Function at 0x140079e00
Capabilities:
Encode data using base64
Get disk information
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x450
movaps xmmword [rax - 0x48], xmm6
lea rcx, [rax + 0x10]
movaps xmmword [rax - 0x58], xmm7
call fcn.1400503f4
lea rcx, [rsp + 0xa0]
mov edx, 5
call fcn.1400580ac
lea rcx, [rsp + 0x2b8]
mov edx, 0x14
call fcn.1400580ac
lea rcx, [rsp + 0x238]
call fcn.140058038
lea rcx, [rsp + 0x1a0]
call fcn.140058038
lea rcx, [rsp + 0x228]
call fcn.140058038
xor ebx, ebx
or r15, 0xffffffffffffffff
mov eax, r15d
lea edi, [rbx + 0x2c]
lea rdx, [rsp + 0x1a0]
mov dword [rsp + 0xdc], eax
mov dword [rsp + 0x108], eax
mov rax, r15
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x498]
lea rcx, [rsp + 0x170]
mov r8d, edi
mov qword [rsp + 0x328], rbx
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x218], r15
mov dword [rsp + 0x84], 0xfffc0000
mov ebp, ebx
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x4a8], ebx
mov dword [rsp + 0x1d8], ebx
mov word [rsp + 0x128], r15w
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x210], rbx
mov dword [rsp + 0xbc], ebx
mov qword [rsp + 0x280], r15
mov qword [rsp + 0x250], r15
mov qword [rsp + 0x288], r15
mov qword [rsp + 0x240], r15
mov byte [rsp + 0xc0], bl
mov byte [rsp + 0x8d], bl
mov byte [rsp + 0x103], bl
mov byte [rsp + 0x102], bl
mov sil, bl
mov byte [rsp + 0x4c], bl
mov byte [rsp + 0x70], bl
mov byte [rsp + 0x105], bl
mov byte [rsp + 0xb8], bl
mov dword [rsp + 0x138], ebx
call fcn.14005b95c
mov r14, qword [rsp + 0x1a0]
mov rax, qword [rsp + 0x170]
mov word [r14], bx
cmp di, word [rax]
jne 0x14007a005
mov word [rax], bx
add rax, 2
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x170]
mov r8d, edi
mov qword [rsp + 0x170], rax
call fcn.14005b95c
mov r14, qword [rsp + 0x1a0]
mov rax, 0xfffffffffffffff7
mov edi, 0xfffff000
mov dl, bl
mov byte [rsp + 0x50], bl
mov byte [rsp + 0xc8], bl
mov byte [rsp + 0x101], r15b
mov dword [rsp + 0x74], edi
mov dword [rsp + 0x6c], edi
mov byte [rsp + 0x190], bl
mov byte [rsp + 0x78], bl
mov byte [rsp + 0x100], bl
mov byte [rsp + 0x60], bl
mov byte [rsp + 0x4d], bl
mov byte [rsp + 0x4e], bl
mov byte [rsp + 0x41], bl
mov byte [rsp + 0x40], bl
mov byte [rsp + 0x43], bl
mov byte [rsp + 0xc1], bl
mov byte [rsp + 0x1e8], r15b
mov byte [rsp + 0x88], r15b
mov qword [rsp + 0x298], rbx
mov r13, rbx
mov qword [rsp + 0x2a8], rbx
mov r12d, ebx
mov dword [rsp + 0xf0], ebx
mov byte [rsp + 0x8b], bl
mov byte [rsp + 0x68], bl
lea ebx, [rax + 0xd]
mov dword [rsp + 0x230], r15d
lea r15d, [rax + 0xa]
mov rdi, rax
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x498]
xor ecx, ecx
mov dword [rsp + 0x180], edx
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x148], rbx
cmp word [rax], cx
je 0x14007aef5
xor edi, edi
lea rdx, [rsp + 0x498]
lea rcx, str._admin
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a11e
or byte [rsp + 0x50], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._super
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a147
or byte [rsp + 0x50], 2
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._devid
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a174
bts dword [rsp + 0x1d8], 0x10
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._devidx
mov r8d, 7
call fcn.14005a810
cmp al, dil
je 0x14007a1a1
bts dword [rsp + 0x1d8], 0x11
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._gui
mov r8d, ebx
call fcn.14005a810
cmp al, dil
jne 0x14007af70
lea rdx, [rsp + 0x498]
lea rcx, str._usb
mov r8d, ebx
call fcn.14005a810
cmp al, dil
jne 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._hextp
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a208
or r12d, r15d
jmp 0x14007ab66
lea rdx, [rsp + 0x498]
lea rcx, str._phy
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a22d
or r12d, 2
jmp 0x14007ab66
lea rdx, [rsp + 0x498]
lea rcx, [0x1400fa978]
mov r8d, 5
call fcn.14005a810
cmp al, dil
je 0x14007a255
or r12d, 0x10
jmp 0x14007ab66
lea rdx, [rsp + 0x498]
lea rcx, str._fill
mov r8d, 5
call fcn.14005a810
cmp al, dil
je 0x14007a27c
or r12d, ebx
jmp 0x14007ab66
lea rdx, [rsp + 0x498]
lea rcx, [0x1400fa96c]
mov r8d, 3
call fcn.14005a810
cmp al, dil
je 0x14007a2a5
mov byte [rsp + 0x4e], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._xup
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a2cb
mov byte [rsp + 0x41], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._axup
mov r8d, 5
call fcn.14005a810
cmp al, dil
je 0x14007a2f4
mov byte [rsp + 0x41], 0x21
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._hup
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a31a
mov byte [rsp + 0x40], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._ahup
mov r8d, 5
call fcn.14005a810
cmp al, dil
je 0x14007a343
mov byte [rsp + 0x40], 0x21
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._gpt
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a369
mov byte [rsp + 0x43], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._gptmini
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a38f
mov byte [rsp + 0x43], 2
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._gpth
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a3b4
mov byte [rsp + 0x43], bl
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._mbr
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a3dd
mov byte [rsp + 0x102], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._cmp
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a406
mov byte [rsp + 0xc1], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, [0x1400f3a74]
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a432
mov byte [rsp + 0x103], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, [0x1400fa920]
mov r8d, 3
call fcn.14005a810
cmp al, dil
je 0x14007a45e
mov byte [rsp + 0x105], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._img
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007a487
mov byte [rsp + 0xb8], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._lskip
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a4b0
or byte [rsp + 0x70], 0x40
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._locku
mov r8d, 6
call fcn.14005a810
cmp al, dil
jne 0x14007a61b
mov r11, qword [rsp + 0x498]
lea rcx, str._locku:
mov r8d, 7
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007a500
mov byte [rsp + 0x4c], 3
add r11, 2
jmp 0x14007a523
lea rcx, str._lock:
mov r8d, 6
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007a5d3
mov byte [rsp + 0x4c], r15b
add r11, 0xc
mov qword [rsp + 0x498], r11
movzx ecx, word [r11]
cmp cx, di
je 0x14007a5a4
mov r8d, 9
cmp r8w, cx
ja 0x14007a54a
cmp cx, 0xd
jbe 0x14007a5a4
mov edx, 0x20
cmp dx, cx
je 0x14007a5a4
lea eax, [rcx - 0x30]
cmp ax, r8w
jbe 0x14007a5a4
mov qword [rsp + 0x158], r11
cmp r8w, cx
ja 0x14007a571
cmp cx, 0xd
jbe 0x14007a591
cmp dx, cx
je 0x14007a591
add r11, 2
mov qword [rsp + 0x498], r11
mov cx, word [r11]
cmp cx, di
je 0x14007ae48
jmp 0x14007a565
cmp word [r11], di
je 0x14007ae48
mov word [r11], di
jmp 0x14007a8da
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x498]
call fcn.140006b34
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x498]
call fcn.140006b34
jmp 0x14007ae48
lea rdx, [rsp + 0x498]
lea rcx, str._lock
mov r8d, 5
call fcn.14005a810
cmp al, dil
je 0x14007a5fc
mov byte [rsp + 0x4c], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._lockx
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a625
mov byte [rsp + 0x4c], 3
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._lock_
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007a65a
or rax, 0xffffffffffffffff
mov byte [rsp + 0x4c], 0xf0
mov qword [rsp + 0x110], rax
jmp 0x14007ae5f
mov r11, qword [rsp + 0x498]
lea rcx, [0x1400fa8d4]
mov r8d, ebx
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007a6ba
lea rax, [r11 + 8]
mov r9d, 0x3d
lea r10d, [r9 - 0x34]
cmp word [rax], di
je 0x14007a780
cmp r9w, word [rax]
je 0x14007a780
cmp r10w, word [rax]
ja 0x14007a6aa
cmp word [rax], 0xd
jbe 0x14007a780
mov r8d, 0x20
cmp r8w, word [rax]
je 0x14007a786
lea rcx, str._pbr
mov r8d, ebx
mov rdx, r11
call fcn.140051938
mov r10d, 9
cmp al, dil
je 0x14007a712
lea rax, [r11 + 8]
lea r9d, [r10 + 0x34]
cmp word [rax], di
je 0x14007a813
cmp r9w, word [rax]
je 0x14007a813
cmp r10w, word [rax]
ja 0x14007a702
cmp word [rax], 0xd
jbe 0x14007a813
mov r8d, 0x20
cmp r8w, word [rax]
je 0x14007a819
lea rcx, str._alignend
mov r8d, r10d
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007a987
lea rbx, [r11 + 0x12]
mov r9d, 0x3d
lea edx, [r9 - 0x34]
cmp word [rbx], di
je 0x14007a75f
cmp r9w, word [rbx]
je 0x14007a75f
cmp dx, word [rbx]
ja 0x14007a751
cmp word [rbx], 0xd
jbe 0x14007a75f
mov eax, 0x20
cmp ax, word [rbx]
jne 0x14007a982
mov qword [rsp + 0x498], rbx
movzx edi, word [rbx]
cmp r9w, di
je 0x14007a8e8
mov rax, 0xfffffffffffffffe
jmp 0x14007a92d
mov r8d, 0x20
mov qword [rsp + 0x498], rax
mov r13, rdi
mov qword [rsp + 0x2a8], rdi
cmp r9w, word [rax]
je 0x14007a7b3
lea r8, [0x1400fa8b8]
mov qword [rsp + 0x298], r8
jmp 0x14007ae48
add rax, 2
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], rax
call fcn.1400503f4
mov rax, qword [rax]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x498]
movzx ecx, word [rax]
cmp cx, di
je 0x14007ae48
cmp r10w, cx
ja 0x14007a7fb
cmp cx, 0xd
jbe 0x14007a8ce
cmp r8w, cx
je 0x14007a8ce
add rax, 2
mov qword [rsp + 0x498], rax
jmp 0x14007a7df
mov r8d, 0x20
mov qword [rsp + 0x498], rax
movzx ecx, word [rax]
mov qword [rsp + 0x298], rdi
cmp r9w, cx
je 0x14007a876
lea r13, [0x1400f0e98]
mov qword [rsp + 0x2a8], r13
jmp 0x14007a86c
cmp r10w, cx
ja 0x14007a853
cmp cx, 0xd
jbe 0x14007ae48
cmp r8w, cx
je 0x14007ae48
add rax, 2
mov qword [rsp + 0x498], rax
mov cx, word [rax]
cmp cx, di
jne 0x14007a843
jmp 0x14007ae48
add rax, 2
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], rax
call fcn.1400503f4
mov r13, qword [rax]
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x2a8], r13
movzx ecx, word [rax]
cmp cx, di
je 0x14007ae48
cmp r10w, cx
ja 0x14007a8ba
cmp cx, 0xd
jbe 0x14007a8ce
cmp r8w, cx
je 0x14007a8ce
add rax, 2
mov qword [rsp + 0x498], rax
jmp 0x14007a8a2
cmp word [rax], di
je 0x14007ae48
mov word [rax], di
add qword [rsp + 0x498], 2
jmp 0x14007ae48
lea rcx, [rbx + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, dx
ja 0x14007a93d
mov qword [rsp + 0x290], rcx
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x290]
call fcn.14005dd68
mov rax, qword [rsp + 0x170]
xor ecx, ecx
cmp rax, rcx
mov rcx, 0xfffffffffffffffe
cmovle rax, rcx
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x248], rax
xor eax, eax
cmp di, ax
je 0x14007a96e
lea ecx, [rax + 0x20]
lea edx, [rax + 9]
cmp dx, di
ja 0x14007a955
cmp di, 0xd
jbe 0x14007a96e
cmp cx, di
je 0x14007a96e
add rbx, 2
mov qword [rsp + 0x498], rbx
mov di, word [rbx]
cmp di, ax
jne 0x14007a94a
lea rcx, [rsp + 0x498]
call fcn.1400503f4
xor edi, edi
jmp 0x14007ae5f
mov ebx, 4
lea rcx, str._align
mov r8d, 6
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007a9d0
lea rax, [r11 + 0xc]
mov r9d, 0x3d
lea r10d, [r9 - 0x34]
cmp word [rax], di
je 0x14007aa00
cmp r9w, word [rax]
je 0x14007aa00
cmp r10w, word [rax]
ja 0x14007a9c6
cmp word [rax], 0xd
jbe 0x14007aa00
mov edx, 0x20
cmp dx, word [rax]
je 0x14007aa05
lea rdx, [rsp + 0x498]
lea rcx, str._clear
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007aaa6
mov byte [rsp + 0x101], r15b
jmp 0x14007ae5f
mov edx, 0x20
mov r8, rax
jmp 0x14007aa1f
cmp r10w, cx
ja 0x14007aa16
cmp cx, 0xd
jbe 0x14007aa2f
cmp dx, cx
je 0x14007aa2f
add rax, 2
mov qword [rsp + 0x498], rax
movzx ecx, word [rax]
cmp cx, di
jne 0x14007aa0a
lea rcx, [rsp + 0x498]
call fcn.1400503f4
cmp r9w, word [r8]
jne 0x14007aa8d
lea rcx, [r8 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r10w
ja 0x14007ae5f
mov qword [rsp + 0x290], rcx
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x290]
call fcn.14005dd68
mov rcx, qword [rsp + 0x220]
cmp rcx, rdi
mov qword [rsp + 0x258], rcx
jg 0x14007ae5f
or rax, 0xffffffffffffffff
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x220], rax
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._clean
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007aad2
mov byte [rsp + 0x88], r15b
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._clean_
mov r8d, 7
call fcn.14005a810
cmp al, dil
je 0x14007aafe
mov byte [rsp + 0x88], dil
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, [0x1400f4084]
mov r8d, 3
call fcn.14005a810
cmp al, dil
jne 0x14007ae57
lea rdx, [rsp + 0x498]
lea rcx, str._del
mov r8d, ebx
call fcn.14005a810
cmp al, dil
jne 0x14007ae57
lea rdx, [rsp + 0x498]
lea rcx, str._raw
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007ab73
mov byte [rsp + 0x78], r15b
or r12d, 0x20
mov dword [rsp + 0xf0], r12d
jmp 0x14007ae5f
mov r11, qword [rsp + 0x498]
lea rcx, str._swap:
mov r8d, 6
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007abc5
add r11, 0xc
lea rdx, [rsp + 0x6c]
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], r11
call fcn.14006648c
cmp eax, edi
jl 0x14007bb47
mov byte [rsp + 0x68], r15b
jmp 0x14007ae5f
lea rcx, str._CHS
mov r8d, 5
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007ace9
lea rcx, [rsp + 0x498]
add r11, 0xa
mov qword [rsp + 0x498], r11
call fcn.1400503f4
mov rcx, qword [rsp + 0x498]
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0xe8], rcx
cmp ax, di
je 0x14007ac45
mov edx, 0x20
lea r9d, [rdx - 0x17]
cmp r9w, ax
ja 0x14007ac2c
cmp ax, 0xd
jbe 0x14007ac45
cmp dx, ax
je 0x14007ac45
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, di
jne 0x14007ac20
lea rcx, [rsp + 0x498]
call fcn.1400503f4
movzx ecx, word [r8]
mov eax, 9
sub cx, 0x30
cmp cx, ax
ja 0x14007ac81
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xe8]
call fcn.14005dd68
mov r8, qword [rsp + 0xe8]
mov ebx, 0x3a
cmp bx, word [r8]
jne 0x14007ae5f
add r8, 2
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0xe8], r8
call fcn.14005dd68
mov r8, qword [rsp + 0xe8]
cmp bx, word [r8]
jne 0x14007ae5f
add r8, 2
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0xe8], r8
call fcn.14005dd68
jmp 0x14007ae5f
lea rcx, str._IMG
mov r8d, 5
mov rdx, r11
call fcn.140051938
cmp al, dil
jne 0x14007ae75
lea rcx, str._SKIP
mov r8d, 6
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007ad6d
lea rcx, [rsp + 0x498]
add r11, 0xc
mov qword [rsp + 0x498], r11
call fcn.1400503f4
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x498]
mov dword [rsp + 0xb0], 0x42
call fcn.14006648c
mov al, byte [rsp + 0xb0]
mov byte [rsp + 0x8b], al
jmp 0x14007ae5f
lea rcx, str._iv
mov r8d, ebx
mov rdx, r11
call fcn.140051938
cmp al, dil
je 0x14007adaa
add r11, 8
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x498], r11
call fcn.14006648c
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._cdrom
mov r8d, 6
call fcn.14005a810
cmp al, dil
je 0x14007add9
mov dword [rsp + 0x138], 8
jmp 0x14007ae5f
lea rdx, [rsp + 0x498]
lea rcx, str._floppy
mov r8d, 7
call fcn.14005a810
cmp al, dil
je 0x14007ae05
mov dword [rsp + 0x138], 0x10
jmp 0x14007ae5f
mov rcx, qword [rsp + 0x498]
mov edx, 0x2d
movzx eax, word [rcx]
cmp dx, ax
jne 0x14007ae75
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x14007ae2f
cmp ax, 0xd
jbe 0x14007ae48
cmp dx, ax
je 0x14007ae48
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, di
jne 0x14007ae23
lea rcx, [rsp + 0x498]
call fcn.1400503f4
jmp 0x14007ae5f
mov byte [rsp + 0x190], r15b
mov rax, qword [rsp + 0x498]
mov ebx, 4
cmp word [rax], di
jne 0x14007a0f5
mov rdi, qword [rsp + 0x248]
mov rcx, qword [rsp + 0x258]
mov rax, 0xfffffffffffffffe
cmp rdi, rax
jne 0x14007aeab
mov rdi, rcx
cmp rcx, 0xfffffffffffffff7
mov rax, 0xffffffffffffffff
cmove rdi, rax
mov qword [rsp + 0x248], rdi
mov rdx, qword [rsp + 0x250]
mov r9, qword [rsp + 0x240]
mov qword [rsp + 0x280], rdx
mov qword [rsp + 0x288], r9
cmp rcx, 0xfffffffffffffff7
jne 0x14007af56
mov edi, dword [rsp + 0x6c]
mov r12, qword [rsp + 0x120]
mov dword [rsp + 0x74], edi
mov rdi, qword [rsp + 0x248]
mov qword [rsp + 0x270], r12
mov rcx, r15
mov qword [rsp + 0x258], rcx
cmp rdi, 0xfffffffffffffff7
lea rdx, [rsp + 0x498]
mov r8d, ebx
cmove rdi, rcx
lea rcx, [0x1400fa858]
mov qword [rsp + 0x248], rdi
call fcn.14005a810
xor edi, edi
cmp al, dil
je 0x14007b0d9
lea rdx, [rsp + 0x498]
lea rcx, str.disk
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007afc3
mov r12b, r15b
jmp 0x14007b09e
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x270], rax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x74], eax
jmp 0x14007af00
lea rdx, [0x1400fa838]
lea rcx, [rsp + 0x4a8]
call fcn.14006252c
mov rdx, qword [rsp + 0x498]
lea rcx, [rsp + 0x4a8]
call fcn.140058174
mov rdx, qword [rsp + 0x4a8]
mov rcx, qword [rsp + 0x490]
call fcn.14004392c
lea rcx, [rsp + 0x4a8]
mov rsi, rax
call fcn.140050424
jmp 0x14008043f
lea rdx, [rsp + 0x498]
lea rcx, str.part
mov r8d, ebx
call fcn.14005a810
cmp al, dil
je 0x14007afe7
mov r12b, 2
jmp 0x14007b09e
lea rdx, [rsp + 0x498]
lea rcx, [0x1400fa834]
mov r8d, 3
call fcn.14005a810
cmp al, dil
je 0x14007b00e
mov r12b, 3
jmp 0x14007b09e
lea rdx, [rsp + 0x498]
lea rcx, str.cdrom
mov r8d, 5
call fcn.14005a810
cmp al, dil
je 0x14007b048
mov r12b, bl
mov dword [rsp + 0x138], 8
mov dword [rsp + 0xc8], r12d
jmp 0x14007b0e1
mov r12d, 6
lea rdx, [rsp + 0x498]
lea rcx, str.floppy
mov r8d, r12d
call fcn.14005a810
cmp al, dil
je 0x14007b082
mov r12b, 5
mov dword [rsp + 0x138], 0x10
mov dword [rsp + 0xc8], r12d
jmp 0x14007b0e1
lea rdx, [rsp + 0x498]
lea rcx, str.parent
mov r8d, r12d
call fcn.14005a810
cmp al, dil
je 0x14007b0a8
mov dword [rsp + 0xc8], r12d
jmp 0x14007b0e1
lea rdx, [rsp + 0x498]
lea rcx, str.volume
mov r8d, r12d
call fcn.14005a810
mov r12d, dword [rsp + 0xc8]
cmp al, dil
movzx r12d, r12b
mov eax, 7
cmovne r12d, eax
jmp 0x14007b09e
mov r12d, dword [rsp + 0xc8]
lea rdx, [rsp + 0x498]
lea rcx, str.init
mov r8d, ebx
mov byte [rsp + 0x42], dil
call fcn.14005a810
cmp al, dil
je 0x14007b115
mov sil, r15b
mov ebp, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x4a8], r15d
lea rdx, [rsp + 0x498]
lea rcx, [0x1400fa808]
mov r8d, 3
call fcn.14005a810
movzx ecx, sil
lea rdx, [rsp + 0x498]
cmp al, dil
mov eax, 0x10
cmovne ecx, eax
lea r8d, [rax - 0xa]
mov dword [rsp + 0x90], ecx
lea rcx, str.update
call fcn.14005a810
cmp al, dil
je 0x14007b177
mov byte [rsp + 0x42], r15b
mov ebp, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x4a8], r15d
lea rdx, [rsp + 0x498]
lea rcx, str.xupdate
mov r8d, 7
call fcn.14005a810
mov esi, 0x20
cmp al, dil
je 0x14007b1b0
mov byte [rsp + 0x42], sil
mov ebp, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x4a8], r15d
lea rdx, [rsp + 0x498]
lea rcx, str.hupdate
mov r8d, 7
call fcn.14005a810
cmp al, dil
je 0x14007b1e8
mov eax, 0x10
mov ebp, r15d
mov dword [rsp + 0x48], r15d
mov byte [rsp + 0x42], al
mov dword [rsp + 0x4a8], r15d
mov r8, qword [rsp + 0x498]
mov rdx, r8
movzx eax, word [r8]
cmp ax, di
je 0x14007b226
mov ecx, 9
cmp cx, ax
ja 0x14007b20c
cmp ax, 0xd
jbe 0x14007b226
cmp si, ax
je 0x14007b226
add r8, 2
mov qword [rsp + 0x498], r8
mov ax, word [r8]
cmp ax, di
jne 0x14007b201
sub r8, rdx
lea rcx, [rsp + 0x238]
sar r8, 1
call fcn.1400582a0
lea rcx, [rsp + 0x498]
call fcn.1400503f4
mov r8, qword [rsp + 0x498]
mov edx, 0x61
movzx ecx, word [r8]
lea r9d, [rdx + 0x1f]
movzx eax, cx
or ax, si
cmp dx, ax
jne 0x14007b29d
mov dword [rsp + 0x128], r9d
cmp cx, di
je 0x14007b2e6
lea eax, [rdx - 0x58]
cmp ax, cx
ja 0x14007b281
cmp cx, 0xd
jbe 0x14007b2e6
cmp si, cx
je 0x14007b2e6
add r8, 2
mov qword [rsp + 0x498], r8
mov cx, word [r8]
cmp cx, di
jne 0x14007b276
jmp 0x14007b2e6
mov eax, 0x2d
cmp ax, cx
jne 0x14007b2e6
movzx eax, word [r8 + 2]
or ax, si
cmp dx, ax
jne 0x14007b2e6
mov word [rsp + 0x128], di
mov eax, 9
cmp ax, cx
ja 0x14007b2cc
cmp cx, 0xd
jbe 0x14007b2e6
cmp si, cx
je 0x14007b2e6
add r8, 2
mov qword [rsp + 0x498], r8
mov cx, word [r8]
cmp cx, di
jne 0x14007b2c1
mov eax, 0xb9e5
mov dword [rsp + 0x1f8], edi
mov qword [rsp + 0x2d0], rdi
mov word [rsp + 0x1ac], ax
mov eax, 0x4433
mov dword [rsp + 0xb0], edi
mov word [rsp + 0x1ae], ax
xor eax, eax
mov dword [rsp + 0x278], edi
mov dword [rsp + 0x1fc], eax
mov dword [rsp + 0x200], eax
mov dword [rsp + 0x204], eax
lea rax, str.MS_Basic_Data
mov dword [rsp + 0x2b0], edi
mov dword [rsp + 0x178], edi
mov dword [rsp + 0x268], edi
mov dword [rsp + 0x27c], edi
lea rdi, [0x14010edd8]
mov rcx, rdi
mov qword [rsp + 0x290], rax
mov dword [rsp + 0x1a8], 0xebd0a0a2
mov byte [rsp + 0x1b0], 0x87
mov byte [rsp + 0x1b1], 0xc0
mov byte [rsp + 0x1b2], 0x68
mov byte [rsp + 0x1b3], 0xb6
mov byte [rsp + 0x1b4], 0xb7
mov byte [rsp + 0x1b5], 0x26
mov byte [rsp + 0x1b6], 0x99
mov byte [rsp + 0x1b7], 0xc7
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov sil, byte [rsp + 0x43]
xor eax, eax
lea rcx, [rsp + 0x498]
cmp sil, al
jne 0x14007b437
lea rdx, [rsp + 0x108]
call fcn.14006648c
mov rcx, qword [rsp + 0x498]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
cmp r8w, word [rcx]
jne 0x14007b427
lea rdx, [rcx + 2]
movzx eax, word [rdx]
sub ax, 0x30
cmp ax, r10w
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0xdc], eax
jbe 0x14007b484
mov byte [rsp + 0x100], r15b
mov rcx, rdx
mov qword [rsp + 0x498], rdx
jmp 0x14007b484
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0xdc], eax
jmp 0x14007b484
lea rdx, [rsp + 0x1a8]
xor r8d, r8d
call fcn.140068758
mov rsi, rax
mov qword [rsp + 0x2b0], rax
or rax, 0xffffffffffffffff
cmp esi, eax
jne 0x14007b46d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov rsi, rax
jmp 0x14008043f
mov rcx, qword [rsp + 0x498]
mov sil, byte [rsp + 0x43]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
mov eax, 0x2b
cmp ax, word [rcx]
jne 0x14007b4a3
mov al, byte [rcx]
add rcx, 2
mov byte [rsp + 0xc0], al
mov qword [rsp + 0x498], rcx
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14007b4e7
xor edx, edx
lea r9d, [rdx + 0x20]
cmp r10w, ax
ja 0x14007b4be
cmp ax, 0xd
jbe 0x14007b4d8
cmp r9w, ax
je 0x14007b4d8
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14007b4b2
lea rcx, [rsp + 0x498]
call fcn.1400503f4
jmp 0x14007b521
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x498]
call fcn.14005de38
mov r8d, 0x2d
mov dword [rsp + 0x268], eax
mov rax, qword [rsp + 0x130]
lea r9d, [r8 - 0xd]
mov qword [rsp + 0x98], rax
lea r10d, [r8 - 0x24]
mov rax, qword [rsp + 0x498]
mov ecx, 0x40
mov byte [rsp + 0x10c], r15b
cmp cx, word [rax]
jne 0x14007b552
add rax, 2
xor edx, edx
mov byte [rsp + 0x10c], dl
mov qword [rsp + 0x498], rax
jmp 0x14007b554
xor edx, edx
movzx ecx, word [rax]
cmp r8w, cx
jne 0x14007b592
cmp r10w, cx
ja 0x14007b569
cmp cx, 0xd
jbe 0x14007b583
cmp r9w, cx
je 0x14007b583
add rax, 2
mov qword [rsp + 0x498], rax
mov cx, word [rax]
cmp cx, dx
jne 0x14007b55d
lea rcx, [rsp + 0x498]
call fcn.1400503f4
jmp 0x14007b5be
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x498]
call fcn.14005de38
mov dword [rsp + 0x27c], eax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0xd0], rax
xor edx, edx
cmp sil, dl
je 0x14007b603
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x498]
xor r8d, r8d
call fcn.140068758
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x498]
mov qword [rsp + 0x178], rax
call fcn.14005dd68
xor edx, edx
mov dword [rsp + 0xb0], eax
mov rcx, qword [rsp + 0x498]
mov qword [rsp + 0x2c0], rdx
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14007b654
mov r8d, 0x20
lea r9d, [r8 - 0x17]
cmp r9w, ax
ja 0x14007b638
cmp ax, 0xd
jbe 0x14007b6a6
cmp r8w, ax
je 0x14007b6a6
add rcx, 2
mov qword [rsp + 0x498], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14007b62c
jmp 0x14007b6a6
cmp sil, dl
je 0x14007b6a6
xor esi, esi
cmp ax, si
je 0x14007b6a8
mov qword [rsp + 0x2c8], rcx
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x2c8]
xor r8d, r8d
call fcn.140024200
mov rsi, qword [rsp + 0x2c8]
mov rax, qword [rsp + 0x2c0]
xor ecx, ecx
mov dword [rsp + 0x278], r15d
mov qword [rsp + 0x290], rsi
mov word [rsi + rax*2], cx
xor esi, esi
mov byte [rsp + 0x8c], sil
mov byte [rsp + 0xc3], sil
mov byte [rsp + 0xb9], sil
cmp r12b, r15b
je 0x14007b6d9
mov eax, dword [rsp + 0x84]
cmp r12b, bl
cmovl eax, esi
mov dword [rsp + 0x84], eax
mov r12, qword [rsp + 0x238]
lea rcx, [0x1400fa7c8]
mov r8d, 5
mov rdx, r12
mov r11, r12
mov qword [rsp + 0x498], r12
call fcn.140051938
mov ebx, 0x2a
lea ecx, [rbx + 0x32]
lea r10d, [rbx - 7]
cmp al, sil
je 0x14007b870
lea r8, [r12 + 0xa]
mov qword [rsp + 0x498], r8
mov rdx, r8
cmp bx, word [r8]
jne 0x14007b7d4
lea rax, [r8 + 2]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x198]
mov qword [rsp + 0x198], rax
call fcn.14005de38
mov rdx, qword [rsp + 0x198]
mov byte [rsp + 0xb9], r15b
cmp bx, word [rdx]
jne 0x14007b7b0
add rdx, 2
lea rcx, [rsp + 0x198]
mov qword [rsp + 0x198], rdx
lea rdx, [rsp + 0x188]
call fcn.14005de38
mov rdx, qword [rsp + 0x198]
mov rax, qword [rsp + 0x188]
mov byte [rsp + 0xb9], 0x11
mov qword [rsp + 0x2a0], rax
cmp bx, word [rdx]
jne 0x14007b7b0
add rdx, 2
mov rax, qword [rsp + 0x210]
mov ecx, 0x5c
mov r8, rdx
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x498], rdx
lea r10d, [rcx - 0x39]
movzx eax, word [r8]
cmp cx, ax
je 0x14007b7fc
mov ecx, dword [rsp + 0x1e8]
mov r9d, 0x2f
movzx ecx, cl
cmp r9w, ax
cmovne ecx, r15d
mov dword [rsp + 0x1e8], ecx
cmp ax, si
je 0x14007b836
mov ecx, 0x20
lea r9d, [rcx - 0x17]
cmp r9w, ax
ja 0x14007b816
cmp ax, 0xd
jbe 0x14007b836
cmp cx, ax
je 0x14007b836
cmp ax, r10w
je 0x14007b836
add r8, 2
mov qword [rsp + 0x498], r8
mov ax, word [r8]
cmp ax, si
jne 0x14007b80a
sub r8, rdx
sar r8, 1
cmp r8, rsi
jle 0x14007b859
lea rcx, [rsp + 0x228]
call fcn.1400582a0
mov dword [rsp + 0x84], 0xfffc0000
lea rcx, [rsp + 0x498]
call fcn.1400503f4
mov r11, qword [rsp + 0x498]
jmp 0x14007b8da
lea rcx, [0x1400fa7c4]
mov r8d, 2
mov rdx, r12
call fcn.140051938
cmp al, sil
je 0x14007b897
lea r11, [r12 + 4]
mov qword [rsp + 0x498], r11
cmp word [r11], 0x30
jb 0x14007b8a5
cmp word [r11], 0x39
jbe 0x14007b8b0
mov eax, 0x28
cmp ax, word [r11]
jne 0x14007b8cd
lea rdx, [rsp + 0x84]
lea rcx, [rsp + 0x498]
call fcn.1400ab4bc
mov r11, qword [rsp + 0x498]
cmp word [r12], si
setne byte [rsp + 0x8c]
mov rax, qword [rsp + 0x1d0]
shl rax, 9
mov qword [rsp + 0x168], rax
mov eax, 0x23
cmp ax, word [r11]
je 0x14007b908
mov eax, 0x3a
cmp ax, word [r11]
jne 0x14007ba06
add r11, 2
lea rcx, [0x1400fa7c0]
mov r8d, 2
mov rdx, r11
mov qword [rsp + 0x498], r11
call fcn.140051938
lea rcx, [0x1400fa7bc]
mov r8d, 2
