Function at 0x14004a800
Capabilities:
Manipulate console buffer

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3fd0]
mov eax, 0x40d0
call fcn.140189b30
sub rsp, rax
mov rax, qword [0x14028a3e8]
xor rax, rsp
mov qword [rbp + 0x3fc0], rax
mov r13, rcx
mov qword [rbp - 0x68], rdx
xor ecx, ecx
lea r12, [rbp - 0x40]
mov edi, ecx
mov dword [rsp + 0x34], ecx
mov edx, 0xffffffff
mov qword [rsp + 0x40], r12
movzx eax, byte [r13 + 0x11c]
mov r15, r9
mov ebx, dword [r13 + 0x118]
movzx esi, byte [r13 + 0x11d]
movzx r14d, byte [r13 + 0x11e]
mov dword [r9], ecx
mov rcx, qword [0x140296af0]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x38], ebx
mov byte [rsp + 0x31], sil
mov byte [rsp + 0x30], r14b
call qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
test eax, eax
jne 0x14004bc90
xor edx, edx
mov r11d, 0x2000
mov dword [rsp + 0x54], edx
mov eax, edx
mov qword [rsp + 0x60], rdx
mov rcx, qword [rbp - 0x68]
add rax, rax
cmp dword [reloc.WS2_32.dll_accept], 0
movups xmm0, xmmword [rcx + rax*8]
movups xmmword [rsp + 0x68], xmm0
mov eax, dword [rsp + 0x68]
jne 0x14004aa16
test eax, eax
je 0x14004aa16
mov rbx, qword [rsp + 0x70]
mov r9d, eax
mov dword [rsp + 0x28], edx
mov r8, rbx
mov qword [rsp + 0x20], rdx
mov ecx, 0xfde9
xor edx, edx
call qword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
mov edi, eax
test eax, eax
je 0x14004bba0
lea r12d, [rax*2 + 2]
mov esi, 0x2000
xor eax, eax
mov dword [rsp + 0x3c], r12d
cmp r12d, esi
seta al
mov dword [rsp + 0x34], eax
jbe 0x14004a936
mov ecx, r12d
call qword [fcn.140192c64]
mov qword [rsp + 0x40], rax
jmp 0x14004a93b
mov rax, qword [rsp + 0x40]
mov r9d, dword [rsp + 0x68]
mov r8, rbx
mov dword [rsp + 0x28], edi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
test eax, eax
je 0x14004bb78
mov r12, qword [rsp + 0x40]
xor r14d, r14d
mov esi, r14d
mov r11d, 0x2000
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004a9b5
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x78]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004a9af
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004a972
movzx r14d, byte [rsp + 0x30]
cmp dword [rsp + 0x3c], r11d
jbe 0x14004aa04
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
movzx esi, byte [rsp + 0x31]
xor edx, edx
mov dword [rsp + 0x34], edx
mov r11d, 0x2000
mov edi, edx
mov dword [rax], ebx
lea rax, [rbp - 0x40]
mov ebx, dword [rsp + 0x38]
mov qword [rsp + 0x40], rax
jmp 0x14004acc9
mov ebx, dword [rsp + 0x38]
xor edx, edx
movzx esi, byte [rsp + 0x31]
mov edi, edx
jmp 0x14004acc9
mov dword [rsp + 0x3c], edx
mov ecx, edx
test eax, eax
je 0x14004acc9
nop dword [rax]
nop dword [rax + rax]
mov rdx, qword [rsp + 0x70]
mov r10d, dword [rsp + 0x48]
mov eax, ecx
movzx edx, byte [rax + rdx]
movzx eax, dl
test r10b, r10b
jne 0x14004aa87
not al
movzx eax, al
bsr r8d, eax
je 0x14004aac5
cmp r8d, 7
jne 0x14004aa5f
movzx r9d, dl
jmp 0x14004aacb
cmp r8d, 5
ja 0x14004aac5
mov ecx, 8
movzx eax, dl
sub ecx, r8d
mov r9d, 0xff
sar r9d, cl
mov r10d, 6
and r9d, eax
sub r10b, r8b
jmp 0x14004aaa1
and al, 0xc0
cmp al, 0x80
jne 0x14004aaba
movzx r9d, dl
mov eax, ebx
and r9d, 0x3f
shl eax, 6
add r10b, 0xff
or r9d, eax
mov ecx, dword [rsp + 0x3c]
mov dword [rsp + 0x38], r9d
mov dword [rsp + 0x48], r10d
test r10b, r10b
jne 0x14004acad
jmp 0x14004aad0
dec ecx
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x3c], ecx
mov r9d, 0xfffd
mov dword [rsp + 0x38], r9d
test r14b, r14b
jne 0x14004ab0a
cmp r9d, 0x1b
je 0x14004aafd
cmp r9d, 0x9b
jne 0x14004ae8e
mov r14b, 4
mov byte [r13 + 0x11f], 0
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
mov r14b, 2
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
cmp r14b, 2
jne 0x14004b11f
lea eax, [r9 - 0x1b]
cmp eax, 0x48
ja case.0x14004ab3a.28
lea rdx, sym.imp.advapi32.dll_RegEnumKeyW
movzx eax, byte [rdx + rax + 0x4bcb4]
mov ecx, dword [rdx + rax*4 + 0x4bc98]
add rcx, rdx
jmp rcx
mov r14b, 4
mov byte [r13 + 0x11f], 0
jmp 0x14004aca4
mov r14b, 8
jmp 0x14004aca4
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004aba3
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x7c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004ab9d
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004ab60
cmp dword [rsp + 0x34], r14d
je 0x14004abd5
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
lea r12, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
mov edi, r14d
movzx esi, word [reloc.WS2_32.dll_getsockopt]
mov dword [rsp + 0x4c], r14d
cmp dword [r15], r14d
jne 0x14004ac9f
mov rcx, qword [r13 + 0x110]
movzx edx, si
call qword [sym.imp.KERNEL32.DLL_SetConsoleTextAttribute]
test eax, eax
je 0x14004ac96
mov rcx, qword [r13 + 0x110]
mov ebx, r14d
mov edx, ebx
call qword [sym.imp.KERNEL32.DLL_SetConsoleCursorPosition]
test eax, eax
je 0x14004ac96
nop dword [rax + rax]
mov rcx, qword [r13 + 0x110]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.DLL_GetConsoleScreenBufferInfo]
test eax, eax
je 0x14004ac96
movsx eax, word [rbp - 0x60]
mov edx, DecryptFileW
movsx r8d, word [rbp - 0x5e]
mov r9d, ebx
mov rcx, qword [r13 + 0x110]
imul r8d, eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.DLL_FillConsoleOutputCharacterW]
test eax, eax
je 0x14004ac8b
mov r8d, dword [rsp + 0x50]
lea rax, [rsp + 0x50]
mov rcx, qword [r13 + 0x110]
mov r9d, ebx
movzx edx, si
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.DLL_FillConsoleOutputAttribute]
test eax, eax
jne 0x14004acf3
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x57
je 0x14004ac20
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
movzx esi, byte [rsp + 0x31]
mov byte [rsp + 0x30], r14b
mov ecx, dword [rsp + 0x3c]
mov ebx, dword [rsp + 0x38]
xor edx, edx
inc ecx
mov r11d, 0x2000
mov dword [rsp + 0x3c], ecx
cmp ecx, dword [rsp + 0x68]
jb 0x14004aa30
mov ecx, dword [rsp + 0x54]
mov rax, qword [rsp + 0x60]
inc ecx
mov r12, qword [rsp + 0x40]
inc rax
mov dword [rsp + 0x54], ecx
mov qword [rsp + 0x60], rax
cmp ecx, 1
jae 0x14004bba9
jmp 0x14004a8b2
movsx eax, word [rbp - 0x60]
mov ecx, r14d
movsx edx, word [rbp - 0x50]
mov dword [0x14028b7d0], eax
movsx eax, word [rbp - 0x54]
sub edx, eax
mov dword [0x14028b68c], r14d
movsx eax, word [rbp - 0x5a]
inc edx
sub eax, edx
mov dword [0x14028b7c0], edx
inc eax
test eax, eax
jle 0x14004ad2d
mov dword [0x14028b68c], eax
mov ecx, eax
movsx r8d, word [rbp - 0x5e]
lea eax, [rdx + rcx]
cmp eax, r8d
jle 0x14004ad45
mov ecx, r8d
sub ecx, edx
mov dword [0x14028b68c], ecx
test ecx, ecx
jns 0x14004ac9f
mov dword [0x14028b68c], r14d
jmp 0x14004ac9f
xor r14d, r14d
mov esi, r14d
nop
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004ada2
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x80]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004ad9c
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004ad60
cmp dword [rsp + 0x34], r14d
je 0x14004add4
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
lea r12, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
mov r8, r15
mov dl, 1
mov rcx, r13
mov edi, r14d
call fcn.14004a570
jmp 0x14004ac9f
xor r14d, r14d
mov esi, r14d
nop
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004ae32
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x7c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004ae2c
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004adf0
cmp dword [rsp + 0x34], r14d
je 0x14004ae64
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
lea r12, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
mov r8, r15
mov dl, 1
mov rcx, r13
mov edi, r14d
call fcn.14004a6a0
jmp 0x14004ac9f
xor r14b, r14b
lea eax, [r9 - 0x40]
mov byte [rsp + 0x30], r14b
cmp eax, 0x1f
jbe case.0x14004ab3a.27
cmp r9d, 0xffff
jbe 0x14004aea2
mov eax, 0xfffd
mov dword [rsp + 0x38], eax
jmp 0x14004aec3
cmp r9d, 0xa
je 0x14004b025
cmp r9d, 0xd
je 0x14004af7f
cmp r9d, 0xffff
ja case.0x14004ab3a.27
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 1
jae 0x14004af61
xor r14d, r14d
mov esi, r14d
nop dword [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004af22
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x78]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004af1c
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004aee0
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14004af5d
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14004af5f
xor eax, eax
mov edi, eax
mov ebx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x3c]
mov eax, edi
inc edi
xor sil, sil
mov byte [rsp + 0x31], sil
mov word [rbp + rax*2 - 0x40], bx
jmp 0x14004acb1
cmp sil, 0xa
je 0x14004b111
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 1
jae 0x14004b107
xor r14d, r14d
mov esi, r14d
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004afe3
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x70]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004afdd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004afa1
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14004b0fe
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14004b100
cmp sil, 0xd
je 0x14004af89
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 2
jae 0x14004b0d6
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14004b092
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x74]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004b08c
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004b050
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14004b0cd
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14004b0cf
xor eax, eax
mov r9d, dword [rsp + 0x38]
mov edi, eax
mov eax, edi
mov ecx, reloc.WS2_32.dll_listen
inc edi
mov byte [rsp + 0x31], r9b
movzx esi, r9b
mov word [rbp + rax*2 - 0x40], cx
mov ecx, 0xa
mov word [rbp + rdi*2 - 0x40], cx
inc edi
jmp case.0x14004ab3a.27
xor eax, eax
mov r9d, dword [rsp + 0x38]
mov edi, eax
mov eax, edi
inc edi
mov word [rbp + rax*2 - 0x40], r9w
movzx esi, r9b
mov byte [rsp + 0x31], r9b
jmp case.0x14004ab3a.27
test r14b, 4
je 0x14004bacc
test r14b, 0x10
jne 0x14004baae
lea eax, [r9 - 0x30]
cmp eax, 9
ja 0x14004b1dc
movzx eax, byte [r13 + 0x11f]
mov ebx, dword [rsp + 0x38]
test r14b, 0x20
jne 0x14004b18f
cmp al, 4
jb 0x14004b164
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14004acb1
or r14b, 0x20
inc al
mov byte [rsp + 0x30], r14b
movzx ecx, al
lea eax, [r9 - 0x30]
mov byte [r13 + 0x11f], cl
mov word [r13 + rcx*2 + 0x11e], ax
mov ecx, dword [rsp + 0x3c]
jmp 0x14004acb1
movzx eax, al
lea rdx, [rax*2]
movzx eax, word [rdx + r13 + 0x11e]
lea ecx, [rax + rax*4]
add ecx, ecx
cmp ecx, 0xffff
jbe 0x14004b1c2
mov ecx, dword [rsp + 0x3c]
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14004acb1
sub cx, 0x30
add cx, r9w
mov word [rdx + r13 + 0x11e], cx
mov ecx, dword [rsp + 0x3c]
jmp 0x14004acb1
cmp r9d, 0x3b
jne 0x14004b230
test r14b, 0x20
je 0x14004b1f6
and r14b, 0xdf
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
movzx eax, byte [r13 + 0x11f]
mov ebx, dword [rsp + 0x38]
cmp al, 4
jb 0x14004b214
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14004acb1
inc al
movzx eax, al
xor edx, edx
mov byte [r13 + 0x11f], al
mov word [r13 + rax*2 + 0x11e], dx
jmp 0x14004acb3
cmp r9d, 0x3f
jne 0x14004b258
test r14b, 0x20
jne 0x14004b24a
cmp byte [r13 + 0x11f], 0
je 0x14004acad
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
lea eax, [r9 - 0x40]
cmp eax, 0x3e
ja 0x14004b24a
movzx edx, byte [r13 + 0x11f]
test dl, dl
jne 0x14004b273
cmp r9d, 0x5b
je 0x14004b24a
lea eax, [r9 - 0x41]
cmp eax, 0x34
ja case.0x14004b29b.73
lea r8, sym.imp.advapi32.dll_RegEnumKeyW
movzx eax, byte [r8 + rax + 0x4bd40]
mov ecx, dword [r8 + rax*4 + 0x4bd00]
add rcx, r8
jmp rcx
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b2a1
cmp dword [rsp + 0x34], 0
je 0x14004b2e4
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b2ff
movzx r9d, word [r13 + 0x120]
jmp 0x14004b305
mov r9d, 1
neg r9d
mov r8b, 1
xor edx, edx
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], 1
mov rcx, r13
call fcn.140049dc0
movzx esi, byte [rsp + 0x31]
mov ebx, dword [rsp + 0x38]
xor edx, edx
mov ecx, dword [rsp + 0x3c]
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14004acb3
xor eax, eax
mov esi, eax
nop
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b340
cmp dword [rsp + 0x34], 0
je 0x14004b383
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b3a1
movzx r9d, word [r13 + 0x120]
jmp 0x14004b308
mov r9d, 1
jmp 0x14004b308
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b3b0
cmp dword [rsp + 0x34], 0
je 0x14004b3f3
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b417
movzx edx, word [r13 + 0x120]
xor r9d, r9d
mov r8b, 1
jmp 0x14004b30d
mov edx, 1
xor r9d, r9d
movzx r8d, dl
jmp 0x14004b30d
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b430
cmp dword [rsp + 0x34], 0
je 0x14004b473
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b499
movzx edx, word [r13 + 0x120]
mov r8b, 1
neg edx
xor r9d, r9d
jmp 0x14004b30d
mov edx, 1
mov r8b, 1
neg edx
xor r9d, r9d
jmp 0x14004b30d
xor eax, eax
mov esi, eax
nop
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b4b0
cmp dword [rsp + 0x34], 0
je 0x14004b4f3
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b514
movzx r9d, word [r13 + 0x120]
xor r8d, r8d
jmp 0x14004b30b
mov r9d, 1
xor r8d, r8d
jmp 0x14004b30b
xor eax, eax
mov esi, eax
nop word [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b530
cmp dword [rsp + 0x34], 0
je 0x14004b573
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b597
movzx r9d, word [r13 + 0x120]
neg r9d
xor r8d, r8d
jmp 0x14004b30b
mov r9d, 1
neg r9d
xor r8d, r8d
jmp 0x14004b30b
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b5b0
cmp dword [rsp + 0x34], 0
je 0x14004b5f3
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
cmp byte [r13 + 0x11f], 1
mov edi, ebx
mov dword [rsp + 0x34], ebx
jb 0x14004b622
movzx eax, word [r13 + 0x120]
test ax, ax
je 0x14004b622
movzx edx, ax
xor r9d, r9d
dec edx
xor r8d, r8d
jmp 0x14004b30d
xor r9d, r9d
mov edx, ebx
xor r8d, r8d
jmp 0x14004b30d
xor ecx, ecx
mov esi, ecx
nop dword [rax]
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], 0
jne 0x14004b686
mov eax, esi
lea r9, [rsp + 0x58]
mov qword [rsp + 0x20], rcx
mov r8d, ebx
mov rcx, qword [r13 + 0x110]
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004b67e
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
xor ecx, ecx
add esi, ebx
cmp esi, edi
jb 0x14004b640
cmp dword [rsp + 0x34], 0
je 0x14004b6a4
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
movzx ecx, byte [r13 + 0x11f]
xor ebx, ebx
mov dword [rsp + 0x34], ebx
mov edi, ebx
cmp cl, 1
jb 0x14004b6cf
movzx eax, word [r13 + 0x120]
test ax, ax
je 0x14004b6cf
movzx r9d, ax
dec r9d
jmp 0x14004b6d2
mov r9d, ebx
cmp cl, 2
jb 0x14004b6fa
movzx eax, word [r13 + 0x122]
test ax, ax
je 0x14004b6fa
movzx edx, ax
dec edx
mov qword [rsp + 0x28], r15
xor r8d, r8d
mov byte [rsp + 0x20], bl
jmp 0x14004b317
mov qword [rsp + 0x28], r15
mov edx, ebx
mov byte [rsp + 0x20], bl
xor r8d, r8d
jmp 0x14004b317
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b711
cmp dword [rsp + 0x34], 0
je 0x14004b754
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b789
movzx edx, word [r13 + 0x120]
cmp edx, 2
ja 0x14004b31f
mov r9, r15
mov r8b, 1
mov rcx, r13
call fcn.140049f40
jmp 0x14004b31f
mov edx, ebx
mov r9, r15
mov r8b, 1
mov rcx, r13
call fcn.140049f40
jmp 0x14004b31f
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b7a2
cmp dword [rsp + 0x34], 0
je 0x14004b7e5
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14004b81a
movzx edx, word [r13 + 0x120]
cmp edx, 2
ja 0x14004b31f
mov r9, r15
xor r8d, r8d
mov rcx, r13
call fcn.140049f40
jmp 0x14004b31f
mov edx, ebx
mov r9, r15
xor r8d, r8d
mov rcx, r13
call fcn.140049f40
jmp 0x14004b31f
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b833
cmp dword [rsp + 0x34], 0
je 0x14004b876
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov rdx, r15
mov rcx, r13
mov edi, ebx
call fcn.14004a200
mov dword [rsp + 0x34], ebx
jmp 0x14004b31f
xor r14d, r14d
mov esi, r14d
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b894
cmp dword [rsp + 0x34], r14d
je 0x14004b8d7
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov r8, r15
xor edx, edx
mov rcx, r13
mov edi, r14d
call fcn.14004a570
movzx esi, byte [rsp + 0x31]
xor edx, edx
mov ebx, dword [rsp + 0x38]
xor r14b, r14b
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x34], edx
jmp 0x14004acb3
xor eax, eax
mov esi, eax
nop dword [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b910
cmp dword [rsp + 0x34], 0
je 0x14004b953
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor edx, edx
mov edi, edx
mov dword [rsp + 0x34], edx
cmp dword [r15], edx
jne 0x14004b991
test dword [r13 + 0x58], 0x4000000
je 0x14004b991
movsx r9d, word [r13 + 0x12a]
xor r8d, r8d
movsx edx, word [r13 + 0x128]
mov rcx, r13
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], dil
call fcn.140049dc0
xor edx, edx
movzx esi, byte [rsp + 0x31]
xor r14b, r14b
mov ebx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
jmp 0x14004acb3
cmp dl, 1
jne case.0x14004b29b.73
cmp word [r13 + 0x120], 0x19
jne case.0x14004b29b.73
xor r14d, r14d
mov esi, r14d
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004b9d0
cmp dword [rsp + 0x34], r14d
je 0x14004ba13
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor edx, edx
mov r8, r15
mov rcx, r13
mov edi, r14d
call fcn.14004a780
movzx esi, byte [rsp + 0x31]
xor edx, edx
mov ebx, dword [rsp + 0x38]
xor r14b, r14b
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x34], edx
jmp 0x14004acb3
cmp dl, 1
jne case.0x14004b29b.73
cmp word [r13 + 0x120], 0x19
jne case.0x14004b29b.73
xor r14d, r14d
mov esi, r14d
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.140049d70
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14004ba61
cmp dword [rsp + 0x34], r14d
je 0x14004baa4
mov rcx, r12
call fcn.140045ce0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov edx, 1
jmp 0x14004ba15
mov ebx, dword [rsp + 0x38]
lea eax, [r9 - 0x40]
cmp eax, 0x3e
ja 0x14004acb1
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14004acb1
test r14b, 8
je 0x14004bc90
test r14b, 0x40
je 0x14004bb1f
test r14b, r14b
js 0x14004bb11
cmp r9d, 0x22
jne 0x14004baf5
and r14b, 0xbf
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
mov ebx, dword [rsp + 0x38]
cmp r9d, 0x5c
jne 0x14004acb1
or r14b, 0x80
mov byte [rsp + 0x30], r14b
jmp 0x14004acb1
and r14b, 0x7f
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
cmp r9d, 7
je 0x14004bb6b
cmp r9d, 0x5c
jne 0x14004bb3f
test r14b, 2
jne 0x14004bb6b
and r14b, 0xfd
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
cmp r9d, 0x1b
jne 0x14004bb53
or r14b, 2
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
cmp r9d, 0x22
jne 0x14004bb31
and r14b, 0x3d
or r14b, 0x40
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14004acad
cmp r12d, esi
jbe 0x14004bb9b
call fcn.140193ba0
mov r12, qword [rsp + 0x40]
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
mov dword [rax], ebx
jmp 0x14004bba0
mov r12, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
xor r14d, r14d
mov eax, 0x2000
mov esi, r14d
mov ebx, edi
sub ebx, esi
cmp ebx, eax
cmova ebx, eax
cmp dword [r15], r14d
jne 0x14004bbf4
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x58]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14004bbef
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r15], eax
mov eax, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14004bbb4
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14004bc1e
call fcn.140193ba0
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140192488]
call fcn.140193ba0
mov dword [rax], ebx
mov eax, dword [rsp + 0x48]
xor r8d, r8d
mov byte [r13 + 0x11c], al
mov eax, dword [rsp + 0x38]
mov dword [r13 + 0x118], eax
movzx eax, byte [rsp + 0x31]
lea edx, [r8 + 1]
mov byte [r13 + 0x11d], al
mov byte [r13 + 0x11e], r14b
mov rcx, qword [0x140296af0]
call qword [sym.imp.KERNEL32.DLL_ReleaseSemaphore]
test eax, eax
je 0x14004bc90
mov eax, dword [r15]
neg eax
sbb eax, eax
mov rcx, qword [rbp + 0x3fc0]
xor rcx, rsp
call fcn.140189130
mov rbx, qword [rsp + 0x4120]
add rsp, 0x40d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14019c3b8
int3