Function at 0x1400921c0
Capabilities:
Encode data using base64
Read file on windows
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6e0
mov qword [rsp + 0x2c8], 0xfffffffffffffffe
mov qword [rsp + 0x730], rbx
mov rax, qword [0x140197b10]
xor rax, rsp
mov qword [rsp + 0x6d0], rax
mov qword [rsp + 0x268], rcx
mov qword [rsp + 0x48], rdx
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov edx, 5
lea rcx, [rsp + 0x60]
call fcn.140063580
nop
mov edx, 0x14
lea rcx, [rsp + 0x88]
call fcn.140063580
nop
lea rcx, [rsp + 0x80]
call fcn.140063500
nop
lea rcx, [rsp + 0x68]
call fcn.140063500
nop
lea rcx, [rsp + 0x78]
call fcn.140063500
nop
xor r14d, r14d
mov ebx, r14d
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0xa4], ebx
mov dword [rsp + 0x1c0], r14d
or rsi, 0xffffffffffffffff
mov word [rsp + 0x11c], si
mov eax, esi
mov dword [rsp + 0xec], eax
mov dword [rsp + 0x108], eax
mov rax, rsi
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x190], rax
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x1a8], rax
mov dword [rsp + 0xe0], r14d
mov rbx, rsi
mov qword [rsp + 0x200], rbx
mov qword [rsp + 0x130], rbx
mov rcx, rsi
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x1f0], rcx
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x1e8], rcx
mov byte [rsp + 0xca], r14b
mov byte [rsp + 0xbb], r14b
mov byte [rsp + 0xfb], r14b
mov byte [rsp + 0xf9], r14b
mov byte [rsp + 0x52], r14b
xor al, al
mov byte [rsp + 0xaa], al
mov byte [rsp + 0xb8], al
mov byte [rsp + 0xd5], al
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x168], rax
mov ebx, 0x2c
mov r8d, ebx
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x168]
call fcn.140066780
mov r13, qword [rsp + 0x68]
mov word [r13], r14w
mov rax, qword [rsp + 0x168]
cmp bx, word [rax]
jne 0x140092391
mov word [rax], r14w
add rax, 2
mov qword [rsp + 0x168], rax
mov r8d, ebx
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x168]
call fcn.140066780
mov r13, qword [rsp + 0x68]
xor bl, bl
mov byte [rsp + 0xa0], bl
mov byte [rsp + 0x148], bl
mov byte [rsp + 0xfc], bl
mov byte [rsp + 0x170], bl
mov byte [rsp + 0xd2], bl
mov byte [rsp + 0xf0], bl
mov byte [rsp + 0xa8], bl
mov byte [rsp + 0x58], bl
mov byte [rsp + 0x50], bl
mov byte [rsp + 0x51], bl
xor dil, dil
mov byte [rsp + 0x40], dil
mov byte [rsp + 0xc8], bl
xor cl, cl
mov dword [rsp + 0x158], ecx
mov qword [rsp + 0x270], r14
mov qword [rsp + 0x238], r14
mov r15d, r14d
mov dword [rsp + 0x120], r14d
mov byte [rsp + 0xba], bl
mov eax, 0xfffff000
mov dword [rsp + 0x124], eax
mov dword [rsp + 0x10c], eax
mov rax, 0xfffffffffffffff7
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x1d8], rax
mov rdx, rax
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
mov dword [rsp + 0x160], esi
mov ebp, 1
mov qword [rsp + 0x1f8], rbp
lea r12d, [rax + 0xf]
mov rax, qword [rsp + 0x48]
cmp word [rax], r14w
je 0x1400931ed
lea rdi, [0x140151b18]
nop word [rax + rax]
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._admin
call fcn.140065780
test al, al
je 0x1400924b4
or bl, bpl
mov byte [rsp + 0xa0], bl
mov rbx, qword [rsp + 0xb0]
movzx edi, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._super
call fcn.140065780
test al, al
je 0x1400924e8
or bl, 2
mov byte [rsp + 0xa0], bl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._devid
call fcn.140065780
test al, al
je 0x14009251b
bts dword [rsp + 0x1c0], 0x10
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 7
lea rdx, [rsp + 0x48]
lea rcx, str._devidx
call fcn.140065780
test al, al
je 0x140092551
bts dword [rsp + 0x1c0], 0x11
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov ebx, 4
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._gui
call fcn.140065780
test al, al
jne 0x14009315e
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._usb
call fcn.140065780
test al, al
jne 0x140093040
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._hextp
call fcn.140065780
test al, al
je 0x1400925c3
or r15d, ebp
mov dword [rsp + 0x120], r15d
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._phy
call fcn.140065780
test al, al
je 0x1400925f9
or r15d, 2
mov dword [rsp + 0x120], r15d
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 5
lea rdx, [rsp + 0x48]
lea rcx, [0x140151ad4]
call fcn.140065780
test al, al
je 0x140092632
or r15d, 0x10
mov dword [rsp + 0x120], r15d
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 5
lea rdx, [rsp + 0x48]
lea rcx, str._fill
call fcn.140065780
test al, al
je 0x14009266a
or r15d, ebx
mov dword [rsp + 0x120], r15d
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 3
lea rdx, [rsp + 0x48]
lea rcx, [0x140151ac8]
call fcn.140065780
test al, al
je 0x14009269c
mov byte [rsp + 0x50], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._hup
call fcn.140065780
test al, al
je 0x1400926cb
mov byte [rsp + 0x51], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 5
lea rdx, [rsp + 0x48]
lea rcx, str._ahup
call fcn.140065780
test al, al
je 0x1400926fd
mov byte [rsp + 0x51], 0x21
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._gpt
call fcn.140065780
test al, al
je 0x14009272a
mov dil, bpl
mov byte [rsp + 0x40], bpl
mov rbx, qword [rsp + 0xb0]
jmp 0x140093054
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._mbr
call fcn.140065780
test al, al
je 0x14009275c
mov byte [rsp + 0xf9], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._cmp
call fcn.140065780
test al, al
je 0x14009278e
mov byte [rsp + 0xc8], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [0x14014b06c]
call fcn.140065780
test al, al
je 0x1400927c0
mov byte [rsp + 0xfb], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 3
lea rdx, [rsp + 0x48]
lea rcx, [0x140151a9c]
call fcn.140065780
test al, al
je 0x1400927f5
mov byte [rsp + 0xd5], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._lskip
call fcn.140065780
test al, al
je 0x140092827
or byte [rsp + 0xb8], 0x40
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 5
lea rdx, [rsp + 0x48]
lea rcx, str._lock
call fcn.140065780
test al, al
je 0x14009285c
mov byte [rsp + 0xaa], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._lock_
call fcn.140065780
test al, al
je 0x14009288e
mov byte [rsp + 0xaa], 0xff
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, ebx
mov r10, qword [rsp + 0x48]
mov rdx, r10
lea rcx, [0x140151a7c]
call fcn.14005c510
test al, al
je 0x1400929a0
lea rax, [r10 + 8]
movzx ecx, word [rax]
test cx, cx
je 0x1400928ed
mov ebx, 0x3d
cmp bx, cx
je 0x1400928e5
mov edx, 9
cmp dx, cx
ja 0x1400928d3
cmp cx, 0xd
jbe 0x1400928f8
mov r11d, 0x20
cmp r11w, cx
jne 0x1400929a9
jmp 0x1400928fe
mov r11d, 0x20
jmp 0x1400928fe
mov ebx, 0x3d
lea r11d, [rbx - 0x1d]
jmp 0x1400928fe
mov r11d, 0x20
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x238], r14
cmp bx, word [rax]
je 0x14009291a
mov qword [rsp + 0x270], rdi
jmp 0x140092984
add rax, 2
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rax]
mov qword [rsp + 0x270], rbx
mov rcx, qword [rsp + 0x48]
movzx eax, word [rcx]
test ax, ax
je 0x140092984
mov edx, 9
nop word [rax + rax]
cmp dx, ax
ja 0x14009295b
cmp ax, 0xd
jbe 0x140092974
cmp r11w, ax
je 0x140092974
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
je 0x140092984
jmp 0x140092950
cmp word [rcx], r14w
je 0x140092984
mov word [rcx], r14w
add qword [rsp + 0x48], 2
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov ebx, 0x3d
lea r11d, [rbx - 0x1d]
mov r8d, 4
mov rdx, r10
lea rcx, str._pbr
call fcn.14005c510
test al, al
je 0x140092ad0
lea rcx, [r10 + 8]
movzx eax, word [rcx]
test ax, ax
je 0x1400929fa
cmp bx, ax
je 0x1400929f3
mov edi, 9
cmp di, ax
ja 0x1400929e7
cmp ax, 0xd
jbe 0x1400929ff
cmp r11w, ax
jne 0x140092ad5
jmp 0x1400929ff
mov edi, 9
jmp 0x1400929ff
mov edi, 9
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x270], r14
movzx eax, word [rcx]
cmp bx, ax
je 0x140092a54
lea rdx, [0x14013f310]
mov qword [rsp + 0x238], rdx
test ax, ax
je 0x140092ab4
nop dword [rax]
cmp di, ax
ja 0x140092a3b
cmp ax, 0xd
jbe 0x140092ab4
cmp r11w, ax
je 0x140092ab4
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
jne 0x140092a30
jmp 0x140092ab4
add rcx, 2
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rax]
mov qword [rsp + 0x238], rbx
mov rcx, qword [rsp + 0x48]
movzx eax, word [rcx]
test ax, ax
je 0x140092ab4
nop
cmp di, ax
ja 0x140092a8b
cmp ax, 0xd
jbe 0x140092aa4
cmp r11w, ax
je 0x140092aa4
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
je 0x140092ab4
jmp 0x140092a80
cmp word [rcx], r14w
je 0x140092ab4
mov word [rcx], r14w
add qword [rsp + 0x48], 2
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov edi, 9
mov r8d, edi
mov rdx, r10
lea rcx, str._alignend
call fcn.14005c510
test al, al
je 0x140092be7
lea rdi, [r10 + 0x12]
movzx eax, word [rdi]
test ax, ax
je 0x140092b1a
cmp bx, ax
je 0x140092b1a
mov ecx, 9
cmp cx, ax
ja 0x140092b10
cmp ax, 0xd
jbe 0x140092b1a
cmp r11w, ax
jne 0x140092be5
mov qword [rsp + 0x48], rdi
movzx ebx, word [rdi]
mov eax, 0x3d
cmp ax, bx
je 0x140092b45
mov rax, 0xfffffffffffffffe
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
jmp 0x140092b99
lea rcx, [rdi + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, 9
ja 0x140092b99
mov qword [rsp + 0x150], rcx
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0x150]
call fcn.140068f80
mov rax, qword [rsp + 0x168]
test rax, rax
mov rcx, 0xfffffffffffffffe
cmovle rax, rcx
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
test bx, bx
je 0x140092bc9
mov eax, 0x20
mov ecx, 9
cmp cx, bx
ja 0x140092bb3
cmp bx, 0xd
jbe 0x140092bc9
cmp ax, bx
je 0x140092bc9
add rdi, 2
mov qword [rsp + 0x48], rdi
mov bx, word [rdi]
test bx, bx
jne 0x140092ba8
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov edi, ecx
mov r8d, r12d
mov rdx, r10
lea rcx, str._align
call fcn.14005c510
test al, al
je 0x140092cee
lea rcx, [r10 + 0xc]
movzx eax, word [rcx]
test ax, ax
je 0x140092c27
cmp bx, ax
je 0x140092c27
cmp di, ax
ja 0x140092c1d
cmp ax, 0xd
jbe 0x140092c27
cmp r11w, ax
jne 0x140092cee
mov qword [rsp + 0x48], rcx
mov r10, rcx
movzx eax, word [rcx]
test ax, ax
je 0x140092c59
cmp di, ax
ja 0x140092c42
cmp ax, 0xd
jbe 0x140092c59
cmp r11w, ax
je 0x140092c59
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
jne 0x140092c37
lea rcx, [rsp + 0x48]
call fcn.14005b560
cmp bx, word [r10]
je 0x140092c86
mov rbx, rsi
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0x1d8], rbx
mov dil, byte [rsp + 0x40]
jmp 0x140093054
lea rcx, [r10 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, 9
ja 0x140093022
mov qword [rsp + 0x150], rcx
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x150]
call fcn.140068f80
mov rbx, qword [rsp + 0x1d8]
mov qword [rsp + 0xb0], rbx
test rbx, rbx
jg 0x14009304f
mov rbx, rsi
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0x1d8], rbx
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str._clear
call fcn.140065780
test al, al
je 0x140092d20
mov byte [rsp + 0xfc], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, 3
lea rdx, [rsp + 0x48]
lea rcx, [0x14014962c]
call fcn.140065780
test al, al
jne 0x14009300b
mov ebx, 4
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._del
call fcn.140065780
test al, al
jne 0x14009300b
mov r8d, ebx
lea rdx, [rsp + 0x48]
lea rcx, str._raw
call fcn.140065780
test al, al
je 0x140092d9e
mov byte [rsp + 0xd2], bpl
or r15d, 0x20
mov dword [rsp + 0x120], r15d
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r12d
mov r10, qword [rsp + 0x48]
mov rdx, r10
lea rcx, str._swap:
call fcn.14005c510
test al, al
je 0x140092e08
add r10, 0xc
mov qword [rsp + 0x48], r10
lea rdx, [rsp + 0x10c]
lea rcx, [rsp + 0x48]
call fcn.140066e40
test eax, eax
js 0x140093073
mov edi, dword [rsp + 0x10c]
mov dword [rsp + 0x124], edi
lea eax, [rdi - 1]
cmp eax, 3
ja 0x140093073
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r11d, 5
mov r8d, r11d
mov rdx, r10
lea rcx, str._CHS
call fcn.14005c510
test al, al
je 0x140092eee
add r10, 0xa
mov qword [rsp + 0x48], r10
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x140], rbx
lea rcx, [rsp + 0x48]
call fcn.14001e970
movzx r11d, word [rbx]
sub r11w, 0x30
cmp r11w, 9
ja 0x140092e7f
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x140]
call fcn.140068f80
mov rbx, qword [rsp + 0x140]
mov edi, 0x3a
cmp di, word [rbx]
jne 0x140092eb2
add rbx, 2
mov qword [rsp + 0x140], rbx
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x140]
call fcn.140068f80
mov rbx, qword [rsp + 0x140]
cmp di, word [rbx]
jne 0x140093031
add rbx, 2
mov qword [rsp + 0x140], rbx
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x140]
call fcn.140068f80
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, r11d
mov rdx, r10
lea rcx, str._IMG
call fcn.14005c510
test al, al
jne 0x1400930c8
mov r8d, r12d
mov rdx, r10
lea rcx, str._SKIP
call fcn.14005c510
test al, al
je 0x140092f6f
add r10, 0xc
mov qword [rsp + 0x48], r10
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov dword [rsp + 0x198], 0x42
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x48]
call fcn.140066e40
movzx eax, byte [rsp + 0x198]
mov byte [rsp + 0xba], al
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov r8d, ebx
mov rdx, r10
lea rcx, str._iv
call fcn.14005c510
test al, al
je 0x140092fb2
add r10, 8
mov qword [rsp + 0x48], r10
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x48]
call fcn.140066e40
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
movzx eax, word [r10]
mov ecx, 0x2d
cmp cx, ax
jne 0x1400930b9
mov ecx, 0x20
nop dword [rax]
cmp di, ax
ja 0x140092fdb
cmp ax, 0xd
jbe 0x140092ff2
cmp cx, ax
je 0x140092ff2
add r10, 2
mov qword [rsp + 0x48], r10
mov ax, word [r10]
test ax, ax
jne 0x140092fd0
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov byte [rsp + 0x170], bpl
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x140093054
mov dil, byte [rsp + 0x40]
mov rax, qword [rsp + 0x48]
cmp word [rax], r14w
je 0x1400930d5
movzx ebx, byte [rsp + 0xa0]
lea rdi, [0x140151b18]
jmp 0x140092480
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
jmp 0x1400930d5
mov rbx, qword [rsp + 0xb0]
mov dil, byte [rsp + 0x40]
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xfffffffffffffffe
jne 0x1400930ee
mov rdx, rbx
cmp rbx, 0xfffffffffffffff7
cmove rdx, rsi
cmp rbx, 0xfffffffffffffff7
jne 0x140093129
mov rbx, qword [rsp + 0x130]
mov qword [rsp + 0x200], rbx
mov rcx, qword [rsp + 0x1f0]
mov qword [rsp + 0x248], rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x230], rcx
jmp 0x1400931ed
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x1f0]
mov qword [rsp + 0x248], rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x230], rcx
jmp 0x1400931f8
lea rdx, str.21:INDATA
lea rcx, [rsp + 0x1f8]
call fcn.140071240
nop
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x1f8]
call fcn.140063600
mov rdx, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x268]
call fcn.140047384
mov ebx, eax
lea rcx, [rsp + 0x1f8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, ebx
jmp 0x140098f51
mov rbx, rbp
mov qword [rsp + 0xb0], rbx
cmp rdx, 0xfffffffffffffff7
cmove rdx, rbx
mov qword [rsp + 0x218], rdx
mov esi, 4
mov r8d, esi
lea rdx, [rsp + 0x48]
lea rcx, str.list
call fcn.140065780
test al, al
je 0x14009329b
mov r8d, esi
lea rdx, [rsp + 0x48]
lea rcx, str.disk
call fcn.140065780
test al, al
je 0x140093247
mov byte [rsp + 0x148], bpl
jmp 0x14009329b
mov r8d, esi
lea rdx, [rsp + 0x48]
lea rcx, str.part
call fcn.140065780
test al, al
je 0x140093269
mov byte [rsp + 0x148], 2
jmp 0x14009329b
mov r8d, 3
lea rdx, [rsp + 0x48]
lea rcx, [0x140151a00]
call fcn.140065780
mov ebx, dword [rsp + 0x148]
movzx ebx, bl
test al, al
mov eax, 3
cmovne ebx, eax
mov dword [rsp + 0x148], ebx
mov byte [rsp + 0xa9], r14b
mov r8d, esi
lea rdx, [rsp + 0x48]
lea rcx, str.init
call fcn.140065780
test al, al
je 0x1400932cd
mov byte [rsp + 0x52], bpl
mov ebx, ebp
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0xa4], ebx
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, str.update
call fcn.140065780
test al, al
je 0x1400932fa
mov byte [rsp + 0xa9], bpl
mov ebx, ebp
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0xa4], ebx
mov r8d, 7
lea rdx, [rsp + 0x48]
lea rcx, str.hupdate
call fcn.140065780
test al, al
je 0x14009332a
mov byte [rsp + 0xa9], 0x10
mov eax, ebp
mov dword [rsp + 0x54], eax
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x48]
mov rdx, rax
movzx ecx, word [rax]
test cx, cx
je 0x14009336b
mov r8d, 0x20
mov r12d, 9
cmp r12w, cx
ja 0x140093352
cmp cx, 0xd
jbe 0x140093371
cmp r8w, cx
je 0x140093371
add rax, 2
mov qword [rsp + 0x48], rax
mov cx, word [rax]
test cx, cx
jne 0x140093346
jmp 0x140093371
mov r12d, 9
sub rax, rdx
sar rax, 1
mov r8d, eax
lea rcx, [rsp + 0x80]
call fcn.140063740
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov r10, qword [rsp + 0x48]
movzx ecx, word [r10]
movzx eax, cx
or ax, 0x20
mov edx, 0x61
lea r8d, [rdx + 0x1f]
cmp dx, ax
jne 0x1400933ea
mov dword [rsp + 0x11c], r8d
test cx, cx
je 0x140093435
lea eax, [rdx - 0x41]
nop
cmp r12w, cx
ja 0x1400933cc
cmp cx, 0xd
jbe 0x140093443
cmp ax, cx
je 0x14009343c
add r10, 2
mov qword [rsp + 0x48], r10
mov cx, word [r10]
test cx, cx
jne 0x1400933c0
mov ebx, 0x2d
jmp 0x140093448
mov ebx, 0x2d
cmp bx, cx
jne 0x140093448
movzx eax, word [r10 + 2]
or ax, 0x20
cmp dx, ax
jne 0x140093448
mov word [rsp + 0x11c], r14w
lea eax, [rbx - 0xd]
nop
cmp r12w, cx
ja 0x14009341c
cmp cx, 0xd
jbe 0x140093448
cmp ax, cx
je 0x140093448
add r10, 2
mov qword [rsp + 0x48], r10
mov cx, word [r10]
test cx, cx
jne 0x140093410
jmp 0x140093448
mov ebx, 0x2d
jmp 0x140093448
mov ebx, 0x2d
jmp 0x140093448
mov ebx, 0x2d
mov dword [rsp + 0x2d8], 0xebd0a0a2
mov eax, 0xb9e5
mov word [rsp + 0x2dc], ax
mov eax, 0x4433
mov word [rsp + 0x2de], ax
mov byte [rsp + 0x2e0], 0x87
mov byte [rsp + 0x2e1], 0xc0
mov byte [rsp + 0x2e2], 0x68
mov byte [rsp + 0x2e3], 0xb6
mov byte [rsp + 0x2e4], 0xb7
mov byte [rsp + 0x2e5], 0x26
mov byte [rsp + 0x2e6], 0x99
mov byte [rsp + 0x2e7], 0xc7
mov dword [rsp + 0x2e8], r14d
xor eax, eax
mov dword [rsp + 0x2ec], eax
mov dword [rsp + 0x2f0], eax
mov dword [rsp + 0x2f4], eax
mov qword [rsp + 0x260], r14
mov dword [rsp + 0x20c], r14d
mov dword [rsp + 0x198], r14d
lea rcx, str.MS_Basic_Data
mov qword [rsp + 0x150], rcx
mov dword [rsp + 0x278], r14d
mov dword [rsp + 0x1b8], r14d
mov dword [rsp + 0x208], r14d
mov dword [rsp + 0x210], r14d
lea rsi, [0x14019cf18]
mov qword [rsp + 0x2d0], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
test dil, dil
jne 0x1400935a4
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x48]
call fcn.140066e40
mov rcx, qword [rsp + 0x48]
cmp bx, word [rcx]
jne 0x140093594
lea rdx, [rcx + 2]
movzx eax, word [rdx]
sub ax, 0x30
cmp ax, 9
jbe 0x140093581
mov byte [rsp + 0xf0], 1
mov rcx, rdx
mov qword [rsp + 0x48], rdx
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0xec], eax
jmp 0x14009361a
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0xec], eax
jmp 0x14009361a
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0xec], eax
jmp 0x14009361a
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x48]
call fcn.140079080
mov qword [rsp + 0x278], rax
cmp eax, 0xffffffff
jne 0x140093610
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
mov rcx, qword [rsp + 0x48]
mov ebx, 0x2d
mov eax, 0x2b
cmp ax, word [rcx]
jne 0x140093637
movzx eax, byte [rcx]
mov byte [rsp + 0xca], al
add rcx, 2
mov qword [rsp + 0x48], rcx
movzx eax, word [rcx]
cmp bx, ax
jne 0x140093672
mov edx, 0x20
cmp r12w, ax
ja 0x140093650
cmp ax, 0xd
jbe 0x140093666
cmp dx, ax
je 0x140093666
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
jne 0x140093644
lea rcx, [rsp + 0x48]
call fcn.14005b560
jmp 0x14009369b
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x48]
call fcn.140069050
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0xc0], rax
mov byte [rsp + 0xfa], 1
mov eax, 0x40
mov rcx, qword [rsp + 0x48]
cmp ax, word [rcx]
jne 0x1400936c3
add rcx, 2
mov qword [rsp + 0x48], rcx
mov byte [rsp + 0xfa], 0
movzx eax, word [rcx]
cmp bx, ax
jne 0x1400936fe
mov edx, 0x20
cmp r12w, ax
ja 0x1400936dc
cmp ax, 0xd
jbe 0x1400936f2
cmp dx, ax
je 0x1400936f2
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
jne 0x1400936d0
lea rcx, [rsp + 0x48]
call fcn.14005b560
jmp 0x140093727
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x48]
call fcn.140069050
mov dword [rsp + 0x210], eax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0xd8], rax
test dil, dil
je 0x14009375f
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x48]
call fcn.140079080
mov qword [rsp + 0x1b8], rax
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x48]
call fcn.140068f80
mov dword [rsp + 0x20c], eax
mov dword [rsp + 0x258], r14d
mov rcx, qword [rsp + 0x48]
movzx eax, word [rcx]
cmp bx, ax
jne 0x1400937a4
mov edx, 0x20
nop dword [rax]
cmp r12w, ax
ja 0x14009378c
cmp ax, 0xd
jbe 0x1400937f2
cmp dx, ax
je 0x1400937f2
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
jne 0x140093780
jmp 0x1400937f2
test dil, dil
je 0x1400937f2
test ax, ax
je 0x1400937f2
mov qword [rsp + 0x2b0], rcx
xor r8d, r8d
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x2b0]
call fcn.140036bcc
mov dword [rsp + 0x198], ebp
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x150], rcx
movsxd rax, dword [rsp + 0x258]
mov word [rcx + rax*2], r14w
mov byte [rsp + 0xd3], 0
mov byte [rsp + 0xd1], 0
mov ebx, 0xfffc0000
cmp byte [rsp + 0x148], 1
cmovne ebx, r14d
mov dword [rsp + 0x118], ebx
mov dword [rsp + 0x10c], ebx
mov r12, qword [rsp + 0x80]
mov r10, r12
mov qword [rsp + 0x48], r12
mov r8d, 5
mov rdx, r12
lea rcx, str._img
call fcn.14005c510
test al, al
je 0x1400938ce
lea rcx, [r12 + 0xa]
mov qword [rsp + 0x48], rcx
mov rdx, rcx
movzx eax, word [rcx]
test ax, ax
je 0x140093899
mov r8d, 0x20
mov r9d, 9
nop
cmp r9w, ax
ja 0x14009387c
cmp ax, 0xd
jbe 0x140093899
cmp r8w, ax
je 0x140093899
cmp ax, 0x23
je 0x140093899
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rcx]
test ax, ax
jne 0x140093870
sub rcx, rdx
sar rcx, 1
test rcx, rcx
jle 0x1400938bd
mov r8d, ecx
lea rcx, [rsp + 0x78]
call fcn.140063740
mov ebx, 0xfffc0000
mov dword [rsp + 0x118], ebx
lea rcx, [rsp + 0x48]
call fcn.14005b560
mov r10, qword [rsp + 0x48]
jmp 0x140093932
mov r8d, 2
mov rdx, r12
lea rcx, [0x1401519b8]
call fcn.14005c510
test al, al
je 0x1400938f1
lea r10, [r12 + 4]
mov qword [rsp + 0x48], r10
movzx eax, word [r10]
sub ax, 0x30
cmp ax, 9
ja 0x140093924
lea rdx, [rsp + 0x10c]
lea rcx, [rsp + 0x48]
call fcn.140066e40
mov ebx, dword [rsp + 0x10c]
mov dword [rsp + 0x118], ebx
mov r10, qword [rsp + 0x48]
cmp word [r12], 0
setne byte [rsp + 0xd3]
movzx eax, word [r10]
mov ecx, 0x23
cmp cx, ax
je 0x14009394e
mov ecx, 0x3a
cmp cx, ax
jne 0x140093a52
add r10, 2
mov qword [rsp + 0x48], r10
mov r8d, 2
mov rdx, r10
lea rcx, [0x1401519b4]
call fcn.14005c510
movzx r11d, al
mov byte [rsp + 0x58], al
mov r8d, 2
mov rdx, r10
lea rcx, [0x1401519b0]
call fcn.14005c510
mov byte [rsp + 0xa8], al
movzx ecx, r11b
or cl, al
sete byte [rsp + 0xd1]
test r11b, r11b
jne 0x1400939c0
mov ecx, 0x2b
cmp cx, word [r10]
jne 0x1400939c0
mov cl, 1
mov dword [rsp + 0x158], ecx
add r10, 2
mov qword [rsp + 0x48], r10
test al, al
jne 0x1400939fb
movzx eax, word [r10]
mov ecx, 0x40
cmp cx, ax
je 0x1400939e6
mov ecx, 0x2d
cmp cx, ax
je 0x1400939e6
mov ecx, 0x3d
cmp cx, ax
jne 0x1400939fb
or r15d, 2
mov dword [rsp + 0x120], r15d
add r10, 2
mov qword [rsp + 0x48], r10
movzx eax, word [r10]
sub ax, 0x30
cmp ax, 9
ja 0x140093a52
lea rdx, [rsp + 0xa4]
lea rcx, [rsp + 0x48]
call fcn.140066e40
test eax, eax
jle 0x140093a47
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x54], eax
test eax, eax
jne 0x140093a3d
mov byte [rsp + 0xbb], 1
mov byte [rsp + 0x58], 1
jmp 0x140093a52
mov byte [rsp + 0xbb], 1
jmp 0x140093a52
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x54], eax
mov edi, ebx
mov dword [rsp + 0x128], ebx
lea r15, [rsp + 0x390]
mov word [rsp + 0x390], r14w
mov rbp, qword [rsp + 0x78]
cmp word [rbp], 0
cmovne r15, rbp
mov qword [rsp + 0x1d8], r15
mov r8d, ebx
lea rdx, str..PhysicalDrive_d
lea rcx, [rsp + 0x390]
call qword [sym.imp.USER32.dll_wsprintfW]
mov r8d, 0x11
mov rdx, r15
lea rcx, str..PhysicalDrive
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x140093adc
lea rax, [r15 + 0x22]
mov qword [rsp + 0x190], rax
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x190]
call fcn.140066e40
mov edi, dword [rsp + 0x128]
movzx edx, byte [rsp + 0xa9]
test dl, dl
jne 0x140093aee
cmp byte [rsp + 0x51], dl
je 0x140093b46
test ebx, ebx
jns 0x140093b46
test edi, edi
jns 0x140093b46
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
mov rbx, r14
mov qword [rsp + 0x168], rbx
or r8, 0xffffffffffffffff
mov r15d, r8d
mov dword [rsp + 0x1e0], r14d
mov eax, dword [rsp + 0x54]
test eax, eax
jg 0x140093b92
cmp byte [rsp + 0x148], 0
jg 0x140093b92
cmp qword [rsp + 0x270], 0
jne 0x140093b92
cmp qword [rsp + 0x238], 0
jne 0x140093b92
mov dword [rsp + 0x10c], r14d
jmp 0x140093b9d
mov dword [rsp + 0x10c], 1
mov byte [rsp + 0x94], 0
mov dword [rsp + 0x90], r8d
mov dword [rsp + 0x1b0], 0x80070057
movzx r9d, byte [rsp + 0xaa]
test r9b, r9b
je 0x140093bf8
test edi, edi
js 0x140093bf8
mov rdx, r14
test r9b, r9b
setg dl
dec rdx
mov ecx, edi
call fcn.14001adb0
mov dword [rsp + 0x1b0], r14d
mov eax, dword [rsp + 0x54]
mov dl, byte [rsp + 0xa9]
mov r9b, byte [rsp + 0xaa]
mov ecx, dword [rsp + 0x124]
test ecx, ecx
jle 0x140093dca
cmp byte [rsp + 0x40], 0
jne 0x140093dca
mov edi, dword [rsp + 0x118]
test edi, edi
jns 0x140093c28
cmp word [rbp], 0
je 0x140093d6c
cmp ecx, eax
je 0x140093d6c
dec eax
cmp eax, 3
ja 0x140093d6c
cmp byte [rsp + 0xa0], 2
jl 0x140093d6c
lea rcx, [rsp + 0x400]
mov rax, qword [str.21:INDATA]
mov qword [rcx], rax
mov rax, qword [0x140151a28]
mov qword [rcx + 8], rax
mov rax, qword [0x140151a30]
mov qword [rcx + 0x10], rax
xor edx, edx
mov r8d, 0x2b8
lea rcx, [rsp + 0x418]
call fcn.14010c6c0
movsx r8d, di
lea rdx, [0x140142b58]
lea rcx, [rsp + 0x380]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [rsp + 0x380]
cmp word [rbp], 0
cmovne r8, rbp
movsx eax, byte [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x124]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x54]
lea rdx, str.__SwapPhyID___.300s___d__d__d
lea rcx, [rsp + 0x416]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x400]
mov rcx, qword [rsp + 0x268]
call fcn.140047384
mov edi, eax
mov dword [rsp + 0x1e0], eax
cmp byte [rsp + 0x51], 0
je 0x140093d11
cmp dword [rsp + 0x118], 0
jge 0x140096476
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
cmp dl, 0x10
jne 0x140093dde
movzx eax, byte [rsp + 0x51]
test al, 0x20
jne 0x140096441
jmp 0x140093de2
mov al, byte [rsp + 0x51]
test r9b, r9b
je 0x140093e09
cmp dword [rsp + 0x10c], 0
jne 0x140093e09
cmp byte [rsp + 0x50], 0
jne 0x140096448
test al, al
je 0x1400964bb
jmp 0x140096450
mov edx, 0x600
lea rcx, [rsp + 0x98]
call fcn.1400632b0
nop
mov rax, qword [rsp + 0x98]
add rax, 0x200
and rax, 0xfffffffffffffe00
mov qword [rsp + 0x250], rax
lea r15, [rax + 0x200]
mov qword [rsp + 0x140], r15
mov r9, qword [rsp + 0x270]
test r9, r9
jne 0x140098838
cmp qword [rsp + 0x238], r9
jne 0x140097e03
mov eax, dword [rsp + 0x148]
cmp al, 1
je 0x140097cd5
cmp al, 2
je 0x140097c6f
cmp al, 3
je 0x140097b86
cmp byte [rsp + 0xa8], r9b
je 0x140093ebf
mov word [rsp + 0x11c], r14w
mov r8d, r14d
mov dword [rsp + 0xec], r14d
mov rdx, r14
mov qword [rsp + 0xd8], rdx
mov rcx, r14
mov qword [rsp + 0xc0], rcx
lea eax, [r9 + 5]
jmp 0x140093edb
mov eax, dword [rsp + 0x54]
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd8]
mov r8d, dword [rsp + 0xec]
cmp byte [rsp + 0x58], 0
mov r9d, 5
cmovne eax, r9d
mov r9d, dword [rsp + 0x170]
test r9b, r9b
je 0x140093f21
mov word [rsp + 0x11c], r14w
mov r8d, r14d
mov dword [rsp + 0xec], r14d
mov rdx, r14
mov qword [rsp + 0xd8], rdx
mov rcx, r14
mov qword [rsp + 0xc0], rcx
cmp byte [rsp + 0xd3], 0
je 0x140093f3c
mov edi, dword [rsp + 0x128]
test edi, edi
js 0x140096530
jmp 0x140093f43
mov edi, dword [rsp + 0x128]
cmp byte [rsp + 0xd1], 0
je 0x140093f55
test eax, eax
js 0x1400965b6
dec eax
mov dword [rsp + 0x54], eax
or rax, 0xffffffffffffffff
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x1a0], rax
mov byte [rsp + 0xf8], 0
mov byte [rsp + 0xfd], 0
mov word [rsp + 0xe4], r14w
mov byte [rsp + 0xc9], 0
mov byte [rsp + 0xd4], 0
mov word [rsp + 0x174], r14w
cmp byte [rsp + 0x40], 0
jne 0x140093fca
test r8d, r8d
jne 0x140093fca
test rcx, rcx
jne 0x140093fca
movzx r9d, r9b
test rdx, rdx
mov eax, 1
cmove r9d, eax
mov dword [rsp + 0x170], r9d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [rsp + 0xd5], 0
je 0x140094010
mov rax, qword [rsp + 0xc0]
test rax, rax
js 0x140094010
cmp qword [rsp + 0xd8], 0x11
jl 0x140094010
mov r8, rax
shl r8, 9
mov r9d, 0x2200
mov edx, edi
lea rcx, [rsp + 0x90]
call fcn.14005f590
test rbx, rbx
je 0x140094024
cmp rbx, 0xffffffffffffffff
je 0x140094024
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x20000000
mov eax, 3
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, eax
mov edx, 0xc0000000
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
cmove rbx, r14
mov qword [rsp + 0x280], rbx
mov qword [rsp + 0x168], rbx
test rbx, rbx
je 0x140097b10
cmp byte [rsp + 0xd5], 0
je 0x1400940d0
mov rax, qword [rsp + 0xc0]
test rax, rax
js 0x1400940c7
cmp qword [rsp + 0xd8], 0x11
jl 0x1400940be
mov rdx, rax
mov rcx, rbx
call fcn.140055650
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
mov edi, r14d
mov dword [rsp + 0x1b0], r14d
jmp 0x1400940d7
mov edi, dword [rsp + 0x1b0]
jmp 0x1400940d7
mov edi, dword [rsp + 0x1b0]
jmp 0x1400940d7
mov edi, dword [rsp + 0x1b0]
mov r8b, 1
xor edx, edx
mov rcx, rbx
call fcn.140068eb0
mov dword [rsp + 0x108], eax
mov al, byte [rsp + 0xa9]
cmp al, 0x10
jne 0x140094110
lea rcx, [rsp + 0x98]
call fcn.14005b520
mov r15d, dword [rsp + 0x108]
jmp 0x140096441
cmp al, 1
je 0x140097a88
mov r8d, dword [rsp + 0xec]
cmp r8d, 0xff
jg 0x140097a0a
mov r9b, byte [rsp + 0x58]
test r9b, r9b
jne 0x140094188
mov eax, dword [rsp + 0x54]
test eax, eax
jns 0x140094192
mov rdx, qword [rsp + 0xc0]
test rdx, rdx
jns 0x14009663c
cmp qword [rsp + 0xd8], 0
jge 0x14009663c
test r8d, r8d
jns 0x14009663c
or rcx, 0xffffffffffffffff
mov r8d, ecx
mov dword [rsp + 0xec], ecx
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xc0], rcx
jmp 0x140094196
mov eax, dword [rsp + 0x54]
or rcx, 0xffffffffffffffff
jmp 0x140094196
or rcx, 0xffffffffffffffff
xor edi, edi
mov qword [rsp + 0x240], rdi
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x1f0], rcx
mov qword [rsp + 0x228], rcx
mov dword [rsp + 0xa4], eax
test r9b, r9b
jne 0x1400941d7
cmp byte [rsp + 0xa8], dil
jne 0x1400941d7
cmp eax, 4
jl 0x140094865
cmp byte [rsp + 0x40], dil
jne 0x140094865
cmp byte [rsp + 0x52], dil
jne 0x140094865
mov r14d, dword [rsp + 0x54]
mov r15b, byte [rsp + 0x58]
test r15b, r15b
mov eax, 4
cmovne r14d, eax
mov dword [rsp + 0x54], r14d
cmp r8d, 5
je 0x140096dfa
cmp r8d, 0xf
je 0x140096dfa
mov dword [rsp + 0xe8], edi
mov edx, 0x100000
lea rcx, [rsp + 0x138]
call fcn.1400632b0
nop
lea r8, [rsp + 0xe8]
mov rdx, qword [rsp + 0x138]
mov rcx, rbx
call fcn.14005f290
mov r9, rax
mov qword [rsp + 0x100], rax
mov ecx, dword [rsp + 0xe8]
mov dword [rsp + 0xcc], ecx
test r15b, r15b
jne 0x14009427b
cmp ecx, r14d
jge 0x14009427b
cmp r14d, 4
jge 0x1400966ba
test r15b, r15b
jne 0x1400942bb
movzx eax, byte [rsp + 0xa8]
test al, al
jne 0x1400942c2
xor r8b, r8b
lea eax, [r14 + 1]
cmp eax, 4
jg 0x14009429c
dec eax
jmp 0x1400942a3
lea eax, [rax*4 - 0x10]
test eax, eax
jle 0x140096749
cmp eax, ecx
jl 0x1400942f7
cmp r14d, 4
jg 0x140096749
jmp 0x1400942f7
mov al, byte [rsp + 0xa8]
mov r8b, 1
test al, al
jne 0x140094301
test r15b, r15b
je 0x1400942f7
cmp dword [rsp + 0xec], 0
jl 0x1400967d8
mov eax, edi
cmp word [rsp + 0x11c], ax
mov edx, 0x80
cmovg ax, dx
mov word [rsp + 0x11c], ax
cmp ecx, 4
jg 0x14009430a
mov r15d, edi
jmp 0x140094312
cmp ecx, 4
jle 0x140096d6b
lea r15d, [rcx - 4]
and r15d, 0xfffffffc
or rcx, 0xffffffffffffffff
mov r14d, ecx
mov dword [rsp + 0xa4], ecx
test r8b, r8b
jne 0x14009433b
mov eax, dword [rsp + 0x54]
cmp eax, 4
jl 0x140094338
lea r15d, [rax*4 - 0x10]
jmp 0x14009433b
mov r15d, edi
mov r10d, ecx
mov eax, edi
lea rdx, [r9 + 0x50]
movzx ecx, byte [rdx]
cmp cl, 5
je 0x140094351
cmp cl, 0xf
jne 0x140094354
mov r10d, eax
inc eax
add rdx, 0x90
cmp eax, 4
jl 0x140094344
test r8b, r8b
je 0x140094370
test r10d, r10d
js 0x140096867
movsxd rax, r10d
lea rcx, [rax + rax*8]
shl rcx, 4
mov rax, qword [rcx + r9 + 0x38]
cqo
and edx, 0x1ff
lea rdi, [rdx + rax]
sar rdi, 9
mov rax, qword [rcx + r9 + 0x40]
cqo
and edx, 0x1ff
lea r9, [rdx + rax]
sar r9, 9
movsxd rdx, r15d
lea r11, [rdx + rdx*8]
shl r11, 4
cmp byte [rsp + 0xa8], 0
je 0x1400944ca
mov eax, dword [rsp + 0xcc]
cmp eax, 8
jne 0x1400943d2
xor r14d, r14d
mov r9d, r14d
jmp 0x140094451
add eax, 0xfffffff8
and eax, 0xfffffffc
xor r14d, r14d
mov r9d, r14d
mov rdx, r14
movsxd r8, eax
lea rax, [r8 + r8*8]
shl rax, 4
mov r10, qword [rsp + 0x100]
lea rcx, [rax + r10 + 0x50]
nop dword [rax]
movzx eax, byte [rcx]
cmp al, 5
je 0x140094424
cmp al, 0xf
je 0x140094424
inc r9d
inc rdx
add rcx, 0x90
cmp rdx, 4
jge 0x140096982
jmp 0x140094400
lea rcx, [r8 + r8*8]
add rcx, rcx
mov rax, qword [r10 + rcx*8 + 0x38]
cqo
and edx, 0x1ff
lea rdi, [rdx + rax]
sar rdi, 9
mov eax, dword [r10 + rcx*8 + 0x54]
sub rdi, rax
test r9d, r9d
js 0x140096982
mov dword [rsp + 0x380], r14d
xor eax, eax
mov dword [rsp + 0x384], eax
mov dword [rsp + 0x388], eax
mov dword [rsp + 0x38c], eax
lea r8, [rsp + 0x380]
mov rdx, rdi
mov rcx, rbx
call fcn.1400691e0
cmp byte [rsp + 0x50], 0
je 0x140094497
mov byte [rsp + 0x50], 0
mov rcx, rbx
call fcn.14005f4f0
cmp byte [rsp + 0x51], 0
je 0x1400968f6
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
mov r15d, dword [rsp + 0x108]
jmp 0x140096441
cmp dword [rsp + 0xcc], 4
jg 0x1400944d9
mov r14d, r10d
jmp 0x140094514
xor ecx, ecx
lea rax, [rdx + rdx*8]
shl rax, 4
mov rdx, qword [rsp + 0x100]
lea rdx, [rax + rdx + 0x50]
movzx eax, byte [rdx]
cmp al, 5
je 0x1400944fb
cmp al, 0xf
jne 0x1400944fe
mov r14d, ecx
inc ecx
add rdx, 0x90
cmp ecx, 4
jl 0x1400944f0
test r8b, r8b
jne 0x140094514
add r14d, r15d
test r14d, r14d
jns 0x140094524
cmp byte [rsp + 0x58], 0
je 0x140096a11
test r8b, r8b
je 0x14009453e
mov dword [rsp + 0xa4], 0
mov r8, qword [rsp + 0x100]
jmp 0x140094597
xor eax, eax
mov r8, qword [rsp + 0x100]
lea rdx, [r11 + r8 + 0x290]
mov esi, dword [rsp + 0xa4]
movzx ecx, byte [rdx]
test cl, cl
jne 0x140094562
test eax, eax
jne 0x14009456d
cmp cl, 5
je 0x14009456d
cmp cl, 0xf
cmovne esi, eax
inc eax
add rdx, 0x90
cmp eax, 4
jl 0x140094557
mov dword [rsp + 0xa4], esi
lea rsi, [0x14019cf18]
cmp dword [rsp + 0xa4], 0
jl 0x140096cdc
cmp byte [rsp + 0x58], 0
je 0x140094785
mov eax, r10d
test r15d, r15d
cmovg eax, r15d
cdqe
lea rcx, [rax + rax*8]
add rcx, rcx
mov r8, qword [r8 + rcx*8 + 0x38]
mov rax, r8
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov qword [rsp + 0x240], rax
cmp dword [rsp + 0xcc], 4
jle 0x14009467b
test r14d, r14d
jns 0x14009467b
mov r8, qword [rsp + 0x100]
cmp byte [r11 + r8 + 0x50], 0
je 0x140096aa0
mov ecx, dword [rsp + 0xcc]
cmp ecx, 8
jle 0x140094616
lea r10d, [rcx - 8]
and r10d, 0xfffffffc
inc r10d
movsxd rax, r10d
lea rax, [rax + rax*8]
add rax, rax
mov rax, qword [r8 + rax*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov qword [rsp + 0x240], rax
mov rax, qword [r11 + r8 + 0x40]
add rax, qword [r11 + r8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov r14, rax
mov qword [rsp + 0x220], rax
sub rax, rdi
mov qword [rsp + 0x1f0], rax
sub r9, r14
add r9, rdi
mov qword [rsp + 0x228], r9
jmp 0x1400946ce
test r15d, r15d
jle 0x1400946aa
mov rdx, qword [rsp + 0x100]
mov rax, qword [rdx + rcx*8 + 0x40]
add rax, r8
cqo
and edx, 0x1ff
lea r14, [rdx + rax]
sar r14, 9
mov qword [rsp + 0x220], r14
jmp 0x1400946b5
mov r14, rax
mov qword [rsp + 0x220], rax
sub r9, r14
add r9, rdi
mov qword [rsp + 0x228], 0
mov ecx, dword [rsp + 0xcc]
test r9, r9
jle 0x140096bbe
cmp byte [rsp + 0xca], 0
je 0x1400946ee
mov rdi, qword [rsp + 0xc0]
add rdi, r14
jmp 0x1400946f6
mov rdi, qword [rsp + 0xc0]
lea rax, [r14 + 1]
cmp rdi, rax
cmovle rdi, rax
mov qword [rsp + 0xc0], rdi
sub r9, rdi
add r9, r14
mov rdi, qword [rsp + 0xd8]
cmp rdi, r9
cmovg rdi, r9
mov qword [rsp + 0xd8], rdi
test rdi, rdi
js 0x140096b2f
test r15d, r15d
jle 0x14009475a
lea eax, [rcx - 1]
and eax, 0xfffffffc
cmp eax, 3
jg 0x140094743
inc eax
jmp 0x14009474f
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
inc eax
mov dword [rsp + 0x54], eax
jmp 0x14009484a
and ecx, 0xfffffffc
cmp ecx, 3
jg 0x14009476e
lea eax, [rcx + 1]
mov dword [rsp + 0x54], eax
jmp 0x14009484a
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
mov dword [rsp + 0x54], eax
jmp 0x14009484a
movsxd rax, r14d
lea rcx, [rax + rax*8]
add rcx, rcx
mov r8, qword [r8 + rcx*8 + 0x38]
lea rax, [r8 + 0x200]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov r14, rax
mov qword [rsp + 0x220], rax
mov rdx, qword [rsp + 0x100]
mov rax, qword [rdx + rcx*8 + 0x40]
sub rax, 0x200
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
cmp byte [rsp + 0xca], 0
je 0x1400947f6
mov rdi, qword [rsp + 0xc0]
add rdi, r14
mov qword [rsp + 0xc0], rdi
jmp 0x1400947fe
mov rdi, qword [rsp + 0xc0]
test rdi, rdi
jle 0x140094812
cmp rdi, r14
cmovle rdi, r14
mov qword [rsp + 0xc0], rdi
mov rdi, qword [rsp + 0xd8]
test rdi, rdi
jle 0x140094837
cmp rdi, rax
cmovg rdi, rax
mov qword [rsp + 0xd8], rdi
test rdi, rdi
js 0x140096c4d
mov rax, r8
cqo
and edx, 0x1ff
lea r14, [rdx + rax]
sar r14, 9
lea rcx, [rsp + 0x138]
call fcn.14005b520
mov r15, qword [rsp + 0x140]
xor edi, edi
mov eax, dword [rsp + 0x54]
cmp eax, 4
setge byte [rsp + 0xd0]
shl r14, 9
mov qword [rsp + 0x1a8], r14
xor edx, edx
mov r8d, 0x200
mov rcx, r15
call fcn.14010c6c0
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
cmp rax, r14
jne 0x140097989
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xe0]
mov r8d, 0x200
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov edi, eax
mov rcx, qword [rsp + 0x250]
mov rdx, r15
mov r8d, 0x200
call fcn.14010cd30
test edi, edi
je 0x140097908
cmp byte [rsp + 0x52], 0
je 0x140094a11
cmp byte [rsp + 0x40], 0
jne 0x140094a11
mov rcx, r15
call fcn.14005f560
xor eax, eax
mov qword [r15 + 0x1be], rax
mov qword [r15 + 0x1c6], rax
mov qword [r15 + 0x1ce], rax
mov qword [r15 + 0x1d6], rax
mov qword [r15 + 0x1de], rax
mov qword [r15 + 0x1e6], rax
mov qword [r15 + 0x1ee], rax
mov qword [r15 + 0x1f6], rax
mov eax, 0xaa55
mov word [r15 + 0x1fe], ax
mov r8d, 0x200
mov rdx, r15
mov rcx, qword [rsp + 0x250]
call fcn.14005b5d0
test eax, eax
je 0x1400949ab
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
xor r14d, r14d
mov dword [rsp + 0xe0], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0xe0]
mov r8d, 0x200
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, r14d
test eax, eax
sete dil
mov dword [rsp + 0x1e0], edi
jmp 0x1400949b5
xor r14d, r14d
mov edi, dword [rsp + 0x1e0]
cmp byte [rsp + 0x50], 0
je 0x1400949dd
mov eax, dword [rsp + 0x118]
test eax, eax
js 0x1400949e4
mov byte [rsp + 0x50], 0
mov rcx, rbx
call fcn.14005f4f0
mov eax, dword [rsp + 0x118]
jmp 0x1400949e4
mov eax, dword [rsp + 0x118]
cmp byte [rsp + 0x51], 0
je 0x140096e7b
test eax, eax
js 0x140096e7b
lea rcx, [rsp + 0x98]
call fcn.14005b520
mov r15d, dword [rsp + 0x108]
jmp 0x140096476
cmp byte [rsp + 0xa0], 0
jne 0x140094a34
cmp byte [rsp + 0xbb], 0
je 0x140094a4a
mov eax, dword [rsp + 0x54]
cmp eax, 1
jle 0x140096ef9
jmp 0x140094a38
mov eax, dword [rsp + 0x54]
cmp byte [rsp + 0xbb], 0
je 0x140094a4a
test eax, eax
js 0x140096f7a
mov rcx, rbx
call fcn.14005ec80
mov r14d, eax
mov dword [rsp + 0x1d0], r14d
mov edx, 0x100000
lea rcx, [rsp + 0x110]
call fcn.1400632b0
nop
xor eax, eax
mov dword [rsp + 0xe0], eax
mov qword [rsp + 0x190], rax
mov rdi, qword [rsp + 0x110]
cmp dword [rsp + 0x128], eax
jl 0x140094aac
mov rdx, rdi
mov rcx, rbx
call fcn.14005ee50
cqo
idiv r14
mov qword [rsp + 0x190], rax
jmp 0x140094afb
lea r8, [rsp + 0x288]
xor edx, edx
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x140094afb
test byte [rsp + 0x288], 0x10
jne 0x140094afb
mov r14d, dword [rsp + 0x2a4]
and r14, 0xfffffffffffffe00
shl r14, 0x17
mov eax, dword [rsp + 0x2a8]
shr rax, 9
or r14, rax
mov qword [rsp + 0x190], r14
lea r8, [rsp + 0xe8]
mov rdx, rdi
mov rcx, rbx
call fcn.14005f290
mov r15, rax
movzx ecx, word [rbp]
test cx, cx
jne 0x140094b25
test rax, rax
je 0x140096ffb
jmp 0x140094b2a
test rax, rax
je 0x140094b30
mov eax, dword [rax]
xor edx, edx
jmp 0x140094b34
xor edx, edx
mov eax, edx
cmp eax, 1
sete r8b
mov byte [rsp + 0x70], r8b
test r8b, r8b
je 0x140094b54
cmp byte [rsp + 0xf9], 0
jne 0x140094b54
mov r14b, 1
jmp 0x140094b57
xor r14b, r14b
cmp byte [rsp + 0xfb], 0
jne 0x140094b85
cmp byte [rsp + 0x52], 0
jne 0x140094b85
test r14b, r14b
je 0x140094b7a
cmp byte [rsp + 0x40], 0
je 0x14009708a
jmp 0x140094b85
cmp byte [rsp + 0x40], 0
jne 0x14009708a
mov rax, qword [rsp + 0x200]
mov dword [rsp + 0xac], eax
mov r9, qword [rsp + 0x248]
mov dword [rsp + 0xcc], r9d
mov r10, qword [rsp + 0x230]
mov eax, r10d
mov dword [rsp + 0xf4], eax
test cx, cx
jne 0x140094caa
mov dword [rsp + 0x288], edx
xor eax, eax
mov dword [rsp + 0x28c], eax
mov dword [rsp + 0x290], eax
mov dword [rsp + 0x294], eax
mov dword [rsp + 0x298], eax
mov dword [rsp + 0x29c], eax
mov qword [rsp + 0x38], rdx
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x18
lea rax, [rsp + 0x288]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x70000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp qword [rsp + 0x200], 0
jg 0x140094c48
movsxd rdx, dword [rsp + 0x294]
mov dword [rsp + 0xac], edx
mov qword [rsp + 0x200], rdx
mov r9, qword [rsp + 0x248]
test r9, r9
jg 0x140094c6f
movsxd rdx, dword [rsp + 0x298]
mov dword [rsp + 0xcc], edx
mov r9, rdx
mov qword [rsp + 0x248], rdx
mov r10, qword [rsp + 0x230]
test r10, r10
jg 0x140094c9e
movsxd rax, dword [rsp + 0x29c]
mov dword [rsp + 0xf4], eax
mov r10, rax
mov qword [rsp + 0x230], rax
movzx r8d, byte [rsp + 0x70]
jmp 0x140094caa
mov eax, dword [rsp + 0xf4]
mov r8b, byte [rsp + 0x70]
cmp qword [rsp + 0x200], 0
jg 0x140094ccc
mov dword [rsp + 0xac], 0xff
mov qword [rsp + 0x200], 0xff
test r9, r9
jg 0x140094ce9
mov dword [rsp + 0xcc], 0x3f
mov ecx, 0x3f
mov qword [rsp + 0x248], rcx
test r10, r10
jg 0x140094d05
mov eax, 0x200
mov dword [rsp + 0xf4], eax
mov rcx, rax
mov qword [rsp + 0x230], rax
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
mov dword [rsp + 0xe8], eax
mov edx, dword [rsp + 0x1d0]
mov qword [rsp + 0x178], rdx
lea rax, [rdi + rdx]
add rax, rdx
mov qword [rsp + 0x100], rax
add rax, 0x10000
mov qword [rsp + 0x130], rax
test r14b, r14b
jne 0x1400957a2
cmp byte [rsp + 0x40], r14b
jne 0x1400957a2
xor r15b, r15b
cmp byte [rsp + 0x170], r15b
jne 0x14009523d
cmp qword [rsp + 0xc0], 0
jge 0x140094d83
cmp qword [rsp + 0xd8], 0
jl 0x14009523d
cmp dword [rsp + 0x54], 0
jl 0x14009523d
mov edx, 0x100000
lea rcx, [rsp + 0x1e8]
call fcn.1400632b0
nop
movsxd r15, dword [rsp + 0xf4]
mov eax, r15d
mov edx, dword [rsp + 0xcc]
imul eax, edx
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
movsxd rdi, eax
mov r10d, dword [rsp + 0xac]
mov ecx, r10d
imul ecx, edi
movsxd r14, ecx
test r15d, r15d
jle 0x140097253
cmp word [rbp], 0
jne 0x140094e4d
mov dword [rsp + 0xf4], 0
lea r8, [rsp + 0xf4]
mov rdx, qword [rsp + 0x1e8]
mov rcx, rbx
call fcn.14005f290
test rax, rax
je 0x1400971b6
mov eax, dword [rsp + 0x54]
cmp eax, 4
jl 0x140094e3b
cmp byte [rsp + 0x58], 0
jne 0x140094e31
cmp eax, dword [rsp + 0xf4]
jge 0x140097119
jmp 0x140094e45
mov r10d, dword [rsp + 0xac]
jmp 0x140094e4d
mov r10d, dword [rsp + 0xac]
jmp 0x140094e4d
mov r10d, dword [rsp + 0xac]
xor r9d, r9d
mov rax, r9
mov r11, qword [rsp + 0xc0]
test r11, r11
jle 0x140094eeb
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xffffffffffffffff
jne 0x140094eac
cmp r11, r14
jl 0x140094e8d
cmp byte [rsp + 0xd0], al
jne 0x140094e8d
mov rdx, r14
mov rcx, r11
call fcn.14005f420
jmp 0x140094e98
mov rdx, rdi
mov rcx, r11
call fcn.14005f420
add r11, rax
mov qword [rsp + 0xc0], r11
mov edi, dword [rsp + 0xe8]
jmp 0x140094efb
cmp byte [rsp + 0xd2], al
jne 0x140094ef4
lea rax, [r15 + rdx - 1]
cqo
idiv r15
movsxd rdi, dword [rsp + 0xe8]
imul rax, rdi
mov qword [rsp + 0xb0], rax
mov rdx, rax
mov rcx, r11
call fcn.14005f420
add r11, rax
mov qword [rsp + 0xc0], r11
jmp 0x140094efb
mov edi, dword [rsp + 0xe8]
jmp 0x140094efb
mov edi, dword [rsp + 0xe8]
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
jle 0x140094f21
cmp byte [rsp + 0xf0], r9b
jne 0x140094f21
sub rcx, rax
cmovs rcx, r9
mov qword [rsp + 0xd8], rcx
mov r8, r9
test r11, r11
cmovg r8, r11
test rcx, rcx
jle 0x140094fa2
mov rax, qword [rsp + 0x218]
cmp rax, 0xffffffffffffffff
jne 0x140094f54
lea rax, [r8 + rcx]
cqo
idiv r14
sub rcx, rdx
mov qword [rsp + 0xd8], rcx
jmp 0x140094fa2
cmp byte [rsp + 0xd2], r9b
jne 0x140094fa2
lea rax, [r15 + rax - 1]
cqo
idiv r15
imul rax, r15
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov r14, rax
mov qword [rsp + 0x218], rax
mov rcx, qword [rsp + 0xd8]
lea rax, [r8 + rcx]
cqo
idiv r14
sub rcx, rdx
mov qword [rsp + 0xd8], rcx
mov byte [rsp + 0x70], r9b
mov byte [rsp + 0xb9], r9b
mov byte [rsp + 0xbc], r9b
mov rax, qword [rsp + 0x228]
test rax, rax
jle 0x14009512a
mov rax, rcx
mov r14, qword [rsp + 0x220]
sub rax, r14
add rax, r11
movsxd rcx, edi
cqo
idiv rcx
mov qword [rsp + 0x228], rax
mov dword [rsp + 0x180], r9d
xor eax, eax
mov dword [rsp + 0x184], eax
mov dword [rsp + 0x188], eax
mov dword [rsp + 0x18c], eax
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], r10d
mov r15d, dword [rsp + 0xcc]
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0xbc]
lea r8, [rsp + 0xb9]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x1f0]
call fcn.14005f440
mov byte [rsp + 0x180], 0
movzx eax, byte [rsp + 0xb9]
mov byte [rsp + 0x181], al
movzx eax, byte [rsp + 0xbc]
mov byte [rsp + 0x182], al
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x183], al
mov rax, qword [rsp + 0x1f0]
lea rcx, [rax + rax - 1]
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0xbc]
lea r8, [rsp + 0xb9]
lea rdx, [rsp + 0x70]
call fcn.14005f440
mov byte [rsp + 0x184], 5
movzx eax, byte [rsp + 0xb9]
mov byte [rsp + 0x185], al
movzx ecx, byte [rsp + 0xbc]
mov byte [rsp + 0x186], cl
movzx ecx, byte [rsp + 0x70]
mov byte [rsp + 0x187], cl
mov rax, qword [rsp + 0x1f0]
mov dword [rsp + 0x188], eax
mov rax, qword [rsp + 0x228]
mov dword [rsp + 0x18c], eax
mov r9d, 1
lea r8, [rsp + 0x180]
mov rdx, qword [rsp + 0x240]
mov rcx, rbx
call fcn.1400691e0
xor r9d, r9d
mov r11, qword [rsp + 0xc0]
jmp 0x14009513a
mov r14, qword [rsp + 0x220]
mov r15d, dword [rsp + 0xcc]
movsxd rcx, edi
mov rax, r14
cqo
idiv rcx
mov r10, rax
test r11, r11
js 0x140095162
mov rax, r11
cqo
idiv rcx
mov r14, rax
mov qword [rsp + 0x1c8], rax
jmp 0x14009516d
mov r14, r9
mov qword [rsp + 0x1c8], r9
mov rax, qword [rsp + 0xd8]
test rax, rax
js 0x140095189
cqo
idiv rcx
mov qword [rsp + 0x1a0], rax
jmp 0x140095191
mov qword [rsp + 0x1a0], r9
mov eax, r9d
cmp dword [rsp + 0x54], 4
setge al
mov dword [rsp + 0x30], eax
mov edi, dword [rsp + 0xac]
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0xf8]
lea r8, [rsp + 0xfd]
lea rdx, [rsp + 0xe4]
mov rcx, r14
call fcn.14005f440
cmp qword [rsp + 0xc0], 0
jle 0x1400951e6
sub r14, r10
mov qword [rsp + 0x1c8], r14
mov rax, qword [rsp + 0x1a0]
lea ecx, [rax + r14 - 1]
movsx r15d, byte [rsp + 0xd0]
mov eax, r15d
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], edi
mov edx, dword [rsp + 0xcc]
mov dword [rsp + 0x20], edx
lea r9, [rsp + 0xc9]
lea r8, [rsp + 0xd4]
lea rdx, [rsp + 0x174]
call fcn.14005f440
nop
lea rcx, [rsp + 0x1e8]
call fcn.14005b520
mov edi, dword [rsp + 0xa4]
shl edi, 4
movsxd r14, edi
mov rcx, qword [rsp + 0x250]
mov rdx, qword [rsp + 0x140]
mov r8d, 0x200
call fcn.14010cd30
cmp qword [rsp + 0x228], 0
jl 0x1400952c2
cmp dword [rsp + 0xa4], 0
jle 0x140095293
mov rcx, qword [rsp + 0x140]
add rcx, 0x1be
mov r8, r14
xor edx, edx
call fcn.14010c6c0
mov eax, 3
sub eax, dword [rsp + 0xa4]
shl eax, 4
movsxd r8, eax
lea eax, [rdi + 0x10]
movsxd rcx, eax
mov rax, qword [rsp + 0x140]
lea rcx, [rcx + rax + 0x1be]
xor edx, edx
call fcn.14010c6c0
mov r8, qword [rsp + 0x140]
movzx eax, byte [r14 + r8 + 0x1c2]
mov r9b, byte [rsp + 0x58]
test r9b, r9b
jne 0x1400952fd
mov r10b, byte [rsp + 0xa0]
cmp r10b, 2
jge 0x140095305
cmp al, 5
je 0x1400972f0
cmp al, 0xf
je 0x1400972f0
jmp 0x140095305
mov r10b, byte [rsp + 0xa0]
mov edx, dword [r14 + r8 + 0x1c6]
mov ecx, dword [r14 + r8 + 0x1ca]
test r9b, r9b
jne 0x14009538e
test al, al
je 0x1400953c2
cmp dword [rsp + 0xec], 0
je 0x1400953a8
cmp r10b, 2
jge 0x1400953dc
cmp byte [rsp + 0xd0], r9b
jne 0x1400953f6
mov rdi, qword [rsp + 0xc0]
test rdi, rdi
js 0x14009535f
cmp qword [rsp + 0x1c8], rdx
jne 0x14009737f
mov r11, qword [rsp + 0xd8]
test r11, r11
js 0x140095410
mov r9, qword [rsp + 0x1a0]
cmp r9, rcx
je 0x140095418
test ecx, ecx
jne 0x14009737f
jmp 0x140095418
mov r9, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
mov r11, qword [rsp + 0xd8]
jmp 0x140095418
mov r9, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
mov r11, qword [rsp + 0xd8]
jmp 0x140095418
mov r9, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
mov r11, qword [rsp + 0xd8]
jmp 0x140095418
mov r9, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
mov r11, qword [rsp + 0xd8]
jmp 0x140095418
mov r9, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
mov r11, qword [rsp + 0xd8]
jmp 0x140095418
mov r9, qword [rsp + 0x1a0]
cmp byte [rsp + 0x170], 0
je 0x140095438
xor eax, eax
mov ecx, eax
mov edx, eax
mov r10, rax
mov r9, rax
mov qword [rsp + 0x1a0], rax
jmp 0x140095440
mov r10, qword [rsp + 0x1c8]
mov eax, dword [rsp + 0xec]
test eax, eax
js 0x140095453
mov byte [r14 + r8 + 0x1c2], al
mov eax, dword [rsp + 0x11c]
test ax, ax
js 0x140095467
mov byte [r14 + r8 + 0x1be], al
test rdi, rdi
jns 0x14009547c
test r11, r11
js 0x14009551b
lea ecx, [r9 + rdx - 1]
jmp 0x140095486
test r11, r11
jns 0x1400954d9
lea ecx, [r10 + rcx - 1]
movsx eax, r15b
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xcc]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0xc9]
lea r8, [rsp + 0xd4]
lea rdx, [rsp + 0x174]
call fcn.14005f440
mov r8, qword [rsp + 0x140]
mov r9, qword [rsp + 0x1a0]
mov r11, qword [rsp + 0xd8]
test rdi, rdi
js 0x140095516
movzx eax, byte [rsp + 0xfd]
mov byte [r14 + r8 + 0x1bf], al
movzx eax, byte [rsp + 0xf8]
mov byte [r14 + r8 + 0x1c0], al
movzx eax, word [rsp + 0xe4]
mov byte [r14 + r8 + 0x1c1], al
mov dword [r14 + r8 + 0x1c6], r10d
test r11, r11
jns 0x140095520
test rdi, rdi
js 0x140095550
movzx eax, byte [rsp + 0xd4]
mov byte [r14 + r8 + 0x1c3], al
movzx eax, byte [rsp + 0xc9]
mov byte [r14 + r8 + 0x1c4], al
movzx eax, byte [rsp + 0x174]
mov byte [r14 + r8 + 0x1c5], al
test r11, r11
js 0x14009555d
mov dword [r14 + r8 + 0x1ca], r9d
mov eax, dword [rsp + 0xec]
test eax, eax
jns 0x140095580
mov ecx, dword [rsp + 0x11c]
test cx, cx
jns 0x140095587
test rdi, rdi
jns 0x140095587
test r11, r11
js 0x140095597
jmp 0x140095587
mov ecx, dword [rsp + 0x11c]
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
test cx, cx
jns 0x1400955ba
test eax, eax
jns 0x1400955ba
test rdi, rdi
jns 0x1400955ba
test r11, r11
jns 0x1400955ba
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
xor r8d, r8d
mov r14, qword [rsp + 0x1a8]
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
cmp rax, r14
jne 0x140097531
mov edi, 1
test r14, r14
jne 0x1400955f5
mov r15, qword [rsp + 0x140]
mov rcx, r15
call fcn.14005f560
jmp 0x1400955fd
mov r15, qword [rsp + 0x140]
mov r8d, 0x200
mov rdx, r15
mov rcx, qword [rsp + 0x250]
call fcn.14005b5d0
test eax, eax
je 0x140095644
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xe0]
mov r8d, 0x200
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, eax
mov rcx, rbx
call fcn.14005f4c0
mov r14, qword [rsp + 0xc0]
cmp r14, 0x200
jl 0x140095758
cmp qword [rsp + 0xd8], 0x200
jle 0x140095753
cmp byte [rsp + 0xfc], 0
je 0x14009574e
xor edx, edx
mov r8d, 0x200
mov rcx, r15
call fcn.14010c6c0
shl r14, 9
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
cmp rax, r14
je 0x1400956ab
xor r14d, r14d
mov edi, r14d
jmp 0x14009575b
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xe0]
mov r8d, 0x200
mov rdx, qword [rsp + 0x250]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov edi, eax
test eax, eax
je 0x140095741
cmp dword [rsp + 0xe0], 0x200
jne 0x140095741
mov r8d, 0x200
mov rdx, r15
mov rcx, qword [rsp + 0x250]
call fcn.14005b5d0
test eax, eax
je 0x140095749
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
cmp rax, r14
je 0x14009571b
xor r14d, r14d
mov edi, r14d
jmp 0x14009575b
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0xe0]
mov r8d, 0x200
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, eax
jmp 0x14009575b
xor r14d, r14d
mov edi, r14d
jmp 0x14009575b
xor r14d, r14d
jmp 0x14009575b
xor r14d, r14d
jmp 0x14009575b
xor r14d, r14d
jmp 0x14009575b
xor r14d, r14d
cmp byte [rsp + 0x50], 0
je 0x14009576f
mov byte [rsp + 0x50], 0
mov rcx, rbx
call fcn.14005f4f0
cmp byte [rsp + 0x51], 0
je 0x14009740e
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
mov r15d, dword [rsp + 0x108]
jmp 0x140096441
mov eax, dword [rsp + 0x158]
movzx eax, al
cmp byte [rsp + 0x170], 0
mov r9d, 0
cmovne eax, r9d
mov dword [rsp + 0x158], eax
test r8b, r8b
je 0x1400957e2
movzx r11d, byte [rsp + 0x52]
test r11b, r11b
jne 0x1400957e7
mov ecx, dword [r15 + 0x28]
mov dword [rsp + 0xe4], ecx
jmp 0x1400957f3
mov r11b, byte [rsp + 0x52]
mov ecx, 0x80
mov dword [rsp + 0xe4], ecx
mov r10, qword [rsp + 0xd8]
mov rax, r10
mov qword [rsp + 0x1a8], rax
cmp byte [rsp + 0xfa], r9b
je 0x140095827
mov r8, qword [rsp + 0xc0]
lea rax, [r10 + r8 - 1]
mov qword [rsp + 0x1a8], rax
jmp 0x14009582f
mov r8, qword [rsp + 0xc0]
mov qword [rsp + 0x1c8], r9
test r11b, r11b
je 0x140095874
cmp r8, 1
mov r14d, 1
cmovl r8, r14
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0x1c8], rax
cmp rax, r14
jge 0x14009587a
mov rax, qword [rsp + 0x190]
dec rax
mov qword [rsp + 0x1c8], rax
jmp 0x14009587a
mov r14d, 1
mov rax, r9
test r11b, r11b
cmovne rax, r8
lea r8, [rsp + 0x1c8]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rax
mov r9d, edx
mov r8d, ecx
mov rdx, rdi
lea rcx, [rsp + 0x168]
call fcn.140068cf0
mov qword [rsp + 0x240], rax
mov r15b, byte [rsp + 0x70]
test r15b, r15b
jne 0x1400958cd
test rax, rax
cmove rax, r14
mov qword [rsp + 0x240], rax
movsxd r10, dword [rsp + 0xe4]
movsxd r9, dword [rsp + 0x54]
cmp r9d, r10d
jae 0x14009591d
cmp dword [rsp + 0x124], r10d
jge 0x140095913
mov rcx, r9
shl rcx, 7
mov r11, qword [rsp + 0x100]
add rcx, r11
mov r8d, 0x10
lea rdx, [0x14014cce0]
call fcn.14005b5d0
test eax, eax
jne 0x140095928
jmp 0x140095925
mov r11, qword [rsp + 0x100]
jmp 0x140095925
mov r11, qword [rsp + 0x100]
xor r14d, r14d
mov cl, byte [rsp + 0x52]
test cl, cl
je 0x140095b9c
cmp r9d, r10d
jae 0x1400975c0
mov r14, r11
mov rax, r10
shl rax, 7
xor edx, edx
mov rcx, qword [rsp + 0x178]
div rcx
test eax, eax
jle 0x1400959d1
mov r15d, eax
mov rsi, rcx
nop
xor edx, edx
mov r8d, 0x1b3
mov rcx, r14
call fcn.14010c6c0
xor eax, eax
mov qword [r14 + 0x1b4], rax
mov qword [r14 + 0x1bc], rax
mov qword [r14 + 0x1c4], rax
mov qword [r14 + 0x1cc], rax
mov qword [r14 + 0x1d4], rax
mov qword [r14 + 0x1dc], rax
mov qword [r14 + 0x1e4], rax
mov qword [r14 + 0x1ec], rax
mov qword [r14 + 0x1f4], rax
mov word [r14 + 0x1fc], ax
add r14, rsi
sub r15, 1
jne 0x140095960
lea rsi, [0x14019cf18]
mov rcx, qword [rsp + 0x178]
xor edx, edx
lea r8d, [rdx + 0x5c]
lea r14, [rdi + rcx]
mov rcx, r14
call fcn.14010c6c0
movabs rax, 0x5452415020494645
mov qword [r14], rax
mov dword [r14 + 8], 0x10000
mov dword [r14 + 0xc], 0x5c
mov rdx, qword [rsp + 0xc0]
mov qword [r14 + 0x18], rdx
mov rcx, qword [rsp + 0x1c8]
mov qword [r14 + 0x20], rcx
lea rax, [rdx + 0x21]
mov qword [r14 + 0x28], rax
lea rax, [rcx - 0x20]
mov qword [r14 + 0x30], rax
cmp qword [r14 + 0x38], 0
jne 0x140095a45
mov rax, qword [0x140151960]
mov qword [r14 + 0x38], rax
mov rax, qword [0x140151968]
mov qword [r14 + 0x40], rax
lea rax, [rdx + 1]
mov qword [r14 + 0x48], rax
mov eax, 0x80
mov dword [r14 + 0x50], eax
mov dword [r14 + 0x54], eax
mov r15, qword [rsp + 0x130]
mov rcx, r15
mov rdx, r14
lea r8d, [rax - 0x24]
call fcn.14010cd30
mov r11, qword [r14 + 0x20]
mov qword [r15 + 0x18], r11
mov rax, qword [r14 + 0x18]
mov qword [r15 + 0x20], rax
xor eax, eax
mov qword [rdi + 0x1be], rax
mov qword [rdi + 0x1c6], rax
mov qword [rdi + 0x1ce], rax
mov qword [rdi + 0x1d6], rax
mov qword [rdi + 0x1de], rax
mov qword [rdi + 0x1e6], rax
mov qword [rdi + 0x1ee], rax
mov qword [rdi + 0x1f6], rax
mov r15, qword [rsp + 0x1a8]
cmp r15, 1
mov r8, 0xffffffffffffffff
cmovl r15, r8
movsxd rax, dword [rsp + 0x54]
mov r14, rax
add r14, r14
mov dword [rdi + r14*8 + 0x1c2], 0xee
mov r10d, eax
shl r10d, 4
lea eax, [r10 + 0x1bf]
movsxd r8, eax
add r8, rdi
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x30], 1
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xcc]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0xc0]
call fcn.14005f440
lea r9d, [r10 + 0x1c3]
movsxd r8, r9d
add r8, rdi
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x30], 1
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xcc]
mov dword [rsp + 0x20], eax
mov rcx, r15
call fcn.14005f440
mov rax, qword [rsp + 0xc0]
mov dword [rdi + r14*8 + 0x1c6], eax
mov dword [rdi + r14*8 + 0x1ca], r15d
mov r10d, dword [rsp + 0xe4]
mov r15, qword [rsp + 0x100]
mov cl, byte [rsp + 0x52]
jmp 0x140096080
cmp byte [rsp + 0xc8], 0
je 0x140095baf
test r9d, r9d
js 0x140096078
cmp byte [rsp + 0x58], 0
je 0x140095c4f
xor cl, cl
mov dword [rsp + 0x158], ecx
mov dword [rsp + 0x54], 0xffffffff
xor r9d, r9d
test r10d, r10d
je 0x140095c48
nop word [rax + rax]
mov ecx, r9d
shl rcx, 7
add rcx, r11
mov r8d, 0x10
lea rdx, [0x14014cce0]
call fcn.14005b5d0
test eax, eax
je 0x140095c16
inc r9d
cmp r9d, r10d
jb 0x140095be0
mov r9d, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x158]
jmp 0x140095c56
mov dword [rsp + 0x54], r9d
mov ecx, r9d
shl rcx, 7
add rcx, r11
xor edx, edx
mov r8d, 0x80
call fcn.14010c6c0
mov r10d, dword [rsp + 0xe4]
mov r9d, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x158]
jmp 0x140095c56
mov r9d, dword [rsp + 0x54]
jmp 0x140095c56
mov ecx, dword [rsp + 0x158]
mov eax, dword [rsp + 0x124]
dec eax
mov dword [rsp + 0x124], eax
cmp r9d, r10d
jae 0x140097879
cmp eax, r10d
jge 0x140097879
test cl, cl
je 0x140095e0c
xor ecx, ecx
test r15b, r15b
je 0x140095d02
mov r14, qword [rsp + 0x100]
lea rax, [r14 + 0x20]
mov rdx, qword [rsp + 0xc0]
mov r8d, 0x80
cmp ecx, r10d
jae 0x140095d11
cmp qword [rax], rdx
je 0x140095cb2
inc ecx
add rax, r8
jmp 0x140095ca1
mov r9d, ecx
shl r9, 7
add r9, r14
mov eax, dword [0x14014cce0]
mov dword [r9], eax
mov eax, dword [0x14014cce4]
mov dword [r9 + 4], eax
mov eax, dword [0x14014cce8]
mov dword [r9 + 8], eax
mov eax, dword [0x14014ccec]
mov dword [r9 + 0xc], eax
cmp ecx, dword [rsp + 0x54]
je 0x140095d0c
xor edx, edx
mov rcx, r9
call fcn.14010c6c0
mov r10d, dword [rsp + 0xe4]
mov r9d, dword [rsp + 0x54]
jmp 0x140095d11
mov r14, qword [rsp + 0x100]
jmp 0x140095d11
mov r9d, dword [rsp + 0x54]
movsxd r9, r9d
shl r9, 7
add r9, r14
mov qword [rsp + 0x190], r9
mov r11d, 0x10
mov r8d, r11d
lea rdx, [0x14014cce0]
mov rcx, r9
call fcn.14005b5d0
test eax, eax
je 0x140095ded
mov r15d, dword [rsp + 0x54]
inc r15d
cmp r15d, r10d
jae 0x14009764f
nop word [rax + rax]
mov ecx, r15d
shl rcx, 7
add rcx, r14
mov r8d, r11d
lea rdx, [0x14014cce0]
call fcn.14005b5d0
test eax, eax
je 0x140095d8b
inc r15d
cmp r15d, r10d
jae 0x14009764f
jmp 0x140095d60
movsxd rcx, r15d
mov edx, dword [rsp + 0x54]
cmp r15d, edx
jle 0x140095de4
shl rcx, 7
add rcx, r14
mov esi, r15d
sub esi, edx
mov r13d, 0x80
nop dword [rax]
lea r14, [rcx - 0x80]
mov rdx, r14
mov r8, r13
call fcn.14010cd30
mov rcx, r14
sub rsi, 1
jne 0x140095db0
lea rsi, [0x14019cf18]
mov r13, qword [rsp + 0x68]
mov r9, qword [rsp + 0x190]
mov r10d, dword [rsp + 0xe4]
cmp r15d, r10d
jae 0x14009764f
xor edx, edx
mov r8d, 0x80
mov rcx, r9
call fcn.14010c6c0
xor r14d, r14d
mov r9d, dword [rsp + 0x54]
mov eax, dword [rsp + 0x124]
test eax, eax
jns 0x140095f94
test r14d, r14d
jne 0x140095e4a
mov eax, 1
mov dword [rsp + 0x210], eax
mov dword [rsp + 0x208], eax
mov dword [rsp + 0x1b8], eax
mov dword [rsp + 0x278], eax
mov dword [rsp + 0x20c], eax
mov dword [rsp + 0x198], eax
jmp 0x140095e54
cmp dword [rsp + 0x278], 0
jle 0x140095e8b
movsxd rcx, r9d
shl rcx, 7
lea r8, [rsp + 0x2d8]
mov eax, dword [r8]
mov rdx, qword [rsp + 0x100]
mov dword [rcx + rdx], eax
mov eax, dword [r8 + 4]
mov dword [rcx + rdx + 4], eax
mov eax, dword [r8 + 8]
mov dword [rcx + rdx + 8], eax
mov eax, dword [r8 + 0xc]
mov dword [rcx + rdx + 0xc], eax
jmp 0x140095e93
mov rdx, qword [rsp + 0x100]
cmp dword [rsp + 0x1b8], 0
jle 0x140095ecb
movsxd rcx, r9d
shl rcx, 7
lea r8, [rsp + 0x2e8]
mov eax, dword [r8]
mov dword [rcx + rdx + 0x10], eax
mov eax, dword [r8 + 4]
mov dword [rcx + rdx + 0x14], eax
mov eax, dword [r8 + 8]
mov dword [rcx + rdx + 0x18], eax
mov eax, dword [r8 + 0xc]
mov dword [rcx + rdx + 0x1c], eax
cmp dword [rsp + 0x208], 0
jle 0x140095ee9
movsxd rax, r9d
shl rax, 7
mov rcx, qword [rsp + 0xc0]
mov qword [rax + rdx + 0x20], rcx
cmp dword [rsp + 0x210], 0
jle 0x140095f07
movsxd rax, r9d
shl rax, 7
mov r15, qword [rsp + 0x1a8]
mov qword [rax + rdx + 0x28], r15
cmp dword [rsp + 0x20c], 0
jle 0x140095f25
movsxd rax, r9d
shl rax, 7
mov rcx, qword [rsp + 0x260]
mov qword [rax + rdx + 0x30], rcx
cmp dword [rsp + 0x198], 0
jle 0x140096020
mov r10, qword [rsp + 0x150]
cmp word [r10], 0
je 0x140096018
movsxd rax, r9d
shl rax, 7
lea rcx, [rax + rdx + 0x38]
xor eax, eax
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rax
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rax
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], rax
mov qword [rcx + 0x40], rax
lea r8d, [rax + 0x24]
mov rdx, r10
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
mov r9d, dword [rsp + 0x54]
mov r14d, 0x80
jmp 0x14009602e
cmp eax, r9d
je 0x140096028
movsxd r15, r9d
shl r15, 7
mov r14, qword [rsp + 0x100]
add r15, r14
lea rcx, [rsp + 0x300]
mov rdx, r15
mov r8d, 0x80
call fcn.14010cd30
movsxd r11, dword [rsp + 0x124]
shl r11, 7
add r14, r11
mov rcx, r15
mov rdx, r14
mov r8d, 0x80
call fcn.14010cd30
mov rcx, r14
lea rdx, [rsp + 0x300]
mov r14d, 0x80
mov r8, r14
call fcn.14010cd30
mov r9d, dword [rsp + 0x54]
mov eax, dword [rsp + 0x124]
cmp r9d, eax
cmovl r9d, eax
mov dword [rsp + 0x54], r9d
jmp 0x14009602e
mov r14d, 0x80
jmp 0x14009602e
mov r14d, 0x80
jmp 0x14009602e
mov r14d, 0x80
cmp byte [rsp + 0x170], 0
je 0x140096062
movsxd rcx, r9d
shl rcx, 7
mov r15, qword [rsp + 0x100]
add rcx, r15
mov r8, r14
xor edx, edx
call fcn.14010c6c0
mov r10d, dword [rsp + 0xe4]
mov cl, byte [rsp + 0x52]
jmp 0x140096080
mov r10d, dword [rsp + 0xe4]
mov r15, qword [rsp + 0x100]
mov cl, byte [rsp + 0x52]
jmp 0x140096080
mov r15, qword [rsp + 0x100]
xor eax, eax
mov r14d, eax
mov dword [rsp + 0xe8], eax
cmp byte [rsp + 0xc8], al
je 0x140096226
test cl, cl
jne 0x140096226
mov dword [rsp + 0xa4], eax
mov r9, rax
mov qword [rsp + 0x190], rax
test r10d, r10d
jle 0x140096226
mov r13, r15
mov r12, r15
mov rsi, rax
mov ebp, dword [rsp + 0xe4]
xor edi, edi
mov ebx, 0x10
lea r11d, [rbx + 0x70]
nop word [rax + rax]
mov r8d, ebx
lea rdx, [0x14014cce0]
mov rcx, r15
call fcn.14005b5d0
test eax, eax
sete al
test al, al
jne 0x140096105
cmp r9, rsi
jne 0x140096105
mov r14d, edi
jmp 0x14009610b
mov r14d, 1
mov dword [rsp + 0xf4], edi
test al, al
jne 0x140096159
cmp r9, rsi
je 0x140096153
mov r8d, ebx
mov rdx, r15
mov rcx, r15
call fcn.14005b5d0
mov ecx, edi
test eax, eax
sete cl
mov dword [rsp + 0xf4], ecx
mov rcx, r13
mov rdx, r12
mov r8, r11
call fcn.14010cd30
inc rsi
mov r11d, 0x80
add r13, r11
jmp 0x140096159
inc rsi
add r13, r11
test r14d, r14d
je 0x14009619b
mov rcx, r15
lea rdx, [r15 + 0x80]
cmp r15, rdx
jae 0x14009618e
nop dword [rax]
mov rax, qword [rcx]
add rcx, 8
test rax, rax
jne 0x140096183
cmp rcx, rdx
jb 0x140096170
jmp 0x14009618e
mov dword [rsp + 0xf4], 1
mov r8, r11
xor edx, edx
mov rcx, r15
call fcn.14010c6c0
cmp dword [rsp + 0xf4], edi
je 0x1400961ba
mov r10d, dword [rsp + 0xa4]
lea r14d, [r10 + 1]
mov dword [rsp + 0xe8], r14d
jmp 0x1400961ca
mov r10d, dword [rsp + 0xa4]
mov r14d, dword [rsp + 0xe8]
inc r10d
mov dword [rsp + 0xa4], r10d
mov r11d, 0x80
add r15, r11
mov r9, qword [rsp + 0x190]
inc r9
mov qword [rsp + 0x190], r9
add r12, r11
cmp r10d, ebp
jl 0x1400960e0
mov rbx, qword [rsp + 0x280]
mov rdi, qword [rsp + 0x110]
lea rsi, [0x14019cf18]
mov rbp, qword [rsp + 0x78]
mov r12, qword [rsp + 0x80]
mov r13, qword [rsp + 0x68]
mov rcx, rdi
call fcn.14005f560
mov rax, qword [rsp + 0x178]
lea r15, [rdi + rax]
lea rcx, [r15 - 0x174]
call fcn.14005f560
mov eax, dword [rsp + 0x54]
cmp r14d, eax
jg 0x140096253
lea r14d, [rax + 1]
cmp byte [rsp + 0x52], 0
mov eax, dword [rsp + 0xe4]
cmovne r14d, eax
shl r14d, 7
mov dword [rsp + 0xe8], r14d
shl eax, 7
xor r8d, r8d
mov edx, eax
mov r14, qword [rsp + 0x100]
mov rcx, r14
call fcn.14006fe70
mov dword [r15 + 0x58], eax
mov dword [r14 + 0x10058], eax
mov dword [r15 + 0x10], 0
mov r14d, dword [r15 + 0xc]
cmp r14d, 0x20000
ja 0x1400977ea
xor r8d, r8d
mov edx, r14d
mov rcx, r15
call fcn.14006fe70
mov dword [r15 + 0x10], eax
mov rax, qword [rsp + 0x130]
mov dword [rax + 0x10], 0
xor r8d, r8d
mov edx, r14d
mov rcx, rax
call fcn.14006fe70
mov rcx, qword [rsp + 0x130]
mov dword [rcx + 0x10], eax
mov eax, dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x1d0]
lea eax, [rcx + rax - 1]
xor edx, edx
div ecx
mov r14d, eax
imul r14d, ecx
cmp byte [rsp + 0x52], 0
je 0x14009633b
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14005c450
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2c0]
mov r8d, dword [rsp + 0x1d0]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdx, qword [rsp + 0x178]
imul rdx, qword [rsp + 0x240]
xor r8d, r8d
mov rcx, rbx
call fcn.14005c450
mov r8d, dword [rsp + 0x1d0]
add r8d, r14d
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2b8]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdi, qword [rsp + 0x1c8]
lea rdx, [rdi - 0x20]
imul rdx, qword [rsp + 0x178]
xor r8d, r8d
mov rcx, rbx
call fcn.14005c450
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x2bc]
mov r8d, r14d
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdx, qword [rsp + 0x178]
imul rdx, rdi
xor r8d, r8d
mov rcx, rbx
call fcn.14005c450
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x2c4]
mov r8d, dword [rsp + 0x1d0]
mov rdx, qword [rsp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp byte [rsp + 0x50], r14b
je 0x140096413
mov byte [rsp + 0x50], r14b
mov rcx, rbx
call fcn.14005f4f0
cmp byte [rsp + 0x51], r14b
je 0x14009775e
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
mov r15d, dword [rsp + 0x108]
cmp byte [rsp + 0x50], 0
je 0x140096450
mov rcx, rbx
call fcn.14005f4f0
test rbx, rbx
je 0x140096464
cmp rbx, 0xffffffffffffffff
je 0x140096464
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, r14
mov qword [rsp + 0x168], rbx
mov edi, dword [rsp + 0x1e0]
mov eax, r14d
test byte [rsp + 0x51], 0x20
jne 0x140096486
cmp r15d, 0xc
je 0x140096493
mov rcx, qword [rsp + 0x1d8]
call fcn.140068690
mov r9b, byte [rsp + 0xaa]
test r9b, r9b
je 0x1400976de
cmp dword [rsp + 0x10c], 0
je 0x1400976de
mov al, byte [rsp + 0x51]
jmp 0x140093de2
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x1400964de
cmp rbx, 0xffffffffffffffff
je 0x1400964de
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400964ed
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140096561
cmp rbx, 0xffffffffffffffff
je 0x140096561
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096570
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x1400965e7
cmp rbx, 0xffffffffffffffff
je 0x1400965e7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400965f6
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096668
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096677
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400966f4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096703
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096783
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096792
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096812
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096821
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400968a1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400968b0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096930
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x14009693f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400969bc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400969cb
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096a4b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096a5a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096ada
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096ae9
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096b69
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096b78
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096bf8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096c07
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096c87
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096c96
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096d16
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096d25
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x138]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096da5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096db4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096e26
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096e35
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096ea7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096eb6
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096f25
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096f34
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140096fa6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140096fb5
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097035
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097044
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400970c4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400970d3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x1e8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097161
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097170
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x1e8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400971fe
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x14009720d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
lea rcx, [rsp + 0x1e8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x14009729b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400972aa
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x14009732a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097339
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400973b9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400973c8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
test edi, edi
jne 0x1400974a5
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097450
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x14009745f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400974df
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400974ee
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x14009756b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x14009757a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400975fa
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097609
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097689
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097698
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
cmp byte [rsp + 0xa9], 0x10
cmove edi, eax
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x14009770c
cmp rbx, 0xffffffffffffffff
je 0x14009770c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x14009771b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097798
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400977a7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097824
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097833
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x110]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400978b3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400978c2
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097934
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097943
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400979b5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400979c4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097a36
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097a45
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
mov rcx, rbx
call fcn.14005f4f0
mov edi, eax
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140097abe
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097acd
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rsi, rsi
je 0x140097b43
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, ebx
jmp 0x140098f51
movzx eax, word [r12]
mov r8, qword [rsp + 0x60]
mov word [r8], ax
test ax, ax
je 0x140097bdb
mov r9d, dword [rsp + 0x120]
and r9d, 0xfffffffd
or r9d, 0xc
mov r10b, byte [rsp + 0xba]
mov byte [rsp + 0x30], r10b
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov r8d, dword [rsp + 0x54]
mov edx, dword [rsp + 0x128]
lea rcx, [rsp + 0x60]
call fcn.1400783c0
mov r8, qword [rsp + 0x60]
mov rdx, r13
mov rcx, qword [rsp + 0x268]
call fcn.140061290
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140097c1d
cmp rbx, 0xffffffffffffffff
je 0x140097c1d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097c2c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
mov eax, dword [rsp + 0x128]
test eax, eax
js 0x140097d18
cmp byte [rsp + 0xd1], 0
je 0x140097c96
mov ecx, dword [rsp + 0x54]
test ecx, ecx
js 0x140097d18
jmp 0x140097c9a
mov ecx, dword [rsp + 0x54]
movsx r9d, byte [rsp + 0xb8]
mov edx, dword [rsp + 0x120]
or r9d, edx
mov r10b, byte [rsp + 0xba]
mov byte [rsp + 0x30], r10b
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov r8d, ecx
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.1400783c0
jmp 0x140097d18
cmp byte [rsp + 0xd3], 0
je 0x140097cec
mov eax, dword [rsp + 0x128]
test eax, eax
js 0x140097d18
jmp 0x140097cf3
mov eax, dword [rsp + 0x128]
movzx edx, byte [rsp + 0xb8]
neg dl
sbb edx, edx
and edx, 0x200000
or edx, eax
or edx, dword [rsp + 0x1c0]
lea rcx, [rsp + 0x60]
call fcn.140077ea0
mov eax, dword [rsp + 0x160]
test eax, eax
jle 0x140097d6a
mov r8, qword [rsp + 0x60]
mov qword [rsp + 0x280], r8
mov qword [rsp + 0x60], r14
dec eax
mov dword [rsp + 0x160], eax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x60]
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x268]
call fcn.140066520
lea rcx, [rsp + 0x280]
call fcn.14005b520
mov r8, qword [rsp + 0x60]
mov rdx, r13
mov rcx, qword [rsp + 0x268]
call fcn.140061290
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140097db1
cmp rbx, 0xffffffffffffffff
je 0x140097db1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097dc0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
xor eax, eax
jmp 0x140098f51
mov ecx, dword [rsp + 0x54]
test ecx, ecx
jg 0x140097e95
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140097e40
cmp rbx, 0xffffffffffffffff
je 0x140097e40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097e4f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
mov eax, dword [rsp + 0x118]
test eax, eax
jns 0x140097f35
cmp word [rbp], 0
jne 0x140097f35
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140097ee0
cmp rbx, 0xffffffffffffffff
je 0x140097ee0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097eef
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
mov qword [rsp + 0x260], r14
or r12, 0xffffffffffffffff
mov dword [rsp + 0x160], r12d
mov r10b, byte [rsp + 0xba]
mov byte [rsp + 0x30], r10b
lea rdx, [rsp + 0x160]
mov qword [rsp + 0x28], rdx
lea rdx, [rsp + 0x260]
mov qword [rsp + 0x20], rdx
mov r9d, dword [rsp + 0x120]
mov r8d, ecx
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.1400783c0
cmp dword [rsp + 0x160], 0
jg 0x14009801a
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140097fc5
cmp rbx, r12
je 0x140097fc5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140097fd4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov dword [rsp + 0xac], 0x200
mov qword [rsp + 0x180], r14
mov dword [rsp + 0x188], r14d
mov dword [rsp + 0x18c], r14d
mov r9, qword [rsp + 0x238]
cmp word [r9], 0
je 0x1400982a4
mov rdx, r9
lea rcx, [0x140151958]
call fcn.14005c550
test al, al
jne 0x1400982a4
mov rdx, r9
lea rcx, [0x14014a3a0]
call fcn.14005c550
test al, al
jne 0x1400982a4
mov rdx, r9
lea rcx, [0x140151954]
call fcn.14005c550
test al, al
je 0x14009809b
mov eax, 8
jmp 0x1400982a9
mov rdx, r9
lea rcx, str.nt6fat
call fcn.14005c550
test al, al
jne 0x14009829d
mov rdx, r9
lea rcx, str.winfat
call fcn.14005c550
test al, al
jne 0x14009829d
mov rdx, r9
lea rcx, [0x140151940]
call fcn.14005c550
test al, al
je 0x1400980e6
mov eax, 6
jmp 0x1400982a9
mov rdx, r9
lea rcx, str.nt5fat
call fcn.14005c550
test al, al
je 0x140098103
mov eax, 5
jmp 0x1400982a9
mov dword [rsp + 0xac], r14d
mov qword [rsp + 0x1b8], r12
mov edi, 0x2a
cmp di, word [r9]
jne 0x140098163
add r9, 2
mov qword [rsp + 0x150], r9
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x150]
call fcn.140068f80
mov r9, qword [rsp + 0x150]
cmp di, word [r9]
jne 0x14009815b
add r9, 2
mov r12, qword [rsp + 0x1b8]
jmp 0x140098163
mov r12, qword [rsp + 0x1b8]
mov eax, 0x23
cmp ax, word [r9]
jne 0x1400981c4
mov rdx, r9
lea rcx, [rsp + 0x150]
call fcn.140071240
nop
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x180]
lea r8, str.EXEDATA
mov rdx, qword [rsp + 0x150]
xor ecx, ecx
call fcn.140030854
mov rbp, rax
lea rcx, [rsp + 0x150]
call fcn.14005b520
mov r11d, dword [rsp + 0x188]
mov dword [rsp + 0xac], r11d
jmp 0x1400981e9
lea r8, [rsp + 0xac]
xor edx, edx
mov rcx, r9
call fcn.14002a3a4
mov rbp, rax
mov qword [rsp + 0x180], rax
mov r11d, dword [rsp + 0xac]
test r12, r12
js 0x140098200
mov eax, r11d
cmp rax, r12
cmovg r11d, r12d
mov dword [rsp + 0xac], r11d
test rbp, rbp
jne 0x1400982e5
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140098248
cmp rbx, 0xffffffffffffffff
je 0x140098248
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098257
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov eax, 7
jmp 0x1400982a9
mov eax, 9
mov edx, eax
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x180]
lea r8, str.INDATA
xor ecx, ecx
call fcn.140030854
mov rbp, rax
mov r11d, dword [rsp + 0xac]
test r11d, r11d
cmovne r11d, dword [rsp + 0x188]
mov dword [rsp + 0xac], r11d
test r11d, r11d
je 0x1400987a4
test rbp, rbp
je 0x1400987a4
test rbx, rbx
je 0x14009830b
cmp rbx, 0xffffffffffffffff
je 0x14009830b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x20000000
mov eax, 3
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, eax
mov edx, 0xc0000000
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
cmove rbx, r14
mov qword [rsp + 0x168], rbx
test rbx, rbx
jne 0x1400983d1
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rsi, rsi
je 0x14009838b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
xor r8d, r8d
mov r14, qword [rsp + 0x260]
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
cmp rax, r14
je 0x14009847f
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x14009842a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098439
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov r12d, dword [rsp + 0xac]
add r12d, 0x1ff
and r12d, 0xfffffe00
lea edx, [r12 + r12 + 0x200]
lea rcx, [rsp + 0x130]
call fcn.1400632b0
nop
mov r13, qword [rsp + 0x130]
add r13, 0x200
and r13, 0xfffffffffffffe00
movsxd r15, r12d
lea rdi, [r15 + r13]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xe0]
mov r8d, r12d
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x14009858d
lea rcx, [rsp + 0x130]
call fcn.14005b520
nop
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140098538
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098547
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov r8, r15
mov rdx, rdi
mov rcx, r13
call fcn.14010cd30
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14005c450
cmp rax, r14
je 0x14009864f
lea rcx, [rsp + 0x130]
call fcn.14005b520
nop
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x1400985fa
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098609
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov ecx, dword [rsp + 0xac]
movzx eax, word [rbp]
mov word [rdi], ax
movzx eax, byte [rbp + 2]
mov byte [rdi + 2], al
mov eax, 0x1fe
cmp ecx, eax
cmovg ecx, eax
lea eax, [rcx - 0x1e]
movsxd r8, eax
lea rdx, [rbp + 0x1e]
lea rcx, [rdi + 0x1e]
call fcn.14010cd30
mov byte [rdi + 0x1fe], 0x55
mov byte [rdi + 0x1ff], 0xaa
mov eax, dword [rsp + 0xac]
cmp eax, 0x200
jbe 0x1400986b8
add eax, 0xfffffe00
mov r8d, eax
lea rdx, [rbp + 0x200]
lea rcx, [rdi + 0x200]
call fcn.14010cd30
mov r8d, r12d
mov rdx, rdi
mov rcx, r13
call fcn.14005b5d0
test eax, eax
je 0x1400986f9
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xe0]
mov r8d, r12d
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x1f8], eax
mov rcx, rbx
call fcn.14005f4c0
cmp dword [rsp + 0x1f8], 0
mov edi, 0
sete dil
lea rcx, [rsp + 0x130]
call fcn.14005b520
nop
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140098752
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098761
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
lea rcx, [rsp + 0x180]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x1400987e3
cmp rbx, 0xffffffffffffffff
je 0x1400987e3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x1400987f2
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
cmp dword [rsp + 0x118], 0
jge 0x1400988d7
cmp word [rbp], 0
jne 0x1400988d7
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140098882
cmp rbx, 0xffffffffffffffff
je 0x140098882
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098891
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 0x80070057
jmp 0x140098f51
mov dword [rsp + 0xa4], 0xffffffff
lea r10, str.INDATA
mov qword [rsp + 0x2d8], r14
mov dword [rsp + 0x2e0], r14d
mov dword [rsp + 0x2e4], r14d
or rbp, 0xffffffffffffffff
mov qword [rsp + 0x1b8], rbp
mov qword [rsp + 0x178], r14
cmp word [r9], 0
je 0x140098a30
mov rdx, r9
lea rcx, [0x140151958]
call fcn.14005c550
test al, al
jne 0x140098a30
mov rdx, r9
lea rcx, [0x14014a3a0]
call fcn.14005c550
test al, al
jne 0x140098a30
mov rdx, r9
lea rcx, [0x140151940]
call fcn.14005c550
test al, al
je 0x140098969
lea edi, [rbp + 0xf]
jmp 0x140098a35
mov rdx, r9
lea rcx, [0x140151954]
call fcn.14005c550
test al, al
je 0x140098986
mov edi, 0xf
jmp 0x140098a35
mov dword [rsp + 0xa4], r14d
mov edi, 0x2a
cmp di, word [r9]
jne 0x1400989de
add r9, 2
mov qword [rsp + 0x150], r9
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x150]
call fcn.140068f80
mov r9, qword [rsp + 0x150]
cmp di, word [r9]
jne 0x1400989d6
add r9, 2
mov rbp, qword [rsp + 0x1b8]
jmp 0x1400989de
mov rbp, qword [rsp + 0x1b8]
mov eax, 0x23
cmp ax, word [r9]
jne 0x140098a0a
mov rdx, r9
lea rcx, [rsp + 0x178]
call fcn.140071480
mov rdi, qword [rsp + 0x178]
lea r10, str.EXEDATA
jmp 0x140098a35
lea r8, [rsp + 0xa4]
xor edx, edx
mov rcx, r9
call fcn.14002a3a4
mov r12, rax
mov qword [rsp + 0x2d8], rax
mov ecx, dword [rsp + 0xa4]
jmp 0x140098a60
mov edi, 0x10
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x2d8]
mov r8, r10
mov rdx, rdi
xor ecx, ecx
call fcn.140030854
mov r12, rax
mov ecx, dword [rsp + 0x2e0]
mov dword [rsp + 0xa4], ecx
test rbp, rbp
js 0x140098a74
mov eax, ecx
cmp rax, rbp
cmovg ecx, ebp
mov dword [rsp + 0xa4], ecx
test ecx, ecx
je 0x140098eb4
test r12, r12
je 0x140098eb4
test rbx, rbx
je 0x140098a99
cmp rbx, 0xffffffffffffffff
je 0x140098a99
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x20000000
mov eax, 3
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, eax
mov edx, 0xc0000000
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
cmove rbx, r14
mov qword [rsp + 0x168], rbx
test rbx, rbx
jne 0x140098b71
lea rcx, [rsp + 0x178]
call fcn.14005b520
nop
lea rcx, [rsp + 0x2d8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rsi, rsi
je 0x140098b2b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov ebp, dword [rsp + 0xa4]
add ebp, 0x1ff
and ebp, 0xfffffe00
lea edx, [rbp + rbp + 0x200]
lea rcx, [rsp + 0x130]
call fcn.1400632b0
nop
mov r13, qword [rsp + 0x130]
add r13, 0x200
and r13, 0xfffffffffffffe00
movsxd r14, ebp
lea rdi, [r14 + r13]
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0xe0]
mov r8d, ebp
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140098c97
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
mov eax, 1
cmove edi, eax
lea rcx, [rsp + 0x130]
call fcn.14005b520
nop
lea rcx, [rsp + 0x178]
call fcn.14005b520
nop
lea rcx, [rsp + 0x2d8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140098c45
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098c54
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
mov r8, r14
mov rdx, rdi
mov rcx, r13
call fcn.14010cd30
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
test eax, eax
je 0x140098d69
lea rcx, [rsp + 0x130]
call fcn.14005b520
nop
lea rcx, [rsp + 0x178]
call fcn.14005b520
nop
lea rcx, [rsp + 0x2d8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140098d14
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098d23
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
jmp 0x140098f51
mov eax, dword [rsp + 0xa4]
mov ecx, 0x1b8
cmp eax, ecx
cmovg eax, ecx
movsxd r8, eax
mov rdx, r12
mov rcx, rdi
call fcn.14010cd30
mov byte [rdi + 0x1fe], 0x55
mov byte [rdi + 0x1ff], 0xaa
mov eax, dword [rsp + 0xa4]
cmp eax, 0x200
jbe 0x140098dc0
add eax, 0xfffffe00
mov r8d, eax
lea rdx, [r12 + 0x200]
lea rcx, [rdi + 0x200]
call fcn.14010cd30
mov r8d, ebp
mov rdx, rdi
mov rcx, r13
call fcn.14005b5d0
test eax, eax
je 0x140098dfd
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0xe0]
mov r8d, ebp
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x1f8], eax
mov rcx, rbx
call fcn.14005f4c0
cmp dword [rsp + 0x1f8], r15d
mov rdi, r15
sete dil
lea rcx, [rsp + 0x130]
call fcn.14005b520
nop
lea rcx, [rsp + 0x178]
call fcn.14005b520
nop
lea rcx, [rsp + 0x2d8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
cmp rbx, 0xffffffffffffffff
je 0x140098e62
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098e71
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, edi
jmp 0x140098f51
lea rcx, [rsp + 0x178]
call fcn.14005b520
nop
lea rcx, [rsp + 0x2d8]
call fcn.14005b520
nop
lea rcx, [rsp + 0x98]
call fcn.14005b520
nop
lea rcx, [rsp + 0x90]
call fcn.14005f5c0
nop
test rbx, rbx
je 0x140098f01
cmp rbx, 0xffffffffffffffff
je 0x140098f01
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rsi, rsi
je 0x140098f10
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x78]
call fcn.14005b520
nop
lea rcx, [rsp + 0x68]
call fcn.14005b520
nop
lea rcx, [rsp + 0x80]
call fcn.14005b520
nop
lea rcx, [rsp + 0x88]
call fcn.14005b520
nop
lea rcx, [rsp + 0x60]
call fcn.14005b520
mov eax, 1
mov rcx, qword [rsp + 0x6d0]
xor rcx, rsp
call fcn.14010bcc0
mov rbx, qword [rsp + 0x730]
add rsp, 0x6e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret