Function at 0x140040a38
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1468]
mov eax, 0x1540
call fcn.14005e1f0
sub rsp, rax
movaps xmmword [rsp + 0x1530], xmm6
mov rax, qword [0x1401f7030]
xor rax, rsp
mov qword [rbp + 0x1420], rax
mov rsi, rcx
xor r13d, r13d
mov ebx, r13d
mov dword [rsp + 0x58], ebx
mov r12, qword [str.SetupPhase]
mov qword [rbp - 0x80], r12
lea rax, str.IMAGE::BuildImage
mov qword [str.SetupPhase], rax
call fcn.14003fa68
mov edx, 0x4e20
xor ecx, ecx
lea r9d, [r13 + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14009de4e
mov qword [0x1401fad08], rax
mov dword [0x1401fad10], 0x1f4
lea r15d, [r13 + 1]
mov byte [0x1401fad01], r15b
mov r14d, 0xa64e
cmp word [rsi + 0x48], r14w
je 0x14009bd4c
test byte [rsi + 0x158], 0x90
jne 0x14004229d
mov rcx, rsi
call fcn.14000e064
cmp byte [0x1401fac62], r13b
jne 0x14009bd61
cmp byte [0x1401fcc53], r13b
jne 0x14009bd90
xor edx, edx
xor ecx, ecx
call fcn.1400428ec
mov eax, 2
test byte [0x1401fca80], al
jne 0x14009bda8
cmp dword [0x1401fa544], 6
jne 0x140040bb6
call fcn.140042888
mov r14, rax
movzx eax, byte [0x1401fccb0]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x1401fccb1]
mov dword [rbp - 0x60], eax
mov rax, qword [0x1401fccc0]
mov qword [rbp - 0x20], rax
mov r15, qword [0x1401fccc8]
mov r12, qword [0x1401fccb8]
mov edi, 1
cmp dword [r14], r13d
jne 0x140040b90
test r12, r12
jne 0x14009bdba
mov ecx, edi
call fcn.14003394c
test al, al
jne 0x14009be73
mov r15d, 1
mov byte [0x1401fab90], r15b
mov r12, qword [rbp - 0x80]
mov r14d, 0xa64e
call fcn.140042888
mov rdi, rax
mov rcx, rax
call fcn.140040150
test eax, eax
jne 0x14009be83
mov rcx, rsi
call fcn.14000f278
mov eax, 2
test byte [0x1401fca80], al
jne 0x14009be8c
call fcn.140042888
mov rdi, rax
mov rcx, rax
call fcn.140040150
test eax, eax
jne 0x14009bed2
mov r8d, dword [rsi + 0x154]
bt r8d, 0xc
jb 0x14009bedb
bt r8d, 9
jb 0x14009bf29
mov rcx, rsi
call fcn.14003e808
test byte [rsi + 0x154], 0x40
je 0x140040fc2
cmp byte [0x1401fa4fa], r13b
jne 0x14009bf34
mov dl, r15b
mov rcx, rsi
call fcn.140040184
mov dl, r15b
mov rcx, rsi
call fcn.140012e04
xor edx, edx
mov rcx, rsi
call fcn.140040184
mov rcx, rsi
call fcn.14003fde4
mov rcx, rsi
call fcn.14003e6dc
mov rdx, qword [rsi + 0xf28]
mov rcx, rsi
call fcn.14003fe2c
cmp word [rsi + 0x48], r14w
je 0x14009bf4f
mov edi, 0x800000
mov rax, qword [0x1401fcae0]
test rax, rax
jne 0x14009bf64
mov rax, qword [rsi + 0xfe8]
test rax, rax
je 0x140040cb6
or dword [rax], edi
cmp word [rsi + 0x48], r14w
je 0x14009bf6b
movzx eax, word [rsi + 0x48]
cmp ax, r14w
je 0x14009bf9e
mov ebx, 2
cmp dword [rsi + 0x1b0], ebx
je 0x14009c307
mov ecx, 0x3a64
cmp ax, cx
je 0x14009c2c2
cmp ax, r14w
je 0x14009c2c2
mov r9b, r15b
mov r8b, r15b
mov rdx, rsi
mov rcx, qword [rsi + 0xf28]
call fcn.140040408
mov r9b, r15b
mov r8b, r15b
mov rdx, rsi
mov rcx, qword [rsi + 0xf30]
call fcn.140040408
mov eax, dword [0x1401fa4e4]
test eax, eax
jne 0x14009c2d0
mov dl, byte [0x1401fac40]
test dl, dl
jne 0x14009c339
mov rcx, qword [0x1401fab30]
mov r8d, dword [rcx + 0xa0]
test r8d, r8d
jne 0x14009c357
mov r8d, dword [rcx + 0xa4]
test r8d, r8d
jne 0x14009c369
test dl, dl
jne 0x14009c37b
test eax, eax
jne 0x14009c37b
mov dword [0x1401fa4e4], r13d
mov byte [0x1401fac40], r13b
mov edx, 8
mov ecx, ebx
call fcn.1400428ec
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x140040da7
lea rcx, [0x1401fc590]
call fcn.14002a0a4
cmp word [rsi + 0x48], r14w
je 0x14009c392
mov rcx, rsi
call fcn.1400132d4
mov ecx, ebx
call fcn.1400429e4
mov eax, dword [rsi + 0x1270]
bts eax, 0x10
btr eax, 0x14
mov dword [rsi + 0x1270], eax
cmp qword [0x1401fa458], r13
je 0x14009c3b1
mov rcx, rsi
call fcn.14002b870
lea rcx, [0x1401f7960]
call fcn.140057948
mov qword [rsi + 0x1278], r13
mov rcx, qword [rsi + 0x10c8]
test rcx, rcx
je 0x140040e03
call fcn.14004ff34
mov rcx, qword [rsi + 0x10d0]
test rcx, rcx
jne 0x14009c3c0
mov rcx, rsi
call fcn.1400587f0
mov rcx, qword [rsi + 0x13c0]
test rcx, rcx
jne 0x14009c3cb
call fcn.140058460
mov r8, qword [0x1401f7638]
cmp r8, 0x7f
ja 0x14009c417
test r8, r8
jne 0x14009c429
call fcn.140058484
call fcn.1400584a8
call fcn.1400584cc
lea rcx, [0x1401f7a50]
call fcn.140057948
mov r8, qword [0x1401f7a38]
cmp r8, 0x7f
ja 0x14009c47b
test r8, r8
jne 0x14009c48d
call fcn.14005664c
lea rcx, [0x1401f7ab0]
call fcn.140057948
lea rcx, [0x1401fc550]
call fcn.14003feb0
call fcn.1400555b4
call fcn.14003f294
call fcn.14003f2bc
mov byte [0x1401fab58], r15b
mov rcx, rsi
call fcn.14003fa24
mov rcx, rsi
call fcn.14002d6c0
mov r14, qword [0x1401fc590]
test r14, r14
je 0x140040f79
mov rax, qword [rsi + 0xf28]
mov qword [rbp - 0x20], rax
mov rax, qword [rsi + 0xf30]
mov r12d, 0xa64e
cmp word [rsi + 0x48], r12w
cmovne rax, r13
mov qword [rbp - 0x18], rax
lea r15, [rbp - 0x20]
mov qword [rsp + 0x70], r15
mov rdi, qword [r15]
test rdi, rdi
je 0x140042282
cmp byte [rdi + 0xb0], 1
cmove r14, qword [0x1401fcbb8]
lea rax, [fcn.140042860]
mov qword [rbp - 0x40], rax
lea rax, [fcn.140023310]
mov qword [rbp - 0x38], rax
mov rax, qword [rdi + 0xa0]
mov qword [rbp - 0x28], rax
mov r15d, pe_nt_image_headers64
lea rcx, [rbp - 0x40]
call fcn.140042860
test al, al
je 0x140042276
mov rbx, qword [rbp - 0x30]
mov edx, dword [rbx + 4]
add rdx, qword [rdi]
mov rcx, r14
call fcn.140042580
test rax, rax
je 0x140040f42
jmp 0x14009c4df
mov r12, qword [rbp - 0x80]
mov r15d, 1
xor r8d, r8d
mov dl, r15b
mov rcx, rsi
call fcn.14002a060
mov rcx, rsi
call fcn.14003ff18
test dword [rsi + 0x150], 0x4000
jne 0x140040fa3
mov rcx, rsi
call fcn.140029ae8
xor r8d, r8d
mov dl, r15b
mov rcx, rsi
call fcn.14003fed4
mov r14d, 0xa64e
cmp word [rsi + 0x48], r14w
je 0x14009c53b
mov ebx, 2
cmp qword [0x1401fcaa8], r13
jne 0x14009c561
mov rcx, rsi
call fcn.1400400e8
neg al
sbb edx, edx
and edx, 0x1c
call fcn.1400400c4
lea r8d, [rdx + 0x1c]
test al, al
cmove r8d, edx
call fcn.140040100
lea ecx, [r8 + 0x1c]
test al, al
cmove ecx, r8d
mov eax, ecx
cmp byte [0x1401faa69], r13b
jne 0x14009c58c
cmp byte [0x1401fcc50], r13b
jne 0x14009c5a1
cmp byte [0x1401fa9b0], r13b
jne 0x14009c5a9
cmp byte [0x1401fcc53], r13b
jne 0x14009c5b1
lea ecx, [rax + 0x1c]
cmp dword [rsi + 0xf58], r13d
cmove ecx, eax
mov eax, 0x40300040
test ecx, ecx
je 0x140041088
mov rdx, qword [rsi + 0x10e0]
mov dword [rsp + 0x28], ecx
mov r8, rdx
mov dword [rsp + 0x20], eax
mov rcx, rsi
test dword [rsi + 0x154], 0x80000
lea r9, str..cvinfo_dbgdir
jne 0x14004107c
lea r9, [0x1401a1e4c]
call fcn.140035cc0
mov qword [0x1401faba8], rax
mov edi, 0x2000
cmp byte [0x1401fa4fa], r13b
jne 0x14009c5c6
cmp dword [rsi + 0x15c], ebx
je 0x14009c69a
cmp byte [0x1401fac74], r13b
jne 0x1400422a9
mov eax, 2
cmp dword [rsi + 0x1b0], eax
je 0x14009c6ac
mov dl, r15b
mov rcx, rsi
call fcn.140040184
mov dl, r15b
mov rcx, rsi
call fcn.140012e04
xor edx, edx
mov rcx, rsi
call fcn.140040184
mov rcx, rsi
call fcn.14003fde4
mov rcx, rsi
call fcn.14003f2e4
mov rcx, rsi
call fcn.14002a754
cmp byte [0x1401fcc50], r13b
jne 0x14009c6b8
mov rdx, qword [rsi + 0xf28]
mov rcx, rsi
call fcn.14003fe2c
cmp word [rsi + 0x48], r14w
je 0x14009c6c6
mov rcx, rsi
call fcn.14003f1d0
xor edx, edx
mov rcx, rsi
call fcn.140012e04
cmp word [rsi + 0x48], r14w
je 0x14009c6db
mov r8b, r15b
mov dl, r15b
mov rcx, rsi
call fcn.14003fed4
mov r12d, 0x10
cmp dword [0x1401faef8], r13d
jne 0x14009c6eb
mov bl, r13b
mov rcx, rsi
call fcn.140058838
cmp dword [0x1401fc648], r13d
jne 0x14009c73b
test bl, bl
jne 0x14009c73b
mov rcx, rsi
call fcn.14002c990
xor edx, edx
mov rcx, rsi
call fcn.140012e04
cmp byte [0x1401f7110], r13b
jne 0x1400411c3
lea rdx, str.___you_must_link_with_VCAsan_lib
mov rcx, rsi
call fcn.1400405a8
mov rdx, rax
mov rcx, qword [rsi + 0xf28]
call fcn.140042580
test rax, rax
jne 0x14009c753
mov rcx, rsi
call fcn.140025084
test al, al
jne 0x1400422e3
mov rcx, rsi
call fcn.140055df4
cmp byte [0x1401fa4b8], r13b
jne 0x14004123d
mov rax, qword [0x1401fa4f0]
test rax, rax
jne 0x14009c775
mov bl, r15b
mov rcx, rsi
call fcn.140003d80
mov rax, qword [0x1401fa4f0]
test rax, rax
je 0x14004123d
mov byte [rsp + 0x20], r13b
lea r9, [rbp]
lea r8, [rbp + 0x50]
xor edx, edx
call fcn.140003e94
test al, al
jne 0x14009c77d
test bl, bl
je 0x14004123d
mov rcx, qword [0x1401fa4f0]
test rcx, rcx
je 0x14004123d
call qword [sym.imp.tbbmalloc.dll_scalable_free]
test dword [rsi + 0x154], edi
jne 0x14009c78f
mov rcx, qword [rsi + 0xfe8]
test rcx, rcx
je 0x14004129b
mov dil, 0x3f
test byte [rcx], r15b
je 0x14009c7d6
cmp byte [0x1401fa4fa], r13b
jne 0x14009c7bd
test byte [rcx], r15b
je 0x14004129b
movzx eax, word [rsi + 0xa4]
mov edx, 0x2000
test word [rsi + 0x5a], dx
jne 0x14009c7fa
cmp ax, r12w
je 0x14009c897
mov rcx, rsi
call fcn.14000c8e4
xor edx, edx
mov rcx, rsi
call fcn.14003e5e8
test dword [rsi + 0x150], 0x10000000
jne 0x14009c92e
cmp byte [0x1401fa4fa], r13b
jne 0x14009c956
call fcn.14003d738
mov rcx, rsi
call fcn.140057694
test dword [rsi + 0x150], 0x200000
jne 0x1400412e9
cmp word [rsi + 0xa4], r15w
je 0x14009c9a2
mov edi, 0x3a64
cmp word [rsi + 0x48], di
je 0x14009c9ad
cmp word [rsi + 0x48], r14w
je 0x14009c9ad
mov rcx, rsi
call fcn.14003d750
mov ebx, eax
mov r9b, r15b
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [rsi + 0xf28]
call fcn.140040408
mov r9b, r15b
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [rsi + 0xf30]
call fcn.140040408
test ebx, ebx
jne 0x14009cafc
cmp dword [0x1401fa4e4], r13d
mov dl, r13b
jne 0x14009cafc
mov rcx, rsi
call fcn.140057c20
xor edx, edx
mov rcx, rsi
call fcn.14002ba18
mov eax, dword [0x1401fa4e4]
test ebx, ebx
jne 0x14009cb11
test eax, eax
jne 0x14009cb04
mov rcx, qword [rsi + 0xfe8]
test rcx, rcx
je 0x14004138c
test byte [rcx], r15b
je 0x14009cb11
cmp byte [0x1401fac40], r13b
jne 0x14009cb27
mov rbx, qword [0x1401fab30]
mov r8d, dword [rbx + 0xa0]
test r8d, r8d
jne 0x14009cb6a
mov r8d, dword [rbx + 0xa4]
test r8d, r8d
jne 0x14009cb7c
mov rcx, rbx
call fcn.1400556f0
mov edx, 0xa8
mov rcx, rbx
call fcn.14005a620
cmp byte [0x1401fac40], r13b
jne 0x14009cb8e
cmp dword [0x1401fa4e4], r13d
jne 0x14009cb8e
lea rdx, [0x1401a1ee0]
mov rcx, rsi
call fcn.140044ca4
mov qword [0x1401fabe0], rax
test rax, rax
jne 0x14009cba5
mov rcx, rsi
call fcn.14002a640
cmp word [rsi + 0x48], di
je 0x14009cbc9
cmp word [rsi + 0x48], r14w
je 0x14009cbc9
mov rcx, rsi
call fcn.14000da3c
mov byte [rsp + 0x50], r13b
cmp qword [0x1401faa40], r13
jne 0x14009cc3b
cmp word [rsi + 0x48], r14w
je 0x14009cd1c
mov rcx, rsi
call fcn.14000e930
mov eax, 2
test byte [rsi + 0x158], al
jne 0x140041486
mov r8, qword [0x1401fa528]
mov eax, dword [r8 + 0x38]
mov rdx, qword [0x1401fa488]
cmp dword [rdx + 0x38], eax
jne 0x140041486
xor r9d, r9d
xor ecx, ecx
call fcn.14000df48
mov rcx, rsi
call fcn.14003edf4
mov rcx, rsi
call fcn.14003ed5c
mov rcx, rsi
call fcn.14003ec84
mov rcx, rsi
call fcn.140058228
mov rcx, rsi
call qword [0x1401fa4a0]
test dword [rsi + 0x150], 0x200000
jne 0x14009cd2a
cmp qword [0x1401fcc68], r13
jne 0x14009cd38
mov r8, qword [0x1401fac28]
test r8, r8
je 0x1400414fe
mov rcx, qword [0x1401fac30]
mov edx, dword [rcx + 0x38]
mov r9d, 0xc0
or edx, r9d
mov eax, dword [r8 + 0x38]
or eax, r9d
cmp edx, eax
jne 0x1400414fe
mov rdx, r8
call fcn.14000dedc
mov rcx, qword [0x1401fabf8]
mov eax, dword [rcx + 0x38]
mov edx, 0x90000000
and eax, edx
cmp eax, edx
je 0x14009ce17
test dword [rsi + 0x150], 0x200000
jne 0x14004153e
mov rdx, qword [0x1401fa528]
mov eax, dword [rdx + 0x38]
mov rcx, qword [0x1401fac20]
cmp dword [rcx + 0x38], eax
jne 0x14004153e
call fcn.14000dedc
cmp byte [0x1401fcc53], r13b
jne 0x14009ce4e
mov rcx, rsi
call fcn.14004b8bc
cmp dword [rsi + 0x194], r13d
jne 0x140041568
mov rax, qword [0x1401fa4c8]
bts dword [rax + 0x38], 0xb
mov rcx, rsi
call fcn.1400400e8
lea r14, [0x1401a3150]
mov r12d, 0x80000
test al, al
jne 0x1400422f5
mov qword [rbp - 0x70], r13
mov rcx, rsi
call fcn.1400400c4
mov edi, 0x14
test al, al
jne 0x140042389
mov rax, qword [0x1401fa4c8]
mov dword [rax + 0x28], r13d
mov qword [rsp + 0x68], r13
mov rcx, rsi
call fcn.140040100
test al, al
je 0x14004161f
test dword [rsi + 0x154], r12d
jne 0x14009ce64
mov r9, r14
mov rdx, qword [rsi + 0x10e0]
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rbx, rax
mov qword [rsp + 0x68], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x14004160f
mov r9b, r15b
lea r8, str._Coff_contribution_info_
mov rdx, rbx
call fcn.14002d84c
mov eax, dword [rsi + 0x150]
bt eax, 0x18
jae 0x14009ce85
mov qword [rbp - 0x68], r13
cmp byte [0x1401fcc50], r13b
jne 0x14009cea9
cmp byte [0x1401fa9b0], r13b
jne 0x14009cf07
mov qword [rsp + 0x78], r13
mov ecx, 0x3a64
cmp word [rsi + 0x48], cx
je 0x14009cf70
mov eax, 0xa64e
cmp word [rsi + 0x48], ax
je 0x14009cf70
mov qword [rsp + 0x70], r13
cmp byte [0x1401fcc53], r13b
jne 0x14009cfc3
mov qword [rbp - 0x20], r13
cmp dword [rsi + 0xf58], r13d
jne 0x14009d04d
mov qword [rsp + 0x58], r13
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rax
test dword [rsi + 0x150], 0x8000000
je 0x1400416ed
mov rdx, qword [rsi + 0x10e0]
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
lea r9, [0x1401a52d8]
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x1400416ed
mov r9b, r15b
lea r8, str._Volatile_Meta_
mov rdx, rbx
call fcn.14002d84c
mov rcx, rsi
call fcn.1400588b4
cmp byte [0x1401fa4b8], r13b
jne 0x1400424f1
mov eax, 0xd
lea ecx, [rax + 3]
test byte [rsi + 0x278], cl
jne 0x14004171f
xor eax, eax
mov rcx, qword [rbp + 0x1420]
xor rcx, rsp
call fcn.14005a600
lea r11, [rsp + 0x1540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r14, qword [0x1401fc590]
mov r15, qword [rsp + 0x70]
add r15, 8
mov qword [rsp + 0x70], r15
lea rax, [rbp - 0x10]
cmp r15, rax
jne 0x140040f00
jmp 0x140040f6f
mov qword [0x1401fb7e0], r13
jmp 0x140040b02
mov bl, byte [0x1401fa4b8]
mov dil, byte [0x1401f7110]
mov byte [0x1401fa4b8], r13b
mov byte [0x1401f7110], r13b
mov rcx, rsi
call fcn.14003dc40
mov byte [0x1401fa4b8], bl
mov byte [0x1401f7110], dil
mov edi, 0x2000
jmp 0x1400410b3
cmp qword [0x1401fab10], r13
jne 0x1400411db
jmp 0x1400411d3
mov rdx, qword [rsi + 0x10e0]
test dword [rsi + 0x154], r12d
lea r9, str..cvinfo_debug
cmove r9, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rdx, rax
mov qword [0x1401fabb0], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x14004234b
mov r9b, r15b
lea r8, str._CV_signature_
call fcn.14002d84c
mov rcx, qword [rsi + 0x1128]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
inc rax
mov ecx, dword [rsi + 0x190]
cmp rax, rcx
jbe 0x140042377
mov rcx, qword [rsi + 0x1128]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
lea rcx, [r15 + rax]
add ecx, 0x18
mov rax, qword [0x1401fabb0]
mov dword [rax + 8], ecx
jmp 0x140041585
mov rdx, qword [rsi + 0x10e0]
test dword [rsi + 0x154], r12d
lea r9, str..cvinfo_feat
cmove r9, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rbx, rax
mov qword [rbp - 0x70], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x1400423df
mov r9b, r15b
lea r8, str._Compiler_feature_signature_
mov rdx, rbx
call fcn.14002d84c
mov dword [rbx + 8], edi
jmp 0x14004159e
mov rcx, rsi
call fcn.14005717c
jmp 0x140041702
test dword [rsi + 0x1270], 0x40000
jne 0x14004229d
jmp 0x140040af5
cmp byte [0x1401fcb00], r13b
jne 0x14009bd73
cmp byte [0x1401fac60], r13b
jne 0x14009bd78
call fcn.14011d5f8
call fcn.14000fa58
test al, al
je 0x140040b17
call fcn.14010d340
nop
jmp 0x140040b17
call fcn.14000fa58
test al, al
je 0x140040b24
call fcn.14010d620
nop
jmp 0x140040b24
lea rdx, [0x1401c8530]
call fcn.1400c1c40
nop
jmp 0x140040b3e
test r15, r15
je 0x140040b90
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov edi, eax
test eax, eax
js 0x140040b90
mov edx, r13d
mov eax, 0xa64e
cmp word [rsi + 0x48], ax
jne 0x14009bdf0
mov al, byte [0x1401fce95]
neg al
sbb edx, edx
add edx, 2
lea r13, [r14 + 0xa8]
xor eax, eax
mov ecx, eax
cmp dword [rbp - 0x60], eax
setne cl
neg dword [rsp + 0x68]
sbb eax, eax
and eax, 2
or ecx, eax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], ecx
mov r9, qword [rbp - 0x20]
mov r8, r15
mov rdx, r12
lea rcx, [r14 + 0xb0]
call fcn.140116608
mov edi, eax
test eax, eax
js 0x14009be59
lea rdx, [r14 + 8]
mov qword [rdx + 8], rsi
mov rcx, qword [r13]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov edi, eax
xor r13d, r13d
mov eax, r13d
test edi, edi
setns al
mov dword [r14], eax
jmp 0x14009be5f
mov eax, dword [r14]
xor r13d, r13d
test eax, eax
jne 0x140040b90
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
jmp 0x140040b90
mov r8d, edi
mov edx, 0x537
xor ecx, ecx
call fcn.14005e3e8
int3
mov dword [rdi + 4], r15d
jmp 0x140040bce
mov rdx, qword [0x1401fa9c0]
lea rcx, [rbp - 0x20]
call fcn.1400c020c
mov r8, qword [rax]
lea rdx, [0x1401c8540]
mov rcx, qword [0x1401fb8f0]
call fcn.1400c1c54
mov ebx, r13d
mov dword [rsp + 0x58], ebx
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140040be7
call qword [sym.imp.tbbmalloc.dll_scalable_free]
nop
jmp 0x140040be7
mov dword [rdi + 4], r13d
jmp 0x140040bff
movzx ecx, word [rsi + 0xa4]
mov edx, ecx
sub edx, 1
je 0x140040c11
sub edx, 1
je 0x140040c11
sub edx, 1
je 0x140040c11
cmp edx, 4
je 0x140040c11
call fcn.1401351e8
mov r9, rax
lea r8, str.MANIFESTUAC
mov qword [rsp + 0x20], r8
mov edx, 0x50f
xor ecx, ecx
call fcn.14005e3e8
int3
call fcn.140130e30
nop
jmp 0x140040c1c
call fcn.14003f1b4
test al, al
jne 0x140040c3e
mov dl, r15b
call fcn.1400f703c
nop
jmp 0x140040c3e
mov rdx, qword [rsi + 0xf30]
mov rcx, rsi
call fcn.14003fe2c
nop
jmp 0x140040c88
or dword [rax], edi
jmp 0x140040c9d
lea r8, [rsp + 0x50]
mov rdx, qword [rsi + 0xfe8]
mov rcx, rsi
call fcn.140055c14
mov rdx, rax
mov rcx, qword [rsi + 0xf30]
call fcn.140042580
test rax, rax
je 0x140040cb6
or dword [rax], edi
jmp 0x140040cb6
mov qword [rsp + 0x78], r13
mov rcx, qword [0x1401fa978]
test rcx, rcx
je 0x14009bfd3
mov rax, qword [rcx]
lea r8, [rsp + 0x78]
lea rdx, [0x1401c9ff8]
call qword [rax]
mov ecx, eax
call fcn.14003394c
test al, al
je 0x14009bfd3
xor ecx, ecx
call fcn.14005e418
int3
mov rdi, qword [rsi + 0xf28]
mov r14, qword [rdi + 0x70]
mov edx, 0x18
lea ecx, [rdx - 0x10]
call fcn.14004881c
test rax, rax
jne 0x14009bffd
mov edx, 0x44e
xor ecx, ecx
call fcn.14005e3e8
int3
mov qword [rdi + 0x70], rax
mov qword [rax + 0x10], r14
mov rax, qword [rdi + 0x70]
mov dword [rax], r13d
mov rax, qword [rdi + 0x70]
mov dword [rax + 4], r13d
mov rax, qword [rdi + 0x70]
mov qword [rax + 8], r13
mov r12d, pe_nt_image_headers64
mov r10, qword [rsi + 0xf28]
mov rcx, qword [r10 + 0x70]
mov eax, dword [r10 + 0x54]
cmp dword [rcx + 4], eax
jae 0x14009c09d
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x14009c095
mov rax, qword [rdx]
mov qword [rcx + 8], rax
mov rax, qword [r10 + 0x70]
add dword [rax + 4], r15d
jmp 0x14009c0a0
mov r9, qword [r10 + 0x70]
mov r8d, dword [r9]
mov cl, byte [r10 + 0x64]
mov edx, r8d
shr rdx, cl
mov rax, qword [r10 + 0x78]
mov ecx, dword [r10 + 0x60]
and rcx, r8
mov rax, qword [rax + rdx*8]
mov rdx, qword [rax + rcx*8]
lea eax, [r8 + 1]
mov dword [r9], eax
mov rcx, qword [r10 + 0x70]
test rdx, rdx
je 0x14009c095
add dword [rcx + 4], r15d
mov rcx, qword [r10 + 0x70]
mov rax, qword [rdx]
mov qword [rcx + 8], rax
jmp 0x14009c0a0
mov eax, dword [r10 + 0x50]
cmp dword [rcx], eax
jb 0x14009c050
mov rdx, r13
lea rax, [rdx + 0x10]
neg rdx
sbb rdi, rdi
and rdi, rax
mov rdx, qword [rsi + 0xf28]
je 0x14009c238
mov r14d, dword [rdi + 4]
add r14, qword [rdx]
lea rdx, str.__iexit_thunk_for__
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14009c0d9
or dword [rdi], r12d
mov rcx, r14
call fcn.1400bc1b4
test al, al
je 0x14009c101
test byte [rdi], r15b
je 0x14009c10a
cmp qword [0x1401fa978], r13
je 0x14009c101
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 0x18]
test byte [rdi], r15b
jne 0x14009c022
mov rcx, r14
call fcn.1400bcfb8
mov rdx, r14
test al, al
je 0x14009c12e
lea rcx, [rbp]
call fcn.1400bccbc
nop
mov r14d, 2
or ebx, r14d
jmp 0x14009c140
lea rcx, [rbp - 0x60]
call fcn.1400b22a4
or ebx, 4
mov r14d, 2
mov dword [rsp + 0x58], ebx
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
test bl, 4
je 0x14009c184
and ebx, 0xfffffffb
mov dword [rsp + 0x58], ebx
lea rcx, [rbp - 0x60]
call fcn.1400b8ed0
nop
test r14b, bl
je 0x14009c199
and ebx, 0xfffffffd
mov dword [rsp + 0x58], ebx
lea rcx, [rbp]
call fcn.1400b8ed0
cmp qword [rbp - 0x30], r13
sete al
mov r14d, 0x10
test al, al
jne 0x14009c1f1
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], r14
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400bcdf8
nop
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], r14
cmovae rdx, qword [rbp - 0x20]
mov rcx, qword [rsi + 0xf28]
call fcn.140042580
test rax, rax
je 0x14009c1e7
test byte [rax], r15b
je 0x14009c1e7
or dword [rdi], r12d
lea rcx, [rbp - 0x20]
call fcn.1400b8ed0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, r14
jb 0x14009c022
inc rdx
mov qword [rsp + 0x70], rdx
mov rcx, qword [rbp - 0x40]
mov qword [rbp - 0x60], rcx
cmp rdx, 0x1000
jb 0x14009c22e
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.14004e688
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x60]
call fcn.14005a620
jmp 0x14009c022
mov rcx, qword [rdx + 0x70]
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x70], rax
call qword [sym.imp.tbbmalloc.dll_scalable_free]
lea rbx, [0x1401c9eb0]
mov qword [rbp], rbx
lea rax, [rbp]
mov qword [rbp + 0x38], rax
lea r9, [rbp]
mov r8, qword [rsi + 0xf30]
mov rdx, qword [rsi + 0xf28]
mov rcx, rsi
call fcn.14011a944
mov qword [rbp], rbx
lea rax, [rbp]
mov qword [rbp + 0x38], rax
lea r9, [rbp]
mov r8, qword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf30]
mov rcx, rsi
call fcn.14011a944
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
mov r12, qword [rbp - 0x80]
je 0x14009c2b3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
movzx eax, word [rsi + 0x48]
mov r14d, 0xa64e
jmp 0x140040cc4
mov rcx, rsi
call fcn.14010f278
nop
jmp 0x140040ced
test byte [rsi + 0x1a8], r15b
je 0x14009c2f2
mov rcx, qword [rsi + 0xfe8]
test rcx, rcx
je 0x140040d25
test byte [rcx], r15b
jne 0x140040d25
mov r8d, eax
mov edx, 0x460
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
cmp ax, r14w
jne 0x14009c32e
mov rcx, qword [rsi + 0xfe8]
test rcx, rcx
je 0x14009c32e
mov rax, qword [0x1401fcc18]
test rax, rax
cmove rax, rcx
mov qword [0x1401fcc18], rax
mov eax, dword [0x1401fa4e4]
jmp 0x140040d25
test byte [rsi + 0x1a8], bl
jne 0x140040d33
mov edx, 0x491
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov edx, 0x527
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov edx, 0x534
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov edx, 0xff8
mov rcx, qword [0x1401fa9c0]
call fcn.1400ebbc8
nop
jmp 0x140040d6a
lea rcx, [0x1401fcbb8]
call fcn.14002a0a4
mov rax, qword [0x1401fcbb8]
mov byte [rax + 0xb0], r15b
jmp 0x140040da7
bts eax, 0x14
mov dword [rsi + 0x1270], eax
jmp 0x140040dd7
call fcn.14004ff34
nop
jmp 0x140040e13
lea rbx, [rcx + 0x18]
cmp byte [rbx + 0x52], r13b
jne 0x14009c3f3
mov rcx, qword [rbx + 0x68]
call fcn.140004270
xor edx, edx
lea r8d, [rdx + 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsi + 0x13c0]
call fcn.14000ae48
mov rcx, qword [rsi + 0x13c0]
add rcx, 0x88
call fcn.140004210
mov qword [rsi + 0x13c0], r13
jmp 0x140040e2b
lea rcx, [0x1401f7620]
call fcn.140057104
nop
jmp 0x140040e4a
mov qword [0x1401f7630], r13
add r8, 0x10
mov edx, 0xffffff80
mov rcx, qword [0x1401f7620]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x1401f7638]
mov rax, qword [0x1401f7620]
mov byte [rax + rcx], 0xff
mov rcx, qword [0x1401f7638]
mov rax, rcx
shr rax, 3
sub rcx, rax
sub rcx, qword [0x1401f7630]
mov qword [0x1401f7648], rcx
jmp 0x140040e4a
lea rcx, [0x1401f7a20]
call fcn.140057ca4
nop
jmp 0x140040e7f
mov qword [0x1401f7a30], r13
add r8, 0x10
mov edx, 0xffffff80
mov rcx, qword [0x1401f7a20]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x1401f7a38]
mov rax, qword [0x1401f7a20]
mov byte [rax + rcx], 0xff
mov rcx, qword [0x1401f7a38]
mov rax, rcx
shr rax, 3
sub rcx, rax
sub rcx, qword [0x1401f7a30]
mov qword [0x1401f7a48], rcx
jmp 0x140040e7f
or dword [rbx], r15d
cmp word [rsi + 0x48], r12w
jne 0x140040f42
cmp byte [rdi + 0xb0], r13b
jne 0x140040f42
mov rdx, rbx
mov rcx, rsi
call fcn.1400f6598
test rax, rax
je 0x140040f42
mov rcx, qword [rax]
test rcx, rcx
je 0x140040f42
cmp rbx, qword [rax + 8]
jne 0x14009c526
or dword [rcx], r15d
mov rcx, qword [rax]
cmp rbx, rcx
jne 0x140040f42
mov rax, qword [rax + 8]
or dword [rax], r15d
jmp 0x140040f42
mov rcx, rsi
call fcn.140119afc
mov rcx, rsi
call fcn.140111a38
mov rcx, rsi
call fcn.14010e9cc
mov rcx, rsi
call fcn.140111510
nop
jmp 0x140040fc2
mov eax, dword [rsi + 0x278]
bt rax, 0x14
jae 0x140040fd4
cmp dword [rsi + 0x1b0], ebx
je 0x140040fd4
mov rcx, rsi
call fcn.14011c320
nop
jmp 0x140040fd4
cmp byte [0x1401facca], r13b
jne 0x140041010
lea eax, [rcx + 0x1c]
jmp 0x140041010
add eax, 0x1c
jmp 0x14004101d
add eax, 0x1c
jmp 0x14004102a
cmp qword [0x1401fcc38], r13
je 0x140041037
add eax, 0x1c
jmp 0x140041037
mov rcx, rsi
call fcn.14003f1b4
test al, al
jne 0x14009c5d9
xor edx, edx
call fcn.1400f703c
mov rcx, rsi
call fcn.14003c864
mov rcx, rsi
call fcn.140119fc4
mov r9, qword [0x1401fabd8]
cmp dword [r9 + 0x30], r13d
je 0x14009c62a
mov rcx, rsi
call fcn.1400301b4
test al, al
je 0x14009c62a
call fcn.14003f1b4
lea rcx, str.pure
lea r8, [0x1401baf58]
test al, al
cmove r8, rcx
mov edx, 0x51e
mov rcx, qword [r9 + 0x20]
call fcn.1400c7af4
int3
test byte [rsi + 0x1c4], 0x10
je 0x14009c64b
mov ecx, dword [rsi + 0x15c]
call fcn.1400cb7b8
mov rdx, rax
mov ecx, 0x2350
call fcn.14000761c
mov eax, dword [rsi + 0x278]
test rdi, rax
jne 0x1400410a6
test byte [rsi + 0x158], 0x80
je 0x1400410a6
call fcn.1400c8e84
test al, al
je 0x1400410a6
btr dword [rsi + 0x158], 7
mov rcx, rsi
call fcn.14003149c
test al, al
jne 0x1400410a6
mov dl, r15b
call fcn.14002bafc
nop
jmp 0x1400410a6
mov edx, 0x509
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov qword [str.SetupPhase], r12
jmp 0x14004223f
mov rcx, rsi
call fcn.1400f6ca4
nop
jmp 0x140041109
mov rdx, qword [rsi + 0xf30]
mov rcx, rsi
call fcn.14003fe2c
nop
jmp 0x140041123
xor edx, edx
mov rcx, rsi
call fcn.140040184
nop
jmp 0x140041140
test byte [rsi + 0x154], r12b
jne 0x140041161
mov bl, r15b
mov r9, qword [0x1401fae98]
xor r8d, r8d
lea rdx, [0x1401faf00]
lea rcx, [0x1401faef0]
call fcn.1401316e0
test al, al
je 0x140041161
mov ecx, dword [rsi + 0x1270]
shr ecx, 9
and cl, r15b
movzx edx, word [rsi + 0x48]
call fcn.14011a1a0
nop
jmp 0x140041164
mov r8b, bl
mov rdx, qword [rsi + 0xf20]
mov rcx, rsi
call fcn.14011a688
nop
jmp 0x140041181
test byte [rax], r15b
je 0x1400411c3
lea r8, str._DEBUG
mov edx, 0x10ce
xor ecx, ecx
call fcn.1400ebbc8
nop
jmp 0x1400411c3
mov bl, r13b
jmp 0x140041206
mov rcx, qword [0x1401fa4f0]
call fcn.1400ba5e4
nop
jmp 0x140041227
cmp qword [0x1401fcff0], r13
jne 0x14009c7b2
lea rdx, str..map
mov rcx, qword [0x1401fa9c0]
call fcn.140003ddc
mov qword [0x1401fcff0], rax
call fcn.140126ce4
nop
jmp 0x140041249
mov rax, qword [0x1401fa9b8]
test rax, rax
je 0x14004126e
cmp byte [rax], dil
je 0x14004126e
mov rax, qword [rsi + 0xf28]
mov edx, dword [rcx + 4]
add rdx, qword [rax]
mov r8b, r15b
mov rcx, rsi
call fcn.1401126f4
mov rcx, qword [rsi + 0xfe8]
jmp 0x14004126e
sub ax, 2
cmp ax, r15w
ja 0x14009c889
mov eax, 0x14c
cmp word [rsi + 0x48], ax
jne 0x14009c889
mov rax, qword [rsi + 0xf28]
mov ebx, dword [rcx + 4]
add rbx, qword [rax]
cmp byte [rbx], dil
je 0x14009c889
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
cmp byte [rbx], 0x5f
jne 0x14009c851
cmp rax, 5
jb 0x14009c851
lea rcx, [rax - 3]
add rcx, rbx
lea rdx, [0x1401c98d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
test eax, eax
je 0x14009c889
mov rcx, rbx
call fcn.140046110
mov rbx, rax
mov qword [rbp - 0x20], rax
mov r9d, 0xc
mov r8, rax
mov edx, 0xff6
mov rcx, qword [0x1401fa9c0]
call fcn.1400ebbc8
nop
test rbx, rbx
je 0x14009c889
mov rcx, rbx
call qword [sym.imp.tbbmalloc.dll_scalable_free]
mov rcx, rsi
call fcn.140137db8
nop
jmp 0x140041293
mov eax, 0x14c
cmp word [rsi + 0x48], ax
jne 0x140041293
mov rax, qword [rsi + 0xf28]
mov ebx, dword [rcx + 4]
add rbx, qword [rax]
cmp byte [rbx], dil
je 0x140041293
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
cmp byte [rbx], 0x5f
jne 0x14009c8ec
cmp rax, 4
jb 0x14009c8ec
lea rcx, [rax - 2]
add rcx, rbx
lea rdx, [0x1401c98d4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
test eax, eax
je 0x140041293
mov rcx, rbx
call fcn.140046110
mov rbx, rax
mov qword [rbp - 0x20], rax
mov r9d, 4
mov r8, rax
mov edx, 0xff6
mov rcx, qword [0x1401fa9c0]
call fcn.1400ebbc8
nop
test rbx, rbx
je 0x140041293
mov rcx, rbx
call qword [sym.imp.tbbmalloc.dll_scalable_free]
nop
jmp 0x140041293
cmp byte [0x1401fa4b8], r13b
je 0x1400412b5
cmp byte [0x1401fa4e1], r13b
jne 0x1400412b5
mov rcx, rsi
call fcn.14010dfa0
nop
jmp 0x1400412b5
mov rcx, rsi
call fcn.14003f1b4
test al, al
jne 0x14009c967
call fcn.1400c99c0
mov eax, dword [rsi + 0x278]
bt rax, 0x19
jae 0x14009c97c
mov rcx, rsi
call fcn.1400cb3d0
test dword [rsi + 0x154], 0x20000
jne 0x1400412c2
mov rcx, rsi
call fcn.1400cb194
mov rcx, rsi
call fcn.14003cc8c
nop
jmp 0x1400412c2
call fcn.14010d030
nop
jmp 0x1400412e9
mov rcx, rsi
call fcn.14010f278
cmp word [rsi + 0x48], r14w
jne 0x140041303
xor edx, edx
mov rcx, rsi
call fcn.140040184
xor edx, edx
mov rcx, rsi
call fcn.140012e04
mov rcx, rsi
call fcn.14011207c
mov rbx, qword [rsi + 0xf28]
mov rdi, qword [rbx + 0x70]
mov edx, 0x18
lea ecx, [rdx - 0x10]
call fcn.14004881c
test rax, rax
je 0x14009de4e
mov qword [rbx + 0x70], rax
mov qword [rax + 0x10], rdi
mov rax, qword [rbx + 0x70]
mov dword [rax], r13d
mov rax, qword [rbx + 0x70]
mov dword [rax + 4], r13d
mov rax, qword [rbx + 0x70]
mov qword [rax + 8], r13
mov r14d, pe_nt_image_headers64
mov r10, qword [rsi + 0xf28]
mov rcx, qword [r10 + 0x70]
mov eax, dword [r10 + 0x54]
cmp dword [rcx + 4], eax
jae 0x14009ca9d
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x14009ca95
mov rax, qword [rdx]
mov qword [rcx + 8], rax
mov rax, qword [r10 + 0x70]
add dword [rax + 4], r15d
jmp 0x14009caa0
mov r9, qword [r10 + 0x70]
mov r8d, dword [r9]
mov cl, byte [r10 + 0x64]
mov edx, r8d
shr rdx, cl
mov rax, qword [r10 + 0x78]
mov ecx, dword [r10 + 0x60]
and rcx, r8
mov rax, qword [rax + rdx*8]
mov rdx, qword [rax + rcx*8]
lea eax, [r8 + 1]
mov dword [r9], eax
mov rcx, qword [r10 + 0x70]
test rdx, rdx
je 0x14009ca95
add dword [rcx + 4], r15d
mov rcx, qword [r10 + 0x70]
mov rax, qword [rdx]
mov qword [rcx + 8], rax
jmp 0x14009caa0
mov eax, dword [r10 + 0x50]
cmp dword [rcx], eax
jb 0x14009ca50
mov rdx, r13
lea rax, [rdx + 0x10]
neg rdx
sbb rbx, rbx
and rbx, rax
mov rdx, qword [rsi + 0xf28]
je 0x14009cada
mov ecx, dword [rbx + 4]
add rcx, qword [rdx]
lea rdx, str.__iexit_thunk_for__
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14009ca22
or dword [rbx], r14d
jmp 0x14009ca22
mov rcx, qword [rdx + 0x70]
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x70], rax
call qword [sym.imp.tbbmalloc.dll_scalable_free]
mov edi, 0x3a64
mov r14d, 0xa64e
jmp 0x140041303
mov dl, r15b
jmp 0x14004134f
test byte [rsi + 0x1a8], r15b
jne 0x140041377
lea r8d, [rbx + rax]
mov edx, 0x460
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov eax, 2
test byte [rsi + 0x1a8], al
jne 0x14009cb46
mov edx, 0x491
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
cmp byte [0x1401fa4b8], r13b
je 0x140041399
mov edx, 0xfe7
mov rcx, qword [0x1401fa9c0]
call fcn.1400ebbc8
nop
jmp 0x140041399
mov edx, 0x527
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov edx, 0x534
mov rcx, qword [0x1401fa9c0]
call fcn.14005e3e8
int3
mov edx, 0xff8
mov rcx, qword [0x1401fa9c0]
call fcn.1400ebbc8
nop
jmp 0x1400413ef
cmp word [rsi + 0xa4], r15w
jne 0x14009cbb4
bts dword [rax + 0x38], 0x19
lea rdx, [rsi + 0x2f0]
mov rcx, rax
call fcn.140054304
nop
jmp 0x14004140e
mov qword [rsp + 0x20], r13
mov edi, 0x60300020
mov r9d, edi
lea r8, str..wowthk
xor edx, edx
mov rcx, rsi
call fcn.14000e570
mov rcx, rax
call fcn.14000e388
mov rbx, rax
mov qword [rsp + 0x20], r13
mov r9d, edi
lea r8, str..text
xor edx, edx
mov rcx, rsi
call fcn.14000e570
mov rcx, rax
call fcn.14000e388
test rbx, rbx
je 0x14004142b
test rax, rax
je 0x14004142b
xor r9d, r9d
mov r8, rax
mov rdx, rbx
xor ecx, ecx
call fcn.14000df48
nop
jmp 0x14004142b
lea rax, [fcn.140044d14]
mov qword [rbp - 0x40], rax
lea rax, [fcn.140023310]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], r13
mov rax, qword [rsi + 0x2f0]
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x40]
call fcn.140044d14
test al, al
je 0x14009cc9c
lea rdx, [0x1401a27b4]
mov rbx, qword [rbp - 0x30]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
test eax, eax
jne 0x14009cc8c
lea r8, [rsp + 0x50]
jmp 0x14009cc8f
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call fcn.14010c4fc
jmp 0x14009cc60
mov rax, qword [0x1401faa40]
test rax, rax
je 0x140041445
mov r14, r13
mov rbx, qword [0x1401faa30]
mov ecx, pe_nt_image_headers64
mov r12d, 0x2c
test word [rbx + 0x18], cx
jne 0x14009cd05
mov edx, r12d
mov rcx, qword [rbx + 8]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rdi, rax
test rax, rax
je 0x14009cce0
mov word [rax], r13w
mov r8, qword [rbx + 8]
mov edx, 0xfc7
xor ecx, ecx
call fcn.1400ebbc8
mov ecx, pe_nt_image_headers64
test rdi, rdi
je 0x14009ccfe
mov word [rdi], r12w
mov rax, qword [0x1401faa40]
add r14, r15
mov rbx, qword [rbx + 0x20]
cmp r14, rax
jb 0x14009ccc1
mov r14d, 0xa64e
jmp 0x140041445
mov rcx, rsi
call fcn.140110030
nop
jmp 0x140041450
mov rcx, rsi
call fcn.140111234
nop
jmp 0x1400414bf
cmp byte [0x1401fa4b8], r13b
jne 0x1400414cc
mov rax, qword [0x1401fac08]
mov rbx, qword [rax + 0x18]
test rbx, rbx
je 0x1400414cc
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.14003eb9c
mov r14d, dword [rbp - 0x60]
test r14d, r14d
je 0x14009cdb1
mov rdi, r13
lea rdx, [0x1401a1d88]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
test eax, eax
je 0x14009cd91
mov rdi, rbx
mov rbx, qword [rbx + 0x18]
test rbx, rbx
jne 0x14009cd71
mov rax, qword [rbx + 0x18]
mov rcx, qword [0x1401fac08]
test rdi, rdi
je 0x14009cda7
mov qword [rdi + 0x18], rax
jmp 0x14009cdab
mov qword [rcx + 0x18], rax
mov qword [rbx + 0x18], r13
jmp 0x14009cde0
mov r8, qword [0x1401fac28]
mov rdx, qword [0x1401fac08]
lea rcx, [0x1401a1d88]
call fcn.14000c440
mov rax, qword [0x1401fac28]
mov qword [0x1401fabe8], rax
mov rcx, qword [0x1401fac08]
mov rdx, qword [0x1401fa528]
call fcn.14000dedc
mov rax, qword [0x1401fa528]
mov qword [0x1401fabf0], rax
test r14d, r14d
je 0x1400414cc
mov rax, qword [0x1401fac08]
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], r13
jmp 0x1400414cc
mov rcx, qword [rcx]
call fcn.140046110
mov rbx, rax
mov qword [rbp - 0x20], rax
mov r8, rax
mov edx, 0x108e
xor ecx, ecx
call fcn.1400ebbc8
nop
test rbx, rbx
je 0x140041517
mov rcx, rbx
call qword [sym.imp.tbbmalloc.dll_scalable_free]
nop
jmp 0x140041517
mov rcx, rsi
call fcn.14010f964
mov rcx, rsi
call fcn.140129b28
nop
jmp 0x14004154b
test dword [rsi + 0x150], 0x1000000
lea rax, str..cvinfo_pgo
lea r9, str..cvinfo_coffcontrib
cmove r9, rax
jmp 0x1400415ca
bt eax, 0x19
jae 0x14009ce98
mov rcx, rsi
call fcn.14010cc64
mov dword [rbx + 8], eax
jmp 0x14009ce9f
mov dword [rbx + 8], 4
mov qword [rsp + 0x68], rbx
jmp 0x14004161f
mov rdx, qword [rsi + 0x10e0]
test dword [rsi + 0x154], r12d
lea r9, str..cvinfo_mpx
cmove r9, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rbx, rax
mov qword [rbp - 0x68], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x14009ceff
mov r9b, r15b
lea r8, str._MPX_info_
mov rdx, rbx
call fcn.14002d84c
mov dword [rbx + 8], edi
jmp 0x140041630
mov rdx, qword [rsi + 0x10e0]
test dword [rsi + 0x154], r12d
lea r9, str..cvinfo_repro
cmove r9, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rdx, rax
mov qword [rsi + 0x1348], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x14009cf64
mov r9b, r15b
lea r8, str._PE_repro_
call fcn.14002d84c
mov rdx, qword [rsi + 0x1348]
mov dword [rdx + 8], 0x24
jmp 0x14004163d
mov rdx, qword [rsi + 0x10e0]
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40400040
lea r9, str..rdata_zzhm
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rdx, rax
mov qword [rsp + 0x78], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x140041660
mov r9b, r15b
lea r8, str._Hybrid_Metadata_
call fcn.14002d84c
nop
jmp 0x140041660
cmp qword [0x1401fcc38], r13
je 0x140041672
mov rdx, qword [rsi + 0x10e0]
test dword [rsi + 0x154], r12d
lea r9, str..cvinfo_spgoid
cmove r9, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rdx, rax
mov qword [rsp + 0x70], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x14009d029
mov r9b, r15b
lea r8, str._SPGO_PSID_
call fcn.14002d84c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [0x1401fcc38]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x14009d034
lea eax, [rax*2 + 2]
mov dword [rdx + 8], eax
jmp 0x140041672
mov rdx, qword [rsi + 0x10e0]
test dword [rsi + 0x154], r12d
lea r9, str..cvinfo_exdllchar
cmove r9, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x40300040
mov r8, rdx
mov rcx, rsi
call fcn.140035cc0
mov rdi, rax
mov qword [rbp - 0x20], rax
mov rcx, rsi
call fcn.14003149c
test al, al
je 0x14009d0a3
mov r9b, r15b
lea r8, str._ExDllCharacteristics_
mov rdx, rdi
call fcn.14002d84c
mov dword [rdi + 8], 4
jmp 0x140041683
mov edx, 0x44e
xor ecx, ecx
call fcn.14005e3e8
int3