Function at 0x14008c034
Capabilities:
Check for time delay via gettickcount
Encode data using base64
Get disk information
Inspect section memory permissions
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x460
movaps xmmword [rax - 0x48], xmm6
lea rcx, [rax + 0x10]
movaps xmmword [rax - 0x58], xmm7
call fcn.140059074
lea rcx, [rsp + 0x98]
mov edx, 5
call fcn.1400616e0
lea rcx, [rsp + 0x2d0]
mov edx, 0x14
call fcn.1400616e0
lea rcx, [rsp + 0x258]
call fcn.14006166c
lea rcx, [rsp + 0x1b8]
call fcn.14006166c
lea rcx, [rsp + 0x220]
call fcn.14006166c
xor ebx, ebx
or rbp, 0xffffffffffffffff
mov eax, 0xfffc0000
mov edi, ebx
lea rdx, [rsp + 0x1b8]
mov dword [rsp + 0xac], eax
mov dword [rsp + 0x54], eax
mov eax, ebp
mov dword [rsp + 0xf4], eax
mov dword [rsp + 0x4c], eax
mov rax, rbp
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x160], rax
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x1f8], rax
mov eax, 0x1f4
mov dword [rsp + 0x21c], eax
mov dword [rsp + 0x17c], eax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0x68], rdi
lea edi, [rbx + 0x2c]
lea rcx, [rsp + 0x1a8]
mov r8d, edi
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x2f8], rbx
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x140], rbp
mov dword [rsp + 0x4b8], ebx
mov dword [rsp + 0x1f0], ebx
mov word [rsp + 0x128], bp
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x230], rbx
mov dword [rsp + 0xdc], ebx
mov qword [rsp + 0x298], rbp
mov qword [rsp + 0x138], rbp
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x238], rbp
mov byte [rsp + 0xd8], bl
mov byte [rsp + 0xa3], bl
mov byte [rsp + 0x112], bl
mov byte [rsp + 0x111], bl
mov sil, bl
mov byte [rsp + 0x47], bl
mov byte [rsp + 0x72], bl
mov byte [rsp + 0x114], bl
mov byte [rsp + 0x70], bl
mov byte [rsp + 0xa6], bl
mov dword [rsp + 0x148], ebx
call fcn.14006555c
mov r14, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
mov word [r14], bx
cmp di, word [rax]
jne 0x14008c251
mov word [rax], bx
add rax, 2
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x1a8]
mov r8d, edi
mov qword [rsp + 0x1a8], rax
call fcn.14006555c
mov r14, qword [rsp + 0x1b8]
mov rax, 0xfffffffffffffff7
mov r12d, 0xfffff000
mov dl, bl
mov byte [rsp + 0x49], bl
mov byte [rsp + 0xb4], bl
mov byte [rsp + 0x113], bpl
mov dword [rsp + 0x118], r12d
mov dword [rsp + 0x88], r12d
mov byte [rsp + 0x178], bl
mov byte [rsp + 0xda], bl
mov byte [rsp + 0x110], bl
mov byte [rsp + 0x61], bl
mov byte [rsp + 0x46], bl
mov byte [rsp + 0x41], bl
mov byte [rsp + 0x40], bl
mov byte [rsp + 0x43], bl
mov byte [rsp + 0x44], bl
mov byte [rsp + 0xc8], bl
mov byte [rsp + 0x1e8], bpl
mov byte [rsp + 0xa1], bpl
mov word [rsp + 0x1b0], bx
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2a0], rbx
mov r13d, ebx
mov dword [rsp + 0xb8], ebx
mov byte [rsp + 0xa0], bl
mov byte [rsp + 0x71], bl
lea ebx, [rax + 0xd]
mov dword [rsp + 0x74], ebp
mov dword [rsp + 0x8c], ebp
lea ebp, [rax + 0xa]
lea r12d, [rax + 0x11]
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x1a0], rax
mov r15, rax
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x4a8]
xor edi, edi
mov dword [rsp + 0x1b4], edx
mov qword [rsp + 0x260], rbp
mov qword [rsp + 0x180], rbx
cmp word [rax], di
je 0x14008d27d
lea rdx, [rsp + 0x4a8]
lea rcx, str._admin
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c37f
or byte [rsp + 0x49], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._super
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c3a8
or byte [rsp + 0x49], 2
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._devid
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c3d5
bts dword [rsp + 0x1f0], 0x10
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._devidx
mov r8d, 7
call fcn.1400640c8
cmp al, dil
je 0x14008c402
bts dword [rsp + 0x1f0], 0x11
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._gui
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
jne 0x14008d321
lea rdx, [rsp + 0x4a8]
lea rcx, str._usb
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
jne 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._hextp
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c469
or r13d, ebp
jmp 0x14008ced0
lea rdx, [rsp + 0x4a8]
lea rcx, str._phy
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c48e
or r13d, 2
jmp 0x14008ced0
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011eb60]
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008c4b6
or r13d, 0x10
jmp 0x14008ced0
lea rdx, [rsp + 0x4a8]
lea rcx, str._drv
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c4da
or r13d, r12d
jmp 0x14008ced0
lea rdx, [rsp + 0x4a8]
lea rcx, str._fill
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008c501
or r13d, ebx
jmp 0x14008ced0
lea rdx, [rsp + 0x4a8]
lea rcx, str._dvol
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008c52a
bts r13d, 8
jmp 0x14008ced0
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011eb44]
mov r8d, 3
call fcn.1400640c8
cmp al, dil
je 0x14008c553
mov byte [rsp + 0x41], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._xup
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c579
mov byte [rsp + 0x40], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._axup
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008c5a2
mov byte [rsp + 0x40], 0x21
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._hup
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c5c8
mov byte [rsp + 0x43], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._ahup
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008c5f1
mov byte [rsp + 0x43], 0x21
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._gpt
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c617
mov byte [rsp + 0x44], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._gptmini
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c63d
mov byte [rsp + 0x44], 2
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._gpth
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c662
mov byte [rsp + 0x44], bl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._mbr
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c68b
mov byte [rsp + 0x111], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._cmp
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c6b4
mov byte [rsp + 0xc8], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, [0x140118e2c]
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c6e0
mov byte [rsp + 0x112], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._fs0:
mov r8d, 5
call fcn.140064200
cmp al, dil
je 0x14008c71e
lea rdx, [rsp + 0x17c]
lea rcx, [rsp + 0x4a8]
mov byte [rsp + 0x70], 0x10
call fcn.140065ddc
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._fs0
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c744
mov byte [rsp + 0x70], 0x10
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011eae8]
mov r8d, 3
call fcn.1400640c8
cmp al, dil
je 0x14008c770
mov byte [rsp + 0x114], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011e184]
mov r8d, 2
call fcn.1400640c8
cmp al, dil
je 0x14008c7a1
mov eax, 0x100
add word [rsp + 0x1b0], ax
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011eae0]
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008c7ca
mov byte [rsp + 0xa6], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._lskip
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c7f3
or byte [rsp + 0x72], 0x40
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._locku
mov r8d, 6
call fcn.1400640c8
cmp al, dil
jne 0x14008c95e
mov r11, qword [rsp + 0x4a8]
lea rcx, str._locku:
mov r8d, 7
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008c843
mov byte [rsp + 0x47], 3
add r11, 2
jmp 0x14008c866
lea rcx, str._lock:
mov r8d, 6
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008c916
mov byte [rsp + 0x47], bpl
add r11, 0xc
mov qword [rsp + 0x4a8], r11
movzx ecx, word [r11]
cmp cx, di
je 0x14008c8e7
mov r8d, 9
cmp r8w, cx
ja 0x14008c88d
cmp cx, 0xd
jbe 0x14008c8e7
mov edx, 0x20
cmp dx, cx
je 0x14008c8e7
lea eax, [rcx - 0x30]
cmp ax, r8w
jbe 0x14008c8e7
mov qword [rsp + 0x168], r11
cmp r8w, cx
ja 0x14008c8b4
cmp cx, 0xd
jbe 0x14008c8d4
cmp dx, cx
je 0x14008c8d4
add r11, 2
mov qword [rsp + 0x4a8], r11
mov cx, word [r11]
cmp cx, di
je 0x14008d1b1
jmp 0x14008c8a8
cmp word [r11], di
je 0x14008d1b1
mov word [r11], di
jmp 0x14008cc80
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x4a8]
call fcn.1400adfac
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x4a8]
call fcn.1400adfac
jmp 0x14008d1b1
lea rdx, [rsp + 0x4a8]
lea rcx, str._lock
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008c93f
mov byte [rsp + 0x47], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._lockx
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c968
mov byte [rsp + 0x47], 3
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._lock_
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008c99d
or rax, 0xffffffffffffffff
mov byte [rsp + 0x47], pe_nt_image_headers64
mov qword [rsp + 0x120], rax
jmp 0x14008d1c8
mov r11, qword [rsp + 0x4a8]
lea rcx, [0x14011ea9c]
mov r8d, ebx
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008c9fd
lea rax, [r11 + 8]
mov r9d, 0x3d
lea r10d, [r9 - 0x34]
cmp word [rax], di
je 0x14008cb18
cmp r9w, word [rax]
je 0x14008cb18
cmp r10w, word [rax]
ja 0x14008c9ed
cmp word [rax], 0xd
jbe 0x14008cb18
mov r8d, 0x20
cmp r8w, word [rax]
je 0x14008cb1e
lea rcx, str._pbr
mov r8d, ebx
mov rdx, r11
call fcn.14005a71c
mov edx, 9
cmp al, dil
je 0x14008ca53
lea rax, [r11 + 8]
lea r9d, [rdx + 0x34]
cmp word [rax], di
je 0x14008cba8
cmp r9w, word [rax]
je 0x14008cba8
cmp dx, word [rax]
ja 0x14008ca43
cmp word [rax], 0xd
jbe 0x14008cba8
mov r10d, 0x20
cmp r10w, word [rax]
je 0x14008cbae
mov r8d, edx
lea rcx, str._alignend
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008ccee
lea rbx, [r11 + 0x12]
mov r9d, 0x3d
lea edx, [r9 - 0x34]
cmp word [rbx], di
je 0x14008caa0
cmp r9w, word [rbx]
je 0x14008caa0
cmp dx, word [rbx]
ja 0x14008ca92
cmp word [rbx], 0xd
jbe 0x14008caa0
mov eax, 0x20
cmp ax, word [rbx]
jne 0x14008cce9
mov qword [rsp + 0x4a8], rbx
movzx edi, word [rbx]
cmp r9w, di
je 0x14008cc8e
mov rax, 0xfffffffffffffffe
mov r15, rax
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x1a8], rax
xor eax, eax
cmp di, ax
je 0x14008cb04
mov ecx, 0x20
lea r9d, [rcx - 0x17]
cmp r9w, di
ja 0x14008caeb
cmp di, 0xd
jbe 0x14008cb04
cmp cx, di
je 0x14008cb04
add rbx, 2
mov qword [rsp + 0x4a8], rbx
mov di, word [rbx]
cmp di, ax
jne 0x14008cadf
lea rcx, [rsp + 0x4a8]
call fcn.140059074
xor edi, edi
jmp 0x14008d1c8
mov r8d, 0x20
mov qword [rsp + 0x4a8], rax
mov qword [rsp + 0x2a0], rdi
cmp r9w, word [rax]
je 0x14008cb48
lea r8, [0x14011ea80]
mov qword [rsp + 0x2c0], r8
jmp 0x14008d1b1
add rax, 2
lea rcx, [rsp + 0x4a8]
mov qword [rsp + 0x4a8], rax
call fcn.140059074
mov rax, qword [rax]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x4a8]
movzx ecx, word [rax]
cmp cx, di
je 0x14008d1b1
cmp r10w, cx
ja 0x14008cb90
cmp cx, 0xd
jbe 0x14008cc74
cmp r8w, cx
je 0x14008cc74
add rax, 2
mov qword [rsp + 0x4a8], rax
jmp 0x14008cb74
mov r10d, 0x20
mov qword [rsp + 0x4a8], rax
movzx ecx, word [rax]
mov qword [rsp + 0x2c0], rdi
cmp r9w, cx
je 0x14008cc0a
lea r8, [0x140114268]
mov qword [rsp + 0x2a0], r8
jmp 0x14008cc00
cmp dx, cx
ja 0x14008cbe7
cmp cx, 0xd
jbe 0x14008d1b1
cmp r10w, cx
je 0x14008d1b1
add rax, 2
mov qword [rsp + 0x4a8], rax
mov cx, word [rax]
cmp cx, di
jne 0x14008cbd8
jmp 0x14008d1b1
add rax, 2
lea rcx, [rsp + 0x4a8]
mov qword [rsp + 0x4a8], rax
call fcn.140059074
mov rax, qword [rax]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x4a8]
movzx ecx, word [rax]
cmp cx, di
je 0x14008d1b1
mov r9d, 9
cmp r9w, cx
ja 0x14008cc54
cmp cx, 0xd
jbe 0x14008cc74
cmp r10w, cx
je 0x14008cc74
add rax, 2
mov qword [rsp + 0x4a8], rax
mov cx, word [rax]
cmp cx, di
je 0x14008d1b1
jmp 0x14008cc48
cmp word [rax], di
je 0x14008d1b1
mov word [rax], di
add qword [rsp + 0x4a8], 2
jmp 0x14008d1b1
lea rcx, [rbx + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, dx
ja 0x14008cacf
mov qword [rsp + 0x2b8], rcx
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x2b8]
call fcn.14006868c
mov r15, qword [rsp + 0x1a8]
xor eax, eax
lea rcx, [rax - 2]
cmp r15, rax
cmovle r15, rcx
mov qword [rsp + 0x278], r15
mov qword [rsp + 0x1a8], r15
jmp 0x14008cad1
mov ebx, 4
lea rcx, str._align
mov r8d, 6
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008cd37
lea rax, [r11 + 0xc]
mov r9d, 0x3d
lea r10d, [r9 - 0x34]
cmp word [rax], di
je 0x14008cd67
cmp r9w, word [rax]
je 0x14008cd67
cmp r10w, word [rax]
ja 0x14008cd2d
cmp word [rax], 0xd
jbe 0x14008cd67
mov edx, 0x20
cmp dx, word [rax]
je 0x14008cd6c
lea rdx, [rsp + 0x4a8]
lea rcx, str._clear
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008ce0d
mov byte [rsp + 0x113], bpl
jmp 0x14008d1c8
mov edx, 0x20
mov r8, rax
jmp 0x14008cd86
cmp r10w, cx
ja 0x14008cd7d
cmp cx, 0xd
jbe 0x14008cd96
cmp dx, cx
je 0x14008cd96
add rax, 2
mov qword [rsp + 0x4a8], rax
movzx ecx, word [rax]
cmp cx, di
jne 0x14008cd71
lea rcx, [rsp + 0x4a8]
call fcn.140059074
cmp r9w, word [r8]
jne 0x14008cdf4
lea rcx, [r8 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r10w
ja 0x14008d1c8
mov qword [rsp + 0x2b8], rcx
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x2b8]
call fcn.14006868c
mov rcx, qword [rsp + 0x1a0]
cmp rcx, rdi
mov qword [rsp + 0x268], rcx
jg 0x14008d1c8
or rax, 0xffffffffffffffff
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x1a0], rax
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._clean
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008ce39
mov byte [rsp + 0xa1], bpl
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._clean_
mov r8d, 7
call fcn.1400640c8
cmp al, dil
je 0x14008ce65
mov byte [rsp + 0xa1], dil
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, [0x1401173dc]
mov r8d, 3
call fcn.1400640c8
cmp al, dil
jne 0x14008d1c0
lea rdx, [rsp + 0x4a8]
lea rcx, str._del
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
jne 0x14008d1c0
lea rdx, [rsp + 0x4a8]
lea rcx, str._raw
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008cedd
mov byte [rsp + 0xda], bpl
or r13d, 0x20
mov dword [rsp + 0xb8], r13d
jmp 0x14008d1c8
mov r11, qword [rsp + 0x4a8]
lea rcx, str._swap:
mov r8d, 6
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008cf32
add r11, 0xc
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x4a8]
mov qword [rsp + 0x4a8], r11
call fcn.1400717e0
cmp eax, edi
jl 0x14008dffb
mov byte [rsp + 0x71], bpl
jmp 0x14008d1c8
lea rcx, str._CHS
mov r8d, 5
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008d056
lea rcx, [rsp + 0x4a8]
add r11, 0xa
mov qword [rsp + 0x4a8], r11
call fcn.140059074
mov rcx, qword [rsp + 0x4a8]
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0x190], rcx
cmp ax, di
je 0x14008cfb2
mov edx, 0x20
lea r9d, [rdx - 0x17]
cmp r9w, ax
ja 0x14008cf99
cmp ax, 0xd
jbe 0x14008cfb2
cmp dx, ax
je 0x14008cfb2
add rcx, 2
mov qword [rsp + 0x4a8], rcx
mov ax, word [rcx]
cmp ax, di
jne 0x14008cf8d
lea rcx, [rsp + 0x4a8]
call fcn.140059074
movzx ecx, word [r8]
mov eax, 9
sub cx, 0x30
cmp cx, ax
ja 0x14008cfee
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x190]
call fcn.14006868c
mov r8, qword [rsp + 0x190]
mov ebx, 0x3a
cmp bx, word [r8]
jne 0x14008d1c8
add r8, 2
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x190]
mov qword [rsp + 0x190], r8
call fcn.14006868c
mov r8, qword [rsp + 0x190]
cmp bx, word [r8]
jne 0x14008d1c8
add r8, 2
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x190]
mov qword [rsp + 0x190], r8
call fcn.14006868c
jmp 0x14008d1c8
lea rcx, str._IMG
mov r8d, 5
mov rdx, r11
call fcn.14005a71c
cmp al, dil
jne 0x14008d1de
lea rcx, str._SKIP
mov r8d, 6
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008d0da
lea rcx, [rsp + 0x4a8]
add r11, 0xc
mov qword [rsp + 0x4a8], r11
call fcn.140059074
lea rdx, [rsp + 0x1ec]
lea rcx, [rsp + 0x4a8]
mov dword [rsp + 0x1ec], 0x42
call fcn.1400717e0
mov al, byte [rsp + 0x1ec]
mov byte [rsp + 0xa0], al
jmp 0x14008d1c8
lea rcx, str._iv
mov r8d, ebx
mov rdx, r11
call fcn.14005a71c
cmp al, dil
je 0x14008d116
add r11, r12
lea rdx, [rsp + 0x8c]
lea rcx, [rsp + 0x4a8]
mov qword [rsp + 0x4a8], r11
call fcn.1400717e0
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._cdrom
mov r8d, 6
call fcn.1400640c8
cmp al, dil
je 0x14008d142
mov dword [rsp + 0x148], r12d
jmp 0x14008d1c8
lea rdx, [rsp + 0x4a8]
lea rcx, str._floppy
mov r8d, 7
call fcn.1400640c8
cmp al, dil
je 0x14008d16e
mov dword [rsp + 0x148], 0x10
jmp 0x14008d1c8
mov rcx, qword [rsp + 0x4a8]
mov edx, 0x2d
movzx eax, word [rcx]
cmp dx, ax
jne 0x14008d1de
mov edx, 0x20
lea r9d, [rdx - 0x17]
cmp r9w, ax
ja 0x14008d198
cmp ax, 0xd
jbe 0x14008d1b1
cmp dx, ax
je 0x14008d1b1
add rcx, 2
mov qword [rsp + 0x4a8], rcx
mov ax, word [rcx]
cmp ax, di
jne 0x14008d18c
lea rcx, [rsp + 0x4a8]
call fcn.140059074
jmp 0x14008d1c8
mov byte [rsp + 0x178], bpl
mov rax, qword [rsp + 0x4a8]
mov ebx, 4
cmp word [rax], di
jne 0x14008c356
mov rcx, qword [rsp + 0x268]
mov rax, 0xfffffffffffffffe
cmp r15, rax
jne 0x14008d20c
mov r15, rcx
cmp rcx, 0xfffffffffffffff7
mov rax, 0xffffffffffffffff
cmove r15, rax
mov qword [rsp + 0x278], r15
mov rdx, qword [rsp + 0x138]
mov r10, qword [rsp + 0x238]
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x2b0], r10
cmp rcx, 0xfffffffffffffff7
jne 0x14008d2e5
mov r15, qword [rsp + 0x1f8]
mov r12d, dword [rsp + 0x88]
mov edi, dword [rsp + 0x8c]
mov eax, dword [rsp + 0x17c]
mov qword [rsp + 0x288], r15
mov r15, qword [rsp + 0x278]
mov dword [rsp + 0x118], r12d
mov dword [rsp + 0x74], edi
mov dword [rsp + 0x21c], eax
lea r12d, [rcx + 0x11]
xor edi, edi
mov rcx, rbp
mov qword [rsp + 0x268], rcx
cmp r15, 0xfffffffffffffff7
lea rdx, [rsp + 0x4a8]
mov r8d, ebx
cmove r15, rcx
lea rcx, [0x14011ea20]
mov qword [rsp + 0x278], r15
call fcn.1400640c8
cmp al, dil
je 0x14008d4bb
lea rdx, [rsp + 0x4a8]
lea rcx, str.disk
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008d374
mov byte [rsp + 0xb4], bpl
jmp 0x14008d4bb
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x288], rax
mov eax, dword [rsp + 0x17c]
mov dword [rsp + 0x21c], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x118], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x74], eax
jmp 0x14008d288
lea rdx, str.21:INDATA
lea rcx, [rsp + 0x4b8]
call fcn.14006d600
mov rdx, qword [rsp + 0x4a8]
lea rcx, [rsp + 0x4b8]
call fcn.1400617a8
mov rdx, qword [rsp + 0x4b8]
mov rcx, qword [rsp + 0x4a0]
call fcn.140030b40
lea rcx, [rsp + 0x4b8]
mov r15, rax
call fcn.1400590a4
jmp 0x1400934a5
lea rdx, [rsp + 0x4a8]
lea rcx, str.part
mov r8d, ebx
call fcn.1400640c8
cmp al, dil
je 0x14008d39d
mov byte [rsp + 0xb4], 2
jmp 0x14008d4bb
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011e9f8]
mov r8d, 3
call fcn.1400640c8
cmp al, dil
je 0x14008d3c9
mov byte [rsp + 0xb4], 3
jmp 0x14008d4bb
lea rdx, [rsp + 0x4a8]
lea rcx, str.cdrom
mov r8d, 5
call fcn.1400640c8
cmp al, dil
je 0x14008d3fc
mov byte [rsp + 0xb4], bl
mov dword [rsp + 0x148], r12d
jmp 0x14008d4bb
mov r15d, 6
lea rdx, [rsp + 0x4a8]
lea rcx, str.floppy
mov r8d, r15d
call fcn.1400640c8
cmp al, dil
je 0x14008d439
lea eax, [r15 - 1]
mov dword [rsp + 0x148], 0x10
mov byte [rsp + 0xb4], al
jmp 0x14008d4bb
lea rdx, [rsp + 0x4a8]
lea rcx, str.parent
mov r8d, r15d
call fcn.1400640c8
cmp al, dil
je 0x14008d45f
mov byte [rsp + 0xb4], r15b
jmp 0x14008d4bb
lea rdx, [rsp + 0x4a8]
lea rcx, str.volume
mov r8d, r15d
call fcn.1400640c8
cmp al, dil
je 0x14008d485
mov byte [rsp + 0xb4], 7
jmp 0x14008d4bb
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011e9d4]
mov r8d, 3
call fcn.1400640c8
mov edi, dword [rsp + 0xb4]
xor ecx, ecx
movzx edi, dil
cmp al, cl
cmovne edi, r12d
mov dword [rsp + 0xb4], edi
xor edi, edi
lea rdx, [rsp + 0x4a8]
lea rcx, str.init
mov r8d, ebx
mov r15b, dil
mov byte [rsp + 0x45], dil
call fcn.1400640c8
cmp al, dil
je 0x14008d4f0
mov eax, ebp
mov sil, bpl
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x4b8], eax
lea rdx, [rsp + 0x4a8]
lea rcx, [0x14011e9d0]
mov r8d, 3
call fcn.1400640c8
movzx ecx, sil
mov esi, 0x10
cmp al, dil
lea r8d, [rsi - 0xa]
lea rdx, [rsp + 0x4a8]
cmovne ecx, esi
mov dword [rsp + 0xb0], ecx
lea rcx, str.update
call fcn.1400640c8
cmp al, dil
je 0x14008d553
mov r15b, bpl
mov ecx, ebp
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x4b8], ecx
jmp 0x14008d5e0
lea rdx, [rsp + 0x4a8]
lea rcx, str.xupdate
mov r8d, 7
call fcn.1400640c8
cmp al, dil
je 0x14008d58f
mov esi, 0x20
mov ecx, ebp
mov r15b, sil
mov byte [rsp + 0x45], sil
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x4b8], ecx
jmp 0x14008d5ea
lea rdx, [rsp + 0x4a8]
lea rcx, str.hupdate
mov r8d, 7
call fcn.1400640c8
cmp al, dil
je 0x14008d5b3
mov r15b, sil
jmp 0x14008d540
lea rdx, [rsp + 0x4a8]
lea rcx, str.hupdatef
mov r8d, r12d
call fcn.1400640c8
cmp al, dil
je 0x14008d5e5
mov eax, ebp
mov r15b, 0x18
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x4b8], eax
mov byte [rsp + 0x45], r15b
mov esi, 0x20
mov r8, qword [rsp + 0x4a8]
mov r12d, 9
mov rdx, r8
movzx eax, word [r8]
cmp ax, di
je 0x14008d623
cmp r12w, ax
ja 0x14008d610
cmp ax, 0xd
jbe 0x14008d623
cmp si, ax
je 0x14008d623
add r8, 2
mov qword [rsp + 0x4a8], r8
jmp 0x14008d5fb
sub r8, rdx
lea rcx, [rsp + 0x258]
sar r8, 1
call fcn.1400618d4
lea rcx, [rsp + 0x4a8]
call fcn.140059074
mov rcx, qword [rsp + 0x4a8]
mov eax, 0x2a
mov dword [rsp + 0x17c], edi
cmp ax, word [rcx]
jne 0x14008d673
add rcx, 2
mov dword [rsp + 0x17c], 0x40000000
mov qword [rsp + 0x4a8], rcx
movzx edx, word [rcx]
mov r8d, 0x61
movzx eax, dx
lea r9d, [r8 + 0x1f]
or ax, si
cmp r8w, ax
jne 0x14008d6bb
mov dword [rsp + 0x128], r9d
cmp dx, di
je 0x14008d708
cmp r12w, dx
ja 0x14008d6a5
cmp dx, 0xd
jbe 0x14008d708
cmp si, dx
je 0x14008d708
add rcx, 2
mov qword [rsp + 0x4a8], rcx
mov dx, word [rcx]
jmp 0x14008d694
mov eax, 0x2d
cmp ax, dx
jne 0x14008d701
movzx eax, word [rcx + 2]
or ax, si
cmp r8w, ax
jne 0x14008d701
mov word [rsp + 0x128], di
cmp r12w, dx
ja 0x14008d6e6
cmp dx, 0xd
jbe 0x14008d708
cmp si, dx
je 0x14008d708
add rcx, 2
mov qword [rsp + 0x4a8], rcx
mov dx, word [rcx]
cmp dx, di
je 0x14008d708
jmp 0x14008d6da
mov dword [rsp + 0x17c], edi
mov eax, 0xb9e5
mov dword [rsp + 0x240], edi
mov rsi, rdi
mov word [rsp + 0x1c4], ax
mov eax, 0x4433
mov qword [rsp + 0x1f8], rdi
mov word [rsp + 0x1c6], ax
xor eax, eax
mov qword [rsp + 0x138], rdi
mov dword [rsp + 0x244], eax
mov dword [rsp + 0x248], eax
mov dword [rsp + 0x24c], eax
lea rax, str.MS_Basic_Data
mov dword [rsp + 0x270], edi
mov dword [rsp + 0x1ec], edi
mov dword [rsp + 0x2d8], edi
mov dword [rsp + 0x198], edi
mov dword [rsp + 0x290], edi
mov dword [rsp + 0x280], edi
lea rdi, [0x140134078]
mov qword [rsp + 0x2b8], rax
mov rcx, rdi
mov dword [rsp + 0x1c0], 0xebd0a0a2
mov byte [rsp + 0x1c8], 0x87
mov byte [rsp + 0x1c9], 0xc0
mov byte [rsp + 0x1ca], 0x68
mov byte [rsp + 0x1cb], 0xb6
mov byte [rsp + 0x1cc], 0xb7
mov byte [rsp + 0x1cd], 0x26
mov byte [rsp + 0x1ce], 0x99
mov byte [rsp + 0x1cf], 0xc7
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov sil, byte [rsp + 0x44]
xor r12d, r12d
lea rcx, [rsp + 0x4a8]
cmp sil, r12b
jne 0x14008d85c
lea rdx, [rsp + 0x4c]
call fcn.1400717e0
mov rcx, qword [rsp + 0x4a8]
lea r8d, [r12 + 0x2d]
lea r9d, [r12 + 9]
cmp r8w, word [rcx]
jne 0x14008d84f
lea rdx, [rcx + 2]
movzx eax, word [rdx]
sub ax, 0x30
cmp ax, r9w
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0xf4], eax
jbe 0x14008d8a7
mov byte [rsp + 0x110], bpl
mov rcx, rdx
mov qword [rsp + 0x4a8], rdx
jmp 0x14008d8a7
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0xf4], eax
jmp 0x14008d8a7
lea rdx, [rsp + 0x1c0]
xor r8d, r8d
call fcn.140074e40
mov rsi, rax
mov qword [rsp + 0x2d8], rax
or rax, 0xffffffffffffffff
cmp esi, eax
jne 0x14008d890
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15, r12
jmp 0x1400934a5
mov rcx, qword [rsp + 0x4a8]
mov sil, byte [rsp + 0x44]
mov r8d, 0x2d
lea r9d, [r8 - 0x24]
mov eax, 0x2b
cmp ax, word [rcx]
jne 0x14008d8c6
mov al, byte [rcx]
add rcx, 2
mov byte [rsp + 0xd8], al
mov qword [rsp + 0x4a8], rcx
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14008d909
mov edx, 0x20
cmp r9w, ax
ja 0x14008d8e0
cmp ax, 0xd
jbe 0x14008d8fa
cmp dx, ax
je 0x14008d8fa
add rcx, 2
mov qword [rsp + 0x4a8], rcx
mov ax, word [rcx]
cmp ax, r12w
jne 0x14008d8d4
lea rcx, [rsp + 0x4a8]
call fcn.140059074
jmp 0x14008d93f
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x4a8]
call fcn.14006875c
mov r8d, 0x2d
mov dword [rsp + 0x290], eax
mov rax, qword [rsp + 0x160]
lea r9d, [r8 - 0x24]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x4a8]
mov ecx, 0x40
mov byte [rsp + 0x11c], bpl
cmp cx, word [rax]
jne 0x14008d96d
add rax, 2
mov byte [rsp + 0x11c], r12b
mov qword [rsp + 0x4a8], rax
movzx ecx, word [rax]
cmp r8w, cx
jne 0x14008d9b0
mov edx, 0x20
cmp r9w, cx
ja 0x14008d987
cmp cx, 0xd
jbe 0x14008d9a1
cmp dx, cx
je 0x14008d9a1
add rax, 2
mov qword [rsp + 0x4a8], rax
mov cx, word [rax]
cmp cx, r12w
jne 0x14008d97b
lea rcx, [rsp + 0x4a8]
call fcn.140059074
jmp 0x14008d9dc
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x4a8]
call fcn.14006875c
mov dword [rsp + 0x280], eax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0xc0], rax
cmp sil, r12b
je 0x14008da78
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x4a8]
xor r8d, r8d
call fcn.140074e40
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x4a8]
mov qword [rsp + 0x198], rax
call fcn.14006868c
mov dword [rsp + 0x270], eax
mov al, byte [rsp + 0x70]
cmp al, r12b
je 0x14008da68
mov rsi, qword [rsp + 0x138]
movabs rcx, 0x8000000000000000
mov r8d, 0x20
mov qword [rsp + 0x1f8], rsi
test rcx, rsi
jne 0x14008da61
or rsi, rcx
or al, r8b
mov byte [rsp + 0x70], al
mov qword [rsp + 0x1f8], rsi
mov sil, byte [rsp + 0x44]
jmp 0x14008da7e
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x1f8], rax
mov r8d, 0x20
mov rcx, qword [rsp + 0x4a8]
mov qword [rsp + 0x300], r12
mov edx, 0x2d
movzx eax, word [rcx]
cmp dx, ax
jne 0x14008dac8
mov edx, 9
cmp dx, ax
ja 0x14008daab
cmp ax, 0xd
jbe 0x14008db1c
cmp r8w, ax
je 0x14008db1c
add rcx, 2
mov qword [rsp + 0x4a8], rcx
mov ax, word [rcx]
cmp ax, r12w
jne 0x14008daa0
jmp 0x14008db1c
cmp sil, r12b
je 0x14008db1c
cmp ax, r12w
je 0x14008db1c
mov qword [rsp + 0x2f0], rcx
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x2f0]
xor r8d, r8d
call fcn.14002499c
mov r12, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x300]
xor ecx, ecx
mov qword [rsp + 0x2b8], r12
mov dword [rsp + 0x1ec], ebp
mov word [r12 + rax*2], cx
xor r12d, r12d
mov eax, dword [rsp + 0xb4]
mov esi, dword [rsp + 0xac]
mov byte [rsp + 0x90], r12b
mov byte [rsp + 0xa5], r12b
mov byte [rsp + 0xe0], r12b
cmp al, bpl
je 0x14008db58
cmp al, bl
cmovl esi, r12d
mov dword [rsp + 0xac], esi
mov dword [rsp + 0x54], esi
mov r12, qword [rsp + 0x258]
lea rcx, [0x14011e980]
mov r8d, 5
mov rdx, r12
mov r11, r12
mov qword [rsp + 0x4a8], r12
call fcn.14005a71c
xor r10d, r10d
mov ebx, 0x5c
cmp al, r10b
je 0x14008dcf7
lea r8, [r12 + 0xa]
lea eax, [rbx - 0x32]
mov qword [rsp + 0x4a8], r8
mov rdx, r8
cmp ax, word [r8]
jne 0x14008dc52
lea rax, [r8 + 2]
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x130], rax
call fcn.14006875c
mov rdx, qword [rsp + 0x130]
lea eax, [rbx - 0x32]
mov byte [rsp + 0xe0], bpl
cmp ax, word [rdx]
jne 0x14008dc34
add rdx, 2
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x130], rdx
lea rdx, [rsp + 0x228]
call fcn.14006875c
mov rax, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x130]
mov qword [rsp + 0x2a8], rax
lea eax, [rbx - 0x32]
mov byte [rsp + 0xe0], 0x11
cmp ax, word [rdx]
jne 0x14008dc34
add rdx, 2
mov rax, qword [rsp + 0x230]
mov r8, rdx
mov qword [rsp + 0x4a8], rdx
mov qword [rsp + 0x210], rax
xor r10d, r10d
movzx eax, word [r8]
cmp bx, ax
je 0x14008dc79
mov ecx, dword [rsp + 0x1e8]
mov r9d, 0x2f
movzx ecx, cl
cmp r9w, ax
cmovne ecx, ebp
mov dword [rsp + 0x1e8], ecx
cmp ax, r10w
je 0x14008dcb9
mov ecx, 0x20
lea r11d, [rcx + 3]
lea r9d, [rcx - 0x17]
cmp r9w, ax
ja 0x14008dc98
cmp ax, 0xd
jbe 0x14008dcb9
cmp cx, ax
je 0x14008dcb9
cmp ax, r11w
je 0x14008dcb9
add r8, 2
mov qword [rsp + 0x4a8], r8
mov ax, word [r8]
cmp ax, r10w
jne 0x14008dc8c
sub r8, rdx
sar r8, 1
cmp r8, r10
jle 0x14008dce0
lea rcx, [rsp + 0x220]
call fcn.1400618d4
mov esi, 0xfffc0000
xor r10d, r10d
mov dword [rsp + 0xac], esi
lea rcx, [rsp + 0x4a8]
call fcn.140059074
mov r11, qword [rsp + 0x4a8]
jmp 0x14008dd6f
lea rcx, [0x14011e97c]
mov r8d, 2
mov rdx, r12
call fcn.14005a71c
xor r10d, r10d
cmp al, r10b
je 0x14008dd21
lea r11, [r12 + 4]
mov qword [rsp + 0x4a8], r11
cmp word [r11], 0x30
jb 0x14008dd2f
cmp word [r11], 0x39
jbe 0x14008dd3a
mov eax, 0x28
cmp ax, word [r11]
jne 0x14008dd62
lea rdx, [rsp + 0x54]
lea rcx, [rsp + 0x4a8]
call fcn.140065ddc
mov esi, dword [rsp + 0x54]
mov r11, qword [rsp + 0x4a8]
mov dword [rsp + 0xac], esi
xor r10d, r10d
cmp word [r12], r10w
setne byte [rsp + 0x90]
mov rax, qword [rsp + 0x210]
shl rax, 9
mov qword [rsp + 0x158], rax
mov eax, 0x23
cmp ax, word [r11]
je 0x14008dda1
lea ecx, [rax + 0x17]
cmp cx, word [r11]
jne 0x14008deb8
cmp ax, word [r11]
jne 0x14008ddae
bts r13d, 0xa
mov dword [rsp + 0xb8], r13d
add r11, 2
lea rcx, [0x14011e978]
mov r8d, 2
mov rdx, r11
mov qword [rsp + 0x4a8], r11
call fcn.14005a71c
lea rcx, [0x14011e974]
mov r8d, 2
mov rdx, r11
mov bl, al
mov byte [rsp + 0x46], al
call fcn.14005a71c
mov cl, al
mov byte [rsp + 0x61], al
mov al, bl
or al, cl
sete byte [rsp + 0xa5]
xor r10d, r10d
cmp bl, r10b
jne 0x14008de24
lea eax, [r10 + 0x2b]
cmp ax, word [r11]
jne 0x14008de24
mov dl, bpl
add r11, 2
mov dword [rsp + 0x1b4], edx
mov qword [rsp + 0x4a8], r11
cmp cl, r10b
jne 0x14008de62
mov eax, 0x40
cmp ax, word [r11]
je 0x14008de4a
mov eax, 0x2d
cmp ax, word [r11]
je 0x14008de4a
mov eax, 0x3d
cmp ax, word [r11]
jne 0x14008de62
or r13d, 2
add r11, 2
mov qword [rsp + 0x4a8], r11
mov dword [rsp + 0xb8], r13d
cmp word [r11], 0x30
jb 0x14008de70
cmp word [r11], 0x39
jbe 0x14008de7b
mov eax, 0x28
cmp ax, word [r11]
jne 0x14008deb8
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x4a8]
call fcn.1400717e0
xor r10d, r10d
cmp eax, r10d
mov eax, dword [rsp + 0x4b8]
mov qword [rsp + 0x68], rax
jle 0x14008debd
mov byte [rsp + 0xa3], bpl
cmp eax, r10d
jne 0x14008dec0
mov byte [rsp + 0x46], bpl
jmp 0x14008dec2
mov rax, qword [rsp + 0x68]
cmp eax, r10d
jg 0x14008dee3
cmp byte [rsp + 0xb4], r10b
jg 0x14008dee3
cmp qword [rsp + 0x2c0], r10
jne 0x14008dee3
cmp qword [rsp + 0x2a0], r10
jne 0x14008dee3
mov ebp, r10d
movsxd rbx, esi
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x4b8], rbx
cmp byte [rsp + 0x47], r10b
je 0x14008df2a
cmp ebp, r10d
jne 0x14008df2a
cmp word [r12], r10w
jne 0x14008df2a
mov rax, 0xfffffffffffc0000
mov dword [rsp + 0xac], eax
mov rbx, rax
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x4b8], rax
mov r13, qword [rsp + 0x220]
mov r8d, dword [rsp + 0xac]
mov word [rsp + 0x350], r10w
cmp word [r13], r10w
lea rsi, [rsp + 0x350]
lea rdx, str..PhysicalDrive_d
cmovne rsi, r13
lea rcx, [rsp + 0x350]
mov qword [rsp + 0x190], rsi
call qword [sym.imp.USER32.dll_wsprintfW]
xor edx, edx
cmp byte [rsp + 0xa6], dl
jg 0x14008dfd3
cmp qword [rsp + 0x210], rdx
jne 0x14008dfd3
lea r8d, [rdx + 0x11]
lea rcx, str..PhysicalDrive
mov rdx, rsi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
xor edx, edx
cmp eax, edx
jne 0x14008dfd3
lea rax, [rsi + 0x22]
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x160], rax
call fcn.140065c7c
mov rbx, qword [rsp + 0x4b8]
mov qword [rsp + 0x150], rbx
xor edx, edx
cmp r15b, dl
jne 0x14008dfe4
cmp byte [rsp + 0x40], dl
jne 0x14008dfe4
cmp byte [rsp + 0x43], dl
je 0x14008e007
cmp dword [rsp + 0xac], edx
jge 0x14008e007
cmp rbx, rdx
jge 0x14008e007
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15, 0xffffffff80070057
jmp 0x1400934a5
mov r10, qword [rsp + 0x150]
or r8, 0xffffffffffffffff
mov r15, 0xffffffff80070057
mov rax, r15
mov rsi, rdx
mov qword [rsp + 0x108], rdx
mov qword [rsp + 0x228], rax
mov al, byte [rsp + 0x47]
mov dword [rsp + 0xa8], r8d
mov qword [rsp + 0x208], rdx
mov bl, dl
mov byte [rsp + 0x4b8], dl
cmp al, dl
je 0x14008e14f
cmp r10, rdx
mov rcx, qword [rsp + 0x168]
jge 0x14008e075
cmp qword [rsp + 0x120], r8
jle 0x14008e075
cmp rcx, rdx
je 0x14008e14f
cmp rcx, rdx
je 0x14008e0cd
mov r9d, 0x2a
cmp r9w, word [rcx]
jne 0x14008e0cd
movsx edx, al
mov ecx, r10d
and edx, 2
shr edx, 1
call fcn.140075078
mov r10, qword [rsp + 0x150]
xor edx, edx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x208], rax
lea eax, [rdx + 0x20]
or byte [0x1401336c5], al
mov bl, al
mov byte [rsp + 0x4b8], al
mov al, byte [rsp + 0x47]
or r8, 0xffffffffffffffff
mov rcx, rdx
cmp r10, rdx
jge 0x14008e0e1
cmp qword [rsp + 0x120], r8
jle 0x14008e0e1
cmp rcx, rdx
je 0x14008e14f
mov r8, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x120]
movsx r9d, al
and r9d, 2
mov qword [rsp + 0x20], rcx
mov ecx, r10d
shr r9d, 1
call fcn.1400075b0
mov r10, qword [rsp + 0x150]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x208], rax
or rax, 0xffffffffffffffff
lea ecx, [rax + 0x11]
cmp qword [rsp + 0x120], rax
je 0x14008e145
or byte [0x1401336c5], cl
or bl, cl
xor edx, edx
mov byte [rsp + 0x4b8], bl
jmp 0x14008e154
xor edx, edx
mov byte [0x1401336c5], dl
jmp 0x14008e154
mov ecx, 0x10
mov r11b, byte [rsp + 0x71]
movdqu xmm6, xmmword [rsp + 0x1c0]
movdqu xmm7, xmmword [rsp + 0x240]
mov r8b, byte [rsp + 0x44]
cmp r11b, dl
jbe 0x14008e56c
cmp r8b, dl
jne 0x14008e56c
cmp dword [rsp + 0xac], edx
jge 0x14008e196
cmp word [r13], dx
je 0x14008e551
mov eax, dword [rsp + 0x118]
mov rcx, qword [rsp + 0x68]
cmp eax, edx
jle 0x14008e1ae
cmp eax, ecx
je 0x14008e551
cmp ecx, 4
jg 0x14008e551
cmp byte [rsp + 0x49], 2
jl 0x14008e551
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], 0x20000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x190]
lea rcx, [rsp + 0x108]
mov r9d, 3
mov r8d, 0xc0000000
call fcn.1400037a8
mov rbx, qword [rsp + 0x108]
xor eax, eax
cmp rbx, rax
jne 0x14008e21e
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
jmp 0x140093496
xor edx, edx
mov r9d, 0x800
mov rcx, rbx
lea r8d, [rdx + 1]
call fcn.1400678f0
mov esi, 0x200
mov rcx, rbx
mov edx, esi
mov dword [rsp + 0xa8], eax
call fcn.14005d7c4
mov ebp, esi
lea rcx, [rsp + 0x130]
cmp eax, esi
cmovge ebp, eax
mov dword [rsp + 0xd0], ebp
lea edx, [rbp + rbp*2]
call fcn.1400613f4
mov rcx, qword [rsp + 0x130]
mov edx, ebp
add rcx, rdx
lea esi, [rbp - 1]
mov qword [rsp + 0x160], rdx
xor eax, eax
not esi
lea r9, [rsp + 0xdc]
and rsi, rcx
mov r8d, ebp
mov rcx, rbx
lea r15, [rsi + rbp]
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x20], rax
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ebp, ebp
cmp eax, ebp
jne 0x14008e2fa
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rbp + 1]
cmp eax, ebp
cmove eax, ecx
lea rcx, [rsp + 0x130]
mov r15d, eax
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008e55e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008e55e
mov r8d, 0x200
mov rdx, r15
mov rcx, rsi
call fcn.14001d128
mov edx, dword [rsp + 0x118]
mov rcx, qword [rsp + 0x68]
or byte [rsp + 0x71], 2
mov eax, 1
mov r8d, 0x10
sub edx, eax
sub ecx, eax
mov byte [r15 + 0x1fe], 0x55
mov eax, edx
mov dword [rsp + 0x118], edx
mov qword [rsp + 0x68], rcx
shl eax, 4
mov byte [r15 + 0x1ff], 0xaa
movsxd rbp, eax
mov eax, ecx
shl eax, 4
movsxd rsi, eax
mov rax, qword [rsp + 0x138]
lea rdx, [rax + rbp + 0x1be]
lea rcx, [r15 + rsi + 0x1be]
call fcn.14001d128
mov rax, qword [rsp + 0x138]
lea rcx, [r15 + rbp + 0x1be]
lea rdx, [rax + rsi + 0x1be]
mov r8d, 0x10
call fcn.14001d128
mov rdx, qword [rsp + 0x158]
xor r8d, r8d
mov rcx, rbx
call fcn.14005a608
xor ebp, ebp
cmp eax, ebp
je 0x14008e3e5
lea rcx, [rsp + 0x130]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140093496
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140093496
mov r8, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x138]
mov rdx, r15
mov rsi, rbp
mov qword [rsp + 0x208], rbp
call fcn.1400590d4
cmp eax, ebp
je 0x14008e453
mov r8d, dword [rsp + 0xd0]
lea r9, [rsp + 0xdc]
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebp
jne 0x14008e44b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, ebp
cmove eax, ecx
mov esi, eax
mov qword [rsp + 0x208], rsi
mov rcx, rbx
call fcn.14005dff8
mov cl, byte [rsp + 0x40]
mov r15b, byte [rsp + 0x43]
mov dl, byte [rsp + 0x41]
mov al, r15b
or al, dl
or cl, al
mov al, r15b
or al, cl
mov byte [rsp + 0x40], cl
lea rcx, [rsp + 0x130]
or al, dl
je 0x14008e51c
call fcn.1400590a4
mov edx, dword [rsp + 0x78]
mov r9b, byte [rsp + 0x45]
mov ebx, dword [rsp + 0xa8]
mov r10b, byte [rsp + 0x40]
mov r11b, byte [rsp + 0x41]
xor ecx, ecx
mov esi, 1
mov al, cl
cmp byte [rsp + 0x47], cl
je 0x14008e4b2
cmp ebp, ecx
jne 0x14008e4c6
mov eax, 0x40
mov ecx, 0x60
cmp r9b, 0x10
movzx eax, al
cmove eax, ecx
mov rcx, qword [rsp + 0x150]
xor r8d, r8d
cmp rcx, r8
jl 0x14009171b
lea ebx, [r8 + 0x20]
cmp r9b, bl
je 0x14008e4ed
cmp r9b, 0x10
jne 0x1400916d6
mov r8d, dword [rsp + 0xa8]
cmp r8d, 0xb
jne 0x1400916de
xor ebx, ebx
cmp byte [rsp + 0x1e8], bl
mov ebx, dword [rsp + 0xa8]
jg 0x140091751
or al, 0x11
jmp 0x140091718
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008e540
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15, rsi
jmp 0x1400934a5
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400934a5
mov r9b, byte [rsp + 0x45]
mov dword [rsp + 0x78], edx
cmp r9b, cl
jne 0x14008e58d
mov r15b, byte [rsp + 0x43]
mov eax, 0x20
test al, r15b
jne 0x14008e48e
mov r15, qword [rsp + 0x190]
mov ebx, dword [rsp + 0xa8]
xor eax, eax
cmp byte [rsp + 0x47], al
je 0x14008e618
cmp ebp, eax
jne 0x14008e618
mov r11b, byte [rsp + 0x41]
mov r10b, byte [rsp + 0x40]
xor r15d, r15d
xor ecx, ecx
cmp r11b, r15b
jne 0x1400916cc
cmp r10b, r15b
mov r15b, byte [rsp + 0x43]
jne 0x14008e4a1
cmp r15b, cl
jne 0x14008e4a1
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
xor ebx, ebx
cmp rsi, rbx
je 0x14008e5fd
or rax, 0xffffffffffffffff
cmp rsi, rax
je 0x14008e5fd
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbx
je 0x14008e60b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15, qword [rsp + 0x228]
jmp 0x1400934a5
mov r9, qword [rsp + 0x2c0]
xor ebx, ebx
cmp r9, rbx
jne 0x140092ff5
mov r9, qword [rsp + 0x2a0]
cmp r9, rbx
jne 0x140092a40
mov eax, dword [rsp + 0xb4]
cmp al, 6
je 0x1400928fa
lea r15d, [rbx + 1]
cmp al, r15b
je 0x1400927f9
mov cl, byte [rsp + 0xa6]
cmp al, 2
jne 0x14008e66b
cmp cl, bl
je 0x1400917dd
cmp al, 8
jne 0x14008e677
cmp cl, bl
je 0x140091862
mov qword [rsp + 0x58], rbx
cmp al, 3
je 0x1400926c4
cmp al, 4
je 0x1400925a4
mov ecx, 5
cmp al, cl
je 0x1400925a4
cmp al, 7
je 0x14009240c
cmp byte [rsp + 0x61], bl
je 0x14008e6cd
mov word [rsp + 0x128], bx
mov edx, ebx
mov dword [rsp + 0xf4], ebx
mov r15, rbx
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0x80], rbx
jmp 0x14008e6e9
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x80]
mov r15, qword [rsp + 0xc0]
mov edx, dword [rsp + 0xf4]
xor r9d, r9d
cmp byte [rsp + 0x46], r9b
mov rax, r9
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x208], rax
lea eax, [r9 + 5]
cmovne ecx, eax
mov eax, dword [rsp + 0x178]
mov qword [rsp + 0x68], rcx
cmp al, r9b
je 0x14008e745
mov edx, r9d
mov rbx, r9
mov word [rsp + 0x128], r9w
mov r15, r9
mov qword [rsp + 0xc0], r9
mov dword [rsp + 0xf4], edx
mov qword [rsp + 0x80], rbx
cmp byte [rsp + 0x90], r9b
je 0x14008e758
cmp r10, r9
jl 0x140091934
cmp byte [rsp + 0xa5], r9b
je 0x14008e76b
cmp ecx, r9d
jl 0x140091934
mov esi, 1
test r11b, 2
jne 0x14008e77d
sub ecx, esi
mov qword [rsp + 0x68], rcx
or rcx, 0xffffffffffffffff
mov byte [rsp + 0x48], r9b
mov byte [rsp + 0xa2], r9b
mov word [rsp + 0x100], r9w
mov byte [rsp + 0xdb], r9b
mov byte [rsp + 0xe1], r9b
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0xd0], rcx
mov word [rsp + 0x218], r9w
cmp r8b, r9b
jne 0x14008e7df
cmp edx, r9d
jne 0x14008e7df
cmp rbx, r9
jne 0x14008e7df
movzx eax, al
cmp r15, r9
cmove eax, esi
mov dword [rsp + 0x178], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
test byte [rsp + 0x114], sil
je 0x14008e800
cmp rbx, rax
jl 0x14008e800
cmp r15, rsi
mov r15d, esi
jge 0x14008e803
mov r15d, eax
mov rdx, qword [rsp + 0x190]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x108]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x54], r15d
mov qword [rsp + 0x20], rax
call fcn.1400037a8
mov rbx, qword [rsp + 0x108]
xor eax, eax
cmp rbx, rax
je 0x1400923e2
mov edx, 0x200
mov rcx, rbx
call fcn.14005d7c4
mov ecx, 0x200
cmp eax, ecx
cmovge ecx, eax
xor r10d, r10d
mov dword [rsp + 0x50], ecx
cmp r15d, r10d
je 0x14008e902
mov rdx, qword [rsp + 0x80]
cmp rdx, r10
jl 0x14008e8c6
lea r9d, [rcx + rcx*4]
mov r8, rdx
mov edx, dword [rsp + 0x150]
mov qword [rsp + 0x28], r10
lea rcx, [rsp + 0x4b8]
shl r8, 9
shl r9d, 3
mov qword [rsp + 0x20], r10
call fcn.14005e0b8
mov ecx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x80]
xor r10d, r10d
cmp byte [rsp + 0x46], r10b
jne 0x14008e902
mov rax, qword [rsp + 0x210]
mov r8, qword [rsp + 0xc0]
mov r9d, ecx
add rdx, rax
mov rcx, rbx
call fcn.140055120
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
xor eax, eax
mov qword [rsp + 0x228], rax
mov r9d, 0x800
mov r8d, esi
xor edx, edx
mov rcx, rbx
call fcn.1400678f0
mov r9b, byte [rsp + 0x45]
xor r8d, r8d
cmp qword [rsp + 0x150], r8
lea r10d, [r8 + 0x20]
mov edx, eax
mov dword [rsp + 0xa8], eax
jl 0x14008e979
cmp r9b, r10b
je 0x14008e942
lea eax, [r8 + 0x10]
cmp r9b, al
jne 0x14008e947
cmp edx, 0xb
je 0x14008e96d
mov al, byte [rsp + 0x40]
test r10b, al
jne 0x14008e96d
cmp al, r8b
je 0x14008e95a
cmp edx, 0xb
je 0x14008e96d
mov al, byte [rsp + 0x43]
test r10b, al
jne 0x14008e96d
cmp al, r8b
je 0x14008e979
cmp edx, 0xb
jne 0x14008e979
mov ecx, dword [rsp + 0x78]
or ecx, esi
mov dword [rsp + 0x78], ecx
jmp 0x14008e97d
mov ecx, dword [rsp + 0x78]
cmp byte [rsp + 0x1e8], r8b
mov r11b, byte [rsp + 0x41]
jg 0x14008e9a9
cmp r11b, r8b
jne 0x14008e9a2
cmp r9b, sil
je 0x14008e9a2
cmp r9b, r10b
je 0x14008e9a2
cmp byte [rsp + 0x40], r8b
je 0x14008e9a9
or ecx, 2
mov dword [rsp + 0x78], ecx
cmp r9b, sil
je 0x14008e9b3
cmp r9b, r10b
jne 0x14008e9c2
mov r8d, 4
or ecx, r8d
mov dword [rsp + 0x78], ecx
jmp 0x14008e9c8
mov r8d, 4
mov r10b, byte [rsp + 0x43]
mov al, r10b
and al, 0x20
jne 0x14008e9e9
test r10b, r10b
je 0x14008e9de
cmp edx, 0xb
je 0x14008e9e9
test r9b, 0x10
je 0x14008e9f0
cmp edx, 0xc
je 0x14008e9f0
or ecx, 8
mov dword [rsp + 0x78], ecx
xor r10d, r10d
cmp byte [rsp + 0x1e8], r10b
jg 0x14008ea04
or ecx, 0x10
mov dword [rsp + 0x78], ecx
cmp r9b, 0x10
jne 0x14008ea11
or ecx, 0x20
mov dword [rsp + 0x78], ecx
mov r10b, byte [rsp + 0x47]
test r10b, r10b
je 0x14008ea1f
test ebp, ebp
jne 0x14008ea26
or ecx, 0x40
mov dword [rsp + 0x78], ecx
cmp r9b, 0x18
jne 0x14008ea34
bts ecx, 7
mov dword [rsp + 0x78], ecx
cmp edx, 0xc
jne 0x14008ea4e
xor edx, edx
cmp byte [rsp + 0x40], dl
jne 0x14008ea46
cmp r11b, dl
je 0x14008ea4e
bts ecx, 8
mov dword [rsp + 0x78], ecx
xor r11d, r11d
cmp r10b, r11b
je 0x14008ea5b
cmp ebp, r11d
je 0x14008ea6b
cmp r9b, 0x10
jne 0x14008ea66
cmp al, r11b
jne 0x14008ea6b
cmp r9b, r11b
je 0x14008ea9e
lea rcx, [rsp + 0x58]
mov ebp, r11d
call fcn.1400590a4
mov r15b, byte [rsp + 0x43]
mov r9b, byte [rsp + 0x45]
mov ebx, dword [rsp + 0xa8]
mov edx, dword [rsp + 0x78]
mov r10b, byte [rsp + 0x40]
mov r11b, byte [rsp + 0x41]
xor ecx, ecx
jmp 0x14008e4a6
mov ecx, dword [rsp + 0xf4]
mov rbp, r11
mov qword [rsp + 0x160], r11
cmp ecx, 0xff
jg 0x1400923af
mov r9b, byte [rsp + 0x46]
mov rax, qword [rsp + 0x68]
cmp r9b, r11b
jne 0x14008eb17
cmp eax, r11d
jge 0x14008eb17
mov rdx, qword [rsp + 0x80]
cmp rdx, r11
jge 0x1400923af
cmp qword [rsp + 0xc0], r11
jge 0x1400923af
cmp ecx, r11d
jge 0x1400923af
or rdx, 0xffffffffffffffff
mov ecx, edx
mov dword [rsp + 0xf4], edx
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0x80], rdx
jmp 0x14008eb1b
or rdx, 0xffffffffffffffff
mov qword [rsp + 0x138], r11
mov qword [rsp + 0x230], r11
mov qword [rsp + 0x238], rdx
mov qword [rsp + 0x168], rdx
mov dword [rsp + 0x8c], eax
cmp r9b, r11b
jne 0x14008eb57
cmp byte [rsp + 0x61], r11b
jne 0x14008eb57
cmp eax, r8d
jl 0x14008f250
cmp byte [rsp + 0x44], r11b
jne 0x14008f250
cmp byte [rsp + 0xb0], r11b
jne 0x14008f250
mov r15, qword [rsp + 0x68]
cmp r9b, r11b
mov eax, 5
cmovne r15d, r8d
mov qword [rsp + 0x68], r15
cmp ecx, eax
je 0x14008edc7
cmp ecx, 0xf
je 0x14008edc7
lea rcx, [rsp + 0x188]
mov edx, 0x100000
mov dword [rsp + 0x88], r11d
call fcn.1400613f4
mov rdx, qword [rsp + 0x188]
lea r8, [rsp + 0x88]
mov rcx, rbx
call fcn.14005ddac
mov ecx, dword [rsp + 0x88]
mov r11d, 4
mov r8, rax
mov qword [rsp + 0x140], rax
mov al, byte [rsp + 0x46]
mov dword [rsp + 0x4c], ecx
cmp al, bpl
jne 0x14008ec76
cmp ecx, r15d
jge 0x14008ebfc
cmp r15d, r11d
jge 0x14008ec38
cmp al, bpl
jne 0x14008ec76
cmp byte [rsp + 0x61], bpl
jne 0x14008ec76
lea eax, [r15 + 1]
mov dl, bpl
cmp eax, r11d
mov byte [rsp + 0x42], dl
jg 0x14008ec1c
dec eax
jmp 0x14008ec23
lea eax, [rax*4 - 0x10]
cmp eax, ebp
jle 0x14008ec38
cmp eax, ecx
jl 0x14008ecb8
cmp r15d, r11d
jle 0x14008ecb8
lea rcx, [rsp + 0x188]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008ec6e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x14009302c
mov dl, sil
mov byte [rsp + 0x42], dl
cmp byte [rsp + 0x61], bpl
jne 0x14008ecb3
cmp al, bpl
je 0x14008ecb8
mov eax, dword [rsp + 0xf4]
cmp eax, ebp
jl 0x14008ec38
cmp word [rsp + 0x128], bp
mov eax, ebp
mov r9d, 0x80
cmovg ax, r9w
mov word [rsp + 0x128], ax
jmp 0x14008ecb8
cmp ecx, r11d
jle 0x14008ec38
cmp ecx, r11d
jle 0x14008ecc7
lea r10d, [rcx - 4]
and r10d, 0xfffffffc
jmp 0x14008ecca
mov r10d, ebp
or rcx, 0xffffffffffffffff
xor eax, eax
mov ebp, ecx
mov dword [rsp + 0x8c], ecx
cmp dl, al
jne 0x14008eced
cmp r15d, r11d
lea r10d, [r15*4 - 0x10]
jge 0x14008eced
mov r10d, eax
mov r9d, ecx
lea rcx, [r8 + 0x50]
cmp byte [rcx], 5
je 0x14008ecfe
cmp byte [rcx], 0xf
jne 0x14008ed01
mov r9d, eax
add eax, esi
add rcx, 0x90
cmp eax, r11d
jl 0x14008ecf4
xor ecx, ecx
cmp dl, cl
je 0x14008ed1e
cmp r9d, ecx
jl 0x14008edba
mov r11d, 0x1ff
movsxd rax, r9d
lea r15, [rax + rax*8]
shl r15, 4
mov rax, qword [r15 + r8 + 0x38]
cqo
and rdx, r11
lea rsi, [rdx + rax]
mov rax, qword [r15 + r8 + 0x40]
cqo
sar rsi, 9
and rdx, r11
lea r8, [rdx + rax]
movsxd rax, r10d
lea r11, [rax + rax*8]
sar r8, 9
shl r11, 4
cmp byte [rsp + 0x61], cl
je 0x14008eea5
mov eax, dword [rsp + 0x4c]
mov r9d, ecx
cmp eax, 8
je 0x14008ee25
mov r10, qword [rsp + 0x140]
add eax, 0xfffffff8
mov r8, rcx
and eax, 0xfffffffc
movsxd rdx, eax
lea rax, [rdx + rdx*8]
add rax, rax
lea rcx, [r10 + rax*8 + 0x50]
mov eax, 1
cmp byte [rcx], 5
je 0x14008edfa
cmp byte [rcx], 0xf
je 0x14008edfa
add r8, rax
add r9d, eax
add rcx, 0x90
cmp r8, 4
jl 0x14008ed9d
lea rcx, [rsp + 0x188]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008edf0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14009302c
lea rcx, [rdx + rdx*8]
add rcx, rcx
mov rax, qword [r10 + rcx*8 + 0x38]
cqo
and edx, 0x1ff
lea rsi, [rdx + rax]
mov eax, dword [r10 + rcx*8 + 0x54]
xor ecx, ecx
sar rsi, 9
sub rsi, rax
cmp r9d, ecx
jl 0x14008edba
xor eax, eax
mov dword [rsp + 0x308], ecx
lea r8, [rsp + 0x308]
mov dword [rsp + 0x30c], eax
mov dword [rsp + 0x310], eax
mov dword [rsp + 0x314], eax
mov rax, qword [rsp + 0x210]
mov rcx, rbx
lea rdx, [rsi + rax]
call fcn.140074cfc
mov r15b, byte [rsp + 0x43]
xor esi, esi
mov qword [rsp + 0x208], rsi
cmp r15b, sil
jne 0x14008ee87
cmp byte [rsp + 0x40], sil
jne 0x14008ee87
mov dl, byte [rsp + 0x41]
cmp dl, sil
je 0x140091952
mov ebp, esi
lea rcx, [rsp + 0x188]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
jmp 0x14008e485
cmp dword [rsp + 0x4c], 4
jg 0x14008eeb5
mov dl, byte [rsp + 0x42]
mov ebp, r9d
jmp 0x14008eef4
mov rdx, qword [rsp + 0x140]
lea rax, [rax + rax*8]
add rax, rax
lea rdx, [rdx + rax*8 + 0x50]
mov eax, 5
cmp byte [rdx], al
je 0x14008eed7
cmp byte [rdx], 0xf
jne 0x14008eed9
mov ebp, ecx
inc ecx
add rdx, 0x90
cmp ecx, 4
jl 0x14008eece
mov dl, byte [rsp + 0x42]
xor ecx, ecx
cmp dl, cl
jne 0x14008eef4
add ebp, r10d
cmp ebp, ecx
jge 0x14008ef02
cmp byte [rsp + 0x46], cl
je 0x14008edba
mov eax, ecx
cmp dl, cl
je 0x14008ef11
mov dword [rsp + 0x8c], ecx
jmp 0x14008ef61
mov rcx, qword [rsp + 0x140]
mov edi, dword [rsp + 0x8c]
lea rcx, [r11 + rcx + 0x290]
cmp byte [rcx], 0
jne 0x14008ef31
test eax, eax
jne 0x14008ef3c
cmp byte [rcx], 5
je 0x14008ef3c
cmp byte [rcx], 0xf
cmovne edi, eax
inc eax
add rcx, 0x90
cmp eax, 4
jl 0x14008ef28
mov dword [rsp + 0x8c], edi
mov eax, dword [rsp + 0x8c]
xor ecx, ecx
lea rdi, [0x140134078]
cmp dl, cl
jne 0x14008ef6d
cmp eax, ecx
jl 0x14008edba
cmp byte [rsp + 0x46], cl
je 0x14008f188
cmp r10d, ecx
mov eax, r9d
cmovg eax, r10d
cdqe
lea rcx, [rax + rax*8]
mov rax, qword [rsp + 0x140]
add rcx, rcx
mov rax, qword [rax + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
xor edx, edx
sar rax, 9
cmp dword [rsp + 0x4c], 4
mov qword [rsp + 0x138], rax
jle 0x14008f096
cmp ebp, edx
jge 0x14008f096
mov rcx, qword [rsp + 0x140]
cmp byte [r11 + rcx + 0x50], dl
je 0x14008f056
mov ebp, dword [rsp + 0x4c]
lea eax, [rbp - 8]
and eax, 0xfffffffc
inc eax
cmp ebp, 8
cmovg r9d, eax
movsxd rax, r9d
mov r9d, 0x1ff
lea rax, [rax + rax*8]
add rax, rax
mov rax, qword [rcx + rax*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov qword [rsp + 0x138], rax
mov rax, qword [r11 + rcx + 0x40]
add rax, qword [r11 + rcx + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov rcx, rax
mov r15, rax
mov qword [rsp + 0x230], rax
sub r8, rcx
sub rax, rsi
add r8, rsi
mov qword [rsp + 0x238], rax
xor edx, edx
mov qword [rsp + 0x168], r8
jmp 0x14008f0de
cmp r10d, 4
jne 0x140091996
cmp r9d, edx
jl 0x140091996
cmp byte [r15 + rcx + 0x50], dl
je 0x140091996
mov ebp, r9d
or r10d, 0xffffffff
mov qword [rsp + 0x138], rsi
mov r9, rsi
mov rcx, rsi
mov r15, rsi
mov qword [rsp + 0x230], rsi
jmp 0x14008f0d6
cmp r10d, edx
jle 0x14008f0be
mov rdx, qword [rsp + 0x140]
mov rax, qword [rdx + rcx*8 + 0x40]
add rax, qword [rdx + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
xor edx, edx
mov ebp, dword [rsp + 0x4c]
sub r8, rax
mov r15, rax
mov qword [rsp + 0x230], rax
mov rcx, rax
add r8, rsi
mov qword [rsp + 0x168], rdx
cmp r8, rdx
jle 0x14008edba
mov rsi, qword [rsp + 0x80]
cmp byte [rsp + 0xd8], dl
je 0x14008f0fb
add rsi, rcx
lea rax, [rcx + 1]
cmp rsi, rax
cmovle rsi, rax
sub r8, rsi
mov qword [rsp + 0x80], rsi
mov rsi, qword [rsp + 0xc0]
add r8, rcx
cmp rsi, r8
cmovg rsi, r8
cmp rsi, rdx
mov qword [rsp + 0xc0], rsi
jl 0x14008edba
cmp r10d, edx
jle 0x14008f158
lea eax, [rbp - 1]
and eax, 0xfffffffc
cmp eax, 3
jg 0x14008f148
inc eax
jmp 0x14008f154
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
inc eax
jmp 0x14008f173
and ebp, 0xfffffffc
cmp ebp, 3
jg 0x14008f165
lea eax, [rbp + 1]
jmp 0x14008f173
mov eax, ebp
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
mov qword [rsp + 0x68], rax
mov rbp, r15
mov qword [rsp + 0x160], r15
jmp 0x14008f22c
mov r8, qword [rsp + 0x140]
mov rsi, qword [rsp + 0x80]
movsxd rax, ebp
lea rcx, [rax + rax*8]
mov r9d, 0x1ff
add rcx, rcx
mov rax, qword [r8 + rcx*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov rbp, rax
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x230], rax
mov rax, qword [r8 + rcx*8 + 0x40]
xor ecx, ecx
cqo
and rdx, r9
add rax, rdx
sar rax, 9
cmp byte [rsp + 0xd8], cl
je 0x14008f1f3
add rsi, rbp
mov qword [rsp + 0x80], rsi
cmp rsi, rcx
jle 0x14008f207
cmp rsi, rbp
cmovle rsi, rbp
mov qword [rsp + 0x80], rsi
mov rsi, qword [rsp + 0xc0]
cmp rsi, rcx
jle 0x14008f22c
cmp rsi, rax
cmovg rsi, rax
cmp rsi, rcx
mov qword [rsp + 0xc0], rsi
jl 0x14008edba
lea rcx, [rsp + 0x188]
call fcn.1400590a4
mov r15d, dword [rsp + 0x54]
mov rax, qword [rsp + 0x68]
mov r9b, byte [rsp + 0x46]
mov esi, 1
xor r11d, r11d
mov rcx, qword [rsp + 0x210]
cmp eax, 4
setge byte [rsp + 0xd9]
add rbp, rcx
shl rbp, 9
cmp r15d, r11d
mov r15d, dword [rsp + 0x50]
mov qword [rsp + 0x240], rbp
je 0x14008f2b7
cmp r9b, r11b
je 0x14008f2b7
mov rax, qword [rsp + 0x80]
mov r8, qword [rsp + 0xc0]
mov r9d, r15d
lea rdx, [rcx + rax]
mov rcx, rbx
call fcn.140055120
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
xor eax, eax
mov qword [rsp + 0x228], rax
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a608
cmp rax, rbp
jne 0x14009237c
lea edx, [r15 + r15*2]
lea rcx, [rsp + 0xe8]
call fcn.1400613f4
mov rax, qword [rsp + 0xe8]
mov r8d, r15d
lea edx, [r15 - 1]
lea rcx, [r8 + rax]
mov qword [rsp + 0x170], r8
not edx
and rdx, rcx
mov qword [rsp + 0x1e0], rdx
lea r15, [r8 + rdx]
xor edx, edx
mov rcx, r15
mov qword [rsp + 0x1d8], r15
call fcn.1400f97d0
mov r8d, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0xdc]
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
cmp eax, ecx
je 0x14009236f
mov r8, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x1e0]
mov rdx, r15
call fcn.14001d128
xor eax, eax
cmp byte [rsp + 0xb0], al
je 0x14008f4b4
cmp byte [rsp + 0x44], al
jne 0x14008f4b4
mov rcx, r15
call fcn.14005e080
mov al, byte [rsp + 0xa1]
mov edx, dword [rsp + 0x50]
xor r9d, r9d
cmp al, r9b
jg 0x14008f3ad
jge 0x14008f3a8
lea eax, [rdx + rdx + 0x4000]
mov ecx, eax
cmp qword [rsp + 0x158], rcx
jg 0x14008f3ad
mov al, r9b
jmp 0x14008f3b0
mov al, sil
cmp byte [rsp + 0xb0], sil
jne 0x14008f3f1
cmp al, r9b
je 0x14008f3dc
cmp edx, 0x200
jbe 0x14008f3dc
lea r8d, [rdx - 0x200]
lea rcx, [r15 + 0x200]
xor edx, edx
call fcn.1400f97d0
xor edx, edx
lea rcx, [r15 + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400f97d0
xor r9d, r9d
mov r8, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x1e0]
mov eax, 0xaa55
mov rdx, r15
mov word [r15 + 0x1fe], ax
call fcn.1400590d4
cmp eax, r9d
je 0x14008f467
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a608
mov r8d, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0xdc]
mov rdx, r15
mov rcx, rbx
mov dword [rsp + 0xdc], eax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r9d, r9d
mov rbp, r9
cmp eax, r9d
sete bpl
mov qword [rsp + 0x208], rbp
jmp 0x14008f46f
mov rbp, qword [rsp + 0x1a0]
mov r15b, byte [rsp + 0x43]
mov dl, byte [rsp + 0x41]
mov al, r15b
or al, byte [rsp + 0x40]
or al, dl
je 0x1400919d6
cmp dword [rsp + 0xac], r9d
jl 0x1400919d6
lea rcx, [rsp + 0xe8]
mov ebp, r9d
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
jmp 0x14008ea7d
xor ebp, ebp
cmp byte [rsp + 0xb4], 2
je 0x14008f4e7
cmp byte [rsp + 0x49], bpl
jne 0x14008f4e7
cmp byte [rsp + 0xa3], bpl
je 0x14008f4fa
mov rax, qword [rsp + 0x68]
cmp eax, esi
jg 0x14008f4ec
lea rcx, [rsp + 0xe8]
jmp 0x14008ec40
mov rax, qword [rsp + 0x68]
cmp byte [rsp + 0xa3], bpl
je 0x14008f4fa
cmp eax, ebp
jl 0x14008f4da
lea rcx, [rsp + 0xf8]
mov edx, 0x200010
call fcn.1400613f4
or rax, 0xffffffffffffffff
mov dword [rsp + 0x88], ebp
mov byte [rsp + 0x42], al
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0xdc], ebp
cmp ax, bp
mov esi, ebp
jl 0x14008f542
mov rsi, qword [rsp + 0x68]
inc esi
cmp ax, bp
jne 0x14008f542
neg si
movzx esi, si
mov eax, esi
lea r9, [rsp + 0x42]
lea r8, [rsp + 0x88]
or eax, dword [rsp + 0x17c]
lea rdx, [rsp + 0xf8]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.140068a50
mov r11b, byte [rsp + 0x42]
cmp esi, ebp
je 0x14008f57e
cmp r11b, bpl
jge 0x140091a16
mov eax, 0x10
cmp r11b, al
jl 0x14008f58c
and r11b, 0xf
cmp r11b, bpl
jl 0x14008f5a6
mov al, byte [rsp + 0x46]
or al, byte [rsp + 0x61]
or al, byte [rsp + 0x178]
jne 0x140091a4b
mov rbp, qword [rsp + 0xf8]
xor ecx, ecx
cmp qword [rsp + 0x150], rcx
jl 0x14008f5d6
mov rdx, rbp
mov rcx, rbx
call fcn.14005da24
cqo
idiv qword [rsp + 0x170]
xor ecx, ecx
mov rsi, rax
jmp 0x14008f632
mov rax, qword [rsp + 0x2a8]
mov rsi, rcx
lea r8, [rsp + 0x318]
cmp rax, rcx
mov rcx, qword [rsp + 0x190]
cmovge rsi, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor ecx, ecx
cmp eax, ecx
je 0x14008f64e
lea eax, [rcx + 0x10]
test byte [rsp + 0x318], al
jne 0x14008f64e
mov esi, dword [rsp + 0x334]
mov eax, dword [rsp + 0x338]
and rsi, 0xfffffffffffffe00
shr rax, 9
shl rsi, 0x17
or rsi, rax
mov rax, qword [rsp + 0x2a8]
sub rsi, qword [rsp + 0x210]
cmp rax, rcx
jle 0x14008f64e
cmp rsi, rax
cmovb rsi, rax
lea r8, [rsp + 0x88]
mov rdx, rbp
mov rcx, rbx
call fcn.14005ddac
xor r11d, r11d
mov rcx, rax
mov qword [rsp + 0x1a0], rax
cmp word [r13], r11w
jne 0x14008f688
cmp rax, r11
jne 0x14008f68d
lea eax, [r11 + 0x10]
test byte [rsp + 0xb0], al
je 0x14008f6df
cmp rcx, r11
je 0x14008f691
mov eax, dword [rcx]
jmp 0x14008f694
mov eax, r11d
mov r9d, 1
cmp eax, r9d
sete r8b
mov byte [rsp + 0x42], r8b
cmp r8b, r11b
je 0x14008f6b8
mov al, r9b
cmp byte [rsp + 0x111], r11b
je 0x14008f6bb
mov al, r11b
mov byte [rsp + 0x60], al
cmp byte [rsp + 0x112], r11b
jne 0x14008f700
cmp byte [rsp + 0xb0], r11b
jne 0x14008f700
cmp al, r11b
je 0x14008f6f9
cmp byte [rsp + 0x44], r11b
jne 0x14008f700
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
jmp 0x14008edc2
cmp byte [rsp + 0x44], r11b
jne 0x14008f6df
mov rax, qword [rsp + 0x288]
mov r10, qword [rsp + 0x2b0]
mov rdx, qword [rsp + 0x298]
mov dword [rsp + 0x54], eax
mov eax, r10d
mov dword [rsp + 0xf0], edx
mov dword [rsp + 0x4c], eax
cmp word [r13], r11w
jne 0x14008f80e
xor edx, edx
lea rcx, [rsp + 0x31c]
mov dword [rsp + 0x318], r11d
lea r8d, [rdx + 0x14]
call fcn.1400f97d0
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xdc]
xor r8d, r8d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x318]
mov edx, 0x70000
mov rcx, rbx
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor ecx, ecx
cmp qword [rsp + 0x288], rcx
jg 0x14008f7ad
movsxd rdx, dword [rsp + 0x324]
mov dword [rsp + 0x54], edx
mov qword [rsp + 0x288], rdx
mov rdx, qword [rsp + 0x298]
cmp rdx, rcx
jg 0x14008f7d1
movsxd rdx, dword [rsp + 0x328]
mov dword [rsp + 0xf0], edx
mov qword [rsp + 0x298], rdx
mov r10, qword [rsp + 0x2b0]
mov r8b, byte [rsp + 0x42]
mov r9d, 1
cmp r10, rcx
mov rcx, qword [rsp + 0x1a0]
jg 0x14008f80a
movsxd rax, dword [rsp + 0x32c]
mov dword [rsp + 0x4c], eax
mov r10, rax
mov qword [rsp + 0x2b0], rax
jmp 0x14008f80e
mov eax, dword [rsp + 0x4c]
mov r11, qword [rsp + 0x288]
test r11, r11
jg 0x14008f82e
mov r11d, 0xff
mov dword [rsp + 0x54], r11d
mov qword [rsp + 0x288], r11
xor r11d, r11d
cmp rdx, r11
jg 0x14008f849
lea edx, [r11 + 0x3f]
mov dword [rsp + 0xf0], edx
mov qword [rsp + 0x298], rdx
mov r11d, dword [rsp + 0x50]
xor edx, edx
cmp r10, rdx
jg 0x14008f870
mov eax, 0x200
cmp r11d, edx
cmova eax, r11d
movsxd r10, eax
mov dword [rsp + 0x4c], eax
mov qword [rsp + 0x2b0], r10
mov r10, qword [rsp + 0x170]
cdq
and edx, 0x1ff
add eax, edx
lea rdx, [r10 + rbp]
mov qword [rsp + 0x140], rdx
add rdx, r10
sar eax, 9
mov qword [rsp + 0x200], rdx
add rdx, 0x10000
mov dword [rsp + 0x88], eax
mov qword [rsp + 0x1a0], rdx
xor edx, edx
cmp byte [rsp + 0x60], dl
jne 0x1400904d0
cmp byte [rsp + 0x44], dl
jne 0x1400904d0
mov byte [rsp + 0x42], dl
cmp byte [rsp + 0x178], dl
jne 0x14008fd90
cmp qword [rsp + 0x80], rdx
jge 0x14008f8f0
cmp qword [rsp + 0xc0], rdx
jl 0x14008fd90
cmp dword [rsp + 0x68], edx
jl 0x14008fd90
lea rcx, [rsp + 0x1a8]
mov edx, 0x100000
call fcn.1400613f4
mov r9d, dword [rsp + 0x4c]
mov r11d, dword [rsp + 0xf0]
mov r10d, dword [rsp + 0x54]
mov eax, r9d
xor r8d, r8d
imul eax, r11d
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
movsxd rsi, eax
mov eax, esi
imul eax, r10d
cmp r9d, r8d
movsxd rbp, eax
jle 0x140091a84
cmp word [r13], r8w
jne 0x14008f9ac
mov rdx, qword [rsp + 0x1a8]
mov dword [rsp + 0xd0], r8d
lea r8, [rsp + 0xd0]
mov rcx, rbx
call fcn.14005ddac
xor r8d, r8d
cmp rax, r8
je 0x140091a5d
mov rax, qword [rsp + 0x68]
cmp eax, 4
jl 0x14008f99a
cmp byte [rsp + 0x46], r8b
jne 0x14008f99a
cmp eax, dword [rsp + 0xd0]
jge 0x140091a84
mov r9d, dword [rsp + 0x4c]
mov r10d, dword [rsp + 0x54]
mov r11d, dword [rsp + 0xf0]
mov rcx, qword [rsp + 0x80]
mov rax, r8
cmp rcx, r8
jle 0x14008f9f6
mov rdx, qword [rsp + 0x268]
cmp rdx, 0xffffffffffffffff
jne 0x14008fa59
cmp rcx, rbp
jl 0x14008f9e0
mov rdx, rbp
cmp byte [rsp + 0xd9], r8b
je 0x14008f9e3
mov rdx, rsi
call fcn.14005df6c
add rcx, rax
xor r8d, r8d
mov qword [rsp + 0x80], rcx
mov esi, dword [rsp + 0x88]
mov rdx, qword [rsp + 0xc0]
cmp rdx, r8
jle 0x14008fa23
cmp byte [rsp + 0x110], r8b
jne 0x14008fa23
sub rdx, rax
cmovs rdx, r8
mov qword [rsp + 0xc0], rdx
xor eax, eax
cmp rcx, rax
cmovg r8, rcx
cmp rdx, rax
jle 0x14008fb0d
mov rax, qword [rsp + 0x278]
cmp rax, 0xffffffffffffffff
jne 0x14008faaa
lea rax, [r8 + rdx]
cqo
idiv rbp
sub qword [rsp + 0xc0], rdx
jmp 0x14008fb05
cmp byte [rsp + 0xda], r8b
jne 0x14008f9f6
movsxd rsi, dword [rsp + 0x88]
movsxd rcx, r9d
lea rax, [rcx + rdx - 1]
cqo
idiv rcx
mov rcx, rax
imul rcx, rsi
mov rdx, rcx
mov qword [rsp + 0x268], rcx
mov rcx, qword [rsp + 0x80]
call fcn.14005df6c
add rcx, rax
xor r8d, r8d
mov qword [rsp + 0x80], rcx
jmp 0x14008f9fd
xor ebp, ebp
cmp byte [rsp + 0xda], bpl
jne 0x14008fb0d
movsxd rcx, r9d
lea rax, [rcx + rax - 1]
cqo
idiv rcx
imul rax, rcx
mov rcx, qword [rsp + 0xc0]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov r9, rax
mov qword [rsp + 0x278], rax
lea rax, [r8 + rcx]
cqo
idiv r9
sub rcx, rdx
mov qword [rsp + 0xc0], rcx
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0xc0]
mov rax, qword [rsp + 0x168]
mov rbp, qword [rsp + 0x230]
xor r8d, r8d
cmp rax, r8
mov byte [rsp + 0x42], r8b
mov byte [rsp + 0xa4], r8b
mov byte [rsp + 0x60], r8b
jle 0x14008fc7c
mov rax, rdx
mov dword [rsp + 0x1c0], r8d
mov dword [rsp + 0x30], 1
sub rax, rbp
lea r9, [rsp + 0x60]
lea r8, [rsp + 0xa4]
add rax, rcx
movsxd rcx, esi
mov dword [rsp + 0x28], r10d
cqo
mov dword [rsp + 0x20], r11d
idiv rcx
mov rcx, qword [rsp + 0x238]
lea rdx, [rsp + 0x42]
mov qword [rsp + 0x168], rax
xor eax, eax
mov dword [rsp + 0x1c4], eax
mov dword [rsp + 0x1c8], eax
mov dword [rsp + 0x1cc], eax
call fcn.14005df88
xor eax, eax
mov dword [rsp + 0x30], 1
mov byte [rsp + 0x1c0], al
mov al, byte [rsp + 0xa4]
lea r9, [rsp + 0x60]
mov byte [rsp + 0x1c1], al
mov al, byte [rsp + 0x60]
lea r8, [rsp + 0xa4]
mov byte [rsp + 0x1c2], al
mov al, byte [rsp + 0x42]
lea rdx, [rsp + 0x42]
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x238]
mov dword [rsp + 0x28], r10d
lea rcx, [rax + rax - 1]
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x20], eax
call fcn.14005df88
mov rdx, qword [rsp + 0x138]
mov eax, 5
lea r8, [rsp + 0x1c0]
mov r9d, 1
mov byte [rsp + 0x1c4], al
mov al, byte [rsp + 0xa4]
mov rcx, rbx
mov byte [rsp + 0x1c5], al
mov al, byte [rsp + 0x60]
mov byte [rsp + 0x1c6], al
mov al, byte [rsp + 0x42]
mov byte [rsp + 0x1c7], al
mov rax, qword [rsp + 0x238]
mov dword [rsp + 0x1c8], eax
mov rax, qword [rsp + 0x168]
mov dword [rsp + 0x1cc], eax
call fcn.140074cfc
xor r8d, r8d
mov rax, rbp
movsxd rcx, esi
cqo
idiv rcx
mov r10, rax
mov rax, qword [rsp + 0x80]
cmp rax, r8
jl 0x14008fca9
cqo
idiv rcx
mov r11, rax
mov qword [rsp + 0x120], rax
jmp 0x14008fcb4
mov r11, r8
mov qword [rsp + 0x120], r8
mov rax, qword [rsp + 0xc0]
cmp rax, r8
jl 0x14008fcd0
cqo
idiv rcx
mov qword [rsp + 0xd0], rax
jmp 0x14008fcd8
mov qword [rsp + 0xd0], r8
mov rcx, qword [rsp + 0x68]
mov esi, dword [rsp + 0x54]
mov ebp, dword [rsp + 0xf0]
mov eax, r8d
cmp ecx, 4
lea r9, [rsp + 0x48]
setge al
lea r8, [rsp + 0xa2]
lea rdx, [rsp + 0x100]
mov dword [rsp + 0x30], eax
mov rcx, r11
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ebp
call fcn.14005df88
xor eax, eax
cmp qword [rsp + 0x80], rax
jle 0x14008fd2e
sub qword [rsp + 0x120], r10
movsx eax, byte [rsp + 0xd9]
mov rcx, qword [rsp + 0xd0]
lea r9, [rsp + 0xdb]
mov edx, eax
mov byte [rsp + 0x42], al
mov rax, qword [rsp + 0x120]
mov dword [rsp + 0x30], edx
lea eax, [rcx + rax - 1]
lea r8, [rsp + 0xe1]
lea rdx, [rsp + 0x218]
mov ecx, eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ebp
call fcn.14005df88
lea rcx, [rsp + 0x1a8]
call fcn.1400590a4
mov r10, qword [rsp + 0x170]
mov esi, dword [rsp + 0x8c]
shl esi, 4
cmp byte [rsp + 0xb4], 2
movsxd rbp, esi
je 0x140091be5
mov rcx, qword [rsp + 0x1e0]
mov r8, r10
mov rdx, r15
call fcn.14001d128
xor r10d, r10d
cmp qword [rsp + 0x168], r10
jl 0x14008fe10
cmp dword [rsp + 0x8c], r10d
jle 0x14008fde6
lea rcx, [r15 + 0x1be]
mov r8, rbp
xor edx, edx
call fcn.1400f97d0
mov eax, 3
xor edx, edx
sub eax, dword [rsp + 0x8c]
shl eax, 4
movsxd r8, eax
lea eax, [rsi + 0x10]
movsxd rcx, eax
lea rcx, [rcx + r15 + 0x1be]
call fcn.1400f97d0
xor r10d, r10d
mov r8b, byte [rsp + 0x46]
mov al, byte [r15 + rbp + 0x1c2]
mov r9b, byte [rsp + 0x49]
cmp r8b, r10b
jne 0x14008fe3d
cmp r9b, 2
jge 0x14008fe3d
cmp al, 5
je 0x14008f6df
cmp al, 0xf
je 0x14008f6df
mov edx, dword [r15 + rbp + 0x1c6]
mov ecx, dword [r15 + rbp + 0x1ca]
mov r11d, dword [rsp + 0xf4]
mov rsi, qword [rsp + 0x80]
cmp r8b, r10b
jne 0x14008feb4
cmp al, r10b
je 0x14008feb4
cmp r11d, r10d
je 0x14008feb4
cmp r9b, 2
jge 0x14008feb4
cmp byte [rsp + 0xd9], r10b
jne 0x14008feb4
cmp rsi, r10
jl 0x14008fe8f
cmp qword [rsp + 0x120], rdx
jne 0x14008f6df
mov r9, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
cmp r9, r10
jl 0x14008fec4
cmp r8, rcx
je 0x14008fec4
cmp ecx, r10d
jne 0x14008f6df
jmp 0x14008fec4
mov r9, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
xor eax, eax
cmp byte [rsp + 0x178], r10b
je 0x14008fee3
mov ecx, r10d
mov edx, r10d
mov r8, rax
mov qword [rsp + 0xd0], rax
jmp 0x14008feeb
mov r10, qword [rsp + 0x120]
cmp r11d, eax
jl 0x14008fef8
mov byte [r15 + rbp + 0x1c2], r11b
mov eax, dword [rsp + 0x128]
cmp ax, word [rsp + 0x2f8]
jle 0x14008ff3b
cmp dword [rsp + 0x17c], 0
je 0x14008ff33
mov byte [r15 + 0x1ee], 0
mov byte [r15 + 0x1de], 0
mov byte [r15 + 0x1ce], 0
mov byte [r15 + 0x1be], 0
cmp ax, word [rsp + 0x2f8]
jl 0x14008ff45
mov byte [r15 + rbp + 0x1be], al
xor eax, eax
cmp rsi, rax
jge 0x14008ff5e
xor ecx, ecx
cmp r9, rcx
jl 0x14008fff8
lea ecx, [r8 + rdx - 1]
jmp 0x14008ff68
cmp r9, rax
jge 0x14008ffb9
lea ecx, [r10 + rcx - 1]
movsx eax, byte [rsp + 0x42]
lea r9, [rsp + 0xdb]
lea r8, [rsp + 0xe1]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x54]
lea rdx, [rsp + 0x218]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x20], eax
call fcn.14005df88
mov r8, qword [rsp + 0xd0]
mov r9, qword [rsp + 0xc0]
mov r11d, dword [rsp + 0xf4]
xor ecx, ecx
cmp rsi, rcx
jl 0x14008fff3
mov al, byte [rsp + 0xa2]
mov dword [r15 + rbp + 0x1c6], r10d
mov byte [r15 + rbp + 0x1bf], al
mov al, byte [rsp + 0x48]
mov byte [r15 + rbp + 0x1c0], al
movzx eax, word [rsp + 0x100]
mov byte [r15 + rbp + 0x1c1], al
cmp r9, rcx
jge 0x14008fffd
cmp rsi, rcx
jl 0x14009002a
mov al, byte [rsp + 0xe1]
mov byte [r15 + rbp + 0x1c3], al
mov al, byte [rsp + 0xdb]
mov byte [r15 + rbp + 0x1c4], al
mov al, byte [rsp + 0x218]
mov byte [r15 + rbp + 0x1c5], al
cmp r9, rcx
jl 0x140090037
mov dword [r15 + rbp + 0x1ca], r8d
cmp r11d, ecx
mov eax, dword [rsp + 0x128]
jge 0x140090052
cmp ax, cx
jge 0x140090052
cmp rsi, rcx
jge 0x140090052
cmp r9, rcx
jl 0x140090062
mov byte [r15 + 0x1fe], 0x55
mov byte [r15 + 0x1ff], 0xaa
cmp ax, cx
jge 0x140090086
cmp r11d, ecx
jge 0x140090086
cmp rsi, rcx
jge 0x140090086
cmp r9, rcx
jge 0x140090086
mov byte [r15 + 0x1fe], 0x55
mov byte [r15 + 0x1ff], 0xaa
mov rsi, qword [rsp + 0x240]
xor r8d, r8d
mov rcx, rbx
mov rdx, rsi
call fcn.14005a608
cmp rax, rsi
jne 0x140091a6a
xor eax, eax
mov esi, 1
cmp qword [rsp + 0x160], rax
jne 0x1400900be
mov rcx, r15
call fcn.14005e080
mov r9, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x1e0]
mov rdx, r15
mov r8, r9
call fcn.1400590d4
xor edx, edx
cmp eax, edx
je 0x140090111
mov r8d, dword [rsp + 0x50]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0xdc]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.14005dff8
mov r9, qword [rsp + 0x170]
xor edx, edx
mov rax, qword [rsp + 0x80]
mov ecx, dword [r15 + 0x1b8]
mov r8d, 0x200
cmp rax, r8
mov dword [rsp + 0x4c], ecx
jl 0x14009025b
cmp qword [rsp + 0xc0], r8
jle 0x14009025b
cmp byte [rsp + 0x113], dl
jle 0x14009025b
mov r8, r9
xor edx, edx
mov rcx, r15
call fcn.1400f97d0
mov rbp, qword [rsp + 0x80]
mov r15, qword [rsp + 0x158]
shl rbp, 9
xor r8d, r8d
mov rcx, rbx
add r15, rbp
mov rdx, r15
call fcn.14005a608
cmp rax, rbp
je 0x1400901a2
xor eax, eax
mov esi, eax
mov ecx, dword [rsp + 0x4c]
mov r10, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x80]
jmp 0x14009025e
mov r8d, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x1e0]
xor eax, eax
lea r9, [rsp + 0xdc]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
mov esi, eax
cmp eax, ecx
je 0x140090246
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 0xdc], eax
jne 0x140090246
mov r10, qword [rsp + 0x1d8]
mov r9, qword [rsp + 0x1e0]
mov r8, qword [rsp + 0x170]
mov rdx, r10
mov rcx, r9
call fcn.1400590d4
xor ecx, ecx
cmp eax, ecx
je 0x14009024d
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14005a608
cmp rax, rbp
jne 0x140090185
mov r8d, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x1d8]
xor eax, eax
lea r9, [rsp + 0xdc]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140090187
mov esi, ecx
jmp 0x140090189
mov ecx, dword [rsp + 0x4c]
mov rax, qword [rsp + 0x80]
jmp 0x140090266
mov r10, r15
mov r9, qword [rsp + 0x1e0]
xor r15d, r15d
cmp esi, r15d
mov rbp, r15
sete bpl
xor esi, esi
mov qword [rsp + 0x208], rbp
cmp byte [rsp + 0x70], sil
je 0x140090496
shl rax, 9
lea r15, [r9 + 0x1b8]
mov r8d, ecx
mov qword [rsp + 0x240], rax
mov r9d, dword [rsp + 0x244]
mov dword [r15], ecx
lea rdx, str._04X_04X_04X
mov rcx, r10
mov qword [r15 + 4], rax
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfW]
mov r8, qword [rsp + 0x1d8]
lea r9d, [rsi + 3]
lea rdx, str.SYSTEMMountedDevices
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x28], 0xc
mov qword [rsp + 0x20], r15
call qword [0x1401333c0]
mov dl, byte [rsp + 0x41]
cmp byte [rsp + 0x40], sil
jne 0x140090309
cmp byte [rsp + 0x43], sil
jne 0x140090309
cmp dl, sil
je 0x140091b4b
mov rax, qword [rsp + 0x150]
cmp rax, rsi
jl 0x14009049a
mov rcx, qword [rsp + 0x190]
mov r8d, dword [rsp + 0x78]
lea r9, [rsp + 0x4b8]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x208]
mov edx, eax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x108]
call fcn.14007514c
xor r12d, r12d
movsxd rbp, eax
mov rax, qword [rsp + 0x68]
cmp eax, r12d
jl 0x140091a96
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x150]
mov byte [rsp + 0x30], r12b
mov word [rcx], r12w
lea ecx, [rax + 1]
mov r9d, 0x202
movsxd r8, ecx
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.14008aeec
cmp eax, r12d
mov rbx, rax
jle 0x140091a96
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, dword [rsp + 0x21c]
movsxd rbx, ebx
cmp r14d, r12d
lea rcx, [rsp + 0x98]
mov r13d, eax
cmovg r14d, r12d
movsxd r12, dword [rsp + 0xac]
bts rbx, 0x14
mov rdx, r12
xor r9d, r9d
mov r8, rbx
call fcn.1400069d0
mov rsi, rax
xor eax, eax
cmp rsi, rax
jne 0x140090437
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r13d
cmp eax, 0x1388
ja 0x140090424
lea rcx, [rsp + 0x98]
xor r9d, r9d
mov r8, rbx
mov rdx, r12
call fcn.1400069d0
mov rsi, rax
cmp rax, rdi
je 0x1400903f6
xor r12d, r12d
lea rdi, [0x140134078]
cmp rsi, r12
je 0x140091a9e
mov r12, qword [rsp + 0x1d8]
mov r11d, 0x23
mov rdx, rsi
lea rcx, [r12 + 0x7a]
mov word [r12 + 0x78], r11w
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, 0x3f
lea r8, [r12 + 0x78]
lea rdx, str.SYSTEMMountedDevices
lea r9d, [rax - 0x3c]
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x28], 0xc
mov word [r12 + 0x7c], ax
mov qword [rsp + 0x20], r15
call qword [0x1401333c0]
xor r12d, r12d
jmp 0x140091a9e
mov dl, byte [rsp + 0x41]
mov r15b, byte [rsp + 0x43]
cmp byte [rsp + 0x40], sil
jne 0x1400904b4
cmp r15b, sil
jne 0x1400904b4
cmp dl, sil
je 0x140091b4b
lea rcx, [rsp + 0xf8]
mov ebp, esi
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
jmp 0x14008ee91
mov edx, dword [rsp + 0x1b4]
mov r10d, dword [rsp + 0xb0]
xor r15d, r15d
cmp byte [rsp + 0x178], r15b
movzx edx, dl
cmovne edx, r15d
mov dword [rsp + 0x1b4], edx
cmp r8b, r15b
je 0x140090508
cmp r10b, r15b
jne 0x140090508
mov r15d, dword [rcx + 0x28]
jmp 0x14009050e
mov r15d, 0x80
movsxd rcx, eax
mov rax, qword [rsp + 0x80]
mov dword [rsp + 0x8c], r15d
cqo
idiv rcx
mov r8, rax
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x2a8]
cqo
idiv rcx
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xc0]
cqo
idiv rcx
xor edx, edx
mov rcx, rax
mov qword [rsp + 0xc0], rax
dec rax
mov qword [rsp + 0x168], rax
cmp byte [rsp + 0x11c], dl
je 0x140090581
lea rax, [rcx + r8 - 1]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x120], rdx
cmp r10b, r9b
jne 0x1400905d6
test byte [rsp + 0xe0], 0x10
je 0x1400905ae
mov rax, qword [rsp + 0x2a8]
mov rsi, rax
dec rax
mov qword [rsp + 0x168], rax
cmp r8, r9
mov qword [rsp + 0x120], rax
cmovl r8, r9
cmp rax, r9
mov qword [rsp + 0x80], r8
jge 0x1400905d6
lea rax, [rsi - 1]
mov qword [rsp + 0x120], rax
mov al, r10b
mov r9d, r11d
mov rdx, rbp
neg al
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x30], rax
sbb rcx, rcx
lea rax, [rsp + 0x120]
and rcx, r8
mov qword [rsp + 0x28], rax
mov r8d, r15d
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x108]
call fcn.140067738
xor esi, esi
mov r9, rax
mov qword [rsp + 0x138], rax
lea r10d, [rsi + 1]
cmp byte [rsp + 0x42], sil
jne 0x14009063d
cmp rax, rsi
cmove r9, r10
mov qword [rsp + 0x138], r9
mov eax, 0x20
cmp qword [rsp + 0x120], rax
jl 0x140092324
cmp byte [rsp + 0xb4], 2
je 0x14009209a
mov r11, qword [rsp + 0x68]
mov dword [rsp + 0xd0], r10d
cmp r11d, r15d
jae 0x1400906a2
cmp dword [rsp + 0x118], r15d
jge 0x1400906a2
cmp r11d, esi
jl 0x1400906a9
movsxd rcx, r11d
lea r8d, [rax - 0x10]
lea rdx, [0x14011afc0]
shl rcx, 7
add rcx, qword [rsp + 0x200]
call fcn.1400590d4
cmp eax, esi
jne 0x1400906a9
mov dword [rsp + 0xd0], esi
mov ecx, dword [rsp + 0x50]
xor edx, edx
lea eax, [rcx + 0x3fff]
div ecx
mov edx, dword [rsp + 0xb0]
mov dword [rsp + 0x100], eax
cmp dl, r10b
jne 0x140090a00
cmp r11d, r15d
jae 0x140092324
mov edx, dword [rsp + 0x8c]
mov al, byte [rsp + 0xa1]
mov rsi, qword [rsp + 0x200]
lea ecx, [r9 + 1]
mov r9d, dword [rsp + 0x50]
mov r8d, 0x4800
shl edx, 7
mov r15, rsi
imul ecx, r9d
sub r8d, ecx
mov dword [rsp + 0x4c], edx
mov dword [rsp + 0x88], r8d
xor r8d, r8d
cmp al, r8b
jg 0x140090af1
jge 0x140090739
lea ecx, [r9 + r9 + 0x4000]
cmp qword [rsp + 0x158], rcx
jg 0x140090af1
cmp edx, r8d
mov byte [rsp + 0x48], r8b
mov esi, r8d
jle 0x1400907c1
mov edi, dword [rsp + 0x88]
mov r12d, 0x80
lea r14d, [r12 - 0x70]
lea r13d, [r12 - 0x40]
xor edx, edx
cmp esi, edi
mov rcx, r15
jl 0x140090776
mov r8, r14
call fcn.1400f97d0
add esi, r12d
add r15, r12
jmp 0x14009079c
mov r8d, 0x1b0
call fcn.1400f97d0
lea rcx, [r15 + 0x1be]
mov r8, r13
xor edx, edx
call fcn.1400f97d0
mov eax, 0x200
add esi, eax
add r15, rax
cmp esi, dword [rsp + 0x4c]
jl 0x14009075d
mov r12, qword [rsp + 0x258]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b8]
lea rdi, [0x140134078]
mov r15, qword [rsp + 0x140]
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x38]
call fcn.1400f97d0
xor edx, edx
lea rcx, [r15 + 0x48]
lea r8d, [rdx + 0x14]
call fcn.1400f97d0
xor edx, edx
lea rcx, [rbp + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400f97d0
xor eax, eax
mov ecx, 0xaa55
mov word [rbp + 0x1fe], cx
cmp byte [rsp + 0x48], al
jne 0x14009081b
cmp dword [rsp + 0x50], 0x200
jbe 0x14009081b
mov word [r15 - 2], cx
lea rdx, str.EFI_PART
mov r8d, 8
mov rcx, r15
call fcn.14001d128
movsxd rcx, dword [rsp + 0x100]
mov rdx, qword [rsp + 0x120]
mov rax, qword [rsp + 0x80]
mov dword [r15 + 8], 0x10000
mov dword [r15 + 0xc], 0x5c
mov qword [r15 + 0x18], rax
lea rax, [rcx + rax + 1]
mov qword [r15 + 0x20], rdx
mov qword [r15 + 0x28], rax
mov rax, rdx
sub rax, rcx
mov rcx, rbp
dec rax
mov qword [r15 + 0x30], rax
call fcn.14005e080
lea rcx, [r15 + 0x38]
movabs rax, 0x202020323354
cmp qword [rcx], rax
je 0x1400908bc
movabs rax, 0x202020363154
cmp qword [rcx], rax
je 0x1400908bc
xor eax, eax
cmp qword [rcx], rax
je 0x1400908bc
or rdx, 0xffffffffffffffff
cmp qword [rcx], rdx
je 0x1400908bc
cmp qword [r15 + 0x40], rax
je 0x1400908bc
cmp qword [r15 + 0x40], rdx
jne 0x1400908d9
lea rdx, [0x14011e938]
mov r8d, 0xc
call fcn.14001d128
mov r11d, dword [rbp + 0x1b8]
mov dword [r15 + 0x44], r11d
lea rcx, [r15 - 0x174]
call fcn.14005e080
mov r11, qword [rsp + 0x80]
mov eax, 0x80
lea ecx, [rax - 0x7f]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x54], eax
lea rax, [rcx - 2]
inc r11
mov dword [rsp + 0x30], ecx
mov qword [r15 + 0x48], r11
mov r15, qword [rsp + 0x168]
cmp r15, rcx
mov rcx, qword [rsp + 0x80]
cmovl r15, rax
mov rax, qword [rsp + 0x68]
mov r10d, eax
movsxd rsi, eax
mov qword [rsp + 0x168], r15
shl r10d, 4
add rsi, rsi
lea eax, [r10 + 0x1bf]
mov dword [rbp + rsi*8 + 0x1c2], 0xee
movsxd r8, eax
mov eax, dword [rsp + 0x54]
add r8, rbp
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xf0]
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.14005df88
lea r9d, [r10 + 0x1c3]
mov r10d, 1
movsxd r8, r9d
add r8, rbp
cmp byte [rsp + 0x44], 2
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov byte [r8], 0xfe
mov byte [r9], 0xff
mov byte [rdx], 0xfe
jne 0x1400909c2
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x30], r10d
mov rcx, r15
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x20], eax
call fcn.14005df88
mov rax, qword [rsp + 0x80]
mov edx, dword [rsp + 0xb0]
mov dword [rbp + rsi*8 + 0x1c6], eax
or dword [rbp + rsi*8 + 0x1ca], 0xffffffff
cmp byte [rsp + 0x44], 2
jne 0x140090e27
mov r11, qword [rsp + 0x68]
mov dword [rbp + rsi*8 + 0x1ca], r15d
mov r15d, dword [rsp + 0x8c]
xor r9d, r9d
cmp dl, r9b
jg 0x140090e2a
cmp byte [rsp + 0xc8], r9b
jle 0x140090a1f
cmp r11d, r9d
jl 0x140090e2a
mov rsi, qword [rsp + 0x200]
cmp byte [rsp + 0x46], r9b
je 0x140090a7f
or rcx, 0xffffffffffffffff
xor r11d, r11d
mov al, r9b
mov dword [rsp + 0x1b4], eax
mov dword [rsp + 0x68], ecx
cmp r15d, r11d
jbe 0x140090a86
mov ecx, r9d
lea rdx, [0x14011afc0]
mov r8d, 0x10
shl rcx, 7
add rcx, rsi
call fcn.1400590d4
cmp eax, r11d
je 0x140090b45
add r9d, r10d
cmp r9d, r15d
jb 0x140090a48
mov edx, dword [rsp + 0xb0]
xor r9d, r9d
mov eax, dword [rsp + 0x1b4]
mov ecx, dword [rsp + 0x118]
mov r10, qword [rsp + 0x68]
mov r11d, 1
sub ecx, r11d
mov dword [rsp + 0x118], ecx
cmp r10d, r15d
jae 0x14008f6df
cmp ecx, r15d
jge 0x14008f6df
cmp al, r9b
je 0x140090ca7
mov ecx, r9d
cmp byte [rsp + 0x42], r9b
je 0x140090b97
mov rdx, qword [rsp + 0x80]
lea rax, [rsi + 0x20]
lea r8d, [r11 + 0x7f]
cmp ecx, r15d
jae 0x140090b97
cmp qword [rax], rdx
je 0x140090b66
add ecx, r11d
add rax, r8
jmp 0x140090adb
mov byte [rsp + 0x48], r10b
cmp r9d, 0x200
jbe 0x140090b19
lea r8d, [r9 - 0x200]
lea rcx, [rbp + 0x200]
xor edx, edx
call fcn.1400f97d0
mov r9d, dword [rsp + 0x50]
mov r15, qword [rsp + 0x140]
lea r8d, [r9 - 0x5c]
xor edx, edx
lea rcx, [r15 + 0x5c]
call fcn.1400f97d0
xor edx, edx
mov r8d, 0x4000
mov rcx, rsi
call fcn.1400f97d0
jmp 0x1400907c9
mov ecx, r9d
xor edx, edx
mov r8d, 0x80
shl rcx, 7
mov dword [rsp + 0x68], r9d
add rcx, rsi
call fcn.1400f97d0
jmp 0x140090a75
movdqu xmm0, xmmword [0x14011afc0]
mov r9d, ecx
shl r9, 7
add r9, rsi
movdqu xmmword [r9], xmm0
cmp ecx, r10d
je 0x140090b97
xor edx, edx
mov rcx, r9
call fcn.1400f97d0
mov r10, qword [rsp + 0x68]
mov r11d, 1
movsxd r9, r10d
lea rdx, [0x14011afc0]
mov r8d, 0x10
shl r9, 7
add r9, rsi
mov rcx, r9
mov qword [rsp + 0x240], r9
call fcn.1400590d4
xor ecx, ecx
cmp eax, ecx
je 0x140090c78
lea r15d, [r10 + 1]
mov r10d, dword [rsp + 0x8c]
cmp r15d, r10d
jae 0x14008f6df
mov ecx, r15d
lea rdx, [0x14011afc0]
mov r8d, 0x10
shl rcx, 7
add rcx, rsi
call fcn.1400590d4
xor ecx, ecx
cmp eax, ecx
je 0x140090c09
add r15d, r11d
cmp r15d, r10d
jb 0x140090bdd
jmp 0x140090c6f
mov rdx, qword [rsp + 0x68]
movsxd rcx, r15d
cmp r15d, edx
jle 0x140090c6f
shl rcx, 7
mov edi, r15d
mov r13d, 0x80
add rcx, rsi
sub edi, edx
lea rsi, [rcx - 0x80]
mov r8, r13
mov rdx, rsi
call fcn.1400fa420
sub rdi, 1
mov rcx, rsi
jne 0x140090c28
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b8]
mov r9, qword [rsp + 0x240]
mov r10d, dword [rsp + 0x8c]
mov rsi, qword [rsp + 0x200]
lea rdi, [0x140134078]
cmp r15d, r10d
jae 0x14008f6df
xor edx, edx
mov r8d, 0x80
mov rcx, r9
call fcn.1400f97d0
mov r10, qword [rsp + 0x68]
mov edx, dword [rsp + 0xb0]
mov ecx, dword [rsp + 0x118]
xor r9d, r9d
lea r11d, [r9 + 1]
mov eax, r9d
jmp 0x140090cae
mov eax, dword [rsp + 0xd0]
cmp dl, r11b
je 0x140090df2
cmp ecx, r9d
jge 0x1400914f5
cmp eax, r9d
jne 0x140090d05
mov ecx, r11d
mov r15d, r11d
mov eax, r11d
mov r8d, r11d
mov dword [rsp + 0x280], r11d
mov r9d, r11d
mov dword [rsp + 0x290], ecx
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x2d8], rax
mov dword [rsp + 0x270], r11d
mov dword [rsp + 0x1ec], r11d
jmp 0x140090d34
mov rax, qword [rsp + 0x2d8]
mov ecx, dword [rsp + 0x290]
mov r8d, dword [rsp + 0x280]
mov r9d, dword [rsp + 0x270]
mov r11d, dword [rsp + 0x1ec]
mov r15, qword [rsp + 0x198]
test eax, eax
jle 0x140090d44
movsxd rax, r10d
shl rax, 7
movdqu xmmword [rax + rsi], xmm6
xor eax, eax
cmp r15d, eax
jle 0x140090d58
movsxd rax, r10d
shl rax, 7
movdqu xmmword [rax + rsi + 0x10], xmm7
xor r15d, r15d
cmp ecx, r15d
jle 0x140090d74
mov rcx, qword [rsp + 0x80]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x20], rcx
cmp r8d, r15d
jle 0x140090d8d
mov rcx, qword [rsp + 0x168]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x28], rcx
cmp r9d, r15d
jle 0x140090da6
mov rcx, qword [rsp + 0x1f8]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x30], rcx
xor r9d, r9d
cmp r11d, r9d
jle 0x140090df2
mov r15, qword [rsp + 0x2b8]
cmp word [r15], r9w
je 0x140090df2
movsxd rax, r10d
lea r8d, [r9 + 0x48]
xor edx, edx
shl rax, 7
lea rsi, [rax + rsi + 0x38]
mov rcx, rsi
call fcn.1400f97d0
mov r8d, 0x24
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
mov edx, dword [rsp + 0xb0]
xor r9d, r9d
mov rax, qword [rsp + 0x68]
mov r15d, 0x80
cmp byte [rsp + 0x178], r9b
je 0x140090e2a
movsxd rcx, eax
mov r8, r15
xor edx, edx
shl rcx, 7
add rcx, qword [rsp + 0x200]
call fcn.1400f97d0
mov edx, dword [rsp + 0xb0]
xor r9d, r9d
mov al, byte [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r15d, r9d
and al, 0x20
mov dword [rsp + 0x88], r9d
mov dword [rsp + 0xf0], ecx
mov byte [rsp + 0xa2], al
mov eax, 0xfffffff8
cmovne eax, ecx
mov dword [rsp + 0x218], eax
mov eax, 1
cmp byte [rsp + 0xc8], al
jne 0x140091012
cmp dl, al
je 0x140091012
mov eax, dword [rsp + 0x8c]
mov esi, r9d
mov dword [rsp + 0x54], r9d
dec eax
cmp eax, r9d
jl 0x140091012
mov rbx, qword [rsp + 0x200]
mov r13d, dword [rsp + 0x218]
mov r14d, r9d
mov r12d, eax
mov ebp, 1
mov rdi, rbx
mov r10d, 0x10
lea rdx, [0x14011afc0]
mov rcx, rdi
mov r8, r10
call fcn.1400590d4
cmp eax, r9d
sete al
mov byte [rsp + 0x48], al
cmp al, r9b
jne 0x140090ee3
mov dword [rsp + 0xd0], r9d
cmp esi, r14d
je 0x140090eea
mov dword [rsp + 0xd0], ebp
mov dword [rsp + 0x4c], r9d
cmp esi, r13d
jne 0x140090f04
mov dword [rsp + 0x4c], 2
mov dword [rsp + 0xf0], r14d
cmp al, r9b
jne 0x140090f9a
cmp esi, r14d
je 0x140090f97
movsxd rsi, r14d
mov r15d, 0x38
mov rdx, rdi
shl rsi, 7
mov r8, r15
add rsi, rbx
mov rcx, rsi
call fcn.1400fe0e0
xor ecx, ecx
cmp eax, ecx
je 0x140090f4c
mov r8, r15
mov rdx, rdi
mov rcx, rsi
mov dword [rsp + 0x4c], ebp
call fcn.1400fa420
lea rdx, [rdi + 0x38]
lea rcx, [rsi + 0x38]
mov r8d, 0x24
call qword [sym.imp.SHLWAPI.dll_StrCmpNW]
xor r9d, r9d
cmp eax, r9d
je 0x140090f81
lea r8d, [r9 + 0x24]
lea rdx, [rdi + 0x38]
lea rcx, [rsi + 0x38]
mov dword [rsp + 0x4c], ebp
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
xor r9d, r9d
mov r15d, dword [rsp + 0x88]
mov al, byte [rsp + 0x48]
mov esi, dword [rsp + 0x54]
mov r10d, 0x10
add r14d, ebp
cmp dword [rsp + 0xd0], r9d
je 0x140090fbd
cmp al, r9b
jne 0x140090fbd
mov r8, r10
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x4c], ebp
call fcn.1400f97d0
xor r9d, r9d
cmp dword [rsp + 0x4c], r9d
je 0x140090fd0
lea r15d, [rsi + 1]
mov dword [rsp + 0x88], r15d
add esi, ebp
sub rdi, 0xffffffffffffff80
cmp esi, r12d
mov dword [rsp + 0x54], esi
jle 0x140090eaf
mov rbx, qword [rsp + 0x108]
mov rbp, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x258]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b8]
lea rdi, [0x140134078]
mov rsi, qword [rsp + 0x140]
lea rdx, str.EFI_PART
mov r8d, 8
mov rcx, rsi
call fcn.14001d128
mov rcx, rbp
call fcn.14005e080
xor eax, eax
cmp qword [rsi + 0x38], rax
je 0x140091049
or rax, 0xffffffffffffffff
cmp qword [rsi + 0x38], rax
jne 0x140091055
lea rcx, [rsi - 0x174]
call fcn.14005e080
mov rax, qword [rsp + 0x68]
cmp r15d, eax
jg 0x140091063
lea r15d, [rax + 1]
mov eax, dword [rsp + 0x8c]
cmp byte [rsp + 0xb0], 1
mov rcx, qword [rsp + 0x200]
cmove r15d, eax
shl eax, 7
xor r8d, r8d
mov edx, eax
call fcn.1400dd1d0
mov dword [rsi + 0x58], eax
mov eax, dword [rsi + 0xc]
mov dword [rsp + 0x88], eax
cmp eax, 0x20000
ja 0x14008f6df
xor ecx, ecx
xor r8d, r8d
mov rdx, rax
mov dword [rsi + 0x10], ecx
mov rcx, qword [rsp + 0x140]
mov rsi, rax
call fcn.1400dd1d0
mov rcx, qword [rsp + 0x140]
mov r8, rsi
mov dword [rcx + 0x10], eax
mov rdx, rcx
mov rcx, qword [rsp + 0x1a0]
call fcn.14001d128
mov rcx, qword [rsp + 0x1a0]
mov rax, qword [rsp + 0x140]
mov r11, qword [rax + 0x20]
xor r8d, r8d
mov rdx, rsi
mov qword [rcx + 0x18], r11
mov rax, qword [rax + 0x18]
mov qword [rcx + 0x20], rax
xor eax, eax
mov dword [rcx + 0x10], eax
call fcn.1400dd1d0
mov edx, dword [rsp + 0x100]
mov rcx, qword [rsp + 0x1a0]
inc edx
mov dword [rcx + 0x10], eax
lea rcx, [rsp + 0x130]
imul edx, dword [rsp + 0x50]
call fcn.1400613f4
mov ecx, dword [rsp + 0x50]
mov rsi, qword [rsp + 0x130]
shl r15d, 7
xor edx, edx
xor r8d, r8d
lea eax, [r15 + rcx - 1]
div ecx
mov rdx, qword [rsp + 0x158]
mov r15d, eax
imul r15d, ecx
mov rcx, rbx
call fcn.14005a608
mov r8d, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0x344]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8, qword [rsp + 0x170]
mov rdx, rbp
mov rcx, rsi
call fcn.1400fe0e0
xor ecx, ecx
cmp eax, ecx
je 0x1400911d1
mov rdx, qword [rsp + 0x158]
xor r8d, r8d
mov rcx, rbx
call fcn.14005a608
mov r8d, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0x348]
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
mov eax, r15d
mov r15, qword [rsp + 0x140]
div dword [rsp + 0x50]
xor r8d, r8d
mov rcx, rbx
lea ebp, [rax + 1]
mov rax, qword [rsp + 0x138]
mov rdx, rax
mov dword [rsp + 0xd0], ebp
mov qword [rsp + 0x240], rax
imul rdx, qword [rsp + 0x170]
add rdx, qword [rsp + 0x158]
call fcn.14005a608
mov r8d, ebp
xor eax, eax
lea r9, [rsp + 0x34c]
mov rdx, rsi
mov rcx, rbx
imul r8d, dword [rsp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
cmp dword [rsp + 0xd0], eax
mov ebp, eax
jle 0x14009138a
mov edi, dword [rsp + 0xd0]
mov r12, qword [rsp + 0x240]
mov r13d, dword [rsp + 0x100]
cmp eax, edi
mov r14, rsi
lea esi, [rax + 1]
jge 0x1400912ae
mov rbx, qword [rsp + 0x170]
xor r13d, r13d
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.1400fe0e0
cmp eax, r13d
jne 0x14009129e
add ebp, esi
add r12, rsi
add r15, rbx
add r14, rbx
cmp ebp, edi
jl 0x14009127c
mov rbx, qword [rsp + 0x108]
mov r13d, dword [rsp + 0x100]
cmp ebp, r13d
jge 0x140091363
cmp ebp, edi
mov rax, r12
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x240], rax
jge 0x140091313
mov rbx, qword [rsp + 0x170]
xor r13d, r13d
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.1400fe0e0
cmp eax, r13d
je 0x1400912fb
add ebp, esi
add r12, rsi
add r15, rbx
add r14, rbx
cmp ebp, edi
jl 0x1400912d9
mov rbx, qword [rsp + 0x108]
mov rax, qword [rsp + 0x240]
mov r13d, dword [rsp + 0x100]
imul rax, qword [rsp + 0x170]
xor r8d, r8d
mov rcx, rbx
add rax, qword [rsp + 0x158]
mov rdx, rax
call fcn.14005a608
mov rax, qword [rsp + 0x160]
xor ecx, ecx
mov r8d, r15d
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x340]
mov rdx, rax
mov rcx, rbx
sub r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp ebp, edi
jl 0x140091271
mov rsi, qword [rsp + 0x130]
mov r12, qword [rsp + 0x258]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b8]
lea rdi, [0x140134078]
movsxd rbp, dword [rsp + 0x100]
mov rcx, qword [rsp + 0x120]
mov r15, qword [rsp + 0x200]
sub rcx, rbp
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x238], rcx
mov qword [rsp + 0x160], rcx
mov rcx, rbx
imul rdx, qword [rsp + 0x170]
add rdx, qword [rsp + 0x158]
call fcn.14005a608
mov r8d, ebp
xor eax, eax
lea r9, [rsp + 0x2c8]
mov rdx, rsi
mov rcx, rbx
imul r8d, dword [rsp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [rsp + 0x100]
xor ecx, ecx
cmp eax, ecx
mov ebp, ecx
jle 0x1400915a0
mov r14, qword [rsp + 0x160]
mov rdi, rsi
mov rsi, qword [rsp + 0x170]
lea r12d, [rcx + 1]
cmp ebp, eax
jge 0x140091579
mov r13d, dword [rsp + 0x100]
xor ebx, ebx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.1400fe0e0
cmp eax, ebx
jne 0x140091457
add ebp, r12d
add r14, r12
add r15, rsi
add rdi, rsi
cmp ebp, r13d
jl 0x140091434
cmp ebp, r13d
mov rbx, qword [rsp + 0x108]
jge 0x140091579
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x240], r14
xor ebx, ebx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.1400fe0e0
cmp eax, ebx
je 0x14009149d
add ebp, r12d
add r14, r12
add r15, rsi
add rdi, rsi
cmp ebp, r13d
jl 0x14009147a
mov rdx, qword [rsp + 0x240]
mov rbx, qword [rsp + 0x108]
xor r8d, r8d
mov rcx, rbx
imul rdx, rsi
add rdx, qword [rsp + 0x158]
call fcn.14005a608
mov rax, qword [rsp + 0x160]
xor ecx, ecx
mov r8d, r15d
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x2e0]
mov rdx, rax
mov rcx, rbx
sub r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, r13d
jmp 0x140091422
cmp ecx, r10d
je 0x140090df2
movsxd r15, r10d
lea rcx, [rsp + 0x3c0]
mov r8d, 0x80
shl r15, 7
add r15, rsi
mov rdx, r15
call fcn.1400fa420
movsxd r11, dword [rsp + 0x118]
mov rcx, r15
shl r11, 7
mov r15d, 0x80
add rsi, r11
mov r8, r15
mov rdx, rsi
call fcn.1400fa420
lea rdx, [rsp + 0x3c0]
mov rcx, rsi
mov r8, r15
call fcn.1400fa420
mov rax, qword [rsp + 0x68]
mov ecx, dword [rsp + 0x118]
mov edx, dword [rsp + 0xb0]
cmp eax, ecx
cmovl eax, ecx
xor r9d, r9d
mov qword [rsp + 0x68], rax
jmp 0x140090dfd
mov rsi, qword [rsp + 0x130]
mov r12, qword [rsp + 0x258]
mov r13, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1b8]
lea rdi, [0x140134078]
mov rcx, qword [rsp + 0x158]
mov r15, qword [rsp + 0x120]
xor r8d, r8d
mov rbp, r15
imul rbp, qword [rsp + 0x170]
add rbp, rcx
mov rcx, rbx
mov rdx, rbp
call fcn.14005a608
mov r8d, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0x2e8]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8, qword [rsp + 0x170]
mov rdx, qword [rsp + 0x1a0]
mov rcx, rsi
call fcn.1400fe0e0
xor ecx, ecx
cmp eax, ecx
je 0x140091642
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.14005a608
mov esi, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x1a0]
xor ebp, ebp
lea r9, [rsp + 0x2e4]
mov r8d, esi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140091648
mov esi, dword [rsp + 0x50]
xor ebp, ebp
movsx eax, byte [rsp + 0x40]
movsx edx, byte [rsp + 0x41]
movsx ecx, byte [rsp + 0x43]
or ecx, eax
mov eax, edx
or ecx, edx
cmp byte [rsp + 0xa2], bpl
je 0x140091680
cmp ecx, ebp
je 0x140092064
mov r10, qword [rsp + 0x150]
cmp r10, rbp
jge 0x140091db4
cmp ecx, ebp
je 0x140092064
lea rcx, [rsp + 0x130]
call fcn.1400590a4
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
mov edx, dword [rsp + 0x78]
mov r9b, byte [rsp + 0x45]
mov r15b, byte [rsp + 0x43]
jmp 0x14008e48e
mov r15b, byte [rsp + 0x43]
jmp 0x14008e4a1
mov r8d, dword [rsp + 0xa8]
test bl, r10b
jne 0x14008e4ff
xor ebx, ebx
cmp r10b, bl
je 0x1400916f8
cmp r8d, 0xb
je 0x14008e501
test r15b, 0x20
jne 0x14008e501
cmp r15b, bl
je 0x140091711
cmp r8d, 0xb
je 0x14008e501
mov ebx, dword [rsp + 0xa8]
xor r8d, r8d
cmp byte [rsp + 0x1e8], r8b
jg 0x140091751
cmp r11b, r8b
mov r8d, 0x20
jne 0x140091742
cmp r9b, sil
je 0x140091742
cmp r9b, r8b
je 0x140091742
xor r11d, r11d
cmp r10b, r11b
je 0x140091751
or al, 2
cmp r9b, sil
je 0x14009174e
cmp r9b, r8b
jne 0x140091751
or edx, 4
xor esi, esi
test r15b, 0x20
jne 0x14009176e
cmp r15b, sil
je 0x140091763
cmp ebx, 0xb
je 0x14009176e
test r9b, 0x10
je 0x140091770
cmp ebx, 0xc
je 0x140091770
or al, 8
mov r15, qword [rsp + 0x190]
movsx eax, al
lea r9, [rsp + 0x4b8]
or edx, eax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x78], edx
mov r8d, edx
mov edx, ecx
lea rcx, [rsp + 0x108]
mov qword [rsp + 0x20], rax
call fcn.14007514c
cmp eax, esi
jge 0x14009202a
mov rsi, qword [rsp + 0x108]
mov r10, qword [rsp + 0x150]
mov edx, dword [rsp + 0x78]
mov r9b, byte [rsp + 0x45]
mov r8b, byte [rsp + 0x44]
mov r11b, byte [rsp + 0x71]
jmp 0x14008e59c
cmp r10, rbx
jl 0x140091835
mov rax, qword [rsp + 0x68]
cmp byte [rsp + 0xa5], bl
je 0x1400917f4
cmp eax, ebx
jl 0x140091835
movsx r9d, byte [rsp + 0x72]
mov cl, byte [rsp + 0xa0]
movsxd r8, eax
or r9d, dword [rsp + 0xb8]
mov byte [rsp + 0x30], cl
lea rcx, [rsp + 0x98]
mov rdx, r10
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.14008aeec
xor r13d, r13d
cmp rax, r13
setle bl
jmp 0x14009183f
xor r13d, r13d
mov rbx, 0xffffffff80070057
mov eax, dword [rsp + 0x74]
mov r12, qword [rsp + 0x4a0]
cmp eax, r13d
jle 0x14009286c
and eax, 0x9fffffff
bts eax, 0x1c
jmp 0x140092854
cmp dword [rsp + 0xac], ebx
jge 0x1400918e2
cmp word [r12], bx
je 0x1400918e2
mov edx, 0x3a
mov qword [rsp + 0x150], r12
cmp dx, word [r12 + 2]
jne 0x1400918e2
cmp word [r12 + 4], bx
jne 0x1400918e2
lea eax, [rdx + 0x22]
lea ecx, [rdx - 0xc]
mov word [rsp + 0x350], ax
mov word [rsp + 0x352], ax
mov word [rsp + 0x356], ax
mov word [rsp + 0x354], cx
movzx eax, word [r12]
mov word [rsp + 0x35a], dx
mov word [rsp + 0x358], ax
lea rax, [rsp + 0x350]
mov word [rsp + 0x35c], bx
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x150]
cmp rax, rbx
jl 0x140092807
cmp byte [rsp + 0xa5], bl
je 0x140091906
cmp dword [rsp + 0x68], ebx
jl 0x140092807
mov r12, qword [rsp + 0x4a0]
mov r9d, dword [rsp + 0x148]
lea rdx, [rsp + 0x98]
mov rcx, r12
mov r8, rax
call fcn.140074960
xor r13d, r13d
movsxd rbx, eax
jmp 0x140092850
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
xor ebx, ebx
jmp 0x140093012
lea rcx, [rsp + 0x188]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140091988
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x14008e549
jmp 0x14008e540
lea rcx, [rsp + 0x188]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400919cc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x140093494
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140091a0c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x1400933fd
movsx r15d, r11b
lea rcx, [rsp + 0xf8]
and r15d, 0x10
shr r15d, 4
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
jmp 0x14009343d
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
jmp 0x14008f4da
lea rcx, [rsp + 0x1a8]
call fcn.1400590a4
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
jmp 0x14009199e
lea rcx, [rsp + 0x1a8]
call fcn.1400590a4
jmp 0x14008f6df
mov r14d, dword [rsp + 0x21c]
cmp r14d, r12d
jge 0x140091aab
cmp rsi, r12
je 0x140091ae7
cmp r14d, r12d
jle 0x140091acb
cmp rsi, r12
jne 0x140091acb
mov rcx, qword [rsp + 0x4a0]
movsxd rdx, r14d
xor r9d, r9d
xor r8d, r8d
call fcn.14001f59c
xor r12d, r12d
mov r8, qword [rsp + 0x1d8]
lea rdx, str.SYSTEMMountedDevices
mov rcx, 0xffffffff80000002
call qword [0x1401333c8]
mov r15, qword [rsp + 0x208]
lea rcx, [rsp + 0xf8]
cmp ebp, r12d
cmovge r15, rbp
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
mov rcx, qword [rsp + 0x108]
cmp rcx, r12
je 0x140091b43
or rax, 0xffffffffffffffff
cmp rcx, rax
je 0x140091b43
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r12
jmp 0x140092059
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140091b8e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x140091b9c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x220]
call fcn.1400590a4
lea rcx, [rsp + 0x1b8]
call fcn.1400590a4
lea rcx, [rsp + 0x258]
call fcn.1400590a4
lea rcx, [rsp + 0x2d0]
call fcn.1400590a4
lea rcx, [rsp + 0x98]
call fcn.1400590a4
mov rax, rbp
jmp 0x1400934e9
lea rcx, [rsp + 0x98]
mov edx, 0x28
call fcn.14006176c
mov r8, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x98]
xor r9d, r9d
lea r13, [0x140113598]
cmp r8d, r9d
mov ecx, r9d
jl 0x140091c2e
lea edx, [r9 + 4]
lea eax, [r8 + 1]
mov ecx, r8d
cmp eax, edx
cmovl edx, eax
mov qword [rsp + 0x180], rdx
movsxd r15, dword [rsp + 0x180]
movsxd rdx, ecx
cmp rdx, r15
jge 0x140091da8
lea edi, [rcx + 1]
mov rcx, qword [rsp + 0x1d8]
mov rax, rdx
add rax, rax
mov rbx, r13
sub r15, rdx
lea r12, [rcx + rax*8 + 0x1c6]
mov eax, 0x10
cmp r8d, r9d
mov bpl, byte [r12 - 4]
jge 0x140091cc1
mov eax, 5
cmp bpl, al
je 0x140091c83
mov r9, r13
cmp bpl, 0xf
jne 0x140091c8a
lea r9, [0x14011e930]
neg bpl
lea rdx, str._s_s_d
mov r8, rbx
sbb eax, eax
mov rcx, rsi
and eax, 2
dec eax
imul eax, edi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbx, [0x140114460]
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
jmp 0x140091d75
cmp bpl, r9b
je 0x140091d82
lea rdx, str._s_d
mov r9d, edi
mov r8, rbx
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
test byte [rsp + 0xb8], 1
lea rdx, [0x14011e908]
movsxd rcx, eax
lea rax, str._0x_X
movzx r8d, bpl
lea rsi, [rsi + rcx*2]
cmovne rdx, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
movzx r8d, byte [r12 - 8]
lea rdx, [0x14011e908]
movsxd rcx, eax
shr r8d, 7
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, dword [r12]
lea r8, str.__I64u
movsxd rcx, eax
shl rdx, 9
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call fcn.1400deeec
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [r12 + 4]
lea r8, str.__I64u
movsxd rcx, eax
shl rdx, 9
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call fcn.1400deeec
mov r8, qword [rsp + 0x68]
mov eax, 0x10
xor r9d, r9d
inc edi
add r12, rax
sub r15, 1
jne 0x140091c66
mov rbx, qword [rsp + 0x108]
mov r14, qword [rsp + 0x1b8]
lea rdi, [0x140134078]
mov eax, dword [rsp + 0x74]
cmp eax, r9d
jmp 0x140092299
movsxd rbx, dword [rsp + 0xf0]
mov rbp, qword [rsp + 0x190]
mov r8d, dword [rsp + 0x78]
xor edx, edx
mov r12d, esi
shl rbx, 7
mov rax, rbx
lea r9, [rsp + 0x4b8]
lea rcx, [rsp + 0x108]
div r12
mov edx, r10d
mov qword [rsp + 0x28], rbp
mov rsi, rax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x20], rax
call fcn.14007514c
lea rcx, [rsp + 0x108]
mov r13d, eax
xor eax, eax
mov r8d, 0xc0000000
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
lea r9d, [rax + 3]
mov rdx, rbp
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rax
call fcn.1400037a8
mov r14, qword [rsp + 0x200]
mov edx, dword [rsp + 0x8c]
mov rbp, qword [rsp + 0x140]
movabs rax, 0x7fffffffffffffff
shl edx, 7
and qword [r14 + rbx + 0x30], rax
xor ebx, ebx
xor r8d, r8d
mov rcx, r14
mov dword [rbp + 0x58], ebx
call fcn.1400dd1d0
xor r8d, r8d
mov rcx, rbp
mov dword [rbp + 0x58], eax
mov dword [rbp + 0x10], ebx
mov ebx, dword [rsp + 0x88]
mov rdx, rbx
call fcn.1400dd1d0
xor ecx, ecx
xor r8d, r8d
mov dword [rbp + 0x10], eax
mov dword [r14 + 0x10010], ecx
lea rcx, [r14 + 0x10000]
mov rdx, rbx
call fcn.1400dd1d0
mov rdx, qword [rsp + 0x138]
mov rbx, qword [rsp + 0x108]
imul rdx, r12
add rdx, qword [rsp + 0x158]
xor r8d, r8d
mov rcx, rbx
mov dword [r14 + 0x10010], eax
call fcn.14005a608
mov r8d, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0x2e4]
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rsp + 0x138]
movsxd rbp, esi
lea rdx, [rax + rbp + 1]
xor r8d, r8d
mov rcx, rbx
imul rdx, r12
add rdx, qword [rsp + 0x158]
call fcn.14005a608
mov ecx, dword [rsp + 0x50]
lea r9, [rsp + 0x2e8]
imul esi, ecx
add rsi, r14
xor eax, eax
mov qword [rsp + 0x20], rax
mov r8d, ecx
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdx, qword [rsp + 0x238]
xor r8d, r8d
add rdx, rbp
mov rcx, rbx
imul rdx, r12
add rdx, qword [rsp + 0x158]
call fcn.14005a608
mov ebp, dword [rsp + 0x50]
xor eax, eax
lea r9, [rsp + 0x2e0]
mov rdx, rsi
mov rcx, rbx
mov r8d, ebp
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r8d, r8d
mov rcx, rbx
imul r15, r12
add r15, qword [rsp + 0x158]
mov rdx, r15
call fcn.14005a608
lea r9, [rsp + 0x2c8]
lea rdx, [r14 + 0x10000]
xor esi, esi
mov r8d, ebp
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call fcn.14005e020
mov r11d, esi
cmp r13d, esi
cmovge r11d, r13d
lea rcx, [rsp + 0x130]
movsxd r15, r11d
call fcn.1400590a4
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rbx, rsi
je 0x140092056
jmp 0x140092fe0
lea rcx, [rsp + 0x4b8]
movsxd r15, eax
call fcn.14005e10c
mov rcx, qword [rsp + 0x108]
cmp rcx, rsi
je 0x140092056
or rax, 0xffffffffffffffff
cmp rcx, rax
je 0x140092056
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x1400934a5
jmp 0x14008e55e
lea rcx, [rsp + 0x130]
call fcn.1400590a4
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
jmp 0x1400933db
lea eax, [r15 + r15*4]
lea rcx, [rsp + 0x98]
lea edx, [rax + rax]
call fcn.14006176c
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x98]
xor edx, edx
lea r13, [0x140113598]
cmp ebp, edx
mov ecx, edx
jl 0x1400920d6
lea eax, [rbp + 1]
mov ecx, ebp
cmp r15d, eax
cmovg r15d, eax
movsxd rax, ecx
movsxd r15, r15d
cmp rax, r15
jge 0x140092293
mov rbx, qword [rsp + 0x200]
mov r12, rax
lea edi, [rcx + 1]
shl r12, 7
add r12, rbx
sub r15, rax
mov eax, 0x80
cmp qword [r12], rdx
jne 0x140092113
cmp qword [r12 + 8], rdx
je 0x14009226d
cmp ebp, edx
mov r9d, edi
mov r8, r13
mov rcx, rsi
jge 0x140092140
lea rdx, str._s_d
call qword [sym.imp.USER32.dll_wsprintfW]
lea r13, [0x140114460]
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
jmp 0x140092266
lea rdx, [0x14011e8d8]
call qword [sym.imp.USER32.dll_wsprintfW]
movsxd rbp, ebp
xor r8d, r8d
movsxd rcx, eax
shl rbp, 7
lea rsi, [rsi + rcx*2]
add rbp, rbx
mov rcx, rsi
mov rdx, rbp
call fcn.14005dae0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, str._GPT
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov rdx, qword [rbp + 0x20]
lea rcx, [rsi + 0xa]
shl rdx, 9
call fcn.1400def1c
lea rcx, [rsi + 0xa]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r14d, 0x20
movsxd rcx, eax
lea rsi, [rsi + rcx*2 + 0xa]
mov word [rsi], r14w
mov rdx, qword [rbp + 0x28]
lea rcx, [rsi + 2]
sub rdx, qword [rbp + 0x20]
inc rdx
shl rdx, 9
call fcn.1400def1c
lea rcx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, str._016I64X
movsxd rcx, eax
lea rsi, [rsi + rcx*2 + 2]
mov word [rsi], r14w
mov rdx, qword [rbp + 0x30]
lea rcx, [rsi + 2]
call fcn.1400deeec
lea rcx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, [rbp + 0x10]
xor r8d, r8d
movsxd rcx, eax
lea rsi, [rsi + rcx*2 + 2]
mov word [rsi], r14w
add rsi, 2
mov rcx, rsi
call fcn.14005dae0
lea eax, [r14 - 0x10]
test byte [rsp + 0xb8], al
je 0x140092261
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, [0x140113fc8]
mov r8d, edi
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
lea rcx, [rsi + 2]
mov word [rsi], r14w
call qword [sym.imp.USER32.dll_wsprintfW]
movsxd rcx, eax
lea rsi, [rsi + rcx*2 + 2]
mov rbp, qword [rsp + 0x68]
xor edx, edx
mov eax, 0x80
inc edi
add r12, rax
sub r15, 1
jne 0x140092102
mov rbx, qword [rsp + 0x108]
mov r14, qword [rsp + 0x1b8]
lea rdi, [0x140134078]
mov eax, dword [rsp + 0x74]
cmp eax, edx
mov r12, qword [rsp + 0x4a0]
jle 0x1400922b6
lea rdx, [rsp + 0x98]
mov r8d, eax
mov rcx, r12
call fcn.140067a38
mov r8, qword [rsp + 0x98]
mov rdx, r14
mov rcx, r12
call fcn.140060a94
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14009230c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
cmp rdi, rbx
je 0x14009231c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15, rbx
jmp 0x1400934a5
lea rcx, [rsp + 0xf8]
call fcn.1400590a4
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092367
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14009302c
lea rcx, [rsp + 0xe8]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400923a5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14009198b
lea rcx, [rsp + 0x58]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400923d8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14008e600
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x58]
mov r15d, eax
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
xor eax, eax
cmp rdi, rax
jmp 0x140092059
movsxd rbp, dword [rsp + 0xac]
cmp ebp, ebx
jge 0x1400924d2
cmp word [r12], bx
je 0x1400924ca
mov r15d, 0x3a
cmp r15w, word [r12 + 2]
jne 0x1400924bd
lea r13d, [r15 + 0x22]
cmp r13w, word [r12 + 4]
jne 0x140092453
cmp word [r12 + 6], bx
jne 0x140092453
mov word [r12 + 4], bx
cmp word [r12 + 4], bx
jne 0x1400924b6
lea rcx, [rsp + 0x58]
mov edx, 9
call fcn.14006176c
mov rax, qword [rsp + 0x58]
mov ecx, 0x2e
mov word [rax], r13w
mov rax, qword [rsp + 0x58]
mov word [rax + 2], r13w
mov rax, qword [rsp + 0x58]
mov word [rax + 4], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 6], r13w
mov rax, qword [rsp + 0x58]
movzx ecx, word [r12]
mov word [rax + 8], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 0xa], r15w
mov rax, qword [rsp + 0x58]
mov word [rax + 0xc], bx
cmp qword [rsp + 0x58], rbx
jne 0x1400924ca
lea rcx, [rsp + 0x58]
mov rdx, r12
call fcn.14006d718
or rax, 0xffffffffffffffff
mov ecx, eax
jmp 0x1400924db
mov rcx, qword [rsp + 0x68]
or rax, 0xffffffffffffffff
cmp ecx, ebx
mov ebx, dword [rsp + 0xb8]
cmovle ecx, eax
bt dword [rsp + 0x1f0], 0x10
jae 0x1400924f5
or ebx, 0x20
xor r13d, r13d
test ebx, 0x402
je 0x140092541
cmp ebp, r13d
jl 0x140092541
cmp ecx, r13d
jle 0x140092541
mov rax, qword [rsp + 0x98]
movsxd r8, ecx
mov byte [rsp + 0x30], r13b
lea rcx, [rsp + 0x98]
mov rdx, rbp
mov r9d, 0x202
mov qword [rsp + 0x28], r13
mov word [rax], r13w
mov qword [rsp + 0x20], r13
call fcn.14008aeec
mov rcx, rax
mov r9, qword [rsp + 0x58]
movsxd r8, ecx
shl ebx, 0x10
and r8, 0xfffffffff000ffff
mov eax, ebx
lea rcx, [rsp + 0x98]
or r8, rax
mov rdx, rbp
call fcn.1400069d0
cmp rax, r13
je 0x140092580
mov rax, qword [rsp + 0x98]
cmp word [rax], r13w
je 0x140092580
mov r15d, r13d
jmp 0x140092587
mov r15, 0xffffffff80070057
lea rcx, [rsp + 0x58]
movsxd r15, r15d
mov qword [rsp + 0x240], r15
call fcn.1400590a4
mov rbx, r15
jmp 0x140092848
lea rcx, [rsp + 0x98]
mov edx, 0x1000
call fcn.14006176c
movsxd r12, dword [rsp + 0xac]
cmp r12d, ebx
jl 0x14009267c
lea rcx, [rsp + 0x180]
mov edx, 0x3b60
call fcn.1400613f4
mov rbx, qword [rsp + 0x180]
xor edx, edx
lea rbp, [rbx + 0x200]
mov r8d, 0x3960
mov rcx, rbp
call fcn.1400f97d0
mov r8d, dword [rsp + 0x148]
mov rdx, rbx
mov rcx, rbp
call fcn.1400740f0
xor eax, eax
mov ebx, eax
mov rcx, rax
lea rax, [rbp + 4]
cmp dword [rax], r12d
je 0x14009262f
add rcx, r15
add ebx, r15d
add rax, 0x220
cmp rcx, 0x1a
jle 0x140092616
jmp 0x14009266b
lea rcx, [rsp + 0x98]
mov edx, 0x64
call fcn.14006176c
mov rcx, qword [rsp + 0x98]
movsxd r11, ebx
imul r11, r11, 0x220
movzx r9d, byte [r11 + rbp + 0x10]
mov r8d, dword [r11 + rbp + 4]
lea rdx, str._d___c_
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x180]
call fcn.1400590a4
xor ebx, ebx
jmp 0x1400926b2
cmp byte [rsp + 0x90], bl
jne 0x1400926b2
cmp byte [rsp + 0xb4], 4
mov rdx, qword [rsp + 0x98]
lea rax, [0x1401157e0]
lea r9, [0x140115800]
mov rcx, r12
cmove r9, rax
xor r8d, r8d
call fcn.140073b38
lea rcx, [rsp + 0x58]
call fcn.1400590a4
xor r13d, r13d
jmp 0x140092848
movzx ebx, word [r12]
mov r13d, dword [rsp + 0x148]
xor eax, eax
and ebx, 0xffffffdf
cmp r13d, eax
lea ebp, [rbx - 0x41]
jle 0x140092772
lea rcx, [rsp + 0x180]
mov edx, 0x3b60
call fcn.1400613f4
mov rdx, qword [rsp + 0x180]
mov r8d, ebx
lea r12, [rdx + 0x200]
shl r8d, 0x10
mov rcx, r12
or r8d, r13d
call fcn.1400740f0
movsxd rbp, ebp
xor r13d, r13d
imul rbp, rbp, 0x220
cmp dword [r12 + rbp + 8], r13d
jle 0x14009275c
lea edx, [r13 + 0x64]
lea rcx, [rsp + 0x98]
call fcn.14006176c
mov r8d, dword [r12 + rbp + 4]
mov rcx, qword [rsp + 0x98]
lea rdx, str._d__c:
mov r9d, ebx
call qword [sym.imp.USER32.dll_wsprintfW]
mov rbx, r13
jmp 0x140092763
mov rbx, 0xffffffff80070057
lea rcx, [rsp + 0x180]
call fcn.1400590a4
jmp 0x1400927ed
mov rax, qword [rsp + 0x98]
movzx ecx, word [r12]
mov word [rax], cx
mov eax, 0x5c
cmp ax, word [r12]
mov rax, qword [rsp + 0x98]
cmove r10, r12
xor r13d, r13d
cmp word [rax], r13w
je 0x1400927e6
mov r9d, dword [rsp + 0xb8]
mov cl, byte [rsp + 0xa0]
movsxd r8, dword [rsp + 0x68]
mov byte [rsp + 0x30], cl
and r9d, 0xfffffffd
lea rcx, [rsp + 0x98]
mov rdx, r10
or r9d, 0xc
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
call fcn.14008aeec
mov rbx, r13
cmp rax, r13
setle bl
jmp 0x1400927ed
mov rbx, 0xffffffff80070057
lea rcx, [rsp + 0x58]
call fcn.1400590a4
jmp 0x140092848
cmp byte [rsp + 0x90], bl
je 0x140092813
cmp r10, rbx
jge 0x140092813
mov rbx, 0xffffffff80070057
jmp 0x1400926bc
neg byte [rsp + 0x72]
lea rcx, [rsp + 0x98]
sbb edx, edx
and edx, 0x200000
or edx, r10d
or edx, dword [rsp + 0x1f0]
call fcn.140089fa0
mov rax, qword [rsp + 0x98]
xor r13d, r13d
cmp word [rax], r13w
sete bl
mov r12, qword [rsp + 0x4a0]
mov eax, dword [rsp + 0x74]
cmp eax, r13d
jle 0x14009286c
lea rdx, [rsp + 0x98]
mov r8d, eax
mov rcx, r12
call fcn.140067a38
mov r8, qword [rsp + 0x98]
mov rdx, r14
mov rcx, r12
call fcn.140060a94
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rsi, r13
je 0x1400928a3
or rax, 0xffffffffffffffff
cmp rsi, rax
je 0x1400928a3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x1400928b1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x220]
call fcn.1400590a4
lea rcx, [rsp + 0x1b8]
call fcn.1400590a4
lea rcx, [rsp + 0x258]
call fcn.1400590a4
lea rcx, [rsp + 0x2d0]
call fcn.1400590a4
lea rcx, [rsp + 0x98]
call fcn.1400590a4
mov rax, rbx
jmp 0x1400934e9
lea rcx, [rsp + 0x98]
mov edx, 0x103c
call fcn.14006176c
mov rbp, qword [rsp + 0x98]
xor r15d, r15d
add rbp, 0x2000
lea rbx, [0x1401157d0]
cmp word [r12], r15w
je 0x14009297c
lea eax, [r15 + 0x3a]
cmp ax, word [r12 + 2]
jne 0x14009297c
movzx r8d, word [r12]
lea rdx, str.._c:
mov rcx, rbp
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 2
jne 0x140092971
mov r13d, dword [rsp + 0x148]
cmp r13d, 0x10
jne 0x1400929dc
lea rbx, [0x140115800]
mov ecx, 5
cmp eax, ecx
jne 0x1400929dc
jmp 0x1400929a9
mov eax, dword [rsp + 0xac]
cmp eax, r15d
jl 0x1400929dc
mov r13d, dword [rsp + 0x148]
cmp r13d, 8
jne 0x1400929b2
lea rdx, str..CDROM_d
mov r8d, eax
mov rcx, rbp
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbx, [0x1401157e0]
jmp 0x1400929dc
cmp r13d, 0x10
jne 0x1400929c9
mov ebp, eax
lea rbx, [0x140115800]
and ebp, 0xfff
jmp 0x1400929dc
lea rdx, str..PhysicalDrive_d
mov r8d, eax
mov rcx, rbp
call qword [sym.imp.USER32.dll_wsprintfW]
movzx r8d, word [rsp + 0x1b0]
mov rdx, qword [rsp + 0x98]
mov r9, rbx
or r8d, 0x20
mov rcx, rbp
call fcn.140073b38
mov r8, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x4a0]
mov rdx, r14
call fcn.140060a94
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rsi, r15
je 0x140092a38
or rax, 0xffffffffffffffff
cmp rsi, rax
je 0x140092a38
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r15
jmp 0x140092059
mov rax, qword [rsp + 0x68]
cmp eax, ebx
jle 0x140093005
movsxd rcx, dword [rsp + 0xac]
cmp ecx, ebx
jge 0x140092a64
cmp word [r13], bx
je 0x140093005
or r14, 0xffffffffffffffff
cmp ecx, ebx
mov rbp, rbx
mov dword [rsp + 0xd0], r14d
mov qword [rsp + 0x180], rbx
jge 0x140092aa5
cmp bl, bl
jne 0x140092b1c
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rsi, rbx
je 0x140093029
cmp rsi, r14
jmp 0x14009301e
mov r9d, dword [rsp + 0xb8]
mov rdx, rcx
mov cl, byte [rsp + 0xa0]
mov byte [rsp + 0x30], cl
movsxd r8, eax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x180]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x20], rax
call fcn.14008aeec
cmp dword [rsp + 0xd0], ebx
jg 0x140092b0c
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rsi, rbx
je 0x140093491
cmp rsi, r14
jmp 0x140093486
mov rbp, qword [rsp + 0x180]
mov r9, qword [rsp + 0x2a0]
mov dword [rsp + 0x54], 0x200
mov qword [rsp + 0x1c0], rbx
mov qword [rsp + 0x1c8], rbx
mov qword [rsp + 0x1d0], rbx
cmp word [r9], bx
je 0x140092d04
lea rcx, [0x14011e8a0]
mov rdx, r9
call fcn.14005a758
cmp al, bl
jne 0x140092d04
lea rcx, [0x14011975c]
mov rdx, r9
call fcn.14005a758
cmp al, bl
jne 0x140092d04
lea rcx, [0x14011e89c]
mov rdx, r9
call fcn.14005a758
cmp al, bl
je 0x140092b91
mov eax, 8
jmp 0x140092d09
lea rcx, str.nt6fat
mov rdx, r9
call fcn.14005a758
cmp al, bl
jne 0x140092cfd
lea rcx, str.winfat
mov rdx, r9
call fcn.14005a758
cmp al, bl
jne 0x140092cfd
lea rcx, [0x14011e888]
mov rdx, r9
call fcn.14005a758
cmp al, bl
je 0x140092bdc
mov eax, 6
jmp 0x140092d09
lea rcx, str.nt5fat
mov rdx, r9
call fcn.14005a758
cmp al, bl
je 0x140092bf9
mov eax, 5
jmp 0x140092d09
mov dword [rsp + 0x54], ebx
mov r12d, 0x2a
mov rbx, r14
mov qword [rsp + 0x198], rbx
cmp r12w, word [r9]
jne 0x140092c4f
add r9, 2
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x180]
mov qword [rsp + 0x180], r9
call fcn.14006868c
mov r9, qword [rsp + 0x180]
mov rbx, qword [rsp + 0x198]
cmp r12w, word [r9]
jne 0x140092c4f
add r9, 2
mov r11d, 0x23
cmp r11w, word [r9]
jne 0x140092caf
lea rcx, [rsp + 0x180]
mov rdx, r9
call fcn.14006d600
mov rdx, qword [rsp + 0x180]
xor eax, eax
lea r9, [rsp + 0x1c0]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.14001e468
lea rcx, [rsp + 0x180]
mov r12, rax
call fcn.1400590a4
mov r11d, dword [rsp + 0x1c8]
mov dword [rsp + 0x54], r11d
jmp 0x140092cce
lea r8, [rsp + 0x54]
xor edx, edx
mov rcx, r9
call fcn.140017554
mov r11d, dword [rsp + 0x54]
mov r12, rax
mov qword [rsp + 0x1c0], rax
xor eax, eax
cmp rbx, rax
jl 0x140092ce4
mov eax, r11d
cmp rax, rbx
cmovg r11d, ebx
mov dword [rsp + 0x54], r11d
xor ebx, ebx
cmp r12, rbx
jne 0x140092d3f
lea rcx, [rsp + 0x1c0]
call fcn.1400590a4
jmp 0x140092aee
mov eax, 7
jmp 0x140092d09
mov eax, 9
lea r9, [rsp + 0x1c0]
lea r8, str.INDATA
mov edx, eax
xor ecx, ecx
mov qword [rsp + 0x20], rbx
call fcn.14001e468
mov r11d, dword [rsp + 0x54]
cmp r11d, ebx
mov r12, rax
cmovne r11d, dword [rsp + 0x1c8]
mov dword [rsp + 0x54], r11d
cmp r11d, ebx
jbe 0x140092ceb
cmp r12, rbx
je 0x140092ceb
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x108]
mov r9d, 3
mov r8d, 0xc0000000
mov rdx, r15
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call fcn.1400037a8
mov rbx, qword [rsp + 0x108]
xor r13d, r13d
cmp rbx, r13
jne 0x140092db1
lea rcx, [rsp + 0x1c0]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rdi, r13
jmp 0x140093494
mov rsi, qword [rsp + 0x210]
xor r8d, r8d
mov rcx, rbx
shl rsi, 9
add rsi, rbp
mov rdx, rsi
mov qword [rsp + 0x210], rsi
call fcn.14005a608
cmp rax, rsi
je 0x140092e05
lea rcx, [rsp + 0x1c0]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rbx, r14
je 0x140092da9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140092da9
mov esi, 0x200
mov rcx, rbx
mov edx, esi
call fcn.14005d7c4
mov ebp, esi
lea rcx, [rsp + 0x1f8]
cmp eax, esi
cmovge ebp, eax
mov eax, dword [rsp + 0x54]
lea esi, [rbp - 1]
lea r14d, [rsi + rax]
mov eax, esi
not eax
and r14d, eax
lea edx, [rbp + r14*2]
call fcn.1400613f4
mov r13d, ebp
not esi
add r13, qword [rsp + 0x1f8]
mov eax, esi
movsxd r15, r14d
and r13, rax
lea r9, [rsp + 0xdc]
xor esi, esi
lea rbp, [r13 + r15]
mov r8d, r14d
mov rcx, rbx
mov rdx, rbp
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, esi
jne 0x140092ebc
lea rcx, [rsp + 0x1f8]
call fcn.1400590a4
lea rcx, [rsp + 0x1c0]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092eb4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x140093494
mov r8, r15
mov rdx, rbp
mov rcx, r13
call fcn.14001d128
mov rsi, qword [rsp + 0x210]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.14005a608
cmp rax, rsi
je 0x140092f04
lea rcx, [rsp + 0x1f8]
call fcn.1400590a4
lea rcx, [rsp + 0x1c0]
call fcn.1400590a4
jmp 0x1400919ad
mov esi, dword [rsp + 0x54]
mov r8d, 3
mov rdx, r12
mov rcx, rbp
call fcn.14001d128
mov eax, 0x1fe
lea rdx, [r12 + 0x1e]
cmp esi, eax
lea rcx, [rbp + 0x1e]
cmovg esi, eax
lea eax, [rsi - 0x1e]
movsxd r8, eax
call fcn.14001d128
mov byte [rbp + 0x1fe], 0x55
mov byte [rbp + 0x1ff], 0xaa
mov eax, dword [rsp + 0x54]
cmp eax, 0x200
jbe 0x140092f6c
add eax, 0xfffffe00
lea rdx, [r12 + 0x200]
lea rcx, [rbp + 0x200]
mov r8d, eax
call fcn.14001d128
mov r8, r15
mov rdx, rbp
mov rcx, r13
call fcn.1400590d4
xor esi, esi
cmp eax, esi
je 0x140092fab
lea r9, [rsp + 0xdc]
mov r8d, r14d
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov dword [rsp + 0x260], eax
call fcn.14005dff8
cmp dword [rsp + 0x260], esi
lea rcx, [rsp + 0x1f8]
mov r15, rsi
sete r15b
call fcn.1400590a4
lea rcx, [rsp + 0x1c0]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140092056
mov rcx, rbx
jmp 0x140092050
cmp dword [rsp + 0xac], ebx
jge 0x140093037
cmp word [r13], bx
jne 0x140093037
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rsi, rbx
je 0x140093029
or rax, 0xffffffffffffffff
cmp rsi, rax
je 0x140093029
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbx
je 0x14008dffb
jmp 0x14008dff2
mov r10d, 0x1b8
mov qword [rsp + 0x240], rbx
mov qword [rsp + 0x248], rbx
mov dword [rsp + 0x74], r10d
mov qword [rsp + 0x250], rbx
cmp word [r9], bx
je 0x140093245
lea rcx, [0x14011e8a0]
mov rdx, r9
call fcn.14005a758
cmp al, bl
jne 0x140093245
lea rcx, [0x14011975c]
mov rdx, r9
call fcn.14005a758
cmp al, bl
jne 0x140093245
lea rcx, [0x14011e888]
mov rdx, r9
call fcn.14005a758
cmp al, bl
je 0x1400930b9
lea r13, [0x140130380]
mov dword [rsp + 0x74], 0x190
jmp 0x1400931e1
lea rcx, [0x14011e89c]
mov rdx, r9
call fcn.14005a758
cmp al, bl
je 0x1400930e0
lea r13, [0x140130510]
mov dword [rsp + 0x74], 0x180
jmp 0x1400931e1
or rbp, 0xffffffffffffffff
mov dword [rsp + 0x74], ebx
lea r12d, [rbp + 0x2b]
mov rbx, rbp
mov qword [rsp + 0x198], rbx
cmp r12w, word [r9]
jne 0x140093138
add r9, 2
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x260]
mov qword [rsp + 0x260], r9
call fcn.14006868c
mov r9, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x198]
cmp r12w, word [r9]
jne 0x140093138
add r9, 2
mov r11d, 0x23
cmp r11w, word [r9]
jne 0x140093198
lea rcx, [rsp + 0x260]
mov rdx, r9
call fcn.14006d600
mov rdx, qword [rsp + 0x260]
xor eax, eax
lea r9, [rsp + 0x240]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.14001e468
lea rcx, [rsp + 0x260]
mov r13, rax
call fcn.1400590a4
mov r11d, dword [rsp + 0x248]
mov dword [rsp + 0x74], r11d
jmp 0x1400931b7
lea r8, [rsp + 0x74]
xor edx, edx
mov rcx, r9
call fcn.140017554
mov r11d, dword [rsp + 0x74]
mov r13, rax
mov qword [rsp + 0x240], rax
xor eax, eax
cmp rbx, rax
jl 0x1400931cd
mov eax, r11d
cmp rax, rbx
jle 0x1400931cd
mov r11d, ebx
mov dword [rsp + 0x74], ebx
xor ebx, ebx
cmp r11d, ebx
jbe 0x140093464
cmp r13, rbx
je 0x140093464
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x108]
mov r9d, 3
mov r8d, 0xc0000000
mov rdx, r15
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call fcn.1400037a8
mov rbx, qword [rsp + 0x108]
xor esi, esi
cmp rbx, rsi
jne 0x14009325d
lea rcx, [rsp + 0x240]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
jmp 0x140092eb4
lea r13, [0x140130690]
mov r11d, r10d
mov dword [rsp + 0x74], r10d
or rbp, 0xffffffffffffffff
jmp 0x1400931cf
mov esi, 0x200
mov rcx, rbx
mov edx, esi
call fcn.14005d7c4
mov r12d, esi
lea rcx, [rsp + 0x198]
cmp eax, esi
cmovge r12d, eax
mov eax, dword [rsp + 0x74]
lea ebp, [r12 - 1]
mov esi, r12d
lea r14d, [rbp + rax]
mov eax, ebp
not eax
and r14d, eax
cmp r14d, r12d
cmovge esi, r14d
lea edx, [r12 + rsi*2]
call fcn.1400613f4
add r12, qword [rsp + 0x198]
mov r15, qword [rsp + 0x158]
not ebp
movsxd rsi, esi
mov eax, ebp
xor ebp, ebp
and r12, rax
mov rax, rbp
add rsi, r12
cmp qword [rsp + 0x210], rbp
je 0x1400932df
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14005a608
cmp rax, r15
jne 0x140093410
lea r9, [rsp + 0xdc]
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, ebp
je 0x140093410
movsxd rbp, r14d
mov rdx, rsi
mov rcx, r12
mov r8, rbp
call fcn.14001d128
mov r11d, dword [rsp + 0x74]
mov eax, 0x1b8
cmp r11d, eax
mov rdx, r13
mov rcx, rsi
cmovg r11d, eax
movsxd r8, r11d
call fcn.14001d128
mov byte [rsi + 0x1fe], 0x55
mov byte [rsi + 0x1ff], 0xaa
mov eax, dword [rsp + 0x74]
cmp eax, 0x200
jbe 0x140093370
add eax, 0xfffffe00
lea rdx, [r13 + 0x200]
lea rcx, [rsi + 0x200]
mov r8d, eax
call fcn.14001d128
mov r8, rbp
mov rdx, rsi
mov rcx, r12
call fcn.1400590d4
xor ebp, ebp
cmp eax, ebp
je 0x1400933c1
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14005a608
cmp rax, r15
jne 0x140093410
lea r9, [rsp + 0xdc]
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.14005dff8
cmp esi, ebp
je 0x140093410
lea rcx, [rsp + 0x198]
call fcn.1400590a4
lea rcx, [rsp + 0x240]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400933fa
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
je 0x140093408
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15, rbp
jmp 0x1400934a5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, ebp
cmove eax, ecx
lea rcx, [rsp + 0x198]
mov r15d, eax
call fcn.1400590a4
lea rcx, [rsp + 0x240]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14009345c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x140092059
lea rcx, [rsp + 0x240]
call fcn.1400590a4
lea rcx, [rsp + 0x4b8]
call fcn.14005e10c
cmp rsi, rbx
je 0x140093491
cmp rsi, rbp
je 0x140093491
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbx
je 0x14009349f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r15d, 1
lea rcx, [rsp + 0x220]
call fcn.1400590a4
lea rcx, [rsp + 0x1b8]
call fcn.1400590a4
lea rcx, [rsp + 0x258]
call fcn.1400590a4
lea rcx, [rsp + 0x2d0]
call fcn.1400590a4
lea rcx, [rsp + 0x98]
call fcn.1400590a4
mov rax, r15
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret