Function at 0x14002b9b8
Capabilities:
Clear file content

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r15
sub rsp, 0x460
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x450], rax
or dword [0x1400fd7e8], 0xffffffff
xor ebp, ebp
lea rdi, [0x1400fdd4c]
lea r12d, [rbp + 1]
mov esi, ebp
mov dword [0x1400fd80c], ebp
mov dword [0x1400fd808], ebp
mov dword [0x1400fd810], ebp
lea r15, [0x1400fd94c]
mov dword [0x1400fd908], r12d
cmp byte [0x14010bd72], bpl
jne 0x14002bc18
call fcn.140033ba4
cmp eax, ebp
je 0x14002bb8a
mov r8b, r12b
mov rdx, rdi
mov rcx, r15
call fcn.140031cb0
call fcn.140033ba4
cmp eax, ebp
je 0x14002bb8a
lea r8, [0x14010e6bc]
lea rdx, [0x14010e2bc]
lea rcx, [0x1400ec668]
mov r9, r15
mov qword [rsp + 0x20], rdi
call fcn.140028c48
mov rcx, r15
call fcn.1400539fc
cmp al, bpl
je 0x14002ba8e
mov eax, 0x34
jmp 0x14002c04b
mov ecx, 0x456
call fcn.140061d2c
lea rcx, [0x14010e6bc]
mov rdx, rax
call fcn.1400964ac
lea rcx, [rsp + 0x50]
mov r8d, 0x3ff
mov rdx, r15
call fcn.1400a9c78
mov dl, r12b
mov rcx, r15
mov byte [rsp + 0x44f], bpl
call fcn.140053a98
xor edx, edx
mov rcx, r15
call fcn.1400310a8
cmp al, bpl
je 0x14002bb32
movzx r9d, word [0x1400fd868]
movzx eax, word [0x1400fd866]
mov r8, qword [0x1400ecbb8]
shl r9d, 0x10
xor edx, edx
mov rcx, r15
add r9d, eax
mov dword [rsp + 0x20], ebp
call fcn.14000b220
mov r11b, al
cmp al, 0x41
je 0x14002bb2b
cmp al, 0x43
je 0x14002ba84
cmp al, 0x4e
je 0x14002ba84
cmp al, 0x52
jne 0x14002bb32
mov word [0x1400fdd4c], bp
jmp 0x14002bb32
mov dword [0x14010bc54], r12d
mov r8b, r12b
xor edx, edx
mov rcx, r15
call fcn.140031cb0
call fcn.140033ba4
cmp eax, ebp
jne 0x14002ba84
mov rcx, r15
call fcn.14006b6a8
lea rcx, [rsp + 0x50]
mov rdi, rax
call fcn.14006b6a8
mov ecx, 0x4ae
mov rbx, rax
call fcn.140061d2c
lea rcx, [0x14010e6bc]
mov r9, rdi
mov r8, rbx
mov rdx, rax
call fcn.1400964ac
lea rdi, [0x1400fdd4c]
cmp byte [0x14010bd72], bpl
jne 0x14002bc18
mov rcx, qword [0x1400ecbb8]
mov rax, rcx
cqo
and edx, 0x7ff
add rax, rdx
sar rax, 0xb
cmp rax, qword [0x1400ecbb0]
jge 0x14002bc18
cmp rcx, 0x5f5e100
jle 0x14002bbdd
mov rcx, qword [0x1400fd820]
call fcn.1400300e4
cmp rax, qword [0x1400ecbb0]
setg al
cmp al, bpl
je 0x14002bc18
mov edx, dword [0x1400ecbb8]
mov rcx, qword [0x1400fd920]
xor r8d, r8d
call fcn.1400aa2d4
mov rcx, qword [0x1400fd920]
call fcn.1400319c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rcx, qword [0x1400fd920]
xor r8d, r8d
xor edx, edx
call fcn.1400aa2d4
call fcn.140033314
movzx r11d, word [0x1400fd864]
mov r13d, 6
mov eax, r11d
cmp r11d, ebp
je 0x14002bd0e
cmp eax, r12d
je 0x14002bcf0
cmp eax, r13d
je 0x14002bcb2
add eax, 0xfffffff8
cmp eax, r12d
ja 0x14002bc61
cmp r11w, 9
mov ecx, ebp
sete cl
call fcn.14003856c
jmp 0x14002bcf5
lea rcx, [0x1400fe54c]
call fcn.14006b6a8
mov ecx, 0x342
mov rbx, rax
call fcn.140061d2c
lea rcx, [0x14010e6bc]
mov rdx, rax
mov r8, rbx
call fcn.1400964ac
call fcn.1400332b0
cmp byte [0x14010bd72], bpl
jne 0x14002bcaa
call fcn.14007c818
mov rdx, rdi
mov rcx, r15
call fcn.1400313c8
mov eax, r12d
jmp 0x14002c04b
call fcn.140029acc
cmp eax, ebp
je 0x14002bccc
cmp eax, 5
je 0x14002bcd5
mov esi, 2
cmp eax, 3
cmove esi, r13d
cmp eax, 5
jne 0x14002bdfa
mov eax, dword [0x1400ecbc0]
mov esi, ebp
cmp rax, qword [0x1400fd870]
setg sil
add esi, r12d
jmp 0x14002bdfa
call fcn.14007b1c8
cmp eax, ebp
je 0x14002bdfa
mov esi, 2
cmp eax, 3
cmove esi, r13d
jmp 0x14002bdfa
lea rdi, [0x1400ed7e0]
mov rbx, rbp
mov edx, ebp
mov rcx, rdi
mov dword [0x1400fd948], edx
mov qword [0x1400fd940], rcx
sub qword [0x1400fd800], r12
js 0x14002bd4a
mov rax, qword [0x1400fd7f8]
movzx r8d, byte [rax]
add rax, r12
mov qword [0x1400fd7f8], rax
jmp 0x14002bd5f
call fcn.1400335a4
mov edx, dword [0x1400fd948]
mov rcx, qword [0x1400fd940]
mov r8d, eax
cmp r8d, 0xffffffff
je 0x14002bdeb
cmp dword [0x1400fd904], ebp
jne 0x14002bdeb
mov byte [rcx], r8b
mov edx, dword [0x1400fd948]
mov rcx, qword [0x1400fd940]
add edx, r12d
add rcx, r12
mov qword [0x1400fd940], rcx
mov dword [0x1400fd948], edx
cmp edx, 0x10000
jne 0x14002bd2a
mov rax, qword [0x1400ed7d8]
mov r9, qword [0x1400fd828]
mov rdx, qword [0x1400ecbb8]
mov rcx, qword [rax]
add rbx, 0x10000
lea r8, [rbx + rcx]
mov rcx, rbx
call fcn.140009c1c
call fcn.1400474ec
mov edx, dword [0x1400fd948]
cmp byte [0x1400ffcf0], bpl
jne 0x14002bdeb
xor r8d, r8d
mov rcx, rdi
call fcn.140033d14
jmp 0x14002bd18
cmp edx, ebp
je 0x14002bdfa
xor r8d, r8d
mov rcx, rdi
call fcn.140033d14
mov dil, bpl
cmp byte [0x1400ffcf0], bpl
je 0x14002be15
cmp byte [0x14010bd72], bpl
movzx edi, bpl
cmove edi, r12d
mov eax, dword [0x1400fd904]
cmp eax, ebp
je 0x14002be6f
cmp eax, r12d
jle 0x14002be6c
cmp byte [0x14010bcbc], bpl
jne 0x14002be3c
cmp byte [0x14010bd72], bpl
movzx edi, dil
cmove edi, r12d
lea r13, [0x1400fdd4c]
lea r8, [0x14010e6bc]
lea rdx, [0x14010e2bc]
lea rcx, [0x1400ec668]
mov r9, r15
mov qword [rsp + 0x20], r13
call fcn.140028da8
mov esi, 0x32
jmp 0x14002be87
mov esi, r12d
cmp esi, r13d
jne 0x14002be80
lea rcx, [0x1400ec668]
call fcn.140028548
lea r13, [0x1400fdd4c]
cmp byte [0x1400fea19], bpl
je 0x14002bf5c
lea rdx, [0x1400fea20]
lea rcx, [rsp + 0x30]
call fcn.140030dc0
mov r11, qword [0x1400ecbb0]
cmp r11, 0xffffffffffffffff
cmove r11, rbp
mov qword [0x1400ecbb0], r11
call fcn.1400332b0
add qword [0x1400ecbb0], 0xa
call fcn.140033314
mov r11, qword [0x1400ed7d8]
mov rbx, rbp
and dword [r11 + 0x28], 0xfffffffe
mov rax, qword [0x1400fd7f8]
sub qword [0x1400fd800], r12
js 0x14002befb
movzx ecx, byte [rax]
add rax, r12
mov qword [0x1400fd7f8], rax
jmp 0x14002bf09
call fcn.1400335a4
mov ecx, eax
mov rax, qword [0x1400fd7f8]
mov byte [rsp + rbx + 0x40], cl
add rbx, r12
cmp rbx, 0xa
jl 0x14002bee3
mov rax, qword [0x1400ed7d8]
lea rcx, [rsp + 0x30]
or dword [rax + 0x28], r12d
lea rax, [rsp + 0x40]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x14002bf41
mov dx, word [rax + 8]
cmp dx, word [rcx + 8]
jne 0x14002bf41
mov eax, ebp
jmp 0x14002bf46
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x14002bf99
cmp byte [0x1400fea19], bpl
je 0x14002bf5c
cmp byte [0x1400fea1a], bpl
je 0x14002bf6c
mov eax, dword [0x1400fd7e8]
not eax
cmp eax, dword [0x1400fd86c]
jne 0x14002bf99
cmp byte [0x14010bd72], bpl
je 0x14002c00d
mov rcx, qword [0x1400fd840]
cmp rcx, rbp
je 0x14002c004
movzx edx, word [0x1400fd882]
call fcn.14002b8b8
cmp eax, esi
jle 0x14002c004
mov esi, eax
jmp 0x14002c004
cmp esi, r12d
jle 0x14002bfa3
cmp esi, 2
jne 0x14002bfe7
mov rax, qword [0x1400ed7d8]
lea rcx, [0x1400fe54c]
test byte [rax + 0x28], r12b
je 0x14002bfc3
call fcn.14006b6a8
mov ecx, 0x1f8
jmp 0x14002bfcd
call fcn.14006b6a8
mov ecx, 0x1f9
mov rbx, rax
call fcn.140061d2c
lea rcx, [0x14010e6bc]
mov rdx, rax
mov r8, rbx
call fcn.1400964ac
cmp byte [0x14010bcbc], bpl
jne 0x14002bfff
cmp byte [0x14010bd72], bpl
movzx edi, dil
cmove edi, r12d
mov esi, 2
cmp byte [0x14010bd72], bpl
jne 0x14002c034
cmp esi, ebp
je 0x14002c026
mov rcx, qword [0x1400fd920]
call fcn.1400319c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp byte [0x14010bd72], bpl
jne 0x14002c034
call fcn.14007c818
cmp dil, bpl
je 0x14002c044
mov rdx, r13
mov rcx, r15
call fcn.1400313c8
call fcn.1400332b0
mov eax, esi
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.1400a8530
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
ret