Function at 0x140094620
Capabilities:
Read file on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x46e0
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov qword [rsp + 0x4718], rbx
mov qword [rsp + 0x4720], rbp
mov qword [rsp + 0x4728], rsi
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x46d8], rax
mov r15, rcx
mov eax, dword [0x140434118]
test al, 1
jne 0x1400946a2
or eax, 1
mov dword [0x140434118], eax
lea rdx, [0x1404340f8]
call fcn.140093aa0
lea rcx, [0x1402dc1d0]
call fcn.140161180
nop
mov eax, dword [0x140434118]
test al, 2
jne 0x1400946d2
or eax, 2
mov dword [0x140434118], eax
lea r8, [0x1404340f8]
lea rdx, [0x1404340d8]
mov rcx, r15
call fcn.140093d20
lea rcx, [0x1402dc190]
call fcn.140161180
nop
mov word [rsp + Ordinal_1750], 0
xor edx, edx
mov r8d, 0x3ffe
lea rcx, [rsp + 0x6d2]
call sub.ntdll.dll_memset
mov rcx, r15
call fcn.140090f50
mov dword [rsp + 0x38], eax
test eax, eax
je 0x140095706
xor r13d, r13d
mov r14d, r13d
mov r12d, r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
nop
mov rbp, qword [r15]
xor edx, edx
mov r8d, 0x2000
lea rcx, [rsp + 0x6d0]
call sub.ntdll.dll_memset
lea rdi, [rsp + 0x6d0]
mov esi, r13d
mov rbx, r13
nop
nop
nop
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x30]
mov r8d, 2
mov rdx, rdi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14009484e
cmp dword [rsp + 0x30], 0
je 0x14009484e
add esi, 1
add rbx, 1
movzx eax, word [rdi]
add rdi, 2
cmp ax, 0xa
je 0x1400947a0
cmp esi, 0x1000
jb 0x140094750
mov word [rdi], 0
cmp byte [rsp + 0x6d0], 0xff
jne 0x140094802
cmp byte [rsp + 0x6d1], 0xfe
jne 0x140094802
mov rax, r13
lea rcx, [rsp + 0x6d2]
movzx edx, word [rsp + 0x6d2]
test dx, dx
je 0x1400947f8
nop
nop
nop
nop
mov word [rsp + rax*2 + Ordinal_1750], dx
add rax, 1
add rcx, 2
mov dx, word [rcx]
test dx, dx
jne 0x1400947e0
mov word [rsp + rax*2 + Ordinal_1750], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x6d0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp ecx, 2
jl 0x140094856
movsxd rax, ecx
cmp word [rsp + rax*2 + 0x6cc], 0xd
jne 0x140094856
cmp word [rsp + rax*2 + 0x6ce], 0xa
jne 0x140094856
mov word [rsp + rax*2 + 0x6cc], 0
mov word [rsp + rax*2 + Ordinal_1750], 0
jmp 0x140094856
mov word [rdi + rbx*2], 0
mov ecx, esi
test ecx, ecx
je 0x1400956da
mov r8d, 0xa
lea rdx, [0x1402e8230]
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.ntdll.dll_wcsncmp]
test eax, eax
jne 0x140094720
add r12d, 1
mov dword [rsp + 0x34], r12d
add r14d, 1
mov dword [rsp + 0x30], r14d
cmp r14d, dword [rsp + 0x38]
jl 0x140094720
mov ecx, reloc.MFC80U.DLL_Ordinal_280
call sub.MFC80U.DLL_Ordinal_774
mov r12, rax
mov qword [rsp + 0x80], rax
xor edx, edx
mov r8d, reloc.MFC80U.DLL_Ordinal_280
mov rcx, rax
call sub.ntdll.dll_memset
xor edx, edx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rdx
lea rdi, [rsp + 0x6d0]
lea rdx, [0x1402e82dc]
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.ntdll.dll_wcsstr]
mov r14, rax
test rax, rax
je 0x140095302
nop
nop
nop
mov word [rsp + 0x4d0], 0
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x4d2]
call sub.ntdll.dll_memset
mov r8, r14
sub r8, rdi
sar r8, 1
add r8, r8
mov rdx, rdi
lea rcx, [rsp + 0x4d0]
call sub.ntdll.dll_memcpy
mov word [rsp + 0x2d0], 0
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x2d2]
call sub.ntdll.dll_memset
mov word [rsp + 0xd0], 0
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0xd2]
call sub.ntdll.dll_memset
lea rdx, [0x1402e0f14]
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.ntdll.dll_wcsstr]
mov rdi, rax
test rax, rax
je 0x1400955f5
lea rax, [rsp + 0x4d0]
mov r8, rdi
sub r8, rax
sar r8, 1
add r8, r8
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x2d0]
call sub.ntdll.dll_memcpy
lea rdx, [rdi + 2]
lea rcx, [rsp + 0xd0]
sub rcx, rdx
nop
nop
nop
nop
movzx eax, word [rdx]
mov word [rcx + rdx], ax
add rdx, 2
test ax, ax
jne 0x140094a00
lea rsi, [rsp + 0x2d0]
lea rdi, str.Operation
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x140094a70
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12], eax
cmp eax, 0xd
jne 0x1400952e2
lea ecx, [rax + 0x13]
call sub.MFC80U.DLL_Ordinal_774
nop
test rax, rax
je 0x140094a60
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
jmp 0x140094a63
mov rax, r13
mov qword [r12 + 0xe0], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.DiskIndex
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x140094b19
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov ebp, eax
mov rsi, r13
mov rbx, r13
mov rdi, qword [0x1404340e0]
nop
nop
test rdi, rdi
je 0x140095413
mov rcx, qword [0x1404340e8]
sub rcx, rdi
movabs rax, 0x7878787878787879
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rsi, rdx
jae 0x140095413
cmp rsi, rdx
jb 0x140094af9
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [0x1404340e0]
cmp dword [rbx + rdi + 4], ebp
je 0x140094b0c
add rsi, 1
add rbx, 0x88
jmp 0x140094ab0
mov eax, dword [rbx + rdi]
mov dword [r12 + 4], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.DestDiskIndex
mov ecx, 0xe
repe cmpsw word [rsi], word [rdi]
jne 0x140094bbc
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov ebp, eax
mov rsi, r13
mov rbx, r13
mov rdi, qword [0x1404340e0]
test rdi, rdi
je 0x140095505
mov rcx, qword [0x1404340e8]
sub rcx, rdi
movabs rax, 0x7878787878787879
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rsi, rdx
jae 0x140095505
cmp rsi, rdx
jb 0x140094b9c
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [0x1404340e0]
cmp dword [rbx + rdi + 4], ebp
je 0x140094baf
add rsi, 1
add rbx, 0x88
jmp 0x140094b53
mov eax, dword [rbx + rdi]
mov dword [r12 + 8], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.StartSector
mov ecx, 0xc
repe cmpsw word [rsi], word [rdi]
jne 0x140094bed
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [r12 + 0x10], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.TotalSector
mov ecx, 0xc
repe cmpsw word [rsi], word [rdi]
jne 0x140094c1e
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [r12 + 0x18], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsPrimary
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x140094c4f
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0x30], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.DriveLetter
mov ecx, 0xc
repe cmpsw word [rsi], word [rdi]
jne 0x140094c7b
movzx eax, word [rsp + 0xd0]
mov word [r12 + 0x34], ax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e8890]
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x140094cc4
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xd0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [r12 + 0x36]
lea rdx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll_wcsncpy]
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.FileSysType
mov ecx, 0xc
repe cmpsw word [rsi], word [rdi]
jne 0x140094cf8
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xb8], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.ClusterSize
mov ecx, 0xc
repe cmpsw word [rsi], word [rdi]
jne 0x140094d2d
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov word [r12 + 0xbc], ax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsErase
mov ecx, 8
repe cmpsw word [rsi], word [rdi]
jne 0x140094d61
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xc0], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsHide
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x140094d95
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xc4], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.NewStartSector
mov ecx, 0xf
repe cmpsw word [rsi], word [rdi]
jne 0x140094dc6
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [r12 + 0x20], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.NewTotalSector
mov ecx, 0xf
repe cmpsw word [rsi], word [rdi]
jne 0x140094df7
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [r12 + 0x28], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.Passes
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x140094e2b
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xc8], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.ToNtfs
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x140094e5f
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xcc], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsSbys
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x140094e93
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xd0], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsEqualSrc
mov ecx, 0xb
repe cmpsw word [rsi], word [rdi]
jne 0x140094ec7
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xd4], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.PartCount
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x140094efb
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xdc], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsLogical
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x140094f2f
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xd8], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.PartType
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
jne 0x140094f63
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xf0], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.Serial
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x140094f97
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [r12 + 0xe8], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e8758]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x140094fcb
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xf4], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e8750]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x140094fff
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xf8], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.LIKE
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne 0x140095033
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0x104], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e8738]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x140095067
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0x108], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.MbrType
mov ecx, 8
repe cmpsw word [rsi], word [rdi]
jne 0x14009509b
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0xfc], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.IsMBR
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x1400950cf
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [r12 + 0x100], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.exClusterSize
mov ecx, 0xe
repe cmpsw word [rsi], word [rdi]
jne 0x140095103
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [r12 + 0x110], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e86f0]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
jne 0x140095134
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [rsp + 0x40], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e86e8]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x140095165
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [rsp + 0x48], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e86e0]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x140095196
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi64]
mov qword [rsp + 0x50], rax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e86d8]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
jne 0x1400951c6
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [rsp + 0x58], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e86d0]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x1400951f6
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [rsp + 0x60], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, [0x1402e86c4]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
jne 0x14009525d
movzx eax, word [rsp + 0xd0]
mov word [rsp + 0x5c], ax
lea rdx, [rsp + 0x40]
mov rcx, qword [r12 + 0xe0]
call fcn.140092af0
xor edx, edx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rdx
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.ACTEX
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x14009528a
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [rsp + 0x70], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.SYSEX
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x1400952b7
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [rsp + 0x74], eax
jmp 0x1400952e2
lea rsi, [rsp + 0x2d0]
lea rdi, str.BOOTEX
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x1400952e2
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ntdll.dll__wtoi]
mov dword [rsp + 0x78], eax
lea rdi, [r14 + 2]
lea rdx, [0x1402e82dc]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_wcsstr]
mov r14, rax
test rax, rax
jne 0x140094920
lea rdi, [r15 + 8]
mov rdx, qword [rdi + 8]
test rdx, rdx
jne 0x140095314
mov rcx, r13
jmp 0x14009531f
mov rcx, qword [rdi + 0x10]
sub rcx, rdx
sar rcx, 3
test rdx, rdx
je 0x140095352
mov rax, qword [rdi + 0x18]
sub rax, rdx
sar rax, 3
cmp rcx, rax
jae 0x140095352
mov rax, qword [rdi + 0x10]
mov qword [rax], r12
add rax, 8
mov qword [rdi + 0x10], rax
mov r12d, dword [rsp + 0x34]
mov r14d, dword [rsp + 0x30]
jmp 0x140094720
mov rsi, qword [rdi + 0x10]
cmp rdx, rsi
jbe 0x140095361
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14009539e
mov rcx, qword [rdi + 0x10]
mov rax, rcx
sub rax, rbx
sar rax, 3
je 0x14009539e
cmp rbx, rcx
jbe 0x140095395
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub rsi, rbx
sar rsi, 3
jmp 0x1400953a1
mov rsi, r13
movaps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0xa0], xmm0
lea r9, [rsp + 0x80]
mov r8d, 1
lea rdx, [rsp + 0xa0]
mov rcx, rdi
call fcn.140061590
mov rbx, qword [rdi + 8]
cmp rbx, qword [rdi + 0x10]
jbe 0x1400953e0
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
lea rax, [rbx + rsi*8]
cmp rax, qword [rdi + 0x10]
ja 0x1400953fe
cmp rax, qword [rdi + 8]
mov r12d, dword [rsp + 0x34]
mov r14d, dword [rsp + 0x30]
jae 0x140094720
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12d, dword [rsp + 0x34]
mov r14d, dword [rsp + 0x30]
jmp 0x140094720
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x140434050]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...configmgr.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x140095454
mov rsi, r13
jmp 0x1400954e0
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
mov r8d, 0x88
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400954a0
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400954d0
mov rax, qword [rbx]
lea r9, [rsp + 0xd0]
mov r8, rsi
lea rdx, str._s_Disk__s_no_find.
mov rcx, rbx
call qword [rax + 0x10]
mov r12d, dword [rsp + 0x34]
jmp 0x1400956da
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x140434050]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...configmgr.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x140095546
mov rsi, r13
jmp 0x1400955d0
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
mov r8d, 0xa2
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x140095590
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400955c0
mov rax, qword [rbx]
lea r9, [rsp + 0xd0]
mov r8, rsi
lea rdx, str._s_Disk__s_no_find.
mov rcx, rbx
call qword [rax + 0x10]
mov r12d, dword [rsp + 0x34]
jmp 0x1400956da
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x140434050]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...configmgr.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400956c3
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
lea r8d, [rax + 0x59]
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x140095680
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400956b0
mov r13, rsi
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:__tcsstr__to_fail.
mov rcx, rbx
call qword [rax + 0x10]
xor eax, eax
jmp 0x140095706
cmp dword [0x140427f28], 1
jne 0x1400956f3
mov dword [0x140427f28], r13d
mov dword [0x1404340d0], r12d
jmp 0x1400956fa
mov r12d, dword [0x1404340d0]
mov dword [r15 + Ordinal_1073], r12d
mov eax, 1
mov rcx, qword [rsp + 0x46d8]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x46e0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret