Function at 0x140006661
Capabilities:
Create process on windows
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x838
movaps xmmword [rsp + 0x820], xmm6
lea rdx, str._n_n_n_n_n_n__________________M0l0d0st_vnutri_n
lea rcx, [rsp + 0x90]
mov r8d, 0x4ce
call fcn.1400020db
lea rdx, str.Telegram___https:__zelenka.guru_members_3060240__n
lea rsi, [rsp + 0x308]
mov r8d, 8
mov rcx, rsi
mov r9d, 4
call fcn.1400010cf
lea r15, [rsp + 0x200]
mov qword [r15], rsi
lea rcx, [0x140028358]
lea rax, [0x140093018]
lea rdi, [rsp + 0x400]
mov qword [rdi], rax
mov r14d, 2
mov qword [rdi + 8], r14
and qword [rdi + 0x20], 0
mov qword [r15 + 8], rcx
mov r13, rcx
mov qword [rdi + 0x10], r15
mov r12d, 1
mov qword [rdi + 0x18], r12
lea rbx, [rsp + 0x110]
mov rcx, rbx
mov rdx, rdi
call fcn.140001b21
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400275a6
movups xmm0, xmmword [rbx]
lea rcx, [rsp + 0x1b0]
movaps xmmword [rcx], xmm0
mov rax, qword [rbx + 0x10]
mov qword [rcx + 0x10], rax
lea rdx, str.___https:__zelenka.guru_threads_6638820__n
mov r8d, 0xa
mov rcx, rsi
call fcn.1400020db
lea rax, [0x140093070]
mov qword [rdi], rax
mov qword [rdi + 8], r14
and qword [rdi + 0x20], 0
mov qword [r15], rsi
mov qword [r15 + 8], r13
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r12
lea rbx, [rsp + 0x110]
lea rdi, [rsp + 0x400]
mov rcx, rbx
mov rdx, rdi
call fcn.140001b21
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400275a6
movups xmm0, xmmword [rbx]
lea rbp, [rsp + 0x2d0]
movaps xmmword [rbp], xmm0
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x10], rax
lea rdx, str._____https:__github.com_molodost_vnutri_ulp_normalize__n_n
mov r8d, 0x1a
mov rcx, rsi
call fcn.1400020db
lea rax, [0x1400930c8]
mov qword [rdi], rax
mov qword [rdi + 8], r14
and qword [rdi + 0x20], 0
mov qword [r15], rsi
mov qword [r15 + 8], r13
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r12
lea rbx, [rsp + 0x110]
lea rdi, [rsp + 0x400]
mov rcx, rbx
mov rdx, rdi
call fcn.140001b21
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400275a6
movups xmm0, xmmword [rbx]
lea r13, [rsp + 0x260]
movaps xmmword [r13], xmm0
mov rax, qword [rbx + 0x10]
mov qword [r13 + 0x10], rax
lea rdx, str.Githubcls_clog.txt__n
mov r8d, 6
mov rcx, rsi
mov r9d, 8
call fcn.1400010cf
lea rax, [0x140093140]
mov qword [rdi], rax
mov qword [rdi + 8], r14
and qword [rdi + 0x20], 0
mov qword [r15], rsi
lea rbx, [0x140028358]
mov qword [r15 + 8], rbx
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r12
lea rdi, [rsp + 0x110]
lea r12, [rsp + 0x400]
mov rcx, rdi
mov rdx, r12
call fcn.140001b21
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400275a6
movups xmm0, xmmword [rdi]
movaps xmmword [r15], xmm0
mov rax, qword [rdi + 0x10]
mov qword [r15 + 0x10], rax
lea rax, [rsp + 0x90]
mov qword [r12], rax
mov qword [r12 + 8], rbx
lea rdi, [rsp + 0x1b0]
mov qword [r12 + 0x10], rdi
lea rcx, [0x1400020be]
mov qword [r12 + 0x18], rcx
mov qword [r12 + 0x20], rbp
mov qword [r12 + 0x28], rcx
mov qword [r12 + 0x30], r13
mov qword [r12 + 0x38], rcx
lea rax, [0x140092ad0]
mov qword [rsi], rax
mov eax, 5
mov qword [rsi + 8], rax
and qword [rsi + 0x20], 0
mov qword [r12 + 0x40], r15
mov qword [r12 + 0x48], rcx
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], rax
lea rsi, [rsp + 0x110]
lea rbx, [rsp + 0x308]
mov rcx, rsi
mov rdx, rbx
call fcn.140001b21
mov rcx, qword [r15]
mov rdx, qword [r15 + 8]
call fcn.1400275a6
mov rcx, qword [r13]
mov rdx, qword [r13 + 8]
call fcn.1400275a6
mov rcx, qword [rbp]
mov rdx, qword [rbp + 8]
call fcn.1400275a6
mov rcx, qword [rdi]
mov rdx, qword [rdi + 8]
call fcn.1400275a6
lea rax, [rsp + 0x90]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.1400275a6
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x800], xmm0
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x810], rax
mov edi, 3
mov ecx, 3
call fcn.140032bdc
mov word [rdx], 0x6d63
mov byte [rdx + 2], 0x64
mov qword [rbx], rax
mov qword [rbx + 8], rdx
mov qword [rbx + 0x10], rdi
mov byte [rbx + 0x18], 0
lea rsi, [rsp + 0x328]
and qword [rsi], 0
mov qword [rsi + 8], 8
and qword [rsi + 0x10], 0
and qword [rsi + 0x68], 0
and qword [rsi + 0x78], 0
and word [rsi + 0x80], 0
lea rax, [rsp + 0x340]
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
and dword [rax + 0x88], 0
and word [rax + 0x8c], 0
lea rcx, [rsp + 0x360]
mov eax, 6
mov dword [rcx], eax
lea rcx, [rsp + 0x370]
mov dword [rcx], eax
lea rcx, [rsp + 0x380]
mov dword [rcx], eax
and qword [rcx + 0x30], 0
mov qword [rsp + 0x108], rcx
and qword [rcx + 0x40], 0
lea rax, [0x140093169]
mov qword [r12], rax
mov qword [r12 + 8], r14
lea rax, [0x140093166]
mov qword [r12 + 0x10], rax
mov qword [r12 + 0x18], rdi
mov qword [r12 + 0x28], r14
xor eax, eax
cmp r14, rax
je 0x140006b14
lea rcx, [rax + 1]
mov qword [rsp + 0x420], rcx
shl rax, 4
mov r15, qword [rsp + rax + 0x400]
mov rdi, qword [rsp + rax + 0x408]
mov rcx, rdi
call fcn.140032bdc
mov rbx, rax
mov r14, rdx
mov rcx, rdx
mov rdx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x338]
cmp rdx, qword [rsp + 0x328]
jne 0x140006ab5
mov rcx, rsi
call fcn.140072032
mov rdx, qword [rsp + 0x338]
mov rax, qword [rsp + 0x330]
imul rcx, rdx, 0x28
and qword [rax + rcx], 0
mov qword [rax + rcx + 8], rbx
mov qword [rax + rcx + 0x10], r14
mov qword [rax + rcx + 0x18], rdi
mov byte [rax + rcx + 0x20], 0
mov r8d, dword [rsp + 0x90]
mov r9d, dword [rsp + 0x93]
mov dword [rax + rcx + 0x21], r8d
mov dword [rax + rcx + 0x24], r9d
inc rdx
mov qword [rsp + 0x338], rdx
mov rax, qword [rsp + 0x420]
mov r14, qword [rsp + 0x428]
jmp 0x140006a4e
and dword [rsp + 0x2c0], 0
mov al, byte [rsp + 0x3a8]
test al, al
sete cl
mov r14, qword [rsp + 0x3a0]
test r14, r14
sete dl
and dl, cl
mov byte [rsp + 0x168], dl
je 0x140006b49
xor r14d, r14d
jmp 0x1400073c6
and qword [rsp + 0x178], 0
and qword [rsp + 0x188], 0
test al, al
jne 0x140006ccb
call qword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x140009697
lea r15, [rsp + 0x110]
lea r12, [rsp + 0x400]
lea rbp, [rsp + 0x178]
mov qword [rsp + 0x60], rax
mov r13, rax
mov rsi, r13
cmp word [r13], 0
je 0x140006cc0
mov rdi, 0xffffffffffffffff
mov rcx, 0xfffffffffffffffe
mov rax, rcx
cmp word [rsi + rdi*2 + 2], 0
lea rdi, [rdi + 1]
lea rcx, [rcx + 2]
jne 0x140006baf
test rdi, rdi
je 0x140009695
lea r13, [rsi + rdi*2]
add r13, 2
xor ebx, ebx
test rax, rax
je 0x140006b92
cmp word [rsi + rbx*2 + 2], 0x3d
je 0x140006beb
inc rbx
add rax, 0xfffffffffffffffe
jmp 0x140006bd5
cmp rbx, rdi
jae 0x140009695
lea r8, [rbx + 1]
mov rcx, r15
mov rdx, rsi
call fcn.140085828
add rbx, 2
sub rdi, rbx
jb 0x140009695
lea rdx, [rsi + rbx*2]
lea rcx, [rsp + 0x420]
mov r8, rdi
call fcn.140085828
movups xmm0, xmmword [rsp + 0x110]
movups xmm1, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x400], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm1
movaps xmm0, xmmword [rsp + 0x420]
movaps xmm1, xmmword [rsp + 0x430]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xc0], xmm1
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x90], rax
je 0x140006cc0
mov rcx, r12
lea rdx, [rsp + 0x90]
call fcn.14008cc17
mov rcx, r15
mov rdx, rbp
mov r8, r12
lea r9, [rsp + 0xb0]
call fcn.1400880c9
mov rcx, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x118]
call fcn.1400290c1
jmp 0x140006b92
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
lea r15, [rsp + 0x208]
and qword [r15], 0
and qword [r15 + 0x20], 0
mov rax, qword [rsp + 0x390]
mov rcx, qword [rsp + 0x398]
xor edx, edx
test rax, rax
setne dl
mov qword [r15 - 8], rdx
mov qword [r15 + 8], rax
mov qword [r15 + 0x10], rcx
mov qword [r15 + 0x18], rdx
mov qword [r15 + 0x28], rax
mov qword [r15 + 0x30], rcx
cmove r14, rax
lea r13, [rsp + 0x90]
lea r12, [rsp + 0x400]
test r14, r14
je 0x1400072c1
dec r14
mov qword [rsp + 0x240], r14
cmp qword [rsp + 0x200], 0
je 0x140009695
mov rsi, qword [rsp + 0x208]
test rsi, rsi
jne 0x140006d7c
mov rdx, qword [rsp + 0x210]
mov r8, qword [rsp + 0x218]
mov rcx, r15
call fcn.1400880af
mov qword [rsp + 0x200], 1
mov rsi, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
mov rbx, qword [rsp + 0x218]
movzx eax, word [rsi + 0x3d2]
cmp rbx, rax
jb 0x140006db7
mov rax, qword [rsi + 0x160]
test rax, rax
je 0x140009695
inc r8
movzx ebx, word [rsi + 0x3d0]
mov rsi, rax
jmp 0x140006d8c
test r8, r8
je 0x140006dd1
mov rdx, qword [rsi + rbx*8 + 0x3e0]
dec r8
mov rcx, r12
call fcn.1400880af
jmp 0x140006dee
lea rax, [rbx + 1]
mov qword [rsp + 0x400], rsi
and qword [rsp + 0x408], 0
mov qword [rsp + 0x410], rax
imul rax, rbx, 0x38
lea rdi, [rsi + rax]
add rdi, 0x168
shl rbx, 5
mov rax, qword [rsp + 0x410]
mov qword [r15 + 0x10], rax
mov rax, qword [rsp + 0x400]
mov qword [r15], rax
mov rax, qword [rsp + 0x408]
mov qword [r15 + 8], rax
movabs rax, 0x8000000000000000
cmp qword [rsi + rbx], rax
jne 0x140006edc
mov rdx, qword [rsp + 0x178]
test rdx, rdx
je 0x140006f82
mov r8, qword [rsp + 0x180]
mov r9, qword [rdi + 0x28]
mov rax, qword [rdi + 0x30]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x1e0]
call fcn.1400879b4
cmp qword [rsp + 0x1e0], 0
movabs rsi, 0x8000000000000000
jne 0x1400072a7
mov rcx, qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1f8]
mov byte [rsp + 0x3d0], 0
test rax, rax
je 0x140007064
lea rcx, [rcx + rdx*8]
add rcx, 0x3d8
dec rax
mov rcx, qword [rcx]
movzx edx, word [rcx + 0x3d2]
sub rax, 1
jb 0x140006f91
lea rcx, [rcx + rdx*8]
add rcx, 0x3d8
jmp 0x140006ebb
add rsi, rbx
mov rcx, r13
mov rdx, rdi
call fcn.140072438
mov r14, qword [rdi + 0x28]
mov rdi, qword [rdi + 0x30]
mov rcx, rdi
call fcn.140084c55
mov rbx, rax
mov rbp, rdx
lea r8, [rdi + rdi]
mov rcx, rdx
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x400], xmm0
movaps xmmword [rsp + 0x410], xmm1
mov qword [rsp + 0x420], rbx
mov qword [rsp + 0x428], rbp
mov qword [rsp + 0x430], rdi
mov rcx, r13
mov rdx, rsi
call fcn.140072438
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x178]
mov r8, r12
mov r9, r13
call fcn.1400880c9
mov rcx, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x118]
jmp 0x1400072af
movabs rsi, 0x8000000000000000
jmp 0x1400072a7
dec rdx
mov qword [rsp + 0x3e8], rcx
and qword [rsp + 0x3f0], 0
mov qword [rsp + 0x3f8], rdx
mov rcx, r12
lea rdx, [rsp + 0x3e8]
lea r8, [rsp + 0x3d0]
call fcn.140087a6a
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x290], rax
movups xmm0, xmmword [rsp + 0x400]
movups xmm1, xmmword [rsp + 0x410]
movups xmm2, xmmword [rsp + 0x420]
movaps xmmword [rsp + 0x280], xmm2
movaps xmmword [rsp + 0x270], xmm1
movaps xmmword [rsp + 0x260], xmm0
lea rax, [rsp + 0x438]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1c0], xmm1
mov rax, qword [rsp + 0x458]
mov rdx, qword [rsp + 0x460]
mov r8, qword [rsp + 0x468]
movzx ecx, word [rax + 0x3d2]
cmp r8, rcx
jb 0x140007095
mov rcx, qword [rax + 0x160]
test rcx, rcx
je 0x14000709d
inc rdx
movzx r8d, word [rax + 0x3d0]
mov rax, rcx
jmp 0x14000703c
mov qword [rsp + 0x400], rcx
and qword [rsp + 0x408], 0
mov qword [rsp + 0x410], rdx
mov rcx, r13
mov rdx, r12
lea r8, [rsp + 0x3d0]
call fcn.140087a6a
jmp 0x1400071bc
mov rcx, rdx
mov rdx, r8
jmp 0x1400070a2
mov rcx, rax
xor eax, eax
imul r8, rdx, 0x38
mov r9, rdx
shl r9, 5
mov r10, qword [rax + r8 + 0x198]
mov qword [rsp + 0x140], r10
movups xmm0, xmmword [rax + r8 + 0x168]
movups xmm1, xmmword [rax + r8 + 0x178]
movups xmm2, xmmword [rax + r8 + 0x188]
movaps xmmword [rsp + 0x130], xmm2
movaps xmmword [rsp + 0x120], xmm1
movaps xmmword [rsp + 0x110], xmm0
mov r10, qword [rsp + 0x290]
mov qword [rax + r8 + 0x198], r10
movaps xmm0, xmmword [rsp + 0x260]
movaps xmm1, xmmword [rsp + 0x270]
movaps xmm2, xmmword [rsp + 0x280]
movups xmmword [rax + r8 + 0x188], xmm2
movups xmmword [rax + r8 + 0x178], xmm1
movups xmmword [rax + r8 + 0x168], xmm0
movups xmm0, xmmword [rax + r9]
movups xmm1, xmmword [rax + r9 + 0x10]
lea r8, [rsp + 0x148]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
movaps xmm0, xmmword [rsp + 0x1b0]
movaps xmm1, xmmword [rsp + 0x1c0]
movups xmmword [rax + r9], xmm0
movups xmmword [rax + r9 + 0x10], xmm1
test rcx, rcx
je 0x14000718d
lea rdx, [rax + rdx*8]
add rdx, 0x3e0
mov rax, qword [rdx]
lea rdx, [rax + 0x3d8]
dec rcx
jne 0x14000717a
xor edx, edx
jmp 0x140007190
inc rdx
mov ecx, 0xb
mov rdi, r13
lea rsi, [rsp + 0x110]
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0xe8], rax
and qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], rdx
mov rbx, qword [rsp + 0x90]
mov ecx, 0xa
mov rdi, r12
lea rsi, [rsp + 0x98]
rep movsq qword [rdi], qword [rsi]
dec qword [rsp + 0x188]
cmp byte [rsp + 0x3d0], 0
je 0x140007237
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x140009695
mov rax, qword [rsp + 0x180]
test rax, rax
je 0x140009695
mov rdx, qword [rcx + 0x3d8]
mov qword [rsp + 0x178], rdx
dec rax
mov qword [rsp + 0x180], rax
and qword [rdx + 0x160], 0
mov edx, 8
call fcn.14000af00
mov ecx, 0xa
mov rdi, r13
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
mov ecx, 0xa
lea rdi, [rsp + 0x110]
mov rsi, r13
rep movsq qword [rdi], qword [rsi]
movabs rax, 0x8000000000000000
mov rsi, rax
cmp rbx, rax
je 0x1400072a7
mov qword [rsp + 0x400], rbx
mov ecx, 0xa
lea rdi, [rsp + 0x408]
lea rsi, [rsp + 0x110]
rep movsq qword [rdi], qword [rsi]
mov rsi, qword [rsp + 0x438]
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x60], rax
mov rcx, r12
call fcn.140086d7d
mov rcx, rsi
mov rdx, qword [rsp + 0x60]
call fcn.1400290c1
mov r14, qword [rsp + 0x240]
jmp 0x140006d20
mov rbx, qword [rsp + 0x178]
mov r15, qword [rsp + 0x180]
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x88], rax
mov ecx, 4
call fcn.140032bdc
mov dword [rdx], 0x48544150
lea r8, [rsp + 0x90]
mov qword [r8], rax
mov qword [r8 + 8], rdx
mov qword [r8 + 0x10], 4
mov byte [r8 + 0x18], 0
lea rcx, [rsp + 0x400]
mov rdx, r8
call fcn.14008cc17
test rbx, rbx
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x78], r15
je 0x1400073b6
mov rsi, qword [rsp + 0x428]
mov rdi, qword [rsp + 0x430]
lea rcx, [rbx + 0x168]
movzx r13d, word [rbx + 0x3d2]
imul rbp, r13, 0x38
mov r12, 0xffffffffffffffff
test rbp, rbp
je 0x140007390
lea r14, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9, qword [rcx + 0x30]
mov rcx, rsi
mov rdx, rdi
call fcn.140088088
add rbp, 0xffffffffffffffc8
inc r12
mov rcx, r14
cmp al, 1
je 0x14000735d
movzx eax, al
test eax, eax
jne 0x140007393
jmp 0x1400073a6
mov r12, r13
xor r14d, r14d
sub r15, 1
jb 0x1400073b9
mov rbx, qword [rbx + r12*8 + 0x3d8]
jmp 0x140007343
shl r12, 5
mov r14, qword [rbx + r12 + 8]
mov r15, qword [rbx + r12 + 0x10]
jmp 0x1400073b9
xor r14d, r14d
lea rcx, [rsp + 0x400]
call fcn.140086d7d
mov rbx, qword [rsp + 0x310]
mov rdi, qword [rsp + 0x318]
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rdi
test rdi, rdi
je 0x140009571
lea r8, str.__UNC._
mov r9d, 4
mov rcx, rbx
mov rdx, rdi
call fcn.14008496a
lea rcx, [0x14008cc72]
lea rdx, [0x14008cc79]
test al, al
cmovne rdx, rcx
mov cl, byte [rdi + rbx - 1]
call rdx
test al, al
jne 0x140009571
cmp rdi, 3
ja 0x140007447
mov rcx, rbx
mov rdx, rdi
call fcn.14008cc88
test al, al
jne 0x1400074e7
jmp 0x140007624
lea r8, [rbx + rdi]
lea rdx, [rbx + rdi]
add rdx, 0xfffffffffffffffc
lea rax, [0x1400f2424]
mov qword [rsp + 0x20], rax
lea r9, str..exeexe.NULcmd.exeWindows_stdio_in_console_mode_does_not_support_writing_non_UTF_8_byte_sequences
lea rsi, [rsp + 0x400]
mov rcx, rsi
call fcn.14008541a
mov r12, qword [rsi + 0x28]
mov rdx, qword [rsi + 0x20]
mov rax, qword [rsi]
mov rcx, qword [rsi + 0x10]
mov rsi, rdx
cmp rdx, r12
jae 0x1400074c4
lea rdx, [rsi + 1]
mov r8b, byte [rax + rsi]
lea r9d, [r8 - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
or r9b, r8b
mov r8b, byte [rcx + rsi]
lea r10d, [r8 - 0x41]
cmp r10b, 0x1a
setb r10b
shl r10b, 5
or r10b, r8b
cmp r9b, r10b
je 0x140007485
mov rbx, qword [rsp + 0x1d0]
mov rdi, qword [rsp + 0x1d8]
mov rcx, rbx
mov rdx, rdi
call fcn.14008cc88
test al, al
je 0x14000761b
lea rax, [rbx + rdi]
lea rsi, [rsp + 0x400]
mov qword [rsi], rbx
mov qword [rsi + 8], rax
and word [rsi + 0x10], 0
mov rcx, rsi
call fcn.140084dce
cmp ax, 1
jne 0x140007512
test dx, dx
jne 0x1400074ff
cmp ax, 1
movabs rsi, 0x8000000000000000
je 0x140009571
mov rcx, rbx
mov rdx, rdi
mov r8b, 0x2e
call fcn.14008d218
mov byte [rsp + 0x5f], al
test r14, r14
je 0x140007760
add r15, r14
lea rbx, [rsp + 0x110]
mov qword [rbx], r14
mov qword [rbx + 8], r15
and word [rbx + 0x10], 0
mov byte [rbx + 0x18], 1
lea r12, [rsp + 0x400]
lea rbp, [rsp + 0x1d0]
lea r14, [rsp + 0x5f]
lea r13, [rsp + 0x90]
mov rcx, r12
mov rdx, rbx
call fcn.14008a487
mov rcx, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x408]
cmp rcx, rsi
je 0x140007758
mov rax, qword [rsp + 0x410]
test rax, rax
je 0x140007611
mov r8, qword [rsp + 0x418]
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], r8
mov qword [rsp + 0x90], rcx
lea rcx, [rsp + 0x178]
mov rdx, rbp
mov r8, r14
mov r9, r13
call fcn.14008d238
mov rdi, qword [rsp + 0x178]
mov r15, qword [rsp + 0x180]
cmp rdi, rsi
jne 0x140007c52
mov rcx, rsi
mov rdx, r15
call fcn.14008d299
jmp 0x140007579
call fcn.1400275a6
jmp 0x140007579
cmp rsi, r12
jae 0x140007c3a
mov rcx, rdi
call fcn.140032bdc
mov rsi, rax
mov r14, rdx
mov rcx, rdx
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0xa8], 0
mov rax, qword [rsp + 0xa0]
mov cl, byte [rsp + 0xa8]
mov edx, dword [rsp + 0xa9]
movzx r8d, word [rsp + 0xad]
mov r9b, byte [rsp + 0xaf]
lea rsi, [rsp + 0x400]
mov qword [rsi + 0x10], rax
mov byte [rsi + 0x18], cl
mov dword [rsi + 0x19], edx
mov word [rsi + 0x1d], r8w
mov byte [rsi + 0x1f], r9b
mov rax, qword [rsp + 0x90]
mov qword [rsi], rax
mov rax, qword [rsp + 0x98]
mov qword [rsi + 8], rax
lea rdx, str..exeexe.NULcmd.exeWindows_stdio_in_console_mode_does_not_support_writing_non_UTF_8_byte_sequences
mov r8d, 4
mov rcx, rsi
call fcn.14008a54d
movaps xmm0, xmmword [rsi]
movaps xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
mov rsi, qword [rsp + 0x98]
mov r8, qword [rsp + 0xa0]
lea rdi, [rsp + 0x3d0]
mov rcx, rdi
mov rdx, rsi
call fcn.14008ccaf
movabs rax, 0x8000000000000000
cmp qword [rdi], rax
jne 0x1400078f7
lea rdx, [0x1400f1870]
lea rsi, [rsp + 0x90]
mov rcx, rsi
xor r8d, r8d
call fcn.14008c9a2
mov rdi, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
lea rcx, [rsp + 0x2a0]
mov rdx, rdi
call fcn.14008cd39
mov rcx, qword [rsi]
mov rdx, rdi
jmp 0x140007922
mov rcx, rsi
call fcn.1400290c1
lea rax, [rsp + 0x110]
and qword [rax], 0
mov qword [rax + 8], 2
and qword [rax + 0x10], 0
mov r8d, 0x200
mov edi, 2
xor ebx, ebx
mov r14d, 0xffffffff
xor esi, esi
cmp r8, 0x201
jae 0x1400077aa
lea r12, [rsp + 0x400]
mov r15d, 0x200
mov r13, r8
jmp 0x1400077ea
sub r8, rsi
lea rcx, [rsp + 0x110]
mov rdx, r8
call fcn.14008601c
mov rbx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x118]
cmp rbx, r14
mov esi, 0xffffffff
cmovb rsi, rbx
mov qword [rsp + 0x120], rsi
mov r12, rdi
mov r15, rsi
mov r13, rsi
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
xor ecx, ecx
mov rdx, r12
mov r8d, r13d
call qword [sym.imp.kernel32.dll_GetModuleFileNameW]
mov ebp, eax
test eax, eax
jne 0x140007814
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x14000792c
mov r8d, ebp
cmp r13, r8
jne 0x14000783d
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140009695
add r13, r13
cmp r13, r14
cmovae r13, r14
mov r8, r13
jmp 0x14000778e
jb 0x14000778e
cmp r15, r8
jb 0x140009695
lea r13, [rsp + 0x90]
mov rcx, r13
mov rdx, r12
call fcn.1400860f6
mov r12, qword [r13]
mov rsi, qword [r13 + 8]
mov r15, qword [r13 + 0x10]
mov r14, qword [r13 + 0x18]
mov rcx, rbx
mov rdx, rdi
call fcn.1400860da
movabs rbx, 0x8000000000000000
cmp r12, rbx
je 0x140007949
mov rcx, rsi
mov rdx, r15
call fcn.14008ba04
cmp r15, rdx
cmovb rdx, r15
test rax, rax
cmove rdx, r15
lea r9, [rsp + 0x400]
mov qword [r9], r12
mov qword [r9 + 8], rsi
mov qword [r9 + 0x10], rdx
mov qword [r9 + 0x18], r14
lea rsi, [rsp + 0x3e8]
lea rdx, [rsp + 0x1d0]
lea r8, [rsp + 0x5f]
mov rcx, rsi
call fcn.14008d238
mov rdi, qword [rsi]
mov r15, qword [rsi + 8]
cmp rdi, rbx
jne 0x140007e03
mov rcx, rbx
mov rdx, r15
call fcn.14008d299
jmp 0x140007954
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x2b0], rax
movups xmm0, xmmword [rsp + 0x3d0]
movaps xmmword [rsp + 0x2a0], xmm0
mov rcx, qword [rsp + 0x90]
mov rdx, rsi
call fcn.1400275a6
jmp 0x140007e23
call fcn.1400860c3
mov rsi, rax
mov rcx, rbx
mov rdx, rdi
call fcn.1400860da
movabs r12, 0x8000000000000000
mov rcx, r12
mov rdx, rsi
call fcn.14008580c
lea rax, [rsp + 0x110]
and qword [rax], 0
mov qword [rax + 8], 2
and qword [rax + 0x10], 0
mov r8d, 0x200
mov esi, 2
xor edi, edi
mov r13d, 0xffffffff
xor ebx, ebx
cmp r8, 0x201
jae 0x14000799e
lea r15, [rsp + 0x400]
mov r14d, 0x200
mov r12, r8
jmp 0x1400079de
sub r8, rbx
lea rcx, [rsp + 0x110]
mov rdx, r8
call fcn.14008601c
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
cmp rdi, r13
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rsp + 0x120], rbx
mov r15, rsi
mov r14, rbx
mov r12, rbx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r15
mov edx, r12d
call qword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov ebp, eax
test eax, eax
jne 0x140007a06
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x140007aa7
mov r8d, ebp
cmp r12, r8
jne 0x140007a2f
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140009695
add r12, r12
cmp r12, r13
cmovae r12, r13
mov r8, r12
jmp 0x140007982
jb 0x140007982
cmp r14, r8
jb 0x140009695
lea rbx, [rsp + 0x90]
mov rcx, rbx
mov rdx, r15
call fcn.140085828
lea r15, [rsp + 0x1e0]
lea rdx, [rsp + 0x1d0]
lea r8, [rsp + 0x5f]
mov rcx, r15
mov r9, rbx
call fcn.14008d238
mov rcx, rdi
mov rdx, rsi
call fcn.1400860da
mov rdi, qword [r15]
movabs rax, 0x8000000000000000
add rax, 2
cmp rdi, rax
jl 0x140007adc
mov r15, qword [rsp + 0x1e8]
mov rsi, qword [rsp + 0x1f0]
jmp 0x140007e0b
call fcn.1400860c3
mov qword [rsp + 0x1e8], rax
movabs rax, 0x8000000000000000
inc rax
mov qword [rsp + 0x1e0], rax
mov rcx, rdi
mov rdx, rsi
call fcn.1400860da
mov rdi, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, rdi
call fcn.14008d2ad
lea rax, [rsp + 0x110]
and qword [rax], 0
mov qword [rax + 8], 2
and qword [rax + 0x10], 0
mov r8d, 0x200
mov esi, 2
xor edi, edi
mov r13d, 0xffffffff
xor ebx, ebx
cmp r8, 0x201
jae 0x140007b36
lea r15, [rsp + 0x400]
mov r14d, 0x200
mov r12, r8
jmp 0x140007b76
sub r8, rbx
lea rcx, [rsp + 0x110]
mov rdx, r8
call fcn.14008601c
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
cmp rdi, r13
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rsp + 0x120], rbx
mov r15, rsi
mov r14, rbx
mov r12, rbx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r15
mov edx, r12d
call qword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
mov ebp, eax
test eax, eax
jne 0x140007b9e
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x140007c5f
mov r8d, ebp
cmp r12, r8
jne 0x140007bc7
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140009695
add r12, r12
cmp r12, r13
cmovae r12, r13
mov r8, r12
jmp 0x140007b1a
jb 0x140007b1a
cmp r14, r8
jb 0x140009695
lea rbx, [rsp + 0x90]
mov rcx, rbx
mov rdx, r15
call fcn.140085828
lea r14, [rsp + 0x1b0]
lea rdx, [rsp + 0x1d0]
lea r8, [rsp + 0x5f]
mov rcx, r14
mov r9, rbx
call fcn.14008d238
mov rcx, rdi
mov rdx, rsi
call fcn.1400860da
mov rdi, qword [r14]
movabs rax, 0x8000000000000000
add rax, 2
cmp rdi, rax
jge 0x140007df1
movabs rbx, 0x8000000000000000
jmp 0x140007c95
lea rcx, [rsp + 0x2a0]
mov rdx, rbx
mov r8, rdi
call fcn.14008cd39
jmp 0x140007e23
mov rsi, qword [rsp + 0x188]
jmp 0x140007e0b
call fcn.1400860c3
mov qword [rsp + 0x1b8], rax
movabs rbx, 0x8000000000000000
lea rax, [rbx + 1]
mov qword [rsp + 0x1b0], rax
mov rcx, rdi
mov rdx, rsi
call fcn.1400860da
mov rdi, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b8]
mov rcx, rdi
call fcn.14008d2ad
lea rdx, [0x1400f2141]
lea rsi, [rsp + 0x200]
mov r8d, 4
mov rcx, rsi
call fcn.14008a1c4
mov rax, qword [rsi]
mov qword [rsp + 0x60], rax
cmp rax, rbx
je 0x140009562
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
add rax, rcx
lea r12, [rsp + 0x110]
mov qword [rsp + 0x68], rcx
mov qword [r12], rcx
mov qword [r12 + 8], rax
and word [r12 + 0x10], 0
mov byte [r12 + 0x18], 1
lea r13, [rsp + 0x400]
lea r14, [rsp + 0x1d0]
lea rsi, [rsp + 0x5f]
lea rbx, [rsp + 0x90]
movabs rbp, 0x8000000000000000
mov rcx, r13
mov rdx, r12
call fcn.14008a487
mov rcx, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x408]
cmp rcx, rbp
je 0x140009544
mov rax, qword [rsp + 0x410]
test rax, rax
je 0x140007dce
mov r8, qword [rsp + 0x418]
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], r8
mov qword [rsp + 0x90], rcx
lea rcx, [rsp + 0x260]
mov rdx, r14
mov r8, rsi
mov r9, rbx
call fcn.14008d238
mov rdi, qword [rsp + 0x260]
mov r15, qword [rsp + 0x268]
movabs rbp, 0x8000000000000000
cmp rdi, rbp
jne 0x140007dd8
mov rcx, rbp
mov rdx, r15
call fcn.14008d299
jmp 0x140007d30
call fcn.1400275a6
jmp 0x140007d26
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
call fcn.1400275a6
jmp 0x140007e0b
mov r15, qword [rsp + 0x1b8]
mov rsi, qword [rsp + 0x1c0]
jmp 0x140007e0b
mov rsi, qword [rsp + 0x3f8]
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov rcx, qword [rsp + 0x2a0]
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a8], rcx
cmp rcx, rax
je 0x140009571
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x68], rax
mov r8, qword [rsp + 0x2b0]
cmp r8, 5
jb 0x140007e8d
mov rax, qword [rsp + 0x68]
lea rax, [rax + r8*2]
add rax, 0xfffffffffffffff6
test rax, rax
je 0x140007e8d
cmp word [rax], 0x2e
jne 0x140007e8d
mov rax, qword [rsp + 0x68]
lea rax, [rax + r8*2]
cmp word [rax - 2], 0
je 0x140008e34
mov r15, qword [rsp + 0x310]
mov rdi, qword [rsp + 0x330]
mov bl, byte [rsp + 0x3cd]
mov r12, qword [rsp + 0x318]
add r12, r15
imul r14, qword [rsp + 0x338], 0x28
lea rsi, [rsp + 0x90]
and qword [rsi], 0
mov qword [rsi + 8], 2
and qword [rsi + 0x10], 0
mov rcx, rsi
mov dx, 0x22
call fcn.1400899c8
lea rdx, [rsp + 0x400]
mov qword [rdx], r15
mov qword [rdx + 8], r12
and word [rdx + 0x10], 0
mov rcx, rsi
call fcn.1400898f2
mov rcx, rsi
mov dx, 0x22
call fcn.1400899c8
test r14, r14
je 0x140007f60
lea r15, [rdi + 0x28]
mov rcx, rsi
mov dx, 0x20
call fcn.1400899c8
mov rcx, rsi
mov rdx, rdi
mov r8d, ebx
call fcn.14008d2c9
add r14, 0xffffffffffffffd8
mov rdi, r15
test rax, rax
je 0x140007f05
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
call fcn.1400860da
mov rcx, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x68]
call fcn.1400860da
jmp 0x140009571
mov rax, qword [rsp + 0x90]
movabs rsi, 0x8000000000000000
cmp rax, rsi
je 0x140007f49
mov rdx, qword [rsp + 0x98]
mov r8, qword [rsp + 0xa0]
mov cl, 1
mov dword [rsp + 0x74], ecx
mov dword [rsp + 0x194], 0
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x170], rcx
mov rcx, qword [rsp + 0x1a8]
mov qword [rsp + 0x1a0], rcx
mov rdi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
lea rcx, [rsp + 0x1b0]
mov qword [rcx], rax
mov qword [rcx + 8], rdx
mov qword [rcx + 0x10], r8
xor r12d, r12d
xor edx, edx
call fcn.1400899c8
cmp byte [rsp + 0x3cc], 0
mov eax, 0x400
mov ebp, 0x608
cmove ebp, eax
or ebp, dword [rsp + 0x3c8]
mov eax, 2
mov qword [rsp + 0x80], rax
mov r14d, 2
mov r15d, 0
cmp byte [rsp + 0x168], 0
mov dword [rsp + 0x78], ebp
jne 0x140008297
and qword [rsp + 0x260], 0
mov qword [rsp + 0x268], 2
and qword [rsp + 0x270], 0
mov rcx, qword [rsp + 0x88]
test rcx, rcx
jne 0x140008068
lea rcx, [rsp + 0x260]
xor edx, edx
call fcn.1400899c8
mov rcx, qword [rsp + 0x88]
xor eax, eax
test rdi, rdi
setne al
cmove rcx, rdi
lea rdx, [rsp + 0x400]
mov qword [rdx], rax
and qword [rdx + 8], 0
mov qword [rdx + 0x10], rdi
mov qword [rdx + 0x18], rbx
mov qword [rdx + 0x20], rax
and qword [rdx + 0x28], 0
mov qword [rdx + 0x30], rdi
mov qword [rdx + 0x38], rbx
mov qword [rdx + 0x40], rcx
lea r12, [rsp + 0x98]
lea r15, [rsp + 0x90]
lea rbx, [rsp + 0x110]
lea rdi, [rsp + 0x260]
mov rcx, r15
lea rdx, [rsp + 0x400]
call fcn.14008544c
mov rax, qword [rsp + 0x90]
test rax, rax
je 0x140008254
mov rdx, qword [rsp + 0xa0]
imul r8, rdx, 0x38
mov rcx, qword [rax + r8 + 0x168]
cmp rcx, rsi
je 0x140008254
add r8, rax
add r8, 0x168
shl rdx, 5
lea r9, [rax + rdx]
mov r14, qword [r8 + 0x20]
mov r13, qword [r8 + 0x28]
mov rsi, qword [r8 + 0x30]
mov rbp, qword [rax + rdx]
mov rax, qword [rax + rdx + 8]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [r9 + 0x10]
movaps xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x90], rcx
mov rax, qword [r8 + 0x18]
mov qword [r12 + 0x10], rax
movups xmm0, xmmword [r8 + 8]
movups xmmword [r12], xmm0
mov rcx, rbx
mov rdx, r15
call fcn.14008d42c
mov rcx, qword [rsp + 0x110]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x140009601
mov rdx, qword [rsp + 0x118]
call fcn.1400275a6
mov rcx, rdi
mov rdx, r13
mov r8, rsi
call fcn.140085653
mov rcx, r14
mov rdx, r13
call fcn.1400860da
mov rcx, rdi
mov dx, 0x3d
call fcn.1400899c8
mov qword [rsp + 0x90], rbp
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x98], rax
movaps xmm0, xmmword [rsp + 0x1e0]
movups xmmword [r12 + 8], xmm0
mov rcx, rbx
mov rdx, r15
call fcn.14008d42c
mov rsi, qword [rsp + 0x110]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x140009619
mov r14, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
add rax, r14
mov qword [rsp + 0x200], r14
mov qword [rsp + 0x208], rax
and word [rsp + 0x210], 0
mov rcx, rdi
lea rdx, [rsp + 0x200]
call fcn.1400898f2
mov rcx, rsi
mov rdx, r14
call fcn.1400275a6
mov rcx, rdi
xor edx, edx
call fcn.1400899c8
movabs rsi, 0x8000000000000000
jmp 0x1400080c1
lea rcx, [rsp + 0x400]
call fcn.14008905a
lea rsi, [rsp + 0x260]
mov rcx, rsi
xor edx, edx
call fcn.1400899c8
mov r15, qword [rsi]
movabs rax, 0x8000000000000000
cmp r15, rax
je 0x14000963b
mov rsi, rax
mov r14, qword [rsp + 0x268]
mov r12, r14
xor ebx, ebx
mov ecx, 0
cmp qword [rsp + 0x340], rsi
je 0x14000831d
lea rcx, [rsp + 0x340]
call fcn.14008d4b5
test rax, rax
jne 0x140009539
mov rax, qword [rdx + 8]
mov rcx, qword [rdx + 0x10]
add rcx, rax
lea rdx, [rsp + 0x400]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
and word [rdx + 0x10], 0
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14008d50e
mov rcx, rsi
xor edx, edx
call fcn.1400899c8
mov rcx, qword [rsi]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x140009539
mov rbx, qword [rsp + 0x98]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x60], rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x260], xmm0
and qword [rsp + 0x270], 0
lea rcx, [0x1400f71a0]
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
lea r8, [rsp + 0x2d0]
and qword [r8], 0
and qword [r8 + 0x10], 0
and qword [r8 + 0x20], 0
cmp dword [rsp + 0x360], 6
mov edi, dword [rsp + 0x370]
lea rsi, [rsp + 0x2c0]
lea rcx, [rsp + 0x360]
cmove rcx, rsi
cmp dword [rsp + 0x380], 6
mov rax, qword [rsp + 0x108]
cmove rax, rsi
mov qword [rsp + 0x108], rax
mov edx, 0xfffffff6
call fcn.14008d5cf
test rax, rax
jne 0x1400094d1
mov r13, rdx
lea r8, [rsp + 0x2e0]
cmp edi, 6
lea rcx, [rsp + 0x370]
cmove rcx, rsi
mov edx, 0xfffffff5
call fcn.14008d5cf
test rax, rax
jne 0x1400094c8
mov rsi, rdx
lea r8, [rsp + 0x2f0]
mov rcx, qword [rsp + 0x108]
mov edx, 0xfffffff4
call fcn.14008d5cf
test rax, rax
jne 0x1400094bf
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x108], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0xc4], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xe8], xmm0
test rdx, rdx
lea r8, [rsp + 0x90]
jne 0x140008458
test rsi, rsi
jne 0x140008458
test r13, r13
je 0x14000847b
mov dword [rsp + 0xcc], 0x100
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], rdx
mov r15, qword [rsp + 0x3c0]
test r15, r15
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x258], rbx
mov qword [rsp + 0x2b8], rdx
je 0x14000850a
and qword [rsp + 0x1e0], 0
mov dword [rsp + 0x90], 0x70
mov rax, r15
shr rax, 0x20
jne 0x140009491
lea rsi, [rsp + 0x1e0]
xor ecx, ecx
mov edx, r15d
xor r8d, r8d
mov r9, rsi
call qword [sym.imp.kernel32.dll_InitializeProcThreadAttributeList]
mov rsi, qword [rsi]
test rsi, rsi
je 0x14000851f
js 0x140009695
mov ecx, 1
mov rdx, rsi
call fcn.140084d71
mov rbx, rax
test rax, rax
jne 0x140008524
jmp 0x140009695
mov dword [rsp + 0x90], 0x68
mov r9d, dword [rsp + 0x78]
jmp 0x140008737
mov ebx, 1
mov qword [rsp + 0x250], r12
cmp rsi, 1
mov rbp, rsi
adc rbp, 0
test rsi, rsi
cmove rbp, rsi
lea r9, [rsp + 0x1e0]
mov rcx, rbx
mov edx, r15d
xor r8d, r8d
call qword [sym.imp.kernel32.dll_InitializeProcThreadAttributeList]
test eax, eax
je 0x140009481
mov rax, qword [rsp + 0x3b0]
xor ecx, ecx
test rax, rax
setne cl
mov rdx, r15
cmove rdx, rax
lea rsi, [rsp + 0x118]
mov qword [rsi - 8], rcx
and qword [rsi], 0
mov r8, qword [rsp + 0x3b8]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], r8
mov qword [rsi + 0x18], rcx
and qword [rsi + 0x20], 0
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], r8
mov qword [rsi + 0x38], rdx
xorps xmm6, xmm6
mov r13, qword [sym.imp.kernel32.dll_UpdateProcThreadAttribute]
lea rdi, [rsp + 0x200]
mov rax, r15
test rax, rax
je 0x140008704
dec rax
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x150]
test rax, rax
je 0x140008704
dec rax
mov qword [rsp + 0x150], rax
cmp qword [rsp + 0x110], 0
je 0x140009695
mov r14, qword [rsp + 0x118]
test r14, r14
jne 0x140008636
mov rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x128]
mov rcx, rsi
call fcn.140084b67
mov qword [rsp + 0x110], 1
mov r14, qword [rsp + 0x118]
mov r8, qword [rsp + 0x120]
mov r12, qword [rsp + 0x128]
movzx eax, word [r14 + 0x16a]
cmp r12, rax
jb 0x14000866f
mov rax, qword [r14]
test rax, rax
je 0x140009695
inc r8
movzx r12d, word [r14 + 0x168]
mov r14, rax
jmp 0x140008646
test r8, r8
je 0x140008689
mov rdx, qword [r14 + r12*8 + 0x178]
dec r8
mov rcx, rdi
call fcn.140084b67
jmp 0x1400086a7
lea rax, [r12 + 1]
mov qword [rsp + 0x200], r14
and qword [rsp + 0x208], 0
mov qword [rsp + 0x210], rax
imul rax, r12, 0x18
mov rcx, qword [rsp + 0x210]
mov qword [rsi + 0x10], rcx
mov rcx, qword [rsp + 0x200]
mov qword [rsi], rcx
mov rcx, qword [rsp + 0x208]
mov qword [rsi + 8], rcx
mov r8, qword [r14 + r12*8 + 8]
mov r9, qword [r14 + rax + 0x60]
mov rax, qword [r14 + rax + 0x70]
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, rbx
xor edx, edx
call r13
test eax, eax
je 0x140009481
mov rax, qword [rsp + 0x158]
jmp 0x1400085be
mov r9d, dword [rsp + 0x78]
or r9d, 0x80000
lea r8, [rsp + 0x400]
lea rsi, [rsp + 0x90]
mov ecx, 0xd
mov rdi, r8
rep movsq qword [rdi], qword [rsi]
mov qword [r8 + 0x68], rbx
mov r12, qword [rsp + 0x250]
mov rdx, qword [rsp + 0x1b8]
lea rax, [rsp + 0x260]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r8
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x170]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.kernel32.dll_CreateProcessW]
test eax, eax
je 0x14000969e
mov r12, qword [rsp + 0x260]
mov r13, qword [rsp + 0x268]
mov r14, qword [rsp + 0x2d0]
mov rsi, qword [rsp + 0x2d8]
mov rdi, qword [rsp + 0x2e0]
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x258], rax
test r15, r15
je 0x1400087f1
mov rcx, rbx
mov rdx, rbp
call fcn.14008d9ec
mov rbx, qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2b8]
call rbx
mov rcx, qword [rsp + 0x198]
call rbx
mov rcx, qword [rsp + 0x88]
call rbx
mov ecx, 2
call fcn.14008da21
lea rcx, [0x1400f71a0]
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x80]
call fcn.1400860da
mov rcx, qword [rsp + 0x168]
mov rdx, qword [rsp + 0x108]
call fcn.1400860da
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b8]
call fcn.1400860da
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x170]
call fcn.1400860da
cmp byte [rsp + 0x74], 0
jne 0x140008897
mov rcx, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x68]
call fcn.1400860da
mov ecx, dword [rsp + 0x2c0]
mov rdx, qword [rsp + 0x2c8]
call fcn.14008da21
test r14, r14
je 0x1400088c3
cmp r14, 2
je 0x140009695
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, r12
mov edx, 0xffffffff
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
test eax, eax
jne 0x140009697
lea rdx, [rsp + 0x400]
and dword [rdx], 0
mov rcx, r12
call qword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
je 0x140009697
mov rcx, r12
call rbx
mov rcx, r13
call rbx
test rdi, rdi
je 0x140008912
mov rcx, qword [rsp + 0x250]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rsp + 0x78], 0
je 0x140008928
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [rsp + 0x308]
mov rdx, qword [rsp + 0x310]
call fcn.1400275a6
mov rsi, qword [rsp + 0x330]
mov rdi, qword [rsp + 0x338]
add rsi, 0x10
sub rdi, 1
jb 0x140008969
mov rcx, qword [rsi - 8]
mov rdx, qword [rsi]
call fcn.1400275a6
add rsi, 0x28
jmp 0x140008951
mov rax, qword [rsp + 0x328]
test rax, rax
je 0x14000898c
mov rcx, qword [rsp + 0x330]
imul r8, rax, 0x28
mov edx, 8
call fcn.1400020d1
mov rax, qword [rsp + 0x390]
test rax, rax
je 0x1400089e3
mov rcx, qword [rsp + 0x398]
and qword [rsp + 0x408], 0
mov qword [rsp + 0x410], rax
mov qword [rsp + 0x418], rcx
and qword [rsp + 0x428], 0
mov r14, qword [rsp + 0x3a0]
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x438], rcx
mov r15d, 1
jmp 0x1400089e9
xor r15d, r15d
xor r14d, r14d
lea rsi, [rsp + 0x408]
mov qword [rsi - 8], r15
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x38], r14
lea r12, [rsp + 0x98]
lea rdi, [rsp + 0x90]
sub r14, 1
jb 0x140008b48
mov qword [rsp + 0x440], r14
test r15, r15
je 0x140009695
mov rbx, qword [rsp + 0x408]
test rbx, rbx
jne 0x140008a5b
mov rdx, qword [rsp + 0x410]
mov r8, qword [rsp + 0x418]
mov rcx, rsi
call fcn.1400880af
mov r15d, 1
mov rbx, qword [rsp + 0x408]
mov r8, qword [rsp + 0x410]
mov r13, qword [rsp + 0x418]
movzx eax, word [rbx + 0x3d2]
cmp r13, rax
jb 0x140008aa5
mov rcx, rdi
mov rdx, rbx
call fcn.140085602
mov rbx, qword [rsp + 0x90]
test rbx, rbx
je 0x140009695
mov r8, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
jmp 0x140008a6b
test r8, r8
je 0x140008adc
mov rdx, qword [rbx + r13*8 + 0x3e0]
dec r8
mov rcx, rdi
call fcn.1400880af
mov rax, qword [rsp + 0x90]
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x110], xmm0
test rax, rax
jne 0x140008b09
jmp 0x140009695
lea rax, [r13 + 1]
mov qword [rsp + 0x90], rbx
and qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x110], xmm0
mov rax, rbx
movaps xmm0, xmmword [rsp + 0x110]
movups xmmword [rsi + 8], xmm0
mov qword [rsp + 0x408], rax
imul rax, r13, 0x38
lea rcx, [rbx + rax]
add rcx, 0x168
call fcn.140086d7d
shl r13, 5
mov rcx, qword [rbx + r13]
mov rdx, qword [rbx + r13 + 8]
call fcn.1400290c1
jmp 0x140008a0d
test r15, r15
je 0x140008bb7
mov rdx, qword [rsp + 0x408]
mov r8, qword [rsp + 0x410]
test rdx, rdx
jne 0x140008b90
mov rax, qword [rsp + 0x418]
lea rsi, [rsp + 0x90]
mov rcx, rsi
mov rdx, r8
mov r8, rax
call fcn.1400880af
mov rdx, qword [rsi]
test rdx, rdx
je 0x140008bb7
mov r8, qword [rsp + 0x98]
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.140085602
mov rdx, qword [rsp + 0x90]
test rdx, rdx
je 0x140008bb7
mov r8, qword [rsp + 0x98]
jmp 0x140008b98
mov rcx, qword [rsp + 0x340]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x140008bdb
mov rdx, qword [rsp + 0x348]
call fcn.1400275a6
mov ecx, dword [rsp + 0x360]
mov rdx, qword [rsp + 0x368]
call fcn.140001676
mov ecx, dword [rsp + 0x370]
mov rdx, qword [rsp + 0x378]
call fcn.140001676
mov ecx, dword [rsp + 0x380]
mov rdx, qword [rsp + 0x388]
call fcn.140001676
mov rsi, qword [rsp + 0x3b0]
mov rbp, rsi
test rsi, rsi
sete al
je 0x140008c32
mov rbp, qword [rsp + 0x3c0]
mov r15, qword [rsp + 0x3b8]
xor r14d, r14d
lea rdi, [rsp + 0x400]
lea rbx, [rsp + 0x90]
test rbp, rbp
je 0x140008d51
test al, 1
jne 0x140009695
test r14, r14
jne 0x140008c89
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call fcn.140084b67
mov r14, qword [rsp + 0x400]
mov rsi, qword [rsp + 0x408]
mov r15, qword [rsp + 0x410]
dec rbp
mov r13, r15
mov r12, r14
movzx eax, word [r12 + 0x16a]
cmp r13, rax
jb 0x140008cd1
mov rcx, rdi
mov rdx, r12
mov r8, rsi
call fcn.140001adf
mov r12, qword [rsp + 0x400]
test r12, r12
je 0x140009695
mov rsi, qword [rsp + 0x408]
mov r13, qword [rsp + 0x410]
jmp 0x140008c92
test rsi, rsi
je 0x140008d0f
mov rdx, qword [r12 + r13*8 + 0x178]
dec rsi
mov rcx, rbx
mov r8, rsi
call fcn.140084b67
mov r14, qword [rsp + 0x90]
test r14, r14
je 0x140009695
mov rsi, qword [rsp + 0x98]
mov r15, qword [rsp + 0xa0]
jmp 0x140008d18
lea r15, [r13 + 1]
xor esi, esi
mov r14, r12
imul rax, r13, 0x18
mov r13, qword [r12 + rax + 0x60]
mov r12, qword [r12 + rax + 0x68]
mov rcx, r13
call qword [r12]
mov r8, qword [r12 + 8]
xor eax, eax
test r8, r8
je 0x140008c4d
mov rdx, qword [r12 + 0x10]
mov rcx, r13
call fcn.1400020d1
xor eax, eax
jmp 0x140008c4d
test al, 1
je 0x140008dd4
lea rax, [0x14009cec8]
lea rcx, [rsp + 0x400]
mov qword [rcx], rax
lea rsi, [rsp + 0x800]
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
mov qword [rsp + 0x308], rsi
lea rax, [0x1400020be]
mov qword [rsp + 0x310], rax
lea rax, [rsp + 0x308]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 1
call fcn.14008c87a
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400275a6
movaps xmm6, xmmword [rsp + 0x820]
add rsp, 0x838
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test r14, r14
jne 0x140008e03
lea rdi, [rsp + 0x400]
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call fcn.140084b67
mov r14, qword [rdi]
test r14, r14
je 0x140008d55
mov rsi, qword [rsp + 0x408]
lea rdi, [rsp + 0x400]
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.140001adf
mov r14, qword [rsp + 0x400]
test r14, r14
je 0x140008d55
mov rsi, qword [rsp + 0x408]
jmp 0x140008e0b
movzx ecx, word [rax - 8]
cmp ecx, 0x42
je 0x140008e51
cmp ecx, 0x43
je 0x140008e73
cmp ecx, 0x62
je 0x140008e51
cmp ecx, 0x63
je 0x140008e73
jmp 0x140007e8d
movzx edx, word [rax - 6]
or edx, 0x20
cmp edx, 0x61
jne 0x140008e69
movzx edx, word [rax - 4]
or edx, 0x20
cmp edx, 0x74
je 0x140008e93
cmp cx, 0x43
jne 0x140007e8d
movzx ecx, word [rax - 6]
or ecx, 0x20
cmp ecx, 0x6d
jne 0x140007e8d
movzx eax, word [rax - 4]
or eax, 0x20
cmp eax, 0x64
jne 0x140007e8d
mov qword [rsp + 0x198], r8
lea rax, [rsp + 0x90]
and qword [rax], 0
mov qword [rax + 8], 2
and qword [rax + 0x10], 0
mov esi, 0x200
mov ebx, 2
xor r15d, r15d
mov edi, 0xffffffff
xor ebp, ebp
cmp rsi, 0x201
jae 0x140008ee4
lea r12, [rsp + 0x400]
mov r14d, 0x200
mov r13, rsi
jmp 0x140008f24
sub rsi, rbp
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.14008601c
mov r15, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
cmp r15, rdi
mov ebp, 0xffffffff
cmovb rbp, r15
mov qword [rsp + 0xa0], rbp
mov r12, rbx
mov r14, rbp
mov r13, rbp
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r12
mov edx, r13d
call qword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov esi, eax
test eax, eax
jne 0x140008f4c
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x1400096b1
mov esi, esi
cmp r13, rsi
jne 0x140008f74
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140009695
add r13, r13
cmp r13, rdi
cmovae r13, rdi
mov rsi, r13
jmp 0x140008ec8
jb 0x140008ec8
cmp r14, rsi
jb 0x140009695
mov rcx, rsi
call fcn.140084c55
mov rbx, rax
mov r15, rdx
lea r8, [rsi + rsi]
mov rcx, rdx
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
call fcn.1400860da
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x140007f49
lea r14, [rsp + 0x110]
mov qword [r14], rbx
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rsi
mov eax, 1
lea rbx, [rsp + 0x420]
mov qword [rbx - 0x20], rax
and qword [rbx - 0x18], 0
mov qword [rbx - 0x10], rax
and word [rbx - 8], 0
lea rax, [0x1400f242e]
mov qword [rbx], rax
lea rcx, [0x1400f2436]
mov qword [rbx + 8], rcx
and word [rbx + 0x10], 0
mov r12d, 3
test rax, rax
je 0x140009039
mov rcx, rbx
call fcn.1400853b1
test ax, ax
je 0x140009030
mov ebp, edx
jmp 0x140009071
and qword [rsp + 0x420], 0
cmp qword [rsp + 0x400], 0
je 0x140009138
mov rax, qword [rsp + 0x408]
cmp qword [rsp + 0x410], rax
je 0x140009138
inc rax
mov qword [rsp + 0x408], rax
movzx ebp, word [rsp + 0x418]
cmp rsi, qword [rsp + 0x110]
jne 0x14000911b
mov rcx, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x420]
test rdx, rdx
je 0x1400090e3
mov rax, qword [rsp + 0x428]
sub rax, rdx
movzx r8d, word [rsp + 0x430]
add rax, 2
xor edx, edx
div r12
cmp r8w, 1
sbb rax, 0xffffffffffffffff
test rcx, rcx
je 0x1400090fc
mov rdx, qword [rsp + 0x410]
sub rdx, qword [rsp + 0x408]
mov rcx, 0xffffffffffffffff
add rax, rdx
jb 0x1400090de
mov rcx, rax
mov rax, rcx
jmp 0x1400090fc
test rcx, rcx
je 0x1400090fa
mov rax, qword [rsp + 0x410]
sub rax, qword [rsp + 0x408]
jmp 0x1400090fc
xor eax, eax
mov rdx, 0xffffffffffffffff
inc rax
je 0x14000910b
mov rdx, rax
mov rcx, r14
call fcn.140084c91
mov r15, qword [rsp + 0x118]
mov word [r15 + rsi*2], bp
inc rsi
mov qword [rsp + 0x120], rsi
mov rax, qword [rsp + 0x420]
jmp 0x14000901a
mov rcx, qword [rsp + 0x110]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x140007f49
mov qword [rsp + 0x1a0], rcx
lea rcx, [rsp + 0x110]
mov rax, qword [rcx + 8]
mov qword [rsp + 0x170], rax
mov rsi, qword [rsp + 0x330]
mov r12, qword [rsp + 0x338]
mov al, byte [rsp + 0x3cd]
mov byte [rsp + 0x74], al
test al, al
setne byte [rsp + 0x60]
lea rax, str.cmd.exe__d__c__
mov qword [rcx], rax
lea rax, [0x1400f2229]
mov qword [rcx + 8], rax
and word [rcx + 0x10], 0
call fcn.1400853b1
test ax, ax
je 0x1400092c7
mov ebx, edx
mov rax, qword [rsp + 0x118]
sub rax, qword [rsp + 0x110]
movzx ecx, word [rsp + 0x120]
add rax, 2
mov r13d, 3
xor edx, edx
div r13
cmp cx, 1
sbb rax, 0xffffffffffffffff
cmp rax, 4
cmovb rax, r13
lea rcx, [rax + 1]
call fcn.140084c55
mov r14, rdx
mov word [rdx], bx
lea r15, [rsp + 0x90]
mov qword [r15], rax
mov qword [r15 + 8], rdx
mov qword [r15 + 0x10], 1
mov rax, qword [rsp + 0x120]
lea rbx, [rsp + 0x400]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x110]
movaps xmmword [rbx], xmm0
mov edi, 1
mov rcx, rbx
call fcn.1400853b1
cmp ax, 1
jne 0x1400092a5
mov ebp, edx
cmp rdi, qword [rsp + 0x90]
jne 0x140009293
mov rax, qword [rsp + 0x408]
sub rax, qword [rsp + 0x400]
movzx ecx, word [rsp + 0x410]
add rax, 2
xor edx, edx
div r13
cmp cx, 1
sbb rax, 0xffffffffffffffff
lea rdx, [rax + 1]
mov rcx, r15
call fcn.140084c91
mov r14, qword [rsp + 0x98]
mov word [r14 + rdi*2], bp
inc rdi
mov qword [rsp + 0xa0], rdi
jmp 0x14000923c
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x200], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x210], rax
jmp 0x1400092e5
and qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 2
and qword [rsp + 0x210], 0
lea rcx, [rsp + 0x200]
mov dx, 0x22
call fcn.1400899c8
mov r14, qword [rsp + 0x198]
lea rax, [r14 + r14]
xor ecx, ecx
mov rdx, qword [rsp + 0x68]
cmp rax, rcx
je 0x14000931e
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x140009309
jmp 0x14000940b
mov rax, qword [rsp + 0x68]
cmp word [rax + r14*2 - 2], 0x5c
je 0x14000940b
lea rdi, [r14 - 1]
mov rbx, qword [rsp + 0x68]
lea rcx, [rbx + r14*2]
add rcx, 0xfffffffffffffffe
lea r8, [0x1400f222a]
mov edx, 1
mov r9d, 1
call fcn.1400870b4
xor edx, edx
test al, al
cmovne rdx, rbx
test rdx, rdx
cmove rdx, rbx
cmove rdi, r14
lea r8, [rdx + rdi*2]
lea rdi, [rsp + 0x200]
mov rcx, rdi
call fcn.140085648
mov rcx, rdi
mov dx, 0x22
call fcn.1400899c8
imul r14, r12, 0x28
add r14, rsi
lea rbx, str._t_____________
cmp rsi, r14
je 0x140009435
mov rcx, rdi
mov dx, 0x20
call fcn.1400899c8
mov bpl, byte [rsp + 0x60]
cmp byte [rsp + 0x74], 0
jne 0x1400093f1
cmp qword [rsi], 0
mov bpl, byte [rsp + 0x60]
jne 0x1400093f1
mov r15, qword [rsi + 0x10]
mov r12, qword [rsi + 0x18]
xor r13d, r13d
cmp r12, r13
setne bpl
je 0x1400093f1
mov r8b, byte [r15 + r13]
mov edx, 0x16
mov rcx, rbx
call fcn.14008d218
inc r13
test al, al
je 0x1400093d0
lea r15, [rsi + 0x28]
mov rcx, rdi
mov rdx, rsi
mov r8d, ebp
call fcn.14008d2c9
mov rsi, r15
test rax, rax
je 0x140009399
mov rcx, qword [rsp + 0x200]
mov rdx, qword [rsp + 0x208]
call fcn.1400860da
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x170]
jmp 0x140007f44
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov dx, 0x22
call fcn.1400899c8
mov rax, qword [rsi]
movabs rsi, 0x8000000000000000
cmp rax, rsi
je 0x140009420
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
mov cl, 1
mov dword [rsp + 0x194], ecx
mov dword [rsp + 0x74], 0
jmp 0x140007fb5
call fcn.1400860c3
mov rcx, rbx
mov rdx, rbp
call fcn.14008d9ec
mov rcx, qword [rsp + 0x2b8]
call qword [sym.imp.kernel32.dll_CloseHandle]
mov r14, qword [rsp + 0x108]
mov r15, qword [rsp + 0x168]
mov r13, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x198]
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, r13
call qword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, 2
call fcn.14008da21
mov rcx, qword [rsp + 0x2d0]
mov rdx, qword [rsp + 0x2d8]
call fcn.14008da2f
mov rcx, qword [rsp + 0x2e0]
mov rdx, qword [rsp + 0x2e8]
call fcn.14008da2f
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x2f8]
call fcn.14008da2f
lea rcx, [0x1400f71a0]
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x80]
call fcn.1400860da
mov rcx, r15
mov rdx, r14
jmp 0x140009636
movabs rcx, 0x8000000000000000
call fcn.1400290c1
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
call fcn.1400275a6
movabs rcx, 0x8000000000000000
call fcn.14008d299
cmp byte [rsp + 0x168], 0
jne 0x140009681
cmp qword [rsp + 0x80], 0
jne 0x140009598
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x88], rcx
jmp 0x1400095dc
and qword [rsp + 0x408], 0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x410], rax
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x418], rcx
and qword [rsp + 0x428], 0
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x438], rcx
mov eax, 1
lea rcx, [rsp + 0x400]
mov qword [rcx], rax
mov qword [rcx + 0x20], rax
mov rax, qword [rsp + 0x88]
mov qword [rcx + 0x40], rax
call fcn.14008905a
jmp 0x140009681
mov rcx, rbp
mov rdx, qword [rsp + 0x60]
call fcn.1400275a6
mov rcx, r14
mov rdx, r13
call fcn.1400860da
lea rcx, [rsp + 0x400]
call fcn.14008905a
mov rcx, qword [rsp + 0x260]
mov rdx, qword [rsp + 0x268]
call fcn.1400860da
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b8]
call fcn.1400860da
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x170]
call fcn.1400860da
cmp byte [rsp + 0x194], 0
je 0x140009681
mov rcx, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x68]
call fcn.1400860da
mov ecx, dword [rsp + 0x2c0]
mov rdx, qword [rsp + 0x2c8]
call fcn.14008da21
ud2
call fcn.1400860c3
ud2
call fcn.1400860c3
test r15, r15
jne 0x140009486
jmp 0x140009491
call fcn.1400860c3
mov rcx, r15
mov rdx, rbx
jmp 0x140007f44