Function at 0x140034c88
Capabilities:
Get memory capacity

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
xor ebx, ebx
mov rbp, r8
mov r14, rdx
mov edi, ecx
cmp qword [0x14010dee8], rbx
jne 0x140034cbf
or eax, 0xffffffff
jmp 0x140035e28
xor edx, edx
lea rcx, [rsp + 0x7c]
or esi, 0xffffffff
lea r8d, [rdx + 0x14]
mov r13d, ebx
mov r15d, ebx
mov dword [rsp + 0x90], ebx
mov dword [rsp + 0xa8], ebx
mov dword [rsp + 0xa0], ebx
mov dword [rsp + 0xbc], ebx
mov qword [rsp + 0x98], rbx
mov r12, rbx
mov qword [rsp + 0xb0], rbx
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x78], ebx
call fcn.1400d4180
xor eax, eax
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x6c], eax
mov rax, qword [rbp]
mov ebp, 1
movzx eax, word [rax]
lea r10d, [rbp + 1]
mov r8d, 0xfa0
mov r9d, ebx
mov dword [rsp + 0xa4], ebx
mov byte [rsp + 0x258], bl
mov word [rsp + 0xb8], ax
mov edx, ebx
mov dword [rsp + 0x60], ebx
mov rcx, rbx
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x50], r8d
cmp edi, r10d
jne 0x140034e5c
mov rcx, qword [r14 + 8]
lea rdx, [0x1400f5898]
call fcn.1400d5334
cmp eax, ebx
jne 0x140034e64
mov rax, qword [0x14010def0]
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0x258], rbx
cmp rax, rbx
je 0x140034daa
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0xb0]
call rax
lea rcx, [rsp + 0x98]
call fcn.14005818c
lea rdx, [rsp + 0x98]
mov r8d, 0x3f
mov ecx, ebp
call fcn.140019d10
mov rcx, qword [rsp + 0x258]
lea rdx, [0x1400f5890]
cmp eax, 2
jne 0x140034de9
lea r10, str.NotLoad
jmp 0x140034e05
cmp eax, 0xffffffff
jne 0x140034df7
lea r10, str.CannotControl
jmp 0x140034e05
lea r10, str.NotInstall
cmp rcx, rbx
cmova r10, rdx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x250]
movzx edx, cl
shr rcx, 8
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], edx
movsx ecx, cx
movzx r9d, al
shr rax, 8
mov dword [rsp + 0x20], ecx
mov rcx, qword [rbx]
lea rdx, str._X._02X___X._X__s
movsx r8d, ax
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x98]
call fcn.14005041c
xor eax, eax
jmp 0x140035e28
cmp edi, ebp
jle 0x140035a03
add r14, 8
lea rdx, str.__id
sub edi, ebp
mov rcx, qword [r14]
mov dword [rsp + 0x240], edi
call fcn.1400d5334
cmp eax, ebx
jne 0x140034e97
mov rcx, qword [rsp + 0x58]
or rcx, 2
mov qword [rsp + 0x58], rcx
jmp 0x1400359ad
mov rcx, qword [r14]
lea rdx, [0x1400f5800]
call fcn.1400d5334
cmp eax, ebx
jne 0x140034eb4
mov rcx, qword [rsp + 0x58]
or rcx, rbp
jmp 0x140034e8d
mov rcx, qword [r14]
lea rdx, str.__remove
call fcn.1400d5334
cmp eax, ebx
jne 0x140034ed2
mov rcx, qword [rsp + 0x58]
or rcx, 4
jmp 0x140034e8d
mov rcx, qword [r14]
lea rdx, [0x1400f57e0]
call fcn.1400d5334
cmp eax, ebx
jne 0x140034ef0
mov r13d, 5
jmp 0x1400359a8
mov rcx, qword [r14]
lea rdx, str.__hide
call fcn.1400d5334
cmp eax, ebx
jne 0x140034f11
mov rcx, qword [rsp + 0x58]
or rcx, 0x10
jmp 0x140034e8d
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r10d, 2
mov ecx, ebx
cmp eax, r10d
jne 0x140034f31
mov rax, qword [r14]
cmp word [rax], 0x2d
sete cl
cmp ecx, ebx
je 0x140034e55
mov rax, qword [r14]
movzx edx, word [rax + 2]
cmp edx, 0x6d
jg 0x140035204
je 0x1400351c1
cmp edx, 0x62
jg 0x1400350de
je 0x140034ff5
mov ecx, edx
mov r8d, 0x44
sub ecx, r8d
je 0x14003517a
sub ecx, r10d
je 0x14003510c
sub ecx, 0xc
je 0x14003517a
sub ecx, ebp
je 0x140034f9f
cmp ecx, 0xe
jne 0x140034e55
cmp r13d, ebx
jne 0x140034e55
mov r13d, ebp
jmp 0x1400359a8
cmp dword [rsp + 0x8c], ebx
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
mov rax, qword [r14]
movzx ecx, word [rax]
call fcn.1400d5c10
cmp eax, ebx
je 0x140034e55
mov rcx, qword [r14]
xor r8d, r8d
xor edx, edx
call fcn.1400d5b4c
mov dword [rsp + 0x8c], eax
jmp 0x1400359a6
cmp dword [rsp + 0xa4], ebx
mov eax, ebx
mov ecx, ebx
setne cl
cmp qword [rsp + 0x68], rbx
setne al
or ecx, eax
cmp r13d, ebp
mov eax, ebx
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
lea rdx, [0x1400f57c0]
mov rcx, qword [r14]
call fcn.1400d5334
cmp eax, ebx
jne 0x14003504a
mov dword [rsp + 0xa4], ebp
jmp 0x1400359a6
mov rcx, qword [r14]
lea r9, [rsp + 0x64]
lea r8, [rsp + 0x68]
lea rdx, str._I64u_c
mov word [rsp + 0x64], bx
call fcn.1400d589c
movzx r11d, word [rsp + 0x64]
cmp r11d, 0x62
jg 0x1400352c5
je 0x1400350d3
cmp r11d, ebx
je 0x1400359a6
cmp r11d, 0x47
je 0x1400350b8
cmp r11d, 0x4b
je 0x1400350b1
cmp r11d, 0x4d
je 0x1400350aa
cmp r11d, 0x54
jne 0x1400352c5
mov rax, qword [rsp + 0x68]
shl rax, 0xa
jmp 0x1400350bd
mov rax, qword [rsp + 0x68]
jmp 0x1400350c1
mov rax, qword [rsp + 0x68]
jmp 0x1400350c5
mov rax, qword [rsp + 0x68]
shl rax, 0xa
shl rax, 0xa
shl rax, 0xa
mov qword [rsp + 0x68], rax
jmp 0x1400359a6
shl qword [rsp + 0x68], 9
jmp 0x1400359a6
mov ecx, edx
sub ecx, 0x64
je 0x140035174
sub ecx, ebp
je 0x140035160
sub ecx, ebp
je 0x14003510c
cmp ecx, 6
jne 0x140034e55
cmp r13d, ebx
jne 0x140034e55
lea r13d, [rcx - 3]
jmp 0x1400359a8
cmp qword [rsp + 0x98], rbx
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
mov eax, dword [rsp + 0x90]
cmp edx, 0x46
cmove eax, ebp
add r14, 8
mov rcx, qword [r14]
mov dword [rsp + 0x90], eax
call fcn.1400190a4
mov qword [rsp + 0x98], rax
jmp 0x1400359a6
cmp r13d, ebx
jne 0x140034e55
mov r13d, 4
jmp 0x1400359a8
mov r8d, 0x44
cmp r13d, ebx
jne 0x140034e55
mov eax, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x58]
cmp dx, r8w
mov r8d, dword [rsp + 0x50]
cmove eax, ebp
mov r13d, r10d
mov dword [rsp + 0xa0], eax
cmp edx, 0x52
jne 0x1400359b2
mov dword [rsp + 0xa0], ebp
mov dword [rsp + 0xbc], ebp
jmp 0x1400359b2
cmp esi, 0xffffffff
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, 4
setne al
and ecx, eax
cmp r13d, ebp
mov eax, ebx
setne al
and ecx, eax
cmp r12, rbx
mov eax, ebx
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
mov r12, qword [r14]
jmp 0x1400359a6
cmp edx, 0x74
jg 0x140035819
je 0x140035792
sub edx, 0x6e
je 0x140035786
sub edx, ebp
je 0x140035440
sub edx, ebp
je 0x1400353fb
sub edx, ebp
je 0x1400353ea
cmp edx, r10d
jne 0x140034e55
cmp r13d, 4
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
and ecx, eax
cmp qword [rsp + 0x78], rbx
mov eax, ebx
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
lea r9, [rsp + 0x64]
lea r8, [rsp + 0x78]
mov rcx, qword [r14]
lea rdx, str._I64i_c
mov word [rsp + 0x64], bx
call fcn.1400d589c
movzx r11d, word [rsp + 0x64]
cmp r11d, 0x54
jg 0x140035346
je 0x14003532c
cmp r11d, ebx
je 0x1400353b4
cmp r11d, 0x25
je 0x1400352cf
cmp r11d, 0x47
je 0x140035332
cmp r11d, 0x4b
je 0x14003533e
cmp r11d, 0x4d
je 0x140035338
mov eax, 0xa
jmp 0x140035e28
cmp qword [rsp + 0x78], 0x64
mov ecx, ebx
mov eax, ebx
setge cl
cmp qword [rsp + 0x78], rbx
setle al
or ecx, eax
jne 0x140034e55
lea rcx, [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov r11, qword [rsp + 0xd8]
movabs rax, 0x47ae147ae147ae15
imul r11, qword [rsp + 0x78]
mul r11
sub r11, rdx
shr r11, 1
add r11, rdx
shr r11, 6
mov qword [rsp + 0x78], r11
jmp 0x1400353b4
shl qword [rsp + 0x78], 0xa
shl qword [rsp + 0x78], 0xa
shl qword [rsp + 0x78], 0xa
shl qword [rsp + 0x78], 0xa
jmp 0x1400353b4
cmp r11d, 0x62
je 0x1400353ae
cmp r11d, 0x67
je 0x140035379
cmp r11d, 0x6b
je 0x14003539b
cmp r11d, 0x6d
je 0x14003538a
cmp r11d, 0x74
jne 0x1400352c5
mov rax, qword [rsp + 0x78]
imul rax, rax, 0x3e8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
imul rax, rax, 0x3e8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
imul rax, rax, 0x3e8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
imul rax, rax, 0x3e8
mov qword [rsp + 0x78], rax
jmp 0x1400353b4
shl qword [rsp + 0x78], 9
cmp qword [rsp + 0x78], rbx
jge 0x1400359a6
lea rcx, [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov r11, qword [rsp + 0xd8]
add qword [rsp + 0x78], r11
jns 0x1400359a6
mov eax, 0xb
jmp 0x140035e28
mov rcx, qword [rsp + 0x58]
mov r8d, ebp
mov dword [rsp + 0x50], ebp
jmp 0x1400359b2
cmp r13d, ebp
je 0x140035408
mov edx, ebp
cmp r13d, 4
jne 0x14003540a
mov edx, ebx
mov rax, qword [rsp + 0xb0]
mov ecx, ebx
cmp rax, rbx
mov eax, ebx
setne cl
cmp edi, r10d
setl al
or ecx, eax
or ecx, edx
jne 0x140034e55
add r14, 8
mov rax, qword [r14]
mov qword [rsp + 0xb0], rax
jmp 0x1400359a6
cmp r13d, 4
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
and ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
lea rdx, [0x1400f15c4]
mov rcx, qword [r14]
call fcn.1400d5744
movsxd rsi, r13d
jmp 0x14003576a
lea rdx, [0x1400f5798]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x1400354ac
mov eax, dword [rsp + 0x60]
test bpl, al
jne 0x140034e55
or eax, ebp
or r15d, ebp
mov dword [rsp + 0x60], eax
jmp 0x14003575c
lea rdx, [0x1400f5790]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x1400354db
mov eax, dword [rsp + 0x60]
test bpl, al
jne 0x140034e55
or eax, ebp
and r15d, 0xfffffffe
mov dword [rsp + 0x60], eax
jmp 0x14003575c
lea rdx, [0x1400f5788]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x14003550a
mov eax, dword [rsp + 0x60]
test al, 2
jne 0x140034e55
or eax, 2
or r15d, 2
mov dword [rsp + 0x60], eax
jmp 0x14003575c
lea rdx, [0x1400f5780]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x140035539
mov eax, dword [rsp + 0x60]
test al, 2
jne 0x140034e55
or eax, 2
and r15d, 0xfffffffd
mov dword [rsp + 0x60], eax
jmp 0x14003575c
lea rdx, str.saved
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x14003556c
cmp rsi, 4
jne 0x140034e55
bts dword [rsp + 0x60], 0x10
btr r15d, 0x10
or qword [rsp + 0x58], 8
jmp 0x14003575c
cmp rsi, rbp
jne 0x140034e55
lea rdx, [0x1400f5764]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x1400355bf
test r15d, 0xf000
mov edx, ebx
mov ecx, ebx
setne dl
mov eax, r15d
and eax, 0xf00
cmp eax, 0x300
setne cl
or edx, ecx
jne 0x140034e55
mov dword [rsp + 0x90], ebp
bts r15d, 0xd
jmp 0x14003575c
lea rdx, str.comm
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x140035609
test r15d, 0xf000
mov edx, ebx
mov ecx, ebx
setne dl
mov eax, r15d
and eax, 0xf00
cmp eax, 0x300
setne cl
or edx, ecx
jne 0x140034e55
mov dword [rsp + 0x90], ebp
bts r15d, 0xc
jmp 0x14003575c
lea rdx, [0x1400f5750]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x14003564e
test r15d, 0xf000
mov edx, ebx
mov ecx, ebx
setne dl
mov eax, r15d
and eax, 0xf00
cmp eax, 0x300
setne cl
or edx, ecx
jne 0x140034e55
or r15d, 0x3000
jmp 0x14003575c
lea rdx, [0x1400f5748]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x14003569e
mov eax, ebx
mov edx, ebx
mov ecx, r15d
and ecx, 0xf00
cmp ecx, 0x100
setne dl
cmp ecx, ebx
setne al
and edx, eax
test r15d, 0xf000
mov eax, ebx
setne al
or edx, eax
jne 0x140034e55
or r15d, 0x1100
jmp 0x14003575c
lea rdx, [0x1400f5740]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x1400356eb
mov eax, ebx
mov edx, ebx
mov ecx, r15d
and ecx, 0xf00
cmp ecx, 0x100
setne dl
cmp ecx, ebx
setne al
and edx, eax
test r15d, 0xf000
mov eax, ebx
setne al
or edx, eax
jne 0x140034e55
or r15d, 0x2100
jmp 0x14003575c
lea rdx, str.shared
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x140035705
bts r15d, 0x11
jmp 0x14003575c
test r15b, 0xf0
jne 0x140034e55
lea rdx, [0x1400f5724]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x140035728
or r15d, 0x10
jmp 0x14003575c
lea rdx, [0x1400f571c]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x140035741
or r15d, 0x20
jmp 0x14003575c
lea rdx, [0x1400f5714]
mov rcx, rdi
call fcn.1400d5334
cmp eax, ebx
jne 0x140034e55
or r15d, 0x30
lea rdx, [0x1400f15c4]
xor ecx, ecx
call fcn.1400d5744
mov rdi, rax
cmp rax, rbx
jne 0x14003547e
mov edi, dword [rsp + 0x240]
mov esi, dword [rsp + 0x70]
jmp 0x1400359a6
mov dword [rsp + 0xa8], ebp
jmp 0x1400359a8
test r15d, 0xf00
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
lea rdx, str.file
mov rcx, qword [r14]
call fcn.1400d5334
cmp eax, ebx
jne 0x1400357d9
bts r15d, 8
jmp 0x1400359a6
mov rcx, qword [r14]
lea rdx, [0x1400f56fc]
call fcn.1400d5334
cmp eax, ebx
jne 0x1400357f6
bts r15d, 9
jmp 0x1400359a6
mov rcx, qword [r14]
lea rdx, str.proxy
call fcn.1400d5334
cmp eax, ebx
jne 0x140034e55
or r15d, 0x300
jmp 0x1400359a6
sub edx, 0x75
je 0x140035945
sub edx, ebp
je 0x1400358e3
sub edx, r10d
je 0x14003588d
cmp edx, ebp
jne 0x140034e55
cmp dword [rsp + 0x84], ebx
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
mov rax, qword [r14]
movzx ecx, word [rax]
call fcn.1400d5c10
cmp eax, ebx
je 0x140034e55
mov rcx, qword [r14]
xor r8d, r8d
xor edx, edx
call fcn.1400d5b4c
mov dword [rsp + 0x84], eax
jmp 0x1400359a6
cmp dword [rsp + 0x88], ebx
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
mov rax, qword [r14]
movzx ecx, word [rax]
call fcn.1400d5c10
cmp eax, ebx
je 0x140034e55
mov rcx, qword [r14]
xor r8d, r8d
xor edx, edx
call fcn.1400d5b4c
mov dword [rsp + 0x88], eax
jmp 0x1400359a6
cmp byte [rsp + 0x258], bl
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, ebp
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
mov ecx, ebx
mov eax, ebx
mov rdx, qword [r14]
cmp word [rdx], 0x38
seta cl
cmp word [rdx], 0x31
setb al
or ecx, eax
jne 0x140034e55
cmp word [rdx + 2], bx
jne 0x140034e55
mov r9b, byte [rdx]
sub r9b, 0x30
mov byte [rsp + 0x258], r9b
jmp 0x1400359a6
cmp r12, rbx
mov eax, ebx
mov ecx, ebx
setne cl
cmp r13d, 4
setne al
and ecx, eax
cmp r13d, ebp
mov eax, ebx
setne al
and ecx, eax
cmp esi, 0xffffffff
mov eax, ebx
setne al
or ecx, eax
cmp edi, r10d
mov eax, ebx
setl al
or ecx, eax
jne 0x140034e55
add r14, 8
mov rax, qword [r14]
movzx ecx, word [rax]
call fcn.1400d5c10
cmp eax, ebx
je 0x140034e55
mov rcx, qword [r14]
xor r8d, r8d
xor edx, edx
call fcn.1400d5b4c
mov esi, eax
mov dword [rsp + 0x70], eax
sub edi, ebp
mov rcx, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x50]
cmp edi, ebp
jg 0x140034e64
cmp r13d, 5
jne 0x1400359f7
mov rax, rcx
shr rax, 2
not eax
and eax, ebp
test bpl, cl
cmovne r8d, ebp
cmp r12, rbx
je 0x140034e55
cmp word [r12], bx
je 0x140034e55
movzx ecx, word [r12]
mov edx, eax
call fcn.140019ac0
jmp 0x140034e55
mov edx, dword [rsp + 0x60]
mov r9d, dword [rsp + 0xa4]
sub r13d, ebp
movzx esi, bx
je 0x140035b58
sub r13d, ebp
je 0x140035b13
sub r13d, ebp
je 0x140035aaf
cmp r13d, ebp
jne 0x140034e55
mov edi, dword [rsp + 0x70]
mov ecx, ebx
mov eax, ebx
cmp edi, 0xffffffff
sete cl
cmp r12, rbx
sete al
test eax, ecx
jne 0x140034e55
cmp edx, ebx
jne 0x140035a4f
cmp r12, rbx
je 0x140035a64
mov r8d, edx
mov r9d, r15d
mov ecx, edi
mov rdx, r12
call fcn.14001a380
mov r14d, eax
jmp 0x140035a67
mov r14d, ebx
mov r8, qword [rsp + 0x78]
cmp r8, rbx
jle 0x140035a7e
mov rdx, r12
mov ecx, edi
call fcn.14001a678
mov r14d, eax
cmp r14d, ebx
jne 0x140035e25
mov rax, qword [rsp + 0xb0]
cmp rax, rbx
je 0x140035e25
mov r8, rax
mov rdx, r12
mov ecx, edi
call fcn.140028554
mov r13, qword [rsp + 0x58]
jmp 0x140035d0c
mov rsi, qword [rsp + 0x250]
lea rdx, [0x1400f17e8]
mov rcx, rsi
call fcn.140062700
mov edi, dword [rsp + 0x70]
mov r11d, ebx
cmp edi, 0xffffffff
sete r11b
cmp r12, rbx
sete bl
test ebx, r11d
je 0x140035afc
movzx r8d, word [rsp + 0xb8]
mov ecx, dword [rsp + 0xa8]
mov rdx, rsi
call fcn.140019d10
jmp 0x140035e28
mov r9, qword [rsp + 0x58]
mov r8, rsi
mov rdx, r12
mov ecx, edi
call fcn.140019f38
jmp 0x140035e28
mov r9d, dword [rsp + 0xbc]
mov edi, dword [rsp + 0x70]
cmp r12, rbx
mov eax, ebx
sete al
or eax, r9d
cmp edi, 0xffffffff
sete bl
test ebx, eax
jne 0x140034e55
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r8d
mov r8d, dword [rsp + 0xa0]
mov rdx, r12
mov ecx, edi
call fcn.140028938
jmp 0x140035e28
mov r14, qword [rsp + 0x98]
cmp r9d, ebx
je 0x140035b7c
cmp r14, rbx
je 0x140034e55
lea rdx, [rsp + 0x68]
mov rcx, r14
call qword [0x14010deb0]
lea r8, [0x1400f04f4]
lea rdx, str.CurRamDisk
lea rcx, [0x14010df00]
call fcn.140057738
mov al, byte [rsp + 0x258]
cmp al, bl
je 0x140035c03
mov edx, dword [rsp + 0x8c]
movzx edi, al
lea r9, [rsp + 0x100]
lea r8, [rsp + 0x68]
mov rcx, r14
shl rdi, 5
call qword [0x14010deb8]
cmp eax, ebx
jne 0x140035bd3
mov eax, 0xc
jmp 0x140035e28
mov rdx, qword [rsp + rdi + 0xe0]
mov ecx, ebx
mov eax, ebx
cmp rdx, rbx
sete cl
cmp qword [rsp + rdi + 0xe8], rbx
sete al
or ecx, eax
jne 0x140035bc9
add qword [rsp + 0x68], rdx
mov rax, qword [rsp + rdi + 0xe8]
jmp 0x140035c7d
cmp dword [rsp + 0xa4], ebx
je 0x140035c82
mov edx, dword [rsp + 0x8c]
lea r9, [rsp + 0x100]
lea r8, [rsp + 0x68]
mov rcx, r14
call qword [0x14010deb8]
cmp eax, ebx
je 0x140035c82
lea rdx, [rsp + 0x100]
mov al, byte [rdx + 0x18]
cmp al, 5
je 0x140035c43
mov r8d, ebp
cmp al, 0xf
jne 0x140035c46
mov r8d, ebx
cmp qword [rdx + 8], rbx
mov ecx, ebx
mov eax, ebx
setne cl
cmp qword [rdx], rbx
setne al
and ecx, eax
test r8d, ecx
jne 0x140035c71
lea rax, [rsp + 0x200]
add rdx, 0x20
cmp rdx, rax
jb 0x140035c35
jmp 0x140035c82
mov rax, qword [rdx]
add qword [rsp + 0x68], rax
mov rax, qword [rdx + 8]
mov qword [rsp + 0x78], rax
lea rcx, [0x14010ee80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp r12, rbx
je 0x140035cb5
lea rdx, [0x1400f56cc]
mov rcx, r12
call fcn.1400d5334
cmp eax, ebx
jne 0x140035cb5
call qword [0x14010de90]
mov si, ax
mov word [r12], ax
mov rax, qword [rsp + 0xb0]
mov r13, qword [rsp + 0x58]
lea r8, [rsp + 0x68]
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x90]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x70]
mov r9d, r15d
mov qword [rsp + 0x20], r14
call fcn.140034600
lea rcx, [0x14010ee80]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, dword [rsp + 0x70]
cmp r12, rbx
je 0x140035d82
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x140035d28
cmp word [r12 + 2], 0x3a
jmp 0x140035d49
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jne 0x140035d50
lea rcx, [r12 + 2]
lea rdx, [0x1400f34a8]
call fcn.1400d5334
cmp eax, ebx
mov ecx, ebx
sete cl
jmp 0x140035d52
mov ecx, ebx
cmp ecx, ebx
je 0x140035d82
lea rdx, str.CurRamDisk
lea rcx, [0x14010df00]
mov r8, r12
call fcn.140057738
test bpl, r13b
jne 0x140035d82
movzx ecx, word [r12]
mov r8d, dword [rsp + 0x50]
mov edx, ebp
call fcn.140019ac0
cmp si, bx
je 0x140035dd7
cmp dword [rsp + 0xa8], ebx
jne 0x140035dd7
lea rdx, [0x1400f56c8]
lea rcx, [rsp + 0x98]
or r8, 0xffffffffffffffff
call fcn.1400626c0
mov rbx, qword [rsp + 0x250]
lea rdx, [rsp + 0x98]
mov rcx, rbx
call fcn.14006274c
lea rcx, [rsp + 0x98]
call fcn.14005041c
mov r11, qword [rbx]
mov word [r11 + 2], si
jmp 0x140035e25
mov rbp, qword [rsp + 0x250]
mov edx, 0x42
mov rcx, rbp
call fcn.14005828c
mov r11, qword [rbp]
mov eax, 0x2a
mov word [r11], ax
cmp si, bx
je 0x140035e09
cmp edi, ebx
lea rdx, str._d__c:
jge 0x140035e10
lea rdx, [0x1400f0cbc]
mov rcx, qword [rbp]
movzx r9d, si
mov r8d, edi
add rcx, 2
call qword [sym.imp.USER32.dll_wsprintfW]
mov eax, r14d
mov rbx, qword [rsp + 0x248]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret