Function at 0x14002e8f0
Capabilities:
Delete file

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x8c0
movaps xmmword [r11 - 0x28], xmm6
mov rax, qword [0x140098280]
xor rax, rsp
mov qword [rsp + 0x8a8], rax
mov r12, rcx
mov qword [rsp + 0x150], rcx
xor esi, esi
mov ebx, esi
mov dword [rsp + 0x68], ebx
lea r8, str.USERPROFILE
lea rdx, [r11 - 0x140]
lea rcx, [r11 - 0x308]
call fcn.1400602f4
cmp qword [rsp + 0x5d0], rbx
jne 0x14002e979
lea r9, str.The_USERPROFILE_environment_variable_is_not_set._r_n
xor r8d, r8d
mov edx, 0xc2
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
xor al, al
jmp 0x140030596
lea rcx, str.C:WindowsWindowsUpdate.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14002ea9b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rcx, [rsp + 0x5d8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x400
mov r8d, eax
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x670], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x680], xmm1
mov r8d, 0x14
lea rdx, str.Erreur_Delete_File:
lea rcx, [rsp + 0x670]
call fcn.14004a2d0
nop
mov rdx, qword [rsp + 0x5d8]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002ea01
lea rcx, [rsp + 0x670]
call fcn.140042f80
lea r9, [rsp + 0x670]
cmp qword [rsp + 0x688], 7
cmova r9, qword [rsp + 0x670]
xor r8d, r8d
mov edx, 0xc2
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x5d8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rsp + 0x688]
cmp rdx, 7
jbe 0x14002ea9b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ea96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305c9
call fcn.1400529f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x6e0], xmm0
mov qword [rsp + 0x6f0], rax
movups xmmword [rsp + 0x3d0], xmm0
mov qword [rsp + 0x3e0], rsi
mov qword [rsp + 0x3e8], rsi
mov r8d, 0xf
lea rdx, str.C:_Recycle.Bin
lea rcx, [rsp + 0x3d0]
call fcn.14004a2d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov qword [rsp + 0x400], rsi
mov qword [rsp + 0x408], rsi
mov r8d, 0xf
lea rdx, str.C:Windows_Temp
lea rcx, [rsp + 0x3f0]
call fcn.14004a2d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x410], xmm0
mov qword [rsp + 0x420], rsi
mov qword [rsp + 0x428], rsi
mov r8d, 0x12
lea rdx, str.C:Windows_tracing
lea rcx, [rsp + 0x410]
call fcn.14004a2d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x368], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x378], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14002eb75
lea rcx, [rsp + 0x368]
call fcn.1400053b0
nop
mov r8d, 0x13
lea rdx, str._AppData_Local_Temp
lea rcx, [rsp + 0x368]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rax, qword [rsp + 0xb0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x430]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x348], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x358], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002ec70
lea rcx, [rsp + 0x348]
call fcn.1400053b0
nop
mov r8d, 0x29
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent
lea rcx, [rsp + 0x348]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0xf
cmova rax, qword [rsp + 0xd0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x450]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x328], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x338], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14002ed65
lea rcx, [rsp + 0x328]
call fcn.1400053b0
nop
mov r8d, 0x3f
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_AutomaticDestinations
lea rcx, [rsp + 0x328]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x140], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x140], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 1
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 0xf
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x470]
call fcn.1400035e0
or ebx, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x308], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x318], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14002ee60
lea rcx, [rsp + 0x308]
call fcn.1400053b0
nop
mov r8d, 0x3c
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_CustomDestinations
lea rcx, [rsp + 0x308]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x100], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x100], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 8
lea rax, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova rax, qword [rsp + 0xf0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x490]
call fcn.1400035e0
or ebx, 0x30
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2f8], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002ef60
lea rcx, [rsp + 0x2e8]
call fcn.1400053b0
nop
mov r8d, 0x25
lea rdx, str._AppData_Local_Microsoft_Windows_Burn
lea rcx, [rsp + 0x2e8]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x120], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 0x40
lea rax, [rsp + 0x110]
cmp qword [rsp + 0x128], 0xf
cmova rax, qword [rsp + 0x110]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x4b0]
call fcn.1400035e0
or ebx, 0x180
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2d8], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f060
lea rcx, [rsp + 0x2c8]
call fcn.1400053b0
nop
mov r8d, 0x19
lea rdx, str._AppData_Local_CrashDumps
lea rcx, [rsp + 0x2c8]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x190], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts ebx, 9
lea rax, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rax, qword [rsp + 0x180]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x4d0]
call fcn.1400035e0
or ebx, 0xc00
mov dword [rsp + 0x68], ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x2a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2b0], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f162
lea rcx, [rsp + 0x2a0]
call fcn.1400053b0
nop
mov r8d, 0x3f
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Cache_Cache_Data
lea rcx, [rsp + 0x2a0]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1b0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0xf
cmova rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x4f0]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x290], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f260
lea rcx, [rsp + 0x280]
call fcn.1400053b0
nop
mov r8d, gethostname
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History
lea rcx, [rsp + 0x280]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x510]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x270], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f355
lea rcx, [rsp + 0x260]
call fcn.1400053b0
nop
mov r8d, 0x3e
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History_journal
lea rcx, [rsp + 0x260]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x530]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x250], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f450
lea rcx, [rsp + 0x240]
call fcn.1400053b0
nop
mov r8d, 0x3c
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Visited_Links
lea rcx, [rsp + 0x240]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x170], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x170], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 0xf
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x550]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x230], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f545
lea rcx, [rsp + 0x220]
call fcn.1400053b0
nop
mov r8d, 0x27
lea rdx, str._AppData_Local_Temporary_Internet_Files
lea rcx, [rsp + 0x220]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rax, qword [rsp + 0x90]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x570]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
mov rdx, qword [rsp + 0x5d0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f640
lea rcx, [rsp + 0x200]
call fcn.1400053b0
nop
mov r8d, 0x28
lea rdx, str._AppData_Local_Microsoft_Windows_History
lea rcx, [rsp + 0x200]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x80], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rax, qword [rsp + 0x70]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x638], rax
call fcn.140050410
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x590]
call fcn.1400035e0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x6e0], xmm0
mov qword [rsp + 0x6f0], rsi
mov ecx, 0x1e0
call fcn.1400529f8
mov rbx, rax
mov qword [rsp + 0x6e0], rax
mov qword [rsp + 0x6e8], rax
lea rcx, [rax + 0x1e0]
mov qword [rsp + 0x6f0], rcx
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x60], rax
lea rdi, [rsp + 0x3d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x690], rbx
mov qword [rsp + 0x698], rbx
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x6a0], rax
mov rdx, rdi
mov rcx, rbx
call fcn.1400430f0
add rbx, 0x20
mov qword [rsp + 0x698], rbx
add rdi, 0x20
lea rax, [rsp + 0x5b0]
cmp rdi, rax
jne 0x14002f783
mov rdx, rbx
mov rcx, rbx
call fcn.14004b790
mov qword [rsp + 0x6e8], rbx
lea r9, [fcn.140003c20]
mov edx, 0x20
mov r8d, 0xf
lea rcx, [rsp + 0x3d0]
call fcn.140052a34
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14002f81e
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f819
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305cf
call fcn.1400529f0
movdqa xmm6, xmmword [0x14008c300]
movdqu xmmword [rsp + 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x14002f877
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f872
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305d5
call fcn.1400529f0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x14002f8cb
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f8c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305db
call fcn.1400529f0
movdqu xmmword [rsp + 0xa0], xmm6
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14002f91f
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f91a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305e1
call fcn.1400529f0
movdqu xmmword [rsp + 0x230], xmm6
mov byte [rsp + 0x220], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x14002f973
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f96e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305e7
call fcn.1400529f0
movdqu xmmword [rsp + 0x170], xmm6
mov byte [rsp + 0x160], 0
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x14002f9c7
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f9c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305ed
call fcn.1400529f0
movdqu xmmword [rsp + 0x250], xmm6
mov byte [rsp + 0x240], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x14002fa1b
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fa16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305f3
call fcn.1400529f0
movdqu xmmword [rsp + 0x1f0], xmm6
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x278]
cmp rdx, 0xf
jbe 0x14002fa6f
inc rdx
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fa6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305f9
call fcn.1400529f0
movdqu xmmword [rsp + 0x270], xmm6
mov byte [rsp + 0x260], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x14002fac3
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fabe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400305ff
call fcn.1400529f0
movdqu xmmword [rsp + 0x1d0], xmm6
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x298]
cmp rdx, 0xf
jbe 0x14002fb17
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fb12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030605
call fcn.1400529f0
movdqu xmmword [rsp + 0x290], xmm6
mov byte [rsp + 0x280], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0xf
jbe 0x14002fb6b
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fb66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003060b
call fcn.1400529f0
movdqu xmmword [rsp + 0x1b0], xmm6
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 0xf
jbe 0x14002fbbf
inc rdx
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fbba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030611
call fcn.1400529f0
movdqu xmmword [rsp + 0x2b0], xmm6
mov byte [rsp + 0x2a0], 0
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x14002fc13
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fc0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030617
call fcn.1400529f0
movdqu xmmword [rsp + 0x190], xmm6
mov byte [rsp + 0x180], 0
mov rdx, qword [rsp + 0x2e0]
cmp rdx, 0xf
jbe 0x14002fc67
inc rdx
mov rcx, qword [rsp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fc62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003061d
call fcn.1400529f0
movdqu xmmword [rsp + 0x2d8], xmm6
mov byte [rsp + 0x2c8], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x14002fcbb
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fcb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030623
call fcn.1400529f0
movdqu xmmword [rsp + 0x120], xmm6
mov byte [rsp + 0x110], 0
mov rdx, qword [rsp + 0x300]
cmp rdx, 0xf
jbe 0x14002fd0f
inc rdx
mov rcx, qword [rsp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fd0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030629
call fcn.1400529f0
movdqu xmmword [rsp + 0x2f8], xmm6
mov byte [rsp + 0x2e8], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x14002fd63
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fd5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003062f
call fcn.1400529f0
movdqu xmmword [rsp + 0x100], xmm6
mov byte [rsp + 0xf0], 0
mov rdx, qword [rsp + 0x320]
cmp rdx, 0xf
jbe 0x14002fdb7
inc rdx
mov rcx, qword [rsp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fdb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030635
call fcn.1400529f0
movdqu xmmword [rsp + 0x318], xmm6
mov byte [rsp + 0x308], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0xf
jbe 0x14002fe0b
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003063b
call fcn.1400529f0
movdqu xmmword [rsp + 0x140], xmm6
mov byte [rsp + 0x130], 0
mov rdx, qword [rsp + 0x340]
cmp rdx, 0xf
jbe 0x14002fe5f
inc rdx
mov rcx, qword [rsp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030641
call fcn.1400529f0
movdqu xmmword [rsp + 0x338], xmm6
mov byte [rsp + 0x328], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x14002feb3
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002feae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030647
call fcn.1400529f0
movdqu xmmword [rsp + 0xe0], xmm6
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x360]
cmp rdx, 0xf
jbe 0x14002ff07
inc rdx
mov rcx, qword [rsp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ff02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003064d
call fcn.1400529f0
movdqu xmmword [rsp + 0x358], xmm6
mov byte [rsp + 0x348], 0
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x14002ff5b
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ff56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030653
call fcn.1400529f0
movdqu xmmword [rsp + 0xc0], xmm6
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x380]
cmp rdx, 0xf
jbe 0x14002ffaf
inc rdx
mov rcx, qword [rsp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ffaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030659
call fcn.1400529f0
movdqu xmmword [rsp + 0x378], xmm6
mov byte [rsp + 0x368], 0
mov rdi, qword [rsp + 0x6e0]
mov rax, qword [rsp + 0x6e8]
mov qword [rsp + 0x2c0], rax
lea r15, [0x140098f00]
movabs r14, 0x7fffffffffffffff
mov qword [rsp + 0x158], rdi
cmp rdi, qword [rsp + 0x2c0]
je 0x140030587
mov qword [rsp + 0x60], rdi
mov rdx, rdi
lea rcx, [rsp + 0x5b0]
call fcn.140004d00
movsd xmm0, qword [rax]
movsd qword [rsp + 0x3b0], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x3a0], ecx
mov qword [rsp + 0x3a8], r15
movaps xmm0, xmmword [rsp + 0x3a0]
movdqa xmmword [rsp + 0x640], xmm0
mov eax, dword [rsp + 0x3b0]
test eax, eax
je 0x14003057d
cmp eax, 1
je 0x140030574
mov rdx, rdi
lea rcx, [rsp + 0x5c0]
call fcn.140004d00
movsd xmm0, qword [rax]
movsd qword [rsp + 0x388], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x388]
test edx, edx
je 0x140030095
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14003065f
cmp ecx, 3
jne 0x140030574
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x660], xmm0
mov rdx, rdi
lea rcx, [rsp + 0x660]
call fcn.140048170
test eax, eax
jne 0x14003066f
xorps xmm0, xmm0
movups xmmword [rsp + 0x6d0], xmm0
mov rbx, qword [rsp + 0x668]
test rbx, rbx
je 0x1400300e6
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x668]
movaps xmm0, xmmword [rsp + 0x660]
movdqa xmmword [rsp + 0x6d0], xmm0
test rbx, rbx
je 0x140030108
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x668]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x640], xmm1
test rbx, rbx
je 0x140030162
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14003015a
mov rbx, qword [rsp + 0x668]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14003015a
mov rbx, qword [rsp + 0x668]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
jmp 0x140030162
mov rbx, qword [rsp + 0x668]
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x6d0]
cmp rcx, qword [rsp + 0x640]
je 0x1400301d0
add rcx, 0x20
call fcn.140005260
nop
jmp 0x1400301b9
lea rcx, [rsp + 0x6d0]
call fcn.140004740
test eax, eax
jne 0x140030681
jmp 0x140030170
mov rcx, qword [rsp + 0x6d8]
test rcx, rcx
je 0x140030221
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140030219
mov rbx, qword [rsp + 0x6d8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140030219
mov rcx, qword [rsp + 0x6d8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rbx, qword [rsp + 0x668]
test rbx, rbx
je 0x140030262
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140030262
mov rbx, qword [rsp + 0x668]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140030262
mov rcx, qword [rsp + 0x668]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
lea rdx, [rsp + 0x758]
mov rcx, qword [rsp + 0x60]
call fcn.140003ab0
nop
mov rax, r14
mov rcx, qword [rsp + 0x768]
sub rax, rcx
cmp rax, 0x12
jb 0x140030689
lea rax, [rsp + 0x758]
cmp qword [rsp + 0x770], 0xf
cmova rax, qword [rsp + 0x758]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x12
lea r9, str.Files_deleted_in:
lea rcx, [rsp + 0x718]
call fcn.14004d260
nop
mov r8d, 2
lea rdx, [0x140089410]
lea rcx, [rsp + 0x718]
call fcn.140043270
xorps xmm0, xmm0
movups xmmword [rsp + 0x6a8], xmm0
mov qword [rsp + 0x6b8], rsi
mov qword [rsp + 0x6c0], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x6a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x6b8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x730]
cmp rdx, 0xf
jbe 0x14003036d
inc rdx
mov rcx, qword [rsp + 0x718]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030368
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003068f
call fcn.1400529f0
mov qword [rsp + 0x728], rsi
mov qword [rsp + 0x730], 0xf
mov byte [rsp + 0x718], 0
lea r8, [rsp + 0x6a8]
cmp qword [rsp + 0x6c0], 0xf
cmova r8, qword [rsp + 0x6a8]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x6b8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x6f8], xmm0
mov qword [rsp + 0x708], rsi
mov qword [rsp + 0x710], rsi
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x6f8]
call fcn.14004a1a0
lea rcx, [rsp + 0x6f8]
cmp qword [rsp + 0x710], 7
cmova rcx, qword [rsp + 0x6f8]
lea r8, [rsp + 0x6a8]
cmp qword [rsp + 0x6c0], 0xf
cmova r8, qword [rsp + 0x6a8]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x6b8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rsp + 0x6f8]
cmp qword [rsp + 0x710], 7
cmova r9, qword [rsp + 0x6f8]
xor r8d, r8d
mov edx, 0xc2
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x710]
cmp rdx, 7
jbe 0x1400304b6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x6f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400304b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030695
call fcn.1400529f0
mov qword [rsp + 0x708], rsi
mov qword [rsp + 0x710], 7
mov word [rsp + 0x6f8], si
mov rdx, qword [rsp + 0x6c0]
cmp rdx, 0xf
jbe 0x140030515
inc rdx
mov rcx, qword [rsp + 0x6a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030510
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003069b
call fcn.1400529f0
mov qword [rsp + 0x6b8], rsi
mov qword [rsp + 0x6c0], 0xf
mov byte [rsp + 0x6a8], 0
mov rdx, qword [rsp + 0x770]
cmp rdx, 0xf
jbe 0x140030574
inc rdx
mov rcx, qword [rsp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003056f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400306a1
call fcn.1400529f0
add rdi, 0x20
jmp 0x14002ffe9
test ecx, ecx
jne 0x1400306a7
jmp 0x140030574
lea rcx, [rsp + 0x6e0]
call fcn.140045c80
mov al, 1
mov rcx, qword [rsp + 0x8a8]
xor rcx, rsp
call fcn.1400529d0
lea r11, [rsp + 0x8c0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
ret
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
int3
mov r8, rdi
lea rcx, str.status
call fcn.140004510
nop
mov r8, rdi
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140004510
nop
mov edx, eax
call fcn.140004420
nop
call fcn.140001bc0
nop
call fcn.14005ffec
int3
call fcn.14005ffec
nop
call fcn.14005ffec
nop
call fcn.14005ffec
int3
mov r8, rdi
lea rdx, [rsp + 0x640]
lea rcx, str.exists
call fcn.140004580
int3