Function at 0x140060f20
Capabilities:
Delete file
Execute command
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x530
vmovaps xmmword [rax - 0x28], xmm6
vmovaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x140089040]
xor rax, rsp
mov qword [rbp + 0x400], rax
xor r15d, r15d
mov esi, r15d
mov dword [rsp + 0x40], r15d
mov rcx, qword [0x140092850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], r15b
jne 0x140060fc4
lea rdx, str.Config_System
mov r8, rdx
cmp rdx, 0xffffffffffffffff
jae 0x140060fbf
movzx ecx, byte [r8]
test cl, cl
je 0x140060fbf
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x140060fb6
cmp byte [rax], cl
je 0x140060fbf
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x140060fa1
call fcn.14003f210
vxorps xmm7, xmm7, xmm7
vmovss dword [rsp + 0x48], xmm7
vmovss dword [rsp + 0x4c], xmm7
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea rbx, [0x1400932b0]
mov r8, rbx
xor edx, edx
lea rcx, str.New_Config_Name
call fcn.1400446f0
vmovss dword [rsp + 0x50], xmm7
vmovss dword [rsp + 0x54], xmm7
lea rdx, [rsp + 0x50]
lea rcx, str.Create_Config
call fcn.14003c8c0
lea r12, str..config
test al, al
je 0x140061175
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x70], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp - 0x80], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], sil
jne 0x140061051
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1400030a0
nop
mov r8d, 7
mov rdx, r12
lea rcx, [rsp + 0x70]
call fcn.1400062c0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x130], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x140], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x130], ymm0
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov esi, 0x80000
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400610f8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400610f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400610f0
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
lea rcx, [rbp + 0x130]
vzeroupper
call fcn.140063280
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x14006115e
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061159
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140061159
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
mov rax, qword [0x140092850]
mov rax, qword [rax + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x14006119e
mov eax, dword [rax + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003ebe0
lea rdx, [0x140093458]
lea rcx, [rbp + 0x180]
call fcn.140006160
nop
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140094868], eax
jle 0x14006120e
lea rcx, [0x140094868]
call fcn.140069bf8
cmp dword [0x140094868], 0xffffffff
jne 0x14006120e
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [0x140094870], xmm0
mov qword [0x140094880], r15
lea rcx, [0x140070cc0]
call fcn.140069fa4
lea rcx, [0x140094868]
call fcn.140069b8c
mov rcx, qword [0x140094870]
mov rdx, qword [0x140094878]
cmp rcx, rdx
je 0x140061234
call fcn.140062ac0
mov rax, qword [0x140094870]
mov qword [0x140094878], rax
mov rdi, qword [rbp + 0x190]
lea rbx, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova rbx, qword [rbp + 0x180]
call fcn.1400691dc
mov qword [rbp + 0x160], rbx
mov qword [rbp + 0x168], rdi
lea r8, [rbp + 0x160]
mov edx, eax
lea rcx, [rbp + 0xf0]
call fcn.140004ba0
or esi, 0x60000
mov dword [rsp + 0x40], esi
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x110]
call fcn.140062930
test eax, eax
jne 0x14006278c
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x1400612f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400612ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400612ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x14006130f
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x118]
mov esi, dword [rsp + 0x40]
vmovups xmm0, xmmword [rbp + 0x110]
vmovdqu xmmword [rbp + 0xb0], xmm0
vmovdqu xmmword [rbp + 0x150], xmm0
test rcx, rcx
je 0x14006133b
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x118]
mov esi, dword [rsp + 0x40]
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x1a0], xmm1
test rcx, rcx
je 0x14006138a
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140061386
mov rbx, qword [rbp + 0x118]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140061386
mov rcx, qword [rbp + 0x118]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov r14, qword [rbp + 0x150]
test r14, r14
je 0x14006185f
lea rdx, [rbp - 8]
mov rcx, r14
call fcn.1400609f0
mov rax, qword [rbp - 8]
mov edx, dword [rbp]
test edx, edx
je 0x1400613c0
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400627a2
cmp eax, 2
jne 0x14006151b
call fcn.1400691dc
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 7
lea r8, [rbp + 0x90]
mov edx, eax
lea rcx, [rbp - 0x28]
call fcn.140004ba0
or esi, 0xc00
or esi, 1
mov dword [rsp + 0x40], esi
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x14006140e
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140060290
cmp rax, rdx
je 0x14006145c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140061432
cmp cx, 0x2f
jne 0x14006143b
add rax, 2
cmp rax, rdx
jne 0x140061423
cmp rax, rdx
je 0x14006145c
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14006145c
cmp cx, 0x2f
je 0x14006145c
mov rbx, r8
cmp rax, r8
jne 0x140061440
mov r8d, 0x3a
mov rcx, rbx
call fcn.1400699d0
cmp rbx, rax
je 0x1400614a7
lea rcx, [rax - 2]
cmp rbx, rcx
je 0x1400614a7
cmp word [rcx], 0x2e
jne 0x14006148f
lea rdx, [rcx - 2]
cmp rbx, rdx
jne 0x1400614aa
cmp word [rdx], 0x2e
jne 0x1400614aa
jmp 0x1400614a7
sub rcx, 2
cmp rbx, rcx
je 0x1400614a7
cmp word [rcx], 0x2e
je 0x1400614aa
sub rcx, 2
cmp rbx, rcx
jne 0x140061498
mov rcx, rax
mov qword [rbp + 0xa0], rcx
sub rax, rcx
sar rax, 1
mov qword [rbp + 0xa8], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 8]
call fcn.140062d30
or esi, 0x1002
mov dword [rsp + 0x40], esi
lea rax, [rbp - 0x28]
mov rbx, qword [rbp - 0x10]
cmp rbx, 7
cmova rax, qword [rbp - 0x28]
mov qword [rbp + 0x50], rax
mov rax, qword [rbp - 0x18]
mov qword [rbp + 0x58], rax
vmovups xmm0, xmmword [rbp + 0x50]
vmovdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 8]
call fcn.1400605f0
test eax, eax
jne 0x14006151f
mov dil, 1
jmp 0x140061522
mov rbx, qword [rbp - 0x10]
xor dil, dil
test sil, 2
je 0x140061584
and esi, 0xfffffffd
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x140061573
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006156a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006183d
call fcn.140069fbc
mov rbx, qword [rbp - 0x10]
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r15w
test sil, 1
je 0x1400615cd
and esi, 0xfffffffe
mov dword [rsp + 0x40], esi
cmp rbx, 7
jbe 0x1400615cd
lea rdx, [rbx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400615c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140061844
call fcn.140069fbc
test dil, dil
je 0x140061781
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x1400615e5
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.140060290
cmp rax, r11
je 0x14006163b
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14006160f
cmp cx, 0x2f
jne 0x140061618
add rax, 2
cmp rax, r11
jne 0x140061600
cmp rax, r11
je 0x14006163b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14006163b
cmp cx, 0x2f
je 0x14006163b
mov r10, rdx
cmp rax, rdx
jne 0x140061620
mov qword [rbp + 0x60], r10
sub r11, r10
sar r11, 1
mov qword [rbp + 0x68], r11
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x28]
call fcn.140062d30
bts esi, 0x10
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 7
cmova rax, qword [rbp + 0x28]
mov qword [rbp + 0x70], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x78], rax
call fcn.1400691dc
vmovups xmm0, xmmword [rbp + 0x70]
vmovdqa xmmword [rbp + 0xd0], xmm0
lea r8, [rbp + 0xd0]
mov edx, eax
lea rcx, [rbp - 0x48]
call fcn.1400627d0
or esi, 0xe000
mov dword [rsp + 0x40], esi
mov rdx, qword [0x140094878]
cmp rdx, qword [0x140094880]
je 0x1400616e6
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r15
mov qword [rdx + 0x18], r15
vmovups ymm0, ymmword [rbp - 0x48]
vmovups ymmword [rdx], ymm0
mov qword [rbp - 0x38], r15
mov eax, 0xf
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x48], 0
add qword [0x140094878], 0x20
jmp 0x1400616f3
lea r8, [rbp - 0x48]
call fcn.140062e80
mov rax, qword [rbp - 0x30]
cmp rax, 0xf
jbe 0x14006172e
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061726
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006184b
vzeroupper
call fcn.140069fbc
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 7
jbe 0x140061781
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061779
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140061855
vzeroupper
call fcn.140069fbc
lea rdx, [rbp + 0x1b0]
mov rcx, qword [r14 + 0x40]
vzeroupper
call fcn.1400694b4
cmp eax, 0x12
je 0x1400617db
test eax, eax
jne 0x1400627b3
cmp word [rbp + 0x1dc], 0x2e
jne 0x1400617c7
movzx eax, word [rbp + 0x1de]
test ax, ax
je 0x140061781
cmp ax, 0x2e
jne 0x1400617c7
cmp word [rbp + 0x1e0], 0
je 0x140061781
lea rdx, [rbp + 0x1b0]
mov rcx, r14
call fcn.140060cf0
jmp 0x140061391
mov r14, r15
mov qword [rbp + 0x150], r15
mov rbx, qword [rbp + 0x158]
mov qword [rbp + 0x158], r15
test rbx, rbx
je 0x140061391
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140061822
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x14006182b
mov esi, dword [rsp + 0x40]
jmp 0x14006138a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
jmp 0x14006138a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x1400618a6
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400618a6
mov rbx, qword [rbp + 0x158]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400618a6
mov rcx, qword [rbp + 0x158]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x1400618ec
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400618ec
mov rbx, qword [rbp + 0x118]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400618ec
mov rcx, qword [rbp + 0x118]
mov rax, qword [rcx]
call qword [rax + 8]
mov ebx, r15d
mov rax, qword [0x140094878]
mov r8, qword [0x140094870]
sub rax, r8
sar rax, 5
mov edx, dword [0x140091620]
test rax, rax
je 0x140061974
vmovss dword [rsp + 0x50], xmm7
vmovss dword [rsp + 0x54], xmm7
mov rdi, r15
nop
cmp edx, ebx
sete dl
lea rcx, [rdi + r8]
cmp qword [rcx + 0x18], 0xf
jbe 0x140061933
mov rcx, qword [rcx]
lea r9, [rsp + 0x50]
call fcn.14004c350
test al, al
je 0x14006194b
mov edx, ebx
mov dword [0x140091620], ebx
jmp 0x140061951
mov edx, dword [0x140091620]
inc ebx
add rdi, 0x20
mov rcx, qword [0x140094878]
mov r8, qword [0x140094870]
sub rcx, r8
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x140061920
cmp edx, 0xffffffff
je 0x140061999
movsxd rdx, edx
shl rdx, 5
add rdx, r8
cmp qword [rdx + 0x18], 0xf
jbe 0x14006198d
mov rdx, qword [rdx]
lea rcx, str.Selected:__s
call fcn.14003bf10
vmovss dword [rsp + 0x48], xmm7
vmovss dword [rsp + 0x4c], xmm7
lea rdx, [rsp + 0x48]
lea rcx, str.Load_Selected
call fcn.14003c8c0
test al, al
je 0x140061a66
movsxd rcx, dword [0x140091620]
test ecx, ecx
js 0x140061a66
mov rax, qword [0x140094878]
mov r8, qword [0x140094870]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x140061a66
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0xf0]
call fcn.140006160
nop
lea rcx, [rbp + 0xf0]
call fcn.140064a80
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x140061a4f
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061a4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140061a4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov rax, qword [0x140092850]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140061ac8
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp - 0x70], xmm7
vmovss dword [rbp - 0x6c], xmm7
lea rdx, [rbp - 0x70]
lea rcx, str.Save_Selected
call fcn.14003c8c0
test al, al
je 0x140061b87
movsxd rax, dword [0x140091620]
test eax, eax
js 0x140061b87
mov rcx, qword [0x140094878]
sub rcx, qword [0x140094870]
sar rcx, 5
cmp rax, rcx
jae 0x140061b87
mov rsi, qword [0x140092850]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallySave
call fcn.140009570
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140061b5f
lea r8, str.reallySave
mov edx, 0xb
mov ecx, eax
call fcn.140021c60
test byte [rsi + 0x5ce4], 4
je 0x140061b7e
mov r8d, edi
lea rdx, str.reallySave
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.140021860
xor edx, edx
mov ecx, edi
call fcn.14001a6b0
mov rbx, qword [0x140092850]
mov eax, dword [rbx + 0x48b0]
vmovss xmm6, dword [0x14007bfbc]
cmp dword [rbx + 0x48a0], eax
jg 0x140061bb0
mov dword [rbx + 0x47d0], r15d
jmp 0x140061da3
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallySave
call fcn.140009570
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140061bf8
lea r8, str.reallySave
mov edx, 0xb
mov ecx, eax
call fcn.140021c60
mov ecx, edi
call fcn.14001acf0
test al, al
je 0x140061da3
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, str.Are_you_sure_
call fcn.14003b750
vmovss dword [rbp - 0x68], xmm6
vmovss dword [rbp - 0x64], xmm7
lea rdx, [rbp - 0x68]
lea rcx, [0x140079664]
call fcn.14003c8c0
test al, al
je 0x140061c3c
call fcn.14001ac10
mov rax, qword [0x140092850]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140061c9e
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp - 0x60], xmm6
vmovss dword [rbp - 0x5c], xmm7
lea rdx, [rbp - 0x60]
lea rcx, [0x140079660]
call fcn.14003c8c0
test al, al
je 0x140061d4c
movsxd rdx, dword [0x140091620]
shl rdx, 5
add rdx, qword [0x140094870]
lea rcx, [rbp + 0xf0]
call fcn.140006160
nop
lea rcx, [rbp + 0xf0]
call fcn.140063280
call fcn.14001ac10
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x140061d35
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061d30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140061d30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov rbx, qword [0x140092850]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x140061d87
cmp byte [rbx + 0x4951], 0
je 0x140061d87
cmp dword [rbx + 0x4910], 0
jne 0x140061d87
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x140061d97
mov byte [rbx + 0x3e5e], 1
call fcn.140015e30
mov byte [rbx + 0x3e5e], 0
mov rax, qword [0x140092850]
mov rax, qword [rax + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x140061dcc
mov eax, dword [rax + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003ebe0
vmovss dword [rbp - 0x58], xmm7
vmovss dword [rbp - 0x54], xmm7
lea rdx, [rbp - 0x58]
lea rcx, str.Delete_Selected
call fcn.14003c8c0
test al, al
je 0x140061e8b
movsxd rax, dword [0x140091620]
test eax, eax
js 0x140061e8b
mov rcx, qword [0x140094878]
sub rcx, qword [0x140094870]
sar rcx, 5
cmp rax, rcx
jae 0x140061e8b
mov rsi, qword [0x140092850]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140009570
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140061e63
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140021c60
test byte [rsi + 0x5ce4], 4
je 0x140061e82
mov r8d, edi
lea rdx, str.reallyDelete
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.140021860
xor edx, edx
mov ecx, edi
call fcn.14001a6b0
mov rbx, qword [0x140092850]
mov eax, dword [rbx + 0x48b0]
movabs r14, 0x7fffffffffffffff
cmp dword [rbx + 0x48a0], eax
jg 0x140061eb6
mov dword [rbx + 0x47d0], r15d
jmp 0x140062335
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140009570
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140061efe
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140021c60
mov ecx, edi
call fcn.14001acf0
test al, al
je 0x140062335
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, str.Are_you_sure_
call fcn.14003b750
vmovss dword [rbp + 0x160], xmm6
vmovss dword [rbp + 0x164], xmm7
lea rdx, [rbp + 0x160]
lea rcx, [0x140079664]
call fcn.14003c8c0
test al, al
je 0x140061f4b
call fcn.14001ac10
mov rax, qword [0x140092850]
mov rdx, qword [rax + 0x3ef8]
cmp byte [rdx + 0xbb], 0
jne 0x140061fad
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rdx + 0x108]
vmovss xmm0, dword [rdx + 0x10c]
vmovss dword [rdx + 0x100], xmm1
vmovss dword [rdx + 0x104], xmm0
vmovsd xmm0, qword [rdx + 0x130]
vmovsd qword [rdx + 0x128], xmm0
mov eax, dword [rdx + 0x13c]
mov dword [rdx + 0x138], eax
mov byte [rdx + 0x140], 1
vmovss dword [rbp + 0x110], xmm6
vmovss dword [rbp + 0x114], xmm7
lea rdx, [rbp + 0x110]
lea rcx, [0x140079660]
call fcn.14003c8c0
test al, al
je 0x1400622de
movsxd rdx, dword [0x140091620]
shl rdx, 5
add rdx, qword [0x140094870]
lea rcx, [rbp + 0xf0]
call fcn.140006160
nop
mov rax, r14
mov rcx, qword [rbp + 0x190]
sub rax, rcx
cmp rax, 1
jb 0x1400627bb
lea r9, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova r9, qword [rbp + 0x180]
mov qword [rsp + 0x30], 1
lea rax, [0x14007b278]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x110]
call fcn.140053a90
nop
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0x100]
lea rcx, [rbp + 0x110]
call fcn.1400062c0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x160], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x170], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x160], ymm0
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x1400620f3
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400620eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400620eb
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
lea rcx, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova rcx, qword [rbp + 0x160]
vzeroupper
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x14006222c
movsxd rbx, dword [0x140091620]
shl rbx, 5
add rbx, qword [0x140094870]
mov rsi, qword [0x140094878]
lea rdi, [rbx + 0x20]
cmp rdi, rsi
je 0x1400621d0
cmp rbx, rdi
je 0x1400621bc
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140062196
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14006218e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140062274
mov rcx, r8
vzeroupper
call fcn.140069fbc
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
vmovups ymm0, ymmword [rdi]
vmovups ymmword [rbx], ymm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
add rbx, 0x20
add rdi, 0x20
cmp rdi, rsi
jne 0x140062154
mov rsi, qword [0x140094878]
mov rdx, qword [rsi - 8]
cmp rdx, 0xf
jbe 0x14006220a
mov rcx, qword [rsi - 0x20]
inc rdx
cmp rdx, 0x1000
jb 0x140062202
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140062274
mov rcx, r8
vzeroupper
call fcn.140069fbc
mov qword [rsi - 0x10], r15
mov qword [rsi - 8], 0xf
mov byte [rsi - 0x20], 0
sub qword [0x140094878], 0x20
mov dword [0x140091620], 0xffffffff
vzeroupper
call fcn.14001ac10
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140062283
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006227e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006227e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp + 0x170], xmm0
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x1400622de
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400622d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400622d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
mov rbx, qword [0x140092850]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x140062319
cmp byte [rbx + 0x4951], 0
je 0x140062319
cmp dword [rbx + 0x4910], 0
jne 0x140062319
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x140062329
mov byte [rbx + 0x3e5e], 1
call fcn.140015e30
mov byte [rbx + 0x3e5e], 0
mov rdx, qword [0x140092850]
mov rcx, qword [rdx + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140062397
vmovss xmm0, dword [rdx + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov rcx, qword [rdx + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400623f2
vmovss xmm0, dword [rdx + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rsp + 0x58], xmm7
vmovss dword [rsp + 0x5c], xmm7
lea rdx, [rsp + 0x58]
lea rcx, str.Open_Directory
call fcn.14003c8c0
test al, al
je 0x1400626f2
mov rdi, qword [rbp + 0x190]
lea rbx, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova rbx, qword [rbp + 0x180]
call fcn.1400691dc
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rdi
lea r8, [rbp + 0x80]
mov edx, eax
lea rcx, [rbp + 0x110]
call fcn.140004ba0
nop
lea rcx, [rbp + 0x110]
cmp qword [rbp + 0x128], 7
cmova rcx, qword [rbp + 0x110]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0xf0]
call fcn.140069568
mov r8d, eax
test eax, eax
jne 0x1400624d4
mov edx, dword [rbp + 0x100]
bt edx, 0xa
jae 0x1400624c2
mov eax, dword [rbp + 0x104]
cmp eax, 0xa000000c
jne 0x1400624b3
lea r15d, [r8 + 4]
jmp 0x1400624f6
cmp eax, 0xa0000003
jne 0x1400624c2
mov r15d, 0xa
jmp 0x1400624f6
movzx r15d, dl
and r15d, 0x10
or r15d, 0x20
shr r15d, 4
jmp 0x1400624f6
mov dword [rsp + 0x5c], 0xffff
sub eax, 2
je 0x1400624f0
sub eax, 1
je 0x1400624f0
sub eax, 0x32
je 0x1400624f0
cmp eax, 0x46
jne 0x1400624f6
mov r15d, 1
mov dword [rbp + 0x130], r8d
lea rax, [0x1400890c0]
mov qword [rbp + 0x138], rax
vmovups xmm0, xmmword [rbp + 0x130]
vmovdqa xmmword [rbp + 0x130], xmm0
test r15d, r15d
je 0x1400626e1
cmp r15d, 1
je 0x14006269d
lea rcx, [rbp + 0x110]
call fcn.1400054b0
test al, al
je 0x14006269d
lea rax, [rbp + 0x110]
cmp qword [rbp + 0x128], 7
cmova rax, qword [rbp + 0x110]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x78], rax
call fcn.1400691dc
vmovups xmm0, xmmword [rsp + 0x70]
vmovdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rbp + 0xf0]
call fcn.1400627d0
nop
mov rcx, qword [rbp + 0x100]
sub r14, rcx
cmp r14, 0xd
jb 0x140062772
lea rax, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rax, qword [rbp + 0xf0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xd
lea r9, str.explorer.exe
lea rcx, [rbp + 0x130]
call fcn.140053a90
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 0xf
cmova rcx, qword [rbp + 0x130]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x140062641
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006263c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006263c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
vmovdqu xmm0, xmmword [0x14007c130]
vmovdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14006269d
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062697
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062697
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 7
jbe 0x1400626f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400626ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400626ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r8d, r8d
jne 0x140062778
jmp 0x14006269d
call fcn.140069fbc
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140062736
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062731
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062731
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069fbc
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.140069b30
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
vmovaps xmm6, xmmword [r11 - 0x10]
vmovaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400025b0
nop
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x130]
call fcn.140060990
nop
lea r8, [rbp + 0xf0]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140005440
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.140005440
int3
mov edx, eax
call fcn.140060930
nop
call fcn.1400025b0
int3