Function at 0x14008bc14
Capabilities:
Encode data using base64
Get disk information
Inspect section memory permissions
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x450
movaps xmmword [rax - 0x48], xmm6
lea rcx, [rax + 0x10]
movaps xmmword [rax - 0x58], xmm7
call fcn.140058ecc
lea rcx, [rsp + 0x88]
mov edx, 5
call fcn.140061694
lea rcx, [rsp + 0x2c0]
mov edx, 0x14
call fcn.140061694
lea rcx, [rsp + 0x248]
call fcn.140061620
lea rcx, [rsp + 0x1b0]
call fcn.140061620
lea rcx, [rsp + 0x220]
call fcn.140061620
xor ebx, ebx
or r15, 0xffffffffffffffff
mov rdx, r15
mov eax, r15d
mov r13d, 0xfffc0000
mov dword [rsp + 0xe4], eax
mov dword [rsp + 0x110], eax
mov rax, r15
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x150], rdx
mov qword [rsp + 0x288], rdx
mov qword [rsp + 0x250], rdx
lea edi, [rbx + 0x2c]
lea rcx, [rsp + 0x188]
lea rdx, [rsp + 0x1b0]
mov r8d, edi
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x2d0], rbx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x238], r15
mov dword [rsp + 0xc4], r13d
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x4a8], ebx
mov dword [rsp + 0x1fc], ebx
mov word [rsp + 0x74], r15w
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x228], rbx
mov dword [rsp + 0xb8], ebx
mov byte [rsp + 0xbe], bl
mov byte [rsp + 0x83], bl
mov byte [rsp + 0x109], bl
mov byte [rsp + 0x101], bl
mov sil, bl
mov byte [rsp + 0x4d], bl
mov byte [rsp + 0x6c], bl
mov byte [rsp + 0x108], bl
mov byte [rsp + 0x7e], bl
mov dword [rsp + 0x120], ebx
call fcn.1400654c0
mov r14, qword [rsp + 0x1b0]
mov rax, qword [rsp + 0x188]
mov word [r14], bx
cmp di, word [rax]
jne 0x14008be1c
mov word [rax], bx
add rax, 2
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x188]
mov r8d, edi
mov qword [rsp + 0x188], rax
call fcn.1400654c0
mov r14, qword [rsp + 0x1b0]
mov rax, 0xfffffffffffffff7
mov r12d, 0xfffff000
mov dl, bl
mov byte [rsp + 0x50], bl
mov byte [rsp + 0xa4], bl
mov byte [rsp + 0x10c], r15b
mov dword [rsp + 0x70], r12d
mov dword [rsp + 0x148], r12d
mov byte [rsp + 0x130], bl
mov byte [rsp + 0x6d], bl
mov byte [rsp + 0x10b], bl
mov byte [rsp + 0x51], bl
mov byte [rsp + 0x4c], bl
mov byte [rsp + 0x4e], bl
mov byte [rsp + 0x41], bl
mov byte [rsp + 0x40], bl
mov byte [rsp + 0x44], bl
mov byte [rsp + 0xbc], bl
mov byte [rsp + 0x1f8], r15b
mov byte [rsp + 0x80], r15b
mov word [rsp + 0x1a0], bx
mov qword [rsp + 0x2a0], rbx
mov rbp, rbx
mov qword [rsp + 0x2b0], rbx
mov edi, ebx
mov dword [rsp + 0xa8], ebx
mov byte [rsp + 0x81], bl
mov byte [rsp + 0x64], bl
lea ebx, [rax + 0xd]
mov dword [rsp + 0x240], r15d
lea r15d, [rax + 0xa]
lea r12d, [rax + 0x11]
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x230], rax
mov rcx, rax
mov qword [rsp + 0x280], rax
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x498]
mov dword [rsp + 0x190], edx
xor edx, edx
mov qword [rsp + 0x258], r15
mov qword [rsp + 0x138], rbx
cmp word [rax], dx
je 0x14008c51e
lea rdx, [rsp + 0x498]
lea rcx, str._admin
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008bf45
or byte [rsp + 0x50], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, [0x14011daa0]
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008bf6f
or byte [rsp + 0x50], 2
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._devid
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008bf9d
bts dword [rsp + 0x1fc], 0x10
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._devidx
mov r8d, 7
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008bfcb
bts dword [rsp + 0x1fc], 0x11
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, [0x140117e40]
mov r8d, ebx
call fcn.14006402c
xor ecx, ecx
cmp al, cl
jne 0x14008ce59
lea rdx, [rsp + 0x498]
lea rcx, str._usb
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
jne 0x14008c495
lea r8d, [rdx + 6]
lea rcx, str._hextp
lea rdx, [rsp + 0x498]
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c033
or edi, r15d
jmp 0x14008cb2a
lea rdx, [rsp + 0x498]
lea rcx, str._phy
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c058
or edi, 2
jmp 0x14008cb2a
lea rdx, [rsp + 0x498]
lea rcx, [0x14011da70]
mov r8d, 5
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c080
or edi, 0x10
jmp 0x14008cb2a
lea rdx, [rsp + 0x498]
lea rcx, str._drv
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c0a5
or edi, r12d
jmp 0x14008cb2a
lea rdx, [rsp + 0x498]
lea rcx, [0x14011da60]
mov r8d, 5
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c0cc
or edi, ebx
jmp 0x14008cb2a
lea rdx, [rsp + 0x498]
lea rcx, str._dvol
mov r8d, 5
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c0f5
bts edi, 8
jmp 0x14008cb2a
lea rdx, [rsp + 0x498]
lea rcx, [0x14011da54]
mov r8d, 3
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c11f
mov byte [rsp + 0x4e], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._xup
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c146
mov byte [rsp + 0x41], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._axup
mov r8d, 5
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c170
mov byte [rsp + 0x41], 0x21
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._hup
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c197
mov byte [rsp + 0x40], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._ahup
mov r8d, 5
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c1c1
mov byte [rsp + 0x40], 0x21
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._gpt
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c1e8
mov byte [rsp + 0x44], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._gptmini
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c20f
mov byte [rsp + 0x44], 2
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._gpth
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c235
mov byte [rsp + 0x44], bl
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._mbr
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c25f
mov byte [rsp + 0x101], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._cmp
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c289
mov byte [rsp + 0xbc], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, [0x140117ddc]
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c2b6
mov byte [rsp + 0x109], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, [0x14011da08]
mov r8d, 3
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c2e3
mov byte [rsp + 0x108], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, [0x14011d0c4]
mov r8d, 2
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c315
mov eax, 0x100
add word [rsp + 0x1a0], ax
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, [0x14011da00]
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c33c
mov byte [rsp + 0x7e], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._lskip
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c366
or byte [rsp + 0x6c], 0x40
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._locku
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
jne 0x14008c5d5
mov r11, qword [rsp + 0x498]
lea r8d, [rdx + 7]
lea rcx, str._locku:
mov rdx, r11
call fcn.14005a5c4
xor edx, edx
cmp al, dl
je 0x14008c3b6
mov byte [rsp + 0x4d], 3
add r11, 2
jmp 0x14008c3da
lea rcx, str._lock:
mov r8d, 6
mov rdx, r11
call fcn.14005a5c4
xor edx, edx
cmp al, dl
je 0x14008c58b
mov byte [rsp + 0x4d], r15b
add r11, 0xc
mov qword [rsp + 0x498], r11
movzx ecx, word [r11]
cmp cx, dx
je 0x14008c45c
mov r9d, 9
cmp r9w, cx
ja 0x14008c401
cmp cx, 0xd
jbe 0x14008c45c
mov r8d, 0x20
cmp r8w, cx
je 0x14008c45c
lea eax, [rcx - 0x30]
cmp ax, r9w
jbe 0x14008c45c
mov qword [rsp + 0x158], r11
cmp r9w, cx
ja 0x14008c42a
cmp cx, 0xd
jbe 0x14008c447
cmp r8w, cx
je 0x14008c447
add r11, 2
mov qword [rsp + 0x498], r11
mov cx, word [r11]
cmp cx, dx
je 0x14008c486
jmp 0x14008c41e
cmp word [r11], dx
je 0x14008c486
mov word [r11], dx
add qword [rsp + 0x498], 2
jmp 0x14008c486
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x498]
call fcn.140007a28
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x498]
call fcn.140007a28
lea rcx, [rsp + 0x498]
call fcn.140058ecc
xor edx, edx
mov rax, qword [rsp + 0x498]
mov ebx, 4
cmp word [rax], dx
jne 0x14008bf1b
mov rcx, qword [rsp + 0x280]
mov r8, qword [rsp + 0x260]
mov rax, 0xfffffffffffffffe
cmp rcx, rax
jne 0x14008c4d9
mov rcx, r8
cmp r8, 0xfffffffffffffff7
mov rax, 0xffffffffffffffff
cmove rcx, rax
mov rdx, qword [rsp + 0x150]
mov qword [rsp + 0x298], rdx
mov rdx, qword [rsp + 0x250]
mov qword [rsp + 0x288], rdx
cmp r8, 0xfffffffffffffff7
jne 0x14008ce39
mov r12, qword [rsp + 0x118]
mov edi, dword [rsp + 0x148]
mov qword [rsp + 0x278], r12
mov dword [rsp + 0x70], edi
mov r8, r15
mov qword [rsp + 0x260], r15
cmp rcx, 0xfffffffffffffff7
lea rdx, [rsp + 0x498]
cmove rcx, r8
mov r8d, ebx
mov qword [rsp + 0x280], rcx
lea rcx, [0x14011d9d4]
call fcn.14006402c
xor edi, edi
cmp al, dil
je 0x14008cfef
lea rdx, [rsp + 0x498]
lea rcx, [0x14011d9cc]
mov r8d, ebx
call fcn.14006402c
cmp al, dil
je 0x14008ceac
mov r12b, r15b
mov dword [rsp + 0xa4], r12d
jmp 0x14008cff7
lea rdx, [rsp + 0x498]
lea rcx, str._lock
mov r8d, 5
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c5b5
mov byte [rsp + 0x4d], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._lockx
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c5df
mov byte [rsp + 0x4d], 3
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._lock_
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008c615
or rax, 0xffffffffffffffff
mov byte [rsp + 0x4d], pe_nt_image_headers64
mov qword [rsp + 0x1b8], rax
jmp 0x14008c495
mov r11, qword [rsp + 0x498]
lea rcx, [0x14011d9ac]
mov r8d, ebx
mov rdx, r11
call fcn.14005a5c4
xor ecx, ecx
cmp al, cl
je 0x14008c674
lea rax, [r11 + 8]
lea r9d, [rcx + 0x3d]
lea r10d, [rcx + 9]
cmp word [rax], cx
je 0x14008c739
cmp r9w, word [rax]
je 0x14008c739
cmp r10w, word [rax]
ja 0x14008c664
cmp word [rax], 0xd
jbe 0x14008c739
mov r8d, 0x20
cmp r8w, word [rax]
je 0x14008c73f
lea rcx, str._pbr
mov r8d, ebx
mov rdx, r11
call fcn.14005a5c4
xor edx, edx
lea r10d, [rdx + 9]
cmp al, dl
je 0x14008c6cb
lea rax, [r11 + 8]
lea r9d, [rdx + 0x3d]
cmp word [rax], dx
je 0x14008c7d7
cmp r9w, word [rax]
je 0x14008c7d7
cmp r10w, word [rax]
ja 0x14008c6bb
cmp word [rax], 0xd
jbe 0x14008c7d7
mov r8d, 0x20
cmp r8w, word [rax]
je 0x14008c7dd
lea rcx, str._alignend
mov r8d, r10d
mov rdx, r11
call fcn.14005a5c4
xor edx, edx
cmp al, dl
je 0x14008c93e
lea rbx, [r11 + 0x12]
lea r9d, [rdx + 0x3d]
lea r8d, [rdx + 9]
cmp word [rbx], dx
je 0x14008c718
cmp r9w, word [rbx]
je 0x14008c718
cmp r8w, word [rbx]
ja 0x14008c70a
cmp word [rbx], 0xd
jbe 0x14008c718
mov eax, 0x20
cmp ax, word [rbx]
jne 0x14008c939
mov qword [rsp + 0x498], rbx
movzx edi, word [rbx]
cmp r9w, di
je 0x14008c89c
mov rax, 0xfffffffffffffffe
jmp 0x14008c8df
mov r8d, 0x20
mov qword [rsp + 0x498], rax
mov rbp, rcx
mov qword [rsp + 0x2b0], rcx
cmp r9w, word [rax]
je 0x14008c76c
lea r8, [0x14011d990]
mov qword [rsp + 0x2a0], r8
jmp 0x14008c486
add rax, 2
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], rax
call fcn.140058ecc
xor edx, edx
mov rax, qword [rax]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x498]
movzx ecx, word [rax]
cmp cx, dx
je 0x14008c486
cmp r10w, cx
ja 0x14008c7b2
cmp cx, 0xd
jbe 0x14008c7c6
cmp r8w, cx
je 0x14008c7c6
add rax, 2
mov qword [rsp + 0x498], rax
jmp 0x14008c79a
cmp word [rax], dx
je 0x14008c486
mov word [rax], dx
jmp 0x14008c451
mov r8d, 0x20
mov qword [rsp + 0x498], rax
movzx ecx, word [rax]
mov qword [rsp + 0x2a0], rdx
cmp r9w, cx
je 0x14008c83a
lea rbp, [0x140113230]
mov qword [rsp + 0x2b0], rbp
jmp 0x14008c830
cmp r10w, cx
ja 0x14008c817
cmp cx, 0xd
jbe 0x14008c486
cmp r8w, cx
je 0x14008c486
add rax, 2
mov qword [rsp + 0x498], rax
mov cx, word [rax]
cmp cx, dx
jne 0x14008c807
jmp 0x14008c486
add rax, 2
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], rax
call fcn.140058ecc
xor edx, edx
mov rbp, qword [rax]
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x2b0], rbp
movzx ecx, word [rax]
cmp cx, dx
je 0x14008c486
cmp r10w, cx
ja 0x14008c884
cmp cx, 0xd
jbe 0x14008c7c6
cmp r8w, cx
je 0x14008c7c6
add rax, 2
mov qword [rsp + 0x498], rax
jmp 0x14008c868
lea rcx, [rbx + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r8w
ja 0x14008c8ef
mov qword [rsp + 0x290], rcx
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x290]
call fcn.140068500
mov rax, qword [rsp + 0x188]
xor edx, edx
lea rcx, [rdx - 2]
cmp rax, rdx
cmovle rax, rcx
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x280], rax
cmp di, dx
je 0x14008c920
mov eax, 0x20
lea ecx, [rax - 0x17]
cmp cx, di
ja 0x14008c907
cmp di, 0xd
jbe 0x14008c920
cmp ax, di
je 0x14008c920
add rbx, 2
mov qword [rsp + 0x498], rbx
mov di, word [rbx]
cmp di, dx
jne 0x14008c8fc
lea rcx, [rsp + 0x498]
call fcn.140058ecc
mov edi, dword [rsp + 0xa8]
jmp 0x14008c493
mov ebx, 4
lea rcx, str._align
mov r8d, 6
mov rdx, r11
call fcn.14005a5c4
xor edx, edx
cmp al, dl
je 0x14008c988
lea rax, [r11 + 0xc]
lea r9d, [rdx + 0x3d]
lea r11d, [rdx + 9]
cmp word [rax], dx
je 0x14008c9b9
cmp r9w, word [rax]
je 0x14008c9b9
cmp r11w, word [rax]
ja 0x14008c97c
cmp word [rax], 0xd
jbe 0x14008c9b9
mov r10d, 0x20
cmp r10w, word [rax]
je 0x14008c9bf
lea rdx, [rsp + 0x498]
lea rcx, str._clear
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008ca65
mov byte [rsp + 0x10c], r15b
jmp 0x14008c495
mov r10d, 0x20
mov r8, rax
jmp 0x14008c9da
cmp r11w, cx
ja 0x14008c9d0
cmp cx, 0xd
jbe 0x14008c9ea
cmp r10w, cx
je 0x14008c9ea
add rax, 2
mov qword [rsp + 0x498], rax
movzx ecx, word [rax]
cmp cx, dx
jne 0x14008c9c4
lea rcx, [rsp + 0x498]
call fcn.140058ecc
cmp r9w, word [r8]
je 0x14008ca16
or rax, 0xffffffffffffffff
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x230], rax
jmp 0x14008c493
lea rcx, [r8 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r11w
ja 0x14008c493
mov qword [rsp + 0x290], rcx
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x290]
call fcn.140068500
mov rcx, qword [rsp + 0x230]
xor eax, eax
cmp rcx, rax
mov qword [rsp + 0x260], rcx
jg 0x14008c493
jmp 0x14008c9fd
lea rdx, [rsp + 0x498]
lea rcx, str._clean
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008ca92
mov byte [rsp + 0x80], r15b
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._clean_
mov r8d, 7
call fcn.14006402c
xor ecx, ecx
cmp al, cl
je 0x14008cac0
xor eax, eax
mov byte [rsp + 0x80], al
jmp 0x14008c493
lea rdx, [rsp + 0x498]
lea rcx, [0x14011638c]
mov r8d, 3
call fcn.14006402c
xor edx, edx
cmp al, dl
jne 0x14008ce2c
lea rdx, [rsp + 0x498]
lea rcx, str._del
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
jne 0x14008ce2c
lea rdx, [rsp + 0x498]
lea rcx, str._raw
mov r8d, ebx
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008cb36
mov byte [rsp + 0x6d], r15b
or edi, 0x20
mov dword [rsp + 0xa8], edi
jmp 0x14008c495
mov r11, qword [rsp + 0x498]
lea rcx, str._swap:
mov r8d, 6
mov rdx, r11
call fcn.14005a5c4
xor ecx, ecx
cmp al, cl
je 0x14008cb8e
add r11, 0xc
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], r11
call fcn.140071624
xor edx, edx
cmp eax, edx
jl 0x14008dac2
mov byte [rsp + 0x64], r15b
jmp 0x14008c495
lea rcx, str._CHS
mov r8d, 5
mov rdx, r11
call fcn.14005a5c4
xor r9d, r9d
cmp al, r9b
je 0x14008ccb6
lea rcx, [rsp + 0x498]
add r11, 0xa
mov qword [rsp + 0x498], r11
call fcn.140058ecc
mov rcx, qword [rsp + 0x498]
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0xf0], rcx
cmp ax, r9w
je 0x14008cc12
lea edx, [r9 + 0x20]
lea r10d, [r9 + 9]
cmp r10w, ax
ja 0x14008cbf8
cmp ax, 0xd
jbe 0x14008cc12
cmp dx, ax
je 0x14008cc12
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, r9w
jne 0x14008cbec
lea rcx, [rsp + 0x498]
call fcn.140058ecc
movzx ecx, word [r8]
mov eax, 9
sub cx, 0x30
cmp cx, ax
ja 0x14008cc4e
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xf0]
call fcn.140068500
mov r8, qword [rsp + 0xf0]
mov ebx, 0x3a
cmp bx, word [r8]
jne 0x14008c493
add r8, 2
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0xf0], r8
call fcn.140068500
mov r8, qword [rsp + 0xf0]
cmp bx, word [r8]
jne 0x14008c493
add r8, 2
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0xf0], r8
call fcn.140068500
jmp 0x14008c493
lea rcx, str._IMG
mov r8d, 5
mov rdx, r11
call fcn.14005a5c4
xor ecx, ecx
cmp al, cl
jne 0x14008c4ab
lea r8d, [rcx + 6]
lea rcx, str._SKIP
mov rdx, r11
call fcn.14005a5c4
xor ecx, ecx
cmp al, cl
je 0x14008cd3a
lea rcx, [rsp + 0x498]
add r11, 0xc
mov qword [rsp + 0x498], r11
call fcn.140058ecc
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x498]
mov dword [rsp + 0xb0], 0x42
call fcn.140071624
mov al, byte [rsp + 0xb0]
mov byte [rsp + 0x81], al
jmp 0x14008c493
lea rcx, str._iv
mov r8d, ebx
mov rdx, r11
call fcn.14005a5c4
xor ecx, ecx
cmp al, cl
je 0x14008cd77
add r11, r12
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], r11
call fcn.140071624
jmp 0x14008c493
lea rdx, [rsp + 0x498]
lea rcx, str._cdrom
mov r8d, 6
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008cda4
mov dword [rsp + 0x120], r12d
jmp 0x14008c495
lea rdx, [rsp + 0x498]
lea rcx, str._floppy
mov r8d, 7
call fcn.14006402c
xor edx, edx
cmp al, dl
je 0x14008cdd4
mov dword [rsp + 0x120], 0x10
jmp 0x14008c495
mov rcx, qword [rsp + 0x498]
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14008c4ab
mov r8d, 0x20
lea r10d, [r8 - 0x17]
cmp r10w, ax
ja 0x14008ce09
cmp ax, 0xd
jbe 0x14008c486
cmp r8w, ax
je 0x14008c486
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14008cdf9
jmp 0x14008c486
mov byte [rsp + 0x130], r15b
jmp 0x14008c495
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x278], rax
mov eax, dword [rsp + 0x148]
mov dword [rsp + 0x70], eax
jmp 0x14008c529
lea rdx, str.21:INDATA
lea rcx, [rsp + 0x4a8]
call fcn.14006d444
mov rdx, qword [rsp + 0x498]
lea rcx, [rsp + 0x4a8]
call fcn.14006175c
mov rdx, qword [rsp + 0x4a8]
mov rcx, qword [rsp + 0x490]
call fcn.1400309a0
lea rcx, [rsp + 0x4a8]
mov rsi, rax
call fcn.140058efc
jmp 0x14009259c
lea rdx, [rsp + 0x498]
lea rcx, str.part
mov r8d, ebx
call fcn.14006402c
cmp al, dil
je 0x14008ced0
mov r12b, 2
jmp 0x14008c57e
lea rdx, [rsp + 0x498]
lea rcx, [0x14011d918]
mov r8d, 3
call fcn.14006402c
cmp al, dil
je 0x14008cef7
mov r12b, 3
jmp 0x14008c57e
lea rdx, [rsp + 0x498]
lea rcx, str.cdrom
mov r8d, 5
call fcn.14006402c
cmp al, dil
je 0x14008cf32
mov r12b, bl
mov edi, 8
mov dword [rsp + 0xa4], r12d
mov dword [rsp + 0x120], edi
jmp 0x14008cffc
mov r12d, 6
lea rdx, [rsp + 0x498]
lea rcx, str.floppy
mov r8d, r12d
call fcn.14006402c
cmp al, dil
je 0x14008cf6f
mov r12b, 5
mov dword [rsp + 0x120], 0x10
mov dword [rsp + 0xa4], r12d
jmp 0x14008cff7
lea rdx, [rsp + 0x498]
lea rcx, str.parent
mov r8d, r12d
call fcn.14006402c
cmp al, dil
jne 0x14008c57e
lea rdx, [rsp + 0x498]
lea rcx, str.volume
mov r8d, r12d
call fcn.14006402c
cmp al, dil
je 0x14008cfb3
mov r12b, 7
jmp 0x14008c57e
lea rdx, [rsp + 0x498]
lea rcx, [0x14011d8f4]
mov r8d, 3
call fcn.14006402c
mov r12d, dword [rsp + 0xa4]
cmp al, dil
movzx r12d, r12b
mov edi, 8
cmovne r12d, edi
mov dword [rsp + 0xa4], r12d
jmp 0x14008cffc
mov r12d, dword [rsp + 0xa4]
mov edi, 8
xor eax, eax
lea rdx, [rsp + 0x498]
lea rcx, [0x14011d478]
mov r8d, ebx
mov byte [rsp + 0x42], al
call fcn.14006402c
xor ecx, ecx
cmp al, cl
je 0x14008d030
mov eax, r15d
mov sil, r15b
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4a8], eax
lea rdx, [rsp + 0x498]
lea rcx, [0x14011d8f0]
mov r8d, 3
call fcn.14006402c
movzx ecx, sil
xor esi, esi
cmp al, sil
lea eax, [rsi + 0x10]
lea r8d, [rsi + 6]
cmovne ecx, eax
lea rdx, [rsp + 0x498]
mov dword [rsp + 0x90], ecx
lea rcx, str.update
call fcn.14006402c
cmp al, sil
je 0x14008d095
mov byte [rsp + 0x42], r15b
mov ecx, r15d
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x4a8], ecx
jmp 0x14008d127
lea rdx, [rsp + 0x498]
lea rcx, str.xupdate
mov r8d, 7
call fcn.14006402c
cmp al, sil
je 0x14008d0ce
mov ecx, r15d
mov edi, 0x20
mov byte [rsp + 0x42], dil
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x4a8], ecx
jmp 0x14008d12c
lea rdx, [rsp + 0x498]
lea rcx, str.hupdate
mov r8d, 7
call fcn.14006402c
cmp al, sil
je 0x14008d0f8
mov eax, 0x10
mov byte [rsp + 0x42], al
jmp 0x14008d082
lea rdx, [rsp + 0x498]
lea rcx, str.hupdatef
mov r8d, edi
call fcn.14006402c
cmp al, sil
je 0x14008d127
mov eax, r15d
mov byte [rsp + 0x42], 0x18
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4a8], eax
mov edi, 0x20
mov r8, qword [rsp + 0x498]
mov rdx, r8
movzx eax, word [r8]
cmp ax, si
je 0x14008d16a
mov ecx, 9
cmp cx, ax
ja 0x14008d150
cmp ax, 0xd
jbe 0x14008d16a
cmp di, ax
je 0x14008d16a
add r8, 2
mov qword [rsp + 0x498], r8
mov ax, word [r8]
cmp ax, si
jne 0x14008d145
sub r8, rdx
lea rcx, [rsp + 0x248]
sar r8, 1
call fcn.140061888
lea rcx, [rsp + 0x498]
call fcn.140058ecc
mov rcx, qword [rsp + 0x498]
mov eax, 0x2a
mov dword [rsp + 0x148], esi
cmp ax, word [rcx]
jne 0x14008d1ba
add rcx, 2
mov dword [rsp + 0x148], 0x40000000
mov qword [rsp + 0x498], rcx
movzx edx, word [rcx]
mov r8d, 0x61
movzx eax, dx
lea r9d, [r8 + 0x1f]
or ax, di
cmp r8w, ax
jne 0x14008d207
mov dword [rsp + 0x74], r9d
cmp dx, si
je 0x14008d255
lea eax, [r8 - 0x58]
cmp ax, dx
ja 0x14008d1ec
cmp dx, 0xd
jbe 0x14008d255
cmp di, dx
je 0x14008d255
add rcx, 2
mov qword [rsp + 0x498], rcx
mov dx, word [rcx]
cmp dx, si
je 0x14008d255
jmp 0x14008d1e1
mov eax, 0x2d
cmp ax, dx
jne 0x14008d24e
movzx eax, word [rcx + 2]
or ax, di
cmp r8w, ax
jne 0x14008d24e
mov word [rsp + 0x74], si
mov eax, 9
cmp ax, dx
ja 0x14008d233
cmp dx, 0xd
jbe 0x14008d255
cmp di, dx
je 0x14008d255
add rcx, 2
mov qword [rsp + 0x498], rcx
mov dx, word [rcx]
cmp dx, si
je 0x14008d255
jmp 0x14008d228
mov dword [rsp + 0x148], esi
mov eax, 0xb9e5
lea rdi, [0x140133078]
mov dword [rsp + 0x1c0], 0xebd0a0a2
mov word [rsp + 0x1c4], ax
mov eax, 0x4433
mov rcx, rdi
mov word [rsp + 0x1c6], ax
xor eax, eax
mov byte [rsp + 0x1c8], 0x87
mov dword [rsp + 0x20c], eax
mov dword [rsp + 0x210], eax
mov dword [rsp + 0x214], eax
lea rax, str.MS_Basic_Data
mov byte [rsp + 0x1c9], 0xc0
mov byte [rsp + 0x1ca], 0x68
mov byte [rsp + 0x1cb], 0xb6
mov byte [rsp + 0x1cc], 0xb7
mov byte [rsp + 0x1cd], 0x26
mov qword [rsp + 0x290], rax
mov byte [rsp + 0x1ce], 0x99
mov byte [rsp + 0x1cf], 0xc7
mov dword [rsp + 0x208], esi
mov qword [rsp + 0x2e0], rsi
mov dword [rsp + 0xb0], esi
mov dword [rsp + 0x270], esi
mov dword [rsp + 0x2b8], esi
mov dword [rsp + 0x198], esi
mov dword [rsp + 0x268], esi
mov dword [rsp + 0x26c], esi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov sil, byte [rsp + 0x44]
xor eax, eax
lea rcx, [rsp + 0x498]
cmp sil, al
jne 0x14008d3a6
lea rdx, [rsp + 0x110]
call fcn.140071624
mov rcx, qword [rsp + 0x498]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
cmp r8w, word [rcx]
jne 0x14008d396
lea rdx, [rcx + 2]
movzx eax, word [rdx]
sub ax, 0x30
cmp ax, r10w
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0xe4], eax
jbe 0x14008d3f3
mov byte [rsp + 0x10b], r15b
mov rcx, rdx
mov qword [rsp + 0x498], rdx
jmp 0x14008d3f3
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0xe4], eax
jmp 0x14008d3f3
lea rdx, [rsp + 0x1c0]
xor r8d, r8d
call fcn.140074c3c
mov rsi, rax
mov qword [rsp + 0x2b8], rax
or rax, 0xffffffffffffffff
cmp esi, eax
jne 0x14008d3dc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov rsi, rax
jmp 0x14009259c
mov rcx, qword [rsp + 0x498]
mov sil, byte [rsp + 0x44]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
mov eax, 0x2b
cmp ax, word [rcx]
jne 0x14008d412
mov al, byte [rcx]
add rcx, 2
mov byte [rsp + 0xbe], al
mov qword [rsp + 0x498], rcx
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14008d456
xor edx, edx
lea r9d, [rdx + 0x20]
cmp r10w, ax
ja 0x14008d42d
cmp ax, 0xd
jbe 0x14008d447
cmp r9w, ax
je 0x14008d447
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14008d421
lea rcx, [rsp + 0x498]
call fcn.140058ecc
jmp 0x14008d48c
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x498]
call fcn.1400685d0
mov r8d, 0x2d
mov dword [rsp + 0x268], eax
mov rax, qword [rsp + 0x128]
lea r10d, [r8 - 0x24]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x498]
mov ecx, 0x40
mov byte [rsp + 0x10a], r15b
cmp cx, word [rax]
jne 0x14008d4bd
add rax, 2
xor edx, edx
mov byte [rsp + 0x10a], dl
mov qword [rsp + 0x498], rax
jmp 0x14008d4bf
xor edx, edx
movzx ecx, word [rax]
cmp r8w, cx
jne 0x14008d503
mov r8d, 0x20
cmp r10w, cx
ja 0x14008d4da
cmp cx, 0xd
jbe 0x14008d4f4
cmp r8w, cx
je 0x14008d4f4
add rax, 2
mov qword [rsp + 0x498], rax
mov cx, word [rax]
cmp cx, dx
jne 0x14008d4ce
lea rcx, [rsp + 0x498]
call fcn.140058ecc
jmp 0x14008d52f
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x498]
call fcn.1400685d0
mov dword [rsp + 0x26c], eax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0xd0], rax
xor edx, edx
cmp sil, dl
je 0x14008d574
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x498]
xor r8d, r8d
call fcn.140074c3c
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x198], rax
call fcn.140068500
xor edx, edx
mov dword [rsp + 0xb0], eax
mov rcx, qword [rsp + 0x498]
mov qword [rsp + 0x2d8], rdx
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14008d5c5
mov r8d, 0x20
lea r10d, [r8 - 0x17]
cmp r10w, ax
ja 0x14008d5a9
cmp ax, 0xd
jbe 0x14008d617
cmp r8w, ax
je 0x14008d617
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14008d59d
jmp 0x14008d617
cmp sil, dl
je 0x14008d617
xor esi, esi
cmp ax, si
je 0x14008d619
mov qword [rsp + 0x2c8], rcx
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x2c8]
xor r8d, r8d
call fcn.140024820
mov rsi, qword [rsp + 0x2c8]
mov rax, qword [rsp + 0x2d8]
xor ecx, ecx
mov dword [rsp + 0x270], r15d
mov qword [rsp + 0x290], rsi
mov word [rsi + rax*2], cx
xor esi, esi
mov byte [rsp + 0x7f], sil
mov byte [rsp + 0x7c], sil
mov byte [rsp + 0xc0], sil
cmp r12b, r15b
je 0x14008d644
cmp r12b, bl
cmovl r13d, esi
mov dword [rsp + 0xc4], r13d
mov dword [rsp + 0x68], r13d
mov r12, qword [rsp + 0x248]
lea rcx, [0x14011d8a0]
mov r8d, 5
mov rdx, r12
mov r11, r12
mov qword [rsp + 0x498], r12
call fcn.14005a5c4
mov ebx, 0x5c
lea r10d, [rbx - 0x39]
cmp al, sil
je 0x14008d7e1
lea r8, [r12 + 0xa]
lea eax, [rbx - 0x32]
mov qword [rsp + 0x498], r8
mov rdx, r8
cmp ax, word [r8]
jne 0x14008d742
lea rax, [r8 + 2]
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x180]
mov qword [rsp + 0x180], rax
call fcn.1400685d0
mov rdx, qword [rsp + 0x180]
lea eax, [rbx - 0x32]
mov byte [rsp + 0xc0], r15b
cmp ax, word [rdx]
jne 0x14008d721
add rdx, 2
lea rcx, [rsp + 0x180]
mov qword [rsp + 0x180], rdx
lea rdx, [rsp + 0x1a8]
call fcn.1400685d0
mov rax, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x180]
mov qword [rsp + 0x2a8], rax
lea eax, [rbx - 0x32]
mov byte [rsp + 0xc0], 0x11
cmp ax, word [rdx]
jne 0x14008d721
add rdx, 2
mov rax, qword [rsp + 0x228]
mov r8, rdx
mov qword [rsp + 0x498], rdx
mov qword [rsp + 0x1f0], rax
mov r10d, 0x23
movzx eax, word [r8]
cmp bx, ax
je 0x14008d76a
mov ecx, dword [rsp + 0x1f8]
mov r9d, 0x2f
movzx ecx, cl
cmp r9w, ax
cmovne ecx, r15d
mov dword [rsp + 0x1f8], ecx
cmp ax, si
je 0x14008d7a4
mov ecx, 0x20
lea r9d, [rcx - 0x17]
cmp r9w, ax
ja 0x14008d784
cmp ax, 0xd
jbe 0x14008d7a4
cmp cx, ax
je 0x14008d7a4
cmp ax, r10w
je 0x14008d7a4
add r8, 2
mov qword [rsp + 0x498], r8
mov ax, word [r8]
cmp ax, si
jne 0x14008d778
sub r8, rdx
sar r8, 1
cmp r8, rsi
jle 0x14008d7ca
lea rcx, [rsp + 0x220]
call fcn.140061888
mov r13d, 0xfffc0000
mov dword [rsp + 0xc4], r13d
lea rcx, [rsp + 0x498]
call fcn.140058ecc
mov r11, qword [rsp + 0x498]
jmp 0x14008d852
lea rcx, [0x14011d89c]
mov r8d, 2
mov rdx, r12
call fcn.14005a5c4
cmp al, sil
je 0x14008d808
lea r11, [r12 + 4]
mov qword [rsp + 0x498], r11
cmp word [r11], 0x30
jb 0x14008d816
cmp word [r11], 0x39
jbe 0x14008d821
mov eax, 0x28
cmp ax, word [r11]
jne 0x14008d848
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x498]
call fcn.140065d1c
mov r13d, dword [rsp + 0x68]
mov r11, qword [rsp + 0x498]
mov dword [rsp + 0xc4], r13d
cmp word [r12], si
setne byte [rsp + 0x7f]
mov rax, qword [rsp + 0x1f0]
shl rax, 9
mov qword [rsp + 0x178], rax
mov eax, 0x23
cmp ax, word [r11]
je 0x14008d880
mov eax, 0x3a
cmp ax, word [r11]
jne 0x14008d97b
add r11, 2
lea rcx, [0x14011d898]
mov r8d, 2
mov rdx, r11
mov qword [rsp + 0x498], r11
call fcn.14005a5c4
lea rcx, [0x14011d894]
mov r8d, 2
mov rdx, r11
mov bl, al
mov byte [rsp + 0x4c], al
call fcn.14005a5c4
mov cl, al
mov byte [rsp + 0x51], al
mov al, bl
or al, cl
sete byte [rsp + 0x7c]
cmp bl, sil
jne 0x14008d8f1
mov eax, 0x2b
cmp ax, word [r11]
jne 0x14008d8f1
mov dl, r15b
add r11, 2
mov dword [rsp + 0x190], edx
mov qword [rsp + 0x498], r11
cmp cl, sil
jne 0x14008d92b
mov eax, 0x40
cmp ax, word [r11]
je 0x14008d917
mov eax, 0x2d
cmp ax, word [r11]
je 0x14008d917
mov eax, 0x3d
cmp ax, word [r11]
jne 0x14008d92b
or dword [rsp + 0xa8], 2
add r11, 2
mov qword [rsp + 0x498], r11
cmp word [r11], 0x30
jb 0x14008d939
cmp word [r11], 0x39
jbe 0x14008d944
mov eax, 0x28
cmp ax, word [r11]
jne 0x14008d97b
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x498]
call fcn.140071624
cmp eax, esi
mov eax, dword [rsp + 0x4a8]
mov dword [rsp + 0x48], eax
jle 0x14008d97f
mov byte [rsp + 0x83], r15b
cmp eax, esi
jne 0x14008d981
mov byte [rsp + 0x4c], r15b
jmp 0x14008d983
mov eax, dword [rsp + 0x48]
cmp eax, esi
jg 0x14008d99e
cmp byte [rsp + 0xa4], sil
jg 0x14008d99e
cmp qword [rsp + 0x2a0], rsi
jne 0x14008d99e
cmp rbp, rsi
mov ebp, esi
je 0x14008d9a1
mov ebp, r15d
movsxd rbx, r13d
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x4a8], rbx
cmp byte [rsp + 0x4d], sil
je 0x14008d9e7
cmp ebp, esi
jne 0x14008d9e7
cmp word [r12], si
jne 0x14008d9e7
mov rax, 0xfffffffffffc0000
mov dword [rsp + 0xc4], eax
mov rbx, rax
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x4a8], rax
mov r13, qword [rsp + 0x220]
mov r8d, dword [rsp + 0xc4]
xor eax, eax
mov word [rsp + 0x340], ax
cmp word [r13], ax
lea rsi, [rsp + 0x340]
cmovne rsi, r13
lea rdx, str..PhysicalDrive_d
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x180], rsi
call qword [sym.imp.USER32.dll_wsprintfW]
xor r11d, r11d
cmp byte [rsp + 0x7e], r11b
jg 0x14008da93
cmp qword [rsp + 0x1f0], r11
jne 0x14008da93
lea r8d, [r11 + 0x11]
lea rcx, str..PhysicalDrive
mov rdx, rsi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
xor r11d, r11d
cmp eax, r11d
jne 0x14008da93
lea rax, [rsi + 0x22]
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x128]
mov qword [rsp + 0x128], rax
call fcn.140065bbc
mov rbx, qword [rsp + 0x4a8]
mov qword [rsp + 0x170], rbx
xor r11d, r11d
mov cl, byte [rsp + 0x42]
cmp cl, r11b
jne 0x14008daaa
cmp byte [rsp + 0x41], r11b
jne 0x14008daaa
cmp byte [rsp + 0x40], r11b
je 0x14008dace
cmp dword [rsp + 0xc4], r11d
jge 0x14008dace
cmp rbx, r11
jge 0x14008dace
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, 0xffffffff80070057
jmp 0x14009259c
mov r10, qword [rsp + 0x170]
or r8, 0xffffffffffffffff
mov rbx, r11
mov eax, r8d
mov rsi, 0xffffffff80070057
mov qword [rsp + 0x1d8], r11
mov dword [rsp + 0x110], eax
mov al, byte [rsp + 0x4d]
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x228], rsi
mov byte [rsp + 0x4a8], r11b
cmp al, r11b
je 0x14008dc1f
cmp r10, r11
mov rcx, qword [rsp + 0x158]
jge 0x14008db3b
cmp qword [rsp + 0x1b8], r8
jle 0x14008db3b
cmp rcx, r11
je 0x14008dc1b
cmp rcx, r11
je 0x14008db91
mov edx, 0x2a
cmp dx, word [rcx]
jne 0x14008db91
movsx edx, al
mov ecx, r10d
and edx, 2
shr edx, 1
call fcn.140074e74
mov r10, qword [rsp + 0x170]
xor r11d, r11d
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x1d8], rax
lea eax, [r11 + 0x20]
or byte [0x1401326c5], al
mov byte [rsp + 0x4a8], al
mov al, byte [rsp + 0x4d]
or r8, 0xffffffffffffffff
mov rcx, r11
cmp r10, r11
jge 0x14008dba5
cmp qword [rsp + 0x1b8], r8
jle 0x14008dba5
cmp rcx, r11
je 0x14008dc1b
mov r8, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x1b8]
movsx r9d, al
and r9d, 2
mov qword [rsp + 0x20], rcx
mov ecx, r10d
shr r9d, 1
call fcn.1400074a8
mov r10, qword [rsp + 0x170]
mov cl, byte [rsp + 0x42]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x228], rax
or rax, 0xffffffffffffffff
lea r9d, [rax + 0x11]
cmp qword [rsp + 0x1b8], rax
je 0x14008dc0f
or byte [rsp + 0x4a8], r9b
or byte [0x1401326c5], r9b
xor r11d, r11d
jmp 0x14008dc25
xor r11d, r11d
mov byte [0x1401326c5], r11b
jmp 0x14008dc25
mov cl, byte [rsp + 0x42]
mov r9d, 0x10
movdqu xmm6, xmmword [rsp + 0x1c0]
movdqu xmm7, xmmword [rsp + 0x208]
mov dl, byte [rsp + 0x44]
cmp byte [rsp + 0x64], r11b
jbe 0x14008dfb8
cmp dl, r11b
jne 0x14008dfb8
cmp dword [rsp + 0xc4], r11d
jge 0x14008dc64
cmp word [r13], r11w
je 0x14008df9d
mov eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x48]
cmp eax, r11d
jle 0x14008dc79
cmp eax, ecx
je 0x14008df9d
cmp ecx, 4
jg 0x14008df9d
cmp byte [rsp + 0x50], 2
jl 0x14008df9d
mov rdx, qword [rsp + 0x180]
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r11
call fcn.1400037bc
mov rbx, qword [rsp + 0x140]
xor eax, eax
cmp rbx, rax
jne 0x14008dce9
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
jmp 0x140092590
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.140067808
mov esi, 0x200
mov rcx, rbx
mov edx, esi
mov dword [rsp + 0x110], eax
call fcn.14005d66c
mov ebp, esi
lea rcx, [rsp + 0x1a8]
cmp eax, esi
cmovge ebp, eax
mov dword [rsp + 0x68], ebp
lea edx, [rbp + rbp*2]
call fcn.1400613a8
mov rax, qword [rsp + 0x1a8]
lea esi, [rbp - 1]
lea rcx, [rbp + rax]
mov edx, ebp
xor eax, eax
mov qword [rsp + 0x128], rdx
not esi
lea r9, [rsp + 0xb8]
and rsi, rcx
mov r8d, ebp
mov rcx, rbx
lea r15, [rbp + rsi]
mov qword [rsp + 0x118], rsi
mov qword [rsp + 0x20], rax
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ebp, ebp
cmp eax, ebp
jne 0x14008ddc3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rbp + 1]
cmp eax, ebp
cmove eax, ecx
lea rcx, [rsp + 0x1a8]
mov esi, eax
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008dfaa
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008dfaa
mov r8d, 0x200
mov rdx, r15
mov rcx, rsi
call fcn.14001d04c
mov edx, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x48]
mov eax, 1
mov r8d, 0x10
mov byte [r15 + 0x1fe], 0x55
sub edx, eax
sub ecx, eax
mov byte [r15 + 0x1ff], 0xaa
mov eax, edx
mov dword [rsp + 0x70], edx
mov dword [rsp + 0x48], ecx
shl eax, 4
movsxd rbp, eax
mov eax, ecx
shl eax, 4
movsxd rsi, eax
mov rax, qword [rsp + 0x118]
lea rdx, [rax + rbp + 0x1be]
lea rcx, [rsi + r15 + 0x1be]
call fcn.14001d04c
mov rax, qword [rsp + 0x118]
lea rcx, [r15 + rbp + 0x1be]
lea rdx, [rsi + rax + 0x1be]
mov r8d, 0x10
call fcn.14001d04c
mov rdx, qword [rsp + 0x178]
xor r8d, r8d
mov rcx, rbx
call fcn.14005a4b0
xor ebp, ebp
cmp eax, ebp
je 0x14008deab
lea rcx, [rsp + 0x1a8]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008de98
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, 1
jmp 0x14009259c
mov r8, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x118]
mov rdx, r15
mov rsi, rbp
mov qword [rsp + 0x1d8], rbp
call fcn.140058f2c
cmp eax, ebp
je 0x14008df16
mov r8d, dword [rsp + 0x68]
lea r9, [rsp + 0xb8]
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebp
jne 0x14008df0e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, ebp
cmove eax, ecx
mov esi, eax
mov qword [rsp + 0x1d8], rsi
mov rcx, rbx
call fcn.14005dea0
mov cl, byte [rsp + 0x40]
mov r8b, byte [rsp + 0x4e]
mov dl, byte [rsp + 0x41]
mov al, cl
or al, r8b
or dl, al
mov al, cl
lea rcx, [rsp + 0x1a8]
or al, dl
mov byte [rsp + 0x41], dl
or al, r8b
je 0x14008dd96
call fcn.140058efc
mov r15d, 1
xor r11d, r11d
lea r9d, [r11 + 0x10]
mov dl, byte [rsp + 0x41]
mov sil, byte [rsp + 0x40]
mov rax, qword [rsp + 0x170]
mov r10b, byte [rsp + 0x42]
mov r8d, 0x20
cmp rax, r11
jl 0x140090c65
cmp r10b, r8b
je 0x14008df88
cmp r10b, r9b
jne 0x140090bc1
mov ecx, dword [rsp + 0x110]
cmp ecx, 0xb
je 0x140090bea
jmp 0x140090bc8
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14009259c
cmp cl, r9b
mov cl, byte [rsp + 0x40]
jne 0x14008dfca
mov eax, 0x20
test al, cl
jne 0x14008df55
mov al, byte [rsp + 0x4d]
cmp al, r11b
je 0x14008e023
cmp ebp, r11d
jne 0x14008e023
mov dl, byte [rsp + 0x41]
cmp byte [rsp + 0x4e], r11b
jne 0x14008df59
cmp dl, r11b
jne 0x14008df59
cmp cl, r11b
jne 0x14008df59
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor eax, eax
cmp rdi, rax
je 0x14008e016
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, qword [rsp + 0x228]
jmp 0x14009259c
mov r9, qword [rsp + 0x2a0]
cmp r9, r11
jne 0x140092107
mov rbp, qword [rsp + 0x2b0]
cmp rbp, r11
jne 0x140091b52
mov eax, dword [rsp + 0xa4]
cmp al, 6
je 0x140091a23
cmp al, r15b
je 0x14009195e
mov cl, byte [rsp + 0x7e]
cmp al, 2
jne 0x14008e06e
cmp cl, r11b
je 0x140090d7b
cmp al, 8
jne 0x14008e07b
cmp cl, r11b
je 0x140090de0
mov qword [rsp + 0x58], r11
cmp al, 3
je 0x14009182b
mov esi, 4
cmp al, sil
je 0x140091718
lea r8d, [rsi + 1]
cmp al, r8b
je 0x140091718
cmp al, 7
je 0x1400915ff
cmp byte [rsp + 0x51], r11b
je 0x14008e0dd
mov ecx, r11d
mov rbx, r11
mov word [rsp + 0x74], r11w
mov rbp, r11
mov qword [rsp + 0x98], r11
mov eax, r8d
mov dword [rsp + 0xe4], ecx
mov qword [rsp + 0xd0], rbx
jmp 0x14008e0f8
mov eax, dword [rsp + 0x48]
mov rbp, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xd0]
mov ecx, dword [rsp + 0xe4]
cmp byte [rsp + 0x4c], r11b
mov qword [rsp + 0x1d8], r11
cmovne eax, r8d
mov r8d, dword [rsp + 0x130]
cmp r8b, r11b
je 0x14008e13c
mov ecx, r11d
mov rbx, r11
mov word [rsp + 0x74], r11w
mov rbp, r11
mov qword [rsp + 0x98], r11
mov dword [rsp + 0xe4], ecx
mov qword [rsp + 0xd0], rbx
cmp byte [rsp + 0x7f], r11b
je 0x14008e14c
cmp r10, r11
jl 0x140090eb3
cmp byte [rsp + 0x7c], r11b
je 0x14008e15c
cmp eax, r11d
jl 0x140090eb3
sub eax, r15d
mov byte [rsp + 0x4f], r11b
mov byte [rsp + 0x100], r11b
mov dword [rsp + 0x48], eax
or rax, 0xffffffffffffffff
mov word [rsp + 0xe8], r11w
mov byte [rsp + 0x64], r11b
mov byte [rsp + 0xbd], r11b
mov word [rsp + 0xe0], r11w
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x1e0], rax
cmp dl, r11b
jne 0x14008e1c5
cmp ecx, r11d
jne 0x14008e1c5
cmp rbp, r11
jne 0x14008e1c5
movzx r8d, r8b
cmp rbx, r11
cmove r8d, r15d
mov dword [rsp + 0x130], r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
cmp byte [rsp + 0x108], al
je 0x14008e1e5
cmp rbp, rax
jl 0x14008e1e5
cmp rbx, r15
mov esi, r15d
jge 0x14008e1e7
mov esi, eax
mov rdx, qword [rsp + 0x180]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov dword [rsp + 0xa0], esi
mov qword [rsp + 0x20], rax
call fcn.1400037bc
mov rbx, qword [rsp + 0x140]
xor eax, eax
cmp rbx, rax
je 0x1400915e8
mov edx, 0x200
mov rcx, rbx
call fcn.14005d66c
mov ecx, 0x200
cmp eax, ecx
cmovge ecx, eax
xor edx, edx
mov dword [rsp + 0x60], ecx
cmp esi, edx
je 0x14008e2d0
cmp rbp, rdx
jl 0x14008e295
lea r9d, [rcx + rcx*4]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
mov edx, dword [rsp + 0x170]
mov r8, rbp
lea rcx, [rsp + 0x4a8]
shl r9d, 3
shl r8, 9
call fcn.14005df60
mov ecx, dword [rsp + 0x60]
xor edx, edx
cmp byte [rsp + 0x4c], dl
jne 0x14008e2d0
mov rdx, qword [rsp + 0x1f0]
mov r8, qword [rsp + 0xd0]
mov r9d, ecx
add rdx, rbp
mov rcx, rbx
call fcn.140054f78
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor eax, eax
mov qword [rsp + 0x228], rax
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.140067808
xor r10d, r10d
mov dword [rsp + 0x110], eax
cmp byte [rsp + 0x42], r10b
je 0x14008e306
mov ebp, r10d
lea rcx, [rsp + 0x58]
call fcn.140058efc
jmp 0x14008df4e
mov r8d, dword [rsp + 0xe4]
mov rbp, r10
mov qword [rsp + 0x128], r10
cmp r8d, 0xff
jg 0x1400915b6
mov r9b, byte [rsp + 0x4c]
mov eax, dword [rsp + 0x48]
cmp r9b, r10b
jne 0x14008e381
cmp eax, r10d
jge 0x14008e381
mov rdx, qword [rsp + 0x98]
cmp rdx, r10
jge 0x1400915b6
cmp qword [rsp + 0xd0], r10
jge 0x1400915b6
cmp r8d, r10d
jge 0x1400915b6
or rcx, 0xffffffffffffffff
mov r8d, ecx
mov dword [rsp + 0xe4], ecx
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x98], rcx
jmp 0x14008e385
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x250], rcx
mov qword [rsp + 0x1b8], rcx
mov qword [rsp + 0x150], r10
mov ecx, 4
mov qword [rsp + 0x238], r10
mov dword [rsp + 0xc8], eax
cmp r9b, r10b
jne 0x14008e3c5
cmp byte [rsp + 0x51], r10b
jne 0x14008e3c5
cmp eax, ecx
jl 0x14008eaab
cmp byte [rsp + 0x44], r10b
jne 0x14008eaab
cmp byte [rsp + 0x90], r10b
jne 0x14008eaab
mov esi, dword [rsp + 0x48]
cmp r9b, bpl
mov eax, 5
cmovne esi, ecx
mov dword [rsp + 0x48], esi
cmp r8d, eax
je 0x14008e49d
cmp r8d, 0xf
je 0x14008e49d
lea rcx, [rsp + 0x160]
mov edx, 0x100000
mov dword [rsp + 0x68], ebp
call fcn.1400613a8
mov rdx, qword [rsp + 0x160]
lea r8, [rsp + 0x68]
mov rcx, rbx
call fcn.14005dc54
mov ecx, dword [rsp + 0x68]
mov r10d, 4
mov r8, rax
mov qword [rsp + 0xf0], rax
mov al, byte [rsp + 0x4c]
mov dword [rsp + 0x78], ecx
cmp al, bpl
jne 0x14008e45a
cmp ecx, esi
jge 0x14008e45a
cmp esi, r10d
jge 0x14008e490
mov r9b, byte [rsp + 0x51]
cmp al, bpl
jne 0x14008e4ce
cmp r9b, bpl
jne 0x14008e4ce
lea eax, [rsi + 1]
mov dl, bpl
cmp eax, r10d
mov byte [rsp + 0x43], dl
jg 0x14008e47c
dec eax
jmp 0x14008e483
lea eax, [rax*4 - 0x10]
cmp eax, ebp
jle 0x14008e490
cmp eax, ecx
jl 0x14008e506
cmp esi, r10d
jle 0x14008e506
lea rcx, [rsp + 0x160]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008e4c6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x14009212a
mov dl, r15b
mov byte [rsp + 0x43], dl
cmp r9b, bpl
jne 0x14008e501
cmp al, bpl
je 0x14008e506
cmp dword [rsp + 0xe4], ebp
jl 0x14008e490
cmp word [rsp + 0x74], bp
mov eax, ebp
mov r9d, 0x80
cmovg ax, r9w
mov word [rsp + 0x74], ax
jmp 0x14008e506
cmp ecx, r10d
jle 0x14008e490
cmp ecx, r10d
jle 0x14008e515
lea r11d, [rcx - 4]
and r11d, 0xfffffffc
jmp 0x14008e518
mov r11d, ebp
or rcx, 0xffffffffffffffff
xor eax, eax
mov ebp, ecx
mov dword [rsp + 0xc8], ecx
cmp dl, al
jne 0x14008e53b
cmp esi, r10d
lea r11d, [rsi*4 - 0x10]
jge 0x14008e53b
mov r11d, eax
mov r9d, ecx
lea rcx, [r8 + 0x50]
cmp byte [rcx], 5
je 0x14008e54c
cmp byte [rcx], 0xf
jne 0x14008e54f
mov r9d, eax
add eax, r15d
add rcx, 0x90
cmp eax, r10d
jl 0x14008e542
xor ecx, ecx
cmp dl, cl
je 0x14008e56d
cmp r9d, ecx
jl 0x14008e608
mov r10d, 0x1ff
movsxd rax, r9d
lea r15, [rax + rax*8]
add r15, r15
mov rax, qword [r8 + r15*8 + 0x38]
cqo
and rdx, r10
lea rsi, [rdx + rax]
mov rax, qword [r8 + r15*8 + 0x40]
cqo
sar rsi, 9
and rdx, r10
lea r8, [rdx + rax]
movsxd rax, r11d
lea r10, [rax + rax*8]
sar r8, 9
shl r10, 4
cmp byte [rsp + 0x51], cl
je 0x14008e6ff
mov eax, dword [rsp + 0x78]
mov r9d, ecx
cmp eax, 8
je 0x14008e672
mov r10, qword [rsp + 0xf0]
add eax, 0xfffffff8
mov r8, rcx
and eax, 0xfffffffc
movsxd rdx, eax
lea rax, [rdx + rdx*8]
add rax, rax
lea rcx, [r10 + rax*8 + 0x50]
mov eax, 1
cmp byte [rcx], 5
je 0x14008e647
cmp byte [rcx], 0xf
je 0x14008e647
add r8, rax
add r9d, eax
add rcx, 0x90
cmp r8, 4
jl 0x14008e5eb
lea rcx, [rsp + 0x160]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092125
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140092125
lea rcx, [rdx + rdx*8]
add rcx, rcx
mov rax, qword [r10 + rcx*8 + 0x38]
cqo
and edx, 0x1ff
lea rsi, [rdx + rax]
mov eax, dword [r10 + rcx*8 + 0x54]
xor ecx, ecx
sar rsi, 9
sub rsi, rax
cmp r9d, ecx
jl 0x14008e608
xor eax, eax
mov dword [rsp + 0x2e8], ecx
lea r8, [rsp + 0x2e8]
mov dword [rsp + 0x2ec], eax
mov dword [rsp + 0x2f0], eax
mov dword [rsp + 0x2f4], eax
mov rax, qword [rsp + 0x1f0]
mov rcx, rbx
lea rdx, [rsi + rax]
call fcn.140074af8
mov sil, byte [rsp + 0x40]
xor ebp, ebp
mov qword [rsp + 0x1d8], rbp
cmp sil, bpl
jne 0x14008e6d2
cmp byte [rsp + 0x41], bpl
jne 0x14008e6d2
cmp byte [rsp + 0x4e], bpl
je 0x140090ec2
lea rcx, [rsp + 0x160]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
mov dl, byte [rsp + 0x41]
mov r15d, 1
lea r9d, [r15 + 0xf]
xor r11d, r11d
jmp 0x14008df5e
cmp dword [rsp + 0x78], 4
jg 0x14008e70f
mov dl, byte [rsp + 0x43]
mov ebp, r9d
jmp 0x14008e74e
mov rdx, qword [rsp + 0xf0]
lea rax, [rax + rax*8]
add rax, rax
lea rdx, [rdx + rax*8 + 0x50]
mov eax, 5
cmp byte [rdx], al
je 0x14008e731
cmp byte [rdx], 0xf
jne 0x14008e733
mov ebp, ecx
inc ecx
add rdx, 0x90
cmp ecx, 4
jl 0x14008e728
mov dl, byte [rsp + 0x43]
xor ecx, ecx
cmp dl, cl
jne 0x14008e74e
add ebp, r11d
cmp ebp, ecx
jge 0x14008e75c
cmp byte [rsp + 0x4c], cl
je 0x14008e608
mov eax, ecx
cmp dl, cl
je 0x14008e76b
mov dword [rsp + 0xc8], ecx
jmp 0x14008e7bb
mov rcx, qword [rsp + 0xf0]
mov edi, dword [rsp + 0xc8]
lea rcx, [r10 + rcx + 0x290]
cmp byte [rcx], 0
jne 0x14008e78b
test eax, eax
jne 0x14008e796
cmp byte [rcx], 5
je 0x14008e796
cmp byte [rcx], 0xf
cmovne edi, eax
inc eax
add rcx, 0x90
cmp eax, 4
jl 0x14008e782
mov dword [rsp + 0xc8], edi
xor ecx, ecx
lea rdi, [0x140133078]
mov eax, dword [rsp + 0xc8]
cmp dl, cl
jne 0x14008e7c7
cmp eax, ecx
jl 0x14008e608
cmp byte [rsp + 0x4c], cl
je 0x14008e9e1
cmp r11d, ecx
mov eax, r9d
cmovg eax, r11d
cdqe
lea rcx, [rax + rax*8]
mov rax, qword [rsp + 0xf0]
add rcx, rcx
mov rax, qword [rax + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
xor edx, edx
sar rax, 9
cmp dword [rsp + 0x78], 4
mov qword [rsp + 0x150], rax
jle 0x14008e8f0
cmp ebp, edx
jge 0x14008e8f0
mov rcx, qword [rsp + 0xf0]
cmp byte [r10 + rcx + 0x50], dl
je 0x14008e8b0
mov ebp, dword [rsp + 0x78]
lea eax, [rbp - 8]
and eax, 0xfffffffc
inc eax
cmp ebp, 8
cmovg r9d, eax
movsxd rax, r9d
mov r9d, 0x1ff
lea rax, [rax + rax*8]
add rax, rax
mov rax, qword [rcx + rax*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov qword [rsp + 0x150], rax
mov rax, qword [r10 + rcx + 0x40]
add rax, qword [r10 + rcx + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov rcx, rax
mov r15, rax
mov qword [rsp + 0x238], rax
sub r8, rcx
sub rax, rsi
add r8, rsi
mov qword [rsp + 0x250], rax
xor edx, edx
mov qword [rsp + 0x1b8], r8
jmp 0x14008e938
cmp r11d, 4
jne 0x140090ede
cmp r9d, edx
jl 0x140090ede
cmp byte [rcx + r15*8 + 0x50], dl
je 0x140090ede
mov ebp, r9d
or r11d, 0xffffffff
mov qword [rsp + 0x150], rsi
mov r9, rsi
mov rcx, rsi
mov r15, rsi
mov qword [rsp + 0x238], rsi
jmp 0x14008e930
cmp r11d, edx
jle 0x14008e918
mov rdx, qword [rsp + 0xf0]
mov rax, qword [rdx + rcx*8 + 0x40]
add rax, qword [rdx + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
xor edx, edx
mov ebp, dword [rsp + 0x78]
sub r8, rax
mov r15, rax
mov qword [rsp + 0x238], rax
mov rcx, rax
add r8, rsi
mov qword [rsp + 0x1b8], rdx
cmp r8, rdx
jle 0x14008e608
mov rsi, qword [rsp + 0x98]
cmp byte [rsp + 0xbe], dl
je 0x14008e955
add rsi, rcx
lea rax, [rcx + 1]
cmp rsi, rax
cmovle rsi, rax
sub r8, rsi
mov qword [rsp + 0x98], rsi
mov rsi, qword [rsp + 0xd0]
add r8, rcx
cmp rsi, r8
cmovg rsi, r8
cmp rsi, rdx
mov qword [rsp + 0xd0], rsi
jl 0x14008e608
cmp r11d, edx
jle 0x14008e9b2
lea eax, [rbp - 1]
and eax, 0xfffffffc
cmp eax, 3
jg 0x14008e9a2
inc eax
jmp 0x14008e9ae
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
inc eax
jmp 0x14008e9cd
and ebp, 0xfffffffc
cmp ebp, 3
jg 0x14008e9bf
lea eax, [rbp + 1]
jmp 0x14008e9cd
mov eax, ebp
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
mov dword [rsp + 0x48], eax
mov rbp, r15
mov qword [rsp + 0x128], r15
jmp 0x14008ea85
mov r8, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0x98]
movsxd rax, ebp
lea rcx, [rax + rax*8]
mov r9d, 0x1ff
add rcx, rcx
mov rax, qword [r8 + rcx*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov rbp, rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x238], rax
mov rax, qword [r8 + rcx*8 + 0x40]
xor ecx, ecx
cqo
and rdx, r9
add rax, rdx
sar rax, 9
cmp byte [rsp + 0xbe], cl
je 0x14008ea4c
add rsi, rbp
mov qword [rsp + 0x98], rsi
cmp rsi, rcx
jle 0x14008ea60
cmp rsi, rbp
cmovle rsi, rbp
mov qword [rsp + 0x98], rsi
mov rsi, qword [rsp + 0xd0]
cmp rsi, rcx
jle 0x14008ea85
cmp rsi, rax
cmovg rsi, rax
cmp rsi, rcx
mov qword [rsp + 0xd0], rsi
jl 0x14008e608
lea rcx, [rsp + 0x160]
call fcn.140058efc
mov esi, dword [rsp + 0xa0]
mov eax, dword [rsp + 0x48]
mov r9b, byte [rsp + 0x4c]
mov r15d, 1
xor r10d, r10d
mov rcx, qword [rsp + 0x1f0]
cmp eax, 4
setge byte [rsp + 0xbf]
add rbp, rcx
shl rbp, 9
cmp esi, r10d
mov esi, dword [rsp + 0x60]
mov qword [rsp + 0x208], rbp
je 0x14008eb11
cmp r9b, r10b
je 0x14008eb11
mov rax, qword [rsp + 0x98]
mov r8, qword [rsp + 0xd0]
mov r9d, esi
lea rdx, [rcx + rax]
mov rcx, rbx
call fcn.140054f78
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor eax, eax
mov qword [rsp + 0x228], rax
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a4b0
cmp rax, rbp
jne 0x140091584
lea edx, [rsi + rsi*2]
lea rcx, [rsp + 0xd8]
call fcn.1400613a8
mov rcx, qword [rsp + 0xd8]
mov r8d, esi
lea edx, [rsi - 1]
add rcx, r8
mov qword [rsp + 0x168], r8
not edx
and rdx, rcx
mov qword [rsp + 0x1a8], rdx
lea rsi, [rdx + r8]
xor edx, edx
mov rcx, rsi
mov qword [rsp + 0x1e8], rsi
call fcn.1400f8760
mov r8d, dword [rsp + 0x60]
xor eax, eax
lea r9, [rsp + 0xb8]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
cmp eax, ecx
je 0x140091577
mov r8, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x1a8]
mov rdx, rsi
call fcn.14001d04c
xor eax, eax
cmp byte [rsp + 0x90], al
je 0x14008ecfa
cmp byte [rsp + 0x44], al
jne 0x14008ecfa
mov rcx, rsi
call fcn.14005df28
mov al, byte [rsp + 0x80]
mov edx, dword [rsp + 0x60]
xor r9d, r9d
cmp al, r9b
jg 0x14008ec04
jge 0x14008ebff
lea eax, [rdx + rdx + 0x4000]
mov ecx, eax
cmp qword [rsp + 0x178], rcx
jg 0x14008ec04
mov al, r9b
jmp 0x14008ec07
mov al, r15b
cmp byte [rsp + 0x90], r15b
jne 0x14008ec48
cmp al, r9b
je 0x14008ec33
cmp edx, 0x200
jbe 0x14008ec33
lea r8d, [rdx - 0x200]
lea rcx, [rsi + 0x200]
xor edx, edx
call fcn.1400f8760
xor edx, edx
lea rcx, [rsi + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400f8760
xor r9d, r9d
mov r8, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x1a8]
mov eax, 0xaa55
mov rdx, rsi
mov word [rsi + 0x1fe], ax
call fcn.140058f2c
cmp eax, r9d
je 0x14008ecbd
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a4b0
mov r8d, dword [rsp + 0x60]
xor eax, eax
lea r9, [rsp + 0xb8]
mov rdx, rsi
mov rcx, rbx
mov dword [rsp + 0xb8], eax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r9d, r9d
mov rsi, r9
cmp eax, r9d
sete sil
mov qword [rsp + 0x1d8], rsi
jmp 0x14008ecc5
mov rsi, qword [rsp + 0x1d8]
mov al, byte [rsp + 0x40]
or al, byte [rsp + 0x41]
or al, byte [rsp + 0x4e]
je 0x140090efa
cmp dword [rsp + 0xc4], r9d
jl 0x140090efa
mov ebp, r9d
lea rcx, [rsp + 0xd8]
call fcn.140058efc
jmp 0x14008e2f7
xor ebp, ebp
cmp byte [rsp + 0xa4], 2
je 0x14008ed2d
cmp byte [rsp + 0x50], bpl
jne 0x14008ed2d
cmp byte [rsp + 0x83], bpl
je 0x14008ed3f
mov eax, dword [rsp + 0x48]
cmp eax, r15d
jg 0x14008ed31
lea rcx, [rsp + 0xd8]
jmp 0x14008e498
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x83], bpl
je 0x14008ed3f
cmp eax, ebp
jl 0x14008ed20
lea rcx, [rsp + 0xf8]
mov edx, 0x200010
call fcn.1400613a8
or rax, 0xffffffffffffffff
mov dword [rsp + 0x68], ebp
mov byte [rsp + 0x43], al
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0xb8], ebp
cmp ax, bp
mov esi, ebp
jl 0x14008ed80
mov esi, dword [rsp + 0x48]
inc esi
cmp ax, bp
jne 0x14008ed80
neg si
movzx esi, si
mov eax, esi
lea r9, [rsp + 0x43]
lea r8, [rsp + 0x68]
or eax, dword [rsp + 0x148]
lea rdx, [rsp + 0xf8]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.1400688c4
mov r11b, byte [rsp + 0x43]
cmp esi, ebp
je 0x14008edb9
cmp r11b, bpl
jge 0x140090f39
mov eax, 0x10
cmp r11b, al
jl 0x14008edc7
and r11b, 0xf
cmp r11b, bpl
jl 0x14008ede1
mov al, byte [rsp + 0x4c]
or al, byte [rsp + 0x51]
or al, byte [rsp + 0x130]
jne 0x140090f6c
mov rbp, qword [rsp + 0xf8]
xor ecx, ecx
cmp qword [rsp + 0x170], rcx
jl 0x14008ee11
mov rdx, rbp
mov rcx, rbx
call fcn.14005d8cc
cqo
idiv qword [rsp + 0x168]
xor ecx, ecx
mov rsi, rax
jmp 0x14008ee6d
mov rax, qword [rsp + 0x2a8]
mov rsi, rcx
lea r8, [rsp + 0x2f8]
cmp rax, rcx
mov rcx, qword [rsp + 0x180]
cmovge rsi, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor ecx, ecx
cmp eax, ecx
je 0x14008ee89
lea eax, [rcx + 0x10]
test byte [rsp + 0x2f8], al
jne 0x14008ee89
mov esi, dword [rsp + 0x314]
mov eax, dword [rsp + 0x318]
and rsi, 0xfffffffffffffe00
shr rax, 9
shl rsi, 0x17
or rsi, rax
mov rax, qword [rsp + 0x2a8]
sub rsi, qword [rsp + 0x1f0]
cmp rax, rcx
jle 0x14008ee89
cmp rsi, rax
cmovb rsi, rax
lea r8, [rsp + 0x68]
mov rdx, rbp
mov rcx, rbx
call fcn.14005dc54
xor r10d, r10d
mov rcx, rax
mov qword [rsp + 0x118], rax
cmp word [r13], r10w
jne 0x14008eeb3
cmp rax, r10
je 0x14008eefd
cmp rax, r10
je 0x14008eebc
mov eax, dword [rax]
jmp 0x14008eebf
mov eax, r10d
cmp eax, r15d
sete r8b
mov byte [rsp + 0x43], r8b
cmp r8b, r10b
je 0x14008eeda
cmp byte [rsp + 0x101], r10b
je 0x14008eedd
mov r15b, r10b
cmp byte [rsp + 0x109], r10b
jne 0x14008ef1e
cmp byte [rsp + 0x90], r10b
jne 0x14008ef1e
cmp r15b, r10b
je 0x14008ef17
cmp byte [rsp + 0x44], r10b
jne 0x14008ef1e
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
jmp 0x14008e610
cmp byte [rsp + 0x44], r10b
jne 0x14008eefd
mov rax, qword [rsp + 0x278]
mov r11, qword [rsp + 0x288]
mov rdx, qword [rsp + 0x298]
mov dword [rsp + 0x78], eax
mov eax, r11d
mov dword [rsp + 0x104], edx
mov dword [rsp + 0xa0], eax
cmp word [r13], r10w
jne 0x14008f031
xor edx, edx
lea rcx, [rsp + 0x2fc]
mov dword [rsp + 0x2f8], r10d
lea r8d, [rdx + 0x14]
call fcn.1400f8760
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xb8]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov eax, 0x18
mov edx, 0x70000
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x2f8]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor r10d, r10d
cmp qword [rsp + 0x278], r10
jg 0x14008efd0
movsxd rdx, dword [rsp + 0x304]
mov dword [rsp + 0x78], edx
mov qword [rsp + 0x278], rdx
mov rdx, qword [rsp + 0x298]
cmp rdx, r10
jg 0x14008eff4
movsxd rdx, dword [rsp + 0x308]
mov dword [rsp + 0x104], edx
mov qword [rsp + 0x298], rdx
mov r11, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x118]
mov r8b, byte [rsp + 0x43]
cmp r11, r10
jg 0x14008f02a
movsxd rax, dword [rsp + 0x30c]
mov dword [rsp + 0xa0], eax
mov r11, rax
mov qword [rsp + 0x288], rax
jmp 0x14008f031
mov eax, dword [rsp + 0xa0]
mov r9, qword [rsp + 0x278]
cmp r9, r10
jg 0x14008f051
mov r9d, 0xff
mov dword [rsp + 0x78], r9d
mov qword [rsp + 0x278], r9
cmp rdx, r10
jg 0x14008f06a
mov edx, 0x3f
mov dword [rsp + 0x104], edx
mov qword [rsp + 0x298], rdx
cmp r11, r10
mov r10d, dword [rsp + 0x60]
jg 0x14008f097
xor r11d, r11d
mov eax, 0x200
cmp r10d, r11d
cmova eax, r10d
movsxd rdx, eax
mov dword [rsp + 0xa0], eax
mov qword [rsp + 0x288], rdx
jmp 0x14008f09a
xor r11d, r11d
mov r9, qword [rsp + 0x168]
cdq
and edx, 0x1ff
add eax, edx
lea rdx, [r9 + rbp]
mov qword [rsp + 0xf0], rdx
add rdx, r9
sar eax, 9
mov qword [rsp + 0x200], rdx
add rdx, 0x10000
mov dword [rsp + 0x68], eax
mov qword [rsp + 0x118], rdx
cmp r15b, r11b
jne 0x14008fa94
cmp byte [rsp + 0x44], r11b
jne 0x14008fa94
mov r15b, r11b
cmp byte [rsp + 0x130], r11b
jne 0x14008f57e
cmp qword [rsp + 0x98], r11
jge 0x14008f115
cmp qword [rsp + 0xd0], r11
jl 0x14008f57e
cmp dword [rsp + 0x48], r11d
jl 0x14008f57e
lea rcx, [rsp + 0x230]
mov edx, 0x100000
call fcn.1400613a8
movsxd r15, dword [rsp + 0xa0]
mov r9d, dword [rsp + 0x104]
mov eax, r15d
imul eax, r9d
cdq
and edx, 0x1ff
add eax, edx
mov edx, dword [rsp + 0x78]
sar eax, 9
movsxd rsi, eax
mov eax, esi
imul eax, edx
xor edx, edx
cmp r15d, edx
movsxd rbp, eax
jle 0x140090fa5
cmp word [r13], dx
jne 0x14008f1c4
mov dword [rsp + 0xa0], edx
mov rdx, qword [rsp + 0x230]
lea r8, [rsp + 0xa0]
mov rcx, rbx
call fcn.14005dc54
xor edx, edx
cmp rax, rdx
je 0x140090f7e
mov eax, dword [rsp + 0x48]
cmp eax, 4
jl 0x14008f1bc
cmp byte [rsp + 0x4c], dl
jne 0x14008f1bc
cmp eax, dword [rsp + 0xa0]
jge 0x140090fa5
mov r9d, dword [rsp + 0x104]
mov r11, qword [rsp + 0x98]
mov rax, rdx
cmp r11, rdx
jle 0x14008f2bd
mov rdx, qword [rsp + 0x260]
or rcx, 0xffffffffffffffff
cmp rdx, rcx
jne 0x14008f274
cmp r11, rbp
jl 0x14008f200
xor eax, eax
mov rdx, rbp
cmp byte [rsp + 0xbf], al
je 0x14008f203
mov rdx, rsi
mov rcx, r11
call fcn.14005de14
mov cl, byte [rsp + 0x6d]
add r11, rax
mov qword [rsp + 0x98], r11
mov esi, dword [rsp + 0x68]
xor edx, edx
mov r10, qword [rsp + 0xd0]
cmp r10, rdx
jle 0x14008f245
cmp byte [rsp + 0x10b], dl
jne 0x14008f245
sub r10, rax
cmovs r10, rdx
mov qword [rsp + 0xd0], r10
cmp r11, rdx
mov r8, rdx
cmovg r8, r11
cmp r10, rdx
jle 0x14008f30c
mov rax, qword [rsp + 0x280]
cmp rax, 0xffffffffffffffff
jne 0x14008f2ca
lea rax, [r8 + r10]
cqo
idiv rbp
jmp 0x14008f2ff
mov cl, byte [rsp + 0x6d]
xor r8d, r8d
cmp cl, r8b
jne 0x14008f21a
movsxd rsi, dword [rsp + 0x68]
lea rax, [r15 + rdx - 1]
cqo
idiv r15
mov rcx, rax
imul rcx, rsi
mov rdx, rcx
mov qword [rsp + 0x260], rcx
mov rcx, r11
call fcn.14005de14
mov cl, byte [rsp + 0x6d]
add r11, rax
mov qword [rsp + 0x98], r11
jmp 0x14008f21e
mov esi, dword [rsp + 0x68]
mov cl, byte [rsp + 0x6d]
jmp 0x14008f220
cmp cl, dl
jne 0x14008f30c
lea rax, [r15 + rax - 1]
cqo
idiv r15
imul rax, r15
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov rcx, rax
mov qword [rsp + 0x280], rax
lea rax, [r8 + r10]
cqo
idiv rcx
sub r10, rdx
xor edx, edx
mov qword [rsp + 0xd0], r10
mov rax, qword [rsp + 0x1b8]
mov rbp, qword [rsp + 0x238]
mov r15d, dword [rsp + 0x78]
cmp rax, rdx
mov byte [rsp + 0x43], dl
mov byte [rsp + 0x82], dl
mov byte [rsp + 0x7d], dl
jle 0x14008f478
mov rax, r10
movsxd rcx, esi
lea r8, [rsp + 0x82]
sub rax, rbp
add rax, r11
cqo
idiv rcx
mov rcx, qword [rsp + 0x250]
lea rdx, [rsp + 0x43]
mov qword [rsp + 0x1b8], rax
xor eax, eax
lea r10d, [rax + 1]
mov dword [rsp + 0x1c0], eax
mov dword [rsp + 0x1c4], eax
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r9d
lea r9, [rsp + 0x7d]
mov dword [rsp + 0x1c8], eax
mov dword [rsp + 0x1cc], eax
call fcn.14005de30
xor eax, eax
mov dword [rsp + 0x30], r10d
mov byte [rsp + 0x1c0], al
mov al, byte [rsp + 0x82]
lea r9, [rsp + 0x7d]
mov byte [rsp + 0x1c1], al
mov al, byte [rsp + 0x7d]
lea r8, [rsp + 0x82]
mov byte [rsp + 0x1c2], al
mov al, byte [rsp + 0x43]
lea rdx, [rsp + 0x43]
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x250]
mov dword [rsp + 0x28], r15d
lea rcx, [rax + rax - 1]
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x20], eax
call fcn.14005de30
mov rdx, qword [rsp + 0x150]
lea eax, [r10 + 4]
lea r8, [rsp + 0x1c0]
mov r9d, r10d
mov byte [rsp + 0x1c4], al
mov al, byte [rsp + 0x82]
mov rcx, rbx
mov byte [rsp + 0x1c5], al
mov al, byte [rsp + 0x7d]
mov byte [rsp + 0x1c6], al
mov al, byte [rsp + 0x43]
mov byte [rsp + 0x1c7], al
mov rax, qword [rsp + 0x250]
mov dword [rsp + 0x1c8], eax
mov rax, qword [rsp + 0x1b8]
mov dword [rsp + 0x1cc], eax
call fcn.140074af8
mov r11, qword [rsp + 0x98]
mov rax, rbp
movsxd rcx, esi
xor r8d, r8d
cqo
idiv rcx
cmp r11, r8
mov r10, rax
jl 0x14008f4a3
mov rax, r11
cqo
idiv rcx
mov rbp, rax
mov qword [rsp + 0x158], rax
jmp 0x14008f4ae
mov rbp, r8
mov qword [rsp + 0x158], r8
mov rax, qword [rsp + 0xd0]
cmp rax, r8
jl 0x14008f4ca
cqo
idiv rcx
mov qword [rsp + 0x1e0], rax
jmp 0x14008f4d2
mov qword [rsp + 0x1e0], r8
mov ecx, dword [rsp + 0x48]
mov esi, dword [rsp + 0x104]
mov eax, r8d
cmp ecx, 4
lea r9, [rsp + 0x4f]
lea r8, [rsp + 0x100]
setge al
lea rdx, [rsp + 0xe8]
mov rcx, rbp
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], esi
call fcn.14005de30
xor eax, eax
cmp qword [rsp + 0x98], rax
jle 0x14008f527
sub rbp, r10
mov qword [rsp + 0x158], rbp
mov rax, qword [rsp + 0x1e0]
mov edx, dword [rsp + 0x78]
movsx r15d, byte [rsp + 0xbf]
lea eax, [rax + rbp - 1]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], edx
lea r9, [rsp + 0x64]
lea r8, [rsp + 0xbd]
lea rdx, [rsp + 0xe0]
mov ecx, eax
mov dword [rsp + 0x20], esi
call fcn.14005de30
lea rcx, [rsp + 0x230]
call fcn.140058efc
mov r9, qword [rsp + 0x168]
mov esi, dword [rsp + 0xc8]
shl esi, 4
cmp byte [rsp + 0xa4], 2
movsxd rbp, esi
je 0x140091014
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1a8]
mov r8, r9
call fcn.14001d04c
xor r11d, r11d
cmp qword [rsp + 0x1b8], r11
jl 0x14008f613
cmp dword [rsp + 0xc8], r11d
jle 0x14008f5e1
mov rcx, qword [rsp + 0x1e8]
mov r8, rbp
xor edx, edx
add rcx, 0x1be
call fcn.1400f8760
mov eax, 3
xor edx, edx
sub eax, dword [rsp + 0xc8]
shl eax, 4
movsxd r8, eax
lea eax, [rsi + 0x10]
movsxd rcx, eax
mov rax, qword [rsp + 0x1e8]
lea rcx, [rcx + rax + 0x1be]
call fcn.1400f8760
xor r11d, r11d
mov r8, qword [rsp + 0x1e8]
mov r9b, byte [rsp + 0x4c]
mov r10b, byte [rsp + 0x50]
mov al, byte [r8 + rbp + 0x1c2]
cmp r9b, r11b
jne 0x14008f648
cmp r10b, 2
jge 0x14008f648
cmp al, 5
je 0x14008eefd
cmp al, 0xf
je 0x14008eefd
mov edx, dword [r8 + rbp + 0x1c6]
mov ecx, dword [r8 + rbp + 0x1ca]
mov rsi, qword [rsp + 0x98]
cmp r9b, r11b
jne 0x14008f6c0
cmp al, r11b
je 0x14008f6c0
cmp dword [rsp + 0xe4], r11d
je 0x14008f6c0
cmp r10b, 2
jge 0x14008f6c0
cmp byte [rsp + 0xbf], r11b
jne 0x14008f6c0
cmp rsi, r11
jl 0x14008f697
cmp qword [rsp + 0x158], rdx
jne 0x14008eefd
mov r11, qword [rsp + 0xd0]
xor r9d, r9d
cmp r11, r9
mov r9, qword [rsp + 0x1e0]
jl 0x14008f6d0
xor eax, eax
cmp r9, rcx
je 0x14008f6d2
cmp ecx, eax
jne 0x14008eefd
jmp 0x14008f6d2
mov r9, qword [rsp + 0x1e0]
mov r11, qword [rsp + 0xd0]
xor eax, eax
cmp byte [rsp + 0x130], al
je 0x14008f6f1
xor r9d, r9d
mov ecx, r9d
mov edx, r9d
mov r10, r9
mov qword [rsp + 0x1e0], r9
jmp 0x14008f6f9
mov r10, qword [rsp + 0x158]
mov eax, dword [rsp + 0xe4]
test eax, eax
js 0x14008f70c
mov byte [r8 + rbp + 0x1c2], al
mov eax, dword [rsp + 0x74]
cmp ax, word [rsp + 0x2d0]
jle 0x14008f74c
cmp dword [rsp + 0x148], 0
je 0x14008f744
mov byte [r8 + 0x1ee], 0
mov byte [r8 + 0x1de], 0
mov byte [r8 + 0x1ce], 0
mov byte [r8 + 0x1be], 0
cmp ax, word [rsp + 0x2d0]
jl 0x14008f756
mov byte [r8 + rbp + 0x1be], al
xor eax, eax
cmp rsi, rax
jge 0x14008f76d
cmp r11, rax
jl 0x14008f805
lea ecx, [r9 + rdx - 1]
jmp 0x14008f777
cmp r11, rax
jge 0x14008f7c6
lea ecx, [r10 + rcx - 1]
movsx eax, r15b
lea r9, [rsp + 0x64]
lea r8, [rsp + 0xbd]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x78]
lea rdx, [rsp + 0xe0]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x20], eax
call fcn.14005de30
mov r8, qword [rsp + 0x1e8]
mov r9, qword [rsp + 0x1e0]
mov r11, qword [rsp + 0xd0]
xor eax, eax
cmp rsi, rax
jl 0x14008f800
mov al, byte [rsp + 0x100]
mov dword [r8 + rbp + 0x1c6], r10d
mov byte [r8 + rbp + 0x1bf], al
mov al, byte [rsp + 0x4f]
mov byte [r8 + rbp + 0x1c0], al
movzx eax, word [rsp + 0xe8]
mov byte [r8 + rbp + 0x1c1], al
xor eax, eax
cmp r11, rax
jge 0x14008f80a
cmp rsi, rax
jl 0x14008f836
mov al, byte [rsp + 0xbd]
mov byte [r8 + rbp + 0x1c3], al
mov al, byte [rsp + 0x64]
mov byte [r8 + rbp + 0x1c4], al
mov al, byte [rsp + 0xe0]
mov byte [r8 + rbp + 0x1c5], al
xor eax, eax
cmp r11, rax
jl 0x14008f843
mov dword [r8 + rbp + 0x1ca], r9d
mov eax, dword [rsp + 0xe4]
mov ecx, dword [rsp + 0x74]
xor ebp, ebp
cmp eax, ebp
jge 0x14008f863
cmp cx, bp
jge 0x14008f863
cmp rsi, rbp
jge 0x14008f863
cmp r11, rbp
jl 0x14008f873
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
cmp cx, bp
jge 0x14008f896
cmp eax, ebp
jge 0x14008f896
cmp rsi, rbp
jge 0x14008f896
cmp r11, rbp
jge 0x14008f896
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
mov rsi, qword [rsp + 0x208]
xor r8d, r8d
mov rcx, rbx
mov rdx, rsi
call fcn.14005a4b0
cmp rax, rsi
jne 0x140090fc9
mov r15d, 1
mov esi, r15d
cmp qword [rsp + 0x128], rbp
jne 0x14008f8d5
mov rcx, qword [rsp + 0x1e8]
call fcn.14005df28
mov r9, qword [rsp + 0x168]
mov r10, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1a8]
mov r8, r9
mov rdx, r10
call fcn.140058f2c
cmp eax, ebp
je 0x14008f934
mov r8d, dword [rsp + 0x60]
lea r9, [rsp + 0xb8]
mov rdx, r10
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.14005dea0
mov r10, qword [rsp + 0x1e8]
mov r9, qword [rsp + 0x168]
mov rbp, qword [rsp + 0x98]
mov eax, 0x200
cmp rbp, rax
jl 0x14008fa49
cmp qword [rsp + 0xd0], rax
jle 0x14008fa49
xor eax, eax
cmp byte [rsp + 0x10c], al
jle 0x14008fa49
mov r8, r9
xor edx, edx
mov rcx, r10
call fcn.1400f8760
mov r15, qword [rsp + 0x178]
shl rbp, 9
add r15, rbp
xor r8d, r8d
mov rcx, rbx
mov rdx, r15
call fcn.14005a4b0
cmp rax, rbp
je 0x14008f9a7
xor r9d, r9d
mov esi, r9d
mov r15d, 1
jmp 0x14008fa4c
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x1a8]
xor eax, eax
lea r9, [rsp + 0xb8]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r9d, r9d
mov esi, eax
cmp eax, r9d
je 0x14008f999
mov eax, dword [rsp + 0x60]
cmp dword [rsp + 0xb8], eax
jne 0x14008f999
mov r8, qword [rsp + 0x168]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1a8]
call fcn.140058f2c
cmp eax, r9d
je 0x14008f99c
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14005a4b0
cmp rax, rbp
jne 0x14008f996
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x1e8]
xor eax, eax
lea r9, [rsp + 0xb8]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15d, 1
mov esi, eax
xor r9d, r9d
cmp esi, r9d
mov rsi, r9
mov qword [rsp + 0x1d8], r9
sete sil
mov qword [rsp + 0x1d8], rsi
cmp byte [rsp + 0x41], r9b
jne 0x14008fa7f
cmp byte [rsp + 0x40], r9b
jne 0x14008fa7f
cmp byte [rsp + 0x4e], r9b
je 0x140090fb7
lea rcx, [rsp + 0xf8]
mov ebp, r9d
call fcn.140058efc
jmp 0x14008ece8
mov edx, dword [rsp + 0x190]
cmp byte [rsp + 0x130], r11b
mov r9d, dword [rsp + 0x90]
movzx edx, dl
cmovne edx, r11d
mov dword [rsp + 0x190], edx
cmp r8b, r11b
je 0x14008fac9
cmp r9b, r11b
jne 0x14008fac9
mov r15d, dword [rcx + 0x28]
jmp 0x14008facf
mov r15d, 0x80
movsxd rcx, eax
mov rax, qword [rsp + 0x98]
mov dword [rsp + 0xe8], r15d
cqo
idiv rcx
mov r8, rax
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x2a8]
cqo
idiv rcx
mov r11, rax
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xd0]
cqo
idiv rcx
xor edx, edx
mov rcx, rax
mov qword [rsp + 0xd0], rax
dec rax
mov qword [rsp + 0x158], rax
cmp byte [rsp + 0x10a], dl
je 0x14008fb45
lea rax, [rcx + r8 - 1]
mov qword [rsp + 0x158], rax
mov ecx, 1
mov qword [rsp + 0x150], rdx
cmp r9b, cl
jne 0x14008fb98
test byte [rsp + 0xc0], 0x10
je 0x14008fb70
lea rax, [r11 - 1]
mov rsi, r11
mov qword [rsp + 0x158], rax
cmp r8, rcx
mov qword [rsp + 0x150], rax
cmovl r8, rcx
cmp rax, rcx
mov qword [rsp + 0x98], r8
jge 0x14008fb98
lea rax, [rsi - 1]
mov qword [rsp + 0x150], rax
mov al, r9b
mov rdx, rbp
mov r9d, r10d
neg al
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x30], rax
sbb rcx, rcx
lea rax, [rsp + 0x150]
and rcx, r8
mov qword [rsp + 0x28], rax
mov r8d, r15d
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x140]
call fcn.140067650
xor esi, esi
mov r9, rax
mov qword [rsp + 0x128], rax
lea r10d, [rsi + 1]
cmp byte [rsp + 0x43], sil
jne 0x14008fbff
cmp rax, rsi
cmove r9, r10
mov qword [rsp + 0x128], r9
mov rax, qword [rsp + 0x150]
mov ecx, 0x20
cmp rax, rcx
mov qword [rsp + 0x150], rax
jl 0x14009152c
cmp byte [rsp + 0xa4], 2
je 0x140091259
movsxd r11, dword [rsp + 0x48]
mov dword [rsp + 0x68], r10d
cmp r11d, r15d
jae 0x14008fc6b
cmp dword [rsp + 0x70], r15d
jge 0x14008fc6b
cmp r11d, esi
jl 0x14008fc6f
mov rcx, r11
lea rdx, [0x140119f70]
mov r8d, 0x10
shl rcx, 7
add rcx, qword [rsp + 0x200]
call fcn.140058f2c
cmp eax, esi
jne 0x14008fc6f
mov dword [rsp + 0x68], esi
mov ecx, dword [rsp + 0x60]
xor edx, edx
lea eax, [rcx + 0x3fff]
div ecx
mov ecx, dword [rsp + 0x90]
mov dword [rsp + 0xe0], eax
cmp cl, r10b
jne 0x14008ffcc
cmp r11d, r15d
jae 0x14009152c
mov edx, dword [rsp + 0xe8]
mov al, byte [rsp + 0x80]
mov rsi, qword [rsp + 0x200]
lea ecx, [r9 + 1]
mov r9d, dword [rsp + 0x60]
mov r8d, 0x4800
shl edx, 7
mov r15, rsi
imul ecx, r9d
sub r8d, ecx
mov dword [rsp + 0xc8], edx
mov dword [rsp + 0xa0], r8d
xor r8d, r8d
cmp al, r8b
jg 0x1400900b4
jge 0x14008fd02
lea ecx, [r9 + r9 + 0x4000]
cmp qword [rsp + 0x178], rcx
jg 0x1400900b4
cmp edx, r8d
mov byte [rsp + 0x4f], r8b
mov esi, r8d
jle 0x14008fd8d
mov edi, dword [rsp + 0xa0]
mov r12d, 0x80
lea r14d, [r12 - 0x70]
lea r13d, [r12 - 0x40]
xor edx, edx
cmp esi, edi
mov rcx, r15
jl 0x14008fd3f
mov r8, r14
call fcn.1400f8760
add esi, r12d
add r15, r12
jmp 0x14008fd65
mov r8d, 0x1b0
call fcn.1400f8760
lea rcx, [r15 + 0x1be]
mov r8, r13
xor edx, edx
call fcn.1400f8760
mov eax, 0x200
add esi, eax
add r15, rax
cmp esi, dword [rsp + 0xc8]
jl 0x14008fd26
mov r12, qword [rsp + 0x248]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b0]
lea rdi, [0x140133078]
mov r15, qword [rsp + 0xf0]
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x38]
call fcn.1400f8760
xor edx, edx
lea rcx, [r15 + 0x48]
lea r8d, [rdx + 0x14]
call fcn.1400f8760
xor edx, edx
lea rcx, [rbp + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400f8760
xor eax, eax
mov ecx, 0xaa55
mov word [rbp + 0x1fe], cx
cmp byte [rsp + 0x4f], al
jne 0x14008fde7
cmp dword [rsp + 0x60], 0x200
jbe 0x14008fde7
mov word [r15 - 2], cx
lea rdx, str.EFI_PART
mov r8d, 8
mov rcx, r15
call fcn.14001d04c
movsxd rcx, dword [rsp + 0xe0]
mov rdx, qword [rsp + 0x150]
mov rax, qword [rsp + 0x98]
mov dword [r15 + 8], 0x10000
mov dword [r15 + 0xc], 0x5c
mov qword [r15 + 0x18], rax
lea rax, [rcx + rax + 1]
mov qword [r15 + 0x20], rdx
mov qword [r15 + 0x28], rax
mov rax, rdx
sub rax, rcx
mov rcx, rbp
dec rax
mov qword [r15 + 0x30], rax
call fcn.14005df28
lea rcx, [r15 + 0x38]
movabs rax, 0x202020323354
cmp qword [rcx], rax
je 0x14008fe88
movabs rax, 0x202020363154
cmp qword [rcx], rax
je 0x14008fe88
xor eax, eax
cmp qword [rcx], rax
je 0x14008fe88
or rdx, 0xffffffffffffffff
cmp qword [rcx], rdx
je 0x14008fe88
cmp qword [r15 + 0x40], rax
je 0x14008fe88
cmp qword [r15 + 0x40], rdx
jne 0x14008fea5
lea rdx, [0x14011d878]
mov r8d, 0xc
call fcn.14001d04c
mov r11d, dword [rbp + 0x1b8]
mov dword [r15 + 0x44], r11d
lea rcx, [r15 - 0x174]
call fcn.14005df28
mov r11, qword [rsp + 0x98]
mov eax, 0x80
lea ecx, [rax - 0x7f]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x54], eax
lea rax, [rcx - 2]
inc r11
mov dword [rsp + 0x30], ecx
mov qword [r15 + 0x48], r11
mov r15, qword [rsp + 0x158]
cmp r15, rcx
mov rcx, qword [rsp + 0x98]
cmovl r15, rax
movsxd rax, dword [rsp + 0x48]
mov r10d, eax
mov rsi, rax
mov qword [rsp + 0x158], r15
shl r10d, 4
add rsi, rsi
lea eax, [r10 + 0x1bf]
mov dword [rbp + rsi*8 + 0x1c2], 0xee
movsxd r8, eax
mov eax, dword [rsp + 0x78]
add r8, rbp
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x104]
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.14005de30
lea r9d, [r10 + 0x1c3]
mov r10d, 1
movsxd r8, r9d
add r8, rbp
cmp byte [rsp + 0x44], 2
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov byte [r8], 0xfe
mov byte [r9], 0xff
mov byte [rdx], 0xfe
jne 0x14008ff8e
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x30], r10d
mov rcx, r15
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x20], eax
call fcn.14005de30
mov rax, qword [rsp + 0x98]
mov ecx, dword [rsp + 0x90]
mov dword [rbp + rsi*8 + 0x1c6], eax
or dword [rbp + rsi*8 + 0x1ca], 0xffffffff
cmp byte [rsp + 0x44], 2
jne 0x1400903e2
mov r11d, dword [rsp + 0x48]
mov dword [rbp + rsi*8 + 0x1ca], r15d
mov r15d, dword [rsp + 0xe8]
xor r9d, r9d
cmp cl, r9b
jg 0x1400903e5
cmp byte [rsp + 0xbc], r9b
jle 0x14008ffeb
cmp r11d, r9d
jl 0x1400903e5
mov rsi, qword [rsp + 0x200]
cmp byte [rsp + 0x4c], r9b
je 0x140090048
or dword [rsp + 0x48], 0xffffffff
xor r11d, r11d
mov al, r9b
mov dword [rsp + 0x190], eax
cmp r15d, r11d
jbe 0x14009004f
mov ecx, r9d
lea rdx, [0x140119f70]
mov r8d, 0x10
shl rcx, 7
add rcx, rsi
call fcn.140058f2c
cmp eax, r11d
je 0x140090108
add r9d, r10d
cmp r9d, r15d
jb 0x140090011
mov ecx, dword [rsp + 0x90]
xor r9d, r9d
mov eax, dword [rsp + 0x190]
mov edx, dword [rsp + 0x70]
mov r10d, dword [rsp + 0x48]
mov r11d, 1
sub edx, r11d
mov dword [rsp + 0x70], edx
cmp r10d, r15d
jae 0x14008eefd
cmp edx, r15d
jge 0x14008eefd
cmp al, r9b
je 0x140090266
mov ecx, r9d
cmp byte [rsp + 0x43], r9b
je 0x14009015a
mov rdx, qword [rsp + 0x98]
lea rax, [rsi + 0x20]
lea r8d, [r11 + 0x7f]
cmp ecx, r15d
jae 0x14009015a
cmp qword [rax], rdx
je 0x140090129
add ecx, r11d
add rax, r8
jmp 0x14009009e
mov byte [rsp + 0x4f], r10b
cmp r9d, 0x200
jbe 0x1400900dc
lea r8d, [r9 - 0x200]
lea rcx, [rbp + 0x200]
xor edx, edx
call fcn.1400f8760
mov r9d, dword [rsp + 0x60]
mov r15, qword [rsp + 0xf0]
lea r8d, [r9 - 0x5c]
xor edx, edx
lea rcx, [r15 + 0x5c]
call fcn.1400f8760
xor edx, edx
mov r8d, 0x4000
mov rcx, rsi
call fcn.1400f8760
jmp 0x14008fd95
mov ecx, r9d
xor edx, edx
mov r8d, 0x80
shl rcx, 7
mov dword [rsp + 0x48], r9d
add rcx, rsi
call fcn.1400f8760
jmp 0x14009003e
movdqu xmm0, xmmword [0x140119f70]
mov r9d, ecx
shl r9, 7
add r9, rsi
movdqu xmmword [r9], xmm0
cmp ecx, r10d
je 0x14009015a
xor edx, edx
mov rcx, r9
call fcn.1400f8760
mov r10d, dword [rsp + 0x48]
mov r11d, 1
movsxd r9, r10d
lea rdx, [0x140119f70]
mov r8d, 0x10
shl r9, 7
add r9, rsi
mov rcx, r9
mov qword [rsp + 0x208], r9
call fcn.140058f2c
xor ecx, ecx
cmp eax, ecx
je 0x14009023a
lea r15d, [r10 + 1]
mov r10d, dword [rsp + 0xe8]
cmp r15d, r10d
jae 0x14008eefd
mov ecx, r15d
lea rdx, [0x140119f70]
mov r8d, 0x10
shl rcx, 7
add rcx, rsi
call fcn.140058f2c
xor ecx, ecx
cmp eax, ecx
je 0x1400901cc
add r15d, r11d
cmp r15d, r10d
jb 0x1400901a0
jmp 0x140090231
mov edx, dword [rsp + 0x48]
movsxd rcx, r15d
cmp r15d, edx
jle 0x140090231
shl rcx, 7
mov edi, r15d
mov r13d, 0x80
add rcx, rsi
sub edi, edx
lea rsi, [rcx - 0x80]
mov r8, r13
mov rdx, rsi
call fcn.1400f93b0
sub rdi, 1
mov rcx, rsi
jne 0x1400901ea
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b0]
mov r9, qword [rsp + 0x208]
mov r10d, dword [rsp + 0xe8]
mov rsi, qword [rsp + 0x200]
lea rdi, [0x140133078]
cmp r15d, r10d
jae 0x14008eefd
xor edx, edx
mov r8d, 0x80
mov rcx, r9
call fcn.1400f8760
mov r10d, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x90]
mov edx, dword [rsp + 0x70]
xor r9d, r9d
lea r11d, [r9 + 1]
mov eax, r9d
jmp 0x14009026a
mov eax, dword [rsp + 0x68]
cmp cl, r11b
je 0x1400903ae
cmp edx, r9d
jge 0x140090501
cmp eax, r9d
jne 0x1400902c3
mov edx, r11d
mov ecx, r11d
mov r15d, r11d
mov eax, r11d
mov r9d, r11d
mov dword [rsp + 0xb0], r11d
mov dword [rsp + 0x26c], edx
mov dword [rsp + 0x268], ecx
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x2b8], rax
mov r8d, r11d
mov dword [rsp + 0x270], r11d
jmp 0x1400902f1
mov rax, qword [rsp + 0x2b8]
mov ecx, dword [rsp + 0x268]
mov edx, dword [rsp + 0x26c]
mov r8d, dword [rsp + 0x270]
mov r9d, dword [rsp + 0xb0]
mov r15, qword [rsp + 0x198]
xor r11d, r11d
cmp eax, r11d
jle 0x140090305
movsxd rax, r10d
shl rax, 7
movdqu xmmword [rax + rsi], xmm6
cmp r15d, r11d
jle 0x140090317
movsxd rax, r10d
shl rax, 7
movdqu xmmword [rax + rsi + 0x10], xmm7
cmp ecx, r11d
jle 0x140090330
mov rcx, qword [rsp + 0x98]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x20], rcx
cmp edx, r11d
jle 0x140090349
mov rcx, qword [rsp + 0x158]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x28], rcx
cmp r9d, r11d
jle 0x140090362
mov rcx, qword [rsp + 0x2e0]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x30], rcx
xor r9d, r9d
cmp r8d, r9d
jle 0x1400903a7
mov r15, qword [rsp + 0x290]
cmp word [r15], r9w
je 0x1400903a7
movsxd rax, r10d
lea r8d, [r9 + 0x48]
xor edx, edx
shl rax, 7
lea rsi, [rax + rsi + 0x38]
mov rcx, rsi
call fcn.1400f8760
mov r8d, 0x24
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
xor r9d, r9d
mov ecx, dword [rsp + 0x90]
mov eax, dword [rsp + 0x48]
mov r15d, 0x80
cmp byte [rsp + 0x130], r9b
je 0x1400903e5
movsxd rcx, eax
mov r8, r15
xor edx, edx
shl rcx, 7
add rcx, qword [rsp + 0x200]
call fcn.1400f8760
mov ecx, dword [rsp + 0x90]
xor r9d, r9d
mov esi, dword [rsp + 0xe8]
mov eax, 1
mov r15d, r9d
mov dword [rsp + 0xc8], r9d
cmp byte [rsp + 0xbc], al
jne 0x14009061e
cmp cl, al
je 0x14009061e
lea eax, [rsi - 1]
mov dword [rsp + 0xa0], r9d
cmp eax, r9d
jl 0x14009061b
mov r13, qword [rsp + 0x200]
mov ebp, 1
mov r14d, r9d
mov rdi, r13
mov r12d, eax
lea ebx, [rbp + 0x7f]
mov r10d, 0x10
lea rdx, [0x140119f70]
mov rcx, rdi
mov r8, r10
call fcn.140058f2c
cmp eax, r9d
sete al
mov byte [rsp + 0x4f], al
cmp al, r9b
jne 0x14009046f
mov dword [rsp + 0x78], r9d
cmp r15d, r14d
je 0x140090473
mov dword [rsp + 0x78], ebp
mov esi, r9d
mov dword [rsp + 0x68], r9d
cmp al, r9b
jne 0x140090596
cmp r15d, r14d
je 0x140090593
movsxd rsi, r14d
mov r15d, 0x38
mov rdx, rdi
shl rsi, 7
mov r8, r15
add rsi, r13
mov rcx, rsi
call fcn.1400fd070
xor ecx, ecx
cmp eax, ecx
je 0x1400904c3
mov r8, r15
mov rdx, rdi
mov rcx, rsi
mov dword [rsp + 0x68], ebp
call fcn.1400f93b0
lea rdx, [rdi + 0x38]
lea rcx, [rsi + 0x38]
mov r8d, 0x24
call qword [sym.imp.SHLWAPI.dll_StrCmpNW]
xor r9d, r9d
cmp eax, r9d
je 0x14009057d
lea r8d, [r9 + 0x24]
lea rdx, [rdi + 0x38]
lea rcx, [rsi + 0x38]
mov eax, ebp
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
mov esi, ebp
xor r9d, r9d
jmp 0x140090581
cmp edx, r10d
je 0x1400903ae
movsxd r15, r10d
lea rcx, [rsp + 0x3b0]
mov r8d, 0x80
shl r15, 7
add r15, rsi
mov rdx, r15
call fcn.1400f93b0
movsxd r11, dword [rsp + 0x70]
mov rcx, r15
shl r11, 7
mov r15d, 0x80
add rsi, r11
mov r8, r15
mov rdx, rsi
call fcn.1400f93b0
lea rdx, [rsp + 0x3b0]
mov rcx, rsi
mov r8, r15
call fcn.1400f93b0
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x70]
cmp eax, ecx
cmovl eax, ecx
mov ecx, dword [rsp + 0x90]
xor r9d, r9d
mov dword [rsp + 0x48], eax
jmp 0x1400903b8
mov esi, dword [rsp + 0x68]
mov al, byte [rsp + 0x4f]
mov r15d, dword [rsp + 0xa0]
mov r10d, 0x10
add r14d, ebp
cmp dword [rsp + 0x78], r9d
je 0x1400905b4
cmp al, r9b
jne 0x1400905b4
mov r8, r10
xor edx, edx
mov rcx, rdi
mov esi, ebp
call fcn.1400f8760
xor r9d, r9d
cmp esi, r9d
je 0x1400905c4
lea eax, [r15 + 1]
mov dword [rsp + 0xc8], eax
add r15d, ebp
add rdi, rbx
cmp r15d, r12d
mov dword [rsp + 0xa0], r15d
jle 0x14009043e
mov rbx, qword [rsp + 0x140]
mov rbp, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x248]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b0]
mov esi, dword [rsp + 0xe8]
mov r15d, dword [rsp + 0xc8]
lea rdi, [0x140133078]
jmp 0x14009061e
mov r15d, r9d
mov rcx, qword [rsp + 0xf0]
lea rdx, str.EFI_PART
mov r8d, 8
call fcn.14001d04c
mov rcx, rbp
call fcn.14005df28
mov rax, qword [rsp + 0xf0]
xor ecx, ecx
cmp qword [rax + 0x38], rcx
je 0x14009065a
or rcx, 0xffffffffffffffff
cmp qword [rax + 0x38], rcx
jne 0x140090666
lea rcx, [rax - 0x174]
call fcn.14005df28
mov eax, dword [rsp + 0x48]
cmp r15d, eax
jg 0x140090673
lea r15d, [rax + 1]
cmp byte [rsp + 0x90], 1
mov rcx, qword [rsp + 0x200]
cmove r15d, esi
shl esi, 7
xor r8d, r8d
mov edx, esi
call fcn.1400dc14c
mov rcx, qword [rsp + 0xf0]
cmp dword [rcx + 0xc], 0x20000
mov dword [rcx + 0x58], eax
ja 0x14008eefd
mov esi, dword [rcx + 0xc]
xor eax, eax
xor r8d, r8d
mov rdx, rsi
mov dword [rcx + 0x10], eax
call fcn.1400dc14c
mov rcx, qword [rsp + 0xf0]
mov r8, rsi
mov dword [rcx + 0x10], eax
mov rdx, rcx
mov rcx, qword [rsp + 0x118]
call fcn.14001d04c
mov rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0xf0]
mov r11, qword [rax + 0x20]
xor r8d, r8d
mov rdx, rsi
mov qword [rcx + 0x18], r11
mov rax, qword [rax + 0x18]
mov qword [rcx + 0x20], rax
xor eax, eax
mov dword [rcx + 0x10], eax
call fcn.1400dc14c
mov edx, dword [rsp + 0xe0]
mov rcx, qword [rsp + 0x118]
inc edx
mov dword [rcx + 0x10], eax
lea rcx, [rsp + 0x188]
imul edx, dword [rsp + 0x60]
call fcn.1400613a8
mov ecx, dword [rsp + 0x60]
mov rsi, qword [rsp + 0x188]
shl r15d, 7
xor edx, edx
xor r8d, r8d
lea eax, [r15 + rcx - 1]
div ecx
mov rdx, qword [rsp + 0x178]
mov r15d, eax
imul r15d, ecx
mov rcx, rbx
call fcn.14005a4b0
mov r8d, dword [rsp + 0x60]
xor eax, eax
lea r9, [rsp + 0x33c]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8, qword [rsp + 0x168]
mov rdx, rbp
mov rcx, rsi
call fcn.1400fd070
xor ecx, ecx
cmp eax, ecx
je 0x1400907d2
mov rdx, qword [rsp + 0x178]
xor r8d, r8d
mov rcx, rbx
call fcn.14005a4b0
mov r8d, dword [rsp + 0x60]
xor eax, eax
lea r9, [rsp + 0x338]
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ebp, dword [rsp + 0x60]
xor edx, edx
mov eax, r15d
div ebp
mov rdx, qword [rsp + 0x128]
xor r8d, r8d
imul rdx, qword [rsp + 0x168]
add rdx, qword [rsp + 0x178]
mov rcx, rbx
lea r15d, [rax + 1]
call fcn.14005a4b0
mov r8d, r15d
xor eax, eax
lea r9, [rsp + 0x330]
mov rdx, rsi
mov rcx, rbx
imul r8d, ebp
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
cmp r15d, eax
mov ebp, eax
jle 0x14009096f
cmp eax, r15d
mov r14, qword [rsp + 0xf0]
mov r12, qword [rsp + 0x128]
mov rdi, rsi
mov esi, dword [rsp + 0xe0]
lea r13d, [rax + 1]
jge 0x140090893
mov rsi, qword [rsp + 0x168]
xor ebx, ebx
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call fcn.1400fd070
cmp eax, ebx
jne 0x140090884
add ebp, r13d
add r12, r13
add r14, rsi
add rdi, rsi
cmp ebp, r15d
jl 0x140090861
mov rbx, qword [rsp + 0x140]
mov esi, dword [rsp + 0xe0]
cmp ebp, esi
jge 0x140090948
cmp ebp, r15d
mov rax, r12
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x208], rax
jge 0x1400908f7
mov rsi, qword [rsp + 0x168]
xor ebx, ebx
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call fcn.1400fd070
cmp eax, ebx
je 0x1400908e0
add ebp, r13d
add r12, r13
add r14, rsi
add rdi, rsi
cmp ebp, r15d
jl 0x1400908bd
mov rbx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x208]
mov esi, dword [rsp + 0xe0]
imul rax, qword [rsp + 0x168]
xor r8d, r8d
mov rcx, rbx
add rax, qword [rsp + 0x178]
mov rdx, rax
call fcn.14005a4b0
mov rax, qword [rsp + 0x128]
xor ecx, ecx
mov r8d, r14d
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x324]
mov rdx, rax
mov rcx, rbx
sub r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp ebp, r15d
jl 0x140090857
mov rsi, qword [rsp + 0x188]
mov r12, qword [rsp + 0x248]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b0]
lea rdi, [0x140133078]
movsxd rbp, dword [rsp + 0xe0]
mov r15, qword [rsp + 0x150]
xor r8d, r8d
sub r15, rbp
mov rcx, rbx
mov rdx, r15
imul rdx, qword [rsp + 0x168]
add rdx, qword [rsp + 0x178]
call fcn.14005a4b0
mov r8d, ebp
xor eax, eax
lea r9, [rsp + 0x334]
mov rdx, rsi
mov rcx, rbx
imul r8d, dword [rsp + 0x60]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [rsp + 0xe0]
xor ecx, ecx
cmp eax, ecx
mov ebp, ecx
jle 0x140090ae9
mov r13, qword [rsp + 0x200]
mov rdi, rsi
mov rsi, qword [rsp + 0x168]
lea r14d, [rcx + 1]
cmp ebp, eax
jge 0x140090ac2
mov r12d, dword [rsp + 0xe0]
xor ebx, ebx
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call fcn.1400fd070
cmp eax, ebx
jne 0x140090a24
add ebp, r14d
add r15, r14
add r13, rsi
add rdi, rsi
cmp ebp, r12d
jl 0x140090a01
cmp ebp, r12d
mov rbx, qword [rsp + 0x140]
jge 0x140090ac2
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x208], r15
xor ebx, ebx
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call fcn.1400fd070
cmp eax, ebx
je 0x140090a6a
add ebp, r14d
add r15, r14
add r13, rsi
add rdi, rsi
cmp ebp, r12d
jl 0x140090a47
mov rdx, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x140]
xor r8d, r8d
mov rcx, rbx
imul rdx, rsi
add rdx, qword [rsp + 0x178]
call fcn.14005a4b0
mov rax, qword [rsp + 0x128]
xor ecx, ecx
mov r8d, r13d
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x32c]
mov rdx, rax
mov rcx, rbx
sub r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, r12d
jmp 0x1400909ef
mov rsi, qword [rsp + 0x188]
mov r12, qword [rsp + 0x248]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b0]
lea rdi, [0x140133078]
mov rcx, qword [rsp + 0x178]
mov rbp, qword [rsp + 0x150]
mov r15, qword [rsp + 0x168]
imul rbp, r15
add rbp, rcx
xor r8d, r8d
mov rcx, rbx
mov rdx, rbp
call fcn.14005a4b0
mov r8d, dword [rsp + 0x60]
xor eax, eax
lea r9, [rsp + 0x328]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8, r15
mov r15, qword [rsp + 0x118]
mov rcx, rsi
mov rdx, r15
call fcn.1400fd070
xor ecx, ecx
cmp eax, ecx
je 0x140090b82
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a4b0
mov r8d, dword [rsp + 0x60]
xor ebp, ebp
lea r9, [rsp + 0x320]
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140090b84
xor ebp, ebp
mov sil, byte [rsp + 0x40]
lea rcx, [rsp + 0x188]
mov al, sil
or al, byte [rsp + 0x41]
or al, byte [rsp + 0x4e]
je 0x14009123a
call fcn.140058efc
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
jmp 0x14008e6da
mov ecx, dword [rsp + 0x110]
test r8b, dl
jne 0x140090bea
cmp dl, r11b
je 0x140090bd7
cmp ecx, 0xb
je 0x140090bea
test r8b, sil
jne 0x140090bea
cmp sil, r11b
je 0x140090c65
cmp ecx, 0xb
jne 0x140090c65
cmp byte [rsp + 0x1f8], r11b
jg 0x140090cb0
test byte [0x1401326c5], r8b
jne 0x140090c20
test byte [rsp + 0x4a8], r8b
jne 0x140090c20
mov edx, r15d
mov ecx, eax
call fcn.140074e74
mov rax, qword [rsp + 0x170]
xor r11d, r11d
or byte [rsp + 0x4a8], 2
test byte [0x1401326c5], 0x10
jne 0x140090c51
mov qword [rsp + 0x28], r11
lea rcx, [rsp + 0x4a8]
or r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, eax
mov qword [rsp + 0x20], r15
call fcn.14005df60
or byte [rsp + 0x4a8], r15b
mov r10b, byte [rsp + 0x42]
xor r11d, r11d
lea r8d, [r11 + 0x20]
cmp byte [rsp + 0x1f8], r11b
jg 0x140090cb0
cmp byte [rsp + 0x4e], r11b
jne 0x140090c87
cmp r10b, r15b
je 0x140090c87
cmp r10b, r8b
je 0x140090c87
cmp byte [rsp + 0x41], r11b
je 0x140090cb0
mov rcx, rbx
call fcn.14005dec8
mov r10b, byte [rsp + 0x42]
cmp r10b, r15b
je 0x140090ca3
mov ecx, 0x20
cmp r10b, cl
jne 0x140090cad
cdqe
mov qword [rsp + 0x1d8], rax
xor r11d, r11d
cmp rbx, r11
je 0x140090ccf
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140090ccf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10b, byte [rsp + 0x42]
xor r11d, r11d
mov cl, byte [rsp + 0x40]
mov eax, 0x20
mov rbx, r11
mov esi, r11d
mov qword [rsp + 0x140], rbx
test al, cl
jne 0x140090d0b
mov eax, dword [rsp + 0x110]
cmp cl, r11b
je 0x140090cfb
cmp eax, 0xb
je 0x140090d0b
mov r9d, 0x10
test r9b, r10b
je 0x140090d54
cmp eax, 0xc
je 0x140090d54
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor r11d, r11d
cmp byte [rsp + 0x1f8], r11b
jg 0x140090d45
mov rcx, qword [rsp + 0x180]
lea eax, [r11 + 0x18]
mov edx, r15d
cmp byte [rsp + 0x42], al
cmove edx, eax
call fcn.140073ecc
xor r11d, r11d
mov esi, eax
mov cl, byte [rsp + 0x40]
mov r10b, byte [rsp + 0x42]
mov r9d, 0x10
mov al, byte [rsp + 0x4d]
cmp al, r11b
je 0x14009120b
cmp ebp, r11d
je 0x14009120b
mov r10, qword [rsp + 0x170]
mov dl, byte [rsp + 0x44]
jmp 0x14008dfce
cmp r10, r11
jl 0x14009196a
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x7c], r11b
je 0x140090d98
cmp eax, r11d
jl 0x14009196a
movsx r9d, byte [rsp + 0x6c]
mov cl, byte [rsp + 0x81]
movsxd r8, eax
or r9d, dword [rsp + 0xa8]
mov byte [rsp + 0x30], cl
mov qword [rsp + 0x28], r11
lea rcx, [rsp + 0x88]
mov rdx, r10
mov qword [rsp + 0x20], r11
call fcn.14008ab94
xor r11d, r11d
cmp rax, r11
mov rsi, r11
setle sil
jmp 0x1400919ac
cmp dword [rsp + 0xc4], r11d
jge 0x140090e62
cmp word [r12], r11w
je 0x140090e62
mov edx, 0x3a
mov qword [rsp + 0x170], r12
cmp dx, word [r12 + 2]
jne 0x140090e62
cmp word [r12 + 4], r11w
jne 0x140090e62
lea eax, [rdx + 0x22]
lea ecx, [rdx - 0xc]
mov word [rsp + 0x340], ax
mov word [rsp + 0x342], ax
mov word [rsp + 0x346], ax
mov word [rsp + 0x344], cx
movzx eax, word [r12]
mov word [rsp + 0x34a], dx
mov word [rsp + 0x348], ax
lea rax, [rsp + 0x340]
mov word [rsp + 0x34c], r11w
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
cmp rax, r11
jl 0x14009196a
cmp byte [rsp + 0x7c], r11b
je 0x140090e85
cmp dword [rsp + 0x48], r11d
jl 0x14009196a
mov rbx, qword [rsp + 0x490]
mov r9d, dword [rsp + 0x120]
lea rdx, [rsp + 0x88]
mov rcx, rbx
mov r8, rax
call fcn.14007475c
xor r11d, r11d
movsxd rsi, eax
jmp 0x1400919b4
lea rcx, [rsp + 0x58]
call fcn.140058efc
jmp 0x140092118
lea rcx, [rsp + 0x160]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
jmp 0x1400924ec
lea rcx, [rsp + 0x160]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
jmp 0x140091fe8
lea rcx, [rsp + 0xd8]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14009122a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14009122a
movsx esi, r11b
lea rcx, [rsp + 0xf8]
and esi, 0x10
shr esi, 4
call fcn.140058efc
lea rcx, [rsp + 0xd8]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
jmp 0x140092548
lea rcx, [rsp + 0xf8]
call fcn.140058efc
jmp 0x14008ed20
lea rcx, [rsp + 0x230]
call fcn.140058efc
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
jmp 0x140090ee6
lea rcx, [rsp + 0x230]
call fcn.140058efc
jmp 0x14008eefd
lea rcx, [rsp + 0xf8]
call fcn.140058efc
jmp 0x140090efa
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14009100c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x140091f9a
lea rcx, [rsp + 0x88]
mov edx, 0x28
call fcn.140061720
mov r8d, dword [rsp + 0x48]
mov rsi, qword [rsp + 0x88]
xor r9d, r9d
lea r13, [0x140112598]
cmp r8d, r9d
mov ecx, r9d
jl 0x14009105d
lea edx, [r9 + 4]
lea eax, [r8 + 1]
mov ecx, r8d
cmp eax, edx
cmovl edx, eax
mov qword [rsp + 0x138], rdx
movsxd r15, dword [rsp + 0x138]
movsxd rdx, ecx
cmp rdx, r15
jge 0x1400911e1
mov ebx, dword [rsp + 0xa8]
lea edi, [rcx + 1]
mov rcx, qword [rsp + 0x1e8]
mov rax, rdx
mov r14, r13
add rax, rax
sub r15, rdx
lea r12, [rcx + rax*8 + 0x1c6]
mov eax, 0x10
cmp r8d, r9d
mov bpl, byte [r12 - 4]
jge 0x1400910f7
mov eax, 5
cmp bpl, al
je 0x1400910b9
mov r9, r13
cmp bpl, 0xf
jne 0x1400910c0
lea r9, [0x14011d870]
neg bpl
lea rdx, str._s_s_d
mov r8, r14
sbb eax, eax
mov rcx, rsi
and eax, 2
dec eax
imul eax, edi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfW]
lea r14, [0x140113428]
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
jmp 0x1400911a6
cmp bpl, r9b
je 0x1400911b3
lea rdx, str._s_d
mov r9d, edi
mov r8, r14
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [0x14011d848]
test bl, 1
movsxd rcx, eax
lea rax, str._0x_X
movzx r8d, bpl
lea rsi, [rsi + rcx*2]
cmovne rdx, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
movzx r8d, byte [r12 - 8]
lea rdx, [0x14011d848]
movsxd rcx, eax
shr r8d, 7
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, dword [r12]
lea r8, str.__I64u
movsxd rcx, eax
shl rdx, 9
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call fcn.1400dde68
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [r12 + 4]
lea r8, str.__I64u
movsxd rcx, eax
shl rdx, 9
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call fcn.1400dde68
mov r8d, dword [rsp + 0x48]
mov eax, 0x10
xor r9d, r9d
inc edi
add r12, rax
sub r15, 1
jne 0x14009109c
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x140]
mov r14, qword [rsp + 0x1b0]
lea rdi, [0x140133078]
mov eax, dword [rsp + 0x240]
mov rbp, qword [rsp + 0x490]
cmp eax, r9d
jle 0x1400914c3
mov qword [rsp + 0x88], r9
mov dword [rsp + 0x20], r9d
jmp 0x140091482
movsxd rax, esi
mov rsi, qword [rsp + 0x1d8]
cmp r10b, r9b
cmove rsi, rax
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor eax, eax
cmp rdi, rax
je 0x14009259c
jmp 0x14008dfaa
call fcn.140058efc
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
jmp 0x140090eca
lea eax, [r15 + r15*4]
lea rcx, [rsp + 0x88]
lea edx, [rax + rax]
call fcn.140061720
mov eax, dword [rsp + 0x48]
mov rsi, qword [rsp + 0x88]
xor edx, edx
lea r13, [0x140112598]
cmp eax, edx
mov ecx, edx
jl 0x140091293
mov ecx, eax
inc eax
cmp r15d, eax
cmovg r15d, eax
movsxd rax, ecx
movsxd r15, r15d
cmp rax, r15
jge 0x140091463
mov r14, qword [rsp + 0x200]
movsxd rbx, dword [rsp + 0x48]
mov r12, rax
shl r12, 7
lea edi, [rcx + 1]
add r12, r14
sub r15, rax
mov eax, 0x80
cmp qword [r12], rdx
jne 0x1400912d5
cmp qword [r12 + 8], rdx
je 0x140091435
cmp ebx, edx
mov r9d, edi
mov r8, r13
mov rcx, rsi
jge 0x140091302
lea rdx, str._s_d
call qword [sym.imp.USER32.dll_wsprintfW]
lea r13, [0x140113428]
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
jmp 0x14009142e
lea rdx, [0x14011d818]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rbp, rbx
xor r8d, r8d
movsxd rcx, eax
shl rbp, 7
lea rsi, [rsi + rcx*2]
add rbp, r14
mov rcx, rsi
mov rdx, rbp
call fcn.14005d988
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, str._GPT
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov rdx, qword [rbp + 0x20]
lea rcx, [rsi + 0xa]
shl rdx, 9
call fcn.1400dde98
lea rcx, [rsi + 0xa]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2 + 0xa]
mov word [rsi], ax
mov rdx, qword [rbp + 0x28]
lea rcx, [rsi + 2]
sub rdx, qword [rbp + 0x20]
inc rdx
shl rdx, 9
call fcn.1400dde98
lea rcx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, str._016I64X
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2 + 2]
mov word [rsi], ax
mov rdx, qword [rbp + 0x30]
lea rcx, [rsi + 2]
call fcn.1400dde68
lea rcx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, [rbp + 0x10]
xor r8d, r8d
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2 + 2]
mov word [rsi], ax
add rsi, 2
mov rcx, rsi
call fcn.14005d988
mov eax, 0x10
test byte [rsp + 0xa8], al
je 0x14009142e
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, [0x140112f8c]
mov r8d, edi
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2]
lea rcx, [rsi + 2]
mov word [rsi], ax
call qword [sym.imp.USER32.dll_wsprintfW]
movsxd rcx, eax
lea rsi, [rsi + rcx*2 + 2]
xor edx, edx
mov eax, 0x80
inc edi
add r12, rax
sub r15, 1
jne 0x1400912c4
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x140]
mov r14, qword [rsp + 0x1b0]
lea rdi, [0x140133078]
mov eax, dword [rsp + 0x240]
mov rbp, qword [rsp + 0x490]
cmp eax, edx
jle 0x1400914c3
mov qword [rsp + 0x88], rdx
mov dword [rsp + 0x20], edx
dec eax
lea r9, [rsp + 0x88]
lea rdx, [rsp + 0xb0]
mov r8, rsi
mov rcx, rbp
mov qword [rsp + 0x208], rsi
mov dword [rsp + 0xb0], eax
call fcn.1400651a8
lea rcx, [rsp + 0x208]
call fcn.140058efc
mov rsi, qword [rsp + 0x88]
mov r8, rsi
mov rdx, r14
mov rcx, rbp
call fcn.14006093c
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140091514
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
cmp rdi, rbx
je 0x140091524
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, rbx
jmp 0x14009259c
lea rcx, [rsp + 0xf8]
call fcn.140058efc
lea rcx, [rsp + 0xd8]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14009156f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14009212a
lea rcx, [rsp + 0xd8]
call fcn.140058efc
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092589
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140092589
lea rcx, [rsp + 0x58]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008e006
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008e006
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x58]
mov esi, eax
call fcn.140058efc
jmp 0x14009121d
movsxd rbx, dword [rsp + 0xc4]
cmp ebx, r11d
jge 0x1400916c8
cmp word [r12], r11w
je 0x1400916bf
mov ebp, 0x3a
cmp bp, word [r12 + 2]
jne 0x1400916af
lea esi, [rbp + 0x22]
cmp si, word [r12 + 4]
jne 0x140091645
cmp word [r12 + 6], r11w
jne 0x140091645
mov word [r12 + 4], r11w
cmp word [r12 + 4], r11w
jne 0x1400916a8
lea rcx, [rsp + 0x58]
mov edx, 9
call fcn.140061720
mov rax, qword [rsp + 0x58]
mov ecx, 0x2e
mov word [rax], si
mov rax, qword [rsp + 0x58]
xor r11d, r11d
mov word [rax + 2], si
mov rax, qword [rsp + 0x58]
mov word [rax + 4], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 6], si
mov rax, qword [rsp + 0x58]
movzx ecx, word [r12]
mov word [rax + 8], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 0xa], bp
mov rax, qword [rsp + 0x58]
mov word [rax + 0xc], r11w
cmp qword [rsp + 0x58], r11
jne 0x1400916bf
lea rcx, [rsp + 0x58]
mov rdx, r12
call fcn.14006d55c
xor r11d, r11d
or r8, 0xffffffffffffffff
mov eax, r8d
jmp 0x1400916d0
mov eax, dword [rsp + 0x48]
or r8, 0xffffffffffffffff
mov r9, qword [rsp + 0x58]
cmp eax, r11d
lea rcx, [rsp + 0x88]
cmovle eax, r8d
mov rdx, rbx
movsxd r8, eax
mov eax, dword [rsp + 0xa8]
shl eax, 0x10
and r8, 0xfffffffff000ffff
or r8, rax
call fcn.1400069ec
mov rsi, rax
lea rcx, [rsp + 0x58]
call fcn.140058efc
xor r11d, r11d
jmp 0x1400919ac
lea rcx, [rsp + 0x88]
mov edx, 0x1000
call fcn.140061720
movsxd rbp, dword [rsp + 0xc4]
xor r12d, r12d
cmp ebp, r12d
jl 0x1400917ef
lea rcx, [rsp + 0x138]
mov edx, 0x3b60
call fcn.1400613a8
mov rbx, qword [rsp + 0x138]
xor edx, edx
lea rsi, [rbx + 0x200]
mov r8d, 0x3960
mov rcx, rsi
call fcn.1400f8760
mov r8d, dword [rsp + 0x120]
mov rdx, rbx
mov rcx, rsi
call fcn.140073eec
mov ebx, r12d
mov rcx, r12
lea rax, [rsi + 4]
cmp dword [rax], ebp
je 0x1400917a4
add rcx, r15
add ebx, r15d
add rax, 0x220
cmp rcx, 0x1a
jle 0x14009178c
jmp 0x1400917e0
lea rcx, [rsp + 0x88]
mov edx, 0x64
call fcn.140061720
mov rcx, qword [rsp + 0x88]
movsxd r11, ebx
imul r11, r11, 0x220
movzx r9d, byte [r11 + rsi + 0x10]
mov r8d, dword [r11 + rsi + 4]
lea rdx, str._d___c_
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x138]
call fcn.140058efc
jmp 0x140091823
cmp byte [rsp + 0x7f], r12b
jne 0x140091823
cmp byte [rsp + 0xa4], sil
mov rdx, qword [rsp + 0x88]
lea rax, [0x1401147a0]
lea r9, [0x1401147b0]
mov rcx, rbp
cmove r9, rax
xor r8d, r8d
call fcn.14007397c
mov rsi, r12
jmp 0x140091706
movzx ebx, word [r12]
mov r13d, dword [rsp + 0x120]
and ebx, 0xffffffdf
cmp r13d, r11d
lea esi, [rbx - 0x41]
jle 0x1400918db
lea rcx, [rsp + 0x138]
mov edx, 0x3b60
call fcn.1400613a8
mov rdx, qword [rsp + 0x138]
mov r8d, ebx
lea rbp, [rdx + 0x200]
shl r8d, 0x10
mov rcx, rbp
or r8d, r13d
call fcn.140073eec
movsxd rsi, esi
xor r12d, r12d
imul rsi, rsi, 0x220
cmp dword [rsi + rbp + 8], r12d
jle 0x1400918c2
lea edx, [r12 + 0x64]
lea rcx, [rsp + 0x88]
call fcn.140061720
mov r8d, dword [rsi + rbp + 4]
mov rcx, qword [rsp + 0x88]
lea rdx, str._d__c:
mov r9d, ebx
call qword [sym.imp.USER32.dll_wsprintfW]
mov rsi, r12
jmp 0x1400918c9
mov rsi, 0xffffffff80070057
lea rcx, [rsp + 0x138]
call fcn.140058efc
jmp 0x140091706
mov rax, qword [rsp + 0x88]
movzx ecx, word [r12]
mov word [rax], cx
mov eax, 0x5c
cmp ax, word [r12]
mov rax, qword [rsp + 0x88]
cmove r10, r12
cmp word [rax], r11w
je 0x140091952
mov r9d, dword [rsp + 0xa8]
mov cl, byte [rsp + 0x81]
movsxd r8, dword [rsp + 0x48]
mov byte [rsp + 0x30], cl
and r9d, 0xfffffffd
mov qword [rsp + 0x28], r11
lea rcx, [rsp + 0x88]
mov rdx, r10
or r9d, 0xc
mov qword [rsp + 0x20], r11
call fcn.14008ab94
xor ecx, ecx
cmp rax, rcx
mov rsi, rcx
setle sil
jmp 0x140091706
mov rsi, 0xffffffff80070057
jmp 0x140091706
cmp byte [rsp + 0x7f], r11b
je 0x140091973
cmp r10, r11
jge 0x140091973
mov rsi, 0xffffffff80070057
jmp 0x1400919ac
neg byte [rsp + 0x6c]
lea rcx, [rsp + 0x88]
sbb edx, edx
and edx, 0x200000
or edx, r10d
or edx, dword [rsp + 0x1fc]
call fcn.140089c78
mov rax, qword [rsp + 0x88]
xor r11d, r11d
cmp word [rax], r11w
mov rsi, r11
sete sil
mov rbx, qword [rsp + 0x490]
mov eax, dword [rsp + 0x240]
cmp eax, r11d
jle 0x140091a0b
mov r8, qword [rsp + 0x88]
dec eax
lea r9, [rsp + 0x88]
lea rdx, [rsp + 0xb0]
mov rcx, rbx
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x208], r8
mov dword [rsp + 0xb0], eax
mov dword [rsp + 0x20], r11d
call fcn.1400651a8
lea rcx, [rsp + 0x208]
call fcn.140058efc
mov r8, qword [rsp + 0x88]
mov rdx, r14
mov rcx, rbx
call fcn.14006093c
jmp 0x14009121d
lea rcx, [rsp + 0x88]
mov edx, 0x103c
call fcn.140061720
mov rsi, qword [rsp + 0x88]
xor r15d, r15d
add rsi, 0x2000
lea rbx, [0x140114790]
cmp word [r12], r15w
je 0x140091aa5
lea eax, [r15 + 0x3a]
cmp ax, word [r12 + 2]
jne 0x140091aa5
movzx r8d, word [r12]
lea rdx, str.._c:
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsi + 8]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 2
jne 0x140091a9a
mov r13d, dword [rsp + 0x120]
cmp r13d, 0x10
jne 0x140091b05
lea rbx, [0x1401147b0]
mov ecx, 5
cmp eax, ecx
jne 0x140091b05
jmp 0x140091ad2
mov eax, dword [rsp + 0xc4]
cmp eax, r15d
jl 0x140091b05
mov r13d, dword [rsp + 0x120]
cmp r13d, 8
jne 0x140091adb
lea rdx, str..CDROM_d
mov r8d, eax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbx, [0x1401147a0]
jmp 0x140091b05
cmp r13d, 0x10
jne 0x140091af2
mov esi, eax
lea rbx, [0x1401147b0]
and esi, 0xfff
jmp 0x140091b05
lea rdx, str..PhysicalDrive_d
mov r8d, eax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
movzx r8d, word [rsp + 0x1a0]
mov rdx, qword [rsp + 0x88]
mov r9, rbx
or r8d, 0x20
mov rcx, rsi
call fcn.14007397c
mov r8, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x490]
mov rdx, r14
call fcn.14006093c
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
cmp rdi, r15
jmp 0x14009258e
movsxd rax, dword [rsp + 0x48]
cmp eax, r11d
jle 0x140092118
movsxd rcx, dword [rsp + 0xc4]
cmp ecx, r11d
jge 0x140091b78
cmp word [r13], r11w
je 0x140092118
or r14, 0xffffffffffffffff
cmp ecx, r11d
mov rsi, r11
mov dword [rsp + 0xb0], r14d
mov qword [rsp + 0x138], r11
jge 0x140091b9e
cmp r11b, r11b
jne 0x140091bf7
jmp 0x140092118
mov r9d, dword [rsp + 0xa8]
mov rdx, rcx
mov cl, byte [rsp + 0x81]
mov byte [rsp + 0x30], cl
mov r8, rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x138]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rax
call fcn.14008ab94
xor r11d, r11d
cmp dword [rsp + 0xb0], r11d
jle 0x14009257c
mov rsi, qword [rsp + 0x138]
mov dword [rsp + 0x74], 0x200
mov qword [rsp + 0x1c0], r11
mov qword [rsp + 0x1c8], r11
mov qword [rsp + 0x1d0], r11
cmp word [rbp], r11w
je 0x140091df9
lea rcx, [0x14011d7e0]
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
jne 0x140091df9
lea rcx, [0x14011870c]
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
jne 0x140091df9
lea rcx, [0x14011d7dc]
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
je 0x140091c70
mov eax, 8
jmp 0x140091dfe
lea rcx, str.nt6fat
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
jne 0x140091df2
lea rcx, str.winfat
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
jne 0x140091df2
lea rcx, [0x14011d7c8]
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
je 0x140091cbe
mov eax, 6
jmp 0x140091dfe
lea rcx, str.nt5fat
mov rdx, rbp
call fcn.14005a600
cmp al, r11b
je 0x140091cdc
mov eax, 5
jmp 0x140091dfe
mov r12d, 0x2a
mov rbx, r14
mov dword [rsp + 0x74], r11d
mov qword [rsp + 0x198], rbx
cmp r12w, word [rbp]
jne 0x140091d35
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x138]
add rbp, 2
mov qword [rsp + 0x138], rbp
call fcn.140068500
mov rbp, qword [rsp + 0x138]
mov rbx, qword [rsp + 0x198]
cmp r12w, word [rbp]
jne 0x140091d35
add rbp, 2
mov eax, 0x23
cmp ax, word [rbp]
jne 0x140091d95
lea rcx, [rsp + 0x138]
mov rdx, rbp
call fcn.14006d444
mov rdx, qword [rsp + 0x138]
lea r9, [rsp + 0x1c0]
lea r8, str.EXEDATA
xor r13d, r13d
xor ecx, ecx
mov qword [rsp + 0x20], r13
call fcn.14001e2c8
lea rcx, [rsp + 0x138]
mov r12, rax
call fcn.140058efc
mov r11d, dword [rsp + 0x1c8]
mov dword [rsp + 0x74], r11d
jmp 0x140091db7
lea r8, [rsp + 0x74]
xor edx, edx
mov rcx, rbp
call fcn.140017478
mov r11d, dword [rsp + 0x74]
xor r13d, r13d
mov r12, rax
mov qword [rsp + 0x1c0], rax
cmp rbx, r13
jl 0x140091dcb
mov eax, r11d
cmp rax, rbx
cmovg r11d, ebx
mov dword [rsp + 0x74], r11d
cmp r12, r13
jne 0x140091e37
lea rcx, [rsp + 0x1c0]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
cmp rdi, r13
jmp 0x14009258e
mov eax, 7
jmp 0x140091dfe
mov eax, 9
lea r9, [rsp + 0x1c0]
lea r8, [0x140113440]
mov edx, eax
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.14001e2c8
mov r11d, dword [rsp + 0x74]
xor r13d, r13d
cmp r11d, r13d
mov r12, rax
cmovne r11d, dword [rsp + 0x1c8]
mov dword [rsp + 0x74], r11d
cmp r11d, r13d
jbe 0x140091dd0
cmp r12, r13
je 0x140091dd0
mov rdx, qword [rsp + 0x180]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r13
call fcn.1400037bc
mov rbx, qword [rsp + 0x140]
cmp rbx, r13
je 0x140091dd0
mov rbp, qword [rsp + 0x1f0]
xor r8d, r8d
mov rcx, rbx
shl rbp, 9
add rbp, rsi
mov rdx, rbp
mov qword [rsp + 0x1f0], rbp
call fcn.14005a4b0
cmp rax, rbp
je 0x140091ee8
lea rcx, [rsp + 0x1c0]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
cmp rbx, r14
je 0x140091dea
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140091dea
mov esi, 0x200
mov rcx, rbx
mov edx, esi
call fcn.14005d66c
mov ebp, esi
lea rcx, [rsp + 0x118]
cmp eax, esi
cmovge ebp, eax
mov eax, dword [rsp + 0x74]
lea esi, [rbp - 1]
lea r14d, [rsi + rax]
mov eax, esi
not eax
and r14d, eax
lea edx, [rbp + r14*2]
call fcn.1400613a8
mov r13d, ebp
not esi
add r13, qword [rsp + 0x118]
mov eax, esi
movsxd r15, r14d
and r13, rax
lea r9, [rsp + 0xb8]
xor esi, esi
lea rbp, [r13 + r15]
mov r8d, r14d
mov rcx, rbx
mov rdx, rbp
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, esi
jne 0x140091fa5
lea rcx, [rsp + 0x118]
call fcn.140058efc
lea rcx, [rsp + 0x1c0]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140091f97
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x14008dea1
jmp 0x14008de98
mov r8, r15
mov rdx, rbp
mov rcx, r13
call fcn.14001d04c
mov rsi, qword [rsp + 0x1f0]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.14005a4b0
cmp rax, rsi
je 0x14009200e
lea rcx, [rsp + 0x118]
call fcn.140058efc
lea rcx, [rsp + 0x1c0]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092007
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x140091f9a
mov esi, dword [rsp + 0x74]
mov r8d, 3
mov rdx, r12
mov rcx, rbp
call fcn.14001d04c
mov eax, 0x1fe
lea rdx, [r12 + 0x1e]
cmp esi, eax
lea rcx, [rbp + 0x1e]
cmovg esi, eax
lea eax, [rsi - 0x1e]
movsxd r8, eax
call fcn.14001d04c
mov byte [rbp + 0x1fe], 0x55
mov byte [rbp + 0x1ff], 0xaa
mov eax, dword [rsp + 0x74]
cmp eax, 0x200
jbe 0x140092076
add eax, 0xfffffe00
lea rdx, [r12 + 0x200]
lea rcx, [rbp + 0x200]
mov r8d, eax
call fcn.14001d04c
mov r8, r15
mov rdx, rbp
mov rcx, r13
call fcn.140058f2c
xor r12d, r12d
cmp eax, r12d
je 0x1400920b7
lea r9, [rsp + 0xb8]
mov r8d, r14d
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov dword [rsp + 0x258], eax
call fcn.14005dea0
cmp dword [rsp + 0x258], r12d
lea rcx, [rsp + 0x118]
mov rsi, r12
sete sil
call fcn.140058efc
lea rcx, [rsp + 0x1c0]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400920ff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r12
jmp 0x14009122f
cmp dword [rsp + 0xc4], r11d
jge 0x140092135
cmp word [r13], r11w
jne 0x140092135
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor eax, eax
cmp rdi, rax
je 0x14008dac2
jmp 0x14008dab9
mov r10d, 0x1b8
mov qword [rsp + 0x208], r11
mov qword [rsp + 0x210], r11
mov dword [rsp + 0x70], r10d
mov qword [rsp + 0x218], r11
cmp word [r9], r11w
je 0x1400922d0
lea rcx, [0x14011d7e0]
mov rdx, r9
call fcn.14005a600
cmp al, r11b
jne 0x1400922d0
lea rcx, [0x14011870c]
mov rdx, r9
call fcn.14005a600
cmp al, r11b
jne 0x1400922d0
lea rcx, [0x14011d7c8]
mov rdx, r9
call fcn.14005a600
cmp al, r11b
je 0x1400921ba
lea r13, [0x14012f380]
mov dword [rsp + 0x70], 0x190
jmp 0x1400922f6
lea rcx, [0x14011d7dc]
mov rdx, r9
call fcn.14005a600
cmp al, r11b
je 0x1400921e2
lea r13, [0x14012f510]
mov dword [rsp + 0x70], 0x180
jmp 0x1400922f6
or rax, 0xffffffffffffffff
mov dword [rsp + 0x70], r11d
lea esi, [rax + 0x2b]
mov rbx, rax
mov qword [rsp + 0x198], rax
cmp si, word [r9]
jne 0x14009223a
add r9, 2
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x258]
mov qword [rsp + 0x258], r9
call fcn.140068500
mov r9, qword [rsp + 0x258]
mov rbx, qword [rsp + 0x198]
cmp si, word [r9]
jne 0x14009223a
add r9, 2
mov eax, 0x23
cmp ax, word [r9]
jne 0x140092299
lea rcx, [rsp + 0x258]
mov rdx, r9
call fcn.14006d444
mov rdx, qword [rsp + 0x258]
xor eax, eax
lea r9, [rsp + 0x208]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.14001e2c8
lea rcx, [rsp + 0x258]
mov r13, rax
call fcn.140058efc
mov r11d, dword [rsp + 0x210]
mov dword [rsp + 0x70], r11d
jmp 0x1400922b8
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, r9
call fcn.140017478
mov r11d, dword [rsp + 0x70]
mov r13, rax
mov qword [rsp + 0x208], rax
xor ecx, ecx
cmp rbx, rcx
jl 0x1400922e1
mov eax, r11d
cmp rax, rbx
jle 0x1400922e1
mov r11d, ebx
mov dword [rsp + 0x70], ebx
jmp 0x1400922e1
lea r13, [0x14012f690]
mov r11d, r10d
mov dword [rsp + 0x70], r10d
xor ecx, ecx
cmp r11d, ecx
jbe 0x14009256f
xor r11d, r11d
cmp r13, r11
je 0x14009256f
mov rdx, qword [rsp + 0x180]
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r11
call fcn.1400037bc
mov rbx, qword [rsp + 0x140]
xor esi, esi
cmp rbx, rsi
jne 0x140092362
lea rcx, [rsp + 0x208]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
cmp rdi, rsi
jmp 0x14009258e
mov esi, 0x200
mov rcx, rbx
mov edx, esi
call fcn.14005d66c
mov r12d, esi
lea rcx, [rsp + 0x198]
cmp eax, esi
cmovge r12d, eax
mov eax, dword [rsp + 0x70]
lea ebp, [r12 - 1]
mov esi, r12d
lea r14d, [rbp + rax]
mov eax, ebp
not eax
and r14d, eax
cmp r14d, r12d
cmovge esi, r14d
lea edx, [r12 + rsi*2]
call fcn.1400613a8
add r12, qword [rsp + 0x198]
not ebp
mov eax, ebp
xor ebp, ebp
movsxd rsi, esi
and r12, rax
mov rax, rbp
add rsi, r12
cmp qword [rsp + 0x1f0], rbp
je 0x1400923e1
mov rdx, qword [rsp + 0x178]
xor r8d, r8d
mov rcx, rbx
call fcn.14005a4b0
cmp rax, qword [rsp + 0x178]
jne 0x140092520
lea r9, [rsp + 0xb8]
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, ebp
je 0x140092520
movsxd rbp, r14d
mov rdx, rsi
mov rcx, r12
mov r8, rbp
call fcn.14001d04c
mov r11d, dword [rsp + 0x70]
mov eax, 0x1b8
cmp r11d, eax
mov rdx, r13
mov rcx, rsi
cmovg r11d, eax
movsxd r8, r11d
call fcn.14001d04c
mov byte [rsi + 0x1fe], 0x55
mov byte [rsi + 0x1ff], 0xaa
mov eax, dword [rsp + 0x70]
cmp eax, 0x200
jbe 0x140092477
add eax, 0xfffffe00
lea rdx, [r13 + 0x200]
lea rcx, [rsi + 0x200]
mov r8d, eax
call fcn.14001d04c
mov r8, rbp
mov rdx, rsi
mov rcx, r12
call fcn.140058f2c
xor ebp, ebp
cmp eax, ebp
je 0x1400924d2
mov rbp, qword [rsp + 0x178]
xor r8d, r8d
mov rcx, rbx
mov rdx, rbp
call fcn.14005a4b0
cmp rax, rbp
jne 0x14009251e
lea r9, [rsp + 0xb8]
xor ebp, ebp
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.14005dea0
cmp esi, ebp
je 0x140092520
lea rcx, [rsp + 0x198]
call fcn.140058efc
lea rcx, [rsp + 0x208]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14009250b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
je 0x140092519
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, rbp
jmp 0x14009259c
xor ebp, ebp
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x198]
cmp eax, ebp
cmove eax, r15d
mov esi, eax
call fcn.140058efc
lea rcx, [rsp + 0x208]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092567
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x14009122f
lea rcx, [rsp + 0x208]
call fcn.140058efc
lea rcx, [rsp + 0x4a8]
call fcn.14005dfb4
xor eax, eax
cmp rdi, rax
je 0x140092599
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, r15
lea rcx, [rsp + 0x220]
call fcn.140058efc
lea rcx, [rsp + 0x1b0]
call fcn.140058efc
lea rcx, [rsp + 0x248]
call fcn.140058efc
lea rcx, [rsp + 0x2c0]
call fcn.140058efc
lea rcx, [rsp + 0x88]
call fcn.140058efc
lea r11, [rsp + 0x450]
mov rax, rsi
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret