Function at 0x140084ab8
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov r14, rcx
lea rcx, [rax - 0x50]
mov rbx, rdx
call fcn.14004be6c
xor r12d, r12d
mov edi, 0x4b0
lea ebp, [r12 + 9]
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xc8], r12
lea ecx, [rbp + 4]
lea esi, [rdi + 1]
lea r15d, [r12 + 4]
lea r13d, [r12 + 0x20]
mov dword [rsp + 0xa0], ecx
cmp bp, word [rbx]
ja 0x140084b26
cmp word [rbx], cx
jbe 0x140084b2c
cmp r13w, word [rbx]
jne 0x140084b34
mov edi, r12d
jmp 0x140084c85
lea rcx, str._UNI
mov r8d, r15d
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
jne 0x140084c80
mov r11d, 5
lea rcx, str._UNIB
mov rdx, rbx
mov r8d, r11d
call fcn.140045f78
cmp al, r12b
je 0x140084b73
mov edi, esi
jmp 0x140084c80
lea rcx, str._UNICODE
mov r8d, 8
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
jne 0x140084c80
lea rcx, str._UNICODEB
mov r8d, ebp
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
jne 0x140084b6c
lea rcx, str._UTF8
mov r8d, r11d
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
je 0x140084bc9
mov edi, 0xfde9
jmp 0x140084c80
lea rcx, str._UTF7
mov r8d, r11d
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
je 0x140084bea
mov edi, 0xfde8
jmp 0x140084c80
lea rcx, str._GBK
mov r8d, r15d
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
je 0x140084c08
mov edi, 0x3a8
jmp 0x140084c80
lea rcx, str._BIG5
mov r8d, r11d
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
je 0x140084c26
mov edi, 0x3b6
jmp 0x140084c80
lea rcx, str._ANSI
mov r8d, r11d
mov rdx, rbx
call fcn.140045f78
cmp al, r12b
je 0x140084c42
mov edi, r12d
jmp 0x140084c80
mov eax, 0x2d
cmp ax, word [rbx]
jne 0x140085a79
add rbx, 2
movzx eax, word [rbx]
sub ax, 0x30
cmp ax, bp
ja 0x140085a79
mov rcx, rbx
mov qword [rsp + 0x118], rbx
call fcn.14004cfc0
cmp eax, r12d
mov rdi, rax
jl 0x140085a79
mov ecx, 0xd
mov esi, 2
jmp 0x140084ca7
cmp bp, ax
ja 0x140084c96
cmp ax, cx
jbe 0x140084cb0
cmp r13w, ax
je 0x140084cb0
add rbx, rsi
mov qword [rsp + 0x118], rbx
movzx eax, word [rbx]
cmp ax, r12w
jne 0x140084c8c
lea rcx, [rsp + 0x118]
call fcn.140044ef4
lea rdx, [rsp + 0x118]
lea rcx, str.fix
mov r8d, r15d
call fcn.14004e558
lea rdx, [rsp + 0x118]
lea rcx, str._nl
neg al
mov r8d, r15d
sbb al, al
and al, sil
mov byte [rsp + 0x40], al
call fcn.14004e558
lea rdx, [rsp + 0x118]
lea rcx, [0x1400e058c]
mov r8d, esi
mov byte [rsp + 0x58], al
call fcn.14004e558
lea rbp, [0x1400d63f4]
lea rcx, [rsp + 0x78]
mov rdx, rbp
mov byte [rsp + 0x41], al
call fcn.140058920
lea rdx, [0x1400e0584]
lea rcx, [rsp + 0x70]
call fcn.140058920
mov ebx, 0x2c
lea rdx, [rsp + 0x118]
lea r13d, [rbx - 0x2b]
lea rcx, [rsp + 0xb8]
mov r8d, ebx
mov r9b, r13b
mov esi, r12d
mov dword [rsp + 0x88], r12d
mov dword [rsp + 0x60], r12d
call fcn.14005add0
lea rdx, [rsp + 0x78]
mov rcx, rax
xor r8d, r8d
call fcn.14004f5d4
mov rcx, qword [rsp + 0x78]
call fcn.140015cb4
mov r15, rax
mov qword [rsp + 0x98], rax
cmp word [rax], r12w
jne 0x140084db8
lea rcx, [rsp + 0x70]
call fcn.140044f24
lea rcx, [rsp + 0x78]
call fcn.140044f24
mov r12d, 0x80070057
jmp 0x140085a7f
mov rax, qword [rsp + 0x118]
mov r8d, 2
cmp word [rax], bx
jne 0x140084e32
add rax, r8
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x118], rax
call fcn.140044ef4
mov rax, qword [rsp + 0x118]
cmp word [rax], bx
je 0x140084e2e
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xb8]
mov r8d, ebx
mov r9b, r13b
call fcn.14005add0
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, rax
call fcn.14004f5d4
mov rax, qword [rsp + 0x118]
mov r8d, 2
cmp word [rax], bx
jne 0x140084e32
lea rbp, [rax + 2]
mov rax, qword [rsp + 0x70]
mov bl, r12b
mov byte [rsp + 0x128], r12b
cmp word [rax], 0x24
mov qword [rsp + 0x118], rax
jne 0x140084e5e
mov bl, byte [rax]
add rax, 2
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.140044ef4
mov rcx, qword [rsp + 0x118]
cmp word [rcx], 0x2b
je 0x140084e83
mov eax, 0x2d
cmp word [rcx], ax
jne 0x140084e97
mov al, byte [rcx]
add rcx, r8
mov byte [rsp + 0x128], al
mov qword [rsp + 0x118], rcx
lea rcx, [rsp + 0x118]
call fcn.140044ef4
mov rcx, qword [rsp + 0x118]
movzx eax, word [rcx]
mov ecx, 9
sub ax, 0x30
cmp ax, cx
ja 0x140084efc
lea r8d, [rcx + 0x23]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x118]
call fcn.14004f968
mov esi, dword [rsp + 0x60]
cmp esi, r12d
mov dword [rsp + 0x88], esi
jge 0x140084efc
lea rcx, [rsp + 0x70]
call fcn.140044f24
lea rcx, [rsp + 0x78]
call fcn.140044f24
jmp 0x140085a7f
lea rcx, [rsp + 0x50]
call fcn.14004be6c
mov rdx, rbp
cmp bl, r12b
je 0x140084f25
lea r8, [rsp + 0x50]
xor r9d, r9d
mov rcx, r14
mov byte [rsp + 0x20], r13b
call fcn.140056690
jmp 0x140084f2f
lea rcx, [rsp + 0x50]
call fcn.1400589a0
lea rcx, [0x1400d6b40]
mov rbx, r12
mov rdx, r15
mov rbp, r12
mov r14b, r12b
mov byte [rsp + 0x118], r12b
mov qword [rsp + 0x48], rbx
call fcn.140045ff4
cmp al, r12b
je 0x140084f65
mov rbp, qword [0x1400ef2d0]
mov r14b, 2
jmp 0x140084f83
lea rcx, [0x1400d7440]
mov rdx, r15
call fcn.140045ff4
cmp al, r12b
je 0x140084f8b
mov rbp, qword [0x1400ef2c8]
mov r14b, r13b
mov byte [rsp + 0x118], r14b
cmp byte [rsp + 0x58], r12b
jne 0x140084faa
cmp byte [rsp + 0x41], r12b
jne 0x140084faa
lea rdx, [0x1400d91e8]
lea rcx, [rsp + 0x50]
call fcn.14004bfa8
mov r15d, r12d
cmp byte [rsp + 0x41], r12b
je 0x140084fbe
mov edi, 0x4b0
jmp 0x14008519e
cmp r14b, r12b
jne 0x14008519e
mov rbp, qword [rsp + 0x98]
lea rcx, str.CONOUT_
mov rdx, rbp
call fcn.140045ff4
cmp al, r12b
je 0x140084fed
mov ecx, pe_nt_image_headers64
call fcn.140049cbc
mov qword [rsp + 0x38], r12
mov r14d, 3
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0x48]
lea r9d, [r14 + 4]
mov r8d, 0xc0000000
mov rdx, rbp
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r12
call fcn.1400034e0
mov rbx, qword [rsp + 0x48]
cmp rbx, r12
jne 0x14008506b
xor edx, edx
mov rcx, rbp
call fcn.140054384
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x80
lea r9d, [r14 + 4]
lea rcx, [rsp + 0x48]
mov r8d, 0xc0000000
mov rdx, rbp
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r12
call fcn.1400034e0
mov rbx, qword [rsp + 0x48]
mov rbp, rbx
cmp rbx, r12
jne 0x14008508b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
lea rcx, [rsp + 0x50]
call fcn.140044f24
jmp 0x140084ee3
xor eax, eax
lea r9, [rsp + 0x8c]
lea rdx, [rsp + 0x68]
mov r8d, r14d
mov rcx, rbx
mov byte [rsp + 0x68], r12b
mov byte [rsp + 0x69], r12b
mov byte [rsp + 0x6a], r12b
mov word [rsp + 0x6b], ax
mov dword [rsp + 0x8c], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov cl, byte [rsp + 0x68]
mov al, byte [rsp + 0x69]
cmp cl, 0xff
jne 0x1400850e7
cmp al, 0xfe
jne 0x140085115
mov edx, 2
mov edi, 0x4b0
mov r15d, edx
jmp 0x1400850ec
mov edx, 2
cmp cl, 0xfe
jne 0x1400850fd
cmp al, 0xff
jne 0x140085115
mov edi, 0x4b1
mov r15d, edx
cmp cl, 0xef
jne 0x140085115
cmp al, 0xbb
jne 0x140085115
cmp byte [rsp + 0x6a], 0xbf
jne 0x140085115
mov edi, 0xfde9
mov r15d, r14d
lea rcx, [rsp + 0x8c]
call fcn.14004b91c
xor r8d, r8d
mov rcx, rbx
cmp dword [rax], r12d
jne 0x140085196
xor edx, edx
call fcn.140045f34
cmp edi, 0x4b0
jne 0x140085150
mov eax, 2
lea rdx, [0x1400dc168]
mov r15d, eax
mov r8d, eax
jmp 0x140085181
cmp edi, 0x4b1
jne 0x14008516c
mov eax, 2
lea rdx, [0x1400dc16c]
mov r15d, eax
mov r8d, eax
jmp 0x140085181
cmp edi, 0xfde9
jne 0x14008519e
mov r15d, r14d
mov r8d, r14d
lea rdx, [0x1400dc170]
lea r9, [rsp + 0x60]
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x14008519e
movsxd rdx, r15d
call fcn.140045f34
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r14d, eax
add r14d, r14d
cmp edi, 0x4b0
je 0x14008521f
cmp edi, 0x4b1
jne 0x1400851ce
mov rcx, qword [rsp + 0x50]
mov edx, r14d
call fcn.140049c9c
jmp 0x14008521f
lea rcx, [rsp + 0x50]
cmp edi, 0xfde9
jne 0x1400851e5
call fcn.140011e48
mov r14d, eax
jmp 0x14008521f
mov rdx, qword [rsp + 0x50]
movzx r9d, di
or r8d, 0xffffffff
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x50], r12
call fcn.14004bdac
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, [rsp + 0x90]
mov r14d, eax
call fcn.140044f24
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmp byte [rsp + 0x118], r12b
je 0x1400852df
cmp rbp, 0xffffffffffffffff
jne 0x140085276
cmp rbx, r12
je 0x140085250
cmp rbx, rbp
je 0x140085250
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x70]
call fcn.140044f24
lea rcx, [rsp + 0x78]
call fcn.140044f24
mov r12d, r13d
jmp 0x140085a7f
lea r9, [rsp + 0x118]
mov r8d, r14d
mov rdx, rax
mov rcx, rbp
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp rbx, r12
je 0x14008507c
cmp rbx, 0xffffffffffffffff
je 0x14008507c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008507c
lea rcx, [rsp + 0x90]
call fcn.14004be6c
lea rcx, [rsp + 0xa8]
call fcn.14004be6c
lea rcx, [rsp + 0xb0]
call fcn.14004bc1c
lea rcx, [rsp + 0x80]
call fcn.14004bc1c
cmp byte [rsp + 0x41], r12b
je 0x1400856a7
lea rcx, [rsp + 0x48]
call fcn.14004be6c
mov rdi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x110]
mov r11d, 0x26
cmp r11w, word [rdi]
je 0x140085359
test byte [rbp + 0xd], 0xf
jne 0x140085359
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.140057760
jmp 0x140085397
lea rcx, [0x1400f2c58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rdi
mov rcx, rbp
call fcn.140017d60
cmp rax, r12
je 0x14008538a
mov rdx, qword [rax]
lea rcx, [rsp + 0x48]
call fcn.140058a38
lea rcx, [0x1400f2c58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r9d, r12d
mov dword [rsp + 0x118], r12d
movsxd r15, eax
mov al, byte [rsp + 0x128]
mov ecx, r15d
cmp al, 0x2d
jne 0x1400853cb
mov r11d, r12d
mov dword [rsp + 0x60], r12d
jmp 0x1400853e1
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
mov r11d, eax
mov dword [rsp + 0x60], eax
mov al, byte [rsp + 0x128]
mov ebp, r12d
mov r14d, r12d
mov r10d, 0xa
cmp esi, r12d
jne 0x14008549a
cmp al, 0x2b
je 0x14008554a
cmp r15d, r12d
jle 0x140085454
cmp word [rdi + r15*2 - 2], r10w
jne 0x140085427
lea ecx, [r15 - 1]
cmp ecx, r12d
jle 0x140085454
lea esi, [r10 + 3]
movsxd rax, ecx
cmp word [rdi + rax*2 - 2], si
jne 0x14008542c
sub ecx, r13d
jmp 0x14008542c
mov esi, 0xd
cmp ecx, r12d
jle 0x140085454
movsxd rax, ecx
lea rdx, [rdi + rax*2 - 2]
cmp rdx, rdi
jb 0x140085454
mov eax, 2
cmp word [rdx], r10w
je 0x140085477
sub rdx, rax
sub ecx, r13d
cmp rdx, rdi
jae 0x140085443
mov r8b, byte [rsp + 0x128]
movsxd rax, ecx
mov word [rdi + rax*2], r12w
mov eax, 0x2d
cmp r8b, al
jne 0x14008554e
jmp 0x14008564a
mov r8b, byte [rsp + 0x128]
cmp r8b, 0x2d
jne 0x14008545c
sub rdx, rax
sub ecx, r13d
cmp rdx, rdi
jb 0x14008545c
cmp word [rdx], si
jne 0x14008545c
sub ecx, r13d
jmp 0x14008545c
cmp al, 0x2b
mov r8d, r12d
mov rdx, rdi
sete r8b
mov ecx, r12d
mov ebp, r15d
add r8d, r13d
cmp esi, r8d
jl 0x140085544
mov r14d, 2
movzx eax, word [rdx]
cmp ax, r12w
je 0x14008553d
cmp ax, r10w
je 0x140085512
cmp ax, word [rsp + 0xa0]
jne 0x1400854e0
add rdx, r14
cmp word [rdx], r10w
je 0x1400854ee
add rdx, r14
mov ax, word [rdx]
cmp ax, r12w
je 0x140085538
jmp 0x1400854c7
cmp r8d, esi
jne 0x1400854ff
mov rbp, rdx
sub rbp, rdi
sar rbp, 1
sub ebp, r13d
cmp esi, r14d
jne 0x140085532
mov rcx, rdx
sub rcx, rdi
sar rcx, 1
sub ecx, r13d
jmp 0x140085532
cmp r8d, esi
jne 0x140085522
mov rax, rdx
sub rax, rdi
sar rax, 1
mov ebp, eax
cmp esi, r14d
jne 0x140085532
mov rax, rdx
sub rax, rdi
sar rax, 1
mov ecx, eax
sub esi, r13d
add rdx, r14
cmp esi, r8d
jge 0x1400854be
mov al, byte [rsp + 0x128]
mov r14d, r15d
sub r14d, ebp
cmp al, 0x2d
je 0x14008556d
cmp ecx, r12d
jle 0x14008556d
movsxd rax, ecx
cmp word [rdi + rax*2 - 2], r10w
mov eax, 2
cmovne r9d, eax
mov dword [rsp + 0x118], r9d
lea eax, [r14 + r11]
movsxd rdi, ecx
add eax, r9d
lea r13d, [rax + rcx + 1]
mov rax, qword [rsp + 0x48]
cmp r15d, r13d
lea r10, [rax + rdi*2]
jl 0x1400855b1
cmp r14d, r12d
jle 0x1400855b1
movsxd rcx, r11d
movsxd rax, ebp
movsxd r8, r14d
sub rax, rdi
add r8, r8
lea rdx, [r10 + rax*2]
movsxd rax, r9d
add rcx, rax
lea rcx, [r10 + rcx*2]
call fcn.1400177b0
lea rcx, [rsp + 0x48]
mov edx, r13d
call fcn.14004bf70
cmp r15d, r13d
mov r11, qword [rsp + 0x48]
lea rsi, [r11 + rdi*2]
jge 0x1400855fd
cmp r14d, r12d
jle 0x1400855fd
movsxd rax, ebp
movsxd rbp, dword [rsp + 0x60]
movsxd r8, r14d
sub rax, rdi
movsxd rdi, dword [rsp + 0x118]
add r8, r8
lea rcx, [rdi + rbp]
lea rdx, [rsi + rax*2]
lea rcx, [rsi + rcx*2]
call fcn.1400177b0
jmp 0x140085608
mov ebp, dword [rsp + 0x60]
mov edi, dword [rsp + 0x118]
cmp edi, r12d
je 0x140085624
mov eax, 0xd
mov word [rsi], ax
lea ecx, [rax - 0xb]
add rsi, rcx
lea eax, [rcx + 8]
mov word [rsi], ax
add rsi, rcx
cmp ebp, r12d
jle 0x140085642
mov rdx, qword [rsp + 0x50]
movsxd rdi, ebp
mov rcx, rsi
add rdi, rdi
mov r8, rdi
call fcn.1400177f8
add rsi, rdi
movsxd rax, r14d
mov word [rsi + rax*2], r12w
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x110]
call fcn.14004b578
lea rcx, [rsp + 0x48]
call fcn.140044f24
lea rcx, [rsp + 0x80]
call fcn.140044f24
lea rcx, [rsp + 0xb0]
call fcn.140044f24
lea rcx, [rsp + 0xa8]
call fcn.140044f24
lea rcx, [rsp + 0x90]
call fcn.140044f24
jmp 0x1400852be
cmp esi, r12d
jne 0x140085855
mov r8b, byte [rsp + 0x128]
mov rcx, rbx
cmp r8b, 0x2b
je 0x140085841
movsxd rbp, r15d
xor r8d, r8d
mov rdx, rbp
call fcn.140045f34
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.140045f34
mov r9b, byte [rsp + 0x40]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x48]
mov r8d, edi
mov r15, rax
call fcn.140053f00
cmp eax, r12d
je 0x14008573e
mov sil, byte [rsp + 0x40]
mov r8d, r13d
xor edx, edx
mov rcx, rbx
mov rbp, r15
call fcn.140045f34
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x48]
mov r9b, sil
mov r8d, edi
mov r15, rax
call fcn.140053f00
cmp eax, r12d
jne 0x140085707
mov esi, dword [rsp + 0x88]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.140045f34
lea rcx, [rsp + 0x48]
mov rdx, rbp
call fcn.140054418
mov r15b, byte [rsp + 0x40]
mov al, byte [rsp + 0x128]
cmp al, 0x2b
jne 0x140085893
mov rcx, rbx
cmp esi, r12d
je 0x140085959
mov r8d, r13d
xor edx, edx
call fcn.140045f34
mov rcx, rbx
mov rdi, rax
call fcn.1400a8f20
lea rcx, [rsp + 0x128]
sub eax, edi
mov esi, eax
cmp eax, r12d
lea edx, [rax + 0xca]
cmovl esi, r12d
call fcn.14004bc80
movsxd rdi, edi
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.140045f34
mov rdx, qword [rsp + 0x128]
lea r9, [rsp + 0x118]
mov r8d, esi
mov rcx, rbx
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.140045f34
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x110]
mov r8d, r14d
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, r12d
jle 0x140085a67
mov r8d, esi
mov rdx, qword [rsp + 0x128]
lea r9, [rsp + 0x110]
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140085a67
mov eax, 2
xor edx, edx
mov r8d, eax
call fcn.140045f34
jmp 0x140085759
cmp esi, r13d
mov ebp, r13d
jle 0x140085759
mov r15b, byte [rsp + 0x40]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x48]
mov r9b, r15b
mov r8d, edi
call fcn.140053f00
cmp eax, r12d
je 0x14008575e
add ebp, r13d
cmp ebp, esi
jl 0x140085866
jmp 0x14008575e
cmp al, 0x2d
jne 0x140085951
cmp esi, r12d
je 0x14008566e
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.140045f34
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x48]
mov r9b, r15b
mov r8d, edi
mov rbp, rax
call fcn.140053f00
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.140045f34
mov rcx, rbx
mov rdi, rax
call fcn.1400a8f20
lea rcx, [rsp + 0x128]
mov rsi, rax
sub esi, edi
lea edx, [rsi + 0xca]
call fcn.14004bc80
mov rdx, qword [rsp + 0x128]
lea r8d, [rsi + 0xc8]
lea r9, [rsp + 0x118]
mov rcx, rbx
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.140045f34
lea rcx, [rsp + 0x48]
mov rdx, rbp
call fcn.140054418
mov r8d, dword [rsp + 0x118]
jmp 0x14008581e
mov rcx, rbx
cmp esi, r12d
jne 0x140085979
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x118]
mov r8d, r14d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x14008566e
mov r8d, r13d
xor edx, edx
call fcn.140045f34
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x48]
mov r9b, r15b
mov r8d, edi
mov rbp, rax
call fcn.140053f00
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.140045f34
mov rcx, rbx
mov rdi, rax
call fcn.1400a8f20
lea rcx, [rsp + 0x128]
mov rsi, rax
sub esi, edi
lea edx, [rsi + 0xca]
call fcn.14004bc80
mov rdx, qword [rsp + 0x128]
lea r8d, [rsi + 0xc8]
lea r9, [rsp + 0x118]
mov rcx, rbx
mov dword [rsp + 0x118], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.140045f34
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x110]
mov r8d, r14d
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x128]
lea r9, [rsp + 0x110]
mov rcx, rbx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call fcn.140045f34
lea rcx, [rsp + 0x48]
movsxd rdx, eax
call fcn.140054418
lea rcx, [rsp + 0x128]
call fcn.140044f24
jmp 0x14008566e
mov r12d, 1
lea rcx, [rsp + 0xb8]
call fcn.140044f24
mov rbx, qword [rsp + 0x120]
mov eax, r12d
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret