Function at 0x6d3c70
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
mov ebx, dword [rcx + 0x168]
mov ebp, ebx
and ebp, 3
mov rsi, rcx
test ebx, 0x20000000
je 0x6d1808
mov dword [rsp + 0x60], ebx
mov qword [rsp + 0x78], 0
cmp ebp, 1
je 0x6d19b0
test bl, 8
jne 0x6d19c3
xor ecx, ecx
call sub.msvcrt.dll__umask
mov ecx, eax
mov edi, eax
call sub.msvcrt.dll__umask
cmp ebp, 3
je 0x6d18d3
lea rax, [0x00958708]
mov r10d, dword [rax + rbp*4]
jmp 0x6d183c
xor ecx, ecx
call sub.msvcrt.dll__umask
mov ecx, eax
mov edi, eax
call sub.msvcrt.dll__umask
cmp ebp, 3
je 0x6d18d3
lea rax, [0x00958708]
mov r10d, dword [rax + rbp*4]
mov eax, r10d
and eax, 0xfffffffd
or eax, 4
test bl, 8
cmovne r10d, eax
mov eax, ebx
and eax, 0x10000000
cmp eax, 1
mov eax, ebx
sbb r8d, r8d
and eax, 0x700
and r8d, 7
cmp eax, 0x300
je 0x6d1a70
jg 0x6d1a00
cmp eax, 0x100
je 0x6d1a40
cmp eax, 0x200
jne 0x6d19e4
mov edx, 5
mov eax, pe_nt_image_headers64
test bh, 1
je 0x6d18a0
not edi
and edi, dword [rsi + 0x158]
xor eax, eax
and edi, 0x80
sete al
sub eax, 0xffffff80
test bl, 0x40
je 0x6d18b1
or eax, 0x4000100
or r10d, 0x10000
mov ecx, eax
or ch, 1
test bh, 0x10
cmovne eax, ecx
mov ecx, ebx
and ecx, 0x30
cmp ecx, 0x10
je 0x6d18f8
cmp ecx, 0x20
je 0x6d1a50
test ecx, ecx
je 0x6d18fd
mov qword [rsi + 0x88], 0xfffffffffffff019
mov dword [rsi + 0x14c], 0x57
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
or eax, 0x10000000
test ebx, 0x2000000
je 0x6d191a
test r10b, 4
je 0x6d1915
test r10b, 2
je 0x6d18d3
and r10d, 0xfffffffb
or eax, 0x20000000
mov ecx, ebx
and ecx, 0xc000000
lea r9d, [rcx - 0x4000000]
and r9d, 0xf8000000
je 0x6d1a60
test ecx, ecx
jne 0x6d18d3
or eax, 0x2000000
mov dword [rsp + 0x20], edx
xor r9d, r9d
mov edx, r10d
mov qword [rsp + 0x30], 0
mov rcx, qword [rsi + 0x150]
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d1c50
mov edx, ebx
mov rcx, rax
call qword [sym.imp.msvcrt.dll__open_osfhandle]
mov edi, eax
test eax, eax
js 0x6d1bb5
and ebx, 0x20000000
jne 0x6d1aa0
movsxd rdi, edi
mov qword [rsi + 0x88], rdi
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov ebp, ebx
and ebp, 0xfffffffc
or ebp, 2
and ebx, 8
je 0x6d1a80
mov ebx, ebp
xor ecx, ecx
and ebx, 0xfffffff4
call sub.msvcrt.dll__umask
or ebx, 2
mov ecx, eax
mov edi, eax
call sub.msvcrt.dll__umask
mov r10d, 0x12019f
jmp 0x6d183c
test eax, eax
jne 0x6d18d3
mov edx, 3
jmp 0x6d1880
cmp eax, 0x600
je 0x6d187b
jle 0x6d1a28
cmp eax, 0x700
jne 0x6d18d3
mov edx, 1
jmp 0x6d1880
cmp eax, 0x400
je 0x6d19ec
cmp eax, 0x500
je 0x6d1a18
jmp 0x6d18d3
mov edx, 4
jmp 0x6d1880
or eax, 0x8000000
jmp 0x6d18fd
or eax, 0x80000000
jmp 0x6d193a
mov edx, 2
jmp 0x6d1880
xor ecx, ecx
mov ebx, ebp
mov ebp, 2
call sub.msvcrt.dll__umask
mov ecx, eax
mov edi, eax
call sub.msvcrt.dll__umask
jmp 0x6d17f8
mov r9d, 0x18
lea r8, [rsp + 0x40]
mov edx, 1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandleEx]
test eax, eax
je 0x6d1c29
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x64], al
test al, al
je 0x6d1d1f
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x68], 0xffffffffffffffff
lea rcx, [0x00c807a0]
movzx ebx, dil
lea rbp, [0x009f77a0]
call sub.KERNEL32.dll_EnterCriticalSection
mov rax, rbx
shl rax, 4
add rax, rbp
mov r8, qword [rax]
test r8, r8
mov rcx, r8
setne r10b
and ecx, 0xf
jne 0x6d1c8d
test r10b, r10b
je 0x6d1c8d
mov r9, qword [rax + 8]
mov ecx, 0x10
mov rdx, r9
xor eax, eax
jmp 0x6d1b49
add rax, 1
add rdx, 0x28
cmp rax, rcx
jae 0x6d1ca2
cmp edi, dword [rdx]
jne 0x6d1b38
lea rax, [rax + rax*4]
lea rax, [r9 + rax*8]
test rax, rax
jne 0x6d1b90
mov r12d, r8d
and r12d, 0xf
jne 0x6d1b6c
test r10b, r10b
jne 0x6d1d7d
shl rbx, 4
mov eax, r12d
add r8, 1
add rbp, rbx
lea rax, [rax + rax*4]
mov rdx, qword [rbp + 8]
mov qword [rbp], r8
lea rax, [rdx + rax*8]
mov dword [rax], edi
nop dword [rax]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
lea rcx, [0x00c807a0]
movups xmmword [rax + 8], xmm0
movups xmmword [rax + 0x18], xmm1
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x6d1991
call qword [sym.imp.msvcrt.dll__errno]
cmp dword [rax], 0x18
jne 0x6d1cf5
mov qword [rsi + 0x88], 0xfffffffffffff01e
mov dword [rsi + 0x14c], 4
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6d18e8
mov eax, dword [rsp + 0x60]
mov edx, dword [rsp + 0x70]
mov rcx, r12
mov qword [rsp + 0x28], 0
mov r9d, dword [rsp + 0x74]
and eax, 3
mov dword [rsp + 0x20], edx
cmp eax, 1
sbb eax, eax
xor edx, edx
and eax, 0xfffffffe
lea r8d, [rax + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x6d1ae4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rsi + 0x88], rax
jmp 0x6d1bd9
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
call rdi
cmp eax, 0x50
jne 0x6d1c70
and ebx, 0x500
cmp ebx, 0x100
je 0x6d1d4f
call rdi
mov dword [rsi + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rsi + 0x88], rax
jmp 0x6d18e8
mov rax, rbx
shl rax, 4
mov r9, qword [rbp + rax + 8]
test rcx, rcx
jne 0x6d1b2d
mov rcx, qword [r9 + 0x280]
test rcx, rcx
je 0x6d1b5a
nop word [rax + rax]
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp edi, dword [rdx]
je 0x6d1ce8
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d1cc0
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d1cb8
jmp 0x6d1b5a
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
jmp 0x6d1b90
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
call rbx
test eax, eax
je 0x6d1d69
call rbx
mov dword [rsi + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rsi + 0x88], rax
jmp 0x6d1bd9
lea rdx, [rsp + 0x70]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x6d1c29
cmp qword [rsp + 0x70], 0
jne 0x6d1be7
mov qword [rsp + 0x68], 0xffffffffffffffff
jmp 0x6d1ae4
mov qword [rsi + 0x88], 0xfffffffffffff01c
mov dword [rsi + 0x14c], 0x50
jmp 0x6d18e8
mov dword [rsi + 0x14c], 0xfffff002
mov ecx, 0xfffff002
jmp 0x6d1c37
mov ecx, 0x288
call fcn.006cb300
mov rdx, rax
test rax, rax
je 0x6d1db0
mov rax, rbx
shl rax, 4
add rax, rbp
mov rcx, qword [rax + 8]
mov r8, qword [rax]
mov qword [rdx + 0x280], rcx
mov qword [rax + 8], rdx
jmp 0x6d1b6c
lea rdx, [0x00958547]
mov ecx, 0xe
call fcn.006cf7a0
nop
nop word cs:[rax + rax]
nop dword [rax]
push r13
push r12
push rsi
push rbx
sub rsp, 0x28
mov r12d, dword [rcx + 0x150]
mov rbx, rcx
cmp r12d, 0xffffffff
je 0x6d1f27
lea rcx, [0x00c807a0]
movzx esi, r12b
call sub.KERNEL32.dll_EnterCriticalSection
mov r9d, esi
lea r11, [0x009f77a0]
mov rax, r9
shl rax, 4
add rax, r11
mov r8, qword [rax]
mov rcx, r8
and ecx, 0xf
jne 0x6d1f47
test r8, r8
je 0x6d1f47
mov r10, qword [rax + 8]
mov ecx, 0x10
mov rsi, qword [r10 + 0x280]
mov rdx, r10
xor eax, eax
jmp 0x6d1e59
add rax, 1
add rdx, 0x28
cmp rax, rcx
jae 0x6d1f63
cmp r12d, dword [rdx]
jne 0x6d1e48
lea rax, [rax + rax*4]
lea rax, [r10 + rax*8]
nop word cs:[rax + rax]
mov rdx, r9
sub r8, 1
mov r13, qword [rax + 0x10]
shl rdx, 4
mov qword [r11 + rdx], r8
mov rdx, r8
and edx, 0xf
lea rdx, [rdx + rdx*4]
lea rdx, [r10 + rdx*8]
cmp rax, rdx
je 0x6d1eae
movdqu xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movdqu xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
mov rdx, qword [rdx + 0x20]
mov qword [rax + 0x20], rdx
test r8, r8
je 0x6d1ebd
and r8d, 0xf
je 0x6d1fbd
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_LeaveCriticalSection
cmp r13, 0xffffffffffffffff
je 0x6d1ed8
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r12d, 2
jg 0x6d1ef4
mov qword [rbx + 0x88], 0
add rsp, 0x28
pop rbx
pop rsi
pop r12
pop r13
ret
mov ecx, r12d
