Function at 0x1400a91d4
Capabilities:
Clear file content
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x550
mov rbp, rcx
xor r13d, r13d
lea rdx, [rax + 0x10]
lea rcx, [rax - 0x440]
mov qword [rax - 0x440], r13
call fcn.14005e0a0
mov rcx, qword [rsp + 0x598]
mov rbx, r13
mov qword [rsp + 0xa0], rbx
mov r15b, r13b
mov byte [rsp + 0x43], r13b
mov byte [rsp + 0x48], r13b
mov byte [rsp + 0x60], r13b
mov dil, r13b
mov byte [rsp + 0x5a8], r13b
mov qword [rsp + 0x78], r13
lea edx, [r13 + 0x23]
lea r9d, [r13 + 9]
lea r14d, [r13 + 0x20]
lea r11d, [r13 + 0x2a]
lea r8d, [r13 + 0x2e]
lea r10d, [r13 + 2]
jmp 0x1400a92a2
cmp r9w, ax
ja 0x1400a926d
cmp ax, 0xd
jbe 0x1400a92ab
cmp r14w, ax
je 0x1400a92ab
cmp r11w, ax
jne 0x1400a927e
mov r15b, byte [rcx]
jmp 0x1400a9297
cmp r8w, ax
jne 0x1400a928c
mov al, byte [rcx]
mov byte [rsp + 0x43], al
jmp 0x1400a9297
cmp dx, ax
jne 0x1400a9297
mov al, byte [rcx]
mov byte [rsp + 0x48], al
add rcx, r10
mov qword [rsp + 0x598], rcx
movzx eax, word [rcx]
cmp ax, r13w
jne 0x1400a9261
lea rcx, [rsp + 0x598]
call fcn.14004ea3c
mov rsi, qword [rsp + 0x598]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x70], rsi
call fcn.140055fcc
movzx r11d, word [rsi]
mov r8d, 0x2d
lea r12d, [r8 - 0x2c]
cmp r8w, r11w
jne 0x1400a9392
lea r12d, [r8 - 1]
movzx eax, word [rsi + 2]
cmp ax, r13w
je 0x1400a9358
mov ecx, 9
cmp cx, ax
ja 0x1400a930d
cmp ax, 0xd
jbe 0x1400a9358
cmp r14w, ax
je 0x1400a9358
cmp ax, r12w
je 0x1400a9358
cmp cx, r11w
ja 0x1400a9326
cmp r11w, 0xd
jbe 0x1400a933f
cmp r14w, r11w
je 0x1400a933f
add rsi, 2
mov qword [rsp + 0x70], rsi
mov r11w, word [rsi]
cmp r11w, r13w
jne 0x1400a9319
lea rcx, [rsp + 0x70]
call fcn.14004ea3c
mov rsi, qword [rsp + 0x70]
mov r11w, word [rsi]
cmp r8w, r11w
je 0x1400a92f3
mov qword [rsp + 0xb0], rsi
mov r12d, 1
cmp rsi, qword [rsp + 0x598]
je 0x1400a9392
mov word [rsi - 2], r13w
mov rdx, qword [rsp + 0x598]
lea r8, [rsp + 0x68]
xor r9d, r9d
mov rcx, rbp
mov byte [rsp + 0x20], r12b
call fcn.140069b2c
mov rax, qword [rsp + 0x68]
lea rcx, [rsp + 0x58]
mov rdx, r12
mov qword [rsp + 0x598], rax
call fcn.140056040
mov ecx, 0x200
movabs rax, 0x7fffffffffffffff
or r14, 0xffffffffffffffff
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0x98], r13
mov r12, r13
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0xb8], r13
mov qword [rsp + 0x90], r13
mov byte [rsp + 0x42], r13b
mov byte [rsp + 0x88], r13b
mov byte [rsp + 0x44], r13b
mov bpl, r13b
mov qword [rsp + 0xf0], r13
jmp 0x1400a965c
lea rdx, [rsp + 0x598]
lea rcx, [0x1400f5814]
mov r8d, 3
call fcn.140058710
cmp al, r13b
je 0x1400a9445
mov byte [rsp + 0x60], 1
jmp 0x1400a965c
lea rdx, [rsp + 0x598]
lea rcx, str._free
mov r8d, 5
call fcn.1400587a8
cmp al, r13b
jne 0x1400a9cd9
lea rdx, [rsp + 0x598]
lea rcx, [0x1400f5810]
mov r8d, 3
call fcn.1400587a8
cmp al, r13b
je 0x1400a95d3
mov rcx, qword [rsp + 0x598]
mov r9d, 9
movzx eax, word [rcx]
mov r8, rcx
mov qword [rsp + 0x70], rcx
cmp ax, r13w
je 0x1400a94d4
lea edx, [r9 + 0x17]
cmp r9w, ax
ja 0x1400a94ba
cmp ax, 0xd
jbe 0x1400a94d4
cmp dx, ax
je 0x1400a94d4
add rcx, 2
mov qword [rsp + 0x598], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400a94ae
lea rcx, [rsp + 0x598]
call fcn.14004ea3c
mov eax, 0x3f
mov qword [rsp + 0x118], r13
mov qword [rsp + 0xd0], r13
cmp ax, word [r8]
jne 0x1400a9560
lea rdx, [r8 + 2]
mov qword [rsp + 0xf0], rdx
mov rcx, rdx
movzx eax, word [rdx]
cmp ax, r13w
je 0x1400a9539
mov r8d, 0x20
cmp r9w, ax
ja 0x1400a9526
cmp ax, 0xd
jbe 0x1400a9539
cmp r8w, ax
je 0x1400a9539
add rcx, 2
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400a951a
cmp word [rcx], r13w
je 0x1400a9543
mov word [rcx], r13w
mov rcx, qword [rsp + 0x590]
lea r8, [rsp + 0xd0]
xor r9d, r9d
call fcn.14005e2e8
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.1400a45cc
mov rdi, qword [rsp + 0x118]
cmp rdi, 0xffffffffffffffff
je 0x1400a95b9
cmp rdi, r13
je 0x1400a95b9
lea rdx, [rsp + 0xa0]
mov rcx, rdi
mov qword [rsp + 0xf0], r13
call fcn.14004ede8
mov rbx, qword [rsp + 0xa0]
cmp rax, r13
je 0x1400a95b9
mov rax, rdi
cmp rbx, r13
cmovne rax, rbx
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0xd0]
call fcn.14004ea6c
mov dil, byte [rsp + 0x5a8]
jmp 0x1400a965c
lea rdx, [rsp + 0x598]
lea rcx, [0x1400f580c]
mov r8d, 2
call fcn.140058710
cmp al, r13b
je 0x1400a9603
mov eax, 1
mov dil, al
mov byte [rsp + 0x5a8], al
jmp 0x1400a965c
lea rdx, [rsp + 0x598]
lea rcx, str._quick
mov r8d, 6
call fcn.140058710
cmp al, r13b
je 0x1400a9627
mov bpl, 1
jmp 0x1400a965c
lea rdx, [rsp + 0x598]
lea rcx, [0x1400f5808]
mov r8d, 3
call fcn.140058710
cmp al, r13b
jne 0x1400a9884
lea rcx, [rsp + 0x598]
mov edx, 0x2d
call fcn.140044d9c
mov rax, qword [rsp + 0x598]
mov ecx, 0x2d
cmp cx, word [rax]
je 0x1400a941c
lea rdx, [rsp + 0x598]
lea rcx, str._quick
mov r8d, 6
call fcn.140058710
mov r12, qword [rsp + 0x590]
movzx ecx, bpl
cmp al, r13b
mov eax, 1
mov qword [rsp + 0x598], rsi
cmovne ecx, eax
lea esi, [rax + 0x2b]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x128], ecx
lea rdx, [rsp + 0x598]
mov r9d, esi
mov rcx, r12
mov word [rsp + 0x20], r13w
call fcn.140048704
cmp word [rax], si
jne 0x1400a9e55
mov rax, qword [rsp + 0x58]
cmp word [rax], r13w
je 0x1400a9e55
movzx ecx, dil
lea edx, [rsi - 6]
lea edi, [rsi - 0x2b]
cmp dx, word [rax]
mov rdx, qword [rsp + 0x598]
movzx eax, r15b
cmove ecx, edi
lea r8, [rsp + 0x68]
mov byte [rsp + 0x20], dil
cmp cl, r13b
mov dword [rsp + 0x64], ecx
mov rcx, r12
cmovne eax, r13d
xor r9d, r9d
mov dword [rsp + 0x50], eax
call fcn.140069b2c
mov r11, qword [rsp + 0x68]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x598], r11
call fcn.140063ef4
mov rax, qword [rsp + 0x98]
cmp rax, r13
mov qword [rsp + 0x118], rax
jl 0x1400a9e55
mov rax, qword [rsp + 0x598]
lea ecx, [rsi - 9]
lea rbp, [rdi - 5]
mov qword [rsp + 0x5a8], rbp
mov byte [rsp + 0x49], r13b
lea r15d, [rsi - 0x2a]
cmp cx, word [rax]
jne 0x1400a97d3
add rax, r15
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x598], rax
call fcn.14004ea3c
mov rax, qword [rsp + 0x598]
lea ecx, [rsi - 2]
lea rdx, [rsp + 0x5a8]
cmp cx, word [rax]
lea rcx, [rsp + 0x598]
sete byte [rsp + 0x49]
call fcn.140063ef4
mov rbp, qword [rsp + 0x5a8]
lea rcx, [rsp + 0x598]
mov r8d, 0x3b
mov edx, esi
call fcn.14004ecd0
mov rcx, qword [rsp + 0x598]
cmp word [rcx], r13w
je 0x1400a9801
add rcx, r15
mov qword [rsp + 0x598], rcx
cmp r14, r13
jl 0x1400a980d
cmp rbp, r14
cmovg rbp, r14
lea rcx, [rsp + 0x598]
call fcn.14004ea3c
mov rcx, qword [rsp + 0x598]
call fcn.140015c98
mov rsi, qword [rsp + 0x598]
lea rcx, str.zero
mov rdx, rsi
call fcn.14004fe38
mov qword [rsp + 0xd8], rsi
mov byte [rsp + 0x41], al
cmp word [rsi], r13w
jne 0x1400a9d99
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x68]
call fcn.14004ea6c
cmp rbx, r13
je 0x1400a987c
cmp rbx, 0xffffffffffffffff
je 0x1400a987c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, rdi
jmp 0x1400a9e84
mov r11, qword [rsp + 0x598]
mov eax, 1
mov byte [rsp + 0x44], al
mov r15b, al
mov eax, 0x2d
cmp ax, word [r11]
jne 0x1400a9672
mov edi, dword [rsp + 0x88]
lea esi, [rax - 0x26]
mov rbx, r13
lea r15d, [rax - 0x2c]
movzx eax, word [r11 + 2]
cmp ax, r13w
je 0x1400a9c81
mov r8d, 9
cmp r8w, ax
ja 0x1400a98dd
cmp ax, 0xd
jbe 0x1400a9c81
mov edx, 0x20
cmp dx, ax
je 0x1400a9c81
lea ecx, [rdx + 0xc]
cmp ax, cx
je 0x1400a9c81
movzx eax, word [r11]
mov rcx, r11
mov qword [rsp + 0x70], rcx
cmp ax, r13w
je 0x1400a992c
cmp r8w, ax
ja 0x1400a9915
cmp ax, 0xd
jbe 0x1400a9927
cmp dx, ax
je 0x1400a9927
add rcx, 2
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400a9909
mov qword [rsp + 0x70], rcx
lea rcx, [rsp + 0x70]
call fcn.14004ea3c
lea rcx, str._bs
mov r8d, 4
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a999b
add r11, 8
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
movsxd rsi, dword [rsp + 0x50]
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xf8], rsi
mov esi, 7
jmp 0x1400a9c65
lea rcx, str._ibs
mov r8d, 5
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a99f3
add r11, 0xa
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
movsxd rax, dword [rsp + 0x50]
mov qword [rsp + 0xf8], rax
jmp 0x1400a9c65
lea rcx, str._obs
mov r8d, 5
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a9a4b
add r11, 0xa
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
movsxd rax, dword [rsp + 0x50]
mov qword [rsp + 0xc8], rax
jmp 0x1400a9c65
lea rcx, str._count
mov r8d, esi
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a9aa0
add r11, 0xe
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa8], rax
jmp 0x1400a9c65
lea rcx, str._len
mov r8d, 5
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a9af0
add r11, 0xa
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
mov r14, qword [rsp + 0x50]
jmp 0x1400a9c65
lea rcx, str._conv
mov r8d, 6
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a9b7e
add r11, 0xc
lea rcx, str.notrunc
mov r8d, esi
mov rdx, r11
mov qword [rsp + 0x598], r11
call fcn.14004fdfc
movzx edi, dil
cmp al, r13b
movzx eax, word [r11]
cmovne edi, r15d
cmp ax, r13w
je 0x1400a9c65
mov ecx, 0x20
lea r8d, [rcx - 0x17]
cmp r8w, ax
ja 0x1400a9b5a
cmp ax, 0xd
jbe 0x1400a9c65
cmp cx, ax
je 0x1400a9c65
add r11, 2
mov qword [rsp + 0x598], r11
mov ax, word [r11]
cmp ax, r13w
jne 0x1400a9b4a
jmp 0x1400a9c65
lea rcx, str._skip
mov r8d, 6
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a9bd2
add r11, 0xc
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
mov r12, qword [rsp + 0x50]
jmp 0x1400a9c65
lea rcx, str._skipb
mov r8d, esi
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x1400a9c1b
add r11, 0xe
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x598]
mov r12, r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x598], r11
call fcn.140063ef4
cmp eax, r13d
jle 0x1400a9c65
mov rbx, qword [rsp + 0x50]
jmp 0x1400a9c65
lea rdx, [rsp + 0x598]
lea rcx, str._quick
mov r8d, 6
call fcn.140058710
cmp al, r13b
je 0x1400a9c3f
mov bpl, r15b
jmp 0x1400a9c65
lea rdx, [rsp + 0x598]
lea rcx, str._qspace
mov r8d, esi
call fcn.140058710
movzx ebp, bpl
mov ecx, 0x10
cmp al, r13b
cmovne ebp, ecx
mov r11, qword [rsp + 0x70]
mov eax, 0x2d
mov qword [rsp + 0x598], r11
cmp ax, word [r11]
je 0x1400a98b8
mov rsi, qword [rsp + 0xb0]
mov dword [rsp + 0x88], edi
mov dil, byte [rsp + 0x5a8]
mov qword [rsp + 0xb8], rbx
cmp rbx, r13
mov rbx, qword [rsp + 0xa0]
mov qword [rsp + 0xe0], r14
jge 0x1400a9672
mov rax, qword [rsp + 0xf8]
imul rax, r12
cmp rax, r13
cmovl rax, r13
mov qword [rsp + 0xb8], rax
jmp 0x1400a9672
mov rcx, qword [rsp + 0x598]
mov qword [rsp + 0xd8], rcx
movzx eax, word [rcx]
cmp ax, r13w
je 0x1400a9d21
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400a9d07
cmp ax, 0xd
jbe 0x1400a9d21
cmp dx, ax
je 0x1400a9d21
add rcx, 2
mov qword [rsp + 0x598], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400a9cfb
lea rcx, [rsp + 0x598]
call fcn.14004ea3c
lea rdx, [rsp + 0x5a8]
lea rcx, [rsp + 0xd8]
mov qword [rsp + 0x5a8], r13
call fcn.1400a45cc
mov rcx, qword [rsp + 0x5a8]
cmp rcx, 0xffffffffffffffff
je 0x1400a9d64
cmp rcx, r13
je 0x1400a9d64
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x68]
call fcn.14004ea6c
cmp rbx, r13
je 0x1400a9e84
cmp rbx, 0xffffffffffffffff
je 0x1400a9e84
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400a9e84
lea rcx, [rsp + 0xd0]
mov edx, edi
mov qword [rsp + 0xd0], rsi
call fcn.140068490
lea rcx, [rsp + 0x100]
mov rdi, rax
call fcn.140055d78
mov al, r13b
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x70], r13
mov byte [rsp + 0x40], al
movabs r15, 0x3fffffffffffffff
cmp byte [rsp + 0x48], r13b
je 0x1400a9fd3
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x5a8]
call fcn.140055fcc
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rsi
mov rcx, r12
mov qword [rsp + 0x20], r13
call fcn.140015a64
mov r12, rax
cmp rax, r13
jne 0x1400a9eaf
lea rcx, [rsp + 0x5a8]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x100]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x68]
call fcn.14004ea6c
cmp rbx, r13
je 0x1400a9e7d
cmp rbx, 0xffffffffffffffff
je 0x1400a9e7d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, 0xffffffff80070057
lea rcx, [rsp + 0x148]
call fcn.14004ea6c
mov rbx, qword [rsp + 0x5a0]
mov rax, r13
add rsp, 0x550
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdi, qword [rax + 0x18]
and rdi, r15
cmp rbp, r13
mov r15, qword [rsp + 0xb8]
jle 0x1400a9ecc
lea rax, [r15 + rbp]
cmp rax, rdi
jle 0x1400a9ed9
mov rbp, rdi
sub rbp, r15
cmp rbp, r13
cmovle rbp, r13
cmp r14, r13
jl 0x1400a9ee5
cmp r14, rbp
cmovl rbp, r14
lea rdx, [rbp + 0x200000]
lea rcx, [rsp + 0x100]
call fcn.140055e58
mov rsi, qword [rsp + 0x100]
cmp rsi, r13
jne 0x1400a9f60
lea rcx, [rsp + 0x5a8]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x100]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x68]
call fcn.14004ea6c
cmp rbx, r13
je 0x1400a9f55
cmp rbx, 0xffffffffffffffff
je 0x1400a9f55
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13d, 1
jmp 0x1400a9e84
mov rdx, qword [r12 + 8]
add rsi, 0x100000
mov qword [rsp + 0x70], rbp
and rsi, 0xfffffffffff00000
cmp r15, rdi
mov qword [rsp + 0x108], rbp
cmovg r15, rdi
add rdx, r15
cmp rbp, r13
mov qword [rsp + 0xb8], r15
jle 0x1400a9fa7
cmp rsi, rdx
je 0x1400a9fa7
mov r8, rbp
mov rcx, rsi
call fcn.14001a478
mov eax, 1
lea rcx, [rsp + 0x5a8]
mov byte [rsp + 0x40], al
mov byte [rsp + 0x42], al
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400aa189
cmp rdi, r13
je 0x1400aa18d
mov edx, 2
lea rax, [rdi + 2]
lea ecx, [rdx + 0x1e]
mov byte [rsp + 0x42], dl
mov byte [rsp + 0x40], dl
mov dword [rsp + 0x12c], ecx
lea ecx, [rdx + 0x2c]
mov qword [rsp + 0x5a8], rax
cmp cx, word [rax]
jne 0x1400aa01d
add rax, rdx
mov dword [rsp + 0x12c], 0x40
mov qword [rsp + 0x5a8], rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x5a8]
call fcn.1400a90e4
mov r9, qword [rsp + 0xd0]
mov rcx, qword [0x140106d38]
movzx r14d, word [rdi]
mov r15, rax
mov eax, 0x2e
mov word [rdi], r13w
mov r12, r13
cmp ax, word [r9]
jne 0x1400aa06a
cmp word [r9 + 2], r13w
jne 0x1400aa06a
mov rcx, qword [0x140106d38]
jmp 0x1400aa085
cmp word [r9], r13w
je 0x1400aa085
xor edx, edx
mov rcx, r9
lea r8d, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r12, rax
mov rcx, rax
mov word [rdi], r14w
cmp rcx, r13
je 0x1400aa0b6
mov rdx, qword [rsp + 0x90]
lea rax, [rsp + 0x12c]
lea r9, [rsp + 0x100]
mov r8, r15
mov qword [rsp + 0x20], rax
call fcn.14001b0ac
mov rsi, rax
cmp r12, r13
je 0x1400aa0c4
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp rsi, r13
je 0x1400a9f20
cmp rbp, r13
mov rsi, qword [rsp + 0x108]
mov r12, qword [rsp + 0xb8]
jle 0x1400aa0eb
lea rax, [r12 + rbp]
cmp rax, rsi
jle 0x1400aa0f8
mov rbp, rsi
sub rbp, r12
cmp rbp, r13
cmovle rbp, r13
lea rdx, [rsi + 0x200000]
lea rcx, [rsp + 0x100]
call fcn.140055e58
mov rdi, qword [rsp + 0x100]
cmp rdi, r13
je 0x1400a9f20
mov eax, 0x1ff
lea rcx, [rsi + rdi]
xor edx, edx
mov r8, rax
call fcn.1400cc8d0
mov rcx, qword [rsp + 0xe0]
cmp r12, rsi
cmovg r12, rsi
add rdi, r12
cmp rcx, r13
mov qword [rsp + 0xb8], r12
jl 0x1400aa156
cmp rcx, rbp
cmovl rbp, rcx
lea rsi, [rdi + 0x100000]
mov qword [rsp + 0x108], rbp
mov qword [rsp + 0x70], rbp
and rsi, 0xfffffffffff00000
cmp rbp, r13
jle 0x1400aa189
cmp rsi, rdi
je 0x1400aa189
mov r8, rbp
mov rdx, rdi
mov rcx, rsi
call fcn.14001a478
mov al, byte [rsp + 0x40]
mov rdx, qword [rsp + 0x78]
mov ecx, 1
mov r14d, r13d
cmp rdx, r13
movzx ecx, cl
mov dword [rsp + 0xc0], r13d
cmovne ecx, r13d
mov byte [rsp + 0xe8], r13b
mov qword [rsp + 0x130], r14
mov dword [rsp + 0x80], ecx
mov ecx, dword [rsp + 0x44]
mov rdi, r13
mov qword [rsp + 0x90], r13
mov r15, rdx
mov qword [rsp + 0xb0], rdx
mov byte [rsp + 0x5a8], r13b
mov qword [rsp + 0xd0], r13
mov r12, r13
cmp cl, r13b
je 0x1400aa217
cmp byte [rsp + 0x88], r13b
movzx ecx, cl
sete byte [rsp + 0xe8]
cmp al, r13b
mov eax, 2
cmove ecx, eax
mov dword [rsp + 0x44], ecx
cmp byte [rsp + 0x64], r13b
je 0x1400aa2f7
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x88]
call fcn.140055fcc
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x590]
or r9d, 0xffffffff
xor r8d, r8d
mov qword [rsp + 0x20], r13
call fcn.140015a64
cmp rax, r13
jne 0x1400aa26c
lea rcx, [rsp + 0x88]
jmp 0x1400a9e36
mov r12, qword [rax + 0x18]
mov rcx, qword [rax + 8]
movabs rax, 0x3fffffffffffffff
and r12, rax
mov qword [rsp + 0xd0], rcx
jle 0x1400aa25f
cmp byte [rsp + 0x40], r13b
je 0x1400aa2d8
mov rax, qword [rsp + 0x98]
sub r12, rax
cmp r12, rbp
cmovg r12, rbp
cmp r12, r13
jle 0x1400aa2b9
mov r8, qword [rsp + 0x70]
add rcx, rax
mov rdx, rsi
call fcn.14001a478
lea rcx, [rsp + 0x88]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400ab7cf
lea rcx, [rsp + 0x88]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400aa3f8
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x58]
call fcn.1400682f8
cmp al, r13b
mov byte [rsp + 0x5a8], al
jl 0x1400a9e48
cmp byte [rsp + 0x44], r13b
je 0x1400aa376
cmp al, r13b
jg 0x1400aa376
cmp r15, r13
jne 0x1400aa3c1
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0x90]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rdi, qword [rsp + 0x90]
mov r15, rax
mov qword [rsp + 0xb0], rax
cmp r15, r13
jne 0x1400aa3c1
mov rdx, qword [rsp + 0x58]
mov eax, 3
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x90]
mov r9d, eax
mov r8d, 0xc0000000
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rdi, qword [rsp + 0x90]
mov r15, rax
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xf0]
cmp rax, r13
je 0x1400aa3f8
cmp rdi, r13
je 0x1400aa3f8
mov rcx, qword [rsp + 0x590]
lea r9, [0x1400ee708]
mov r8, rax
mov rdx, rdi
call fcn.140058ea4
mov rdi, r13
mov qword [rsp + 0x90], r13
mov ecx, 2
cmp byte [rsp + 0x44], cl
jne 0x1400ab196
mov rcx, qword [rsp + 0xf8]
cmp rcx, r13
jle 0x1400aa7c4
cmp qword [rsp + 0xc8], r13
jle 0x1400aa7c4
mov rbp, qword [rsp + 0xe0]
cmp rbp, r13
jl 0x1400aa447
lea rax, [rcx + rbp - 1]
cqo
idiv rcx
mov qword [rsp + 0xa8], rax
jmp 0x1400aa47a
mov rsi, qword [rsp + 0xa8]
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
jne 0x1400aa46b
mov rbp, rax
mov qword [rsp + 0xe0], rax
jmp 0x1400aa47a
mov rbp, rcx
imul rbp, rsi
mov qword [rsp + 0xe0], rbp
mov rcx, qword [rsp + 0xd8]
call fcn.1400188a8
lea rcx, [rsp + 0x50]
mov rdx, rax
call fcn.14006016c
mov r9d, dword [rsp + 0x64]
mov rax, qword [rsp + 0xf8]
cmp r9b, r13b
mov qword [rsp + 0xa0], rax
jg 0x1400aa4de
cmp r15, r13
jne 0x1400aa4de
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
cmp rdi, r13
je 0x1400a9f20
cmp rdi, 0xffffffffffffffff
je 0x1400a9f20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400a9f20
mov esi, dword [rsp + 0x128]
mov dl, byte [rsp + 0x5a8]
cmp sil, r13b
je 0x1400aa69c
cmp dl, r13b
jg 0x1400aa69c
cmp r9b, r13b
jg 0x1400aa69c
cmp qword [rsp + 0x78], r13
jne 0x1400aa52d
cmp rdi, r13
je 0x1400aa522
cmp rdi, 0xffffffffffffffff
je 0x1400aa522
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, r13
mov qword [rsp + 0x90], r13
mov eax, 1
cmp sil, al
jne 0x1400aa543
mov rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.14005d890
cmp qword [rsp + 0x78], r13
jne 0x1400aa592
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0x90]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rdi, qword [rsp + 0x90]
mov r15, rax
mov qword [rsp + 0xb0], rax
cmp r15, r13
je 0x1400aa4b3
mov r8b, byte [rsp + 0x41]
cmp r8b, r13b
je 0x1400aa686
mov rdx, qword [rsp + 0xa8]
cmp rdx, r13
jl 0x1400aa686
mov rax, qword [rsp + 0xc8]
imul rax, rdx
cmp rbp, r13
jl 0x1400aa5d2
cmp rax, rbp
cmovg rax, rbp
mov rcx, qword [rsp + 0x98]
lea rsi, [rax + rcx]
movabs rcx, 0x7fffffffffffffff
movabs rax, 0x7ffffffffffffdff
cmp rdx, rcx
cmovge rsi, rax
cmp byte [rsp + 0xe8], r13b
jne 0x1400aa62d
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 2]
call fcn.14004fd5c
mov ecx, dword [rsp + 0xe8]
cmp rax, rsi
movzx ecx, cl
mov eax, 1
cmovl ecx, eax
mov dword [rsp + 0xe8], ecx
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.14004fd5c
cmp rax, rsi
mov rsi, qword [rsp + 0xa8]
movabs rax, 0x7fffffffffffffff
jne 0x1400aa666
cmp rsi, rax
jge 0x1400aa678
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
jmp 0x1400ab7cf
cmp rsi, rax
jge 0x1400aa678
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.14004fd5c
mov dl, byte [rsp + 0x5a8]
mov r9d, dword [rsp + 0x64]
jmp 0x1400aa6a4
mov dl, byte [rsp + 0x5a8]
mov rsi, qword [rsp + 0xa8]
mov r9d, dword [rsp + 0x64]
jmp 0x1400aa6a9
mov rsi, qword [rsp + 0xa8]
mov r8b, byte [rsp + 0x41]
cmp rsi, r13
jle 0x1400aa657
cmp rbp, r13
jle 0x1400aa657
mov rcx, r13
mov dword [rsp + 0xc0], r13d
mov qword [rsp + 0x70], rcx
cmp r8b, r13b
jne 0x1400aa6d4
mov byte [rsp + 0x42], 1
cmp byte [rsp + 0x40], r13b
je 0x1400aa6d9
mov byte [rsp + 0x42], r13b
cmp dl, r13b
jle 0x1400aa6f3
mov rcx, qword [rsp + 0x98]
mov eax, 0x1ff
and rcx, rax
mov qword [rsp + 0x70], rcx
mov rsi, qword [rsp + 0x98]
sub rsi, rcx
cmp rsi, r13
jle 0x1400aa732
cmp r9b, r13b
jg 0x1400aa732
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.14004fd5c
cmp rax, rsi
je 0x1400aa732
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x50]
mov esi, eax
call fcn.14004ea6c
jmp 0x1400ab7ea
mov rbp, qword [rsp + 0x50]
mov eax, 0x26
mov qword [rsp + 0x138], r13
cmp ax, word [rbp]
mov qword [rsp + 0x130], r13
mov rsi, r13
sete al
mov qword [rsp + 0xf0], r13
mov byte [rsp + 0x48], al
cmp al, r13b
je 0x1400aa89a
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x78]
call fcn.140055fcc
mov rcx, qword [rsp + 0x590]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rbp
mov qword [rsp + 0x20], r13
call fcn.140015a64
cmp rax, r13
jne 0x1400aa7e5
lea rcx, [rsp + 0x78]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
cmp rdi, r13
je 0x1400a9e48
cmp rdi, 0xffffffffffffffff
je 0x1400a9e48
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400a9e48
mov rdx, qword [rax + 8]
mov rax, qword [rax + 0x18]
movabs rcx, 0x3fffffffffffffff
and rax, rcx
mov qword [rsp + 0x138], rdx
mov qword [rsp + 0x130], rax
jg 0x1400aa82f
mov r14, 0xffffffff80070057
lea rcx, [rsp + 0x78]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400aa657
cmp byte [rsp + 0x64], r13b
je 0x1400aa87f
mov rcx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0x98]
mov rbp, qword [rsp + 0xb8]
sub r12, r8
sub rax, rbp
cmp r12, rcx
cmovg r12, rcx
cmp r12, rax
cmovg r12, rax
cmp r12, r13
jle 0x1400aa813
mov rcx, qword [rsp + 0xd0]
add rdx, rbp
add rcx, r8
mov r8, r12
call fcn.14001a478
jmp 0x1400aa813
lea rcx, [rsp + 0x78]
call fcn.14004ea6c
lea rcx, [0x140107de8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [rsp + 0x48]
cmp byte [rsp + 0x42], r13b
je 0x1400aa9b4
cmp al, r13b
jg 0x1400aa9b4
lea rcx, [rsp + 0x50]
call fcn.14005da74
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x38], r13
movsx ebp, al
mov eax, 3
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0xf0]
mov r8d, 0x80000000
mov r9d, eax
mov dword [rsp + 0xc0], ebp
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rsi, qword [rsp + 0xf0]
cmp rsi, r13
je 0x1400aa4b3
cmp ebp, r13d
mov rbp, qword [rsp + 0xb8]
jle 0x1400aa920
mov r12, rbp
mov eax, 0x1ff
and r12, rax
jmp 0x1400aa923
mov r12, r13
sub rbp, r12
cmp rbp, r13
jle 0x1400aa9b7
xor r8d, r8d
mov rdx, rbp
mov rcx, rsi
call fcn.14004fd5c
cmp rax, rbp
je 0x1400aa9b7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
cmp rsi, 0xffffffffffffffff
je 0x1400aa959
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
cmp rdi, r13
je 0x1400aa977
cmp rdi, 0xffffffffffffffff
je 0x1400aa977
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x100]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x68]
call fcn.14004ea6c
cmp rbx, r13
je 0x1400aa9ac
cmp rbx, 0xffffffffffffffff
je 0x1400aa9ac
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, rbp
jmp 0x1400a9e84
mov r12, r13
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0xc8]
lea rax, [rdx + rcx]
cmp rcx, rdx
mov r14, rcx
cmovne r14, rax
lea rcx, [rsp + 0xd8]
add r14, 0x8000
mov qword [rsp + 0x120], r14
lea rdx, [r14 + 0x102a00]
call fcn.140055ddc
mov rbp, qword [rsp + 0xd8]
lea r8, [r14 + 0x2a00]
add rbp, 0x100000
xor edx, edx
and rbp, 0xfffffffffff00000
mov rcx, rbp
mov qword [rsp + 0xa8], rbp
lea rax, [r14 + rbp + 0x2800]
mov qword [rsp + 0x78], rax
call fcn.1400cc8d0
mov rdx, qword [rsp + 0xc8]
lea rax, [rdx + 0x1ff]
mov rcx, 0xfffffffffffffe00
mov r8b, r13b
and rax, rcx
cmp byte [rsp + 0x5a8], r13b
mov r14, r13
cmovg rdx, rax
mov dword [rsp + 0x88], r8d
mov qword [rsp + 0x140], rdx
mov rdx, qword [rsp + 0xf8]
lea rax, [rdx + 0x1ff]
and rax, rcx
cmp dword [rsp + 0xc0], r13d
cmovg rdx, rax
cmp r12, r13
mov qword [rsp + 0xf8], rdx
jle 0x1400aaaf6
mov r14d, 0x200
lea r9, [rsp + 0xa0]
mov rdx, rbp
mov rcx, rsi
mov r8d, r14d
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, qword [rsp + 0xe0]
sub r14, r12
sub rcx, r14
mov qword [rsp + 0xe0], rcx
jns 0x1400aaadf
add r14, rcx
lea rdx, [r12 + rbp]
mov r8, r14
mov rcx, rbp
call fcn.14001a478
mov r8d, dword [rsp + 0x88]
mov r12, qword [rsp + 0x70]
cmp r12, r13
jle 0x1400aaba7
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 1]
call fcn.14004fd5c
mov rdx, qword [rsp + 0x78]
lea r9, [rsp + 0xa0]
mov r8d, 0x200
mov rcx, r15
mov rbp, rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rax, qword [rsp + 0xa8]
mov r8, r14
lea rcx, [rax + r12]
mov rdx, rax
call fcn.14001a478
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0xa8]
mov r8, r12
call fcn.14001a478
xor r8d, r8d
mov rdx, rbp
mov rcx, r15
add r14, r12
call fcn.14004fd5c
mov r8d, dword [rsp + 0x88]
cmp byte [rsp + 0x41], r13b
mov rbp, qword [rsp + 0xa8]
movzx r8d, r8b
mov eax, 1
cmovne r8d, eax
mov dword [rsp + 0x88], r8d
jmp 0x1400aabac
mov eax, 1
cmp r14, r13
mov r9b, al
mov byte [rsp + 0x40], al
jle 0x1400aabe6
mov r15, rbp
cmp r14, qword [rsp + 0xc8]
jge 0x1400aacfc
cmp r14, r13
jle 0x1400aabe6
cmp rbp, r15
je 0x1400aabe6
mov r8, r14
mov rdx, r15
mov rcx, rbp
call fcn.14001a478
mov r9b, byte [rsp + 0x40]
mov r15, qword [rsp + 0xe0]
cmp r15, r13
jle 0x1400aacde
cmp r9b, r13b
je 0x1400aacde
mov r12, qword [rsp + 0x120]
cmp byte [rsp + 0x42], r13b
je 0x1400ab0f8
mov rax, qword [rsp + 0xf8]
mov rcx, r15
cmp rax, r15
cmovle rcx, rax
lea rax, [rcx + r14]
cmp rax, r12
jle 0x1400aac34
mov rcx, r12
sub rcx, r14
lea rax, [rcx + 0x1ff]
and rax, 0xfffffffffffffe00
cmp dword [rsp + 0xc0], r13d
cmovg rcx, rax
cmp byte [rsp + 0x48], r13b
je 0x1400aaca8
mov rbp, qword [rsp + 0x130]
mov r12, qword [rsp + 0xb8]
sub rbp, r12
cmp rbp, rcx
cmovg rbp, rcx
cmp rcx, r13
jle 0x1400aac93
mov rax, qword [rsp + 0x138]
mov r8, rbp
lea rdx, [r12 + rax]
mov rax, qword [rsp + 0xa8]
lea rcx, [r14 + rax]
call fcn.14001a478
add r12, rbp
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0xb8], r12
jmp 0x1400aacd5
mov r8d, ecx
lea rdx, [r14 + rbp]
lea r9, [rsp + 0xa0]
mov rcx, rsi
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rbp, qword [rsp + 0xa0]
cmp rbp, r13
jg 0x1400ab0e1
cmp r14, r13
jle 0x1400ab16a
mov r15, qword [rsp + 0xa8]
mov r8d, dword [rsp + 0x88]
mov byte [rsp + 0x40], r13b
mov rax, qword [rsp + 0x140]
mov rcx, r14
mov rdx, r13
cmp rax, r14
mov dword [rsp + 0x44], r13d
cmovle rcx, rax
mov rax, rcx
mov r12, rcx
mov qword [rsp + 0x98], rcx
and eax, 0x1ff
cmp byte [rsp + 0x5a8], r13b
cmovg rdx, rax
sub r12, rdx
mov qword [rsp + 0xf0], rdx
cmp r12, r13
mov qword [rsp + 0x70], r12
jle 0x1400aae13
mov rdx, r15
cmp byte [rsp + 0x64], r13b
je 0x1400aad86
mov rbp, qword [rsp + 0x118]
mov rcx, qword [rsp + 0xd0]
mov r8, r12
add rcx, rbp
call fcn.14001a478
add rbp, r12
mov eax, r12d
mov qword [rsp + 0x118], rbp
jmp 0x1400ab034
mov rbp, qword [rsp + 0xb0]
lea r9, [rsp + 0x44]
mov r8d, r12d
mov rcx, rbp
mov qword [rsp + 0x20], r13
call fcn.140054000
cmp eax, r13d
jne 0x1400aae0a
mov ebp, dword [rsp + 0x80]
cmp bpl, r13b
jne 0x1400aaf4a
call qword [sym.imp.KERNEL32.dll_GetLastError]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, r13d
cmove eax, ecx
mov r14d, eax
lea rcx, [rsp + 0xd8]
call fcn.14004ea6c
cmp rsi, r13
je 0x1400aadf3
cmp rsi, 0xffffffffffffffff
je 0x1400aadf3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
mov r15, qword [rsp + 0xb0]
jmp 0x1400ab7cf
mov eax, dword [rsp + 0x44]
jmp 0x1400ab03c
mov rbp, qword [rsp + 0xb0]
cmp rdx, r13
jle 0x1400aaeef
mov rcx, qword [rsp + 0x78]
mov r12d, 0x200
xor edx, edx
mov r8, r12
call fcn.1400cc8d0
sub r12, qword [rsp + 0xf0]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rbp
call fcn.14004fd5c
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0xb0]
lea r9, [rsp + 0xa0]
mov r8d, 0x200
mov rbp, rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0xf0]
mov r8, r12
add rdx, rcx
lea rcx, [r15 + r14]
call fcn.14001a478
mov rdx, rbp
mov rbp, qword [rsp + 0xb0]
xor r8d, r8d
mov rcx, rbp
add r14, r12
mov qword [rsp + 0x98], 0x200
call fcn.14004fd5c
movzx r8d, byte [rsp + 0x88]
cmp byte [rsp + 0x41], r13b
mov r12, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x98]
mov eax, 1
cmovne r8d, eax
mov dword [rsp + 0x88], r8d
jmp 0x1400aaef7
mov rbp, qword [rsp + 0xb0]
cmp rcx, r13
mov dword [rsp + 0x44], r13d
jle 0x1400ab0a6
mov r8d, ecx
lea r9, [rsp + 0x44]
mov rdx, r15
mov rcx, rbp
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, r13d
jne 0x1400ab09e
mov ebp, dword [rsp + 0x80]
cmp bpl, r13b
je 0x1400ab15b
mov eax, 2
mov byte [rsp + 0x80], al
mov ebp, dword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [rsp + 0x43], bpl
mov byte [rsp + 0x80], r13b
mov dword [rsp + 0x44], r13d
cmp rdi, r13
je 0x1400aaf76
cmp rdi, 0xffffffffffffffff
je 0x1400aaf76
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov edi, 0xc0000000
lea rcx, [rsp + 0x90]
xor r9d, r9d
mov r8d, edi
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rbp, rax
mov qword [rsp + 0xb0], rax
cmp rax, r13
jne 0x1400aaffc
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0x90]
xor r9d, r9d
mov r8d, edi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rbp, rax
mov qword [rsp + 0xb0], rax
lea r9, [rsp + 0x44]
mov r8d, r12d
mov rdx, r15
mov rcx, rbp
mov qword [rsp + 0x20], r13
call fcn.140054000
mov rdi, qword [rsp + 0x90]
cmp eax, r13d
je 0x1400aadb8
mov eax, 2
cmp byte [rsp + 0x43], al
je 0x1400ab09e
mov eax, dword [rsp + 0x44]
mov rbp, qword [rsp + 0xb0]
mov r8d, dword [rsp + 0x88]
cmp eax, r12d
cmova eax, r12d
mov dword [rsp + 0x44], eax
cmp r8b, r13b
je 0x1400ab070
mov r8d, eax
xor edx, edx
mov rcx, r15
call fcn.1400cc8d0
mov eax, dword [rsp + 0x44]
mov r8b, r13b
mov dword [rsp + 0x88], r8d
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xf0]
sub r14, rax
sub rcx, rax
mov byte [rsp + 0x80], r13b
add r15, r12
mov qword [rsp + 0x98], rcx
jmp 0x1400aae1b
mov r8d, dword [rsp + 0x88]
cmp r8b, r13b
je 0x1400ab0c5
mov r8d, dword [rsp + 0x44]
xor edx, edx
mov rcx, r15
call fcn.1400cc8d0
mov r8b, r13b
mov dword [rsp + 0x88], r8d
mov eax, dword [rsp + 0x44]
mov rbp, qword [rsp + 0xa8]
mov r9b, byte [rsp + 0x40]
add r15, rax
sub r14, rax
jmp 0x1400aabbb
cmp rbp, r15
mov r9b, byte [rsp + 0x40]
jle 0x1400ab129
mov rbp, r15
mov qword [rsp + 0xa0], r15
jmp 0x1400ab129
mov rax, qword [rsp + 0x140]
mov rbp, r15
cmp rax, r15
cmovle rbp, rax
mov qword [rsp + 0xa0], rbp
lea rax, [r14 + rbp]
cmp rax, r12
jle 0x1400ab129
mov rbp, r12
sub rbp, r14
mov qword [rsp + 0xa0], rbp
movabs rax, 0x7fffffffffffffff
cmp r15, rax
je 0x1400ab143
sub r15, rbp
mov qword [rsp + 0xe0], r15
mov r8d, dword [rsp + 0x88]
add r14, rbp
mov rbp, qword [rsp + 0xa8]
jmp 0x1400aabb8
mov r15, qword [rsp + 0xe0]
mov eax, 1
jmp 0x1400ab16d
mov eax, r13d
cmp eax, r13d
jne 0x1400aadbe
cmp r15, r13
jle 0x1400ab18e
movabs rax, 0x7fffffffffffffff
cmp r15, rax
jne 0x1400aadbe
mov r14d, r13d
jmp 0x1400aadd2
mov ax, r13w
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0x120], r13
mov dword [rsp + 0x44], eax
cmp byte [rsp + 0x64], r13b
jne 0x1400ab35a
mov al, byte [rsp + 0x5a8]
cmp al, 0x11
jne 0x1400ab299
mov edx, dword [rsp + 0xc0]
lea r8, [rsp + 0xd8]
mov rcx, r15
call fcn.1400681dc
cmp rax, r13
mov qword [rsp + 0x120], rax
jl 0x1400aa4bd
mov r12, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x98]
mov al, byte [rsp + 0x5a8]
cmp byte [rsp + 0x49], r13b
je 0x1400ab21d
cmp ebp, 0xfffffffc
jne 0x1400ab21d
mov rbp, r12
sub rbp, rcx
cmovs rbp, r13
cmp r15, r13
jne 0x1400ab321
cmp al, r13b
jne 0x1400ab314
mov rdx, rcx
mov rcx, qword [rsp + 0x58]
call fcn.14005d890
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0x90]
mov r9d, 3
mov r8d, 0xc0000000
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r13
call fcn.140003590
mov rdi, qword [rsp + 0x90]
mov r15, rax
mov qword [rsp + 0xb0], rax
cmp rax, r13
je 0x1400ab314
mov al, byte [rsp + 0x5a8]
jmp 0x1400ab32d
cmp r15, r13
je 0x1400ab307
cmp al, r13b
jne 0x1400ab2e4
mov r8d, ecx
xor edx, edx
mov rcx, r15
call fcn.14004fd5c
mov rcx, qword [rsp + 0x98]
mov r12, rax
lea rax, [rcx - 0x400]
cmp r12, rax
jge 0x1400ab200
cmp qword [rsp + 0x78], r13
jne 0x1400ab200
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400ab1f8
mov dl, al
mov rcx, r15
call fcn.140053f60
mov r12, rax
cmp rax, r13
movabs rax, 0x7fffffffffffffff
cmovl r12, rax
jmp 0x1400ab1f8
mov rcx, qword [rsp + 0x98]
jmp 0x1400ab207
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x1400ab7ea
cmp byte [rsp + 0x50], r13b
je 0x1400ab337
cmp al, r13b
jne 0x1400ab33c
movabs r12, 0x7fffffffffffffff
cmp al, r13b
je 0x1400ab356
mov r8, qword [rsp + 0x98]
mov ecx, 0x1ff
mov ax, r8w
and ax, cx
mov dword [rsp + 0x44], eax
jmp 0x1400ab362
mov eax, dword [rsp + 0x44]
mov r8, qword [rsp + 0x98]
add r8, qword [rsp + 0x120]
mov qword [rsp + 0xc8], r13
sub r12, r8
mov qword [rsp + 0x118], r8
cmp byte [rsp + 0x64], r13b
jne 0x1400ab3bf
mov rdx, r8
movzx eax, ax
mov rcx, r15
sub rdx, rax
xor r8d, r8d
call fcn.14004fd5c
cmp rax, r13
jge 0x1400ab3b7
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xc8]
mov esi, eax
call fcn.14004ea6c
jmp 0x1400ab7ea
mov r8, qword [rsp + 0x118]
cmp byte [rsp + 0x42], r13b
je 0x1400ab421
mov rax, qword [rsp + 0x70]
cmp r12, rax
cmovg r12, rax
cmp byte [rsp + 0x64], r13b
je 0x1400ab3f4
mov rcx, qword [rsp + 0xd0]
mov rdx, rsi
add rcx, r8
mov r8, r12
call fcn.14001a478
jmp 0x1400ab7b4
cmp r12, r13
jle 0x1400ab7b4
mov r8, r12
mov rdx, rsi
mov al, byte [rsp + 0x5a8]
movzx r9d, word [rsp + 0x44]
mov rcx, r15
mov byte [rsp + 0x20], al
call fcn.1400685b0
jmp 0x1400ab7b4
cmp rbp, r13
jl 0x1400ab42d
cmp rbp, r12
cmovl r12, rbp
mov qword [rsp + 0x598], rsi
cmp byte [rsp + 0x43], r13b
je 0x1400ab487
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0xc8]
mov rdx, rsi
mov r9, rax
mov r8, rax
call fcn.140055f08
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd rcx, eax
cmp rcx, r12
cmovg eax, r12d
cmp eax, r13d
jle 0x1400ab7b4
mov rdx, qword [rsp + 0xc8]
movsxd r8, eax
jmp 0x1400ab403
movzx eax, word [rsp + 0x44]
mov r9b, byte [rsp + 0x60]
lea rdx, [rsp + 0x350]
and rdx, 0xfffffffffffffe00
mov ecx, 0x200
mov rbp, r13
sub ecx, eax
cmp r12, r13
mov r10b, r13b
mov qword [rsp + 0x70], rdx
mov byte [rsp + 0x43], r13b
mov byte [rsp + 0x40], r9b
jle 0x1400ab7b4
mov rbx, qword [rsp + 0x118]
mov r14b, byte [rsp + 0x5a8]
cmp rbp, r13
mov r11d, 0x30
jg 0x1400ab4ea
cmp word [rsi], r13w
je 0x1400ab79c
movsxd rcx, ecx
mov eax, r13d
mov r8, r13
cmp rcx, r13
mov dword [rsp + 0x80], eax
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x138], rcx
jle 0x1400ab79c
mov r14b, byte [rsp + 0x60]
mov edi, 1
lea r15d, [rdi + 0x1f]
cmp r12, r13
jle 0x1400ab723
cmp rbp, r13
jg 0x1400ab6ee
cmp word [rsi], r13w
je 0x1400ab723
lea rcx, [rsp + 0x598]
call fcn.14004ea3c
mov rsi, qword [rsp + 0x598]
mov ecx, 0x2a
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x78], r13
cmp cx, word [rsi]
jne 0x1400ab5fe
lea eax, [rcx - 0x28]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x598]
add rsi, rax
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0x598], rsi
call fcn.140063ef4
mov rsi, qword [rsp + 0x598]
mov rbp, qword [rsp + 0xd8]
mov r9b, byte [rsp + 0x40]
mov r11d, 0x30
jmp 0x1400ab5f9
cmp cx, ax
je 0x1400ab6bd
mov ecx, 0x28
cmp cx, ax
je 0x1400ab632
cmp ax, r11w
jb 0x1400ab5d4
cmp ax, 0x39
jbe 0x1400ab607
cmp r9b, r13b
je 0x1400ab5e9
or ax, r15w
cmp ax, 0x61
jb 0x1400ab5e9
cmp ax, 0x7a
jbe 0x1400ab607
mov eax, 2
add rsi, rax
mov qword [rsp + 0x598], rsi
mov ecx, 0x2a
movzx eax, word [rsi]
cmp ax, r13w
jne 0x1400ab5b5
cmp r11w, word [rsi]
jne 0x1400ab653
movzx eax, word [rsi + 2]
mov ecx, 0x78
or ax, r15w
cmp cx, ax
jne 0x1400ab653
add rsi, 4
mov byte [rsp + 0x40], dil
mov qword [rsp + 0x598], rsi
jmp 0x1400ab658
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x598]
mov qword [rsp + 0x78], r13
call fcn.140063ef4
mov rsi, qword [rsp + 0x598]
jmp 0x1400ab6bd
cmp r9b, r13b
je 0x1400ab695
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x598]
mov r8d, 2
mov qword [rsp + 0x78], r13
call fcn.14005722c
mov rsi, qword [rsp + 0x598]
movzx eax, word [rsi]
mov ecx, 9
sub ax, 0x30
cmp ax, cx
jbe 0x1400ab6b3
mov byte [rsp + 0x40], r14b
jmp 0x1400ab6b3
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x598]
call fcn.1400640cc
cmp eax, edi
jl 0x1400ab717
mov rsi, qword [rsp + 0x598]
cmp rsi, qword [rsp + 0x140]
je 0x1400ab717
mov r10b, byte [rsp + 0x78]
mov eax, dword [rsp + 0x80]
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x120]
mov r9b, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x138]
mov byte [rsp + 0x43], r10b
mov r11d, 0x30
add eax, edi
mov byte [r8 + rdx], r10b
add r8, rdi
sub rbp, rdi
sub r12, rdi
cmp r8, rcx
mov dword [rsp + 0x80], eax
mov qword [rsp + 0x120], r8
jl 0x1400ab521
jmp 0x1400ab723
mov rdx, qword [rsp + 0x70]
mov eax, dword [rsp + 0x80]
cmp eax, r13d
mov r15, qword [rsp + 0xb0]
mov r14b, byte [rsp + 0x5a8]
mov rdi, qword [rsp + 0xd0]
jle 0x1400ab79c
cmp byte [rsp + 0x64], r13b
je 0x1400ab75b
movsxd rsi, eax
lea rcx, [rdi + rbx]
mov r8, rsi
call fcn.14001a478
add rbx, rsi
jmp 0x1400ab771
movzx r9d, word [rsp + 0x44]
movsxd r8, eax
mov rcx, r15
mov byte [rsp + 0x20], r14b
call fcn.1400685b0
cmp r12, r13
mov dword [rsp + 0x44], r13d
mov ecx, 0x200
jle 0x1400ab79c
mov rsi, qword [rsp + 0x598]
mov rdx, qword [rsp + 0x70]
mov r9b, byte [rsp + 0x40]
mov r10b, byte [rsp + 0x43]
jmp 0x1400ab4d5
mov rbx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x90]
mov r14, qword [rsp + 0x130]
cmp r15, r13
je 0x1400ab7c2
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rcx, [rsp + 0xc8]
call fcn.14004ea6c
cmp byte [rsp + 0xe8], r13b
je 0x1400ab7e7
cmp r15, r13
je 0x1400ab7e7
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
movsxd rsi, r14d
cmp rdi, r13
je 0x1400ab7fe
cmp rdi, 0xffffffffffffffff
je 0x1400ab7fe
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x100]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
lea rcx, [rsp + 0x68]
call fcn.14004ea6c
cmp rbx, r13
je 0x1400ab833
cmp rbx, 0xffffffffffffffff
je 0x1400ab833
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, rsi
jmp 0x1400a9e84