Function at 0x1400061d0
Capabilities:
Create process on windows
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1400cc040]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
xor r15d, r15d
mov dword [rsp + 0x40], r15d
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1a8]
test rcx, rcx
je 0x140006255
cmp dword [rcx + 0x10], 2
jne 0x140006250
cmp dword [rcx + 4], 1
je 0x140006265
call fcn.14007f710
mov edx, 2
mov r8d, 1
call fcn.14007ed80
lea rdx, [0x140137048]
lea rcx, [rbp + 0x30]
call fcn.140008400
nop
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140139450], eax
jle 0x1400062d1
lea rcx, [0x140139450]
call fcn.1400a5508
cmp dword [0x140139450], 0xffffffff
jne 0x1400062d1
xorps xmm0, xmm0
movdqu xmmword [0x140139458], xmm0
mov qword [0x140139468], r15
lea rcx, [0x1400ac060]
call fcn.1400a58b4
lea rcx, [0x140139450]
call fcn.1400a549c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov rbx, qword [0x140139458]
mov rdi, qword [0x140139460]
cmp rbx, rdi
je 0x14000630f
mov rcx, rbx
call fcn.140008790
add rbx, 0x20
cmp rbx, rdi
jne 0x1400062f0
mov rax, qword [0x140139458]
mov qword [0x140139460], rax
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x40]
mov qword [rsp + 0x68], rax
call fcn.1400a4928
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.140004e90
mov edi, 0x60000
mov dword [rsp + 0x40], edi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x70]
call fcn.140008b20
test eax, eax
jne 0x1400077ab
lea rcx, [rbp + 0x10]
call fcn.140008720
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140006391
lock inc dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm0
test rcx, rcx
je 0x1400063ae
lock inc dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
mov r13, 0xffffffffffffffff
test rcx, rcx
je 0x1400063f8
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400063f4
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400063f4
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
lea r12, str..cfg
mov r14, qword [rsp + 0x60]
test r14, r14
je 0x140006880
lea rdx, [rbp - 0x50]
mov rcx, r14
call fcn.140005c00
mov rax, qword [rbp - 0x50]
mov edx, dword [rbp - 0x48]
test edx, edx
je 0x140006433
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400077be
cmp eax, 2
jne 0x140006597
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 4
call fcn.1400a4928
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.140004e90
or edi, 0x18000
or edi, 1
mov dword [rsp + 0x40], edi
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x140006483
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rsi, [rcx + rax*2]
mov rbx, rsi
mov rdx, rsi
call fcn.140004ff0
cmp rax, rsi
je 0x1400064db
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1400064af
cmp cx, 0x2f
jne 0x1400064b8
add rax, 2
cmp rax, rsi
jne 0x1400064a0
cmp rax, rsi
je 0x1400064db
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x1400064db
cmp cx, 0x2f
je 0x1400064db
mov rbx, rdx
cmp rax, rdx
jne 0x1400064c0
mov r8d, 0x3a
mov rdx, rsi
mov rcx, rbx
call fcn.1400a5390
cmp rbx, rax
je 0x14000652f
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x14000652f
cmp word [rdx], 0x2e
jne 0x140006511
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x140006532
cmp word [rcx], 0x2e
jne 0x140006532
jmp 0x14000652f
sub rdx, 2
cmp rbx, rdx
je 0x14000652f
nop word [rax + rax]
cmp word [rdx], 0x2e
je 0x140006532
sub rdx, 2
cmp rbx, rdx
jne 0x140006520
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov r8, rax
lea rcx, [rbp - 0x10]
call fcn.1400091c0
or edi, 0x7002
mov dword [rsp + 0x40], edi
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 7
cmova rax, qword [rbp - 0x30]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x58], rax
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.140005340
test eax, eax
jne 0x140006597
mov bl, 1
jmp 0x140006599
xor bl, bl
test dil, 2
je 0x1400065b0
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
lea rcx, [rbp - 0x10]
call fcn.140008720
nop
test dil, 1
je 0x1400065c6
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
lea rcx, [rbp - 0x30]
call fcn.140008720
test bl, bl
je 0x1400067d0
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x1400065dd
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rsi, [rcx + rax*2]
mov rbx, rsi
mov rdx, rsi
call fcn.140004ff0
cmp rax, rsi
je 0x14000662d
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140006604
cmp cx, 0x2f
jne 0x14000660d
add rax, 2
cmp rax, rsi
jne 0x1400065f5
cmp rax, rsi
je 0x14000662d
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14000662d
cmp cx, 0x2f
je 0x14000662d
mov rbx, rdx
cmp rax, rdx
jne 0x140006612
sub rsi, rbx
sar rsi, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.1400091c0
or edi, 0xe00
lea r15, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova r15, qword [rbp - 0x10]
mov rsi, qword [rbp]
call fcn.1400a4928
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], al
bts edi, 8
mov dword [rsp + 0x40], edi
test rsi, rsi
je 0x14000670c
cmp rsi, 0x7fffffff
ja 0x1400077e3
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1400a4998
mov rbx, rax
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x1400077d9
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.1400087f0
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r9, qword [rbp - 0x30]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1400a4998
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x1400077cf
btr edi, 8
or edi, 0xe0
mov dword [rsp + 0x40], edi
mov rdx, qword [0x140139460]
cmp rdx, qword [0x140139468]
je 0x140006765
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor r15d, r15d
mov qword [rdx + 0x10], r15
mov qword [rdx + 0x18], r15
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x20], r15
mov edx, 0xf
mov qword [rbp - 0x18], rdx
mov byte [rbp - 0x30], r15b
add qword [0x140139460], 0x20
jmp 0x140006775
lea r8, [rbp - 0x30]
call fcn.140009f90
mov rdx, qword [rbp - 0x18]
xor r15d, r15d
cmp rdx, 0xf
jbe 0x1400067ac
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006879
call fcn.1400a58cc
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
lea rcx, [rbp - 0x10]
call fcn.140008720
lea r12, str..cfg
nop dword [rax]
lea rdx, [rbp + 0x70]
mov rcx, qword [r14 + 0x40]
call fcn.1400a4c00
cmp eax, 0x12
je 0x14000681e
test eax, eax
jne 0x1400077a3
cmp word [rbp + 0x9c], 0x2e
jne 0x140006810
movzx eax, word [rbp + 0x9e]
test ax, ax
je 0x1400067d0
cmp ax, 0x2e
jne 0x140006810
cmp word [rbp + 0xa0], 0
je 0x1400067d0
lea rdx, [rbp + 0x70]
mov rcx, r14
call fcn.140005ef0
jmp 0x140006869
mov r14, r15
mov qword [rsp + 0x60], r15
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x68], r15
test rbx, rbx
je 0x140006869
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140006860
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140006860
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov r14, qword [rsp + 0x60]
mov eax, r15d
test eax, eax
jne 0x1400077a3
jmp 0x140006404
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400068bd
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400068bd
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400068bd
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400068f9
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400068f9
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400068f9
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 8]
mov rsi, qword [0x140139460]
mov rdi, qword [0x140139458]
mov rbx, qword [rbp - 0x78]
cmp rdi, rsi
je 0x140006953
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000691d
mov rax, qword [rdi]
mov qword [rsp + 0x50], rax
cmp rbx, qword [rbp - 0x70]
je 0x140006935
mov qword [rbx], rax
add rbx, 8
mov qword [rbp - 0x78], rbx
jmp 0x14000694a
lea r8, [rsp + 0x50]
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140009df0
mov rbx, qword [rbp - 0x78]
add rdi, 0x20
cmp rdi, rsi
jne 0x140006910
mov r9, qword [0x140139320]
mov rax, qword [r9 + 0x3ef8]
movss xmm0, dword [rax + 0x100]
movaps xmm7, xmm0
subss xmm7, dword [rax + 0x20]
addss xmm7, dword [rax + 0x84]
mov r10, qword [rax + 0x1a8]
test r10, r10
jne 0x1400069ac
movss xmm8, dword [rax + 0x250]
cmp r10, r10
jne 0x14000699c
cmp qword [r9 + 0x4b58], r10
je 0x1400069a5
movss xmm8, dword [rax + 0x220]
subss xmm8, xmm0
jmp 0x1400069dd
movsxd rdx, dword [r10 + 0xc]
mov r8, qword [r10 + 0x68]
lea rax, [rdx + 1]
imul rcx, rax, 0x1c
imul rax, rdx, 0x1c
movss xmm8, dword [rcx + r8]
subss xmm8, dword [rax + r8]
movss xmm0, dword [r10 + 0x18]
subss xmm0, dword [r10 + 0x14]
mulss xmm8, xmm0
subss xmm8, dword [r9 + 0x381c]
subss xmm8, dword [0x1400b95cc]
mov rax, qword [r9 + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [r9 + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400b95d8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400b95bc]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rdx, [0x1401374d8]
cmp qword [0x1401374f0], 0xf
cmova rdx, qword [0x1401374d8]
mov rax, qword [r9 + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [r9 + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x140006aa9
mov r8, rdx
cmp rdx, 0xffffffffffffffff
jae 0x140006aa1
movzx ecx, byte [r8]
test cl, cl
je 0x140006aa1
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x140006a98
cmp byte [rax], cl
je 0x140006aa1
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x140006a83
xorps xmm3, xmm3
call fcn.1400839c0
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movaps xmm6, xmm7
addss xmm6, dword [0x1400b95a4]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
lea rcx, [0x140137538]
cmp qword [0x140137550], 0xf
cmova rcx, qword [0x140137538]
call fcn.140080600
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
movss dword [rcx + 0x4784], xmm8
mov r14, qword [rbp - 0x80]
sub rbx, r14
sar rbx, 3
mov dword [rsp + 0x20], ebx
mov r9, r14
call fcn.14008f400
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x40], 0x42f00000
mov dword [rsp + 0x44], 0x41f00000
lea rcx, str.Load
cmp qword [0x1401374b0], 0xf
cmova rcx, qword [str.Load]
lea rdx, [rsp + 0x40]
call fcn.140080f10
test al, al
je 0x140006c2c
movsxd rax, dword [0x1400cc0c4]
test eax, eax
js 0x140006c2c
mov rdx, rax
mov rax, qword [0x140139460]
mov rcx, qword [0x140139458]
sub rax, rcx
sar rax, 5
cmp rdx, rax
jae 0x140006c2c
shl rdx, 5
add rdx, rcx
lea rcx, [rbp + 0x10]
call fcn.140008400
nop
lea rcx, [rbp + 0x10]
call fcn.14000ea20
nop
lea rcx, [rbp + 0x10]
call fcn.140008790
movss xmm6, dword [0x1400b9700]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov dword [rsp + 0x40], 0x42f00000
mov dword [rsp + 0x44], 0x41f00000
lea rcx, str.Save
cmp qword [0x140137b70], 0xf
cmova rcx, qword [str.Save]
lea rdx, [rsp + 0x40]
call fcn.140080f10
test al, al
je 0x140006d23
movsxd rax, dword [0x1400cc0c4]
test eax, eax
js 0x140006d23
mov rdx, rax
mov rax, qword [0x140139460]
mov rcx, qword [0x140139458]
sub rax, rcx
sar rax, 5
cmp rdx, rax
jae 0x140006d23
shl rdx, 5
add rdx, rcx
lea rcx, [rbp + 0x10]
call fcn.140008400
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1400b9790]
movdqu xmmword [rbp], xmm1
mov byte [rbp - 0x10], 0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x10]
call fcn.14000b660
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140006d1a
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a58cc
nop
lea rcx, [rbp + 0x10]
call fcn.140008790
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm7, dword [0x1400b95a4]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x40], 0x42f00000
mov dword [rsp + 0x44], 0x41f00000
lea rcx, [0x140137438]
cmp qword [0x140137450], 0xf
cmova rcx, qword [0x140137438]
lea rdx, [rsp + 0x40]
call fcn.140080f10
test al, al
je 0x140006e3d
movsxd rax, dword [0x1400cc0c4]
test eax, eax
js 0x140006e3d
mov rcx, qword [0x140139460]
sub rcx, qword [0x140139458]
sar rcx, 5
cmp rax, rcx
jae 0x140006e3d
mov rsi, qword [0x140139320]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.14004bd20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140006e15
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140064d50
test byte [rsi + 0x5ce4], 4
je 0x140006e34
mov r8d, edi
lea rdx, str.reallyDelete
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.140064970
xor edx, edx
mov ecx, edi
call fcn.14005da90
mov rbx, qword [0x140139320]
mov eax, dword [rbx + 0x48b0]
cmp dword [rbx + 0x48a0], eax
jg 0x140006e5e
mov dword [rbx + 0x47d0], r15d
jmp 0x1400070d7
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.14004bd20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140006ea6
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140064d50
mov ecx, edi
call fcn.14005dfa0
test al, al
je 0x1400070d7
xor edx, edx
mov r8d, 1
lea rcx, str._Are_you_sure_
call fcn.14007fc50
xor edx, edx
mov r8d, 1
lea rcx, [0x1400ae620]
call fcn.14007fc50
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov qword [rsp + 0x40], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400ae624]
call fcn.140080f10
test al, al
je 0x140006f0b
call fcn.14005dec0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov qword [rsp + 0x40], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400ae628]
call fcn.140080f10
test al, al
je 0x140007080
movsxd rdx, dword [0x1400cc0c4]
shl rdx, 5
add rdx, qword [0x140139458]
lea rcx, [rbp - 0x30]
call fcn.140008400
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 1
jb 0x14000779d
lea r9, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova r9, qword [rbp + 0x30]
mov qword [rsp + 0x30], 1
lea rax, [0x1400ae62c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x10]
call fcn.140009ca0
nop
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x10]
call fcn.140008880
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp + 0x10]
call fcn.140008790
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rcx, qword [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x140007067
movsxd rdi, dword [0x1400cc0c4]
shl rdi, 5
add rdi, qword [0x140139458]
mov rsi, qword [0x140139460]
lea rbx, [rdi + 0x20]
cmp rbx, rsi
je 0x14000704f
nop dword [rax]
mov rdx, rbx
mov rcx, rdi
call fcn.140008970
add rdi, 0x20
add rbx, 0x20
cmp rbx, rsi
jne 0x140007030
mov rsi, qword [0x140139460]
lea rcx, [rsi - 0x20]
call fcn.140008790
sub qword [0x140139460], 0x20
mov dword [0x1400cc0c4], r13d
call fcn.14005dec0
nop
lea rcx, [rbp - 0x10]
call fcn.140008790
nop
lea rcx, [rbp - 0x30]
call fcn.140008790
mov rbx, qword [0x140139320]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x1400070bb
cmp byte [rbx + 0x4951], 0
je 0x1400070bb
cmp dword [rbx + 0x4910], 0
jne 0x1400070bb
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x1400070cb
mov byte [rbx + 0x3e5e], 1
call fcn.140059310
mov byte [rbx + 0x3e5e], 0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov dword [rsp + 0x40], 0x42f00000
mov dword [rsp + 0x44], 0x41f00000
lea rcx, [0x140137458]
cmp qword [0x140137470], 0xf
cmova rcx, qword [0x140137458]
lea rdx, [rsp + 0x40]
call fcn.140080f10
test al, al
je 0x14000718e
mov rsi, qword [0x140139320]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyReset
call fcn.14004bd20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140007166
lea r8, str.reallyReset
mov edx, 0xb
mov ecx, eax
call fcn.140064d50
test byte [rsi + 0x5ce4], 4
je 0x140007185
mov r8d, edi
lea rdx, str.reallyReset
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.140064970
xor edx, edx
mov ecx, edi
call fcn.14005da90
mov rbx, qword [0x140139320]
mov eax, dword [rbx + 0x48b0]
cmp dword [rbx + 0x48a0], eax
jg 0x1400071af
mov dword [rbx + 0x47d0], r15d
jmp 0x1400072e6
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyReset
call fcn.14004bd20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x1400071f7
lea r8, str.reallyReset
mov edx, 0xb
mov ecx, eax
call fcn.140064d50
mov ecx, edi
call fcn.14005dfa0
test al, al
je 0x1400072e6
xor edx, edx
mov r8d, 1
lea rcx, str._Are_you_sure_
call fcn.14007fc50
xor edx, edx
mov r8d, 1
lea rcx, [0x1400ae620]
call fcn.14007fc50
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov qword [rsp + 0x40], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400ae624]
call fcn.140080f10
test al, al
je 0x14000725c
call fcn.14005dec0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov qword [rsp + 0x40], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400ae628]
call fcn.140080f10
test al, al
je 0x14000728f
call fcn.1400077f0
call fcn.14005dec0
mov rbx, qword [0x140139320]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x1400072ca
cmp byte [rbx + 0x4951], 0
je 0x1400072ca
cmp dword [rbx + 0x4910], 0
jne 0x1400072ca
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x1400072da
mov byte [rbx + 0x3e5e], 1
call fcn.140059310
mov byte [rbx + 0x3e5e], 0
call fcn.14007f410
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
movss xmm2, dword [rax + 0x100]
subss xmm2, dword [rax + 0x20]
addss xmm2, dword [rax + 0x84]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400b95d8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm2, dword [0x1400b95a4]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rdx, [0x140137518]
cmp qword [0x140137530], 0xf
cmova rdx, qword [0x140137518]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x1400073c6
mov r8, rdx
cmp rdx, 0xffffffffffffffff
jae 0x1400073be
nop
movzx ecx, byte [r8]
test cl, cl
je 0x1400073be
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x1400073b5
cmp byte [rax], cl
je 0x1400073be
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x1400073a0
xorps xmm3, xmm3
call fcn.1400839c0
lea rcx, [0x1401374f8]
cmp qword [0x140137510], 0xf
cmova rcx, qword [0x1401374f8]
call fcn.140080600
mov rax, qword [0x140139320]
or dword [rax + 0x4780], 1
addss xmm8, dword [0x1400b9598]
movss dword [rax + 0x4784], xmm8
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea rdi, str.NewConfig
mov r8, rdi
xor edx, edx
lea rcx, str.ConfigNameInput
call fcn.140087440
lea rcx, [0x140137478]
cmp qword [0x140137490], 0xf
cmova rcx, qword [0x140137478]
call fcn.140080600
mov rax, qword [0x140139320]
or dword [rax + 0x4780], 1
movss dword [rax + 0x4784], xmm8
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea rbx, str.Author
mov r8, rbx
xor edx, edx
lea rcx, str.AuthorNameInput
call fcn.140087440
call fcn.140083300
mov dword [rsp + 0x40], 0x42f00000
mov dword [rsp + 0x44], 0x41f00000
lea rcx, [0x1401374b8]
cmp qword [0x1401374d0], 0xf
cmova rcx, qword [0x1401374b8]
lea rdx, [rsp + 0x40]
call fcn.140080f10
test al, al
je 0x140007665
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8, r13
inc r8
cmp byte [rdi + r8], 0
jne 0x140007505
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.140009440
nop
mov r8d, 4
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.140008880
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140007599
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007594
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007594
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a58cc
movdqa xmm0, xmmword [0x1400b9790]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
nop dword [rax]
inc r13
cmp byte [rbx + r13], 0
jne 0x1400075c0
mov r8, r13
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.140009440
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x30]
call fcn.14000b660
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140007627
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007621
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007621
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a58cc
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140007665
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007660
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007660
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a58cc
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14005ca20
mov dword [rsp + 0x40], 0x42f00000
mov dword [rsp + 0x44], 0x41f00000
lea rcx, [0x140137558]
cmp qword [0x140137570], 0xf
cmova rcx, qword [0x140137558]
lea rdx, [rsp + 0x40]
call fcn.140080f10
test al, al
je 0x1400076d2
lea r8, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova r8, qword [rbp + 0x30]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x140139320]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1a8]
test rcx, rcx
je 0x14000770c
cmp dword [rcx + 0x10], 1
jne 0x140007706
cmp dword [rcx + 4], 0
je 0x14000770c
call fcn.14007f710
nop
test r14, r14
je 0x140007755
mov rax, qword [rbp - 0x70]
sub rax, r14
sar rax, 3
lea rdx, [rax*8]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000774c
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000774c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400a58cc
nop
lea rcx, [rbp + 0x30]
call fcn.140008790
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.1400a5440
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400047d0
nop
mov edx, eax
call fcn.140005aa0
nop
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140005b90
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.140005b90
nop
mov ecx, dword [rsp + 0x54]
call fcn.140004e40
int3
mov ecx, dword [rsp + 0x54]
call fcn.140004e40
int3
call fcn.140004b80
int3