Function at 0x18009b700
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
sub rsp, 0x170
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x48], rcx
mov byte [rbp - 0x39], r8b
mov rax, qword [0x1800eb0a8]
xor rax, rbp
mov qword [rbp + 0xe8], rax
mov dword [rbp - 0x38], 0x46c9d01e
mov eax, dword [rbp - 0x38]
mov dword [rbp - 0x5c], eax
sub eax, 0x822b2cfd
je 0x18009ce6b
jmp 0x18009b74e
mov eax, dword [rbp - 0x5c]
sub eax, 0x839bdffa
je 0x18009c0e8
jmp 0x18009b761
mov eax, dword [rbp - 0x5c]
sub eax, 0x897c6f3f
je 0x18009cdc1
jmp 0x18009b774
mov eax, dword [rbp - 0x5c]
sub eax, 0x8986a3b2
je 0x18009ceba
jmp 0x18009b787
mov eax, dword [rbp - 0x5c]
sub eax, 0x89aaf209
je 0x18009c040
jmp 0x18009b79a
mov eax, dword [rbp - 0x5c]
sub eax, 0x8eb7cf8d
je 0x18009c792
jmp 0x18009b7ad
mov eax, dword [rbp - 0x5c]
sub eax, 0x8ec05a5c
je 0x18009d305
jmp 0x18009b7c0
mov eax, dword [rbp - 0x5c]
sub eax, 0x8ff25c78
je 0x18009c116
jmp 0x18009b7d3
mov eax, dword [rbp - 0x5c]
sub eax, 0x9090e3d1
je 0x18009cb7a
jmp 0x18009b7e6
mov eax, dword [rbp - 0x5c]
sub eax, 0x9e7c5b4e
je 0x18009bfc4
jmp 0x18009b7f9
mov eax, dword [rbp - 0x5c]
sub eax, 0xa758ed2f
je 0x18009c4f1
jmp 0x18009b80c
mov eax, dword [rbp - 0x5c]
sub eax, 0xaa0f9d8f
je 0x18009c5a3
jmp 0x18009b81f
mov eax, dword [rbp - 0x5c]
sub eax, 0xabf10337
je 0x18009c7aa
jmp 0x18009b832
mov eax, dword [rbp - 0x5c]
sub eax, 0xae0061bc
je 0x18009c27e
jmp 0x18009b845
mov eax, dword [rbp - 0x5c]
sub eax, 0xb06cb62a
je 0x18009d251
jmp 0x18009b858
mov eax, dword [rbp - 0x5c]
sub eax, 0xb0e66414
je 0x18009c8aa
jmp 0x18009b86b
mov eax, dword [rbp - 0x5c]
sub eax, 0xb1b5e32e
je 0x18009cc45
jmp 0x18009b87e
mov eax, dword [rbp - 0x5c]
sub eax, 0xba28f8f5
je 0x18009d1d7
jmp 0x18009b891
mov eax, dword [rbp - 0x5c]
sub eax, 0xbc8e7650
je 0x18009c3b0
jmp 0x18009b8a4
mov eax, dword [rbp - 0x5c]
sub eax, 0xbed9dc19
je 0x18009d296
jmp 0x18009b8b7
mov eax, dword [rbp - 0x5c]
sub eax, 0xbf5809a5
je 0x18009bf36
jmp 0x18009b8ca
mov eax, dword [rbp - 0x5c]
sub eax, 0xc055fe65
je 0x18009c1e8
jmp 0x18009b8dd
mov eax, dword [rbp - 0x5c]
sub eax, 0xc3873470
je 0x18009ce46
jmp 0x18009b8f0
mov eax, dword [rbp - 0x5c]
sub eax, 0xc6b71386
je 0x18009c81b
jmp 0x18009b903
mov eax, dword [rbp - 0x5c]
sub eax, 0xcacb94d4
je 0x18009c8d4
jmp 0x18009b916
mov eax, dword [rbp - 0x5c]
sub eax, 0xccfa9fe9
je 0x18009c3a4
jmp 0x18009b929
mov eax, dword [rbp - 0x5c]
sub eax, 0xd3ce61a4
je 0x18009cfa7
jmp 0x18009b93c
mov eax, dword [rbp - 0x5c]
sub eax, 0xd462eec5
je 0x18009d347
jmp 0x18009b94f
mov eax, dword [rbp - 0x5c]
sub eax, 0xd5b0a302
je 0x18009d2d1
jmp 0x18009b962
mov eax, dword [rbp - 0x5c]
sub eax, 0xd737bd38
je 0x18009c767
jmp 0x18009b975
mov eax, dword [rbp - 0x5c]
sub eax, 0xd74fd8c2
je 0x18009c955
jmp 0x18009b988
mov eax, dword [rbp - 0x5c]
sub eax, 0xd827e606
je 0x18009c103
jmp 0x18009b99b
mov eax, dword [rbp - 0x5c]
sub eax, 0xdacd6889
je 0x18009c160
jmp 0x18009b9ae
mov eax, dword [rbp - 0x5c]
sub eax, 0xdf1a7973
je 0x18009c6b1
jmp 0x18009b9c1
mov eax, dword [rbp - 0x5c]
sub eax, 0xe9fc927f
je 0x18009cafe
jmp 0x18009b9d4
mov eax, dword [rbp - 0x5c]
sub eax, 0xec842549
je 0x18009c436
jmp 0x18009b9e7
mov eax, dword [rbp - 0x5c]
sub eax, 0xf1b4198a
je 0x18009d1aa
jmp 0x18009b9fa
mov eax, dword [rbp - 0x5c]
sub eax, 0xf2f2da1b
je 0x18009ca22
jmp 0x18009ba0d
mov eax, dword [rbp - 0x5c]
sub eax, 0xf535afff
je 0x18009ccb9
jmp 0x18009ba20
mov eax, dword [rbp - 0x5c]
sub eax, 0xf7db5907
je 0x18009c491
jmp 0x18009ba33
mov eax, dword [rbp - 0x5c]
sub eax, 0xf84b02c7
je 0x18009c77a
jmp 0x18009ba46
mov eax, dword [rbp - 0x5c]
sub eax, 0xfb304df8
je 0x18009c7d1
jmp 0x18009ba59
mov eax, dword [rbp - 0x5c]
sub eax, 0xffb62a47
je 0x18009c5c1
jmp 0x18009ba6c
mov eax, dword [rbp - 0x5c]
sub eax, 0x2465324
je 0x18009cc88
jmp 0x18009ba7f
mov eax, dword [rbp - 0x5c]
sub eax, 0xa797f72
je 0x18009d315
jmp 0x18009ba92
mov eax, dword [rbp - 0x5c]
sub eax, 0xbbb9226
je 0x18009c617
jmp 0x18009baa5
mov eax, dword [rbp - 0x5c]
sub eax, 0xd36ea69
je 0x18009cbfb
jmp 0x18009bab8
mov eax, dword [rbp - 0x5c]
sub eax, 0xeef4b8b
je 0x18009c73d
jmp 0x18009bacb
mov eax, dword [rbp - 0x5c]
sub eax, 0x102ab2fa
je 0x18009cf88
jmp 0x18009bade
mov eax, dword [rbp - 0x5c]
sub eax, 0x123610ba
je 0x18009d1c2
jmp 0x18009baf1
mov eax, dword [rbp - 0x5c]
sub eax, 0x155c4622
je 0x18009d08c
jmp 0x18009bb04
mov eax, dword [rbp - 0x5c]
sub eax, 0x15765c68
je 0x18009cd35
jmp 0x18009bb17
mov eax, dword [rbp - 0x5c]
sub eax, 0x1c24c618
je 0x18009cb60
jmp 0x18009bb2a
mov eax, dword [rbp - 0x5c]
sub eax, 0x1d77d96b
je 0x18009c2ff
jmp 0x18009bb3d
mov eax, dword [rbp - 0x5c]
sub eax, 0x1de3809a
je 0x18009d2f9
jmp 0x18009bb50
mov eax, dword [rbp - 0x5c]
sub eax, 0x1de8034d
je 0x18009ce27
jmp 0x18009bb63
mov eax, dword [rbp - 0x5c]
sub eax, 0x1fc5149d
je 0x18009d1ff
jmp 0x18009bb76
mov eax, dword [rbp - 0x5c]
sub eax, 0x20497ba8
je 0x18009cb42
jmp 0x18009bb89
mov eax, dword [rbp - 0x5c]
sub eax, 0x2138cf03
je 0x18009c597
jmp 0x18009bb9c
mov eax, dword [rbp - 0x5c]
sub eax, 0x22424252
je 0x18009cf6a
jmp 0x18009bbaf
mov eax, dword [rbp - 0x5c]
sub eax, 0x24eb785d
je 0x18009ce3a
jmp 0x18009bbc2
mov eax, dword [rbp - 0x5c]
sub eax, 0x25b2ee23
je 0x18009d2e1
jmp 0x18009bbd5
mov eax, dword [rbp - 0x5c]
sub eax, 0x2994097f
je 0x18009d10d
jmp 0x18009bbe8
mov eax, dword [rbp - 0x5c]
sub eax, 0x2be54088
je 0x18009d286
jmp 0x18009bbfb
mov eax, dword [rbp - 0x5c]
sub eax, 0x2eea9d0c
je 0x18009cc63
mov rcx, qword [rbp - 0x58]
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
mov qword [rbp + 0x40], rdx
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
mov qword [rbp + 0x48], rdx
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
mov qword [rbp + 0x50], rdx
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
mov qword [rbp + 0x58], rdx
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
mov qword [rbp + 0x60], rdx
call fcn.1800e0a50
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x68], rax
mov rax, qword [rbp - 0x30]
mov qword [rax], rcx
mov dword [rbp - 0x38], 0x9e7c5b4e
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1fc5149d
mov ecx, 0x89aaf209
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rcx, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
mov r8b, byte [rbp - 0x39]
and r8b, 1
mov rax, qword [rbp - 0x28]
mov byte [rax], r8b
mov rax, qword [rbp - 0x20]
mov qword [rax], rdx
mov rax, qword [rbp - 0x18]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp + 0x70], rax
mov rcx, qword [rbp - 0x10]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov rax, qword [rbp - 0x20]
cmp qword [rax], 0
sete al
and al, 1
mov byte [rbp + 0x7f], al
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
mov edx, eax
add edx, 0x91043450
sub edx, 1
sub edx, 0x91043450
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1fc5149d
mov ecx, 0x839bdffa
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dl, byte [rbp + 0x7f]
mov eax, 0xc055fe65
mov ecx, 0xd827e606
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x34], 0xffffffff
mov dword [rbp - 0x38], 0x8ff25c78
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb06cb62a
mov ecx, 0xdacd6889
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb06cb62a
mov ecx, 0x5d50b0e8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rcx, qword [rbp - 8]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call sub.msvcrt.dll_memset
call fcn.180098d60
add rsp, 0x20
mov cx, ax
mov rax, qword [rbp - 8]
mov word [rax], cx
mov rax, qword [rbp]
mov dword [rax], 0
mov rax, qword [rbp - 8]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov qword [rbp + 0x88], rax
mov dword [rbp - 0x38], 0x4bfa768b
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
sub edx, 0x915f7cf8
sub edx, 1
add edx, 0x915f7cf8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4ad71535
mov ecx, 0x1d77d96b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp]
mov dword [rax], ecx
mov dword [rbp - 0x34], 0xffffffff
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4ad71535
mov ecx, 0x5688c4eb
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x123610ba
jmp 0x18009d36a
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x90], rax
mov dword [rbp - 0x38], 0x42c7e752
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x123610ba
jmp 0x18009d36a
sub rsp, 0x20
call fcn.180098cc0
add rsp, 0x20
mov cx, ax
mov rax, qword [rbp + 0x18]
mov word [rax + 0x20a], cx
mov rax, qword [rbp + 0x20]
mov dword [rax], 1
mov rcx, qword [rbp + 0x28]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov rcx, qword [rbp + 8]
add rcx, 0x2c
mov rax, qword [rbp + 0x30]
mov qword [rax], rcx
mov rax, qword [rbp + 0x38]
mov byte [rax], 0
mov dword [rbp - 0x38], 0xa758ed2f
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2be54088
mov ecx, 0x5baaaec2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x38], 0xaa0f9d8f
jmp 0x18009d36a
mov dl, byte [rbp + 0x9d]
mov eax, 0x155c4622
mov ecx, 0xffb62a47
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rcx, qword [rbp + 8]
add rcx, 0x2c
mov rax, qword [rbp + 0x30]
mov qword [rax], rcx
mov rax, qword [rbp + 0x38]
mov byte [rax], 0
mov dword [rbp - 0x38], 0x4b7b6ca3
jmp 0x18009d36a
mov dl, byte [rbp + 0x9e]
mov eax, 0xfb304df8
mov ecx, 0x3c0c8249
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rax, qword [rbp + 0x40]
movsxd rax, dword [rax]
mov rdx, qword [rbp + 0x18]
imul rax, rax, 0x208
add rdx, rax
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
mov r8d, 0x104
sub rsp, 0x20
call sub.msvcrt.dll_wcsncmp
add rsp, 0x20
cmp eax, 0
sete al
and al, 1
mov byte [rbp + 0x9f], al
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
mov edx, eax
add edx, 0xa5382212
sub edx, 1
sub edx, 0xa5382212
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbed9dc19
mov ecx, 0xeef4b8b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x3ce72051
jmp 0x18009d36a
mov rax, qword [rbp + 0x38]
mov byte [rax], 1
mov dword [rbp - 0x38], 0xf84b02c7
jmp 0x18009d36a
mov dword [rbp - 0x38], 0xfb304df8
jmp 0x18009d36a
mov rax, qword [rbp + 0x40]
mov eax, dword [rax]
mov dword [rbp + 0xa0], eax
mov dword [rbp - 0x38], 0xabf10337
jmp 0x18009d36a
mov ecx, dword [rbp + 0xa0]
sub ecx, 0x48f4248
add ecx, 1
add ecx, 0x48f4248
mov rax, qword [rbp + 0x40]
mov dword [rax], ecx
mov dword [rbp - 0x38], 0x71e36cbb
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd5b0a302
mov ecx, 0xc6b71386
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rax, qword [rbp + 0x38]
mov al, byte [rax]
and al, 1
mov byte [rbp + 0xa7], al
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
add edx, 0x1c54ba32
sub edx, 1
sub edx, 0x1c54ba32
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd5b0a302
mov ecx, 0xb0e66414
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x7f9a7753
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
sub edx, 0x4f638b54
sub edx, 1
add edx, 0x4f638b54
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x25b2ee23
mov ecx, 0xd74fd8c2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
mov edx, eax
sub edx, 0x4ea88d49
sub edx, 1
add edx, 0x4ea88d49
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x25b2ee23
mov ecx, 0x2f5c299d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
mov edx, eax
sub edx, 0xa6981c6d
sub edx, 1
add edx, 0xa6981c6d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x664e8ada
mov ecx, 0x3974f5f9
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rax, qword [rbp + 8]
mov eax, dword [rax]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x10
mov ecx, 0xffffffff
xor ecx, 0x398e1795
or eax, edx
or ecx, 0x398e1795
xor eax, 0xffffffff
and eax, ecx
cmp eax, 0x10
sete cl
and cl, 1
mov rax, qword [rbp + 0x48]
mov byte [rax], cl
mov dword [rbp - 0x38], 0x20497ba8
jmp 0x18009d36a
mov rax, qword [rbp + 0x48]
mov dl, byte [rax]
mov eax, 0xf535afff
mov ecx, 0x1c24c618
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rax, qword [rbp - 0x28]
mov al, byte [rax]
and al, 1
mov byte [rbp + 0xb7], al
mov dword [rbp - 0x38], 0x9090e3d1
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
sub edx, 0x645fb314
sub edx, 1
add edx, 0x645fb314
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1de3809a
mov ecx, 0xd36ea69
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1de3809a
mov ecx, 0xb1b5e32e
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dl, byte [rbp + 0xb7]
mov eax, 0xf535afff
mov ecx, 0x2eea9d0c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rcx, qword [rbp + 0x70]
mov r9, qword [rbp + 0xb8]
mov rdx, qword [rbp + 0xc0]
mov r8d, 1
sub rsp, 0x20
call fcn.18009b700
add rsp, 0x20
mov dword [rbp - 0x38], 0xf535afff
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8ec05a5c
mov ecx, 0x15765c68
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0xc8], rax
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
sub edx, 0x84e316ef
sub edx, 1
add edx, 0x84e316ef
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8ec05a5c
mov ecx, 0x897c6f3f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x74a5e022
jmp 0x18009d36a
mov dword [rbp - 0x34], 0
mov dword [rbp - 0x38], 0x24eb785d
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x123610ba
jmp 0x18009d36a
mov rcx, qword [rbp + 0x60]
xor edx, edx
mov r8d, 0x10
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov dword [rbp - 0x38], 0x822b2cfd
jmp 0x18009d36a
mov eax, dword [0x18184c91c]
mov ecx, dword [0x18184c918]
mov edx, eax
add edx, 0x3d0b4be0
sub edx, 1
sub edx, 0x3d0b4be0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa797f72
mov ecx, 0x8986a3b2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov r8, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x50]
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp + 0x58]
mov dword [rax], ecx
mov rax, qword [rbp + 0x58]
cmp dword [rax], 1
setne al
and al, 1
mov byte [rbp + 0xd3], al
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa797f72
mov ecx, 0x22424252
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dl, byte [rbp + 0xd3]
mov eax, 0xd3ce61a4
mov ecx, 0x102ab2fa
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x34], 0
mov dword [rbp - 0x38], 0x7f6d9fb5
jmp 0x18009d36a
mov rcx, qword [rbp + 0x68]
xor edx, edx
mov r8d, 8
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov rax, qword [rbp + 8]
mov eax, dword [rax + 0x20]
mov dword [rbp + 0xd4], eax
mov rax, qword [rbp + 0x68]
mov qword [rbp + 0xd8], rax
mov dword [rbp - 0x38], 0x7e15ed55
jmp 0x18009d36a
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
sub edx, 0xe0191ea2
sub edx, 1
add edx, 0xe0191ea2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd462eec5
mov ecx, 0x2994097f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindClose]
add rsp, 0x20
mov dword [rbp - 0x34], 0
mov ecx, dword [0x18184c91c]
mov eax, dword [0x18184c918]
mov edx, ecx
add edx, 0xbfe3e382
sub edx, 1
sub edx, 0xbfe3e382
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd462eec5
mov ecx, 0xf1b4198a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x38], eax
jmp 0x18009d36a
mov dword [rbp - 0x38], 0x5dee384e
jmp 0x18009d36a
mov eax, dword [rbp - 0x34]
mov dword [rbp + 0xe4], eax
mov dword [rbp - 0x38], 0xba28f8f5
jmp 0x18009d36a
mov eax, dword [rbp + 0xe4]
mov dword [rbp - 0x7c], eax
mov rcx, qword [rbp + 0xe8]
xor rcx, rbp
sub rsp, 0x20
call fcn.1800e09d0
mov eax, dword [rbp - 0x7c]
lea rsp, [rbp + 0xf0]
pop rbp
ret
mov rcx, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
mov r8b, byte [rbp - 0x39]
and r8b, 1
mov rax, qword [rbp - 0x28]
mov byte [rax], r8b
mov rax, qword [rbp - 0x20]
mov qword [rax], rdx
mov rax, qword [rbp - 0x18]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x10]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov rax, qword [rbp - 0x20]
mov dword [rbp - 0x38], 0x89aaf209
jmp 0x18009d36a
mov dword [rbp - 0x38], 0xdacd6889
jmp 0x18009d36a
mov rax, qword [rbp + 0x20]
mov dword [rbp - 0x38], 0x5baaaec2
jmp 0x18009d36a
mov rax, qword [rbp + 0x40]
movsxd rax, dword [rax]
mov rdx, qword [rbp + 0x18]
imul rax, rax, 0x208
add rdx, rax
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
mov r8d, 0x104
sub rsp, 0x20
call sub.msvcrt.dll_wcsncmp
add rsp, 0x20
mov dword [rbp - 0x38], 0xdf1a7973
jmp 0x18009d36a
mov rax, qword [rbp + 0x38]
mov dword [rbp - 0x38], 0xc6b71386
jmp 0x18009d36a
mov dword [rbp - 0x38], 0xd74fd8c2
jmp 0x18009d36a
mov dword [rbp - 0x38], 0xd36ea69
jmp 0x18009d36a
mov rax, qword [rbp + 0x50]
mov dword [rbp - 0x38], 0x15765c68
jmp 0x18009d36a
mov r8, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x50]
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp + 0x58]
mov dword [rax], ecx
mov rax, qword [rbp + 0x58]
mov dword [rbp - 0x38], 0x8986a3b2
jmp 0x18009d36a
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FindClose]
add rsp, 0x20
mov dword [rbp - 0x34], 0
mov dword [rbp - 0x38], 0x2994097f
jmp 0x18009b738