Function at 0x140030f40
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x688
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x5f0], xmm6
mov qword [rbp + 0x5e8], 0xfffffffffffffffe
mov rbx, rdx
mov qword [rbp + 0x4e8], rcx
mov rsi, qword [rdx + 0x60]
movzx eax, byte [rdx + 0x68]
test al, al
mov qword [rbp + 0x5c0], rdx
jne 0x140030fa3
test rsi, rsi
jne 0x140030fa3
mov qword [rbp + 0x3e8], 0
xor r12d, r12d
jmp 0x140031e1a
mov qword [rbp + 0x478], 0
mov qword [rbp + 0x488], 0
test al, al
jne 0x1400312aa
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x14003481e
mov qword [rbp + 0x5d8], rsi
lea r14, [rbp - 0x18]
mov qword [rbp + 0x5d0], rax
mov r15, rax
nop word cs:[rax + rax]
cmp word [r15], 0
je 0x14003128f
mov rsi, r15
mov rcx, 0xfffffffffffffffe
xor r13d, r13d
nop dword [rax + rax]
mov r12, r13
mov rax, rcx
inc r13
cmp word [r15], 0
lea r15, [r15 + 2]
lea rcx, [rcx + 2]
jne 0x140031010
cmp r12, 1
je 0x140030ff0
test r12, r12
je 0x140034766
mov rdi, 0xfffffffffffffffc
xor ebx, ebx
cmp word [rsi + rbx*2 + 2], 0x3d
je 0x140031060
inc rbx
add rdi, 0xfffffffffffffffe
add rax, 0xfffffffffffffffe
jne 0x140031040
jmp 0x140030ff0
lea r8, [rbx + 1]
cmp rbx, r12
jae 0x14003477e
lea rcx, [rbp + 0x510]
mov rdx, rsi
call fcn.140025ce0
lea rcx, [rbx + 2]
cmp r12, rcx
jb 0x140034798
sub r13, rbx
add r13, 0xfffffffffffffffd
sub rsi, rdi
lea rcx, [rbp + 0x490]
mov rdx, rsi
mov r8, r13
call fcn.140025ce0
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x430], rax
movups xmm0, xmmword [rbp + 0x510]
movaps xmmword [rbp + 0x420], xmm0
movzx esi, byte [rbp + 0x528]
lea rcx, [rbp + 0x529]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rbp - 0x30], eax
mov dword [rbp - 0x2d], ecx
movups xmm0, xmmword [rbp + 0x490]
movups xmm1, xmmword [rbp + 0x4a0]
movups xmmword [r14 - 1], xmm1
movups xmmword [r14 - 0x11], xmm0
mov eax, dword [rbp - 0x30]
movzx ecx, word [rbp - 0x2c]
movzx edx, byte [rbp - 0x2a]
mov r8, qword [rbp - 0x29]
movzx r9d, byte [rbp - 0x21]
movups xmm0, xmmword [rbp - 0x20]
mov dword [rbp + 0x550], eax
mov word [rbp + 0x554], cx
mov byte [rbp + 0x556], dl
mov qword [rbp + 0x557], r8
mov byte [rbp + 0x55f], r9b
movaps xmmword [rbp + 0x560], xmm0
mov rax, qword [rbp - 0x11]
mov qword [rbp + 0x56f], rax
cmp sil, 2
je 0x14003128f
mov rax, qword [rbp + 0x430]
mov qword [rbp + 0x500], rax
movaps xmm0, xmmword [rbp + 0x420]
movaps xmmword [rbp + 0x4f0], xmm0
mov byte [rbp + 0x508], sil
mov eax, dword [rbp + 0x550]
mov ecx, dword [rbp + 0x553]
lea rdx, [rbp + 0x509]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
lea rdi, [rbp + 0x557]
movdqu xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x460], xmm1
movdqa xmmword [rbp + 0x450], xmm0
mov rax, qword [rbp + 0x4f0]
mov rcx, qword [rbp + 0x500]
add rcx, rax
mov qword [rbp + 0x490], rax
mov qword [rbp + 0x498], rcx
mov word [rbp + 0x4a0], 0
lea rbx, [rbp + 0x510]
mov rcx, rbx
lea r12, [rbp + 0x490]
mov rdx, r12
call fcn.140035a00
mov rax, qword [rbp + 0x430]
mov qword [r14 + 0x10], rax
movaps xmm0, xmmword [rbp + 0x420]
movups xmmword [r14], xmm0
mov byte [rbp], sil
mov eax, dword [rbp + 0x550]
mov ecx, dword [rbp + 0x553]
mov dword [r14 + 0x1c], ecx
mov dword [r14 + 0x19], eax
movups xmm0, xmmword [rbp + 0x510]
movaps xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp + 0x520]
mov qword [rbp - 0x20], rax
movdqu xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x4a0], xmm1
movdqa xmmword [rbp + 0x490], xmm0
mov byte [rbp + 0x5bf], 0
mov rcx, rbx
lea rdx, [rbp + 0x478]
lea r8, [rbp - 0x30]
mov r9, r12
call fcn.140035c40
cmp byte [rbp + 0x528], 2
je 0x140030ff0
cmp qword [rbp + 0x518], 0
je 0x140030ff0
mov r8, qword [rbp + 0x510]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140030ff0
mov rcx, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rbx, qword [rbp + 0x5c0]
mov rsi, qword [rbp + 0x5d8]
mov rax, qword [rbx + 0x50]
mov r8, qword [rbx + 0x58]
xor r9d, r9d
test rax, rax
setne r9b
cmove rsi, rax
xor r14d, r14d
jmp 0x1400312e0
xor eax, eax
mov r9, qword [rbp + 0x5d0]
mov r8, qword [rbp + 0x540]
test rsi, rsi
je 0x140031bef
test r9, r9
je 0x140031340
test r14, r14
jne 0x140031340
mov r9d, 1
test r8, r8
je 0x14003134a
mov rdx, r8
and rdx, 7
je 0x14003134f
mov rcx, r8
and rcx, 0xfffffffffffffff8
mov r14, rax
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rdx
jne 0x140031320
cmp r8, 8
jae 0x140031360
jmp 0x14003139e
test r9, r9
jne 0x1400313a3
jmp 0x1400346e9
mov r14, rax
jmp 0x14003139e
mov r14, rax
mov rcx, r8
cmp r8, 8
jb 0x14003139e
nop dword [rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140031360
xor r8d, r8d
xor eax, eax
movzx ecx, word [r14 + 0x3d2]
mov r13, r14
mov r15, r8
cmp r8, rcx
jb 0x1400313e8
nop word cs:[rax + rax]
mov rcx, qword [r13 + 0x160]
test rcx, rcx
je 0x1400345ba
movzx r15d, word [r13 + 0x3d0]
inc rax
mov r13, rcx
cmp r15w, word [rcx + 0x3d2]
jae 0x1400313c0
test rax, rax
je 0x140031490
mov r14, qword [r13 + r15*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x14003147e
lea rdx, [rax - 2]
mov r8, rcx
and r8, 7
je 0x140031435
mov rcx, r8
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rcx
jne 0x140031420
not r8
add rax, r8
mov rcx, rax
cmp rdx, 7
jb 0x14003147e
nop dword [rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140031440
xor r8d, r8d
jmp 0x140031497
lea r8, [r15 + 1]
mov r14, r13
dec rsi
imul rax, r15, 0x38
lea r12, [rax + r13]
add r12, 0x168
shl r15, 5
cmp byte [r13 + r15 + 0x18], 2
jne 0x140031520
mov rdi, qword [rbp + 0x478]
mov eax, 0
test rdi, rdi
je 0x1400312e0
mov r13, r8
mov rbx, r9
mov r9, qword [r12]
mov rax, qword [r12 + 0x10]
mov r12, qword [rbp + 0x480]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x510]
mov rdx, rdi
mov r8, r12
call fcn.140037490
cmp qword [rbp + 0x510], 0
je 0x140031658
xor eax, eax
mov r9, rbx
mov r8, r13
jmp 0x1400312e0
mov rbx, qword [r12 + 0x18]
mov rdi, qword [r12 + 0x28]
test rdi, rdi
mov qword [rbp + 0x5d8], rsi
mov qword [rbp + 0x5d0], r9
mov qword [rbp + 0x540], r8
je 0x14003158e
js 0x14003475c
movzx eax, byte [0x1412e2ad0]
mov rax, qword [0x1412e2bb8]
test rax, rax
jne 0x140031573
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140034706
mov qword [0x1412e2bb8], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x140031593
jmp 0x140034706
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140042df0
movzx eax, byte [r12 + 0x30]
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], rdi
mov qword [rbp + 0x560], rdi
mov byte [rbp + 0x568], al
mov rdx, qword [r12]
mov rdi, qword [r12 + 0x10]
test rdi, rdi
je 0x14003164b
xor esi, esi
mov rax, rdi
shr rax, 0x3e
sete al
jne 0x140034741
lea r12, [rdi + rdi]
mov sil, al
add rsi, rsi
test r12, r12
je 0x1400317fc
movzx eax, byte [0x1412e2ad0]
mov rax, qword [0x1412e2bb8]
test rax, rax
mov qword [rbp + 0x5b0], rdx
jne 0x140031625
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140034731
mov qword [0x1412e2bb8], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
mov rdx, qword [rbp + 0x5b0]
test rbx, rbx
jne 0x140031808
jmp 0x140034731
mov ebx, 2
xor r12d, r12d
jmp 0x140031808
mov rax, qword [rbp + 0x518]
mov rdx, qword [rbp + 0x520]
mov rcx, qword [rbp + 0x528]
mov byte [rbp + 0x420], 0
test rdx, rdx
je 0x140031929
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x14003175e
lea r8, [rdx - 2]
mov r9, rcx
and r9, 7
je 0x1400316ce
mov rcx, r9
nop word cs:[rax + rax]
movzx r10d, word [rax + 0x3d2]
mov rax, qword [rax + r10*8 + 0x3d8]
dec rcx
jne 0x1400316b0
not r9
add rdx, r9
mov rcx, rdx
cmp r8, 7
jb 0x14003175e
nop dword [rax + rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400316e0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rbp + 0x450], rax
mov qword [rbp + 0x458], 0
mov qword [rbp + 0x460], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x450]
lea r8, [rbp + 0x420]
call fcn.140037630
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x4e0], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x4d0], xmm0
movdqu xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x20]
movups xmm2, xmmword [rbp - 0x10]
movups xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x4c0], xmm3
movaps xmmword [rbp + 0x4b0], xmm2
movaps xmmword [rbp + 0x4a0], xmm1
movdqa xmmword [rbp + 0x490], xmm0
mov rdx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x38]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x14003195e
mov rcx, rdx
jmp 0x140031999
mov rbx, rsi
test rbx, rbx
je 0x140034731
add r13, r15
mov rcx, rbx
mov r8, r12
call fcn.140042df0
movdqu xmm0, xmmword [rbp + 0x550]
movups xmm1, xmmword [rbp + 0x560]
lea rax, [rbp - 0x18]
movdqu xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], rdi
mov rbx, qword [r13]
mov rdi, qword [r13 + 0x10]
test rdi, rdi
je 0x140031894
js 0x14003474b
movzx eax, byte [0x1412e2ad0]
mov rax, qword [0x1412e2bb8]
test rax, rax
jne 0x140031879
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140034718
mov qword [0x1412e2bb8], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x140031899
jmp 0x140034718
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140042df0
movzx eax, byte [r13 + 0x18]
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], rdi
mov qword [rbp + 0x560], rdi
mov byte [rbp + 0x568], al
mov byte [rbp + 0x5cf], 0
lea rcx, [rbp + 0x490]
lea rdx, [rbp + 0x478]
lea r8, [rbp - 0x30]
lea r9, [rbp + 0x550]
call fcn.140035c40
cmp byte [rbp + 0x4a8], 2
mov rsi, qword [rbp + 0x5d8]
je 0x1400312d0
cmp qword [rbp + 0x498], 0
je 0x1400312d0
mov r8, qword [rbp + 0x490]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400312d0
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], 0
mov qword [rbp + 0x560], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x550]
lea r8, [rbp + 0x420]
call fcn.140037630
jmp 0x140031a8b
mov r8, qword [rbp + 0x30]
nop word cs:[rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x140031994
movzx eax, word [rdx + 0x3d0]
inc r8
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x140031970
jmp 0x140031999
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rbp + 0x580], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rbp + 0x570], xmm2
movaps xmmword [rbp + 0x560], xmm1
movaps xmmword [rbp + 0x550], xmm0
mov r8, qword [rbp + 0x4c0]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rbp + 0x490]
movaps xmm1, xmmword [rbp + 0x4a0]
movaps xmm2, xmmword [rbp + 0x4b0]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rbp + 0x588]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rbp + 0x4c8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x20], rax
movaps xmm0, xmmword [rbp + 0x590]
movaps xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x550]
movaps xmm1, xmmword [rbp + 0x560]
movaps xmm2, xmmword [rbp + 0x570]
movaps xmm3, xmmword [rbp + 0x580]
movaps xmmword [rbp], xmm3
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x5a0], rax
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x590], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movaps xmm2, xmmword [rbp - 0x10]
movaps xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x580], xmm3
movaps xmmword [rbp + 0x570], xmm2
dec qword [rbp + 0x488]
movaps xmmword [rbp + 0x560], xmm1
movdqa xmmword [rbp + 0x550], xmm0
cmp byte [rbp + 0x420], 0
je 0x140031b1d
test r12, r12
je 0x1400347ac
mov rax, qword [rdi + 0x3d8]
mov qword [rbp + 0x478], rax
dec r12
mov qword [rbp + 0x480], r12
mov qword [rax + 0x160], 0
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [rbp + 0x580], 2
mov eax, 0
mov r9, rbx
mov r8, r13
je 0x1400312e0
mov rdi, qword [rbp + 0x550]
mov r12, qword [rbp + 0x558]
mov rax, qword [rbp + 0x588]
mov qword [rbp + 0x548], rax
mov rax, qword [rbp + 0x590]
mov qword [rbp + 0x5b0], rax
movzx r15d, byte [rbp + 0x5a0]
cmp qword [rbp + 0x570], 0
je 0x140031b8d
mov r8, qword [rbp + 0x568]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r13
mov r9, rbx
test r12, r12
je 0x140031baa
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r13
mov r9, rbx
mov eax, 0
cmp r15b, 2
je 0x1400312e0
mov eax, 0
cmp qword [rbp + 0x5b0], 0
je 0x1400312e0
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x548]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r13
mov r9, rbx
xor eax, eax
jmp 0x1400312e0
mov rax, qword [rbp + 0x488]
mov qword [rbp + 0x400], rax
movdqu xmm0, xmmword [rbp + 0x478]
movdqu xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x3e8], 1
movzx eax, byte [0x1412e2ad0]
mov rcx, qword [0x1412e2bb8]
test rcx, rcx
je 0x140031c34
mov rbx, qword [rbp + 0x5c0]
jmp 0x140031c54
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
mov rbx, qword [rbp + 0x5c0]
je 0x1400347c9
mov rcx, rax
mov qword [0x1412e2bb8], rax
mov r8d, 4
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400347c9
mov dword [rax], 0x48544150
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], 4
mov qword [rbp + 0x560], 4
mov byte [rbp + 0x568], 0
mov rcx, rax
add rcx, 4
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x490]
lea rdx, [rbp - 0x30]
call fcn.140035a00
movups xmm0, xmmword [rbp + 0x550]
movups xmm1, xmmword [rbp + 0x560]
movups xmmword [rbp - 0x18], xmm0
movups xmmword [rbp - 8], xmm1
movdqu xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp - 0x30], xmm0
mov r14, qword [rbp + 0x4a0]
mov qword [rbp - 0x20], r14
mov rsi, qword [rbp - 0x30]
mov rax, qword [rbp + 0x3f0]
test rax, rax
je 0x140031de4
mov rcx, qword [rbp + 0x3f8]
mov qword [rbp + 0x5d0], rcx
mov r13, qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
lea rcx, [rax + 0x168]
movzx edx, word [rax + 0x3d2]
mov qword [rbp + 0x540], rdx
imul r12, rdx, 0x38
mov qword [rbp + 0x5d8], rax
lea r15, [rax - 0x10]
mov rdi, 0xffffffffffffffff
nop dword [rax]
test r12, r12
je 0x140031d80
lea rbx, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, r14d
call r13
add r12, 0xffffffffffffffc8
add r15, 0x20
inc rdi
mov rcx, rbx
cmp eax, 3
je 0x140031d40
cmp eax, 1
jne 0x140031dba
jmp 0x140031d87
mov rdi, qword [rbp + 0x540]
mov rbx, qword [rbp + 0x5c0]
mov rax, qword [rbp + 0x5d0]
sub rax, 1
jb 0x1400322d8
mov qword [rbp + 0x5d0], rax
mov rax, qword [rbp + 0x5d8]
mov rax, qword [rax + rdi*8 + 0x3d8]
jmp 0x140031d11
cmp eax, 2
mov rbx, qword [rbp + 0x5c0]
jne 0x140034663
cmp qword [rbp + 0x5d8], 0
je 0x140031de4
mov r12, qword [r15 - 0x10]
mov rdi, qword [r15]
cmp qword [rbp - 0x10], 0
jne 0x140031dee
jmp 0x140031e01
xor r12d, r12d
cmp qword [rbp - 0x10], 0
je 0x140031e01
mov r8, qword [rbp - 0x18]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp - 0x28], 0
je 0x140031e1a
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbx + 0x40]
lea r14, [0x1412d1cb0]
test rcx, rcx
je 0x140031e70
mov rbx, qword [rbx + 0x30]
cmp rcx, 4
jae 0x140031e3d
lea rdx, [0x140037c50]
jmp 0x140031e55
cmp dword [rbx], 0x5c3f5c5c
lea rax, [0x140037c40]
lea rdx, [0x140037c50]
cmove rdx, rax
mov qword [rbp + 0x5d8], rcx
movzx esi, byte [rcx + rbx - 1]
mov byte [rbp + 0x5e7], 1
mov ecx, esi
call rdx
test al, al
je 0x140031ed8
mov rax, qword [rbp + 0x4e8]
mov qword [rax], r14
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x3e8], 0
je 0x140031fe2
mov rcx, qword [rbp + 0x3f0]
test rcx, rcx
je 0x140031fc9
mov rdx, qword [rbp + 0x3f8]
mov rax, qword [rbp + 0x400]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rcx
mov qword [rbp + 8], rdx
mov ecx, 1
jmp 0x140031fcd
mov r8, qword [rbp + 0x5d8]
cmp r8, 4
jb 0x140031f45
movzx eax, byte [r8 + rbx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x140031f45
movzx eax, byte [rbx + r8 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x140031f45
movzx eax, byte [rbx + r8 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x140031f45
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x140031f47
xor eax, eax
lea r11, [rbx + r8]
xor ecx, ecx
nop dword [rax]
cmp r8, rcx
je 0x140031ffd
movzx edx, byte [rbx + rcx]
cmp edx, 0x2f
je 0x140031f6a
inc rcx
cmp edx, 0x5c
jne 0x140031f50
test al, al
mov qword [rbp + 0x540], r11
je 0x1400320cb
mov byte [rbp + 0x5e7], 1
lea rcx, [rbp - 0x30]
mov rdx, rbx
call fcn.140024b20
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
test rcx, rcx
je 0x140032202
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
mov byte [rbp + 0x5e7], 1
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp - 0x30]
call fcn.140037c60
jmp 0x140032214
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.140038310
movaps xmm6, xmmword [rbp + 0x5f0]
add rsp, 0x688
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor r9d, r9d
lea r14, [0x1412d1c78]
mov rax, rbx
jmp 0x14003201c
xor r9d, r9d
test cx, cx
je 0x140031e70
mov cx, 1
test r9w, r9w
jne 0x140032010
cmp rax, r11
je 0x1400322a7
movzx r9d, byte [rax]
movzx edx, r9b
test dl, dl
js 0x140032040
inc rax
jmp 0x14003209c
mov esi, edx
and esi, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140032090
movzx edx, byte [rax + 2]
shl r10d, 6
and edx, 0x3f
or edx, r10d
cmp r9b, 0xf0
jb 0x1400320a6
movzx r9d, byte [rax + 3]
add rax, 4
and esi, 7
shl esi, 0x12
shl edx, 6
and r9d, 0x3f
or r9d, edx
or r9d, esi
mov edx, r9d
cmp edx, 0xffff
jbe 0x14003209c
jmp 0x1400320b7
add rax, 2
shl esi, 6
or esi, r10d
mov edx, esi
xor r9d, r9d
mov ecx, edx
jmp 0x140032013
add rax, 3
shl esi, 0xc
or edx, esi
cmp edx, 0xffff
jbe 0x14003209c
and edx, 0x3ff
or edx, 0xdc00
mov r9d, edx
jmp 0x140032013
mov rdi, rbx
xor esi, esi
test r8, r8
setns bl
js 0x1400348ac
movzx eax, byte [0x1412e2ad0]
mov rcx, qword [0x1412e2bb8]
test rcx, rcx
mov r12, qword [rbp + 0x5c0]
jne 0x140032116
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
mov r14, qword [rbp + 0x5d8]
je 0x140034892
mov rcx, rax
mov qword [0x1412e2bb8], rax
xor edx, edx
mov r14, qword [rbp + 0x5d8]
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140034892
mov r15, rax
mov rcx, rax
mov rbx, rdi
mov rdx, rdi
mov r8, r14
call fcn.140042df0
mov qword [rbp + 0x5d0], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
mov byte [rbp - 0x18], 0
mov eax, dword [rbp + 0x490]
mov ecx, dword [rbp + 0x493]
mov dword [rbp - 0x17], eax
mov dword [rbp - 0x14], ecx
lea rdx, [0x1412d1cc8]
lea rcx, [rbp - 0x30]
mov r8d, 4
call fcn.14002a9c0
lea rax, [rbp - 0x17]
mov rdi, qword [rbp - 0x30]
mov r14, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x20]
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rbp + 0x490], ecx
mov dword [rbp + 0x493], eax
mov qword [rbp + 0x3e0], rdi
mov qword [rbp + 0x3d8], r14
mov byte [rbp + 0x5be], 1
lea rcx, [rbp + 0x550]
mov rdx, rdi
mov r8, rsi
call fcn.140037d70
cmp qword [rbp + 0x550], 0
je 0x140032220
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x500], rax
movdqu xmm0, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0x4f0], xmm0
test r14, r14
jne 0x1400325e9
jmp 0x1400325fb
mov qword [rbp + 0x4f8], rax
mov qword [rbp + 0x4f0], 0
mov r12, qword [rbp + 0x5c0]
jmp 0x1400325fb
mov qword [rbp + 0x5d0], r14
mov qword [rbp + 0x5d8], rdi
mov rcx, rdi
mov rdx, rsi
call fcn.14002ff80
test rax, rax
je 0x14003257f
cmp rdx, 2
mov r9, qword [rbp + 0x5d8]
jne 0x140032261
movzx r8d, word [rax]
mov ecx, 2
cmp r8d, 0x2e2e
je 0x140032295
mov r8, rdx
nop word cs:[rax + rax]
test r8, r8
je 0x140032292
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x140032270
cmp rdx, rcx
jb 0x1400348ee
test r8, r8
cmovne rdx, r8
mov rcx, rdx
add rax, rcx
sub rax, r9
cmp rsi, rax
cmovae rsi, rax
jmp 0x140032586
cmp r8, 0xf
mov qword [rbp + 0x540], r11
ja 0x1400322eb
lea rax, [r8 - 1]
xor ecx, ecx
nop word [rax + rax]
cmp byte [rbx + rcx], 0x2e
sete r8b
je 0x1400322fd
lea rdx, [rcx + 1]
cmp rax, rcx
mov rcx, rdx
jne 0x1400322c0
jmp 0x1400322fd
xor r12d, r12d
cmp qword [rbp - 0x10], 0
jne 0x140031dee
jmp 0x140031e01
mov cl, 0x2e
mov rdx, rbx
call fcn.140018e30
cmp rax, 1
sete r8b
mov byte [rbp + 0x5b0], r8b
test r12, r12
je 0x14003234d
add rdi, r12
mov qword [rbp + 0x490], r12
mov qword [rbp + 0x498], rdi
mov word [rbp + 0x4a0], 0
mov byte [rbp + 0x4a8], 1
mov byte [rbp + 0x5e7], 1
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x490]
call fcn.140029bb0
movzx eax, byte [rbp - 0x18]
cmp al, 2
jne 0x140032895
mov byte [rbp + 0x5e7], 1
lea rcx, [rbp + 0x550]
call fcn.14002a610
cmp byte [rbp + 0x568], 2
jne 0x140032381
mov byte [rbp + 0x5e7], 1
lea rcx, [rbp + 0x550]
call fcn.1400220b0
jmp 0x14003245b
mov rcx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x548], rax
mov rsi, qword [rbp + 0x560]
mov byte [rbp + 0x5bd], 1
mov qword [rbp + 0x5d0], rcx
mov rdx, rsi
call fcn.14002e020
cmp rsi, rdx
cmovb rdx, rsi
test rax, rax
cmove rdx, rsi
mov rax, qword [rbp + 0x5d0]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x548]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
mov rax, qword [rbp + 0x568]
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x30]
mov rdx, rbx
mov r8, qword [rbp + 0x5d8]
call fcn.14002c510
cmp byte [rbp + 0x5b0], 0
jne 0x14003240b
lea rcx, [rbp - 0x30]
call fcn.1400300e0
mov rsi, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x490]
mov rdx, rsi
call fcn.140037d70
cmp qword [rbp - 0x28], 0
mov r12, qword [rbp + 0x5c0]
je 0x140032442
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0x490]
test r8, r8
je 0x14003245b
movdqu xmm6, xmmword [rbp + 0x498]
jmp 0x140032c5c
mov qword [rbp + 0x548], rbx
mov qword [rbp + 0x450], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x458], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x5d0], rax
xor ebx, ebx
xor esi, esi
xor r14d, r14d
cmp r8, 0x201
jb 0x1400324af
jmp 0x1400324c0
jae 0x1400327e2
cmp r8, 0x201
jae 0x1400324c0
lea r15, [rbp - 0x30]
mov r12d, 0x200
mov r13, r8
jmp 0x140032518
sub r8, r14
sub rsi, r14
cmp rsi, r8
jae 0x1400324ef
lea rcx, [rbp + 0x450]
mov rdx, r14
call fcn.140051840
mov rax, qword [rbp + 0x450]
mov qword [rbp + 0x5d0], rax
mov rbx, qword [rbp + 0x458]
mov eax, 0xffffffff
cmp rbx, rax
mov r14d, 0xffffffff
cmovb r14, rbx
mov qword [rbp + 0x460], r14
mov rsi, rbx
mov r15, qword [rbp + 0x5d0]
mov r12, r14
mov r13, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r15
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, eax
test eax, eax
jne 0x140032540
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400329af
mov r8d, edi
cmp r13, r8
jne 0x1400324a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400347e4
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x1400324c0
jmp 0x1400324af
mov r9, qword [rbp + 0x5d8]
lea rcx, [rbp - 0x30]
mov rdx, r9
mov r8, rsi
call fcn.140024b20
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
test rcx, rcx
je 0x1400325c4
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp - 0x30]
call fcn.140037c60
jmp 0x1400325d6
mov qword [rbp + 0x4f8], rax
mov qword [rbp + 0x4f0], 0
mov rdi, qword [rbp + 0x5d8]
mov r14, qword [rbp + 0x5d0]
test r14, r14
je 0x1400325fb
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x5d8], rax
test r8, r8
je 0x1400327d6
mov r9, qword [rbp + 0x500]
cmp r9, 5
mov qword [rbp + 0x5d0], r8
jb case.0x14003266b.68
cmp word [r8 + r9*2 - 0xa], 0x2e
jne case.0x14003266b.68
cmp word [r8 + r9*2 - 2], 0
jne case.0x14003266b.68
movzx eax, word [r8 + r9*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x14003266b.68
lea rdx, [0x1400358ec]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [r8 + r9*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x140032689
movzx ecx, word [r8 + r9*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x1400326b9
cmp ax, 0x43
jne case.0x14003266b.68
movzx eax, word [r8 + r9*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x14003266b.68
movzx eax, word [r8 + r9*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x14003266b.68
mov qword [rbp + 0x538], r9
mov qword [rbp + 0x550], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x558], xmm0
mov eax, 0x200
mov ecx, 2
mov qword [rbp + 0x540], rcx
xor edi, edi
xor esi, esi
xor ebx, ebx
cmp rax, 0x201
jb 0x140032706
jmp 0x140032715
jae 0x140033703
cmp rax, 0x201
jae 0x140032715
lea r14, [rbp - 0x30]
mov r15d, 0x200
mov r12, rax
jmp 0x14003276f
sub rax, rbx
sub rsi, rbx
cmp rsi, rax
jae 0x140032747
lea rcx, [rbp + 0x550]
mov rdx, rbx
mov r8, rax
call fcn.140051840
mov rax, qword [rbp + 0x550]
mov qword [rbp + 0x540], rax
mov rdi, qword [rbp + 0x558]
mov eax, 0xffffffff
cmp rdi, rax
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rbp + 0x560], rbx
mov rsi, rdi
mov r14, qword [rbp + 0x540]
mov r15, rbx
mov r12, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov r13d, eax
test eax, eax
jne 0x140032798
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140033ab0
mov eax, r13d
cmp r12, rax
jne 0x1400326f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400348bd
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov rax, r12
cmp rax, 0x201
jae 0x140032715
jmp 0x140032706
mov r14, qword [rbp + 0x5d8]
jmp 0x140031e70
cmp r12, r8
jb 0x1400348d7
lea rcx, [rbp + 0x550]
mov rdx, r15
call fcn.140025ce0
lea rcx, [rbp + 0x550]
mov rdx, qword [rbp + 0x548]
mov r8, qword [rbp + 0x5d8]
call fcn.14002c510
movzx eax, byte [rbp + 0x5b0]
test al, al
jne 0x14003282b
lea rcx, [rbp + 0x550]
call fcn.1400300e0
mov rdi, qword [rbp + 0x550]
mov r8, qword [rbp + 0x560]
lea rcx, [rbp + 0x510]
mov rdx, rdi
call fcn.140037d70
cmp qword [rbp + 0x558], 0
je 0x140032864
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqu xmm0, xmmword [rbp + 0x510]
movdqu xmmword [rbp + 0x498], xmm0
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x490], 0
mov sil, 1
jmp 0x1400329d1
lea r12, [rbp - 0x17]
lea r13, [rbp + 0x569]
lea rsi, [rbp - 0x30]
lea rdi, [rbp + 0x490]
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400328de
mov byte [rbp + 0x5e7], 1
mov rcx, rsi
mov rdx, rdi
call fcn.140029bb0
movzx eax, byte [rbp - 0x18]
cmp al, 2
je 0x14003234d
mov r8, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x140032902
test rcx, rcx
je 0x1400328c0
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call r14
jmp 0x1400328c0
mov r9d, dword [r12]
mov r10d, dword [r12 + 3]
mov dword [r13 + 3], r10d
mov dword [r13], r9d
mov qword [rbp + 0x550], r8
mov qword [rbp + 0x558], rcx
mov qword [rbp + 0x560], rdx
mov byte [rbp + 0x568], al
lea rcx, [rbp + 0x550]
mov rdx, rbx
mov r8, qword [rbp + 0x5d8]
call fcn.14002c510
cmp byte [rbp + 0x5b0], 0
jne 0x140032959
lea rcx, [rbp + 0x550]
call fcn.1400300e0
mov r15, qword [rbp + 0x550]
mov r8, qword [rbp + 0x560]
mov rcx, rsi
mov rdx, r15
call fcn.140037d70
cmp qword [rbp + 0x558], 0
je 0x14003298b
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, r15
call r14
mov r8, qword [rbp - 0x30]
test r8, r8
jne 0x140033c40
mov byte [rbp + 0x5e7], 1
mov rcx, rsi
mov rdx, rdi
call fcn.140029bb0
jmp 0x1400328d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x490], 1
xor esi, esi
test rbx, rbx
je 0x1400329ec
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
mov rbx, qword [rbp + 0x548]
je 0x140032a0a
mov r8, qword [rbp + 0x498]
test r8, r8
jne 0x140032c4d
jmp 0x140032a1d
lea rcx, [rbp + 0x498]
mov byte [rbp + 0x5e7], 1
call fcn.1400220b0
mov qword [rbp + 0x450], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x458], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x5d0], rax
xor esi, esi
xor ebx, ebx
xor r14d, r14d
cmp r8, 0x201
jb 0x140032a6f
jmp 0x140032a80
jae 0x140032b3f
cmp r8, 0x201
jae 0x140032a80
lea r15, [rbp - 0x30]
mov r12d, 0x200
mov r13, r8
jmp 0x140032ad8
sub r8, r14
sub rbx, r14
cmp rbx, r8
jae 0x140032aaf
lea rcx, [rbp + 0x450]
mov rdx, r14
call fcn.140051840
mov rax, qword [rbp + 0x450]
mov qword [rbp + 0x5d0], rax
mov rsi, qword [rbp + 0x458]
mov eax, 0xffffffff
cmp rsi, rax
mov r14d, 0xffffffff
cmovb r14, rsi
mov qword [rbp + 0x460], r14
mov rbx, rsi
mov r15, qword [rbp + 0x5d0]
mov r12, r14
mov r13, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r15
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov edi, eax
test eax, eax
jne 0x140032b00
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140032bf0
mov r8d, edi
cmp r13, r8
jne 0x140032a60
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140034801
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x140032a80
jmp 0x140032a6f
cmp r12, r8
jb 0x1400348fc
lea rcx, [rbp + 0x550]
mov rdx, r15
call fcn.140025ce0
lea rcx, [rbp + 0x550]
mov rbx, qword [rbp + 0x548]
mov rdx, rbx
mov r8, qword [rbp + 0x5d8]
call fcn.14002c510
cmp byte [rbp + 0x5b0], 0
jne 0x140032b89
lea rcx, [rbp + 0x550]
call fcn.1400300e0
mov rdi, qword [rbp + 0x550]
mov r8, qword [rbp + 0x560]
lea rcx, [rbp + 0x510]
mov rdx, rdi
call fcn.140037d70
cmp qword [rbp + 0x558], 0
je 0x140032bc2
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqu xmm0, xmmword [rbp + 0x510]
movdqu xmmword [rbp + 0x498], xmm0
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x490], 0
mov dil, 1
jmp 0x140032c19
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x490], 1
xor edi, edi
mov rbx, qword [rbp + 0x548]
test rsi, rsi
je 0x140032c34
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test dil, dil
je 0x1400334cc
mov r8, qword [rbp + 0x498]
test r8, r8
je 0x1400334df
movdqu xmm6, xmmword [rbp + 0x4a0]
mov r12, qword [rbp + 0x5c0]
movq qword [rbp + 0x5d8], xmm6
pshufd xmm0, xmm6, 0xee
movq r9, xmm0
cmp r9, 5
mov qword [rbp + 0x5d0], r8
jae 0x140032631
mov r14, rbx
mov rsi, qword [r12 + 0x90]
mov rbx, qword [r12 + 0xa0]
mov dil, byte [r12 + 0xad]
mov qword [rbp + 0x550], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x558], xmm0
lea rcx, [rbp + 0x550]
xor edx, edx
call fcn.140024f50
mov rax, qword [rbp + 0x550]
mov rcx, qword [rbp + 0x560]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rbp + 0x560], rcx
mov qword [rbp - 0x30], r14
mov rax, qword [rbp + 0x540]
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x550]
lea rdx, [rbp - 0x30]
call fcn.140024da0
mov rdx, qword [rbp + 0x560]
cmp rdx, qword [rbp + 0x558]
jne 0x140032d25
lea rcx, [rbp + 0x550]
call fcn.140024f50
mov rdx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x550]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rbp + 0x560], rdx
lea rax, [rbx + rbx*4]
lea r15, [rsi + rax*8]
lea r14, [rbp + 0x550]
nop dword [rax + rax]
cmp rsi, r15
je 0x140032dce
mov rdx, qword [rbp + 0x560]
cmp rdx, qword [rbp + 0x558]
jne 0x140032d74
mov rcx, r14
call fcn.140024f50
mov rdx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x550]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rbp + 0x560], rdx
mov rcx, r14
mov rdx, rsi
mov r8d, edi
call fcn.140037e50
mov rbx, rax
add rsi, 0x28
test rax, rax
je 0x140032d50
cmp qword [rbp + 0x558], 0
je 0x140032ee0
mov r8, qword [rbp + 0x550]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140032ee0
mov rax, qword [rbp + 0x550]
mov rbx, qword [rbp + 0x558]
test rax, rax
je 0x140032ee0
mov rdx, qword [rbp + 0x560]
mov sil, 1
mov dword [rbp + 0x418], 0
mov rcx, qword [rbp + 0x5d8]
mov qword [rbp + 0x540], rcx
mov rcx, qword [rbp + 0x5d0]
mov qword [rbp + 0x548], rcx
mov qword [rbp + 0x478], rax
mov qword [rbp + 0x480], rbx
mov qword [rbp + 0x488], rdx
cmp rdx, rbx
jne 0x140032e50
mov byte [rbp + 0x5e3], 1
lea rcx, [rbp + 0x478]
call fcn.140024f50
mov rax, qword [rbp + 0x478]
mov rdx, qword [rbp + 0x488]
mov word [rax + rdx*2], 0
inc rdx
mov qword [rbp + 0x488], rdx
cmp byte [r12 + 0xac], 0
mov eax, 0x400
mov r15d, 0x608
cmove r15d, eax
or r15d, dword [r12 + 0xa8]
cmp qword [rbp + 0x3e8], 0
mov dword [rbp + 0x5b0], esi
je 0x140032f24
mov rsi, qword [rbp + 0x400]
mov qword [rbp + 0x430], rsi
movdqu xmm0, xmmword [rbp + 0x3f0]
movdqa xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x4f0], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x4f8], xmm0
test rsi, rsi
je 0x140032f54
mov r14d, 2
xor r12d, r12d
jmp 0x140032f88
mov rdi, qword [rbp + 0x5d8]
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
xor esi, esi
test rdi, rdi
je 0x140032f16
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
je 0x140031e82
jmp 0x140031fe2
mov r13d, 2
xor eax, eax
mov qword [rbp + 0x530], rax
xor r14d, r14d
cmp byte [r12 + 0x88], 2
jne 0x1400337b9
xor esi, esi
mov ebx, 2
xor r12d, r12d
jmp 0x140033932
mov byte [rbp + 0x5e4], 1
lea rcx, [rbp + 0x4f0]
xor edx, edx
call fcn.140024f50
mov r14, qword [rbp + 0x4f0]
mov r12, qword [rbp + 0x500]
mov word [r14 + r12*2], 0
inc r12
mov qword [rbp + 0x500], r12
mov rax, qword [rbp + 0x420]
mov rcx, qword [rbp + 0x428]
xor edx, edx
test rax, rax
setne dl
cmove rsi, rax
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rax
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rsi
lea rcx, [rbp + 0x510]
lea rdx, [rbp - 0x30]
mov rsi, rdx
call fcn.140030b90
mov rdx, qword [rbp + 0x510]
test rdx, rdx
je 0x140033741
mov r9, qword [rbp + 0x520]
imul r10, r9, 0x38
mov rax, qword [rdx + r10 + 0x168]
mov qword [rbp + 0x530], rax
mov rax, qword [rdx + r10 + 0x170]
mov qword [rbp + 0x538], rax
mov rdi, qword [rdx + r10 + 0x178]
mov r8, qword [rdx + r10 + 0x180]
mov rax, qword [rdx + r10 + 0x188]
mov rcx, qword [rdx + r10 + 0x190]
movzx r11d, byte [rdx + r10 + 0x198]
mov ebx, dword [rdx + r10 + 0x19c]
mov dword [rbp + 0x553], ebx
mov r10d, dword [rdx + r10 + 0x199]
mov dword [rbp + 0x550], r10d
shl r9, 5
movups xmm0, xmmword [rdx + r9]
movups xmm1, xmmword [rdx + r9 + 0x10]
lea rdx, [rbp + 0x557]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
mov rdx, qword [rbp + 0x56f]
mov qword [rbp + 0x4af], rdx
mov edx, dword [rbp + 0x550]
movzx r9d, word [rbp + 0x554]
movzx r10d, byte [rbp + 0x556]
mov rbx, qword [rbp + 0x557]
movzx r13d, byte [rbp + 0x55f]
movdqu xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp + 0x4a0], xmm0
mov dword [rbp + 0x490], edx
mov word [rbp + 0x494], r9w
mov byte [rbp + 0x496], r10b
mov qword [rbp + 0x497], rbx
mov byte [rbp + 0x49f], r13b
cmp r11b, 2
je 0x140033741
lea rdx, [rbp + 0x497]
movdqu xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movaps xmmword [rbp + 0x520], xmm1
movdqa xmmword [rbp + 0x510], xmm0
add rcx, r8
xor r11d, r11d
mov rdx, r8
jmp 0x14003312d
xor r11d, r11d
test r9w, r9w
je 0x14003346b
mov r9w, 1
test r11w, r11w
jne 0x140033120
cmp rdx, rcx
je 0x1400331ea
movzx r13d, byte [rdx]
movzx r10d, r13b
test r10b, r10b
js 0x140033153
inc rdx
jmp 0x1400331b5
mov r11d, r10d
and r11d, 0x1f
movzx ebx, byte [rdx + 1]
and ebx, 0x3f
cmp r10b, 0xdf
jbe 0x1400331a7
movzx r10d, byte [rdx + 2]
shl ebx, 6
and r10d, 0x3f
or r10d, ebx
cmp r13b, 0xf0
jb 0x1400331c0
movzx ebx, byte [rdx + 3]
add rdx, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and ebx, 0x3f
or ebx, r10d
or ebx, r11d
mov r10d, ebx
cmp r10d, 0xffff
jbe 0x1400331b5
jmp 0x1400331d4
add rdx, 2
shl r11d, 6
or r11d, ebx
mov r10d, r11d
xor r11d, r11d
mov r9d, r10d
jmp 0x140033123
add rdx, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
jbe 0x1400331b5
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140033123
test rax, rax
je 0x1400331fe
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x4f8]
sub rax, r12
cmp rax, rdi
jae 0x14003322d
lea rcx, [rbp + 0x4f0]
mov rdx, r12
mov r8, rdi
call fcn.140051840
mov r14, qword [rbp + 0x4f0]
mov r12, qword [rbp + 0x500]
lea r8, [rdi + rdi]
lea rcx, [r14 + r12*2]
mov rbx, qword [rbp + 0x530]
mov rdx, rbx
call fcn.140042df0
add r12, rdi
mov qword [rbp + 0x500], r12
cmp qword [rbp + 0x538], 0
je 0x14003326a
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r12, qword [rbp + 0x4f8]
jne 0x140033297
mov byte [rbp + 0x5e2], 1
lea rcx, [rbp + 0x4f0]
mov rdx, r12
call fcn.140024f50
mov r14, qword [rbp + 0x4f0]
mov r12, qword [rbp + 0x500]
mov word [r14 + r12*2], 0x3d
inc r12
mov qword [rbp + 0x500], r12
mov rdi, qword [rbp + 0x510]
mov r12, qword [rbp + 0x518]
mov rcx, qword [rbp + 0x520]
movzx edx, byte [rbp + 0x528]
lea rax, [rdi + rcx]
xor r11d, r11d
mov r8, rdi
jmp 0x1400332dd
xor r11d, r11d
test r9w, r9w
je 0x140033665
mov r9w, 1
test r11w, r11w
jne 0x1400332d0
cmp r8, rax
je 0x140033395
movzx r14d, byte [r8]
movzx r10d, r14b
test r10b, r10b
js 0x140033303
inc r8
jmp 0x140033374
mov r11d, r10d
and r11d, 0x1f
movzx ebx, byte [r8 + 1]
and ebx, 0x3f
cmp r10b, 0xdf
jbe 0x140033350
movzx r10d, byte [r8 + 2]
shl ebx, 6
and r10d, 0x3f
or r10d, ebx
cmp r14b, 0xf0
jb 0x140033360
movzx ebx, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and ebx, 0x3f
or ebx, r10d
or ebx, r11d
mov r10d, ebx
jmp 0x14003336b
add r8, 2
shl r11d, 6
or r11d, ebx
mov r10d, r11d
jmp 0x140033374
add r8, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
ja 0x14003337f
xor r11d, r11d
mov r9d, r10d
jmp 0x1400332d3
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1400332d3
cmp dl, 2
je 0x14003465b
lea r9, [rbp + 0x529]
mov r8d, dword [r9]
mov r9d, dword [r9 + 3]
lea r10, [rbp + 0x557]
mov dword [r10 + 0x15], r9d
mov dword [r10 + 0x12], r8d
mov qword [rbp + 0x550], rdi
mov qword [rbp + 0x558], r12
mov qword [rbp + 0x560], rcx
mov byte [rbp + 0x568], dl
mov qword [rbp + 0x450], rdi
mov qword [rbp + 0x458], rax
mov word [rbp + 0x460], 0
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp + 0x450]
call fcn.140024da0
test r12, r12
je 0x140033417
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x500]
cmp r12, qword [rbp + 0x4f8]
jne 0x140033444
mov byte [rbp + 0x5e2], 0
lea rcx, [rbp + 0x4f0]
mov rdx, r12
call fcn.140024f50
mov r12, qword [rbp + 0x500]
lea rcx, [rbp + 0x510]
mov rdx, rsi
mov r14, qword [rbp + 0x4f0]
mov word [r14 + r12*2], 0
inc r12
mov qword [rbp + 0x500], r12
jmp 0x140032fd9
test rax, rax
je 0x14003347f
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x518], 0
mov rsi, qword [rbp + 0x530]
je 0x1400334a6
mov r8, qword [rbp + 0x510]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r14, [0x1412d1c78]
cmp qword [rbp + 0x538], 0
je 0x140033683
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rsi
jmp 0x14003367d
lea rcx, [rbp + 0x498]
mov byte [rbp + 0x5e7], 1
call fcn.1400220b0
mov byte [rbp + 0x5e7], 1
lea rdx, [0x1412d0db4]
lea rcx, [rbp + 0x450]
mov r8d, 4
call fcn.140027a80
cmp byte [rbp + 0x468], 2
je 0x1400336f7
movdqu xmm0, xmmword [rbp + 0x450]
movups xmm1, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x510], xmm0
movaps xmmword [rbp + 0x520], xmm1
mov rcx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x520]
add rax, rcx
mov qword [rbp + 0x5d0], rcx
mov qword [rbp + 0x490], rcx
mov qword [rbp + 0x498], rax
mov word [rbp + 0x4a0], 0
mov byte [rbp + 0x4a8], 1
lea r13, [rbp - 0x17]
lea r15, [rbp + 0x569]
lea rdi, [rbp - 0x30]
lea r14, [rbp + 0x490]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14003358c
mov rax, qword [rbp - 0x30]
test rax, rax
jne 0x14003456a
mov rcx, rdi
mov rdx, r14
call fcn.140029bb0
mov r12, qword [rbp + 0x5d8]
jmp 0x1400335ab
mov rcx, rdi
mov rdx, r14
call fcn.140029bb0
movzx eax, byte [rbp - 0x18]
cmp al, 2
je 0x1400336d7
mov r8, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x1400335da
test rcx, rcx
je 0x1400335a0
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call rsi
jmp 0x1400335a0
mov r9d, dword [r13]
mov r10d, dword [r13 + 3]
mov dword [r15 + 3], r10d
mov dword [r15], r9d
mov qword [rbp + 0x550], r8
mov qword [rbp + 0x558], rcx
mov qword [rbp + 0x560], rdx
mov byte [rbp + 0x568], al
lea rcx, [rbp + 0x550]
mov rdx, rbx
mov r8, r12
call fcn.14002c510
cmp byte [rbp + 0x5b0], 0
jne 0x14003362b
lea rcx, [rbp + 0x550]
call fcn.1400300e0
mov r12, qword [rbp + 0x550]
mov r8, qword [rbp + 0x560]
mov rcx, rdi
mov rdx, r12
call fcn.140037d70
cmp qword [rbp + 0x558], 0
je 0x14003357f
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, r12
call rsi
jmp 0x14003357f
lea r14, [0x1412d1c78]
test r12, r12
je 0x140033683
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rbp + 0x5e4], 0
lea rcx, [rbp - 0x30]
call fcn.140038310
cmp qword [rbp + 0x4f8], 0
je 0x1400336b3
mov r8, qword [rbp + 0x4f0]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rbp + 0x5d8]
mov rax, qword [rbp + 0x4e8]
mov qword [rax], r14
mov qword [rax + 0x10], 2
mov ebx, dword [rbp + 0x5b0]
jmp 0x140033bf0
cmp qword [rbp + 0x518], 0
je 0x1400336f7
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r14, [0x1412d1ce0]
jmp 0x140031e70
cmp r15, rax
jb 0x140034913
test r13d, r13d
je 0x140033c49
mov rsi, rax
lea rbx, [rax + rax]
movzx eax, byte [0x1412e2ad0]
mov edx, 2
mov rcx, rbx
call fcn.140011ad0
test rax, rax
je 0x14003493b
mov r13, rax
jmp 0x140033c54
mov byte [rbp + 0x5e4], 0
lea rcx, [rbp - 0x30]
call fcn.140038310
cmp r12, qword [rbp + 0x4f8]
jne 0x14003377e
mov byte [rbp + 0x5e4], 0
lea rcx, [rbp + 0x4f0]
mov rdx, r12
call fcn.140024f50
mov r14, qword [rbp + 0x4f0]
mov r12, qword [rbp + 0x500]
mov word [r14 + r12*2], 0
mov r13, qword [rbp + 0x4f0]
test r13, r13
je 0x1400336b3
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x530], rax
mov r12, qword [rbp + 0x5c0]
cmp byte [r12 + 0x88], 2
je 0x140032f45
mov rax, qword [r12 + 0x70]
mov rcx, qword [r12 + 0x80]
add rcx, rax
xor r10d, r10d
mov rdx, rax
mov rdi, qword [rbp + 0x5d8]
jmp 0x1400337e5
xor r10d, r10d
test r8w, r8w
je 0x14003389d
mov r8w, 1
test r10w, r10w
jne 0x1400337d8
cmp rdx, rcx
je 0x1400338c8
movzx r11d, byte [rdx]
movzx r9d, r11b
test r9b, r9b
js 0x14003380b
inc rdx
jmp 0x14003387c
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x140033858
movzx r9d, byte [rdx + 2]
shl esi, 6
and r9d, 0x3f
or r9d, esi
cmp r11b, 0xf0
jb 0x140033868
movzx r11d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r10d
mov r9d, r11d
jmp 0x140033873
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x14003387c
add rdx, 3
shl r10d, 0xc
or r9d, r10d
cmp r9d, 0xffff
ja 0x140033887
xor r10d, r10d
mov r8d, r9d
jmp 0x1400337db
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1400337db
lea rax, [0x1412d1c78]
mov rcx, qword [rbp + 0x4e8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov ebx, dword [rbp + 0x5b0]
mov rsi, qword [rbp + 0x530]
jmp 0x140033bd9
mov qword [rbp + 0x538], r13
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x550]
lea rdx, [rbp - 0x30]
call fcn.140035a00
mov rsi, qword [rbp + 0x558]
mov rdx, qword [rbp + 0x560]
cmp rdx, rsi
jne 0x14003391a
lea rcx, [rbp + 0x550]
call fcn.140024f50
mov rsi, qword [rbp + 0x558]
mov rdx, qword [rbp + 0x560]
mov r12, qword [rbp + 0x550]
mov word [r12 + rdx*2], 0
mov rbx, r12
mov r13, qword [rbp + 0x538]
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x510], xmm0
mov qword [rbp + 0x520], 0
lea rdi, [0x1412e2bc8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1412e2b98]
shl rax, 1
test rax, rax
mov qword [rbp + 0x538], r13
mov qword [rbp + 0x448], rsi
mov qword [rbp + 0x408], rbx
mov qword [rbp + 0x3d0], r12
jne 0x140034398
xor eax, eax
mov r12b, byte [0x1412e2bd0]
xor ecx, ecx
test r12b, r12b
setne cl
mov qword [rbp + 0x498], rdi
mov dword [rbp + 0x444], eax
mov byte [rbp + 0x4a0], al
mov qword [rbp + 0x490], rcx
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x560], 0
mov rcx, qword [rbp + 0x5c0]
lea rbx, [rcx + 0x10]
mov rsi, qword [rcx + 0x10]
xor eax, eax
cmp rsi, 5
cmove rbx, rax
mov qword [rbp + 0x570], 0
lea rdi, [rcx + 0x20]
mov r13, qword [rcx + 0x20]
cmp r13, 5
cmove rdi, rax
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
cmp rax, 5
mov ecx, 1
cmovne rcx, rax
lea r9, [rbp + 0x550]
mov r8d, 0xfffffff6
call fcn.1400383e0
test rax, rax
je 0x140033a54
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov ebx, dword [rbp + 0x5b0]
mov r13, qword [rbp + 0x538]
mov rsi, qword [rbp + 0x530]
jmp 0x140033b3e
mov qword [rbp + 0x5c0], rdx
lea r9, [rbp + 0x560]
mov ecx, 2
cmp rsi, 5
cmovne rcx, rsi
je 0x140033a75
mov rdx, qword [rbx + 8]
mov r8d, 0xfffffff5
call fcn.1400383e0
test rax, rax
je 0x140033ac6
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov ebx, dword [rbp + 0x5b0]
mov r13, qword [rbp + 0x538]
mov rsi, qword [rbp + 0x530]
jmp 0x140033b31
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
xor r13d, r13d
jmp 0x140033c65
mov qword [rbp + 0x410], rdx
lea r9, [rbp + 0x570]
mov ecx, 2
cmp r13, 5
cmovne rcx, r13
je 0x140033ae7
mov rdx, qword [rdi + 8]
mov r8d, 0xfffffff4
call fcn.1400383e0
mov rdi, rdx
test rax, rax
je 0x1400343a4
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
mov ebx, dword [rbp + 0x5b0]
mov r13, qword [rbp + 0x538]
mov rsi, qword [rbp + 0x530]
mov rcx, qword [rbp + 0x410]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x5c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x550], 0
je 0x140033b55
mov rcx, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x560], 0
je 0x140033b6c
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x570], 0
je 0x140033b83
mov rcx, qword [rbp + 0x578]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r12b, r12b
cmp byte [rbp + 0x444], 0
mov rdi, qword [rbp + 0x5d8]
mov r14, qword [rbp + 0x448]
jne 0x140033bb1
mov rax, qword [0x1412e2b98]
shl rax, 1
test rax, rax
jne 0x1400345a1
lea rcx, [0x1412e2bc8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
test r14, r14
je 0x140033bd9
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x408]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rsi, rsi
je 0x140033bf0
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x480], 0
je 0x140033c10
mov r8, qword [rbp + 0x478]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x540], 0
je 0x140033c30
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x548]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov sil, 1
test bl, bl
jne 0x140031fe2
jmp 0x140032efb
movups xmm6, xmmword [rbp - 0x28]
jmp 0x140032c55
mov rsi, rax
mov r13d, 2
xor ebx, ebx
mov rcx, r13
mov rdx, r14
mov r8, rbx
call fcn.140042df0
mov rax, rsi
test rdi, rdi
je 0x140033c86
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x540]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, rsi
test r13, r13
je 0x14003407a
mov qword [rbp + 0x490], r13
mov qword [rbp + 0x498], rax
mov r14, rax
mov qword [rbp + 0x4a0], rax
lea r12, [0x1412d1cfb]
xor eax, eax
lea rdi, [rbp + 0x490]
xor r15d, r15d
jmp 0x140033cd4
mov eax, ebx
mov rcx, r14
mov word [r13 + r14*2], si
inc rcx
mov r14, rcx
mov qword [rbp + 0x4a0], rcx
test r12, r12
je 0x140033d62
test ax, ax
je 0x140033cf7
xor ebx, ebx
mov esi, eax
mov rdx, r14
cmp rdx, qword [rbp + 0x498]
jne 0x140033cbc
jmp 0x140033dc2
lea rcx, [0x1412d1d03]
cmp r12, rcx
je 0x140033d62
movzx r8d, byte [r12]
movzx esi, r8b
test sil, sil
js 0x140033d19
inc r12
jmp 0x140033db0
mov ecx, esi
and ecx, 0x1f
movzx r9d, byte [r12 + 1]
and r9d, 0x3f
cmp sil, 0xdf
jbe 0x140033d89
movzx edx, byte [r12 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x140033d97
movzx esi, byte [r12 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, ecx
cmp esi, 0x110000
jne 0x140033da4
cmp r15, 1
je 0x140033e37
mov r15d, 1
xor esi, esi
mov r12d, 0
cmp r14, qword [rbp + 0x498]
jne 0x140033cbe
jmp 0x140033de3
add r12, 2
shl ecx, 6
or ecx, r9d
mov esi, ecx
jmp 0x140033db0
add r12, 3
shl ecx, 0xc
or edx, ecx
mov esi, edx
jmp 0x140033da8
add r12, 4
cmp esi, 0xffff
ja 0x140033e08
mov rdx, r14
xor ebx, ebx
cmp rdx, qword [rbp + 0x498]
jne 0x140033cbc
test r12, r12
je 0x140033de1
lea r8, [0x1412d1cfb]
sub r8, r12
add r8, 0xb
shr r8, 2
sub r8, r15
inc r8
jmp 0x140033df1
mov eax, ebx
mov r8d, 1
sub r8, r15
mov ebx, eax
mov rdx, r14
inc r8
mov rcx, rdi
call fcn.140051840
mov r13, qword [rbp + 0x490]
jmp 0x140033cbc
lea eax, [rsi + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
mov esi, eax
mov rdx, r14
cmp rdx, qword [rbp + 0x498]
je 0x140033dc2
jmp 0x140033cbc
mov rax, qword [rbp + 0x490]
mov rcx, qword [rbp + 0x498]
test rax, rax
je 0x14003407d
mov qword [rbp + 0x548], rax
mov qword [rbp + 0x540], rcx
mov rcx, qword [rbp + 0x5c0]
movzx eax, byte [rcx + 0xad]
mov byte [rbp + 0x530], al
test al, al
setne byte [rbp + 0x5b0]
lea r14, [0x1412d176f]
mov rax, r14
not rax
add rax, r14
add rax, 0x12
shr rax, 2
cmp rax, 4
mov esi, 3
cmovae rsi, rax
movabs rax, 0x3fffffffffffffff
xor edi, edi
cmp rsi, rax
setne al
je 0x140034927
mov dil, al
add rdi, rdi
mov rax, qword [rcx + 0x90]
mov qword [rbp + 0x418], rax
mov rax, qword [rcx + 0xa0]
mov qword [rbp + 0x448], rax
lea rbx, [rsi + rsi + 2]
movzx eax, byte [0x1412e2ad0]
mov rcx, rbx
mov rdx, rdi
call fcn.140011ad0
test rax, rax
je 0x14003492e
inc rsi
mov word [rax], 0x63
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], 1
lea r15, [0x1412d1770]
mov edi, 1
xor r13d, r13d
lea r12, [0x1412d177e]
lea rbx, [rbp - 0x30]
jmp 0x140033f3b
mov word [rax + rdi*2], r13w
inc rdi
mov qword [rbp - 0x20], rdi
mov r13d, esi
test r13w, r13w
je 0x140033f48
xor esi, esi
jmp 0x14003400b
cmp r15, r12
je 0x14003403a
movzx r8d, byte [r15]
movzx r13d, r8b
test r13b, r13b
js 0x140033f68
inc r15
xor esi, esi
jmp 0x14003400b
mov ecx, r13d
and ecx, 0x1f
movzx r9d, byte [r15 + 1]
and r9d, 0x3f
cmp r13b, 0xdf
jbe 0x140033fbd
movzx edx, byte [r15 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x140033fce
movzx r13d, byte [r15 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r13d, 0x3f
or r13d, edx
or r13d, ecx
cmp r13d, 0x110000
je 0x14003403a
add r15, 4
jmp 0x140033fda
add r15, 2
shl ecx, 6
or ecx, r9d
mov r13d, ecx
xor esi, esi
jmp 0x14003400b
add r15, 3
shl ecx, 0xc
or edx, ecx
mov r13d, edx
cmp r13d, 0xffff
jbe 0x140033f41
lea ecx, [r13 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov esi, r13d
mov r13d, ecx
cmp rdi, qword [rbp - 0x28]
jne 0x140033f2c
mov r8, r14
sub r8, r15
add r8, 0x12
shr r8, 2
inc r8
mov rcx, rbx
mov rdx, rdi
call fcn.140051840
mov rax, qword [rbp - 0x30]
jmp 0x140033f2c
mov rdi, qword [rbp - 0x20]
mov qword [rbp + 0x560], rdi
movdqu xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x550], xmm0
cmp rdi, qword [rbp + 0x558]
jne 0x140034093
lea rcx, [rbp + 0x550]
mov rdx, rdi
call fcn.140024f50
mov r8, qword [rbp + 0x538]
mov rdi, qword [rbp + 0x560]
jmp 0x14003409a
mov rcx, rax
mov rdi, qword [rbp + 0x5d8]
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rcx
jmp 0x140032ef1
mov r8, qword [rbp + 0x538]
mov r12, qword [rbp + 0x550]
mov word [r12 + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x560], rdi
lea rax, [r8 + r8]
xor ecx, ecx
lea rbx, [0x1412d17b8]
mov rdx, qword [rbp + 0x5d0]
cmp rax, rcx
je 0x1400340db
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x1400340c6
jmp 0x140034334
mov rax, qword [rbp + 0x5d0]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
je 0x140034334
lea rbx, [r8 - 1]
xor r14d, r14d
test ax, ax
mov rax, qword [rbp + 0x5d0]
cmove r14, rax
test r14, r14
cmove rbx, r8
cmove r14, rax
mov r15, qword [rbp + 0x558]
mov rax, r15
sub rax, rdi
cmp rax, rbx
jae 0x14003414b
lea rcx, [rbp + 0x550]
mov rdx, rdi
mov r8, rbx
call fcn.140051840
mov rdi, qword [rbp + 0x560]
mov r12, qword [rbp + 0x550]
mov r15, qword [rbp + 0x558]
lea r8, [rbx + rbx]
lea rcx, [r12 + rdi*2]
mov rdx, r14
call fcn.140042df0
add rdi, rbx
mov qword [rbp + 0x560], rdi
cmp rdi, r15
jne 0x140034187
lea rcx, [rbp + 0x550]
mov rdx, r15
call fcn.140024f50
mov r12, qword [rbp + 0x550]
mov rdi, qword [rbp + 0x560]
mov word [r12 + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x560], rdi
mov rax, qword [rbp + 0x448]
lea rax, [rax + rax*4]
mov rsi, qword [rbp + 0x418]
lea r14, [rsi + rax*8]
lea r15, [0x1412d17d7]
and r15, 0xfffffffffffffff8
lea r12, [0x1412d17d0]
mov rax, r15
sub rax, r12
cmp rax, 0x16
mov r13d, 0x16
cmovb r13, rax
lea rdi, [rbp + 0x550]
cmp rsi, r14
je 0x14003460b
mov rbx, rsi
mov rdx, qword [rbp + 0x560]
cmp rdx, qword [rbp + 0x558]
jne 0x140034206
mov rcx, rdi
call fcn.140024f50
mov rdx, qword [rbp + 0x560]
lea rax, [rdx + 1]
mov rcx, qword [rbp + 0x550]
mov word [rcx + rdx*2], 0x20
mov qword [rbp + 0x560], rax
movzx eax, byte [rbp + 0x5b0]
mov r8d, eax
cmp byte [rbp + 0x530], 0
jne 0x140034316
cmp qword [rbx], 0
movzx eax, byte [rbp + 0x5b0]
mov r8d, eax
jne 0x140034316
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x18]
add rcx, rax
cmp rax, rcx
je 0x14003430e
movzx edx, byte [rax]
test r13, r13
je 0x140034290
mov r8d, 0
cmp r15, r12
je 0x140034293
xor r8d, r8d
cmp byte [r8 + r12], dl
je 0x140034313
inc r8
cmp r13, r8
jne 0x140034273
mov r8, r13
cmp r13, 6
ja 0x1400342ed
jmp 0x140034293
xor r8d, r8d
movzx r9d, dl
movabs r10, 0x101010101010101
imul r9, r10
mov r10, qword [r8 + r12]
xor r10, r9
mov r11, r10
not r11
movabs rsi, 0xfefefefefefefeff
add r10, rsi
and r10, r11
movabs r11, 0x8080808080808080
test r10, r11
jne 0x1400342ed
xor r9, qword [r8 + r12 + 8]
mov r10, r9
not r10
add r9, rsi
and r9, r10
lea r10, [r8 + 0x10]
test r9, r11
cmove r8, r10
cmp r8, 0x16
je 0x140034302
cmp byte [r8 + r12], dl
je 0x140034313
inc r8
cmp r8, 0x16
jne 0x1400342f3
inc rax
cmp rax, rcx
jne 0x14003425d
xor r8d, r8d
jmp 0x140034316
mov r8b, 1
mov rcx, rdi
mov rsi, rbx
mov rdx, rbx
call fcn.140037e50
mov rbx, rax
add rsi, 0x28
test rax, rax
je 0x1400341db
cmp qword [rbp + 0x558], 0
je 0x140034354
mov r8, qword [rbp + 0x550]
mov rcx, qword [0x1412e2bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x540], 0
mov rdi, qword [rbp + 0x5d8]
je 0x140032ef9
mov rcx, qword [0x1412e2bb8]
xor esi, esi
xor edx, edx
mov r8, qword [rbp + 0x548]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140032efb
call fcn.140051900
xor al, 1
jmp 0x14003398b
pxor xmm0, xmm0
movdqu xmmword [rbp + 4], xmm0
movdqu xmmword [rbp - 8], xmm0
movdqu xmmword [rbp - 0x18], xmm0
movdqu xmmword [rbp - 0x28], xmm0
movdqu xmmword [rbp + 0x18], xmm0
movdqu xmmword [rbp + 0x28], xmm0
mov dword [rbp - 0x30], 0x68
test rdi, rdi
mov r13, qword [rbp + 0x538]
mov rax, qword [rbp + 0x5c0]
mov rbx, qword [rbp + 0x410]
jne 0x1400343f1
test rbx, rbx
jne 0x1400343f1
test rax, rax
je 0x140034404
mov dword [rbp + 0xc], 0x100
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rdi
mov rcx, qword [rbp + 0x478]
lea rax, [rbp + 0x510]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x3d0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov r14, rcx
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x548]
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400345d7
movups xmm0, xmmword [rbp + 0x550]
movups xmm1, xmmword [rbp + 0x560]
movups xmm2, xmmword [rbp + 0x570]
mov rax, qword [rbp + 0x4e8]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x510]
movups xmmword [rax], xmm0
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call rsi
mov rcx, rbx
call rsi
mov rcx, qword [rbp + 0x5c0]
call rsi
lea rcx, [rbp + 0x490]
call fcn.140038f30
cmp qword [rbp + 0x448], 0
mov ebx, dword [rbp + 0x5b0]
mov rsi, qword [rbp + 0x530]
je 0x1400344e4
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x408]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rsi, rsi
mov rsi, qword [rbp + 0x5d8]
mov rdi, qword [rbp + 0x5d0]
je 0x140034509
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x480], 0
je 0x140034525
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x540], 0
je 0x140034545
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x548]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rsi, rsi
sete al
or bl, al
jne 0x140031fe2
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140031fe2
mov rsi, rax
movdqu xmm6, xmmword [rbp - 0x28]
cmp qword [rbp + 0x518], 0
mov r12, qword [rbp + 0x5c0]
je 0x140034599
mov rcx, qword [0x1412e2bb8]
xor edx, edx
mov r8, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, rsi
jmp 0x140032c5c
call fcn.140051900
test al, al
jne 0x140033bb1
mov byte [0x1412e2bd0], 1
jmp 0x140033bb1
lea rcx, [0x1412cf198]
lea r8, [0x1412cfd48]
mov edx, 0x2b
call fcn.140050930
jmp 0x140034948
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x4e8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp + 0x5b0]
jmp 0x140033b1d
mov rdx, qword [rbp + 0x560]
cmp rdx, qword [rbp + 0x558]
jne 0x14003462e
lea rcx, [rbp + 0x550]
call fcn.140024f50
mov rdx, qword [rbp + 0x560]
mov r12, qword [rbp + 0x5c0]
mov rax, qword [rbp + 0x550]
mov word [rax + rdx*2], 0x22
inc rdx
mov rbx, qword [rbp + 0x558]
mov cl, 1
mov dword [rbp + 0x418], ecx
xor esi, esi
jmp 0x140032e15
mov r14, rdi
jmp 0x140033683
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x510], rax
lea rax, [rbp + 0x510]
mov qword [rbp + 0x490], rax
lea rax, [0x1400286c0]
mov qword [rbp + 0x498], rax
lea rax, [0x1412d1c08]
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], 1
mov qword [rbp + 0x570], 0
lea rax, [rbp + 0x490]
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], 1
lea rdx, [0x1412d1c40]
lea rcx, [rbp + 0x550]
call fcn.140050770
jmp 0x140034948
lea rcx, [0x1412cf198]
lea r8, [0x1412cf228]
mov edx, 0x2b
call fcn.140050930
jmp 0x140034948
mov ecx, 1
mov rdx, rdi
call fcn.1400506a0
jmp 0x140034948
mov byte [rbp + 0x5cf], 1
mov ecx, 1
mov rdx, rdi
call fcn.1400506a0
jmp 0x140034948
mov rcx, rsi
mov rdx, r12
call fcn.1400506a0
jmp 0x140034948
call fcn.140011ba0
jmp 0x140034948
mov byte [rbp + 0x5cf], 1
call fcn.140011ba0
jmp 0x140034948
call fcn.140011ba0
jmp 0x140034948
lea r8, [0x1412d19c8]
mov ecx, 1
xor edx, edx
call fcn.140050830
jmp 0x140034948
lea rax, [0x1412d19e0]
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.1400508b0
jmp 0x140034948
lea r8, [0x1412d19f8]
mov rdx, r12
call fcn.140050830
jmp 0x140034948
lea rcx, [0x1412cf9c0]
lea r8, [0x1412cf9e8]
mov edx, 0x21
call fcn.140050930
jmp 0x140034948
mov byte [rbp + 0x5e7], 1
mov ecx, 1
mov edx, 4
call fcn.1400506a0
jmp 0x140034948
lea rcx, [0x1412cfb50]
lea r8, [0x1412d2118]
mov edx, 0x28
call fcn.140050930
jmp 0x140034948
lea rcx, [0x1412cfb50]
lea r8, [0x1412d2118]
mov edx, 0x28
call fcn.140050930
jmp 0x140034948
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x490], rax
lea rax, [rbp + 0x490]
mov qword [rbp + 0x550], rax
lea rax, [0x1400286c0]
mov qword [rbp + 0x558], rax
lea rax, [0x1412d1a38]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
mov qword [rbp - 0x10], 0
lea rax, [rbp + 0x550]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 1
lea rdx, [0x1412d1a48]
lea rcx, [rbp - 0x30]
call fcn.140050770
jmp 0x140034948
mov sil, bl
mov byte [rbp + 0x5e7], 1
mov rcx, rsi
mov rdx, r14
call fcn.1400506a0
jmp 0x140034948
mov byte [rbp + 0x5e7], 1
call fcn.140011ba0
jmp 0x140034948
lea rcx, [0x1412cfb50]
lea r8, [0x1412d2118]
mov edx, 0x28
call fcn.140050930
jmp 0x140034948
lea rax, [0x1412d2130]
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.1400508b0
jmp 0x140034948
lea r8, [0x1412cf2b8]
call fcn.140050830
jmp 0x140034948
lea rax, [0x1412d2130]
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.1400508b0
jmp 0x140034948
lea r8, [0x1412d2130]
mov rcx, rax
mov rdx, r15
call fcn.1400508b0
jmp 0x140034948
call fcn.140011ba0
jmp 0x140034948
mov rcx, rdi
mov rdx, rbx
call fcn.1400506a0
jmp 0x140034948
mov ecx, 2
mov rdx, rbx
call fcn.1400506a0
ud2