Function at 0x1400a0a94
Capabilities:
Clear file content
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rdi, rcx
lea rcx, [rax - 0x58]
mov rbx, rdx
call fcn.140061940
xor r12d, r12d
mov qword [rsp + 0xb8], rdi
lea esi, [r12 + 9]
mov edi, 0x4b0
mov qword [rsp + 0xc0], r12
mov byte [rsp + 0x43], r12b
lea r13d, [r12 + 0x2d]
lea r14d, [r12 + 0x20]
lea ecx, [rsi + 4]
lea ebp, [rdi + 1]
cmp si, word [rbx]
ja 0x1400a0b00
cmp word [rbx], cx
jbe 0x1400a0b06
cmp r14w, word [rbx]
jne 0x1400a0b0e
mov edi, r12d
jmp 0x1400a0c61
lea rcx, [0x140120c94]
mov r8d, 4
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
jne 0x1400a0c5c
mov r11d, 5
lea rcx, [0x140120c7c]
mov rdx, rbx
mov r8d, r11d
call fcn.14005a990
cmp al, r12b
je 0x1400a0b50
mov edi, ebp
jmp 0x1400a0c5c
lea rcx, [0x140120c88]
mov r8d, 8
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
jne 0x1400a0c5c
lea rcx, [0x140120c70]
mov r8d, esi
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
jne 0x1400a0b49
lea rcx, [0x140120c4c]
mov r8d, r11d
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
je 0x1400a0ba6
mov edi, 0xfde9
jmp 0x1400a0c5c
lea rcx, [0x140120c44]
mov r8d, r11d
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
je 0x1400a0bc7
mov edi, 0xfde8
jmp 0x1400a0c5c
lea rcx, [0x140120c5c]
mov r8d, 4
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
je 0x1400a0be8
mov edi, 0x3a8
jmp 0x1400a0c5c
lea rcx, [0x140120c54]
mov r8d, r11d
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
je 0x1400a0c06
mov edi, 0x3b6
jmp 0x1400a0c5c
lea rcx, [0x140120c64]
mov r8d, r11d
mov rdx, rbx
call fcn.14005a990
cmp al, r12b
je 0x1400a0c22
mov edi, r12d
jmp 0x1400a0c5c
cmp r13w, word [rbx]
jne 0x1400a1d83
add rbx, 2
movzx eax, word [rbx]
sub ax, 0x30
cmp ax, si
ja 0x1400a1d83
mov rcx, rbx
mov qword [rsp + 0x118], rbx
call fcn.140062d78
cmp eax, r12d
mov rdi, rax
jl 0x1400a1d83
mov ecx, 0xd
mov ebp, 2
jmp 0x1400a0c83
cmp si, ax
ja 0x1400a0c72
cmp ax, cx
jbe 0x1400a0c8c
cmp r14w, ax
je 0x1400a0c8c
add rbx, rbp
mov qword [rsp + 0x118], rbx
movzx eax, word [rbx]
cmp ax, r12w
jne 0x1400a0c68
lea rcx, [rsp + 0x118]
call fcn.140059340
mov ebx, 0x2a
mov byte [rsp + 0x128], r12b
mov byte [rsp + 0x44], r12b
mov byte [rsp + 0x41], r12b
mov r15b, r12b
lea r13d, [rbx - 0x29]
mov byte [rsp + 0x42], r12b
mov byte [rsp + 0x45], r12b
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x140120c3c]
mov r8d, 4
call fcn.14006439c
cmp al, r12b
je 0x1400a0cf2
mov byte [rsp + 0x128], bpl
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x140120cb8]
mov r8d, 4
call fcn.14006439c
cmp al, r12b
je 0x1400a0d1b
mov byte [rsp + 0x44], r13b
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x140120cb4]
mov r8d, ebp
call fcn.14006439c
cmp al, r12b
je 0x1400a0d41
mov byte [rsp + 0x41], r13b
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x140120cb0]
mov r8d, 3
call fcn.14006439c
cmp al, r12b
je 0x1400a0d68
mov r15b, r13b
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x140119620]
mov r8d, ebp
call fcn.14006439c
cmp al, r12b
je 0x1400a0d8e
mov byte [rsp + 0x42], r13b
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x140120ca8]
mov r8d, 7
call fcn.14006439c
cmp al, r12b
je 0x1400a0db4
mov byte [rsp + 0x43], r13b
jmp 0x1400a0e26
lea rdx, [rsp + 0x118]
lea rcx, [0x14011f614]
mov r8d, 6
call fcn.14006439c
cmp al, r12b
je 0x1400a0dda
mov byte [rsp + 0x45], r13b
jmp 0x1400a0e26
mov rcx, qword [rsp + 0x118]
movzx eax, word [rcx]
cmp ax, r12w
je 0x1400a0e19
mov ebx, 0xd
cmp si, ax
ja 0x1400a0dfa
cmp ax, bx
jbe 0x1400a0e0c
cmp r14w, ax
je 0x1400a0e0c
add rcx, rbp
mov ax, word [rcx]
cmp ax, r12w
jne 0x1400a0df0
mov qword [rsp + 0x118], rcx
mov ebx, 0x2a
lea rcx, [rsp + 0x118]
call fcn.140059340
mov rax, qword [rsp + 0x118]
cmp bx, word [rax]
je 0x1400a0cc6
lea rbx, [0x1401145d8]
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.14006d8b0
lea rdx, [0x140120c9c]
lea rcx, [rsp + 0x70]
call fcn.14006d8b0
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xb0]
mov r8d, 0x2c
mov r9b, r13b
mov rsi, r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x60], r12
call fcn.14007c440
lea rdx, [rsp + 0x78]
xor r8d, r8d
mov rcx, rax
call fcn.140065830
mov rcx, qword [rsp + 0x78]
call fcn.14001b86c
mov r14, rax
mov qword [rsp + 0x90], rax
cmp word [rax], r12w
jne 0x1400a0ed5
lea rcx, [rsp + 0x70]
call fcn.140059370
lea rcx, [rsp + 0x78]
call fcn.140059370
mov r12, 0xffffffff80070057
jmp 0x1400a1d89
mov rax, qword [rsp + 0x118]
mov r8d, 0x2c
cmp word [rax], r8w
jne 0x1400a0f4f
add rax, rbp
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x118], rax
call fcn.140059340
mov rax, qword [rsp + 0x118]
cmp word [rax], r8w
je 0x1400a0f4b
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xb0]
mov r9b, r13b
call fcn.14007c440
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, rax
call fcn.140065830
mov rax, qword [rsp + 0x118]
mov r8d, 0x2c
cmp word [rax], r8w
jne 0x1400a0f4f
lea rbx, [rax + 2]
mov rax, qword [rsp + 0x70]
mov bpl, r12b
mov byte [rsp + 0x40], r12b
cmp word [rax], 0x24
mov qword [rsp + 0x118], rax
jne 0x1400a0f79
mov bpl, byte [rax]
add rax, 2
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.140059340
mov rcx, qword [rsp + 0x118]
cmp word [rcx], 0x2b
je 0x1400a0f9e
mov eax, 0x2d
cmp word [rcx], ax
jne 0x1400a0fb0
mov al, byte [rcx]
add rcx, 2
mov byte [rsp + 0x40], al
mov qword [rsp + 0x118], rcx
lea rcx, [rsp + 0x118]
call fcn.140059340
mov rcx, qword [rsp + 0x118]
movzx eax, word [rcx]
mov ecx, 9
sub ax, 0x30
cmp ax, cx
ja 0x1400a1013
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x118]
call fcn.140065b68
mov rsi, qword [rsp + 0x60]
cmp rsi, r12
mov qword [rsp + 0x80], rsi
jge 0x1400a1013
lea rcx, [rsp + 0x70]
call fcn.140059370
lea rcx, [rsp + 0x78]
call fcn.140059370
jmp 0x1400a1d89
lea rcx, [rsp + 0x50]
call fcn.140061940
mov eax, 0x26
cmp r15b, r12b
je 0x1400a1089
mov rbp, qword [rsp + 0x110]
cmp ax, word [rbx]
je 0x1400a1049
test byte [rbp + 0xd], 0xf
jne 0x1400a1049
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14006ce34
jmp 0x1400a10b7
lea rcx, [0x140135110]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rbx
mov rcx, rbp
call fcn.14001e38c
cmp rax, r12
je 0x1400a107a
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call fcn.14006d9c8
lea rcx, [0x140135110]
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
jmp 0x1400a10b7
mov rdx, rbx
cmp bpl, r12b
je 0x1400a10ad
mov rcx, qword [rsp + 0x110]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
call fcn.140078dc8
jmp 0x1400a10b7
lea rcx, [rsp + 0x50]
call fcn.14006d930
lea rcx, [0x140115454]
mov rbx, r12
mov rdx, r14
mov rbp, r12
mov byte [rsp + 0x118], r12b
mov qword [rsp + 0x48], rbx
call fcn.14005aa28
cmp al, r12b
je 0x1400a10f2
mov rbp, qword [0x140131340]
mov r14b, 2
mov byte [rsp + 0x118], r14b
jmp 0x1400a111d
lea rcx, [0x140115ccc]
mov rdx, r14
call fcn.14005aa28
cmp al, r12b
je 0x1400a111a
mov rbp, qword [0x140131338]
mov r14b, r13b
mov byte [rsp + 0x118], r13b
jmp 0x1400a111d
mov r14b, bl
cmp byte [rsp + 0x44], r12b
jne 0x1400a113c
cmp byte [rsp + 0x41], r12b
jne 0x1400a113c
lea rdx, [0x140119038]
lea rcx, [rsp + 0x50]
call fcn.140061a7c
mov r15, r12
cmp byte [rsp + 0x41], r12b
je 0x1400a1150
mov edi, 0x4b0
jmp 0x1400a1426
cmp r14b, r12b
jne 0x1400a1426
mov rbp, qword [rsp + 0x90]
lea rcx, [0x140118728]
mov r14b, r13b
mov rdx, rbp
call fcn.14005aa28
cmp al, r12b
je 0x1400a1187
mov ecx, 0x100
mov r14b, r12b
call fcn.14005eb74
jmp 0x1400a1198
cmp byte [rsp + 0x43], r12b
je 0x1400a1198
xor edx, edx
mov rcx, rbp
call fcn.14006aed0
mov rcx, rbp
call fcn.14000697c
cmp eax, r12d
je 0x1400a11cb
mov rdx, 0xffffffffc0000000
mov r8d, 7
mov rcx, rbp
call fcn.14001d394
mov rbx, rax
mov qword [rsp + 0x48], rax
cmp rax, r12
jne 0x1400a12be
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0x48]
mov r9d, 7
mov r8d, 0xc0000000
mov rdx, rbp
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r12
call fcn.1400037a0
mov rbx, qword [rsp + 0x48]
cmp rbx, r12
jne 0x1400a12be
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x2000080
lea rcx, [rsp + 0x48]
mov r9d, 7
mov r8d, 0xc0000000
mov rdx, rbp
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r12
call fcn.1400037a0
mov rbx, qword [rsp + 0x48]
cmp rbx, r12
jne 0x1400a12be
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0x48]
mov r9d, 7
mov r8d, 0xc0000000
mov rdx, rbp
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r12
call fcn.1400037a0
mov rbx, qword [rsp + 0x48]
cmp rbx, r12
jne 0x1400a12be
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x2000080
lea rcx, [rsp + 0x48]
mov r9d, 7
mov r8d, 0xc0000000
mov rdx, rbp
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r12
call fcn.1400037a0
mov rbx, qword [rsp + 0x48]
mov rbp, rbx
cmp rbx, r12
jne 0x1400a12de
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov r12d, eax
lea rcx, [rsp + 0x50]
call fcn.140059370
jmp 0x1400a0ffa
xor r8d, r8d
mov al, r12b
mov cl, r12b
mov dl, r12b
mov qword [rsp + 0xa0], r12
mov byte [rsp + 0x58], al
mov byte [rsp + 0x59], cl
mov word [rsp + 0x5b], r8w
mov byte [rsp + 0x5a], dl
cmp r14b, r12b
je 0x1400a1336
lea r9, [rsp + 0xa0]
lea rdx, [rsp + 0x58]
mov r8d, 3
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_ReadFile]
mov dl, byte [rsp + 0x5a]
mov cl, byte [rsp + 0x59]
mov al, byte [rsp + 0x58]
cmp al, 0xff
jne 0x1400a134f
cmp cl, 0xfe
jne 0x1400a137f
mov r8d, 2
mov edi, 0x4b0
mov r15, r8
jmp 0x1400a1355
mov r8d, 2
cmp al, 0xfe
jne 0x1400a1366
cmp cl, 0xff
jne 0x1400a137f
mov edi, 0x4b1
mov r15, r8
cmp al, 0xef
jne 0x1400a137f
cmp cl, 0xbb
jne 0x1400a137f
cmp dl, 0xbf
jne 0x1400a137f
mov edi, 0xfde9
mov r15d, 3
lea rcx, [rsp + 0xa0]
call fcn.14006140c
mov r14b, byte [rsp + 0x42]
cmp qword [rax], r12
je 0x1400a13ab
cmp r14b, r12b
jne 0x1400a13ab
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14005a8d8
jmp 0x1400a1426
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14005a8d8
cmp r14b, r12b
je 0x1400a13c6
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_SetEndOfFile]
cmp byte [rsp + 0x45], r12b
jne 0x1400a1426
cmp edi, 0x4b0
jne 0x1400a13e3
mov eax, 2
lea rdx, [0x14011c028]
jmp 0x1400a140d
cmp edi, 0x4b1
jne 0x1400a13f9
mov eax, 2
lea rdx, [0x14011c02c]
jmp 0x1400a140d
cmp edi, 0xfde9
jne 0x1400a1426
mov eax, 3
lea rdx, [0x14011c030]
lea r9, [rsp + 0x68]
mov r8d, eax
mov rcx, rbx
mov qword [rsp + 0x20], r12
mov r15, rax
call qword [sym.imp.KERNEL32.DLL_WriteFile]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
movsxd r14, eax
add r14, r14
cmp edi, 0x4b0
je 0x1400a14a7
cmp edi, 0x4b1
jne 0x1400a1456
mov rcx, qword [rsp + 0x50]
mov edx, r14d
call fcn.14005eb54
jmp 0x1400a14a7
lea rcx, [rsp + 0x50]
cmp edi, 0xfde9
jne 0x1400a146d
call fcn.1400174d8
mov r14, rax
jmp 0x1400a14a7
mov rdx, qword [rsp + 0x50]
movzx r9d, di
or r8, 0xffffffffffffffff
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x50], r12
call fcn.14006187c
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.DLL_lstrlenA]
lea rcx, [rsp + 0x88]
movsxd r14, eax
call fcn.140059370
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmp byte [rsp + 0x118], r12b
je 0x1400a1567
cmp rbp, 0xffffffffffffffff
jne 0x1400a14fe
cmp rbx, r12
je 0x1400a14d8
cmp rbx, rbp
je 0x1400a14d8
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.140059370
lea rcx, [rsp + 0x70]
call fcn.140059370
lea rcx, [rsp + 0x78]
call fcn.140059370
mov r12, r13
jmp 0x1400a1d89
lea r9, [rsp + 0x118]
mov r8d, r14d
mov rdx, rax
mov rcx, rbp
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_WriteFile]
mov rcx, rbp
call qword [sym.imp.KERNEL32.DLL_FlushFileBuffers]
mov rcx, rbp
call qword [sym.imp.KERNEL32.DLL_FlushFileBuffers]
mov rcx, rbp
call qword [sym.imp.KERNEL32.DLL_FlushFileBuffers]
mov rcx, rbp
call qword [sym.imp.KERNEL32.DLL_FlushFileBuffers]
cmp rbx, r12
je 0x1400a12cf
cmp rbx, 0xffffffffffffffff
je 0x1400a12cf
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x1400a12cf
lea rcx, [rsp + 0x88]
call fcn.140061940
lea rcx, [rsp + 0x98]
call fcn.140061940
lea rcx, [rsp + 0xa8]
call fcn.140061664
lea rcx, [rsp + 0x68]
call fcn.140061664
cmp byte [rsp + 0x41], r12b
je 0x1400a19b7
lea rcx, [rsp + 0x128]
call fcn.140061940
mov rdi, qword [rsp + 0x90]
mov eax, 0x26
cmp ax, word [rdi]
je 0x1400a15e2
mov rax, qword [rsp + 0x110]
test byte [rax + 0xd], 0xf
jne 0x1400a15e2
lea rdx, [rsp + 0x128]
mov rcx, rdi
call fcn.14006ce34
jmp 0x1400a1628
lea rcx, [0x140135110]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov rcx, qword [rsp + 0x110]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rdi
call fcn.14001e38c
cmp rax, r12
je 0x1400a161b
mov rdx, qword [rax]
lea rcx, [rsp + 0x128]
call fcn.14006d9c8
lea rcx, [0x140135110]
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov rbp, qword [rsp + 0x128]
mov rcx, rbp
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
mov r10b, byte [rsp + 0x40]
mov r8, r12
movsxd rdx, eax
mov eax, 0x2d
mov qword [rsp + 0x48], r12
mov r9, r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x118], rdx
mov rdi, rdx
cmp r10b, al
jne 0x1400a1673
mov r11, r12
mov qword [rsp + 0x80], r12
jmp 0x1400a1691
mov rax, r14
cqo
sub rax, rdx
mov rdx, qword [rsp + 0x118]
sar rax, 1
mov r11, rax
mov qword [rsp + 0x80], rax
mov r14, r12
mov r15, r12
mov ecx, 0xa
cmp rsi, r12
jne 0x1400a172e
cmp r10b, 0x2b
je 0x1400a185b
cmp rdx, r12
jbe 0x1400a1715
cmp word [rbp + rdx*2 - 2], cx
jne 0x1400a16d1
lea rdi, [rdx - 1]
cmp rdi, r12
jbe 0x1400a1715
lea eax, [rcx + 3]
cmp word [rbp + rdi*2 - 2], ax
jne 0x1400a16d1
sub rdi, r13
cmp rdi, r12
jbe 0x1400a1715
lea rax, [rbp + rdi*2 - 2]
cmp rax, rbp
jb 0x1400a1715
mov esi, 2
cmp word [rax], cx
je 0x1400a16f7
sub rax, rsi
sub rdi, r13
cmp rax, rbp
jae 0x1400a16e5
jmp 0x1400a1715
cmp r10b, 0x2d
jne 0x1400a1715
sub rax, rsi
sub rdi, r13
cmp rax, rbp
jb 0x1400a1715
mov esi, 0xd
cmp word [rax], si
jne 0x1400a1715
sub rdi, r13
mov eax, 0x2d
mov word [rbp + rdi*2], r12w
cmp r10b, al
jne 0x1400a1865
jmp 0x1400a1957
cmp rsi, r13
mov r9d, edx
mov r8, rbp
cmove r9d, r12d
cmp rsi, r13
jne 0x1400a1746
cmp r10b, 0x2b
je 0x1400a1749
mov r14, rdx
mov al, byte [rsp + 0x40]
mov r10d, r12d
cmp al, 0x2b
sete r10b
add r10d, r13d
cmp al, 0x2d
jne 0x1400a1767
cmp rsi, r13
jne 0x1400a1767
mov edi, r13d
jmp 0x1400a1791
mov edi, r12d
cmp rsi, r13
jne 0x1400a1791
cmp al, 0x2b
jne 0x1400a1791
cmp r11, r12
jbe 0x1400a1791
mov rax, qword [rsp + 0x50]
cmp word [rax + r11*2 - 2], cx
mov eax, 2
cmovne r15, rax
mov qword [rsp + 0x60], r15
movsxd r10, r10d
cmp rsi, r10
jl 0x1400a1845
mov r15d, 2
movzx eax, word [r8]
cmp ax, r12w
je 0x1400a183d
mov edx, 0xd
cmp ax, cx
je 0x1400a1809
cmp ax, dx
jne 0x1400a17c9
add r8, r15
cmp word [r8], cx
je 0x1400a17d8
add r8, r15
mov ax, word [r8]
cmp ax, r12w
je 0x1400a1834
jmp 0x1400a17b6
cmp r10, rsi
jne 0x1400a17f6
mov rdx, r8
lea eax, [rdi + rdi]
movsxd rcx, eax
sub rdx, rbp
sar rdx, 1
lea r14, [rdx + rcx - 1]
mov ecx, 0xa
cmp rsi, r15
jne 0x1400a182e
mov r9, r8
sub r9, rbp
sar r9, 1
sub r9d, r13d
jmp 0x1400a182e
cmp r10, rsi
jne 0x1400a181d
mov r14, r8
movsxd rax, edi
sub r14, rbp
sar r14, 1
add r14, rax
cmp rsi, r15
jne 0x1400a182e
mov rax, r8
sub rax, rbp
sar rax, 1
mov r9d, eax
sub rsi, r13
add r8, r15
cmp rsi, r10
jge 0x1400a17a3
mov rdx, qword [rsp + 0x118]
mov r10b, byte [rsp + 0x40]
mov r15, rdx
movsxd rdi, r9d
mov r9, qword [rsp + 0x60]
mov r8, r12
sub r15, r14
mov eax, 0x2d
cmp r10b, al
je 0x1400a1880
mov r13d, 2
cmp rdi, r12
jbe 0x1400a1886
cmp word [rbp + rdi*2 - 2], cx
cmovne r8, r13
mov qword [rsp + 0x48], r8
jmp 0x1400a1886
mov r13d, 2
lea rsi, [r11 + r9]
sub r14, rdi
add rsi, r8
lea rax, [rsi + r15]
lea rbp, [rax + rdi + 1]
mov rax, qword [rsp + 0x128]
lea rcx, [rax + rdi*2]
cmp rdx, rbp
jb 0x1400a18c0
cmp r15, r12
jbe 0x1400a18c0
lea rdx, [rcx + r14*2]
lea r8, [r15 + r15]
lea rcx, [rcx + rsi*2]
call fcn.14001d2c8
lea rcx, [rsp + 0x128]
mov rdx, rbp
call fcn.140061a40
mov r11, qword [rsp + 0x128]
lea rdi, [r11 + rdi*2]
cmp qword [rsp + 0x118], rbp
jae 0x1400a18fc
cmp r15, r12
jbe 0x1400a18fc
lea r8, [r15 + r15]
lea rdx, [rdi + r14*2]
lea rcx, [rdi + rsi*2]
call fcn.14001d2c8
mov r14d, 0xd
lea esi, [r14 - 3]
cmp qword [rsp + 0x48], r12
je 0x1400a191a
mov word [rdi], r14w
add rdi, r13
mov word [rdi], si
add rdi, r13
mov rbp, qword [rsp + 0x80]
cmp rbp, r12
jbe 0x1400a193e
mov rdx, qword [rsp + 0x50]
movsxd r8, ebp
mov rcx, rdi
add r8, r8
call fcn.14001d310
lea rdi, [rdi + rbp*2]
cmp qword [rsp + 0x60], r12
je 0x1400a1952
mov word [rdi], r14w
add rdi, r13
mov word [rdi], si
add rdi, r13
mov word [rdi + r15*2], r12w
mov r8, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x110]
call fcn.140060d64
lea rcx, [rsp + 0x128]
call fcn.140059370
lea rcx, [rsp + 0x68]
call fcn.140059370
lea rcx, [rsp + 0xa8]
call fcn.140059370
lea rcx, [rsp + 0x98]
call fcn.140059370
lea rcx, [rsp + 0x88]
call fcn.140059370
jmp 0x1400a1546
cmp rsi, r12
jne 0x1400a1b5e
cmp byte [rsp + 0x40], 0x2b
mov rcx, rbx
je 0x1400a1b4a
xor r8d, r8d
mov rdx, r15
call fcn.14005a8d8
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.14005a8d8
mov r9b, byte [rsp + 0x128]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
mov r8d, edi
mov rbp, rax
call fcn.14006aa44
cmp eax, r12d
je 0x1400a1a45
mov sil, byte [rsp + 0x128]
mov r8d, r13d
xor edx, edx
mov rcx, rbx
mov r15, rbp
call fcn.14005a8d8
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
mov r9b, sil
mov r8d, edi
mov rbp, rax
call fcn.14006aa44
cmp eax, r12d
jne 0x1400a1a10
mov rsi, qword [rsp + 0x80]
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14005a8d8
lea rcx, [rsp + 0x48]
mov rdx, r15
call fcn.14006af64
mov r15b, byte [rsp + 0x128]
mov al, byte [rsp + 0x40]
cmp al, 0x2b
jne 0x1400a1b9d
mov rcx, rbx
cmp rsi, r12
je 0x1400a1c63
mov r8d, r13d
xor edx, edx
call fcn.14005a8d8
mov rcx, rbx
mov rdi, rax
call fcn.1400df220
lea rcx, [rsp + 0x128]
sub eax, edi
mov esi, eax
cmp eax, r12d
cmovl esi, r12d
add eax, 0xca
movsxd rdx, eax
call fcn.1400616c8
movsxd rdi, edi
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.14005a8d8
mov rdx, qword [rsp + 0x128]
lea r9, [rsp + 0x118]
mov r8d, esi
mov rcx, rbx
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_ReadFile]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.14005a8d8
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x110]
mov r8d, r14d
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_WriteFile]
cmp esi, r12d
jle 0x1400a1d71
mov r8d, esi
mov rdx, qword [rsp + 0x128]
lea r9, [rsp + 0x110]
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x1400a1d71
mov eax, 2
xor edx, edx
mov r8d, eax
call fcn.14005a8d8
jmp 0x1400a1a60
cmp r13, rsi
mov rbp, r13
jge 0x1400a1a60
mov r15b, byte [rsp + 0x128]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
mov r9b, r15b
mov r8d, edi
call fcn.14006aa44
cmp eax, r12d
je 0x1400a1a68
add rbp, r13
cmp rbp, rsi
jl 0x1400a1b72
jmp 0x1400a1a68
cmp al, 0x2d
jne 0x1400a1c5b
cmp rsi, r12
je 0x1400a1981
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.14005a8d8
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
mov r9b, r15b
mov r8d, edi
mov rbp, rax
call fcn.14006aa44
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.14005a8d8
mov rcx, rbx
mov rdi, rax
call fcn.1400df220
mov rsi, rax
sub esi, edi
lea ecx, [rsi + 0xca]
movsxd rdx, ecx
lea rcx, [rsp + 0x128]
call fcn.1400616c8
mov rdx, qword [rsp + 0x128]
lea r8d, [rsi + 0xc8]
lea r9, [rsp + 0x118]
mov rcx, rbx
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_ReadFile]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a8d8
lea rcx, [rsp + 0x48]
mov rdx, rbp
call fcn.14006af64
mov r8d, dword [rsp + 0x118]
jmp 0x1400a1b27
mov rcx, rbx
cmp rsi, r12
jne 0x1400a1c83
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x118]
mov r8d, r14d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x1400a1981
mov r8d, r13d
xor edx, edx
call fcn.14005a8d8
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
mov r9b, r15b
mov r8d, edi
mov rbp, rax
call fcn.14006aa44
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.14005a8d8
mov rcx, rbx
mov rdi, rax
call fcn.1400df220
mov rsi, rax
sub esi, edi
lea ecx, [rsi + 0xca]
movsxd rdx, ecx
lea rcx, [rsp + 0x128]
call fcn.1400616c8
mov rdx, qword [rsp + 0x128]
lea r8d, [rsi + 0xc8]
lea r9, [rsp + 0x118]
mov rcx, rbx
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_ReadFile]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a8d8
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x110]
mov r8d, r14d
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_WriteFile]
mov r8d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x128]
lea r9, [rsp + 0x110]
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_WriteFile]
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.14005a8d8
lea rcx, [rsp + 0x48]
movsxd rdx, eax
call fcn.14006af64
lea rcx, [rsp + 0x128]
call fcn.140059370
jmp 0x1400a1981
mov r12d, 1
lea rcx, [rsp + 0xb0]
call fcn.140059370
mov rbx, qword [rsp + 0x120]
mov rax, r12
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret