Function at 0x14003f648
Capabilities:
Get common file path

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rbx
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x590
mov eax, r8d
mov bl, r8b
mov r13, rcx
mov edi, 1
lea rcx, [r11 - 0x158]
and bl, 0xf0
and eax, edi
mov byte [rsp + 0x322], bl
mov qword [rsp + 0x370], r9
mov dword [rsp + 0x5e0], eax
call fcn.14006d8b0
mov r14, qword [rsp + 0x5d8]
or r8, 0xffffffffffffffff
xor esi, esi
lea rcx, [rsp + 0x5d8]
mov dword [rsp + 0x3d8], r8d
mov qword [rsp + 0x380], rsi
mov qword [rsp + 0x3c0], r8
mov qword [rsp + 0x3e8], rsi
call fcn.140016e28
lea rcx, [rsp + 0x3a8]
mov r15d, 0xffff0000
mov byte [rsp + 0x325], r8b
mov byte [rsp + 0x326], r8b
mov byte [rsp + 0x388], sil
mov byte [rsp + 0x324], sil
mov byte [rsp + 0x321], sil
mov byte [rsp + 0x323], sil
mov bpl, sil
mov byte [rsp + 0x329], sil
mov byte [rsp + 0x378], sil
mov byte [rsp + 0x339], r8b
mov byte [rsp + 0x34e], dil
mov byte [rsp + 0x327], sil
mov byte [rsp + 0x3bc], sil
mov dword [rsp + 0x3b0], r15d
mov qword [rsp + 0x368], rsi
mov byte [rsp + 0x34d], sil
call fcn.140061940
lea rcx, [rsp + 0x460]
mov qword [rsp + 0x4b8], rsi
call fcn.140061940
lea rdx, [rsp + 0x5d8]
lea rcx, [0x140118218]
mov r8d, edi
mov word [rsp + 0x510], si
call fcn.14006439c
cmp al, sil
jne 0x14003f7a8
mov al, sil
cmp bl, sil
je 0x14003f7ab
mov al, dil
cmp bl, sil
mov byte [rsp + 0x32a], al
mov byte [rsp + 0x32b], sil
setne byte [rsp + 0x328]
cmp al, sil
je 0x14003f7da
mov byte [rsp + 0x325], sil
mov byte [rsp + 0x326], dil
mov rax, qword [rsp + 0x5d8]
mov dil, 0x2a
cmp word [rax], 0x2d
jne 0x14003f7ee
mov dil, byte [rax]
lea rcx, [rsp + 0x488]
mov edx, 0x17e0
mov qword [rsp + 0x438], rsi
mov qword [rsp + 0x350], rsi
call fcn.1400616c8
mov rcx, qword [rsp + 0x488]
call fcn.1400592d4
mov rbx, qword [rsp + 0x488]
mov byte [rsp + 0x34c], sil
lea rdx, [rbx + 0xa08]
lea r15, [rbx + 0x378]
mov qword [rsp + 0x458], rsi
lea rax, [r15 + 0x6b0]
mov qword [rsp + 0x360], rdx
movsx esi, dil
mov qword [rsp + 0x448], rax
lea rax, [rdx + 0xa08]
mov qword [rsp + 0x4d8], rbx
mov qword [rsp + 0x3f8], rax
lea rax, [rdx + 0xa20]
mov rdx, qword [rsp + 0x5d8]
mov qword [rsp + 0x430], rax
add rax, 0x30
mov qword [rsp + 0x490], r15
mov qword [rsp + 0x428], rax
movzx eax, word [rdx]
mov qword [rsp + 0x4d0], 5
cmp eax, esi
jne 0x14004028a
movzx eax, word [rdx + 2]
cmp eax, esi
jne 0x140040261
add rdx, 4
lea rcx, [0x14011a7e0]
mov r8d, 1
mov qword [rsp + 0x5d8], rdx
lea rdx, [rsp + 0x5d8]
call fcn.14006439c
xor r8d, r8d
cmp al, r8b
je 0x14003f901
lea eax, [r8 + 1]
mov dword [rsp + 0x5e0], eax
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7dc]
mov r8d, 2
call fcn.14006439c
test al, al
je 0x14003f930
mov eax, 1
mov byte [rsp + 0x325], al
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x1401194b4]
mov r8d, 3
call fcn.14006439c
xor r8d, r8d
cmp al, r8b
je 0x14003f95f
mov byte [rsp + 0x325], r8b
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7d4]
mov r8d, 4
call fcn.14006439c
test al, al
je 0x14003f98a
mov byte [rsp + 0x326], 2
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7d0]
mov r8d, 3
call fcn.14006439c
xor r8d, r8d
cmp al, r8b
je 0x14003f9b9
mov byte [rsp + 0x326], r8b
jmp 0x140040241
mov rdx, qword [rsp + 0x5d8]
mov r8d, 0x20
movzx eax, word [rdx]
lea ecx, [r8 + 0x51]
or ax, r8w
cmp cx, ax
jne 0x14003fbff
movzx eax, word [rdx + 2]
lea ecx, [r8 + 0x44]
or ax, r8w
cmp cx, ax
jne 0x14003fbff
add rdx, 4
lea rcx, [0x1401152a8]
xor r8d, r8d
mov qword [rsp + 0x5d8], rdx
lea rdx, [rsp + 0x5d8]
call fcn.14006439c
test al, al
je 0x14003fa24
mov byte [rsp + 0x321], 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7cc]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003fa4f
mov byte [rsp + 0x321], 0x23
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011951c]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003fa7a
mov byte [rsp + 0x321], 0x2a
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7c8]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003faa5
mov byte [rsp + 0x321], 0x3e
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7c4]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003fad0
mov byte [rsp + 0x321], 0x24
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7c0]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003fafb
mov byte [rsp + 0x321], pe_nt_image_headers64
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7bc]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003fb26
mov byte [rsp + 0x321], 0x3d
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7b8]
mov r8d, 1
call fcn.14006439c
test al, al
je 0x14003fb51
mov byte [rsp + 0x321], 0x3c
jmp 0x140040241
mov rdx, qword [rsp + 0x5d8]
lea rcx, [0x14011a7b4]
mov r8d, 1
call fcn.14005a9ec
xor r8d, r8d
cmp al, r8b
mov rax, qword [rsp + 0x5d8]
je 0x14003fbee
add rax, 2
mov qword [rsp + 0x5d8], rax
mov rdx, rax
movzx ecx, word [rax]
cmp cx, r8w
je 0x14003fbd7
lea r9d, [r8 + 9]
lea r11d, [r8 + 0x20]
cmp r9w, cx
ja 0x14003fba7
cmp cx, 0xd
jbe 0x14003fbc4
cmp r11w, cx
je 0x14003fbc4
add rax, 2
mov qword [rsp + 0x5d8], rax
mov cx, word [rax]
cmp cx, r8w
je 0x14003fbd7
jmp 0x14003fb9b
cmp word [rax], r8w
je 0x14003fbd7
mov word [rax], r8w
add qword [rsp + 0x5d8], 2
cmp word [rdx], r8w
je 0x140040234
mov qword [rsp + 0x438], rdx
jmp 0x140040234
sub rax, 4
mov qword [rsp + 0x5d8], rax
jmp 0x1400401a7
lea rcx, [0x14011a7ac]
mov r8d, 4
call fcn.14005a9ec
xor r8d, r8d
cmp al, r8b
je 0x14003fc95
mov rax, qword [rsp + 0x5d8]
add rax, 8
mov qword [rsp + 0x5d8], rax
mov rcx, rax
mov qword [rsp + 0x350], rax
movzx ecx, word [rax]
cmp cx, r8w
je 0x140040234
lea edx, [r8 + 9]
lea r11d, [r8 + 0x20]
cmp dx, cx
ja 0x14003fc58
cmp cx, 0xd
jbe 0x14003fc79
cmp r11w, cx
je 0x14003fc79
add rax, 2
mov qword [rsp + 0x5d8], rax
mov cx, word [rax]
cmp cx, r8w
je 0x140040234
jmp 0x14003fc4d
cmp word [rax], r8w
je 0x140040234
mov word [rax], r8w
add qword [rsp + 0x5d8], 2
jmp 0x140040234
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7a8]
mov r8d, 2
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fcc4
lea eax, [rcx + 1]
mov dword [rsp + 0x3b0], eax
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7a4]
mov r8d, 3
call fcn.14006439c
xor r8d, r8d
cmp al, r8b
je 0x14003fcf3
mov dword [rsp + 0x3b0], r8d
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a7a0]
mov r8d, 3
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fd1b
mov bpl, 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a79c]
mov r8d, 3
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fd48
mov byte [rsp + 0x329], 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x140119ef0]
mov r8d, 1
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fd75
mov byte [rsp + 0x378], 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x140115c28]
mov r8d, 3
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fda2
mov byte [rsp + 0x327], 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a798]
mov r8d, 2
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fdcf
mov byte [rsp + 0x34d], 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a790]
mov r8d, 4
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14003fdfc
mov byte [rsp + 0x327], 2
jmp 0x140040241
mov rdx, qword [rsp + 0x5d8]
lea rcx, [0x14011a788]
mov r8d, 5
call fcn.14005a9ec
xor r8d, r8d
cmp al, r8b
je 0x14003fe2c
mov rax, qword [rsp + 0x5d8]
add rax, 2
jmp 0x14003fe5a
mov rdx, qword [rsp + 0x5d8]
lea rcx, [0x14011a780]
mov r8d, 4
call fcn.14005a9ec
xor r8d, r8d
cmp al, r8b
je 0x14003ff2f
mov rax, qword [rsp + 0x5d8]
add rax, 8
mov qword [rsp + 0x5d8], rax
mov rdx, rax
movzx ecx, word [rax]
cmp cx, r8w
je 0x14003fea3
mov r9d, 9
lea r11d, [r9 + 0x17]
cmp r9w, cx
ja 0x14003fe88
cmp cx, 0xd
jbe 0x14003fea3
cmp r11w, cx
je 0x14003fea3
add rax, 2
mov qword [rsp + 0x5d8], rax
mov cx, word [rax]
cmp cx, r8w
jne 0x14003fe7c
mov ecx, 0x7e
cmp cx, word [rdx]
je 0x14003ff22
mov ecx, pe_nt_image_headers64
cmp cx, word [rdx]
je 0x14003ff22
sub rax, rdx
lea rcx, [rsp + 0x3a8]
sar rax, 1
mov r8, rax
call fcn.140061ba8
lea rdx, [rsp + 0x3a8]
xor r8d, r8d
mov rcx, r13
call fcn.14000395c
mov rdx, qword [rsp + 0x3a8]
lea rcx, [0x140115c50]
mov byte [rsp + 0x324], 1
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
xor r8d, r8d
cmp eax, r8d
jne 0x140040234
mov rax, qword [rsp + 0x3a8]
mov byte [rsp + 0x324], 3
mov word [rax], r8w
jmp 0x140040234
mov qword [rsp + 0x458], rdx
jmp 0x14003fc79
mov rdx, qword [rsp + 0x5d8]
lea rcx, [0x14011a778]
mov r8d, 5
call fcn.14005a9ec
xor ecx, ecx
cmp al, cl
je 0x140040020
mov r8, qword [rsp + 0x5d8]
add r8, 0xa
mov qword [rsp + 0x5d8], r8
mov rdx, r8
movzx eax, word [r8]
cmp ax, cx
je 0x14003ffa2
lea r9d, [rcx + 9]
lea r11d, [rcx + 0x20]
cmp r9w, ax
ja 0x14003ff87
cmp ax, 0xd
jbe 0x14003ffa2
cmp r11w, ax
je 0x14003ffa2
add r8, 2
mov qword [rsp + 0x5d8], r8
mov ax, word [r8]
cmp ax, cx
jne 0x14003ff7b
sub r8, rdx
lea rcx, [rsp + 0x420]
sar r8, 1
call fcn.14006d8d4
lea rcx, [rsp + 0x5d8]
call fcn.140016e28
lea rdx, [rsp + 0x420]
xor r8d, r8d
mov rcx, r13
call fcn.14000395c
mov rdx, qword [rsp + 0x420]
xor eax, eax
or r9d, 0xffffffff
xor r8d, r8d
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.140018664
xor ecx, ecx
cmp rax, rcx
je 0x14004000e
mov rax, qword [rax + 8]
mov byte [rsp + 0x34c], 1
mov qword [rsp + 0x3f8], rax
lea rcx, [rsp + 0x420]
call fcn.140059370
jmp 0x140040241
mov rdx, qword [rsp + 0x5d8]
lea rcx, [0x14011a770]
mov r8d, 6
call fcn.14005a9ec
xor ecx, ecx
cmp al, cl
je 0x1400400cb
mov r8, qword [rsp + 0x5d8]
add r8, 0xc
mov qword [rsp + 0x5d8], r8
mov rdx, r8
movzx eax, word [r8]
cmp ax, cx
je 0x140040093
lea r9d, [rcx + 9]
lea r11d, [rcx + 0x20]
cmp r9w, ax
ja 0x140040078
cmp ax, 0xd
jbe 0x140040093
cmp r11w, ax
je 0x140040093
add r8, 2
mov qword [rsp + 0x5d8], r8
mov ax, word [r8]
cmp ax, cx
jne 0x14004006c
sub r8, rdx
lea rcx, [rsp + 0x460]
sar r8, 1
call fcn.140061ba8
lea rcx, [rsp + 0x5d8]
call fcn.140016e28
lea rdx, [rsp + 0x460]
xor r8d, r8d
mov rcx, r13
call fcn.14000395c
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x1401194c0]
mov r8d, 1
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x1400400f8
mov byte [rsp + 0x323], 1
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a76c]
mov r8d, 3
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x14004012d
mov byte [rsp + 0x339], 2
mov byte [rsp + 0x34e], 2
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a768]
mov r8d, 3
call fcn.14006439c
xor ecx, ecx
cmp al, cl
je 0x140040162
mov byte [rsp + 0x339], 4
mov byte [rsp + 0x34e], 4
jmp 0x140040241
lea rdx, [rsp + 0x5d8]
lea rcx, [0x14011a760]
mov r8d, 6
call fcn.14006439c
xor r8d, r8d
cmp al, r8b
je 0x14004019f
mov r8d, 8
mov byte [rsp + 0x339], r8b
mov byte [rsp + 0x34e], r8b
jmp 0x140040241
mov rax, qword [rsp + 0x5d8]
mov ecx, 0x2a
cmp dil, cl
jne 0x1400401fa
movzx ecx, word [rax]
mov rdx, rax
cmp cx, r8w
je 0x140040234
mov r9d, 0x2c
lea r10d, [r9 - 0x23]
lea r11d, [r9 - 0xc]
cmp r10w, cx
ja 0x1400401d7
cmp cx, 0xd
jbe 0x140040200
cmp r11w, cx
je 0x140040200
cmp r9w, cx
je 0x140040255
add rax, 2
mov qword [rsp + 0x5d8], rax
mov cx, word [rax]
cmp cx, r8w
je 0x140040234
jmp 0x1400401cb
mov r10d, 9
movzx ecx, word [rax]
cmp cx, r8w
je 0x140040234
mov edx, 0x20
cmp r10w, cx
ja 0x14004021a
cmp cx, 0xd
jbe 0x140040234
cmp dx, cx
je 0x140040234
add rax, 2
mov qword [rsp + 0x5d8], rax
mov cx, word [rax]
cmp cx, r8w
jne 0x14004020e
lea rcx, [rsp + 0x5d8]
call fcn.140016e28
mov rdx, qword [rsp + 0x5d8]
movzx eax, word [rdx]
cmp eax, esi
jne 0x140040261
jmp 0x14003f8b7
add rdx, 0xfffffffffffffffc
mov qword [rsp + 0x5d8], rdx
xor eax, eax
cmp bpl, al
je 0x14004028c
lea r9, [0x1401145d8]
xor r8d, r8d
mov rcx, r13
mov dword [rsp + 0x20], 0xffffff9c
call fcn.1400d1a50
mov rdi, rax
jmp 0x140041b21
xor eax, eax
lea rcx, [rsp + 0x408]
mov esi, eax
mov dword [rsp + 0x348], eax
call fcn.140061e04
mov rax, qword [rsp + 0x5d8]
mov rdi, qword [rsp + 0x370]
mov qword [rsp + 0x330], rdi
mov qword [r15], rax
mov rax, qword [rsp + 0x5d8]
mov ebp, 1
mov qword [r15 + 0x358], rax
mov rcx, qword [rsp + 0x5d8]
lea edx, [rbp + 0x2b]
mov qword [rsp + 0x4c8], r15
mov r13d, ebp
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
xor r10d, r10d
mov r12, rax
mov qword [rsp + 0x3a0], rax
cmp rax, r10
je 0x140040324
mov r15, rax
sub r15, r14
sar r15, 1
add r12, 2
mov qword [rsp + 0x3d8], r15
mov qword [rsp + 0x3a0], r12
lea r15, [rbx + 0x378]
mov qword [r15 + 8], r12
mov qword [r15 + 0x360], r12
cmp r12, r10
je 0x140040359
lea rcx, [0x14011a750]
mov r8d, 0xc
mov rdx, r12
call fcn.14005a9ec
xor r10d, r10d
mov byte [rsp + 0x320], bpl
cmp al, r10b
jne 0x140040361
mov byte [rsp + 0x320], r10b
cmp r12, r10
je 0x140040386
lea rcx, [0x14011a740]
mov r8d, 0xf
mov rdx, r12
call fcn.14005a9ec
xor r10d, r10d
mov r15b, bpl
cmp al, r10b
jne 0x140040389
mov r15b, r10b
cmp r12, r10
je 0x1400403ae
lea rcx, [0x14011a730]
mov r8d, 0xc
mov rdx, r12
call fcn.14005a9ec
xor r10d, r10d
mov r14b, bpl
cmp al, r10b
jne 0x1400403b1
mov r14b, r10b
mov dl, byte [rsp + 0x320]
mov bpl, r14b
mov r8d, 0x2c
or bpl, r15b
or bpl, dl
cmp r12, r10
je 0x14004040f
lea eax, [r8 - 2]
cmp ax, word [r12]
jne 0x14004040f
movzx eax, word [r12 + 2]
cmp r8w, ax
je 0x140040402
cmp ax, r10w
je 0x140040402
lea ecx, [r8 - 0x23]
cmp cx, ax
ja 0x1400403f8
cmp ax, 0xd
jbe 0x140040402
mov ecx, 0x20
cmp cx, ax
jne 0x14004040f
mov r9, r13
mov byte [rsp + 0x34f], r9b
jmp 0x14004043b
mov byte [rsp + 0x34f], r10b
mov r9, r13
cmp byte [rsp + 0x32a], r10b
jne 0x14004043b
cmp byte [rsp + 0x328], r10b
jne 0x14004043b
cmp dl, r10b
jne 0x14004043b
mov cl, r9b
cmp r14b, r10b
je 0x14004043e
mov cl, r10b
mov al, r15b
mov byte [rsp + 0x338], cl
mov r11d, 0x10
or al, dl
je 0x14004045a
or byte [rsp + 0x34d], r11b
mov dword [rsp + 0x400], r10d
cmp byte [rsp + 0x329], r10b
jne 0x140040656
cmp cl, r10b
je 0x140040656
cmp rdi, r10
mov rcx, rdi
mov edx, r8d
cmove rcx, qword [rsp + 0x5d8]
mov qword [rsp + 0x330], rcx
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
xor r10d, r10d
mov qword [rsp + 0x330], rax
cmp rax, r10
je 0x1400404c1
mov word [rax], r10w
mov rax, qword [rsp + 0x330]
add rax, 2
mov qword [rsp + 0x330], rax
mov r8, qword [rsp + 0x350]
cmp r8, r10
je 0x1400405dc
movzx ecx, word [rax]
cmp cx, r10w
je 0x14004051f
mov edx, 9
lea r9d, [rdx + 0x17]
cmp dx, cx
ja 0x1400404ef
cmp cx, 0xd
jbe 0x14004050c
cmp r9w, cx
je 0x14004050c
add rax, 2
mov qword [rsp + 0x330], rax
mov cx, word [rax]
cmp cx, r10w
je 0x14004051f
jmp 0x1400404e4
cmp word [rax], r10w
je 0x14004051f
mov word [rax], r10w
add qword [rsp + 0x330], 2
lea rcx, [rsp + 0x330]
call fcn.140016e28
mov edi, 2
lea r9d, [rdi - 1]
mov r13d, edi
jmp 0x1400405c8
cmp rdi, 0x6a
jge 0x140040656
movzx edx, word [r8]
cmp dx, r10w
je 0x140040565
lea rax, [r8 + 2]
cmp word [rax], r10w
cmovne r8, rax
mov qword [rsp + 0x350], r8
mov qword [rsp + 0x3f0], rcx
mov ecx, 0x7e
mov eax, 0x48d
cmp cx, dx
mov r8d, 0x5a5
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x3f0]
cmove r8d, eax
call fcn.140024cbc
mov r8, qword [rsp + 0x350]
mov r9d, 1
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0x3f0]
add r13d, r9d
mov qword [rbx + rdi*8 + 0x378], rax
add rdi, r9
xor r10d, r10d
mov rcx, qword [rsp + 0x330]
cmp word [rcx], r10w
jne 0x14004053d
jmp 0x140040656
mov r12, r13
mov rdi, r13
mov esi, 0x2c
cmp rax, r10
je 0x140040641
cmp rdi, 2
jl 0x140040602
mov qword [rbx + rdi*8 + 0x378], rax
mov rax, qword [rsp + 0x330]
mov edx, esi
mov rcx, rax
add r13d, r12d
add rdi, r12
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
xor r10d, r10d
mov qword [rsp + 0x330], rax
cmp rax, r10
je 0x14004063b
mov word [rax], r10w
mov rax, qword [rsp + 0x330]
add rax, 2
mov qword [rsp + 0x330], rax
cmp rdi, 0x6a
jl 0x1400405e7
mov esi, dword [rsp + 0x348]
mov r12, qword [rsp + 0x3a0]
mov r9d, 1
mov qword [rsp + 0x3d0], r10
mov qword [rsp + 0x3f0], r10
cmp r12, r10
je 0x140040671
mov word [r12 - 2], r10w
cmp byte [rsp + 0x34f], r10b
jne 0x1400406b2
cmp r12, r10
je 0x1400406b2
mov ecx, 0x2a
cmp cx, word [r12]
jne 0x1400406b2
mov rax, qword [rsp + 0x380]
add r12, 2
add rax, r9
cmp cx, word [r12]
je 0x140040694
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x3a0], r12
mov rdx, qword [rsp + 0x350]
mov r8, r10
mov qword [rsp + 0x340], r10
cmp r12, r10
je 0x1400407a5
cmp rdx, r10
je 0x140040781
mov r9, r12
mov r11d, 0x2c
cmp word [r12], r10w
je 0x140040711
lea eax, [r11 - 0x23]
lea ecx, [rax + 0x17]
cmp r11w, word [r9]
je 0x140040711
cmp ax, word [r9]
ja 0x140040701
cmp word [r9], 0xd
jbe 0x140040711
cmp cx, word [r9]
je 0x140040711
add r9, 2
cmp word [r9], r10w
jne 0x1400406ee
cmp word [r9], r10w
je 0x1400407a5
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x340], r9
call fcn.140016e28
mov rdx, qword [rsp + 0x340]
cmp r11w, word [rdx]
jne 0x14004075f
add rdx, 2
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x340], rdx
call fcn.140016e28
mov rdx, qword [rsp + 0x340]
movzx eax, word [rdx]
neg ax
sbb rcx, rcx
and rcx, rdx
mov qword [rsp + 0x340], rcx
mov word [r9], r10w
mov r8, qword [rsp + 0x340]
jmp 0x14004079d
mov edx, 0x2c
mov rcx, r12
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
xor r10d, r10d
mov r8, rax
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x350]
mov rcx, qword [rsp + 0x5d8]
cmp word [rcx], r10w
jne 0x1400407eb
cmp bpl, r10b
jne 0x1400407eb
lea rcx, [rsp + 0x3d0]
call fcn.140059370
lea rcx, [rsp + 0x408]
call fcn.14001d9f4
lea rcx, [rsp + 0x408]
call fcn.140059370
mov rdi, 0xffffffff80070057
jmp 0x140041b21
cmp rdx, r10
jne 0x140040813
cmp r8, r10
je 0x140040813
cmp word [r8], r10w
je 0x140040813
mov word [r8], r10w
mov r8, qword [rsp + 0x340]
add r8, 2
mov qword [rsp + 0x340], r8
mov ebp, 7
lea eax, [rbp + 0x27]
cmp r12, r10
je 0x14004090c
mov edx, eax
mov rcx, r12
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
xor r10d, r10d
cmp rax, r10
je 0x1400408fc
mov word [rax], r10w
add rax, 2
movzx edx, word [rax]
mov rcx, rax
mov qword [rsp + 0x440], rax
cmp dx, r10w
je 0x14004087e
lea r8d, [rbp + 2]
lea r9d, [rbp + 0x19]
cmp r8w, dx
ja 0x14004086b
cmp dx, 0xd
jbe 0x14004087e
cmp r9w, dx
je 0x14004087e
add rax, 2
mov dx, word [rax]
cmp dx, r10w
jne 0x14004085f
mov edx, 1
mov byte [rsp + 0x3bc], dl
cmp rax, rcx
je 0x1400408fc
cmp word [rax], r10w
je 0x140040899
mov word [rax], r10w
mov eax, 0x3f
cmp ax, word [rcx]
jne 0x1400408b7
add rcx, 2
mov byte [rsp + 0x32b], 2
mov qword [rsp + 0x440], rcx
mov qword [rsp + 0x3e8], rcx
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x440]
mov dil, 3
mov dword [rsp + 0x3bc], edi
call fcn.140066060
xor r10d, r10d
cmp eax, r10d
je 0x1400408fc
cmp qword [rsp + 0x3c0], r10
movzx edi, dil
cmovge edi, ebp
mov dword [rsp + 0x3bc], edi
mov rdx, qword [rsp + 0x350]
mov r8, qword [rsp + 0x340]
mov r9b, byte [rsp + 0x324]
and r9b, 2
mov byte [rsp + 0x324], r9b
je 0x140040940
cmp r12, r10
je 0x140040940
movzx eax, word [r12]
neg ax
sbb rcx, rcx
and rcx, r12
mov r12, rcx
mov qword [rsp + 0x3a0], rcx
cmp r9b, r10b
je 0x140040a3f
cmp r8, r10
je 0x140040a3f
cmp rdx, r10
je 0x1400409fd
movzx eax, word [r8]
mov rdx, r8
mov edi, 0x2c
cmp ax, r10w
je 0x1400409a0
lea ecx, [rdi - 0x23]
lea r9d, [rdi - 0xc]
cmp di, ax
je 0x1400409a0
cmp cx, ax
ja 0x140040984
cmp ax, 0xd
jbe 0x1400409a0
cmp r9w, ax
je 0x1400409a0
add r8, 2
mov qword [rsp + 0x340], r8
mov ax, word [r8]
cmp ax, r10w
jne 0x140040974
sub r8, rdx
lea rcx, [rsp + 0x3a8]
sar r8, 1
call fcn.140061ba8
mov r11, qword [rsp + 0x340]
xor r10d, r10d
cmp word [r11], r10w
je 0x140040a37
lea rcx, [rsp + 0x340]
call fcn.140016e28
mov rax, qword [rsp + 0x340]
cmp di, word [rax]
jne 0x1400409f7
add rax, 2
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x340], rax
call fcn.140016e28
mov word [r11], r10w
jmp 0x140040a29
mov rcx, qword [rsp + 0x5d0]
lea r8, [rsp + 0x3a8]
lea rdx, [rsp + 0x340]
mov r9d, 0x2c
mov word [rsp + 0x20], r10w
call fcn.140052b08
xor r10d, r10d
mov rax, qword [rsp + 0x340]
cmp word [rax], r10w
jne 0x140040a3f
mov qword [rsp + 0x340], r10
lea rcx, [rsp + 0x3e0]
mov edx, 0x20a
mov rdi, r10
mov qword [rsp + 0x478], r10
mov qword [rsp + 0x350], r10
mov rbp, r10
mov qword [rsp + 0x3c8], r10
mov byte [rsp + 0x358], 0xff
call fcn.1400619b4
xor edx, edx
cmp byte [rsp + 0x326], dl
jg 0x140040a97
mov rdx, qword [rsp + 0x3e0]
mov ecx, 0x208
call qword [sym.imp.KERNEL32.DLL_GetCurrentDirectoryW]
xor edx, edx
mov cl, byte [rsp + 0x320]
mov r8, qword [rsp + 0x340]
mov r10d, 0x5e
lea r11d, [r10 - 0x34]
cmp cl, dl
je 0x140040acf
cmp r8, rdx
je 0x140040acf
cmp r10w, word [r8]
jne 0x140040acf
cmp r11w, word [r8 + 2]
jne 0x140040acf
lea r9d, [r10 - 0x5d]
mov eax, r9d
jmp 0x140040ad7
mov eax, edx
mov r9d, 1
cmp cl, dl
je 0x140040af7
cmp r8, rdx
je 0x140040af7
cmp r10w, word [r8]
jne 0x140040af7
cmp r11w, word [r8 + 2]
je 0x140040af7
mov byte [rsp + 0x379], r9b
jmp 0x140040b02
mov byte [rsp + 0x379], dl
cmp eax, edx
je 0x140040b0e
add r8, 2
mov qword [rsp + 0x340], r8
mov r10d, 0x3c
cmp r8, rdx
je 0x140040b35
cmp r10w, word [r8]
jne 0x140040b35
add r8, 2
mov byte [rsp + 0x398], r9b
mov qword [rsp + 0x340], r8
jmp 0x140040b3c
mov byte [rsp + 0x398], dl
cmp cl, dl
je 0x140040cc6
cmp byte [rsp + 0x323], dl
jne 0x140040cc6
mov rax, qword [rsp + 0x3a8]
cmp word [rax], dx
je 0x140040cb4
cmp r11w, word [rax]
je 0x140040cb4
cmp r8, rdx
je 0x140040cc6
cmp r11w, word [r8]
je 0x140040cc6
mov ebx, dword [rsp + 0x398]
xor r15d, r15d
mov qword [rsp + 0x380], r8
mov al, bl
lea r12d, [r15 + 0x22]
mov qword [rsp + 0x360], r15
neg al
sbb rcx, rcx
and ecx, 8
mov qword [rsp + 0x3f8], rcx
cmp r12w, word [r8]
jne 0x140040bd4
lea r8d, [r12 + 0x6b]
lea rcx, [rsp + 0x340]
xor edx, edx
call fcn.140024cbc
mov r8, rax
mov qword [rsp + 0x380], rax
mov edx, 0x2c
mov rcx, r8
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
mov qword [rsp + 0x380], rax
cmp rax, r15
je 0x140040c26
mov word [rax], r15w
add qword [rsp + 0x380], 2
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x380]
call fcn.14001da6c
lea rdx, [rsp + 0x3f8]
lea rcx, [rsp + 0x380]
call fcn.14001da6c
mov r12d, 0x10
cmp bl, r15b
je 0x140040c47
cmp dword [rsp + 0x360], r15d
movzx ebx, bl
cmovne ebx, r12d
mov dword [rsp + 0x398], ebx
mov rdx, qword [rsp + 0x340]
lea rcx, [rsp + 0x325]
call fcn.14001a0ec
cmp bl, r15b
je 0x140040c7d
call fcn.140003838
mov edx, dword [rsp + 0x360]
mov rcx, qword [rsp + 0x340]
call qword [0x140134800]
jmp 0x140040c9b
mov r8d, dword [rsp + 0x3f8]
mov rdx, qword [rsp + 0x360]
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.KERNEL32.DLL_LoadLibraryExW]
mov r14d, 1
mov rdi, rax
mov rbx, r15
mov byte [rsp + 0x388], r14b
jmp 0x140041aab
lea rcx, [rsp + 0x3e0]
call fcn.140059370
jmp 0x1400407b8
cmp r15b, dl
je 0x140040ddb
xor r15d, r15d
lea r14d, [r15 + 1]
cmp r8, r15
je 0x1400443dd
mov sil, r14b
cmp r11w, word [r8]
jne 0x140040cf4
add r8, 2
mov qword [rsp + 0x340], r8
mov bl, byte [rsp + 0x323]
mov ebp, 0x23
cmp r11w, word [r8]
je 0x140040d0c
cmp bp, word [r8]
jne 0x140040d1d
add r8, 2
mov bl, r14b
mov qword [rsp + 0x340], r8
jmp 0x140040d00
mov byte [rsp + 0x323], bl
mov rbp, r15
cmp r10w, word [r8]
jne 0x140040d39
add r8, 2
mov qword [rsp + 0x340], r8
cmp word [r8], r15w
je 0x140040dd3
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x420], r15
call fcn.140007b30
mov rdx, qword [rsp + 0x340]
cmp word [rdx], r15w
je 0x140040dcc
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0x3a0]
mov qword [rsp + 0x3a0], r15
mov r9, rax
mov r8, rax
call fcn.14006187c
mov rcx, qword [rsp + 0x420]
cmp bl, r15b
je 0x140040dae
cmp rcx, r15
je 0x140040dbf
mov rdx, qword [rsp + 0x3a0]
call fcn.140017cc4
jmp 0x140040dbc
mov rdx, qword [rsp + 0x3a0]
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov rdi, rax
lea rcx, [rsp + 0x3a0]
call fcn.140059370
mov cl, byte [rsp + 0x320]
mov rbx, rbp
jmp 0x1400443e7
xor r15d, r15d
cmp r14b, r15b
lea r14d, [r15 + 1]
je 0x140040ec8
cmp r8, r15
je 0x1400443dd
mov sil, r14b
mov bl, r15b
cmp r11w, word [r8]
jne 0x140040e0c
add r8, 2
mov qword [rsp + 0x340], r8
mov r12b, byte [rsp + 0x323]
mov ebp, 0x23
cmp r11w, word [r8]
je 0x140040e25
cmp bp, word [r8]
jne 0x140040e36
add r8, 2
mov r12b, r14b
mov qword [rsp + 0x340], r8
jmp 0x140040e19
mov byte [rsp + 0x323], r12b
mov rbp, r15
cmp r10w, word [r8]
jne 0x140040e56
add r8, 2
mov bl, r14b
mov qword [rsp + 0x340], r8
cmp word [r8], r15w
je 0x140040dd3
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x350], r15
call fcn.140071820
cmp r12b, r14b
mov rcx, qword [rsp + 0x350]
jle 0x140040eaa
cmp rcx, r15
je 0x140040dcc
call fcn.140017c5c
mov cl, byte [rsp + 0x320]
mov rdi, r15
mov rbx, r15
jmp 0x1400443e7
cmp bl, r15b
je 0x140040eba
call qword [0x140134808]
jmp 0x140040dcc
call qword [sym.imp.KERNEL32.DLL_FreeLibrary]
movsxd rdi, eax
jmp 0x140040dcc
cmp byte [rsp + 0x322], r15b
movzx eax, r15b
cmovne eax, r14d
mov dword [rsp + 0x3b4], eax
cmp r8, r15
jne 0x1400410bd
cmp r12, r15
jne 0x140040efe
lea r12, [0x14011a70a]
mov qword [rsp + 0x3a0], r12
jmp 0x140040f2c
lea rcx, [0x14011a70a]
mov rdx, r12
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
cmp eax, r15d
je 0x140040f2c
lea rcx, [0x14011a6da]
mov rdx, r12
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
cmp eax, r15d
jne 0x1400410bd
mov eax, dword [rsp + 0x3b0]
mov ecx, 0x31
mov byte [rsp + 0x3b4], 0xff
cmp eax, r15d
cmovl eax, ecx
mov dword [rsp + 0x3b0], eax
cmp al, r15b
je 0x1400410bd
lea rcx, [rsp + 0x360]
call fcn.140061940
or rbx, 0xffffffffffffffff
lea rdx, [0x14011a6c8]
lea rcx, [rsp + 0x448]
mov r8, rbx
call fcn.14006d8f0
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x360]
call fcn.14006d97c
lea rcx, [rsp + 0x448]
call fcn.140059370
lea rcx, [rsp + 0x360]
mov edx, 0x51c
call fcn.140061a40
mov rdx, qword [rsp + 0x360]
xor ecx, ecx
add rdx, 0x10
mov r8d, 0x208
call qword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea rdx, [0x14011a690]
lea rcx, [rsp + 0x458]
mov r8, rbx
call fcn.14006d8f0
lea rcx, [rsp + 0x360]
mov rdx, qword [rax]
call fcn.140061a7c
lea rcx, [rsp + 0x458]
call fcn.140059370
mov rax, qword [rsp + 0x3d8]
cmp eax, r15d
jl 0x14004101d
movsxd rcx, eax
mov rax, qword [rsp + 0x470]
mov word [rax + rcx*2], r15w
mov rdx, qword [rsp + 0x470]
lea rcx, [rsp + 0x360]
call fcn.140061a7c
lea rdx, [0x14011a68c]
lea rcx, [rsp + 0x458]
mov r8, rbx
call fcn.14006d8f0
lea rcx, [rsp + 0x360]
mov rdx, qword [rax]
call fcn.140061a7c
lea rcx, [rsp + 0x458]
call fcn.140059370
lea rcx, [rsp + 0x360]
mov rdx, r12
call fcn.140061a7c
mov rax, qword [rsp + 0x5d0]
mov rdx, qword [rsp + 0x360]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov r8, rax
mov rcx, rax
xor r9d, r9d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
call fcn.14000dfe4
lea rcx, [rsp + 0x360]
mov rdi, rax
call fcn.140059370
jmp 0x140041aed
cmp r12, r15
je 0x14004453a
cmp word [r12], r15w
je 0x14004453a
cmp byte [rsp + 0x329], r15b
jne 0x140041206
cmp byte [rsp + 0x338], r15b
je 0x140041206
mov r9, qword [rsp + 0x370]
cmp r9, r15
je 0x140041206
xor eax, eax
cmp r13d, 2
lea rcx, [rbx + 0x378]
lea r15, [rcx + 0x358]
mov qword [rsp + 0x370], rax
mov dword [rsp + 0x400], 2
mov qword [rsp + 0x4c8], r15
jle 0x1400411f6
mov rdi, qword [rsp + 0x5d0]
mov ebx, dword [rsp + 0x400]
movsxd r14, r13d
mov r13, qword [rsp + 0x448]
sub r15, rcx
add r14, 0xfffffffffffffffe
add r13, 0x10
lea r12, [rcx + 0x10]
lea esi, [rax + 1]
xor ebp, ebp
mov rcx, qword [r12]
mov edx, 0x25
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
cmp rax, rbp
jne 0x14004117f
mov rax, qword [r12]
mov qword [r15 + r12], rax
jmp 0x1400411b9
mov rdx, qword [r12]
lea r8, [rsp + 0x370]
xor r9d, r9d
mov rcx, rdi
mov byte [rsp + 0x20], sil
call fcn.140078dc8
mov r11, qword [rsp + 0x370]
add ebx, esi
mov qword [r13], r11
mov qword [r15 + r12], r11
add r13, 8
mov qword [rsp + 0x370], rbp
add r12, 8
sub r14, rsi
jne 0x140041161
mov rdi, qword [rsp + 0x478]
mov esi, dword [rsp + 0x348]
mov rbp, qword [rsp + 0x3c8]
mov r12, qword [rsp + 0x3a0]
mov dword [rsp + 0x400], ebx
mov rbx, qword [rsp + 0x4d8]
mov r14d, 1
lea rcx, [rsp + 0x370]
call fcn.140059370
xor r15d, r15d
lea rdx, [0x14011a708]
mov rcx, r12
mov dword [rsp + 0x370], 2
mov qword [rsp + 0x450], r15
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
mov r13d, dword [rsp + 0x3b0]
cmp eax, r15d
jne 0x140041269
cmp r13d, r15d
mov eax, 0x31
lea r12, [0x14011a70a]
cmovl r13d, eax
mov byte [rsp + 0x3b4], 0xff
mov byte [rsp + 0x325], r14b
mov dword [rsp + 0x3b0], r13d
mov qword [rsp + 0x3a0], r12
lea rdx, [0x14011a6d8]
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
cmp eax, r15d
jne 0x1400412b1
cmp r13d, r15d
mov eax, 0x71
lea r12, [0x14011a6da]
cmovl r13d, eax
mov byte [rsp + 0x3b4], 0xff
mov byte [rsp + 0x325], r14b
mov dword [rsp + 0x3b0], r13d
mov qword [rsp + 0x3a0], r12
mov ecx, 0x28
mov qword [rsp + 0x440], r15
lea eax, [rcx + 8]
cmp word [r12], ax
jb 0x1400412d4
cmp word [r12], 0x39
jbe 0x140041557
mov r13, qword [rsp + 0x380]
cmp cx, word [r12]
je 0x14004155f
mov eax, 0x26
cmp ax, word [r12]
je 0x14004131e
cmp r13, r15
jg 0x14004131e
mov rdx, qword [rsp + 0x5d8]
mov eax, 0x23
cmp ax, word [rdx]
jne 0x1400415c8
cmp word [rdx + 2], r15w
jne 0x1400415c8
jmp 0x14004155f
mov rcx, qword [rsp + 0x5d0]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, r12
mov qword [rsp + 0x20], r15
call fcn.140018664
cmp rax, r15
je 0x140041354
mov rbp, qword [rax + 8]
mov qword [rsp + 0x3c8], rbp
cmp rbp, r15
jne 0x140041598
neg byte [rsp + 0x328]
mov esi, dword [rsp + 0x398]
mov r12d, 0x10
sbb rdi, rdi
not rdi
and rdi, 0xffffffff80070057
mov r8, qword [rsp + 0x3a8]
cmp word [r8], r15w
je 0x14004148e
mov eax, 0x2a
cmp ax, word [r8]
je 0x14004148e
cmp byte [rsp + 0x379], r15b
je 0x140044515
cmp rdi, r15
je 0x140044515
test r12b, sil
jne 0x140044515
mov rcx, qword [rsp + 0x5d0]
mov rdx, rdi
call fcn.14003f058
mov rbx, rax
cmp sil, r15b
je 0x140041400
cmp rax, r15
je 0x140041400
mov rcx, qword [rax + 8]
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
mov rdx, qword [rbx + 8]
lea ecx, [rax + 1]
movsxd r8, ecx
lea rcx, [rdx + 2]
add r8, r8
call fcn.14001d2c8
mov r10, qword [rbx + 8]
mov eax, 0x3c
mov word [r10], ax
mov rbx, qword [rsp + 0x5d0]
cmp byte [rsp + 0x32b], r15b
je 0x14004148e
mov rdx, qword [rsp + 0x3a8]
lea rcx, [rsp + 0x3f0]
call fcn.14006d8b0
lea rdx, [0x14011a680]
lea rcx, [rsp + 0x3a8]
call fcn.140061a7c
lea rdx, [0x14011a670]
lea rcx, [rsp + 0x3f0]
call fcn.140061a7c
movsx edx, byte [rsp + 0x358]
mov r8, qword [rsp + 0x3a8]
mov rcx, rbx
call fcn.140064c5c
mov r8, qword [rsp + 0x3f0]
lea r9, [0x1401146d0]
mov rdx, rbp
mov rcx, rbx
call fcn.140064b84
lea rcx, [rsp + 0x3f0]
call fcn.140059370
mov eax, dword [rsp + 0x400]
sub eax, r14d
cmp eax, 2
movsxd rbx, eax
jl 0x1400414d5
mov rax, qword [rsp + 0x448]
mov r8, qword [rax + rbx*8]
cmp r8, r15
je 0x1400414cc
mov rcx, qword [0x1401342e8]
add r8, 0xfffffffffffffff8
xor edx, edx
call qword [sym.imp.KERNEL32.DLL_HeapFree]
mov rax, qword [rsp + 0x448]
sub rbx, r14
cmp rbx, 2
jge 0x1400414a8
lea rcx, [rsp + 0x3e0]
call fcn.140059370
lea rcx, [rsp + 0x3d0]
call fcn.140059370
lea rcx, [rsp + 0x408]
call fcn.14001d9f4
lea rcx, [rsp + 0x408]
call fcn.140059370
lea rcx, [rsp + 0x488]
call fcn.140059370
lea rcx, [rsp + 0x460]
call fcn.140059370
lea rcx, [rsp + 0x4b8]
call fcn.140059370
lea rcx, [rsp + 0x3a8]
call fcn.140059370
lea rcx, [rsp + 0x470]
call fcn.140059370
mov rax, qword [rsp + 0x368]
jmp 0x1400445c2
mov r13, qword [rsp + 0x380]
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x4e0]
mov qword [rsp + 0x4e0], r12
call fcn.1400719a4
mov r11, qword [rsp + 0x440]
cmp r11, r15
je 0x140041354
mov rbp, r11
mov qword [rsp + 0x3c8], r11
movzx ecx, byte [rsp + 0x326]
mov rdx, qword [rsp + 0x5d8]
mov byte [rsp + 0x3b4], r14b
mov eax, ecx
cmp cl, r15b
mov byte [rsp + 0x34f], r15b
cmovl eax, r14d
mov byte [rsp + 0x326], al
cmp r13, r15
jle 0x1400415ec
cmp rbp, r15
je 0x1400415ec
lea rax, [r13 - 1]
cmp rax, r15
jl 0x1400415ec
sub rax, r14
mov rbp, qword [rbp]
jns 0x1400415db
mov qword [rsp + 0x3c8], rbp
mov rax, qword [rsp + 0x3e8]
or dword [rsp + 0x404], 0xffffffff
mov qword [rsp + 0x4e8], rbp
cmp rax, r15
je 0x140041b6a
cmp qword [rsp + 0x3c0], r15
jge 0x140041b6a
mov r13b, r14b
mov byte [rsp + 0x322], r14b
cmp rbp, r15
jne 0x140041643
mov qword [rsp + 0x368], 0xffffffff80070057
mov rbx, 0xffffffff80070057
jmp 0x140041aa5
mov r12, qword [rbp]
mov qword [rsp + 0x380], r15
mov qword [rsp + 0x4c0], r12
cmp r12, r15
je 0x14004177a
lea rcx, [0x14011a668]
mov rdx, rax
call fcn.14005aa64
cmp al, r15b
je 0x140041685
mov qword [rsp + 0x3c0], 2
jmp 0x140041a0d
mov rdx, qword [rsp + 0x3e8]
lea rcx, [0x14011a660]
call fcn.14005aa64
cmp al, r15b
je 0x1400416ab
mov qword [rsp + 0x3c0], r14
jmp 0x140041a0d
mov rdx, qword [rsp + 0x3e8]
lea rcx, [0x14011a650]
call fcn.14005aa64
cmp al, r15b
je 0x1400416d1
mov qword [rsp + 0x3c0], r15
jmp 0x140041a0d
mov rdx, qword [rsp + 0x3e8]
lea rcx, [0x14011a638]
call fcn.14005aa64
cmp al, r15b
je 0x1400416fc
mov eax, 3
mov qword [rsp + 0x3c0], rax
jmp 0x140041a0d
mov rdx, qword [rsp + 0x3e8]
lea rcx, [0x14011a628]
call fcn.14005aa64
cmp al, r15b
je 0x140041726
mov qword [rsp + 0x3c0], 4
jmp 0x140041a0d
mov rdx, qword [rsp + 0x3e8]
lea rcx, [0x14011a618]
call fcn.14005aa64
cmp al, r15b
je 0x140041750
mov qword [rsp + 0x3c0], 5
jmp 0x140041a0d
mov rdx, qword [rsp + 0x3e8]
lea rcx, [0x14011a60c]
call fcn.14005aa64
cmp al, r15b
je 0x14004177a
mov qword [rsp + 0x3c0], 6
jmp 0x140041a0d
mov rax, qword [rbp]
lea rcx, [rsp + 0x404]
lea r8, [rsp + 0x3e8]
mov qword [rsp + 0x28], rcx
lea rdx, [0x140124b28]
mov r9d, r14d
mov rcx, rbp
mov dword [rsp + 0x20], 0x800
call qword [rax + 0x28]
movsxd rdx, dword [rsp + 0x404]
movsxd rcx, eax
mov rax, rdx
mov qword [rsp + 0x3c0], rdx
cmp rcx, r15
jne 0x140041a83
cmp edx, r15d
jl 0x140041a83
mov eax, r15d
mov dword [rsp + 0x480], eax
cmp r12, r15
je 0x1400417fb
mov rax, qword [rbp]
lea rdx, [rsp + 0x480]
mov rcx, rbp
call qword [rax + 0x18]
mov eax, dword [rsp + 0x480]
mov qword [rsp + 0x3d8], r15
cmp eax, r15d
je 0x140041834
cmp r12, r15
je 0x140041834
mov rcx, qword [rsp + 0x380]
cmp rcx, r15
jne 0x140041845
mov rax, qword [rbp]
lea r9, [rsp + 0x380]
xor edx, edx
mov r8d, 0x800
mov rcx, rbp
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x380]
cmp rcx, r15
je 0x140041a76
cmp qword [0x140133980], r15
jne 0x14004185b
call fcn.140003838
mov rcx, qword [rsp + 0x380]
cmp byte [rsp + 0x339], r15b
mov al, byte [rsp + 0x32b]
jge 0x140041874
cmp al, r15b
jg 0x140041874
mov r15b, r14b
xor edx, edx
cmp al, dl
jle 0x140041895
mov rax, qword [rsp + 0x3a8]
cmp word [rax], dx
je 0x140041895
lea r8d, [rdx + 0x2a]
lea r14d, [rdx + 0x70]
cmp r8w, word [rax]
jne 0x14004189b
mov r14d, 2
mov r12d, 7
mov qword [rsp + 0x3d8], rdx
mov rax, qword [rcx]
lea r8, [rsp + 0x3d8]
mov edx, r12d
call qword [rax + 0x28]
mov rdx, qword [rsp + 0x3d8]
xor eax, eax
cmp rdx, rax
je 0x140041a4b
mov rcx, qword [rsp + 0x380]
movsxd r13, dword [rdx]
mov rax, qword [rcx]
call qword [rax + 0xa0]
xor edx, edx
cmp r15b, dl
je 0x140041901
movsxd rax, dword [rsp + 0x404]
cmp r13, rax
je 0x1400419f1
lea eax, [rdx + 1]
jmp 0x1400419d8
mov rcx, qword [rsp + 0x380]
or dword [rsp + 0x348], 0xffffffff
mov r8, qword [rsp + 0x428]
mov rax, qword [rcx]
lea rdx, [rsp + 0x348]
mov r9d, r14d
mov qword [rsp + 0x20], rdx
mov edx, r13d
call qword [rax + 0x38]
mov r11d, dword [rsp + 0x348]
mov r13, qword [rsp + 0x428]
xor edx, edx
cmp r11d, edx
jle 0x1400419bd
mov rdx, qword [rsp + 0x3e8]
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
xor edx, edx
cmp eax, edx
jne 0x1400419b5
mov al, byte [rsp + 0x339]
cmp al, dl
jl 0x14004197c
movsx ecx, al
mov rax, qword [rsp + 0x3d8]
cmp ecx, dword [rax + 0x1c]
jne 0x1400419b5
mov r11d, dword [rsp + 0x348]
lea eax, [r11 - 1]
mov byte [rsp + 0x358], al
jmp 0x1400419bd
movsxd rcx, r11d
cmp qword [r13 + rcx*8], rdx
je 0x1400419c2
mov rcx, qword [r13 + rcx*8]
call qword [0x140133980]
movsxd r11, dword [rsp + 0x348]
xor edx, edx
mov qword [r13 + r11*8], rdx
mov r11d, dword [rsp + 0x348]
mov eax, 1
sub r11d, eax
mov dword [rsp + 0x348], r11d
jns 0x140041991
cmp byte [rsp + 0x358], dl
jge 0x1400419f1
add r12, rax
cmp r12, 0x7fffffff
jge 0x140041a4b
mov rcx, qword [rsp + 0x380]
jmp 0x1400418a1
mov rax, qword [rsp + 0x4c0]
xor r15d, r15d
cmp qword [rax + r12*8], r15
je 0x140041a4e
mov qword [rsp + 0x3c0], r12
mov r12, rax
mov al, byte [rsp + 0x34c]
or byte [rsp + 0x3bc], 6
mov r13b, 0xff
mov byte [rsp + 0x322], r13b
cmp al, r15b
je 0x140041a35
or al, 2
mov byte [rsp + 0x34c], al
mov rax, qword [rsp + 0x3c0]
mov rbp, qword [r12 + rax*8]
mov qword [rsp + 0x3c8], rbp
jmp 0x140041a56
xor r15d, r15d
mov r13b, byte [rsp + 0x322]
mov rcx, qword [rsp + 0x380]
cmp rcx, r15
je 0x140041a76
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x380], r15
call fcn.14005fafc
mov rdx, qword [rsp + 0x5d8]
jmp 0x140041b75
mov qword [rsp + 0x368], 0xffffffff80004001
cmp byte [rsp + 0x32b], r15b
jne 0x140041b85
mov rbx, qword [rsp + 0x368]
mov r12d, 0x10
mov al, byte [rsp + 0x326]
cmp al, r15b
jg 0x140041acb
mov rcx, qword [rsp + 0x3e0]
call fcn.14001a098
mov al, byte [rsp + 0x326]
cmp qword [rsp + 0x440], r15
je 0x140041ada
cmp al, r15b
jg 0x140041adf
call fcn.14001dfa0
cmp byte [rsp + 0x32a], r15b
je 0x1400443cd
lea rcx, [rsp + 0x3e0]
call fcn.140059370
lea rcx, [rsp + 0x3d0]
call fcn.140059370
lea rcx, [rsp + 0x408]
call fcn.14001d9f4
lea rcx, [rsp + 0x408]
call fcn.140059370
lea rcx, [rsp + 0x488]
call fcn.140059370
lea rcx, [rsp + 0x460]
call fcn.140059370
lea rcx, [rsp + 0x4b8]
call fcn.140059370
lea rcx, [rsp + 0x3a8]
call fcn.140059370
lea rcx, [rsp + 0x470]
call fcn.140059370
mov rax, rdi
jmp 0x1400445c2
mov r13b, r15b
mov byte [rsp + 0x322], r15b
cmp byte [rsp + 0x32b], r15b
je 0x140041bad
mov r14d, 1
mov rbx, qword [rsp + 0x3c0]
mov cl, byte [rsp + 0x320]
mov r12d, 0x10
mov qword [rsp + 0x368], rbx
mov rdi, rbx
mov sil, r12b
jmp 0x1400443ed
mov r10d, 1
lea r9, [rbx + 0xa08]
cmp r13b, r10b
jne 0x140041bd2
mov rax, qword [rsp + 0x430]
mov qword [rax], r9
mov rdx, qword [rsp + 0x5d8]
cmp byte [rsp + 0x329], r15b
jne 0x1400422d8
cmp byte [rsp + 0x338], r15b
je 0x1400422d8
mov r8, qword [rsp + 0x4c8]
cmp qword [r8 + 8], r15
je 0x1400422d8
mov r11b, byte [rsp + 0x324]
mov ecx, dword [rsp + 0x370]
cmp r11b, r15b
je 0x140041c2b
mov rax, qword [r8 + 0x10]
cmp rax, r15
mov qword [rsp + 0x330], rax
mov eax, 3
cmovne ecx, eax
cmp byte [rsp + 0x3bc], r15b
je 0x140041c43
mov qword [rbx], r15
mov rdx, qword [rsp + 0x5d8]
mov esi, r10d
mov al, byte [rsp + 0x321]
mov byte [rsp + 0x338], al
movsxd rax, ecx
movsxd rcx, esi
cmp esi, 0x64
ja 0x1400422d8
lea r14, [rbx + rcx*8]
mov rcx, qword [rsp + 0x490]
mov bl, byte [rsp + 0x338]
lea rdi, [r8 + rax*8]
mov bpl, bl
xor r10d, r10d
lea r15, [rcx + rax*8 - 8]
mov rax, qword [rdi]
mov ecx, 8
add rdi, rcx
add r15, rcx
mov qword [rsp + 0x330], rax
cmp rax, r10
je 0x1400422a9
mov rdx, qword [rsp + 0x438]
mov qword [r14], rax
mov rcx, qword [rsp + 0x330]
mov r12w, word [rcx]
mov r8b, r10b
cmp rdx, r10
jne 0x140041cc5
mov bpl, bl
jmp 0x140041ce2
cmp word [rdx], r10w
je 0x140041ce2
mov bpl, byte [rdx]
lea rax, [rdx + 2]
cmp word [rax], r10w
cmovne rdx, rax
mov qword [rsp + 0x438], rdx
mov eax, 0x23
lea edx, [rax + 7]
cmp bpl, al
je 0x140041de7
cmp bpl, dl
je 0x140041de7
lea r11d, [rax + 0x19]
cmp bpl, r11b
lea r11d, [rax + 0x1b]
je 0x140041ded
cmp bpl, r11b
je 0x140041ded
lea edx, [rax + 1]
cmp bpl, dl
je 0x140041f6b
lea edx, [rax + 0x1d]
cmp bpl, dl
je 0x140041fa2
lea edx, [rax + 0x1a]
cmp bpl, dl
je 0x140041fbe
lea edx, [rax + 0x5b]
cmp bpl, dl
je 0x140041f57
cmp bpl, r10b
jne 0x140041f0f
cmp ax, r12w
je 0x1400421cc
lea r8d, [rax + 0x19]
cmp r8w, r12w
je 0x140041fd7
cmp r11w, r12w
jne 0x140042288
cmp r11w, word [rcx]
jne 0x140041d83
add rcx, 2
mov qword [rsp + 0x330], rcx
mov r8d, 0x3a
mov dword [rsp + 0x348], 0xc
cmp r8w, word [rcx]
jne 0x140041e6e
add rcx, 2
lea rdx, [rsp + 0x348]
mov qword [rsp + 0x330], rcx
lea rcx, [rsp + 0x330]
call fcn.14006608c
mov rcx, qword [rsp + 0x330]
mov r8d, 0x3a
cmp r8w, word [rcx]
jne 0x140041ddf
add rcx, 2
mov qword [rsp + 0x330], rcx
xor r10d, r10d
jmp 0x140041e6e
mov r11d, 0x3e
mov r8d, 0x3c
cmp r8w, r12w
je 0x140041f0f
cmp ax, r12w
je 0x140041f0f
cmp dx, r12w
je 0x140041f0f
lea edx, [r8 - 0x18]
cmp dx, r12w
je 0x140041f0f
lea edx, [r8 + 4]
cmp dx, r12w
je 0x140041f0f
lea edx, [r8 + 1]
cmp dx, r12w
je 0x140041f0f
lea edx, [r8 + 0x42]
cmp dx, r12w
je 0x140041f0f
cmp bpl, al
je 0x1400421cc
cmp bpl, r8b
je 0x140041fd7
movsx r12d, bpl
cmp bpl, r11b
je 0x140041d71
mov r8d, 0x3a
mov r9d, 0x2a
cmp r9w, word [rcx]
jne 0x140041e86
add rcx, 2
mov qword [rsp + 0x330], rcx
cmp r9w, r12w
mov eax, 0xc
mov edx, 0x400b
cmove eax, edx
mov r13w, r10w
mov dword [rsp + 0x348], eax
cmp r8w, word [rcx]
jne 0x140041eea
add rcx, 2
lea rdx, [rsp + 0x348]
mov qword [rsp + 0x330], rcx
lea rcx, [rsp + 0x330]
call fcn.14006608c
mov rcx, qword [rsp + 0x330]
mov eax, 0x3a
cmp ax, word [rcx]
jne 0x140041ee7
add rcx, 2
mov qword [rsp + 0x330], rcx
xor r10d, r10d
mov eax, 0x7e
cmp ax, word [rcx]
jne 0x140041ff9
add rcx, 2
mov r13d, 0xfde9
mov qword [rsp + 0x330], rcx
jmp 0x140042007
add rcx, 2
movzx edx, r12w
mov r8b, 1
sub edx, eax
mov qword [rsp + 0x330], rcx
je 0x1400421cc
sub edx, 7
je 0x140041e68
sub edx, 0x12
je 0x140041fd1
mov eax, 1
sub edx, eax
je 0x140041fbe
sub edx, eax
je 0x140041d71
sub edx, 2
je 0x140041fa2
cmp edx, r11d
jne 0x140041f70
mov r13d, 0xfde9
cmp rcx, r10
je 0x140042137
jmp 0x1400420ab
mov eax, 1
mov qword [r14], rcx
cmp r13b, al
jne 0x140042288
mov eax, 8
mov word [r9], ax
mov rax, qword [rsp + 0x330]
add r9, 0x18
mov qword [r9 - 0x10], rax
mov qword [rsp + 0x360], r9
jmp 0x140042288
mov r13d, r10d
cmp rcx, r10
jne 0x1400420ab
mov r13b, byte [rsp + 0x322]
mov qword [r14], r10
jmp 0x140042288
mov rax, qword [r15]
movsx rcx, r8b
lea rcx, [rax + rcx*2]
mov qword [r14], rcx
jmp 0x140042288
mov r8d, 0x3c
cmp r8w, word [rcx]
jne 0x140041fe9
add rcx, 2
mov qword [rsp + 0x330], rcx
mov dword [rsp + 0x348], 0x14
jmp 0x1400421e9
mov eax, pe_nt_image_headers64
cmp ax, word [rcx]
jne 0x140042007
mov r13w, r10w
lea rcx, [rsp + 0x370]
call fcn.140061940
mov r12, qword [rsp + 0x5d0]
xor eax, eax
lea r9d, [rax + 0x2c]
lea r8, [rsp + 0x370]
lea rdx, [rsp + 0x330]
mov rcx, r12
mov word [rsp + 0x20], ax
call fcn.140052b08
mov rdx, qword [rsp + 0x370]
xor eax, eax
or r9d, 0xffffffff
xor r8d, r8d
mov rcx, r12
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x20], rax
call fcn.140018664
xor ecx, ecx
cmp rax, rcx
je 0x14004207a
mov rax, qword [rax + 8]
mov qword [rsp + 0x330], rax
jmp 0x140042082
mov rax, qword [rsp + 0x330]
cmp r13w, cx
je 0x14004215e
cmp rax, rcx
je 0x14004214f
cmp word [rax], cx
je 0x14004215e
lea rcx, [rsp + 0x370]
call fcn.140059370
mov ecx, 8
call fcn.1400fa628
mov r12, rax
xor eax, eax
cmp r12, rax
je 0x1400420c5
mov qword [r12], rax
jmp 0x1400420c8
mov r12, rax
mov rdx, qword [rsp + 0x330]
movzx r9d, r13w
or r8, 0xffffffffffffffff
mov rcx, r12
call fcn.14006187c
mov r11, qword [r12]
mov eax, 1
mov qword [rsp + 0x28], rax
mov eax, 8
lea r9, [rsp + 0x490]
lea r8, [rsp + 0x418]
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0x408]
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x330], r11
mov qword [rsp + 0x490], r12
call fcn.140061c90
mov rcx, qword [rsp + 0x330]
xor r10d, r10d
mov r13b, byte [rsp + 0x322]
mov r9, qword [rsp + 0x360]
mov qword [r14], rcx
jmp 0x140042288
lea rax, [0x1401145d8]
mov qword [rsp + 0x330], rax
lea rcx, [rsp + 0x370]
mov qword [r14], rax
call fcn.140059370
mov r13b, byte [rsp + 0x322]
mov r9, qword [rsp + 0x360]
cmp r13b, 1
jne 0x140042285
mov eax, dword [rsp + 0x348]
mov word [r9], ax
cmp eax, 0xc
jne 0x1400421bb
mov rcx, qword [rsp + 0x330]
mov rax, qword [rcx]
mov qword [r9], rax
mov rax, qword [rcx + 8]
mov qword [r9 + 8], rax
mov rax, qword [rcx + 0x10]
mov qword [r9 + 0x10], rax
jmp 0x140042279
mov rax, qword [rsp + 0x330]
mov qword [r9 + 8], rax
jmp 0x140042279
cmp ax, word [rcx]
jne 0x1400421dd
add rcx, 2
mov qword [rsp + 0x330], rcx
mov eax, 3
mov dword [rsp + 0x348], eax
mov r12d, 0x3a
cmp r12w, word [rcx]
jne 0x140042233
add rcx, 2
lea rdx, [rsp + 0x348]
mov qword [rsp + 0x330], rcx
lea rcx, [rsp + 0x330]
call fcn.14006608c
mov rax, qword [rsp + 0x330]
cmp r12w, word [rax]
jne 0x140042230
add rax, 2
mov qword [rsp + 0x330], rax
xor r10d, r10d
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x330]
mov qword [rsp + 0x450], r10
call fcn.1400719a4
mov r11, qword [rsp + 0x450]
mov r9, qword [rsp + 0x360]
mov qword [r14], r11
cmp r13b, 1
jne 0x140042285
movzx eax, word [rsp + 0x348]
mov qword [r9 + 8], r11
mov word [r9], ax
add r9, 0x18
mov qword [rsp + 0x360], r9
xor r10d, r10d
mov eax, 8
inc esi
add r14, rax
cmp byte [rsp + 0x378], r10b
jne 0x1400422a9
mov eax, 0x64
cmp esi, eax
jbe 0x140041c82
mov rdx, qword [rsp + 0x5d8]
mov rbx, qword [rsp + 0x4d8]
mov rdi, qword [rsp + 0x478]
xor r15d, r15d
mov byte [rsp + 0x321], bpl
mov rbp, qword [rsp + 0x3c8]
lea r10d, [r15 + 1]
cmp byte [rsp + 0x320], r15b
je 0x1400422fd
mov rax, rdx
mov rdx, qword [rsp + 0x340]
mov qword [rsp + 0x5d8], rdx
mov qword [rsp + 0x340], rax
mov byte [rsp + 0x324], r15b
mov r14d, r15d
mov r12d, 0x22
cmp rdx, r15
je 0x14004232e
cmp r12w, word [rdx]
mov rcx, rdx
cmove r14d, r10d
call fcn.14001b86c
mov rdx, rax
mov qword [rsp + 0x5d8], rax
mov r8d, 0x2a
mov qword [rsp + 0x390], rdx
mov rcx, rdx
cmp r8w, word [rdx]
jne 0x140042360
lea rax, [rcx + 2]
cmp r8w, word [rax]
jne 0x140042360
mov qword [rsp + 0x390], rax
mov rcx, rax
cmp r8w, word [rax]
je 0x140042345
mov r9d, 0x30
lea r10d, [r9 - 0x27]
cmp r8w, word [rcx]
jne 0x14004240a
movzx eax, word [rcx + 2]
sub ax, r9w
cmp ax, r10w
jbe 0x14004238a
or byte [rsp + 0x323], 2
cmp r8w, word [rcx]
jne 0x14004240a
lea r8, [rcx + 2]
movzx eax, word [r8]
sub ax, r9w
cmp ax, r10w
ja 0x14004240a
cmp rcx, rdx
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x390]
seta r15b
xor eax, eax
mov qword [rsp + 0x390], r8
mov qword [rsp + 0x478], rax
inc r15b
call fcn.140071820
xor r8d, r8d
cmp eax, r8d
jle 0x140040cb4
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x350], rax
cmp rax, r8
je 0x140040cb4
mov rdx, qword [rsp + 0x5d8]
mov rcx, qword [rsp + 0x390]
jmp 0x14004241e
xor r8d, r8d
cmp word [rcx], r8w
jne 0x140042423
mov rcx, r8
mov qword [rsp + 0x390], rcx
cmp r15b, r8b
jne 0x140042443
cmp rcx, r8
je 0x140042443
mov eax, 0x2e
cmp word [rcx], ax
jne 0x140042443
cmp word [rcx + 2], r8w
jne 0x140042443
mov eax, 1
mov r13b, al
jmp 0x14004244f
mov r13b, r8b
cmp r15b, r8b
jne 0x1400424eb
cmp byte [rsp + 0x34f], r8b
je 0x1400424eb
cmp byte [rsp + 0x323], r8b
jne 0x1400424eb
xor r15d, r15d
cmp r13b, r15b
je 0x14004247c
mov rax, qword [0x140133a68]
jmp 0x14004248a
call qword [sym.imp.KERNEL32.DLL_GetModuleHandleW]
mov rdx, qword [rsp + 0x5d8]
cmp rax, r15
jne 0x1400424d1
lea rcx, [rsp + 0x325]
call fcn.14001a0ec
mov rcx, qword [rsp + 0x5d8]
mov r14d, 1
mov bl, r14b
call qword [sym.imp.KERNEL32.DLL_LoadLibraryW]
cmp rax, r15
jne 0x1400424da
cmp byte [rsp + 0x328], r15b
je 0x1400424c7
mov eax, r15d
jmp 0x1400424cd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov edi, eax
jmp 0x1400424dd
mov bl, r15b
mov r14d, 1
mov rdi, r15
cmp bl, r14b
je 0x140042b91
jmp 0x140041aed
lea rcx, [rsp + 0x325]
call fcn.14001a0ec
xor r8d, r8d
cmp rbp, r8
jne 0x140042d93
mov dl, byte [rsp + 0x323]
mov rax, qword [0x140133a68]
mov r9, qword [rsp + 0x390]
mov rcx, qword [rsp + 0x350]
mov r10d, 0xffdf
cmp dl, r8b
jne 0x14004256f
cmp rcx, r8
jne 0x14004256f
cmp byte [rsp + 0x3b4], r8b
jne 0x14004256f
cmp r9, r8
je 0x140042567
lea ecx, [r8 + 0x2e]
cmp word [r9], cx
jne 0x1400429a4
cmp word [r9 + 2], r8w
jne 0x1400429a4
mov rcx, rax
mov qword [rsp + 0x350], rax
jmp 0x140042578
mov byte [rsp + 0x3b4], 2
cmp r9, r8
je 0x140042b6f
cmp rcx, r8
jne 0x140042b99
cmp dl, r8b
je 0x1400429a4
xor r15d, r15d
mov rcx, r9
mov qword [rsp + 0x4a0], r15
mov qword [rsp + 0x4a8], r15
mov qword [rsp + 0x4b0], r15
movzx r10d, word [r9]
cmp r14d, r15d
lea r14d, [r15 + 0x23]
mov qword [rsp + 0x370], rcx
jne 0x1400425e2
cmp r14w, word [r9]
jne 0x1400425e2
movzx eax, word [r9 + 2]
lea edx, [r15 + 9]
sub ax, 0x30
cmp ax, dx
ja 0x1400425e2
mov r11, qword [rsp + 0x5d8]
jmp 0x14004266d
mov r13d, 0x2a
cmp r13w, r10w
jne 0x140042605
add r9, 2
mov rcx, r9
mov qword [rsp + 0x390], r9
mov qword [rsp + 0x370], rcx
mov r11, r15
cmp r12w, word [r9]
jne 0x140042663
add r9, 2
lea rcx, [rsp + 0x370]
mov edx, r12d
mov qword [rsp + 0x390], r9
mov qword [rsp + 0x370], r9
call fcn.14000a884
mov rcx, qword [rsp + 0x370]
cmp word [rcx], r15w
je 0x140042663
mov word [rcx], r15w
mov r9, qword [rsp + 0x390]
mov r11, rcx
mov rcx, qword [rsp + 0x370]
add rcx, 2
mov qword [rsp + 0x370], rcx
cmp r13w, r10w
jne 0x14004277c
mov r10, qword [0x140133f38]
mov r13, r15
jmp 0x14004268b
cmp r14w, ax
je 0x140042694
add rcx, 2
mov qword [rsp + 0x370], rcx
movzx eax, word [rcx]
cmp ax, r15w
jne 0x140042679
mov rax, rcx
cmp word [rcx], r15w
je 0x1400426cf
mov r8d, 0x3a
mov edx, 0x7c
cmp dx, word [rax]
je 0x1400426bf
cmp r8w, word [rax]
je 0x1400426bf
add rax, 2
cmp word [rax], r15w
jne 0x1400426a3
jmp 0x1400426cf
mov word [rax], r15w
mov rcx, qword [rsp + 0x370]
add rax, 2
cmp word [rax], r15w
lea r12, [0x140115910]
cmovne r12, rax
cmp r14w, word [rcx]
jne 0x14004278c
mov word [rcx], r15w
cmp r11, r15
je 0x1400426f5
mov word [r11], r15w
mov rcx, qword [rsp + 0x390]
mov eax, 0x2e
cmp ax, word [rcx]
jne 0x140042723
lea rax, [rcx + 2]
cmp word [rax], r15w
jne 0x140042723
mov r10, qword [0x140133a68]
mov rcx, rax
mov qword [rsp + 0x390], rax
cmp word [rcx], r15w
je 0x14004273b
xor edx, edx
lea r8d, [rdx + 2]
call qword [sym.imp.KERNEL32.DLL_LoadLibraryExW]
mov r10, rax
mov r13, rax
mov rax, qword [rsp + 0x370]
mov word [rax], r14w
cmp r10, r15
je 0x14004276c
mov rdx, qword [rsp + 0x370]
lea r9, [rsp + 0x4a0]
mov r8, r12
mov rcx, r10
mov qword [rsp + 0x20], r15
call fcn.14001e6ec
cmp r13, r15
je 0x14004278c
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x14004278c
lea rdx, [rsp + 0x4a0]
mov rcx, r9
call fcn.14001df18
mov r12, qword [rsp + 0x4a0]
mov r13d, dword [rsp + 0x4a8]
cmp r12, r15
jne 0x140042839
cmp byte [rsp + 0x320], r15b
mov r14d, 1
lea rcx, [rsp + 0x4a0]
mov rbx, r14
mov rdi, r15
mov byte [rsp + 0x327], r14b
sete dil
mov qword [rsp + 0x368], rbx
call fcn.140059370
cmp byte [rsp + 0x32a], r15b
je 0x140041aa5
mov bl, byte [rsp + 0x324]
cmp byte [rsp + 0x328], r15b
je 0x140042f00
lea rcx, [rsp + 0x3e0]
call fcn.140059370
lea rcx, [rsp + 0x3d0]
call fcn.140059370
lea rcx, [rsp + 0x408]
call fcn.14001d9f4
lea rcx, [rsp + 0x408]
call fcn.140059370
mov rdi, rbp
jmp 0x140041b21
lea rcx, [rsp + 0x3d0]
mov edx, 0x48
call fcn.140018484
mov r11, rax
cmp rax, r15
je 0x14004286e
mov rcx, rax
call fcn.140018468
lea rcx, [0x140117ac8]
mov qword [r11], rcx
lea rcx, [r11 + 8]
call fcn.140017c3c
lea r14, [r11 + 8]
mov r8, r13
mov rdx, r12
mov rcx, r14
mov qword [rsp + 0x3f0], r14
call fcn.1400286c4
cmp rax, r15
je 0x14004296f
cmp byte [rsp + 0x320], r15b
je 0x140042923
mov r8, qword [rsp + 0x340]
cmp r8, r15
je 0x1400428b2
cmp word [r8], r15w
jne 0x1400428c5
mov rax, qword [rsp + 0x3a8]
mov r8, r15
cmp word [rax], r15w
cmovne r8, rax
mov rdi, r14
mov sil, 1
cmp r8, r15
je 0x140042904
mov rax, qword [rsp + 0x4a0]
mov rcx, qword [rsp + 0x5d0]
lea r9, [rsp + 0x3d0]
mov qword [r14 + 0x10], rax
mov rdx, r14
mov qword [rsp + 0x4a0], r15
call fcn.14003ee08
mov qword [rsp + 0x3f0], r15
lea rcx, [rsp + 0x4a0]
call fcn.140059370
mov cl, byte [rsp + 0x320]
mov r14d, 1
jmp 0x1400443e4
mov rdx, qword [rsp + 0x3a0]
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0x438]
mov r9, rax
mov r8, rax
mov qword [rsp + 0x438], r15
call fcn.14006187c
mov rdx, qword [rsp + 0x438]
mov rcx, r14
call fcn.140017cc4
lea rcx, [rsp + 0x438]
mov rbp, rax
call fcn.140059370
cmp rbp, r15
jne 0x140042992
cmp byte [rsp + 0x320], r15b
mov eax, 1
mov rdi, r15
sete dil
mov byte [rsp + 0x327], al
mov qword [rsp + 0x368], rax
lea rcx, [rsp + 0x4a0]
call fcn.140059370
jmp 0x140042d96
movzx r12d, word [r9]
and r12d, r10d
je 0x1400429b7
mov r12d, dword [r9]
and r12d, 0xffdfffdf
xor r14d, r14d
cmp r13b, r14b
jne 0x140042b4f
cmp byte [rsp + 0x320], r14b
jne 0x140042b3e
cmp r12d, 0x45004b
jne 0x140042a2e
mov rcx, qword [0x1401312b8]
mov rdx, r9
call fcn.14005aa28
cmp al, r14b
jne 0x140042a22
mov rdx, qword [rsp + 0x390]
mov rcx, qword [0x1401312b8]
lea r8d, [r14 + 8]
call fcn.14005a9ec
cmp al, r14b
je 0x140042ad9
mov r9, qword [rsp + 0x390]
cmp r14w, word [r9 + 0x10]
jne 0x140042ae1
mov r14, qword [0x140133f98]
jmp 0x140042b52
cmp r12d, 0x530055
jne 0x140042a85
mov rcx, qword [0x1401312b0]
mov rdx, r9
call fcn.14005aa28
cmp al, r14b
jne 0x140042a79
mov rdx, qword [rsp + 0x390]
mov rcx, qword [0x1401312b0]
mov r8d, 6
call fcn.14005a9ec
cmp al, r14b
je 0x140042ad9
mov r9, qword [rsp + 0x390]
cmp r14w, word [r9 + 0xc]
jne 0x140042ae1
mov r14, qword [0x140133f90]
jmp 0x140042b52
cmp r12d, 0x440047
jne 0x140042ae1
mov rcx, qword [0x1401312a8]
mov rdx, r9
call fcn.14005aa28
cmp al, r14b
jne 0x140042ad0
mov rdx, qword [rsp + 0x390]
mov rcx, qword [0x1401312a8]
mov r8d, 5
call fcn.14005a9ec
cmp al, r14b
je 0x140042ad9
mov r9, qword [rsp + 0x390]
cmp r14w, word [r9 + 0xa]
jne 0x140042ae1
mov r14, qword [0x140133fa0]
jmp 0x140042b52
mov r9, qword [rsp + 0x390]
cmp qword [0x140133fa8], r14
je 0x140042b3e
cmp r12d, 0x4c004f
jne 0x140042b3e
mov rcx, qword [0x1401312a0]
mov rdx, r9
call fcn.14005aa28
cmp al, r14b
jne 0x140042b35
mov rdx, qword [rsp + 0x390]
mov rcx, qword [0x1401312a0]
mov r8d, 5
call fcn.14005a9ec
mov r9, qword [rsp + 0x390]
cmp al, r14b
je 0x140042b3e
cmp r14w, word [r9 + 0xa]
jne 0x140042b3e
mov r14, qword [0x140133fa8]
jmp 0x140042b52
mov rcx, r9
mov byte [rsp + 0x324], 1
call qword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov r14, rax
xor r8d, r8d
mov qword [rsp + 0x350], r14
cmp r14, r8
jne 0x140042ba1
call qword [sym.imp.KERNEL32.DLL_GetLastError]
xor r8d, r8d
mov edi, eax
jmp 0x140042b77
mov r14, qword [rsp + 0x350]
cmp r14, r8
jne 0x140042ba1
xor r15d, r15d
lea r14d, [r15 + 1]
cmp byte [rsp + 0x32a], r15b
jne 0x1400427e8
mov rbx, r15
jmp 0x140041aa5
mov r14, qword [rsp + 0x350]
mov r13, qword [rsp + 0x3a0]
or r12, 0xffffffffffffffff
mov qword [rsp + 0x3c8], r8
lea rcx, [rsp + 0x3c8]
mov r9, r12
mov r8, r12
mov rdx, r13
call fcn.14006187c
mov rdx, qword [rsp + 0x3c8]
mov rcx, r14
test r15b, 2
je 0x140042be3
call fcn.140017cc4
jmp 0x140042be9
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov rbp, rax
xor eax, eax
cmp rbp, rax
jne 0x140042d86
cmp byte [rsp + 0x329], al
je 0x140042d7e
cmp byte [rsp + 0x321], al
jne 0x140042d7e
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
movsxd r13, eax
mov rax, qword [rsp + 0x3a0]
lea r12, [r13 + r13]
mov r14, r13
movzx ecx, word [r12 + rax - 2]
mov eax, 0xffdf
and cx, ax
mov eax, 0x41
cmp cx, ax
je 0x140042d7e
mov eax, 0x57
cmp cx, ax
je 0x140042d7e
lea ecx, [rax - 0x4f]
call fcn.1400fa628
mov rbp, rax
xor eax, eax
cmp rbp, rax
je 0x140042c7a
lea ecx, [r13 + 2]
movsxd rdx, ecx
mov rcx, rbp
call fcn.1400619b4
jmp 0x140042c7d
mov rbp, rax
mov eax, 1
lea r9, [rsp + 0x490]
lea r8, [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov eax, 8
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0x408]
mov qword [rsp + 0x490], rbp
mov dword [rsp + 0x20], eax
call fcn.140061c90
mov rdx, qword [rsp + 0x3a0]
mov rcx, qword [rbp]
mov r8, r12
call fcn.14001d310
mov r13, qword [rbp]
mov eax, 0x57
mov word [r12 + r13], ax
xor eax, eax
mov qword [rsp + 0x3a0], r13
mov word [r13 + r14*2 + 2], ax
mov r14, qword [rsp + 0x350]
mov rdx, qword [rsp + 0x3c8]
mov rcx, r14
cmp r15b, 2
jne 0x140042d0f
call fcn.140017cc4
jmp 0x140042d15
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
xor r15d, r15d
mov rbp, rax
cmp rax, r15
jne 0x140042d86
lea eax, [r15 + 0x41]
lea rcx, [rsp + 0x428]
mov rdx, r13
mov word [r12 + r13], ax
or rax, 0xffffffffffffffff
mov qword [rsp + 0x428], r15
mov r9, rax
mov r8, rax
call fcn.14006187c
mov rdx, qword [rsp + 0x428]
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rcx, [rsp + 0x428]
mov rbp, rax
call fcn.140059370
cmp rbp, r15
je 0x140042d7e
lea eax, [r15 + 0x40]
mov byte [rsp + 0x321], al
jmp 0x140042d86
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov edi, eax
lea rcx, [rsp + 0x3c8]
call fcn.140059370
xor r15d, r15d
mov dword [rsp + 0x468], r15d
mov r10d, 1
cmp byte [rsp + 0x34c], r15b
je 0x140042dc3
mov rcx, qword [rsp + 0x3f8]
mov eax, esi
add rcx, 8
add esi, r10d
mov qword [rbx + rax*8], rcx
mov r14, qword [rsp + 0x4e8]
cmp byte [rsp + 0x3bc], r15b
je 0x140042dd8
mov qword [rbx], r14
mov rcx, qword [rsp + 0x3c0]
mov r13b, byte [rsp + 0x322]
cmp rcx, r15
jl 0x140042ead
mov rax, qword [r14]
mov rbp, qword [rax + rcx*8]
cmp r13b, r10b
jne 0x140042ead
mov r8, qword [rsp + 0x430]
mov rdx, qword [rsp + 0x360]
movabs rax, 0x2aaaaaaaaaaaaaab
mov rcx, qword [r8]
sub rdx, rcx
imul rdx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [r8 + 0x10], edx
lea eax, [rdx - 1]
shr edx, 1
cmp edx, r15d
movsxd r8, eax
jle 0x140042ead
lea rax, [r8 + r8*2]
mov r9d, edx
lea rdx, [rcx + rax*8]
mov rax, qword [rcx]
lea r8, [rsp + 0x4f0]
mov qword [r8], rax
mov rax, qword [rcx + 8]
mov qword [r8 + 8], rax
mov rax, qword [rcx + 0x10]
mov qword [r8 + 0x10], rax
mov rax, qword [rdx]
lea r8, [rsp + 0x4f0]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
add rcx, 0x18
mov qword [rcx - 0x10], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx - 8], rax
mov rax, qword [r8]
mov qword [rdx], rax
mov rax, qword [r8 + 8]
sub rdx, 0x18
sub r9, r10
mov qword [rdx + 0x20], rax
mov rax, qword [r8 + 0x10]
mov qword [rdx + 0x28], rax
jne 0x140042e4e
cmp byte [rsp + 0x32a], r15b
je 0x140042f48
mov bl, byte [rsp + 0x324]
mov r14d, 1
cmp bl, r14b
jne 0x1400427ef
cmp byte [rsp + 0x3b4], r15b
jg 0x1400427ef
mov rax, qword [rsp + 0x350]
cmp rax, r15
je 0x1400427ef
mov rcx, rax
mov bl, 2
call qword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x1400427ef
cmp rbp, r15
je 0x140042f1d
lea rdx, [0x14011a600]
lea rcx, [rsp + 0x510]
mov r8, rbp
call qword [sym.imp.USER32.DLL_wsprintfW]
mov rdx, qword [rsp + 0x3a8]
mov rcx, qword [rsp + 0x5d0]
lea r8, [rsp + 0x510]
call fcn.140060d64
cmp bl, 2
je 0x140041a9d
jmp 0x140041aed
mov r12b, r15b
cmp rbp, r15
je 0x140044234
mov r15d, dword [rsp + 0x3b0]
test r15b, 7
je 0x140042fcb
call fcn.14005fafc
xor eax, eax
cmp r15d, eax
je 0x140042fcd
cmp qword [0x1401347b8], rax
je 0x140042fcd
cmp qword [0x1401347c0], rax
je 0x140042fcd
lea rcx, [0x140135110]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov rcx, qword [rsp + 0x5d0]
mov al, byte [rcx + 0x12]
test al, 2
jne 0x140042fbe
mov edx, 1
movzx r12d, r12b
test dl, al
cmove r12d, edx
or al, 3
mov byte [rcx + 0x12], al
xor ecx, ecx
or r12b, 2
call qword [0x1401347b8]
jmp 0x140042fcb
lea rcx, [0x140135110]
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
xor eax, eax
cmp byte [rsp + 0x327], al
je 0x140042fde
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov ecx, 1
cmp r13b, cl
jne 0x140043056
mov rdi, qword [r14]
movsx ebx, byte [rsp + 0x34e]
mov r15b, cl
mov dword [rsp + 0x388], r15d
call qword [sym.imp.KERNEL32.DLL_GetUserDefaultLCID]
mov edx, dword [rsp + 0x404]
mov r9d, eax
lea rax, [rsp + 0x468]
lea r8, [0x140124b28]
mov qword [rsp + 0x40], rax
xor eax, eax
mov rcx, r14
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x28], rax
mov word [rsp + 0x20], bx
call qword [rdi + 0x30]
movsxd rdi, eax
jmp 0x14004423c
xor r14d, r14d
cmp byte [rsp + 0x329], r14b
je 0x14004317b
lea eax, [r14 + 0x40]
mov r15b, cl
mov qword [rsp + 0x430], r14
mov dword [rsp + 0x388], r15d
mov word [rsp + 0x5e0], r14w
cmp byte [rsp + 0x321], al
jne 0x1400430c6
mov rdx, qword [rsp + 0x340]
cmp rdx, r14
je 0x1400430d3
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0x430]
mov r9, rax
mov r8, rax
call fcn.14006187c
mov r11, qword [rsp + 0x430]
mov qword [rsp + 0x340], r11
jmp 0x1400430ce
mov r11, qword [rsp + 0x340]
cmp r11, r14
jne 0x1400430e3
lea rax, [rsp + 0x5e0]
mov qword [rsp + 0x340], rax
mov rsi, qword [rsp + 0x5d0]
mov rbx, qword [0x140133f38]
xor edx, edx
mov rcx, rsi
call fcn.14001adf8
mov rdi, qword [rsp + 0x3a0]
cmp rdi, r14
je 0x140043145
lea rcx, [0x140116998]
mov r8d, 0x12
mov rdx, rdi
call fcn.14005a9ec
cmp al, r14b
je 0x140043145
cmp word [rdi + 0x24], r14w
je 0x14004313a
mov eax, 1
mov word [rdi + 0x24], ax
cmp word [rdi + 0x26], r14w
jne 0x140043145
mov qword [rsp + 0x4d0], r14
mov rbx, r14
mov rcx, qword [rsi + 0x40]
call fcn.1400596ec
mov r9, qword [rsp + 0x4d0]
mov r8, qword [rsp + 0x340]
mov rcx, rax
mov rdx, rbx
call rbp
lea rcx, [rsp + 0x430]
mov rdi, rax
call fcn.140059370
jmp 0x140044247
cmp dword [rsp + 0x5e0], ecx
jne 0x140043c13
mov r15d, dword [rsp + 0x388]
mov edx, 0x64
cmp esi, edx
lea eax, [rdx - 0x44]
movzx r15d, r15b
cmovbe r15d, eax
mov dword [rsp + 0x388], r15d
cmp esi, 7
ja 0x140043286
cmp esi, r14d
je 0x140043282
sub esi, ecx
je 0x14004327b
sub esi, ecx
je 0x140043270
sub esi, ecx
je 0x140043261
sub esi, ecx
je 0x140043c75
sub esi, ecx
je 0x140043245
sub esi, ecx
je 0x140043220
cmp esi, ecx
jne 0x14004423f
mov rax, qword [rbx + 0x30]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
mov rdi, rax
jmp 0x14004423f
mov rax, qword [rbx + 0x28]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x20]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
call rbp
jmp 0x140043218
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
call rbp
jmp 0x140043218
mov rcx, qword [rbx]
call rbp
jmp 0x140043218
call rbp
jmp 0x140043218
cmp esi, 0x14
ja 0x14004334d
mov rax, qword [rbx + 0x98]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0x98], rax
mov rax, qword [rbx + 0x90]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x90], rax
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0x88], rax
mov rax, qword [rbx + 0x80]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
cmp esi, 0x1e
ja 0x1400434aa
mov rax, qword [rbx + 0xe8]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0xe8], rax
mov rax, qword [rbx + 0xe0]
mov rdx, qword [rbx + 8]
mov qword [rsp + 0xe0], rax
mov rax, qword [rbx + 0xd8]
mov rcx, qword [rbx]
mov qword [rsp + 0xd8], rax
mov rax, qword [rbx + 0xd0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rbx + 0xc8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rbx + 0xc0]
mov qword [rsp + 0xc0], rax
mov rax, qword [rbx + 0xb8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rbx + 0xb0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rbx + 0xa8]
mov qword [rsp + 0xa8], rax
mov rax, qword [rbx + 0xa0]
mov qword [rsp + 0xa0], rax
mov rax, qword [rbx + 0x98]
mov qword [rsp + 0x98], rax
mov rax, qword [rbx + 0x90]
mov qword [rsp + 0x90], rax
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0x88], rax
mov rax, qword [rbx + 0x80]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
cmp esi, 0x28
ja 0x14004369d
mov rax, qword [rbx + 0x138]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0x138], rax
mov rax, qword [rbx + 0x130]
mov rdx, qword [rbx + 8]
mov qword [rsp + 0x130], rax
mov rax, qword [rbx + 0x128]
mov rcx, qword [rbx]
mov qword [rsp + 0x128], rax
mov rax, qword [rbx + 0x120]
mov qword [rsp + 0x120], rax
mov rax, qword [rbx + 0x118]
mov qword [rsp + 0x118], rax
mov rax, qword [rbx + 0x110]
mov qword [rsp + 0x110], rax
mov rax, qword [rbx + 0x108]
mov qword [rsp + 0x108], rax
mov rax, qword [rbx + 0x100]
mov qword [rsp + 0x100], rax
mov rax, qword [rbx + 0xf8]
mov qword [rsp + 0xf8], rax
mov rax, qword [rbx + 0xf0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rbx + 0xe8]
mov qword [rsp + 0xe8], rax
mov rax, qword [rbx + 0xe0]
mov qword [rsp + 0xe0], rax
mov rax, qword [rbx + 0xd8]
mov qword [rsp + 0xd8], rax
mov rax, qword [rbx + 0xd0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rbx + 0xc8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rbx + 0xc0]
mov qword [rsp + 0xc0], rax
mov rax, qword [rbx + 0xb8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rbx + 0xb0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rbx + 0xa8]
mov qword [rsp + 0xa8], rax
mov rax, qword [rbx + 0xa0]
mov qword [rsp + 0xa0], rax
mov rax, qword [rbx + 0x98]
mov qword [rsp + 0x98], rax
mov rax, qword [rbx + 0x90]
mov qword [rsp + 0x90], rax
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0x88], rax
mov rax, qword [rbx + 0x80]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
cmp esi, edx
ja 0x14004423f
mov rax, qword [rbx + 0x318]
mov qword [rsp + 0x318], rax
mov rax, qword [rbx + 0x310]
mov qword [rsp + 0x310], rax
mov rax, qword [rbx + 0x308]
mov qword [rsp + 0x308], rax
mov rax, qword [rbx + 0x300]
mov qword [rsp + 0x300], rax
mov rax, qword [rbx + 0x2f8]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rbx + 0x2f0]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rbx + 0x2e8]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rbx + 0x2e0]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rbx + 0x2d8]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rbx + 0x2d0]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rbx + 0x2c8]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rbx + 0x2c0]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rbx + 0x2b8]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rbx + 0x2b0]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rbx + 0x2a8]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rbx + 0x2a0]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rbx + 0x298]
mov qword [rsp + 0x298], rax
mov rax, qword [rbx + 0x290]
mov qword [rsp + 0x290], rax
mov rax, qword [rbx + 0x288]
mov qword [rsp + 0x288], rax
mov rax, qword [rbx + 0x280]
mov qword [rsp + 0x280], rax
mov rax, qword [rbx + 0x278]
mov qword [rsp + 0x278], rax
mov rax, qword [rbx + 0x270]
mov qword [rsp + 0x270], rax
mov rax, qword [rbx + 0x268]
mov qword [rsp + 0x268], rax
mov rax, qword [rbx + 0x260]
mov qword [rsp + 0x260], rax
mov rax, qword [rbx + 0x258]
mov qword [rsp + 0x258], rax
mov rax, qword [rbx + 0x250]
mov qword [rsp + 0x250], rax
mov rax, qword [rbx + 0x248]
mov qword [rsp + 0x248], rax
mov rax, qword [rbx + 0x240]
mov qword [rsp + 0x240], rax
mov rax, qword [rbx + 0x238]
mov qword [rsp + 0x238], rax
mov rax, qword [rbx + 0x230]
mov qword [rsp + 0x230], rax
mov rax, qword [rbx + 0x228]
mov qword [rsp + 0x228], rax
mov rax, qword [rbx + 0x220]
mov qword [rsp + 0x220], rax
mov rax, qword [rbx + 0x218]
mov qword [rsp + 0x218], rax
mov rax, qword [rbx + 0x210]
mov qword [rsp + 0x210], rax
mov rax, qword [rbx + 0x208]
mov qword [rsp + 0x208], rax
mov rax, qword [rbx + 0x200]
mov qword [rsp + 0x200], rax
mov rax, qword [rbx + 0x1f8]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rbx + 0x1f0]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rbx + 0x1e8]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rbx + 0x1e0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rbx + 0x1d8]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rbx + 0x1d0]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rbx + 0x1c8]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rbx + 0x1c0]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rbx + 0x1b8]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rbx + 0x1b0]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rbx + 0x1a8]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rbx + 0x1a0]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rbx + 0x198]
mov qword [rsp + 0x198], rax
mov rax, qword [rbx + 0x190]
mov qword [rsp + 0x190], rax
mov rax, qword [rbx + 0x188]
mov qword [rsp + 0x188], rax
mov rax, qword [rbx + 0x180]
mov qword [rsp + 0x180], rax
mov rax, qword [rbx + 0x178]
mov qword [rsp + 0x178], rax
mov rax, qword [rbx + 0x170]
mov qword [rsp + 0x170], rax
mov rax, qword [rbx + 0x168]
mov qword [rsp + 0x168], rax
mov rax, qword [rbx + 0x160]
mov qword [rsp + 0x160], rax
mov rax, qword [rbx + 0x158]
mov qword [rsp + 0x158], rax
mov rax, qword [rbx + 0x150]
mov qword [rsp + 0x150], rax
mov rax, qword [rbx + 0x148]
mov qword [rsp + 0x148], rax
mov rax, qword [rbx + 0x140]
mov qword [rsp + 0x140], rax
mov rax, qword [rbx + 0x138]
mov qword [rsp + 0x138], rax
mov rax, qword [rbx + 0x130]
mov qword [rsp + 0x130], rax
mov rax, qword [rbx + 0x128]
mov qword [rsp + 0x128], rax
mov rax, qword [rbx + 0x120]
mov qword [rsp + 0x120], rax
mov rax, qword [rbx + 0x118]
mov qword [rsp + 0x118], rax
mov rax, qword [rbx + 0x110]
mov qword [rsp + 0x110], rax
mov rax, qword [rbx + 0x108]
mov qword [rsp + 0x108], rax
mov rax, qword [rbx + 0x100]
mov qword [rsp + 0x100], rax
mov rax, qword [rbx + 0xf8]
mov qword [rsp + 0xf8], rax
mov rax, qword [rbx + 0xf0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rbx + 0xe8]
mov qword [rsp + 0xe8], rax
mov rax, qword [rbx + 0xe0]
mov qword [rsp + 0xe0], rax
mov rax, qword [rbx + 0xd8]
mov qword [rsp + 0xd8], rax
mov rax, qword [rbx + 0xd0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rbx + 0xc8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rbx + 0xc0]
mov qword [rsp + 0xc0], rax
mov rax, qword [rbx + 0xb8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rbx + 0xb0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rbx + 0xa8]
mov qword [rsp + 0xa8], rax
mov rax, qword [rbx + 0xa0]
mov qword [rsp + 0xa0], rax
mov rax, qword [rbx + 0x98]
mov qword [rsp + 0x98], rax
mov rax, qword [rbx + 0x90]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x90], rax
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0x88], rax
mov rax, qword [rbx + 0x80]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
movzx r15d, byte [rsp + 0x388]
cmp esi, 0x14
mov edx, 0x20
cmovbe r15d, edx
mov dword [rsp + 0x388], r15d
cmp esi, 0xa
ja 0x140043d71
je 0x140043d25
lea eax, [rdx - 0x1b]
cmp esi, eax
ja 0x140043c8b
je 0x140043245
cmp esi, r14d
je 0x140043282
sub esi, ecx
je 0x14004327b
sub esi, ecx
je 0x140043270
sub esi, ecx
je 0x140043261
cmp esi, ecx
jne 0x14004423f
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
call rbp
jmp 0x140043218
sub esi, 6
je 0x140043220
sub esi, ecx
je 0x1400431ec
sub esi, ecx
je 0x140043ceb
cmp esi, ecx
jne 0x14004423f
mov rax, qword [rbx + 0x40]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x38]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x48]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov eax, 0x10
cmp esi, eax
ja 0x140044032
je 0x140043fb0
sub esi, 0xb
je 0x140043f5b
sub esi, ecx
je 0x140043efd
sub esi, ecx
je 0x140043e96
sub esi, ecx
je 0x140043e26
cmp esi, ecx
jne 0x14004423f
mov rax, qword [rbx + 0x70]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x68]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x60]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x58]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x50]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x78]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
sub esi, 0x11
je 0x1400441a3
sub esi, ecx
je 0x140044103
sub esi, ecx
je 0x140044054
cmp esi, ecx
jne 0x14004423f
jmp 0x14004328f
mov rax, qword [rbx + 0x90]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x90], rax
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0x88], rax
mov rax, qword [rbx + 0x80]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x88]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x88], rax
mov rax, qword [rbx + 0x80]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov rax, qword [rbx + 0x80]
mov r9, qword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x68]
mov qword [rsp + 0x68], rax
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
call rbp
jmp 0x140043218
mov r15d, dword [rsp + 0x388]
xor r14d, r14d
mov rsi, qword [rsp + 0x5d0]
mov rax, qword [rsp + 0x458]
cmp rax, r14
je 0x1400442fd
lea rcx, [rsp + 0x3d8]
mov rdx, rax
call fcn.14006d8b0
lea rdx, [rsp + 0x3d8]
xor r8d, r8d
mov rcx, rsi
call fcn.14000395c
mov rbx, qword [rsp + 0x3d8]
lea rcx, [rsp + 0x3f8]
call fcn.140061940
mov eax, 0x20
test al, r15b
je 0x1400442c7
cmp rdi, r14
je 0x1400442c7
mov eax, 0x7e
mov r9, r14
lea rcx, [rsp + 0x3f8]
cmp ax, word [rbx]
mov eax, 0xfde9
mov rdx, rdi
cmove r9, rax
or r8, 0xffffffffffffffff
call fcn.140061afc
mov rdx, qword [rsp + 0x3d8]
mov r8, qword [rsp + 0x3f8]
mov rcx, rsi
add rdx, 2
call fcn.140060d64
lea rcx, [rsp + 0x3f8]
call fcn.140059370
lea rcx, [rsp + 0x3d8]
call fcn.140059370
xor r15d, r15d
mov rbx, rdi
mov qword [rsp + 0x368], rbx
cmp r13b, r15b
je 0x14004432c
mov r8, qword [rsp + 0x460]
cmp r8, r15
je 0x14004432c
mov edx, dword [rsp + 0x468]
mov rcx, rsi
call fcn.140064c5c
mov al, byte [rsp + 0x327]
cmp al, r15b
je 0x140044375
cmp al, 2
jne 0x140044365
mov r14d, 1
cmp edi, r14d
jne 0x14004434c
mov rbx, r15
jmp 0x14004435b
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, r15d
cmove eax, r14d
mov ebx, eax
mov qword [rsp + 0x368], rbx
jmp 0x14004437b
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
mov qword [rsp + 0x368], rbx
mov r14d, 1
cmp byte [rsp + 0x324], r15b
jle 0x1400443a5
cmp byte [rsp + 0x3b4], r15b
jg 0x1400443a5
mov rax, qword [rsp + 0x350]
cmp rax, r15
je 0x1400443a5
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_FreeLibrary]
cmp r12b, r15b
je 0x140041aa5
call qword [0x1401347c0]
lea rcx, [0x140135110]
not r12b
and byte [rsi + 0x12], r12b
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
jmp 0x140041aa5
mov cl, byte [rsp + 0x320]
mov esi, dword [rsp + 0x388]
jmp 0x1400443ed
mov esi, dword [rsp + 0x388]
mov rbx, r15
mov r12d, 0x10
mov rax, qword [rsp + 0x3a8]
cmp word [rax], r15w
je 0x1400444f0
mov edx, 0x2a
cmp dx, word [rax]
je 0x1400444f0
cmp sil, r15b
je 0x1400444f0
cmp byte [rsp + 0x34d], r15b
lea r8, [0x140000000]
lea rdx, [rsp + 0x4f0]
mov rax, qword [r8 + 0x11a5e8]
mov qword [rdx], rax
mov rax, qword [r8 + 0x11a5f0]
mov qword [rdx + 8], rax
movzx eax, word [r8 + 0x11a5f8]
mov word [rdx + 0x10], ax
mov rax, qword [r8 + 0x11a5d8]
lea rdx, [rsp + 0x490]
mov qword [rdx], rax
mov eax, dword [r8 + 0x11a5e0]
mov dword [rdx + 8], eax
movzx eax, word [r8 + 0x11a5e4]
mov word [rdx + 0xc], ax
lea rdx, [rsp + 0x4f0]
lea rax, [rsp + 0x490]
cmove rdx, rax
cmp cl, r15b
je 0x1400444ae
cmp byte [rsp + 0x323], r15b
je 0x1400444ae
mov esi, dword [rsp + 0x398]
cmp rdi, r15
jne 0x1400444c8
lea rdx, [0x1401145d8]
jmp 0x1400444c8
mov esi, dword [rsp + 0x398]
cmp sil, r15b
je 0x1400444c4
mov eax, 0x3c
mov word [rdx], ax
jmp 0x1400444c8
add rdx, 2
lea rcx, [rsp + 0x510]
mov r8, rdi
call qword [sym.imp.USER32.DLL_wsprintfW]
neg byte [rsp + 0x327]
sbb rax, rax
and rax, rbx
mov qword [rsp + 0x368], rax
jmp 0x1400444f7
mov esi, dword [rsp + 0x398]
mov rax, qword [rsp + 0x3f0]
cmp rax, r15
je 0x140041375
mov rcx, rax
call fcn.140017c5c
jmp 0x140041375
mov rbx, qword [rsp + 0x5d0]
mov rdx, qword [rsp + 0x3a8]
lea r8, [rsp + 0x510]
mov rcx, rbx
call fcn.140060d64
jmp 0x140041408
lea rcx, [rsp + 0x3e0]
call fcn.140059370
lea rcx, [rsp + 0x3d0]
call fcn.140059370
lea rcx, [rsp + 0x408]
call fcn.14001d9f4
lea rcx, [rsp + 0x408]
call fcn.140059370
lea rcx, [rsp + 0x488]
call fcn.140059370
lea rcx, [rsp + 0x460]
call fcn.140059370
lea rcx, [rsp + 0x4b8]
call fcn.140059370
lea rcx, [rsp + 0x3a8]
call fcn.140059370
lea rcx, [rsp + 0x470]
call fcn.140059370
neg byte [rsp + 0x328]
sbb rax, rax
not rax
and rax, 0xffffffff80070057
mov rbx, qword [rsp + 0x5e8]
add rsp, 0x590
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret