Function at 0x140075988
Capabilities:
Encode data using base64
Get disk information
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3f0
movaps xmmword [rax - 0x48], xmm6
lea rcx, [rax + 0x10]
movaps xmmword [rax - 0x58], xmm7
call fcn.140044ef4
lea rcx, [rsp + 0xa8]
mov edx, 5
call fcn.14004bedc
lea rcx, [rsp + 0x270]
mov edx, 0x14
call fcn.14004bedc
lea rcx, [rsp + 0x218]
call fcn.14004be6c
lea rcx, [rsp + 0x1e0]
call fcn.14004be6c
lea rcx, [rsp + 0x228]
call fcn.14004be6c
xor ebx, ebx
or r15, 0xffffffffffffffff
mov eax, 0xfffc0000
lea edi, [rbx + 0x2c]
lea rdx, [rsp + 0x1e0]
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x78], eax
mov eax, r15d
mov dword [rsp + 0xb8], eax
mov dword [rsp + 0xc4], eax
mov rax, r15
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x438]
lea rcx, [rsp + 0x1d8]
mov r8d, edi
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x1f0], r15
mov esi, ebx
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x448], ebx
mov dword [rsp + 0x1a8], ebx
mov word [rsp + 0x120], r15w
mov qword [rsp + 0x1b0], rbx
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0x260], r15
mov dword [rsp + 0x94], ebx
mov r12, r15
mov qword [rsp + 0x210], r15
mov qword [rsp + 0xf8], r15
mov qword [rsp + 0x248], r15
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x240], r15
mov qword [rsp + 0x190], r15
mov byte [rsp + 0x7e], bl
mov byte [rsp + 0x6a], bl
mov byte [rsp + 0xbc], bl
mov byte [rsp + 0xbf], bl
mov byte [rsp + 0x44], bl
mov byte [rsp + 0x4c], bl
mov byte [rsp + 0x6d], bl
mov byte [rsp + 0xd0], bl
mov dword [rsp + 0x134], ebx
call fcn.14004f5d4
mov r13, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1d8]
mov word [r13], bx
cmp di, word [rax]
jne 0x140075b7f
mov word [rax], bx
add rax, 2
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1d8]
mov r8d, edi
mov qword [rsp + 0x1d8], rax
call fcn.14004f5d4
mov r13, qword [rsp + 0x1e0]
mov rax, 0xfffffffffffffff7
mov cl, bl
mov r12b, bl
mov byte [rsp + 0x4f], bl
mov byte [rsp + 0xc8], bl
mov byte [rsp + 0x168], bl
mov byte [rsp + 0x60], bl
mov byte [rsp + 0xc9], bl
mov byte [rsp + 0x58], bl
mov byte [rsp + 0x42], bl
mov byte [rsp + 0x4e], bl
mov byte [rsp + 0x43], bl
mov byte [rsp + 0x40], bl
mov byte [rsp + 0x4d], bl
mov byte [rsp + 0x90], bl
mov qword [rsp + 0x258], rbx
mov rbp, rbx
mov qword [rsp + 0x1d8], rbx
mov edi, ebx
mov dword [rsp + 0x5c], ebx
mov byte [rsp + 0x6c], bl
mov byte [rsp + 0x59], bl
mov ebx, 0xfffff000
mov dword [rsp + 0x148], r15d
mov dword [rsp + 0xcc], ebx
mov dword [rsp + 0x98], ebx
mov qword [rsp + 0x1f8], rax
lea ebx, [rax + 0x11]
mov qword [rsp + 0x1c0], rax
mov r14, rax
mov qword [rsp + 0x1c8], rax
lea r15d, [rax + 0xa]
mov rax, qword [rsp + 0x438]
mov dword [rsp + 0x140], ecx
xor ecx, ecx
mov dword [rsp + 0x100], r12d
cmp word [rax], cx
je 0x1400769d8
lea rdx, [rsp + 0x438]
lea rcx, str._admin
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075c71
or byte [rsp + 0x4f], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._super
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075c9b
or byte [rsp + 0x4f], 2
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._devid
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075cc9
bts dword [rsp + 0x1a8], 0x10
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._devidx
mov r8d, 7
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075cf7
bts dword [rsp + 0x1a8], 0x11
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._gui
mov r8d, 4
call fcn.14004e558
xor ecx, ecx
cmp al, cl
jne 0x140076a5c
lea r8d, [rcx + 4]
lea rdx, [rsp + 0x438]
lea rcx, str._usb
call fcn.14004e558
xor edx, edx
cmp al, dl
jne 0x140076102
lea r8d, [rdx + 6]
lea rcx, str._hextp
lea rdx, [rsp + 0x438]
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075d63
or edi, r15d
jmp 0x140076663
lea rdx, [rsp + 0x438]
lea rcx, str._phy
mov r8d, 4
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075d8b
or edi, 2
jmp 0x140076663
lea rdx, [rsp + 0x438]
lea rcx, [0x1400dfbc8]
mov r8d, 5
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075db3
or edi, 0x10
jmp 0x140076663
lea rdx, [rsp + 0x438]
lea rcx, str._fill
mov r8d, 5
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075ddb
or edi, 4
jmp 0x140076663
lea rdx, [rsp + 0x438]
lea rcx, [0x1400dfbbc]
mov r8d, 3
call fcn.14004e558
xor edx, edx
cmp al, dl
jne 0x140075e19
lea r8d, [rdx + 3]
lea rcx, [0x1400dfbbc]
lea rdx, [rsp + 0x438]
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075e23
mov byte [rsp + 0x4e], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._xup
mov r8d, 4
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075e4d
mov byte [rsp + 0x43], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._axup
mov r8d, 5
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075e77
mov byte [rsp + 0x43], 0x21
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._hup
mov r8d, 4
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075ea1
mov byte [rsp + 0x40], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._ahup
mov r8d, 5
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075ecb
mov byte [rsp + 0x40], 0x21
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._gpt
mov r8d, 4
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075ef5
mov byte [rsp + 0x4d], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._mbr
mov r8d, 4
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075f22
mov byte [rsp + 0xbf], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._cmp
mov r8d, 4
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075f4f
mov byte [rsp + 0x90], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, [0x1400d916c]
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075f7c
mov byte [rsp + 0xbc], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, [0x1400dfb80]
mov r8d, 3
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075fa9
mov byte [rsp + 0xd0], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._lskip
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140075fd3
or byte [rsp + 0x6d], 0x40
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._locku
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
jne 0x140076164
mov r11, qword [rsp + 0x438]
lea r8d, [rdx + 7]
lea rcx, str._locku:
mov rdx, r11
call fcn.140045fc8
xor edx, edx
cmp al, dl
je 0x140076023
mov byte [rsp + 0x4c], 3
add r11, 2
jmp 0x140076047
lea rcx, str._lock:
mov r8d, 6
mov rdx, r11
call fcn.140045fc8
xor edx, edx
cmp al, dl
je 0x14007611d
mov byte [rsp + 0x4c], r15b
add r11, 0xc
mov qword [rsp + 0x438], r11
movzx ecx, word [r11]
cmp cx, dx
je 0x1400760c9
mov r9d, 9
cmp r9w, cx
ja 0x14007606e
cmp cx, 0xd
jbe 0x1400760c9
mov r8d, 0x20
cmp r8w, cx
je 0x1400760c9
lea eax, [rcx - 0x30]
cmp ax, r9w
jbe 0x1400760c9
mov qword [rsp + 0x1d0], r11
cmp r9w, cx
ja 0x140076097
cmp cx, 0xd
jbe 0x1400760b4
cmp r8w, cx
je 0x1400760b4
add r11, 2
mov qword [rsp + 0x438], r11
mov cx, word [r11]
cmp cx, dx
je 0x1400760f3
jmp 0x14007608b
cmp word [r11], dx
je 0x1400760f3
mov word [r11], dx
add qword [rsp + 0x438], 2
jmp 0x1400760f3
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x438]
call fcn.140005c30
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x438]
call fcn.140005c30
lea rcx, [rsp + 0x438]
call fcn.140044ef4
xor edx, edx
mov rax, qword [rsp + 0x438]
cmp word [rax], dx
je 0x14007696a
mov ebx, 8
jmp 0x140075c47
lea rdx, [rsp + 0x438]
lea rcx, str._lock
mov r8d, 5
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140076144
mov byte [rsp + 0x4c], r15b
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._lockx
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x14007616b
mov byte [rsp + 0x4c], 3
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._lock_
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x1400761a1
or rax, 0xffffffffffffffff
mov byte [rsp + 0x4c], 0xf0
mov qword [rsp + 0x118], rax
jmp 0x140076102
mov r11, qword [rsp + 0x438]
lea rcx, [0x1400dfb3c]
mov r8d, 4
mov rdx, r11
call fcn.140045fc8
xor ecx, ecx
cmp al, cl
je 0x140076203
lea rax, [r11 + 8]
lea r9d, [rcx + 0x3d]
lea r10d, [rcx + 9]
cmp word [rax], cx
je 0x1400762d6
cmp r9w, word [rax]
je 0x1400762d6
cmp r10w, word [rax]
ja 0x1400761f3
cmp word [rax], 0xd
jbe 0x1400762d6
mov r8d, 0x20
cmp r8w, word [rax]
je 0x1400762dc
lea rcx, str._pbr
mov r8d, 4
mov rdx, r11
call fcn.140045fc8
xor edx, edx
lea r10d, [rdx + 9]
cmp al, dl
je 0x14007625d
lea rax, [r11 + 8]
lea r9d, [rdx + 0x3d]
cmp word [rax], dx
je 0x140076374
cmp r9w, word [rax]
je 0x140076374
cmp r10w, word [rax]
ja 0x14007624d
cmp word [rax], 0xd
jbe 0x140076374
mov r8d, 0x20
cmp r8w, word [rax]
je 0x14007637a
lea rcx, str._alignend
mov r8d, r10d
mov rdx, r11
call fcn.140045fc8
xor edx, edx
cmp al, dl
je 0x1400764d0
lea rbx, [r11 + 0x12]
lea r9d, [rdx + 0x3d]
lea r8d, [rdx + 9]
cmp word [rbx], dx
je 0x1400762aa
cmp r9w, word [rbx]
je 0x1400762aa
cmp r8w, word [rbx]
ja 0x14007629c
cmp word [rbx], 0xd
jbe 0x1400762aa
mov eax, 0x20
cmp ax, word [rbx]
jne 0x1400764cb
mov qword [rsp + 0x438], rbx
movzx edi, word [rbx]
cmp r9w, di
je 0x140076439
mov rax, 0xfffffffffffffffe
mov r14, rax
mov qword [rsp + 0x1c8], rax
jmp 0x140076484
mov r8d, 0x20
mov qword [rsp + 0x438], rax
mov rbp, rcx
mov qword [rsp + 0x1d8], rcx
cmp r9w, word [rax]
je 0x140076309
lea r8, [0x1400dfb20]
mov qword [rsp + 0x258], r8
jmp 0x1400760f3
add rax, 2
lea rcx, [rsp + 0x438]
mov qword [rsp + 0x438], rax
call fcn.140044ef4
xor edx, edx
mov rax, qword [rax]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x438]
movzx ecx, word [rax]
cmp cx, dx
je 0x1400760f3
cmp r10w, cx
ja 0x14007634f
cmp cx, 0xd
jbe 0x140076363
cmp r8w, cx
je 0x140076363
add rax, 2
mov qword [rsp + 0x438], rax
jmp 0x140076337
cmp word [rax], dx
je 0x1400760f3
mov word [rax], dx
jmp 0x1400760be
mov r8d, 0x20
mov qword [rsp + 0x438], rax
movzx ecx, word [rax]
mov qword [rsp + 0x258], rdx
cmp r9w, cx
je 0x1400763d7
lea rbp, [0x1400d6cc0]
mov qword [rsp + 0x1d8], rbp
jmp 0x1400763cd
cmp r10w, cx
ja 0x1400763b4
cmp cx, 0xd
jbe 0x1400760f3
cmp r8w, cx
je 0x1400760f3
add rax, 2
mov qword [rsp + 0x438], rax
mov cx, word [rax]
cmp cx, dx
jne 0x1400763a4
jmp 0x1400760f3
add rax, 2
lea rcx, [rsp + 0x438]
mov qword [rsp + 0x438], rax
call fcn.140044ef4
xor edx, edx
mov rbp, qword [rax]
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x1d8], rbp
movzx ecx, word [rax]
cmp cx, dx
je 0x1400760f3
cmp r10w, cx
ja 0x140076421
cmp cx, 0xd
jbe 0x140076363
cmp r8w, cx
je 0x140076363
add rax, 2
mov qword [rsp + 0x438], rax
jmp 0x140076405
lea rcx, [rbx + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r8w
ja 0x140076484
mov qword [rsp + 0xa0], rcx
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0xa0]
call fcn.140051edc
mov r14, qword [rsp + 0x1c8]
xor edx, edx
lea rax, [rdx - 2]
cmp r14, rdx
cmovle r14, rax
mov qword [rsp + 0x1c8], r14
cmp di, dx
je 0x1400764b5
mov eax, 0x20
lea ecx, [rax - 0x17]
cmp cx, di
ja 0x14007649c
cmp di, 0xd
jbe 0x1400764b5
cmp ax, di
je 0x1400764b5
add rbx, 2
mov qword [rsp + 0x438], rbx
mov di, word [rbx]
cmp di, dx
jne 0x140076491
lea rcx, [rsp + 0x438]
call fcn.140044ef4
mov edi, dword [rsp + 0x5c]
jmp 0x140076100
mov ebx, 8
lea rcx, str._align
mov r8d, 6
mov rdx, r11
call fcn.140045fc8
xor edx, edx
cmp al, dl
je 0x14007651a
lea rax, [r11 + 0xc]
lea r9d, [rdx + 0x3d]
lea r11d, [rdx + 9]
cmp word [rax], dx
je 0x14007654b
cmp r9w, word [rax]
