Function at 0x140041e20
Capabilities:
Change the wallpaper
Contain obfuscated stackstrings
Encode data using base64

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x410]
sub rsp, 0x510
mov rax, qword [0x1400ea180]
xor rax, rsp
mov qword [rbp + 0x408], rax
mov dword [rbp + 0x3b0], 1
xor r14d, r14d
mov qword [rbp + 0x3b8], r14
mov qword [rbp + 0x3c0], r14
xor r8d, r8d
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x3a8]
call qword [sym.imp.gdiplus.dll_GdiplusStartup]
test eax, eax
jne 0x140043c88
xor r9d, r9d
lea r8, [rbp + 0x300]
xor edx, edx
lea ecx, [rax + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x140043c7b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3c8], xmm0
mov qword [rbp + 0x3d8], rax
lea rax, vtable.Gdiplus::Bitmap.0
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 0x2e8], r14
lea rax, [rbp + 0x2e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov r9d, 0x26200a
xor r8d, r8d
mov edx, dword [rbp + 0x30c]
mov ecx, dword [rbp + 0x308]
call qword [sym.imp.gdiplus.dll_GdipCreateBitmapFromScan0]
mov dword [rbp + 0x3d8], eax
mov rcx, qword [rbp + 0x2e8]
mov qword [rbp + 0x3d0], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x398], xmm0
mov qword [rbp + 0x2d8], r14
lea rdx, [rbp + 0x2d8]
call qword [sym.imp.gdiplus.dll_GdipGetImageGraphicsContext]
mov dword [rbp + 0x3a0], eax
mov rax, qword [rbp + 0x2d8]
mov qword [rbp + 0x398], rax
movd xmm2, dword [rbp + 0x30c]
cvtdq2ps xmm2, xmm2
movd xmm1, dword [rbp + 0x308]
cvtdq2ps xmm1, xmm1
mov qword [rbp + 0x388], r14
movss dword [rbp + 0x390], xmm1
movss dword [rbp + 0x394], xmm2
xorps xmm0, xmm0
movups xmmword [rbp + 0x358], xmm0
mov qword [rbp + 0x358], r14
lea r9, [rbp + 0x358]
xor r8d, r8d
movss xmm1, dword [0x1400da2b8]
mov ecx, 0xff000000
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbp + 0x360], eax
mov byte [rbp + 0x90], r14b
mov byte [rbp + 0x91], 0x7d
mov byte [rbp + 0x92], 0x44
mov byte [rbp + 0x93], 0x7d
mov byte [rbp + 0x94], 0x44
mov byte [rbp + 0x95], 0x7d
mov byte [rbp + 0x96], 0x44
mov byte [rbp + 0x97], 0x36
mov byte [rbp + 0x98], 0x44
mov byte [rbp + 0x99], 0x77
mov byte [rbp + 0x9a], 0x44
mov byte [rbp + 0x9b], 0x16
mov byte [rbp + 0x9c], 0x44
mov byte [rbp + 0x9d], 0x2c
mov byte [rbp + 0x9e], 0x44
mov byte [rbp + 0x9f], 0x55
mov byte [rbp + 0xa0], 0x44
mov byte [rbp + 0xa1], 0x3f
mov byte [rbp + 0xa2], 0x44
mov byte [rbp + 0xa3], 0x36
mov byte [rbp + 0xa4], 0x44
mov byte [rbp + 0xa5], 0x7d
mov byte [rbp + 0xa6], 0x44
mov byte [rbp + 0xa7], 0x7d
mov byte [rbp + 0xa8], 0x44
mov byte [rbp + 0xa9], 0x7d
mov byte [rbp + 0xaa], 0x44
mov byte [rbp + 0xab], 0x36
mov byte [rbp + 0xac], 0x44
mov byte [rbp + 0xad], 0x10
mov byte [rbp + 0xae], 0x44
mov byte [rbp + 0xaf], 0x16
mov byte [rbp + 0xb0], 0x44
mov byte [rbp + 0xb1], r14b
mov byte [rbp + 0xb2], 0x44
mov byte [rbp + 0xb3], 0x36
mov byte [rbp + 0xb4], 0x44
mov byte [rbp + 0xb5], r14b
mov byte [rbp + 0xb6], 0x44
mov byte [rbp + 0xb7], 4
mov byte [rbp + 0xb8], 0x44
mov byte [rbp + 0xb9], 0x70
mov byte [rbp + 0xba], 0x44
mov byte [rbp + 0xbb], 0x22
mov byte [rbp + 0xbc], 0x44
mov byte [rbp + 0xbd], 0x17
mov byte [rbp + 0xbe], 0x44
mov byte [rbp + 0xbf], 0x13
mov byte [rbp + 0xc0], 0x44
mov byte [rbp + 0xc1], 0x31
mov byte [rbp + 0xc2], 0x44
mov byte [rbp + 0xc3], r14b
mov byte [rbp + 0xc4], 0x44
mov byte [rbp + 0xc5], 0x38
mov byte [rbp + 0xc6], 0x44
mov byte [rbp + 0xc7], 0x36
mov byte [rbp + 0xc8], 0x44
mov byte [rbp + 0xc9], 0x61
mov byte [rbp + 0xca], 0x44
mov byte [rbp + 0xcb], 4
mov byte [rbp + 0xcc], 0x44
mov byte [rbp + 0xcd], 0x38
mov byte [rbp + 0xce], 0x44
mov byte [rbp + 0xcf], 0x36
mov byte [rbp + 0xd0], 0x44
mov byte [rbp + 0xd1], 0x69
mov byte [rbp + 0xd2], 0x44
mov byte [rbp + 0xd3], 0x31
mov byte [rbp + 0xd4], 0x44
mov byte [rbp + 0xd5], 0x4b
mov byte [rbp + 0xd6], 0x44
mov byte [rbp + 0xd7], 0x74
mov byte [rbp + 0xd8], 0x44
mov byte [rbp + 0xd9], r14b
mov byte [rbp + 0xda], 0x44
mov byte [rbp + 0xdb], 4
mov byte [rbp + 0xdc], 0x44
mov byte [rbp + 0xdd], 0x36
mov byte [rbp + 0xde], 0x44
mov byte [rbp + 0xdf], 0x61
mov byte [rbp + 0xe0], 0x44
mov byte [rbp + 0xe1], 0x74
mov byte [rbp + 0xe2], 0x44
mov byte [rbp + 0xe3], 0x74
mov byte [rbp + 0xe4], 0x44
mov byte [rbp + 0xe5], 0x36
mov byte [rbp + 0xe6], 0x44
mov byte [rbp + 0xe7], 0x4b
mov byte [rbp + 0xe8], 0x44
mov byte [rbp + 0xe9], 0x47
mov byte [rbp + 0xea], 0x44
mov byte [rbp + 0xeb], 0x36
mov byte [rbp + 0xec], 0x44
mov byte [rbp + 0xed], 0x17
mov byte [rbp + 0xee], 0x44
mov byte [rbp + 0xef], 0x4b
mov byte [rbp + 0xf0], 0x44
mov byte [rbp + 0xf1], 0x78
mov byte [rbp + 0xf2], 0x44
mov byte [rbp + 0xf3], 0x22
mov byte [rbp + 0xf4], 0x44
mov byte [rbp + 0xf5], 0x36
mov byte [rbp + 0xf6], 0x44
mov byte [rbp + 0xf7], 0x47
mov byte [rbp + 0xf8], 0x44
mov byte [rbp + 0xf9], 0x1e
mov byte [rbp + 0xfa], 0x44
mov byte [rbp + 0xfb], 0x74
mov byte [rbp + 0xfc], 0x44
mov byte [rbp + 0xfd], r14b
mov byte [rbp + 0xfe], 0x44
mov byte [rbp + 0xff], 0x69
mov byte [rbp + 0x100], 0x44
mov byte [rbp + 0x101], 0x20
mov byte [rbp + 0x102], 0x44
mov byte [rbp + 0x103], 0x10
mov byte [rbp + 0x104], 0x44
mov byte [rbp + 0x105], 0x59
mov byte [rbp + 0x106], 0x44
mov byte [rbp + 0x107], 0x78
mov byte [rbp + 0x108], 0x44
mov byte [rbp + 0x109], 0x22
mov byte [rbp + 0x10a], 0x44
mov byte [rbp + 0x10b], 0x36
mov byte [rbp + 0x10c], 0x44
mov byte [rbp + 0x10d], r14b
mov byte [rbp + 0x10e], 0x44
mov byte [rbp + 0x10f], 0x3c
mov byte [rbp + 0x110], 0x44
mov byte [rbp + 0x111], 0x61
mov byte [rbp + 0x112], 0x44
mov byte [rbp + 0x113], 0x1e
mov byte [rbp + 0x114], 0x44
mov byte [rbp + 0x115], 0x74
mov byte [rbp + 0x116], 0x44
mov byte [rbp + 0x117], 0x36
mov byte [rbp + 0x118], 0x44
mov byte [rbp + 0x119], 0x61
mov byte [rbp + 0x11a], 0x44
mov byte [rbp + 0x11b], 0x38
mov byte [rbp + 0x11c], 0x44
mov byte [rbp + 0x11d], 0x38
mov byte [rbp + 0x11e], 0x44
mov byte [rbp + 0x11f], 0x22
mov byte [rbp + 0x120], 0x44
mov byte [rbp + 0x121], r14b
mov byte [rbp + 0x122], 0x44
mov byte [rbp + 0x123], 0x69
mov byte [rbp + 0x124], 0x44
mov byte [rbp + 0x125], 0x69
mov byte [rbp + 0x126], 0x44
mov byte [rbp + 0x127], 0x7a
mov byte [rbp + 0x128], 0x44
mov byte [rbp + 0x129], 0x36
mov byte [rbp + 0x12a], 0x44
mov byte [rbp + 0x12b], 0xa
mov byte [rbp + 0x12c], 0x44
mov byte [rbp + 0x12d], 0xe
mov byte [rbp + 0x12e], 0x44
mov byte [rbp + 0x12f], 0x4a
mov byte [rbp + 0x130], 0x44
mov byte [rbp + 0x131], 0x6f
mov byte [rbp + 0x132], 0x44
mov byte [rbp + 0x133], 0x2c
mov byte [rbp + 0x134], 0x44
mov byte [rbp + 0x135], 3
mov byte [rbp + 0x136], 0x44
mov byte [rbp + 0x137], 0x19
mov byte [rbp + 0x138], 0x44
mov byte [rbp + 0x139], 0x10
mov byte [rbp + 0x13a], 0x44
mov byte [rbp + 0x13b], 0x2c
mov byte [rbp + 0x13c], 0x44
mov byte [rbp + 0x13d], 4
mov byte [rbp + 0x13e], 0x44
mov byte [rbp + 0x13f], 0x36
mov byte [rbp + 0x140], 0x44
mov byte [rbp + 0x141], 0x70
mov byte [rbp + 0x142], 0x44
mov byte [rbp + 0x143], 0x61
mov byte [rbp + 0x144], 0x44
mov byte [rbp + 0x145], 0x69
mov byte [rbp + 0x146], 0x44
mov byte [rbp + 0x147], r14b
mov byte [rbp + 0x148], 0x44
mov byte [rbp + 0x149], 0x36
mov byte [rbp + 0x14a], 0x44
mov byte [rbp + 0x14b], 0x4b
mov byte [rbp + 0x14c], 0x44
mov byte [rbp + 0x14d], 0x47
mov byte [rbp + 0x14e], 0x44
mov byte [rbp + 0x14f], 0x36
mov byte [rbp + 0x150], 0x44
mov byte [rbp + 0x151], 4
mov byte [rbp + 0x152], 0x44
mov byte [rbp + 0x153], 0x4b
mov byte [rbp + 0x154], 0x44
mov byte [rbp + 0x155], 0x36
mov byte [rbp + 0x156], 0x44
mov byte [rbp + 0x157], 0x61
mov byte [rbp + 0x158], 0x44
mov byte [rbp + 0x159], 4
mov byte [rbp + 0x15a], 0x44
mov byte [rbp + 0x15b], 0x69
mov byte [rbp + 0x15c], 0x44
mov byte [rbp + 0x15d], 8
mov byte [rbp + 0x15e], 0x44
mov byte [rbp + 0x15f], r14b
mov byte [rbp + 0x160], 0x44
mov byte [rbp + 0x161], 0x22
mov byte [rbp + 0x162], 0x44
mov byte [rbp + 0x163], 0x36
mov byte [rbp + 0x164], 0x44
mov byte [rbp + 0x165], 8
mov byte [rbp + 0x166], 0x44
mov byte [rbp + 0x167], 0x1e
mov byte [rbp + 0x168], 0x44
mov byte [rbp + 0x169], 0x31
mov byte [rbp + 0x16a], 0x44
mov byte [rbp + 0x16b], 0x56
mov byte [rbp + 0x16c], 0x44
mov byte [rbp + 0x16d], 0x1e
mov byte [rbp + 0x16e], 0x44
mov byte [rbp + 0x16f], 4
mov byte [rbp + 0x170], 0x44
mov byte [rbp + 0x171], 0x36
mov byte [rbp + 0x172], 0x44
mov byte [rbp + 0x173], 0x3e
mov byte [rbp + 0x174], 0x44
mov byte [rbp + 0x175], 0x4d
mov byte [rbp + 0x176], 0x44
mov byte [rbp + 0x177], 0x36
mov byte [rbp + 0x178], 0x44
mov byte [rbp + 0x179], 0x56
mov byte [rbp + 0x17a], 0x44
