Function at 0x14001aa90
Capabilities:
Extract resource via kernel32 functions
Get keyboard layout

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c3c8]
mov eax, 0x1c4c8
call fcn.1400be180
sub rsp, rax
mov qword [rbp + 0x70], 0xfffffffffffffffe
mov rdi, rdx
test rdx, rdx
je 0x14001cca9
cmp word [rdx], 0
je 0x14001cca9
mov r14d, dword [0x140104318]
mov dword [rsp + 0x44], r14d
test r14d, r14d
jne 0x14001aafd
mov rax, qword [rcx + 0xb78]
mov qword [0x140104310], rax
xor r12d, r12d
mov word [rbp + 0x4390], r12w
lea rsi, [rbp + 0xc3a0]
mov qword [rsp + 0x58], rsi
mov qword [rbp - 0x68], rsi
lea rax, [rbp + 0x143b0]
mov qword [rsp + 0x68], rax
mov qword [rbp - 0x38], r12
mov dword [rbp - 0x30], r12d
mov byte [rbp - 0x2c], r12b
mov r15d, 0xa
mov r8d, r15d
lea rdx, [0x1400e2868]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
jne 0x14001ab6e
mov r8d, r15d
lea rdx, str._AHK_WITH_ICON_
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x14001cc90
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rbp - 0x30], eax
test eax, eax
je 0x14001cc90
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x14001cc90
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rbp - 0x38], rax
test rax, rax
je 0x14001cc90
lea rax, vtable.TextStream.0
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], r12
mov dword [rbp], r12d
mov dword [rbp + 4], 0xffffffff
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov ecx, dword [0x140105330]
cmp ecx, 0xffffffff
je 0x14001abf5
mov dword [rbp + 4], ecx
lea rdx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetCPInfo]
movzx ecx, byte [rbp + 0xe]
test eax, eax
cmove ecx, r12d
mov byte [rbp + 0xe], cl
lea rax, vtable.TextMem.0
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x30], r12
mov dword [rbp + 0x38], r12d
mov byte [rbp + 0x3c], r12b
mov qword [rbp + 0x40], r12
mov r9d, 0xfde9
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x10]
call fcn.1400869d0
inc dword [0x140104318]
xor al, al
mov byte [rbp + 0x1c428], al
mov word [rsp + 0x72], r12w
mov word [rsp + 0x7c], r12w
mov rdi, qword [rbp + 0x1c410]
mov dword [rdi + 0x2c0], r14d
mov dword [rbp - 0x6c], 0xffffffff
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea rdx, [rbp + 0xc3a0]
call fcn.14001ce70
mov r15, rax
mov qword [rbp - 0x80], rax
mov r8d, 2
lea rdx, [0x1400e28f8]
lea rcx, [rbp + 0xc3a0]
call fcn.1400b1140
test eax, eax
sete al
mov byte [rbp + 0x1c420], al
test al, al
je 0x14001acae
mov word [rbp + 0xc3a0], r12w
mov r15, r12
mov qword [rbp - 0x80], r12
mov r12d, 1
mov r13d, dword [rsp + 0x74]
mov eax, dword [rbp + 0x1c428]
mov dword [rbp - 0x78], eax
movzx eax, byte [rbp + 0x1c428]
mov byte [rbp + 0x1c418], al
mov ecx, dword [rbp + 0x1c428]
mov dword [rbp - 0x70], ecx
movzx eax, byte [rbp + 0x1c428]
mov byte [rsp + 0x40], al
lea rbx, [rbp + 0x143b0]
nop word [rax + rax]
cmp r15, 0xffffffffffffffff
je 0x14001cb98
mov eax, dword [rbp - 0x6c]
inc eax
mov dword [rdi + 0x2c4], eax
xor r14d, r14d
mov qword [rdi + 0x698], r14
lea r8d, [r14 + 0xc]
lea rdx, [0x1400e2900]
mov rcx, rsi
call fcn.1400ab4d8
test eax, eax
jne 0x14001ad39
mov rdx, rsi
mov rcx, rdi
call fcn.14001d120
test eax, eax
je 0x14001cac6
mov byte [rsp + 0x51], r14b
nop
movzx edi, byte [rbp + 0x1c420]
inc dword [rbp - 0x6c]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov rdx, rbx
call fcn.14001ce70
mov r12, rax
mov qword [rbp - 0x40], rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14001ae15
test r14d, r14d
jne 0x14001ae15
lea r8d, [r14 + 2]
lea rdx, [0x1400e291c]
mov rcx, rbx
call fcn.1400b1140
test eax, eax
jne 0x14001ade4
test dil, dil
jne 0x14001ada6
cmp word [rbx + 4], 0x3a
jne 0x14001ada6
cmp word [rbx + 6], 0x3a
je 0x14001aded
xor dil, dil
mov byte [rbp + 0x1c420], dil
lea r8, [r12*2 - 2]
lea rdx, [rbx + 4]
mov rcx, rbx
call fcn.1400a7030
lea rdx, [r12 - 2]
mov rcx, rbx
call fcn.140016680
mov r12, rax
mov qword [rbp - 0x40], rax
cmp word [rbx], 0
je 0x14001ad47
jmp 0x14001aded
test dil, dil
jne 0x14001ad47
mov r8d, 2
lea rdx, [0x1400e28f8]
mov rcx, rbx
call fcn.1400b1140
test eax, eax
jne 0x14001ae15
mov dil, 1
mov byte [rbp + 0x1c420], dil
jmp 0x14001ad47
test dil, dil
je 0x14001ae29
cmp r12, 0xffffffffffffffff
je 0x14001b569
jmp 0x14001ad47
test r14d, r14d
jne 0x14001b312
cmp r12, 0xffffffffffffffff
je 0x14001b074
cmp word [rbx], 0x28
jne 0x14001b074
add rbx, 2
cmp word [rbx], 0x3a
je 0x14001b06f
mov rcx, qword [rsp + 0x68]
cmp word [rcx + r12*2 - 2], 0x3a
je 0x14001b06a
mov r12d, 1
mov r14d, r12d
xor r8d, r8d
mov dword [rbp - 0x60], r8d
movzx eax, byte [0x140101fe6]
mov byte [rsp + 0x4b], al
mov byte [rsp + 0x4a], r12b
mov byte [rsp + 0x4c], r8b
mov byte [rsp + 0x4d], r8b
mov byte [rsp + 0x4e], r12b
mov dword [rbp + 0x50], 0xa
mov eax, r12d
mov qword [rbp - 0x58], rax
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001aeb2
cmp ax, 9
jne 0x14001aeb8
add rbx, 2
jmp 0x14001aea3
cmp word [rbx], r8w
je 0x14001b05b
jmp 0x14001aed3
xor r8d, r8d
mov rsi, rbx
movzx edx, word [rbx]
test dx, dx
je 0x14001af0d
nop
lea rcx, [0x1400e0a20]
mov eax, SafeArrayAllocDescriptor
nop dword [rax]
cmp dx, ax
je 0x14001af20
add rcx, 2
movzx eax, word [rcx]
test ax, ax
jne 0x14001aef0
add rsi, 2
movzx edx, word [rsi]
test dx, dx
jne 0x14001aee0
or rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x14001af11
lea rsi, [rbx + rax*2]
movzx edi, word [rsi]
mov word [rsi], r8w
mov r8d, 4
lea rdx, [0x1400e29c8]
mov rcx, rbx
call fcn.1400ab4d8
test eax, eax
jne 0x14001af83
lea rdx, [rbx + 8]
lea r8d, [rax + 0xf]
lea rcx, [rbp + 0x50]
call fcn.1400b1fb4
xor eax, eax
mov word [rbp + 0x6e], ax
movzx r8d, r12b
lea rcx, [rbp + 0x50]
call fcn.14008b840
lea rax, [rbp + 0x50]
or rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp word [rax + rcx*2], 0
jne 0x14001af70
mov qword [rbp - 0x58], rcx
jmp 0x14001b024
mov r8d, 5
lea rdx, [0x1400e29d8]
mov rcx, rbx
call fcn.1400ab4d8
test eax, eax
jne 0x14001afa8
cmp word [rbx + 0xa], 0x30
setne byte [rsp + 0x4b]
jmp 0x14001b024
mov r8d, 5
lea rdx, [0x1400e29e8]
mov rcx, rbx
call fcn.1400ab4d8
test eax, eax
jne 0x14001afcd
cmp word [rbx + 0xa], 0x30
setne byte [rsp + 0x4a]
jmp 0x14001b024
movzx eax, word [rbx]
test ax, ax
je 0x14001b024
movzx eax, ax
add eax, 0xffffffdb
cmp eax, 0x3e
ja case.0x14001affb.38
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x1ccd8]
mov ecx, dword [rdx + rax*4 + 0x1ccc0]
add rcx, rdx
jmp rcx
mov byte [rsp + 0x4c], r12b
jmp case.0x14001affb.38
mov byte [rsp + 0x4d], r12b
jmp case.0x14001affb.38
mov byte [rsp + 0x4e], 0
jmp case.0x14001affb.38
mov r14d, 2
add rbx, 2
movzx eax, word [rbx]
test ax, ax
jne 0x14001afd5
mov word [rsi], di
mov rbx, rsi
nop word [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001b03f
cmp ax, 9
jne 0x14001b045
add rbx, 2
jmp 0x14001b030
cmp word [rbx], 0
jne 0x14001aed0
mov rsi, qword [rsp + 0x58]
movzx edi, byte [rbp + 0x1c420]
mov byte [rsp + 0x51], r12b
mov rbx, qword [rsp + 0x68]
jmp 0x14001ad47
mov rbx, rcx
jmp 0x14001b074
mov rbx, qword [rsp + 0x68]
xor eax, eax
mov r14d, eax
cmp r12, 0xffffffffffffffff
je 0x14001b569
test r12, r12
je 0x14001ad47
cmp word [rbx + r12*2 - 2], 0x3a
jne 0x14001b09f
cmp word [rbx], 0x2c
jne 0x14001b569
movzx ecx, word [rbx]
call fcn.14000ac20
movzx eax, ax
cmp eax, 0x41
je 0x14001b27f
cmp eax, 0x4f
je 0x14001b223
movzx edx, word [rbx]
cmp dx, 0x3a
ja 0x14001b0df
movabs rcx, 0x400280000000000
bt rcx, rdx
jae 0x14001b0df
cmp word [rbx + 2], dx
je 0x14001b569
lea rcx, [0x1400e2948]
call fcn.1400a7468
test rax, rax
je 0x14001b569
lea rdx, [0x1400e296c]
mov rcx, rbx
call fcn.1400a74fc
mov rdi, rax
test rax, rax
je 0x14001b2c8
cmp word [rbx], 0x3a
jne 0x14001b173
add rbx, 2
movzx ecx, word [rbx]
test cx, cx
je 0x14001b164
cmp cx, 0x3a
je 0x14001b569
movzx ecx, cx
test ecx, 0xffffff80
jne 0x14001b144
mov edx, 0x107
call fcn.1400abaa4
test eax, eax
jne 0x14001b158
movzx edx, word [rbx]
lea rcx, [0x1400e2978]
call fcn.1400a7468
test rax, rax
je 0x14001b16e
add rbx, 2
movzx ecx, word [rbx]
test cx, cx
jne 0x14001b121
cmp word [rbx], 0x3a
je 0x14001b569
mov rbx, qword [rsp + 0x68]
cmp word [rbx], 0x2c
jne 0x14001b1d1
add rbx, 2
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001b179
cmp ax, 9
je 0x14001b179
mov r8d, 2
lea rdx, [0x1400e296c]
mov rcx, rbx
call fcn.1400b1140
test eax, eax
je 0x14001b569
lea rcx, [rbx - 2]
mov r8d, 3
lea rdx, [0x1400e0a10]
call fcn.1400b1140
test eax, eax
je 0x14001b569
mov rbx, qword [rsp + 0x68]
jmp 0x14001b2c8
mov rax, rbx
cmp rbx, rdi
jae 0x14001b1ef
nop dword [rax]
cmp word [rax], 0x22
je 0x14001b1ef
add rax, 2
cmp rax, rdi
jb 0x14001b1e0
cmp rax, rdi
je 0x14001b569
lea rcx, [rdi + 4]
movzx eax, word [rcx]
test ax, ax
je 0x14001b569
cmp ax, 0x22
je 0x14001b214
add rcx, 2
jmp 0x14001b1fc
cmp word [rcx], r14w
je 0x14001b569
jmp 0x14001b2c8
movzx ecx, word [rbx + 2]
call fcn.14000ac20
cmp ax, 0x52
jne 0x14001b569
lea rcx, [rbx + 4]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14001b250
cmp ax, 9
jne 0x14001b569
nop dword [rax]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14001b25f
cmp ax, 9
jne 0x14001b265
add rcx, 2
jmp 0x14001b250
movzx edx, word [rcx]
lea rcx, [0x1400e2930]
call fcn.1400a7468
test rax, rax
jne 0x14001b569
jmp 0x14001b2cf
mov r8d, 3
lea rdx, [0x1400e2928]
mov rcx, rbx
call fcn.1400ab4d8
test eax, eax
jne 0x14001b569
lea rcx, [rbx + 6]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14001b2b3
cmp ax, 9
jne 0x14001b569
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14001b2c2
cmp ax, 9
jne 0x14001b265
add rcx, 2
jmp 0x14001b2b3
movzx edi, byte [rbp + 0x1c420]
lea rax, [r12 + r15]
cmp rax, 0x4000
jae 0x14001ca64
cmp word [rbx], 0x2c
je 0x14001b2f2
mov eax, SafeArrayAllocDescriptor
mov word [rsi + r15*2], ax
inc r15
lea r8, [r12*2 + 2]
lea rcx, [rsi + r15*2]
mov rdx, rbx
call fcn.1400a7030
add r15, r12
mov qword [rbp - 0x80], r15
jmp 0x14001ad47
cmp r12, 0xffffffffffffffff
je 0x14001cb85
cmp r12, 0xfffffffffffffffe
je 0x14001ad47
cmp word [rbx], 0x29
jne 0x14001b394
xor edx, edx
mov r14d, edx
or r12, 0xffffffffffffffff
inc r12
cmp word [rbx + r12*2], dx
jne 0x14001b335
lea rax, [r12 - 1]
lea rax, [rbx + rax*2]
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x20
je 0x14001b35f
cmp cx, 9
jne 0x14001b36d
cmp rax, rbx
je 0x14001b373
sub rax, 2
dec r12
jmp 0x14001b350
mov word [rax + 2], dx
jmp 0x14001b388
movzx ecx, word [rax]
cmp cx, 0x20
je 0x14001b382
cmp cx, 9
jne 0x14001b388
mov word [rax], dx
mov r12, rdx
lea rdi, [rbx + 2]
dec r12
jmp 0x14001b4eb
mov rdi, rbx
cmp byte [rsp + 0x4a], 0
je 0x14001b3ac
mov rdx, r12
mov rcx, rbx
call fcn.140016700
mov r12, rax
cmp byte [rsp + 0x4b], 0
je 0x14001b3c1
mov rdx, r12
mov rcx, rbx
call fcn.140016680
mov r12, rax
xor r8d, r8d
mov ebx, r8d
cmp byte [rsp + 0x4c], r8b
je 0x14001b41c
movzx eax, word [0x1400ff3cc]
mov word [rsp + 0x70], ax
mov word [rsp + 0x78], ax
mov word [rsp + 0x7a], ax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], 0x4001
mov dword [rsp + 0x20], 0xffffffff
lea r9d, [r8 + 1]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call fcn.140089980
mov ebx, eax
xor r8d, r8d
cmp byte [rsp + 0x4d], 0
je 0x14001b477
movzx edx, word [0x1400ff3d0]
mov word [rsp + 0x70], dx
movzx ecx, word [0x1400ff3cc]
mov word [rsp + 0x78], cx
mov word [rsp + 0x7a], dx
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], 0x4001
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 1
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call fcn.140089980
add ebx, eax
cmp byte [rsp + 0x4e], 0
je 0x14001b4d2
movzx ecx, word [0x1400ff3d4]
mov word [rsp + 0x70], cx
movzx eax, word [0x1400ff3cc]
mov word [rsp + 0x78], ax
mov word [rsp + 0x7a], cx
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0x4001
mov dword [rsp + 0x20], 0xffffffff
lea r9d, [rax + 1]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call fcn.140089980
add ebx, eax
test ebx, ebx
mov rbx, qword [rsp + 0x68]
je 0x14001b4eb
or r12, 0xffffffffffffffff
nop
inc r12
cmp word [rbx + r12*2], 0
jne 0x14001b4e0
mov rcx, qword [rbp - 0x58]
lea rax, [rcx + r12]
add rax, r15
cmp rax, 0x4001
jae 0x14001cb72
mov eax, dword [rbp - 0x60]
inc eax
mov dword [rbp - 0x60], eax
cmp eax, 1
jle 0x14001b536
test rcx, rcx
je 0x14001b536
cmp rdi, rbx
jne 0x14001b536
lea r8, [rcx*2 + 2]
lea rcx, [rsi + r15*2]
lea rdx, [rbp + 0x50]
call fcn.1400a7030
add r15, qword [rbp - 0x58]
mov qword [rbp - 0x80], r15
test r12, r12
je 0x14001ad40
lea r8, [r12*2 + 2]
lea rcx, [rsi + r15*2]
mov rdx, rdi
call fcn.1400a7030
add r15, r12
mov qword [rbp - 0x80], r15
jmp 0x14001ad40
mov word [rsi], di
mov rsi, qword [rsp + 0x58]
jmp 0x14001b56f
mov r12d, 1
mov rdi, qword [rbp + 0x1c410]
xor r14d, r14d
nop dword [rax]
test r15, r15
je 0x14001bbbb
cmp word [rbp + 0x4390], 0
je 0x14001b735
mov ebx, dword [rdi + 0x2c4]
mov eax, dword [rbp - 0x74]
mov dword [rdi + 0x2c4], eax
cmp word [rsi], 0x7b
je 0x14001b607
cmp byte [rsp + 0x41], 0
jne 0x14001b607
cmp dword [rsp + 0x64], 0
jne 0x14001ca9c
cmp dword [rdi + 0x78], 0
je 0x14001b5d9
mov rax, qword [0x1400fda58]
cmp qword [rax + 0xd8], 0
je 0x14001ca7a
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8b, 3
lea rdx, [rbp + 0x4390]
mov rcx, rdi
call fcn.14001e5f0
jmp 0x14001b6b1
mov ecx, dword [rsp + 0x64]
test ecx, ecx
je 0x14001b662
sub ecx, 1
je 0x14001b641
cmp ecx, 1
jne 0x14001b6c0
lea rdx, [rbp + 0x4390]
mov rcx, rdi
call fcn.1400246b0
test eax, eax
je 0x14001cac6
mov word [rbp + 0x4390], r14w
jmp 0x14001b6cf
lea rdx, [rbp + 0x4390]
mov rcx, rdi
call fcn.140024020
test eax, eax
je 0x14001cac6
mov word [rbp + 0x4390], r14w
jmp 0x14001b6cf
mov rax, qword [0x1400fda58]
mov rcx, rdi
cmp qword [rax + 0xd8], 0
jne 0x14001caa8
lea r8, [rbp + 0x510]
lea rdx, [rbp + 0x4390]
call fcn.1400233c0
test eax, eax
je 0x14001cac6
cmp byte [rsp + 0x41], 0
je 0x14001b6c0
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov dl, reloc.WSOCK32.dll_WSAStartup
mov rcx, rdi
call fcn.1400212e0
test eax, eax
je 0x14001cac6
mov qword [rdi + 0x698], r14
mov word [rbp + 0x4390], r14w
cmp dword [rsp + 0x64], 0
je 0x14001b72f
cmp byte [rsp + 0x41], 0
jne 0x14001b72f
lea rdx, [rsi + 2]
nop word [rax + rax]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x14001b6ef
cmp ax, 9
jne 0x14001b6f5
add rdx, 2
jmp 0x14001b6e0
cmp word [rdx], 0
jne 0x14001b706
mov dword [rdi + 0x2c4], ebx
jmp 0x14001bbbb
or r15, 0xffffffffffffffff
nop word [rax + rax]
inc r15
cmp word [rdx + r15*2], 0
jne 0x14001b710
mov qword [rbp - 0x80], r15
lea r8, [r15*2 + 2]
mov rcx, rsi
call fcn.1400a7030
mov dword [rdi + 0x2c4], ebx
cmp word [rsi], 0x7d
jne 0x14001b88c
mov ecx, dword [rdi + 0x78]
test ecx, ecx
je 0x14001b88c
mov rax, qword [0x1400fda58]
cmp qword [rax + 0xd8], 0
jne 0x14001b88c
cmp qword [rdi + 0x2b0], 0
je 0x14001b791
mov qword [rdi + 0x2b0], r14
mov rcx, qword [rdi + 0x2b8]
test rcx, rcx
je 0x14001b83c
call fcn.1400ab68c
mov qword [rdi + 0x2b8], r14
jmp 0x14001b83c
lea eax, [rcx - 1]
mov dword [rdi + 0x78], eax
cdqe
mov rdi, qword [rdi + rax*8 + 0x80]
mov rbx, qword [rdi + 0x20]
sub rbx, 1
js 0x14001b800
mov rsi, rbx
shl rsi, 5
mov rcx, qword [rdi + 0x18]
cmp dword [rsi + rcx + 0x18], 1
jne 0x14001b7f1
cmp rbx, qword [rdi + 0x38]
jl 0x14001b7cd
mov rcx, qword [rsi + rcx + 0x10]
call fcn.1400ab68c
dec qword [rdi + 0x20]
mov r8, qword [rdi + 0x20]
cmp rbx, r8
jge 0x14001b7f1
mov rcx, qword [rdi + 0x18]
add rcx, rsi
sub r8, rbx
shl r8, 5
lea rdx, [rcx + 0x20]
call fcn.1400a7030
sub rsi, 0x20
sub rbx, 1
jns 0x14001b7b2
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rbp + 0x1c410]
movsxd rax, dword [rdi + 0x78]
mov rcx, qword [rdi + rax*8 + 0x80]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rbx, [rdi + 0xa8]
mov edx, 0x2e
mov rcx, rbx
call fcn.1400a76fc
test rax, rax
je 0x14001b838
mov word [rax], r14w
jmp 0x14001b83c
mov word [rbx], r14w
add rsi, 2
mov qword [rsp + 0x58], rsi
movzx eax, word [rsi]
cmp ax, 0x20
je 0x14001b854
cmp ax, 9
jne 0x14001b85a
add rsi, 2
jmp 0x14001b845
mov qword [rsp + 0x58], rsi
mov qword [rbp - 0x68], rsi
cmp word [rsi], 0
je 0x14001bbbb
or r15, 0xffffffffffffffff
inc r15
cmp word [rsi + r15*2], 0
jne 0x14001b871
mov qword [rbp - 0x80], r15
mov qword [rdi + 0x698], r14
jmp 0x14001b580
cmp qword [rdi + 0x2b0], 0
je 0x14001b987
mov rax, qword [0x1400fda58]
cmp qword [rax + 0xd8], 0
jne 0x14001b987
mov r8d, 3
lea rdx, [0x1400e2ad8]
mov rcx, rsi
call fcn.1400ab4d8
test eax, eax
je 0x14001b8e5
mov r8d, 3
lea rdx, [0x1400e2ae0]
mov rcx, rsi
call fcn.1400ab4d8
test eax, eax
jne 0x14001cab4
lea rbx, [rsi + 6]
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001b8ff
cmp ax, 9
jne 0x14001b905
add rbx, 2
jmp 0x14001b8f0
movzx eax, word [rbx]
test ax, ax
je 0x14001b922
cmp ax, 0x7b
jne 0x14001cab4
cmp word [rbx + 2], 0
jne 0x14001cab4
mov rcx, qword [rdi + 0x2b8]
lea rdx, [rbp + 0x4390]
sub rdx, rcx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001b940
mov edx, 0x2e
lea rcx, [rbp + 0x4390]
call fcn.1400a7468
movzx ecx, word [rsi]
mov word [rax + 2], cx
mov eax, dword [rdi + 0x2c4]
mov dword [rbp - 0x74], eax
cmp word [rbx], 0x7b
sete byte [rsp + 0x41]
xor r15d, r15d
mov dword [rsp + 0x64], r15d
jmp 0x14001bbbe
lea rdx, [rsp + 0x41]
mov rcx, rsi
call fcn.14001a860
test al, al
je 0x14001b9d6
mov rcx, rsi
lea rdx, [rbp + 0x4390]
sub rdx, rsi
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001b9b0
mov eax, dword [rdi + 0x2c4]
mov dword [rbp - 0x74], eax
xor r15d, r15d
mov dword [rsp + 0x64], r15d
jmp 0x14001bbbe
mov rax, qword [0x1400fda58]
cmp qword [rax + 0xd8], 0
jne 0x14001bd3c
lea rdx, [rsp + 0x41]
mov rcx, rsi
call fcn.14001a9a0
test rax, rax
je 0x14001ba33
lea rdx, [rbp + 0x4390]
sub rdx, rax
nop word [rax + rax]
movzx ecx, word [rax]
mov word [rax + rdx], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14001ba10
mov eax, dword [rdi + 0x2c4]
mov dword [rbp - 0x74], eax
mov dword [rsp + 0x64], r12d
jmp 0x14001bbbb
cmp dword [rdi + 0x78], 0
je 0x14001bd3c
mov rbx, rsi
movzx ecx, word [rbx]
test ecx, 0xffffff80
jne 0x14001ba59
mov edx, 0x107
call fcn.1400abaa4
test eax, eax
jne 0x14001ba6e
movzx eax, word [rbx]
cmp ax, 0x5f
je 0x14001ba6e
cmp ax, 0x7f
ja 0x14001ba6e
cmp ax, 0x2e
jne 0x14001ba74
add rbx, 2
jmp 0x14001ba40
cmp rbx, rsi
jbe 0x14001bb43
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001ba8f
cmp ax, 9
jne 0x14001ba95
add rbx, 2
jmp 0x14001ba80
movzx eax, word [rbx]
cmp ax, 0x3a
jne 0x14001bac0
cmp word [rbx + 2], 0x3d
jne 0x14001bac0
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call fcn.140024910
test eax, eax
je 0x14001cac6
jmp 0x14001bbbb
test ax, ax
je 0x14001bad8
cmp ax, 0x5b
je 0x14001bad8
cmp ax, 0x7b
jne 0x14001bb43
cmp word [rbx + 2], 0
jne 0x14001bb43
or rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], 0
jne 0x14001bae0
cmp word [rsi + rdx*2 - 2], 0x7b
sete al
mov byte [rsp + 0x41], al
test al, al
je 0x14001bb06
dec rdx
mov rcx, rsi
call fcn.140016700
mov rcx, rsi
lea rdx, [rbp + 0x4390]
sub rdx, rsi
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001bb20
mov eax, dword [rdi + 0x2c4]
mov dword [rbp - 0x74], eax
mov dword [rsp + 0x64], 2
jmp 0x14001bbbb
mov r8d, 6
lea rdx, [0x1400cd610]
mov rcx, rsi
call fcn.1400ab4d8
test eax, eax
jne 0x14001bb78
movzx eax, word [rsi + 0xc]
cmp ax, 0x20
je 0x14001bb6c
cmp ax, 9
jne 0x14001bb78
lea rdx, [rsi + 0xe]
mov r8b, 1
jmp 0x14001baab
cmp word [rsi], 0x23
jne 0x14001cace
mov ebx, dword [rdi + 0x2c4]
mov rdx, rsi
mov rcx, rdi
call fcn.14001d120
test eax, eax
je 0x14001cac6
cmp eax, 3
jne 0x14001cace
mov r14d, dword [rsp + 0x44]
mov dword [rdi + 0x2c0], r14d
mov dword [rdi + 0x2c4], ebx
xor r15d, r15d
jmp 0x14001bbc3
xor r15d, r15d
mov r14d, dword [rsp + 0x44]
movzx ebx, byte [rbp + 0x1c428]
test bl, bl
je 0x14001ca22
inc r13d
mov dword [rsp + 0x74], r13d
mov ecx, r13d
sub ecx, 1
je 0x14001bd1f
sub ecx, 1
je 0x14001bbff
sub ecx, 1
je 0x14001c9a2
cmp ecx, 7
jne 0x14001ca1d
jmp 0x14001bc62
mov eax, dword [0x1400e0518]
mov dword [rsi], eax
movzx eax, word [0x1400e051c]
mov word [rsi + 4], ax
cmp byte [rsp + 0x49], 0
setne dl
add dl, 0xc1
mov qword [rsp + 0x20], r15
mov r9d, r12d
lea r8, [rbp - 0x68]
mov rcx, rdi
call fcn.1400212e0
cmp byte [rsp + 0x50], 0
je 0x14001bc62
lea r8, [rbp + 0x80]
lea rdx, [0x1400e2dc0]
mov rcx, rsi
call fcn.140004b70
movsxd r15, eax
mov eax, 9
mov r13d, eax
mov dword [rsp + 0x74], eax
jmp 0x14001bd38
lea r8, [0x1400ccf5c]
cmp bl, 0x12
je 0x14001bc75
lea eax, [rbx + 0x5c]
cmp al, 1
ja 0x14001bc9c
movzx ecx, byte [rsp + 0x4f]
sub ecx, 0x11
je 0x14001bc95
sub ecx, 0x91
je 0x14001bc95
cmp ecx, 1
jne 0x14001bc9c
lea r8, [0x1400e2e10]
jmp 0x14001bc9c
lea r8, [0x1400e2df8]
mov qword [rdi + 0x698], r15
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [0x1400e2e28]
mov rcx, rsi
call fcn.140004b70
mov qword [rsp + 0x20], r15
mov r9d, r12d
lea r8, [rbp - 0x68]
mov dl, 0x41
mov rcx, rdi
call fcn.1400212e0
test eax, eax
je 0x14001cae0
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov dl, 0x67
mov rcx, rdi
call fcn.1400212e0
mov qword [rdi + 0x698], r15
lea r8, [rbp + 0xc0]
lea rdx, [0x1400e2e58]
mov rcx, rsi
call fcn.140004b70
mov r13d, 2
mov dword [rsp + 0x74], r13d
jmp 0x14001bd35
lea r8, [rbp + 0xc0]
lea rdx, [0x1400e2db0]
mov rcx, rsi
call fcn.140004b70
movsxd r15, eax
mov qword [rbp - 0x80], r15
xor ebx, ebx
mov r12d, ebx
mov r14d, ebx
cmp word [rsi], 0x3a
jne 0x14001bf08
lea rax, [rsi + 2]
movzx ecx, word [rax]
test cx, cx
je 0x14001bf08
mov r8, rax
mov qword [rbp - 0x48], rax
cmp cx, 0x3a
je 0x14001bd90
lea edx, [rbx + 0x3a]
mov rcx, rax
call fcn.1400a7468
mov r12, rax
test rax, rax
jne 0x14001bd86
mov r12d, ebx
jmp 0x14001bf08
add r12, 2
mov r8, qword [rbp - 0x48]
jmp 0x14001bda0
lea rax, [rsi + 4]
cmp word [rax], bx
je 0x14001bf08
mov r12, rax
mov qword [rbp - 0x50], r12
test r12, r12
je 0x14001bf08
movzx eax, byte [0x140101f7c]
mov byte [rsp + 0x48], al
mov rdi, r8
cmp r8, r12
jae 0x14001bdf9
movzx ebx, word [rdi]
test ebx, 0xffffff80
jne 0x14001bdde
mov edx, 2
mov ecx, ebx
call fcn.1400abaa4
test eax, eax
je 0x14001bdde
and ebx, 0xffffffdf
cmp bx, 0x58
je 0x14001bdef
add rdi, 2
cmp rdi, r12
jb 0x14001bdc0
jmp 0x14001bdf9
cmp word [rdi + 2], 0x30
setne byte [rsp + 0x48]
mov rdi, r12
movzx r13d, byte [rsp + 0x48]
lea rsi, [0x140000000]
mov r12d, 9
lea r15d, [r12 - 2]
movzx eax, word [rdi]
test ax, ax
je 0x14001bee8
cmp ax, word [0x1400ff3cc]
je 0x14001be35
cmp ax, 0x3a
je 0x14001be35
add rdi, 2
jmp 0x14001be14
movzx eax, word [rdi]
test ax, ax
je 0x14001bee8
lea rbx, [rdi + 2]
cmp ax, 0x3a
jne 0x14001be65
cmp word [rbx], ax
jne 0x14001bedf
mov r14, rdi
mov rdi, rbx
test r13b, r13b
jne 0x14001bee8
jmp 0x14001bedf
movzx eax, word [rbx]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x14001be7c.99
cdqe
mov ecx, dword [rsi + rax*4 + 0x1cd18]
add rcx, rsi
jmp rcx
mov word [rbx], r15w
jmp case.0x14001be7c.99
mov eax, 8
jmp 0x14001beab
mov eax, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
jmp 0x14001beab
mov eax, 0xa
jmp 0x14001beab
mov eax, SafeArrayGetElemsize
jmp 0x14001beab
mov word [rbx], r12w
jmp case.0x14001be7c.99
mov eax, reloc.WSOCK32.dll_inet_ntoa
mov word [rbx], ax
or r8, 0xffffffffffffffff
lea r8, [r8 + 1]
cmp word [rbx + r8*2], 0
jne 0x14001beb2
lea r8, [r8*2 + 2]
mov rdx, rbx
mov rcx, rdi
call fcn.1400a7030
cmp word [rdi], 0x3a
jne 0x14001bedf
cmp word [rbx], 0x3a
cmove rdi, rbx
add rdi, 2
jmp 0x14001be14
test r14, r14
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp - 0x50]
mov r13d, dword [rsp + 0x74]
mov rsi, qword [rsp + 0x58]
jne 0x14001bfa5
xor eax, eax
mov r12d, eax
lea rdx, [0x1400e296c]
mov rcx, rsi
call fcn.1400a74fc
mov r14, rax
test rax, rax
je 0x14001c775
cmp rax, rsi
jne 0x14001bf33
cmp word [rax + 4], 0x3a
jne 0x14001bf33
add r14, 2
mov rbx, r14
cmp r14, rsi
jbe 0x14001bf58
nop dword [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001bf4f
cmp ax, 9
jne 0x14001bf58
sub rbx, 2
cmp rbx, rsi
ja 0x14001bf40
movzx edi, word [rbx]
xor eax, eax
mov word [rbx], ax
mov rcx, rsi
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14001bf72
cmp ax, 9
jne 0x14001bf78
add rcx, 2
jmp 0x14001bf63
xor r8d, r8d
xor edx, edx
call fcn.14000d3c0
mov dword [rbp - 0x5c], eax
test eax, eax
je 0x14001bf94
cmp eax, 4
je 0x14001cae8
jmp 0x14001bf99
xor eax, eax
mov r14d, eax
mov word [rbx], di
test r14, r14
je 0x14001c775
cmp r14, rsi
jbe 0x14001c775
mov rax, qword [0x1400fda58]
cmp qword [rax + 0xd8], 0
jne 0x14001cb4c
mov rdi, qword [rbp + 0x1c410]
mov rax, qword [rdi + 8]
test rax, rax
je 0x14001bfdc
cmp byte [rax], 0x1a
je 0x14001caef
xor r15d, r15d
mov word [r14], r15w
add r14, 4
test r12, r12
jne 0x14001c4e1
cmp word [r14], r15w
je 0x14001c03f
mov rdx, r14
nop dword [rax]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x14001c00f
cmp ax, 9
jne 0x14001c015
add rdx, 2
jmp 0x14001c000
mov rax, rdx
sub rax, r14
sar rax, 1
je 0x14001c03f
or r8, 0xffffffffffffffff
lea r8, [r8 + 1]
cmp word [rdx + r8*2], r15w
jne 0x14001c024
lea r8, [r8*2 + 2]
mov rcx, r14
call fcn.1400a7030
mov rsi, r14
cmp word [r14], r15w
je 0x14001c4dc
movzx eax, word [r14 + 2]
test ax, ax
je 0x14001c199
xor dl, dl
xor r8b, r8b
movzx r13d, byte [rbp + 0x1c418]
mov edi, dword [rbp - 0x78]
lea r9, [0x140000000]
cmp ax, 0x20
je case.0x14001c0a0.40
movzx eax, word [rsi]
add eax, 0xffffffdf
cmp eax, 0x5d
ja case.0x14001c0a0.40
cdqe
movzx eax, byte [r9 + rax + 0x1cd90]
mov ecx, dword [r9 + rax*4 + 0x1cd70]
add rcx, r9
jmp rcx
mov r8b, 1
jmp case.0x14001c0a0.35
mov dl, 1
jmp case.0x14001c0a0.35
test r8b, r8b
jne 0x14001c0c2
test dl, dl
jne 0x14001c0c6
or edi, 1
jmp case.0x14001c0a0.35
test dl, dl
je 0x14001c0cc
or r13b, 4
xor dl, dl
test r8b, r8b
je case.0x14001c0a0.35
or r13b, 8
jmp 0x14001c13e
test r8b, r8b
jne 0x14001c0e5
test dl, dl
jne 0x14001c0e9
or edi, 2
jmp case.0x14001c0a0.35
test dl, dl
je 0x14001c0ef
or r13b, 1
xor dl, dl
test r8b, r8b
je case.0x14001c0a0.35
or r13b, 2
jmp 0x14001c13e
test r8b, r8b
jne 0x14001c108
test dl, dl
jne 0x14001c10c
or edi, 4
jmp case.0x14001c0a0.35
test dl, dl
je 0x14001c112
or r13b, 0x10
xor dl, dl
test r8b, r8b
je case.0x14001c0a0.35
or r13b, 0x20
jmp 0x14001c13e
test r8b, r8b
jne 0x14001c12b
test dl, dl
jne 0x14001c12f
or edi, 8
jmp case.0x14001c0a0.35
test dl, dl
je 0x14001c135
or r13b, 0x40
xor dl, dl
test r8b, r8b
je case.0x14001c0a0.35
or r13b, 0x80
xor r8b, r8b
add rsi, 2
movzx eax, word [rsi + 2]
test ax, ax
jne 0x14001c071
mov dword [rbp - 0x78], edi
mov byte [rbp + 0x1c418], r13b
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400154c0
movzx ebx, al
mov byte [rbp + 0x1c428], al
test al, al
mov r13d, dword [rsp + 0x74]
mov rdi, qword [rbp + 0x1c410]
je 0x14001c4d5
movzx r13d, al
jmp 0x14001c1a3
mov r13b, 0xff
mov byte [rbp + 0x1c428], r13b
mov r15, qword [rsp + 0x58]
mov rbx, r15
cmp word [r15], 0
je 0x14001c2de
xor dl, dl
xor r8b, r8b
lea r9, [r15 + 2]
movzx eax, word [r9]
test ax, ax
je 0x14001c2de
movzx r15d, byte [rsp + 0x40]
mov r13d, dword [rbp - 0x70]
lea r10, [0x140000000]
nop dword [rax]
cmp ax, 0x20
je case.0x14001c20f.40
movzx eax, word [rbx]
add eax, 0xffffffdf
cmp eax, 0x5d
ja case.0x14001c20f.40
cdqe
movzx eax, byte [r10 + rax + 0x1ce10]
mov ecx, dword [r10 + rax*4 + 0x1cdf0]
add rcx, r10
jmp rcx
mov r8b, 1
jmp case.0x14001c20f.35
mov dl, 1
jmp case.0x14001c20f.35
test r8b, r8b
jne 0x14001c232
test dl, dl
jne 0x14001c236
or r13d, 1
jmp case.0x14001c20f.35
test dl, dl
je 0x14001c23c
or r15b, 4
xor dl, dl
test r8b, r8b
je case.0x14001c20f.35
or r15b, 8
jmp 0x14001c2b1
test r8b, r8b
jne 0x14001c256
test dl, dl
jne 0x14001c25a
or r13d, 2
jmp case.0x14001c20f.35
test dl, dl
je 0x14001c260
or r15b, 1
xor dl, dl
test r8b, r8b
je case.0x14001c20f.35
or r15b, 2
jmp 0x14001c2b1
test r8b, r8b
jne 0x14001c27a
test dl, dl
jne 0x14001c27e
or r13d, 4
jmp case.0x14001c20f.35
test dl, dl
je 0x14001c284
or r15b, 0x10
xor dl, dl
test r8b, r8b
je case.0x14001c20f.35
or r15b, 0x20
jmp 0x14001c2b1
test r8b, r8b
jne 0x14001c29e
test dl, dl
jne 0x14001c2a2
or r13d, 8
jmp case.0x14001c20f.35
test dl, dl
je 0x14001c2a8
or r15b, 0x40
xor dl, dl
test r8b, r8b
je case.0x14001c20f.35
or r15b, 0x80
xor r8b, r8b
mov rbx, r9
add r9, 2
movzx eax, word [r9]
test ax, ax
jne 0x14001c1e0
mov dword [rbp - 0x70], r13d
mov byte [rsp + 0x40], r15b
mov r15, qword [rsp + 0x58]
movzx r13d, byte [rbp + 0x1c428]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400154c0
mov byte [rsp + 0x4f], al
lea rdx, [0x1400e0a10]
mov rcx, rbx
call fcn.1400a74fc
test rax, rax
setne dil
movzx eax, byte [rsp + 0x4f]
lea ecx, [rax - 1]
cmp cl, 5
ja 0x14001c323
cmp al, 3
jne 0x14001c329
add al, 0x66
cmp al, 5
ja 0x14001c32d
mov cl, 1
jmp 0x14001c32f
xor cl, cl
lea eax, [r13 - 1]
cmp al, 5
ja 0x14001c33d
cmp r13b, 3
jne 0x14001c345
lea eax, [r13 + 0x66]
cmp al, 5
ja 0x14001c349
mov al, 1
jmp 0x14001c34b
xor al, al
mov byte [rsp + 0x49], al
test cl, cl
jne 0x14001c35c
test al, al
mov byte [rsp + 0x50], 1
jne 0x14001c361
mov byte [rsp + 0x50], 0
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x14001c365
cmp rax, 1
jne 0x14001c389
movzx ecx, word [rbx]
call qword [sym.imp.USER32.dll_IsCharUpperW]
test eax, eax
lea rax, [0x1400e2be0]
jne 0x14001c390
lea rax, [0x1400ccf5c]
lea r9, [0x1400e27e4]
test dil, dil
lea rcx, [0x1400ccf5c]
cmovne r9, rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
lea r8, [0x1400e2be8]
mov edi, SafeArrayAllocDescriptor
mov edx, edi
lea rcx, [rbp + 0xc0]
call fcn.1400890d0
lea r8d, [rdi - 1]
mov rdx, rsi
lea rcx, [rbp + 0x80]
call fcn.1400b1fb4
xor r15d, r15d
mov word [rbp + 0xbe], r15w
lea r8d, [rdi - 0x19]
mov rdx, r14
lea rcx, [rbp - 0x28]
call fcn.1400b1fb4
mov word [rbp - 0x1a], r15w
sub rsi, r14
sar rsi, 1
cmp rsi, 8
jae 0x14001c40e
mov word [rbp + rsi*2 - 0x28], r15w
mov r13d, r15d
mov dword [rsp + 0x74], r15d
cmp word [rbp - 0x28], r15w
jne 0x14001c95c
movzx ebx, byte [rbp + 0x1c428]
cmp bl, 0xd
jne 0x14001c45f
lea rdx, [0x1400cddb8]
lea rcx, [rbp + 0x80]
call fcn.1400a8ef0
test eax, eax
je 0x14001c4bf
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rbp + 0x1c410]
mov r12d, 1
jmp 0x14001bbd2
cmp bl, 0x11
je 0x14001c472
cmp bl, 0x13
je 0x14001c4bf
cmp bl, 0x5f
jne 0x14001c95c
mov r8, r14
movzx edx, word [r14]
test dx, dx
je 0x14001c95c
lea rcx, [0x1400e0f38]
mov eax, edi
nop dword [rax + rax]
cmp dx, ax
je 0x14001c4bf
add rcx, 2
movzx eax, word [rcx]
test ax, ax
jne 0x14001c490
add r8, 2
movzx edx, word [r8]
test dx, dx
jne 0x14001c482
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rbp + 0x1c410]
jmp 0x14001c765
xor bl, bl
mov byte [rbp + 0x1c428], bl
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rbp + 0x1c410]
jmp 0x14001c4e8
mov rsi, qword [rsp + 0x58]
jmp 0x14001c4e8
mov rsi, qword [rsp + 0x58]
movzx ebx, byte [rbp + 0x1c428]
cmp byte [rdi + 0x2c8], 0
je 0x14001c51f
mov byte [rdi + 0x2c8], 0
mov qword [rsp + 0x20], r15
mov r9d, 0xff
xor r8d, r8d
mov dl, 0x67
mov rcx, rdi
call fcn.1400212e0
test eax, eax
je 0x14001cae0
mov qword [rdi + 0x698], r15
mov r8b, 1
mov rdx, rsi
mov rcx, rdi
call fcn.14001e4d0
test eax, eax
je 0x14001cae0
test r12, r12
je 0x14001c5fa
cmp word [r12], 0
je 0x14001cb08
mov rcx, qword [rdi + 0x28]
mov rax, r14
movzx r15d, byte [rsp + 0x48]
test r15b, r15b
lea rdx, [0x1400ccf5c]
cmovne rax, rdx
mov byte [rsp + 0x30], 0
movzx edx, byte [rsp + 0x51]
mov byte [rsp + 0x28], dl
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, qword [rbp - 0x48]
mov rdx, rcx
mov rcx, qword [rcx + 8]
call fcn.14000e630
test eax, eax
je 0x14001cae8
cmp word [r14], 0
je 0x14001c96d
test r15b, r15b
je 0x14001c5d5
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.14001e5f0
test eax, eax
je 0x14001cae0
jmp 0x14001c5d8
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov dl, 0x67
mov rcx, rdi
call fcn.1400212e0
test eax, eax
je 0x14001cae0
jmp 0x14001c765
movzx ebx, r15w
cmp word [r14], 0
je 0x14001c661
xor edx, edx
mov rcx, r14
call fcn.14000afa0
movzx ebx, ax
test ax, ax
jne 0x14001c644
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.14001e5f0
test eax, eax
je 0x14001cae0
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov dl, 0x67
mov rcx, rdi
call fcn.1400212e0
test eax, eax
je 0x14001cae0
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x52]
mov rcx, rsi
call fcn.14000ddc0
mov rdi, rax
test rax, rax
je 0x14001c6f6
test bx, bx
je 0x14001c690
mov word [rax + 6], bx
mov rdi, qword [rbp + 0x1c410]
jmp 0x14001c75e
mov rax, qword [rax + 0x28]
test rax, rax
je 0x14001c6b3
mov rcx, qword [0x140102cf8]
cmp qword [rax + 8], rcx
je 0x14001cb1a
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x14001c6a0
movzx r8d, byte [rsp + 0x52]
mov rbx, qword [rbp + 0x1c410]
mov rdx, qword [rbx + 0x28]
mov rcx, rdi
call fcn.14000d250
test rax, rax
je 0x14001cb3a
cmp byte [rsp + 0x60], 0
jne 0x14001c6e9
cmp byte [0x140101fe5], 0
je 0x14001c961
mov byte [rdi + 0x14], 1
mov rdi, qword [rbp + 0x1c410]
jmp 0x14001c75e
mov rdi, qword [rbp + 0x1c410]
mov rcx, qword [rdi + 0x28]
mov byte [rsp + 0x20], 0
movzx r9d, byte [rsp + 0x52]
mov r8, qword [rcx + 8]
movzx edx, bx
call fcn.14000cb50
test rax, rax
jne 0x14001c75e
cmp dword [rbp - 0x5c], 3
jne 0x14001cae0
mov r9, rsi
lea r8, [0x1400e2c80]
mov edx, 0x204
lea rcx, [rbp + 0x100]
call fcn.1400890d0
mov qword [rsp + 0x20], r15
xorps xmm3, xmm3
xor r8d, r8d
mov edx, 0x10000
lea rcx, [rbp + 0x100]
call fcn.14008e7d0
movzx ebx, byte [rbp + 0x1c428]
mov r12d, 1
mov r14d, dword [rsp + 0x44]
jmp 0x14001bbca
cmp word [rsi + r15*2 - 2], 0x3a
jne 0x14001c874
cmp r15, 1
je 0x14001cb5f
mov rcx, rsi
movzx eax, word [rsi]
test ax, ax
je 0x14001c7d6
movzx edx, word [0x1400ff3d4]
nop
cmp ax, 0x20
je 0x14001c874
cmp ax, 9
je 0x14001c874
cmp ax, dx
je 0x14001c874
cmp ax, word [0x1400ff3cc]
je 0x14001c874
add rcx, 2
movzx eax, word [rcx]
test ax, ax
jne 0x14001c7a0
cmp word [rsi + r15*2 - 4], 0x3a
jne 0x14001c7e9
cmp r15, 2
ja 0x14001c874
dec r15
xor eax, eax
mov word [rsi + r15*2], ax
cmp word [rsi], ax
je 0x14001c84f
cmp r15, 0xffffffffffffffff
jne 0x14001c80b
or r15, r15
inc r15
cmp word [rsi + r15*2], ax
jne 0x14001c801
lea rax, [r15 - 1]
lea rax, [rsi + rax*2]
movzx ecx, word [rax]
cmp cx, 0x20
je 0x14001c822
cmp cx, 9
jne 0x14001c82d
cmp rax, rsi
je 0x14001c837
sub rax, 2
jmp 0x14001c813
xor r15d, r15d
mov word [rax + 2], r15w
jmp 0x14001c852
movzx ecx, word [rax]
cmp cx, 0x20
je 0x14001c846
cmp cx, 9
jne 0x14001c84f
xor r15d, r15d
mov word [rax], r15w
jmp 0x14001c852
xor r15d, r15d
xor r8d, r8d
mov rdx, rsi
mov rdi, qword [rbp + 0x1c410]
mov rcx, rdi
call fcn.14001e4d0
test eax, eax
je 0x14001cae0
jmp 0x14001c75e
mov rdi, qword [rbp + 0x1c410]
cmp word [rsi], 0x23
jne 0x14001c8bd
mov ebx, dword [rdi + 0x2c4]
mov rdx, rsi
mov rcx, rdi
call fcn.14001d120
test eax, eax
je 0x14001cae8
cmp eax, 3
jne 0x14001c8bd
mov r14d, dword [rsp + 0x44]
mov dword [rdi + 0x2c0], r14d
mov dword [rdi + 0x2c4], ebx
lea r12d, [rax - 2]
xor r15d, r15d
jmp 0x14001bbc3
movzx ecx, word [rsi]
lea eax, [rcx - 0x7b]
mov edx, 0xfffd
test dx, ax
je 0x14001c902
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call fcn.14001e5f0
test eax, eax
je 0x14001cae0
jmp 0x14001c75e
cmp cx, 0x7b
setne dl
add dl, 0x73
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call fcn.1400212e0
test eax, eax
je 0x14001cae0
add rsi, 2
mov qword [rsp + 0x58], rsi
movzx eax, word [rsi]
cmp ax, 0x20
je 0x14001c942
cmp ax, 9
jne 0x14001c948
add rsi, 2
jmp 0x14001c933
mov qword [rsp + 0x58], rsi
mov qword [rbp - 0x68], rsi
cmp word [rsi], r15w
jne 0x14001c975
jmp 0x14001c75e
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rbp + 0x1c410]
jmp 0x14001c75e
xor r15d, r15d
jmp 0x14001c75e
or r15, 0xffffffffffffffff
nop dword [rax]
inc r15
cmp word [rsi + r15*2], 0
jne 0x14001c980
mov qword [rbp - 0x80], r15
xor r14d, r14d
mov qword [rdi + 0x698], r14
lea r12d, [r14 + 1]
jmp 0x14001b580
mov eax, dword [0x1400e0518]
mov dword [rsi], eax
movzx eax, word [0x1400e051c]
mov word [rsi + 4], ax
cmp byte [rsp + 0x49], 0
setne dl
add dl, 0xc1
mov qword [rsp + 0x20], r15
mov r9d, r12d
lea r8, [rbp - 0x68]
mov rcx, rdi
call fcn.1400212e0
lea r8, [rbp + 0x80]
lea rdx, [0x1400e2e68]
mov rcx, rsi
call fcn.140004b70
mov qword [rsp + 0x20], r15
mov r9d, r12d
lea r8, [rbp - 0x68]
mov dl, 0x41
mov rcx, rdi
call fcn.1400212e0
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov dl, 0x67
mov rcx, rdi
call fcn.1400212e0
xor al, al
mov byte [rbp + 0x1c428], al
mov r14d, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x68]
mov rsi, rcx
mov qword [rsp + 0x58], rcx
mov qword [rbp - 0x68], rcx
mov r15, qword [rbp - 0x40]
mov qword [rbp - 0x80], r15
lea rax, [rbp + 0x143b0]
lea r8, [rbp + 0xc3a0]
lea rdx, [rbp + 0xc3a0]
cmp rcx, rdx
cmovne rax, r8
mov rbx, rax
mov qword [rsp + 0x68], rax
jmp 0x14001acf0
mov r8, rbx
lea rdx, [0x1400e2988]
mov rcx, qword [rbp + 0x1c410]
jmp 0x14001cbd9
lea rdx, [0x1400e2a58]
lea rax, [0x1400e2a70]
cmp qword [rdi + 0x2b0], 0
cmovne rax, rdx
mov rdx, rax
jmp 0x14001cbcf
lea rdx, [0x1400e2a58]
jmp 0x14001cbcf
lea rdx, [0x1400e2a10]
jmp 0x14001cbd2
mov r8, rsi
lea rdx, [0x1400e2af0]
mov rcx, rdi
jmp 0x14001cbd9
mov r12d, r14d
jmp 0x14001cbe1
mov r8, rsi
lea rdx, [0x1400e2a70]
mov rcx, rdi
jmp 0x14001cbd9
mov r12d, r15d
jmp 0x14001cbe1
xor eax, eax
jmp 0x14001cbde
mov qword [rdi + 0x698], rax
mov r8, rsi
lea rdx, [0x1400e2bb0]
mov rcx, rdi
jmp 0x14001cbd9
mov r8, rsi
lea rdx, [0x1400e2c00]
mov rcx, rdi
jmp 0x14001cbd9
mov rbx, qword [rbp + 0x1c410]
mov qword [rbx + 0x698], r15
mov r8, rsi
lea rdx, [0x1400e2c58]
mov rcx, rbx
jmp 0x14001cbd9
mov r8, rsi
lea rdx, [0x1400e08d0]
mov rcx, rbx
jmp 0x14001cbd9
mov r8, rsi
lea rdx, [0x1400e2b40]
mov rcx, qword [rbp + 0x1c410]
jmp 0x14001cbd9
mov r8, rsi
lea rdx, [0x1400e2d50]
mov rcx, qword [rbp + 0x1c410]
jmp 0x14001cbd9
mov r8, rdi
lea rdx, [0x1400e2988]
mov rcx, qword [rbp + 0x1c410]
jmp 0x14001cbd9
mov r8, rsi
lea rdx, [0x1400e29f8]
mov rcx, qword [rbp + 0x1c410]
jmp 0x14001cbd9
cmp word [rbp + 0x4390], 0
je 0x14001cc21
mov ebx, dword [rdi + 0x2c4]
mov eax, dword [rbp - 0x74]
mov dword [rdi + 0x2c4], eax
cmp dword [rsp + 0x64], 0
je 0x14001cbe5
lea rax, [0x1400e2e88]
lea rdx, [0x1400e2a58]
cmp byte [rsp + 0x41], 0
cmovne rdx, rax
mov rcx, rdi
lea r8, [rbp + 0x4390]
call fcn.140036f10
mov r12d, eax
xor esi, esi
jmp 0x14001cc4f
xor esi, esi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8b, 3
lea rdx, [rbp + 0x4390]
mov rcx, rdi
call fcn.14001e5f0
test eax, eax
jne 0x14001cc19
mov r12d, esi
jmp 0x14001cc4f
mov dword [rdi + 0x2c4], ebx
jmp 0x14001cc23
xor esi, esi
cmp dword [rdi + 0x78], 0
je 0x14001cc49
test r14d, r14d
jne 0x14001cc49
lea r8, [rdi + 0xa8]
lea rdx, [0x1400e2e88]
mov rcx, rdi
call fcn.140036f10
mov r12d, eax
jmp 0x14001cc4f
inc dword [rdi + 0x2c4]
lea rax, vtable.TextMem.0
mov qword [rbp - 0x10], rax
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14001cc72
cmp byte [rbp + 0x3c], 0
je 0x14001cc6e
call fcn.1400ab68c
mov qword [rbp + 0x30], rsi
lea rax, vtable.TextStream.0
mov qword [rbp - 0x10], rax
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x14001cc8b
call fcn.1400ab68c
mov eax, r12d
jmp 0x14001ccab
mov qword [rsp + 0x20], r12
xorps xmm3, xmm3
mov r8, rdi
xor edx, edx
lea rcx, str.Could_not_extract_script_from_EXE.
call fcn.14008e7d0
xor eax, eax
add rsp, 0x1c4c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret