Function at 0x140032aa0
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x668
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x5e0], 0xfffffffffffffffe
mov rbx, rdx
mov qword [rbp + 0x4e8], rcx
mov r9, qword [rdx + 0x50]
movzx eax, byte [rdx + 0x58]
test al, al
mov qword [rbp + 0x518], rdx
jne 0x140032b09
test r9, r9
jne 0x140032b09
mov qword [rbp + 0x3e0], 0
lea rax, [rbp + 0x3e8]
mov qword [rbp + 0x528], rax
xor r14d, r14d
jmp 0x14003392a
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
test al, al
jne 0x140032df6
mov qword [rbp + 0x528], r9
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x140036386
lea r14, [rbp - 0x10]
mov qword [rbp + 0x5d0], rax
mov r15, rax
nop
cmp word [r15], 0
je 0x140032ddb
mov rsi, r15
mov rcx, 0xfffffffffffffffe
xor r13d, r13d
nop dword [rax + rax]
mov r12, r13
mov rax, rcx
inc r13
cmp word [r15], 0
lea r15, [r15 + 2]
lea rcx, [rcx + 2]
jne 0x140032b60
cmp r12, 1
je 0x140032b40
test r12, r12
je 0x1400362ce
mov rdi, 0xfffffffffffffffc
xor ebx, ebx
cmp word [rsi + rbx*2 + 2], 0x3d
je 0x140032bb0
inc rbx
add rdi, 0xfffffffffffffffe
add rax, 0xfffffffffffffffe
jne 0x140032b90
jmp 0x140032b40
lea r8, [rbx + 1]
cmp rbx, r12
jae 0x1400362e6
lea rcx, [rbp + 0x4f0]
mov rdx, rsi
call fcn.140027530
lea rcx, [rbx + 2]
cmp r12, rcx
jb 0x140036300
sub r13, rbx
add r13, 0xfffffffffffffffd
sub rsi, rdi
lea rcx, [rbp + 0x490]
mov rdx, rsi
mov r8, r13
call fcn.140027530
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x480], rax
movups xmm0, xmmword [rbp + 0x4f0]
movaps xmmword [rbp + 0x470], xmm0
movzx esi, byte [rbp + 0x508]
lea rcx, [rbp + 0x509]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rbp - 0x30], eax
mov dword [rbp - 0x2d], ecx
movups xmm0, xmmword [rbp + 0x490]
movups xmm1, xmmword [rbp + 0x4a0]
movups xmmword [r14 - 9], xmm1
movups xmmword [r14 - 0x19], xmm0
mov eax, dword [rbp - 0x30]
movzx ecx, word [rbp - 0x2c]
movzx edx, byte [rbp - 0x2a]
mov r8, qword [rbp - 0x29]
movzx r9d, byte [rbp - 0x21]
movups xmm0, xmmword [rbp - 0x20]
mov dword [rbp + 0x560], eax
mov word [rbp + 0x564], cx
mov byte [rbp + 0x566], dl
mov qword [rbp + 0x567], r8
mov byte [rbp + 0x56f], r9b
movaps xmmword [rbp + 0x570], xmm0
mov rax, qword [rbp - 0x11]
mov qword [rbp + 0x57f], rax
cmp sil, 2
je 0x140032ddb
mov rax, qword [rbp + 0x480]
mov qword [rbp + 0x430], rax
movaps xmm0, xmmword [rbp + 0x470]
movaps xmmword [rbp + 0x420], xmm0
mov byte [rbp + 0x438], sil
mov eax, dword [rbp + 0x560]
mov ecx, dword [rbp + 0x563]
lea rdx, [rbp + 0x439]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
lea rdi, [rbp + 0x567]
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x540], xmm1
movaps xmmword [rbp + 0x530], xmm0
mov rax, qword [rbp + 0x428]
mov rcx, qword [rbp + 0x430]
add rcx, rax
mov qword [rbp + 0x490], rcx
mov qword [rbp + 0x498], rax
mov word [rbp + 0x4a0], 0
lea rbx, [rbp + 0x4f0]
mov rcx, rbx
lea r12, [rbp + 0x490]
mov rdx, r12
call fcn.140037290
movaps xmm0, xmmword [rbp + 0x470]
movaps xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp + 0x480]
mov qword [rbp - 0x20], rax
mov byte [rbp - 0x18], sil
mov eax, dword [rbp + 0x560]
mov ecx, dword [rbp + 0x563]
mov dword [r14 - 4], ecx
mov dword [r14 - 7], eax
mov rax, qword [rbp + 0x500]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rbp + 0x4f0]
movups xmmword [r14], xmm0
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x4a0], xmm1
movaps xmmword [rbp + 0x490], xmm0
mov byte [rbp + 0x5bf], 0
mov rcx, rbx
lea rdx, [rbp + 0x450]
lea r8, [rbp - 0x30]
mov r9, r12
call fcn.1400374d0
cmp byte [rbp + 0x508], 2
je 0x140032b40
cmp qword [rbp + 0x4f0], 0
je 0x140032b40
mov r8, qword [rbp + 0x4f8]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140032b40
mov rcx, qword [rbp + 0x5d0]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rbx, qword [rbp + 0x518]
mov r9, qword [rbp + 0x528]
mov rax, qword [rbx + 0x40]
mov r14, qword [rbx + 0x48]
xor r10d, r10d
test r14, r14
sete r10b
cmove r9, r14
add r10, r10
jmp 0x140032e30
xor eax, eax
mov r9, qword [rbp + 0x528]
mov r10, qword [rbp + 0x5c0]
test r9, r9
je 0x1400336f0
test r10, r10
je 0x140032e60
cmp r10, 2
mov rdx, qword [rbp + 0x5d0]
jne 0x140032ee2
jmp 0x140036251
mov r10d, 1
test rax, rax
je 0x140032ede
mov rdx, rax
mov rcx, rax
and rdx, 7
je 0x140032e8c
and rcx, 0xfffffffffffffff8
nop dword [rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rdx
jne 0x140032e80
cmp rax, 8
jb 0x140032ede
nop word cs:[rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140032ea0
xor edx, edx
xor eax, eax
movzx ecx, word [r14 + 0x3d2]
mov r13, r14
mov r15, rdx
cmp rdx, rcx
jb 0x140032f28
nop word cs:[rax + rax]
mov rcx, qword [r13 + 0x160]
test rcx, rcx
je 0x1400361ae
movzx r15d, word [r13 + 0x3d0]
inc rax
mov r13, rcx
cmp r15w, word [rcx + 0x3d2]
jae 0x140032f00
test rax, rax
je 0x140032fd0
mov r14, qword [r13 + r15*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x140032fbe
lea rdx, [rax - 2]
mov r8, rcx
and r8, 7
je 0x140032f75
mov rcx, r8
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rcx
jne 0x140032f60
not r8
add rax, r8
mov rcx, rax
cmp rdx, 7
jb 0x140032fbe
nop dword [rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140032f80
xor ecx, ecx
jmp 0x140032fd7
lea rcx, [r15 + 1]
mov r14, r13
dec r9
imul rax, r15, 0x38
lea r12, [rax + r13]
add r12, 0x168
shl r15, 5
cmp byte [r13 + r15 + 0x18], 2
mov qword [rbp + 0x5d0], rcx
jne 0x140033060
mov rsi, qword [rbp + 0x458]
mov eax, 0
test rsi, rsi
je 0x140032e30
mov rbx, r10
mov r13, r9
mov r9, qword [r12 + 0x28]
mov rax, qword [r12 + 0x30]
mov rdi, qword [rbp + 0x450]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
mov r8, rsi
call fcn.140038cd0
cmp qword [rbp + 0x4f0], 0
je 0x140033184
xor eax, eax
mov r9, r13
mov r10, rbx
jmp 0x140032e30
mov rbx, qword [r12 + 8]
mov rdi, qword [r12 + 0x10]
test rdi, rdi
mov qword [rbp + 0x528], r9
mov qword [rbp + 0x5c0], r10
je 0x1400330c0
js 0x1400362c4
mov rax, qword [0x1412e4bb0]
test rax, rax
jne 0x1400330a5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x14003626e
mov qword [0x1412e4bb0], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x1400330c5
jmp 0x14003626e
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140043d50
movzx eax, byte [r12 + 0x18]
mov qword [rbp + 0x560], rdi
mov qword [rbp + 0x568], rsi
mov qword [rbp + 0x570], rdi
mov byte [rbp + 0x578], al
mov rdx, qword [r12 + 0x28]
mov rdi, qword [r12 + 0x30]
test rdi, rdi
je 0x140033177
xor esi, esi
mov rax, rdi
shr rax, 0x3e
sete al
jne 0x1400362a9
lea r12, [rdi + rdi]
mov sil, al
add rsi, rsi
test r12, r12
je 0x140033348
mov rax, qword [0x1412e4bb0]
test rax, rax
mov qword [rbp + 0x558], rdx
jne 0x140033151
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140036299
mov qword [0x1412e4bb0], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
mov rdx, qword [rbp + 0x558]
test rbx, rbx
jne 0x140033354
jmp 0x140036299
mov ebx, 2
xor r12d, r12d
jmp 0x140033354
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x500]
mov rcx, qword [rbp + 0x508]
mov byte [rbp + 0x470], 0
test rdx, rdx
je 0x140033462
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x14003327e
lea r8, [rdx - 2]
mov r9, rcx
and r9, 7
je 0x1400331ee
mov rcx, r9
nop dword [rax]
movzx r10d, word [rax + 0x3d2]
mov rax, qword [rax + r10*8 + 0x3d8]
dec rcx
jne 0x1400331d0
not r9
add rdx, r9
mov rcx, rdx
cmp r8, 7
jb 0x14003327e
nop dword [rax + rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140033200
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rbp + 0x530], 0
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x540], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x530]
lea r8, [rbp + 0x470]
call fcn.140038e70
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x4e0], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x4d0], xmm0
movups xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x20]
movups xmm2, xmmword [rbp - 0x10]
movups xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x4c0], xmm3
movaps xmmword [rbp + 0x4b0], xmm2
movaps xmmword [rbp + 0x4a0], xmm1
movaps xmmword [rbp + 0x490], xmm0
mov rdx, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x38]
movzx r8d, word [rdx + 0x3d2]
mov rax, rdx
cmp rcx, r8
jb 0x14003349a
nop word cs:[rax + rax]
mov rax, qword [rdx + 0x160]
test rax, rax
je 0x140033497
movzx ecx, word [rdx + 0x3d0]
mov rdx, rax
cmp cx, word [rax + 0x3d2]
jae 0x140033320
jmp 0x14003349a
mov rbx, rsi
test rbx, rbx
je 0x140036299
add r13, r15
mov rcx, rbx
mov r8, r12
call fcn.140043d50
movups xmm0, xmmword [rbp + 0x560]
movups xmm1, xmmword [rbp + 0x570]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], rbx
mov qword [rbp], rdi
mov rbx, qword [r13 + 8]
mov rdi, qword [r13 + 0x10]
test rdi, rdi
je 0x1400333d4
js 0x1400362b3
mov rax, qword [0x1412e4bb0]
test rax, rax
jne 0x1400333b9
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140036280
mov qword [0x1412e4bb0], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x1400333d9
jmp 0x140036280
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140043d50
movzx eax, byte [r13 + 0x18]
mov qword [rbp + 0x560], rdi
mov qword [rbp + 0x568], rsi
mov qword [rbp + 0x570], rdi
mov byte [rbp + 0x578], al
mov byte [rbp + 0x5cf], 0
lea rcx, [rbp + 0x490]
lea rdx, [rbp + 0x450]
lea r8, [rbp - 0x30]
lea r9, [rbp + 0x560]
call fcn.1400374d0
cmp byte [rbp + 0x4a8], 2
je 0x140032e20
cmp qword [rbp + 0x490], 0
je 0x140032e20
mov r8, qword [rbp + 0x498]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140032e20
mov qword [rbp + 0x560], 0
mov qword [rbp + 0x568], rax
mov qword [rbp + 0x570], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x560]
lea r8, [rbp + 0x470]
call fcn.140038e70
jmp 0x14003359a
mov rax, rdx
lea rdx, [rbp + 0x4c8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x30], xmm0
imul rdx, rcx, 0x38
shl rcx, 5
mov r8, qword [rax + rdx + 0x198]
mov qword [rbp + 0x590], r8
movups xmm0, xmmword [rax + rdx + 0x168]
movups xmm1, xmmword [rax + rdx + 0x178]
movups xmm2, xmmword [rax + rdx + 0x188]
movaps xmmword [rbp + 0x580], xmm2
movaps xmmword [rbp + 0x570], xmm1
movaps xmmword [rbp + 0x560], xmm0
movaps xmm0, xmmword [rbp + 0x490]
movaps xmm1, xmmword [rbp + 0x4a0]
movaps xmm2, xmmword [rbp + 0x4b0]
mov r8, qword [rbp + 0x4c0]
mov qword [rax + rdx + 0x198], r8
movups xmmword [rax + rdx + 0x168], xmm0
movups xmmword [rax + rdx + 0x188], xmm2
movups xmmword [rax + rdx + 0x178], xmm1
movups xmm0, xmmword [rax + rcx]
movups xmm1, xmmword [rax + rcx + 0x10]
lea rdx, [rbp + 0x598]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movups xmmword [rax + rcx + 0x10], xmm1
movups xmmword [rax + rcx], xmm0
movaps xmm0, xmmword [rbp + 0x560]
movaps xmm1, xmmword [rbp + 0x570]
movaps xmm2, xmmword [rbp + 0x580]
movaps xmm3, xmmword [rbp + 0x590]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp], xmm3
movaps xmm0, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x10], xmm0
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x5b0], rax
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x5a0], xmm0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movaps xmm2, xmmword [rbp - 0x10]
movaps xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x590], xmm3
movaps xmmword [rbp + 0x580], xmm2
dec qword [rbp + 0x460]
movaps xmmword [rbp + 0x570], xmm1
movaps xmmword [rbp + 0x560], xmm0
cmp byte [rbp + 0x470], 0
je 0x14003362a
test rdi, rdi
je 0x140036314
mov rax, qword [rsi + 0x3d8]
mov qword [rbp + 0x458], rax
dec rdi
mov qword [rbp + 0x450], rdi
mov qword [rax + 0x160], 0
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [rbp + 0x578], 2
mov eax, 0
mov r9, r13
mov r10, rbx
je 0x140032e30
mov r12, qword [rbp + 0x580]
mov rsi, qword [rbp + 0x588]
mov rdi, qword [rbp + 0x598]
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x558], rax
movzx r15d, byte [rbp + 0x5b0]
cmp qword [rbp + 0x560], 0
je 0x140033693
mov r8, qword [rbp + 0x568]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, rbx
mov r9, r13
test r12, r12
je 0x1400336b0
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, rbx
mov r9, r13
mov eax, 0
cmp r15b, 2
je 0x140032e30
mov eax, 0
test rdi, rdi
je 0x140032e30
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, rbx
mov r9, r13
xor eax, eax
jmp 0x140032e30
movups xmm0, xmmword [rbp + 0x450]
movups xmmword [rbp + 0x3e8], xmm0
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x3f8], rax
mov qword [rbp + 0x3e0], 1
mov rcx, qword [0x1412e4bb0]
test rcx, rcx
je 0x14003372c
mov rbx, qword [rbp + 0x518]
jmp 0x14003374c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
mov rbx, qword [rbp + 0x518]
je 0x140036331
mov rcx, rax
mov qword [0x1412e4bb0], rax
mov r8d, 4
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140036331
mov dword [rax], 0x48544150
mov qword [rbp + 0x560], 4
mov qword [rbp + 0x568], rax
mov qword [rbp + 0x570], 4
mov byte [rbp + 0x578], 0
mov rcx, rax
add rcx, 4
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x490]
lea rdx, [rbp - 0x30]
call fcn.140037290
movups xmm0, xmmword [rbp + 0x560]
movups xmm1, xmmword [rbp + 0x570]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rbp + 0x490]
movaps xmmword [rbp - 0x10], xmm0
mov r14, qword [rbp + 0x4a0]
mov qword [rbp], r14
mov rsi, qword [rbp - 8]
mov rax, qword [rbp + 0x3f0]
test rax, rax
je 0x1400338e6
mov rcx, qword [rbp + 0x3e8]
mov qword [rbp + 0x528], rcx
mov r13, qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
lea rcx, [rax + 0x168]
movzx edx, word [rax + 0x3d2]
mov qword [rbp + 0x5c0], rdx
imul r12, rdx, 0x38
mov qword [rbp + 0x5d0], rax
lea r15, [rax - 0x10]
mov rdi, 0xffffffffffffffff
nop word cs:[rax + rax]
test r12, r12
je 0x140033890
lea rbx, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, r14d
call r13
add r12, 0xffffffffffffffc8
add r15, 0x20
inc rdi
mov rcx, rbx
mov rbx, qword [rbp + 0x518]
cmp eax, 3
je 0x140033840
cmp eax, 1
jne 0x1400338c3
jmp 0x140033897
mov rdi, qword [rbp + 0x5c0]
mov rax, qword [rbp + 0x528]
sub rax, 1
jb 0x140034911
mov qword [rbp + 0x528], rax
mov rax, qword [rbp + 0x5d0]
mov rax, qword [rax + rdi*8 + 0x3d8]
jmp 0x140033807
cmp eax, 2
jne 0x1400361cb
cmp qword [rbp + 0x5d0], 0
je 0x1400338e6
mov r14, qword [r15 - 8]
mov rdi, qword [r15]
cmp qword [rbp - 0x30], 0
jne 0x1400338f0
jmp 0x140033903
xor r14d, r14d
cmp qword [rbp - 0x30], 0
je 0x140033903
mov r8, qword [rbp - 0x28]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp - 0x10], 0
je 0x14003391c
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rbp + 0x3e8]
mov qword [rbp + 0x528], rax
mov rcx, qword [rbx + 0x28]
mov rbx, qword [rbx + 0x30]
test rbx, rbx
mov qword [rbp + 0x5d0], rcx
je 0x140033984
cmp rbx, 4
jae 0x14003394d
lea rdx, [0x1400395e0]
jmp 0x140033965
cmp dword [rcx], 0x5c3f5c5c
lea rax, [0x1400395d0]
lea rdx, [0x1400395e0]
cmove rdx, rax
movzx esi, byte [rbx + rcx - 1]
mov byte [rbp + 0x5df], 1
mov ecx, esi
call rdx
test al, al
mov rdx, qword [rbp + 0x5d0]
je 0x140033b77
lea rax, [0x1412d37e0]
mov qword [rbp + 0x490], rax
mov qword [rbp + 0x498], 0
mov rdx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x498]
test rax, rax
je 0x140033b52
mov rcx, qword [rbp + 0x4a0]
mov qword [rbp + 0x400], rdx
mov qword [rbp + 0x408], rax
mov qword [rbp + 0x410], rcx
cmp rcx, 5
jb case.0x1400340b4.68
cmp word [rax + rcx*2 - 0xa], 0x2e
jne case.0x1400340b4.68
cmp word [rax + rcx*2 - 2], 0
je 0x140034093
mov rax, qword [rbp + 0x518]
mov rsi, qword [rax + 0x98]
mov r14, qword [rax + 0xa0]
mov dil, byte [rax + 0xad]
mov qword [rbp + 0x560], 0
mov qword [rbp + 0x568], 2
mov qword [rbp + 0x570], 0
lea rcx, [rbp + 0x560]
xor edx, edx
call fcn.1400266f0
mov rax, qword [rbp + 0x568]
mov rcx, qword [rbp + 0x570]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rbp + 0x570], rcx
mov rax, qword [rbp + 0x5d0]
add rbx, rax
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x560]
lea rdx, [rbp - 0x30]
call fcn.140026560
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x560]
jne 0x140033a9e
lea rcx, [rbp + 0x560]
call fcn.1400266f0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x568]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rbp + 0x570], rdx
lea rax, [r14 + r14*4]
lea r15, [rsi + rax*8]
lea r14, [rbp + 0x560]
nop word cs:[rax + rax]
cmp rsi, r15
je 0x140033bed
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x560]
jne 0x140033af8
mov rcx, r14
call fcn.1400266f0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x568]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rbp + 0x570], rdx
mov rcx, r14
mov rdx, rsi
mov r8d, edi
call fcn.140039970
mov rbx, rax
add rsi, 0x28
test rax, rax
je 0x140033ad0
cmp qword [rbp + 0x560], 0
je 0x140033c9b
mov r8, qword [rbp + 0x568]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140033c9b
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x3e0], 0
jne 0x140033ce3
jmp 0x140033d78
cmp rbx, 3
jbe 0x140033d11
movzx eax, byte [rbx + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x140033d11
movzx eax, byte [rdx + rbx - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x140033d11
movzx eax, byte [rdx + rbx - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x140033d11
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete cl
jmp 0x140033d13
mov rbx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x568]
test rax, rax
je 0x140033c9b
mov rdx, qword [rbp + 0x570]
mov rcx, qword [rbp + 0x410]
mov qword [rbp + 0x540], rcx
movups xmm0, xmmword [rbp + 0x400]
movaps xmmword [rbp + 0x530], xmm0
mov dil, 1
mov dword [rbp + 0x558], 0
mov rcx, qword [rbp + 0x540]
mov qword [rbp + 0x460], rcx
movaps xmm0, xmmword [rbp + 0x530]
movaps xmmword [rbp + 0x450], xmm0
mov qword [rbp + 0x470], rbx
mov qword [rbp + 0x478], rax
mov qword [rbp + 0x480], rdx
cmp rdx, rbx
jne 0x140033fa5
mov byte [rbp + 0x5db], 1
lea rcx, [rbp + 0x470]
call fcn.1400266f0
mov rsi, qword [rbp + 0x518]
mov rax, qword [rbp + 0x478]
mov rdx, qword [rbp + 0x480]
jmp 0x140033fac
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
xor esi, esi
cmp qword [rbp + 0x400], 0
je 0x140033ccf
mov r8, qword [rbp + 0x408]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x3e0], 0
sete al
or sil, al
jne 0x140033d78
mov rcx, qword [rbp + 0x3f0]
test rcx, rcx
je 0x140033d5c
mov rdx, qword [rbp + 0x3e8]
mov rax, qword [rbp + 0x3f8]
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], rcx
mov qword [rbp - 8], rdx
mov qword [rbp], rcx
xor ecx, ecx
jmp 0x140033d63
xor ecx, ecx
lea rax, [rdx + rbx]
xor r9d, r9d
nop word [rax + rax]
cmp rbx, r9
je 0x140033d8d
movzx r8d, byte [rdx + r9]
cmp r8d, 0x2f
je 0x140033d39
inc r9
cmp r8d, 0x5c
jne 0x140033d20
test cl, cl
je 0x140033e6d
mov byte [rbp + 0x5df], 1
lea rcx, [rbp + 0x490]
mov r8, rbx
call fcn.1400395f0
jmp 0x14003399d
mov ecx, 2
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.140039e40
nop
add rsp, 0x668
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor r9d, r9d
mov rcx, rdx
jmp 0x140033dac
xor r9d, r9d
test si, si
je 0x14003403c
mov si, 1
test r9w, r9w
jne 0x140033da0
cmp rcx, rax
je 0x140034846
movzx r10d, byte [rcx]
movzx r8d, r10b
test r8b, r8b
js 0x140033dd1
inc rcx
jmp 0x140033e38
mov r9d, r8d
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x140033e2a
movzx r8d, byte [rcx + 2]
shl r11d, 6
and r8d, 0x3f
or r8d, r11d
cmp r10b, 0xf0
jb 0x140033e43
movzx r10d, byte [rcx + 3]
add rcx, 4
and r9d, 7
shl r9d, 0x12
shl r8d, 6
and r10d, 0x3f
or r10d, r8d
or r10d, r9d
mov r8d, r10d
cmp r8d, 0xffff
jbe 0x140033e38
jmp 0x140033e57
add rcx, 2
shl r9d, 6
or r9d, r11d
mov r8d, r9d
xor r9d, r9d
mov esi, r8d
jmp 0x140033da3
add rcx, 3
shl r9d, 0xc
or r8d, r9d
cmp r8d, 0xffff
jbe 0x140033e38
and r8d, 0x3ff
or r8d, 0xdc00
mov r9d, r8d
jmp 0x140033da3
xor esi, esi
test rbx, rbx
setns r14b
js 0x14003642e
mov rcx, qword [0x1412e4bb0]
test rcx, rcx
jne 0x140033ea1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140036417
mov rcx, rax
mov qword [0x1412e4bb0], rax
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140036417
mov rdi, rax
mov rcx, rax
mov rdx, qword [rbp + 0x5d0]
mov r8, rbx
call fcn.140043d50
mov qword [rbp + 0x560], rbx
mov qword [rbp + 0x568], rdi
mov qword [rbp + 0x570], rbx
mov byte [rbp + 0x578], 0
mov rax, qword [rbp + 0x570]
mov qword [rbp - 0x20], rax
movzx eax, byte [rbp + 0x578]
mov byte [rbp - 0x18], al
mov eax, dword [rbp + 0x579]
mov dword [rbp - 0x17], eax
movzx eax, word [rbp + 0x57d]
mov word [rbp - 0x13], ax
movzx eax, byte [rbp + 0x57f]
mov byte [rbp - 0x11], al
mov rax, qword [rbp + 0x560]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x568]
mov qword [rbp - 0x28], rax
lea rdx, [0x1412d37f8]
lea rcx, [rbp - 0x30]
mov r8d, 4
call fcn.14002c5d0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x570], xmm1
movaps xmmword [rbp + 0x560], xmm0
mov rsi, qword [rbp + 0x568]
mov rdi, qword [rbp + 0x570]
mov byte [rbp + 0x5be], 1
lea rcx, [rbp - 0x30]
mov rdx, rsi
mov r8, rdi
call fcn.140039730
cmp qword [rbp - 0x28], 0
je 0x14003480c
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0x4a0], rax
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x490], xmm0
jmp 0x1400354ca
mov rsi, qword [rbp + 0x518]
mov word [rax + rdx*2], 0
inc rdx
mov qword [rbp + 0x480], rdx
cmp byte [rsi + 0xac], 0
mov eax, 0x400
mov r15d, 0x608
cmove r15d, eax
or r15d, dword [rsi + 0xa8]
cmp qword [rbp + 0x3e0], 0
mov dword [rbp + 0x5d0], edi
je 0x140034048
mov rax, qword [rbp + 0x528]
mov rsi, qword [rax + 0x10]
mov qword [rbp + 0x430], rsi
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x530], 0
mov qword [rbp + 0x538], 2
mov qword [rbp + 0x540], 0
test rsi, rsi
je 0x14003423c
mov edi, 2
xor r12d, r12d
jmp 0x140034270
lea rax, [0x1412d37a8]
jmp 0x14003398b
mov r14d, 2
xor ebx, ebx
xor r12d, r12d
xor edi, edi
mov qword [rbp + 0x420], rbx
mov qword [rbp + 0x428], r14
mov qword [rbp + 0x430], r12
cmp byte [rsi + 0x18], 2
jne 0x140034724
mov qword [rbp + 0x5c0], r14
xor edx, edx
mov eax, 2
xor ecx, ecx
xor r8d, r8d
mov qword [rbp + 0x3d8], r8
jmp 0x140034d42
movzx edx, word [rax + rcx*2 - 8]
lea r8d, [rdx - 0x42]
cmp r8d, 0x21
ja case.0x1400340b4.68
lea r9, [0x140037194]
movsxd r8, dword [r9 + r8*4]
add r8, r9
jmp r8
movzx r8d, word [rax + rcx*2 - 6]
or r8d, 0x20
cmp r8d, 0x61
jne 0x1400340d7
movzx r8d, word [rax + rcx*2 - 4]
or r8d, 0x20
cmp r8d, 0x74
je 0x140034105
cmp dx, 0x43
jne case.0x1400340b4.68
movzx edx, word [rax + rcx*2 - 6]
or edx, 0x20
cmp edx, 0x6d
jne case.0x1400340b4.68
movzx eax, word [rax + rcx*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x1400340b4.68
mov qword [rbp + 0x560], 0
mov qword [rbp + 0x568], 2
mov qword [rbp + 0x570], 0
mov esi, 0x200
mov eax, 2
mov qword [rbp + 0x5c0], rax
xor eax, eax
mov qword [rbp + 0x5d0], rax
xor edi, edi
xor r14d, r14d
cmp rsi, 0x201
jb 0x14003415f
jmp 0x140034170
jae 0x140034fd3
cmp rsi, 0x201
jae 0x140034170
lea r15, [rbp - 0x30]
mov r12d, 0x200
mov r13, rsi
jmp 0x1400341d6
sub rsi, r14
sub rdi, r14
cmp rdi, rsi
jae 0x1400341a9
lea rcx, [rbp + 0x560]
mov rdx, r14
mov r8, rsi
call fcn.140052840
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x5d0], rax
mov rax, qword [rbp + 0x568]
mov qword [rbp + 0x5c0], rax
mov rdi, qword [rbp + 0x5d0]
mov eax, 0xffffffff
cmp rdi, rax
mov r14d, 0xffffffff
cmovb r14, rdi
mov qword [rbp + 0x570], r14
mov r15, qword [rbp + 0x5c0]
mov r12, r14
mov r13, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r15
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ebx, eax
test eax, eax
jne 0x1400341fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140035335
mov esi, ebx
cmp r13, rsi
jne 0x140034150
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140036369
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov rsi, r13
cmp rsi, 0x201
jae 0x140034170
jmp 0x14003415f
mov byte [rbp + 0x5dc], 1
lea rcx, [rbp + 0x530]
xor edx, edx
call fcn.1400266f0
mov rdi, qword [rbp + 0x538]
mov r12, qword [rbp + 0x540]
mov word [rdi + r12*2], 0
inc r12
mov qword [rbp + 0x540], r12
mov rax, qword [rbp + 0x420]
mov rcx, qword [rbp + 0x428]
xor edx, edx
test rcx, rcx
cmove rsi, rcx
sete dl
add rdx, rdx
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rax
mov qword [rbp], rcx
mov qword [rbp + 0x10], rsi
lea rcx, [rbp + 0x560]
lea rdx, [rbp - 0x30]
mov rbx, rcx
mov r13, rdx
call fcn.140032710
mov rdx, qword [rbp + 0x568]
test rdx, rdx
je 0x1400352cb
mov r9, qword [rbp + 0x570]
imul r10, r9, 0x38
cmp byte [rdx + r10 + 0x180], 2
je 0x1400352cb
mov qword [rbp + 0x520], rdi
mov rax, qword [rdx + r10 + 0x168]
mov r8, qword [rdx + r10 + 0x170]
mov rcx, qword [rdx + r10 + 0x178]
mov r11, qword [rdx + r10 + 0x188]
mov qword [rbp + 0x5c0], r11
mov r11, qword [rdx + r10 + 0x190]
mov qword [rbp + 0x528], r11
mov rdi, qword [rdx + r10 + 0x198]
shl r9, 5
movups xmm0, xmmword [rdx + r9]
movups xmm1, xmmword [rdx + r9 + 0x10]
movaps xmmword [rbp + 0x4a0], xmm1
movaps xmmword [rbp + 0x490], xmm0
add rcx, r8
xor r11d, r11d
mov rdx, r8
jmp 0x14003436d
xor r11d, r11d
test r9w, r9w
je 0x1400346bd
mov r9w, 1
test r11w, r11w
jne 0x140034360
cmp rdx, rcx
je 0x14003442a
movzx r14d, byte [rdx]
movzx r10d, r14b
test r10b, r10b
js 0x140034393
inc rdx
jmp 0x1400343f5
mov r11d, r10d
and r11d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x1400343e7
movzx r10d, byte [rdx + 2]
shl esi, 6
and r10d, 0x3f
or r10d, esi
cmp r14b, 0xf0
jb 0x140034400
movzx esi, byte [rdx + 3]
add rdx, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and esi, 0x3f
or esi, r10d
or esi, r11d
mov r10d, esi
cmp r10d, 0xffff
jbe 0x1400343f5
jmp 0x140034414
add rdx, 2
shl r11d, 6
or r11d, esi
mov r10d, r11d
xor r11d, r11d
mov r9d, r10d
jmp 0x140034363
add rdx, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
jbe 0x1400343f5
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140034363
test rax, rax
je 0x14003443e
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x530]
sub rax, r12
cmp rax, rdi
jae 0x14003446f
lea rcx, [rbp + 0x530]
mov rdx, r12
mov r8, rdi
call fcn.140052840
mov rax, qword [rbp + 0x538]
mov r12, qword [rbp + 0x540]
jmp 0x140034476
mov rax, qword [rbp + 0x520]
lea r8, [rdi + rdi]
mov rsi, rax
lea rcx, [rax + r12*2]
mov r14, qword [rbp + 0x528]
mov rdx, r14
call fcn.140043d50
add r12, rdi
mov qword [rbp + 0x540], r12
cmp qword [rbp + 0x5c0], 0
je 0x1400344b6
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r12, qword [rbp + 0x530]
jne 0x1400344e3
mov byte [rbp + 0x5da], 1
lea rcx, [rbp + 0x530]
mov rdx, r12
call fcn.1400266f0
mov rsi, qword [rbp + 0x538]
mov r12, qword [rbp + 0x540]
mov word [rsi + r12*2], 0x3d
inc r12
mov qword [rbp + 0x540], r12
mov r12, qword [rbp + 0x490]
mov rdi, qword [rbp + 0x498]
mov rax, qword [rbp + 0x4a0]
movzx ecx, byte [rbp + 0x4a8]
lea rdx, [rdi + rax]
xor r11d, r11d
mov r8, rdi
jmp 0x14003452d
xor r11d, r11d
test r9w, r9w
je 0x1400348a3
mov r9w, 1
test r11w, r11w
jne 0x140034520
cmp r8, rdx
je 0x1400345ec
movzx r14d, byte [r8]
movzx r10d, r14b
test r10b, r10b
js 0x140034553
inc r8
jmp 0x1400345b7
mov r11d, r10d
and r11d, 0x1f
movzx esi, byte [r8 + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x1400345a9
movzx r10d, byte [r8 + 2]
shl esi, 6
and r10d, 0x3f
or r10d, esi
cmp r14b, 0xf0
jb 0x1400345c2
movzx esi, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and esi, 0x3f
or esi, r10d
or esi, r11d
mov r10d, esi
cmp r10d, 0xffff
jbe 0x1400345b7
jmp 0x1400345d6
add r8, 2
shl r11d, 6
or r11d, esi
mov r10d, r11d
xor r11d, r11d
mov r9d, r10d
jmp 0x140034523
add r8, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
jbe 0x1400345b7
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140034523
cmp cl, 2
je 0x140036175
lea r9, [rbp + 0x4a9]
mov r8d, dword [r9]
mov r9d, dword [r9 + 3]
lea r10, [rbp + 0x579]
mov dword [r10 + 3], r9d
mov dword [r10], r8d
mov qword [rbp + 0x560], r12
mov qword [rbp + 0x568], rdi
mov qword [rbp + 0x570], rax
mov byte [rbp + 0x578], cl
mov qword [rbp + 0x4f0], rdx
mov qword [rbp + 0x4f8], rdi
mov word [rbp + 0x500], 0
lea rcx, [rbp + 0x530]
lea rdx, [rbp + 0x4f0]
call fcn.140026560
test r12, r12
je 0x14003466d
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x540]
cmp r12, qword [rbp + 0x530]
jne 0x14003469a
mov byte [rbp + 0x5da], 0
lea rcx, [rbp + 0x530]
mov rdx, r12
call fcn.1400266f0
mov r12, qword [rbp + 0x540]
mov rcx, rbx
mov rdx, r13
mov rdi, qword [rbp + 0x538]
mov word [rdi + r12*2], 0
inc r12
mov qword [rbp + 0x540], r12
jmp 0x1400342b4
test rax, rax
je 0x1400346d1
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x490], 0
mov rsi, qword [rbp + 0x528]
je 0x1400346f8
mov r8, qword [rbp + 0x498]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rdi, [0x1412d37a8]
cmp qword [rbp + 0x5c0], 0
je 0x1400348c4
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400348c4
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x14003474d
xor r10d, r10d
test r8w, r8w
je 0x14003487f
mov r8w, 1
test r10w, r10w
jne 0x140034740
cmp rdx, rcx
je 0x140034cd6
movzx r11d, byte [rdx]
movzx r9d, r11b
test r9b, r9b
js 0x140034773
inc rdx
jmp 0x1400347d7
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x1400347c9
movzx r9d, byte [rdx + 2]
shl esi, 6
and r9d, 0x3f
or r9d, esi
cmp r11b, 0xf0
jb 0x1400347e2
movzx r11d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
jbe 0x1400347d7
jmp 0x1400347f6
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
xor r10d, r10d
mov r8d, r9d
jmp 0x140034743
add rdx, 3
shl r10d, 0xc
or r9d, r10d
cmp r9d, 0xffff
jbe 0x1400347d7
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x140034743
mov rcx, rsi
mov rdx, rdi
call fcn.140031cf0
test rax, rax
je 0x1400354b8
cmp rdx, 2
jne 0x140034924
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x140034924
mov r8d, 2
xor ecx, ecx
jmp 0x14003496e
cmp rbx, 0xf
ja 0x140034973
lea rax, [rbx - 1]
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [rdx + rcx], 0x2e
sete r9b
je 0x14003498c
lea r8, [rcx + 1]
cmp rax, rcx
mov rcx, r8
jne 0x140034860
jmp 0x14003498c
lea rax, [0x1412d37a8]
mov rcx, qword [rbp + 0x4e8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov edi, dword [rbp + 0x5d0]
jmp 0x140034f0a
lea rsi, [0x1412d37a8]
test r12, r12
je 0x1400348c1
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, rsi
mov byte [rbp + 0x5dc], 0
lea rcx, [rbp - 0x30]
call fcn.140039e40
cmp qword [rbp + 0x530], 0
je 0x1400348f4
mov r8, qword [rbp + 0x538]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
mov edi, dword [rbp + 0x5d0]
jmp 0x140034f21
xor r14d, r14d
cmp qword [rbp - 0x30], 0
jne 0x1400338f0
jmp 0x140033903
xor r11d, r11d
mov rcx, rax
nop word [rax + rax]
cmp rdx, r11
je 0x14003511d
mov r9, r11
lea r10, [rcx - 1]
inc r11
cmp byte [rcx + rdx - 1], 0x2e
mov rcx, r10
jne 0x140034930
mov r8, rdx
sub r8, r11
lea rcx, [r8 + 1]
cmp rdx, rcx
jb 0x140036467
cmp rdx, r11
jne 0x140035486
xor ecx, ecx
mov r8, rdx
jmp 0x140035490
mov byte [rbp + 0x5df], 1
mov cl, 0x2e
mov r8, rbx
call fcn.140017cc0
cmp rax, 1
sete r9b
mov byte [rbp + 0x520], r9b
test r14, r14
je 0x1400349dc
add rdi, r14
mov qword [rbp + 0x490], rdi
mov qword [rbp + 0x498], r14
mov word [rbp + 0x4a0], 0
mov byte [rbp + 0x4a8], 1
mov byte [rbp + 0x5df], 1
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x490]
call fcn.14002b910
movzx eax, byte [rbp - 0x18]
cmp al, 2
jne 0x140035006
mov byte [rbp + 0x5df], 1
lea rcx, [rbp + 0x490]
call fcn.14002c210
cmp byte [rbp + 0x4a8], 2
jne 0x140034a10
mov byte [rbp + 0x5df], 1
lea rcx, [rbp + 0x490]
call fcn.140027450
jmp 0x140034af2
movups xmm0, xmmword [rbp + 0x490]
movups xmm1, xmmword [rbp + 0x4a0]
movaps xmmword [rbp + 0x560], xmm0
movaps xmmword [rbp + 0x570], xmm1
mov rcx, qword [rbp + 0x568]
mov rsi, qword [rbp + 0x570]
mov byte [rbp + 0x5bd], 1
mov rdx, rsi
call fcn.14002fa10
test rax, rax
mov r8, qword [rbp + 0x5d0]
je 0x140034a61
cmp rsi, rdx
jb 0x140034a61
mov qword [rbp + 0x570], rdx
movaps xmm0, xmmword [rbp + 0x560]
mov rax, qword [rbp + 0x570]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x578]
mov qword [rbp - 0x18], rax
movaps xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
mov rdx, r8
mov r8, rbx
call fcn.14002df00
cmp byte [rbp + 0x520], 0
jne 0x140034aa3
lea rcx, [rbp - 0x30]
call fcn.140031e50
mov rsi, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x4f0]
mov rdx, rsi
call fcn.140039730
cmp qword [rbp - 0x30], 0
je 0x140034ad3
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x4f8]
test r12, r12
je 0x140034af2
mov rsi, qword [rbp + 0x4f0]
mov rdi, qword [rbp + 0x500]
jmp 0x140035607
mov qword [rbp + 0x530], 0
mov qword [rbp + 0x538], 2
mov qword [rbp + 0x540], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x558], rax
xor eax, eax
mov qword [rbp + 0x5c0], rax
xor r14d, r14d
xor r13d, r13d
cmp r8, 0x201
jb 0x140034b4f
jmp 0x140034b60
jae 0x140034c2a
cmp r8, 0x201
jae 0x140034b60
lea r12, [rbp - 0x30]
mov edi, 0x200
mov r15, r8
jmp 0x140034bc3
sub r8, r13
sub r14, r13
cmp r14, r8
jae 0x140034b96
lea rcx, [rbp + 0x530]
mov rdx, r13
call fcn.140052840
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x5c0], rax
mov rax, qword [rbp + 0x538]
mov qword [rbp + 0x558], rax
mov r14, qword [rbp + 0x5c0]
mov eax, 0xffffffff
cmp r14, rax
mov r13d, 0xffffffff
cmovb r13, r14
mov qword [rbp + 0x540], r13
mov r12, qword [rbp + 0x558]
mov rdi, r13
mov r15, r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r12
mov edx, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov esi, eax
test eax, eax
jne 0x140034beb
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140035127
mov r8d, esi
cmp r15, r8
jne 0x140034b40
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14003634c
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x140034b60
jmp 0x140034b4f
cmp rdi, r8
jb 0x14003643c
lea rcx, [rbp + 0x560]
mov rdx, r12
call fcn.140027530
lea rcx, [rbp + 0x560]
mov rdx, qword [rbp + 0x5d0]
mov r8, rbx
call fcn.14002df00
movzx eax, byte [rbp + 0x520]
test al, al
jne 0x140034c6f
lea rcx, [rbp + 0x560]
call fcn.140031e50
mov rdi, qword [rbp + 0x568]
mov r8, qword [rbp + 0x570]
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140039730
cmp qword [rbp + 0x560], 0
je 0x140034ca8
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movups xmm0, xmmword [rbp + 0x4f0]
movups xmmword [rbp + 0x498], xmm0
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x490], 0
xor esi, esi
jmp 0x14003514a
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x560]
lea rdx, [rbp - 0x30]
call fcn.140037290
mov rcx, qword [rbp + 0x560]
mov rdx, qword [rbp + 0x570]
cmp rdx, rcx
jne 0x140034d21
lea rcx, [rbp + 0x560]
call fcn.1400266f0
mov rcx, qword [rbp + 0x560]
mov rdx, qword [rbp + 0x570]
mov qword [rbp + 0x5c0], r14
mov rax, qword [rbp + 0x568]
mov word [rax + rdx*2], 0
inc rdx
mov r8, rax
mov qword [rbp + 0x3d8], rax
mov qword [rbp + 0x520], rcx
mov qword [rbp + 0x530], rcx
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x540], rdx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], 0
lea r14, [0x1412e4bc0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1412e4b90]
shl rax, 1
test rax, rax
mov qword [rbp + 0x528], rbx
mov r13, rdi
jne 0x140035c1c
xor eax, eax
mov bl, byte [0x1412e4bc8]
xor ecx, ecx
test bl, bl
setne cl
mov qword [rbp + 0x498], r14
mov dword [rbp + 0x448], eax
mov byte [rbp + 0x4a0], al
mov qword [rbp + 0x490], rcx
mov qword [rbp + 0x560], 0
mov qword [rbp + 0x570], 0
mov rcx, qword [rbp + 0x518]
lea r12, [rcx + 0x70]
mov rdi, qword [rcx + 0x70]
xor eax, eax
cmp rdi, 5
cmove r12, rax
mov qword [rbp + 0x580], 0
lea r14, [rcx + 0x80]
mov rsi, qword [rcx + 0x80]
cmp rsi, 5
cmove r14, rax
mov rax, qword [rcx + 0x60]
mov rdx, qword [rcx + 0x68]
cmp rax, 5
mov ecx, 1
cmovne rcx, rax
lea r9, [rbp + 0x560]
mov r8d, 0xfffffff6
call fcn.140039f10
test rax, rax
je 0x140034f72
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov edi, dword [rbp + 0x5d0]
mov r14, qword [rbp + 0x5c0]
mov rsi, qword [rbp + 0x520]
cmp qword [rbp + 0x560], 0
je 0x140034e8e
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x570], 0
je 0x140034ea5
mov rcx, qword [rbp + 0x578]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x580], 0
je 0x140034ebc
mov rcx, qword [rbp + 0x588]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
cmp byte [rbp + 0x448], 0
mov rbx, qword [rbp + 0x528]
jne 0x140034ee2
mov rax, qword [0x1412e4b90]
shl rax, 1
test rax, rax
jne 0x140036114
lea rcx, [0x1412e4bc0]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
test rsi, rsi
je 0x140034f0a
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
je 0x140034f21
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x470], 0
je 0x140034f41
mov r8, qword [rbp + 0x478]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x450], 0
je 0x140034f61
mov r8, qword [rbp + 0x458]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov sil, 1
test dil, dil
je 0x140033caf
jmp 0x140033d78
mov qword [rbp + 0x518], rdx
lea r9, [rbp + 0x570]
mov ecx, 2
cmp rdi, 5
cmovne rcx, rdi
je 0x140034f94
mov rdx, qword [r12 + 8]
mov r8d, 0xfffffff5
call fcn.140039f10
test rax, rax
je 0x14003534c
mov rax, qword [rbp + 0x4e8]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov edi, dword [rbp + 0x5d0]
mov r14, qword [rbp + 0x5c0]
mov rsi, qword [rbp + 0x520]
jmp 0x1400353ba
cmp r12, rsi
jb 0x140036453
test ebx, ebx
je 0x140035709
lea r14, [rsi + rsi]
mov edx, 2
mov rcx, r14
call fcn.14001af80
test rax, rax
je 0x140036489
mov rbx, rax
jmp 0x140035711
lea r14, [rbp - 0x17]
lea r13, [rbp + 0x579]
lea rsi, [rbp - 0x30]
lea rdi, [rbp + 0x490]
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14003504e
mov byte [rbp + 0x5df], 1
mov rcx, rsi
mov rdx, rdi
call fcn.14002b910
movzx eax, byte [rbp - 0x18]
cmp al, 2
je 0x1400349dc
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x140035072
test rcx, rcx
je 0x140035030
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call r15
jmp 0x140035030
mov r9d, dword [r14]
mov r10d, dword [r14 + 3]
mov dword [r13 + 3], r10d
mov dword [r13], r9d
mov qword [rbp + 0x560], rcx
mov qword [rbp + 0x568], r8
mov qword [rbp + 0x570], rdx
mov byte [rbp + 0x578], al
lea rcx, [rbp + 0x560]
mov rdx, qword [rbp + 0x5d0]
mov r8, rbx
call fcn.14002df00
cmp byte [rbp + 0x520], 0
jne 0x1400350c7
lea rcx, [rbp + 0x560]
call fcn.140031e50
mov r12, qword [rbp + 0x568]
mov r8, qword [rbp + 0x570]
mov rcx, rsi
mov rdx, r12
call fcn.140039730
cmp qword [rbp + 0x560], 0
je 0x1400350f9
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, r12
call r15
mov r12, qword [rbp - 0x28]
test r12, r12
jne 0x14003612d
mov byte [rbp + 0x5df], 1
mov rcx, rsi
mov rdx, rdi
call fcn.14002b910
jmp 0x140035042
mov rcx, rax
xor eax, eax
jmp 0x140035490
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x490], 1
mov sil, 1
cmp qword [rbp + 0x5c0], 0
je 0x14003516a
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x4a0]
test r12, r12
sete al
or sil, al
cmp sil, 1
jne 0x1400355f9
mov byte [rbp + 0x5df], 1
lea rcx, [rbp + 0x490]
call fcn.140039880
mov qword [rbp + 0x530], 0
mov qword [rbp + 0x538], 2
mov qword [rbp + 0x540], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x558], rax
xor eax, eax
mov qword [rbp + 0x5c0], rax
xor r14d, r14d
xor r13d, r13d
cmp r8, 0x201
jb 0x1400351f3
jmp 0x140035201
jae 0x1400353da
cmp r8, 0x201
jae 0x140035201
lea r12, [rbp - 0x30]
mov edi, 0x200
mov r15, r8
jmp 0x140035264
sub r8, r13
sub r14, r13
cmp r14, r8
jae 0x140035237
lea rcx, [rbp + 0x530]
mov rdx, r13
call fcn.140052840
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x5c0], rax
mov rax, qword [rbp + 0x538]
mov qword [rbp + 0x558], rax
mov r14, qword [rbp + 0x5c0]
mov eax, 0xffffffff
cmp r14, rax
mov r13d, 0xffffffff
cmovb r13, r14
mov qword [rbp + 0x540], r13
mov r12, qword [rbp + 0x558]
mov rdi, r13
mov r15, r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r12
mov edx, r15d
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, eax
test eax, eax
jne 0x14003528c
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400354ef
mov r8d, esi
cmp r15, r8
jne 0x1400351e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400363fa
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x140035201
jmp 0x1400351f3
mov byte [rbp + 0x5dc], 0
lea rcx, [rbp - 0x30]
call fcn.140039e40
mov rsi, qword [rbp + 0x518]
cmp r12, qword [rbp + 0x530]
jne 0x14003530f
mov byte [rbp + 0x5dc], 0
lea rcx, [rbp + 0x530]
mov rdx, r12
call fcn.1400266f0
mov rdi, qword [rbp + 0x538]
mov r12, qword [rbp + 0x540]
mov word [rdi + r12*2], 0
mov r14, qword [rbp + 0x538]
test r14, r14
je 0x1400348f4
inc r12
mov rbx, qword [rbp + 0x530]
jmp 0x140034055
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
shl rsi, 0x20
or rsi, 2
xor ebx, ebx
jmp 0x14003571f
mov qword [rbp + 0x418], rdx
lea r9, [rbp + 0x580]
mov ecx, 2
cmp rsi, 5
cmovne rcx, rsi
je 0x14003536d
mov rdx, qword [r14 + 8]
mov r8d, 0xfffffff4
call fcn.140039f10
mov r14, rdx
test rax, rax
je 0x140035c28
mov rax, qword [rbp + 0x4e8]
mov qword [rax], r14
mov qword [rax + 0x10], 2
mov edi, dword [rbp + 0x5d0]
mov rsi, qword [rbp + 0x520]
mov r12, qword [rbp + 0x418]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, qword [rbp + 0x5c0]
mov rcx, qword [rbp + 0x518]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x560], 0
jne 0x140034e81
jmp 0x140034e8e
cmp rdi, r8
jb 0x140036498
lea rcx, [rbp + 0x560]
mov rdx, r12
call fcn.140027530
lea rcx, [rbp + 0x560]
mov rdx, qword [rbp + 0x5d0]
mov r8, rbx
call fcn.14002df00
movzx eax, byte [rbp + 0x520]
test al, al
jne 0x14003541f
lea rcx, [rbp + 0x560]
call fcn.140031e50
mov rdi, qword [rbp + 0x568]
mov r8, qword [rbp + 0x570]
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140039730
cmp qword [rbp + 0x560], 0
je 0x140035458
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movups xmm0, xmmword [rbp + 0x4f0]
movups xmmword [rbp + 0x498], xmm0
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x490], 0
xor esi, esi
jmp 0x140035512
lea rcx, [r10 + rdx]
inc rcx
mov rdx, r9
test rax, rax
cmovne rcx, rax
test rcx, rcx
je 0x1400354b8
test rax, rax
cmove r8, rdx
add rcx, r8
sub rcx, rsi
cmp rdi, rcx
jb 0x1400354b8
mov qword [rbp + 0x570], rcx
mov rdi, rcx
lea rcx, [rbp + 0x490]
mov rdx, rsi
mov r8, rdi
call fcn.1400395f0
cmp qword [rbp + 0x560], 0
je 0x14003399d
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14003399d
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x490], 1
mov sil, 1
cmp qword [rbp + 0x5c0], 0
je 0x140035532
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x4a0]
test r12, r12
sete al
or sil, al
cmp sil, 1
jne 0x1400355f9
mov byte [rbp + 0x5df], 1
lea rcx, [rbp + 0x490]
call fcn.140039880
mov byte [rbp + 0x5df], 1
lea rdx, [0x1412d286c]
lea rcx, [rbp + 0x530]
mov r8d, 4
call fcn.140029320
cmp byte [rbp + 0x548], 2
je 0x140035dfd
movups xmm0, xmmword [rbp + 0x530]
movups xmm1, xmmword [rbp + 0x540]
movaps xmmword [rbp + 0x4f0], xmm0
movaps xmmword [rbp + 0x500], xmm1
mov rcx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x500]
add rax, rcx
mov qword [rbp + 0x490], rax
mov qword [rbp + 0x5c0], rcx
mov qword [rbp + 0x498], rcx
mov word [rbp + 0x4a0], 0
mov byte [rbp + 0x4a8], 1
lea rsi, [rbp + 0x579]
lea rdi, [rbp - 0x30]
lea r15, [rbp + 0x490]
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14003562e
mov rsi, qword [rbp + 0x498]
mov rdi, qword [rbp + 0x4a8]
mov qword [rbp + 0x490], rsi
mov qword [rbp + 0x498], r12
mov qword [rbp + 0x4a0], rdi
jmp 0x14003399d
mov r12, qword [rbp - 0x28]
test r12, r12
jne 0x14003617d
mov rcx, rdi
mov rdx, r15
call fcn.14002b910
jmp 0x140035646
mov rcx, rdi
mov rdx, r15
call fcn.14002b910
movzx eax, byte [rbp - 0x18]
cmp al, 2
je 0x140035ddd
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x140035676
test rcx, rcx
je 0x14003563b
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call r14
jmp 0x14003563b
lea r10, [rbp - 0x17]
mov r9d, dword [r10]
mov r10d, dword [r10 + 3]
mov dword [rsi + 3], r10d
mov dword [rsi], r9d
mov qword [rbp + 0x560], rcx
mov qword [rbp + 0x568], r8
mov qword [rbp + 0x570], rdx
mov byte [rbp + 0x578], al
lea rcx, [rbp + 0x560]
mov rdx, qword [rbp + 0x5d0]
mov r8, rbx
call fcn.14002df00
cmp byte [rbp + 0x520], 0
jne 0x1400356ce
lea rcx, [rbp + 0x560]
call fcn.140031e50
mov r13, qword [rbp + 0x568]
mov r8, qword [rbp + 0x570]
mov rcx, rdi
mov rdx, r13
call fcn.140039730
cmp qword [rbp + 0x560], 0
je 0x140035621
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, r13
call r14
jmp 0x140035621
mov ebx, 2
xor r14d, r14d
mov rcx, rbx
mov rdx, r15
mov r8, r14
call fcn.140043d50
cmp qword [rbp + 0x5d0], 0
je 0x14003573f
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x5c0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
je 0x140035ba3
mov qword [rbp + 0x490], rsi
mov qword [rbp + 0x498], rbx
mov qword [rbp + 0x4a0], rsi
lea rcx, [0x1412d382b]
xor r13d, r13d
lea r14, [rbp + 0x490]
xor r12d, r12d
mov rdi, rcx
mov rax, rcx
jmp 0x140035792
mov word [rbx + rsi*2], r13w
inc rsi
mov qword [rbp + 0x4a0], rsi
mov r13d, r15d
test rcx, rcx
je 0x140035820
test r13w, r13w
je 0x1400357b2
xor r15d, r15d
cmp rsi, qword [rbp + 0x490]
jne 0x140035780
jmp 0x1400358a0
lea rcx, [0x1412d3833]
cmp rax, rcx
je 0x14003581c
movzx r9d, byte [rax]
movzx edx, r9b
test dl, dl
js 0x1400357d5
inc rax
mov rdi, rax
jmp 0x140035879
mov ecx, edx
and ecx, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140035847
movzx r8d, byte [rax + 2]
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
cmp r9b, 0xf0
jb 0x140035858
movzx edx, byte [rax + 3]
and ecx, 7
shl ecx, 0x12
shl r8d, 6
and edx, 0x3f
or edx, r8d
or edx, ecx
cmp edx, 0x110000
jne 0x14003586a
xor edi, edi
xor eax, eax
cmp r12, 1
je 0x14003591d
mov r12d, 1
xor ecx, ecx
mov r15d, r13d
xor r13d, r13d
cmp rsi, qword [rbp + 0x490]
jne 0x140035780
jmp 0x1400358a0
add rax, 2
shl ecx, 6
or ecx, r10d
mov rdi, rax
mov edx, ecx
jmp 0x140035879
add rax, 3
shl ecx, 0xc
or r8d, ecx
mov rdi, rax
mov edx, r8d
jmp 0x140035871
add rax, 4
mov rdi, rax
cmp edx, 0xffff
ja 0x1400358e8
xor r15d, r15d
mov rax, rdi
mov rcx, rdi
mov r13d, edx
cmp rsi, qword [rbp + 0x490]
jne 0x140035780
nop word cs:[rax + rax]
test rdi, rdi
je 0x1400358bf
lea r8, [0x1412d382b]
sub r8, rdi
add r8, 0xb
shr r8, 2
sub r8, r12
inc r8
jmp 0x1400358c8
mov r8d, 1
sub r8, r12
inc r8
mov rcx, r14
mov rdx, rsi
call fcn.140052840
mov rbx, qword [rbp + 0x498]
mov rax, rdi
mov rcx, rdi
jmp 0x140035780
lea r13d, [rdx + 0xff0000]
shr r13d, 0xa
or r13d, 0xd800
and edx, 0x3ff
or edx, 0xdc00
mov r15d, edx
mov rax, rdi
mov rcx, rdi
cmp rsi, qword [rbp + 0x490]
je 0x1400358a0
jmp 0x140035780
mov rax, qword [rbp + 0x490]
mov rcx, qword [rbp + 0x498]
test rcx, rcx
je 0x140035ba6
mov qword [rbp + 0x4f0], rax
mov qword [rbp + 0x4f8], rcx
mov qword [rbp + 0x500], rsi
mov rcx, qword [rbp + 0x518]
movzx eax, byte [rcx + 0xad]
mov byte [rbp + 0x5c0], al
test al, al
setne byte [rbp + 0x5d0]
lea r15, [0x1412d324f]
mov rax, r15
not rax
add rax, r15
add rax, 0x12
shr rax, 2
cmp rax, 4
mov ebx, 3
cmovae rbx, rax
movabs rax, 0x3fffffffffffffff
xor edi, edi
cmp rbx, rax
setne al
je 0x140036475
mov dil, al
add rdi, rdi
mov rax, qword [rbp + 0x408]
mov qword [rbp + 0x520], rax
mov rax, qword [rbp + 0x410]
mov qword [rbp + 0x558], rax
mov rsi, qword [rcx + 0x98]
mov rax, qword [rcx + 0xa0]
mov qword [rbp + 0x448], rax
lea r14, [rbx + rbx]
add r14, 2
mov rcx, r14
mov rdx, rdi
call fcn.14001af80
test rax, rax
je 0x14003647c
inc rbx
mov word [rax], 0x63
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 1
lea r12, [0x1412d3250]
mov edi, 1
xor ebx, ebx
lea r14, [rbp - 0x30]
jmp 0x140035a3e
mov word [rax + rdi*2], bx
inc rdi
mov qword [rbp - 0x20], rdi
mov ebx, r13d
test bx, bx
je 0x140035a60
xor r13d, r13d
cmp rdi, qword [rbp - 0x30]
jne 0x140035a30
jmp 0x140035b40
lea rcx, [0x1412d325e]
cmp r12, rcx
je 0x140035b65
movzx r8d, byte [r12]
movzx ebx, r8b
test bl, bl
js 0x140035a8e
inc r12
xor r13d, r13d
cmp rdi, qword [rbp - 0x30]
jne 0x140035a30
jmp 0x140035b40
mov ecx, ebx
and ecx, 0x1f
movzx r9d, byte [r12 + 1]
and r9d, 0x3f
cmp bl, 0xdf
jbe 0x140035ae0
movzx edx, byte [r12 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x140035afb
movzx ebx, byte [r12 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and ebx, 0x3f
or ebx, edx
or ebx, ecx
cmp ebx, 0x110000
je 0x140035b65
add r12, 4
jmp 0x140035b06
add r12, 2
shl ecx, 6
or ecx, r9d
mov ebx, ecx
xor r13d, r13d
cmp rdi, qword [rbp - 0x30]
jne 0x140035a30
jmp 0x140035b40
add r12, 3
shl ecx, 0xc
or edx, ecx
mov ebx, edx
cmp ebx, 0xffff
jbe 0x140035a43
lea ecx, [rbx + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and ebx, 0x3ff
or ebx, 0xdc00
mov r13d, ebx
mov ebx, ecx
cmp rdi, qword [rbp - 0x30]
jne 0x140035a30
nop dword [rax]
mov r8, r15
sub r8, r12
add r8, 0x12
shr r8, 2
inc r8
mov rcx, r14
mov rdx, rdi
call fcn.140052840
mov rax, qword [rbp - 0x28]
jmp 0x140035a30
mov rdi, qword [rbp - 0x20]
mov qword [rbp + 0x570], rdi
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x560], xmm0
cmp rdi, qword [rbp + 0x560]
jne 0x140035bbd
lea rcx, [rbp + 0x560]
mov rdx, rdi
call fcn.1400266f0
mov r12, qword [rbp + 0x520]
mov rdi, qword [rbp + 0x570]
jmp 0x140035bc4
mov rax, rsi
mov rcx, qword [rbp + 0x4e8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
jmp 0x140033cad
mov r12, qword [rbp + 0x520]
mov rbx, qword [rbp + 0x568]
mov word [rbx + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x570], rdi
mov rax, qword [rbp + 0x558]
add rax, rax
xor ecx, ecx
lea r15, [0x1412d3298]
cmp rax, rcx
je 0x140035c04
cmp word [r12 + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x140035bee
jmp 0x140036054
mov r14, qword [rbp + 0x558]
sub r14, 1
jae 0x140035e09
xor eax, eax
jmp 0x140035e21
call fcn.140052900
xor al, 1
jmp 0x140034daa
xorps xmm0, xmm0
movups xmmword [rbp + 4], xmm0
movups xmmword [rbp - 8], xmm0
movups xmmword [rbp - 0x18], xmm0
movups xmmword [rbp - 0x28], xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
mov dword [rbp - 0x30], 0x68
test r14, r14
mov rax, qword [rbp + 0x518]
mov r12, qword [rbp + 0x418]
jne 0x140035c67
test r12, r12
jne 0x140035c67
test rax, rax
je 0x140035c7a
mov dword [rbp + 0xc], pe_nt_image_headers64
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], r14
mov rdi, qword [rbp + 0x458]
mov rcx, qword [rbp + 0x478]
lea rax, [rbp + 0x4f0]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x3d8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r15d
mov r15, rcx
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14003613a
movups xmm0, xmmword [rbp + 0x560]
movups xmm1, xmmword [rbp + 0x570]
movups xmm2, xmmword [rbp + 0x580]
mov rax, qword [rbp + 0x4e8]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x4f0]
movups xmmword [rax], xmm0
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r14
call rsi
mov rcx, r12
call rsi
mov rcx, qword [rbp + 0x518]
call rsi
lea rcx, [rbp + 0x490]
call fcn.14003aaf0
cmp qword [rbp + 0x520], 0
mov esi, dword [rbp + 0x5d0]
je 0x140035d56
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x528], 0
mov r8, qword [rbp + 0x5c0]
je 0x140035d76
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x470], 0
je 0x140035d92
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x450], 0
je 0x140035dae
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x400], 0
sete al
or sil, al
jne 0x140033d78
mov r8, qword [rbp + 0x408]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140033d78
cmp qword [rbp + 0x4f0], 0
je 0x140035dfd
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x5c0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1412d3810]
jmp 0x14003398b
movzx ecx, word [r12 + r14*2]
cmp cx, 0x5c
je 0x140036054
xor eax, eax
test cx, cx
cmove rax, r12
test rax, rax
cmove r14, qword [rbp + 0x558]
cmovne r12, rax
mov r15, qword [rbp + 0x560]
mov rax, r15
sub rax, rdi
cmp rax, r14
jae 0x140035e69
lea rcx, [rbp + 0x560]
mov rdx, rdi
mov r8, r14
call fcn.140052840
mov rdi, qword [rbp + 0x570]
mov r15, qword [rbp + 0x560]
mov rbx, qword [rbp + 0x568]
lea r8, [r14 + r14]
lea rcx, [rbx + rdi*2]
mov rdx, r12
call fcn.140043d50
add rdi, r14
mov qword [rbp + 0x570], rdi
cmp rdi, r15
jne 0x140035ea5
lea rcx, [rbp + 0x560]
mov rdx, r15
call fcn.1400266f0
mov rbx, qword [rbp + 0x568]
mov rdi, qword [rbp + 0x570]
mov word [rbx + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x570], rdi
mov rax, qword [rbp + 0x448]
lea rax, [rax + rax*4]
lea rbx, [rsi + rax*8]
lea r14, [0x1412d32b7]
and r14, 0xfffffffffffffff8
lea r12, [0x1412d32b0]
mov rax, r14
sub rax, r12
cmp rax, 0x16
mov r13d, 0x16
cmovb r13, rax
lea rdi, [rbp + 0x560]
cmp rsi, rbx
je 0x1400360af
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x560]
jne 0x140035f19
mov rcx, rdi
call fcn.1400266f0
mov rdx, qword [rbp + 0x570]
lea rax, [rdx + 1]
mov rcx, qword [rbp + 0x568]
mov word [rcx + rdx*2], 0x20
mov qword [rbp + 0x570], rax
movzx eax, byte [rbp + 0x5d0]
mov r8d, eax
cmp byte [rbp + 0x5c0], 0
jne 0x140036039
cmp qword [rsi], 0
movzx eax, byte [rbp + 0x5d0]
mov r8d, eax
jne 0x140036039
mov rax, qword [rsi + 0x10]
mov rcx, qword [rsi + 0x18]
add rcx, rax
cmp rax, rcx
je 0x140036031
movzx edx, byte [rax]
test r13, r13
je 0x140035fad
mov r8d, 0
cmp r14, r12
je 0x140035fb0
xor r8d, r8d
nop word cs:[rax + rax]
cmp byte [r8 + r12], dl
je 0x140036036
inc r8
cmp r13, r8
jne 0x140035f90
mov r8, r13
cmp r13, 6
ja 0x140036010
jmp 0x140035fb0
xor r8d, r8d
movzx r9d, dl
movabs r10, 0x101010101010101
imul r9, r10
mov r10, qword [r8 + r12]
xor r10, r9
mov r11, r10
not r11
movabs r15, 0xfefefefefefefeff
add r10, r15
and r10, r11
movabs r11, 0x8080808080808080
test r10, r11
jne 0x140036010
xor r9, qword [r8 + r12 + 8]
mov r10, r9
not r10
add r9, r15
and r9, r10
lea r10, [r8 + 0x10]
test r9, r11
cmove r8, r10
nop word [rax + rax]
cmp r8, 0x16
je 0x140036025
cmp byte [r8 + r12], dl
je 0x140036036
inc r8
cmp r8, 0x16
jne 0x140036016
inc rax
cmp rax, rcx
jne 0x140035f70
xor r8d, r8d
jmp 0x140036039
mov r8b, 1
mov rcx, rdi
mov rdx, rsi
call fcn.140039970
mov r15, rax
add rsi, 0x28
test rax, rax
je 0x140035ef1
cmp qword [rbp + 0x560], 0
je 0x140036074
mov r8, qword [rbp + 0x568]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x4e8]
mov qword [rax], r15
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x4f0], 0
je 0x140033cad
mov r8, qword [rbp + 0x4f8]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140033cad
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x560]
jne 0x1400360d2
lea rcx, [rbp + 0x560]
call fcn.1400266f0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x568]
mov word [rax + rdx*2], 0x22
inc rdx
mov rbx, qword [rbp + 0x560]
movups xmm0, xmmword [rbp + 0x4f0]
movaps xmmword [rbp + 0x530], xmm0
mov rcx, qword [rbp + 0x500]
mov qword [rbp + 0x540], rcx
mov cl, 1
mov dword [rbp + 0x558], ecx
xor edi, edi
jmp 0x140033c34
call fcn.140052900
test al, al
jne 0x140034ee2
mov byte [0x1412e4bc8], 1
jmp 0x140034ee2
mov rsi, qword [rbp - 0x30]
mov rdi, qword [rbp - 0x20]
jmp 0x140035607
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x4e8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [rbp + 0x5d0]
mov rsi, qword [rbp + 0x520]
jmp 0x1400353aa
mov rdi, r12
jmp 0x1400348c4
mov rsi, qword [rbp - 0x30]
mov rdi, qword [rbp - 0x20]
cmp qword [rbp + 0x4f0], 0
je 0x140035607
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x5c0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140035607
lea rcx, [0x1412d1230]
lea r8, [0x1412d1820]
mov edx, 0x2b
call fcn.140051970
jmp 0x1400364ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4f0], rax
lea rax, [rbp + 0x4f0]
mov qword [rbp + 0x490], rax
lea rax, [0x14002a250]
mov qword [rbp + 0x498], rax
lea rax, [0x1412d3738]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x578], 1
mov qword [rbp + 0x560], 0
lea rax, [rbp + 0x490]
mov qword [rbp + 0x580], rax
mov qword [rbp + 0x588], 1
lea rdx, [0x1412d3770]
lea rcx, [rbp + 0x560]
call fcn.140051890
jmp 0x1400364ad
lea rcx, [0x1412d1230]
lea r8, [0x1412d1850]
mov edx, 0x2b
call fcn.140051970
jmp 0x1400364ad
mov edx, 1
mov rcx, rdi
call fcn.1400517c0
jmp 0x1400364ad
mov byte [rbp + 0x5cf], 1
mov edx, 1
mov rcx, rdi
call fcn.1400517c0
jmp 0x1400364ad
mov rcx, r12
mov rdx, rsi
call fcn.1400517c0
jmp 0x1400364ad
call fcn.140012910
jmp 0x1400364ad
mov byte [rbp + 0x5cf], 1
call fcn.140012910
jmp 0x1400364ad
call fcn.140012910
jmp 0x1400364ad
lea r8, [0x1412d34f8]
mov ecx, 1
xor edx, edx
call fcn.140051950
jmp 0x1400364ad
lea rax, [0x1412d3510]
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.140051960
jmp 0x1400364ad
lea r8, [0x1412d3528]
mov rdx, r12
call fcn.140051950
jmp 0x1400364ad
lea rcx, [0x1412d1438]
lea r8, [0x1412d1460]
mov edx, 0x21
call fcn.140051970
jmp 0x1400364ad
mov byte [rbp + 0x5df], 1
mov ecx, 4
mov edx, 1
call fcn.1400517c0
jmp 0x1400364ad
lea rcx, [0x1412d15c8]
lea r8, [0x1412d3c48]
mov edx, 0x28
call fcn.140051970
jmp 0x1400364ad
lea rcx, [0x1412d15c8]
lea r8, [0x1412d3c48]
mov edx, 0x28
call fcn.140051970
jmp 0x1400364ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x490], rax
lea rax, [rbp + 0x490]
mov qword [rbp + 0x560], rax
lea rax, [0x14002a250]
mov qword [rbp + 0x568], rax
lea rax, [0x1412d3568]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 1
mov qword [rbp - 0x30], 0
lea rax, [rbp + 0x560]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 1
lea rdx, [0x1412d3578]
lea rcx, [rbp - 0x30]
call fcn.140051890
jmp 0x1400364ad
lea rcx, [0x1412d15c8]
lea r8, [0x1412d3c48]
mov edx, 0x28
call fcn.140051970
jmp 0x1400364ad
mov sil, r14b
mov byte [rbp + 0x5df], 1
mov rcx, rbx
mov rdx, rsi
call fcn.1400517c0
jmp 0x1400364ad
mov byte [rbp + 0x5df], 1
call fcn.140012910
jmp 0x1400364ad
lea rax, [0x1412d3c60]
mov rcx, r8
mov rdx, rdi
mov r8, rax
call fcn.140051960
jmp 0x1400364ad
lea r8, [0x1412d3c60]
mov rcx, rsi
mov rdx, r12
call fcn.140051960
jmp 0x1400364ad
lea r8, [0x1412d0d68]
call fcn.140051950
jmp 0x1400364ad
call fcn.140012910
jmp 0x1400364ad
mov rcx, r14
mov rdx, rdi
call fcn.1400517c0
jmp 0x1400364ad
mov edx, 2
mov rcx, r14
call fcn.1400517c0
jmp 0x1400364ad
lea rax, [0x1412d3c60]
mov rcx, r8
mov rdx, rdi
mov r8, rax
call fcn.140051960
ud2