mov rdx, r11
mov bl, al
mov byte [rsp + 0x4d], al
call fcn.140051938
mov cl, al
mov byte [rsp + 0x60], al
mov al, bl
or al, cl
sete byte [rsp + 0xc3]
cmp bl, sil
jne 0x14007b97c
mov eax, 0x2b
cmp ax, word [r11]
jne 0x14007b97c
mov dl, r15b
add r11, 2
mov dword [rsp + 0x180], edx
mov qword [rsp + 0x498], r11
cmp cl, sil
jne 0x14007b9b6
mov eax, 0x40
cmp ax, word [r11]
je 0x14007b9a2
mov eax, 0x2d
cmp ax, word [r11]
je 0x14007b9a2
mov eax, 0x3d
cmp ax, word [r11]
jne 0x14007b9b6
or dword [rsp + 0xf0], 2
add r11, 2
mov qword [rsp + 0x498], r11
cmp word [r11], 0x30
jb 0x14007b9c4
cmp word [r11], 0x39
jbe 0x14007b9cf
mov eax, 0x28
cmp ax, word [r11]
jne 0x14007ba06
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x498]
call fcn.14006648c
mov ebp, dword [rsp + 0x4a8]
cmp eax, esi
mov dword [rsp + 0x48], ebp
jle 0x14007ba06
mov byte [rsp + 0x8d], r15b
cmp ebp, esi
jne 0x14007ba08
mov byte [rsp + 0x4d], r15b
jmp 0x14007ba0a
cmp ebp, esi
jg 0x14007ba25
cmp byte [rsp + 0xc8], sil
jg 0x14007ba25
cmp qword [rsp + 0x298], rsi
jne 0x14007ba25
mov ebp, esi
cmp r13, rsi
je 0x14007ba28
mov ebp, r15d
mov ebx, dword [rsp + 0x84]
mov dword [rsp + 0xe0], ebx
mov dword [rsp + 0x4a8], ebx
cmp byte [rsp + 0x4c], sil
je 0x14007ba6b
cmp ebp, esi
jne 0x14007ba6b
cmp word [r12], si
jne 0x14007ba6b
mov eax, 0xfffc0000
mov dword [rsp + 0x84], eax
mov ebx, eax
mov dword [rsp + 0xe0], eax
mov dword [rsp + 0x4a8], eax
mov r13, qword [rsp + 0x228]
mov r8d, dword [rsp + 0x84]
xor eax, eax
mov word [rsp + 0x340], ax
cmp word [r13], ax
lea rsi, [rsp + 0x340]
cmovne rsi, r13
lea rdx, str..PhysicalDrive_d
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x198], rsi
call qword [sym.imp.USER32.dll_wsprintfW]
xor r11d, r11d
cmp byte [rsp + 0xb8], r11b
jg 0x14007bb18
cmp qword [rsp + 0x1d0], r11
jne 0x14007bb18
lea r8d, [r11 + 0x11]
lea rcx, str..PhysicalDrive
mov rdx, rsi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
xor r11d, r11d
cmp eax, r11d
jne 0x14007bb18
lea rax, [rsi + 0x22]
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x130], rax
call fcn.14005c024
mov ebx, dword [rsp + 0x4a8]
mov dword [rsp + 0xe0], ebx
xor r11d, r11d
mov cl, byte [rsp + 0x42]
cmp cl, r11b
jne 0x14007bb2f
cmp byte [rsp + 0x41], r11b
jne 0x14007bb2f
cmp byte [rsp + 0x40], r11b
je 0x14007bb53
cmp dword [rsp + 0x84], r11d
jge 0x14007bb53
cmp ebx, r11d
jge 0x14007bb53
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, 0xffffffff80070057
jmp 0x14008043f
mov r10d, dword [rsp + 0xe0]
or r8, 0xffffffffffffffff
mov rbx, r11
mov eax, r8d
mov rsi, 0xffffffff80070057
mov qword [rsp + 0x1c8], r11
mov dword [rsp + 0x108], eax
mov al, byte [rsp + 0x4c]
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x210], rsi
mov byte [rsp + 0x4a8], r11b
cmp al, r11b
je 0x14007bca4
cmp r10d, r11d
mov rcx, qword [rsp + 0x158]
jge 0x14007bbc0
cmp qword [rsp + 0x110], r8
jle 0x14007bbc0
cmp rcx, r11
je 0x14007bca0
cmp rcx, r11
je 0x14007bc16
mov edx, 0x2a
cmp dx, word [rcx]
jne 0x14007bc16
movsx edx, al
mov ecx, r10d
and edx, 2
shr edx, 1
call fcn.14006897c
mov r10d, dword [rsp + 0xe0]
xor r11d, r11d
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x1c8], rax
lea eax, [r11 + 0x20]
or byte [0x14010e197], al
mov byte [rsp + 0x4a8], al
mov al, byte [rsp + 0x4c]
or r8, 0xffffffffffffffff
mov rcx, r11
cmp r10d, r11d
jge 0x14007bc2a
cmp qword [rsp + 0x110], r8
jle 0x14007bc2a
cmp rcx, r11
je 0x14007bca0
mov r8, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x110]
movsx r9d, al
and r9d, 2
mov qword [rsp + 0x20], rcx
mov ecx, r10d
shr r9d, 1
call fcn.1400065b4
mov r10d, dword [rsp + 0xe0]
mov cl, byte [rsp + 0x42]
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x210], rax
or rax, 0xffffffffffffffff
lea r9d, [rax + 0x11]
cmp qword [rsp + 0x110], rax
je 0x14007bc94
or byte [rsp + 0x4a8], r9b
or byte [0x14010e197], r9b
xor r11d, r11d
jmp 0x14007bcaa
xor r11d, r11d
mov byte [0x14010e197], r11b
jmp 0x14007bcaa
mov cl, byte [rsp + 0x42]
mov r9d, 0x10
movdqu xmm6, xmmword [rsp + 0x1a8]
movdqu xmm7, xmmword [rsp + 0x1f8]
mov dl, byte [rsp + 0x43]
cmp byte [rsp + 0x68], r11b
jbe 0x14007c03c
cmp dl, r11b
jne 0x14007c03c
cmp dword [rsp + 0x84], r11d
jge 0x14007bce9
cmp word [r13], r11w
je 0x14007c021
mov eax, dword [rsp + 0x74]
mov ecx, dword [rsp + 0x48]
cmp eax, r11d
jle 0x14007bcfe
cmp eax, ecx
je 0x14007c021
cmp ecx, 4
jg 0x14007c021
cmp byte [rsp + 0x50], 2
jl 0x14007c021
mov rdx, qword [rsp + 0x198]
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r11
call fcn.140003588
mov rbx, qword [rsp + 0x140]
xor eax, eax
cmp rbx, rax
jne 0x14007bd6e
lea rcx, [rsp + 0x4a8]
call fcn.140055304
jmp 0x140080433
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.14005db6c
mov esi, 0x200
mov rcx, rbx
mov edx, esi
mov dword [rsp + 0x108], eax
call fcn.140054a58
mov ebp, esi
lea rcx, [rsp + 0x188]
cmp eax, esi
cmovge ebp, eax
mov dword [rsp + 0x6c], ebp
lea edx, [rbp + rbp*2]
call fcn.140057dc0
mov rax, qword [rsp + 0x188]
lea esi, [rbp - 1]
lea rcx, [rbp + rax]
mov edx, ebp
xor eax, eax
mov qword [rsp + 0x130], rdx
not esi
lea r9, [rsp + 0xbc]
and rsi, rcx
mov r8d, ebp
mov rcx, rbx
lea r15, [rbp + rsi]
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x20], rax
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ebp, ebp
cmp eax, ebp
jne 0x14007be48
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rbp + 1]
cmp eax, ebp
cmove eax, ecx
lea rcx, [rsp + 0x188]
mov esi, eax
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007c02e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007c02e
mov r8d, 0x200
mov rdx, r15
mov rcx, rsi
call fcn.14001aa74
mov edx, dword [rsp + 0x74]
mov ecx, dword [rsp + 0x48]
mov eax, 1
mov r8d, 0x10
mov byte [r15 + 0x1fe], 0x55
sub edx, eax
sub ecx, eax
mov byte [r15 + 0x1ff], 0xaa
mov eax, edx
mov dword [rsp + 0x74], edx
mov dword [rsp + 0x48], ecx
shl eax, 4
movsxd rbp, eax
mov eax, ecx
shl eax, 4
movsxd rsi, eax
mov rax, qword [rsp + 0x120]
lea rdx, [rax + rbp + 0x1be]
lea rcx, [rsi + r15 + 0x1be]
call fcn.14001aa74
mov rax, qword [rsp + 0x120]
lea rcx, [r15 + rbp + 0x1be]
lea rdx, [rsi + rax + 0x1be]
mov r8d, 0x10
call fcn.14001aa74
mov rdx, qword [rsp + 0x168]
xor r8d, r8d
mov rcx, rbx
call fcn.140051824
xor ebp, ebp
cmp eax, ebp
je 0x14007bf30
lea rcx, [rsp + 0x188]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007bf1d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, 1
jmp 0x14008043f
mov r8, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x120]
mov rdx, r15
mov rsi, rbp
mov qword [rsp + 0x1c8], rbp
call fcn.140050454
cmp eax, ebp
je 0x14007bf9b
mov r8d, dword [rsp + 0x6c]
lea r9, [rsp + 0xbc]
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebp
jne 0x14007bf93
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, ebp
cmove eax, ecx
mov esi, eax
mov qword [rsp + 0x1c8], rsi
mov rcx, rbx
call fcn.1400551f0
mov cl, byte [rsp + 0x40]
mov r8b, byte [rsp + 0x4e]
mov dl, byte [rsp + 0x41]
mov al, cl
or al, r8b
or dl, al
mov al, cl
lea rcx, [rsp + 0x188]
or al, dl
mov byte [rsp + 0x41], dl
or al, r8b
je 0x14007be1b
call fcn.140050424
mov r15d, 1
xor r11d, r11d
lea r9d, [r11 + 0x10]
mov dl, byte [rsp + 0x41]
mov sil, byte [rsp + 0x40]
mov eax, dword [rsp + 0xe0]
mov r10b, byte [rsp + 0x42]
mov r8d, 0x20
cmp eax, r11d
jl 0x14007ec7f
cmp r10b, r8b
je 0x14007c00c
cmp r10b, r9b
jne 0x14007ebe0
mov ecx, dword [rsp + 0x108]
cmp ecx, 0xb
je 0x14007ec05
jmp 0x14007ebe7
lea rcx, [rsp + 0x4a8]
call fcn.140055304
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14008043f
cmp cl, r9b
mov cl, byte [rsp + 0x40]
jne 0x14007c04e
mov eax, 0x20
test al, cl
jne 0x14007bfda
mov al, byte [rsp + 0x4c]
cmp al, r11b
je 0x14007c0a7
cmp ebp, r11d
jne 0x14007c0a7
mov dl, byte [rsp + 0x41]
cmp byte [rsp + 0x4e], r11b
jne 0x14007bfde
cmp dl, r11b
jne 0x14007bfde
cmp cl, r11b
jne 0x14007bfde
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
cmp rdi, rax
je 0x14007c09a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, qword [rsp + 0x210]
jmp 0x14008043f
mov r9, qword [rsp + 0x298]
cmp r9, r11
jne 0x14007ffb5
mov rbp, qword [rsp + 0x2a8]
cmp rbp, r11
jne 0x14007f9f8
mov ebp, dword [rsp + 0xc8]
cmp bpl, 6
je 0x14007f8d7
cmp bpl, r15b
je 0x14007f7cb
cmp bpl, 2
jne 0x14007c0f7
cmp byte [rsp + 0xb8], r11b
je 0x14007ed87
mov qword [rsp + 0x58], r11
cmp bpl, 3
je 0x14007f6d5
mov esi, 4
cmp bpl, sil
je 0x14007f5be
lea r8d, [rsi + 1]
cmp bpl, r8b
je 0x14007f5be
lea eax, [rsi + 3]
cmp bpl, al
je 0x14007f4ad
cmp byte [rsp + 0x60], r11b
je 0x14007c162
mov ecx, r11d
mov rbx, r11
mov word [rsp + 0x128], r11w
mov rbp, r11
mov qword [rsp + 0x98], r11
mov eax, r8d
mov dword [rsp + 0xdc], ecx
mov qword [rsp + 0xd0], rbx
jmp 0x14007c17d
mov eax, dword [rsp + 0x48]
mov rbp, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xd0]
mov ecx, dword [rsp + 0xdc]
cmp byte [rsp + 0x4d], r11b
cmovne eax, r8d
mov r8d, dword [rsp + 0x190]
cmp r8b, r11b
je 0x14007c1bc
mov ecx, r11d
mov rbx, r11
mov word [rsp + 0x128], r11w
mov rbp, r11
mov qword [rsp + 0x98], r11
mov dword [rsp + 0xdc], ecx
mov qword [rsp + 0xd0], rbx
cmp byte [rsp + 0x8c], r11b
je 0x14007c1cf
cmp r10d, r11d
jl 0x14007ede2
cmp byte [rsp + 0xc3], r11b
je 0x14007c1e2
cmp eax, r11d
jl 0x14007ede2
sub eax, r15d
mov byte [rsp + 0x4f], r11b
mov byte [rsp + 0x104], r11b
mov dword [rsp + 0x48], eax
or rax, 0xffffffffffffffff
mov word [rsp + 0xf4], r11w
mov byte [rsp + 0x68], r11b
mov byte [rsp + 0xc2], r11b
mov word [rsp + 0xd8], r11w
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x1c0], rax
cmp dl, r11b
jne 0x14007c24b
cmp ecx, r11d
jne 0x14007c24b
cmp rbp, r11
jne 0x14007c24b
movzx r8d, r8b
cmp rbx, r11
cmove r8d, r15d
mov dword [rsp + 0x190], r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
cmp byte [rsp + 0x105], al
je 0x14007c26b
cmp rbp, rax
jl 0x14007c26b
cmp rbx, r15
mov esi, r15d
jge 0x14007c26d
mov esi, eax
mov rdx, qword [rsp + 0x198]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov dword [rsp + 0xa8], esi
mov qword [rsp + 0x20], rax
call fcn.140003588
mov rbx, qword [rsp + 0x140]
xor eax, eax
cmp rbx, rax
je 0x14007f496
mov edx, 0x200
mov rcx, rbx
call fcn.140054a58
mov ecx, 0x200
cmp eax, ecx
cmovge ecx, eax
xor edx, edx
mov dword [rsp + 0x64], ecx
cmp esi, edx
je 0x14007c356
cmp rbp, rdx
jl 0x14007c31b
lea r9d, [rcx + rcx*4]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
mov edx, dword [rsp + 0xe0]
mov r8, rbp
lea rcx, [rsp + 0x4a8]
shl r9d, 3
shl r8, 9
call fcn.1400552b0
mov ecx, dword [rsp + 0x64]
xor edx, edx
cmp byte [rsp + 0x4d], dl
jne 0x14007c356
mov rdx, qword [rsp + 0x1d0]
mov r8, qword [rsp + 0xd0]
mov r9d, ecx
add rdx, rbp
mov rcx, rbx
call fcn.14004c54c
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
mov qword [rsp + 0x210], rax
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.14005db6c
xor r10d, r10d
mov dword [rsp + 0x108], eax
cmp byte [rsp + 0x42], r10b
je 0x14007c38c
mov ebp, r10d
lea rcx, [rsp + 0x58]
call fcn.140050424
jmp 0x14007bfd3
mov r8d, dword [rsp + 0xdc]
mov rbp, r10
mov qword [rsp + 0x130], r10
cmp r8d, 0xff
jg 0x14007f464
mov r9b, byte [rsp + 0x4d]
mov eax, dword [rsp + 0x48]
cmp r9b, r10b
jne 0x14007c407
cmp eax, r10d
jge 0x14007c407
mov rdx, qword [rsp + 0x98]
cmp rdx, r10
jge 0x14007f464
cmp qword [rsp + 0xd0], r10
jge 0x14007f464
cmp r8d, r10d
jge 0x14007f464
or rcx, 0xffffffffffffffff
mov r8d, ecx
mov dword [rsp + 0xdc], ecx
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x98], rcx
jmp 0x14007c40b
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x250], r10
mov ecx, 4
mov qword [rsp + 0x218], r10
mov dword [rsp + 0xc4], eax
cmp r9b, r10b
jne 0x14007c44b
cmp byte [rsp + 0x60], r10b
jne 0x14007c44b
cmp eax, ecx
jl 0x14007cb4c
cmp byte [rsp + 0x43], r10b
jne 0x14007cb4c
cmp byte [rsp + 0x90], r10b
jne 0x14007cb4c
mov esi, dword [rsp + 0x48]
cmp r9b, bpl
mov eax, 5
cmovne esi, ecx
mov dword [rsp + 0x48], esi
cmp r8d, eax
je 0x14007c52a
cmp r8d, 0xf
je 0x14007c52a
lea rcx, [rsp + 0x150]
mov edx, 0x100000
mov dword [rsp + 0x6c], ebp
call fcn.140057dc0
mov rdx, qword [rsp + 0x150]
lea r8, [rsp + 0x6c]
mov rcx, rbx
call fcn.140055030
mov ecx, dword [rsp + 0x6c]
mov r11d, 4
mov r8, rax
mov qword [rsp + 0xe8], rax
mov al, byte [rsp + 0x4d]
mov dword [rsp + 0x80], ecx
cmp al, bpl
jne 0x14007c4e3
cmp ecx, esi
jge 0x14007c4e3
cmp esi, r11d
jge 0x14007c51d
mov r9b, byte [rsp + 0x60]
cmp al, bpl
jne 0x14007c55b
cmp r9b, bpl
jne 0x14007c55b
lea eax, [rsi + 1]
mov dl, bpl
cmp eax, r11d
mov byte [rsp + 0x44], dl
jg 0x14007c505
dec eax
jmp 0x14007c50c
lea eax, [rax*4 - 0x10]
cmp eax, ebp
jle 0x14007c51d
cmp eax, ecx
jl 0x14007c599
cmp esi, r11d
jle 0x14007c599
lea rcx, [rsp + 0x150]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007c553
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x14007ffd8
mov dl, r15b
mov byte [rsp + 0x44], dl
cmp r9b, bpl
jne 0x14007c594
cmp al, bpl
je 0x14007c599
cmp dword [rsp + 0xdc], ebp
jl 0x14007c51d
cmp word [rsp + 0x128], bp
mov eax, ebp
mov r9d, 0x80
cmovg ax, r9w
mov word [rsp + 0x128], ax
jmp 0x14007c599
cmp ecx, r11d
jle 0x14007c51d
cmp ecx, r11d
jle 0x14007c5a8
lea r10d, [rcx - 4]
and r10d, 0xfffffffc
jmp 0x14007c5ab
mov r10d, ebp
or rcx, 0xffffffffffffffff
xor eax, eax
mov ebp, ecx
mov dword [rsp + 0xc4], ecx
cmp dl, al
jne 0x14007c5ce
cmp esi, r11d
lea r10d, [rsi*4 - 0x10]
jge 0x14007c5ce
mov r10d, eax
mov r9d, ecx
lea rcx, [r8 + 0x50]
cmp byte [rcx], 5
je 0x14007c5df
cmp byte [rcx], 0xf
jne 0x14007c5e2
mov r9d, eax
add eax, r15d
add rcx, 0x90
cmp eax, r11d
jl 0x14007c5d5
xor ecx, ecx
cmp dl, cl
je 0x14007c600
cmp r9d, ecx
jl 0x14007c69d
mov r11d, 0x1ff
movsxd rax, r9d
lea r15, [rax + rax*8]
add r15, r15
mov rax, qword [r8 + r15*8 + 0x38]
cqo
and rdx, r11
lea rsi, [rdx + rax]
mov rax, qword [r8 + r15*8 + 0x40]
cqo
sar rsi, 9
and rdx, r11
lea r8, [rdx + rax]
movsxd rax, r10d
lea r11, [rax + rax*8]
sar r8, 9
add r11, r11
cmp byte [rsp + 0x60], cl
je 0x14007c794
mov eax, dword [rsp + 0x80]
mov r9d, ecx
cmp eax, 8
je 0x14007c707
mov r10, qword [rsp + 0xe8]
add eax, 0xfffffff8
mov r8, rcx
and eax, 0xfffffffc
movsxd rdx, eax
lea rax, [rdx + rdx*8]
add rax, rax
lea rcx, [r10 + rax*8 + 0x50]
mov eax, 1
cmp byte [rcx], 5
je 0x14007c6dc
cmp byte [rcx], 0xf
je 0x14007c6dc
add r8, rax
add r9d, eax
add rcx, 0x90
cmp r8, 4
jl 0x14007c680
lea rcx, [rsp + 0x150]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007ffd3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007ffd3
lea rcx, [rdx + rdx*8]
add rcx, rcx
mov rax, qword [r10 + rcx*8 + 0x38]
cqo
and edx, 0x1ff
lea rsi, [rdx + rax]
mov eax, dword [r10 + rcx*8 + 0x54]
xor ecx, ecx
sar rsi, 9
sub rsi, rax
cmp r9d, ecx
jl 0x14007c69d
xor eax, eax
mov dword [rsp + 0x2d8], ecx
lea r8, [rsp + 0x2d8]
mov dword [rsp + 0x2dc], eax
mov dword [rsp + 0x2e0], eax
mov dword [rsp + 0x2e4], eax
mov rax, qword [rsp + 0x1d0]
mov rcx, rbx
lea rdx, [rsi + rax]
call fcn.140068614
mov sil, byte [rsp + 0x40]
xor ebp, ebp
mov qword [rsp + 0x1c8], rbp
cmp sil, bpl
jne 0x14007c767
cmp byte [rsp + 0x41], bpl
jne 0x14007c767
cmp byte [rsp + 0x4e], bpl
je 0x14007edf1
lea rcx, [rsp + 0x150]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
mov dl, byte [rsp + 0x41]
mov r15d, 1
lea r9d, [r15 + 0xf]
xor r11d, r11d
jmp 0x14007bfe3
cmp dword [rsp + 0x80], 4
jg 0x14007c7a7
mov dl, byte [rsp + 0x44]
mov ebp, r9d
jmp 0x14007c7e6
mov rdx, qword [rsp + 0xe8]
lea rax, [rax + rax*8]
add rax, rax
lea rdx, [rdx + rax*8 + 0x50]
mov eax, 5
cmp byte [rdx], al
je 0x14007c7c9
cmp byte [rdx], 0xf
jne 0x14007c7cb
mov ebp, ecx
inc ecx
add rdx, 0x90
cmp ecx, 4
jl 0x14007c7c0
mov dl, byte [rsp + 0x44]
xor ecx, ecx
cmp dl, cl
jne 0x14007c7e6
add ebp, r10d
cmp ebp, ecx
jge 0x14007c7f4
cmp byte [rsp + 0x4d], cl
je 0x14007c69d
mov eax, ecx
cmp dl, cl
je 0x14007c803
mov dword [rsp + 0xc4], ecx
jmp 0x14007c853
mov rcx, qword [rsp + 0xe8]
mov edi, dword [rsp + 0xc4]
lea rcx, [rcx + r11*8 + 0x290]
cmp byte [rcx], 0
jne 0x14007c823
test eax, eax
jne 0x14007c82e
cmp byte [rcx], 5
je 0x14007c82e
cmp byte [rcx], 0xf
cmovne edi, eax
inc eax
add rcx, 0x90
cmp eax, 4
jl 0x14007c81a
mov dword [rsp + 0xc4], edi
xor ecx, ecx
lea rdi, [0x14010edd8]
mov eax, dword [rsp + 0xc4]
cmp dl, cl
jne 0x14007c85f
cmp eax, ecx
jl 0x14007c69d
cmp byte [rsp + 0x4d], cl
je 0x14007ca82
cmp r10d, ecx
mov eax, r9d
cmovg eax, r10d
cdqe
lea rcx, [rax + rax*8]
mov rax, qword [rsp + 0xe8]
add rcx, rcx
mov rax, qword [rax + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
xor edx, edx
sar rax, 9
cmp dword [rsp + 0x80], 4
mov qword [rsp + 0x250], rax
jle 0x14007c98e
cmp ebp, edx
jge 0x14007c98e
mov rcx, qword [rsp + 0xe8]
cmp byte [rcx + r11*8 + 0x50], dl
je 0x14007c94e
mov ebp, dword [rsp + 0x80]
lea eax, [rbp - 8]
and eax, 0xfffffffc
inc eax
cmp ebp, 8
cmovg r9d, eax
movsxd rax, r9d
mov r9d, 0x1ff
lea rax, [rax + rax*8]
add rax, rax
mov rax, qword [rcx + rax*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov qword [rsp + 0x250], rax
mov rax, qword [rcx + r11*8 + 0x40]
add rax, qword [rcx + r11*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov rcx, rax
mov r15, rax
mov qword [rsp + 0x218], rax
sub r8, rcx
sub rax, rsi
add r8, rsi
mov qword [rsp + 0x240], rax
xor edx, edx
mov qword [rsp + 0x110], r8
jmp 0x14007c9d9
cmp r10d, 4
jne 0x14007ee0d
cmp r9d, edx
jl 0x14007ee0d
cmp byte [rcx + r15*8 + 0x50], dl
je 0x14007ee0d
mov ebp, r9d
or r10d, 0xffffffff
mov qword [rsp + 0x250], rsi
mov r9, rsi
mov rcx, rsi
mov r15, rsi
mov qword [rsp + 0x218], rsi
jmp 0x14007c9d1
cmp r10d, edx
jle 0x14007c9b6
mov rdx, qword [rsp + 0xe8]
mov rax, qword [rdx + rcx*8 + 0x40]
add rax, qword [rdx + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
xor edx, edx
mov ebp, dword [rsp + 0x80]
sub r8, rax
mov r15, rax
mov qword [rsp + 0x218], rax
mov rcx, rax
add r8, rsi
mov qword [rsp + 0x110], rdx
cmp r8, rdx
jle 0x14007c69d
mov rsi, qword [rsp + 0x98]
cmp byte [rsp + 0xc0], dl
je 0x14007c9f6
add rsi, rcx
lea rax, [rcx + 1]
cmp rsi, rax
cmovle rsi, rax
sub r8, rsi
mov qword [rsp + 0x98], rsi
mov rsi, qword [rsp + 0xd0]
add r8, rcx
cmp rsi, r8
cmovg rsi, r8
cmp rsi, rdx
mov qword [rsp + 0xd0], rsi
jl 0x14007c69d
cmp r10d, edx
jle 0x14007ca53
lea eax, [rbp - 1]
and eax, 0xfffffffc
cmp eax, 3
jg 0x14007ca43
inc eax
jmp 0x14007ca4f
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
inc eax
jmp 0x14007ca6e
and ebp, 0xfffffffc
cmp ebp, 3
jg 0x14007ca60
lea eax, [rbp + 1]
jmp 0x14007ca6e
mov eax, ebp
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
mov dword [rsp + 0x48], eax
mov rbp, r15
mov qword [rsp + 0x130], r15
jmp 0x14007cb26
mov r8, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x98]
movsxd rax, ebp
lea rcx, [rax + rax*8]
mov r9d, 0x1ff
add rcx, rcx
mov rax, qword [r8 + rcx*8 + 0x38]
cqo
and rdx, r9
add rax, rdx
sar rax, 9
mov rbp, rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x218], rax
mov rax, qword [r8 + rcx*8 + 0x40]
xor ecx, ecx
cqo
and rdx, r9
add rax, rdx
sar rax, 9
cmp byte [rsp + 0xc0], cl
je 0x14007caed
add rsi, rbp
mov qword [rsp + 0x98], rsi
cmp rsi, rcx
jle 0x14007cb01
cmp rsi, rbp
cmovle rsi, rbp
mov qword [rsp + 0x98], rsi
mov rsi, qword [rsp + 0xd0]
cmp rsi, rcx
jle 0x14007cb26
cmp rsi, rax
cmovg rsi, rax
cmp rsi, rcx
mov qword [rsp + 0xd0], rsi
jl 0x14007c69d
lea rcx, [rsp + 0x150]
call fcn.140050424
mov esi, dword [rsp + 0xa8]
mov eax, dword [rsp + 0x48]
mov r9b, byte [rsp + 0x4d]
mov r15d, 1
xor r10d, r10d
mov rcx, qword [rsp + 0x1d0]
cmp eax, 4
setge byte [rsp + 0xba]
add rbp, rcx
shl rbp, 9
cmp esi, r10d
mov esi, dword [rsp + 0x64]
mov qword [rsp + 0x1f8], rbp
je 0x14007cbb2
cmp r9b, r10b
je 0x14007cbb2
mov rax, qword [rsp + 0x98]
mov r8, qword [rsp + 0xd0]
mov r9d, esi
lea rdx, [rcx + rax]
mov rcx, rbx
call fcn.14004c54c
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
mov qword [rsp + 0x210], rax
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.140051824
cmp rax, rbp
jne 0x14007f432
lea edx, [rsi + rsi*2]
lea rcx, [rsp + 0xf8]
call fcn.140057dc0
mov rax, qword [rsp + 0xf8]
mov r8d, esi
lea edx, [rsi - 1]
lea rcx, [r8 + rax]
mov qword [rsp + 0x160], r8
not edx
and rdx, rcx
mov qword [rsp + 0x188], rdx
lea rsi, [r8 + rdx]
xor edx, edx
mov rcx, rsi
mov qword [rsp + 0x1f0], rsi
call fcn.1400d3e60
mov r8d, dword [rsp + 0x64]
xor eax, eax
lea r9, [rsp + 0xbc]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
cmp eax, ecx
je 0x14007f425
mov r8, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x188]
mov rdx, rsi
call fcn.14001aa74
xor eax, eax
cmp byte [rsp + 0x90], al
je 0x14007cd9c
cmp byte [rsp + 0x43], al
jne 0x14007cd9c
mov rcx, rsi
call fcn.140055278
mov al, byte [rsp + 0x88]
mov edx, dword [rsp + 0x64]
xor r9d, r9d
cmp al, r9b
jg 0x14007cca6
jge 0x14007cca1
lea eax, [rdx + rdx + 0x4000]
mov ecx, eax
cmp qword [rsp + 0x168], rcx
jg 0x14007cca6
mov al, r9b
jmp 0x14007cca9
mov al, r15b
cmp byte [rsp + 0x90], r15b
jne 0x14007ccea
cmp al, r9b
je 0x14007ccd5
cmp edx, 0x200
jbe 0x14007ccd5
lea r8d, [rdx - 0x200]
lea rcx, [rsi + 0x200]
xor edx, edx
call fcn.1400d3e60
xor edx, edx
lea rcx, [rsi + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400d3e60
xor r9d, r9d
mov r8, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x188]
mov eax, 0xaa55
mov rdx, rsi
mov word [rsi + 0x1fe], ax
call fcn.140050454
cmp eax, r9d
je 0x14007cd5f
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.140051824
mov r8d, dword [rsp + 0x64]
xor eax, eax
lea r9, [rsp + 0xbc]
mov rdx, rsi
mov rcx, rbx
mov dword [rsp + 0xbc], eax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r9d, r9d
mov rsi, r9
cmp eax, r9d
sete sil
mov qword [rsp + 0x1c8], rsi
jmp 0x14007cd67
mov rsi, qword [rsp + 0x1c8]
mov al, byte [rsp + 0x40]
or al, byte [rsp + 0x41]
or al, byte [rsp + 0x4e]
je 0x14007ee29
cmp dword [rsp + 0x84], r9d
jl 0x14007ee29
mov ebp, r9d
lea rcx, [rsp + 0xf8]
call fcn.140050424
jmp 0x14007c37d
xor esi, esi
cmp byte [rsp + 0xc8], 2
je 0x14007ce00
cmp byte [rsp + 0x50], sil
jne 0x14007ce00
cmp byte [rsp + 0x8d], sil
je 0x14007ce12
mov eax, dword [rsp + 0x48]
cmp eax, r15d
jg 0x14007ce04
lea rcx, [rsp + 0xf8]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007cdf8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14007ffd8
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x8d], sil
je 0x14007ce12
cmp eax, esi
jl 0x14007cdc2
lea rcx, [rsp + 0x118]
mov edx, 0x100000
call fcn.140057dc0
cmp dword [rsp + 0xe0], esi
mov rbp, qword [rsp + 0x118]
mov dword [rsp + 0xbc], esi
jl 0x14007ce58
mov rdx, rbp
mov rcx, rbx
call fcn.140054ca8
cqo
idiv qword [rsp + 0x160]
xor ecx, ecx
mov rsi, rax
jmp 0x14007ceb3
mov rax, qword [rsp + 0x2a0]
xor ecx, ecx
lea r8, [rsp + 0x2e8]
cmp rax, rcx
mov rcx, qword [rsp + 0x198]
cmovge rsi, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor ecx, ecx
cmp eax, ecx
je 0x14007cecf
lea eax, [rcx + 0x10]
test byte [rsp + 0x2e8], al
jne 0x14007cecf
mov esi, dword [rsp + 0x304]
mov eax, dword [rsp + 0x308]
and rsi, 0xfffffffffffffe00
shr rax, 9
shl rsi, 0x17
or rsi, rax
mov rax, qword [rsp + 0x2a0]
sub rsi, qword [rsp + 0x1d0]
cmp rax, rcx
jle 0x14007cecf
cmp rsi, rax
cmovb rsi, rax
lea r8, [rsp + 0x6c]
mov rdx, rbp
mov rcx, rbx
call fcn.140055030
xor r10d, r10d
mov rcx, rax
mov qword [rsp + 0x120], rax
cmp word [r13], r10w
jne 0x14007cef9
cmp rax, r10
je 0x14007cf43
cmp rax, r10
je 0x14007cf02
mov eax, dword [rax]
jmp 0x14007cf05
mov eax, r10d
cmp eax, r15d
sete r8b
mov byte [rsp + 0x44], r8b
cmp r8b, r10b
je 0x14007cf20
cmp byte [rsp + 0x102], r10b
je 0x14007cf23
mov r15b, r10b
cmp byte [rsp + 0x103], r10b
jne 0x14007cf64
cmp byte [rsp + 0x90], r10b
jne 0x14007cf64
cmp r15b, r10b
je 0x14007cf5d
cmp byte [rsp + 0x43], r10b
jne 0x14007cf64
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0xf8]
jmp 0x14007c6a5
cmp byte [rsp + 0x43], r10b
jne 0x14007cf43
mov rax, qword [rsp + 0x270]
mov r11, qword [rsp + 0x288]
mov rdx, qword [rsp + 0x280]
mov dword [rsp + 0x80], eax
mov eax, r11d
mov dword [rsp + 0x7c], edx
mov dword [rsp + 0xa8], eax
cmp word [r13], r10w
jne 0x14007d076
xor edx, edx
lea rcx, [rsp + 0x2ec]
mov dword [rsp + 0x2e8], r10d
lea r8d, [rdx + 0x14]
call fcn.1400d3e60
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xbc]
xor r8d, r8d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2e8]
mov edx, 0x70000
mov rcx, rbx
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor r10d, r10d
cmp qword [rsp + 0x270], r10
jg 0x14007d018
movsxd rdx, dword [rsp + 0x2f4]
mov dword [rsp + 0x80], edx
mov qword [rsp + 0x270], rdx
mov rdx, qword [rsp + 0x280]
cmp rdx, r10
jg 0x14007d039
movsxd rdx, dword [rsp + 0x2f8]
mov dword [rsp + 0x7c], edx
mov qword [rsp + 0x280], rdx
mov r11, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x120]
mov r8b, byte [rsp + 0x44]
cmp r11, r10
jg 0x14007d06f
movsxd rax, dword [rsp + 0x2fc]
mov dword [rsp + 0xa8], eax
mov r11, rax
mov qword [rsp + 0x288], rax
jmp 0x14007d076
mov eax, dword [rsp + 0xa8]
mov r9, qword [rsp + 0x270]
cmp r9, r10
jg 0x14007d099
mov r9d, 0xff
mov dword [rsp + 0x80], r9d
mov qword [rsp + 0x270], r9
cmp rdx, r10
jg 0x14007d0af
mov edx, 0x3f
mov dword [rsp + 0x7c], edx
mov qword [rsp + 0x280], rdx
cmp r11, r10
mov r10d, dword [rsp + 0x64]
jg 0x14007d0dc
xor r11d, r11d
mov eax, 0x200
cmp r10d, r11d
cmova eax, r10d
movsxd r9, eax
mov dword [rsp + 0xa8], eax
mov qword [rsp + 0x288], r9
jmp 0x14007d0df
xor r11d, r11d
mov r9, qword [rsp + 0x160]
cdq
and edx, 0x1ff
add eax, edx
lea rdx, [r9 + rbp]
mov qword [rsp + 0xe8], rdx
add rdx, r9
sar eax, 9
mov qword [rsp + 0x1e0], rdx
add rdx, 0x10000
mov dword [rsp + 0x6c], eax
mov qword [rsp + 0x120], rdx
cmp r15b, r11b
jne 0x14007dab7
cmp byte [rsp + 0x43], r11b
jne 0x14007dab7
mov r15b, r11b
cmp byte [rsp + 0x190], r11b
jne 0x14007d5cf
cmp qword [rsp + 0x98], r11
jge 0x14007d15a
cmp qword [rsp + 0xd0], r11
jl 0x14007d5cf
cmp dword [rsp + 0x48], r11d
jl 0x14007d5cf
lea rcx, [rsp + 0x220]
mov edx, 0x100000
call fcn.140057dc0
movsxd r15, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0x7c]
mov eax, r15d
imul eax, r9d
cdq
and edx, 0x1ff
add eax, edx
mov edx, dword [rsp + 0x80]
sar eax, 9
movsxd rsi, eax
mov eax, esi
imul eax, edx
xor edx, edx
cmp r15d, edx
movsxd rbp, eax
jle 0x14007ee8c
cmp word [r13], dx
jne 0x14007d206
mov dword [rsp + 0xa8], edx
mov rdx, qword [rsp + 0x220]
lea r8, [rsp + 0xa8]
mov rcx, rbx
call fcn.140055030
xor edx, edx
cmp rax, rdx
je 0x14007ee68
mov eax, dword [rsp + 0x48]
cmp eax, 4
jl 0x14007d201
cmp byte [rsp + 0x4d], dl
jne 0x14007d201
cmp eax, dword [rsp + 0xa8]
jge 0x14007ee8c
mov r9d, dword [rsp + 0x7c]
mov r11, qword [rsp + 0x98]
mov rax, rdx
cmp r11, rdx
jle 0x14007d2ff
mov rdx, qword [rsp + 0x258]
or rcx, 0xffffffffffffffff
cmp rdx, rcx
jne 0x14007d2b6
cmp r11, rbp
jl 0x14007d242
xor eax, eax
mov rdx, rbp
cmp byte [rsp + 0xba], al
je 0x14007d245
mov rdx, rsi
mov rcx, r11
call fcn.140055164
mov cl, byte [rsp + 0x78]
add r11, rax
mov qword [rsp + 0x98], r11
mov esi, dword [rsp + 0x6c]
xor edx, edx
mov r10, qword [rsp + 0xd0]
cmp r10, rdx
jle 0x14007d287
cmp byte [rsp + 0x100], dl
jne 0x14007d287
sub r10, rax
cmovs r10, rdx
mov qword [rsp + 0xd0], r10
cmp r11, rdx
mov r8, rdx
cmovg r8, r11
cmp r10, rdx
jle 0x14007d34e
mov rax, qword [rsp + 0x248]
cmp rax, 0xffffffffffffffff
jne 0x14007d30c
lea rax, [r8 + r10]
cqo
idiv rbp
jmp 0x14007d341
mov cl, byte [rsp + 0x78]
xor r8d, r8d
cmp cl, r8b
jne 0x14007d25c
movsxd rsi, dword [rsp + 0x6c]
lea rax, [r15 + rdx - 1]
cqo
idiv r15
mov rcx, rax
imul rcx, rsi
mov rdx, rcx
mov qword [rsp + 0x258], rcx
mov rcx, r11
call fcn.140055164
mov cl, byte [rsp + 0x78]
add r11, rax
mov qword [rsp + 0x98], r11
jmp 0x14007d260
mov esi, dword [rsp + 0x6c]
mov cl, byte [rsp + 0x78]
jmp 0x14007d262
cmp cl, dl
jne 0x14007d34e
lea rax, [r15 + rax - 1]
cqo
idiv r15
imul rax, r15
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov rcx, rax
mov qword [rsp + 0x248], rax
lea rax, [r8 + r10]
cqo
idiv rcx
sub r10, rdx
xor edx, edx
mov qword [rsp + 0xd0], r10
mov rax, qword [rsp + 0x110]
mov rbp, qword [rsp + 0x218]
mov r15d, dword [rsp + 0x80]
cmp rax, rdx
mov byte [rsp + 0x44], dl
mov byte [rsp + 0x8a], dl
mov byte [rsp + 0x89], dl
jle 0x14007d4c9
mov rax, r10
movsxd rcx, esi
lea r8, [rsp + 0x8a]
sub rax, rbp
add rax, r11
cqo
idiv rcx
mov rcx, qword [rsp + 0x240]
lea rdx, [rsp + 0x44]
mov qword [rsp + 0x110], rax
xor eax, eax
lea r10d, [rax + 1]
mov dword [rsp + 0x1a8], eax
mov dword [rsp + 0x1ac], eax
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r9d
lea r9, [rsp + 0x89]
mov dword [rsp + 0x1b0], eax
mov dword [rsp + 0x1b4], eax
call fcn.140055180
xor eax, eax
mov dword [rsp + 0x30], r10d
mov byte [rsp + 0x1a8], al
mov al, byte [rsp + 0x8a]
lea r9, [rsp + 0x89]
mov byte [rsp + 0x1a9], al
mov al, byte [rsp + 0x89]
lea r8, [rsp + 0x8a]
mov byte [rsp + 0x1aa], al
mov al, byte [rsp + 0x44]
lea rdx, [rsp + 0x44]
mov byte [rsp + 0x1ab], al
mov rax, qword [rsp + 0x240]
mov dword [rsp + 0x28], r15d
lea rcx, [rax + rax - 1]
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x20], eax
call fcn.140055180
mov rdx, qword [rsp + 0x250]
lea eax, [r10 + 4]
lea r8, [rsp + 0x1a8]
mov r9d, r10d
mov byte [rsp + 0x1ac], al
mov al, byte [rsp + 0x8a]
mov rcx, rbx
mov byte [rsp + 0x1ad], al
mov al, byte [rsp + 0x89]
mov byte [rsp + 0x1ae], al
mov al, byte [rsp + 0x44]
mov byte [rsp + 0x1af], al
mov rax, qword [rsp + 0x240]
mov dword [rsp + 0x1b0], eax
mov rax, qword [rsp + 0x110]
mov dword [rsp + 0x1b4], eax
call fcn.140068614
mov r11, qword [rsp + 0x98]
mov rax, rbp
movsxd rcx, esi
xor r8d, r8d
cqo
idiv rcx
cmp r11, r8
mov r10, rax
jl 0x14007d4f4
mov rax, r11
cqo
idiv rcx
mov rbp, rax
mov qword [rsp + 0x158], rax
jmp 0x14007d4ff
mov rbp, r8
mov qword [rsp + 0x158], r8
mov rax, qword [rsp + 0xd0]
cmp rax, r8
jl 0x14007d51b
cqo
idiv rcx
mov qword [rsp + 0x1c0], rax
jmp 0x14007d523
mov qword [rsp + 0x1c0], r8
mov ecx, dword [rsp + 0x48]
mov esi, dword [rsp + 0x7c]
mov eax, r8d
cmp ecx, 4
lea r9, [rsp + 0x4f]
lea r8, [rsp + 0x104]
setge al
lea rdx, [rsp + 0xf4]
mov rcx, rbp
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], esi
call fcn.140055180
xor eax, eax
cmp qword [rsp + 0x98], rax
jle 0x14007d575
sub rbp, r10
mov qword [rsp + 0x158], rbp
mov rax, qword [rsp + 0x1c0]
mov edx, dword [rsp + 0x80]
movsx r15d, byte [rsp + 0xba]
lea eax, [rax + rbp - 1]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], edx
lea r9, [rsp + 0x68]
lea r8, [rsp + 0xc2]
lea rdx, [rsp + 0xd8]
mov ecx, eax
mov dword [rsp + 0x20], esi
call fcn.140055180
lea rcx, [rsp + 0x220]
call fcn.140050424
mov r9, qword [rsp + 0x160]
mov esi, dword [rsp + 0xc4]
shl esi, 4
cmp byte [rsp + 0xc8], 2
movsxd rbp, esi
je 0x14007eefb
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x188]
mov r8, r9
call fcn.14001aa74
xor r11d, r11d
cmp qword [rsp + 0x110], r11
jl 0x14007d664
cmp dword [rsp + 0xc4], r11d
jle 0x14007d632
mov rcx, qword [rsp + 0x1f0]
mov r8, rbp
xor edx, edx
add rcx, 0x1be
call fcn.1400d3e60
mov eax, 3
xor edx, edx
sub eax, dword [rsp + 0xc4]
shl eax, 4
movsxd r8, eax
lea eax, [rsi + 0x10]
movsxd rcx, eax
mov rax, qword [rsp + 0x1f0]
lea rcx, [rcx + rax + 0x1be]
call fcn.1400d3e60
xor r11d, r11d
mov r8, qword [rsp + 0x1f0]
mov r9b, byte [rsp + 0x4d]
mov r10b, byte [rsp + 0x50]
mov al, byte [r8 + rbp + 0x1c2]
cmp r9b, r11b
jne 0x14007d699
cmp r10b, 2
jge 0x14007d699
cmp al, 5
je 0x14007cf43
cmp al, 0xf
je 0x14007cf43
mov edx, dword [r8 + rbp + 0x1c6]
mov ecx, dword [r8 + rbp + 0x1ca]
mov rsi, qword [rsp + 0x98]
cmp r9b, r11b
jne 0x14007d711
cmp al, r11b
je 0x14007d711
cmp dword [rsp + 0xdc], r11d
je 0x14007d711
cmp r10b, 2
jge 0x14007d711
cmp byte [rsp + 0xba], r11b
jne 0x14007d711
cmp rsi, r11
jl 0x14007d6e8
cmp qword [rsp + 0x158], rdx
jne 0x14007cf43
mov r11, qword [rsp + 0xd0]
xor r9d, r9d
cmp r11, r9
mov r9, qword [rsp + 0x1c0]
jl 0x14007d721
xor eax, eax
cmp r9, rcx
je 0x14007d723
cmp ecx, eax
jne 0x14007cf43
jmp 0x14007d723
mov r9, qword [rsp + 0x1c0]
mov r11, qword [rsp + 0xd0]
xor eax, eax
cmp byte [rsp + 0x190], al
je 0x14007d742
xor r9d, r9d
mov ecx, r9d
mov edx, r9d
mov r10, r9
mov qword [rsp + 0x1c0], r9
jmp 0x14007d74a
mov r10, qword [rsp + 0x158]
mov eax, dword [rsp + 0xdc]
test eax, eax
js 0x14007d75d
mov byte [r8 + rbp + 0x1c2], al
mov eax, dword [rsp + 0x128]
cmp ax, word [rsp + 0x328]
jl 0x14007d776
mov byte [r8 + rbp + 0x1be], al
xor eax, eax
cmp rsi, rax
jge 0x14007d78d
cmp r11, rax
jl 0x14007d825
lea ecx, [rdx + r9 - 1]
jmp 0x14007d797
cmp r11, rax
jge 0x14007d7e6
lea ecx, [rcx + r10 - 1]
movsx eax, r15b
lea r9, [rsp + 0x68]
lea r8, [rsp + 0xc2]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x80]
lea rdx, [rsp + 0xd8]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x20], eax
call fcn.140055180
mov r8, qword [rsp + 0x1f0]
mov r9, qword [rsp + 0x1c0]
mov r11, qword [rsp + 0xd0]
xor eax, eax
cmp rsi, rax
jl 0x14007d820
mov al, byte [rsp + 0x104]
mov dword [r8 + rbp + 0x1c6], r10d
mov byte [r8 + rbp + 0x1bf], al
mov al, byte [rsp + 0x4f]
mov byte [r8 + rbp + 0x1c0], al
movzx eax, word [rsp + 0xf4]
mov byte [r8 + rbp + 0x1c1], al
xor eax, eax
cmp r11, rax
jge 0x14007d82a
cmp rsi, rax
jl 0x14007d856
mov al, byte [rsp + 0xc2]
mov byte [r8 + rbp + 0x1c3], al
mov al, byte [rsp + 0x68]
mov byte [r8 + rbp + 0x1c4], al
mov al, byte [rsp + 0xd8]
mov byte [r8 + rbp + 0x1c5], al
xor eax, eax
cmp r11, rax
jl 0x14007d863
mov dword [r8 + rbp + 0x1ca], r9d
mov eax, dword [rsp + 0xdc]
mov ecx, dword [rsp + 0x128]
xor ebp, ebp
cmp eax, ebp
jge 0x14007d886
cmp cx, bp
jge 0x14007d886
cmp rsi, rbp
jge 0x14007d886
cmp r11, rbp
jl 0x14007d896
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
cmp cx, bp
jge 0x14007d8b9
cmp eax, ebp
jge 0x14007d8b9
cmp rsi, rbp
jge 0x14007d8b9
cmp r11, rbp
jge 0x14007d8b9
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
mov rsi, qword [rsp + 0x1f8]
xor r8d, r8d
mov rcx, rbx
mov rdx, rsi
call fcn.140051824
cmp rax, rsi
jne 0x14007eeb0
mov r15d, 1
mov esi, r15d
cmp qword [rsp + 0x130], rbp
jne 0x14007d8f8
mov rcx, qword [rsp + 0x1f0]
call fcn.140055278
mov r9, qword [rsp + 0x160]
mov r10, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x188]
mov r8, r9
mov rdx, r10
call fcn.140050454
cmp eax, ebp
je 0x14007d957
mov r8d, dword [rsp + 0x64]
lea r9, [rsp + 0xbc]
mov rdx, r10
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.1400551f0
mov r10, qword [rsp + 0x1f0]
mov r9, qword [rsp + 0x160]
mov rbp, qword [rsp + 0x98]
mov eax, 0x200
cmp rbp, rax
jl 0x14007da6c
cmp qword [rsp + 0xd0], rax
jle 0x14007da6c
xor eax, eax
cmp byte [rsp + 0x101], al
jle 0x14007da6c
mov r8, r9
xor edx, edx
mov rcx, r10
call fcn.1400d3e60
mov r15, qword [rsp + 0x168]
shl rbp, 9
add r15, rbp
xor r8d, r8d
mov rcx, rbx
mov rdx, r15
call fcn.140051824
cmp rax, rbp
je 0x14007d9ca
xor r9d, r9d
mov esi, r9d
mov r15d, 1
jmp 0x14007da6f
mov r8d, dword [rsp + 0x64]
mov rdx, qword [rsp + 0x188]
xor eax, eax
lea r9, [rsp + 0xbc]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r9d, r9d
mov esi, eax
cmp eax, r9d
je 0x14007d9bc
mov eax, dword [rsp + 0x64]
cmp dword [rsp + 0xbc], eax
jne 0x14007d9bc
mov r8, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x188]
call fcn.140050454
cmp eax, r9d
je 0x14007d9bf
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.140051824
cmp rax, rbp
jne 0x14007d9b9
mov r8d, dword [rsp + 0x64]
mov rdx, qword [rsp + 0x1f0]
xor eax, eax
lea r9, [rsp + 0xbc]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15d, 1
mov esi, eax
xor r9d, r9d
cmp esi, r9d
mov rsi, r9
mov qword [rsp + 0x1c8], r9
sete sil
mov qword [rsp + 0x1c8], rsi
cmp byte [rsp + 0x41], r9b
jne 0x14007daa2
cmp byte [rsp + 0x40], r9b
jne 0x14007daa2
cmp byte [rsp + 0x4e], r9b
je 0x14007ee9e
lea rcx, [rsp + 0x118]
mov ebp, r9d
call fcn.140050424
jmp 0x14007cd8a
mov edx, dword [rsp + 0x180]
cmp byte [rsp + 0x190], r11b
mov r9d, dword [rsp + 0x90]
movzx edx, dl
cmovne edx, r11d
mov dword [rsp + 0x180], edx
cmp r8b, r11b
je 0x14007daec
cmp r9b, r11b
jne 0x14007daec
mov r15d, dword [rcx + 0x28]
jmp 0x14007daf2
mov r15d, 0x80
movsxd rcx, eax
mov rax, qword [rsp + 0x98]
mov dword [rsp + 0xf4], r15d
cqo
idiv rcx
mov r8, rax
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x2a0]
cqo
idiv rcx
mov r11, rax
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0xd0]
cqo
idiv rcx
xor edx, edx
mov rcx, rax
mov qword [rsp + 0xd0], rax
dec rax
mov qword [rsp + 0x158], rax
cmp byte [rsp + 0x10c], dl
je 0x14007db68
lea rax, [rcx + r8 - 1]
mov qword [rsp + 0x158], rax
mov ecx, 1
mov qword [rsp + 0x110], rdx
cmp r9b, cl
jne 0x14007dbbb
test byte [rsp + 0xb9], 0x10
je 0x14007db93
lea rax, [r11 - 1]
mov rsi, r11
mov qword [rsp + 0x158], rax
cmp r8, rcx
mov qword [rsp + 0x110], rax
cmovl r8, rcx
cmp rax, rcx
mov qword [rsp + 0x98], r8
jge 0x14007dbbb
lea rax, [rsi - 1]
mov qword [rsp + 0x110], rax
mov al, r9b
mov rdx, rbp
mov r9d, r10d
neg al
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x30], rax
sbb rcx, rcx
lea rax, [rsp + 0x110]
and rcx, r8
mov qword [rsp + 0x28], rax
mov r8d, r15d
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x140]
call fcn.14005d9b4
xor esi, esi
mov r9, rax
mov qword [rsp + 0x130], rax
lea r10d, [rsi + 1]
cmp byte [rsp + 0x44], sil
jne 0x14007dc22
cmp rax, rsi
cmove r9, r10
mov qword [rsp + 0x130], r9
mov eax, 0x20
cmp qword [rsp + 0x110], rax
jl 0x14007f413
cmp byte [rsp + 0xc8], 2
je 0x14007f140
movsxd r11, dword [rsp + 0x48]
mov dword [rsp + 0x6c], r10d
cmp r11d, r15d
jae 0x14007dc81
cmp dword [rsp + 0x74], r15d
jge 0x14007dc81
cmp r11d, esi
jl 0x14007dc85
mov rcx, r11
lea r8d, [rax - 0x10]
lea rdx, [0x1400f7340]
shl rcx, 7
add rcx, qword [rsp + 0x1e0]
call fcn.140050454
cmp eax, esi
jne 0x14007dc85
mov dword [rsp + 0x6c], esi
mov ecx, dword [rsp + 0x64]
xor edx, edx
lea eax, [rcx + 0x3fff]
div ecx
mov ecx, dword [rsp + 0x90]
mov dword [rsp + 0xd8], eax
cmp cl, r10b
jne 0x14007dfe2
cmp r11d, r15d
jae 0x14007f413
mov edx, dword [rsp + 0xf4]
mov al, byte [rsp + 0x88]
mov rsi, qword [rsp + 0x1e0]
lea ecx, [r9 + 1]
mov r9d, dword [rsp + 0x64]
mov r8d, 0x4800
shl edx, 7
mov r15, rsi
imul ecx, r9d
sub r8d, ecx
mov dword [rsp + 0xc4], edx
mov dword [rsp + 0xa8], r8d
xor r8d, r8d
cmp al, r8b
jg 0x14007e0ca
jge 0x14007dd18
lea ecx, [r9 + r9 + 0x4000]
cmp qword [rsp + 0x168], rcx
jg 0x14007e0ca
cmp edx, r8d
mov byte [rsp + 0x4f], r8b
mov esi, r8d
jle 0x14007dda3
mov edi, dword [rsp + 0xa8]
mov r12d, 0x80
lea r14d, [r12 - 0x70]
lea r13d, [r12 - 0x40]
xor edx, edx
cmp esi, edi
mov rcx, r15
jl 0x14007dd55
mov r8, r14
call fcn.1400d3e60
add esi, r12d
add r15, r12
jmp 0x14007dd7b
mov r8d, 0x1b0
call fcn.1400d3e60
lea rcx, [r15 + 0x1be]
mov r8, r13
xor edx, edx
call fcn.1400d3e60
mov eax, 0x200
add esi, eax
add r15, rax
cmp esi, dword [rsp + 0xc4]
jl 0x14007dd3c
mov r12, qword [rsp + 0x238]
mov r13, qword [rsp + 0x228]
mov r14, qword [rsp + 0x1a0]
lea rdi, [0x14010edd8]
mov r15, qword [rsp + 0xe8]
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x38]
call fcn.1400d3e60
xor edx, edx
lea rcx, [r15 + 0x48]
lea r8d, [rdx + 0x14]
call fcn.1400d3e60
xor edx, edx
lea rcx, [rbp + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400d3e60
xor eax, eax
mov ecx, 0xaa55
mov word [rbp + 0x1fe], cx
cmp byte [rsp + 0x4f], al
jne 0x14007ddfd
cmp dword [rsp + 0x64], 0x200
jbe 0x14007ddfd
mov word [r15 - 2], cx
lea rdx, str.EFI_PART
mov r8d, 8
mov rcx, r15
call fcn.14001aa74
movsxd rcx, dword [rsp + 0xd8]
mov rdx, qword [rsp + 0x110]
mov rax, qword [rsp + 0x98]
mov dword [r15 + 8], 0x10000
mov dword [r15 + 0xc], 0x5c
mov qword [r15 + 0x18], rax
lea rax, [rcx + rax + 1]
mov qword [r15 + 0x20], rdx
mov qword [r15 + 0x28], rax
mov rax, rdx
sub rax, rcx
mov rcx, rbp
dec rax
mov qword [r15 + 0x30], rax
call fcn.140055278
lea rcx, [r15 + 0x38]
movabs rax, 0x202020323354
cmp qword [rcx], rax
je 0x14007de9e
movabs rax, 0x202020363154
cmp qword [rcx], rax
je 0x14007de9e
xor eax, eax
cmp qword [rcx], rax
je 0x14007de9e
or rdx, 0xffffffffffffffff
cmp qword [rcx], rdx
je 0x14007de9e
cmp qword [r15 + 0x40], rax
je 0x14007de9e
cmp qword [r15 + 0x40], rdx
jne 0x14007debb
lea rdx, [0x1400fa7a0]
mov r8d, 0xc
call fcn.14001aa74
mov r11d, dword [rbp + 0x1b8]
mov dword [r15 + 0x44], r11d
lea rcx, [r15 - 0x174]
call fcn.140055278
mov r11, qword [rsp + 0x98]
mov eax, 0x80
lea ecx, [rax - 0x7f]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x54], eax
lea rax, [rcx - 2]
inc r11
mov dword [rsp + 0x30], ecx
mov qword [r15 + 0x48], r11
mov r15, qword [rsp + 0x158]
cmp r15, rcx
mov rcx, qword [rsp + 0x98]
cmovl r15, rax
movsxd rax, dword [rsp + 0x48]
mov r10d, eax
mov rsi, rax
mov qword [rsp + 0x158], r15
shl r10d, 4
add rsi, rsi
lea eax, [r10 + 0x1bf]
mov dword [rbp + rsi*8 + 0x1c2], 0xee
movsxd r8, eax
mov eax, dword [rsp + 0x80]
add r8, rbp
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x7c]
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.140055180
lea r9d, [r10 + 0x1c3]
mov r10d, 1
movsxd r8, r9d
add r8, rbp
cmp byte [rsp + 0x43], 2
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov byte [r8], 0xfe
mov byte [r9], 0xff
mov byte [rdx], 0xfe
jne 0x14007dfa4
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x30], r10d
mov rcx, r15
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x20], eax
call fcn.140055180
mov rax, qword [rsp + 0x98]
mov ecx, dword [rsp + 0x90]
mov dword [rbp + rsi*8 + 0x1c6], eax
or dword [rbp + rsi*8 + 0x1ca], 0xffffffff
cmp byte [rsp + 0x43], 2
jne 0x14007e3f8
mov r11d, dword [rsp + 0x48]
mov dword [rbp + rsi*8 + 0x1ca], r15d
mov r15d, dword [rsp + 0xf4]
xor r9d, r9d
cmp cl, r9b
jg 0x14007e3fb
cmp byte [rsp + 0xc1], r9b
jle 0x14007e001
cmp r11d, r9d
jl 0x14007e3fb
mov rsi, qword [rsp + 0x1e0]
cmp byte [rsp + 0x4d], r9b
je 0x14007e05e
or dword [rsp + 0x48], 0xffffffff
xor r11d, r11d
mov al, r9b
mov dword [rsp + 0x180], eax
cmp r15d, r11d
jbe 0x14007e065
mov ecx, r9d
lea rdx, [0x1400f7340]
mov r8d, 0x10
shl rcx, 7
add rcx, rsi
call fcn.140050454
cmp eax, r11d
je 0x14007e11e
add r9d, r10d
cmp r9d, r15d
jb 0x14007e027
mov ecx, dword [rsp + 0x90]
xor r9d, r9d
mov eax, dword [rsp + 0x180]
mov edx, dword [rsp + 0x74]
mov r10d, dword [rsp + 0x48]
mov r11d, 1
sub edx, r11d
mov dword [rsp + 0x74], edx
cmp r10d, r15d
jae 0x14007cf43
cmp edx, r15d
jge 0x14007cf43
cmp al, r9b
je 0x14007e27c
mov ecx, r9d
cmp byte [rsp + 0x44], r9b
je 0x14007e170
mov rdx, qword [rsp + 0x98]
lea rax, [rsi + 0x20]
lea r8d, [r11 + 0x7f]
cmp ecx, r15d
jae 0x14007e170
cmp qword [rax], rdx
je 0x14007e13f
add ecx, r11d
add rax, r8
jmp 0x14007e0b4
mov byte [rsp + 0x4f], r10b
cmp r9d, 0x200
jbe 0x14007e0f2
lea r8d, [r9 - 0x200]
lea rcx, [rbp + 0x200]
xor edx, edx
call fcn.1400d3e60
mov r9d, dword [rsp + 0x64]
mov r15, qword [rsp + 0xe8]
lea r8d, [r9 - 0x5c]
xor edx, edx
lea rcx, [r15 + 0x5c]
call fcn.1400d3e60
xor edx, edx
mov r8d, 0x4000
mov rcx, rsi
call fcn.1400d3e60
jmp 0x14007ddab
mov ecx, r9d
xor edx, edx
mov r8d, 0x80
shl rcx, 7
mov dword [rsp + 0x48], r9d
add rcx, rsi
call fcn.1400d3e60
jmp 0x14007e054
movdqu xmm0, xmmword [0x1400f7340]
mov r9d, ecx
shl r9, 7
add r9, rsi
movdqu xmmword [r9], xmm0
cmp ecx, r10d
je 0x14007e170
xor edx, edx
mov rcx, r9
call fcn.1400d3e60
mov r10d, dword [rsp + 0x48]
mov r11d, 1
movsxd r9, r10d
lea rdx, [0x1400f7340]
mov r8d, 0x10
shl r9, 7
add r9, rsi
mov rcx, r9
mov qword [rsp + 0x1f8], r9
call fcn.140050454
xor ecx, ecx
cmp eax, ecx
je 0x14007e250
lea r15d, [r10 + 1]
mov r10d, dword [rsp + 0xf4]
cmp r15d, r10d
jae 0x14007cf43
mov ecx, r15d
lea rdx, [0x1400f7340]
mov r8d, 0x10
shl rcx, 7
add rcx, rsi
call fcn.140050454
xor ecx, ecx
cmp eax, ecx
je 0x14007e1e2
add r15d, r11d
cmp r15d, r10d
jb 0x14007e1b6
jmp 0x14007e247
mov edx, dword [rsp + 0x48]
movsxd rcx, r15d
cmp r15d, edx
jle 0x14007e247
shl rcx, 7
mov edi, r15d
mov r13d, 0x80
add rcx, rsi
sub edi, edx
lea rsi, [rcx - 0x80]
mov r8, r13
mov rdx, rsi
call fcn.1400d4ab0
sub rdi, 1
mov rcx, rsi
jne 0x14007e200
mov r13, qword [rsp + 0x228]
mov r14, qword [rsp + 0x1a0]
mov r9, qword [rsp + 0x1f8]
mov r10d, dword [rsp + 0xf4]
mov rsi, qword [rsp + 0x1e0]
lea rdi, [0x14010edd8]
cmp r15d, r10d
jae 0x14007cf43
xor edx, edx
mov r8d, 0x80
mov rcx, r9
call fcn.1400d3e60
mov r10d, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x90]
mov edx, dword [rsp + 0x74]
xor r9d, r9d
lea r11d, [r9 + 1]
mov eax, r9d
jmp 0x14007e280
mov eax, dword [rsp + 0x6c]
cmp cl, r11b
je 0x14007e3c4
cmp edx, r9d
jge 0x14007e51d
cmp eax, r9d
jne 0x14007e2d9
mov edx, r11d
mov ecx, r11d
mov r15d, r11d
mov eax, r11d
mov r9d, r11d
mov dword [rsp + 0xb0], r11d
mov dword [rsp + 0x27c], edx
mov dword [rsp + 0x268], ecx
mov qword [rsp + 0x178], r15
mov qword [rsp + 0x2b0], rax
mov r8d, r11d
mov dword [rsp + 0x278], r11d
jmp 0x14007e307
mov rax, qword [rsp + 0x2b0]
mov ecx, dword [rsp + 0x268]
mov edx, dword [rsp + 0x27c]
mov r8d, dword [rsp + 0x278]
mov r9d, dword [rsp + 0xb0]
mov r15, qword [rsp + 0x178]
xor r11d, r11d
cmp eax, r11d
jle 0x14007e31b
movsxd rax, r10d
shl rax, 7
movdqu xmmword [rax + rsi], xmm6
cmp r15d, r11d
jle 0x14007e32d
movsxd rax, r10d
shl rax, 7
movdqu xmmword [rax + rsi + 0x10], xmm7
cmp ecx, r11d
jle 0x14007e346
mov rcx, qword [rsp + 0x98]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x20], rcx
cmp edx, r11d
jle 0x14007e35f
mov rcx, qword [rsp + 0x158]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x28], rcx
cmp r9d, r11d
jle 0x14007e378
mov rcx, qword [rsp + 0x2d0]
movsxd rax, r10d
shl rax, 7
mov qword [rax + rsi + 0x30], rcx
xor r9d, r9d
cmp r8d, r9d
jle 0x14007e3bd
mov r15, qword [rsp + 0x290]
cmp word [r15], r9w
je 0x14007e3bd
movsxd rax, r10d
lea r8d, [r9 + 0x48]
xor edx, edx
shl rax, 7
lea rsi, [rax + rsi + 0x38]
mov rcx, rsi
call fcn.1400d3e60
mov r8d, 0x24
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
xor r9d, r9d
mov ecx, dword [rsp + 0x90]
mov eax, dword [rsp + 0x48]
mov r15d, 0x80
cmp byte [rsp + 0x190], r9b
je 0x14007e3fb
movsxd rcx, eax
mov r8, r15
xor edx, edx
shl rcx, 7
add rcx, qword [rsp + 0x1e0]
call fcn.1400d3e60
mov ecx, dword [rsp + 0x90]
xor r9d, r9d
mov esi, dword [rsp + 0xf4]
mov eax, 1
mov r15d, r9d
mov dword [rsp + 0xc4], r9d
cmp byte [rsp + 0xc1], al
jne 0x14007e63d
cmp cl, al
je 0x14007e63d
lea eax, [rsi - 1]
mov dword [rsp + 0xa8], r9d
cmp eax, r9d
jl 0x14007e63a
mov r13, qword [rsp + 0x1e0]
mov ebp, 1
mov r14d, r9d
mov rdi, r13
mov r12d, eax
lea ebx, [rbp + 0x7f]
mov r10d, 0x10
lea rdx, [0x1400f7340]
mov rcx, rdi
mov r8, r10
call fcn.140050454
cmp eax, r9d
sete al
mov byte [rsp + 0x4f], al
cmp al, r9b
jne 0x14007e488
mov dword [rsp + 0x80], r9d
cmp r15d, r14d
je 0x14007e48f
mov dword [rsp + 0x80], ebp
mov esi, r9d
mov dword [rsp + 0x6c], r9d
cmp al, r9b
jne 0x14007e5b2
cmp r15d, r14d
je 0x14007e5af
movsxd rsi, r14d
mov r15d, 0x38
mov rdx, rdi
shl rsi, 7
mov r8, r15
add rsi, r13
mov rcx, rsi
call fcn.1400d8860
xor ecx, ecx
cmp eax, ecx
je 0x14007e4df
mov r8, r15
mov rdx, rdi
mov rcx, rsi
mov dword [rsp + 0x6c], ebp
call fcn.1400d4ab0
lea rdx, [rdi + 0x38]
lea rcx, [rsi + 0x38]
mov r8d, 0x24
call qword [sym.imp.SHLWAPI.dll_StrCmpNW]
xor r9d, r9d
cmp eax, r9d
je 0x14007e599
lea r8d, [r9 + 0x24]
lea rdx, [rdi + 0x38]
lea rcx, [rsi + 0x38]
mov eax, ebp
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
mov esi, ebp
xor r9d, r9d
jmp 0x14007e59d
cmp edx, r10d
je 0x14007e3c4
movsxd r15, r10d
lea rcx, [rsp + 0x3b0]
mov r8d, 0x80
shl r15, 7
add r15, rsi
mov rdx, r15
call fcn.1400d4ab0
movsxd r11, dword [rsp + 0x74]
mov rcx, r15
shl r11, 7
mov r15d, 0x80
add rsi, r11
mov r8, r15
mov rdx, rsi
call fcn.1400d4ab0
lea rdx, [rsp + 0x3b0]
mov rcx, rsi
mov r8, r15
call fcn.1400d4ab0
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x74]
cmp eax, ecx
cmovl eax, ecx
mov ecx, dword [rsp + 0x90]
xor r9d, r9d
mov dword [rsp + 0x48], eax
jmp 0x14007e3ce
mov esi, dword [rsp + 0x6c]
mov al, byte [rsp + 0x4f]
mov r15d, dword [rsp + 0xa8]
mov r10d, 0x10
add r14d, ebp
cmp dword [rsp + 0x80], r9d
je 0x14007e5d3
cmp al, r9b
jne 0x14007e5d3
mov r8, r10
xor edx, edx
mov rcx, rdi
mov esi, ebp
call fcn.1400d3e60
xor r9d, r9d
cmp esi, r9d
je 0x14007e5e3
lea eax, [r15 + 1]
mov dword [rsp + 0xc4], eax
add r15d, ebp
add rdi, rbx
cmp r15d, r12d
mov dword [rsp + 0xa8], r15d
jle 0x14007e454
mov rbx, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x118]
mov r12, qword [rsp + 0x238]
mov r13, qword [rsp + 0x228]
mov r14, qword [rsp + 0x1a0]
mov esi, dword [rsp + 0xf4]
mov r15d, dword [rsp + 0xc4]
lea rdi, [0x14010edd8]
jmp 0x14007e63d
mov r15d, r9d
mov rcx, qword [rsp + 0xe8]
lea rdx, str.EFI_PART
mov r8d, 8
call fcn.14001aa74
mov rcx, rbp
call fcn.140055278
mov rax, qword [rsp + 0xe8]
xor ecx, ecx
cmp qword [rax + 0x38], rcx
je 0x14007e679
or rcx, 0xffffffffffffffff
cmp qword [rax + 0x38], rcx
jne 0x14007e685
lea rcx, [rax - 0x174]
call fcn.140055278
mov eax, dword [rsp + 0x48]
cmp r15d, eax
jg 0x14007e692
lea r15d, [rax + 1]
cmp byte [rsp + 0x90], 1
mov rcx, qword [rsp + 0x1e0]
cmove r15d, esi
shl esi, 7
xor r8d, r8d
mov edx, esi
call fcn.1400c20b0
mov rcx, qword [rsp + 0xe8]
cmp dword [rcx + 0xc], 0x20000
mov dword [rcx + 0x58], eax
ja 0x14007cf43
mov esi, dword [rcx + 0xc]
xor eax, eax
xor r8d, r8d
mov rdx, rsi
mov dword [rcx + 0x10], eax
call fcn.1400c20b0
mov rcx, qword [rsp + 0xe8]
mov r8, rsi
mov dword [rcx + 0x10], eax
mov rdx, rcx
mov rcx, qword [rsp + 0x120]
call fcn.14001aa74
mov rcx, qword [rsp + 0x120]
mov rax, qword [rsp + 0xe8]
mov r11, qword [rax + 0x20]
xor r8d, r8d
mov rdx, rsi
mov qword [rcx + 0x18], r11
mov rax, qword [rax + 0x18]
mov qword [rcx + 0x20], rax
xor eax, eax
mov dword [rcx + 0x10], eax
call fcn.1400c20b0
mov edx, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0x120]
inc edx
mov dword [rcx + 0x10], eax
lea rcx, [rsp + 0x170]
imul edx, dword [rsp + 0x64]
call fcn.140057dc0
mov ecx, dword [rsp + 0x64]
mov rsi, qword [rsp + 0x170]
shl r15d, 7
xor edx, edx
xor r8d, r8d
lea eax, [r15 + rcx - 1]
div ecx
mov rdx, qword [rsp + 0x168]
mov r15d, eax
imul r15d, ecx
mov rcx, rbx
call fcn.140051824
mov r8d, dword [rsp + 0x64]
xor eax, eax
lea r9, [rsp + 0x320]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8, qword [rsp + 0x160]
mov rdx, rbp
mov rcx, rsi
call fcn.1400d8860
xor ecx, ecx
cmp eax, ecx
je 0x14007e7f1
mov rdx, qword [rsp + 0x168]
xor r8d, r8d
mov rcx, rbx
call fcn.140051824
mov r8d, dword [rsp + 0x64]
xor eax, eax
lea r9, [rsp + 0x314]
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ebp, dword [rsp + 0x64]
xor edx, edx
mov eax, r15d
div ebp
mov rdx, qword [rsp + 0x160]
xor r8d, r8d
imul rdx, qword [rsp + 0x130]
add rdx, qword [rsp + 0x168]
mov rcx, rbx
lea r15d, [rax + 1]
call fcn.140051824
mov r8d, r15d
xor eax, eax
lea r9, [rsp + 0x338]
mov rdx, rsi
mov rcx, rbx
imul r8d, ebp
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
cmp r15d, eax
mov ebp, eax
jle 0x14007e98e
cmp eax, r15d
mov r14, qword [rsp + 0xe8]
mov r13, qword [rsp + 0x130]
mov rdi, rsi
mov esi, dword [rsp + 0xd8]
lea r12d, [rax + 1]
jge 0x14007e8b2
mov rsi, qword [rsp + 0x160]
xor ebx, ebx
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call fcn.1400d8860
cmp eax, ebx
jne 0x14007e8a3
add ebp, r12d
add r13, r12
add r14, rsi
add rdi, rsi
cmp ebp, r15d
jl 0x14007e880
mov rbx, qword [rsp + 0x140]
mov esi, dword [rsp + 0xd8]
cmp ebp, esi
jge 0x14007e967
cmp ebp, r15d
mov rax, r13
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x1f8], rax
jge 0x14007e916
mov rsi, qword [rsp + 0x160]
xor ebx, ebx
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call fcn.1400d8860
cmp eax, ebx
je 0x14007e8ff
add ebp, r12d
add r13, r12
add r14, rsi
add rdi, rsi
cmp ebp, r15d
jl 0x14007e8dc
mov rbx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x1f8]
mov esi, dword [rsp + 0xd8]
mov rdx, qword [rsp + 0x160]
xor r8d, r8d
mov rcx, rbx
imul rdx, rax
add rdx, qword [rsp + 0x168]
call fcn.140051824
mov rax, qword [rsp + 0x130]
xor ecx, ecx
mov r8d, r14d
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x310]
mov rdx, rax
mov rcx, rbx
sub r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp ebp, r15d
jl 0x14007e876
mov rsi, qword [rsp + 0x170]
mov r12, qword [rsp + 0x238]
mov r13, qword [rsp + 0x228]
mov r14, qword [rsp + 0x1a0]
lea rdi, [0x14010edd8]
movsxd rbp, dword [rsp + 0xd8]
mov r15, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x160]
sub r15, rbp
xor r8d, r8d
mov rcx, rbx
imul rdx, r15
add rdx, qword [rsp + 0x168]
call fcn.140051824
mov r8d, ebp
xor eax, eax
lea r9, [rsp + 0x31c]
mov rdx, rsi
mov rcx, rbx
imul r8d, dword [rsp + 0x64]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [rsp + 0xd8]
xor ecx, ecx
cmp eax, ecx
mov ebp, ecx
jle 0x14007eb08
mov r13, qword [rsp + 0x1e0]
mov rdi, rsi
mov rsi, qword [rsp + 0x160]
lea r14d, [rcx + 1]
cmp ebp, eax
jge 0x14007eae1
mov r12d, dword [rsp + 0xd8]
xor ebx, ebx
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call fcn.1400d8860
cmp eax, ebx
jne 0x14007ea43
add ebp, r14d
add r15, r14
add r13, rsi
add rdi, rsi
cmp ebp, r12d
jl 0x14007ea20
cmp ebp, r12d
mov rbx, qword [rsp + 0x140]
jge 0x14007eae1
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x1f8], r15
xor ebx, ebx
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call fcn.1400d8860
cmp eax, ebx
je 0x14007ea89
add ebp, r14d
add r15, r14
add r13, rsi
add rdi, rsi
cmp ebp, r12d
jl 0x14007ea66
mov rbx, qword [rsp + 0x140]
mov rdx, rsi
xor r8d, r8d
mov rcx, rbx
imul rdx, qword [rsp + 0x1f8]
add rdx, qword [rsp + 0x168]
call fcn.140051824
mov rax, qword [rsp + 0x130]
xor ecx, ecx
mov r8d, r13d
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x318]
mov rdx, rax
mov rcx, rbx
sub r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, r12d
jmp 0x14007ea0e
mov rsi, qword [rsp + 0x170]
mov r12, qword [rsp + 0x238]
mov r13, qword [rsp + 0x228]
mov r14, qword [rsp + 0x1a0]
lea rdi, [0x14010edd8]
mov rcx, qword [rsp + 0x168]
mov r15, qword [rsp + 0x160]
xor r8d, r8d
mov rbp, r15
imul rbp, qword [rsp + 0x110]
add rbp, rcx
mov rcx, rbx
mov rdx, rbp
call fcn.140051824
mov r8d, dword [rsp + 0x64]
xor eax, eax
lea r9, [rsp + 0x334]
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8, r15
mov r15, qword [rsp + 0x120]
mov rcx, rsi
mov rdx, r15
call fcn.1400d8860
xor ecx, ecx
cmp eax, ecx
je 0x14007eba1
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.140051824
mov r8d, dword [rsp + 0x64]
xor ebp, ebp
lea r9, [rsp + 0x330]
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x14007eba3
xor ebp, ebp
mov sil, byte [rsp + 0x40]
lea rcx, [rsp + 0x170]
mov al, sil
or al, byte [rsp + 0x41]
or al, byte [rsp + 0x4e]
je 0x14007f121
call fcn.140050424
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0xf8]
jmp 0x14007c76f
mov ecx, dword [rsp + 0x108]
test r8b, dl
jne 0x14007ec05
cmp dl, r11b
je 0x14007ebf6
cmp ecx, 0xb
je 0x14007ec05
test r8b, sil
jne 0x14007ec05
cmp sil, r11b
je 0x14007ec7f
cmp ecx, 0xb
jne 0x14007ec7f
cmp byte [rsp + 0x1e8], r11b
jg 0x14007ecca
test byte [0x14010e197], r8b
jne 0x14007ec3a
test byte [rsp + 0x4a8], r8b
jne 0x14007ec3a
mov edx, r15d
mov ecx, eax
call fcn.14006897c
mov eax, dword [rsp + 0xe0]
xor r11d, r11d
or byte [rsp + 0x4a8], 2
test byte [0x14010e197], 0x10
jne 0x14007ec6b
mov qword [rsp + 0x28], r11
lea rcx, [rsp + 0x4a8]
or r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, eax
mov qword [rsp + 0x20], r15
call fcn.1400552b0
or byte [rsp + 0x4a8], r15b
mov r10b, byte [rsp + 0x42]
xor r11d, r11d
lea r8d, [r11 + 0x20]
cmp byte [rsp + 0x1e8], r11b
jg 0x14007ecca
cmp byte [rsp + 0x4e], r11b
jne 0x14007eca1
cmp r10b, r15b
je 0x14007eca1
cmp r10b, r8b
je 0x14007eca1
cmp byte [rsp + 0x41], r11b
je 0x14007ecca
mov rcx, rbx
call fcn.140055218
mov r10b, byte [rsp + 0x42]
cmp r10b, r15b
je 0x14007ecbd
mov ecx, 0x20
cmp r10b, cl
jne 0x14007ecc7
cdqe
mov qword [rsp + 0x1c8], rax
xor r11d, r11d
cmp rbx, r11
je 0x14007ece9
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007ece9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10b, byte [rsp + 0x42]
xor r11d, r11d
mov cl, byte [rsp + 0x40]
mov eax, 0x20
mov rbx, r11
mov esi, r11d
mov qword [rsp + 0x140], rbx
test al, cl
jne 0x14007ed25
mov eax, dword [rsp + 0x108]
cmp cl, r11b
je 0x14007ed15
cmp eax, 0xb
je 0x14007ed25
mov r9d, 0x10
cmp r10b, r9b
jne 0x14007ed60
cmp eax, 0xc
je 0x14007ed60
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor r11d, r11d
cmp byte [rsp + 0x1e8], r11b
jg 0x14007ed51
mov rcx, qword [rsp + 0x198]
call fcn.14005d6d0
xor r11d, r11d
mov esi, eax
mov cl, byte [rsp + 0x40]
mov r10b, byte [rsp + 0x42]
mov r9d, 0x10
mov al, byte [rsp + 0x4c]
cmp al, r11b
je 0x14007f0f2
cmp ebp, r11d
je 0x14007f0f2
mov r10d, dword [rsp + 0xe0]
mov dl, byte [rsp + 0x43]
jmp 0x14007c052
cmp r10d, r11d
jl 0x14007f800
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0xc3], r11b
je 0x14007eda7
cmp eax, r11d
jl 0x14007f800
movsx r9d, byte [rsp + 0x70]
mov cl, byte [rsp + 0x8b]
mov r8d, eax
or r9d, dword [rsp + 0xf0]
mov byte [rsp + 0x30], cl
mov qword [rsp + 0x28], r11
lea rcx, [rsp + 0xa0]
mov edx, r10d
mov qword [rsp + 0x20], r11
call fcn.140079398
jmp 0x14007f7fd
lea rcx, [rsp + 0x58]
call fcn.140050424
jmp 0x14007ffc6
lea rcx, [rsp + 0x150]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
jmp 0x14008038f
lea rcx, [rsp + 0x150]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
jmp 0x14007fe96
lea rcx, [rsp + 0xf8]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007f111
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007f111
lea rcx, [rsp + 0x220]
call fcn.140050424
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0xf8]
jmp 0x14007ee15
lea rcx, [rsp + 0x220]
call fcn.140050424
jmp 0x14007cf43
lea rcx, [rsp + 0x118]
call fcn.140050424
jmp 0x14007ee29
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0xf8]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007eef3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x14007fe48
lea rcx, [rsp + 0xa0]
mov edx, 0x28
call fcn.140058138
mov r8d, dword [rsp + 0x48]
mov rsi, qword [rsp + 0xa0]
xor r9d, r9d
lea r13, [0x1400f04f4]
cmp r8d, r9d
mov ecx, r9d
jl 0x14007ef44
lea edx, [r9 + 4]
lea eax, [r8 + 1]
mov ecx, r8d
cmp eax, edx
cmovl edx, eax
mov qword [rsp + 0x148], rdx
movsxd r15, dword [rsp + 0x148]
movsxd rdx, ecx
cmp rdx, r15
jge 0x14007f0c8
mov ebx, dword [rsp + 0xf0]
lea edi, [rcx + 1]
mov rcx, qword [rsp + 0x1f0]
mov rax, rdx
mov r14, r13
add rax, rax
sub r15, rdx
lea r12, [rcx + rax*8 + 0x1c6]
mov eax, 0x10
cmp r8d, r9d
mov bpl, byte [r12 - 4]
jge 0x14007efde
mov eax, 5
cmp bpl, al
je 0x14007efa0
mov r9, r13
cmp bpl, 0xf
jne 0x14007efa7
lea r9, [0x1400fa798]
neg bpl
lea rdx, str._s_s_d
mov r8, r14
sbb eax, eax
mov rcx, rsi
and eax, 2
dec eax
imul eax, edi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfW]
lea r14, [0x1400f1058]
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
jmp 0x14007f08d
cmp bpl, r9b
je 0x14007f09a
lea rdx, str._s_d
mov r9d, edi
mov r8, r14
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [0x1400fa770]
test bl, 1
movsxd rcx, eax
lea rax, str._0x_X
movzx r8d, bpl
lea rsi, [rsi + rcx*2]
cmovne rdx, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
movzx r8d, byte [r12 - 8]
lea rdx, [0x1400fa770]
movsxd rcx, eax
shr r8d, 7
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, dword [r12]
lea r8, str.__I64u
movsxd rcx, eax
shl rdx, 9
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call fcn.1400c38b4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [r12 + 4]
lea r8, str.__I64u
movsxd rcx, eax
shl rdx, 9
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call fcn.1400c38b4
mov r8d, dword [rsp + 0x48]
mov eax, 0x10
xor r9d, r9d
inc edi
add r12, rax
sub r15, 1
jne 0x14007ef83
mov rsi, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x140]
mov r14, qword [rsp + 0x1a0]
lea rdi, [0x14010edd8]
mov eax, dword [rsp + 0x230]
mov rbp, qword [rsp + 0x490]
cmp eax, r9d
jle 0x14007f3aa
mov qword [rsp + 0xa0], r9
mov dword [rsp + 0x20], r9d
jmp 0x14007f369
movsxd rax, esi
mov rsi, qword [rsp + 0x1c8]
cmp r10b, r9b
cmove rsi, rax
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
cmp rdi, rax
je 0x14008043f
jmp 0x14007c02e
call fcn.140050424
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0xf8]
jmp 0x14007edf9
lea eax, [r15 + r15*4]
lea rcx, [rsp + 0xa0]
lea edx, [rax + rax]
call fcn.140058138
mov eax, dword [rsp + 0x48]
mov rsi, qword [rsp + 0xa0]
xor edx, edx
lea r13, [0x1400f04f4]
cmp eax, edx
mov ecx, edx
jl 0x14007f17a
mov ecx, eax
inc eax
cmp r15d, eax
cmovg r15d, eax
movsxd rax, ecx
movsxd r15, r15d
cmp rax, r15
jge 0x14007f34a
mov r14, qword [rsp + 0x1e0]
movsxd rbx, dword [rsp + 0x48]
mov r12, rax
shl r12, 7
lea edi, [rcx + 1]
add r12, r14
sub r15, rax
mov eax, 0x80
cmp qword [r12], rdx
jne 0x14007f1bc
cmp qword [r12 + 8], rdx
je 0x14007f31c
cmp ebx, edx
mov r9d, edi
mov r8, r13
mov rcx, rsi
jge 0x14007f1e9
lea rdx, str._s_d
call qword [sym.imp.USER32.dll_wsprintfW]
lea r13, [0x1400f1058]
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
jmp 0x14007f315
lea rdx, [0x1400fa740]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rbp, rbx
xor r8d, r8d
movsxd rcx, eax
shl rbp, 7
lea rsi, [rsi + rcx*2]
add rbp, r14
mov rcx, rsi
mov rdx, rbp
call fcn.140054d64
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, str._GPT
movsxd rcx, eax
lea rsi, [rsi + rcx*2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov rdx, qword [rbp + 0x20]
lea rcx, [rsi + 0xa]
shl rdx, 9
call fcn.1400c38e4
lea rcx, [rsi + 0xa]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2 + 0xa]
mov word [rsi], ax
mov rdx, qword [rbp + 0x28]
lea rcx, [rsi + 2]
sub rdx, qword [rbp + 0x20]
inc rdx
shl rdx, 9
call fcn.1400c38e4
lea rcx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, str._016I64X
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2 + 2]
mov word [rsi], ax
mov rdx, qword [rbp + 0x30]
lea rcx, [rsi + 2]
call fcn.1400c38b4
lea rcx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, [rbp + 0x10]
xor r8d, r8d
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2 + 2]
mov word [rsi], ax
add rsi, 2
mov rcx, rsi
call fcn.140054d64
mov eax, 0x10
test byte [rsp + 0xf0], al
je 0x14007f315
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, [0x1400f0cb8]
mov r8d, edi
movsxd rcx, eax
mov eax, 0x20
lea rsi, [rsi + rcx*2]
lea rcx, [rsi + 2]
mov word [rsi], ax
call qword [sym.imp.USER32.dll_wsprintfW]
movsxd rcx, eax
lea rsi, [rsi + rcx*2 + 2]
xor edx, edx
mov eax, 0x80
inc edi
add r12, rax
sub r15, 1
jne 0x14007f1ab
mov rsi, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x140]
mov r14, qword [rsp + 0x1a0]
lea rdi, [0x14010edd8]
mov eax, dword [rsp + 0x230]
mov rbp, qword [rsp + 0x490]
cmp eax, edx
jle 0x14007f3aa
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0x20], edx
dec eax
lea r9, [rsp + 0xa0]
lea rdx, [rsp + 0xb0]
mov r8, rsi
mov rcx, rbp
mov qword [rsp + 0x1f8], rsi
mov dword [rsp + 0xb0], eax
call fcn.14005b738
lea rcx, [rsp + 0x1f8]
call fcn.140050424
mov rsi, qword [rsp + 0xa0]
mov r8, rsi
mov rdx, r14
mov rcx, rbp
call fcn.140057714
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0xf8]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007f3fb
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
cmp rdi, rbx
je 0x14007f40b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, rbx
jmp 0x14008043f
lea rcx, [rsp + 0x118]
call fcn.140050424
jmp 0x14007cdc2
lea rcx, [rsp + 0xf8]
call fcn.140050424
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008042c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008042c
lea rcx, [rsp + 0x58]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007c08a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007c08a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x58]
mov esi, eax
call fcn.140050424
jmp 0x14007f104
cmp dword [rsp + 0x84], r11d
jge 0x14007f583
cmp word [r12], r11w
je 0x14007f56a
mov esi, 0x3a
cmp si, word [r12 + 2]
jne 0x14007f55a
lea ebx, [rsi + 0x22]
cmp bx, word [r12 + 4]
jne 0x14007f4f0
cmp word [r12 + 6], r11w
jne 0x14007f4f0
mov word [r12 + 4], r11w
cmp word [r12 + 4], r11w
jne 0x14007f553
lea rcx, [rsp + 0x58]
mov edx, 9
call fcn.140058138
mov rax, qword [rsp + 0x58]
mov ecx, 0x2e
mov word [rax], bx
mov rax, qword [rsp + 0x58]
xor r11d, r11d
mov word [rax + 2], bx
mov rax, qword [rsp + 0x58]
mov word [rax + 4], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 6], bx
mov rax, qword [rsp + 0x58]
movzx ecx, word [r12]
mov word [rax + 8], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 0xa], si
mov rax, qword [rsp + 0x58]
mov word [rax + 0xc], r11w
cmp qword [rsp + 0x58], r11
jne 0x14007f56a
lea rcx, [rsp + 0x58]
mov rdx, r12
call fcn.140062644
xor r11d, r11d
mov eax, dword [rsp + 0x48]
cmp dword [rsp + 0x84], r11d
mov r8, 0xffffffffffffffff
cmovl eax, r8d
jmp 0x14007f58b
mov eax, dword [rsp + 0x48]
or r8, 0xffffffffffffffff
movsxd rdx, dword [rsp + 0x84]
mov r9, qword [rsp + 0x58]
cmp eax, r11d
cmovle eax, r8d
lea rcx, [rsp + 0xa0]
movsxd r8, eax
call fcn.1400062b0
lea rcx, [rsp + 0x58]
call fcn.140050424
jmp 0x14007f7fd
lea rcx, [rsp + 0xa0]
mov edx, 0x1000
call fcn.140058138
movsxd r11, dword [rsp + 0x84]
xor r12d, r12d
cmp r11d, r12d
jl 0x14007f69a
lea rcx, [rsp + 0x148]
mov edx, 0x488
call fcn.140057dc0
mov rbx, qword [rsp + 0x148]
xor edx, edx
lea rsi, [rbx + 0x200]
mov r8d, 0x288
mov rcx, rsi
call fcn.1400d3e60
mov r8d, dword [rsp + 0x138]
mov rdx, rbx
mov rcx, rsi
call fcn.140067e38
mov edx, dword [rsp + 0x84]
mov ebx, r12d
mov rcx, r12
lea rax, [rsi + 4]
cmp dword [rax], edx
je 0x14007f64f
add rcx, r15
add ebx, r15d
add rax, 0x18
cmp rcx, 0x1a
jle 0x14007f639
jmp 0x14007f688
lea rcx, [rsp + 0xa0]
mov edx, 0x64
call fcn.140058138
movsxd r11, ebx
lea rdx, str._d___c_
lea rax, [r11 + r11*2]
movzx r9d, byte [rsi + rax*8 + 0x10]
mov r8d, dword [rsi + rax*8 + 4]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x148]
call fcn.140050424
jmp 0x14007f5af
cmp byte [rsp + 0x8c], r12b
jne 0x14007f5af
mov rdx, qword [rsp + 0xa0]
lea rax, [0x1400f2370]
cmp bpl, sil
lea r9, [0x1400f2380]
mov rcx, r11
cmove r9, rax
xor r8d, r8d
call fcn.14005d380
jmp 0x14007f5af
movzx ecx, word [r12]
mov esi, ecx
and esi, 0xffffffdf
lea r12d, [rsi - 0x41]
cmp r12d, 0x19
ja 0x14007f5af
mov r13d, dword [rsp + 0x138]
cmp r13d, r11d
jle 0x14007f777
lea rcx, [rsp + 0x148]
mov edx, 0x488
call fcn.140057dc0
mov rbx, qword [rsp + 0x148]
xor edx, edx
lea rbp, [rbx + 0x200]
mov r8d, 0x288
mov rcx, rbp
call fcn.1400d3e60
mov r8d, esi
mov rdx, rbx
shl r8d, 0x10
mov rcx, rbp
or r8d, r13d
call fcn.140067e38
movsxd r11, r12d
xor eax, eax
lea rbx, [r11 + r11*2]
cmp dword [rbp + rbx*8 + 8], eax
jle 0x14007f688
lea edx, [rax + 0x64]
lea rcx, [rsp + 0xa0]
call fcn.140058138
mov r8d, dword [rbp + rbx*8 + 4]
mov r9d, esi
lea rdx, str._d__c:
jmp 0x14007f67a
mov rax, qword [rsp + 0xa0]
mov word [rax], cx
cmp cx, r11w
je 0x14007f5af
mov r9d, dword [rsp + 0xf0]
mov cl, byte [rsp + 0x8b]
mov r8d, dword [rsp + 0x48]
mov byte [rsp + 0x30], cl
and r9d, 0xfffffffd
mov qword [rsp + 0x28], r11
lea rcx, [rsp + 0xa0]
mov edx, r10d
or r9d, 0xc
mov qword [rsp + 0x20], r11
call fcn.140079398
jmp 0x14007f5af
cmp byte [rsp + 0x8c], r11b
je 0x14007f7da
cmp r10d, r11d
jl 0x14007f800
neg byte [rsp + 0x70]
lea rcx, [rsp + 0xa0]
sbb edx, edx
and edx, 0x200000
or edx, r10d
or edx, dword [rsp + 0x1d8]
call fcn.140078ea8
xor r11d, r11d
mov eax, dword [rsp + 0x230]
mov rbp, qword [rsp + 0x490]
cmp eax, r11d
jle 0x14007f85f
mov r8, qword [rsp + 0xa0]
dec eax
lea r9, [rsp + 0xa0]
lea rdx, [rsp + 0xb0]
mov rcx, rbp
mov qword [rsp + 0xa0], r11
mov qword [rsp + 0x1f8], r8
mov dword [rsp + 0xb0], eax
mov dword [rsp + 0x20], r11d
call fcn.14005b738
lea rcx, [rsp + 0x1f8]
call fcn.140050424
mov r8, qword [rsp + 0xa0]
mov rdx, r14
mov rcx, rbp
call fcn.140057714
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
cmp rdi, rax
je 0x14007f88f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x228]
call fcn.140050424
lea rcx, [rsp + 0x1a0]
call fcn.140050424
lea rcx, [rsp + 0x238]
call fcn.140050424
lea rcx, [rsp + 0x2b8]
call fcn.140050424
lea rcx, [rsp + 0xa0]
call fcn.140050424
xor eax, eax
jmp 0x140080483
lea rcx, [rsp + 0xa0]
mov edx, 0x103c
call fcn.140058138
mov rsi, qword [rsp + 0xa0]
xor r15d, r15d
add rsi, 0x2000
lea rbx, [0x1400f2360]
cmp word [r12], r15w
je 0x14007f959
lea eax, [r15 + 0x3a]
cmp ax, word [r12 + 2]
jne 0x14007f959
movzx r8d, word [r12]
lea rdx, str.._c:
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsi + 8]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 2
jne 0x14007f94e
mov r13d, dword [rsp + 0x138]
cmp r13d, 0x10
jne 0x14007f9b2
lea rbx, [0x1400f2380]
mov ecx, 5
cmp eax, ecx
jne 0x14007f9b2
jmp 0x14007f982
mov r8d, dword [rsp + 0x84]
cmp r8d, r15d
jl 0x14007f9b2
mov eax, dword [rsp + 0x138]
cmp eax, 8
jne 0x14007f98b
lea rdx, str..CDROM_d
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbx, [0x1400f2370]
jmp 0x14007f9b2
cmp eax, 0x10
jne 0x14007f9a2
mov esi, r8d
lea rbx, [0x1400f2380]
and esi, 0xfff
jmp 0x14007f9b2
lea rdx, str..PhysicalDrive_d
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0xa0]
mov r9, rbx
mov r8d, 0x20
mov rcx, rsi
call fcn.14005d380
mov r8, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x490]
mov rdx, r14
call fcn.140057714
lea rcx, [rsp + 0x4a8]
call fcn.140055304
cmp rdi, r15
jmp 0x140080431
mov eax, dword [rsp + 0x48]
cmp eax, r11d
jle 0x14007ffc6
cmp dword [rsp + 0x84], r11d
jge 0x14007fa1a
cmp word [r13], r11w
je 0x14007ffc6
or r14, 0xffffffffffffffff
cmp dword [rsp + 0x84], r11d
mov rsi, r11
mov dword [rsp + 0xb0], r14d
mov qword [rsp + 0x148], r11
jge 0x14007fa45
cmp r11b, r11b
jne 0x14007faa2
jmp 0x14007ffc6
mov cl, byte [rsp + 0x8b]
mov r9d, dword [rsp + 0xf0]
mov edx, dword [rsp + 0x84]
mov byte [rsp + 0x30], cl
lea rcx, [rsp + 0xb0]
mov r8d, eax
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x148]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xa0]
call fcn.140079398
xor r11d, r11d
cmp dword [rsp + 0xb0], r11d
jle 0x14008041f
mov rsi, qword [rsp + 0x148]
mov dword [rsp + 0x7c], 0x200
mov qword [rsp + 0x1a8], r11
mov qword [rsp + 0x1b0], r11
mov qword [rsp + 0x1b8], r11
cmp word [rbp], r11w
je 0x14007fca4
lea rcx, [0x1400fa6f0]
mov rdx, rbp
call fcn.140051974
cmp al, r11b
jne 0x14007fca4
lea rcx, [0x1400f60f8]
mov rdx, rbp
call fcn.140051974
cmp al, r11b
jne 0x14007fca4
lea rcx, [0x1400fa6ec]
mov rdx, rbp
call fcn.140051974
cmp al, r11b
je 0x14007fb1b
mov eax, 8
jmp 0x14007fca9
lea rcx, str.nt6fat
mov rdx, rbp
call fcn.140051974
cmp al, r11b
jne 0x14007fc9d
lea rcx, str.winfat
mov rdx, rbp
call fcn.140051974
cmp al, r11b
jne 0x14007fc9d
lea rcx, [0x1400fa6d8]
mov rdx, rbp
call fcn.140051974
cmp al, r11b
je 0x14007fb69
mov eax, 6
jmp 0x14007fca9
lea rcx, str.nt5fat
mov rdx, rbp
call fcn.140051974
cmp al, r11b
je 0x14007fb87
mov eax, 5
jmp 0x14007fca9
mov r12d, 0x2a
mov rbx, r14
mov dword [rsp + 0x7c], r11d
mov qword [rsp + 0x178], rbx
cmp r12w, word [rbp]
jne 0x14007fbe0
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x148]
add rbp, 2
mov qword [rsp + 0x148], rbp
call fcn.14005dd68
mov rbp, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x178]
cmp r12w, word [rbp]
jne 0x14007fbe0
add rbp, 2
mov eax, 0x23
cmp ax, word [rbp]
jne 0x14007fc40
lea rcx, [rsp + 0x148]
mov rdx, rbp
call fcn.14006252c
mov rdx, qword [rsp + 0x148]
lea r9, [rsp + 0x1a8]
lea r8, str.EXEDATA
xor r13d, r13d
xor ecx, ecx
mov qword [rsp + 0x20], r13
call fcn.14001b8d4
lea rcx, [rsp + 0x148]
mov r12, rax
call fcn.140050424
mov r11d, dword [rsp + 0x1b0]
mov dword [rsp + 0x7c], r11d
jmp 0x14007fc62
lea r8, [rsp + 0x7c]
xor edx, edx
mov rcx, rbp
call fcn.140015550
mov r11d, dword [rsp + 0x7c]
xor r13d, r13d
mov r12, rax
mov qword [rsp + 0x1a8], rax
cmp rbx, r13
jl 0x14007fc76
mov eax, r11d
cmp rax, rbx
cmovg r11d, ebx
mov dword [rsp + 0x7c], r11d
cmp r12, r13
jne 0x14007fce2
lea rcx, [rsp + 0x1a8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
cmp rdi, r13
jmp 0x140080431
mov eax, 7
jmp 0x14007fca9
mov eax, 9
lea r9, [rsp + 0x1a8]
lea r8, str.INDATA
mov edx, eax
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.14001b8d4
mov r11d, dword [rsp + 0x7c]
xor r13d, r13d
cmp r11d, r13d
mov r12, rax
cmovne r11d, dword [rsp + 0x1b0]
mov dword [rsp + 0x7c], r11d
cmp r11d, r13d
jbe 0x14007fc7b
cmp r12, r13
je 0x14007fc7b
mov rdx, qword [rsp + 0x198]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r13
call fcn.140003588
mov rbx, qword [rsp + 0x140]
cmp rbx, r13
je 0x14007fc7b
mov rbp, qword [rsp + 0x1d0]
xor r8d, r8d
mov rcx, rbx
shl rbp, 9
add rbp, rsi
mov rdx, rbp
mov qword [rsp + 0x1d0], rbp
call fcn.140051824
cmp rax, rbp
je 0x14007fd93
lea rcx, [rsp + 0x1a8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
cmp rbx, r14
je 0x14007fc95
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007fc95
mov esi, 0x200
mov rcx, rbx
mov edx, esi
call fcn.140054a58
mov ecx, esi
cmp eax, esi
cmovge ecx, eax
mov eax, dword [rsp + 0x7c]
sub ecx, r15d
lea r13d, [rcx + rax]
not ecx
and r13d, ecx
lea rcx, [rsp + 0x120]
lea eax, [r13 + r13 + 0x200]
movsxd rdx, eax
call fcn.140057dc0
mov r14, qword [rsp + 0x120]
movsxd r15, r13d
add r14, rsi
lea r9, [rsp + 0xbc]
xor esi, esi
and r14, 0xfffffffffffffe00
mov r8d, r13d
mov rcx, rbx
lea rbp, [r14 + r15]
mov qword [rsp + 0x20], rsi
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, esi
jne 0x14007fe53
lea rcx, [rsp + 0x120]
call fcn.140050424
lea rcx, [rsp + 0x1a8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007fe45
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x14007bf26
jmp 0x14007bf1d
mov r8, r15
mov rdx, rbp
mov rcx, r14
call fcn.14001aa74
mov rsi, qword [rsp + 0x1d0]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.140051824
cmp rax, rsi
je 0x14007febc
lea rcx, [rsp + 0x120]
call fcn.140050424
lea rcx, [rsp + 0x1a8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007feb5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14007fe48
mov esi, dword [rsp + 0x7c]
mov r8d, 3
mov rdx, r12
mov rcx, rbp
call fcn.14001aa74
mov eax, 0x1fe
lea rdx, [r12 + 0x1e]
cmp esi, eax
lea rcx, [rbp + 0x1e]
cmovg esi, eax
lea eax, [rsi - 0x1e]
movsxd r8, eax
call fcn.14001aa74
mov byte [rbp + 0x1fe], 0x55
mov byte [rbp + 0x1ff], 0xaa
mov eax, dword [rsp + 0x7c]
cmp eax, 0x200
jbe 0x14007ff24
add eax, 0xfffffe00
lea rdx, [r12 + 0x200]
lea rcx, [rbp + 0x200]
mov r8d, eax
call fcn.14001aa74
mov r8, r15
mov rdx, rbp
mov rcx, r14
call fcn.140050454
xor r12d, r12d
cmp eax, r12d
je 0x14007ff65
lea r9, [rsp + 0xbc]
mov r8d, r13d
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov dword [rsp + 0x260], eax
call fcn.1400551f0
cmp dword [rsp + 0x260], r12d
lea rcx, [rsp + 0x120]
mov rsi, r12
sete sil
call fcn.140050424
lea rcx, [rsp + 0x1a8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007ffad
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r12
jmp 0x14007f116
cmp dword [rsp + 0x84], r11d
jge 0x14007ffe3
cmp word [r13], r11w
jne 0x14007ffe3
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
cmp rdi, rax
je 0x14007bb47
jmp 0x14007bb3e
mov r10d, 0x1b8
mov qword [rsp + 0x1f8], r11
mov qword [rsp + 0x200], r11
mov dword [rsp + 0x74], r10d
mov qword [rsp + 0x208], r11
cmp word [r9], r11w
je 0x14008017e
lea rcx, [0x1400fa6f0]
mov rdx, r9
call fcn.140051974
cmp al, r11b
jne 0x14008017e
lea rcx, [0x1400f60f8]
mov rdx, r9
call fcn.140051974
cmp al, r11b
jne 0x14008017e
lea rcx, [0x1400fa6d8]
mov rdx, r9
call fcn.140051974
cmp al, r11b
je 0x140080068
lea r12, [0x14010b310]
mov dword [rsp + 0x74], 0x190
jmp 0x1400801a4
lea rcx, [0x1400fa6ec]
mov rdx, r9
call fcn.140051974
cmp al, r11b
je 0x140080090
lea r12, [0x14010b4a0]
mov dword [rsp + 0x74], 0x180
jmp 0x1400801a4
or rax, 0xffffffffffffffff
mov dword [rsp + 0x74], r11d
lea esi, [rax + 0x2b]
mov rbx, rax
mov qword [rsp + 0x178], rax
cmp si, word [r9]
jne 0x1400800e8
add r9, 2
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x260]
mov qword [rsp + 0x260], r9
call fcn.14005dd68
mov r9, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x178]
cmp si, word [r9]
jne 0x1400800e8
add r9, 2
mov eax, 0x23
cmp ax, word [r9]
jne 0x140080147
lea rcx, [rsp + 0x260]
mov rdx, r9
call fcn.14006252c
mov rdx, qword [rsp + 0x260]
xor eax, eax
lea r9, [rsp + 0x1f8]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.14001b8d4
lea rcx, [rsp + 0x260]
mov r12, rax
call fcn.140050424
mov r11d, dword [rsp + 0x200]
mov dword [rsp + 0x74], r11d
jmp 0x140080166
lea r8, [rsp + 0x74]
xor edx, edx
mov rcx, r9
call fcn.140015550
mov r11d, dword [rsp + 0x74]
mov r12, rax
mov qword [rsp + 0x1f8], rax
xor ecx, ecx
cmp rbx, rcx
jl 0x14008018f
mov eax, r11d
cmp rax, rbx
jle 0x14008018f
mov r11d, ebx
mov dword [rsp + 0x74], ebx
jmp 0x14008018f
lea r12, [0x14010b620]
mov r11d, r10d
mov dword [rsp + 0x74], r10d
xor ecx, ecx
cmp r11d, ecx
jbe 0x140080412
xor r11d, r11d
cmp r12, r11
je 0x140080412
mov rdx, qword [rsp + 0x198]
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x140]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r11
call fcn.140003588
mov rbx, qword [rsp + 0x140]
xor esi, esi
cmp rbx, rsi
jne 0x140080210
lea rcx, [rsp + 0x1f8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
cmp rdi, rsi
jmp 0x140080431
mov ebp, 0x200
mov rcx, rbx
mov edx, ebp
call fcn.140054a58
mov esi, ebp
lea rcx, [rsp + 0x178]
cmp eax, ebp
cmovge esi, eax
mov eax, dword [rsp + 0x74]
lea ebp, [rsi - 1]
lea edx, [rsi + rsi*2]
lea r13d, [rbp + rax]
mov eax, ebp
not eax
and r13d, eax
call fcn.140057dc0
mov r14, qword [rsp + 0x178]
mov r11d, esi
not ebp
mov eax, ebp
add r14, r11
xor ebp, ebp
and r14, rax
mov rax, rbp
add rsi, r14
cmp qword [rsp + 0x1d0], rbp
je 0x140080283
mov rdx, qword [rsp + 0x168]
xor r8d, r8d
mov rcx, rbx
call fcn.140051824
cmp rax, qword [rsp + 0x168]
jne 0x1400803c3
lea r9, [rsp + 0xbc]
mov r8d, r13d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, ebp
je 0x1400803c3
movsxd rbp, r13d
mov rdx, rsi
mov rcx, r14
mov r8, rbp
call fcn.14001aa74
mov r11d, dword [rsp + 0x74]
mov eax, 0x1b8
cmp r11d, eax
mov rdx, r12
mov rcx, rsi
cmovg r11d, eax
movsxd r8, r11d
call fcn.14001aa74
mov byte [rsi + 0x1fe], 0x55
mov byte [rsi + 0x1ff], 0xaa
mov eax, dword [rsp + 0x74]
cmp eax, 0x200
jbe 0x14008031a
add eax, 0xfffffe00
lea rdx, [r12 + 0x200]
lea rcx, [rsi + 0x200]
mov r8d, eax
call fcn.14001aa74
mov r8, rbp
mov rdx, rsi
mov rcx, r14
call fcn.140050454
xor ebp, ebp
cmp eax, ebp
je 0x140080375
mov rbp, qword [rsp + 0x168]
xor r8d, r8d
mov rcx, rbx
mov rdx, rbp
call fcn.140051824
cmp rax, rbp
jne 0x1400803c1
lea r9, [rsp + 0xbc]
xor ebp, ebp
mov r8d, r13d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.1400551f0
cmp esi, ebp
je 0x1400803c3
lea rcx, [rsp + 0x178]
call fcn.140050424
lea rcx, [rsp + 0x1f8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400803ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
je 0x1400803bc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, rbp
jmp 0x14008043f
xor ebp, ebp
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x178]
cmp eax, ebp
cmove eax, r15d
mov esi, eax
call fcn.140050424
lea rcx, [rsp + 0x1f8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14008040a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rbp
jmp 0x14007f116
lea rcx, [rsp + 0x1f8]
call fcn.140050424
lea rcx, [rsp + 0x4a8]
call fcn.140055304
xor eax, eax
cmp rdi, rax
je 0x14008043c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, r15
lea rcx, [rsp + 0x228]
call fcn.140050424
lea rcx, [rsp + 0x1a0]
call fcn.140050424
lea rcx, [rsp + 0x238]
call fcn.140050424
lea rcx, [rsp + 0x2b8]
call fcn.140050424
lea rcx, [rsp + 0xa0]
call fcn.140050424
mov rax, rsi
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret