Function at 0x14002b330
Capabilities:
Check if file exists
Get common file path

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x398]
sub rsp, 0x480
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x140131088]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov rsi, rcx
mov qword [rsp + 0x48], rcx
xor edi, edi
mov dword [rsp + 0x38], edi
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rcx + 0x10], rdi
cmp qword [rcx + 0x18], 0x10
jb 0x14002b38d
mov rax, qword [rcx]
jmp 0x14002b390
mov rax, rsi
mov byte [rax], dil
mov dword [rsp + 0x38], 1
call fcn.14002c530
test al, al
je 0x14002b937
lea rcx, [rbp - 0x30]
call fcn.14002a630
nop
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [0x1400ee308]
lea rcx, [rbp - 0x30]
call fcn.14002dd30
lea r8, [0x1400ee304]
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x30]
call fcn.140047210
nop
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x14002b61b
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], 0
xor r8d, r8d
lea rdx, [0x1400ea320]
lea rcx, [rbp - 0x70]
call fcn.140009260
nop
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x50], 0
mov r8d, 7
lea rdx, str.logpath
lea rcx, [rbp - 0x50]
call fcn.140009260
nop
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x60], rdi
mov byte [rsp + 0x50], 0
mov r8d, 4
lea rdx, str.base
lea rcx, [rsp + 0x50]
call fcn.140009260
nop
mov rax, qword [rbx]
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x50]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [rax]
mov rdx, rax
mov rcx, rsi
call fcn.140011de0
mov rax, qword [rbp - 0x78]
cmp rax, 0x10
jb 0x14002b4e3
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, 0x1000
jb 0x14002b4de
test cl, 0x1f
je 0x14002b4b1
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002b4c0
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002b4cf
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002b4db
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], rdi
mov byte [rsp + 0x70], 0
mov rax, qword [rsp + 0x68]
cmp rax, 0x10
jb 0x14002b54c
inc rax
mov rcx, qword [rsp + 0x50]
cmp rax, 0x1000
jb 0x14002b547
test cl, 0x1f
je 0x14002b51a
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002b529
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002b538
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002b544
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x60], rdi
mov byte [rsp + 0x50], 0
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
jb 0x14002b5b5
inc rax
mov rcx, qword [rbp - 0x50]
cmp rax, 0x1000
jb 0x14002b5b0
test cl, 0x1f
je 0x14002b583
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002b592
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002b5a1
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002b5ad
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x50], 0
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x14002b61b
inc rax
mov rcx, qword [rbp - 0x70]
cmp rax, 0x1000
jb 0x14002b616
test cl, 0x1f
je 0x14002b5e9
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002b5f8
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002b607
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002b613
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
cmp qword [rsi + 0x10], 0
jne 0x14002b901
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x160]
call fcn.1400a1560
call fcn.14004f770
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
test al, al
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
lea edx, [rcx + 0x23]
jne 0x14002b65d
lea edx, [rcx + 0x1a]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x14002b901
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rdi
mov word [rsp + 0x50], di
cmp word [rbp + 0x160], ax
jne 0x14002b68c
mov r8, rdi
jmp 0x14002b6ab
lea rax, [rbp + 0x160]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002b6a0
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x50]
call fcn.140008a20
nop
test byte [section..custom], 1
je 0x14002b854
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], rdi
mov byte [rsp + 0x70], 0
lea rdx, [0x140148008]
cmp byte [0x140148008], 0
jne 0x14002b6f0
mov r8, rdi
jmp 0x14002b6fe
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14002b6f4
lea rcx, [rsp + 0x70]
call fcn.140009260
nop
mov r9d, 6
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x70]
call fcn.1400235b0
nop
mov r8, rax
lea rdx, str.OraySunloginClientLite_Custom_
lea rcx, [rbp + 0x140]
call fcn.140017620
nop
lea r8, [0x1400ee36c]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140017680
nop
lea rcx, [rbp + 0x140]
call fcn.140009040
nop
lea rcx, [rbp - 0x10]
call fcn.140009040
nop
lea rcx, [rsp + 0x70]
call fcn.140009040
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140085920
nop
cmp qword [rax + 0x18], 8
jb 0x14002b78f
mov rax, qword [rax]
cmp word [rax], 0
jne 0x14002b79a
mov r8, rdi
jmp 0x14002b7ab
or r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14002b7a0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14002dd30
nop
mov r8, qword [rbp - 0x38]
cmp r8, 8
jb 0x14002b7d3
inc r8
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.140008b70
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.14002dc90
nop
mov rdx, qword [rax]
lea rcx, [rbp - 0x50]
call fcn.140085880
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002b805
mov rax, qword [rax]
cmp byte [rax], 0
jne 0x14002b80f
mov r8, rdi
jmp 0x14002b81d
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14002b813
mov rdx, rax
mov rcx, rsi
call fcn.140009260
nop
lea rcx, [rbp - 0x50]
call fcn.140009040
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002b846
call fcn.1400a24a4
nop
lea rcx, [rbp - 0x70]
call fcn.140009040
jmp 0x14002b8e3
mov r8d, 0x1c
lea rdx, str.OraySunloginClientLitelog
lea rcx, [rsp + 0x50]
call fcn.14002dd30
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.14002dc90
nop
mov rdx, qword [rax]
lea rcx, [rbp - 0x10]
call fcn.140085880
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002b89d
mov rax, qword [rax]
cmp byte [rax], 0
jne 0x14002b8a7
mov r8, rdi
jmp 0x14002b8ba
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14002b8b0
mov rdx, rax
mov rcx, rsi
call fcn.140009260
nop
lea rcx, [rbp - 0x10]
call fcn.140009040
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002b8e3
call fcn.1400a24a4
nop
mov r8, qword [rsp + 0x68]
cmp r8, 8
jb 0x14002b901
inc r8
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140008b70
nop
test rbx, rbx
je 0x14002b91c
mov rax, qword [rbx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rbx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov r8, qword [rbp - 0x18]
cmp r8, 8
jb 0x14002bf83
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
jmp 0x14002bf7b
mov eax, dword [section..custom]
test al, 1
je 0x14002bd31
shr eax, 1
test al, 1
je 0x14002bd31
lea rcx, [rbp - 0x50]
call fcn.14002a630
nop
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [0x1400ee308]
lea rcx, [rbp - 0x50]
call fcn.14002dd30
lea r8, [0x1400ee304]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140047210
nop
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x14002ba58
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], 0
xor r8d, r8d
lea rdx, [0x1400ea320]
lea rcx, [rbp - 0x70]
call fcn.140009260
nop
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], rdi
mov byte [rsp + 0x70], 0
mov r8d, 7
lea rdx, str.logpath
lea rcx, [rsp + 0x70]
call fcn.140009260
nop
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x30], 0
mov r8d, 4
lea rdx, str.base
lea rcx, [rbp - 0x30]
call fcn.140009260
nop
mov rax, qword [rbx]
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [rax]
mov rdx, rax
mov rcx, rsi
call fcn.140011de0
lea rcx, [rbp - 0x10]
call fcn.140009040
nop
lea rcx, [rbp - 0x30]
call fcn.140009040
nop
lea rcx, [rsp + 0x70]
call fcn.140009040
nop
lea rcx, [rbp - 0x70]
call fcn.140009040
cmp qword [rsi + 0x10], 0
jne 0x14002bd11
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x160]
call fcn.1400a1560
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x23]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x14002bd11
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rdi
mov word [rsp + 0x50], di
cmp word [rbp + 0x160], ax
jne 0x14002babe
mov r8, rdi
jmp 0x14002badb
lea rax, [rbp + 0x160]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14002bad0
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x50]
call fcn.140008a20
nop
mov r8d, 6
lea rdx, str.Oray_
lea rcx, [rsp + 0x50]
call fcn.14002dd30
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.SUNLOGIN_PRODUCT_NAME
lea rcx, [rbp - 0x30]
call fcn.140009260
nop
lea rcx, [rbp - 0x30]
call fcn.140025db0
cmp qword [rax + 0x18], 0x10
jb 0x14002bb3e
mov rax, qword [rax]
lea rcx, [rbp + 0x38]
mov qword [rbp + 0x30], rcx
mov r8d, 3
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14002f170
nop
mov rdx, qword [rbp + 0x30]
cmp word [rdx], 0
jne 0x14002bb68
mov r8, rdi
jmp 0x14002bb7b
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002bb70
lea rcx, [rsp + 0x50]
call fcn.14002dd30
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002bb99
call fcn.1400a24a4
nop
lea rcx, [rbp - 0x30]
call fcn.140009040
mov r8d, 1
lea rdx, [0x1400ee130]
lea rcx, [rsp + 0x50]
call fcn.14002dd30
lea rcx, [rbp - 0x10]
call fcn.1400325c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002bbcd
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140085920
nop
cmp qword [rax + 0x18], 8
jb 0x14002bbe5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14002dc90
nop
mov rdx, qword [rax]
cmp word [rdx], 0
jne 0x14002bc00
mov r8, rdi
jmp 0x14002bc0f
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002bc04
lea rcx, [rsp + 0x50]
call fcn.14002dd30
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002bc2d
call fcn.1400a24a4
nop
mov r8, qword [rbp - 0x78]
cmp r8, 8
jb 0x14002bc49
inc r8
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x70]
call fcn.140008b70
mov qword [rbp - 0x78], 7
mov qword [rbp - 0x80], rdi
mov word [rsp + 0x70], di
lea rcx, [rbp - 0x10]
call fcn.140009040
mov r8d, 4
lea rdx, str.log
lea rcx, [rsp + 0x50]
call fcn.14002dd30
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.14002dc90
nop
mov rdx, qword [rax]
lea rcx, [rbp - 0x10]
call fcn.140085880
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002bcac
mov rax, qword [rax]
cmp byte [rax], 0
jne 0x14002bcb6
mov r8, rdi
jmp 0x14002bcca
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14002bcc0
mov rdx, rax
mov rcx, rsi
call fcn.140009260
nop
lea rcx, [rbp - 0x10]
call fcn.140009040
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002bcf3
call fcn.1400a24a4
nop
mov r8, qword [rsp + 0x68]
cmp r8, 8
jb 0x14002bd11
inc r8
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140008b70
nop
test rbx, rbx
je 0x14002bd2c
mov rax, qword [rbx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rbx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
jmp 0x14002bf69
lea rcx, [rbp - 0x50]
call fcn.14002a630
nop
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [0x1400ee308]
lea rcx, [rbp - 0x50]
call fcn.14002dd30
lea r8, [0x1400ee304]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140047210
nop
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x14002be3a
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], 0
xor r8d, r8d
lea rdx, [0x1400ea320]
lea rcx, [rbp - 0x70]
call fcn.140009260
nop
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], rdi
mov byte [rsp + 0x70], 0
mov r8d, 7
lea rdx, str.logpath
lea rcx, [rsp + 0x70]
call fcn.140009260
nop
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x30], 0
mov r8d, 4
lea rdx, str.base
lea rcx, [rbp - 0x30]
call fcn.140009260
nop
mov rax, qword [rbx]
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [rax]
mov rdx, rax
mov rcx, rsi
call fcn.140011de0
lea rcx, [rbp - 0x10]
call fcn.140009040
nop
lea rcx, [rbp - 0x30]
call fcn.140009040
nop
lea rcx, [rsp + 0x70]
call fcn.140009040
nop
lea rcx, [rbp - 0x70]
call fcn.140009040
cmp qword [rsi + 0x10], 0
jne 0x14002bf4e
lea rcx, [rbp - 0x30]
call fcn.14002c2b0
nop
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rdi
mov word [rsp + 0x50], di
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x50]
call fcn.140008be0
nop
mov r8d, 4
lea rdx, str.log
lea rcx, [rsp + 0x50]
call fcn.14002dd30
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.14002dc90
nop
mov rdx, qword [rax]
lea rcx, [rbp - 0x10]
call fcn.140085880
nop
cmp qword [rax + 0x18], 0x10
jb 0x14002bec1
mov rax, qword [rax]
cmp byte [rax], 0
jne 0x14002becb
mov r8, rdi
jmp 0x14002beda
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14002bed0
mov rdx, rax
mov rcx, rsi
call fcn.140009260
nop
lea rcx, [rbp - 0x10]
call fcn.140009040
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002bf03
call fcn.1400a24a4
nop
mov r8, qword [rsp + 0x68]
cmp r8, 8
jb 0x14002bf20
inc r8
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140008b70
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rdi
mov word [rsp + 0x50], di
mov r8, qword [rbp - 0x18]
cmp r8, 8
jb 0x14002bf4e
inc r8
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140008b70
nop
test rbx, rbx
je 0x14002bf69
mov rax, qword [rbx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rbx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov r8, qword [rbp - 0x38]
cmp r8, 8
jb 0x14002bf83
lea rcx, [rbp - 0x50]
mov rdx, qword [rbp - 0x50]
inc r8
call fcn.140008b70
cmp qword [rsi + 0x18], 0x10
jb 0x14002bf8f
mov rdx, qword [rsi]
jmp 0x14002bf92
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.140085920
mov r14, rax
cmp qword [rax + 0x18], 8
jb 0x14002bfa9
mov r14, qword [rax]
lea rax, [rbp + 0x38]
mov qword [rbp + 0x30], rax
test r14, r14
jne 0x14002bfbf
mov rdx, rdi
mov qword [rbp + 0x30], rdx
jmp 0x14002c031
or rbx, 0xffffffffffffffff
inc rbx
cmp word [r14 + rbx*2], 0
jne 0x14002bfc3
inc ebx
lea r8, [rbp + 0x38]
mov edx, ebx
lea rcx, [rbp + 0x30]
call fcn.140031460
movsxd rdx, ebx
add rdx, rdx
mov r9, rdx
mov r8, r14
mov rcx, qword [rbp + 0x30]
call fcn.1400097e0
test eax, eax
je 0x14002c02d
cmp eax, 0xc
je 0x14002c022
cmp eax, 0x16
je 0x14002c017
cmp eax, 0x22
je 0x14002c017
cmp eax, 0x50
je 0x14002c02d
mov ecx, 0x80004005
call fcn.140009900
int3
mov ecx, 0x80070057
call fcn.140009900
int3
mov ecx, 0x8007000e
call fcn.140009900
int3
mov rdx, qword [rbp + 0x30]
mov qword [rbp + 0x28], 7
mov qword [rbp + 0x20], rdi
mov word [rbp + 0x10], di
cmp word [rdx], 0
jne 0x14002c04c
mov r8, rdi
jmp 0x14002c05b
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002c050
lea rcx, [rbp + 0x10]
call fcn.140008a20
nop
lea rax, [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
cmp rcx, rax
je 0x14002c078
call fcn.1400a24a4
nop
mov r8, qword [rbp - 0x78]
cmp r8, 8
jb 0x14002c094
inc r8
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x70]
call fcn.140008b70
mov qword [rbp - 0x78], 7
mov qword [rbp - 0x80], rdi
mov word [rsp + 0x70], di
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rcx, qword [rbp + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14002c120
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rdx, qword [rbp + 0x10]
mov qword [rbp - 0x58], 7
mov qword [rbp - 0x60], rdi
mov word [rbp - 0x70], di
cmp word [rdx], ax
je 0x14002c0ee
or rdi, 0xffffffffffffffff
inc rdi
cmp word [rdx + rdi*2], 0
jne 0x14002c0e4
mov r8, rdi
lea rcx, [rbp - 0x70]
call fcn.140008a20
nop
lea rcx, [rbp - 0x70]
call fcn.14002a430
nop
mov r8, qword [rbp - 0x58]
cmp r8, 8
jb 0x14002c120
inc r8
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x70]
call fcn.140008b70
nop
mov r8, qword [rbp + 0x28]
cmp r8, 8
jb 0x14002c13a
inc r8
mov rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x10]
call fcn.140008b70
mov rax, rsi
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.14009d860
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret