Function at 0x1400b6fb8
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5d0
mov r14, rcx
lea rcx, [rax + 0x10]
call fcn.14004ea3c
mov edi, 4
lea rdx, [rsp + 0x618]
lea rcx, str._svr
mov r8d, edi
call fcn.140058710
xor esi, esi
lea ebp, [rdi - 3]
mov bl, al
mov byte [rsp + 0x31], al
cmp al, sil
jne 0x1400b7030
lea rdx, [rsp + 0x618]
lea rcx, str._vhd
mov r8d, edi
call fcn.140058710
cmp al, sil
mov al, bpl
jne 0x1400b7033
mov al, sil
mov byte [rsp + 0x32], al
or al, bl
jne 0x1400b7304
lea rdx, [rsp + 0x618]
lea rcx, str._udm
mov r8d, edi
call fcn.140058710
cmp al, sil
je 0x1400b7304
mov rbx, qword [rsp + 0x618]
lea rdx, [rsp + 0x618]
lea rcx, str.upud
mov r8d, edi
mov r12d, esi
call fcn.140058710
cmp al, sil
je 0x1400b708e
mov r12d, 0x80000000
jmp 0x1400b70b1
lea rdx, [rsp + 0x618]
lea rcx, str.listud
mov r8d, 6
call fcn.140058710
cmp al, sil
je 0x1400b7261
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rsi
call fcn.140055fcc
mov rdx, qword [rsp + 0x618]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov rcx, r14
mov byte [rsp + 0x20], bpl
call fcn.140068750
mov r11, qword [rsp + 0x50]
lea rdx, [rsp + 0x618]
lea rcx, str._ret:
mov r8d, 5
mov qword [rsp + 0x618], r11
mov qword [rsp + 0x628], rsi
call fcn.140058710
mov rcx, qword [rsp + 0x618]
mov r11b, al
cmp rcx, rsi
je 0x1400b7134
mov edx, 0x2d
cmp word [rcx], dx
je 0x1400b7134
movzx r11d, al
lea eax, [rdx + 0x2f]
cmp word [rcx], ax
cmovne r11d, ebp
mov r14d, 0xd
cmp r11b, sil
je 0x1400b7164
mov qword [rsp + 0x628], rcx
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x628]
mov r8d, r14d
call fcn.1400236d0
mov qword [rsp + 0x618], rax
lea rdx, [rsp + 0x618]
lea rcx, str._udmask:
mov r8d, 8
mov rdi, rsi
mov qword [rsp + 0x40], rsi
call fcn.140058710
cmp al, sil
mov rax, qword [rsp + 0x618]
je 0x1400b71cd
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400b71ae
add rax, 2
lea edi, [rcx + 0x13]
mov qword [rsp + 0x618], rax
jmp 0x1400b71cd
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x618]
call fcn.140063ef4
mov rax, qword [rsp + 0x618]
mov rdi, qword [rsp + 0x40]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x88]
mov r8d, r14d
mov qword [rsp + 0x88], rax
call fcn.1400236d0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x618], rax
cmp word [rax], si
mov rbx, rsi
cmovne rbx, rax
call fcn.140055fcc
mov rcx, qword [rsp + 0x88]
and edi, 0xfeffff
mov r9d, r12d
lea rdx, [rsp + 0x60]
mov r8, rbx
or r9, rdi
mov qword [rsp + 0x20], rsi
call fcn.140049538
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x610]
call fcn.140055710
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
xor eax, eax
jmp 0x1400b816b
movzx eax, word [rbx]
or ax, 0x20
sub ax, 0x61
cmp ax, 0x19
jbe 0x1400b72a1
cmp word [rbx], 0x30
jb 0x1400b727e
cmp word [rbx], 0x39
jbe 0x1400b72a1
mov ecx, 0x2e
cmp cx, word [rbx]
je 0x1400b72a1
cmp word [rbx], 0x61
jb 0x1400b7294
cmp word [rbx], 0x66
jbe 0x1400b72a1
mov eax, 0x78
cmp word [rbx], ax
je 0x1400b72a1
mov bpl, sil
lea rax, str.22:INDATA
lea rdx, str.22:INDATA_mount
cmp bpl, sil
cmovne rdx, rax
lea rcx, [rsp + 0x628]
or r8, 0xffffffffffffffff
call fcn.1400601ac
mov rdx, qword [rsp + 0x618]
lea rcx, [rsp + 0x628]
call fcn.140056108
mov rdx, qword [rsp + 0x628]
mov rcx, r14
call fcn.1400425e4
lea rcx, [rsp + 0x628]
mov rbx, rax
call fcn.14004ea6c
mov rax, rbx
jmp 0x1400b816b
lea rcx, [rsp + 0xa0]
call fcn.140055fcc
lea rbx, [0x1400e94a4]
lea rcx, [rsp + 0x48]
mov rdx, rbx
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], rsi
call fcn.14006016c
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.14006016c
lea rcx, [rsp + 0x60]
mov rdx, rbx
call fcn.14006016c
lea rcx, [rsp + 0x38]
mov rdx, rbx
call fcn.14006016c
mov r11, qword [rsp + 0x618]
mov edx, 0x2d
cmp dx, word [r11]
mov eax, 0x2a
mov qword [rsp + 0x98], rsi
movzx eax, al
mov qword [rsp + 0x70], rsi
movzx edi, word [r11]
cmove eax, edx
mov r13d, 0x80000000
mov bl, sil
movsx r12d, al
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x84], r13d
mov dword [rsp + 0x80], esi
mov dword [rsp + 0x88], esi
mov dword [rsp + 0x78], esi
mov byte [rsp + 0x628], bl
mov byte [rsp + 0x30], sil
cmp r12d, edi
jne 0x1400b75df
mov r15, qword [rsp + 0x610]
lea r14d, [rdx - 0x20]
lea rbx, [r11 + 2]
lea rcx, str.query
mov r8d, 5
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b7406
mov al, bpl
mov byte [rsp + 0x628], al
jmp 0x1400b7560
lea rcx, [0x1400f5fa4]
mov r8d, 3
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b74c5
lea rcx, [rsp + 0x618]
add r11, 8
mov qword [rsp + 0x618], r11
call fcn.14004ea3c
mov rcx, qword [rsp + 0x618]
mov qword [rsp + 0x98], rcx
mov ax, word [rcx]
cmp ax, si
je 0x1400b7496
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400b746a
cmp ax, r14w
jbe 0x1400b7485
cmp dx, ax
je 0x1400b7485
add rcx, 2
mov qword [rsp + 0x618], rcx
mov ax, word [rcx]
cmp ax, si
je 0x1400b7496
jmp 0x1400b745e
cmp word [rcx], si
je 0x1400b7496
mov word [rcx], si
add qword [rsp + 0x618], 2
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x98]
xor r9d, r9d
mov rcx, r15
mov word [rsp + 0x20], si
call fcn.140048704
mov r11, qword [rsp + 0x70]
mov qword [rsp + 0x98], r11
jmp 0x1400b7592
lea rcx, [0x1400ee4dc]
mov r8d, ebp
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b74e3
mov byte [rsp + 0x30], bpl
jmp 0x1400b7560
lea rcx, [0x1400f5fa0]
mov r8d, ebp
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b7500
mov dword [rsp + 0x40], ebp
jmp 0x1400b7560
lea rcx, [0x1400edfe4]
mov r8d, ebp
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b7520
mov dword [rsp + 0x80], ebp
jmp 0x1400b7560
lea rcx, [0x1400f4608]
mov r8d, ebp
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b7540
mov dword [rsp + 0x88], ebp
jmp 0x1400b7560
lea rcx, [0x1400f5f9c]
mov r8d, ebp
mov rdx, rbx
call fcn.14004fda0
cmp al, sil
je 0x1400b75b4
mov eax, 2
mov dword [rsp + 0x78], eax
cmp di, si
je 0x1400b7592
mov eax, 0x20
lea ecx, [rax - 0x17]
cmp cx, di
ja 0x1400b7578
cmp di, r14w
jbe 0x1400b7592
cmp ax, di
je 0x1400b7592
add r11, 2
mov qword [rsp + 0x618], r11
mov di, word [r11]
cmp di, si
jne 0x1400b756d
lea rcx, [rsp + 0x618]
call fcn.14004ea3c
mov r11, qword [rsp + 0x618]
movzx edi, word [r11]
cmp r12d, edi
je 0x1400b73d9
mov r14, qword [rsp + 0x610]
mov bl, byte [rsp + 0x628]
jmp 0x1400b75df
mov ecx, 0x21
cmp cx, ax
jne 0x1400b75e8
add r11, 2
mov dword [rsp + 0x68], ebp
mov qword [rsp + 0x618], r11
mov ax, word [r11]
cmp ax, si
jne 0x1400b75c5
lea rcx, [rsp + 0x618]
call fcn.14004ea3c
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x618]
mov r9d, 0x2c
mov rcx, r14
mov word [rsp + 0x20], si
call fcn.140048704
mov r12, qword [rsp + 0x48]
mov qword [rsp + 0x618], rax
mov rdi, rax
mov eax, 0x5c
cmp ax, word [r12]
je 0x1400b7642
lea ecx, [rax - 0x2d]
cmp cx, word [r12]
jne 0x1400b766c
cmp ax, word [r12]
jne 0x1400b7671
cmp ax, word [r12 + 2]
jne 0x1400b7671
mov ecx, 0x3f
cmp cx, word [r12 + 4]
je 0x1400b7664
mov ecx, 0x2e
cmp cx, word [r12 + 4]
jne 0x1400b7671
cmp ax, word [r12 + 6]
jne 0x1400b7671
mov r15d, esi
jmp 0x1400b7674
mov r15d, ebp
mov dword [rsp + 0x50], r15d
cmp bl, sil
jne 0x1400b76f5
cmp r15d, esi
je 0x1400b76f5
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x48], rsi
lea ecx, [rax + 3]
mov edi, eax
mov qword [rsp + 0x90], rbx
movsxd rdx, ecx
lea rcx, [rsp + 0x48]
call fcn.1400560cc
mov r12, qword [rsp + 0x48]
mov eax, 0x20
mov word [r12], ax
mov eax, 0x3a
lea rcx, [r12 + 4]
mov word [r12 + 2], ax
lea eax, [rdi + 1]
mov rdx, rbx
movsxd r8, eax
add r8, r8
call fcn.14001a4c0
lea rcx, [rsp + 0x90]
call fcn.14004ea6c
mov rdi, qword [rsp + 0x618]
mov rcx, rdi
call fcn.140055b90
mov edx, 0x2c
cmp word [rax], dx
jne 0x1400b773b
mov r9d, edx
add rdi, 2
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x618]
mov rcx, r14
mov word [rsp + 0x20], si
mov qword [rsp + 0x618], rdi
call fcn.140048704
mov rdi, rax
mov qword [rsp + 0x618], rax
mov al, byte [rsp + 0x628]
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x90], rbx
cmp al, sil
jne 0x1400b7815
mov rcx, rdi
call fcn.140055b90
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400b77cb
add rdi, 2
lea eax, [rcx - 0xa]
mov qword [rsp + 0x618], rdi
cmp ax, word [rdi]
jne 0x1400b778a
add rdi, 2
mov qword [rsp + 0x618], rdi
mov r8d, ecx
lea rdx, [rsp + 0x618]
lea rcx, [rsp + 0xa0]
mov r9b, bpl
call fcn.14006cfc8
lea rdx, [rsp + 0x84]
mov r8d, 0x2c
mov rcx, rax
call fcn.140059ba8
mov rdi, qword [rsp + 0x618]
mov r13d, dword [rsp + 0x84]
mov rcx, rdi
call fcn.140055b90
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400b780e
add rdi, 2
mov r9d, ecx
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x618]
mov rcx, r14
mov word [rsp + 0x20], si
mov qword [rsp + 0x618], rdi
call fcn.140048704
mov qword [rsp + 0x618], rax
mov al, byte [rsp + 0x628]
cmp byte [rsp + 0x32], sil
je 0x1400b79de
lea rcx, [0x140107918]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.140052660
lea rcx, [0x140107918]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dil, byte [rsp + 0x30]
cmp dil, sil
je 0x1400b7893
mov rcx, r12
call fcn.140052978
lea rcx, [rsp + 0x70]
movsxd rbx, eax
call fcn.14004ea6c
lea rcx, [rsp + 0x38]
call fcn.14004ea6c
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x48]
call fcn.14004ea6c
lea rcx, [rsp + 0xa0]
jmp 0x1400b72f7
or rdi, 0xffffffffffffffff
mov dword [rsp + 0x628], edi
cmp dword [rsp + 0x80], esi
je 0x1400b7902
lea rdx, [rsp + 0x628]
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x628], rsi
call fcn.14005ba04
cmp dword [rsp + 0x88], esi
mov rbx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x628]
cmovne ebp, esi
mov word [rbx], si
cmp rdx, 0x100000
jge 0x1400b78f3
mov rbp, 0xffffffff80070057
jmp 0x1400b7938
mov r8d, ebp
mov rcx, r12
call fcn.140052788
mov edi, eax
jmp 0x1400b7936
mov edx, dword [rsp + 0x78]
lea rcx, [rsp + 0x628]
mov r8, rbx
or edx, dword [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov rcx, r12
or edx, 4
cmp r13d, esi
cmovle r13d, ebp
mov r9d, r13d
call fcn.1400b6c3c
mov edi, dword [rsp + 0x628]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rsp + 0x628]
movsxd rdx, eax
add rdx, 0x3c
call fcn.140056040
mov rcx, qword [rsp + 0x628]
lea rdx, str._d__d__s
mov r9d, ebp
mov r8d, edi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.USER32.dll_wsprintfW]
mov r8, qword [rsp + 0x628]
mov rdx, qword [rsp + 0x38]
mov rcx, r14
call fcn.140055710
lea rcx, [rsp + 0x628]
call fcn.14004ea6c
lea rcx, [rsp + 0x70]
call fcn.14004ea6c
lea rcx, [rsp + 0x38]
call fcn.14004ea6c
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x48]
call fcn.14004ea6c
lea rcx, [rsp + 0xa0]
call fcn.14004ea6c
movsxd rax, ebp
jmp 0x1400b816b
mov dil, byte [rsp + 0x30]
cmp al, sil
jne 0x1400b7a01
cmp word [rbx], si
jne 0x1400b7a01
cmp dil, sil
je 0x1400b8067
cmp word [r12], si
je 0x1400b8067
cmp byte [rsp + 0x31], sil
je 0x1400b7b0d
lea rdx, str.22:INDATA_mount_wimsvr__
lea rcx, [rsp + 0x628]
or r8, 0xffffffffffffffff
call fcn.1400601ac
lea rcx, [rsp + 0x628]
mov rdx, r12
mov word [rsp + 0xe0], si
call fcn.140056108
lea rdi, [0x1400edcf0]
lea rcx, [rsp + 0x628]
mov rdx, rdi
call fcn.140056108
lea rcx, [rsp + 0x628]
mov rdx, rbx
call fcn.140056108
lea rcx, [rsp + 0x628]
mov rdx, rdi
call fcn.140056108
cmp r13d, esi
jl 0x1400b7a9d
lea rcx, [rsp + 0xe0]
movsxd rdx, r13d
call fcn.1400bc0f4
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x628]
call fcn.140056108
lea rcx, [rsp + 0x628]
mov rdx, rdi
call fcn.140056108
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x628]
call fcn.140056108
lea rdx, [0x1400edd70]
lea rcx, [rsp + 0x628]
call fcn.140056108
mov rdx, qword [rsp + 0x618]
lea rcx, [rsp + 0x628]
call fcn.140056108
mov rdx, qword [rsp + 0x628]
mov rcx, r14
call fcn.1400425e4
mov rbp, rax
lea rcx, [rsp + 0x628]
call fcn.14004ea6c
jmp 0x1400b806e
lea rcx, [0x140107940]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x31]
call fcn.14004ff4c
lea rcx, [rsp + 0x31]
call fcn.14004ff30
lea rcx, [0x140107940]
mov r14d, eax
mov dword [rsp + 0x40], eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp r14d, esi
jge 0x1400b7b68
mov rcx, qword [rsp + 0x610]
lea rdx, str.WIM_DLL_ERR_r_n
call fcn.140015e80
jmp 0x1400b806e
mov al, byte [rsp + 0x628]
cmp al, sil
je 0x1400b7d09
cmp qword [0x1401071c0], rsi
jne 0x1400b7b8b
mov ebp, 0x78
jmp 0x1400b806e
mov edx, 0x3d
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov r13, rax
cmp rax, rsi
je 0x1400b7ba8
mov word [rax], si
add r13, 2
cmp word [r12], si
je 0x1400b8067
lea rcx, [rsp + 0x40]
call fcn.140055fcc
mov rdi, qword [rsp + 0x618]
mov rcx, rdi
call fcn.140055b90
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400b7c0e
mov r8d, ecx
lea rdx, [rsp + 0x618]
lea rcx, [rsp + 0xa0]
add rdi, 2
mov r9b, bpl
mov qword [rsp + 0x618], rdi
call fcn.14006cfc8
lea rdx, [rsp + 0x40]
mov rcx, rax
xor r8d, r8d
call fcn.140059810
mov rcx, qword [rsp + 0x40]
call fcn.1400188a8
lea rcx, [rsp + 0x50]
mov rdi, rax
call fcn.140055fcc
mov eax, 0x3a
cmp word [rbx], si
je 0x1400b7c59
cmp ax, word [rbx + 2]
je 0x1400b7c59
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140018d04
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.1400601ec
mov rbx, qword [rax]
mov eax, 0x3a
cmp word [rdi], si
je 0x1400b7c83
cmp ax, word [rdi + 2]
je 0x1400b7c83
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.140018d04
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.1400601ec
mov rdi, qword [rax]
lea rcx, [rsp + 0x628]
mov edx, 0x20
call fcn.140056040
mov rax, qword [rsp + 0x628]
mov r15, qword [rsp + 0x610]
lea r9, [rsp + 0x628]
mov rcx, r15
mov r8, rdi
mov rdx, rbx
mov qword [rsp + 0x28], rsi
mov word [rax + 4], si
mov qword [rsp + 0x20], r13
call fcn.140064ce4
mov r8, qword [rsp + 0x628]
add r8, 4
mov rdx, r12
mov rcx, r15
call fcn.140055710
lea rcx, [rsp + 0x628]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x40]
call fcn.14004ea6c
mov rbp, rsi
jmp 0x1400b806e
cmp dil, sil
jne 0x1400b7f77
cmp word [r12], si
je 0x1400b7f77
mov rax, qword [rsp + 0x38]
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400b7d53
lea rcx, [rsp + 0x38]
mov edx, 0x105
call fcn.1400560cc
mov rax, qword [rsp + 0x38]
mov ecx, 0x104
mov word [rax], si
mov rdx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp qword [0x1401071b0], rsi
je 0x1400b806e
mov rcx, rbx
call fcn.1400cbe14
cmp eax, esi
jne 0x1400b7d96
lea rcx, [rsp + 0x628]
mov rdx, rbx
call fcn.14006016c
mov rcx, qword [rsp + 0x628]
call fcn.1400273f4
lea rcx, [rsp + 0x628]
call fcn.14004ea6c
mov rcx, rbx
call fcn.1400cbe14
cmp eax, esi
je 0x1400b806e
cmp r15d, esi
jne 0x1400b7dbb
mov rcx, r12
call fcn.1400cbf54
cmp eax, esi
je 0x1400b806e
xor edx, edx
lea rcx, [rsp + 0xbc]
mov dword [rsp + 0xb8], esi
lea r8d, [rdx + 0x20]
call fcn.1400cc8d0
lea r8, [rsp + 0xb8]
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
cmp eax, esi
je 0x1400b7df6
test byte [rsp + 0xb8], bpl
jne 0x1400b7e01
mov r14, qword [rsp + 0x38]
cmp word [r14], si
jne 0x1400b7e04
mov r14, rsi
mov di, si
mov word [rsp + 0x628], si
cmp r15d, esi
je 0x1400b7e3d
cmp dword [rsp + 0x40], esi
jne 0x1400b7e27
mov edi, 0x100
mov word [rsp + 0x628], di
cmp dword [rsp + 0x68], esi
je 0x1400b7e3d
mov eax, 0x200
or di, ax
mov word [rsp + 0x628], di
mov eax, ebp
cmp r15d, esi
je 0x1400b7e5c
lea rdx, [rsp + 0x628]
mov rcx, r12
call fcn.140094ab0
mov di, word [rsp + 0x628]
sar eax, 8
mov rcx, r12
movzx r15d, al
sub r15d, ebp
cmp r13d, 0x80000000
cmove r13d, ebp
call fcn.1400cbf54
cmp eax, esi
je 0x1400b7ed7
mov r9, r14
mov rdx, r12
mov rcx, rbx
cmp dword [rsp + 0x40], esi
je 0x1400b7e9d
cmp r13d, esi
cmovge ebp, r13d
mov r8d, ebp
call fcn.140064b00
jmp 0x1400b7ead
cmp r13d, esi
cmovge ebp, r13d
mov r8d, ebp
call qword [0x1401071b0]
mov r9, rbx
mov rbx, qword [rsp + 0x610]
mov dword [rsp + 0x28], eax
lea rdx, str.FOUND_WIM___s____mount_to___s____s___d_r_n
mov r8, r12
mov rcx, rbx
mov ebp, eax
mov qword [rsp + 0x20], r14
call fcn.140015e80
jmp 0x1400b7ee1
mov rbx, qword [rsp + 0x610]
mov ebp, esi
cmp dword [rsp + 0x50], esi
je 0x1400b7efa
cmp dword [rsp + 0x68], esi
jne 0x1400b7efa
cmp di, si
je 0x1400b7efa
movzx ecx, di
call fcn.14005099c
cmp r15d, esi
jl 0x1400b7f2a
lea rdx, str.PART_update__d
lea rcx, [rsp + 0xe0]
mov r8d, r15d
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0xe8]
xor r8d, r8d
mov rcx, rbx
call fcn.140074c6c
lea rcx, [rsp + 0x70]
call fcn.14004ea6c
lea rcx, [rsp + 0x38]
call fcn.14004ea6c
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x48]
call fcn.14004ea6c
lea rcx, [rsp + 0xa0]
call fcn.14004ea6c
cmp ebp, esi
sete sil
mov rax, rsi
jmp 0x1400b816b
lea rcx, [rsp + 0x628]
call fcn.140055fcc
mov eax, 0x3a
cmp word [rbx], si
je 0x1400b7fbe
cmp ax, word [rbx + 2]
je 0x1400b7fbe
lea rdx, [rsp + 0x628]
mov rcx, rbx
call fcn.140018d04
mov rdx, qword [rsp + 0x628]
lea rcx, [rsp + 0x58]
call fcn.1400601ec
mov rbx, qword [rax]
mov eax, 0x3a
cmp word [r12], si
je 0x1400b7ff2
cmp ax, word [r12 + 2]
je 0x1400b7ff2
lea rdx, [rsp + 0x628]
mov rcx, r12
call fcn.140018d04
mov rdx, qword [rsp + 0x628]
lea rcx, [rsp + 0x48]
call fcn.1400601ec
mov r12, qword [rax]
cmp word [rbx], si
jne 0x1400b8041
cmp word [r12], si
je 0x1400b803c
mov rcx, qword [rsp + 0x610]
lea rax, [rsp + 0x1b0]
lea rdx, [0x1400e94a4]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x628]
mov r8, r12
mov qword [rsp + 0x20], rdx
call fcn.140064ce4
cmp rax, rsi
je 0x1400b805a
lea rbx, [rsp + 0x3b8]
cmp word [rbx], si
je 0x1400b805a
cmp qword [0x1401071b8], rsi
je 0x1400b7afb
mov rcx, rbx
call fcn.1400cbe14
cmp eax, esi
jne 0x1400b80b5
lea rcx, [rsp + 0x628]
call fcn.14004ea6c
mov rbp, 0xffffffff80070057
lea rcx, [rsp + 0x70]
call fcn.14004ea6c
lea rcx, [rsp + 0x38]
call fcn.14004ea6c
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x48]
call fcn.14004ea6c
lea rcx, [rsp + 0xa0]
call fcn.14004ea6c
mov rax, rbp
jmp 0x1400b816b
movzx eax, word [r12]
mov r15d, 0x80000000
neg ax
movzx eax, word [rbx]
sbb rdi, rdi
and rdi, r12
neg ax
sbb r12, r12
and r12, rbx
cmp r13d, r15d
cmove r13d, esi
cmp r14d, esi
je 0x1400b80f7
mov edx, esi
cmp r13d, esi
mov rcx, rbx
setne dl
call fcn.140052524
mov ebx, eax
cmp eax, esi
je 0x1400b811c
cmp r13d, r15d
je 0x1400b8101
cmp r13d, esi
jne 0x1400b8103
mov ebp, esi
mov r9d, ebp
xor r8d, r8d
mov rdx, rdi
mov rcx, r12
call qword [0x1401071b8]
mov ebx, esi
cmp eax, esi
sete bl
lea rcx, [rsp + 0x628]
call fcn.14004ea6c
lea rcx, [rsp + 0x70]
call fcn.14004ea6c
lea rcx, [rsp + 0x38]
call fcn.14004ea6c
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x48]
call fcn.14004ea6c
lea rcx, [rsp + 0xa0]
call fcn.14004ea6c
movsxd rax, ebx
mov rbx, qword [rsp + 0x620]
add rsp, 0x5d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret