Function at 0x1403a5cea
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push r13
push r15
push rbp
sub rsp, 0x70
mov esi, edx
mov r13, rcx
mov r15, r9
mov qword [rsp + 0xb0], r8
mov ecx, esi
mov r8, r13
lea rdx, [rsp + 0x68]
mov r9d, 4
call fcn.1403bf1e0
mov ebp, eax
test ebp, ebp
je 0x1403a4667
lea rdi, [rsp + 0xc8]
mov qword [rsp + 0x48], rdi
movzx r11d, byte [rsp + 0xb3]
and r11d, 0x80
mov dword [rsp + 0x50], 0
shr r11d, 7
je 0x1403a45e0
mov edi, dword [rsp + 0xb4]
mov dword [rsp + 0x50], edi
mov dil, byte [rsp + 0x51]
and dil, 0x80
shr dil, 7
mov r10b, byte [rsp + 0xb0]
and r10b, 1
or r10b, dil
je 0x1403a4648
test r11d, r11d
je 0x1403a4639
test byte [rsp + 0x50], 0x10
je 0x1403a4639
mov rdi, qword [rsp + 0x48]
lea r10, [rdi + 8]
mov qword [rsp + 0x48], r10
add rdi, 0x10
mov r11, qword [r10 - 8]
mov qword [rsp + 0x48], rdi
mov rdi, qword [r10]
cmp byte [r11], 0x38
jne 0x1403a4639
cmp byte [r11 + 2], 0x4e
je 0x1403a503a
movzx eax, bp
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov ecx, ebp
mov edx, 2
mov r8d, esi
lea r9, str.unknown
call fcn.140383960
mov qword [rsp + 0x48], 0
mov r9b, byte [rsp + 0xb2]
shr r9b, 5
mov rsi, qword [rsp + 0x68]
and r9b, 1
mov al, byte [rsp + 0xb0]
mov dil, al
shl r9b, 2
and dil, 1
mov bpl, byte [rsi + 0x294]
and al, 2
and bpl, 0xfe
or bpl, dil
mov byte [rsi + 0x294], bpl
mov r11, qword [rsp + 0x68]
mov r10b, byte [r11 + 0x294]
and r10b, 0xfb
or r10b, r9b
mov byte [r11 + 0x294], r10b
mov rbp, qword [rsp + 0x68]
mov dil, byte [rbp + 0x294]
and dil, 0xfd
or dil, al
mov byte [rbp + 0x294], dil
movzx eax, byte [rsp + 0xb3]
mov edi, eax
mov rsi, qword [rsp + 0x68]
shr edi, 1
and edi, 1
movzx ebp, byte [rsi + 0x297]
shl edi, 3
and ebp, 0xfffffff7
or ebp, edi
mov byte [rsi + 0x297], bpl
xor ebp, ebp
mov rdi, qword [rsp + 0x68]
mov dword [rsp + 0x50], ebp
mov dword [rdi + 0x220], ebp
xor edi, edi
mov rbp, qword [rsp + 0x68]
mov qword [rbp + 0x118], rdi
mov rbp, qword [rsp + 0x68]
mov qword [rbp + 0x1c0], rdi
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29d], 0xf7
mov rsi, qword [rsp + 0x68]
mov rbp, qword [rsi + 0x168]
mov qword [rsi + 0x160], rbp
test eax, 0x80
jne 0x1403a475e
mov rbp, qword [rsp + 0x68]
jmp 0x1403a491a
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0xb4]
mov rbp, qword [rsp + 0x68]
mov dword [rsp + 0x50], eax
test rbp, rbp
je 0x1403a4911
test al, 0x20
je 0x1403a4794
or byte [rbp + 0x29b], 0x40
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29d], 0xbf
mov sil, byte [rsp + 0x51]
test sil, 0x20
je 0x1403a47b2
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29d], 0x40
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29d], 0x7f
test sil, 0x40
je 0x1403a47d0
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29d], 0x80
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29e], 0xef
test sil, 0x80
je 0x1403a47ee
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29e], 0x10
mov rbp, qword [rsp + 0x68]
mov sil, byte [rsp + 0x52]
and byte [rbp + 0x29e], 0xdf
test sil, 1
je 0x1403a4811
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29e], 0x20
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29e], 0xbf
test sil, 2
je 0x1403a482f
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29e], 0x40
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29e], 0x7f
test sil, 4
je 0x1403a484d
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29e], 0x80
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29f], 0xfe
test sil, 8
je 0x1403a486b
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x29f], 1
test al, 0x10
je 0x1403a490c
mov rax, qword [rsp + 0x48]
lea rsi, [rax + 8]
mov qword [rsp + 0x48], rsi
add rax, 0x10
mov rbp, qword [rsi - 8]
mov qword [rsp + 0x48], rax
mov rsi, qword [rsi]
cmp byte [rbp], 0x38
je 0x1403a5ae3
cmp byte [rbp], 0xb
je 0x1403a573c
cmp byte [rbp], 0x38
je 0x1403a564c
cmp byte [rbp], 0x38
je 0x1403a5588
cmp byte [rbp], 0x38
je 0x1403a5496
cmp byte [rbp], 0x38
je 0x1403a5365
cmp byte [rbp], 0x38
je 0x1403a52a1
cmp byte [rbp], 0x38
je 0x1403a518e
cmp byte [rbp], 1
je 0x1403a490c
mov ecx, 8
mov edx, 2
lea r8, str.for_wseq.c
mov r9d, 0x23f
mov qword [rsp + 0x48], 0
call fcn.140383960
mov rbp, qword [rsp + 0x68]
mov qword [rsp + 0x48], 0
test byte [rbp + 0x291], 0x20
je 0x1403a5ee8
test byte [rbp + 0x291], 0x40
je 0x1403a49d1
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1403a5b25
test byte [rax + 0x74], 2
je 0x1403a498d
mov edx, 0x2f
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a497c
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x2f
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [rbp + 0x29e]
mov rsi, rsp
and eax, 0x10
mov rcx, rbp
movzx r8d, byte [rbp + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x2f
mov dword [rsi + 0x20], 0x2f
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
test byte [rbp + 0x292], 0x40
je 0x1403a4a7e
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1403a5b46
test byte [rax + 0x74], 2
je 0x1403a4a3a
mov dword [rax + 0x68], 0x100
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x30]
mov dword [rdx + 0x6c], 0x1f
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx + 0xd8]
test rax, rax
je 0x1403a4a29
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x100
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [rbp + 0x29e]
mov rsi, rsp
and eax, 0x10
mov rcx, rbp
movzx r8d, byte [rbp + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x100
mov dword [rsi + 0x20], 0x1f
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov sil, byte [rbp + 0x293]
test sil, 8
je 0x1403a4b50
test byte [rbp + 0x290], 4
jne 0x1403a4b50
test rbp, rbp
je 0x1403a4ab0
movzx eax, word [rbp + 0x27a]
test eax, eax
jg 0x1403a4b50
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1403a5b6a
test byte [rax + 0x74], 2
je 0x1403a4b0c
mov dword [rax + 0x68], 0x103
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x30]
mov dword [rdx + 0x6c], 0x1f
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx + 0xd8]
test rax, rax
je 0x1403a4afb
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x103
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [rbp + 0x29e]
mov rsi, rsp
and eax, 0x10
mov rcx, rbp
movzx r8d, byte [rbp + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x103
mov dword [rsi + 0x20], 0x1f
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov al, byte [rbp + 0x29b]
test al, 2
jne 0x1403a4b6a
test al, 4
jne 0x1403a4b6a
test al, 0x10
jne 0x1403a4b6a
test al, 0x20
je 0x1403a4c07
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1403a5b8e
test byte [rax + 0x74], 2
je 0x1403a4bc3
mov edx, 0x72
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a4bb2
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x72
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [rbp + 0x29e]
mov rsi, rsp
and eax, 0x10
mov rcx, rbp
movzx r8d, byte [rbp + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x72
mov dword [rsi + 0x20], 0x72
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
test sil, 4
je 0x1403a4d07
mov rax, qword [rbp + 0x160]
cmp rax, qword [rbp + 0x168]
je 0x1403a4cda
test byte [rbp + 0x295], 4
jne 0x1403a5ca3
mov rdx, qword [rbp + 0x160]
lea r8, [rsp + 0x64]
mov rcx, qword [rbp + 0x1a0]
xor r9d, r9d
mov qword [r8 - 4], rdx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x60], eax
mov ebp, eax
cmp eax, 0xffffffff
je 0x1403a5c81
mov eax, dword [rsp + 0x64]
shl rax, 0x20
or rax, rbp
cmp rax, 0xffffffffffffffff
je 0x1403a5baf
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0x160]
mov qword [rbp + 0x170], rax
mov r9, qword [rsp + 0x68]
mov rsi, qword [r9 + 0x160]
mov qword [r9 + 0x168], rsi
mov r10, qword [rsp + 0x68]
mov qword [r10 + 0x178], rdi
mov rax, qword [rsp + 0x68]
mov r11, qword [rax + 0x178]
mov qword [rax + 0x1b8], r11
mov rax, qword [rsp + 0x68]
and byte [rax + 0x295], 0xfd
mov rax, qword [rsp + 0x68]
mov qword [rax + 0x140], rdi
mov rbp, qword [rsp + 0x68]
jmp 0x1403a4d02
mov rax, qword [rbp + 0x178]
test rax, rax
je 0x1403a4d07
add qword [rbp + 0x170], rax
mov rax, qword [rsp + 0x68]
mov qword [rax + 0x178], 0
mov rbp, qword [rsp + 0x68]
test rbp, rbp
je 0x1403a4d16
movzx eax, word [rbp + 0x27a]
test eax, eax
jg 0x1403a4f7c
mov rcx, rbp
xor edx, edx
call fcn.1403d36d0
test eax, eax
je 0x1403a4db6
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1403a5e7c
test byte [rax + 0x74], 2
je 0x1403a4d72
mov edx, 0x26
mov dword [rax + 0x68], edx
mov rax, qword [rbp + 0x30]
mov dword [rax + 0x6c], edx
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a4d61
mov qword [rax + 8], rdi
mov qword [rbp + 0xd8], rdi
mov eax, 0x26
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [rbp + 0x29e]
mov rsi, rsp
and eax, 0x10
mov rcx, rbp
movzx r8d, byte [rbp + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x26
mov dword [rsi + 0x20], 0x26
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movsx esi, byte [rbp + 0x27c]
dec esi
cmp esi, 7
ja 0x1403a4ec1
lea r10, [0x140000000]
movzx eax, byte [r10 + rsi + 0x59d4b4]
lea rax, [r10 + rax + 0x3a4de2]
jmp rax
mov ecx, 8
mov edx, 2
lea r8, str.for_wseq.c
mov r9d, 0x2a2
call fcn.140383960
mov rax, qword [rsp + 0x68]
lea r8, [rsp + 0x54]
mov qword [r8 - 4], rdi
mov edx, edi
mov r9d, 1
and byte [rax + 0x297], 0xfe
mov rbp, qword [r8 + 0x14]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x50], eax
mov ebp, eax
cmp eax, 0xffffffff
je 0x1403a5ebf
mov esi, dword [rsp + 0x54]
shl rsi, 0x20
or rsi, rbp
mov rax, qword [rsp + 0x68]
mov qword [rax + 0x1f8], rsi
mov rsi, qword [rsp + 0x68]
test byte [rsi + 0x29c], 4
je 0x1403a4f60
mov rax, qword [rsi + 0x168]
mov rbp, qword [rsi + 0x1f8]
cmp rax, rbp
cmova rbp, rax
mov qword [rsi + 0x1f8], rbp
mov rsi, qword [rsp + 0x68]
mov qword [rsi + 0x200], 0
mov rax, qword [rsp + 0x68]
and byte [rax + 0x297], 0xfd
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x297], 0xbf
mov rax, qword [rsp + 0x68]
mov qword [rax + 0x110], 0
mov rbp, qword [rsp + 0x68]
or byte [rbp + 0x297], 0x20
mov rbp, qword [rsp + 0x68]
cmp dword [rbp + 0x238], 7
jne 0x1403a4fe1
test byte [rbp + 0x298], 0x40
je 0x1403a4fe1
test rbp, rbp
je 0x1403a4fc6
movzx eax, word [rbp + 0x27a]
test eax, eax
jg 0x1403a4fe1
mov rax, qword [rbp + 0x80]
mov byte [rax], 0x4b
mov rbp, qword [rsp + 0x68]
inc qword [rbp + 0x80]
mov rbp, qword [rsp + 0x68]
cmp dword [rbp + 0x238], 7
jne 0x1403a4ff6
or byte [rbp + 0x299], 0x10
mov rbp, qword [rsp + 0x68]
mov dword [rbp + 0x250], 0xffffffff
mov rcx, r13
mov rax, qword [rsp + 0x68]
mov rdx, r15
mov r8, qword [rsp + 0xc0]
mov dword [rax + 0x258], 0
mov rbp, qword [rsp + 0x68]
and byte [rbp + 0x29a], 0xdf
call fcn.1403a6310
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov ecx, esi
lea rdx, [rsp + 0x48]
call fcn.1403c1480
test eax, eax
jne 0x1403a4639
mov r10, qword [rsp + 0x48]
xor esi, esi
mov r15b, byte [rsp + 0xb0]
and r15b, 1
mov qword [r10 + 0x118], rsi
mov r11, qword [rsp + 0x48]
mov qword [r11 + 0x1c0], rsi
mov r13, qword [rsp + 0x48]
and byte [r13 + 0x29d], 0xf7
mov r11, qword [rsp + 0x48]
mov r10b, byte [r11 + 0x294]
and r10b, 0xfe
or r10b, r15b
mov byte [r11 + 0x294], r10b
mov r10b, byte [rsp + 0x51]
shr r10b, 3
mov r13, qword [rsp + 0x48]
and r10b, 0xf0
mov r11b, byte [r13 + 0x29e]
and r11b, 0xef
or r11b, r10b
mov byte [r13 + 0x29e], r11b
mov r11, qword [rsp + 0x48]
mov r10, qword [rdi]
mov qword [r11 + 0x1c0], r10
mov r10, qword [rsp + 0x48]
mov rdi, qword [rdi + 8]
mov qword [r10 + 0x118], rdi
mov r9, qword [rsp + 0x48]
mov rdi, qword [r9 + 0x30]
test rdi, rdi
je 0x1403a5176
test byte [rdi + 0x74], 2
je 0x1403a5138
mov dword [rdi + 0x68], ebp
mov rdi, qword [rsp + 0x48]
mov r10, qword [rdi + 0x30]
mov dword [r10 + 0x6c], ebp
mov r11, qword [rsp + 0x48]
mov rdi, qword [r11 + 0xd8]
test rdi, rdi
je 0x1403a512a
mov qword [rdi + 8], rsi
mov rdi, qword [rsp + 0x48]
mov qword [rdi + 0xd8], rsi
mov eax, ebp
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx esi, byte [r9 + 0x29e]
mov rdi, rsp
and esi, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr esi, 1
and r8d, 7
or r8d, esi
mov r9d, ebp
mov dword [rdi + 0x20], ebp
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
xor ecx, ecx
mov edx, ebp
mov r8d, ebp
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x53
jne 0x1403a48e1
mov rax, rsp
mov r8d, 0x53
mov rcx, qword [rsi + 8]
lea r9, [rsp + 0x58]
mov edx, dword [rsi]
mov dword [rax + 0x20], 3
call fcn.14036c700
test eax, eax
jne 0x1403a51f4
mov rsi, qword [rsp + 0x68]
add rbp, 4
mov al, byte [rsi + 0x28b]
mov byte [rsi + 0x28c], al
mov r9, qword [rsp + 0x68]
or byte [r9 + 0x29b], 0x20
mov r11, qword [rsp + 0x68]
mov r10d, dword [rsp + 0x58]
mov byte [r11 + 0x28b], r10b
jmp 0x1403a48e1
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a5286
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a523c
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx ebp, byte [r9 + 0x29e]
mov rsi, rsp
and ebp, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr ebp, 1
and r8d, 7
or r8d, ebp
mov r9d, eax
mov dword [rsi + 0x20], eax
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov ecx, 1
mov edx, eax
mov r8d, eax
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x51
jne 0x1403a48d7
mov rax, rsp
mov r8d, 0x51
mov rcx, qword [rsi + 8]
lea r9, [rsp + 0x58]
mov edx, dword [rsi]
mov dword [rax + 0x20], 3
call fcn.14036c700
test eax, eax
jne 0x1403a530d
mov r9, qword [rsp + 0x68]
add rbp, 4
add rsi, 0x10
mov al, byte [r9 + 0x287]
mov byte [r9 + 0x288], al
mov r10, qword [rsp + 0x68]
or byte [r10 + 0x29b], 0x10
mov rax, qword [rsp + 0x68]
mov r11d, dword [rsp + 0x58]
mov byte [rax + 0x287], r11b
jmp 0x1403a48d7
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a5286
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a5359
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x3c
jne 0x1403a48cd
mov al, byte [rsp + 0x52]
test al, 8
je 0x1403a537d
test al, 2
jne 0x1403a5387
jmp 0x1403a5393
test byte [rsp + 0xb2], 4
jne 0x1403a5393
mov ecx, 0x2fc
xor edx, edx
call fcn.140383960
mov rax, rsp
mov r8d, 0x3c
mov rcx, qword [rsi + 8]
lea r9, [rsp + 0x58]
mov edx, dword [rsi]
mov dword [rax + 0x20], 3
call fcn.14036c700
test eax, eax
jne 0x1403a543e
mov r10, qword [rsp + 0x68]
mov al, byte [r10 + 0x296]
mov r9b, al
shr al, 1
and r9b, 0xfb
and al, 1
shl al, 2
or r9b, al
mov byte [r10 + 0x296], r9b
mov r11, qword [rsp + 0x68]
or byte [r11 + 0x29b], 8
mov rax, qword [rsp + 0x58]
cmp rax, 2
jne 0x1403a5421
mov al, byte [rsp + 0xb2]
shr al, 2
mov r10, qword [rsp + 0x68]
and al, 1
add al, al
mov r9b, byte [r10 + 0x296]
and r9b, 0xfd
or r9b, al
mov byte [r10 + 0x296], r9b
jmp 0x1403a5431
cmp rax, 1
mov rax, qword [rsp + 0x68]
and byte [rax + 0x296], 0xfd
add rbp, 4
add rsi, 0x10
jmp 0x1403a48cd
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a5286
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a548a
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x3b
jne 0x1403a48c3
mov rax, rsp
mov r8d, 0x3b
mov rcx, qword [rsi + 8]
lea r9, [rsp + 0x58]
mov edx, dword [rsi]
mov dword [rax + 0x20], 3
call fcn.14036c700
test eax, eax
jne 0x1403a5530
mov r9, qword [rsp + 0x68]
mov al, byte [r9 + 0x281]
mov byte [r9 + 0x282], al
mov r10, qword [rsp + 0x68]
or byte [r10 + 0x29b], 4
mov rax, qword [rsp + 0x58]
cmp rax, 2
je 0x1403a5517
cmp rax, 1
jne 0x1403a5503
mov rax, qword [rsp + 0x68]
mov byte [rax + 0x281], 0x27
jmp 0x1403a5523
cmp rax, 3
jne 0x1403a5517
mov rax, qword [rsp + 0x68]
mov byte [rax + 0x281], 0x22
jmp 0x1403a5523
mov rax, qword [rsp + 0x68]
mov byte [rax + 0x281], 0
add rbp, 4
add rsi, 0x10
jmp 0x1403a48c3
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a5286
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a557c
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x52
jne 0x1403a48b9
mov rax, rsp
mov r8d, 0x52
mov rcx, qword [rsi + 8]
lea r9, [rsp + 0x58]
mov edx, dword [rsi]
mov dword [rax + 0x20], 3
call fcn.14036c700
test eax, eax
jne 0x1403a55f4
mov r9, qword [rsp + 0x68]
add rbp, 4
add rsi, 0x10
mov al, byte [r9 + 0x289]
mov byte [r9 + 0x28a], al
mov r10, qword [rsp + 0x68]
or byte [r10 + 0x29b], 2
mov rax, qword [rsp + 0x68]
mov r11d, dword [rsp + 0x58]
mov byte [rax + 0x289], r11b
jmp 0x1403a48b9
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a5286
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a5640
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 6
jne 0x1403a48af
mov rax, rsp
mov r8d, 6
mov rcx, qword [rsi + 8]
lea r9, [rsp + 0x58]
mov edx, dword [rsi]
mov dword [rax + 0x20], 3
call fcn.14036c700
test eax, eax
jne 0x1403a56e4
mov r10, qword [rsp + 0x68]
mov al, byte [r10 + 0x293]
mov r9b, al
shr al, 5
and r9b, 0xbf
and al, 1
shl al, 6
or r9b, al
mov byte [r10 + 0x293], r9b
mov r11, qword [rsp + 0x68]
or byte [r11 + 0x29b], 1
mov rax, qword [rsp + 0x58]
cmp rax, 1
je 0x1403a56cb
cmp rax, 2
jne 0x1403a56cb
mov rax, qword [rsp + 0x68]
or byte [rax + 0x293], 0x20
jmp 0x1403a56d7
mov rax, qword [rsp + 0x68]
and byte [rax + 0x293], 0xdf
add rbp, 4
add rsi, 0x10
jmp 0x1403a48af
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a5286
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a5730
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x4f
jne 0x1403a48a5
mov r9, qword [rsp + 0x68]
test byte [r9 + 0x293], 4
jne 0x1403a58b8
test byte [r9 + 0x291], 0x20
jne 0x1403a580e
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x1403a599d
test byte [rax + 0x74], 2
je 0x1403a57c0
mov edx, 0x6d
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a57af
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x6d
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [r9 + 0x29e]
mov rbp, rsp
and eax, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x6d
mov qword [rsp + 0x48], 0
mov dword [rbp + 0x20], 0x6d
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x1403a59c4
test byte [rax + 0x74], 2
je 0x1403a586a
mov dword [rax + 0x68], 0x6e
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x30]
mov dword [rdx + 0x6c], 0x1f
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx + 0xd8]
test rax, rax
je 0x1403a5859
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x6e
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [r9 + 0x29e]
mov rbp, rsp
and eax, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x6e
mov qword [rsp + 0x48], 0
mov dword [rbp + 0x20], 0x1f
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
test r9, r9
je 0x1403a58c9
movzx eax, word [r9 + 0x27a]
test eax, eax
jg 0x1403a58f6
mov rax, qword [rsi]
add rsi, 8
dec rax
mov qword [r9 + 0x160], rax
mov r9, qword [rsp + 0x68]
cmp qword [r9 + 0x160], 0
jl 0x1403a59ee
add rbp, 4
jmp 0x1403a48a5
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x1403a5abc
test byte [rax + 0x74], 2
je 0x1403a594f
mov edx, 0x10f
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a593e
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x10f
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [r9 + 0x29e]
mov rbp, rsp
and eax, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x10f
mov qword [rsp + 0x48], 0
mov dword [rbp + 0x20], 0x10f
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov edx, 0x6d
mov ecx, 1
mov r8d, edx
mov qword [rsp + 0x48], 0
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov ecx, 1
mov edx, 0x6e
mov r8d, 0x1f
mov qword [rsp + 0x48], 0
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x1403a5a95
test byte [rax + 0x74], 2
je 0x1403a5a47
mov edx, 0x6f
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a5a36
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x6f
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [r9 + 0x29e]
mov rbp, rsp
and eax, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x6f
mov qword [rsp + 0x48], 0
mov dword [rbp + 0x20], 0x6f
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov edx, 0x6f
mov ecx, 1
mov r8d, edx
mov qword [rsp + 0x48], 0
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov edx, 0x10f
mov ecx, 1
mov r8d, edx
mov qword [rsp + 0x48], 0
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
cmp byte [rbp + 2], 0x4e
jne 0x1403a489b
mov r9, qword [rsp + 0x68]
add rbp, 4
mov rax, qword [rsi]
mov qword [r9 + 0x1c0], rax
mov r11, qword [rsp + 0x68]
mov r10, qword [rsi + 8]
add rsi, 0x10
mov qword [r11 + 0x118], r10
mov rax, qword [rsp + 0x68]
and byte [rax + 0x29d], 0xf7
jmp 0x1403a489b
mov edx, 0x2f
mov ecx, 1
mov r8d, edx
mov r9, rbp
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov ecx, 1
mov edx, 0x100
mov r8d, 0x1f
mov r9, rbp
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov ecx, 1
mov edx, 0x103
mov r8d, 0x1f
mov r9, rbp
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov edx, 0x72
mov ecx, 1
mov r8d, edx
mov r9, rbp
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [rsp + 0x68]
mov dword [rdx + 0x1a8], eax
mov r9, qword [rsp + 0x68]
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x1403a5c63
test byte [rax + 0x74], 2
je 0x1403a5c1e
mov edx, 0x26
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a5c0d
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x26
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
movzx eax, byte [r9 + 0x29e]
mov rbp, rsp
and eax, 0x10
mov rcx, r9
movzx r8d, byte [r9 + 0x294]
mov edx, 0xffffffff
shr eax, 1
and r8d, 7
or r8d, eax
mov r9d, 0x26
mov dword [rbp + 0x20], 0x26
call fcn.1403be580
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov edx, 0x26
mov ecx, 1
mov r8d, edx
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1403a5c99
mov qword [rsp + 0x60], 0xffffffffffffffff
jmp 0x1403a5baf
mov rax, qword [rsp + 0x60]
jmp 0x1403a4c6c
mov rdx, qword [rbp + 0x78]
mov rsi, qword [rbp + 0x88]
sub rsi, rdx
test rbp, rbp
je 0x1403a5cc2
mov rax, qword [rbp + 0x240]
test rax, rax
jne 0x1403a5cc7
mov eax, 0x20000
cmp rsi, rax
jbe 0x1403a5d88
mov rax, rsi
test rbp, rbp
je 0x1403a5ce4
mov r8, qword [rbp + 0x240]
test r8, r8
jne 0x1403a5cea
mov r8d, 0x20000
mov qword [rsp + 0x30], rbx
mov rbx, r8
mov qword [rsp + 0x38], r12
mov r12, rax
mov qword [rsp + 0x40], r14
mov r14, rdx
mov r10, rsp
mov rdx, r14
mov rcx, qword [rbp + 0x1a0]
mov r8d, ebx
lea r9, [rsp + 0x4c]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1403a5d3f
mov rbx, qword [rsp + 0x30]
mov eax, 0xffffffff
mov r12, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
jmp 0x1403a5db9
mov r11d, dword [rsp + 0x4c]
add r14, r11
sub r12, r11
mov eax, 1
test rbp, rbp
je 0x1403a5d60
mov r10, qword [rbp + 0x240]
test r10, r10
jne 0x1403a5d66
mov r10d, 0x20000
cmp r12, r10
cmovb rbx, r12
test r12, r12
je 0x1403a5d77
test r11, r11
ja 0x1403a5d02
mov rbx, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
jmp 0x1403a5db9
mov rax, rsp
mov r8d, esi
mov rcx, qword [rbp + 0x1a0]
lea r9, [rsp + 0x4c]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r10d, 0xffffffff
test eax, eax
mov eax, 1
cmove eax, r10d
mov r11, qword [rbp + 0x78]
mov r10, qword [rbp + 0x1c8]
mov qword [rbp + 0x88], r11
add r11, r10
mov r10, qword [rbp + 0x170]
add rsi, r10
and byte [rbp + 0x295], 0xfb
mov qword [rbp + 0x90], r11
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x168], rsi
cmp eax, 0xffffffff
je 0x1403a5e0e
mov rbp, qword [rsp + 0x68]
jmp 0x1403a4c32
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x1a8], eax
mov r9, qword [rsp + 0x68]
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x1403a5c63
test byte [rax + 0x74], 2
je 0x1403a5c1e
mov edx, 0x26
mov dword [rax + 0x68], edx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x30]
mov dword [rcx + 0x6c], edx
mov rbp, qword [rsp + 0x68]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x1403a5e6b
mov qword [rax + 8], rdi
mov rax, qword [rsp + 0x68]
mov qword [rax + 0xd8], rdi
mov eax, 0x26
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov edx, 0x26
mov ecx, 1
mov r8d, edx
mov r9, rbp
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1403a5ede
mov qword [rsp + 0x50], 0xffffffffffffffff
mov rsi, 0xffffffffffffffff
jmp 0x1403a4f25
mov rsi, qword [rsp + 0x50]
jmp 0x1403a4f25
mov r10b, byte [rsp + 0xb0]
shr r10b, 7
mov r11b, byte [rbp + 0x290]
and r11b, 0xfe
or r11b, r10b
mov r10b, byte [rsp + 0xb2]
mov al, r10b
shr al, 2
mov byte [rbp + 0x290], r11b
and al, 1
mov rsi, qword [rsp + 0x68]
add al, al
mov r9b, byte [rsp + 0xb3]
mov bpl, byte [rsi + 0x290]
and bpl, 0xfd
or bpl, al
mov al, r9b
shr al, 3
and al, 1
mov byte [rsi + 0x290], bpl
mov bpl, al
shl bpl, 2
mov r11, qword [rsp + 0x68]
mov sil, byte [r11 + 0x290]
and sil, 0xfb
or sil, bpl
mov bpl, r9b
shr bpl, 2
and bpl, 1
shl bpl, 3
mov byte [r11 + 0x290], sil
mov r11, qword [rsp + 0x68]
mov sil, byte [r11 + 0x290]
and sil, 0xf7
or sil, bpl
mov bpl, r9b
shr bpl, 6
and bpl, 1
shl bpl, 4
mov byte [r11 + 0x290], sil
mov r11, qword [rsp + 0x68]
mov sil, byte [r11 + 0x290]
and sil, 0xef
or sil, bpl
mov bpl, al
shl bpl, 5
shl al, 3
mov byte [r11 + 0x290], sil
mov r11, qword [rsp + 0x68]
mov sil, byte [r11 + 0x290]
and sil, 0xdf
or sil, bpl
mov bpl, r9b
shr bpl, 4
shr r9b, 5
and bpl, 1
and r9b, 1
shl bpl, 2
mov byte [r11 + 0x290], sil
mov r11, qword [rsp + 0x68]
mov sil, byte [r11 + 0x299]
and sil, 0xfb
or sil, bpl
mov byte [r11 + 0x299], sil
mov rsi, qword [rsp + 0x68]
mov bpl, byte [rsi + 0x299]
and bpl, 0xf7
or bpl, al
mov al, r9b
shl al, 6
shl r9b, 7
mov byte [rsi + 0x299], bpl
mov rsi, qword [rsp + 0x68]
mov bpl, byte [rsi + 0x290]
and bpl, 0xbf
or bpl, al
mov byte [rsi + 0x290], bpl
mov rbp, qword [rsp + 0x68]
mov sil, byte [rsp + 0x50]
mov al, byte [rbp + 0x290]
and al, 0x7f
or al, r9b
mov byte [rbp + 0x290], al
mov al, sil
mov r9, qword [rsp + 0x68]
and al, 1
mov bpl, byte [r9 + 0x291]
and bpl, 0xfe
or bpl, al
mov al, sil
shr al, 1
and al, 1
shl al, 5
mov byte [r9 + 0x291], bpl
mov r9, qword [rsp + 0x68]
mov bpl, byte [r9 + 0x299]
and bpl, 0xdf
or bpl, al
mov al, sil
shr al, 2
and sil, 0x80
mov byte [r9 + 0x299], bpl
and al, 3
mov r9, qword [rsp + 0x68]
add al, al
mov bpl, byte [r9 + 0x291]
and bpl, 0xf9
or bpl, al
mov al, byte [rsp + 0x51]
mov byte [r9 + 0x291], bpl
mov bpl, al
shr bpl, 1
and bpl, 1
shl bpl, 3
mov r11, qword [rsp + 0x68]
mov r9b, byte [r11 + 0x29c]
and r9b, 0xf7
or r9b, bpl
mov byte [r11 + 0x29c], r9b
mov r9, qword [rsp + 0x68]
mov bpl, byte [r9 + 0x29b]
and bpl, 0x7f
or bpl, sil
mov byte [r9 + 0x29b], bpl
mov bpl, al
shr bpl, 6
shl bpl, 7
mov r9, qword [rsp + 0x68]
mov sil, byte [r9 + 0x29d]
and sil, 0x7f
or sil, bpl
mov bpl, al
shr bpl, 3
mov byte [r9 + 0x29d], sil
and bpl, 0xf0
mov r9, qword [rsp + 0x68]
mov sil, byte [r9 + 0x29e]
and sil, 0xef
or sil, bpl
mov bpl, byte [rsp + 0x52]
mov byte [r9 + 0x29e], sil
mov sil, bpl
and sil, 1
shl sil, 5
mov r11, qword [rsp + 0x68]
mov r9b, byte [r11 + 0x29e]
and r9b, 0xdf
or r9b, sil
mov sil, bpl
shr sil, 1
and sil, 1
shl sil, 6
mov byte [r11 + 0x29e], r9b
mov r11, qword [rsp + 0x68]
mov r9b, byte [r11 + 0x29e]
and r9b, 0xbf
or r9b, sil
mov sil, bpl
shr sil, 2
shr bpl, 3
shl sil, 7
mov byte [r11 + 0x29e], r9b
and bpl, 1
mov r11, qword [rsp + 0x68]
mov r9b, byte [r11 + 0x29e]
and r9b, 0x7f
or r9b, sil
mov byte [r11 + 0x29e], r9b
mov r9, qword [rsp + 0x68]
mov sil, byte [r9 + 0x29f]
and sil, 0xfe
or sil, bpl
mov byte [r9 + 0x29f], sil
mov rsi, qword [rsp + 0x68]
mov bpl, byte [rsi + 0x29c]
test bpl, 0x10
jne 0x1403a6227
shr al, 2
and bpl, 0xef
and al, 1
shl al, 4
or bpl, al
mov byte [rsi + 0x29c], bpl
mov rsi, qword [rsp + 0x68]
and r10b, 1
mov al, r10b
shl al, 5
mov bpl, byte [rsi + 0x295]
and bpl, 0xdf
or bpl, al
mov r9b, byte [rsp + 0xb1]
mov byte [rsi + 0x295], bpl
test r10b, r10b
jne 0x1403a625e
test r9b, r9b
je 0x1403a6276
cmp r9b, 0xff
je 0x1403a6276
mov rax, qword [rsp + 0x68]
or byte [rax + 0x295], 0x10
mov rbp, qword [rsp + 0x68]
mov byte [rbp + 0x280], r9b
mov edx, 1
mov r8d, 4
mov r9d, 2
mov rcx, qword [rsp + 0x68]
call fcn.14036de40
test eax, eax
je 0x1403a62e9
mov r9, qword [rsp + 0x68]
mov rbp, qword [r9 + 0x30]
test rbp, rbp
je 0x1403a62f3
test byte [rbp + 0x74], 2
je 0x1403a5248
mov dword [rbp + 0x68], eax
mov rcx, qword [rsp + 0x68]
mov rbp, qword [rcx + 0x30]
mov dword [rbp + 0x6c], eax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x1403a62dd
mov qword [rcx + 8], rdi
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0xd8], rdi
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret
mov rbp, qword [rsp + 0x68]
jmp 0x1403a4927
mov ecx, 2
mov edx, eax
mov r8d, eax
call fcn.140381780
add rsp, 0x70
pop rbp
pop r15
pop r13
pop rdi
pop rsi
ret