Function at 0x1400034c0
Capabilities:
Get file size
Read file on windows
Timestomp file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x138
movaps xmmword [rsp + 0x120], xmm6
mov rbx, r9
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0x70], rcx
mov r14, qword [rsp + 0x1a0]
lea rdx, [rsp + 0xb0]
mov qword [rsp + 0xb8], rdx
mov rax, qword [rsp + 0xb8]
lea rbp, [rsp + 0xa8]
mov qword [rsp + 0xc0], rbp
mov rax, qword [rsp + 0xc0]
lea r15, [rsp + 0xa0]
mov qword [rsp + 0xc8], r15
mov rax, qword [rsp + 0xc8]
mov rsi, qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov rcx, r8
call rsi
mov rcx, rbx
mov rdx, rbp
call rsi
mov rcx, r14
mov rdx, r15
call rsi
mov eax, dword [0x14002ec28]
mov ecx, dword [0x14002ec2c]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete byte [rsp + 0x4c]
cmp ecx, 0xa
setl byte [rsp + 0x50]
mov eax, 0x9b7f3800
mov ebx, 0xfdf49fcf
mov r14d, 0x19a61d90
mov ebp, 0x6c31c394
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x19a61d8f
jle 0x1400035c0
cmp eax, 0x19a61d90
je 0x140003610
cmp eax, 0x6c31c394
jne 0x1400035a0
jmp 0x14000364b
cmp eax, 0x9b7f3800
je 0x140003624
cmp eax, 0xfdf49fcf
jne 0x1400035a0
mov rcx, qword [rsp + 0x70]
call fcn.140006e90
mov qword [rsp + 0x58], rax
mov eax, dword [0x14002ec28]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x19a61d90
cmove eax, ebp
cmp dword [0x14002ec2c], 0xa
cmovge eax, r14d
setl dl
xor dl, cl
cmovne eax, ebp
jmp 0x1400035a0
mov rcx, qword [rsp + 0x70]
call fcn.140006e90
mov eax, 0xfdf49fcf
jmp 0x1400035a0
movzx ecx, byte [rsp + 0x4c]
movzx eax, byte [rsp + 0x50]
mov edx, ecx
xor dl, al
mov edx, 0x19a61d90
cmovne edx, ebx
test al, al
mov eax, edx
cmovne eax, ebx
test cl, cl
cmove eax, edx
jmp 0x1400035a0
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
mov edx, 0xc0000100
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x40], rax
mov ecx, 0x745aefeb
mov r14d, 0xeca4bee0
xorps xmm6, xmm6
mov r13d, 0xd8b3f463
mov r15d, 0xed92d092
mov r12d, 0xe0858ad7
jmp 0x140003704
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x4c], edi
mov rcx, qword [rsp + 0x40]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0xffffffff
setne byte [rsp + 0x3d]
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x7fbe67f1
mov ebx, 0x2cf10784
cmove ecx, ebx
cmp dword [0x14002ec74], 0xa
mov edx, 0x7fbe67f1
cmovge ecx, edx
setl dl
xor dl, al
cmovne ecx, ebx
cmp ecx, 0x1ae9ac0d
jg 0x1400037a0
cmp ecx, 0xce16e50f
jle 0x140003810
cmp ecx, 0xeca4bedf
jg 0x1400038fb
cmp ecx, 0xd2ff579c
jle 0x1400039f6
cmp ecx, 0xd2ff579d
je 0x140003eaf
cmp ecx, 0xd71b16b2
je 0x140003f31
cmp ecx, 0xe32198c7
jne 0x140003704
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea r9, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x88]
mov rax, qword [rsp + 0x78]
mov ecx, 0x70c31627
jmp 0x140003704
cmp ecx, 0x5f6f1a29
jle 0x1400038a0
cmp ecx, 0x70c31626
jle 0x140003935
cmp ecx, 0x745aefea
jle 0x140003b3f
cmp ecx, 0x7fbe67f1
je 0x140003f86
cmp ecx, 0x761f96c8
je 0x140003ccf
cmp ecx, 0x745aefeb
jne 0x140003704
mov rax, qword [rsp + 0x40]
cmp rax, 0xffffffffffffffff
mov ecx, 0x3e4864ff
mov eax, 0xbb68ac6a
cmove ecx, eax
xor ebp, ebp
jmp 0x140003704
cmp ecx, 0x9d1bca76
jle 0x140003963
cmp ecx, 0xb0d5b2c1
jle 0x140003b6e
cmp ecx, 0xb0d5b2c2
je 0x140004094
cmp ecx, 0xbb68ac6a
je 0x140003d05
cmp ecx, 0xbea6faaf
jne 0x140003704
mov r14d, dword [rsp + 0x11c]
add r14d, 8
mov rcx, qword [rsp + 0x40]
mov edx, r14d
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, r14d
mov r14d, 0xeca4bee0
sete byte [rsp + 0x3e]
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0xeca4bee0
mov ebx, 0x4dc96c85
jmp 0x1400039a8
cmp ecx, 0x4978952b
jle 0x1400039bb
cmp ecx, 0x4f8d51e3
jle 0x140003bba
cmp ecx, 0x4f8d51e4
je 0x14000409e
cmp ecx, 0x4faaa50d
je 0x1400040b5
cmp ecx, 0x55610c4a
jne 0x140003704
movzx eax, word [rsp + 0xe0]
cmp eax, 0x5a4d
mov ecx, 0xd71b16b2
mov eax, 0x90c4cf62
cmove ecx, eax
jmp 0x140003704
cmp ecx, 0x69a94af
jle 0x140003be9
cmp ecx, 0x69a94b0
je 0x1400040db
cmp ecx, 0xf7a60a4
je 0x140004120
cmp ecx, 0x19035042
jne 0x140003704
mov ecx, 0x4faaa50d
jmp 0x140003704
cmp ecx, 0x687254bc
jg 0x140003c46
cmp ecx, 0x5f6f1a2a
je 0x1400041e6
cmp ecx, 0x66b7842e
jne 0x14000439c
mov ecx, 0xd71b16b2
jmp 0x140003704
cmp ecx, 0x93bb2042
jg 0x140003c6f
cmp ecx, 0x8d7ad212
je 0x140003d69
cmp ecx, 0x90c4cf62
jne 0x140003704
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0xeca4bee0
mov ebx, 0xbea6faaf
cmove ecx, ebx
cmp dword [0x14002ec74], 0xa
cmovge ecx, r14d
jmp 0x1400036fc
cmp ecx, 0x305effd5
jg 0x140003c91
cmp ecx, 0x1ae9ac0e
je 0x140003d80
cmp ecx, 0x2cf10784
jne 0x140003704
cmp byte [rsp + 0x3d], 0
mov ecx, 0x9d1bca77
mov eax, 0xd2ff579d
cmovne ecx, eax
jmp 0x140003704
cmp ecx, 0xce16e510
je 0x140004222
cmp ecx, 0xcf40ef44
jne 0x140003704
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x78], rdx
mov rax, qword [rsp + 0x78]
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x50], 0
mov eax, dword [0x14002ec78]
mov ecx, dword [0x14002ec7c]
lea esi, [rax - 1]
imul esi, eax
not esi
or esi, 0xfffffffe
mov rax, qword [rsp + 0x58]
movabs rdx, 0xfe624e212ac18000
add rax, rdx
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
shr rdx, 0x17
cmp esi, 0xffffffff
sete byte [rsp + 0x3b]
sete al
mov esi, 0x9b36b3d0
mov ebx, 0xa1504c62
cmove esi, ebx
cmp ecx, 0xa
setl byte [rsp + 0x3c]
setl cl
mov edi, 0x9b36b3d0
cmovge esi, edi
xor cl, al
cmovne esi, ebx
mov eax, 0xf77dc78a
xor edi, edi
nop word cs:[rax + rax]
cmp eax, 0xd8b3f462
jg 0x140003af0
cmp eax, 0x9b36b3d0
je 0x140003b24
cmp eax, 0xa1504c62
jne 0x140003ad0
jmp 0x1400036a1
cmp eax, 0xd8b3f463
je 0x140003b33
cmp eax, 0xf77dc78a
jne 0x140003ad0
movzx ecx, byte [rsp + 0x3b]
movzx eax, byte [rsp + 0x3c]
mov ebx, ecx
xor bl, al
mov ebx, 0x9b36b3d0
cmovne ebx, r13d
test al, al
mov eax, ebx
cmovne eax, r13d
test cl, cl
cmove eax, ebx
jmp 0x140003ad0
mov eax, 0xd8b3f463
mov qword [rsp + 0x50], rdx
mov rdi, rdx
jmp 0x140003ad0
mov qword [rsp + 0x50], rdx
mov rdi, rdx
mov eax, esi
jmp 0x140003ad0
cmp ecx, 0x70c31627
je 0x14000422c
cmp ecx, 0x729ad72d
jne 0x140003704
cmp byte [rsp + 0x3f], 0
mov ecx, 0x5f6f1a2a
mov eax, 0x4f8d51e4
cmovne ecx, eax
jmp 0x140003704
cmp ecx, 0x9d1bca77
je 0x140004295
cmp ecx, 0xa5699482
jne 0x140003704
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x1ae9ac0e
mov ebx, 0xb0d5b2c2
cmove ecx, ebx
cmp dword [0x14002ec74], 0xa
mov edx, 0x1ae9ac0e
jmp 0x1400036f9
cmp ecx, 0x4978952c
je 0x1400042ca
cmp ecx, 0x4dc96c85
jne 0x140003704
cmp byte [rsp + 0x3e], 0
mov ecx, 0x66b7842e
mov eax, 0x402a768
cmovne ecx, eax
jmp 0x140003704
cmp ecx, 0xeca4bee0
je 0x140004352
cmp ecx, 0x402a768
jne 0x140003704
mov eax, dword [0x14002ec70]
mov edx, dword [0x14002ec74]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete r8b
cmp edx, 0xa
setl bl
xor bl, r8b
mov ebx, 0x761f96c8
mov edi, 0x4978952c
cmovne ebx, edi
test eax, ecx
mov ecx, ebx
cmove ecx, edi
cmp edx, 0xa
cmovge ecx, ebx
jmp 0x140003704
cmp ecx, 0x687254bd
je 0x140003d8a
cmp ecx, 0x6ab3e0e9
jne 0x140003704
mov ecx, 0xbb68ac6a
mov ebp, dword [rsp + 0x90]
jmp 0x140003704
cmp ecx, 0x93bb2043
je 0x140003e3d
cmp ecx, 0x93bb67b3
jne 0x140003704
mov ecx, 0x66b7842e
jmp 0x140003704
cmp ecx, 0x305effd6
je 0x140003e47
cmp ecx, 0x3e4864ff
jne 0x140003704
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x7fbe67f1
mov ebx, 0xcf40ef44
jmp 0x1400036ea
mov dword [rsp + 0x48], 0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x20], 0
mov r8d, 4
lea r9, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 0x4978952c
jmp 0x140003704
mov eax, dword [0x14002ec70]
mov edx, dword [0x14002ec74]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete r8b
cmp edx, 0xa
setl bl
xor bl, r8b
mov ebx, 0xf7a60a4
mov edi, 0x687254bd
cmovne ebx, edi
test eax, ecx
mov ecx, ebx
cmove ecx, edi
cmp edx, 0xa
mov dword [rsp + 0x94], ebp
mov rax, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xb8]
cmovge ecx, ebx
jmp 0x140003704
cmp dword [rsp + 0x6c], 0x40
mov ecx, 0xd71b16b2
mov eax, 0x55610c4a
cmove ecx, eax
jmp 0x140003704
mov ecx, 0xa5699482
jmp 0x140003704
mov rcx, qword [rsp + 0x70]
call fcn.140004580
mov eax, dword [0x14002ec38]
mov ecx, dword [0x14002ec3c]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0xe4e212
cmovne eax, r15d
cmp edx, 0xffffffff
sete byte [rsp + 0x3b]
mov edx, eax
cmove edx, r15d
cmp ecx, 0xa
setl byte [rsp + 0x3c]
cmovge edx, eax
mov ecx, 0xb6177676
cmp ecx, 0xed92d091
jg 0x140003e00
cmp ecx, 0xb6177676
je 0x140003e17
cmp ecx, 0xe0858ad7
jne 0x140003de0
mov ecx, edx
jmp 0x140003de0
cmp ecx, 0xed92d092
je 0x140003e7b
cmp ecx, 0xe4e212
jne 0x140003de0
mov ecx, 0xe0858ad7
jmp 0x140003de0
movzx ebx, byte [rsp + 0x3b]
movzx ecx, byte [rsp + 0x3c]
mov eax, ebx
xor al, cl
mov eax, 0xe4e212
cmovne eax, r12d
test cl, cl
mov ecx, eax
cmovne ecx, r12d
test bl, bl
cmove ecx, eax
jmp 0x140003de0
mov ecx, 0x5f6f1a2a
jmp 0x140003704
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0xce16e510
mov ebx, 0x69a94b0
cmove ecx, ebx
cmp dword [0x14002ec74], 0xa
mov edx, 0xce16e510
jmp 0x1400036f9
mov eax, dword [0x14002ec70]
mov edx, dword [0x14002ec74]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0xf7a60a4
mov ebx, 0x62cd8c4e
jmp 0x14000410a
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x80]
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
lea r9, [rsp + 0x6c]
mov qword [rsp + 0xd0], r9
mov rax, qword [rsp + 0xd0]
mov dword [rsp + 0x6c], 0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x20], 0
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
mov ecx, 0x8d7ad212
mov eax, 0xd71b16b2
cmove ecx, eax
jmp 0x140003704
mov eax, dword [0x14002ec70]
mov edx, dword [0x14002ec74]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete r8b
cmp edx, 0xa
setl bl
xor bl, r8b
mov ebx, 0x1ae9ac0e
mov edi, 0xa5699482
cmovne ebx, edi
test eax, ecx
mov ecx, ebx
cmove ecx, edi
cmp edx, 0xa
mov rax, qword [rsp + 0xd0]
mov rax, qword [rsp + 0x80]
cmovge ecx, ebx
jmp 0x140003704
mov qword [rsp + 0x58], 0
mov rcx, qword [rsp + 0x98]
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov qword [rsp + 0x50], 0
mov eax, dword [0x14002ec78]
mov ecx, dword [0x14002ec7c]
lea ebx, [rax - 1]
imul ebx, eax
mov edi, ebx
xor edi, 0xfffffffe
mov rax, qword [rsp + 0x58]
movabs rdx, 0xfe624e212ac18000
add rax, rdx
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
shr rdx, 0x17
test edi, ebx
sete byte [rsp + 0x3b]
sete al
mov esi, 0x9b36b3d0
mov ebx, 0xa1504c62
cmove esi, ebx
cmp ecx, 0xa
setl byte [rsp + 0x3c]
setl cl
mov edi, 0x9b36b3d0
cmovge esi, edi
xor cl, al
cmovne esi, ebx
mov eax, 0xf77dc78a
xor edi, edi
nop dword [rax + rax]
cmp eax, 0xd8b3f462
jg 0x140004040
cmp eax, 0x9b36b3d0
je 0x140004079
cmp eax, 0xa1504c62
jne 0x140004020
jmp 0x140004377
cmp eax, 0xd8b3f463
je 0x140004088
cmp eax, 0xf77dc78a
jne 0x140004020
movzx ecx, byte [rsp + 0x3b]
movzx eax, byte [rsp + 0x3c]
mov ebx, ecx
xor bl, al
test al, al
mov eax, 0x9b36b3d0
cmovne eax, r13d
test cl, cl
mov ecx, 0x9b36b3d0
cmove eax, ecx
test bl, bl
cmovne eax, r13d
jmp 0x140004020
mov eax, 0xd8b3f463
mov qword [rsp + 0x50], rdx
mov rdi, rdx
jmp 0x140004020
mov qword [rsp + 0x50], rdx
mov rdi, rdx
mov eax, esi
jmp 0x140004020
mov ecx, 0x9d1bca77
jmp 0x140003704
cmp dword [rsp + 0x48], 4
mov ecx, 0x5f6f1a2a
mov eax, 0x305effd6
cmove ecx, eax
jmp 0x140003704
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x19035042
mov ebx, 0x93bb67b3
jmp 0x14000420e
mov eax, dword [0x14002ec70]
mov edx, dword [0x14002ec74]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0xce16e510
mov ebx, 0x93bb2043
cmovne eax, ebx
cmp ecx, 0xffffffff
mov ecx, eax
cmove ecx, ebx
cmp edx, 0xa
cmovge ecx, eax
jmp 0x140003704
mov rcx, qword [rsp + 0x70]
call fcn.140004580
mov eax, dword [0x14002ec38]
mov ecx, dword [0x14002ec3c]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete byte [rsp + 0x3b]
sete dl
mov eax, 0xe4e212
cmove eax, r15d
cmp ecx, 0xa
setl byte [rsp + 0x3c]
setl cl
mov ebx, 0xe4e212
cmovge eax, ebx
xor cl, dl
cmovne eax, r15d
mov ecx, 0xb6177676
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xed92d091
jg 0x1400041a0
cmp ecx, 0xb6177676
je 0x1400041bb
cmp ecx, 0xe0858ad7
jne 0x140004180
mov ecx, eax
jmp 0x140004180
cmp ecx, 0xed92d092
je 0x140004392
cmp ecx, 0xe4e212
jne 0x140004180
mov ecx, 0xe0858ad7
jmp 0x140004180
movzx ebx, byte [rsp + 0x3b]
movzx ecx, byte [rsp + 0x3c]
mov edx, ebx
xor dl, cl
test cl, cl
mov ecx, 0xe4e212
cmovne ecx, r12d
test bl, bl
mov ebx, 0xe4e212
cmove ecx, ebx
test dl, dl
cmovne ecx, r12d
jmp 0x140004180
mov rax, qword [rsp + 0xd8]
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x19035042
mov ebx, 0x4faaa50d
cmove ecx, ebx
cmp dword [0x14002ec74], 0xa
mov edx, 0x19035042
jmp 0x1400036f9
mov ecx, 0x69a94b0
jmp 0x140003704
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea r9, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov dword [rsp + 0x90], eax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x88]
mov rax, qword [rsp + 0x78]
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0xe32198c7
mov ebx, 0x6ab3e0e9
jmp 0x1400042b6
mov eax, dword [0x14002ec70]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0xe32198c7
mov ebx, 0x70c31627
cmove ecx, ebx
cmp dword [0x14002ec74], 0xa
mov edx, 0xe32198c7
jmp 0x1400036f9
lea r9, [rsp + 0x48]
mov qword [rsp + 0xd8], r9
mov rax, qword [rsp + 0xd8]
mov dword [rsp + 0x48], 0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x20], 0
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [0x14002ec70]
mov edi, dword [0x14002ec74]
lea ebx, [rcx - 1]
imul ebx, ecx
not ebx
or ebx, 0xfffffffe
cmp ebx, 0xffffffff
sete cl
cmp edi, 0xa
setl dl
xor dl, cl
mov edx, 0x761f96c8
mov esi, 0x729ad72d
cmovne edx, esi
cmp ebx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp edi, 0xa
cmovge ecx, edx
test eax, eax
setne byte [rsp + 0x3f]
jmp 0x140003704
mov edx, dword [rsp + 0x11c]
add edx, 8
mov rcx, qword [rsp + 0x40]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, 0xbea6faaf
jmp 0x140003704
mov dword [rsp + 0x4c], edi
mov rcx, qword [rsp + 0x40]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, 0xcf40ef44
jmp 0x140003704
mov ecx, 0x687254bd
jmp 0x140003704
cmp ecx, 0x62cd8c4e
jne 0x140003704
mov eax, dword [rsp + 0x94]
movaps xmm6, xmmword [rsp + 0x120]
add rsp, 0x138
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret