Function at 0x1400c6044
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x950]
sub rsp, 0xa50
mov rax, qword [0x14017a608]
xor rax, rsp
mov qword [rbp + 0x940], rax
mov r14, qword [rbp + 0x9b0]
xor r13d, r13d
mov r15, qword [rbp + 0x9b8]
mov rax, r9
mov r12, qword [rbp + 0x9c0]
mov rdi, rcx
mov rsi, qword [rbp + 0x9c8]
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r12
mov dword [rsp + 0x54], r13d
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x40], rax
mov byte [rbp - 0x38], r13b
mov qword [rbp - 0x68], r8
mov qword [rbp - 0x60], rdx
mov qword [rbp - 0x70], rcx
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
lea ebx, [r13 + 4]
cmp rcx, rax
je 0x1400c6105
test byte [rcx + 0x1c], bl
je 0x1400c6105
cmp byte [rcx + 0x19], bl
jb 0x1400c6105
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
mov edx, 0x19b
call fcn.140006b98
xorps xmm0, xmm0
lea rcx, [rbp + 0x330]
movups xmmword [r14], xmm0
mov qword [r15], r13
xor edx, edx
mov qword [r12], r13
mov r8d, 0x100
mov dword [rsi], r13d
call sub.msvcrt.dll_memset
xor edx, edx
lea rcx, [rbp + 0x530]
mov r8d, 0x400
call sub.msvcrt.dll_memset
xor edx, edx
lea rcx, [rbp + 0x2b0]
mov r8d, 0x80
call sub.msvcrt.dll_memset
mov rcx, qword [0x14017a048]
lea rdx, [0x14017a048]
cmp rcx, rdx
je 0x1400c6187
test byte [rcx + 0x1c], bl
je 0x1400c6187
cmp byte [rcx + 0x19], bl
jb 0x1400c6187
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
mov edx, 0x19c
mov r9, rdi
call fcn.1400112c8
mov edi, r13d
lea r12, [rbp + 0x2b0]
lea r13, [rbp + 0x548]
xor r15d, r15d
mov edx, 0x20000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov qword [rbp + r15 + 0x1b0], rax
mov r14, rax
test rax, rax
je 0x1400c7004
xor r9d, r9d
add rax, 0xffff
and rax, 0xffffffffffff0000
xor r8d, r8d
xor ecx, ecx
mov qword [rbp + r15 + 0x330], rax
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
nop dword [rax + rax]
mov qword [r13], rax
test rax, rax
je 0x1400c6f97
and dword [r12], 0
mov r14d, 0x20
add r13, r14
inc edi
add r15, 8
add r12, rbx
cmp edi, r14d
jb 0x1400c619b
xor edx, edx
lea rcx, [rbp + 0x30]
mov r8d, 0x180
xor r13d, r13d
call sub.msvcrt.dll_memset
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x1400c629c
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
nop dword [rax + rax]
test eax, eax
jne 0x1400c6298
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov dword [rsi], eax
lea rbx, [rbp + 0x1b0]
mov esi, r14d
lea rdi, [rbp + 0x548]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
add rdi, r14
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x1400c6265
lea ebx, [rsi + 0x13]
jmp 0x1400c6ff7
mov byte [rbp - 0x38], 1
mov r12, qword [rbp - 0x70]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], rsi
lea r9, [rsp + 0x53]
and qword [rsp + 0x40], r13
lea r8, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea rcx, [rbp + 0x30]
lea rax, [rbp - 0x10]
mov rdx, r12
mov qword [rsp + 0x30], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
call fcn.1400d1774
mov r15d, eax
test eax, eax
je 0x1400c684f
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x1400c632f
test byte [rcx + 0x1c], bl
je 0x1400c632f
cmp byte [rcx + 0x19], bl
jb 0x1400c632f
mov eax, dword [rsi]
lea r8, [0x1401614e8]
mov rcx, qword [rcx + 0x10]
mov edx, 0x19d
mov dword [rsp + 0x28], eax
mov r9, r12
mov dword [rsp + 0x20], r15d
call fcn.14005fe40
and qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x60000080
mov edx, 0x80000000
mov rcx, r12
mov byte [rsp + 0x53], 1
mov byte [rsp + 0x52], 1
lea r8d, [r9 + 1]
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rsp + 0x60], rax
cmp rax, 0xffffffffffffffff
jne 0x1400c6413
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov dword [rsi], eax
lea rdi, [rbp + 0x1b0]
lea r14, [rbp + 0x548]
mov r15d, 0x20
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea r14, [r14 + 0x20]
lea rdi, [rdi + 8]
sub r15, 1
jne 0x1400c639a
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x1400c6ff2
test byte [rcx + 0x1c], bl
je 0x1400c6ff2
cmp byte [rcx + 0x19], 2
jb 0x1400c6ff2
mov eax, dword [rsi]
lea r8, [0x1401614e8]
mov rcx, qword [rcx + 0x10]
mov edx, 0x19e
mov r9, r12
mov dword [rsp + 0x20], eax
call fcn.140011330
jmp 0x1400c6ff2
lea rdx, [rsp + 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
nop dword [rax + rax]
test eax, eax
jne 0x1400c648b
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rbx, [rbp + 0x1b0]
mov rsi, r14
lea rdi, [rbp + 0x548]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
add rdi, r14
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x1400c645b
jmp 0x1400c6ff2
mov rdi, qword [rsp + 0x78]
test rdi, rdi
jne 0x1400c64e7
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rbx, [rbp + 0x1b0]
mov rsi, r14
lea rdi, [rbp + 0x548]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
add rdi, r14
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x1400c64b7
jmp 0x1400c6835
mov edx, 0x20000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x48], rax
mov r14, rax
test rax, rax
jne 0x1400c6568
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rbx, [rbp + 0x1b0]
lea rdi, [rbp + 0x548]
lea esi, [r14 + 0x20]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rdi, [rdi + 0x20]
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x1400c6537
jmp 0x1400c7050
mov edx, 0x10000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov r12, rax
mov qword [rbp - 0x50], rax
xor eax, eax
test r12, r12
jne 0x1400c65fb
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, r14
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rbx, [rbp + 0x1b0]
lea rdi, [rbp + 0x548]
lea esi, [r12 + 0x20]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rdi, [rdi + 0x20]
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x1400c65ca
jmp 0x1400c7050
mov rdx, qword [rbp + 0x330]
lea r9, [rbp + 0x530]
mov rcx, qword [rsp + 0x60]
mov dword [rbp - 0x7c], eax
mov qword [rbp + 0x540], rax
mov eax, 0x10000
cmp rdi, rax
mov r8d, eax
cmovl r8d, edi
mov dword [rsp + 0x6c], r8d
call fcn.1400c3d98
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x54]
mov r9d, 1
lea rdx, [rbp + 0x530]
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
nop dword [rax + rax]
test eax, eax
jne 0x1400c66de
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, r12
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rdi, [rbp + 0x1b0]
mov r14d, 0x20
lea rsi, [rbp + 0x548]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rsi, [rsi + 0x20]
lea rdi, [rdi + 8]
sub r14, 1
jne 0x1400c66ad
jmp 0x1400c6ff7
mov r9d, dword [rsp + 0x54]
mov eax, dword [rsp + 0x6c]
cmp r9d, eax
je 0x1400c67a1
mov rcx, qword [0x14017a048]
lea rdx, [0x14017a048]
cmp rcx, rdx
je 0x1400c6727
test byte [rcx + 0x1c], bl
je 0x1400c6727
cmp byte [rcx + 0x19], 2
jb 0x1400c6727
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
mov edx, 0x19f
mov dword [rsp + 0x20], eax
call fcn.14003c7a4
mov rcx, r12
mov dword [rsi], 0x45d
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rdi, [rbp + 0x1b0]
mov r14d, 0x20
lea rsi, [rbp + 0x548]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rsi, [rsi + 0x20]
lea rdi, [rdi + 8]
sub r14, 1
jne 0x1400c6770
jmp 0x1400c6ff7
mov rcx, qword [rbp + 0x330]
lea rdx, [0x140161508]
mov r8d, 0x10
call qword [sym.imp.KERNEL32.dll_RtlCompareMemory]
nop dword [rax + rax]
cmp rax, 0x10
je 0x1400c683d
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
lea rbx, [rbp + 0x1b0]
mov esi, 0x20
lea rdi, [rbp + 0x548]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rdi, [rdi + 0x20]
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x1400c6809
mov ebx, r15d
jmp 0x1400c6ff7
mov al, byte [rsp + 0x53]
mov dl, byte [rsp + 0x52]
mov qword [rbp - 0x30], 1
jmp 0x1400c686a
mov al, byte [rsp + 0x53]
xor dl, dl
mov byte [rsp + 0x52], dl
test al, al
je 0x1400c6863
mov rdi, qword [rbp + 0x48]
jmp 0x1400c686a
mov edi, dword [rbp - 0x80]
shl rdi, 0x15
mov rcx, qword [0x14017a048]
lea r12, [0x14017a048]
cmp rcx, r12
je 0x1400c68d5
test byte [rcx + 0x1c], bl
je 0x1400c68ae
cmp byte [rcx + 0x19], bl
jb 0x1400c68ae
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
movzx eax, al
movzx r9d, dl
mov edx, 0x1a0
mov dword [rsp + 0x20], eax
call fcn.14003dbf0
mov rcx, qword [0x14017a048]
cmp rcx, r12
je 0x1400c68d5
test byte [rcx + 0x1c], bl
je 0x1400c68d5
cmp byte [rcx + 0x19], bl
jb 0x1400c68d5
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
mov edx, 0x1a1
mov r9, rdi
call fcn.14003dd3c
lea rcx, [rbp - 0x40]
call fcn.1400c5b94
movabs r10, 0x91f8177e3ed03b70
mov rcx, qword [rbp - 0x68]
mov r8, rdi
mov rax, qword [rbp - 0x60]
xor edx, edx
call qword [vtable.H_MA8HI.0]
test al, al
jne 0x1400c6942
mov r15d, 1
mov rcx, qword [0x14017a048]
cmp rcx, r12
je 0x1400c6a46
test byte [rcx + 0x1c], bl
je 0x1400c6a46
cmp byte [rcx + 0x19], 2
jb 0x1400c6a46
mov edx, 0x1a2
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
call fcn.140006b98
jmp 0x1400c6a46
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
nop dword [rax + rax]
mov r10, qword [0x14017a048]
xor al, al
mov byte [rsp + 0x51], al
xor edx, edx
lea rcx, [rbp + 0x544]
mov r8b, 1
mov dword [rsp + 0x68], edx
mov byte [rsp + 0x50], r8b
lea r12, [rbp + 0x2b0]
mov qword [rsp + 0x70], rcx
xor r14d, r14d
cmp dword [r12], 0
je 0x1400c6c44
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x54]
mov eax, edx
mov r9d, 1
shl rax, 5
lea rdx, [rbp + 0x530]
add rdx, rax
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
nop dword [rax + rax]
test eax, eax
je 0x1400c6edb
cmp byte [rsp + 0x52], 0
je 0x1400c6af6
mov r9, qword [rsp + 0x70]
mov r8d, dword [rsp + 0x54]
mov rdx, qword [rbp + r14 + 0x330]
mov rcx, qword [rbp - 0x58]
mov eax, dword [r9 - 4]
mov dword [rsp + 0x78], eax
mov eax, dword [r9]
mov dword [rsp + 0x7c], eax
mov eax, r8d
add rax, qword [rsp + 0x78]
cmp rax, rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp - 0x7c]
mov qword [rsp + 0x38], rax
sete r9b
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x58], r9b
call fcn.1400bf3d0
mov r15d, eax
test eax, eax
je 0x1400c6c26
lea r12, [0x14017a048]
mov rax, qword [rbp - 0x20]
mov qword [rax], r13
mov rax, qword [rbp - 0x18]
mov qword [rax], rdi
test r15d, r15d
je 0x1400c6a75
mov rcx, qword [rsp + 0x60]
lea r9, [rbp + 0x2b0]
lea r8, [rbp + 0x530]
or rdx, 0xffffffffffffffff
call fcn.1400c5558
lea rdi, [rbp + 0x1b0]
mov r14d, 0x20
lea rsi, [rbp + 0x548]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rsi, [rsi + 0x20]
lea rdi, [rdi + 8]
sub r14, 1
jne 0x1400c6a89
cmp byte [rsp + 0x52], r14b
je 0x1400c6f2b
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
jmp 0x1400c6f5b
mov rdx, qword [rbp + r14 + 0x430]
mov rcx, qword [rbp - 0x28]
cmp rdx, rcx
jl 0x1400c6b2b
lea r8, str.offset_i____volumeSize
mov edx, 0x2278
lea rcx, str.base_stor_blb_blbimg_blbimg.cxx
call fcn.14008ac24
mov rdx, qword [rbp + r14 + 0x430]
mov rcx, qword [rbp - 0x28]
mov r8d, dword [rsp + 0x54]
lea rax, [rdx + r8]
cmp rax, rcx
jle 0x1400c6b49
mov r8d, ecx
sub r8d, dword [rbp + r14 + 0x430]
mov dword [rsp + 0x54], r8d
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x1400c6b98
test byte [rcx + 0x1c], bl
je 0x1400c6b98
cmp byte [rcx + 0x19], 5
jb 0x1400c6b98
mov r9, qword [rsp + 0x70]
mov edx, 0x1a3
mov rcx, qword [rcx + 0x10]
mov eax, dword [r9 - 4]
mov dword [rsp + 0x28], eax
mov eax, dword [r9]
mov r9d, r8d
lea r8, [0x1401614e8]
mov dword [rsp + 0x20], eax
call fcn.1400ce398
mov r8d, dword [rsp + 0x54]
mov rdx, qword [rbp + r14 + 0x330]
lea r9, [rbp + 0x930]
mov rcx, qword [rbp - 0x58]
call fcn.1400bf630
mov r10, qword [0x14017a048]
lea rax, [0x14017a048]
cmp r10, rax
je 0x1400c6c2d
test byte [r10 + 0x1c], bl
je 0x1400c6c2d
cmp byte [r10 + 0x19], 5
jb 0x1400c6c2d
mov eax, dword [rbp + 0x93c]
mov edx, 0x1a4
mov r9, qword [rbp + r14 + 0x430]
mov rcx, qword [r10 + 0x10]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp + 0x938]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp + 0x934]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0x930]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + r14 + 0x430]
sar r9, 0x20
mov dword [rsp + 0x20], eax
call fcn.1400ce474
mov r10, qword [0x14017a048]
and dword [r12], 0
mov rcx, qword [rsp + 0x70]
mov edx, dword [rsp + 0x68]
mov r8b, byte [rsp + 0x50]
mov al, byte [rsp + 0x51]
test al, al
jne 0x1400c6e27
cmp byte [rsp + 0x52], al
je 0x1400c6d0d
cmp r13, rdi
jne 0x1400c6ca3
lea rax, [0x14017a048]
cmp r10, rax
je 0x1400c6c93
test byte [r10 + 0x1c], bl
je 0x1400c6c93
cmp byte [r10 + 0x19], bl
jb 0x1400c6c93
mov edx, 0x1a5
mov r9, qword [rbp - 0x70]
lea r8, [0x1401614e8]
mov rcx, qword [r10 + 0x10]
call fcn.1400112c8
mov r10, qword [0x14017a048]
mov r8b, byte [rsp + 0x50]
mov al, 1
mov byte [rsp + 0x51], al
jmp 0x1400c6e1e
mov rax, r13
mov qword [rsp + 0x78], r13
shr rax, 0x20
mov r8d, 0x10000
mov dword [rcx], eax
lea rax, [r13 + 0x10000]
mov dword [rcx - 4], r13d
mov dword [rsp + 0x6c], r8d
cmp rax, rdi
jle 0x1400c6cd7
mov r8d, edi
sub r8d, r13d
mov dword [rsp + 0x6c], r8d
mov rcx, qword [rsp + 0x60]
lea r9, [rbp + 0x530]
mov eax, edx
mov rdx, qword [rbp + r14 + 0x330]
shl rax, 5
add r9, rax
call fcn.1400c3d98
mov eax, dword [rsp + 0x6c]
add r13, rax
mov dword [r12], 1
jmp 0x1400c6db3
and qword [rsp + 0x38], 0
lea rcx, [rbp + 0x530]
mov rax, rdx
lea r8, [rbp + 0x430]
shl rax, 5
lea r8, [r8 + rdx*8]
mov rdx, qword [rbp + r14 + 0x330]
lea r9, [rsp + 0x6c]
add rcx, rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
call fcn.1400d5a18
test al, al
jne 0x1400c6d96
mov r10, qword [0x14017a048]
lea rax, [0x14017a048]
cmp r10, rax
je 0x1400c6c93
test byte [r10 + 0x1c], bl
je 0x1400c6c93
cmp byte [r10 + 0x19], bl
jb 0x1400c6c93
mov edx, 0x1a6
jmp 0x1400c6c78
cmp byte [rsp + 0x53], 0
mov dword [r12], 1
je 0x1400c6dab
mov r13, qword [rbp + 0x68]
jmp 0x1400c6db3
mov r13d, dword [rbp - 0x78]
shl r13, 0x15
lea rcx, [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
nop dword [rax + rax]
movzx eax, word [rbp + 0x14]
xor r8b, r8b
mov byte [rsp + 0x50], r8b
cmp word [rbp + 0x24], ax
je 0x1400c6e13
movabs r10, 0x91f8177e3ed03b70
mov rcx, qword [rbp - 0x68]
mov r8, rdi
mov rax, qword [rbp - 0x60]
mov rdx, r13
call qword [vtable.H_MA8HI.0]
test al, al
je 0x1400c6ef1
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
nop dword [rax + rax]
xor r8b, r8b
mov byte [rsp + 0x50], r8b
mov al, byte [rsp + 0x51]
mov r10, qword [0x14017a048]
mov edx, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
inc edx
add rcx, 0x20
add r14, 8
mov dword [rsp + 0x68], edx
add r12, rbx
mov qword [rsp + 0x70], rcx
cmp edx, 0x20
jb 0x1400c6983
test r8b, r8b
je 0x1400c695f
mov r13, rdi
movabs r10, 0x91f8177e3ed03b70
mov rcx, qword [rbp - 0x68]
mov r8, rdi
mov rax, qword [rbp - 0x60]
mov rdx, rdi
call qword [vtable.H_MA8HI.0]
test r15d, r15d
jne 0x1400c6a3f
mov rcx, qword [0x14017a048]
lea r12, [0x14017a048]
cmp rcx, r12
je 0x1400c6a46
test byte [rcx + 0x1c], bl
je 0x1400c6a46
cmp byte [rcx + 0x19], bl
jb 0x1400c6a46
mov r8, qword [rbp - 0x58]
mov edx, 0x1a8
mov rcx, qword [rcx + 0x10]
mov eax, dword [r8 + 0xc]
mov r9d, dword [r8]
mov dword [rsp + 0x30], eax
mov eax, dword [r8 + 8]
mov dword [rsp + 0x28], eax
mov eax, dword [r8 + 4]
lea r8, [0x1401614e8]
mov dword [rsp + 0x20], eax
call fcn.1400964d4
jmp 0x1400c6a46
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov dword [rsi], eax
mov r15d, ebx
jmp 0x1400c6a3f
mov r15d, 1
mov rcx, qword [0x14017a048]
lea r12, [0x14017a048]
cmp rcx, r12
je 0x1400c6a46
test byte [rcx + 0x1c], bl
je 0x1400c6a46
cmp byte [rcx + 0x19], 2
jb 0x1400c6a46
mov edx, 0x1a7
jmp 0x1400c692d
cmp byte [rsp + 0x53], 0
je 0x1400c6f42
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rcx, [rbp + 0x30]
call fcn.1400d0f74
mov rcx, qword [0x14017a048]
cmp rcx, r12
je 0x1400c6f86
test byte [rcx + 0x1c], bl
je 0x1400c6f86
cmp byte [rcx + 0x19], bl
jb 0x1400c6f86
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401614e8]
mov edx, 0x1a9
call fcn.140006b98
lea rcx, [rbp - 0x40]
call fcn.1400c5b94
mov eax, r15d
jmp 0x1400c705e
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, r14
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
test edi, edi
je 0x1400c6ff2
lea rbx, [rbp + 0x1b0]
lea rsi, [rbp + 0x548]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rsi, [rsi + 0x20]
lea rbx, [rbx + 8]
sub rdi, 1
jne 0x1400c6fc6
mov ebx, 8
lea rcx, [rbp - 0x40]
call fcn.1400c5b94
mov eax, ebx
jmp 0x1400c705e
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov dword [rsi], eax
test edi, edi
je 0x1400c7050
lea rbx, [rbp + 0x1b0]
lea rsi, [rbp + 0x548]
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
lea rsi, [rsi + 0x20]
lea rbx, [rbx + 8]
sub rdi, 1
jne 0x1400c7024
lea rcx, [rbp - 0x40]
call fcn.1400c5b94
mov eax, 3
mov rcx, qword [rbp + 0x940]
xor rcx, rsp
call fcn.140001d90
mov rbx, qword [rsp + 0xaa8]
add rsp, 0xa50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret