Function at 0x14007b340
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x570
mov rax, qword [0x1402fb080]
xor rax, rsp
mov qword [rsp + 0x560], rax
xor r13d, r13d
mov r14d, r13d
mov dword [rsp + 0x20], r13d
mov r8d, 0x104
lea rdx, [rsp + 0x350]
lea rcx, str.USERPROFILE
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x14007b3c5
lea rdx, str.Erro_ao_obter_a_vari
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140082d20
lea rdx, [0x140082f00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14007bc8b
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea rax, [rsp + 0x350]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14007b3f0
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x30]
call fcn.14002f7e0
nop
mov r8d, Ordinal_27
lea rdx, str.AppDataLocalCrashDumps
lea rcx, [rsp + 0x30]
call fcn.140081dc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x90], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
or r14d, 0x40
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x14007b4b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b4ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007b4ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dad74
movdqa xmm0, xmmword [0x1402e6c70]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r13w
lea rdx, [rsp + 0x80]
cmp qword [rsp + 0x98], 7
cmova rdx, qword [rsp + 0x80]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r13
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0xc0]
call fcn.14002f7e0
or r14d, 0x180
or r14d, 1
mov dword [rsp + 0x20], r14d
mov qword [rsp + 0xa0], r13
lea rax, [0x1402fb118]
mov qword [rsp + 0xa8], rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xc0]
call fcn.140024690
cmp dword [rsp + 0xa0], 0
jne 0x14007bcbd
test al, al
je 0x14007b65a
lea rdx, [rsp + 0x80]
cmp qword [rsp + 0x98], 7
cmova rdx, qword [rsp + 0x80]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x60]
call fcn.14002f7e0
or r14d, 0x600
or r14d, 2
mov dword [rsp + 0x20], r14d
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 7
cmova rcx, qword [rsp + 0x60]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0xa0]
call fcn.1400da510
mov edx, eax
test eax, eax
jne 0x14007b61c
mov ecx, dword [rsp + 0xb0]
mov eax, ecx
shr eax, 0xa
test al, 1
je 0x14007b611
mov eax, dword [rsp + 0xb4]
cmp eax, 0xa000000c
jne 0x14007b603
mov ecx, 4
jmp 0x14007b63f
cmp eax, 0xa0000003
jne 0x14007b611
mov ecx, 0xa
jmp 0x14007b63f
shr ecx, 4
and ecx, 1
add ecx, 2
jmp 0x14007b63f
sub eax, 2
je 0x14007b63a
sub eax, 1
je 0x14007b63a
sub eax, 0x32
je 0x14007b63a
sub eax, 0x46
je 0x14007b63a
cmp eax, 0x90
mov ecx, r13d
jne 0x14007b63f
mov ecx, 1
test edx, edx
je 0x14007b651
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14007bcd3
cmp ecx, 3
jne 0x14007b65a
mov bl, 1
jmp 0x14007b65c
xor bl, bl
test r14b, 2
je 0x14007b6bf
and r14d, 0xfffffffd
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14007b6ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b6a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007b6a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dad74
movdqa xmm0, xmmword [0x1402e6c70]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r13w
test r14b, 1
je 0x14007b714
and r14d, 0xfffffffe
mov rdx, qword [rsp + 0xd8]
cmp rdx, 7
jbe 0x14007b714
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b70f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007b70f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dad74
test bl, bl
je 0x14007bbf1
lea rdx, [rsp + 0x80]
cmp qword [rsp + 0x98], 7
cmova rdx, qword [rsp + 0x80]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x60]
call fcn.14002f7e0
or r14d, 0x1800
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xc0]
call fcn.140082430
test eax, eax
jne 0x14007bce5
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14007b7cc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b7c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007b7c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dad74
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov r12, qword [rsp + 0xc8]
test r12, r12
je 0x14007b7ea
lock inc dword [r12 + 8]
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0xa0], xmm0
test r12, r12
je 0x14007b806
lock inc dword [r12 + 8]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
test r12, r12
je 0x14007b844
mov eax, esi
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x14007b844
mov rax, qword [r12]
mov rcx, r12
call qword [rax]
mov eax, esi
lock xadd dword [r12 + 0xc], eax
cmp eax, 1
jne 0x14007b844
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov r15, qword [rsp + 0xa0]
nop dword [rax]
cmp r15, qword [rsp + 0x60]
je 0x14007bb82
lea rcx, [r15 + 0x20]
cmp qword [r15 + 0x38], 7
jbe 0x14007b86a
mov rcx, qword [r15 + 0x20]
mov rax, qword [r15 + 0x30]
lea rdi, [rcx + rax*2]
mov rbx, rdi
mov rdx, rdi
call fcn.140077f60
cmp rax, rdi
je 0x14007b8bb
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14007b891
cmp cx, 0x2f
jne 0x14007b89a
add rax, 2
cmp rax, rdi
jne 0x14007b882
cmp rax, rdi
je 0x14007b8bb
nop
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14007b8bb
cmp cx, 0x2f
je 0x14007b8bb
mov rbx, rdx
cmp rax, rdx
jne 0x14007b8a0
sub rdi, rbx
sar rdi, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14002f7e0
or r14d, 0x38
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.14002ee60
or r14d, 4
mov dword [rsp + 0x20], r14d
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x14007b947
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b942
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007b942
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dad74
lea r10, [rsp + 0xe0]
mov rbx, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf8]
cmp rdi, 7
cmova r10, rbx
mov rax, qword [rsp + 0xf0]
cmp rax, 3
jb 0x14007b9a0
add rax, 0xfffffffffffffffe
lea r11, [r10 + rax*2]
mov rax, r10
mov rcx, r11
sub rcx, rax
sar rcx, 1
je 0x14007b9a0
nop dword [rax + rax]
cmp word [rax], 0x6f
je 0x14007b9e9
add rax, 2
sub rcx, 1
jne 0x14007b990
mov rsi, 0xffffffffffffffff
cmp rdi, 7
jbe 0x14007bad0
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14007bac6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007bac6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rax, rax
je 0x14007b9a0
mov r8d, 3
lea rcx, [0x1402e5f80]
mov rdx, rcx
mov r9, rax
sub r9, rcx
nop dword [rax]
nop dword [rax + rax]
movzx ecx, word [rdx]
cmp word [r9 + rdx], cx
jne 0x14007babd
add rdx, 2
sub r8, 1
jne 0x14007ba10
sub rax, r10
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14007b9a0
lea rcx, [r15 + 0x20]
cmp qword [r15 + 0x38], 7
jbe 0x14007ba47
mov rcx, qword [r15 + 0x20]
call fcn.1400da890
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x14007bcf9
lea rdx, str.Arquivo_deletado:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140082d20
lea rdx, [r15 + 0x20]
mov rcx, rax
call fcn.140083090
lea rdx, [0x140082f00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
jmp 0x14007b9a0
add rax, 2
jmp 0x14007b980
mov rcx, rbx
call fcn.1400dad74
nop
lea rdx, [rsp + 0x100]
mov rcx, qword [r15 + 0x40]
call fcn.1400da45c
cmp eax, 0x12
je 0x14007bb29
test eax, eax
jne 0x14007bd0e
cmp word [rsp + 0x12c], 0x2e
jne 0x14007bb17
movzx eax, word [rsp + 0x12e]
test ax, ax
je 0x14007bad0
cmp ax, 0x2e
jne 0x14007bb17
cmp word [rsp + 0x130], 0
je 0x14007bad0
lea rdx, [rsp + 0x100]
mov rcx, r15
call fcn.1400786b0
jmp 0x14007bb72
mov r15, r13
mov qword [rsp + 0xa0], r13
mov rbx, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], r13
test rbx, rbx
je 0x14007bb72
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14007bb72
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14007bb72
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov eax, r13d
test eax, eax
jne 0x14007bd0e
jmp 0x14007b850
mov rbx, qword [rsp + 0xa8]
test rbx, rbx
je 0x14007bbb9
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14007bbb9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14007bbb9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
test r12, r12
je 0x14007bc3f
mov eax, esi
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x14007bc3f
mov rax, qword [r12]
mov rcx, r12
call qword [rax]
lock xadd dword [r12 + 0xc], esi
cmp esi, 1
jne 0x14007bc3f
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x14007bc3f
lea rdx, str.O_diret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140082d20
lea rdx, [rsp + 0x80]
cmp qword [rsp + 0x98], 7
cmova rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
mov rcx, rax
call fcn.140083b20
lea rdx, [0x140082f00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x98]
cmp rdx, 7
jbe 0x14007bc8b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007bc85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007bc85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dad74
nop
mov rcx, qword [rsp + 0x560]
xor rcx, rsp
call fcn.1400daad0
lea r11, [rsp + 0x570]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xa0]
call fcn.140024630
nop
lea r8, [rsp + 0x60]
lea rcx, str.status
call fcn.140078450
nop
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140078450
nop
shr rdx, 0x20
lea r8, [r15 + 0x20]
lea rcx, str.remove
call fcn.140078450
nop
mov edx, eax
call fcn.1400783f0
int3