Function at 0x1400254a0
Capabilities:
Enumerate files on windows
Get disk information
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x518
mov qword [rsp + 0x268], r8
mov qword [rsp + 0x68], rdx
mov dword [rsp + 0x2c], ecx
mov qword [rsp + 0x108], r9
mov eax, dword [0x140285210]
cmp eax, dword [rsp + 0x2c]
jge 0x140025563
xor edi, edi
lea r14, [rsp + 0x2a2]
mov r15, qword [sym.imp.KERNEL32.DLL_Sleep]
lea rsi, str.stock_at_DN_check_at
lea rbx, [rsp + 0x2a0]
jmp 0x14002550e
mov eax, dword [0x140285210]
inc edi
cmp eax, dword [rsp + 0x2c]
jge 0x140025563
mov ecx, 0x3e8
call r15
cmp edi, 0x258
jb 0x140025500
mov rcx, rbx
mov rdx, rsi
mov r8, qword [rsp + 0x68]
call fcn.140013d30
test byte [rsp + 0x2a0], 1
mov rcx, r14
je 0x140025543
mov rcx, qword [rsp + 0x2b0]
mov dl, 1
call fcn.140012160
test byte [rsp + 0x2a0], 1
je 0x140025500
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
jmp 0x140025500
mov eax, dword [0x140285210]
cmp eax, dword [rsp + 0x2c]
jne 0x140026e3c
movabs r13, 0x7fffffffffffffef
movabs rdi, 0x1fffffffffffffff
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], 0
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
movaps xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], 0
xor ebp, ebp
lea rbx, [rsp + 0x30]
jmp 0x14002562a
mov qword [rdx], rsi
add rdx, 8
mov qword [rsp + 0xb8], rdx
inc ebp
cmp ebp, 7
je 0x140025dd4
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [rsp + 0x2a8]
cmp rax, qword [rsp + 0x2b0]
jae 0x1400256b0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140025699
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0x2a8], rax
jmp 0x140025730
lea rcx, [rsp + 0x2a0]
mov rdx, rbx
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x140025730
mov rax, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [rsi]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp rsi, rbx
je 0x140025730
nop word cs:[rax + rax]
mov r14, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
call fcn.1401f47c0
mov qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, r14
cmp r14, rbx
jne 0x140025700
nop word cs:[rax + rax]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [rsp + 0x58]
cmp rax, qword [rsp + 0x60]
jae 0x1400257b0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140025799
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0x58], rax
jmp 0x140025820
lea rcx, [rsp + 0x50]
mov rdx, rbx
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x140025820
mov rax, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [rsi]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp rsi, rbx
je 0x140025820
nop
mov r14, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
call fcn.1401f47c0
mov qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, r14
cmp r14, rbx
jne 0x1400257f0
nop word cs:[rax + rax]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [rsp + 0x78]
cmp rax, qword [rsp + 0x80]
jae 0x1400258a0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14002588c
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0x78], rax
jmp 0x140025910
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x140025910
mov rax, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [rsi]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp rsi, rbx
je 0x140025910
nop
mov r14, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
call fcn.1401f47c0
mov qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, r14
cmp r14, rbx
jne 0x1400258e0
nop word cs:[rax + rax]
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
cmp rdx, rax
jae 0x140025950
mov qword [rdx], rsi
add rdx, 8
mov qword [rsp + 0x138], rdx
jmp 0x140025aab
mov rcx, qword [rsp + 0x130]
mov r14, rdx
sub r14, rcx
mov r12, r14
sar r12, 3
lea r8, [r12 + 1]
cmp r8, rdi
ja 0x14002940e
sub rax, rcx
lea r9, [r13 + 9]
mov r15, rax
shr r15, 2
cmp r15, r8
cmovbe r15, r8
cmp rax, r9
cmovae r15, rdi
test r15, r15
je 0x1400259bc
cmp r15, rdi
ja 0x140029420
lea rcx, [r15*8]
call fcn.14006fb50
mov rcx, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x138]
jmp 0x1400259be
xor eax, eax
lea r8, [rax + r12*8]
mov qword [rax + r12*8], rsi
mov r10, rdx
sub r10, rcx
je 0x140025a7d
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x1400259e4
mov r9, rdx
jmp 0x140025a60
add r14, rax
mov r9, rdx
sub r9, r14
cmp r9, 0x20
jae 0x1400259f8
mov r9, rdx
jmp 0x140025a60
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea rsi, [r11*8]
sub r8, rsi
mov r9, rdx
sub r9, rsi
lea rsi, [rax + r12*8]
add rsi, 0xfffffffffffffff0
mov r14, r11
neg r14
xor r13d, r13d
nop dword [rax + rax]
movups xmm0, xmmword [rdx + r13*8 - 0x20]
movups xmm1, xmmword [rdx + r13*8 - 0x10]
movups xmmword [rsi + r13*8], xmm1
movups xmmword [rsi + r13*8 - 0x10], xmm0
add r13, 0xfffffffffffffffc
cmp r14, r13
jne 0x140025a30
cmp r10, r11
movabs r13, 0x7fffffffffffffef
je 0x140025a75
nop
mov rdx, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [r8 - 8], rdx
add r8, 0xfffffffffffffff8
cmp r9, rcx
jne 0x140025a60
mov rcx, qword [rsp + 0x130]
lea rdx, [rax + r15*8]
lea rax, [rax + r12*8]
add rax, 8
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rdx
test rcx, rcx
je 0x140025aab
call fcn.14006fbd0
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [rsp + 0x98]
mov rax, qword [rsp + 0xa0]
cmp rdx, rax
jae 0x140025af0
mov qword [rdx], rsi
add rdx, 8
mov qword [rsp + 0x98], rdx
jmp 0x140025c4b
mov rcx, qword [rsp + 0x90]
mov r12, rdx
sub r12, rcx
mov r14, r12
sar r14, 3
lea r8, [r14 + 1]
cmp r8, rdi
ja 0x1400293f4
sub rax, rcx
lea r9, [r13 + 9]
mov r15, rax
shr r15, 2
cmp r15, r8
cmovbe r15, r8
cmp rax, r9
cmovae r15, rdi
test r15, r15
je 0x140025b5b
cmp r15, rdi
ja 0x140029425
lea rcx, [r15*8]
call fcn.14006fb50
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
jmp 0x140025b5d
xor eax, eax
lea r8, [rax + r14*8]
mov qword [rax + r14*8], rsi
mov r10, rdx
sub r10, rcx
je 0x140025c1d
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x140025b83
mov r9, rdx
jmp 0x140025c00
add r12, rax
mov r9, rdx
sub r9, r12
cmp r9, 0x20
jae 0x140025b97
mov r9, rdx
jmp 0x140025c00
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea rsi, [r11*8]
sub r8, rsi
mov r9, rdx
sub r9, rsi
lea rsi, [rax + r14*8]
add rsi, 0xfffffffffffffff0
mov r12, r11
neg r12
xor r13d, r13d
nop word [rax + rax]
movups xmm0, xmmword [rdx + r13*8 - 0x20]
movups xmm1, xmmword [rdx + r13*8 - 0x10]
movups xmmword [rsi + r13*8], xmm1
movups xmmword [rsi + r13*8 - 0x10], xmm0
add r13, 0xfffffffffffffffc
cmp r12, r13
jne 0x140025bd0
cmp r10, r11
movabs r13, 0x7fffffffffffffef
je 0x140025c15
nop
mov rdx, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [r8 - 8], rdx
add r8, 0xfffffffffffffff8
cmp r9, rcx
jne 0x140025c00
mov rcx, qword [rsp + 0x90]
lea rdx, [rax + r15*8]
lea rax, [rax + r14*8]
add rax, 8
mov qword [rsp + 0x90], r8
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rdx
test rcx, rcx
je 0x140025c4b
call fcn.14006fbd0
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xc0]
cmp rdx, rax
jb 0x140025610
mov rcx, qword [rsp + 0xb0]
mov r12, rdx
sub r12, rcx
mov r14, r12
sar r14, 3
lea r8, [r14 + 1]
cmp r8, rdi
ja 0x140029401
sub rax, rcx
lea r9, [r13 + 9]
mov r15, rax
shr r15, 2
cmp r15, r8
cmovbe r15, r8
cmp rax, r9
cmovae r15, rdi
test r15, r15
je 0x140025ce3
cmp r15, rdi
ja 0x14002941b
lea rcx, [r15*8]
call fcn.14006fb50
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
jmp 0x140025ce5
xor eax, eax
lea r8, [rax + r14*8]
mov qword [rax + r14*8], rsi
mov r10, rdx
sub r10, rcx
je 0x140025d9d
add r10, 0xfffffffffffffff8
cmp r10, 0x98
jae 0x140025d0b
mov r9, rdx
jmp 0x140025d80
add r12, rax
mov r9, rdx
sub r9, r12
cmp r9, 0x20
jae 0x140025d1f
mov r9, rdx
jmp 0x140025d80
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea rsi, [r11*8]
sub r8, rsi
mov r9, rdx
sub r9, rsi
lea rsi, [rax + r14*8]
add rsi, 0xfffffffffffffff0
mov r12, r11
neg r12
xor r13d, r13d
nop
movups xmm0, xmmword [rdx + r13*8 - 0x20]
movups xmm1, xmmword [rdx + r13*8 - 0x10]
movups xmmword [rsi + r13*8], xmm1
movups xmmword [rsi + r13*8 - 0x10], xmm0
add r13, 0xfffffffffffffffc
cmp r12, r13
jne 0x140025d50
cmp r10, r11
movabs r13, 0x7fffffffffffffef
je 0x140025d95
nop
mov rdx, qword [r9 - 8]
add r9, 0xfffffffffffffff8
mov qword [r8 - 8], rdx
add r8, 0xfffffffffffffff8
cmp r9, rcx
jne 0x140025d80
mov rcx, qword [rsp + 0xb0]
lea rdx, [rax + r15*8]
lea rax, [rax + r14*8]
add rax, 8
mov qword [rsp + 0xb0], r8
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rdx
test rcx, rcx
je 0x14002561f
call fcn.14006fbd0
jmp 0x14002561f
lea rcx, [0x140285218]
call fcn.140070b30
mov rsi, qword [0x140288268]
cmp rsi, qword [0x140288270]
je 0x140025e0d
lea rdx, [rsp + 0x2a0]
mov rcx, rsi
call fcn.1400499f0
add rsi, 0x18
mov qword [0x140288268], rsi
jmp 0x140025e21
lea rcx, [0x140288260]
lea rdx, [rsp + 0x2a0]
call fcn.140049840
mov rsi, qword [0x1402882c8]
cmp rsi, qword [0x1402882d0]
je 0x140025ef6
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
mov rcx, qword [rsp + 0x138]
mov rax, qword [rsp + 0x130]
mov r14, rcx
sub r14, rax
sub rcx, rax
je 0x140025f37
js 0x140029477
call fcn.14006fb50
sar r14, 3
mov qword [rsi], rax
mov qword [rsi + 8], rax
lea rcx, [rax + r14*8]
mov qword [rsi + 0x10], rcx
mov r9, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x138]
cmp r9, rcx
je 0x140025f0c
mov r10, rcx
sub r10, r9
add r10, 0xfffffffffffffff8
cmp r10, 0x38
jb 0x140025f11
mov rdx, rax
sub rdx, r9
cmp rdx, 0x20
jb 0x140025f11
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea r8, [r9 + r11*8]
lea rdx, [rax + r11*8]
xor r14d, r14d
nop word [rax + rax]
movups xmm0, xmmword [r9 + r14*8]
movups xmm1, xmmword [r9 + r14*8 + 0x10]
movups xmmword [rax + r14*8], xmm0
movups xmmword [rax + r14*8 + 0x10], xmm1
add r14, 4
cmp r11, r14
jne 0x140025ed0
cmp r10, r11
jne 0x140025f20
jmp 0x140025f33
lea rcx, [0x1402882c0]
lea rdx, [rsp + 0x130]
call fcn.140049d90
jmp 0x140025f42
mov rdx, rax
jmp 0x140025f33
mov r8, r9
mov rdx, rax
nop word [rax + rax]
mov rax, qword [r8]
mov qword [rdx], rax
add r8, 8
add rdx, 8
cmp r8, rcx
jne 0x140025f20
mov qword [rsi + 8], rdx
add rsi, 0x18
mov qword [0x1402882c8], rsi
mov rsi, qword [0x1402882e0]
cmp rsi, qword [0x1402882e8]
je 0x140026016
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
mov rcx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x90]
mov r14, rcx
sub r14, rax
sub rcx, rax
je 0x140026057
js 0x14002947f
call fcn.14006fb50
sar r14, 3
mov qword [rsi], rax
mov qword [rsi + 8], rax
lea rcx, [rax + r14*8]
mov qword [rsi + 0x10], rcx
mov r9, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
cmp r9, rcx
je 0x14002602c
mov r10, rcx
sub r10, r9
add r10, 0xfffffffffffffff8
cmp r10, 0x38
jb 0x140026031
mov rdx, rax
sub rdx, r9
cmp rdx, 0x20
jb 0x140026031
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea r8, [r9 + r11*8]
lea rdx, [rax + r11*8]
xor r14d, r14d
nop dword [rax + rax]
movups xmm0, xmmword [r9 + r14*8]
movups xmm1, xmmword [r9 + r14*8 + 0x10]
movups xmmword [rax + r14*8], xmm0
movups xmmword [rax + r14*8 + 0x10], xmm1
add r14, 4
cmp r11, r14
jne 0x140025ff0
cmp r10, r11
jne 0x140026040
jmp 0x140026053
lea rcx, [0x1402882d8]
lea rdx, [rsp + 0x90]
call fcn.140049d90
jmp 0x140026062
mov rdx, rax
jmp 0x140026053
mov r8, r9
mov rdx, rax
nop word [rax + rax]
mov rax, qword [r8]
mov qword [rdx], rax
add r8, 8
add rdx, 8
cmp r8, rcx
jne 0x140026040
mov qword [rsi + 8], rdx
add rsi, 0x18
mov qword [0x1402882e0], rsi
mov rsi, qword [0x1402882f8]
cmp rsi, qword [0x140288300]
je 0x140026136
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xb0]
mov r14, rcx
sub r14, rax
sub rcx, rax
je 0x140026177
js 0x140029487
call fcn.14006fb50
sar r14, 3
mov qword [rsi], rax
mov qword [rsi + 8], rax
lea rcx, [rax + r14*8]
mov qword [rsi + 0x10], rcx
mov r9, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
cmp r9, rcx
je 0x14002614c
mov r10, rcx
sub r10, r9
add r10, 0xfffffffffffffff8
cmp r10, 0x38
jb 0x140026151
mov rdx, rax
sub rdx, r9
cmp rdx, 0x20
jb 0x140026151
shr r10, 3
inc r10
mov r11, r10
and r11, 0xfffffffffffffffc
lea r8, [r9 + r11*8]
lea rdx, [rax + r11*8]
xor r14d, r14d
nop dword [rax + rax]
movups xmm0, xmmword [r9 + r14*8]
movups xmm1, xmmword [r9 + r14*8 + 0x10]
movups xmmword [rax + r14*8], xmm0
movups xmmword [rax + r14*8 + 0x10], xmm1
add r14, 4
cmp r11, r14
jne 0x140026110
cmp r10, r11
jne 0x140026160
jmp 0x140026173
lea rcx, [0x1402882f0]
lea rdx, [rsp + 0xb0]
call fcn.140049d90
jmp 0x140026182
mov rdx, rax
jmp 0x140026173
mov r8, r9
mov rdx, rax
nop word [rax + rax]
mov rax, qword [r8]
mov qword [rdx], rax
add r8, 8
add rdx, 8
cmp r8, rcx
jne 0x140026160
mov qword [rsi + 8], rdx
add rsi, 0x18
mov qword [0x1402882f8], rsi
mov rsi, qword [0x140288298]
cmp rsi, qword [0x1402882a0]
je 0x1400261ac
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.1400499f0
add rsi, 0x18
mov qword [0x140288298], rsi
jmp 0x1400261bd
lea rcx, [0x140288290]
lea rdx, [rsp + 0x50]
call fcn.140049840
mov rsi, qword [0x1402882b0]
cmp rsi, qword [0x1402882b8]
je 0x1400261e7
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400499f0
add rsi, 0x18
mov qword [0x1402882b0], rsi
jmp 0x1400261f8
lea rcx, [0x1402882a8]
lea rdx, [rsp + 0x70]
call fcn.140049840
cmp byte [0x140288a94], 0
jne 0x140026982
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [0x140288410]
cmp rax, qword [0x140288418]
jae 0x14002627f
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140026272
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [0x140288410], rax
jmp 0x1400262f5
lea rcx, [0x140288408]
lea rsi, [rsp + 0x30]
mov rdx, rsi
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x1400262f5
mov rax, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [r14]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp r14, rsi
je 0x1400262f5
nop word cs:[rax + rax]
mov r15, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
call fcn.1401f47c0
mov qword [r14 + 0x10], 0
mov rcx, r14
call fcn.14006fbd0
mov r14, r15
cmp r15, rsi
jne 0x1400262d0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [0x140288410]
cmp rax, qword [0x140288418]
jae 0x14002636f
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140026362
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [0x140288410], rax
jmp 0x1400263e5
lea rcx, [0x140288408]
lea rsi, [rsp + 0x30]
mov rdx, rsi
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x1400263e5
mov rax, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [r14]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp r14, rsi
je 0x1400263e5
nop word cs:[rax + rax]
mov r15, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
call fcn.1401f47c0
mov qword [r14 + 0x10], 0
mov rcx, r14
call fcn.14006fbd0
mov r14, r15
cmp r15, rsi
jne 0x1400263c0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [0x140288410]
cmp rax, qword [0x140288418]
jae 0x14002645f
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140026452
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [0x140288410], rax
jmp 0x1400264d5
lea rcx, [0x140288408]
lea rsi, [rsp + 0x30]
mov rdx, rsi
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x1400264d5
mov rax, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [r14]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp r14, rsi
je 0x1400264d5
nop word cs:[rax + rax]
mov r15, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
call fcn.1401f47c0
mov qword [r14 + 0x10], 0
mov rcx, r14
call fcn.14006fbd0
mov r14, r15
cmp r15, rsi
jne 0x1400264b0
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [0x1402884a0]
mov rax, qword [0x1402884a8]
cmp rdx, rax
jae 0x14002650f
mov qword [rdx], rsi
add rdx, 8
mov qword [0x1402884a0], rdx
jmp 0x14002665b
mov rcx, qword [0x140288498]
mov r15, rdx
sub r15, rcx
mov r14, r15
sar r14, 3
lea r8, [r14 + 1]
cmp r8, rdi
ja 0x1400294ba
sub rax, rcx
lea r9, [r13 + 9]
mov r12, rax
shr r12, 2
cmp r12, r8
cmovbe r12, r8
cmp rax, r9
cmovae r12, rdi
test r12, r12
je 0x140026577
cmp r12, rdi
ja 0x1400294de
lea rcx, [r12*8]
call fcn.14006fb50
mov rdx, qword [0x1402884a0]
mov rcx, qword [0x140288498]
jmp 0x140026579
xor eax, eax
lea r9, [rax + r14*8]
lea r8, [rax + r12*8]
mov qword [rax + r14*8], rsi
lea r10, [rax + r14*8]
add r10, 8
mov rsi, rdx
sub rsi, rcx
je 0x14002663c
add rsi, 0xfffffffffffffff8
cmp rsi, 0x98
jae 0x1400265ab
mov r11, rdx
jmp 0x140026620
add r15, rax
mov r11, rdx
sub r11, r15
cmp r11, 0x20
jae 0x1400265bf
mov r11, rdx
jmp 0x140026620
shr rsi, 3
inc rsi
mov r15, rsi
and r15, 0xfffffffffffffffc
lea r12, [r15*8]
sub r9, r12
mov r11, rdx
sub r11, r12
lea rax, [rax + r14*8]
add rax, 0xfffffffffffffff0
mov r14, r15
neg r14
xor r12d, r12d
nop
movups xmm0, xmmword [rdx + r12*8 - 0x20]
movups xmm1, xmmword [rdx + r12*8 - 0x10]
movups xmmword [rax + r12*8], xmm1
movups xmmword [rax + r12*8 - 0x10], xmm0
add r12, 0xfffffffffffffffc
cmp r14, r12
jne 0x1400265f0
cmp rsi, r15
je 0x140026635
nop word cs:[rax + rax]
mov rax, qword [r11 - 8]
add r11, 0xfffffffffffffff8
mov qword [r9 - 8], rax
add r9, 0xfffffffffffffff8
cmp r11, rcx
jne 0x140026620
mov rcx, qword [0x140288498]
mov qword [0x140288498], r9
mov qword [0x1402884a0], r10
mov qword [0x1402884a8], r8
test rcx, rcx
je 0x14002665b
call fcn.14006fbd0
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [0x1402884a0]
mov rax, qword [0x1402884a8]
cmp rdx, rax
jae 0x140026695
mov qword [rdx], rsi
add rdx, 8
mov qword [0x1402884a0], rdx
jmp 0x1400267eb
mov rcx, qword [0x140288498]
mov r15, rdx
sub r15, rcx
mov r14, r15
sar r14, 3
lea r8, [r14 + 1]
cmp r8, rdi
ja 0x1400294c6
sub rax, rcx
lea r9, [r13 + 9]
mov r12, rax
shr r12, 2
cmp r12, r8
cmovbe r12, r8
cmp rax, r9
cmovae r12, rdi
test r12, r12
je 0x1400266fd
cmp r12, rdi
ja 0x1400294e3
lea rcx, [r12*8]
call fcn.14006fb50
mov rdx, qword [0x1402884a0]
mov rcx, qword [0x140288498]
jmp 0x1400266ff
xor eax, eax
lea r9, [rax + r14*8]
lea r8, [rax + r12*8]
mov qword [rax + r14*8], rsi
lea r10, [rax + r14*8]
add r10, 8
mov rsi, rdx
sub rsi, rcx
je 0x1400267cc
add rsi, 0xfffffffffffffff8
cmp rsi, 0x98
jae 0x140026731
mov r11, rdx
jmp 0x1400267b0
add r15, rax
mov r11, rdx
sub r11, r15
cmp r11, 0x20
jae 0x140026745
mov r11, rdx
jmp 0x1400267b0
shr rsi, 3
inc rsi
mov r15, rsi
and r15, 0xfffffffffffffffc
lea r12, [r15*8]
sub r9, r12
mov r11, rdx
sub r11, r12
lea rax, [rax + r14*8]
add rax, 0xfffffffffffffff0
mov r14, r15
neg r14
xor r12d, r12d
nop word cs:[rax + rax]
movups xmm0, xmmword [rdx + r12*8 - 0x20]
movups xmm1, xmmword [rdx + r12*8 - 0x10]
movups xmmword [rax + r12*8], xmm1
movups xmmword [rax + r12*8 - 0x10], xmm0
add r12, 0xfffffffffffffffc
cmp r14, r12
jne 0x140026780
cmp rsi, r15
je 0x1400267c5
nop word cs:[rax + rax]
mov rax, qword [r11 - 8]
add r11, 0xfffffffffffffff8
mov qword [r9 - 8], rax
add r9, 0xfffffffffffffff8
cmp r11, rcx
jne 0x1400267b0
mov rcx, qword [0x140288498]
mov qword [0x140288498], r9
mov qword [0x1402884a0], r10
mov qword [0x1402884a8], r8
test rcx, rcx
je 0x1400267eb
call fcn.14006fbd0
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [0x1402884a0]
mov rax, qword [0x1402884a8]
cmp rdx, rax
jae 0x140026825
mov qword [rdx], rsi
add rdx, 8
mov qword [0x1402884a0], rdx
jmp 0x14002697b
mov rcx, qword [0x140288498]
mov r15, rdx
sub r15, rcx
mov r14, r15
sar r14, 3
lea r8, [r14 + 1]
cmp r8, rdi
ja 0x1400294d2
sub rax, rcx
lea r9, [r13 + 9]
mov r12, rax
shr r12, 2
cmp r12, r8
cmovbe r12, r8
cmp rax, r9
cmovae r12, rdi
test r12, r12
je 0x14002688d
cmp r12, rdi
ja 0x1400294e8
lea rcx, [r12*8]
call fcn.14006fb50
mov rdx, qword [0x1402884a0]
mov rcx, qword [0x140288498]
jmp 0x14002688f
xor eax, eax
lea r9, [rax + r14*8]
lea r8, [rax + r12*8]
mov qword [rax + r14*8], rsi
lea r10, [rax + r14*8]
add r10, 8
mov rsi, rdx
sub rsi, rcx
je 0x14002695c
add rsi, 0xfffffffffffffff8
cmp rsi, 0x98
jae 0x1400268c1
mov r11, rdx
jmp 0x140026940
add r15, rax
mov r11, rdx
sub r11, r15
cmp r11, 0x20
jae 0x1400268d5
mov r11, rdx
jmp 0x140026940
shr rsi, 3
inc rsi
mov r15, rsi
and r15, 0xfffffffffffffffc
lea r12, [r15*8]
sub r9, r12
mov r11, rdx
sub r11, r12
lea rax, [rax + r14*8]
add rax, 0xfffffffffffffff0
mov r14, r15
neg r14
xor r12d, r12d
nop word cs:[rax + rax]
movups xmm0, xmmword [rdx + r12*8 - 0x20]
movups xmm1, xmmword [rdx + r12*8 - 0x10]
movups xmmword [rax + r12*8], xmm1
movups xmmword [rax + r12*8 - 0x10], xmm0
add r12, 0xfffffffffffffffc
cmp r14, r12
jne 0x140026910
cmp rsi, r15
je 0x140026955
nop word cs:[rax + rax]
mov rax, qword [r11 - 8]
add r11, 0xfffffffffffffff8
mov qword [r9 - 8], rax
add r9, 0xfffffffffffffff8
cmp r11, rcx
jne 0x140026940
mov rcx, qword [0x140288498]
mov qword [0x140288498], r9
mov qword [0x1402884a0], r10
mov qword [0x1402884a8], r8
test rcx, rcx
je 0x14002697b
call fcn.14006fbd0
mov byte [0x140288a94], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov rax, qword [0x140288410]
cmp rax, qword [0x140288418]
jae 0x1400269fc
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400269ef
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rdx + 8]
mov r10, qword [r8]
mov qword [r10 + 8], r9
mov r9, qword [rdx + 8]
mov qword [r9], r10
mov r9, qword [rax]
mov qword [r9 + 8], r8
mov qword [r8], r9
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [0x140288410], rax
jmp 0x140026a75
lea rcx, [0x140288408]
lea rsi, [rsp + 0x30]
mov rdx, rsi
call fcn.1400495f0
cmp qword [rsp + 0x40], 0
je 0x140026a75
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [rbx]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x40], 0
cmp rbx, rsi
je 0x140026a75
nop word cs:[rax + rax]
mov r14, qword [rbx + 8]
mov rcx, qword [rbx + 0x10]
call fcn.1401f47c0
mov qword [rbx + 0x10], 0
mov rcx, rbx
call fcn.14006fbd0
mov rbx, r14
cmp r14, rsi
jne 0x140026a50
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
mov qword [rax], 0
mov rdx, qword [0x1402884a0]
mov rax, qword [0x1402884a8]
cmp rdx, rax
jae 0x140026aaf
mov qword [rdx], rsi
add rdx, 8
mov qword [0x1402884a0], rdx
jmp 0x140026bfb
mov rcx, qword [0x140288498]
mov r14, rdx
sub r14, rcx
mov rbx, r14
sar rbx, 3
lea r8, [rbx + 1]
cmp r8, rdi
ja 0x14002946b
sub rax, rcx
add r13, 9
mov r15, rax
shr r15, 2
cmp r15, r8
cmovbe r15, r8
cmp rax, r13
cmovae r15, rdi
test r15, r15
je 0x140026b17
cmp r15, rdi
ja 0x14002948f
lea rcx, [r15*8]
call fcn.14006fb50
mov rdx, qword [0x1402884a0]
mov rcx, qword [0x140288498]
jmp 0x140026b19
xor eax, eax
lea r9, [rax + rbx*8]
lea r8, [rax + r15*8]
mov qword [rax + rbx*8], rsi
lea r10, [rax + rbx*8]
add r10, 8
mov rsi, rdx
sub rsi, rcx
je 0x140026bdc
add rsi, 0xfffffffffffffff8
cmp rsi, 0x98
jae 0x140026b4b
mov r11, rdx
jmp 0x140026bc0
add r14, rax
mov r11, rdx
sub r11, r14
cmp r11, 0x20
jae 0x140026b5f
mov r11, rdx
jmp 0x140026bc0
shr rsi, 3
inc rsi
mov rdi, rsi
and rdi, 0xfffffffffffffffc
lea r14, [rdi*8]
sub r9, r14
mov r11, rdx
sub r11, r14
lea rax, [rax + rbx*8]
add rax, 0xfffffffffffffff0
mov rbx, rdi
neg rbx
xor r14d, r14d
nop
movups xmm0, xmmword [rdx + r14*8 - 0x20]
movups xmm1, xmmword [rdx + r14*8 - 0x10]
movups xmmword [rax + r14*8], xmm1
movups xmmword [rax + r14*8 - 0x10], xmm0
add r14, 0xfffffffffffffffc
cmp rbx, r14
jne 0x140026b90
cmp rsi, rdi
je 0x140026bd5
nop word cs:[rax + rax]
mov rax, qword [r11 - 8]
add r11, 0xfffffffffffffff8
mov qword [r9 - 8], rax
add r9, 0xfffffffffffffff8
cmp r11, rcx
jne 0x140026bc0
mov rcx, qword [0x140288498]
mov qword [0x140288498], r9
mov qword [0x1402884a0], r10
mov qword [0x1402884a8], r8
test rcx, rcx
je 0x140026bfb
call fcn.14006fbd0
lock inc dword [0x140285210]
lea rcx, [0x140285218]
call fcn.140070b60
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x140026c28
mov qword [rsp + 0xb8], rcx
call fcn.14006fbd0
mov rdi, qword [rsp + 0x70]
test rdi, rdi
je 0x140026cc6
mov rbx, qword [rsp + 0x78]
mov rcx, rdi
cmp rbx, rdi
jne 0x140026c55
jmp 0x140026cbc
cmp rbx, rdi
je 0x140026cb7
mov rax, rbx
add rbx, 0xffffffffffffffe8
cmp qword [rax - 8], 0
je 0x140026c50
mov rcx, qword [rax - 0x18]
mov rsi, qword [rax - 0x10]
mov rdx, qword [rcx + 8]
mov r8, qword [rsi]
mov qword [r8 + 8], rdx
mov rcx, qword [rcx + 8]
mov qword [rcx], r8
mov qword [rax - 8], 0
cmp rsi, rbx
je 0x140026c50
nop word [rax + rax]
mov r14, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
call fcn.1401f47c0
mov qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, r14
cmp r14, rbx
jne 0x140026c90
jmp 0x140026c50
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rdi
call fcn.14006fbd0
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x140026d66
mov rbx, qword [rsp + 0x58]
mov rcx, rdi
cmp rbx, rdi
jne 0x140026cf5
jmp 0x140026d5c
cmp rbx, rdi
je 0x140026d57
mov rax, rbx
add rbx, 0xffffffffffffffe8
cmp qword [rax - 8], 0
je 0x140026cf0
mov rcx, qword [rax - 0x18]
mov rsi, qword [rax - 0x10]
mov rdx, qword [rcx + 8]
mov r8, qword [rsi]
mov qword [r8 + 8], rdx
mov rcx, qword [rcx + 8]
mov qword [rcx], r8
mov qword [rax - 8], 0
cmp rsi, rbx
je 0x140026cf0
nop word [rax + rax]
mov r14, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
call fcn.1401f47c0
mov qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, r14
cmp r14, rbx
jne 0x140026d30
jmp 0x140026cf0
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x58], rdi
call fcn.14006fbd0
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x140026d80
mov qword [rsp + 0x98], rcx
call fcn.14006fbd0
mov rcx, qword [rsp + 0x130]
test rcx, rcx
je 0x140026d9a
mov qword [rsp + 0x138], rcx
call fcn.14006fbd0
mov rdi, qword [rsp + 0x2a0]
test rdi, rdi
je 0x140026e3c
mov rbx, qword [rsp + 0x2a8]
mov rcx, rdi
cmp rbx, rdi
jne 0x140026dc5
jmp 0x140026e2f
cmp rbx, rdi
je 0x140026e27
mov rax, rbx
add rbx, 0xffffffffffffffe8
cmp qword [rax - 8], 0
je 0x140026dc0
mov rcx, qword [rax - 0x18]
mov rsi, qword [rax - 0x10]
mov rdx, qword [rcx + 8]
mov r8, qword [rsi]
mov qword [r8 + 8], rdx
mov rcx, qword [rcx + 8]
mov qword [rcx], r8
mov qword [rax - 8], 0
cmp rsi, rbx
je 0x140026dc0
nop word [rax + rax]
mov r14, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
call fcn.1401f47c0
mov qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, r14
cmp r14, rbx
jne 0x140026e00
jmp 0x140026dc0
mov rcx, qword [rsp + 0x2a0]
mov qword [rsp + 0x2a8], rdi
call fcn.14006fbd0
mov qword [rsp + 0x100], 0
cmp qword [rsp + 0x108], 0
mov r15, qword [rsp + 0x68]
je 0x140026eb3
lea rsi, [rsp + 0x500]
mov rcx, rsi
mov rdx, r15
call fcn.1400721d0
mov rdx, qword [rsp + 0x580]
mov r8, qword [rsp + 0x108]
mov rcx, rsi
call fcn.140059fa0
mov qword [rsp + 0x100], rax
test byte [rsp + 0x500], 1
je 0x140026eaa
mov rcx, qword [rsp + 0x510]
call fcn.14006fbd0
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x140028dbb
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x90]
mov r8d, 4
mov rdx, r15
mov r9, 0xffffffffffffffff
call fcn.140072820
movzx r9d, byte [rsp + 0x90]
mov r8, r9
shr r8, 1
and r9b, 1
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
lea rsi, [rsp + 0x92]
mov rax, rcx
cmove rax, rsi
mov r11, rdx
cmove r11, r8
test r11, r11
jle 0x140026f5e
lea r10, [rax + r11*2]
xor ebx, ebx
xor edi, edi
nop word cs:[rax + rax]
cmp word [rax + rbx*2], 0x3a
je 0x140026f45
add rdi, 0xfffffffffffffffe
inc rbx
cmp r11, rbx
jne 0x140026f30
jmp 0x140026f54
lea rbx, [r11 + r11]
add rbx, rdi
je 0x140026f54
cmp rdi, 2
jne 0x140026faf
cmp r11, 4
jge 0x1400270c2
test r9b, r9b
cmove rcx, rsi
cmovne r8, rdx
lea rax, [rcx + r8*2]
mov rdx, rax
test r8, r8
jle 0x140026f92
mov rdx, rcx
nop dword [rax + rax]
cmp word [rdx], 0x5c
je 0x140026f92
add rdx, 2
dec r8
jne 0x140026f80
mov rdx, rax
mov r8, rdx
sub r8, rcx
shr r8, 1
cmp rdx, rax
mov rax, 0xffffffffffffffff
cmovne rax, r8
mov word [rcx + rax*2], 0x2d
mov byte [rsp + 0x2b], 0
lea r13, [r15 + 2]
test byte [r15], 1
mov rcx, r13
je 0x140026fc5
mov rcx, qword [r15 + 0x10]
test byte [0x140288308], 1
je 0x140026fd7
mov rdx, qword [0x140288318]
jmp 0x140026fde
lea rdx, [0x14028830a]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140026fed
mov byte [rsp + 0x2b], 1
movzx eax, byte [rsp + 0x90]
test al, 1
je 0x14002700b
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
jmp 0x140027011
shr rax, 1
mov rcx, rsi
test rax, rax
mov qword [rsp + 0xe8], r13
jle 0x140027478
xor edx, edx
mov r8, rax
nop word [rax + rax]
cmp word [rcx + rdx], 0x3a
je 0x140027045
add rdx, 2
dec r8
jne 0x140027030
jmp 0x140027478
add rax, rax
cmp rax, rdx
je 0x140027478
cmp rdx, 0xfffffffffffffffe
je 0x140027478
lea rcx, [rsp + 0x130]
call fcn.14005c020
movzx eax, byte [rsp + 0x90]
mov rcx, rax
shr rcx, 1
test al, 1
cmovne rsi, qword [rsp + 0xa0]
cmovne rcx, qword [rsp + 0x98]
cmp rcx, 2
jne 0x14002713b
movsx esi, byte [rsi]
add esi, 0xffffff9f
mov edx, 1
mov ecx, esi
shl edx, cl
lea rcx, [rsp + 0x130]
xor r8d, r8d
call fcn.14005c3f0
test al, al
jne 0x14002732c
xor esi, esi
jmp 0x140027379
lea rdi, [rax + r11*2]
add rdi, 0xfffffffffffffffe
mov rbx, rax
add r11, 0xfffffffffffffffd
je 0x140026f5e
xor r14d, r14d
nop word [rax + rax]
cmp word [rbx + r14], 0x55
je 0x1400270f6
add r14, 2
dec r11
jne 0x1400270e0
jmp 0x140026f5e
cmp word [rbx + r14 + 2], 0x4e
jne 0x140027115
cmp word [rbx + r14 + 4], 0x43
jne 0x140027115
cmp word [rbx + r14 + 6], 0x5c
je 0x140029351
mov r15, rdi
sub r15, rbx
add rbx, r14
add rbx, 2
sub r15, r14
mov r11, r15
shr r11, 1
cmp r15, 8
mov r15, qword [rsp + 0x68]
jge 0x1400270cd
jmp 0x140026f5e
movabs rdi, 0x7fffffffffffffef
movzx r14d, byte [r15]
mov eax, r14d
and al, 1
je 0x140027156
mov r14, qword [r15 + 8]
jmp 0x140027159
shr r14, 1
lea rbx, [r14 + 1]
cmp rbx, rdi
ja 0x1400294f2
cmp rbx, 0xa
ja 0x140027187
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
add bl, bl
mov byte [rsp + 0x50], bl
xor esi, esi
jmp 0x1400271c6
mov r15, rbx
or r15, 7
inc r15
js 0x140029509
lea rcx, [r15 + r15]
call fcn.14006fb50
mov rsi, rax
or r15, 1
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x68]
movzx eax, byte [rcx]
and al, 1
mov ebx, r15d
mov r15, rcx
test bl, 1
lea rbx, [rsp + 0x52]
cmove rsi, rbx
mov rdx, r13
test al, al
je 0x1400271dd
mov rdx, qword [r15 + 0x10]
lea r8, [r14 + r14]
mov rcx, rsi
call sub.msvcrt.dll_memmove
mov dword [rsi + r14*2], 0x5c
test byte [rsp + 0x50], 1
je 0x1400271fd
mov rbx, qword [rsp + 0x60]
lea rdx, [rsp + 0x2a0]
mov rcx, rbx
mov r8d, 0x12c
call qword [sym.imp.KERNEL32.DLL_GetVolumeNameForVolumeMountPointW]
test byte [rsp + 0x50], 1
je 0x140027225
mov rcx, qword [rsp + 0x60]
call fcn.14006fbd0
lea rsi, [rsp + 0x2a0]
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov word [rsp + rax*2 + 0x29e], 0
mov rcx, rsi
call sub.msvcrt.dll_wcslen
cmp rax, rdi
ja 0x1400294fc
mov rsi, rax
cmp rax, 0xa
ja 0x14002726d
lea eax, [rsi + rsi]
mov byte [rsp + 0x118], al
lea rbx, [rsp + 0x11a]
jmp 0x1400272a5
mov rdi, rsi
or rdi, 7
inc rdi
js 0x14002950e
lea rcx, [rdi + rdi]
call fcn.14006fb50
mov rbx, rax
mov qword [rsp + 0x128], rax
or rdi, 1
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rsi
mov r8, rsi
add r8, rsi
lea rdx, [rsp + 0x2a0]
mov rcx, rbx
call sub.msvcrt.dll_memcpy
mov word [rbx + rsi*2], 0
lea rcx, [rsp + 0x288]
lea rdx, [rsp + 0x90]
call fcn.1400721d0
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x118]
lea r8, [rsp + 0x288]
xor r9d, r9d
call fcn.14005c050
mov ebx, eax
test byte [rsp + 0x288], 1
je 0x14002730f
mov rcx, qword [rsp + 0x298]
call fcn.14006fbd0
test byte [rsp + 0x118], 1
je 0x140027326
mov rcx, qword [rsp + 0x128]
call fcn.14006fbd0
xor esi, esi
test bl, bl
je 0x140027379
mov edi, dword [rsp + 0x2c]
lea rcx, [rsp + 0x270]
mov rdx, r15
call fcn.1400721d0
lea rdx, [rsp + 0x130]
lea r9, [rsp + 0x270]
mov ecx, edi
mov r8d, esi
call fcn.140022230
mov rbx, rax
mov sil, 1
test byte [rsp + 0x270], 1
je 0x14002737b
mov rcx, qword [rsp + 0x280]
call fcn.14006fbd0
jmp 0x14002737b
xor ebx, ebx
mov rdi, qword [rsp + 0x248]
test rdi, rdi
je 0x1400273d2
mov rax, qword [rsp + 0x250]
mov rcx, rdi
cmp rax, rdi
jne 0x1400273a8
jmp 0x1400273c5
mov rax, r14
cmp r14, rdi
je 0x1400273bd
lea r14, [rax - 0x18]
test byte [rax - 0x18], 1
je 0x1400273a0
mov rcx, qword [rax - 8]
call fcn.14006fbd0
jmp 0x1400273a0
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x250], rdi
call fcn.14006fbd0
cmp rbx, 0x1f
setb al
xor sil, 1
or sil, al
jne 0x140027478
cmp byte [rsp + 0x2b], 0
jne 0x140028d55
movabs r12, 0x7fffffffffffffef
movzx edx, byte [r15]
mov r13, rdx
shr r13, 1
mov ebp, edx
and bpl, 1
mov r9, qword [r15 + 8]
mov rdi, r9
cmove rdi, r13
lea rsi, [rdi + 0x29]
cmp rsi, r12
ja 0x140029513
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov r14d, 0x90
add r14, qword [rcx + rax*8]
cmp rsi, 0xa
ja 0x140028e20
mov qword [rsp + 0x88], rdx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
add sil, sil
mov byte [rsp + 0x2a0], sil
xor ebx, ebx
jmp 0x140028e7d
cmp byte [rsp + 0x2b], 0
jne 0x140027ab0
movabs r12, 0x7fffffffffffffef
movzx edi, byte [r15]
mov eax, edi
and al, 1
je 0x14002749d
mov rdi, qword [r15 + 8]
jmp 0x1400274a0
shr rdi, 1
lea rbx, [rdi + 0x20]
cmp rbx, r12
ja 0x14002942a
cmp rbx, 0xa
ja 0x1400274d7
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
add bl, bl
mov byte [rsp + 0x2a0], bl
xor esi, esi
jmp 0x140027518
mov r14, rbx
or r14, 7
inc r14
js 0x140029494
lea rcx, [r14 + r14]
call fcn.14006fb50
mov rsi, rax
or r14, 1
mov qword [rsp + 0x2a0], r14
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2a8], rbx
movzx eax, byte [r15]
and al, 1
mov ebx, r14d
test bl, 1
lea rbx, [rsp + 0x2a2]
cmove rsi, rbx
mov rdx, r13
test al, al
je 0x140027532
mov rdx, qword [r15 + 0x10]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.WindowsSystem32KernelBase.dll]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa56a]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa57a]
movups xmmword [rsi + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x1401fa58a]
movups xmmword [rsi + rdi*2 + 0x30], xmm0
mov word [rsi + rdi*2 + 0x40], 0
test byte [rsp + 0x2a0], 1
je 0x140027586
mov rbx, qword [rsp + 0x2b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov esi, eax
test byte [rsp + 0x2a0], 1
je 0x1400275a8
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
xor r15d, r15d
cmp esi, 0xffffffff
setne bpl
mov rax, qword [rsp + 0x68]
movzx edi, byte [rax]
mov ecx, edi
and cl, 1
je 0x1400275c7
mov rdi, qword [rax + 8]
jmp 0x1400275ca
shr rdi, 1
lea r14, [rdi + 0x1c]
cmp r14, r12
ja 0x140029437
cmp r14, 0xa
ja 0x140027603
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
add r14b, r14b
mov byte [rsp + 0x2a0], r14b
xor ebx, ebx
jmp 0x140027653
mov r12, r14
or r12, 7
inc r12
js 0x140029499
lea rcx, [r12 + r12]
call fcn.14006fb50
mov rbx, rax
or r12, 1
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2a8], r14
mov rax, qword [rsp + 0x68]
movzx ecx, byte [rax]
and cl, 1
mov r14d, r12d
movabs r12, 0x7fffffffffffffef
test r14b, 1
lea r14, [rsp + 0x2a2]
cmove rbx, r14
mov rdx, r13
test cl, cl
je 0x140027673
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x10]
lea r8, [rdi + rdi]
mov rcx, rbx
call sub.msvcrt.dll_memmove
movabs rax, 0x6c006c0064002e
mov qword [rbx + rdi*2 + 0x30], rax
movups xmm0, xmmword [str.WindowsSystem32user32.dll]
movups xmmword [rbx + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa5ac]
movups xmmword [rbx + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa5bc]
movups xmmword [rbx + rdi*2 + 0x20], xmm0
mov word [rbx + rdi*2 + 0x38], 0
test byte [rsp + 0x2a0], 1
je 0x1400276ca
mov r14, qword [rsp + 0x2b0]
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ebx, eax
mov r15b, bpl
test byte [rsp + 0x2a0], 1
je 0x1400276ef
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
xor ebp, ebp
cmp esi, 0xffffffff
setne bpl
inc ebp
cmp ebx, 0xffffffff
cmove ebp, r15d
mov r15, qword [rsp + 0x68]
movzx edi, byte [r15]
mov ecx, edi
and cl, 1
je 0x140027717
mov rdi, qword [r15 + 8]
jmp 0x14002771a
shr rdi, 1
lea rbx, [rdi + 0x10]
cmp rbx, r12
ja 0x140029444
cmp rbx, 0xa
ja 0x140027751
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
add bl, bl
mov byte [rsp + 0x2a0], bl
xor esi, esi
jmp 0x140027793
mov r14, rbx
or r14, 7
inc r14
js 0x14002949e
lea rcx, [r14 + r14]
call fcn.14006fb50
mov rsi, rax
or r14, 1
mov qword [rsp + 0x2a0], r14
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2a8], rbx
movzx ecx, byte [r15]
and cl, 1
mov ebx, r14d
test bl, 1
lea rbx, [rsp + 0x2a2]
cmove rsi, rbx
mov rdx, r13
test cl, cl
je 0x1400277ad
mov rdx, qword [r15 + 0x10]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.Windowswin.ini]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa5e6]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
mov word [rsi + rdi*2 + 0x20], 0
test byte [rsp + 0x2a0], 1
je 0x1400277e9
mov rbx, qword [rsp + 0x2b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov esi, eax
test byte [rsp + 0x2a0], 1
je 0x14002780b
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
xor r14d, r14d
cmp esi, 0xffffffff
setne al
movzx edi, byte [r15]
mov ecx, edi
and cl, 1
je 0x140027825
mov rdi, qword [r15 + 8]
jmp 0x140027828
shr rdi, 1
lea rbx, [rdi + 0x13]
cmp rbx, r12
ja 0x140029451
cmp rbx, 0xa
mov byte [rsp + 0x88], al
ja 0x140027866
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
add bl, bl
mov byte [rsp + 0x2a0], bl
xor esi, esi
jmp 0x1400278a8
mov r12, rbx
or r12, 7
inc r12
js 0x1400294a3
lea rcx, [r12 + r12]
call fcn.14006fb50
mov rsi, rax
or r12, 1
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2a8], rbx
movzx ecx, byte [r15]
and cl, 1
mov ebx, r12d
test bl, 1
lea rbx, [rsp + 0x2a2]
cmove rsi, rbx
mov rdx, r13
test cl, cl
je 0x1400278c2
mov rdx, qword [r15 + 0x10]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movabs rax, 0x72006500730055
mov qword [rsi + rdi*2 + 0x1e], rax
movups xmm0, xmmword [str.usersDefault_User]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa608]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
mov word [rsi + rdi*2 + 0x26], 0
test byte [rsp + 0x2a0], 1
je 0x14002790d
mov rbx, qword [rsp + 0x2b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov esi, eax
test byte [rsp + 0x2a0], 1
je 0x14002792f
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
xor r12d, r12d
cmp esi, 0xffffffff
setne r13b
movzx edi, byte [r15]
mov ecx, edi
and cl, 1
je 0x14002794a
mov rdi, qword [r15 + 8]
jmp 0x14002794d
shr rdi, 1
lea r15, [rdi + 0x29]
movabs rax, 0x7fffffffffffffef
cmp r15, rax
ja 0x14002945e
cmp r15, 0xa
ja 0x140027990
xorps xmm0, xmm0
movaps xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
add r15b, r15b
mov byte [rsp + 0x2a0], r15b
xor esi, esi
jmp 0x1400279d6
mov rbx, r15
or rbx, 7
inc rbx
js 0x1400294b5
lea rcx, [rbx + rbx]
call fcn.14006fb50
mov rsi, rax
or rbx, 1
mov qword [rsp + 0x2a0], rbx
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2a8], r15
mov rax, qword [rsp + 0x68]
movzx ecx, byte [rax]
and cl, 1
mov r15d, ebx
test r15b, 1
lea rbx, [rsp + 0x2a2]
cmove rsi, rbx
mov rdx, qword [rsp + 0xe8]
test cl, cl
mov r15, qword [rsp + 0x68]
je 0x1400279fb
mov rdx, qword [r15 + 0x10]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.ProgramDataMicrosoftWindowsSystemData]
movups xmmword [rsi + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa630]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa640]
movups xmmword [rsi + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x1401fa650]
movups xmmword [rsi + rdi*2 + 0x30], xmm0
movups xmm0, xmmword [0x1401fa660]
movups xmmword [rsi + rdi*2 + 0x40], xmm0
mov dword [rsi + rdi*2 + 0x50], 0x61
test byte [rsp + 0x2a0], 1
je 0x140027a5c
mov rbx, qword [rsp + 0x2b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov esi, eax
movzx eax, byte [rsp + 0x88]
mov r14b, al
add ebp, r14d
mov r12b, r13b
add r12d, ebp
test byte [rsp + 0x2a0], 1
je 0x140027a92
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
xor eax, eax
cmp esi, 0xffffffff
setne al
add r12d, eax
cmp r12d, 3
mov r13, qword [rsp + 0xe8]
jbe 0x140027ab0
mov byte [rsp + 0x2b], 1
test byte [r15], 1
mov rcx, r13
je 0x140027abd
mov rcx, qword [r15 + 0x10]
test byte [0x140288308], 1
je 0x140027acf
mov rdx, qword [0x140288318]
jmp 0x140027ad6
lea rdx, [0x14028830a]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x140027b90
cmp byte [rsp + 0x2b], 0
je 0x140027b90
lea rdx, str.treating_path
lea rcx, [rsp + 0x130]
mov r8, r15
call fcn.140013d30
lea rdx, str.as_windows_drive
lea rcx, [rsp + 0x130]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x2b0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x2a0], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0x2a0], 1
je 0x140027b53
mov rcx, qword [rsp + 0x2b0]
jmp 0x140027b5b
lea rcx, [rsp + 0x2a2]
mov dl, 1
call fcn.140012160
test byte [rsp + 0x2a0], 1
je 0x140027b79
mov rcx, qword [rsp + 0x2b0]
call fcn.14006fbd0
test byte [rsp + 0x130], 1
je 0x140027b90
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
lea rcx, [rsp + 0x50]
mov rdx, r15
call fcn.1400721d0
lea rdx, [0x1401f9b28]
lea rcx, [rsp + 0x50]
call fcn.140072e90
lea rbp, [rsp + 0x70]
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], 0
test byte [rsp + 0x50], 1
lea rcx, [rsp + 0x52]
je 0x140027bf1
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x2a0]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140027e73
lea r14, [rsp + 0x2cc]
lea r15, [rsp + 0x2a0]
mov rbx, qword [sym.imp.KERNEL32.DLL_FindNextFileW]
lea r12, [0x1401f9b2e]
nop word [rax + rax]
mov r13d, dword [rsp + 0x2a0]
mov eax, dword [rsp + 0x2bc]
shl rax, 0x20
mov ecx, dword [rsp + 0x2c0]
or rcx, rax
mov eax, dword [rsp + 0x2c4]
mov dword [rsp + 0x130], r13d
mov qword [rsp + 0x138], rcx
mov dword [rsp + 0x140], eax
mov rcx, r14
call sub.msvcrt.dll_wcslen
lea rbp, [rax + rax]
add rbp, 2
nop dword [rax + rax]
mov rcx, rbp
call sub.msvcrt.dll_malloc
test rax, rax
je 0x140027c80
mov rdi, rax
mov rcx, rax
mov rdx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x148], rdi
test r13b, 0x10
jne 0x140027d20
mov ecx, 0x30
call fcn.14006fb50
lea rbp, [rsp + 0x70]
mov rcx, qword [rsp + 0x148]
mov qword [rax + 0x28], rcx
mov qword [rsp + 0x148], 0
mov ecx, dword [rsp + 0x140]
mov dword [rax + 0x20], ecx
mov rcx, qword [rsp + 0x138]
mov qword [rax + 0x18], rcx
mov ecx, dword [rsp + 0x130]
mov dword [rax + 0x10], ecx
mov qword [rax + 8], rbp
mov rcx, qword [rsp + 0x70]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rsp + 0x70], rax
inc qword [rsp + 0x80]
jmp 0x140027de0
mov rcx, rdi
mov rdx, r12
call sub.msvcrt.dll_wcscmp
lea rbp, [rsp + 0x70]
test eax, eax
je 0x140027de0
mov rcx, qword [rsp + 0x148]
lea rdx, [0x1401f9b32]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x140027de0
mov rax, qword [rsp + 0xb8]
cmp rax, qword [rsp + 0xc0]
jae 0x140027dc8
mov dword [rax], 0
mov qword [rax + 8], 0
mov dword [rax + 0x10], 0
mov qword [rax + 0x18], 0
mov rcx, qword [rsp + 0x148]
mov qword [rax + 0x18], rcx
mov qword [rsp + 0x148], 0
mov ecx, dword [rsp + 0x140]
mov dword [rax + 0x10], ecx
mov rcx, qword [rsp + 0x138]
mov qword [rax + 8], rcx
mov ecx, dword [rsp + 0x130]
mov dword [rax], ecx
add rax, 0x20
mov qword [rsp + 0xb8], rax
jmp 0x140027de0
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x130]
call fcn.14004a070
nop dword [rax]
mov rcx, rsi
mov rdx, r15
call rbx
mov edi, eax
mov rcx, qword [rsp + 0x148]
call fcn.1401f47c0
test edi, edi
jne 0x140027c30
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov r15, qword [rsp + 0x68]
cmp eax, 0x12
je 0x140027f23
call qword [sym.imp.KERNEL32.DLL_GetLastError]
lea rcx, [rsp + 0xd0]
mov edx, eax
call fcn.140073b60
lea rdx, str.in_Exploreing_Folder
lea rcx, [rsp + 0xd0]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x40], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx r8d, byte [rsp + 0x50]
test r8b, 1
je 0x140027e99
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
jmp 0x140027ea1
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 5
jne 0x140027f2c
movzx edi, byte [r15]
mov eax, edi
and al, 1
je 0x140027fd5
mov rdi, qword [r15 + 8]
jmp 0x140027fd8
shr r8, 1
lea rdx, [rsp + 0x52]
lea rcx, [rsp + 0x30]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0x130], 1
je 0x140027ee4
mov rcx, qword [rsp + 0x140]
jmp 0x140027eec
lea rcx, [rsp + 0x132]
mov dl, 1
call fcn.140012160
test byte [rsp + 0x130], 1
jne 0x140027fa0
test byte [rsp + 0x30], 1
jne 0x140027fb8
test byte [rsp + 0xd0], 1
je 0x140027f23
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
mov rcx, rsi
call qword [sym.imp.KERNEL32.DLL_FindClose]
movzx ecx, byte [rsp + 0x50]
test cl, 1
je 0x140027f3d
mov rax, qword [rsp + 0x58]
jmp 0x140027f43
mov rax, rcx
shr rax, 1
lea rdx, [rax - 1]
test cl, 1
jne 0x140027f59
add dl, dl
mov byte [rsp + 0x50], dl
lea rcx, [rsp + 0x52]
jmp 0x140027f63
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x58], rdx
mov word [rcx + rax*2 - 2], 0
mov r13, qword [rsp + 0x78]
cmp r13, rbp
je 0x140028738
lea rsi, str.bootmgr
mov r12, qword [sym.imp.msvcrt.dll__wcsicmp]
lea rdi, str.bootnxt
lea rbx, str.bootmgr.efi
lea r14, str.BOOTSECT.BAK
jmp 0x14002818d
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
test byte [rsp + 0x30], 1
je 0x140027f0c
mov rcx, qword [rsp + 0x40]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
jne 0x140027f16
jmp 0x140027f23
shr rdi, 1
lea rbx, [rdi + 1]
movabs rcx, 0x7fffffffffffffef
cmp rbx, rcx
ja 0x1400294a8
cmp rbx, 0xa
ja 0x140028019
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], 0
add bl, bl
mov byte [rsp + 0x130], bl
xor esi, esi
jmp 0x14002805a
mov r14, rbx
or r14, 7
inc r14
js 0x1400294ed
lea rcx, [r14 + r14]
call fcn.14006fb50
mov rsi, rax
or r14, 1
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x138], rbx
movzx eax, byte [r15]
and al, 1
mov ebx, r14d
test bl, 1
lea rbx, [rsp + 0x132]
cmove rsi, rbx
mov rdx, r13
test al, al
je 0x140028074
mov rdx, qword [r15 + 0x10]
lea r8, [rdi + rdi]
mov rcx, rsi
call sub.msvcrt.dll_memmove
mov dword [rsi + rdi*2], 0x5c
test byte [rsp + 0x130], 1
je 0x140028099
mov rbx, qword [rsp + 0x140]
mov rcx, rbx
call fcn.14004c5f0
test byte [rsp + 0x130], 1
je 0x1400280b8
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
test byte [rsp + 0x50], 1
lea rcx, [rsp + 0x52]
je 0x1400280c9
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x2a0]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
cmp rax, 0xffffffffffffffff
jne 0x140027f2c
lea rdx, str.error_at_exploreing
lea rcx, [rsp + 0x130]
mov r8, r15
call fcn.140013d30
test byte [rsp + 0x130], 1
je 0x140028dd0
mov rcx, qword [rsp + 0x140]
jmp 0x140028dd8
lea rcx, [rdi + 0x78]
mov qword [rax + 0x10], rbx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0x18], rdx
mov qword [rax + 8], rcx
mov rcx, qword [rdi + 0x78]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rdi + 0x78], rax
inc qword [rdi + 0x88]
lea rbp, [rsp + 0x70]
mov rcx, rsi
call fcn.140070b60
mov rcx, r14
call fcn.1401f47c0
lea rsi, str.bootmgr
lea rdi, str.bootnxt
lea rbx, str.bootmgr.efi
lea r14, str.BOOTSECT.BAK
nop word cs:[rax + rax]
mov r13, qword [r13 + 8]
cmp r13, rbp
je 0x140028738
mov rcx, qword [r13 + 0x28]
mov rdx, rsi
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
mov rdx, rdi
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
mov rdx, rbx
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
mov rdx, r14
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
lea rdx, str.pagefile.sys
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
lea rdx, str.swapfile.sys
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
lea rdx, str.hiberfil.sys
call r12
test eax, eax
je 0x140028180
mov rcx, qword [r13 + 0x28]
lea rdx, str.ReadMe.txt
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x140028180
mov r14, qword [r13 + 0x28]
mov rcx, r14
call sub.msvcrt.dll_wcslen
mov rbx, rax
movsxd rcx, ebx
lea rdx, [r14 + rcx*2]
add rdx, 2
dec rcx
mov rbp, rcx
sub rcx, 1
jb 0x140028249
lea rsi, [rdx - 2]
cmp word [rdx - 4], 0x2e
mov rdx, rsi
jne 0x140028230
jmp 0x14002824c
mov rsi, r14
movzx r15d, byte [rsp + 0x50]
test r15b, 1
mov qword [rsp + 0x88], r15
je 0x140028267
mov r15, qword [rsp + 0x58]
jmp 0x14002826a
shr r15, 1
shl rbx, 0x20
cdqe
add rax, r15
lea rdi, [rax + rax]
add rdi, 2
nop dword [rax + rax]
mov rcx, rdi
call sub.msvcrt.dll_malloc
test rax, rax
je 0x140028280
mov r14, rax
lea rdx, [rsp + 0x52]
test byte [rsp + 0x88], 1
je 0x1400282a4
mov rdx, qword [rsp + 0x60]
lea r8, [r15 + r15]
mov rcx, r14
call sub.msvcrt.dll_memcpy
lea rcx, [r14 + r15*2]
mov rdx, qword [r13 + 0x28]
movabs rax, 0x100000000
add rbx, rax
sar rbx, 0x1f
mov r8, rbx
call sub.msvcrt.dll_memcpy
test rbp, rbp
mov r15, qword [rsp + 0x68]
lea rbp, [rsp + 0x70]
je 0x14002834a
mov rdi, qword [0x140285280]
mov rbx, qword [0x140285288]
cmp rdi, rbx
je 0x14002831a
nop word cs:[rax + rax]
mov rcx, qword [rdi]
mov rdx, rsi
call r12
test eax, eax
je 0x14002814e
add rdi, 8
cmp rdi, rbx
jne 0x140028300
mov rdi, qword [0x140285220]
mov rbx, qword [0x140285228]
cmp rdi, rbx
je 0x14002834a
nop dword [rax]
mov rcx, qword [rdi]
mov rdx, rsi
call r12
test eax, eax
je 0x140028458
add rdi, 8
cmp rdi, rbx
jne 0x140028330
mov rax, qword [r13 + 0x18]
cmp rax, 0x1f400001
jb 0x1400285b8
mov rdi, qword [0x1402897b0]
mov rbx, qword [0x1402897b8]
cmp rdi, rbx
je 0x14002838e
nop dword [rax]
mov rcx, qword [rdi]
mov rdx, rsi
call r12
test eax, eax
je 0x140028677
add rdi, 8
cmp rdi, rbx
jne 0x140028370
mov rax, qword [r13 + 0x18]
cmp rax, 0x5dc00001
jb 0x1400284ed
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x1402882c0]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x18]
mov rcx, rsi
call fcn.140070b30
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rdi, qword [rcx + rax*8]
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x88], rax
mov rcx, r14
call sub.msvcrt.dll_wcslen
mov rbp, rax
shl rbp, 0x20
movabs rax, 0x100000000
add rbp, rax
sar rbp, 0x1f
nop
mov rcx, rbp
call sub.msvcrt.dll_malloc
test rax, rax
je 0x140028400
mov rbx, rax
mov rcx, rax
mov rdx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov ecx, 0x20
call fcn.14006fb50
lea rcx, [rdi + 0x48]
mov qword [rax + 0x10], rbx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0x18], rdx
mov qword [rax + 8], rcx
mov rcx, qword [rdi + 0x48]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rdi + 0x48], rax
inc qword [rdi + 0x58]
jmp 0x140028141
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x1402882c0]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x28]
mov rcx, rsi
call fcn.140070b30
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rdi, qword [rcx + rax*8]
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x88], rax
mov rcx, r14
call sub.msvcrt.dll_wcslen
mov rbp, rax
shl rbp, 0x20
movabs rax, 0x100000000
add rbp, rax
sar rbp, 0x1f
nop dword [rax]
mov rcx, rbp
call sub.msvcrt.dll_malloc
test rax, rax
je 0x1400284c0
mov rbx, rax
mov rcx, rax
mov rdx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov ecx, 0x20
call fcn.14006fb50
jmp 0x140028113
cmp rax, 0x25800001
jb 0x1400285b8
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x1402882c0]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x10]
mov rcx, rsi
call fcn.140070b30
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rdi, qword [rcx + rax*8]
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x88], rax
mov rcx, r14
call sub.msvcrt.dll_wcslen
mov rbp, rax
shl rbp, 0x20
movabs rax, 0x100000000
add rbp, rax
sar rbp, 0x1f
nop dword [rax]
mov rcx, rbp
call sub.msvcrt.dll_malloc
test rax, rax
je 0x140028560
mov rbx, rax
mov rcx, rax
mov rdx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov ecx, 0x20
call fcn.14006fb50
lea rcx, [rdi + 0x30]
mov qword [rax + 0x10], rbx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0x18], rdx
mov qword [rax + 8], rcx
mov rcx, qword [rdi + 0x30]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rdi + 0x30], rax
inc qword [rdi + 0x40]
jmp 0x140028141
movsxd rcx, dword [rsp + 0x2c]
mov rdx, qword [0x1402882c0]
lea rcx, [rcx + rcx*2]
mov rcx, qword [rdx + rcx*8]
cmp rax, 0x3fffff
ja 0x14002861b
mov rsi, qword [rcx]
mov rcx, rsi
call fcn.140070b30
lea rbx, [rsp + 0x130]
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rdi, qword [rcx + rax*8]
mov r8, qword [rsp + 0x580]
mov rcx, rbx
mov rdx, r14
call fcn.140016a00
mov rcx, rdi
mov rdx, rbx
call fcn.14001fc30
jmp 0x140028665
mov rsi, qword [rcx + 8]
mov rcx, rsi
call fcn.140070b30
lea rbx, [rsp + 0x130]
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rdi, qword [rcx + rax*8]
mov r8, qword [rsp + 0x580]
mov rcx, rbx
mov rdx, r14
call fcn.140016a00
add rdi, 0x18
mov rcx, rdi
mov rdx, rbx
call fcn.14001fc30
mov rcx, qword [rsp + 0x130]
call fcn.1401f47c0
jmp 0x140028146
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x1402882c0]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x20]
mov rcx, rsi
call fcn.140070b30
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rdi, qword [rcx + rax*8]
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x88], rax
mov rcx, r14
call sub.msvcrt.dll_wcslen
mov rbp, rax
shl rbp, 0x20
movabs rax, 0x100000000
add rbp, rax
sar rbp, 0x1f
nop dword [rax + rax]
mov rcx, rbp
call sub.msvcrt.dll_malloc
test rax, rax
je 0x1400286e0
mov rbx, rax
mov rcx, rax
mov rdx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov ecx, 0x20
call fcn.14006fb50
lea rcx, [rdi + 0x60]
mov qword [rax + 0x10], rbx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0x18], rdx
mov qword [rax + 8], rcx
mov rcx, qword [rdi + 0x60]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rdi + 0x60], rax
inc qword [rdi + 0x70]
jmp 0x140028141
cmp qword [rsp + 0x80], 0
je 0x14002878d
mov rax, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov rcx, qword [rax + 8]
mov rdx, qword [rsi]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x80], 0
cmp rsi, rbp
je 0x14002878d
mov rdi, qword [rsi + 8]
mov rcx, qword [rsi + 0x28]
call fcn.1401f47c0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, rdi
cmp rdi, rbp
jne 0x140028770
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x1402882c0]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x30]
call fcn.140070b30
mov r12, qword [rsp + 0xe8]
movsxd rcx, dword [rsp + 0x2c]
mov rax, qword [0x140288260]
lea rcx, [rcx + rcx*2]
test byte [r15], 1
je 0x1400287cc
mov r12, qword [r15 + 0x10]
mov rdi, qword [rax + rcx*8]
test r12, r12
je 0x140028820
mov r14, qword [rsp + 0x580]
mov rcx, r12
call sub.msvcrt.dll_wcslen
mov rbx, rax
shl rbx, 0x20
movabs rax, 0x100000000
add rbx, rax
sar rbx, 0x1f
nop dword [rax]
mov rcx, rbx
call sub.msvcrt.dll_malloc
test rax, rax
je 0x140028800
mov rsi, rax
mov rcx, rax
mov rdx, r12
mov r8, rbx
call sub.msvcrt.dll_memcpy
jmp 0x140028825
xor r14d, r14d
xor esi, esi
mov ecx, 0x20
call fcn.14006fb50
lea rcx, [rdi + 0x90]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov qword [rax + 8], rcx
mov rcx, qword [rdi + 0x90]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rdi + 0x90], rax
inc qword [rdi + 0xa0]
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x1402882c0]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x30]
call fcn.140070b60
mov dword [rsp + 0xf8], 0
mov dword [rsp + 0xf0], 0
mov rax, qword [rsp + 0xb8]
sub rax, qword [rsp + 0xb0]
shr rax, 5
mov dword [rsp + 0x114], eax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x150], 0
mov ecx, 0x60
call fcn.14006fb50
lea rcx, [0x1401fcbd0]
mov qword [rax], rcx
lea rcx, [rsp + 0xf8]
mov qword [rax + 8], rcx
lea rcx, [rsp + 0x114]
mov qword [rax + 0x10], rcx
lea rcx, [rsp + 0xb0]
mov qword [rax + 0x18], rcx
lea rcx, [rsp + 0xf0]
mov qword [rax + 0x20], rcx
lea rcx, [rsp + 0x2b]
mov qword [rax + 0x28], rcx
lea rcx, [rsp + 0x50]
mov qword [rax + 0x30], rcx
lea rcx, [rsp + 0x108]
mov qword [rax + 0x38], rcx
lea rcx, [rsp + 0x100]
mov qword [rax + 0x40], rcx
mov qword [rax + 0x48], r15
lea rcx, [rsp + 0x580]
mov qword [rax + 0x50], rcx
lea rcx, [rsp + 0x2c]
mov qword [rax + 0x58], rcx
mov qword [rsp + 0x150], rax
lea rcx, [rsp + 0xd0]
lea rsi, [rsp + 0x130]
mov rdx, rsi
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x14002899e
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x1400289b0
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call fcn.140074b40
lea rdx, [rsp + 0x130]
mov rcx, rdi
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x1400289fe
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x140028a10
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call fcn.140074b40
lea rdx, [rsp + 0x130]
mov rcx, rdi
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x140028a5e
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x140028a70
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call fcn.140074b40
lea rdx, [rsp + 0x130]
mov rcx, rdi
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x140028abe
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x140028ad0
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call fcn.140074b40
lea rdx, [rsp + 0x130]
mov rcx, rdi
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x140028b1e
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x140028b30
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call fcn.140074b40
lea rdx, [rsp + 0x130]
mov rcx, rdi
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x140028b7e
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x140028b90
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call fcn.140074b40
lea rbx, [rsp + 0x130]
mov rcx, rdi
mov rdx, rbx
call fcn.140029ba0
mov rax, qword [rsp + 0x38]
cmp rax, qword [rsp + 0x40]
jae 0x140028be1
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov qword [rsp + 0xd0], 0
add rax, 8
mov qword [rsp + 0x38], rax
jmp 0x140028bf3
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
call fcn.140037990
lea rcx, [rsp + 0xd0]
call fcn.140074b40
mov r14, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
jmp 0x140028c14
add r14, 8
cmp r14, rdi
je 0x140028c2f
mov rcx, r14
call fcn.140098ff0
test al, al
jne 0x140028c10
mov rcx, r14
call fcn.140074b60
jmp 0x140028c10
mov rcx, qword [rsp + 0x150]
cmp rcx, rbx
je 0x140028c4d
test rcx, rcx
je 0x140028c5e
mov rax, qword [rcx]
add rax, 0x28
mov rbx, rcx
jmp 0x140028c59
mov rax, qword [rsp + 0x130]
add rax, 0x20
mov rcx, rbx
call qword [rax]
mov rdi, qword [rsp + 0x30]
test rdi, rdi
je 0x140028ca0
mov rsi, qword [rsp + 0x38]
mov rcx, rdi
cmp rsi, rdi
je 0x140028c96
nop word cs:[rax + rax]
add rsi, 0xfffffffffffffff8
mov rcx, rsi
call fcn.140074b40
cmp rsi, rdi
jne 0x140028c80
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x38], rdi
call fcn.14006fbd0
mov rsi, qword [rsp + 0xb0]
test rsi, rsi
je 0x140028ce7
mov rdi, qword [rsp + 0xb8]
mov rcx, rsi
cmp rdi, rsi
je 0x140028cda
nop dword [rax]
mov rcx, qword [rdi - 8]
add rdi, 0xffffffffffffffe0
call fcn.1401f47c0
cmp rdi, rsi
jne 0x140028cc0
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rsi
call fcn.14006fbd0
cmp qword [rsp + 0x80], 0
je 0x140028d3d
mov rax, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov rcx, qword [rax + 8]
mov rdx, qword [rsi]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 8]
mov qword [rax], rdx
mov qword [rsp + 0x80], 0
cmp rsi, rbp
je 0x140028d3d
nop
mov rdi, qword [rsi + 8]
mov rcx, qword [rsi + 0x28]
call fcn.1401f47c0
mov rcx, rsi
call fcn.14006fbd0
mov rsi, rdi
cmp rdi, rbp
jne 0x140028d20
test byte [rsp + 0x50], 1
je 0x140028d4e
mov rcx, qword [rsp + 0x60]
call fcn.14006fbd0
cmp byte [rsp + 0x2b], 0
je 0x140028da4
mov ecx, 8
call fcn.14006fb50
mov rsi, rax
lea rdx, [0x14001fce0]
lea r8, [rsp + 0x2c]
mov rcx, rax
mov r9, r15
call fcn.140029d00
mov ecx, 0x18
call fcn.14006fb50
mov qword [rax + 0x10], rsi
mov rdx, qword [rsp + 0x268]
mov qword [rax + 8], rdx
mov rcx, qword [rdx]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov qword [rdx], rax
inc qword [rdx + 0x10]
test byte [rsp + 0x90], 1
je 0x140028dbb
mov rcx, qword [rsp + 0xa0]
call fcn.14006fbd0
nop
add rsp, 0x518
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x132]
mov dl, 1
call fcn.140012160
test byte [rsp + 0x130], 1
je 0x140028df6
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
lea rcx, [rsp + 0xb0]
call fcn.140029cb0
lea rcx, [rsp + 0x70]
call fcn.14001fc70
test byte [rsp + 0x50], 1
je 0x140028da4
mov rcx, qword [rsp + 0x60]
call fcn.14006fbd0
jmp 0x140028da4
mov r15, rsi
or r15, 7
inc r15
js 0x140029541
lea rcx, [r15 + r15]
call fcn.14006fb50
mov rbx, rax
or r15, 1
mov qword [rsp + 0x2a0], r15
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2a8], rsi
mov rax, qword [rsp + 0x68]
movzx r13d, byte [rax]
mov ebp, r13d
and bpl, 1
mov r9, qword [rax + 8]
mov qword [rsp + 0x88], r13
shr r13, 1
mov esi, r15d
mov r15, rax
test sil, 1
lea rax, [rsp + 0x2a2]
cmove rbx, rax
mov rsi, qword [r15 + 0x10]
lea r8, [rdi + rdi]
test bpl, bpl
mov rdx, rsi
cmove rdx, qword [rsp + 0xe8]
mov qword [rsp + 0x260], r9
mov r15, r9
cmove r15, r13
mov rcx, rbx
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.programdatamicrosoftwindows_systemdata]
movups xmmword [rbx + rdi*2], xmm0
movups xmm0, xmmword [0x1401fa492]
movups xmmword [rbx + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa4a2]
movups xmmword [rbx + rdi*2 + 0x20], xmm0
movups xmm0, xmmword [0x1401fa4b2]
movups xmmword [rbx + rdi*2 + 0x30], xmm0
movups xmm0, xmmword [0x1401fa4c2]
movups xmmword [rbx + rdi*2 + 0x40], xmm0
mov dword [rbx + rdi*2 + 0x50], 0x61
lea rdi, [r15 + 0x19]
cmp rdi, r12
ja 0x140029520
cmp rdi, 0xa
ja 0x140028f3f
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], 0
add dil, dil
mov byte [rsp + 0x130], dil
xor ebx, ebx
mov rcx, qword [rsp + 0x260]
jmp 0x140028fa7
mov r12, rdi
or r12, 7
inc r12
js 0x140029546
lea rcx, [r12 + r12]
call fcn.14006fb50
mov rbx, rax
or r12, 1
mov qword [rsp + 0x130], r12
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x138], rdi
mov rax, qword [rsp + 0x68]
movzx r13d, byte [rax]
mov ebp, r13d
and bpl, 1
mov rcx, qword [rax + 8]
mov rsi, qword [rax + 0x10]
mov qword [rsp + 0x88], r13
shr r13, 1
mov edi, r12d
movabs r12, 0x7fffffffffffffef
test dil, 1
lea rdi, [rsp + 0x132]
cmove rbx, rdi
lea r8, [r15 + r15]
test bpl, bpl
mov rdx, rsi
cmove rdx, qword [rsp + 0xe8]
cmovne r13, rcx
mov rcx, rbx
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [str.program_fileswindows_nt]
movups xmmword [rbx + r15*2], xmm0
movups xmm0, xmmword [0x1401fa4e6]
movups xmmword [rbx + r15*2 + 0x10], xmm0
movups xmm0, xmmword [0x1401fa4f6]
movups xmmword [rbx + r15*2 + 0x20], xmm0
mov dword [rbx + r15*2 + 0x30], 0x74
lea r15, [r13 + 0x16]
cmp r15, r12
ja 0x14002952d
cmp r15, 0xa
ja 0x140029035
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
add r15b, r15b
mov byte [rsp + 0x50], r15b
xor ebx, ebx
jmp 0x140029081
mov r12, r15
or r12, 7
inc r12
js 0x14002954b
lea rcx, [r12 + r12]
call fcn.14006fb50
mov rbx, rax
or r12, 1
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], r15
mov rax, qword [rsp + 0x68]
movzx ecx, byte [rax]
mov qword [rsp + 0x88], rcx
mov ebp, ecx
and bpl, 1
mov rsi, qword [rax + 0x10]
mov r15d, r12d
test r15b, 1
lea r15, [rsp + 0x52]
cmove rbx, r15
test bpl, bpl
cmove rsi, qword [rsp + 0xe8]
mov r8, r13
add r8, r13
mov rcx, rbx
mov rdx, rsi
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [0x1401fa526]
movups xmmword [rbx + r13*2 + 0x1c], xmm0
movups xmm0, xmmword [0x1401fa51a]
movups xmmword [rbx + r13*2 + 0x10], xmm0
movups xmm0, xmmword [str.windowsmicrosoft.net]
movups xmmword [rbx + r13*2], xmm0
mov word [rbx + r13*2 + 0x2c], 0
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rax, qword [rcx + rax*8]
mov r13, qword [rax + 0x98]
xor ebp, ebp
cmp r13, r14
je 0x140029190
mov r12, qword [sym.imp.msvcrt.dll__wcsicmp]
nop word cs:[rax + rax]
test byte [rsp + 0x2a0], 1
lea rdx, [rsp + 0x2a2]
je 0x14002912a
mov rdx, qword [rsp + 0x2b0]
mov rcx, qword [r13 + 0x10]
call r12
mov esi, eax
test byte [rsp + 0x130], 1
mov rdx, rdi
je 0x140029148
mov rdx, qword [rsp + 0x140]
mov rcx, qword [r13 + 0x10]
call r12
mov ebx, eax
test byte [rsp + 0x50], 1
mov rdx, r15
je 0x140029160
mov rdx, qword [rsp + 0x60]
mov rcx, qword [r13 + 0x10]
call r12
mov ecx, ebp
xor ebp, ebp
test ebx, ebx
sete bpl
cmp esi, 1
adc ecx, 0
cmp eax, 1
adc ebp, ecx
mov r13, qword [r13 + 8]
cmp r13, r14
jne 0x140029110
mov r15, qword [rsp + 0x68]
movzx eax, byte [r15]
jmp 0x14002919d
mov r15, qword [rsp + 0x68]
mov rax, qword [rsp + 0x88]
mov ecx, eax
and cl, 1
mov r12, qword [rsp + 0xe8]
je 0x1400291b2
mov rdi, qword [r15 + 8]
jmp 0x1400291b7
shr al, 1
movzx edi, al
lea rbx, [rdi + 0x10]
movabs rax, 0x7fffffffffffffef
cmp rbx, rax
ja 0x140029537
cmp rbx, 0xa
ja 0x1400291f2
xorps xmm0, xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
add bl, bl
mov byte [rsp + 0x70], bl
xor esi, esi
jmp 0x14002922e
mov r14, rbx
or r14, 7
inc r14
js 0x140029550
lea rcx, [r14 + r14]
call fcn.14006fb50
mov rsi, rax
or r14, 1
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x78], rbx
movzx ecx, byte [r15]
and cl, 1
mov ebx, r14d
test bl, 1
lea rbx, [rsp + 0x72]
cmove rsi, rbx
test cl, cl
je 0x140029242
mov r12, qword [r15 + 0x10]
lea r8, [rdi + rdi]
mov rcx, rsi
mov rdx, r12
call sub.msvcrt.dll_memmove
movups xmm0, xmmword [0x1401fa548]
movups xmmword [rsi + rdi*2 + 0x10], xmm0
movups xmm0, xmmword [str.windowswin.ini]
movups xmmword [rsi + rdi*2], xmm0
mov word [rsi + rdi*2 + 0x20], 0
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [0x140288260]
lea rax, [rax + rax*2]
mov rsi, qword [rcx + rax*8]
mov rdi, qword [rsi + 8]
cmp rdi, rsi
je 0x1400292c8
mov r14, qword [sym.imp.msvcrt.dll__wcsicmp]
nop word cs:[rax + rax]
test byte [rsp + 0x70], 1
mov rdx, rbx
je 0x1400292b2
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rdi + 0x10]
call r14
cmp eax, 1
adc ebp, 0
mov rdi, qword [rdi + 8]
cmp rdi, rsi
jne 0x1400292a0
cmp ebp, 3
jle 0x14002931e
mov byte [rsp + 0x2b], 1
test byte [rsp + 0x70], 1
je 0x140029325
mov rcx, qword [rsp + 0x80]
call fcn.14006fbd0
test byte [rsp + 0x50], 1
je 0x14002932c
mov rcx, qword [rsp + 0x60]
call fcn.14006fbd0
test byte [rsp + 0x130], 1
je 0x140029336
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
test byte [rsp + 0x2a0], 1
je 0x140028d4e
jmp 0x140029344
test byte [rsp + 0x70], 1
jne 0x1400292d9
test byte [rsp + 0x50], 1
jne 0x1400292ed
test byte [rsp + 0x130], 1
jne 0x140029301
test byte [rsp + 0x2a0], 1
je 0x140028d4e
mov rcx, qword [rsp + 0x2b0]
jmp 0x140028d49
lea r11, [rbx + r14]
cmp r11, r10
je 0x140026f5e
sub rax, rbx
add rax, 0xfffffffffffffffe
cmp rax, r14
je 0x140026f5e
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x2a0]
lea rdx, [rsp + 0x90]
mov r8d, 4
mov r9, 0xffffffffffffffff
call fcn.140072820
test byte [rsp + 0x90], 1
je 0x1400293b4
mov rcx, qword [rsp + 0xa0]
call fcn.14006fbd0
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0xa0], rcx
movups xmm0, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x90], xmm0
movzx r8d, byte [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov r9d, r8d
and r9b, 1
shr r8, 1
jmp 0x140026f5e
lea rcx, [rsp + 0x90]
call fcn.140036bf0
lea rcx, [rsp + 0xb0]
call fcn.140036bf0
lea rcx, [rsp + 0x130]
call fcn.140036bf0
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
lea rcx, [rsp + 0x2a0]
call fcn.140002ec0
lea rcx, [rsp + 0x2a0]
call fcn.140002ec0
lea rcx, [rsp + 0x2a0]
call fcn.140002ec0
lea rcx, [rsp + 0x2a0]
call fcn.140002ec0
lea rcx, [rsp + 0x2a0]
call fcn.140002ec0
lea rcx, [0x140288498]
call fcn.140036bf0
mov rcx, rsi
call fcn.140036bf0
mov rcx, rsi
call fcn.140036bf0
mov rcx, rsi
call fcn.140036bf0
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
lea rcx, [rsp + 0x130]
call fcn.140002ec0
call fcn.140002f60
lea rcx, [0x140288498]
call fcn.140036bf0
lea rcx, [0x140288498]
call fcn.140036bf0
lea rcx, [0x140288498]
call fcn.140036bf0
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
lea rcx, [rsp + 0x50]
call fcn.140002ec0
lea rcx, [rsp + 0x118]
call fcn.140002ec0
call fcn.140002f60
call fcn.140002f60
lea rcx, [rsp + 0x2a0]
call fcn.140002ec0
lea rcx, [rsp + 0x130]
call fcn.140002ec0
lea rcx, [rsp + 0x50]
call fcn.140002ec0
lea rcx, [rsp + 0x70]
call fcn.140002ec0
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
call fcn.140002f60
jmp 0x1400298d3
mov rdi, rax
jmp 0x140029a96
test byte [rsp + 0x90], 1
je 0x140029aad
mov rcx, qword [rsp + 0xa0]
call fcn.14006fbd0
mov rcx, rdi
call fcn.14009a110
int3