mov byte [rbp + 0x17b], 0x4b
mov byte [rbp + 0x17c], 0x44
mov byte [rbp + 0x17d], 0x78
mov byte [rbp + 0x17e], 0x44
mov byte [rbp + 0x17f], 0x22
mov byte [rbp + 0x180], 0x44
mov byte [rbp + 0x181], 0x69
mov byte [rbp + 0x182], 0x44
mov byte [rbp + 0x183], 0x11
mov byte [rbp + 0x184], 0x44
mov byte [rbp + 0x185], 0x36
mov byte [rbp + 0x186], 0x44
mov byte [rbp + 0x187], 0x70
mov byte [rbp + 0x188], 0x44
mov byte [rbp + 0x189], 0x4b
mov byte [rbp + 0x18a], 0x44
mov byte [rbp + 0x18b], 4
mov byte [rbp + 0x18c], 0x44
mov byte [rbp + 0x18d], 0x31
mov byte [rbp + 0x18e], 0x44
mov byte [rbp + 0x18f], 0x61
mov byte [rbp + 0x190], 0x44
mov byte [rbp + 0x191], 0x70
mov byte [rbp + 0x192], 0x44
mov byte [rbp + 0x193], 0x31
mov byte [rbp + 0x194], 0x44
mov byte [rbp + 0x195], 0x36
mov byte [rbp + 0x196], 0x44
mov byte [rbp + 0x197], 0x31
mov byte [rbp + 0x198], 0x44
mov byte [rbp + 0x199], 0x4b
mov byte [rbp + 0x19a], 0x44
mov byte [rbp + 0x19b], 0x36
mov byte [rbp + 0x19c], 0x44
mov byte [rbp + 0x19d], 0x31
mov byte [rbp + 0x19e], 0x44
mov byte [rbp + 0x19f], 0x56
mov byte [rbp + 0x1a0], 0x44
mov byte [rbp + 0x1a1], 0x1e
mov byte [rbp + 0x1a2], 0x44
mov byte [rbp + 0x1a3], 0x69
mov byte [rbp + 0x1a4], 0x44
mov byte [rbp + 0x1a5], 0x36
mov byte [rbp + 0x1a6], 0x44
mov byte [rbp + 0x1a7], r14b
mov byte [rbp + 0x1a8], 0x44
mov byte [rbp + 0x1a9], 0x3c
mov byte [rbp + 0x1aa], 0x44
mov byte [rbp + 0x1ab], 0x61
mov byte [rbp + 0x1ac], 0x44
mov byte [rbp + 0x1ad], 0x1e
mov byte [rbp + 0x1ae], 0x44
mov byte [rbp + 0x1af], 0x74
mov byte [rbp + 0x1b0], 0x44
mov byte [rbp + 0x1b1], 0x7a
mov byte [rbp + 0x1b2], 0x44
mov byte [rbp + 0x1b3], 0x36
mov byte [rbp + 0x1b4], 0x44
mov byte [rbp + 0x1b5], 0xa
mov byte [rbp + 0x1b6], 0x44
mov byte [rbp + 0x1b7], 0x37
mov byte [rbp + 0x1b8], 0x44
mov byte [rbp + 0x1b9], 0x6f
mov byte [rbp + 0x1ba], 0x44
mov byte [rbp + 0x1bb], 0x7e
mov byte [rbp + 0x1bc], 0x44
mov byte [rbp + 0x1bd], 0x3b
mov byte [rbp + 0x1be], 0x44
mov byte [rbp + 0x1bf], 7
mov byte [rbp + 0x1c0], 0x44
mov byte [rbp + 0x1c1], 0x21
mov byte [rbp + 0x1c2], 0x44
mov byte [rbp + 0x1c3], 0x52
mov byte [rbp + 0x1c4], 0x44
mov byte [rbp + 0x1c5], 0xe
mov byte [rbp + 0x1c6], 0x44
mov byte [rbp + 0x1c7], 0x4a
mov byte [rbp + 0x1c8], 0x44
mov byte [rbp + 0x1c9], 0x6f
mov byte [rbp + 0x1ca], 0x44
mov byte [rbp + 0x1cb], 0x2c
mov byte [rbp + 0x1cc], 0x44
mov byte [rbp + 0x1cd], 3
mov byte [rbp + 0x1ce], 0x44
mov byte [rbp + 0x1cf], 0x19
mov byte [rbp + 0x1d0], 0x44
mov byte [rbp + 0x1d1], 0x10
mov byte [rbp + 0x1d2], 0x44
mov byte [rbp + 0x1d3], 0x25
mov byte [rbp + 0x1d4], 0x44
mov byte [rbp + 0x1d5], 0x4b
mov byte [rbp + 0x1d6], 0x44
mov byte [rbp + 0x1d7], 0x78
mov byte [rbp + 0x1d8], 0x44
mov byte [rbp + 0x1d9], 0x22
mov byte [rbp + 0x1da], 0x44
mov byte [rbp + 0x1db], 0x36
mov byte [rbp + 0x1dc], 0x44
mov byte [rbp + 0x1dd], 0x13
mov byte [rbp + 0x1de], 0x44
mov byte [rbp + 0x1df], r14b
mov byte [rbp + 0x1e0], 0x44
mov byte [rbp + 0x1e1], 0x22
mov byte [rbp + 0x1e2], 0x44
mov byte [rbp + 0x1e3], 0x69
mov byte [rbp + 0x1e4], 0x44
mov byte [rbp + 0x1e5], 0x4b
mov byte [rbp + 0x1e6], 0x44
mov byte [rbp + 0x1e7], 4
mov byte [rbp + 0x1e8], 0x44
mov byte [rbp + 0x1e9], 0x61
mov byte [rbp + 0x1ea], 0x44
mov byte [rbp + 0x1eb], 0x74
mov byte [rbp + 0x1ec], 0x44
mov byte [rbp + 0x1ed], 0x36
mov byte [rbp + 0x1ee], 0x44
mov byte [rbp + 0x1ef], 0x2c
mov byte [rbp + 0x1f0], 0x44
mov byte [rbp + 0x1f1], 0x46
mov byte [rbp + 0x1f2], 0x44
mov byte [rbp + 0x1f3], 0x7a
mov byte [rbp + 0x1f4], 0x44
mov byte [rbp + 0x1f5], 0x10
mov byte [rbp + 0x1f6], 0x44
mov byte [rbp + 0x1f7], 0xa
mov byte [rbp + 0x1f8], 0x44
mov byte [rbp + 0x1f9], 0x2c
mov byte [rbp + 0x1fa], 0x44
mov byte [rbp + 0x1fb], 0x46
mov byte [rbp + 0x1fc], 0x44
mov byte [rbp + 0x1fd], 0x19
mov byte [rbp + 0x1fe], 0x44
mov byte [rbp + 0x1ff], 0x44
mov byte [rbp + 0x200], 0x44
movzx eax, byte [rbp + 0x91]
movzx eax, byte [rbp + 0x90]
test al, al
jne 0x140042a3e
mov r9d, r14d
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r9 + 0x91]
sub ecx, 0x44
imul r8d, ecx, 0x22
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 + 0x91], r8b
inc r9
cmp r9, 0x170
jb 0x1400429e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x220], xmm1
lea rax, [rbp + 0x91]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rax + r8*2], 0
jne 0x140042a64
lea rdx, [rbp + 0x91]
lea rcx, [rbp + 0x210]
call fcn.140028760
nop
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x338]
call fcn.14003ca70
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x140042add
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042ad8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cc0
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x220], xmm0
mov word [rbp + 0x210], r14w
movss xmm0, dword [rbp + 0x394]
movss dword [rsp + 0x28], xmm0
movss xmm1, dword [rbp + 0x390]
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [rbp + 0x38c]
movss xmm2, dword [rbp + 0x388]
mov rdx, qword [rbp + 0x358]
mov rbx, qword [rbp + 0x2d8]
mov rcx, rbx
call qword [sym.imp.gdiplus.dll_GdipDrawRectangle]
mov ecx, dword [rbp + 0x3a0]
test eax, eax
cmovne ecx, eax
mov dword [rbp + 0x3a0], ecx
xorps xmm0, xmm0
movups xmmword [rbp + 0x328], xmm0
mov qword [rbp + 0x328], r14
mov qword [rbp + 0x2f8], r14
mov qword [rbp + 0x2f0], r14
lea r8, [rbp + 0x2f0]
xor edx, edx
lea rcx, str.Arial
call qword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
mov rdx, qword [rbp + 0x2f0]
mov r10, rdx
mov dword [rbp + 0x2f8], r14d
mov dword [rbp + 0x330], eax
lea rsi, [0x1401014e0]
test eax, eax
je 0x140042be5
mov rcx, qword [0x140100b18]
test rcx, rcx
jne 0x140042bcd
mov qword [0x140100b18], rsi
mov rcx, rsi
call qword [sym.imp.gdiplus.dll_GdipGetGenericFontFamilySansSerif]
mov rcx, qword [0x140100b18]
mov dword [rcx + 8], eax
mov rdx, qword [rbp + 0x2f0]
mov r10, qword [rcx]
mov eax, dword [rcx + 8]
mov dword [rbp + 0x330], eax
test eax, eax
je 0x140042be5
mov rcx, rdx
jmp 0x140042c7d
lea rax, [rbp + 0x328]
mov qword [rsp + 0x20], rax
mov r9d, 3
lea r8d, [r9 - 2]
movss xmm1, dword [0x1400da2d8]
mov rcx, r10
call qword [sym.imp.gdiplus.dll_GdipCreateFont]
mov dword [rbp + 0x330], eax
test eax, eax
je 0x140042c76
mov rdx, qword [0x140100b18]
test rdx, rdx
jne 0x140042c3c
mov qword [0x140100b18], rsi
mov rcx, rsi
call qword [sym.imp.gdiplus.dll_GdipGetGenericFontFamilySansSerif]
mov rdx, qword [0x140100b18]
mov dword [rdx + 8], eax
mov rcx, qword [rdx]
mov eax, dword [rdx + 8]
mov dword [rbp + 0x330], eax
test eax, eax
jne 0x140042c76
lea rax, [rbp + 0x328]
mov qword [rsp + 0x20], rax
mov r9d, 3
lea r8d, [r9 - 2]
movss xmm1, dword [0x1400da2d8]
call qword [sym.imp.gdiplus.dll_GdipCreateFont]
mov dword [rbp + 0x330], eax
mov rcx, qword [rbp + 0x2f0]
call qword [sym.imp.gdiplus.dll_GdipDeleteFontFamily]
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3e0], xmm0
mov qword [rbp + 0x3f0], rax
lea rax, vtable.Gdiplus::SolidBrush.0
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x2e0], r14
lea rdx, [rbp + 0x2e0]
mov ecx, 0xffffffff
call qword [sym.imp.gdiplus.dll_GdipCreateSolidFill]
mov dword [rbp + 0x3f0], eax
mov rsi, qword [rbp + 0x2e0]
mov qword [rbp + 0x3e8], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x318], xmm0
mov qword [rbp + 0x318], r14
xor edx, edx
lea r8, [rbp + 0x318]
xor ecx, ecx
call qword [sym.imp.gdiplus.dll_GdipCreateStringFormat]
mov dword [rbp + 0x320], eax
mov edx, 1
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.gdiplus.dll_GdipSetStringFormatAlign]
mov ecx, dword [rbp + 0x320]
test eax, eax
cmovne ecx, eax
mov dword [rbp + 0x320], ecx
mov edx, 1
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.gdiplus.dll_GdipSetStringFormatLineAlign]
mov ecx, dword [rbp + 0x320]
test eax, eax
cmovne ecx, eax
mov dword [rbp + 0x320], ecx
lea rdx, [rbp + 0x338]
cmp qword [rbp + 0x350], 8
cmovae rdx, qword [rbp + 0x338]
mov qword [rsp + 0x30], rsi
mov rax, qword [rbp + 0x318]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x388]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x328]
mov r8d, edi
mov rcx, rbx
call qword [sym.imp.gdiplus.dll_GdipDrawString]
test eax, eax
je 0x140042e29
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
nop
mov rcx, rsi
call qword [sym.imp.gdiplus.dll_GdipDeleteBrush]
nop
mov rcx, qword [rbp + 0x328]
call qword [sym.imp.gdiplus.dll_GdipDeleteFont]
nop
mov rdx, qword [rbp + 0x350]
cmp rdx, 8
jb 0x140042dfb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042df6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cc6
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x348], xmm0
mov word [rbp + 0x338], r14w
mov rcx, qword [rbp + 0x358]
call qword [sym.imp.gdiplus.dll_GdipDeletePen]
nop
mov rcx, rbx
jmp 0x140043c67
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0x67
mov byte [rsp + 0x42], 0x5b
mov byte [rsp + 0x43], 0x14
mov byte [rsp + 0x44], 0x5b
mov byte [rsp + 0x45], 0xf
mov byte [rsp + 0x46], 0x5b
mov byte [rsp + 0x47], 0x51
mov byte [rsp + 0x48], 0x5b
mov byte [rsp + 0x49], 0x3b
mov byte [rsp + 0x4a], 0x5b
mov byte [rsp + 0x4b], 0x64
mov byte [rsp + 0x4c], 0x5b
mov byte [rsp + 0x4d], 0x1a
mov byte [rsp + 0x4e], 0x5b
mov byte [rsp + 0x4f], 0x14
mov byte [rsp + 0x50], 0x5b
mov byte [rsp + 0x51], 0x35
mov byte [rsp + 0x52], 0x5b
mov byte [rsp + 0x53], 0x5b
mov byte [rsp + 0x54], 0x5b
movzx eax, byte [rsp + 0x41]
movzx eax, byte [rsp + 0x40]
test al, al
jne 0x140042f01
mov r8, r14
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rsp + r8 + 0x41]
mov eax, 0x5b
sub eax, ecx
imul ecx, eax, 0x17
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rsp + r8 + 0x41], cl
inc r8
cmp r8, 0x14
jb 0x140042eb0
mov dword [rbp + 0x310], r14d
mov dword [rbp + 0x2d0], r14d
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x310]
call qword [sym.imp.gdiplus.dll_GdipGetImageEncodersSize]
mov eax, dword [rbp + 0x2d0]
test eax, eax
je 0x140042f9f
mov ecx, eax
call fcn.14009e7f0
mov rsi, rax
test rax, rax
je 0x140042f9f
mov r8, rax
mov edx, dword [rbp + 0x2d0]
mov ecx, dword [rbp + 0x310]
call qword [sym.imp.gdiplus.dll_GdipGetImageEncoders]
mov ebx, r14d
mov r10d, dword [rbp + 0x310]
test r10d, r10d
je 0x140042f96
mov eax, ebx
imul r9, rax, 0x68
mov rax, qword [r9 + rsi + 0x40]
lea r8, [rsp + 0x41]
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140042f87
add rax, 2
test ecx, ecx
jne 0x140042f73
test edx, edx
je 0x140043017
inc ebx
cmp ebx, r10d
jb 0x140042f60
mov rcx, rsi
call fcn.14009e2a4
nop
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
nop
mov rcx, qword [rbp + 0x2e0]
call qword [sym.imp.gdiplus.dll_GdipDeleteBrush]
nop
mov rcx, qword [rbp + 0x328]
call qword [sym.imp.gdiplus.dll_GdipDeleteFont]
nop
mov rdx, qword [rbp + 0x350]
cmp rdx, 8
jb 0x140043c3a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043c35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cba
jmp 0x140043c35
movups xmm0, xmmword [r9 + rsi]
movups xmmword [rbp + 0x3f8], xmm0
mov rcx, rsi
call fcn.14009e2a4
cmp ebx, 0xffffffff
je 0x140042f9f
mov byte [rbp - 0x68], 0
mov byte [rbp - 0x67], 0x52
mov byte [rbp - 0x66], 0x64
mov byte [rbp - 0x65], 0x5c
mov byte [rbp - 0x64], 0x64
mov byte [rbp - 0x63], 0x1a
mov byte [rbp - 0x62], 0x64
mov byte [rbp - 0x61], 0x7c
mov byte [rbp - 0x60], 0x64
mov byte [rbp - 0x5f], 0x3a
mov byte [rbp - 0x5e], 0x64
mov byte [rbp - 0x5d], 0x13
mov byte [rbp - 0x5c], 0x64
mov byte [rbp - 0x5b], 0x2a
mov byte [rbp - 0x5a], 0x64
mov byte [rbp - 0x59], 0x3a
mov byte [rbp - 0x58], 0x64
mov byte [rbp - 0x57], 0x5b
mov byte [rbp - 0x56], 0x64
mov byte [rbp - 0x55], 0x78
mov byte [rbp - 0x54], 0x64
mov byte [rbp - 0x53], 0x5f
mov byte [rbp - 0x52], 0x64
mov byte [rbp - 0x51], 0x5b
mov byte [rbp - 0x50], 0x64
mov byte [rbp - 0x4f], 0x54
mov byte [rbp - 0x4e], 0x64
mov byte [rbp - 0x4d], 0x5b
mov byte [rbp - 0x4c], 0x64
mov byte [rbp - 0x4b], 0x1a
mov byte [rbp - 0x4a], 0x64
mov byte [rbp - 0x49], 0x76
mov byte [rbp - 0x48], 0x64
mov byte [rbp - 0x47], 0x21
mov byte [rbp - 0x46], 0x64
mov byte [rbp - 0x45], 0x5f
mov byte [rbp - 0x44], 0x64
mov byte [rbp - 0x43], 0x11
mov byte [rbp - 0x42], 0x64
mov byte [rbp - 0x41], 0x3f
mov byte [rbp - 0x40], 0x64
mov byte [rbp - 0x3f], 0x68
mov byte [rbp - 0x3e], 0x64
mov byte [rbp - 0x3d], 0x78
mov byte [rbp - 0x3c], 0x64
mov byte [rbp - 0x3b], 0x20
mov byte [rbp - 0x3a], 0x64
mov byte [rbp - 0x39], 0x64
mov byte [rbp - 0x38], 0x64
movzx eax, byte [rbp - 0x67]
movzx eax, byte [rbp - 0x68]
test al, al
jne 0x140043161
mov r8, r14
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x67]
mov eax, 0x64
sub eax, ecx
imul ecx, eax, 0x27
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x67], cl
inc r8
cmp r8, 0x30
jb 0x140043110
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x240], xmm1
lea rax, [rbp - 0x67]
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140043180
lea rdx, [rbp - 0x67]
lea rcx, [rbp + 0x230]
call fcn.140028760
nop
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x368]
call fcn.14003ca70
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 8
jb 0x1400431f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400431f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043ccc
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x240], xmm0
mov word [rbp + 0x230], r14w
lea rdx, [rbp + 0x368]
cmp qword [rbp + 0x380], 8
cmovae rdx, qword [rbp + 0x368]
xor r9d, r9d
lea r8, [rbp + 0x3f8]
mov rbx, qword [rbp + 0x2e8]
mov rcx, rbx
call qword [sym.imp.gdiplus.dll_GdipSaveImageToFile]
test eax, eax
je 0x140043351
mov rdx, qword [rbp + 0x380]
cmp rdx, 8
jb 0x14004328d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x368]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140043288
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cb4
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
mov word [rbp + 0x368], r14w
movdqu xmmword [rbp + 0x378], xmm0
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
nop
mov rcx, qword [rbp + 0x2e0]
call qword [sym.imp.gdiplus.dll_GdipDeleteBrush]
nop
mov rcx, qword [rbp + 0x328]
call qword [sym.imp.gdiplus.dll_GdipDeleteFont]
nop
mov rdx, qword [rbp + 0x350]
cmp rdx, 8
jb 0x140043315
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x338]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140043310
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cba
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x348], xmm0
mov word [rbp + 0x338], r14w
mov rcx, qword [rbp + 0x358]
call qword [sym.imp.gdiplus.dll_GdipDeletePen]
nop
mov rcx, qword [rbp + 0x2d8]
call qword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
nop
mov rcx, rbx
jmp 0x140043c75
lea r8, [rbp + 0x368]
cmp qword [rbp + 0x380], 8
cmovae r8, qword [rbp + 0x368]
xor edx, edx
lea ecx, [rdx + 0x14]
lea r9d, [rdx + 3]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x140043247
mov byte [rsp + 0x78], 0
mov byte [rsp + 0x79], 0x7d
mov byte [rsp + 0x7a], 0x76
mov byte [rsp + 0x7b], 0x1c
mov byte [rsp + 0x7c], 0x76
mov byte [rsp + 0x7d], 0x3d
mov byte [rsp + 0x7e], 0x76
mov byte [rsp + 0x7f], 0x3d
mov byte [rbp - 0x80], 0x76
mov byte [rbp - 0x7f], 0x49
mov byte [rbp - 0x7e], 0x76
mov byte [rbp - 0x7d], 0x1c
mov byte [rbp - 0x7c], 0x76
mov byte [rbp - 0x7b], 0x49
mov byte [rbp - 0x7a], 0x76
mov byte [rbp - 0x79], 0x28
mov byte [rbp - 0x78], 0x76
mov byte [rbp - 0x77], 0x4f
mov byte [rbp - 0x76], 0x76
mov byte [rbp - 0x75], 0x71
mov byte [rbp - 0x74], 0x76
mov byte [rbp - 0x73], 0x55
mov byte [rbp - 0x72], 0x76
mov byte [rbp - 0x71], 0x64
mov byte [rbp - 0x70], 0x76
mov byte [rbp - 0x6f], 0x3d
mov byte [rbp - 0x6e], 0x76
mov byte [rbp - 0x6d], 0x28
mov byte [rbp - 0x6c], 0x76
mov byte [rbp - 0x6b], 0x76
mov byte [rbp - 0x6a], 0x76
movzx eax, byte [rsp + 0x79]
movzx eax, byte [rsp + 0x78]
test al, al
jne 0x140043471
mov r8, r14
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rsp + r8 + 0x79]
mov eax, 0x76
sub eax, ecx
imul ecx, eax, 0x2a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rsp + r8 + 0x79], cl
inc r8
cmp r8, 0x1e
jb 0x140043420
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x280], xmm1
lea rax, [rsp + 0x79]
mov r8, rdi
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140043490
lea rdx, [rsp + 0x79]
lea rcx, [rbp + 0x270]
call fcn.140028760
nop
mov byte [rbp - 0x30], 0
mov byte [rbp - 0x2f], 0x54
mov byte [rbp - 0x2e], 0xb
mov byte [rbp - 0x2d], 0x32
mov byte [rbp - 0x2c], 0xb
mov byte [rbp - 0x2b], 0x76
mov byte [rbp - 0x2a], 0xb
mov byte [rbp - 0x29], 0x67
mov byte [rbp - 0x28], 0xb
mov byte [rbp - 0x27], 0x23
mov byte [rbp - 0x26], 0xb
mov byte [rbp - 0x25], 0x38
mov byte [rbp - 0x24], 0xb
mov byte [rbp - 0x23], 0x6a
mov byte [rbp - 0x22], 0xb
mov byte [rbp - 0x21], 0xd
mov byte [rbp - 0x20], 0xb
mov byte [rbp - 0x1f], 0xd
mov byte [rbp - 0x1e], 0xb
mov byte [rbp - 0x1d], 0x76
mov byte [rbp - 0x1c], 0xb
mov byte [rbp - 0x1b], 0x10
mov byte [rbp - 0x1a], 0xb
mov byte [rbp - 0x19], 0x4b
mov byte [rbp - 0x18], 0xb
mov byte [rbp - 0x17], 0x23
mov byte [rbp - 0x16], 0xb
mov byte [rbp - 0x15], 0x6a
mov byte [rbp - 0x14], 0xb
mov byte [rbp - 0x13], 0x2c
mov byte [rbp - 0x12], 0xb
mov byte [rbp - 0x11], 0x76
mov byte [rbp - 0x10], 0xb
mov byte [rbp - 0xf], 0xd
mov byte [rbp - 0xe], 0xb
mov byte [rbp - 0xd], 0x45
mov byte [rbp - 0xc], 0xb
mov byte [rbp - 0xb], 0x38
mov byte [rbp - 0xa], 0xb
mov byte [rbp - 9], 0x17
mov byte [rbp - 8], 0xb
mov byte [rbp - 7], 0x77
mov byte [rbp - 6], 0xb
mov byte [rbp - 5], 0x33
mov byte [rbp - 4], 0xb
mov byte [rbp - 3], 0x74
mov byte [rbp - 2], 0xb
mov byte [rbp - 1], 0x17
mov byte [rbp], 0xb
mov byte [rbp + 1], 0x39
mov byte [rbp + 2], 0xb
mov byte [rbp + 3], 0x72
mov byte [rbp + 4], 0xb
mov byte [rbp + 5], 0x4e
mov byte [rbp + 6], 0xb
mov byte [rbp + 7], 0x61
mov byte [rbp + 8], 0xb
mov byte [rbp + 9], 0x77
mov byte [rbp + 0xa], 0xb
mov byte [rbp + 0xb], 0x5e
mov byte [rbp + 0xc], 0xb
mov byte [rbp + 0xd], 0x39
mov byte [rbp + 0xe], 0xb
mov byte [rbp + 0xf], 0x45
mov byte [rbp + 0x10], 0xb
mov byte [rbp + 0x11], 0x57
mov byte [rbp + 0x12], 0xb
mov byte [rbp + 0x13], 0x5e
mov byte [rbp + 0x14], 0xb
mov byte [rbp + 0x15], 0x14
mov byte [rbp + 0x16], 0xb
mov byte [rbp + 0x17], 0x1a
mov byte [rbp + 0x18], 0xb
mov byte [rbp + 0x19], 0x33
mov byte [rbp + 0x1a], 0xb
mov byte [rbp + 0x1b], 0x17
mov byte [rbp + 0x1c], 0xb
mov byte [rbp + 0x1d], 0x36
mov byte [rbp + 0x1e], 0xb
mov byte [rbp + 0x1f], 0xb
mov byte [rbp + 0x20], 0xb
movzx eax, byte [rbp - 0x2f]
movzx eax, byte [rbp - 0x30]
test al, al
jne 0x140043655
mov r9, r14
movzx ecx, byte [rbp + r9 - 0x2f]
sub ecx, 0xb
imul r8d, ecx, 0x29
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 0x2f], r8b
inc r9
cmp r9, 0x50
jb 0x140043600
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x260], xmm1
lea rax, [rbp - 0x2f]
mov r8, rdi
inc r8
cmp word [rax + r8*2], 0
jne 0x140043671
lea rdx, [rbp - 0x2f]
lea rcx, [rbp + 0x250]
call fcn.140028760
nop
mov dword [rsp + 0x20], 1
mov r9d, 2
lea r8, [0x1400da24c]
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x250]
call fcn.14003f710
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 8
jb 0x1400436fc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400436f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cd2
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x260], xmm0
mov word [rbp + 0x250], r14w
mov rdx, qword [rbp + 0x288]
cmp rdx, 8
jb 0x14004375a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043755
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cd8
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x280], xmm0
mov word [rbp + 0x270], r14w
mov byte [rsp + 0x58], 0
mov byte [rsp + 0x59], 0x19
mov byte [rsp + 0x5a], 0x50
mov byte [rsp + 0x5b], 0x2b
mov byte [rsp + 0x5c], 0x50
mov byte [rsp + 0x5d], 0x64
mov byte [rsp + 0x5e], 0x50
mov byte [rsp + 0x5f], 0x5e
mov byte [rsp + 0x60], 0x50
mov byte [rsp + 0x61], 0x52
mov byte [rsp + 0x62], 0x50
mov byte [rsp + 0x63], 0x12
mov byte [rsp + 0x64], 0x50
mov byte [rsp + 0x65], 0x64
mov byte [rsp + 0x66], 0x50
mov byte [rsp + 0x67], 0x64
mov byte [rsp + 0x68], 0x50
mov byte [rsp + 0x69], 0x31
mov byte [rsp + 0x6a], 0x50
mov byte [rsp + 0x6b], 0x12
mov byte [rsp + 0x6c], 0x50
mov byte [rsp + 0x6d], 0x31
mov byte [rsp + 0x6e], 0x50
mov byte [rsp + 0x6f], 0x5e
mov byte [rsp + 0x70], 0x50
mov byte [rsp + 0x71], 0x57
mov byte [rsp + 0x72], 0x50
mov byte [rsp + 0x73], 0x50
mov byte [rsp + 0x74], 0x50
movzx eax, byte [rsp + 0x59]
movzx eax, byte [rsp + 0x58]
test al, al
jne 0x140043874
mov r8, r14
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rsp + r8 + 0x59]
mov eax, 0x50
sub eax, ecx
lea ecx, [rax + rax*4]
shl ecx, 2
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rsp + r8 + 0x59], cl
inc r8
cmp r8, 0x1c
jb 0x140043820
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2c0], xmm1
lea rax, [rsp + 0x59]
mov r8, rdi
inc r8
cmp word [rax + r8*2], 0
jne 0x140043891
lea rdx, [rsp + 0x59]
lea rcx, [rbp + 0x2b0]
call fcn.140028760
nop
mov byte [rbp + 0x30], 0
mov byte [rbp + 0x31], 8
mov byte [rbp + 0x32], 0x55
mov byte [rbp + 0x33], 0x3f
mov byte [rbp + 0x34], 0x55
mov byte [rbp + 0x35], 0x50
mov byte [rbp + 0x36], 0x55
mov byte [rbp + 0x37], 0x6c
mov byte [rbp + 0x38], 0x55
mov byte [rbp + 0x39], 0x5b
mov byte [rbp + 0x3a], 0x55
mov byte [rbp + 0x3b], 1
mov byte [rbp + 0x3c], 0x55
mov byte [rbp + 0x3d], 0x4d
mov byte [rbp + 0x3e], 0x55
mov byte [rbp + 0x3f], 0x16
mov byte [rbp + 0x40], 0x55
mov byte [rbp + 0x41], 0x16
mov byte [rbp + 0x42], 0x55
mov byte [rbp + 0x43], 0x50
mov byte [rbp + 0x44], 0x55
mov byte [rbp + 0x45], 0x76
mov byte [rbp + 0x46], 0x55
mov byte [rbp + 0x47], 0x65
mov byte [rbp + 0x48], 0x55
mov byte [rbp + 0x49], 0x5b
mov byte [rbp + 0x4a], 0x55
mov byte [rbp + 0x4b], 0x4d
mov byte [rbp + 0x4c], 0x55
mov byte [rbp + 0x4d], 0x7d
mov byte [rbp + 0x4e], 0x55
mov byte [rbp + 0x4f], 0x50
mov byte [rbp + 0x50], 0x55
mov byte [rbp + 0x51], 0x16
mov byte [rbp + 0x52], 0x55
mov byte [rbp + 0x53], 0x24
mov byte [rbp + 0x54], 0x55
mov byte [rbp + 0x55], 1
mov byte [rbp + 0x56], 0x55
mov byte [rbp + 0x57], 0x58
mov byte [rbp + 0x58], 0x55
mov byte [rbp + 0x59], 0x70
mov byte [rbp + 0x5a], 0x55
mov byte [rbp + 0x5b], 0x5f
mov byte [rbp + 0x5c], 0x55
mov byte [rbp + 0x5d], 0x10
mov byte [rbp + 0x5e], 0x55
mov byte [rbp + 0x5f], 0x58
mov byte [rbp + 0x60], 0x55
mov byte [rbp + 0x61], 0x21
mov byte [rbp + 0x62], 0x55
mov byte [rbp + 0x63], 0x4f
mov byte [rbp + 0x64], 0x55
mov byte [rbp + 0x65], 0x46
mov byte [rbp + 0x66], 0x55
mov byte [rbp + 0x67], 0x2b
mov byte [rbp + 0x68], 0x55
mov byte [rbp + 0x69], 0x70
mov byte [rbp + 0x6a], 0x55
mov byte [rbp + 0x6b], 0x4a
mov byte [rbp + 0x6c], 0x55
mov byte [rbp + 0x6d], 0x21
mov byte [rbp + 0x6e], 0x55
mov byte [rbp + 0x6f], 0x24
mov byte [rbp + 0x70], 0x55
mov byte [rbp + 0x71], 0x68
mov byte [rbp + 0x72], 0x55
mov byte [rbp + 0x73], 0x4a
mov byte [rbp + 0x74], 0x55
mov byte [rbp + 0x75], 0x77
mov byte [rbp + 0x76], 0x55
mov byte [rbp + 0x77], 0x39
mov byte [rbp + 0x78], 0x55
mov byte [rbp + 0x79], 0x5f
mov byte [rbp + 0x7a], 0x55
mov byte [rbp + 0x7b], 0x58
mov byte [rbp + 0x7c], 0x55
mov byte [rbp + 0x7d], 0x40
mov byte [rbp + 0x7e], 0x55
mov byte [rbp + 0x7f], 0x55
mov byte [rbp + 0x80], 0x55
movzx eax, byte [rbp + 0x31]
movzx eax, byte [rbp + 0x30]
test al, al
jne 0x140043a65
mov r9, r14
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + r9 + 0x31]
sub ecx, 0x55
imul r8d, ecx, 0x25
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 + 0x31], r8b
inc r9
cmp r9, 0x50
jb 0x140043a10
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2a0], xmm1
lea rax, [rbp + 0x31]
nop
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140043a80
mov r8, rdi
lea rdx, [rbp + 0x31]
lea rcx, [rbp + 0x290]
call fcn.140028760
nop
mov dword [rsp + 0x20], 1
mov r9d, 2
lea r8, [0x1400da250]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x290]
call fcn.14003f710
nop
mov rdx, qword [rbp + reloc.SHELL32.dll_IsUserAnAdmin]
cmp rdx, 8
jb 0x140043b0d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043b08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cde
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x2a0], xmm0
mov word [rbp + 0x290], r14w
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 8
jb 0x140043b6c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043b66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043ce4
call fcn.1400652cc
nop
mov rdx, qword [rbp + 0x380]
cmp rdx, 8
jb 0x140043bb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043bad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cb4
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
movdqu xmmword [rbp + 0x378], xmm0
mov word [rbp + 0x368], r14w
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
nop
mov rcx, qword [rbp + 0x2e0]
call qword [sym.imp.gdiplus.dll_GdipDeleteBrush]
nop
mov rcx, qword [rbp + 0x328]
call qword [sym.imp.gdiplus.dll_GdipDeleteFont]
nop
mov rdx, qword [rbp + 0x350]
cmp rdx, 8
jb 0x140043c3a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043c35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043cba
call fcn.1400652cc
movdqa xmm0, xmmword [0x1400da2f0]
mov word [rbp + 0x338], r14w
movdqu xmmword [rbp + 0x348], xmm0
mov rcx, qword [rbp + 0x358]
call qword [sym.imp.gdiplus.dll_GdipDeletePen]
nop
mov rcx, qword [rbp + 0x2d8]
call qword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
nop
mov rcx, qword [rbp + 0x2e8]
call qword [sym.imp.gdiplus.dll_GdipDisposeImage]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov rcx, qword [rbp + 0x408]
xor rcx, rsp
call fcn.140065270
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
nop
call fcn.140099524
int3