Function at 0x140004f50
Capabilities:
Enumerate files on windows
Get disk information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov rax, qword [0x140032040]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov r13, rcx
mov qword [rbp - 0x50], rcx
xor r15d, r15d
mov dword [rsp + 0x48], r15d
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ebx, eax
mov dword [rsp + 0x44], eax
test eax, eax
jne 0x140004fd1
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], r15
mov r8d, 0x1e
lea rdx, str.Failed_to_get_logical_drives._n
mov rcx, r13
call fcn.140004410
jmp 0x1400060bb
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400295e0]
mov qword [rbp + 0x20], rax
lea rax, [0x1400293e0]
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0xb8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov r12d, 0x10
mov dword [rsp + 0x48], r12d
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x20], rax
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1c], edx
lea rcx, [rbp + 0x38]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xa0], r15
mov dword [rbp + 0xa8], r15d
mov edi, 0x41
mov dword [rsp + 0x40], edi
nop word [rax + rax]
movzx eax, di
sub eax, 0x41
movzx ecx, al
bt ebx, ecx
jae 0x140005bbc
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 1
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
mov word [rsp + 0x72], r15w
mov r8d, 2
lea rdx, [0x1400270b0]
lea rcx, [rsp + 0x70]
call fcn.1400115e0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
or r12d, 8
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14000513f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000513a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005fe6
call fcn.140022240
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov ebx, eax
lea ecx, [rax - 2]
cmp ecx, 2
ja 0x140005b78
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova rcx, qword [rbp - 0x48]
mov r8d, 0x104
lea rdx, [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x140005e09
mov r8d, 2
lea rdx, [0x1400270b8]
lea rcx, [rbp + 0x370]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncmp]
lea rcx, [rbp + 0x30]
test eax, eax
jne 0x140005c34
lea rdx, str.Mapped_Network_Drive:
call fcn.140012ec0
mov r14, rax
lea r8, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x38]
lea rsi, [r8 + rcx*2]
lea rdi, [rbp - 0x48]
cmova rdi, qword [rbp - 0x48]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
cmp rdi, rsi
jne 0x140005219
mov r8, r15
mov eax, 0xf
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x20], 0
jmp 0x140005327
sub rsi, rdi
sar rsi, 1
mov qword [rsp + 0x38], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x14000611e
mov ebx, 0xf
cmp rsi, rbx
jbe 0x1400052e0
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x140005268
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400052a3
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000528d
mov rax, r15
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x1400052e5
cmp rcx, 0x1000
jb 0x1400052cf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400060f4
mov rcx, rax
call fcn.1400224e8
mov rcx, rax
test rax, rax
je 0x140005fed
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x1400052e5
call fcn.1400224e8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x1400052e5
mov rax, qword [rsp + 0x20]
lea r8, [rsp + 0x20]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140005313
nop dword [rax]
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140005300
mov qword [rsp + 0x30], rsi
mov byte [r8 + rsi], 0
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
or r12d, 0x20
lea rdx, [rsp + 0x20]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x20]
mov rcx, r14
call fcn.140018150
lea rdx, [0x1400270c0]
mov rcx, rax
call fcn.140012ec0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000538f
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000538a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005fed
call fcn.140022240
lea rdx, str.__Target__UNC_Path_:
lea rcx, [rbp + 0x30]
call fcn.140012ec0
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
lea rax, [rbp + 0x370]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400053c0
lea rdx, [rbp + 0x370]
lea rcx, [rbp - 0x70]
call fcn.140014350
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rdx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x60]
lea rsi, [rdx + rax*2]
lea rdi, [rbp - 0x70]
cmova rdi, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
cmp rdi, rsi
jne 0x140005424
mov r8, r15
mov eax, 0xf
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x20], 0
jmp 0x140005537
sub rsi, rdi
sar rsi, 1
mov qword [rsp + 0x38], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140006118
mov ebx, 0xf
cmp rsi, rbx
jbe 0x1400054eb
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x140005473
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400054ae
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005498
mov rax, r15
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x1400054f0
cmp rcx, 0x1000
jb 0x1400054da
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400060fa
mov rcx, rax
call fcn.1400224e8
mov rcx, rax
test rax, rax
je 0x140005ff4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x1400054f0
call fcn.1400224e8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x1400054f0
mov rax, qword [rsp + 0x20]
lea r8, [rsp + 0x20]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140005523
nop dword [rax + rax]
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140005510
mov qword [rsp + 0x30], rsi
mov byte [r8 + rsi], 0
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
or r12d, 0x40
lea rdx, [rsp + 0x20]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x20]
mov rcx, r14
call fcn.140018150
lea rdx, [0x1400270c0]
mov rcx, rax
call fcn.140012ec0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000559f
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000559a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005ff4
call fcn.140022240
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x1400055f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005ffb
call fcn.140022240
lea r8, [0x140026c38]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 8]
call fcn.1400130d0
nop
lea rcx, [rbp - 8]
cmp qword [rbp + 0x10], 7
cmova rcx, qword [rbp - 8]
lea rdx, [rbp + 0x120]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
lea rcx, [rbp + 0x30]
cmp rax, 0xffffffffffffffff
je 0x140005959
lea rdx, str.__Folders_on_the_drive:_n
call fcn.140012ec0
nop
test byte [rbp + 0x120], 0x10
je 0x140005933
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor ebx, ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
lea rax, [rbp + 0x14c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], bx
jne 0x140005670
lea rdx, [rbp + 0x14c]
lea rcx, [rbp - 0x28]
call fcn.140014350
nop
lea r8, [rbp - 0x28]
mov r9, qword [rbp - 0x28]
mov r10, qword [rbp - 0x10]
cmp r10, 7
cmova r8, r9
mov r11, qword [rbp - 0x18]
cmp r11, 1
jne 0x1400056d9
mov rdx, r11
lea rax, [0x140026c04]
mov rcx, rax
sub r8, rax
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x1400056d9
add rcx, 2
sub rdx, 1
jne 0x1400056c0
jmp 0x1400058f8
lea r8, [rbp - 0x28]
cmp r10, 7
cmova r8, r9
cmp r11, 2
jne 0x140005719
mov rdx, r11
lea rcx, [0x140026c08]
mov rax, rcx
sub r8, rcx
nop dword [rax + rax]
movzx ecx, word [r8 + rax]
cmp cx, word [rax]
jne 0x140005719
add rax, 2
sub rdx, 1
jne 0x140005700
jmp 0x1400058f8
lea rdx, str.
lea rcx, [rbp + 0x30]
call fcn.140012ec0
mov r14, rax
lea r8, [rbp - 0x28]
cmp qword [rbp - 0x10], 7
cmova r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x18]
lea rsi, [r8 + rcx*2]
lea rdi, [rbp - 0x28]
cmova rdi, qword [rbp - 0x28]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
cmp rdi, rsi
jne 0x140005773
mov r8, rbx
mov eax, 0xf
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x50], bl
jmp 0x140005887
sub rsi, rdi
sar rsi, 1
mov qword [rsp + 0x68], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140006106
mov ebx, 0xf
cmp rsi, rbx
jbe 0x140005839
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x1400057c2
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400057fc
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400057e6
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rbx
jmp 0x14000583e
cmp rcx, 0x1000
jb 0x140005828
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006100
mov rcx, rax
call fcn.1400224e8
mov rcx, rax
test rax, rax
je 0x140006002
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rbx
jmp 0x14000583e
call fcn.1400224e8
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rbx
jmp 0x14000583e
mov rax, qword [rsp + 0x50]
lea r8, [rsp + 0x50]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140005873
nop word [rax + rax]
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140005860
mov qword [rsp + 0x60], rsi
mov byte [r8 + rsi], 0
mov rax, qword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
bts r12d, 9
lea rdx, [rsp + 0x50]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x50]
mov rcx, r14
call fcn.140018150
lea rdx, [0x1400270c0]
mov rcx, rax
call fcn.140012ec0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400058f0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006002
call fcn.140022240
mov r9, qword [rbp - 0x28]
mov r10, qword [rbp - 0x10]
cmp r10, 7
jbe 0x140005933
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000592b
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006009
mov rcx, r9
call fcn.140022240
lea rdx, [rbp + 0x120]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140005640
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x140005b31
lea rdx, str.Failed_to_find_files_in_drive:
call fcn.140012ec0
mov r14, rax
lea r8, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x38]
lea rsi, [r8 + rcx*2]
lea rdi, [rbp - 0x48]
cmova rdi, qword [rbp - 0x48]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
cmp rdi, rsi
jne 0x1400059b0
xor r8d, r8d
mov qword [rsp + 0x30], r8
mov eax, 0xf
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x20], r8b
jmp 0x140005ac7
sub rsi, rdi
sar rsi, 1
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140006112
mov ebx, 0xf
cmp rsi, rbx
jbe 0x140005a7f
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x140005a08
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005a42
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005a2c
xor eax, eax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005a84
cmp rcx, 0x1000
jb 0x140005a6e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000610c
mov rcx, rax
call fcn.1400224e8
mov rcx, rax
test rax, rax
je 0x140006010
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005a84
call fcn.1400224e8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005a84
mov rax, qword [rsp + 0x20]
lea r8, [rsp + 0x20]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140005ab3
nop dword [rax]
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140005aa0
mov qword [rsp + 0x30], rsi
mov byte [r8 + rsi], 0
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
bts r12d, 0xa
lea rdx, [rsp + 0x20]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x20]
mov rcx, r14
call fcn.140018150
lea rdx, [0x1400270c0]
mov rcx, rax
call fcn.140012ec0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140005b31
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006010
call fcn.140022240
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 7
jbe 0x140005b71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006017
call fcn.140022240
xor r15d, r15d
mov edi, dword [rsp + 0x40]
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x140005bb8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000602c
call fcn.140022240
mov ebx, dword [rsp + 0x44]
inc di
mov dword [rsp + 0x40], edi
cmp di, 0x5a
jbe 0x140005080
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
or r12d, 4
mov dword [rsp + 0x48], r12d
movups xmmword [rsp + 0x20], xmm0
mov ecx, dword [rbp + 0xa8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140006033
mov rax, qword [rbp + 0x78]
mov r8, qword [rax]
test r8, r8
je 0x140006033
mov rax, qword [rbp + 0x58]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0xa0]
cmovb r8, qword [rbp + 0xa0]
sub r8, rdx
jmp 0x140006067
lea rdx, str.Drive
call fcn.140012ec0
mov r14, rax
lea r8, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x38]
lea rsi, [r8 + rcx*2]
lea rdi, [rbp - 0x48]
cmova rdi, qword [rbp - 0x48]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
cmp rdi, rsi
jne 0x140005c8b
mov r8, r15
mov eax, 0xf
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x20], 0
jmp 0x140005d97
sub rsi, rdi
sar rsi, 1
mov qword [rsp + 0x38], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x14000612a
mov ebx, 0xf
cmp rsi, rbx
jbe 0x140005d52
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x140005cda
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005d15
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005cff
mov rax, r15
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005d57
cmp rcx, 0x1000
jb 0x140005d41
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006124
mov rcx, rax
call fcn.1400224e8
mov rcx, rax
test rax, rax
je 0x14000601e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005d57
call fcn.1400224e8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005d57
mov rax, qword [rsp + 0x20]
lea r8, [rsp + 0x20]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140005d83
nop
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140005d70
mov qword [rsp + 0x30], rsi
mov byte [r8 + rsi], 0
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
bts r12d, 7
lea rdx, [rsp + 0x20]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x20]
mov rcx, r14
call fcn.140018150
lea rdx, str._is_not_a_mapped_network_drive._n
mov rcx, rax
call fcn.140012ec0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140005b74
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005dff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000601e
call fcn.140022240
jmp 0x140005b74
cmp ebx, 4
jne 0x140005b78
lea rdx, str.Mapped_Network_Drive:
lea rcx, [rbp + 0x30]
call fcn.140012ec0
mov r14, rax
lea r8, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x38]
lea rsi, [r8 + rcx*2]
lea rdi, [rbp - 0x48]
cmova rdi, qword [rbp - 0x48]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
cmp rdi, rsi
jne 0x140005e6d
mov r8, r15
mov eax, 0xf
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x20], 0
jmp 0x140005f78
sub rsi, rdi
sar rsi, 1
mov qword [rsp + 0x38], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x1400060ee
mov ebx, 0xf
cmp rsi, rbx
jbe 0x140005f34
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x140005ebc
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005ef7
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005ee1
mov rax, r15
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005f39
cmp rcx, 0x1000
jb 0x140005f23
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006130
mov rcx, rax
call fcn.1400224e8
mov rcx, rax
test rax, rax
je 0x140006025
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005f39
call fcn.1400224e8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
jmp 0x140005f39
mov rax, qword [rsp + 0x20]
lea r8, [rsp + 0x20]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140005f64
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140005f51
mov qword [rsp + 0x30], rsi
mov byte [r8 + rsi], 0
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
bts r12d, 8
lea rdx, [rsp + 0x20]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x20]
mov rcx, r14
call fcn.140018150
lea rdx, [0x1400270c0]
mov rcx, rax
call fcn.140012ec0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140005b74
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006025
call fcn.140022240
jmp 0x140005b74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test cl, 4
jne 0x14000605d
mov rax, qword [rbp + 0x70]
mov rcx, qword [rax]
test rcx, rcx
je 0x14000605d
mov rax, qword [rbp + 0x50]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x88]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140006067
mov r8, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
test rdx, rdx
je 0x140006075
mov rcx, r13
call fcn.140012970
nop
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x20], rax
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1c], edx
lea rcx, [rbp + 0x38]
call fcn.140011520
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xb8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rax, r13
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.140022220
lea r11, [rsp + 0x690]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400013c0
nop
call fcn.140001320
nop
call fcn.140001320
nop
call fcn.140001320
int3
call fcn.1400013c0
nop
call fcn.140001320
int3
call fcn.1400013c0
nop
call fcn.1400013c0
nop
call fcn.1400013c0
int3
call fcn.140001320
int3
call fcn.1400013c0
int3
call fcn.140001320
int3