Function at 0x1800076d0
Capabilities:
Create directory
Delete file
Move file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x270]
sub rsp, 0x370
mov rax, qword [0x18004b058]
xor rax, rsp
mov qword [rbp + 0x260], rax
xor r15d, r15d
lea rdx, [0x18004bca8]
lea rcx, [rbp - 0x40]
call fcn.18000cc00
mov rdx, rax
call fcn.180006210
test al, al
je 0x180008d0a
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x18004bca8]
lea rcx, [rbp - 0x40]
call fcn.18000cc00
mov rdx, rax
call fcn.180006210
test al, al
je 0x180008d0a
mov ecx, 0x14d5
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180003f80
mov byte [0x18004da53], al
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf8], r15
mov qword [rbp + 0x100], 0xf
lea r8d, [r15 + 8]
lea rdx, str.core.exe
lea rcx, [rbp + 0xe8]
call fcn.18000d3c0
lea rdx, [rbp + 0xe8]
call fcn.180006210
test al, al
jne 0x1800077c2
cmp byte [0x18004da53], r15b
jne 0x1800077c2
mov byte [0x18004da52], 1
jmp 0x180008d0a
mov byte [0x18004da51], 1
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf8], r15
mov qword [rbp + 0x100], 0xf
mov byte [rbp + 0xe8], r15b
mov r8d, 0x19
lea rdx, str.C:Program_FilesMain.txt
lea rcx, [rbp + 0xe8]
call fcn.18000d3c0
nop
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x150]
call fcn.180013c70
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rdx, qword [rbp + 0xe8]
lea rcx, [rbp + 0x150]
call fcn.18000c490
nop
mov qword [rbp - 0x80], r15
mov word [rbp - 0x78], 1
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x198]
mov qword [rsp + 0x40], rax
test rax, rax
sete byte [rsp + 0x48]
mov byte [rsp + 0x49], 0
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x128]
call fcn.18000dd40
nop
lea rcx, [rbp + 0x160]
call fcn.18000d0e0
mov r12d, 2
test rax, rax
jne 0x1800078e8
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x198], 0
cmovne eax, r12d
or eax, dword [rbp + rcx + 0x160]
and eax, 0x17
mov dword [rbp + rcx + 0x160], eax
mov edx, dword [rbp + rcx + 0x164]
and edx, eax
jne 0x180008d40
lea rax, [rbp - 0x60]
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 0xf
mov r8d, 1
lea rdx, [0x180042584]
lea rcx, [rbp - 0x60]
call fcn.18000d3c0
nop
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
mov rdi, qword [rbp + 0x138]
lea rsi, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rsi, qword [rbp + 0x128]
movabs r14, 0x7fffffffffffffff
cmp rdi, 0x10
jae 0x180007964
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x60], xmm0
mov ebx, 0xf
jmp 0x1800079d1
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800079ae
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180008d91
mov rcx, rax
call fcn.1800115e4
mov rcx, rax
test rax, rax
je 0x180008d97
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800079bd
test rcx, rcx
je 0x1800079ba
call fcn.1800115e4
jmp 0x1800079bd
mov rax, r15
mov qword [rsp + 0x60], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.180013540
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rbx
mov r9d, r12d
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x68]
call fcn.1800058d0
nop
lea rcx, [rbp - 0x40]
call fcn.1800037e0
mov rbx, rax
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rcx, qword [rbp + 0x68]
mov qword [rsp + 0x20], 8
lea r9, str.NOMEAQUI
xor r8d, r8d
mov rdx, qword [rbp + 0x78]
call fcn.18000e650
mov rcx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x180007a38
mov rbx, qword [rbx]
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8d, 8
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.18000d220
lea rcx, [rbp + 0x68]
cmp rcx, rax
je 0x180007a76
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x180007a69
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.18000d3c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x180007ab1
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007aac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d9d
call fcn.1800115b0
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rsi, [0x18004bc88]
mov rcx, rsi
call fcn.18000d3c0
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.18000cc00
mov rcx, rax
call fcn.180005d50
test eax, eax
jne 0x180007b05
mov rcx, rsi
cmp qword [0x18004bca0], 0x10
cmovae rcx, qword [0x18004bc88]
call fcn.180019ed4
mov ecx, 0x51a
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x40]
call fcn.180004e50
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.180004b10
nop
mov r8d, 1
lea rdx, [0x1800424d0]
mov rcx, rax
call fcn.18000d520
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.18000f400
nop
mov r8d, 4
lea rdx, str..dll
lea rcx, [rbp - 0x80]
call fcn.18000d520
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0xe0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x180007bf5
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007bf0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008da3
call fcn.1800115b0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x180007c41
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007c3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008da9
call fcn.1800115b0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180007c7e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007c79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008daf
call fcn.1800115b0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x180007ccc
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007cc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008db5
call fcn.1800115b0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
lea rcx, [rbp - 0x60]
call fcn.180004e50
nop
mov r9d, 0x14
lea r8, str.c:windows_system32_
mov rcx, rax
call fcn.18000f710
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..dll
lea rcx, [rsp + 0x60]
call fcn.18000d520
mov qword [rbp + 8], r15
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180007da8
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007da3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008dbb
call fcn.1800115b0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x180007df6
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007df1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008dc1
call fcn.1800115b0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rcx, qword [rbp + 0xc8]
call fcn.180005540
test al, al
je 0x180007f8f
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rcx, qword [rbp + 8]
call fcn.180005540
test al, al
je 0x180007f65
lea rdi, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdi, qword [rbp + 8]
add rdi, qword [rbp + 0x18]
lea rbx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rbx, qword [rbp + 8]
mov qword [rsp + 0x40], r15
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8d, 7
mov qword [rsp + 0x58], r8
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x180007ea0
lea rcx, [rsp + 0x40]
call fcn.18000e180
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8, qword [rsp + 0x58]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x80], rax
cmp rbx, rdi
je 0x180007f03
nop
movsx r9d, byte [rbx]
cmp rcx, r8
jae 0x180007ede
lea rax, [rcx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp r8, 8
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r15w
jmp 0x180007eef
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.18000e2f0
inc rbx
mov r8, qword [rsp + 0x58]
cmp rbx, rdi
je 0x180007f03
mov rcx, qword [rsp + 0x50]
jmp 0x180007eb0
lea rcx, [rsp + 0x40]
cmp r8, 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180007f5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007f55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008dc7
call fcn.1800115b0
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rdx, qword [rbp + 8]
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rcx, qword [rbp + 0xc8]
call fcn.180019fb4
lea rcx, [rsp + 0x40]
call fcn.180004e50
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.180004b10
nop
mov r8d, 1
lea rdx, [0x1800424d0]
mov rcx, rax
call fcn.18000d520
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.18000f400
nop
mov r8d, 5
lea rdx, str.2.dll
lea rcx, [rbp - 0x80]
call fcn.18000d520
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xc0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x180008074
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000806f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008dcd
call fcn.1800115b0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1800080c0
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800080ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008dd3
call fcn.1800115b0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800080fb
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800080f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008dd9
call fcn.1800115b0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180008148
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008ddf
call fcn.1800115b0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
lea rcx, [rbp - 0x60]
call fcn.180004e50
nop
mov r9d, 0x14
lea r8, str.c:windows_system32_
mov rcx, rax
call fcn.18000f710
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 5
lea rdx, str.2.dll
lea rcx, [rsp + 0x60]
call fcn.18000d520
mov qword [rbp - 0x18], r15
mov qword [rbp - 8], r15
mov qword [rbp], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180008227
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008de5
call fcn.1800115b0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x180008275
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008270
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008deb
call fcn.1800115b0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
call fcn.180005540
test al, al
je 0x18000841a
lea rcx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rcx, qword [rbp - 0x18]
call fcn.180005540
test al, al
je 0x1800083e5
lea rdi, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdi, qword [rbp - 0x18]
add rdi, qword [rbp - 8]
lea rbx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rbx, qword [rbp - 0x18]
mov qword [rsp + 0x40], r15
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8d, 7
mov qword [rsp + 0x58], r8
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x18000831f
lea rcx, [rsp + 0x40]
call fcn.18000e180
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8, qword [rsp + 0x58]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x80], rax
cmp rbx, rdi
je 0x180008383
nop dword [rax]
movsx r9d, byte [rbx]
cmp rcx, r8
jae 0x18000835e
lea rax, [rcx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp r8, 8
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r15w
jmp 0x18000836f
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.18000e2f0
inc rbx
mov r8, qword [rsp + 0x58]
cmp rbx, rdi
je 0x180008383
mov rcx, qword [rsp + 0x50]
jmp 0x180008330
lea rcx, [rsp + 0x40]
cmp r8, 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800083da
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800083d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008df1
call fcn.1800115b0
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
call fcn.180019fb4
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
mov rdi, qword [rbp - 8]
add rdi, rdx
lea rbx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rbx, qword [rbp - 0x18]
mov qword [rbp + 0x28], r15
mov rcx, r15
mov qword [rbp + 0x38], rcx
mov r8d, 7
mov qword [rbp + 0x40], r8
mov word [rbp + 0x28], r15w
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x180008477
lea rcx, [rbp + 0x28]
call fcn.18000e180
mov rcx, r15
mov qword [rbp + 0x38], rcx
mov r8, qword [rbp + 0x40]
lea rax, [rbp + 0x28]
mov qword [rbp - 0x80], rax
cmp rbx, rdi
je 0x1800084d1
movsx r9d, byte [rbx]
cmp rcx, r8
jae 0x1800084af
lea rax, [rcx + 1]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x28]
cmp r8, 8
cmovae rax, qword [rbp + 0x28]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r15w
jmp 0x1800084bf
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x28]
call fcn.18000e2f0
inc rbx
cmp rbx, rdi
je 0x1800084d1
mov r8, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x38]
jmp 0x180008484
lea rcx, [rbp - 0x40]
call fcn.180004b10
nop
mov r8d, 0xb
lea rbx, str.pack01.zip
mov rdx, rbx
mov rcx, rax
call fcn.18000d520
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x180008567
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008562
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008df7
call fcn.1800115b0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rcx, qword [0x18004bc98]
mov rax, r14
sub rax, rcx
cmp rax, 0xb
jb 0x180008dfd
mov r9, rsi
cmp qword [0x18004bca0], 0x10
cmovae r9, qword [0x18004bc88]
mov qword [rsp + 0x30], 0xb
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x48]
call fcn.18000f5f0
nop
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rcx, qword [rbp + 0x88]
call fcn.180005540
test al, al
je 0x18000874f
lea rcx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rcx, qword [rbp + 0x48]
call fcn.180005540
test al, al
je 0x180008725
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov rdi, qword [rbp + 0x58]
add rdi, rdx
lea rbx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rbx, qword [rbp + 0x48]
mov qword [rsp + 0x40], r15
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8d, 7
mov qword [rsp + 0x58], r8
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x18000865b
lea rcx, [rsp + 0x40]
call fcn.18000e180
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8, qword [rsp + 0x58]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x80], rax
cmp rbx, rdi
je 0x1800086c3
nop dword [rax]
movsx r9d, byte [rbx]
cmp rcx, r8
jae 0x18000869e
lea rax, [rcx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp r8, 8
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r15w
jmp 0x1800086af
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.18000e2f0
inc rbx
mov r8, qword [rsp + 0x58]
cmp rbx, rdi
je 0x1800086c3
mov rcx, qword [rsp + 0x50]
jmp 0x180008670
lea rcx, [rsp + 0x40]
cmp r8, 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000871a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008715
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e03
call fcn.1800115b0
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rcx, qword [rbp + 0x88]
call fcn.180019fb4
mov ecx, 0x12f
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x18004bc98]
sub r14, rax
cmp r14, 0x12
jb 0x180008e09
cmp qword [0x18004bca0], 0x10
cmovae rsi, qword [0x18004bc88]
mov qword [rsp + 0x30], 0x12
lea rcx, str.RewriteData_1.ini
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, rsi
lea rcx, [rbp + 0x108]
call fcn.18000f5f0
nop
lea rcx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rcx, qword [rbp + 0x108]
call fcn.180005540
test al, al
je 0x1800088fa
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
mov rdi, qword [rbp + 0x118]
add rdi, rdx
lea rbx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rbx, qword [rbp + 0x108]
mov qword [rsp + 0x40], r15
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8d, 7
mov qword [rsp + 0x58], r8
mov rdx, rdi
sub rdx, rbx
cmp rdx, 8
jb 0x18000883f
lea rcx, [rsp + 0x40]
call fcn.18000e180
mov rcx, r15
mov qword [rsp + 0x50], rcx
mov r8, qword [rsp + 0x58]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x80], rax
cmp rbx, rdi
je 0x1800088a3
nop dword [rax]
movsx r9d, byte [rbx]
cmp rcx, r8
jae 0x18000887e
lea rax, [rcx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp r8, 8
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r15w
jmp 0x18000888f
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.18000e2f0
inc rbx
mov r8, qword [rsp + 0x58]
cmp rbx, rdi
je 0x1800088a3
mov rcx, qword [rsp + 0x50]
jmp 0x180008850
lea rcx, [rsp + 0x40]
cmp r8, 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800088fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800088f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e0f
call fcn.1800115b0
call fcn.180006490
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x180008941
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000893c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e15
call fcn.1800115b0
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], 0xf
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x180008995
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008990
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e1b
call fcn.1800115b0
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1800089e6
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800089e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e21
call fcn.1800115b0
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x180008a3f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008a3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e27
call fcn.1800115b0
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r15w
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x180008a8b
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008a86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e2d
call fcn.1800115b0
mov qword [rbp - 8], r15
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x180008adc
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008ad7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e33
call fcn.1800115b0
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x180008b30
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e39
call fcn.1800115b0
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x180008b81
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008b7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e3f
call fcn.1800115b0
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x180008bd8
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008bd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e45
call fcn.1800115b0
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x180008c2c
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008c27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008e4b
call fcn.1800115b0
mov qword [rbp + 0x138], r15
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], 0
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x150], rax
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x14c], edx
lea rcx, [rbp + 0x160]
call fcn.18000c1f0
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x150], rax
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x14c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x200], rax
lea rcx, [rbp + 0x200]
call fcn.180010ce4
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x180008d0a
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008d05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d3a
call fcn.1800115b0
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.180011590
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1800193ac
nop
test dl, 4
je 0x180008d4e
lea rbx, str.ios_base::badbit_set
jmp 0x180008d63
test r12b, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp - 0x80]
call fcn.180001380
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.180001e20
lea rdx, [0x180047a80]
lea rcx, [rbp - 0x40]
call fcn.18001346c
nop
call fcn.1800011f0
int3
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
int3
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
int3
call fcn.1800193ac
nop
call fcn.1800193ac
int3
call fcn.180001290
nop
call fcn.1800193ac
int3
call fcn.180001290
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
nop
call fcn.1800193ac
int3