Function at 0x140074c6c
Capabilities:
Encode data using base64
Get disk information
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x410
movaps xmmword [rax - 0x48], xmm6
lea rcx, [rax + 0x10]
movaps xmmword [rax - 0x58], xmm7
call fcn.14004ea3c
lea rcx, [rsp + 0xe0]
mov edx, 5
call fcn.140056040
lea rcx, [rsp + 0x288]
mov edx, 0x14
call fcn.140056040
lea rcx, [rsp + 0x220]
call fcn.140055fcc
lea rcx, [rsp + 0x1d8]
call fcn.140055fcc
lea rcx, [rsp + 0x210]
call fcn.140055fcc
xor ebx, ebx
or r15, 0xffffffffffffffff
mov eax, r15d
lea edi, [rbx + 0x2c]
lea rdx, [rsp + 0x1d8]
mov dword [rsp + 0xc0], eax
mov dword [rsp + 0xd8], eax
mov rax, r15
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x458]
lea rcx, [rsp + 0x1c8]
mov r8d, edi
mov qword [rsp + 0x2e8], rbx
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0x1e8], r15
mov dword [rsp + 0x78], 0xfffc0000
mov esi, ebx
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x468], ebx
mov dword [rsp + 0x1b0], ebx
mov word [rsp + 0x100], r15w
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1e0], rbx
mov qword [rsp + 0x278], r15
mov dword [rsp + 0x8c], ebx
mov rbp, r15
mov qword [rsp + 0x238], r15
mov qword [rsp + 0xf8], r15
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x258], r15
mov qword [rsp + 0x138], r15
mov byte [rsp + 0x90], bl
mov byte [rsp + 0x74], bl
mov byte [rsp + 0xc4], bl
mov byte [rsp + 0xd4], bl
mov byte [rsp + 0x43], bl
mov byte [rsp + 0x4c], bl
mov byte [rsp + 0x73], bl
mov byte [rsp + 0xcd], bl
mov dword [rsp + 0x124], ebx
call fcn.140059810
mov r13, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x1c8]
mov word [r13], bx
cmp di, word [rax]
jne 0x140074e61
mov word [rax], bx
add rax, 2
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x1c8]
mov r8d, edi
mov qword [rsp + 0x1c8], rax
call fcn.140059810
mov r13, qword [rsp + 0x1d8]
mov rax, 0xfffffffffffffff7
mov cl, bl
mov bpl, bl
mov byte [rsp + 0x4f], bl
mov byte [rsp + 0xd5], bl
mov byte [rsp + 0x150], bl
mov byte [rsp + 0x68], bl
mov byte [rsp + 0xc5], bl
mov byte [rsp + 0x60], bl
mov byte [rsp + 0x44], bl
mov byte [rsp + 0x4e], bl
mov byte [rsp + 0x41], bl
mov byte [rsp + 0x42], bl
mov byte [rsp + 0x4d], bl
mov byte [rsp + 0x91], bl
mov r14, rbx
mov qword [rsp + 0x270], rbx
mov r12, rbx
mov qword [rsp + 0x1c8], rbx
mov edi, ebx
mov dword [rsp + 0x64], ebx
mov byte [rsp + 0x75], bl
mov byte [rsp + 0x61], bl
mov ebx, 0xfffff000
mov dword [rsp + 0x140], ecx
mov dword [rsp + 0x158], r15d
lea r15d, [rax + 0xa]
mov dword [rsp + 0xd0], ebx
mov dword [rsp + 0x9c], ebx
mov qword [rsp + 0x1f8], rax
lea ebx, [rax + 0x11]
mov qword [rsp + 0x160], rax
mov rcx, rax
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x458]
xor edx, edx
mov dword [rsp + 0x104], ebp
mov qword [rsp + 0x200], r15
cmp word [rax], dx
je 0x140075cb6
lea rdx, [rsp + 0x458]
lea rcx, str._admin
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140074f65
or byte [rsp + 0x4f], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._super
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140074f8f
or byte [rsp + 0x4f], 2
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._devid
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140074fbd
bts dword [rsp + 0x1b0], 0x10
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._devidx
mov r8d, 7
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140074feb
bts dword [rsp + 0x1b0], 0x11
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._gui
mov r8d, 4
call fcn.140058710
xor ecx, ecx
cmp al, cl
jne 0x140075d3a
lea r8d, [rcx + 4]
lea rdx, [rsp + 0x458]
lea rcx, str._usb
call fcn.140058710
xor edx, edx
cmp al, dl
jne 0x1400753d8
lea r8d, [rdx + 6]
lea rcx, str._hextp
lea rdx, [rsp + 0x458]
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075057
or edi, r15d
jmp 0x140075939
lea rdx, [rsp + 0x458]
lea rcx, str._phy
mov r8d, 4
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x14007507f
or edi, 2
jmp 0x140075939
lea rdx, [rsp + 0x458]
lea rcx, [0x1400f3bf8]
mov r8d, 5
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400750a7
or edi, 0x10
jmp 0x140075939
lea rdx, [rsp + 0x458]
lea rcx, str._fill
mov r8d, 5
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400750cf
or edi, 4
jmp 0x140075939
lea rdx, [rsp + 0x458]
lea rcx, [0x1400f3bec]
mov r8d, 3
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400750f9
mov byte [rsp + 0x4e], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._xup
mov r8d, 4
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075123
mov byte [rsp + 0x41], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._axup
mov r8d, 5
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x14007514d
mov byte [rsp + 0x41], 0x21
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._hup
mov r8d, 4
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075177
mov byte [rsp + 0x42], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._ahup
mov r8d, 5
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400751a1
mov byte [rsp + 0x42], 0x21
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._gpt
mov r8d, 4
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400751cb
mov byte [rsp + 0x4d], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._mbr
mov r8d, 4
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400751f8
mov byte [rsp + 0xd4], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._cmp
mov r8d, 4
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075225
mov byte [rsp + 0x91], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, [0x1400eca20]
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075252
mov byte [rsp + 0xc4], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, [0x1400f3bb0]
mov r8d, 3
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x14007527f
mov byte [rsp + 0xcd], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._lskip
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400752a9
or byte [rsp + 0x73], 0x40
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._locku
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
jne 0x14007543a
mov r11, qword [rsp + 0x458]
lea r8d, [rdx + 7]
lea rcx, str._locku:
mov rdx, r11
call fcn.14004fdfc
xor edx, edx
cmp al, dl
je 0x1400752f9
mov byte [rsp + 0x4c], 3
add r11, 2
jmp 0x14007531d
lea rcx, str._lock:
mov r8d, 6
mov rdx, r11
call fcn.14004fdfc
xor edx, edx
cmp al, dl
je 0x1400753f3
mov byte [rsp + 0x4c], r15b
add r11, 0xc
mov qword [rsp + 0x458], r11
movzx ecx, word [r11]
cmp cx, dx
je 0x14007539f
mov r9d, 9
cmp r9w, cx
ja 0x140075344
cmp cx, 0xd
jbe 0x14007539f
mov r8d, 0x20
cmp r8w, cx
je 0x14007539f
lea eax, [rcx - 0x30]
cmp ax, r9w
jbe 0x14007539f
mov qword [rsp + 0xf0], r11
cmp r9w, cx
ja 0x14007536d
cmp cx, 0xd
jbe 0x14007538a
cmp r8w, cx
je 0x14007538a
add r11, 2
mov qword [rsp + 0x458], r11
mov cx, word [r11]
cmp cx, dx
je 0x1400753c9
jmp 0x140075361
cmp word [r11], dx
je 0x1400753c9
mov word [r11], dx
add qword [rsp + 0x458], 2
jmp 0x1400753c9
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x458]
call fcn.14008a3ec
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x458]
call fcn.14008a3ec
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
xor edx, edx
mov rax, qword [rsp + 0x458]
cmp word [rax], dx
je 0x140075c40
mov ebx, 8
jmp 0x140074f3b
lea rdx, [rsp + 0x458]
lea rcx, str._lock
mov r8d, 5
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x14007541a
mov byte [rsp + 0x4c], r15b
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._lockx
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075441
mov byte [rsp + 0x4c], 3
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._lock_
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075477
or rax, 0xffffffffffffffff
mov byte [rsp + 0x4c], 0xf0
mov qword [rsp + 0xb8], rax
jmp 0x1400753d8
mov r11, qword [rsp + 0x458]
lea rcx, [0x1400f3b6c]
mov r8d, 4
mov rdx, r11
call fcn.14004fdfc
xor ecx, ecx
cmp al, cl
je 0x1400754d9
lea rax, [r11 + 8]
lea r9d, [rcx + 0x3d]
lea r10d, [rcx + 9]
cmp word [rax], cx
je 0x1400755a1
cmp r9w, word [rax]
je 0x1400755a1
cmp r10w, word [rax]
ja 0x1400754c9
cmp word [rax], 0xd
jbe 0x1400755a1
mov r8d, 0x20
cmp r8w, word [rax]
je 0x1400755a7
lea rcx, str._pbr
mov r8d, 4
mov rdx, r11
call fcn.14004fdfc
xor edx, edx
lea r10d, [rdx + 9]
cmp al, dl
je 0x140075533
lea rax, [r11 + 8]
lea r9d, [rdx + 0x3d]
cmp word [rax], dx
je 0x14007563f
cmp r9w, word [rax]
je 0x14007563f
cmp r10w, word [rax]
ja 0x140075523
cmp word [rax], 0xd
jbe 0x14007563f
mov r8d, 0x20
cmp r8w, word [rax]
je 0x140075645
lea rcx, str._alignend
mov r8d, r10d
mov rdx, r11
call fcn.14004fdfc
xor edx, edx
cmp al, dl
je 0x1400757a6
lea rbx, [r11 + 0x12]
lea r9d, [rdx + 0x3d]
lea r8d, [rdx + 9]
cmp word [rbx], dx
je 0x140075580
cmp r9w, word [rbx]
je 0x140075580
cmp r8w, word [rbx]
ja 0x140075572
cmp word [rbx], 0xd
jbe 0x140075580
mov eax, 0x20
cmp ax, word [rbx]
jne 0x1400757a1
mov qword [rsp + 0x458], rbx
movzx edi, word [rbx]
cmp r9w, di
je 0x140075707
mov rax, 0xfffffffffffffffe
jmp 0x14007574a
mov r8d, 0x20
mov qword [rsp + 0x458], rax
mov r12, rcx
mov qword [rsp + 0x1c8], rcx
cmp r9w, word [rax]
je 0x1400755d4
lea r14, [0x1400f3b50]
mov qword [rsp + 0x270], r14
jmp 0x1400753c9
add rax, 2
lea rcx, [rsp + 0x458]
mov qword [rsp + 0x458], rax
call fcn.14004ea3c
xor edx, edx
mov r14, qword [rax]
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x270], r14
movzx ecx, word [rax]
cmp cx, dx
je 0x1400753c9
cmp r10w, cx
ja 0x14007561a
cmp cx, 0xd
jbe 0x14007562e
cmp r8w, cx
je 0x14007562e
add rax, 2
mov qword [rsp + 0x458], rax
jmp 0x140075602
cmp word [rax], dx
je 0x1400753c9
mov word [rax], dx
jmp 0x140075394
mov r8d, 0x20
mov qword [rsp + 0x458], rax
movzx ecx, word [rax]
mov r14, rdx
mov qword [rsp + 0x270], rdx
cmp r9w, cx
je 0x1400756a5
lea r12, [0x1400e9d50]
mov qword [rsp + 0x1c8], r12
jmp 0x14007569b
cmp r10w, cx
ja 0x140075682
cmp cx, 0xd
jbe 0x1400753c9
cmp r8w, cx
je 0x1400753c9
add rax, 2
mov qword [rsp + 0x458], rax
mov cx, word [rax]
cmp cx, dx
jne 0x140075672
jmp 0x1400753c9
add rax, 2
lea rcx, [rsp + 0x458]
mov qword [rsp + 0x458], rax
call fcn.14004ea3c
xor edx, edx
mov r12, qword [rax]
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x1c8], r12
movzx ecx, word [rax]
cmp cx, dx
je 0x1400753c9
cmp r10w, cx
ja 0x1400756ef
cmp cx, 0xd
jbe 0x14007562e
cmp r8w, cx
je 0x14007562e
add rax, 2
mov qword [rsp + 0x458], rax
jmp 0x1400756d3
lea rcx, [rbx + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r8w
ja 0x14007575a
mov qword [rsp + 0xe8], rcx
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xe8]
call fcn.14005ba04
mov rax, qword [rsp + 0x1d0]
xor edx, edx
lea rcx, [rdx - 2]
cmp rax, rdx
cmovle rax, rcx
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x268], rax
cmp di, dx
je 0x14007578b
mov eax, 0x20
lea ecx, [rax - 0x17]
cmp cx, di
ja 0x140075772
cmp di, 0xd
jbe 0x14007578b
cmp ax, di
je 0x14007578b
add rbx, 2
mov qword [rsp + 0x458], rbx
mov di, word [rbx]
cmp di, dx
jne 0x140075767
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
mov edi, dword [rsp + 0x64]
jmp 0x1400753d6
mov ebx, 8
lea rcx, str._align
mov r8d, 6
mov rdx, r11
call fcn.14004fdfc
xor edx, edx
cmp al, dl
je 0x1400757f0
lea rax, [r11 + 0xc]
lea r9d, [rdx + 0x3d]
lea r11d, [rdx + 9]
cmp word [rax], dx
je 0x140075821
cmp r9w, word [rax]
je 0x140075821
cmp r11w, word [rax]
ja 0x1400757e4
cmp word [rax], 0xd
jbe 0x140075821
mov r10d, 0x20
cmp r10w, word [rax]
je 0x140075827
lea rdx, [rsp + 0x458]
lea rcx, str._clear
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x1400758cd
mov byte [rsp + 0xd5], r15b
jmp 0x1400753d8
mov r10d, 0x20
mov r8, rax
jmp 0x140075842
cmp r11w, cx
ja 0x140075838
cmp cx, 0xd
jbe 0x140075852
cmp r10w, cx
je 0x140075852
add rax, 2
mov qword [rsp + 0x458], rax
movzx ecx, word [rax]
cmp cx, dx
jne 0x14007582c
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
cmp r9w, word [r8]
je 0x14007587e
or rax, 0xffffffffffffffff
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x160], rax
jmp 0x1400753d6
lea rcx, [r8 + 2]
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r11w
ja 0x1400753d6
mov qword [rsp + 0xe8], rcx
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0xe8]
call fcn.14005ba04
mov rcx, qword [rsp + 0x160]
xor eax, eax
cmp rcx, rax
mov qword [rsp + 0x1f8], rcx
jg 0x1400753d6
jmp 0x140075865
lea rdx, [rsp + 0x458]
lea rcx, [0x1400ed034]
mov r8d, 3
call fcn.140058710
xor edx, edx
cmp al, dl
jne 0x140075c33
lea r8d, [rdx + 4]
lea rcx, str._del
lea rdx, [rsp + 0x458]
call fcn.140058710
xor edx, edx
cmp al, dl
jne 0x140075c33
lea r8d, [rdx + 4]
lea rcx, str._raw
lea rdx, [rsp + 0x458]
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075942
mov byte [rsp + 0x68], r15b
or edi, 0x20
mov dword [rsp + 0x64], edi
jmp 0x1400753d8
mov r11, qword [rsp + 0x458]
lea rcx, str._swap:
mov r8d, 6
mov rdx, r11
call fcn.14004fdfc
xor ecx, ecx
cmp al, cl
je 0x14007599a
add r11, 0xc
lea rdx, [rsp + 0x9c]
lea rcx, [rsp + 0x458]
mov qword [rsp + 0x458], r11
call fcn.1400640cc
xor edx, edx
cmp eax, edx
jl 0x14007685e
mov byte [rsp + 0x61], r15b
jmp 0x1400753d8
lea rcx, str._CHS
mov r8d, 5
mov rdx, r11
call fcn.14004fdfc
xor r9d, r9d
cmp al, r9b
je 0x140075ac2
lea rcx, [rsp + 0x458]
add r11, 0xa
mov qword [rsp + 0x458], r11
call fcn.14004ea3c
mov rcx, qword [rsp + 0x458]
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0x118], rcx
cmp ax, r9w
je 0x140075a1e
lea edx, [r9 + 0x20]
lea r11d, [r9 + 9]
cmp r11w, ax
ja 0x140075a04
cmp ax, 0xd
jbe 0x140075a1e
cmp dx, ax
je 0x140075a1e
add rcx, 2
mov qword [rsp + 0x458], rcx
mov ax, word [rcx]
cmp ax, r9w
jne 0x1400759f8
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
movzx ecx, word [r8]
mov eax, 9
sub cx, 0x30
cmp cx, ax
ja 0x140075a5a
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x118]
call fcn.14005ba04
mov r8, qword [rsp + 0x118]
mov ebx, 0x3a
cmp bx, word [r8]
jne 0x1400753d6
add r8, 2
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x118], r8
call fcn.14005ba04
mov r8, qword [rsp + 0x118]
cmp bx, word [r8]
jne 0x1400753d6
add r8, 2
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x118], r8
call fcn.14005ba04
jmp 0x1400753d6
lea rcx, str._IMG
mov r8d, 5
mov rdx, r11
call fcn.14004fdfc
xor ecx, ecx
cmp al, cl
jne 0x140075c40
lea r8d, [rcx + 6]
lea rcx, str._SKIP
mov rdx, r11
call fcn.14004fdfc
xor ecx, ecx
cmp al, cl
je 0x140075b43
lea rcx, [rsp + 0x458]
add r11, 0xc
mov qword [rsp + 0x458], r11
call fcn.14004ea3c
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x458]
mov dword [rsp + 0x198], 0x42
call fcn.1400640cc
mov al, byte [rsp + 0x198]
mov byte [rsp + 0x75], al
jmp 0x1400753d6
lea rcx, str._iv
mov r8d, 4
mov rdx, r11
call fcn.14004fdfc
xor ecx, ecx
cmp al, cl
je 0x140075b83
add r11, rbx
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x458]
mov qword [rsp + 0x458], r11
call fcn.1400640cc
jmp 0x1400753d6
lea rdx, [rsp + 0x458]
lea rcx, str._cdrom
mov r8d, 6
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075baf
mov dword [rsp + 0x124], ebx
jmp 0x1400753d8
lea rdx, [rsp + 0x458]
lea rcx, str._floppy
mov r8d, 7
call fcn.140058710
xor edx, edx
cmp al, dl
je 0x140075bdf
mov dword [rsp + 0x124], 0x10
jmp 0x1400753d8
mov rcx, qword [rsp + 0x458]
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x140075c40
mov r8d, 0x20
lea r11d, [r8 - 0x17]
cmp r11w, ax
ja 0x140075c10
cmp ax, 0xd
jbe 0x1400753c9
cmp r8w, ax
je 0x1400753c9
add rcx, 2
mov qword [rsp + 0x458], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x140075c00
jmp 0x1400753c9
mov byte [rsp + 0x150], r15b
jmp 0x1400753d8
mov rcx, qword [rsp + 0x268]
mov r8, qword [rsp + 0x1f8]
mov rax, 0xfffffffffffffffe
cmp rcx, rax
jne 0x140075c6e
mov rcx, r8
cmp r8, 0xfffffffffffffff7
mov rax, 0xffffffffffffffff
cmove rcx, rax
mov rdx, qword [rsp + 0x130]
mov r9, qword [rsp + 0x138]
mov qword [rsp + 0x260], rdx
mov qword [rsp + 0x258], r9
cmp r8, 0xfffffffffffffff7
jne 0x140075d1a
mov rdi, qword [rsp + 0xf8]
mov ebx, dword [rsp + 0x9c]
mov qword [rsp + 0x238], rdi
mov dword [rsp + 0xd0], ebx
mov r8, r15
mov qword [rsp + 0x1f8], r15
cmp rcx, 0xfffffffffffffff7
mov edi, 4
lea rdx, [rsp + 0x458]
cmove rcx, r8
mov r8d, edi
mov qword [rsp + 0x268], rcx
lea rcx, [0x1400f3af8]
call fcn.140058710
xor ebx, ebx
cmp al, bl
je 0x140075e84
lea rdx, [rsp + 0x458]
lea rcx, str.disk
mov r8d, edi
call fcn.140058710
cmp al, bl
je 0x140075d8d
mov bpl, r15b
jmp 0x140075e7d
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x238], rax
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0xd0], eax
jmp 0x140075cc1
lea rdx, str.21:INDATA
lea rcx, [rsp + 0x468]
call fcn.14006016c
mov rdx, qword [rsp + 0x458]
lea rcx, [rsp + 0x468]
call fcn.140056108
mov rdx, qword [rsp + 0x468]
mov rcx, qword [rsp + 0x450]
call fcn.1400425e4
lea rcx, [rsp + 0x468]
mov r14, rax
call fcn.14004ea6c
jmp 0x14007a631
lea rdx, [rsp + 0x458]
lea rcx, str.part
mov r8d, edi
call fcn.140058710
cmp al, bl
je 0x140075db0
mov bpl, 2
jmp 0x140075e7d
lea rdx, [rsp + 0x458]
lea rcx, [0x1400f3ad0]
mov r8d, 3
call fcn.140058710
cmp al, bl
je 0x140075dd6
mov bpl, 3
jmp 0x140075e7d
lea rdx, [rsp + 0x458]
lea rcx, str.cdrom
mov r8d, 5
call fcn.140058710
cmp al, bl
je 0x140075e04
mov bpl, dil
mov dword [rsp + 0x124], 8
jmp 0x140075e7d
lea rdx, [rsp + 0x458]
lea rcx, str.floppy
mov r8d, 6
call fcn.140058710
cmp al, bl
je 0x140075e32
mov bpl, 5
mov dword [rsp + 0x124], 0x10
jmp 0x140075e7d
lea rdx, [rsp + 0x458]
lea rcx, str.parent
mov r8d, 6
call fcn.140058710
cmp al, bl
je 0x140075e55
mov bpl, 6
jmp 0x140075e7d
lea rdx, [rsp + 0x458]
lea rcx, str.volume
mov r8d, 6
call fcn.140058710
movzx ebp, bpl
cmp al, bl
mov eax, 7
cmovne ebp, eax
mov dword [rsp + 0x104], ebp
lea rdx, [rsp + 0x458]
lea rcx, str.init
mov r8d, edi
mov byte [rsp + 0x40], bl
call fcn.140058710
cmp al, bl
je 0x140075eb8
mov byte [rsp + 0x43], r15b
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x468], r15d
lea rdx, [rsp + 0x458]
lea rcx, str.update
mov r8d, 6
call fcn.140058710
cmp al, bl
je 0x140075eeb
mov byte [rsp + 0x40], r15b
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x468], r15d
lea rdx, [rsp + 0x458]
lea rcx, str.xupdate
mov r8d, 7
call fcn.140058710
mov edi, 0x20
cmp al, bl
je 0x140075f23
mov byte [rsp + 0x40], dil
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x468], r15d
lea rdx, [rsp + 0x458]
lea rcx, str.hupdate
mov r8d, 7
call fcn.140058710
cmp al, bl
je 0x140075f56
mov byte [rsp + 0x40], 0x10
mov esi, r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x468], r15d
mov r8, qword [rsp + 0x458]
mov rdx, r8
movzx eax, word [r8]
cmp ax, bx
je 0x140075f94
mov ecx, 9
cmp cx, ax
ja 0x140075f7a
cmp ax, 0xd
jbe 0x140075f94
cmp di, ax
je 0x140075f94
add r8, 2
mov qword [rsp + 0x458], r8
mov ax, word [r8]
cmp ax, bx
jne 0x140075f6f
sub r8, rdx
lea rcx, [rsp + 0x220]
sar r8, 1
call fcn.140056234
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
mov r8, qword [rsp + 0x458]
mov edx, 0x61
movzx ecx, word [r8]
lea r9d, [rdx + 0x1f]
movzx eax, cx
or ax, di
cmp dx, ax
jne 0x14007600b
mov dword [rsp + 0x100], r9d
cmp cx, bx
je 0x140076054
lea eax, [rdx - 0x58]
cmp ax, cx
ja 0x140075fef
cmp cx, 0xd
jbe 0x140076054
cmp di, cx
je 0x140076054
add r8, 2
mov qword [rsp + 0x458], r8
mov cx, word [r8]
cmp cx, bx
jne 0x140075fe4
jmp 0x140076054
mov eax, 0x2d
cmp ax, cx
jne 0x140076054
movzx eax, word [r8 + 2]
or ax, di
cmp dx, ax
jne 0x140076054
mov word [rsp + 0x100], bx
mov eax, 9
cmp ax, cx
ja 0x14007603a
cmp cx, 0xd
jbe 0x140076054
cmp di, cx
je 0x140076054
add r8, 2
mov qword [rsp + 0x458], r8
mov cx, word [r8]
cmp cx, bx
jne 0x14007602f
mov eax, 0xb9e5
lea rdi, [0x140107d70]
mov dword [rsp + 0x170], 0xebd0a0a2
mov word [rsp + 0x174], ax
mov eax, 0x4433
mov rcx, rdi
mov word [rsp + 0x176], ax
xor eax, eax
mov byte [rsp + 0x178], 0x87
mov dword [rsp + 0x244], eax
mov dword [rsp + 0x248], eax
mov dword [rsp + 0x24c], eax
lea rax, str.MS_Basic_Data
mov byte [rsp + 0x179], 0xc0
mov byte [rsp + 0x17a], 0x68
mov byte [rsp + 0x17b], 0xb6
mov byte [rsp + 0x17c], 0xb7
mov byte [rsp + 0x17d], 0x26
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0x17e], 0x99
mov byte [rsp + 0x17f], 0xc7
mov dword [rsp + 0x240], ebx
mov qword [rsp + 0x290], rbx
mov dword [rsp + 0x198], ebx
mov dword [rsp + 0x208], ebx
mov dword [rsp + 0x280], ebx
mov dword [rsp + 0x148], ebx
mov dword [rsp + 0x230], ebx
mov dword [rsp + 0x218], ebx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov bl, byte [rsp + 0x4d]
xor eax, eax
lea rcx, [rsp + 0x458]
cmp bl, al
jne 0x1400761a3
lea rdx, [rsp + 0xd8]
call fcn.1400640cc
mov rcx, qword [rsp + 0x458]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
cmp r8w, word [rcx]
jne 0x140076193
lea rdx, [rcx + 2]
movzx eax, word [rdx]
sub ax, 0x30
cmp ax, r10w
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0xc0], eax
jbe 0x1400761ef
mov byte [rsp + 0xc5], r15b
mov rcx, rdx
mov qword [rsp + 0x458], rdx
jmp 0x1400761ef
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0xc0], eax
jmp 0x1400761ef
lea rdx, [rsp + 0x170]
xor r8d, r8d
call fcn.140065ff0
mov rbx, rax
mov qword [rsp + 0x280], rax
or rax, 0xffffffffffffffff
cmp ebx, eax
jne 0x1400761d9
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov r14, rax
jmp 0x14007a631
mov rcx, qword [rsp + 0x458]
mov bl, byte [rsp + 0x4d]
mov r8d, 0x2d
lea r10d, [r8 - 0x24]
mov eax, 0x2b
cmp ax, word [rcx]
jne 0x14007620e
mov al, byte [rcx]
add rcx, 2
mov byte [rsp + 0x90], al
mov qword [rsp + 0x458], rcx
movzx eax, word [rcx]
cmp r8w, ax
jne 0x140076252
xor edx, edx
lea r9d, [rdx + 0x20]
cmp r10w, ax
ja 0x140076229
cmp ax, 0xd
jbe 0x140076243
cmp r9w, ax
je 0x140076243
add rcx, 2
mov qword [rsp + 0x458], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x14007621d
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
jmp 0x140076288
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x458]
call fcn.14005bb68
mov r8d, 0x2d
mov dword [rsp + 0x230], eax
mov rax, qword [rsp + 0x1b8]
lea r10d, [r8 - 0x24]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x458]
mov ecx, 0x40
mov byte [rsp + 0xd6], r15b
cmp cx, word [rax]
jne 0x1400762b9
add rax, 2
xor edx, edx
mov byte [rsp + 0xd6], dl
mov qword [rsp + 0x458], rax
jmp 0x1400762bb
xor edx, edx
movzx ecx, word [rax]
cmp r8w, cx
jne 0x1400762ff
mov r8d, 0x20
cmp r10w, cx
ja 0x1400762d6
cmp cx, 0xd
jbe 0x1400762f0
cmp r8w, cx
je 0x1400762f0
add rax, 2
mov qword [rsp + 0x458], rax
mov cx, word [rax]
cmp cx, dx
jne 0x1400762ca
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
jmp 0x14007632b
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x458]
call fcn.14005bb68
mov dword [rsp + 0x218], eax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0xa8], rax
xor edx, edx
cmp bl, dl
je 0x14007636f
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x458]
xor r8d, r8d
call fcn.140065ff0
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x458]
mov qword [rsp + 0x148], rax
call fcn.14005ba04
xor edx, edx
mov dword [rsp + 0x198], eax
mov rcx, qword [rsp + 0x458]
mov qword [rsp + 0x2a0], rdx
mov r8d, 0x2d
movzx eax, word [rcx]
cmp r8w, ax
jne 0x1400763c0
mov r8d, 0x20
lea r9d, [r8 - 0x17]
cmp r9w, ax
ja 0x1400763a4
cmp ax, 0xd
jbe 0x14007640f
cmp r8w, ax
je 0x14007640f
add rcx, 2
mov qword [rsp + 0x458], rcx
mov ax, word [rcx]
cmp ax, dx
jne 0x140076398
jmp 0x14007640f
cmp bl, dl
je 0x14007640f
cmp ax, dx
je 0x14007640f
mov qword [rsp + 0x298], rcx
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x298]
xor r8d, r8d
call fcn.1400236d0
mov rbx, qword [rsp + 0x298]
mov rax, qword [rsp + 0x2a0]
xor edx, edx
mov dword [rsp + 0x208], r15d
mov qword [rsp + 0xe8], rbx
mov word [rbx + rax*2], dx
mov byte [rsp + 0x71], dl
mov byte [rsp + 0x98], dl
mov byte [rsp + 0x89], dl
cmp bpl, r15b
je 0x140076439
mov eax, dword [rsp + 0x78]
mov ecx, 4
cmp bpl, cl
cmovl eax, edx
mov dword [rsp + 0x78], eax
mov rbp, qword [rsp + 0x220]
lea rcx, str._img
mov r8d, 5
mov rdx, rbp
mov r11, rbp
mov qword [rsp + 0x458], rbp
call fcn.14004fdfc
mov ebx, 0x28
xor r9d, r9d
lea ecx, [rbx + 2]
lea r10d, [rbx - 5]
cmp al, r9b
je 0x1400765a4
lea r8, [rbp + 0xa]
mov qword [rsp + 0x458], r8
mov rdx, r8
cmp cx, word [r8]
jne 0x14007652a
lea rax, [r8 + 2]
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x138], rax
call fcn.14005bb68
mov rdx, qword [rsp + 0x138]
lea ecx, [rbx + 2]
mov byte [rsp + 0x89], r15b
cmp cx, word [rdx]
jne 0x140076508
add rdx, 2
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x138], rdx
lea rdx, [rsp + 0x278]
call fcn.14005bb68
mov rdx, qword [rsp + 0x138]
lea ecx, [rbx + 2]
mov byte [rsp + 0x89], 0x11
cmp cx, word [rdx]
jne 0x140076508
add rdx, 2
mov rax, qword [rsp + 0x1e0]
xor r9d, r9d
mov r8, rdx
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x458], rdx
lea r10d, [r9 + 0x23]
movzx eax, word [r8]
cmp ax, r9w
je 0x14007656a
mov ecx, 0x20
lea r11d, [rcx - 0x17]
cmp r11w, ax
ja 0x140076549
cmp ax, 0xd
jbe 0x14007656a
cmp cx, ax
je 0x14007656a
cmp ax, r10w
je 0x14007656a
add r8, 2
mov qword [rsp + 0x458], r8
mov ax, word [r8]
cmp ax, r9w
jne 0x14007653d
sub r8, rdx
sar r8, 1
cmp r8, r9
jle 0x14007658d
lea rcx, [rsp + 0x210]
call fcn.140056234
mov dword [rsp + 0x78], 0xfffc0000
xor r9d, r9d
lea rcx, [rsp + 0x458]
call fcn.14004ea3c
mov r11, qword [rsp + 0x458]
jmp 0x140076608
lea rcx, [0x1400f3a64]
mov r8d, 2
mov rdx, rbp
call fcn.14004fdfc
xor r9d, r9d
cmp al, r9b
je 0x1400765cd
lea r11, [rbp + 4]
mov qword [rsp + 0x458], r11
cmp word [r11], 0x30
jb 0x1400765db
cmp word [r11], 0x39
jbe 0x1400765e1
cmp bx, word [r11]
jne 0x1400765fe
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x458]
call fcn.1400a45f8
mov r11, qword [rsp + 0x458]
xor r9d, r9d
cmp word [rbp], r9w
setne byte [rsp + 0x71]
mov rax, qword [rsp + 0x1a8]
shl rax, 9
mov qword [rsp + 0x118], rax
mov eax, 0x23
cmp ax, word [r11]
je 0x140076636
mov eax, 0x3a
cmp ax, word [r11]
jne 0x140076733
add r11, 2
lea rcx, [0x1400f3a60]
mov r8d, 2
mov rdx, r11
mov qword [rsp + 0x458], r11
call fcn.14004fdfc
lea rcx, [0x1400f3a5c]
mov r8d, 2
mov rdx, r11
mov bl, al
mov byte [rsp + 0x44], al
call fcn.14004fdfc
mov cl, bl
or cl, al
mov byte [rsp + 0x60], al
sete byte [rsp + 0x98]
xor r9d, r9d
cmp bl, r9b
jne 0x1400766aa
lea ecx, [r9 + 0x2b]
cmp cx, word [r11]
jne 0x1400766aa
mov cl, r15b
add r11, 2
mov dword [rsp + 0x140], ecx
mov qword [rsp + 0x458], r11
cmp al, r9b
jne 0x1400766e1
mov eax, 0x40
cmp ax, word [r11]
je 0x1400766d0
mov eax, 0x2d
cmp ax, word [r11]
je 0x1400766d0
mov eax, 0x3d
cmp ax, word [r11]
jne 0x1400766e1
or dword [rsp + 0x64], 2
add r11, 2
mov qword [rsp + 0x458], r11
cmp word [r11], 0x30
jb 0x1400766ef
cmp word [r11], 0x39
jbe 0x1400766fa
mov eax, 0x28
cmp ax, word [r11]
jne 0x140076733
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0x458]
call fcn.1400640cc
mov esi, dword [rsp + 0x468]
xor r9d, r9d
cmp eax, r9d
mov dword [rsp + 0x48], esi
jle 0x140076733
mov byte [rsp + 0x74], r15b
cmp esi, r9d
jne 0x140076736
mov byte [rsp + 0x44], r15b
jmp 0x140076738
cmp esi, r9d
jg 0x14007674f
cmp byte [rsp + 0x104], r9b
jg 0x14007674f
cmp r14, r9
jne 0x14007674f
mov esi, r9d
cmp r12, r9
je 0x140076752
mov esi, r15d
mov ebx, dword [rsp + 0x78]
mov dword [rsp + 0xa0], ebx
mov dword [rsp + 0x468], ebx
cmp byte [rsp + 0x4c], r9b
je 0x140076790
cmp esi, r9d
jne 0x140076790
cmp word [rbp], r9w
jne 0x140076790
mov eax, 0xfffc0000
mov dword [rsp + 0x78], eax
mov ebx, eax
mov dword [rsp + 0xa0], eax
mov dword [rsp + 0x468], eax
mov r12, qword [rsp + 0x210]
mov r8d, dword [rsp + 0x78]
mov word [rsp + 0x300], r9w
cmp word [r12], r9w
lea r14, [rsp + 0x300]
lea rdx, str..PhysicalDrive_d
cmovne r14, r12
lea rcx, [rsp + 0x300]
mov qword [rsp + 0x138], r14
call qword [sym.imp.USER32.dll_wsprintfW]
xor r8d, r8d
cmp qword [rsp + 0x1a8], r8
jne 0x140076831
lea rcx, str..PhysicalDrive
mov r8d, 0x11
mov rdx, r14
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
xor r8d, r8d
cmp eax, r8d
jne 0x140076831
lea rax, [r14 + 0x22]
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0x1b8]
mov qword [rsp + 0x1b8], rax
call fcn.140059efc
mov ebx, dword [rsp + 0x468]
mov dword [rsp + 0xa0], ebx
xor r8d, r8d
mov r10b, byte [rsp + 0x40]
cmp r10b, r8b
jne 0x140076849
cmp byte [rsp + 0x41], r8b
jne 0x140076849
cmp byte [rsp + 0x42], r8b
je 0x14007686a
cmp dword [rsp + 0x78], r8d
jge 0x14007686a
cmp ebx, r8d
jge 0x14007686a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, 0xffffffff80070057
jmp 0x14007a631
mov rax, r8
or rdx, 0xffffffffffffffff
mov rbx, r8
mov qword [rsp + 0x168], rax
mov al, byte [rsp + 0x4c]
mov r14, 0xffffffff80070057
mov qword [rsp + 0x1c0], rbx
mov dword [rsp + 0xd8], edx
mov qword [rsp + 0x228], r14
mov byte [rsp + 0x468], r8b
cmp al, r8b
je 0x1400769b3
mov r10d, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0xf0]
cmp r10d, r8d
jge 0x1400768d7
cmp qword [rsp + 0xb8], rdx
jle 0x1400768d7
cmp rcx, r8
je 0x1400769ae
cmp rcx, r8
je 0x14007692f
mov r9d, 0x2a
cmp r9w, word [rcx]
jne 0x14007692f
movsx edx, al
mov ecx, r10d
and edx, 2
shr edx, 1
call fcn.140066214
mov r10d, dword [rsp + 0xa0]
xor r8d, r8d
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x168], rax
lea eax, [r8 + 0x20]
or byte [0x140107167], al
mov byte [rsp + 0x468], al
mov al, byte [rsp + 0x4c]
or rdx, 0xffffffffffffffff
mov rcx, r8
cmp r10d, r8d
jge 0x140076943
cmp qword [rsp + 0xb8], rdx
jle 0x140076943
cmp rcx, r8
je 0x1400769ae
mov r8, qword [rsp + 0x1e8]
mov rdx, qword [rsp + 0xb8]
movsx r9d, al
and r9d, 2
mov qword [rsp + 0x20], rcx
mov ecx, r10d
shr r9d, 1
call fcn.140006394
mov r10b, byte [rsp + 0x40]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x228], rax
or rax, 0xffffffffffffffff
cmp qword [rsp + 0xb8], rax
je 0x1400769a2
or byte [rsp + 0x468], 0x10
or byte [0x140107167], 0x10
xor r8d, r8d
jmp 0x1400769b3
xor r8d, r8d
mov byte [0x140107167], r8b
jmp 0x1400769b3
mov r10b, byte [rsp + 0x40]
movdqu xmm6, xmmword [rsp + 0x170]
movdqu xmm7, xmmword [rsp + 0x240]
cmp byte [rsp + 0x61], r8b
jbe 0x140076d2a
cmp byte [rsp + 0x4d], r8b
jne 0x140076d2a
cmp dword [rsp + 0x78], r8d
jge 0x1400769ed
cmp word [r12], r8w
je 0x140076d0f
mov eax, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0x48]
cmp eax, r8d
jle 0x140076a05
cmp eax, ecx
je 0x140076d0f
mov eax, 4
cmp ecx, eax
jg 0x140076d0f
cmp byte [rsp + 0x4f], 2
jl 0x140076d0f
mov rdx, qword [rsp + 0x138]
mov qword [rsp + 0x38], r8
mov dword [rsp + 0x30], 0x20000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r8
lea r9d, [rax - 1]
lea rcx, [rsp + 0x1c0]
mov r8d, 0xc0000000
call fcn.140003590
mov rbx, qword [rsp + 0x1c0]
xor r14d, r14d
cmp rbx, r14
jne 0x140076a78
lea rcx, [rsp + 0x468]
call fcn.1400533f0
jmp 0x14007a625
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.14005b8bc
lea rcx, [rsp + 0xf0]
mov edx, 0x600
mov dword [rsp + 0xd8], eax
call fcn.140055ddc
mov rsi, qword [rsp + 0xf0]
add rsi, 0x200
lea r9, [rsp + 0x8c]
mov r8d, 0x200
and rsi, 0xfffffffffffffe00
mov rcx, rbx
mov qword [rsp + 0x20], r14
lea r15, [rsi + 0x200]
mov qword [rsp + 0xf8], rsi
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, r14d
jne 0x140076b36
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, r14d
cmove eax, ecx
lea rcx, [rsp + 0xf0]
mov r14d, eax
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140076d1c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140076d1c
mov r8d, 0x200
mov rdx, r15
mov rcx, rsi
call fcn.14001a4c0
mov edx, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0x48]
mov eax, 1
mov r8d, 0x10
mov byte [r15 + 0x1fe], 0x55
sub edx, eax
sub ecx, eax
mov byte [r15 + 0x1ff], 0xaa
mov eax, edx
mov dword [rsp + 0xd0], edx
mov dword [rsp + 0x48], ecx
shl eax, 4
movsxd r14, eax
mov eax, ecx
shl eax, 4
movsxd rsi, eax
mov rax, qword [rsp + 0xf8]
lea rdx, [r14 + rax + 0x1be]
lea rcx, [rsi + r15 + 0x1be]
call fcn.14001a4c0
mov rax, qword [rsp + 0xf8]
lea rcx, [r14 + r15 + 0x1be]
lea rdx, [rsi + rax + 0x1be]
mov r8d, 0x10
call fcn.14001a4c0
mov rdx, qword [rsp + 0x118]
xor r8d, r8d
mov rcx, rbx
call fcn.14004fd5c
xor r14d, r14d
cmp eax, r14d
je 0x140076c27
lea rcx, [rsp + 0xf0]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140076c13
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, 1
jmp 0x14007a631
mov rcx, qword [rsp + 0xf8]
mov r10d, 0x200
mov rdx, r15
mov r8, r10
mov rsi, r14
mov qword [rsp + 0x168], r14
call fcn.14004ea9c
cmp eax, r14d
je 0x140076c94
lea r9, [rsp + 0x8c]
mov r8d, r10d
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, r14d
jne 0x140076c8c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, r14d
cmove eax, ecx
mov esi, eax
mov qword [rsp + 0x168], rsi
mov rcx, rbx
call fcn.1400532e8
mov cl, byte [rsp + 0x41]
mov r15b, byte [rsp + 0x42]
mov dl, byte [rsp + 0x4e]
mov al, r15b
or al, dl
or cl, al
mov al, r15b
or al, cl
mov byte [rsp + 0x41], cl
lea rcx, [rsp + 0xf0]
or al, dl
je 0x140076cda
mov esi, r14d
call fcn.14004ea6c
mov r14, qword [rsp + 0x168]
mov r10b, byte [rsp + 0x40]
xor r8d, r8d
jmp 0x14007925d
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140076cfe
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, rsi
jmp 0x14007a631
lea rcx, [rsp + 0x468]
call fcn.1400533f0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14007a631
mov r14, qword [rsp + 0x168]
cmp r10b, 0x10
jne 0x140076d47
mov eax, 0x20
test byte [rsp + 0x42], al
jne 0x140079258
cmp byte [rsp + 0x4c], r8b
je 0x140076da3
cmp esi, r8d
jne 0x140076da3
mov r15b, byte [rsp + 0x42]
cmp byte [rsp + 0x4e], r8b
jne 0x14007925d
mov dl, byte [rsp + 0x41]
cmp dl, r8b
jne 0x140079261
cmp r15b, r8b
jne 0x140079261
lea rcx, [rsp + 0x468]
call fcn.1400533f0
xor eax, eax
cmp rdi, rax
je 0x140076d96
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, qword [rsp + 0x228]
jmp 0x14007a631
lea rcx, [rsp + 0x50]
mov edx, 0x600
call fcn.140055ddc
mov rax, qword [rsp + 0x50]
mov r9, qword [rsp + 0x270]
add rax, 0x200
xor ebx, ebx
and rax, 0xfffffffffffffe00
mov qword [rsp + 0xf0], rax
add rax, 0x200
mov qword [rsp + 0x190], rax
cmp r9, rbx
jne 0x14007a180
mov r9, qword [rsp + 0x1c8]
cmp r9, rbx
jne 0x140079bbf
mov esi, dword [rsp + 0x104]
cmp sil, 6
je 0x140079a8a
cmp sil, r15b
je 0x14007996c
cmp sil, 2
je 0x14007991d
mov qword [rsp + 0x58], rbx
cmp sil, 3
je 0x140079809
lea eax, [rbx + 4]
cmp sil, al
je 0x140079712
lea r8d, [rbx + 5]
cmp sil, r8b
je 0x140079712
lea eax, [rbx + 7]
cmp sil, al
je 0x14007962b
cmp byte [rsp + 0x60], bl
je 0x140076e87
mov word [rsp + 0x100], bx
mov edx, ebx
mov dword [rsp + 0xc0], ebx
mov rcx, rbx
mov qword [rsp + 0xa8], rbx
mov rsi, rbx
mov qword [rsp + 0x80], rbx
mov eax, r8d
jmp 0x140076ea2
mov eax, dword [rsp + 0x48]
mov rsi, qword [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
mov edx, dword [rsp + 0xc0]
cmp byte [rsp + 0x44], bl
cmovne eax, r8d
mov r8d, dword [rsp + 0x150]
cmp r8b, bl
je 0x140076ede
mov word [rsp + 0x100], bx
mov edx, ebx
mov dword [rsp + 0xc0], ebx
mov rcx, rbx
mov qword [rsp + 0xa8], rbx
mov rsi, rbx
mov qword [rsp + 0x80], rbx
xor r9d, r9d
cmp byte [rsp + 0x71], bl
mov ebx, dword [rsp + 0xa0]
je 0x140076ef7
cmp ebx, r9d
jl 0x14007941d
cmp byte [rsp + 0x98], r9b
je 0x140076f0a
cmp eax, r9d
jl 0x14007941d
sub eax, r15d
mov byte [rsp + 0xcc], r9b
mov byte [rsp + 0xc6], r9b
mov dword [rsp + 0x48], eax
or rax, 0xffffffffffffffff
mov word [rsp + 0x94], r9w
mov byte [rsp + 0x61], r9b
mov byte [rsp + 0x8a], r9b
mov word [rsp + 0x144], r9w
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x1a0], rax
cmp byte [rsp + 0x4d], r9b
jne 0x140076f78
cmp edx, r9d
jne 0x140076f78
cmp rsi, r9
jne 0x140076f78
movzx r8d, r8b
cmp rcx, r9
cmove r8d, r15d
mov dword [rsp + 0x150], r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
cmp byte [rsp + 0xcd], al
je 0x140076fd5
cmp rsi, rax
jl 0x140076fd5
cmp qword [rsp + 0xa8], 0x11
jl 0x140076fd5
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x468]
mov r9d, 0x2200
mov edx, ebx
shl r8, 9
mov esi, r15d
mov dword [rsp + 0xb0], r15d
mov qword [rsp + 0x20], rax
call fcn.14005339c
xor eax, eax
jmp 0x140076fde
mov esi, eax
mov dword [rsp + 0xb0], eax
mov rdx, qword [rsp + 0x138]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x1c0]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rax
call fcn.140003590
mov rbx, qword [rsp + 0x1c0]
xor eax, eax
cmp rbx, rax
je 0x140079609
cmp esi, eax
je 0x140077068
cmp byte [rsp + 0x44], al
jne 0x140077068
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x1a8]
mov rcx, rbx
add rdx, rax
call fcn.140048a00
lea rcx, [rsp + 0x468]
call fcn.1400533f0
xor eax, eax
mov qword [rsp + 0x228], rax
mov r9d, 0x800
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call fcn.14005b8bc
mov cl, byte [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0xd8], eax
cmp cl, r8b
je 0x1400770af
lea rcx, [rsp + 0x58]
mov esi, r8d
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
mov r15b, byte [rsp + 0x42]
jmp 0x140076ccd
mov ecx, dword [rsp + 0xc0]
mov r14, r8
mov qword [rsp + 0x1f0], r8
cmp ecx, 0xff
jg 0x1400795cd
mov dl, byte [rsp + 0x44]
mov eax, dword [rsp + 0x48]
cmp dl, r8b
jne 0x140077124
cmp eax, r8d
jge 0x140077124
cmp qword [rsp + 0x80], r8
jge 0x1400795cd
cmp qword [rsp + 0xa8], r8
jge 0x1400795cd
cmp ecx, r8d
jge 0x1400795cd
or r9, 0xffffffffffffffff
mov ecx, r9d
mov qword [rsp + 0xa8], r9
mov qword [rsp + 0x80], r9
mov dword [rsp + 0xc0], ecx
jmp 0x140077128
or r9, 0xffffffffffffffff
mov qword [rsp + 0x130], r9
mov qword [rsp + 0x1e0], r9
mov qword [rsp + 0x1b8], r8
mov r9d, 4
mov qword [rsp + 0x1e8], r8
mov dword [rsp + 0xc8], eax
cmp dl, r8b
jne 0x14007716a
cmp byte [rsp + 0x60], r8b
jne 0x14007716a
cmp eax, r9d
jl 0x140077867
cmp byte [rsp + 0x4d], r8b
jne 0x140077867
cmp byte [rsp + 0x43], r8b
jne 0x140077867
mov esi, dword [rsp + 0x48]
cmp dl, r14b
mov eax, 5
cmovne esi, r9d
mov dword [rsp + 0x48], esi
cmp ecx, eax
je 0x14007724f
cmp ecx, 0xf
je 0x14007724f
lea rcx, [rsp + 0x128]
mov edx, 0x100000
mov dword [rsp + 0x9c], r14d
call fcn.140055ddc
mov rdx, qword [rsp + 0x128]
lea r8, [rsp + 0x9c]
mov rcx, rbx
call fcn.140053128
mov r15d, dword [rsp + 0x9c]
mov r10d, 4
mov r8, rax
mov qword [rsp + 0xb8], rax
mov al, byte [rsp + 0x44]
cmp al, r14b
jne 0x140077203
cmp r15d, esi
jge 0x140077203
cmp esi, r10d
jge 0x140077242
mov cl, byte [rsp + 0x60]
cmp al, r14b
jne 0x14007728a
cmp cl, r14b
jne 0x14007728a
lea eax, [rsi + 1]
mov dl, r14b
cmp eax, r10d
mov byte [rsp + 0x45], dl
jg 0x140077224
dec eax
jmp 0x14007722b
lea eax, [rax*4 - 0x10]
cmp eax, r14d
jle 0x140077242
cmp eax, r15d
jl 0x1400772cc
cmp esi, r10d
jle 0x1400772cc
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140077282
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r14
jmp 0x14007a1a7
mov dl, 1
mov byte [rsp + 0x45], dl
cmp cl, r14b
jne 0x1400772c3
cmp al, r14b
je 0x1400772cc
cmp dword [rsp + 0xc0], r14d
jl 0x140077242
cmp word [rsp + 0x100], r14w
mov eax, r14d
mov ecx, 0x80
cmovg ax, cx
mov word [rsp + 0x100], ax
jmp 0x1400772cc
cmp r15d, r10d
jle 0x140077242
cmp r15d, r10d
jle 0x1400772d9
lea r14d, [r15 - 4]
and r14d, 0xfffffffc
or rcx, 0xffffffffffffffff
xor r9d, r9d
mov esi, ecx
mov dword [rsp + 0xc8], ecx
cmp dl, r9b
jne 0x140077302
mov eax, dword [rsp + 0x48]
cmp eax, r10d
lea r14d, [rax*4 - 0x10]
jge 0x140077302
mov r14d, r9d
mov r11d, ecx
mov eax, r9d
lea rcx, [r8 + 0x50]
cmp byte [rcx], 5
je 0x140077316
cmp byte [rcx], 0xf
jne 0x140077319
mov r11d, eax
inc eax
add rcx, 0x90
cmp eax, r10d
jl 0x14007730c
cmp dl, r9b
je 0x140077335
cmp r11d, r9d
jl 0x140079448
mov r9d, 0x1ff
movsxd rax, r11d
lea rcx, [rax + rax*8]
add rcx, rcx
mov rax, qword [r8 + rcx*8 + 0x38]
cqo
and rdx, r9
lea r10, [rdx + rax]
mov rax, qword [r8 + rcx*8 + 0x40]
movsxd rcx, r14d
cqo
sar r10, 9
and rdx, r9
lea r9, [rcx + rcx*8]
lea r8, [rdx + rax]
xor eax, eax
add r9, r9
sar r8, 9
cmp byte [rsp + 0x60], al
je 0x1400774c7
xor esi, esi
mov r9d, esi
cmp r15d, 8
je 0x140077440
mov r11, qword [rsp + 0xb8]
lea eax, [r15 - 8]
mov r8, rsi
and eax, 0xfffffffc
movsxd rdx, eax
lea rax, [rdx + rdx*8]
add rax, rax
lea rcx, [r11 + rax*8 + 0x50]
lea eax, [rsi + 1]
cmp byte [rcx], 5
je 0x140077417
cmp byte [rcx], 0xf
je 0x140077417
add r8, rax
add r9d, eax
add rcx, 0x90
cmp r8, 4
jl 0x1400773b2
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007740f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x14007a1a7
lea rcx, [rdx + rdx*8]
add rcx, rcx
mov rax, qword [r11 + rcx*8 + 0x38]
cqo
and edx, 0x1ff
lea r10, [rdx + rax]
mov eax, dword [r11 + rcx*8 + 0x54]
sar r10, 9
sub r10, rax
cmp r9d, esi
jl 0x1400773cf
xor eax, eax
lea r8, [rsp + 0x2a8]
mov rcx, rbx
mov dword [rsp + 0x2ac], eax
mov dword [rsp + 0x2b0], eax
mov dword [rsp + 0x2b4], eax
mov rax, qword [rsp + 0x1a8]
mov dword [rsp + 0x2a8], esi
lea rdx, [r10 + rax]
call fcn.14005bd40
mov r15b, byte [rsp + 0x42]
mov r14, rsi
mov qword [rsp + 0x168], rsi
cmp r15b, sil
jne 0x1400774a1
cmp byte [rsp + 0x41], sil
jne 0x1400774a1
cmp byte [rsp + 0x4e], sil
je 0x14007948a
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
jmp 0x140076ccd
cmp r15d, 4
jg 0x1400774d8
mov dl, byte [rsp + 0x45]
mov esi, r11d
xor ecx, ecx
jmp 0x140077519
mov edx, eax
lea rax, [rcx + rcx*8]
mov rcx, qword [rsp + 0xb8]
add rax, rax
lea rcx, [rcx + rax*8 + 0x50]
mov eax, 4
cmp byte [rcx], 5
je 0x1400774fd
cmp byte [rcx], 0xf
jne 0x1400774ff
mov esi, edx
inc edx
add rcx, 0x90
cmp edx, eax
jl 0x1400774f3
mov dl, byte [rsp + 0x45]
xor ecx, ecx
cmp dl, cl
jne 0x140077519
add esi, r14d
cmp esi, ecx
jge 0x140077527
cmp byte [rsp + 0x44], cl
je 0x140079448
mov eax, ecx
cmp dl, cl
je 0x140077536
mov dword [rsp + 0xc8], ecx
jmp 0x140077586
mov rcx, qword [rsp + 0xb8]
mov edi, dword [rsp + 0xc8]
lea rcx, [rcx + r9*8 + 0x290]
cmp byte [rcx], 0
jne 0x140077556
test eax, eax
jne 0x140077561
cmp byte [rcx], 5
je 0x140077561
cmp byte [rcx], 0xf
cmovne edi, eax
inc eax
add rcx, 0x90
cmp eax, 4
jl 0x14007754d
mov dword [rsp + 0xc8], edi
xor ecx, ecx
lea rdi, [0x140107d70]
mov eax, dword [rsp + 0xc8]
cmp dl, cl
jne 0x140077592
cmp eax, ecx
jl 0x140079448
cmp byte [rsp + 0x44], cl
je 0x14007777d
cmp r14d, ecx
mov eax, r11d
cmovg eax, r14d
cdqe
lea rcx, [rax + rax*8]
mov rax, qword [rsp + 0xb8]
add rcx, rcx
mov rax, qword [rax + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov rdx, rax
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1b8], rax
mov eax, 4
cmp r15d, eax
jle 0x14007768a
xor eax, eax
cmp esi, eax
jge 0x14007768a
mov rcx, qword [rsp + 0xb8]
cmp byte [rcx + r9*8 + 0x50], al
je 0x1400794a6
lea eax, [r15 - 8]
and eax, 0xfffffffc
inc eax
cmp r15d, 8
cmovg r11d, eax
movsxd rax, r11d
mov r11d, 0x1ff
lea rax, [rax + rax*8]
add rax, rax
mov rax, qword [rcx + rax*8 + 0x38]
cqo
and rdx, r11
add rax, rdx
sar rax, 9
mov qword [rsp + 0x1b8], rax
mov rax, qword [rcx + r9*8 + 0x40]
add rax, qword [rcx + r9*8 + 0x38]
cqo
and rdx, r11
add rax, rdx
sar rax, 9
mov rdx, rax
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1e8], rax
sub r8, rdx
sub rax, r10
add r8, r10
mov qword [rsp + 0x130], rax
xor r9d, r9d
mov qword [rsp + 0x1e0], r8
jmp 0x1400776d1
xor r9d, r9d
cmp r14d, r9d
jle 0x1400776bb
mov rdx, qword [rsp + 0xb8]
mov rax, qword [rdx + rcx*8 + 0x40]
add rax, qword [rdx + rcx*8 + 0x38]
cqo
and edx, 0x1ff
add rdx, rax
sar rdx, 9
mov qword [rsp + 0x1f0], rdx
sub r8, rdx
mov qword [rsp + 0x1e8], rdx
mov qword [rsp + 0x1e0], r9
add r8, r10
cmp r8, r9
jle 0x140079448
mov rsi, qword [rsp + 0x80]
cmp byte [rsp + 0x90], r9b
je 0x1400776ef
add rsi, rdx
lea rax, [rdx + 1]
cmp rsi, rax
cmovle rsi, rax
sub r8, rsi
mov qword [rsp + 0x80], rsi
mov rsi, qword [rsp + 0xa8]
add r8, rdx
cmp rsi, r8
cmovg rsi, r8
cmp rsi, r9
mov qword [rsp + 0xa8], rsi
jl 0x140079448
cmp r14d, r9d
jle 0x14007774d
lea eax, [r15 - 1]
and eax, 0xfffffffc
cmp eax, 3
jg 0x14007773d
inc eax
jmp 0x140077749
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
inc eax
jmp 0x14007776c
and r15d, 0xfffffffc
cmp r15d, 3
jg 0x14007775d
lea eax, [r15 + 1]
jmp 0x14007776c
mov eax, r15d
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 4
mov r14, qword [rsp + 0x1f0]
mov dword [rsp + 0x48], eax
jmp 0x140077842
mov r9, qword [rsp + 0xb8]
movsxd rax, esi
mov r10d, 0x1ff
lea rcx, [rax + rax*8]
xor r14d, r14d
add rcx, rcx
mov r8, qword [r9 + rcx*8 + 0x38]
lea rax, [r8 + 0x200]
cqo
and rdx, r10
add rax, rdx
sar rax, 9
mov rsi, rax
mov qword [rsp + 0x1e8], rax
mov rax, qword [r9 + rcx*8 + 0x40]
mov rcx, qword [rsp + 0x80]
sub rax, 0x200
cqo
and rdx, r10
add rax, rdx
sar rax, 9
cmp byte [rsp + 0x90], r14b
je 0x1400777ef
add rcx, rsi
mov qword [rsp + 0x80], rcx
cmp rcx, r14
jle 0x140077803
cmp rcx, rsi
cmovle rcx, rsi
mov qword [rsp + 0x80], rcx
mov rsi, qword [rsp + 0xa8]
cmp rsi, r14
jle 0x140077828
cmp rsi, rax
cmovg rsi, rax
cmp rsi, r14
mov qword [rsp + 0xa8], rsi
jl 0x140077242
mov rax, r8
cqo
and rdx, r10
add rax, rdx
sar rax, 9
mov r14, rax
mov qword [rsp + 0x1f0], rax
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
mov esi, dword [rsp + 0xb0]
mov eax, dword [rsp + 0x48]
mov dl, byte [rsp + 0x44]
mov r15d, 1
xor r8d, r8d
mov ecx, 4
cmp eax, ecx
mov rcx, qword [rsp + 0x1a8]
setge byte [rsp + 0x88]
add r14, rcx
shl r14, 9
mov qword [rsp + 0x240], r14
cmp esi, r8d
je 0x1400778c2
cmp dl, r8b
je 0x1400778c2
mov rax, qword [rsp + 0x80]
lea rdx, [rcx + rax]
mov rcx, rbx
call fcn.140048a00
lea rcx, [rsp + 0x468]
call fcn.1400533f0
xor eax, eax
mov qword [rsp + 0x228], rax
mov rsi, qword [rsp + 0x190]
xor edx, edx
mov r8d, 0x200
mov rcx, rsi
call fcn.1400cc8d0
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14004fd5c
cmp rax, r14
jne 0x140079590
xor eax, eax
lea r9, [rsp + 0x8c]
mov r8d, 0x200
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rdx, qword [rsp + 0x190]
mov rcx, qword [rsp + 0xf0]
mov r8d, 0x200
mov esi, eax
call fcn.14001a4c0
xor eax, eax
cmp esi, eax
je 0x140079590
xor esi, esi
cmp byte [rsp + 0x43], sil
je 0x140077a18
cmp byte [rsp + 0x4d], sil
jne 0x140077a18
mov rsi, qword [rsp + 0x190]
mov rcx, rsi
call fcn.140053370
xor edx, edx
lea rcx, [rsi + 0x1be]
lea r8d, [rdx + 0x40]
call fcn.1400cc8d0
mov rcx, qword [rsp + 0xf0]
mov r11d, 0xaa55
mov r8d, 0x200
mov rdx, rsi
mov word [rsi + 0x1fe], r11w
call fcn.14004ea9c
xor r15d, r15d
cmp eax, r15d
je 0x1400779e9
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.14004fd5c
lea r9, [rsp + 0x8c]
mov r8d, 0x200
mov rdx, rsi
mov rcx, rbx
mov dword [rsp + 0x8c], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor esi, esi
mov r14, rsi
cmp eax, esi
sete r14b
mov qword [rsp + 0x168], r14
jmp 0x1400779f3
mov r14, qword [rsp + 0x168]
xor esi, esi
mov r15b, byte [rsp + 0x42]
mov al, r15b
or al, byte [rsp + 0x41]
or al, byte [rsp + 0x4e]
je 0x140079497
cmp dword [rsp + 0x78], esi
jl 0x140079497
jmp 0x1400774ae
cmp byte [rsp + 0x4f], sil
jne 0x140077a35
cmp byte [rsp + 0x74], sil
je 0x140077a48
mov eax, dword [rsp + 0x48]
cmp eax, r15d
jle 0x1400773dc
jmp 0x140077a39
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x74], sil
je 0x140077a48
cmp eax, esi
jl 0x1400773dc
mov rcx, rbx
call fcn.140052b68
lea rcx, [rsp + 0x110]
mov edx, 0x100000
mov r14d, eax
mov dword [rsp + 0x9c], r14d
call fcn.140055ddc
mov eax, dword [rsp + 0xa0]
xor ecx, ecx
mov dword [rsp + 0x8c], esi
mov rsi, qword [rsp + 0x110]
cmp eax, ecx
jl 0x140077aa0
mov rdx, rsi
mov rcx, rbx
call fcn.140052da0
cqo
idiv r14
xor ecx, ecx
mov r14, rax
jmp 0x140077afb
mov rax, qword [rsp + 0x278]
mov r14, rcx
lea r8, [rsp + 0x2b8]
cmp rax, rcx
mov rcx, qword [rsp + 0x138]
cmovge r14, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor ecx, ecx
cmp eax, ecx
je 0x140077b17
test byte [rsp + 0x2b8], 0x10
jne 0x140077b17
mov r14d, dword [rsp + 0x2d4]
mov eax, dword [rsp + 0x2d8]
and r14, 0xfffffffffffffe00
shr rax, 9
shl r14, 0x17
or r14, rax
mov rax, qword [rsp + 0x278]
sub r14, qword [rsp + 0x1a8]
cmp rax, rcx
jle 0x140077b17
cmp r14, rax
cmovb r14, rax
lea r8, [rsp + 0xb0]
mov rdx, rsi
mov rcx, rbx
call fcn.140053128
xor r11d, r11d
mov r8, rax
mov qword [rsp + 0xf8], rax
cmp word [r12], r11w
jne 0x140077b44
cmp rax, r11
je 0x140077b89
cmp rax, r11
je 0x140077b4d
mov ecx, dword [rax]
jmp 0x140077b50
mov ecx, r11d
cmp ecx, r15d
sete cl
mov byte [rsp + 0x45], cl
cmp cl, r11b
je 0x140077b69
cmp byte [rsp + 0xd4], r11b
je 0x140077b6c
mov r15b, r11b
cmp byte [rsp + 0xc4], r11b
jne 0x140077b9d
cmp byte [rsp + 0x43], r11b
jne 0x140077b9d
cmp r15b, r11b
je 0x140077b96
cmp byte [rsp + 0x4d], r11b
jne 0x140077b9d
lea rcx, [rsp + 0x110]
jmp 0x140079450
cmp byte [rsp + 0x4d], r11b
jne 0x140077b89
mov rax, qword [rsp + 0x238]
mov r10, qword [rsp + 0x258]
mov rdx, qword [rsp + 0x260]
mov dword [rsp + 0x6c], eax
mov eax, r10d
mov dword [rsp + 0x108], edx
mov dword [rsp + 0x120], eax
cmp word [r12], r11w
jne 0x140077cae
xor edx, edx
lea rcx, [rsp + 0x2bc]
mov dword [rsp + 0x2b8], r11d
lea r8d, [rdx + 0x14]
call fcn.1400cc8d0
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x8c]
xor r8d, r8d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2b8]
mov edx, 0x70000
mov rcx, rbx
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor r11d, r11d
cmp qword [rsp + 0x238], r11
jg 0x140077c4e
movsxd rdx, dword [rsp + 0x2c4]
mov dword [rsp + 0x6c], edx
mov qword [rsp + 0x238], rdx
mov rdx, qword [rsp + 0x260]
cmp rdx, r11
jg 0x140077c72
movsxd rdx, dword [rsp + 0x2c8]
mov dword [rsp + 0x108], edx
mov qword [rsp + 0x260], rdx
mov r10, qword [rsp + 0x258]
mov r8, qword [rsp + 0xf8]
mov cl, byte [rsp + 0x45]
cmp r10, r11
jg 0x140077ca7
movsxd rax, dword [rsp + 0x2cc]
mov dword [rsp + 0x120], eax
mov r10, rax
mov qword [rsp + 0x258], rax
jmp 0x140077cae
mov eax, dword [rsp + 0x120]
mov r9, qword [rsp + 0x238]
cmp r9, r11
jg 0x140077cce
mov r9d, 0xff
mov dword [rsp + 0x6c], r9d
mov qword [rsp + 0x238], r9
cmp rdx, r11
jg 0x140077ce7
mov edx, 0x3f
mov dword [rsp + 0x108], edx
mov qword [rsp + 0x260], rdx
cmp r10, r11
jg 0x140077d02
mov edx, 0x200
mov eax, edx
mov dword [rsp + 0x120], edx
mov qword [rsp + 0x258], rdx
mov r9d, dword [rsp + 0x9c]
cdq
and edx, 0x1ff
mov qword [rsp + 0xb8], r9
add eax, edx
sar eax, 9
mov dword [rsp + 0xb0], eax
lea rax, [rsi + r9]
add rax, r9
mov qword [rsp + 0x188], rax
add rax, 0x10000
mov qword [rsp + 0xf8], rax
cmp r15b, r11b
jne 0x14007869b
cmp byte [rsp + 0x4d], r11b
jne 0x14007869b
mov r15b, r11b
cmp byte [rsp + 0x150], r11b
jne 0x1400781dd
cmp qword [rsp + 0x80], r11
jge 0x140077d7f
cmp qword [rsp + 0xa8], r11
jl 0x1400781dd
cmp dword [rsp + 0x48], r11d
jl 0x1400781dd
lea rcx, [rsp + 0x1d0]
mov edx, 0x100000
call fcn.140055ddc
mov edx, dword [rsp + 0x108]
movsxd r15, dword [rsp + 0x120]
mov r10d, dword [rsp + 0x6c]
mov eax, r15d
imul eax, edx
cdq
and edx, 0x1ff
add eax, edx
xor edx, edx
sar eax, 9
movsxd rsi, eax
mov ecx, esi
imul ecx, r10d
cmp r15d, edx
movsxd r14, ecx
jle 0x1400794d9
cmp word [r12], dx
jne 0x140077e2d
mov dword [rsp + 0x9c], edx
mov rdx, qword [rsp + 0x1d0]
lea r8, [rsp + 0x9c]
mov rcx, rbx
call fcn.140053128
xor edx, edx
cmp rax, rdx
je 0x1400794c2
mov eax, dword [rsp + 0x48]
lea ecx, [rdx + 4]
cmp eax, ecx
jl 0x140077e28
cmp byte [rsp + 0x44], dl
jne 0x140077e28
cmp eax, dword [rsp + 0x9c]
jge 0x1400794d9
mov r10d, dword [rsp + 0x6c]
mov r9, qword [rsp + 0x80]
mov rax, rdx
cmp r9, rdx
jle 0x140077f26
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xffffffffffffffff
jne 0x140077edd
cmp r9, r14
jl 0x140077e66
xor eax, eax
mov rdx, r14
cmp byte [rsp + 0x88], al
je 0x140077e69
mov rdx, rsi
mov rcx, r9
call fcn.14005325c
mov cl, byte [rsp + 0x68]
add r9, rax
mov qword [rsp + 0x80], r9
mov esi, dword [rsp + 0xb0]
xor edx, edx
mov r11, qword [rsp + 0xa8]
cmp r11, rdx
jle 0x140077eae
cmp byte [rsp + 0xc5], dl
jne 0x140077eae
sub r11, rax
cmovs r11, rdx
mov qword [rsp + 0xa8], r11
cmp r9, rdx
mov r8, rdx
cmovg r8, r9
cmp r11, rdx
jle 0x140077f78
mov rax, qword [rsp + 0x268]
cmp rax, 0xffffffffffffffff
jne 0x140077f36
lea rax, [r8 + r11]
cqo
idiv r14
jmp 0x140077f6b
mov cl, byte [rsp + 0x68]
xor r8d, r8d
cmp cl, r8b
jne 0x140077e80
movsxd rsi, dword [rsp + 0xb0]
lea rax, [rdx + r15 - 1]
mov rcx, r9
cqo
idiv r15
imul rax, rsi
mov rdx, rax
mov qword [rsp + 0x1f8], rax
call fcn.14005325c
mov cl, byte [rsp + 0x68]
add r9, rax
mov qword [rsp + 0x80], r9
jmp 0x140077e87
mov esi, dword [rsp + 0xb0]
mov cl, byte [rsp + 0x68]
jmp 0x140077e89
cmp cl, dl
jne 0x140077f78
lea rax, [rax + r15 - 1]
cqo
idiv r15
imul rax, r15
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov rcx, rax
mov qword [rsp + 0x268], rax
lea rax, [r8 + r11]
cqo
idiv rcx
sub r11, rdx
xor edx, edx
mov qword [rsp + 0xa8], r11
mov rax, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1e8]
mov r15d, dword [rsp + 0x108]
cmp rax, rdx
mov byte [rsp + 0x45], dl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x72], dl
jle 0x1400780e0
mov rax, r11
movsxd rcx, esi
mov dword [rsp + 0x30], 1
sub rax, r14
lea r8, [rsp + 0x70]
mov dword [rsp + 0x28], r10d
add rax, r9
lea r9, [rsp + 0x72]
mov dword [rsp + 0x20], r15d
cqo
idiv rcx
mov rcx, qword [rsp + 0x130]
lea rdx, [rsp + 0x45]
mov qword [rsp + 0x1e0], rax
xor eax, eax
mov dword [rsp + 0x170], eax
mov dword [rsp + 0x174], eax
mov dword [rsp + 0x178], eax
mov dword [rsp + 0x17c], eax
call fcn.140053278
xor eax, eax
mov byte [rsp + 0x170], al
mov al, byte [rsp + 0x70]
mov dword [rsp + 0x30], 1
mov byte [rsp + 0x171], al
mov al, byte [rsp + 0x72]
lea r9, [rsp + 0x72]
mov byte [rsp + 0x172], al
mov al, byte [rsp + 0x45]
lea r8, [rsp + 0x70]
mov byte [rsp + 0x173], al
mov rax, qword [rsp + 0x130]
lea rdx, [rsp + 0x45]
lea rcx, [rax + rax - 1]
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r15d
call fcn.140053278
mov cl, byte [rsp + 0x72]
mov rdx, qword [rsp + 0x1b8]
mov eax, 5
mov byte [rsp + 0x176], cl
mov cl, byte [rsp + 0x45]
mov byte [rsp + 0x174], al
mov al, byte [rsp + 0x70]
mov byte [rsp + 0x177], cl
mov byte [rsp + 0x175], al
mov rax, qword [rsp + 0x130]
lea r8, [rsp + 0x170]
mov dword [rsp + 0x178], eax
mov rax, qword [rsp + 0x1e0]
mov r9d, 1
mov rcx, rbx
mov dword [rsp + 0x17c], eax
call fcn.14005bd40
mov r9, qword [rsp + 0x80]
mov r11, qword [rsp + 0xa8]
mov rax, r14
movsxd rcx, esi
xor r8d, r8d
cqo
idiv rcx
cmp r9, r8
mov r10, rax
jl 0x14007810b
mov rax, r9
cqo
idiv rcx
mov r14, rax
mov qword [rsp + 0x160], rax
jmp 0x140078116
mov r14, r8
mov qword [rsp + 0x160], r8
cmp r11, r8
jl 0x14007812d
mov rax, r11
cqo
idiv rcx
mov qword [rsp + 0x1a0], rax
jmp 0x140078135
mov qword [rsp + 0x1a0], r8
mov ecx, dword [rsp + 0x48]
mov esi, dword [rsp + 0x6c]
mov eax, r8d
cmp ecx, 4
lea r9, [rsp + 0xcc]
lea r8, [rsp + 0xc6]
setge al
lea rdx, [rsp + 0x94]
mov rcx, r14
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r15d
call fcn.140053278
xor eax, eax
cmp qword [rsp + 0x80], rax
jle 0x14007818a
sub r14, r10
mov qword [rsp + 0x160], r14
mov rax, qword [rsp + 0x1a0]
mov edx, dword [rsp + 0x108]
movsx r15d, byte [rsp + 0x88]
lea eax, [rax + r14 - 1]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], edx
lea r9, [rsp + 0x61]
lea r8, [rsp + 0x8a]
lea rdx, [rsp + 0x144]
mov ecx, eax
call fcn.140053278
lea rcx, [rsp + 0x1d0]
call fcn.14004ea6c
mov esi, dword [rsp + 0xc8]
mov rdx, qword [rsp + 0x190]
mov rcx, qword [rsp + 0xf0]
shl esi, 4
mov r8d, 0x200
movsxd r14, esi
call fcn.14001a4c0
xor r11d, r11d
cmp qword [rsp + 0x1e0], r11
jl 0x140078267
cmp dword [rsp + 0xc8], r11d
jle 0x140078235
mov rcx, qword [rsp + 0x190]
mov r8, r14
xor edx, edx
add rcx, 0x1be
call fcn.1400cc8d0
mov eax, 3
xor edx, edx
sub eax, dword [rsp + 0xc8]
shl eax, 4
movsxd r8, eax
lea eax, [rsi + 0x10]
movsxd rcx, eax
mov rax, qword [rsp + 0x190]
lea rcx, [rcx + rax + 0x1be]
call fcn.1400cc8d0
xor r11d, r11d
mov r8, qword [rsp + 0x190]
mov r9b, byte [rsp + 0x44]
mov r10b, byte [rsp + 0x4f]
mov al, byte [r14 + r8 + 0x1c2]
cmp r9b, r11b
jne 0x14007829c
cmp r10b, 2
jge 0x14007829c
cmp al, 5
je 0x140077b89
cmp al, 0xf
je 0x140077b89
mov edx, dword [r14 + r8 + 0x1c6]
mov ecx, dword [r14 + r8 + 0x1ca]
mov rsi, qword [rsp + 0x80]
cmp r9b, r11b
jne 0x140078314
cmp al, r11b
je 0x140078314
cmp dword [rsp + 0xc0], r11d
je 0x140078314
cmp r10b, 2
jge 0x140078314
cmp byte [rsp + 0x88], r11b
jne 0x140078314
cmp rsi, r11
jl 0x1400782eb
cmp qword [rsp + 0x160], rdx
jne 0x140077b89
mov r11, qword [rsp + 0xa8]
xor r9d, r9d
cmp r11, r9
mov r9, qword [rsp + 0x1a0]
jl 0x140078324
xor eax, eax
cmp r9, rcx
je 0x140078326
cmp ecx, eax
jne 0x140077b89
jmp 0x140078326
mov r9, qword [rsp + 0x1a0]
mov r11, qword [rsp + 0xa8]
xor eax, eax
cmp byte [rsp + 0x150], al
je 0x140078345
xor r9d, r9d
mov ecx, r9d
mov edx, r9d
mov r10, r9
mov qword [rsp + 0x1a0], r9
jmp 0x14007834d
mov r10, qword [rsp + 0x160]
mov eax, dword [rsp + 0xc0]
test eax, eax
js 0x140078360
mov byte [r14 + r8 + 0x1c2], al
mov eax, dword [rsp + 0x100]
cmp ax, word [rsp + 0x2e8]
jl 0x140078379
mov byte [r14 + r8 + 0x1be], al
xor eax, eax
cmp rsi, rax
jge 0x140078390
cmp r11, rax
jl 0x14007842c
lea ecx, [r9 + rdx - 1]
jmp 0x14007839a
cmp r11, rax
jge 0x1400783e7
lea ecx, [r10 + rcx - 1]
movsx eax, r15b
lea r9, [rsp + 0x61]
lea r8, [rsp + 0x8a]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x6c]
lea rdx, [rsp + 0x144]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x20], eax
call fcn.140053278
mov r8, qword [rsp + 0x190]
mov r9, qword [rsp + 0x1a0]
mov r11, qword [rsp + 0xa8]
xor r15d, r15d
cmp rsi, r15
jl 0x140078425
mov al, byte [rsp + 0xc6]
mov dword [r14 + r8 + 0x1c6], r10d
mov byte [r14 + r8 + 0x1bf], al
mov al, byte [rsp + 0xcc]
mov byte [r14 + r8 + 0x1c0], al
movzx eax, word [rsp + 0x94]
mov byte [r14 + r8 + 0x1c1], al
cmp r11, r15
jge 0x140078434
jmp 0x14007842f
xor r15d, r15d
cmp rsi, r15
jl 0x14007845e
mov al, byte [rsp + 0x8a]
mov byte [r14 + r8 + 0x1c3], al
mov al, byte [rsp + 0x61]
mov byte [r14 + r8 + 0x1c4], al
mov al, byte [rsp + 0x144]
mov byte [r14 + r8 + 0x1c5], al
cmp r11, r15
jl 0x14007846b
mov dword [r14 + r8 + 0x1ca], r9d
mov eax, dword [rsp + 0xc0]
mov ecx, dword [rsp + 0x100]
cmp eax, r15d
jge 0x14007848e
cmp cx, r15w
jge 0x14007848e
cmp rsi, r15
jge 0x14007848e
cmp r11, r15
jl 0x14007849e
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
cmp cx, r15w
jge 0x1400784c3
cmp eax, r15d
jge 0x1400784c3
cmp rsi, r15
jge 0x1400784c3
cmp r11, r15
jge 0x1400784c3
mov byte [r8 + 0x1fe], 0x55
mov byte [r8 + 0x1ff], 0xaa
mov rsi, qword [rsp + 0x240]
xor r8d, r8d
mov rcx, rbx
mov rdx, rsi
call fcn.14004fd5c
cmp rax, rsi
jne 0x1400794f5
mov esi, 1
cmp qword [rsp + 0x1f0], r15
jne 0x1400784fe
mov rcx, qword [rsp + 0x190]
call fcn.140053370
mov r10, qword [rsp + 0x190]
mov rcx, qword [rsp + 0xf0]
mov r11d, 0x200
mov rdx, r10
mov r8, r11
call fcn.14004ea9c
cmp eax, r15d
je 0x140078558
lea r9, [rsp + 0x8c]
mov r8d, r11d
mov rdx, r10
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.1400532e8
mov r10, qword [rsp + 0x190]
mov r11d, 0x200
mov r14, qword [rsp + 0x80]
cmp r14, r11
jl 0x14007865e
cmp qword [rsp + 0xa8], r11
jle 0x14007865e
cmp byte [rsp + 0xd5], r15b
je 0x14007865e
mov r8, r11
xor edx, edx
mov rcx, r10
call fcn.1400cc8d0
mov rax, qword [rsp + 0x118]
shl r14, 9
lea r15, [r14 + rax]
xor r8d, r8d
mov rcx, rbx
mov rdx, r15
call fcn.14004fd5c
cmp rax, r14
je 0x1400785c0
xor r15d, r15d
mov esi, r15d
jmp 0x14007865e
mov rdx, qword [rsp + 0xf0]
xor eax, eax
lea r9, [rsp + 0x8c]
mov r8d, 0x200
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r9d, r9d
mov esi, eax
cmp eax, r9d
je 0x1400785b5
mov r11d, 0x200
cmp dword [rsp + 0x8c], r11d
jne 0x1400785b5
mov rdx, qword [rsp + 0x190]
mov rcx, qword [rsp + 0xf0]
mov r8, r11
call fcn.14004ea9c
cmp eax, r9d
je 0x14007865b
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.14004fd5c
xor r15d, r15d
cmp rax, r14
jne 0x1400785b8
mov rdx, qword [rsp + 0x190]
lea r9, [rsp + 0x8c]
mov r8d, 0x200
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, eax
jmp 0x14007865e
xor r15d, r15d
cmp esi, r15d
mov r14, r15
sete r14b
xor esi, esi
cmp byte [rsp + 0x41], r15b
mov r15b, byte [rsp + 0x42]
mov qword [rsp + 0x168], r14
jne 0x14007868e
cmp r15b, sil
jne 0x14007868e
cmp byte [rsp + 0x4e], sil
je 0x1400794eb
lea rcx, [rsp + 0x110]
jmp 0x1400774a9
mov eax, dword [rsp + 0x140]
cmp byte [rsp + 0x150], r11b
mov r10b, byte [rsp + 0x43]
movzx eax, al
cmovne eax, r11d
mov dword [rsp + 0x140], eax
cmp cl, r11b
je 0x1400786cd
cmp r10b, r11b
jne 0x1400786cd
mov edx, dword [r8 + 0x28]
jmp 0x1400786d2
mov edx, 0x80
mov rcx, qword [rsp + 0xa8]
mov r8, qword [rsp + 0x80]
mov dword [rsp + 0x94], edx
mov rax, rcx
mov qword [rsp + 0x160], rcx
cmp byte [rsp + 0xd6], r11b
je 0x14007870b
lea rax, [rcx + r8 - 1]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x130], r11
cmp r10b, r11b
je 0x140078768
test byte [rsp + 0x89], 0x10
je 0x140078738
mov rax, qword [rsp + 0x278]
mov r14, rax
dec rax
mov qword [rsp + 0x160], rax
mov ecx, 1
cmp r8, rcx
cmovl r8, rcx
dec rax
cmp rax, rcx
mov qword [rsp + 0x80], r8
mov qword [rsp + 0x130], rax
jge 0x140078768
lea rax, [r14 - 2]
mov qword [rsp + 0x130], rax
mov al, r10b
neg al
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x30], rax
sbb rcx, rcx
lea rax, [rsp + 0x130]
and rcx, r8
mov qword [rsp + 0x28], rax
mov r8d, edx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1c0]
mov rdx, rsi
call fcn.14005b704
mov r15b, byte [rsp + 0x45]
xor edx, edx
mov qword [rsp + 0xf0], rax
cmp r15b, dl
jne 0x1400787cb
lea ecx, [rdx + 1]
cmp rax, rdx
cmove rax, rcx
mov qword [rsp + 0xf0], rax
movsxd r11, dword [rsp + 0x94]
movsxd r9, dword [rsp + 0x48]
mov r10, qword [rsp + 0x188]
mov r14d, 1
cmp r9d, r11d
jae 0x140078815
cmp dword [rsp + 0xd0], r11d
jge 0x140078815
mov rcx, r9
lea r8d, [r14 + 0xf]
lea rdx, [0x1400f0750]
shl rcx, 7
add rcx, r10
call fcn.14004ea9c
xor edx, edx
cmp eax, edx
jne 0x140078818
mov r14d, edx
mov rax, qword [rsp + 0x130]
mov ecx, 0x20
cmp rax, rcx
mov qword [rsp + 0x130], rax
jl 0x140077b89
mov al, byte [rsp + 0x43]
cmp al, dl
je 0x140078b20
cmp r9d, r11d
jae 0x140077b89
mov r8, qword [rsp + 0xb8]
xor edx, edx
mov rax, r11
shl rax, 7
xor ecx, ecx
mov r14, r10
div r8
cmp eax, ecx
jle 0x1400788a8
mov r15d, eax
mov rdi, r8
xor edx, edx
mov r8d, 0x1b3
mov rcx, r14
call fcn.1400cc8d0
xor edx, edx
lea rcx, [r14 + 0x1b4]
lea r8d, [rdx + 0x4a]
call fcn.1400cc8d0
add r14, rdi
sub r15, 1
jne 0x14007886e
mov rbp, qword [rsp + 0x220]
lea rdi, [0x140107d70]
mov rax, qword [rsp + 0xb8]
mov r15d, 0x5c
xor edx, edx
lea r14, [rsi + rax]
mov r8, r15
mov rcx, r14
call fcn.1400cc8d0
lea r8d, [r15 - 0x54]
lea rdx, str.EFI_PART
mov rcx, r14
call fcn.14001a4c0
mov rcx, qword [rsp + 0x130]
mov dword [r14 + 0xc], r15d
mov r15, qword [rsp + 0x80]
mov qword [r14 + 0x20], rcx
mov dword [r14 + 8], 0x10000
lea rax, [r15 + 0x21]
mov qword [r14 + 0x18], r15
mov qword [r14 + 0x28], rax
lea rax, [rcx - 0x20]
lea rcx, [r14 + 0x38]
mov qword [r14 + 0x30], rax
xor eax, eax
cmp qword [rcx], rax
jne 0x140078929
lea r8d, [rax + 0x10]
lea rdx, [0x1400f3a40]
call fcn.14001a4c0
lea rax, [r15 + 1]
mov r15, qword [rsp + 0xf8]
mov rdx, r14
mov qword [r14 + 0x48], rax
mov eax, 0x80
mov rcx, r15
lea r8d, [rax - 0x24]
mov dword [r14 + 0x50], eax
mov dword [r14 + 0x54], eax
call fcn.14001a4c0
mov r11, qword [r14 + 0x20]
xor edx, edx
mov qword [r15 + 0x18], r11
mov rax, qword [r14 + 0x18]
lea rcx, [rsi + 0x1be]
lea r8d, [rdx + 0x40]
mov qword [r15 + 0x20], rax
call fcn.1400cc8d0
mov r15, qword [rsp + 0x160]
mov ecx, 1
lea rax, [rcx - 2]
mov dword [rsp + 0x30], ecx
cmp r15, rcx
mov rcx, qword [rsp + 0x80]
cmovl r15, rax
movsxd rax, dword [rsp + 0x48]
mov r10d, eax
mov r14, rax
shl r10d, 4
add r14, r14
lea eax, [r10 + 0x1bf]
mov dword [rsi + r14*8 + 0x1c2], 0xee
movsxd r8, eax
mov eax, dword [rsp + 0x6c]
add r8, rsi
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x108]
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.140053278
mov eax, dword [rsp + 0x6c]
lea r9d, [r10 + 0x1c3]
movsxd r8, r9d
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x108]
add r8, rsi
mov rcx, r15
lea r9, [r8 + 1]
lea rdx, [r8 + 2]
mov dword [rsp + 0x20], eax
call fcn.140053278
mov rax, qword [rsp + 0x80]
xor edx, edx
mov dword [rsi + r14*8 + 0x1c6], eax
mov dword [rsi + r14*8 + 0x1ca], r15d
mov r14, qword [rsp + 0x188]
mov r11d, dword [rsp + 0x94]
mov al, byte [rsp + 0x43]
mov r15d, edx
mov dword [rsp + 0xc8], edx
cmp byte [rsp + 0x91], dl
je 0x140079025
cmp al, dl
jne 0x140079025
cmp r11d, edx
mov dword [rsp + 0x120], edx
mov r9, rdx
mov qword [rsp + 0x1b8], rdx
jle 0x140079025
mov esi, 0x80
mov r13, r14
mov rbp, r14
mov r15, r14
mov rdi, rdx
lea r12d, [rsi - 0x7f]
mov r11d, 0x10
lea rdx, [0x1400f0750]
mov rcx, r15
mov r8, r11
call fcn.14004ea9c
xor r10d, r10d
cmp eax, r10d
sete al
cmp al, r10b
jne 0x140078ac9
mov r14d, r10d
cmp r9, rdi
je 0x140078acc
mov r14d, r12d
mov dword [rsp + 0xb0], r10d
cmp al, r10b
jne 0x140078f63
cmp r9, rdi
je 0x140078f5d
mov r8, r11
mov rdx, r15
mov rcx, r15
call fcn.14004ea9c
mov ecx, r10d
mov rdx, rbp
cmp eax, r10d
mov r8, rsi
sete cl
mov dword [rsp + 0xb0], ecx
mov rcx, r13
call fcn.1400cd520
add rdi, r12
add r13, rsi
xor r10d, r10d
jmp 0x140078f63
cmp byte [rsp + 0x91], dl
je 0x140078b32
cmp r9d, edx
jl 0x140078f50
cmp byte [rsp + 0x44], dl
je 0x140078b81
or dword [rsp + 0x48], 0xffffffff
mov cl, dl
mov r9d, edx
mov dword [rsp + 0x140], ecx
cmp r11d, edx
jbe 0x140078c1c
mov ecx, r9d
lea rdx, [0x1400f0750]
mov r8d, 0x10
shl rcx, 7
add rcx, r10
call fcn.14004ea9c
xor edx, edx
cmp eax, edx
je 0x140078bee
inc r9d
cmp r9d, r11d
jb 0x140078b52
mov r9d, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x140]
mov eax, dword [rsp + 0xd0]
mov r10d, 1
sub eax, r10d
mov dword [rsp + 0xd0], eax
cmp r9d, r11d
jae 0x140077b89
cmp eax, r11d
jge 0x140077b89
cmp cl, dl
je 0x140078d59
mov r14, qword [rsp + 0x188]
mov ecx, edx
cmp r15b, dl
je 0x140078c60
mov rdx, qword [rsp + 0x80]
lea rax, [r14 + 0x20]
lea r8d, [r10 + 0x7f]
cmp ecx, r11d
jae 0x140078c60
cmp qword [rax], rdx
je 0x140078c26
add ecx, r10d
add rax, r8
jmp 0x140078bdc
mov ecx, r9d
mov r8d, 0x80
mov dword [rsp + 0x48], r9d
shl rcx, 7
add rcx, r10
call fcn.1400cc8d0
mov r11d, dword [rsp + 0x94]
mov r9d, dword [rsp + 0x48]
xor edx, edx
jmp 0x140078b81
mov r9d, dword [rsp + 0x48]
jmp 0x140078b88
movdqu xmm0, xmmword [0x1400f0750]
mov r9d, ecx
shl r9, 7
add r9, r14
movdqu xmmword [r9], xmm0
cmp ecx, dword [rsp + 0x48]
je 0x140078c5b
xor edx, edx
mov rcx, r9
call fcn.1400cc8d0
mov r11d, dword [rsp + 0x94]
mov r10d, 1
mov r9d, dword [rsp + 0x48]
movsxd r9, r9d
lea rdx, [0x1400f0750]
mov r8d, 0x10
shl r9, 7
add r9, r14
mov rcx, r9
mov qword [rsp + 0x240], r9
call fcn.14004ea9c
xor ecx, ecx
cmp eax, ecx
je 0x140078d34
mov r15d, dword [rsp + 0x48]
inc r15d
cmp r15d, r11d
jae 0x140077b89
mov ecx, r15d
lea rdx, [0x1400f0750]
mov r8d, 0x10
shl rcx, 7
add rcx, r14
call fcn.14004ea9c
xor ecx, ecx
cmp eax, ecx
je 0x140078cce
add r15d, r10d
cmp r15d, r11d
jb 0x140078ca2
jmp 0x140078d2b
mov edx, dword [rsp + 0x48]
movsxd rcx, r15d
cmp r15d, edx
jle 0x140078d2b
shl rcx, 7
mov edi, r15d
mov r12d, 0x80
add rcx, r14
sub edi, edx
lea r14, [rcx - 0x80]
mov r8, r12
mov rdx, r14
call fcn.1400cd520
sub rdi, 1
mov rcx, r14
jne 0x140078cec
mov r12, qword [rsp + 0x210]
mov r13, qword [rsp + 0x1d8]
mov r9, qword [rsp + 0x240]
mov r11d, dword [rsp + 0x94]
lea rdi, [0x140107d70]
cmp r15d, r11d
jae 0x140077b89
xor edx, edx
mov r8d, 0x80
mov rcx, r9
call fcn.1400cc8d0
mov r9d, dword [rsp + 0x48]
mov eax, dword [rsp + 0xd0]
xor edx, edx
mov r14d, edx
lea r10d, [rdx + 1]
cmp eax, edx
jge 0x140078ece
cmp r14d, edx
jne 0x140078da6
mov edx, r10d
mov r14d, r10d
mov eax, r10d
mov r8d, r10d
mov dword [rsp + 0x218], r10d
mov r11d, r10d
mov dword [rsp + 0x230], edx
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x280], rax
mov dword [rsp + 0x198], r10d
mov dword [rsp + 0x208], r10d
jmp 0x140078dd5
mov rax, qword [rsp + 0x280]
mov edx, dword [rsp + 0x230]
mov r8d, dword [rsp + 0x218]
mov r10d, dword [rsp + 0x208]
mov r11d, dword [rsp + 0x198]
mov r14, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x188]
xor r15d, r15d
cmp eax, r15d
jle 0x140078df1
movsxd rax, r9d
shl rax, 7
movdqu xmmword [rax + rcx], xmm6
cmp r14d, r15d
jle 0x140078e03
movsxd rax, r9d
shl rax, 7
movdqu xmmword [rax + rcx + 0x10], xmm7
cmp edx, r15d
jle 0x140078e1c
mov rdx, qword [rsp + 0x80]
movsxd rax, r9d
shl rax, 7
mov qword [rax + rcx + 0x20], rdx
xor edx, edx
cmp r8d, edx
jle 0x140078e37
mov r15, qword [rsp + 0x160]
movsxd rax, r9d
shl rax, 7
mov qword [rax + rcx + 0x28], r15
cmp r11d, edx
jle 0x140078e52
mov rdx, qword [rsp + 0x290]
movsxd rax, r9d
shl rax, 7
mov qword [rax + rcx + 0x30], rdx
xor edx, edx
cmp r10d, edx
jle 0x140078e98
mov r15, qword [rsp + 0xe8]
cmp word [r15], dx
je 0x140078e98
movsxd rax, r9d
xor edx, edx
shl rax, 7
lea r8d, [rdx + 0x48]
lea r14, [rax + rcx + 0x38]
mov rcx, r14
call fcn.1400cc8d0
mov r8d, 0x24
mov rdx, r15
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_StrCpyNW]
mov r9d, dword [rsp + 0x48]
xor edx, edx
mov r15d, 0x80
cmp byte [rsp + 0x150], dl
je 0x140078a38
mov r14, qword [rsp + 0x188]
movsxd rcx, r9d
mov r8, r15
shl rcx, 7
xor edx, edx
add rcx, r14
call fcn.1400cc8d0
xor edx, edx
jmp 0x140078a40
cmp eax, r9d
je 0x140078e98
mov r14, qword [rsp + 0x188]
movsxd r15, r9d
lea rcx, [rsp + 0x370]
shl r15, 7
mov r8d, 0x80
add r15, r14
mov rdx, r15
call fcn.1400cd520
movsxd r11, dword [rsp + 0xd0]
mov rcx, r15
shl r11, 7
mov r15d, 0x80
add r14, r11
mov r8, r15
mov rdx, r14
call fcn.1400cd520
lea rdx, [rsp + 0x370]
mov rcx, r14
mov r8, r15
call fcn.1400cd520
mov r9d, dword [rsp + 0x48]
mov eax, dword [rsp + 0xd0]
cmp r9d, eax
cmovl r9d, eax
xor edx, edx
mov dword [rsp + 0x48], r9d
jmp 0x140078e9e
mov r14, qword [rsp + 0x188]
jmp 0x140078a4c
add rdi, r12
add r13, rsi
cmp r14d, r10d
je 0x140078fa2
lea rdx, [r15 + 0x80]
mov rcx, r15
cmp r15, rdx
jae 0x140078f92
mov rax, qword [rcx]
add rcx, 8
cmp rax, r10
jne 0x140078f8a
cmp rcx, rdx
jb 0x140078f77
jmp 0x140078f92
mov dword [rsp + 0xb0], r12d
mov r8, rsi
xor edx, edx
mov rcx, r15
call fcn.1400cc8d0
xor r10d, r10d
cmp dword [rsp + 0xb0], r10d
mov r10d, dword [rsp + 0x120]
je 0x140078fbf
lea eax, [r10 + 1]
mov dword [rsp + 0xc8], eax
mov r9, qword [rsp + 0x1b8]
mov r14d, dword [rsp + 0x94]
add r10d, r12d
add r9, r12
add r15, rsi
add rbp, rsi
cmp r10d, r14d
mov qword [rsp + 0x1b8], r9
mov dword [rsp + 0x120], r10d
jl 0x140078a9b
mov rsi, qword [rsp + 0x110]
mov rbp, qword [rsp + 0x220]
mov r12, qword [rsp + 0x210]
mov r13, qword [rsp + 0x1d8]
mov r15d, dword [rsp + 0xc8]
lea rdi, [0x140107d70]
jmp 0x14007902d
mov r14d, dword [rsp + 0x94]
mov rcx, rsi
call fcn.140053370
mov rax, qword [rsp + 0xb8]
lea rcx, [rsi + rax - 0x174]
call fcn.140053370
mov eax, dword [rsp + 0x48]
cmp r15d, eax
jg 0x140079057
lea r15d, [rax + 1]
xor eax, eax
mov edx, r14d
cmp byte [rsp + 0x43], al
cmovne r15d, r14d
mov r14, qword [rsp + 0x188]
shl rdx, 7
mov rcx, r14
xor r8d, r8d
call fcn.1400ba8c0
mov r8, qword [rsp + 0xb8]
lea rcx, [rsi + r8]
mov dword [rcx + 0x58], eax
mov dword [r14 + 0x10058], eax
xor r14d, r14d
cmp dword [rcx + 0xc], 0x20000
mov dword [rcx + 0x10], r14d
ja 0x140079583
mov r14d, dword [rcx + 0xc]
xor r8d, r8d
mov rdx, r14
call fcn.1400ba8c0
mov rcx, qword [rsp + 0xb8]
xor r8d, r8d
lea r11, [rsi + rcx]
xor ecx, ecx
mov rdx, r14
mov dword [r11 + 0x10], eax
mov rax, qword [rsp + 0xf8]
mov dword [rax + 0x10], ecx
mov rcx, rax
call fcn.1400ba8c0
mov rdx, qword [rsp + 0xf8]
mov r8d, dword [rsp + 0x9c]
mov dword [rdx + 0x10], eax
shl r15d, 7
xor edx, edx
lea eax, [r15 + r8 - 1]
mov r15d, r8d
div r15d
mov r14d, eax
xor eax, eax
imul r14d, r15d
cmp byte [rsp + 0x43], al
je 0x140079143
mov rdx, qword [rsp + 0x118]
xor r8d, r8d
mov rcx, rbx
call fcn.14004fd5c
xor eax, eax
lea r9, [rsp + 0x2f0]
mov r8d, r15d
mov rdx, rsi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdx, qword [rsp + 0xf0]
xor r8d, r8d
mov rcx, rbx
imul rdx, qword [rsp + 0xb8]
add rdx, qword [rsp + 0x118]
call fcn.14004fd5c
xor eax, eax
lea r8d, [r14 + r15]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xb8]
lea r9, [rsp + 0x2f4]
lea r15, [rsi + rax]
mov rcx, rbx
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rsi, qword [rsp + 0x130]
xor r8d, r8d
lea rdx, [rsi - 0x20]
mov rcx, rbx
imul rdx, qword [rsp + 0xb8]
add rdx, qword [rsp + 0x118]
call fcn.14004fd5c
xor eax, eax
lea r9, [rsp + 0x2e0]
mov r8d, r14d
mov rdx, r15
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r8d, r8d
imul rsi, qword [rsp + 0xb8]
add rsi, qword [rsp + 0x118]
mov rcx, rbx
mov rdx, rsi
call fcn.14004fd5c
mov r8d, dword [rsp + 0x9c]
mov rdx, qword [rsp + 0xf8]
lea r9, [rsp + 0x2e4]
xor esi, esi
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15b, byte [rsp + 0x42]
mov r11b, r15b
lea rcx, [rsp + 0x110]
or r11b, byte [rsp + 0x41]
or r11b, byte [rsp + 0x4e]
je 0x14007953d
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
jmp 0x140076cc0
mov r15b, byte [rsp + 0x42]
mov dl, byte [rsp + 0x41]
mov eax, dword [rsp + 0xa0]
mov r9d, 0x20
cmp eax, r8d
jl 0x140079324
cmp r10b, r9b
je 0x140079282
cmp r10b, 0x10
jne 0x140079290
mov ecx, dword [rsp + 0xd8]
cmp ecx, 0xb
je 0x1400792b5
jmp 0x140079297
mov ecx, dword [rsp + 0xd8]
test r9b, dl
jne 0x1400792b5
cmp dl, r8b
je 0x1400792a6
cmp ecx, 0xb
je 0x1400792b5
test r9b, r15b
jne 0x1400792b5
cmp r15b, r8b
je 0x140079324
cmp ecx, 0xb
jne 0x140079324
mov r15d, 1
test byte [0x140107167], r9b
jne 0x1400792e2
test byte [rsp + 0x468], r9b
jne 0x1400792e2
mov edx, r15d
mov ecx, eax
call fcn.140066214
mov eax, dword [rsp + 0xa0]
xor r8d, r8d
or byte [rsp + 0x468], 2
test byte [0x140107167], 0x10
jne 0x140079313
mov qword [rsp + 0x28], r8
lea rcx, [rsp + 0x468]
or r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, eax
mov qword [rsp + 0x20], r15
call fcn.14005339c
or byte [rsp + 0x468], r15b
xor r8d, r8d
lea r9d, [r8 + 0x20]
jmp 0x14007932a
mov r15d, 1
cmp byte [rsp + 0x4e], r8b
jne 0x140079346
mov al, byte [rsp + 0x40]
cmp al, r15b
je 0x140079346
cmp al, r9b
je 0x140079346
cmp byte [rsp + 0x41], r8b
je 0x14007936e
mov rcx, rbx
call fcn.140053310
mov cl, byte [rsp + 0x40]
cmp cl, r15b
je 0x140079360
mov edx, 0x20
cmp cl, dl
jne 0x14007936b
movsxd r14, eax
mov qword [rsp + 0x168], r14
xor r8d, r8d
cmp rbx, r8
je 0x140079388
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140079388
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
mov cl, byte [rsp + 0x42]
mov edx, 0x20
mov rbx, r8
mov eax, r8d
mov qword [rsp + 0x1c0], rbx
test dl, cl
jne 0x1400793c4
cmp cl, r8b
mov ecx, dword [rsp + 0xd8]
je 0x1400793b4
cmp ecx, 0xb
je 0x1400793c4
mov r10b, byte [rsp + 0x40]
cmp r10b, 0x10
jne 0x1400793e6
cmp ecx, 0xc
je 0x1400793e6
lea rcx, [rsp + 0x468]
call fcn.1400533f0
mov rcx, qword [rsp + 0x138]
call fcn.14005b56c
mov r10b, byte [rsp + 0x40]
xor r8d, r8d
cmp byte [rsp + 0x4c], r8b
je 0x1400793f6
cmp esi, r8d
jne 0x140076d47
cdqe
cmp r10b, 0x10
cmove r14, rax
lea rcx, [rsp + 0x468]
call fcn.1400533f0
xor eax, eax
cmp rdi, rax
je 0x14007a631
jmp 0x140076d1c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
xor eax, eax
cmp rdi, rax
jmp 0x14007a1a7
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007943e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14007943e
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
jmp 0x14007a14f
lea rcx, [rsp + 0x128]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
jmp 0x14007a050
lea rcx, [rsp + 0x1d0]
call fcn.14004ea6c
lea rcx, [rsp + 0x110]
jmp 0x1400794ae
lea rcx, [rsp + 0x1d0]
call fcn.14004ea6c
jmp 0x140077b89
lea rcx, [rsp + 0x110]
jmp 0x140079492
lea rcx, [rsp + 0x110]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140079535
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r15
jmp 0x14007a002
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140079575
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x140076d07
jmp 0x140076cfe
lea rcx, [rsp + 0x110]
jmp 0x14007724a
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400795c3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14007a623
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140076d86
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140076d86
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x58]
mov r14d, eax
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
jmp 0x140079400
cmp dword [rsp + 0x78], ebx
jge 0x1400796e6
cmp word [rbp], bx
je 0x1400796d2
mov r12d, 0x3a
cmp r12w, word [rbp + 2]
jne 0x1400796c5
lea esi, [r12 + 0x22]
cmp si, word [rbp + 4]
jne 0x140079661
cmp word [rbp + 6], bx
jne 0x140079661
mov word [rbp + 4], bx
cmp word [rbp + 4], bx
jne 0x1400796be
lea rcx, [rsp + 0x58]
mov edx, 9
call fcn.1400560cc
mov rax, qword [rsp + 0x58]
mov ecx, 0x2e
mov word [rax], si
mov rax, qword [rsp + 0x58]
mov word [rax + 2], si
mov rax, qword [rsp + 0x58]
mov word [rax + 4], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 6], si
mov rax, qword [rsp + 0x58]
movzx ecx, word [rbp]
mov word [rax + 8], cx
mov rax, qword [rsp + 0x58]
mov word [rax + 0xa], r12w
mov rax, qword [rsp + 0x58]
mov word [rax + 0xc], bx
cmp qword [rsp + 0x58], rbx
jne 0x1400796d2
lea rcx, [rsp + 0x58]
mov rdx, rbp
call fcn.140060284
mov eax, dword [rsp + 0x48]
cmp dword [rsp + 0x78], ebx
mov rcx, 0xffffffffffffffff
cmovl eax, ecx
jmp 0x1400796ee
mov eax, dword [rsp + 0x48]
or rcx, 0xffffffffffffffff
movsxd rdx, dword [rsp + 0x78]
mov r9, qword [rsp + 0x58]
cmp eax, ebx
cmovle eax, ecx
lea rcx, [rsp + 0xe0]
movsxd r8, eax
call fcn.140006090
jmp 0x14007990e
lea rcx, [rsp + 0xe0]
mov edx, 0x1000
call fcn.1400560cc
movsxd r11, dword [rsp + 0x78]
cmp r11d, ebx
jl 0x1400797cd
lea rcx, [rsp + 0xe8]
mov edx, 0x488
call fcn.140055ddc
mov rbx, qword [rsp + 0xe8]
xor edx, edx
lea rsi, [rbx + 0x200]
mov r8d, 0x288
mov rcx, rsi
call fcn.1400cc8d0
mov r8d, dword [rsp + 0x124]
mov rdx, rbx
mov rcx, rsi
call fcn.140065834
mov edx, dword [rsp + 0x78]
xor eax, eax
mov ebx, eax
mov rcx, rax
lea rax, [rsi + 4]
cmp dword [rax], edx
je 0x14007979e
add rcx, r15
add ebx, r15d
add rax, 0x18
cmp rcx, 0x1a
jle 0x140079785
jmp 0x1400798b3
lea rcx, [rsp + 0xe0]
mov edx, 0x64
call fcn.1400560cc
movsxd r11, ebx
lea rdx, str._d___c_
lea rax, [r11 + r11*2]
mov r9d, dword [rsi + rax*8 + 0x10]
mov r8d, dword [rsi + rax*8 + 4]
jmp 0x1400798a5
cmp byte [rsp + 0x71], bl
jne 0x14007990e
mov rdx, qword [rsp + 0xe0]
mov ecx, 4
lea rax, [0x1400eb210]
cmp sil, cl
lea r9, [0x1400eb220]
mov rcx, r11
cmove r9, rax
xor r8d, r8d
call fcn.14005b21c
jmp 0x14007990e
movzx ecx, word [rbp]
mov esi, ecx
and esi, 0xffffffdf
lea r12d, [rsi - 0x41]
cmp r12d, 0x19
ja 0x14007990e
mov r14d, dword [rsp + 0x124]
cmp r14d, ebx
jle 0x1400798c4
lea rcx, [rsp + 0xe8]
mov edx, 0x488
call fcn.140055ddc
mov rbx, qword [rsp + 0xe8]
xor edx, edx
lea rbp, [rbx + 0x200]
mov r8d, 0x288
mov rcx, rbp
call fcn.1400cc8d0
mov r8d, esi
mov rdx, rbx
shl r8d, 0x10
mov rcx, rbp
or r8d, r14d
call fcn.140065834
movsxd r11, r12d
xor eax, eax
lea rbx, [r11 + r11*2]
cmp dword [rbp + rbx*8 + 8], eax
jle 0x1400798b3
lea edx, [rax + 0x64]
lea rcx, [rsp + 0xe0]
call fcn.1400560cc
mov r8d, dword [rbp + rbx*8 + 4]
mov r9d, esi
lea rdx, str._d__c:
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0xe8]
call fcn.14004ea6c
xor ebx, ebx
jmp 0x14007990e
mov rax, qword [rsp + 0xe0]
mov word [rax], cx
cmp cx, bx
je 0x14007990e
mov r8b, byte [rsp + 0x75]
mov r9d, dword [rsp + 0x64]
mov edx, dword [rsp + 0xa0]
mov byte [rsp + 0x30], r8b
mov r8d, dword [rsp + 0x48]
and r9d, 0xfffffffd
lea rcx, [rsp + 0xe0]
or r9d, 0xc
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.140074220
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
jmp 0x1400799a1
mov ecx, dword [rsp + 0xa0]
cmp ecx, ebx
jl 0x1400799a1
mov eax, dword [rsp + 0x48]
cmp byte [rsp + 0x98], bl
je 0x140079939
cmp eax, ebx
jl 0x1400799a1
mov r8b, byte [rsp + 0x75]
movsx r9d, byte [rsp + 0x73]
mov edx, ecx
or r9d, dword [rsp + 0x64]
mov byte [rsp + 0x30], r8b
lea rcx, [rsp + 0xe0]
mov r8d, eax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.140074220
jmp 0x1400799a1
mov eax, dword [rsp + 0xa0]
cmp byte [rsp + 0x71], bl
je 0x14007997d
cmp eax, ebx
jl 0x1400799a1
mov dl, byte [rsp + 0x73]
lea rcx, [rsp + 0xe0]
neg dl
sbb edx, edx
and edx, 0x200000
or edx, eax
or edx, dword [rsp + 0x1b0]
call fcn.140073d30
mov eax, dword [rsp + 0x158]
cmp eax, ebx
jle 0x140079a00
mov r8, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], rbx
dec eax
mov dword [rsp + 0x20], ebx
mov rbx, qword [rsp + 0x450]
lea r9, [rsp + 0xe0]
lea rdx, [rsp + 0x158]
mov rcx, rbx
mov qword [rsp + 0x240], r8
mov dword [rsp + 0x158], eax
call fcn.1400595f4
lea rcx, [rsp + 0x240]
call fcn.14004ea6c
jmp 0x140079a08
mov rbx, qword [rsp + 0x450]
mov r8, qword [rsp + 0xe0]
mov rdx, r13
mov rcx, rbx
call fcn.140055710
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
xor eax, eax
cmp rdi, rax
je 0x140079a42
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x210]
call fcn.14004ea6c
lea rcx, [rsp + 0x1d8]
call fcn.14004ea6c
lea rcx, [rsp + 0x220]
call fcn.14004ea6c
lea rcx, [rsp + 0x288]
call fcn.14004ea6c
lea rcx, [rsp + 0xe0]
call fcn.14004ea6c
xor eax, eax
jmp 0x14007a675
lea rcx, [rsp + 0xe0]
mov edx, 0x103c
call fcn.1400560cc
mov rsi, qword [rsp + 0xe0]
xor r12d, r12d
add rsi, 0x2000
lea rbx, [0x1400eb200]
cmp word [rbp], r12w
je 0x140079b0b
lea eax, [r12 + 0x3a]
cmp ax, word [rbp + 2]
jne 0x140079b0b
movzx r8d, word [rbp]
lea rdx, str.._c:
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsi + 8]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 2
jne 0x140079b00
mov r14d, dword [rsp + 0x124]
cmp r14d, 0x10
jne 0x140079b61
lea rbx, [0x1400eb220]
mov ecx, 5
cmp eax, ecx
jne 0x140079b61
jmp 0x140079b31
mov r8d, dword [rsp + 0x78]
cmp r8d, r12d
jl 0x140079b61
mov eax, dword [rsp + 0x124]
cmp eax, 8
jne 0x140079b3a
lea rdx, str..CDROM_d
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
lea rbx, [0x1400eb210]
jmp 0x140079b61
cmp eax, 0x10
jne 0x140079b51
mov esi, r8d
lea rbx, [0x1400eb220]
and esi, 0xfff
jmp 0x140079b61
lea rdx, str..PhysicalDrive_d
mov rcx, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0xe0]
mov r9, rbx
mov r8d, 0x20
mov rcx, rsi
call fcn.14005b21c
mov r8, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x450]
mov rdx, r13
call fcn.140055710
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
cmp rdi, r12
je 0x140079bb7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, r12
jmp 0x14007a631
mov eax, dword [rsp + 0x48]
cmp eax, ebx
jle 0x14007a18d
mov edx, dword [rsp + 0x78]
cmp edx, ebx
jge 0x140079bde
cmp word [r12], bx
je 0x14007a18d
or r14, 0xffffffffffffffff
cmp edx, ebx
mov rsi, rbx
mov dword [rsp + 0x158], r14d
mov qword [rsp + 0xe8], rbx
jge 0x140079c02
cmp bl, bl
jne 0x140079c58
jmp 0x14007a18d
mov r8b, byte [rsp + 0x75]
mov r9d, dword [rsp + 0x64]
lea rcx, [rsp + 0x158]
mov byte [rsp + 0x30], r8b
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xe0]
mov r8d, eax
call fcn.140074220
cmp dword [rsp + 0x158], ebx
jle 0x14007a609
mov rsi, qword [rsp + 0xe8]
mov r9, qword [rsp + 0x1c8]
mov dword [rsp + 0x6c], 0x200
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x178], rbx
mov qword [rsp + 0x180], rbx
cmp word [r9], bx
je 0x140079e39
lea rcx, [0x1400f3a00]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
jne 0x140079e39
lea rcx, [0x1400edfa8]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
jne 0x140079e39
lea rcx, [0x1400f39fc]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
je 0x140079ccd
mov eax, 8
jmp 0x140079e3e
lea rcx, str.nt6fat
mov rdx, r9
call fcn.14004fe38
cmp al, bl
jne 0x140079e32
lea rcx, str.winfat
mov rdx, r9
call fcn.14004fe38
cmp al, bl
jne 0x140079e32
lea rcx, [0x1400f39e8]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
je 0x140079d18
mov eax, 6
jmp 0x140079e3e
lea rcx, str.nt5fat
mov rdx, r9
call fcn.14004fe38
cmp al, bl
je 0x140079d35
mov eax, 5
jmp 0x140079e3e
mov dword [rsp + 0x6c], ebx
mov ebp, 0x2a
mov rbx, r14
mov qword [rsp + 0x148], rbx
cmp bp, word [r9]
jne 0x140079d8a
add r9, 2
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0xe8], r9
call fcn.14005ba04
mov r9, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0x148]
cmp bp, word [r9]
jne 0x140079d8a
add r9, 2
mov eax, 0x23
cmp ax, word [r9]
jne 0x140079de9
lea rcx, [rsp + 0xe8]
mov rdx, r9
call fcn.14006016c
mov rdx, qword [rsp + 0xe8]
xor eax, eax
lea r9, [rsp + 0x170]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.14001b0ac
lea rcx, [rsp + 0xe8]
mov r12, rax
call fcn.14004ea6c
mov r11d, dword [rsp + 0x178]
mov dword [rsp + 0x6c], r11d
jmp 0x140079e08
lea r8, [rsp + 0x6c]
xor edx, edx
mov rcx, r9
call fcn.140014e54
mov r11d, dword [rsp + 0x6c]
mov r12, rax
mov qword [rsp + 0x170], rax
xor eax, eax
cmp rbx, rax
jl 0x140079e1e
mov eax, r11d
cmp rax, rbx
cmovg r11d, ebx
mov dword [rsp + 0x6c], r11d
xor ebx, ebx
cmp r12, rbx
jne 0x140079e74
lea rcx, [rsp + 0x170]
jmp 0x14007a604
mov eax, 7
jmp 0x140079e3e
mov eax, 9
lea r9, [rsp + 0x170]
lea r8, str.INDATA
mov edx, eax
xor ecx, ecx
mov qword [rsp + 0x20], rbx
call fcn.14001b0ac
mov r11d, dword [rsp + 0x6c]
cmp r11d, ebx
mov r12, rax
cmovne r11d, dword [rsp + 0x178]
mov dword [rsp + 0x6c], r11d
cmp r11d, ebx
jbe 0x140079e25
cmp r12, rbx
je 0x140079e25
mov rdx, qword [rsp + 0x138]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x1c0]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call fcn.140003590
mov rbx, qword [rsp + 0x1c0]
xor r13d, r13d
cmp rbx, r13
jne 0x140079ef5
lea rcx, [rsp + 0x170]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
cmp rdi, r13
jmp 0x14007a623
mov rbp, qword [rsp + 0x1a8]
xor r8d, r8d
mov rcx, rbx
shl rbp, 9
add rbp, rsi
mov rdx, rbp
mov qword [rsp + 0x1a8], rbp
call fcn.14004fd5c
cmp rax, rbp
je 0x140079f53
lea rcx, [rsp + 0x170]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
cmp rbx, r14
je 0x140079eed
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140079eed
mov r13d, dword [rsp + 0x6c]
mov rsi, 0xfffffffffffffe00
lea rcx, [rsp + 0xf8]
add r13d, 0x1ff
and r13d, esi
lea eax, [r13 + r13 + 0x200]
movsxd rdx, eax
call fcn.140055ddc
mov r14, qword [rsp + 0xf8]
movsxd r15, r13d
add r14, 0x200
lea r9, [rsp + 0x8c]
mov r8d, r13d
and r14, rsi
xor esi, esi
mov rcx, rbx
lea rbp, [r14 + r15]
mov qword [rsp + 0x20], rsi
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, esi
jne 0x14007a00d
lea rcx, [rsp + 0xf8]
call fcn.14004ea6c
lea rcx, [rsp + 0x170]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x140079fff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
je 0x140076c1c
jmp 0x140076c13
mov r8, r15
mov rdx, rbp
mov rcx, r14
call fcn.14001a4c0
mov rsi, qword [rsp + 0x1a8]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.14004fd5c
cmp rax, rsi
je 0x14007a080
lea rcx, [rsp + 0xf8]
call fcn.14004ea6c
lea rcx, [rsp + 0x170]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a079
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp rdi, rax
jmp 0x14007a002
mov esi, dword [rsp + 0x6c]
mov r8d, 3
mov rdx, r12
mov rcx, rbp
call fcn.14001a4c0
mov eax, 0x1fe
lea rdx, [r12 + 0x1e]
cmp esi, eax
lea rcx, [rbp + 0x1e]
cmovg esi, eax
lea eax, [rsi - 0x1e]
movsxd r8, eax
call fcn.14001a4c0
mov byte [rbp + 0x1fe], 0x55
mov byte [rbp + 0x1ff], 0xaa
mov eax, dword [rsp + 0x6c]
cmp eax, 0x200
jbe 0x14007a0e8
add eax, 0xfffffe00
lea rdx, [r12 + 0x200]
lea rcx, [rbp + 0x200]
mov r8d, eax
call fcn.14001a4c0
mov r8, r15
mov rdx, rbp
mov rcx, r14
call fcn.14004ea9c
xor esi, esi
cmp eax, esi
je 0x14007a127
lea r9, [rsp + 0x8c]
mov r8d, r13d
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov dword [rsp + 0x200], eax
call fcn.1400532e8
cmp dword [rsp + 0x200], esi
lea rcx, [rsp + 0xf8]
mov r14, rsi
sete r14b
call fcn.14004ea6c
lea rcx, [rsp + 0x170]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a178
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, rsi
jmp 0x140079412
cmp dword [rsp + 0x78], ebx
jge 0x14007a1b2
cmp word [r12], bx
jne 0x14007a1b2
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
cmp rdi, rbx
je 0x14007685e
jmp 0x140076855
mov r10d, 0x1b8
mov qword [rsp + 0x240], rbx
mov qword [rsp + 0x248], rbx
mov dword [rsp + 0x64], r10d
mov qword [rsp + 0x250], rbx
cmp word [r9], bx
je 0x14007a3d0
lea rcx, [0x1400f3a00]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
jne 0x14007a3d0
lea rcx, [0x1400edfa8]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
jne 0x14007a3d0
lea rcx, [0x1400f39e8]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
je 0x14007a234
lea rsi, [0x140104320]
mov dword [rsp + 0x64], 0x190
jmp 0x14007a35a
lea rcx, [0x1400f39fc]
mov rdx, r9
call fcn.14004fe38
cmp al, bl
je 0x14007a25b
lea rsi, [0x1401044b0]
mov dword [rsp + 0x64], 0x180
jmp 0x14007a35a
or rax, 0xffffffffffffffff
mov dword [rsp + 0x64], ebx
lea esi, [rax + 0x2b]
mov rbx, rax
mov qword [rsp + 0x148], rax
cmp si, word [r9]
jne 0x14007a2b2
add r9, 2
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x200], r9
call fcn.14005ba04
mov r9, qword [rsp + 0x200]
mov rbx, qword [rsp + 0x148]
cmp si, word [r9]
jne 0x14007a2b2
add r9, 2
mov eax, 0x23
cmp ax, word [r9]
jne 0x14007a311
lea rcx, [rsp + 0x200]
mov rdx, r9
call fcn.14006016c
mov rdx, qword [rsp + 0x200]
xor eax, eax
lea r9, [rsp + 0x240]
lea r8, str.EXEDATA
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.14001b0ac
lea rcx, [rsp + 0x200]
mov rsi, rax
call fcn.14004ea6c
mov r11d, dword [rsp + 0x248]
mov dword [rsp + 0x64], r11d
jmp 0x14007a330
lea r8, [rsp + 0x64]
xor edx, edx
mov rcx, r9
call fcn.140014e54
mov r11d, dword [rsp + 0x64]
mov rsi, rax
mov qword [rsp + 0x240], rax
xor eax, eax
cmp rbx, rax
jl 0x14007a346
mov eax, r11d
cmp rax, rbx
jle 0x14007a346
mov r11d, ebx
mov dword [rsp + 0x64], ebx
xor ebx, ebx
cmp r11d, ebx
jbe 0x14007a5fc
cmp rsi, rbx
je 0x14007a5fc
mov rdx, qword [rsp + 0x138]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
lea rcx, [rsp + 0x1c0]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call fcn.140003590
mov rbx, qword [rsp + 0x1c0]
xor ebp, ebp
cmp rbx, rbp
jne 0x14007a3e4
lea rcx, [rsp + 0x240]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
cmp rdi, rbp
jmp 0x14007a623
lea rsi, [0x140104630]
mov r11d, r10d
mov dword [rsp + 0x64], r10d
jmp 0x14007a348
mov r12d, dword [rsp + 0x64]
mov rbp, 0xfffffffffffffe00
lea rcx, [rsp + 0x148]
add r12d, 0x1ff
and r12d, ebp
lea eax, [r12 + r12 + 0x200]
movsxd rdx, eax
call fcn.140055ddc
mov r13, qword [rsp + 0x148]
xor ecx, ecx
add r13, 0x200
movsxd r14, r12d
mov rax, rcx
and r13, rbp
lea rbp, [r13 + r14]
cmp qword [rsp + 0x1a8], rcx
je 0x14007a450
mov rdx, qword [rsp + 0x118]
xor r8d, r8d
mov rcx, rbx
call fcn.14004fd5c
xor ecx, ecx
cmp rax, qword [rsp + 0x118]
jne 0x14007a59e
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x8c]
mov r8d, r12d
mov rdx, rbp
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
cmp eax, ecx
je 0x14007a59e
mov r8, r14
mov rdx, rbp
mov rcx, r13
call fcn.14001a4c0
mov r11d, dword [rsp + 0x64]
mov eax, 0x1b8
cmp r11d, eax
mov rdx, rsi
mov rcx, rbp
cmovg r11d, eax
movsxd r8, r11d
call fcn.14001a4c0
mov byte [rbp + 0x1fe], 0x55
mov byte [rbp + 0x1ff], 0xaa
mov eax, dword [rsp + 0x64]
cmp eax, 0x200
jbe 0x14007a4e5
add eax, 0xfffffe00
lea rdx, [rsi + 0x200]
lea rcx, [rbp + 0x200]
mov r8d, eax
call fcn.14001a4c0
mov r8, r14
mov rdx, rbp
mov rcx, r13
call fcn.14004ea9c
xor r13d, r13d
cmp eax, r13d
je 0x14007a545
mov rsi, qword [rsp + 0x118]
xor r8d, r8d
mov rcx, rbx
mov rdx, rsi
call fcn.14004fd5c
cmp rax, rsi
jne 0x14007a5a1
lea r9, [rsp + 0x8c]
mov r8d, r12d
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
mov esi, eax
call fcn.1400532e8
cmp esi, r13d
je 0x14007a5a1
lea rcx, [rsp + 0x148]
call fcn.14004ea6c
lea rcx, [rsp + 0x240]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a588
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
je 0x14007a596
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, r13
jmp 0x14007a631
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x148]
cmp eax, r13d
cmove eax, r15d
mov r14d, eax
call fcn.14004ea6c
lea rcx, [rsp + 0x240]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x14007a5f4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, r13
jmp 0x140079412
lea rcx, [rsp + 0x240]
call fcn.14004ea6c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x468]
call fcn.1400533f0
cmp rdi, rbx
je 0x14007a62e
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, r15
lea rcx, [rsp + 0x210]
call fcn.14004ea6c
lea rcx, [rsp + 0x1d8]
call fcn.14004ea6c
lea rcx, [rsp + 0x220]
call fcn.14004ea6c
lea rcx, [rsp + 0x288]
call fcn.14004ea6c
lea rcx, [rsp + 0xe0]
call fcn.14004ea6c
mov rax, r14
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret