Function at 0x568950
Capabilities:
Delete file
Write file on windows

Disassembly:
push rbp
sub rsp, 0xf0
mov rbp, rsp
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x68], rbp
mov qword [rbp + 0x100], rcx
mov qword [rbp + 0x108], rdx
lea rcx, [rbp + 0x100]
call fcn.0040e7a0
nop
mov eax, dword [rbp + 0xe8]
sub eax, 0x2b5
mov dword [rbp + 0xec], eax
mov byte [rbp + 0xe7], 0
nop
mov eax, 0x191
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x1b6
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0xec]
add eax, 0x1fa
mov dword [rbp + 0x74], eax
add dword [rbp + 0xec], 0x21f
mov eax, dword [rbp + 0xe8]
add eax, 0x243
mov dword [rbp + 0xec], eax
lea rcx, [rbp + 0x58]
mov rdx, qword [rbp + 0x100]
call fcn.0040fc50
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x58]
call fcn.0042cb30
lea rcx, [rbp + 0x50]
mov rdx, qword [rbp + 0x60]
call fcn.0040fc80
mov rcx, qword [rbp + 0x50]
call fcn.00567fa0
mov eax, dword [rbp + 0xec]
add eax, 0x1e5
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0xc8]
lea rdx, [rbp + 0xa0]
call fcn.00565a70
test al, al
je 0x569263
mov eax, dword [rbp + 0xec]
imul eax, eax, 0x1c0
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0xec]
add eax, 0x225
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0xe8]
sub eax, 0x269
mov dword [rbp + 0xec], eax
mov eax, dword [rbp + 0xe8]
sub eax, 0x28d
mov dword [rbp + 0xec], eax
mov eax, dword [rbp + 0x84]
imul eax, eax, 0x2d2
mov dword [rbp + 0xe8], eax
mov eax, 0x168
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov eax, 0x18c
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov eax, 0x190
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x195
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x199
mov dword [rbp + 0x78], eax
mov rcx, qword [rbp + 0x100]
call fcn.0040f580
lea rcx, [rbp + 0x48]
mov rdx, rax
call fcn.0040fba0
mov rcx, qword [rbp + 0x48]
mov dl, 1
call fcn.0042ca50
test al, al
je 0x568b2a
mov rcx, qword [rbp + 0x100]
call fcn.0040f580
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
mov eax, dword [rbp + 0xec]
add eax, 0x210
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0x88]
call fcn.0040e5d0
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1d58]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x568b7e
mov eax, dword [rbp + 0x80]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1cb8]
call fcn.0040fe40
lea rcx, [0x00569328]
lea rdx, [0x00569338]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x5d
jge 0x568bbf
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
lea rcx, [0x00569350]
lea rdx, [0x00569338]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x63
jge 0x568c01
mov eax, dword [rbp + 0x80]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
lea rcx, [rbp + 0x88]
lea rdx, [0x00569374]
call fcn.0040fe40
lea rcx, [0x00569384]
lea rdx, [0x00569338]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x5c
jge 0x568c68
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
sub dword [rbp + 0xe8], 0x2bb
lea rcx, [rbp + 0x88]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x84]
call fcn.00562fa0
mov eax, dword [rbp + 0x84]
imul eax, eax, 0x2c8
mov dword [rbp + 0xe8], eax
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0xe8]
imul eax, eax, 0x298
mov dword [rbp + 0xe8], eax
mov eax, dword [rbp + 0x78]
add eax, dword [rbp + 0xec]
cmp eax, dword [rbp + 0xe8]
jle 0x568d09
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x1a0
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x568d28
mov eax, dword [rbp + 0x78]
add eax, 0x87
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x7c]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x568cda
nop
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0xec]
cmp eax, dword [rbp + 0xe8]
jle 0x568d76
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x1b9
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
test eax, eax
jle 0x568d8c
mov eax, dword [rbp + 0x78]
add eax, 0x60
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x78]
add eax, 0x24
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 2
jne 0x568d59
nop
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0xe8]
cmp eax, dword [rbp + 0xe8]
jle 0x568ddc
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x1d7
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x568df8
mov eax, dword [rbp + 0x78]
add eax, 0x7e
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x78]
add eax, 0x22
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x568dbf
nop
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x568e65
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
lea r9, [rbp + 0x78]
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.005366c0
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0xe8]
sub eax, 0x29d
mov dword [rbp + 0xec], eax
mov eax, dword [rbp + 0x78]
add eax, dword [rbp + 0xec]
cmp eax, dword [rbp + 0xe8]
jle 0x568e9e
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x185
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x568eba
mov eax, dword [rbp + 0x78]
add eax, 0x6c
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x568e6f
nop
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x568f1b
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
lea r9, [rbp + 0x78]
lea rax, [rbp + 0x74]
mov qword [rsp + 0x20], rax
call fcn.00539320
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0xe8]
cmp eax, dword [rbp + 0x84]
jle 0x568f45
mov eax, dword [rbp + 0xec]
imul eax, eax, 0x1e7
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x568f64
mov eax, dword [rbp + 0x78]
add eax, 0x8e
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
add dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x568f25
nop
mov eax, 0x58
sub eax, dword [rbp + 0x80]
cmp eax, 0xf0
jge 0x568fc1
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x84]
call fcn.00562fa0
mov rcx, qword [rbp + 0x100]
call fcn.0040f580
mov rcx, rax
mov edx, 0xc0000000
mov r8d, 3
lea r9, [rbp + 0xc8]
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x30], 0
call sub.kernel32.dll_CreateFileW
mov dword [rbp + 0x9c], eax
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x9c]
cmp rax, 0xffffffffffffffff
je 0x569263
cmp dword [rbp + 0x94], 0
jne 0x569263
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0xe8]
sub eax, 0x2be
mov dword [rbp + 0xec], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0xec]
cmp eax, dword [rbp + 0xe8]
jle 0x569069
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x1a5
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x569088
mov eax, dword [rbp + 0x78]
add eax, 0x8d
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x56903a
nop
mov dword [rbp + 0x84], 0
cmp dword [rbp + 0x84], 1
jge 0x569120
add dword [rbp + 0x84], 1
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0xec]
cmp eax, dword [rbp + 0xe8]
jle 0x5690e9
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x19f
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
add ecx, dword [rbp + 0x74]
cmp eax, ecx
jge 0x569105
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x80], eax
cmp dword [rbp + 0x84], 1
jl 0x5690c5
nop
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0xec]
cmp eax, dword [rbp + 0xe8]
jle 0x569148
mov eax, dword [rbp + 0x74]
imul eax, eax, 0x1b8
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
test eax, eax
jle 0x56915b
mov eax, dword [rbp + 0x7c]
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x7c]
sub dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
imul eax, eax, 0x30b
mov dword [rbp + 0xe8], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x56912b
nop
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x84]
lea r8, [rbp + 0x80]
lea r9, [rbp + 0x7c]
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.00563f10
mov rcx, qword [rbp + 0x108]
call fcn.0053d680
mov ecx, dword [rbp + 0x9c]
mov rdx, qword [rbp + 0x108]
mov rdx, qword [rdx + 8]
mov r8d, eax
lea r9, [rbp + 0x98]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_WriteFile_1
test eax, eax
setne al
mov byte [rbp + 0xe7], al
mov eax, dword [rbp + 0xec]
add eax, 0x207
mov dword [rbp + 0x74], eax
add dword [rbp + 0x78], 0x123
mov eax, 0x148
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov eax, 0x18c
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov eax, 0x170
sub eax, dword [rbp + 0x74]
mov dword [rbp + 0x78], eax
mov ecx, dword [rbp + 0x9c]
call sub.kernel32.dll_CloseHandle_1
jmp 0x569263
sub dword [rbp + 0xe8], 0x2ca
nop
lea rcx, [rbp + 0x48]
call fcn.0040e5d0
lea rcx, [rbp + 0x50]
call fcn.0040e670
lea rcx, [rbp + 0x58]
mov edx, 2
call fcn.0040e6b0
lea rcx, [rbp + 0x88]
call fcn.0040e5d0
lea rcx, [rbp + 0x100]
call fcn.0040e670
movzx rax, byte [rbp + 0xe7]
lea rsp, [rbp + 0xf0]
pop rbp
ret