Function at 0x14000b1f0
Capabilities:
Delete file

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x8e0
movaps xmmword [r11 - 0x38], xmm6
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rsp + 0x8c8], rax
mov r13, rcx
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rcx
xor edi, edi
mov ebx, edi
mov dword [rsp + 0x628], ebx
lea r8, str.USERPROFILE
lea rdx, [r11 - 0x150]
lea rcx, [r11 - 0x2e8]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
cmp qword [rsp + 0x620], rbx
jne 0x14000b27e
lea r9, str.The_USERPROFILE_environment_variable_is_not_set._r_n
xor r8d, r8d
mov edx, 0xc2
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
xor al, al
jmp 0x14000d1ab
lea rcx, str.C:WindowsWindowsUpdate.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14000b3ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rcx, [rsp + 0x628]
mov qword [rsp + 0x20], rcx
mov r9d, 0x400
mov r8d, eax
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x670], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x680], xmm1
mov r8d, 0x2a
lea rdx, str.Erreur_lors_de_la_suppression_du_fichier:
lea rcx, [rsp + 0x670]
call fcn.1400246e0
nop
mov rdx, qword [rsp + 0x628]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000b310
lea rcx, [rsp + 0x670]
call fcn.140020fe0
lea r9, [rsp + 0x670]
cmp qword [rsp + 0x688], 7
cmova r9, qword [rsp + 0x670]
xor r8d, r8d
mov edx, 0xc2
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x628]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rsp + 0x688]
cmp rdx, 7
jbe 0x14000b3ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b3a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b3a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x6b0], xmm0
mov qword [rsp + 0x6c0], rax
movups xmmword [rsp + 0x400], xmm0
mov qword [rsp + 0x410], rdi
mov qword [rsp + 0x418], rdi
mov r8d, 0xf
lea rdx, str.C:_Recycle.Bin
lea rcx, [rsp + 0x400]
call fcn.1400246e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x420], xmm0
mov qword [rsp + 0x430], rdi
mov qword [rsp + 0x438], rdi
mov r8d, 0xf
lea rdx, str.C:Windows_Temp
lea rcx, [rsp + 0x420]
call fcn.1400246e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x440], xmm0
mov qword [rsp + 0x450], rdi
mov qword [rsp + 0x458], rdi
mov r8d, 0x12
lea rdx, str.C:Windows_tracing
lea rcx, [rsp + 0x440]
call fcn.1400246e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b490
lea rcx, [rsp + 0x200]
call fcn.140004070
nop
mov r8d, 0x13
lea rdx, str._AppData_Local_Temp
lea rcx, [rsp + 0x200]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x670], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x680], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x670], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x680], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 1
lea rax, [rsp + 0x670]
cmp qword [rsp + 0x688], 0xf
cmova rax, qword [rsp + 0x670]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x460]
call fcn.140002320
or ebx, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x398], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3a8], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b590
lea rcx, [rsp + 0x398]
call fcn.140004070
nop
mov r8d, 0x29
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent
lea rcx, [rsp + 0x398]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x110], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x110], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 8
lea rax, [rsp + 0x100]
cmp qword [rsp + 0x118], 0xf
cmova rax, qword [rsp + 0x100]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x480]
call fcn.140002320
or ebx, 0x30
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x388], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b690
lea rcx, [rsp + 0x378]
call fcn.140004070
nop
mov r8d, 0x4d
lea rdx, str._AppData_Roaming_Microsoft_Internet_Explorer_Quick_Launch_User_Pinned_TaskBar
lea rcx, [rsp + 0x378]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x130], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x130], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 0x40
lea rax, [rsp + 0x120]
cmp qword [rsp + 0x138], 0xf
cmova rax, qword [rsp + 0x120]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x4a0]
call fcn.140002320
or ebx, 0x180
xorps xmm0, xmm0
movups xmmword [rsp + 0x358], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x368], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b790
lea rcx, [rsp + 0x358]
call fcn.140004070
nop
mov r8d, 0x3f
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_AutomaticDestinations
lea rcx, [rsp + 0x358]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x150], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x150], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts ebx, 9
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], 0xf
cmova rax, qword [rsp + 0x140]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x4c0]
call fcn.140002320
or ebx, 0xc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x338], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x348], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b890
lea rcx, [rsp + 0x338]
call fcn.140004070
nop
mov r8d, 0x3c
lea rdx, str._AppData_Roaming_Microsoft_Windows_Recent_CustomDestinations
lea rcx, [rsp + 0x338]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xf0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts ebx, 0xc
lea rax, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0xf
cmova rax, qword [rsp + 0xe0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x4e0]
call fcn.140002320
or ebx, 0x6000
xorps xmm0, xmm0
movups xmmword [rsp + 0x318], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x328], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b990
lea rcx, [rsp + 0x318]
call fcn.140004070
nop
mov r8d, 0x25
lea rdx, str._AppData_Local_Microsoft_Windows_Burn
lea rcx, [rsp + 0x318]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xd0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts ebx, 0xf
lea rax, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rax, qword [rsp + 0xc0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x500]
call fcn.140002320
or ebx, 0x30000
mov dword [rsp + 0x628], ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x308], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14000ba95
lea rcx, [rsp + 0x2f8]
call fcn.140004070
nop
mov r8d, 0x19
lea rdx, str._AppData_Local_CrashDumps
lea rcx, [rsp + 0x2f8]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xb0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rax, qword [rsp + 0xa0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x520]
call fcn.140002320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2e8], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000bb90
lea rcx, [rsp + 0x2d8]
call fcn.140004070
nop
mov r8d, 0x3f
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Cache_Cache_Data
lea rcx, [rsp + 0x2d8]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x170], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x170], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 0xf
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x540]
call fcn.140002320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2b8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2c8], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14000bc85
lea rcx, [rsp + 0x2b8]
call fcn.140004070
nop
mov r8d, gethostname
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History
lea rcx, [rsp + 0x2b8]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x90], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x90], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rax, qword [rsp + 0x80]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x560]
call fcn.140002320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x230], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000bd80
lea rcx, [rsp + 0x220]
call fcn.140004070
nop
mov r8d, 0x3e
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_History_journal
lea rcx, [rsp + 0x220]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1f0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x580]
call fcn.140002320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x258], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14000be75
lea rcx, [rsp + 0x248]
call fcn.140004070
nop
mov r8d, 0x3c
lea rdx, str._AppData_Local_Google_Chrome_User_Data_Default_Visited_Links
lea rcx, [rsp + 0x248]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1d0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x5a0]
call fcn.140002320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x278], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x288], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000bf70
lea rcx, [rsp + 0x278]
call fcn.140004070
nop
mov r8d, 0x27
lea rdx, str._AppData_Local_Temporary_Internet_Files
lea rcx, [rsp + 0x278]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1b0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0xf
cmova rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x5c0]
call fcn.140002320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x298], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2a8], xmm1
mov rdx, qword [rsp + 0x620]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14000c065
lea rcx, [rsp + 0x298]
call fcn.140004070
nop
mov r8d, 0x28
lea rdx, str._AppData_Local_Microsoft_Windows_History
lea rcx, [rsp + 0x298]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x190], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rax, qword [rsp + 0x180]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x638], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x640], xmm0
lea r8, [rsp + 0x640]
mov edx, eax
lea rcx, [rsp + 0x5e0]
call fcn.140002320
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x6b0], xmm0
mov qword [rsp + 0x6c0], rdi
mov ecx, 0x200
call fcn.140028348
mov rbx, rax
mov qword [rsp + 0x6b0], rax
mov qword [rsp + 0x6b8], rax
lea rcx, [rax + 0x200]
mov qword [rsp + 0x6c0], rcx
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x40], rax
lea rsi, [rsp + 0x400]
xorps xmm0, xmm0
movups xmmword [rsp + 0x640], xmm0
mov qword [rsp + 0x640], rbx
mov qword [rsp + 0x648], rbx
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x650], rax
mov rdx, rsi
mov rcx, rbx
call fcn.140021140
add rbx, 0x20
mov qword [rsp + 0x648], rbx
add rsi, 0x20
lea rax, [rsp + 0x600]
cmp rsi, rax
jne 0x14000c1b4
mov rdx, rbx
mov rcx, rbx
call fcn.140024af0
mov qword [rsp + 0x6b8], rbx
lea r9, [fcn.1400028a0]
mov edx, 0x20
mov r8d, 0x10
lea rcx, [rsp + 0x400]
call fcn.140028384
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x14000c255
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c250
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c250
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqa xmm6, xmmword [0x140030c30]
movdqu xmmword [rsp + 0x190], xmm6
mov byte [rsp + 0x180], 0
mov rdx, qword [rsp + 0x2b0]
cmp rdx, 0xf
jbe 0x14000c2b4
inc rdx
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c2af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c2af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x2a8], xmm6
mov byte [rsp + 0x298], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0xf
jbe 0x14000c30b
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c306
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x1b0], xmm6
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x290]
cmp rdx, 0xf
jbe 0x14000c362
inc rdx
mov rcx, qword [rsp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c35d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c35d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x288], xmm6
mov byte [rsp + 0x278], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x14000c3b9
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c3b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x1d0], xmm6
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x260]
cmp rdx, 0xf
jbe 0x14000c410
inc rdx
mov rcx, qword [rsp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c40b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c40b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x258], xmm6
mov byte [rsp + 0x248], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x14000c467
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c462
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c462
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x1f0], xmm6
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14000c4be
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c4b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x230], xmm6
mov byte [rsp + 0x220], 0
mov rdx, qword [rsp + 0x98]
cmp rdx, 0xf
jbe 0x14000c515
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c510
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c510
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x90], xmm6
mov byte [rsp + 0x80], 0
mov rdx, qword [rsp + 0x2d0]
cmp rdx, 0xf
jbe 0x14000c56c
inc rdx
mov rcx, qword [rsp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c567
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c567
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x2c8], xmm6
mov byte [rsp + 0x2b8], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x14000c5c3
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c5be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c5be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x170], xmm6
mov byte [rsp + 0x160], 0
mov rdx, qword [rsp + 0x2f0]
cmp rdx, 0xf
jbe 0x14000c61a
inc rdx
mov rcx, qword [rsp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c615
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c615
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x2e8], xmm6
mov byte [rsp + 0x2d8], 0
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x14000c671
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c66c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c66c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0xb0], xmm6
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0x310]
cmp rdx, 0xf
jbe 0x14000c6c8
inc rdx
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x308], xmm6
mov byte [rsp + 0x2f8], 0
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0xf
jbe 0x14000c71f
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c71a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c71a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0xd0], xmm6
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0x330]
cmp rdx, 0xf
jbe 0x14000c776
inc rdx
mov rcx, qword [rsp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c771
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c771
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x328], xmm6
mov byte [rsp + 0x318], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x14000c7cd
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0xf0], xmm6
mov byte [rsp + 0xe0], 0
mov rdx, qword [rsp + 0x350]
cmp rdx, 0xf
jbe 0x14000c824
inc rdx
mov rcx, qword [rsp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c81f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c81f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x348], xmm6
mov byte [rsp + 0x338], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x14000c87b
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c876
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c876
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x150], xmm6
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x370]
cmp rdx, 0xf
jbe 0x14000c8d2
inc rdx
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c8cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c8cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x368], xmm6
mov byte [rsp + 0x358], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0xf
jbe 0x14000c929
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c924
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c924
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x130], xmm6
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x390]
cmp rdx, 0xf
jbe 0x14000c980
inc rdx
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c97b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c97b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x388], xmm6
mov byte [rsp + 0x378], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x14000c9d7
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c9d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c9d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x110], xmm6
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x3b0]
cmp rdx, 0xf
jbe 0x14000ca2e
inc rdx
mov rcx, qword [rsp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ca29
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x3a8], xmm6
mov byte [rsp + 0x398], 0
mov rdx, qword [rsp + 0x688]
cmp rdx, 0xf
jbe 0x14000ca85
inc rdx
mov rcx, qword [rsp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ca80
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x680], xmm6
mov byte [rsp + 0x670], 0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x14000cadc
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cad7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cad7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
mov rsi, qword [rsp + 0x6b0]
mov rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x240], rax
lea r12, [0x14003a0e8]
movabs r15, 0x7fffffffffffffff
mov qword [rsp + 0x48], rsi
cmp rsi, qword [rsp + 0x240]
je 0x14000d19c
mov r14, rsi
mov qword [rsp + 0x40], rsi
mov rdx, rsi
lea rcx, [rsp + 0x610]
call fcn.1400039a0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x3d0], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x3c0], ecx
mov qword [rsp + 0x3c8], r12
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x630], xmm0
mov eax, dword [rsp + 0x3d0]
test eax, eax
je 0x14000d196
cmp eax, 1
je 0x14000d18d
mov rdx, rsi
lea rcx, [rsp + 0x600]
call fcn.1400039a0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x268], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x268]
test edx, edx
je 0x14000cbc2
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14000d1dd
cmp ecx, 3
jne 0x14000d18d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x660], xmm0
mov rdx, rsi
lea rcx, [rsp + 0x660]
call fcn.140022770
test eax, eax
jne 0x14000d1ed
xorps xmm0, xmm0
movups xmmword [rsp + 0x630], xmm0
mov rbx, qword [rsp + 0x668]
test rbx, rbx
je 0x14000cc13
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x668]
movaps xmm0, xmmword [rsp + 0x660]
movdqa xmmword [rsp + 0x630], xmm0
test rbx, rbx
je 0x14000cc35
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x668]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x6e8], xmm1
test rbx, rbx
je 0x14000cc8f
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14000cc87
mov rbx, qword [rsp + 0x668]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14000cc87
mov rbx, qword [rsp + 0x668]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
jmp 0x14000cc8f
mov rbx, qword [rsp + 0x668]
nop
mov rcx, qword [rsp + 0x630]
cmp rcx, qword [rsp + 0x6e8]
je 0x14000cced
add rcx, 0x20
call fcn.140003f00
nop
jmp 0x14000ccd6
lea rcx, [rsp + 0x630]
call fcn.140003480
test eax, eax
jne 0x14000d1ff
jmp 0x14000cc90
mov rcx, qword [rsp + 0x638]
test rcx, rcx
je 0x14000cd3e
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14000cd36
mov rbx, qword [rsp + 0x638]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14000cd36
mov rcx, qword [rsp + 0x638]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rbx, qword [rsp + 0x668]
test rbx, rbx
je 0x14000cd7f
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14000cd7f
mov rbx, qword [rsp + 0x668]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14000cd7f
mov rcx, qword [rsp + 0x668]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x14000cd8c
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
mov qword [rsp + 0x640], rcx
mov qword [rsp + 0x648], rax
call fcn.1400274e4
movaps xmm0, xmmword [rsp + 0x640]
movdqa xmmword [rsp + 0x630], xmm0
lea r8, [rsp + 0x630]
mov edx, eax
lea rcx, [rsp + 0x718]
call fcn.140026a00
nop
mov rdx, qword [rsp + 0x728]
mov qword [rsp + 0x48], rdx
mov rax, r15
sub rax, rdx
cmp rax, 0x12
jb 0x14000d207
lea r13, [rsp + 0x718]
cmp qword [rsp + 0x730], 0xf
cmova r13, qword [rsp + 0x718]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea r12, [rdx + 0x12]
mov ebx, 0xf
lea r14, [rsp + 0x50]
cmp r12, rbx
jbe 0x14000ceb2
mov rbx, r12
or rbx, 0xf
cmp rbx, r15
jbe 0x14000ce66
mov rbx, r15
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140028348
test rax, rax
je 0x14000ce99
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000cea8
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000ce81
mov r14, rdi
jmp 0x14000cead
cmp rcx, 0x1000
jb 0x14000cea0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d20d
jmp 0x14000ce4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028348
mov r14, rax
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [str.Files_deleted_in:]
movups xmmword [r14], xmm0
movzx ecx, word [0x14002eb88]
mov word [r14 + 0x10], cx
lea rcx, [r14 + 0x12]
mov r8, rdx
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r12], 0
mov r8d, 2
lea rdx, [0x14002eb74]
lea rcx, [rsp + 0x50]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x6a0], rdi
mov qword [rsp + 0x6a8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x690], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x6a0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000cf7f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cf7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea r8, [rsp + 0x690]
cmp qword [rsp + 0x6a8], 0xf
cmova r8, qword [rsp + 0x690]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, dword [rsp + 0x6a0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x6c8], xmm0
mov qword [rsp + 0x6d8], rdi
mov qword [rsp + 0x6e0], rdi
mov r8, rbx
lea rcx, [rsp + 0x6c8]
call fcn.1400245b0
lea rcx, [rsp + 0x6c8]
cmp qword [rsp + 0x6e0], 7
cmova rcx, qword [rsp + 0x6c8]
lea r8, [rsp + 0x690]
cmp qword [rsp + 0x6a8], 0xf
cmova r8, qword [rsp + 0x690]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x6a0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rsp + 0x6c8]
cmp qword [rsp + 0x6e0], 7
cmova r9, qword [rsp + 0x6c8]
xor r8d, r8d
mov edx, 0xc2
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x6e0]
cmp rdx, 7
jbe 0x14000d0c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x6c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d0bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d0bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rsp + 0x6d8], rdi
mov qword [rsp + 0x6e0], 7
mov word [rsp + 0x6c8], di
mov rdx, qword [rsp + 0x6a8]
cmp rdx, 0xf
jbe 0x14000d124
inc rdx
mov rcx, qword [rsp + 0x690]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d11f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d11f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rsp + 0x6a0], rdi
mov qword [rsp + 0x6a8], 0xf
mov byte [rsp + 0x690], 0
mov rdx, qword [rsp + 0x730]
cmp rdx, 0xf
jbe 0x14000d186
inc rdx
mov rcx, qword [rsp + 0x718]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d181
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d181
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
lea r12, [0x14003a0e8]
add rsi, 0x20
jmp 0x14000cb16
test ecx, ecx
jne 0x14000d213
jmp 0x14000d18d
lea rcx, [rsp + 0x6b0]
call fcn.140021bf0
mov al, 1
mov rcx, qword [rsp + 0x8c8]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0x8e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r8, rsi
lea rcx, str.status
call fcn.140003250
nop
mov r8, rsi
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140003250
nop
mov edx, eax
call fcn.140003160
nop
call fcn.1400018d0
int3
call fcn.140001830
nop
mov r8, rsi
lea rdx, [rsp + 0x630]
lea rcx, str.exists
call fcn.1400032c0
int3