Function at 0x180001000
Capabilities:
Contain obfuscated stackstrings
Enumerate files on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x388
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x2f0], xmm6
mov qword [rbp + 0x2e8], 0xfffffffffffffffe
mov qword [rbp + 0x278], rcx
mov byte [rbp + 0xe8], 0
lea rsi, [rbp + 0xe9]
mov byte [rbp + 0xe9], 0x51
mov byte [rbp + 0xea], 0x37
mov byte [rbp + 0xeb], 0x7d
mov byte [rbp + 0xec], 0x5c
mov byte [rbp + 0xed], 0x32
mov byte [rbp + 0xee], 0x18
mov byte [rbp + 0xef], 0x19
mov byte [rbp + 0xf0], 0x54
mov byte [rbp + 0xf1], 0x2a
mov byte [rbp + 0xf2], 0x64
mov byte [rbp + 0xf3], 0x7d
mov byte [rbp + 0xf4], 0x19
mov byte [rbp + 0xf5], 0x18
mov byte [rbp + 0xf6], 0x21
mov byte [rbp + 0xf7], 0x54
mov byte [rbp + 0xf8], 0x7d
mov byte [rbp + 0xf9], 0x53
mov byte [rbp + 0xfa], 0x54
mov byte [rbp + 0xfb], 0x54
mov byte [rbp + 0xfc], 0x30
mov byte [rbp + 0xfd], 0x43
mov byte [rbp + 0xfe], 0x43
mov byte [rbp + 0xff], 0x10
mov byte [rbp + 0x100], 8
mov byte [rbp + 0x101], 0x55
movzx eax, byte [rbp + 0xe8]
not al
or al, 0xfe
cmp al, 0xff
je 0x1800011d5
mov qword [rbp + 0x258], 0
mov qword [rbp + 0x270], 0xf
mov byte [rbp + 0x258], 0
mov rcx, rsi
call fcn.180008560
mov rbx, rax
cmp rax, 0xf
jbe 0x1800011a8
test rbx, rbx
js 0x180002020
mov rax, rbx
not rax
movabs rcx, 0xdedd2201246e0eed
and rcx, rax
movabs rax, 0x2122ddfedb91f112
and rax, rbx
or rax, rcx
movabs rcx, 0xdedd2201246e0ee2
xor rcx, rax
mov eax, ebx
and eax, 0xf
or rax, rcx
cmp rax, 0x17
mov r14d, 0x16
cmovae r14, rax
cmp r14, 0xfff
jb 0x1800012cc
lea rcx, [r14 + 0x28]
call fcn.1800050e4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800012d8
mov qword [rbp + 0x268], rbx
lea rcx, [rbp + 0x258]
mov rdx, rsi
mov r8, rbx
call fcn.180006b90
mov byte [rbp + rbx + 0x258], 0
mov rdi, qword [rbp + 0x258]
jmp 0x1800012ff
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0xe9]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*2]
lea ecx, [rcx + rcx*2]
add ecx, 0xfffffb05
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffb05
movzx ecx, cx
movsx r8d, cx
shr ecx, 0xf
sar r8d, 6
add r8d, ecx
mov ecx, r8d
shl ecx, 7
sub r8d, ecx
lea ecx, [r8 + rdx]
add ecx, 0xfffffb05
lea edx, [rcx + 0x7f]
cmp cx, 0xff81
movzx edx, dl
cmovb edx, ecx
mov byte [rbp + rax + 0xe9], dl
mov rcx, rax
or rcx, 1
cmp rcx, 0x19
je 0x180001104
movzx edx, byte [rbp + rcx + 0xe9]
movzx edx, dl
lea edx, [rdx + rdx*4]
lea r8d, [rdx + rdx*2]
lea edx, [rdx + rdx*2]
add edx, 0xfffffb05
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, r8d
add edx, 0xfffffb05
movzx edx, dx
movsx r9d, dx
shr edx, 0xf
sar r9d, 6
add r9d, edx
mov edx, r9d
shl edx, 7
sub r9d, edx
lea edx, [r9 + r8]
add edx, 0xfffffb05
lea r8d, [rdx + 0x7f]
cmp dx, 0xff81
movzx r8d, r8b
cmovb r8d, edx
mov byte [rbp + rcx + 0xe9], r8b
add rax, 2
jmp 0x1800011e0
lea rcx, [r14 + 1]
call fcn.1800050e4
mov rdi, rax
mov qword [rbp + 0x268], rbx
mov qword [rbp + 0x270], r14
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.180006b90
mov byte [rdi + rbx], 0
mov qword [rbp + 0x258], rdi
xorps xmm0, xmm0
mov rax, qword [rbp + 0x278]
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov qword [rbp + 0x230], 0
movups xmmword [rbp + 0x240], xmm0
mov rsi, qword [rbp + 0x268]
cmp qword [rbp + 0x270], 0x10
lea rax, [rbp + 0x258]
cmovb rdi, rax
movabs rax, 0x7fffffffffffffff
cmp rsi, 0xf
ja 0x180001361
movups xmm0, xmmword [rdi]
movaps xmmword [rbp + 0x230], xmm0
mov ebx, 0xf
jmp 0x1800013b1
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x180001392
lea rcx, [rbx + 0x28]
call fcn.1800050e4
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x18000139e
lea rcx, [rbx + 1]
call fcn.1800050e4
mov rcx, rax
mov qword [rbp + 0x230], rcx
lea r8, [rsi + 1]
mov rdx, rdi
call fcn.180006b90
mov qword [rbp + 0x240], rsi
mov qword [rbp + 0x248], rbx
mov byte [rbp - 0x58], 0
lea rsi, [rbp - 0x57]
mov byte [rbp - 0x57], 0x4b
mov byte [rbp - 0x56], 0x6a
mov byte [rbp - 0x55], 0x42
movzx eax, byte [rbp - 0x58]
not al
or al, 0xfe
cmp al, 0xff
jne 0x1800014cd
movzx eax, byte [rbp - 0x57]
movzx eax, al
add eax, eax
lea ecx, [rax + rax*8]
mov eax, 0x4a4
mov edx, 0x4a4
sub edx, ecx
movsx ecx, dx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
movzx ecx, cx
movsx r8d, cx
shr ecx, 0xf
sar r8d, 6
add r8d, ecx
mov ecx, r8d
shl ecx, 7
sub r8d, ecx
add r8d, edx
lea ecx, [r8 + 0x7f]
cmp r8w, 0xff81
movzx ecx, cl
cmovb ecx, r8d
mov byte [rbp - 0x57], cl
movzx ecx, byte [rbp - 0x56]
movzx ecx, cl
add ecx, ecx
lea ecx, [rcx + rcx*8]
mov edx, 0x4a4
sub edx, ecx
movsx ecx, dx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
movzx ecx, cx
movsx r8d, cx
shr ecx, 0xf
sar r8d, 6
add r8d, ecx
mov ecx, r8d
shl ecx, 7
sub r8d, ecx
add r8d, edx
lea ecx, [r8 + 0x7f]
cmp r8w, 0xff81
movzx ecx, cl
cmovb ecx, r8d
mov byte [rbp - 0x56], cl
movzx ecx, byte [rbp - 0x55]
movzx ecx, cl
add ecx, ecx
lea ecx, [rcx + rcx*8]
sub eax, ecx
movsx ecx, ax
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
movzx ecx, cx
movsx edx, cx
shr ecx, 0xf
sar edx, 6
add edx, ecx
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
lea eax, [rdx + 0x7f]
cmp dx, 0xff81
movzx eax, al
cmovb eax, edx
mov byte [rbp - 0x55], al
mov rcx, rsi
call fcn.180008560
mov rcx, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x180001518
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x230]
mov rdx, rax
mov r9, rsi
call fcn.1800046c0
cmp qword [rbp + 0x248], 0x10
jb 0x180001557
mov rcx, qword [rbp + 0x230]
jmp 0x18000155e
mov rdi, rax
add rdi, rcx
mov qword [rbp + 0x240], rdi
cmp rdx, 0x10
jb 0x180001534
mov rbx, qword [rbp + 0x230]
jmp 0x18000153b
lea rbx, [rbp + 0x230]
add rcx, rbx
mov rdx, rsi
mov r8, rax
call fcn.180006b90
mov byte [rbx + rdi], 0
cmp qword [rbp + 0x248], 0x10
jae 0x18000150f
lea rcx, [rbp + 0x230]
lea rdx, [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
je 0x180001f77
mov rsi, rax
lea r15, [rbp - 0x2c]
xorps xmm6, xmm6
lea rbx, [rbp + 0x2c0]
lea rdi, [rbp + 0xe8]
mov qword [rbp + 0x228], rax
jmp 0x1800015b9
call fcn.180005128
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x180001f6e
cmp dword [rbp + 0xe8], 0x10
jne 0x1800015a5
mov qword [rbp + 0x2a0], 0
lea rax, [rbp + 0x2b0]
movups xmmword [rax], xmm6
cmp qword [rbp + 0x270], 0x10
lea rsi, [rbp + 0x258]
jb 0x1800015ef
mov rsi, qword [rbp + 0x258]
mov rdi, qword [rbp + 0x268]
cmp rdi, 0xf
ja 0x180001610
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x2a0], xmm0
mov r14d, 0xf
jmp 0x18000166a
mov r14, rdi
or r14, 0xf
movabs rax, 0x7fffffffffffffff
cmp r14, rax
cmovae r14, rax
cmp r14, 0xfff
jb 0x18000164b
lea rcx, [r14 + 0x28]
call fcn.1800050e4
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180001654
lea rcx, [r14 + 1]
call fcn.1800050e4
mov qword [rbp + 0x2a0], rax
lea r8, [rdi + 1]
mov rcx, rax
mov rdx, rsi
call fcn.180006b90
mov qword [rbp + 0x2b0], rdi
mov qword [rbp + 0x2b8], r14
mov byte [rbp + 0x280], 0
mov byte [rbp + 0x281], 0x31
mov byte [rbp + 0x282], 0x21
movzx eax, byte [rbp + 0x280]
not al
or al, 0xfe
cmp al, 0xff
lea rsi, [rbp + 0x281]
jne 0x180001757
movzx eax, byte [rbp + 0x281]
movzx eax, al
imul eax, eax, 0xffffffe6
mov ecx, eax
add ecx, 0x35a
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x35a
movzx ecx, cx
movsx edx, cx
shr ecx, 0xf
sar edx, 6
add edx, ecx
mov ecx, edx
shl ecx, 7
sub edx, ecx
add eax, edx
add eax, 0x35a
lea ecx, [rax + 0x7f]
cmp ax, 0xff81
movzx ecx, cl
cmovb ecx, eax
mov byte [rbp + 0x281], cl
movzx eax, byte [rbp + 0x282]
movzx eax, al
imul eax, eax, 0xffffffe6
mov ecx, eax
add ecx, 0x35a
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x35a
movzx ecx, cx
movsx edx, cx
shr ecx, 0xf
sar edx, 6
add edx, ecx
mov ecx, edx
shl ecx, 7
sub edx, ecx
add eax, edx
add eax, 0x35a
lea ecx, [rax + 0x7f]
cmp ax, 0xff81
movzx ecx, cl
cmovb ecx, eax
mov byte [rbp + 0x282], cl
mov rcx, rsi
call fcn.180008560
mov rcx, qword [rbp + 0x2b0]
mov rdx, qword [rbp + 0x2b8]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x1800017a0
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x2a0]
mov rdx, rax
mov r9, rsi
call fcn.1800046c0
jmp 0x1800017d7
mov rsi, rax
add rsi, rcx
mov qword [rbp + 0x2b0], rsi
lea rdi, [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x1800017c1
mov rdi, qword [rbp + 0x2a0]
add rcx, rdi
lea rdx, [rbp + 0x281]
mov r8, rax
call fcn.180006b90
mov byte [rdi + rsi], 0
lea rsi, [rbp + 0x114]
mov rcx, rsi
call fcn.180008560
mov rcx, qword [rbp + 0x2b0]
mov rdx, qword [rbp + 0x2b8]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x180001820
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x2a0]
mov rdx, rax
mov r9, rsi
call fcn.1800046c0
jmp 0x180001857
mov rsi, rax
add rsi, rcx
mov qword [rbp + 0x2b0], rsi
lea rdi, [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x180001841
mov rdi, qword [rbp + 0x2a0]
add rcx, rdi
lea rdx, [rbp + 0x114]
mov r8, rax
call fcn.180006b90
mov byte [rdi + rsi], 0
mov qword [rbp + 0x280], 0
lea rax, [rbp + 0x281]
movups xmmword [rax + 0xf], xmm6
mov rdi, qword [rbp + 0x2b0]
cmp qword [rbp + 0x2b8], 0x10
lea rsi, [rbp + 0x2a0]
jb 0x18000188c
mov rsi, qword [rbp + 0x2a0]
cmp rdi, 0xf
ja 0x1800018b0
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x280], xmm0
mov r12d, 0xf
jmp 0x180001942
mov rax, rdi
not rax
movabs rcx, 0xcad984555f40e482
and rax, rcx
mov rcx, rdi
movabs rdx, 0x35267baaa0bf1b7d
and rcx, rdx
or rcx, rax
movabs rax, 0xcad984555f40e48d
xor rcx, rax
mov r12d, edi
and r12d, 0xf
or r12, rcx
movabs rax, 0x7fffffffffffffff
cmp r12, rax
cmovae r12, rax
cmp r12, 0xfff
jb 0x180001922
lea rcx, [r12 + 0x28]
call fcn.1800050e4
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18000192c
lea rcx, [r12 + 1]
call fcn.1800050e4
mov qword [rbp + 0x280], rax
lea r8, [rdi + 1]
mov rcx, rax
mov rdx, rsi
call fcn.180006b90
mov qword [rbp + 0x290], rdi
mov qword [rbp + 0x298], r12
mov byte [rbp + 0x2c0], 0
mov byte [rbp + 0x2c1], 0x1d
mov byte [rbp + 0x2c2], 0x67
mov byte [rbp + 0x2c3], 0x5c
mov byte [rbp + 0x2c4], 0x69
mov byte [rbp + 0x2c5], 0x48
mov byte [rbp + 0x2c6], 0x2b
mov byte [rbp + 0x2c7], 0x41
mov byte [rbp + 0x2c8], 0x19
mov byte [rbp + 0x2c9], 0x5e
mov byte [rbp + 0x2ca], 0x1c
mov rcx, rbx
call fcn.180003e30
mov rsi, rax
mov rcx, rax
call fcn.180008560
mov rcx, qword [rbp + 0x290]
mov rdx, qword [rbp + 0x298]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x1800019f0
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x280]
mov rdx, rax
mov r9, rsi
call fcn.1800046c0
jmp 0x180001a24
mov rdi, rax
add rdi, rcx
mov qword [rbp + 0x290], rdi
lea r14, [rbp + 0x280]
cmp rdx, 0x10
jb 0x180001a11
mov r14, qword [rbp + 0x280]
add rcx, r14
mov rdx, rsi
mov r8, rax
call fcn.180006b90
mov byte [r14 + rdi], 0
cmp qword [rbp + 0x298], 0x10
lea rcx, [rbp + 0x280]
jb 0x180001a3c
mov rcx, qword [rbp + 0x280]
lea rdx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
je 0x180001ece
mov rdi, rax
jmp 0x180001a7a
call fcn.180005128
mov rcx, rdi
lea rdx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x180001e80
mov qword [rbp + 0x2c0], 0
lea rax, [rbp + 0x2d0]
movups xmmword [rax], xmm6
cmp qword [rbp + 0x2b8], 0x10
lea rsi, [rbp + 0x2a0]
jb 0x180001aa7
mov rsi, qword [rbp + 0x2a0]
mov r13, qword [rbp + 0x2b0]
cmp r13, 0xf
ja 0x180001ad0
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x2c0], xmm0
mov r12d, 0xf
jmp 0x180001b70
mov rax, r13
not rax
movabs rcx, 0x26b216c3e616adeb
and rax, rcx
mov rcx, r13
movabs rdx, 0xd94de93c19e95214
and rcx, rdx
or rcx, rax
movabs rax, 0x26b216c3e616ade4
xor rcx, rax
mov r12d, r13d
and r12d, 0xf
or r12, rcx
movabs rax, 0x7fffffffffffffff
cmp r12, rax
cmovae r12, rax
cmp r12, 0xfff
jb 0x180001b50
lea rcx, [r12 + 0x28]
call fcn.1800050e4
mov rcx, rax
mov rdx, rax
add rdx, 0x27
mov rax, rdx
xor rax, 0x1f
and rax, rdx
mov qword [rax - 8], rcx
jmp 0x180001b5a
lea rcx, [r12 + 1]
call fcn.1800050e4
mov qword [rbp + 0x2c0], rax
lea r8, [r13 + 1]
mov rcx, rax
mov rdx, rsi
call fcn.180006b90
mov qword [rbp + 0x2d0], r13
mov qword [rbp + 0x2d8], r12
mov byte [rbp + 0x2e0], 0
mov byte [rbp + 0x2e1], 0x22
mov byte [rbp + 0x2e2], 0x5d
movzx eax, byte [rbp + 0x2e0]
mov ecx, eax
xor cl, 0xfe
test cl, al
jne 0x180001c45
movzx eax, byte [rbp + 0x2e1]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*8]
mov ecx, 0xd14
sub ecx, eax
movsx eax, cx
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, ecx
movzx eax, ax
movsx edx, ax
shr eax, 0xf
sar edx, 6
add edx, eax
mov eax, edx
shl eax, 7
sub edx, eax
add edx, ecx
lea eax, [rdx + 0x7f]
cmp dx, 0xff81
movzx eax, al
cmovb eax, edx
mov byte [rbp + 0x2e1], al
movzx eax, byte [rbp + 0x2e2]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*8]
mov ecx, 0xd14
sub ecx, eax
movsx eax, cx
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, ecx
movzx eax, ax
movsx edx, ax
shr eax, 0xf
sar edx, 6
add edx, eax
mov eax, edx
shl eax, 7
sub edx, eax
add edx, ecx
lea eax, [rdx + 0x7f]
cmp dx, 0xff81
movzx eax, al
cmovb eax, edx
mov byte [rbp + 0x2e2], al
lea r12, [rbp + 0x2e1]
mov rcx, r12
call fcn.180008560
mov rcx, qword [rbp + 0x2d0]
mov rdx, qword [rbp + 0x2d8]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x180001c90
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, rax
mov r9, r12
call fcn.1800046c0
jmp 0x180001cc0
mov rsi, rax
add rsi, rcx
mov qword [rbp + 0x2d0], rsi
mov r14, rbx
cmp rdx, 0x10
jb 0x180001cad
mov r14, qword [rbp + 0x2c0]
add rcx, r14
mov rdx, r12
mov r8, rax
call fcn.180006b90
mov byte [r14 + rsi], 0
mov rcx, r15
call fcn.180008560
mov rcx, qword [rbp + 0x2d0]
mov rdx, qword [rbp + 0x2d8]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x180001d00
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, rax
mov r9, r15
call fcn.1800046c0
jmp 0x180001d30
mov rsi, rax
add rsi, rcx
mov qword [rbp + 0x2d0], rsi
mov r14, rbx
cmp rdx, 0x10
jb 0x180001d1d
mov r14, qword [rbp + 0x2c0]
add rcx, r14
mov rdx, r15
mov r8, rax
call fcn.180006b90
mov byte [r14 + rsi], 0
mov rcx, qword [rbp + 0x278]
mov rsi, qword [rcx + 8]
cmp rsi, qword [rcx + 0x10]
je 0x180001d80
mov qword [rsi], 0
movups xmmword [rsi + 0x10], xmm6
cmp qword [rbp + 0x2d8], 0x10
mov r13, rbx
jb 0x180001d60
mov r13, qword [rbp + 0x2c0]
mov r14, qword [rbp + 0x2d0]
cmp r14, 0xf
ja 0x180001d90
movups xmm0, xmmword [r13]
movups xmmword [rsi], xmm0
mov r12d, 0xf
jmp 0x180001e25
mov rdx, rsi
mov r8, rbx
call fcn.180004ab0
jmp 0x180001e32
mov rax, r14
not rax
movabs rcx, 0x94a3898f4030b8c1
and rax, rcx
mov rcx, r14
movabs rdx, 0x6b5c7670bfcf473e
and rcx, rdx
or rcx, rax
movabs rax, 0x94a3898f4030b8ce
xor rcx, rax
mov r12d, r14d
and r12d, 0xf
or r12, rcx
movabs rax, 0x7fffffffffffffff
cmp r12, rax
cmovae r12, rax
cmp r12, 0xfff
jb 0x180001e02
lea rcx, [r12 + 0x28]
call fcn.1800050e4
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180001e0c
lea rcx, [r12 + 1]
call fcn.1800050e4
mov qword [rsi], rax
lea r8, [r14 + 1]
mov rcx, rax
mov rdx, r13
call fcn.180006b90
mov rcx, qword [rbp + 0x278]
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], r12
add qword [rcx + 8], 0x20
mov rax, qword [rbp + 0x2d8]
cmp rax, 0x10
jb 0x180001a65
mov rcx, qword [rbp + 0x2c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001a60
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x18000201b
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x180001a60
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [rbp + 0x298]
cmp rax, 0x10
mov rsi, qword [rbp + 0x228]
lea rdi, [rbp + 0xe8]
jb 0x180001f21
mov rcx, qword [rbp + 0x280]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001f1c
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jb 0x180001f12
jmp 0x18000201b
mov rax, qword [rbp + 0x298]
cmp rax, 0x10
mov rsi, qword [rbp + 0x228]
lea rdi, [rbp + 0xe8]
jb 0x180001f21
mov rcx, qword [rbp + 0x280]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001f1c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x18000201b
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005128
mov rax, qword [rbp + 0x2b8]
cmp rax, 0x10
jb 0x1800015a5
mov rcx, qword [rbp + 0x2a0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1800015a0
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x18000201b
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x1800015a0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [rbp + 0x248]
cmp rax, 0x10
jb 0x180001fb8
mov rcx, qword [rbp + 0x230]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001fb3
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x18000201b
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005128
mov rax, qword [rbp + 0x270]
cmp rax, 0x10
jb 0x180001ff9
mov rcx, qword [rbp + 0x258]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001ff4
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x18000201b
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180005128
mov rax, qword [rbp + 0x278]
movaps xmm6, xmmword [rbp + 0x2f0]
add rsp, 0x388
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.180008108
call fcn.180004840
int3