Function at 0x140016fe0
Capabilities:
Gather firefox profile information

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x570
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
mov rax, qword [0x1400e5040]
xor rax, rsp
mov qword [rsp + 0x540], rax
mov rdi, rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rcx
mov qword [r11 - 0x210], rcx
mov qword [r11 - 0x208], rdx
xor r14d, r14d
mov r15d, r14d
mov dword [rsp + 0x20], r14d
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3d0], xmm1
mov qword [r11 - 0x1b8], r14
movups xmmword [rsp + 0x398], xmm0
mov qword [r11 - 0x1f0], r14
mov esi, 0xf
mov qword [r11 - 0x1e8], rsi
mov byte [rsp + 0x398], r14b
movups xmmword [rsp + 0x400], xmm0
mov qword [r11 - 0x188], r14
mov qword [r11 - 0x180], rsi
mov byte [rsp + 0x400], r14b
mov rbx, qword [0x1400e80d8]
mov rax, qword [0x1400e80e0]
mov qword [rsp + 0x58], rax
lea r13d, [r14 + 1]
mov r12d, 0x202
mov qword [rsp + 0x40], rbx
cmp rbx, qword [rsp + 0x58]
je 0x140018642
mov r8, rcx
lea rcx, [rsp + 0x280]
call fcn.140011090
nop
mov r8, r13
lea rdx, [0x1400c75ec]
mov rcx, rax
call fcn.140010fc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rsi
mov byte [rax], 0
bts r15d, 8
lea rdx, [0x1400e80f0]
cmp qword [0x1400e8108], 0xf
cmova rdx, qword [0x1400e80f0]
mov r8, qword [0x1400e8100]
lea rcx, [rsp + 0x60]
call fcn.140010fc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x90], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rsi
mov byte [rax], 0
bts r15d, 0xd
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14001718e
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rsp + 0x80]
call fcn.140010fc0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xb0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rsi
mov byte [rax], 0
bts r15d, 0xc
mov r8d, 8
lea rdx, str.Profiles
lea rcx, [rsp + 0xa0]
call fcn.140010fc0
movups xmm6, xmmword [rax]
movups xmmword [rsp + 0x328], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rsp + 0x338], xmm7
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rsi
mov byte [rax], 0
bts r15d, 0xb
mov dword [rsp + 0x20], r15d
mov rdx, qword [rsp + 0x3b0]
cmp rdx, 0xf
jbe 0x14001726d
inc rdx
mov rcx, qword [rsp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017268
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017268
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
movups xmmword [rsp + 0x398], xmm6
movups xmmword [rsp + 0x3a8], xmm7
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x1400172c3
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400172be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400172be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], rsi
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0x98]
cmp rdx, 0xf
jbe 0x140017321
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001731c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001731c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], rsi
mov byte [rsp + 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140017379
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017374
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017374
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x298]
cmp rdx, 0xf
jbe 0x1400173cf
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400173c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400173c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
nop
mov rdi, qword [rsp + 0x3a8]
lea rbx, [rsp + 0x398]
cmp qword [rsp + 0x3b0], 0xf
cmova rbx, qword [rsp + 0x398]
call fcn.1400c2138
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], rdi
lea r8, [rsp + 0x180]
mov edx, eax
lea rcx, [rsp + 0x1e0]
call fcn.140012e00
or r15d, 0x600
or r15d, 1
mov dword [rsp + 0x20], r15d
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x2f8]
call fcn.140014490
movsd xmm0, qword [rax]
movsd qword [rsp + 0x240], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x190], ecx
lea rax, [0x1400e5098]
mov qword [rsp + 0x198], rax
movaps xmm0, xmmword [rsp + 0x190]
movdqa xmmword [rsp + 0x510], xmm0
mov eax, dword [rsp + 0x240]
test eax, eax
je 0x140017536
cmp eax, 1
je 0x14001753e
mov rdi, qword [rsp + 0x3a8]
lea rbx, [rsp + 0x398]
cmp qword [rsp + 0x3b0], 0xf
cmova rbx, qword [rsp + 0x398]
call fcn.1400c2138
mov qword [rsp + 0x1a0], rbx
mov qword [rsp + 0x1a8], rdi
lea r8, [rsp + 0x1a0]
mov edx, eax
lea rcx, [rsp + 0x130]
call fcn.140012e00
or r15d, 0xc000
or r15d, 2
mov dword [rsp + 0x20], r15d
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x2e8]
call fcn.140014490
movsd xmm0, qword [rax]
movsd qword [rsp + 0x150], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x150]
test edx, edx
je 0x14001752d
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140018954
cmp ecx, 3
jne 0x14001753e
mov bl, 1
jmp 0x140017540
test ecx, ecx
jne 0x140018969
xor bl, bl
test r15b, 2
je 0x1400175b7
and r15d, 0xfffffffd
mov dword [rsp + 0x20], r15d
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x14001759a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017595
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017595
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], r14w
test r15b, 1
je 0x140017611
and r15d, 0xfffffffe
mov dword [rsp + 0x20], r15d
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x140017611
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001760c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001760c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
test bl, bl
je 0x1400185ea
mov rdi, qword [rsp + 0x3a8]
lea rbx, [rsp + 0x398]
cmp qword [rsp + 0x3b0], 0xf
cmova rbx, qword [rsp + 0x398]
call fcn.1400c2138
mov qword [rsp + 0x1b0], rbx
mov qword [rsp + 0x1b8], rdi
lea r8, [rsp + 0x1b0]
mov edx, eax
lea rcx, [rsp + 0x200]
call fcn.140012e00
or r15d, 0x30000
mov dword [rsp + 0x20], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x3c0], xmm0
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x3c0]
call fcn.14001bf40
test eax, eax
jne 0x140018986
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x1400176e7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400176e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400176e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov rbx, qword [rsp + 0x3c8]
mov qword [rsp + 0x38], rbx
test rbx, rbx
je 0x14001771a
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x3c8]
mov qword [rsp + 0x38], rbx
mov r15d, dword [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3f0], xmm0
test rbx, rbx
je 0x140017746
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x3c8]
mov qword [rsp + 0x38], rbx
mov r15d, dword [rsp + 0x20]
xorps xmm0, xmm0
movups xmmword [rsp + 0x500], xmm0
mov qword [rsp + 0x500], r14
mov qword [rsp + 0x508], r14
test rbx, rbx
je 0x1400177bb
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400177a9
mov rbx, qword [rsp + 0x3c8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400177a9
mov rcx, qword [rsp + 0x3c8]
mov qword [rsp + 0x38], rcx
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x1400177b6
mov rcx, qword [rsp + 0x3c8]
mov qword [rsp + 0x38], rcx
mov r15d, dword [rsp + 0x20]
nop dword [rax + rax]
mov rdi, qword [rsp + 0x3f0]
test rdi, rdi
je 0x140018547
lea rdx, [rsp + 0xc0]
mov rcx, rdi
call fcn.140013e60
mov edx, dword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
test edx, edx
je 0x140017803
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x14001899d
cmp eax, 3
jne 0x1400178d8
call fcn.1400c2138
lea rcx, [0x1400c79c0]
mov qword [rsp + 0x1c0], rcx
mov qword [rsp + 0x1c8], 0xe
lea r8, [rsp + 0x1c0]
mov edx, eax
lea rcx, [rsp + 0x260]
call fcn.140012e00
or r15d, 0x60
or r15d, 4
mov dword [rsp + 0x20], r15d
lea rdx, [rdi + 0x20]
lea r8, [rsp + 0x260]
lea rcx, [rsp + 0x220]
call fcn.140013400
mov rbx, rax
or r15d, 8
mov dword [rsp + 0x20], r15d
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call fcn.140014490
movsd xmm0, qword [rax]
movsd qword [rsp + 0x250], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x1d0], ecx
lea rax, [0x1400e5098]
mov qword [rsp + 0x1d8], rax
movaps xmm0, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x520], xmm0
mov eax, dword [rsp + 0x250]
test eax, eax
je 0x1400178d0
cmp eax, 1
je 0x1400178d8
mov bl, 1
jmp 0x1400178da
test ecx, ecx
jne 0x1400189ae
xor bl, bl
test r15b, 8
je 0x140017951
and r15d, 0xfffffff7
mov dword [rsp + 0x20], r15d
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x140017934
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001792f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001792f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov qword [rsp + 0x230], r14
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], r14w
test r15b, 4
je 0x1400179ab
and r15d, 0xfffffffb
mov dword [rsp + 0x20], r15d
mov rdx, qword [rsp + 0x278]
cmp rdx, 7
jbe 0x1400179ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400179a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400179a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
test bl, bl
je 0x140018535
lea rcx, [rdi + 0x20]
lea rdx, [rsp + 0x2a0]
call fcn.140013310
nop
mov r8, rsi
lea rdx, str.cookies.sqlite
mov rcx, rax
call fcn.140010fc0
movups xmm6, xmmword [rax]
movups xmmword [rsp + 0x348], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rsp + 0x358], xmm7
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rsi
mov byte [rax], 0
or r15d, 0x10
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x20], r15d
mov rax, qword [rsp + 0x418]
cmp rax, 0xf
jbe 0x140017a4e
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017a49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017a49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
movups xmmword [rsp + 0x400], xmm6
movups xmmword [rsp + 0x410], xmm7
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 0xf
jbe 0x140017aa4
inc rdx
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017a9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017a9f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x368]
call fcn.140004a10
lea rdx, str.SELECT__host__name__path__value__expiry_FROM_moz_cookies
mov rcx, rax
call fcn.1400257d0
mov r15, rax
test rax, rax
je 0x140018530
mov rcx, r15
call fcn.140055490
cmp eax, 0x64
jne 0x140018530
xorps xmm0, xmm0
movups xmmword [rsp + 0x420], xmm0
mov qword [rsp + 0x430], r14
mov qword [rsp + 0x438], rsi
mov byte [rsp + 0x420], 0
movups xmmword [rsp + 0x440], xmm0
mov qword [rsp + 0x450], r14
mov qword [rsp + 0x458], rsi
mov byte [rsp + 0x440], 0
movups xmmword [rsp + 0x460], xmm0
mov qword [rsp + 0x470], r14
mov qword [rsp + 0x478], rsi
mov byte [rsp + 0x460], 0
movups xmmword [rsp + 0x480], xmm0
mov qword [rsp + 0x490], r14
mov qword [rsp + 0x498], rsi
mov byte [rsp + 0x480], 0
movups xmmword [rsp + 0x4a0], xmm0
mov qword [rsp + 0x4b0], r14
mov qword [rsp + 0x4b8], rsi
mov byte [rsp + 0x4a0], 0
movups xmmword [rsp + 0x4c0], xmm0
mov qword [rsp + 0x4d0], r14
mov qword [rsp + 0x4d8], rsi
mov byte [rsp + 0x4c0], 0
movups xmmword [rsp + 0x4e0], xmm0
mov qword [rsp + 0x4f0], r14
mov qword [rsp + 0x4f8], rsi
mov byte [rsp + 0x4e0], 0
test r15, r15
je 0x140017c45
cmp qword [r15 + 0x28], 0
je 0x140017c01
cmp r14w, word [r15 + 0x88]
jae 0x140017c01
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017bf0
call qword [0x1400e5468]
mov rcx, qword [r15 + 0x28]
test rcx, rcx
jne 0x140017c4c
mov rsi, r14
jmp 0x140017c86
mov rax, qword [r15]
test rax, rax
je 0x140017c45
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017c18
call qword [0x1400e5468]
mov rax, qword [r15]
mov dword [rax + 0x44], 0x19
mov rcx, qword [rax + 0x138]
test rcx, rcx
je 0x140017c45
mov eax, 0x2460
test word [rcx + 8], ax
je 0x140017c40
call fcn.14004e450
jmp 0x140017c45
mov word [rcx + 8], r13w
lea rcx, [0x1400d05f0]
movzx edx, word [rcx + 8]
movzx eax, dx
and ax, r12w
cmp ax, r12w
jne 0x140017c69
cmp byte [rcx + 0xa], 1
jne 0x140017c69
mov rsi, qword [rcx + 0x10]
jmp 0x140017c7d
test dl, 1
je 0x140017c73
mov rsi, r14
jmp 0x140017c7d
mov dl, 1
call fcn.14004f0e0
mov rsi, rax
test r15, r15
je 0x140017d4b
mov edx, dword [r15 + 0x84]
mov rcx, qword [r15]
test rcx, rcx
jne 0x140017c9a
movzx eax, dl
jmp 0x140017cb4
cmp byte [rcx + 0x50], 0
jne 0x140017caf
cmp edx, 0xc0a
je 0x140017caf
mov eax, dword [rcx + 0x48]
and eax, edx
jmp 0x140017cb4
call fcn.14002d800
mov dword [r15 + 0x84], eax
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017ccd
call qword [0x1400e5478]
cmp qword [r15 + 0x28], 0
je 0x140017d07
cmp r13w, word [r15 + 0x88]
jae 0x140017d07
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017cf0
call qword [0x1400e5468]
mov rcx, qword [r15 + 0x28]
add rcx, 0x38
jne 0x140017d52
mov rdi, r14
mov qword [rsp + 0x28], r14
jmp 0x140017d9b
mov rax, qword [r15]
test rax, rax
je 0x140017d4b
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017d1e
call qword [0x1400e5468]
mov rax, qword [r15]
mov dword [rax + 0x44], 0x19
mov rcx, qword [rax + 0x138]
test rcx, rcx
je 0x140017d4b
mov eax, 0x2460
test word [rcx + 8], ax
je 0x140017d46
call fcn.14004e450
jmp 0x140017d4b
mov word [rcx + 8], r13w
lea rcx, [0x1400d05f0]
movzx edx, word [rcx + 8]
movzx eax, dx
and ax, r12w
cmp ax, r12w
jne 0x140017d74
cmp byte [rcx + 0xa], 1
jne 0x140017d74
mov rdi, qword [rcx + 0x10]
mov qword [rsp + 0x28], rdi
jmp 0x140017d92
test dl, 1
je 0x140017d83
mov rdi, r14
mov qword [rsp + 0x28], r14
jmp 0x140017d92
mov dl, 1
call fcn.14004f0e0
mov rdi, rax
mov qword [rsp + 0x28], rax
test r15, r15
je 0x140017e60
mov edx, dword [r15 + 0x84]
mov rcx, qword [r15]
test rcx, rcx
jne 0x140017daf
movzx eax, dl
jmp 0x140017dc9
cmp byte [rcx + 0x50], 0
jne 0x140017dc4
cmp edx, 0xc0a
je 0x140017dc4
mov eax, dword [rcx + 0x48]
and eax, edx
jmp 0x140017dc9
call fcn.14002d800
mov dword [r15 + 0x84], eax
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017de2
call qword [0x1400e5478]
cmp qword [r15 + 0x28], 0
je 0x140017e1c
mov eax, 2
cmp ax, word [r15 + 0x88]
jae 0x140017e1c
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017e0a
call qword [0x1400e5468]
mov rcx, qword [r15 + 0x28]
add rcx, 0x70
jne 0x140017e67
mov rbx, r14
jmp 0x140017ea1
mov rax, qword [r15]
test rax, rax
je 0x140017e60
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017e33
call qword [0x1400e5468]
mov rax, qword [r15]
mov dword [rax + 0x44], 0x19
mov rcx, qword [rax + 0x138]
test rcx, rcx
je 0x140017e60
mov eax, 0x2460
test word [rcx + 8], ax
je 0x140017e5b
call fcn.14004e450
jmp 0x140017e60
mov word [rcx + 8], r13w
lea rcx, [0x1400d05f0]
movzx edx, word [rcx + 8]
movzx eax, dx
and ax, r12w
cmp ax, r12w
jne 0x140017e84
cmp byte [rcx + 0xa], 1
jne 0x140017e84
mov rbx, qword [rcx + 0x10]
jmp 0x140017e98
test dl, 1
je 0x140017e8e
mov rbx, r14
jmp 0x140017e98
mov dl, 1
call fcn.14004f0e0
mov rbx, rax
test r15, r15
je 0x140017f69
mov edx, dword [r15 + 0x84]
mov rcx, qword [r15]
test rcx, rcx
jne 0x140017eb5
movzx eax, dl
jmp 0x140017ecf
cmp byte [rcx + 0x50], 0
jne 0x140017eca
cmp edx, 0xc0a
je 0x140017eca
mov eax, dword [rcx + 0x48]
and eax, edx
jmp 0x140017ecf
call fcn.14002d800
mov dword [r15 + 0x84], eax
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017ee8
call qword [0x1400e5478]
cmp qword [r15 + 0x28], 0
je 0x140017f25
mov eax, 3
cmp ax, word [r15 + 0x88]
jae 0x140017f25
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017f10
call qword [0x1400e5468]
mov rcx, qword [r15 + 0x28]
add rcx, 0xa8
jne 0x140017f70
mov r13, r14
jmp 0x140017faa
mov rax, qword [r15]
test rax, rax
je 0x140017f69
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017f3c
call qword [0x1400e5468]
mov rax, qword [r15]
mov dword [rax + 0x44], 0x19
mov rcx, qword [rax + 0x138]
test rcx, rcx
je 0x140017f69
mov eax, 0x2460
test word [rcx + 8], ax
je 0x140017f64
call fcn.14004e450
jmp 0x140017f69
mov word [rcx + 8], r13w
lea rcx, [0x1400d05f0]
movzx edx, word [rcx + 8]
movzx eax, dx
and ax, r12w
cmp ax, r12w
jne 0x140017f8d
cmp byte [rcx + 0xa], 1
jne 0x140017f8d
mov r13, qword [rcx + 0x10]
jmp 0x140017fa1
test dl, 1
je 0x140017f97
mov r13, r14
jmp 0x140017fa1
mov dl, 1
call fcn.14004f0e0
mov r13, rax
test r15, r15
je 0x140018073
mov edx, dword [r15 + 0x84]
mov rcx, qword [r15]
test rcx, rcx
jne 0x140017fbe
movzx eax, dl
jmp 0x140017fd8
cmp byte [rcx + 0x50], 0
jne 0x140017fd3
cmp edx, 0xc0a
je 0x140017fd3
mov eax, dword [rcx + 0x48]
and eax, edx
jmp 0x140017fd8
call fcn.14002d800
mov dword [r15 + 0x84], eax
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140017ff1
call qword [0x1400e5478]
cmp qword [r15 + 0x28], 0
je 0x14001802e
mov eax, 4
cmp ax, word [r15 + 0x88]
jae 0x14001802e
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140018019
call qword [0x1400e5468]
mov rcx, qword [r15 + 0x28]
add rcx, 0xe0
jne 0x14001807a
mov r12, r14
jmp 0x1400180b0
mov rax, qword [r15]
test rax, rax
je 0x140018073
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140018045
call qword [0x1400e5468]
mov rax, qword [r15]
mov dword [rax + 0x44], 0x19
mov rcx, qword [rax + 0x138]
test rcx, rcx
je 0x140018073
mov eax, 0x2460
test word [rcx + 8], ax
je 0x14001806d
call fcn.14004e450
jmp 0x140018073
mov word [rcx + 8], 1
lea rcx, [0x1400d05f0]
movzx edx, word [rcx + 8]
movzx eax, dx
and ax, r12w
cmp ax, r12w
jne 0x140018097
cmp byte [rcx + 0xa], 1
jne 0x140018097
mov r12, qword [rcx + 0x10]
jmp 0x1400180ab
test dl, 1
je 0x1400180a1
mov r12, r14
jmp 0x1400180ab
mov dl, 1
call fcn.14004f0e0
mov r12, rax
test r15, r15
je 0x1400180f7
mov edx, dword [r15 + 0x84]
mov rcx, qword [r15]
test rcx, rcx
jne 0x1400180c4
movzx eax, dl
jmp 0x1400180de
cmp byte [rcx + 0x50], 0
jne 0x1400180d9
cmp edx, 0xc0a
je 0x1400180d9
mov eax, dword [rcx + 0x48]
and eax, edx
jmp 0x1400180de
call fcn.14002d800
mov dword [r15 + 0x84], eax
mov rax, qword [r15]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x1400180f7
call qword [0x1400e5478]
test rsi, rsi
je 0x14001850f
test rdi, rdi
je 0x14001850f
test rbx, rbx
je 0x14001850f
test r13, r13
je 0x14001850f
test r12, r12
je 0x14001850f
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], r14
mov qword [rsp + 0x128], r14
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x140018146
mov rdx, rsi
lea rcx, [rsp + 0x110]
call fcn.140005830
nop
lea r9, [rsp + 0x110]
mov rdi, qword [rsp + 0x110]
mov r14, qword [rsp + 0x128]
cmp r14, 0xf
cmova r9, rdi
mov rsi, qword [rsp + 0x120]
mov eax, 0xf
cmp rsi, rax
ja 0x1400181b7
lea rbx, [rsp + 0x420]
mov qword [rsp + 0x430], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x1400181d7
mov rdx, rsi
lea rcx, [rsp + 0x420]
call fcn.14000b080
mov r14, qword [rsp + 0x128]
mov rdi, qword [rsp + 0x110]
cmp r14, 0xf
jbe 0x14001820e
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140018206
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400184ba
mov rcx, rdi
call fcn.1400c28dc
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x480]
call fcn.140010e00
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
xor ebx, ebx
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], rbx
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x28]
nop dword [rax]
inc r8
cmp byte [rdx + r8], bl
jne 0x140018250
lea rcx, [rsp + 0xf0]
call fcn.140005830
nop
lea r9, [rsp + 0xf0]
mov rdi, qword [rsp + 0xf0]
mov r14, qword [rsp + 0x108]
cmp r14, 0xf
cmova r9, rdi
mov rsi, qword [rsp + 0x100]
mov rax, qword [rsp + 0x4d8]
cmp rsi, rax
ja 0x1400182cf
lea rbx, [rsp + 0x4c0]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x4c0]
mov qword [rsp + 0x4d0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
xor ebx, ebx
jmp 0x1400182ef
mov rdx, rsi
lea rcx, [rsp + 0x4c0]
call fcn.14000b080
mov r14, qword [rsp + 0x108]
mov rdi, qword [rsp + 0xf0]
cmp r14, 0xf
jbe 0x140018326
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001831e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400184ba
mov rcx, rdi
call fcn.1400c28dc
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rbx
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x140018350
mov rdx, r13
lea rcx, [rsp + 0xd0]
call fcn.140005830
nop
lea r9, [rsp + 0xd0]
mov rdi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xe8]
cmp r14, 0xf
cmova r9, rdi
mov rsi, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x4b8]
cmp rsi, rax
ja 0x1400183d1
lea rbx, [rsp + 0x4a0]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x4a0]
mov qword [rsp + 0x4b0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x1400183f1
mov rdx, rsi
lea rcx, [rsp + 0x4a0]
call fcn.14000b080
mov r14, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xd0]
cmp r14, 0xf
jbe 0x140018428
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140018420
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400184ba
mov rcx, rdi
call fcn.1400c28dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
xor r14d, r14d
mov qword [rsp + 0x170], r14
mov qword [rsp + 0x178], r14
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r12 + r8], r14b
jne 0x140018450
mov rdx, r12
lea rcx, [rsp + 0x160]
call fcn.140005830
nop
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x4e0]
call fcn.140010e00
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x1400184c6
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400184c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400184c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov rax, qword [rsp + 0x3d8]
cmp rax, qword [rsp + 0x3e0]
je 0x1400184f6
lea rdx, [rsp + 0x420]
mov rcx, rax
call fcn.1400119a0
add qword [rsp + 0x3d8], 0xe0
jmp 0x14001850f
lea r8, [rsp + 0x420]
mov rdx, rax
lea rcx, [rsp + 0x3d0]
call fcn.1400116a0
nop
lea rcx, [rsp + 0x420]
call fcn.14000ed80
mov esi, 0xf
mov r12d, 0x202
lea r13d, [rsi - 0xe]
jmp 0x140017ad4
mov r15d, dword [rsp + 0x30]
lea rcx, [rsp + 0x3f0]
call fcn.140014340
jmp 0x1400177c0
mov rcx, qword [rsp + 0x3f8]
test rcx, rcx
je 0x14001859f
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140018590
mov rbx, qword [rsp + 0x3f8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140018590
mov rcx, qword [rsp + 0x3f8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rsp + 0x3c8]
mov r15d, dword [rsp + 0x20]
jmp 0x1400185a4
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400185ea
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400185e5
mov rbx, qword [rsp + 0x3c8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400185e5
mov rcx, qword [rsp + 0x3c8]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15d, dword [rsp + 0x20]
mov rdi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
add rbx, 0x20
jmp 0x1400170b1
mov rcx, qword [rsp + 0x3d8]
sub rcx, qword [rsp + 0x3d0]
movabs rax, 0x4924924924924925
imul rcx
mov rbx, rdx
sar rbx, 6
mov rax, rbx
shr rax, 0x3f
add rbx, rax
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x2c0]
call fcn.140010a60
mov r8d, ebx
mov rdx, rax
mov rcx, rdi
call fcn.140029170
nop
test al, al
mov rax, qword [rsp + 0x418]
jne 0x1400187d5
cmp rax, 0xf
jbe 0x1400186e1
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400186db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018808
call fcn.1400c28dc
nop
mov rdx, qword [rsp + 0x3b0]
cmp rdx, 0xf
jbe 0x140018724
inc rdx
mov rcx, qword [rsp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001871f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001884f
call fcn.1400c28dc
mov qword [rsp + 0x3a8], r14
mov qword [rsp + 0x3b0], rsi
mov byte [rsp + 0x398], 0
lea rcx, [rsp + 0x3d0]
call fcn.140010e90
nop
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140018789
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140018784
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140018946
mov rcx, r8
call fcn.1400c28dc
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], rsi
mov byte [rbx], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400187ce
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400187c9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001894d
mov rcx, r8
call fcn.1400c28dc
xor eax, eax
jmp 0x140018904
cmp rax, 0xf
jbe 0x140018815
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001880f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001880f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
nop
mov rdx, qword [rsp + 0x3b0]
cmp rdx, 0xf
jbe 0x14001885b
inc rdx
mov rcx, qword [rsp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018856
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018856
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c28dc
mov qword [rsp + 0x3a8], r14
mov qword [rsp + 0x3b0], rsi
mov byte [rsp + 0x398], 0
lea rcx, [rsp + 0x3d0]
call fcn.140010e90
nop
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400188c0
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400188bb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140018946
mov rcx, r8
call fcn.1400c28dc
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], rsi
mov byte [rbx], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140018901
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400188fc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001894d
mov rcx, r8
call fcn.1400c28dc
mov eax, r13d
mov byte [rdi], 0
mov qword [rdi + 0x18], rsi
mov qword [rdi + 0x10], r14
mov rcx, qword [rsp + 0x540]
xor rcx, rsp
call fcn.1400c2880
lea r11, [rsp + 0x570]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rsp + 0x130]
lea rcx, str.status
call fcn.140013d90
nop
lea r8, [rsp + 0x1e0]
lea rdx, [rsp + 0x510]
lea rcx, str.exists
call fcn.140013e00
nop
lea r8, [rsp + 0x200]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140013d90
nop
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.140013d90
nop
mov r8, rbx
lea rdx, [rsp + 0x520]
lea rcx, str.exists
call fcn.140013e00
int3