Function at 0x1400052c0
Capabilities:
Create process on windows
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x358]
sub rsp, 0x430
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x1400cb040]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
lea rdx, [0x140188460]
lea rcx, [rbp + 0x60]
call fcn.140007360
nop
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140189e80], eax
jle 0x140005382
lea rcx, [0x140189e80]
call fcn.1400a3c48
cmp dword [0x140189e80], 0xffffffff
jne 0x140005382
xorps xmm0, xmm0
movdqu xmmword [0x140189e88], xmm0
mov qword [0x140189e98], r12
lea rcx, [0x1400aa260]
call fcn.1400a3ff4
lea rcx, [0x140189e80]
call fcn.1400a3bdc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov rcx, qword [0x140189e88]
mov rdx, qword [0x140189e90]
cmp rcx, rdx
je 0x1400053b4
call fcn.140007c40
mov rax, qword [0x140189e88]
mov qword [0x140189e90], rax
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x68], rax
call fcn.1400a3068
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp + 0x40]
call fcn.140003bc0
mov edi, 0x6000
mov dword [rsp + 0x40], edi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.140007a60
test eax, eax
jne 0x1400069da
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140005459
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005454
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005454
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqa xmm0, xmmword [0x1400b74a0]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], r12w
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140005482
lock inc dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm0
test rcx, rcx
je 0x14000549f
lock inc dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r13, 0xffffffffffffffff
test rcx, rcx
je 0x1400054e9
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400054e5
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400054e5
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov r14, qword [rsp + 0x60]
lea rbx, str..cfg
test r14, r14
je 0x140005a2b
lea rdx, [rbp - 0x50]
mov rcx, r14
call fcn.140004ba0
mov rax, qword [rbp - 0x50]
mov edx, dword [rbp - 0x48]
test edx, edx
je 0x140005524
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400069ed
cmp eax, 2
jne 0x14000567a
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 4
call fcn.1400a3068
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rbp]
call fcn.140003bc0
or edi, 0xc0
or edi, 1
mov dword [rsp + 0x40], edi
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x140005574
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140003d20
cmp rax, rdx
je 0x1400055cc
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14000559f
cmp cx, 0x2f
jne 0x1400055a8
add rax, 2
cmp rax, rdx
jne 0x140005590
cmp rax, rdx
je 0x1400055cc
nop dword [rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x1400055cc
cmp cx, 0x2f
je 0x1400055cc
mov rbx, r8
cmp rax, r8
jne 0x1400055b0
mov r8d, 0x3a
mov rcx, rbx
call fcn.1400a3ad0
cmp rbx, rax
je 0x140005617
lea rcx, [rax - 2]
cmp rbx, rcx
je 0x140005617
cmp word [rcx], 0x2e
jne 0x1400055ff
lea rdx, [rcx - 2]
cmp rbx, rdx
jne 0x14000561a
cmp word [rdx], 0x2e
jne 0x14000561a
jmp 0x140005617
sub rcx, 2
cmp rbx, rcx
je 0x140005617
cmp word [rcx], 0x2e
je 0x14000561a
sub rcx, 2
cmp rbx, rcx
jne 0x140005608
mov rcx, rax
mov qword [rbp - 0x20], rcx
sub rax, rcx
sar rax, 1
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x20]
call fcn.140008d70
or edi, 0x22
mov dword [rsp + 0x40], edi
lea rax, [rbp]
mov rbx, qword [rbp + 0x18]
cmp rbx, 7
cmova rax, qword [rbp]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x20]
call fcn.140004070
test eax, eax
jne 0x14000567e
mov sil, 1
jmp 0x140005681
mov rbx, qword [rbp + 0x18]
xor sil, sil
test dil, 2
je 0x1400056e3
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x1400056d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a0f
call fcn.1400a400c
mov rbx, qword [rbp + 0x18]
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
test dil, 1
je 0x14000572c
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
cmp rbx, 7
jbe 0x14000572c
lea rdx, [rbx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005727
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a16
call fcn.1400a400c
test sil, sil
je 0x140005960
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x140005744
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rsi, [rcx + rax*2]
mov rbx, rsi
mov rdx, rsi
call fcn.140003d20
cmp rax, rsi
je 0x14000579b
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14000576f
cmp cx, 0x2f
jne 0x140005778
add rax, 2
cmp rax, rsi
jne 0x140005760
cmp rax, rsi
je 0x14000579b
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14000579b
cmp cx, 0x2f
je 0x14000579b
mov rbx, rdx
cmp rax, rdx
jne 0x140005780
mov qword [rbp - 0x60], rbx
sub rsi, rbx
sar rsi, 1
mov qword [rbp - 0x58], rsi
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x20]
call fcn.140008d70
bts edi, 0xc
lea r15, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova r15, qword [rbp + 0x20]
mov rsi, qword [rbp + 0x30]
call fcn.1400a3068
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xor eax, eax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0xf
mov byte [rbp], al
bts edi, 0xb
mov dword [rsp + 0x40], edi
test rsi, rsi
je 0x14000586f
cmp rsi, 0x7fffffff
ja 0x140006a12
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1400a30d8
mov rbx, rax
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x140006a08
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp]
call fcn.140007710
lea r9, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r9, qword [rbp]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1400a30d8
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x1400069fe
btr edi, 0xb
or edi, 0x700
mov dword [rsp + 0x40], edi
mov rdx, qword [0x140189e90]
cmp rdx, qword [0x140189e98]
je 0x1400058c8
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor r12d, r12d
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], r12
movups xmm0, xmmword [rbp]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp + 0x10], r12
mov edx, 0xf
mov qword [rbp + 0x18], rdx
mov byte [rbp], r12b
add qword [0x140189e90], 0x20
jmp 0x1400058d8
lea r8, [rbp]
call fcn.140009050
mov rdx, qword [rbp + 0x18]
xor r12d, r12d
cmp rdx, 0xf
jbe 0x14000590f
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000590a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a1d
call fcn.1400a400c
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140005960
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000595a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a24
call fcn.1400a400c
nop
lea rdx, [rbp + 0x80]
mov rcx, qword [r14 + 0x40]
call fcn.1400a3340
cmp eax, 0x12
je 0x1400059b4
test eax, eax
jne 0x1400069d2
cmp word [rbp + 0xac], 0x2e
jne 0x1400059a3
movzx eax, word [rbp + 0xae]
test ax, ax
je 0x140005960
cmp ax, 0x2e
jne 0x1400059a3
cmp word [rbp + 0xb0], 0
je 0x140005960
lea rdx, [rbp + 0x80]
mov rcx, r14
call fcn.140004f00
jmp 0x1400059ff
mov r14, r12
mov qword [rsp + 0x60], r12
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x68], r12
test rbx, rbx
je 0x1400059ff
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400059f6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400059f6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov r14, qword [rsp + 0x60]
mov eax, r12d
test eax, eax
jne 0x1400069d2
jmp 0x1400054ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140005a68
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140005a68
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140005a68
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140005aa4
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140005aa4
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140005aa4
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 8]
mov rsi, qword [0x140189e90]
mov rdi, qword [0x140189e88]
mov rbx, qword [rbp - 0x78]
cmp rdi, rsi
je 0x140005b03
nop dword [rax + rax]
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140005acd
mov rax, qword [rdi]
mov qword [rsp + 0x50], rax
cmp rbx, qword [rbp - 0x70]
je 0x140005ae5
mov qword [rbx], rax
add rbx, 8
mov qword [rbp - 0x78], rbx
jmp 0x140005afa
lea r8, [rsp + 0x50]
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140008eb0
mov rbx, qword [rbp - 0x78]
add rdi, 0x20
cmp rdi, rsi
jne 0x140005ac0
mov r10, qword [0x140189c98]
mov rax, qword [r10 + 0x3ef8]
movss xmm0, dword [rax + 0x100]
movaps xmm8, xmm0
subss xmm8, dword [rax + 0x20]
addss xmm8, dword [rax + 0x84]
mov r9, qword [rax + 0x1a8]
test r9, r9
jne 0x140005b5c
movss xmm6, dword [rax + 0x250]
cmp r9, r9
jne 0x140005b4e
cmp qword [r10 + 0x4b58], r9
je 0x140005b56
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
jmp 0x140005b8c
movsxd rdx, dword [r9 + 0xc]
mov r8, qword [r9 + 0x68]
lea rax, [rdx + 1]
imul rcx, rax, 0x1c
imul rax, rdx, 0x1c
movss xmm6, dword [rcx + r8]
subss xmm6, dword [rax + r8]
movss xmm0, dword [r9 + 0x18]
subss xmm0, dword [r9 + 0x14]
mulss xmm6, xmm0
subss xmm6, dword [r10 + 0x381c]
subss xmm6, dword [0x1400b7340]
mov rax, qword [r10 + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400b7344]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400b7338]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [r10 + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ef8]
movaps xmm9, xmm8
movss xmm10, dword [0x1400b7328]
addss xmm9, xmm10
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov rcx, qword [0x140189be0]
call fcn.14007d5d0
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
movss dword [rcx + 0x4784], xmm6
mov r15, qword [rbp - 0x80]
sub rbx, r15
sar rbx, 3
mov dword [rsp + 0x20], ebx
mov r9, r15
call fcn.14008d040
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x40], 0x42fc0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
mov rcx, qword [0x140189be8]
call fcn.14007de10
movdqa xmm7, xmmword [0x1400b74c0]
test al, al
je 0x140005da2
movsxd rax, dword [0x1400cb0c4]
test eax, eax
js 0x140005da2
mov rdx, rax
mov rax, qword [0x140189e90]
mov rcx, qword [0x140189e88]
sub rax, rcx
sar rax, 5
cmp rdx, rax
jae 0x140005da2
shl rdx, 5
add rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.140007360
nop
lea rcx, [rbp + 0x20]
call fcn.14000dac0
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140005d99
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d94
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqu xmmword [rbp + 0x30], xmm7
mov byte [rbp + 0x20], 0
mov rax, qword [0x140189c98]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140005e04
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rsp + 0x40], 0x42fc0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
mov rcx, qword [0x140189c08]
call fcn.14007de10
test al, al
je 0x140005f1a
movsxd rax, dword [0x1400cb0c4]
test eax, eax
js 0x140005f1a
mov rdx, rax
mov rax, qword [0x140189e90]
mov rcx, qword [0x140189e88]
sub rax, rcx
sar rax, 5
cmp rdx, rax
jae 0x140005f1a
shl rdx, 5
add rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.140007360
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movdqu xmmword [rbp + 0x50], xmm7
mov byte [rbp + 0x40], 0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14000a8b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140005eca
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ec5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ec5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqu xmmword [rbp + 0x50], xmm7
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140005f11
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005f0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005f0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqu xmmword [rbp + 0x30], xmm7
mov byte [rbp + 0x20], 0
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x40], 0x42fc0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
mov rcx, qword [0x140189bf0]
call fcn.14007de10
test al, al
je 0x14000601d
movsxd rax, dword [0x1400cb0c4]
test eax, eax
js 0x14000601d
mov rcx, qword [0x140189e90]
sub rcx, qword [0x140189e88]
sar rcx, 5
cmp rax, rcx
jae 0x14000601d
mov rsi, qword [0x140189c98]
mov rbx, qword [rsi + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140049580
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x140005ff5
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140062250
test byte [rsi + 0x5ce4], 4
je 0x140006014
mov r8d, edi
lea rdx, str.reallyDelete
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.140061e70
xor edx, edx
mov ecx, edi
call fcn.14005af20
mov rbx, qword [0x140189c98]
mov eax, dword [rbx + 0x48b0]
xorps xmm9, xmm9
cmp dword [rbx + 0x48a0], eax
jg 0x140006042
mov dword [rbx + 0x47d0], r12d
jmp 0x140006447
mov rbx, qword [rbx + 0x3ef8]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.reallyDelete
call fcn.140049580
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f40], eax
jne 0x14000608a
lea r8, str.reallyDelete
mov edx, 0xb
mov ecx, eax
call fcn.140062250
mov ecx, edi
call fcn.14005b430
test al, al
je 0x140006447
xor edx, edx
mov r8d, 1
lea rcx, str.Are_you_sure_
call fcn.14007cc30
mov qword [rsp + 0x40], 0x42340000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400abed8]
call fcn.14007de10
test al, al
je 0x1400060d0
call fcn.14005b350
mov rax, qword [0x140189c98]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140006132
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov qword [rsp + 0x40], 0x42340000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400abedc]
call fcn.14007de10
test al, al
je 0x1400063f0
movsxd rdx, dword [0x1400cb0c4]
shl rdx, 5
add rdx, qword [0x140189e88]
lea rcx, [rbp + 0x20]
call fcn.140007360
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x70]
sub rax, rcx
cmp rax, 1
jb 0x1400069cc
lea r9, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r9, qword [rbp + 0x60]
mov qword [rsp + 0x30], 1
lea rax, [0x1400abee0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x40]
call fcn.140008c20
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1400077a0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140006243
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000623e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000623e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqu xmmword [rbp + 0x50], xmm7
mov byte [rbp + 0x40], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rcx, qword [rbp]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x14000635e
movsxd rbx, dword [0x1400cb0c4]
shl rbx, 5
add rbx, qword [0x140189e88]
mov r14, qword [0x140189e90]
lea rax, [rbx + 0x20]
cmp rax, r14
je 0x140006307
add rbx, 0x38
nop
lea rsi, [rbx - 0x18]
lea rdi, [rbx - 0x38]
cmp rdi, rsi
je 0x1400062f3
mov rdx, qword [rbx - 0x20]
cmp rdx, 0xf
jbe 0x1400062d7
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400062d2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000639d
mov rcx, r8
call fcn.1400a400c
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx - 8], r12
mov qword [rbx], 0xf
mov byte [rsi], 0
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, r14
jne 0x140006290
mov r14, qword [0x140189e90]
mov rdx, qword [r14 - 8]
cmp rdx, 0xf
jbe 0x14000633e
mov rcx, qword [r14 - 0x20]
inc rdx
cmp rdx, 0x1000
jb 0x140006339
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000639d
mov rcx, r8
call fcn.1400a400c
mov qword [r14 - 0x10], r12
mov qword [r14 - 8], 0xf
mov byte [r14 - 0x20], 0
sub qword [0x140189e90], 0x20
mov dword [0x1400cb0c4], r13d
call fcn.14005b350
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400063a9
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a400c
movdqu xmmword [rbp + 0x10], xmm7
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400063f0
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
mov rbx, qword [0x140189c98]
mov rcx, qword [rbx + 0x3ef8]
cmp qword [rbx + 0x48d8], rcx
jne 0x14000642b
cmp byte [rbx + 0x4951], 0
je 0x14000642b
cmp dword [rbx + 0x4910], 0
jne 0x14000642b
mov eax, dword [rbx + 0x4954]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4954], eax
test dword [rcx + 0x14], 0x1000000
je 0x14000643b
mov byte [rbx + 0x3e5e], 1
call fcn.140056690
mov byte [rbx + 0x3e5e], 0
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov r9, qword [rcx + 0x3ef8]
cmp byte [r9 + 0xbb], 0
jne 0x1400064d0
mov r10d, dword [r9 + 0x1b4]
mov dword [r9 + 0x1b4], 1
mov byte [r9 + 0x140], 0
movss xmm0, dword [r9 + 0x12c]
movss xmm1, dword [0x1400b7438]
comiss xmm0, xmm9
jbe 0x1400064a9
mov qword [rsp + 0x40], 0
jmp 0x1400064bf
movss xmm0, dword [rcx + 0x3c20]
mov dword [rsp + 0x40], 0
movss dword [rsp + 0x44], xmm0
lea rcx, [rsp + 0x40]
call fcn.140059b90
mov dword [r9 + 0x1b4], r10d
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm8
addss xmm0, xmm10
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm8
addss xmm0, xmm10
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
mov rcx, qword [0x140189c10]
call fcn.14007d5d0
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm8
addss xmm0, xmm10
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
addss xmm6, dword [0x1400b7320]
movss dword [rcx + 0x4784], xmm6
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm8
addss xmm0, xmm10
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movaps xmm0, xmm8
addss xmm0, xmm10
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov byte [rax + 0x141], 1
or dword [rcx + 0x4780], 1
movss dword [rcx + 0x4784], xmm6
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea rbx, str.NewConfig
mov r8, rbx
xor edx, edx
lea rcx, str.CFGNameInput
call fcn.1400847e0
mov rcx, qword [0x140189c98]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm8, xmm10
addss xmm0, xmm8
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov dword [rsp + 0x50], 0x42fc0000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
mov rcx, qword [0x140189bf8]
call fcn.14007de10
test al, al
je 0x140006847
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
inc r13
cmp byte [rbx + r13], 0
jne 0x140006700
mov r8, r13
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.1400082e0
nop
mov r8d, 4
lea rdx, str..cfg
lea rcx, [rbp + 0x20]
call fcn.1400077a0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000679b
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006796
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006796
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movdqu xmmword [rbp + 0x50], xmm7
mov byte [rbp + 0x40], 0
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.14000a8b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400067f7
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400067f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqu xmmword [rbp + 0x50], xmm7
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14000683e
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006839
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006839
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
movdqu xmmword [rbp + 0x10], xmm7
mov byte [rbp], 0
mov rax, qword [0x140189c98]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x1400068a9
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rsp + 0x50], 0x42fc0000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
mov rcx, qword [0x140189c00]
call fcn.14007de10
test al, al
je 0x1400068fc
lea r8, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r8, qword [rbp + 0x60]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
test r15, r15
je 0x140006945
mov rax, qword [rbp - 0x70]
sub rax, r15
sar rax, 3
lea rdx, [rax*8]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000693c
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000693c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400a400c
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140006983
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000697e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000697e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a400c
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.1400a3b80
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400034a0
nop
mov edx, eax
call fcn.140004a40
nop
lea r8, [rbp + 0x40]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140004b30
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.140004b30
nop
mov ecx, dword [rsp + 0x54]
call fcn.140003b70
int3
mov ecx, dword [rsp + 0x54]
call fcn.140003b70
int3
call fcn.1400038b0
int3