Function at 0x140056ab0
Capabilities:
Authenticate hmac
Create directory
Create thread
Delete file
Delete registry value
Encode data using xor
Enumerate files on windows
Execute command
Hide graphical window
Query or enumerate registry value
Read file on windows
Self delete
Set console window title
Set file attributes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
mov eax, 0x19f0
call fcn.1401dc4c0
sub rsp, rax
movaps xmmword [rsp + 0x19e0], xmm6
movaps xmmword [rsp + 0x19d0], xmm7
movaps xmmword [rsp + 0x19c0], xmm8
movaps xmmword [rsp + 0x19b0], xmm9
movaps xmmword [rsp + 0x19a0], xmm10
movaps xmmword [rsp + 0x1990], xmm11
movaps xmmword [rsp + 0x1980], xmm12
mov rax, qword [0x1407ddd00]
xor rax, rsp
mov qword [rsp + 0x1978], rax
xor esi, esi
mov dword [rsp + 0x2c0], esi
call fcn.140056060
lea rcx, [0x1407e5d90]
call fcn.14007b560
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea ecx, [rsi + 8]
call fcn.1401dc044
lea rcx, [0x14004fa60]
mov qword [rax], rcx
mov qword [rsp + 0x2f0], rax
mov ecx, 0x100
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x2c0], ecx
lea rcx, [rsp + 0x2d8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x14006ad30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x2d0], rax
test rax, rax
je 0x14005c9e1
cmp dword [rsp + 0x2d8], esi
je 0x14005c9d5
movaps xmm0, xmmword [rsp + 0x2d0]
movdqa xmmword [rsp + 0xe0], xmm0
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c9d5
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x2d0], xmm0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1404e633c]
lea rcx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1404e6348]
lea rcx, str.conin_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1404e6354]
lea rcx, str.conout_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
lea ecx, [rsi + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1404e6354]
lea rcx, str.conout_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
movups xmm0, xmmword [0x1404e84e8]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [0x1404e84f8]
movups xmmword [rsp + 0x150], xmm1
mov eax, dword [0x1404e8508]
mov dword [rsp + 0x160], eax
movzx eax, word [0x1404e850c]
mov word [rsp + 0x164], ax
mov r8d, esi
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp r15d, 2
jl 0x140056e15
movdqa xmm5, xmmword [0x1404e8a50]
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x140]
mov edx, dword [rsp + 0x2d0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140056d10
cmp r8d, 0x26
jge 0x140056e60
movsxd rax, r8d
lea r9, [rsp + 0x140]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x140056e30
mov eax, dword [str.DXWM:]
mov dword [rsp + 0x230], eax
movzx eax, byte [0x1404e7d54]
mov byte [rsp + 0x230], WSAStartup
xor byte [rsp + 0x231], 0x37
xor byte [rsp + 0x232], 0x38
xor byte [rsp + 0x233], 0x39
xor al, 0x3a
mov byte [rsp + 0x234], al
movups xmm0, xmmword [0x1404e8658]
movups xmmword [rsp + 0x188], xmm0
movups xmm1, xmmword [0x1404e8668]
movups xmmword [rsp + 0x198], xmm1
movzx eax, byte [0x1404e8678]
mov byte [rsp + 0x1a8], al
mov r8d, esi
cmp r15d, 2
jl 0x140057015
movdqa xmm5, xmmword [0x1404e8a50]
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x188]
mov edx, dword [rsp + 0x2d0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140056f10
cmp r8d, 0x21
jge 0x140057060
movsxd rax, r8d
lea r9, [rsp + 0x188]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x140057030
mov rax, qword [str.DVQUMZEunknown_error]
mov qword [rsp + 0x238], rax
cmp byte [0x1404e857f], 0
je 0x1400571d0
cmp r15d, 2
jl 0x14005718e
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm2, xmmword [0x1404e8a50]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1404e8a70]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
mov eax, dword [0x1404e8c10]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x238]
xorps xmm2, xmm1
movd dword [rsp + 0x238], xmm2
movdqa xmm3, xmmword [0x1404e8a60]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1404e8a70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x23c]
xorps xmm2, xmm1
movd dword [rsp + 0x23c], xmm2
jmp 0x1400571d0
lea r9, [rsp + 0x238]
mov r8d, esi
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400571a0
movups xmm0, xmmword [str.ertyo]
movups xmmword [rsp + 0x4b8], xmm0
movups xmm1, xmmword [0x1404e8628]
movups xmmword [rsp + 0x4c8], xmm1
movsd xmm0, qword [0x1404e8638]
movsd qword [rsp + 0x4d8], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x2f8], xmm1
mov qword [rsp + 0x308], rsi
mov qword [rsp + 0x310], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2f8], 0
lea rcx, [rsp + 0x2f8]
call fcn.140001a30
mov rdx, qword [rsp + 0x310]
cmp rdx, 0xf
jbe 0x140057279
inc rdx
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057274
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057274
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0x308], rsi
mov qword [rsp + 0x310], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2f8], 0
mov qword [rsp + 0x2d8], rsi
mov ecx, 0x60
call fcn.1401dc044
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x2d0], rax
lea rcx, [rsp + 0x2d0]
call fcn.140001a30
mov r8, qword [rsp + 0x2d0]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x2d0]
call fcn.140063ab0
mov edx, 0x60
mov rcx, qword [rsp + 0x2d0]
call fcn.1401dbfcc
lea rcx, [0x1404df8b6]
call fcn.1400d35b0
mov rbx, rax
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x110], rsi
lea rax, [rsp + 0x188]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140057340
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xf8]
call fcn.140062980
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0xb0], rsi
lea rax, [rsp + 0x230]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140057390
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x98]
call fcn.140062980
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x358], xmm0
mov qword [rsp + 0x368], rsi
mov qword [rsp + 0x370], rsi
lea rax, [rsp + 0x140]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400573e0
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x358]
call fcn.140062980
nop
lea r9, [rsp + 0xf8]
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x358]
mov rcx, rbx
call rdi
mov rbx, rax
mov rdx, qword [rsp + 0x370]
cmp rdx, 0xf
jbe 0x140057466
inc rdx
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057461
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057461
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0x368], rsi
mov qword [rsp + 0x370], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x358], 0
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x1400574c8
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400574c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400574c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x98], 0
mov rdx, qword [rsp + 0x110]
cmp rdx, 0xf
jbe 0x14005752a
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057525
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057525
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xf8], 0
mov rax, qword [rbx]
mov rdi, qword [rax + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rsi
lea rax, [rsp + 0x238]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140057580
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x338]
call fcn.140062980
nop
lea rdx, [rsp + 0x338]
mov rcx, rbx
call rdi
nop
mov rdx, qword [rsp + 0x350]
cmp rdx, 0xf
jbe 0x1400575f4
inc rdx
mov rcx, qword [rsp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400575ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400575ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x88]
test al, al
je 0x1400578c1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
mov rsi, rax
mov rax, qword [rax]
mov rdi, qword [rax + 0x30]
xor r13d, r13d
cmp byte [rsp + 0x4df], r13b
je 0x1400577b0
cmp r15d, 2
jl 0x140057771
movdqa xmm5, xmmword [0x1404e8a50]
mov edx, r13d
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x4b8]
mov r8d, dword [rsp + 0x2d0]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x140057672
jmp 0x1400577b0
lea r9, [rsp + 0x4b8]
mov r8d, r13d
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x140057780
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f8], xmm0
mov qword [rsp + 0x308], r13
mov qword [rsp + 0x310], r13
lea rax, [rsp + 0x4b8]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400577e0
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x2f8]
call fcn.140062980
nop
lea rdx, [rsp + 0x2f8]
mov rcx, rsi
call rdi
mov rdi, rax
mov rdx, qword [rsp + 0x310]
cmp rdx, 0xf
jbe 0x140057856
inc rdx
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057851
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057851
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0x308], r13
mov qword [rsp + 0x310], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2f8], 0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x170]
test al, al
je 0x1400578d1
lea rdx, [0x1404e5944]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rdi]
mov edx, 1
mov rcx, rdi
call qword [rax]
mov rax, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [rax]
xor esi, esi
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
jmp 0x1400578f1
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor esi, esi
mov ecx, dword [rsp + 0x2c0]
mov dword [rsp + 0x60], ecx
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1407e5d19], 0
jne 0x140058b79
lea r14, str.C:MTX8adv42n8y79tuq62.json
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xc8], Ordinal_32
call fcn.1401dcbf0
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0xe0], xmm0
lea r8, [rsp + 0xe0]
mov edx, eax
lea rcx, [rsp + 0x2a0]
call fcn.140050940
mov ecx, 0x6100
mov dword [rsp + 0x60], ecx
lea rcx, [rsp + 0x2a0]
call fcn.140051c60
movzx ebx, al
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 7
jbe 0x1400579aa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400579a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400579a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
test bl, bl
je 0x140057f4a
lea rcx, str.MODE_CON_COLS55_LINES12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov r9d, 2
mov r8b, 0xc3
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movups xmm0, xmmword [str.u__XTN]
movups xmmword [rsp + 0x98], xmm0
movzx eax, byte [0x1404e84e0]
mov byte [rsp + 0xa8], al
mov r8d, esi
cmp r15d, 2
jl 0x140057b55
movdqa xmm5, xmmword [0x1404e8a50]
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x98]
mov edx, dword [rsp + 0x2d0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140057a50
cmp r8d, 0x11
jge 0x140057ba0
movsxd rax, r8d
lea r9, [rsp + 0x98]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140057b70
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f8], xmm0
mov qword [rsp + 0x308], rsi
mov qword [rsp + 0x310], rsi
lea rax, [rsp + 0x98]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140057bd0
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x2f8]
call fcn.140062980
nop
lea rcx, [rsp + 0x2f8]
cmp qword [rsp + 0x310], 0xf
cmova rcx, qword [rsp + 0x2f8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rax, [rsp + 0x338]
mov qword [rsp + 0x2f0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rsi
mov r8d, 3
lea rdx, [0x1404e639c]
lea rcx, [rsp + 0x338]
call fcn.140062980
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
mov qword [rsp + 0x388], rsi
mov qword [rsp + 0x390], rsi
mov r8d, Ordinal_32
mov rdx, r14
lea rcx, [rsp + 0x378]
call fcn.140062980
nop
lea r8, [rsp + 0x338]
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0x2a0]
call fcn.140052d40
nop
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x3b8]
call fcn.14005e170
mov rdx, rax
lea rcx, [0x1407e5d90]
call fcn.14007ce90
cmp byte [0x1407e5fa0], 0
jne 0x140057f0c
lea rcx, [rsp + 0x398]
call fcn.140060fe0
nop
lea rcx, [rsp + 0x398]
call fcn.140052070
nop
lea rcx, [rsp + 0x398]
call fcn.140050e90
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x2d0]
call fcn.140050730
movzx edx, byte [rax + 0xa]
test dl, dl
je 0x140057d5d
xor byte [rax], 0x36
xor byte [rax + 1], 0x37
xor byte [rax + 2], 0x38
xor byte [rax + 3], 0x39
xor byte [rax + 4], 0x3a
xor byte [rax + 5], 0x3b
xor byte [rax + 6], 0x3c
xor byte [rax + 7], 0x3d
xor byte [rax + 8], 0x3e
xor byte [rax + 9], 0x3f
xor dl, 0x40
mov byte [rax + 0xa], dl
mov rdx, rax
call fcn.1400607d0
mov rcx, rax
lea rdx, [0x1407e5fa8]
call fcn.1400609a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x2d0]
call fcn.14005ca00
mov r9, rax
cmp byte [rax + 0xd], 0
je 0x140057edd
cmp r15d, 2
jl 0x140057e9c
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm2, xmmword [0x1404e8a50]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1404e8a70]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
mov eax, dword [0x1404e8c10]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9]
xorps xmm2, xmm0
movd dword [r9], xmm2
movdqa xmm3, xmmword [0x1404e8a60]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1404e8a70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movd dword [r9 + 4], xmm2
mov esi, 8
movsxd r8, esi
add r8, r9
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, sil
sub al, dl
add al, 0x36
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 0xe
jl 0x140057eb0
mov rdx, r9
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x1407e5d90]
call fcn.140078280
test al, al
je 0x140057f23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov byte [0x1407e5d19], 1
lea rcx, [rsp + 0x2a0]
call fcn.140053930
nop
lea rcx, [rsp + 0x2f8]
call fcn.140053930
jmp 0x140058b6c
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f8], xmm0
mov qword [rsp + 0x308], rsi
mov qword [rsp + 0x310], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2f8], 0
lea rcx, str.MODE_CON_COLS55_LINES12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov r9d, 2
mov r8b, 0xc3
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movups xmm0, xmmword [str.u__XTN]
movups xmmword [rsp + 0x98], xmm0
movzx eax, byte [0x1404e84e0]
mov byte [rsp + 0xa8], al
mov r8d, esi
cmp r15d, 2
jl 0x140058105
movdqa xmm5, xmmword [0x1404e8a50]
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x98]
mov edx, dword [rsp + 0x2d0]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140058000
cmp r8d, 0x11
jge 0x140058150
movsxd rax, r8d
lea r9, [rsp + 0x98]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140058120
xorps xmm0, xmm0
movups xmmword [rsp + 0x358], xmm0
mov qword [rsp + 0x368], rsi
mov qword [rsp + 0x370], rsi
lea rax, [rsp + 0x98]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140058180
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x358]
call fcn.140062980
nop
lea rcx, [rsp + 0x358]
cmp qword [rsp + 0x370], 0xf
cmova rcx, qword [rsp + 0x358]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [0x140050760]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r10, rax
movups xmm0, xmmword [0x1404e7d58]
movups xmmword [rsp + 0x98], xmm0
movsd xmm0, qword [0x1404e7d68]
movsd qword [rsp + 0xa8], xmm0
movzx ecx, word [0x1404e7d70]
mov word [rsp + 0xb0], cx
movzx ecx, byte [0x1404e7d72]
mov byte [rsp + 0xb2], cl
mov r8d, esi
cmp r15d, 2
jl 0x140058375
movdqa xmm5, xmmword [0x1404e8a50]
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x98]
mov edx, dword [rsp + 0x2d0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140058270
cmp r8d, 0x1b
jge 0x1400583c0
movsxd rax, r8d
lea r9, [rsp + 0x98]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x140058390
lea rdx, [rsp + 0x98]
mov rcx, r10
call fcn.1400607d0
lea rdx, [rsp + 0x2f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140061020
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x3b8]
call fcn.14005e170
mov rbx, rax
mov qword [rsp + 0x2f0], rax
lea rcx, [0x1407e5d90]
call fcn.14007b560
lea rcx, [0x1407e5d90]
call fcn.140078280
test al, al
je 0x140058427
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.14005e170
mov rdx, rax
lea rcx, [0x1407e5d90]
call fcn.14007ce90
cmp byte [0x1407e5fa0], 0
jne 0x1400584c3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x2d0]
call fcn.140050730
movzx edx, byte [rax + 0xa]
test dl, dl
je 0x140058498
xor byte [rax], 0x36
xor byte [rax + 1], 0x37
xor byte [rax + 2], 0x38
xor byte [rax + 3], 0x39
xor byte [rax + 4], 0x3a
xor byte [rax + 5], 0x3b
xor byte [rax + 6], 0x3c
xor byte [rax + 7], 0x3d
xor byte [rax + 8], 0x3e
xor byte [rax + 9], 0x3f
xor dl, 0x40
mov byte [rax + 0xa], dl
mov rdx, rax
call fcn.1400607d0
mov rcx, rax
lea rdx, [0x1407e5fa8]
call fcn.1400609a0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400584fd
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400584f8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400585b2
mov rcx, r8
call fcn.1401dbfcc
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov byte [0x1407e5d19], 1
lea rdi, str.C:MTX
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xc8], 6
call fcn.1401dcbf0
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0xe0], xmm0
lea r8, [rsp + 0xe0]
mov edx, eax
lea rcx, [rsp + 0x2a0]
call fcn.140050940
nop
lea rcx, [rsp + 0x2a0]
call fcn.140051c60
movzx ebx, al
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 7
jbe 0x1400585be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400585b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400585b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
test bl, bl
jne 0x140058688
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x14005860e
mov edx, 2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x140058688
lea rdx, [0x1404e63a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rsp + 0x358]
call fcn.140053930
nop
lea rcx, [rsp + 0x2f8]
call fcn.140053930
mov eax, ebx
mov rcx, qword [rsp + 0x1978]
xor rcx, rsp
call fcn.1401db8e0
lea r11, [rsp + 0x19f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rax, [rsp + 0x338]
mov qword [rsp + 0x2f0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rsi
xor r8d, r8d
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x338]
call fcn.140062980
nop
lea rax, [rsp + 0x378]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
mov qword [rsp + 0x388], rsi
mov qword [rsp + 0x390], rsi
xor r8d, r8d
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x378]
call fcn.140062980
nop
lea rax, [rsp + 0x3b8]
mov qword [rsp + 0xd0], rax
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x3b8]
call fcn.14005e170
mov rbx, rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xd8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0xb0], rsi
mov r8d, 3
lea rdx, [0x1404e639c]
lea rcx, [rsp + 0x98]
call fcn.140062980
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x110], rsi
mov r8d, Ordinal_32
mov rdx, r14
lea rcx, [rsp + 0xf8]
call fcn.140062980
nop
lea rax, [rsp + 0x338]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x378]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xf8]
call fcn.140053290
lea r13, str.C:MTX_s63g2u5j76wv2ag269.json
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], reloc.WLDAP32.dll_Ordinal_30
call fcn.1401dcbf0
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0xe0], xmm0
lea r8, [rsp + 0xe0]
mov edx, eax
lea rcx, [rsp + 0x2a0]
call fcn.140050940
nop
lea rcx, [rsp + 0x2a0]
call fcn.140051c60
movzx ebx, al
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 7
jbe 0x140058881
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005887c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005887c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
test bl, bl
jne 0x14005894b
lea rax, [rsp + 0x3b8]
mov qword [rsp + 0x2f0], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x3b8]
call fcn.140053990
mov r14, rax
lea rax, [rsp + 0x398]
mov qword [rsp + 0x70], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x398]
call fcn.140053990
mov rsi, rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0xd0], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x2a0]
call fcn.140053990
mov rdi, rax
lea rax, [rsp + 0x318]
mov qword [rsp + 0xd8], rax
lea rdx, str.path
lea rcx, [rsp + 0x318]
call fcn.140053990
mov rbx, rax
mov rdx, r13
lea rcx, [rsp + 0x338]
call fcn.140053990
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140053290
lea r12, str.C:MTX6b21489bt894nt5b8.json
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0xc8], Ordinal_32
call fcn.1401dcbf0
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0xe0], xmm0
lea r8, [rsp + 0xe0]
mov edx, eax
lea rcx, [rsp + 0x2a0]
call fcn.140050940
mov ecx, 0x1fe100
mov dword [rsp + 0x60], ecx
lea rcx, [rsp + 0x2a0]
call fcn.140051c60
movzx ebx, al
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 7
jbe 0x1400589f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400589f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400589f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
test bl, bl
jne 0x140058ac2
lea rax, [rsp + 0x3b8]
mov qword [rsp + 0x2f0], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x3b8]
call fcn.140053990
mov r14, rax
lea rax, [rsp + 0x398]
mov qword [rsp + 0x70], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x398]
call fcn.140053990
mov rsi, rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0xd0], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x2a0]
call fcn.140053990
mov rdi, rax
lea rax, [rsp + 0x318]
mov qword [rsp + 0xd8], rax
lea rdx, str.name
lea rcx, [rsp + 0x318]
call fcn.140053990
mov rbx, rax
mov rdx, r12
lea rcx, [rsp + 0x338]
call fcn.140053990
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140053290
nop
mov rdx, qword [rsp + 0x370]
cmp rdx, 0xf
jbe 0x140058b08
inc rdx
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058b03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058b03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
xor esi, esi
mov qword [rsp + 0x368], rsi
mov qword [rsp + 0x370], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x358], sil
mov rdx, qword [rsp + 0x310]
cmp rdx, 0xf
jbe 0x140058b6c
inc rdx
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058b67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058b67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
cmp byte [0x1407e5d19], 0
je 0x140058633
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x250], 0x50
mov dword [rsp + 0x254], 0x40
lea rax, [0x14005ca30]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x268], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x270], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x280], xmm1
lea rbx, str.Service_Host:_Microsoft_Account_x64
mov qword [rsp + 0x290], rbx
mov qword [rsp + 0x298], rsi
lea rcx, [rsp + 0x250]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], rsi
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [rsp + 0x290]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rax
mov qword [0x1407e5d80], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x1407e5d78], rax
test rax, rax
je 0x14005c980
mov qword [0x1407e5d30], rsi
mov qword [0x1407e5d3c], rsi
mov dword [0x1407e5d44], esi
mov qword [0x1407e5d4c], rsi
mov dword [0x1407e5d54], esi
mov qword [0x1407e5d64], rsi
mov dword [0x1407e5d58], 1
mov dword [0x1407e5d48], 1
mov dword [0x1407e5d38], esi
mov dword [0x1407e5d5c], 1
mov dword [0x1407e5d60], 0x50
mov dword [0x1407e5d6c], 1
mov rax, qword [rax]
lea rdx, [0x1407e5d70]
mov qword [rsp + 0x30], rdx
lea rdx, [0x1407e5d30]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
js 0x14005c979
xor edx, edx
mov rcx, qword [0x1407e5d80]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1407e5d80]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov r13, qword [0x1407e5d20]
mov qword [rsp + 0x2f0], r13
test r13, r13
je 0x140058d4e
inc dword [r13 + 0xfc]
mov rdx, qword [0x1407e5d10]
mov ecx, 0x5ff8
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x65]
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], rax
test rax, rax
je 0x140058d8a
xor edx, edx
mov rcx, rax
call fcn.140001e40
jmp 0x140058d8d
mov rax, rsi
mov qword [0x1407e5d20], rax
call fcn.140006540
test r13, r13
je 0x140058da7
mov qword [0x1407e5d20], r13
jmp 0x140058db6
mov r13, qword [0x1407e5d20]
mov qword [rsp + 0x2f0], r13
mov r12, qword [r13 + 0x58]
lea rdx, [0x1404e0598]
lea rcx, str.C:WindowsFonts_segoeui.ttf
call fcn.140003980
mov rbx, rax
test rax, rax
je 0x1400590fb
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov edi, eax
cmp eax, 0xffffffff
je 0x1400590f2
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x1400590f2
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
movsxd r14, eax
cmp r14d, 0xffffffff
je 0x1400590f2
xor r8d, r8d
mov edx, edi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x1400590f2
cmp r14, 0xffffffffffffffff
je 0x1400590f2
mov rax, qword [0x1407e5d20]
test rax, rax
je 0x140058e4c
inc dword [rax + 0xfc]
mov rdx, qword [0x1407e5d10]
mov rcx, r14
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rsi, rax
test rax, rax
jne 0x140058e71
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x1400590fb
mov r9, rbx
mov r8, r14
mov edx, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rcx, rbx
cmp rax, r14
je 0x140058ebb
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rax, qword [0x1407e5d20]
test rax, rax
je 0x140058ea5
dec dword [rax + 0xfc]
mov rdx, qword [0x1407e5d10]
mov rcx, rsi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
xor esi, esi
jmp 0x1400590fb
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rsp + 0x1870], xmm1
movups xmmword [rsp + 0x1880], xmm1
movups xmmword [rsp + 0x18b0], xmm1
movups xmmword [rsp + 0x18c0], xmm1
mov qword [rsp + 0x18f0], rax
mov byte [rsp + 0x187c], 1
mov dword [rsp + 0x1888], 3
mov dword [rsp + 0x188c], 1
mov dword [rsp + 0x18b4], 0x7f7fffff
movss xmm10, dword [0x1404e88ac]
mov dword [rsp + 0x18c0], 0x3f800000
mov eax, 0xffff
mov word [rsp + 0x18c4], ax
movups xmm3, xmmword [rsp + 0x1870]
movups xmmword [rsp + 0x5f0], xmm3
movups xmm4, xmmword [rsp + 0x1880]
movups xmmword [rsp + 0x600], xmm4
movups xmmword [rsp + 0x610], xmm1
xorps xmm5, xmm5
movups xmmword [rsp + 0x620], xmm5
movups xmm6, xmmword [rsp + 0x18b0]
movups xmmword [rsp + 0x630], xmm6
movups xmm2, xmmword [rsp + 0x18c0]
movups xmmword [rsp + 0x640], xmm2
xorps xmm7, xmm7
movups xmmword [rsp + 0x650], xmm7
xorps xmm8, xmm8
movups xmmword [rsp + 0x660], xmm8
movsd xmm9, qword [rsp + 0x18f0]
movsd qword [rsp + 0x670], xmm9
movdqa xmm0, xmm2
psrldq xmm0, 6
movd eax, xmm0
test al, al
jne 0x140059069
lea r9, [0x1404e646c]
lea rdx, str.C:WindowsFonts_segoeui.ttf
nop word [rax + rax]
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x140058ff7
cmp al, 0x5c
je 0x140058ff7
mov r9, rcx
cmp rcx, rdx
ja 0x140058fe0
movsd xmm0, qword [0x1404e88e0]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, Ordinal_41
lea rcx, [rsp + 0x646]
call fcn.140003850
movsd xmm9, qword [rsp + 0x670]
movups xmm8, xmmword [rsp + 0x660]
movups xmm7, xmmword [rsp + 0x650]
movups xmm2, xmmword [rsp + 0x640]
movups xmm6, xmmword [rsp + 0x630]
movups xmm5, xmmword [rsp + 0x620]
movups xmm1, xmmword [rsp + 0x610]
movups xmm4, xmmword [rsp + 0x600]
movups xmm3, xmmword [rsp + 0x5f0]
movups xmmword [rsp + 0x1870], xmm3
movups xmmword [rsp + 0x1880], xmm4
movups xmmword [rsp + 0x1890], xmm1
movups xmmword [rsp + 0x18a0], xmm5
movups xmmword [rsp + 0x18b0], xmm6
movups xmmword [rsp + 0x18c0], xmm2
movups xmmword [rsp + 0x18d0], xmm7
movups xmmword [rsp + 0x18e0], xmm8
movsd qword [rsp + 0x18f0], xmm9
mov qword [rsp + 0x1870], rsi
mov dword [rsp + 0x1878], r14d
mov dword [rsp + 0x1884], 0x41a00000
lea rax, [0x1404e5980]
mov qword [rsp + 0x18a8], rax
lea rdx, [rsp + 0x1870]
mov rcx, r12
call fcn.140035ef0
xor esi, esi
jmp 0x140059104
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
movss xmm10, dword [0x1404e88ac]
or dword [r13 + 8], 0x400
mov rax, qword [0x1407e5d20]
mov qword [r13 + 0x20], rsi
add rax, 0x38f0
mov dword [rax + 0x10], esi
mov dword [rax + 0x108], 0x3f800000
call fcn.14003bb40
mov rdi, qword [0x1407e5d70]
mov rbx, qword [0x1407e5d20]
test rbx, rbx
je 0x140059148
inc dword [rbx + 0xfc]
mov rdx, qword [0x1407e5d10]
mov ecx, Ordinal_41
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140059183
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x140059186
mov rax, rsi
mov qword [rbx + 0xa8], rax
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x98], rcx
or dword [rbx + 0xc], 0x1008
mov qword [rax], rdi
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [rbx + 8], 0x400
je 0x140059204
mov rax, qword [0x1407e5d20]
lea rcx, [fcn.14003b7e0]
mov qword [rax + 0x3888], rcx
lea rcx, [fcn.14003b8c0]
mov qword [rax + 0x3890], rcx
lea rcx, [0x14003b940]
mov qword [rax + 0x3898], rcx
lea rcx, [0x14003b9b0]
mov qword [rax + 0x38a0], rcx
lea rcx, [0x14003bb10]
mov qword [rax + 0x38a8], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x5c0], xmm0
movups xmmword [rsp + 0x5d0], xmm0
movups xmmword [rsp + 0x5e0], xmm0
movups xmm0, xmmword [str.eRJOSXY]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [0x1404e85b0]
movups xmmword [rsp + 0x150], xmm1
mov eax, dword [0x1404e85c0]
mov dword [rsp + 0x160], eax
mov r8d, esi
cmp r15d, 2
jl 0x140059395
movdqa xmm5, xmmword [0x1404e8a50]
movdqa xmm4, xmmword [0x1404e8d00]
movdqa xmm6, xmmword [0x1404e8a70]
movdqa xmm0, xmmword [0x1404e8c10]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x140]
mov edx, dword [rsp + 0x2d0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1404e8b10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140059290
cmp r8d, 0x24
jge 0x1400593e0
movsxd rax, r8d
lea r9, [rsp + 0x140]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x1400593b0
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
cmp dword [rsp + 0x5c8], 0x12
je 0x14005c803
movzx r13d, byte [rsp + 0x65]
xorps xmm6, xmm6
movss xmm9, dword [0x1404e8830]
movss xmm8, dword [0x1404e8980]
movss xmm11, dword [0x1404e885c]
movss xmm12, dword [0x1404e8854]
movss xmm7, dword [0x1404e8990]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140059483
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14005c77f
mov rax, qword [0x1407e5d20]
test rax, rax
je 0x140059498
mov rcx, qword [rax + 0xa8]
jmp 0x14005949b
mov rcx, rsi
cmp qword [rcx + 0x18], 0
jne 0x1400594a7
call fcn.14003b640
call fcn.14003cae0
call fcn.140009160
movss xmm2, dword [0x1407ddd98]
ucomiss xmm2, xmm10
movss xmm1, dword [0x1407e635c]
movss xmm0, dword [0x1407e6380]
jp 0x1400594f3
jne 0x1400594f3
comiss xmm1, xmm6
jb 0x1400594f3
comiss xmm6, xmm0
jb 0x1400594f3
addss xmm1, xmm9
movss dword [0x1407e635c], xmm1
movaps xmm0, xmm6
movss dword [0x1407e6380], xmm6
comiss xmm10, xmm2
jb 0x14005951f
comiss xmm1, xmm10
jb 0x14005951f
ucomiss xmm0, xmm6
jp 0x14005951f
jne 0x14005951f
movaps xmm1, xmm10
movss dword [0x1407e635c], xmm1
addss xmm2, xmm8
movss dword [0x1407ddd98], xmm2
comiss xmm6, xmm2
jb 0x14005954b
ucomiss xmm1, xmm10
jp 0x14005954b
jne 0x14005954b
comiss xmm0, xmm6
jb 0x14005954b
movaps xmm2, xmm6
movss dword [0x1407ddd98], xmm6
addss xmm0, xmm9
movss dword [0x1407e6380], xmm0
jmp 0x140059552
ucomiss xmm2, xmm6
jp 0x140059577
jne 0x140059577
comiss xmm10, xmm1
jb 0x140059577
comiss xmm0, xmm10
jb 0x140059577
movaps xmm0, xmm10
movss dword [0x1407e6380], xmm0
addss xmm1, xmm8
movss dword [0x1407e635c], xmm1
comiss xmm2, xmm6
jb 0x1400595a1
comiss xmm6, xmm1
jb 0x1400595a1
ucomiss xmm0, xmm10
jp 0x1400595a1
jne 0x1400595a1
movaps xmm1, xmm6
movss dword [0x1407e635c], xmm6
addss xmm2, xmm9
movss dword [0x1407ddd98], xmm2
comiss xmm2, xmm10
jb 0x1400595c9
comiss xmm1, xmm6
jb 0x1400595c9
comiss xmm10, xmm0
jb 0x1400595c9
mov dword [0x1407ddd98], 0x3f800000
addss xmm0, xmm8
movss dword [0x1407e6380], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f8], xmm0
mov qword [rsp + 0x308], rsi
mov qword [rsp + 0x310], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2f8], 0
movups xmmword [rsp + 0x358], xmm0
mov qword [rsp + 0x368], rsi
mov qword [rsp + 0x370], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x358], 0
xor r12b, r12b
mov byte [rsp + 0x66], r12b
xor al, al
mov byte [rsp + 0x64], al
lea rdi, str.C:MTX_s63g2u5j76wv2ag269.json
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1c8], reloc.WLDAP32.dll_Ordinal_30
call fcn.1401dcbf0
movaps xmm0, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x2d0], xmm0
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, [rsp + 0x2a0]
call fcn.140050940
nop
lea rcx, [rsp + 0x2a0]
call fcn.140051c60
movzx ebx, al
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 7
jbe 0x1400596c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400596be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c78f
call fcn.1401dbfcc
test bl, bl
je 0x14005990b
lea rax, [rsp + 0x338]
mov qword [rsp + 0x2c0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rsi
mov r8d, 4
lea rdx, str.path
lea rcx, [rsp + 0x338]
call fcn.140062980
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x318], xmm0
mov qword [rsp + 0x328], rsi
mov qword [rsp + 0x330], rsi
mov r8d, reloc.WLDAP32.dll_Ordinal_30
mov rdx, rdi
lea rcx, [rsp + 0x318]
call fcn.140062980
nop
lea r8, [rsp + 0x338]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x2d0]
call fcn.140052d40
nop
mov rbx, qword [rsp + 0x2e0]
lea r9, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0xf
cmova r9, qword [rsp + 0x2d0]
lea rcx, [rsp + 0x2f8]
cmp rbx, 0xf
ja 0x1400597ae
mov qword [rsp + 0x308], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x2f8], 0
jmp 0x1400597b6
mov rdx, rbx
call fcn.1400632b0
lea rcx, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0xf
cmova rcx, qword [rsp + 0x2d0]
lea rdx, [0x1407e6260]
sub rdx, rcx
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400597e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
mov qword [rsp + 0x388], rsi
mov qword [rsp + 0x390], rsi
xor r8d, r8d
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x378]
call fcn.140062980
lea rdx, [rsp + 0x378]
mov r14, qword [rsp + 0x390]
cmp r14, 0xf
seta r15b
mov rdi, qword [rsp + 0x378]
cmova rdx, rdi
lea rcx, [rsp + 0x2d0]
mov rbx, qword [rsp + 0x2d0]
mov rsi, qword [rsp + 0x2e8]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x2e0]
cmp r8, qword [rsp + 0x388]
jne 0x140059884
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140059884
mov r12b, 1
jmp 0x140059887
xor r12b, r12b
mov byte [rsp + 0x66], r12b
test r15b, r15b
je 0x1400598d2
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400598ba
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c796
mov rcx, rdi
call fcn.1401dbfcc
mov rsi, qword [rsp + 0x2e8]
mov rbx, qword [rsp + 0x2d0]
cmp rsi, 0xf
jbe 0x140059909
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140059901
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c79d
mov rcx, rbx
call fcn.1401dbfcc
xor esi, esi
lea rdi, str.C:MTX6b21489bt894nt5b8.json
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], Ordinal_32
call fcn.1401dcbf0
movaps xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x2d0], xmm0
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, [rsp + 0x378]
call fcn.140050940
or dword [rsp + 0x60], 0x1e00
lea rcx, [rsp + 0x378]
call fcn.140051c60
movzx ebx, al
mov rdx, qword [rsp + 0x390]
cmp rdx, 7
jbe 0x1400599b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400599ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7a4
call fcn.1401dbfcc
mov qword [rsp + 0x388], rsi
mov qword [rsp + 0x390], 7
mov word [rsp + 0x378], si
test bl, bl
je 0x140059c47
lea rax, [rsp + 0x318]
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x318], xmm0
mov qword [rsp + 0x328], rsi
mov qword [rsp + 0x330], rsi
mov r8d, 4
lea rdx, str.name
lea rcx, [rsp + 0x318]
call fcn.140062980
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], rsi
mov r8d, Ordinal_32
mov rdx, rdi
lea rcx, [rsp + 0x2a0]
call fcn.140062980
nop
lea r8, [rsp + 0x318]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x2d0]
call fcn.140052d40
nop
mov rdi, qword [rsp + 0x2e0]
lea r9, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0xf
cmova r9, qword [rsp + 0x2d0]
mov rax, qword [rsp + 0x370]
cmp rdi, rax
ja 0x140059aca
lea rbx, [rsp + 0x358]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x358]
mov qword [rsp + 0x368], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140059ada
mov rdx, rdi
lea rcx, [rsp + 0x358]
call fcn.1400632b0
lea rcx, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0xf
cmova rcx, qword [rsp + 0x2d0]
lea rdx, [0x1407e63b0]
sub rdx, rcx
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140059b00
xorps xmm0, xmm0
movups xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rsi
xor r8d, r8d
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x338]
call fcn.140062980
lea rdx, [rsp + 0x338]
mov r14, qword [rsp + 0x350]
cmp r14, 0xf
seta r15b
mov rdi, qword [rsp + 0x338]
cmova rdx, rdi
lea rcx, [rsp + 0x2d0]
mov rbx, qword [rsp + 0x2d0]
mov rsi, qword [rsp + 0x2e8]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x2e0]
cmp r8, qword [rsp + 0x348]
jne 0x140059ba6
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140059ba6
mov byte [rsp + 0x64], 1
jmp 0x140059bac
xor al, al
mov byte [rsp + 0x64], al
test r15b, r15b
je 0x140059bf2
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140059bda
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7ab
mov rcx, rdi
call fcn.1401dbfcc
mov rsi, qword [rsp + 0x2e8]
mov rbx, qword [rsp + 0x2d0]
cmp rsi, 0xf
jbe 0x140059c29
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140059c21
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7b2
mov rcx, rbx
call fcn.1401dbfcc
xor esi, esi
mov qword [rsp + 0x2e0], rsi
mov qword [rsp + 0x2e8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2d0], sil
mov rax, qword [0x1407e5d20]
mov dword [rax + 0x48dc], 0x44228000
mov qword [rax + 0x48e0], 0x43b90000
mov dword [rax + 0x48e8], esi
mov dword [rax + 0x48cc], 2
mov byte [rax + 0x4904], 1
mov dword [rax + 0x48ec], 0x43e10000
mov dword [rax + 0x48f0], 0x43c80000
mov dword [rax + 0x48d0], 1
or dword [rax + 0x48c8], 0x43
mov dword [rax + 0x4928], 0x3f800000
mov r8d, 0xc210a
lea rdx, [0x1407ddda0]
lea rcx, str.MTX_Cleaner
call fcn.14000ec40
mov edx, reloc.WS2_32.dll_recvfrom
mov rcx, qword [0x1407e5d80]
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
call fcn.140031530
movss xmm1, dword [0x1407e635c]
subss xmm1, xmm11
movss xmm0, dword [0x1407ddd98]
subss xmm0, xmm12
movss dword [rsp + 0xc0], xmm0
movss dword [rsp + 0xc4], xmm1
movss xmm0, dword [0x1407e6380]
movss dword [rsp + 0xc8], xmm0
mov dword [rsp + 0xcc], 0x3f800000
lea rdx, str.Made_by_r1n4x
lea rcx, [rsp + 0xc0]
call fcn.140040a70
mov rcx, qword [0x1407e5d20]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
cmp byte [rax + 0xe8], 0
jne 0x140059d78
mov qword [rsp + 0x138], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x138]
call fcn.140014ef0
call fcn.140049a80
test al, al
je 0x14005c516
call fcn.14004b7a0
test al, al
je 0x14005c511
movzx r15d, byte [rsp + 0x64]
test r12b, r12b
je 0x14005a3d3
test r15b, r15b
jne 0x14005c0c9
test r13b, r13b
je 0x140059db8
test r12b, r12b
jne 0x14005c0c9
test r15b, r15b
jne 0x140059dcb
test r13b, r13b
jne 0x140059dcb
test r12b, r12b
jne 0x14005c0c9
call fcn.140043050
call fcn.140043050
call fcn.140043050
lea rcx, [0x1404e64a0]
call fcn.140040930
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140015200
mov dword [rsp + 0x118], 0x432f0000
mov dword [rsp + 0x11c], 0x42700000
lea rdx, [rsp + 0x118]
lea rcx, str.CLEAN
call fcn.1400415c0
test al, al
je 0x14005c0b5
lea rcx, [rsp + 0x78]
call fcn.1400564e0
nop
lea r8, str._superiority_rust
mov rdx, rax
lea rcx, [rsp + 0x318]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
lea rcx, [rsp + 0x2a0]
call fcn.1400613e0
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
lea r8, str.world.assets
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x78]
call fcn.140061210
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
lea r8, str.imgui.ini
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x78]
call fcn.140061210
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.1400564e0
nop
lea r8, str.MicrosoftWindowsRecentAutomaticDestinations
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.140056670
nop
lea r8, str.invis.v2
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.140056800
nop
lea r8, str.Temp_settings.xml
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.1400564e0
nop
lea r8, str.MicrosoftWindowsRecentextreme_injector_by_master131_1.rar.lnk
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.1400564e0
nop
lea r8, str.MicrosoftWindowsRecent_superiority_rust.lnk
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.1400564e0
nop
lea r8, str.MicrosoftWindowsRecentinvis.v2.lnk
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rcx, [rsp + 0x318]
call fcn.1400564e0
nop
lea r8, str.MicrosoftWindowsRecentExpensive.lnk
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140061370
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x78]
call fcn.140053930
nop
lea rcx, [rsp + 0x318]
call fcn.140053930
lea rdx, str.C:Windowsprefetch
lea rcx, [rsp + 0x398]
call fcn.14005dfa0
nop
lea rdx, str.EXTREME
lea rcx, [rsp + 0x5a0]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x78]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0x5f0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x78]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005a572
mov r15, qword [rsp + 0x5b8]
mov rdi, qword [rsp + 0x5b0]
mov r12, qword [rsp + 0x5a0]
nop dword [rax]
test byte [rsp + 0x5f0], 0x10
jne 0x14005a54e
xorps xmm0, xmm0
movups xmmword [rsp + 0x458], xmm0
mov qword [rsp + 0x468], rsi
mov qword [rsp + 0x470], rsi
lea rax, [rsp + 0x61c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005a300
lea rdx, [rsp + 0x61c]
lea rcx, [rsp + 0x458]
call fcn.140062690
nop
lea r10, [rsp + 0x5a0]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x458]
cmp qword [rsp + 0x470], 7
cmova r11, qword [rsp + 0x458]
mov rsi, qword [rsp + 0x468]
test rdi, rdi
je 0x14005a39c
cmp rdi, rsi
ja 0x14005a3f2
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005a3e4
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005a394
mov r8, r9
sub r8, r10
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005a3e4
add rcx, 2
sub rdx, 1
jne 0x14005a380
sub r9, r11
sar r9, 1
jne 0x14005a3f2
lea r8, [rsi - 3]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x458]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
or r9d, 1
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005a3f7
mov bl, 1
jmp 0x14005a3f9
test r15b, r15b
je 0x140059daa
test r13b, r13b
jmp 0x140059dc5
cmp r9, r11
je 0x14005a3f2
sub r9, 2
jmp 0x14005a368
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, 1
je 0x14005a415
and r9d, 0xfffffffe
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
test bl, bl
je 0x14005a504
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x318]
call fcn.140061420
nop
lea r8, [rsp + 0x458]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x318]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005a4d2
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005a4f6
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x470]
cmp rdx, 7
jbe 0x14005a54c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a547
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7b9
call fcn.1401dbfcc
xor esi, esi
lea rdx, [rsp + 0x5f0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005a2c0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005a595
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRU
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14005a6cd
mov dword [rsp + 0x2c0], 0xff
lea ebx, [rax + 1]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x2c0]
lea r8, [rsp + 0x1870]
xor edx, edx
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x14005a6bd
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x1870]
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test eax, eax
lea rdx, [0x1404e67b0]
je 0x14005a64f
lea rdx, [0x1404e67d8]
call fcn.140061660
lea rdx, [rsp + 0x1870]
mov rcx, rax
call fcn.140061890
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov dword [rsp + 0x2c0], 0xff
mov edx, ebx
inc ebx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x2c0]
lea r8, [rsp + 0x1870]
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x14005a620
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14005a6f0
lea rdx, [0x1404e6820]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14005a81d
mov dword [rsp + 0x2c0], 0xff
lea ebx, [rax + 1]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x2c0]
lea r8, [rsp + 0x1870]
xor edx, edx
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x14005a80d
nop dword [rax]
lea rdx, [rsp + 0x1870]
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test eax, eax
lea rdx, [0x1404e67b0]
je 0x14005a79f
lea rdx, [0x1404e67d8]
call fcn.140061660
lea rdx, [rsp + 0x1870]
mov rcx, rax
call fcn.140061890
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov dword [rsp + 0x2c0], 0xff
mov edx, ebx
inc ebx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x2c0]
lea r8, [rsp + 0x1870]
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x14005a770
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14005a840
lea rdx, [0x1404e6820]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRUexe
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14005a96d
mov dword [rsp + 0x2c0], 0xff
lea ebx, [rax + 1]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x2c0]
lea r8, [rsp + 0x1870]
xor edx, edx
mov rcx, qword [rsp + 0x240]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x14005a95d
nop dword [rax]
lea rdx, [rsp + 0x1870]
mov rcx, qword [rsp + 0x240]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test eax, eax
lea rdx, [0x1404e67b0]
je 0x14005a8ef
lea rdx, [0x1404e67d8]
call fcn.140061660
lea rdx, [rsp + 0x1870]
mov rcx, rax
call fcn.140061890
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov dword [rsp + 0x2c0], 0xff
mov edx, ebx
inc ebx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x2c0]
lea r8, [rsp + 0x1870]
mov rcx, qword [rsp + 0x240]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x14005a8c0
mov rcx, qword [rsp + 0x240]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14005a990
lea rdx, [0x1404e6820]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test r13b, r13b
je 0x14005a9c6
lea rdx, [rsp + 0x358]
lea rcx, [rsp + 0x2a0]
call fcn.140060d00
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
lea rcx, [rsp + 0x2a0]
call fcn.140060fe0
nop
lea rcx, [rsp + 0x2a0]
call fcn.140052070
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
lea rdx, str.C:Windowsprefetch
lea rcx, [rsp + 0x378]
call fcn.14005dfa0
nop
lea rdx, str.MMVC
lea rcx, [rsp + 0x580]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0x78]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0x840]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x78]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005ad21
mov r15, qword [rsp + 0x598]
mov rdi, qword [rsp + 0x590]
mov r12, qword [rsp + 0x580]
nop word [rax + rax]
test byte [rsp + 0x840], 0x10
jne 0x14005acf8
xorps xmm0, xmm0
movups xmmword [rsp + 0x438], xmm0
mov qword [rsp + 0x448], rsi
mov qword [rsp + 0x450], rsi
lea rax, [rsp + 0x86c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005aac0
lea rdx, [rsp + 0x86c]
lea rcx, [rsp + 0x438]
call fcn.140062690
nop
lea r10, [rsp + 0x580]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x438]
cmp qword [rsp + 0x450], 7
cmova r11, qword [rsp + 0x438]
mov rsi, qword [rsp + 0x448]
test rdi, rdi
je 0x14005ab5c
cmp rdi, rsi
ja 0x14005ab9e
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005ab93
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005ab54
mov r8, r9
sub r8, r10
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005ab93
add rcx, 2
sub rdx, 1
jne 0x14005ab40
sub r9, r11
sar r9, 1
jne 0x14005ab9e
lea r8, [rsi - 3]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x438]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
or r9d, 2
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005aba3
mov bl, 1
jmp 0x14005aba5
cmp r9, r11
je 0x14005ab9e
sub r9, 2
jmp 0x14005ab28
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, 2
je 0x14005abc1
and r9d, 0xfffffffd
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
test bl, bl
je 0x14005acb0
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0x318]
call fcn.140061420
nop
lea r8, [rsp + 0x438]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x318]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005ac7e
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005aca2
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x450]
cmp rdx, 7
jbe 0x14005acf8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x438]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005acf3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7c0
call fcn.1401dbfcc
lea rdx, [rsp + 0x840]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov esi, 0
jne 0x14005aa80
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005ad44
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:Windowsprefetch
lea rcx, [rsp + 0x338]
call fcn.14005dfa0
nop
lea rdx, str.AUDIO64
lea rcx, [rsp + 0x560]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x78]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0xa90]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x78]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005b06c
mov r15, qword [rsp + 0x578]
mov rdi, qword [rsp + 0x570]
mov r12, qword [rsp + 0x560]
xor r13d, r13d
test byte [rsp + 0xa90], 0x10
jne 0x14005b048
xorps xmm0, xmm0
movups xmmword [rsp + 0x418], xmm0
mov qword [rsp + 0x428], r13
mov qword [rsp + 0x430], r13
lea rax, [rsp + 0xabc]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005ae10
lea rdx, [rsp + 0xabc]
lea rcx, [rsp + 0x418]
call fcn.140062690
nop
lea r10, [rsp + 0x560]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x418]
cmp qword [rsp + 0x430], 7
cmova r11, qword [rsp + 0x418]
mov rsi, qword [rsp + 0x428]
test rdi, rdi
je 0x14005aeac
cmp rdi, rsi
ja 0x14005aeee
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005aee3
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005aea4
mov r8, r9
sub r8, r10
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005aee3
add rcx, 2
sub rdx, 1
jne 0x14005ae90
sub r9, r11
sar r9, 1
jne 0x14005aeee
lea r8, [rsi - 3]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x418]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
or r9d, 4
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005aef3
mov bl, 1
jmp 0x14005aef5
cmp r9, r11
je 0x14005aeee
sub r9, 2
jmp 0x14005ae78
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, 4
je 0x14005af11
and r9d, 0xfffffffb
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
test bl, bl
je 0x14005b000
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x318]
call fcn.140061420
nop
lea r8, [rsp + 0x418]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x318]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005afce
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005aff2
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x430]
cmp rdx, 7
jbe 0x14005b048
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b043
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7c7
call fcn.1401dbfcc
lea rdx, [rsp + 0xa90]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005add2
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005b092
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor r13d, r13d
lea rdx, str.C:Windowsprefetch
lea rcx, [rsp + 0x2d0]
call fcn.14005dfa0
nop
lea rdx, str.SHELLBAG_ANALYZER_CLEANER
lea rcx, [rsp + 0x540]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x78]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0x1180]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x78]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005b37c
mov r15, qword [rsp + 0x558]
mov rdi, qword [rsp + 0x550]
mov r12, qword [rsp + 0x540]
nop dword [rax]
test byte [rsp + 0x1180], 0x10
jne 0x14005b358
lea rdx, [rsp + 0x11ac]
lea rcx, [rsp + 0x478]
call fcn.14005dfa0
nop
lea r10, [rsp + 0x540]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x478]
cmp qword [rsp + 0x490], 7
cmova r11, qword [rsp + 0x478]
mov rsi, qword [rsp + 0x488]
test rdi, rdi
je 0x14005b1bc
cmp rdi, rsi
ja 0x14005b1fe
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005b1f3
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005b1b4
mov r8, r9
sub r8, r10
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005b1f3
add rcx, 2
sub rdx, 1
jne 0x14005b1a0
sub r9, r11
sar r9, 1
jne 0x14005b1fe
lea r8, [rsi - 3]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x478]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
or r9d, 8
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005b203
mov bl, 1
jmp 0x14005b205
cmp r9, r11
je 0x14005b1fe
sub r9, 2
jmp 0x14005b187
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, 8
je 0x14005b221
and r9d, 0xfffffff7
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
test bl, bl
je 0x14005b310
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x318]
call fcn.140061420
nop
lea r8, [rsp + 0x478]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x318]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005b2de
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005b302
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x490]
cmp rdx, 7
jbe 0x14005b358
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b353
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7ce
call fcn.1401dbfcc
lea rdx, [rsp + 0x1180]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005b120
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005b39f
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.TASKKILL
lea rcx, [rsp + 0x520]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x78]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0xce0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x78]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005b6bc
mov r15, qword [rsp + 0x538]
mov rdi, qword [rsp + 0x530]
mov r12, qword [rsp + 0x520]
nop word [rax + rax]
test byte [rsp + 0xce0], 0x10
jne 0x14005b698
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f8], xmm0
mov qword [rsp + 0x408], r13
mov qword [rsp + 0x410], r13
lea rax, [rsp + 0xd0c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005b460
lea rdx, [rsp + 0xd0c]
lea rcx, [rsp + 0x3f8]
call fcn.140062690
nop
lea r10, [rsp + 0x520]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x3f8]
cmp qword [rsp + 0x410], 7
cmova r11, qword [rsp + 0x3f8]
mov rsi, qword [rsp + 0x408]
test rdi, rdi
je 0x14005b4fc
cmp rdi, rsi
ja 0x14005b53e
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005b533
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005b4f4
mov r8, r9
sub r8, r10
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005b533
add rcx, 2
sub rdx, 1
jne 0x14005b4e0
sub r9, r11
sar r9, 1
jne 0x14005b53e
lea r8, [rsi - 3]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x3f8]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
or r9d, 0x10
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005b543
mov bl, 1
jmp 0x14005b545
cmp r9, r11
je 0x14005b53e
sub r9, 2
jmp 0x14005b4c8
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, 0x10
je 0x14005b561
and r9d, 0xffffffef
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
test bl, bl
je 0x14005b650
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x318]
call fcn.140061420
nop
lea r8, [rsp + 0x3f8]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x318]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005b61e
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005b642
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x410]
cmp rdx, 7
jbe 0x14005b698
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b693
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7d5
call fcn.1401dbfcc
lea rdx, [rsp + 0xce0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005b420
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005b6df
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1404e6a20]
lea rcx, [rsp + 0x3b8]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x78]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0x13d0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
lea rcx, [rsp + 0x78]
call fcn.140050e90
cmp rdi, 0xffffffffffffffff
je 0x14005b8f6
mov r13d, dword [rsp + 0x60]
test byte [rsp + 0x13d0], 0x10
jne 0x14005b8ca
lea rdx, [rsp + 0x13fc]
lea rcx, [rsp + 0x2a0]
call fcn.14005dfa0
nop
lea rdx, [rsp + 0x3b8]
lea rcx, [rsp + 0x2a0]
call fcn.14005de70
test rax, rax
jne 0x14005b7b5
mov r8, qword [rsp + 0x2b0]
add r8, 0xfffffffffffffffd
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x2a0]
call fcn.14005de10
or r13d, 0x20
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005b7b5
mov bl, 1
jmp 0x14005b7b7
xor bl, bl
test r13b, 0x20
je 0x14005b7ce
and r13d, 0xffffffdf
lea rcx, [rsp + 0x318]
call fcn.140050e90
test bl, bl
je 0x14005b8bd
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x168]
call fcn.140061420
nop
lea r8, [rsp + 0x2a0]
mov rdx, rax
lea rcx, [rsp + 0x318]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x168]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x318]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x318]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005b88b
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005b8af
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x318]
call fcn.140050e90
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
lea rdx, [rsp + 0x13d0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005b742
mov dword [rsp + 0x60], r13d
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005b919
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.NET1
lea rcx, [rsp + 0x500]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x168]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0x1620]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x168]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005bbf0
mov r15, qword [rsp + 0x518]
mov rdi, qword [rsp + 0x510]
mov r12, qword [rsp + 0x500]
nop word [rax + rax]
test byte [rsp + 0x1620], 0x10
jne 0x14005bbcc
lea rdx, [rsp + 0x164c]
lea rcx, [rsp + 0x498]
call fcn.14005dfa0
nop
lea r10, [rsp + 0x500]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x498]
cmp qword [rsp + 0x4b0], 7
cmova r11, qword [rsp + 0x498]
mov rsi, qword [rsp + 0x4a8]
test rdi, rdi
je 0x14005ba3c
cmp rdi, rsi
ja 0x14005ba7b
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005ba70
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005ba34
mov r8, r9
sub r8, r10
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005ba70
add rcx, 2
sub rdx, 1
jne 0x14005ba20
sub r9, r11
sar r9, 1
jne 0x14005ba7b
lea r8, [rsi - 3]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x498]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
or r9d, 0x40
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005ba80
mov bl, 1
jmp 0x14005ba82
cmp r9, r11
je 0x14005ba7b
sub r9, 2
jmp 0x14005ba07
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, 0x40
je 0x14005ba9b
and r9d, 0xffffffbf
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x78]
call fcn.140050e90
test bl, bl
je 0x14005bb84
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x78]
call fcn.140061420
nop
lea r8, [rsp + 0x498]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x78]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005bb52
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005bb76
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x4b0]
cmp rdx, 7
jbe 0x14005bbcc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bbc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7dc
call fcn.1401dbfcc
lea rdx, [rsp + 0x1620]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005b9a0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005bc13
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.FIND
lea rcx, [rsp + 0x4e0]
call fcn.14005dfa0
nop
lea r8, [0x1404e6670]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x168]
call fcn.140061420
mov rcx, rax
call fcn.14005df10
mov rcx, rax
lea rdx, [rsp + 0xf30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
lea rcx, [rsp + 0x168]
call fcn.140050e90
cmp r14, 0xffffffffffffffff
je 0x14005bf21
mov r15, qword [rsp + 0x4f8]
mov rdi, qword [rsp + 0x4f0]
mov r12, qword [rsp + 0x4e0]
nop
test byte [rsp + 0xf30], 0x10
jne 0x14005befd
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d8], xmm0
mov qword [rsp + 0x3e8], r13
mov qword [rsp + 0x3f0], r13
lea rax, [rsp + 0xf5c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005bcd0
lea rdx, [rsp + 0xf5c]
lea rcx, [rsp + 0x3d8]
call fcn.140062690
nop
lea r10, [rsp + 0x4e0]
cmp r15, 7
cmova r10, r12
lea r11, [rsp + 0x3d8]
cmp qword [rsp + 0x3f0], 7
cmova r11, qword [rsp + 0x3d8]
mov rsi, qword [rsp + 0x3e8]
test rdi, rdi
je 0x14005bd6c
cmp rdi, rsi
ja 0x14005bdac
mov r9, r11
movzx ebx, word [r10]
cmp word [r9], bx
jne 0x14005bda1
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x14005bd64
mov r8, r9
sub r8, r10
nop dword [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14005bda1
add rcx, 2
sub rdx, 1
jne 0x14005bd50
sub r9, r11
sar r9, 1
jne 0x14005bdac
lea r8, [rsi - 3]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x3d8]
call fcn.14005de10
mov r9d, dword [rsp + 0x60]
bts r9d, 7
mov dword [rsp + 0x60], r9d
mov rcx, rax
call fcn.1400615b0
test al, al
je 0x14005bdb1
mov bl, 1
jmp 0x14005bdb3
cmp r9, r11
je 0x14005bdac
sub r9, 2
jmp 0x14005bd34
mov r9d, dword [rsp + 0x60]
xor bl, bl
test r9b, r9b
jns 0x14005bdcc
btr r9d, 7
mov dword [rsp + 0x60], r9d
lea rcx, [rsp + 0x78]
call fcn.140050e90
test bl, bl
je 0x14005beb5
lea r8, [0x1404e6680]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x78]
call fcn.140061420
nop
lea r8, [rsp + 0x3d8]
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400615f0
nop
lea rcx, [rsp + 0x78]
call fcn.140050e90
lea rdx, str.Deleting_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
mov rcx, rax
lea rdx, [rsp + 0x2a0]
call fcn.140061830
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x2a0]
call fcn.14005df10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14005be83
lea rdx, str.File_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140061660
lea rdx, [0x140061850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14005bea7
lea rdx, str.Error_deleting_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x2a0]
call fcn.140050e90
nop
mov rdx, qword [rsp + 0x3f0]
cmp rdx, 7
jbe 0x14005befd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bef8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7e3
call fcn.1401dbfcc
lea rdx, [rsp + 0xf30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14005bc90
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x14005bf44
lea rdx, str.No_files_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0x248]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellBagMRU
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14005bfb9
lea rdx, [0x1404df8b6]
mov rcx, qword [rsp + 0x248]
call fcn.140056990
lea rdx, [0x1404e6a98]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x248]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14005bfdc
lea rdx, [0x1404e6ac0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400607d0
lea rdx, [0x140060fa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Cleaning
lea rcx, [rsp + 0x168]
call fcn.140053990
mov rdx, rax
lea rcx, [0x1407e5d90]
call fcn.14007e260
nop
lea rcx, [rsp + 0x4e0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x500]
call fcn.140050e90
nop
lea rcx, [rsp + 0x3b8]
call fcn.140050e90
nop
lea rcx, [rsp + 0x520]
call fcn.140050e90
nop
lea rcx, [rsp + 0x540]
call fcn.140050e90
nop
lea rcx, [rsp + 0x2d0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x560]
call fcn.140050e90
nop
lea rcx, [rsp + 0x338]
call fcn.140050e90
nop
lea rcx, [rsp + 0x580]
call fcn.140050e90
nop
lea rcx, [rsp + 0x378]
call fcn.140050e90
nop
lea rcx, [rsp + 0x5a0]
call fcn.140050e90
nop
lea rcx, [rsp + 0x398]
call fcn.140050e90
xor esi, esi
movzx r12d, byte [rsp + 0x66]
movzx r15d, byte [rsp + 0x64]
call fcn.140043050
call fcn.140043050
call fcn.140043050
call fcn.1400436c0
mov rcx, qword [0x1407e5d20]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
cmp byte [rax + 0xe8], 0
jne 0x14005c111
mov qword [rsp + 0x120], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x120]
call fcn.140014ef0
mov rcx, qword [0x1407e5d20]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
cmp byte [rax + 0xe8], 0
jne 0x14005c152
mov qword [rsp + 0x128], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x128]
call fcn.140014ef0
mov rcx, qword [0x1407e5d20]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
cmp byte [rax + 0xe8], 0
jne 0x14005c18c
mov qword [rsp + 0x130], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x130]
call fcn.140014ef0
test r12b, r12b
je 0x14005c1be
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm10
lea rcx, [rsp + 0xf8]
call fcn.140001a10
mov rcx, rax
lea rdx, str.Set_up_Rust_folder___
call fcn.140040a70
lea rcx, str.__:
call fcn.140040930
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140015200
lea rcx, [0x1407e6260]
call fcn.140040930
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 0x5a
lea r8, [0x1407e6050]
xor edx, edx
lea rcx, [0x1404df8b6]
call fcn.1400466c0
mov dword [rsp + 0xd8], 0x42fa0000
mov dword [rsp + 0xdc], 0x41f00000
lea rdx, [rsp + 0xd8]
lea rcx, [0x1404e6b38]
call fcn.140041260
test al, al
je 0x14005c315
lea rax, [rsp + 0x168]
mov qword [rsp + 0x68], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x168]
call fcn.140053990
mov r14, rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x2c0], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x78]
call fcn.140053990
mov rsi, rax
lea rax, [rsp + 0x3b8]
mov qword [rsp + 0x1b0], rax
lea rdx, [0x1407e6050]
lea rcx, [rsp + 0x3b8]
call fcn.140053990
mov rdi, rax
lea rax, [rsp + 0x398]
mov qword [rsp + 0x1b8], rax
lea rdx, str.path
lea rcx, [rsp + 0x398]
call fcn.140053990
mov rbx, rax
lea rdx, str.C:MTX_s63g2u5j76wv2ag269.json
lea rcx, [rsp + 0x2a0]
call fcn.140053990
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140053290
lea rdx, [rsp + 0x65]
call fcn.140042880
mov rcx, qword [0x1407e5d20]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
cmp byte [rax + 0xe8], 0
jne 0x14005c360
mov qword [rsp + 0xd0], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0xd0]
call fcn.140014ef0
movzx r13d, byte [rsp + 0x65]
test r13b, r13b
je 0x14005c4cc
test r15b, r15b
je 0x14005c3a1
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm10
lea rcx, [rsp + 0x98]
call fcn.140001a10
mov rcx, rax
lea rdx, str.Set_up_DLL_file___
call fcn.140040a70
lea rcx, str._DLL_:
call fcn.140040930
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140015200
lea rcx, [0x1407e63b0]
call fcn.140040930
mov r8d, 0xfb
lea rdx, [0x1407e6160]
lea rcx, [0x1404e5944]
call fcn.140044740
mov dword [rsp + 0x70], 0x42fa0000
mov dword [rsp + 0x74], 0x41f00000
lea rdx, [rsp + 0x70]
lea rcx, [0x1404e6be0]
call fcn.1400415c0
test al, al
je 0x14005c4cc
lea rax, [rsp + 0x210]
mov qword [rsp + 0x2d0], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x210]
call fcn.140053990
mov r14, rax
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x1b8], rax
lea rdx, [0x1404df8b6]
lea rcx, [rsp + 0x1f0]
call fcn.140053990
mov rsi, rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x1b0], rax
lea rdx, [0x1407e6160]
lea rcx, [rsp + 0x1d0]
call fcn.140053990
mov rdi, rax
lea rax, [rsp + 0x4b8]
mov qword [rsp + 0x68], rax
lea rdx, str.name
lea rcx, [rsp + 0x4b8]
call fcn.140053990
mov rbx, rax
lea rdx, str.C:MTX6b21489bt894nt5b8.json
lea rcx, [rsp + 0x188]
call fcn.140053990
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140053290
mov r8, qword [0x1407e5d20]
mov rax, qword [r8 + 0x3ff0]
cmp byte [rax + 0xe8], 0
jne 0x14005c50f
mov rdx, qword [r8 + 0x4d10]
test rdx, rdx
je 0x14005c50f
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x38
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x14005c50f
mov rax, qword [r8 + 0x3ff0]
dec dword [rax + 0x120]
xor esi, esi
call fcn.140049fb0
call fcn.140011c00
nop
mov rdx, qword [rsp + 0x370]
cmp rdx, 0xf
jbe 0x14005c55f
inc rdx
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c55a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7ea
call fcn.1401dbfcc
mov qword [rsp + 0x368], rsi
mov qword [rsp + 0x370], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x358], 0
mov rdx, qword [rsp + 0x310]
cmp rdx, 0xf
jbe 0x14005c5be
inc rdx
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c5b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c7f1
call fcn.1401dbfcc
call fcn.14000b240
mov rcx, qword [0x1407e5d70]
mov rax, qword [rcx]
mov dword [rsp + 0x30], esi
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], esi
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1407e5d70]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
test eax, eax
js 0x14005c63c
call fcn.14000b7e0
mov rax, qword [0x1407e5d20]
mov rcx, qword [rax + 0x49e8]
mov rax, qword [rcx]
add rax, 0xa8
mov rcx, rsi
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14003ae30
mov rcx, qword [0x1407e5d70]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rsp + 0x2f0]
test dword [rax + 8], 0x400
je 0x14005c71d
call fcn.14001dd00
mov rbx, qword [0x1407e5d20]
mov r14d, 1
mov eax, dword [rbx + 0x38c0]
cmp eax, r14d
jle 0x14005c6c1
mov esi, 8
mov rax, qword [rbx + 0x38c8]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x14005c6ad
mov rax, qword [rbx + 0x3860]
test rax, rax
je 0x14005c69a
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38a0]
test rax, rax
je 0x14005c6ad
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
mov eax, dword [rbx + 0x38c0]
cmp r14d, eax
jl 0x14005c673
xor esi, esi
mov r14d, 1
cmp eax, r14d
jle 0x14005c71d
mov esi, 8
mov rax, qword [rbx + 0x38c8]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x14005c70b
mov rax, qword [rbx + 0x3868]
test rax, rax
je 0x14005c6f8
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38a8]
test rax, rax
je 0x14005c70b
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x38c0]
jl 0x14005c6d1
xor esi, esi
mov rcx, qword [0x1407e5d70]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005c776
mov rcx, qword [0x1407e5d70]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14005c776
call fcn.14003b6f0
mov rcx, qword [0x1407e5d70]
mov rax, qword [rcx]
lea rdx, [0x1407e5d30]
call qword [rax + 0x80]
call fcn.14003b640
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14005c7f8
cmp dword [rsp + 0x5c8], 0x12
jne 0x140059440
jmp 0x14005c803
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x5c8], 0x12
mov rbx, qword [0x1407e5d20]
test rbx, rbx
je 0x14005c818
mov rdi, qword [rbx + 0xa8]
jmp 0x14005c81b
mov rdi, rsi
call fcn.14001e300
call fcn.14003b6f0
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005c833
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x98], rsi
mov qword [rbx + 0xa8], rsi
mov rax, qword [0x1407e5d20]
test rax, rax
je 0x14005c853
dec dword [rax + 0xfc]
mov rdx, qword [0x1407e5d10]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x1407e5d20]
test rbx, rbx
je 0x14005c877
mov rdi, qword [rbx + 0xa0]
jmp 0x14005c87a
mov rdi, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.14001e300
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x14005c8a6
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rbx + 0x90], rsi
mov qword [rbx + 0xa0], rsi
mov rax, qword [0x1407e5d20]
test rax, rax
je 0x14005c8c6
dec dword [rax + 0xfc]
mov rdx, qword [0x1407e5d10]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x1407e5d20]
mov qword [0x1407e5d20], rbx
call fcn.140006990
mov qword [0x1407e5d20], rsi
test rbx, rbx
je 0x14005c91d
mov rcx, rbx
call fcn.1400294f0
mov rax, qword [0x1407e5d20]
test rax, rax
je 0x14005c90e
dec dword [rax + 0xfc]
mov rdx, qword [0x1407e5d10]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rcx, qword [0x1407e5d70]
test rcx, rcx
je 0x14005c936
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1407e5d70], rsi
mov rcx, qword [0x1407e5d78]
test rcx, rcx
je 0x14005c94f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1407e5d78], rsi
mov rcx, qword [0x1407e5d80]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x268]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
jmp 0x140058633
mov rcx, qword [0x1407e5d78]
mov rdx, qword [0x1407e5d70]
test rdx, rdx
je 0x14005c9a3
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1407e5d70], rsi
mov rcx, qword [0x1407e5d78]
test rcx, rcx
je 0x14005c9b5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1407e5d78], rsi
mov rdx, qword [rsp + 0x268]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x140058633
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x2d8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3