Function at 0x140035760
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x590
mov rax, qword [0x14009a038]
xor rax, rsp
mov qword [rsp + 0x580], rax
mov r13, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
xor r12d, r12d
mov eax, r12d
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x48], eax
cmp qword [rcx + 0x30], rax
je 0x140037198
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2b0], r12
mov qword [rsp + 0x2b8], r12
mov rdi, qword [rcx + 0x30]
lea rsi, [rcx + 0x20]
cmp qword [rcx + 0x38], 0x10
jb 0x1400357dc
mov rsi, qword [rcx + 0x20]
cmp rdi, 0x10
jae 0x140035803
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b8], 0xf
mov ebx, 0xf
jmp 0x140035885
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140035857
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400371df
mov rcx, rax
call fcn.1400507d0
mov rcx, rax
test rax, rax
je 0x140037191
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140035866
test rcx, rcx
je 0x140035863
call fcn.1400507d0
jmp 0x140035866
mov rax, r12
mov qword [rsp + 0x2a0], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x2b8], rbx
mov qword [rsp + 0x2b0], rdi
mov rsi, qword [0x14009dbf0]
lea r9, str..new
cmp qword [0x14009dbf8], 0x10
cmovae r9, qword [str..new]
mov rax, rbx
sub rax, rdi
cmp rsi, rax
ja 0x1400358ef
lea rax, [rsi + rdi]
mov qword [rsp + 0x2b0], rax
lea rax, [rsp + 0x2a0]
cmp rbx, 0x10
cmovae rax, qword [rsp + 0x2a0]
lea rbx, [rax + rdi]
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x140035904
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x2a0]
call fcn.140026930
lea rdx, [r13 + 0x20]
lea rcx, [rsp + 0x300]
call fcn.140024a10
nop
mov rdi, qword [0x14009d970]
lea r9, str..bak
cmp qword [0x14009d978], 0x10
cmovae r9, qword [str..bak]
mov rsi, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x318]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140035989
lea rax, [rsi + rdi]
mov qword [rsp + 0x310], rax
lea rbx, [rsp + 0x300]
cmp rcx, 0x10
cmovae rbx, qword [rsp + 0x300]
lea rcx, [rbx + rsi]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov byte [rax + rsi], 0
jmp 0x14003599e
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x300]
call fcn.140026930
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x320], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x328], rax
mov ecx, 0x60
call fcn.1400507d0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x30], rax
mov rdx, qword [r13 + 8]
movzx r9d, byte [rsp + 0x44]
mov r8, rax
mov rdx, qword [rdx + 8]
lea rcx, [rsp + 0x30]
call fcn.14002c4c0
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 8], rax
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0x38], rax
mov r8, qword [rsp + 0x30]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x140035a73
mov rcx, qword [rdx]
cmp byte [rcx + 0x19], 0
jne 0x140035a3f
nop word [rax + rax]
mov rdx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140035a30
mov qword [r8], rdx
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rdx + 8]
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x140035a6d
nop word [rax + rax]
mov rcx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
je 0x140035a60
mov qword [rdx + 0x10], rcx
jmp 0x140035a7f
mov qword [r8], r8
mov rax, qword [rsp + 0x30]
mov qword [rax + 0x10], rax
lea rdx, [r13 + 0x20]
lea rcx, [rsp + 0x3d0]
call fcn.140024a10
mov rdx, rax
lea rcx, [rsp + 0x340]
call fcn.14001ebe0
nop
lea rbx, vtable.iusl::File.0
mov qword [rsp + 0x420], rbx
mov rdx, rax
lea rcx, [rsp + 0x428]
call fcn.1400247f0
mov qword [rsp + 0x448], r12
mov rdx, qword [rsp + 0x358]
cmp rdx, 8
jb 0x140035b13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035b0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035b0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov qword [rsp + 0x350], r12
mov qword [rsp + 0x358], 7
mov word [rsp + 0x340], r12w
lea rdx, [rsp + 0x2a0]
cmp qword [rsp + 0x2b8], 0x10
cmovae rdx, qword [rsp + 0x2a0]
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140035b70
lea rcx, [rsp + 0x280]
call fcn.140025150
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x2c0]
call fcn.14001ebe0
nop
mov qword [rsp + 0x3f0], rbx
mov rdx, rax
lea rcx, [rsp + 0x3f8]
call fcn.1400247f0
mov qword [rsp + 0x418], r12
mov rdx, qword [rsp + 0x2d8]
cmp rdx, 8
jb 0x140035c08
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035c03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035c03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], 7
mov word [rsp + 0x2c0], r12w
lea rcx, [rsp + 0x90]
call fcn.140038190
nop
lea rcx, [rsp + 0x180]
call fcn.1400240d0
nop
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x420]
call fcn.14004a550
mov qword [rsp + 0x2e0], r12
mov qword [rsp + 0x2f0], r12
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
movabs r13, 0x8000000000000027
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
cmp dword [rsp + rcx + 0x190], 0
jne 0x1400364d4
lea rax, [rsp + 0x180]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x180]
call fcn.140034bd0
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x1400364d4
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x2c0]
call fcn.14002f880
mov rbx, rax
lea rax, [rsp + 0x2e0]
cmp rax, rbx
je 0x140035d8a
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x140035d48
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035d43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035dc4
call fcn.1400507b0
mov qword [rsp + 0x2f0], r12
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x2f0], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x2d8]
cmp rdx, 0x10
jb 0x140035dd0
inc rdx
mov rcx, qword [rsp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035dcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035dcb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov rbx, qword [rsp + 0x2f0]
test rbx, rbx
jne 0x140035e1c
lea rdx, [rsp + 0x2e0]
cmp qword [rsp + 0x2f8], 0x10
cmovae rdx, qword [rsp + 0x2e0]
xor r8d, r8d
lea rcx, [rsp + 0x90]
call fcn.1400349f0
lea rdx, [0x140034340]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140035c84
lea rax, [rsp + 0x2e0]
mov rsi, qword [rsp + 0x2e0]
mov r14, qword [rsp + 0x2f8]
cmp r14, 0x10
cmovae rax, rsi
cmp byte [rax], 0x23
jne 0x140035e56
lea rdx, [rsp + 0x2e0]
cmp r14, 0x10
cmovae rdx, rsi
mov r8, rbx
jmp 0x140035dfa
lea r15, [rsp + 0x2e0]
cmp r14, 0x10
cmovae r15, rsi
test rbx, rbx
je 0x140035e41
mov r8, rbx
mov edx, 0x3d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140035e41
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x140035e41
mov qword [rsp + 0x320], r12
mov qword [rsp + 0x330], r12
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
mov r8, rdi
cmp rbx, rdi
cmovb r8, rbx
lea rdx, [rsp + 0x2e0]
cmp r14, 0x10
cmovae rdx, rsi
lea rcx, [rsp + 0x320]
call fcn.140025150
mov r15d, dword [rsp + 0x40]
or r15d, 2
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x280]
call fcn.14002f880
nop
mov rdx, qword [rsp + 0x338]
cmp rdx, 0x10
jb 0x140035f3c
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035f37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035f37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov qword [rsp + 0x330], r12
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rcx, [rdi + 1]
mov qword [rsp + 0x2c0], r12
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rax, qword [rsp + 0x2f0]
cmp rax, rcx
jb 0x1400371e5
sub rax, rcx
mov rdi, 0xffffffffffffffff
cmp rax, rdi
cmovb rdi, rax
lea r14, [rsp + 0x2e0]
cmp qword [rsp + 0x2f8], 0x10
cmovae r14, qword [rsp + 0x2e0]
add r14, rcx
cmp rdi, 0xf
ja 0x140035fed
mov qword [rsp + 0x2d0], rdi
mov r8, rdi
mov rdx, r14
lea rcx, [rsp + 0x2c0]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rdi + 0x2c0], 0
jmp 0x140036099
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1400371ea
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14003602d
mov rbx, rax
mov rax, r13
mov rcx, rax
call fcn.1400507d0
test rax, rax
je 0x140036056
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14003606f
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003605d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400371ef
jmp 0x140036012
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003606c
call fcn.1400507d0
mov rsi, rax
jmp 0x14003606f
mov rsi, r12
mov qword [rsp + 0x2d0], rdi
mov qword [rsp + 0x2d8], rbx
mov r8, rdi
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
mov qword [rsp + 0x2c0], rsi
or r15d, 4
mov dword [rsp + 0x40], r15d
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x450]
call fcn.140034ed0
nop
mov rdx, qword [rsp + 0x2d8]
cmp rdx, 0x10
jb 0x1400360fe
inc rdx
mov rcx, qword [rsp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400360f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400360f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], 0xf
mov byte [rsp + 0x2c0], 0
mov rsi, qword [rsp + 0x290]
mov r15, qword [rsp + 0x298]
mov r14, qword [rsp + 0x280]
test rsi, rsi
je 0x14003641f
mov r13, qword [rsp + 0x30]
mov rbx, qword [r13 + 8]
cmp byte [rbx + 0x19], 0
jne 0x1400361b0
nop word [rax + rax]
lea rcx, [rbx + 0x20]
lea rdx, [rsp + 0x280]
cmp r15, 0x10
cmovae rdx, r14
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140036172
mov rcx, qword [rcx]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140036197
cmp rdi, rsi
jae 0x140036191
mov eax, 0xffffffff
jmp 0x140036197
mov eax, r12d
seta al
shr eax, 0x1f
test al, al
je 0x1400361a4
mov rbx, qword [rbx + 0x10]
jmp 0x1400361aa
mov r13, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140036150
cmp byte [r13 + 0x19], 0
jne 0x140036415
mov rbx, qword [r13 + 0x30]
lea rdx, [r13 + 0x20]
cmp qword [r13 + 0x38], 0x10
jb 0x1400361ce
mov rdx, qword [r13 + 0x20]
lea rcx, [rsp + 0x280]
cmp r15, 0x10
cmovae rcx, r14
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140036203
cmp rsi, rbx
jae 0x1400361fd
mov eax, 0xffffffff
jmp 0x140036203
mov eax, r12d
seta al
shr eax, 0x1f
test al, al
jne 0x140036415
cmp r13, qword [rsp + 0x30]
je 0x140036415
mov r14, qword [rsp + 0x58]
cmp byte [r14 + 0x18], al
jne 0x14003632b
lea rax, vtable.LogItem.0
mov qword [rsp + 0x360], rax
call fcn.14001ee00
mov rdx, rax
lea rcx, [rsp + 0x368]
call fcn.140024a10
or dword [rsp + 0x40], 8
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x3d0]
call fcn.140024a10
mov rdx, rax
lea rcx, [rsp + 0x388]
call fcn.14001ebe0
nop
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x320]
call fcn.140024a10
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call fcn.14001ebe0
mov dword [rsp + 0x3c8], 1
mov dword [rsp + 0x3cc], 1
lea rdx, [0x1400896b4]
lea rcx, [rsp + 0x360]
call fcn.14001f800
mov dword [rax + 0x68], r12d
mov rdx, r14
mov rcx, rax
call fcn.140027660
mov dword [rax + 0x68], 1
lea rdx, [0x1400896b8]
mov rcx, rax
call fcn.14001f800
lea rdx, str.Updated_line:
mov rcx, rax
call fcn.14001f800
mov rbx, rax
lea rdx, [r13 + 0x20]
mov rcx, rax
call fcn.14001fa10
mov rcx, rbx
call fcn.140035200
lea rdx, [r13 + 0x40]
mov rcx, rax
call fcn.14001fa10
nop
lea rcx, [rsp + 0x360]
call fcn.14001f300
mov rax, qword [r14]
mov rsi, qword [rax + 0x50]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rdx, [r13 + 0x40]
lea rcx, [rsp + 0x70]
call fcn.140024a10
mov rbx, rax
lea rdx, [r13 + 0x20]
lea rcx, [rsp + 0x470]
call fcn.140024a10
nop
mov r9, rbx
mov r8, rax
lea rdx, [rsp + 0x3d0]
mov rcx, r14
mov rax, rsi
call qword [0x1400808b8]
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140036388
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400349f0
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 0x10
jb 0x1400363df
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400363da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400363da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov rdx, r13
lea rcx, [rsp + 0x30]
call fcn.140039080
mov rbx, rax
lea rcx, [rax + 0x20]
call fcn.14002c5b0
mov edx, 0x60
mov rcx, rbx
call fcn.1400507b0
mov r15, qword [rsp + 0x298]
mov r14, qword [rsp + 0x280]
movabs r13, 0x8000000000000027
mov rdx, qword [rsp + 0x468]
cmp rdx, 0x10
jb 0x140036475
inc rdx
mov rcx, qword [rsp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036460
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036460
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov r15, qword [rsp + 0x298]
mov r14, qword [rsp + 0x280]
mov qword [rsp + 0x460], r12
mov qword [rsp + 0x468], 0xf
mov byte [rsp + 0x450], 0
cmp r15, 0x10
jb 0x140035c84
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400364c7
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400364c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400507b0
jmp 0x140035c84
mov rbx, qword [rsp + 0x30]
mov rbx, qword [rbx]
mov r13, qword [rsp + 0x58]
lea rdi, str._02x
cmp rbx, qword [rsp + 0x30]
je 0x140036b54
cmp byte [r13 + 0x18], 0
jne 0x14003693b
lea rdx, vtable.LogItem.0
mov qword [rsp + 0x360], rdx
call fcn.14001ee00
mov rdx, rax
lea rcx, [rsp + 0x368]
call fcn.140024a10
or dword [rsp + 0x40], 0x10
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x470]
call fcn.140024a10
mov rdx, rax
lea rcx, [rsp + 0x388]
call fcn.14001ebe0
nop
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x70]
call fcn.140024a10
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call fcn.14001ebe0
mov dword [rsp + 0x3c8], 1
mov dword [rsp + 0x3cc], 1
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
mov r8d, 3
lea rdx, [0x1400896b4]
lea rcx, [rsp + 0x280]
call fcn.140025150
nop
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
nop
mov rdx, qword [rsp + 0x298]
cmp rdx, 0x10
jb 0x14003661d
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036618
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036822
call fcn.1400507b0
mov dword [rsp + 0x3c8], r12d
mov r9, r13
lea r8, str._llx
mov edx, 0x80
lea rcx, [rsp + 0x500]
call fcn.14001e120
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
lea rax, [rsp + 0x500]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140036674
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x280]
call fcn.140025150
nop
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
nop
mov rdx, qword [rsp + 0x298]
cmp rdx, 0x10
jb 0x1400366f0
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400366eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400366eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov dword [rsp + 0x3c8], 1
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
mov r8d, 2
lea rdx, [0x1400896b8]
lea rcx, [rsp + 0x280]
call fcn.140025150
nop
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
nop
mov rdx, qword [rsp + 0x298]
cmp rdx, 0x10
jb 0x140036793
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003678e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036822
call fcn.1400507b0
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
mov r8d, 0xa
lea rdx, str.New_line:
lea rcx, [rsp + 0x280]
call fcn.140025150
nop
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
nop
mov rdx, qword [rsp + 0x298]
cmp rdx, 0x10
jb 0x14003682e
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036829
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036829
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
lea rdx, [rbx + 0x20]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
lea r8, [0x14008a3e4]
cmp dword [rsp + 0x3c8], 0
cmove r8, rdi
mov edx, 0x80
lea r9d, [rdx - 0x43]
lea rcx, [rsp + 0x500]
call fcn.14001e120
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
lea rax, [rsp + 0x500]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400368a0
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x280]
call fcn.140025150
nop
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
nop
mov rdx, qword [rsp + 0x298]
cmp rdx, 0x10
jb 0x14003691c
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036917
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036917
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
lea rdx, [rbx + 0x40]
lea rcx, [rsp + 0x360]
call fcn.14001fa10
nop
lea rcx, [rsp + 0x360]
call fcn.14001f300
mov rax, qword [r13]
mov r15, qword [rax + 0x50]
lea rax, [rsp + 0x280]
mov qword [rsp + 0x320], rax
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], r12
lea rdi, [rbx + 0x40]
mov r14, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x14003697d
mov rdi, qword [rdi]
cmp r14, 0x10
jae 0x14003699c
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x280], xmm0
mov qword [rsp + 0x298], 0xf
jmp 0x1400369dc
mov rsi, r14
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rdx, [rsi + 1]
call fcn.140025330
mov qword [rsp + 0x280], rax
lea r8, [r14 + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x298], rsi
mov qword [rsp + 0x290], r14
lea rdi, [rbx + 0x20]
mov qword [rsp + 0x2c0], r12
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], r12
mov r14, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x140036a0e
mov rdi, qword [rdi]
cmp r14, 0x10
jae 0x140036a2d
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x2c0], xmm0
mov qword [rsp + 0x2d8], 0xf
jmp 0x140036a6d
mov rsi, r14
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rdx, [rsi + 1]
call fcn.140025330
mov qword [rsp + 0x2c0], rax
lea r8, [r14 + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x2d8], rsi
mov qword [rsp + 0x2d0], r14
lea r9, [rsp + 0x280]
lea r8, [rsp + 0x2c0]
lea rdx, [rsp + 0x3d0]
mov rcx, r13
mov rax, r15
call qword [0x1400808b8]
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140036aa8
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400349f0
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 0x10
jb 0x140036aff
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036afa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036afa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140036b2e
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140036b26
cmp rbx, qword [rax + 0x10]
jne 0x140036b26
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140036b13
mov rbx, rax
jmp 0x1400364e1
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400364e1
nop
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140036b40
jmp 0x1400364e1
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x98]
call fcn.140024e30
nop
lea rdx, [rsp + 0x340]
cmp qword [rsp + 0x358], 0x10
cmovae rdx, qword [rsp + 0x340]
mov r8d, dword [rsp + 0x350]
lea rcx, [rsp + 0x3f0]
call fcn.140049000
lea rcx, [rsp + 0x3f0]
call fcn.140048c30
nop
mov rdx, qword [rsp + 0x358]
cmp rdx, 0x10
jb 0x140036bed
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036be8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036be8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov qword [rsp + 0x350], r12
mov qword [rsp + 0x358], 0xf
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0x10
jb 0x140036c4f
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036c4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036c4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400507b0
mov qword [rsp + 0x2f0], r12
mov qword [rsp + 0x2f8], 0xf
mov byte [rsp + 0x2e0], 0
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x180], rax
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x17c], edx
lea rcx, [rsp + 0x198]
call fcn.140024010
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x218]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
jmp 0x140036cd3
lea rcx, [rsp + 0x300]
cmp qword [rsp + 0x318], 0x10
cmovae rcx, qword [rsp + 0x300]
lea rdx, [rsp + 0x490]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
test eax, eax
jne 0x140036e86
lea rcx, [rsp + 0x300]
cmp qword [rsp + 0x318], 0x10
cmovae rcx, qword [rsp + 0x300]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
je 0x140036e86
lea rcx, [rsp + 0x360]
call fcn.14001f0c0
nop
mov dword [rax + 0x6c], 3
lea rdx, [0x1400896b4]
mov rcx, rax
call fcn.14001f800
mov dword [rax + 0x68], r12d
mov rdx, r13
mov rcx, rax
call fcn.140027660
mov dword [rax + 0x68], 1
lea rdx, [0x1400896b8]
mov rcx, rax
call fcn.14001f800
lea rdx, str.Error_occured_when_trying_to_remove_old_backup_config_file:
mov rcx, rax
call fcn.14001f800
lea rdx, [rsp + 0x300]
cmp qword [rsp + 0x318], 0x10
cmovae rdx, qword [rsp + 0x300]
mov rcx, rax
call fcn.14001f800
nop
lea rcx, [rsp + 0x360]
call fcn.14001f300
nop
lea rcx, [rsp + 0x90]
call fcn.140037230
nop
lea rcx, [rsp + 0x3f0]
call fcn.140048860
nop
lea rcx, [rsp + 0x420]
call fcn.140048860
nop
mov r8, qword [rsp + 0x30]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.14002c440
mov edx, 0x60
mov rcx, qword [rsp + 0x30]
call fcn.1400507b0
nop
lea rcx, [rsp + 0x300]
call fcn.1400248b0
nop
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 0x10
jb 0x140036e57
inc rdx
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036e52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037191
call fcn.1400507b0
xor al, al
mov rcx, qword [rsp + 0x580]
xor rcx, rsp
call fcn.140050790
lea r11, [rsp + 0x590]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rdx, [rsp + 0x300]
cmp qword [rsp + 0x318], 0x10
cmovae rdx, qword [rsp + 0x300]
lea rbx, [r13 + 0x20]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140036eb1
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
je 0x140036f63
lea rcx, [rsp + 0x360]
call fcn.14001f0c0
nop
mov dword [rax + 0x6c], 3
lea rdx, [0x1400896b4]
mov rcx, rax
call fcn.14001f800
mov dword [rax + 0x68], r12d
mov rdx, r13
mov rcx, rax
call fcn.140027660
mov dword [rax + 0x68], 1
lea rdx, [0x1400896b8]
mov rcx, rax
call fcn.14001f800
lea rdx, str.Error_occured_when_trying_to_rename_file:
mov rcx, rax
call fcn.14001f800
cmp qword [rbx + 0x18], 0x10
jb 0x140036f21
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14001f800
lea rdx, str._to:
mov rcx, rax
call fcn.14001f800
lea rdx, [rsp + 0x300]
cmp qword [rsp + 0x318], 0x10
cmovae rdx, qword [rsp + 0x300]
mov rcx, rax
call fcn.14001f800
nop
jmp 0x140036da6
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140036f70
mov rdx, qword [rbx]
lea rcx, [rsp + 0x2a0]
cmp qword [rsp + 0x2b8], 0x10
cmovae rcx, qword [rsp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
je 0x14003703c
lea rcx, [rsp + 0x360]
call fcn.14001f0c0
nop
mov dword [rax + 0x6c], 3
lea rdx, [0x1400896b4]
mov rcx, rax
call fcn.14001f800
mov dword [rax + 0x68], r12d
mov rdx, r13
mov rcx, rax
call fcn.140027660
mov dword [rax + 0x68], 1
lea rdx, [0x1400896b8]
mov rcx, rax
call fcn.14001f800
lea rdx, str.Error_occured_when_trying_to_rename_file:
mov rcx, rax
call fcn.14001f800
lea rdx, [rsp + 0x2a0]
cmp qword [rsp + 0x2b8], 0x10
cmovae rdx, qword [rsp + 0x2a0]
mov rcx, rax
call fcn.14001f800
lea rdx, str._to:
mov rcx, rax
call fcn.14001f800
cmp qword [rbx + 0x18], 0x10
jb 0x14003702b
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14001f800
nop
jmp 0x140036da6
lea rcx, [rsp + 0x90]
call fcn.140037230
nop
lea rcx, [rsp + 0x3f0]
call fcn.140048860
nop
lea rcx, [rsp + 0x420]
call fcn.140048860
nop
mov r8, qword [rsp + 0x30]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.14002c440
mov edx, 0x60
mov rcx, qword [rsp + 0x30]
call fcn.1400507b0
nop
lea rcx, [rsp + 0x300]
call fcn.1400248b0
nop
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 0x10
jb 0x1400370df
inc rdx
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400370da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037191
call fcn.1400507b0
mov al, 1
jmp 0x140036e59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.configFileName_must_not_be_empty
lea rcx, [rsp + 0x470]
call fcn.1400249d0
nop
mov dword [rsp + 0x48], 1
lea rdx, [rsp + 0x470]
lea rcx, [rsp + 0x4c0]
call fcn.14002f740
lea rdx, [0x140096c38]
lea rcx, [rsp + 0x4c0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.14001e2e0
nop
call fcn.14002dec0
call fcn.14001e380
call fcn.14001e2e0
int3