Function at 0x14006f630
Capabilities:
Delete file
Execute command
Get common file path
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xd80
vmovaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140095010]
xor rax, rsp
mov qword [rbp + 0xd00], rax
xor r12d, r12d
mov dword [rbp + 8], r12d
movabs rax, 0x81d11e043ee02c88
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
movabs r13, 0x844d67d0172b90c
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rbx, 0x81d11e041e874aeb
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
vmovdqu xmm0, xmmword [rbp + 0x360]
vpxor xmm1, xmm0, xmmword [rbp + 0x8c0]
vmovdqu xmmword [rbp + 0x360], xmm1
lea rcx, [rbp + 0x360]
call fcn.140063ab0
test al, al
je 0x140071778
lea rax, [rbp + 0xaf0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 0x1a]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x140071778
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x9e0]
mov qword [rsp + 0x20], rax
lea r9d, [r12 - 1]
lea r8, [rbp + 0xaf0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x140071778
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], r12
mov qword [rbp + 0x4c8], r12
lea rax, [rbp + 0x9e0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x14006f790
lea rdx, [rbp + 0x9e0]
lea rcx, [rbp + 0x4b0]
call fcn.14000d620
nop
movabs rax, 0xe0b96d737ff764b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x844d67d012ed26f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
vmovdqu xmm0, xmmword [rbp + 0x210]
vpxor xmm1, xmm0, xmmword [rbp + 0x8e0]
vmovdqu xmmword [rbp + 0x210], xmm1
lea rax, [rbp + 0x210]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x14006f823
movabs r15, 0x7fffffffffffffff
mov rax, r15
mov rdx, qword [rbp + 0x4c0]
sub rax, rdx
cmp rax, rcx
jb 0x1400717c8
lea r9, [rbp + 0x4b0]
cmp qword [rbp + 0x4c8], 0x10
cmovae r9, qword [rbp + 0x4b0]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x210]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x400]
call fcn.140019770
nop
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140098a38], eax
jle 0x14006f8e2
lea rcx, [0x140098a38]
call fcn.14007abd8
cmp dword [0x140098a38], 0xffffffff
jne 0x14006f8e2
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [0x140098a20], xmm0
mov qword [0x140098a30], r12
lea rcx, [0x1400818d0]
call fcn.14007b02c
lea rcx, [0x140098a38]
call fcn.14007ab78
mov rcx, qword [0x140098a20]
mov rdx, qword [0x140098a28]
cmp rcx, rdx
je 0x14006f908
call fcn.140071b60
mov rax, qword [0x140098a20]
mov qword [0x140098a28], rax
mov rdi, qword [rbp + 0x410]
lea rbx, [rbp + 0x400]
cmp qword [rbp + 0x418], 0x10
cmovae rbx, qword [rbp + 0x400]
call fcn.14007a0fc
mov qword [rbp + 0x230], rbx
mov qword [rbp + 0x238], rdi
lea r8, [rbp + 0x230]
mov edx, eax
lea rcx, [rbp + 0x150]
call fcn.140016d10
mov esi, 0x1c0000
mov dword [rbp + 8], esi
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x3e0], xmm0
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x3e0]
call fcn.140071960
test eax, eax
jne 0x1400717ce
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14006f9c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f9c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006f9c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088760]
vmovdqu xmmword [rbp + 0x160], xmm0
mov word [rbp + 0x150], r12w
mov rcx, qword [rbp + 0x3e8]
test rcx, rcx
je 0x14006f9f8
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x3e8]
mov esi, dword [rbp + 8]
vmovdqu xmm1, xmmword [rbp + 0x3e0]
vmovdqu xmmword [rbp + 0x3f0], xmm1
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x3c0], xmm0
test rcx, rcx
je 0x14006fa2f
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x3e8]
vmovdqu xmm1, xmmword [rbp + 0x3e0]
mov esi, dword [rbp + 8]
vmovdqa xmmword [rbp + 0x3d0], xmm1
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x440], xmm1
test rcx, rcx
je 0x14006fa85
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14006fa82
mov rbx, qword [rbp + 0x3e8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14006fa82
mov rcx, qword [rbp + 0x3e8]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, dword [rbp + 8]
mov r14, qword [rbp + 0x3f0]
nop dword [rax]
movabs rbx, 0x81d11e7769e63ac5
cmp r14, qword [rbp + 0x440]
je 0x1400700aa
lea rdx, [rbp + 0x120]
mov rcx, r14
call fcn.14006f100
mov rax, qword [rbp + 0x120]
mov edx, dword [rbp + 0x128]
test edx, edx
je 0x14006fad6
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400717e4
cmp eax, 2
jne 0x14006fccd
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x81d11e041e874aeb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
vmovdqu xmm0, xmmword [rbp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x840]
vmovdqu xmmword [rbp + 0x60], xmm1
lea rax, [rbp + 0x60]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14006fb40
call fcn.14007a0fc
lea rcx, [rbp + 0x60]
mov qword [rbp + 0x240], rcx
mov qword [rbp + 0x248], rbx
lea r8, [rbp + 0x240]
mov edx, eax
lea rcx, [rbp + 0x80]
call fcn.140016d10
mov esi, dword [rbp + 8]
or esi, 0x30000
or esi, 1
mov dword [rbp + 8], esi
mov r14, qword [rbp + 0x3f0]
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 8
jb 0x14006fb9a
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rdi, [rcx + rax*2]
mov rbx, rdi
mov rdx, rdi
call fcn.14006e980
cmp rax, rdi
je 0x14006fbec
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14006fbc1
cmp cx, 0x2f
jne 0x14006fbca
add rax, 2
cmp rax, rdi
jne 0x14006fbb2
cmp rax, rdi
je 0x14006fbec
nop
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14006fbec
cmp cx, 0x2f
je 0x14006fbec
mov rbx, r8
cmp rax, r8
jne 0x14006fbd0
mov r8d, 0x3a
mov rdx, rdi
mov rcx, rbx
call fcn.14007a810
cmp rbx, rax
je 0x14006fc3f
lea rcx, [rax - 2]
cmp rbx, rcx
je 0x14006fc3f
cmp word [rcx], 0x2e
jne 0x14006fc22
lea rdx, [rcx - 2]
cmp rbx, rdx
jne 0x14006fc42
cmp word [rdx], 0x2e
jne 0x14006fc42
jmp 0x14006fc3f
sub rcx, 2
cmp rbx, rcx
je 0x14006fc3f
nop dword [rax + rax]
cmp word [rcx], 0x2e
je 0x14006fc42
sub rcx, 2
cmp rbx, rcx
jne 0x14006fc30
mov rcx, rax
mov qword [rbp + 0x1e0], rcx
sub rax, rcx
sar rax, 1
mov qword [rbp + 0x1e8], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x170]
call fcn.140071dd0
or esi, 0x8002
mov dword [rbp + 8], esi
lea rax, [rbp + 0x80]
mov rbx, qword [rbp + 0x98]
cmp rbx, 8
cmovae rax, qword [rbp + 0x80]
mov qword [rbp + 0x250], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x258], rax
vmovups xmm0, xmmword [rbp + 0x250]
vmovdqa xmmword [rbp + 0x380], xmm0
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x170]
call fcn.14006ed00
test eax, eax
jne 0x14006fcd4
mov dil, 1
jmp 0x14006fcd7
mov rbx, qword [rbp + 0x98]
xor dil, dil
test sil, 2
je 0x14006fd4a
and esi, 0xfffffffd
mov dword [rbp + 8], esi
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x14006fd30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fd24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070088
call fcn.14007b044
mov rbx, qword [rbp + 0x98]
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
test sil, 1
je 0x14006fdaf
and esi, 0xfffffffe
mov dword [rbp + 8], esi
cmp rbx, 8
jb 0x14006fd95
lea rdx, [rbx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fd90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007008f
call fcn.14007b044
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r12w
test dil, dil
je 0x14006ffc2
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 8
jb 0x14006fdc7
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rdi, [rcx + rax*2]
mov rbx, rdi
mov rdx, rdi
call fcn.14006e980
cmp rax, rdi
je 0x14006fe1b
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14006fdef
cmp cx, 0x2f
jne 0x14006fdf8
add rax, 2
cmp rax, rdi
jne 0x14006fde0
cmp rax, rdi
je 0x14006fe1b
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14006fe1b
cmp cx, 0x2f
je 0x14006fe1b
mov rbx, rdx
cmp rax, rdx
jne 0x14006fe00
mov qword [rbp + 0x260], rbx
sub rdi, rbx
sar rdi, 1
mov qword [rbp + 0x268], rdi
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xc0]
call fcn.140071dd0
bts esi, 0xb
lea rax, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rax, qword [rbp + 0xc0]
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x278], rax
call fcn.14007a0fc
vmovups xmm0, xmmword [rbp + 0x270]
vmovdqa xmmword [rbp + 0x390], xmm0
lea r8, [rbp + 0x390]
mov edx, eax
lea rcx, [rbp + 0xa0]
call fcn.140071810
or esi, 0x7000
mov dword [rbp + 8], esi
mov rdx, qword [0x140098a28]
cmp rdx, qword [0x140098a30]
je 0x14006fef5
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], r12
vmovups ymm0, ymmword [rbp + 0xa0]
vmovups ymmword [rdx], ymm0
mov qword [rbp + 0xb0], r12
mov eax, 0xf
mov qword [rbp + 0xb8], rax
mov byte [rbp + 0xa0], 0
add qword [0x140098a28], 0x20
jmp 0x14006ff08
lea r8, [rbp + 0xa0]
call fcn.140071f20
mov rax, qword [rbp + 0xb8]
cmp rax, 0x10
jb 0x14006ff46
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ff3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070096
vzeroupper
call fcn.14007b044
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14006ffa8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ffa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400700a0
vzeroupper
call fcn.14007b044
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r12w
lea rdx, [rbp + 0x580]
mov rcx, qword [r14 + 0x40]
vzeroupper
call fcn.14007a3d4
cmp eax, 0x12
je 0x14007001c
test eax, eax
jne 0x1400717f5
cmp word [rbp + 0x5ac], 0x2e
jne 0x140070008
movzx eax, word [rbp + 0x5ae]
test ax, ax
je 0x14006ffc2
cmp ax, 0x2e
jne 0x140070008
cmp word [rbp + 0x5b0], 0
je 0x14006ffc2
lea rdx, [rbp + 0x580]
mov rcx, r14
call fcn.14006f400
jmp 0x14006fa90
mov qword [rbp + 0x3a0], r14
mov r14, r12
mov qword [rbp + 0x3f0], r12
mov rbx, qword [rbp + 0x3f8]
mov qword [rbp + 0x3a8], rbx
mov qword [rbp + 0x3f8], r12
test rbx, rbx
je 0x14006fa90
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140070080
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140070080
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
nop word [rax + rax]
mov esi, dword [rbp + 8]
jmp 0x14006fa85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x448]
test rcx, rcx
je 0x1400700f1
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400700f1
mov rbx, qword [rbp + 0x448]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400700f1
mov rcx, qword [rbp + 0x448]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rbx, qword [rbp + 0x3f8]
test rbx, rbx
je 0x140070138
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140070138
mov rbx, qword [rbp + 0x3f8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140070138
mov rcx, qword [rbp + 0x3f8]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x3e8]
test rcx, rcx
je 0x14007017e
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14007017e
mov rbx, qword [rbp + 0x3e8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14007017e
mov rcx, qword [rbp + 0x3e8]
mov rax, qword [rcx]
call qword [rax + 8]
mov ebx, r12d
mov rax, qword [0x140098a28]
mov r8, qword [0x140098a20]
sub rax, r8
sar rax, 5
vxorps xmm6, xmm6, xmm6
mov edx, dword [0x1400950b0]
test rax, rax
je 0x14007020d
mov rdi, r12
nop dword [rax + rax]
vmovss dword [rbp + 0x10], xmm6
vmovss dword [rbp + 0x14], xmm6
cmp edx, ebx
sete dl
lea rcx, [rdi + r8]
cmp qword [rcx + 0x18], 0x10
jb 0x1400701cd
mov rcx, qword [rcx]
lea r9, [rbp + 0x10]
xor r8d, r8d
call fcn.1400640d0
mov edx, dword [0x1400950b0]
test al, al
cmovne edx, ebx
mov dword [0x1400950b0], edx
inc ebx
add rdi, 0x20
mov rcx, qword [0x140098a28]
mov r8, qword [0x140098a20]
sub rcx, r8
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x1400701b0
movabs rdi, 0x9a320997b80549de
movabs rsi, 0x1799256ef03cd275
cmp edx, 0xffffffff
je 0x140070307
movsxd rdx, edx
shl rdx, 5
add rdx, r8
cmp qword [rdx + 0x18], 0x10
jb 0x14007023e
mov rdx, qword [rdx]
movabs rax, 0xe5b46a677beb2f98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x3223bf1b6f1dda2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x1799256ef04ff755
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs r14, 0x81d11e041e874aeb
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x800]
vmovdqu ymmword [rbp + 0x1a0], ymm1
lea rcx, [rbp + 0x1a0]
vzeroupper
call fcn.140051b00
jmp 0x140070311
movabs r14, 0x81d11e041e874aeb
movabs rax, 0xe7bf71673ef02f85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x821bb1c6f52de65
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
vmovdqu xmm0, xmmword [rbp + 0xe0]
vpxor xmm1, xmm0, xmmword [rbp + 0x860]
vmovdqu xmmword [rbp + 0xe0], xmm1
vmovss dword [rbp + 0x18], xmm6
vmovss dword [rbp + 0x1c], xmm6
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x18]
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea rbx, [0x140098740]
mov r8, rbx
xor edx, edx
lea rcx, [rbp + 0xe0]
call fcn.14005af40
vmovss dword [rbp + 0x20], xmm6
vmovss dword [rbp + 0x24], xmm6
movabs rax, 0xe2f17b707fe23888
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x844d61a6814d763
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
vmovdqu xmm0, xmmword [rbp + 0xf0]
vpxor xmm1, xmm0, xmmword [rbp + 0x880]
vmovdqu xmmword [rbp + 0xf0], xmm1
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xf0]
call fcn.1400529e0
test al, al
je 0x1400705fd
movabs rax, 0x81d11e7769e63ac5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x8a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x8a8], rax
vmovdqu xmm0, xmmword [rbp + 0x70]
vpxor xmm1, xmm0, xmmword [rbp + 0x8a0]
vmovdqu xmmword [rbp + 0x70], xmm1
vpxor xmm2, xmm2, xmm2
vmovups xmmword [rbp + 0x130], xmm2
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x140], xmm0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x1400704b4
mov rdx, rbx
lea rcx, [rbp + 0x130]
call fcn.14000d620
nop
lea rax, [rbp + 0x70]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400704e0
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x130]
call fcn.140018b50
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x500], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x510], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x500], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or dword [rbp + 8], 4
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x14007057b
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070573
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070573
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
lea rcx, [rbp + 0x500]
vzeroupper
call fcn.140072320
nop
mov rdx, qword [rbp + 0x518]
cmp rdx, 0x10
jb 0x1400705e6
inc rdx
mov rcx, qword [rbp + 0x500]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400705e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400705e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x510], xmm0
mov byte [rbp + 0x500], 0
mov rax, qword [0x1400963d0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x14007065f
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp + 0x28], xmm6
vmovss dword [rbp + 0x2c], xmm6
movabs rax, 0xeea53e707bf42f99
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x7c28a31c6717dd2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x830], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x838], rax
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x820]
vmovdqu ymmword [rbp + 0x1c0], ymm1
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x1c0]
vzeroupper
call fcn.1400529e0
test al, al
je 0x1400708da
mov byte [0x140096388], 0
mov dword [0x140096394], r12d
mov rcx, qword [0x140098958]
mov rax, qword [0x140098960]
sub rax, rcx
sar rax, 2
test rax, rax
je 0x1400717fd
mov eax, dword [rcx]
mov dword [0x140095048], eax
mov byte [0x14009638a], 0
mov dword [0x140095074], 0xf
mov dword [0x140095080], 0x96
mov byte [0x14009638c], 0
vmovups xmm0, xmmword [0x140088920]
vmovups xmmword [0x140095230], xmm0
vmovss xmm3, dword [0x1400885e0]
vmovss dword [0x14009507c], xmm3
mov byte [0x14009638d], 0
vmovups xmm0, xmmword [0x140088910]
vmovups xmmword [0x140095200], xmm0
vmovups xmm1, xmm0
vmovups xmmword [0x140095250], xmm0
vmovups xmmword [0x140095240], xmm0
vmovss xmm1, dword [0x1400885f0]
vmovss dword [0x140095054], xmm1
mov byte [0x140096392], 0
vmovups xmm0, xmmword [0x140088900]
vmovups xmmword [0x140095210], xmm0
vmovss xmm2, dword [0x140088634]
vmovss dword [0x140095064], xmm2
mov byte [0x140096390], 0
vmovups xmm0, xmmword [0x140088920]
vmovups xmmword [0x1400951f0], xmm0
vmovss dword [0x14009506c], xmm3
vmovss xmm1, dword [0x140088654]
vmovss dword [0x140095088], xmm1
mov byte [0x140096391], 0
vmovups xmm0, xmmword [0x140088900]
vmovups xmmword [0x140095270], xmm0
vmovss dword [0x14009505c], xmm2
mov byte [0x140095050], 1
vmovups xmm0, xmmword [0x140088920]
vmovups xmmword [0x1400951e0], xmm0
mov byte [0x140095060], 1
vmovups xmm1, xmm0
vmovups xmmword [0x140095220], xmm0
vmovss xmm0, dword [0x14008858c]
vmovss dword [0x140095068], xmm0
mov byte [0x140096389], 0
mov byte [0x14009638b], 0
vmovups xmm0, xmmword [0x140088900]
vmovups xmmword [0x140095260], xmm0
vmovss xmm1, dword [0x140088608]
vmovss dword [0x140095070], xmm1
vmovss dword [0x140095078], xmm3
mov byte [0x140095084], 1
mov byte [0x140096393], 0
mov byte [0x14009638f], 0
mov byte [0x14009638e], 0
mov rax, qword [0x1400963d0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x14007093c
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp + 0x30], xmm6
vmovss dword [rbp + 0x34], xmm6
movabs rax, 0xefbe7d2470e23a84
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x836bf192115d06a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x9c0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x9c8], rax
vmovdqu xmm0, xmmword [rbp + 0x100]
vpxor xmm1, xmm0, xmmword [rbp + 0x9c0]
vmovdqu xmmword [rbp + 0x100], xmm1
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x100]
call fcn.1400529e0
test al, al
je 0x140070d90
mov rdi, qword [rbp + 0x410]
lea rbx, [rbp + 0x400]
cmp qword [rbp + 0x418], 0x10
cmovae rbx, qword [rbp + 0x400]
call fcn.14007a0fc
mov qword [rbp + 0x280], rbx
mov qword [rbp + 0x288], rdi
lea r8, [rbp + 0x280]
mov edx, eax
lea rcx, [rbp + 0x420]
call fcn.140016d10
mov ebx, dword [rbp + 8]
or ebx, 0x18
mov dword [rbp + 8], ebx
lea rcx, [rbp + 0x420]
cmp qword [rbp + 0x438], 8
cmovae rcx, qword [rbp + 0x420]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x560]
call fcn.14007a488
mov r8d, eax
test eax, eax
jne 0x140070a9c
mov edx, dword [rbp + 0x570]
test dl, 1
mov ecx, 0x1ff
mov eax, 0x16d
cmovne ecx, eax
mov dword [rbp + 0x2f4], ecx
bt edx, 0xa
jae 0x140070a8e
mov eax, dword [rbp + 0x574]
cmp eax, 0xa000000c
jne 0x140070a80
lea eax, [r8 + 4]
jmp 0x140070ac2
cmp eax, 0xa0000003
jne 0x140070a8e
mov eax, 0xa
jmp 0x140070ac2
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140070ac2
mov dword [rbp + 0x2f4], 0xffff
sub eax, 2
je 0x140070abd
sub eax, 1
je 0x140070abd
sub eax, 0x32
je 0x140070abd
cmp eax, 0x46
mov eax, r12d
jne 0x140070ac2
mov eax, 1
mov dword [rbp + 0x290], r8d
lea rcx, [0x140095090]
mov qword [rbp + 0x298], rcx
vmovups xmm0, xmmword [rbp + 0x290]
vmovdqa xmmword [rbp + 0x4d0], xmm0
test eax, eax
je 0x140070d68
mov dword [rbp + 0x4d0], r12d
mov qword [rbp + 0x4d8], rcx
cmp eax, 1
je 0x140070d24
lea rcx, [rbp + 0x420]
call fcn.140017610
test al, al
je 0x140070d24
lea rax, [rbp + 0x420]
cmp qword [rbp + 0x438], 8
cmovae rax, qword [rbp + 0x420]
mov qword [rbp + 0x2c0], rax
mov rax, qword [rbp + 0x430]
mov qword [rbp + 0x2c8], rax
call fcn.14007a0fc
vmovups xmm0, xmmword [rbp + 0x2c0]
vmovdqa xmmword [rbp + 0x3b0], xmm0
lea r8, [rbp + 0x3b0]
mov edx, eax
lea rcx, [rbp + 0x490]
call fcn.140071810
or ebx, 0x380
mov dword [rbp + 8], ebx
movabs rax, 0xf3b46c6b72f7328e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x844d65d640adc22
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x900], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x908], rax
vmovdqu xmm0, xmmword [rbp + 0x2a0]
vpxor xmm1, xmm0, xmmword [rbp + 0x900]
vmovdqu xmmword [rbp + 0x2a0], xmm1
lea rax, [rbp + 0x2a0]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x140070bf0
mov rax, r15
mov rdx, qword [rbp + 0x4a0]
sub rax, rdx
cmp rax, rcx
jb 0x140071803
lea rax, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0x10
cmovae rax, qword [rbp + 0x490]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x2a0]
lea rcx, [rbp + 0x4e0]
call fcn.140019770
or dword [rbp + 8], 0x400
lea rcx, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], 0x10
cmovae rcx, qword [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x4f8]
cmp rdx, 0x10
jb 0x140070cb0
inc rdx
mov rcx, qword [rbp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070cab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070cab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x4f0], xmm0
mov byte [rbp + 0x4e0], 0
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0x10
jb 0x140070d0b
inc rdx
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070d06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070d06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
mov qword [rbp + 0x4a0], r12
mov qword [rbp + 0x4a8], 0xf
mov byte [rbp + 0x490], 0
mov rdx, qword [rbp + 0x438]
cmp rdx, 8
jb 0x140070d78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070d73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070d73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r8d, r8d
jne 0x1400717b4
jmp 0x140070d24
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088760]
vmovdqu xmmword [rbp + 0x430], xmm0
mov word [rbp + 0x420], r12w
vmovss dword [rbp + 0x38], xmm6
vmovss dword [rbp + 0x3c], xmm6
movabs rax, 0xedb46d247ae62587
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rbx, 0x844d6196406da69
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x920], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x928], rax
vmovdqu xmm0, xmmword [rbp + 0x110]
vpxor xmm1, xmm0, xmmword [rbp + 0x920]
vmovdqu xmmword [rbp + 0x110], xmm1
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.1400529e0
test al, al
je 0x140070ec2
movsxd rcx, dword [0x1400950b0]
test ecx, ecx
js 0x140070ec2
mov rax, qword [0x140098a28]
mov r8, qword [0x140098a20]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x140070ec2
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x520]
call fcn.140014ff0
nop
lea rcx, [rbp + 0x520]
call fcn.140074b80
nop
mov rdx, qword [rbp + 0x538]
cmp rdx, 0x10
jb 0x140070eab
inc rdx
mov rcx, qword [rbp + 0x520]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070ea6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070ea6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x530], xmm0
mov byte [rbp + 0x520], 0
mov rax, qword [0x1400963d0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140070f24
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp + 0x40], xmm6
vmovss dword [rbp + 0x44], xmm6
movabs rax, 0xedb46d247bf12b98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x940], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x948], rax
vmovdqu xmm0, xmmword [rbp + 0x340]
vpxor xmm1, xmm0, xmmword [rbp + 0x940]
vmovdqu xmmword [rbp + 0x340], xmm1
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x340]
call fcn.1400529e0
test al, al
je 0x14007104c
movsxd rcx, dword [0x1400950b0]
test ecx, ecx
js 0x14007104c
mov rax, qword [0x140098a28]
mov r8, qword [0x140098a20]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x14007104c
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x540]
call fcn.140014ff0
nop
lea rcx, [rbp + 0x540]
call fcn.140072320
nop
mov rdx, qword [rbp + 0x558]
cmp rdx, 0x10
jb 0x140071035
inc rdx
mov rcx, qword [rbp + 0x540]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071030
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071030
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x550], xmm0
mov byte [rbp + 0x540], 0
mov rax, qword [0x1400963d0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400710ae
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp + 0x48], xmm6
vmovss dword [rbp + 0x4c], xmm6
movabs rax, 0xf2f17b707beb2f8f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0x820b3096217d569
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x960], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x968], rax
vmovdqu xmm0, xmmword [rbp + 0x320]
vpxor xmm1, xmm0, xmmword [rbp + 0x960]
vmovdqu xmmword [rbp + 0x320], xmm1
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x320]
call fcn.1400529e0
test al, al
je 0x1400714fc
movsxd rcx, dword [0x1400950b0]
test ecx, ecx
js 0x1400714fc
mov rax, qword [0x140098a28]
mov r8, qword [0x140098a20]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x1400714fc
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x470]
call fcn.140014ff0
nop
movabs rax, 0x81d11e041e874ac4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x980], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x988], rax
vmovdqu xmm0, xmmword [rbp + 0x1f0]
vpxor xmm1, xmm0, xmmword [rbp + 0x980]
vmovdqu xmmword [rbp + 0x1f0], xmm1
lea rcx, [rbp + 0x1f0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400711f0
mov rcx, qword [rbp + 0x410]
sub r15, rcx
cmp r15, rax
jb 0x1400717ae
lea r9, [rbp + 0x400]
cmp qword [rbp + 0x418], 0x10
cmovae r9, qword [rbp + 0x400]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x2d0]
call fcn.140019770
mov ebx, dword [rbp + 8]
or ebx, 0x20
lea rdx, [rbp + 0x470]
cmp qword [rbp + 0x488], 0x10
cmovae rdx, qword [rbp + 0x470]
mov r8, qword [rbp + 0x480]
lea rcx, [rbp + 0x2d0]
call fcn.140018b50
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x450], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x460], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x450], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 0x40
mov dword [rbp + 8], ebx
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0x10
jb 0x1400712f8
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400712f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400712f0
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x2e0], xmm0
mov byte [rbp + 0x2d0], 0
lea rcx, [rbp + 0x450]
cmp qword [rbp + 0x468], 0x10
cmovae rcx, qword [rbp + 0x450]
vzeroupper
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x140071438
movsxd rbx, dword [0x1400950b0]
shl rbx, 5
add rbx, qword [0x140098a20]
mov rsi, qword [0x140098a28]
lea rdi, [rbx + 0x20]
cmp rdi, rsi
je 0x1400713dc
nop dword [rax]
cmp rbx, rdi
je 0x1400713c8
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400713a2
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14007139a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140071470
mov rcx, r8
vzeroupper
call fcn.14007b044
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
vmovups ymm0, ymmword [rdi]
vmovups ymmword [rbx], ymm0
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
add rbx, 0x20
add rdi, 0x20
cmp rdi, rsi
jne 0x140071360
mov rsi, qword [0x140098a28]
mov rdx, qword [rsi - 8]
cmp rdx, 0x10
jb 0x140071416
mov rcx, qword [rsi - 0x20]
inc rdx
cmp rdx, 0x1000
jb 0x14007140e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140071470
mov rcx, r8
vzeroupper
call fcn.14007b044
mov qword [rsi - 0x10], r12
mov qword [rsi - 8], 0xf
mov byte [rsi - 0x20], 0
sub qword [0x140098a28], 0x20
mov dword [0x1400950b0], 0xffffffff
mov rdx, qword [rbp + 0x468]
cmp rdx, 0x10
jb 0x140071482
inc rdx
mov rcx, qword [rbp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007147a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007147a
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007b044
vmovdqu xmm0, xmmword [0x140088780]
vmovdqu xmmword [rbp + 0x460], xmm0
mov byte [rbp + 0x450], 0
mov rdx, qword [rbp + 0x488]
cmp rdx, 0x10
jb 0x1400714e3
inc rdx
mov rcx, qword [rbp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400714db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400714db
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007b044
mov qword [rbp + 0x480], r12
mov qword [rbp + 0x488], 0xf
mov byte [rbp + 0x470], 0
mov rax, qword [0x1400963d0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x14007155e
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss xmm0, dword [0x14008867c]
vmovss dword [rbp + 0x50], xmm0
vmovss dword [rbp + 0x54], xmm6
lea rcx, [rbp + 0x50]
vzeroupper
call fcn.140054ff0
mov rax, qword [0x1400963d0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400715de
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp + 0x58], xmm6
vmovss dword [rbp + 0x5c], xmm6
movabs rax, 0x81d17a6571eb249e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
vmovdqu xmm0, xmmword [rbp + 0x300]
vpxor xmm1, xmm0, xmmword [rbp + 0x7d0]
vmovdqu xmmword [rbp + 0x300], xmm1
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x300]
call fcn.1400529e0
test al, al
je 0x1400716d7
movabs rax, 0xe5b47a6571eb249e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
movabs rax, 0x844d67d0172b906
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x9a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x9a8], rax
vmovdqu xmm0, xmmword [rbp + 0x7d0]
vpxor xmm1, xmm0, xmmword [rbp + 0x9a0]
vmovdqu xmmword [rbp + 0x7d0], xmm1
lea rcx, [rbp + 0x7d0]
call fcn.140016220
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rbp + 0x418]
cmp rdx, 0x10
jb 0x14007171b
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071716
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071716
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
mov qword [rbp + 0x410], r12
mov qword [rbp + 0x418], 0xf
mov byte [rbp + 0x400], 0
mov rdx, qword [rbp + 0x4c8]
cmp rdx, 0x10
jb 0x140071778
inc rdx
mov rcx, qword [rbp + 0x4b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071773
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071773
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b044
mov rcx, qword [rbp + 0xd00]
xor rcx, rsp
call fcn.14007aa30
lea r11, [rsp + 0xd80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
vmovaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000cb30
nop
lea r8, [rbp + 0x420]
lea rdx, [rbp + 0x4d0]
call fcn.14006f0a0
nop
call fcn.14000cb30
nop
lea r8, [rbp + 0x150]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.1400175a0
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.1400175a0
int3
mov edx, eax
call fcn.14006f040
nop
call fcn.140015110
nop
call fcn.14000cb30
int3