0x427a48
mov eax, dword [rcx - 4]
cmp eax, 3
jle 0x427a8a
lea rcx, [rbp + 0x8e8]
mov rdx, qword [rbp + 0x908]
mov r8d, 3
mov r9d, 0xff
call fcn.0040b440
mov rcx, qword [rbp + 0x8e8]
mov rax, qword [0x00432ee8]
mov rdx, qword [rax]
call fcn.0040b430
test eax, eax
jne 0x4283db
lea rcx, [rbp + 0xd0]
mov rdx, qword [rbp + 0x908]
mov r8d, 2
mov r9d, 2
call fcn.0040b440
mov rcx, qword [rbp + 0xd0]
lea rdx, [rbp + 0x8dc]
call fcn.0040c8f0
mov rcx, qword [0x00432f68]
mov dword [rcx], eax
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x34
jne 0x42823e
lea rcx, [0x004285f8]
mov rdx, qword [rbp + 0x908]
mov r8d, 1
call fcn.0040b520
test eax, eax
je 0x427b65
lea rcx, [0x004285f8]
mov rdx, qword [rbp + 0x908]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0x8f8]
mov rdx, qword [rbp + 0x908]
mov r8d, eax
add r8d, 1
mov r9d, 0xff
call fcn.0040b440
lea rcx, [0x004285f8]
mov rdx, qword [rbp + 0x908]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0x908]
mov rdx, qword [rbp + 0x908]
mov r8d, 1
mov r9d, eax
sub r9d, 1
call fcn.0040b440
mov rax, qword [0x00432f20]
mov word [rax], 0x30
lea rcx, [rbp + 0x8e0]
mov rax, qword [rbp + 0x908]
movzx rdx, word [rax + 2]
call fcn.0040ae40
lea rcx, [rbp + 0x908]
mov edx, 1
mov r8d, 2
call fcn.0040b4a0
xor eax, eax
mov rcx, qword [rbp + 0x908]
test rcx, rcx
je 0x427bb1
mov eax, dword [rcx - 4]
mov dword [rbp + 0x8dc], eax
cmp dword [rbp + 0x8dc], 1
jl 0x427be6
mov rax, qword [rbp + 0x908]
movsxd rcx, dword [rbp + 0x8dc]
cmp word [rax + rcx*2 - 2], 0x2f
je 0x427be6
sub dword [rbp + 0x8dc], 1
cmp dword [rbp + 0x8dc], 0
jne 0x427bc0
nop
lea rcx, [rbp + 0xc8]
call fcn.00413d90
lea rcx, [rbp + 0xc0]
mov rdx, qword [rbp + 0x908]
mov r8d, dword [rbp + 0x8dc]
add r8d, 1
mov r9d, 0xff
call fcn.0040b440
lea rcx, [rbp + 0x8f0]
mov rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xc0]
call fcn.0040b220
mov rcx, qword [rbp + 0x8e0]
lea rdx, [0x00428608]
call fcn.0040b430
test eax, eax
jne 0x427caa
lea rcx, [rbp + 0x900]
lea rdx, [0x00428618]
call fcn.00409fd0
lea rcx, [0x0042862c]
mov rdx, qword [rbp + 0x8f0]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0xb8]
mov rdx, qword [rbp + 0x8f0]
mov r8d, 1
mov r9d, eax
call fcn.0040b440
lea rcx, [rbp + 0x8f0]
mov rdx, qword [rbp + 0xb8]
lea r8, [0x0042863c]
call fcn.0040b220
mov rcx, qword [rbp + 0x8e0]
lea rdx, [0x00428650]
call fcn.0040b430
test eax, eax
jne 0x427d28
lea rcx, [0x0042862c]
mov rdx, qword [rbp + 0x8f0]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbp + 0x8f0]
mov r8d, 1
mov r9d, eax
call fcn.0040b440
lea rcx, [rbp + 0x8f0]
mov rdx, qword [rbp + 0xb0]
lea r8, [0x00428660]
call fcn.0040b220
lea rcx, [rbp + 0x900]
mov rdx, qword [rbp + 0x8f0]
call fcn.00409fd0
mov ebx, 1
mov rcx, qword [rbp + 0x8e0]
lea rdx, [0x00428674]
call fcn.0040b430
test eax, eax
jne 0x427da3
lea rcx, [0x0042862c]
mov rdx, qword [rbp + 0x8f0]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x8f0]
mov r8d, 1
mov r9d, eax
call fcn.0040b440
lea rcx, [rbp + 0x8f0]
mov rdx, qword [rbp + 0xa8]
lea r8, [0x00428660]
call fcn.0040b220
lea rcx, [rbp + 0x900]
mov rdx, qword [rbp + 0x8f0]
call fcn.00409fd0
xor ebx, ebx
mov rcx, qword [rbp + 0x8e0]
lea rdx, [0x00428684]
call fcn.0040b430
test eax, eax
jne 0x42822b
mov rcx, qword [0x0043ab10]
mov rdx, qword [rbp + 0x908]
call fcn.0040b430
test eax, eax
je 0x4283db
xor eax, eax
mov dword [rbp + 0x30], eax
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x68
je 0x427edb
lea rcx, [rbp + 0xa0]
call fcn.00413d90
lea rcx, [rbp + 0xa0]
lea rdx, [0x00428694]
call fcn.0040b150
mov rcx, qword [rbp + 0xa0]
call fcn.0040ae00
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
lea rcx, [rbp + 0x98]
call fcn.00413d90
lea rcx, [rbp + 0x98]
lea rdx, [0x00428694]
call fcn.0040b150
mov rcx, qword [rbp + 0x908]
mov rdx, qword [rbp + 0x98]
call fcn.00411820
mov ebx, eax
lea rcx, [rbp + 0x90]
mov edx, ebx
call fcn.00410b70
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x90]
xor r8, r8
call fcn.0040ac80
mov rcx, qword [rbp + 0x88]
call fcn.00411960
lea rcx, [rbp + 0x80]
call fcn.00413d90
lea rcx, [rbp + 0x80]
lea rdx, [0x00428694]
call fcn.0040b150
mov rcx, qword [rbp + 0x80]
call fcn.0040ae00
mov rcx, rax
mov edx, ebx
call fcn.00418ed0
test al, al
je 0x4283db
mov eax, 0x62
mov dword [rbp + 0x30], eax
mov rax, qword [0x00432e90]
mov rax, qword [rax]
lea r13, [rax - 0x62]
jmp 0x427eea
mov rcx, qword [rbp + 0x908]
call fcn.00414770
mov r13, rax
test r13, r13
je 0x4283db
lea rax, [r13 + 0x62]
mov ecx, dword [rax]
call fcn.004275a0
mov ebx, eax
lea rax, [r13 + 0x66]
mov ecx, dword [rax]
call fcn.004275a0
mov esi, eax
lea rax, [r13 + 0x6a]
mov ecx, dword [rax]
call fcn.004275a0
mov dword [rbp + 0x34], eax
lea rax, [r13 + 0x6e]
mov ecx, dword [rax]
call fcn.004275a0
mov edi, eax
xor eax, eax
mov ecx, 1
mov edx, esi
mov dword [rbp + 0x8dc], ecx
cmp dword [rbp + 0x8dc], edx
jg 0x427f68
sub edx, ecx
add edx, 1
movsxd rcx, dword [rbp + 0x8dc]
lea rcx, [r13 + rcx + 0x71]
movzx rcx, byte [rcx]
movzx rcx, cl
add eax, ecx
add dword [rbp + 0x8dc], 1
sub edx, 1
test edx, edx
jne 0x427f44
nop
cmp eax, ebx
jne 0x4283db
lea rcx, [0x0043ab10]
mov rdx, qword [rbp + 0x908]
call fcn.00409f40
lea rbx, [r13 + 0x72]
lea rcx, [rbp + 0x78]
call fcn.00413d90
lea rcx, [rbp + 0x78]
lea rdx, [0x004286b4]
call fcn.0040b150
lea rcx, [rbp + 0x108]
mov rdx, qword [rbp + 0x78]
call fcn.00405910
lea rcx, [rbp + 0x108]
mov edx, 1
call fcn.00406dd0
lea rcx, [rbp + 0x108]
mov rdx, rbx
mov r8d, esi
xor r9, r9
call fcn.00405ba0
lea rcx, [rbp + 0x108]
call fcn.00405bd0
mov esi, esi
lea rbx, [r13 + rsi + 0x72]
lea rcx, [rbp + 0x70]
call fcn.00413d90
lea rcx, [rbp + 0x70]
lea rdx, [0x004286d0]
call fcn.0040b150
lea rcx, [rbp + 0x108]
mov rdx, qword [rbp + 0x70]
call fcn.00405910
lea rcx, [rbp + 0x108]
mov edx, 1
call fcn.00406dd0
lea rcx, [rbp + 0x108]
mov rdx, rbx
mov r8d, dword [rbp + 0x34]
xor r9, r9
call fcn.00405ba0
lea rcx, [rbp + 0x108]
call fcn.00405bd0
lea rax, [r13 + rsi + 0x72]
mov ecx, dword [rbp + 0x34]
mov ecx, ecx
lea rbx, [rax + rcx]
lea rcx, [rbp + 0x8e8]
mov edx, edi
shr edx, 1
call fcn.0040b070
lea rcx, [rbp + 0x8e8]
call fcn.0040a250
mov rcx, rbx
mov rdx, rax
mov r8d, edi
call fcn.00405020
mov dword [rbp + 0x8dc], 1
lea rcx, [0x004286f4]
mov rdx, qword [rbp + 0x8e8]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x8e8]
mov r8d, 1
mov r9d, eax
sub r9d, 1
call fcn.0040b440
lea rcx, [0x004286f4]
mov rdx, qword [rbp + 0x8e8]
mov r8d, 1
call fcn.0040b520
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x8e8]
mov r8d, eax
add r8d, 3
mov r9d, edi
call fcn.0040b440
lea rcx, [rbp + 0x8e8]
mov edx, 3
mov r8, qword [rbp + 0x68]
mov rax, qword [0x00432ee8]
mov r9, qword [rax]
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.0040b350
add dword [rbp + 0x8dc], 1
cmp dword [rbp + 0x8dc], 4
jne 0x428089
nop
lea rcx, [rbp + 0x58]
call fcn.00413d90
lea rcx, [rbp + 0x58]
lea rdx, [0x00428708]
call fcn.0040b150
lea rcx, [rbp + 0x108]
mov rdx, qword [rbp + 0x58]
call fcn.00405910
lea rcx, [rbp + 0x108]
mov edx, 1
call fcn.00406dd0
lea rcx, [rbp + 0x8e8]
call fcn.0040a250
mov rcx, rax
xor eax, eax
mov rdx, qword [rbp + 0x8e8]
test rdx, rdx
je 0x428189
mov eax, dword [rdx - 4]
lea rdx, [rbp + 0x108]
mov r8, rcx
add eax, eax
xor r9, r9
mov rcx, rdx
mov rdx, r8
mov r8d, eax
call fcn.00405ba0
lea rcx, [rbp + 0x108]
call fcn.00405bd0
mov eax, dword [rbp + 0x30]
movsxd rax, eax
lea rcx, [r13 + rax]
call fcn.00404ce0
lea rcx, [rbp + 0x48]
call fcn.00413d90
lea rcx, [rbp + 0x50]
mov edx, 3
lea r8, [0x00428740]
mov r9, qword [rbp + 0x48]
lea rax, [0x00428794]
mov qword [rsp + 0x20], rax
call fcn.0040b350
mov rcx, qword [rbp + 0x50]
call fcn.0040ae00
xor ecx, ecx
lea rdx, [0x004285bc]
lea r8, [0x00428718]
mov r9, rax
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov rax, qword [0x00432e00]
call qword [rax]
jmp 0x4283db
mov rcx, qword [rbp + 0x908]
mov rdx, qword [rbp + 0x8f0]
call fcn.00411820
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x42
jne 0x428276
lea rcx, [rbp + 0x908]
mov edx, 1
mov r8d, 1
call fcn.0040b4a0
mov rcx, qword [rbp + 0x908]
call fcn.0040ae00
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
mov rax, qword [rbp + 0x908]
cmp word [rax], 0x58
jne 0x4282db
lea rcx, [rbp + 0x908]
mov edx, 1
mov r8d, 1
call fcn.0040b4a0
mov rcx, qword [rbp + 0x908]
mov rax, qword [0x00432e68]
mov rdx, qword [rax]
call fcn.0040b430
test eax, eax
jne 0x4282be
mov rax, qword [0x00432dd8]
mov byte [rax], 1
mov rax, qword [rbp + 0x908]
cmp word [rax + 2], 0x32
jne 0x4282db
call fcn.00418ff0
mov rax, qword [0x00432dd8]
mov byte [rax], 1
cmp qword [rbp + 0x900], 0
je 0x4283da
mov rcx, qword [rbp + 0x900]
lea rdx, [0x00428618]
call fcn.0040b430
test eax, eax
jne 0x428352
lea rcx, [rbp + 0x40]
mov rdx, qword [rbp + 0x8f0]
xor r8, r8
call fcn.0040ac80
mov rcx, qword [rbp + 0x40]
call fcn.0040aaa0
mov rcx, rax
call sub.kernel32.dll_GetModuleHandleA
mov qword [0x0043ab18], rax
cmp qword [0x0043ab18], 0
jne 0x4283db
mov rcx, qword [rbp + 0x8f0]
call fcn.0040ae00
mov rcx, rax
call sub.kernel32.dll_LoadLibraryW
jmp 0x4283db
mov rcx, qword [rbp + 0x900]
lea rdx, [0x004285a8]
call fcn.0040b430
test eax, eax
jne 0x428375
mov ecx, 0x3e8
call fcn.00427050
jmp 0x4283da
lea rcx, [rbp + 0x38]
mov edx, 3
lea r8, [0x004287b8]
mov r9, qword [rbp + 0x900]
lea rax, [0x004287b8]
mov qword [rsp + 0x20], rax
call fcn.0040b350
mov rcx, qword [rbp + 0x38]
call fcn.0040ae00
mov rsi, rax
mov rcx, qword [rbp + 0x8f8]
call fcn.0040ae00
xor ecx, ecx
lea rdx, [0x004285bc]
mov r8, rsi
mov r9, rax
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], ebx
mov rax, qword [0x00432e00]
call qword [rax]
nop
lea rcx, [rbp + 0x38]
call fcn.004099f0
lea rcx, [rbp + 0x40]
call fcn.00409a40
lea rcx, [rbp + 0x48]
mov edx, 8
call fcn.00409ad0
lea rcx, [rbp + 0x88]
call fcn.00409a40
lea rcx, [rbp + 0x90]
mov edx, 0xa
call fcn.00409ad0
lea rcx, [rbp + 0xe0]
mov edx, 2
call fcn.00409b20
lea rcx, [rbp + 0xf0]
call fcn.004099f0
lea rcx, [rbp + 0xf8]
call fcn.00409a40
lea rcx, [rbp + 0x370]
mov rdx, qword [0x00410b20]
call fcn.0040cad0
lea rcx, [rbp + 0x8e0]
mov edx, 6
call fcn.00409ad0
lea rsp, [rbp + 0x910]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret