Function at 0x140031630
Capabilities:
Delete file

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x8a0
movaps xmmword [r11 - 0x28], xmm6
mov rax, qword [0x1400eb0c0]
xor rax, rsp
mov qword [rsp + 0x880], rax
mov r15, rcx
mov qword [rsp + 0x158], rcx
xor esi, esi
mov ebx, esi
mov dword [rsp + 0x60], ebx
lea r8, str.USERPROFILE
lea rdx, [r11 - 0x48]
lea rcx, [r11 - 0x318]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
cmp qword [rsp + 0x5a0], rbx
jne 0x1400316b2
lea r9, str.The_USERPROFILE_environment_variable_is_not_set._r_n
xor r8d, r8d
mov edx, 0xc2
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
xor al, al
jmp 0x1400332dc
lea rcx, str.C:WindowsWindowsUpdate.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400317dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rcx, [rsp + 0x5a8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x400
mov r8d, eax
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x640], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x650], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Erreur_Delete_File:
lea rcx, [rsp + 0x640]
call fcn.140044cf0
nop
mov rdx, qword [rsp + 0x5a8]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140031740
lea rcx, [rsp + 0x640]
call fcn.14003fde0
lea r9, [rsp + 0x640]
cmp qword [rsp + 0x658], 7
cmova r9, qword [rsp + 0x640]
xor r8d, r8d
mov edx, 0xc2
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x5a8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rsp + 0x658]
cmp rdx, 7
jbe 0x1400317dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x640]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400317d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400317d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x6b0], xmm0
mov qword [rsp + 0x6c0], rax
movups xmmword [rsp + 0x3b0], xmm0
mov qword [rsp + 0x3c0], rsi
mov qword [rsp + 0x3c8], rsi
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.C:_Recycle.Bin
lea rcx, [rsp + 0x3b0]
call fcn.140044cf0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
mov qword [rsp + 0x3e0], rsi
mov qword [rsp + 0x3e8], rsi
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.C:Windows_Temp
lea rcx, [rsp + 0x3d0]
call fcn.140044cf0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov qword [rsp + 0x400], rsi
mov qword [rsp + 0x408], rsi
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.C:Windows_tracing
lea rcx, [rsp + 0x3f0]
call fcn.140044cf0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x330], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400318c0
lea rcx, [rsp + 0x320]
call fcn.140045100
nop
mov r8d, reloc.WS2_32.dll_send
lea rdx, str._AppData_Local_Temp
lea rcx, [rsp + 0x320]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x88], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x78]
cmp qword [rsp + 0x90], 0xf
cmova rax, qword [rsp + 0x78]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x410]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x340], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x350], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400319b0
lea rcx, [rsp + 0x340]
call fcn.140045100
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_41
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent
lea rcx, [rsp + 0x340]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0xf
cmova rax, qword [rsp + 0x98]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x430]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x300], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140031aa5
lea rcx, [rsp + 0x2f0]
call fcn.140045100
nop
mov r8d, 0x3f
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_AutomaticDestinations
lea rcx, [rsp + 0x2f0]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x128], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x118], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x128], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 1
lea rax, [rsp + 0x118]
cmp qword [rsp + 0x130], 0xf
cmova rax, qword [rsp + 0x118]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x450]
call fcn.1400032b0
or ebx, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2e0], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140031ba0
lea rcx, [rsp + 0x2d0]
call fcn.140045100
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_60
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_CustomDestinations
lea rcx, [rsp + 0x2d0]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 8
lea rax, [rsp + 0xb8]
cmp qword [rsp + 0xd0], 0xf
cmova rax, qword [rsp + 0xb8]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x470]
call fcn.1400032b0
or ebx, 0x30
xorps xmm0, xmm0
movups xmmword [rsp + 0x2a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2b8], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140031ca0
lea rcx, [rsp + 0x2a8]
call fcn.140045100
nop
mov r8d, Ordinal_41
lea rdx, str._AppData_Local_Microsoft_Windows_Burn
lea rcx, [rsp + 0x2a8]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 0x40
lea rax, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0xf
cmova rax, qword [rsp + 0xd8]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x490]
call fcn.1400032b0
or ebx, 0x180
xorps xmm0, xmm0
movups xmmword [rsp + 0x288], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x298], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140031da0
lea rcx, [rsp + 0x288]
call fcn.140045100
nop
mov r8d, Ordinal_27
lea rdx, str._AppData_Local_CrashDumps
lea rcx, [rsp + 0x288]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x148], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x148], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 9
lea rax, [rsp + 0x138]
cmp qword [rsp + 0x150], 0xf
cmova rax, qword [rsp + 0x138]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x4b0]
call fcn.1400032b0
or ebx, 0xc00
mov dword [rsp + 0x60], ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x268], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x278], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140031ea2
lea rcx, [rsp + 0x268]
call fcn.140045100
nop
mov r8d, 0x3f
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Cache_Cache_Data
lea rcx, [rsp + 0x268]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x178], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x168], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x178], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x168]
cmp qword [rsp + 0x180], 0xf
cmova rax, qword [rsp + 0x168]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x4d0]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x258], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140031fa0
lea rcx, [rsp + 0x248]
call fcn.140045100
nop
mov r8d, gethostname
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History
lea rcx, [rsp + 0x248]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x198], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x188], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x198], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 0xf
cmova rax, qword [rsp + 0x188]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x4f0]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x238], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140032095
lea rcx, [rsp + 0x228]
call fcn.140045100
nop
mov r8d, 0x3e
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History_journal
lea rcx, [rsp + 0x228]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1b8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 0xf
cmova rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x510]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x208], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x218], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140032190
lea rcx, [rsp + 0x208]
call fcn.140045100
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_60
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Visited_Links
lea rcx, [rsp + 0x208]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x108], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x108], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0xf
cmova rax, qword [rsp + 0xf8]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x530]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x380], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x390], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140032285
lea rcx, [rsp + 0x380]
call fcn.140045100
nop
mov r8d, Ordinal_41
lea rdx, str._AppData_Local_Temporary_Internet_Files
lea rcx, [rsp + 0x380]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1f8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 0xf
cmova rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x550]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x370], xmm1
mov rdx, qword [rsp + 0x5a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140032380
lea rcx, [rsp + 0x360]
call fcn.140045100
nop
mov r8d, Ordinal_41
lea rdx, str._AppData_Local_Microsoft_Windows_History
lea rcx, [rsp + 0x360]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 0xf
cmova rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x608], rax
call fcn.1400bac58
movaps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x610], xmm0
lea r8, [rsp + 0x610]
mov edx, eax
lea rcx, [rsp + 0x570]
call fcn.1400032b0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x6b0], xmm0
mov qword [rsp + 0x6c0], rsi
mov ecx, 0x1e0
call fcn.1400bbb28
mov rbx, rax
mov qword [rsp + 0x6b0], rax
mov qword [rsp + 0x6b8], rax
lea rcx, [rax + 0x1e0]
mov qword [rsp + 0x6c0], rcx
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x68], rax
lea rdi, [rsp + 0x3b0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x660], xmm0
mov qword [rsp + 0x660], rbx
mov qword [rsp + 0x668], rbx
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x670], rax
nop
mov rdx, rdi
mov rcx, rbx
call fcn.14003ff50
add rbx, 0x20
mov qword [rsp + 0x668], rbx
add rdi, 0x20
lea rax, [rsp + 0x590]
cmp rdi, rax
jne 0x1400324d0
mov rdx, rbx
mov rcx, rbx
call fcn.140045610
mov qword [rsp + 0x6b8], rbx
lea r9, [fcn.1400038f0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, reloc.WS2_32.dll_ntohs
lea rcx, [rsp + 0x3b0]
call fcn.1400bbb64
nop
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 0xf
jbe 0x140032571
inc rdx
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003256c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003256c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqa xmm6, xmmword [0x1400d72f0]
movdqu xmmword [rsp + 0x1d8], xmm6
mov byte [rsp + 0x1c8], 0
mov rdx, qword [rsp + 0x378]
cmp rdx, 0xf
jbe 0x1400325d0
inc rdx
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400325cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400325cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x370], xmm6
mov byte [rsp + 0x360], 0
mov rdx, qword [rsp + 0x200]
cmp rdx, 0xf
jbe 0x140032627
inc rdx
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032622
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032622
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x1f8], xmm6
mov byte [rsp + 0x1e8], 0
mov rdx, qword [rsp + 0x398]
cmp rdx, 0xf
jbe 0x14003267e
inc rdx
mov rcx, qword [rsp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032679
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032679
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x390], xmm6
mov byte [rsp + 0x380], 0
mov rdx, qword [rsp + 0x110]
cmp rdx, 0xf
jbe 0x1400326d5
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400326d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400326d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x108], xmm6
mov byte [rsp + 0xf8], 0
mov rdx, qword [rsp + 0x220]
cmp rdx, 0xf
jbe 0x14003272c
inc rdx
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032727
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032727
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x218], xmm6
mov byte [rsp + 0x208], 0
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0xf
jbe 0x140032783
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003277e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003277e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x1b8], xmm6
mov byte [rsp + 0x1a8], 0
mov rdx, qword [rsp + 0x240]
cmp rdx, 0xf
jbe 0x1400327da
inc rdx
mov rcx, qword [rsp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400327d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400327d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x238], xmm6
mov byte [rsp + 0x228], 0
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0xf
jbe 0x140032831
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003282c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003282c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x198], xmm6
mov byte [rsp + 0x188], 0
mov rdx, qword [rsp + 0x260]
cmp rdx, 0xf
jbe 0x140032888
inc rdx
mov rcx, qword [rsp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032883
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032883
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x258], xmm6
mov byte [rsp + 0x248], 0
mov rdx, qword [rsp + 0x180]
cmp rdx, 0xf
jbe 0x1400328df
inc rdx
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400328da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400328da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x178], xmm6
mov byte [rsp + 0x168], 0
mov rdx, qword [rsp + 0x280]
cmp rdx, 0xf
jbe 0x140032936
inc rdx
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032931
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032931
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x278], xmm6
mov byte [rsp + 0x268], 0
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x14003298d
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032988
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032988
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x148], xmm6
mov byte [rsp + 0x138], 0
mov rdx, qword [rsp + 0x2a0]
cmp rdx, 0xf
jbe 0x1400329e4
inc rdx
mov rcx, qword [rsp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400329df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400329df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x298], xmm6
mov byte [rsp + 0x288], 0
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0xf
jbe 0x140032a3b
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032a36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032a36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0xe8], xmm6
mov byte [rsp + 0xd8], 0
mov rdx, qword [rsp + 0x2c0]
cmp rdx, 0xf
jbe 0x140032a92
inc rdx
mov rcx, qword [rsp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032a8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032a8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x2b8], xmm6
mov byte [rsp + 0x2a8], 0
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x140032ae9
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032ae4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032ae4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0xc8], xmm6
mov byte [rsp + 0xb8], 0
mov rdx, qword [rsp + 0x2e8]
cmp rdx, 0xf
jbe 0x140032b40
inc rdx
mov rcx, qword [rsp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032b3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032b3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x2e0], xmm6
mov byte [rsp + 0x2d0], 0
mov rdx, qword [rsp + 0x130]
cmp rdx, 0xf
jbe 0x140032b97
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032b92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032b92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x128], xmm6
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0x308]
cmp rdx, 0xf
jbe 0x140032bee
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032be9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032be9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x300], xmm6
mov byte [rsp + 0x2f0], 0
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x140032c45
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032c40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032c40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0xa8], xmm6
mov byte [rsp + 0x98], 0
mov rdx, qword [rsp + 0x358]
cmp rdx, 0xf
jbe 0x140032c9c
inc rdx
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032c97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032c97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x350], xmm6
mov byte [rsp + 0x340], 0
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x140032cf0
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032ceb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032ceb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x88], xmm6
mov byte [rsp + 0x78], 0
mov rdx, qword [rsp + 0x338]
cmp rdx, 0xf
jbe 0x140032d44
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032d3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032d3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
movdqu xmmword [rsp + 0x330], xmm6
mov byte [rsp + 0x320], 0
mov rdi, qword [rsp + 0x6b0]
mov rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x2c8], rax
movabs r14, 0x7fffffffffffffff
mov qword [rsp + 0x160], rdi
cmp rdi, qword [rsp + 0x2c8]
je 0x1400332cd
mov qword [rsp + 0x68], rdi
mov rcx, rdi
call fcn.140004970
test al, al
je 0x1400332c4
mov r8d, 3
mov rdx, rdi
lea rcx, [rsp + 0x590]
call fcn.140004a00
movsd xmm0, qword [rax]
movsd qword [rsp + 0x310], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x310]
test edx, edx
je 0x140032de1
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14003330a
cmp ecx, 3
jne 0x1400332c4
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x630], xmm0
mov rdx, rdi
lea rcx, [rsp + 0x630]
call fcn.1400430a0
test eax, eax
jne 0x14003331a
xorps xmm0, xmm0
movups xmmword [rsp + 0x6a0], xmm0
mov rbx, qword [rsp + 0x638]
test rbx, rbx
je 0x140032e32
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x638]
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x6a0], xmm0
test rbx, rbx
je 0x140032e54
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x638]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x610], xmm1
test rbx, rbx
je 0x140032eae
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140032ea6
mov rbx, qword [rsp + 0x638]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140032ea6
mov rbx, qword [rsp + 0x638]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x140032eae
mov rbx, qword [rsp + 0x638]
nop
mov rcx, qword [rsp + 0x6a0]
cmp rcx, qword [rsp + 0x610]
je 0x140032f09
add rcx, 0x20
call fcn.140004f60
nop
jmp 0x140032ef2
lea rcx, [rsp + 0x6a0]
call fcn.140004440
test eax, eax
jne 0x14003332c
jmp 0x140032eb0
mov rcx, qword [rsp + 0x6a8]
test rcx, rcx
je 0x140032f5a
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140032f52
mov rbx, qword [rsp + 0x6a8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140032f52
mov rcx, qword [rsp + 0x6a8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rsp + 0x638]
test rbx, rbx
je 0x140032f9b
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140032f9b
mov rbx, qword [rsp + 0x638]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140032f9b
mov rcx, qword [rsp + 0x638]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rdx, [rsp + 0x728]
mov rcx, qword [rsp + 0x68]
call fcn.140003770
nop
mov rax, r14
mov rcx, qword [rsp + 0x738]
sub rax, rcx
cmp rax, 0x12
jb 0x140033334
lea rax, [rsp + 0x728]
cmp qword [rsp + 0x740], 0xf
cmova rax, qword [rsp + 0x728]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_select
lea r9, str.Files_deleted_in:
lea r8, [rsp + 0x728]
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x6e8]
call fcn.1400473a0
nop
mov r8d, 2
lea rdx, [0x1400d2ea0]
lea rcx, [rsp + 0x6e8]
call fcn.140040090
xorps xmm0, xmm0
movups xmmword [rsp + 0x678], xmm0
mov qword [rsp + 0x688], rsi
mov qword [rsp + 0x690], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x678], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x688], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x700]
cmp rdx, 0xf
jbe 0x1400330b6
inc rdx
mov rcx, qword [rsp + 0x6e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400330b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
mov qword [rsp + 0x6f8], rsi
mov qword [rsp + 0x700], 0xf
mov byte [rsp + 0x6e8], 0
lea r8, [rsp + 0x678]
cmp qword [rsp + 0x690], 0xf
cmova r8, qword [rsp + 0x678]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x688]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x6c8], xmm0
mov qword [rsp + 0x6d8], rsi
mov qword [rsp + 0x6e0], rsi
mov r8, rbx
lea rcx, [rsp + 0x6c8]
call fcn.140044bc0
lea rcx, [rsp + 0x6c8]
cmp qword [rsp + 0x6e0], 7
cmova rcx, qword [rsp + 0x6c8]
lea r8, [rsp + 0x678]
cmp qword [rsp + 0x690], 0xf
cmova r8, qword [rsp + 0x678]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x688]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rsp + 0x6c8]
cmp qword [rsp + 0x6e0], 7
cmova r9, qword [rsp + 0x6c8]
xor r8d, r8d
mov edx, 0xc2
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x6e0]
cmp rdx, 7
jbe 0x140033200
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x6c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400331fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400331fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
mov qword [rsp + 0x6d8], rsi
mov qword [rsp + 0x6e0], 7
mov word [rsp + 0x6c8], si
mov rdx, qword [rsp + 0x690]
cmp rdx, 0xf
jbe 0x140033262
inc rdx
mov rcx, qword [rsp + 0x678]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003325d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003325d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
mov qword [rsp + 0x688], rsi
mov qword [rsp + 0x690], 0xf
mov byte [rsp + 0x678], 0
mov rdx, qword [rsp + 0x740]
cmp rdx, 0xf
jbe 0x1400332c4
inc rdx
mov rcx, qword [rsp + 0x728]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400332bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400332bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bbb20
add rdi, 0x20
jmp 0x140032d77
lea rcx, [rsp + 0x6b0]
call fcn.140041820
mov al, 1
mov rcx, qword [rsp + 0x880]
xor rcx, rsp
call fcn.1400bbb00
lea r11, [rsp + 0x8a0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
mov r8, rdi
lea rcx, str.status
call fcn.140004210
nop
mov r8, rdi
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140004210
nop
mov edx, eax
call fcn.140004120
nop
call fcn.1400026b0
int3