Function at 0x14009a470
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xe0
xor esi, esi
mov r11, rdx
mov ebp, 0xffff0000
lea r14d, [rsi + 9]
mov bl, sil
mov r13, rcx
mov byte [rsp + 0x40], sil
mov qword [rsp + 0x48], rbp
mov dword [rsp + 0x50], esi
mov byte [rsp + 0x138], bl
lea edi, [rsi + 5]
lea edx, [rsi + 0x20]
lea r12d, [rsi + 1]
lea ecx, [rsi + 0xd]
lea r15d, [rsi + 4]
cmp r14w, word [r11]
ja 0x14009a4d7
cmp word [r11], cx
jbe 0x14009a4dd
cmp dx, word [r11]
jne 0x14009a4ee
mov ebp, esi
mov dword [rsp + 0x50], r12d
mov qword [rsp + 0x48], rbp
jmp 0x14009a65c
lea rcx, [0x140119884]
mov r8d, r15d
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a514
mov ebp, 0x4b0
mov qword [rsp + 0x48], rbp
jmp 0x14009a636
lea rcx, [0x140119878]
mov r8d, 8
mov rdx, r11
call fcn.140058d5c
cmp al, sil
jne 0x14009a505
lea rcx, [0x14011986c]
mov r8d, edi
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a54c
mov ebp, 0x4b1
jmp 0x14009a50a
lea rcx, [0x140119860]
mov r8d, r14d
mov rdx, r11
call fcn.140058d5c
cmp al, sil
jne 0x14009a545
lea rcx, [0x140119854]
mov r8d, edi
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a57e
mov ebp, esi
jmp 0x14009a50a
lea rcx, [0x14011984c]
mov r8d, r15d
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a59f
mov ebp, 0x3a8
jmp 0x14009a50a
lea rcx, [0x140119844]
mov r8d, edi
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a5c0
mov ebp, 0x3b6
jmp 0x14009a50a
lea rcx, [0x14011983c]
mov r8d, edi
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a5e1
mov ebp, 0xfde9
jmp 0x14009a50a
lea rcx, [0x140119834]
mov r8d, edi
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x14009a602
mov ebp, 0xfde8
jmp 0x14009a50a
mov eax, 0x2d
cmp ax, word [r11]
jne 0x14009a636
lea rcx, [r11 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r14w
ja 0x14009a636
mov r11, rcx
mov qword [rsp + 0x128], rcx
call fcn.140060d9c
mov rbp, rax
mov qword [rsp + 0x48], rax
mov edx, 0x20
lea ecx, [rdx - 0x13]
jmp 0x14009a65c
cmp r14w, ax
ja 0x14009a64b
cmp ax, cx
jbe 0x14009a665
cmp dx, ax
je 0x14009a665
add r11, 2
mov qword [rsp + 0x128], r11
movzx eax, word [r11]
cmp ax, si
jne 0x14009a640
lea rcx, [rsp + 0x128]
call fcn.140057738
lea rdx, [rsp + 0x128]
lea rcx, [0x14011982c]
mov r8d, r15d
call fcn.1400623c0
lea rdx, [0x14010d568]
lea rcx, [rsp + 0x90]
neg al
sbb r15b, r15b
and r15b, 2
call fcn.14006ac98
lea rdx, [0x140119818]
lea rcx, [rsp + 0x70]
call fcn.14006ac98
mov edi, 0x2c
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x128]
mov r9d, edi
mov rcx, r13
mov r14, r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x78], rsi
mov word [rsp + 0x20], si
call fcn.140050d3c
mov r9, qword [rsp + 0x90]
lea rcx, [0x140119810]
mov rdx, r9
mov qword [rsp + 0x128], rax
call fcn.140058df4
cmp al, sil
je 0x14009a733
mov bl, 9
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x138], bl
lea rcx, [0x14011980c]
mov rdx, r9
call fcn.140058df4
cmp al, sil
je 0x14009a80f
mov qword [rsp + 0x78], r12
or bl, r12b
mov byte [rsp + 0x138], bl
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0xc0], rsi
call fcn.14005fa18
mov rdx, qword [rsp + 0x128]
lea r8, [rsp + 0xb8]
xor r9d, r9d
mov rcx, r13
mov byte [rsp + 0x20], r12b
call fcn.1400742a0
mov r11, qword [rsp + 0xb8]
mov qword [rsp + 0x128], r11
cmp word [r11], di
jne 0x14009a92c
lea rcx, [rsp + 0x58]
call fcn.14005fa18
add qword [rsp + 0x128], 2
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x128]
mov r8d, edi
call fcn.140063854
mov r11, qword [rsp + 0x58]
lea rcx, [0x140119808]
mov rdx, r11
mov qword [rsp + 0x68], r11
call fcn.140058df4
cmp al, sil
je 0x14009a850
lea rbx, [0x140119804]
mov byte [rsp + 0x40], 2
mov qword [rsp + 0xc0], rbx
mov bl, byte [rsp + 0x138]
jmp 0x14009a8f3
cmp word [r9], si
je 0x14009a750
lea rcx, [0x14010eb9c]
mov rdx, r9
call fcn.140058df4
cmp al, sil
jne 0x14009a750
lea rcx, [0x14010e324]
mov rdx, r9
call fcn.140058df4
cmp al, sil
je 0x14009a75a
mov bl, 2
jmp 0x14009a753
lea rcx, [0x140119800]
mov rdx, r11
call fcn.140058df4
cmp al, sil
je 0x14009a86e
mov byte [rsp + 0x40], 3
jmp 0x14009a8f3
lea rcx, [0x14011239c]
mov rdx, r11
call fcn.140058df4
cmp al, sil
je 0x14009a898
lea rax, [0x1401197fc]
mov byte [rsp + 0x40], r12b
mov qword [rsp + 0xc0], rax
jmp 0x14009a8f3
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x68]
call fcn.14006eb98
mov rax, qword [rsp + 0x68]
mov r11d, 0x2b
cmp r11w, word [rax]
jne 0x14009a8e3
add rax, 2
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x68], rax
call fcn.14006eb98
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x60], rax
mov r14, qword [rsp + 0x80]
mov qword [rsp + 0x98], r14
lea rcx, [rsp + 0x58]
call fcn.140057768
mov r11, qword [rsp + 0x128]
cmp word [r11], di
jne 0x14009a92c
add r11, 2
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x128]
mov r8d, edi
mov qword [rsp + 0x128], r11
call fcn.140063854
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, r13
call fcn.140003980
lea rcx, [rsp + 0x58]
mov edx, 8
call fcn.14005f7a0
cmp ebp, esi
mov r13, qword [rsp + 0x58]
mov word [r13], si
jl 0x14009b736
lea rcx, [rsp + 0xa0]
call fcn.14005f73c
mov rax, qword [rsp + 0x90]
mov ecx, 0x75
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0xb0], rsi
mov edi, 0xfe
cmp cx, word [rax]
jne 0x14009abcc
mov ecx, 0x64
cmp cx, word [rax + 2]
jne 0x14009abcc
lea edx, [rcx - 0x2a]
cmp dx, word [rax + 4]
jne 0x14009abcc
add rax, 6
lea r9d, [rcx - 0x42]
mov byte [rsp + 0x138], 5
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x128]
mov word [rax], si
mov r10, qword [rsp + 0x48]
cmp r9w, word [r10]
jne 0x14009a9e5
add r10, 2
mov qword [rsp + 0x48], r10
lea rcx, [rsp + 0x48]
call fcn.1400e7958
mov rcx, qword [rsp + 0x48]
cmp rcx, r10
je 0x14009aa09
cmp word [rcx - 2], r9w
jne 0x14009aa09
mov word [rcx - 2], si
mov rcx, qword [rsp + 0x48]
cmp dx, word [rcx]
jne 0x14009aa1f
mov word [rcx], si
mov rcx, qword [rsp + 0x48]
add rcx, 2
mov qword [rsp + 0x48], rcx
mov r8, rcx
cmp r9w, word [rcx]
jne 0x14009aa48
lea r8, [rcx + 2]
add rcx, 2
mov qword [rsp + 0x48], rcx
cmp r9w, word [rcx]
jne 0x14009aa43
mov word [rcx], si
mov rcx, qword [rsp + 0x48]
cmp word [rcx], si
jne 0x14009aa2c
lea rdx, [rsp + 0xa0]
mov r9d, 0x10000
mov rcx, r10
mov qword [rsp + 0x20], rsi
call fcn.140051bd4
mov rbx, qword [rsp + 0xa8]
cmp ebx, esi
mov r11, qword [rsp + 0xa0]
jle 0x14009aa8d
mov rax, qword [rsp + 0xb0]
lea r8, [r11 + rax]
mov qword [rsp + 0x128], r8
jmp 0x14009aa95
mov r8, qword [rsp + 0x128]
movsx edx, byte [r8]
mov rcx, rsi
cmp edx, 0xff
jne 0x14009aab4
movsx eax, byte [r8 + 1]
cmp eax, edi
jne 0x14009aab4
mov ebp, 0x4b0
jmp 0x14009aac9
cmp edx, edi
jne 0x14009aad0
movsx eax, byte [r8 + 1]
cmp eax, 0xff
jne 0x14009aad0
mov ebp, 0x4b1
mov ecx, 2
jmp 0x14009aafa
cmp edx, 0xef
jne 0x14009aafa
movsx eax, byte [r8 + 1]
cmp eax, 0xbb
jne 0x14009aafa
movsx eax, byte [r8 + 2]
cmp eax, 0xbf
jne 0x14009aafa
mov ebp, 0xfde9
mov ecx, 3
sub ebx, ecx
lea rdi, [rcx + r8]
cmp ebp, 0x4b1
jne 0x14009ab40
movsxd rdx, ebx
and rdx, 0xfffffffffffffffe
add rdx, rdi
cmp rdi, rdx
ja 0x14009ab32
mov cl, byte [rdi]
mov al, byte [rdi + 1]
mov byte [rdi], al
mov byte [rdi + 1], cl
add rdi, 2
cmp rdi, rdx
jbe 0x14009ab17
mov r8, qword [rsp + 0x128]
mov r15d, dword [rsp + 0x50]
or r15d, 4
jmp 0x14009ac55
cmp ebp, 0x4b0
je 0x14009ab32
mov r15d, dword [rsp + 0x50]
cmp r15d, esi
je 0x14009ab67
movsxd rdx, ebx
mov rcx, rdi
call fcn.140073778
mov r11, qword [rsp + 0xa0]
mov ebp, eax
movsxd rbx, ebx
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0x88], r11
lea rdx, [rbx + rbx + 0x20]
mov qword [rsp + 0xa0], rsi
call fcn.14005f81c
lea rcx, [rsp + 0xa0]
movsxd r9, ebp
mov r8, rbx
mov rdx, rdi
call fcn.14005fbd4
mov r11, qword [rsp + 0xa0]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x128], r11
call fcn.140057768
mov r8, qword [rsp + 0x128]
jmp 0x14009ab37
mov rax, qword [rsp + 0x70]
cmp word [rax], si
jne 0x14009ac18
lea rcx, [rsp + 0xa0]
call fcn.140057768
lea rcx, [rsp + 0x58]
call fcn.140057768
lea rcx, [rsp + 0xb8]
call fcn.140057768
lea rcx, [rsp + 0x70]
call fcn.140057768
lea rcx, [rsp + 0x90]
call fcn.140057768
xor eax, eax
jmp 0x14009b77f
mov r8, qword [rsp + 0x128]
cmp bl, r12b
jne 0x14009ac3b
mov eax, 0x2c
cmp word [r8], ax
je 0x14009ac3b
mov r12d, 0x80070057
jmp 0x14009b729
add r8, 2
mov qword [rsp + 0x128], r8
test r12b, bl
je 0x14009b0e4
mov r15d, dword [rsp + 0x50]
mov qword [rsp + 0x68], rsi
cmp qword [rsp + 0x78], rsi
je 0x14009aded
lea rcx, [rsp + 0x128]
call fcn.140057738
mov r8, qword [rsp + 0x128]
movzx eax, word [r8]
mov rdx, r8
cmp ax, si
je 0x14009accd
mov ecx, 9
lea r9d, [rcx + 4]
lea r10d, [rcx + 0x17]
cmp cx, ax
ja 0x14009ac9e
cmp ax, r9w
jbe 0x14009acbb
cmp r10w, ax
je 0x14009acbb
add r8, 2
mov qword [rsp + 0x128], r8
mov ax, word [r8]
cmp ax, si
je 0x14009accd
jmp 0x14009ac93
cmp word [r8], si
je 0x14009accd
mov word [r8], si
mov r8, qword [rsp + 0x128]
mov rdi, qword [rsp + 0x120]
cmp word [rdx], si
je 0x14009adf5
or r9d, 0xffffffff
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rsi
call fcn.140017c8c
mov r13, rax
cmp rax, rsi
je 0x14009ae15
mov rdi, qword [rax + 0x18]
mov rbx, qword [r13 + 8]
movabs rax, 0x3fffffffffffffff
and rdi, rax
test byte [rsp + 0x138], 8
mov rcx, rsi
je 0x14009adb7
movsx edx, byte [rbx]
mov r8d, 0xff
cmp edx, r8d
jne 0x14009ad49
movsx eax, byte [rbx + 1]
cmp eax, 0xfe
jne 0x14009ad49
mov ebp, 0x4b0
mov ecx, 2
jmp 0x14009ad89
cmp edx, 0xfe
jne 0x14009ad61
movsx eax, byte [rbx + 1]
cmp eax, r8d
jne 0x14009ad61
mov ebp, 0x4b1
jmp 0x14009ad42
cmp edx, 0xef
jne 0x14009ad8c
movsx eax, byte [rbx + 1]
cmp eax, 0xbb
jne 0x14009ad8c
movsx eax, byte [rbx + 2]
cmp eax, 0xbf
jne 0x14009ad8c
mov ebp, 0xfde9
mov ecx, 3
mov r15d, esi
sub rdi, rcx
add rbx, rcx
cmp ebp, 0x4b1
je 0x14009adb7
cmp ebp, 0x4b0
je 0x14009adb7
cmp r15d, esi
je 0x14009adb4
mov rdx, rdi
mov rcx, rbx
call fcn.140073778
mov ebp, eax
mov r15d, esi
lea rcx, [rsp + 0x68]
cmp r15d, esi
je 0x14009add2
mov rdx, qword [r13 + 8]
shr rdi, 1
mov r8, rdi
call fcn.14005fc80
jmp 0x14009ade0
movsxd r9, ebp
mov r8, rdi
mov rdx, rbx
call fcn.14005fbd4
mov r8, qword [rsp + 0x68]
mov qword [rsp + 0x128], r8
mov rdi, qword [rsp + 0x120]
mov r13b, byte [rsp + 0x40]
mov r9, r8
cmp r13b, 3
jne 0x14009ae1f
mov rdx, qword [rsp + 0x70]
mov rcx, rdi
call fcn.14005ee18
jmp 0x14009b0d5
mov r8, qword [rsp + 0x128]
jmp 0x14009adf5
cmp r13b, sil
je 0x14009af10
lea rax, [0x140111478]
lea rdi, [0x14010dd58]
lea rcx, [rsp + 0x138]
cmp r13b, r12b
cmove rdi, rax
call fcn.14005fa18
mov r11, qword [rsp + 0x128]
movzx eax, word [r11]
mov rbp, r11
cmp ax, si
je 0x14009aed8
mov ebx, 0xa
lea ecx, [rbx + 3]
cmp ax, cx
jne 0x14009ae81
cmp word [r11 + 2], bx
jne 0x14009ae86
mov word [r11], si
add qword [rsp + 0x128], 2
jmp 0x14009ae8a
cmp ax, bx
jne 0x14009aec3
mov word [r11], si
cmp r13b, sil
jne 0x14009ae9f
lea rcx, [rsp + 0x138]
mov rdx, rdi
call fcn.14005fb54
lea rcx, [rsp + 0x138]
mov rdx, rbp
mov r13b, sil
call fcn.14005fb54
mov r11, qword [rsp + 0x128]
mov ecx, 0xd
lea rbp, [r11 + 2]
add r11, 2
mov qword [rsp + 0x128], r11
mov ax, word [r11]
cmp ax, si
jne 0x14009ae66
cmp word [rbp], si
je 0x14009af03
cmp r13b, sil
jne 0x14009aef3
lea rcx, [rsp + 0x138]
mov rdx, rdi
call fcn.14005fb54
lea rcx, [rsp + 0x138]
mov rdx, rbp
call fcn.14005fb54
mov rcx, qword [rsp + 0x120]
jmp 0x14009b0b6
cmp r14, rsi
jge 0x14009af7e
movzx eax, word [r8]
mov rdi, rsi
cmp ax, si
je 0x14009af52
mov ebx, 0xa
cmp ax, bx
jne 0x14009af2e
add rdi, r12
add r8, 2
mov qword [rsp + 0x128], r8
mov ax, word [r8]
cmp ax, si
jne 0x14009af26
cmp r8, r9
jbe 0x14009af52
cmp word [r8 - 2], bx
je 0x14009af52
add rdi, r12
lea rcx, [rsp + 0x138]
mov edx, 0x20
call fcn.14005fa8c
mov rcx, qword [rsp + 0x138]
lea rdx, [0x14010df0c]
mov r8, rdi
call qword [sym.imp.USER32.DLL_wsprintfW]
jmp 0x14009af03
mov ebx, 0xa
jne 0x14009b01e
movzx eax, word [r8]
mov rcx, r8
mov rdx, r8
cmp ax, si
je 0x14009afec
cmp ax, bx
jne 0x14009afa3
mov rdx, rcx
mov rcx, r8
add r8, 2
mov qword [rsp + 0x128], r8
mov ax, word [r8]
cmp ax, si
jne 0x14009af98
cmp r8, r9
jbe 0x14009afd5
cmp word [r8 - 2], bx
je 0x14009afd5
cmp word [rcx], bx
jne 0x14009afcd
add rcx, 2
mov r8, rcx
jmp 0x14009ae03
cmp rcx, r9
jbe 0x14009afec
lea rax, [rcx - 2]
mov r8d, 0xd
cmp word [rax], r8w
cmove rcx, rax
cmp word [rdx], bx
jne 0x14009aff5
add rdx, 2
sub rcx, rdx
sar rcx, 1
mov r8, rcx
jmp 0x14009b0a6
cmp word [r8], si
je 0x14009b023
cmp word [r8], bx
jne 0x14009b012
sub r14, r12
add r8, 2
mov qword [rsp + 0x128], r8
cmp r14, r12
jg 0x14009b003
movzx eax, word [r8]
mov r9, qword [rsp + 0x60]
mov rdx, r8
mov rcx, r9
cmp ax, si
je 0x14009b0a0
mov r10d, 0xd
cmp rcx, rsi
je 0x14009b064
sub r9, r12
js 0x14009b0a0
jmp 0x14009b064
cmp ax, r10w
je 0x14009b069
cmp ax, bx
je 0x14009b069
add r8, 2
mov qword [rsp + 0x128], r8
mov ax, word [r8]
cmp ax, si
jne 0x14009b049
cmp rcx, rsi
je 0x14009b073
cmp r9, rsi
je 0x14009b0a0
cmp r10w, word [r8]
jne 0x14009b085
add r8, 2
mov qword [rsp + 0x128], r8
cmp bx, word [r8]
jne 0x14009b097
add r8, 2
mov qword [rsp + 0x128], r8
mov ax, word [r8]
cmp ax, si
jne 0x14009b03d
sub r8, rdx
sar r8, 1
lea rcx, [rsp + 0x138]
call fcn.14006acbc
mov rcx, rdi
mov r8, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x70]
call fcn.14005ee18
lea rcx, [rsp + 0x138]
call fcn.140057768
lea rcx, [rsp + 0x68]
call fcn.140057768
jmp 0x14009abd6
lea rcx, [rsp + 0x68]
mov edx, 8
call fcn.14005f7a0
xor eax, eax
mov word [r13], si
mov qword [rsp + 0xd8], rax
mov rax, qword [0x14012a340]
lea r14, [rsp + 0xd0]
mov qword [rsp + 0xd0], rax
mov al, byte [rsp + 0x138]
lea rcx, [rsp + 0x80]
cmp al, 2
mov rbx, rsi
cmovne r14, rcx
mov qword [rsp + 0x80], rbx
cmp al, 2
je 0x14009b2fa
mov rcx, qword [rsp + 0x90]
mov rdi, rsi
call fcn.140006994
cmp eax, esi
je 0x14009b17a
mov rcx, qword [rsp + 0x90]
mov edx, 0x80000000
mov r8d, 7
call fcn.14001c980
mov rbx, rax
mov qword [rsp + 0x80], rax
jmp 0x14009b1bd
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], 0x2000000
lea rcx, [rsp + 0x80]
mov r9d, 7
mov r8d, 0x80000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rsi
call fcn.1400037e8
mov rbx, qword [rsp + 0x80]
cmp qword [r14], rsi
jne 0x14009b1d0
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov r12d, eax
jmp 0x14009b70b
mov rcx, qword [r14]
xor eax, eax
lea r9, [rsp + 0x88]
lea rdx, [rsp + 0x78]
lea r8d, [rax + 3]
mov byte [rsp + 0x78], sil
mov byte [rsp + 0x79], sil
mov byte [rsp + 0x7a], sil
mov word [rsp + 0x7b], ax
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.DLL_ReadFile]
mov r11b, byte [rsp + 0x78]
cmp r11b, 0xff
jne 0x14009b22b
cmp byte [rsp + 0x79], 0xfe
jne 0x14009b266
mov ebp, 0x4b0
mov edi, 2
jmp 0x14009b25d
cmp r11b, 0xfe
jne 0x14009b23f
cmp byte [rsp + 0x79], 0xff
jne 0x14009b266
mov ebp, 0x4b1
jmp 0x14009b224
cmp r11b, 0xef
jne 0x14009b266
cmp byte [rsp + 0x79], 0xbb
jne 0x14009b266
cmp byte [rsp + 0x7a], 0xbf
jne 0x14009b266
mov ebp, 0xfde9
mov edi, 3
mov qword [rsp + 0x48], rbp
mov dword [rsp + 0x50], esi
mov rcx, qword [r14]
xor r8d, r8d
mov rdx, rdi
call fcn.140058ca4
cmp rax, rsi
mov qword [rsp + 0xc8], rax
jl 0x14009b1c2
cmp dword [rsp + 0x50], esi
je 0x14009b2fa
mov rcx, qword [r14]
call fcn.1400d8f30
cmp rax, 0x1000000
mov rdi, rax
jg 0x14009b2fa
lea rdx, [rax + 0x10]
lea rcx, [rsp + 0xa0]
call fcn.14005f81c
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [r14]
lea r9, [rsp + 0x88]
mov r8d, edi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.DLL_ReadFile]
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [r14]
xor r8d, r8d
call fcn.140058ca4
mov rcx, qword [rsp + 0xa0]
mov rdx, rdi
call fcn.140073778
mov ebp, eax
mov qword [rsp + 0x48], rbp
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dil, byte [rsp + 0x40]
cmp dil, 3
jne 0x14009b420
mov r14, qword [r14]
mov bpl, byte [rsp + 0x138]
mov qword [rsp + 0x60], rsi
mov r13d, esi
mov r15, rsi
mov ebx, 0x186a0
lea edx, [r13 + 0x40001]
lea rcx, [rsp + 0x60]
call fcn.14005f81c
mov rdi, qword [rsp + 0x60]
lea r9, [rsp + 0x138]
lea rdx, [r15 + rdi]
mov r15d, 0x40000
mov rcx, r14
mov r8d, r15d
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.DLL_ReadFile]
mov rcx, qword [rsp + 0x138]
cmp rcx, r15
cmovg rcx, r15
mov qword [rsp + 0x138], rcx
cmp rcx, rsi
jne 0x14009b3ab
cmp eax, esi
jne 0x14009b3ba
cmp bpl, 2
jne 0x14009b3a6
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x14009b3ba
mov rcx, qword [rsp + 0x138]
sub rbx, r12
js 0x14009b3ba
add r13d, ecx
movsxd r15, r13d
mov byte [r15 + rdi], sil
jmp 0x14009b32c
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x60]
call fcn.140068194
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x120]
mov r8, rax
call fcn.14005ee18
lea rcx, [rsp + 0x60]
call fcn.140057768
mov rbx, qword [rsp + 0x80]
cmp rbx, rsi
je 0x14009b404
cmp rbx, 0xffffffffffffffff
je 0x14009b404
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
lea rcx, [rsp + 0x68]
call fcn.140057768
lea rcx, [rsp + 0xa0]
call fcn.140057768
jmp 0x14009b74e
cmp dil, sil
je 0x14009b4eb
mov rax, qword [rsp + 0xc0]
lea rdx, [0x14010e178]
lea rcx, [rsp + 0x88]
cmp rax, rsi
cmovne rdx, rax
or r8, 0xffffffffffffffff
call fcn.14006acd8
or r15b, r12b
lea rcx, [rsp + 0x60]
call fcn.14005fa18
cmp dil, sil
jne 0x14009b474
mov rdx, qword [rsp + 0x88]
lea rcx, [rsp + 0x58]
call fcn.14005fb54
lea rdx, [rsp + 0x60]
mov r9b, r15b
mov r8d, ebp
mov rcx, r14
call fcn.140067d64
cmp byte [rsp + 0x138], 2
mov edi, eax
jne 0x14009b49e
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x14009b4ca
lea rcx, [rsp + 0x60]
mov edx, ebp
call fcn.140068194
lea rcx, [rsp + 0x58]
mov rdx, rax
call fcn.14005fb54
lea rcx, [rsp + 0x60]
call fcn.140057768
cmp edi, esi
je 0x14009b4d4
mov dil, sil
jmp 0x14009b453
lea rcx, [rsp + 0x60]
call fcn.140057768
lea rcx, [rsp + 0x88]
mov ebp, 0x4b0
call fcn.140057768
jmp 0x14009b6f9
mov rax, qword [rsp + 0x98]
cmp rax, rsi
jge 0x14009b560
mov bl, byte [rsp + 0x138]
mov rdi, rsi
lea rdx, [rsp + 0x58]
mov r9b, r15b
mov r8d, ebp
mov rcx, r14
call fcn.140067d64
mov r13d, eax
cmp bl, 2
jne 0x14009b528
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x14009b532
cmp r13d, esi
je 0x14009b532
add rdi, r12
jmp 0x14009b502
lea rcx, [rsp + 0x58]
mov edx, 0x20
mov ebp, 0x4b0
call fcn.14005f81c
mov rcx, qword [rsp + 0x58]
lea rdx, [0x14010df0c]
mov r8, rdi
call qword [sym.imp.USER32.DLL_wsprintfW]
jmp 0x14009b6f1
jne 0x14009b5ae
or r15b, r12b
mov rax, r13
mov r13, qword [rsp + 0x68]
lea rdx, [rsp + 0x68]
mov r9b, r15b
mov r8d, ebp
mov rcx, r14
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x68], rax
call fcn.140067d64
cmp byte [rsp + 0x138], 2
mov edi, eax
jne 0x14009b5a5
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x14009b6f9
cmp edi, esi
jne 0x14009b565
jmp 0x14009b6f9
cmp r12, rax
mov rdi, r12
jge 0x14009b5fe
mov rbx, rax
lea rdx, [rsp + 0x58]
mov r9b, r15b
mov r8d, ebp
mov rcx, r14
call fcn.140067d64
cmp byte [rsp + 0x138], 2
mov r13d, eax
jne 0x14009b5e4
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x14009b5f1
cmp r13d, esi
je 0x14009b5f1
add rdi, r12
cmp rdi, rbx
jl 0x14009b5b9
mov r13, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x80]
mov byte [r13], sil
cmp qword [rsp + 0x60], r12
jne 0x14009b624
or r15b, r12b
lea rdx, [rsp + 0x58]
mov r8d, ebp
mov r9b, r15b
mov rcx, r14
call fcn.140067d64
jmp 0x14009b6f9
lea rcx, [rsp + 0x98]
call fcn.14005fa18
mov rax, qword [rsp + 0x60]
mov bl, byte [rsp + 0x138]
movsxd r13, eax
lea rdi, [0x14010dd58]
cmp r13, rsi
je 0x14009b65a
sub rax, r12
mov qword [rsp + 0x60], rax
js 0x14009b6df
mov rax, qword [rsp + 0x98]
mov r9b, r15b
lea rdx, [rsp + 0x98]
or r9b, r12b
mov r8d, ebp
mov rcx, r14
mov word [rax], si
call fcn.140067d64
mov dword [rsp + 0x138], eax
cmp bl, 2
jne 0x14009b69c
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x14009b6df
mov eax, dword [rsp + 0x138]
cmp eax, esi
je 0x14009b6df
lea rcx, [rsp + 0x98]
mov edx, ebp
call fcn.140068194
lea rcx, [rsp + 0x58]
mov rdx, rax
call fcn.14005fb54
cmp r13, rsi
je 0x14009b6c8
cmp qword [rsp + 0x60], rsi
jle 0x14009b6df
lea rcx, [rsp + 0x58]
mov rdx, rdi
call fcn.14005fb54
mov rax, qword [rsp + 0x60]
jmp 0x14009b647
lea rcx, [rsp + 0x98]
mov ebp, 0x4b0
call fcn.140057768
mov rbx, qword [rsp + 0x80]
lea rcx, [rsp + 0x58]
mov edx, ebp
call fcn.140068194
mov r12d, esi
mov r13, rax
cmp rbx, rsi
je 0x14009b71f
cmp rbx, 0xffffffffffffffff
je 0x14009b71f
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
lea rcx, [rsp + 0x68]
call fcn.140057768
lea rcx, [rsp + 0xa0]
call fcn.140057768
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x120]
mov r8, r13
call fcn.14005ee18
movsxd rsi, r12d
lea rcx, [rsp + 0x58]
call fcn.140057768
lea rcx, [rsp + 0xb8]
call fcn.140057768
lea rcx, [rsp + 0x70]
call fcn.140057768
lea rcx, [rsp + 0x90]
call fcn.140057768
mov rax, rsi
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret