Function at 0x14005c260
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x478]
sub rsp, 0x578
xor r13d, r13d
mov dword [rbp + 0x4c0], r13d
lea rax, [rbp + 0x260]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r13 + 0x1c]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
lea rax, [rbp + 0x260]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x14005c2c1
lea rdx, [rbp + 0x260]
lea rcx, [rbp]
call fcn.140063b50
nop
mov dword [rsp + 0x30], 0x6f525c1b
mov dword [rsp + 0x34], 0x786f6c62
mov dword [rsp + 0x38], 0x676f6c5c
mov word [rsp + 0x3c], 0x73
lea rcx, [rbp]
mov rax, qword [rbp + 0x10]
cmp qword [rbp + 0x18], 7
jbe 0x14005c314
mov rdx, qword [rbp]
lea r8, [rdx + rax*2]
jmp 0x14005c31c
lea r8, [rcx + rax*2]
lea rdx, [rbp]
lea rcx, [rbp + 0x120]
call fcn.140062d70
nop
lea rcx, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x14005c335
lea rdx, [rsp + 0x31]
mov rcx, rax
call fcn.140011270
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14005c3bd
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c3b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c3b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rax, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rax, qword [rbp - 0x48]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x68], rax
call fcn.1400e3348
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x20], xmm0
lea r8, [rbp - 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.140058c20
mov ebx, 0x3800
mov dword [rbp + 0x4c0], ebx
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x70]
call fcn.14005a520
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14005c460
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c45b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c45b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x14005c479
lock inc dword [rdi + 8]
mov rdi, qword [rsp + 0x78]
mov ebx, dword [rbp + 0x4c0]
mov r14, qword [rsp + 0x70]
mov qword [rsp + 0x60], r14
mov rsi, r14
mov qword [rsp + 0x68], rdi
test rdi, rdi
je 0x14005c4a4
lock inc dword [rdi + 8]
mov rdi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
mov ebx, dword [rbp + 0x4c0]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
test rdi, rdi
je 0x14005c4f3
mov eax, 0xffffffff
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14005c4e3
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14005c4e3
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov ebx, dword [rbp + 0x4c0]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x78]
test rsi, rsi
mov rsi, qword [rbp - 0x78]
je 0x14005c8ed
lea rdx, [rbp + 0x58]
mov rcx, r14
call fcn.140059ea0
mov rax, qword [rbp + 0x58]
mov edx, dword [rbp + 0x60]
test edx, edx
je 0x14005c526
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x14005ce12
cmp eax, 2
jne 0x14005c713
mov dword [rbp + 0x4c8], 0x6f6c2e32
mov word [rbp + 0x4cc], 0x67
lea rax, [rbp + 0x4c9]
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x4c9]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x14005c560
mov qword [rbp + 0x98], rax
call fcn.1400e3348
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x100], xmm0
lea r8, [rbp + 0x100]
mov edx, eax
lea rcx, [rbp + 0x68]
call fcn.140058c20
or ebx, 0x60
or ebx, 1
mov dword [rbp + 0x4c0], ebx
lea rdx, [rbp + 0xd0]
lea rcx, [r14 + 0x20]
call fcn.140059450
nop
or ebx, 2
mov dword [rbp + 0x4c0], ebx
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 7
cmova rcx, qword [rbp + 0x68]
mov qword [rbp + 0xa0], rcx
mov rcx, qword [rbp + 0x78]
mov qword [rbp + 0xa8], rcx
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x110]
mov rcx, rax
call fcn.140059250
test eax, eax
jne 0x14005c713
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x14005c614
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.140058d80
cmp rax, r11
je 0x14005c66b
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14005c63f
cmp cx, 0x2f
jne 0x14005c648
add rax, 2
cmp rax, r11
jne 0x14005c630
cmp rax, r11
je 0x14005c66b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14005c66b
cmp cx, 0x2f
je 0x14005c66b
mov r10, rdx
cmp rax, rdx
jne 0x14005c650
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0x20]
call fcn.140063b50
or ebx, 0x700
or ebx, 4
mov dword [rbp + 0x4c0], ebx
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x20]
call fcn.140059160
mov rcx, rax
or ebx, 8
mov dword [rbp + 0x4c0], ebx
mov dword [rbp + 0x4d0], 0x616c5074
mov dword [rbp + 0x4d4], 0x726579
lea rdx, [rbp + 0x4d1]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x14005c6e0
mov rdx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x14005c6f7
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4d1]
call fcn.140063c80
cmp rax, 0xffffffffffffffff
je 0x14005c713
mov dil, 1
jmp 0x14005c716
xor dil, dil
test bl, 8
je 0x14005c77e
and ebx, 0xfffffff7
mov dword [rbp + 0x4c0], ebx
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x14005c765
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c760
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005cba9
call fcn.1400e246c
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
test bl, 4
je 0x14005c7dd
and ebx, 0xfffffffb
mov dword [rbp + 0x4c0], ebx
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x14005c7cc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c7c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005cbb0
call fcn.1400e246c
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r13w
test bl, 2
je 0x14005c84b
and ebx, 0xfffffffd
mov dword [rbp + 0x4c0], ebx
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x14005c831
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c82c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005cbb7
call fcn.1400e246c
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r13w
test bl, 1
je 0x14005c89c
and ebx, 0xfffffffe
mov dword [rbp + 0x4c0], ebx
mov rdx, qword [rbp + 0x80]
cmp rdx, 7
jbe 0x14005c89c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c897
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005cbbe
call fcn.1400e246c
test dil, dil
je 0x14005c8d0
lea r8, [r14 + 0x20]
cmp rsi, qword [rbp - 0x70]
je 0x14005c8c0
mov rdx, r8
mov rcx, rsi
call fcn.140061ed0
add rsi, 0x20
mov qword [rbp - 0x78], rsi
jmp 0x14005c8d0
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.140064ce0
mov rsi, qword [rbp - 0x78]
lea rcx, [rsp + 0x60]
call fcn.14005a670
mov r14, qword [rsp + 0x60]
test r14, r14
jne 0x14005c500
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14005c936
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14005c92d
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005c92d
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rbp - 0x78]
test rdi, rdi
je 0x14005c96e
mov eax, 0xffffffff
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14005c96a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14005c96a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov rsi, qword [rbp - 0x78]
mov r8, rsi
mov rdi, qword [rbp - 0x80]
sub r8, rdi
sar r8, 5
movzx r9d, byte [rbp + 0x4c0]
mov rdx, rsi
mov rcx, rdi
call fcn.140064620
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14005c99c
mov rdx, qword [rdi]
lea rcx, [rbp + 0x150]
call fcn.140064280
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x150], rax
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x14c], edx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x150]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x150]
call fcn.140012990
movdqa xmm0, xmmword [0x140114e60]
movdqu xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x50], 0x28
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
seta r15b
mov r14, qword [rsp + 0x40]
cmova rcx, r14
lea rdx, [rbp + 0x41]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x14005ca60
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x41]
mov rbx, qword [rsp + 0x50]
mov rdx, rbx
call fcn.140063c80
cmp rax, 0xffffffffffffffff
je 0x14005c9f5
movdqa xmm0, xmmword [0x140114e50]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x28
lea rcx, [rbp - 0x1f]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14005caa7
lea rcx, [rsp + 0x40]
test r15b, r15b
cmovne rcx, r14
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x1f]
mov rdx, rbx
call fcn.140063c80
lea rcx, [rax + 0x15]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
cmp rbx, rcx
jb 0x14005ce23
sub rbx, rcx
mov r8, 0xffffffffffffffff
cmp rbx, r8
cmovb r8, rbx
lea rdx, [rsp + 0x40]
test r15b, r15b
cmovne rdx, r14
add rdx, rcx
lea rcx, [rbp - 0x68]
call fcn.140005240
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14005cb4f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cb4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005cc2e
call fcn.1400e246c
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rsp + 0x40], xmm1
movups xmm2, xmmword [rbp - 0x58]
movups xmmword [rsp + 0x50], xmm2
lea rbx, [rsp + 0x40]
movdqa xmm0, xmm2
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
seta r12b
movq r15, xmm1
cmova rbx, r15
movq r14, xmm2
test r14, r14
je 0x14005cbc5
mov r8, r14
mov edx, 0x29
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14005cbc5
sub rax, rbx
jmp 0x14005cbcc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
cmp r14, rax
cmovb rax, r14
lea rdx, [rsp + 0x40]
test r12b, r12b
cmovne rdx, r15
mov r8, rax
lea rcx, [rbp - 0x68]
call fcn.140005240
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14005cc3a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cc35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005cc35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rsp + 0x50], xmm1
lea rcx, [rsp + 0x40]
movq rdx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova rcx, rdx
xor edx, edx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov rbx, rax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14005ccb7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ccb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ccb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x150], rax
mov rax, qword [rbp + 0x150]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x14c], edx
lea rcx, [rbp + 0x160]
call fcn.140061e60
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, rsi
mov rcx, rdi
call fcn.140063d40
mov rdx, qword [rbp - 0x70]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x14005cd61
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005cd61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400e246c
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14005cda8
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cda3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005cda3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14005cdfb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cdf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005cdf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
mov rax, rbx
add rsp, 0x578
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.140059dd0
nop
call fcn.140011320
int3