Function at 0x1400096c1
Capabilities:
Check if file exists
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xec8
movaps xmmword [rsp + 0xeb0], xmm6
and qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], 8
and qword [rsp + 0xa8], 0
call fcn.140006661
lea rsi, [rsp + 0xb0]
and qword [rsi], 0
mov rax, qword [0x1400f7040]
mov rcx, rsi
call rax
mov r8, qword [rsi]
movabs r10, 0x19db1ded53e7fff
mov rax, r8
sub rax, r10
movabs rcx, 0xfe624e212ac18000
add rcx, r8
mov r9d, 1
sub r9, rax
cmp r8, r10
cmovg r9, rcx
mov ecx, 0x989680
mov rax, r9
xor edx, edx
div rcx
cmp r8, r10
jle 0x14000acd3
mov rcx, rdx
mov r8d, 0x15180
xor edx, edx
div r8
mov r8, rdx
movabs r10, 0xc92a69c000
mov rax, r9
xor edx, edx
div r10
add eax, 0xafaa8
mov r9d, 0x23ab1
xor edx, edx
div r9d
mov r9d, eax
mov eax, edx
mov r10d, 0x16d
xor edx, edx
div r10d
lea r10, [0x140094f14]
movzx r11d, byte [rax + r10]
mov ebp, edx
sub ebp, r11d
jae 0x1400097d5
dec eax
cmp eax, 0x190
ja 0x14000acd3
mov r11d, eax
movzx r10d, byte [r11 + r10]
sub edx, r10d
add edx, 0x16d
mov ebp, edx
jmp 0x1400097e0
cmp eax, 0x190
jae 0x14000acd3
mov edx, eax
lea r10, [0x1400950a5]
movzx edx, byte [rdx + r10]
shl ebp, 4
add ebp, 0x10
or ebp, edx
mov edx, ebp
shr edx, 3
add edx, 0xfffffffe
cmp edx, 0x2db
jae 0x14000acd3
imul ecx, ecx, 0x64
imul edx, r9d, 0x190
add eax, edx
shl eax, 0xd
or ebp, eax
mov dword [rsp + 0x34], r8d
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], ebp
sar ebp, 0xd
mov eax, 0x786b
cmp ebp, eax
cmovl eax, ebp
cmp eax, 0x642
mov ecx, 0x641
cmovge ecx, eax
lea r8, [rsp + 0xb0]
xor edx, edx
call qword [sym.imp.kernel32.dll_GetTimeZoneInformationForYear]
test eax, eax
je 0x14000acd3
lea rsi, [rsp + 0xb4]
mov eax, dword [rsi - 4]
lea rbx, [rsp + 0x318]
mov ecx, 0x14
mov rdi, rbx
rep movsd dword [rdi], dword [rsi]
lea rsi, [rsp + 0x108]
mov edx, dword [rsi - 4]
add edx, eax
lea rdi, [rsp + 0x7c0]
mov ecx, 0x14
rep movsd dword [rdi], dword [rsi]
imul edi, edx, 0x3c
lea ecx, [rdi - 0x15180]
cmp ecx, 0xfffd5d01
jb 0x14000acd3
add eax, dword [rsp + 0x158]
imul r14d, eax, 0x3c
lea eax, [r14 - 0x15180]
cmp eax, 0xfffd5d01
jb 0x14000acd3
lea rdx, [rsp + 0x358]
lea rsi, [rsp + 0xb0]
mov rcx, rsi
mov r8d, ebp
call fcn.140027c5d
lea rdx, [rsp + 0x800]
lea r15, [rsp + 0xc0]
mov rcx, r15
mov r8d, ebp
call fcn.140027c5d
mov ecx, dword [r15 - 0x10]
mov rax, qword [r15 - 0xc]
mov qword [rsp + 0x70], rax
mov eax, dword [r15 - 4]
mov dword [rsp + 0x78], eax
mov eax, dword [r15]
mov rdx, qword [r15 + 4]
mov qword [rsp + 0x60], rdx
mov edx, dword [r15 + 0xc]
mov dword [rsp + 0x68], edx
cmp ecx, 2
je 0x14000acd3
neg edi
neg r14d
mov edx, dword [rsp + 0x78]
mov dword [rsp + 0xa28], edx
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0xa20], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x570], rdx
mov edx, dword [rsp + 0x68]
mov dword [rsp + 0x578], edx
test ecx, ecx
je 0x1400099f1
test eax, eax
je 0x140009a1e
lea r15, [rsp + 0x318]
lea rdx, [rsp + 0xa20]
mov rcx, r15
mov r8d, r14d
call fcn.140027a59
lea r12, [rsp + 0xb0]
lea rdx, [rsp + 0x570]
mov rcx, r12
mov r8d, edi
call fcn.140027a59
mov rcx, r12
mov rdx, r15
call fcn.140027ac3
lea rcx, [rsp + 0x34]
test al, al
je 0x140009a4e
lea rdx, [rsp + 0xb0]
call fcn.140027ad6
test al, al
je 0x1400099e9
lea rcx, [rsp + 0x34]
lea rdx, [rsp + 0x318]
call fcn.140027ac3
test al, al
cmovne edi, r14d
mov r14d, edi
jmp 0x140009a77
test eax, eax
je 0x140009a7a
lea r15, [rsp + 0xb0]
lea rdx, [rsp + 0x570]
mov rcx, r15
mov r8d, edi
call fcn.140027a59
lea rcx, [rsp + 0x34]
mov rdx, r15
jmp 0x140009a6c
lea r15, [rsp + 0xb0]
lea rdx, [rsp + 0xa20]
mov rcx, r15
mov r8d, r14d
call fcn.140027a59
lea rcx, [rsp + 0x34]
mov rdx, r15
call fcn.140027ac3
test al, al
cmovne edi, r14d
jmp 0x140009a7a
lea rdx, [rsp + 0x318]
call fcn.140027ad6
test al, al
je 0x140009a77
lea rcx, [rsp + 0x34]
lea rdx, [rsp + 0xb0]
call fcn.140027ac3
test al, al
cmovne r14d, edi
mov edi, r14d
mov r14d, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x34]
add eax, edi
mov r15d, 0x15180
cdq
idiv r15d
add r15d, edx
mov ecx, edx
sar ecx, 0x1f
add ecx, eax
test edx, edx
cmovns r15d, edx
cmp ecx, 1
je 0x140009abd
cmp ecx, 0xffffffff
jne 0x140009ace
mov ecx, ebp
call fcn.140027b2c
test eax, eax
mov ebp, 0x800016e7
jmp 0x140009acb
mov ecx, ebp
call fcn.140027b73
test eax, eax
mov ebp, 0x7fffe01f
cmovne ebp, edx
and qword [rsp + 0x570], 0
mov qword [rsp + 0x578], 1
and qword [rsp + 0x580], 0
mov r9d, edi
neg r9d
cmovs r9d, edi
mov eax, edi
shr eax, 0x1f
lea eax, [rax*2 + 0x2b]
mov dword [rsp + 0x94], eax
mov r10d, 0x3c
mov eax, r9d
cdq
idiv r10d
mov ecx, edx
test edx, edx
js 0x140009b28
mov eax, r9d
cdq
idiv r10d
mov r8d, eax
jmp 0x140009b31
mov r8d, eax
add ecx, 0x3c
dec r8d
mov dword [rsp + 0x34], ecx
mov eax, r8d
cdq
idiv r10d
mov r9d, edx
test edx, edx
js 0x140009b4c
mov eax, r8d
cdq
idiv r10d
jmp 0x140009b52
add r9d, 0x3c
dec eax
mov dword [rsp + 0x60], r9d
mov dword [rsp + 0x70], eax
lea r8, [rsp + 0x94]
lea rdx, [0x14002bdf0]
movabs rax, 0x800000020
test ecx, ecx
je 0x140009cb9
mov qword [rsp + 0x318], r8
mov qword [rsp + 0x320], rdx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x328], rcx
lea rcx, [0x14002c413]
mov qword [rsp + 0x330], rcx
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rcx
lea rdx, [rsp + 0x34]
mov qword [rsp + 0x348], rdx
mov qword [rsp + 0x350], rcx
mov ecx, 2
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xc0], rcx
and qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 0x20
mov dl, 3
mov byte [rsp + 0xe0], dl
mov qword [rsp + 0xe8], rcx
and qword [rsp + 0xf8], 0
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], 1
mov qword [rsp + 0x110], rax
mov byte [rsp + 0x118], dl
mov qword [rsp + 0x120], rcx
and qword [rsp + 0x130], 0
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rax
mov byte [rsp + 0x150], dl
mov qword [rsp + 0x158], rcx
and qword [rsp + 0x168], 0
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], 3
mov qword [rsp + 0x180], rax
mov byte [rsp + 0x188], dl
lea rax, [0x140095888]
lea r8, [rsp + 0x7c0]
mov qword [r8], rax
mov eax, 4
jmp 0x140009da8
mov qword [rsp + 0x318], r8
mov qword [rsp + 0x320], rdx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x328], rcx
lea rcx, [0x14002c413]
mov qword [rsp + 0x330], rcx
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rcx
mov ecx, 2
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xc0], rcx
and qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 0x20
mov dl, 3
mov byte [rsp + 0xe0], dl
mov qword [rsp + 0xe8], rcx
and qword [rsp + 0xf8], 0
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], 1
mov qword [rsp + 0x110], rax
mov byte [rsp + 0x118], dl
mov qword [rsp + 0x120], rcx
and qword [rsp + 0x130], 0
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rax
mov byte [rsp + 0x150], dl
lea rax, [0x140095858]
lea r8, [rsp + 0x7c0]
mov qword [r8], rax
mov eax, 3
mov qword [r8 + 8], rax
mov qword [r8 + 0x20], rsi
mov qword [r8 + 0x28], rax
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], rax
lea rdx, [0x1400924b0]
lea rcx, [rsp + 0x570]
call fcn.140029c3c
test al, al
jne 0x14000acd3
movabs r12, 0x8000000000000000
lea r8, [rsp + 0x570]
mov rax, qword [r8 + 0x10]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [r8]
movaps xmmword [rsp + 0xb0], xmm0
mov eax, 1
mov dword [rsp + 0xd0], eax
mov dword [rsp + 0xd4], ebp
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], r15d
mov dword [rsp + 0x100], r14d
mov dword [rsp + 0xc8], edi
lea rax, str._Y__m__d__H___
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], 0xb
lea rax, [0x1400f1870]
mov qword [rsp + 0xe8], rax
and qword [rsp + 0xf0], 0
mov qword [r8], rsi
lea rax, str.Result_
lea rdx, [rsp + 0x318]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x1400022ad]
mov qword [r8 + 8], rcx
mov qword [rdx + 0x10], r8
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x7c0]
call fcn.140001b21
mov rcx, qword [rsp + 0xb0]
cmp rcx, r12
je 0x140009ec3
mov rdx, qword [rsp + 0xb8]
call fcn.1400275a6
movups xmm0, xmmword [rsp + 0x7c0]
movaps xmmword [rsp + 0xa20], xmm0
mov rdx, qword [rsp + 0x7d0]
mov qword [rsp + 0xa30], rdx
mov rcx, qword [rsp + 0xa28]
call fcn.140001063
test al, al
je 0x140009f2e
mov rdx, qword [rsp + 0xa28]
mov r8, qword [rsp + 0xa30]
lea rsi, [rsp + 0xb0]
mov rcx, rsi
call fcn.1400277e4
mov rdi, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x40], rax
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x48], rax
jmp 0x14000a016
mov rdx, qword [rsp + 0xa28]
mov r8, qword [rsp + 0xa30]
lea rdi, [rsp + 0xb0]
mov rcx, rdi
call fcn.1400277e4
mov rbx, qword [rdi + 8]
mov rdx, qword [rdi + 0x10]
mov rcx, rbx
call fcn.14008b91e
mov rsi, rax
mov rcx, qword [rdi]
mov rdx, rbx
call fcn.1400275a6
test rsi, rsi
je 0x140009fda
lea rdi, [rsp + 0xa20]
mov qword [rsp + 0x318], rdi
lea rax, [0x140092538]
lea rcx, [rsp + 0xb0]
mov qword [rcx], rax
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
lea rax, [0x1400020be]
mov qword [rsp + 0x320], rax
lea rax, [rsp + 0x318]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 1
call fcn.14008c87a
mov rcx, rsi
call fcn.140001645
cmp qword [rdi], r12
je 0x14000a030
jmp 0x14000acd3
mov rdx, qword [rsp + 0xa28]
mov r8, qword [rsp + 0xa30]
lea rsi, [rsp + 0xb0]
mov rcx, rsi
call fcn.1400277e4
mov rdi, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x40], rax
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.140001645
mov rcx, qword [rsp + 0xa20]
mov rdx, qword [rsp + 0xa28]
call fcn.1400275a6
cmp rdi, r12
jne 0x14000a04d
mov eax, 1
mov qword [rsp + 0x40], rax
xor eax, eax
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsp + 0x88], rax
jmp 0x14000a061
mov qword [rsp + 0x88], rdi
mov edx, 1
xor ecx, ecx
call fcn.1400275a6
xorps xmm6, xmm6
lea rsi, [rsp + 0xb0]
mov r12d, 2
and qword [rsp + 0x7c0], 0
mov edi, 1
mov qword [rsp + 0x7c8], rdi
and qword [rsp + 0x7d0], 0
call fcn.140006661
lea rax, str._Path__
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdi
lea rax, [0x1400f1870]
mov qword [rsp + 0xc0], rax
movups xmmword [rsp + 0xc8], xmm6
mov rcx, rsi
call fcn.14008c87a
call fcn.14008c748
lea rax, [0x1400f7138]
mov qword [rsp + 0xb0], rax
mov rcx, rsi
call fcn.14008c80a
mov rbx, rax
xor eax, eax
cmp qword [rbx + 0x10], rax
jne 0x14000acd3
or qword [rbx + 0x10], 0xffffffffffffffff
mov rcx, rbx
add rcx, 0x18
call fcn.140086c1c
mov r13, rax
inc qword [rbx + 0x10]
mov rcx, rbx
call fcn.1400894da
test r13, r13
jne 0x14000acd3
call fcn.14008c284
mov rcx, rsi
lea rdx, [0x1400f7100]
lea r8, [rsp + 0x7c0]
call fcn.14008c335
cmp qword [rsp + 0xb0], 0
jne 0x14000acd3
mov r13, qword [rsp + 0x7c8]
mov rdx, qword [rsp + 0x7d0]
mov rcx, r13
call fcn.140001690
mov r8, rdx
mov qword [rsp + 0x20], 3
mov rcx, rsi
mov rdx, rax
lea r9, str._____n_f_t_
call fcn.140001b68
mov rbx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc0]
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x318]
mov rdx, rbx
lea r9, [0x140092a0b]
call fcn.140001b68
mov rcx, qword [rsp + 0x7c0]
mov rdx, r13
call fcn.1400275a6
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x7d0], rax
movups xmm0, xmmword [rsp + 0x318]
movaps xmmword [rsp + 0x7c0], xmm0
mov rcx, qword [rsp + 0xb0]
mov rdx, rbx
call fcn.1400275a6
mov r13, qword [rsp + 0x7c8]
mov rbx, qword [rsp + 0x7d0]
lea r14, [rbx + r13]
xor r15d, r15d
xor edi, edi
cmp r15, rbx
jae 0x14000a2a2
lea rax, [r15 + r13]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], r14
mov rcx, rsi
call fcn.140002228
cmp eax, 0x80
jae 0x14000a245
cmp eax, 0x22
jne 0x14000a271
inc rdi
mov ebp, 1
jmp 0x14000a29a
cmp eax, 0x10000
mov ebp, 4
sbb rbp, 0
cmp eax, 0x800
cmovb rbp, r12
test rdi, rdi
je 0x14000a298
mov rdx, r15
sub rdx, rdi
add rdx, r13
mov ecx, eax
mov r8, rbp
jmp 0x14000a28c
test rdi, rdi
je 0x14000a293
mov rdx, r15
sub rdx, rdi
add rdx, r13
mov ebp, 1
mov r8d, 1
mov ecx, eax
call fcn.14000191a
jmp 0x14000a29a
mov ebp, 1
xor edi, edi
add r15, rbp
jmp 0x14000a20a
mov rbp, r15
sub rbp, rdi
mov rcx, r13
mov rdx, rbp
call fcn.140001063
mov rcx, r13
test al, al
je 0x14000a2e4
mov rdx, rbp
call fcn.14008b992
mov ebx, eax
test al, al
jne 0x14000a3d4
mov rcx, r13
mov rdx, rbp
call fcn.14008cbb0
test al, al
je 0x14000a3bf
jmp 0x14000a3d4
mov rdx, rbp
call fcn.140001690
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x320], rdx
lea rax, [0x140092a28]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 2
and qword [rsp + 0xd0], 0
lea rdi, [rsp + 0x318]
mov qword [rsp + 0x570], rdi
lea rax, [fcn.14002adb9]
mov qword [rsp + 0x578], rax
lea rax, [rsp + 0x570]
mov qword [rsp + 0xc0], rax
mov ebx, 1
mov qword [rsp + 0xc8], rbx
mov rcx, rsi
call fcn.14008c87a
call fcn.14008c284
and qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], rbx
and qword [rsp + 0xc0], 0
mov rcx, rdi
lea rdx, [0x1400f7100]
mov r8, rsi
call fcn.14008c335
mov rcx, qword [rsp + 0x318]
mov rdx, qword [rsp + 0x320]
call fcn.140001618
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.1400275a6
mov rcx, qword [rsp + 0x7c0]
mov rdx, r13
call fcn.1400275a6
jmp 0x14000a072
mov rsi, qword [rsp + 0x7c0]
movabs r12, 0x8000000000000000
cmp rsi, r12
je 0x14000aad5
test bl, bl
je 0x14000a40f
mov r14d, 2
cmp r15, rdi
jne 0x14000a45a
movabs rbp, 0x300000002
mov bl, 1
jmp 0x14000a67b
mov rcx, r13
mov rdx, rbp
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
call fcn.1400045dc
lea rdi, [rsp + 0xb0]
mov rcx, rdi
mov rdx, r13
mov r8, rbp
call fcn.1400277e4
lea rcx, [rsp + 0x98]
mov rdx, rdi
call fcn.140001c8d
mov rcx, rsi
mov rdx, r13
call fcn.1400275a6
jmp 0x14000aad5
mov rcx, rbp
call fcn.140032bdc
mov rdi, rax
mov r14, rdx
mov rcx, rdx
mov rdx, r13
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x20], 1
lea r9, [0x1400f2260]
lea rbx, [rsp + 0x7c0]
mov rcx, rbx
mov rdx, r13
mov r8, rbp
call fcn.14008adcb
mov r15, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
lea rbx, [rsp + 0xb0]
mov rcx, rbx
mov rdx, r15
call fcn.14008a94a
mov rbx, qword [rbx]
cmp rbx, r12
jne 0x14000a4f3
mov rbp, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x7c0]
mov rdx, r15
call fcn.1400275a6
mov rcx, rdi
mov rdx, r14
call fcn.1400275a6
mov edi, 2
mov r12, 0xffffffffffffffff
jmp 0x14000a64f
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], rdi
mov rdi, qword [rsp + 0xb8]
lea r15, [rsp + 0x318]
mov r8d, 0x250
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
mov rdx, r15
call qword [sym.imp.kernel32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x14000a5ac
mov r12, rax
lea rcx, [rsp + 0xb0]
mov rax, qword [rsp + 0x50]
mov qword [rcx], rax
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], rbp
mov byte [rcx + 0x18], 0
mov eax, dword [rsp + 0x570]
mov edx, dword [rsp + 0x573]
mov dword [rcx + 0x19], eax
mov dword [rcx + 0x1c], edx
call fcn.14008e2b4
mov rbp, rax
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x318]
mov r8d, 0x250
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rbx
mov rdx, rdi
call fcn.1400860da
mov rcx, qword [rsp + 0x7c0]
mov rdx, qword [rsp + 0x58]
call fcn.1400275a6
mov edi, 1
jmp 0x14000a64f
mov r12, rdi
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 2
mov rdi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
jne 0x14000a619
lea rcx, [rsp + 0xb0]
mov qword [rcx], rdi
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], rbp
mov byte [rcx + 0x18], 0
mov eax, dword [rsp + 0x570]
mov edx, dword [rsp + 0x573]
mov dword [rcx + 0x19], eax
mov dword [rcx + 0x1c], edx
call fcn.14008e2b4
mov rbp, rax
mov rcx, rbx
mov rdx, r12
call fcn.1400860da
mov rcx, qword [rsp + 0x7c0]
mov rdx, r15
call fcn.1400275a6
xor edi, edi
jmp 0x14000a4e7
shl rax, 0x20
or rax, 2
mov rbp, rax
mov rcx, rbx
mov rdx, r12
call fcn.1400860da
mov rcx, qword [rsp + 0x7c0]
mov rdx, r15
call fcn.1400275a6
mov rcx, rdi
mov rdx, r14
call fcn.1400275a6
mov edi, 2
mov r14d, 2
cmp edi, 2
sete bl
je 0x14000a67b
lea rcx, [rsp + 0x7c0]
lea rdx, [rsp + 0xb0]
mov r8d, 0x254
call sub.VCRUNTIME140.dll_memcpy
mov r14d, edi
mov rcx, rsi
mov rdx, r13
call fcn.1400275a6
test bl, bl
jne 0x14000aacd
lea rcx, [rsp + 0xc4]
mov qword [rsp + 0x50], rbp
mov qword [rcx - 0x14], rbp
mov qword [rcx - 0xc], r12
mov dword [rsp + 0x58], r14d
mov dword [rcx - 4], r14d
lea rdx, [rsp + 0x7c0]
mov r8d, 0x254
call sub.VCRUNTIME140.dll_memcpy
lea r14, [rsp + 0x570]
mov r15, qword [sym.imp.kernel32.dll_FindNextFileW]
lea rbp, [rsp + 0xc68]
lea rdi, [rsp + 0x318]
mov eax, dword [rsp + 0xc0]
cmp r12, 0xffffffffffffffff
je 0x14000aaa7
and dword [rsp + 0xc0], 0
mov r13, qword [rsp + 0xb0]
test eax, eax
je 0x14000a75a
mov rcx, rdi
mov rdx, r13
lea r8, [rsp + 0xc4]
call fcn.14008ad71
mov rbx, qword [rsp + 0x318]
test rbx, rbx
je 0x14000a752
mov r13, qword [rsp + 0x320]
mov r8d, 0x248
lea rbp, [rsp + 0xa20]
mov rcx, rbp
lea rdx, [rsp + 0x328]
call sub.VCRUNTIME140.dll_memcpy
test rbx, rbx
sete sil
jmp 0x14000a7c8
mov rcx, rdi
call fcn.14008adb7
mov r8d, 0x250
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, r12
mov rdx, r14
call r15
test eax, eax
je 0x14000aa6e
mov rcx, rdi
mov rdx, r13
mov r8, r14
call fcn.14008ad71
mov rbx, qword [rsp + 0x318]
test rbx, rbx
jne 0x14000a7a0
mov rcx, rdi
call fcn.14008adb7
jmp 0x14000a76a
mov r13, qword [rsp + 0x320]
mov r8d, 0x248
lea rbp, [rsp + 0xa20]
mov rcx, rbp
lea rdx, [rsp + 0x328]
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
mov r8d, 0x248
mov rcx, rdi
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 0x248
lea rbp, [rsp + 0xc68]
mov rcx, rbp
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
test sil, sil
jne 0x14000aa92
mov qword [rsp + 0x318], rbx
mov qword [rsp + 0x320], r13
mov r8d, 0x248
lea rcx, [rsp + 0x328]
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov r15, qword [rbx + 0x18]
mov r13, qword [rbx + 0x20]
mov ebx, 0x104
mov edx, 0x104
lea rcx, [rsp + 0x34c]
call fcn.140089917
test rax, rax
lea rsi, [rsp + 0xa20]
je 0x14000a85d
cmp rdx, 0x105
jae 0x14000acd3
mov rbx, rdx
mov rcx, r14
lea rdx, [rsp + 0x34c]
mov r8, rbx
call fcn.140085828
mov rbx, qword [rsp + 0x578]
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, r15
mov r8, r13
mov r9, rbx
call fcn.14008adcb
mov rcx, qword [rsp + 0x570]
mov rdx, rbx
call fcn.1400275a6
mov r13, qword [rsp + 0xa28]
mov rbp, qword [rsp + 0xa30]
mov rcx, r13
mov rdx, rbp
call fcn.14008cbb0
test al, al
lea rsi, [rsp + 0x70]
je 0x14000aa40
mov rcx, r14
mov rdx, r13
mov r8, rbp
call fcn.14002a8ec
cmp qword [rsp + 0x570], 0
jne 0x14000acd3
mov rcx, qword [rsp + 0x578]
mov rdx, qword [rsp + 0x580]
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
call fcn.1400045dc
mov rcx, r14
mov rdx, r13
mov r8, rbp
xor r9d, r9d
call fcn.14008572c
cmp qword [rsp + 0x570], 0
je 0x14000aa02
mov rbx, qword [rsp + 0x578]
mov rcx, rbp
call fcn.140032bdc
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdx
and qword [rsp + 0x80], 0
cmp rbx, rbp
ja 0x14000acd3
lea r8, [rbx + r13]
mov rcx, rsi
mov rdx, r13
call fcn.140027366
mov rcx, rsi
lea rdx, str.api_ms_win_core_synch_l1_2_0
lea r8, [0x1400f21db]
call fcn.140027366
mov r15, rbx
add r15, 3
mov rcx, r14
mov rdx, r13
mov r8, rbp
mov r9, r15
call fcn.14008572c
cmp qword [rsp + 0x570], 0
je 0x14000a9c7
mov rbx, qword [rsp + 0x578]
cmp r15, rbx
ja 0x14000acd3
cmp rbx, rbp
ja 0x14000acd3
add r15, r13
lea r8, [rbx + r13]
mov rcx, rsi
mov rdx, r15
jmp 0x14000a960
cmp r15, rbp
ja 0x14000acd3
add r15, r13
add rbp, r13
mov rcx, rsi
mov rdx, r15
mov r8, rbp
call fcn.140027366
mov r15, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x80]
movabs rbx, 0x8000000000000000
jmp 0x14000aa12
mov rsi, r13
movabs rbx, 0x8000000000000000
mov r15, rbx
mov rcx, r14
mov rdx, rsi
mov r8, rbp
call fcn.140001c46
lea rcx, [rsp + 0x98]
mov rdx, r14
call fcn.140001c8d
cmp r15, rbx
je 0x14000aa40
mov rcx, r15
mov rdx, rsi
call fcn.1400275a6
mov rcx, qword [rsp + 0xa20]
mov rdx, r13
call fcn.1400275a6
mov rcx, rdi
call fcn.1400015ea
xor eax, eax
mov r15, qword [sym.imp.kernel32.dll_FindNextFileW]
lea rbp, [rsp + 0xc68]
jmp 0x14000a6e5
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x12
je 0x14000aaa7
call fcn.1400860c3
mov r13, rax
mov r8d, 0x248
mov rcx, rbp
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r13
call fcn.140001281
mov r12, qword [rsp + 0xb8]
jmp 0x14000a6de
lea rsi, [rsp + 0xb0]
mov rcx, qword [rsi + 8]
call qword [sym.imp.kernel32.dll_FindClose]
mov rcx, rsi
call fcn.1400015ea
cmp dword [rsp + 0x58], 2
mov rbp, qword [rsp + 0x50]
jne 0x14000aad5
mov rcx, rbp
call fcn.140001281
lea rcx, [rsp + 0xb0]
and dword [rcx], 0
xorps xmm0, xmm0
movups xmmword [rcx + 8], xmm0
mov dword [rcx + 0x18], 7
and word [rcx + 0x24], 0
and qword [rcx + 0x1c], 0
mov al, 1
mov byte [rcx + 0x24], al
mov byte [rcx + 0x22], al
lea rdx, [0x14009316b]
mov r8d, 7
call fcn.140001021
test rax, rax
jne 0x14000acd3
mov rsi, rdx
mov r12, qword [rsp + 0xa0]
imul r13, qword [rsp + 0xa8], 0x18
lea rbp, str._:
lea rdi, [rsp + 0x318]
lea r14, [rsp + 0xb0]
test r13, r13
je 0x14000ac0d
mov qword [rsp + 0x570], r12
add r12, 0x18
mov qword [rsp + 0xb0], rbp
mov qword [rsp + 0xb8], 2
and qword [rsp + 0xd0], 0
lea rax, [rsp + 0x570]
mov qword [rsp + 0x7c0], rax
lea rax, case.0x140070163.47
mov qword [rsp + 0x7c8], rax
lea rax, [rsp + 0x7c0]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 1
mov rcx, rdi
mov rdx, r14
call fcn.140001b21
mov rbx, qword [rsp + 0x318]
mov r15, qword [rsp + 0x320]
mov r9, qword [rsp + 0x328]
mov rcx, r14
mov rdx, rsi
mov r8, r15
call fcn.14008658d
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.140001618
mov rcx, rbx
mov rdx, r15
call fcn.1400275a6
add r13, 0xffffffffffffffe8
jmp 0x14000ab46
lea rax, str.r1_t_
lea rdi, [rsp + 0xb0]
mov qword [rdi], rax
mov ebx, 1
mov qword [rdi + 8], rbx
lea rax, [0x1400f1870]
mov qword [rdi + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rdi + 0x18], xmm0
mov rcx, rdi
call fcn.14008c87a
call fcn.14008c284
and qword [rdi], 0
mov qword [rdi + 8], rbx
and qword [rdi + 0x10], 0
lea rdx, [0x1400f7100]
lea rdi, [rsp + 0x318]
lea r8, [rsp + 0xb0]
mov rcx, rdi
call fcn.14008c335
xor eax, eax
cmp qword [rdi], rax
jne 0x14000acd3
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.1400275a6
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x40]
call fcn.1400275a6
lea rcx, [rsp + 0x98]
call fcn.140035cae
movaps xmm6, xmmword [rsp + 0xeb0]
add rsp, 0xec8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2