Function at 0x180124da0
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xa8
mov dword [rsp + 0x58], 0x78
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x70], 0
mov dword [rsp + 0x54], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x5c], 0
mov qword [rsp + 0x60], 0
lea r8, [0x18005f6c8]
lea rdx, [0x180060640]
mov ecx, 1
call fcn.1801276b0
nop
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xb0]
lea r8, [0x180060280]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov r11, qword [rsp + 0xb8]
mov qword [rsp + 0x20], r11
mov r9, qword [rsp + 0xb8]
lea r8, [0x180060600]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov r11d, dword [rsp + 0xc0]
mov dword [rsp + 0x20], r11d
mov r9d, dword [rsp + 0xc0]
lea r8, [0x180060208]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov r9, qword [rsp + 0xc8]
lea r8, [0x180060198]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov r9, qword [rsp + 0xd0]
lea r8, [0x180060170]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov r9, qword [rsp + 0xd8]
lea r8, [0x180060150]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov r11d, dword [rsp + 0xe0]
mov dword [rsp + 0x20], r11d
mov r9d, dword [rsp + 0xe0]
lea r8, [0x180060520]
lea rdx, [0x180060640]
mov ecx, 2
call fcn.1801276b0
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_IsBadCodePtr]
test eax, eax
je 0x180124f77
mov dword [rsp + 0x58], 0x57
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0xd0]
lea r8, [0x180060118]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
call fcn.180127230
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x180124fae
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x58]
lea r8, [0x18005f7b8]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x78]
call fcn.180125460
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x180125007
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
lea r8, [0x18005f760]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x78]
call fcn.180126330
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x180125060
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x78]
lea r8, [0x1800600b0]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov rcx, qword [rsp + 0x78]
call fcn.180126110
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x1801250a4
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x78]
lea r8, [0x180060050]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov ecx, dword [rsp + 0xc0]
call fcn.1800eb9ac
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x180125107
mov dword [rsp + 0x58], 0xe
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0xc0]
lea r8, [0x180060018]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov r8d, dword [rsp + 0xe0]
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x68]
call fcn.180126890
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x180125173
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
lea r8, [0x180060370]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov rax, qword [rsp + 0xc8]
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x50], 0
jmp 0x1801251a7
mov ecx, dword [rsp + 0xc0]
mov eax, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0xc8]
mov eax, dword [rax]
cmp dword [rsp + 0x50], eax
jae 0x18012539c
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rsp + 0x70]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xc8]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x70]
lea r8, [0x18005fe40]
lea rdx, [0x180060640]
mov ecx, 3
call fcn.1801276b0
mov rax, qword [rsp + 0xc8]
cmp dword [rax], 0
je 0x180125235
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rsp + 0x70]
mov eax, dword [rax]
sub eax, ecx
mov edx, eax
imul rdx, rdx, 0x64
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rax]
mov rax, rdx
cqo
idiv rcx
mov dword [rsp + 0x5c], eax
jmp 0x18012523d
mov dword [rsp + 0x5c], 0
mov r8, qword [rsp + 0xd8]
mov edx, dword [rsp + 0x5c]
mov ecx, 1
call qword [rsp + 0xd0]
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x1801252b7
mov dword [rsp + 0x58], 0x4c7
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9, qword [rsp + 0xd0]
lea r8, [0x18005fe00]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov eax, dword [rsp + 0xc0]
cmp dword [rsp + 0x70], eax
jae 0x1801252cc
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x54], eax
mov r8d, dword [rsp + 0x54]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x78]
call fcn.180125e20
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x180125329
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x78]
lea r8, [0x18005fda0]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov r8d, dword [rsp + 0x54]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
call fcn.180126f40
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x180125386
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x68]
lea r8, [0x1800602f0]
lea rdx, [0x180060640]
xor ecx, ecx
call fcn.1801276b0
jmp 0x1801253a4
mov ecx, dword [rsp + 0xc0]
mov eax, dword [rsp + 0x70]
sub eax, ecx
mov dword [rsp + 0x70], eax
jmp 0x180125196
mov dword [rsp + 0x58], 0
cmp qword [rsp + 0x78], 0
je 0x1801253b6
lea rcx, [rsp + 0x78]
call fcn.180125b00
cmp qword [rsp + 0x68], 0
je 0x1801253c8
lea rcx, [rsp + 0x68]
call fcn.180126c20
cmp qword [rsp + 0x60], 0
je 0x1801253ea
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x88]
call fcn.1800ec288
cmp dword [rsp + 0x58], 0
je 0x1801253ff
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x180125436
lea r8, [0x18005f618]
lea rdx, [0x180060640]
mov ecx, 1
call fcn.1801276b0
mov eax, dword [rsp + 0x58]
add rsp, 0xa8
ret