Function at 0x1400aa430
Capabilities:
Copy file
Get file attributes
Move file
Read file on windows
Set file attributes
Timestomp file
Write file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1290
call fcn.140115240
sub rsp, rax
mov rax, qword [0x140185220]
xor rax, rsp
mov qword [rsp + 0x1280], rax
mov r15, r9
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x140], rdx
mov rdi, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x98], rcx
mov r13, qword [rsp + 0x12f0]
mov rax, qword [rsp + 0x12f8]
mov qword [rsp + 0x90], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
movzx eax, byte [0x14018c33e]
test al, al
je 0x1400aa4ab
jmp 0x1400ad816
mov dword [rsp + 0x48], r12d
mov rdx, r15
lea rcx, [rsp + 0x8f0]
call fcn.14004aff0
nop
mov rbx, qword [rdi]
lea rdx, [0x1401656e0]
lea rcx, [rsp + 0xcf0]
call fcn.14004c350
nop
mov r8, rbx
lea rdx, [rsp + 0xcf0]
lea rcx, [rsp + 0x8f0]
call fcn.140062f00
nop
lea rcx, [rsp + 0xcf0]
call fcn.14004b2f0
mov edx, 0x5c
mov rcx, qword [rdi]
call fcn.140062a40
lea r8, [rax + 1]
mov rsi, 0xffffffffffffffff
mov r9, rsi
lea rdx, [rsp + 0x910]
mov rcx, qword [rdi]
call fcn.14004ef30
nop
lea edx, [rsi + 0x2f]
lea rcx, [rsp + 0x910]
call fcn.140062a40
mov rbx, rax
cmp rax, rsi
je 0x1400aa626
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0xcd0]
lea rcx, [rsp + 0x910]
call fcn.14004ef30
nop
lea rdx, [0x140165708]
lea rcx, [rsp + 0xd10]
call fcn.14004c350
nop
lea r8, [rsp + 0xcd0]
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0x8f0]
call fcn.140062f00
nop
lea rcx, [rsp + 0xd10]
call fcn.14004b2f0
cmp qword [rsp + 0x920], rbx
jbe 0x1400aa619
lea r8, [rbx + 1]
mov r9, rsi
lea rdx, [rsp + 0xd70]
lea rcx, [rsp + 0x910]
call fcn.14004ef30
nop
lea rdx, [0x140165728]
lea rcx, [rsp + 0xd30]
call fcn.14004c350
nop
lea r8, [rsp + 0xd70]
lea rdx, [rsp + 0xd30]
lea rcx, [rsp + 0x8f0]
call fcn.140062f00
nop
lea rcx, [rsp + 0xd30]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xd70]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xcd0]
call fcn.14004b2f0
mov r9, qword [rsp + 0x58]
movzx r14d, byte [r9 + 4]
test r14b, r14b
jne 0x1400aa817
lea rdx, [0x140163810]
lea rcx, [rsp + 0x1100]
call fcn.1400ded70
nop
lea rdx, [0x1401685f4]
lea rcx, [rsp + 0x1120]
call fcn.1400ded70
nop
lea rdx, [0x1401685f8]
lea rcx, [rsp + 0x1140]
call fcn.1400ded70
nop
lea rdx, [0x14016304c]
lea rcx, [rsp + 0x1160]
call fcn.1400ded70
nop
lea rdx, [0x140164104]
lea rcx, [rsp + 0x1180]
call fcn.1400ded70
nop
lea rdx, [0x140164864]
lea rcx, [rsp + 0x11a0]
call fcn.1400ded70
nop
lea rdx, [0x1401685fc]
lea rcx, [rsp + 0x11c0]
call fcn.1400ded70
nop
lea rdx, [0x140168600]
lea rcx, [rsp + 0x11e0]
call fcn.1400ded70
nop
lea rdx, [0x140168604]
lea rcx, [rsp + 0x1200]
call fcn.1400ded70
nop
lea rdx, [0x140168608]
lea rcx, [rsp + 0x1220]
call fcn.1400ded70
nop
lea rdx, [0x14016860c]
lea rcx, [rsp + 0x1240]
call fcn.1400ded70
nop
lea rdx, [0x140168610]
lea rcx, [rsp + 0x1260]
call fcn.1400ded70
nop
lea rbx, [rsp + 0x1100]
nop dword [rax]
mov r8, rbx
lea rdx, [0x140163810]
lea rcx, [rsp + 0xdf0]
call fcn.14005f750
nop
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x8f0]
call fcn.140062f00
nop
lea rcx, [rsp + 0xdf0]
call fcn.14004b2f0
add rbx, 0x20
lea rax, [rsp + 0x1280]
cmp rbx, rax
jne 0x1400aa740
lea r9, [fcn.14004b360]
mov edx, 0x20
lea r8d, [rdx - 0x14]
lea rcx, [rsp + 0x1100]
call fcn.140114b54
mov r9, qword [rsp + 0x58]
cmp byte [r9 + 8], 0
je 0x1400aa817
lea r8, [rsp + 0x8f0]
lea rdx, [0x140168370]
lea rcx, [rsp + 0xdb0]
call fcn.14005f750
nop
lea r8, [0x140168370]
mov rdx, rax
lea rcx, [rsp + 0xd90]
call fcn.1400b2a90
mov rdx, rax
lea rcx, [rsp + 0x8f0]
call fcn.14004c2b0
lea rcx, [rsp + 0xd90]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xdb0]
call fcn.14004b2f0
mov r9, qword [rsp + 0x58]
mov qword [rsp + 0x850], r12
mov dword [rsp + 0x858], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x860], xmm0
mov qword [rsp + 0x870], r12
mov qword [rsp + 0x878], 7
mov word [rsp + 0x860], r12w
movdqa xmmword [rsp + 0x880], xmm0
mov qword [rsp + 0x890], r12
mov dword [rsp + 0x898], r12d
movups xmmword [rsp + 0x8a0], xmm0
mov qword [rsp + 0x8b0], r12
mov qword [rsp + 0x8b8], 7
mov word [rsp + 0x8a0], r12w
mov byte [rsp + 0x8c0], 0
mov dword [rsp + 0x8c4], 2
mov dword [rsp + 0x4c], r12d
xor r12b, r12b
movzx esi, byte [r9 + 2]
test sil, sil
je 0x1400aa8c4
mov eax, 1
mov dword [rsp + 0x4c], eax
mov ebx, dword [rsp + 0x40]
jmp 0x1400aaa23
mov r8, qword [rdi]
lea rdx, str.file_load_and_parse:
lea rcx, [rsp + 0xdd0]
call fcn.14005f750
nop
mov rcx, rax
call fcn.14004b370
mov rdx, rax
lea rcx, [rsp + 0x1050]
call fcn.140091730
nop
lea rcx, [rsp + 0xdd0]
call fcn.14004b2f0
cmp byte [0x14018c2e4], 0
je 0x1400aa929
xor r9d, r9d
lea r8, str.nullbytes
lea rdx, str.settings
call fcn.1400b28a0
mov edi, eax
mov ebx, dword [rsp + 0x40]
jmp 0x1400aa972
lea rdx, str.SoftwaregrepWinNP3_nullbytes
lea rcx, [rsp + 0xc50]
call fcn.14004c350
nop
mov dword [rsp + 0x40], 1
xor r8d, r8d
lea rdx, [rsp + 0xc50]
lea rcx, [rsp + 0x1080]
call fcn.1400713b0
nop
mov ebx, 3
mov dword [rsp + 0x40], ebx
mov rcx, rax
call fcn.140071400
mov edi, dword [rax]
test bl, 2
je 0x1400aa98c
and ebx, 0xfffffffd
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0x1080]
call fcn.14005f9e0
nop
test bl, 1
je 0x1400aa9a5
and ebx, 0xfffffffe
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0xc50]
call fcn.14004b2f0
test edi, edi
jle 0x1400aa9d1
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov rax, qword [rax + 0x20]
cqo
and edx, 0xfffff
lea rcx, [rdx + rax]
sar rcx, 0x14
inc ecx
imul ecx, edi
mov dword [rsp + 0x8c4], ecx
mov rdi, qword [rsp + 0x50]
mov rcx, qword [rdi]
call fcn.14004b370
lea rcx, [0x14018c33e]
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
movzx r9d, byte [rcx + 1]
lea r8, [rsp + 0x4c]
mov rdx, rax
lea rcx, [rsp + 0x850]
call fcn.140063b60
movzx r12d, al
lea rcx, [rsp + 0x1050]
call fcn.140091780
mov eax, dword [rsp + 0x4c]
mov r9, qword [rsp + 0x58]
mov rcx, qword [rdi]
mov dword [rcx + 0x60], eax
mov ecx, dword [rsp + 0x4c]
test r12b, r12b
je 0x1400ac369
cmp ecx, 1
jne 0x1400aaa4c
cmp byte [r9 + 3], 0
jne 0x1400aaa4c
cmp byte [r9], 0
je 0x1400ac3ab
mov r12, qword [rsp + 0x50]
mov rax, qword [r12]
mov byte [rax + 0x6c], 0
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x860]
call fcn.140065960
mov rbx, qword [rax]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x860]
call fcn.140065940
mov rdi, qword [rax]
lea rcx, [rsp + 0x5f0]
call fcn.140075dc0
nop
mov r8d, 0x100000
cmp byte [r9 + 5], 0
mov esi, 0
cmovne r8d, esi
mov dword [rsp + 0x60], r8d
lea rdx, [rsp + 0x8f0]
lea rcx, [rsp + 0x1b8]
call fcn.140076960
nop
lea rcx, [rsp + 0xb0]
call fcn.140075dc0
nop
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x70], esi
mov eax, 0x2000000
mov r14d, 0x2000040
mov rcx, qword [rsp + 0x58]
cmp byte [rcx + 6], sil
cmovne r14d, eax
movabs r15, 0x2aaaaaaaaaaaaaab
mov dword [rsp + 0x44], r14d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x1b8]
lea r8, [rsp + 0xb0]
mov rdx, rdi
mov rcx, rbx
call fcn.140077980
test al, al
je 0x1400aadee
movzx eax, byte [0x14018c33e]
test al, al
jne 0x1400aadee
movzx r10d, byte [rsp + 0xfc]
mov r8, qword [rsp + 0xb0]
mov r9, qword [rsp + 0xb8]
test r10b, r10b
je 0x1400aab66
cmp r8, r9
je 0x1400ad843
mov rcx, r9
sub rcx, r8
mov rax, r15
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
lea rax, [r8 + 0x30]
jg 0x1400aab91
lea rax, [rsp + 0xd0]
cmp byte [rax + 0x10], 0
je 0x1400aad6b
mov r15d, dword [rsp + 0x48]
inc r15d
mov dword [rsp + 0x48], r15d
movzx eax, byte [0x14018c33f]
test al, al
jne 0x1400aadf3
xor edx, edx
lea rcx, [rsp + 0xb0]
call fcn.140075cf0
mov r8, rax
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x860]
call fcn.140065960
mov rdx, qword [r8]
sub rdx, qword [rax]
sar rdx, 1
lea rcx, [rsp + 0x850]
call fcn.1400655e0
mov r15d, eax
xor edx, edx
lea rcx, [rsp + 0xb0]
call fcn.140075cf0
mov r8, rax
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x860]
call fcn.140065960
mov rdx, qword [r8 + 8]
sub rdx, qword [rax]
sar rdx, 1
lea rcx, [rsp + 0x850]
call fcn.1400655e0
mov r14d, eax
cmp r15d, dword [rsp + 0x68]
jne 0x1400aac47
cmp eax, esi
je 0x1400aad2e
mov esi, r15d
nop word [rax + rax]
cmp esi, r14d
jg 0x1400aad2e
mov r8d, esi
lea rdx, [rsp + 0xc90]
lea rcx, [rsp + 0x850]
call fcn.140065640
nop
mov rax, qword [rsp + 0x58]
cmp byte [rax + 0xc], 0
je 0x1400aacd5
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x660]
call fcn.14004aff0
mov r9d, dword [rsp + 0x44]
mov r8, rax
lea rdx, [rsp + 0xc70]
lea rcx, [rsp + 0xb0]
call fcn.140076890
nop
mov rcx, qword [r12]
add rcx, 0x40
lea rdx, [rsp + 0xc70]
call fcn.14004c980
nop
lea rcx, [rsp + 0xc70]
call fcn.14004b2f0
jmp 0x1400aacea
mov rcx, qword [r12]
add rcx, 0x40
lea rdx, [rsp + 0xc90]
call fcn.14004c980
mov rcx, qword [r12]
add rcx, 0x28
mov dword [rsp + 0x188], esi
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x1400aad0c
mov dword [rdx], esi
add qword [rcx + 8], 4
jmp 0x1400aad1a
lea r8, [rsp + 0x188]
call fcn.1400b85a0
nop
lea rcx, [rsp + 0xc90]
call fcn.14004b2f0
inc esi
jmp 0x1400aac50
mov rax, qword [r12]
inc qword [rax + 0x58]
mov dword [rsp + 0x68], r15d
mov esi, r14d
mov dword [rsp + 0x70], r14d
movzx r10d, byte [rsp + 0xfc]
mov r9, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xb0]
mov r14d, dword [rsp + 0x44]
movabs r15, 0x2aaaaaaaaaaaaaab
test r10b, r10b
je 0x1400aad79
cmp r8, r9
je 0x1400ad849
mov rcx, r9
sub rcx, r8
mov rax, r15
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
lea rax, [r8 + 0x30]
jg 0x1400aada4
lea rax, [rsp + 0xd0]
cmp rbx, qword [rax + 8]
jne 0x1400aadbf
cmp rbx, rdi
je 0x1400aadee
add rbx, 2
or r14d, 0x104
jmp 0x1400aaafe
test r10b, r10b
je 0x1400aadcd
cmp r8, r9
je 0x1400ad84e
cmp edx, 2
lea rbx, [r8 + 0x30]
jg 0x1400aadde
lea rbx, [rsp + 0xd0]
mov rbx, qword [rbx + 8]
or r14d, 0x104
jmp 0x1400aaafe
mov r15d, dword [rsp + 0x48]
cmp dword [rsp + 0x4c], 1
jne 0x1400ab4d0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x178], xmm0
mov rax, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 8
jb 0x1400aae22
mov rcx, qword [r13]
lea rsi, [rcx + rax*2]
mov r13, rcx
jmp 0x1400aae2d
lea rsi, [rax*2]
add rsi, r13
movdqu xmmword [rsp + 0x168], xmm0
mov ecx, RemoveWindowSubclass
call fcn.1401145d0
mov rbx, rax
mov qword [rsp + 0x200], rax
mov rcx, rax
call fcn.1400777d0
nop
mov qword [rsp + 0x200], rbx
mov ecx, 0x18
call fcn.1401145d0
mov rdi, rax
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_class_boost::re_detail_500::basic_regex_implementation_wchar_t__struct_boost::regex_traits_wchar_t__class_boost::w32_regex_traits_wchar_t____.0
mov qword [rdi], rax
mov qword [rdi + 0x10], rbx
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x170], rdi
mov r9d, dword [rsp + 0x60]
mov r8, rsi
mov rdx, r13
mov rcx, rbx
call fcn.140077370
mov qword [rsp + 0x178], rbx
mov rbx, qword [rsp + 0x180]
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x180], rdi
test rbx, rbx
je 0x1400aaf13
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400aaf13
mov rcx, qword [rsp + 0x170]
mov rax, qword [rcx]
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400aaf13
mov rcx, qword [rsp + 0x170]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rbx, [rsp + 0x860]
cmp qword [rsp + 0x878], 8
jb 0x1400aaf33
mov rbx, qword [rsp + 0x860]
mov rcx, rbx
jmp 0x1400aaf3b
lea rcx, [rsp + 0x860]
mov rax, qword [rsp + 0x870]
lea rdi, [rcx + rax*2]
nop word [rax + rax]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x178]
lea r8, [rsp + 0xb0]
mov rdx, rdi
mov rcx, rbx
call fcn.140077980
test al, al
je 0x1400ab48f
movzx eax, byte [0x14018c33e]
test al, al
jne 0x1400ab48f
movzx r10d, byte [rsp + 0xfc]
mov r8, qword [rsp + 0xb0]
mov r9, qword [rsp + 0xb8]
test r10b, r10b
je 0x1400aafb3
cmp r8, r9
je 0x1400ad854
mov rcx, r9
sub rcx, r8
movabs r11, 0x2aaaaaaaaaaaaaab
mov rax, r11
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
lea rax, [r8 + 0x30]
jg 0x1400aafe8
lea rax, [rsp + 0xd0]
cmp byte [rax + 0x10], 0
je 0x1400ab3f8
inc r15d
mov dword [rsp + 0x48], r15d
movzx eax, byte [0x14018c33f]
test al, al
jne 0x1400ab48f
movzx r15d, byte [rsp + 0xfc]
mov r10, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xb8]
test r15b, r15b
je 0x1400ab030
cmp r10, rsi
je 0x1400ad859
mov rcx, rsi
sub rcx, r10
mov rax, r11
imul rcx
mov r11, rdx
sar r11, 2
mov rax, r11
shr rax, 0x3f
add r11, rax
cmp r11d, 2
lea r8, [r10 + 0x30]
jg 0x1400ab05f
lea r8, [rsp + 0xd0]
lea rcx, [rsp + 0x860]
cmp qword [rsp + 0x878], 8
setae r13b
mov r12, qword [rsp + 0x860]
cmovae rcx, r12
mov rax, qword [r8]
sub rax, rcx
sar rax, 1
movsxd r14, eax
mov rax, qword [rsp + 0x880]
mov qword [rsp + 0x60], rax
mov r9, rax
mov rdx, qword [rsp + 0x888]
sub rdx, rax
sar rdx, 3
mov r8, rdx
test rdx, rdx
jle 0x1400ab0ef
nop dword [rax]
nop word [rax + rax]
mov rcx, r8
shr rcx, 1
lea rax, [r9 + rcx*8]
cmp qword [rax], r14
jae 0x1400ab0e2
lea r9, [rax + 8]
mov rax, 0xffffffffffffffff
sub rax, rcx
add r8, rax
jmp 0x1400ab0e5
mov r8, rcx
test r8, r8
jg 0x1400ab0c0
mov rax, qword [rsp + 0x60]
sub r9, rax
sar r9, 3
lea r14d, [r9 + 1]
mov dword [rsp + 0x60], r14d
test r15b, r15b
je 0x1400ab10d
cmp r10, rsi
je 0x1400ad85e
cmp r11d, 2
lea rax, [r10 + 0x30]
jg 0x1400ab11f
lea rax, [rsp + 0xd0]
lea rcx, [rsp + 0x860]
test r13b, r13b
cmovne rcx, r12
mov rax, qword [rax + 8]
sub rax, rcx
sar rax, 1
movsxd r9, eax
mov r10, qword [rsp + 0x880]
mov r8, r10
test rdx, rdx
jle 0x1400ab17a
nop dword [rax + rax]
mov rcx, rdx
shr rcx, 1
lea rax, [r8 + rcx*8]
cmp qword [rax], r9
jae 0x1400ab172
lea r8, [rax + 8]
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdx, rax
jmp 0x1400ab175
mov rdx, rcx
test rdx, rdx
jg 0x1400ab150
sub r8, r10
sar r8, 3
lea r15d, [r8 + 1]
mov rax, qword [rsp + 0x58]
cmp byte [rax + 0xc], 0
je 0x1400ab2e7
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x640]
call fcn.14004aff0
mov rsi, rax
mov qword [rsp + 0x78], rax
cmp byte [rsp + 0xfc], 0
jne 0x1400ad864
xorps xmm0, xmm0
movups xmmword [rsp + 0xa40], xmm0
xor eax, eax
mov qword [rsp + 0xa50], rax
mov qword [rsp + 0xa58], 7
mov word [rsp + 0xa40], ax
mov r14d, dword [rsp + 0x40]
bts r14d, 0xa
mov dword [rsp + 0x40], r14d
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x1400ab20e
mov rcx, qword [rsi]
lea rax, [rcx + rax*2]
mov r9, rcx
jmp 0x1400ab215
lea rax, [rsi + rax*2]
mov r9, rsi
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x30], rcx
mov ecx, dword [rsp + 0x44]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0xa40]
lea rcx, [rsp + 0x328]
call fcn.14007a7a0
nop
mov rcx, rsi
call fcn.14004b2f0
mov r12, qword [rsp + 0x50]
mov rsi, qword [r12]
mov rax, qword [rsi + 0x48]
cmp rax, qword [rsi + 0x50]
je 0x1400ab27f
lea rdx, [rsp + 0xa40]
mov rcx, rax
call fcn.14004aff0
add qword [rsi + 0x48], 0x20
jmp 0x1400ab293
lea r8, [rsp + 0xa40]
mov rdx, rax
lea rcx, [rsi + 0x40]
call fcn.14004ac70
mov rcx, qword [r12]
add rcx, 0x28
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0xa0], eax
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x1400ab2b9
mov dword [rdx], eax
add qword [rcx + 8], 4
jmp 0x1400ab2c6
lea r8, [rsp + 0xa0]
call fcn.1400b85a0
btr r14d, 0xa
mov dword [rsp + 0x40], r14d
lea rcx, [rsp + 0xa40]
call fcn.14004b2f0
mov r14d, dword [rsp + 0x60]
jmp 0x1400ab3be
cmp r14d, dword [rsp + 0x68]
jne 0x1400ab2f9
cmp r15d, dword [rsp + 0x70]
je 0x1400ab3b9
mov r12, qword [rsp + 0x50]
nop
cmp r14d, r15d
jg 0x1400ab2dd
mov rsi, qword [r12]
mov r8d, r14d
lea rdx, [rsp + 0xe10]
lea rcx, [rsp + 0x850]
call fcn.140065640
nop
mov rdx, qword [rsi + 0x48]
cmp rdx, qword [rsi + 0x50]
je 0x1400ab360
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
xor ecx, ecx
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rcx
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
add qword [rsi + 0x48], 0x20
jmp 0x1400ab36d
mov r8, rax
lea rcx, [rsi + 0x40]
call fcn.14004cb70
nop
lea rcx, [rsp + 0xe10]
call fcn.14004b2f0
mov rcx, qword [r12]
add rcx, 0x28
mov dword [rsp + 0xa4], r14d
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x1400ab3a4
mov dword [rdx], r14d
add qword [rcx + 8], 4
inc r14d
jmp 0x1400ab300
lea r8, [rsp + 0xa4]
call fcn.1400b85a0
inc r14d
jmp 0x1400ab300
mov r12, qword [rsp + 0x50]
mov rax, qword [r12]
inc qword [rax + 0x58]
mov dword [rsp + 0x68], r14d
mov dword [rsp + 0x70], r15d
movzx r10d, byte [rsp + 0xfc]
mov r9, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xb0]
mov r14d, dword [rsp + 0x44]
movabs r11, 0x2aaaaaaaaaaaaaab
test r10b, r10b
je 0x1400ab406
cmp r8, r9
je 0x1400ad86a
mov rcx, r9
sub rcx, r8
mov rax, r11
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
lea rax, [r8 + 0x30]
jg 0x1400ab431
lea rax, [rsp + 0xd0]
cmp rbx, qword [rax + 8]
jne 0x1400ab456
cmp rbx, rdi
je 0x1400ab48f
add rbx, 2
or r14d, 0x104
mov dword [rsp + 0x44], r14d
mov r15d, dword [rsp + 0x48]
jmp 0x1400aaf50
test r10b, r10b
je 0x1400ab464
cmp r8, r9
je 0x1400ad86f
cmp edx, 2
lea rbx, [r8 + 0x30]
jg 0x1400ab475
lea rbx, [rsp + 0xd0]
mov rbx, qword [rbx + 8]
or r14d, 0x104
mov dword [rsp + 0x44], r14d
mov r15d, dword [rsp + 0x48]
jmp 0x1400aaf50
mov rbx, qword [rsp + 0x180]
mov r13, 0xffffffffffffffff
test rbx, rbx
je 0x1400ab4d7
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ab4d7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ab4d7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
jmp 0x1400ab4d7
mov r13, 0xffffffffffffffff
mov rdi, qword [rsp + 0x58]
cmp byte [rdi + 0xb], 0
je 0x1400ac275
mov eax, dword [rsp + 0x48]
test eax, eax
jle 0x1400ac275
and r14d, 0xfffffefb
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x9d0]
call fcn.1400730e0
nop
mov rbx, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0xae0], xmm0
xor esi, esi
mov qword [rsp + 0xaf0], rsi
mov qword [rsp + 0xaf8], rsi
lea r8d, [rsi + 0xb]
lea rdx, [0x1401656e0]
lea rcx, [rsp + 0xae0]
call fcn.14004c390
nop
lea rdx, [rsp + 0xae0]
lea rcx, [rsp + 0x9f0]
call fcn.14005c970
cmp rax, rbx
je 0x1400ab57d
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x1400ab571
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14004ca40
nop
mov rdx, qword [rsp + 0xaf8]
cmp rdx, 8
jb 0x1400ab5c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xae0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ab5c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad875
call fcn.14011460c
mov rdx, qword [r12]
mov rcx, qword [rdx + 0x10]
mov r8, rdx
cmp qword [rdx + 0x18], 8
jb 0x1400ab5da
mov r8, qword [rdx]
test rcx, rcx
je 0x1400ab60e
dec rcx
mov rax, r13
cmp rcx, 0xffffffffffffffff
cmovb rax, rcx
lea rcx, [r8 + rax*2]
cmp word [rcx], 0x5c
je 0x1400ab606
cmp rcx, r8
je 0x1400ab60e
sub rcx, 2
cmp word [rcx], 0x5c
jne 0x1400ab5f7
sub rcx, r8
sar rcx, 1
jmp 0x1400ab611
mov rcx, r13
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x830], xmm0
mov qword [rsp + 0x840], rsi
mov qword [rsp + 0x848], rsi
mov rax, qword [rdx + 0x10]
cmp rax, rcx
jb 0x1400ad87b
sub rax, rcx
mov r8, r13
cmp rax, 0xffffffffffffffff
cmovb r8, rax
cmp qword [rdx + 0x18], 8
jb 0x1400ab654
mov rdx, qword [rdx]
lea rdx, [rdx + rcx*2]
lea rcx, [rsp + 0x830]
call fcn.14004c390
nop
lea rdx, [rsp + 0x830]
cmp qword [rsp + 0x848], 8
setae r11b
mov r10, qword [rsp + 0x830]
cmovae rdx, r10
mov r9, qword [rsp + 0x840]
test r9, r9
je 0x1400ab981
lea rcx, [r9 - 1]
mov rax, r13
cmp rcx, 0xffffffffffffffff
cmovb rax, rcx
lea rbx, [rdx + rax*2]
cmp word [rbx], 0x2e
je 0x1400ab6c4
cmp rbx, rdx
je 0x1400ab981
sub rbx, 2
cmp word [rbx], 0x2e
jne 0x1400ab6b1
sub rbx, rdx
sar rbx, 1
cmp rbx, 0xffffffffffffffff
je 0x1400ab981
xorps xmm0, xmm0
movups xmmword [rsp + 0x9b0], xmm0
mov qword [rsp + 0x9c0], rsi
mov qword [rsp + 0x9c8], rsi
mov r8, rbx
cmp r9, rbx
cmovb r8, r9
lea rdx, [rsp + 0x830]
test r11b, r11b
cmovne rdx, r10
lea rcx, [rsp + 0x9b0]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xac0], xmm0
mov qword [rsp + 0xad0], rsi
mov qword [rsp + 0xad8], rsi
mov r8d, 0xb
lea rdx, [0x140165708]
lea rcx, [rsp + 0xac0]
call fcn.14004c390
nop
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x9f0]
call fcn.14005c970
lea rcx, [rsp + 0x9b0]
cmp rax, rcx
je 0x1400ab799
lea rdx, [rsp + 0x9b0]
cmp qword [rsp + 0x9c8], 8
cmovae rdx, qword [rsp + 0x9b0]
mov r8, qword [rsp + 0x9c0]
mov rcx, rax
call fcn.14004ca40
nop
mov rdx, qword [rsp + 0xad8]
cmp rdx, 8
jb 0x1400ab7e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xac0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ab7dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad881
call fcn.14011460c
mov rax, qword [rsp + 0x840]
cmp rax, rbx
jbe 0x1400ab96c
inc rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x930], xmm0
mov qword [rsp + 0x940], rsi
mov qword [rsp + 0x948], rsi
cmp rax, rbx
jb 0x1400ad887
sub rax, rbx
mov r8, r13
cmp rax, 0xffffffffffffffff
cmovb r8, rax
lea rax, [rsp + 0x830]
cmp qword [rsp + 0x848], 8
cmovae rax, qword [rsp + 0x830]
lea rdx, [rax + rbx*2]
lea rcx, [rsp + 0x930]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xaa0], xmm0
mov qword [rsp + 0xab0], rsi
mov qword [rsp + 0xab8], rsi
mov r12d, 0xa
mov r8d, r12d
lea rdx, [0x140165728]
lea rcx, [rsp + 0xaa0]
call fcn.14004c390
nop
lea rdx, [rsp + 0xaa0]
lea rcx, [rsp + 0x9f0]
call fcn.14005c970
lea rcx, [rsp + 0x930]
cmp rax, rcx
je 0x1400ab8d9
lea rdx, [rsp + 0x930]
cmp qword [rsp + 0x948], 8
cmovae rdx, qword [rsp + 0x930]
mov r8, qword [rsp + 0x940]
mov rcx, rax
call fcn.14004ca40
nop
mov rdx, qword [rsp + 0xab8]
cmp rdx, 8
jb 0x1400ab922
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xaa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ab91c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad88d
call fcn.14011460c
nop
mov rdx, qword [rsp + 0x948]
cmp rdx, 8
jb 0x1400ab972
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x930]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ab965
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad893
call fcn.14011460c
jmp 0x1400ab972
mov r12d, 0xa
lea rcx, [rsp + 0x9b0]
call fcn.14004b2f0
jmp 0x1400ab987
mov r12d, 0xa
lea rax, [rsp + 0x278]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x9d0]
lea rcx, [rsp + 0x278]
call fcn.14004aff0
nop
mov qword [rsp + 0x298], rsi
mov qword [rsp + 0x2a0], rsi
lea rax, [rsp + 0x298]
mov qword [rsp + 0x338], rax
lea rax, [rsp + 0x298]
mov qword [rsp + 0x340], rax
mov ecx, 0x60
call fcn.1401145d0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x298], rax
lea rdx, [rsp + 0x9f0]
lea rcx, [rsp + 0x298]
call fcn.14005d8b0
nop
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x278]
lea r8, [rsp + 0x1b8]
lea rdx, [rsp + 0x860]
lea rcx, [rsp + 0xa20]
call fcn.1400769b0
nop
lea rcx, [rsp + 0x860]
cmp qword [rsp + 0x878], 8
cmovae rcx, qword [rsp + 0x860]
lea r8, [rsp + 0xa20]
cmp qword [rsp + 0xa38], 8
cmovae r8, qword [rsp + 0xa20]
mov r9, qword [rsp + 0xa30]
mov rdx, r9
mov r10, qword [rsp + 0x870]
cmp r10, r9
cmovb rdx, r10
test rdx, rdx
je 0x1400abaa8
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x1400abab3
add rcx, 2
sub rdx, 1
jne 0x1400aba94
cmp r9, r10
jb 0x1400abab3
jbe 0x1400ac1c0
lea rdx, [rsp + 0xa20]
lea rcx, [rsp + 0x850]
call fcn.140064d80
mov r15, qword [rsp + 0x50]
cmp byte [rdi + 9], 0
je 0x1400abef0
lea r8, str..bak
mov rdx, qword [r15]
lea rcx, [rsp + 0x990]
call fcn.14004fff0
nop
cmp byte [rdi + 0xa], 0
je 0x1400abe6e
lea r8, str.grepWinNP3_backup_
mov rbx, qword [rsp + 0x140]
mov rdx, rbx
lea rcx, [rsp + 0x8d0]
call fcn.14004fff0
nop
mov rax, qword [r15]
mov rcx, qword [rbx + 0x10]
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0xb00], xmm0
mov qword [rsp + 0xb10], rsi
mov qword [rsp + 0xb18], rsi
mov rdx, qword [rax + 0x10]
cmp rdx, rcx
jb 0x1400ad899
sub rdx, rcx
mov r8, r13
cmp rdx, 0xffffffffffffffff
cmovb r8, rdx
cmp qword [rax + 0x18], 8
jb 0x1400abb63
mov rax, qword [rax]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0xb00]
call fcn.14004c390
nop
lea rdx, [rsp + 0xb00]
lea rcx, [rsp + 0x8d0]
call fcn.14004dfb0
nop
lea rcx, [rsp + 0xb00]
call fcn.14004b2f0
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0xe30]
call fcn.14005ee00
mov rbx, rax
lea rax, [rsp + 0x8d0]
cmp rax, rbx
je 0x1400abc4b
mov rdx, qword [rsp + 0x8e8]
cmp rdx, 8
jb 0x1400abc09
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x8d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400abc04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad89e
call fcn.14011460c
mov qword [rsp + 0x8e0], rsi
mov qword [rsp + 0x8e8], 7
mov word [rsp + 0x8d0], si
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x8d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x8e0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea rcx, [rsp + 0xe30]
call fcn.14004b2f0
lea rcx, [rsp + 0x8d0]
call fcn.14005f660
mov rdx, qword [r15]
lea rcx, [rsp + 0xe50]
call fcn.14005f130
mov r13, rax
mov r14, qword [rsp + 0x8e0]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r14
cmp rax, 1
jb 0x1400ad8a4
lea r15, [rsp + 0x8d0]
cmp qword [rsp + 0x8e8], 8
cmovae r15, qword [rsp + 0x8d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x950], xmm0
mov qword [rsp + 0x960], rsi
mov qword [rsp + 0x968], rsi
lea rsi, [r14 + 1]
mov ebx, 7
lea rdi, [rsp + 0x950]
cmp rsi, rbx
jbe 0x1400abd1a
mov rbx, rsi
or rbx, 7
cmp rbx, rcx
jbe 0x1400abcf6
mov rbx, rcx
jmp 0x1400abcfe
cmp rbx, 0xa
cmovb rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x950]
call fcn.14004b1e0
mov rdi, rax
mov qword [rsp + 0x950], rax
mov qword [rsp + 0x960], rsi
mov qword [rsp + 0x968], rbx
lea rbx, [r14 + r14]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140118050
movzx eax, word [0x140163810]
mov word [rdi + rbx], ax
xor eax, eax
mov word [rdi + rsi*2], ax
mov r9, r13
lea r8, [rsp + 0x950]
lea rcx, [rsp + 0xa80]
call fcn.1400b5a60
mov rdx, qword [rsp + 0x9a8]
cmp rdx, 8
jb 0x1400abdad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x990]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400abda8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad8aa
call fcn.14011460c
movups xmm0, xmmword [rsp + 0xa80]
movups xmmword [rsp + 0x990], xmm0
movups xmm1, xmmword [rsp + 0xa90]
movups xmmword [rsp + 0x9a0], xmm1
xor esi, esi
mov qword [rsp + 0xa90], rsi
mov qword [rsp + 0xa98], 7
mov word [rsp + 0xa80], si
lea rcx, [rsp + 0xa80]
call fcn.14004b2f0
nop
mov rdx, qword [rsp + 0x968]
cmp rdx, 8
jb 0x1400abe42
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x950]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400abe3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad8b0
call fcn.14011460c
nop
lea rcx, [rsp + 0xe50]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x8d0]
call fcn.14004b2f0
mov r15, qword [rsp + 0x50]
mov r13, 0xffffffffffffffff
mov rdi, qword [rsp + 0x58]
lea rbx, [0x14018c3c0]
mov qword [rsp + 0x330], rbx
mov rcx, rbx
call fcn.1400ecdd0
test eax, eax
jne 0x1400ad8b6
lea r8, [rsp + 0x990]
lea rdx, [rsp + 0x690]
lea rcx, [0x14018c410]
call fcn.140063750
nop
mov rcx, rbx
call fcn.1400ecdf4
lea rdx, [rsp + 0x990]
cmp qword [rsp + 0x9a8], 8
cmovae rdx, qword [rsp + 0x990]
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x1400abed9
mov rcx, qword [rcx]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
nop
lea rcx, [rsp + 0x990]
call fcn.14004b2f0
movzx edi, byte [rdi + 7]
mov rdx, qword [r15]
cmp qword [rdx + 0x18], 8
jb 0x1400abf01
mov rdx, qword [rdx]
movzx r8d, dil
lea rcx, [rsp + 0x850]
call fcn.140063a30
test al, al
jne 0x1400ac1c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1400ac1c0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x190], rsi
test dil, dil
je 0x1400abfb0
mov rcx, qword [r15]
call fcn.14004b370
mov rcx, rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1e8], rax
cmp rax, 0xffffffffffffffff
je 0x1400abfa3
lea r9, [rsp + 0x190]
lea r8, [rsp + 0x128]
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rcx, [rsp + 0x1e8]
call fcn.140063720
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x1400abfbd
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
mov edx, eax
and edx, 0xfffffff8
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x1400abfd7
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x1400abfea
mov rcx, qword [rcx]
cmp qword [rsp + 0x850], 0
jne 0x1400abffd
xor r14b, r14b
xor r12d, r12d
jmp 0x1400ac077
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r12 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ac036
xor r14b, r14b
jmp 0x1400ac077
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x1f8]
mov r8d, dword [rsp + 0x858]
mov rdx, qword [rsp + 0x850]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
test eax, eax
jne 0x1400ac06e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r14b, r14b
jmp 0x1400ac077
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14b, 1
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x1400ac084
mov rcx, qword [rcx]
mov edx, esi
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test dil, dil
je 0x1400ac129
xor sil, sil
mov edi, 5
nop dword [rax]
test edi, edi
js 0x1400ac129
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x1400ac0b5
mov rcx, qword [rcx]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400ac112
lea r9, [rsp + 0x190]
lea r8, [rsp + 0x128]
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
setne sil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
dec edi
test sil, sil
jne 0x1400ac129
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400ac0a0
test r14b, r14b
jne 0x1400ac1c0
lea rcx, [rsp + 0xa20]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x830]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x9d0]
call fcn.140075ca0
nop
lea rcx, [rsp + 0xb0]
call fcn.140075d60
nop
lea rcx, [rsp + 0x1b8]
call fcn.140075df0
nop
lea rcx, [rsp + 0x5f0]
call fcn.140075d60
nop
lea rcx, [rsp + 0x850]
call fcn.140063990
nop
lea rcx, [rsp + 0x910]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x8f0]
call fcn.14004b2f0
nop
mov rcx, r15
call fcn.140075df0
mov eax, r13d
jmp 0x1400ad820
lea rcx, [rsp + 0xa20]
call fcn.14004b2f0
nop
mov rdx, qword [rsp + 0x848]
cmp rdx, 8
jb 0x1400ac216
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x830]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ac211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad8be
call fcn.14011460c
xor eax, eax
mov qword [rsp + 0x840], rax
mov qword [rsp + 0x848], 7
mov word [rsp + 0x830], ax
mov r8, qword [rsp + 0x9f0]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x9f0]
lea rcx, [rsp + 0x9f0]
call fcn.14004e860
mov edx, 0x60
mov rcx, qword [rsp + 0x9f0]
call fcn.14011460c
lea rcx, [rsp + 0x9d0]
call fcn.14004b2f0
nop
mov rbx, qword [rsp + 0xf0]
test rbx, rbx
je 0x1400ac2ad
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ac2ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ac2ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lea rcx, [rsp + 0xb0]
call fcn.140076000
nop
mov rbx, qword [rsp + 0x1c0]
test rbx, rbx
je 0x1400ac2f4
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ac2f4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ac2f4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x630]
test rcx, rcx
je 0x1400ac339
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400ac339
mov rbx, qword [rsp + 0x630]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ac339
mov rcx, qword [rsp + 0x630]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rsp + 0x5f0]
call fcn.140076000
mov r13, qword [rsp + 0x50]
mov r15, 0xffffffffffffffff
jmp 0x1400ad5a0
test ecx, ecx
jne 0x1400ac3a6
mov rax, qword [rdi]
mov byte [rax + 0x6c], 1
lea rcx, [rsp + 0x850]
call fcn.140063990
nop
lea rcx, [rsp + 0x910]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x8f0]
call fcn.14004b2f0
nop
mov rcx, rdi
jmp 0x1400ad816
cmp ecx, 1
jne 0x1400ac3d1
cmp byte [r9 + 3], 0
jne 0x1400ac3d1
cmp byte [r9], 0
jne 0x1400ac3d1
test sil, sil
jne 0x1400ac3d1
mov r15, 0xffffffffffffffff
mov esi, r15d
mov r13, qword [rsp + 0x50]
jmp 0x1400ad5a4
mov r13, qword [rsp + 0x50]
mov rax, qword [r13]
mov dword [rax + 0x60], ecx
mov rdx, qword [r13]
lea rcx, [rsp + 0x970]
call fcn.140065cf0
nop
mov rdx, r15
cmp dword [rsp + 0x4c], 2
jne 0x1400ac40c
lea rcx, [rsp + 0xe90]
call fcn.140065cf0
nop
or ebx, 4
jmp 0x1400ac41c
lea rcx, [rsp + 0xe70]
call fcn.140065bf0
or ebx, 8
mov dword [rsp + 0x40], ebx
mov rdx, rax
lea rcx, [rsp + 0xa00]
call fcn.140058560
nop
test bl, 8
je 0x1400ac44b
and ebx, 0xfffffff7
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0xe70]
call fcn.140058590
nop
test bl, 4
je 0x1400ac464
and ebx, 0xfffffffb
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0xe90]
call fcn.140058590
test r14b, r14b
jne 0x1400ac4b9
lea rcx, [rsp + 0xa00]
call fcn.140063110
mov rdx, r15
lea rcx, [rsp + 0xeb0]
call fcn.140065bf0
nop
mov rdx, rax
lea rcx, [rsp + 0xa00]
call fcn.14007b210
nop
lea rcx, [rsp + 0xeb0]
call fcn.140058590
lea rdx, [0x1401686dc]
lea rcx, [rsp + 0xa00]
call fcn.140075ed0
lea rcx, [rsp + 0x6a0]
call fcn.140075dc0
nop
mov ebx, 0x2000040
mov eax, 0x2000000
mov rcx, qword [rsp + 0x58]
cmp byte [rcx + 6], 0
cmovne ebx, eax
mov dword [rsp + 0x44], ebx
mov r14d, 0x100000
cmp byte [rcx + 5], 0
mov edi, 0
cmovne r14d, edi
mov dword [rsp + 0x60], r14d
mov r8d, r14d
lea rdx, [rsp + 0xa00]
lea rcx, [rsp + 0x198]
call fcn.1400b4160
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rdi
xor sil, sil
lea rcx, [rsp + 0x970]
call fcn.140058600
mov rdx, rax
lea rcx, [rsp + 0xcb0]
call fcn.140054b10
nop
lea rdx, [rsp + 0xcb0]
lea rcx, [rsp + 0x2a8]
call fcn.1400af720
nop
lea rcx, [rsp + 0xcb0]
call fcn.140058590
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x570]
call fcn.1400af840
nop
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x2a8]
call fcn.1400b41b0
nop
lea rcx, [rsp + 0x410]
call fcn.1400af6c0
nop
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x2c8]
call fcn.1400af840
lea rax, [rsp + 0x2c8]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x218]
call fcn.1400af840
lea rax, [rsp + 0x218]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x5b0]
call fcn.1400af840
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x5d0]
call fcn.1400af840
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x4b0]
call fcn.1400af840
lea rax, [rsp + 0x5b0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, [rsp + 0x198]
lea r8, [rsp + 0x410]
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x4b0]
call fcn.1400b74d0
movzx edi, al
mov rbx, qword [rsp + 0x220]
mov r14, 0xffffffffffffffff
test rbx, rbx
je 0x1400ac6ad
mov edx, r14d
lock xadd dword [rbx + 8], edx
cmp edx, 1
jne 0x1400ac6ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ac6ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rbx, qword [rsp + 0x2d0]
test rbx, rbx
je 0x1400ac6e6
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ac6e6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ac6e6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
test dil, dil
je 0x1400ac830
movzx eax, byte [0x14018c33e]
test al, al
jne 0x1400ac830
inc dword [rsp + 0x48]
movzx eax, byte [0x14018c33f]
test al, al
jne 0x1400ac830
mov r8, qword [rsp + 0x410]
mov rcx, qword [rsp + 0x418]
cmp byte [rsp + 0x4a4], al
je 0x1400ac733
cmp r8, rcx
je 0x1400ad8c4
sub rcx, r8
movabs r14, 0xe38e38e38e38e39
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
jle 0x1400ac762
add r8, 0x90
jmp 0x1400ac76a
lea r8, [rsp + 0x448]
mov eax, dword [r8 + 0x18]
sub eax, dword [rsp + 0x588]
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x118]
cmp rdx, qword [rsp + 0x120]
je 0x1400ac79e
mov dword [rdx], eax
add rdx, 4
mov qword [rsp + 0x118], rdx
jmp 0x1400ac7b3
lea r8, [rsp + 0xa8]
lea rcx, [rsp + 0x110]
call fcn.1400b85a0
mov rax, qword [r13]
inc qword [rax + 0x58]
mov r8, qword [rsp + 0x410]
mov rcx, qword [rsp + 0x418]
cmp byte [rsp + 0x4a4], 0
je 0x1400ac7de
cmp r8, rcx
je 0x1400ad8c9
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
lea rdx, [r8 + 0x90]
jg 0x1400ac809
lea rdx, [rsp + 0x448]
add rdx, 0x20
lea rcx, [rsp + 0x2a8]
call fcn.1400af7a0
mov ebx, dword [rsp + 0x44]
or ebx, 0x104
mov dword [rsp + 0x44], ebx
mov sil, 1
jmp 0x1400ac5b0
lea rcx, [rsp + 0x410]
call fcn.1400af620
nop
lea rcx, [rsp + 0x590]
call fcn.140091e20
nop
lea rcx, [rsp + 0x570]
call fcn.140091e20
nop
lea rcx, [rsp + 0x2a8]
call fcn.140091e20
cmp dword [rsp + 0x4c], 1
jne 0x1400acbb8
mov rax, qword [rsp + 0x58]
cmp byte [rax + 0xb], 0
jne 0x1400acbb8
mov r8d, dword [rsp + 0x60]
mov rdx, r15
lea rcx, [rsp + 0x348]
call fcn.140076960
nop
lea rcx, [rsp + 0x970]
call fcn.140058600
mov rdx, rax
lea rcx, [rsp + 0xd50]
call fcn.140054b10
nop
lea rdx, [rsp + 0xd50]
lea rcx, [rsp + 0x258]
call fcn.1400af720
nop
lea rcx, [rsp + 0xd50]
call fcn.140058590
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x4d0]
call fcn.1400af840
nop
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x258]
call fcn.1400b41b0
nop
lea rcx, [rsp + 0x370]
call fcn.1400af6c0
nop
mov r15d, dword [rsp + 0x44]
nop word [rax + rax]
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x2e8]
call fcn.1400af840
lea rax, [rsp + 0x2e8]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x238]
call fcn.1400af840
lea rax, [rsp + 0x238]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x550]
call fcn.1400af840
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x530]
call fcn.1400af840
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x510]
call fcn.1400af840
lea rax, [rsp + 0x550]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x198]
lea r8, [rsp + 0x370]
lea rdx, [rsp + 0x530]
lea rcx, [rsp + 0x510]
call fcn.1400b74d0
movzx edi, al
mov rbx, qword [rsp + 0x240]
test rbx, rbx
je 0x1400aca17
mov edx, r14d
lock xadd dword [rbx + 8], edx
cmp edx, 1
jne 0x1400aca17
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400aca17
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rbx, qword [rsp + 0x2f0]
test rbx, rbx
je 0x1400aca50
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400aca50
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400aca50
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
test dil, dil
je 0x1400acb71
movzx eax, byte [0x14018c33e]
test al, al
jne 0x1400acb71
inc dword [rsp + 0x48]
movzx eax, byte [0x14018c33f]
test al, al
jne 0x1400acb71
mov r8, qword [rsp + 0x370]
mov rcx, qword [rsp + 0x378]
cmp byte [rsp + 0x404], al
je 0x1400aca9d
cmp r8, rcx
je 0x1400ad8cf
sub rcx, r8
movabs rbx, 0xe38e38e38e38e39
mov rax, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
jle 0x1400acacc
add r8, 0x90
jmp 0x1400acad4
lea r8, [rsp + 0x3a8]
mov eax, dword [r8 + 0x18]
sub eax, dword [rsp + 0x4e8]
mov dword [rsp + 0xac], eax
lea rdx, [rsp + 0xac]
lea rcx, [rsp + 0x110]
call fcn.1400b1240
mov rax, qword [r13]
inc qword [rax + 0x58]
mov r8, qword [rsp + 0x370]
mov rcx, qword [rsp + 0x378]
cmp byte [rsp + 0x404], 0
je 0x1400acb26
cmp r8, rcx
je 0x1400ad8d4
sub rcx, r8
mov rax, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, 2
lea rdx, [r8 + 0x90]
jg 0x1400acb51
lea rdx, [rsp + 0x3a8]
add rdx, 0x20
lea rcx, [rsp + 0x258]
call fcn.1400af7a0
or r15d, 0x104
mov sil, 1
jmp 0x1400ac920
lea rcx, [rsp + 0x370]
call fcn.1400af620
nop
lea rcx, [rsp + 0x4f0]
call fcn.140091e20
nop
lea rcx, [rsp + 0x4d0]
call fcn.140091e20
nop
lea rcx, [rsp + 0x258]
call fcn.140091e20
nop
lea rcx, [rsp + 0x348]
call fcn.140075df0
jmp 0x1400acbbd
mov r15d, dword [rsp + 0x44]
test sil, sil
je 0x1400ad554
movzx eax, byte [0x14018c33e]
test al, al
jne 0x1400ad554
test r12b, r12b
jne 0x1400ace1d
cmp dword [rsp + 0x4c], 1
je 0x1400ace1d
movzx eax, byte [0x14018c33f]
test al, al
jne 0x1400ace1d
call fcn.1400affb0
mov qword [rsp + 0x108], r14
xor r12d, r12d
mov edi, r12d
nop dword [rax + rax]
test edi, edi
je 0x1400acc1f
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [r13]
call fcn.14004b370
mov rcx, rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1f0], rax
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x108]
call fcn.1400af8e0
inc edi
mov rbx, qword [rsp + 0x108]
cmp rbx, 0xffffffffffffffff
jne 0x1400acc89
cmp edi, 5
jl 0x1400acc10
jmp 0x1400ace0e
mov edx, 0x1000
lea rcx, [rsp + 0x100]
call fcn.14005d750
nop
mov dword [rsp + 0x84], r12d
mov qword [rsp + 0x88], r12
nop dword [rax]
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x84]
mov r8d, 0x1000
mov rdx, qword [rsp + 0x100]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400acda6
cmp dword [rsp + 0x84], 0
je 0x1400acda6
mov edi, r12d
nop dword [rax]
mov edx, dword [rsp + 0x84]
cmp edi, edx
jae 0x1400accb0
mov ecx, edi
mov rax, qword [rsp + 0x100]
movzx r8d, byte [rcx + rax]
cmp r8b, 0xd
jne 0x1400acd7b
inc edi
mov r8, qword [rsp + 0x88]
inc r8
mov qword [rsp + 0x88], r8
cmp edi, edx
jae 0x1400accb0
mov rsi, qword [0x14018c3b8]
cmp byte [rdi + rax], 0xa
jne 0x1400acd51
lea rdx, [rsp + 0x88]
call fcn.1400afe70
mov dword [rax], esi
inc qword [rsp + 0x88]
inc edi
jmp 0x1400accf0
lea rax, [r8 - 1]
mov qword [rsp + 0x208], rax
lea rdx, [rsp + 0x208]
call fcn.1400afe70
mov dword [rax], esi
inc qword [rsp + 0x88]
inc edi
jmp 0x1400accf0
cmp r8b, 0xa
jne 0x1400acd97
mov rsi, qword [0x14018c3b8]
lea rdx, [rsp + 0x88]
call fcn.1400afe70
mov dword [rax], esi
inc qword [rsp + 0x88]
inc edi
jmp 0x1400accf0
mov r9, qword [rsp + 0x110]
mov r10, qword [rsp + 0x118]
cmp r9, r10
je 0x1400ace00
nop dword [rax + rax]
mov eax, dword [r9]
mov qword [rsp + 0x210], rax
lea r8, [rsp + 0x210]
lea rdx, [rsp + 0x1c8]
call fcn.1400aff70
mov rdx, qword [rsp + 0x1c8]
cmp rdx, qword [0x14018c3b0]
je 0x1400acdf7
mov eax, dword [rdx + 0x28]
mov dword [r9], eax
add r9, 4
cmp r9, r10
jne 0x1400acdc0
lea rcx, [rsp + 0x100]
call fcn.14004c240
nop
lea rcx, [rsp + 0x108]
call fcn.140063720
jmp 0x1400ace20
xor r12d, r12d
mov rcx, qword [r13]
add rcx, 0x28
lea rdx, [rsp + 0x110]
call fcn.1400b1210
mov rdi, qword [rsp + 0x58]
cmp byte [rdi + 0xb], 0
je 0x1400ad554
lea r8, str..bak
mov rdx, qword [r13]
lea rcx, [rsp + 0xb20]
call fcn.14004fff0
nop
movzx r14d, byte [rdi + 9]
test r14b, r14b
je 0x1400acfd2
cmp byte [rdi + 0xa], 0
je 0x1400acf9d
lea r8, str.grepWinNP3_backup_
mov rbx, qword [rsp + 0x140]
mov rdx, rbx
lea rcx, [rsp + 0xa60]
call fcn.14004fff0
nop
mov r8, qword [rbx + 0x10]
inc r8
mov r9, 0xffffffffffffffff
lea rdx, [rsp + 0xed0]
mov rcx, qword [r13]
call fcn.14004ef30
nop
mov rdx, rax
lea rcx, [rsp + 0xa60]
call fcn.14004dfb0
nop
lea rcx, [rsp + 0xed0]
call fcn.14004b2f0
lea rdx, [rsp + 0xa60]
lea rcx, [rsp + 0xef0]
call fcn.14005ee00
mov rdx, rax
lea rcx, [rsp + 0xa60]
call fcn.14004c2b0
lea rcx, [rsp + 0xef0]
call fcn.14004b2f0
lea rcx, [rsp + 0xa60]
call fcn.14005f660
mov rdx, qword [r13]
lea rcx, [rsp + 0xff0]
call fcn.14005f130
mov rbx, rax
lea r8, [0x140163810]
lea rdx, [rsp + 0xa60]
lea rcx, [rsp + 0xf10]
call fcn.14004fff0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xf50]
call fcn.1400b3be0
mov rdx, rax
lea rcx, [rsp + 0xb20]
call fcn.14004c2b0
lea rcx, [rsp + 0xf50]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xf10]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xff0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xa60]
call fcn.14004b2f0
lea rcx, [rsp + 0xb20]
call fcn.14004b370
mov rbx, rax
mov rcx, qword [r13]
call fcn.14004b370
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rdx, [rsp + 0xb20]
call fcn.140093f30
and r15d, 0xfffffefb
mov dword [rsp + 0x44], r15d
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0xf30]
call fcn.140065bf0
nop
mov rdx, rax
lea rcx, [rsp + 0xb60]
call fcn.140091e70
nop
lea rcx, [rsp + 0xf30]
call fcn.140058590
mov rdx, qword [r13]
lea rcx, [rsp + 0xf70]
call fcn.140065bf0
mov rbx, rax
lea rdx, str._filepath
lea rcx, [rsp + 0xc30]
call fcn.140054b10
nop
mov r8, rbx
lea rdx, [rsp + 0xc30]
lea rcx, [rsp + 0xb60]
call fcn.140092710
nop
lea rcx, [rsp + 0xc30]
call fcn.140058590
nop
lea rcx, [rsp + 0xf70]
call fcn.140058590
mov edx, 0x5c
mov rcx, qword [r13]
call fcn.140062a40
lea r8, [rax + 1]
mov r15, 0xffffffffffffffff
mov r9, r15
lea rdx, [rsp + 0xf90]
mov rcx, qword [r13]
call fcn.14004ef30
nop
mov rdx, rax
lea rcx, [rsp + 0xb40]
call fcn.140065bf0
nop
lea rcx, [rsp + 0xf90]
call fcn.14004b2f0
lea rcx, [rsp + 0xb40]
call fcn.1400b1370
mov rbx, rax
cmp rax, r15
je 0x1400ad1b3
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0xb40]
call fcn.1400b1310
nop
lea rdx, str._filename
lea rcx, [rsp + 0xbb0]
call fcn.140054b10
nop
lea r8, [rsp + 0xc10]
lea rdx, [rsp + 0xbb0]
lea rcx, [rsp + 0xb60]
call fcn.140092710
nop
lea rcx, [rsp + 0xbb0]
call fcn.140058590
cmp qword [rsp + 0x920], rbx
jbe 0x1400ad1a6
lea r8, [rbx + 1]
mov r9, r15
lea rdx, [rsp + 0xbf0]
lea rcx, [rsp + 0xb40]
call fcn.1400b1310
nop
lea rdx, str._fileext
lea rcx, [rsp + 0xbd0]
call fcn.140054b10
nop
lea r8, [rsp + 0xbf0]
lea rdx, [rsp + 0xbd0]
lea rcx, [rsp + 0xb60]
call fcn.140092710
nop
lea rcx, [rsp + 0xbd0]
call fcn.140058590
nop
lea rcx, [rsp + 0xbf0]
call fcn.140058590
nop
lea rcx, [rsp + 0xc10]
call fcn.140058590
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x158], r12
mov qword [rsp + 0x150], r12
movzx esi, byte [rdi + 7]
test sil, sil
je 0x1400ad240
mov rcx, qword [r13]
call fcn.14004b370
mov rcx, rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1d0], rax
cmp rax, 0xffffffffffffffff
je 0x1400ad233
lea r9, [rsp + 0x150]
lea r8, [rsp + 0x158]
lea rdx, [rsp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rcx, [rsp + 0x1d0]
call fcn.140063720
lea rdx, [rsp + 0x970]
test r14b, r14b
je 0x1400ad264
lea rcx, [rsp + 0xfd0]
call fcn.140054b50
nop
mov ebx, dword [rsp + 0x40]
or ebx, 0x10
jmp 0x1400ad278
lea rcx, [rsp + 0xfb0]
call fcn.1400b41e0
mov ebx, dword [rsp + 0x40]
or ebx, 0x20
mov dword [rsp + 0x40], ebx
mov rdx, rax
lea rcx, [rsp + 0xb90]
call fcn.140058560
nop
test bl, 0x20
je 0x1400ad2a7
and ebx, 0xffffffdf
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0xfb0]
call fcn.140058590
nop
test bl, 0x10
je 0x1400ad2c0
and ebx, 0xffffffef
mov dword [rsp + 0x40], ebx
lea rcx, [rsp + 0xfd0]
call fcn.140058590
test r14b, r14b
jne 0x1400ad2fe
lea r8, str..grepwinreplaced
mov rdx, qword [r13]
lea rcx, [rsp + 0x1010]
call fcn.14004fff0
nop
mov rdx, rax
call fcn.140093f30
nop
lea rcx, [rsp + 0x1010]
call fcn.14004b2f0
lea rcx, [rsp + 0x970]
jmp 0x1400ad31e
lea rdx, [rsp + 0xb20]
lea rcx, [rsp + 0x1030]
call fcn.140065cf0
nop
or ebx, 0x40
mov dword [rsp + 0x40], ebx
mov rcx, rax
call fcn.140058600
mov qword [rsp + 0x1d8], rax
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x1a8]
call fcn.1400b4310
nop
test bl, 0x40
je 0x1400ad353
lea rcx, [rsp + 0x1030]
call fcn.140058590
lea rcx, [rsp + 0xb90]
call fcn.140058600
mov rdx, rax
lea rcx, [rsp + 0x720]
call fcn.1400afb40
nop
mov qword [rsp + 0x140], r12
lea rax, [rsp + 0x720]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x6f0]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0xb60]
lea rcx, [rsp + 0x6f0]
call fcn.1400ad930
mov rdi, rax
lea rcx, [rsp + 0x1a8]
call fcn.140116280
mov rbx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140115fc0
movaps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x360], xmm0
mov ecx, dword [rsp + 0x44]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rdi
lea rcx, [rsp + 0x198]
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8, rax
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x680]
call fcn.1400b4350
lea rcx, [rsp + 0x720]
call fcn.1400af9a0
lea rcx, [rsp + 0x1a8]
call fcn.140116240
test r14b, r14b
jne 0x1400ad45f
lea rcx, [rsp + 0x970]
call fcn.140058600
mov rbx, rax
lea rcx, [rsp + 0xb90]
call fcn.140058600
mov r8d, 1
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
test sil, sil
je 0x1400ad4ff
xor bl, bl
mov edi, 5
nop
test edi, edi
js 0x1400ad4ff
mov rcx, qword [r13]
call fcn.14004b370
mov rcx, rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1e0], rax
cmp rax, 0xffffffffffffffff
je 0x1400ad4dc
lea r9, [rsp + 0x150]
lea r8, [rsp + 0x158]
lea rdx, [rsp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
setne bl
lea rcx, [rsp + 0x1e0]
call fcn.140063720
dec edi
test bl, bl
jne 0x1400ad4ff
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400ad470
lea rcx, [rsp + 0x720]
call fcn.14009fa10
nop
lea rcx, [rsp + 0x1a8]
call fcn.140091e20
nop
lea rcx, [rsp + 0xb90]
call fcn.140058590
nop
lea rcx, [rsp + 0xb40]
call fcn.140058590
nop
lea rcx, [rsp + 0xb60]
call fcn.1400ad8e0
nop
lea rcx, [rsp + 0xb20]
call fcn.14004b2f0
jmp 0x1400ad55b
mov r15, 0xffffffffffffffff
lea rcx, [rsp + 0x110]
call fcn.140080580
nop
lea rcx, [rsp + 0x198]
call fcn.140075df0
nop
lea rcx, [rsp + 0x6a0]
call fcn.140075d60
nop
lea rcx, [rsp + 0xa00]
call fcn.140058590
nop
lea rcx, [rsp + 0x970]
call fcn.140058590
mov esi, dword [rsp + 0x48]
movzx eax, byte [0x14018c33f]
test al, al
je 0x1400ad6bc
xor ebx, ebx
mov edi, ebx
test esi, esi
setle dil
mov rcx, qword [rsp + 0x850]
mov qword [rsp + 0x850], rbx
test rcx, rcx
je 0x1400ad5d7
call fcn.14011460c
lea rcx, [rsp + 0x8a0]
call fcn.14004b2f0
mov rcx, qword [rsp + 0x880]
test rcx, rcx
je 0x1400ad646
mov rax, qword [rsp + 0x890]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ad62d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad8da
call fcn.14011460c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x880], xmm0
mov qword [rsp + 0x890], rbx
lea rcx, [rsp + 0x860]
call fcn.14004b2f0
mov rcx, qword [rsp + 0x850]
test rcx, rcx
je 0x1400ad666
call fcn.14011460c
nop
lea rcx, [rsp + 0x910]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x8f0]
call fcn.14004b2f0
nop
mov rbx, qword [r13 + 8]
test rbx, rbx
je 0x1400ad6b5
mov eax, r15d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ad6b5
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx]
lock xadd dword [rbx + 0xc], r15d
cmp r15d, 1
jne 0x1400ad6b5
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 8]
mov eax, edi
jmp 0x1400ad820
mov rcx, qword [rsp + 0x850]
xor ebx, ebx
mov qword [rsp + 0x850], rbx
test rcx, rcx
je 0x1400ad6d8
call fcn.14011460c
lea rcx, [rsp + 0x8a0]
call fcn.14004b2f0
mov rcx, qword [rsp + 0x880]
test rcx, rcx
je 0x1400ad747
mov rax, qword [rsp + 0x890]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ad72e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ad8da
call fcn.14011460c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x880], xmm0
mov qword [rsp + 0x890], rbx
lea rcx, [rsp + 0x860]
call fcn.14004b2f0
mov rcx, qword [rsp + 0x850]
test rcx, rcx
je 0x1400ad767
call fcn.14011460c
nop
lea rcx, [rsp + 0x910]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x8f0]
call fcn.14004b2f0
nop
mov rbx, qword [r13 + 8]
test rbx, rbx
je 0x1400ad7b6
mov eax, r15d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ad7b6
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx]
lock xadd dword [rbx + 0xc], r15d
cmp r15d, 1
jne 0x1400ad7b6
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 8]
mov eax, esi
jmp 0x1400ad820
call fcn.140075df0
mov eax, 0xffffffff
mov rcx, qword [rsp + 0x1280]
xor rcx, rsp
call fcn.1401145b0
add rsp, 0x1290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.140075ef0
nop
call fcn.140075ef0
call fcn.140075ef0
nop
call fcn.140075ef0
call fcn.140075ef0
call fcn.140075ef0
nop
call fcn.140075ef0
nop
call fcn.140075ef0
call fcn.140075ef0
nop
call fcn.14011c9a4
int3
call fcn.14004e0d0
nop
call fcn.14011c9a4
int3
call fcn.14004e0d0
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14004e0d0
call fcn.14011c9a4
nop
call fcn.14004b290
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
mov ecx, eax
call fcn.1400ecad0
nop
call fcn.14011c9a4
nop
call fcn.140075ef0
call fcn.140075ef0
nop
call fcn.140075ef0
call fcn.140075ef0
nop
call fcn.14011c9a4
int3