Function at 0x14009836c
Capabilities:
Get common file path
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x398
mov r13, rcx
lea rcx, [rax - 0x2f0]
mov r15, r9
call fcn.140058038
xor r12d, r12d
lea rcx, [rsp + 0x100]
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r12
mov word [rsp + 0x88], r12w
call fcn.1400584fc
lea rcx, [rsp + 0x3e8]
call fcn.1400503f4
lea rax, [rsp + 0x100]
mov ebx, r12d
mov qword [rsp + 0x150], rax
lea rax, [r12 - 8]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r12
mov qword [rsp + 0x130], r12
mov qword [rsp + 0x138], r12
mov dword [rsp + 0xa4], eax
mov qword [rsp + 0x140], r12
mov qword [rsp + 0x148], r12
mov dword [rsp + 0xa0], 2
mov dword [rsp + 0x5c], r12d
mov r14d, r12d
mov dword [rsp + 0x50], ebx
mov edi, r12d
mov dword [rsp + 0xb8], r12d
mov dword [rsp + 0xa8], r12d
mov ebp, r12d
mov dword [rsp + 0x98], r12d
mov dword [rsp + 0xbc], r12d
mov esi, r12d
lea r10d, [r12 + 9]
xor r8d, r8d
mov r9d, 0x20
mov rax, qword [rsp + 0x3e8]
mov ecx, 0x2a
lea edx, [rcx + 3]
cmp cx, word [rax]
je 0x14009849d
lea ecx, [rdx + 2]
cmp cx, word [rax]
je 0x14009849d
cmp dx, word [rax]
jne 0x140098924
cmp dx, word [rax]
jne 0x1400984d0
cmp dx, word [rax + 2]
jne 0x1400984d0
movzx ecx, word [rax + 4]
cmp r10w, cx
ja 0x1400984bc
cmp cx, 0xd
jbe 0x140098a24
cmp r9w, cx
je 0x140098a24
cmp cx, r8w
je 0x140098a24
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fbc44]
mov r8d, 2
call fcn.14005a874
xor ecx, ecx
cmp al, cl
je 0x1400984fd
and r14d, 0xfffffffe
or r14d, 6
jmp 0x140098a12
mov r11, qword [rsp + 0x3e8]
lea rcx, [0x1400fbc40]
mov r8d, 3
lea rdx, [r11 + 2]
call fcn.140051938
xor ecx, ecx
cmp al, cl
je 0x14009852b
add r11, 8
lea r14d, [rcx + 6]
jmp 0x14009854f
lea rdx, [r11 + 2]
lea rcx, str.delims:
mov r8d, 7
call fcn.140051938
xor ebx, ebx
cmp al, bl
je 0x1400985d1
add r11, 0x10
mov eax, 0xa
lea rcx, [rsp + 0x3e8]
mov qword [rsp + 0x3e8], r11
or r14d, eax
call fcn.140055ba8
mov rbx, qword [rsp + 0x3e8]
movzx eax, word [rbx]
mov word [rsp + 0x88], ax
xor r8d, r8d
movzx eax, word [rbx]
mov r10d, 9
cmp ax, r8w
je 0x1400985bb
lea ecx, [r10 + 0x17]
cmp r10w, ax
ja 0x1400985a1
cmp ax, 0xd
jbe 0x1400985bb
cmp cx, ax
je 0x1400985bb
add rbx, 2
mov qword [rsp + 0x3e8], rbx
mov ax, word [rbx]
cmp ax, r8w
jne 0x140098595
lea rcx, [rsp + 0x3e8]
call fcn.1400503f4
mov ebx, dword [rsp + 0x50]
jmp 0x140098471
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400f6494]
or r8d, 0xffffffff
call fcn.14005a810
cmp al, bl
jne 0x140098a06
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400f1850]
or r8d, 0xffffffff
call fcn.14005a810
cmp al, bl
jne 0x140098a06
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fbc34]
mov r8d, 1
call fcn.14005a874
cmp al, bl
jne 0x140098a00
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fb6b0]
mov r8d, 2
call fcn.14005a810
cmp al, bl
jne 0x140098a00
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fbc30]
mov r8d, 3
call fcn.14005a810
cmp al, bl
je 0x14009867d
mov esi, 1
jmp 0x140098a0e
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400f53a4]
mov r8d, 3
call fcn.14005a810
cmp al, bl
je 0x1400986ab
mov dword [rsp + 0xb8], 1
jmp 0x140098a0e
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fbc2c]
mov r8d, 3
call fcn.14005a810
cmp al, bl
je 0x1400986d0
mov ebp, 1
jmp 0x1400986f3
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fbc24]
mov r8d, 4
call fcn.14005a810
cmp al, bl
je 0x1400986ff
mov ebp, 2
mov dword [rsp + 0x98], ebp
jmp 0x140098a0e
lea rdx, [rsp + 0x3e8]
lea rcx, str.off
mov r8d, 4
call fcn.14005a810
cmp al, bl
je 0x14009872d
mov dword [rsp + 0xbc], 1
jmp 0x140098a0e
lea rdx, [rsp + 0x3e8]
lea rcx, [0x1400fbc18]
mov r8d, 2
call fcn.14005a810
cmp al, bl
je 0x14009875b
mov ebx, dword [rsp + 0x50]
or ebx, 0x10
mov dword [rsp + 0x50], ebx
jmp 0x140098a12
mov r11, qword [rsp + 0x3e8]
lea rcx, [0x1400fbc14]
mov r8d, 3
mov rdx, r11
call fcn.140051938
cmp al, bl
je 0x1400987ad
mov ebx, dword [rsp + 0x50]
add r11, 6
lea rdx, [rsp + 0xa4]
or ebx, 0x10
lea rcx, [rsp + 0x3e8]
mov qword [rsp + 0x3e8], r11
mov dword [rsp + 0x50], ebx
call fcn.14006648c
jmp 0x140098a12
lea rdx, [rsp + 0x3e8]
lea rcx, str._O:N
mov r8d, 4
call fcn.14005a810
cmp al, bl
je 0x1400987dd
mov ebx, dword [rsp + 0x50]
mov r9d, 0x20
mov edi, r9d
jmp 0x140098a18
lea rdx, [rsp + 0x3e8]
lea rcx, str._O:_N
mov r8d, 5
call fcn.14005a810
cmp al, bl
je 0x140098805
mov edi, 0x60
jmp 0x140098a0e
lea rdx, [rsp + 0x3e8]
lea rcx, str.cur
mov r8d, 4
call fcn.14005a810
cmp al, bl
je 0x140098833
mov dword [rsp + 0xa8], 1
jmp 0x140098a0e
mov rbx, qword [rsp + 0x3e8]
lea rcx, str._size:
mov r8d, 6
mov rdx, rbx
call fcn.140051938
xor r8d, r8d
cmp al, r8b
je 0x140098912
lea rax, [rbx + 0xc]
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], rax
call fcn.14005dcb4
mov r11, qword [rsp + 0x78]
xor eax, eax
cmp word [r11], ax
je 0x14009857f
lea edx, [rax + 9]
cmp dx, word [r11]
ja 0x140098898
cmp word [r11], 0xd
jbe 0x1400988c8
mov ecx, 0x20
cmp cx, word [r11]
je 0x1400988cd
add r11, 2
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], r11
call fcn.14005dcb4
mov r11, qword [rsp + 0x78]
xor eax, eax
lea edx, [rax + 9]
mov ecx, 0x20
cmp word [r11], ax
je 0x14009857f
cmp dx, word [r11]
ja 0x1400988e8
cmp word [r11], 0xd
jbe 0x14009857f
cmp cx, word [r11]
je 0x14009857f
add r11, 2
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], r11
call fcn.14005dcb4
jmp 0x14009857f
mov eax, 0x2a
cmp ax, word [rbx]
je 0x140098582
mov ebx, dword [rsp + 0x50]
mov al, bl
lea rcx, [rsp + 0xc0]
and al, 0x10
neg al
sbb eax, eax
or ebx, edi
and eax, esi
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x78], eax
cdqe
or qword [rsp + 0x148], rax
call fcn.140058038
lea rbx, [0x1400f04f4]
lea rcx, [rsp + 0xd0]
mov rdx, rbx
call fcn.14006252c
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.14006252c
lea rcx, [rsp + 0x90]
mov rdx, rbx
call fcn.14006252c
mov rbx, qword [rsp + 0x3e8]
xor esi, esi
cmp ebp, esi
je 0x140098af2
cmp r14d, 1
jne 0x140098af2
lea rcx, [rsp + 0x68]
call fcn.140058038
mov r8, qword [rsp + 0x3e8]
lea edi, [rsi + 0x2c]
lea r15d, [rsi + 0x22]
movzx eax, word [r8]
cmp r15w, ax
jne 0x140098a42
add r8, 2
lea rcx, [rsp + 0x3e8]
mov edx, r15d
mov qword [rsp + 0x3e8], r8
call fcn.140009210
mov rcx, qword [rsp + 0x3e8]
cmp word [rcx], si
je 0x140098a79
add rcx, 2
mov qword [rsp + 0x3e8], rcx
jmp 0x140098a79
or r14d, 5
jmp 0x140098a0e
and r14d, 0xfffffffd
or r14d, 1
mov ebx, dword [rsp + 0x50]
mov r9d, 0x20
xor r8d, r8d
lea r10d, [r8 + 9]
jmp 0x140098477
add rax, 4
lea rcx, [rsp + 0x3e8]
mov qword [rsp + 0x3e8], rax
call fcn.1400503f4
jmp 0x140098924
cmp ax, si
je 0x140098a79
mov ecx, 0x20
lea edx, [rcx - 0x17]
cmp di, ax
je 0x140098a79
cmp dx, ax
ja 0x140098a5f
cmp ax, 0xd
jbe 0x140098a79
cmp cx, ax
je 0x140098a79
add r8, 2
mov qword [rsp + 0x3e8], r8
mov ax, word [r8]
cmp ax, si
jne 0x140098a4f
lea rcx, [rsp + 0x3e8]
call fcn.1400503f4
mov r8, qword [rsp + 0x3e8]
cmp word [r8], si
je 0x140098a9e
cmp di, word [r8]
jne 0x1400989bb
sub r8, rbx
lea rcx, [rsp + 0x68]
mov rdx, rbx
sar r8, 1
call fcn.1400582a0
mov rdx, qword [rsp + 0x68]
lea r8, [rsp + 0xe8]
xor r9d, r9d
mov rcx, r13
mov byte [rsp + 0x20], 1
call fcn.14006b814
mov r11, qword [rsp + 0xe8]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0xf8], r11
call fcn.140050424
mov r15, qword [rsp + 0x3f8]
jmp 0x140098b12
mov edi, 0x2c
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0xe8]
mov r8d, edi
mov r9b, 1
call fcn.14006ece4
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xf8]
xor r8d, r8d
call fcn.14005b95c
mov r11, qword [rsp + 0xc0]
mov ebx, 0x5c
mov qword [rsp + 0x68], r11
cmp r14d, esi
jne 0x140098bc6
movzx eax, word [r11]
cmp ax, si
je 0x140098bc6
mov ecx, 9
cmp cx, ax
ja 0x140098b5e
cmp ax, 0xd
jbe 0x140098bc6
mov ecx, 0x20
cmp cx, ax
je 0x140098bc6
mov ecx, 0x40
cmp cx, ax
jne 0x140098b7f
mov dword [rsp + 0xa0], 1
jmp 0x140098bb8
mov ecx, 0x24
cmp cx, ax
jne 0x140098b96
mov dword [rsp + 0xa0], 3
jmp 0x140098bb8
cmp bx, ax
jne 0x140098ba9
cmp bx, word [r11 + 2]
je 0x140098bc3
or dword [rsp + 0x5c], 1
jmp 0x140098bb8
mov ecx, 0x21
cmp cx, ax
jne 0x140098bc6
or dword [rsp + 0x5c], 2
add r11, 2
mov qword [rsp + 0x68], r11
jmp 0x140098b45
mov r12b, 1
lea rcx, [rsp + 0x68]
call fcn.1400503f4
mov ebp, r14d
and ebp, 1
jne 0x140098be4
mov rcx, qword [rsp + 0x68]
call fcn.140019058
jmp 0x140098be9
mov rax, qword [rsp + 0x68]
cmp dword [rsp + 0x5c], esi
jne 0x140098c1a
cmp r14d, esi
jne 0x140098c1f
cmp r12b, sil
jne 0x140098c1f
cmp bx, word [rax]
jne 0x140098c04
cmp bx, word [rax + 2]
je 0x140098c1f
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.1400194b4
jmp 0x140098c2f
add rax, 2
cmp word [rax], bx
je 0x140098c16
lea rcx, [rsp + 0x80]
mov rdx, rax
call fcn.1400625ac
mov rcx, qword [rsp + 0x3e8]
cmp di, word [rcx]
jne 0x140098c7e
add rcx, 2
lea rdx, [rsp + 0x3e8]
mov r8d, edi
mov qword [rsp + 0x3e8], rcx
lea rcx, [rsp + 0xe8]
mov r9b, 1
call fcn.14006ece4
lea rdx, [rsp + 0xd0]
xor r8d, r8d
mov rcx, rax
call fcn.14005b95c
mov rcx, qword [rsp + 0x3e8]
cmp r14d, esi
jne 0x140098ccb
cmp di, word [rcx]
jne 0x140098ccb
add rcx, 2
lea rdx, [rsp + 0x3e8]
mov r8d, edi
mov qword [rsp + 0x3e8], rcx
lea rcx, [rsp + 0xe8]
mov r9b, 1
call fcn.14006ece4
lea rdx, [rsp + 0x120]
movzx r8d, di
mov rcx, rax
call fcn.14005bc34
mov rcx, qword [rsp + 0x3e8]
mov rax, qword [rsp + 0x120]
mov rdx, 0xfffffffffffffff8
cmp rax, rsi
cmovle rax, rdx
mov qword [rsp + 0x120], rax
cmp word [rcx], di
je 0x140098d58
lea rcx, [rsp + 0x90]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0xd0]
call fcn.140050424
lea rcx, [rsp + 0xc0]
call fcn.140050424
lea rcx, [rsp + 0x100]
call fcn.14001addc
lea rcx, [rsp + 0x100]
call fcn.140050424
lea rcx, [rsp + 0xe8]
call fcn.140050424
movabs rax, 1
jmp 0x14009988d
add rcx, 2
mov qword [rsp + 0x3e8], rcx
lea rcx, [rsp + 0x3e8]
call fcn.1400503f4
mov rdx, qword [rsp + 0x3e8]
lea rcx, [rsp + 0x90]
call fcn.140062644
mov rsi, qword [rsp + 0x90]
mov eax, 0x2a
xor r12d, r12d
cmp word [rsi], ax
jne 0x140098da4
mov bl, 1
cmp word [rsi + 2], r12w
je 0x140098da7
mov bl, r12b
lea rcx, [rsp + 0x158]
mov byte [rsp + 0x58], bl
call fcn.140058038
mov rdi, qword [rsp + 0xd0]
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r12
cmp bl, r12b
jne 0x140098de5
lea rcx, [rsp + 0x158]
mov rdx, rdi
call fcn.140062644
mov qword [rsp + 0xc8], r12
cmp r15, r12
je 0x140098df7
mov r15, qword [r15]
jmp 0x140098dfa
mov r15, r12
mov qword [rsp + 0x68], r15
cmp word [rsi], r12w
jne 0x140098e2e
cmp r15, r12
je 0x140098e2e
movzx eax, word [r15]
cmp word [r13 + 0x96], ax
jne 0x140098e2e
mov rdx, qword [rsp + 0x3f8]
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call fcn.140057058
lea rcx, [rsp + 0x118]
mov edx, 0x32a
call fcn.1400580ac
mov rbx, qword [rsp + 0x118]
mov r10, qword [rsp + 0x3e0]
xor r11d, r11d
lea rax, [rbx + 4]
mov qword [rsp + 0x178], rax
mov eax, 0x8b
mov qword [rsp + 0xb0], r11
and word [r10 + 0xc8], ax
mov r12, r11
mov r13d, r11d
mov dword [rsp + 0x54], r11d
mov dword [rsp + 0x70], r11d
lea ecx, [rax + 0x75]
cmp word [rsi], r11w
jne 0x140098ea3
cmp r15, r11
je 0x140098ea3
movzx eax, word [r15]
mov r15d, ecx
cmp word [r10 + 0x96], ax
je 0x140098ea6
mov r15d, r11d
cmp word [rdi], r11w
je 0x140098ec7
mov rax, qword [rsp + 0x90]
cmp word [rax], r11w
jne 0x140098ec7
mov dword [rsp + 0x60], 1
cmp r15d, r11d
je 0x140098ecc
mov dword [rsp + 0x60], r11d
mov rcx, qword [rsp + 0x80]
mov esi, r14d
mov qword [rsp + 0xe0], r11
and esi, 4
mov r8, rcx
mov qword [rsp + 0x3e8], rcx
je 0x140098f82
lea rcx, [0x14010ee78]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x3e0]
or r9d, 0xffffffff
xor r8d, r8d
call fcn.14001b59c
xor ecx, ecx
cmp rax, rcx
jne 0x140098f3a
lea ebx, [rcx + 2]
lea rcx, [0x14010ee78]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edx, edx
jmp 0x1400997ba
mov rdx, qword [rax]
lea rcx, [rsp + 0xe0]
call fcn.140062644
mov r11, qword [rsp + 0xe0]
lea rcx, [0x14010ee78]
mov qword [rsp + 0x3e8], r11
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r8, qword [rsp + 0x3e8]
mov rcx, qword [rsp + 0x80]
mov r10, qword [rsp + 0x3e0]
xor r11d, r11d
movsxd r13, r15d
test r14b, 2
je 0x140099133
movzx eax, word [r8]
mov qword [rsp + 0xd8], r11
cmp ax, r11w
je 0x140099118
mov rsi, qword [rsp + 0x400]
mov r14, qword [rsp + 0x68]
mov r12w, word [rsp + 0x88]
mov r15, qword [rsp + 0x3f0]
mov ebp, 0xfeff
test byte [r10 + 0xc8], 0xef
jne 0x140099118
mov r9, r8
cmp r12w, r11w
je 0x140098ffa
lea rcx, [rsp + 0x3e8]
movzx edx, r12w
call fcn.140009210
mov r8, qword [rsp + 0x3e8]
jmp 0x140099026
cmp ax, r11w
je 0x140099026
mov ecx, 0xa
cmp ax, 0xd
je 0x140099026
cmp ax, cx
je 0x140099026
add r8, 2
mov qword [rsp + 0x3e8], r8
mov ax, word [r8]
cmp ax, r11w
jne 0x140099005
movzx ebx, word [r8]
mov word [r8], r11w
mov rdx, rdi
mov r8, r9
mov rcx, r10
call fcn.140057714
mov r8, qword [rsp + 0x3e8]
xor r11d, r11d
cmp r12w, r11w
jne 0x140099064
cmp bx, 0xd
jne 0x140099064
lea eax, [r11 + 0xa]
cmp ax, word [r8 + 2]
jne 0x14009906a
add r8, 4
jmp 0x14009906e
cmp bx, r11w
je 0x140099076
add r8, 2
mov qword [rsp + 0x3e8], r8
inc dword [rsp + 0x54]
cmp r13, r11
je 0x1400990b4
mov rcx, qword [rsp + 0x3e0]
lea rax, [r14 + 2]
lea r8, [rsp + 0xc8]
mov qword [rsp + 0xc8], rax
lea rax, [0x1400f04f4]
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x20], rax
call fcn.14008f8a8
jmp 0x1400990da
mov rdx, qword [rsp + 0x90]
cmp word [rdx], r11w
je 0x1400990e5
mov rcx, qword [rsp + 0x3e0]
xor r9d, r9d
mov r8, r15
mov qword [rsp + 0x20], rsi
call fcn.1400409b4
mov r8, qword [rsp + 0x3e8]
xor r11d, r11d
mov r10, qword [rsp + 0x3e0]
mov ecx, 0x100
movzx eax, word [r10 + 0xc8]
test cx, ax
je 0x14009910a
and ax, bp
mov word [r10 + 0xc8], ax
mov ax, word [r8]
cmp ax, r11w
jne 0x140098fc8
lea rcx, [rsp + 0xd8]
call fcn.140050424
mov r13d, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x70]
jmp 0x140098f33
cmp ebp, r11d
je 0x140099331
cmp esi, r11d
je 0x140099156
lea rcx, [rsp + 0x3e8]
call fcn.1400503f4
mov r8, qword [rsp + 0x3e8]
movsxd rcx, dword [rsp + 0x98]
movzx eax, word [r8]
mov qword [rsp + 0x78], r11
mov rbp, rcx
lea ebx, [rcx - 1]
cmp ax, r11w
je 0x140099327
mov rsi, qword [rsp + 0x400]
mov r14, qword [rsp + 0x68]
mov r12d, 0xfeff
test byte [r10 + 0xc8], 0xef
jne 0x140099327
mov rdx, r8
mov ecx, r11d
cmp rbp, r11
je 0x14009920b
mov r9d, 0x22
cmp r9w, ax
jne 0x14009920b
movsxd rax, ebx
lea rdx, [r8 + rax*2]
add r8, 2
mov qword [rsp + 0x3e8], r8
movzx eax, word [r8]
cmp ax, r11w
je 0x140099243
cmp r9w, ax
jne 0x1400991b6
movzx eax, word [r8 + 2]
cmp ax, r11w
je 0x1400991fb
mov r10d, 9
cmp r10w, ax
ja 0x1400991ef
cmp ax, 0xd
jbe 0x1400991fb
mov r10d, 0x20
cmp r10w, ax
jne 0x1400991b6
add r8, 2
mov ecx, ebx
mov qword [rsp + 0x3e8], r8
jmp 0x140099243
cmp ax, r11w
je 0x140099243
mov r9d, 0x20
lea r10d, [r9 - 0x17]
cmp r10w, ax
ja 0x140099227
cmp ax, 0xd
jbe 0x140099243
cmp r9w, ax
je 0x140099243
add r8, 2
mov qword [rsp + 0x3e8], r8
mov ax, word [r8]
cmp ax, r11w
jne 0x14009921b
movsxd rax, ecx
lea rcx, [rsp + 0x78]
add rax, rax
sub r8, rax
sub r8, rdx
sar r8, 1
call fcn.1400582a0
lea rcx, [rsp + 0x3e8]
call fcn.1400503f4
mov r15, qword [rsp + 0x3e0]
mov r8, qword [rsp + 0x78]
mov rcx, r15
mov rdx, rdi
call fcn.140057714
inc dword [rsp + 0x54]
xor r11d, r11d
cmp r13, r11
je 0x1400992c2
mov rdx, qword [rsp + 0x3f0]
lea rax, [r14 + 2]
lea r8, [rsp + 0xc8]
mov qword [rsp + 0xc8], rax
lea rax, [0x1400f04f4]
xor r9d, r9d
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.14008f8a8
jmp 0x1400992e8
mov rdx, qword [rsp + 0x90]
cmp word [rdx], r11w
je 0x1400992eb
mov r8, qword [rsp + 0x3f0]
xor r9d, r9d
mov rcx, r15
mov qword [rsp + 0x20], rsi
call fcn.1400409b4
xor r11d, r11d
mov r10, qword [rsp + 0x3e0]
mov ecx, 0x100
movzx eax, word [r10 + 0xc8]
test cx, ax
je 0x140099311
and ax, r12w
mov word [r10 + 0xc8], ax
mov r8, qword [rsp + 0x3e8]
mov ax, word [r8]
cmp ax, r11w
jne 0x14009918a
lea rcx, [rsp + 0x78]
jmp 0x140099120
call fcn.140019058
lea rcx, [rsp + 0x80]
mov rdx, rax
call fcn.1400625ac
mov r11, qword [rsp + 0x80]
xor edx, edx
cmp word [r11], dx
je 0x1400997b5
mov ebp, dword [rsp + 0x5c]
movzx r13d, dx
mov r14b, dl
cmp ebp, edx
je 0x140099420
cmp dword [rsp + 0xa8], edx
je 0x1400993b3
mov word [rsp + 0x180], dx
lea rdx, [rsp + 0x180]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov r13w, word [rsp + 0x180]
cmp r13w, 0x61
jb 0x1400993b1
cmp r13w, 0x7a
ja 0x1400993b1
mov eax, 0xffdf
and r13w, ax
xor edx, edx
lea r12, [rbx + 4]
mov ecx, 0x324
mov word [r12 + 2], dx
mov word [r12], dx
mov word [rbx + 2], dx
mov word [rbx], dx
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
xor edx, edx
and bpl, 2
mov rsi, r12
mov rbx, r12
cmp word [r12], dx
je 0x140099405
mov rcx, rbx
mov rsi, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor edx, edx
movsxd rcx, eax
lea rbx, [rbx + rcx*2 + 2]
cmp word [rbx], dx
jne 0x1400993ea
cmp bpl, dl
mov ebp, dword [rsp + 0xa4]
cmovne r12, rsi
mov rsi, qword [rsp + 0x400]
jmp 0x140099620
mov rax, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0x400]
mov ebp, dword [rsp + 0xa4]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0xb0], r11
cmp r15d, edx
jne 0x140099465
mov rax, qword [rsp + 0x90]
cmp word [rax], dx
jne 0x140099465
mov eax, dword [rsp + 0x60]
cmp eax, edx
je 0x14009979f
cmp dword [rsp + 0xb8], edx
je 0x14009948e
movzx ecx, word [r11]
cmp cx, dx
je 0x14009948e
cmp word [r11 + 2], 0x3a
jne 0x14009948e
call fcn.1400d3350
xor edx, edx
cmp eax, edx
je 0x140099616
lea rcx, [rsp + 0x98]
call fcn.140058038
mov rcx, qword [rsp + 0xb0]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x98]
xor r14d, r14d
mov qword [rsp + 0xd8], r14
call fcn.1400c18dc
mov r8, qword [rsp + 0x98]
cmp dword [rsp + 0xbc], r14d
je 0x1400994eb
mov rax, qword [rsp + 0xd8]
sub rax, r8
sar rax, 1
mov qword [rsp + 0x138], rax
cmp dword [rsp + 0x78], r14d
je 0x140099584
mov ebx, 8
mov rcx, rbx
call fcn.1400d4138
cmp rax, r14
je 0x14009951a
lea rdx, [rsp + 0x98]
mov rcx, rax
call fcn.14006258c
jmp 0x14009951d
mov rax, r14
lea r9, [rsp + 0x170]
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x100]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x20], ebx
call fcn.140058388
cmp dword [rsp + 0x5c], r14d
je 0x14009957c
cmp word [r12], r14w
je 0x14009957c
lea rcx, [rsp + 0x98]
mov r14b, 1
call fcn.140050424
xor edx, edx
jmp 0x140099620
mov r8, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x3e0]
mov r9, qword [rsp + 0x3f0]
mov qword [rsp + 0x48], rsi
mov dword [rsp + 0x40], ebp
lea rax, [rsp + 0x120]
mov ecx, r15d
or ecx, dword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x90]
or ecx, dword [rsp + 0xa0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x68]
mov dword [rsp + 0x28], ecx
lea rdx, [rsp + 0x158]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.140097874
mov ecx, 0x100
add dword [rsp + 0x54], eax
movzx eax, word [rbx + 0xc8]
test cx, ax
je 0x140099607
mov ecx, 0xfeff
and ax, cx
mov word [rbx + 0xc8], ax
lea rcx, [rsp + 0x98]
call fcn.140050424
xor edx, edx
cmp dword [rsp + 0x5c], edx
je 0x1400996fb
movsxd rbx, dword [rsp + 0xa8]
cmp word [r12], dx
je 0x1400996fb
lea rax, [rsp + 0x120]
cmp qword [rax], rdx
je 0x1400996fb
mov rax, qword [rsp + 0x3e0]
test byte [rax + 0xc8], 0xef
jne 0x1400996fb
lea rcx, [rsp + 0xb0]
mov rdx, r12
call fcn.140062644
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0xb0]
call fcn.140058174
xor edx, edx
cmp rbx, rdx
jne 0x1400996db
test byte [rsp + 0x5c], 2
je 0x1400996b1
mov rcx, qword [rsp + 0x178]
sub r12, 2
cmp r12, rcx
jbe 0x1400996c4
lea rax, [r12 - 2]
cmp word [rax], dx
je 0x1400996c4
mov r12, rax
cmp rax, rcx
ja 0x14009969d
jmp 0x1400996c4
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
xor edx, edx
cdqe
lea r12, [r12 + rax*2]
mov r11, qword [rsp + 0xb0]
cmp r13w, word [r11]
jne 0x140099447
jmp 0x140099628
mov rax, qword [rsp + 0xb0]
mov dword [rsp + 0xa8], edx
mov word [rax], r13w
mov r11, qword [rsp + 0xb0]
jmp 0x140099447
cmp r14b, dl
je 0x1400997aa
mov rbx, qword [rsp + 0x90]
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0x100]
mov r9d, 8
xor ecx, ecx
call fcn.140058498
or r15d, dword [rsp + 0x50]
mov r9, qword [rsp + 0x3f0]
mov rcx, qword [rax]
mov rax, qword [rsp + 0x400]
or r15d, dword [rsp + 0xa0]
mov r8, qword [rcx]
mov rcx, qword [rsp + 0x3e0]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0xa4]
lea rdx, [rsp + 0x158]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
call fcn.140097874
mov r13d, dword [rsp + 0x54]
add r13d, eax
jmp 0x14009912a
mov r13d, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x70]
jmp 0x1400997be
mov r13d, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x70]
jmp 0x1400997ba
mov r13d, edx
mov ebx, edx
mov eax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x3e0]
mov r8d, 0x8b
and word [rcx + 0xc8], r8w
cmp byte [rsp + 0x58], dl
je 0x1400997ec
mov r8, qword [rsp + 0x158]
mov rdx, rdi
call fcn.140057714
jmp 0x1400997fb
cmp eax, edx
je 0x1400997fb
mov r8, rdi
mov edx, r13d
call fcn.14005b0c0
lea rcx, [rsp + 0xe0]
call fcn.140050424
lea rcx, [rsp + 0xb0]
call fcn.140050424
lea rcx, [rsp + 0x118]
call fcn.140050424
lea rcx, [rsp + 0x158]
call fcn.140050424
lea rcx, [rsp + 0x90]
call fcn.140050424
lea rcx, [rsp + 0x80]
call fcn.140050424
lea rcx, [rsp + 0xd0]
call fcn.140050424
lea rcx, [rsp + 0xc0]
call fcn.140050424
lea rcx, [rsp + 0x100]
call fcn.14001addc
lea rcx, [rsp + 0x100]
call fcn.140050424
lea rcx, [rsp + 0xe8]
call fcn.140050424
movsxd rax, ebx
add rsp, 0x398
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret