Function at 0x140012310
Capabilities:
Encode data using xor
Execute command
Hash data using fnv
Self delete

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4c0]
sub rsp, 0x5c0
mov rax, qword [0x140035040]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
xor r15d, r15d
mov r12d, r15d
mov dword [rsp + 0x50], r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4a0], xmm1
lea r8d, [r15 + 0x55]
lea rdx, str.fsutil_usn_readjournal_c:_csv__findstr__i__c:0x80000200__c:0x00001000____journal.txt
lea rcx, [rbp + 0x490]
call fcn.14000bdd0
nop
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 7
cmova rcx, qword [rbp + 0x490]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wsystem]
test eax, eax
jne 0x140013ebe
mov dword [rsp + 0x60], eax
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea ecx, [rax + 0x30]
call fcn.140025d20
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], r15
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x68], 8
mov dword [rsp + 0x60], 0x3f800000
mov r8, rax
lea edx, [r15 + 0x10]
lea rcx, [rsp + 0x78]
call fcn.14000d490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x470], xmm0
mov qword [rbp + 0x480], r15
mov qword [rbp + 0x488], 7
mov word [rbp + 0x470], r15w
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x448], 7
mov word [rbp + 0x430], r15w
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [r15 + 1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._CSRSS_Scanner__Siga_a_instru
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [r15 + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Salve_as_strings_do_processo__csrss.exe__com_MAIS_bytes_usando_o_System_Informer_e_salve_os_resultados_em_qualquer_diret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3e0], xmm1
lea r8d, [r15 + 0x62]
lea rdx, [0x14002b120]
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
nop
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x3f0]
call fcn.140011e00
mov rbx, rax
lea rax, [rbp + 0x470]
cmp rax, rbx
je 0x140012571
mov rdx, qword [rbp + 0x488]
cmp rdx, 7
jbe 0x140012532
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001252d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400125ae
call fcn.140025d64
mov qword [rbp + 0x480], r15
mov qword [rbp + 0x488], 7
mov word [rbp + 0x470], r15w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x470], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x480], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x408]
cmp rdx, 7
jbe 0x1400125ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400125b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400125b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
movdqa xmm0, xmmword [0x14002bff0]
movdqu xmmword [rbp + 0x400], xmm0
mov word [rbp + 0x3f0], r15w
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 7
jbe 0x14001261b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012616
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012616
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
cmp qword [rbp + 0x480], 0
je 0x140013d87
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._CSRSS_Scanner__Siga_a_segunda_instru
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Salve_as_strings_do_processo__csrss.exe__com_MENOS_bytes_usando_o_System_Informer_e_salve_os_resultados_em_qualquer_diret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3e0], xmm1
mov r8d, 0x62
lea rdx, [0x14002b120]
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
nop
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x3f0]
call fcn.140011e00
mov rbx, rax
lea rax, [rbp + 0x430]
cmp rax, rbx
je 0x14001272a
mov r8, qword [rbp + 0x448]
cmp r8, 7
jbe 0x1400126eb
mov rdx, qword [rbp + 0x430]
call fcn.140002da0
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x448], 7
mov word [rbp + 0x430], r15w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x430], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x440], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
lea rcx, [rbp + 0x3f0]
call fcn.1400028a0
nop
mov r8, qword [rbp + 0x3e8]
cmp r8, 7
jbe 0x140012750
mov rdx, qword [rbp + 0x3d0]
call fcn.140002da0
cmp qword [rbp + 0x440], 0
je 0x140013d87
lea rdx, [rbp + 0x470]
cmp qword [rbp + 0x488], 7
cmova rdx, qword [rbp + 0x470]
lea rcx, [rbp + 0x2a0]
call fcn.1400149c0
nop
lea rdx, [rbp + 0x430]
cmp qword [rbp + 0x448], 7
cmova rdx, qword [rbp + 0x430]
lea rcx, [rbp + 0x190]
call fcn.1400149c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3e0], xmm1
mov r8d, 0xb
lea rdx, str.journal.txt
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
nop
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0xc0]
call fcn.140011b70
nop
lea rcx, [rbp + 0x3d0]
call fcn.1400028a0
lea rdx, str.___._.exe.dll.dll...config.exe.config____A_Z_:...
lea rcx, [rbp + 0x90]
call fcn.140013fb0
nop
lea rdx, str._A_Za_z_:._.dll
lea rcx, [rbp + 0x68]
call fcn.140013fb0
nop
lea rdx, str._A_Za_z_:._.exe
lea rcx, [rbp + 0x40]
call fcn.140013fb0
nop
lea rdx, str._A_Za_z_:__:_.___.__
lea rcx, [rbp + 0x18]
call fcn.140013fb0
nop
lea rdx, str.____:_.___.__
lea rcx, [rbp - 0x10]
call fcn.140013fb0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x450], xmm0
mov qword [rbp + 0x460], r15
mov qword [rbp + 0x468], 7
mov word [rbp + 0x450], r15w
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2a0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x2a0]
call fcn.140015e20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movabs rbx, 0xcbf29ce484222325
movabs r13, 0x100000001b3
test al, al
je 0x140013677
mov rdx, qword [rbp + 0x460]
cmp rdx, 0x190
ja 0x140013621
lea r8, [rbp + 0x450]
cmp qword [rbp + 0x468], 7
seta r10b
mov r9, qword [rbp + 0x450]
cmova r8, r9
test rdx, rdx
je 0x140013621
mov rax, rdx
mov rcx, r8
mov rbx, r15
cmp word [r8], 0x3a
je 0x140012933
nop dword [rax]
cmp rax, 1
je 0x140012936
dec rax
add rcx, 2
cmp word [rcx], 0x3a
jne 0x140012920
mov rbx, rcx
test rbx, rbx
je 0x140013621
sub rbx, r8
sar rbx, 1
cmp rbx, 0xffffffffffffffff
je 0x140013621
lea rcx, [rbx + 2]
cmp rcx, rdx
jae 0x140013621
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], r15
mov qword [rbp + 0x3c8], r15
ja 0x140013f87
sub rdx, rcx
mov r8, 0xffffffffffffffff
cmp rdx, r8
cmovb r8, rdx
lea rax, [rbp + 0x450]
test r10b, r10b
cmovne rax, r9
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x3b0]
call fcn.14000bdd0
or r12d, 8
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rcx, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3c0]
lea rdx, [rcx + rax*2]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp + 0x90]
call fcn.140015fe0
test al, al
je 0x140012eb0
lea r8, [rbp + 0x3b0]
mov r14, qword [rbp + 0x3c8]
cmp r14, 7
seta r11b
mov rsi, qword [rbp + 0x3b0]
cmova r8, rsi
movabs rdx, 0xcbf29ce484222325
mov rdi, qword [rbp + 0x3c0]
lea r9, [rdi + rdi]
mov rcx, r15
test r9, r9
je 0x140012a44
nop dword [rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r13
inc rcx
cmp rcx, r9
jb 0x140012a30
mov rax, qword [rbp - 0x70]
and rax, rdx
add rax, rax
mov rcx, qword [rsp + 0x78]
mov r9, qword [rcx + rax*8 + 8]
mov rbx, qword [rsp + 0x68]
cmp r9, rbx
je 0x140012ac1
mov r10, qword [rcx + rax*8]
nop word [rax + rax]
lea rcx, [r9 + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 7
jbe 0x140012a82
mov rcx, qword [rcx]
lea r8, [rbp + 0x3b0]
test r11b, r11b
cmovne r8, rsi
cmp rdi, rax
jne 0x140012ab6
mov rdx, rdi
test rdi, rdi
je 0x140012ac4
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140012ab6
add rcx, 2
sub rdx, 1
jne 0x140012aa0
jmp 0x140012ac4
cmp r9, r10
je 0x140012ac1
mov r9, qword [r9 + 8]
jmp 0x140012a70
mov r9, r15
mov rax, rbx
test r9, r9
cmovne rax, r9
cmp rax, rbx
jne 0x140012c7d
lea rdx, [rbp + 0x3b0]
test r11b, r11b
cmovne rdx, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3e8], r15
mov r8, rdi
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
or r12d, 0x18000
lea rcx, [rbp + 0x3d0]
call fcn.14000f460
movzx ebx, al
mov r8, qword [rbp + 0x3e8]
cmp r8, 7
jbe 0x140012b3b
mov rdx, qword [rbp + 0x3d0]
call fcn.140002da0
mov r14, qword [rbp + 0x3c8]
mov rsi, qword [rbp + 0x3b0]
mov rdi, qword [rbp + 0x3c0]
test bl, bl
jne 0x140012c7d
lea rcx, [rbp + 0x3b0]
cmp r14, 7
seta bl
cmova rcx, rsi
mov qword [rsp + 0x20], 3
lea r9, [0x14002b4f0]
xor r8d, r8d
mov rdx, rdi
call fcn.14000bce0
cmp rax, 0xffffffffffffffff
jne 0x140012bb9
lea rcx, [rbp + 0x3b0]
test bl, bl
cmovne rcx, rsi
mov qword [rsp + 0x20], 3
lea r9, [0x14002b4f8]
xor r8d, r8d
mov rdx, rdi
call fcn.14000bce0
cmp rax, 0xffffffffffffffff
je 0x140012c1f
lea rdx, [rbp + 0x3b0]
test bl, bl
cmovne rdx, rsi
movabs r9, 0xcbf29ce484222325
lea r8, [rdi + rdi]
mov rcx, r15
test r8, r8
je 0x140012bf3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x140012be0
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xc0]
call fcn.14000e460
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x140012c7d
cmp rcx, qword [rbp + 0xc8]
je 0x140012c7d
lea rdx, str.___Executado__Deletado_com_extens
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
mov r8, qword [rbp + 0x3c0]
cmova rdx, qword [rbp + 0x3b0]
mov rcx, rax
call fcn.14000c300
lea rdx, [0x14000bad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rsi, qword [rbp + 0x3b0]
mov rdi, qword [rbp + 0x3c0]
mov r14, qword [rbp + 0x3c8]
lea rdx, [rbp + 0x3b0]
cmp r14, 7
cmova rdx, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8, rdi
lea rcx, [rbp + 0x3f0]
call fcn.14000bdd0
or r12d, 0x600
or r12d, 1
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 7
cmova rcx, qword [rbp + 0x3f0]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x3d0]
call fcn.14002540c
mov r8d, eax
test eax, eax
jne 0x140012d48
mov edx, dword [rbp + 0x3e0]
test dl, 1
mov ecx, 0x1ff
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x44], ecx
bt edx, 0xa
jae 0x140012d3a
mov eax, dword [rbp + 0x3e4]
cmp eax, 0xa000000c
jne 0x140012d2c
lea eax, [r8 + 4]
jmp 0x140012d6c
cmp eax, 0xa0000003
jne 0x140012d3a
mov eax, 0xa
jmp 0x140012d6c
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140012d6c
mov dword [rsp + 0x44], 0xffff
sub eax, 2
je 0x140012d67
sub eax, 1
je 0x140012d67
sub eax, 0x32
je 0x140012d67
cmp eax, 0x46
mov eax, r15d
jne 0x140012d6c
mov eax, 1
mov dword [rbp - 0x50], r8d
lea rcx, [0x1400350b8]
mov qword [rbp - 0x48], rcx
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x40], xmm0
test eax, eax
je 0x140012dcd
cmp eax, 1
je 0x140012dd6
mov dword [rsp + 0x30], r15d
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rcx, qword [rbp + 0x3b0]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
test eax, eax
je 0x140012dd6
lea rdx, [rbp + 0x3b0]
call fcn.140024410
test al, al
jne 0x140012dd6
mov bl, 1
jmp 0x140012dd8
test r8d, r8d
jne 0x140013f4f
xor bl, bl
test r12b, 1
je 0x140012dfb
and r12d, 0xfffffffe
mov r8, qword [rbp + 0x408]
cmp r8, 7
jbe 0x140012dfb
mov rdx, qword [rbp + 0x3f0]
call fcn.140002da0
test bl, bl
je 0x140012e48
lea rdx, str.___Executado__Sem_assinatura_com_extens
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
mov r8, qword [rbp + 0x3c0]
mov rcx, rax
call fcn.14000c300
lea rdx, [0x14000bad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x60]
call fcn.140015650
nop
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 7
jbe 0x140013621
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012ea6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013750
call fcn.140025d64
jmp 0x140013621
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rcx, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3c0]
lea rdx, [rcx + rax*2]
mov r13, rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x20], 0x10
lea r9, [rbp + 0x68]
call fcn.140015fe0
mov rdi, qword [rbp + 0x3c8]
mov r14, qword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3b0]
test al, al
je 0x1400130a1
lea rdx, [rbp + 0x3b0]
cmp rdi, 7
seta r15b
cmova rdx, rsi
movabs r9, 0xcbf29ce484222325
lea r8, [r14 + r14]
xor ecx, ecx
mov qword [rsp + 0x30], rbx
test r8, r8
je 0x140012f63
mov qword [rsp + 0x30], rbx
movabs r10, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140012f50
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x60]
call fcn.14000e460
mov rcx, qword [rax + 8]
mov rax, qword [rsp + 0x68]
test rcx, rcx
cmovne rax, rcx
cmp rax, qword [rsp + 0x68]
jne 0x14001309e
lea rdx, [rbp + 0x3b0]
test r15b, r15b
cmovne rdx, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xor r15d, r15d
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3e8], r15
mov r8, r14
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
or r12d, 0x600000
lea rcx, [rbp + 0x3d0]
call fcn.14000f460
movzx ebx, al
mov r8, qword [rbp + 0x3e8]
cmp r8, 7
jbe 0x140012ffd
mov rdx, qword [rbp + 0x3d0]
call fcn.140002da0
test bl, bl
je 0x14001301a
lea rdx, [rbp + 0x3b0]
call fcn.140024410
test al, al
jne 0x140013063
lea rdx, str.___Executado__Sem_Assinatura:
jmp 0x140013021
lea rdx, [0x14002b638]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
mov r8, qword [rbp + 0x3c0]
cmova rdx, qword [rbp + 0x3b0]
mov rcx, rax
call fcn.14000c300
lea rdx, [0x14000bad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x60]
call fcn.140015650
nop
mov r8, qword [rbp + 0x3c8]
cmp r8, 7
jbe 0x140013617
mov rdx, qword [rbp + 0x3b0]
call fcn.140002da0
jmp 0x140013617
xor r15d, r15d
lea rcx, [rbp + 0x3b0]
cmp rdi, 7
cmova rcx, rsi
lea rdx, [rcx + r14*2]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp + 0x18]
call fcn.140015fe0
test al, al
jne 0x140013104
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rcx, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3c0]
lea rdx, [rcx + rax*2]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp - 0x10]
call fcn.140015fe0
test al, al
je 0x14001307c
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3e8], r15
mov r8, qword [rbp + 0x3c0]
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
or r12d, 0x6000
or r12d, 2
mov dword [rsp + 0x50], r12d
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x100]
call fcn.14000f4d0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x40], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rbp - 0x40]
test edx, edx
je 0x14001318a
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140013f61
cmp ecx, 3
je 0x1400131f5
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8, qword [rbp + 0x3c0]
lea rcx, [rbp + 0x3f0]
call fcn.14000bdd0
or r12d, 0x180000
or r12d, 4
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3f0]
call fcn.14000f460
test al, al
je 0x1400131f5
mov bl, 1
jmp 0x1400131f7
xor bl, bl
test r12b, 4
je 0x140013234
and r12d, 0xfffffffb
mov r8, qword [rbp + 0x408]
cmp r8, 7
jbe 0x14001321a
mov rdx, qword [rbp + 0x3f0]
call fcn.140002da0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], 7
mov word [rbp + 0x3f0], r15w
test r12b, 2
je 0x140013257
and r12d, 0xfffffffd
mov r8, qword [rbp + 0x3e8]
cmp r8, 7
jbe 0x140013257
mov rdx, qword [rbp + 0x3d0]
call fcn.140002da0
movabs r14, 0xcbf29ce484222325
test bl, bl
je 0x140013330
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
mov r9, r14
mov rax, qword [rbp + 0x3c0]
lea r8, [rax + rax]
mov rcx, r15
test r8, r8
je 0x1400132b8
movabs r13, 0x100000001b3
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x1400132a0
mov r13, qword [rsp + 0x30]
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x60]
call fcn.14000e460
mov rcx, qword [rax + 8]
mov rax, qword [rsp + 0x68]
test rcx, rcx
cmovne rax, rcx
cmp rax, qword [rsp + 0x68]
jne 0x140013330
lea rdx, str.___Executado_sem_extens
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
mov r8, qword [rbp + 0x3c0]
mov rcx, rax
call fcn.14000c300
lea rdx, [0x14000bad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3e8], r15
mov r8, qword [rbp + 0x3c0]
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
or r12d, 0x1800
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x110]
call fcn.14000f4d0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp - 0x60], ecx
lea rax, [0x1400350b8]
mov qword [rbp - 0x58], rax
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x40], xmm0
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1400133bf
cmp eax, 1
sete bl
jmp 0x1400133c9
mov bl, 1
test ecx, ecx
jne 0x140013f75
mov r8, qword [rbp + 0x3e8]
cmp r8, 7
jbe 0x1400133e2
mov rdx, qword [rbp + 0x3d0]
call fcn.140002da0
test bl, bl
je 0x1400135bb
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
seta sil
mov rdi, qword [rbp + 0x3b0]
cmova rcx, rdi
mov qword [rsp + 0x20], 3
lea r9, [0x14002b4f0]
xor r8d, r8d
mov rbx, qword [rbp + 0x3c0]
mov rdx, rbx
call fcn.14000bce0
cmp rax, 0xffffffffffffffff
jne 0x140013498
lea rcx, [rbp + 0x3b0]
test sil, sil
cmovne rcx, rdi
mov qword [rsp + 0x20], 3
lea r9, [0x14002b4f8]
xor r8d, r8d
mov rdx, rbx
call fcn.14000bce0
cmp rax, 0xffffffffffffffff
jne 0x140013498
lea rcx, [rbp + 0x3b0]
test sil, sil
cmovne rcx, rdi
lea r8, [r13 + 1]
mov qword [rsp + 0x20], 1
lea r9, [0x14002a474]
mov rdx, rbx
call fcn.14000bce0
cmp rax, 0xffffffffffffffff
je 0x1400135bb
jmp 0x140013572
lea rdx, [rbp + 0x3b0]
test sil, sil
cmovne rdx, rdi
mov r9, r14
add rbx, rbx
mov rcx, r15
movabs r14, 0x100000001b3
je 0x1400134d3
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r14
inc rcx
cmp rcx, rbx
jb 0x1400134c0
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0xc0]
call fcn.14000e460
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1400135bb
cmp rcx, qword [rbp + 0xc8]
je 0x1400135bb
lea rdx, [rbp + 0x3b0]
test sil, sil
cmovne rdx, rdi
movabs r9, 0xcbf29ce484222325
mov rcx, r15
test rbx, rbx
je 0x140013543
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r14
inc rcx
cmp rcx, rbx
jb 0x140013530
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x60]
call fcn.14000e460
mov rcx, qword [rax + 8]
mov rax, qword [rsp + 0x68]
test rcx, rcx
cmovne rax, rcx
cmp rax, qword [rsp + 0x68]
jne 0x1400135bb
lea rdx, str.___Executado__Deletado_sem_extens
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
mov r8, qword [rbp + 0x3c0]
cmova rdx, qword [rbp + 0x3b0]
mov rcx, rax
call fcn.14000c300
lea rdx, [0x14000bad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea r8, [rbp + 0x3b0]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x60]
call fcn.140015650
nop
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 7
jbe 0x140013617
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013612
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013750
call fcn.140025d64
movabs r13, 0x100000001b3
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2a0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x2a0]
call fcn.140015e20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x1400128d1
movabs rbx, 0xcbf29ce484222325
lea rcx, [rbp + 0x2b0]
call fcn.140015080
test rax, rax
jne 0x1400136aa
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2a0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8d, 0xb
lea rdx, str.journal.txt
lea rcx, [rbp + 0x3f0]
call fcn.14000bdd0
or r12d, 0x60
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 7
cmova rcx, qword [rbp + 0x3f0]
call fcn.14002578c
mov qword [rsp + 0x30], rax
shr rax, 0x20
test eax, eax
jne 0x140013f37
mov rdx, qword [rbp + 0x408]
cmp rdx, 7
jbe 0x14001375c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013757
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013757
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x190]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x190]
call fcn.140015e20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x140013b4c
nop dword [rax + rax]
mov r9, qword [rbp + 0x460]
cmp r9, 0x190
ja 0x140013af5
lea r8, [rbp + 0x450]
cmp qword [rbp + 0x468], 7
seta r11b
mov r10, qword [rbp + 0x450]
cmova r8, r10
test r9, r9
je 0x140013af5
mov rax, r9
mov rcx, r8
mov rdx, r15
cmp word [r8], 0x3a
je 0x140013813
nop dword [rax + rax]
cmp rax, 1
je 0x140013816
dec rax
add rcx, 2
cmp word [rcx], 0x3a
jne 0x140013800
mov rdx, rcx
test rdx, rdx
je 0x140013af5
sub rdx, r8
sar rdx, 1
cmp rdx, 0xffffffffffffffff
je 0x140013af5
add rdx, 2
cmp rdx, r9
jae 0x140013af5
xorps xmm0, xmm0
movups xmmword [rbp + 0x410], xmm0
mov qword [rbp + 0x420], r15
mov qword [rbp + 0x428], r15
ja 0x140013f8d
sub r9, rdx
mov r8, 0xffffffffffffffff
cmp r9, r8
cmovb r8, r9
lea rax, [rbp + 0x450]
test r11b, r11b
cmovne rax, r10
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x410]
call fcn.14000bdd0
or r12d, 0x10
lea rcx, [rbp + 0x410]
cmp qword [rbp + 0x428], 7
cmova rcx, qword [rbp + 0x410]
mov rax, qword [rbp + 0x420]
lea rdx, [rcx + rax*2]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp + 0x40]
call fcn.140015fe0
mov rsi, qword [rbp + 0x428]
mov r11, qword [rbp + 0x410]
test al, al
je 0x140013abe
lea r8, [rbp + 0x410]
cmp rsi, 7
seta dil
cmova r8, r11
mov rcx, rbx
mov r10, qword [rbp + 0x420]
lea r9, [r10 + r10]
mov rdx, r15
test r9, r9
je 0x140013914
nop
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r13
inc rdx
cmp rdx, r9
jb 0x140013900
and rcx, qword [rbp - 0x70]
add rcx, rcx
mov rax, qword [rsp + 0x78]
mov r9, qword [rax + rcx*8 + 8]
mov r14, qword [rsp + 0x68]
cmp r9, r14
je 0x140013991
mov rbx, qword [rax + rcx*8]
nop dword [rax]
nop word [rax + rax]
lea rcx, [r9 + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 7
jbe 0x140013952
mov rcx, qword [rcx]
lea r8, [rbp + 0x410]
test dil, dil
cmovne r8, r11
cmp r10, rax
jne 0x140013986
mov rdx, r10
test r10, r10
je 0x140013994
sub r8, rcx
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140013986
add rcx, 2
sub rdx, 1
jne 0x140013970
jmp 0x140013994
cmp r9, rbx
je 0x140013991
mov r9, qword [r9 + 8]
jmp 0x140013940
mov r9, r15
mov rax, r14
test r9, r9
cmovne rax, r9
cmp rax, r14
jne 0x140013abe
lea rdx, [rbp + 0x410]
test dil, dil
cmovne rdx, r11
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3e8], r15
mov r8, r10
lea rcx, [rbp + 0x3d0]
call fcn.14000bdd0
or r12d, 0x60000
lea rcx, [rbp + 0x3d0]
call fcn.14000f460
movzx ebx, al
lea rcx, [rbp + 0x3d0]
call fcn.1400028a0
test bl, bl
je 0x140013a1b
lea rdx, [rbp + 0x410]
call fcn.140024410
test al, al
jne 0x140013a64
lea rdx, str.___Executado__Sem_Assinatura:
jmp 0x140013a22
lea rdx, [0x14002b638]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b8f0
lea rdx, [rbp + 0x410]
cmp qword [rbp + 0x428], 7
mov r8, qword [rbp + 0x420]
cmova rdx, qword [rbp + 0x410]
mov rcx, rax
call fcn.14000c300
lea rdx, [0x14000bad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea r8, [rbp + 0x410]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x60]
call fcn.140015650
nop
mov rdx, qword [rbp + 0x428]
cmp rdx, 7
jbe 0x140013af5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013af0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013af0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rsi, 7
jbe 0x140013af5
lea rdx, [rsi*2 + 2]
mov rax, r11
cmp rdx, 0x1000
jb 0x140013aed
add rdx, 0x27
mov r11, qword [r11 - 8]
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ab7
mov rcx, r11
call fcn.140025d64
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x190]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x190]
call fcn.140015e20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x140013b4c
movabs rbx, 0xcbf29ce484222325
jmp 0x1400137b0
lea rcx, [rbp + 0x1a0]
call fcn.140015080
test rax, rax
jne 0x140013b7f
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x190]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
lea rdx, [rbp + 0x430]
cmp qword [rbp + 0x448], 7
cmova rdx, qword [rbp + 0x430]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8, qword [rbp + 0x440]
lea rcx, [rbp + 0x3f0]
call fcn.14000bdd0
nop
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 7
cmova rcx, qword [rbp + 0x3f0]
call fcn.14002578c
mov qword [rsp + 0x30], rax
shr rax, 0x20
test eax, eax
jne 0x140013f93
mov rdx, qword [rbp + 0x408]
cmp rdx, 7
jbe 0x140013c39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013c33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013c33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
nop
mov r8, qword [rbp + 0x468]
cmp r8, 7
jbe 0x140013c52
mov rdx, qword [rbp + 0x450]
call fcn.140002da0
mov qword [rbp + 0x460], r15
mov qword [rbp + 0x468], 7
mov word [rbp + 0x450], r15w
lea rcx, [rbp - 0x10]
call fcn.140002b10
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140013c9b
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140013c9b
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
lea rcx, [rbp + 0x18]
call fcn.140002b10
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140013cca
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140013cca
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
lea rcx, [rbp + 0x40]
call fcn.140002b10
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x140013cf9
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140013cf9
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
lea rcx, [rbp + 0x68]
call fcn.140002b10
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x140013d2b
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140013d2b
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
lea rcx, [rbp + 0x90]
call fcn.140002b10
mov rcx, qword [rbp + 0xb0]
test rcx, rcx
je 0x140013d60
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140013d60
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
lea rcx, [rbp + 0xc0]
call fcn.14000d280
nop
lea rcx, [rbp + 0x190]
call fcn.140011d90
nop
lea rcx, [rbp + 0x2a0]
call fcn.140011d90
nop
mov rdx, qword [rbp + 0x448]
cmp rdx, 7
jbe 0x140013dd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013dcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013dcb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x448], 7
mov word [rbp + 0x430], r15w
mov rdx, qword [rbp + 0x488]
cmp rdx, 7
jbe 0x140013e33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013e2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
mov qword [rbp + 0x480], r15
mov qword [rbp + 0x488], 7
mov word [rbp + 0x470], r15w
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140013ea4
mov rax, qword [rbp - 0x78]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013e92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
mov qword [rsp + 0x78], r15
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x68]
call fcn.14000dc80
mov edx, 0x30
mov rcx, qword [rsp + 0x68]
call fcn.140025d64
nop
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 7
jbe 0x140013f07
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013f02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013f02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140025d64
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.140025d00
lea r11, [rsp + 0x5c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp + 0x3f0]
mov edx, dword [rsp + 0x34]
lea rcx, str.remove
call fcn.14000f390
nop
lea r8, [rbp + 0x3f0]
lea rdx, [rsp + 0x40]
call fcn.14000f400
nop
lea r8, [rbp + 0x3d0]
lea rcx, str.status
call fcn.14000f390
nop
lea r8, [rbp + 0x3d0]
lea rdx, [rsp + 0x40]
call fcn.14000f400
nop
call fcn.140002e30
int3
call fcn.140002e30
nop
lea r8, [rbp + 0x3f0]
mov edx, dword [rsp + 0x34]
lea rcx, str.remove
call fcn.14000f390
int3