Function at 0x140369440
Capabilities:
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
push rbp
sub rsp, 0x158
mov r13, rcx
mov rax, qword [0x14194d6d8]
mov r12, rdx
xor rax, rsp
mov qword [rsp + 0x150], rax
mov rax, qword [r13 + 0x18]
test rax, rax
je 0x1403694e4
cmp rax, 1
jne 0x140369485
and byte [r12 + 0x293], 0xdf
jmp 0x1403694e4
cmp rax, 2
jne 0x140369496
or byte [r12 + 0x293], 0x20
jmp 0x1403694e4
mov edx, 0x23d
mov eax, 0x30
test byte [r12 + 0x290], 0x20
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
cmovne eax, edx
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rbx, qword [r13 + 0x30]
test rbx, rbx
je 0x140369507
lea rax, [rbx - 1]
cmp rax, 2
ja 0x14036ad46
mov byte [r12 + 0x27e], bl
mov rbx, qword [r13 + 0x30]
test rbx, rbx
je 0x140369567
movsx eax, byte [r12 + 0x27d]
and eax, 0xfffffffe
cmp eax, 2
je 0x140369567
mov al, byte [r12 + 0x293]
test al, 8
jne 0x140369567
test al, 0x10
jne 0x140369567
mov al, byte [r12 + 0x298]
test al, 1
jne 0x140369567
test al, 2
jne 0x140369567
test byte [r12 + 0x292], 0x80
jne 0x140369567
cmp byte [r12 + 0x27e], 3
je 0x14036955e
mov byte [r12 + 0x27c], 6
jmp 0x140369567
mov byte [r12 + 0x27c], 5
mov rax, qword [r13 + 0xe0]
test rax, 0xfffffffffffffffd
je 0x14036b3e1
cmp rax, 1
jne 0x14036958b
mov byte [r12 + 0x281], 0x27
jmp 0x14036959e
cmp rax, 3
jne 0x14036acfc
mov byte [r12 + 0x281], 0x22
mov rax, qword [r13 + 0xe8]
test rax, rax
je 0x140369634
cmp rax, 2
jne 0x1403695d5
mov bl, byte [r12 + 0x296]
mov al, byte [r12 + 0x290]
and bl, 0xfd
and al, 2
or bl, al
mov byte [r12 + 0x296], bl
jmp 0x140369634
cmp rax, 1
jne 0x1403695e6
and byte [r12 + 0x296], 0xfd
jmp 0x140369634
mov edx, 0x2f1
mov eax, 0x30
test byte [r12 + 0x290], 0x20
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
cmovne eax, edx
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test byte [r12 + 0x292], 0x80
jne 0x14036964f
mov al, byte [r12 + 0x298]
test al, 1
jne 0x14036964f
test al, 2
je 0x140369662
mov rcx, r12
mov rdx, r13
call fcn.14036b3f0
test eax, eax
jne 0x14036acc4
cmp dword [r12 + 0x238], 1
je 0x140369b4b
cmp dword [0x141a6ae3c], 0
je 0x1403696ab
mov rax, qword [r12 + 0x248]
test byte [r12 + 0x298], 0x80
je 0x140369697
cmp rax, 0xfffffffffffffffa
je 0x140369b4b
cmp rax, 1
je 0x140369b4b
cmp rax, 2
je 0x140369b4b
test byte [r12 + 0x292], 0x40
je 0x140369b4b
cmp byte [r12 + 0x27c], 0
jne 0x140369b4b
mov r14d, dword [r12 + 0x1e0]
cmp dword [0x141a58194], 0
jne 0x140369ab4
lea rcx, str.FOR_FMT_TERMINATOR
lea rdx, [rsp + 0x48]
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, eax
test rax, rax
jbe 0x140369732
cmp rax, 0x105
jae 0x14036970a
inc rax
jmp 0x140369737
xor ebx, ebx
lea rbp, [rsp + 0x48]
mov byte [rbp], bl
mov dword [0x141a58198], ebx
mov dword [0x141a5819c], ebx
mov dword [0x141a581a0], ebx
mov dword [0x141a58194], 1
jmp 0x140369767
mov byte [rsp + 0x48], 0
xor r15d, r15d
lea rbp, [rsp + 0x48]
mov dword [0x141a58198], r15d
mov dword [0x141a5819c], r15d
mov dword [0x141a581a0], r15d
mov dword [0x141a58194], 1
test rax, rax
je 0x140369b35
xor r15d, r15d
xor ebx, ebx
cmp byte [rbp], 0
je 0x140369b35
mov rdi, rbp
lea rsi, [0x140595c50]
mov dl, byte [rdi]
cmp dl, byte [rsi]
jne 0x1403697a2
test dl, dl
je 0x14036979e
mov dl, byte [rdi + 1]
cmp dl, byte [rsi + 1]
jne 0x1403697a2
add rdi, 2
add rsi, 2
test dl, dl
jne 0x140369780
xor eax, eax
jmp 0x1403697a7
sbb eax, eax
or eax, 1
test eax, eax
je 0x140369b25
mov rdi, rbp
lea rsi, [0x140595c4c]
mov dl, byte [rdi]
cmp dl, byte [rsi]
jne 0x1403697db
test dl, dl
je 0x1403697d7
mov dl, byte [rdi + 1]
cmp dl, byte [rsi + 1]
jne 0x1403697db
add rdi, 2
add rsi, 2
test dl, dl
jne 0x1403697b9
xor eax, eax
jmp 0x1403697e0
sbb eax, eax
or eax, 1
test eax, eax
je 0x140369b13
mov rdi, rbp
lea rsi, str.CRLF
mov dl, byte [rdi]
cmp dl, byte [rsi]
jne 0x140369814
test dl, dl
je 0x140369810
mov dl, byte [rdi + 1]
cmp dl, byte [rsi + 1]
jne 0x140369814
add rdi, 2
add rsi, 2
test dl, dl
jne 0x1403697f2
xor eax, eax
jmp 0x140369819
sbb eax, eax
or eax, 1
test eax, eax
je 0x140369b01
mov rax, rbp
mov r11d, 0x3b
mov rcx, rax
and ecx, 0xf
and rax, 0xfffffffffffffff0
pxor xmm2, xmm2
movd xmm1, r11d
punpcklbw xmm1, xmm1
punpcklbw xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqa xmm0, xmmword [rax]
pcmpeqb xmm2, xmm0
pcmpeqb xmm0, xmm1
pmovmskb r11d, xmm0
pmovmskb r10d, xmm2
shr r11d, cl
shr r10d, cl
test r11d, r11d
jne 0x140369872
test r10d, r10d
je 0x14036988d
jmp 0x140369889
bsf r11d, r11d
bsf r10d, r10d
je 0x140369881
cmp r11d, r10d
jg 0x140369889
add rax, rcx
add rax, r11
jmp 0x140369892
xor eax, eax
jmp 0x140369892
call fcn.14042b510
mov rsi, rax
test rsi, rsi
je 0x1403698f6
mov rcx, rbp
lea rdx, [0x140595c60]
call fcn.140440e58
cmp rbp, rax
je 0x14036ae6a
mov rcx, rbp
lea rdx, [0x140595c5c]
call fcn.140440e58
cmp rbp, rax
je 0x14036ae55
mov rcx, rbp
lea rdx, str.CRLF_
call fcn.140440e58
cmp rbp, rax
jne 0x140369a94
mov dword [0x141a58198], 8
mov r15d, 8
lea rbp, [rsi + 1]
mov rax, rbp
mov r11d, 0x3a
mov rcx, rax
and ecx, 0xf
and rax, 0xfffffffffffffff0
pxor xmm2, xmm2
movd xmm1, r11d
punpcklbw xmm1, xmm1
punpcklbw xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqa xmm0, xmmword [rax]
pcmpeqb xmm2, xmm0
pcmpeqb xmm0, xmm1
pmovmskb r11d, xmm0
pmovmskb r10d, xmm2
shr r11d, cl
shr r10d, cl
test r11d, r11d
jne 0x140369947
test r10d, r10d
je 0x140369962
jmp 0x14036995e
bsf r11d, r11d
bsf r10d, r10d
je 0x140369956
cmp r11d, r10d
jg 0x14036995e
add rax, rcx
add rax, r11
jmp 0x140369967
xor eax, eax
jmp 0x140369967
call fcn.14042b510
mov rsi, rax
test rsi, rsi
je 0x14036ae4a
mov rcx, rbp
lea rdx, [0x140595c70]
call fcn.140440e58
cmp rbp, rax
je 0x14036ae3f
mov rcx, rbp
lea rdx, [0x140595c6c]
call fcn.140440e58
cmp rbp, rax
je 0x14036ae34
mov rcx, rbp
lea rdx, str.CRLF:
call fcn.140440e58
cmp rbp, rax
jne 0x140369a94
mov r10d, 8
lea rbp, [rsi + 1]
xor esi, esi
cmp r10d, r15d
mov r15d, esi
cmovne r15d, r10d
cmove r10d, esi
cmp byte [rbp], 0
je 0x140369a94
xor r8d, r8d
mov esi, dword [rsp + 0x20]
xor r9d, r9d
movsx eax, byte [rbp]
test eax, eax
je 0x14036ae2b
test r8d, 0xfffffffd
je 0x14036ae17
cmp r8d, 1
jne 0x140369a1b
mov r11d, eax
and r11d, 0xfffffffe
cmp r11d, 0x2c
je 0x14036ad95
jmp 0x140369a21
cmp r8d, 3
jne 0x140369a94
cmp eax, 0x2c
je 0x14036ade8
lea r11d, [rax - 0x30]
cmp r11d, 9
ja 0x140369a94
lea esi, [rsi + rsi*4]
lea esi, [rax + rsi*2 - 0x30]
inc rbp
cmp rbx, 0x40
jl 0x1403699e9
mov dword [rsp + 0x20], esi
cmp byte [rbp], 0
jne 0x140369a94
mov al, byte [rbp - 1]
cmp al, 0x2c
je 0x140369a94
cmp al, 0x2d
je 0x140369a94
cmp r8d, 1
je 0x14036adb8
lea rbp, [0x140000000]
mov eax, esi
cmp eax, dword [rbp + rbx*4 + 0x1a57f60]
jl 0x140369a94
lea rbp, [0x140000000]
mov dword [0x141a5819c], r10d
mov dword [rbp + rbx*4 + 0x1a58080], eax
inc ebx
mov dword [0x141a581a0], ebx
jmp 0x140369abb
mov ecx, 0x60
xor edx, edx
xor eax, eax
mov dword [0x141a58198], eax
mov dword [0x141a5819c], eax
mov dword [0x141a581a0], eax
call fcn.140383960
mov r15d, dword [0x141a5819c]
test r15d, r15d
je 0x140369af8
movsxd rax, dword [0x141a581a0]
xor ebx, ebx
test rax, rax
jle 0x140369af8
lea rbp, [0x140000000]
cmp r14d, dword [rbp + rbx*4 + 0x1a57f60]
jl 0x140369af0
lea rbp, [0x140000000]
cmp r14d, dword [rbp + rbx*4 + 0x1a58080]
jle 0x140369b35
inc rbx
cmp rbx, rax
jl 0x140369ace
mov r15d, dword [0x141a58198]
jmp 0x140369b35
mov dword [0x141a58198], 8
mov r15d, 8
jmp 0x140369b35
mov dword [0x141a58198], 6
mov r15d, 6
jmp 0x140369b35
mov dword [0x141a58198], 7
mov r15d, 7
test r15d, r15d
je 0x140369b4b
mov byte [r12 + 0x27c], r15b
mov byte [r12 + 0x27e], 3
mov qword [r12 + 0xe0], 0
mov rax, qword [r13]
dec rax
cmp rax, 4
ja 0x140369df3
mov ebx, eax
lea rbp, [0x140000000]
movzx eax, word [rbp + rbx*2 + 0x595954]
lea rax, [rbp + rax + 0x369b83]
jmp rax
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0xd8]
cmp rax, 1
je 0x140369ecd
cmp rax, 3
jne 0x140369e65
test byte [r12 + 0x296], 1
jne 0x140369edc
lea rax, str.ACTION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp rax, 2
jne 0x140369edc
test byte [r12 + 0x291], 0x40
jne 0x140369e81
test byte [r12 + 0x296], 1
je 0x140369edc
lea rax, str.ACTION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test byte [r12 + 0x291], 0x40
je 0x14036ac78
mov rbx, qword [r13 + 8]
test rbx, rbx
je 0x140369f05
mov al, byte [r12 + 0x27f]
cmp al, byte [r13 + 0x10]
jne 0x14036ac2c
cmp rbx, qword [r12 + 0xb8]
jne 0x14036ac2c
mov rax, qword [r13 + 0x140]
cmp rax, 1
je 0x14036b3d4
cmp rax, 2
je 0x14036b390
mov rax, qword [r13 + 0x138]
cmp rax, 1
je 0x14036b36d
cmp rax, 2
je 0x14036b1a2
mov rax, qword [r13 + 0x50]
dec rax
cmp rax, 5
ja 0x14036a0cf
mov ebx, eax
lea rbp, [0x140000000]
movzx eax, word [rbp + rbx*2 + 0x595960]
lea rax, [rbp + rax + 0x369f67]
jmp rax
mov rax, qword [r13 + 0x68]
cmp rax, 1
je 0x14036a1aa
cmp rax, 2
jne 0x14036a14d
test byte [r12 + 0x292], 0x80
jne 0x14036a1b9
test byte [r12 + 0x290], 0x80
jne 0x14036a1b9
lea rax, str.FORM
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp rax, 4
jne 0x14036a1b9
test byte [r12 + 0x298], 2
jne 0x14036a1b9
lea rax, str.FORM
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test byte [r12 + 0x292], 0x40
je 0x14036abe0
cmp qword [r13 + 0x108], 0
je 0x14036a276
cmp dword [0x141a6ae3c], 0
je 0x14036a239
cmp qword [r13 + 0x110], 0
je 0x14036a276
test byte [r12 + 0x299], 1
jne 0x14036a276
lea rax, str.IOFOCUS
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x232
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0x78]
test rax, rax
je 0x14036a2d5
cmp rax, qword [r12 + 0x188]
je 0x14036a2d5
lea rax, str.MAXREC
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0x118]
cmp rax, 1
je 0x14036a3af
cmp rax, 3
jne 0x14036a347
test byte [r12 + 0x296], 1
jne 0x14036a3be
lea rax, str.MODE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp rax, 2
jne 0x14036a3be
test byte [r12 + 0x291], 0x40
jne 0x14036a363
test byte [r12 + 0x296], 1
je 0x14036a3be
lea rax, str.MODE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test byte [r12 + 0x291], 0x40
je 0x14036ab94
cmp qword [r13 + 0xa0], 0
je 0x14036a41f
test byte [r12 + 0x292], 1
je 0x14036a41f
lea rax, str.NOSHARED
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x67
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0x80]
cmp rax, 1
je 0x14036a4f6
cmp rax, 2
jne 0x14036a491
cmp byte [r12 + 0x27d], 2
je 0x14036a54d
lea rax, str.ORGANIZATION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp rax, 3
jne 0x14036a54d
cmp byte [r12 + 0x27d], 3
je 0x14036a54d
lea rax, str.ORGANIZATION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp byte [r12 + 0x27d], 1
je 0x14036a54d
lea rax, str.ORGANIZATION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0xf0]
test rax, rax
je 0x14036a604
cmp rax, 2
je 0x14036a604
xor ebp, ebp
test byte [r12 + 0x294], 8
jne 0x14036a578
xor ebx, ebx
jmp 0x14036a5b3
xor eax, eax
lea r8, [rsp + 0x3c]
mov r9d, 1
mov rcx, qword [r12 + 0x1a0]
mov edx, eax
mov qword [r8 - 4], rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x38], eax
mov esi, eax
cmp eax, 0xffffffff
je 0x14036b109
mov ebx, dword [rsp + 0x3c]
shl rbx, 0x20
or rbx, rsi
mov al, byte [r12 + 0x293]
test al, 8
jne 0x14036a5c7
test al, 0x10
je 0x14036aee9
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x2e
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp qword [r13 + 0x88], 0
je 0x14036a665
test byte [r12 + 0x291], 0x40
jne 0x14036a665
lea rax, str.READONLY
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x67
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0x90]
test rax, rax
je 0x14036a6c7
cmp rax, qword [r12 + 0x1d0]
je 0x14036a6c7
lea rax, str.RECL
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0x98]
test rax, rax
je 0x14036a790
cmp rax, 2
jne 0x14036a738
cmp byte [r12 + 0x27c], 4
je 0x14036a790
lea rax, str.RECORDTYPE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov bl, byte [r12 + 0x27c]
cmp bl, al
je 0x14036a790
lea rax, str.RECORDTYPE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rbx, qword [r13 + 0x120]
lea rax, [rbx - 1]
cmp rax, 1
jbe 0x14036b143
cmp rbx, 3
je 0x14036a8a5
cmp rbx, 4
jne 0x14036a828
test byte [r12 + 0x292], 1
jne 0x14036a7dc
mov al, byte [r12 + 0x298]
test al, 4
jne 0x14036a7dc
test al, 8
jne 0x14036a7dc
test al, 0x10
je 0x14036a7dc
test al, 0x20
je 0x14036a8dc
lea rax, str.SHARE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp rbx, 5
jne 0x14036a8dc
test byte [r12 + 0x292], 1
jne 0x14036a859
mov al, byte [r12 + 0x298]
test al, 4
jne 0x14036a859
test al, 8
jne 0x14036a859
test al, 0x10
jne 0x14036a859
test al, 0x20
jne 0x14036a8dc
lea rax, str.SHARE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test byte [r12 + 0x292], 1
jne 0x14036ab48
mov al, byte [r12 + 0x298]
test al, 4
jne 0x14036ab48
test al, 8
je 0x14036ab48
test al, 0x10
jne 0x14036ab48
test al, 0x20
jne 0x14036ab48
cmp qword [r13 + 0xa8], 0
je 0x14036a93d
test byte [r12 + 0x292], 1
jne 0x14036a93d
lea rax, str.SHARED
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x67
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0xb0]
cmp rax, 1
jbe 0x14036a9ad
cmp rax, 4
je 0x14036a9ad
cmp rax, 3
jne 0x14036a961
test byte [r12 + 0x292], 4
jne 0x14036a9ad
lea rax, str.STATUS
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp qword [r13 + 0x128], 0
je 0x14036aa49
cmp dword [0x141a6ae3c], 0
je 0x14036ab0b
mov rax, qword [r12 + 0x248]
test rax, 0xfffffffffffffffe
je 0x14036b132
cmp rax, 2
je 0x14036b132
mov ecx, dword [r12 + 0x1a0]
call fcn.14043d250
mov rbx, rax
test rbx, rbx
je 0x14036aa49
mov rdx, rbx
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x14036aa26
mov rax, rdx
add rdx, rcx
call fcn.14042af70
movsxd rdx, dword [r13 + 0x130]
cmp rax, rdx
jne 0x14036aabf
mov rax, rbx
mov rcx, qword [r13 + 0x128]
call fcn.14042b020
test eax, eax
jne 0x14036aabf
mov eax, dword [r13 + 0x160]
mov byte [r12 + 0x287], al
mov ebx, dword [r13 + 0x168]
mov byte [r12 + 0x289], bl
mov ebp, dword [r13 + 0x170]
mov byte [r12 + 0x28b], bpl
mov edx, dword [r13 + 0x178]
mov byte [r12 + 0x28d], dl
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
xor eax, eax
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.TITLE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x234
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.SHARE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.MODE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.FORM
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.ASSOCIATEVARIABLE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.ACTION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov edx, 0x2ef
mov eax, 0x30
test byte [r12 + 0x290], 0x20
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
cmovne eax, edx
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov edx, 0x2f2
mov eax, 0x30
test byte [r12 + 0x290], 0x20
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
cmovne eax, edx
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14043dac0
lea r11, [0x140000000]
mov dword [r11 + rbx*4 + 0x1a57f60], esi
cmp eax, 0x2d
jne 0x140369a21
mov r8d, 2
jmp 0x140369a3b
lea rax, [0x140000000]
mov rsi, rax
mov ebp, dword [rsp + 0x20]
mov dword [0x141a5819c], r10d
mov dword [rax + rbx*4 + 0x1a57f60], ebp
mov dword [rsi + rbx*4 + 0x1a58080], ebp
inc ebx
mov dword [0x141a581a0], ebx
jmp 0x140369abb
lea r8, [0x140000000]
cmp esi, dword [r8 + rbx*4 + 0x1a57f60]
jl 0x140369a94
lea r8, [0x140000000]
mov dword [r8 + rbx*4 + 0x1a58080], esi
inc rbx
mov r8d, r9d
jmp 0x140369a3b
lea esi, [rax - 0x30]
cmp esi, 9
ja 0x140369a94
inc r8d
jmp 0x140369a3b
mov dword [rsp + 0x20], esi
jmp 0x140369a4e
mov r10d, 6
jmp 0x1403699c1
mov r10d, 7
jmp 0x1403699c1
mov r10d, 7
jmp 0x1403699c5
mov dword [0x141a58198], 6
mov r15d, 6
jmp 0x1403698f2
mov dword [0x141a58198], 7
mov r15d, 7
jmp 0x1403698f2
mov eax, 0x78
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [r13 + 0xf0]
cmp rax, 1
jne 0x14036af42
test byte [r12 + 0x294], 8
je 0x14036af8a
xor eax, eax
lea r8, [rsp + 0x24]
mov r9d, 2
mov rcx, qword [r12 + 0x1a0]
mov edx, eax
mov qword [r8 - 4], rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x20], eax
mov esi, eax
cmp eax, 0xffffffff
je 0x14036b02a
mov ebp, dword [rsp + 0x24]
shl rbp, 0x20
or rbp, rsi
jmp 0x14036af80
cmp rax, 3
jne 0x14036af8a
xor eax, eax
lea r8, [rsp + 0x34]
xor r9d, r9d
mov rcx, qword [r12 + 0x1a0]
mov edx, eax
mov qword [r8 - 4], rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x30], eax
mov esi, eax
cmp eax, 0xffffffff
je 0x14036b08a
mov ebp, dword [rsp + 0x34]
shl rbp, 0x20
or rbp, rsi
cmp rbp, 0xffffffffffffffff
je 0x14036b053
cmp rbx, 0xffffffffffffffff
je 0x14036b053
cmp rbp, rbx
je 0x14036a604
mov qword [rsp + 0x28], rbx
mov edx, ebx
mov rcx, qword [r12 + 0x1a0]
lea r8, [rsp + 0x2c]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x28], eax
mov edx, eax
cmp eax, 0xffffffff
je 0x14036b0ea
mov eax, dword [rsp + 0x2c]
shl rax, 0x20
or rax, rdx
cmp rax, 0xffffffffffffffff
je 0x14036b0b3
lea rax, str.POSITION
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
mov eax, 0x68
add rsp, 0x158
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14036b049
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rbp, 0xffffffffffffffff
jmp 0x14036af80
mov rbp, qword [rsp + 0x20]
jmp 0x14036af80
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12 + 0x1a8], eax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
jmp 0x14036aeb1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14036b0a9
mov qword [rsp + 0x30], 0xffffffffffffffff
mov rbp, 0xffffffffffffffff
jmp 0x14036af80
mov rbp, qword [rsp + 0x30]
jmp 0x14036af80
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12 + 0x1a8], eax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
jmp 0x14036aeb1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14036b0ff
mov qword [rsp + 0x28], 0xffffffffffffffff
jmp 0x14036b0b3
mov rax, qword [rsp + 0x28]
jmp 0x14036afd4
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14036b128
mov qword [rsp + 0x38], 0xffffffffffffffff
mov rbx, 0xffffffffffffffff
jmp 0x14036a5b3
mov rbx, qword [rsp + 0x38]
jmp 0x14036a5b3
call fcn.14043d530
mov ecx, eax
call fcn.14043d250
jmp 0x14036a9f3
test byte [r12 + 0x292], 1
je 0x14036b16a
mov al, byte [r12 + 0x298]
test al, 4
je 0x14036b16a
test al, 8
jne 0x14036b16a
test al, 0x10
jne 0x14036b16a
test al, 0x20
je 0x14036a8dc
lea rax, str.SHARE
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
jmp 0x140369bc5
test byte [r12 + 0x299], 0x40
jne 0x140369f3b
test byte [r12 + 0x29c], 4
jne 0x140369f3b
mov r14, qword [r12 + 0xd0]
mov rdx, r14
xor edi, edi
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x14036b1f5
mov rax, rdx
add rdx, rcx
call fcn.14042af70
dec rax
mov rsi, rax
js 0x14036b212
mov bl, byte [rax + r14]
dec rax
cmp bl, 0x2e
je 0x14036b359
test rax, rax
jns 0x14036b1fd
mov rax, rsi
and rax, 0xfffffffffffffffe
cmp rax, 2
je 0x14036b229
lea rax, [rsi - 5]
cmp rax, 1
ja 0x14036b269
inc rsi
lea rcx, [rsp + 0x20]
mov rdx, r14
mov r8, rsi
call fcn.1404544c0
xor bl, bl
xor ebp, ebp
mov byte [rsp + rsi + 0x20], 0
lea r9, [0x1405956e0]
lea rax, [rsp + 0x20]
lea rdx, [r9 + rbp]
call fcn.14042b330
test eax, eax
je 0x14036b2bb
inc bl
add rbp, 0x10
cmp bl, 0x11
jl 0x14036b245
test byte [r12 + 0x293], 8
je 0x14036b283
test byte [r12 + 0x290], 4
jne 0x140369f3b
lea rax, str.BUFFERED
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
jmp 0x140369bc5
test edi, edi
je 0x14036b316
movsx ebx, byte [r14]
add ebx, 0xffffffbd
cmp ebx, 0x32
ja 0x14036b316
lea rdi, [0x140000000]
movzx eax, byte [rdi + rbx + 0x59596c]
lea rax, [rdi + rax + 0x36b269]
jmp rax
lea rax, [0x140000000]
mov rdi, rax
mov byte [rsi + r14], 0
mov sil, byte [r12 + 0x29a]
mov bl, byte [rax + rbp + 0x5956ec]
and sil, 0xfe
and bl, 1
or sil, bl
mov byte [r12 + 0x29a], sil
cmp byte [rdi + rbp + 0x5956ea], 0xff
je 0x14036b269
jmp 0x140369f3b
dec rsi
xor edi, edi
cmp rax, rsi
mov rsi, rax
setl dil
jmp 0x14036b212
test byte [r12 + 0x299], 0x40
jne 0x14036b283
test byte [r12 + 0x29c], 4
jne 0x14036b283
jmp 0x140369f3b
cmp qword [r12 + 0x30], 0
jne 0x140369f20
lea rax, str.ASYNCHRONOUS
mov qword [r12 + 0xe0], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x150], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x14036ad90
jmp 0x140369bc5
cmp qword [r12 + 0x30], 0
jne 0x14036b39c
jmp 0x140369f20
mov byte [r12 + 0x281], 0
jmp 0x14036959e