je 0x14007654b
cmp r11w, word [rax]
ja 0x14007650e
cmp word [rax], 0xd
jbe 0x14007654b
mov r10d, 0x20
cmp r10w, word [rax]
je 0x140076551
lea rdx, [rsp + 0x438]
lea rcx, str._clear
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x1400765f7
mov byte [rsp + 0xc8], r15b
jmp 0x140076102
mov r10d, 0x20
mov r8, rax
jmp 0x14007656c
cmp r11w, cx
ja 0x140076562
cmp cx, 0xd
jbe 0x14007657c
cmp r10w, cx
je 0x14007657c
add rax, 2
mov qword [rsp + 0x438], rax
movzx ecx, word [rax]
cmp cx, dx
jne 0x140076556
lea rcx, [rsp + 0x438]
call fcn.140044ef4
cmp r9w, word [r8]
je 0x1400765a8
or rax, 0xffffffffffffffff
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x1c0], rax
jmp 0x140076100
lea rcx, [r8 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r11w
ja 0x140076100
mov qword [rsp + 0xa0], rcx
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0xa0]
call fcn.140051edc
mov rcx, qword [rsp + 0x1c0]
xor eax, eax
cmp rcx, rax
mov qword [rsp + 0x1f8], rcx
jg 0x140076100
jmp 0x14007658f
lea rdx, [rsp + 0x438]
lea rcx, [0x1400d96c4]
mov r8d, 3
call fcn.14004e558
xor edx, edx
cmp al, dl
jne 0x14007695d
lea r8d, [rdx + 4]
lea rcx, str._del
lea rdx, [rsp + 0x438]
call fcn.14004e558
xor edx, edx
cmp al, dl
jne 0x14007695d
lea r8d, [rdx + 4]
lea rcx, str._raw
lea rdx, [rsp + 0x438]
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x14007666c
mov byte [rsp + 0x60], r15b
or edi, 0x20
mov dword [rsp + 0x5c], edi
jmp 0x140076102
mov r11, qword [rsp + 0x438]
lea rcx, str._swap:
mov r8d, 6
mov rdx, r11
call fcn.140045fc8
xor ecx, ecx
cmp al, cl
je 0x1400766c4
add r11, 0xc
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x438]
mov qword [rsp + 0x438], r11
call fcn.14004fc04
xor edx, edx
cmp eax, edx
jl 0x14007758d
mov byte [rsp + 0x59], r15b
jmp 0x140076102
lea rcx, str._CHS
mov r8d, 5
mov rdx, r11
call fcn.140045fc8
xor r9d, r9d
cmp al, r9b
je 0x1400767ec
lea rcx, [rsp + 0x438]
add r11, 0xa
mov qword [rsp + 0x438], r11
call fcn.140044ef4
mov rcx, qword [rsp + 0x438]
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0x128], rcx
cmp ax, r9w
je 0x140076748
lea edx, [r9 + 0x20]
lea r11d, [r9 + 9]
cmp r11w, ax
ja 0x14007672e
cmp ax, 0xd
jbe 0x140076748
cmp dx, ax
je 0x140076748
add rcx, 2
mov qword [rsp + 0x438], rcx
mov ax, word [rcx]
cmp ax, r9w
jne 0x140076722
lea rcx, [rsp + 0x438]
call fcn.140044ef4
movzx ecx, word [r8]
mov eax, 9
sub cx, 0x30
cmp cx, ax
ja 0x140076784
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x128]
call fcn.140051edc
mov r8, qword [rsp + 0x128]
mov ebx, 0x3a
cmp bx, word [r8]
jne 0x140076100
add r8, 2
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x128]
mov qword [rsp + 0x128], r8
call fcn.140051edc
mov r8, qword [rsp + 0x128]
cmp bx, word [r8]
jne 0x140076100
add r8, 2
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x128]
mov qword [rsp + 0x128], r8
call fcn.140051edc
jmp 0x140076100
lea rcx, str._IMG
mov r8d, 5
mov rdx, r11
call fcn.140045fc8
xor ecx, ecx
cmp al, cl
jne 0x14007696a
lea r8d, [rcx + 6]
lea rcx, str._SKIP
mov rdx, r11
call fcn.140045fc8
xor ecx, ecx
cmp al, cl
je 0x14007686d
lea rcx, [rsp + 0x438]
add r11, 0xc
mov qword [rsp + 0x438], r11
call fcn.140044ef4
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x438]
mov dword [rsp + 0x178], 0x42
call fcn.14004fc04
mov al, byte [rsp + 0x178]
mov byte [rsp + 0x6c], al
jmp 0x140076100
lea rcx, str._iv
mov r8d, 4
mov rdx, r11
call fcn.140045fc8
xor ecx, ecx
cmp al, cl
je 0x1400768ad
add r11, rbx
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x438]
mov qword [rsp + 0x438], r11
call fcn.14004fc04
jmp 0x140076100
lea rdx, [rsp + 0x438]
lea rcx, str._cdrom
mov r8d, 6
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x1400768d9
mov dword [rsp + 0x134], ebx
jmp 0x140076102
lea rdx, [rsp + 0x438]
lea rcx, str._floppy
mov r8d, 7
call fcn.14004e558
xor edx, edx
cmp al, dl
je 0x140076909
mov dword [rsp + 0x134], 0x10
jmp 0x140076102
mov rcx, qword [rsp + 0x438]
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x14007696a
mov r8d, 0x20
lea r11d, [r8 - 0x17]
cmp r11w, ax
ja 0x14007693a
cmp ax, 0xd
jbe 0x1400760f3
cmp r8w, ax
je 0x1400760f3
add rcx, 2
mov qword [rsp + 0x438], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14007692a
jmp 0x1400760f3
mov byte [rsp + 0x168], r15b
jmp 0x140076102
mov rcx, qword [rsp + 0x1f8]
mov rax, 0xfffffffffffffffe
cmp r14, rax
jne 0x140076990
mov r14, rcx
cmp rcx, 0xfffffffffffffff7
mov rax, 0xffffffffffffffff
cmove r14, rax
mov rdx, qword [rsp + 0x180]
mov r9, qword [rsp + 0x190]
mov qword [rsp + 0x248], rdx
mov qword [rsp + 0x240], r9
cmp rcx, 0xfffffffffffffff7
jne 0x140076a3c
mov rdi, qword [rsp + 0xf8]
mov ebx, dword [rsp + 0x98]
mov qword [rsp + 0x210], rdi
mov dword [rsp + 0xcc], ebx
mov rcx, r15
mov qword [rsp + 0x1f8], rcx
cmp r14, 0xfffffffffffffff7
mov edi, 4
lea rdx, [rsp + 0x438]
cmove r14, rcx
lea rcx, [0x1400dfad0]
mov r8d, edi
mov qword [rsp + 0x280], r14
call fcn.14004e558
xor ebx, ebx
cmp al, bl
je 0x140076ba5
lea rdx, [rsp + 0x438]
lea rcx, str.disk
mov r8d, edi
call fcn.14004e558
cmp al, bl
je 0x140076aaf
mov r12b, r15b
jmp 0x140076b9d
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x210], rax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0xcc], eax
jmp 0x1400769e3
lea rdx, str.21:INDATA
lea rcx, [rsp + 0x448]
call fcn.140058920
mov rdx, qword [rsp + 0x438]
lea rcx, [rsp + 0x448]
call fcn.14004bfa8
mov rdx, qword [rsp + 0x448]
mov rcx, qword [rsp + 0x430]
call fcn.140039598
lea rcx, [rsp + 0x448]
mov r14d, eax
call fcn.140044f24
jmp 0x14007b1af
lea rdx, [rsp + 0x438]
lea rcx, str.part
mov r8d, edi
call fcn.14004e558
cmp al, bl
je 0x140076ad2
mov r12b, 2
jmp 0x140076b9d
lea rdx, [rsp + 0x438]
lea rcx, [0x1400dfaa0]
mov r8d, 3
call fcn.14004e558
cmp al, bl
je 0x140076af8
mov r12b, 3
jmp 0x140076b9d
lea rdx, [rsp + 0x438]
lea rcx, str.cdrom
mov r8d, 5
call fcn.14004e558
cmp al, bl
je 0x140076b26
mov r12b, dil
mov dword [rsp + 0x134], 8
jmp 0x140076b9d
mov r14d, 6
lea rdx, [rsp + 0x438]
lea rcx, str.floppy
mov r8d, r14d
call fcn.14004e558
cmp al, bl
je 0x140076b57
mov r12b, 5
mov dword [rsp + 0x134], 0x10
jmp 0x140076b9d
lea rdx, [rsp + 0x438]
lea rcx, str.parent
mov r8d, r14d
call fcn.14004e558
cmp al, bl
je 0x140076b77
mov r12b, r14b
jmp 0x140076b9d
lea rdx, [rsp + 0x438]
lea rcx, str.volume
mov r8d, r14d
call fcn.14004e558
movzx r12d, r12b
cmp al, bl
mov eax, 7
cmovne r12d, eax
mov dword [rsp + 0x100], r12d
lea rdx, [rsp + 0x438]
lea rcx, str.init
mov r8d, edi
mov r14b, bl
mov byte [rsp + 0x41], bl
call fcn.14004e558
cmp al, bl
je 0x140076bdc
mov byte [rsp + 0x44], r15b
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x448], r15d
lea rdx, [rsp + 0x438]
lea rcx, str.update
mov r8d, 6
call fcn.14004e558
cmp al, bl
je 0x140076c12
mov r14b, r15b
mov byte [rsp + 0x41], r15b
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x448], r15d
lea rdx, [rsp + 0x438]
lea rcx, str.xupdate
mov r8d, 7
call fcn.14004e558
mov edi, 0x20
cmp al, bl
je 0x140076c4d
mov r14b, dil
mov byte [rsp + 0x41], dil
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x448], r15d
lea rdx, [rsp + 0x438]
lea rcx, str.hupdate
mov r8d, 7
call fcn.14004e558
cmp al, bl
je 0x140076c83
mov r14b, 0x10
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov byte [rsp + 0x41], r14b
mov dword [rsp + 0x448], r15d
mov rax, qword [rsp + 0x438]
mov rdx, rax
movzx ecx, word [rax]
cmp cx, bx
je 0x140076cc1
mov r8d, 9
cmp r8w, cx
ja 0x140076ca8
cmp cx, 0xd
jbe 0x140076cc1
cmp di, cx
je 0x140076cc1
add rax, 2
mov qword [rsp + 0x438], rax
mov cx, word [rax]
cmp cx, bx
jne 0x140076c9c
sub rax, rdx
lea rcx, [rsp + 0x218]
sar rax, 1
mov r8d, eax
call fcn.14004c0cc
lea rcx, [rsp + 0x438]
call fcn.140044ef4
mov r8, qword [rsp + 0x438]
mov edx, 0x61
movzx ecx, word [r8]
lea r9d, [rdx + 0x1f]
movzx eax, cx
or ax, di
cmp dx, ax
jne 0x140076d3b
mov dword [rsp + 0x120], r9d
cmp cx, bx
je 0x140076d84
lea eax, [rdx - 0x58]
cmp ax, cx
ja 0x140076d1f
cmp cx, 0xd
jbe 0x140076d84
cmp di, cx
je 0x140076d84
add r8, 2
mov qword [rsp + 0x438], r8
mov cx, word [r8]
cmp cx, bx
jne 0x140076d14
jmp 0x140076d84
mov eax, 0x2d
cmp ax, cx
jne 0x140076d84
movzx eax, word [r8 + 2]
or ax, di
cmp dx, ax
jne 0x140076d84
mov word [rsp + 0x120], bx
mov eax, 9
cmp ax, cx
ja 0x140076d6a
cmp cx, 0xd
jbe 0x140076d84
cmp di, cx
je 0x140076d84
add r8, 2
mov qword [rsp + 0x438], r8
mov cx, word [r8]
cmp cx, bx
jne 0x140076d5f
mov eax, 0xb9e5
lea rdi, [0x1400f2c10]
mov dword [rsp + 0xe8], 0xebd0a0a2
mov word [rsp + 0xec], ax
mov eax, 0x4433
mov rcx, rdi
mov word [rsp + 0xee], ax
xor eax, eax
mov byte [rsp + 0xf0], 0x87
mov dword [rsp + 0x19c], eax
mov dword [rsp + 0x1a0], eax
mov dword [rsp + 0x1a4], eax
lea rax, str.MS_Basic_Data
mov byte [rsp + 0xf1], 0xc0
mov byte [rsp + 0xf2], 0x68
mov byte [rsp + 0xf3], 0xb6
mov byte [rsp + 0xf4], 0xb7
mov byte [rsp + 0xf5], 0x26
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0xf6], 0x99
mov byte [rsp + 0xf7], 0xc7
mov dword [rsp + 0x198], ebx
mov qword [rsp + 0x288], rbx
mov dword [rsp + 0x178], ebx
mov dword [rsp + 0x200], ebx
mov dword [rsp + 0x268], ebx
mov dword [rsp + 0x150], ebx
mov dword [rsp + 0x220], ebx
mov dword [rsp + 0x224], ebx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov bl, byte [rsp + 0x4d]
xor eax, eax
lea rcx, [rsp + 0x438]
cmp bl, al
jne 0x140076ed3
lea rdx, [rsp + 0xc4]
call fcn.14004fc04
mov rcx, qword [rsp + 0x438]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
cmp r8w, word [rcx]
jne 0x140076ec3
lea rdx, [rcx + 2]
movzx eax, word [rdx]
sub ax, 0x30
cmp ax, r10w
mov eax, dword [rsp + 0xc4]
mov dword [rsp + 0xb8], eax
jbe 0x140076f1f
mov byte [rsp + 0xc9], r15b
mov rcx, rdx
mov qword [rsp + 0x438], rdx
jmp 0x140076f1f
mov eax, dword [rsp + 0xc4]
mov dword [rsp + 0xb8], eax
jmp 0x140076f1f
lea rdx, [rsp + 0xe8]
xor r8d, r8d
call fcn.140060534
mov rbx, rax
mov qword [rsp + 0x268], rax
or rax, 0xffffffffffffffff
cmp ebx, eax
jne 0x140076f09
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov r14d, eax
jmp 0x14007b1af
mov rcx, qword [rsp + 0x438]
mov bl, byte [rsp + 0x4d]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
mov eax, 0x2b
cmp ax, word [rcx]
jne 0x140076f3b
mov al, byte [rcx]
add rcx, 2
mov byte [rsp + 0x7e], al
mov qword [rsp + 0x438], rcx
movzx eax, word [rcx]
cmp r8w, ax
jne 0x140076f7f
xor edx, edx
lea r9d, [rdx + 0x20]
cmp r10w, ax
ja 0x140076f56
cmp ax, 0xd
jbe 0x140076f70
cmp r9w, ax
je 0x140076f70
add rcx, 2
mov qword [rsp + 0x438], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x140076f4a
lea rcx, [rsp + 0x438]
call fcn.140044ef4
jmp 0x140076fb2
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x438]
call fcn.140051f98
mov r8d, 0x2d
mov dword [rsp + 0x220], eax
mov rax, qword [rsp + 0x1e8]
lea r10d, [r8 - 0x24]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x438]
mov ecx, 0x40
mov byte [rsp + 0xd1], r15b
cmp cx, word [rax]
jne 0x140076fe3
add rax, 2
xor edx, edx
mov byte [rsp + 0xd1], dl
mov qword [rsp + 0x438], rax
jmp 0x140076fe5
xor edx, edx
movzx ecx, word [rax]
cmp r8w, cx
jne 0x140077029
mov r8d, 0x20
cmp r10w, cx
ja 0x140077000
cmp cx, 0xd
jbe 0x14007701a
cmp r8w, cx
je 0x14007701a
add rax, 2
mov qword [rsp + 0x438], rax
mov cx, word [rax]
cmp cx, dx
jne 0x140076ff4
lea rcx, [rsp + 0x438]
call fcn.140044ef4
jmp 0x140077055
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x438]
call fcn.140051f98
mov dword [rsp + 0x224], eax
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0xb0], rax
xor edx, edx
cmp bl, dl
je 0x140077099
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x438]
xor r8d, r8d
call fcn.140060534
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x438]
mov qword [rsp + 0x150], rax
call fcn.140051edc
xor edx, edx
mov dword [rsp + 0x178], eax
mov rcx, qword [rsp + 0x438]
mov dword [rsp + 0x250], edx
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x1400770e9
mov r8d, 0x20
lea r9d, [r8 - 0x17]
cmp r9w, ax
ja 0x1400770cd
cmp ax, 0xd
jbe 0x140077138
cmp r8w, ax
je 0x140077138
add rcx, 2
mov qword [rsp + 0x438], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x1400770c1
jmp 0x140077138
cmp bl, dl
je 0x140077138
cmp ax, dx
je 0x140077138
mov qword [rsp + 0x278], rcx
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x278]
xor r8d, r8d
call fcn.140020840
mov rbx, qword [rsp + 0x278]
movsxd rax, dword [rsp + 0x250]
xor edx, edx
mov dword [rsp + 0x200], r15d
mov qword [rsp + 0xa0], rbx
mov word [rbx + rax*2], dx
mov ebx, dword [rsp + 0x84]
mov byte [rsp + 0x69], dl
mov byte [rsp + 0x88], dl
mov byte [rsp + 0x89], dl
cmp r12b, r15b
je 0x14007716c
mov eax, 4
cmp r12b, al
cmovl ebx, edx
mov dword [rsp + 0x84], ebx
mov dword [rsp + 0x78], ebx
mov r12, qword [rsp + 0x218]
lea rcx, str._img
mov r8d, 5
mov rdx, r12
mov r11, r12
mov qword [rsp + 0x438], r12
call fcn.140045fc8
mov ecx, 0x2a
xor r8d, r8d
lea r10d, [rcx - 7]
cmp al, r8b
je 0x1400772df
lea rax, [r12 + 0xa]
mov qword [rsp + 0x438], rax
mov rdx, rax
cmp cx, word [rax]
jne 0x14007725e
add rax, 2
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x160], rax
call fcn.140051f98
mov rdx, qword [rsp + 0x160]
mov eax, 0x2a
mov byte [rsp + 0x89], r15b
cmp ax, word [rdx]
jne 0x14007723c
add rdx, 2
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x160], rdx
lea rdx, [rsp + 0x260]
call fcn.140051f98
mov rdx, qword [rsp + 0x160]
mov eax, 0x2a
mov byte [rsp + 0x89], 0x11
cmp ax, word [rdx]
jne 0x14007723c
add rdx, 2
mov rcx, qword [rsp + 0xd8]
xor r8d, r8d
mov rax, rdx
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x438], rdx
lea r10d, [r8 + 0x23]
movzx ecx, word [rax]
cmp cx, r8w
je 0x14007729e
mov r9d, 0x20
lea r11d, [r9 - 0x17]
cmp r11w, cx
ja 0x14007727d
cmp cx, 0xd
jbe 0x14007729e
cmp r9w, cx
je 0x14007729e
cmp cx, r10w
je 0x14007729e
add rax, 2
mov qword [rsp + 0x438], rax
mov cx, word [rax]
cmp cx, r8w
jne 0x140077271
sub rax, rdx
sar rax, 1
cmp rax, r8
jle 0x1400772c8
lea rcx, [rsp + 0x228]
mov r8d, eax
call fcn.14004c0cc
mov ebx, 0xfffc0000
xor r8d, r8d
mov dword [rsp + 0x84], ebx
lea rcx, [rsp + 0x438]
call fcn.140044ef4
mov r11, qword [rsp + 0x438]
jmp 0x14007734d
lea rcx, [0x1400dfa34]
mov r8d, 2
mov rdx, r12
call fcn.140045fc8
xor r8d, r8d
cmp al, r8b
je 0x140077309
lea r11, [r12 + 4]
mov qword [rsp + 0x438], r11
movzx eax, word [r11]
mov ecx, 9
sub ax, 0x30
cmp ax, cx
ja 0x140077343
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x438]
call fcn.14004fc04
mov ebx, dword [rsp + 0x78]
mov r11, qword [rsp + 0x438]
mov dword [rsp + 0x84], ebx
xor r8d, r8d
cmp word [r12], r8w
setne byte [rsp + 0x69]
mov rax, qword [rsp + 0x1b0]
shl rax, 9
mov qword [rsp + 0x128], rax
mov eax, 0x23
cmp ax, word [r11]
je 0x14007737b
mov eax, 0x3a
cmp ax, word [r11]
jne 0x140077473
add r11, 2
lea rcx, [0x1400dfa30]
mov r8d, 2
mov rdx, r11
mov qword [rsp + 0x438], r11
call fcn.140045fc8
lea rcx, [0x1400dfa2c]
mov r8d, 2
mov rdx, r11
mov byte [rsp + 0x42], al
call fcn.140045fc8
mov dl, byte [rsp + 0x42]
mov cl, dl
mov byte [rsp + 0x58], al
or cl, al
sete byte [rsp + 0x88]
xor r8d, r8d
cmp dl, r8b
jne 0x1400773f1
lea ecx, [r8 + 0x2b]
cmp cx, word [r11]
jne 0x1400773f1
mov cl, r15b
add r11, 2
mov dword [rsp + 0x140], ecx
mov qword [rsp + 0x438], r11
cmp al, r8b
jne 0x140077428
mov eax, 0x40
cmp ax, word [r11]
je 0x140077417
mov eax, 0x2d
cmp ax, word [r11]
je 0x140077417
mov eax, 0x3d
cmp ax, word [r11]
jne 0x140077428
or dword [rsp + 0x5c], 2
add r11, 2
mov qword [rsp + 0x438], r11
movzx eax, word [r11]
mov ecx, 9
sub ax, 0x30
cmp ax, cx
ja 0x140077473
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x438]
call fcn.14004fc04
mov esi, dword [rsp + 0x448]
xor r8d, r8d
cmp eax, r8d
mov dword [rsp + 0x48], esi
jle 0x140077473
mov byte [rsp + 0x6a], r15b
cmp esi, r8d
jne 0x140077476
mov byte [rsp + 0x42], r15b
jmp 0x140077478
cmp esi, r8d
jg 0x140077494
cmp byte [rsp + 0x100], r8b
jg 0x140077494
cmp qword [rsp + 0x258], r8
jne 0x140077494
mov esi, r8d
cmp rbp, r8
je 0x140077497
mov esi, r15d
mov dword [rsp + 0x80], ebx
cmp byte [rsp + 0x4c], r8b
je 0x1400774c4
cmp esi, r8d
jne 0x1400774c4
cmp word [r12], r8w
jne 0x1400774c4
mov eax, 0xfffc0000
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x80], eax
mov rbp, qword [rsp + 0x228]
mov word [rsp + 0x2e0], r8w
lea rbx, [rsp + 0x2e0]
cmp word [rbp], r8w
mov r8d, dword [rsp + 0x84]
lea rdx, str..PhysicalDrive_d
cmovne rbx, rbp
lea rcx, [rsp + 0x2e0]
mov qword [rsp + 0x160], rbx
call qword [sym.imp.USER32.dll_wsprintfW]
xor r8d, r8d
cmp qword [rsp + 0x1b0], r8
jne 0x14007755a
lea rcx, str..PhysicalDrive
mov r8d, 0x11
mov rdx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
xor r8d, r8d
cmp eax, r8d
jne 0x14007755a
lea rax, [rbx + 0x22]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x448]
mov qword [rsp + 0x448], rax
call fcn.14004fc04
xor r8d, r8d
cmp r14b, r8b
jne 0x14007756d
cmp byte [rsp + 0x43], r8b
jne 0x14007756d
cmp byte [rsp + 0x40], r8b
je 0x140077599
cmp dword [rsp + 0x84], r8d
mov r10d, dword [rsp + 0x80]
jge 0x1400775a1
cmp r10d, r8d
jge 0x1400775a1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, 0xffffffff80070057
jmp 0x14007b1af
mov r10d, dword [rsp + 0x80]
mov rax, r8
or rdx, 0xffffffffffffffff
mov rbx, r8
mov qword [rsp + 0x170], rax
mov al, byte [rsp + 0x4c]
mov r14, 0xffffffff80070057
mov qword [rsp + 0x1b8], rbx
mov dword [rsp + 0xc4], edx
mov qword [rsp + 0x208], r14
mov byte [rsp + 0x448], r8b
cmp al, r8b
je 0x1400776d9
cmp r10d, r8d
mov rcx, qword [rsp + 0x1d0]
jge 0x140077606
cmp qword [rsp + 0x118], rdx
jle 0x140077606
cmp rcx, r8
je 0x1400776d9
cmp rcx, r8
je 0x140077661
mov r9d, 0x2a
cmp r9w, word [rcx]
jne 0x140077661
movsx edx, al
mov ecx, r10d
and edx, 2
shr edx, 1
call fcn.140060758
mov r10d, dword [rsp + 0x80]
xor r8d, r8d
movsxd rdx, eax
lea eax, [r8 + 0x20]
mov rcx, r8
or byte [0x1400f2380], al
mov byte [rsp + 0x448], al
mov al, byte [rsp + 0x4c]
mov qword [rsp + 0x208], rdx
mov qword [rsp + 0x170], rdx
or rdx, 0xffffffffffffffff
cmp r10d, r8d
jge 0x140077675
cmp qword [rsp + 0x118], rdx
jle 0x140077675
cmp rcx, r8
je 0x1400776d9
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x118]
movsx r9d, al
and r9d, 2
mov qword [rsp + 0x20], rcx
mov ecx, r10d
shr r9d, 1
call fcn.140005690
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x208], rax
or rax, 0xffffffffffffffff
cmp qword [rsp + 0x118], rax
je 0x1400776cf
or byte [rsp + 0x448], 0x10
or byte [0x1400f2380], 0x10
xor r8d, r8d
jmp 0x1400776d9
xor r8d, r8d
mov byte [0x1400f2380], r8b
movdqu xmm6, xmmword [rsp + 0xe8]
movdqu xmm7, xmmword [rsp + 0x198]
cmp byte [rsp + 0x59], r8b
jbe 0x140077a29
cmp byte [rsp + 0x4d], r8b
jne 0x140077a29
cmp dword [rsp + 0x84], r8d
jge 0x140077716
cmp word [rbp], r8w
je 0x140077a0e
mov eax, dword [rsp + 0xcc]
mov ecx, dword [rsp + 0x48]
cmp eax, r8d
jle 0x14007772e
cmp eax, ecx
je 0x140077a0e
mov eax, 4
cmp ecx, eax
jg 0x140077a0e
cmp byte [rsp + 0x4f], 2
jl 0x140077a0e
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0x38], r8
mov dword [rsp + 0x30], 0x20000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r8
lea r9d, [rax - 1]
lea rcx, [rsp + 0x1b8]
mov r8d, 0xc0000000
call fcn.1400034e0
mov rbx, qword [rsp + 0x1b8]
xor r14d, r14d
cmp rbx, r14
jne 0x1400777a1
lea rcx, [rsp + 0x448]
call fcn.1400495d0
jmp 0x14007b1a3
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.140051d94
lea rcx, [rsp + 0xd8]
mov edx, 0x600
mov dword [rsp + 0xc4], eax
call fcn.14004bc80
mov rsi, qword [rsp + 0xd8]
add rsi, 0x200
lea r9, [rsp + 0x94]
mov r8d, 0x200
and rsi, 0xfffffffffffffe00
mov rcx, rbx
mov qword [rsp + 0x20], r14
lea r15, [rsi + 0x200]
mov qword [rsp + 0xf8], rsi
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, r14d
jne 0x140077866
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xd8]
mov esi, eax
cmp eax, r14d
mov eax, 1
cmove esi, eax
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140077855
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, esi
jmp 0x14007b1af
mov r8d, 0x200
mov rdx, r15
mov rcx, rsi
call fcn.1400177f8
mov edx, dword [rsp + 0xcc]
mov ecx, dword [rsp + 0x48]
mov eax, 1
mov r8d, 0x10
mov byte [r15 + 0x1fe], 0x55
sub edx, eax
sub ecx, eax
mov byte [r15 + 0x1ff], 0xaa
mov eax, edx
mov dword [rsp + 0xcc], edx
mov dword [rsp + 0x48], ecx
shl eax, 4
movsxd r14, eax
mov eax, ecx
shl eax, 4
movsxd rsi, eax
mov rax, qword [rsp + 0xf8]
lea rdx, [r14 + rax + 0x1be]
lea rcx, [rsi + r15 + 0x1be]
call fcn.1400177f8
mov rax, qword [rsp + 0xf8]
lea rcx, [r14 + r15 + 0x1be]
lea rdx, [rsi + rax + 0x1be]
mov r8d, 0x10
call fcn.1400177f8
mov rdx, qword [rsp + 0x128]
xor r8d, r8d
mov rcx, rbx
call fcn.140045f34
xor r14d, r14d
cmp eax, r14d
je 0x140077957
lea rcx, [rsp + 0xd8]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140077943
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, 1
jmp 0x14007b1af
mov rcx, qword [rsp + 0xf8]
mov r8d, 0x200
mov rdx, r15
mov rsi, r14
mov qword [rsp + 0x170], r14
call fcn.140044f54
cmp eax, r14d
je 0x1400779c5
lea r9, [rsp + 0x94]
mov r8d, 0x200
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, r14d
jne 0x1400779bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, r14d
cmove eax, ecx
movsxd rsi, eax
mov qword [rsp + 0x170], rsi
mov rcx, rbx
call fcn.1400494c8
mov cl, byte [rsp + 0x43]
mov r15b, byte [rsp + 0x40]
mov dl, byte [rsp + 0x4e]
mov al, r15b
or al, dl
or cl, al
mov al, r15b
or al, cl
mov byte [rsp + 0x43], cl
lea rcx, [rsp + 0xd8]
or al, dl
je 0x140077831
mov esi, r14d
call fcn.140044f24
mov r14, qword [rsp + 0x170]
mov dl, byte [rsp + 0x41]
xor r8d, r8d
jmp 0x140079e8b
lea rcx, [rsp + 0x448]
call fcn.1400495d0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14007b1af
mov dl, byte [rsp + 0x41]
mov r14, qword [rsp + 0x170]
cmp dl, 0x10
jne 0x140077a49
mov eax, 0x20
test byte [rsp + 0x40], al
jne 0x140079e86
cmp byte [rsp + 0x4c], r8b
je 0x140077aa3
cmp esi, r8d
jne 0x140077aa3
mov r15b, byte [rsp + 0x40]
cmp byte [rsp + 0x4e], r8b
jne 0x140079e8b
cmp byte [rsp + 0x43], r8b
jne 0x140079e8b
cmp r15b, r8b
jne 0x140079e8b
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor eax, eax
cmp rdi, rax
je 0x140077a96
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, qword [rsp + 0x208]
jmp 0x14007b1af
lea rcx, [rsp + 0x50]
mov edx, 0x600
call fcn.14004bc80
mov rax, qword [rsp + 0x50]
mov r9, qword [rsp + 0x258]
add rax, 0x200
xor ebx, ebx
and rax, 0xfffffffffffffe00
mov qword [rsp + 0xd8], rax
add rax, 0x200
mov qword [rsp + 0x188], rax
cmp r9, rbx
jne 0x14007acfc
mov r9, qword [rsp + 0x1d8]
cmp r9, rbx
jne 0x14007a7be
mov esi, dword [rsp + 0x100]
cmp sil, 6
je 0x14007a681
cmp sil, r15b
je 0x14007a5a3
cmp sil, 2
je 0x14007a556
cmp sil, 3
je 0x14007a43f
lea eax, [rbx + 4]
cmp sil, al
je 0x14007a2bb
lea r8d, [rbx + 5]
cmp sil, r8b
je 0x14007a2bb
lea eax, [rbx + 7]
cmp sil, al
je 0x14007a26d
cmp byte [rsp + 0x58], bl
je 0x140077b7f
mov word [rsp + 0x120], bx
mov edx, ebx
mov dword [rsp + 0xb8], ebx
mov rcx, rbx
mov qword [rsp + 0xb0], rbx
mov rsi, rbx
mov qword [rsp + 0x70], rbx
mov eax, r8d
jmp 0x140077b97
mov eax, dword [rsp + 0x48]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xb0]
mov edx, dword [rsp + 0xb8]
cmp byte [rsp + 0x42], bl
cmovne eax, r8d
mov r8d, dword [rsp + 0x168]
cmp r8b, bl
je 0x140077bd0
mov word [rsp + 0x120], bx
mov edx, ebx
mov dword [rsp + 0xb8], ebx
mov rcx, rbx
mov qword [rsp + 0xb0], rbx
mov rsi, rbx
mov qword [rsp + 0x70], rbx
xor r9d, r9d
cmp byte [rsp + 0x69], bl
mov ebx, dword [rsp + 0x80]
je 0x140077be9
cmp ebx, r9d
jl 0x14007a04e
cmp byte [rsp + 0x88], r9b
je 0x140077bfc
cmp eax, r9d
jl 0x14007a04e
sub eax, r15d
mov byte [rsp + 0xbe], r9b
mov byte [rsp + 0xbd], r9b
mov dword [rsp + 0x48], eax
or rax, 0xffffffffffffffff
mov word [rsp + 0x8c], r9w
mov byte [rsp + 0x59], r9b
mov byte [rsp + 0x7d], r9b
mov word [rsp + 0x158], r9w
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x118], rax
cmp byte [rsp + 0x4d], r9b
jne 0x140077c67
cmp edx, r9d
jne 0x140077c67
cmp rsi, r9
jne 0x140077c67
movzx r8d, r8b
cmp rcx, r9
cmove r8d, r15d
mov dword [rsp + 0x168], r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
cmp byte [rsp + 0xd0], al
je 0x140077cbe
cmp rsi, rax
jl 0x140077cbe
cmp qword [rsp + 0xb0], 0x11
jl 0x140077cbe
mov r8, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x448]
mov r9d, 0x2200
mov edx, ebx
shl r8, 9
mov esi, r15d
mov dword [rsp + 0x78], r15d
mov qword [rsp + 0x20], rax
call fcn.14004957c
xor eax, eax
jmp 0x140077cc4
mov esi, eax
mov dword [rsp + 0x78], eax
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x1b8]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rax
call fcn.1400034e0
mov rbx, qword [rsp + 0x1b8]
xor eax, eax
cmp rbx, rax
je 0x14007a244
cmp esi, eax
je 0x140077d4b
cmp byte [rsp + 0x42], al
jne 0x140077d4b
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x1b0]
mov rcx, rbx
add rdx, rax
call fcn.14003f758
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor eax, eax
mov qword [rsp + 0x208], rax
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.140051d94
mov cl, byte [rsp + 0x41]
xor r8d, r8d
mov dword [rsp + 0xc4], eax
cmp cl, r8b
je 0x140077d88
lea rcx, [rsp + 0x50]
mov esi, r8d
call fcn.140044f24
mov r15b, byte [rsp + 0x40]
jmp 0x140077a02
mov ecx, dword [rsp + 0xb8]
mov r14, r8
mov qword [rsp + 0x1f0], r8
cmp ecx, 0xff
jg 0x14007a212
mov dl, byte [rsp + 0x42]
mov eax, dword [rsp + 0x48]
cmp dl, r8b
jne 0x140077df7
cmp eax, r8d
jge 0x140077df7
cmp qword [rsp + 0x70], r8
jge 0x14007a212
cmp qword [rsp + 0xb0], r8
jge 0x14007a212
cmp ecx, r8d
jge 0x14007a212
or r9, 0xffffffffffffffff
mov ecx, r9d
mov qword [rsp + 0xb0], r9
mov qword [rsp + 0x70], r9
mov dword [rsp + 0xb8], ecx
jmp 0x140077dfb
or r9, 0xffffffffffffffff
mov qword [rsp + 0x180], r9
mov qword [rsp + 0x230], r9
mov qword [rsp + 0x1e8], r8
mov r9d, 4
mov qword [rsp + 0x238], r8
mov dword [rsp + 0xc0], eax
cmp dl, r8b
jne 0x140077e3d
cmp byte [rsp + 0x58], r8b
jne 0x140077e3d
cmp eax, r9d
jl 0x1400784fc
cmp byte [rsp + 0x4d], r8b
jne 0x1400784fc
cmp byte [rsp + 0x44], r8b
jne 0x1400784fc
mov esi, dword [rsp + 0x48]
cmp dl, r14b
mov eax, 5
cmovne esi, r9d
mov dword [rsp + 0x48], esi
cmp ecx, eax
je 0x140077f1e
cmp ecx, 0xf
je 0x140077f1e
lea rcx, [rsp + 0x138]
mov edx, 0x100000
mov dword [rsp + 0x98], r14d
call fcn.14004bc80
mov rdx, qword [rsp + 0x138]
lea r8, [rsp + 0x98]
mov rcx, rbx
call fcn.140049308
mov r15d, dword [rsp + 0x98]
mov r10d, 4
mov r8, rax
mov qword [rsp + 0xe0], rax
mov al, byte [rsp + 0x42]
cmp al, r14b
jne 0x140077ed6
cmp r15d, esi
jge 0x140077ed6
cmp esi, r10d
jge 0x140077f11
mov cl, byte [rsp + 0x58]
cmp al, r14b
jne 0x140077f4f
cmp cl, r14b
jne 0x140077f4f
lea eax, [rsi + 1]
mov dl, r14b
cmp eax, r10d
mov byte [rsp + 0x45], dl
jg 0x140077ef7
dec eax
jmp 0x140077efe
lea eax, [rax*4 - 0x10]
cmp eax, r14d
jle 0x140077f11
cmp eax, r15d
jl 0x140077f8d
cmp esi, r10d
jle 0x140077f8d
lea rcx, [rsp + 0x138]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140077f47
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r14
jmp 0x14007ad25
mov dl, 1
mov byte [rsp + 0x45], dl
cmp cl, r14b
jne 0x140077f88
cmp al, r14b
je 0x140077f8d
cmp dword [rsp + 0xb8], r14d
jl 0x140077f11
cmp word [rsp + 0x120], r14w
mov eax, r14d
mov ecx, 0x80
cmovg ax, cx
mov word [rsp + 0x120], ax
jmp 0x140077f8d
cmp r15d, r10d
jle 0x140077f11
cmp r15d, r10d
jle 0x140077f9a
lea r14d, [r15 - 4]
and r14d, 0xfffffffc
or rcx, 0xffffffffffffffff
xor r9d, r9d
mov esi, ecx
mov dword [rsp + 0xc0], ecx
cmp dl, r9b
jne 0x140077fc3
mov eax, dword [rsp + 0x48]
cmp eax, r10d
lea r14d, [rax*4 - 0x10]
jge 0x140077fc3
mov r14d, r9d
mov r11d, ecx
mov eax, r9d
lea rcx, [r8 + 0x50]
cmp byte [rcx], 5
je 0x140077fd7
cmp byte [rcx], 0xf
jne 0x140077fda
mov r11d, eax
inc eax
add rcx, 0x90
cmp eax, r10d
jl 0x140077fcd
cmp dl, r9b
je 0x140077ff6
cmp r11d, r9d
jl 0x14007a06f
mov r9d, 0x1ff
movsxd rax, r11d
lea rcx, [rax + rax*8]
add rcx, rcx
mov rax, qword [r8 + rcx*8 + 0x38]
cqo
and rdx, r9
lea r10, [rdx + rax]
mov rax, qword [r8 + rcx*8 + 0x40]
movsxd rcx, r14d
cqo
sar r10, 9
and rdx, r9
lea r9, [rcx + rcx*8]
lea r8, [rdx + rax]
xor eax, eax
add r9, r9
sar r8, 9
cmp byte [rsp + 0x58], al
je 0x140078174
xor esi, esi
mov r9d, esi
cmp r15d, 8
je 0x1400780f7
mov r11, qword [rsp + 0xe0]
lea eax, [r15 - 8]
mov r8, rsi
and eax, 0xfffffffc
movsxd rdx, eax
lea rax, [rdx + rdx*8]
add rax, rax
lea rcx, [r11 + rax*8 + 0x50]
lea eax, [rsi + 1]
cmp byte [rcx], 5
je 0x1400780ce
cmp byte [rcx], 0xf
je 0x1400780ce
add r8, rax
add r9d, eax
add rcx, 0x90
cmp r8, 4
jl 0x140078073
lea rcx, [rsp + 0x138]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400780c6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14007ad25
lea rcx, [rdx + rdx*8]
add rcx, rcx
mov rax, qword [r11 + rcx*8 + 0x38]
cqo
and edx, 0x1ff
lea r10, [rdx + rax]
mov eax, dword [r11 + rcx*8 + 0x54]
sar r10, 9
sub r10, rax
cmp r9d, esi
jl 0x140078090
xor eax, eax
lea r8, [rsp + 0x290]
mov rcx, rbx
mov dword [rsp + 0x294], eax
mov dword [rsp + 0x298], eax
mov dword [rsp + 0x29c], eax
mov rax, qword [rsp + 0x1b0]
mov dword [rsp + 0x290], esi
lea rdx, [r10 + rax]
call fcn.140052170
mov r15b, byte [rsp + 0x40]
mov r14, rsi
mov qword [rsp + 0x170], rsi
cmp r15b, sil
jne 0x140078158
cmp byte [rsp + 0x43], sil
jne 0x140078158
cmp byte [rsp + 0x4e], sil
je 0x14007a0a7
lea rcx, [rsp + 0x138]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
jmp 0x140077a02
cmp r15d, 4
jg 0x140078185
mov dl, byte [rsp + 0x45]
mov esi, r11d
xor ecx, ecx
jmp 0x1400781c6
mov edx, eax
lea rax, [rcx + rcx*8]
mov rcx, qword [rsp + 0xe0]
add rax, rax
lea rcx, [rcx + rax*8 + 0x50]
mov eax, 4
cmp byte [rcx], 5
je 0x1400781aa
cmp byte [rcx], 0xf
jne 0x1400781ac
mov esi, edx
inc edx
add rcx, 0x90
cmp edx, eax
jl 0x1400781a0
mov dl, byte [rsp + 0x45]
xor ecx, ecx
cmp dl, cl
jne 0x1400781c6
add esi, r14d
cmp esi, ecx
jge 0x1400781d4
cmp byte [rsp + 0x42], cl
je 0x14007a06f
mov eax, ecx
cmp dl, cl
je 0x1400781e3
mov dword [rsp + 0xc0], ecx
jmp 0x140078233
mov rcx, qword [rsp + 0xe0]
mov edi, dword [rsp + 0xc0]
lea rcx, [rcx + r9*8 + 0x290]
cmp byte [rcx], 0
jne 0x140078203
test eax, eax
jne 0x14007820e
cmp byte [rcx], 5
je 0x14007820e
cmp byte [rcx], 0xf
cmovne edi, eax
inc eax
add rcx, 0x90
cmp eax, 4
jl 0x1400781fa
mov dword [rsp + 0xc0], edi
xor ecx, ecx
lea rdi, [0x1400f2c10]
mov eax, dword [rsp + 0xc0]
cmp dl, cl
jne 0x14007823f
cmp eax, ecx
jl 0x14007a06f
cmp byte [rsp + 0x42], cl
je 0x140078421
cmp r14d, ecx
mov eax, r11d
cmovg eax, r14d
cdqe
lea rcx, [rax + rax*8]
mov rax, qword [rsp + 0xe0]
add rcx, rcx
mov rax, qword [rax + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov rdx, rax
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1e8], rax
mov eax, 4
cmp r15d, eax
jle 0x140078337
xor eax, eax
cmp esi, eax
jge 0x140078337
mov rcx, qword [rsp + 0xe0]
cmp byte [rcx + r9*8 + 0x50], al
je 0x14007a0e5
lea eax, [r15 - 8]
and eax, 0xfffffffc
inc eax
cmp r15d, 8
cmovg r11d, eax
movsxd rax, r11d
mov r11d, 0x1ff
lea rax, [rax + rax*8]
add rax, rax
mov rax, qword [rcx + rax*8 + 0x38]
cqo
and rdx, r11
add rax, rdx
sar rax, 9
mov qword [rsp + 0x1e8], rax
mov rax, qword [rcx + r9*8 + 0x40]
add rax, qword [rcx + r9*8 + 0x38]
cqo
and rdx, r11
add rax, rdx
sar rax, 9
mov rdx, rax
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x238], rax
sub r8, rdx
sub rax, r10
add r8, r10
mov qword [rsp + 0x180], rax
xor r9d, r9d
mov qword [rsp + 0x230], r8
jmp 0x14007837e
xor r9d, r9d
cmp r14d, r9d
jle 0x140078368
mov rdx, qword [rsp + 0xe0]
mov rax, qword [rdx + rcx*8 + 0x40]
add rax, qword [rdx + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rdx, rax
sar rdx, 9
mov qword [rsp + 0x1f0], rdx
sub r8, rdx
mov qword [rsp + 0x238], rdx
mov qword [rsp + 0x230], r9
add r8, r10
cmp r8, r9
jle 0x14007a06f
mov rsi, qword [rsp + 0x70]
cmp byte [rsp + 0x7e], r9b
je 0x140078396
add rsi, rdx
lea rax, [rdx + 1]
cmp rsi, rax
cmovle rsi, rax
sub r8, rsi
mov qword [rsp + 0x70], rsi
mov rsi, qword [rsp + 0xb0]
add r8, rdx
cmp rsi, r8
cmovg rsi, r8
cmp rsi, r9
mov qword [rsp + 0xb0], rsi
jl 0x14007a06f
cmp r14d, r9d
jle 0x1400783f1
lea eax, [r15 - 1]
and eax, 0xfffffffc
cmp eax, 3
jg 0x1400783e1
inc eax
jmp 0x1400783ed
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
inc eax
jmp 0x140078410
and r15d, 0xfffffffc
cmp r15d, 3
jg 0x140078401
lea eax, [r15 + 1]
jmp 0x140078410
mov eax, r15d
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
mov r14, qword [rsp + 0x1f0]
mov dword [rsp + 0x48], eax
jmp 0x1400784da
mov r9, qword [rsp + 0xe0]
movsxd rax, esi
mov r10d, 0x1ff
lea rcx, [rax + rax*8]
xor r14d, r14d
add rcx, rcx
mov r8, qword [r9 + rcx*8 + 0x38]
lea rax, [r8 + 0x200]
cqo
and rdx, r10
add rax, rdx
sar rax, 9
mov rsi, rax
mov qword [rsp + 0x238], rax
mov rax, qword [r9 + rcx*8 + 0x40]
mov rcx, qword [rsp + 0x70]
sub rax, 0x200
cqo
and rdx, r10
add rax, rdx
sar rax, 9
cmp byte [rsp + 0x7e], r14b
je 0x14007848a
add rcx, rsi
mov qword [rsp + 0x70], rcx
cmp rcx, r14
jle 0x14007849b
cmp rcx, rsi
cmovle rcx, rsi
mov qword [rsp + 0x70], rcx
mov rsi, qword [rsp + 0xb0]
cmp rsi, r14
jle 0x1400784c0
cmp rsi, rax
cmovg rsi, rax
cmp rsi, r14
mov qword [rsp + 0xb0], rsi
jl 0x140077f11
mov rax, r8
cqo
and rdx, r10
add rax, rdx
sar rax, 9
mov r14, rax
mov qword [rsp + 0x1f0], rax
lea rcx, [rsp + 0x138]
call fcn.140044f24
mov esi, dword [rsp + 0x78]
mov eax, dword [rsp + 0x48]
mov dl, byte [rsp + 0x42]
mov r15d, 1
xor r8d, r8d
mov rcx, qword [rsp + 0x1b0]
cmp eax, 4
setge byte [rsp + 0x7c]
add r14, rcx
shl r14, 9
mov qword [rsp + 0x198], r14
cmp esi, r8d
je 0x14007854d
cmp dl, r8b
je 0x14007854d
mov rax, qword [rsp + 0x70]
lea rdx, [rcx + rax]
mov rcx, rbx
call fcn.14003f758
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor eax, eax
mov qword [rsp + 0x208], rax
mov rsi, qword [rsp + 0x188]
xor edx, edx
mov r8d, 0x200
mov rcx, rsi
call fcn.1400b93b0
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.140045f34
cmp rax, r14
jne 0x14007a1df
xor eax, eax
lea r9, [rsp + 0x94]
mov r8d, 0x200
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rdx, qword [rsp + 0x188]
mov rcx, qword [rsp + 0xd8]
mov r8d, 0x200
mov esi, eax
call fcn.1400177f8
xor eax, eax
cmp esi, eax
je 0x14007a1df
xor esi, esi
cmp byte [rsp + 0x44], sil
je 0x1400786a6
cmp byte [rsp + 0x4d], sil
jne 0x1400786a6
mov rsi, qword [rsp + 0x188]
mov rcx, rsi
call fcn.140049550
xor edx, edx
lea rcx, [rsi + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400b93b0
mov rcx, qword [rsp + 0xd8]
mov r11d, 0xaa55
mov r8d, 0x200
mov rdx, rsi
mov word [rsi + 0x1fe], r11w
call fcn.140044f54
xor r15d, r15d
cmp eax, r15d
je 0x140078674
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.140045f34
lea r9, [rsp + 0x94]
mov r8d, 0x200
mov rdx, rsi
mov rcx, rbx
mov dword [rsp + 0x94], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor esi, esi
mov r14, rsi
cmp eax, esi
sete r14b
mov qword [rsp + 0x170], r14
jmp 0x14007867e
mov r14, qword [rsp + 0x170]
xor esi, esi
mov r15b, byte [rsp + 0x40]
mov al, r15b
or al, byte [rsp + 0x43]
or al, byte [rsp + 0x4e]
je 0x14007a0b4
cmp dword [rsp + 0x84], esi
jl 0x14007a0b4
jmp 0x140078165
cmp byte [rsp + 0x4f], sil
jne 0x1400786c3
cmp byte [rsp + 0x6a], sil
je 0x1400786d6
mov eax, dword [rsp + 0x48]
cmp eax, r15d
jle 0x14007809d
jmp 0x1400786c7
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x6a], sil
je 0x1400786d6
cmp eax, esi
jl 0x14007809d
mov rcx, rbx
call fcn.140048d48
lea rcx, [rsp + 0x108]
mov edx, 0x100000
mov r14d, eax
mov dword [rsp + 0x98], r14d
call fcn.14004bc80
mov eax, dword [rsp + 0x80]
xor ecx, ecx
mov dword [rsp + 0x94], esi
mov rsi, qword [rsp + 0x108]
cmp eax, ecx
jl 0x14007872e
mov rdx, rsi
mov rcx, rbx
call fcn.140048f80
cqo
idiv r14
xor ecx, ecx
mov r14, rax
jmp 0x140078789
mov rax, qword [rsp + 0x260]
mov r14, rcx
lea r8, [rsp + 0x2a0]
cmp rax, rcx
mov rcx, qword [rsp + 0x160]
cmovge r14, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor ecx, ecx
cmp eax, ecx
je 0x1400787a5
test byte [rsp + 0x2a0], 0x10
jne 0x1400787a5
mov r14d, dword [rsp + 0x2bc]
mov eax, dword [rsp + 0x2c0]
and r14, 0xfffffffffffffe00
shr rax, 9
shl r14, 0x17
or r14, rax
mov rax, qword [rsp + 0x260]
sub r14, qword [rsp + 0x1b0]
cmp rax, rcx
jle 0x1400787a5
cmp r14, rax
cmovb r14, rax
lea r8, [rsp + 0x78]
mov rdx, rsi
mov rcx, rbx
call fcn.140049308
xor r11d, r11d
mov r8, rax
mov qword [rsp + 0xf8], rax
cmp word [rbp], r11w
jne 0x1400787cf
cmp rax, r11
je 0x140078814
cmp rax, r11
je 0x1400787d8
mov ecx, dword [rax]
jmp 0x1400787db
mov ecx, r11d
cmp ecx, r15d
sete cl
mov byte [rsp + 0x45], cl
cmp cl, r11b
je 0x1400787f4
cmp byte [rsp + 0xbf], r11b
je 0x1400787f7
mov r15b, r11b
cmp byte [rsp + 0xbc], r11b
jne 0x140078828
cmp byte [rsp + 0x44], r11b
jne 0x140078828
cmp r15b, r11b
je 0x140078821
cmp byte [rsp + 0x4d], r11b
jne 0x140078828
lea rcx, [rsp + 0x108]
jmp 0x14007a077
cmp byte [rsp + 0x4d], r11b
jne 0x140078814
mov rax, qword [rsp + 0x210]
mov r10, qword [rsp + 0x240]
mov rdx, qword [rsp + 0x248]
mov dword [rsp + 0x64], eax
mov eax, r10d
mov dword [rsp + 0x110], edx
mov dword [rsp + 0x130], eax
cmp word [rbp], r11w
jne 0x140078939
xor edx, edx
lea rcx, [rsp + 0x2a4]
mov dword [rsp + 0x2a0], r11d
lea r8d, [rdx + 0x14]
call fcn.1400b93b0
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x94]
xor r8d, r8d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2a0]
mov edx, 0x70000
mov rcx, rbx
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor r11d, r11d
cmp qword [rsp + 0x210], r11
jg 0x1400788d9
movsxd rdx, dword [rsp + 0x2ac]
mov dword [rsp + 0x64], edx
mov qword [rsp + 0x210], rdx
mov rdx, qword [rsp + 0x248]
cmp rdx, r11
jg 0x1400788fd
movsxd rdx, dword [rsp + 0x2b0]
mov dword [rsp + 0x110], edx
mov qword [rsp + 0x248], rdx
mov r10, qword [rsp + 0x240]
mov r8, qword [rsp + 0xf8]
mov cl, byte [rsp + 0x45]
cmp r10, r11
jg 0x140078932
movsxd rax, dword [rsp + 0x2b4]
mov dword [rsp + 0x130], eax
mov r10, rax
mov qword [rsp + 0x240], rax
jmp 0x140078939
mov eax, dword [rsp + 0x130]
mov r9, qword [rsp + 0x210]
cmp r9, r11
jg 0x140078959
mov r9d, 0xff
mov dword [rsp + 0x64], r9d
mov qword [rsp + 0x210], r9
cmp rdx, r11
jg 0x140078972
mov edx, 0x3f
mov dword [rsp + 0x110], edx
mov qword [rsp + 0x248], rdx
cmp r10, r11
jg 0x14007898d
mov edx, 0x200
mov eax, edx
mov dword [rsp + 0x130], edx
mov qword [rsp + 0x240], rdx
mov r9d, dword [rsp + 0x98]
cdq
and edx, 0x1ff
mov qword [rsp + 0x1c0], r9
add eax, edx
sar eax, 9
mov dword [rsp + 0x78], eax
lea rax, [r9 + rsi]
mov qword [rsp + 0x1d0], rax
add rax, r9
mov qword [rsp + 0xe0], rax
add rax, 0x10000
mov qword [rsp + 0xf8], rax
cmp r15b, r11b
jne 0x1400792f5
cmp byte [rsp + 0x4d], r11b
jne 0x1400792f5
mov r15b, r11b
cmp byte [rsp + 0x168], r11b
jne 0x140078e46
cmp qword [rsp + 0x70], r11
jge 0x140078a0c
cmp qword [rsp + 0xb0], r11
jl 0x140078e46
cmp dword [rsp + 0x48], r11d
jl 0x140078e46
lea rcx, [rsp + 0x1c8]
mov edx, 0x100000
call fcn.14004bc80
mov edx, dword [rsp + 0x110]
movsxd r15, dword [rsp + 0x130]
mov r10d, dword [rsp + 0x64]
mov eax, r15d
imul eax, edx
cdq
and edx, 0x1ff
add eax, edx
xor edx, edx
sar eax, 9
movsxd rsi, eax
mov ecx, esi
imul ecx, r10d
cmp r15d, edx
movsxd r14, ecx
jle 0x14007a142
cmp word [rbp], dx
jne 0x140078ab7
mov dword [rsp + 0x98], edx
mov rdx, qword [rsp + 0x1c8]
lea r8, [rsp + 0x98]
mov rcx, rbx
call fcn.140049308
xor edx, edx
cmp rax, rdx
je 0x14007a12b
mov eax, dword [rsp + 0x48]
cmp eax, 4
jl 0x140078ab2
cmp byte [rsp + 0x42], dl
jne 0x140078ab2
cmp eax, dword [rsp + 0x98]
jge 0x14007a142
mov r10d, dword [rsp + 0x64]
mov r9, qword [rsp + 0x70]
mov rax, rdx
cmp r9, rdx
jle 0x140078b9e
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xffffffffffffffff
jne 0x140078b5b
cmp r9, r14
jl 0x140078aea
xor eax, eax
mov rdx, r14
cmp byte [rsp + 0x7c], al
je 0x140078aed
mov rdx, rsi
mov rcx, r9
call fcn.14004943c
mov cl, byte [rsp + 0x60]
add r9, rax
mov qword [rsp + 0x70], r9
mov esi, dword [rsp + 0x78]
xor edx, edx
mov r11, qword [rsp + 0xb0]
cmp r11, rdx
jle 0x140078b2c
cmp byte [rsp + 0xc9], dl
jne 0x140078b2c
sub r11, rax
cmovs r11, rdx
mov qword [rsp + 0xb0], r11
cmp r9, rdx
mov r8, rdx
cmovg r8, r9
cmp r11, rdx
jle 0x140078bed
mov rax, qword [rsp + 0x280]
cmp rax, 0xffffffffffffffff
jne 0x140078bab
lea rax, [r8 + r11]
cqo
idiv r14
jmp 0x140078be0
mov cl, byte [rsp + 0x60]
xor r8d, r8d
cmp cl, r8b
jne 0x140078b01
movsxd rsi, dword [rsp + 0x78]
lea rax, [r15 + rdx - 1]
mov rcx, r9
cqo
idiv r15
imul rax, rsi
mov rdx, rax
mov qword [rsp + 0x1f8], rax
call fcn.14004943c
mov cl, byte [rsp + 0x60]
add r9, rax
mov qword [rsp + 0x70], r9
jmp 0x140078b05
mov esi, dword [rsp + 0x78]
mov cl, byte [rsp + 0x60]
jmp 0x140078b07
cmp cl, dl
jne 0x140078bed
lea rax, [r15 + rax - 1]
cqo
idiv r15
imul rax, r15
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov rcx, rax
mov qword [rsp + 0x280], rax
lea rax, [r8 + r11]
cqo
idiv rcx
sub r11, rdx
xor edx, edx
mov qword [rsp + 0xb0], r11
mov rax, qword [rsp + 0x230]
mov r14, qword [rsp + 0x238]
mov r15d, dword [rsp + 0x110]
cmp rax, rdx
mov byte [rsp + 0x45], dl
mov byte [rsp + 0x68], dl
mov byte [rsp + 0x6b], dl
jle 0x140078d52
mov rax, r11
movsxd rcx, esi
mov dword [rsp + 0x30], 1
sub rax, r14
lea r8, [rsp + 0x68]
mov dword [rsp + 0x28], r10d
add rax, r9
lea r9, [rsp + 0x6b]
mov dword [rsp + 0x20], r15d
cqo
idiv rcx
mov rcx, qword [rsp + 0x180]
lea rdx, [rsp + 0x45]
mov qword [rsp + 0x230], rax
xor eax, eax
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xec], eax
mov dword [rsp + 0xf0], eax
mov dword [rsp + 0xf4], eax
call fcn.140049458
xor eax, eax
mov byte [rsp + 0xe8], al
mov al, byte [rsp + 0x68]
mov dword [rsp + 0x30], 1
mov byte [rsp + 0xe9], al
mov al, byte [rsp + 0x6b]
lea r9, [rsp + 0x6b]
mov byte [rsp + 0xea], al
mov al, byte [rsp + 0x45]
lea r8, [rsp + 0x68]
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0x180]
lea rdx, [rsp + 0x45]
lea rcx, [rax + rax - 1]
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r15d
call fcn.140049458
mov cl, byte [rsp + 0x6b]
mov rdx, qword [rsp + 0x1e8]
mov eax, 5
mov byte [rsp + 0xee], cl
mov cl, byte [rsp + 0x45]
mov byte [rsp + 0xec], al
mov al, byte [rsp + 0x68]
mov byte [rsp + 0xef], cl
mov byte [rsp + 0xed], al
mov rax, qword [rsp + 0x180]
lea r8, [rsp + 0xe8]
mov dword [rsp + 0xf0], eax
mov rax, qword [rsp + 0x230]
mov r9d, 1
mov rcx, rbx
mov dword [rsp + 0xf4], eax
call fcn.140052170
mov r9, qword [rsp + 0x70]
mov r11, qword [rsp + 0xb0]
mov rax, r14
movsxd rcx, esi
xor r8d, r8d
cqo
idiv rcx
cmp r9, r8
mov r10, rax
jl 0x140078d7d
mov rax, r9
cqo
idiv rcx
mov r14, rax
mov qword [rsp + 0x190], rax
jmp 0x140078d88
mov r14, r8
mov qword [rsp + 0x190], r8
cmp r11, r8
jl 0x140078d9f
mov rax, r11
cqo
idiv rcx
mov qword [rsp + 0x118], rax
jmp 0x140078da7
mov qword [rsp + 0x118], r8
mov ecx, dword [rsp + 0x48]
mov esi, dword [rsp + 0x64]
mov eax, r8d
cmp ecx, 4
lea r9, [rsp + 0xbe]
lea r8, [rsp + 0xbd]
setge al
lea rdx, [rsp + 0x8c]
mov rcx, r14
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r15d
call fcn.140049458
xor eax, eax
cmp qword [rsp + 0x70], rax
jle 0x140078df9
sub r14, r10
mov qword [rsp + 0x190], r14
mov rax, qword [rsp + 0x118]
mov edx, dword [rsp + 0x110]
movsx r15d, byte [rsp + 0x7c]
lea eax, [rax + r14 - 1]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], edx
lea r9, [rsp + 0x59]
lea r8, [rsp + 0x7d]
lea rdx, [rsp + 0x158]
mov ecx, eax
call fcn.140049458
lea rcx, [rsp + 0x1c8]
call fcn.140044f24
mov esi, dword [rsp + 0xc0]
mov rdx, qword [rsp + 0x188]
mov rcx, qword [rsp + 0xd8]
shl esi, 4
mov r8d, 0x200
movsxd r14, esi
call fcn.1400177f8
xor r11d, r11d
cmp qword [rsp + 0x230], r11
jl 0x140078ed0
cmp dword [rsp + 0xc0], r11d
jle 0x140078e9e
mov rcx, qword [rsp + 0x188]
mov r8, r14
xor edx, edx
add rcx, 0x1be
call fcn.1400b93b0
mov eax, 3
xor edx, edx
sub eax, dword [rsp + 0xc0]
shl eax, 4
movsxd r8, eax
lea eax, [rsi + 0x10]
movsxd rcx, eax
mov rax, qword [rsp + 0x188]
lea rcx, [rcx + rax + 0x1be]
call fcn.1400b93b0
xor r11d, r11d
mov r8, qword [rsp + 0x188]
mov r9b, byte [rsp + 0x42]
mov r10b, byte [rsp + 0x4f]
mov al, byte [r14 + r8 + 0x1c2]
cmp r9b, r11b
jne 0x140078f05
cmp r10b, 2
jge 0x140078f05
cmp al, 5
je 0x140078814
cmp al, 0xf
je 0x140078814
mov edx, dword [r14 + r8 + 0x1c6]
mov ecx, dword [r14 + r8 + 0x1ca]
mov rsi, qword [rsp + 0x70]
cmp r9b, r11b
jne 0x140078f77
cmp al, r11b
je 0x140078f77
cmp dword [rsp + 0xb8], r11d
je 0x140078f77
cmp r10b, 2
jge 0x140078f77
cmp byte [rsp + 0x7c], r11b
jne 0x140078f77
cmp rsi, r11
jl 0x140078f4e
cmp qword [rsp + 0x190], rdx
jne 0x140078814
mov r11, qword [rsp + 0xb0]
xor r9d, r9d
cmp r11, r9
mov r9, qword [rsp + 0x118]
jl 0x140078f87
xor eax, eax
cmp r9, rcx
je 0x140078f89
cmp ecx, eax
jne 0x140078814
jmp 0x140078f89
mov r9, qword [rsp + 0x118]
mov r11, qword [rsp + 0xb0]
xor eax, eax
cmp byte [rsp + 0x168], al
je 0x140078fa8
xor r9d, r9d
mov ecx, r9d
mov edx, r9d
mov r10, r9
mov qword [rsp + 0x118], r9
jmp 0x140078fb0
mov r10, qword [rsp + 0x190]
mov eax, dword [rsp + 0xb8]
test eax, eax
js 0x140078fc3
mov byte [r14 + r8 + 0x1c2], al
mov eax, dword [rsp + 0x120]
cmp ax, word [rsp + 0x2c8]
jl 0x140078fdc
mov byte [r14 + r8 + 0x1be], al
xor eax, eax
cmp rsi, rax
jge 0x140078ff3
cmp r11, rax
jl 0x14007908c
lea ecx, [r9 + rdx - 1]
jmp 0x140078ffd
cmp r11, rax
jge 0x140079047
lea ecx, [r10 + rcx - 1]
movsx eax, r15b
lea r9, [rsp + 0x59]
lea r8, [rsp + 0x7d]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x64]
lea rdx, [rsp + 0x158]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0x20], eax
call fcn.140049458
mov r8, qword [rsp + 0x188]
mov r9, qword [rsp + 0x118]
mov r11, qword [rsp + 0xb0]
xor r15d, r15d
cmp rsi, r15
jl 0x140079085
mov al, byte [rsp + 0xbd]
mov dword [r14 + r8 + 0x1c6], r10d
mov byte [r14 + r8 + 0x1bf], al
mov al, byte [rsp + 0xbe]
mov byte [r14 + r8 + 0x1c0], al
movzx eax, word [rsp + 0x8c]
mov byte [r14 + r8 + 0x1c1], al
cmp r11, r15
jge 0x140079094
jmp 0x14007908f
xor r15d, r15d
cmp rsi, r15
jl 0x1400790bb
mov al, byte [rsp + 0x7d]
mov byte [r14 + r8 + 0x1c3], al
mov al, byte [rsp + 0x59]
mov byte [r14 + r8 + 0x1c4], al
mov al, byte [rsp + 0x158]
mov byte [r14 + r8 + 0x1c5], al
cmp r11, r15
jl 0x1400790c8
mov dword [r14 + r8 + 0x1ca], r9d
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0x120]
cmp eax, r15d
jge 0x1400790eb
cmp cx, r15w
jge 0x1400790eb
cmp rsi, r15
jge 0x1400790eb
cmp r11, r15
jl 0x1400790fb
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
cmp cx, r15w
jge 0x140079120
cmp eax, r15d
jge 0x140079120
cmp rsi, r15
jge 0x140079120
cmp r11, r15
jge 0x140079120
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
mov rsi, qword [rsp + 0x198]
xor r8d, r8d
mov rcx, rbx
mov rdx, rsi
call fcn.140045f34
cmp rax, rsi
jne 0x14007a161
mov esi, 1
cmp qword [rsp + 0x1f0], r15
jne 0x14007915b
mov rcx, qword [rsp + 0x188]
call fcn.140049550
mov r10, qword [rsp + 0x188]
mov rcx, qword [rsp + 0xd8]
mov r11d, 0x200
mov rdx, r10
mov r8d, r11d
call fcn.140044f54
cmp eax, r15d
je 0x1400791b5
lea r9, [rsp + 0x94]
mov r8d, r11d
mov rdx, r10
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.1400494c8
mov r10, qword [rsp + 0x188]
mov r11d, 0x200
mov r14, qword [rsp + 0x70]
cmp r14, r11
jl 0x1400792b8
cmp qword [rsp + 0xb0], r11
jle 0x1400792b8
cmp byte [rsp + 0xc8], r15b
je 0x1400792b8
mov r8, r11
xor edx, edx
mov rcx, r10
call fcn.1400b93b0
mov rax, qword [rsp + 0x128]
shl r14, 9
lea r15, [r14 + rax]
xor r8d, r8d
mov rcx, rbx
mov rdx, r15
call fcn.140045f34
cmp rax, r14
je 0x14007921a
xor r15d, r15d
mov esi, r15d
jmp 0x1400792b8
mov rdx, qword [rsp + 0xd8]
xor eax, eax
lea r9, [rsp + 0x94]
mov r8d, 0x200
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r9d, r9d
mov esi, eax
cmp eax, r9d
je 0x14007920f
mov r11d, 0x200
cmp dword [rsp + 0x94], r11d
jne 0x14007920f
mov rdx, qword [rsp + 0x188]
mov rcx, qword [rsp + 0xd8]
mov r8d, r11d
call fcn.140044f54
cmp eax, r9d
je 0x1400792b5
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.140045f34
xor r15d, r15d
cmp rax, r14
jne 0x140079212
mov rdx, qword [rsp + 0x188]
lea r9, [rsp + 0x94]
mov r8d, 0x200
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, eax
jmp 0x1400792b8
xor r15d, r15d
cmp esi, r15d
mov r14, r15
sete r14b
xor esi, esi
cmp byte [rsp + 0x43], r15b
mov r15b, byte [rsp + 0x40]
mov qword [rsp + 0x170], r14
jne 0x1400792e8
cmp r15b, sil
jne 0x1400792e8
cmp byte [rsp + 0x4e], sil
je 0x14007a154
lea rcx, [rsp + 0x108]
jmp 0x140078160
mov eax, dword [rsp + 0x140]
cmp byte [rsp + 0x168], r11b
mov r10b, byte [rsp + 0x44]
movzx eax, al
cmovne eax, r11d
mov dword [rsp + 0x140], eax
cmp cl, r11b
je 0x140079327
cmp r10b, r11b
jne 0x140079327
mov edx, dword [r8 + 0x28]
jmp 0x14007932c
mov edx, 0x80
mov rcx, qword [rsp + 0xb0]
mov r8, qword [rsp + 0x70]
mov dword [rsp + 0x8c], edx
mov rax, rcx
mov qword [rsp + 0x180], rcx
cmp byte [rsp + 0xd1], r11b
je 0x140079362
lea rax, [rcx + r8 - 1]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0xd8], r11
cmp r10b, r11b
je 0x1400793bc
test byte [rsp + 0x89], 0x10
je 0x14007938f
mov rax, qword [rsp + 0x260]
mov r14, rax
dec rax
mov qword [rsp + 0x180], rax
mov ecx, 1
cmp r8, rcx
cmovl r8, rcx
dec rax
cmp rax, rcx
mov qword [rsp + 0x70], r8
mov qword [rsp + 0xd8], rax
jge 0x1400793bc
lea rax, [r14 - 2]
mov qword [rsp + 0xd8], rax
mov al, r10b
neg al
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x30], rax
sbb rcx, rcx
lea rax, [rsp + 0xd8]
and rcx, r8
mov qword [rsp + 0x28], rax
mov r8d, edx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1b8]
mov rdx, rsi
call fcn.140051bdc
mov r15b, byte [rsp + 0x45]
xor r8d, r8d
mov qword [rsp + 0x190], rax
cmp r15b, r8b
jne 0x140079421
lea ecx, [r8 + 1]
cmp rax, r8
cmove rax, rcx
mov qword [rsp + 0x190], rax
movsxd r11, dword [rsp + 0x8c]
movsxd r9, dword [rsp + 0x48]
mov r10, qword [rsp + 0xe0]
mov r14d, 1
cmp r9d, r11d
jae 0x14007946d
cmp dword [rsp + 0xcc], r11d
jge 0x14007946d
mov rcx, r9
lea r8d, [r14 + 0xf]
lea rdx, [0x1400dc140]
shl rcx, 7
add rcx, r10
call fcn.140044f54
xor r8d, r8d
cmp eax, r8d
jne 0x140079470
mov r14d, r8d
mov eax, 0x20
cmp qword [rsp + 0xd8], rax
jl 0x140078814
mov al, byte [rsp + 0x44]
cmp al, r8b
je 0x140079760
cmp r9d, r11d
jae 0x140078814
xor edx, edx
mov rax, r11
mov r14, r10
shl rax, 7
div qword [rsp + 0x1c0]
cmp eax, r8d
jle 0x1400794f7
mov rdi, qword [rsp + 0x1c0]
mov r15d, eax
xor edx, edx
mov r8d, 0x1b3
mov rcx, r14
call fcn.1400b93b0
xor edx, edx
lea rcx, [r14 + 0x1b4]
lea r8d, [rdx + 0x4a]
call fcn.1400b93b0
add r14, rdi
sub r15, 1
jne 0x1400794bd
mov r12, qword [rsp + 0x218]
lea rdi, [0x1400f2c10]
mov r14, qword [rsp + 0x1d0]
mov r15d, 0x5c
xor edx, edx
mov rcx, r14
mov r8, r15
call fcn.1400b93b0
lea r8d, [r15 - 0x54]
lea rdx, str.EFI_PART
mov rcx, r14
call fcn.1400177f8
mov rcx, qword [rsp + 0xd8]
mov dword [r14 + 0xc], r15d
mov r15, qword [rsp + 0x70]
mov qword [r14 + 0x20], rcx
mov dword [r14 + 8], 0x10000
lea rax, [r15 + 0x21]
mov qword [r14 + 0x18], r15
mov qword [r14 + 0x28], rax
lea rax, [rcx - 0x20]
lea rcx, [r14 + 0x38]
mov qword [r14 + 0x30], rax
xor eax, eax
cmp qword [rcx], rax
jne 0x140079571
lea r8d, [rax + 0x10]
lea rdx, [0x1400dfa10]
call fcn.1400177f8
lea rax, [r15 + 1]
mov r15, qword [rsp + 0xf8]
mov rdx, r14
mov qword [r14 + 0x48], rax
mov eax, 0x80
mov rcx, r15
lea r8d, [rax - 0x24]
mov dword [r14 + 0x50], eax
mov dword [r14 + 0x54], eax
call fcn.1400177f8
mov r11, qword [r14 + 0x20]
xor edx, edx
mov qword [r15 + 0x18], r11
mov rax, qword [r14 + 0x18]
lea rcx, [rsi + 0x1be]
lea r8d, [rdx + 0x40]
mov qword [r15 + 0x20], rax
call fcn.1400b93b0
mov r15, qword [rsp + 0x180]
mov ecx, 1
lea rax, [rcx - 2]
mov dword [rsp + 0x30], ecx
cmp r15, rcx
mov rcx, qword [rsp + 0x70]
cmovl r15, rax
movsxd rax, dword [rsp + 0x48]
mov r10d, eax
mov r14, rax
shl r10d, 4
add r14, r14
lea eax, [r10 + 0x1bf]
mov dword [rsi + r14*8 + 0x1c2], 0xee
movsxd r8, eax
mov eax, dword [rsp + 0x64]
add r8, rsi
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x110]
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.140049458
mov eax, dword [rsp + 0x64]
lea r9d, [r10 + 0x1c3]
movsxd r8, r9d
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x110]
add r8, rsi
mov rcx, r15
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.140049458
mov rax, qword [rsp + 0x70]
xor r8d, r8d
mov dword [rsi + r14*8 + 0x1c6], eax
mov dword [rsi + r14*8 + 0x1ca], r15d
mov r14, qword [rsp + 0xe0]
mov r11d, dword [rsp + 0x8c]
mov al, byte [rsp + 0x44]
mov r15d, r8d
mov dword [rsp + 0xc0], r8d
cmp byte [rsp + 0x90], r8b
je 0x140079c6a
cmp al, r8b
jne 0x140079c6a
cmp r11d, r8d
mov dword [rsp + 0x130], r8d
mov r9, r8
mov qword [rsp + 0x1e8], r8
jle 0x140079c6a
mov ebp, 1
mov r13, r14
mov r12, r14
mov r15, r14
mov rdi, r8
lea esi, [rbp + 0x7f]
lea rdx, [0x1400dc140]
mov r8d, 0x10
mov rcx, r15
call fcn.140044f54
xor r10d, r10d
cmp eax, r10d
sete al
cmp al, r10b
jne 0x14007970c
mov r14d, r10d
cmp r9, rdi
je 0x14007970f
mov r14d, ebp
mov dword [rsp + 0x78], r10d
cmp al, r10b
jne 0x140079baf
cmp r9, rdi
je 0x140079ba9
mov r8d, 0x10
mov rdx, r15
mov rcx, r15
call fcn.140044f54
mov ecx, r10d
mov rdx, r12
cmp eax, r10d
mov r8, rsi
sete cl
mov dword [rsp + 0x78], ecx
mov rcx, r13
call fcn.1400ba0e0
add rdi, rbp
add r13, rsi
xor r10d, r10d
jmp 0x140079baf
cmp byte [rsp + 0x90], r8b
je 0x140079773
cmp r9d, r8d
jl 0x140079b9c
cmp byte [rsp + 0x42], r8b
je 0x1400797c6
or dword [rsp + 0x48], 0xffffffff
mov cl, r8b
mov r9d, r8d
mov dword [rsp + 0x140], ecx
cmp r11d, r8d
jbe 0x140079867
mov ecx, r9d
lea rdx, [0x1400dc140]
mov r8d, 0x10
shl rcx, 7
add rcx, r10
call fcn.140044f54
xor r8d, r8d
cmp eax, r8d
je 0x140079836
inc r9d
cmp r9d, r11d
jb 0x140079795
mov r9d, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x140]
mov eax, dword [rsp + 0xcc]
mov r10d, 1
sub eax, r10d
mov dword [rsp + 0xcc], eax
cmp r9d, r11d
jae 0x140078814
cmp eax, r11d
jge 0x140078814
cmp cl, r8b
je 0x1400799a4
mov r14, qword [rsp + 0xe0]
mov ecx, r8d
cmp r15b, r8b
je 0x1400798ab
mov rdx, qword [rsp + 0x70]
lea rax, [r14 + 0x20]
lea r8d, [r10 + 0x7f]
cmp ecx, r11d
jae 0x1400798ab
cmp qword [rax], rdx
je 0x140079871
add ecx, r10d
add rax, r8
jmp 0x140079820
mov ecx, r9d
xor edx, edx
mov r8d, 0x80
shl rcx, 7
mov dword [rsp + 0x48], r9d
add rcx, r10
call fcn.1400b93b0
mov r11d, dword [rsp + 0x8c]
mov r9d, dword [rsp + 0x48]
xor r8d, r8d
jmp 0x1400797c6
mov r9d, dword [rsp + 0x48]
jmp 0x1400797cd
movdqu xmm0, xmmword [0x1400dc140]
mov r9d, ecx
shl r9, 7
add r9, r14
movdqu xmmword [r9], xmm0
cmp ecx, dword [rsp + 0x48]
je 0x1400798a6
xor edx, edx
mov rcx, r9
call fcn.1400b93b0
mov r11d, dword [rsp + 0x8c]
mov r10d, 1
mov r9d, dword [rsp + 0x48]
movsxd r9, r9d
lea rdx, [0x1400dc140]
mov r8d, 0x10
shl r9, 7
add r9, r14
mov rcx, r9
mov qword [rsp + 0x198], r9
call fcn.140044f54
xor ecx, ecx
cmp eax, ecx
je 0x14007997e
mov r15d, dword [rsp + 0x48]
inc r15d
cmp r15d, r11d
jae 0x140078814
mov ecx, r15d
lea rdx, [0x1400dc140]
mov r8d, 0x10
shl rcx, 7
add rcx, r14
call fcn.140044f54
xor ecx, ecx
cmp eax, ecx
je 0x140079919
add r15d, r10d
cmp r15d, r11d
jb 0x1400798ed
jmp 0x140079975
mov edx, dword [rsp + 0x48]
movsxd rcx, r15d
cmp r15d, edx
jle 0x140079975
shl rcx, 7
mov edi, r15d
mov ebp, 0x80
add rcx, r14
sub edi, edx
lea r14, [rcx - 0x80]
mov r8, rbp
mov rdx, r14
call fcn.1400ba0e0
sub rdi, 1
mov rcx, r14
jne 0x140079936
mov rbp, qword [rsp + 0x228]
mov r13, qword [rsp + 0x1e0]
mov r9, qword [rsp + 0x198]
mov r11d, dword [rsp + 0x8c]
lea rdi, [0x1400f2c10]
cmp r15d, r11d
jae 0x140078814
xor edx, edx
mov r8d, 0x80
mov rcx, r9
call fcn.1400b93b0
mov r9d, dword [rsp + 0x48]
mov eax, dword [rsp + 0xcc]
xor r8d, r8d
mov r14d, r8d
lea r10d, [r8 + 1]
cmp eax, r8d
jge 0x140079b19
cmp r14d, r8d
jne 0x1400799f2
mov edx, r10d
mov r14d, r10d
mov eax, r10d
mov r8d, r10d
mov dword [rsp + 0x224], r10d
mov r11d, r10d
mov dword [rsp + 0x220], edx
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x268], rax
mov dword [rsp + 0x178], r10d
mov dword [rsp + 0x200], r10d
jmp 0x140079a21
mov rax, qword [rsp + 0x268]
mov edx, dword [rsp + 0x220]
mov r8d, dword [rsp + 0x224]
mov r10d, dword [rsp + 0x200]
mov r11d, dword [rsp + 0x178]
mov r14, qword [rsp + 0x150]
mov rcx, qword [rsp + 0xe0]
xor r15d, r15d
cmp eax, r15d
jle 0x140079a3d
movsxd rax, r9d
shl rax, 7
movdqu xmmword [rax + rcx], xmm6
cmp r14d, r15d
jle 0x140079a4f
movsxd rax, r9d
shl rax, 7
movdqu xmmword [rax + rcx + 0x10], xmm7
cmp edx, r15d
jle 0x140079a65
mov rdx, qword [rsp + 0x70]
movsxd rax, r9d
shl rax, 7
mov qword [rax + rcx + 0x20], rdx
cmp r8d, r15d
jle 0x140079a7e
mov r15, qword [rsp + 0x180]
movsxd rax, r9d
shl rax, 7
mov qword [rax + rcx + 0x28], r15
xor r8d, r8d
cmp r11d, r8d
jle 0x140079a9a
mov rdx, qword [rsp + 0x288]
movsxd rax, r9d
shl rax, 7
mov qword [rax + rcx + 0x30], rdx
cmp r10d, r8d
jle 0x140079ae1
mov r15, qword [rsp + 0xa0]
cmp word [r15], r8w
je 0x140079ae1
movsxd rax, r9d
xor edx, edx
shl rax, 7
lea r8d, [rdx + 0x48]
lea r14, [rax + rcx + 0x38]
mov rcx, r14
call fcn.1400b93b0
mov r8d, 0x24
mov rdx, r15
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
mov r9d, dword [rsp + 0x48]
xor r8d, r8d
mov r15d, 0x80
cmp byte [rsp + 0x168], r8b
je 0x14007967b
mov r14, qword [rsp + 0xe0]
movsxd rcx, r9d
mov r8, r15
shl rcx, 7
xor edx, edx
add rcx, r14
call fcn.1400b93b0
xor r8d, r8d
jmp 0x140079683
cmp eax, r9d
je 0x140079ae1
mov r14, qword [rsp + 0xe0]
movsxd r15, r9d
lea rcx, [rsp + 0x350]
shl r15, 7
mov r8d, 0x80
add r15, r14
mov rdx, r15
call fcn.1400ba0e0
movsxd r11, dword [rsp + 0xcc]
mov rcx, r15
shl r11, 7
mov r15d, 0x80
add r14, r11
mov r8, r15
mov rdx, r14
call fcn.1400ba0e0
lea rdx, [rsp + 0x350]
mov rcx, r14
mov r8, r15
call fcn.1400ba0e0
mov r9d, dword [rsp + 0x48]
mov eax, dword [rsp + 0xcc]
cmp r9d, eax
cmovl r9d, eax
xor r8d, r8d
mov dword [rsp + 0x48], r9d
jmp 0x140079ae7
mov r14, qword [rsp + 0xe0]
jmp 0x14007968f
add rdi, rbp
add r13, rsi
cmp r14d, r10d
je 0x140079bea
lea rdx, [r15 + 0x80]
mov rcx, r15
cmp r15, rdx
jae 0x140079bda
mov rax, qword [rcx]
add rcx, 8
cmp rax, r10
jne 0x140079bd6
cmp rcx, rdx
jb 0x140079bc3
jmp 0x140079bda
mov dword [rsp + 0x78], ebp
mov r8, rsi
xor edx, edx
mov rcx, r15
call fcn.1400b93b0
xor r10d, r10d
cmp dword [rsp + 0x78], r10d
mov r10d, dword [rsp + 0x130]
je 0x140079c04
lea eax, [r10 + 1]
mov dword [rsp + 0xc0], eax
mov r9, qword [rsp + 0x1e8]
mov r14d, dword [rsp + 0x8c]
add r10d, ebp
add r9, rbp
add r15, rsi
add r12, rsi
cmp r10d, r14d
mov qword [rsp + 0x1e8], r9
mov dword [rsp + 0x130], r10d
jl 0x1400796e1
mov rsi, qword [rsp + 0x108]
mov rbp, qword [rsp + 0x228]
mov r12, qword [rsp + 0x218]
mov r13, qword [rsp + 0x1e0]
mov r15d, dword [rsp + 0xc0]
lea rdi, [0x1400f2c10]
jmp 0x140079c72
mov r14d, dword [rsp + 0x8c]
mov rcx, rsi
call fcn.140049550
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xfffffffffffffe8c
call fcn.140049550
mov eax, dword [rsp + 0x48]
cmp r15d, eax
jg 0x140079c9b
lea r15d, [rax + 1]
xor eax, eax
mov edx, r14d
cmp byte [rsp + 0x44], al
cmovne r15d, r14d
mov r14, qword [rsp + 0xe0]
shl rdx, 7
mov rcx, r14
xor r8d, r8d
call fcn.1400a7b50
mov rcx, qword [rsp + 0x1d0]
mov dword [rcx + 0x58], eax
mov dword [r14 + 0x10058], eax
xor r14d, r14d
cmp dword [rcx + 0xc], 0x20000
mov dword [rcx + 0x10], r14d
ja 0x14007a1d2
mov r14d, dword [rcx + 0xc]
xor r8d, r8d
mov rdx, r14
call fcn.1400a7b50
mov r11, qword [rsp + 0x1d0]
xor ecx, ecx
mov dword [r11 + 0x10], eax
mov rax, qword [rsp + 0xf8]
xor r8d, r8d
mov dword [rax + 0x10], ecx
mov rcx, rax
mov rdx, r14
call fcn.1400a7b50
mov rdx, qword [rsp + 0xf8]
mov r8d, dword [rsp + 0x98]
mov dword [rdx + 0x10], eax
shl r15d, 7
xor edx, edx
lea eax, [r15 + r8 - 1]
mov r15d, r8d
div r15d
mov r14d, eax
xor eax, eax
imul r14d, r15d
cmp byte [rsp + 0x44], al
je 0x140079d7f
mov rdx, qword [rsp + 0x128]
xor r8d, r8d
mov rcx, rbx
call fcn.140045f34
xor eax, eax
lea r9, [rsp + 0x2d0]
mov r8d, r15d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdx, qword [rsp + 0x1c0]
xor r8d, r8d
mov rcx, rbx
imul rdx, qword [rsp + 0x190]
add rdx, qword [rsp + 0x128]
call fcn.140045f34
mov rsi, qword [rsp + 0x1d0]
xor eax, eax
lea r8d, [r14 + r15]
lea r9, [rsp + 0x2dc]
mov rcx, rbx
mov rdx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15, qword [rsp + 0xd8]
xor r8d, r8d
lea rdx, [r15 - 0x20]
mov rcx, rbx
imul rdx, qword [rsp + 0x1c0]
add rdx, qword [rsp + 0x128]
call fcn.140045f34
xor eax, eax
lea r9, [rsp + 0x2d8]
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdx, qword [rsp + 0x1c0]
imul rdx, r15
add rdx, qword [rsp + 0x128]
xor r8d, r8d
mov rcx, rbx
call fcn.140045f34
mov r8d, dword [rsp + 0x98]
mov rdx, qword [rsp + 0xf8]
lea r9, [rsp + 0x2d4]
xor esi, esi
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15b, byte [rsp + 0x40]
mov r11b, r15b
lea rcx, [rsp + 0x108]
or r11b, byte [rsp + 0x43]
or r11b, byte [rsp + 0x4e]
je 0x14007a19c
call fcn.140044f24
lea rcx, [rsp + 0x50]
jmp 0x1400779f5
mov r15b, byte [rsp + 0x40]
mov eax, dword [rsp + 0x80]
mov r9d, 0x20
cmp eax, r8d
jl 0x140079f59
cmp dl, r9b
je 0x140079eab
cmp dl, 0x10
jne 0x140079eb9
mov ecx, dword [rsp + 0xc4]
cmp ecx, 0xb
je 0x140079ee2
jmp 0x140079ec0
mov ecx, dword [rsp + 0xc4]
mov dl, byte [rsp + 0x43]
test r9b, dl
jne 0x140079ee2
cmp dl, r8b
je 0x140079ed3
cmp ecx, 0xb
je 0x140079ee2
test r9b, r15b
jne 0x140079ee2
cmp r15b, r8b
je 0x140079f51
cmp ecx, 0xb
jne 0x140079f51
mov r15d, 1
test byte [0x1400f2380], r9b
jne 0x140079f0f
test byte [rsp + 0x448], r9b
jne 0x140079f0f
mov edx, r15d
mov ecx, eax
call fcn.140060758
mov eax, dword [rsp + 0x80]
xor r8d, r8d
or byte [rsp + 0x448], 2
test byte [0x1400f2380], 0x10
jne 0x140079f40
mov qword [rsp + 0x28], r8
lea rcx, [rsp + 0x448]
or r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, eax
mov qword [rsp + 0x20], r15
call fcn.14004957c
or byte [rsp + 0x448], r15b
xor r8d, r8d
lea r9d, [r8 + 0x20]
jmp 0x140079f5f
mov r15d, 1
jmp 0x140079f63
mov r15d, 1
mov dl, byte [rsp + 0x43]
cmp byte [rsp + 0x4e], r8b
jne 0x140079f7d
mov al, byte [rsp + 0x41]
cmp al, r15b
je 0x140079f7d
cmp al, r9b
je 0x140079f7d
cmp dl, r8b
je 0x140079fa5
mov rcx, rbx
call fcn.1400494f0
mov cl, byte [rsp + 0x41]
cmp cl, r15b
je 0x140079f97
mov edx, 0x20
cmp cl, dl
jne 0x140079fa2
movsxd r14, eax
mov qword [rsp + 0x170], r14
xor r8d, r8d
cmp rbx, r8
je 0x140079fbf
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140079fbf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
mov cl, byte [rsp + 0x40]
mov edx, 0x20
mov rbx, r8
mov eax, r8d
mov qword [rsp + 0x1b8], rbx
test dl, cl
jne 0x140079ff9
cmp cl, r8b
mov ecx, dword [rsp + 0xc4]
je 0x140079feb
cmp ecx, 0xb
je 0x140079ff9
mov dl, byte [rsp + 0x41]
cmp dl, 0x10
jne 0x14007a01a
cmp ecx, 0xc
je 0x14007a01a
lea rcx, [rsp + 0x448]
call fcn.1400495d0
mov rcx, qword [rsp + 0x160]
call fcn.1400518d4
mov dl, byte [rsp + 0x41]
xor r8d, r8d
cmp byte [rsp + 0x4c], r8b
je 0x14007a02a
cmp esi, r8d
jne 0x140077a49
cmp dl, 0x10
lea rcx, [rsp + 0x448]
cmove r14d, eax
call fcn.1400495d0
xor eax, eax
cmp rdi, rax
je 0x14007b1af
jmp 0x140077a1b
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor eax, eax
cmp rdi, rax
jmp 0x14007ad25
lea rcx, [rsp + 0x138]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a065
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007a065
lea rcx, [rsp + 0x138]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a0dd
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14007a043
lea rcx, [rsp + 0x138]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a11b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
je 0x14007794c
jmp 0x140077943
lea rcx, [rsp + 0x1c8]
call fcn.140044f24
lea rcx, [rsp + 0x108]
jmp 0x14007a0ed
lea rcx, [rsp + 0x1c8]
call fcn.140044f24
jmp 0x140078814
lea rcx, [rsp + 0x108]
jmp 0x14007a0af
lea rcx, [rsp + 0x108]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a197
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r15
jmp 0x14007a120
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a1ca
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14007b16f
lea rcx, [rsp + 0x108]
jmp 0x140077f19
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a208
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14007b1a1
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140077a86
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140077a86
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x50]
mov ebx, eax
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor eax, eax
cmp rdi, rax
jmp 0x14007a66e
movsxd r8, dword [rsp + 0x48]
movsxd rdx, dword [rsp + 0x84]
lea rcx, [rsp + 0xa8]
call fcn.1400053e0
mov r8, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x430]
mov rdx, r13
call fcn.14004b578
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
jmp 0x14007a66b
lea rcx, [rsp + 0xa8]
mov edx, 0x1000
call fcn.14004bf70
movsxd rbp, dword [rsp + 0x84]
cmp ebp, ebx
jl 0x14007a389
lea rcx, [rsp + 0xa0]
mov edx, 0x488
call fcn.14004bc80
mov rbx, qword [rsp + 0xa0]
xor edx, edx
lea rsi, [rbx + 0x200]
mov r8d, 0x288
mov rcx, rsi
call fcn.1400b93b0
mov r8d, dword [rsp + 0x134]
mov rdx, rbx
mov rcx, rsi
call fcn.14005f04c
xor eax, eax
mov ebx, eax
mov rcx, rax
lea rax, [rsi + 4]
cmp dword [rax], ebp
je 0x14007a342
add rcx, r15
add ebx, r15d
add rax, 0x18
cmp rcx, 0x1a
jle 0x14007a32c
jmp 0x14007a37a
lea rcx, [rsp + 0xa8]
mov edx, 0x64
call fcn.14004bf70
mov rcx, qword [rsp + 0xa8]
movsxd r11, ebx
lea rax, [r11 + r11*2]
lea rdx, str._d___c_
mov r9d, dword [rsi + rax*8 + 0x10]
mov r8d, dword [rsi + rax*8 + 4]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0xa0]
call fcn.140044f24
jmp 0x14007a3b8
cmp byte [rsp + 0x69], bl
jne 0x14007a3b8
mov rdx, qword [rsp + 0xa8]
lea rax, [0x1400d7790]
cmp sil, 4
lea r9, [0x1400d77a0]
mov rcx, rbp
cmove r9, rax
xor r8d, r8d
call fcn.14005158c
mov r8, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x430]
mov rdx, r13
call fcn.14004b578
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor eax, eax
cmp rdi, rax
je 0x14007a3f7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x228]
call fcn.140044f24
lea rcx, [rsp + 0x1e0]
call fcn.140044f24
lea rcx, [rsp + 0x218]
call fcn.140044f24
lea rcx, [rsp + 0x270]
call fcn.140044f24
lea rcx, [rsp + 0xa8]
call fcn.140044f24
xor eax, eax
jmp 0x14007b1f3
movzx ecx, word [r12]
mov esi, ecx
lea eax, [rcx - 0x61]
cmp eax, 0x19
ja 0x14007a451
sub esi, 0x20
lea r12d, [rsi - 0x41]
cmp r12d, 0x19
ja 0x14007a549
mov r14d, dword [rsp + 0x134]
cmp r14d, ebx
jle 0x14007a501
lea rcx, [rsp + 0xa0]
mov edx, 0x488
call fcn.14004bc80
mov rbx, qword [rsp + 0xa0]
xor edx, edx
lea rbp, [rbx + 0x200]
mov r8d, 0x288
mov rcx, rbp
call fcn.1400b93b0
mov r8d, esi
mov rdx, rbx
shl r8d, 0x10
mov rcx, rbp
or r8d, r14d
call fcn.14005f04c
movsxd r11, r12d
xor eax, eax
lea rbx, [r11 + r11*2]
cmp dword [rbp + rbx*8 + 8], eax
jle 0x14007a4f2
lea edx, [rax + 0x64]
lea rcx, [rsp + 0xa8]
call fcn.14004bf70
mov r8d, dword [rbp + rbx*8 + 4]
mov rcx, qword [rsp + 0xa8]
lea rdx, str._d__c:
mov r9d, esi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0xa0]
call fcn.140044f24
jmp 0x14007a549
mov rax, qword [rsp + 0xa8]
mov word [rax], cx
cmp cx, bx
je 0x14007a549
mov dl, byte [rsp + 0x6c]
mov r9d, dword [rsp + 0x5c]
mov r8d, dword [rsp + 0x48]
mov byte [rsp + 0x30], dl
mov edx, dword [rsp + 0x80]
and r9d, 0xfffffffd
lea rcx, [rsp + 0xa8]
or r9d, 0xc
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.14005f9e4
mov rcx, qword [rsp + 0x430]
jmp 0x14007a642
mov ecx, dword [rsp + 0x80]
cmp ecx, ebx
jl 0x14007a5d8
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x88], bl
je 0x14007a572
cmp eax, ebx
jl 0x14007a5d8
mov dl, byte [rsp + 0x6c]
movsx r9d, byte [rsp + 0x6d]
mov r8d, eax
or r9d, dword [rsp + 0x5c]
mov byte [rsp + 0x30], dl
mov edx, ecx
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.14005f9e4
jmp 0x14007a5d8
mov eax, dword [rsp + 0x80]
cmp byte [rsp + 0x69], bl
je 0x14007a5b4
cmp eax, ebx
jl 0x14007a5d8
mov dl, byte [rsp + 0x6d]
lea rcx, [rsp + 0xa8]
neg dl
sbb edx, edx
and edx, 0x200000
or edx, eax
or edx, dword [rsp + 0x1a8]
call fcn.14005f50c
mov eax, dword [rsp + 0x148]
cmp eax, ebx
jle 0x14007a637
mov r8, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], rbx
dec eax
mov dword [rsp + 0x20], ebx
mov rbx, qword [rsp + 0x430]
lea r9, [rsp + 0xa8]
lea rdx, [rsp + 0x148]
mov rcx, rbx
mov qword [rsp + 0x198], r8
mov dword [rsp + 0x148], eax
call fcn.14004f3b8
lea rcx, [rsp + 0x198]
call fcn.140044f24
jmp 0x14007a63f
mov rbx, qword [rsp + 0x430]
mov rcx, rbx
mov r8, qword [rsp + 0xa8]
mov rdx, r13
call fcn.14004b578
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
xor ebx, ebx
cmp rdi, rbx
je 0x14007a679
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, ebx
jmp 0x14007b1af
lea rcx, [rsp + 0xa8]
mov edx, 0x103c
call fcn.14004bf70
mov rsi, qword [rsp + 0xa8]
xor ebp, ebp
add rsi, 0x2000
lea rbx, [0x1400d7780]
cmp word [r12], bp
je 0x14007a701
lea eax, [rbp + 0x3a]
cmp ax, word [r12 + 2]
jne 0x14007a701
movzx r8d, word [r12]
lea rdx, str.._c:
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsi + 8]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 2
jne 0x14007a6f6
mov r14d, dword [rsp + 0x134]
cmp r14d, 0x10
jne 0x14007a760
lea rbx, [0x1400d77a0]
mov ecx, 5
cmp eax, ecx
jne 0x14007a760
jmp 0x14007a72d
mov eax, dword [rsp + 0x84]
cmp eax, ebp
jl 0x14007a760
mov r14d, dword [rsp + 0x134]
cmp r14d, 8
jne 0x14007a736
lea rdx, [0x1400df9c8]
mov r8d, eax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbx, [0x1400d7790]
jmp 0x14007a760
cmp r14d, 0x10
jne 0x14007a74d
mov esi, eax
lea rbx, [0x1400d77a0]
and esi, 0xfff
jmp 0x14007a760
lea rdx, str..PhysicalDrive_d
mov r8d, eax
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0xa8]
mov r9, rbx
mov r8d, 0x20
mov rcx, rsi
call fcn.14005158c
mov r8, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x430]
mov rdx, r13
call fcn.14004b578
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
cmp rdi, rbp
je 0x14007a7b6
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, ebp
jmp 0x14007b1af
mov eax, dword [rsp + 0x48]
cmp eax, ebx
jle 0x14007ad0b
mov ecx, dword [rsp + 0x84]
cmp ecx, ebx
jge 0x14007a7df
cmp word [rbp], bx
je 0x14007ad0b
or r14, 0xffffffffffffffff
cmp ecx, ebx
mov rsi, rbx
mov dword [rsp + 0x148], r14d
mov qword [rsp + 0xa0], rbx
jge 0x14007a803
cmp bl, bl
jne 0x14007a859
jmp 0x14007ad0b
mov dl, byte [rsp + 0x6c]
mov r9d, dword [rsp + 0x5c]
mov r8d, eax
mov byte [rsp + 0x30], dl
lea rdx, [rsp + 0x148]
mov qword [rsp + 0x28], rdx
lea rdx, [rsp + 0xa0]
mov qword [rsp + 0x20], rdx
mov edx, ecx
lea rcx, [rsp + 0xa8]
call fcn.14005f9e4
cmp dword [rsp + 0x148], ebx
jle 0x14007b187
mov rsi, qword [rsp + 0xa0]
mov r9, qword [rsp + 0x1d8]
mov dword [rsp + 0x64], 0x200
mov qword [rsp + 0xe8], rbx
mov dword [rsp + 0xf0], ebx
mov dword [rsp + 0xf4], ebx
cmp word [r9], bx
je 0x14007aa38
lea rcx, [0x1400df9c4]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
jne 0x14007aa38
lea rcx, [0x1400da0ac]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
jne 0x14007aa38
lea rcx, [0x1400df9c0]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
je 0x14007a8cc
mov eax, 8
jmp 0x14007aa3d
lea rcx, str.nt6fat
mov rdx, r9
call fcn.140045ff4
cmp al, bl
jne 0x14007aa31
lea rcx, str.winfat
mov rdx, r9
call fcn.140045ff4
cmp al, bl
jne 0x14007aa31
lea rcx, [0x1400df9ac]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
je 0x14007a917
mov eax, 6
jmp 0x14007aa3d
lea rcx, str.nt5fat
mov rdx, r9
call fcn.140045ff4
cmp al, bl
je 0x14007a934
mov eax, 5
jmp 0x14007aa3d
mov dword [rsp + 0x64], ebx
mov ebp, 0x2a
mov rbx, r14
mov qword [rsp + 0x150], rbx
cmp bp, word [r9]
jne 0x14007a989
add r9, 2
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0xa0], r9
call fcn.140051edc
mov r9, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x150]
cmp bp, word [r9]
jne 0x14007a989
add r9, 2
mov eax, 0x23
cmp ax, word [r9]
jne 0x14007a9e8
lea rcx, [rsp + 0xa0]
mov rdx, r9
call fcn.140058920
mov rdx, qword [rsp + 0xa0]
xor eax, eax
lea r9, [rsp + 0xe8]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.140017f3c
lea rcx, [rsp + 0xa0]
mov r12, rax
call fcn.140044f24
mov r11d, dword [rsp + 0xf0]
mov dword [rsp + 0x64], r11d
jmp 0x14007aa07
lea r8, [rsp + 0x64]
xor edx, edx
mov rcx, r9
call fcn.14001204c
mov r11d, dword [rsp + 0x64]
mov r12, rax
mov qword [rsp + 0xe8], rax
xor eax, eax
cmp rbx, rax
jl 0x14007aa1d
mov eax, r11d
cmp rax, rbx
cmovg r11d, ebx
mov dword [rsp + 0x64], r11d
xor ebx, ebx
cmp r12, rbx
jne 0x14007aa73
lea rcx, [rsp + 0xe8]
jmp 0x14007b182
mov eax, 7
jmp 0x14007aa3d
mov eax, 9
lea r9, [rsp + 0xe8]
lea r8, [0x1400d6d38]
mov edx, eax
xor ecx, ecx
mov qword [rsp + 0x20], rbx
call fcn.140017f3c
mov r11d, dword [rsp + 0x64]
cmp r11d, ebx
mov r12, rax
cmovne r11d, dword [rsp + 0xf0]
mov dword [rsp + 0x64], r11d
cmp r11d, ebx
jbe 0x14007aa24
cmp r12, rbx
je 0x14007aa24
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x1b8]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call fcn.1400034e0
mov rbx, qword [rsp + 0x1b8]
xor r13d, r13d
cmp rbx, r13
jne 0x14007aaf4
lea rcx, [rsp + 0xe8]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
cmp rdi, r13
jmp 0x14007b1a1
mov rbp, qword [rsp + 0x1b0]
xor r8d, r8d
mov rcx, rbx
shl rbp, 9
add rbp, rsi
mov rdx, rbp
mov qword [rsp + 0x1b0], rbp
call fcn.140045f34
cmp rax, rbp
je 0x14007ab52
lea rcx, [rsp + 0xe8]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
cmp rbx, r14
je 0x14007aaec
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007aaec
mov r13d, dword [rsp + 0x64]
mov rsi, 0xfffffffffffffe00
lea rcx, [rsp + 0xf8]
add r13d, 0x1ff
and r13d, esi
lea edx, [r13 + r13 + 0x200]
call fcn.14004bc80
mov r14, qword [rsp + 0xf8]
xor eax, eax
add r14, 0x200
lea r9, [rsp + 0x94]
mov r8d, r13d
and r14, rsi
movsxd rsi, r13d
mov rcx, rbx
lea rbp, [r14 + rsi]
mov qword [rsp + 0x20], rax
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
cmp eax, ecx
jne 0x14007abd9
lea rcx, [rsp + 0xf8]
call fcn.140044f24
lea rcx, [rsp + 0xe8]
call fcn.140044f24
jmp 0x14007a1df
mov r8, rsi
mov rdx, rbp
mov rcx, r14
call fcn.1400177f8
mov rsi, qword [rsp + 0x1b0]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.140045f34
cmp rax, rsi
jne 0x14007abba
mov esi, dword [rsp + 0x64]
mov r8d, 3
mov rdx, r12
mov rcx, rbp
call fcn.1400177f8
mov eax, 0x1fe
lea rdx, [r12 + 0x1e]
cmp esi, eax
lea rcx, [rbp + 0x1e]
cmovg esi, eax
lea eax, [rsi - 0x1e]
movsxd r8, eax
call fcn.1400177f8
mov byte [rbp + 0x1fe], 0x55
mov byte [rbp + 0x1ff], 0xaa
mov eax, dword [rsp + 0x64]
cmp eax, 0x200
jbe 0x14007ac6a
add eax, 0xfffffe00
lea rdx, [r12 + 0x200]
lea rcx, [rbp + 0x200]
mov r8d, eax
call fcn.1400177f8
mov r8d, r13d
mov rdx, rbp
mov rcx, r14
call fcn.140044f54
xor r12d, r12d
cmp eax, r12d
je 0x14007aca7
lea r9, [rsp + 0x94]
mov r8d, r13d
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov r15d, eax
call fcn.1400494c8
lea rcx, [rsp + 0xf8]
cmp r15d, r12d
mov esi, r12d
sete sil
call fcn.140044f24
lea rcx, [rsp + 0xe8]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007acf4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r12
jmp 0x14007b16f
cmp dword [rsp + 0x84], ebx
jge 0x14007ad30
cmp word [rbp], bx
jne 0x14007ad30
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
cmp rdi, rbx
je 0x14007758d
jmp 0x140077584
mov r10d, 0x1b8
mov qword [rsp + 0x198], rbx
mov dword [rsp + 0x1a0], ebx
mov dword [rsp + 0x5c], r10d
mov dword [rsp + 0x1a4], ebx
cmp word [r9], bx
je 0x14007af4c
lea rcx, [0x1400df9c4]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
jne 0x14007af4c
lea rcx, [0x1400da0ac]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
jne 0x14007af4c
lea rcx, [0x1400df9ac]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
je 0x14007adb0
lea rbp, [0x1400ef300]
mov dword [rsp + 0x5c], 0x190
jmp 0x14007aed6
lea rcx, [0x1400df9c0]
mov rdx, r9
call fcn.140045ff4
cmp al, bl
je 0x14007add7
lea rbp, [0x1400ef490]
mov dword [rsp + 0x5c], 0x180
jmp 0x14007aed6
or rax, 0xffffffffffffffff
mov dword [rsp + 0x5c], ebx
lea esi, [rax + 0x2b]
mov rbx, rax
mov qword [rsp + 0x150], rax
cmp si, word [r9]
jne 0x14007ae2e
add r9, 2
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0xa0], r9
call fcn.140051edc
mov r9, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x150]
cmp si, word [r9]
jne 0x14007ae2e
add r9, 2
mov eax, 0x23
cmp ax, word [r9]
jne 0x14007ae8d
lea rcx, [rsp + 0xa0]
mov rdx, r9
call fcn.140058920
mov rdx, qword [rsp + 0xa0]
xor eax, eax
lea r9, [rsp + 0x198]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.140017f3c
lea rcx, [rsp + 0xa0]
mov rbp, rax
call fcn.140044f24
mov r11d, dword [rsp + 0x1a0]
mov dword [rsp + 0x5c], r11d
jmp 0x14007aeac
lea r8, [rsp + 0x5c]
xor edx, edx
mov rcx, r9
call fcn.14001204c
mov r11d, dword [rsp + 0x5c]
mov rbp, rax
mov qword [rsp + 0x198], rax
xor eax, eax
cmp rbx, rax
jl 0x14007aec2
mov eax, r11d
cmp rax, rbx
jle 0x14007aec2
mov r11d, ebx
mov dword [rsp + 0x5c], ebx
xor ebx, ebx
cmp r11d, ebx
jbe 0x14007b17a
cmp rbp, rbx
je 0x14007b17a
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x1b8]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call fcn.1400034e0
mov rbx, qword [rsp + 0x1b8]
xor esi, esi
cmp rbx, rsi
jne 0x14007af60
lea rcx, [rsp + 0x198]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
cmp rdi, rsi
jmp 0x14007b1a1
lea rbp, [0x1400ef610]
mov r11d, r10d
mov dword [rsp + 0x5c], r10d
jmp 0x14007aec4
mov r12d, dword [rsp + 0x5c]
mov rsi, 0xfffffffffffffe00
lea rcx, [rsp + 0x150]
add r12d, 0x1ff
and r12d, esi
lea edx, [r12 + r12 + 0x200]
call fcn.14004bc80
mov r13, qword [rsp + 0x150]
xor ecx, ecx
add r13, 0x200
movsxd r14, r12d
mov rax, rcx
and r13, rsi
lea rsi, [r13 + r14]
cmp qword [rsp + 0x1b0], rcx
je 0x14007afc9
mov rdx, qword [rsp + 0x128]
xor r8d, r8d
mov rcx, rbx
call fcn.140045f34
xor ecx, ecx
cmp rax, qword [rsp + 0x128]
jne 0x14007b117
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x94]
mov r8d, r12d
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
cmp eax, ecx
je 0x14007b117
mov r8, r14
mov rdx, rsi
mov rcx, r13
call fcn.1400177f8
mov r11d, dword [rsp + 0x5c]
mov eax, 0x1b8
cmp r11d, eax
mov rdx, rbp
mov rcx, rsi
cmovg r11d, eax
movsxd r8, r11d
call fcn.1400177f8
mov byte [rsi + 0x1fe], 0x55
mov byte [rsi + 0x1ff], 0xaa
mov eax, dword [rsp + 0x5c]
cmp eax, 0x200
jbe 0x14007b05e
add eax, 0xfffffe00
lea rdx, [rbp + 0x200]
lea rcx, [rsi + 0x200]
mov r8d, eax
call fcn.1400177f8
mov r8d, r12d
mov rdx, rsi
mov rcx, r13
call fcn.140044f54
xor r13d, r13d
cmp eax, r13d
je 0x14007b0be
mov rbp, qword [rsp + 0x128]
xor r8d, r8d
mov rcx, rbx
mov rdx, rbp
call fcn.140045f34
cmp rax, rbp
jne 0x14007b11a
lea r9, [rsp + 0x94]
mov r8d, r12d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.1400494c8
cmp esi, r13d
je 0x14007b11a
lea rcx, [rsp + 0x150]
call fcn.140044f24
lea rcx, [rsp + 0x198]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007b101
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x14007b10f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, r13d
jmp 0x14007b1af
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x150]
mov esi, eax
cmp eax, r13d
cmove esi, r15d
call fcn.140044f24
lea rcx, [rsp + 0x198]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007b16c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x14007785e
jmp 0x140077855
lea rcx, [rsp + 0x198]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x448]
call fcn.1400495d0
cmp rdi, rbx
je 0x14007b1ac
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, r15d
lea rcx, [rsp + 0x228]
call fcn.140044f24
lea rcx, [rsp + 0x1e0]
call fcn.140044f24
lea rcx, [rsp + 0x218]
call fcn.140044f24
lea rcx, [rsp + 0x270]
call fcn.140044f24
lea rcx, [rsp + 0xa8]
call fcn.140044f24
mov eax, r14d
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret