Function at 0x180003780
Capabilities:
Encode data using xor
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x828]
sub rsp, 0x900
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18001d040]
xor rax, rsp
mov qword [rbp + 0x7e0], rax
mov r15, rcx
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
mov dword [rsp + 0x20], esi
movdqa xmm0, xmmword [0x180018b20]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], pe_nt_image_headers64
mov ecx, esi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x7d]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x1800037f0
mov byte [rsp + 0x61], sil
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xc0]
call fcn.1800089e0
mov edi, 0x3000000
mov dword [rsp + 0x20], edi
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x130]
call fcn.1800031c0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x180003842
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1800038d6
movdqa xmm0, xmmword [0x180018b20]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x78], pe_nt_image_headers64
mov rcx, rsi
nop dword [rax]
lea eax, [rcx - 0x7d]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 0x10
jb 0x180003870
mov byte [rsp + 0x79], 0
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x80]
call fcn.1800089e0
nop
mov dword [rsp + 0x20], 0x3000001
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x110]
call fcn.1800031c0
nop
mov edi, 0x3000003
mov dword [rsp + 0x20], edi
cmp qword [rax + 0x18], 0xf
jbe 0x1800038cb
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
jmp 0x1800038e0
mov word [rsp + 0x24], ax
lea rax, [rsp + 0x24]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], rsi
mov qword [rbp + 0x2b8], rsi
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x180003902
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.1800093b0
nop
test dil, 2
je 0x180003982
and edi, 0xfffffffd
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x180003969
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003964
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003964
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x128], 0xf
mov byte [rbp + 0x110], 0
test dil, 1
je 0x1800039e8
and edi, 0xfffffffe
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x1800039cf
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800039ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800039ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x180003a2c
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003a27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003a27
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], 0xf
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x180003a89
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003a84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003a84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
cmp qword [rbp + 0x2b0], 0
jne 0x180003b11
xor eax, eax
mov word [rsp + 0x24], ax
lea r8, [rsp + 0x24]
lea rdx, [rsp + 0x24]
mov rcx, r15
call fcn.1800089e0
nop
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x18000497a
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004975
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004975
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rsp + 0x40], 0xfce9c3d1
mov dword [rsp + 0x44], 0xf3b0bade
mov dword [rsp + 0x48], 0xb3b0cdd1
mov word [rsp + 0x4c], pe_nt_image_headers64
xor r15d, r15d
mov ecx, r15d
nop word [rax + rax]
lea eax, [rcx - 0x7d]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xc
jb 0x180003b40
mov byte [rsp + 0x4d], r15b
lea r8, [rsp + 0x4c]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xa0]
call fcn.1800089e0
or edi, 0x80000000
mov dword [rsp + 0x20], edi
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x150]
call fcn.1800031c0
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180003b97
mov rax, qword [rax]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], rcx
call fcn.18000a7c0
movaps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x250], xmm0
lea r8, [rbp + 0x250]
mov edx, eax
lea rcx, [rbp]
call fcn.180001920
nop
lea rax, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 0xf
cmova rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x2b0]
mov qword [rbp + 0x288], rax
call fcn.18000a7c0
movaps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x210], xmm0
lea r8, [rbp + 0x210]
mov edx, eax
lea rcx, [rbp + 0x20]
call fcn.180001920
nop
lea r8, [rbp]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x2c0]
call fcn.180001e10
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x180003c77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003c72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003c72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x180003ccb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003cc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003cc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x180003d20
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003d1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003d1b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], 0xf
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180003d7d
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003d78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003d78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
xorps xmm6, xmm6
movdqa xmmword [rbp + 0x280], xmm6
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x310]
call fcn.180002c10
nop
cmp byte [rbp + 0x588], 0
je 0x180003e1d
mov ecx, 0x58
call fcn.18000b28c
mov rsi, rax
mov qword [rsp + 0x28], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_struct_std::filesystem::_Dir_enum_impl_.0
mov qword [rsi], rax
lea rbx, [rsi + 0x10]
lea rdx, [rbp + 0x310]
mov rcx, rbx
call fcn.180002f20
nop
mov qword [rbp + 0x280], rbx
mov qword [rbp + 0x288], rsi
movdqa xmm6, xmmword [rbp + 0x280]
jmp 0x180003e2a
xorps xmm0, xmm0
psrldq xmm0, 8
movq rsi, xmm0
mov ebx, dword [rbp + 0x58c]
mov rcx, qword [rbp + 0x330]
call fcn.18000aa40
mov rdx, qword [rbp + 0x328]
cmp rdx, 7
jbe 0x180003e85
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003e80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003e80
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x320], r15
mov qword [rbp + 0x328], 7
mov word [rbp + 0x310], r15w
test ebx, ebx
jne 0x1800049ba
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
test rsi, rsi
je 0x180003ecd
lock inc dword [rsi + 8]
mov rsi, qword [rbp + 0x288]
movdqa xmm6, xmmword [rbp + 0x280]
mov edi, dword [rsp + 0x20]
movdqa xmmword [rbp + 0x290], xmm6
test rsi, rsi
je 0x180003ee9
lock inc dword [rsi + 8]
mov rsi, qword [rbp + 0x288]
mov edi, dword [rsp + 0x20]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
test rsi, rsi
je 0x180003f33
mov eax, r14d
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x180003f2f
mov rbx, qword [rbp + 0x288]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180003f2f
mov rcx, qword [rbp + 0x288]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x20]
mov r12, qword [rbp + 0x298]
mov r13, qword [rbp + 0x290]
mov qword [rsp + 0x28], r12
test r13, r13
je 0x180004835
lea rdx, [rbp - 0x30]
mov rcx, r13
call fcn.180002aa0
mov rax, qword [rbp - 0x30]
mov edx, dword [rbp - 0x28]
test edx, edx
je 0x180003f75
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1800049d0
cmp eax, 3
jne 0x180004170
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x180003f8d
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.180001a70
cmp rax, r11
je 0x180003fdd
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180003fb4
cmp cx, 0x2f
jne 0x180003fbd
add rax, 2
cmp rax, r11
jne 0x180003fa5
cmp rax, r11
je 0x180003fdd
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x180003fdd
cmp cx, 0x2f
je 0x180003fdd
mov r10, rdx
cmp rax, rdx
jne 0x180003fc2
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
mov r8, r11
mov rdx, r10
lea rcx, [rbp - 0x70]
call fcn.180009120
or edi, 0x1c000
or edi, 8
mov dword [rsp + 0x20], edi
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rax, qword [rbp - 0x70]
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0xe8], rax
call fcn.18000a7c0
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x220], xmm0
lea r8, [rbp + 0x220]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.180009fa0
or edi, 0xe0000
or edi, 0x10
mov dword [rsp + 0x20], edi
mov dword [rsp + 0x30], 0xf1c7dcda
mov dword [rsp + 0x34], 0xb7b4d9cb
mov word [rsp + 0x38], pe_nt_image_headers64
mov rcx, r15
nop dword [rax + rax]
lea eax, [rcx - 0x7d]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 8
jb 0x180004080
mov byte [rsp + 0x39], 0
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.1800089e0
or edi, 0x300000
or edi, 0x20
mov dword [rsp + 0x20], edi
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x170]
call fcn.1800031c0
mov rsi, rax
or edi, 0x40
mov dword [rsp + 0x20], edi
mov r14, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1800040dd
mov rsi, qword [rax]
lea r15, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r15, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x40]
cmp r14, rcx
ja 0x180004170
test r14, r14
je 0x1800041ef
mov r12, r15
sub r12, r14
add r12, rcx
movsx r13d, byte [rsi]
lea r8, [r12 + 1]
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x180004164
nop word [rax + rax]
mov r8, r14
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800041de
inc rbx
lea r8, [r12 + 1]
sub r8, rbx
mov edx, r13d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x180004130
mov r12, qword [rsp + 0x28]
mov r13, qword [rbp + 0x290]
xor bl, bl
test dil, 0x40
je 0x1800041f6
and edi, 0xffffffbf
mov dword [rsp + 0x20], edi
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x1800041c0
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800041bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000461e
call fcn.18000b640
xor r15d, r15d
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], 0xf
mov byte [rbp + 0x170], r15b
jmp 0x1800041f9
mov r13, qword [rbp + 0x290]
mov r12, qword [rsp + 0x28]
cmp rbx, r15
jne 0x180004170
mov bl, 1
jmp 0x180004172
xor r15d, r15d
test dil, 0x20
je 0x180004251
and edi, 0xffffffdf
mov dword [rsp + 0x20], edi
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x180004241
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000423c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004625
call fcn.18000b640
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
test dil, 0x10
je 0x1800042a9
and edi, 0xffffffef
mov dword [rsp + 0x20], edi
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180004299
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004294
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000462c
call fcn.18000b640
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
test dil, 8
je 0x1800042f6
and edi, 0xfffffff7
mov dword [rsp + 0x20], edi
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x1800042f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800042f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004633
call fcn.18000b640
test bl, bl
je 0x180004560
movdqa xmm0, xmmword [0x180018ba0]
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x180018b00]
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmm0, xmmword [0x180018b10]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x180018a70]
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmm0, xmmword [0x180018a60]
movdqa xmmword [rbp + 0x1f0], xmm0
mov word [rbp + 0x200], pe_nt_image_headers64
mov rcx, r15
nop word [rax + rax]
lea eax, [rcx - 0x7d]
xor byte [rbp + rcx + 0x1b0], al
inc rcx
cmp rcx, 0x50
jb 0x180004360
mov byte [rbp + 0x201], 0
lea r8, [rbp + 0x200]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x40]
call fcn.1800089e0
or edi, 0xc00000
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x190]
call fcn.1800031c0
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1800043b6
mov rax, qword [rax]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rcx
call fcn.18000a7c0
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x240], xmm0
lea r8, [rbp + 0x240]
mov edx, eax
lea rcx, [rbp - 0x20]
call fcn.180001920
or edi, 0x1800
mov dword [rsp + 0x20], edi
lea rdx, [r13 + 0x20]
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x2e0]
call fcn.180001e10
nop
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x180004449
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004444
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000463a
call fcn.18000b640
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x18000449b
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004496
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004641
call fcn.18000b640
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], 0xf
mov byte [rbp + 0x190], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1800044ef
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800044ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004648
call fcn.18000b640
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
lea rcx, [rbp + 0x2e0]
call fcn.1800030c0
test al, al
jne 0x18000464f
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 7
jbe 0x180004560
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004554
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800046e2
call fcn.18000b640
nop dword [rax]
lea rdx, [rbp + 0x590]
mov rcx, qword [r13 + 0x40]
call fcn.18000aa20
cmp eax, 0x12
je 0x1800045be
test eax, eax
jne 0x1800049b2
cmp word [rbp + 0x5bc], 0x2e
jne 0x1800045a3
movzx eax, word [rbp + 0x5be]
test ax, ax
je 0x180004560
cmp ax, 0x2e
jne 0x1800045a3
cmp word [rbp + 0x5c0], 0
je 0x180004560
lea rdx, [rbp + 0x590]
mov rcx, r13
call fcn.180002db0
mov r14, 0xffffffffffffffff
jmp 0x180003f46
mov r13, r15
mov qword [rbp + 0x290], r15
mov rbx, r12
mov r12, r15
mov qword [rsp + 0x28], r15
mov qword [rbp + 0x298], r15
test rbx, rbx
mov r14, 0xffffffffffffffff
je 0x180003f46
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180004615
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180004615
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x20]
jmp 0x180003f33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rax, qword [rbp + 0x2e0]
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x2f0]
mov qword [rbp + 0x108], rax
call fcn.18000a7c0
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x230], xmm0
lea r8, [rbp + 0x230]
mov edx, eax
mov r15, qword [rbp - 0x80]
mov rcx, r15
call fcn.180009fa0
nop
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 7
jbe 0x1800046ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800046e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800046e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
xor esi, esi
mov qword [rbp + 0x2f0], rsi
mov qword [rbp + 0x2f8], 7
mov word [rbp + 0x2e0], si
lea rdi, [rsi - 1]
test r12, r12
je 0x180004749
mov eax, edi
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x180004749
mov rbx, qword [rbp + 0x298]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180004749
mov rcx, qword [rbp + 0x298]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x288]
test rcx, rcx
je 0x180004788
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x180004788
mov rbx, qword [rbp + 0x288]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x180004788
mov rcx, qword [rbp + 0x288]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 7
jbe 0x1800047d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800047cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800047cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov qword [rbp + 0x2d0], rsi
mov qword [rbp + 0x2d8], 7
mov word [rbp + 0x2c0], si
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x18000497a
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004975
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004975
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r12, r12
je 0x180004873
mov eax, r14d
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x180004873
mov rbx, qword [rbp + 0x298]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180004873
mov rcx, qword [rbp + 0x298]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x288]
test rcx, rcx
je 0x1800048b4
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1800048b4
mov rbx, qword [rbp + 0x288]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x1800048b4
mov rcx, qword [rbp + 0x288]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
mov word [rsp + 0x24], ax
lea r8, [rsp + 0x24]
lea rdx, [rsp + 0x24]
mov r15, qword [rbp - 0x80]
mov rcx, r15
call fcn.1800089e0
nop
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 7
jbe 0x18000491b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004916
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004916
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
xor esi, esi
mov qword [rbp + 0x2d0], rsi
mov qword [rbp + 0x2d8], 7
mov word [rbp + 0x2c0], si
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x18000497a
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004975
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004975
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b640
mov rax, r15
mov rcx, qword [rbp + 0x7e0]
xor rcx, rsp
call fcn.18000aeb0
lea r11, [rsp + 0x900]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
call fcn.1800028e0
nop
lea r8, [rbp + 0x2c0]
mov edx, ebx
lea rcx, str.directory_iterator::directory_iterator
call fcn.1800029d0
nop
lea r8, [r13 + 0x20]
lea rcx, str.directory_entry::status
call fcn.1800029d0
int3