Function at 0x1401476f0
Capabilities:
Load assembly via iassembly
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
cmp dword [rcx + 0xc], 0
mov esi, r8d
mov edi, edx
mov rbx, rcx
jne 0x140147731
mov eax, 1
add rsp, 0xb0
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rsp + 0xa0], r14
call fcn.140169aa0
xor r14d, r14d
test esi, esi
je 0x1401477d2
mov eax, dword [rbx + 0x10]
bt eax, 0xc
jae 0x140147766
btr eax, 0xc
mov rcx, rbx
mov dword [rbx + 0x10], eax
call qword [rbx + 0x2f0]
test eax, eax
je 0x14014778a
mov rcx, rbx
call qword [rbx + 0x328]
cmp qword [rbx + 0x390], r14
jle 0x140147791
test byte [rbx + 0x10], 0x40
je 0x140147791
mov rcx, rbx
call fcn.14014cb00
test eax, eax
jne 0x140147791
xor eax, eax
jmp 0x140147988
test dword [rbx + 0x10], 0x200
je 0x1401477ce
mov rcx, qword [rbx + 0x368]
test rcx, rcx
je 0x1401477ce
call fcn.14003a2e0
mov qword [rbx + 0x368], r14
mov qword [rbx + 0x390], r14
mov qword [rbx + 0x370], r14
mov qword [rbx + 0x378], r14
mov qword [rbx + 0x380], r14
and dword [rbx + 0x10], 0xffffffaf
mov esi, 4
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x98], r15
mov r13, r14
mov dword [rbp - 0x19], r14d
lea r12d, [rsi - 3]
lea r15d, [rsi - 2]
lea r11d, [rsi + 2]
lea r10d, [rsi + 3]
lea r9, [0x140000000]
nop word [rax + rax]
mov dword [rbp - 0x39], r14d
test edi, edi
je 0x1401486f3
test byte [rbx + 0x38], 2
je 0x14014799e
mov eax, dword [rbx + 0x48]
test r13, r13
jne 0x14014783b
mov dword [rbp - 0x39], r12d
lea edi, [r13 + 3]
jmp 0x1401478d4
cmp eax, 0xffff
ja 0x140147889
test byte [rbx + 0x10], 0x80
mov word [rbp + 0x67], ax
je 0x140147855
lea rcx, [rbp + 0x67]
call fcn.14015b580
lea rax, [rbp + 0x67]
lea rdx, [rbp - 0x39]
mov edi, 3
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r9d, 0x100
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
jmp 0x1401478cc
test byte [rbx + 0x10], 0x80
mov dword [rbp - 0x35], eax
je 0x14014789b
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x100
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
call fcn.140149f30
mov edi, 3
test eax, eax
je 0x14014795a
mov eax, dword [rbx + 0x4c]
test r13, r13
jne 0x1401478e4
inc dword [rbp - 0x39]
jmp 0x1401479a3
cmp eax, 0xffff
ja 0x140147918
test byte [rbx + 0x10], 0x80
mov word [rbp - 0x25], ax
je 0x1401478fe
lea rcx, [rbp - 0x25]
call fcn.14015b580
lea rax, [rbp - 0x25]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
jmp 0x140147941
test byte [rbx + 0x10], 0x80
mov dword [rbp - 0x35], eax
je 0x14014792a
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
lea rdx, [rbp - 0x39]
mov r9d, 0x101
mov r8, r13
mov rcx, rbx
call fcn.140149f30
test eax, eax
jne 0x1401479a3
xor esi, esi
test r13, r13
je 0x140147969
mov rcx, r13
call fcn.14003a2e0
test rsi, rsi
je 0x140147976
mov rcx, rsi
call fcn.14003a2e0
xor eax, eax
mov r13, qword [rsp + 0xa8]
mov r15, qword [rsp + 0x98]
mov r14, qword [rsp + 0xa0]
add rsp, 0xb0
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edi, 3
test byte [rbx + 0x38], 4
je 0x140147abb
mov eax, dword [rbx + 0x54]
test r13, r13
jne 0x1401479ba
inc dword [rbp - 0x39]
jmp 0x140147a34
cmp eax, 0xffff
ja 0x1401479ee
test byte [rbx + 0x10], 0x80
mov word [rbp - 0x29], ax
je 0x1401479d4
lea rcx, [rbp - 0x29]
call fcn.14015b580
lea rax, [rbp - 0x29]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
jmp 0x140147a17
test byte [rbx + 0x10], 0x80
mov dword [rbp - 0x35], eax
je 0x140147a00
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
lea rdx, [rbp - 0x39]
mov r9d, 0x142
mov r8, r13
mov rcx, rbx
call fcn.140149f30
test eax, eax
je 0x14014795a
mov eax, dword [rbx + 0x58]
test r13, r13
jne 0x140147a41
inc dword [rbp - 0x39]
jmp 0x140147abb
cmp eax, 0xffff
ja 0x140147a75
test byte [rbx + 0x10], 0x80
mov word [rbp - 0x31], ax
je 0x140147a5b
lea rcx, [rbp - 0x31]
call fcn.14015b580
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
jmp 0x140147a9e
test byte [rbx + 0x10], 0x80
mov dword [rbp - 0x35], eax
je 0x140147a87
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
lea rdx, [rbp - 0x39]
mov r9d, 0x143
mov r8, r13
mov rcx, rbx
call fcn.140149f30
test eax, eax
je 0x14014795a
test byte [rbx + 0x38], 8
je 0x140147b31
movss xmm0, dword [rbx + 0x90]
cvtps2pd xmm0, xmm0
test r13, r13
jne 0x140147ad6
inc dword [rbp - 0x39]
jmp 0x140147af9
lea rdx, [rbp - 0x39]
mov r9d, 0x11a
mov r8, r13
mov rcx, rbx
movsd qword [rsp + 0x20], xmm0
call fcn.140149270
test eax, eax
je 0x14014795a
movss xmm0, dword [rbx + 0x94]
cvtps2pd xmm0, xmm0
test r13, r13
jne 0x140147b0e
inc dword [rbp - 0x39]
jmp 0x140147b31
lea rdx, [rbp - 0x39]
mov r9d, 0x11b
mov r8, r13
mov rcx, rbx
movsd qword [rsp + 0x20], xmm0
call fcn.140149270
test eax, eax
je 0x14014795a
test byte [rbx + 0x38], 0x10
je 0x140147ba7
movss xmm0, dword [rbx + 0x9c]
cvtps2pd xmm0, xmm0
test r13, r13
jne 0x140147b4c
inc dword [rbp - 0x39]
jmp 0x140147b6f
lea rdx, [rbp - 0x39]
mov r9d, 0x11e
mov r8, r13
mov rcx, rbx
movsd qword [rsp + 0x20], xmm0
call fcn.140149270
test eax, eax
je 0x14014795a
movss xmm0, dword [rbx + 0xa0]
cvtps2pd xmm0, xmm0
test r13, r13
jne 0x140147b84
inc dword [rbp - 0x39]
jmp 0x140147ba7
lea rdx, [rbp - 0x39]
mov r9d, 0x11f
mov r8, r13
mov rcx, rbx
movsd qword [rsp + 0x20], xmm0
call fcn.140149270
test eax, eax
je 0x14014795a
test byte [rbx + 0x38], 0x20
je 0x140147c00
test r13, r13
jne 0x140147bb7
inc dword [rbp - 0x39]
jmp 0x140147c00
test byte [rbx + 0x10], 0x80
mov eax, dword [rbx + 0x60]
mov dword [rbp - 0x35], eax
je 0x140147bcc
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0xfe
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
call fcn.140149f30
test eax, eax
je 0x14014795a
test byte [rbx + 0x38], 0x40
je 0x140147c2c
movzx eax, word [rbx + 0x64]
lea rdx, [rbp - 0x39]
mov r9d, 0x102
mov r8, r13
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.14014ae10
test eax, eax
je 0x14014795a
test byte [rbx + 0x38], 0x80
je 0x140147c3a
test r13, r13
jne 0x140147c59
inc dword [rbp - 0x39]
mov edi, 3
test dword [rbx + 0x38], 0x100
je 0x140147cf8
test r13, r13
jne 0x140147cac
inc dword [rbp - 0x39]
jmp 0x140147cf8
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x68]
mov word [rbp - 0x35], ax
je 0x140147c70
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov edi, 3
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r9d, 0x103
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
jmp 0x140147c3f
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x6a]
mov word [rbp - 0x35], ax
je 0x140147cc3
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x106
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x200
je 0x140147d57
test r13, r13
jne 0x140147d0b
inc dword [rbp - 0x39]
jmp 0x140147d57
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x6c]
mov word [rbp - 0x35], ax
je 0x140147d22
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x107
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x400
je 0x140147db6
test r13, r13
jne 0x140147d6a
inc dword [rbp - 0x39]
jmp 0x140147db6
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x6e]
mov word [rbp - 0x35], ax
je 0x140147d81
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x10a
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x8000
je 0x140147e15
test r13, r13
jne 0x140147dc9
inc dword [rbp - 0x39]
jmp 0x140147e15
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x70]
mov word [rbp - 0x35], ax
je 0x140147de0
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x112
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x10000
je 0x140147e74
test r13, r13
jne 0x140147e28
inc dword [rbp - 0x39]
jmp 0x140147e74
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x72]
mov word [rbp - 0x35], ax
je 0x140147e3f
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x115
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x20000
je 0x140147f08
mov eax, dword [rbx + 0x74]
test r13, r13
jne 0x140147e8e
inc dword [rbp - 0x39]
jmp 0x140147f08
cmp eax, 0xffff
ja 0x140147ec2
test byte [rbx + 0x10], 0x80
mov word [rbp - 0x2d], ax
je 0x140147ea8
lea rcx, [rbp - 0x2d]
call fcn.14015b580
lea rax, [rbp - 0x2d]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
jmp 0x140147eeb
test byte [rbx + 0x10], 0x80
mov dword [rbp - 0x35], eax
je 0x140147ed4
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
lea rdx, [rbp - 0x39]
mov r9d, 0x116
mov r8, r13
mov rcx, rbx
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x40000
je 0x140147f37
movzx eax, word [rbx + 0x78]
lea rdx, [rbp - 0x39]
mov r9d, pe_nt_image_headers64
mov r8, r13
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.14014ae10
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x80000
je 0x140147f66
movzx eax, word [rbx + 0x7a]
lea rdx, [rbp - 0x39]
mov r9d, 0x119
mov r8, r13
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.14014ae10
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x100000
je 0x140147fc8
test r13, r13
jne 0x140147f79
inc dword [rbp - 0x39]
jmp 0x140147fc8
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x9a]
mov word [rbp - 0x35], ax
je 0x140147f93
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x11c
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x400000
je 0x14014802a
test r13, r13
jne 0x140147fdb
inc dword [rbp - 0x39]
jmp 0x14014802a
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0x98]
mov word [rbp - 0x35], ax
je 0x140147ff5
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x128
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x800000
je 0x14014808a
lea rdi, [rbx + 0xa4]
test r13, r13
jne 0x140148044
inc dword [rbp - 0x39]
jmp 0x14014808a
test byte [rbx + 0x10], 0x80
je 0x140148055
mov rdx, r15
mov rcx, rdi
call fcn.14015b4c0
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], esi
lea rdx, [rbp - 0x39]
mov edi, 3
mov r9d, 0x129
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r15d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x1000000
je 0x1401480d5
test dword [rbx + 0x10], 0x400
mov rax, qword [rbx + 0xe0]
mov r8, r13
mov qword [rsp + 0x28], rax
mov eax, dword [rbx + 0xd4]
lea rdx, [rbp - 0x39]
mov rcx, rbx
mov r9d, 0x117
mov dword [rsp + 0x20], eax
je 0x1401480c8
mov r9d, 0x145
call fcn.14014a1f0
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x2000000
je 0x140148127
test dword [rbx + 0x10], 0x400
mov rax, qword [rbx + 0xd8]
jne 0x1401480fb
test rax, rax
je 0x140148127
mov r9d, 0x111
jmp 0x140148101
mov r9d, 0x144
mov qword [rsp + 0x28], rax
mov eax, dword [rbx + 0xd4]
lea rdx, [rbp - 0x39]
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.14014a1f0
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x4000000
je 0x140148147
lea rdx, [rbp - 0x39]
mov r8, r13
mov rcx, rbx
call fcn.140149e40
test eax, eax
je 0x14014795a
test dword [rbx + 0x38], 0x80000000
je 0x1401481ce
cmp word [rbx + 0xc4], 0
je 0x1401481ce
lea r9, [rbp - 1]
lea r8, [rbp - 0x1d]
mov edx, 0x152
mov rcx, rbx
call fcn.1401459f0
mov rsi, qword [rbp - 1]
movzx edi, word [rbp - 0x1d]
test r13, r13
jne 0x140148181
inc dword [rbp - 0x39]
jmp 0x1401481c9
test byte [rbx + 0x10], 0x80
je 0x140148192
mov rdx, rdi
mov rcx, rsi
call fcn.14015b4c0
lea eax, [rdi + rdi]
mov qword [rsp + 0x38], rsi
lea rdx, [rbp - 0x39]
mov dword [rsp + 0x30], eax
mov eax, 3
mov r9d, 0x152
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], edi
mov word [rsp + 0x20], ax
call fcn.140149f30
test eax, eax
je 0x14014795a
mov esi, 4
test byte [rbx + 0x3c], r12b
je 0x1401481fa
movzx eax, word [rbx + 0x66]
lea rdx, [rbp - 0x39]
mov r9d, 0x153
mov r8, r13
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.14014ae10
test eax, eax
je 0x14014795a
test byte [rbx + 0x3c], 2
je 0x140148231
movzx ecx, word [rbx + 0x72]
mov rax, qword [rbx + 0x80]
lea rdx, [rbp - 0x39]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9d, 0x154
mov rcx, rbx
mov r8, r13
call fcn.14014a2f0
test eax, eax
je 0x14014795a
test byte [rbx + 0x3c], 4
je 0x140148268
movzx ecx, word [rbx + 0x72]
mov rax, qword [rbx + 0x88]
lea rdx, [rbp - 0x39]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9d, 0x155
mov rcx, rbx
mov r8, r13
call fcn.14014a2f0
test eax, eax
je 0x14014795a
test byte [rbx + 0x3c], 8
je 0x1401482c1
test r13, r13
jne 0x140148278
inc dword [rbp - 0x39]
jmp 0x1401482c1
test byte [rbx + 0x10], 0x80
mov eax, dword [rbx + 0x50]
mov dword [rbp - 0x35], eax
je 0x14014828d
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x80e5
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
call fcn.140149f30
test eax, eax
je 0x14014795a
test byte [rbx + 0x3c], 0x10
je 0x14014831a
test r13, r13
jne 0x1401482d1
inc dword [rbp - 0x39]
jmp 0x14014831a
test byte [rbx + 0x10], 0x80
mov eax, dword [rbx + 0x5c]
mov dword [rbp - 0x35], eax
je 0x1401482e6
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x80e6
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], si
call fcn.140149f30
test eax, eax
je 0x14014795a
test byte [rbx + 0x3c], 0x20
je 0x140148377
lea rdi, [rbx + 0xc0]
test r13, r13
jne 0x140148331
inc dword [rbp - 0x39]
jmp 0x140148377
test byte [rbx + 0x10], 0x80
je 0x140148342
mov rdx, r15
mov rcx, rdi
call fcn.14015b4c0
mov qword [rsp + 0x38], rdi
mov eax, 3
mov dword [rsp + 0x30], esi
lea rdx, [rbp - 0x39]
mov r9d, 0x141
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r15d
mov word [rsp + 0x20], ax
call fcn.140149f30
test eax, eax
je 0x14014795a
test byte [rbx + 0x3c], 0x80
je 0x14014838c
lea rdi, [rbx + 0xf8]
test r13, r13
jne 0x1401483ab
inc dword [rbp - 0x39]
mov edi, 3
test dword [rbx + 0x3c], 0x100
je 0x140148442
test r13, r13
jne 0x1401483f3
inc dword [rbp - 0x39]
jmp 0x140148442
test byte [rbx + 0x10], 0x80
je 0x1401483bc
mov rdx, r15
mov rcx, rdi
call fcn.14015b4c0
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], esi
lea rdx, [rbp - 0x39]
mov edi, 3
mov r9d, 0x212
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r15d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
jmp 0x140148391
test byte [rbx + 0x10], 0x80
movzx eax, word [rbx + 0xfc]
mov word [rbp - 0x35], ax
je 0x14014840d
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x39]
mov r9d, 0x213
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], di
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x3c], 0x200
je 0x140148486
mov rax, qword [rbx + 0x118]
test r13, r13
jne 0x14014845c
inc dword [rbp - 0x39]
jmp 0x140148486
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x39]
mov r9d, 0x214
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x20], 6
call fcn.1401493b0
test eax, eax
je 0x14014795a
test dword [rbx + 0x3c], 0x1000
je 0x1401484a6
lea rdx, [rbp - 0x39]
mov r8, r13
mov rcx, rbx
call fcn.14014b060
test eax, eax
je 0x14014795a
test dword [rbx + 0x3c], 0x4000
je 0x1401484f6
mov rcx, qword [rbx + 0x128]
mov eax, dword [rbx + 0x120]
test r13, r13
jne 0x1401484c6
inc dword [rbp - 0x39]
jmp 0x1401484f6
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
lea rdx, [rbp - 0x39]
mov r9d, 0x14d
mov r8, r13
mov rcx, rbx
mov word [rsp + 0x20], r15w
call fcn.140149f30
test eax, eax
je 0x14014795a
test dword [rbx + 0x3c], 0x20000
je 0x140148516
lea rdx, [rbp - 0x39]
mov r8, r13
mov rcx, rbx
call fcn.14014af00
test eax, eax
je 0x14014795a
cmp qword [rbx + 0x3f8], 0
mov esi, r14d
jbe 0x1401486e2
mov rcx, r14
nop word [rax + rax]
mov rax, qword [rbx + 0x3f0]
mov rdi, qword [rax + rcx*8]
movzx edx, word [rdi + 0x18]
cmp dx, 0x42
jb 0x1401486d1
movzx eax, dx
mov ecx, edx
shr rax, 5
and ecx, 0x1f
mov eax, dword [rbx + rax*4 + 0x38]
bt eax, ecx
jae 0x1401486d1
mov ecx, dword [rdi + 0x14]
dec ecx
je 0x140148676
sub ecx, 3
je 0x14014861e
sub ecx, 2
je 0x1401485c6
cmp ecx, 0x22
jne 0x14014795a
mov edx, dword [rdi]
lea r9, [rbp + 7]
lea r8, [rbp - 9]
mov rcx, rbx
call fcn.140143ac0
test r13, r13
jne 0x1401485a3
inc dword [rbp - 0x39]
jmp 0x1401486d1
mov rax, qword [rbp + 7]
mov qword [rsp + 0x38], rax
mov eax, dword [rbp - 9]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov eax, 7
mov word [rsp + 0x20], ax
jmp 0x1401486b6
mov edx, dword [rdi]
lea r8, [rbp - 0x11]
mov rcx, rbx
call fcn.140143ac0
movzx edi, word [rdi]
test r13, r13
jne 0x1401485e4
inc dword [rbp - 0x39]
jmp 0x1401486d1
test byte [rbx + 0x10], 0x80
mov eax, dword [rbp - 0x11]
mov dword [rbp - 0x35], eax
je 0x1401485f9
lea rcx, [rbp - 0x35]
call fcn.14015b520
lea rax, [rbp - 0x35]
movzx r9d, di
mov qword [rsp + 0x38], rax
mov eax, 4
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], ax
jmp 0x1401486ba
mov edx, dword [rdi]
lea r8, [rbp - 0x21]
mov rcx, rbx
call fcn.140143ac0
movzx edi, word [rdi]
test r13, r13
jne 0x14014863c
inc dword [rbp - 0x39]
jmp 0x1401486d1
test byte [rbx + 0x10], 0x80
movzx eax, word [rbp - 0x21]
mov word [rbp - 0x35], ax
je 0x140148653
lea rcx, [rbp - 0x35]
call fcn.14015b580
lea rax, [rbp - 0x35]
movzx r9d, di
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov eax, 3
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x20], ax
jmp 0x1401486ba
mov edx, dword [rdi]
lea r8, [rbp + 0xf]
mov rcx, rbx
call fcn.140143ac0
mov rcx, qword [rbp + 0xf]
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140148690
test r13, r13
jne 0x1401486a3
inc dword [rbp - 0x39]
jmp 0x1401486d1
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov word [rsp + 0x20], r15w
movzx r9d, word [rdi]
lea rdx, [rbp - 0x39]
mov r8, r13
mov rcx, rbx
call fcn.140149f30
test eax, eax
je 0x14014795a
inc esi
mov ecx, esi
cmp rcx, qword [rbx + 0x3f8]
jb 0x140148530
mov r11d, 6
lea r9, [0x140000000]
lea r10d, [r11 + 1]
cmp dword [rbx + 0x130], 0
mov r15d, r14d
jbe 0x140148ae4
nop dword [rax]
nop word [rax + rax]
mov r8, qword [rbx + 0x138]
mov eax, r15d
lea rdx, [rax + rax*2]
mov rax, qword [r8 + rdx*8]
mov esi, dword [r8 + rdx*8 + 8]
movzx r14d, word [rax]
mov eax, dword [rax + 8]
dec eax
cmp eax, 0x11
ja case.0x140148746.14
cdqe
mov ecx, dword [r9 + rax*4 + 0x148ea0]
add rcx, r9
jmp rcx
mov rax, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x14014875a
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov eax, 2
mov dword [rsp + 0x28], esi
mov word [rsp + 0x20], ax
lea rdx, [rbp - 0x39]
movzx r9d, r14w
mov r8, r13
mov rcx, rbx
call fcn.140149f30
jmp 0x140148ab8
mov rax, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x14014879b
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov word [rsp + 0x20], r10w
jmp 0x140148771
mov rax, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x1401487c2
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov word [rsp + 0x20], r12w
jmp 0x140148771
mov rax, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x1401487e9
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov word [rsp + 0x20], r11w
jmp 0x140148771
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x140148813
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x140148824
mov rdx, rsi
mov rcx, rdi
call fcn.14015b4c0
lea eax, [rsi + rsi]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, 3
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x14014884c
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x14014885d
mov rdx, rsi
mov rcx, rdi
call fcn.14015b4c0
lea eax, [rsi + rsi]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, 8
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x140148885
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x140148896
mov rdx, rsi
mov rcx, rdi
call fcn.14015b480
lea eax, [rsi*4]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, 4
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x1401488c2
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x1401488d3
mov rdx, rsi
mov rcx, rdi
call fcn.14015b480
lea eax, [rsi*4]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, 9
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x1401488ff
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov eax, dword [rbx + 0x10]
bt eax, 0x13
jae 0x14014795a
test al, al
jns 0x14014891b
mov rdx, rsi
mov rcx, rdi
call fcn.14015b420
lea eax, [rsi*8]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, InitCommonControls
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x140148947
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov eax, dword [rbx + 0x10]
bt eax, 0x13
jae 0x14014795a
test al, al
jns 0x140148963
mov rdx, rsi
mov rcx, rdi
call fcn.14015b420
lea eax, [rsi*8]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, reloc.COMCTL32.dll_InitCommonControls
jmp 0x140148768
mov rax, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x14014898f
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x39]
movzx r9d, r14w
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.1401493b0
jmp 0x140148ab8
mov rax, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x1401489c2
inc dword [rbp - 0x39]
jmp case.0x140148746.14
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x39]
movzx r9d, r14w
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.140149890
jmp 0x140148ab8
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x1401489f5
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x140148a06
mov rdx, rsi
mov rcx, rdi
call fcn.14015b480
lea eax, [rsi*4]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, 0xb
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x140148a32
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x140148a43
mov rdx, rsi
mov rcx, rdi
call fcn.14015b420
lea eax, [rsi*8]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, 0xc
jmp 0x140148768
mov rdi, qword [r8 + rdx*8 + 0x10]
test r13, r13
jne 0x140148a6c
inc dword [rbp - 0x39]
jmp case.0x140148746.14
test byte [rbx + 0x10], 0x80
je 0x140148a7d
mov rdx, rsi
mov rcx, rdi
call fcn.14015b480
lea eax, [rsi*4]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov eax, InitCommonControls
jmp 0x140148768
mov rax, qword [r8 + rdx*8 + 0x10]
lea rdx, [rbp - 0x39]
movzx r9d, r14w
mov qword [rsp + 0x28], rax
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.14014a0f0
test eax, eax
je 0x14014795a
inc r15d
mov r10d, 7
lea r9, [0x140000000]
lea r11d, [r10 - 1]
cmp r15d, dword [rbx + 0x130]
jb 0x140148710
xor r14d, r14d
test r13, r13
jne 0x140148bfb
mov eax, dword [rbp - 0x39]
lea rcx, [rax + rax*2]
shl rcx, 3
call fcn.1401432a0
mov r13, rax
test rax, rax
je 0x140147976
mov edi, dword [rbp + 0x6f]
test edi, edi
je 0x140148b58
cmp qword [rbx + 0x18], 0
jne 0x140148b27
mov rcx, rbx
call fcn.140146f80
test eax, eax
je 0x14014795a
mov r15d, 2
mov rsi, qword [rbp + 0x7f]
test rsi, rsi
je 0x140148b3d
mov rax, qword [rbx + 0x18]
mov qword [rsi], rax
mov edx, dword [rbx + 0x10]
mov eax, dword [rbp - 0x39]
and edx, 0x80000
jne 0x140148b7d
lea ecx, [rax + rax*2]
lea r9d, [rcx*4 + 6]
jmp 0x140148b88
mov rcx, qword [rbx + 0x3b8]
mov r15d, 2
xor edx, edx
mov r8d, r15d
call qword [rbx + 0x3d0]
inc rax
and rax, 0xfffffffffffffffe
mov qword [rbx + 0x18], rax
jmp 0x140148b2d
lea ecx, [rax + rax*4]
lea r9d, [rcx*4 + 0x10]
mov rcx, qword [rbx + 0x18]
mov dword [rbp - 0x19], r9d
mov r8d, r9d
lea rax, [r9 + rcx]
mov qword [rbx + 0x290], rax
test edx, edx
jne 0x140148bab
mov eax, eax
mov qword [rbx + 0x290], rax
mov rax, qword [rbx + 0x290]
cmp rax, rcx
jb 0x14014795a
cmp rax, r8
jb 0x14014795a
test r12b, al
je 0x140148bd3
inc rax
mov qword [rbx + 0x290], rax
mov esi, 4
lea r9, [0x140000000]
lea r10d, [rsi + 3]
lea r11d, [rsi + 2]
test edi, edi
je 0x140147810
inc word [rbx + 0x280]
jmp 0x1401477fe
cmp dword [rbp + 0x6f], 0
je 0x140148c73
test dword [rbx + 0x3c], 0x20000
je 0x140148c73
cmp qword [rbx + 0x2a0], 0
jne 0x140148c73
cmp dword [rbp - 0x39], 0
mov eax, r14d
mov rcx, r13
je 0x14014795a
mov edx, 0x14a
nop dword [rax]
cmp word [rcx], dx
je 0x140148c45
inc eax
add rcx, 0x18
cmp eax, dword [rbp - 0x39]
jne 0x140148c30
jmp 0x14014795a
test dword [rbx + 0x10], 0x80000
jne 0x140148c5b
lea ecx, [rax + rax*2]
mov rax, qword [rbx + 0x18]
add rax, 0xa
jmp 0x140148c66
lea ecx, [rax + rax*4]
mov rax, qword [rbx + 0x18]
add rax, 0x14
shl ecx, 2
add rcx, rax
mov qword [rbx + 0x2a0], rcx
mov eax, dword [rbp - 0x19]
mov ecx, eax
mov r15d, eax
mov qword [rbp + 0x67], rax
call fcn.1401432a0
mov rsi, rax
mov qword [rbp - 0x11], rax
test rax, rax
je 0x14014795c
test dword [rbx + 0x10], 0x80000
jne 0x140148d73
movzx ecx, word [rbp - 0x39]
mov word [rax], cx
test byte [rbx + 0x10], 0x80
je 0x140148cb6
mov rcx, rax
call fcn.14015b580
mov eax, dword [rbp - 0x39]
lea rdi, [rsi + 2]
test eax, eax
je 0x140148d47
lea rsi, [r13 + 8]
mov r14d, eax
mov r12d, 4
movzx eax, word [rsi - 8]
mov word [rdi], ax
test byte [rbx + 0x10], 0x80
je 0x140148ce7
mov rcx, rdi
call fcn.14015b580
movzx eax, word [rsi - 6]
mov word [rdi + 2], ax
test byte [rbx + 0x10], 0x80
je 0x140148cfe
lea rcx, [rdi + 2]
call fcn.14015b580
mov eax, dword [rsi]
lea rdx, [rbp + 0x67]
lea rcx, [rdi + 4]
mov r8, r12
mov dword [rbp + 0x67], eax
call fcn.1401432c0
test byte [rbx + 0x10], 0x80
je 0x140148d22
lea rcx, [rdi + 4]
call fcn.14015b520
lea rdx, [rsi + 8]
lea rcx, [rdi + 8]
mov r8, r12
call fcn.1401432c0
add rdi, 0xc
add rsi, 0x18
dec r14
jne 0x140148cd2
mov rsi, qword [rbp - 0x11]
lea r12d, [r14 + 1]
test byte [rbx + 0x10], 0x80
mov eax, dword [rbx + 0x20]
mov dword [rbp + 0x67], eax
je 0x140148d5c
lea rcx, [rbp + 0x67]
call fcn.14015b520
lea rdx, [rbp + 0x67]
mov r8d, 4
mov rcx, rdi
call fcn.1401432c0
jmp 0x140148e2f
mov r14d, dword [rbp - 0x39]
mov qword [rax], r14
test byte [rbx + 0x10], 0x80
je 0x140148d88
mov rcx, rax
call fcn.14015b540
cmp dword [rbp - 0x39], 0
lea rdi, [rsi + 8]
jbe 0x140148e0f
lea rsi, [r13 + 8]
mov r15d, 8
movzx eax, word [rsi - 8]
mov word [rdi], ax
test byte [rbx + 0x10], 0x80
je 0x140148db5
mov rcx, rdi
call fcn.14015b580
movzx eax, word [rsi - 6]
mov word [rdi + 2], ax
test byte [rbx + 0x10], 0x80
je 0x140148dcc
lea rcx, [rdi + 2]
call fcn.14015b580
lea rcx, [rdi + 4]
mov r8, r15
mov rdx, rsi
call fcn.1401432c0
test byte [rbx + 0x10], 0x80
je 0x140148dea
lea rcx, [rdi + 4]
call fcn.14015b540
lea rdx, [rsi + 8]
lea rcx, [rdi + 0xc]
mov r8, r15
call fcn.1401432c0
add rdi, 0x14
add rsi, 0x18
dec r14
jne 0x140148da0
mov r15, qword [rbp + 0x67]
mov rsi, qword [rbp - 0x11]
lea rdx, [rbx + 0x20]
mov r8d, 8
mov rcx, rdi
call fcn.1401432c0
test byte [rbx + 0x10], 0x80
je 0x140148e2f
mov rcx, rdi
call fcn.14015b540
mov rcx, r13
call fcn.14003a2e0
mov rdx, qword [rbx + 0x18]
mov rcx, rbx
call fcn.140145f40
test eax, eax
je 0x140147969
mov rcx, qword [rbx + 0x3b8]
mov r8, r15
mov rdx, rsi
call qword [rbx + 0x3c8]
cmp rax, r15
jne 0x140147969
mov rcx, rsi
call fcn.14003a2e0
cmp dword [rbp + 0x77], 0
je 0x140148e95
mov rcx, rbx
call fcn.1401438e0
and dword [rbx + 0x10], 0xffdffff7
mov rcx, rbx
call qword [rbx + 0x338]
mov rcx, rbx
call fcn.1401437a0
mov eax, r12d
jmp 0x140147978