Function at 0x14001fbe0
Capabilities:
Enumerate files on windows
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7a0]
sub rsp, 0x8a0
mov rax, qword [0x1401bc300]
xor rax, rsp
mov qword [rbp + 0x790], rax
mov qword [rbp - 0x10], rcx
mov qword [rsp + 0x48], rcx
xor r12d, r12d
mov dword [rsp + 0x44], r12d
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x480], xmm1
mov qword [rbp + 0x490], r12
lea rax, [0x1400f9580]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x11
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x500]
call fcn.14000c780
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x4a0], xmm0
lea r8d, [r12 + 2]
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x4a0]
call fcn.14001c970
test eax, eax
jne 0x140020f04
lea rcx, [rbp + 0x500]
call fcn.140002810
xorps xmm0, xmm0
movups xmmword [rbp + 0x530], xmm0
mov rax, qword [rbp + 0x4a8]
test rax, rax
je 0x14001fcba
lock inc dword [rax + 8]
mov rax, qword [rbp + 0x4a8]
movdqa xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x530], xmm1
movups xmmword [rbp + 0x18], xmm0
test rax, rax
je 0x14001fcdf
lock inc dword [rax + 8]
movdqa xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x80], xmm1
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x18]
call fcn.1400225e0
nop
mov rbx, qword [rbp + 0x18]
nop dword [rax]
mov rax, qword [rbp + 0x530]
cmp rax, rbx
je 0x14001fd5a
lea r8, [rax + 0x20]
mov rax, qword [rbp + 0x488]
cmp rax, qword [rbp + 0x490]
je 0x14001fd35
mov rdx, r8
mov rcx, rax
call fcn.14000a510
add qword [rbp + 0x488], 0x20
jmp 0x14001fd44
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.14001c620
lea rcx, [rbp + 0x530]
call fcn.140021c10
test eax, eax
jne 0x140020ee6
jmp 0x14001fd00
lea rcx, [rbp + 0x18]
call fcn.14001db90
nop
lea rcx, [rbp + 0x530]
call fcn.14001db90
nop
lea rcx, [rbp + 0x4a0]
call fcn.14001db90
lea rax, [0x1400f9598]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 0x17
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0xb0]
call fcn.14000c780
mov r13d, 0x6000
mov dword [rsp + 0x44], r13d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x4f0], xmm0
mov r8d, 2
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x4f0]
call fcn.14001c970
test eax, eax
jne 0x140020f1a
lea rcx, [rbp + 0xb0]
call fcn.140002810
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
mov rax, qword [rbp + 0x4f8]
test rax, rax
je 0x14001fe15
lock inc dword [rax + 8]
mov rax, qword [rbp + 0x4f8]
mov r13d, dword [rsp + 0x44]
movdqa xmm1, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x520], xmm1
movups xmmword [rbp + 0x28], xmm0
test rax, rax
je 0x14001fe3f
lock inc dword [rax + 8]
movdqa xmm1, xmmword [rbp + 0x4f0]
mov r13d, dword [rsp + 0x44]
movdqa xmmword [rbp + 0xa0], xmm1
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x28]
call fcn.1400225e0
nop
mov rbx, qword [rbp + 0x28]
nop dword [rax]
mov rax, qword [rbp + 0x520]
cmp rax, rbx
je 0x14001feba
lea r8, [rax + 0x20]
mov rax, qword [rbp + 0x488]
cmp rax, qword [rbp + 0x490]
je 0x14001fe95
mov rdx, r8
mov rcx, rax
call fcn.14000a510
add qword [rbp + 0x488], 0x20
jmp 0x14001fea4
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.14001c620
lea rcx, [rbp + 0x520]
call fcn.140021c10
test eax, eax
jne 0x140020ef5
jmp 0x14001fe60
lea rcx, [rbp + 0x28]
call fcn.14001db90
nop
lea rcx, [rbp + 0x520]
call fcn.14001db90
nop
lea rcx, [rbp + 0x4f0]
call fcn.14001db90
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d0], xmm1
mov qword [rbp + 0x4e0], r12
mov r14, qword [rbp + 0x488]
mov rax, r14
mov rcx, qword [rbp + 0x480]
sub rax, rcx
cmp rax, 0x20
jb 0x1400204a9
movzx esi, byte [rsp + 0x40]
movzx ebx, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
nop dword [rax]
sub r14, rcx
sar r14, 5
call qword [sym.imp.ucrtbase.dll_rand]
cdqe
xor edx, edx
div r14
mov r14, rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 2
lea rdx, [0x1400f95b0]
lea rcx, [rbp - 0x70]
call fcn.14000b1a0
nop
movsxd r12, r14d
mov rax, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x480]
sub rax, rcx
sar rax, 5
cmp rax, r12
jbe 0x140020f36
mov r15, r12
shl r15, 5
lea rdx, [r15 + rcx]
lea rcx, [rbp - 0x50]
call fcn.14000a510
or r13d, 0x10
lea r9, [rbp - 0x70]
lea r8, [rbp - 0x50]
movzx edx, sil
lea rcx, [rsp + 0x50]
call fcn.14001d410
or r13d, 0x20
mov dword [rbp + 0x4a0], r13d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x500], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x510], xmm1
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x140020010
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002000a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400206fb
call fcn.1400f2e38
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x140020050
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002004b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020717
call fcn.1400f2e38
lea rcx, [rbp + 0x500]
cmp qword [rbp + 0x518], 7
cmova rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0x540]
call qword [sym.imp.kernel32.dll_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14002042e
cmp word [rbp + 0x56c], 0x2e
je 0x14002040d
test byte [rbp + 0x540], 0x10
jne 0x14002040d
lea rax, [rbp + 0x56c]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400200b0
cmp r8, 4
jbe 0x14002040d
movabs rax, 0x1a81ca41da7e2475
mov qword [rsp + 0x50], rax
movabs rax, 0x1591b425506997a
mov qword [rsp + 0x58], rax
xorps xmm2, xmm2
movabs rcx, 0x1ae4ca39da1b245b
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0x110]
mov ecx, 2
xor r10d, r10d
nop dword [rax]
mov qword [rax], r10
mov qword [rax + 8], r10
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140020110
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x120], xmm2
lea rcx, [rbp + 0x3e0]
lea rax, [rbp + 0x110]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x90], xmm1
lea rax, [rbp + 0x564]
lea rax, [rax + r8*2]
lea r9, [rbp + 0x3e0]
sub r9, rax
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + r9]
sub edx, ecx
jne 0x1400201d4
add rax, 2
test ecx, ecx
jne 0x1400201c0
test edx, edx
jne 0x14002040d
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], r10
mov qword [rbp + 0x70], r10
lea rdx, [rbp + 0x56c]
lea rcx, [rbp + 0x58]
call fcn.14000b1a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
lea r8d, [rax + 1]
lea rdx, [0x1400f95b8]
lea rcx, [rbp - 0x30]
call fcn.14000b1a0
nop
mov rax, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x480]
sub rax, rcx
sar rax, 5
cmp rax, r12
jbe 0x140020f30
lea rdx, [rcx + r15]
lea rcx, [rsp + 0x50]
call fcn.14000a510
bts r13d, 0xa
lea r9, [rbp - 0x30]
lea r8, [rsp + 0x50]
movzx edx, dil
lea rcx, [rbp + 0xf0]
call fcn.14001d410
bts r13d, 9
lea r9, [rbp + 0x58]
lea r8, [rbp + 0xf0]
movzx edx, bl
lea rcx, [rbp - 0x50]
call fcn.14001d410
bts r13d, 8
mov dword [rbp + 0x4a0], r13d
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp - 0x40]
movups xmmword [rbp - 0x60], xmm1
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], ax
mov rdx, qword [rbp + 0x4d8]
cmp rdx, qword [rbp + 0x4e0]
je 0x1400202e7
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], ax
add qword [rbp + 0x4d8], 0x20
jmp 0x1400202f8
lea r8, [rbp - 0x70]
lea rcx, [rbp + 0x4d0]
call fcn.14001c7b0
nop
lea rcx, [rbp - 0x70]
call fcn.140002810
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x140020349
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020343
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020702
call fcn.1400f2e38
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14002038c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020386
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020709
call fcn.1400f2e38
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 7
jbe 0x1400203cd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400203c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020710
call fcn.1400f2e38
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 7
jbe 0x14002040d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020408
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020717
call fcn.1400f2e38
lea rdx, [rbp + 0x540]
mov rcx, r14
call qword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
jne 0x140020081
mov rcx, r14
call qword [sym.imp.kernel32.dll_FindClose]
add r15, qword [rbp + 0x480]
mov r13, qword [rbp + 0x488]
lea r14, [r15 + 0x20]
cmp r14, r13
je 0x140020464
mov rdx, r14
mov rcx, r15
call fcn.14000a470
add r15, 0x20
add r14, 0x20
cmp r14, r13
jne 0x140020445
mov r13, qword [rbp + 0x488]
lea rcx, [r13 - 0x20]
call fcn.140002810
sub qword [rbp + 0x488], 0x20
lea rcx, [rbp + 0x500]
call fcn.140002810
mov r14, qword [rbp + 0x488]
mov rax, r14
mov rcx, qword [rbp + 0x480]
sub rax, rcx
mov r13d, dword [rbp + 0x4a0]
xor r12d, r12d
cmp rax, 0x20
jae 0x14001ff20
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4b0], xmm1
mov qword [rbp + 0x4c0], r12
mov ecx, 0x180
call fcn.1400f33bc
mov rdi, rax
mov qword [rbp + 0x4a0], rax
mov r15, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x4d8]
mov qword [rsp + 0x48], rax
cmp r15, rax
je 0x140020ce6
movabs r12, 0xa6b68b12496826c
movabs r14, 0x16d2fee0f353034f
movabs rsi, 0x4541dd06047c611
movabs rdi, 0xa6b68b124f38202
movabs rbx, 0x16bbfe87f33d030a
mov rdx, r15
lea rcx, [rbp + 0xd0]
call fcn.14000a510
bts r13d, 7
or r13d, 1
mov dword [rsp + 0x44], r13d
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r12
xorps xmm2, xmm2
lea rax, [rbp + 0x110]
mov ecx, 2
xor edx, edx
nop
mov qword [rax], rdx
mov qword [rax + 8], rdx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140020560
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x120], xmm2
lea rcx, [rbp + 0x300]
lea rax, [rbp + 0x110]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
lea rax, [rbp + 0x300]
mov r10, 0xffffffffffffffff
inc r10
cmp word [rax + r10*2], dx
jne 0x140020622
lea rbx, [rbp + 0xd0]
mov r14, qword [rbp + 0xd0]
mov r12, qword [rbp + 0xe8]
cmp r12, 7
cmova rbx, r14
mov rax, qword [rbp + 0xe0]
cmp r10, rax
ja 0x140020729
sub rax, r10
test r10, r10
je 0x1400206f0
lea rdi, [rbx + 2]
lea rdi, [rdi + rax*2]
mov rcx, rbx
movzx r11d, word [rbp + 0x110]
nop dword [rax + rax]
mov rax, rdi
sub rax, rcx
sar rax, 1
je 0x1400206a7
cmp word [rcx], r11w
je 0x1400206a4
cmp rax, 1
je 0x1400206a7
dec rax
add rcx, 2
cmp word [rcx], r11w
jne 0x140020691
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x140020729
mov r8, r10
lea rdx, [rbp + 0x300]
test r10, r10
je 0x1400206e4
lea rax, [rbp + 0x300]
mov r9, rcx
sub r9, rax
nop dword [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x14002071e
add rdx, 2
sub r8, 1
jne 0x1400206d0
sub rcx, rbx
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x140020729
mov rsi, qword [rbp + 0x10]
mov bl, 1
jmp 0x140020a9c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
add rcx, 2
xor edx, edx
jmp 0x140020680
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.14000a510
bts r13d, 0xb
or r13d, 2
mov dword [rsp + 0x44], r13d
movabs rax, 0x3862cafd07532
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rsi
movabs rax, 0x3866daf94757b
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rsi
xorps xmm2, xmm2
lea rax, [rbp + 0x110]
mov ecx, 2
xor edx, edx
nop dword [rax]
mov qword [rax], rdx
mov qword [rax + 8], rdx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140020780
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x200], xmm2
movaps xmm0, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x210], xmm0
movaps xmm1, xmmword [rbp + 0x140]
movaps xmmword [rbp + 0x220], xmm1
movaps xmm0, xmmword [rbp + 0x150]
movaps xmmword [rbp + 0x230], xmm0
movaps xmm1, xmmword [rbp + 0x160]
movaps xmmword [rbp + 0x240], xmm1
movaps xmm0, xmmword [rbp + 0x170]
movaps xmmword [rbp + 0x250], xmm0
movaps xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x260], xmm1
lea rax, [rbp + 0x1f0]
mov r10, 0xffffffffffffffff
inc r10
cmp word [rax + r10*2], dx
jne 0x140020814
lea rbx, [rbp - 8]
mov rsi, qword [rbp + 0x10]
cmp rsi, 7
cmova rbx, qword [rbp - 8]
mov rax, qword [rbp + 8]
cmp r10, rax
ja 0x1400208d8
sub rax, r10
test r10, r10
je 0x140020a80
lea rdi, [rbx + 2]
lea rdi, [rdi + rax*2]
mov rcx, rbx
movzx r11d, word [rbp + 0x110]
nop dword [rax + rax]
mov rax, rdi
sub rax, rcx
sar rax, 1
je 0x140020887
cmp word [rcx], r11w
je 0x140020884
cmp rax, 1
je 0x140020887
dec rax
add rcx, 2
cmp word [rcx], r11w
jne 0x140020871
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x1400208d8
mov r8, r10
lea rdx, [rbp + 0x1f0]
test r10, r10
je 0x1400208c8
lea rax, [rbp + 0x1f0]
mov r9, rcx
sub r9, rax
nop dword [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140020a84
add rdx, 2
sub r8, 1
jne 0x1400208b0
sub rcx, rbx
sar rcx, 1
cmp rcx, 0xffffffffffffffff
jne 0x140020a80
mov rdx, r15
lea rcx, [rbp + 0x38]
call fcn.14000a510
or r13d, 0x1004
movabs rax, 0x58045fbe7e1b8
mov qword [rsp + 0x50], rax
movabs rax, 0x9e07c7a19d28e71
mov qword [rsp + 0x58], rax
movabs rcx, 0x58022fb85e1fc
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
xorps xmm2, xmm2
lea rax, [rbp + 0x110]
mov ecx, 2
xor edx, edx
nop
mov qword [rax], rdx
mov qword [rax + 8], rdx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140020930
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x270], xmm0
movaps xmmword [rbp + 0x280], xmm2
movaps xmm0, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x290], xmm0
movaps xmm1, xmmword [rbp + 0x140]
movaps xmmword [rbp + 0x2a0], xmm1
movaps xmm0, xmmword [rbp + 0x150]
movaps xmmword [rbp + 0x2b0], xmm0
movaps xmm1, xmmword [rbp + 0x160]
movaps xmmword [rbp + 0x2c0], xmm1
movaps xmm0, xmmword [rbp + 0x170]
movaps xmmword [rbp + 0x2d0], xmm0
movaps xmm1, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x2e0], xmm1
lea rax, [rbp + 0x270]
mov r10, 0xffffffffffffffff
inc r10
cmp word [rax + r10*2], dx
jne 0x1400209c4
lea rbx, [rbp + 0x38]
cmp qword [rbp + 0x50], 7
cmova rbx, qword [rbp + 0x38]
mov rax, qword [rbp + 0x48]
cmp r10, rax
ja 0x140020a9a
sub rax, r10
test r10, r10
je 0x140020a80
lea rdi, [rbx + 2]
lea rdi, [rdi + rax*2]
mov rcx, rbx
movzx r11d, word [rbp + 0x110]
nop dword [rax + rax]
mov rax, rdi
sub rax, rcx
sar rax, 1
je 0x140020a37
cmp word [rcx], r11w
je 0x140020a34
cmp rax, 1
je 0x140020a37
dec rax
add rcx, 2
cmp word [rcx], r11w
jne 0x140020a21
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x140020a9a
mov r8, r10
lea rdx, [rbp + 0x270]
test r10, r10
je 0x140020a74
lea rax, [rbp + 0x270]
mov r9, rcx
sub r9, rax
nop dword [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140020a8f
add rdx, 2
sub r8, 1
jne 0x140020a60
sub rcx, rbx
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x140020a9a
mov bl, 1
jmp 0x140020a9c
add rcx, 2
xor edx, edx
jmp 0x140020860
add rcx, 2
xor edx, edx
jmp 0x140020a10
xor bl, bl
test r13b, 4
je 0x140020ae7
and r13d, 0xfffffffb
mov rdx, qword [rbp + 0x50]
cmp rdx, 7
jbe 0x140020ae7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020ae1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cd1
call fcn.1400f2e38
nop
test r13b, 2
je 0x140020b2e
and r13d, 0xfffffffd
cmp rsi, 7
jbe 0x140020b2e
lea rdx, [rsi*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cd8
call fcn.1400f2e38
nop
test r13b, 1
je 0x140020b73
and r13d, 0xfffffffe
cmp r12, 7
jbe 0x140020b73
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140020b6b
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cdf
mov rcx, r14
call fcn.1400f2e38
test bl, bl
jne 0x140020cb9
mov rcx, r15
cmp qword [r15 + 0x18], 7
jbe 0x140020b88
mov rcx, qword [r15]
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
lea edx, [r12 + 1]
lea r8d, [r12 + 7]
call qword [sym.imp.kernel32.dll_CreateFileW]
mov rbx, rax
mov rdi, qword [rbp + 0x4a0]
cmp rax, 0xffffffffffffffff
je 0x140020cc3
mov dword [rbp + 0x4c8], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x4c8]
mov r8d, 0x180
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
je 0x140020ca2
cmp dword [rbp + 0x4c8], 0x180
jne 0x140020ca2
mov eax, r12d
mov ecx, 0x4550
nop dword [rax]
cmp word [rax + rdi], cx
jne 0x140020c34
movzx ecx, word [rax + rdi + 4]
mov edx, 0x8664
cmp cx, dx
je 0x140020c56
mov edx, 0x14c
cmp cx, dx
je 0x140020ca2
mov ecx, 0x4550
inc rax
cmp rax, 0x178
jl 0x140020c10
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
add r15, 0x20
cmp r15, qword [rsp + 0x48]
jmp 0x1400204e5
mov rax, qword [rbp + 0x4b8]
cmp rax, qword [rbp + 0x4c0]
je 0x140020c90
mov rdx, r15
mov rcx, rax
call fcn.14000a510
add qword [rbp + 0x4b8], 0x20
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
add r15, 0x20
cmp r15, qword [rsp + 0x48]
jmp 0x1400204e5
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x4b0]
call fcn.14001c620
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
add r15, 0x20
cmp r15, qword [rsp + 0x48]
jmp 0x1400204e5
mov rdi, qword [rbp + 0x4a0]
xor r12d, r12d
add r15, 0x20
cmp r15, qword [rsp + 0x48]
jmp 0x1400204e5
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400f2e38
mov rbx, qword [rbp + 0x4b8]
sub rbx, qword [rbp + 0x4b0]
sar rbx, 5
call qword [sym.imp.ucrtbase.dll_rand]
cdqe
xor edx, edx
div rbx
mov rax, qword [rbp + 0x4b8]
mov rcx, qword [rbp + 0x4b0]
sub rax, rcx
sar rax, 5
cmp rax, rdx
jbe 0x140020ee0
shl rdx, 5
add rdx, rcx
mov rsi, qword [rbp - 0x10]
mov rcx, rsi
call fcn.14000a510
nop
mov rbx, qword [rbp + 0x4b0]
test rbx, rbx
je 0x140020dbf
mov rdi, qword [rbp + 0x4b8]
cmp rbx, rdi
je 0x140020d6f
mov rcx, rbx
call fcn.140002810
add rbx, 0x20
cmp rbx, rdi
jne 0x140020d57
mov rbx, qword [rbp + 0x4b0]
mov rdx, qword [rbp + 0x4c0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140020da5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020da5
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400f2e38
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], r12
mov rbx, qword [rbp + 0x4d0]
test rbx, rbx
je 0x140020e3f
mov rdi, qword [rbp + 0x4d8]
cmp rbx, rdi
je 0x140020def
mov rcx, rbx
call fcn.140002810
add rbx, 0x20
cmp rbx, rdi
jne 0x140020dd7
mov rbx, qword [rbp + 0x4d0]
mov rdx, qword [rbp + 0x4e0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140020e25
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020e25
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400f2e38
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x4d0], xmm0
mov qword [rbp + 0x4e0], r12
mov rbx, qword [rbp + 0x480]
test rbx, rbx
je 0x140020ead
mov rdi, qword [rbp + 0x488]
cmp rbx, rdi
je 0x140020e6f
mov rcx, rbx
call fcn.140002810
add rbx, 0x20
cmp rbx, rdi
jne 0x140020e57
mov rbx, qword [rbp + 0x480]
mov rdx, qword [rbp + 0x490]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140020ea5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020ea5
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400f2e38
mov rax, rsi
mov rcx, qword [rbp + 0x790]
xor rcx, rsp
call fcn.1400f3250
lea r11, [rsp + 0x8a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140022470
nop
mov edx, eax
lea rcx, [0x1400f9518]
call fcn.140022250
nop
mov edx, eax
lea rcx, [0x1400f9518]
call fcn.140022250
nop
lea r8, [rbp + 0x500]
mov edx, eax
lea rcx, [0x1400f94f0]
call fcn.140003130
nop
lea r8, [rbp + 0xb0]
mov edx, eax
lea rcx, [0x1400f94f0]
call fcn.140003130
nop
call fcn.140022470
nop
call fcn.140022470
int3