Function at 0x140027280
Capabilities:
Print debug messages

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3c0
mov rax, qword [0x1400950a0]
xor rax, rsp
mov qword [rsp + 0x3b0], rax
mov r13, r9
mov qword [rsp + 0x88], r9
mov rdi, r8
mov qword [rsp + 0x70], r8
mov rbx, rdx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0x1d0], r8
mov qword [rsp + 0x1d8], r9
mov r15, qword [rsp + 0x420]
mov qword [rsp + 0x78], r15
mov qword [rsp + 0xb8], r15
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov qword [rdx], r12
mov qword [rdx + 8], r12
lea ecx, [r12 + 0x40]
call fcn.14003e788
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
mov dword [rsp + 0x40], 1
lea rcx, [rsp + 0x2e0]
call fcn.140033750
nop
cmp qword [rsp + 0x2f0], r12
je 0x140027faf
mov qword [rsp + 0x1e0], r12
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
mov r14d, 9
mov dword [rsp + 0x40], r14d
xor r8d, r8d
mov edx, 0x104
lea rcx, [rsp + 0x1e0]
call fcn.14002b370
movzx esi, byte [rsp + 0x44]
nop dword [rax + rax]
mov r15d, dword [rsp + 0x1f0]
lea rdx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 8
cmovae rdx, qword [rsp + 0x1e0]
mov ecx, r15d
call fcn.14003da34
mov rbx, rax
mov qword [rsp + 0x50], rax
mov ecx, eax
mov r8, qword [rsp + 0x1f0]
cmp rcx, r8
ja 0x1400273fa
lea rax, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 8
cmovae rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1f0], rcx
mov word [rax + rcx*2], r12w
jmp 0x140027468
mov rdx, rcx
sub rdx, r8
mov rdi, qword [rsp + 0x1f8]
mov rax, rdi
sub rax, r8
cmp rdx, rax
ja 0x14002744e
mov qword [rsp + 0x1f0], rcx
lea r9, [rsp + 0x1e0]
cmp rdi, 8
cmovae r9, qword [rsp + 0x1e0]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x140027443
movzx eax, r12w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], r12w
jmp 0x140027468
mov word [rsp + 0x20], r12w
mov r9, rdx
movzx r8d, sil
lea rcx, [rsp + 0x1e0]
call fcn.14002d9e0
cmp ebx, r15d
jae 0x140027390
mov edx, dword [rsp + 0x54]
test edx, edx
jne 0x1400280f7
lea rdi, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 8
cmovae rdi, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1f0]
lea rdx, [rdi + rax*2]
mov rcx, rdi
call fcn.14001e740
sub rax, rdi
sar rax, 1
mov qword [rsp + 0x200], r12
mov qword [rsp + 0x210], r12
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], r12w
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x200]
call fcn.140007c80
or r14d, 0x70
mov dword [rsp + 0x40], r14d
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x280]
call fcn.140006ea0
bts r14d, 7
mov rdx, qword [rsp + 0x218]
cmp rdx, 8
jb 0x140027554
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002754f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400280fd
call fcn.14003e780
and r14d, 0xfffffff7
mov dword [rsp + 0x40], r14d
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 8
jb 0x1400275a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400275a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028103
call fcn.14003e780
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
lea rax, [rsp + 0x280]
cmp qword [rsp + 0x298], 8
cmovae rax, qword [rsp + 0x280]
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x348], rax
lea rax, str.Users
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], 5
lea rax, [rsp + 0x2e0]
cmp qword [rsp + 0x2f8], 8
cmovae rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x368], rax
lea rax, str.AppdataLocal
mov qword [rsp + 0x370], rax
mov qword [rsp + 0x378], 0xd
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rdi + 0x10]
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x140027672
mov rax, qword [rdi]
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], rcx
mov rcx, qword [r13 + 0x10]
mov rax, r13
cmp qword [r13 + 0x18], 8
jb 0x140027694
mov rax, qword [r13]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], rcx
lea rax, str.User_Data
mov qword [rsp + 0x3a0], rax
mov qword [rsp + 0x3a8], 9
lea rax, [rsp + 0x340]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x3b0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x220]
call fcn.140032ee0
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x90]
call fcn.140006ea0
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.140032fb0
nop
mov rcx, qword [rsp + 0x2d0]
lea rax, [rsp + 0x220]
lea rdx, [rsp + 0x50]
test rcx, rcx
jne 0x14002779f
cmp qword [rsp + 0x238], 8
cmovae rax, qword [rsp + 0x220]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x1e8], rax
lea rax, str.Default
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 7
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x320]
call fcn.140032ee0
nop
or r14d, 2
jmp 0x14002781e
cmp qword [rsp + 0x238], 8
cmovae rax, qword [rsp + 0x220]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x208], rax
lea rax, [rsp + 0x2c0]
cmp qword [rsp + 0x2d8], 8
cmovae rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rcx
lea rax, [rsp + 0x200]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x220]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x300]
call fcn.140032ee0
or r14d, 4
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x260], r12
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x260], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x270], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
test r14b, 4
je 0x1400278d6
and r14d, 0xfffffffb
mov dword [rsp + 0x40], r14d
mov rdx, qword [rsp + 0x318]
cmp rdx, 8
jb 0x1400278b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400278b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028109
call fcn.14003e780
mov qword [rsp + 0x310], r12
mov qword [rsp + 0x318], 7
mov word [rsp + 0x300], r12w
test r14b, 2
je 0x14002794a
and r14d, 0xfffffffd
mov dword [rsp + 0x40], r14d
mov rdx, qword [rsp + 0x338]
cmp rdx, 8
jb 0x14002792d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027928
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002810f
call fcn.14003e780
mov qword [rsp + 0x330], r12
mov qword [rsp + 0x338], 7
mov word [rsp + 0x320], r12w
lea rax, [rsp + 0x260]
cmp qword [rsp + 0x278], 8
cmovae rax, qword [rsp + 0x260]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x98], rax
lea rax, str.Secure_Preferences
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 0x12
lea rax, [rsp + 0x90]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2a0]
call fcn.140032ee0
nop
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rsp + 0x2b0]
sub rax, rcx
cmp rax, 0x22
jb 0x140028115
lea rax, [rsp + 0x2a0]
cmp qword [rsp + 0x2b8], 8
cmovae rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x22
lea r9, str.Searching_for_extensions_in_file:
lea rcx, [rsp + 0x50]
call fcn.14000a370
bts r14d, 0xc
mov dword [rsp + 0x40], r14d
cmp byte [0x1400988ea], 0
je 0x140027a4b
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140027a8d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027a88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002811a
call fcn.14003e780
mov r8d, 1
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0xc0]
call fcn.140006800
nop
mov qword [rsp + 0x240], r12
mov qword [rsp + 0x250], r12
mov r13d, 0xf
mov qword [rsp + 0x258], r13
mov byte [rsp + 0x240], 0
mov r15, qword [rsp + 0x78]
mov rcx, qword [rsp + 0xc0]
movsxd rax, dword [rcx + 4]
cmp dword [rsp + rax + 0xd0], 0
jne 0x140027cd7
cmp qword [r15 + 8], 0
je 0x140027cd7
mov rax, qword [rsp + rax + 0x100]
mov rdi, qword [rax + 8]
mov qword [rsp + 0x208], rdi
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
nop
lea rcx, [rsp + 0x200]
call fcn.140008910
mov rcx, rax
mov rax, qword [rax]
mov dl, 0xa
call qword [rax + 0x40]
movzx ebx, al
test rdi, rdi
je 0x140027b52
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
mov rcx, rax
test rax, rax
je 0x140027b52
mov rax, qword [rax]
mov edx, 1
call qword [rax]
movzx r8d, bl
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xc0]
call fcn.14002e420
mov rax, qword [r15]
mov rbx, qword [rax]
mov r13, qword [rsp + 0x258]
nop dword [rax]
cmp rbx, qword [r15]
je 0x140027ad4
mov rsi, qword [rbx + 0x20]
lea r9, [rbx + 0x10]
mov r15, qword [rbx + 0x28]
cmp r15, 0x10
jb 0x140027b9f
mov r9, qword [rbx + 0x10]
lea rcx, [rsp + 0x240]
cmp r13, 0x10
cmovae rcx, qword [rsp + 0x240]
mov qword [rsp + 0x20], rsi
mov rdx, qword [rsp + 0x250]
call fcn.14002d390
cmp rax, 0xffffffffffffffff
je 0x140027cca
movabs rax, 0x7fffffffffffffff
sub rax, rsi
cmp rax, 0x1b
jb 0x140028120
lea rax, [rbx + 0x10]
cmp r15, 0x10
jb 0x140027bf5
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1b
lea r9, str.Found_extension_installed:
lea rcx, [rsp + 0x90]
call fcn.14000a6b0
bts r14d, 0xd
mov dword [rsp + 0x40], r14d
lea rcx, [rsp + 0x90]
call fcn.14002f780
lea r8, [rbx + 0x10]
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x80]
call fcn.14002e6a0
mov rsi, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rax], rsi
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
mov r15, qword [rsp + 0x78]
dec qword [r15 + 8]
mov rdx, qword [rbx + 0x28]
cmp rdx, 0x10
jb 0x140027ca5
inc rdx
mov rcx, qword [rbx + 0x10]
cmp rdx, 0x1000
jb 0x140027ca0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140028125
mov rcx, r8
call fcn.14003e780
mov byte [rbx + 0x10], 0
mov qword [rbx + 0x20], r12
mov qword [rbx + 0x28], 0xf
mov edx, 0x30
mov rcx, rbx
call fcn.14003e780
mov rbx, rsi
jmp 0x140027b71
mov rbx, qword [rbx]
mov r15, qword [rsp + 0x78]
jmp 0x140027b80
cmp r13, 0x10
jb 0x140027d1b
lea rdx, [r13 + 1]
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027d0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002812b
call fcn.14003e780
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x250], r12
mov qword [rsp + 0x258], 0xf
mov byte [rsp + 0x240], 0
movsxd rax, dword [rcx + 4]
lea rcx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rax + 0xc0], rcx
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xbc], edx
lea rcx, [rsp + 0xd0]
call fcn.140006750
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0xc0], rax
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0xbc], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x170], rax
lea rcx, [rsp + 0x170]
call fcn.14003ccd0
nop
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 8
jb 0x140027e06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027e01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028131
call fcn.14003e780
mov qword [rsp + 0x2b0], r12
mov qword [rsp + 0x2b8], 7
mov word [rsp + 0x2a0], r12w
mov rdx, qword [rsp + 0x278]
cmp rdx, 8
jb 0x140027e6b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027e66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028137
call fcn.14003e780
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], 7
mov word [rsp + 0x260], r12w
mov rdx, qword [rsp + 0x2d8]
cmp rdx, 8
jb 0x140027ed0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027ecb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002813d
call fcn.14003e780
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], 7
mov word [rsp + 0x2c0], r12w
mov rdx, qword [rsp + 0x238]
cmp rdx, 8
jb 0x140027f35
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027f30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028143
call fcn.14003e780
mov qword [rsp + 0x230], r12
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], r12w
mov rdx, qword [rsp + 0x298]
cmp rdx, 8
jb 0x140027f9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027f95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028149
call fcn.14003e780
mov rdi, qword [rsp + 0x70]
mov r13, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 8
jb 0x140027ff8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027ff2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002814f
call fcn.14003e780
nop
jmp 0x140028022
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x140028066
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140028061
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140028155
mov rcx, rdi
mov rdi, qword [rsp + 0x70]
call fcn.14003e780
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 7
mov word [rdi], r12w
mov rdx, qword [r13 + 0x18]
cmp rdx, 8
jb 0x1400280b2
mov rcx, qword [r13]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400280ad
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400280f1
mov rcx, rdi
call fcn.14003e780
mov qword [r13 + 0x10], r12
mov qword [r13 + 0x18], 7
mov word [r13], r12w
mov rcx, r15
call fcn.14002a990
mov rax, rbx
mov rcx, qword [rsp + 0x3b0]
xor rcx, rsp
call fcn.14003e760
add rsp, 0x3c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.1400512b4
nop
call fcn.14001eb80
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.140001350
call fcn.1400512b4
nop
call fcn.140001350
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
int3