Function at 0x577840
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
sub rsp, 0x258
mov rbp, rsp
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1d8], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x178], rbp
mov qword [rbp + 0x270], rcx
mov qword [rbp + 0x278], rdx
mov qword [rbp + 0x280], r8
mov rcx, qword [rbp + 0x270]
call fcn.0040e540
mov rcx, qword [rbp + 0x280]
call fcn.0040e540
nop
mov rcx, qword [0x004cb648]
mov dl, 1
call fcn.004f6e40
mov qword [rbp + 0x1d0], rax
mov rcx, qword [rbp + 0x1d0]
mov rdx, qword [rbp + 0x280]
mov rax, qword [rbp + 0x1d0]
mov rax, qword [rax]
call qword [rax + 0x78]
mov rcx, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
xor r8, r8
call fcn.004f43b0
mov rcx, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x1e0]
xor r8, r8
call fcn.004f5e50
mov rcx, qword [rbp + 0x1d0]
call fcn.0040b010
lea rcx, [rbp + 0x158]
xor rdx, rdx
call fcn.00409350
lea rcx, [rbp + 0x160]
mov rdx, qword [rbp + 0x158]
call fcn.0042da40
lea rcx, [rbp + 0x168]
mov rdx, qword [rbp + 0x160]
call fcn.00438800
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x168]
call fcn.0042da40
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x170]
lea r8, [0x00578f40]
call fcn.0040fe00
mov rcx, qword [rbp + 0x1c8]
mov dl, 1
call fcn.0042d3c0
test al, al
je 0x577c0a
mov rcx, qword [0x00544b88]
mov dl, 1
mov r8, qword [rbp + 0x1c8]
call fcn.00546cc0
mov qword [rbp + 0x1b8], rax
mov rcx, qword [rbp + 0x1b8]
lea rdx, [0x00578f7c]
call fcn.00546d60
test al, al
je 0x577bf7
mov byte [rbp + 0x1b7], 1
mov rcx, qword [rbp + 0x1b8]
lea rdx, [rbp + 0x148]
lea r8, [0x00578f7c]
lea r9, [0x00578fb4]
lea rax, [0x00578fe8]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x1b8]
mov rbx, qword [rax]
call qword [rbx + 8]
lea rcx, [rbp + 0x150]
lea rdx, [0x00578fa0]
mov r8, qword [rbp + 0x148]
call fcn.0040fe00
mov rcx, qword [rbp + 0x150]
call fcn.0042cbe0
mov dword [rbp + 0x1c4], eax
mov eax, dword [rbp + 0x1c4]
mov dword [rbp + 0x218], eax
jmp 0x577bfe
mov byte [rbp + 0x1b7], 0
mov rcx, qword [rbp + 0x1b8]
call fcn.0040b010
lea rax, [0x00579000]
cmp rax, qword [rbp + 0x1f0]
jne 0x577c23
mov byte [rbp + 0x18f], 1
jmp 0x577c60
lea rax, [0x00579000]
test rax, rax
je 0x577c39
cmp qword [rbp + 0x1f0], 0
jne 0x577c42
mov byte [rbp + 0x18f], 0
jmp 0x577c60
lea rcx, [0x00579000]
mov rdx, qword [rbp + 0x1f0]
call fcn.0042bc30
test eax, eax
sete al
mov byte [rbp + 0x18f], al
nop
cmp byte [rbp + 0x18f], 0
je 0x577c8f
mov rcx, qword [rbp + 0x1e0]
call fcn.00567610
mov rbx, rax
lea rcx, [0x00579030]
call fcn.00567610
cmp rbx, rax
jne 0x577c8f
call fcn.00572470
mov byte [rbp + 0x237], 0
mov byte [rbp + 0x207], 0
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0x270]
lea r8, [0x00579054]
call fcn.0040fe00
mov rcx, qword [rbp + 0x140]
mov dl, 1
call fcn.0042d3c0
test al, al
je 0x578cb2
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0x270]
lea r8, [0x00579054]
call fcn.0040fe00
mov rcx, qword [0x00544b88]
mov dl, 1
mov r8, qword [rbp + 0x138]
call fcn.00546cc0
mov qword [rbp + 0x228], rax
mov rcx, qword [0x004cb648]
mov dl, 1
call fcn.004f6e40
mov qword [rbp + 0x220], rax
mov rcx, qword [rbp + 0x228]
lea rdx, [0x00579078]
call fcn.00546d60
test al, al
je 0x577d56
mov rcx, qword [rbp + 0x228]
lea rdx, [0x00579078]
mov r8, qword [rbp + 0x220]
mov rax, qword [rbp + 0x228]
mov rbx, qword [rax]
call qword [rbx + 0xa8]
jmp 0x577d7b
mov rcx, qword [rbp + 0x228]
lea rdx, [0x005790a4]
mov r8, qword [rbp + 0x220]
mov rax, qword [rbp + 0x228]
mov rbx, qword [rax]
call qword [rbx + 0xa8]
mov rcx, qword [rbp + 0x220]
mov rax, qword [rbp + 0x220]
mov rax, qword [rax]
call qword [rax + 0x28]
xor rcx, rcx
sub eax, 1
mov dword [rbp + 0x3c], eax
mov dword [rbp + 0x21c], ecx
mov eax, dword [rbp + 0x3c]
cmp dword [rbp + 0x21c], eax
jg 0x578c6f
mov eax, dword [rbp + 0x3c]
add eax, 1
mov dword [rbp + 0x3c], eax
nop
lea rcx, [rbp + 0x207]
call fcn.00575780
jmp 0x577e4e
nop
mov byte [rbp + 0x1b6], 1
lea rcx, [rbp + 0x120]
lea rdx, [0x0057912c]
call fcn.0042b950
lea rcx, [rbp + 0x118]
mov rdx, qword [rbp + 0x280]
call fcn.0042b950
mov rcx, qword [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
mov r8d, 1
call fcn.004101a0
test eax, eax
jle 0x577f00
call fcn.0056e920
mov byte [rbp + 0x1b6], al
cmp byte [rbp + 0x1b6], 0
je 0x577ed3
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x577f00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579144]
call fcn.00553120
jmp 0x577f00
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x577f00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579188]
call fcn.00553120
jmp 0x577f00
cmp byte [rbp + 0x1b7], 0
jne 0x577f7a
mov rcx, qword [rbp + 0x220]
lea rdx, [rbp + 0x108]
mov r8d, dword [rbp + 0x21c]
call fcn.004f43b0
lea rcx, [rbp + 0x110]
mov rdx, qword [rbp + 0x270]
mov r8, qword [rbp + 0x108]
call fcn.0040fe00
mov rcx, qword [rbp + 0x220]
lea rdx, [rbp + 0x100]
mov r8d, dword [rbp + 0x21c]
call fcn.004f5e50
mov rcx, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x100]
lea r8, [rbp + 0x218]
call fcn.00574510
test al, al
jne 0x577f7a
xor rax, rax
jmp 0x577f7c
mov al, 1
cmp al, 1
jne 0x578a95
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x577fdb
lea rcx, [rbp + 0xf0]
mov edx, dword [rbp + 0x218]
mov r8d, 8
call fcn.0042cbc0
lea rcx, [rbp + 0xf8]
lea rdx, [0x005791d4]
mov r8, qword [rbp + 0xf0]
call fcn.0040fe00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xf8]
call fcn.00553120
nop
cmp dword [rbp + 0x218], 0
jne 0x578060
mov rcx, qword [rbp + 0x1f0]
call fcn.00576500
test al, al
je 0x578060
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep_1
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0x1f0]
call fcn.00576c80
mov rcx, qword [rbp + 0xe8]
call fcn.00567610
mov rbx, rax
mov rcx, qword [rbp + 0x1e0]
call fcn.00567610
cmp rbx, rax
jae 0x578060
mov dword [rbp + 0x218], 0x20150819
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578060
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579230]
call fcn.00553120
cmp dword [rbp + 0x218], 0
jne 0x57821c
mov rcx, qword [rbp + 0x1f0]
call fcn.005761b0
test al, al
je 0x57821c
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x5780a4
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x005792c4]
call fcn.00553120
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep_1
mov byte [rbp + 0x197], 0
mov rcx, qword [rbp + 0x1f0]
lea rdx, [rbp + 0x197]
call fcn.00576340
test al, al
jne 0x578103
mov dword [rbp + 0x218], 0x20151023
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x57821c
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579320]
call fcn.00553120
jmp 0x57821c
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578126
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579374]
call fcn.00553120
cmp byte [rbp + 0x197], 0
jne 0x57816a
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578152
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x005793c8]
call fcn.00553120
mov rcx, qword [rbp + 0x1f0]
mov rdx, qword [rbp + 0x1e0]
call fcn.00577650
jmp 0x57821c
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x57821c
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579444]
call fcn.00553120
jmp 0x57821c
lea rax, [0x005794fc]
cmp qword [rbp + 0x1f0], rax
jne 0x578235
mov byte [rbp + 0x18e], 1
jmp 0x578272
cmp qword [rbp + 0x1f0], 0
je 0x57824b
lea rax, [0x005794fc]
test rax, rax
jne 0x578254
mov byte [rbp + 0x18e], 0
jmp 0x578272
mov rcx, qword [rbp + 0x1f0]
lea rdx, [0x005794fc]
call fcn.0042bc30
test eax, eax
sete al
mov byte [rbp + 0x18e], al
nop
cmp byte [rbp + 0x18e], 0
je 0x57828e
cmp dword [rbp + 0x218], 0x17
sete al
mov byte [rbp + 0x18d], al
jmp 0x578295
mov byte [rbp + 0x18d], 0
cmp byte [rbp + 0x18d], 0
je 0x578456
lea rcx, [rbp + 0x1e8]
lea rdx, [0x00579534]
call fcn.0040ea60
lea rcx, [rbp + 0x1e8]
lea rdx, [0x00579590]
call fcn.0040ea60
lea rcx, [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1e8]
mov r8b, 1
call fcn.0056ec00
cmp qword [rbp + 0x1d8], 0
jne 0x5782fe
lea rcx, [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1e8]
xor r8, r8
call fcn.0056ec00
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x57833b
lea rcx, [rbp + 0xd0]
lea rdx, [0x005795ec]
mov r8, qword [rbp + 0x1d8]
call fcn.0040fe00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xd0]
call fcn.00553120
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578378
lea rcx, [rbp + 0xc8]
lea rdx, [0x00579644]
mov r8, qword [rbp + 0x1e0]
call fcn.0040fe00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xc8]
call fcn.00553120
mov rax, qword [rbp + 0x1d8]
cmp rax, qword [rbp + 0x1e0]
jne 0x578391
mov byte [rbp + 0x18c], 1
jmp 0x5783cc
cmp qword [rbp + 0x1d8], 0
je 0x5783a5
cmp qword [rbp + 0x1e0], 0
jne 0x5783ae
mov byte [rbp + 0x18c], 0
jmp 0x5783cc
mov rcx, qword [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1e0]
call fcn.0042bc30
test eax, eax
sete al
mov byte [rbp + 0x18c], al
nop
cmp byte [rbp + 0x18c], 0
je 0x578416
mov byte [rbp + 0x237], 1
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578acc
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x0057969c]
call fcn.00553120
jmp 0x578acc
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578acc
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x005796f8]
call fcn.00553120
jmp 0x578acc
cmp dword [rbp + 0x218], 0xbc2
je 0x578487
cmp dword [rbp + 0x218], 0x669
je 0x578487
cmp dword [rbp + 0x218], 0
je 0x578487
cmp dword [rbp + 0x218], 0x240006
jne 0x578892
mov byte [rbp + 0x237], 1
lea rax, [0x00579750]
cmp qword [rbp + 0x1f0], rax
jne 0x5784a7
mov byte [rbp + 0x18b], 1
jmp 0x5784e4
cmp qword [rbp + 0x1f0], 0
je 0x5784bd
lea rax, [0x00579750]
test rax, rax
jne 0x5784c6
mov byte [rbp + 0x18b], 0
jmp 0x5784e4
mov rcx, qword [rbp + 0x1f0]
lea rdx, [0x00579750]
call fcn.0042bc30
test eax, eax
sete al
mov byte [rbp + 0x18b], al
nop
cmp byte [rbp + 0x18b], 0
je 0x578500
cmp dword [rbp + 0x218], 0
sete al
mov byte [rbp + 0x18a], al
jmp 0x578507
mov byte [rbp + 0x18a], 0
cmp byte [rbp + 0x18a], 0
je 0x5786bd
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep_1
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578542
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579788]
call fcn.00553120
nop
mov ecx, pe_nt_image_headers64
call fcn.00408c40
mov qword [rbp + 0x1a8], rax
mov rcx, qword [rbp + 0x1a8]
mov edx, pe_nt_image_headers64
xor r8, r8
call fcn.0040a600
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1a0]
call fcn.0056eed0
cmp qword [rbp + 0x1a8], 0
je 0x57868b
lea rcx, [rbp + 0x198]
mov rdx, qword [rbp + 0x1a8]
call fcn.0040fa70
cmp qword [rbp + 0x198], 0
jne 0x578602
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x57869f
lea rcx, [rbp + 0xc0]
lea rdx, [0x005797e4]
mov r8, qword [rbp + 0x198]
call fcn.0040fe00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xc0]
call fcn.00553120
jmp 0x57869f
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x57863f
lea rcx, [rbp + 0xb8]
lea rdx, [0x005797e4]
mov r8, qword [rbp + 0x198]
call fcn.0040fe00
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xb8]
call fcn.00553120
mov rcx, qword [rbp + 0x198]
call fcn.00567610
mov rbx, rax
mov rcx, qword [rbp + 0x1e0]
call fcn.00567610
cmp rbx, rax
jb 0x578675
mov byte [rbp + 0x237], 1
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000
jmp 0x57869f
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
jmp 0x57869f
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
mov rcx, qword [rbp + 0x1a8]
call fcn.00408c70
jmp 0x578acc
mov eax, dword [rbp + 0x218]
and eax, 0xbc2
cmp eax, 0xbc2
jne 0x5786de
mov rax, qword [rbp + 0x278]
or dword [rax], 0x1000000
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000
lea rcx, [rbp + 0x98]
xor rdx, rdx
call fcn.00409350
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x98]
call fcn.0042da40
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0xa0]
call fcn.00438800
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbp + 0xa8]
call fcn.0042da40
lea rcx, [rbp + 0x210]
mov rdx, qword [rbp + 0xb0]
lea r8, [0x00579834]
call fcn.0040fe00
mov rcx, qword [0x00544348]
mov dl, 1
mov r8, qword [rbp + 0x210]
call fcn.00548da0
mov qword [rbp + 0x208], rax
lea rax, [0x0057986c]
cmp qword [rbp + 0x1f0], rax
jne 0x578782
mov byte [rbp + 0x189], 1
jmp 0x5787bf
cmp qword [rbp + 0x1f0], 0
je 0x578798
lea rax, [0x0057986c]
test rax, rax
jne 0x5787a1
mov byte [rbp + 0x189], 0
jmp 0x5787bf
mov rcx, qword [rbp + 0x1f0]
lea rdx, [0x0057986c]
call fcn.0042bc30
test eax, eax
sete al
mov byte [rbp + 0x189], al
nop
cmp byte [rbp + 0x189], 0
je 0x57885f
mov rcx, qword [rbp + 0x1e0]
call fcn.00567610
mov rbx, rax
lea rcx, [0x005798ac]
call fcn.00567610
cmp rbx, rax
jne 0x578816
mov rcx, qword [rbp + 0x208]
lea rdx, [0x005798d8]
lea r8, [0x005798f4]
mov r9d, 1
mov rax, qword [rbp + 0x208]
mov rbx, qword [rax]
call qword [rbx + 0x20]
mov rcx, qword [rbp + 0x1e0]
call fcn.00567610
mov rbx, rax
lea rcx, [0x00579914]
call fcn.00567610
cmp rbx, rax
jne 0x57885f
mov rcx, qword [rbp + 0x208]
lea rdx, [0x005798d8]
lea r8, [0x00579940]
mov r9d, 1
mov rax, qword [rbp + 0x208]
mov rbx, qword [rax]
call qword [rbx + 0x20]
nop
mov rcx, qword [rbp + 0x208]
mov rax, qword [rbp + 0x208]
mov rbx, qword [rax]
call qword [rbx + 0xc0]
jmp 0x578881
mov rcx, qword [rbp + 0x208]
call fcn.0040b010
jmp 0x578acc
cmp dword [rbp + 0x218], 0xfffffff7
jne 0x5789f1
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x5788c2
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579960]
call fcn.00553120
mov ecx, 0x7530
call sub.kernel32.dll_Sleep_1
mov rcx, qword [rbp + 0x220]
lea rdx, [rbp + 0x88]
mov r8d, dword [rbp + 0x21c]
call fcn.004f43b0
lea rcx, [rbp + 0x90]
mov rdx, qword [rbp + 0x270]
mov r8, qword [rbp + 0x88]
call fcn.0040fe00
mov rcx, qword [rbp + 0x220]
lea rdx, [rbp + 0x80]
mov r8d, dword [rbp + 0x21c]
call fcn.004f5e50
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x80]
lea r8, [rbp + 0x218]
call fcn.00574510
test al, al
je 0x578acc
cmp dword [rbp + 0x218], 0xbc2
je 0x57896a
cmp dword [rbp + 0x218], 0x669
je 0x57896a
cmp dword [rbp + 0x218], 0
je 0x57896a
cmp dword [rbp + 0x218], 0x240006
jne 0x5789a4
mov byte [rbp + 0x237], 1
mov eax, dword [rbp + 0x218]
and eax, 0xbc2
cmp eax, 0xbc2
jne 0x578992
mov rax, qword [rbp + 0x278]
or dword [rax], 0x1000000
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000
jmp 0x578acc
cmp dword [rbp + 0x218], 0xfffffff7
jne 0x578acc
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578acc
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x005799c0]
call fcn.00553120
jmp 0x578acc
mov ecx, dword [rbp + 0x218]
call fcn.00575d70
test al, al
je 0x578a7f
mov rax, qword [rbp + 0x278]
or dword [rax], 0x2000000
lea rcx, [rbp + 0x78]
lea rdx, [0x005c0f5c]
mov r8d, 0x105
call fcn.0040faa0
lea rcx, [rbp + 0x1f8]
mov rdx, qword [rbp + 0x78]
lea r8, [0x00579a3c]
call fcn.0040fe00
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x1f0]
xor r8, r8
call fcn.0040f510
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
call fcn.00554c10
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x70]
call fcn.0040faf0
mov rcx, qword [rbp + 0x1f8]
mov rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x1e0]
call fcn.00576020
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
jmp 0x578acc
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578ab8
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579a8c]
call fcn.00553120
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
lea rax, [0x00579ad8]
cmp rax, qword [rbp + 0x1f0]
jne 0x578ae5
mov byte [rbp + 0x188], 1
jmp 0x578b22
lea rax, [0x00579ad8]
test rax, rax
je 0x578afb
cmp qword [rbp + 0x1f0], 0
jne 0x578b04
mov byte [rbp + 0x188], 0
jmp 0x578b22
lea rcx, [0x00579ad8]
mov rdx, qword [rbp + 0x1f0]
call fcn.0042bc30
test eax, eax
sete al
mov byte [rbp + 0x188], al
nop
cmp byte [rbp + 0x188], 0
je 0x578b51
cmp dword [rbp + 0x218], 0x669
je 0x578b44
cmp dword [rbp + 0x218], 0xbc2
jne 0x578b51
mov rax, qword [rbp + 0x278]
or dword [rax], 0x1000000
nop
cmp byte [rbp + 0x1b6], 0
jne 0x578bca
call fcn.0056e920
mov byte [rbp + 0x1b6], al
cmp byte [rbp + 0x1b6], 0
je 0x578bca
call fcn.0056ea80
test al, al
je 0x578b9d
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578bca
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579b14]
call fcn.00553120
jmp 0x578bca
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578bca
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
lea rdx, [0x00579b68]
call fcn.00553120
jmp 0x578bca
cmp byte [rbp + 0x207], 0
je 0x578c59
nop
call fcn.00575b40
jmp 0x578c59
add dword [rbp + 0x21c], 1
mov eax, dword [rbp + 0x3c]
cmp dword [rbp + 0x21c], eax
jne 0x577db6
nop
mov rcx, qword [rbp + 0x228]
call fcn.0040b010
mov rcx, qword [rbp + 0x220]
call fcn.0040b010
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0x270]
lea r8, [0x00579054]
call fcn.0040fe00
mov rcx, qword [rbp + 0x48]
call fcn.0040f9d0
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
jmp 0x578d0f
mov rax, qword [0x005b6b30]
cmp qword [rax], 0
je 0x578cfb
lea rcx, [rbp + 0x40]
mov edx, 3
lea r8, [0x00579c10]
mov r9, qword [rbp + 0x270]
lea rax, [0x00579c34]
mov qword [rsp + 0x20], rax
call fcn.0040ff20
mov rax, qword [0x005b6b30]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x40]
call fcn.00553120
mov byte [rbp + 0x237], 0
mov rax, qword [rbp + 0x278]
or dword [rax], 0x10000100
nop
lea rcx, [rbp + 0x40]
mov edx, 5
call fcn.0040e490
lea rcx, [rbp + 0x68]
mov edx, 2
call fcn.0040e4c0
lea rcx, [rbp + 0x78]
mov edx, 0x20
call fcn.0040e490
lea rcx, [rbp + 0x198]
call fcn.0040e3b0
lea rcx, [rbp + 0x1c8]
call fcn.0040e3b0
lea rcx, [rbp + 0x1d8]
mov edx, 5
call fcn.0040e490
lea rcx, [rbp + 0x210]
call fcn.0040e3b0
lea rcx, [rbp + 0x270]
call fcn.0040e3b0
lea rcx, [rbp + 0x280]
call fcn.0040e3b0
movzx rax, byte [rbp + 0x237]
lea rsp, [rbp + 0x258]
pop rbx
pop rbp
ret