Function at 0x140012610
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa90
mov rax, qword [0x140040040]
xor rax, rsp
mov qword [rsp + 0xa88], rax
mov rbx, rcx
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xd0], rcx
xor esi, esi
mov r14d, esi
mov dword [rsp + 0x48], esi
lea r8, str.USERPROFILE
lea rdx, [rsp + 0x970]
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
cmp qword [rsp + 0x7d0], rsi
jne 0x14001269e
lea r9, str.The_USERPROFILE_environment_variable_is_not_set._r_n
xor r8d, r8d
mov edx, 0xc2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor al, al
jmp 0x1400145f1
lea rcx, str.C:WindowsWindowsUpdate.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400127cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rcx, [rsp + 0x7d8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x400
mov r8d, eax
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x878], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x888], xmm1
mov r8d, 0x2a
lea rdx, str.Erreur_lors_de_la_suppression_du_fichier:
lea rcx, [rsp + 0x878]
call fcn.14002a0b0
nop
mov rdx, qword [rsp + 0x7d8]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140012730
lea rcx, [rsp + 0x878]
call fcn.140027030
lea r9, [rsp + 0x878]
cmp qword [rsp + 0x890], 7
cmova r9, qword [rsp + 0x878]
xor r8d, r8d
mov edx, 0xc2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x7d8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rsp + 0x890]
cmp rdx, 7
jbe 0x1400127cd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x878]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400127c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x820], xmm0
mov qword [rsp + 0x830], rax
movups xmmword [rsp + 0x550], xmm0
mov qword [rsp + 0x560], rsi
mov qword [rsp + 0x568], rsi
lea r8d, [rax + 0xf]
lea rdx, str.C:_Recycle.Bin
lea rcx, [rsp + 0x550]
call fcn.14002a0b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x570], xmm0
mov qword [rsp + 0x580], rsi
mov qword [rsp + 0x588], rsi
mov r8d, 0xf
lea rdx, str.C:Windows_Temp
lea rcx, [rsp + 0x570]
call fcn.14002a0b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x590], xmm0
mov qword [rsp + 0x5a0], rsi
mov qword [rsp + 0x5a8], rsi
mov r8d, 0x12
lea rdx, str.C:Windows_tracing
lea rcx, [rsp + 0x590]
call fcn.14002a0b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3f8], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400128a5
lea rcx, [rsp + 0x3e8]
call fcn.1400040c0
nop
mov r8d, 0x13
lea rdx, str._AppData_Local_Temp
lea rcx, [rsp + 0x3e8]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x170], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x170], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 1
mov rdi, qword [rsp + 0x170]
lea rbx, [rsp + 0x160]
cmp qword [rsp + 0x178], 0xf
cmova rbx, qword [rsp + 0x160]
call fcn.14002cf78
mov qword [rsp + 0x470], rbx
mov qword [rsp + 0x478], rdi
lea r8, [rsp + 0x470]
mov edx, eax
lea rcx, [rsp + 0x5b0]
call fcn.1400025e0
or r14d, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x298], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2a8], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140012990
lea rcx, [rsp + 0x298]
call fcn.1400040c0
nop
mov r8d, 0x29
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent
lea rcx, [rsp + 0x298]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x190], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 8
mov rdi, qword [rsp + 0x190]
lea rbx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rbx, qword [rsp + 0x180]
call fcn.14002cf78
mov qword [rsp + 0x480], rbx
mov qword [rsp + 0x488], rdi
lea r8, [rsp + 0x480]
mov edx, eax
lea rcx, [rsp + 0x5d0]
call fcn.1400025e0
or r14d, 0x30
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3d8], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140012a80
lea rcx, [rsp + 0x3c8]
call fcn.1400040c0
nop
mov r8d, 0x4d
lea rdx, str._AppData_Roaming_Microsoft_Internet_Explorer_Quick_Launch_User_Pinned_TaskBar
lea rcx, [rsp + 0x3c8]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1b0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 0x40
mov rdi, qword [rsp + 0x1b0]
lea rbx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0xf
cmova rbx, qword [rsp + 0x1a0]
call fcn.14002cf78
mov qword [rsp + 0x490], rbx
mov qword [rsp + 0x498], rdi
lea r8, [rsp + 0x490]
mov edx, eax
lea rcx, [rsp + 0x5f0]
call fcn.1400025e0
or r14d, 0x180
xorps xmm0, xmm0
movups xmmword [rsp + 0x3a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3b8], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140012b70
lea rcx, [rsp + 0x3a8]
call fcn.1400040c0
nop
mov r8d, 0x3f
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_AutomaticDestinations
lea rcx, [rsp + 0x3a8]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 9
mov rdi, qword [rsp + 0x1d0]
lea rbx, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova rbx, qword [rsp + 0x1c0]
call fcn.14002cf78
mov qword [rsp + 0x4a0], rbx
mov qword [rsp + 0x4a8], rdi
lea r8, [rsp + 0x4a0]
mov edx, eax
lea rcx, [rsp + 0x610]
call fcn.1400025e0
or r14d, 0xc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x388], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x398], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140012c60
lea rcx, [rsp + 0x388]
call fcn.1400040c0
nop
mov r8d, 0x3c
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_CustomDestinations
lea rcx, [rsp + 0x388]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 0xc
mov rdi, qword [rsp + 0x1f0]
lea rbx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rbx, qword [rsp + 0x1e0]
call fcn.14002cf78
mov qword [rsp + 0x4b0], rbx
mov qword [rsp + 0x4b8], rdi
lea r8, [rsp + 0x4b0]
mov edx, eax
lea rcx, [rsp + 0x630]
call fcn.1400025e0
or r14d, 0x6000
xorps xmm0, xmm0
movups xmmword [rsp + 0x368], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x378], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140012d50
lea rcx, [rsp + 0x368]
call fcn.1400040c0
nop
mov r8d, 0x25
lea rdx, str._AppData_Local_Microsoft_Windows_Burn
lea rcx, [rsp + 0x368]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 0xf
mov rdi, qword [rsp + 0x210]
lea rbx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rbx, qword [rsp + 0x200]
call fcn.14002cf78
mov qword [rsp + 0x4c0], rbx
mov qword [rsp + 0x4c8], rdi
lea r8, [rsp + 0x4c0]
mov edx, eax
lea rcx, [rsp + 0x650]
call fcn.1400025e0
or r14d, 0x30000
mov dword [rsp + 0x48], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x348], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x358], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140012e44
lea rcx, [rsp + 0x348]
call fcn.1400040c0
nop
mov r8d, 0x19
lea rdx, str._AppData_Local_CrashDumps
lea rcx, [rsp + 0x348]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x230], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x230], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0x230]
lea rbx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rbx, qword [rsp + 0x220]
call fcn.14002cf78
mov qword [rsp + 0x4d0], rbx
mov qword [rsp + 0x4d8], rdi
lea r8, [rsp + 0x4d0]
mov edx, eax
lea rcx, [rsp + 0x670]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x328], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x338], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140012f30
lea rcx, [rsp + 0x328]
call fcn.1400040c0
nop
mov r8d, 0x3f
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Cache_Cache_Data
lea rcx, [rsp + 0x328]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0xa0]
lea rbx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rbx, qword [rsp + 0x90]
call fcn.14002cf78
mov qword [rsp + 0x4e0], rbx
mov qword [rsp + 0x4e8], rdi
lea r8, [rsp + 0x4e0]
mov edx, eax
lea rcx, [rsp + 0x690]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x308], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x318], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140013014
lea rcx, [rsp + 0x308]
call fcn.1400040c0
nop
mov r8d, gethostname
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History
lea rcx, [rsp + 0x308]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x130], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x130], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0x130]
lea rbx, [rsp + 0x120]
cmp qword [rsp + 0x138], 0xf
cmova rbx, qword [rsp + 0x120]
call fcn.14002cf78
mov qword [rsp + 0x4f0], rbx
mov qword [rsp + 0x4f8], rdi
lea r8, [rsp + 0x4f0]
mov edx, eax
lea rcx, [rsp + 0x6b0]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2f8], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140013100
lea rcx, [rsp + 0x2e8]
call fcn.1400040c0
nop
mov r8d, 0x3e
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History_journal
lea rcx, [rsp + 0x2e8]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0xc0]
lea rbx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rbx, qword [rsp + 0xb0]
call fcn.14002cf78
mov qword [rsp + 0x410], rbx
mov qword [rsp + 0x418], rdi
lea r8, [rsp + 0x410]
mov edx, eax
lea rcx, [rsp + 0x6d0]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x250], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400131e4
lea rcx, [rsp + 0x240]
call fcn.1400040c0
nop
mov r8d, 0x3c
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Visited_Links
lea rcx, [rsp + 0x240]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x110], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x110], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0x110]
lea rbx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0xf
cmova rbx, qword [rsp + 0x100]
call fcn.14002cf78
mov qword [rsp + 0x460], rbx
mov qword [rsp + 0x468], rdi
lea r8, [rsp + 0x460]
mov edx, eax
lea rcx, [rsp + 0x6f0]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x270], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400132d0
lea rcx, [rsp + 0x260]
call fcn.1400040c0
nop
mov r8d, 0x27
lea rdx, str._AppData_Local_Temporary_Internet_Files
lea rcx, [rsp + 0x260]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x150], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x150], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0x150]
lea rbx, [rsp + 0x140]
cmp qword [rsp + 0x158], 0xf
cmova rbx, qword [rsp + 0x140]
call fcn.14002cf78
mov qword [rsp + 0x420], rbx
mov qword [rsp + 0x428], rdi
lea r8, [rsp + 0x420]
mov edx, eax
lea rcx, [rsp + 0x710]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2d8], xmm1
mov rdx, qword [rsp + 0x7d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400133b4
lea rcx, [rsp + 0x2c8]
call fcn.1400040c0
nop
mov r8d, 0x28
lea rdx, str._AppData_Local_Microsoft_Windows_History
lea rcx, [rsp + 0x2c8]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xf0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdi, qword [rsp + 0xf0]
lea rbx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0xf
cmova rbx, qword [rsp + 0xe0]
call fcn.14002cf78
mov qword [rsp + 0x430], rbx
mov qword [rsp + 0x438], rdi
lea r8, [rsp + 0x430]
mov edx, eax
lea rcx, [rsp + 0x730]
call fcn.1400025e0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x820], xmm0
mov qword [rsp + 0x830], rsi
mov ecx, 0x200
call fcn.14002dd78
mov rbx, rax
mov qword [rsp + 0x820], rax
mov qword [rsp + 0x828], rax
lea rcx, [rax + 0x200]
mov qword [rsp + 0x830], rcx
lea rax, [rsp + 0x820]
mov qword [rsp + 0x540], rax
lea rdi, [rsp + 0x550]
xorps xmm0, xmm0
movups xmmword [rsp + 0x898], xmm0
mov qword [rsp + 0x898], rbx
mov qword [rsp + 0x8a0], rbx
lea rax, [rsp + 0x820]
mov qword [rsp + 0x8a8], rax
mov rdx, rdi
mov rcx, rbx
call fcn.140027190
add rbx, 0x20
mov qword [rsp + 0x8a0], rbx
add rdi, 0x20
lea rax, [rsp + 0x750]
cmp rdi, rax
jne 0x1400134f5
mov rdx, rbx
mov rcx, rbx
call fcn.14002a590
mov qword [rsp + 0x828], rbx
lea r9, [fcn.140002b80]
mov edx, 0x20
lea r8d, [rdx - 0x10]
lea rcx, [rsp + 0x550]
call fcn.14002ddb4
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x140013594
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001358f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001358f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0xf0], xmm0
mov byte [rsp + 0xe0], 0
mov rdx, qword [rsp + 0x2e0]
cmp rdx, 0xf
jbe 0x1400135f3
inc rdx
mov rcx, qword [rsp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400135ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400135ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x2d8], xmm0
mov byte [rsp + 0x2c8], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x140013652
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001364d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001364d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x150], xmm0
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x278]
cmp rdx, 0xf
jbe 0x1400136b1
inc rdx
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400136ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400136ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x270], xmm0
mov byte [rsp + 0x260], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x140013710
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001370b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001370b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x14001376f
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001376a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001376a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x250], xmm0
mov byte [rsp + 0x240], 0
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x1400137ce
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400137c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400137c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0xc0], xmm0
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x300]
cmp rdx, 0xf
jbe 0x14001382d
inc rdx
mov rcx, qword [rsp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013828
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x2f8], xmm0
mov byte [rsp + 0x2e8], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0xf
jbe 0x14001388c
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013887
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013887
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x130], xmm0
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x320]
cmp rdx, 0xf
jbe 0x1400138eb
inc rdx
mov rcx, qword [rsp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400138e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400138e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x318], xmm0
mov byte [rsp + 0x308], 0
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x14001394a
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013945
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013945
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0xa0], xmm0
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0x340]
cmp rdx, 0xf
jbe 0x1400139a9
inc rdx
mov rcx, qword [rsp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400139a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400139a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x338], xmm0
mov byte [rsp + 0x328], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x140013a08
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013a03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013a03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x230], xmm0
mov byte [rsp + 0x220], 0
mov rdx, qword [rsp + 0x360]
cmp rdx, 0xf
jbe 0x140013a67
inc rdx
mov rcx, qword [rsp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013a62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013a62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x358], xmm0
mov byte [rsp + 0x348], 0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140013ac6
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013ac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013ac1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x210], xmm0
mov byte [rsp + 0x200], 0
mov rdx, qword [rsp + 0x380]
cmp rdx, 0xf
jbe 0x140013b25
inc rdx
mov rcx, qword [rsp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013b20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x378], xmm0
mov byte [rsp + 0x368], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x140013b84
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013b7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x1f0], xmm0
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x3a0]
cmp rdx, 0xf
jbe 0x140013be3
inc rdx
mov rcx, qword [rsp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013bde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013bde
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x398], xmm0
mov byte [rsp + 0x388], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x140013c42
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013c3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013c3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x1d0], xmm0
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x3c0]
cmp rdx, 0xf
jbe 0x140013ca1
inc rdx
mov rcx, qword [rsp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013c9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013c9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x3b8], xmm0
mov byte [rsp + 0x3a8], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0xf
jbe 0x140013d00
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013cfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013cfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x1b0], xmm0
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x3e0]
cmp rdx, 0xf
jbe 0x140013d5f
inc rdx
mov rcx, qword [rsp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013d5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x3d8], xmm0
mov byte [rsp + 0x3c8], 0
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140013dbe
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013db9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013db9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], 0
mov rdx, qword [rsp + 0x2b0]
cmp rdx, 0xf
jbe 0x140013e1d
inc rdx
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013e18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x2a8], xmm0
mov byte [rsp + 0x298], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x140013e7c
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013e77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x170], xmm0
mov byte [rsp + 0x160], 0
mov rdx, qword [rsp + 0x400]
cmp rdx, 0xf
jbe 0x140013edb
inc rdx
mov rcx, qword [rsp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013ed6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013ed6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
movdqa xmm0, xmmword [0x140036060]
movdqu xmmword [rsp + 0x3f8], xmm0
mov byte [rsp + 0x3e8], 0
mov rdi, qword [rsp + 0x820]
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x280], rax
lea r13, [0x1400400e8]
movabs r12, 0x7fffffffffffffff
mov qword [rsp + 0x50], rdi
cmp rdi, qword [rsp + 0x280]
je 0x1400145e2
mov r15, rdi
mov qword [rsp + 0x290], rdi
mov rdx, rdi
lea rcx, [rsp + 0x760]
call fcn.140003c60
movsd xmm0, qword [rax]
movsd qword [rsp + 0x500], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x440], ecx
mov qword [rsp + 0x448], r13
movaps xmm0, xmmword [rsp + 0x440]
movdqa xmmword [rsp + 0x940], xmm0
mov eax, dword [rsp + 0x500]
test eax, eax
je 0x1400145dc
cmp eax, 1
je 0x1400145d3
mov rdx, rdi
lea rcx, [rsp + 0x750]
call fcn.140003c60
movsd xmm0, qword [rax]
movsd qword [rsp + 0x2b8], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x2b8]
test edx, edx
je 0x140013fcc
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14001461e
cmp ecx, 3
jne 0x1400145d3
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x7e0], xmm0
mov rdx, rdi
lea rcx, [rsp + 0x7e0]
call fcn.140028420
test eax, eax
jne 0x14001462e
xorps xmm0, xmm0
movups xmmword [rsp + 0x7f0], xmm0
mov rbx, qword [rsp + 0x7e8]
test rbx, rbx
je 0x14001401d
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x7e8]
movaps xmm0, xmmword [rsp + 0x7e0]
movdqa xmmword [rsp + 0x7f0], xmm0
test rbx, rbx
je 0x14001403f
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x7e8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x8d0], xmm0
mov qword [rsp + 0x8d0], rsi
mov r14, rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x8d8], rsi
test rbx, rbx
je 0x1400140b0
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400140a8
mov rbx, qword [rsp + 0x7e8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400140a8
mov rbx, qword [rsp + 0x7e8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
jmp 0x1400140b0
mov rbx, qword [rsp + 0x7e8]
mov rcx, qword [rsp + 0x7f0]
cmp rcx, r14
je 0x140014116
add rcx, 0x20
call fcn.140003f50
nop
jmp 0x1400140ff
lea rcx, [rsp + 0x7f0]
call fcn.140003770
test eax, eax
jne 0x140014640
jmp 0x1400140b0
mov rcx, qword [rsp + 0x7f8]
test rcx, rcx
je 0x140014167
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14001415f
mov rbx, qword [rsp + 0x7f8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14001415f
mov rcx, qword [rsp + 0x7f8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rbx, qword [rsp + 0x7e8]
test rbx, rbx
je 0x1400141a8
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400141a8
mov rbx, qword [rsp + 0x7e8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400141a8
mov rcx, qword [rsp + 0x7e8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rcx, r15
cmp qword [r15 + 0x18], 7
jbe 0x1400141b5
mov rcx, qword [r15]
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0x450], rcx
mov qword [rsp + 0x458], rax
call fcn.14002cf78
movaps xmm0, xmmword [rsp + 0x450]
movdqa xmmword [rsp + 0x530], xmm0
lea r8, [rsp + 0x530]
mov edx, eax
lea rcx, [rsp + 0x8b0]
call fcn.14002c6b0
nop
mov rdx, qword [rsp + 0x8c0]
mov qword [rsp + 0x50], rdx
mov rax, r12
sub rax, rdx
cmp rax, 0x12
jb 0x140014648
lea r13, [rsp + 0x8b0]
cmp qword [rsp + 0x8c8], 0xf
cmova r13, qword [rsp + 0x8b0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
lea r15, [rdx + 0x12]
mov ebx, 0xf
lea r14, [rsp + 0x70]
cmp r15, rbx
jbe 0x1400142e6
mov rbx, r15
or rbx, 0xf
cmp rbx, r12
jbe 0x14001429a
mov rbx, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14002dd78
test rax, rax
je 0x1400142c3
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rsp + 0x50]
jmp 0x1400142e1
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400142ca
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001464e
jmp 0x14001427a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400142de
call fcn.14002dd78
mov r14, rax
mov rdx, qword [rsp + 0x50]
jmp 0x1400142e1
mov r14, rsi
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], rbx
movups xmm0, xmmword [str.Files_deleted_in:]
movups xmmword [r14], xmm0
movzx eax, word [0x140033e88]
mov word [r14 + 0x10], ax
lea rcx, [r14 + 0x12]
mov r8, rdx
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r15], 0
mov r8d, 2
lea rdx, [0x140033e74]
lea rcx, [rsp + 0x70]
call fcn.140027300
xorps xmm0, xmm0
movups xmmword [rsp + 0x800], xmm0
mov qword [rsp + 0x810], rsi
mov qword [rsp + 0x818], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x800], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x810], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x1400143bc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400143b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400143b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], 0xf
mov byte [rsp + 0x70], 0
lea r8, [rsp + 0x800]
cmp qword [rsp + 0x818], 0xf
cmova r8, qword [rsp + 0x800]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x810]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x838], xmm0
mov qword [rsp + 0x848], rsi
mov qword [rsp + 0x850], rsi
mov r8, rbx
lea rcx, [rsp + 0x838]
call fcn.140029f80
lea rcx, [rsp + 0x838]
cmp qword [rsp + 0x850], 7
cmova rcx, qword [rsp + 0x838]
lea r8, [rsp + 0x800]
cmp qword [rsp + 0x818], 0xf
cmova r8, qword [rsp + 0x800]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x810]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rsp + 0x838]
cmp qword [rsp + 0x850], 7
cmova r9, qword [rsp + 0x838]
xor r8d, r8d
mov edx, 0xc2
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x850]
cmp rdx, 7
jbe 0x140014508
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x838]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014503
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014503
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
mov qword [rsp + 0x848], rsi
mov qword [rsp + 0x850], 7
mov word [rsp + 0x838], si
mov rdx, qword [rsp + 0x818]
cmp rdx, 0xf
jbe 0x14001456a
inc rdx
mov rcx, qword [rsp + 0x800]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014565
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014565
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
mov qword [rsp + 0x810], rsi
mov qword [rsp + 0x818], 0xf
mov byte [rsp + 0x800], 0
mov rdx, qword [rsp + 0x8c8]
cmp rdx, 0xf
jbe 0x1400145cc
inc rdx
mov rcx, qword [rsp + 0x8b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400145c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400145c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002dd70
lea r13, [0x1400400e8]
add rdi, 0x20
jmp 0x140013f1d
test ecx, ecx
jne 0x140014654
jmp 0x1400145d3
lea rcx, [rsp + 0x820]
call fcn.140027c10
mov al, 1
mov rcx, qword [rsp + 0xa88]
xor rcx, rsp
call fcn.14002dd50
lea r11, [rsp + 0xa90]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r8, rdi
lea rcx, str.status
call fcn.140003540
nop
mov r8, rdi
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140003540
nop
mov edx, eax
call fcn.140003450
nop
call fcn.140001c30
int3
call fcn.140001b90
nop
mov r8, rdi
lea rdx, [rsp + 0x940]
lea rcx, str.exists
call fcn.1400035b0
int3