Function at 0x140054640
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xc68]
sub rsp, 0xd40
mov qword [rbp + 0x2a0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400dc010]
xor rax, rsp
mov qword [rbp + 0xc30], rax
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov dword [rbp - 0x50], r15d
lea rax, [rbp + 0x58]
mov qword [rbp + 0x1b8], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x1b0], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005864b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rdx, [0x140099090]
lea rcx, [rbp + 0x58]
call fcn.14000ce70
test al, al
jne 0x1400546e8
lea rdx, [0x140099090]
lea rcx, [rbp + 0x58]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058656
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x60], rax
lea rdx, str.Started_readAndExecuteConditionFromANKCSPTFile
lea rcx, [rbp + 0x60]
call fcn.14000ce70
test al, al
jne 0x14005472c
lea rdx, str.Started_readAndExecuteConditionFromANKCSPTFile
lea rcx, [rbp + 0x60]
call fcn.14000c670
nop
mov r13, 0xffffffffffffffff
mov r8d, r13d
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x60]
call fcn.14005c860
lea rcx, [rbp + 0x288]
call fcn.140063f10
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058661
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
lea rdx, str.C:Windowsiassistinformation.txt
lea rcx, [rbp + 0x50]
call fcn.14000ce70
test al, al
jne 0x140054794
lea rdx, str.C:Windowsiassistinformation.txt
lea rcx, [rbp + 0x50]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005866c
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058677
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058682
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005868d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058698
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400586a3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov qword [rbp + 0x3d0], r15
mov qword [rbp + 0x3d8], r15
mov qword [rbp + 0x3d0], r15
mov qword [rbp + 0x3d8], 0xf
mov byte [rbp + 0x3c0], 0
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x2b0]
call fcn.14000ac90
nop
mov r12d, 1
cmp qword [rbp + 0x340], 0
je 0x1400559fc
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2b0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x2b0]
call fcn.14005ac90
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x1400559fc
lea rdi, [rbp + 0x3c0]
mov r14, qword [rbp + 0x3c0]
mov r15, qword [rbp + 0x3d8]
cmp r15, 0x10
cmovae rdi, r14
mov rsi, qword [rbp + 0x3d0]
cmp rsi, 9
jb 0x14005496f
lea r12, [rsi + rdi]
lea r8, [r12 - 8]
sub r8, rdi
mov edx, 0x46
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140054969
movzx r13d, byte [0x1400a4a38]
mov rcx, qword [str.FilePath]
cmp qword [rax], rcx
jne 0x140054945
cmp byte [rax + 8], r13b
je 0x1400549a3
inc rax
lea r8, [r12 - 8]
sub r8, rax
mov edx, 0x46
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140054933
mov r13, 0xffffffffffffffff
mov r12d, 1
mov rax, r13
test eax, eax
js 0x140054bc6
lea rdx, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rsp + 0x48]
call fcn.14000c670
mov rbx, qword [rsp + 0x48]
cmp dword [rbx - 0x10], 0
jge 0x1400549b3
mov eax, r13d
jmp 0x1400549d3
sub rax, rdi
mov r13, 0xffffffffffffffff
lea r12d, [r13 + 2]
jmp 0x140054972
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x1400549cd
mov eax, r13d
jmp 0x1400549d3
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x200]
lea rcx, [rsp + 0x48]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140054a49
cmp dword [rbx + 0x10], 0
jl 0x140054a3a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140054a3a
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140054a2f
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x140054a49
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140054a6a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x48]
mov rsi, rbx
xor r14d, r14d
mov edi, r14d
movzx eax, word [rbx]
test ax, ax
je 0x140054af2
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x140054a9c
mov rax, rsi
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x140054a9f
mov rdi, r14
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x140054a80
test rdi, rdi
je 0x140054af2
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x1400586b9
mov ecx, r12d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140054ade
mov edx, edi
lea rcx, [rsp + 0x48]
call fcn.14000d2f0
mov rbx, qword [rsp + 0x48]
cmp edi, dword [rbx - 0xc]
jg 0x1400586ae
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
mov rdi, rbx
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x140054bb1
nop word [rax + rax]
add rdi, 2
movzx ecx, word [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
jne 0x140054b10
cmp rdi, rbx
je 0x140054bb1
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x1400586fa
mov ecx, r12d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x140054b59
lea rcx, [rsp + 0x48]
call fcn.14000d2f0
mov rbx, qword [rsp + 0x48]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x140054b95
test rdx, rdx
je 0x1400586d2
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x1400586c4
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
test esi, esi
js 0x1400586ef
cmp esi, dword [rbx - 0xc]
jg 0x1400586ef
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r14w
mov r14, qword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3d0]
mov r15, qword [rbp + 0x3d8]
lea rdi, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdi, r14
cmp rsi, 0xb
jb 0x140054c44
lea r12, [rsi + rdi]
lea r8, [r12 - 0xa]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140054c44
movzx r13d, byte [0x1400a4a4a]
mov rcx, qword [str.StepNumber]
cmp qword [rax], rcx
jne 0x140054c20
movzx ecx, word [0x1400a4a48]
cmp word [rax + 8], cx
jne 0x140054c20
cmp byte [rax + 0xa], r13b
je 0x140054c76
inc rax
lea r8, [r12 - 0xa]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140054c01
mov r13, 0xffffffffffffffff
mov rax, r13
test eax, eax
js 0x140054e9b
lea rdx, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rbp - 0x70]
call fcn.14000c670
mov rbx, qword [rbp - 0x70]
cmp dword [rbx - 0x10], 0
jge 0x140054c82
mov eax, r13d
jmp 0x140054ca2
sub rax, rdi
mov r13, 0xffffffffffffffff
jmp 0x140054c47
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x140054c9c
mov eax, r13d
jmp 0x140054ca2
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x268]
lea rcx, [rbp - 0x70]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140054d15
cmp dword [rbx + 0x10], 0
jl 0x140054d07
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140054d07
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140054cfd
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rbp - 0x70], rax
jmp 0x140054d15
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x268]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140054d36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp - 0x70]
mov rsi, rbx
xor r14d, r14d
mov edi, r14d
movzx eax, word [rbx]
test ax, ax
je 0x140054dc2
nop dword [rax + rax]
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x140054d6c
mov rax, rsi
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x140054d6f
mov rdi, r14
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x140054d50
test rdi, rdi
je 0x140054dc2
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x140058710
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140054dae
mov edx, edi
lea rcx, [rbp - 0x70]
call fcn.14000d2f0
mov rbx, qword [rbp - 0x70]
cmp edi, dword [rbx - 0xc]
jg 0x140058705
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
mov rdi, rbx
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x140054e81
nop word [rax + rax]
add rdi, 2
movzx ecx, word [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
jne 0x140054de0
cmp rdi, rbx
je 0x140054e81
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x140058751
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x140054e29
lea rcx, [rbp - 0x70]
call fcn.14000d2f0
mov rbx, qword [rbp - 0x70]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x140054e65
test rdx, rdx
je 0x140058729
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x14005871b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
test esi, esi
js 0x140058746
cmp esi, dword [rbx - 0xc]
jg 0x140058746
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r14w
mov r14, qword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3d0]
mov r15, qword [rbp + 0x3d8]
mov rbx, qword [rsp + 0x48]
lea rdi, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdi, r14
cmp rsi, 0xc
jb 0x140054f16
lea r12, [rsi + rdi]
lea r8, [r12 - 0xb]
sub r8, rdi
mov edx, 0x41
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140054f16
mov r13d, dword [0x1400a4a58]
nop word [rax + rax]
mov rcx, qword [str.AdminNeeded]
cmp qword [rax], rcx
jne 0x140054ef2
cmp dword [rax + 8], r13d
je 0x140054f4a
inc rax
lea r8, [r12 - 0xb]
sub r8, rax
mov edx, 0x41
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140054ee0
mov r13, 0xffffffffffffffff
mov rax, r13
test eax, eax
js 0x14005516d
lea rdx, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000c670
mov rbx, qword [rsp + 0x60]
cmp dword [rbx - 0x10], 0
jge 0x140054f56
mov eax, r13d
jmp 0x140054f76
sub rax, rdi
mov r13, 0xffffffffffffffff
jmp 0x140054f19
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x140054f70
mov eax, r13d
jmp 0x140054f76
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x278]
lea rcx, [rsp + 0x60]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140054fec
cmp dword [rbx + 0x10], 0
jl 0x140054fdd
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140054fdd
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140054fd2
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x60], rax
jmp 0x140054fec
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x60]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x278]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005500d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x60]
mov rsi, rbx
xor r14d, r14d
mov edi, r14d
movzx eax, word [rbx]
test ax, ax
je 0x140055097
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x14005503f
mov rax, rsi
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x140055042
mov rdi, r14
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x140055023
test rdi, rdi
je 0x140055097
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x140058767
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140055083
mov edx, edi
lea rcx, [rsp + 0x60]
call fcn.14000d2f0
mov rbx, qword [rsp + 0x60]
cmp edi, dword [rbx - 0xc]
jg 0x14005875c
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
mov rdi, rbx
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x140055153
nop dword [rax + rax]
add rdi, 2
movzx ecx, word [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
jne 0x1400550b0
cmp rdi, rbx
je 0x140055153
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x1400587a8
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x1400550fb
lea rcx, [rsp + 0x60]
call fcn.14000d2f0
mov rbx, qword [rsp + 0x60]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x140055137
test rdx, rdx
je 0x140058780
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x140058772
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
test esi, esi
js 0x14005879d
cmp esi, dword [rbx - 0xc]
jg 0x14005879d
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r14w
mov r14, qword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3d0]
mov r15, qword [rbp + 0x3d8]
mov rbx, qword [rsp + 0x48]
lea rdi, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdi, r14
cmp rsi, 0x12
jb 0x1400551f4
lea r12, [rsi + rdi]
lea r8, [r12 - 0x11]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400551f4
movzx r13d, word [0x1400a4a70]
nop dword [rax + rax]
mov rcx, qword [str.ankscptFolderPath]
cmp qword [rax], rcx
jne 0x1400551d0
mov rcx, qword [0x1400a4a68]
cmp qword [rax + 8], rcx
jne 0x1400551d0
cmp word [rax + 0x10], r13w
je 0x140055226
inc rax
lea r8, [r12 - 0x11]
sub r8, rax
mov edx, 0x61
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x1400551b0
mov r13, 0xffffffffffffffff
mov rax, r13
test eax, eax
js 0x14005544b
lea rdx, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rbp - 0x78]
call fcn.14000c670
mov rbx, qword [rbp - 0x78]
cmp dword [rbx - 0x10], 0
jge 0x140055232
mov eax, r13d
jmp 0x140055252
sub rax, rdi
mov r13, 0xffffffffffffffff
jmp 0x1400551f7
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x14005524c
mov eax, r13d
jmp 0x140055252
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp - 0x78]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400552c5
cmp dword [rbx + 0x10], 0
jl 0x1400552b7
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400552b7
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400552ad
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x1400552c5
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x280]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400552e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp - 0x78]
mov rsi, rbx
xor r14d, r14d
mov edi, r14d
movzx eax, word [rbx]
test ax, ax
je 0x140055372
nop dword [rax + rax]
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x14005531c
mov rax, rsi
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x14005531f
mov rdi, r14
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x140055300
test rdi, rdi
je 0x140055372
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x1400587be
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14005535e
mov edx, edi
lea rcx, [rbp - 0x78]
call fcn.14000d2f0
mov rbx, qword [rbp - 0x78]
cmp edi, dword [rbx - 0xc]
jg 0x1400587b3
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
mov rdi, rbx
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x140055431
nop word [rax + rax]
add rdi, 2
movzx ecx, word [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
jne 0x140055390
cmp rdi, rbx
je 0x140055431
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x1400587ff
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x1400553d9
lea rcx, [rbp - 0x78]
call fcn.14000d2f0
mov rbx, qword [rbp - 0x78]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x140055415
test rdx, rdx
je 0x1400587d7
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x1400587c9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
test esi, esi
js 0x1400587f4
cmp esi, dword [rbx - 0xc]
jg 0x1400587f4
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r14w
mov r14, qword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3d0]
mov r15, qword [rbp + 0x3d8]
mov rbx, qword [rsp + 0x48]
lea r12, [rbp + 0x3c0]
cmp r15, 0x10
cmovae r12, r14
cmp rsi, 0x17
jb 0x1400554bf
lea r13, [rsi + r12]
lea r8, [r13 - 0x16]
sub r8, r12
mov edx, 0x43
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x1400554b8
mov r8d, 0x17
lea rdx, str.ConditionStrForTestBtn
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400554f1
inc rdi
lea r8, [r13 - 0x16]
sub r8, rdi
mov edx, 0x43
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140055480
mov r13, 0xffffffffffffffff
mov rdi, r13
test edi, edi
js 0x14005570b
lea rdx, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rbp - 0x80]
call fcn.14000c670
mov rbx, qword [rbp - 0x80]
cmp dword [rbx - 0x10], 0
jge 0x1400554fd
mov eax, r13d
jmp 0x14005551d
sub rdi, r12
mov r13, 0xffffffffffffffff
jmp 0x1400554c2
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x140055517
mov eax, r13d
jmp 0x14005551d
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x298]
lea rcx, [rbp - 0x80]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140055590
cmp dword [rbx + 0x10], 0
jl 0x140055582
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140055582
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140055578
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x140055590
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x298]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400555b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp - 0x80]
mov rsi, rbx
xor r14d, r14d
mov edi, r14d
movzx eax, word [rbx]
test ax, ax
je 0x140055638
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x1400555e2
mov rax, rsi
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x1400555e5
mov rdi, r14
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x1400555c6
test rdi, rdi
je 0x140055638
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x140058815
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140055624
mov edx, edi
lea rcx, [rbp - 0x80]
call fcn.14000d2f0
mov rbx, qword [rbp - 0x80]
cmp edi, dword [rbx - 0xc]
jg 0x14005880a
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
mov rdi, rbx
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x1400556f1
nop dword [rax]
add rdi, 2
movzx ecx, word [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
jne 0x140055650
cmp rdi, rbx
je 0x1400556f1
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x140058856
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x140055699
lea rcx, [rbp - 0x80]
call fcn.14000d2f0
mov rbx, qword [rbp - 0x80]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x1400556d5
test rdx, rdx
je 0x14005882e
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x140058820
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
test esi, esi
js 0x14005884b
cmp esi, dword [rbx - 0xc]
jg 0x14005884b
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r14w
mov r14, qword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3d0]
mov r15, qword [rbp + 0x3d8]
mov rbx, qword [rsp + 0x48]
lea r12, [rbp + 0x3c0]
cmp r15, 0x10
cmovae r12, r14
cmp rsi, 0x19
jb 0x14005577c
lea r8, [r12 - 0x18]
add r8, rsi
sub r8, r12
mov edx, 0x43
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x14005577c
mov r8d, 0x19
lea rdx, str.ConditionParamForTestBtn
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400557b0
inc rdi
lea r8, [r12 - 0x18]
add r8, rsi
sub r8, rdi
mov edx, 0x43
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140055740
mov rdi, r13
test edi, edi
js 0x1400559ba
lea rdx, [rbp + 0x3c0]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rsp + 0x78]
call fcn.14000c670
mov rbx, qword [rsp + 0x78]
cmp dword [rbx - 0x10], 0
jge 0x1400557b5
mov eax, r13d
jmp 0x1400557d5
sub rdi, r12
jmp 0x14005577f
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x1400557cf
mov eax, r13d
jmp 0x1400557d5
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x1c8]
lea rcx, [rsp + 0x78]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14005584b
cmp dword [rbx + 0x10], 0
jl 0x14005583c
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14005583c
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140055831
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x78], rax
jmp 0x14005584b
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x78]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005586c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x78]
mov rsi, rbx
xor r15d, r15d
mov edi, r15d
movzx eax, word [rbx]
test ax, ax
je 0x1400558f6
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x14005589e
mov rax, rsi
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x1400558a1
mov rdi, r15
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x140055882
test rdi, rdi
je 0x1400558f6
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x14005886c
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x1400558e2
mov edx, edi
lea rcx, [rsp + 0x78]
call fcn.14000d2f0
mov rbx, qword [rsp + 0x78]
cmp edi, dword [rbx - 0xc]
jg 0x140058861
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r15w
mov rdi, rbx
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
je 0x1400559b3
nop word [rax + rax]
add rdi, 2
movzx ecx, word [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
test eax, eax
jne 0x140055910
cmp rdi, rbx
je 0x1400559b3
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x1400588ad
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x14005595b
lea rcx, [rsp + 0x78]
call fcn.14000d2f0
mov rbx, qword [rsp + 0x78]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x140055997
test rdx, rdx
je 0x140058885
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x140058877
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
test esi, esi
js 0x1400588a2
cmp esi, dword [rbx - 0xc]
jg 0x1400588a2
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r15w
mov rbx, qword [rsp + 0x48]
jmp 0x1400559bd
xor r15d, r15d
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2b0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x2b0]
call fcn.14005ac90
mov r12d, 1
jmp 0x1400548d1
lea rcx, [rbp + 0x2c0]
call fcn.14000cca0
test rax, rax
jne 0x140055a2f
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2b0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x450], xmm0
movdqa xmm1, xmmword [0x1400a89e0]
movdqu xmmword [rbp + 0x450], xmm1
mov word [rbp + 0x440], r15w
mov r8, r13
inc r8
cmp word [rbx + r8*2], 0
jne 0x140055a55
mov rdx, rbx
lea rcx, [rbp + 0x440]
call fcn.14000e890
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400588b8
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdi, str.C:WindowsiassistdecrFile.ankscpt
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.14000ce70
test al, al
jne 0x140055aca
mov rax, r13
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x140055ab0
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.14000d350
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x430], xmm0
movdqa xmm1, xmmword [0x1400a89e0]
movdqu xmmword [rbp + 0x430], xmm1
mov word [rbp + 0x420], r15w
mov rdx, qword [rbp - 0x60]
mov r8, r13
inc r8
cmp word [rdx + r8*2], 0
jne 0x140055af4
lea rcx, [rbp + 0x420]
call fcn.14000e890
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x410], xmm0
movdqa xmm1, xmmword [0x1400a89e0]
movdqu xmmword [rbp + 0x410], xmm1
mov word [rbp + 0x400], r15w
mov r8d, 0xb
lea rdx, str.ANKRPY4_13
lea rcx, [rbp + 0x400]
call fcn.14000e890
nop
lea rax, [rbp - 0x40]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400588c3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rdx, str._OutputFilePath_
lea rcx, [rbp - 0x38]
call fcn.14000ce70
test al, al
jne 0x140055ba2
lea rdx, str._OutputFilePath_
lea rcx, [rbp - 0x38]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400588ce
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x80], rax
lea rdx, str.Decrypt_Solution_File:_InputFilePath_
lea rcx, [rbp + 0x80]
call fcn.14000ce70
test al, al
jne 0x140055bef
lea rdx, str.Decrypt_Solution_File:_InputFilePath_
lea rcx, [rbp + 0x80]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400588d9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
lea rdx, [0x140099090]
lea rcx, [rbp - 0x40]
call fcn.14000ce70
test al, al
jne 0x140055c33
lea rdx, [0x140099090]
lea rcx, [rbp - 0x40]
call fcn.14000c670
nop
mov rdi, qword [rbp + 0x80]
lea rsi, [rdi - 0x18]
mov rcx, qword [rsi]
test rcx, rcx
je 0x140055c54
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140055c65
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400588e4
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x1a0], rax
mov dword [rsp + 0x30], 0x40
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x20], eax
mov r9, rbx
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rbp + 0x1a0]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x1a0]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140055cc3
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140055cd4
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400588ef
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xd8], rax
mov edi, 0xc0
mov dword [rsp + 0x30], edi
mov r9, qword [rbp - 0x38]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xd8]
call fcn.14000d050
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x1d0]
call fcn.14000bc20
nop
mov r8d, r13d
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.14005c860
btr edi, 7
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140055d66
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
and dword [rsp + 0x30], 0xffffffbf
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x140055d87
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x140055da1
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140055dbf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea r8, [rbp + 0x400]
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x440]
call fcn.140065510
test al, al
je 0x140055e88
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400588fa
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
lea rdx, [0x140099090]
lea rcx, [rbp - 0x30]
call fcn.14000ce70
test al, al
jne 0x140055e37
lea rdx, [0x140099090]
lea rcx, [rbp - 0x30]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058905
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
lea rdx, str.File_decrypted_successfully.
lea rcx, [rbp - 0x28]
call fcn.14000ce70
test al, al
jne 0x140055e7b
lea rdx, str.File_decrypted_successfully.
lea rcx, [rbp - 0x28]
call fcn.14000c670
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x28]
jmp 0x140055f2a
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058910
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
lea rdx, [0x140099090]
lea rcx, [rbp - 0x20]
call fcn.14000ce70
test al, al
jne 0x140055ede
lea rdx, [0x140099090]
lea rcx, [rbp - 0x20]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005891b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
lea rdx, str.Failed_to_decrypt_the_file.
lea rcx, [rbp - 0x18]
call fcn.14000ce70
test al, al
jne 0x140055f22
lea rdx, str.Failed_to_decrypt_the_file.
lea rcx, [rbp - 0x18]
call fcn.14000c670
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x18]
mov r8d, r13d
call fcn.14005c860
mov qword [rbp + 0x3f0], r15
mov qword [rbp + 0x3f8], r15
mov qword [rbp + 0x3f0], r15
mov qword [rbp + 0x3f8], 7
mov word [rbp + 0x3e0], r15w
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058926
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058931
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005893c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov r14d, r12d
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058947
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea r8, str.r__ccsUTF_8
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
mov r8, qword [rbp + 0x70]
test r8, r8
je 0x1400566c1
mov edx, 0x3e8
lea rcx, [rbp + 0x460]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
je 0x1400566b7
lea r12, str.______
lea r15, str.needadminrightforcondition_
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058952
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x68]
call fcn.14000ce70
test al, al
jne 0x140056082
lea rcx, [rbp + 0x460]
mov rax, r13
inc rax
cmp word [rcx + rax*2], 0
jne 0x140056064
mov r8d, eax
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x68]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x68]
lea rdi, [rdx - 0x18]
mov rbx, qword [rbp - 0x58]
add rbx, 0xffffffffffffffe8
cmp rdi, rbx
je 0x1400560e2
cmp dword [rbx + 0x10], 0
jl 0x1400560d4
mov rax, qword [rbx]
cmp qword [rdi], rax
jne 0x1400560d4
mov rcx, rdi
call fcn.14000d260
mov rsi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400560ca
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x58], rax
jmp 0x1400560e2
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x58]
call fcn.14000d350
nop
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x1400560fb
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
mov rax, qword [rbp - 0x58]
mov r8, r13
inc r8
cmp word [rax + r8*2], 0
jne 0x140056102
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp + 0x3e0]
call fcn.14000e890
lea r10, [rbp + 0x3e0]
mov rsi, qword [rbp + 0x3e0]
mov rdi, qword [rbp + 0x3f8]
cmp rdi, 8
cmovae r10, rsi
mov rbx, qword [rbp + 0x3f0]
cmp rbx, 6
jb 0x1400561a3
lea r11, [rbx - 5]
lea r11, [r10 + r11*2]
mov rcx, r10
mov rax, r11
sub rax, rcx
sar rax, 1
je 0x1400561a3
cmp word [rcx], 0x2d
je 0x14005616d
add rcx, 2
sub rax, 1
jmp 0x14005615b
test rcx, rcx
je 0x1400561a3
mov r8d, 6
mov rdx, r12
mov r9, rcx
sub r9, r12
movzx eax, word [rdx]
cmp word [rdx + r9], ax
jne 0x14005619d
add rdx, 2
sub r8, 1
jne 0x140056181
sub rcx, r10
sar rcx, 1
jmp 0x1400561a6
add rcx, 2
jmp 0x140056152
mov rcx, r13
lea eax, [r14 + 1]
test ecx, ecx
cmovs eax, r14d
mov r14d, eax
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
cmp r14d, eax
jne 0x140056698
lea r10, [rbp + 0x3e0]
cmp rdi, 8
cmovae r10, rsi
cmp rbx, 0xe
jb 0x140056248
lea r11, [rbx - 0xd]
lea r11, [r10 + r11*2]
mov rcx, r10
nop word [rax + rax]
mov rax, r11
sub rax, rcx
sar rax, 1
je 0x140056248
cmp word [rcx], 0x63
je 0x14005620b
add rcx, 2
sub rax, 1
jmp 0x1400561f9
test rcx, rcx
je 0x140056248
mov r8d, 0xe
lea rax, str.conditionstr_
mov rdx, rax
mov r9, rcx
sub r9, rax
movzx eax, word [rdx]
cmp word [rdx + r9], ax
jne 0x140056242
add rdx, 2
sub r8, 1
jne 0x140056226
sub rcx, r10
sar rcx, 1
jmp 0x14005624b
add rcx, 2
jmp 0x1400561f0
mov rcx, r13
test ecx, ecx
js 0x14005636d
lea rdx, [rbp + 0x3e0]
cmp rdi, 8
jb 0x14005626c
mov rdx, rsi
test rsi, rsi
jne 0x14005626c
xor eax, eax
jmp 0x14005627a
mov rax, r13
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140056270
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.14000d350
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0
jge 0x140056297
mov eax, r13d
jmp 0x1400562b7
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x1400562b1
mov eax, r13d
jmp 0x1400562b7
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x1d8]
lea rcx, [rsp + 0x40]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14005632d
cmp dword [rbx + 0x10], 0
jl 0x14005631e
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14005631e
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056313
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x14005632d
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005634e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rsp + 0x40]
call fcn.14000bf30
mov rdi, qword [rbp + 0x3f8]
mov rbx, qword [rbp + 0x3f0]
mov rsi, qword [rbp + 0x3e0]
lea r10, [rbp + 0x3e0]
cmp rdi, 8
cmovae r10, rsi
cmp rbx, 0x17
jb 0x1400563e8
lea r11, [rbx - 0x16]
lea r11, [r10 + r11*2]
mov rcx, r10
nop dword [rax]
mov rax, r11
sub rax, rcx
sar rax, 1
je 0x1400563e8
cmp word [rcx], 0x63
je 0x1400563ab
add rcx, 2
sub rax, 1
jmp 0x140056399
test rcx, rcx
je 0x1400563e8
mov r8d, 0x17
lea rax, str.conditionparameterstr_
mov rdx, rax
mov r9, rcx
sub r9, rax
movzx eax, word [rdx]
cmp word [rdx + r9], ax
jne 0x1400563e2
add rdx, 2
sub r8, 1
jne 0x1400563c6
sub rcx, r10
sar rcx, 1
jmp 0x1400563eb
add rcx, 2
jmp 0x140056390
mov rcx, r13
test ecx, ecx
js 0x14005650d
lea rdx, [rbp + 0x3e0]
cmp rdi, 8
jb 0x14005640c
mov rdx, rsi
test rsi, rsi
jne 0x14005640c
xor eax, eax
jmp 0x14005641a
mov rax, r13
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140056410
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.14000d350
mov rbx, qword [rsp + 0x58]
cmp dword [rbx - 0x10], 0
jge 0x140056437
mov eax, r13d
jmp 0x140056457
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x140056451
mov eax, r13d
jmp 0x140056457
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x58]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400564cd
cmp dword [rbx + 0x10], 0
jl 0x1400564be
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400564be
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400564b3
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x1400564cd
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x1e0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400564ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rsp + 0x58]
call fcn.14000bf30
mov rdi, qword [rbp + 0x3f8]
mov rbx, qword [rbp + 0x3f0]
mov rsi, qword [rbp + 0x3e0]
lea r10, [rbp + 0x3e0]
cmp rdi, 8
cmovae r10, rsi
cmp rbx, 0x1c
jb 0x140056582
lea r11, [rbx - 0x1b]
lea r11, [r10 + r11*2]
mov rcx, r10
nop dword [rax]
mov rax, r11
sub rax, rcx
sar rax, 1
je 0x140056582
cmp word [rcx], 0x6e
je 0x14005654b
add rcx, 2
sub rax, 1
jmp 0x140056539
test rcx, rcx
je 0x140056582
mov r8d, 0x1c
mov rdx, r15
mov r9, rcx
sub r9, r15
nop
movzx eax, word [rdx]
cmp word [r9 + rdx], ax
jne 0x14005657c
add rdx, 2
sub r8, 1
jne 0x140056560
sub rcx, r10
sar rcx, 1
jmp 0x140056585
add rcx, 2
jmp 0x140056530
mov rcx, r13
test ecx, ecx
js 0x140056698
lea rdx, [rbp + 0x3e0]
cmp rdi, 8
jb 0x1400565a6
mov rdx, rsi
test rsi, rsi
jne 0x1400565a6
xor eax, eax
jmp 0x1400565ba
mov rax, r13
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400565b0
mov r8d, eax
lea rcx, [rsp + 0x70]
call fcn.14000d350
mov rbx, qword [rsp + 0x70]
cmp dword [rbx - 0x10], 0
jge 0x1400565d7
mov eax, r13d
jmp 0x1400565f7
lea rdx, [0x1400992b4]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x1400565f1
mov eax, r13d
jmp 0x1400565f7
sub rax, rbx
sar rax, 1
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp + 0x1e8]
lea rcx, [rsp + 0x70]
call fcn.14000bd70
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14005666d
cmp dword [rbx + 0x10], 0
jl 0x14005665e
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14005665e
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056653
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x14005666d
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x1e8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005668e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rsp + 0x70]
call fcn.14000bf30
mov r8, qword [rbp + 0x70]
mov edx, 0x3e8
lea rcx, [rbp + 0x460]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
jne 0x140056027
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x40]
call fcn.14000b940
test al, al
je 0x140056735
mov rdx, qword [rbp - 0x80]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x40]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140056735
cmp dword [rbx + 0x10], 0
jl 0x140056727
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140056727
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14005671c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x140056735
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14000d350
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x68], rax
mov r14, qword [rsp + 0x40]
add r14, 0xffffffffffffffe8
mov qword [rbp + 0x198], r14
mov rcx, r14
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x1a8], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005895d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
lea rdx, str.actionString
lea rcx, [rbp - 0x10]
call fcn.14000ce70
test al, al
jne 0x1400567b1
lea rdx, str.actionString
lea rcx, [rbp - 0x10]
call fcn.14000c670
nop
mov r8d, r13d
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp - 0x10]
call fcn.14005c860
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x58]
call fcn.14000b940
test al, al
je 0x140056839
mov rdx, qword [rsp + 0x78]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140056839
cmp dword [rbx + 0x10], 0
jl 0x14005682b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14005682b
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056820
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x140056839
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.14000d350
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x68], rax
mov rsi, qword [rsp + 0x58]
add rsi, 0xffffffffffffffe8
mov qword [rbp + 0x190], rsi
mov rcx, rsi
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0xe8], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058968
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 8], rax
lea rdx, str.actionParameterString
lea rcx, [rbp - 8]
call fcn.14000ce70
test al, al
jne 0x1400568b5
lea rdx, str.actionParameterString
lea rcx, [rbp - 8]
call fcn.14000c670
nop
mov r8d, r13d
lea rdx, [rbp + 0xe8]
lea rcx, [rbp - 8]
call fcn.14005c860
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x70]
call fcn.14000b940
mov rbx, qword [rsp + 0x60]
test al, al
je 0x140056945
lea rcx, [rbx - 0x18]
mov rdi, qword [rsp + 0x70]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140056945
cmp dword [rdi + 0x10], 0
jl 0x140056934
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140056934
call fcn.14000d260
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140056924
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x70], rax
mov rbx, qword [rsp + 0x60]
jmp 0x140056945
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14000d350
test rbx, rbx
je 0x140058973
mov rax, qword [rsp + 0x70]
sub rbx, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + rbx]
sub edx, ecx
jne 0x140056973
add rax, 2
test ecx, ecx
jne 0x140056960
test edx, edx
jne 0x14005822d
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005897e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [0x140099090]
lea rcx, [rsp + 0x38]
call fcn.14000ce70
test al, al
jne 0x1400569c2
lea rdx, [0x140099090]
lea rcx, [rsp + 0x38]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058989
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, [0x140098d49]
lea rcx, [rbp - 0x68]
call fcn.14000ce70
test al, al
jne 0x140056a06
lea rdx, [0x140098d49]
lea rcx, [rbp - 0x68]
call fcn.14000c670
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x2a8], rax
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x50], rcx
lea r12, [rax - 0x18]
mov qword [rbp + 0x180], r12
mov rcx, r12
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0xf0], rax
lea rdx, [rbp + 0xf0]
lea rcx, [rbp - 0x48]
call fcn.140006910
nop
mov rax, qword [rbp - 0x48]
movzx ecx, word [rax]
cmp cx, word [0x14009a114]
jne 0x140056ac2
mov rdx, qword [rbp - 0x78]
lea rcx, [rdx - 0x18]
lea rbx, [rax - 0x18]
cmp rcx, rbx
je 0x140056ac2
cmp dword [rbx + 0x10], 0
jl 0x140056ab5
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140056ab5
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056aab
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rbp - 0x48], rax
jmp 0x140056ac2
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x48]
call fcn.14000d350
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x188]
call fcn.14000bc20
nop
mov rdx, qword [rbp + 0x188]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x68]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140056b3b
cmp dword [rdi + 0x10], 0
jl 0x140056b2a
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140056b2a
call fcn.14000d260
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140056b20
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
add rbx, 0x18
mov qword [rbp - 0x68], rbx
jmp 0x140056b3b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x68]
call fcn.14000d350
mov rbx, qword [rbp - 0x68]
lea rdx, str.Run_In_Place_Powershell_Command
lea rcx, [rsp + 0x40]
call fcn.14000b940
test al, al
je 0x140056bf8
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x50], rax
mov rcx, rsi
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0xf8], rax
mov r8d, 2
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x1f0]
call fcn.140002820
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x38]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140056bec
cmp dword [rbx + 0x10], 0
jl 0x140056bdd
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140056bdd
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056bd2
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x140056bec
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x1f0]
jmp 0x140056e9d
lea rdx, str.Is_Application_Installed
lea rcx, [rsp + 0x40]
call fcn.14000b940
test al, al
je 0x140056c89
lea rax, [rbp + 0x100]
mov qword [rsp + 0x50], rax
mov rcx, rsi
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x100]
call fcn.140003f60
movzx r8d, al
lea rdx, [0x14009a148]
lea rcx, [rsp + 0x38]
call fcn.14000d580
lea rdx, [0x14009ba10]
lea rcx, [rsp + 0x38]
call fcn.14000b940
lea rcx, [rsp + 0x38]
test al, al
je 0x140056c78
lea rdx, str.true
call fcn.14000c670
jmp 0x140057034
lea rdx, str.false
call fcn.14000c670
jmp 0x140057034
lea rdx, str.Run_Powershell_File
lea rcx, [rsp + 0x40]
call fcn.14000b940
test al, al
je 0x140056de5
mov rdi, qword [rsp + 0x58]
cmp dword [rdi - 0x10], 0
jl 0x140056dcf
lea rdx, str..ps1
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
je 0x140056dcf
sub rax, rdi
sar rax, 1
test eax, eax
js 0x140056dcf
lea rax, [rbp + 0x108]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x68], rax
lea rcx, [rbx - 0x18]
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x108], rax
lea rdx, str.Run_Powershell_Script_Condition_perform_:
lea rcx, [rbp + 0x1f8]
call fcn.14000c8e0
nop
mov r8d, r13d
lea rdx, [rbp + 0x108]
mov rcx, rax
call fcn.14005c860
lea rax, [rbp + 0x110]
mov qword [rsp + 0x50], rax
lea rcx, [rbx - 0x18]
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x110], rax
mov r8d, 2
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x270]
call fcn.140002820
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x38]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140056dc3
cmp dword [rbx + 0x10], 0
jl 0x140056db4
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140056db4
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056da9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x140056dc3
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x270]
jmp 0x140056e9d
lea rdx, str.Incorrect_extension.
lea rcx, [rsp + 0x38]
call fcn.14000c670
jmp 0x140057034
lea rdx, str.Run_In_Place_Command_Line
lea rcx, [rsp + 0x40]
call fcn.14000b940
test al, al
je 0x140056ec0
lea rax, [rbp + 0x118]
mov qword [rsp + 0x50], rax
mov rcx, rsi
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x118], rax
mov r8d, 1
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x208]
call fcn.140002820
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x38]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140056e96
cmp dword [rbx + 0x10], 0
jl 0x140056e87
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140056e87
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056e7c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x140056e96
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057034
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x140057034
lea rdx, str.Run_Command_Line_File
lea rcx, [rsp + 0x40]
call fcn.14000b940
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x68], rax
lea rcx, [rbx - 0x18]
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x120], rax
lea rdx, str.Run_BAT_Condition_perform_:
lea rcx, [rbp + 0x210]
call fcn.14000c8e0
nop
mov r8d, r13d
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.14005c860
lea rax, [rbp + 0x128]
mov qword [rsp + 0x50], rax
lea rcx, [rbx - 0x18]
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x128], rax
mov r8d, 1
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x218]
call fcn.140002820
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x38]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140056fbc
cmp dword [rbx + 0x10], 0
jl 0x140056fad
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140056fad
call fcn.14000d260
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140056fa2
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x140056fbc
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.14000d350
nop
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140056fdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x130]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x220]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x38]
add rcx, 0xffffffffffffffe8
call fcn.14000d260
add rax, 0x18
mov qword [rbp + 0x130], rax
lea rdx, str.Run_Powershell_Script_Condition_perform_:
lea rcx, [rbp + 0x220]
call fcn.14000c8e0
nop
mov r8d, r13d
lea rdx, [rbp + 0x130]
mov rcx, rax
call fcn.14005c860
mov rax, qword [rsp + 0x38]
movzx ecx, word [rax]
cmp cx, word [0x14009a114]
jne 0x140057534
lea rax, [rbp]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x228]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058994
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 8], rax
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 8]
call fcn.14000ce70
test al, al
jne 0x1400570a2
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 8]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x14005899f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
lea rdx, str.Result:_Operation_Performed_Successfully.__nAction_String:
lea rcx, [rbp + 0x78]
call fcn.14000ce70
test al, al
jne 0x1400570e6
lea rdx, str.Result:_Operation_Performed_Successfully.__nAction_String:
lea rcx, [rbp + 0x78]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400589aa
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp], rax
lea rdx, [0x140098d49]
lea rcx, [rbp]
call fcn.14000ce70
test al, al
jne 0x14005712a
lea rdx, [0x140098d49]
lea rcx, [rbp]
call fcn.14000c670
nop
mov rbx, qword [rbp + 0x78]
lea rsi, [rbx - 0x18]
mov rcx, qword [rsi]
test rcx, rcx
je 0x140057148
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057159
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400589b5
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x138], rax
mov r15d, dword [rsp + 0x30]
bts r15d, 0xd
mov dword [rsp + 0x30], r15d
mov rdi, qword [rsp + 0x40]
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, rdi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x138]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x138]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x1400571c3
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x1400571d4
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400589c0
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb0], rax
bts r15d, 0xe
mov dword [rsp + 0x30], r15d
mov r9, qword [rbp + 8]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xb0]
call fcn.14000d050
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x228]
call fcn.14000bc20
nop
lea rdx, [rbp]
mov rcx, rax
call fcn.14005cf00
btr r15d, 0xe
mov dword [rsp + 0x30], r15d
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057267
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
and dword [rsp + 0x30], 0xffffdfff
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14005728b
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x1400572a5
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400572c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x230]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400589cb
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x18], rax
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x18]
call fcn.14000ce70
test al, al
jne 0x14005731c
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x18]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400589d6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x88], rax
lea rdx, str.Result:_Operation_Performed_Successfully.__nAction_String:
lea rcx, [rbp + 0x88]
call fcn.14000ce70
test al, al
jne 0x140057369
lea rdx, str.Result:_Operation_Performed_Successfully.__nAction_String:
lea rcx, [rbp + 0x88]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400589e1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rdx, [0x140099090]
lea rcx, [rbp + 0x10]
call fcn.14000ce70
test al, al
jne 0x1400573ad
lea rdx, [0x140099090]
lea rcx, [rbp + 0x10]
call fcn.14000c670
nop
mov rbx, qword [rbp + 0x88]
lea rsi, [rbx - 0x18]
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400573ce
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x1400573df
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400589ec
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x140], rax
mov r14d, dword [rsp + 0x30]
bts r14d, 0x10
mov dword [rsp + 0x30], r14d
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x40]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x140]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x140]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140057446
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057457
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400589f7
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x90], rax
bts r14d, 0x11
mov dword [rsp + 0x30], r14d
mov r9, qword [rbp + 0x18]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x90]
call fcn.14000d050
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x230]
call fcn.14000bc20
nop
mov r8d, r13d
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.14005c860
btr r14d, 0x11
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400574ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
and dword [rsp + 0x30], 0xfffeffff
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x140057511
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x14005752b
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x18]
jmp 0x140057957
mov rcx, qword [rsp + 0x38]
movzx eax, word [rcx]
cmp ax, word [0x1400a521c]
jne 0x14005797a
movzx eax, word [rcx + 2]
cmp ax, word [0x1400a521e]
jne 0x14005797a
lea rax, [rbp + 0x238]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a02
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rdx, str._Is_Not_Availabe_For_Administrator_Right.
lea rcx, [rbp + 0x20]
call fcn.14000ce70
test al, al
jne 0x1400575b6
lea rdx, str._Is_Not_Availabe_For_Administrator_Right.
lea rcx, [rbp + 0x20]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a0d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x98], rax
lea rdx, str.Action_String_
lea rcx, [rbp + 0x98]
call fcn.14000ce70
test al, al
jne 0x140057603
lea rdx, str.Action_String_
lea rcx, [rbp + 0x98]
call fcn.14000c670
nop
lea rdx, [0x140098d49]
lea rcx, [rbp + 0x238]
call fcn.14000c8e0
mov r15, rax
mov rbx, qword [rbp + 0x98]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140057637
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057648
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a18
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa0], rax
mov esi, dword [rsp + 0x30]
bts esi, 0x13
mov dword [rsp + 0x30], esi
mov rdi, qword [rsp + 0x40]
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, rdi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xa0]
call fcn.14000d050
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x240]
call fcn.14000bc20
nop
mov rdx, r15
mov rcx, rax
call fcn.14005cf00
btr esi, 0x13
mov dword [rsp + 0x30], esi
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400576dd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400576f9
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057717
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x248]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x68], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a23
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x28], rax
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x28]
call fcn.14000ce70
test al, al
jne 0x140057773
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x28]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a2e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa8], rax
lea rdx, str.Result:_Operation_Performed_Successfully.__nAction_String:
lea rcx, [rbp + 0xa8]
call fcn.14000ce70
test al, al
jne 0x1400577c0
lea rdx, str.Result:_Operation_Performed_Successfully.__nAction_String:
lea rcx, [rbp + 0xa8]
call fcn.14000c670
nop
lea rdx, [0x140099090]
lea rcx, [rbp + 0x248]
call fcn.14000c8e0
mov r15, rax
mov rbx, qword [rbp + 0xa8]
lea rsi, [rbx - 0x18]
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400577f7
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057808
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a39
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x148], rax
mov r14d, dword [rsp + 0x30]
bts r14d, 0x15
mov dword [rsp + 0x30], r14d
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x40]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x148]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x148]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14005786f
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057880
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a44
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xe0], rax
bts r14d, 0x16
mov dword [rsp + 0x30], r14d
mov r9, qword [rbp + 0x28]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.14000d050
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x250]
call fcn.14000bc20
nop
mov r8d, r13d
mov rdx, r15
mov rcx, rax
call fcn.14005c860
btr r14d, 0x16
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057915
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
and dword [rsp + 0x30], 0xffdfffff
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x140057939
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x140057953
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058183
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x140058183
lea rax, [rbp + 0x258]
mov qword [rbp + 0x290], rax
lea rax, [rbp + 0x260]
mov qword [rbp + 0x1c0], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a4f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x38]
call fcn.14000ce70
test al, al
jne 0x1400579da
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x38]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a5a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x30], rax
lea rdx, str._nAction_String:
lea rcx, [rbp + 0x30]
call fcn.14000ce70
test al, al
jne 0x140057a1e
lea rdx, str._nAction_String:
lea rcx, [rbp + 0x30]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a65
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb8], rax
lea rdx, str.Result:
lea rcx, [rbp + 0xb8]
call fcn.14000ce70
test al, al
jne 0x140057a6b
lea rdx, str.Result:
lea rcx, [rbp + 0xb8]
call fcn.14000c670
nop
lea rdx, [0x140099090]
lea rcx, [rbp + 0x258]
call fcn.14000c8e0
mov qword [rsp + 0x68], rax
mov rbx, qword [rbp + 0xb8]
lea r13, [rbx - 0x18]
mov rcx, qword [r13]
test rcx, rcx
je 0x140057aa5
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057ab6
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a70
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x150], rax
mov r14d, dword [rsp + 0x30]
bts r14d, 0x18
mov dword [rsp + 0x30], r14d
mov rsi, qword [rsp + 0x38]
mov eax, dword [rsi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, rsi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x150]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x150]
lea rax, [rbx - 0x18]
mov qword [rsp + 0x50], rax
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140057b29
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057b3a
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a7b
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x158], rax
bts r14d, 0x19
mov dword [rsp + 0x30], r14d
mov r9, qword [rbp + 0x30]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x158]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x158]
lea r12, [rbx - 0x18]
mov rcx, qword [r12]
test rcx, rcx
je 0x140057ba0
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057bb1
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a86
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x160], rax
bts r14d, 0x1a
mov dword [rsp + 0x30], r14d
mov rdi, qword [rsp + 0x40]
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, rdi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x160]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x160]
lea r15, [rbx - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x140057c19
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057c2a
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058a91
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc0], rax
bts r14d, 0x1b
mov dword [rsp + 0x30], r14d
mov r9, qword [rbp + 0x38]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.14000d050
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x260]
call fcn.14000bc20
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.14005c860
btr r14d, 0x1b
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057cc7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
and dword [rsp + 0x30], 0xfbffffff
mov eax, ebx
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x140057ce8
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
and dword [rsp + 0x30], 0xfdffffff
mov eax, ebx
lock xadd dword [r12 + 0x10], eax
sub eax, 1
jg 0x140057d0b
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
and dword [rsp + 0x30], 0xfeffffff
mov eax, ebx
mov rdx, qword [rsp + 0x50]
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057d2e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, ebx
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x140057d49
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057d67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057d84
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x1c0], rax
lea rax, [rbp + 0x1b8]
mov qword [rbp + 0x290], rax
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058a9c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x48]
call fcn.14000ce70
test al, al
jne 0x140057de4
lea rdx, str._nAction_Parameter_String:
lea rcx, [rbp + 0x48]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058aa7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, str._nAction_String:
lea rcx, [rbp + 0x40]
call fcn.14000ce70
test al, al
jne 0x140057e28
lea rdx, str._nAction_String:
lea rcx, [rbp + 0x40]
call fcn.14000c670
nop
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140058ab2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc8], rax
lea rdx, str.Result:
lea rcx, [rbp + 0xc8]
call fcn.14000ce70
test al, al
jne 0x140057e75
lea rdx, str.Result:
lea rcx, [rbp + 0xc8]
call fcn.14000c670
nop
lea rdx, [0x140098d49]
lea rcx, [rbp + 0x1b0]
call fcn.14000c8e0
mov r13, rax
mov rbx, qword [rbp + 0xc8]
lea r15, [rbx - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x140057eac
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057ebd
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058abd
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x168], rax
mov r14d, dword [rsp + 0x30]
bts r14d, 0x1d
mov dword [rsp + 0x30], r14d
mov eax, dword [rsi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x38]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x168]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x168]
lea r12, [rbx - 0x18]
mov rcx, qword [r12]
test rcx, rcx
je 0x140057f28
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057f39
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058ac8
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x170], rax
bts r14d, 0x1e
mov dword [rsp + 0x30], r14d
mov r9, qword [rbp + 0x40]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x170]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x170]
lea rsi, [rbx - 0x18]
mov rcx, qword [rsi]
test rcx, rcx
je 0x140057f9e
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140057faf
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058ad3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x178], rax
or r14d, 0x80000000
mov dword [rsp + 0x30], r14d
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x40]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x178]
call fcn.14000d050
nop
mov rbx, qword [rbp + 0x178]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140058013
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140058024
call fcn.14000db70
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x140058640
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xd0], rax
mov r14d, 1
mov dword [rbp - 0x50], r14d
mov r9, qword [rbp + 0x48]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.14000d050
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x1b8]
call fcn.14000bc20
nop
mov rdx, r13
mov rcx, rax
call fcn.14005cf00
and r14d, 0xfffffffe
mov dword [rbp - 0x50], r14d
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400580bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
and dword [rsp + 0x30], 0x7fffffff
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400580de
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
and dword [rsp + 0x30], 0xbfffffff
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x1400580ff
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
and dword [rsp + 0x30], 0xdfffffff
mov eax, r13d
lock xadd dword [r12 + 0x10], eax
sub eax, 1
jg 0x140058124
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x14005813f
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005815e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005817c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r12, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400581a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400581c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [r12 + 0x10], eax
sub eax, 1
jg 0x1400581e1
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058200
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005821f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r14, qword [rbp + 0x198]
mov rsi, qword [rbp + 0x190]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058257
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058277
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x140058291
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400582ac
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 8
jb 0x1400582f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400582f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400582f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069404
xor ebx, ebx
mov qword [rbp + 0x3f0], rbx
mov qword [rbp + 0x3f8], 7
mov word [rbp + 0x3e0], bx
mov rdx, qword [rbp + 0x418]
cmp rdx, 8
jb 0x140058359
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058354
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058354
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069404
movdqa xmm0, xmmword [0x1400a89e0]
movdqu xmmword [rbp + 0x410], xmm0
mov word [rbp + 0x400], bx
mov rdx, qword [rbp + 0x438]
cmp rdx, 8
jb 0x1400583b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400583b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400583b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069404
movdqa xmm0, xmmword [0x1400a89e0]
movdqu xmmword [rbp + 0x430], xmm0
mov word [rbp + 0x420], bx
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400583ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x458]
cmp rdx, 8
jb 0x140058438
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058433
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058433
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069404
movdqa xmm0, xmmword [0x1400a89e0]
movdqu xmmword [rbp + 0x450], xmm0
mov word [rbp + 0x440], bx
lea rax, [rbp + 0x360]
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c0]
call fcn.14000b8c0
nop
lea rcx, [rbp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x360]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0x10
jb 0x1400584fb
inc rdx
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400584f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400584f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069404
mov qword [rbp + 0x3d0], rbx
mov qword [rbp + 0x3d8], 0xf
mov byte [rbp + 0x3c0], 0
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058534
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058553
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058572
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058592
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400585b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400585d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400585f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x288]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
sub r13d, 1
jg 0x140058610
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0xc30]
xor rcx, rsp
call fcn.1400693e0
lea r11, [rsp + 0xd40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
jmp 0x1400586de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
jmp 0x140058735
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
jmp 0x14005878c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
jmp 0x1400587e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
jmp 0x14005883a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
jmp 0x140058891
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
int3
mov ecx, 0x80070057
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
int3
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
int3