Function at 0x1400a3e34
Capabilities:
Read file on windows

Disassembly:
push r13
push r14
push r15
mov eax, 0x2e00
call fcn.1400ba8b0
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x2e20], rbx
mov qword [rsp + 0x2e28], rbp
mov qword [rsp + 0x2e30], rsi
mov qword [rsp + 0x2e38], rdi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x2df0], rax
call fcn.140035338
xor ebp, ebp
mov dword [0x140134af0], ebp
mov dword [0x140134af4], ebp
mov qword [0x140134ad8], rbp
mov qword [0x140134ad0], rbp
mov qword [0x1400ec6b0], rbp
mov qword [0x1400ecb60], rbp
lea rax, [0x1400ecb60]
mov qword [0x1400deeb8], rax
movsxd rax, dword [0x14010bc58]
lea rdi, [0x140000000]
movsx eax, byte [rax + rdi + 0xe08b0]
mov dword [0x1400deeb4], eax
neg eax
sbb eax, eax
mov dword [0x1400deeb0], eax
mov qword [0x1400ec6e8], rbp
mov qword [0x1400ec6e0], rbp
mov qword [0x140134ac8], rbp
mov qword [0x140134ac0], rbp
mov dl, byte [0x14010d68c]
mov cl, byte [0x14010d68b]
cmp cl, 0x52
jne 0x1400a3f23
cmp dl, bpl
jne 0x1400a3f23
mov dword [0x1400ecb44], 3
jmp 0x1400a3f29
mov dword [0x1400ecb44], ebp
mov eax, ebp
cmp cl, 0x53
sete al
mov dword [0x1400ecb4c], eax
mov r13d, 1
cmp cl, 0x52
jne 0x1400a3f50
cmp dl, 0x4e
jne 0x1400a3f50
mov dword [0x1400ecb48], r13d
jmp 0x1400a3f56
mov dword [0x1400ecb48], ebp
mov r15d, 2
cmp byte [0x14010e2bc], bpl
je 0x1400a4123
lea rcx, [0x14010e2bc]
call fcn.1400a5738
mov qword [0x1400ec6e8], rax
cmp rax, rbp
jne 0x1400a3f9e
lea rcx, [0x1400ec668]
call fcn.140028548
lea rdx, [0x1400c3786]
lea ecx, [r15 + 2]
call fcn.1400a3860
int3
cmp word [0x14010e6bc], bp
je 0x1400a3fe4
lea rcx, [0x14010e6bc]
call fcn.1400a57c0
mov qword [0x1400ec6e0], rax
cmp rax, rbp
jne 0x1400a3fdd
lea rcx, [0x1400ec668]
call fcn.140028548
lea rdx, [0x1400c3786]
mov ecx, 4
call fcn.1400a3860
int3
mov rax, qword [0x1400ec6e8]
cmp byte [0x14010bcbf], bpl
je 0x1400a401e
mov rcx, rax
call fcn.140052880
cmp al, bpl
je 0x1400a401e
movsx edx, byte [0x14010d68b]
lea rcx, [0x1400c4550]
call fcn.1400a82cc
cmp rax, rbp
je 0x1400a401e
mov rcx, qword [0x1400ec6e8]
call fcn.140032470
cmp dword [0x1400ecb44], ebp
je 0x1400a40a5
mov rcx, rbp
movzx eax, word [rcx + rdi + 0xc83b8]
mov word [rsp + rcx + 0x25f0], ax
add rcx, r15
cmp ax, bp
jne 0x1400a4029
mov rcx, qword [0x1400ec6e0]
call fcn.140052abc
mov r11, rax
lea rdi, [rsp + 0x25f0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
sub rdi, r15
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx], cx
add rdx, r15
test cx, cx
jne 0x1400a4066
mov ecx, 0x267
call fcn.140061d2c
mov r8, rax
lea r9, [rsp + 0x25f0]
mov edx, 0x4c8
lea rcx, [rsp + 0x60]
call fcn.14005b860
lea rcx, [rsp + 0x60]
call fcn.140087804
call fcn.1400a6e50
mov edi, eax
cmp eax, ebp
je 0x1400a411d
mov edx, eax
sub edx, r15d
je 0x1400a40f1
sub edx, r13d
je 0x1400a40d6
sub edx, r13d
je 0x1400a40c8
cmp edx, 7
je 0x1400a40f1
jmp 0x1400a410e
lea rcx, [0x1400ec668]
call fcn.140028548
jmp 0x1400a410e
mov ecx, 0x2ad
call fcn.140061d2c
mov rdx, rax
mov rcx, qword [0x1400ec6e0]
call fcn.1400964ac
jmp 0x1400a410e
mov qword [rsp + 0x20], rbp
mov r9, qword [0x1400ec6e8]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400ec668]
call fcn.140028d00
mov rdx, qword [0x1400ec6e8]
mov ecx, edi
call fcn.1400a3860
int3
mov cl, byte [0x14010d68b]
cmp cl, 0x44
jne 0x1400a414b
call fcn.14007d1e4
cmp eax, ebp
je 0x1400a4145
cmp eax, 0xffffffff
je 0x1400a4145
lea rdx, [0x1400c3786]
mov ecx, eax
call fcn.1400a3860
int3
mov cl, byte [0x14010d68b]
cmp cl, 0x41
jne 0x1400a4155
call fcn.14007cf54
call fcn.1400328f0
cmp qword [0x1400ec6d0], rbp
je 0x1400a416f
mov rcx, qword [0x1400ec6c0]
call fcn.1400a86a4
mov qword [0x140134ae0], rbp
mov qword [0x140134ae8], rbp
mov r14d, ebp
mov rdi, qword [0x1400ecb50]
cmp rdi, rbp
je 0x1400a435b
cmp dword [rdi + 0x78], ebp
je 0x1400a434b
mov r8d, 0x400
lea rdx, [rsp + 0x25f0]
mov rcx, qword [rdi + 0x48]
call fcn.140053b54
cmp byte [0x14010bc71], bpl
je 0x1400a41d2
mov rcx, qword [rdi + 0x48]
call fcn.1400a3a8c
test al, 0x20
jne 0x1400a41d2
mov dword [rdi + 0x78], ebp
mov dword [rdi + 0x7c], r13d
jmp 0x1400a434b
mov eax, dword [rdi + 0x14]
add qword [0x140134ae8], rax
cmp byte [0x14010d68b], 0x44
je 0x1400a4348
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x48]
call fcn.14007cd20
mov edx, dword [0x140134af0]
mov ecx, dword [0x140134af4]
cmp eax, ebp
je 0x1400a431b
cmp eax, edx
jb 0x1400a431b
cmp ecx, ebp
je 0x1400a421f
cmp eax, ecx
jae 0x1400a431b
cmp byte [0x14010bc75], bpl
jne 0x1400a4231
cmp byte [0x14010bc74], bpl
je 0x1400a423a
cmp eax, dword [rdi + 8]
jbe 0x1400a431b
cmp byte [0x14010d68b], 0x44
je 0x1400a4348
mov eax, dword [0x14010bc54]
cmp eax, ebp
je 0x1400a4348
cmp eax, r15d
sete sil
cmp eax, 4
jne 0x1400a4311
mov rcx, rbp
mov al, byte [rsp + rcx + 0x25f0]
mov byte [rsp + rcx + 0x21f0], al
add rcx, r13
cmp al, bpl
jne 0x1400a4268
mov ebx, r15d
lea rcx, [rsp + 0x21f0]
call fcn.140052b20
movsx ecx, byte [rax]
call fcn.140052530
cmp al, bpl
jne 0x1400a42d5
mov r8d, dword [rdi + 0x14]
mov dword [rsp + 0x20], 7
mov r9d, dword [rdi + 8]
xor edx, edx
lea rcx, [rsp + 0x21f0]
call fcn.14000b220
movsx edx, al
mov rcx, qword [str.___f_]
call fcn.1400a82cc
mov rbx, rax
sub ebx, dword [str.___f_]
add ebx, r13d
sub ebx, r15d
je 0x1400a430e
sub ebx, r13d
je 0x1400a4305
sub ebx, r13d
je 0x1400a42fc
cmp ebx, r13d
jne 0x1400a4311
mov edx, 0xff
lea rcx, [0x1400ec668]
call fcn.140028e50
jmp 0x1400a4311
mov dword [0x14010bc54], r15d
jmp 0x1400a4316
mov dword [0x14010bc54], r13d
jmp 0x1400a4311
mov sil, r13b
cmp sil, bpl
je 0x1400a4348
mov dword [rdi + 0x78], ebp
jmp 0x1400a434b
mov dword [rdi + 0x78], ebp
cmp eax, ebp
je 0x1400a4333
cmp eax, edx
jb 0x1400a4333
cmp ecx, ebp
je 0x1400a432e
cmp eax, ecx
jae 0x1400a4333
mov eax, r13d
jmp 0x1400a4335
mov eax, ebp
mov dword [rdi + 0x7c], eax
cmp eax, ebp
je 0x1400a434b
mov eax, dword [rdi + 0x14]
sub qword [0x140134ae8], rax
jmp 0x1400a434b
add r14d, r13d
mov rdi, qword [rdi + 0x80]
cmp rdi, rbp
jne 0x1400a4190
lea rcx, [rsp + 0x1964]
call fcn.14006e1b0
lea rcx, [rsp + 0x1988]
call fcn.14006e1b0
lea rcx, [rsp + 0x19ac]
call fcn.14006e1b0
mov rsi, rbp
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.1400310a8
cmp al, bpl
je 0x1400a43c7
xor r9d, r9d
lea r8, [rsp + 0xd50]
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.140034930
cmp al, bpl
cmovne rsi, qword [rsp + 0x1950]
mov rbx, qword [0x1400ecb60]
cmp rbx, rbp
je 0x1400a4544
jmp 0x1400a43df
mov r13d, 1
mov eax, dword [rbx + 0x18]
add qword [0x140134ae8], rax
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, qword [rbx]
repne scasb al, byte [rdi]
not rcx
sub rcx, r13
mov eax, dword [rbx + 0x18]
add rax, rsi
lea rsi, [rax + rcx*2 + 0x100]
mov eax, 0x80000000
cmp rsi, rax
jge 0x1400a4519
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbx]
call fcn.14007cd20
mov edi, eax
cmp eax, ebp
sete bpl
mov rcx, qword [rbx]
call fcn.140052b20
movsx ecx, byte [rax]
call fcn.140052530
mov r13b, al
xor r15d, r15d
cmp byte [0x14010bc71], r15b
je 0x1400a4456
mov rcx, qword [rbx]
call fcn.1400a3a8c
test al, 0x20
je 0x1400a44c5
mov cl, byte [0x14010d68b]
cmp cl, 0x44
je 0x1400a44c5
cmp cl, 0x41
jne 0x1400a446f
cmp byte [0x14010bc74], r15b
jne 0x1400a44c5
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8b, r13b
mov rdx, qword [rbx]
lea rcx, [0x140108330]
call fcn.14001c000
cmp al, r15b
jne 0x1400a44c5
cmp bpl, r15b
jne 0x1400a44ca
cmp edi, dword [0x140134af0]
jb 0x1400a44f6
mov eax, dword [0x140134af4]
xor ebp, ebp
cmp eax, ebp
je 0x1400a44ab
cmp edi, eax
jae 0x1400a44fc
mov rdx, qword [0x1400ec6e8]
mov rcx, qword [rbx + 0x10]
call fcn.14006b308
cmp eax, ebp
je 0x1400a44fc
mov rbx, qword [rbx + 0x28]
jmp 0x1400a4507
cmp bpl, r15b
je 0x1400a44fa
mov rcx, qword [rbx + 0x10]
call fcn.14006b6a8
mov rdi, rax
mov ecx, 0x206
call fcn.140061d2c
mov rdx, rax
mov r8, rdi
mov rcx, qword [0x1400ec6e0]
call fcn.1400964ac
xor ebp, ebp
jmp 0x1400a44fc
xor ebp, ebp
jmp 0x1400a44fc
xor ebp, ebp
mov rcx, rbx
call fcn.140032834
mov rbx, rax
cmp rbx, rbp
jne 0x1400a43d9
mov rbx, qword [0x1400ecb60]
jmp 0x1400a4544
mov ecx, 0x3b7
call fcn.140061d2c
mov rdx, rax
mov rcx, qword [0x1400ec6e0]
call fcn.1400964ac
lea rdx, [0x1400c3786]
mov ecx, 5
call fcn.1400a3860
int3
mov rax, qword [0x1400ecb50]
cmp r14d, ebp
jne 0x1400a4646
cmp rbx, rbp
jne 0x1400a4646
cmp dword [0x1400ecb48], ebp
jne 0x1400a4646
mov edi, dword [0x14010bca8]
mov edx, dword [0x1400ecb44]
mov ecx, dword [0x1400ecb4c]
cmp rax, rbp
je 0x1400a45a5
cmp edi, ebp
jne 0x1400a4646
cmp edx, ebp
jne 0x1400a46a1
cmp ecx, ebp
jne 0x1400a464e
cmp word [0x14010a340], bp
jne 0x1400a464e
cmp byte [0x14010bc75], bpl
jne 0x1400a4632
cmp byte [0x14010bc74], bpl
jne 0x1400a4632
cmp rax, rbp
jne 0x1400a45de
cmp edi, ebp
jne 0x1400a45cc
cmp edx, ebp
jne 0x1400a45cc
cmp ecx, ebp
je 0x1400a45de
mov rdx, qword [0x1400ec6e8]
mov ecx, 0xd
call fcn.1400a3860
int3
mov al, byte [0x14010d68b]
cmp al, 0x41
jne 0x1400a4603
mov ecx, 0x340
call fcn.140061d2c
mov rdx, rax
mov rcx, qword [0x1400ec6e0]
call fcn.1400964ac
jmp 0x1400a4620
cmp al, 0x44
jne 0x1400a4620
mov ecx, 0x345
call fcn.140061d2c
mov rdx, rax
mov rcx, qword [0x1400ec6e0]
call fcn.1400964ac
mov rdx, qword [0x1400ec6e8]
mov ecx, 0xc
call fcn.1400a3860
int3
lea rdx, [rsp + 0xd50]
xor ecx, ecx
call fcn.1400a3bc8
jmp 0x1400a547d
cmp dword [0x1400ecb44], ebp
jne 0x1400a46a1
cmp byte [0x140108340], bpl
je 0x1400a4664
cmp rax, rbp
jne 0x1400a4664
cmp dword [0x1400ec6d8], ebp
je 0x1400a46a1
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.140031144
mov dword [rsp + 0x34], eax
cmp qword [0x1400ecb50], rbp
jne 0x1400a46a5
cmp dword [0x1400ec6d8], ebp
jne 0x1400a46a5
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.1400313c8
jmp 0x1400a46a5
mov dword [rsp + 0x34], ebp
mov r13, rbp
mov qword [rsp + 0x38], rbp
mov dword [0x1400ec6b8], ebp
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.1400310a8
mov dil, al
cmp qword [0x1400ecb50], rbp
jne 0x1400a46da
cmp dword [0x1400ec6d8], ebp
je 0x1400a4736
xor r9d, r9d
lea r8, [0x1400c378c]
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.140031874
mov r13, rax
mov qword [rsp + 0x38], rax
mov qword [0x140134ac0], rax
cmp rax, rbp
jne 0x1400a4736
mov ecx, 0x1f5
call fcn.140061d2c
mov rcx, rax
mov rdx, qword [0x1400ec6e0]
call fcn.140095e68
lea rdx, [0x1400c3786]
mov ecx, 0xd
call fcn.1400a3860
int3
cmp dil, bpl
je 0x1400a4750
mov rcx, qword [0x1400ec6e8]
call fcn.140032d34
mov qword [0x140134ad8], rax
jmp 0x1400a4763
mov rcx, qword [0x1400ec6e8]
call fcn.1400ba290
mov qword [0x140134ad8], rax
cmp rax, rbp
jne 0x1400a4786
lea rcx, [0x1400ec668]
call fcn.140028548
lea rdx, [0x1400c3786]
mov ecx, 4
call fcn.1400a3860
int3
cmp dil, bpl
jne 0x1400a47d2
mov rcx, qword [0x1400ec6e0]
cmp rcx, rbp
je 0x1400a47d2
call fcn.1400aa488
mov rdx, rax
mov qword [0x140134ad0], rax
cmp rax, rbp
jne 0x1400a47c9
lea rcx, [0x1400ec668]
call fcn.140028548
lea rdx, [0x1400c3786]
mov ecx, 4
call fcn.1400a3860
int3
mov rax, qword [0x140134ad8]
jmp 0x1400a47d9
mov rdx, qword [0x140134ad0]
xor r9d, r9d
lea r8, [0x1400c40f8]
mov rcx, rax
call fcn.140031874
mov r15, rax
mov qword [0x140134ac8], rax
cmp rax, rbp
jne 0x1400a4830
mov rcx, qword [0x140134ad8]
call fcn.14006b6a8
mov rdi, rax
mov ecx, 0x1f6
call fcn.140061d2c
mov rcx, rax
mov rdx, rdi
call fcn.140095e68
lea rdx, [0x1400c3786]
mov ecx, 0xa
call fcn.1400a3860
int3
mov eax, dword [0x1400ec6d8]
cmp eax, ebp
je 0x1400a486c
mov r8d, eax
mov rdx, r15
mov rcx, r13
call fcn.140032e44
cmp eax, ebp
je 0x1400a4866
mov rdx, qword [0x1400ec6e8]
cmp eax, 0xa
cmove rdx, qword [0x140134ad8]
mov ecx, eax
call fcn.1400a3860
int3
mov eax, dword [0x1400ec6d8]
mov dword [0x1400ec6b8], eax
mov r14d, ebp
mov dword [rsp + 0x30], ebp
mov al, byte [0x14010d68b]
cmp al, 0x41
jne 0x1400a48a7
cmp qword [0x1400ecb50], rbp
setne r8b
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.140009f78
mov al, byte [0x14010d68b]
lea rsi, [0x1400ecb50]
mov rdi, qword [0x1400ecb50]
cmp rdi, rbp
je 0x1400a4cad
cmp dword [rdi + 0x78], 1
jne 0x1400a49db
cmp al, 0x41
jne 0x1400a495d
mov byte [rsp + 0x20], bpl
xor r9d, r9d
mov r8b, 1
xor edx, edx
mov rcx, qword [rdi + 0x70]
call fcn.140009f94
mov rdx, r15
mov rcx, rdi
call fcn.1400a7b58
cmp eax, ebp
je 0x1400a4903
cmp eax, 0x12
je 0x1400a490d
cmp eax, 0xffffffff
jne 0x1400a4c5d
cmp eax, 0x12
je 0x1400a490d
cmp eax, 0xffffffff
jne 0x1400a4951
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x20], rbp
mov r9, qword [rdi + 0x70]
mov r8, qword [0x1400ec6e0]
mov rdx, qword [0x1400ec6e8]
lea rcx, [0x1400ec668]
call fcn.140028ba0
mov r8, r15
mov rdx, r13
mov rcx, rdi
call fcn.1400a5ff0
cmp eax, ebp
jne 0x1400a4c7c
mov dword [rdi + 0x78], ebp
lea rsi, [rdi + 0x80]
jmp 0x1400a4c4a
cmp byte [0x1400ffcf0], bpl
jne 0x1400a4ca8
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x70]
call fcn.14000ad78
mov rbx, qword [rdi + 0x80]
mov rcx, qword [rdi + 0x68]
call fcn.1400a86a4
mov rcx, qword [rdi + 0x70]
call fcn.1400a86a4
cmp qword [rdi + 0x20], rbp
je 0x1400a49a0
mov rcx, qword [rdi + 0x50]
call fcn.1400a86a4
cmp qword [rdi + 0x28], rbp
je 0x1400a49b5
mov rcx, qword [rdi + 0x58]
cmp rcx, qword [rdi + 0x50]
je 0x1400a49b5
call fcn.1400a86a4
cmp qword [rdi + 0x30], rbp
je 0x1400a49c4
mov rcx, qword [rdi + 0x60]
call fcn.1400a86a4
mov rcx, rdi
call fcn.1400a86a4
mov qword [rsi], rbx
dec qword [0x1400ec6d0]
jmp 0x1400a4c4a
cmp byte [0x1400ffcf0], bpl
jne 0x1400a4ca1
cmp al, 0x44
jne 0x1400a49fa
mov r8b, 1
xor edx, edx
mov rcx, qword [rdi + 0x70]
call fcn.14000ad78
mov r14d, dword [0x1400ecb44]
cmp dword [0x1400ecb48], ebp
je 0x1400a4c2a
lea rcx, [rsp + 0x60]
call fcn.140002008
nop
xor edx, edx
mov r8d, 0xcf0
lea rcx, [rsp + 0x60]
call fcn.1400a9164
mov rcx, qword [rdi + 0x68]
call fcn.140052b20
movsx ecx, byte [rax]
call fcn.140052530
mov r13b, al
mov r8d, 0x3ff
lea rdx, [rsp + 0x90]
mov rcx, qword [rdi + 0x68]
call fcn.140053b54
lea rdx, [rsp + 0x25f0]
lea rcx, [rsp + 0x90]
call sub.USER32.dll_CharToOemA
lea rdx, [rsp + 0x21f0]
lea rcx, [rsp + 0x25f0]
call sub.USER32.dll_OemToCharA
lea r11, [rsp + 0x90]
lea rdx, [rsp + 0x21f0]
sub rdx, r11
movzx ecx, byte [r11]
movzx eax, byte [r11 + rdx]
sub ecx, eax
jne 0x1400a4aa6
inc r11
test eax, eax
jne 0x1400a4a92
cmp ecx, ebp
sete bpl
movzx ebx, word [rdi + 4]
shr bx, 0xb
and bl, 1
jne 0x1400a4ad1
movzx edx, word [rdi]
mov ecx, edx
shr ecx, 8
call fcn.1400a5574
xor ecx, ecx
cmp al, cl
je 0x1400a4ad1
mov sil, 1
jmp 0x1400a4b30
xor eax, eax
mov sil, al
cmp bl, al
je 0x1400a4b30
mov eax, dword [rsp + 0x68]
bts eax, 9
mov word [rsp + 0x68], ax
mov r8d, 0x400
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x90]
call fcn.140073c14
xor ecx, ecx
mov word [rsp + 0xc8e], cx
mov r8d, 0x3ff
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x490]
call fcn.140073a88
xor eax, eax
mov byte [rsp + 0x48f], al
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x90]
call sub.USER32.dll_CharToOemA
xor eax, eax
cmp bpl, al
jne 0x1400a4b59
xor ebp, ebp
cmp bl, bpl
je 0x1400a4c0c
jmp 0x1400a4b5b
xor ebp, ebp
lea rdx, [rsp + 0x60]
lea rcx, [0x140108330]
call fcn.1400552bc
cmp al, bpl
je 0x1400a4c0c
cmp r13b, bpl
je 0x1400a4b87
lea rcx, [rsp + 0x90]
call fcn.140052f74
mov r13d, 0x400
mov r8d, r13d
xor edx, edx
lea rcx, [rsp + 0x90]
call fcn.140053c04
cmp bl, bpl
je 0x1400a4bc6
mov r8, r13
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x490]
call fcn.140073b5c
mov byte [rsp + 0x48f], bpl
jmp 0x1400a4bdb
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x90]
call sub.USER32.dll_OemToCharA
cmp sil, bpl
je 0x1400a4be8
mov eax, 0xb17
mov word [rdi], ax
mov rcx, qword [rdi + 0x68]
call fcn.1400a86a4
lea rcx, [rsp + 0x90]
call fcn.1400ba290
mov qword [rdi + 0x68], rax
mov dword [0x1400ecb44], 3
mov rcx, qword [rsp + 0xc90]
cmp rcx, rbp
je 0x1400a4c25
call fcn.1400a86a4
mov r13, qword [rsp + 0x38]
jmp 0x1400a4c2a
mov r13, qword [rsp + 0x38]
mov r8, r15
mov rdx, r13
mov rcx, rdi
call fcn.1400a5ff0
mov dword [0x1400ecb44], r14d
cmp eax, ebp
jne 0x1400a4c92
lea rsi, [rdi + 0x80]
mov rdi, qword [rsi]
cmp rdi, rbp
je 0x1400a4c8b
mov al, byte [0x14010d68b]
jmp 0x1400a48be
cmp byte [0x1400ffcf0], bpl
jne 0x1400a4c75
lea rdx, [0x1400c3786]
mov ecx, eax
call fcn.1400a3860
int3
mov r14d, dword [rsp + 0x30]
jmp 0x1400a4cad
lea rdx, [0x1400c3786]
mov ecx, eax
call fcn.1400a3860
int3
mov r14d, dword [rsp + 0x30]
jmp 0x1400a4cad
lea rdx, [0x1400c3786]
mov ecx, eax
call fcn.1400a3860
int3
mov r14d, dword [rsp + 0x30]
jmp 0x1400a4cad
mov r14d, dword [rsp + 0x30]
mov rbx, qword [0x1400ecb60]
cmp rbx, rbp
je 0x1400a4e10
cmp byte [0x1400ffcf0], bpl
jne 0x1400a4e10
mov ecx, 0x88
call fcn.1400a85ec
mov rdi, rax
cmp rax, rbp
je 0x1400a4df2
xor edx, edx
mov qword [rax + 0x80], rdx
mov rcx, qword [rbx]
mov qword [rax + 0x48], rcx
mov qword [rbx], rdx
mov rcx, qword [rbx + 8]
mov qword [rax + 0x68], rcx
mov qword [rbx + 8], rdx
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x70], rax
mov qword [rbx + 0x10], rdx
mov qword [rdi + 0x30], rdx
mov qword [rdi + 0x28], rdx
mov qword [rdi + 0x20], rdx
mov qword [rdi + 0x58], rdx
mov qword [rdi + 0x50], rdx
mov dword [rdi + 0x78], 1
mov byte [rsp + 0x20], dl
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rdi + 0x70]
call fcn.140009f94
mov rdx, r15
mov rcx, rdi
call fcn.1400a7b58
xor ecx, ecx
cmp eax, ecx
je 0x1400a4d58
cmp eax, 0x12
je 0x1400a4d77
cmp eax, 0xffffffff
jne 0x1400a4dd8
cmp eax, 0x12
je 0x1400a4d77
cmp eax, 0xffffffff
je 0x1400a4d77
mov qword [rsi], rdi
lea rsi, [rdi + 0x80]
inc qword [0x1400ec6d0]
xor ebp, ebp
jmp 0x1400a4dc3
xor ebp, ebp
lea r14d, [rbp + 1]
mov qword [rsp + 0x20], rbp
mov r9, qword [rdi + 0x70]
mov r8, qword [0x1400ec6e0]
mov rdx, qword [0x1400ec6e8]
lea rcx, [0x1400ec668]
call fcn.140028ba0
mov rcx, qword [rdi + 0x48]
call fcn.1400a86a4
mov rcx, qword [rdi + 0x68]
call fcn.1400a86a4
mov rcx, qword [rdi + 0x70]
call fcn.1400a86a4
mov rcx, rdi
call fcn.1400a86a4
mov rcx, rbx
call fcn.140032834
mov rbx, rax
cmp rax, rbp
je 0x1400a4e10
jmp 0x1400a4cbd
xor ebp, ebp
cmp byte [0x1400ffcf0], bpl
jne 0x1400a4e10
lea rdx, [0x1400ec6f0]
mov ecx, eax
call fcn.1400a3860
int3
lea rcx, [0x1400ec668]
call fcn.140028548
lea rdx, [0x1400c3786]
mov ecx, 4
call fcn.1400a3860
int3
cmp word [0x14010a340], bp
je 0x1400a5011
cmp dword [0x1400ecb44], ebp
jne 0x1400a5011
xor r8d, r8d
lea rdx, [0x1400c378c]
lea rdi, [0x14010a340]
mov rcx, rdi
call fcn.1400319b0
mov rbp, rax
xor ebx, ebx
cmp rax, rbx
jne 0x1400a4e82
mov qword [rsp + 0x20], rdi
lea r9, [0x140109f40]
mov r8, qword [0x1400ec6e0]
mov rdx, qword [0x1400ec6e8]
lea rcx, [0x1400ec668]
call fcn.140028ba0
lea rdx, [0x1400c3786]
lea ecx, [rbx + 0x12]
call fcn.1400a3860
int3
cmp qword [0x1400ec6c8], rbx
je 0x1400a4e97
mov rcx, qword [0x1400ecb58]
call fcn.1400a86a4
mov ecx, 0x8000
call fcn.1400a85ec
mov qword [0x1400ecb58], rax
cmp rax, rbx
jne 0x1400a4ecb
lea rcx, [0x1400ec668]
call fcn.140028548
lea rdx, [0x1400c3786]
mov ecx, 4
call fcn.1400a3860
int3
mov r9, rbp
mov edx, 1
mov r8d, 0x7fff
mov rcx, rax
call fcn.1400a9fd4
mov qword [0x1400ec6c8], rax
mov rcx, qword [0x1400ecb58]
mov byte [rcx + rax], bl
mov eax, dword [0x14010ab40]
cmp eax, 2
jne 0x1400a4f13
mov rcx, qword [0x1400ecb58]
mov rdx, rcx
call qword [sym.imp.USER32.dll_OemToCharA]
mov eax, dword [0x14010ab40]
cmp eax, 3
jne 0x1400a5007
mov rsi, qword [0x1400ecb58]
cmp byte [rsi], 0xff
jne 0x1400a4f33
cmp byte [rsi + 1], 0xfe
jne 0x1400a4f33
lea edi, [rax - 2]
jmp 0x1400a4f35
mov edi, ebx
cmp byte [rsi], 0xfe
jne 0x1400a4f45
cmp byte [rsi + 1], 0xff
jne 0x1400a4f45
mov ebx, 1
mov rdx, qword [0x1400ec6c8]
inc rdx
lea rcx, [rsp + 0x48]
call fcn.14000b810
nop
xor r11d, r11d
mov r10d, r11d
lea edx, [r11 + 2]
cmp edi, r11d
jne 0x1400a4f74
cmp ebx, r11d
jne 0x1400a4f74
lea edi, [rdx - 1]
mov rdx, r11
movsxd r8, edi
movsxd rax, ebx
mov rbx, qword [rsp + 0x48]
cmp rdx, qword [0x1400ec6c8]
jae 0x1400a4fc5
lea rdi, [rax + rdx]
add rdi, rsi
mov r9, rbx
sub r8, rax
movzx ecx, byte [r8 + rdi]
mov eax, 0x100
imul cx, ax
movzx eax, byte [rdi]
add cx, ax
mov word [r9], cx
inc r10d
add r9, 2
add rdx, 2
add rdi, 2
cmp rdx, qword [0x1400ec6c8]
jb 0x1400a4f95
movsxd rax, r10d
mov word [rbx + rax*2], r11w
mov r8, qword [0x1400ec6c8]
dec r8
mov rdx, qword [0x1400ecb58]
mov rcx, rbx
call fcn.140073a88
mov rdx, qword [0x1400ec6c8]
mov rax, qword [0x1400ecb58]
xor ecx, ecx
mov byte [rax + rdx - 1], cl
cmp rbx, rcx
je 0x1400a5007
mov rcx, rbx
call fcn.1400a86a4
mov rcx, rbp
call fcn.1400aa410
xor ebp, ebp
mov esi, ebp
mov ebp, dword [0x1400ec6b8]
mov rdi, qword [0x1400ecb50]
xor r8d, r8d
cmp rdi, r8
je 0x1400a50fb
cmp dword [0x1400ecb44], r8d
jne 0x1400a507c
mov eax, 0x800
test word [rdi + 4], ax
jne 0x1400a507c
movzx edx, word [rdi]
mov ecx, edx
shr ecx, 8
call fcn.1400a5574
xor r8d, r8d
cmp al, r8b
je 0x1400a507c
mov bl, 1
mov r8d, 0x400
mov rdx, qword [rdi + 0x68]
lea rcx, [rsp + 0x25f0]
call fcn.14006b550
mov rcx, qword [rdi + 0x68]
mov rdx, rcx
call sub.USER32.dll_CharToOemA
jmp 0x1400a507f
mov bl, r8b
mov rdx, r15
mov rcx, rdi
call fcn.1400a5b54
xor r8d, r8d
cmp eax, r8d
jne 0x1400a50ec
cmp bl, r8b
je 0x1400a50b2
lea rcx, [rsp + 0x25f0]
mov rdx, qword [rdi + 0x68]
mov al, byte [rcx]
mov byte [rdx], al
inc rcx
inc rdx
cmp al, r8b
jne 0x1400a50a3
mov ecx, dword [rdi + 0x30]
add ecx, dword [rdi + 0x28]
add ecx, dword [rdi + 0x18]
mov eax, dword [0x1400ec6b8]
lea ecx, [rax + rcx + 0x2e]
mov dword [0x1400ec6b8], ecx
cmp sil, r8b
jne 0x1400a50d8
call fcn.1400474ec
xor r8d, r8d
inc esi
mov rdi, qword [rdi + 0x80]
cmp rdi, r8
jne 0x1400a502c
jmp 0x1400a50fb
mov rdx, qword [0x140134ad8]
mov ecx, eax
call fcn.1400a3860
int3
mov edx, dword [0x1400ec6b8]
sub edx, ebp
mov qword [rsp + 0x28], r15
mov rax, qword [0x1400ecb58]
mov qword [rsp + 0x20], rax
mov r9, qword [0x1400ec6c8]
mov r8d, ebp
mov ecx, esi
call fcn.1400a5e58
xor ebp, ebp
cmp eax, ebp
je 0x1400a513a
mov rdx, qword [0x140134ad8]
mov ecx, eax
call fcn.1400a3860
int3
mov qword [0x140134ac8], rbp
mov rcx, r15
call fcn.1400aa410
cmp eax, ebp
je 0x1400a515f
mov rdx, qword [0x140134ad8]
mov ecx, 0xa
call fcn.1400a3860
int3
cmp r13, rbp
je 0x1400a516c
mov rcx, r13
call fcn.1400aa410
call fcn.1400212c0
cmp byte [0x1400ffcf0], bpl
je 0x1400a5192
mov rdx, qword [0x140134ad0]
mov rcx, qword [0x140134ad8]
call fcn.1400313c8
jmp 0x1400a53b6
cmp dword [0x1400ecb44], ebp
je 0x1400a52e5
lea rdx, [rsp + 0x21f0]
lea rcx, [0x140000000]
mov rax, qword [rcx + 0xc83e0]
mov qword [rdx], rax
mov al, byte [rcx + 0xc83e8]
mov byte [rdx + 8], al
mov rcx, qword [0x1400ec6e8]
call fcn.140052a24
mov r11, rax
lea rdi, [rsp + 0x21f0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
xor edx, edx
mov cl, byte [r11 + rdx]
mov byte [rdi + rdx - 1], cl
inc rdx
test cl, cl
jne 0x1400a51e1
mov dl, 1
lea rcx, [rsp + 0x21f0]
call fcn.140053a98
xor edx, edx
lea rcx, [rsp + 0x21f0]
call fcn.1400310a8
cmp al, bpl
je 0x1400a5277
mov dword [rsp + 0x20], ebp
xor r9d, r9d
xor edx, edx
movabs r8, 0x7fffffff7fffffff
lea rcx, [rsp + 0x21f0]
call fcn.14000b220
cmp al, 0x4e
je 0x1400a525c
cmp al, 0x43
je 0x1400a525c
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x21f0]
call fcn.140031188
lea rcx, [rsp + 0x21f0]
call fcn.140032278
jmp 0x1400a5277
mov rdx, qword [0x140134ad0]
mov rcx, qword [0x140134ad8]
call fcn.1400313c8
mov byte [rsp + 0x21f0], bpl
cmp byte [rsp + 0x21f0], bpl
je 0x1400a53b6
xor r9d, r9d
lea r8, [rsp + 0x21f0]
xor edx, edx
mov rcx, qword [0x140134ad8]
call fcn.1400312d8
cmp al, bpl
jne 0x1400a53b6
lea rcx, [rsp + 0x21f0]
call fcn.14006b6a8
mov rbx, rax
mov rcx, qword [0x140134ad8]
call fcn.14006b6a8
mov rdi, rax
mov ecx, 0x207
call fcn.140061d2c
mov rdx, rax
mov r9, rbx
mov r8, rdi
xor ecx, ecx
call fcn.1400964ac
jmp 0x1400a53b6
mov r8, qword [0x140134ad8]
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.140032f70
mov ebx, eax
cmp eax, ebp
je 0x1400a53b6
mov rcx, qword [0x140134ad8]
call fcn.14006b6a8
mov rdi, rax
mov ecx, 0x207
call fcn.140061d2c
mov rdx, rax
mov r9, qword [0x1400ec6e0]
mov r8, rdi
xor ecx, ecx
call fcn.1400964ac
xor r8d, r8d
mov rdx, qword [0x1400ec6e8]
lea rcx, [0x1400ec668]
call fcn.140028f24
cmp ebx, 0xf
jne 0x1400a537c
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.1400310a8
cmp al, bpl
je 0x1400a537c
mov rdx, qword [0x140134ad0]
mov rcx, qword [0x140134ad8]
call fcn.1400313c8
mov rcx, qword [0x140134ad8]
call fcn.1400a86a4
mov qword [0x140134ad8], rbp
mov rcx, qword [0x140134ad0]
cmp rcx, rbp
je 0x1400a53a0
call fcn.1400a86a4
mov qword [0x140134ad0], rbp
lea rdx, [0x1400c3786]
mov ecx, ebx
call fcn.1400a3860
int3
mov rcx, qword [0x140134ad8]
call fcn.1400a86a4
mov qword [0x140134ad8], rbp
mov rcx, qword [0x140134ad0]
cmp rcx, rbp
je 0x1400a53da
call fcn.1400a86a4
mov qword [0x140134ad0], rbp
cmp esi, ebp
jne 0x1400a53f8
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.1400313c8
or ebx, 0xffffffff
mov eax, dword [rsp + 0x34]
cmp eax, ebp
je 0x1400a541d
cmp eax, ebx
je 0x1400a541d
mov r8d, eax
mov rdx, qword [0x1400ec6e0]
mov rcx, qword [0x1400ec6e8]
call fcn.140031188
cmp byte [0x14010bc70], bpl
je 0x1400a5468
mov rdi, qword [0x1400ecb50]
cmp rdi, rbp
je 0x1400a5468
cmp dword [rdi + 0x78], 1
je 0x1400a543d
cmp dword [rdi + 0x7c], ebp
je 0x1400a545c
mov rcx, qword [rdi + 0x48]
call fcn.1400a3a8c
cmp eax, ebx
je 0x1400a545c
test al, 0x20
je 0x1400a545c
and eax, 0xffffffdf
mov edx, eax
mov rcx, qword [rdi + 0x48]
call fcn.1400a3b20
mov rdi, qword [rdi + 0x80]
cmp rdi, rbp
jne 0x1400a5432
neg r14d
sbb ecx, ecx
and ecx, 0x12
lea rdx, [rsp + 0xd50]
call fcn.1400a3bc8
mov rcx, qword [rsp + 0x2df0]
xor rcx, rsp
call fcn.1400a8530
lea r11, [rsp + 0x2e00]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret