Function at 0x1400196e0
Capabilities:
Check if file exists
Get common file path
Get file attributes
Query environment variable
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2658]
mov eax, 0x2758
call fcn.140046c80
sub rsp, rax
mov qword [rbp - 0x48], 0xfffffffffffffffe
movaps xmmword [rsp + 0x2740], xmm6
movaps xmmword [rsp + 0x2730], xmm7
mov rax, qword [0x140095080]
xor rax, rsp
mov qword [rbp + 0x2620], rax
mov r12, r9
mov qword [rbp - 0x18], r9
mov r14, r8
mov r15, rdx
mov qword [rbp - 0x50], rcx
mov rax, qword [rbp + 0x26c8]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp + 0x26d0]
mov qword [rbp - 0x60], rax
xor esi, esi
mov dword [rbp + 0x10], esi
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0x620]
call fcn.1400482f0
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rbp - 0x28], xmm0
mov word [rbp - 0x38], si
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 7
mov word [r15], si
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.140010f00
mov rbx, rax
cmp r15, rax
je 0x1400197da
mov rcx, r15
call fcn.1400020b0
movups xmm0, xmmword [rbx]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r15 + 0x10], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001981c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019817
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6e6
call fcn.14004654c
mov rdx, r15
lea rcx, [rbp - 0x10]
call fcn.140010880
nop
call fcn.140002000
cmp dword [rax + 0xc], 9
ja 0x140019933
lea rbx, [rbp - 0x10]
mov r12, qword [rbp - 0x10]
mov r13, qword [rbp + 8]
cmp r13, 8
cmovae rbx, r12
mov r11, qword [rbp]
cmp r11, 7
jb 0x14001992f
lea rdi, [r11 - 6]
lea rdi, [rbx + rdi*2]
mov rax, rbx
lea r8, [0x1400832e0]
mov qword [rbp + 0x10], r8
mov rcx, rdi
sub rcx, rax
sar rcx, 1
mov rdx, rsi
je 0x14001989a
cmp word [rax], 0x65
je 0x140019897
cmp rcx, 1
je 0x14001989a
dec rcx
add rax, 2
cmp word [rax], 0x65
jne 0x140019884
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14001992f
mov r9d, 7
mov rcx, r8
movzx edx, word [rdx]
mov r8d, 0x65
cmp dx, r8w
jb 0x1400198e7
mov r10, rax
sub r10, qword [rbp + 0x10]
cmp dx, r8w
ja 0x1400198e7
cmp r9, 1
je 0x1400198f7
dec r9
add rcx, 2
movzx edx, word [r10 + rcx]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x1400198c9
add rax, 2
lea r8, [0x1400832e0]
jmp 0x140019870
sub rax, rbx
sar rax, 1
jne 0x14001992f
mov eax, 4
cmp r11, rax
cmovb rax, r11
lea rcx, [rbp - 0x10]
cmp r13, 8
cmovae rcx, r12
sub r11, rax
mov qword [rbp], r11
lea r8, [r11*2 + 2]
lea rdx, [rcx + rax*2]
call fcn.140047e80
mov r12, qword [rbp - 0x18]
mov r13, qword [rbp - 0x50]
mov rdi, qword [r13 + 8]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140019c22
nop word [rax + rax]
lea rdx, [rbx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x14001995e
mov rdx, qword [rdx]
lea rcx, [rbp - 0x10]
call fcn.14001adc0
cmp rax, 0xffffffffffffffff
jne 0x140019975
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x140019950
cmp rbx, rdi
je 0x140019c22
mov r8, qword [rbx + 0x30]
cmp r8, qword [rbx + 0x38]
je 0x140019a01
mov rcx, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 8
jb 0x140019996
mov r14, qword [r14]
mov rax, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 8
jb 0x1400199a4
mov r8, qword [r8]
cmp rax, rcx
jne 0x1400199de
test rax, rax
je 0x1400199f7
movzx ecx, word [r8]
movzx edx, word [r14]
cmp cx, dx
jb 0x1400199de
sub r8, r14
cmp cx, dx
ja 0x1400199de
cmp rax, 1
je 0x1400199f7
dec rax
add r14, 2
movzx ecx, word [r8 + r14]
movzx edx, word [r14]
cmp cx, dx
jae 0x1400199c1
mov rdx, qword [rbx + 0x30]
cmp r15, rdx
je 0x140019a1f
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x140019a17
mov rdx, qword [rdx]
jmp 0x140019a17
mov rdx, qword [rbx + 0x38]
sub rdx, 0x20
jmp 0x1400199e2
cmp r15, r14
je 0x140019a1f
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 8
jb 0x140019a14
mov r14, qword [r14]
mov rdx, r14
mov rcx, r15
call fcn.140002410
mov r9, qword [rbp - 0x60]
mov r8, qword [rbp - 0x58]
mov rdx, r15
call fcn.14001a740
mov edx, eax
mov ecx, 0x80000000
add eax, ecx
test ecx, eax
jne 0x14001a696
cmp edx, 0xc015001d
je 0x14001a696
test byte [rbp + 0x26c0], 2
je 0x14001a698
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rbp + 0x20]
call fcn.1400482f0
mov edx, 0xff
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], si
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140019aa0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140002410
nop
mov r8d, 1
lea rdx, [0x1400832dc]
lea rcx, [rsp + 0x60]
call fcn.14001ba80
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, r15
cmp qword [r15 + 0x18], 8
jb 0x140019b09
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rdx, [rbp - 0x80]
mov rcx, r15
call fcn.140002a50
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140019b82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019b7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6ec
call fcn.14004654c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140019bc4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019bbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6f2
call fcn.14004654c
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001a698
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019c18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6f8
call fcn.14004654c
jmp 0x14001a698
mov r14d, dword [rbp + 0x26c0]
test r14b, 1
jne 0x140019c65
mov r9, qword [rbp - 0x60]
mov r13, qword [rbp - 0x58]
mov r8, r13
mov rdx, r15
call fcn.14001a740
mov edx, eax
mov ecx, 0x80000000
add eax, ecx
test ecx, eax
jne 0x14001a696
cmp edx, 0xc015001d
je 0x14001a696
test r14b, 4
je 0x140019c6f
mov esi, 0xc0000225
jmp 0x14001a698
mov rcx, r15
cmp qword [r15 + 0x18], 8
jb 0x140019c7c
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14001a698
mov qword [rbp + 0x18], rsi
lea r8, [rbp + 0x18]
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerKnownDLLs
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movsxd rdi, eax
test eax, eax
jne 0x140019d93
mov ebx, esi
test rdi, rdi
jne 0x140019d93
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rbp + 0x420]
call fcn.1400482f0
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rbp + 0x20]
call fcn.1400482f0
mov dword [rbp - 0x18], 0xff
mov dword [rbp + 0x10], esi
lea rax, [rbp - 0x18]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x18]
lea r8, [rbp + 0x420]
mov edx, ebx
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
movsxd rdi, eax
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rdx, qword [rbp - 0x10]
lea rcx, [rbp + 0x20]
call fcn.140050a6c
test eax, eax
jne 0x140019d85
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rbp + 0x220]
call fcn.1400482f0
mov dword [rbp - 0x18], 0xff
mov edx, 0xff
lea rcx, [rbp + 0x220]
test r14b, 8
je 0x140019d76
call qword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
jmp 0x140019d7c
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test rdi, rdi
je 0x14001a001
inc ebx
cmp ebx, 0x1000
jl 0x140019cb4
mov rdx, qword [r12 + 0x10]
test rdx, rdx
je 0x140019e9f
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
mov dword [rbp + 0x10], 0x10
inc rdx
lea rcx, [rsp + 0x40]
call fcn.14001b9c0
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 8
jb 0x140019dd9
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.14001ba80
mov r8d, 1
lea rdx, [0x1400832dc]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rcx, [rbp - 0x38]
call fcn.1400020b0
movups xmmword [rbp - 0x38], xmm6
movups xmmword [rbp - 0x28], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140019e82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019e7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6fe
call fcn.14004654c
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14001a330
mov r8d, dword [r13 + 8]
lea rdx, [rbp - 0x80]
call fcn.14001aae0
nop
mov r8d, 1
lea rdx, [0x1400832dc]
mov rcx, rax
call fcn.14001ba80
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rcx, [rbp - 0x38]
call fcn.1400020b0
movups xmmword [rbp - 0x38], xmm6
movups xmmword [rbp - 0x28], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140019f70
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019f6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a716
call fcn.14004654c
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140019fc3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019fbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a71c
call fcn.14004654c
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14001a330
mov edx, 0x1000
lea rcx, [rbp + 0x620]
test r14b, 8
je 0x14001a1ac
call qword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
jmp 0x14001a1b2
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], si
lea rax, [rbp + 0x220]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001a025
lea rdx, [rbp + 0x220]
lea rcx, [rsp + 0x60]
call fcn.140002410
nop
mov r8d, 1
lea rdx, [0x1400832dc]
lea rcx, [rsp + 0x60]
call fcn.14001ba80
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rax, [rbp + 0x20]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14001a086
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rdx, [rbp - 0x80]
mov rcx, r15
call fcn.140002a50
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14001a10c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a106
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a704
call fcn.14004654c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001a14e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a149
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a70a
call fcn.14004654c
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001a67d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a1a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a710
call fcn.14004654c
jmp 0x14001a67d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], si
lea rax, [rbp + 0x620]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001a1e0
lea rdx, [rbp + 0x620]
lea rcx, [rsp + 0x60]
call fcn.140002410
nop
mov r8d, 1
lea rdx, [0x1400832dc]
lea rcx, [rsp + 0x60]
call fcn.14001ba80
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rcx, [rbp - 0x38]
call fcn.1400020b0
movups xmmword [rbp - 0x38], xmm6
movups xmmword [rbp - 0x28], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001a2c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a2bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a722
call fcn.14004654c
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001a317
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a312
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a728
call fcn.14004654c
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001a35c
lea rax, [rbp - 0x38]
cmp r15, rax
je 0x14001a67d
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x28]
mov rcx, r15
call fcn.140002410
jmp 0x14001a67d
mov edx, 0x1000
lea rcx, [rbp + 0x620]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], si
lea rax, [rbp + 0x620]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001a390
lea rdx, [rbp + 0x620]
lea rcx, [rsp + 0x60]
call fcn.140002410
nop
mov r8d, 1
lea rdx, [0x1400832dc]
lea rcx, [rsp + 0x60]
call fcn.14001ba80
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rsp + 0x40]
call fcn.14001ba80
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rcx, [rbp - 0x38]
call fcn.1400020b0
movups xmmword [rbp - 0x38], xmm6
movups xmmword [rbp - 0x28], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001a472
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a46d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a72e
call fcn.14004654c
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001a4c7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a4c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6e0
call fcn.14004654c
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14001a330
lea rdx, [rbp + 0x620]
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
movdqa xmm0, xmmword [0x140084720]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], si
lea rax, [rbp + 0x620]
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14001a510
mov r8, rbx
lea rdx, [rbp + 0x620]
lea rcx, [rbp - 0x80]
call fcn.140002410
nop
mov r8d, 1
lea rdx, [0x1400832dc]
lea rcx, [rbp - 0x80]
call fcn.14001ba80
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140002fa0
nop
lea r8, [rbp - 0x10]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.14001b8f0
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140002a50
lea rcx, [rsp + 0x40]
call fcn.1400020b0
nop
lea rcx, [rsp + 0x60]
call fcn.1400020b0
nop
lea rcx, [rbp - 0x80]
call fcn.1400020b0
lea rcx, [rbp - 0x38]
call fcn.140011040
test al, al
jne 0x14001a688
mov r8d, 0x1000
lea rdx, [rbp + 0x620]
lea rcx, str.PATH
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea r8, [rbp - 0x40]
lea rdx, [0x140083374]
lea rcx, [rbp + 0x620]
call fcn.140051760
test rax, rax
je 0x14001a678
nop word [rax + rax]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140002120
nop
lea r8, [0x1400832dc]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14001b880
nop
lea r8, [rbp - 0x10]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14001b8f0
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140002a50
lea rcx, [rbp - 0x80]
call fcn.1400020b0
nop
lea rcx, [rsp + 0x60]
call fcn.1400020b0
nop
lea rcx, [rsp + 0x40]
call fcn.1400020b0
lea rcx, [rbp - 0x38]
call fcn.140011040
test al, al
jne 0x14001a688
lea r8, [rbp - 0x40]
lea rdx, [0x140083374]
mov rcx, qword [rbp - 0x40]
call fcn.140051760
test rax, rax
jne 0x14001a5f0
mov esi, 0xc0000225
lea rcx, [rbp + 0x18]
call fcn.14001ad50
jmp 0x14001a698
lea rdx, [rbp - 0x38]
mov rcx, r15
call fcn.14000dbc0
jmp 0x14001a67d
mov esi, edx
lea rcx, [rbp - 0x10]
call fcn.1400020b0
nop
lea rcx, [rbp - 0x38]
call fcn.1400020b0
mov eax, esi
mov rcx, qword [rbp + 0x2620]
xor rcx, rsp
call fcn.140045ef0
movaps xmm6, xmmword [rsp + 0x2740]
movaps xmm7, xmmword [rsp + 0x2730]
add rsp, 0x2758
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
nop
call fcn.14004cff4
int3