Function at 0x140066570
Capabilities:
Check os version
Query or enumerate registry value
Set registry value

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1340
call fcn.1401547f0
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x1378], rbx
mov qword [rsp + 0x1388], rsi
mov rax, qword [0x1401b5030]
xor rax, rsp
mov qword [rsp + 0x1330], rax
mov r12, r8
mov r13, rcx
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
lea rcx, str.SHCORE.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
xor eax, eax
mov r15d, eax
mov esi, eax
mov r14d, eax
test rbx, rbx
je 0x14006660d
lea rdx, str.SetProcessDPIAware
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
lea rdx, str.SetProcessDpiAwarenessContext
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
test rdi, rdi
je 0x140066625
lea rdx, str.SetProcessDpiAwareness
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov eax, 1
test r14, r14
je 0x14006663d
mov rcx, 0xfffffffffffffffc
call r14
test eax, eax
je 0x140066655
test rsi, rsi
je 0x140066649
mov ecx, 2
call rsi
test eax, eax
je 0x140066655
test r15, r15
je 0x140066655
call r15
test rbx, rbx
je 0x140066663
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test rdi, rdi
je 0x140066671
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, 2
call fcn.14012d310
mov rcx, rax
xor edx, edx
call fcn.140130ba0
xor edi, edi
mov qword [0x1402bb108], rdi
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x140066902
lea rdx, str.SetDllDirectoryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0c88], rax
test rax, rax
je 0x1400666ce
lea rcx, [0x14019581a]
call rax
jmp 0x140066902
mov dword [rsp + 0xa0], __WSAFDIsSet
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [rsp + 0xa4], 5
jne 0x140066902
mov eax, dword [rsp + 0xa8]
test eax, eax
jne 0x14006671d
lea rdx, str.Service_Pack_3
lea rcx, [rsp + 0xb4]
call fcn.140154a90
test eax, eax
jns 0x140066734
jmp 0x140066902
cmp eax, 1
jne 0x140066902
cmp byte [rsp + 0xb4], dil
jb 0x140066902
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 4
lea r8, str.Using_Win2k__SP3____WinXP__No_SP_.._Checking_SafeDllSearch_n
mov edx, 3
lea rcx, vtable.Log.0
call fcn.1400153f0
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rsi, str.SystemCurrentControlSetControlSession_Manager
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400667ff
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rbx, str.SafeDllSearchMode
mov rdx, rbx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x1400667f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rsi
lea r9, str.HKLM
lea r8, str.Could_not_read_reg_key__s_subkey__s_value:__s_nError:__u_n
mov edx, 3
lea rcx, vtable.Log.0
call fcn.1400153f0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14006682b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9, rsi
lea r8, str.Could_not_open_reg_subkey:__s_nError:__u_n
mov edx, 3
lea rcx, vtable.Log.0
call fcn.1400153f0
lea rbx, str.SafeDllSearchMode
mov edx, 3
lea rcx, vtable.Log.0
cmp dword [rsp + 0x44], edi
je 0x1400668f6
lea r8, str.Trying_to_set_SafeDllSearchMode_to_0_n
call fcn.1400153f0
mov dword [rsp + 0x44], edi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400668d3
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400668c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r8, str.Error_writing_SafeDllSearchMode._Error:__u_n
mov edx, 3
lea rcx, vtable.Log.0
call fcn.1400153f0
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140066902
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r8, str.Error_opening_Session_Manager_key_for_writing._Error:__u_n
mov edx, 3
lea rcx, vtable.Log.0
call fcn.1400153f0
jmp 0x140066902
lea r8, str.SafeDllSearchMode_is_set_to_0_n
call fcn.1400153f0
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x1220]
call fcn.14011fff0
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x1110]
call fcn.14011fff0
mov r8d, 0x104
lea rdx, [rsp + 0x1220]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14006695b
mov edx, 0x5c
lea rcx, [rsp + 0x1220]
call fcn.14011f744
mov byte [rax], dil
lea r8, [rsp + 0x1220]
mov edx, 0x104
lea rcx, [rsp + 0x1110]
call fcn.14012209c
lea r8, [0x1401987b4]
mov edx, 0x104
lea rcx, [rsp + 0x1110]
call fcn.1401220fc
lea r8, str.vnclang.dll
mov edx, 0x104
lea rcx, [rsp + 0x1110]
call fcn.1401220fc
lea rcx, [rsp + 0x1110]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
test rax, rax
cmove rcx, r13
mov qword [0x1402bb108], rcx
cmp byte [r12], dil
movzx eax, byte [reloc.WS2_32.dll_accept]
cmove eax, edi
mov byte [reloc.WS2_32.dll_accept], al
mov r9d, 0x3f
lea r8, [0x1402bc090]
mov edx, 0xc367
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbe10]
mov edx, 0xc368
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc390]
mov edx, 0xc36a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc590]
mov edx, 0xc36b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc490]
mov edx, 0xc36c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc410]
mov edx, 0xc36d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc450]
mov edx, 0xc36e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc190]
mov edx, 0xc36f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc310]
mov edx, 0xc370
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc650]
mov edx, 0xc371
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc250]
mov edx, 0xc372
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc810]
mov edx, 0xc373
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc8d0]
mov edx, 0xc374
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bba50]
mov edx, 0xc375
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbb10]
mov edx, 0xc376
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbf50]
mov edx, 0xc377
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbc90]
mov edx, 0xc378
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbb90]
mov edx, 0xc379
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bba90]
mov edx, 0xc37a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbc10]
mov edx, 0xc37b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb9d0]
mov edx, 0xc37c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbcd0]
mov edx, 0xc37d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbd50]
mov edx, 0xc37e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbad0]
mov edx, 0xc37f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbdd0]
mov edx, 0xc380
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbc50]
mov edx, 0xc381
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbe90]
mov edx, 0xc382
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bba10]
mov edx, 0xc383
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb8d0]
mov edx, 0xc384
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbed0]
mov edx, 0xc385
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb950]
mov edx, 0xc386
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb910]
mov edx, 0xc387
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbb50]
mov edx, 0xc388
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbd10]
mov edx, 0xc389
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbbd0]
mov edx, 0xc38a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbe50]
mov edx, 0xc38b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbf10]
mov edx, 0xc38c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb990]
mov edx, 0xc38d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbd90]
mov edx, 0xc38e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bddd0]
mov edx, 0xc38f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd250]
mov edx, 0xc390
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf710]
mov edx, 0xc391
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc910]
mov edx, 0xc393
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc850]
mov edx, 0xc394
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402be4d0]
mov edx, 0xc395
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf310]
mov edx, 0xc396
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bf410]
mov edx, 0xc397
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bc010]
mov edx, 0xc398
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc4d0]
mov edx, 0xc39a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bec90]
mov edx, 0xc39b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc1d0]
mov edx, 0xc39c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc290]
mov edx, 0xc39c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc710]
mov edx, 0xc39c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc990]
mov edx, 0xc39f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd790]
mov edx, 0xc3a0
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bdf10]
mov edx, 0xc3a1
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd410]
mov edx, 0xc3a2
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdd50]
mov edx, 0xc3a3
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd3d0]
mov edx, 0xc3a4
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be050]
mov edx, 0xc3a5
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc950]
mov edx, 0xc3a6
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd350]
mov edx, 0xc3a7
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd190]
mov edx, 0xc3a8
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc9d0]
mov edx, 0xc3a9
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdf90]
mov edx, 0xc3aa
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be090]
mov edx, 0xc3ab
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd310]
mov edx, 0xc3ac
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bda10]
mov edx, 0xc3ad
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bca90]
mov edx, 0xc3ae
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd690]
mov edx, 0xc3af
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdb10]
mov edx, 0xc3b0
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be110]
mov edx, 0xc3b1
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcf90]
mov edx, 0xc3b2
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcd50]
mov edx, 0xc3b3
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bded0]
mov edx, 0xc3b4
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd490]
mov edx, 0xc3b5
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd1d0]
mov edx, 0xc3b6
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd890]
mov edx, 0xc3b7
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd290]
mov edx, 0xc3b8
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdc50]
mov edx, 0xc3b9
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd9d0]
mov edx, 0xc3ba
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdcd0]
mov edx, 0xc3bb
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bda90]
mov edx, 0xc3bc
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bce10]
mov edx, 0xc3bd
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd390]
mov edx, 0xc3be
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcbd0]
mov edx, 0xc3bf
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcb90]
mov edx, 0xc3c0
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bda50]
mov edx, 0xc3c1
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd210]
mov edx, 0xc3c2
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd950]
mov edx, 0xc3c3
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bd6d0]
mov edx, 0xc3c4
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd4d0]
mov edx, 0xc3c5
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd7d0]
mov edx, 0xc3c6
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcb10]
mov edx, 0xc3c7
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bced0]
mov edx, 0xc3c8
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bd110]
mov edx, 0xc3c9
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdd10]
mov edx, 0xc3ca
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd090]
mov edx, 0xc3cb
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bc690]
mov edx, 0xc3cc
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be010]
mov edx, 0xc3cd
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd750]
mov edx, 0xc3ce
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcb50]
mov edx, 0xc3cf
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd990]
mov edx, 0xc3d0
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bde50]
mov edx, 0xc3d1
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcdd0]
mov edx, 0xc3d2
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdd90]
mov edx, 0xc3d3
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdb50]
mov edx, 0xc3d4
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcad0]
mov edx, 0xc3d5
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be0d0]
mov edx, 0xc3d6
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc110]
mov edx, 0xc3d7
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcd10]
mov edx, 0xc440
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcd90]
mov edx, 0xc441
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdad0]
mov edx, 0xc442
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bde10]
mov edx, 0xc443
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcc90]
mov edx, 0xc444
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd590]
mov edx, 0xc445
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcf10]
mov edx, 0xc446
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcc10]
mov edx, 0xc447
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd0d0]
mov edx, 0xc448
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bde90]
mov edx, 0xc449
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd510]
mov edx, 0xc44a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd050]
mov edx, 0xc44b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcf50]
mov edx, 0xc44c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bca50]
mov edx, 0xc44d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bd8d0]
mov edx, 0xc44e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd2d0]
mov edx, 0xc44f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc7d0]
mov edx, 0xc3d8
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc890]
mov edx, 0xc3d9
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc790]
mov edx, 0xc3da
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bc5d0]
mov edx, 0xc3db
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbfd0]
mov edx, 0xc3dc
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be250]
mov edx, 0xc3de
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be150]
mov edx, 0xc3dd
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x80
lea r8, [0x1402be190]
mov edx, 0xc3df
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be210]
mov edx, 0xc3e0
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc750]
mov edx, 0xc3e1
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc550]
mov edx, 0xc3e2
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bea90]
mov edx, 0xc3e4
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be310]
mov edx, 0xc3e5
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb7d0]
mov edx, 0xc3e6
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be750]
mov edx, 0xc3e7
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf750]
mov edx, 0xc3e8
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402becd0]
mov edx, 0xc3e9
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf1d0]
mov edx, 0xc3ea
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf690]
mov edx, 0xc3eb
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf390]
mov edx, 0xc3ec
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be410]
mov edx, 0xc3ed
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be610]
mov edx, 0xc3ee
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bee50]
mov edx, 0xc3ef
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402beb10]
mov edx, 0xc3f0
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb590]
mov edx, 0xc3f1
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be650]
mov edx, 0xc3f2
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bef90]
mov edx, 0xc3f3
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb710]
mov edx, 0xc3f4
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be290]
mov edx, 0xc3f5
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402beed0]
mov edx, 0xc3f6
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be690]
mov edx, 0xc3f7
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bed90]
mov edx, 0xc3f8
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be390]
mov edx, 0xc3f9
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb750]
mov edx, 0xc3fa
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be5d0]
mov edx, 0xc3fb
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bee10]
mov edx, 0xc3fc
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf550]
mov edx, 0xc3fd
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf6d0]
mov edx, 0xc3fe
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb610]
mov edx, 0xc3ff
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bea50]
mov edx, 0xc400
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb650]
mov edx, 0xc401
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf350]
mov edx, 0xc402
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be590]
mov edx, 0xc403
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bed50]
mov edx, 0xc404
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be450]
mov edx, 0xc405
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf110]
mov edx, 0xc406
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be850]
mov edx, 0xc407
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be910]
mov edx, 0xc408
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb890]
mov edx, 0xc409
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf010]
mov edx, 0xc40a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402beb90]
mov edx, 0xc40b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be7d0]
mov edx, 0xc40c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb790]
mov edx, 0xc40d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb6d0]
mov edx, 0xc40e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf0d0]
mov edx, 0xc40f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be550]
mov edx, 0xc410
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be350]
mov edx, 0xc411
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be950]
mov edx, 0xc412
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bedd0]
mov edx, 0xc413
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be490]
mov edx, 0xc414
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bed10]
mov edx, 0xc415
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bebd0]
mov edx, 0xc416
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf2d0]
mov edx, 0xc417
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb5d0]
mov edx, 0xc418
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf050]
mov edx, 0xc419
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bec50]
mov edx, 0xc41a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf090]
mov edx, 0xc41b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be710]
mov edx, 0xc41c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be2d0]
mov edx, 0xc41d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf5d0]
mov edx, 0xc41e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc0d0]
mov edx, 0xc41f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc3d0]
mov edx, 0xc420
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bbf90]
mov edx, 0xc421
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bef50]
mov edx, 0xc422
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf150]
mov edx, 0xc423
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bef10]
mov edx, 0xc424
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be9d0]
mov edx, 0xc425
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be990]
mov edx, 0xc426
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be6d0]
mov edx, 0xc427
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402befd0]
mov edx, 0xc428
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb810]
mov edx, 0xc429
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb690]
mov edx, 0xc42a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf3d0]
mov edx, 0xc42b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be790]
mov edx, 0xc42c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bead0]
mov edx, 0xc42d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402beb50]
mov edx, 0xc42e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf510]
mov edx, 0xc42f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bf610]
mov edx, 0xc430
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf590]
mov edx, 0xc431
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc2d0]
mov edx, 0xc432
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc350]
mov edx, 0xc433
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bf210]
mov edx, 0xc434
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf490]
mov edx, 0xc435
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc210]
mov edx, 0xc436
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc150]
mov edx, 0xc437
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be890]
mov edx, 0xc438
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bea10]
mov edx, 0xc439
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf190]
mov edx, 0xc43a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bb850]
mov edx, 0xc43b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bee90]
mov edx, 0xc43c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf4d0]
mov edx, 0xc43d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be3d0]
mov edx, 0xc43e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be810]
mov edx, 0xc43f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402be8d0]
mov edx, 0xc45f
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bf290]
mov edx, 0xc462
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd450]
mov edx, 0xc450
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdc90]
mov edx, 0xc451
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdb90]
mov edx, 0xc452
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd010]
mov edx, 0xc453
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bce90]
mov edx, 0xc454
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcc50]
mov edx, 0xc455
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd5d0]
mov edx, 0xc456
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd850]
mov edx, 0xc457
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd810]
mov edx, 0xc458
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bce50]
mov edx, 0xc459
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bcfd0]
mov edx, 0xc45a
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd650]
mov edx, 0xc45b
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bc510]
mov edx, 0xc45c
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bca10]
mov edx, 0xc45d
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bd610]
mov edx, 0xc45e
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x3f
lea r8, [0x1402bdfd0]
mov edx, 0xc460
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r9d, 0x7f
lea r8, [0x1402bdbd0]
mov edx, 0xc461
mov rcx, qword [0x1402bb108]
call qword [sym.imp.USER32.dll_LoadStringA]
mov r8, r12
lea rcx, [rsp + 0x140]
call fcn.140069000
nop
movzx eax, byte [rsp + 0x82d]
mov byte [rsp + 0x40], al
nop dword [rax + rax]
cmp byte [reloc.WS2_32.dll_accept], 1
jne 0x1400688d4
mov byte [reloc.WS2_32.dll_accept], 0
cmp byte [rsp + 0x158], 0
je 0x140068849
cmp byte [rsp + 0x150], 0
jne 0x140068863
mov r9d, dword [rsp + 0x714]
lea r8, [rsp + 0x619]
xor edx, edx
lea rcx, [rsp + 0x140]
call fcn.140069150
jmp 0x140068863
cmp byte [rsp + 0x150], 0
jne 0x140068863
xor edx, edx
lea rcx, [rsp + 0x140]
call fcn.1400690f0
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x1400688cf
nop word [rax + rax]
mov rcx, qword [0x1402b84e8]
test rcx, rcx
je 0x1400688a2
lea r8, [rsp + 0x70]
mov rdx, qword [0x1402b84f0]
call qword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
jne 0x1400688b8
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x140068880
jmp 0x140068800
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea r8, str.Exiting_n
mov edx, 3
lea rcx, vtable.Log.0
call fcn.1400153f0
cmp byte [rsp + 0x40], 0
je 0x14006890f
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [rsp + 0x80]
lea rax, vtable.VNCviewerApp32.0
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x1108]
test rcx, rcx
je 0x14006893d
mov r8, qword [rcx]
mov edx, 1
call qword [r8]
lea rax, vtable.VNCviewerApp.0
mov qword [rsp + 0x140], rax
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea r8, str.VNC_viewer_closing_down_n
mov edx, 2
lea rcx, vtable.Log.0
call fcn.1400153f0
lea rcx, [rsp + 0x10e0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea rcx, [rsp + 0x148]
call fcn.140060d00
mov eax, ebx
mov rcx, qword [rsp + 0x1330]
xor rcx, rsp
call fcn.14011b0c0
lea r11, [rsp + 0x1340]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret