Function at 0x1403e0880
Capabilities:
Read file on windows

Disassembly:
add byte [rax], al
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
push rbp
sub rsp, 0x118
mov rbx, rcx
mov qword [rsp + 0x90], r8
mov r15, rdx
xor r12d, r12d
xor r14b, r14b
xor r13d, r13d
cmp dword [rbx + 0x1e0], 0xfffffffc
je 0x1403e4804
and byte [rbx + 0x29d], 0xfe
test byte [rbx + 0x299], 0x10
je 0x1403e08de
mov rcx, rbx
call fcn.1403ab560
test eax, eax
jne 0x1403e268d
and byte [rbx + 0x299], 0xef
mov rax, qword [rbx + 0x108]
test byte [rbx + 0x292], 0x40
je 0x1403e093f
test rax, rax
je 0x1403e0958
cmp byte [rax + 0x30], 0
je 0x1403e0944
mov byte [rsp + 0x10c], 0xa
lea rdx, [rsp + 0x10c]
mov rcx, qword [rax + 0x20]
test rcx, rcx
cmove rcx, rbx
mov r8d, 1
call fcn.1403d1590
cmp eax, 0xffffffff
je 0x1403e26a1
mov rax, qword [rbx + 0x108]
test rax, rax
je 0x1403e0958
mov byte [rax + 0x30], 0
mov rax, qword [rbx + 0x108]
test rax, rax
je 0x1403e0958
mov byte [rax + 0x31], 0
mov rax, qword [rbx + 0x108]
test rax, rax
je 0x1403e0958
mov byte [rax + 0x34], 0
movsx edx, byte [rbx + 0x27c]
xor esi, esi
cmp edx, 8
ja case.default.0x1403e0981
lea rbp, [0x140000000]
movzx eax, word [rbp + rdx*2 + 0x59fcf0]
lea rax, [rbp + rax + 0x3e0983]
jmp rax
mov ecx, 8
mov edx, 2
lea r8, [0x14059fd04]
mov r9d, 0xe5c
call fcn.140383960
mov r11, qword [rbx + 0x110]
mov r10, qword [rbx + 0x140]
mov rdi, qword [rbx + 0x230]
mov qword [rsp + 0x88], rsi
mov rbp, rsi
cmp r10, rsi
jb 0x1403e425e
cmp r10, qword [rsp + 0x88]
jb 0x1403e2d65
cmp rsi, 4
jne 0x1403e165f
mov rax, qword [rbx + 0xa8]
test byte [rbx + 0x295], 0x20
movzx r8d, byte [rax]
movzx edx, byte [rax + 1]
movzx ecx, byte [rax + 2]
movzx r9d, byte [rax + 3]
je 0x1403e15cf
shl ecx, 8
shl edx, 0x10
or r9d, ecx
shl r8d, 0x18
or r9d, edx
or r9d, r8d
jmp 0x1403e15e2
shl edx, 8
shl ecx, 0x10
or r8d, edx
shl r9d, 0x18
or r8d, ecx
or r9d, r8d
movsxd r9, r9d
test r9, r9
jl 0x1403e15f4
mov al, byte [rbx + 0x29a]
and al, 0xdf
jmp 0x1403e15ff
mov al, byte [rbx + 0x29a]
neg r9
or al, 0x20
mov cl, byte [rbx + 0x29c]
and cl, 0xfe
mov byte [rbx + 0x29a], al
mov qword [rbx + 0x260], r9
cmp dword [rbx + 0x238], 0xb
jne 0x1403e1657
mov r8b, cl
and r8b, 4
shr r8b, 2
je 0x1403e163a
test cl, 0x40
je 0x1403e163a
inc cl
mov byte [rbx + 0x29c], cl
jmp 0x1403e16b5
mov rax, qword [rbx + 0x240]
mov edx, 0x20000
test rax, rax
cmovne rdx, rax
cmp r9, rdx
jbe 0x1403e1657
test r8b, r8b
je 0x1403e1630
mov byte [rbx + 0x29c], cl
jmp 0x1403e16b5
cmp rsi, 2
jne 0x1403e16a8
mov rax, qword [rbx + 0xa8]
movzx edx, byte [rax + 1]
shl edx, 8
movzx ecx, byte [rax]
or ecx, edx
movsx r9, cx
cmp r9, 1
je 0x1403e2e70
mov rax, r9
lea rdx, [r12 + 1]
shr rax, 0x3f
add rax, r9
and rax, 0xfffffffffffffffe
cmp rax, r9
mov cl, byte [rbx + 0x29c]
cmovne r12, rdx
jmp 0x1403e16b5
mov r9, qword [rbx + 0x1c8]
mov cl, byte [rbx + 0x29c]
mov dl, cl
lea rax, [r9 + r12]
and dl, 1
mov qword [rsp + 0x110], rax
cmp rax, r10
jbe 0x1403e3a09
test dl, dl
jne 0x1403e3a09
test byte [rbx + 0x290], 1
jne 0x1403e35a3
test r14b, r14b
je 0x1403e35a3
sub rax, r12
mov rdx, qword [rbx + 0x1b0]
mov qword [rsp + 0x38], rax
cmp rax, rdx
jae 0x1403e170e
test byte [rbx + 0x297], 0x40
je 0x1403e35a3
test r15, r15
je 0x1403e4250
mov al, byte [r15 + 1]
cmp al, 5
je 0x1403e421a
cmp al, 7
je 0x1403e41f5
test r11, r11
je 0x1403e3594
mov r12b, byte [rbx + 0x29a]
mov r8, r10
not r12b
sub r8, rsi
and r12b, 0x20
shr r12b, 5
cmp rdi, r8
ja 0x1403e17c8
mov r10, qword [rbx + 0xa8]
xor r14b, r14b
lea rdx, [rsi + r10]
cmp r11, rdx
ja 0x1403e1772
lea rax, [r11 + rdi]
cmp rax, rdx
ja 0x1403e177e
cmp r11, rdx
jb 0x1403e1793
lea rax, [rdi + rsi]
add rax, r10
cmp r11, rax
jae 0x1403e1793
mov rcx, r11
mov r8, rdi
mov qword [rsp + 0xf0], r13
call fcn.1404407e0
jmp 0x1403e17a6
mov rcx, r11
mov r8, rdi
mov qword [rsp + 0xf0], r13
call fcn.14042ae90
mov rax, qword [rbx + 0x140]
sub rax, rsi
sub rax, rdi
mov qword [rbx + 0x140], rax
sub qword [rbx + 0x260], rdi
xor edi, edi
jmp 0x1403e1879
mov r13, qword [rbx + 0xa8]
mov r14b, 1
lea rdx, [rsi + r13]
cmp r11, rdx
ja 0x1403e17ee
mov rax, r11
sub rax, rsi
add rax, r10
cmp rax, rdx
ja 0x1403e17f6
cmp r11, rdx
jb 0x1403e1808
add r10, r13
cmp r11, r10
jae 0x1403e1808
mov rcx, r11
mov qword [rsp + 0xe8], r11
call fcn.1404407e0
jmp 0x1403e1818
mov rcx, r11
mov qword [rsp + 0xe8], r11
call fcn.14042ae90
mov r11, qword [rsp + 0xe8]
mov rdx, qword [rbx + 0x140]
mov rax, rdx
add rdi, rsi
sub rax, rsi
mov r15, qword [rsp + 0x38]
mov r13, r15
sub rdi, rdx
sub r13, rax
mov r10, qword [rbx + 0xa8]
add r11, rax
add r10, rdx
mov qword [rbx + 0x80], r10
mov qword [rbx + 0x140], 0
mov qword [rbx + 0xa8], 0
mov dword [rsp + 0x108], r15d
test rdi, rdi
jg 0x1403e1f95
or byte [rbx + 0x297], 0x40
test r14b, r14b
je 0x1403e188d
add r13, rbp
jmp 0x1403e1981
mov r10, qword [rbx + 0xb0]
mov rax, r10
mov rdx, qword [rbx + 0x78]
sub rax, rdx
cmp rax, qword [rsp + 0x110]
jg 0x1403e196f
mov r13, qword [rsp + 0x110]
mov al, byte [rbx + 0x295]
sub r13, r10
and al, 0x20
add r13, rdx
movzx ecx, byte [rdx]
movzx r11d, byte [rdx + 1]
movzx r15d, byte [rdx + 2]
movzx esi, byte [rdx + 3]
shr al, 5
je 0x1403e18ed
shl r15d, 8
shl r11d, 0x10
or esi, r15d
shl ecx, 0x18
or esi, r11d
or esi, ecx
jmp 0x1403e1900
shl r11d, 8
shl r15d, 0x10
or ecx, r11d
shl esi, 0x18
or ecx, r15d
or esi, ecx
movsxd rsi, esi
add rsi, 8
cmp rsi, qword [rsp + 0x110]
jge 0x1403e1981
mov r8, qword [rsp + 0x110]
cmp rdx, r10
jae 0x1403e1981
add rdx, rsi
add r13, rsi
movzx ecx, byte [rdx]
movzx r15d, byte [rdx + 1]
movzx r11d, byte [rdx + 2]
movzx esi, byte [rdx + 3]
test al, al
je 0x1403e194e
shl r11d, 8
shl r15d, 0x10
or esi, r11d
shl ecx, 0x18
or esi, r15d
or esi, ecx
jmp 0x1403e1961
shl r15d, 8
shl r11d, 0x10
or ecx, r15d
shl esi, 0x18
or ecx, r11d
or esi, ecx
movsxd rsi, esi
add rsi, 8
cmp rsi, r8
jl 0x1403e1919
jmp 0x1403e1981
mov r13, qword [rsp + 0x110]
sub r13, rsi
sub r13, qword [rbx + 0x230]
mov qword [rsp + 0x68], r13
mov edx, r13d
mov rcx, qword [rbx + 0x1a0]
lea r8, [rsp + 0x6c]
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68], eax
mov edx, eax
cmp eax, 0xffffffff
je 0x1403e300d
mov eax, dword [rsp + 0x6c]
shl rax, 0x20
or rax, rdx
cmp rax, 0xffffffffffffffff
je 0x1403e2884
mov cl, byte [rbx + 0x298]
xor r10b, r10b
and cl, 0x80
mov dl, byte [rbx + 0x299]
shr cl, 7
and dl, 1
mov r13, qword [rbx + 0x1a0]
mov rsi, qword [rbx + 0x78]
mov r14, qword [rbx + 0x248]
mov qword [rbx + 0x140], 0
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e2fd6
cmp dword [0x141a6ae3c], 0
je 0x1403e1ab1
lea rax, [r14 - 1]
cmp rax, 1
jbe 0x1403e1b7b
test cl, cl
je 0x1403e1aa8
cmp r14, 0xfffffffffffffffa
je 0x1403e2ef2
test r14, r14
je 0x1403e2ea8
test dl, dl
je 0x1403e1ab1
mov r15d, r11d
mov ecx, r15d
mov byte [rsp + 0x50], r10b
call fcn.14043d2b0
mov ecx, r15d
call fcn.14043d430
mov r10b, byte [rsp + 0x50]
test r10b, r10b
je 0x1403e1ab1
mov rcx, rsi
mov edx, ebp
mov r8d, r15d
call fcn.14043d350
movsxd rbp, eax
mov qword [rbx + 0x140], rbp
cmp eax, 0xffffffff
je 0x1403e1b7b
lea rcx, [0x14059fd50]
mov edx, 2
mov r8d, r15d
xor r9d, r9d
call fcn.14043d310
mov byte [rbp + rsi], 0xa
inc qword [rbx + 0x140]
jmp 0x1403e1b7b
test r14, r14
je 0x1403e2ea8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r15, qword [rbx + 0x240]
mov eax, 0x20000
test r15, r15
cmove r15, rax
mov qword [rbx + 0x140], 0
cmp rbp, r15
jbe 0x1403e1ae1
test r14, r14
jne 0x1403e1b0e
mov rax, rsp
mov rcx, r13
mov rdx, rsi
mov r8d, ebp
lea r9, [rsp + 0x54]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd rax, dword [rsp + 0x54]
mov qword [rbx + 0x140], rax
jmp 0x1403e1b7b
mov qword [rsp + 0xd8], rdi
mov r14, rsi
mov rsi, rax
mov r10, rsp
mov rdi, r15
mov rcx, r13
mov rdx, r14
mov r8d, r15d
lea r9, [rsp + 0x54]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e1b73
mov r8, qword [rbx + 0x240]
test r8, r8
movsxd r10, dword [rsp + 0x54]
cmove r8, rsi
sub rbp, r10
cmp rbp, r8
cmovbe r15, rbp
add r14, r10
add qword [rbx + 0x140], r10
test rbp, rbp
je 0x1403e1b73
cmp r10, rdi
je 0x1403e1b1c
mov rdi, qword [rsp + 0xd8]
mov dl, byte [rbx + 0x295]
test r12b, r12b
je 0x1403e1b8f
mov rbp, qword [rbx + 0x78]
jmp 0x1403e1e42
mov rax, qword [rbx + 0x78]
movzx r9d, byte [rax]
movzx ebp, byte [rax + 1]
movzx esi, byte [rax + 2]
movzx eax, byte [rax + 3]
test dl, 0x20
je 0x1403e1bbb
shl esi, 8
shl ebp, 0x10
or eax, esi
shl r9d, 0x18
or eax, ebp
or eax, r9d
jmp 0x1403e1bcd
shl ebp, 8
shl esi, 0x10
or r9d, ebp
shl eax, 0x18
or r9d, esi
or eax, r9d
mov qword [rsp + 0xd8], rdi
xor r13d, r13d
mov r12d, 1
cdq
mov ebp, eax
test eax, eax
mov rcx, qword [rbx + 0x1a0]
lea r8, [rsp + 0x5c]
cmovge r13d, r12d
mov r9d, 1
xor ebp, edx
sub ebp, edx
movsxd rbp, ebp
sub rbp, qword [rbx + 0x140]
add rbp, 8
mov qword [r8 - 4], rbp
mov edx, ebp
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, eax
mov dword [rsp + 0x58], edx
mov eax, edx
cmp edx, 0xffffffff
je 0x1403e2fad
cmp eax, 0xffffffff
je 0x1403e1f69
mov r11b, byte [rbx + 0x298]
xor r15b, r15b
and r11b, 0x80
mov r10b, byte [rbx + 0x299]
shr r11b, 7
and r10b, 1
mov rsi, qword [rbx + 0x1a0]
mov rdi, qword [rbx + 0x78]
mov r14, qword [rbx + 0x248]
mov qword [rbx + 0x140], 0
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e2f7c
cmp dword [0x141a6ae3c], 0
je 0x1403e1d16
lea rax, [r14 - 1]
cmp rax, 1
jbe 0x1403e1f69
test r11b, r11b
je 0x1403e1d0d
cmp r14, 0xfffffffffffffffa
je 0x1403e2f4d
test r14, r14
je 0x1403e2f08
test r10b, r10b
je 0x1403e1d16
mov ebp, r9d
mov ecx, ebp
call fcn.14043d2b0
mov ecx, ebp
call fcn.14043d430
test r15b, r15b
je 0x1403e1d16
mov rcx, rdi
mov edx, 4
mov r8d, ebp
call fcn.14043d350
movsxd rsi, eax
mov qword [rbx + 0x140], rsi
cmp eax, 0xffffffff
je 0x1403e1f69
lea rcx, [0x14059fd50]
mov edx, 2
mov r8d, ebp
xor r9d, r9d
call fcn.14043d310
mov byte [rsi + rdi], 0xa
inc qword [rbx + 0x140]
jmp 0x1403e1dec
test r14, r14
je 0x1403e2f08
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rbp, qword [rbx + 0x240]
mov qword [rbx + 0x140], 0
test rbp, rbp
je 0x1403e1db6
cmp rbp, 4
jae 0x1403e1db6
test r14, r14
je 0x1403e1db6
mov r15d, 0x20000
test rbp, rbp
cmove rbp, r15
mov r14d, 4
mov rax, rsp
mov r12, rbp
mov rcx, rsi
mov rdx, rdi
mov r8d, ebp
lea r9, [rsp + 0x50]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e1dae
mov r8, qword [rbx + 0x240]
test r8, r8
movsxd r9, dword [rsp + 0x50]
cmove r8, r15
sub r14, r9
cmp r14, r8
cmovbe rbp, r14
add rdi, r9
add qword [rbx + 0x140], r9
test r14, r14
je 0x1403e1dae
cmp r9, r12
je 0x1403e1d57
mov r12d, 1
jmp 0x1403e1de4
mov rax, rsp
mov rcx, rsi
mov rdx, rdi
mov r8d, 4
lea r9, [rsp + 0x50]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd rdx, dword [rsp + 0x50]
mov qword [rbx + 0x140], rdx
test eax, eax
je 0x1403e1f69
mov rbp, qword [rbx + 0x78]
mov dl, byte [rbx + 0x295]
movzx r8d, byte [rbp]
movzx edi, byte [rbp + 1]
movzx esi, byte [rbp + 2]
movzx eax, byte [rbp + 3]
test dl, 0x20
je 0x1403e1e1f
shl esi, 8
shl edi, 0x10
or eax, esi
shl r8d, 0x18
or eax, edi
or eax, r8d
jmp 0x1403e1e31
shl edi, 8
shl esi, 0x10
or r8d, edi
shl eax, 0x18
or r8d, esi
or eax, r8d
test r13d, r13d
je 0x1403e1bde
mov rdi, qword [rsp + 0xd8]
mov rsi, qword [rbx + 0x140]
or dl, 2
mov qword [rbx + 0xa8], rbp
mov byte [rbx + 0x295], dl
lea rax, [rbp + rsi]
mov qword [rbx + 0xb0], rax
mov qword [rbx + 0x80], rax
test rdi, rdi
je 0x1403e1e7a
test rsi, rsi
je 0x1403e482b
mov rbp, qword [rbx + 0x90]
mov qword [rbx + 0x1e8], 0
cmp rbp, rax
je 0x1403e1ee9
movsx edx, byte [rbx + 0x27c]
add edx, 0xfffffffa
test edx, 0xfffffffd
jne 0x1403e1ee9
mov rdx, rbp
dec rdx
je 0x1403e2f63
cmp byte [rbp - 1], 0xd
jne 0x1403e1ec6
cmp rax, rdx
mov rbp, rdx
cmova rbp, rax
mov qword [rbx + 0x90], rbp
test byte [rbx + 0x29a], 0x10
je 0x1403e1ee9
cmp rbp, rax
jbe 0x1403e1ee9
cmp byte [rbp - 1], 0xd
jne 0x1403e1ee9
dec rbp
mov qword [rbx + 0x90], rbp
cmp rbp, rax
ja 0x1403e1ed4
test byte [rbx + 0x290], 4
je 0x1403e1f18
test byte [rbx + 0x292], 0x40
je 0x1403e1f18
test byte [rbx + 0x293], 8
je 0x1403e1f18
cmp byte [rbx + 0x27c], 1
jne 0x1403e1f18
add rbp, 0xfffffffffffffffe
mov qword [rbx + 0x90], rbp
sub rbp, rax
cmp rbp, 1
jne 0x1403e1f53
mov dl, byte [rbx + 0x292]
test dl, 0x40
jne 0x1403e1f4a
test dl, 0x80
jne 0x1403e1f41
mov dl, byte [rbx + 0x298]
test dl, 1
jne 0x1403e1f41
test dl, 2
je 0x1403e1f53
cmp byte [rbx + 0x27c], 4
jne 0x1403e1f53
cmp byte [rax], 0x1a
je 0x1403e2e81
xor eax, eax
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x1a8], eax
and byte [rbx + 0x29d], 0xfe
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov eax, ebp
mov dword [rsp + 0xf8], eax
mov byte [rsp + 0xd0], r14b
mov qword [rsp + 0xe0], rbp
mov rbp, r11
cmp r13, rdi
mov r14, rdi
mov cl, byte [rbx + 0x298]
mov r8b, byte [rbx + 0x299]
cmovl r14, r13
xor r10b, r10b
and cl, 0x80
and r8b, 1
shr cl, 7
xor r15d, r15d
mov rdx, qword [rbx + 0x1a0]
mov r9, qword [rbx + 0x248]
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e351d
cmp dword [0x141a6ae3c], 0
je 0x1403e20db
lea rax, [r9 - 1]
cmp rax, 1
ja 0x1403e200f
xor r14d, r14d
jmp 0x1403e2204
test cl, cl
je 0x1403e20d2
cmp r9, 0xfffffffffffffffa
je 0x1403e30b7
test r9, r9
je 0x1403e302f
test r8b, r8b
je 0x1403e20db
mov ecx, r11d
mov dword [rsp + 0x100], r11d
mov byte [rsp + 0xb8], r10b
mov qword [rsp + 0xc0], r9
mov qword [rsp + 0xc8], rdx
call fcn.14043d2b0
mov ecx, dword [rsp + 0x100]
call fcn.14043d430
mov r10b, byte [rsp + 0xb8]
mov rdx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0xc0]
test r10b, r10b
je 0x1403e20db
mov rcx, rbp
mov edx, r14d
mov r8d, dword [rsp + 0x100]
call fcn.14043d350
movsxd r15, eax
cmp eax, 0xffffffff
je 0x1403e2007
lea rcx, [0x14059fd50]
mov edx, 2
xor r9d, r9d
mov r8d, dword [rsp + 0x100]
call fcn.14043d310
mov byte [r15 + rbp], 0xa
inc r15
mov r14d, 1
jmp 0x1403e2204
test r9, r9
je 0x1403e302f
mov qword [rsp + 0xc0], r9
xor ecx, ecx
mov qword [rsp + 0xc8], rdx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rdx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0xc0]
mov r8, qword [rbx + 0x240]
mov ecx, 0x20000
test r8, r8
cmove r8, rcx
xor r15d, r15d
cmp r14, r8
jbe 0x1403e2123
test r9, r9
jne 0x1403e2152
mov rax, rsp
mov rcx, rdx
mov rdx, rbp
mov r8d, r14d
lea r9, [rsp + 0xa0]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd r15, dword [rsp + 0xa0]
jmp 0x1403e21fb
mov byte [rsp + 0x30], r12b
mov rax, rbp
mov qword [rsp + 0xf0], r13
mov r13, r8
mov qword [rsp + 0xd8], rdi
mov rdi, rcx
mov qword [rsp + 0xe8], rbp
mov qword [rsp + 0x58], rsi
mov rsi, rdx
mov r10, rsp
mov r12, r13
mov rcx, rsi
mov rdx, rbp
mov r8d, r13d
lea r9, [rsp + 0xa0]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e21d9
mov r9, qword [rbx + 0x240]
test r9, r9
movsxd r10, dword [rsp + 0xa0]
cmove r9, rdi
sub r14, r10
cmp r14, r9
cmovbe r13, r14
add rbp, r10
add r15, r10
test r14, r14
je 0x1403e21d9
cmp r10, r12
je 0x1403e2180
mov r12b, byte [rsp + 0x30]
mov r13, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x58]
xor r14d, r14d
test eax, eax
setne r14b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e3
je 0x1403e3502
test r14d, r14d
je 0x1403e34b6
test r15, r15
je 0x1403e347b
sub rdi, r15
add rbp, r15
sub r13, r15
test rdi, rdi
jle 0x1403e3466
mov cl, byte [rbx + 0x298]
xor r9b, r9b
and cl, 0x80
xor r12d, r12d
mov dl, byte [rbx + 0x299]
shr cl, 7
and dl, 1
mov r14, qword [rbx + 0x1a0]
mov r13, qword [rbx + 0x248]
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e3423
cmp dword [0x141a6ae3c], 0
je 0x1403e2324
lea rax, [r13 - 1]
cmp rax, 1
ja 0x1403e228b
xor r14d, r14d
jmp 0x1403e2413
test cl, cl
je 0x1403e231b
cmp r13, 0xfffffffffffffffa
je 0x1403e3122
test r13, r13
je 0x1403e30d2
test dl, dl
je 0x1403e2324
mov r15d, r10d
mov ecx, r15d
mov byte [rsp + 0xb0], r9b
call fcn.14043d2b0
mov ecx, r15d
call fcn.14043d430
mov r9b, byte [rsp + 0xb0]
test r9b, r9b
je 0x1403e2324
mov r8d, r15d
lea rcx, [rsp + 0xa4]
mov edx, dword [rcx + 0x54]
call fcn.14043d350
movsxd r12, eax
cmp eax, 0xffffffff
je 0x1403e2283
lea rcx, [0x14059fd50]
mov edx, 2
mov r8d, r15d
xor r9d, r9d
call fcn.14043d310
mov byte [rsp + r12 + 0xa4], 0xa
inc r12
mov r14d, 1
jmp 0x1403e2413
test r13, r13
je 0x1403e30d2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r15, qword [rbx + 0x240]
mov eax, 0x20000
test r15, r15
cmove r15, rax
xor r12d, r12d
cmp r15, qword [rsp + 0xe0]
jae 0x1403e2351
test r13, r13
jne 0x1403e2380
mov rax, rsp
mov rcx, r14
lea rdx, [rsp + 0xa4]
lea r9, [rsp + 0x7c]
mov qword [rax + 0x20], 0
mov r8d, dword [rdx + 0x54]
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd r12, dword [rsp + 0x7c]
jmp 0x1403e240a
mov r13, qword [rsp + 0xe0]
lea rdx, [rsp + 0xa4]
mov qword [rdx + 0x34], rdi
mov rdi, rdx
mov qword [rdx + 0x44], rbp
mov rbp, rax
mov qword [rdx - 0x4c], rsi
mov r10, rsp
mov rsi, r15
mov rcx, r14
mov rdx, rdi
mov r8d, r15d
lea r9, [rsp + 0x7c]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e23f5
mov r8, qword [rbx + 0x240]
test r8, r8
movsxd r9, dword [rsp + 0x7c]
cmove r8, rbp
sub r13, r9
cmp r13, r8
cmovbe r15, r13
add rdi, r9
add r12, r9
test r13, r13
je 0x1403e23f5
cmp r9, rsi
je 0x1403e23a2
mov rdi, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x58]
xor r14d, r14d
test eax, eax
setne r14b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
cmp r13d, 0x3e3
je 0x1403e3416
test r14d, r14d
je 0x1403e33c7
test r12, r12
je 0x1403e338c
cmp rsi, 4
je 0x1403e3309
mov eax, dword [rsp + 0xa4]
cdq
mov cl, byte [rbx + 0x298]
xor eax, edx
and cl, 0x80
sub eax, edx
mov dl, byte [rbx + 0x299]
xor r9b, r9b
shr cl, 7
and dl, 1
mov dword [rsp + 0xa4], eax
xor r12d, r12d
mov r14, qword [rbx + 0x1a0]
mov r13, qword [rbx + 0x248]
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e32c6
cmp dword [0x141a6ae3c], 0
je 0x1403e2543
lea rax, [r13 - 1]
cmp rax, 1
ja 0x1403e24aa
xor r14d, r14d
jmp 0x1403e2633
test cl, cl
je 0x1403e253a
cmp r13, 0xfffffffffffffffa
je 0x1403e3188
test r13, r13
je 0x1403e3138
test dl, dl
je 0x1403e2543
mov r15d, r10d
mov ecx, r15d
mov byte [rsp + 0xa8], r9b
call fcn.14043d2b0
mov ecx, r15d
call fcn.14043d430
mov r9b, byte [rsp + 0xa8]
test r9b, r9b
je 0x1403e2543
mov r8d, r15d
lea rcx, [rsp + 0x108]
mov edx, dword [rcx - 0x10]
call fcn.14043d350
movsxd r12, eax
cmp eax, 0xffffffff
je 0x1403e24a2
lea rcx, [0x14059fd50]
mov edx, 2
mov r8d, r15d
xor r9d, r9d
call fcn.14043d310
mov byte [rsp + r12 + 0x108], 0xa
inc r12
mov r14d, 1
jmp 0x1403e2633
test r13, r13
je 0x1403e3138
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r15, qword [rbx + 0x240]
mov eax, 0x20000
test r15, r15
cmove r15, rax
xor r12d, r12d
cmp r15, qword [rsp + 0xe0]
jae 0x1403e2570
test r13, r13
jne 0x1403e259f
mov rax, rsp
mov rcx, r14
lea rdx, [rsp + 0x108]
lea r9, [rsp + 0x78]
mov qword [rax + 0x20], 0
mov r8d, dword [rdx - 0x10]
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd r12, dword [rsp + 0x78]
jmp 0x1403e262a
mov r13, qword [rsp + 0xe0]
lea rdx, [rsp + 0x108]
mov qword [rdx - 0x30], rdi
mov rdi, rdx
mov qword [rdx - 0x20], rbp
mov rbp, rax
mov qword [rsp + 0x58], rsi
mov r10, rsp
mov rsi, r15
mov rcx, r14
mov rdx, rdi
mov r8d, r15d
lea r9, [rsp + 0x78]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e2615
mov r8, qword [rbx + 0x240]
test r8, r8
movsxd r9, dword [rsp + 0x78]
cmove r8, rbp
sub r13, r9
cmp r13, r8
cmovbe r15, r13
add rdi, r9
add r12, r9
test r13, r13
je 0x1403e2615
cmp r9, rsi
je 0x1403e25c2
mov rdi, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x58]
xor r14d, r14d
test eax, eax
setne r14b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
cmp r13d, 0x3e3
je 0x1403e32b9
test r14d, r14d
je 0x1403e326a
test r12, r12
je 0x1403e322f
cmp rsi, 4
je 0x1403e319e
mov r13d, dword [rsp + 0x108]
test r13d, r13d
js 0x1403e2677
mov r12b, 1
jmp 0x1403e2685
neg r13d
xor r12b, r12b
mov dword [rsp + 0x108], r13d
movsxd r13, r13d
jmp 0x1403e1fb1
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x1a8], eax
mov eax, 0x26
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx + 0x1a8], eax
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov eax, 0x18
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rax, qword [rbx + 0x80]
cmp byte [rax + 2], 0x1a
jne 0x1403e1686
inc qword [rbx + 0x148]
mov eax, 0x18
and byte [rbx + 0x297], 0xfb
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov r10b, 1
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x30], dl
mov byte [rsp + 0x38], cl
call fcn.14043d530
mov cl, byte [rsp + 0x38]
mov r15d, eax
mov dl, byte [rsp + 0x30]
mov r10b, byte [rsp + 0x50]
movsxd r11, r15d
cmp dword [0x141a6ae3c], 0
je 0x1403e1a60
test cl, cl
je 0x1403e1a60
test dl, dl
jne 0x1403e1a3e
jmp 0x1403e1a60
mov r10b, 1
mov r11, r13
test dl, dl
jne 0x1403e1a3e
mov r15d, r13d
jmp 0x1403e1a60
mov byte [rsp + 0x30], r10b
mov r15b, 1
mov byte [rsp + 0x38], r11b
call fcn.14043d530
mov r11b, byte [rsp + 0x38]
mov ebp, eax
mov r10b, byte [rsp + 0x30]
movsxd r9, ebp
cmp dword [0x141a6ae3c], 0
je 0x1403e1cc3
test r11b, r11b
je 0x1403e1cc3
test r10b, r10b
jne 0x1403e1cad
jmp 0x1403e1cc3
mov r15b, 1
mov r9, rsi
test r10b, r10b
jne 0x1403e1cad
mov ebp, esi
jmp 0x1403e1cc3
lea rcx, str.terminator_minus_one
lea rdx, str.for_get.c
mov r8d, 0x13bc
call fcn.1404520a0
mov qword [rsp + 0x40], r9
mov byte [rsp + 0x30], r10b
mov byte [rsp + 0x38], r11b
call fcn.140384990
mov r11b, byte [rsp + 0x38]
mov r10b, byte [rsp + 0x30]
mov r9, qword [rsp + 0x40]
cmp eax, 1
jg 0x1403e1dec
jmp 0x1403e1c75
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1403e2fcc
mov qword [rsp + 0x58], 0xffffffffffffffff
mov rax, 0xffffffffffffffff
jmp 0x1403e1c28
mov rax, qword [rsp + 0x58]
jmp 0x1403e1c28
mov qword [rsp + 0x40], r11
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x30], dl
mov byte [rsp + 0x38], cl
call fcn.140384990
mov cl, byte [rsp + 0x38]
mov dl, byte [rsp + 0x30]
mov r10b, byte [rsp + 0x50]
mov r11, qword [rsp + 0x40]
cmp eax, 1
jg 0x1403e1b7b
jmp 0x1403e1a04
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1403e3025
mov qword [rsp + 0x68], 0xffffffffffffffff
jmp 0x1403e2884
mov rax, qword [rsp + 0x68]
jmp 0x1403e19bb
mov r10b, 1
mov byte [rsp + 0xb8], r10b
mov qword [rsp + 0xc0], r9
mov byte [rsp + 0x80], r8b
mov byte [rsp + 0x88], cl
mov qword [rsp + 0xc8], rdx
call fcn.14043d530
mov rdx, qword [rsp + 0xc8]
mov cl, byte [rsp + 0x88]
mov r8b, byte [rsp + 0x80]
mov r9, qword [rsp + 0xc0]
mov r10b, byte [rsp + 0xb8]
mov dword [rsp + 0x100], eax
movsxd r11, dword [rsp + 0x100]
cmp dword [0x141a6ae3c], 0
je 0x1403e2084
test cl, cl
je 0x1403e2084
test r8b, r8b
jne 0x1403e2033
jmp 0x1403e2084
mov r10b, 1
mov r11, rdx
test r8b, r8b
jne 0x1403e2033
mov dword [rsp + 0x100], edx
jmp 0x1403e2084
mov r9b, 1
mov byte [rsp + 0xb0], r9b
mov byte [rsp + 0x60], dl
mov byte [rsp + 0x68], cl
call fcn.14043d530
mov cl, byte [rsp + 0x68]
mov r15d, eax
mov dl, byte [rsp + 0x60]
mov r9b, byte [rsp + 0xb0]
movsxd r10, r15d
cmp dword [0x141a6ae3c], 0
je 0x1403e22d2
test cl, cl
je 0x1403e22d2
test dl, dl
jne 0x1403e22aa
jmp 0x1403e22d2
mov r9b, 1
mov r10, r14
test dl, dl
jne 0x1403e22aa
mov r15d, r14d
jmp 0x1403e22d2
mov r9b, 1
mov byte [rsp + 0xa8], r9b
mov byte [rsp + 0x38], dl
mov byte [rsp + 0x40], cl
call fcn.14043d530
mov cl, byte [rsp + 0x40]
mov r15d, eax
mov dl, byte [rsp + 0x38]
mov r9b, byte [rsp + 0xa8]
movsxd r10, r15d
cmp dword [0x141a6ae3c], 0
je 0x1403e24f1
test cl, cl
je 0x1403e24f1
test dl, dl
jne 0x1403e24c9
jmp 0x1403e24f1
mov r9b, 1
mov r10, r14
test dl, dl
jne 0x1403e24c9
mov r15d, r14d
jmp 0x1403e24f1
test byte [rbx + 0x295], 0x20
je 0x1403e31eb
movzx eax, byte [rsp + 0x10a]
shl eax, 8
movzx r13d, byte [rsp + 0x10b]
movzx r9d, byte [rsp + 0x109]
or r13d, eax
shl r9d, 0x10
movzx r10d, byte [rsp + 0x108]
or r13d, r9d
shl r10d, 0x18
or r13d, r10d
mov dword [rsp + 0x108], r13d
jmp 0x1403e266d
movzx eax, byte [rsp + 0x109]
shl eax, 8
movzx r13d, byte [rsp + 0x108]
movzx r9d, byte [rsp + 0x10a]
or r13d, eax
shl r9d, 0x10
movzx r10d, byte [rsp + 0x10b]
or r13d, r9d
shl r10d, 0x18
or r13d, r10d
mov dword [rsp + 0x108], r13d
jmp 0x1403e266d
and byte [rbx + 0x29d], 0xfe
cmp dword [rbx + 0x1e0], 0xfffffffc
jne 0x1403e2d65
call fcn.140384990
cmp eax, 1
jle 0x1403e2d65
mov eax, 0x30d
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
and byte [rbx + 0x29d], 0xfe
mov dword [rbx + 0x1a8], r13d
cmp r13d, 0x26
je 0x1403e2d65
cmp r13d, 0x6d
jne 0x1403e32a0
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, qword [rbx + 0x1a0]
je 0x1403e2d65
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1403e2649
mov qword [rsp + 0x50], r10
mov byte [rsp + 0xa8], r9b
mov byte [rsp + 0x38], dl
mov byte [rsp + 0x40], cl
call fcn.140384990
mov cl, byte [rsp + 0x40]
mov dl, byte [rsp + 0x38]
mov r9b, byte [rsp + 0xa8]
mov r10, qword [rsp + 0x50]
cmp eax, 1
jle 0x1403e248b
mov r14d, 1
jmp 0x1403e2633
test byte [rbx + 0x295], 0x20
je 0x1403e334f
movzx r9d, byte [rsp + 0xa6]
shl r9d, 8
movzx eax, byte [rsp + 0xa7]
movzx r10d, byte [rsp + 0xa5]
or eax, r9d
shl r10d, 0x10
movzx r12d, byte [rsp + 0xa4]
or eax, r10d
shl r12d, 0x18
or eax, r12d
jmp 0x1403e244c
movzx r9d, byte [rsp + 0xa5]
shl r9d, 8
movzx eax, byte [rsp + 0xa4]
movzx r10d, byte [rsp + 0xa6]
or eax, r9d
shl r10d, 0x10
movzx r12d, byte [rsp + 0xa7]
or eax, r10d
shl r12d, 0x18
or eax, r12d
jmp 0x1403e244c
and byte [rbx + 0x29d], 0xfe
cmp dword [rbx + 0x1e0], 0xfffffffc
jne 0x1403e2d65
call fcn.140384990
cmp eax, 1
jle 0x1403e2d65
mov eax, 0x30d
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
and byte [rbx + 0x29d], 0xfe
mov dword [rbx + 0x1a8], r13d
cmp r13d, 0x26
je 0x1403e2d65
cmp r13d, 0x6d
jne 0x1403e33fd
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, qword [rbx + 0x1a0]
je 0x1403e2d65
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1403e2429
mov qword [rsp + 0x70], r10
mov byte [rsp + 0xb0], r9b
mov byte [rsp + 0x60], dl
mov byte [rsp + 0x68], cl
call fcn.140384990
mov cl, byte [rsp + 0x68]
mov dl, byte [rsp + 0x60]
mov r9b, byte [rsp + 0xb0]
mov r10, qword [rsp + 0x70]
cmp eax, 1
jle 0x1403e226c
mov r14d, 1
jmp 0x1403e2413
mov r14b, byte [rsp + 0xd0]
mov rbp, qword [rsp + 0xe0]
jmp 0x1403e1879
and byte [rbx + 0x29d], 0xfe
cmp dword [rbx + 0x1e0], 0xfffffffc
jne 0x1403e2d65
call fcn.140384990
cmp eax, 1
jle 0x1403e2d65
mov eax, 0x30d
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
and byte [rbx + 0x29d], 0xfe
mov dword [rbx + 0x1a8], eax
cmp eax, 0x26
je 0x1403e2d65
cmp eax, 0x6d
jne 0x1403e34e9
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, qword [rbx + 0x1a0]
je 0x1403e2d65
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov dword [rsp + 0x98], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x98]
jmp 0x1403e2215
mov qword [rsp + 0x90], r11
mov byte [rsp + 0xb8], r10b
mov qword [rsp + 0xc0], r9
mov byte [rsp + 0x80], r8b
mov byte [rsp + 0x88], cl
mov qword [rsp + 0xc8], rdx
call fcn.140384990
mov rdx, qword [rsp + 0xc8]
mov cl, byte [rsp + 0x88]
mov r8b, byte [rsp + 0x80]
mov r9, qword [rsp + 0xc0]
mov r10b, byte [rsp + 0xb8]
mov r11, qword [rsp + 0x90]
cmp eax, 1
jle 0x1403e1ff0
mov r14d, 1
jmp 0x1403e2204
cmp qword [rsp + 0x90], 0
je 0x1403e3bce
test r13d, r13d
mov rdi, qword [rbx + 0x110]
mov r11, qword [rbx + 0x78]
cmove rdi, r11
mov rdx, qword [rbx + 0xa8]
cmp rdi, rdx
je 0x1403e3637
test r10, r10
jbe 0x1403e3617
cmp rdi, rdx
ja 0x1403e35d9
lea rax, [rdi + r10]
cmp rax, rdx
ja 0x1403e35e2
cmp rdi, rdx
jb 0x1403e35f9
lea rax, [r10 + rdx]
cmp rdi, rax
jae 0x1403e35f9
mov rcx, rdi
mov r8, r10
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x38], r9
call fcn.1404407e0
jmp 0x1403e360e
mov rcx, rdi
mov r8, r10
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x38], r9
call fcn.14042ae90
mov r9, qword [rsp + 0x38]
mov r11, qword [rbx + 0x78]
cmp rdi, r11
jne 0x1403e3637
mov rax, qword [rbx + 0xa8]
sub rax, rdi
mov r8d, eax
sub qword [rbx + 0x90], r8
mov qword [rbx + 0xa8], r11
mov r8, qword [rbx + 0x1b0]
cmp r8, qword [rsp + 0x110]
jae 0x1403e36e5
test r14b, r14b
jne 0x1403e366a
mov eax, 0x16
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov qword [rsp + 0x38], r9
lea rcx, [r9 + r12 + 0x14]
lea rdx, [rbx + 0x78]
call fcn.14035a4b0
mov r9, qword [rsp + 0x38]
test eax, eax
je 0x1403e369f
mov eax, 0x62
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rdi, qword [rbx + 0x78]
lea r8, [r9 + r12 + 4]
mov qword [rbx + 0x1c8], r8
movabs rax, 0x2337233523332340
mov qword [rbx + 0x1b0], r8
movabs r10, 0x35233323302339
mov qword [r8 + rdi], rax
mov r15, qword [rbx + 0x78]
mov r11, qword [rbx + 0x1b0]
mov qword [r11 + r15 + 8], r10
mov r8, qword [rbx + 0x1b0]
mov r11b, byte [rbx + 0x298]
xor dl, dl
and r11b, 0x80
xor r15d, r15d
mov r10b, byte [rbx + 0x299]
mov rax, qword [rbx + 0x140]
sub r8, rax
shr r11b, 7
add rdi, rax
and r10b, 1
mov r9, qword [rbx + 0x1a0]
mov r14, qword [rbx + 0x248]
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e3b80
cmp dword [0x141a6ae3c], 0
je 0x1403e3804
lea rax, [r14 - 1]
cmp rax, 1
ja 0x1403e3748
xor r14d, r14d
jmp 0x1403e3918
test r11b, r11b
je 0x1403e37fb
cmp r14, 0xfffffffffffffffa
je 0x1403e3acd
test r14, r14
je 0x1403e3a5f
test r10b, r10b
je 0x1403e3804
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x70], ecx
mov byte [rsp + 0x50], dl
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x78], rdi
call fcn.14043d2b0
mov ecx, dword [rsp + 0x70]
call fcn.14043d430
mov dl, byte [rsp + 0x50]
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x60]
test dl, dl
je 0x1403e3804
mov rcx, rdi
mov edx, r8d
mov r8d, dword [rsp + 0x70]
mov qword [rsp + 0x78], rdi
call fcn.14043d350
movsxd r15, eax
cmp eax, 0xffffffff
je 0x1403e3740
lea rcx, [0x14059fd50]
mov edx, 2
xor r9d, r9d
mov r8d, dword [rsp + 0x70]
mov qword [rsp + 0x78], rdi
call fcn.14043d310
mov r14d, 1
mov byte [r15 + rdi], 0xa
inc r15
jmp 0x1403e3918
test r14, r14
je 0x1403e3a5f
mov qword [rsp + 0x60], r9
xor ecx, ecx
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x78], rdi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rbx + 0x240]
mov edx, 0x20000
test rax, rax
cmove rax, rdx
xor r15d, r15d
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x60]
cmp r8, rax
jbe 0x1403e3845
test r14, r14
jne 0x1403e386f
mov rax, rsp
mov rcx, r9
mov rdx, rdi
lea r9, [rsp + 0x38]
mov qword [rax + 0x20], 0
mov qword [r9 + 0x40], rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd r15, dword [rsp + 0x38]
jmp 0x1403e390f
mov qword [rsp + 0x78], rdi
mov r14, rdi
mov dword [rsp + 0x30], r13d
mov r13, rax
mov qword [rsp + 0xe0], rbp
mov rdi, rdx
mov qword [rsp + 0x58], rsi
mov rbp, r8
mov qword [rsp + 0xd0], r12
mov rsi, r9
mov r10, rsp
mov r12, r13
mov rcx, rsi
mov rdx, r14
mov r8d, r13d
lea r9, [rsp + 0x38]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e38f0
mov r10, qword [rbx + 0x240]
test r10, r10
movsxd r11, dword [rsp + 0x38]
cmove r10, rdi
sub rbp, r11
cmp rbp, r10
cmovbe r13, rbp
add r14, r11
add r15, r11
test rbp, rbp
je 0x1403e38f0
cmp r11, r12
je 0x1403e389d
mov rdi, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x30]
mov rbp, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0x58]
mov r12, qword [rsp + 0xd0]
xor r14d, r14d
test eax, eax
setne r14b
mov rax, qword [rbx + 0x78]
mov qword [rbx + 0x80], rdi
add rdi, r15
add qword [rbx + 0x140], r15
mov qword [rbx + 0xb0], rdi
mov qword [rbx + 0xa8], rax
mov qword [rbx + 0x90], 0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x3e3
je 0x1403e3b73
test r14d, r14d
jne 0x1403e39ab
and byte [rbx + 0x29d], 0xfe
mov dword [rbx + 0x1a8], edi
cmp edi, 0x26
je 0x1403e2d65
cmp edi, 0x6d
jne 0x1403e3992
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, qword [rbx + 0x1a0]
je 0x1403e2d65
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test r15, r15
jne 0x1403e39dd
and byte [rbx + 0x29d], 0xfe
cmp dword [rbx + 0x1e0], 0xfffffffc
je 0x1403e3ae7
mov eax, 0x18
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test r13d, r13d
je 0x1403e39e9
or byte [rbx + 0x297], 0x40
mov r10, qword [rbx + 0x140]
cmp r10, qword [rsp + 0x110]
jb 0x1403e1f7c
mov cl, byte [rbx + 0x29c]
mov dl, cl
and dl, 1
mov rdi, qword [rbx + 0xa8]
sub r10, rsi
lea rax, [rsi + rdi]
mov qword [rbx + 0x80], rax
cmp dl, 1
je 0x1403e3b0e
mov rdx, qword [rsp + 0x110]
add rdi, rdx
sub rsi, rdx
sub rbp, r12
add rsi, r10
add rbp, rdi
mov qword [rbx + 0xa8], rdi
mov qword [rbx + 0x140], rsi
mov qword [rbx + 0x90], rbp
or byte [rbx + 0x295], 2
jmp 0x1403e1e81
mov dl, 1
mov byte [rsp + 0x50], dl
mov byte [rsp + 0x38], r10b
mov byte [rsp + 0x40], r11b
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x78], rdi
call fcn.14043d530
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x60]
mov r11b, byte [rsp + 0x40]
mov r10b, byte [rsp + 0x38]
mov dl, byte [rsp + 0x50]
mov dword [rsp + 0x70], eax
movsxd rax, dword [rsp + 0x70]
mov qword [rsp + 0x38], rax
cmp dword [0x141a6ae3c], 0
je 0x1403e37a9
test r11b, r11b
je 0x1403e37a9
test r10b, r10b
jne 0x1403e376d
jmp 0x1403e37a9
mov qword [rsp + 0x38], r9
mov dl, 1
test r10b, r10b
jne 0x1403e376d
mov dword [rsp + 0x70], r9d
jmp 0x1403e37a9
call fcn.140384990
cmp eax, 1
jle 0x1403e39c4
mov eax, 0x30d
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov qword [rbx + 0x140], r10
test cl, 0x40
je 0x1403e3b5d
cmp r10, qword [rsp + 0x110]
jb 0x1403e3b46
mov rdx, qword [rsp + 0x110]
lea rbp, [r10 + rdi]
add rdx, rdi
mov qword [rbx + 0x90], rbp
mov qword [rbx + 0xa8], rdx
jmp 0x1403e1e81
mov rbp, qword [rbx + 0x78]
add rbp, qword [rbx + 0x1b0]
mov qword [rbx + 0x90], rbp
jmp 0x1403e1e81
sub r12, rbp
add rdi, r10
lea rbp, [r12 + rdi]
mov qword [rbx + 0x90], rbp
jmp 0x1403e1e81
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1403e395a
mov byte [rsp + 0x50], dl
mov byte [rsp + 0x38], r10b
mov byte [rsp + 0x40], r11b
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x78], rdi
call fcn.140384990
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x60]
mov r11b, byte [rsp + 0x40]
mov r10b, byte [rsp + 0x38]
mov dl, byte [rsp + 0x50]
cmp eax, 1
jle 0x1403e3729
mov r14d, 1
jmp 0x1403e3918
cmp byte [r15], 1
jne 0x1403e35a3
mov r8d, ebp
mov qword [rsp + 0x58], rsi
mov edi, r8d
mov rdx, qword [rsp + 0x110]
sub rdx, r10
lea r8, [rsp + 0x64]
mov rcx, qword [rbx + 0x1a0]
mov r9d, 1
mov qword [r8 - 4], rdx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov esi, eax
mov dword [rsp + 0x60], esi
mov eax, esi
cmp esi, 0xffffffff
je 0x1403e41d3
mov esi, dword [rsp + 0x64]
shl rsi, 0x20
or rsi, rax
cmp rsi, 0xffffffffffffffff
je 0x1403e2884
test byte [rbx + 0x29a], 0x20
je 0x1403e3f28
mov r13b, byte [rbx + 0x298]
xor r11b, r11b
and r13b, 0x80
mov r14b, byte [rbx + 0x299]
shr r13b, 7
and r14b, 1
mov rdx, qword [rbx + 0x1a0]
mov r12, qword [rbx + 0x78]
mov rsi, qword [rbx + 0x248]
mov qword [rbx + 0x140], 0
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e3ef7
cmp dword [0x141a6ae3c], 0
je 0x1403e3d3a
lea rax, [rsi - 1]
cmp rax, 1
jbe 0x1403e3e0f
test r13b, r13b
je 0x1403e3d31
cmp rsi, 0xfffffffffffffffa
je 0x1403e3ee0
test rsi, rsi
je 0x1403e3e9a
test r14b, r14b
je 0x1403e3d3a
mov r15d, r10d
mov ecx, r15d
mov byte [rsp + 0x38], r11b
mov qword [rsp + 0x40], rdx
call fcn.14043d2b0
mov ecx, r15d
call fcn.14043d430
mov r11b, byte [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
test r11b, r11b
je 0x1403e3d3a
mov rcx, r12
mov edx, edi
mov r8d, r15d
call fcn.14043d350
movsxd rsi, eax
mov qword [rbx + 0x140], rsi
cmp eax, 0xffffffff
je 0x1403e3e0f
lea rcx, [0x14059fd50]
mov edx, 2
mov r8d, r15d
xor r9d, r9d
call fcn.14043d310
mov byte [rsi + r12], 0xa
inc qword [rbx + 0x140]
jmp 0x1403e3e0f
test rsi, rsi
je 0x1403e3e9a
mov qword [rsp + 0x40], rdx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r14, qword [rbx + 0x240]
mov r13d, 0x20000
test r14, r14
cmove r14, r13
mov rdx, qword [rsp + 0x40]
mov qword [rbx + 0x140], 0
cmp rbp, r14
jbe 0x1403e3d75
test rsi, rsi
jne 0x1403e3da2
mov rax, rsp
mov rcx, rdx
mov rdx, r12
mov r8d, edi
lea r9, [rsp + 0x48]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd rax, dword [rsp + 0x48]
mov qword [rbx + 0x140], rax
jmp 0x1403e3e0f
mov qword [rsp + 0xe0], rbp
mov rsi, rbp
mov rbp, rdx
mov rax, rsp
mov r15, r14
mov rcx, rbp
mov rdx, r12
mov r8d, r14d
lea r9, [rsp + 0x48]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e3e07
mov rax, qword [rbx + 0x240]
test rax, rax
movsxd r9, dword [rsp + 0x48]
cmove rax, r13
sub rsi, r9
cmp rsi, rax
cmovbe r14, rsi
add r12, r9
add qword [rbx + 0x140], r9
test rsi, rsi
je 0x1403e3e07
cmp r9, r15
je 0x1403e3db0
mov rbp, qword [rsp + 0xe0]
mov r10, qword [rbx + 0x140]
mov rsi, qword [rbx + 0x78]
mov qword [rbx + 0x80], rsi
test byte [rbx + 0x295], 0x20
lea rax, [r10 + rsi]
mov qword [rbx + 0xb0], rax
movzx r12d, byte [rsi]
movzx r11d, byte [rsi + 1]
movzx eax, byte [rsi + 2]
movzx edx, byte [rsi + 3]
je 0x1403e3e5b
shl eax, 8
shl r11d, 0x10
or edx, eax
shl r12d, 0x18
or edx, r11d
or edx, r12d
jmp 0x1403e3e6e
shl r11d, 8
shl eax, 0x10
or r12d, r11d
shl edx, 0x18
or r12d, eax
or edx, r12d
movsxd rdx, edx
test rdx, rdx
jl 0x1403e3e80
mov al, byte [rbx + 0x29a]
and al, 0xdf
jmp 0x1403e3e8b
mov al, byte [rbx + 0x29a]
neg rdx
or al, 0x20
mov byte [rbx + 0x29a], al
add rdx, 8
jmp 0x1403e3beb
mov r11b, 1
mov byte [rsp + 0x38], r11b
mov qword [rsp + 0x40], rdx
call fcn.14043d530
mov rdx, qword [rsp + 0x40]
mov r15d, eax
mov r11b, byte [rsp + 0x38]
movsxd r10, r15d
cmp dword [0x141a6ae3c], 0
je 0x1403e3ce9
test r13b, r13b
je 0x1403e3ce9
test r14b, r14b
jne 0x1403e3cbd
jmp 0x1403e3ce9
mov r11b, 1
mov r10, rdx
test r14b, r14b
jne 0x1403e3cbd
mov r15d, edx
jmp 0x1403e3ce9
mov qword [rsp + 0x30], r10
mov byte [rsp + 0x38], r11b
mov qword [rsp + 0x40], rdx
call fcn.140384990
mov rdx, qword [rsp + 0x40]
mov r11b, byte [rsp + 0x38]
mov r10, qword [rsp + 0x30]
cmp eax, 1
jg 0x1403e3e0f
jmp 0x1403e3c81
mov r12b, byte [rbx + 0x298]
mov r8d, edi
and r12b, 0x80
xor r15b, r15b
mov rax, qword [rbx + 0x78]
mov r13b, byte [rbx + 0x299]
shr r12b, 7
and r13b, 1
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rbx + 0x1a0]
mov qword [rsp + 0x50], rax
mov r14, qword [rbx + 0x248]
mov qword [rbx + 0x140], 0
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e41a2
cmp dword [0x141a6ae3c], 0
je 0x1403e403c
lea rax, [r14 - 1]
cmp rax, 1
jbe 0x1403e410e
test r12b, r12b
je 0x1403e4033
cmp r14, 0xfffffffffffffffa
je 0x1403e418c
test r14, r14
je 0x1403e4147
test r13b, r13b
je 0x1403e403c
mov edi, r10d
mov ecx, edi
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x40], r8d
call fcn.14043d2b0
mov ecx, edi
call fcn.14043d430
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
test r15b, r15b
je 0x1403e403c
mov edx, r8d
mov r8d, edi
mov rcx, qword [rsp + 0x50]
call fcn.14043d350
movsxd rbp, eax
mov qword [rbx + 0x140], rbp
cmp eax, 0xffffffff
je 0x1403e410e
lea rcx, [0x14059fd50]
mov edx, 2
mov r8d, edi
xor r9d, r9d
call fcn.14043d310
mov rax, qword [rsp + 0x50]
mov byte [rbp + rax], 0xa
inc qword [rbx + 0x140]
jmp 0x1403e410e
test r14, r14
je 0x1403e4147
mov qword [rsp + 0x38], rdx
xor ecx, ecx
mov dword [rsp + 0x40], r8d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r12, qword [rbx + 0x240]
mov r13d, 0x20000
test r12, r12
cmove r12, r13
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov qword [rbx + 0x140], 0
cmp rbp, r12
jbe 0x1403e4081
test r14, r14
jne 0x1403e40ac
mov rax, rsp
mov rcx, rdx
lea r9, [rsp + 0x30]
mov qword [rax + 0x20], 0
mov rdx, qword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadFile]
movsxd rax, dword [rsp + 0x30]
mov qword [rbx + 0x140], rax
jmp 0x1403e410e
mov rdi, qword [rsp + 0x50]
mov r14, rbp
mov rbp, rdx
mov rax, rsp
mov r15, r12
mov rcx, rbp
mov rdx, rdi
mov r8d, r12d
lea r9, [rsp + 0x30]
mov qword [rax + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e410e
mov rax, qword [rbx + 0x240]
test rax, rax
movsxd r8, dword [rsp + 0x30]
cmove rax, r13
sub r14, r8
cmp r14, rax
cmovbe r12, r14
add rdi, r8
add qword [rbx + 0x140], r8
test r14, r14
je 0x1403e410e
cmp r8, r15
je 0x1403e40b7
mov rax, qword [rbx + 0x78]
mov rdx, qword [rbx + 0x140]
mov qword [rbx + 0xa8], rax
add rdx, rax
add rax, rsi
mov qword [rbx + 0xb0], rdx
mov qword [rbx + 0x80], rax
or byte [rbx + 0x295], 2
mov rbp, qword [rbx + 0x90]
jmp 0x1403e1e81
mov qword [rsp + 0x38], rdx
mov r15b, 1
mov dword [rsp + 0x40], r8d
call fcn.14043d530
mov r8d, dword [rsp + 0x40]
mov edi, eax
mov rdx, qword [rsp + 0x38]
movsxd r10, edi
cmp dword [0x141a6ae3c], 0
je 0x1403e3fe3
test r12b, r12b
je 0x1403e3fe3
test r13b, r13b
jne 0x1403e3fb9
jmp 0x1403e3fe3
mov r15b, 1
mov r10, rdx
test r13b, r13b
jne 0x1403e3fb9
mov edi, edx
jmp 0x1403e3fe3
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x40], r8d
call fcn.140384990
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x30]
cmp eax, 1
jg 0x1403e410e
jmp 0x1403e3f79
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1403e41eb
mov qword [rsp + 0x60], 0xffffffffffffffff
jmp 0x1403e2884
mov rsi, qword [rsp + 0x60]
jmp 0x1403e3c26
cmp byte [r15 + 2], 1
jne 0x1403e172b
or byte [rbx + 0x297], 0x20
mov rbp, qword [rbx + 0x90]
mov rax, qword [rbx + 0x80]
jmp 0x1403e1e81
cmp byte [r15 + 2], 1
jne 0x1403e172b
mov rax, qword [rsp + 0x90]
cmp rdx, qword [rax]
ja 0x1403e172b
or byte [rbx + 0x297], 0x20
mov rbp, qword [rbx + 0x90]
mov rax, qword [rbx + 0x80]
jmp 0x1403e1e81
test r11, r11
jne 0x1403e1734
jmp 0x1403e35a3
test r10, r10
jbe 0x1403e42d2
mov rdx, qword [rbx + 0xa8]
mov rcx, qword [rbx + 0x78]
cmp rcx, rdx
ja 0x1403e4281
lea rax, [r10 + rcx]
cmp rax, rdx
ja 0x1403e428a
cmp rcx, rdx
jb 0x1403e42ae
lea rax, [r10 + rdx]
cmp rcx, rax
jae 0x1403e42ae
mov r8, r10
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.1404407e0
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
jmp 0x1403e42e7
mov r8, r10
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.14042ae90
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
jmp 0x1403e42e7
mov al, byte [rbx + 0x29c]
xor r10d, r10d
test al, 0x40
je 0x1403e42e7
and al, 0x7f
mov byte [rbx + 0x29c], al
mov rax, qword [rbx + 0x1a0]
xor r13d, r13d
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x1b0]
sub rax, r10
mov qword [rsp + 0x78], rax
mov al, byte [rbx + 0x298]
and al, 0x80
shr al, 7
mov byte [rsp + 0x58], al
mov al, byte [rbx + 0x299]
and al, 1
mov byte [rsp + 0x40], al
mov rax, qword [rbx + 0x248]
mov rdx, qword [rbx + 0x78]
add rdx, r10
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x80], rax
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x60], 0
cmp dword [rbx + 0x40], 0xfffffffc
je 0x1403e47cf
cmp dword [0x141a6ae3c], 0
je 0x1403e4496
mov rax, qword [rsp + 0x80]
lea rdx, [rax - 1]
cmp rdx, 1
ja 0x1403e437f
mov dword [rsp + 0x40], 0
jmp 0x1403e4621
mov al, byte [rsp + 0x58]
test al, al
je 0x1403e4487
cmp qword [rsp + 0x80], 0xfffffffffffffffa
je 0x1403e46fa
cmp qword [rsp + 0x80], 0
je 0x1403e469e
mov al, byte [rsp + 0x40]
test al, al
je 0x1403e4496
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x38], ecx
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.14043d2b0
mov ecx, dword [rsp + 0x38]
call fcn.14043d430
mov al, byte [rsp + 0x48]
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
test al, al
je 0x1403e4496
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
mov r8d, dword [rsp + 0x38]
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.14043d350
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
movsxd rax, eax
mov qword [rsp + 0x60], rax
cmp eax, 0xffffffff
je 0x1403e4372
lea rcx, [0x14059fd50]
mov edx, 2
xor r9d, r9d
mov r8d, dword [rsp + 0x38]
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.14043d310
mov rax, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x60]
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
mov byte [rdx + rax], 0xa
inc rdx
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x40], 1
jmp 0x1403e4621
cmp qword [rsp + 0x80], 0
je 0x1403e469e
mov qword [rsp + 0x50], r10
xor ecx, ecx
mov qword [rsp + 0xe8], r11
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8, qword [rbx + 0x240]
mov eax, 0x20000
test r8, r8
cmove r8, rax
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
mov qword [rsp + 0x60], 0
cmp r8, qword [rsp + 0x78]
jae 0x1403e44e6
cmp qword [rsp + 0x80], 0
jne 0x1403e452f
mov rax, rsp
lea r9, [rsp + 0x4c]
mov r8, qword [r9 + 0x2c]
mov qword [rax + 0x20], 0
mov rcx, qword [r9 + 0x24]
mov rdx, qword [r9 + 0x1c]
mov qword [r9 + 4], r10
mov qword [r9 + 0x9c], r11
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
movsxd rdx, dword [rsp + 0x4c]
mov qword [rsp + 0x60], rdx
jmp 0x1403e4613
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r10
mov dword [rsp + 0x30], r13d
mov r13, rax
mov qword [rsp + 0xe8], r11
mov qword [rsp + 0xd0], r12
mov r12, r8
mov byte [rsp + 0x38], r14b
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
mov r15, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov r10, rsp
mov r14, r12
mov rcx, rbp
mov rdx, r15
mov r8d, r12d
lea r9, [rsp + 0x4c]
mov qword [r10 + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1403e45d5
mov r9, qword [rbx + 0x240]
test r9, r9
movsxd r10, dword [rsp + 0x4c]
cmove r9, r13
sub rsi, r10
cmp rsi, r9
cmovbe r12, rsi
add r15, r10
add rdi, r10
test rsi, rsi
je 0x1403e45d5
cmp r10, r14
je 0x1403e4582
mov qword [rsp + 0x60], rdi
mov r10, qword [rsp + 0x50]
mov r13d, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xd8]
mov r11, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0x58]
mov r12, qword [rsp + 0xd0]
mov r14b, byte [rsp + 0x38]
mov r15, qword [rsp + 0x40]
test eax, eax
mov eax, 0
setne al
mov dword [rsp + 0x40], eax
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rbx + 0x78]
mov qword [rsp + 0xe8], r11
mov qword [rbx + 0xa8], rcx
lea rax, [rdx + r10]
add r10, rdx
add rax, rcx
mov qword [rbx + 0x140], r10
add r10, rcx
mov qword [rbx + 0xb0], rax
mov qword [rbx + 0x90], r10
mov qword [rbx + 0x80], rcx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r11, qword [rsp + 0xe8]
cmp eax, 0x3e3
je 0x1403e47aa
cmp dword [rsp + 0x40], 0
je 0x1403e475e
cmp qword [rsp + 0x60], 0
je 0x1403e4723
mov r10, qword [rbx + 0x140]
jmp 0x1403e1581
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.14043d530
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
mov dword [rsp + 0x38], eax
movsxd rax, dword [rsp + 0x38]
mov qword [rsp + 0x30], rax
cmp dword [0x141a6ae3c], 0
je 0x1403e43f2
mov al, byte [rsp + 0x58]
test al, al
je 0x1403e43f2
mov al, byte [rsp + 0x40]
test al, al
jne 0x1403e43b5
jmp 0x1403e43f2
mov rax, qword [rsp + 0x70]
mov dl, byte [rsp + 0x40]
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x30], rax
test dl, dl
jne 0x1403e43b5
mov rax, qword [rsp + 0x70]
mov dword [rsp + 0x38], eax
jmp 0x1403e43f2
and byte [rbx + 0x29d], 0xfe
cmp dword [rbx + 0x1e0], 0xfffffffc
jne 0x1403e2d65
call fcn.140384990
cmp eax, 1
jle 0x1403e2d65
mov eax, 0x30d
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
and byte [rbx + 0x29d], 0xfe
mov dword [rbx + 0x1a8], eax
cmp eax, 0x26
je 0x1403e2d65
cmp eax, 0x6d
jne 0x1403e4791
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, qword [rbx + 0x1a0]
je 0x1403e2d65
mov eax, 0x27
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov dword [rsp + 0x38], eax
xor ecx, ecx
mov qword [rsp + 0xe8], r11
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r11, qword [rsp + 0xe8]
mov eax, dword [rsp + 0x38]
jmp 0x1403e467b
mov qword [rsp + 0x50], r10
mov qword [rsp + 0xe8], r11
call fcn.140384990
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x50]
cmp eax, 1
jle 0x1403e4353
mov dword [rsp + 0x40], 1
jmp 0x1403e4621
call fcn.140384990
cmp eax, 1
jle 0x1403e08b7
mov eax, 0x30d
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov eax, 0x43
add rsp, 0x118
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret