Function at 0x1400b3568
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x630
mov r15, rcx
lea rcx, [rax + 0x10]
call fcn.140053eb0
mov edi, 4
lea rdx, [rsp + 0x678]
lea rcx, str._svr
mov r8d, edi
call fcn.14005e44c
xor esi, esi
lea ebp, [rdi - 3]
mov bl, al
mov byte [rsp + 0x50], al
cmp al, sil
jne 0x1400b35e0
lea rdx, [rsp + 0x678]
lea rcx, str._vhd
mov r8d, edi
call fcn.14005e44c
cmp al, sil
mov al, bpl
jne 0x1400b35e3
mov al, sil
mov byte [rsp + 0x40], al
or al, bl
jne 0x1400b38d1
lea rdx, [rsp + 0x678]
lea rcx, str._udm
mov r8d, edi
call fcn.14005e44c
cmp al, sil
je 0x1400b38d1
mov rbx, qword [rsp + 0x678]
lea rdx, [rsp + 0x678]
lea rcx, str.upud
mov r8d, edi
mov r12d, esi
call fcn.14005e44c
cmp al, sil
je 0x1400b363e
mov r12d, 0x80000000
jmp 0x1400b3661
lea rdx, [rsp + 0x678]
lea rcx, str.listud
mov r8d, 6
call fcn.14005e44c
cmp al, sil
je 0x1400b382e
lea rcx, [rsp + 0x80]
mov qword [rsp + 0xb0], rsi
call fcn.14005bc74
mov rdx, qword [rsp + 0x678]
lea r8, [rsp + 0x80]
xor r9d, r9d
mov rcx, r15
mov byte [rsp + 0x20], bpl
call fcn.14006ed78
mov r11, qword [rsp + 0x80]
lea rdx, [rsp + 0x678]
lea rcx, str._ret:
mov r8d, 5
mov qword [rsp + 0x678], r11
mov qword [rsp + 0x688], rsi
call fcn.14005e44c
mov r11b, al
mov rax, qword [rsp + 0x678]
cmp rax, rsi
je 0x1400b36f2
mov ecx, 0x2d
cmp word [rax], cx
je 0x1400b36f2
mov ecx, 0x5c
movzx r11d, r11b
cmp word [rax], cx
cmovne r11d, ebp
mov ebx, 0xd
cmp r11b, sil
je 0x1400b3724
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x688]
mov r8d, ebx
mov qword [rsp + 0x688], rax
call fcn.140023518
mov qword [rsp + 0x678], rax
lea rdx, [rsp + 0x678]
lea rcx, str._udmask:
mov r8d, 8
mov rdi, rsi
mov qword [rsp + 0xb8], rsi
call fcn.14005e44c
cmp al, sil
mov rax, qword [rsp + 0x678]
je 0x1400b3799
mov r8d, 0x2a
cmp r8w, word [rax]
jne 0x1400b3774
add rax, 2
lea edi, [r8 + 0x13]
mov qword [rsp + 0x678], rax
jmp 0x1400b3799
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x678]
call fcn.14006a79c
mov rax, qword [rsp + 0x678]
mov rdi, qword [rsp + 0xb8]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xa8]
mov r8d, ebx
mov qword [rsp + 0xa8], rax
call fcn.140023518
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x678], rax
cmp word [rax], si
mov rbx, rsi
cmovne rbx, rax
call fcn.14005bc74
mov rcx, qword [rsp + 0xa8]
and edi, 0xfeffff
mov r9d, r12d
lea rdx, [rsp + 0x60]
mov r8, rbx
or r9, rdi
mov qword [rsp + 0x20], rsi
call fcn.14004e40c
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x688]
mov rcx, r15
call fcn.14005b2f4
lea rcx, [rsp + 0x60]
call fcn.140053e80
lea rcx, [rsp + 0x80]
call fcn.140053e80
xor eax, eax
jmp 0x1400b4b9a
movzx eax, word [rbx]
or ax, 0x20
sub ax, 0x61
cmp ax, 0x19
jbe 0x1400b386e
cmp word [rbx], 0x30
jb 0x1400b384b
cmp word [rbx], 0x39
jbe 0x1400b386e
mov eax, 0x2e
cmp ax, word [rbx]
je 0x1400b386e
cmp word [rbx], 0x61
jb 0x1400b3861
cmp word [rbx], 0x66
jbe 0x1400b386e
mov eax, 0x78
cmp word [rbx], ax
je 0x1400b386e
mov bpl, sil
lea rax, str.22:INDATA
lea rdx, str.22:INDATA_mount
cmp bpl, sil
cmovne rdx, rax
lea rcx, [rsp + 0x688]
or r8, 0xffffffffffffffff
call fcn.140066928
mov rdx, qword [rsp + 0x678]
lea rcx, [rsp + 0x688]
call fcn.14005bdb0
mov rdx, qword [rsp + 0x688]
mov rcx, r15
call fcn.14003000c
lea rcx, [rsp + 0x688]
mov rbx, rax
call fcn.140053e80
mov rax, rbx
jmp 0x1400b4b9a
lea rcx, [rsp + 0xe0]
call fcn.14005bc74
lea rbx, [0x1400fb538]
lea rcx, [rsp + 0x68]
mov rdx, rbx
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xf0], rsi
call fcn.1400668e8
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.1400668e8
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.1400668e8
lea rcx, [rsp + 0x48]
mov rdx, rbx
call fcn.1400668e8
mov rbx, qword [rsp + 0x678]
mov ecx, 0x2d
cmp cx, word [rbx]
mov eax, 0x200
lea r14d, [rcx - 0x2b]
mov qword [rsp + 0xa8], rax
mov r13, 0xffffffff80000000
mov al, 0x2a
cmove eax, ecx
or r12, 0xffffffffffffffff
mov qword [rsp + 0xd0], rsi
movsx ecx, al
mov qword [rsp + 0x98], rsi
movzx eax, word [rbx]
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xf8], r13
mov dword [rsp + 0xa0], esi
mov dword [rsp + 0x94], esi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x90], esi
mov dword [rsp + 0xcc], esi
mov dword [rsp + 0x88], esi
mov byte [rsp + 0x688], sil
mov byte [rsp + 0x41], sil
mov qword [rsp + 0xb0], rsi
mov dword [rsp + 0xc8], r14d
mov qword [rsp + 0xb8], r12
cmp ecx, eax
jne 0x1400b3cfc
lea edi, [r14 + 0xb]
mov r13d, ecx
lea r11, [rbx + 2]
lea rcx, str.query
mov r8d, 5
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3a62
mov byte [rsp + 0x688], bpl
mov edx, 9
movzx eax, word [rbx]
cmp ax, si
je 0x1400b3a38
mov ecx, 0x20
cmp dx, ax
ja 0x1400b3a20
cmp ax, di
jbe 0x1400b3a38
cmp cx, ax
je 0x1400b3a38
add rbx, r14
mov qword [rsp + 0x678], rbx
mov ax, word [rbx]
cmp ax, si
jne 0x1400b3a16
lea rcx, [rsp + 0x678]
call fcn.140053eb0
mov rbx, qword [rsp + 0x678]
movzx eax, word [rbx]
cmp r13d, eax
je 0x1400b39de
mov r13, qword [rsp + 0xd8]
jmp 0x1400b3cfc
lea rcx, [0x140108248]
mov r8d, 3
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3b24
lea rcx, [rsp + 0x678]
add rbx, 8
mov qword [rsp + 0x678], rbx
call fcn.140053eb0
mov rcx, qword [rsp + 0x678]
mov qword [rsp + 0xd0], rcx
movzx eax, word [rcx]
cmp ax, si
je 0x1400b3aef
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400b3ac5
cmp ax, di
jbe 0x1400b3adf
cmp dx, ax
je 0x1400b3adf
add rcx, r14
mov qword [rsp + 0x678], rcx
mov ax, word [rcx]
cmp ax, si
je 0x1400b3aef
jmp 0x1400b3aba
cmp word [rcx], si
je 0x1400b3aef
mov word [rcx], si
add qword [rsp + 0x678], r14
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0xd0]
xor r9d, r9d
mov rcx, r15
mov word [rsp + 0x20], si
call fcn.14004d77c
mov r11, qword [rsp + 0x98]
mov qword [rsp + 0xd0], r11
jmp 0x1400b3a38
lea rcx, [0x140101128]
mov r8d, ebp
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3b45
mov byte [rsp + 0x41], bpl
jmp 0x1400b3a04
lea rcx, [0x140108244]
mov r8d, ebp
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3b68
mov dword [rsp + 0x94], ebp
jmp 0x1400b3a04
lea rcx, [0x140108240]
mov r8d, r14d
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3b90
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x94], esi
jmp 0x1400b3a04
lea rcx, [0x140101114]
mov r8d, ebp
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3bb4
mov dword [rsp + 0x90], r14d
jmp 0x1400b3a04
lea rcx, [0x14010823c]
mov r8d, r14d
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3bdb
mov dword [rsp + 0x90], 3
jmp 0x1400b3a04
lea rcx, [0x140108238]
mov r8d, 3
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3c0a
lea rax, [rsp + 0xc8]
mov qword [rsp + 0xb0], rax
jmp 0x1400b3b5c
lea rcx, [0x140107174]
mov r8d, ebp
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3c2d
mov dword [rsp + 0xcc], ebp
jmp 0x1400b3a04
lea rcx, [0x140108234]
mov r8d, ebp
mov rdx, r11
call fcn.14005536c
cmp al, sil
je 0x1400b3c51
mov dword [rsp + 0x88], r14d
jmp 0x1400b3a04
lea rcx, [0x140108230]
mov r8d, r14d
mov rdx, r11
call fcn.1400553c8
cmp al, sil
je 0x1400b3a55
add rbx, 6
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x678], rbx
mov qword [rsp + 0xc0], rbx
call fcn.140061d58
movzx r11d, word [rbx]
cmp r11w, si
je 0x1400b3a38
mov eax, 0x20
lea edx, [rax - 0x17]
cmp dx, r11w
ja 0x1400b3cbb
cmp r11w, di
jbe 0x1400b3a09
cmp ax, r11w
je 0x1400b3a09
add rbx, r14
mov qword [rsp + 0x678], rbx
mov r11w, word [rbx]
cmp r11w, si
je 0x1400b3a38
jmp 0x1400b3cab
mov ecx, 0x21
cmp cx, ax
jne 0x1400b3d04
add rbx, r14
mov dword [rsp + 0xa0], ebp
mov qword [rsp + 0x678], rbx
movzx eax, word [rbx]
cmp ax, si
jne 0x1400b3ce0
lea rcx, [rsp + 0x678]
call fcn.140053eb0
mov ebx, 0x2c
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x678]
mov r9d, ebx
mov rcx, r15
mov word [rsp + 0x20], si
call fcn.14004d77c
mov r12, qword [rsp + 0x68]
lea ecx, [rbx + 0x30]
mov qword [rsp + 0x678], rax
mov rdi, rax
cmp cx, word [r12]
je 0x1400b3d5e
lea eax, [rbx + 3]
cmp ax, word [r12]
jne 0x1400b3d88
cmp cx, word [r12]
jne 0x1400b3d8c
cmp cx, word [r12 + 2]
jne 0x1400b3d8c
mov eax, 0x3f
cmp ax, word [r12 + 4]
je 0x1400b3d80
mov eax, 0x2e
cmp ax, word [r12 + 4]
jne 0x1400b3d8c
cmp cx, word [r12 + 6]
jne 0x1400b3d8c
mov eax, esi
jmp 0x1400b3d8e
mov eax, ebp
mov dword [rsp + 0x70], eax
cmp byte [rsp + 0x688], sil
jne 0x1400b3e17
cmp eax, esi
je 0x1400b3e17
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x68], rsi
lea ecx, [rax + 3]
mov edi, eax
mov qword [rsp + 0xc0], rbx
movsxd rdx, ecx
lea rcx, [rsp + 0x68]
call fcn.14005bd74
mov r12, qword [rsp + 0x68]
mov eax, 0x20
mov word [r12], ax
mov eax, 0x3a
lea rcx, [r12 + 4]
mov word [r12 + 2], ax
lea eax, [rdi + 1]
mov rdx, rbx
movsxd r8, eax
add r8, r8
call fcn.14001b6e8
lea rcx, [rsp + 0xc0]
call fcn.140053e80
mov rdi, qword [rsp + 0x678]
mov ebx, 0x2c
mov rcx, rdi
call fcn.14005b788
cmp word [rax], si
je 0x1400b3e57
add rdi, r14
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x678]
mov r9d, ebx
mov rcx, r15
mov word [rsp + 0x20], si
mov qword [rsp + 0x678], rdi
call fcn.14004d77c
mov rdi, rax
mov qword [rsp + 0x678], rax
mov rbx, qword [rsp + 0x78]
or qword [rsp + 0x100], 0xffffffffffffffff
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xc0], rsi
cmp byte [rsp + 0x688], sil
je 0x1400b3e99
cmp byte [rsp + 0x40], sil
je 0x1400b4017
jmp 0x1400b3f0a
mov rcx, rdi
call fcn.14005b788
cmp word [rax], si
je 0x1400b3f0a
add rdi, r14
mov eax, 0x22
mov qword [rsp + 0x678], rdi
cmp ax, word [rdi]
jne 0x1400b3ec6
add rdi, r14
mov qword [rsp + 0x678], rdi
mov edi, 0x2c
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0xe0]
mov r8d, edi
mov r9b, bpl
call fcn.140073af0
lea rdx, [rsp + 0xf8]
movzx r8d, di
mov rcx, rax
call fcn.14005fa8c
mov rdi, qword [rsp + 0x678]
mov r13, qword [rsp + 0xf8]
mov rcx, rdi
call fcn.14005b788
cmp word [rax], si
je 0x1400b3f52
mov rcx, qword [rsp + 0x670]
add rdi, r14
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x678]
mov r9d, 0x2c
mov qword [rsp + 0x678], rdi
mov word [rsp + 0x20], si
call fcn.14004d77c
mov rdi, rax
mov qword [rsp + 0x678], rax
cmp byte [rsp + 0x688], sil
je 0x1400b3f9a
cmp byte [rsp + 0x40], sil
je 0x1400b4017
mov rcx, rdi
call fcn.14005b788
cmp word [rax], si
je 0x1400b4002
add rdi, r14
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x678]
mov qword [rsp + 0x678], rdi
call fcn.14005ff84
jmp 0x1400b4002
cmp byte [rsp + 0x40], sil
je 0x1400b4017
mov rcx, rdi
call fcn.14005b788
cmp word [rax], si
je 0x1400b4002
add rdi, r14
lea rcx, [rsp + 0x678]
mov edx, 0x2c
mov qword [rsp + 0x678], rdi
mov qword [rsp + 0xc0], rdi
call fcn.1400ccf8c
mov rcx, qword [rsp + 0x678]
cmp word [rcx], si
je 0x1400b3feb
mov word [rcx], si
add qword [rsp + 0x678], r14
cmp word [rdi], si
lea rax, [rsp + 0x108]
cmove rax, rsi
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xc8]
mov r15d, ebp
cmp qword [rsp + 0xb0], rax
je 0x1400b401a
mov r15d, esi
cmp byte [rsp + 0x40], sil
je 0x1400b4385
lea rcx, [0x14011a638]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.140057ea4
lea rcx, [0x14011a638]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rsp + 0x41], sil
je 0x1400b4058
mov rcx, r12
call fcn.1400581b8
movsxd rbp, eax
jmp 0x1400b40b4
mov dl, byte [rsp + 0x688]
mov eax, r15d
neg eax
sbb rdi, rdi
neg rdi
sub rdi, rbp
mov qword [rsp + 0xa0], rdi
cmp dl, sil
je 0x1400b411c
mov rcx, qword [rsp + 0x670]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rbx
mov rdi, rsi
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0x20], rsi
call fcn.140016e70
mov r13, rax
cmp rax, rsi
jne 0x1400b4101
mov rbp, 0xffffffff80070057
lea rcx, [rsp + 0x98]
call fcn.140053e80
lea rcx, [rsp + 0x48]
call fcn.140053e80
lea rcx, [rsp + 0x80]
call fcn.140053e80
lea rcx, [rsp + 0x78]
call fcn.140053e80
lea rcx, [rsp + 0x68]
call fcn.140053e80
lea rcx, [rsp + 0xe0]
call fcn.140053e80
mov rax, rbp
jmp 0x1400b4b9a
mov rcx, qword [rsp + 0x100]
mov dl, byte [rsp + 0x688]
cmp rcx, rsi
jl 0x1400b411c
mov rax, qword [rax + 8]
mov qword [rax], rcx
cmp dword [rsp + 0x90], esi
je 0x1400b41d4
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x688], rsi
mov r13, rbx
call fcn.140061d58
mov r11, qword [rsp + 0x60]
cmp word [r11], si
je 0x1400b4159
add r11, r14
mov qword [rsp + 0x60], r11
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x60]
call fcn.140061d58
mov rbx, qword [rsp + 0x60]
cmp qword [rsp + 0x688], rsi
je 0x1400b417d
mov word [rbx], si
cmp dword [rsp + 0xcc], esi
cmovne ebp, esi
cmp qword [rsp + 0x688], 0x100000
jge 0x1400b41a8
cmp word [r13], si
jne 0x1400b41a8
mov rbp, 0xffffffff80070057
jmp 0x1400b42d1
mov eax, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0x90]
mov r8d, ebp
mov rdx, r13
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.14006ba48
movsxd rbp, eax
mov rdi, rbp
jmp 0x1400b42d1
mov rdi, qword [rsp + 0xd8]
mov rax, rdi
neg rax
sbb ecx, ecx
not ecx
and ecx, 4
or ecx, dword [rsp + 0x88]
or ecx, dword [rsp + 0x94]
cmp word [rbx], si
je 0x1400b420b
mov r8d, 0x2a
cmp r8w, word [rbx]
je 0x1400b420b
or ecx, r14d
cmp r15d, esi
je 0x1400b4218
cmp dword [rsp + 0x58], esi
jg 0x1400b4218
or ecx, ebp
mov rax, qword [rsp + 0x48]
cmp word [rax], si
jne 0x1400b4226
bts ecx, 0x10
cmp dl, sil
jne 0x1400b4232
cmp r13, rsi
cmovle r13, rbp
mov al, dl
mov qword [rsp + 0x30], rdi
mov r9, r13
neg al
mov rax, qword [rsp + 0xb0]
mov r8, rbx
sbb edx, edx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xa0]
and edx, 0x20
mov qword [rsp + 0x20], rax
or edx, ecx
mov rcx, r12
call fcn.1400a4e70
movsxd rbp, eax
cmp rdi, rsi
je 0x1400b4294
cmp qword [rdi], rsi
je 0x1400b4294
mov rdx, qword [rdi]
mov rdi, qword [rsp + 0x670]
mov r8, qword [rsp + 0xc0]
mov rcx, rdi
call fcn.14003c190
jmp 0x1400b429c
mov rdi, qword [rsp + 0x670]
cmp byte [rsp + 0x688], sil
je 0x1400b42c9
mov r8, qword [rsp + 0x48]
cmp word [r8], si
je 0x1400b40b4
mov edx, dword [rsp + 0xa0]
mov rcx, rdi
call fcn.14005ecfc
jmp 0x1400b40b4
mov rdi, qword [rsp + 0xa0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rsp + 0x688]
movsxd rdx, eax
add rdx, 0x96
call fcn.14005bce8
mov rcx, qword [rsp + 0x688]
lea rdx, str._I64d_t_d_t_s
mov r9d, ebp
mov r8, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.USER32.dll_wsprintfW]
mov r8, qword [rsp + 0x688]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x670]
call fcn.14005b2f4
lea rcx, [rsp + 0x688]
call fcn.140053e80
lea rcx, [rsp + 0x98]
call fcn.140053e80
lea rcx, [rsp + 0x48]
call fcn.140053e80
lea rcx, [rsp + 0x80]
call fcn.140053e80
lea rcx, [rsp + 0x78]
call fcn.140053e80
lea rcx, [rsp + 0x68]
call fcn.140053e80
lea rcx, [rsp + 0xe0]
call fcn.140053e80
movsxd rax, ebp
jmp 0x1400b4b9a
mov dil, byte [rsp + 0x688]
cmp dil, sil
jne 0x1400b43ad
cmp word [rbx], si
jne 0x1400b43ad
cmp byte [rsp + 0x41], sil
je 0x1400b40ad
cmp word [r12], si
je 0x1400b40ad
cmp byte [rsp + 0x50], sil
je 0x1400b44be
lea rdx, str.22:INDATA_mount_wimsvr__
lea rcx, [rsp + 0x688]
or r8, 0xffffffffffffffff
call fcn.140066928
lea rcx, [rsp + 0x688]
mov rdx, r12
mov word [rsp + 0x140], si
call fcn.14005bdb0
lea rdi, [0x1400ff998]
lea rcx, [rsp + 0x688]
mov rdx, rdi
call fcn.14005bdb0
lea rcx, [rsp + 0x688]
mov rdx, rbx
call fcn.14005bdb0
lea rcx, [rsp + 0x688]
mov rdx, rdi
call fcn.14005bdb0
cmp r13, rsi
jl 0x1400b4449
lea rcx, [rsp + 0x140]
mov rdx, r13
call fcn.1400cac00
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x688]
call fcn.14005bdb0
lea rcx, [rsp + 0x688]
mov rdx, rdi
call fcn.14005bdb0
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x688]
call fcn.14005bdb0
lea rdx, [0x1400ffa10]
lea rcx, [rsp + 0x688]
call fcn.14005bdb0
mov rdx, qword [rsp + 0x678]
lea rcx, [rsp + 0x688]
call fcn.14005bdb0
mov rdx, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x670]
call fcn.14003000c
lea rcx, [rsp + 0x688]
mov rbp, rax
call fcn.140053e80
jmp 0x1400b40b4
lea rcx, [0x14011aa38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0xd0]
lea rcx, [rsp + 0x688]
call fcn.140055518
lea rcx, [rsp + 0x688]
call fcn.1400554fc
lea rcx, [0x14011aa38]
mov r15d, eax
mov dword [rsp + 0x58], eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp r15d, esi
jge 0x1400b451f
mov rcx, qword [rsp + 0x670]
lea rdx, str.WIM_DLL_ERR_r_n
call fcn.140017284
jmp 0x1400b40b4
cmp dil, sil
je 0x1400b46ce
cmp qword [0x14011a280], rsi
jne 0x1400b453b
mov ebp, 0x78
jmp 0x1400b40b4
mov edx, 0x3d
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov r13, rax
cmp rax, rsi
je 0x1400b4557
mov word [rax], si
add r13, r14
cmp word [r12], si
je 0x1400b40ad
lea rcx, [rsp + 0x88]
call fcn.14005bc74
mov rdi, qword [rsp + 0x678]
mov rcx, rdi
call fcn.14005b788
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400b45c2
mov r8d, ecx
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0xe0]
add rdi, r14
mov r9b, bpl
mov qword [rsp + 0x678], rdi
call fcn.140073af0
lea rdx, [rsp + 0x88]
mov rcx, rax
xor r8d, r8d
call fcn.14005f7b4
mov rcx, qword [rsp + 0x88]
call fcn.140019c78
lea rcx, [rsp + 0x688]
mov rdi, rax
call fcn.14005bc74
mov eax, 0x3a
cmp word [rbx], si
je 0x1400b4619
cmp ax, word [rbx + 2]
je 0x1400b4619
lea rdx, [rsp + 0x688]
mov rcx, rbx
call fcn.14001a0d4
mov rdx, qword [rsp + 0x688]
lea rcx, [rsp + 0x78]
call fcn.140066968
mov rbx, qword [rax]
mov eax, 0x3a
cmp word [rdi], si
je 0x1400b464c
cmp ax, word [rdi + 2]
je 0x1400b464c
lea rdx, [rsp + 0x688]
mov rcx, rdi
call fcn.14001a0d4
mov rdx, qword [rsp + 0x688]
lea rcx, [rsp + 0x88]
call fcn.140066968
mov rdi, qword [rax]
lea rcx, [rsp + 0x60]
mov edx, 0x20
call fcn.14005bce8
mov rax, qword [rsp + 0x60]
mov rdx, rbx
mov rbx, qword [rsp + 0x670]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0x60]
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x28], rsi
mov word [rax + 4], si
mov qword [rsp + 0x20], r13
call fcn.14006b78c
mov r8, qword [rsp + 0x60]
mov rdx, r12
mov rcx, rbx
add r8, 4
call fcn.14005b2f4
lea rcx, [rsp + 0x60]
call fcn.140053e80
lea rcx, [rsp + 0x688]
call fcn.140053e80
lea rcx, [rsp + 0x88]
call fcn.140053e80
mov rbp, rsi
jmp 0x1400b40b4
cmp byte [rsp + 0x41], sil
jne 0x1400b4956
cmp word [r12], si
je 0x1400b4956
mov rax, qword [rsp + 0x48]
mov r8d, 0x2a
cmp r8w, word [rax]
jne 0x1400b471c
lea rcx, [rsp + 0x48]
mov edx, 0x105
call fcn.14005bd74
mov rax, qword [rsp + 0x48]
mov ecx, 0x104
mov word [rax], si
mov rdx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp qword [0x14011a268], rsi
je 0x1400b40b4
mov rcx, rbx
call fcn.1400de6f4
cmp eax, esi
jne 0x1400b4767
lea rcx, [rsp + 0x688]
mov rdx, rbx
call fcn.1400668e8
mov rdx, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x670]
call fcn.140027670
lea rcx, [rsp + 0x688]
call fcn.140053e80
mov rcx, rbx
call fcn.1400de6f4
cmp eax, esi
je 0x1400b40b4
cmp dword [rsp + 0x70], esi
jne 0x1400b478d
mov rcx, r12
call fcn.1400de830
cmp eax, esi
je 0x1400b40b4
xor edx, edx
lea rcx, [rsp + 0x114]
mov dword [rsp + 0x110], esi
lea r8d, [rdx + 0x20]
call fcn.1400df2a0
lea r8, [rsp + 0x110]
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
cmp eax, esi
je 0x1400b47c8
test byte [rsp + 0x110], bpl
jne 0x1400b47d3
mov r14, qword [rsp + 0x48]
cmp word [r14], si
jne 0x1400b47d6
mov r14, rsi
mov ecx, dword [rsp + 0x70]
mov di, si
mov word [rsp + 0x688], si
cmp ecx, esi
je 0x1400b4814
cmp r15d, esi
jne 0x1400b47fb
mov edi, pe_nt_image_headers64
mov word [rsp + 0x688], di
cmp dword [rsp + 0xa0], esi
je 0x1400b4814
mov eax, 0x200
or di, ax
mov word [rsp + 0x688], di
mov eax, ebp
cmp ecx, esi
je 0x1400b4832
lea rdx, [rsp + 0x688]
mov rcx, r12
call fcn.1400a747c
mov di, word [rsp + 0x688]
sar eax, 8
mov rcx, r12
movzx r15d, al
sub r15d, ebp
cmp r13, 0xffffffff80000000
cmove r13, rbp
call fcn.1400de830
cmp eax, esi
je 0x1400b48ad
mov r9, r14
mov rdx, r12
mov rcx, rbx
cmp dword [rsp + 0x58], esi
je 0x1400b4873
cmp r13, rsi
cmovge ebp, r13d
mov r8d, ebp
call fcn.14006b56c
jmp 0x1400b4883
cmp r13, rsi
cmovge ebp, r13d
mov r8d, ebp
call qword [0x14011a268]
mov r9, rbx
mov rbx, qword [rsp + 0x670]
mov dword [rsp + 0x28], eax
lea rdx, str.FOUND_WIM___s____mount_to___s____s___d_r_n
mov r8, r12
mov rcx, rbx
mov ebp, eax
mov qword [rsp + 0x20], r14
call fcn.140017284
jmp 0x1400b48b7
mov rbx, qword [rsp + 0x670]
mov ebp, esi
cmp dword [rsp + 0x70], esi
je 0x1400b48d3
cmp dword [rsp + 0xa0], esi
jne 0x1400b48d3
cmp di, si
je 0x1400b48d3
movzx ecx, di
call fcn.140056054
cmp r15d, esi
jl 0x1400b4903
lea rdx, str.PART_update__d
lea rcx, [rsp + 0x140]
mov r8d, r15d
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x148]
xor r8d, r8d
mov rcx, rbx
call fcn.140080110
lea rcx, [rsp + 0x98]
call fcn.140053e80
lea rcx, [rsp + 0x48]
call fcn.140053e80
lea rcx, [rsp + 0x80]
call fcn.140053e80
lea rcx, [rsp + 0x78]
call fcn.140053e80
lea rcx, [rsp + 0x68]
call fcn.140053e80
lea rcx, [rsp + 0xe0]
call fcn.140053e80
cmp ebp, esi
sete sil
mov rax, rsi
jmp 0x1400b4b9a
lea rcx, [rsp + 0x58]
call fcn.14005bc74
mov eax, 0x3a
cmp word [rbx], si
je 0x1400b4994
cmp ax, word [rbx + 2]
je 0x1400b4994
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14001a0d4
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.140066968
mov rbx, qword [rax]
mov eax, 0x3a
cmp word [r12], si
je 0x1400b49c2
cmp ax, word [r12 + 2]
je 0x1400b49c2
lea rdx, [rsp + 0x58]
mov rcx, r12
call fcn.14001a0d4
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.140066968
mov r12, qword [rax]
or dword [rsp + 0x688], 0xffffffff
cmp word [rbx], si
jne 0x1400b4a32
cmp word [r12], si
je 0x1400b4a2d
mov rcx, qword [rsp + 0x670]
lea rax, [rsp + 0x688]
lea rdx, [0x1400fb538]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x210]
lea r9, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov r8, r12
mov qword [rsp + 0x20], rdx
call fcn.14006b78c
cmp rax, rsi
je 0x1400b4a51
mov eax, dword [rsp + 0x688]
lea rbx, [rsp + 0x418]
mov qword [rsp + 0xb8], rax
cmp word [rbx], si
je 0x1400b4a51
cmp qword [0x14011a270], rsi
jne 0x1400b4a45
lea rcx, [rsp + 0x58]
jmp 0x1400b44b4
mov rcx, rbx
call fcn.1400de6f4
cmp eax, esi
jne 0x1400b4a60
lea rcx, [rsp + 0x58]
call fcn.140053e80
jmp 0x1400b40ad
movzx eax, word [r12]
mov edi, ebp
neg ax
movzx eax, word [rbx]
sbb r14, r14
and r14, r12
neg ax
sbb r12, r12
and r12, rbx
cmp r13, 0xffffffff80000000
cmove r13, rsi
cmp dword [rsp + 0xb8], esi
jg 0x1400b4ae2
cmp r15d, esi
je 0x1400b4aae
mov edx, esi
cmp r13, rsi
mov rcx, rbx
setne dl
xor r8d, r8d
call fcn.140057d10
mov edi, eax
cmp eax, esi
je 0x1400b4ad9
cmp r13, 0xffffffff80000000
je 0x1400b4abf
mov r9d, ebp
cmp r13, rsi
jne 0x1400b4ac2
mov r9d, esi
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call qword [0x14011a270]
mov edi, esi
cmp eax, esi
sete dil
cmp dword [rsp + 0xb8], esi
je 0x1400b4b48
cmp edi, esi
je 0x1400b4b48
mov r10, qword [0x14011a278]
cmp r10, rsi
je 0x1400b4b48
cmp qword [0x14011a2e8], rsi
setne al
cmp al, sil
je 0x1400b4b21
mov edx, esi
cmp r13, rsi
mov r8d, ebp
setne dl
mov rcx, rbx
call fcn.140057d10
mov edi, eax
cmp eax, esi
je 0x1400b4b48
mov r10, qword [0x14011a278]
cmp r13, 0xffffffff80000000
je 0x1400b4b2f
cmp r13, rsi
jne 0x1400b4b31
mov ebp, esi
mov r9d, ebp
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call r10
mov edi, esi
cmp eax, esi
sete dil
lea rcx, [rsp + 0x58]
call fcn.140053e80
lea rcx, [rsp + 0x98]
call fcn.140053e80
lea rcx, [rsp + 0x48]
call fcn.140053e80
lea rcx, [rsp + 0x80]
call fcn.140053e80
lea rcx, [rsp + 0x78]
call fcn.140053e80
lea rcx, [rsp + 0x68]
call fcn.140053e80
lea rcx, [rsp + 0xe0]
call fcn.140053e80
movsxd rax, edi
mov rbx, qword [rsp + 0x680]
add rsp, 0x630
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret