Function at 0x1400a10a0
Capabilities:
Delete file
Execute command
Get common file path
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x7a8]
sub rsp, 0x890
vmovaps xmmword [rax - 0x28], xmm6
vmovaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x140423010]
xor rax, rsp
mov qword [rbp + 0x760], rax
xor r14d, r14d
mov esi, r14d
mov dword [rsp + 0x40], r14d
mov rcx, qword [0x14042c7f0]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], r14b
jne 0x1400a1143
lea rdx, str.Config_System
mov r8, rdx
cmp rdx, 0xffffffffffffffff
jae 0x1400a113e
nop dword [rax]
movzx ecx, byte [r8]
test cl, cl
je 0x1400a113e
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x1400a1135
cmp byte [rax], cl
je 0x1400a113e
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x1400a1120
call fcn.14004cdb0
vxorps xmm7, xmm7, xmm7
vmovss dword [rsp + 0x48], xmm7
vmovss dword [rsp + 0x4c], xmm7
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea rbx, [0x14042d320]
mov r8, rbx
xor edx, edx
lea rcx, str.Config_Name
call fcn.140052200
vmovss dword [rsp + 0x50], xmm7
vmovss dword [rsp + 0x54], xmm7
lea rdx, [rsp + 0x50]
lea rcx, str.Create
call fcn.14004a8a0
lea r15, str..auxx
test al, al
je 0x1400a126f
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x130], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x140], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], sil
jne 0x1400a11d5
mov rdx, rbx
lea rcx, [rbp + 0x130]
call fcn.14000f6e0
nop
mov r8d, 5
mov rdx, r15
lea rcx, [rbp + 0x130]
call fcn.140014280
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], r14
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x170], ymm0
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov esi, 0x20000
lea rcx, [rbp + 0x130]
vzeroupper
call fcn.14000efd0
cmp qword [rbp + 0x180], 5
jbe 0x1400a1263
lea rcx, [rbp + 0x170]
call fcn.1400a30c0
nop
lea rcx, [rbp + 0x170]
call fcn.14000efd0
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x1400a257a
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x440]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp + 0x550]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x1400a257a
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x1d0], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x1e0], xmm1
lea rax, [rbp + 0x440]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400a1300
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x1d0]
call fcn.14000f6e0
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r14
mov qword [rbp + 0x168], r14
mov r8d, 0xc
lea rdx, str.c:AuxxCS2_
lea rcx, [rbp + 0x150]
call fcn.14000f6e0
nop
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14042e918], eax
jle 0x1400a13ae
lea rcx, [0x14042e918]
call fcn.1400a80c8
cmp dword [0x14042e918], 0xffffffff
jne 0x1400a13ae
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [0x14042e920], xmm0
mov qword [0x14042e930], r14
lea rcx, [0x1400abd50]
call fcn.1400a8484
lea rcx, [0x14042e918]
call fcn.1400a805c
mov rcx, qword [0x14042e920]
mov rdx, qword [0x14042e928]
cmp rcx, rdx
je 0x1400a13d4
call fcn.1400a2900
mov rax, qword [0x14042e920]
mov qword [0x14042e928], rax
mov rdi, qword [rbp + 0x160]
lea rbx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rbx, qword [rbp + 0x150]
call fcn.1400a76b8
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp + 0x110]
call fcn.140011a20
or esi, 0xc0000
mov dword [rsp + 0x40], esi
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xe0]
call fcn.1400a2770
test eax, eax
jne 0x1400a25d2
lea rcx, [rbp + 0x110]
call fcn.14000ef60
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x1400a1469
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0xe8]
mov esi, dword [rsp + 0x40]
vmovups xmm0, xmmword [rbp + 0xe0]
vmovdqu xmmword [rbp + 0x80], xmm0
vmovdqu xmmword [rbp + 0x100], xmm0
test rcx, rcx
je 0x1400a1495
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0xe8]
mov esi, dword [rsp + 0x40]
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x1c0], xmm1
test rcx, rcx
je 0x1400a14e4
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400a14e0
mov rbx, qword [rbp + 0xe8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400a14e0
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rdi, qword [rbp + 0x100]
nop dword [rax + rax]
test rdi, rdi
je 0x1400a189b
lea rdx, [rbp - 0x58]
mov rcx, rdi
call fcn.1400a0b70
mov rax, qword [rbp - 0x58]
mov edx, dword [rbp - 0x50]
test edx, edx
je 0x1400a151f
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400a25e8
cmp eax, 2
jne 0x1400a1674
call fcn.1400a76b8
mov qword [rbp], r15
mov qword [rbp + 8], 5
lea r8, [rbp]
mov edx, eax
lea rcx, [rbp - 0x28]
call fcn.140011a20
or esi, 0x6000
or esi, 1
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 8
jb 0x1400a1564
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.1400a03f0
cmp rax, rdx
je 0x1400a15bc
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1400a158f
cmp cx, 0x2f
jne 0x1400a1598
add rax, 2
cmp rax, rdx
jne 0x1400a1580
cmp rax, rdx
je 0x1400a15bc
nop dword [rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x1400a15bc
cmp cx, 0x2f
je 0x1400a15bc
mov rbx, r8
cmp rax, r8
jne 0x1400a15a0
mov r8d, 0x3a
mov rcx, rbx
call fcn.1400a7ee0
cmp rbx, rax
je 0x1400a1607
lea rcx, [rax - 2]
cmp rbx, rcx
je 0x1400a1607
cmp word [rcx], 0x2e
jne 0x1400a15ef
lea rdx, [rcx - 2]
cmp rbx, rdx
jne 0x1400a160a
cmp word [rdx], 0x2e
jne 0x1400a160a
jmp 0x1400a1607
sub rcx, 2
cmp rbx, rcx
je 0x1400a1607
cmp word [rcx], 0x2e
je 0x1400a160a
sub rcx, 2
cmp rbx, rcx
jne 0x1400a15f8
mov rcx, rax
mov qword [rbp + 0x10], rcx
sub rax, rcx
sar rax, 1
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xb0]
call fcn.1400a2b70
or esi, 0x10002
mov dword [rsp + 0x40], esi
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rax, qword [rbp - 0x28]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp - 0x18]
mov qword [rbp + 0x28], rax
vmovups xmm0, xmmword [rbp + 0x20]
vmovdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0xb0]
call fcn.1400a0770
test eax, eax
jne 0x1400a1674
mov bl, 1
jmp 0x1400a1676
xor bl, bl
test sil, 2
je 0x1400a1690
and esi, 0xfffffffd
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0xb0]
call fcn.14000ef60
nop
test sil, 1
je 0x1400a16a6
and esi, 0xfffffffe
mov dword [rsp + 0x40], esi
lea rcx, [rbp - 0x28]
call fcn.14000ef60
test bl, bl
je 0x1400a17e0
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 8
jb 0x1400a16bd
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.1400a03f0
cmp rax, r11
je 0x1400a170d
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1400a16e4
cmp cx, 0x2f
jne 0x1400a16ed
add rax, 2
cmp rax, r11
jne 0x1400a16d5
cmp rax, r11
je 0x1400a170d
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x1400a170d
cmp cx, 0x2f
je 0x1400a170d
mov r10, rdx
cmp rax, rdx
jne 0x1400a16f2
mov qword [rbp + 0x30], r10
sub r11, r10
sar r11, 1
mov qword [rbp + 0x38], r11
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.1400a2b70
bts esi, 0xf
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rax, qword [rbp + 0x60]
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x70]
mov qword [rbp + 0x48], rax
call fcn.1400a76b8
vmovups xmm0, xmmword [rbp + 0x40]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea r8, [rbp + 0xa0]
mov edx, eax
lea rcx, [rbp - 0x48]
call fcn.1400a2610
or esi, 0x1c00
mov dword [rsp + 0x40], esi
mov rdx, qword [0x14042e928]
cmp rdx, qword [0x14042e930]
je 0x1400a17b7
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
vmovups ymm0, ymmword [rbp - 0x48]
vmovups ymmword [rdx], ymm0
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
add qword [0x14042e928], 0x20
jmp 0x1400a17c1
lea r8, [rbp - 0x48]
call fcn.1400a2cc0
nop
lea rcx, [rbp - 0x48]
vzeroupper
call fcn.14000efd0
nop
lea rcx, [rbp + 0x60]
call fcn.14000ef60
nop word [rax + rax]
lea rdx, [rbp + 0x1f0]
mov rcx, qword [rdi + 0x40]
call fcn.1400a7990
cmp eax, 0x12
je 0x1400a1837
test eax, eax
jne 0x1400a25f9
cmp word [rbp + 0x21c], 0x2e
jne 0x1400a1823
movzx eax, word [rbp + 0x21e]
test ax, ax
je 0x1400a17e0
cmp ax, 0x2e
jne 0x1400a1823
cmp word [rbp + 0x220], 0
je 0x1400a17e0
lea rdx, [rbp + 0x1f0]
mov rcx, rdi
call fcn.1400a0e70
jmp 0x1400a14f0
mov rdi, r14
mov qword [rbp + 0x100], r14
mov rbx, qword [rbp + 0x108]
mov qword [rbp + 0x108], r14
test rbx, rbx
je 0x1400a14f0
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400a1880
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x1400a1889
nop
mov esi, dword [rsp + 0x40]
jmp 0x1400a14e4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
jmp 0x1400a14e4
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400a18e2
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400a18e2
mov rbx, qword [rbp + 0x108]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400a18e2
mov rcx, qword [rbp + 0x108]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x1400a1928
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400a1928
mov rbx, qword [rbp + 0xe8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400a1928
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 8]
mov ebx, r14d
mov rax, qword [0x14042e928]
mov r8, qword [0x14042e920]
sub rax, r8
sar rax, 5
mov edx, dword [0x14042b5b8]
test rax, rax
je 0x1400a19b4
vmovss dword [rsp + 0x50], xmm7
vmovss dword [rsp + 0x54], xmm7
mov rdi, r14
nop word [rax + rax]
cmp edx, ebx
sete dl
lea rcx, [r8 + rdi]
cmp qword [rcx + 0x18], 0x10
jb 0x1400a1973
mov rcx, qword [rcx]
lea r9, [rsp + 0x50]
call fcn.140059a90
test al, al
je 0x1400a198b
mov edx, ebx
mov dword [0x14042b5b8], ebx
jmp 0x1400a1991
mov edx, dword [0x14042b5b8]
inc ebx
add rdi, 0x20
mov rcx, qword [0x14042e928]
mov r8, qword [0x14042e920]
sub rcx, r8
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x1400a1960
cmp edx, 0xffffffff
je 0x1400a19d9
movsxd rdx, edx
shl rdx, 5
add rdx, r8
cmp qword [rdx + 0x18], 0x10
jb 0x1400a19cd
mov rdx, qword [rdx]
lea rcx, str.Selected__s
call fcn.140049e80
vmovss dword [rsp + 0x48], xmm7
vmovss dword [rsp + 0x4c], xmm7
lea rdx, [rsp + 0x48]
lea rcx, str.Load
call fcn.14004a8a0
test al, al
je 0x1400a1a4f
movsxd rcx, dword [0x14042b5b8]
test ecx, ecx
js 0x1400a1a4f
mov rax, qword [0x14042e928]
mov r8, qword [0x14042e920]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x1400a1a4f
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x130]
call fcn.140014120
nop
lea rcx, [rbp + 0x130]
call fcn.1400a4100
nop
lea rcx, [rbp + 0x130]
call fcn.14000efd0
mov rax, qword [0x14042c7f0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400a1ab1
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rsp + 0x68], xmm7
vmovss dword [rsp + 0x6c], xmm7
lea rdx, [rsp + 0x68]
lea rcx, str.Save
call fcn.14004a8a0
test al, al
je 0x1400a1b27
movsxd rcx, dword [0x14042b5b8]
test ecx, ecx
js 0x1400a1b27
mov rax, qword [0x14042e928]
mov r8, qword [0x14042e920]
sub rax, r8
sar rax, 5
mov rdx, rcx
cmp rcx, rax
jae 0x1400a1b27
shl rdx, 5
add rdx, r8
lea rcx, [rbp + 0x110]
call fcn.140014120
nop
lea rcx, [rbp + 0x110]
call fcn.1400a30c0
nop
lea rcx, [rbp + 0x110]
call fcn.14000efd0
mov rax, qword [0x14042c7f0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400a1b89
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rsp + 0x70], xmm7
vmovss dword [rsp + 0x74], xmm7
lea rdx, [rsp + 0x70]
lea rcx, str.Delete
call fcn.14004a8a0
test al, al
je 0x1400a1bd8
movsxd rax, dword [0x14042b5b8]
test eax, eax
js 0x1400a1bd8
mov rcx, qword [0x14042e928]
sub rcx, qword [0x14042e920]
sar rcx, 5
cmp rax, rcx
jae 0x1400a1bd8
lea rcx, str.reallyDelete
call fcn.140028850
mov rbx, qword [0x14042c7f0]
mov eax, dword [rbx + 0x48b0]
movabs r15, 0x7fffffffffffffff
cmp dword [rbx + 0x48a0], eax
jg 0x1400a1c03
mov dword [rbx + 0x47d0], r14d
jmp 0x1400a1ef5
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.1400174c0
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x1400a1c4b
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.14002fcb0
mov ecx, edi
call fcn.140028ee0
test al, al
je 0x1400a1ef5
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, str.Are_you_sure_
call fcn.1400496c0
vmovss xmm6, dword [0x1404161e8]
vmovss dword [rsp + 0x78], xmm6
vmovss dword [rsp + 0x7c], xmm7
lea rdx, [rsp + 0x78]
lea rcx, [0x1400b2ea0]
call fcn.14004a8a0
test al, al
je 0x1400a1e19
movsxd rdx, dword [0x14042b5b8]
shl rdx, 5
add rdx, qword [0x14042e920]
lea rcx, [rbp + 0x130]
call fcn.140014120
nop
mov rax, r15
mov rcx, qword [rbp + 0x160]
sub rax, rcx
cmp rax, 1
jb 0x1400a2601
lea r9, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae r9, qword [rbp + 0x150]
mov qword [rsp + 0x30], 1
lea rax, [0x1404156e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x1a0]
call fcn.1400637d0
nop
lea rdx, [rbp + 0x130]
cmp qword [rbp + 0x148], 0x10
cmovae rdx, qword [rbp + 0x130]
mov r8, qword [rbp + 0x140]
lea rcx, [rbp + 0x1a0]
call fcn.140014280
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x110], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x120], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x110], ymm0
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp + 0x1a0]
vzeroupper
call fcn.14000efd0
lea rcx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0x10
cmovae rcx, qword [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x1400a1dfa
movsxd rdi, dword [0x14042b5b8]
shl rdi, 5
add rdi, qword [0x14042e920]
mov rsi, qword [0x14042e928]
lea rbx, [rdi + 0x20]
cmp rbx, rsi
je 0x1400a1ddf
nop dword [rax]
mov rdx, rbx
mov rcx, rdi
call fcn.1400108c0
add rdi, 0x20
add rbx, 0x20
cmp rbx, rsi
jne 0x1400a1dc0
mov rsi, qword [0x14042e928]
lea rcx, [rsi - 0x20]
call fcn.14000efd0
sub qword [0x14042e928], 0x20
mov dword [0x14042b5b8], 0xffffffff
call fcn.140028e00
nop
lea rcx, [rbp + 0x110]
call fcn.14000efd0
nop
lea rcx, [rbp + 0x130]
call fcn.14000efd0
mov rax, qword [0x14042c7f0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400a1e7b
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rbp - 0x80], xmm6
vmovss dword [rbp - 0x7c], xmm7
lea rdx, [rbp - 0x80]
lea rcx, [0x1400b2ea4]
call fcn.14004a8a0
test al, al
je 0x1400a1e9e
call fcn.140028e00
mov rbx, qword [0x14042c7f0]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x1400a1ed9
cmp byte [rbx + 0x4951], 0
je 0x1400a1ed9
cmp dword [rbx + 0x4910], 0
jne 0x1400a1ed9
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x1400a1ee9
mov byte [rbx + 0x3e5e], 1
call fcn.140023e50
mov byte [rbx + 0x3e5e], 0
vmovss dword [rbp - 0x78], xmm7
vmovss dword [rbp - 0x74], xmm7
lea rdx, [rbp - 0x78]
lea rcx, str.Reset
call fcn.14004a8a0
test al, al
je 0x1400a1f8a
mov rsi, qword [0x14042c7f0]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyReset
call fcn.1400174c0
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x1400a1f62
lea r8, str.reallyReset
mov edx, 0xb
mov ecx, eax
call fcn.14002fcb0
test byte [rsi + 0x5ce4], 4
je 0x1400a1f81
mov r8d, edi
lea rdx, str.reallyReset
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14002f9e0
xor edx, edx
mov ecx, edi
call fcn.1400288f0
mov rbx, qword [0x14042c7f0]
mov eax, dword [rbx + 0x48b0]
cmp dword [rbx + 0x48a0], eax
jg 0x1400a1fab
mov dword [rbx + 0x47d0], r14d
jmp 0x1400a22cc
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyReset
call fcn.1400174c0
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x1400a1ff3
lea r8, str.reallyReset
mov edx, 0xb
mov ecx, eax
call fcn.14002fcb0
mov ecx, edi
call fcn.140028ee0
test al, al
je 0x1400a22cc
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, str.Are_you_sure_
call fcn.1400496c0
vmovss xmm6, dword [0x1404161d8]
vmovss dword [rbp - 0x70], xmm6
vmovss dword [rbp - 0x6c], xmm7
lea rdx, [rbp - 0x70]
lea rcx, [0x1400b2ea0]
call fcn.14004a8a0
test al, al
je 0x1400a21e7
mov byte [0x14042b5a0], 1
mov dword [0x14042b59c], 1
mov byte [0x14042d2fd], 1
vmovups xmm0, xmmword [0x140416490]
vmovups xmmword [0x14042b600], xmm0
mov dword [0x14042d2f8], r14d
vmovss dword [0x14042d2c8], xmm7
mov byte [0x14042d2db], 1
vmovups xmmword [0x14042b630], xmm0
mov byte [0x14042d2d5], 1
vmovups xmm1, xmm0
vmovups xmmword [0x14042b670], xmm0
vmovss dword [0x14042d314], xmm7
vmovss dword [0x14042b598], xmm7
mov byte [0x14042d2d8], 1
mov byte [0x14042d2da], 1
mov dword [0x14042d2f0], r14d
mov byte [0x14042d2fe], 1
mov byte [0x14042d2ed], 1
mov byte [0x14042d2d4], 1
vmovups xmmword [0x14042b660], xmm0
mov dword [0x14042d2e8], r14d
mov byte [0x14042d2f5], 1
vmovups xmm0, xmmword [0x140416480]
vmovups xmmword [0x14042b650], xmm0
mov byte [0x14042d2fc], 1
mov byte [0x14042d318], 1
mov byte [0x14042d2d6], 1
vmovups xmmword [0x14042b610], xmm0
mov byte [0x14042d2e5], 1
mov byte [0x14042d2b8], 1
mov byte [0x14042d2d9], 1
vmovups xmmword [0x14042b620], xmm0
mov byte [0x14042d2dc], 1
mov dword [0x14042d2d0], r14d
mov rcx, qword [0x14042d4b0]
mov rax, qword [0x14042d4b8]
sub rax, rcx
sar rax, 2
test rax, rax
je 0x1400a2607
mov eax, dword [rcx]
mov dword [0x14042b5a8], eax
mov dword [0x14042d300], r14d
mov dword [0x14042b594], 6
mov byte [0x14042d2e4], 1
mov byte [0x14042d2f4], 1
vmovups xmmword [0x14042b640], xmm0
mov byte [0x14042d2ec], 1
mov byte [0x14042d2cc], 1
mov dword [0x14042d308], r14d
mov rcx, qword [0x14042e858]
mov rax, qword [0x14042e860]
sub rax, rcx
sar rax, 2
test rax, rax
je 0x1400a2607
mov eax, dword [rcx]
mov dword [0x14042b590], eax
mov dword [0x140423044], 0x5a
mov dword [0x140423048], 0x5a
mov byte [0x14042d304], 1
call fcn.140028e00
mov rax, qword [0x14042c7f0]
mov rdx, qword [rax + 0x3ef8]
cmp byte [rdx + 0xbb], 0
jne 0x1400a2249
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rdx + 0x108]
vmovss xmm0, dword [rdx + 0x10c]
vmovss dword [rdx + 0x100], xmm1
vmovss dword [rdx + 0x104], xmm0
vmovsd xmm0, qword [rdx + 0x130]
vmovsd qword [rdx + 0x128], xmm0
mov eax, dword [rdx + 0x13c]
mov dword [rdx + 0x138], eax
mov byte [rdx + 0x140], 1
vmovss dword [rbp + 0xe0], xmm6
vmovss dword [rbp + 0xe4], xmm7
lea rdx, [rbp + 0xe0]
lea rcx, [0x1400b2ea4]
call fcn.14004a8a0
test al, al
je 0x1400a2275
call fcn.140028e00
mov rbx, qword [0x14042c7f0]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x1400a22b0
cmp byte [rbx + 0x4951], 0
je 0x1400a22b0
cmp dword [rbx + 0x4910], 0
jne 0x1400a22b0
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x1400a22c0
mov byte [rbx + 0x3e5e], 1
call fcn.140023e50
mov byte [rbx + 0x3e5e], 0
mov rax, qword [0x14042c7f0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400a232e
vmovss xmm0, dword [rax + 0x381c]
vaddss xmm1, xmm0, dword [rcx + 0x108]
vmovss xmm0, dword [rcx + 0x10c]
vmovss dword [rcx + 0x100], xmm1
vmovss dword [rcx + 0x104], xmm0
vmovsd xmm0, qword [rcx + 0x130]
vmovsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
vmovss dword [rsp + 0x58], xmm7
vmovss dword [rsp + 0x5c], xmm7
lea rdx, [rsp + 0x58]
lea rcx, str.Open_Directory
call fcn.14004a8a0
test al, al
je 0x1400a2561
mov rdi, qword [rbp + 0x160]
lea rbx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rbx, qword [rbp + 0x150]
call fcn.1400a76b8
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], rdi
lea r8, [rbp + 0x50]
mov edx, eax
lea rcx, [rbp + 0xe0]
call fcn.140011a20
nop
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae rcx, qword [rbp + 0xe0]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x1a0]
call fcn.1400a7a44
mov edx, eax
test eax, eax
jne 0x1400a2408
mov eax, dword [rbp + 0x1b0]
bt eax, 0xa
jae 0x1400a23f6
mov ecx, dword [rbp + 0x1b4]
cmp ecx, 0xa000000c
jne 0x1400a23e6
lea r14d, [rdx + 4]
jmp 0x1400a242a
cmp ecx, 0xa0000003
jne 0x1400a23f6
mov r14d, 0xa
jmp 0x1400a242a
movzx r14d, al
and r14d, 0x10
or r14d, 0x20
shr r14d, 4
jmp 0x1400a242a
mov dword [rsp + 0x5c], 0xffff
sub eax, 2
je 0x1400a2424
sub eax, 1
je 0x1400a2424
sub eax, 0x32
je 0x1400a2424
cmp eax, 0x46
jne 0x1400a242a
mov r14d, 1
mov dword [rbp + 0x190], edx
lea rax, [0x140423050]
mov qword [rbp + 0x198], rax
vmovups xmm0, xmmword [rbp + 0x190]
vmovdqa xmmword [rbp + 0x190], xmm0
test r14d, r14d
je 0x1400a25b2
cmp r14d, 1
je 0x1400a2554
lea rcx, [rbp + 0xe0]
call fcn.140012270
test al, al
je 0x1400a2554
lea rax, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae rax, qword [rbp + 0xe0]
mov qword [rbp + 0x170], rax
mov rax, qword [rbp + 0xf0]
mov qword [rbp + 0x178], rax
call fcn.1400a76b8
vmovups xmm0, xmmword [rbp + 0x170]
vmovdqa xmmword [rbp + 0x170], xmm0
lea r8, [rbp + 0x170]
mov edx, eax
lea rcx, [rbp + 0x130]
call fcn.1400a2610
nop
mov rcx, qword [rbp + 0x140]
sub r15, rcx
cmp r15, 0xd
jb 0x1400a25b8
lea rax, [rbp + 0x130]
cmp qword [rbp + 0x148], 0x10
cmovae rax, qword [rbp + 0x130]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xd
lea r9, str.explorer.exe
lea rcx, [rbp + 0x110]
call fcn.1400637d0
lea rcx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0x10
cmovae rcx, qword [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x110]
call fcn.14000efd0
nop
lea rcx, [rbp + 0x130]
call fcn.14000efd0
nop
lea rcx, [rbp + 0xe0]
call fcn.14000ef60
nop
lea rcx, [rbp + 0x150]
call fcn.14000efd0
nop
lea rcx, [rbp + 0x1d0]
call fcn.14000efd0
mov rcx, qword [rbp + 0x760]
xor rcx, rsp
call fcn.1400a8000
lea r11, [rsp + 0x890]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
vmovaps xmm6, xmmword [r11 - 0x10]
vmovaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
test edx, edx
jne 0x1400a25be
jmp 0x1400a2554
call fcn.14000e840
nop
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0x190]
call fcn.1400a0b10
nop
lea r8, [rbp + 0x110]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140012200
nop
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.140012200
int3
mov edx, eax
call fcn.1400a0ab0
nop
call fcn.14000e840
nop
call fcn.14009fc40
int3