Function at 0x140005a90
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x370
mov rax, qword [0x14000e028]
xor rax, rsp
mov qword [rsp + 0x360], rax
xor edi, edi
mov dword [rsp + 0x30], edi
lea edx, [rdi + 2]
xor ecx, ecx
call sub.api_ms_win_core_com_l1_1_0.dll_CoInitializeEx
test eax, eax
js 0x140006a73
lea rax, [0x14000edf8]
mov qword [rsp + 0x130], rax
lock inc qword [0x14000edf8]
mov rcx, qword [0x14000edf0]
test rcx, rcx
je 0x140005b46
mov qword [rsp + 0xe8], rdi
mov rax, qword [rcx]
lea rdx, [rsp + 0xe8]
mov rax, qword [rax + 0x38]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006a7b
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0xe
lock dec qword [0x14000edf8]
mov ebx, dword [rsp + 0x30]
jmp 0x140005b7b
lock dec qword [0x14000edf8]
lea rax, [0x140001020]
mov qword [rsp + 0x118], rax
lea r8, [rsp + 0x118]
lea rdx, [rsp + 0x38]
lea rcx, [0x14000edf0]
call fcn.1400014f0
mov ebx, 2
or ebx, 1
mov dword [rsp + 0x48], edi
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
mov rax, qword [rax + 0x30]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006a83
cmp dword [rsp + 0x48], 2
jne 0x140006a1a
mov qword [rsp + 0x70], rdi
mov rcx, qword [rsp + 0x38]
test rcx, rcx
jne 0x140005bc0
mov rcx, rdi
jmp 0x140005bf3
mov qword [rsp + 0xf0], rdi
mov rax, qword [rcx]
lea r8, [rsp + 0xf0]
lea rdx, [0x1400096d0]
mov rax, qword [rax]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006a8b
mov rcx, qword [rsp + 0xf0]
or ebx, 0x20
or ebx, 0x10
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdi
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
mov rax, qword [rax + 0x30]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006a92
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x60], rax
or ebx, 0x40
mov dword [rsp + 0x30], ebx
lea rax, [0x14000edc8]
mov qword [rsp + 0x138], rax
lock inc qword [0x14000edc8]
mov rcx, qword [0x14000edc0]
test rcx, rcx
je 0x140005c99
mov qword [rsp + 0xc0], rdi
mov rax, qword [rcx]
lea rdx, [rsp + 0xc0]
mov rax, qword [rax + 0x58]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006a9a
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x40], rax
or dword [rsp + 0x30], 0x700
lock dec qword [0x14000edc8]
mov esi, dword [rsp + 0x30]
jmp 0x140005cd1
lock dec qword [0x14000edc8]
lea rax, [0x140001070]
mov qword [rsp + 0x120], rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x40]
lea rcx, [0x14000edc0]
call fcn.140001650
mov esi, dword [rsp + 0x30]
bts esi, 8
bts esi, 7
mov qword [rsp + 0xc8], rdi
mov r14, qword [rsp + 0x78]
mov rax, qword [r14]
lea rdx, [rsp + 0xc8]
mov rcx, r14
mov rax, qword [rax + 0x30]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006aa2
mov rbx, qword [rsp + 0xc8]
mov qword [rsp + 0x88], rbx
bts esi, 0xb
mov dword [rsp + 0x30], esi
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
je 0x1400068e2
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x214]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x210], 0x114
lea rcx, [rsp + 0x210]
mov rax, r15
call qword [case.0x140004543.0]
test eax, eax
js 0x1400068e2
cmp dword [rsp + 0x214], 0xa
jb 0x1400068e2
cmp dword [rsp + 0x21c], 0x55f0
jb 0x1400068e2
mov byte [rsp + 0x34], 0
mov rax, qword [rbx]
lea r8, [rsp + 0x34]
mov rdx, qword [rsp + 0x40]
mov rcx, rbx
mov rax, qword [rax + 0x50]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006aaa
cmp byte [rsp + 0x34], 0
je 0x1400068bc
mov qword [rsp + 0xd0], rdi
mov rax, qword [rbx]
lea rdx, [rsp + 0xd0]
mov rcx, rbx
mov rax, qword [rax + 0x98]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006ab2
mov rbx, qword [rsp + 0xd0]
mov qword [rsp + 0xd8], rbx
bts esi, 0xc
mov dword [rsp + 0x30], esi
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x58]
call fcn.140001cb0
bts esi, 0xd
mov dword [rsp + 0x30], esi
test rbx, rbx
je 0x140005e3c
lea rcx, [rsp + 0xd8]
call fcn.1400056e0
mov dword [rsp + 0x4c], edi
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea rdx, [rsp + 0x4c]
mov rax, qword [rax + 0x38]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006aba
lea r9, [rsp + 0x35a]
mov r8d, dword [rsp + 0x4c]
nop dword [rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x140005e70
mov qword [rsp + 0x1d8], rdi
mov eax, 7
mov qword [rsp + 0x1e0], rax
mov word [rsp + 0x1c8], di
lea rcx, [rsp + 0x35a]
cmp r9, rcx
je 0x140005ef0
lea r8, [rsp + 0x35a]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rsp + 0x1c8]
call fcn.140004f50
mov rax, qword [rsp + 0x1e0]
or esi, 0xc000
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0x1c8]
cmp rax, 8
cmovae rcx, qword [rsp + 0x1c8]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 8
jb 0x140005f62
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005f5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005f5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006cb8
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rdi
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rdi
mov r12d, edi
mov dword [rsp + 0x50], edi
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov rax, qword [rax + 0x38]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006ac2
mov r13d, dword [rsp + 0x50]
mov r15, 0xffffffffffffffff
nop dword [rax]
cmp r12d, r13d
je 0x14000642f
mov qword [rsp + 0x68], rdi
bts esi, 0x11
mov dword [rsp + 0x30], esi
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x68]
mov edx, r12d
mov rax, qword [rax + 0x30]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006aca
btr esi, 0x11
bts esi, 0x10
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x80], rdi
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
mov rax, qword [rax + 0x60]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006ad2
mov rbx, qword [rsp + 0x80]
mov qword [rsp + 0x140], rbx
bts esi, 0x12
mov dword [rsp + 0x30], esi
test rbx, rbx
je 0x140006051
mov rdx, qword [rbx + 0x10]
jmp 0x140006058
lea rdx, [0x1400098d0]
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x160], 7
mov word [rsp + 0x148], di
mov r8, r15
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140006080
lea rcx, [rsp + 0x148]
call fcn.140004f50
nop
test rbx, rbx
je 0x1400060ce
mov eax, r15d
lock xadd dword [rbx + 0x18], eax
sub eax, 1
jne 0x140006140
test eax, eax
jne 0x1400060ca
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
mov r8, qword [rsp + 0x80]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov esi, dword [rsp + 0x30]
lea rcx, [rsp + 0x148]
cmp qword [rsp + 0x160], 8
cmovae rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rdi
mov rbx, qword [rsp + 0x158]
lea r14, [rsp + 0x148]
cmp qword [rsp + 0x160], 8
cmovae r14, qword [rsp + 0x148]
cmp rbx, 8
jae 0x14000614f
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x110], 7
jmp 0x1400061a2
test eax, eax
jns 0x1400060af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
nop
mov r15, rbx
or r15, 7
movabs rax, 0x7ffffffffffffffe
cmp r15, rax
cmova r15, rax
lea rdx, [r15 + 1]
lea rcx, [rsp + 0xf8]
call fcn.140004d60
mov qword [rsp + 0xf8], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x110], r15
mov r15, 0xffffffffffffffff
mov qword [rsp + 0x108], rbx
lea rcx, [rsp + 0xf8]
call fcn.140002c20
lea rdx, [rsp + 0x148]
mov r8, r15
test al, al
je 0x1400062d2
cmp qword [rsp + 0x160], 8
cmovae rdx, qword [rsp + 0x148]
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], 7
mov word [rsp + 0x188], di
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140006200
lea rcx, [rsp + 0x188]
call fcn.140004f50
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, qword [rsp + 0xa0]
je 0x140006265
movups xmm0, xmmword [rsp + 0x188]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rsp + 0x198]
movups xmmword [rcx + 0x10], xmm1
mov eax, 7
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x188], di
add rcx, 0x20
mov qword [rsp + 0x98], rcx
jmp 0x140006285
lea r8, [rsp + 0x188]
mov rdx, rcx
lea rcx, [rsp + 0x90]
call fcn.1400010c0
mov rax, qword [rsp + 0x1a0]
cmp rax, 8
jb 0x1400063c9
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400062c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006cb8
nop
jmp 0x1400063c9
cmp qword [rsp + 0x160], 8
cmovae rdx, qword [rsp + 0x148]
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c0], 7
mov word [rsp + 0x1a8], di
inc r8
cmp word [rdx + r8*2], 0
jne 0x140006300
lea rcx, [rsp + 0x1a8]
call fcn.140004f50
nop
mov rcx, qword [rsp + 0xb0]
cmp rcx, qword [rsp + 0xb8]
je 0x140006365
movups xmm0, xmmword [rsp + 0x1a8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rsp + 0x1b8]
movups xmmword [rcx + 0x10], xmm1
mov eax, 7
mov qword [rsp + 0x1c0], rax
mov word [rsp + 0x1a8], di
add rcx, 0x20
mov qword [rsp + 0xb0], rcx
jmp 0x140006385
lea r8, [rsp + 0x1a8]
mov rdx, rcx
lea rcx, [rsp + 0xa8]
call fcn.1400010c0
mov rax, qword [rsp + 0x1c0]
cmp rax, 8
jb 0x1400063c9
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006cb8
nop
mov rdx, qword [rsp + 0x160]
cmp rdx, 8
jb 0x140006415
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000640f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000640f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006cb8
nop
cmp qword [rsp + 0x68], 0
je 0x140006427
lea rcx, [rsp + 0x68]
call fcn.1400056e0
inc r12d
jmp 0x140005fc0
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov rax, qword [rax + 0x68]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006ada
mov rsi, qword [rsp + 0x90]
mov r13, qword [rsp + 0x98]
nop dword [rax]
cmp rsi, r13
je 0x140006567
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rdi
mov r14, qword [rsi + 0x10]
mov r15, rsi
cmp qword [rsi + 0x18], 8
jb 0x14000648a
mov r15, qword [rsi]
cmp r14, 8
jae 0x1400064a3
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x168], xmm0
mov ebx, 7
jmp 0x1400064e7
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x168]
call fcn.140004d60
mov qword [rsp + 0x168], rax
lea r8, [r14*2 + 2]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x178], r14
lea rcx, [rsp + 0x168]
cmp rbx, 8
cmovae rcx, qword [rsp + 0x168]
call fcn.1400049e0
nop
mov rdx, qword [rsp + 0x180]
cmp rdx, 8
jb 0x14000655e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006558
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006558
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006cb8
nop
add rsi, 0x20
jmp 0x140006460
mov rsi, qword [rsp + 0xb0]
mov r14, rsi
mov r15, qword [rsp + 0xa8]
sub r14, r15
cmp r14, 0x20
jb 0x1400066c2
call fcn.140003ac0
mov rbx, rax
mov qword [rsp + 0xe0], rax
test rax, rax
je 0x1400066c2
lea rdx, str.ConvertAndSharePDF
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x128], rax
test rax, rax
je 0x1400066b8
sar r14, 5
test r14, r14
je 0x1400066b8
mov eax, 8
mul r14
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
lea rdx, [0x14000a6b8]
mov rcx, rax
call fcn.1400071bc
mov r13, rax
test rax, rax
je 0x1400066b0
mov rsi, rdi
nop
cmp rsi, r14
jae 0x140006661
mov rbx, rsi
shl rbx, 5
add rbx, r15
mov ecx, dword [rbx + 0x10]
inc ecx
movsxd r12, ecx
mov eax, 2
mul r12
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
lea rdx, [0x14000a6b8]
mov rcx, rax
call fcn.1400071bc
mov qword [r13 + rsi*8], rax
test rax, rax
je 0x14000665c
cmp qword [rbx + 0x18], 8
jb 0x14000664d
mov rbx, qword [rbx]
mov r8, rbx
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
inc rsi
jmp 0x140006600
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x128]
call qword [case.0x140004543.0]
test r14d, r14d
je 0x140006698
mov rbx, r13
mov esi, r14d
mov rcx, qword [rbx]
call fcn.140006cb8
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x140006686
mov rcx, r13
call fcn.140006cb8
mov rbx, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0xb0]
mov r13, qword [rsp + 0x98]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
test r15, r15
je 0x14000676e
mov rbx, r15
cmp r15, rsi
je 0x14000672e
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14000670f
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140006709
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006727
mov rcx, r8
call fcn.140006cb8
nop
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
add rbx, 0x20
cmp rbx, rsi
jmp 0x1400066d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rsp + 0xb8]
sub rdx, r15
and rdx, 0xffffffffffffffe0
mov rax, r15
cmp rdx, 0x1000
jb 0x140006765
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006765
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140006cb8
nop
mov r12, qword [rsp + 0x90]
test r12, r12
je 0x140006823
mov rbx, r12
cmp r12, r13
je 0x1400067e2
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1400067c3
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400067bd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400067db
mov rcx, r8
call fcn.140006cb8
nop
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
add rbx, 0x20
cmp rbx, r13
jmp 0x140006785
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rsp + 0xa0]
sub rdx, r12
and rdx, 0xffffffffffffffe0
mov rax, r12
cmp rdx, 0x1000
jb 0x14000681a
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000681a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140006cb8
nop
cmp qword [rsp + 0x58], 0
je 0x140006836
lea rcx, [rsp + 0x58]
call fcn.1400056e0
nop
mov rsi, 0xffffffffffffffff
cmp qword [rsp + 0x88], 0
je 0x140006856
lea rcx, [rsp + 0x88]
call fcn.1400056e0
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x140006887
lock xadd dword [rbx + 0x18], esi
lea eax, [rsi - 1]
test eax, eax
jne 0x1400068d9
test eax, eax
jne 0x140006882
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
mov r8, rbx
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x40], rdi
cmp qword [rsp + 0x60], 0
je 0x14000689a
lea rcx, [rsp + 0x60]
call fcn.1400056e0
nop
cmp qword [rsp + 0x70], 0
je 0x140006a1a
lea rcx, [rsp + 0x70]
call fcn.1400056e0
jmp 0x140006a1a
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x68]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006ae2
jmp 0x140006836
jns 0x14000686c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
nop
mov qword [rsp + 0x1f8], rdi
mov qword [rsp + 0x200], 7
mov word [rsp + 0x1e8], di
mov r8d, 0x19
lea rdx, str.skipping_as_windows__11:
lea rcx, [rsp + 0x1e8]
call fcn.140004f50
nop
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], 8
cmovae rcx, qword [rsp + 0x1e8]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
nop
mov rdx, qword [rsp + 0x200]
cmp rdx, 8
jb 0x140006986
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006980
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006980
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006cb8
nop
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x68]
call qword [case.0x140004543.0]
test eax, eax
js 0x140006ae9
test rbx, rbx
je 0x1400069b1
lea rcx, [rsp + 0x88]
call fcn.1400056e0
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x1400069eb
mov rax, 0xffffffffffffffff
lock xadd dword [rbx + 0x18], eax
sub eax, 1
jne 0x140006a64
test eax, eax
jne 0x1400069e6
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
mov r8, rbx
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x60]
call fcn.1400056e0
nop
lea rcx, [rsp + 0x70]
call fcn.1400056e0
nop
cmp qword [rsp + 0x38], 0
je 0x140006a13
lea rcx, [rsp + 0x38]
call fcn.1400056e0
mov eax, 1
jmp 0x140006a32
cmp qword [rsp + 0x38], 0
je 0x140006a2d
lea rcx, [rsp + 0x38]
call fcn.1400056e0
nop
mov eax, 1
mov rcx, qword [rsp + 0x360]
xor rcx, rsp
call fcn.140007360
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
test eax, eax
jns 0x1400069d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
nop
mov ecx, eax
call fcn.140005380
mov ecx, eax
call fcn.140005380
int3