Function at 0x140005280
Capabilities:
Create process on windows
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x368]
sub rsp, 0x440
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x1400ca040]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
lea rdx, [0x14018c700]
lea rcx, [rbp + 0x60]
call fcn.140007420
nop
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14018e0e0], eax
jle 0x14000534a
lea rcx, [0x14018e0e0]
call fcn.1400a2fa8
cmp dword [0x14018e0e0], 0xffffffff
jne 0x14000534a
xorps xmm0, xmm0
movdqu xmmword [0x14018e0e8], xmm0
mov qword [0x14018e0f8], r12
lea rcx, [0x1400a9230]
call fcn.1400a3354
lea rcx, [0x14018e0e0]
call fcn.1400a2f3c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov rcx, qword [0x14018e0e8]
mov rdx, qword [0x14018e0f0]
cmp rcx, rdx
je 0x14000537c
call fcn.140007c20
mov rax, qword [0x14018e0e8]
mov qword [0x14018e0f0], rax
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x68], rax
call fcn.1400a23c8
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp + 0x40]
call fcn.140003bc0
mov edi, 0x6000
mov dword [rsp + 0x40], edi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.140007a40
test eax, eax
jne 0x140006a42
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140005421
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000541c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000541c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqa xmm0, xmmword [0x1400b6500]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], r12w
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14000544a
lock inc dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm0
test rcx, rcx
je 0x140005467
lock inc dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r13, 0xffffffffffffffff
test rcx, rcx
je 0x1400054b1
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400054ad
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400054ad
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov r14, qword [rsp + 0x60]
lea rbx, str..cfg
test r14, r14
je 0x1400059eb
lea rdx, [rbp - 0x50]
mov rcx, r14
call fcn.140004ba0
mov rax, qword [rbp - 0x50]
mov edx, dword [rbp - 0x48]
test edx, edx
je 0x1400054ec
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x140006a55
cmp eax, 2
jne 0x14000563a
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 4
call fcn.1400a23c8
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rbp]
call fcn.140003bc0
or edi, 0xc0
or edi, 1
mov dword [rsp + 0x40], edi
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x14000553c
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140003d20
cmp rax, rdx
je 0x14000558c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140005560
cmp cx, 0x2f
jne 0x140005569
add rax, 2
cmp rax, rdx
jne 0x140005551
cmp rax, rdx
je 0x14000558c
nop
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14000558c
cmp cx, 0x2f
je 0x14000558c
mov rbx, r8
cmp rax, r8
jne 0x140005570
mov r8d, 0x3a
mov rcx, rbx
call fcn.1400a2e30
cmp rbx, rax
je 0x1400055d7
lea rcx, [rax - 2]
cmp rbx, rcx
je 0x1400055d7
cmp word [rcx], 0x2e
jne 0x1400055bf
lea rdx, [rcx - 2]
cmp rbx, rdx
jne 0x1400055da
cmp word [rdx], 0x2e
jne 0x1400055da
jmp 0x1400055d7
sub rcx, 2
cmp rbx, rcx
je 0x1400055d7
cmp word [rcx], 0x2e
je 0x1400055da
sub rcx, 2
cmp rbx, rcx
jne 0x1400055c8
mov rcx, rax
mov qword [rbp - 0x20], rcx
sub rax, rcx
sar rax, 1
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x20]
call fcn.140008d50
or edi, 0x22
mov dword [rsp + 0x40], edi
lea rax, [rbp]
mov rbx, qword [rbp + 0x18]
cmp rbx, 7
cmova rax, qword [rbp]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x20]
call fcn.140004070
test eax, eax
jne 0x14000563e
mov sil, 1
jmp 0x140005641
mov rbx, qword [rbp + 0x18]
xor sil, sil
test dil, 2
je 0x1400056a3
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140005692
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005689
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059cf
call fcn.1400a336c
mov rbx, qword [rbp + 0x18]
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
test dil, 1
je 0x1400056ec
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
cmp rbx, 7
jbe 0x1400056ec
lea rdx, [rbx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059d6
call fcn.1400a336c
test sil, sil
je 0x140005920
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x140005704
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rsi, [rcx + rax*2]
mov rbx, rsi
mov rdx, rsi
call fcn.140003d20
cmp rax, rsi
je 0x14000575b
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14000572f
cmp cx, 0x2f
jne 0x140005738
add rax, 2
cmp rax, rsi
jne 0x140005720
cmp rax, rsi
je 0x14000575b
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14000575b
cmp cx, 0x2f
je 0x14000575b
mov rbx, rdx
cmp rax, rdx
jne 0x140005740
mov qword [rbp - 0x60], rbx
sub rsi, rbx
sar rsi, 1
mov qword [rbp - 0x58], rsi
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x20]
call fcn.140008d50
bts edi, 0xc
lea r15, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova r15, qword [rbp + 0x20]
mov rsi, qword [rbp + 0x30]
call fcn.1400a23c8
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xor eax, eax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0xf
mov byte [rbp], al
bts edi, 0xb
mov dword [rsp + 0x40], edi
test rsi, rsi
je 0x14000582f
cmp rsi, 0x7fffffff
ja 0x140006a7a
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1400a2438
mov rbx, rax
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x140006a70
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp]
call fcn.140007760
lea r9, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r9, qword [rbp]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1400a2438
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x140006a66
btr edi, 0xb
or edi, 0x700
mov dword [rsp + 0x40], edi
mov rdx, qword [0x14018e0f0]
cmp rdx, qword [0x14018e0f8]
je 0x140005888
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor r12d, r12d
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], r12
movups xmm0, xmmword [rbp]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp + 0x10], r12
mov edx, 0xf
mov qword [rbp + 0x18], rdx
mov byte [rbp], r12b
add qword [0x14018e0f0], 0x20
jmp 0x140005898
lea r8, [rbp]
call fcn.140009030
mov rdx, qword [rbp + 0x18]
xor r12d, r12d
cmp rdx, 0xf
jbe 0x1400058cf
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059dd
call fcn.1400a336c
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140005920
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000591a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059e4
call fcn.1400a336c
nop
lea rdx, [rbp + 0x80]
mov rcx, qword [r14 + 0x40]
call fcn.1400a26a0
cmp eax, 0x12
je 0x140005974
test eax, eax
jne 0x140006a3a
cmp word [rbp + 0xac], 0x2e
jne 0x140005963
movzx eax, word [rbp + 0xae]
test ax, ax
je 0x140005920
cmp ax, 0x2e
jne 0x140005963
cmp word [rbp + 0xb0], 0
je 0x140005920
lea rdx, [rbp + 0x80]
mov rcx, r14
call fcn.140004f00
jmp 0x1400059bf
mov r14, r12
mov qword [rsp + 0x60], r12
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x68], r12
test rbx, rbx
je 0x1400059bf
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400059b6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400059b6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov r14, qword [rsp + 0x60]
mov eax, r12d
test eax, eax
jne 0x140006a3a
jmp 0x1400054b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140005a28
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140005a28
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140005a28
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140005a64
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140005a64
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140005a64
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 8]
mov rsi, qword [0x14018e0f0]
mov rdi, qword [0x14018e0e8]
mov rbx, qword [rbp - 0x78]
cmp rdi, rsi
je 0x140005ac3
nop dword [rax + rax]
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140005a8d
mov rax, qword [rdi]
mov qword [rsp + 0x50], rax
cmp rbx, qword [rbp - 0x70]
je 0x140005aa5
mov qword [rbx], rax
add rbx, 8
mov qword [rbp - 0x78], rbx
jmp 0x140005aba
lea r8, [rsp + 0x50]
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140008e90
mov rbx, qword [rbp - 0x78]
add rdi, 0x20
cmp rdi, rsi
jne 0x140005a80
mov r10, qword [0x14018df08]
mov rax, qword [r10 + 0x3ef8]
movss xmm0, dword [rax + 0x100]
movaps xmm9, xmm0
subss xmm9, dword [rax + 0x20]
addss xmm9, dword [rax + 0x84]
mov r9, qword [rax + 0x1a8]
test r9, r9
jne 0x140005b1c
movss xmm6, dword [rax + 0x250]
cmp r9, r9
jne 0x140005b0e
cmp qword [r10 + 0x4b58], r9
je 0x140005b16
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
jmp 0x140005b4c
movsxd rdx, dword [r9 + 0xc]
mov r8, qword [r9 + 0x68]
lea rax, [rdx + 1]
imul rcx, rax, 0x1c
imul rax, rdx, 0x1c
movss xmm6, dword [rcx + r8]
subss xmm6, dword [rax + r8]
movss xmm0, dword [r9 + 0x18]
subss xmm0, dword [r9 + 0x14]
mulss xmm6, xmm0
subss xmm6, dword [r10 + 0x381c]
subss xmm6, dword [0x1400b63a0]
mov rax, qword [r10 + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400b63a4]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400b6398]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [r10 + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ef8]
movaps xmm7, xmm9
movss xmm11, dword [0x1400b6384]
addss xmm7, xmm11
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov rcx, qword [0x14018de40]
call fcn.14007c6b0
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
movss dword [rcx + 0x4784], xmm6
mov r15, qword [rbp - 0x80]
sub rbx, r15
sar rbx, 3
mov dword [rsp + 0x20], ebx
mov r9, r15
call fcn.14008c350
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x40], 0x42fc0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
mov rcx, qword [0x14018de48]
call fcn.14007cef0
movdqa xmm8, xmmword [0x1400b6520]
test al, al
je 0x140005d65
movsxd rax, dword [0x1400ca0c4]
test eax, eax
js 0x140005d65
mov rdx, rax
mov rax, qword [0x14018e0f0]
mov rcx, qword [0x14018e0e8]
sub rax, rcx
sar rax, 5
cmp rdx, rax
jae 0x140005d65
shl rdx, 5
add rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.140007420
nop
lea rcx, [rbp + 0x20]
call fcn.14000d650
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140005d5b
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d56
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqu xmmword [rbp + 0x30], xmm8
mov byte [rbp + 0x20], 0
mov rax, qword [0x14018df08]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140005dc7
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rsp + 0x40], 0x42fc0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
mov rcx, qword [0x14018de68]
call fcn.14007cef0
test al, al
je 0x140005ee0
movsxd rax, dword [0x1400ca0c4]
test eax, eax
js 0x140005ee0
mov rdx, rax
mov rax, qword [0x14018e0f0]
mov rcx, qword [0x14018e0e8]
sub rax, rcx
sar rax, 5
cmp rdx, rax
jae 0x140005ee0
shl rdx, 5
add rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.140007420
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movdqu xmmword [rbp + 0x50], xmm8
mov byte [rbp + 0x40], 0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14000a850
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140005e8e
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005e89
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqu xmmword [rbp + 0x50], xmm8
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140005ed6
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ed1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ed1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqu xmmword [rbp + 0x30], xmm8
mov byte [rbp + 0x20], 0
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x40], 0x42fc0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
mov rcx, qword [0x14018de50]
call fcn.14007cef0
test al, al
je 0x140005fe2
movsxd rax, dword [0x1400ca0c4]
test eax, eax
js 0x140005fe2
mov rcx, qword [0x14018e0f0]
sub rcx, qword [0x14018e0e8]
sar rcx, 5
cmp rax, rcx
jae 0x140005fe2
mov rsi, qword [0x14018df08]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140048690
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140005fba
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140061360
test byte [rsi + 0x5ce4], 4
je 0x140005fd9
mov r8d, edi
lea rdx, str.reallyDelete
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.140060f80
xor edx, edx
mov ecx, edi
call fcn.14005a030
mov rbx, qword [0x14018df08]
mov eax, dword [rbx + 0x48b0]
xorps xmm10, xmm10
cmp dword [rbx + 0x48a0], eax
jg 0x140006007
mov dword [rbx + 0x47d0], r12d
jmp 0x140006418
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140048690
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x14000604f
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140061360
mov ecx, edi
call fcn.14005a540
test al, al
je 0x140006418
xor edx, edx
mov r8d, 1
lea rcx, str.Are_you_sure_
call fcn.14007bd10
mov qword [rsp + 0x40], 0x42340000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400aaed8]
call fcn.14007cef0
test al, al
je 0x140006095
call fcn.14005a460
mov rax, qword [0x14018df08]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400060f7
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov qword [rsp + 0x40], 0x42340000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400aaedc]
call fcn.14007cef0
test al, al
je 0x1400063c1
movsxd rdx, dword [0x1400ca0c4]
shl rdx, 5
add rdx, qword [0x14018e0e8]
lea rcx, [rbp + 0x20]
call fcn.140007420
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x70]
sub rax, rcx
cmp rax, 1
jb 0x140006a34
lea r9, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r9, qword [rbp + 0x60]
mov qword [rsp + 0x30], 1
lea rax, [0x1400aaee0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x40]
call fcn.140008c00
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1400077f0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140006208
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006203
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006203
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqu xmmword [rbp + 0x50], xmm8
mov byte [rbp + 0x40], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rcx, qword [rbp]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x14000632e
movsxd rbx, dword [0x1400ca0c4]
shl rbx, 5
add rbx, qword [0x14018e0e8]
mov r14, qword [0x14018e0f0]
lea rax, [rbx + 0x20]
cmp rax, r14
je 0x1400062d7
add rbx, 0x38
nop dword [rax + rax]
lea rsi, [rbx - 0x18]
lea rdi, [rbx - 0x38]
cmp rdi, rsi
je 0x1400062c3
mov rdx, qword [rbx - 0x20]
cmp rdx, 0xf
jbe 0x1400062a7
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400062a2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000636d
mov rcx, r8
call fcn.1400a336c
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx - 8], r12
mov qword [rbx], 0xf
mov byte [rsi], 0
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, r14
jne 0x140006260
mov r14, qword [0x14018e0f0]
mov rdx, qword [r14 - 8]
cmp rdx, 0xf
jbe 0x14000630e
mov rcx, qword [r14 - 0x20]
inc rdx
cmp rdx, 0x1000
jb 0x140006309
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000636d
mov rcx, r8
call fcn.1400a336c
mov qword [r14 - 0x10], r12
mov qword [r14 - 8], 0xf
mov byte [r14 - 0x20], 0
sub qword [0x14018e0f0], 0x20
mov dword [0x1400ca0c4], r13d
call fcn.14005a460
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140006379
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006374
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006374
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a336c
movdqu xmmword [rbp + 0x10], xmm8
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400063c1
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
mov rbx, qword [0x14018df08]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x1400063fc
cmp byte [rbx + 0x4951], 0
je 0x1400063fc
cmp dword [rbx + 0x4910], 0
jne 0x1400063fc
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x14000640c
mov byte [rbx + 0x3e5e], 1
call fcn.1400557a0
mov byte [rbx + 0x3e5e], 0
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov r9, qword [rcx + 0x3ef8]
movss xmm7, dword [0x1400b6494]
cmp byte [r9 + 0xbb], 0
jne 0x1400064a4
mov r10d, dword [r9 + 0x1b4]
mov dword [r9 + 0x1b4], 1
mov byte [r9 + 0x140], 0
movss xmm0, dword [r9 + 0x12c]
movaps xmm1, xmm7
comiss xmm0, xmm10
jbe 0x14000647d
mov qword [rsp + 0x40], 0
jmp 0x140006493
movss xmm0, dword [rcx + 0x3c20]
mov dword [rsp + 0x40], 0
movss dword [rsp + 0x44], xmm0
lea rcx, [rsp + 0x40]
call fcn.140058ca0
mov dword [r9 + 0x1b4], r10d
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm9
addss xmm0, xmm11
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm9
addss xmm0, xmm11
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
mov rcx, qword [0x14018de70]
call fcn.14007c6b0
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm9
addss xmm0, xmm11
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
addss xmm6, dword [0x1400b637c]
movss dword [rcx + 0x4784], xmm6
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm9
addss xmm0, xmm11
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm9
addss xmm0, xmm11
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
movss dword [rcx + 0x4784], xmm6
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea rbx, str.NewConfig
mov r8, rbx
xor edx, edx
lea rcx, str.CFGNameInput
call fcn.140083af0
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov r9, qword [rcx + 0x3ef8]
cmp byte [r9 + 0xbb], 0
jne 0x1400066de
mov r10d, dword [r9 + 0x1b4]
mov dword [r9 + 0x1b4], 1
mov byte [r9 + 0x140], 0
movss xmm0, dword [r9 + 0x12c]
movaps xmm1, xmm7
comiss xmm0, xmm10
jbe 0x1400066b7
mov qword [rsp + 0x50], 0
jmp 0x1400066cd
movss xmm0, dword [rcx + 0x3c20]
mov dword [rsp + 0x50], 0
movss dword [rsp + 0x54], xmm0
lea rcx, [rsp + 0x50]
call fcn.140058ca0
mov dword [r9 + 0x1b4], r10d
mov rcx, qword [0x14018df08]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm9, xmm11
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x50], 0x42fc0000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
mov rcx, qword [0x14018de58]
call fcn.14007cef0
test al, al
je 0x1400068aa
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
nop dword [rax + rax]
inc r13
cmp byte [rbx + r13], 0
jne 0x140006760
mov r8, r13
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.1400082c0
nop
mov r8d, 4
lea rdx, str..cfg
lea rcx, [rbp + 0x20]
call fcn.1400077f0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400067fb
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400067f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movdqu xmmword [rbp + 0x50], xmm8
mov byte [rbp + 0x40], 0
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.14000a850
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140006858
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006853
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006853
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqu xmmword [rbp + 0x50], xmm8
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400068a0
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000689b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000689b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
movdqu xmmword [rbp + 0x10], xmm8
mov byte [rbp], 0
mov rax, qword [0x14018df08]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x14000690c
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rsp + 0x50], 0x42fc0000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
mov rcx, qword [0x14018de60]
call fcn.14007cef0
test al, al
je 0x14000695f
lea r8, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r8, qword [rbp + 0x60]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
test r15, r15
je 0x1400069a8
mov rax, qword [rbp - 0x70]
sub rax, r15
sar rax, 3
lea rdx, [rax*8]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000699f
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000699f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400a336c
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400069e6
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400069e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a336c
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.1400a2ee0
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400034a0
nop
mov edx, eax
call fcn.140004a40
nop
lea r8, [rbp + 0x40]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140004b30
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.140004b30
nop
mov ecx, dword [rsp + 0x54]
call fcn.140003b70
int3
mov ecx, dword [rsp + 0x54]
call fcn.140003b70
int3
call fcn.1400038b0
int3