call qword [sym.imp.msvcrt.dll__close]
cmp eax, 0xffffffff
jne 0x6d1ede
call qword [sym.imp.msvcrt.dll__errno]
cmp dword [rax], 9
je 0x6d1f27
mov r8d, 0x2da
lea rdx, str.src_win_fs.c
lea rcx, str.errno__EBADF
call qword [sym.imp.msvcrt.dll__assert]
mov qword [rbx + 0x88], 0xfffffffffffff00d
mov dword [rbx + 0x14c], 6
add rsp, 0x28
pop rbx
pop rsi
pop r12
pop r13
ret
mov rax, r9
shl rax, 4
mov r10, qword [r11 + rax + 8]
mov rsi, qword [r10 + 0x280]
test rcx, rcx
jne 0x6d1e3a
test rsi, rsi
je 0x6d1f95
mov rcx, rsi
nop dword [rax + rax]
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp r12d, dword [rdx]
je 0x6d1fb0
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d1f78
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d1f70
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x6d1ed8
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
jmp 0x6d1e70
shl r9, 4
mov rcx, r10
mov qword [r11 + r9 + 8], rsi
call fcn.006cb320
jmp 0x6d1ebd
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov r12d, dword [rcx + 0x150]
mov r13, rcx
cmp r12d, 0xffffffff
je 0x6d2627
mov rdi, qword [rcx + 0x180]
movzx ebx, r12b
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_EnterCriticalSection
mov eax, ebx
lea r9, [0x009f77a0]
mov rdx, rax
shl rdx, 4
add rdx, r9
mov r8, qword [rdx]
mov rcx, r8
and ecx, 0xf
test r8, r8
je 0x6d263e
test rcx, rcx
jne 0x6d263e
mov r8, qword [rdx + 8]
mov ecx, 0x10
mov rdx, r8
xor eax, eax
jmp 0x6d24f1
add rax, 1
add rdx, 0x28
cmp rax, rcx
jae 0x6d2650
cmp r12d, dword [rdx]
jne 0x6d24e0
lea rax, [rax + rax*4]
lea rax, [r8 + rax*8]
test rax, rax
jne 0x6d25e8
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_LeaveCriticalSection
mov ecx, r12d
call qword [sym.imp.msvcrt.dll__get_osfhandle]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x6d2738
cmp rdi, 0xffffffffffffffff
jne 0x6d2690
mov dword [rsp + 0x38], 0
xor ebp, ebp
xor r12d, r12d
xor esi, esi
lea r14, [rsp + 0x44]
jmp 0x6d255d
cmp dword [r13 + 0x170], r12d
jbe 0x6d26ef
cmp rdi, 0xffffffffffffffff
je 0x6d256d
mov eax, esi
add rax, rdi
mov qword [rsp + 0x60], rax
mov eax, r12d
mov r9, r14
mov rcx, r15
add r12d, 1
shl rax, 4
add rax, qword [r13 + 0x178]
mov rdx, qword [rax + 8]
mov qword [rsp + 0x20], rbp
mov r8d, dword [rax]
call qword [sym.imp.KERNEL32.dll_ReadFile]
add esi, dword [rsp + 0x44]
mov ebx, eax
mov r10d, esi
test eax, eax
jne 0x6d2550
mov edx, dword [rsp + 0x38]
test edx, edx
jne 0x6d26f7
mov eax, dword [rsp + 0x38]
or eax, r10d
jne 0x6d26e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
cmp eax, 0x26
jne 0x6d271e
mov qword [r13 + 0x88], 0
jmp 0x6d2616
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
movdqu xmm0, xmmword [rax + 8]
lea rcx, [0x00c807a0]
movaps xmmword [rsp + 0x50], xmm0
movdqu xmm1, xmmword [rax + 0x18]
movaps xmmword [rsp + 0x60], xmm1
call sub.KERNEL32.dll_LeaveCriticalSection
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.006d2070
nop
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rcx + 0x88], 0xfffffffffffff00d
mov dword [rcx + 0x14c], 6
jmp 0x6d2616
shl rax, 4
mov r8, qword [r9 + rax + 8]
test rcx, rcx
jne 0x6d24d2
mov rcx, qword [r8 + 0x280]
test rcx, rcx
je 0x6d2507
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp r12d, dword [rdx]
je 0x6d25e0
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d2668
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d2660
jmp 0x6d2507
xor edx, edx
mov r9d, 1
lea r8, [rsp + 0x48]
mov rcx, r15
mov qword [rsp + 0x50], 0
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
setne al
movzx eax, al
mov dword [rsp + 0x38], eax
jmp 0x6d253d
mov eax, r10d
mov qword [r13 + 0x88], rax
jmp 0x6d2616
mov eax, dword [rsp + 0x38]
test eax, eax
je 0x6d26e0
mov dword [rsp + 0x3c], r10d
mov rdx, qword [rsp + 0x48]
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x38], ebx
mov r10d, dword [rsp + 0x3c]
jmp 0x6d25b0
mov dword [r13 + 0x14c], eax
call fcn.006cf860
cdqe
mov qword [r13 + 0x88], rax
jmp 0x6d2616
mov dword [r13 + 0x14c], 6
mov ecx, 6
call fcn.006cf860
cdqe
mov qword [r13 + 0x88], rax
jmp 0x6d2616
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov ebx, dword [rcx + 0x150]
mov r12, rcx
cmp ebx, 0xffffffff
je 0x6d30ea
mov rdi, qword [rcx + 0x180]
mov ecx, ebx
call qword [sym.imp.msvcrt.dll__get_osfhandle]
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x6d3209
lea rcx, [0x00c807a0]
movzx esi, bl
call sub.KERNEL32.dll_EnterCriticalSection
mov eax, esi
lea r9, [0x009f77a0]
mov rdx, rax
shl rdx, 4
add rdx, r9
mov r8, qword [rdx]
mov rcx, r8
and ecx, 0xf
test r8, r8
je 0x6d3101
test rcx, rcx
jne 0x6d3101
mov r8, qword [rdx + 8]
mov ecx, 0x10
mov rdx, r8
xor eax, eax
jmp 0x6d2fd1
add rax, 1
add rdx, 0x28
cmp rax, rcx
jae 0x6d3113
cmp ebx, dword [rdx]
jne 0x6d2fc0
lea rax, [rax + rax*4]
lea rax, [r8 + rax*8]
test rax, rax
jne 0x6d30b8
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_LeaveCriticalSection
cmp rdi, 0xffffffffffffffff
jne 0x6d3158
mov dword [rsp + 0x38], 0
xor ebp, ebp
xor ebx, ebx
xor r14d, r14d
lea r15, [rsp + 0x44]
jmp 0x6d3026
cmp dword [r12 + 0x170], ebx
jbe 0x6d31cc
cmp rdi, 0xffffffffffffffff
je 0x6d3037
mov eax, r14d
add rax, rdi
mov qword [rsp + 0x60], rax
mov eax, ebx
mov r9, r15
mov rcx, r13
add ebx, 1
shl rax, 4
add rax, qword [r12 + 0x178]
mov rdx, qword [rax + 8]
mov qword [rsp + 0x20], rbp
mov r8d, dword [rax]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r11d, dword [rsp + 0x44]
mov esi, eax
add r11d, r14d
mov r14d, r11d
test eax, eax
jne 0x6d3018
mov edx, dword [rsp + 0x38]
test edx, edx
jne 0x6d31d8
mov eax, dword [rsp + 0x38]
or eax, r11d
je 0x6d31a8
mov eax, r11d
mov qword [r12 + 0x88], rax
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
movdqu xmm0, xmmword [rax + 8]
lea rcx, [0x00c807a0]
movaps xmmword [rsp + 0x50], xmm0
movdqu xmm1, xmmword [rax + 0x18]
movaps xmmword [rsp + 0x60], xmm1
call sub.KERNEL32.dll_LeaveCriticalSection
lea r8, [rsp + 0x50]
mov rdx, r13
mov rcx, r12
call fcn.006d2760
jmp 0x6d3095
mov qword [rcx + 0x88], 0xfffffffffffff00d
mov dword [rcx + 0x14c], 6
jmp 0x6d3095
shl rax, 4
mov r8, qword [r9 + rax + 8]
test rcx, rcx
jne 0x6d2fb4
mov rcx, qword [r8 + 0x280]
test rcx, rcx
je 0x6d2fe6
nop dword [rax + rax]
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp ebx, dword [rdx]
je 0x6d30b0
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d3130
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d3128
jmp 0x6d2fe6
xor edx, edx
mov r9d, 1
lea r8, [rsp + 0x48]
mov rcx, r13
mov qword [rsp + 0x50], 0
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
setne al
movzx eax, al
mov dword [rsp + 0x38], eax
jmp 0x6d3006
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12 + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [r12 + 0x88], rax
jmp 0x6d3095
mov eax, dword [rsp + 0x38]
test eax, eax
je 0x6d308a
mov dword [rsp + 0x3c], r11d
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x48]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x38], esi
mov r11d, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x38]
or eax, r11d
jne 0x6d308a
jmp 0x6d31a8
mov dword [r12 + 0x14c], 6
mov ecx, 6
call fcn.006cf860
cdqe
mov qword [r12 + 0x88], rax
jmp 0x6d3095
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xc0
xor r9d, r9d
mov r8d, 7
mov edx, 0x10180
mov rbx, rcx
mov rcx, qword [rcx + 0x150]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2200000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d3428
lea rdx, [rsp + 0x80]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
je 0x6d3458
mov eax, dword [rsp + 0x80]
test al, 0x10
je 0x6d332b
test ah, 4
je 0x6d3460
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.006d0e10
test eax, eax
js 0x6d3478
mov eax, dword [rsp + 0x80]
mov rsi, qword [0x0096a1d0]
mov r10, qword [rsi]
test al, 1
jne 0x6d3390
lea rdi, [rsp + 0x50]
lea r13, [rsp + 0x40]
mov rcx, r12
mov byte [rsp + 0x50], 1
mov r8, rdi
mov rdx, r13
mov dword [rsp + 0x20], 0xd
mov r9d, 1
call r10
mov ecx, eax
test eax, eax
js 0x6d3400
mov qword [rbx + 0x40], 0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0xc0
pop rbx
pop rsi
pop rdi
pop r12
pop r13
ret
and eax, 0xffffffde
lea rdi, [rsp + 0x50]
lea r13, [rsp + 0x40]
mov rcx, r12
or eax, 0x20
mov r9d, 0x28
mov r8, rdi
mov rdx, r13
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x20], 4
call r10
mov ecx, eax
test eax, eax
js 0x6d3400
mov r10, qword [rsi]
jmp 0x6d3343
mov rax, qword [0x0096a200]
call qword [rax]
mov dword [rbx + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx + 0x88], rax
jmp 0x6d3374
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx + 0x88], rax
add rsp, 0xc0
pop rbx
pop rsi
pop rdi
pop r12
pop r13
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x6d3409
mov dword [rbx + 0x14c], 5
mov ecx, 5
jmp 0x6d3411
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
cmp eax, 0x5b8
jne 0x6d3491
mov ecx, 5
mov eax, 5
mov dword [rbx + 0x14c], eax
jmp 0x6d3411
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rcx, qword [rcx + 0x150]
mov rdi, rdx
call sub.msvcrt.dll_wcslen
cmp rax, 5
ja 0x6d3560
mov qword [rsi + 0x88], 0xfffffffffffff019
mov dword [rsi + 0x14c], 0x57
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r14, qword [rsi + 0x150]
lea r13, [rax + rax]
mov r8d, 6
lea rdx, str.XXXXXX
lea r12, [r14 + r13 - 0xc]
mov rcx, r12
call sub.msvcrt.dll_wcsncmp
test eax, eax
jne 0x6d3538
add r13, r14
mov ebx, 0x7fff
lea rbp, [rsp + 0x28]
movabs r14, 0x8421084210842109
lea r15, str.abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
nop word [rax + rax]
mov edx, 8
mov rcx, rbp
call fcn.006f1240
test eax, eax
js 0x6d3645
mov rcx, qword [rsp + 0x28]
mov r8, r12
nop dword [rax]
mov rdx, rcx
add r8, 2
shr rdx, 1
mov rax, rdx
mul r14
shr rdx, 4
mov rax, rdx
shl rax, 5
sub rax, rdx
add rax, rax
sub rcx, rax
movzx eax, word [r15 + rcx*2]
mov rcx, rdx
mov word [r8 - 2], ax
cmp r13, r8
jne 0x6d35d0
mov qword [rsp + 0x28], rdx
mov rcx, rsi
call rdi
test eax, eax
jne 0x6d365f
sub ebx, 1
jne 0x6d35b0
mov qword [rsi + 0x88], 0xffffffffffffffff
call qword [sym.imp.msvcrt.dll___doserrno]
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.006cf860
cdqe
mov qword [rsi + 0x88], rax
jmp 0x6d354d
mov qword [rsi + 0x88], 0xfffffffffffff01a
mov dword [rsi + 0x14c], 0x45d
jmp 0x6d354d
cmp qword [rsi + 0x88], 0
js 0x6d354d
mov rbx, qword [rsi + 0x98]
mov rcx, rbx
call sub.msvcrt.dll_strlen
mov r8d, 6
mov rdx, r12
lea rcx, [rbx + rax - 6]
call sub.msvcrt.dll_wcstombs
jmp 0x6d354d
push r15
mov eax, 0x20a8
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.007388f0
sub rsp, rax
xor r9d, r9d
mov r8d, 7
mov edx, 0x100001
mov qword [rsp + 0x20f0], rcx
mov rcx, qword [rcx + 0x150]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x78], rax
mov rcx, rax
cmp rax, 0xffffffffffffffff
je 0x6d3bb0
lea rax, [rsp + 0xa0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x20], rax
mov rax, qword [0x0096a180]
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 0x2000
call qword [rax]
cmp eax, 0xc000000d
je 0x6d3be1
test eax, eax
js 0x6d3c21
mov qword [rsp + 0x70], 0
xor r15d, r15d
xor r14d, r14d
mov r13, qword [rsp + 0x80]
xor ebx, ebx
nop word [rax + rax]
add r13, rbx
mov r9d, dword [r13 + 0x3c]
mov ebx, dword [r13]
shr r9d, 1
jmp 0x6d37e4
cmp word [r13 + r9*2 + 0x3e], 0
lea rax, [r9 - 1]
jne 0x6d38a0
mov r9, rax
test r9, r9
jne 0x6d37d0
test rbx, rbx
jne 0x6d37c0
mov rax, qword [rsp + 0x80]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x50], 0
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x20], rax
mov rax, qword [0x0096a180]
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 0x2000
call qword [rax]
test eax, eax
jne 0x6d3b18
cmp qword [rsp + 0x98], 0
jne 0x6d37ad
mov eax, 0x80000005
mov ecx, eax
mov rax, qword [0x0096a200]
call qword [rax]
mov ecx, eax
mov rax, qword [rsp + 0x20f0]
mov r12, r14
mov dword [rax + 0x14c], ecx
call fcn.006cf860
mov rsi, qword [rsp + 0x20f0]
cdqe
mov qword [rsi + 0x88], rax
jmp 0x6d3a62
cmp r9, 1
je 0x6d3a00
cmp r9, 2
jne 0x6d38be
cmp dword [r13 + 0x40], 0x2e002e
je 0x6d37e9
lea rbp, [r13 + 0x40]
mov dword [rsp + 0x64], r9d
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x38], 0
mov r8, rbp
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
mov rsi, rdi
test rdi, rdi
je 0x6d3c16
mov rax, qword [rsp + 0x70]
cmp rax, r15
ja 0x6d3ab0
test rax, rax
je 0x6d3a20
add rax, rax
mov rcx, r14
lea rdx, [rax*8]
mov qword [rsp + 0x70], rax
call fcn.006cb360
mov r12, rax
test rax, rax
je 0x6d3a42
lea rcx, [rdi + 8]
call fcn.006cb300
mov r14, rax
test rax, rax
je 0x6d3a45
lea rax, [r15 + 1]
mov qword [r12 + r15*8], r14
xor edx, edx
mov r9d, dword [rsp + 0x64]
mov qword [rsp + 0x68], rax
lea rax, [r14 + 4]
mov r8, rbp
mov ecx, 0xfde9
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x6d3c0e
mov byte [r14 + rdi + 4], 0
mov eax, dword [r13 + 0x38]
test al, 0x40
je 0x6d39d0
mov dword [r14], 6
mov r15, qword [rsp + 0x68]
mov r14, r12
test rbx, rbx
jne 0x6d37c0
jmp 0x6d37ee
test ah, 4
je 0x6d3ac0
mov dword [r14], 3
mov r15, qword [rsp + 0x68]
mov r14, r12
test rbx, rbx
jne 0x6d37c0
jmp 0x6d37ee
cmp word [r13 + 0x40], 0x2e
jne 0x6d38be
test rbx, rbx
jne 0x6d37c0
jmp 0x6d37ee
mov edx, 0x100
mov rcx, r14
mov qword [rsp + 0x70], 0x20
call fcn.006cb360
mov r12, rax
test rax, rax
jne 0x6d3944
mov r12, r14
mov rax, qword [rsp + 0x20f0]
mov qword [rax + 0x88], 0xfffffffffffff027
mov dword [rax + 0x14c], 0xe
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15, r15
je 0x6d3b08
nop word cs:[rax + rax]
sub r15, 1
mov rcx, qword [r12 + r15*8]
call fcn.006cb320
test r15, r15
jne 0x6d3a80
mov rcx, r12
call fcn.006cb320
nop
add rsp, 0x20a8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r12, r14
jmp 0x6d3944
test al, 0x10
je 0x6d3ae8
mov dword [r14], 2
mov r15, qword [rsp + 0x68]
mov r14, r12
test rbx, rbx
jne 0x6d37c0
jmp 0x6d37ee
mov dword [r14], 1
mov r15, qword [rsp + 0x68]
mov r14, r12
test rbx, rbx
jne 0x6d37c0
jmp 0x6d37ee
test r12, r12
je 0x6d3a9b
jmp 0x6d3a92
jns 0x6d37ad
cmp eax, 0x80000006
jne 0x6d3863
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x20f0]
mov qword [rax + 0x90], r14
test r14, r14
je 0x6d3b4f
or dword [rax + 0x148], 8
mov rax, qword [rsp + 0x20f0]
mov qword [rax + 0x88], r15
cmp r15, 0xffffffffffffffff
jne 0x6d3b90
call qword [sym.imp.msvcrt.dll___doserrno]
mov ecx, dword [rax]
mov rax, qword [rsp + 0x20f0]
mov dword [rax + 0x14c], ecx
call fcn.006cf860
mov rsi, qword [rsp + 0x20f0]
cdqe
mov qword [rsi + 0x88], rax
mov rax, qword [rsp + 0x20f0]
mov dword [rax + 0x170], 0
jmp 0x6d3a9b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov rax, qword [rsp + 0x20f0]
mov dword [rax + 0x14c], ecx
call fcn.006cf860
mov rsi, qword [rsp + 0x20f0]
cdqe
mov qword [rsi + 0x88], rax
jmp 0x6d3a9b
mov rax, qword [rsp + 0x20f0]
mov rcx, qword [rsp + 0x78]
mov qword [rax + 0x88], 0xfffffffffffff02c
mov dword [rax + 0x14c], 0x10b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6d3a9b
mov r15, qword [rsp + 0x68]
mov r14, r12
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x6d386e
cmp eax, 0x80000006
jne 0x6d3c56
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x20f0]
mov qword [rax + 0x90], 0
mov qword [rax + 0x88], 0
jmp 0x6d3b90
xor r15d, r15d
xor r14d, r14d
jmp 0x6d3863
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x150]
mov rbx, rcx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
jne 0x6d3cd8
mov qword [rbx + 0x88], 0xfffffffffffff02c
xor r12d, r12d
mov dword [rbx + 0x14c], 0x10b
mov rcx, r12
call fcn.006cb320
xor ecx, ecx
call fcn.006cb320
mov qword [rbx + 0x90], 0
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov ecx, 0x290
call fcn.006cb300
mov r12, rax
test rax, rax
je 0x6d3d80
mov rcx, rsi
lea rbp, [0x0095862e]
call sub.msvcrt.dll_wcslen
mov rdi, rax
test rax, rax
jne 0x6d3da0
lea rcx, [rdi + rdi + 8]
call fcn.006cb300
mov r13, rax
test rax, rax
je 0x6d3d80
mov r9, rsi
mov r8, rbp
lea rdx, [rdi + 3]
mov rcx, rax
call qword [sym.imp.msvcrt.dll__snwprintf]
lea rdx, [r12 + 0x38]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rcx, r13
mov qword [r12 + 0x30], rax
call fcn.006cb320
cmp qword [r12 + 0x30], 0xffffffffffffffff
je 0x6d3dd0
mov dword [r12 + 0x288], 0
mov qword [rbx + 0x90], r12
mov qword [rbx + 0x88], 0
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov qword [rbx + 0x88], 0xfffffffffffff027
mov dword [rbx + 0x14c], 0xe
jmp 0x6d3cab
movzx eax, word [rsi + rax*2 - 2]
cmp ax, 0x5c
je 0x6d3dbc
lea rbp, str._s
cmp ax, 0x2f
jne 0x6d3d09
lea rbp, [0x00958636]
jmp 0x6d3d09
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
call rsi
cmp eax, 2
je 0x6d3d51
call rsi
mov dword [rbx + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx + 0x88], rax
jmp 0x6d3cab
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
xor edx, edx
mov r15, qword [rcx + 0x90]
or dword [rcx + 0x148], 8
mov rdi, qword [r15]
mov r8, qword [r15 + 8]
lea r14, [r15 + 0x38]
shl r8, 4
mov r13, rcx
mov rcx, rdi
call sub.msvcrt.dll_memset
cmp qword [r15 + 8], 0
je 0x6d3fbe
xor esi, esi
lea rbp, [r15 + 0x64]
lea r12, [rsp + 0x28]
xor ebx, ebx
jmp 0x6d3e85
mov dword [rsp + 0x28], 2
mov rcx, r12
add esi, 1
call fcn.006cdd60
mov dword [rbx + 8], eax
mov dword [r15 + 0x288], 1
mov ebx, esi
cmp rbx, qword [r15 + 8]
jae 0x6d3f18
mov eax, dword [r15 + 0x288]
test eax, eax
jne 0x6d3ef0
cmp word [r15 + 0x64], 0x2e
jne 0x6d3eb0
movzx eax, word [r15 + 0x66]
test ax, ax
je 0x6d3f40
cmp ax, 0x2e
je 0x6d3f30
shl rbx, 4
mov edx, 0xffffffff
mov rcx, rbp
add rbx, rdi
mov r8, rbx
call fcn.006efc60
test eax, eax
jne 0x6d3f70
mov eax, dword [r15 + 0x38]
test al, 0x10
jne 0x6d3e58
test ah, 4
je 0x6d3f50
mov dword [rsp + 0x28], 3
jmp 0x6d3e60
mov rcx, qword [r15 + 0x30]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x6d3e90
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
call rbx
cmp eax, 0x12
jne 0x6d3f77
mov ebx, esi
nop dword [rax]
mov qword [r13 + 0x88], rbx
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
cmp word [r15 + 0x68], 0
jne 0x6d3eb0
nop dword [rax]
mov dword [r15 + 0x288], 1
jmp 0x6d3e79
and eax, 0x40
cmp eax, 1
sbb eax, eax
and eax, 0xfffffffb
add eax, 6
mov dword [rsp + 0x28], eax
jmp 0x6d3e60
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
call rbx
mov dword [r13 + 0x14c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [r13 + 0x88], rax
test esi, esi
je 0x6d3f1f
lea eax, [rsi - 1]
shl rax, 4
lea rbx, [rdi + rax + 0x10]
mov rcx, qword [rdi]
add rdi, 0x10
call fcn.006cb320
mov qword [rdi - 0x10], 0
cmp rdi, rbx
jne 0x6d3fa0
jmp 0x6d3f1f
xor ebx, ebx
jmp 0x6d3f18
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1c8
movaps xmmword [rsp + 0x170], xmm6
movaps xmmword [rsp + 0x180], xmm7
movaps xmmword [rsp + 0x190], xmm8
movaps xmmword [rsp + 0x1a0], xmm9
movaps xmmword [rsp + 0x1b0], xmm10
cmp dword [rcx - 0x118], 6
mov rbx, rcx
lea r12, [rcx - 0x120]
je 0x6d403b
mov r8d, 0xada
lea rdx, str.src_win_fs.c
lea rcx, str.req__type__UV_FS
call qword [sym.imp.msvcrt.dll__assert]
cmp dword [rbx - 0xb0], 0x24
ja case.0x6d405c.0
mov eax, dword [rbx - 0xb0]
lea rdx, [0x00958670]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
movsd xmm6, qword [rbx + 0x40]
mov rcx, qword [rbx + 0x30]
mov ebp, 2
mov eax, 0x2200000
movsd xmm7, qword [rbx + 0x38]
mov rdi, qword [sym.imp.KERNEL32.dll_CreateFileW]
movsd xmm10, qword [0x00958758]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
movsd xmm9, qword [0x00958760]
movsd xmm8, qword [0x00958768]
mov dword [rsp + 0x28], eax
xor r9d, r9d
mov r8d, 7
mov edx, 0x100
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 3
call rdi
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d5081
mulsd xmm7, xmm10
mulsd xmm7, xmm9
comisd xmm7, xmm8
jae 0x6d5160
cvttsd2si rax, xmm7
mulsd xmm6, xmm10
movabs rdx, 0x19db1ded53e8000
add rax, rdx
mov qword [rsp + 0x70], rax
mulsd xmm6, xmm9
comisd xmm6, xmm8
jae 0x6d5178
cvttsd2si rax, xmm6
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x70]
mov rcx, r12
movabs rdx, 0x19db1ded53e8000
add rax, rdx
xor edx, edx
mov qword [rsp + 0xf0], rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
je 0x6d5081
mov rcx, r12
call rsi
nop dword [rax + rax]
mov qword [rbx - 0x98], 0
movaps xmm6, xmmword [rsp + 0x170]
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rbx + 0x30]
cmp ecx, 0xffffffff
je 0x6d41e0
call qword [sym.imp.msvcrt.dll__get_osfhandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne case.0x6d405c.26
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
mov qword [rbx - 0x98], 0xfffffffffffff00d
mov dword [rbx + 0x2c], 6
jmp 0x6d4163
movsd xmm6, qword [rbx + 0x40]
movsd xmm7, qword [rbx + 0x38]
xor r9d, r9d
mov edx, 0x100
mov rcx, qword [rbx + 0x30]
mov r8d, 7
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d50d1
movsd xmm0, qword [0x00958758]
movapd xmm1, xmm7
movsd xmm3, qword [0x00958760]
movsd xmm2, qword [0x00958768]
mulsd xmm1, xmm0
mulsd xmm1, xmm3
comisd xmm1, xmm2
jae 0x6d5148
cvttsd2si rax, xmm1
mulsd xmm0, xmm6
movabs rdx, 0x19db1ded53e8000
add rax, rdx
mov qword [rsp + 0x70], rax
mulsd xmm0, xmm3
comisd xmm0, xmm2
jae 0x6d5130
cvttsd2si rax, xmm0
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x70]
mov rcx, r12
movabs rdx, 0x19db1ded53e8000
add rax, rdx
xor edx, edx
mov qword [rsp + 0xf0], rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
je 0x6d50d1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.0x6d405c.26
mov rcx, qword [rbx + 0x30]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2000080
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x6d41c3
mov rbp, qword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
lea rdi, [rbx - 0x90]
call rbp
mov esi, eax
test eax, eax
je 0x6d5816
lea ecx, [rax + 1]
add rcx, rcx
call fcn.006cb300
mov r12, rax
test rax, rax
je 0x6d5eea
xor r9d, r9d
mov r8d, esi
mov rdx, rax
mov rcx, r13
call rbp
test eax, eax
je 0x6d5803
mov r8d, 8
lea rdx, str._UNC_
mov rcx, r12
call sub.msvcrt.dll_wcsncmp
test eax, eax
jne 0x6d5779
mov r8d, 0x5c
lea rcx, [r12 + 0xc]
lea edx, [rsi - 6]
mov word [r12 + 0xc], r8w
xor r9d, r9d
mov r8, rdi
call fcn.006d0d00
mov rcx, r12
mov esi, eax
call fcn.006cb320
cmp esi, 0xffffffff
je 0x6d5816
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [rbx + 0x28], 8
mov qword [rbx - 0x98], 0
jmp 0x6d4163
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d3c70
mov r8d, dword [rbx + 0x48]
test r8b, 4
je 0x6d5190
mov qword [rbx - 0x98], 0xfffffffffffff02a
mov dword [rbx + 0x2c], 0x32
jmp 0x6d4163
mov esi, dword [rbx + 0x30]
cmp esi, 0xffffffff
je 0x6d41e0
mov ecx, esi
movzx edi, sil
lea rbp, [0x009f77a0]
call qword [sym.imp.msvcrt.dll__get_osfhandle]
lea rcx, [0x00c807a0]
mov r12, rax
call sub.KERNEL32.dll_EnterCriticalSection
mov rax, rdi
shl rax, 4
add rax, rbp
mov rdx, qword [rax]
mov rcx, rdx
and ecx, 0xf
test rdx, rdx
je 0x6d557f
test rcx, rcx
jne 0x6d557f
mov r8, qword [rax + 8]
mov ecx, 0x10
mov rdx, r8
xor eax, eax
jmp 0x6d44e1
add rax, 1
add rdx, 0x28
cmp rax, rcx
jae 0x6d5594
cmp esi, dword [rdx]
jne 0x6d44d0
lea rax, [rax + rax*4]
lea rax, [r8 + rax*8]
test rax, rax
jne 0x6d52e8
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_LeaveCriticalSection
mov rax, qword [rbx + 0x60]
mov rcx, r12
mov dword [rsp + 0x20], 0x14
lea rdx, [rsp + 0x70]
mov r9d, 8
lea r8, [rsp + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [0x0096a1d0]
call qword [rax]
mov ecx, eax
test eax, eax
jns case.0x6d405c.26
mov rax, qword [0x0096a200]
call qword [rax]
jmp 0x6d41c9
mov ecx, dword [rbx + 0x30]
cmp ecx, 0xffffffff
je 0x6d41e0
call qword [sym.imp.msvcrt.dll__get_osfhandle]
mov rcx, rax
cmp rax, 0xffffffffffffffff
je 0x6d55f6
lea rsi, [rbx - 0x80]
xor r8d, r8d
mov rdx, rsi
call fcn.006d10f0
test eax, eax
jne 0x6d41c3
mov qword [rbx - 0x90], rsi
mov qword [rbx - 0x98], 0
jmp 0x6d4163
mov rsi, qword [rbx + 0x30]
mov rcx, rsi
call sub.msvcrt.dll_wcslen
cmp rax, 1
jbe 0x6d45e0
cmp word [rsi + rax*2 - 4], 0x3a
lea rdx, [rax + rax]
je 0x6d45e0
lea rdx, [rsi + rdx - 2]
movzx eax, word [rdx]
cmp ax, 0x5c
je 0x6d57eb
cmp ax, 0x2f
je 0x6d57eb
nop word [rax + rax]
mov rcx, qword [rbx + 0x30]
xor r9d, r9d
mov edx, pe_nt_image_headers64
lea rsi, [rbx - 0x80]
mov qword [rsp + 0x30], 0
mov r8d, 7
mov dword [rsp + 0x28], 0x2000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d50f0
xor r8d, r8d
mov rdx, rsi
mov rcx, rax
call fcn.006d10f0
test eax, eax
jne 0x6d50f0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6d4586
mov r15d, dword [rbx + 0x68]
mov esi, 0x10000
mov ebp, dword [rbx + 0x30]
mov r13d, dword [rbx + 0x4c]
mov r12, qword [rbx + 0x60]
cmp r15, 0x10000
cmovbe rsi, r15
mov rcx, rsi
call fcn.006cb300
mov r14, rax
test rax, rax
je 0x6d5f4d
cmp r12, 0xffffffffffffffff
je 0x6d46a0
xor r8d, r8d
mov rdx, r12
mov ecx, ebp
call sub.msvcrt.dll__lseeki64
cmp rax, 0xffffffffffffffff
je 0x6d5110
mov r12, qword [sym.imp.msvcrt.dll__read]
xor edi, edi
test r15, r15
jne 0x6d46e2
jmp 0x6d5d37
cmp eax, 0xffffffff
je 0x6d5110
cdqe
mov rdx, r14
mov ecx, r13d
sub r15, rax
call qword [sym.imp.msvcrt.dll__write_1]
cmp eax, 0xffffffff
je 0x6d5110
add edi, eax
test r15, r15
je 0x6d46fb
cmp rsi, r15
mov r8, r15
mov rdx, r14
mov ecx, ebp
cmovbe r8, rsi
call r12
mov r8d, eax
test eax, eax
jne 0x6d46b8
mov rcx, r14
movsxd rdi, edi
call fcn.006cb320
mov qword [rbx - 0x98], rdi
cmp rdi, 0xffffffffffffffff
jne 0x6d4163
jmp 0x6d4c85
mov r13, qword [rbx + 0x40]
mov eax, dword [rbx + 0x48]
mov r12, qword [rbx + 0x30]
mov esi, dword [0x008b8ec0]
mov rdi, qword [sym.imp.KERNEL32.dll_CreateSymbolicLinkW]
mov rbp, qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, r13
test al, 2
je 0x6d4784
jmp 0x6d5618
call rbp
cmp eax, 0x57
jne 0x6d57c5
and esi, 2
je 0x6d57dd
mov eax, dword [rbx + 0x48]
mov r12, qword [rbx + 0x30]
mov dword [0x008b8ec0], 0
mov rcx, qword [rbx + 0x40]
mov esi, eax
and esi, 2
jne 0x6d5615
mov edx, esi
or edx, 1
test al, 1
cmovne esi, edx
mov rdx, r12
mov r8d, esi
call rdi
test al, al
je 0x6d4750
jmp case.0x6d405c.26
xor r8d, r8d
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateHardLinkW]
test eax, eax
jne case.0x6d405c.26
jmp 0x6d41c3
lea rdx, [0x006d0b20]
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d3510
lea rax, [rsp + 0x64]
mov r13, qword [rbx + 0x30]
lea r12, [rsp + 0x70]
mov rdi, qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x60]
lea r15, [rsp + 0x68]
mov qword [rsp + 0x48], rax
mov rax, r12
mov r12, r13
mov r13, rax
mov qword [rsp + 0x20], r13
mov r8, qword [rsp + 0x50]
mov r9, r15
mov rcx, r12
mov rdx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
test eax, eax
jne 0x6d5cc1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [rbx + 0x30]
cmp r12, rdx
jne 0x6d5dca
cmp eax, 0x10b
jne 0x6d5da8
mov ecx, 0x20a
call fcn.006cb300
mov r12, rax
test rax, rax
je 0x6d52c0
mov r14d, 0x105
lea rbp, [rsp + 0xf0]
jmp 0x6d48d6
mov esi, eax
cmp r14, rsi
jae 0x6d54d0
mov rcx, r12
lea rdx, [rsi + rsi]
call fcn.006cb3b0
mov r12, rax
test rax, rax
je 0x6d52c0
mov r14, rsi
mov rcx, qword [rbx + 0x30]
mov r9, rbp
mov r8, r12
mov edx, r14d
call rdi
test eax, eax
jne 0x6d48b0
mov rcx, r12
call fcn.006cb320
mov dword [rbx + 0x2c], 0x10b
mov ecx, 0x10b
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
mov rax, qword [rbx - 0x90]
mov rcx, qword [rax + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbx - 0x90]
call fcn.006cb320
mov qword [rbx - 0x98], 0
jmp 0x6d4163
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d3e00
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d2f30
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d2460
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d1dd0
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d17a0
mov rsi, qword [rbx + 0x30]
mov rcx, rsi
call sub.msvcrt.dll_wcslen
cmp rax, 1
jbe 0x6d4b10
cmp word [rsi + rax*2 - 4], 0x3a
lea rdx, [rax + rax]
je 0x6d4b10
lea rdx, [rsi + rdx - 2]
movzx eax, word [rdx]
cmp ax, 0x5c
je 0x6d57f7
cmp ax, 0x2f
je 0x6d57f7
nop word [rax + rax]
mov rcx, qword [rbx + 0x30]
lea r14, [rbx - 0x80]
mov ebp, 2
mov rdi, qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13d, 1
mov eax, 0x2200000
mov r15, qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
xor r9d, r9d
mov r8d, 7
mov edx, pe_nt_image_headers64
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 3
call rdi
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d5508
mov r8d, r13d
mov rdx, r14
mov rcx, rax
call fcn.006d10f0
test eax, eax
jne 0x6d5574
mov rcx, r12
call rsi
mov qword [rbx - 0x90], r14
mov qword [rbx - 0x98], 0
jmp 0x6d4163
mov rcx, qword [rbx + 0x30]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2200000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d41c3
xor r8d, r8d
lea rdx, [rbx - 0x90]
mov rcx, rax
call fcn.006d0e10
test eax, eax
jne 0x6d55d8
or dword [rbx + 0x28], 8
mov qword [rbx - 0x98], 0
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x006d16b0]
jmp 0x6d47c7
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.msvcrt.dll__wrmdir]
cdqe
mov qword [rbx - 0x98], rax
cmp rax, 0xffffffffffffffff
jne 0x6d4163
call qword [sym.imp.msvcrt.dll___doserrno]
mov ecx, dword [rax]
mov dword [rbx + 0x2c], ecx
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d3290
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x6d41c3
test byte [rbx + 0x38], 2
je case.0x6d405c.26
and eax, 0x11
cmp eax, 1
jne case.0x6d405c.26
mov dword [rbx + 0x2c], 0xfffff030
mov ecx, 0xfffff030
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
mov ecx, dword [rbx + 0x30]
cmp ecx, 0xffffffff
je 0x6d41e0
call qword [sym.imp.msvcrt.dll__get_osfhandle]
mov rcx, rax
cmp rax, 0xffffffffffffffff
je 0x6d55f6
movsd xmm0, qword [0x00958758]
movsd xmm1, qword [rbx + 0x38]
movsd xmm3, qword [0x00958760]
movsd xmm2, qword [0x00958768]
mulsd xmm1, xmm0
movsd xmm6, qword [rbx + 0x40]
mulsd xmm1, xmm3
comisd xmm1, xmm2
jae 0x6d57b2
cvttsd2si rax, xmm1
mulsd xmm0, xmm6
movabs rdx, 0x19db1ded53e8000
add rax, rdx
mov qword [rsp + 0x70], rax
mulsd xmm0, xmm3
comisd xmm0, xmm2
jae 0x6d579f
cvttsd2si rax, xmm0
movabs rdx, 0x19db1ded53e8000
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x70]
add rax, rdx
xor edx, edx
mov qword [rsp + 0xf0], rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne case.0x6d405c.26
jmp 0x6d41c3
mov ecx, dword [rbx + 0x30]
cmp ecx, 0xffffffff
je 0x6d41e0
call qword [sym.imp.msvcrt.dll__get_osfhandle]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x100
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReOpenFile]
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x6d41c3
mov rcx, rax
mov rax, qword [0x0096a190]
lea rbp, [rsp + 0xf0]
lea r12, [rsp + 0x70]
mov dword [rsp + 0x20], 4
mov r9d, 0x28
mov r8, rbp
mov rdx, r12
call qword [rax]
test eax, eax
js 0x6d5551
mov rsi, qword [0x0096a1d0]
mov eax, dword [rsp + 0x110]
mov r10, qword [rsi]
test al, 0x20
jne 0x6d57e4
or eax, 0x20
mov r9d, 0x28
mov r8, rbp
mov rdx, r12
mov dword [rsp + 0x110], eax
mov rcx, r13
mov dword [rsp + 0x20], 4
call r10
test eax, eax
js 0x6d5551
mov eax, dword [rsp + 0x110]
mov r10, qword [rsi]
mov edi, 1
mov edx, eax
or eax, 1
mov r9d, 0x28
mov r8, rbp
and edx, 0xfffffffe
test byte [rbx + 0x38], 0x80
mov rcx, r13
mov dword [rsp + 0x20], 4
cmovne eax, edx
mov rdx, r12
mov dword [rsp + 0x110], eax
call r10
test eax, eax
js 0x6d5551
test edi, edi
je 0x6d4f34
mov eax, dword [rsp + 0x110]
mov edx, pe_nt_image_headers64
mov rcx, r13
mov dword [rsp + 0x20], 4
mov r9d, 0x28
mov r8, rbp
and eax, 0xffffffdf
cmove eax, edx
mov rdx, r12
mov dword [rsp + 0x110], eax
call qword [rsi]
mov ecx, eax
test eax, eax
js 0x6d5553
mov qword [rbx - 0xe0], 0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6d4163
mov edx, dword [rbx + 0x38]
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.msvcrt.dll__wchmod]
cdqe
mov qword [rbx - 0x98], rax
cmp rax, 0xffffffffffffffff
jne 0x6d4163
jmp 0x6d4c85
movaps xmm6, xmmword [rsp + 0x170]
mov rcx, r12
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x6d36c0
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rbx + 0x30]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne case.0x6d405c.26
jmp 0x6d41c3
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.msvcrt.dll__wmkdir]
cdqe
mov qword [rbx - 0x98], rax
cmp rax, 0xffffffffffffffff
jne 0x6d4163
call qword [sym.imp.msvcrt.dll___doserrno]
mov ecx, dword [rax]
mov rax, 0xfffffffffffff019
mov dword [rbx + 0x2c], ecx
cmp ecx, 0x7b
je 0x6d41d5
jmp 0x6d41ce
movaps xmm6, xmmword [rsp + 0x170]
mov r8d, 0xb03
movaps xmm7, xmmword [rsp + 0x180]
lea rdx, str.src_win_fs.c
movaps xmm8, xmmword [rsp + 0x190]
lea rcx, str.__bad_uv_fs_type_
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.msvcrt.dll__assert]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, r12
mov r13d, eax
call rsi
test r13d, r13d
je case.0x6d405c.26
cmp ebp, 1
je 0x6d50b7
cmp r13d, 0x5b8
je 0x6d54eb
cmp r13d, 0x1126
je 0x6d54eb
mov dword [rbx + 0x2c], r13d
mov ecx, r13d
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, r12
mov r13d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13d, r13d
jne 0x6d50b7
jmp case.0x6d405c.26
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, r12
mov r13d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13d, r13d
jne 0x6d50b7
jmp 0x6d4586
mov rcx, r14
call fcn.006cb320
mov qword [rbx - 0x98], 0xffffffffffffffff
jmp 0x6d4c85
subsd xmm0, xmm2
cvttsd2si rax, xmm0
btc rax, 0x3f
jmp 0x6d42a4
subsd xmm1, xmm2
cvttsd2si rax, xmm1
btc rax, 0x3f
jmp 0x6d427b
subsd xmm7, xmm8
cvttsd2si rax, xmm7
btc rax, 0x3f
jmp 0x6d40ed
subsd xmm6, xmm8
cvttsd2si rax, xmm6
btc rax, 0x3f
jmp 0x6d4119
and r8d, 1
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne case.0x6d405c.26
mov rbp, qword [sym.imp.KERNEL32.dll_GetLastError]
call rbp
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
cmp rax, 0xfffffffffffff00e
jne 0x6d4163
mov rcx, qword [rbx + 0x30]
mov rdi, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2000000
mov r8d, 7
mov edx, pe_nt_image_headers64
mov dword [rsp + 0x20], 3
call rdi
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x6d5be9
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.006d10f0
test eax, eax
jne 0x6d5be9
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call rsi
mov rcx, qword [rbx + 0x40]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov r8d, 7
mov dword [rsp + 0x28], 0x2000000
mov edx, pe_nt_image_headers64
mov dword [rsp + 0x20], 3
call rdi
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d5d44
xor r8d, r8d
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.006d10f0
test eax, eax
jne 0x6d5d44
mov rcx, r12
call rsi
mov rax, qword [rsp + 0xf0]
cmp qword [rsp + 0x70], rax
jne 0x6d4163
mov rax, qword [rsp + 0x120]
cmp qword [rsp + 0xa0], rax
jne 0x6d4163
jmp case.0x6d405c.26
mov qword [rbx - 0x98], 0xfffffffffffff027
mov dword [rbx + 0x2c], 0xe
jmp 0x6d4163
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
movdqu xmm4, xmmword [rax + 8]
lea rcx, [0x00c807a0]
movaps xmmword [rsp + 0xf0], xmm4
mov r13d, dword [rax + 8]
mov r14, qword [rax + 0x10]
movdqu xmm5, xmmword [rax + 0x18]
movaps xmmword [rsp + 0x100], xmm5
movzx r15d, byte [rax + 0xc]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x48], rax
call sub.KERNEL32.dll_LeaveCriticalSection
test r15b, r15b
jne 0x6d5bca
cmp r14, 0xffffffffffffffff
je 0x6d533c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbx + 0x60]
lea rdx, [rsp + 0x70]
lea r8, [rsp + 0x68]
mov rcx, r12
mov dword [rsp + 0x20], 0x14
mov r9d, 8
mov qword [rsp + 0x68], rax
mov rax, qword [0x0096a1d0]
call qword [rax]
test eax, eax
js 0x6d58a9
mov qword [rbx - 0x98], 0
test r13d, r13d
je 0x6d4163
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x100], rax
test rax, rax
je 0x6d589d
mov eax, r13d
mov edx, dword [rsp + 0x100]
mov rcx, r12
mov qword [rsp + 0x28], 0
and eax, 3
mov r9d, dword [rsp + 0x104]
cmp eax, 1
mov dword [rsp + 0x20], edx
sbb eax, eax
xor edx, edx
and eax, 0xfffffffe
lea r8d, [rax + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov r14, rax
test rax, rax
je 0x6d5dd9
lea rcx, [0x00c807a0]
call sub.KERNEL32.dll_EnterCriticalSection
mov rax, rdi
shl rax, 4
add rax, rbp
mov r8, qword [rax]
test r8, r8
mov rcx, r8
setne r9b
and ecx, 0xf
jne 0x6d583b
test r9b, r9b
je 0x6d583b
mov r10, qword [rax + 8]
mov ecx, 0x10
mov rdx, r10
xor eax, eax
jmp 0x6d5439
add rax, 1
add rdx, 0x28
cmp rax, rcx
jae 0x6d5850
cmp esi, dword [rdx]
jne 0x6d5428
lea rax, [rax + rax*4]
lea rax, [r10 + rax*8]
test rax, rax
jne 0x6d5480
mov ebx, r8d
and ebx, 0xf
jne 0x6d545b
test r9b, r9b
jne 0x6d5d5a
shl rdi, 4
mov eax, ebx
add r8, 1
add rbp, rdi
lea rax, [rax + rax*4]
mov r9, qword [rbp + 8]
mov qword [rbp], r8
lea rax, [r9 + rax*8]
mov dword [rax], esi
nop word [rax + rax]
mov rdi, qword [rsp + 0x48]
mov dword [rsp + 0xf0], r13d
mov byte [rsp + 0xf4], 0
mov qword [rsp + 0xf8], r14
mov qword [rsp + 0x108], rdi
movdqa xmm4, xmmword [rsp + 0xf0]
lea rcx, [0x00c807a0]
movups xmmword [rax + 8], xmm4
movdqa xmm5, xmmword [rsp + 0x100]
movups xmmword [rax + 0x18], xmm5
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x6d4163
mov rax, qword [rsp + 0xf0]
test rax, rax
je 0x6d4842
xor edx, edx
mov word [rax], dx
jmp 0x6d4842
movsd xmm6, qword [rbx + 0x40]
movsd xmm7, qword [rbx + 0x38]
mov ebp, 1
mov eax, 0x2000000
mov rcx, qword [rbx + 0x30]
jmp 0x6d40a1
call r15
mov r13d, eax
mov rcx, r12
call rsi
test r13d, r13d
je 0x6d4b8a
cmp ebp, 1
je 0x6d50b7
cmp r13d, 0x5b8
je 0x6d553b
cmp r13d, 0x1126
jne 0x6d50b7
mov rcx, qword [rbx + 0x30]
mov ebp, 1
xor r13d, r13d
mov eax, 0x2000000
jmp 0x6d4b3d
mov ecx, eax
mov rax, qword [0x0096a200]
call qword [rax]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4f3f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
jmp 0x6d550e
mov rax, rdi
shl rax, 4
mov r8, qword [rbp + rax + 8]
test rcx, rcx
jne 0x6d44c4
mov rcx, qword [r8 + 0x280]
test rcx, rcx
je 0x6d44f6
nop dword [rax]
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp esi, dword [rdx]
je 0x6d52e0
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d55b0
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d55a8
jmp 0x6d44f6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4c09
mov dword [rbx + 0x2c], 6
mov ecx, 6
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
mov r13, rcx
mov rcx, r12
call sub.msvcrt.dll_wcslen
mov r8d, 4
lea rdx, [0x00958738]
mov rcx, r12
mov rsi, rax
call sub.msvcrt.dll_wcsncmp
test eax, eax
je 0x6d5b7c
cmp esi, 2
jle 0x6d5824
movzx eax, word [r12]
and eax, 0xffffffdf
sub eax, 0x41
cmp ax, 0x19
ja 0x6d5824
cmp word [r12 + 2], 0x3a
jne 0x6d5824
movzx eax, word [r12 + 4]
cmp ax, 0x5c
je 0x6d5681
cmp ax, 0x2f
jne 0x6d5824
lea ecx, [rsi*4 + 0x20]
movsxd rcx, ecx
call fcn.006cb300
mov qword [rsp + 0x48], rax
test rax, rax
je 0x6d5f4d
mov rax, qword [rsp + 0x48]
mov r8d, 4
lea rdx, [0x00958748]
lea rsi, [rax + 0x10]
mov rcx, rsi
call sub.msvcrt.dll_wcsncpy
mov dword [rsp + 0x50], 0
xor r11d, r11d
add r11, r12
movzx r8d, word [r11]
test r8w, r8w
je 0x6d5d91
mov eax, dword [rsp + 0x50]
mov qword [rsp + 0x58], r12
mov r14, r11
xor r15d, r15d
mov edx, 4
add eax, 1
cdqe
lea rcx, [r12 + rax*2]
jmp 0x6d5735
mov r8d, 0x5c
mov word [r9], r8w
lea r8d, [rdx + 3]
mov r9, r10
mov edx, edi
mov r10, rbp
mov edi, r8d
lea rbp, [rsi + rax + 6]
movzx eax, word [r14]
xor r15d, r15d
mov word [r9], ax
mov r14, rcx
movzx r8d, word [rcx]
add rcx, 2
test r8w, r8w
je 0x6d59d5
movsxd rax, edx
lea r12d, [rdx + 1]
add rax, rax
lea r9, [rsi + rax]
lea r10, [rsi + rax + 2]
cmp r8w, 0x5c
je 0x6d5768
cmp r8w, 0x2f
je 0x6d5768
lea edi, [rdx + 2]
lea rbp, [rsi + rax + 4]
test r15d, r15d
jne 0x6d56f7
mov edx, r12d
jmp 0x6d5715
mov rbp, r10
mov edi, r12d
mov r10, r9
mov r15d, 1
jmp 0x6d5720
mov r8d, 4
lea rdx, [0x00958738]
mov rcx, r12
call sub.msvcrt.dll_wcsncmp
test eax, eax
jne 0x6d5803
lea rcx, [r12 + 8]
lea edx, [rsi - 4]
jmp 0x6d43ab
subsd xmm0, xmm2
cvttsd2si rax, xmm0
btc rax, 0x3f
jmp 0x6d4dc1
subsd xmm1, xmm2
cvttsd2si rax, xmm1
btc rax, 0x3f
jmp 0x6d4d98
mov ecx, eax
mov dword [rbx + 0x2c], eax
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
mov ecx, 0x57
jmp 0x6d57c7
xor edi, edi
jmp 0x6d4ebc
xor r11d, r11d
mov word [rdx], r11w
jmp 0x6d45e0
xor r10d, r10d
mov word [rdx], r10w
jmp 0x6d4b10
mov rcx, r12
call fcn.006cb320
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6d41c3
mov qword [rbx - 0x98], 0xfffffffffffff019
mov dword [rbx + 0x2c], 0x32
jmp 0x6d4163
mov rax, rdi
shl rax, 4
mov r10, qword [rbp + rax + 8]
test rcx, rcx
jne 0x6d541e
mov rcx, qword [r10 + 0x280]
test rcx, rcx
je 0x6d544a
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp esi, dword [rdx]
je 0x6d5890
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d5868
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d5860
jmp 0x6d544a
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
jmp 0x6d5480
mov r14, 0xffffffffffffffff
jmp 0x6d53e0
mov ecx, eax
mov rax, qword [0x0096a200]
call qword [rax]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
test r13d, r13d
je 0x6d4163
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x00c807a0]
mov qword [rsp + 0x100], 0
call sub.KERNEL32.dll_EnterCriticalSection
mov rax, rdi
shl rax, 4
add rax, rbp
mov rbx, qword [rax]
test rbx, rbx
mov r8, rbx
setne r9b
and r8d, 0xf
jne 0x6d5966
test r9b, r9b
je 0x6d5966
mov rcx, qword [rax + 8]
mov r8d, 0x10
mov rdx, rcx
xor eax, eax
jmp 0x6d5931
add rax, 1
add rdx, 0x28
cmp rax, r8
jae 0x6d5977
cmp esi, dword [rdx]
jne 0x6d5924
imul rax, rax, 0x28
add rax, rcx
jne 0x6d59a8
and ebx, 0xf
jne 0x6d594c
test r9b, r9b
jne 0x6d5e82
shl rdi, 4
mov eax, ebx
add rbp, rdi
imul rax, rax, 0x28
add rax, qword [rbp + 8]
add qword [rbp], 1
mov dword [rax], esi
jmp 0x6d59a8
mov rax, rdi
shl rax, 4
mov rcx, qword [rbp + rax + 8]
test r8, r8
jne 0x6d591d
mov rcx, qword [rcx + 0x280]
test rcx, rcx
je 0x6d593e
mov rdx, rcx
xor eax, eax
jmp 0x6d599c
add eax, 1
add rdx, 0x28
cmp eax, 0x10
je 0x6d5977
cmp esi, dword [rdx]
jne 0x6d5990
lea rax, [rax + rax*4]
lea rax, [rcx + rax*8]
mov dword [rsp + 0xf0], r13d
mov byte [rsp + 0xf4], 0
mov qword [rsp + 0xf8], 0xffffffffffffffff
mov qword [rsp + 0x108], 0
jmp 0x6d54a5
mov r12, qword [rsp + 0x58]
mov rax, qword [rsp + 0x48]
mov r14d, 0x5c
xor r15d, r15d
add edi, edi
mov word [r10], r14w
add edx, 2
mov word [rax + 8], r15w
mov word [rax + 0xa], di
xor eax, eax
mov word [rbp], ax
movzx eax, word [r11]
test ax, ax
je 0x6d5edb
mov ecx, dword [rsp + 0x50]
mov ebp, edx
xor r9d, r9d
add ecx, 1
movsxd rcx, ecx
lea rcx, [r12 + rcx*2]
jmp 0x6d5a53
mov edi, 0x5c
add ebp, 2
mov word [r10], di
mov r10, r14
movsxd rdi, ebp
lea r14, [rsi + r8 + 4]
movzx eax, word [r11]
xor r9d, r9d
mov word [r10], ax
mov r11, rcx
movzx eax, word [rcx]
add rcx, 2
test ax, ax
je 0x6d5a89
movsxd rdi, ebp
lea r8, [rdi + rdi]
lea r10, [rsi + r8]
cmp ax, 0x5c
je 0x6d5a7e
cmp ax, 0x2f
je 0x6d5a7e
lea eax, [rbp + 1]
lea r14, [rsi + r8 + 2]
movsxd rdi, eax
test r9d, r9d
jne 0x6d5a22
mov ebp, eax
jmp 0x6d5a39
mov r14, r10
mov r9d, 1
jmp 0x6d5a44
mov eax, ebp
sub eax, edx
cmp eax, 2
je 0x6d5ca3
add eax, eax
mov rcx, qword [rsp + 0x48]
lea esi, [rdi + rdi + 0x12]
add edx, edx
xor r9d, r9d
xor r10d, r10d
mov word [rcx + 0xe], ax
lea eax, [rsi - 8]
mov word [rcx + 0xc], dx
xor edx, edx
mov word [r14], r9w
mov dword [rcx], 0xa0000003
mov word [rcx + 4], ax
mov word [rcx + 6], r10w
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x6d5c42
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
mov rcx, r13
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2200000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x6d5eb3
lea rax, [rsp + 0xf0]
mov r9d, esi
mov rcx, r12
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
mov r8, qword [rsp + 0x48]
mov edx, 0x900a4
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x6d5c08
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x48]
call fcn.006cb320
mov qword [rbx - 0x98], 0
jmp 0x6d4163
lea ecx, [rsi*4 + 0x20]
movsxd rcx, ecx
call fcn.006cb300
mov qword [rsp + 0x48], rax
test rax, rax
je 0x6d5f4d
mov rax, qword [rsp + 0x48]
mov r8d, 4
lea rdx, [0x00958748]
lea rsi, [rax + 0x10]
mov rcx, rsi
call sub.msvcrt.dll_wcsncpy
mov dword [rsp + 0x50], 4
mov r11d, 8
jmp 0x6d56c7
mov dword [rbx + 0x2c], 5
mov ecx, 5
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
call rbp
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
mov r12d, eax
call rsi
test r12d, r12d
jne 0x6d4163
jmp 0x6d5237
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
mov rcx, qword [rsp + 0x48]
cdqe
mov qword [rbx - 0x98], rax
call fcn.006cb320
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x6d4163
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
mov rcx, qword [rsp + 0x48]
cdqe
mov qword [rbx - 0x98], rax
movaps xmm6, xmmword [rsp + 0x170]
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm8, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.006cb320
lea eax, [rbp + 1]
mov r11d, 0x5c
movsxd rdi, eax
mov word [r14], r11w
mov eax, 6
lea r14, [rsi + rdi*2]
jmp 0x6d5a98
cmp r12, qword [rbx + 0x30]
je 0x6d5ccf
mov rcx, r12
call fcn.006cb320
mov ecx, 0x58
call fcn.006cb300
test rax, rax
je 0x6d52c0
mov edx, dword [rsp + 0x64]
imul edx, dword [rsp + 0x60]
mov qword [rax], 0
mov edi, edx
mov edx, dword [rsp + 0x68]
mov qword [rax + 8], rdi
mov edi, dword [rsp + 0x70]
mov qword [rax + 0x18], rdx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x20], rdx
mov qword [rax + 0x28], 0
mov qword [rax + 0x30], 0
or dword [rbx + 0x28], 8
mov qword [rbx - 0x90], rax
mov qword [rbx - 0x98], 0
jmp 0x6d4163
mov rcx, r14
call fcn.006cb320
jmp case.0x6d405c.26
call rbp
mov rcx, r12
mov edi, eax
call rsi
test edi, edi
jne 0x6d4163
jmp 0x6d5291
mov ecx, 0x288
call fcn.006cb300
mov rdx, rax
test rax, rax
je 0x6d5f4d
mov rax, rdi
shl rax, 4
add rax, rbp
mov rcx, qword [rax + 8]
mov r8, qword [rax]
mov qword [rdx + 0x280], rcx
mov qword [rax + 8], rdx
jmp 0x6d545b
lea r10, [rsi + 8]
lea rbp, [rsi + 0xa]
mov edi, 5
mov edx, 4
jmp 0x6d59da
mov esi, eax
mov r13, r12
cmp r12, rdx
jne 0x6d5dcf
mov dword [rbx + 0x2c], esi
mov ecx, esi
call fcn.006cf860
cdqe
mov qword [rbx - 0x98], rax
jmp 0x6d4163
mov esi, eax
mov r13, r12
mov rcx, r13
call fcn.006cb320
jmp 0x6d5db2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
mov rcx, r12
cdqe
mov qword [rbx - 0x98], rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x00c807a0]
mov qword [rsp + 0x100], 0
call sub.KERNEL32.dll_EnterCriticalSection
mov rax, rdi
shl rax, 4
add rax, rbp
mov rbx, qword [rax]
test rbx, rbx
mov r9, rbx
setne r8b
and r9d, 0xf
jne 0x6d5efa
test r8b, r8b
je 0x6d5efa
mov rax, qword [rax + 8]
mov r9d, 0x10
mov rcx, rax
xor edx, edx
jmp 0x6d5e5f
add rdx, 1
add rcx, 0x28
cmp rdx, r9
jae 0x6d5f0f
cmp esi, dword [rcx]
jne 0x6d5e4e
imul rdx, rdx, 0x28
add rax, rdx
jne 0x6d59a8
and ebx, 0xf
jne 0x6d594c
test r8b, r8b
je 0x6d594c
mov ecx, 0x288
call fcn.006cb300
test rax, rax
je 0x6d5f4d
mov rdx, rdi
shl rdx, 4
add rdx, rbp
mov rcx, qword [rdx + 8]
mov qword [rax + 0x280], rcx
mov qword [rdx + 8], rax
jmp 0x6d594c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x2c], eax
mov ecx, eax
call fcn.006cf860
mov rcx, qword [rsp + 0x48]
cdqe
mov qword [rbx - 0x98], rax
call fcn.006cb320
jmp 0x6d5c34
movsxd rdi, edx
lea r14, [rdi + rdi]
add r14, rsi
jmp 0x6d5a98
mov ecx, 0xe
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x6d5816
mov rax, rdi
shl rax, 4
mov rax, qword [rbp + rax + 8]
test r9, r9
jne 0x6d5e47
mov rcx, qword [rax + 0x280]
test rcx, rcx
je 0x6d5e70
mov rdx, rcx
xor eax, eax
nop dword [rax]
cmp esi, dword [rdx]
je 0x6d59a0
add eax, 1
add rdx, 0x28
cmp eax, 0x10
jne 0x6d5f28
mov rcx, qword [rcx + 0x280]
test rcx, rcx
jne 0x6d5f1f
jmp 0x6d5e70
lea rdx, [0x00958547]
mov ecx, 0xe
call fcn.006cf7a0
nop
nop
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x90]
mov rbx, rcx
mov rcx, qword [rax + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbx + 0x90]
call fcn.006cb320
mov qword [rbx + 0x88], 0
add rsp, 0x20
pop rbx
ret
add byte [rcx + 0x64], ch
imul esp, dword [rbp + rbp + 0x61], 0x35327365
sub eax, 0x4d4347
invalid
jae reloc.msvcrt.dll__errno
invalid
sub eax, 0x2d363532
invalid
xor dh, byte [0x63f7923d]
insd dword [rdi], dx
add byte [rcx + 0x64], ch
invalid
sub eax, 0x32736561
sub eax, 0x32736561
xor eax, 0x43432d36
add byte [r9 + 0x65], r12b
invalid
invalid
add byte [r9 + 0x65], r12b
invalid
invalid
jae 0x906548
xor dh, byte [0x63f39257]
insd dword [rdi], dx
add byte [rcx + 0x64], ch
imul esp, dword [rbp + rbp + 0x61], 0x35327365
invalid
invalid
ja _errno
jb _errno
sub eax, 0x6d6363
imul esp, dword [rbp + rbp + 0x61], 0x35327365
sub eax, 0x70617277
jb _errno
jo 0x90655f
jo 0x906595
add byte fs:[rcx + 0x45], al
push r11
push rbx
jb _errno
jo 0x90655f
jo 0x906595
add byte fs:[rcx + 0x45], al
invalid
invalid
push rbx
sub eax, 0x2d383231
push r12
push rdx
add byte [rcx + 0x65], ah
invalid
jae _findfirst64
xor dword [rdx], esi
cmp byte [0x0102d9b1], ch
push r11
sub eax, 0x2d323931
push r12
push rdx
add byte [rcx + 0x65], ah
invalid
invalid
invalid
jae _fileno
xor dword [rcx], edi
xor ch, byte [0x0102d9c9]
cmp dword [rdx], esi
sub eax, 0x727463
push r11
sub eax, 0x2d363532
push r12
push rdx
add byte [rcx + 0x65], ah
invalid
invalid
jae _findfirst64
jae _findfirst64
xor dh, byte [0x74f392b2]
jb str.id_camellia128_wrap
imul esp, dword [rbp + rbp + 0x63], 0x6c656d61
insb byte [rdi], dx
insb byte [rdi], dx
imul esp, dword [rcx + 0x31], 0x772d3832
jb _localtime64
cmp byte [0x70f1d808], ch
jo reloc.msvcrt.dll__fileno
add byte [rcx + 0x64], ch
sub eax, 0x656d6163
insb byte [rdi], dx
imul esp, dword [rbp + rbp + 0x63], 0x6c656d61
invalid
insb byte [rdi], dx
imul esp, dword [rcx + 0x31], 0x772d3239
invalid
xor dword [rcx], edi
invalid
invalid
ja _onexit
invalid
invalid
invalid
jo reloc.msvcrt.dll__fstat64
imul esp, dword [rbp + rbp + 0x63], 0x6c656d61
insb byte [rdi], dx
imul esp, dword [rcx + 0x32], 0x772d3635
xor eax, 0x72772d36
invalid
xor eax, 0x72772d36
invalid
jo str.anyExtendedKeyUsage
invalid
js str.RC4_HMAC_MD5
outsb dx, byte gs:[rsi]
jns _open
jae 0x90662c
add byte gs:[ecx + 0x6e], al
outsb dx, byte [rsi]
jns reloc.msvcrt.dll__localtime64
js _setjmp
outsb dx, byte gs:[rsi]
and byte fs:[rbx + 0x65], cl
jns _initterm
jns _initterm
push rbp
jae 0x906643
add byte gs:[ebp + 0x47], cl
xor dword [rax], r8d
xor dword [rax], eax
xor dword [rax], eax
insd dword [rdi], dx
xor word [eax], ax
push rdx
push rbx
push r11
push rbx
push rbx
sub eax, 0x535350
jb 0x90666f
invalid
invalid
jae str.AES_128_XTS
push r11
push r11
sub eax, 0x2d383231
pop rax
push rsp
push rbx
add byte [rcx + 0x65], ah
invalid
jae str.rc4_hmac_md5
cmp byte [0x00e3ba68], ch
invalid
xor dword [rdx], esi
cmp byte [0x0103da94], ch
push r11
je 0x90668e
add byte [rcx + 0x45], al
invalid
invalid
push rbx
sub eax, 0x2d363532
pop rax
push rsp
xor dh, byte [0x54e8935c]
push rbx
add byte [rcx + 0x65], ah
invalid
jae 0x906659
invalid
xor dh, byte [0x75089368]
jae str.RC4_HMAC_MD5
push rdx
xor al, 0x2d
sub eax, 0x35444d
sub eax, 0x35444d
sub eax, 0x35444d
jb str.AES_256_CBC_HMAC_SHA1
invalid
xor al, 0x2d
push 0x2d63616d
sub eax, 0x35646d
push r11
insd dword [rdi], dx
xor eax, 0x53454100
push r11
sub eax, 0x2d383231
sub eax, 0x43414d48
cmp byte [0x2dd3a89d], ch
sub eax, 0x31414853
invalid
invalid
invalid
sub eax, 0x43414d48
sub eax, 0x31414853
xor dword [r8], eax
invalid
add byte [rcx + 0x65], ah
invalid
jae 0x906695
xor dword [rdx], esi
cmp byte [0x2df3c8d3], ch
invalid
sub eax, 0x63616d68
invalid
jae 0x9066df
invalid
sub eax, 0x63616d68
sub eax, 0x31616873
xor dword [rax], eax
push r11
invalid
xor dword [rax], eax
push r11
sub eax, 0x2d323931
sub eax, 0x43414d48
sub eax, 0x31414853
xor dword [r8], eax
invalid
jae _unlock
xor dword [r8], eax
xor dword [rax], eax
invalid
xor dword [rcx], edi
xor ch, byte [0x2df3c8ff]
invalid
invalid
invalid
invalid
cmp dword [rdx], esi
sub eax, 0x2d636263
invalid
invalid
invalid
invalid
push 0x2d63616d
jae 0x90670b
invalid
push r11
sub eax, 0x2d363532
sub eax, 0x43414d48
sub eax, 0x31414853
xor dword [r8], eax
invalid
jae 0x9066ed
xor dh, byte [0x62f393fc]
xor eax, 0x62632d36
invalid
invalid
imul esp, dword [rbx + 0x6e], 0x65626d75
jb str.X9.42_DH
pop rax
cmp dword [rsi], ebp
xor al, 0x32
and byte [rax + rcx*2], al
invalid
invalid
invalid
invalid
xor byte [rdx + 0x31], dh
add byte [rdx + 0x72], ah
invalid
jb 0x906773