Function at 0x14003ff9a
Capabilities:
Check os version
Get file size

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x238
xor eax, eax
lea r13, [0x1400a64df]
mov ebx, ecx
lea rdi, [rsp + 0xc8]
mov ecx, 8
mov dword [rsp + 0x64], edx
rep stosd dword [rdi], eax
lea rax, [0x1400a64e3]
lea rsi, [rsp + 0xc8]
mov dword [rsp + 0x290], r8d
mov qword [rsp + 0xb8], rax
mov rax, qword [0x1400b6330]
mov qword [rsp + 0xb0], r13
mov eax, dword [rax]
mov qword [rsp + 0x68], rsi
cmp eax, 5
je 0x140040028
xor esi, esi
cmp eax, 3
jne 0x14004002d
mov rax, qword [0x1400b67d0]
xor esi, esi
cmp byte [rax + 0x577], 4
seta sil
add rax, 0x578
jmp 0x14004003d
mov esi, 1
movsxd rax, esi
neg rax
and eax, 0xc
add rax, qword [0x1400b6450]
mov qword [rsp + 0x20], rax
mov edx, 1
mov ecx, 1
xor r8d, r8d
mov r9d, 0xca2
call fcn.14001ea8e
mov rax, qword [0x1400b5f80]
xor edx, edx
mov dword [0x1400846e0], edx
xor edx, edx
mov ecx, dword [rax + 0x10]
mov eax, ecx
shr eax, 1
je 0x140040078
mov dl, 1
jmp 0x140040070
test dl, dl
je 0x14004008a
bsr edx, ecx
test ecx, ecx
cmovne eax, edx
mov dword [0x1400846e0], eax
mov dword [0x1400846d8], eax
lea eax, [rcx - 1]
mov dword [0x1400846dc], ecx
mov dword [0x1400846d4], ecx
mov dword [0x1400846d0], eax
test rcx, rcx
je 0x1400400b8
add rcx, 0x10
call fcn.140079730
test rax, rax
jne 0x1400400d5
xor eax, eax
xor r14d, r14d
xor r12d, r12d
mov qword [rsp + 0x58], 0xffffffffffffffff
mov qword [0x1401188f0], rax
jmp 0x140040d64
lea rdx, [rax + 0x10]
mov ecx, ebx
mov r9d, 1
xor r8d, r8d
and rdx, 0xfffffffffffffff0
mov qword [rdx - 8], rax
mov dword [rsp + 0x20], 1
mov qword [0x1401188f0], rdx
xor edx, edx
call fcn.140008b74
lea rcx, str.Could_open_volume_for_Syslinux_installation
mov qword [rsp + 0x58], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140040170
xor eax, eax
mov r8d, dword [0x1400846dc]
mov rdx, qword [0x1401188f0]
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x58]
call qword [0x14011c6d8]
mov r12d, eax
test eax, eax
jne 0x14004015a
lea rcx, str.Could_not_read_VBR
xor r14d, r14d
call fcn.140038472
jmp 0x140040d64
mov eax, dword [0x1400846dc]
cmp dword [rsp + 0x80], eax
je 0x14004017a
lea rcx, str.Could_not_read_the_whole_VBR
call fcn.140038472
jmp 0x140040d5e
mov rcx, qword [0x1401188f0]
lea rdx, [rsp + 0x84]
call fcn.14006e263
mov rbx, rax
test rax, rax
je 0x1400401aa
mov rdx, rax
lea rcx, str.Error:__s
call fcn.140038472
jmp 0x140040d5e
mov rcx, qword [0x1400b6a50]
call fcn.14006e6eb
cmp dword [0x1401188d0], 0
je 0x140040405
cmp dword [0x1401188d4], 0
je 0x140040405
call fcn.14003ff65
mov rax, qword [0x1400b67d0]
lea rdi, [0x1401188d0]
xor r12d, r12d
lea rsi, [0x1401188e0]
lea r14, [0x1400a64e3]
lea r15, [rax + 0x584]
mov ecx, dword [rdi]
call fcn.140079730
mov qword [rsi], rax
test rax, rax
je 0x140040d5e
mov rax, r14
test r12d, r12d
jne 0x14004021d
lea rax, [0x1400a64df]
mov qword [rsp + 0x48], rax
lea rax, str.ldlinux
lea rdx, [rsp + 0x12c]
or r8, 0xffffffffffffffff
mov qword [rsp + 0x40], rax
mov rax, qword [0x1400b67d0]
lea r9, str._s_s__s_s_s._s
mov qword [rsp + 0x50], rdx
mov edx, 0x104
mov rcx, qword [rsp + 0x50]
add rax, 0x578
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rax
lea rax, str.syslinux
mov qword [rsp + 0x28], rax
lea rax, [0x1400a6577]
mov qword [rsp + 0x20], rax
call qword [sym.imp.msvcrt.dll_clearerr]
mov rcx, qword [rsp + 0x50]
lea rdx, [0x1400a657d]
mov byte [rsp + 0x22f], 0
call fcn.140079698
mov r9, rax
test rax, rax
jne 0x1400402be
mov r8, qword [rsp + 0x50]
mov rdx, qword [0x1400b6220]
lea rcx, str.Could_not_open__s_s
jmp 0x1400404c0
mov r8d, dword [rdi]
mov rcx, qword [rsi]
mov edx, 1
mov qword [rsp + 0x70], rax
call fcn.1400796c0
mov rcx, qword [rsp + 0x70]
mov rbp, rax
call sub.msvcrt.dll_wcsstr
mov edx, dword [rdi]
cmp rdx, rbp
je 0x1400402ff
mov r8, qword [rsp + 0x50]
mov rdx, qword [0x1400b6220]
lea rcx, str.Could_not_read__s_s
jmp 0x1400404c0
mov rcx, qword [rsi]
call fcn.140018164
lea r9, [0x1400a64eb]
test eax, eax
je 0x140040319
lea r9, [0x1400a64e7]
mov r8, qword [rsp + 0x50]
mov rdx, qword [0x1400b6220]
add rdi, 4
add rsi, 8
lea rcx, str.Using_existing__s_s__s
call fcn.140038472
lea eax, [r12 + 1]
mov r12d, 1
cmp eax, 2
jne 0x1400401fb
movsx eax, byte [rsp + 0x64]
lea rsi, [rsp + 0x12c]
mov rdi, qword [0x14011cc00]
lea rbp, [rsp + 0x12f]
mov ecx, eax
mov dword [rsp + 0x64], eax
call rdi
mov qword [rsp + 0x50], rsi
or r8, 0xffffffffffffffff
mov rcx, qword [rsp + 0x50]
lea rsi, str.ldlinux
mov qword [rsp + 0x30], r13
lea r9, str._c:_s._s
mov edx, 0x104
mov qword [rsp + 0x28], rsi
mov rsi, qword [sym.imp.msvcrt.dll_clearerr]
mov dword [rsp + 0x20], eax
call rsi
xor eax, eax
xor r9d, r9d
mov byte [rsp + 0x22f], 0
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x50]
mov r8d, 3
mov edx, 0xc0000000
mov dword [rsp + 0x28], 7
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.DLL_DeleteCriticalDeleteFileW]
cmp rax, 0xffffffffffffffff
mov r13, rax
jne 0x1400404ca
call fcn.14003893c
mov rdx, rbp
lea rcx, str.Unable_to_create__s:__s
mov r8, rax
jmp 0x1400404c0
shl rsi, 4
lea rax, [0x1400a69e0]
mov r15, qword [sym.imp.msvcrt.dll_clearerr]
lea rbp, [0x1401188d0]
add rsi, rax
xor edi, edi
lea r14, str.ldlinux
lea r9, str._s._s
mov rax, qword [rsp + rdi*8 + 0xb0]
or r8, 0xffffffffffffffff
lea r12, [rsp + 0xec]
mov edx, 0x40
mov rcx, r12
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x28], rax
call r15
xor eax, eax
mov rdx, qword [rsi + rdi*8]
mov r9, r12
mov dword [rbp], eax
mov rax, qword [0x1400b66e0]
mov r8d, 0xa
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbp
mov rcx, qword [rax]
mov byte [rsp + 0x12b], 0
call fcn.1400371fc
lea rdx, [0x1401188e0]
mov qword [rdx + rdi*8], rax
test rax, rax
je 0x140040d5e
lea rax, [rdi + 1]
add rbp, 4
mov edi, 1
cmp rax, 2
je 0x14004034d
jmp 0x14004042a
call fcn.140038472
jmp 0x140040d5e
mov dword [rsp + 0x20], 4
mov r8d, dword [0x1401188d0]
xor r9d, r9d
mov rcx, rax
mov rdx, qword [0x1401188e0]
call fcn.140039485
test eax, eax
jne 0x14004050e
call fcn.14003893c
mov rdx, rbp
lea rcx, str.Could_not_write__s:__s
mov r8, rax
call fcn.140038472
xor r14d, r14d
jmp 0x140040d09
mov dword [rsp + 0x20], 4
mov rdx, qword [0x1400b6a50]
xor r9d, r9d
mov rcx, r13
mov r8d, 0x400
call fcn.140039485
mov r12d, eax
test eax, eax
jne 0x140040554
call fcn.14003893c
mov rdx, rbp
lea rcx, str.Could_not_write_ADV_to__s:__s
xor r14d, r14d
mov r8, rax
call fcn.140038472
jmp 0x140040d68
mov rdx, rbp
lea rcx, str.Successfully_wrote__s
call fcn.140038472
mov rax, qword [0x1400b6330]
cmp dword [rax], 3
je 0x140040581
movss xmm1, dword [0x1400a6a00]
mov ecx, 7
call fcn.1400450da
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_GetProductInfo]
test eax, eax
jne 0x14004059f
lea rcx, str.FlushFileBuffers_failed
call fcn.140038472
jmp 0x140040506
mov ecx, dword [0x1400846e0]
mov ebp, dword [0x1400846dc]
mov edx, 8
add ebp, dword [0x1401188d0]
add ebp, 0x3ff
shr ebp, cl
movsxd rcx, ebp
call sub.msvcrt.dll_vfprintf
mov r14, rax
test rax, rax
je 0x140040506
cmp dword [rsp + 0x290], 2
je 0x140040604
jg 0x1400405f1
cmp dword [rsp + 0x290], 1
ja 0x1400407c0
jmp 0x140040755
cmp dword [rsp + 0x290], 4
je 0x140040755
jmp 0x1400407c0
mov ecx, dword [rsp + 0x64]
call rdi
lea rdi, [rsp + 0xec]
or r8, 0xffffffffffffffff
mov edx, 0x40
lea r9, [0x1400a6657]
mov rcx, rdi
mov dword [rsp + 0x20], eax
call qword [sym.imp.msvcrt.dll_clearerr]
mov rax, qword [rsp + 0x58]
mov rcx, rdi
mov rdx, qword [rsp + 0x68]
mov byte [rsp + 0x12b], 0
mov qword [rsp + 0xd0], rax
call fcn.14006ec82
lea rcx, str.Could_not_fetch_NTFS_volume_info
test eax, eax
jne 0x1400406ea
xor eax, eax
mov r12, r14
lea r15, [rsp + 0x88]
xor edi, edi
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x78], rax
jmp 0x1400406b0
test r8b, r8b
je 0x1400406a0
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x88], rax
mov r8, qword [rsp + 0x70]
mov rdx, r15
mov rcx, r13
call fcn.14006ea95
test eax, eax
jne 0x1400407cc
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0xa8]
call fcn.14006eb52
test eax, eax
je 0x1400406f4
lea rcx, str.Could_not_translate_ldlinux.sys_LCN_to_disk_LBA
call fcn.140038472
jmp 0x140040d09
mov ecx, dword [rsp + 0xdc]
mov rdx, qword [rsp + 0xa0]
xor r8d, r8d
sub rdx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x90]
imul rdx, rcx
sub rax, qword [rsp + 0xe0]
mov qword [rsp + 0x90], rax
add rdx, rax
cmp rdx, rax
setne cl
cmp edi, ebp
setl r9b
and cl, r9b
je 0x140040693
add r12, 8
mov qword [r12 - 8], rax
inc edi
inc rax
mov r8d, ecx
jmp 0x14004072d
mov rdx, qword [rsp + 0x58]
lea rcx, [0x14003fe10]
call fcn.14006dd10
lea rcx, str.Syslinux_FAT_access_error
mov r12, rax
test rax, rax
je 0x1400406ea
xor r9d, r9d
lea r8, str.LDLINUX_SYS
xor edx, edx
mov rcx, rax
call fcn.14006de90
mov rcx, r12
xor edi, edi
mov edx, eax
call fcn.14006db30
test rax, rax
je 0x1400407b6
cmp ebp, edi
jle 0x1400407b6
mov qword [r14 + rdi*8], rax
mov rdx, rax
mov rcx, r12
inc rdi
call fcn.14006db66
jmp 0x140040799
mov rcx, r12
call fcn.14006de74
jmp 0x1400407cc
lea rcx, str.Unsupported_Syslinux_filesystem
jmp 0x1400406ea
mov rbp, qword [0x1400b67d0]
lea rcx, [rbp + 0x180]
call fcn.1400797e8
movsxd r12, eax
test eax, eax
je 0x1400407fe
dec rax
cmp byte [rax + rbp + 0x181], 0x2f
jne 0x1400407df
movsxd rax, r12d
mov byte [rbp + rax + 0x180], 0
xor r15d, r15d
lea rax, [rbp + 0x180]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x28], r15
mov edx, edi
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.14006e760
test r12d, r12d
je 0x140040830
mov byte [rbp + r12 + 0x180], 0x2f
test eax, eax
jns 0x14004084c
lea rcx, str.Could_not_patch_Syslinux_files.
call fcn.140038472
lea rcx, str.WARNING:_This_could_be_caused_by_your_firewall_having_modified_downloaded_content__such_as_ldlinux.sys...
jmp 0x1400406ea
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rdi, qword [0x14011c720]
mov rcx, r13
call rdi
test eax, eax
jne 0x140040885
call fcn.14003893c
lea rdx, [rsp + 0x12f]
lea rcx, str.Could_not_rewrite__s:__s_n
mov r8, rax
call fcn.140038472
jmp 0x140040d09
mov dword [rsp + 0x20], 4
mov r8d, dword [0x1401188d0]
xor r9d, r9d
mov rcx, r13
mov rdx, qword [0x1401188e0]
call fcn.140039485
test eax, eax
je 0x140040864
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400408c3
mov rcx, r13
or r13, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.DLL_CreateDirectorCreateEventACreateFileA]
jmp 0x1400408c6
xor r13d, r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x58]
call rdi
test eax, eax
jne 0x1400408ed
call fcn.14003893c
lea rcx, str.Could_not_read_Syslinux_boot_record:__s
mov rdx, rax
jmp 0x140040980
xor r12d, r12d
mov r8d, dword [0x1400846dc]
mov rdx, qword [0x1401188f0]
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], r12
mov rcx, qword [rsp + 0x58]
call qword [0x14011c6d8]
test eax, eax
je 0x1400408d9
mov edx, dword [rsp + 0x80]
mov r8d, dword [0x1400846dc]
cmp edx, r8d
jae 0x14004093e
lea rcx, str.Partial_read_of_Syslinux_boot_record:_read__d_bytes_but_requested__d
call fcn.140038472
jmp 0x140040d09
cmp dword [rsp + 0x290], 2
mov edx, 3
jne 0x140040952
mov edx, 4
mov rcx, qword [0x1401188f0]
call fcn.14006e200
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x58]
call rdi
test eax, eax
jne 0x14004098a
call fcn.14003893c
lea rcx, str.Could_not_write_Syslinux_boot_record:__s
mov rdx, rax
call fcn.140038472
jmp 0x140040d09
mov dword [rsp + 0x20], 4
mov r8d, dword [0x1400846dc]
xor r9d, r9d
mov rdx, qword [0x1401188f0]
mov rcx, qword [rsp + 0x58]
call fcn.140039485
test eax, eax
je 0x140040971
lea rcx, str.Successfully_wrote_Syslinux_boot_record
call fcn.140038472
mov rax, qword [0x1400b6330]
cmp dword [rax], 5
jne 0x140040b74
call fcn.14003ff65
mov rax, qword [0x1400b6450]
lea rbx, [0x1400a6864]
lea r15, str.syslinux
lea r9, str._s_s__s
or r8, 0xffffffffffffffff
mov edx, 0x104
mov rcx, qword [rsp + 0x50]
add rax, 0xc
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x30], rax
lea rax, [0x1400a6577]
mov qword [rsp + 0x20], rax
call rsi
mov rcx, qword [rsp + 0x50]
mov byte [rsp + 0x22f], 0
call qword [sym.imp.msvcrt.dll__initterm]
mov ecx, dword [rsp + 0x64]
call qword [0x14011cc00]
mov qword [rsp + 0x30], rbx
lea rbx, str.ldlinux
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x28], rbx
lea r9, str._c:_s._s
or r8, 0xffffffffffffffff
lea rbx, [rsp + 0x12f]
mov edx, 0x104
mov dword [rsp + 0x20], eax
call rsi
mov rcx, rbx
lea rdx, [0x1400a657d]
mov byte [rsp + 0x22f], 0
call fcn.140079698
mov rcx, rax
test rax, rax
jne 0x140040a9c
mov rdx, rbx
lea rcx, str.Caution:_No__s_was_provided._The_target_will_be_missing_a_required_Syslinux_file_
call fcn.140038472
jmp 0x140040b7d
call sub.msvcrt.dll_wcsstr
mov rcx, rbx
call fcn.14003febd
mov rcx, qword [rsp + 0x50]
mov rdi, rax
call fcn.14003febd
mov r8d, 1
mov rcx, rdi
mov rdx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.DLL_CreateFileA]
mov r12d, eax
call qword [sym.imp.KERNEL32.DLL_PeekNamedPipe]
mov ebp, eax
test rdi, rdi
je 0x140040ae3
mov rcx, rdi
call fcn.1400796c8
test rsi, rsi
je 0x140040af0
mov rcx, rsi
call fcn.1400796c8
mov ecx, ebp
call qword [0x14011c730]
test r12d, r12d
je 0x140040b59
mov rcx, rbx
call fcn.1400181c3
mov edx, eax
lea rax, [0x1400a64eb]
test edx, edx
je 0x140040b19
lea rax, [0x1400a64e7]
mov qword [rsp + 0x38], rax
mov rax, qword [0x1400b6450]
lea r9, [0x1400a6577]
lea rcx, str.Created__s__from__s_s_s__s_s___s
mov qword [rsp + 0x30], rbx
mov r8, qword [0x1400b6220]
lea rbp, [rax + 0xc]
mov qword [rsp + 0x20], r15
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x28], rbp
call fcn.140038472
jmp 0x140040b7d
call fcn.14003893c
mov rdx, qword [rsp + 0x50]
lea rcx, str.Failed_to_create__s:__s
mov r8, rax
call fcn.140038472
jmp 0x140040b7d
cmp byte [rbp + 0x200], 0
jne 0x140040b85
mov rbx, r13
jmp 0x140040d33
lea rcx, str.Setting_up_ReactOS...
xor esi, esi
call fcn.140038472
lea rax, [0x1401188c0]
mov dword [rsp + 0x28], esi
lea r9, str.mboot.c32
mov qword [rsp + 0x20], rax
mov r8d, 0xa
mov edx, 0x194
mov rax, qword [0x1400b66e0]
mov rcx, qword [rax]
call fcn.1400371fc
mov qword [0x1401188c8], rax
test rax, rax
je 0x140040d09
mov ecx, dword [rsp + 0x64]
mov rdi, qword [0x14011cc00]
lea rsi, str.mboot.c32
call rdi
mov qword [rsp + 0x28], rsi
mov rcx, qword [rsp + 0x50]
or r8, 0xffffffffffffffff
lea r9, str._c:_s
mov edx, 0x104
mov dword [rsp + 0x20], eax
mov rsi, qword [sym.imp.msvcrt.dll_clearerr]
call rsi
xor r11d, r11d
mov byte [rsp + 0x22f], 0
xor r9d, r9d
mov qword [rsp + 0x30], r11
mov rcx, qword [rsp + 0x50]
mov r8d, 3
mov edx, 0xc0000000
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.DLL_DeleteCriticalDeleteFileW]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x140040c62
mov rdx, qword [rsp + 0x50]
lea rcx, str.Unable_to_create__s_n
jmp 0x140040980
mov dword [rsp + 0x20], 4
mov r8d, dword [0x1401188c0]
xor r9d, r9d
mov rcx, rax
mov rdx, qword [0x1401188c8]
call fcn.140039485
mov r12d, eax
lea rax, [r13 - 1]
test r12d, r12d
jne 0x140040ca5
mov rdx, qword [rsp + 0x50]
lea rcx, str.Could_not_write__s
call fcn.140038472
jmp 0x140040d68
cmp rax, 0xfffffffffffffffd
ja 0x140040cb8
mov rcx, r13
or rbx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.DLL_CreateDirectorCreateEventACreateFileA]
mov ecx, dword [rsp + 0x64]
call rdi
mov rcx, qword [rsp + 0x50]
or r8, 0xffffffffffffffff
mov edx, 0x104
lea r9, str._c:_syslinux.cfg
mov dword [rsp + 0x20], eax
call rsi
mov rcx, qword [rsp + 0x50]
lea rdx, [0x1400a6962]
mov byte [rsp + 0x22f], 0
call fcn.140079698
mov rsi, rax
test rax, rax
jne 0x140040d0e
lea rcx, str.Could_not_create_ReactOS_syslinux.cfg
mov r13, rbx
call fcn.140038472
xor r12d, r12d
jmp 0x140040d68
mov rcx, rax
lea r9, [rbp + 0x200]
lea r8, str.mboot.c32
lea rdx, str.DEFAULT_ReactOS_nLABEL_ReactOS_n__KERNEL__s_n__APPEND__s
call fcn.1400796a0
mov rcx, rsi
call sub.msvcrt.dll_wcsstr
mov rax, qword [0x1400b6330]
cmp dword [rax], 3
jne 0x140040d4a
mov r13, rbx
mov r12d, 1
jmp 0x140040d68
movss xmm1, dword [0x1400a6a00]
mov ecx, 7
call fcn.1400450da
jmp 0x140040d3f
xor r14d, r14d
xor r12d, r12d
or r13, 0xffffffffffffffff
mov rax, qword [0x1401188f0]
test rax, rax
je 0x140040d7d
mov rcx, qword [rax - 8]
call fcn.1400796c8
mov rcx, qword [0x1401188e0]
xor r8d, r8d
mov qword [0x1401188f0], r8
call fcn.1400796c8
mov rcx, qword [0x1401188e8]
xor r9d, r9d
mov qword [0x1401188e0], r9
call fcn.1400796c8
xor r10d, r10d
mov rcx, r14
mov qword [0x1401188e8], r10
call fcn.1400796c8
mov rax, qword [rsp + 0x58]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140040e03
xor eax, eax
xor edx, edx
xor ecx, ecx
xor r9d, r9d
mov dword [rsp + 0x28], edx
xor r8d, r8d
mov edx, 0x9001c
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
call qword [sym.imp.KERNEL32.DLL_GetFileSizeEx]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.DLL_CreateDirectorCreateEventACreateFileA]
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140040e16
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_CreateDirectorCreateEventACreateFileA]
mov eax, r12d
add rsp, 0x238
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret