Function at 0x140011d20
Capabilities:
Create process on windows
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x828]
sub rsp, 0x928
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov rax, qword [0x14003ae50]
xor rax, rsp
mov qword [rbp + 0x818], rax
mov byte [rsp + 0x30], r9b
mov rax, r8
mov qword [rsp + 0x60], rax
mov rdi, rdx
mov qword [rsp + 0x50], rdx
mov rsi, rcx
mov qword [rsp + 0x40], rcx
mov qword [rbp - 0x78], rdx
mov qword [rbp - 0x70], rax
mov qword [rbp + 0x320], 7
xor ebx, ebx
mov qword [rbp + 0x318], rbx
mov word [rbp + 0x308], bx
mov qword [rbp + 0x2d0], 7
mov qword [rbp + 0x2c8], rbx
mov word [rbp + 0x2b8], bx
lea ecx, [rbx + 0x30]
call fcn.140018b7c
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140011dc4
mov rcx, rax
call fcn.14000ff30
mov rbx, rax
mov qword [rsp + 0x38], rbx
mov r8d, 0xb
lea rdx, [0x1400388c0]
mov rcx, rbx
call fcn.14000ffb0
mov r8d, 0x2e
lea rdx, [0x1400387e8]
mov rcx, rbx
call fcn.14000ffa0
lea rdx, [rbp + 0x740]
mov rcx, rbx
call fcn.140010560
nop
mov r8d, 0x30
lea rdx, [0x140038818]
mov rcx, rbx
call fcn.14000ffa0
lea rdx, [rbp + 0x588]
mov rcx, rbx
call fcn.140010560
nop
mov r8d, 0x30
lea rdx, [0x140038848]
mov rcx, rbx
call fcn.14000ffa0
lea rdx, [rbp + 0x790]
mov rcx, rbx
call fcn.140010560
nop
mov r8d, 0x16
lea rdx, [0x140038878]
mov rcx, rbx
call fcn.14000ffa0
lea rdx, [rbp + 0x768]
mov rcx, rbx
call fcn.140010560
nop
mov r8d, 0x2a
lea rdx, [0x140038890]
mov rcx, rbx
call fcn.14000ffa0
lea rdx, [rbp + 0x718]
mov rcx, rbx
call fcn.140010560
nop
mov qword [rbp + 0x7e0], 7
xor eax, eax
mov qword [rbp + 0x7d8], rax
mov word [rbp + 0x7c8], ax
lea r8d, [rax + 1]
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x7c8]
call fcn.1400039a0
nop
lea r8, [rbp + 0x7c8]
mov rdx, rdi
lea rcx, [rbp + 0x7f0]
call fcn.140008ec0
nop
mov r8, qword [rsp + 0x60]
mov rdx, rax
lea rcx, [rbp + 0x678]
call fcn.140008f20
nop
cmp qword [rbp + 0x808], 8
jb 0x140011f0c
mov rcx, qword [rbp + 0x7f0]
call fcn.1400187b4
mov qword [rbp + 0x808], 7
xor eax, eax
mov qword [rbp + 0x800], rax
mov word [rbp + 0x7f0], ax
cmp qword [rbp + 0x7e0], 8
jb 0x140011f3f
mov rcx, qword [rbp + 0x7c8]
call fcn.1400187b4
xor eax, eax
mov qword [rbp + 0x7e0], 7
mov qword [rbp + 0x7d8], rax
mov word [rbp + 0x7c8], ax
lea rcx, [rbp + 0x678]
cmp qword [rbp + 0x690], 8
cmovae rcx, qword [rbp + 0x678]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x68], rax
cmp rax, 0xffffffffffffffff
je 0x140013b4f
nop dword [rax + rax]
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp - 0x54]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x7b8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
test byte [rbp - 0x60], 0x10
jne 0x14001326a
mov qword [rbp + 0x230], 7
xor eax, eax
mov qword [rbp + 0x228], rax
mov word [rbp + 0x218], ax
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x34]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
mov qword [rbp + 0x208], 7
xor edi, edi
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x1f0]
call fcn.1400039a0
nop
movzx eax, word [rbp - 0x7e]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x358]
call fcn.140011410
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rdi
mov word [rbp + 0x240], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c850]
lea rcx, [rbp + 0x240]
call fcn.1400039a0
nop
movzx ecx, word [rbp - 0x80]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x510]
call fcn.140011410
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rdi
mov word [rbp + 0x268], di
lea r8d, [rdi + 0xa]
lea rdx, str.nbspnbsp
lea rcx, [rbp + 0x268]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x78]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x4c0]
call fcn.140011410
mov rsi, rax
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], rdi
mov word [rbp + 0x290], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c830]
lea rcx, [rbp + 0x290]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x7a]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x470]
call fcn.140011410
mov rbx, rax
mov qword [rbp + 0x348], 7
mov qword [rbp + 0x340], rdi
mov word [rbp + 0x330], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c830]
lea rcx, [rbp + 0x330]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x7e]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x420]
call fcn.140011410
mov rdi, rax
mov edx, dword [rbp - 0x40]
lea rcx, [rbp + 0x3d0]
call fcn.140011370
nop
mov r8, rax
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x3a8]
call fcn.140008ec0
nop
lea r8, [rbp + 0x588]
mov rdx, rax
lea rcx, [rbp + 0x5d8]
call fcn.140008f20
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x498]
call fcn.140011720
nop
lea r8, [rbp + 0x330]
mov rdx, rax
lea rcx, [rbp + 0x538]
call fcn.140011720
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x448]
call fcn.140011720
nop
lea r8, [rbp + 0x290]
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.140011720
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.140011720
nop
lea r8, [rbp + 0x268]
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140011720
nop
mov r8, qword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0x5b0]
call fcn.140011720
nop
lea r8, [rbp + 0x240]
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.140011720
nop
mov r8, qword [rsp + 0x48]
mov rdx, rax
lea rcx, [rbp + 0x628]
call fcn.140011720
nop
lea r8, [rbp + 0x790]
mov rdx, rax
lea rcx, [rbp + 0x650]
call fcn.140008f20
nop
mov rbx, qword [rsp + 0x50]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x6c8]
call fcn.140008f20
nop
lea r8, [rbp + 0x1f0]
mov rdx, rax
lea rcx, [rbp + 0x6a0]
call fcn.140011720
nop
lea r8, [rbp + 0x218]
mov rdx, rax
lea rcx, [rbp + 0x6f0]
call fcn.140011720
mov rdi, rax
lea rax, [rbp + 0x2b8]
cmp rax, rdi
je 0x14001236e
cmp qword [rbp + 0x2d0], 8
jb 0x140012304
mov rcx, qword [rbp + 0x2b8]
call fcn.1400187b4
mov qword [rbp + 0x2d0], 7
xor esi, esi
mov qword [rbp + 0x2c8], rsi
mov word [rbp + 0x2b8], si
cmp qword [rdi + 0x18], 8
jae 0x140012341
mov r8, qword [rdi + 0x10]
inc r8
add r8, r8
mov rdx, rdi
lea rcx, [rbp + 0x2b8]
call fcn.1400187d0
jmp 0x14001234e
mov rax, qword [rdi]
mov qword [rbp + 0x2b8], rax
mov qword [rdi], rsi
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x2c8], rax
mov rax, qword [rdi + 0x18]
mov qword [rbp + 0x2d0], rax
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
jmp 0x140012370
xor esi, esi
cmp qword [rbp + 0x708], 8
jb 0x140012386
mov rcx, qword [rbp + 0x6f0]
call fcn.1400187b4
mov qword [rbp + 0x708], 7
mov qword [rbp + 0x700], rsi
mov word [rbp + 0x6f0], si
cmp qword [rbp + 0x6b8], 8
jb 0x1400123b5
mov rcx, qword [rbp + 0x6a0]
call fcn.1400187b4
mov qword [rbp + 0x6b8], 7
mov qword [rbp + 0x6b0], rsi
mov word [rbp + 0x6a0], si
cmp qword [rbp + 0x6e0], 8
jb 0x1400123e4
mov rcx, qword [rbp + 0x6c8]
call fcn.1400187b4
mov qword [rbp + 0x6e0], 7
mov qword [rbp + 0x6d8], rsi
mov word [rbp + 0x6c8], si
cmp qword [rbp + 0x668], 8
jb 0x140012413
mov rcx, qword [rbp + 0x650]
call fcn.1400187b4
mov qword [rbp + 0x668], 7
mov qword [rbp + 0x660], rsi
mov word [rbp + 0x650], si
cmp qword [rbp + 0x640], 8
jb 0x140012442
mov rcx, qword [rbp + 0x628]
call fcn.1400187b4
mov qword [rbp + 0x640], 7
mov qword [rbp + 0x638], rsi
mov word [rbp + 0x628], si
cmp qword [rbp + 0x578], 8
jb 0x140012471
mov rcx, qword [rbp + 0x560]
call fcn.1400187b4
mov qword [rbp + 0x578], 7
mov qword [rbp + 0x570], rsi
mov word [rbp + 0x560], si
cmp qword [rbp + 0x5c8], 8
jb 0x1400124a0
mov rcx, qword [rbp + 0x5b0]
call fcn.1400187b4
mov qword [rbp + 0x5c8], 7
mov qword [rbp + 0x5c0], rsi
mov word [rbp + 0x5b0], si
cmp qword [rbp + 0x500], 8
jb 0x1400124cf
mov rcx, qword [rbp + 0x4e8]
call fcn.1400187b4
mov qword [rbp + 0x500], 7
mov qword [rbp + 0x4f8], rsi
mov word [rbp + 0x4e8], si
cmp qword [rbp + 0x410], 8
jb 0x1400124fe
mov rcx, qword [rbp + 0x3f8]
call fcn.1400187b4
mov qword [rbp + 0x410], 7
mov qword [rbp + 0x408], rsi
mov word [rbp + 0x3f8], si
cmp qword [rbp + 0x398], 8
jb 0x14001252d
mov rcx, qword [rbp + 0x380]
call fcn.1400187b4
mov qword [rbp + 0x398], 7
mov qword [rbp + 0x390], rsi
mov word [rbp + 0x380], si
cmp qword [rbp + 0x460], 8
jb 0x14001255c
mov rcx, qword [rbp + 0x448]
call fcn.1400187b4
mov qword [rbp + 0x460], 7
mov qword [rbp + 0x458], rsi
mov word [rbp + 0x448], si
cmp qword [rbp + 0x550], 8
jb 0x14001258b
mov rcx, qword [rbp + 0x538]
call fcn.1400187b4
mov qword [rbp + 0x550], 7
mov qword [rbp + 0x548], rsi
mov word [rbp + 0x538], si
cmp qword [rbp + 0x4b0], 8
jb 0x1400125ba
mov rcx, qword [rbp + 0x498]
call fcn.1400187b4
mov qword [rbp + 0x4b0], 7
mov qword [rbp + 0x4a8], rsi
mov word [rbp + 0x498], si
cmp qword [rbp + 0x5f0], 8
jb 0x1400125e9
mov rcx, qword [rbp + 0x5d8]
call fcn.1400187b4
mov qword [rbp + 0x5f0], 7
mov qword [rbp + 0x5e8], rsi
mov word [rbp + 0x5d8], si
cmp qword [rbp + 0x3c0], 8
jb 0x140012618
mov rcx, qword [rbp + 0x3a8]
call fcn.1400187b4
mov qword [rbp + 0x3c0], 7
mov qword [rbp + 0x3b8], rsi
mov word [rbp + 0x3a8], si
cmp qword [rbp + 0x3e8], 8
jb 0x140012647
mov rcx, qword [rbp + 0x3d0]
call fcn.1400187b4
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rsi
mov word [rbp + 0x3d0], si
cmp qword [rbp + 0x438], 8
jb 0x140012676
mov rcx, qword [rbp + 0x420]
call fcn.1400187b4
mov qword [rbp + 0x438], 7
mov qword [rbp + 0x430], rsi
mov word [rbp + 0x420], si
cmp qword [rbp + 0x348], 8
jb 0x1400126a5
mov rcx, qword [rbp + 0x330]
call fcn.1400187b4
mov qword [rbp + 0x348], 7
mov qword [rbp + 0x340], rsi
mov word [rbp + 0x330], si
cmp qword [rbp + 0x488], 8
jb 0x1400126d4
mov rcx, qword [rbp + 0x470]
call fcn.1400187b4
mov qword [rbp + 0x488], 7
mov qword [rbp + 0x480], rsi
mov word [rbp + 0x470], si
cmp qword [rbp + 0x2a8], 8
jb 0x140012703
mov rcx, qword [rbp + 0x290]
call fcn.1400187b4
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], rsi
mov word [rbp + 0x290], si
cmp qword [rbp + 0x4d8], 8
jb 0x140012732
mov rcx, qword [rbp + 0x4c0]
call fcn.1400187b4
mov qword [rbp + 0x4d8], 7
mov qword [rbp + 0x4d0], rsi
mov word [rbp + 0x4c0], si
cmp qword [rbp + 0x280], 8
jb 0x140012761
mov rcx, qword [rbp + 0x268]
call fcn.1400187b4
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rsi
mov word [rbp + 0x268], si
cmp qword [rbp + 0x528], 8
jb 0x140012790
mov rcx, qword [rbp + 0x510]
call fcn.1400187b4
mov qword [rbp + 0x528], 7
mov qword [rbp + 0x520], rsi
mov word [rbp + 0x510], si
cmp qword [rbp + 0x258], 8
jb 0x1400127bf
mov rcx, qword [rbp + 0x240]
call fcn.1400187b4
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rsi
mov word [rbp + 0x240], si
cmp qword [rbp + 0x370], 8
jb 0x1400127ee
mov rcx, qword [rbp + 0x358]
call fcn.1400187b4
mov qword [rbp + 0x370], 7
mov qword [rbp + 0x368], rsi
mov word [rbp + 0x358], si
cmp qword [rbp + 0x208], 8
jb 0x14001281d
mov rcx, qword [rbp + 0x1f0]
call fcn.1400187b4
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rsi
mov word [rbp + 0x1f0], si
cmp qword [rbp + 0x230], 8
jb 0x14001284c
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
movzx ecx, byte [rbp + 0x870]
dec ecx
je 0x140012f5f
dec ecx
je 0x140012c3e
dec ecx
je 0x140012886
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
jmp 0x140013191
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rsi
mov word [rbp + 0x1f0], si
mov r8d, 1
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x1f0]
call fcn.1400039a0
nop
lea r8, [rbp + 0x1f0]
mov rdx, rbx
lea rcx, [rbp + 0x510]
call fcn.140008ec0
nop
lea r8, [rbp - 0x34]
mov rdx, rax
lea rcx, [rbp + 0x358]
call fcn.140011870
nop
mov rdx, rax
lea rcx, [rbp + 0x308]
call fcn.140003d20
nop
cmp qword [rbp + 0x370], 8
jb 0x14001290a
mov rcx, qword [rbp + 0x358]
call fcn.1400187b4
mov qword [rbp + 0x370], 7
mov qword [rbp + 0x368], rsi
mov word [rbp + 0x358], si
cmp qword [rbp + 0x528], 8
jb 0x140012939
mov rcx, qword [rbp + 0x510]
call fcn.1400187b4
mov qword [rbp + 0x528], 7
mov qword [rbp + 0x520], rsi
mov word [rbp + 0x510], si
cmp qword [rbp + 0x208], 8
jb 0x140012968
mov rcx, qword [rbp + 0x1f0]
call fcn.1400187b4
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rsi
mov word [rbp + 0x1f0], si
mov r8d, 0xa
lea rdx, [0x1400387d8]
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.14000ffa0
mov rsi, qword [rsp + 0x40]
mov rcx, rbx
cmp qword [rsi + 0x78], 0
jne 0x140012a27
lea rdx, [rbp + 0x4c0]
call fcn.140010560
lea r8, [rbp + 0x308]
cmp qword [rbp + 0x320], 8
cmovae r8, qword [rbp + 0x308]
cmp qword [rax + 0x18], 8
jb 0x1400129d7
mov rax, qword [rax]
xor ecx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov rdx, rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdi, rax
cmp qword [rbp + 0x4d8], 8
jb 0x140012a07
mov rcx, qword [rbp + 0x4c0]
call fcn.1400187b4
mov qword [rbp + 0x4d8], 7
xor eax, eax
mov qword [rbp + 0x4d0], rax
mov word [rbp + 0x4c0], ax
jmp 0x140012aaa
lea rdx, [rbp + 0x470]
call fcn.140010560
lea r9, [rsi + 0x68]
cmp qword [r9 + 0x18], 8
jb 0x140012a41
mov r9, qword [r9]
lea r8, [rbp + 0x308]
cmp qword [rbp + 0x320], 8
cmovae r8, qword [rbp + 0x308]
cmp qword [rax + 0x18], 8
jb 0x140012a62
mov rax, qword [rax]
xor ecx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
mov rdx, rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdi, rax
cmp qword [rbp + 0x488], 8
jb 0x140012a8f
mov rcx, qword [rbp + 0x470]
call fcn.1400187b4
mov qword [rbp + 0x488], 7
xor eax, eax
mov qword [rbp + 0x480], rax
mov word [rbp + 0x470], ax
cmp edi, 0x20
ja 0x140012b89
movsxd rdx, edi
lea rcx, [rbp + 0x600]
call fcn.140011370
mov rdi, rax
lea r8, [rbp + 0x718]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x3d0]
call fcn.1400117b0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.140011720
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x438], 8
jb 0x140012b20
mov rcx, qword [rbp + 0x420]
call fcn.1400187b4
mov qword [rbp + 0x438], 7
xor edi, edi
mov qword [rbp + 0x430], rdi
mov word [rbp + 0x420], di
cmp qword [rbp + 0x3e8], 8
jb 0x140012b51
mov rcx, qword [rbp + 0x3d0]
call fcn.1400187b4
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rdi
mov word [rbp + 0x3d0], di
cmp qword [rbp + 0x618], 8
jb 0x14001319d
mov rcx, qword [rbp + 0x600]
call fcn.1400187b4
jmp 0x14001319d
mov qword [rbp + 0x230], 7
mov qword [rbp + 0x228], rax
mov word [rbp + 0x218], ax
mov r8d, 7
lea rdx, [0x14002c820]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
lea r8, [rbp + 0x218]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x3a8]
call fcn.140008ec0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x3c0], 8
jb 0x140012c04
mov rcx, qword [rbp + 0x3a8]
call fcn.1400187b4
mov qword [rbp + 0x3c0], 7
xor edi, edi
mov qword [rbp + 0x3b8], rdi
mov word [rbp + 0x3a8], di
cmp qword [rbp + 0x230], 8
jb 0x14001319d
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
jmp 0x14001319d
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rsi
mov word [rbp + 0x240], si
mov r8d, 1
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x240]
call fcn.1400039a0
nop
lea r8, [rbp + 0x240]
mov rdx, rbx
lea rcx, [rbp + 0x498]
call fcn.140008ec0
nop
lea r8, [rbp - 0x34]
mov rdx, rax
lea rcx, [rbp + 0x5d8]
call fcn.140011870
mov rdi, rax
lea rax, [rbp + 0x308]
cmp rax, rdi
je 0x140012d26
cmp qword [rbp + 0x320], 8
jb 0x140012cc0
mov rcx, qword [rbp + 0x308]
call fcn.1400187b4
mov qword [rbp + 0x320], 7
mov qword [rbp + 0x318], rsi
mov word [rbp + 0x308], si
cmp qword [rdi + 0x18], 8
jae 0x140012cfb
mov r8, qword [rdi + 0x10]
inc r8
add r8, r8
mov rdx, rdi
lea rcx, [rbp + 0x308]
call fcn.1400187d0
jmp 0x140012d08
mov rax, qword [rdi]
mov qword [rbp + 0x308], rax
mov qword [rdi], rsi
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x318], rax
mov rax, qword [rdi + 0x18]
mov qword [rbp + 0x320], rax
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
cmp qword [rbp + 0x5f0], 8
jb 0x140012d3c
mov rcx, qword [rbp + 0x5d8]
call fcn.1400187b4
mov qword [rbp + 0x5f0], 7
mov qword [rbp + 0x5e8], rsi
mov word [rbp + 0x5d8], si
cmp qword [rbp + 0x4b0], 8
jb 0x140012d6b
mov rcx, qword [rbp + 0x498]
call fcn.1400187b4
mov qword [rbp + 0x4b0], 7
mov qword [rbp + 0x4a8], rsi
mov word [rbp + 0x498], si
cmp qword [rbp + 0x258], 8
jb 0x140012d9a
mov rcx, qword [rbp + 0x240]
call fcn.1400187b4
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rsi
mov word [rbp + 0x240], si
lea rcx, [rbp + 0x308]
cmp qword [rbp + 0x320], 8
cmovae rcx, qword [rbp + 0x308]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
setne al
test al, al
jne 0x140012eb1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x628]
call fcn.140011370
mov rdi, rax
lea r8, [rbp + 0x718]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x448]
call fcn.1400117b0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x538]
call fcn.140011720
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x550], 8
jb 0x140012e4f
mov rcx, qword [rbp + 0x538]
call fcn.1400187b4
mov qword [rbp + 0x550], 7
mov qword [rbp + 0x548], rsi
mov word [rbp + 0x538], si
cmp qword [rbp + 0x460], 8
jb 0x140012e7e
mov rcx, qword [rbp + 0x448]
call fcn.1400187b4
mov qword [rbp + 0x460], 7
mov qword [rbp + 0x458], rsi
mov word [rbp + 0x448], si
cmp qword [rbp + 0x640], 8
jb 0x140013191
mov rcx, qword [rbp + 0x628]
jmp 0x14001318c
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rsi
mov word [rbp + 0x268], si
mov r8d, 7
lea rdx, [0x14002c820]
lea rcx, [rbp + 0x268]
call fcn.1400039a0
nop
lea r8, [rbp + 0x268]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x380]
call fcn.140008ec0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x398], 8
jb 0x140012f2c
mov rcx, qword [rbp + 0x380]
call fcn.1400187b4
mov qword [rbp + 0x398], 7
mov qword [rbp + 0x390], rsi
mov word [rbp + 0x380], si
cmp qword [rbp + 0x280], 8
jb 0x140013191
mov rcx, qword [rbp + 0x268]
jmp 0x14001318c
lea rax, [rbp + 0x3f8]
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x410], 7
mov qword [rbp + 0x408], rsi
mov word [rbp + 0x3f8], si
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x34]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x3f8]
call fcn.1400039a0
nop
mov qword [rbp + 0x2f8], 7
mov qword [rbp + 0x2f0], rsi
mov word [rbp + 0x2e0], si
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp + 0x2e0]
call fcn.140001b20
nop
lea r8, [rbp + 0x3f8]
lea rdx, [rbp + 0x2e0]
mov rsi, qword [rsp + 0x40]
mov rcx, rsi
call fcn.1400118e0
cmp eax, 1
jne 0x1400130d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x650]
call fcn.140011370
mov rdi, rax
lea r8, [rbp + 0x718]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x5b0]
call fcn.1400117b0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140011720
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x500], 8
jb 0x14001306f
mov rcx, qword [rbp + 0x4e8]
call fcn.1400187b4
mov qword [rbp + 0x500], 7
xor ebx, ebx
mov qword [rbp + 0x4f8], rbx
mov word [rbp + 0x4e8], bx
cmp qword [rbp + 0x5c8], 8
jb 0x1400130a0
mov rcx, qword [rbp + 0x5b0]
call fcn.1400187b4
mov qword [rbp + 0x5c8], 7
mov qword [rbp + 0x5c0], rbx
mov word [rbp + 0x5b0], bx
cmp qword [rbp + 0x668], 8
jb 0x140013196
mov rcx, qword [rbp + 0x650]
call fcn.1400187b4
jmp 0x140013196
test eax, eax
jne 0x140013196
mov qword [rbp + 0x2a8], 7
xor ebx, ebx
mov qword [rbp + 0x2a0], rbx
mov word [rbp + 0x290], bx
lea r8d, [rax + 7]
lea rdx, [0x14002c820]
lea rcx, [rbp + 0x290]
call fcn.1400039a0
nop
lea r8, [rbp + 0x290]
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x560]
call fcn.140008ec0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x578], 8
jb 0x14001315b
mov rcx, qword [rbp + 0x560]
call fcn.1400187b4
mov qword [rbp + 0x578], 7
mov qword [rbp + 0x570], rbx
mov word [rbp + 0x560], bx
cmp qword [rbp + 0x2a8], 8
jb 0x140013196
mov rcx, qword [rbp + 0x290]
call fcn.1400187b4
jmp 0x140013196
call fcn.1400187b4
mov rsi, qword [rsp + 0x40]
xor edi, edi
mov rbx, qword [rsp + 0x38]
mov qword [rbp + 0x230], 7
mov qword [rbp + 0x228], rdi
mov word [rbp + 0x218], di
mov r8d, 1
lea rdx, [0x14002c81c]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
lea r8, [rbp + 0x218]
lea rdx, [rbp + 0x768]
lea rcx, [rbp + 0x358]
call fcn.140008ec0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.1400083e0
nop
cmp qword [rbp + 0x370], 8
jb 0x140013218
mov rcx, qword [rbp + 0x358]
call fcn.1400187b4
mov qword [rbp + 0x370], 7
xor eax, eax
mov qword [rbp + 0x368], rax
mov word [rbp + 0x358], ax
cmp qword [rbp + 0x230], 8
jb 0x140013249
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
lea rcx, [rsi + 0x10]
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x2b8]
call fcn.1400083e0
mov rdi, qword [rsp + 0x50]
jmp 0x140013b2d
cmp byte [rsp + 0x30], 0
jne 0x140013b2d
mov qword [rbp + 0x230], 7
xor eax, eax
mov qword [rbp + 0x228], rax
mov word [rbp + 0x218], ax
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x34]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
mov qword [rbp + 0x348], 7
xor edi, edi
mov qword [rbp + 0x340], rdi
mov word [rbp + 0x330], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x330]
call fcn.1400039a0
nop
movzx eax, word [rbp - 0x7e]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x2e0]
call fcn.140011410
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], rdi
mov word [rbp + 0x290], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c850]
lea rcx, [rbp + 0x290]
call fcn.1400039a0
nop
movzx ecx, word [rbp - 0x80]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x600]
call fcn.140011410
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rdi
mov word [rbp + 0x268], di
lea r8d, [rdi + 0xa]
lea rdx, str.nbspnbsp
lea rcx, [rbp + 0x268]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x78]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x6f0]
call fcn.140011410
mov rsi, rax
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rdi
mov word [rbp + 0x240], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c830]
lea rcx, [rbp + 0x240]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x7a]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x6a0]
call fcn.140011410
mov rbx, rax
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c830]
lea rcx, [rbp + 0x1f0]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x7e]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x6c8]
call fcn.140011410
mov rdi, rax
mov edx, dword [rbp - 0x40]
lea rcx, [rbp + 0x650]
call fcn.140011370
nop
mov r8, rax
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x628]
call fcn.140008ec0
nop
lea r8, [rbp + 0x588]
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.140008f20
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x5b0]
call fcn.140011720
nop
lea r8, [rbp + 0x1f0]
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140011720
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.140011720
nop
lea r8, [rbp + 0x240]
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.140011720
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rbp + 0x448]
call fcn.140011720
nop
lea r8, [rbp + 0x268]
mov rdx, rax
lea rcx, [rbp + 0x538]
call fcn.140011720
nop
mov r8, qword [rsp + 0x48]
mov rdx, rax
lea rcx, [rbp + 0x498]
call fcn.140011720
nop
lea r8, [rbp + 0x290]
mov rdx, rax
lea rcx, [rbp + 0x5d8]
call fcn.140011720
nop
mov r8, qword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0x3a8]
call fcn.140011720
nop
lea r8, [rbp + 0x790]
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.140008f20
nop
mov rdi, qword [rsp + 0x50]
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.140008f20
nop
lea r8, [rbp + 0x330]
mov rdx, rax
lea rcx, [rbp + 0x470]
call fcn.140011720
nop
lea r8, [rbp + 0x218]
mov rdx, rax
lea rcx, [rbp + 0x4c0]
call fcn.140011720
nop
lea r8, [rbp + 0x588]
mov rdx, rax
lea rcx, [rbp + 0x510]
call fcn.140008f20
nop
lea r8, [rbp + 0x768]
mov rdx, rax
lea rcx, [rbp + 0x358]
call fcn.140008f20
nop
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.140003d20
nop
cmp qword [rbp + 0x370], 8
jb 0x1400135e6
mov rcx, qword [rbp + 0x358]
call fcn.1400187b4
mov qword [rbp + 0x370], 7
xor ebx, ebx
mov qword [rbp + 0x368], rbx
mov word [rbp + 0x358], bx
cmp qword [rbp + 0x528], 8
jb 0x140013617
mov rcx, qword [rbp + 0x510]
call fcn.1400187b4
mov qword [rbp + 0x528], 7
mov qword [rbp + 0x520], rbx
mov word [rbp + 0x510], bx
cmp qword [rbp + 0x4d8], 8
jb 0x140013646
mov rcx, qword [rbp + 0x4c0]
call fcn.1400187b4
mov qword [rbp + 0x4d8], 7
mov qword [rbp + 0x4d0], rbx
mov word [rbp + 0x4c0], bx
cmp qword [rbp + 0x488], 8
jb 0x140013675
mov rcx, qword [rbp + 0x470]
call fcn.1400187b4
mov qword [rbp + 0x488], 7
mov qword [rbp + 0x480], rbx
mov word [rbp + 0x470], bx
cmp qword [rbp + 0x438], 8
jb 0x1400136a4
mov rcx, qword [rbp + 0x420]
call fcn.1400187b4
mov qword [rbp + 0x438], 7
mov qword [rbp + 0x430], rbx
mov word [rbp + 0x420], bx
cmp qword [rbp + 0x3e8], 8
jb 0x1400136d3
mov rcx, qword [rbp + 0x3d0]
call fcn.1400187b4
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rbx
mov word [rbp + 0x3d0], bx
cmp qword [rbp + 0x3c0], 8
jb 0x140013702
mov rcx, qword [rbp + 0x3a8]
call fcn.1400187b4
mov qword [rbp + 0x3c0], 7
mov qword [rbp + 0x3b8], rbx
mov word [rbp + 0x3a8], bx
cmp qword [rbp + 0x5f0], 8
jb 0x140013731
mov rcx, qword [rbp + 0x5d8]
call fcn.1400187b4
mov qword [rbp + 0x5f0], 7
mov qword [rbp + 0x5e8], rbx
mov word [rbp + 0x5d8], bx
cmp qword [rbp + 0x4b0], 8
jb 0x140013760
mov rcx, qword [rbp + 0x498]
call fcn.1400187b4
mov qword [rbp + 0x4b0], 7
mov qword [rbp + 0x4a8], rbx
mov word [rbp + 0x498], bx
cmp qword [rbp + 0x550], 8
jb 0x14001378f
mov rcx, qword [rbp + 0x538]
call fcn.1400187b4
mov qword [rbp + 0x550], 7
mov qword [rbp + 0x548], rbx
mov word [rbp + 0x538], bx
cmp qword [rbp + 0x460], 8
jb 0x1400137be
mov rcx, qword [rbp + 0x448]
call fcn.1400187b4
mov qword [rbp + 0x460], 7
mov qword [rbp + 0x458], rbx
mov word [rbp + 0x448], bx
cmp qword [rbp + 0x398], 8
jb 0x1400137ed
mov rcx, qword [rbp + 0x380]
call fcn.1400187b4
mov qword [rbp + 0x398], 7
mov qword [rbp + 0x390], rbx
mov word [rbp + 0x380], bx
cmp qword [rbp + 0x410], 8
jb 0x14001381c
mov rcx, qword [rbp + 0x3f8]
call fcn.1400187b4
mov qword [rbp + 0x410], 7
mov qword [rbp + 0x408], rbx
mov word [rbp + 0x3f8], bx
cmp qword [rbp + 0x500], 8
jb 0x14001384b
mov rcx, qword [rbp + 0x4e8]
call fcn.1400187b4
mov qword [rbp + 0x500], 7
mov qword [rbp + 0x4f8], rbx
mov word [rbp + 0x4e8], bx
cmp qword [rbp + 0x5c8], 8
jb 0x14001387a
mov rcx, qword [rbp + 0x5b0]
call fcn.1400187b4
mov qword [rbp + 0x5c8], 7
mov qword [rbp + 0x5c0], rbx
mov word [rbp + 0x5b0], bx
cmp qword [rbp + 0x578], 8
jb 0x1400138a9
mov rcx, qword [rbp + 0x560]
call fcn.1400187b4
mov qword [rbp + 0x578], 7
mov qword [rbp + 0x570], rbx
mov word [rbp + 0x560], bx
cmp qword [rbp + 0x640], 8
jb 0x1400138d8
mov rcx, qword [rbp + 0x628]
call fcn.1400187b4
mov qword [rbp + 0x640], 7
mov qword [rbp + 0x638], rbx
mov word [rbp + 0x628], bx
cmp qword [rbp + 0x668], 8
jb 0x140013907
mov rcx, qword [rbp + 0x650]
call fcn.1400187b4
mov qword [rbp + 0x668], 7
mov qword [rbp + 0x660], rbx
mov word [rbp + 0x650], bx
cmp qword [rbp + 0x6e0], 8
jb 0x140013936
mov rcx, qword [rbp + 0x6c8]
call fcn.1400187b4
mov qword [rbp + 0x6e0], 7
mov qword [rbp + 0x6d8], rbx
mov word [rbp + 0x6c8], bx
cmp qword [rbp + 0x208], 8
jb 0x140013965
mov rcx, qword [rbp + 0x1f0]
call fcn.1400187b4
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rbx
mov word [rbp + 0x1f0], bx
cmp qword [rbp + 0x6b8], 8
jb 0x140013994
mov rcx, qword [rbp + 0x6a0]
call fcn.1400187b4
mov qword [rbp + 0x6b8], 7
mov qword [rbp + 0x6b0], rbx
mov word [rbp + 0x6a0], bx
cmp qword [rbp + 0x258], 8
jb 0x1400139c3
mov rcx, qword [rbp + 0x240]
call fcn.1400187b4
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rbx
mov word [rbp + 0x240], bx
cmp qword [rbp + 0x708], 8
jb 0x1400139f2
mov rcx, qword [rbp + 0x6f0]
call fcn.1400187b4
mov qword [rbp + 0x708], 7
mov qword [rbp + 0x700], rbx
mov word [rbp + 0x6f0], bx
cmp qword [rbp + 0x280], 8
jb 0x140013a21
mov rcx, qword [rbp + 0x268]
call fcn.1400187b4
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rbx
mov word [rbp + 0x268], bx
cmp qword [rbp + 0x618], 8
jb 0x140013a50
mov rcx, qword [rbp + 0x600]
call fcn.1400187b4
mov qword [rbp + 0x618], 7
mov qword [rbp + 0x610], rbx
mov word [rbp + 0x600], bx
cmp qword [rbp + 0x2a8], 8
jb 0x140013a7f
mov rcx, qword [rbp + 0x290]
call fcn.1400187b4
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], rbx
mov word [rbp + 0x290], bx
cmp qword [rbp + 0x2f8], 8
jb 0x140013aae
mov rcx, qword [rbp + 0x2e0]
call fcn.1400187b4
mov qword [rbp + 0x2f8], 7
mov qword [rbp + 0x2f0], rbx
mov word [rbp + 0x2e0], bx
cmp qword [rbp + 0x348], 8
jb 0x140013add
mov rcx, qword [rbp + 0x330]
call fcn.1400187b4
mov qword [rbp + 0x348], 7
mov qword [rbp + 0x340], rbx
mov word [rbp + 0x330], bx
cmp qword [rbp + 0x230], 8
jb 0x140013b0c
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
mov rsi, qword [rsp + 0x40]
lea rcx, [rsi + 0x10]
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x2b8]
call fcn.1400083e0
mov rbx, qword [rsp + 0x38]
lea rdx, [rbp - 0x60]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140011f90
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_FindClose]
test rbx, rbx
je 0x140013b64
mov rcx, rbx
call fcn.14000ff70
mov rcx, rbx
call fcn.1400187b4
cmp byte [rsp + 0x30], 0
jne 0x140013d2f
cmp qword [rbp + 0x690], 8
jb 0x140013b85
mov rcx, qword [rbp + 0x678]
call fcn.1400187b4
mov qword [rbp + 0x690], 7
xor ebx, ebx
mov qword [rbp + 0x688], rbx
mov word [rbp + 0x678], bx
cmp qword [rbp + 0x730], 8
jb 0x140013bb6
mov rcx, qword [rbp + 0x718]
call fcn.1400187b4
mov qword [rbp + 0x730], 7
mov qword [rbp + 0x728], rbx
mov word [rbp + 0x718], bx
cmp qword [rbp + 0x780], 8
jb 0x140013be5
mov rcx, qword [rbp + 0x768]
call fcn.1400187b4
mov qword [rbp + 0x780], 7
mov qword [rbp + 0x778], rbx
mov word [rbp + 0x768], bx
cmp qword [rbp + 0x7a8], 8
jb 0x140013c14
mov rcx, qword [rbp + 0x790]
call fcn.1400187b4
mov qword [rbp + 0x7a8], 7
mov qword [rbp + 0x7a0], rbx
mov word [rbp + 0x790], bx
cmp qword [rbp + 0x5a0], 8
jb 0x140013c43
mov rcx, qword [rbp + 0x588]
call fcn.1400187b4
mov qword [rbp + 0x5a0], 7
mov qword [rbp + 0x598], rbx
mov word [rbp + 0x588], bx
cmp qword [rbp + 0x758], 8
jb 0x140013c72
mov rcx, qword [rbp + 0x740]
call fcn.1400187b4
mov qword [rbp + 0x758], 7
mov qword [rbp + 0x750], rbx
mov word [rbp + 0x740], bx
cmp qword [rbp + 0x2d0], 8
jb 0x140013ca1
mov rcx, qword [rbp + 0x2b8]
call fcn.1400187b4
mov qword [rbp + 0x2d0], 7
mov qword [rbp + 0x2c8], rbx
mov word [rbp + 0x2b8], bx
cmp qword [rbp + 0x320], 8
jb 0x140013cd0
mov rcx, qword [rbp + 0x308]
call fcn.1400187b4
mov qword [rbp + 0x320], 7
mov qword [rbp + 0x318], rbx
mov word [rbp + 0x308], bx
cmp qword [rdi + 0x18], 8
jb 0x140013cf8
mov rcx, qword [rdi]
call fcn.1400187b4
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
mov rdi, qword [rsp + 0x60]
cmp qword [rdi + 0x18], 8
jb 0x140013d1b
mov rcx, qword [rdi]
call fcn.1400187b4
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
jmp 0x140014aa2
mov qword [rbp + 0x230], 7
xor ebx, ebx
mov qword [rbp + 0x228], rbx
mov word [rbp + 0x218], bx
lea r8d, [rbx + 2]
lea rdx, [0x14002c814]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
lea r8, [rbp + 0x218]
mov rdx, rdi
lea rcx, [rbp + 0x2e0]
call fcn.140008ec0
nop
mov rdx, rax
lea rcx, [rbp + 0x678]
call fcn.140003d20
nop
cmp qword [rbp + 0x2f8], 8
jb 0x140013d9f
mov rcx, qword [rbp + 0x2e0]
call fcn.1400187b4
mov qword [rbp + 0x2f8], 7
mov qword [rbp + 0x2f0], rbx
mov word [rbp + 0x2e0], bx
cmp qword [rbp + 0x230], 8
jb 0x140013dce
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
lea rcx, [rbp + 0x678]
cmp qword [rbp + 0x690], 8
cmovae rcx, qword [rbp + 0x678]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
mov qword [rsp + 0x68], rax
cmp rax, 0xffffffffffffffff
je 0x14001490b
test byte [rbp - 0x60], 0x10
je 0x1400148e8
cmp word [rbp - 0x34], 0x2e
je 0x1400148e8
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp - 0x54]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x7b8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov qword [rbp + 0x230], 7
xor eax, eax
mov qword [rbp + 0x228], rax
mov word [rbp + 0x218], ax
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x34]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
mov qword [rbp + 0x208], 7
xor edi, edi
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x1f0]
call fcn.1400039a0
nop
lea r8, [rbp + 0x1f0]
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x600]
call fcn.140008ec0
nop
lea r8, [rbp + 0x218]
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140011720
nop
mov rdx, rax
lea rcx, [rbp + 0x678]
call fcn.140003d20
nop
cmp qword [rbp + 0x2f8], 8
jb 0x140013f02
mov rcx, qword [rbp + 0x2e0]
call fcn.1400187b4
mov qword [rbp + 0x2f8], 7
mov qword [rbp + 0x2f0], rdi
mov word [rbp + 0x2e0], di
cmp qword [rbp + 0x618], 8
jb 0x140013f31
mov rcx, qword [rbp + 0x600]
call fcn.1400187b4
mov qword [rbp + 0x618], 7
mov qword [rbp + 0x610], rdi
mov word [rbp + 0x600], di
cmp qword [rbp + 0x208], 8
jb 0x140013f60
mov rcx, qword [rbp + 0x1f0]
call fcn.1400187b4
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
cmp qword [rbp + 0x230], 8
jb 0x140013f8f
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
mov qword [rsp + 0x20], 1
lea r9, [0x14002c810]
mov rax, qword [rsp + 0x60]
mov r8, qword [rax + 0x10]
xor edx, edx
mov rcx, rax
call fcn.1400074f0
test eax, eax
jne 0x14001486f
mov qword [rbp + 0x230], 7
mov qword [rbp + 0x228], rdi
mov word [rbp + 0x218], di
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x34]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x218]
call fcn.1400039a0
nop
mov qword [rbp + 0x348], 7
xor edi, edi
mov qword [rbp + 0x340], rdi
mov word [rbp + 0x330], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c120]
lea rcx, [rbp + 0x330]
call fcn.1400039a0
nop
movzx eax, word [rbp - 0x7e]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x6f0]
call fcn.140011410
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], rdi
mov word [rbp + 0x290], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c850]
lea rcx, [rbp + 0x290]
call fcn.1400039a0
nop
movzx ecx, word [rbp - 0x80]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x6a0]
call fcn.140011410
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rdi
mov word [rbp + 0x268], di
lea r8d, [rdi + 0xa]
lea rdx, str.nbspnbsp
lea rcx, [rbp + 0x268]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x78]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x6c8]
call fcn.140011410
mov rsi, rax
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rdi
mov word [rbp + 0x240], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c830]
lea rcx, [rbp + 0x240]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x7a]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x650]
call fcn.140011410
mov rbx, rax
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
lea r8d, [rdi + 1]
lea rdx, [0x14002c830]
lea rcx, [rbp + 0x1f0]
call fcn.1400039a0
nop
movzx ecx, word [rsp + 0x7e]
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
lea rcx, [rbp + 0x628]
call fcn.140011410
mov rdi, rax
mov edx, dword [rbp - 0x40]
lea rcx, [rbp + 0x560]
call fcn.140011370
nop
mov r8, rax
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x5b0]
call fcn.140008ec0
nop
lea r8, [rbp + 0x588]
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140008f20
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.140011720
nop
lea r8, [rbp + 0x1f0]
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.140011720
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x448]
call fcn.140011720
nop
lea r8, [rbp + 0x240]
mov rdx, rax
lea rcx, [rbp + 0x538]
call fcn.140011720
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rbp + 0x498]
call fcn.140011720
nop
lea r8, [rbp + 0x268]
mov rdx, rax
lea rcx, [rbp + 0x5d8]
call fcn.140011720
nop
mov r8, qword [rsp + 0x48]
mov rdx, rax
lea rcx, [rbp + 0x3a8]
call fcn.140011720
nop
lea r8, [rbp + 0x290]
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.140011720
nop
mov r8, qword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.140011720
nop
lea r8, [rbp + 0x588]
mov rdx, rax
lea rcx, [rbp + 0x470]
call fcn.140008f20
nop
mov r8, qword [rsp + 0x50]
mov rdx, rax
lea rcx, [rbp + 0x4c0]
call fcn.140008f20
nop
lea r8, [rbp + 0x330]
mov rdx, rax
lea rcx, [rbp + 0x510]
call fcn.140011720
nop
lea r8, [rbp + 0x218]
mov rdx, rax
lea rcx, [rbp + 0x358]
call fcn.140011720
nop
lea r8, [rbp + 0x588]
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.140008f20
nop
lea r8, [rbp + 0x768]
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140008f20
nop
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.140003d20
nop
cmp qword [rbp + 0x2f8], 8
jb 0x140014328
mov rcx, qword [rbp + 0x2e0]
call fcn.1400187b4
mov qword [rbp + 0x2f8], 7
xor edi, edi
mov qword [rbp + 0x2f0], rdi
mov word [rbp + 0x2e0], di
cmp qword [rbp + 0x618], 8
jb 0x140014359
mov rcx, qword [rbp + 0x600]
call fcn.1400187b4
mov qword [rbp + 0x618], 7
mov qword [rbp + 0x610], rdi
mov word [rbp + 0x600], di
cmp qword [rbp + 0x370], 8
jb 0x140014388
mov rcx, qword [rbp + 0x358]
call fcn.1400187b4
mov qword [rbp + 0x370], 7
mov qword [rbp + 0x368], rdi
mov word [rbp + 0x358], di
cmp qword [rbp + 0x528], 8
jb 0x1400143b7
mov rcx, qword [rbp + 0x510]
call fcn.1400187b4
mov qword [rbp + 0x528], 7
mov qword [rbp + 0x520], rdi
mov word [rbp + 0x510], di
cmp qword [rbp + 0x4d8], 8
jb 0x1400143e6
mov rcx, qword [rbp + 0x4c0]
call fcn.1400187b4
mov qword [rbp + 0x4d8], 7
mov qword [rbp + 0x4d0], rdi
mov word [rbp + 0x4c0], di
cmp qword [rbp + 0x488], 8
jb 0x140014415
mov rcx, qword [rbp + 0x470]
call fcn.1400187b4
mov qword [rbp + 0x488], 7
mov qword [rbp + 0x480], rdi
mov word [rbp + 0x470], di
cmp qword [rbp + 0x438], 8
jb 0x140014444
mov rcx, qword [rbp + 0x420]
call fcn.1400187b4
mov qword [rbp + 0x438], 7
mov qword [rbp + 0x430], rdi
mov word [rbp + 0x420], di
cmp qword [rbp + 0x3e8], 8
jb 0x140014473
mov rcx, qword [rbp + 0x3d0]
call fcn.1400187b4
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rdi
mov word [rbp + 0x3d0], di
cmp qword [rbp + 0x3c0], 8
jb 0x1400144a2
mov rcx, qword [rbp + 0x3a8]
call fcn.1400187b4
mov qword [rbp + 0x3c0], 7
mov qword [rbp + 0x3b8], rdi
mov word [rbp + 0x3a8], di
cmp qword [rbp + 0x5f0], 8
jb 0x1400144d1
mov rcx, qword [rbp + 0x5d8]
call fcn.1400187b4
mov qword [rbp + 0x5f0], 7
mov qword [rbp + 0x5e8], rdi
mov word [rbp + 0x5d8], di
cmp qword [rbp + 0x4b0], 8
jb 0x140014500
mov rcx, qword [rbp + 0x498]
call fcn.1400187b4
mov qword [rbp + 0x4b0], 7
mov qword [rbp + 0x4a8], rdi
mov word [rbp + 0x498], di
cmp qword [rbp + 0x550], 8
jb 0x14001452f
mov rcx, qword [rbp + 0x538]
call fcn.1400187b4
mov qword [rbp + 0x550], 7
mov qword [rbp + 0x548], rdi
mov word [rbp + 0x538], di
cmp qword [rbp + 0x460], 8
jb 0x14001455e
mov rcx, qword [rbp + 0x448]
call fcn.1400187b4
mov qword [rbp + 0x460], 7
mov qword [rbp + 0x458], rdi
mov word [rbp + 0x448], di
cmp qword [rbp + 0x398], 8
jb 0x14001458d
mov rcx, qword [rbp + 0x380]
call fcn.1400187b4
mov qword [rbp + 0x398], 7
mov qword [rbp + 0x390], rdi
mov word [rbp + 0x380], di
cmp qword [rbp + 0x410], 8
jb 0x1400145bc
mov rcx, qword [rbp + 0x3f8]
call fcn.1400187b4
mov qword [rbp + 0x410], 7
mov qword [rbp + 0x408], rdi
mov word [rbp + 0x3f8], di
cmp qword [rbp + 0x500], 8
jb 0x1400145eb
mov rcx, qword [rbp + 0x4e8]
call fcn.1400187b4
mov qword [rbp + 0x500], 7
mov qword [rbp + 0x4f8], rdi
mov word [rbp + 0x4e8], di
cmp qword [rbp + 0x5c8], 8
jb 0x14001461a
mov rcx, qword [rbp + 0x5b0]
call fcn.1400187b4
mov qword [rbp + 0x5c8], 7
mov qword [rbp + 0x5c0], rdi
mov word [rbp + 0x5b0], di
cmp qword [rbp + 0x578], 8
jb 0x140014649
mov rcx, qword [rbp + 0x560]
call fcn.1400187b4
mov qword [rbp + 0x578], 7
mov qword [rbp + 0x570], rdi
mov word [rbp + 0x560], di
cmp qword [rbp + 0x640], 8
jb 0x140014678
mov rcx, qword [rbp + 0x628]
call fcn.1400187b4
mov qword [rbp + 0x640], 7
mov qword [rbp + 0x638], rdi
mov word [rbp + 0x628], di
cmp qword [rbp + 0x208], 8
jb 0x1400146a7
mov rcx, qword [rbp + 0x1f0]
call fcn.1400187b4
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
cmp qword [rbp + 0x668], 8
jb 0x1400146d6
mov rcx, qword [rbp + 0x650]
call fcn.1400187b4
mov qword [rbp + 0x668], 7
mov qword [rbp + 0x660], rdi
mov word [rbp + 0x650], di
cmp qword [rbp + 0x258], 8
jb 0x140014705
mov rcx, qword [rbp + 0x240]
call fcn.1400187b4
mov qword [rbp + 0x258], 7
mov qword [rbp + 0x250], rdi
mov word [rbp + 0x240], di
cmp qword [rbp + 0x6e0], 8
jb 0x140014734
mov rcx, qword [rbp + 0x6c8]
call fcn.1400187b4
mov qword [rbp + 0x6e0], 7
mov qword [rbp + 0x6d8], rdi
mov word [rbp + 0x6c8], di
cmp qword [rbp + 0x280], 8
jb 0x140014763
mov rcx, qword [rbp + 0x268]
call fcn.1400187b4
mov qword [rbp + 0x280], 7
mov qword [rbp + 0x278], rdi
mov word [rbp + 0x268], di
cmp qword [rbp + 0x6b8], 8
jb 0x140014792
mov rcx, qword [rbp + 0x6a0]
call fcn.1400187b4
mov qword [rbp + 0x6b8], 7
mov qword [rbp + 0x6b0], rdi
mov word [rbp + 0x6a0], di
cmp qword [rbp + 0x2a8], 8
jb 0x1400147c1
mov rcx, qword [rbp + 0x290]
call fcn.1400187b4
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], rdi
mov word [rbp + 0x290], di
cmp qword [rbp + 0x708], 8
jb 0x1400147f0
mov rcx, qword [rbp + 0x6f0]
call fcn.1400187b4
mov qword [rbp + 0x708], 7
mov qword [rbp + 0x700], rdi
mov word [rbp + 0x6f0], di
cmp qword [rbp + 0x348], 8
jb 0x14001481f
mov rcx, qword [rbp + 0x330]
call fcn.1400187b4
mov qword [rbp + 0x348], 7
mov qword [rbp + 0x340], rdi
mov word [rbp + 0x330], di
cmp qword [rbp + 0x230], 8
jb 0x14001484e
mov rcx, qword [rbp + 0x218]
call fcn.1400187b4
mov rsi, qword [rsp + 0x40]
lea rcx, [rsi + 0x10]
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x2b8]
call fcn.1400083e0
mov rbx, qword [rsp + 0x68]
lea rax, [rbp + 0x600]
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x600]
call fcn.140002130
mov rdi, rax
mov qword [rbp + 0x2f8], 7
xor eax, eax
mov qword [rbp + 0x2f0], rax
mov word [rbp + 0x2e0], ax
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x678]
lea rcx, [rbp + 0x2e0]
call fcn.140001b20
nop
movzx eax, byte [rbp + 0x870]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x30]
mov r8, rdi
lea rdx, [rbp + 0x2e0]
mov rcx, rsi
call fcn.140011d20
lea rdx, [rbp - 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140013e01
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdi, qword [rsp + 0x50]
cmp qword [rbp + 0x690], 8
jb 0x140014921
mov rcx, qword [rbp + 0x678]
call fcn.1400187b4
mov qword [rbp + 0x690], 7
xor ebx, ebx
mov qword [rbp + 0x688], rbx
mov word [rbp + 0x678], bx
cmp qword [rbp + 0x730], 8
jb 0x140014952
mov rcx, qword [rbp + 0x718]
call fcn.1400187b4
mov qword [rbp + 0x730], 7
mov qword [rbp + 0x728], rbx
mov word [rbp + 0x718], bx
cmp qword [rbp + 0x780], 8
jb 0x140014981
mov rcx, qword [rbp + 0x768]
call fcn.1400187b4
mov qword [rbp + 0x780], 7
mov qword [rbp + 0x778], rbx
mov word [rbp + 0x768], bx
cmp qword [rbp + 0x7a8], 8
jb 0x1400149b0
mov rcx, qword [rbp + 0x790]
call fcn.1400187b4
mov qword [rbp + 0x7a8], 7
mov qword [rbp + 0x7a0], rbx
mov word [rbp + 0x790], bx
cmp qword [rbp + 0x5a0], 8
jb 0x1400149df
mov rcx, qword [rbp + 0x588]
call fcn.1400187b4
mov qword [rbp + 0x5a0], 7
mov qword [rbp + 0x598], rbx
mov word [rbp + 0x588], bx
cmp qword [rbp + 0x758], 8
jb 0x140014a0e
mov rcx, qword [rbp + 0x740]
call fcn.1400187b4
mov qword [rbp + 0x758], 7
mov qword [rbp + 0x750], rbx
mov word [rbp + 0x740], bx
cmp qword [rbp + 0x2d0], 8
jb 0x140014a3d
mov rcx, qword [rbp + 0x2b8]
call fcn.1400187b4
mov qword [rbp + 0x2d0], 7
mov qword [rbp + 0x2c8], rbx
mov word [rbp + 0x2b8], bx
cmp qword [rbp + 0x320], 8
jb 0x140014a6c
mov rcx, qword [rbp + 0x308]
call fcn.1400187b4
mov qword [rbp + 0x320], 7
mov qword [rbp + 0x318], rbx
mov word [rbp + 0x308], bx
xor r8d, r8d
mov dl, 1
mov rcx, rdi
call fcn.1400011b0
nop
xor r8d, r8d
mov dl, 1
mov rcx, qword [rsp + 0x60]
call fcn.1400011b0
mov al, 1
mov rcx, qword [rbp + 0x818]
xor rcx, rsp
call fcn.1400194d0
add rsp, 0x928
pop rdi
pop rsi
pop rbx
pop rbp
ret