Function at 0x1400be92c
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x600
mov r15, rcx
lea rcx, [rax + 0x10]
call fcn.1400503f4
mov edi, 4
lea rdx, [rsp + 0x648]
lea rcx, str._svr
mov r8d, edi
call fcn.14005a810
xor esi, esi
lea ebp, [rdi - 3]
mov bl, al
mov byte [rsp + 0x41], al
cmp al, sil
jne 0x1400be9a4
lea rdx, [rsp + 0x648]
lea rcx, str._vhd
mov r8d, edi
call fcn.14005a810
cmp al, sil
mov al, bpl
jne 0x1400be9a7
mov al, sil
mov byte [rsp + 0x42], al
or al, bl
jne 0x1400bec74
lea rdx, [rsp + 0x648]
lea rcx, str._udm
mov r8d, edi
call fcn.14005a810
cmp al, sil
je 0x1400bec74
mov rbx, qword [rsp + 0x648]
lea rdx, [rsp + 0x648]
lea rcx, str.upud
mov r8d, edi
mov r12d, esi
call fcn.14005a810
cmp al, sil
je 0x1400bea02
mov r12d, 0x80000000
jmp 0x1400bea25
lea rdx, [rsp + 0x648]
lea rcx, str.listud
mov r8d, 6
call fcn.14005a810
cmp al, sil
je 0x1400bebd1
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x50], rsi
call fcn.140058038
mov rdx, qword [rsp + 0x648]
lea r8, [rsp + 0x48]
xor r9d, r9d
mov rcx, r15
mov byte [rsp + 0x20], bpl
call fcn.14006a438
mov r11, qword [rsp + 0x48]
lea rdx, [rsp + 0x648]
lea rcx, str._ret:
mov r8d, 5
mov qword [rsp + 0x648], r11
mov qword [rsp + 0x658], rsi
call fcn.14005a810
mov r11b, al
mov rax, qword [rsp + 0x648]
cmp rax, rsi
je 0x1400beaaa
mov ecx, 0x2d
cmp word [rax], cx
je 0x1400beaaa
mov ecx, 0x5c
movzx r11d, r11b
cmp word [rax], cx
cmovne r11d, ebp
mov ebx, 0xd
cmp r11b, sil
je 0x1400bead9
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x658]
mov r8d, ebx
mov qword [rsp + 0x658], rax
call fcn.140024200
mov qword [rsp + 0x648], rax
lea rdx, [rsp + 0x648]
lea rcx, str._udmask:
mov r8d, 8
mov rdi, rsi
mov qword [rsp + 0xa0], rsi
call fcn.14005a810
cmp al, sil
mov rax, qword [rsp + 0x648]
je 0x1400beb4b
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400beb26
add rax, 2
lea edi, [rcx + 0x13]
mov qword [rsp + 0x648], rax
jmp 0x1400beb4b
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x648]
call fcn.1400662b4
mov rax, qword [rsp + 0x648]
mov rdi, qword [rsp + 0xa0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
mov r8d, ebx
mov qword [rsp + 0x68], rax
call fcn.140024200
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x648], rax
cmp word [rax], si
mov rbx, rsi
cmovne rbx, rax
call fcn.140058038
mov rcx, qword [rsp + 0x68]
and edi, 0xfeffff
mov r9d, r12d
lea rdx, [rsp + 0x78]
mov r8, rbx
or r9, rdi
mov qword [rsp + 0x20], rsi
call fcn.14004a934
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x658]
mov rcx, r15
call fcn.140057714
lea rcx, [rsp + 0x78]
call fcn.140050424
lea rcx, [rsp + 0x48]
call fcn.140050424
xor eax, eax
jmp 0x1400bfceb
movzx eax, word [rbx]
or ax, 0x20
sub ax, 0x61
cmp ax, 0x19
jbe 0x1400bec11
cmp word [rbx], 0x30
jb 0x1400bebee
cmp word [rbx], 0x39
jbe 0x1400bec11
mov eax, 0x2e
cmp ax, word [rbx]
je 0x1400bec11
cmp word [rbx], 0x61
jb 0x1400bec04
cmp word [rbx], 0x66
jbe 0x1400bec11
mov eax, 0x78
cmp word [rbx], ax
je 0x1400bec11
mov bpl, sil
lea rax, str.22:INDATA
lea rdx, str.22:INDATA_mount
cmp bpl, sil
cmovne rdx, rax
lea rcx, [rsp + 0x658]
or r8, 0xffffffffffffffff
call fcn.14006256c
mov rdx, qword [rsp + 0x648]
lea rcx, [rsp + 0x658]
call fcn.140058174
mov rdx, qword [rsp + 0x658]
mov rcx, r15
call fcn.14004392c
lea rcx, [rsp + 0x658]
mov rbx, rax
call fcn.140050424
mov rax, rbx
jmp 0x1400bfceb
lea rcx, [rsp + 0xc0]
call fcn.140058038
lea rbx, [0x1400f04f4]
lea rcx, [rsp + 0x70]
mov rdx, rbx
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], rsi
call fcn.14006252c
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.14006252c
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.14006252c
lea rcx, [rsp + 0x60]
mov rdx, rbx
call fcn.14006252c
mov rbx, qword [rsp + 0x648]
mov ecx, 0x2d
cmp cx, word [rbx]
mov eax, 0x200
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xa0], rax
mov al, 0x2a
mov qword [rsp + 0x90], rsi
cmove eax, ecx
lea r14d, [rcx - 0x2b]
mov r13d, 0x80000000
movsx r12d, al
movzx eax, word [rbx]
mov dword [rsp + 0x88], esi
mov dword [rsp + 0xa8], r13d
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x98], esi
mov dword [rsp + 0xb0], esi
mov dword [rsp + 0xac], esi
mov byte [rsp + 0x658], sil
mov byte [rsp + 0x40], sil
mov qword [rsp + 0xd8], rsi
mov dword [rsp + 0x68], r14d
cmp r12d, eax
jne 0x1400bf041
lea edi, [rcx - 0x20]
lea r11, [rbx + 2]
lea rcx, str.query
mov r8d, 5
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400beddc
mov byte [rsp + 0x658], bpl
mov edx, 9
movzx eax, word [rbx]
cmp ax, si
je 0x1400bedba
mov ecx, 0x20
cmp dx, ax
ja 0x1400beda2
cmp ax, di
jbe 0x1400bedba
cmp cx, ax
je 0x1400bedba
add rbx, r14
mov qword [rsp + 0x648], rbx
mov ax, word [rbx]
cmp ax, si
jne 0x1400bed98
lea rcx, [rsp + 0x648]
call fcn.1400503f4
mov rbx, qword [rsp + 0x648]
movzx eax, word [rbx]
cmp r12d, eax
je 0x1400bed60
jmp 0x1400bf041
lea rcx, [0x1400fd020]
mov r8d, 3
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400bee9e
lea rcx, [rsp + 0x648]
add rbx, 8
mov qword [rsp + 0x648], rbx
call fcn.1400503f4
mov rcx, qword [rsp + 0x648]
mov qword [rsp + 0xb8], rcx
movzx eax, word [rcx]
cmp ax, si
je 0x1400bee69
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400bee3f
cmp ax, di
jbe 0x1400bee59
cmp dx, ax
je 0x1400bee59
add rcx, r14
mov qword [rsp + 0x648], rcx
mov ax, word [rcx]
cmp ax, si
je 0x1400bee69
jmp 0x1400bee34
cmp word [rcx], si
je 0x1400bee69
mov word [rcx], si
add qword [rsp + 0x648], r14
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0xb8]
xor r9d, r9d
mov rcx, r15
mov word [rsp + 0x20], si
call fcn.140049d5c
mov r11, qword [rsp + 0x90]
mov qword [rsp + 0xb8], r11
jmp 0x1400bedba
lea rcx, [0x1400f529c]
mov r8d, ebp
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400beebf
mov byte [rsp + 0x40], bpl
jmp 0x1400bed86
lea rcx, [0x1400fd01c]
mov r8d, ebp
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400beedf
mov dword [rsp + 0x58], ebp
jmp 0x1400bed86
lea rcx, [0x1400f6130]
mov r8d, ebp
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400bef03
mov dword [rsp + 0x98], r14d
jmp 0x1400bed86
lea rcx, [0x1400fd018]
mov r8d, r14d
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400bef2a
mov dword [rsp + 0x98], 3
jmp 0x1400bed86
lea rcx, [0x1400fd014]
mov r8d, 3
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400bef53
lea rax, [rsp + 0x68]
mov qword [rsp + 0xd8], rax
jmp 0x1400beed6
lea rcx, [0x1400fb800]
mov r8d, ebp
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400bef76
mov dword [rsp + 0xb0], ebp
jmp 0x1400bed86
lea rcx, [0x1400fd010]
mov r8d, ebp
mov rdx, r11
call fcn.1400518dc
cmp al, sil
je 0x1400bef9c
mov eax, r14d
mov dword [rsp + 0xac], eax
jmp 0x1400bed86
lea rcx, [0x1400fd00c]
mov r8d, r14d
mov rdx, r11
call fcn.140051938
cmp al, sil
je 0x1400bf041
add rbx, 6
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x648], rbx
mov qword [rsp + 0x48], rbx
call fcn.14005dd68
movzx r11d, word [rbx]
cmp r11w, si
je 0x1400bedba
mov eax, 0x20
lea edx, [rax - 0x17]
cmp dx, r11w
ja 0x1400bf000
cmp r11w, di
jbe 0x1400bed8b
cmp ax, r11w
je 0x1400bed8b
add rbx, r14
mov qword [rsp + 0x648], rbx
mov r11w, word [rbx]
cmp r11w, si
je 0x1400bedba
jmp 0x1400beff0
mov ecx, 0x21
cmp cx, ax
jne 0x1400bf049
add rbx, r14
mov dword [rsp + 0x88], ebp
mov qword [rsp + 0x648], rbx
movzx eax, word [rbx]
cmp ax, si
jne 0x1400bf025
lea rcx, [rsp + 0x648]
call fcn.1400503f4
mov ebx, 0x2c
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x648]
mov r9d, ebx
mov rcx, r15
mov word [rsp + 0x20], si
call fcn.140049d5c
mov r12, qword [rsp + 0x70]
lea ecx, [rbx + 0x30]
mov qword [rsp + 0x648], rax
mov rdi, rax
cmp cx, word [r12]
je 0x1400bf0a3
lea eax, [rbx + 3]
cmp ax, word [r12]
jne 0x1400bf0cd
cmp cx, word [r12]
jne 0x1400bf0d2
cmp cx, word [r12 + 2]
jne 0x1400bf0d2
mov eax, 0x3f
cmp ax, word [r12 + 4]
je 0x1400bf0c5
mov eax, 0x2e
cmp ax, word [r12 + 4]
jne 0x1400bf0d2
cmp cx, word [r12 + 6]
jne 0x1400bf0d2
mov r15d, esi
jmp 0x1400bf0d5
mov r15d, ebp
mov dword [rsp + 0x50], r15d
cmp byte [rsp + 0x658], sil
jne 0x1400bf15a
cmp r15d, esi
je 0x1400bf15a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
lea ecx, [rax + 3]
mov edi, eax
mov qword [rsp + 0x48], rbx
movsxd rdx, ecx
lea rcx, [rsp + 0x70]
call fcn.140058138
mov r12, qword [rsp + 0x70]
mov eax, 0x20
mov word [r12], ax
mov eax, 0x3a
lea rcx, [r12 + 4]
mov word [r12 + 2], ax
lea eax, [rdi + 1]
mov rdx, rbx
movsxd r8, eax
add r8, r8
call fcn.14001aa74
lea rcx, [rsp + 0x48]
call fcn.140050424
mov rdi, qword [rsp + 0x648]
mov ebx, 0x2c
mov rcx, rdi
call fcn.140057b84
cmp word [rax], bx
jne 0x1400bf1a2
mov rcx, qword [rsp + 0x640]
add rdi, r14
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x648]
mov r9d, ebx
mov qword [rsp + 0x648], rdi
mov word [rsp + 0x20], si
call fcn.140049d5c
mov rdi, rax
mov qword [rsp + 0x648], rax
mov al, byte [rsp + 0x658]
mov rbx, qword [rsp + 0x80]
mov qword [rsp + 0x48], rbx
cmp al, sil
jne 0x1400bf27e
mov rcx, rdi
call fcn.140057b84
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400bf230
add rdi, r14
lea eax, [rcx - 0xa]
mov qword [rsp + 0x648], rdi
cmp ax, word [rdi]
jne 0x1400bf1ef
add rdi, r14
mov qword [rsp + 0x648], rdi
mov r8d, ecx
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0xc0]
mov r9b, bpl
call fcn.14006ece4
lea rdx, [rsp + 0xa8]
mov r8d, 0x2c
mov rcx, rax
call fcn.14005bcf4
mov rdi, qword [rsp + 0x648]
mov r13d, dword [rsp + 0xa8]
mov rcx, rdi
call fcn.140057b84
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400bf277
mov r9d, ecx
mov rcx, qword [rsp + 0x640]
add rdi, r14
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x648]
mov word [rsp + 0x20], si
mov qword [rsp + 0x648], rdi
call fcn.140049d5c
mov qword [rsp + 0x648], rax
mov al, byte [rsp + 0x658]
cmp byte [rsp + 0x42], sil
je 0x1400bf4a7
lea rcx, [0x14010e5a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.140054408
lea rcx, [0x14010e5a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rsp + 0x40], sil
je 0x1400bf2ff
mov rcx, r12
call fcn.1400547cc
lea rcx, [rsp + 0x90]
movsxd rbx, eax
call fcn.140050424
lea rcx, [rsp + 0x60]
call fcn.140050424
lea rcx, [rsp + 0x78]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0x70]
call fcn.140050424
lea rcx, [rsp + 0xc0]
jmp 0x1400bec67
mov r15d, dword [rsp + 0x98]
or rdi, 0xffffffffffffffff
mov dword [rsp + 0x658], edi
cmp r15d, esi
je 0x1400bf3a3
lea rdx, [rsp + 0x658]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x658], rsi
call fcn.14005dd68
mov r11, qword [rsp + 0x48]
cmp word [r11], si
je 0x1400bf348
add r11, r14
mov qword [rsp + 0x48], r11
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.14005dd68
cmp dword [rsp + 0xb0], esi
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x658]
cmovne ebp, esi
mov word [rbx], si
cmp rdx, 0x100000
jge 0x1400bf386
mov rbp, 0xffffffff80070057
jmp 0x1400bf3f6
mov eax, dword [rsp + 0xa0]
mov r9d, r15d
mov r8d, ebp
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.140054530
mov edi, eax
jmp 0x1400bf3f4
mov rcx, qword [rsp + 0xd8]
mov eax, dword [rsp + 0xac]
lea r8, [rsp + 0x68]
or eax, dword [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov edx, eax
or edx, 4
cmp rcx, r8
mov r8, rbx
cmove edx, eax
cmp r13d, esi
lea rax, [rsp + 0x658]
cmovle r13d, ebp
mov rcx, r12
mov qword [rsp + 0x20], rax
mov r9d, r13d
call fcn.1400be5c4
mov edi, dword [rsp + 0x658]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rsp + 0x658]
movsxd rdx, eax
add rdx, 0x3c
call fcn.1400580ac
mov rcx, qword [rsp + 0x658]
lea rdx, str._d__d__s
mov r9d, ebp
mov r8d, edi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.USER32.dll_wsprintfW]
mov r8, qword [rsp + 0x658]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x640]
call fcn.140057714
lea rcx, [rsp + 0x658]
call fcn.140050424
lea rcx, [rsp + 0x90]
call fcn.140050424
lea rcx, [rsp + 0x60]
call fcn.140050424
lea rcx, [rsp + 0x78]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0x70]
call fcn.140050424
lea rcx, [rsp + 0xc0]
call fcn.140050424
movsxd rax, ebp
jmp 0x1400bfceb
cmp al, sil
jne 0x1400bf4c7
cmp word [rbx], si
jne 0x1400bf4c7
cmp byte [rsp + 0x40], sil
je 0x1400bfb60
cmp word [r12], si
je 0x1400bfb60
cmp byte [rsp + 0x41], sil
je 0x1400bf5d8
lea rdx, str.22:INDATA_mount_wimsvr__
lea rcx, [rsp + 0x658]
or r8, 0xffffffffffffffff
call fcn.14006256c
lea rcx, [rsp + 0x658]
mov rdx, r12
mov word [rsp + 0x110], si
call fcn.140058174
lea rdi, [0x1400f4d10]
lea rcx, [rsp + 0x658]
mov rdx, rdi
call fcn.140058174
lea rcx, [rsp + 0x658]
mov rdx, rbx
call fcn.140058174
lea rcx, [rsp + 0x658]
mov rdx, rdi
call fcn.140058174
cmp r13d, esi
jl 0x1400bf563
lea rcx, [rsp + 0x110]
movsxd rdx, r13d
call fcn.1400c38e4
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x658]
call fcn.140058174
lea rcx, [rsp + 0x658]
mov rdx, rdi
call fcn.140058174
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x658]
call fcn.140058174
lea rdx, [0x1400f4d90]
lea rcx, [rsp + 0x658]
call fcn.140058174
mov rdx, qword [rsp + 0x648]
lea rcx, [rsp + 0x658]
call fcn.140058174
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0x640]
call fcn.14004392c
lea rcx, [rsp + 0x658]
mov rbp, rax
call fcn.140050424
jmp 0x1400bfb67
lea rcx, [0x14010e9a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x41]
call fcn.140051a88
lea rcx, [rsp + 0x41]
call fcn.140051a6c
lea rcx, [0x14010e9a8]
mov edi, eax
mov dword [rsp + 0x58], eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp edi, esi
jge 0x1400bf631
mov rcx, qword [rsp + 0x640]
lea rdx, str.WIM_DLL_ERR_r_n
call fcn.14001662c
jmp 0x1400bfb67
cmp byte [rsp + 0x658], sil
je 0x1400bf7d9
cmp qword [0x14010e1f8], rsi
jne 0x1400bf652
mov ebp, 0x78
jmp 0x1400bfb67
mov edx, 0x3d
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov r13, rax
cmp rax, rsi
je 0x1400bf66e
mov word [rax], si
add r13, r14
cmp word [r12], si
je 0x1400bfb60
lea rcx, [rsp + 0x68]
call fcn.140058038
mov rdi, qword [rsp + 0x648]
mov rcx, rdi
call fcn.140057b84
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400bf6d3
mov r8d, ecx
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0xc0]
add rdi, r14
mov r9b, bpl
mov qword [rsp + 0x648], rdi
call fcn.14006ece4
lea rdx, [rsp + 0x68]
mov rcx, rax
xor r8d, r8d
call fcn.14005b95c
mov rcx, qword [rsp + 0x68]
call fcn.140019058
lea rcx, [rsp + 0x658]
mov rdi, rax
call fcn.140058038
mov eax, 0x3a
cmp word [rbx], si
je 0x1400bf72a
cmp ax, word [rbx + 2]
je 0x1400bf72a
lea rdx, [rsp + 0x658]
mov rcx, rbx
call fcn.1400194b4
mov rdx, qword [rsp + 0x658]
lea rcx, [rsp + 0x80]
call fcn.1400625ac
mov rbx, qword [rax]
mov eax, 0x3a
cmp word [rdi], si
je 0x1400bf75a
cmp ax, word [rdi + 2]
je 0x1400bf75a
lea rdx, [rsp + 0x658]
mov rcx, rdi
call fcn.1400194b4
mov rdx, qword [rsp + 0x658]
lea rcx, [rsp + 0x68]
call fcn.1400625ac
mov rdi, qword [rax]
lea rcx, [rsp + 0x48]
mov edx, 0x20
call fcn.1400580ac
mov rax, qword [rsp + 0x48]
mov rdx, rbx
mov rbx, qword [rsp + 0x640]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0x48]
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x28], rsi
mov word [rax + 4], si
mov qword [rsp + 0x20], r13
call fcn.1400672a4
mov r8, qword [rsp + 0x48]
mov rdx, r12
mov rcx, rbx
add r8, 4
call fcn.140057714
lea rcx, [rsp + 0x48]
call fcn.140050424
lea rcx, [rsp + 0x658]
call fcn.140050424
lea rcx, [rsp + 0x68]
call fcn.140050424
mov rbp, rsi
jmp 0x1400bfb67
cmp byte [rsp + 0x40], sil
jne 0x1400bfa5d
cmp word [r12], si
je 0x1400bfa5d
mov rax, qword [rsp + 0x60]
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400bf825
lea rcx, [rsp + 0x60]
mov edx, 0x105
call fcn.140058138
mov rax, qword [rsp + 0x60]
mov ecx, 0x104
mov word [rax], si
mov rdx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp qword [0x14010e1e0], rsi
je 0x1400bfb67
mov rcx, rbx
call fcn.1400d33a8
cmp eax, esi
jne 0x1400bf870
lea rcx, [rsp + 0x658]
mov rdx, rbx
call fcn.14006252c
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0x640]
call fcn.14002818c
lea rcx, [rsp + 0x658]
call fcn.140050424
mov rcx, rbx
call fcn.1400d33a8
cmp eax, esi
je 0x1400bfb67
cmp r15d, esi
jne 0x1400bf895
mov rcx, r12
call fcn.1400d34e4
cmp eax, esi
je 0x1400bfb67
xor edx, edx
lea rcx, [rsp + 0xe4]
mov dword [rsp + 0xe0], esi
lea r8d, [rdx + 0x20]
call fcn.1400d3e60
lea r8, [rsp + 0xe0]
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
cmp eax, esi
je 0x1400bf8d0
test byte [rsp + 0xe0], bpl
jne 0x1400bf8db
mov r14, qword [rsp + 0x60]
cmp word [r14], si
jne 0x1400bf8de
mov r14, rsi
mov di, si
mov word [rsp + 0x658], si
cmp r15d, esi
je 0x1400bf91a
cmp dword [rsp + 0x58], esi
jne 0x1400bf901
mov edi, 0x100
mov word [rsp + 0x658], di
cmp dword [rsp + 0x88], esi
je 0x1400bf91a
mov eax, 0x200
or di, ax
mov word [rsp + 0x658], di
mov eax, ebp
cmp r15d, esi
je 0x1400bf939
lea rdx, [rsp + 0x658]
mov rcx, r12
call fcn.14009b3a4
mov di, word [rsp + 0x658]
sar eax, 8
mov rcx, r12
movzx r15d, al
sub r15d, ebp
cmp r13d, 0x80000000
cmove r13d, ebp
call fcn.1400d34e4
cmp eax, esi
je 0x1400bf9b4
mov r9, r14
mov rdx, r12
mov rcx, rbx
cmp dword [rsp + 0x58], esi
je 0x1400bf97a
cmp r13d, esi
cmovge ebp, r13d
mov r8d, ebp
call fcn.140067084
jmp 0x1400bf98a
cmp r13d, esi
cmovge ebp, r13d
mov r8d, ebp
call qword [0x14010e1e0]
mov r9, rbx
mov rbx, qword [rsp + 0x640]
mov dword [rsp + 0x28], eax
lea rdx, str.FOUND_WIM___s____mount_to___s____s___d_r_n
mov r8, r12
mov rcx, rbx
mov ebp, eax
mov qword [rsp + 0x20], r14
call fcn.14001662c
jmp 0x1400bf9be
mov rbx, qword [rsp + 0x640]
mov ebp, esi
cmp dword [rsp + 0x50], esi
je 0x1400bf9da
cmp dword [rsp + 0x88], esi
jne 0x1400bf9da
cmp di, si
je 0x1400bf9da
movzx ecx, di
call fcn.1400525c4
cmp r15d, esi
jl 0x1400bfa0a
lea rdx, str.PART_update__d
lea rcx, [rsp + 0x110]
mov r8d, r15d
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x118]
xor r8d, r8d
mov rcx, rbx
call fcn.140079e00
lea rcx, [rsp + 0x90]
call fcn.140050424
lea rcx, [rsp + 0x60]
call fcn.140050424
lea rcx, [rsp + 0x78]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0x70]
call fcn.140050424
lea rcx, [rsp + 0xc0]
call fcn.140050424
cmp ebp, esi
sete sil
mov rax, rsi
jmp 0x1400bfceb
lea rcx, [rsp + 0x50]
call fcn.140058038
mov eax, 0x3a
cmp word [rbx], si
je 0x1400bfa9e
cmp ax, word [rbx + 2]
je 0x1400bfa9e
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.1400194b4
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x80]
call fcn.1400625ac
mov rbx, qword [rax]
mov eax, 0x3a
cmp word [r12], si
je 0x1400bfacc
cmp ax, word [r12 + 2]
je 0x1400bfacc
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.1400194b4
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400625ac
mov r12, qword [rax]
or rdi, 0xffffffffffffffff
mov dword [rsp + 0x658], edi
cmp word [rbx], si
jne 0x1400bfb37
cmp word [r12], si
je 0x1400bfb32
mov rcx, qword [rsp + 0x640]
lea rax, [rsp + 0x658]
lea rdx, [0x1400f04f4]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1e0]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov r8, r12
mov qword [rsp + 0x20], rdx
call fcn.1400672a4
cmp rax, rsi
je 0x1400bfb56
mov edi, dword [rsp + 0x658]
lea rbx, [rsp + 0x3e8]
cmp word [rbx], si
je 0x1400bfb56
cmp qword [0x14010e1e8], rsi
jne 0x1400bfb4a
lea rcx, [rsp + 0x50]
jmp 0x1400bf5ce
mov rcx, rbx
call fcn.1400d33a8
cmp eax, esi
jne 0x1400bfbb4
lea rcx, [rsp + 0x50]
call fcn.140050424
mov rbp, 0xffffffff80070057
lea rcx, [rsp + 0x90]
call fcn.140050424
lea rcx, [rsp + 0x60]
call fcn.140050424
lea rcx, [rsp + 0x78]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0x70]
call fcn.140050424
lea rcx, [rsp + 0xc0]
call fcn.140050424
mov rax, rbp
jmp 0x1400bfceb
movzx eax, word [r12]
neg ax
movzx eax, word [rbx]
sbb r14, r14
and r14, r12
neg ax
mov r12d, ebp
sbb r15, r15
and r15, rbx
cmp r13d, 0x80000000
cmove r13d, esi
cmp edi, esi
jg 0x1400bfc30
cmp dword [rsp + 0x58], esi
je 0x1400bfc00
mov edx, esi
cmp r13d, esi
mov rcx, rbx
setne dl
xor r8d, r8d
call fcn.140054274
mov r12d, eax
cmp eax, esi
je 0x1400bfc2c
cmp r13d, 0x80000000
je 0x1400bfc11
mov r9d, ebp
cmp r13d, esi
jne 0x1400bfc14
mov r9d, esi
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call qword [0x14010e1e8]
mov r12d, esi
cmp eax, esi
sete r12b
cmp edi, esi
je 0x1400bfc99
cmp r12d, esi
je 0x1400bfc99
mov r10, qword [0x14010e1f0]
cmp r10, rsi
je 0x1400bfc99
cmp qword [0x14010e260], rsi
setne al
cmp al, sil
je 0x1400bfc71
mov edx, esi
cmp r13d, esi
mov r8d, ebp
setne dl
mov rcx, rbx
call fcn.140054274
mov r12d, eax
cmp eax, esi
je 0x1400bfc99
mov r10, qword [0x14010e1f0]
cmp r13d, 0x80000000
je 0x1400bfc7f
cmp r13d, esi
jne 0x1400bfc81
mov ebp, esi
mov r9d, ebp
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call r10
mov r12d, esi
cmp eax, esi
sete r12b
lea rcx, [rsp + 0x50]
call fcn.140050424
lea rcx, [rsp + 0x90]
call fcn.140050424
lea rcx, [rsp + 0x60]
call fcn.140050424
lea rcx, [rsp + 0x78]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0x70]
call fcn.140050424
lea rcx, [rsp + 0xc0]
call fcn.140050424
movsxd rax, r12d
mov rbx, qword [rsp + 0x650]
add rsp, 0x600
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret