Function at 0x1400a1b08
Capabilities:
Get common file path
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x398
mov r13, rcx
lea rcx, [rax - 0x2f0]
mov r15, r9
call fcn.14005a150
xor r12d, r12d
lea rcx, [rsp + 0x100]
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r12
mov word [rsp + 0x88], r12w
call fcn.14005a614
lea rcx, [rsp + 0x3e8]
call fcn.140052130
lea rax, [rsp + 0x100]
mov ebx, r12d
mov qword [rsp + 0x150], rax
lea rax, [r12 - 8]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r12
mov qword [rsp + 0x130], r12
mov qword [rsp + 0x138], r12
mov dword [rsp + 0xa4], eax
mov qword [rsp + 0x140], r12
mov qword [rsp + 0x148], r12
mov dword [rsp + 0xa0], 2
mov dword [rsp + 0x5c], r12d
mov r14d, r12d
mov dword [rsp + 0x50], ebx
mov edi, r12d
mov dword [rsp + 0xb8], r12d
mov dword [rsp + 0xa8], r12d
mov ebp, r12d
mov dword [rsp + 0x98], r12d
mov dword [rsp + 0xbc], r12d
mov esi, r12d
lea r10d, [r12 + 9]
xor r8d, r8d
mov r9d, 0x20
mov rax, qword [rsp + 0x3e8]
mov ecx, 0x2a
lea edx, [rcx + 3]
cmp cx, word [rax]
je 0x1400a1c39
lea ecx, [rdx + 2]
cmp cx, word [rax]
je 0x1400a1c39
cmp dx, word [rax]
jne 0x1400a20c0
cmp dx, word [rax]
jne 0x1400a1c6c
cmp dx, word [rax + 2]
jne 0x1400a1c6c
movzx ecx, word [rax + 4]
cmp r10w, cx
ja 0x1400a1c58
cmp cx, 0xd
jbe 0x1400a21c0
cmp r9w, cx
je 0x1400a21c0
cmp cx, r8w
je 0x1400a21c0
lea rdx, [rsp + 0x3e8]
lea rcx, [0x14010583c]
mov r8d, 2
call fcn.14005c98c
xor ecx, ecx
cmp al, cl
je 0x1400a1c99
and r14d, 0xfffffffe
or r14d, 6
jmp 0x1400a21ae
mov r11, qword [rsp + 0x3e8]
lea rcx, [0x140105838]
mov r8d, 3
lea rdx, [r11 + 2]
call fcn.140053674
xor ecx, ecx
cmp al, cl
je 0x1400a1cc7
add r11, 8
lea r14d, [rcx + 6]
jmp 0x1400a1ceb
lea rdx, [r11 + 2]
lea rcx, str.delims:
mov r8d, 7
call fcn.140053674
xor ebx, ebx
cmp al, bl
je 0x1400a1d6d
add r11, 0x10
mov eax, 0xa
lea rcx, [rsp + 0x3e8]
mov qword [rsp + 0x3e8], r11
or r14d, eax
call fcn.1400578a4
mov rbx, qword [rsp + 0x3e8]
movzx eax, word [rbx]
mov word [rsp + 0x88], ax
xor r8d, r8d
movzx eax, word [rbx]
mov r10d, 9
cmp ax, r8w
je 0x1400a1d57
lea ecx, [r10 + 0x17]
cmp r10w, ax
ja 0x1400a1d3d
cmp ax, 0xd
jbe 0x1400a1d57
cmp cx, ax
je 0x1400a1d57
add rbx, 2
mov qword [rsp + 0x3e8], rbx
mov ax, word [rbx]
cmp ax, r8w
jne 0x1400a1d31
lea rcx, [rsp + 0x3e8]
call fcn.140052130
mov ebx, dword [rsp + 0x50]
jmp 0x1400a1c0d
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400ff7c4]
or r8d, 0xffffffff
call fcn.14005c928
cmp al, bl
jne 0x1400a21a2
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fa940]
or r8d, 0xffffffff
call fcn.14005c928
cmp al, bl
jne 0x1400a21a2
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1401039ec]
mov r8d, 1
call fcn.14005c98c
cmp al, bl
jne 0x1400a219c
lea rdx, [rsp + 0x3e8]
lea rcx, [0x140104dd0]
mov r8d, 2
call fcn.14005c928
cmp al, bl
jne 0x1400a219c
lea rdx, [rsp + 0x3e8]
lea rcx, [0x14010582c]
mov r8d, 3
call fcn.14005c928
cmp al, bl
je 0x1400a1e19
mov esi, 1
jmp 0x1400a21aa
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fe6d4]
mov r8d, 3
call fcn.14005c928
cmp al, bl
je 0x1400a1e47
mov dword [rsp + 0xb8], 1
jmp 0x1400a21aa
lea rdx, [rsp + 0x3e8]
lea rcx, [0x140105828]
mov r8d, 3
call fcn.14005c928
cmp al, bl
je 0x1400a1e6c
mov ebp, 1
jmp 0x1400a1e8f
lea rdx, [rsp + 0x3e8]
lea rcx, str.qu
mov r8d, 4
call fcn.14005c928
cmp al, bl
je 0x1400a1e9b
mov ebp, 2
mov dword [rsp + 0x98], ebp
jmp 0x1400a21aa
lea rdx, [rsp + 0x3e8]
lea rcx, str.off
mov r8d, 4
call fcn.14005c928
cmp al, bl
je 0x1400a1ec9
mov dword [rsp + 0xbc], 1
jmp 0x1400a21aa
lea rdx, [rsp + 0x3e8]
lea rcx, [0x140105814]
mov r8d, 2
call fcn.14005c928
cmp al, bl
je 0x1400a1ef7
mov ebx, dword [rsp + 0x50]
or ebx, 0x10
mov dword [rsp + 0x50], ebx
jmp 0x1400a21ae
mov r11, qword [rsp + 0x3e8]
lea rcx, [0x140105810]
mov r8d, 3
mov rdx, r11
call fcn.140053674
cmp al, bl
je 0x1400a1f49
mov ebx, dword [rsp + 0x50]
add r11, 6
lea rdx, [rsp + 0xa4]
or ebx, 0x10
lea rcx, [rsp + 0x3e8]
mov qword [rsp + 0x3e8], r11
mov dword [rsp + 0x50], ebx
call fcn.140068da0
jmp 0x1400a21ae
lea rdx, [rsp + 0x3e8]
lea rcx, str._O:N
mov r8d, 4
call fcn.14005c928
cmp al, bl
je 0x1400a1f79
mov ebx, dword [rsp + 0x50]
mov r9d, 0x20
mov edi, r9d
jmp 0x1400a21b4
lea rdx, [rsp + 0x3e8]
lea rcx, str._O:_N
mov r8d, 5
call fcn.14005c928
cmp al, bl
je 0x1400a1fa1
mov edi, 0x60
jmp 0x1400a21aa
lea rdx, [rsp + 0x3e8]
lea rcx, str.cur
mov r8d, 4
call fcn.14005c928
cmp al, bl
je 0x1400a1fcf
mov dword [rsp + 0xa8], 1
jmp 0x1400a21aa
mov rbx, qword [rsp + 0x3e8]
lea rcx, str._size:
mov r8d, 6
mov rdx, rbx
call fcn.140053674
xor r8d, r8d
cmp al, r8b
je 0x1400a20ae
lea rax, [rbx + 0xc]
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], rax
call fcn.1400601a4
mov r11, qword [rsp + 0x78]
xor eax, eax
cmp word [r11], ax
je 0x1400a1d1b
lea edx, [rax + 9]
cmp dx, word [r11]
ja 0x1400a2034
cmp word [r11], 0xd
jbe 0x1400a2064
mov ecx, 0x20
cmp cx, word [r11]
je 0x1400a2069
add r11, 2
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], r11
call fcn.1400601a4
mov r11, qword [rsp + 0x78]
xor eax, eax
lea edx, [rax + 9]
mov ecx, 0x20
cmp word [r11], ax
je 0x1400a1d1b
cmp dx, word [r11]
ja 0x1400a2084
cmp word [r11], 0xd
jbe 0x1400a1d1b
cmp cx, word [r11]
je 0x1400a1d1b
add r11, 2
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], r11
call fcn.1400601a4
jmp 0x1400a1d1b
mov eax, 0x2a
cmp ax, word [rbx]
je 0x1400a1d1e
mov ebx, dword [rsp + 0x50]
mov al, bl
lea rcx, [rsp + 0xc0]
and al, 0x10
neg al
sbb eax, eax
or ebx, edi
and eax, esi
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x78], eax
cdqe
or qword [rsp + 0x148], rax
call fcn.14005a150
lea rbx, [0x1400f9548]
lea rcx, [rsp + 0xd0]
mov rdx, rbx
call fcn.140064d14
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.140064d14
lea rcx, [rsp + 0x90]
mov rdx, rbx
call fcn.140064d14
mov rbx, qword [rsp + 0x3e8]
xor esi, esi
cmp ebp, esi
je 0x1400a228e
cmp r14d, 1
jne 0x1400a228e
lea rcx, [rsp + 0x68]
call fcn.14005a150
mov r8, qword [rsp + 0x3e8]
lea edi, [rsi + 0x2c]
lea r15d, [rsi + 0x22]
movzx eax, word [r8]
cmp r15w, ax
jne 0x1400a21de
add r8, 2
lea rcx, [rsp + 0x3e8]
mov edx, r15d
mov qword [rsp + 0x3e8], r8
call fcn.1400cb7a8
mov rcx, qword [rsp + 0x3e8]
cmp word [rcx], si
je 0x1400a2215
add rcx, 2
mov qword [rsp + 0x3e8], rcx
jmp 0x1400a2215
or r14d, 5
jmp 0x1400a21aa
and r14d, 0xfffffffd
or r14d, 1
mov ebx, dword [rsp + 0x50]
mov r9d, 0x20
xor r8d, r8d
lea r10d, [r8 + 9]
jmp 0x1400a1c13
add rax, 4
lea rcx, [rsp + 0x3e8]
mov qword [rsp + 0x3e8], rax
call fcn.140052130
jmp 0x1400a20c0
cmp ax, si
je 0x1400a2215
mov ecx, 0x20
lea edx, [rcx - 0x17]
cmp di, ax
je 0x1400a2215
cmp dx, ax
ja 0x1400a21fb
cmp ax, 0xd
jbe 0x1400a2215
cmp cx, ax
je 0x1400a2215
add r8, 2
mov qword [rsp + 0x3e8], r8
mov ax, word [r8]
cmp ax, si
jne 0x1400a21eb
lea rcx, [rsp + 0x3e8]
call fcn.140052130
mov r8, qword [rsp + 0x3e8]
cmp word [r8], si
je 0x1400a223a
cmp di, word [r8]
jne 0x1400a2157
sub r8, rbx
lea rcx, [rsp + 0x68]
mov rdx, rbx
sar r8, 1
call fcn.14005a3b8
mov rdx, qword [rsp + 0x68]
lea r8, [rsp + 0xe8]
xor r9d, r9d
mov rcx, r13
mov byte [rsp + 0x20], 1
call fcn.14006e854
mov r11, qword [rsp + 0xe8]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0xf8], r11
call fcn.140052160
mov r15, qword [rsp + 0x3f8]
jmp 0x1400a22ae
mov edi, 0x2c
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0xe8]
mov r8d, edi
mov r9b, 1
call fcn.140071da4
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xf8]
xor r8d, r8d
call fcn.14005dc90
mov r11, qword [rsp + 0xc0]
mov ebx, 0x5c
mov qword [rsp + 0x68], r11
cmp r14d, esi
jne 0x1400a2362
movzx eax, word [r11]
cmp ax, si
je 0x1400a2362
mov ecx, 9
cmp cx, ax
ja 0x1400a22fa
cmp ax, 0xd
jbe 0x1400a2362
mov ecx, 0x20
cmp cx, ax
je 0x1400a2362
mov ecx, 0x40
cmp cx, ax
jne 0x1400a231b
mov dword [rsp + 0xa0], 1
jmp 0x1400a2354
mov ecx, 0x24
cmp cx, ax
jne 0x1400a2332
mov dword [rsp + 0xa0], 3
jmp 0x1400a2354
cmp bx, ax
jne 0x1400a2345
cmp bx, word [r11 + 2]
je 0x1400a235f
or dword [rsp + 0x5c], 1
jmp 0x1400a2354
mov ecx, 0x21
cmp cx, ax
jne 0x1400a2362
or dword [rsp + 0x5c], 2
add r11, 2
mov qword [rsp + 0x68], r11
jmp 0x1400a22e1
mov r12b, 1
lea rcx, [rsp + 0x68]
call fcn.140052130
mov ebp, r14d
and ebp, 1
jne 0x1400a2380
mov rcx, qword [rsp + 0x68]
call fcn.140019d38
jmp 0x1400a2385
mov rax, qword [rsp + 0x68]
cmp dword [rsp + 0x5c], esi
jne 0x1400a23b6
cmp r14d, esi
jne 0x1400a23bb
cmp r12b, sil
jne 0x1400a23bb
cmp bx, word [rax]
jne 0x1400a23a0
cmp bx, word [rax + 2]
je 0x1400a23bb
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.14001a194
jmp 0x1400a23cb
add rax, 2
cmp word [rax], bx
je 0x1400a23b2
lea rcx, [rsp + 0x80]
mov rdx, rax
call fcn.140064d94
mov rcx, qword [rsp + 0x3e8]
cmp di, word [rcx]
jne 0x1400a241a
add rcx, 2
lea rdx, [rsp + 0x3e8]
mov r8d, edi
mov qword [rsp + 0x3e8], rcx
lea rcx, [rsp + 0xe8]
mov r9b, 1
call fcn.140071da4
lea rdx, [rsp + 0xd0]
xor r8d, r8d
mov rcx, rax
call fcn.14005dc90
mov rcx, qword [rsp + 0x3e8]
cmp r14d, esi
jne 0x1400a2467
cmp di, word [rcx]
jne 0x1400a2467
add rcx, 2
lea rdx, [rsp + 0x3e8]
mov r8d, edi
mov qword [rsp + 0x3e8], rcx
lea rcx, [rsp + 0xe8]
mov r9b, 1
call fcn.140071da4
lea rdx, [rsp + 0x120]
movzx r8d, di
mov rcx, rax
call fcn.14005df68
mov rcx, qword [rsp + 0x3e8]
mov rax, qword [rsp + 0x120]
mov rdx, 0xfffffffffffffff8
cmp rax, rsi
cmovle rax, rdx
mov qword [rsp + 0x120], rax
cmp word [rcx], di
je 0x1400a24f4
lea rcx, [rsp + 0x90]
call fcn.140052160
lea rcx, [rsp + 0x80]
call fcn.140052160
lea rcx, [rsp + 0xd0]
call fcn.140052160
lea rcx, [rsp + 0xc0]
call fcn.140052160
lea rcx, [rsp + 0x100]
call fcn.1400d6a34
lea rcx, [rsp + 0x100]
call fcn.140052160
lea rcx, [rsp + 0xe8]
call fcn.140052160
movabs rax, 1
jmp 0x1400a3029
add rcx, 2
mov qword [rsp + 0x3e8], rcx
lea rcx, [rsp + 0x3e8]
call fcn.140052130
mov rdx, qword [rsp + 0x3e8]
lea rcx, [rsp + 0x90]
call fcn.140064e2c
mov rsi, qword [rsp + 0x90]
mov eax, 0x2a
xor r12d, r12d
cmp word [rsi], ax
jne 0x1400a2540
mov bl, 1
cmp word [rsi + 2], r12w
je 0x1400a2543
mov bl, r12b
lea rcx, [rsp + 0x158]
mov byte [rsp + 0x58], bl
call fcn.14005a150
mov rdi, qword [rsp + 0xd0]
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r12
cmp bl, r12b
jne 0x1400a2581
lea rcx, [rsp + 0x158]
mov rdx, rdi
call fcn.140064e2c
mov qword [rsp + 0xc8], r12
cmp r15, r12
je 0x1400a2593
mov r15, qword [r15]
jmp 0x1400a2596
mov r15, r12
mov qword [rsp + 0x68], r15
cmp word [rsi], r12w
jne 0x1400a25ca
cmp r15, r12
je 0x1400a25ca
movzx eax, word [r15]
cmp word [r13 + 0x96], ax
jne 0x1400a25ca
mov rdx, qword [rsp + 0x3f8]
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call fcn.140058f28
lea rcx, [rsp + 0x118]
mov edx, 0x32a
call fcn.14005a1c4
mov rbx, qword [rsp + 0x118]
mov r10, qword [rsp + 0x3e0]
xor r11d, r11d
lea rax, [rbx + 4]
mov qword [rsp + 0x178], rax
mov eax, 0x8b
mov qword [rsp + 0xb0], r11
and word [r10 + 0xc8], ax
mov r12, r11
mov r13d, r11d
mov dword [rsp + 0x54], r11d
mov dword [rsp + 0x70], r11d
lea ecx, [rax + 0x75]
cmp word [rsi], r11w
jne 0x1400a263f
cmp r15, r11
je 0x1400a263f
movzx eax, word [r15]
mov r15d, ecx
cmp word [r10 + 0x96], ax
je 0x1400a2642
mov r15d, r11d
cmp word [rdi], r11w
je 0x1400a2663
mov rax, qword [rsp + 0x90]
cmp word [rax], r11w
jne 0x1400a2663
mov dword [rsp + 0x60], 1
cmp r15d, r11d
je 0x1400a2668
mov dword [rsp + 0x60], r11d
mov rcx, qword [rsp + 0x80]
mov esi, r14d
mov qword [rsp + 0xe0], r11
and esi, 4
mov r8, rcx
mov qword [rsp + 0x3e8], rcx
je 0x1400a271e
lea rcx, [0x140118f08]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x3e0]
or r9d, 0xffffffff
xor r8d, r8d
call fcn.14001c5dc
xor ecx, ecx
cmp rax, rcx
jne 0x1400a26d6
lea ebx, [rcx + 2]
lea rcx, [0x140118f08]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edx, edx
jmp 0x1400a2f56
mov rdx, qword [rax]
lea rcx, [rsp + 0xe0]
call fcn.140064e2c
mov r11, qword [rsp + 0xe0]
lea rcx, [0x140118f08]
mov qword [rsp + 0x3e8], r11
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r8, qword [rsp + 0x3e8]
mov rcx, qword [rsp + 0x80]
mov r10, qword [rsp + 0x3e0]
xor r11d, r11d
movsxd r13, r15d
test r14b, 2
je 0x1400a28cf
movzx eax, word [r8]
mov qword [rsp + 0xd8], r11
cmp ax, r11w
je 0x1400a28b4
mov rsi, qword [rsp + 0x400]
mov r14, qword [rsp + 0x68]
mov r12w, word [rsp + 0x88]
mov r15, qword [rsp + 0x3f0]
mov ebp, 0xfeff
test byte [r10 + 0xc8], 0xef
jne 0x1400a28b4
mov r9, r8
cmp r12w, r11w
je 0x1400a2796
lea rcx, [rsp + 0x3e8]
movzx edx, r12w
call fcn.1400cb7a8
mov r8, qword [rsp + 0x3e8]
jmp 0x1400a27c2
cmp ax, r11w
je 0x1400a27c2
mov ecx, 0xa
cmp ax, 0xd
je 0x1400a27c2
cmp ax, cx
je 0x1400a27c2
add r8, 2
mov qword [rsp + 0x3e8], r8
mov ax, word [r8]
cmp ax, r11w
jne 0x1400a27a1
movzx ebx, word [r8]
mov word [r8], r11w
mov rdx, rdi
mov r8, r9
mov rcx, r10
call fcn.1400596c4
mov r8, qword [rsp + 0x3e8]
xor r11d, r11d
cmp r12w, r11w
jne 0x1400a2800
cmp bx, 0xd
jne 0x1400a2800
lea eax, [r11 + 0xa]
cmp ax, word [r8 + 2]
jne 0x1400a2806
add r8, 4
jmp 0x1400a280a
cmp bx, r11w
je 0x1400a2812
add r8, 2
mov qword [rsp + 0x3e8], r8
inc dword [rsp + 0x54]
cmp r13, r11
je 0x1400a2850
mov rcx, qword [rsp + 0x3e0]
lea rax, [r14 + 2]
lea r8, [rsp + 0xc8]
mov qword [rsp + 0xc8], rax
lea rax, [0x1400f9548]
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x20], rax
call fcn.140099fd8
jmp 0x1400a2876
mov rdx, qword [rsp + 0x90]
cmp word [rdx], r11w
je 0x1400a2881
mov rcx, qword [rsp + 0x3e0]
xor r9d, r9d
mov r8, r15
mov qword [rsp + 0x20], rsi
call fcn.1400422a0
mov r8, qword [rsp + 0x3e8]
xor r11d, r11d
mov r10, qword [rsp + 0x3e0]
mov ecx, pe_nt_image_headers64
movzx eax, word [r10 + 0xc8]
test cx, ax
je 0x1400a28a6
and ax, bp
mov word [r10 + 0xc8], ax
mov ax, word [r8]
cmp ax, r11w
jne 0x1400a2764
lea rcx, [rsp + 0xd8]
call fcn.140052160
mov r13d, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x70]
jmp 0x1400a26cf
cmp ebp, r11d
je 0x1400a2acd
cmp esi, r11d
je 0x1400a28f2
lea rcx, [rsp + 0x3e8]
call fcn.140052130
mov r8, qword [rsp + 0x3e8]
movsxd rcx, dword [rsp + 0x98]
movzx eax, word [r8]
mov qword [rsp + 0x78], r11
mov rbp, rcx
lea ebx, [rcx - 1]
cmp ax, r11w
je 0x1400a2ac3
mov rsi, qword [rsp + 0x400]
mov r14, qword [rsp + 0x68]
mov r12d, 0xfeff
test byte [r10 + 0xc8], 0xef
jne 0x1400a2ac3
mov rdx, r8
mov ecx, r11d
cmp rbp, r11
je 0x1400a29a7
mov r9d, 0x22
cmp r9w, ax
jne 0x1400a29a7
movsxd rax, ebx
lea rdx, [r8 + rax*2]
add r8, 2
mov qword [rsp + 0x3e8], r8
movzx eax, word [r8]
cmp ax, r11w
je 0x1400a29df
cmp r9w, ax
jne 0x1400a2952
movzx eax, word [r8 + 2]
cmp ax, r11w
je 0x1400a2997
mov r10d, 9
cmp r10w, ax
ja 0x1400a298b
cmp ax, 0xd
jbe 0x1400a2997
mov r10d, 0x20
cmp r10w, ax
jne 0x1400a2952
add r8, 2
mov ecx, ebx
mov qword [rsp + 0x3e8], r8
jmp 0x1400a29df
cmp ax, r11w
je 0x1400a29df
mov r9d, 0x20
lea r10d, [r9 - 0x17]
cmp r10w, ax
ja 0x1400a29c3
cmp ax, 0xd
jbe 0x1400a29df
cmp r9w, ax
je 0x1400a29df
add r8, 2
mov qword [rsp + 0x3e8], r8
mov ax, word [r8]
cmp ax, r11w
jne 0x1400a29b7
movsxd rax, ecx
lea rcx, [rsp + 0x78]
add rax, rax
sub r8, rax
sub r8, rdx
sar r8, 1
call fcn.14005a3b8
lea rcx, [rsp + 0x3e8]
call fcn.140052130
mov r15, qword [rsp + 0x3e0]
mov r8, qword [rsp + 0x78]
mov rcx, r15
mov rdx, rdi
call fcn.1400596c4
inc dword [rsp + 0x54]
xor r11d, r11d
cmp r13, r11
je 0x1400a2a5e
mov rdx, qword [rsp + 0x3f0]
lea rax, [r14 + 2]
lea r8, [rsp + 0xc8]
mov qword [rsp + 0xc8], rax
lea rax, [0x1400f9548]
xor r9d, r9d
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.140099fd8
jmp 0x1400a2a84
mov rdx, qword [rsp + 0x90]
cmp word [rdx], r11w
je 0x1400a2a87
mov r8, qword [rsp + 0x3f0]
xor r9d, r9d
mov rcx, r15
mov qword [rsp + 0x20], rsi
call fcn.1400422a0
xor r11d, r11d
mov r10, qword [rsp + 0x3e0]
mov ecx, pe_nt_image_headers64
movzx eax, word [r10 + 0xc8]
test cx, ax
je 0x1400a2aad
and ax, r12w
mov word [r10 + 0xc8], ax
mov r8, qword [rsp + 0x3e8]
mov ax, word [r8]
cmp ax, r11w
jne 0x1400a2926
lea rcx, [rsp + 0x78]
jmp 0x1400a28bc
call fcn.140019d38
lea rcx, [rsp + 0x80]
mov rdx, rax
call fcn.140064d94
mov r11, qword [rsp + 0x80]
xor edx, edx
cmp word [r11], dx
je 0x1400a2f51
mov ebp, dword [rsp + 0x5c]
movzx r13d, dx
mov r14b, dl
cmp ebp, edx
je 0x1400a2bbc
cmp dword [rsp + 0xa8], edx
je 0x1400a2b4f
mov word [rsp + 0x180], dx
lea rdx, [rsp + 0x180]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov r13w, word [rsp + 0x180]
cmp r13w, 0x61
jb 0x1400a2b4d
cmp r13w, 0x7a
ja 0x1400a2b4d
mov eax, 0xffdf
and r13w, ax
xor edx, edx
lea r12, [rbx + 4]
mov ecx, 0x324
mov word [r12 + 2], dx
mov word [r12], dx
mov word [rbx + 2], dx
mov word [rbx], dx
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
xor edx, edx
and bpl, 2
mov rsi, r12
mov rbx, r12
cmp word [r12], dx
je 0x1400a2ba1
mov rcx, rbx
mov rsi, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor edx, edx
movsxd rcx, eax
lea rbx, [rbx + rcx*2 + 2]
cmp word [rbx], dx
jne 0x1400a2b86
cmp bpl, dl
mov ebp, dword [rsp + 0xa4]
cmovne r12, rsi
mov rsi, qword [rsp + 0x400]
jmp 0x1400a2dbc
mov rax, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0x400]
mov ebp, dword [rsp + 0xa4]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0xb0], r11
cmp r15d, edx
jne 0x1400a2c01
mov rax, qword [rsp + 0x90]
cmp word [rax], dx
jne 0x1400a2c01
mov eax, dword [rsp + 0x60]
cmp eax, edx
je 0x1400a2f3b
cmp dword [rsp + 0xb8], edx
je 0x1400a2c2a
movzx ecx, word [r11]
cmp cx, dx
je 0x1400a2c2a
cmp word [r11 + 2], 0x3a
jne 0x1400a2c2a
call fcn.1400dcdd4
xor edx, edx
cmp eax, edx
je 0x1400a2db2
lea rcx, [rsp + 0x98]
call fcn.14005a150
mov rcx, qword [rsp + 0xb0]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x98]
xor r14d, r14d
mov qword [rsp + 0xd8], r14
call fcn.1400c6a44
mov r8, qword [rsp + 0x98]
cmp dword [rsp + 0xbc], r14d
je 0x1400a2c87
mov rax, qword [rsp + 0xd8]
sub rax, r8
sar rax, 1
mov qword [rsp + 0x138], rax
cmp dword [rsp + 0x78], r14d
je 0x1400a2d20
mov ebx, 8
mov rcx, rbx
call fcn.1400ddcb8
cmp rax, r14
je 0x1400a2cb6
lea rdx, [rsp + 0x98]
mov rcx, rax
call fcn.140064d74
jmp 0x1400a2cb9
mov rax, r14
lea r9, [rsp + 0x170]
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x100]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x20], ebx
call fcn.14005a4a0
cmp dword [rsp + 0x5c], r14d
je 0x1400a2d18
cmp word [r12], r14w
je 0x1400a2d18
lea rcx, [rsp + 0x98]
mov r14b, 1
call fcn.140052160
xor edx, edx
jmp 0x1400a2dbc
mov r8, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x3e0]
mov r9, qword [rsp + 0x3f0]
mov qword [rsp + 0x48], rsi
mov dword [rsp + 0x40], ebp
lea rax, [rsp + 0x120]
mov ecx, r15d
or ecx, dword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x90]
or ecx, dword [rsp + 0xa0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x68]
mov dword [rsp + 0x28], ecx
lea rdx, [rsp + 0x158]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400a1010
mov ecx, pe_nt_image_headers64
add dword [rsp + 0x54], eax
movzx eax, word [rbx + 0xc8]
test cx, ax
je 0x1400a2da3
mov ecx, 0xfeff
and ax, cx
mov word [rbx + 0xc8], ax
lea rcx, [rsp + 0x98]
call fcn.140052160
xor edx, edx
cmp dword [rsp + 0x5c], edx
je 0x1400a2e97
movsxd rbx, dword [rsp + 0xa8]
cmp word [r12], dx
je 0x1400a2e97
lea rax, [rsp + 0x120]
cmp qword [rax], rdx
je 0x1400a2e97
mov rax, qword [rsp + 0x3e0]
test byte [rax + 0xc8], 0xef
jne 0x1400a2e97
lea rcx, [rsp + 0xb0]
mov rdx, r12
call fcn.140064e2c
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0xb0]
call fcn.14005a28c
xor edx, edx
cmp rbx, rdx
jne 0x1400a2e77
test byte [rsp + 0x5c], 2
je 0x1400a2e4d
mov rcx, qword [rsp + 0x178]
sub r12, 2
cmp r12, rcx
jbe 0x1400a2e60
lea rax, [r12 - 2]
cmp word [rax], dx
je 0x1400a2e60
mov r12, rax
cmp rax, rcx
ja 0x1400a2e39
jmp 0x1400a2e60
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
xor edx, edx
cdqe
lea r12, [r12 + rax*2]
mov r11, qword [rsp + 0xb0]
cmp r13w, word [r11]
jne 0x1400a2be3
jmp 0x1400a2dc4
mov rax, qword [rsp + 0xb0]
mov dword [rsp + 0xa8], edx
mov word [rax], r13w
mov r11, qword [rsp + 0xb0]
jmp 0x1400a2be3
cmp r14b, dl
je 0x1400a2f46
mov rbx, qword [rsp + 0x90]
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0x100]
mov r9d, 8
xor ecx, ecx
call fcn.14005a5b0
or r15d, dword [rsp + 0x50]
mov r9, qword [rsp + 0x3f0]
mov rcx, qword [rax]
mov rax, qword [rsp + 0x400]
or r15d, dword [rsp + 0xa0]
mov r8, qword [rcx]
mov rcx, qword [rsp + 0x3e0]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0xa4]
lea rdx, [rsp + 0x158]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
call fcn.1400a1010
mov r13d, dword [rsp + 0x54]
add r13d, eax
jmp 0x1400a28c6
mov r13d, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x70]
jmp 0x1400a2f5a
mov r13d, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x70]
jmp 0x1400a2f56
mov r13d, edx
mov ebx, edx
mov eax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x3e0]
mov r8d, 0x8b
and word [rcx + 0xc8], r8w
cmp byte [rsp + 0x58], dl
je 0x1400a2f88
mov r8, qword [rsp + 0x158]
mov rdx, rdi
call fcn.1400596c4
jmp 0x1400a2f97
cmp eax, edx
je 0x1400a2f97
mov r8, rdi
mov edx, r13d
call fcn.14005d1d8
lea rcx, [rsp + 0xe0]
call fcn.140052160
lea rcx, [rsp + 0xb0]
call fcn.140052160
lea rcx, [rsp + 0x118]
call fcn.140052160
lea rcx, [rsp + 0x158]
call fcn.140052160
lea rcx, [rsp + 0x90]
call fcn.140052160
lea rcx, [rsp + 0x80]
call fcn.140052160
lea rcx, [rsp + 0xd0]
call fcn.140052160
lea rcx, [rsp + 0xc0]
call fcn.140052160
lea rcx, [rsp + 0x100]
call fcn.1400d6a34
lea rcx, [rsp + 0x100]
call fcn.140052160
lea rcx, [rsp + 0xe8]
call fcn.140052160
movsxd rax, ebx
add rsp, 0x398
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret