Function at 0x1400b8af8
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d0
mov rsi, rcx
lea rcx, [rax - 0x48]
mov edx, 0x10
call fcn.140058200
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x1a0]
xor r13d, r13d
mov qword [rsp + 0x1a0], r13
call fcn.1400605d0
lea rax, str.0xFFFFFFFF
lea ebp, [r13 + 1]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x218]
lea ecx, [rbp + 0x22]
mov byte [rsp + 0x60], r13b
mov byte [rsp + 0x78], r13b
mov byte [rsp + 0x228], r13b
mov dword [rsp + 0x100], 0x200
cmp word [rax], cx
jne 0x1400b8b9b
add rax, 2
mov byte [rsp + 0x60], bpl
mov qword [rsp + 0x218], rax
mov ebx, 9
lea r15d, [rbx + 4]
lea r12d, [rbx + 0x17]
jmp 0x1400b8bc7
cmp bx, cx
ja 0x1400b8bb5
cmp cx, r15w
jbe 0x1400b8bd0
cmp r12w, cx
je 0x1400b8bd0
add rax, 2
mov qword [rsp + 0x218], rax
movzx ecx, word [rax]
cmp cx, r13w
jne 0x1400b8baa
lea rcx, [rsp + 0x218]
call fcn.14005044c
lea rcx, [rsp + 0x1c8]
mov rdx, rbp
call fcn.140058200
lea rcx, [rsp + 0x90]
call fcn.14005818c
lea rcx, [rsp + 0x118]
mov rdx, rbp
call fcn.140058200
lea rcx, [rsp + 0x150]
mov rdx, rbp
call fcn.140058200
lea rcx, [rsp + 0x108]
call fcn.14005818c
mov rdi, qword [rsp + 0x218]
lea rcx, [rsp + 0x190]
mov qword [rsp + 0xa0], rdi
mov r11, r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0xe8], r13
mov r14, r13
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0x68], r13
call fcn.14005818c
movzx r11d, word [rdi]
mov r8d, 0x2d
cmp r8w, r11w
jne 0x1400b8d32
lea r14d, [r8 - 1]
movzx eax, word [rdi + 2]
cmp ax, r13w
je 0x1400b8cef
cmp bx, ax
ja 0x1400b8c9c
cmp ax, r15w
jbe 0x1400b8cef
cmp r12w, ax
je 0x1400b8cef
cmp ax, r14w
je 0x1400b8cef
cmp bx, r11w
ja 0x1400b8cb4
cmp r11w, r15w
jbe 0x1400b8cc8
cmp r12w, r11w
je 0x1400b8cc8
add rdi, 2
mov r11w, word [rdi]
cmp r11w, r13w
jne 0x1400b8ca8
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0xa0], rdi
call fcn.14005044c
mov rdi, qword [rsp + 0xa0]
mov r11w, word [rdi]
cmp r8w, r11w
je 0x1400b8c87
mov rdx, qword [rsp + 0x218]
mov r14, r13
cmp rdi, rdx
je 0x1400b8d32
movzx ebx, word [rdi - 2]
cmp word [rdi], r13w
je 0x1400b8d16
mov word [rdi - 2], r13w
mov rdx, qword [rsp + 0x218]
lea r8, [rsp + 0x190]
xor r9d, r9d
mov rcx, rsi
mov byte [rsp + 0x20], bpl
call fcn.14006bbdc
mov word [rdi - 2], bx
mov rax, qword [rsp + 0x190]
lea rcx, [rsp + 0xb8]
mov rbx, r13
mov dword [rsp + 0xe0], r13d
mov dword [rsp + 0xe4], r13d
mov r12b, r13b
mov qword [rsp + 0x218], rax
mov byte [rsp + 0x63], r13b
mov r15, r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x120], rbx
call fcn.14005818c
lea rcx, [rsp + 0xc0]
call fcn.14005818c
jmp 0x1400b91c2
lea rdx, [rsp + 0x218]
lea rcx, str._find
mov r8d, 5
call fcn.14005a964
cmp al, r13b
je 0x1400b8db8
mov byte [rsp + 0x228], bpl
jmp 0x1400b91c2
mov r11, qword [rsp + 0x218]
lea rcx, [0x1400fcc5c]
mov r8d, 2
mov rdx, r11
call fcn.140051960
cmp al, r13b
je 0x1400b8f2c
mov eax, 0x3d
cmp ax, word [r11 + 4]
je 0x1400b8dfa
mov eax, 0x3a
cmp ax, word [r11 + 4]
jne 0x1400b8f2c
add r11, 6
mov qword [rsp + 0x218], r11
mov qword [rsp + 0x98], r11
movzx eax, word [r11]
cmp ax, r13w
je 0x1400b8e4d
mov ecx, 9
lea edx, [rcx + 0x17]
lea r14d, [rcx + 4]
cmp cx, ax
ja 0x1400b8e2f
cmp ax, r14w
jbe 0x1400b8e4a
cmp dx, ax
je 0x1400b8e4a
add r11, 2
mov qword [rsp + 0x218], r11
mov ax, word [r11]
cmp ax, r13w
jne 0x1400b8e24
mov r14, r13
lea rcx, [rsp + 0x218]
call fcn.14005044c
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x98]
call fcn.1400ab8ac
mov r8, qword [rsp + 0x98]
mov eax, 0x40
cmp ax, word [r8]
jne 0x1400b91c2
add r8, 2
mov qword [rsp + 0x98], r8
mov r10, r8
movzx eax, word [r8]
cmp ax, r13w
je 0x1400b8ed4
mov ecx, 9
lea edx, [rcx + 0x17]
lea r14d, [rcx + 4]
cmp cx, ax
ja 0x1400b8eb6
cmp ax, r14w
jbe 0x1400b8ec9
cmp dx, ax
je 0x1400b8ec9
add r8, 2
mov ax, word [r8]
cmp ax, r13w
jne 0x1400b8eab
mov qword [rsp + 0x98], r8
mov r14, r13
lea rcx, [rsp + 0x98]
call fcn.14005044c
cmp word [r8], r13w
je 0x1400b8ef4
mov rax, qword [rsp + 0x98]
mov word [rax - 2], r13w
lea r8, [rsp + 0xb8]
xor r9d, r9d
mov rdx, r10
mov rcx, rsi
mov byte [rsp + 0x20], bpl
call fcn.14006bbdc
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 8
mov dword [rsp + 0xe4], eax
jmp 0x1400b91c2
lea rdx, [rsp + 0x218]
lea rcx, str._nolen
mov r8d, 6
call fcn.14005a964
cmp al, r13b
je 0x1400b8f55
mov byte [rsp + 0x78], bpl
jmp 0x1400b91c2
lea rdx, [rsp + 0x218]
lea rcx, str._bin
mov r8d, 4
call fcn.14005a964
cmp al, r13b
je 0x1400b8f7c
mov r12b, bpl
jmp 0x1400b91c2
lea rdx, [rsp + 0x218]
lea rcx, str._free
mov r8d, 5
call fcn.14005aa40
cmp al, r13b
jne 0x1400b92a7
lea rdx, [rsp + 0x218]
lea rcx, [0x1400fc85c]
mov r8d, 3
call fcn.14005aa40
cmp al, r13b
je 0x1400b9124
mov rcx, qword [rsp + 0x218]
mov r9d, 9
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0xb0], rcx
cmp ax, r13w
je 0x1400b9015
lea edx, [r9 + 0x17]
lea r14d, [r9 + 4]
cmp r9w, ax
ja 0x1400b8ff8
cmp ax, r14w
jbe 0x1400b9012
cmp dx, ax
je 0x1400b9012
add rcx, 2
mov qword [rsp + 0x218], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400b8fec
mov r14, r13
lea rcx, [rsp + 0x218]
call fcn.14005044c
mov eax, 0x3f
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0xf0], r13
cmp ax, word [r8]
jne 0x1400b90a9
lea rdx, [r8 + 2]
mov qword [rsp + 0x180], rdx
mov rcx, rdx
movzx eax, word [rdx]
cmp ax, r13w
je 0x1400b9084
mov ebx, 0xd
lea r8d, [rbx + 0x13]
cmp r9w, ax
ja 0x1400b9069
cmp ax, bx
jbe 0x1400b907c
cmp r8w, ax
je 0x1400b907c
add rcx, 2
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400b905e
mov rbx, qword [rsp + 0x120]
cmp word [rcx], r13w
je 0x1400b908e
mov word [rcx], r13w
lea r8, [rsp + 0xf0]
xor r9d, r9d
mov rcx, rsi
call fcn.140060818
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0xb0]
call fcn.1400ab880
mov rsi, qword [rsp + 0xa8]
cmp rsi, 0xffffffffffffffff
je 0x1400b910a
cmp rsi, r13
je 0x1400b910a
lea rdx, [rsp + 0x120]
mov rcx, rsi
mov qword [rsp + 0x180], r13
call fcn.1400507c4
mov rbx, qword [rsp + 0x120]
cmp rax, r13
je 0x1400b910a
mov r15, rsi
cmp rbx, r13
mov byte [rsp + 0x63], bpl
cmovne r15, rbx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0xf0]
call fcn.14005041c
mov rsi, qword [rsp + 0x210]
jmp 0x1400b91c2
mov r11, qword [rsp + 0x218]
lea rcx, str._err:
mov r8d, 5
mov rdx, r11
call fcn.140051960
cmp al, r13b
je 0x1400b91d8
mov eax, 0xa
add r11, rax
mov qword [rsp + 0x218], r11
mov qword [rsp + 0x188], r11
movzx eax, word [r11]
cmp ax, r13w
je 0x1400b91b5
mov ecx, 9
lea edx, [rcx + 0x17]
cmp cx, ax
ja 0x1400b9185
mov r8d, 0xd
cmp ax, r8w
jbe 0x1400b91a2
cmp dx, ax
je 0x1400b91a2
add r11, 2
mov qword [rsp + 0x218], r11
mov ax, word [r11]
cmp ax, r13w
je 0x1400b91b5
jmp 0x1400b9174
cmp word [r11], r13w
je 0x1400b91b5
mov word [r11], r13w
add qword [rsp + 0x218], 2
lea rcx, [rsp + 0x218]
call fcn.14005044c
mov rax, qword [rsp + 0x218]
mov ecx, 0x2d
cmp cx, word [rax]
je 0x1400b8d8c
mov rax, qword [rsp + 0xb8]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x218]
mov qword [rsp + 0x1a8], rax
mov al, r12b
mov r9d, 0x2c
neg al
mov qword [rsp + 0x218], rdi
sbb cx, cx
not cx
and cx, 3
mov word [rsp + 0x20], cx
mov rcx, rsi
call fcn.140049d84
mov rdx, qword [rsp + 0x218]
lea r8, [rsp + 0xc0]
xor r9d, r9d
mov rcx, rsi
mov byte [rsp + 0x20], bpl
call fcn.14006bbdc
mov r11, qword [rsp + 0xc0]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x218], r11
cmp r15, r13
jne 0x1400b9349
cmp word [rax], r13w
jne 0x1400b9349
lea rcx, [rsp + 0xc0]
call fcn.14005041c
lea rcx, [rsp + 0xb8]
call fcn.14005041c
cmp rbx, r13
je 0x1400b929b
cmp rbx, 0xffffffffffffffff
je 0x1400b929b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, 0xffffffff80070057
jmp 0x1400bab7b
mov rcx, qword [rsp + 0x218]
mov qword [rsp + 0xd8], rcx
movzx eax, word [rcx]
cmp ax, r13w
je 0x1400b92f9
mov edx, 9
lea ebx, [rdx + 4]
lea r8d, [rdx + 0x17]
cmp dx, ax
ja 0x1400b92d6
cmp ax, bx
jbe 0x1400b92f1
cmp r8w, ax
je 0x1400b92f1
add rcx, 2
mov qword [rsp + 0x218], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400b92cc
mov rbx, qword [rsp + 0x120]
lea rcx, [rsp + 0x218]
call fcn.14005044c
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0xd8]
mov qword [rsp + 0x228], r13
call fcn.1400ab880
mov rcx, qword [rsp + 0x228]
cmp rcx, 0xffffffffffffffff
je 0x1400b9e9f
cmp rcx, r13
je 0x1400b9e9f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400b9e9f
mov ecx, 0x26
movzx edi, r12b
lea rdx, [rsp + 0x118]
cmp cx, word [rax]
lea r12d, [rcx + 6]
lea rcx, [rsp + 0x218]
cmove edi, ebp
xor r9d, r9d
mov r8d, r12d
mov dword [rsp + 0x88], edi
call fcn.140049fcc
mov r11, qword [rsp + 0x118]
cmp word [r11], r13w
je 0x1400b926d
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x218]
mov r9d, r12d
mov rcx, rsi
mov word [rsp + 0x20], r13w
call fcn.140049f48
mov r11, qword [rsp + 0x150]
cmp word [r11], r13w
je 0x1400b926d
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0x218]
mov r9d, r12d
mov rcx, rsi
mov qword [rsp + 0xf0], r13
mov word [rsp + 0x20], r13w
call fcn.140049f48
mov rsi, qword [rsp + 0x150]
lea eax, [r12 - 2]
mov qword [rsp + 0x98], rsi
lea ecx, [rax + 0x12]
cmp byte [rsp + 0x228], r13b
je 0x1400b9474
cmp byte [rsi], al
jne 0x1400b9474
add rsi, 2
mov byte [rsp + 0x228], 3
mov qword [rsp + 0x98], rsi
cmp cx, word [rsi]
jne 0x1400b9474
add rsi, 2
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xa8], rsi
call fcn.1400af4ec
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x98], rax
mov rdx, qword [rsp + 0x90]
lea rcx, str.DevicePhysicalMemory
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, r13d
sete r12b
mov byte [rsp + 0x62], r12b
cmp byte [rsp + 0x63], r13b
je 0x1400b94a5
cmp r15, r13
je 0x1400ba2f1
cmp byte [rsp + 0x228], r13b
je 0x1400b94c1
mov rax, qword [rsp + 0x108]
cmp word [rax], r13w
je 0x1400ba2f1
lea rcx, [rsp + 0x138]
call fcn.140057eb0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x140], r13
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x148], r13
cmp dil, r13b
jne 0x1400b9613
lea rcx, [rsp + 0xb0]
mov edx, ebp
call fcn.14006a52c
mov rdi, rax
cmp rax, r13
je 0x1400b9613
mov edx, 0x23
cmp dx, word [rax]
jne 0x1400b9613
mov rcx, qword [rsp + 0xb0]
mov rsi, qword [0x14010dd78]
movzx r12d, word [rax]
lea r15d, [rdx + 0xb]
mov word [rax], r13w
mov rbp, r13
cmp r15w, word [rcx]
jne 0x1400b9554
cmp word [rcx + 2], r13w
jne 0x1400b9554
mov rsi, qword [0x14010dd78]
jmp 0x1400b9571
cmp word [rcx], r13w
je 0x1400b9571
xor edx, edx
lea r8d, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edx, 0x23
mov rbp, rax
mov rsi, rax
mov word [rdi], r12w
add rdi, 2
mov eax, 0x20
mov dword [rsp + 0x7c], eax
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xa8], r13
cmp r15w, word [rdi]
jne 0x1400b95b0
mov word [rdi], dx
mov eax, 0x40
add rdi, 2
mov qword [rsp + 0xb0], rdi
mov dword [rsp + 0x7c], eax
cmp rsi, r13
je 0x1400b9600
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0xb0]
call fcn.1400b0524
mov rdx, qword [rsp + 0xa8]
lea r9, [rsp + 0x138]
mov r8, rax
movzx eax, byte [rsp + 0x7c]
mov rcx, rsi
mov dword [rsp + 0x7c], eax
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x20], rax
call fcn.14001b8a8
mov byte [rsp + 0x88], 2
cmp rbp, r13
je 0x1400b960e
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r12b, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], r13
mov qword [rsp + 0xd8], rcx
call fcn.1400190a4
lea rcx, [rsp + 0x90]
mov rdx, rax
call fcn.140062700
lea rcx, [rsp + 0xd8]
call fcn.14005041c
mov rcx, qword [rsp + 0x108]
mov qword [rsp + 0x108], r13
mov qword [rsp + 0xd8], rcx
call fcn.1400190a4
lea rcx, [rsp + 0x108]
mov rdx, rax
call fcn.140062700
lea rcx, [rsp + 0xd8]
call fcn.14005041c
mov rax, qword [rsp + 0x118]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x218]
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x1b8], r13
mov qword [rsp + 0x198], r13
mov qword [rsp + 0xa8], r13
call fcn.140066408
mov rax, qword [rsp + 0x218]
mov edi, 0x23
movabs rdx, 0x7fffffffffffffff
cmp word [rax], di
jne 0x1400b983a
add rax, 2
lea ecx, [rdi + 7]
mov qword [rsp + 0x218], rax
cmp cx, word [rax]
jne 0x1400b9719
add rax, 2
mov r14, rdx
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0x218], rax
jmp 0x1400b9746
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x218]
call fcn.140066408
mov r14, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0xc8], r14
cmp word [rax], di
jne 0x1400b983a
add rax, 2
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x218]
mov qword [rsp + 0x218], rax
call fcn.140066408
cmp eax, r13d
jle 0x1400b977f
movsxd r11, dword [rsp + 0x68]
mov qword [rsp + 0x1b0], r11
mov rax, qword [rsp + 0x218]
cmp word [rax], di
jne 0x1400b983a
add rax, 2
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x218]
mov qword [rsp + 0x218], rax
call fcn.140066408
cmp eax, r13d
jle 0x1400b97c0
movsxd rax, dword [rsp + 0x68]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x218]
cmp word [rax], di
jne 0x1400b983a
add rax, 2
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x218]
mov qword [rsp + 0x218], rax
call fcn.140066408
cmp eax, r13d
jle 0x1400b97fd
movsxd rax, dword [rsp + 0x68]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x218]
cmp word [rax], di
jne 0x1400b983a
add rax, 2
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x218]
mov qword [rsp + 0x218], rax
call fcn.140066408
cmp eax, r13d
jle 0x1400b983a
movsxd rax, dword [rsp + 0x68]
mov qword [rsp + 0xa8], rax
lea rcx, [rsp + 0x218]
call fcn.14005044c
mov rsi, r13
mov qword [rsp + 0x128], r13
cmp r12b, r13b
je 0x1400b98aa
mov rcx, qword [rsp + 0x118]
call fcn.140050400
lea rdx, [r14 + 0x10]
lea rcx, [rsp + 0x118]
call fcn.140057f90
mov rsi, qword [rsp + 0x118]
mov rdx, qword [rsp + 0xe8]
lea r8, [rsp + 0x128]
mov rcx, rsi
mov qword [rsp + 0x128], r14
call fcn.14001aae8
mov rcx, r13
mov byte [rsp + 0x88], 8
jmp 0x1400b98b2
mov rcx, qword [rsp + 0xe8]
mov rax, qword [rsp + 0x90]
mov edx, 0x75
mov qword [rsp + 0xf8], rcx
cmp dx, word [rax]
jne 0x1400b99d7
mov edx, 0x64
cmp dx, word [rax + 2]
jne 0x1400b99d7
mov edx, 0x3a
cmp dx, word [rax + 4]
jne 0x1400b99d7
lea r10, [rax + 6]
lea r9d, [rdx - 0x18]
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], r14
mov qword [rsp + 0x68], r10
mov byte [rsp + 0x88], 4
mov qword [rsp + 0xf8], r13
cmp r9w, word [r10]
jne 0x1400b992a
add r10, 2
mov qword [rsp + 0x68], r10
lea rcx, [rsp + 0x68]
call fcn.1400cfd44
mov rcx, qword [rsp + 0x68]
cmp rcx, r10
je 0x1400b994f
cmp word [rcx - 2], r9w
jne 0x1400b994f
mov word [rcx - 2], r13w
mov rcx, qword [rsp + 0x68]
cmp dx, word [rcx]
jne 0x1400b9966
mov word [rcx], r13w
mov rcx, qword [rsp + 0x68]
add rcx, 2
mov qword [rsp + 0x68], rcx
mov r8, rcx
cmp r9w, word [rcx]
jne 0x1400b9991
lea r8, [rcx + 2]
add rcx, 2
mov qword [rsp + 0x68], rcx
cmp r9w, word [rcx]
jne 0x1400b998b
mov word [rcx], r13w
mov rcx, qword [rsp + 0x68]
cmp word [rcx], r13w
jne 0x1400b9973
lea rax, [rsp + 0x158]
lea rdx, [rsp + 0x138]
mov r9d, 0x10000
mov rcx, r10
mov qword [rsp + 0x20], rax
call fcn.14004a95c
mov r11, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x148]
mov rsi, qword [rsp + 0x138]
mov qword [rsp + 0x128], r11
add rsi, rcx
lea rcx, [rsp + 0x80]
mov edx, 0x3c
call fcn.140058200
lea rcx, [rsp + 0x168]
call fcn.14005818c
mov cl, byte [rsp + 0x228]
lea rdx, [rsp + 0x168]
mov al, cl
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], r13
and al, 2
mov dword [rsp + 0x7c], r13d
mov r12, 0xffffffff80070057
neg al
mov byte [rsp + 0x61], r13b
mov r14, r13
sbb rax, rax
or rbp, 0xffffffffffffffff
mov qword [rsp + 0xb0], r13
and rax, rdx
mov qword [rsp + 0xd0], r13
mov rdi, r13
mov qword [rsp + 0xe8], r13
mov r15, r13
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x110], r13
cmp cl, r13b
je 0x1400b9c89
mov rdx, qword [rsp + 0x108]
lea eax, [rbp + 0x2b]
cmp ax, word [rdx]
jne 0x1400b9bbf
lea eax, [rbp + 0x27]
add rdx, 2
cmp word [rdx], ax
je 0x1400b9b0d
mov rax, qword [rsp + 0x210]
test byte [rax + 0xd], 0x11
jne 0x1400b9b0d
lea r8, [rsp + 0xd0]
xor r9d, r9d
mov rcx, rax
call fcn.140060818
mov rax, qword [rsp + 0xd0]
mov rcx, rax
mov qword [rsp + 0x110], rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r15, eax
add r15, r15
cmp r15, r13
mov qword [rsp + 0xa0], r15
jg 0x1400b9c89
mov r8, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x210]
lea r9, str._I64d
mov rdx, rbp
call fcn.14005b13c
jmp 0x1400ba4af
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x210]
add rdx, 2
or r9d, 0xffffffff
xor r8d, r8d
mov qword [rsp + 0x20], r13
call fcn.140016268
mov qword [rsp + 0xd8], rax
cmp rax, r13
jne 0x1400b9b5b
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400b9ae9
mov r15, qword [rax + 0x18]
movabs rax, 0x3fffffffffffffff
and r15, rax
mov qword [rsp + 0xa0], r15
jle 0x1400b9b4c
lea rcx, [rsp + 0xd0]
mov rdx, r15
call fcn.14005828c
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
mov rdx, qword [rdx + 8]
mov r8, r15
mov rcx, rax
mov qword [rsp + 0x110], rax
call fcn.14001aa7c
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400b9c89
mov eax, 3
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0xe8]
mov r8d, 0x80000000
mov r9d, eax
mov qword [rsp + 0x20], r13
call fcn.140003568
mov rdi, qword [rsp + 0xe8]
cmp rdi, r13
jne 0x1400b9c3f
mov rdx, qword [rsp + 0x108]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0xe8]
mov r9d, 3
mov r8d, 0x80000000
mov dword [rsp + 0x28], 0x2000003
mov qword [rsp + 0x20], r13
call fcn.140003568
mov rdi, qword [rsp + 0xe8]
cmp rdi, r13
je 0x1400b9c89
xor edx, edx
mov rcx, rdi
lea r8d, [rdx + 2]
call fcn.14005184c
mov rcx, rdi
mov r15, rax
mov eax, 0x20000000
cmp r15, rax
cmovg r15, rax
xor r9d, r9d
lea r8d, [r9 + 2]
mov rdx, r15
mov qword [rsp + 0xa0], r15
call fcn.1400c1e64
mov r14, rax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x110], rax
cmp byte [rsp + 0x88], r13b
je 0x1400ba008
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x70]
call fcn.14005818c
mov ebp, dword [rsp + 0x88]
cmp bpl, 1
jne 0x1400b9d20
mov rsi, qword [rsp + 0x210]
lea rdx, [rsp + 0x90]
xor r8d, r8d
mov rcx, rsi
call fcn.140003700
mov rdx, qword [rsp + 0x90]
or r9d, 0xffffffff
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], r13
call fcn.140016268
cmp rax, r13
je 0x1400b9d16
mov r8, qword [rax + 0x18]
mov rsi, qword [rax + 8]
movabs rax, 0x3fffffffffffffff
and r8, rax
mov qword [rsp + 0x128], r8
jmp 0x1400b9d28
mov rsi, qword [rsp + 0x70]
jmp 0x1400b9feb
mov r8, qword [rsp + 0x128]
cmp bpl, 2
jne 0x1400b9d46
mov r8, qword [rsp + 0x140]
mov rsi, qword [rsp + 0x138]
mov qword [rsp + 0x128], r8
mov rdx, qword [rsp + 0xf8]
mov rax, r8
movsxd rcx, edx
cmp rcx, r8
cmovg rcx, r8
add rsi, rcx
sub rax, rcx
mov rcx, qword [rsp + 0xc8]
cmp rcx, rax
movsxd r15, ecx
mov qword [rsp + 0xd8], rsi
cmovg r15, rax
cmp byte [rsp + 0x228], r13b
je 0x1400b9e02
mov r11, qword [rsp + 0xf0]
mov r9, qword [rsp + 0x198]
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x58], r11
mov r11, qword [rsp + 0xa8]
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], r11d
mov dword [rsp + 0x40], r9d
mov r9, qword [rsp + 0x110]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x30], rdx
xor edx, edx
mov byte [rsp + 0x28], r13b
mov dword [rsp + 0x20], eax
call fcn.140060048
lea rcx, [rsp + 0x70]
mov rbp, rax
call fcn.14005041c
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400ba488
cmp byte [rsp + 0x60], r13b
je 0x1400b9eda
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x210]
mov r9d, r15d
mov r8, rsi
mov byte [rsp + 0x28], r13b
mov qword [rsp + 0x20], r13
call fcn.140066cf8
lea rcx, [rsp + 0x70]
call fcn.14005041c
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, r13
je 0x1400b9e5d
cmp rdi, 0xffffffffffffffff
je 0x1400b9e5d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
call fcn.14005041c
cmp r14, r13
je 0x1400b9e78
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea rcx, [rsp + 0x168]
call fcn.14005041c
lea rcx, [rsp + 0x80]
call fcn.14005041c
lea rcx, [rsp + 0x138]
call fcn.14005041c
lea rcx, [rsp + 0xc0]
call fcn.14005041c
lea rcx, [rsp + 0xb8]
call fcn.14005041c
cmp rbx, r13
je 0x1400bab7b
cmp rbx, 0xffffffffffffffff
je 0x1400bab7b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400bab7b
movsxd rcx, dword [rsp + 0xe0]
lea r8d, [r15 + r15*4 + 0xa]
cmp ecx, r13d
jle 0x1400b9f07
mov rax, r15
cqo
idiv rcx
lea ecx, [rax + 1]
mov eax, dword [rsp + 0xe4]
add eax, 2
imul ecx, eax
add r8d, ecx
lea eax, [r8 + 6]
lea rcx, [rsp + 0x70]
movsxd rdx, eax
call fcn.14005828c
sub r15, 1
mov rsi, qword [rsp + 0x70]
mov rbp, rsi
mov rcx, rsi
js 0x1400b9fe7
mov r12, qword [rsp + 0xd8]
movsxd rbx, dword [rsp + 0xe0]
mov r14, qword [rsp + 0x1a8]
movsxd rdi, dword [rsp + 0xe4]
mov rsi, r13
cmp ebx, r13d
jle 0x1400b9f9d
mov rax, rsi
cqo
idiv rbx
cmp rdx, r13
jne 0x1400b9f9d
cmp rsi, r13
jle 0x1400b9f7d
mov eax, 0xd
mov word [rbp], ax
mov eax, 0xa
add rbp, 4
mov word [rbp - 2], ax
cmp edi, r13d
je 0x1400b9f9d
lea rdx, str._8X_s
mov r9, r14
mov r8, rsi
mov rcx, rbp
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbp, [rbp + rdi*2]
movzx r8d, byte [r12]
lea rdx, str.0x_02X
mov rcx, rbp
call qword [sym.imp.USER32.dll_wsprintfW]
mov eax, 1
add rbp, 0xa
add r12, rax
add rsi, rax
sub r15, rax
lea rcx, [rbp - 2]
jns 0x1400b9f50
mov rbx, qword [rsp + 0x120]
mov rdi, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x70]
mov r14, qword [rsp + 0xb0]
mov word [rcx], r13w
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x210]
mov r8, rsi
call fcn.140057738
jmp 0x1400b9e32
cmp byte [rsp + 0x62], r13b
jne 0x1400ba09a
lea rdx, [rsp + 0x7c]
lea rcx, [rsp + 0x90]
call fcn.14006a320
cmp al, r13b
mov byte [rsp + 0x61], al
jge 0x1400ba09a
cmp byte [rsp + 0x228], r13b
jne 0x1400ba488
mov ebp, r12d
cmp rdi, r13
je 0x1400ba053
cmp rdi, 0xffffffffffffffff
je 0x1400ba053
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
call fcn.14005041c
cmp r14, r13
je 0x1400ba06e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea rcx, [rsp + 0x168]
call fcn.14005041c
lea rcx, [rsp + 0x80]
call fcn.14005041c
lea rcx, [rsp + 0x138]
call fcn.14005041c
jmp 0x1400ba2f1
or rax, 0xffffffffffffffff
mov qword [rsp + 0x158], r13
mov dword [rsp + 0x88], r13d
mov rsi, r13
mov qword [rsp + 0x68], r13
mov rbp, rax
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xd8], rax
cmp byte [rsp + 0x63], r13b
je 0x1400ba0df
mov rcx, qword [rsp + 0x70]
xor r8d, r8d
xor edx, edx
call fcn.14005184c
mov rax, qword [rsp + 0x70]
cmp rax, r13
jne 0x1400ba24e
mov rdx, qword [rsp + 0x90]
mov eax, 3
mov qword [rsp + 0x38], r13
mov esi, 0x2000000
lea rcx, [rsp + 0x68]
mov r9d, eax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], eax
mov r8d, 0x80000000
mov qword [rsp + 0x20], r13
call fcn.140003568
mov r12, rax
mov qword [rsp + 0x70], rax
cmp rax, r13
jne 0x1400ba16c
mov rdx, qword [rsp + 0x90]
mov eax, 3
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x68]
mov r9d, eax
mov r8d, 0x80000000
mov qword [rsp + 0x20], r13
call fcn.140003568
mov r12, rax
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x180]
cmp rax, r13
je 0x1400ba232
cmp r12, r13
je 0x1400ba22b
mov rcx, qword [rsp + 0x210]
lea r9, [0x1400f54e0]
mov r8, rax
mov rdx, r12
call fcn.14005b13c
mov rdx, qword [rsp + 0x90]
mov eax, 3
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x68]
mov r9d, eax
mov r8d, 0x80000000
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x20], r13
call fcn.140003568
mov rsi, qword [rsp + 0x68]
cmp rsi, r13
jne 0x1400ba221
mov rdx, qword [rsp + 0x90]
mov eax, 3
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x2000000
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x68]
mov r9d, eax
mov r8d, 0x80000000
mov qword [rsp + 0x20], r13
call fcn.140003568
mov rsi, qword [rsp + 0x68]
cmp rsi, r13
je 0x1400ba237
mov r12, rsi
mov qword [rsp + 0x70], rsi
jmp 0x1400ba237
mov rsi, qword [rsp + 0x68]
jmp 0x1400ba23c
mov rsi, qword [rsp + 0x68]
cmp r12, r13
jne 0x1400ba249
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x70]
mov r12b, byte [rsp + 0x61]
cmp r12b, 0x11
jne 0x1400ba351
mov edx, dword [rsp + 0x7c]
lea r8, [rsp + 0xa0]
mov rcx, rax
call fcn.14006a204
cmp rax, r13
mov qword [rsp + 0x158], rax
jge 0x1400ba347
cmp rsi, r13
je 0x1400ba296
cmp rsi, 0xffffffffffffffff
je 0x1400ba296
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x1400ba2aa
cmp rdi, 0xffffffffffffffff
je 0x1400ba2aa
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
call fcn.14005041c
cmp r14, r13
je 0x1400ba2c5
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea rcx, [rsp + 0x168]
call fcn.14005041c
lea rcx, [rsp + 0x80]
call fcn.14005041c
lea rcx, [rsp + 0x138]
call fcn.14005041c
mov ebp, 1
mov r8, qword [rsp + 0x188]
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x210]
call fcn.140057738
lea rcx, [rsp + 0xc0]
movsxd rdi, ebp
call fcn.14005041c
lea rcx, [rsp + 0xb8]
call fcn.14005041c
cmp rbx, r13
je 0x1400ba33f
cmp rbx, 0xffffffffffffffff
je 0x1400ba33f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, rdi
jmp 0x1400bab7b
mov rbp, qword [rsp + 0xa0]
jmp 0x1400ba37e
cmp rax, r13
je 0x1400ba379
mov rcx, rax
cmp r12b, r13b
jne 0x1400ba36e
xor edx, edx
lea r8d, [rdx + 2]
call fcn.14005184c
mov rbp, rax
jmp 0x1400ba39c
mov dl, r12b
call fcn.14005605c
mov rbp, rax
cmp r12b, r13b
je 0x1400ba39c
mov r10, qword [rsp + 0x70]
cmp r10, r13
je 0x1400ba3a1
mov edx, 0x200
mov rcx, r10
call fcn.140054a7c
mov dword [rsp + 0x100], eax
mov r10, qword [rsp + 0x70]
cmp byte [rsp + 0x228], r13b
je 0x1400ba53e
mov rcx, qword [rsp + 0x1b8]
or qword [rsp + 0x228], 0xffffffffffffffff
mov rax, qword [rsp + 0x110]
cmp rcx, r13
jle 0x1400ba3d3
add rax, rcx
sub r15, rcx
mov rcx, qword [rsp + 0x1b0]
cmp rcx, r13
jle 0x1400ba3e7
cmp r15, rcx
cmovg r15, rcx
mov r12d, r13d
cmp r10, r13
je 0x1400ba46c
cmp rax, r13
je 0x1400ba46c
cmp r15, r13
jle 0x1400ba46c
mov r9, qword [rsp + 0x198]
cmp r9, r13
jl 0x1400ba46c
mov rcx, qword [rsp + 0xc8]
mov r11, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
mov qword [rsp + 0x58], r11
mov r11, qword [rsp + 0xa8]
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x48], r11d
mov dword [rsp + 0x40], r9d
mov qword [rsp + 0x38], rcx
mov cl, byte [rsp + 0x61]
mov qword [rsp + 0x30], rdx
mov r9, rax
mov byte [rsp + 0x28], cl
mov rcx, qword [rsp + 0x130]
mov r8, rbp
mov rdx, r10
mov dword [rsp + 0x20], r15d
call fcn.140060048
mov rbp, rax
jmp 0x1400ba474
mov rbp, qword [rsp + 0x228]
cmp rsi, r13
je 0x1400ba488
cmp rsi, 0xffffffffffffffff
je 0x1400ba488
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rsp + 0x168]
cmp word [r8], r13w
je 0x1400b9ae9
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x210]
call fcn.140057738
movsxd rsi, r12d
cmp rdi, r13
je 0x1400ba4c6
cmp rdi, 0xffffffffffffffff
je 0x1400ba4c6
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
call fcn.14005041c
cmp r14, r13
je 0x1400ba4e1
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea rcx, [rsp + 0x168]
call fcn.14005041c
lea rcx, [rsp + 0x80]
call fcn.14005041c
lea rcx, [rsp + 0x138]
call fcn.14005041c
lea rcx, [rsp + 0xc0]
call fcn.14005041c
lea rcx, [rsp + 0xb8]
call fcn.14005041c
cmp rbx, r13
je 0x1400ba536
cmp rbx, 0xffffffffffffffff
je 0x1400ba536
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, rsi
jmp 0x1400bab7b
mov r12d, r13d
cmp r10, r13
je 0x1400baa30
mov rax, qword [rsp + 0xf8]
cmp rax, r13
jl 0x1400baa30
cmp rax, rbp
jg 0x1400baa30
mov cl, byte [rsp + 0x61]
cmp cl, r13b
jne 0x1400ba57f
cmp rbp, r13
jg 0x1400ba595
mov rbp, qword [rsp + 0x80]
jmp 0x1400baa81
cmp rbp, r13
movabs rcx, 0x7fffffffffffffff
cmovl rbp, rcx
cmp rbp, r13
jle 0x1400ba5b1
sub rbp, rax
mov rax, qword [rsp + 0xc8]
cmp rbp, rax
cmovl rax, rbp
mov qword [rsp + 0xc8], rax
jmp 0x1400ba5b9
mov rax, qword [rsp + 0xc8]
movsxd rcx, dword [rsp + 0xe0]
lea r12, [rax + rax*4 + 0xa]
cmp ecx, r13d
jle 0x1400ba5ef
cqo
idiv rcx
mov ecx, dword [rsp + 0xe4]
add ecx, 2
movsxd rdx, ecx
inc rax
imul rax, rdx
add r12, rax
mov rax, qword [rsp + 0xc8]
cmp byte [rsp + 0x60], r13b
je 0x1400ba604
inc rax
cqo
sub rax, rdx
sar rax, 1
mov r12, rax
lea rdx, [r12 + 4]
lea rcx, [rsp + 0x80]
call fcn.14005828c
mov rbp, qword [rsp + 0x80]
cmp rbp, r13
jne 0x1400ba6ca
cmp rsi, r13
je 0x1400ba63b
cmp rsi, 0xffffffffffffffff
je 0x1400ba63b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x1400ba64f
cmp rdi, 0xffffffffffffffff
je 0x1400ba64f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
call fcn.14005041c
cmp r14, r13
je 0x1400ba66a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea rcx, [rsp + 0x168]
call fcn.14005041c
lea rcx, [rsp + 0x80]
call fcn.14005041c
lea rcx, [rsp + 0x138]
call fcn.14005041c
lea rcx, [rsp + 0xc0]
call fcn.14005041c
lea rcx, [rsp + 0xb8]
call fcn.14005041c
cmp rbx, r13
je 0x1400ba6bf
cmp rbx, 0xffffffffffffffff
je 0x1400ba6bf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13d, 1
jmp 0x1400bab7b
mov qword [rsp + 0x218], rbp
mov word [rbp], r13w
mov r15, qword [rsp + 0x218]
mov qword [rsp + 0x130], r15
cmp byte [rsp + 0x60], r13b
je 0x1400ba707
mov rcx, qword [rsp + 0xc8]
mov byte [rcx + r15], r13b
mov rax, qword [rsp + 0x218]
mov word [rax + r12*2], r13w
mov r9, qword [rsp + 0xf8]
mov dx, r13w
add r9, qword [rsp + 0x158]
mov qword [rsp + 0xa0], rdx
cmp byte [rsp + 0x61], r13b
je 0x1400ba744
movsxd r12, dword [rsp + 0x100]
mov rax, r9
cqo
idiv r12
mov qword [rsp + 0xa0], rdx
jmp 0x1400ba74c
mov r12d, dword [rsp + 0x100]
mov rcx, qword [rsp + 0x70]
movzx eax, dx
xor r8d, r8d
sub r9, rax
mov rdx, r9
call fcn.14005184c
lea r11d, [r12*4 + 0x100000]
lea rcx, [rsp + 0xf0]
movsxd rdx, r11d
call fcn.140057f14
cmp qword [rsp + 0xc8], r13
mov dword [rsp + 0x7c], r13d
mov qword [rsp + 0xa8], r13
mov dword [rsp + 0x228], r13d
jle 0x1400ba9d2
mov rbx, qword [rsp + 0xa0]
mov sil, byte [rsp + 0x61]
mov rdi, qword [rsp + 0xc8]
mov r14, qword [rsp + 0x70]
movzx ecx, bx
mov r12d, 0x100000
sub r12d, ecx
movsxd rax, r12d
cmp rax, rdi
cmovg r12d, edi
lea eax, [r12 + rcx]
cmp sil, r13b
je 0x1400ba7e7
mov ecx, dword [rsp + 0x100]
lea eax, [rax + rcx - 1]
cdq
idiv ecx
imul eax, ecx
mov rdx, qword [rsp + 0xf0]
movzx ecx, bx
lea r9, [rsp + 0x7c]
add rcx, qword [rsp + 0xf0]
mov r8d, eax
mov dword [rsp + 0x7c], r13d
mov qword [rsp + 0x158], rcx
mov rcx, r14
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov bx, r13w
mov qword [rsp + 0xa0], rbx
cmp byte [rsp + 0x60], r13b
je 0x1400ba88f
mov rdx, qword [rsp + 0x158]
movsxd r12, r12d
mov rcx, r15
mov r8, r12
call fcn.14001aac4
add r15, r12
sub rdi, r12
mov qword [rsp + 0x130], r15
mov r10, qword [rsp + 0x218]
cmp rdi, r13
jg 0x1400ba7b7
mov rbx, qword [rsp + 0x120]
mov rdi, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x80]
mov r14, qword [rsp + 0xb0]
jmp 0x1400ba9da
sub r12d, 1
js 0x1400ba854
mov r10, qword [rsp + 0x218]
mov rbp, qword [rsp + 0x158]
mov r8, qword [rsp + 0xa8]
movsxd rsi, dword [rsp + 0xe0]
mov r14, qword [rsp + 0x1a8]
movsxd rbx, dword [rsp + 0xe4]
lea ecx, [r12 + 1]
sub rdi, rcx
mov qword [rsp + 0xc8], rdi
mov edi, 0xa
lea r15d, [rdi + 3]
cmp esi, r13d
jle 0x1400ba958
mov rax, r8
cqo
idiv rsi
cmp rdx, r13
jne 0x1400ba958
cmp r8, r13
jle 0x1400ba924
mov word [r10], r15w
mov rax, qword [rsp + 0x218]
add rax, 2
mov qword [rsp + 0x218], rax
mov word [rax], di
mov r10, qword [rsp + 0x218]
add r10, 2
mov qword [rsp + 0x218], r10
cmp ebx, r13d
je 0x1400ba958
mov r8d, dword [rsp + 0x228]
lea rdx, str._8X_s
mov r9, r14
mov rcx, r10
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [rsp + 0x218]
lea r10, [rax + rbx*2]
mov qword [rsp + 0x218], r10
movzx r8d, byte [rbp]
lea rdx, str.0x_02X
mov rcx, r10
call qword [sym.imp.USER32.dll_wsprintfW]
mov r10, qword [rsp + 0x218]
mov r8, qword [rsp + 0xa8]
mov eax, 1
add r10, rdi
add dword [rsp + 0x228], eax
add r8, rax
add rbp, rax
sub r12d, eax
mov qword [rsp + 0x218], r10
mov qword [rsp + 0xa8], r8
jns 0x1400ba8de
mov r15, qword [rsp + 0x130]
mov rbx, qword [rsp + 0xa0]
mov sil, byte [rsp + 0x61]
mov rdi, qword [rsp + 0xc8]
mov r14, qword [rsp + 0x70]
jmp 0x1400ba85c
mov r10, qword [rsp + 0x218]
mov al, byte [rsp + 0x60]
cmp r10, rbp
je 0x1400ba9fd
cmp al, r13b
je 0x1400ba9ed
mov byte [r15], r13b
jmp 0x1400ba9fd
sub r10, 2
mov qword [rsp + 0x218], r10
mov word [r10], r13w
cmp al, r13b
je 0x1400baa1e
xor edx, edx
mov rax, r15
mov rcx, r15
sub rax, rbp
lea r8d, [rdx + 4]
mov qword [rsp + 0xd8], rax
call fcn.1400d4180
lea rcx, [rsp + 0xf0]
call fcn.14005041c
mov r12d, r13d
jmp 0x1400baa74
cmp byte [rsp + 0x78], r13b
jne 0x1400baa58
cmp rbp, r13
jge 0x1400baa9b
cmp byte [rsp + 0x60], r13b
jne 0x1400baa58
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x80]
call fcn.140062700
mov rbp, qword [rsp + 0x80]
mov eax, dword [rsp + 0x88]
mov r12d, 1
cmp eax, r13d
cmovne r12d, eax
mov rax, qword [rsp + 0xd8]
cmp rax, r13
jge 0x1400baab0
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x210]
mov r8, rbp
call fcn.140057738
jmp 0x1400baadd
mov rdx, rbp
mov rbp, qword [rsp + 0x80]
mov rcx, rbp
call fcn.1400c3bc8
jmp 0x1400baa60
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x80]
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x210]
mov r9d, eax
mov r8, rbp
call fcn.140066cf8
movsxd rbp, r12d
cmp rsi, r13
je 0x1400baaf4
cmp rsi, 0xffffffffffffffff
je 0x1400baaf4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x1400bab08
cmp rdi, 0xffffffffffffffff
je 0x1400bab08
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
call fcn.14005041c
cmp r14, r13
je 0x1400bab23
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea rcx, [rsp + 0x168]
call fcn.14005041c
lea rcx, [rsp + 0x80]
call fcn.14005041c
lea rcx, [rsp + 0x138]
call fcn.14005041c
lea rcx, [rsp + 0xc0]
call fcn.14005041c
lea rcx, [rsp + 0xb8]
call fcn.14005041c
cmp rbx, r13
je 0x1400bab78
cmp rbx, 0xffffffffffffffff
je 0x1400bab78
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, rbp
lea rcx, [rsp + 0x190]
call fcn.14005041c
lea rcx, [rsp + 0x108]
call fcn.14005041c
lea rcx, [rsp + 0x150]
call fcn.14005041c
lea rcx, [rsp + 0x118]
call fcn.14005041c
lea rcx, [rsp + 0x90]
call fcn.14005041c
lea rcx, [rsp + 0x1c8]
call fcn.14005041c
lea rcx, [rsp + 0x1a0]
call fcn.14005041c
lea rcx, [rsp + 0x1c0]
call fcn.14005041c
mov rbx, qword [rsp + 0x220]
mov rax, r13
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret