Function at 0x140021c50
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa60
mov rax, qword [0x14006a040]
xor rax, rsp
mov qword [rsp + 0xa58], rax
mov rdi, rcx
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xb8], rcx
xor ebx, ebx
mov r14d, ebx
mov dword [rsp + 0x48], ebx
lea r8, str.USERPROFILE
lea rdx, [rsp + 0x930]
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
cmp qword [rsp + 0x7a0], rbx
jne 0x140021cde
lea r9, str.The_USERPROFILE_environment_variable_is_not_set._r_n
xor r8d, r8d
mov edx, 0xc2
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
xor al, al
jmp 0x140023c1c
lea rcx, str.C:WindowsWindowsUpdate.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140021e0d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rcx, [rsp + 0x7a8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x400
mov r8d, eax
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x828], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x838], xmm1
mov r8d, 0x2a
lea rdx, str.Erreur_lors_de_la_suppression_du_fichier:
lea rcx, [rsp + 0x828]
call fcn.14001a7f0
nop
mov rdx, qword [rsp + 0x7a8]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140021d70
lea rcx, [rsp + 0x828]
call fcn.140041c10
lea r9, [rsp + 0x828]
cmp qword [rsp + 0x840], 7
cmova r9, qword [rsp + 0x828]
xor r8d, r8d
mov edx, 0xc2
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x7a8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rsp + 0x840]
cmp rdx, 7
jbe 0x140021e0d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x828]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021e08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140021e08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x7f0], xmm0
mov qword [rsp + 0x800], rax
movups xmmword [rsp + 0x520], xmm0
mov qword [rsp + 0x530], rbx
mov qword [rsp + 0x538], rbx
lea r8d, [rax + 0xf]
lea rdx, str.C:_Recycle.Bin
lea rcx, [rsp + 0x520]
call fcn.14001a7f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x540], xmm0
mov qword [rsp + 0x550], rbx
mov qword [rsp + 0x558], rbx
mov r8d, 0xf
lea rdx, str.C:Windows_Temp
lea rcx, [rsp + 0x540]
call fcn.14001a7f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x560], xmm0
mov qword [rsp + 0x570], rbx
mov qword [rsp + 0x578], rbx
mov r8d, 0x12
lea rdx, str.C:Windows_tracing
lea rcx, [rsp + 0x560]
call fcn.14001a7f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x298], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2a8], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140021ee5
lea rcx, [rsp + 0x298]
call fcn.140004c00
nop
mov r8d, 0x13
lea rdx, str._AppData_Local_Temp
lea rcx, [rsp + 0x298]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x178], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x168], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x178], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 1
mov rsi, qword [rsp + 0x178]
lea rdi, [rsp + 0x168]
cmp qword [rsp + 0x180], 0xf
cmova rdi, qword [rsp + 0x168]
call fcn.14004d058
mov qword [rsp + 0x450], rdi
mov qword [rsp + 0x458], rsi
lea r8, [rsp + 0x450]
mov edx, eax
lea rcx, [rsp + 0x580]
call fcn.140002aa0
or r14d, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3d8], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140021fd0
lea rcx, [rsp + 0x3c8]
call fcn.140004c00
nop
mov r8d, 0x29
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent
lea rcx, [rsp + 0x3c8]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x198], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x188], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x198], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 8
mov rsi, qword [rsp + 0x198]
lea rdi, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 0xf
cmova rdi, qword [rsp + 0x188]
call fcn.14004d058
mov qword [rsp + 0x440], rdi
mov qword [rsp + 0x448], rsi
lea r8, [rsp + 0x440]
mov edx, eax
lea rcx, [rsp + 0x5a0]
call fcn.140002aa0
or r14d, 0x30
xorps xmm0, xmm0
movups xmmword [rsp + 0x3a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3b8], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400220c0
lea rcx, [rsp + 0x3a8]
call fcn.140004c00
nop
mov r8d, 0x4d
lea rdx, str._AppData_Roaming_Microsoft_Internet_Explorer_Quick_Launch_User_Pinned_TaskBar
lea rcx, [rsp + 0x3a8]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1b8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 0x40
mov rsi, qword [rsp + 0x1b8]
lea rdi, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 0xf
cmova rdi, qword [rsp + 0x1a8]
call fcn.14004d058
mov qword [rsp + 0x460], rdi
mov qword [rsp + 0x468], rsi
lea r8, [rsp + 0x460]
mov edx, eax
lea rcx, [rsp + 0x5c0]
call fcn.140002aa0
or r14d, 0x180
xorps xmm0, xmm0
movups xmmword [rsp + 0x388], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x398], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x1400221b0
lea rcx, [rsp + 0x388]
call fcn.140004c00
nop
mov r8d, 0x3f
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_AutomaticDestinations
lea rcx, [rsp + 0x388]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 9
mov rsi, qword [rsp + 0x1d8]
lea rdi, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 0xf
cmova rdi, qword [rsp + 0x1c8]
call fcn.14004d058
mov qword [rsp + 0x470], rdi
mov qword [rsp + 0x478], rsi
lea r8, [rsp + 0x470]
mov edx, eax
lea rcx, [rsp + 0x5e0]
call fcn.140002aa0
or r14d, 0xc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x368], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x378], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x1400222a0
lea rcx, [rsp + 0x368]
call fcn.140004c00
nop
mov r8d, 0x3c
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_CustomDestinations
lea rcx, [rsp + 0x368]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1f8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 0xc
mov rsi, qword [rsp + 0x1f8]
lea rdi, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 0xf
cmova rdi, qword [rsp + 0x1e8]
call fcn.14004d058
mov qword [rsp + 0x480], rdi
mov qword [rsp + 0x488], rsi
lea r8, [rsp + 0x480]
mov edx, eax
lea rcx, [rsp + 0x600]
call fcn.140002aa0
or r14d, 0x6000
xorps xmm0, xmm0
movups xmmword [rsp + 0x348], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x358], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140022390
lea rcx, [rsp + 0x348]
call fcn.140004c00
nop
mov r8d, 0x25
lea rdx, str._AppData_Local_Microsoft_Windows_Burn
lea rcx, [rsp + 0x348]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x208], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x218], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x208], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x218], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 0xf
mov rsi, qword [rsp + 0x218]
lea rdi, [rsp + 0x208]
cmp qword [rsp + 0x220], 0xf
cmova rdi, qword [rsp + 0x208]
call fcn.14004d058
mov qword [rsp + 0x490], rdi
mov qword [rsp + 0x498], rsi
lea r8, [rsp + 0x490]
mov edx, eax
lea rcx, [rsp + 0x620]
call fcn.140002aa0
or r14d, 0x30000
mov dword [rsp + 0x48], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x328], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x338], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140022484
lea rcx, [rsp + 0x328]
call fcn.140004c00
nop
mov r8d, 0x19
lea rdx, str._AppData_Local_CrashDumps
lea rcx, [rsp + 0x328]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xf8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xf8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0xf8]
lea rdi, [rsp + 0xe8]
cmp qword [rsp + 0x100], 0xf
cmova rdi, qword [rsp + 0xe8]
call fcn.14004d058
mov qword [rsp + 0x4a0], rdi
mov qword [rsp + 0x4a8], rsi
lea r8, [rsp + 0x4a0]
mov edx, eax
lea rcx, [rsp + 0x640]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x308], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x318], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140022570
lea rcx, [rsp + 0x308]
call fcn.140004c00
nop
mov r8d, 0x3f
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Cache_Cache_Data
lea rcx, [rsp + 0x308]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x88], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0x88]
lea rdi, [rsp + 0x78]
cmp qword [rsp + 0x90], 0xf
cmova rdi, qword [rsp + 0x78]
call fcn.14004d058
mov qword [rsp + 0x4b0], rdi
mov qword [rsp + 0x4b8], rsi
lea r8, [rsp + 0x4b0]
mov edx, eax
lea rcx, [rsp + 0x660]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2f8], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140022650
lea rcx, [rsp + 0x2e8]
call fcn.140004c00
nop
mov r8d, gethostname
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History
lea rcx, [rsp + 0x2e8]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x158], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0x158]
lea rdi, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdi, qword [rsp + 0x148]
call fcn.14004d058
mov qword [rsp + 0x4c0], rdi
mov qword [rsp + 0x4c8], rsi
lea r8, [rsp + 0x4c0]
mov edx, eax
lea rcx, [rsp + 0x680]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x238], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140022734
lea rcx, [rsp + 0x228]
call fcn.140004c00
nop
mov r8d, 0x3e
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History_journal
lea rcx, [rsp + 0x228]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0xa8]
lea rdi, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0xf
cmova rdi, qword [rsp + 0x98]
call fcn.14004d058
mov qword [rsp + 0x3f0], rdi
mov qword [rsp + 0x3f8], rsi
lea r8, [rsp + 0x3f0]
mov edx, eax
lea rcx, [rsp + 0x6a0]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x258], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140022820
lea rcx, [rsp + 0x248]
call fcn.140004c00
nop
mov r8d, 0x3c
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Visited_Links
lea rcx, [rsp + 0x248]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xd8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xd8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0xd8]
lea rdi, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 0xf
cmova rdi, qword [rsp + 0xc8]
call fcn.14004d058
mov qword [rsp + 0x400], rdi
mov qword [rsp + 0x408], rsi
lea r8, [rsp + 0x400]
mov edx, eax
lea rcx, [rsp + 0x6c0]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x278], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x288], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140022904
lea rcx, [rsp + 0x278]
call fcn.140004c00
nop
mov r8d, 0x27
lea rdx, str._AppData_Local_Temporary_Internet_Files
lea rcx, [rsp + 0x278]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x118], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x108], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x118], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0x118]
lea rdi, [rsp + 0x108]
cmp qword [rsp + 0x120], 0xf
cmova rdi, qword [rsp + 0x108]
call fcn.14004d058
mov qword [rsp + 0x4d0], rdi
mov qword [rsp + 0x4d8], rsi
lea r8, [rsp + 0x4d0]
mov edx, eax
lea rcx, [rsp + 0x6e0]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2b8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2c8], xmm1
mov rdx, qword [rsp + 0x7a0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400229f0
lea rcx, [rsp + 0x2b8]
call fcn.140004c00
nop
mov r8d, 0x28
lea rdx, str._AppData_Local_Microsoft_Windows_History
lea rcx, [rsp + 0x2b8]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x138], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x128], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x138], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rsi, qword [rsp + 0x138]
lea rdi, [rsp + 0x128]
cmp qword [rsp + 0x140], 0xf
cmova rdi, qword [rsp + 0x128]
call fcn.14004d058
mov qword [rsp + 0x410], rdi
mov qword [rsp + 0x418], rsi
lea r8, [rsp + 0x410]
mov edx, eax
lea rcx, [rsp + 0x700]
call fcn.140002aa0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x7f0], xmm0
mov qword [rsp + 0x800], rbx
mov ecx, 0x200
call fcn.14004de58
mov rdi, rax
mov qword [rsp + 0x7f0], rax
mov qword [rsp + 0x7f8], rax
lea rcx, [rax + 0x200]
mov qword [rsp + 0x800], rcx
lea rax, [rsp + 0x7f0]
mov qword [rsp + 0x510], rax
lea rsi, [rsp + 0x520]
xorps xmm0, xmm0
movups xmmword [rsp + 0x848], xmm0
mov qword [rsp + 0x848], rdi
mov qword [rsp + 0x850], rdi
lea rax, [rsp + 0x7f0]
mov qword [rsp + 0x858], rax
mov rdx, rsi
mov rcx, rdi
call fcn.14001aa70
add rdi, 0x20
mov qword [rsp + 0x850], rdi
add rsi, 0x20
lea rax, [rsp + 0x720]
cmp rsi, rax
jne 0x140022b31
mov rdx, rdi
mov rcx, rdi
call fcn.14001abb0
mov qword [rsp + 0x7f8], rdi
lea r9, [fcn.140003250]
mov edx, 0x20
lea r8d, [rdx - 0x10]
lea rcx, [rsp + 0x520]
call fcn.14004de94
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0xf
jbe 0x140022bd0
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022bcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022bcb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x138], xmm0
mov byte [rsp + 0x128], 0
mov rdx, qword [rsp + 0x2d0]
cmp rdx, 0xf
jbe 0x140022c2f
inc rdx
mov rcx, qword [rsp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022c2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022c2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x2c8], xmm0
mov byte [rsp + 0x2b8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0xf
jbe 0x140022c8e
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022c89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022c89
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x118], xmm0
mov byte [rsp + 0x108], 0
mov rdx, qword [rsp + 0x290]
cmp rdx, 0xf
jbe 0x140022ced
inc rdx
mov rcx, qword [rsp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022ce8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022ce8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x288], xmm0
mov byte [rsp + 0x278], 0
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0xf
jbe 0x140022d4c
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022d47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022d47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0xd8], xmm0
mov byte [rsp + 0xc8], 0
mov rdx, qword [rsp + 0x260]
cmp rdx, 0xf
jbe 0x140022dab
inc rdx
mov rcx, qword [rsp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022da6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022da6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x258], xmm0
mov byte [rsp + 0x248], 0
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x140022e0a
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022e05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022e05
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0xa8], xmm0
mov byte [rsp + 0x98], 0
mov rdx, qword [rsp + 0x240]
cmp rdx, 0xf
jbe 0x140022e69
inc rdx
mov rcx, qword [rsp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022e64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022e64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x238], xmm0
mov byte [rsp + 0x228], 0
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140022ec8
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022ec3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022ec3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x158], xmm0
mov byte [rsp + 0x148], 0
mov rdx, qword [rsp + 0x300]
cmp rdx, 0xf
jbe 0x140022f27
inc rdx
mov rcx, qword [rsp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022f22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022f22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x2f8], xmm0
mov byte [rsp + 0x2e8], 0
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x140022f83
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022f7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022f7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x88], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rsp + 0x320]
cmp rdx, 0xf
jbe 0x140022fdf
inc rdx
mov rcx, qword [rsp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022fda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022fda
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x318], xmm0
mov byte [rsp + 0x308], 0
mov rdx, qword [rsp + 0x100]
cmp rdx, 0xf
jbe 0x14002303e
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023039
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023039
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0xf8], xmm0
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x340]
cmp rdx, 0xf
jbe 0x14002309d
inc rdx
mov rcx, qword [rsp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023098
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023098
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x338], xmm0
mov byte [rsp + 0x328], 0
mov rdx, qword [rsp + 0x220]
cmp rdx, 0xf
jbe 0x1400230fc
inc rdx
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400230f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400230f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x218], xmm0
mov byte [rsp + 0x208], 0
mov rdx, qword [rsp + 0x360]
cmp rdx, 0xf
jbe 0x14002315b
inc rdx
mov rcx, qword [rsp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023156
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023156
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x358], xmm0
mov byte [rsp + 0x348], 0
mov rdx, qword [rsp + 0x200]
cmp rdx, 0xf
jbe 0x1400231ba
inc rdx
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400231b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400231b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x1f8], xmm0
mov byte [rsp + 0x1e8], 0
mov rdx, qword [rsp + 0x380]
cmp rdx, 0xf
jbe 0x140023219
inc rdx
mov rcx, qword [rsp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023214
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023214
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x378], xmm0
mov byte [rsp + 0x368], 0
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 0xf
jbe 0x140023278
inc rdx
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023273
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x1d8], xmm0
mov byte [rsp + 0x1c8], 0
mov rdx, qword [rsp + 0x3a0]
cmp rdx, 0xf
jbe 0x1400232d7
inc rdx
mov rcx, qword [rsp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400232d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400232d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x398], xmm0
mov byte [rsp + 0x388], 0
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0xf
jbe 0x140023336
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023331
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023331
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x1b8], xmm0
mov byte [rsp + 0x1a8], 0
mov rdx, qword [rsp + 0x3c0]
cmp rdx, 0xf
jbe 0x140023395
inc rdx
mov rcx, qword [rsp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023390
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023390
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x3b8], xmm0
mov byte [rsp + 0x3a8], 0
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0xf
jbe 0x1400233f4
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400233ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400233ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x198], xmm0
mov byte [rsp + 0x188], 0
mov rdx, qword [rsp + 0x3e0]
cmp rdx, 0xf
jbe 0x140023453
inc rdx
mov rcx, qword [rsp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002344e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002344e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x3d8], xmm0
mov byte [rsp + 0x3c8], 0
mov rdx, qword [rsp + 0x180]
cmp rdx, 0xf
jbe 0x1400234b2
inc rdx
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400234ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400234ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x178], xmm0
mov byte [rsp + 0x168], 0
mov rdx, qword [rsp + 0x2b0]
cmp rdx, 0xf
jbe 0x140023511
inc rdx
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002350c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002350c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
movdqa xmm0, xmmword [0x14005ce60]
movdqu xmmword [rsp + 0x2a8], xmm0
mov byte [rsp + 0x298], 0
mov rsi, qword [rsp + 0x7f0]
mov rax, qword [rsp + 0x7f8]
mov qword [rsp + 0x268], rax
lea r13, [0x14006a0e8]
movabs r12, 0x7fffffffffffffff
mov qword [rsp + 0x50], rsi
cmp rsi, qword [rsp + 0x268]
je 0x140023c0d
mov r15, rsi
mov qword [rsp + 0x270], rsi
mov rdx, rsi
lea rcx, [rsp + 0x730]
call fcn.140004780
movsd xmm0, qword [rax]
movsd qword [rsp + 0x4e0], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x420], ecx
mov qword [rsp + 0x428], r13
movaps xmm0, xmmword [rsp + 0x420]
movdqa xmmword [rsp + 0x940], xmm0
mov eax, dword [rsp + 0x4e0]
test eax, eax
je 0x140023c07
cmp eax, 1
je 0x140023bfe
mov rdx, rsi
lea rcx, [rsp + 0x720]
call fcn.140004780
movsd xmm0, qword [rax]
movsd qword [rsp + 0x2d8], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x2d8]
test edx, edx
je 0x140023602
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140023c49
cmp ecx, 3
jne 0x140023bfe
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x7b0], xmm0
mov rdx, rsi
lea rcx, [rsp + 0x7b0]
call fcn.140043b20
test eax, eax
jne 0x140023c59
xorps xmm0, xmm0
movups xmmword [rsp + 0x7c0], xmm0
mov rdi, qword [rsp + 0x7b8]
test rdi, rdi
je 0x140023653
lock inc dword [rdi + 8]
mov rdi, qword [rsp + 0x7b8]
movaps xmm0, xmmword [rsp + 0x7b0]
movdqa xmmword [rsp + 0x7c0], xmm0
test rdi, rdi
je 0x140023675
lock inc dword [rdi + 8]
mov rdi, qword [rsp + 0x7b8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x8a0], xmm0
mov qword [rsp + 0x8a0], rbx
mov r14, rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x8a8], rbx
test rdi, rdi
je 0x1400236e6
mov eax, 0xffffffff
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400236de
mov rdi, qword [rsp + 0x7b8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1400236de
mov rdi, qword [rsp + 0x7b8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
jmp 0x1400236e6
mov rdi, qword [rsp + 0x7b8]
nop word [rax + rax]
mov rcx, qword [rsp + 0x7c0]
cmp rcx, r14
je 0x140023756
add rcx, 0x20
call fcn.140004a70
nop
jmp 0x14002373f
lea rcx, [rsp + 0x7c0]
call fcn.140003e40
test eax, eax
jne 0x140023c6b
jmp 0x1400236f0
mov rcx, qword [rsp + 0x7c8]
test rcx, rcx
je 0x1400237a7
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14002379f
mov rdi, qword [rsp + 0x7c8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14002379f
mov rcx, qword [rsp + 0x7c8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rdi, qword [rsp + 0x7b8]
test rdi, rdi
je 0x1400237e8
mov eax, 0xffffffff
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400237e8
mov rdi, qword [rsp + 0x7b8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1400237e8
mov rcx, qword [rsp + 0x7b8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rcx, r15
cmp qword [r15 + 0x18], 7
jbe 0x1400237f5
mov rcx, qword [r15]
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0x430], rcx
mov qword [rsp + 0x438], rax
call fcn.14004d058
movaps xmm0, xmmword [rsp + 0x430]
movdqa xmmword [rsp + 0x500], xmm0
lea r8, [rsp + 0x500]
mov edx, eax
lea rcx, [rsp + 0x880]
call fcn.14004c1c0
nop
mov rdx, qword [rsp + 0x890]
mov qword [rsp + 0x50], rdx
mov rax, r12
sub rax, rdx
cmp rax, 0x12
jb 0x140023c7a
lea r13, [rsp + 0x880]
cmp qword [rsp + 0x898], 0xf
cmova r13, qword [rsp + 0x880]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
lea r15, [rdx + 0x12]
mov edi, 0xf
lea r14, [rsp + 0x58]
cmp r15, rdi
jbe 0x140023920
mov rdi, r15
or rdi, 0xf
cmp rdi, r12
jbe 0x1400238d4
mov rdi, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14004de58
test rax, rax
je 0x1400238fd
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rsp + 0x50]
jmp 0x14002391b
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140023904
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140023c80
jmp 0x1400238b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140023918
call fcn.14004de58
mov r14, rax
mov rdx, qword [rsp + 0x50]
jmp 0x14002391b
mov r14, rbx
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
movups xmm0, xmmword [str.Files_deleted_in:]
movups xmmword [r14], xmm0
movzx eax, word [0x140059860]
mov word [r14 + 0x10], ax
lea rcx, [r14 + 0x12]
mov r8, rdx
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r15], 0
mov r8d, 2
lea rdx, [0x14005984c]
lea rcx, [rsp + 0x58]
call fcn.140041d80
xorps xmm0, xmm0
movups xmmword [rsp + 0x7d0], xmm0
mov qword [rsp + 0x7e0], rbx
mov qword [rsp + 0x7e8], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x7d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x7e0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400239ed
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400239e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400239e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
lea r8, [rsp + 0x7d0]
cmp qword [rsp + 0x7e8], 0xf
cmova r8, qword [rsp + 0x7d0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, dword [rsp + 0x7e0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rdi, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x808], xmm0
mov qword [rsp + 0x818], rbx
mov qword [rsp + 0x820], rbx
mov r8, rdi
lea rcx, [rsp + 0x808]
call fcn.140048730
lea rcx, [rsp + 0x808]
cmp qword [rsp + 0x820], 7
cmova rcx, qword [rsp + 0x808]
lea r8, [rsp + 0x7d0]
cmp qword [rsp + 0x7e8], 0xf
cmova r8, qword [rsp + 0x7d0]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x7e0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rsp + 0x808]
cmp qword [rsp + 0x820], 7
cmova r9, qword [rsp + 0x808]
xor r8d, r8d
mov edx, 0xc2
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x820]
cmp rdx, 7
jbe 0x140023b33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x808]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023b2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023b2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
mov qword [rsp + 0x818], rbx
mov qword [rsp + 0x820], 7
mov word [rsp + 0x808], bx
mov rdx, qword [rsp + 0x7e8]
cmp rdx, 0xf
jbe 0x140023b95
inc rdx
mov rcx, qword [rsp + 0x7d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023b90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023b90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
mov qword [rsp + 0x7e0], rbx
mov qword [rsp + 0x7e8], 0xf
mov byte [rsp + 0x7d0], 0
mov rdx, qword [rsp + 0x898]
cmp rdx, 0xf
jbe 0x140023bf7
inc rdx
mov rcx, qword [rsp + 0x880]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023bf2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023bf2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004de50
lea r13, [0x14006a0e8]
add rsi, 0x20
jmp 0x140023553
test ecx, ecx
jne 0x140023c86
jmp 0x140023bfe
lea rcx, [rsp + 0x7f0]
call fcn.140040990
mov al, 1
mov rcx, qword [rsp + 0xa58]
xor rcx, rsp
call fcn.14004de30
lea r11, [rsp + 0xa60]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r8, rsi
lea rcx, str.status
call fcn.140003c10
nop
mov r8, rsi
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140003c10
nop
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.140003b20
nop
call fcn.140002030
int3
call fcn.140001f90
nop
mov r8, rsi
lea rdx, [rsp + 0x940]
lea rcx, str.exists
call fcn.140003c80
int3