Function at 0x1400083f0
Capabilities:
Get file size
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x318
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x248], rcx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x230], xmm0
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
movups xmm0, xmmword [0x140037296]
movups xmmword [rbp + 0xb9], xmm0
movups xmm0, xmmword [0x14003728d]
movaps xmmword [rbp + 0xb0], xmm0
movups xmm0, xmmword [str._4____]
movaps xmmword [rbp + 0xa0], xmm0
movups xmm0, xmmword [0x14003726d]
movaps xmmword [rbp + 0x90], xmm0
lea rax, [rbp + 0x90]
mov qword [rbp + 0x270], rax
mov r10d, 0x50cc8026
mov ecx, 0x5a69255c
mov edx, 0x7f0200a7
mov r8d, 0x256bff10
mov r9d, 0x9fb4ea3c
nop dword [rax]
cmp r10d, 0x9fb4ea3c
je 0x1400086a5
cmp r10d, 0x28edb868
je 0x1400084f7
cmp r10d, 0x50cc8026
jne 0x1400084c0
mov r10, qword [rbp + 0x270]
cmp byte [r10 + 0x38], 0
mov r10d, 0x28edb868
cmove r10d, r9d
jmp 0x1400084c0
mov r10, qword [rbp + 0x270]
mov r11, qword [rbp + 0x270]
mov qword [rbp - 0x80], r11
mov esi, 0xd8ec533a
xor r11d, r11d
jmp 0x140008520
inc r11d
mov esi, 0x7f0200a7
nop dword [rax + rax]
cmp esi, 0x256bff0f
jle 0x140008590
cmp esi, 0x61b0348f
jg 0x1400085d0
cmp esi, 0x256bff10
je 0x14000863f
cmp esi, 0x5a69255c
jne 0x140008520
movsxd rsi, r11d
imul rdi, rsi, 0xffffffff8fb823ef
shr rdi, 0x20
add edi, r11d
mov ebx, edi
shr ebx, 0x1f
shr edi, 5
add edi, ebx
imul edi, edi, 0x39
mov ebx, r11d
sub ebx, edi
add bl, 0x34
mov edi, ebx
xor dil, bl
not dil
and dil, byte [r10 + rsi]
xor dil, bl
mov rbx, qword [rbp - 0x80]
mov byte [rbx + rsi], dil
mov esi, 0x61b03490
jmp 0x140008520
cmp esi, 0xc89116fd
jle 0x14000862d
cmp esi, 0xc89116fe
je 0x140008513
cmp esi, 0xd8ec533a
jne 0x140008520
cmp r11d, 0x39
mov esi, 0xb09b01f3
cmovl esi, ecx
jmp 0x140008520
cmp esi, 0x61b03490
je 0x140008649
cmp esi, 0x7f0200a7
jne 0x140008520
mov esi, dword [0x140044c80]
mov edi, dword [0x140044c84]
lea ebx, [rsi + 1]
imul ebx, esi
mov esi, ebx
xor esi, 0xfffffffe
test esi, ebx
sete r14b
cmp edi, 0xa
setl r15b
xor r15b, r14b
mov r14d, 0xc89116fe
cmovne r14d, r8d
test esi, ebx
mov esi, r14d
cmove esi, r8d
cmp edi, 0xa
cmovge esi, r14d
inc r11d
jmp 0x140008520
cmp esi, 0xb09b01f3
jne 0x14000868e
mov esi, 0xb1fd0637
jmp 0x140008520
mov esi, 0xd8ec533a
jmp 0x140008520
mov esi, dword [0x140044c80]
mov edi, dword [0x140044c84]
lea ebx, [rsi + 1]
imul ebx, esi
mov esi, ebx
xor esi, 0xfffffffe
test esi, ebx
sete r14b
cmp edi, 0xa
setl r15b
xor r15b, r14b
mov r14d, 0xc89116fe
cmovne r14d, edx
test esi, ebx
mov esi, r14d
cmove esi, edx
cmp edi, 0xa
cmovge esi, r14d
jmp 0x140008520
cmp esi, 0xb1fd0637
jne 0x140008520
mov r10d, 0x9fb4ea3c
jmp 0x1400084c0
mov rcx, qword [rbp + 0x270]
mov r8d, 0xcfd3936f
lea rcx, [rbp + 0x1a0]
mov edx, 0xb5f2bc9a
nop
cmp r8d, 0xb5f2bc9a
je 0x1400086ff
cmp r8d, 0x66e301a1
je 0x1400086f7
cmp r8d, 0xcfd3936f
jne 0x1400086c0
movzx r8d, byte [rax]
inc rax
mov byte [rcx], r8b
inc rcx
test r8b, r8b
mov r8d, 0x66e301a1
cmove r8d, edx
jmp 0x1400086c0
mov r8d, 0xcfd3936f
jmp 0x1400086c0
mov rdx, rsp
movups xmm0, xmmword [0x1400372c6]
movaps xmmword [rbp + 0xb0], xmm0
movups xmm0, xmmword [0x1400372b6]
movaps xmmword [rbp + 0xa0], xmm0
movdqu xmm0, xmmword [0x1400372a6]
movdqa xmmword [rbp + 0x90], xmm0
movabs rax, 0x6b0b1d0923460701
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x90]
mov qword [rbp + 0x258], rcx
mov eax, 0x2a305b35
mov r8d, 0x2bd56b5e
mov r9d, 0xd35e450d
mov r10d, 0x5bdb2592
mov r11d, 0xc4630add
nop word [rax + rax]
cmp eax, 0x82831a26
je 0x140008a13
cmp eax, 0xdfe59f14
je 0x1400087a3
cmp eax, 0x2a305b35
jne 0x140008770
mov rax, qword [rbp + 0x258]
cmp byte [rax + 0x37], 0
mov eax, 0xdfe59f14
mov esi, 0x82831a26
cmove eax, esi
jmp 0x140008770
mov rdi, rsp
mov rbx, qword [rbp + 0x258]
mov r14, qword [rbp + 0x258]
mov eax, dword [0x140044c98]
mov r15d, dword [0x140044c9c]
lea r12d, [rax + 1]
imul r12d, eax
mov eax, r12d
xor eax, 0xfffffffe
test eax, r12d
sete byte [rbp + 0x290]
cmp r15d, 0xa
setl byte [rbp + 0x268]
mov eax, 0x84125fda
jmp 0x140008800
mov rax, qword [rbp + 0x270]
mov eax, 0x124358c7
nop word [rax + rax]
cmp eax, 0x675c938
jle 0x140008840
cmp eax, 0x2bd56b5d
jg 0x140008870
cmp eax, 0x675c939
je 0x1400087eb
cmp eax, 0x26a5a899
jne 0x1400089fb
mov rax, qword [rbp + 0x270]
mov eax, dword [rax]
inc eax
mov rsi, qword [rbp + 0x270]
mov dword [rsi], eax
mov eax, 0xc7e4c548
jmp 0x140008800
cmp eax, 0xc7e4c547
jg 0x1400088f0
cmp eax, 0x84125fda
je 0x140008910
cmp eax, 0xc4630add
jne 0x140008800
mov eax, 0xc7e4c548
jmp 0x140008800
cmp eax, 0x2bd56b5e
je 0x140008943
cmp eax, 0x5bdb2592
jne 0x140008800
mov rax, qword [rbp + 0x250]
mov rax, qword [rax]
mov r15, qword [rbp + 0x270]
movsxd r15, dword [r15]
mov r12, qword [rbp + 0x270]
movsxd r12, dword [r12]
imul r13, r12, 0xffffffff8fb823ef
shr r13, 0x20
add r13d, r12d
mov esi, r13d
shr esi, 0x1f
shr r13d, 5
add r13d, esi
imul esi, r13d, 0x39
sub r12d, esi
add r12b, 0x34
xor r12b, byte [rax + r15]
mov rax, qword [rbp - 0x80]
mov rsi, qword [rbp + 0x270]
movsxd rsi, dword [rsi]
mov byte [rax + rsi], r12b
mov eax, 0x26a5a899
jmp 0x140008800
cmp eax, 0xc7e4c548
je 0x1400089e3
cmp eax, 0xd35e450d
jne 0x140008800
mov eax, 0x2bd56b5e
jmp 0x140008800
movzx r15d, byte [rbp + 0x290]
movzx eax, byte [rbp + 0x268]
mov r12d, r15d
xor r12b, al
test al, al
mov eax, 0xd35e450d
cmovne eax, r8d
test r15b, r15b
cmove eax, r9d
test r12b, r12b
cmovne eax, r8d
jmp 0x140008800
mov eax, send
call fcn.14001bfc0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x250], rax
mov eax, send
call fcn.14001bfc0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0x250]
mov qword [rax], rbx
mov qword [rbp - 0x80], r14
mov rax, qword [rbp + 0x270]
mov rax, qword [rbp + 0x270]
mov dword [rax], 0
mov eax, dword [0x140044c98]
mov r15d, dword [0x140044c9c]
lea r12d, [rax + 1]
imul r12d, eax
not r12d
or r12d, 0xfffffffe
cmp r12d, 0xffffffff
sete al
cmp r15d, 0xa
setl r13b
xor r13b, al
mov r13d, 0xd35e450d
cmovne r13d, r11d
cmp r12d, 0xffffffff
mov eax, r13d
cmove eax, r11d
cmp r15d, 0xa
cmovge eax, r13d
jmp 0x140008800
mov rax, qword [rbp + 0x270]
cmp dword [rax], 0x38
mov eax, 0x675c939
cmovl eax, r10d
jmp 0x140008800
cmp eax, 0x124358c7
jne 0x140008800
mov eax, 0x82831a26
mov rsp, rdi
jmp 0x140008770
mov rax, qword [rbp + 0x258]
mov rsp, rdx
mov r8d, 0xcfd3936f
lea rax, [rbp + 0x1f0]
mov edx, 0xb5f2bc9a
nop
cmp r8d, 0xb5f2bc9a
je 0x140008a6f
cmp r8d, 0x66e301a1
je 0x140008a67
cmp r8d, 0xcfd3936f
jne 0x140008a30
movzx r8d, byte [rcx]
inc rcx
mov byte [rax], r8b
inc rax
test r8b, r8b
mov r8d, 0x66e301a1
cmove r8d, edx
jmp 0x140008a30
mov r8d, 0xcfd3936f
jmp 0x140008a30
movabs rax, 0x48485c4b626a0f77
mov qword [rbp - 0x80], rax
mov word [rbp - 0x78], 0x3d60
lea rax, [rbp - 0x80]
mov qword [rbp + 0x270], rax
mov r8d, 0xec1400a2
mov ecx, 0xd27ec55b
mov edx, 0xce926a6d
nop
cmp r8d, 0xce926a6d
je 0x140008bb6
cmp r8d, 0x32098d3
je 0x140008ad7
cmp r8d, 0xec1400a2
jne 0x140008aa0
mov r8, qword [rbp + 0x270]
cmp byte [r8 + 9], 0
mov r8d, 0x32098d3
cmove r8d, edx
jmp 0x140008aa0
mov r8, qword [rbp + 0x270]
mov r9, qword [rbp + 0x270]
mov qword [rbp + 0x90], r9
xor r11d, r11d
mov r9d, r11d
imul r10, r9, 0x1f7047dd
shr r10, 0x20
mov esi, r11d
sub esi, r10d
shr esi, 1
add esi, r10d
shr esi, 5
imul esi, esi, 0x39
mov r10d, r11d
sub r10d, esi
add r10b, 0x34
cmp r11d, 0xa
mov r11d, 0x6677495e
cmovb r11d, ecx
mov esi, 0xe17b7669
nop dword [rax + rax]
cmp esi, 0xe17b7668
jle 0x140008b60
cmp esi, 0xe17b7669
je 0x140008b91
cmp esi, 0x487e75b3
je 0x140008bab
cmp esi, 0x6677495e
jne 0x140008b30
mov esi, 0x487e75b3
jmp 0x140008b30
cmp esi, 0xcd333400
je 0x140008ba0
cmp esi, 0xd27ec55b
jne 0x140008b30
mov ebx, r10d
xor bl, r10b
not bl
and bl, byte [r8 + r9]
xor bl, r10b
mov rsi, qword [rbp + 0x90]
mov byte [rsi + r9], bl
mov esi, 0xcd333400
jmp 0x140008b30
mov esi, r11d
jmp 0x140008b30
inc r9d
mov r11d, r9d
jmp 0x140008aef
mov r8d, 0xce926a6d
jmp 0x140008aa0
mov rcx, qword [rbp + 0x270]
mov r8d, 0xcfd3936f
lea rcx, [rbp + 0x90]
mov edx, 0xb5f2bc9a
nop
cmp r8d, 0xb5f2bc9a
je 0x140008c0f
cmp r8d, 0x66e301a1
je 0x140008c07
cmp r8d, 0xcfd3936f
jne 0x140008bd0
movzx r8d, byte [rax]
inc rax
mov byte [rcx], r8b
inc rcx
test r8b, r8b
mov r8d, 0x66e301a1
cmove r8d, edx
jmp 0x140008bd0
mov r8d, 0xcfd3936f
jmp 0x140008bd0
mov edx, 0xf3927ec6
lea rax, [rbp + 0x90]
mov rcx, qword [rbp + 0x248]
jmp 0x140008c30
mov edx, 0x9fbdda71
nop dword [rax]
cmp edx, 0x12a751c7
jg 0x140008c70
cmp edx, 0x9fbdda70
jle 0x140008ca0
cmp edx, 0x9fbdda71
je 0x140008d3c
cmp edx, 0xf3927ec6
jne 0x140008dc0
cmp byte [rax], 0
mov edx, 0x8df644c6
je 0x140008c30
mov edx, 0x79c8d53c
jmp 0x140008c30
cmp edx, 0x639d5ea4
jg 0x140008cd0
cmp edx, 0x12a751c8
je 0x140008d5d
cmp edx, 0x58af0c72
jne 0x140008c30
mov edx, 0x9fbdda71
jmp 0x140008c30
cmp edx, 0x8df644c6
je 0x140008c24
cmp edx, 0x99de2aa7
jne 0x140008c30
inc rax
mov edx, 0x12a751c8
jmp 0x140008c30
cmp edx, 0x639d5ea5
je 0x140008db6
cmp edx, 0x79c8d53c
jne 0x140008c30
mov edx, dword [0x140044c30]
mov r8d, dword [0x140044c34]
lea r9d, [rdx + 1]
imul r9d, edx
mov r10d, r9d
xor r10d, 0xfffffffe
test r10d, r9d
sete dl
cmp r8d, 0xa
setl r11b
xor r11b, dl
mov edx, 0x12a751c8
mov r11d, 0x12a751c8
jne 0x140008d28
mov r11d, 0x99de2aa7
test r10d, r9d
cmovne edx, r11d
cmp r8d, 0xa
cmovge edx, r11d
jmp 0x140008c30
movzx r8d, byte [rcx]
mov byte [rax], r8b
mov edx, 0xb0622db4
test r8b, r8b
je 0x140008d52
mov edx, 0x58af0c72
inc rcx
inc rax
jmp 0x140008c30
mov edx, dword [0x140044c30]
mov r8d, dword [0x140044c34]
lea r9d, [rdx + 1]
imul r9d, edx
not r9d
or r9d, 0xfffffffe
cmp r9d, 0xffffffff
sete dl
cmp r8d, 0xa
setl r10b
xor r10b, dl
mov edx, 0x639d5ea5
mov r10d, 0x639d5ea5
jne 0x140008d9e
mov r10d, 0x99de2aa7
cmp r9d, 0xffffffff
cmovne edx, r10d
cmp r8d, 0xa
cmovge edx, r10d
inc rax
jmp 0x140008c30
mov edx, 0xf3927ec6
jmp 0x140008c30
cmp edx, 0xb0622db4
jne 0x140008c30
add qword [rbp + 0x248], 0x200
mov eax, 0xa27c7904
xor esi, esi
mov dword [rbp + 0x264], ecx
jmp 0x140008e00
mov eax, 0x89c7ef13
mov edi, 1
mov dword [rbp + 0x264], 0
nop word [rax + rax]
cmp eax, 0x9b6110c
jle 0x140008e50
cmp eax, 0x38bb1d4a
jle 0x140008ec0
cmp eax, 0x61ec8d9c
jg 0x140008f67
cmp eax, 0x4348f6a9
jle 0x1400090a3
cmp eax, 0x4348f6aa
je 0x140009450
cmp eax, 0x438bc623
je 0x14000945a
cmp eax, 0x4d680fb9
jne 0x140008e00
inc r14d
mov eax, 0xb9ab1aa0
jmp 0x140008e00
cmp eax, 0xb9f4973f
jg 0x140008f10
cmp eax, 0xa27c7903
jle 0x140008fd1
cmp eax, 0xb2208452
jle 0x1400090d4
cmp eax, 0xb2208453
je 0x140009466
cmp eax, 0xb85d800b
je 0x140009476
cmp eax, 0xb9ab1aa0
jne 0x140008e00
mov eax, r14d
mov ecx, dword [rbp + 0x290]
add rcx, 0xffffffffffffffea
cmp rcx, rax
mov eax, 0xd31c45f4
mov ecx, 0x25fcf651
cmovb eax, ecx
jmp 0x140008e00
cmp eax, 0x1adf3252
jle 0x140009036
cmp eax, 0x232fd9c6
jle 0x140009115
cmp eax, 0x232fd9c7
je 0x1400094a4
cmp eax, 0x25fcf651
je 0x1400094b0
cmp eax, 0x36487404
jne 0x140008e00
mov eax, 0xcd1a4f68
jmp 0x140008e00
cmp eax, 0xd31c45f3
jle 0x140009072
cmp eax, 0xd9f80a3a
jle 0x140009360
cmp eax, 0xd9f80a3b
je 0x1400094bf
cmp eax, 0xdf7b15ac
je 0x1400094c9
cmp eax, 0xe263641a
jne 0x140008e00
sub rsp, 0x20
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov eax, 0x96fcf052
mov edi, 4
jmp 0x140008e00
cmp eax, 0x7a4840c4
jle 0x140009380
cmp eax, 0x7a4840c5
je 0x140009541
cmp eax, 0x7a9fcae4
je 0x14000955c
cmp eax, 0x7c5274b2
jne 0x140008e00
mov eax, dword [0x140044c38]
mov ecx, dword [0x140044c3c]
lea edx, [rax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete r8b
cmp ecx, 0xa
setl r9b
xor r9b, r8b
mov r8d, 0xe263641a
mov r9d, 0x96fcf052
cmovne r8d, r9d
test eax, edx
jmp 0x1400096fa
cmp eax, 0x93c681a9
jg 0x1400093a0
cmp eax, 0x80da3e96
je 0x140009584
cmp eax, 0x8b038c43
jne 0x140009969
mov ecx, r15d
sub rsp, 0x20
call fcn.140024520
add rsp, 0x20
mov r12, rax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r13
mov rdx, rax
mov r8d, r15d
lea r9, [rbp + 0x290]
call qword [sym.imp.KERNEL32.dll_ReadFile]
add rsp, 0x30
mov eax, 0xb9f49740
jmp 0x140008e00
cmp eax, 0x12cd4b12
jg 0x140009410
cmp eax, 0x9b6110d
je 0x140008de6
cmp eax, 0x9ca2cfc
jne 0x140008e00
mov eax, dword [rbp + 0x244]
cmp eax, 2
mov eax, 0x89c7ef13
mov ecx, 0x9b6110d
cmove eax, ecx
jmp 0x140008e00
cmp eax, 0xcbd49fd3
jg 0x140009430
cmp eax, 0xb9f49740
je 0x14000959d
cmp eax, 0xc02eb6ad
jne 0x140008e00
mov dword [rbp + 0x244], edi
mov eax, 0x9ca2cfc
jmp 0x140008e00
cmp eax, 0x38bb1d4b
je 0x140009622
cmp eax, 0x399dd864
jne 0x140008e00
mov eax, dword [rbp + 0x260]
cmp eax, 4
mov eax, 0xc02eb6ad
mov ecx, 0x438bc623
cmove eax, ecx
jmp 0x140008e00
cmp eax, 0xa27c7904
je 0x140009639
cmp eax, 0xac217772
jne 0x140008e00
sub rsp, 0x20
mov rcx, r13
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
add rsp, 0x20
mov r15d, eax
cmp eax, 0xffffffff
mov eax, 0x61ec8d9d
mov ecx, 0x7c5274b2
cmove eax, ecx
jmp 0x140008e00
cmp eax, 0x1adf3253
je 0x14000964e
cmp eax, 0x1f239042
jne 0x140008e00
movdqu xmm0, xmmword [0x1400372e8]
movdqa xmmword [rbp + 0x270], xmm0
movabs rax, 0x4a24272468292d22
mov qword [rbp + 0x27f], rax
lea rax, [rbp + 0x270]
mov qword [rbp + 0x268], rax
mov eax, 0x3cb8c4e7
nop
cmp eax, 0x3d500dd5
jle 0x1400091d0
cmp eax, 0x3d500dd6
je 0x14000920e
cmp eax, 0x6c171f80
je 0x140009667
cmp eax, 0x6e6b7031
jne 0x140009160
mov eax, dword [0x140044cb8]
mov ecx, dword [0x140044cbc]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xb97ce6fe
mov r9d, 0x9b4731b9
cmovne r8d, r9d
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, r9d
cmp ecx, 0xa
cmovge eax, r8d
jmp 0x140009160
cmp eax, 0x9b4731b9
je 0x1400092ea
cmp eax, 0xb97ce6fe
je 0x140009345
cmp eax, 0x3cb8c4e7
jne 0x140009160
mov rax, qword [rbp + 0x268]
cmp byte [rax + 0x16], 0
mov eax, 0x3d500dd6
mov ecx, 0x6e6b7031
cmove eax, ecx
jmp 0x140009160
mov rax, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x268]
mov qword [rbp + 0x250], rcx
xor r8d, r8d
mov ecx, r8d
imul rdx, rcx, 0x1f7047dd
shr rdx, 0x20
mov r9d, r8d
sub r9d, edx
shr r9d, 1
add r9d, edx
shr r9d, 5
imul r9d, r9d, 0x39
mov edx, r8d
sub edx, r9d
add dl, 0x34
cmp r8d, 0x17
mov r8d, 0xe49f101
mov r9d, 0xf47be9ab
cmovb r8d, r9d
mov r9d, 0xafcdb7fb
nop dword [rax + rax]
cmp r9d, 0xb24fe5d5
jle 0x1400092a0
cmp r9d, 0xb24fe5d6
je 0x140009356
cmp r9d, 0xf47be9ab
je 0x1400092b7
cmp r9d, 0xe49f101
jne 0x140009270
mov r9d, 0xb24fe5d6
jmp 0x140009270
cmp r9d, 0x8748513b
je 0x1400092e0
cmp r9d, 0xafcdb7fb
jne 0x140009270
mov r9d, r8d
jmp 0x140009270
movzx r9d, byte [rax + rcx]
xor r9b, dl
mov r10, qword [rbp + 0x250]
mov byte [r10 + rcx], r9b
mov r9d, 0x8748513b
jmp 0x140009270
inc ecx
mov r8d, ecx
jmp 0x140009226
mov eax, dword [0x140044cb8]
mov ecx, dword [0x140044cbc]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xb97ce6fe
mov r9d, 0x6c171f80
cmovne r8d, r9d
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, r9d
cmp ecx, 0xa
mov rcx, qword [rbp + 0x268]
mov qword [rbp + 0x258], rcx
cmovge eax, r8d
jmp 0x140009160
mov rax, qword [rbp + 0x268]
mov eax, 0x9b4731b9
jmp 0x140009160
mov eax, 0x6e6b7031
jmp 0x140009160
cmp eax, 0xd31c45f4
je 0x14000967d
cmp eax, 0xd668dd18
jne 0x140008e00
mov eax, 0x4d680fb9
jmp 0x140008e00
cmp eax, 0x61ec8d9d
je 0x1400096c0
cmp eax, 0x70157781
jne 0x140008e00
mov eax, 0x93c681aa
jmp 0x140008e00
cmp eax, 0x93c681aa
je 0x14000970d
cmp eax, 0x96fcf052
jne 0x140008e00
sub rsp, 0x20
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov eax, dword [0x140044c38]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xe263641a
mov r8d, 0xd9f80a3b
cmove eax, r8d
cmp dword [0x140044c3c], 0xa
setl dl
mov r9d, 0xe263641a
cmovge eax, r9d
xor dl, cl
cmovne eax, r8d
mov edi, 4
jmp 0x140008e00
cmp eax, 0x12cd4b13
je 0x140009736
cmp eax, 0x170a0a5a
jne 0x140008e00
mov eax, 0x438bc623
jmp 0x140008e00
cmp eax, 0xcbd49fd4
je 0x140009745
cmp eax, 0xcd1a4f68
jne 0x140008e00
mov eax, 0x4348f6aa
jmp 0x140008e00
mov eax, 0xb2208453
jmp 0x140008e00
inc esi
mov eax, 0xa27c7904
jmp 0x140008e00
mov dword [rbp + 0x260], edi
mov eax, 0x7a4840c5
jmp 0x140008e00
mov eax, r14d
mov rcx, qword [r12 + rax + 0xe]
mov rdx, qword [rbp + 0x248]
mov qword [rdx + 0xe], rcx
movdqu xmm0, xmmword [r12 + rax]
movdqu xmmword [rdx], xmm0
mov eax, 0x70157781
mov bl, 1
mov edi, 5
jmp 0x140008e00
mov eax, 0x36487404
xor edi, edi
jmp 0x140008e00
mov eax, 0x70157781
mov edi, 5
jmp 0x140008e00
mov eax, 0x4348f6aa
jmp 0x140008e00
sub rsp, 0x20
mov r8d, 0x104
lea r13, [rbp - 0x80]
mov rcx, r13
xor edx, edx
call fcn.140035a20
add rsp, 0x20
mov edx, 0xcfd3936f
lea rax, [rbp + 0x90]
mov rcx, r13
nop word cs:[rax + rax]
cmp edx, 0xb5f2bc9a
je 0x140009754
cmp edx, 0x66e301a1
je 0x14000953a
cmp edx, 0xcfd3936f
jne 0x140009500
movzx edx, byte [rax]
inc rax
mov byte [rcx], dl
inc rcx
test dl, dl
mov edx, 0x66e301a1
mov r8d, 0xb5f2bc9a
cmove edx, r8d
jmp 0x140009500
mov edx, 0xcfd3936f
jmp 0x140009500
mov eax, dword [rbp + 0x260]
cmp eax, 4
mov eax, 0x399dd864
mov ecx, 0x1adf3253
cmovl eax, ecx
jmp 0x140008e00
sub rsp, 0x20
mov rcx, r12
call fcn.140023c30
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov eax, 0xcd1a4f68
mov edi, 4
jmp 0x140008e00
cmp byte [rbp + 0x297], 0
mov eax, 0x7a9fcae4
mov ecx, 0x1f239042
cmovne eax, ecx
jmp 0x140008e00
mov ecx, r15d
sub rsp, 0x20
call fcn.140024520
add rsp, 0x20
mov r12, rax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r13
mov rdx, rax
mov r8d, r15d
lea r9, [rbp + 0x290]
call qword [sym.imp.KERNEL32.dll_ReadFile]
add rsp, 0x30
test eax, eax
setne byte [rbp + 0x297]
mov eax, dword [0x140044c38]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x8b038c43
mov r8d, 0x80da3e96
cmove eax, r8d
cmp dword [0x140044c3c], 0xa
mov edx, 0x8b038c43
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, r8d
jmp 0x140008e00
mov eax, 0x36487404
mov cl, 1
mov dword [rbp + 0x264], ecx
mov edi, 1
jmp 0x140008e00
cmp esi, 2
mov eax, 0xcbd49fd4
mov ecx, 0xdf7b15ac
cmovl eax, ecx
jmp 0x140008e00
cmp dword [rbp + 0x260], 0
mov eax, 0xc02eb6ad
mov ecx, 0x170a0a5a
cmove eax, ecx
jmp 0x140008e00
mov rax, qword [rbp + 0x258]
mov eax, 0xb9ab1aa0
xor ebx, ebx
xor r14d, r14d
jmp 0x140008e00
mov eax, r14d
movdqu xmm0, xmmword [r12 + rax]
movdqu xmm1, xmmword [r12 + rax + 6]
movdqu xmm2, xmmword [rbp + 0x276]
pcmpeqb xmm2, xmm1
pcmpeqb xmm0, xmmword [rbp + 0x270]
pand xmm0, xmm2
pmovmskb eax, xmm0
cmp eax, 0xffff
mov eax, 0xd668dd18
mov ecx, 0xb85d800b
cmove eax, ecx
jmp 0x140008e00
mov eax, dword [0x140044c38]
mov ecx, dword [0x140044c3c]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x8b038c43
mov r9d, 0xb9f49740
cmovne r8d, r9d
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, r9d
cmp ecx, 0xa
cmovge eax, r8d
jmp 0x140008e00
sub rsp, 0x20
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov eax, ebx
xor al, 0xfe
test al, bl
mov eax, 0x38bb1d4b
mov ecx, 0x232fd9c7
cmove eax, ecx
jmp 0x140008e00
mov eax, 0xb2208453
mov edi, 4
jmp 0x140008e00
mov eax, 0xc02eb6ad
mov edi, 2
jmp 0x140008e00
movsxd rax, esi
lea rax, [rax + rax*4]
shl rax, 4
add rax, rbp
add rax, 0x1a0
mov edx, 0xf3927ec6
mov rcx, r13
jmp 0x140009780
mov edx, 0x9fbdda71
nop word [rax + rax]
cmp edx, 0x12a751c7
jg 0x1400097c0
cmp edx, 0x9fbdda70
jle 0x1400097f0
cmp edx, 0x9fbdda71
je 0x14000988e
cmp edx, 0xf3927ec6
jne 0x14000990c
cmp byte [rcx], 0
mov edx, 0x8df644c6
je 0x140009780
mov edx, 0x79c8d53c
jmp 0x140009780
cmp edx, 0x639d5ea4
jg 0x140009820
cmp edx, 0x12a751c8
je 0x1400098af
cmp edx, 0x58af0c72
jne 0x140009780
mov edx, 0x9fbdda71
jmp 0x140009780
cmp edx, 0x8df644c6
je 0x140009772
cmp edx, 0x99de2aa7
jne 0x140009780
inc rcx
mov edx, 0x12a751c8
jmp 0x140009780
cmp edx, 0x639d5ea5
je 0x140009902
cmp edx, 0x79c8d53c
jne 0x140009780
mov edx, dword [0x140044c30]
mov r8d, dword [0x140044c34]
lea r9d, [rdx + 1]
imul r9d, edx
not r9d
or r9d, 0xfffffffe
cmp r9d, 0xffffffff
sete dl
cmp r8d, 0xa
setl r10b
xor r10b, dl
mov edx, 0x12a751c8
mov r10d, 0x12a751c8
jne 0x140009879
mov r10d, 0x99de2aa7
cmp r9d, 0xffffffff
cmovne edx, r10d
cmp r8d, 0xa
cmovge edx, r10d
jmp 0x140009780
movzx r8d, byte [rax]
mov byte [rcx], r8b
mov edx, 0xb0622db4
test r8b, r8b
je 0x1400098a4
mov edx, 0x58af0c72
inc rax
inc rcx
jmp 0x140009780
mov edx, dword [0x140044c30]
lea r9d, [rdx + 1]
imul r9d, edx
mov r11d, r9d
xor r11d, 0xfffffffe
mov r8d, 0x639d5ea5
mov edx, 0x99de2aa7
mov r10d, 0x639d5ea5
test r11d, r9d
sete r9b
je 0x1400098e4
mov r10d, 0x99de2aa7
inc rcx
cmp dword [0x140044c34], 0xa
cmovl edx, r10d
setl r10b
xor r9b, r10b
cmovne edx, r8d
jmp 0x140009780
mov edx, 0xf3927ec6
jmp 0x140009780
cmp edx, 0xb0622db4
jne 0x140009780
sub rsp, 0x40
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
mov rcx, r13
mov edx, 0x80000000
mov r8d, 3
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
add rsp, 0x40
mov r13, rax
cmp rax, 0xffffffffffffffff
mov eax, 0xac217772
mov ecx, 0x12cd4b13
cmove eax, ecx
jmp 0x140008e00
cmp eax, 0x89c7ef13
jne 0x140008e00
mov eax, dword [rbp + 0x264]
and al, 1
lea rsp, [rbp + 0x298]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret