Function at 0x14002efac
Capabilities:
Get common file path
Set current directory

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1210
call fcn.1400eb3f0
sub rsp, rax
mov eax, r8d
mov dil, r8b
mov r12, rcx
and eax, 1
lea rcx, [rsp + 0x3c8]
and dil, 0xf0
mov byte [rsp + 0x360], dil
mov dword [rsp + 0x1260], eax
mov qword [rsp + 0x330], r9
call fcn.14006160c
mov r13, qword [rsp + 0x1258]
or dword [rsp + 0x3b0], 0xffffffff
lea rcx, [rsp + 0x1258]
call fcn.140014c28
xor ebx, ebx
lea rcx, [rsp + 0x398]
mov r14d, 0xffff0000
mov byte [rsp + 0x328], 0xff
mov byte [rsp + 0x323], 0xff
mov byte [rsp + 0x325], bl
mov r15b, bl
mov byte [rsp + 0x322], bl
mov byte [rsp + 0x321], bl
mov bpl, bl
mov byte [rsp + 0x327], bl
mov byte [rsp + 0x351], bl
mov byte [rsp + 0x324], bl
mov dword [rsp + 0x378], r14d
mov qword [rsp + 0x370], rbx
mov byte [rsp + 0x32b], bl
call fcn.140057154
lea r14d, [rbx + 1]
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f19f0]
mov r8d, r14d
mov qword [rsp + 0x788], rbx
mov word [rsp + 0x790], bx
call fcn.14005992c
cmp al, bl
jne 0x14002f0cf
cmp dil, bl
jne 0x14002f0cf
mov al, bl
mov byte [rsp + 0x32a], bl
jmp 0x14002f0d9
mov al, r14b
mov byte [rsp + 0x32a], al
cmp dil, bl
setne byte [rsp + 0x329]
cmp al, bl
je 0x14002f0f7
mov byte [rsp + 0x328], bl
mov byte [rsp + 0x323], r14b
mov rdx, qword [rsp + 0x1258]
mov dil, 0x2a
cmp word [rdx], 0x2d
jne 0x14002f10b
mov dil, byte [rdx]
movzx eax, word [rdx]
movsx esi, dil
cmp eax, esi
jne 0x14002f638
movzx eax, word [rdx + 2]
cmp eax, esi
jne 0x14002f611
add rdx, 4
lea rcx, [0x1400f2f44]
mov r8d, r14d
mov qword [rsp + 0x1258], rdx
lea rdx, [rsp + 0x1258]
call fcn.14005992c
cmp al, bl
je 0x14002f15a
mov dword [rsp + 0x1260], r14d
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f40]
mov r8d, 2
call fcn.14005992c
cmp al, bl
je 0x14002f185
mov byte [rsp + 0x328], r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f3c]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f1af
mov byte [rsp + 0x328], bl
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, str.nrcd
mov r8d, 4
call fcn.14005992c
cmp al, bl
je 0x14002f1da
mov byte [rsp + 0x323], 2
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f30]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f204
mov byte [rsp + 0x323], bl
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f2c]
mov r8d, 2
call fcn.14005992c
cmp al, bl
je 0x14002f22f
mov byte [rsp + 0x322], r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f28]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f25a
mov byte [rsp + 0x322], 0x23
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f24]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f285
mov byte [rsp + 0x322], 0x2a
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f20]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f2b0
mov byte [rsp + 0x322], 0x24
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f1c]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f2db
mov byte [rsp + 0x322], 0x40
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f18]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f306
mov byte [rsp + 0x322], 0x3d
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f14]
mov r8d, 2
call fcn.14005992c
cmp al, bl
je 0x14002f32e
mov dword [rsp + 0x378], r14d
jmp 0x14002f353
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f10]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f35e
mov dword [rsp + 0x378], ebx
mov r14d, 1
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f0c]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f384
mov bpl, r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f08]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f3af
mov byte [rsp + 0x327], r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f1af0]
mov r8d, r14d
call fcn.14005992c
cmp al, bl
je 0x14002f3d7
mov byte [rsp + 0x351], r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400ef710]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f402
mov byte [rsp + 0x324], r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2f04]
mov r8d, 3
call fcn.14005992c
cmp al, bl
je 0x14002f42d
mov byte [rsp + 0x32b], r14b
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, str.bool
mov r8d, 4
call fcn.14005992c
cmp al, bl
je 0x14002f458
mov byte [rsp + 0x324], 2
jmp 0x14002f5f1
mov rdx, qword [rsp + 0x1258]
lea rcx, [0x1400f2ef4]
mov r8d, 4
call fcn.140050a6c
cmp al, bl
je 0x14002f52f
mov r8, qword [rsp + 0x1258]
add r8, 8
mov qword [rsp + 0x1258], r8
mov rdx, r8
movzx eax, word [r8]
cmp ax, bx
je 0x14002f4c9
mov ecx, 0x20
lea r9d, [rcx - 0x17]
cmp r9w, ax
ja 0x14002f4af
cmp ax, 0xd
jbe 0x14002f4c9
cmp cx, ax
je 0x14002f4c9
add r8, 2
mov qword [rsp + 0x1258], r8
mov ax, word [r8]
cmp ax, bx
jne 0x14002f4a3
sub r8, rdx
lea rcx, [rsp + 0x398]
sar r8, 1
call fcn.1400573bc
lea rcx, [rsp + 0x1258]
call fcn.140014c28
lea rdx, [rsp + 0x398]
xor r8d, r8d
mov rcx, r12
call fcn.140003728
mov rdx, qword [rsp + 0x398]
lea rcx, [0x1400ef734]
mov r15b, r14b
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
cmp eax, ebx
jne 0x14002f5f1
mov rax, qword [rsp + 0x398]
mov r15b, 3
mov word [rax], bx
jmp 0x14002f5f1
lea rdx, [rsp + 0x1258]
lea rcx, [0x1400f2ef0]
mov r8d, r14d
call fcn.14005992c
cmp al, bl
je 0x14002f557
mov byte [rsp + 0x321], r14b
jmp 0x14002f5f1
mov rax, qword [rsp + 0x1258]
cmp dil, 0x2a
jne 0x14002f5ac
movzx ecx, word [rax]
mov rdx, rax
cmp cx, bx
je 0x14002f5e4
mov r8d, 0x20
lea r9d, [r8 + 0xc]
lea r10d, [r8 - 0x17]
cmp r10w, cx
ja 0x14002f58a
cmp cx, 0xd
jbe 0x14002f5b2
cmp r8w, cx
je 0x14002f5b2
cmp r9w, cx
je 0x14002f605
add rax, 2
mov qword [rsp + 0x1258], rax
mov cx, word [rax]
cmp cx, bx
je 0x14002f5e4
jmp 0x14002f57e
mov r10d, 9
movzx ecx, word [rax]
cmp cx, bx
je 0x14002f5e4
mov edx, 0x20
cmp r10w, cx
ja 0x14002f5cb
cmp cx, 0xd
jbe 0x14002f5e4
cmp dx, cx
je 0x14002f5e4
add rax, 2
mov qword [rsp + 0x1258], rax
mov cx, word [rax]
cmp cx, bx
jne 0x14002f5bf
lea rcx, [rsp + 0x1258]
call fcn.140014c28
mov rdx, qword [rsp + 0x1258]
movzx eax, word [rdx]
cmp eax, esi
jne 0x14002f611
jmp 0x14002f11a
add rdx, 0xfffffffffffffffc
mov qword [rsp + 0x1258], rdx
cmp bpl, bl
je 0x14002f638
lea r9, [0x1400ee4c4]
xor r8d, r8d
mov rcx, r12
mov dword [rsp + 0x20], 0xffffff9c
call fcn.140090e5c
mov rbp, rax
jmp 0x140030c73
lea rcx, [rsp + 0x3f8]
xor edx, edx
mov r8d, 0x370
mov edi, ebx
mov qword [rsp + 0x3f0], rbx
call fcn.1400d1fa0
lea rcx, [rsp + 0x818]
xor edx, edx
mov r8d, 0x350
call fcn.1400d1fa0
mov esi, 0x348
lea rcx, [rsp + 0xb78]
mov r8, rsi
xor edx, edx
call fcn.1400d1fa0
lea rcx, [rsp + 0xec8]
mov r8, rsi
xor edx, edx
mov qword [rsp + 0xec0], rbx
call fcn.1400d1fa0
lea rcx, [rsp + 0x3d0]
call fcn.140057618
mov rcx, qword [rsp + 0x1258]
mov rsi, qword [rsp + 0x330]
mov edx, 0x2c
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x810], rcx
mov qword [rsp + 0xb70], rcx
mov dword [rsp + 0x3a0], r14d
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov r12, rax
mov qword [rsp + 0x340], rax
cmp rax, rbx
je 0x14002f71a
mov rsi, rax
sub rsi, r13
sar rsi, 1
add r12, 2
mov qword [rsp + 0x3b0], rsi
mov rsi, qword [rsp + 0x330]
mov qword [rsp + 0x340], r12
mov qword [rsp + 0x818], r12
mov qword [rsp + 0xb78], r12
mov ebp, 0xc
cmp r12, rbx
je 0x14002f752
lea rcx, str._LoadLibrary
mov r8d, ebp
mov rdx, r12
call fcn.140050a6c
mov byte [rsp + 0x320], r14b
cmp al, bl
jne 0x14002f759
mov byte [rsp + 0x320], bl
cmp r12, rbx
je 0x14002f777
lea rcx, str._GetProcAddress
mov r8d, 0xf
mov rdx, r12
call fcn.140050a6c
cmp al, bl
jne 0x14002f77a
mov r14b, bl
cmp r12, rbx
je 0x14002f7a0
lea rcx, str._FreeLibrary
mov r8d, ebp
mov rdx, r12
call fcn.140050a6c
cmp al, bl
je 0x14002f7a0
mov r8d, 1
mov r13b, r8b
jmp 0x14002f7a9
mov r13b, bl
mov r8d, 1
mov dl, byte [rsp + 0x320]
mov bpl, r13b
or bpl, r14b
or bpl, dl
mov byte [rsp + 0x338], bpl
cmp r12, rbx
je 0x14002f90d
mov eax, 0x2a
cmp ax, word [r12]
jne 0x14002f90d
mov byte [rsp + 0x350], r8b
mov cl, bl
mov byte [rsp + 0x326], bl
mov al, r14b
or al, dl
je 0x14002f7fa
or byte [rsp + 0x32b], 0x10
cmp byte [rsp + 0x327], bl
jne 0x14002f897
cmp cl, bl
je 0x14002f897
mov rax, rsi
cmp rsi, rbx
mov edi, 1
cmove rax, qword [rsp + 0x1258]
mov r12d, r8d
mov rsi, r8
mov qword [rsp + 0x390], rax
lea ebp, [rdi + 0x2b]
mov edx, ebp
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov qword [rsp + 0x390], rax
cmp rax, rbx
je 0x14002f87d
mov word [rax], bx
mov rax, qword [rsp + 0x390]
add rax, 2
cmp rsi, 2
mov qword [rsp + 0x390], rax
jl 0x14002f871
mov qword [rsp + rsi*8 + 0x810], rax
add rsi, rdi
add r12d, edi
cmp rsi, 0x6a
jl 0x14002f834
mov bpl, byte [rsp + 0x338]
mov dword [rsp + 0x3a0], r12d
mov r12, qword [rsp + 0x340]
mov edi, ebx
mov qword [rsp + 0x368], rbx
mov rdx, rbx
mov qword [rsp + 0x348], rbx
mov esi, 0x2c
cmp r12, rbx
je 0x14002f8d5
mov edx, esi
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov qword [rsp + 0x348], rax
mov word [r12 - 2], bx
mov rdx, qword [rsp + 0x348]
mov rax, qword [rsp + 0x1258]
cmp word [rax], bx
jne 0x14002f94e
cmp bpl, bl
jne 0x14002f94e
lea rcx, [rsp + 0x368]
call fcn.14004f564
lea rcx, [rsp + 0x3d0]
call fcn.140028ab8
mov rbp, 0xffffffff80070057
jmp 0x140030c73
mov byte [rsp + 0x350], bl
cmp byte [rsp + 0x32a], bl
jne 0x14002f7e2
cmp byte [rsp + 0x329], bl
jne 0x14002f7e2
cmp dl, bl
jne 0x14002f7e2
cmp r13b, bl
jne 0x14002f7e2
mov cl, r8b
mov byte [rsp + 0x326], cl
jmp 0x14002f7eb
cmp rdx, rbx
je 0x14002f96a
mov word [rdx], bx
mov rdx, qword [rsp + 0x348]
add rdx, 2
mov qword [rsp + 0x348], rdx
and r15b, 2
mov byte [rsp + 0x338], r15b
je 0x14002f996
cmp r12, rbx
je 0x14002f996
movzx eax, word [r12]
neg ax
sbb rcx, rcx
and rcx, r12
mov r12, rcx
mov qword [rsp + 0x340], rcx
cmp r15b, bl
je 0x14002f9e7
cmp rdx, rbx
je 0x14002f9e7
mov r9d, esi
mov rsi, qword [rsp + 0x1250]
lea r8, [rsp + 0x398]
lea rdx, [rsp + 0x348]
mov rcx, rsi
mov word [rsp + 0x20], bx
call fcn.1400493d4
mov r11, qword [rsp + 0x348]
movzx eax, word [r11]
neg ax
sbb rdx, rdx
and rdx, r11
mov qword [rsp + 0x348], rdx
jmp 0x14002f9ef
mov rsi, qword [rsp + 0x1250]
movsxd rax, dword [rsp + 0x3a0]
mov rbp, rbx
mov r15, rbx
mov qword [rsp + 0x3b8], rax
cmp byte [rsp + 0x320], bl
je 0x14002fa53
mov rax, qword [rsp + 0x398]
cmp word [rax], bx
je 0x14002f8e7
mov ecx, 0x2a
cmp cx, word [rax]
je 0x14002f8e7
cmp rdx, rbx
je 0x14002fa58
cmp cx, word [rdx]
je 0x14002fa58
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dil, byte [rsp + 0x321]
mov r12b, 1
mov rbp, rax
jmp 0x14002fb3b
mov ecx, 0x2a
cmp r14b, bl
je 0x14002fbad
mov r14d, 1
cmp cx, word [rdx]
jne 0x14002fa78
add rdx, 2
mov qword [rsp + 0x348], rdx
mov dil, byte [rsp + 0x321]
mov r12d, 0x23
cmp cx, word [rdx]
je 0x14002fa91
cmp r12w, word [rdx]
jne 0x14002faa2
add rdx, 2
mov dil, r14b
mov qword [rsp + 0x348], rdx
jmp 0x14002fa86
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x348]
mov qword [rsp + 0x388], rbx
call fcn.140065394
mov rdx, qword [rsp + 0x348]
mov r12b, r14b
cmp rdx, rbx
je 0x14002fb3b
add rdx, 2
mov qword [rsp + 0x348], rdx
je 0x14002fb3b
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0x330]
mov qword [rsp + 0x330], rbx
mov r9, rax
mov r8, rax
call fcn.140057090
mov rcx, qword [rsp + 0x388]
cmp dil, bl
je 0x14002fb1d
cmp rcx, rbx
je 0x14002fb2e
mov rdx, qword [rsp + 0x330]
call fcn.1400159f0
jmp 0x14002fb2b
mov rdx, qword [rsp + 0x330]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbp, rax
lea rcx, [rsp + 0x330]
call fcn.14004f564
mov sil, byte [rsp + 0x320]
mov rax, qword [rsp + 0x398]
cmp word [rax], bx
je 0x140032584
mov r13d, 0x2a
cmp r13w, word [rax]
je 0x140032565
cmp r12b, bl
je 0x140032565
cmp byte [rsp + 0x32b], bl
lea rax, str.0x_p
lea r8, [0x1400f2ea0]
cmovne r8, rax
cmp sil, bl
je 0x140032551
cmp dil, bl
je 0x140032551
cmp rbp, rbx
jne 0x140032555
lea r8, [0x1400ee4c4]
jmp 0x140032555
cmp r13b, bl
je 0x14002fc45
mov r14d, 1
cmp cx, word [rdx]
jne 0x14002fbcd
add rdx, 2
mov qword [rsp + 0x348], rdx
mov dil, byte [rsp + 0x321]
mov r12d, 0x23
cmp cx, word [rdx]
je 0x14002fbe6
cmp r12w, word [rdx]
jne 0x14002fbf7
add rdx, 2
mov dil, r14b
mov qword [rsp + 0x348], rdx
jmp 0x14002fbdb
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x348]
mov qword [rsp + 0x388], rbx
call fcn.140065394
cmp dil, r14b
mov rcx, qword [rsp + 0x388]
mov r12b, r14b
jle 0x14002fc37
cmp rcx, rbx
je 0x14002fb3b
call fcn.1400159ac
jmp 0x14002fb3b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movsxd rbp, eax
jmp 0x14002fb3b
cmp byte [rsp + 0x360], bl
mov eax, 1
movzx ecx, bl
cmovne ecx, eax
lea r14d, [rax + 0x30]
mov dword [rsp + 0x354], ecx
cmp rdx, rbx
jne 0x14002fe28
cmp r12, rbx
jne 0x14002fc81
lea r12, [0x1400f2e7a]
mov qword [rsp + 0x340], r12
jmp 0x14002fcad
lea rcx, [0x1400f2e7a]
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, ebx
je 0x14002fcad
lea rcx, [0x1400f2e4a]
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, ebx
jne 0x14002fe28
mov eax, dword [rsp + 0x378]
or r13, 0xffffffffffffffff
cmp eax, ebx
mov byte [rsp + 0x354], r13b
cmovl eax, r14d
mov dword [rsp + 0x378], eax
cmp al, bl
je 0x14002fe28
lea rcx, [rsp + 0x340]
call fcn.140057154
lea rdx, str.___exe:_
lea rcx, [rsp + 0x330]
mov r8, r13
call fcn.14006164c
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0x340]
call fcn.1400616d8
lea rcx, [rsp + 0x330]
call fcn.14004f564
lea rcx, [rsp + 0x340]
mov edx, 0x51c
call fcn.140057254
mov rdx, qword [rsp + 0x340]
xor ecx, ecx
add rdx, 0x10
mov r8d, 0x208
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, str.____nowin___nfb___hide_PECMDpecmd_cmd_CALL__
lea rcx, [rsp + 0x3b8]
mov r8, r13
call fcn.14006164c
lea rcx, [rsp + 0x340]
mov rdx, qword [rax]
call fcn.140057290
lea rcx, [rsp + 0x3b8]
call fcn.14004f564
mov rax, qword [rsp + 0x3b0]
cmp eax, ebx
jl 0x14002fd96
movsxd rcx, eax
mov rax, qword [rsp + 0x3c8]
mov word [rax + rcx*2], bx
mov rdx, qword [rsp + 0x3c8]
lea rcx, [rsp + 0x340]
call fcn.140057290
lea rdx, [0x1400f2df8]
lea rcx, [rsp + 0x3b8]
mov r8, r13
call fcn.14006164c
lea rcx, [rsp + 0x340]
mov rdx, qword [rax]
call fcn.140057290
lea rcx, [rsp + 0x3b8]
call fcn.14004f564
lea rcx, [rsp + 0x340]
mov rdx, r12
call fcn.140057290
mov rdx, qword [rsp + 0x340]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov r8, rsi
mov rcx, rsi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
call fcn.14000c708
lea rcx, [rsp + 0x340]
mov rbp, rax
jmp 0x140030c54
cmp r12, rbx
je 0x140032657
cmp word [r12], bx
je 0x140032657
mov r13b, byte [rsp + 0x326]
cmp byte [rsp + 0x327], bl
jne 0x14002ff05
cmp r13b, bl
je 0x14002ff05
mov r9, qword [rsp + 0x330]
cmp r9, rbx
je 0x14002ff05
mov esi, 2
lea r14, [rsp + 0xb70]
mov qword [rsp + 0x330], rbx
cmp dword [rsp + 0x3a0], esi
jle 0x14002fef6
mov r12, qword [rsp + 0x1250]
mov r13, qword [rsp + 0x3b8]
lea edi, [rsi - 1]
mov rdx, qword [rsp + rsi*8 + 0x810]
lea r8, [rsp + 0x330]
xor r9d, r9d
mov rcx, r12
mov byte [rsp + 0x20], dil
call fcn.14006a8f4
mov r11, qword [rsp + 0x330]
mov qword [rsp + 0x330], rbx
mov qword [rsp + rsi*8 + 0xec0], r11
mov qword [rsp + rsi*8 + 0xb70], r11
add rsi, rdi
cmp rsi, r13
jl 0x14002fe9c
mov r12, qword [rsp + 0x340]
mov r13b, byte [rsp + 0x326]
mov edi, ebx
lea rcx, [rsp + 0x330]
call fcn.14004f564
jmp 0x14002ff0d
lea r14, [rsp + 0x810]
mov eax, 2
cmp byte [rsp + 0x327], bl
jne 0x1400300a8
cmp r13b, bl
je 0x1400300a8
cmp qword [r14 + 8], rbx
je 0x1400300a8
cmp byte [rsp + 0x338], bl
je 0x14002ff45
cmp qword [r14 + 0x10], rbx
lea ecx, [rax + 1]
cmovne eax, ecx
mov r15b, byte [rsp + 0x322]
mov r12, qword [rsp + 0x1250]
cdqe
lea rbp, [r14 + rax*8]
lea rsi, [rsp + 0x3f0]
lea r14, [rsp + rax*8 + 0x808]
mov rax, qword [rbp]
add r14, 8
add rbp, 8
mov qword [rsp + 0x390], rax
cmp rax, rbx
je 0x14003009a
movzx ecx, word [rax]
mov r10d, 0x23
mov qword [rsi], rax
mov dl, bl
cmp r15b, r10b
je 0x140030048
lea r9d, [r10 + 7]
cmp r15b, r9b
je 0x14003021a
cmp r15b, 0x24
je 0x140030212
cmp r15b, 0x40
je 0x140030001
cmp r15b, 0x3d
je 0x1400301a9
cmp r15b, bl
je 0x140030042
add rax, 2
lea r8d, [r10 - 0x22]
movzx ecx, cx
mov dl, r8b
mov qword [rsp + 0x390], rax
cmp ecx, r10d
je 0x14003005a
cmp ecx, r9d
je 0x14003021a
cmp ecx, 0x3d
je 0x1400301a9
cmp ecx, 0x40
jne 0x140030212
cmp rax, rbx
je 0x140030212
mov ecx, 8
call fcn.1400d2278
mov r13, rax
cmp rax, rbx
je 0x1400301bc
mov rdx, qword [rsp + 0x390]
mov qword [rax], rbx
or rax, 0xffffffffffffffff
mov r9, rax
mov r8, rax
mov rcx, r13
call fcn.140057090
jmp 0x1400301bf
cmp cx, r10w
jne 0x140030082
cmp r10w, word [rax]
jne 0x14003005a
add rax, 2
mov qword [rsp + 0x390], rax
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x390]
mov qword [rsp + 0x3b0], rbx
call fcn.140065480
mov r11, qword [rsp + 0x3b0]
mov qword [rsi], r11
inc edi
add rsi, 8
cmp byte [rsp + 0x351], bl
jne 0x14003009a
cmp edi, 0x64
jbe 0x14002ff6b
mov r12, qword [rsp + 0x340]
mov rbp, rbx
mov r15, rbx
lea rdx, str._DllRegisterServer
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov esi, dword [rsp + 0x378]
mov r14d, 1
cmp eax, ebx
jne 0x1400300f0
lea eax, [r14 + 0x30]
cmp esi, ebx
lea r12, [0x1400f2e7a]
cmovl esi, eax
mov byte [rsp + 0x354], 0xff
mov byte [rsp + 0x328], r14b
mov dword [rsp + 0x378], esi
lea rdx, str._DllUnregisterServer
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, ebx
jne 0x14003012c
mov eax, 0x71
cmp esi, ebx
lea r12, [0x1400f2e4a]
cmovl esi, eax
mov byte [rsp + 0x354], 0xff
mov byte [rsp + 0x328], r14b
mov dword [rsp + 0x378], esi
lea rcx, [rsp + 0x3a8]
mov edx, 0x20a
call fcn.1400571c8
mov rcx, qword [rsp + 0x1258]
mov eax, 0x23
mov qword [rsp + 0x388], rbx
mov rsi, rbx
cmp ax, word [rcx]
jne 0x1400302ec
cmp word [rcx + 2], bx
jne 0x1400302ec
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x3c0]
mov qword [rsp + 0x3c0], r12
call fcn.140065480
cmp qword [rsp + 0x388], rbx
jne 0x1400302b8
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
mov rdi, rbx
jmp 0x14003258c
mov rax, qword [r14]
movsx rcx, dl
lea rcx, [rax + rcx*2]
mov qword [rsi], rcx
jmp 0x140030082
mov r13, rbx
mov rax, qword [r13]
lea r9, [rsp + 0x3c0]
lea r8, [rsp + 0x3e0]
mov qword [rsp + 0x390], rax
mov eax, 1
lea rdx, [rsp + 0x3d8]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x3d0]
mov qword [rsp + 0x3c0], r13
mov dword [rsp + 0x20], 8
call fcn.1400574a4
mov rax, qword [rsp + 0x390]
mov qword [rsi], rax
jmp 0x140030082
cmp r9w, word [rax]
jne 0x14003022c
add rax, 2
mov qword [rsp + 0x390], rax
lea rcx, [rsp + 0x358]
mov qword [rsp + 0x330], rax
call fcn.140057154
lea r8, [rsp + 0x358]
lea rdx, [rsp + 0x330]
mov r9d, 0x2c
mov rcx, r12
mov word [rsp + 0x20], bx
call fcn.1400493d4
mov rdx, qword [rsp + 0x358]
or r9d, 0xffffffff
xor r8d, r8d
mov rcx, r12
mov qword [rsp + 0x330], rbx
mov qword [rsp + 0x20], rbx
call fcn.140016070
cmp rax, rbx
je 0x14003029b
mov rax, qword [rax + 8]
mov qword [rsp + 0x330], rax
jmp 0x1400302a3
mov rax, qword [rsp + 0x330]
lea rcx, [rsp + 0x358]
mov qword [rsi], rax
call fcn.14004f564
jmp 0x140030082
movzx ecx, byte [rsp + 0x323]
mov rsi, qword [rsp + 0x388]
mov byte [rsp + 0x354], r14b
mov eax, ecx
cmp cl, bl
mov rcx, qword [rsp + 0x1258]
cmovl eax, r14d
mov r13b, al
mov byte [rsp + 0x323], al
jmp 0x1400302f4
mov r13b, byte [rsp + 0x323]
cmp byte [rsp + 0x320], bl
je 0x140030318
mov rax, rcx
mov rcx, qword [rsp + 0x348]
mov qword [rsp + 0x1258], rcx
mov qword [rsp + 0x348], rax
mov byte [rsp + 0x326], bl
mov eax, ebx
mov dword [rsp + 0x358], ebx
mov edx, 0x22
cmp rcx, rbx
je 0x140030350
cmp dx, word [rcx]
cmove eax, r14d
mov dword [rsp + 0x358], eax
call fcn.140018fa4
mov rcx, rax
mov qword [rsp + 0x1258], rax
mov r9d, 0x2a
mov qword [rsp + 0x380], rcx
mov r14b, bl
mov rdx, rcx
cmp r9w, word [rcx]
jne 0x140030385
lea rax, [rdx + 2]
cmp r9w, word [rax]
jne 0x140030385
mov qword [rsp + 0x380], rax
mov rdx, rax
cmp r9w, word [rax]
je 0x14003036a
movzx r8d, word [rdx]
mov r10d, 9
cmp r9w, r8w
jne 0x14003042b
movzx eax, word [rdx + 2]
sub ax, 0x30
cmp ax, r10w
jbe 0x1400303af
or byte [rsp + 0x321], 2
cmp r9w, r8w
jne 0x14003042b
lea r9, [rdx + 2]
movzx eax, word [r9]
sub ax, 0x30
cmp ax, r10w
ja 0x14003042b
cmp rdx, rcx
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x380]
seta r14b
mov qword [rsp + 0x3b0], rbx
mov qword [rsp + 0x380], r9
inc r14b
call fcn.140065394
cmp eax, ebx
jle 0x140030419
mov r15, qword [rsp + 0x3b0]
cmp r15, rbx
je 0x140030419
mov rcx, qword [rsp + 0x1258]
mov r9, qword [rsp + 0x380]
jmp 0x14003043d
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
jmp 0x14002f8e7
neg r8w
sbb r9, r9
and r9, rdx
mov qword [rsp + 0x380], r9
cmp r13b, bl
jg 0x140030465
mov rdx, qword [rsp + 0x3a8]
mov ecx, 0x208
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov rcx, qword [rsp + 0x1258]
mov r9, qword [rsp + 0x380]
mov edx, 0x2e
cmp r14b, bl
jne 0x140030489
cmp r9, rbx
je 0x140030489
cmp word [r9], dx
jne 0x140030489
cmp word [r9 + 2], bx
jne 0x140030489
lea eax, [rdx - 0x2d]
mov r13b, al
jmp 0x140030495
mov r13b, bl
cmp r14b, bl
jne 0x140030518
cmp byte [rsp + 0x350], bl
je 0x140030518
cmp byte [rsp + 0x321], bl
jne 0x140030518
cmp r13b, bl
je 0x1400304b5
mov rax, qword [0x14010bd40]
jmp 0x1400304c6
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rsp + 0x1258]
cmp rax, rbx
jne 0x1400304e9
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp rax, rbx
jne 0x1400304e9
cmp byte [rsp + 0x329], bl
jne 0x1400304e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov ebx, ebx
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
lea rcx, [rsp + 0x368]
call fcn.14004f564
lea rcx, [rsp + 0x3d0]
call fcn.140028ab8
mov rbp, rbx
jmp 0x140030c73
cmp byte [rsp + 0x328], bl
jle 0x14003057b
xor edx, edx
lea r8d, [rdx + 0x5c]
call qword [sym.imp.SHLWAPI.dll_StrRChrW]
cmp rax, rbx
je 0x14003056e
mov rdx, qword [rsp + 0x1258]
lea rcx, [rsp + 0x330]
sub rax, rdx
sar rax, 1
inc rax
mov r8, rax
call fcn.140061630
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rcx, [rsp + 0x330]
call fcn.14004f564
mov r9, qword [rsp + 0x380]
mov edx, 0x2e
cmp rsi, rbx
jne 0x140030bb0
mov al, byte [rsp + 0x321]
mov r10, qword [0x14010bd40]
cmp al, bl
jne 0x1400305cb
cmp r15, rbx
jne 0x1400305cb
cmp byte [rsp + 0x354], bl
jne 0x1400305cb
cmp r9, rbx
je 0x1400305c3
cmp word [r9], dx
jne 0x1400309a3
cmp word [r9 + 2], bx
jne 0x1400309a3
mov r15, r10
jmp 0x1400305d4
mov byte [rsp + 0x354], 2
cmp r9, rbx
je 0x1400309ce
cmp r15, rbx
jne 0x1400309d7
cmp al, bl
je 0x1400309a3
mov rcx, r9
mov qword [rsp + 0x770], rbx
mov qword [rsp + 0x778], rbx
mov qword [rsp + 0x780], rbx
movzx r13d, word [r9]
mov qword [rsp + 0x340], rcx
cmp dword [rsp + 0x358], ebx
jne 0x140030640
mov r8d, 0x23
cmp r8w, word [r9]
jne 0x140030640
movzx eax, word [r9 + 2]
lea edx, [r8 - 0x1a]
sub ax, 0x30
cmp ax, dx
ja 0x140030640
mov r11, qword [rsp + 0x1258]
jmp 0x1400306d8
mov r14d, 0x2a
cmp r14w, r13w
jne 0x140030663
add r9, 2
mov rcx, r9
mov qword [rsp + 0x380], r9
mov qword [rsp + 0x340], rcx
mov edx, 0x22
mov r11, rbx
cmp dx, word [r9]
jne 0x1400306c8
add r9, 2
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x380], r9
mov qword [rsp + 0x340], r9
call fcn.140045808
mov rcx, qword [rsp + 0x340]
cmp word [rcx], bx
je 0x1400306c8
mov word [rcx], bx
mov r10, qword [0x14010bd40]
mov r9, qword [rsp + 0x380]
mov r11, rcx
mov rcx, qword [rsp + 0x340]
add rcx, 2
mov qword [rsp + 0x340], rcx
cmp r14w, r13w
jne 0x1400307dc
mov r8d, 0x23
mov r14, rbx
jmp 0x1400306ef
cmp r8w, ax
je 0x1400306f7
add rcx, 2
mov qword [rsp + 0x340], rcx
movzx eax, word [rcx]
cmp ax, bx
jne 0x1400306dd
mov rax, rcx
cmp word [rcx], bx
je 0x14003072d
mov edx, 0x7c
cmp dx, word [rax]
je 0x14003071e
mov edx, 0x3a
cmp dx, word [rax]
je 0x14003071e
add rax, 2
cmp word [rax], bx
jne 0x1400306ff
jmp 0x14003072d
mov word [rax], bx
mov rcx, qword [rsp + 0x340]
add rax, 2
cmp word [rax], bx
lea r13, str.EXEDATA
cmovne r13, rax
cmp r8w, word [rcx]
jne 0x1400307ec
mov word [rcx], bx
cmp r11, rbx
je 0x140030751
mov word [r11], bx
mov rcx, qword [rsp + 0x380]
mov eax, 0x2e
cmp ax, word [rcx]
jne 0x14003077e
lea rax, [rcx + 2]
cmp word [rax], bx
jne 0x14003077e
mov r10, qword [0x14010bd40]
mov rcx, rax
mov qword [rsp + 0x380], rax
cmp word [rcx], bx
je 0x14003079b
xor edx, edx
lea r8d, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r8d, 0x23
mov r10, rax
mov r14, rax
mov rax, qword [rsp + 0x340]
mov word [rax], r8w
cmp r10, rbx
je 0x1400307cc
mov rdx, qword [rsp + 0x340]
lea r9, [rsp + 0x770]
mov r8, r13
mov rcx, r10
mov qword [rsp + 0x20], rbx
call fcn.14001b4b8
cmp r14, rbx
je 0x1400307ec
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1400307ec
lea rdx, [rsp + 0x770]
mov rcx, r9
call fcn.14001ae44
mov r14, qword [rsp + 0x770]
mov eax, dword [rsp + 0x778]
mov dword [rsp + 0x358], eax
cmp r14, rbx
jne 0x14003084d
cmp byte [rsp + 0x320], bl
mov r14d, 1
lea rcx, [rsp + 0x770]
mov rbp, rbx
mov dil, r14b
mov byte [rsp + 0x324], r14b
sete bpl
mov qword [rsp + 0x370], r14
call fcn.14004f564
cmp byte [rsp + 0x32a], bl
jne 0x140030bdd
jmp 0x1400324fd
lea rcx, [rsp + 0x368]
mov edx, 0x38
call fcn.140056fe0
mov r13, qword [rsp + 0x368]
cmp r13, rbx
je 0x140030874
mov rcx, r13
call fcn.14001598c
mov r8d, dword [rsp + 0x358]
mov rdx, r14
mov rcx, r13
call fcn.140028bc4
cmp rax, rbx
je 0x14003097c
mov sil, byte [rsp + 0x320]
cmp sil, bl
je 0x140030935
mov rax, qword [rsp + 0x348]
mov r14d, 1
cmp rax, rbx
je 0x140030908
cmp word [rax], bx
je 0x140030908
mov rax, qword [rsp + 0x770]
mov rcx, qword [rsp + 0x1250]
lea r9d, [r14 + 0x37]
mov qword [r13 + 0x10], rax
mov r8, qword [rsp + 0x368]
mov rdx, qword [rsp + 0x348]
lea rax, [rsp + 0x368]
mov byte [rsp + 0x28], r14b
mov qword [rsp + 0x770], rbx
mov qword [rsp + 0x20], rax
call fcn.140065c84
mov qword [rsp + 0x368], rbx
lea rcx, [rsp + 0x770]
mov rbp, r13
mov r12b, r14b
call fcn.14004f564
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
mov dil, byte [rsp + 0x321]
jmp 0x14002fb43
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0x370]
mov rdx, r12
mov r9, rax
mov r8, rax
mov qword [rsp + 0x370], rbx
call fcn.140057090
mov rdx, qword [rsp + 0x370]
mov rcx, r13
call fcn.1400159f0
lea rcx, [rsp + 0x370]
mov rsi, rax
call fcn.14004f564
cmp rsi, rbx
jne 0x140030996
cmp byte [rsp + 0x320], bl
mov eax, 1
mov rbp, rbx
sete bpl
mov byte [rsp + 0x324], al
lea rcx, [rsp + 0x770]
jmp 0x140030bab
cmp r13b, bl
je 0x1400309ad
mov r15, r10
jmp 0x1400309c1
mov rcx, r9
mov byte [rsp + 0x326], 1
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, rax
cmp r15, rbx
jne 0x1400309d7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
cmp r15, rbx
je 0x14003083b
or r13, 0xffffffffffffffff
lea rcx, [rsp + 0x330]
mov rdx, r12
mov r9, r13
mov r8, r13
mov qword [rsp + 0x330], rbx
call fcn.140057090
mov rdx, qword [rsp + 0x330]
mov rcx, r15
test r14b, 2
je 0x140030a11
call fcn.1400159f0
jmp 0x140030a17
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
cmp rax, rbx
jne 0x140030ba3
cmp byte [rsp + 0x327], bl
je 0x140030b9b
cmp byte [rsp + 0x322], bl
jne 0x140030b9b
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x358], eax
cdqe
lea r13, [rax + rax]
mov qword [rsp + 0x340], rax
mov eax, 0xffdf
movzx ecx, word [r13 + r12 - 2]
and cx, ax
mov eax, 0x41
cmp cx, ax
je 0x140030b9b
mov eax, 0x57
cmp cx, ax
je 0x140030b9b
lea ecx, [rax - 0x4f]
call fcn.1400d2278
mov rsi, rax
cmp rax, rbx
je 0x140030aac
mov ecx, dword [rsp + 0x358]
add ecx, 2
movsxd rdx, ecx
mov rcx, rax
call fcn.1400571c8
jmp 0x140030aaf
mov rsi, rbx
mov eax, 1
lea r9, [rsp + 0x370]
lea r8, [rsp + 0x3e0]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x3d8]
lea rcx, [rsp + 0x3d0]
mov dword [rsp + 0x20], 8
mov qword [rsp + 0x370], rsi
call fcn.1400574a4
mov rcx, qword [rsi]
mov r8, r13
mov rdx, r12
call fcn.14001a9b0
mov r12, qword [rsi]
mov eax, 0x57
mov word [r13 + r12], ax
mov rax, qword [rsp + 0x340]
mov rcx, r15
mov word [r12 + rax*2 + 2], bx
mov rdx, qword [rsp + 0x330]
cmp r14b, 2
jne 0x140030b30
call fcn.1400159f0
jmp 0x140030b36
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
cmp rax, rbx
jne 0x140030ba3
mov eax, 0x41
lea rcx, [rsp + 0x358]
mov rdx, r12
mov word [r13 + r12], ax
or rax, 0xffffffffffffffff
mov qword [rsp + 0x358], rbx
mov r9, rax
mov r8, rax
call fcn.140057090
mov rdx, qword [rsp + 0x358]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rsp + 0x358]
mov rsi, rax
call fcn.14004f564
cmp rsi, rbx
je 0x140030b9b
mov byte [rsp + 0x322], 0x40
jmp 0x140030ba3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
lea rcx, [rsp + 0x330]
call fcn.14004f564
cmp byte [rsp + 0x32a], bl
je 0x140030ca2
cmp byte [rsp + 0x326], bl
jle 0x140030bdd
cmp byte [rsp + 0x354], bl
jg 0x140030bdd
cmp r15, rbx
je 0x140030bdd
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [rsp + 0x329], bl
je 0x140030c12
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
lea rcx, [rsp + 0x368]
call fcn.14004f564
lea rcx, [rsp + 0x3d0]
call fcn.140028ab8
mov rbp, rsi
jmp 0x140030c73
cmp rsi, rbx
je 0x140030c2f
lea rdx, [0x1400f2dd8]
lea rcx, [rsp + 0x790]
mov r8, rsi
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0x398]
mov rcx, qword [rsp + 0x1250]
lea r8, [rsp + 0x790]
call fcn.140056790
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
lea rcx, [rsp + 0x368]
call fcn.14004f564
lea rcx, [rsp + 0x3d0]
call fcn.140028ab8
lea rcx, [rsp + 0x788]
call fcn.14004f564
lea rcx, [rsp + 0x398]
call fcn.14004f564
lea rcx, [rsp + 0x3c8]
call fcn.14004f564
mov rax, rbp
jmp 0x1400326ab
mov r13b, bl
cmp rsi, rbx
je 0x140031b70
mov r14d, dword [rsp + 0x378]
test r14b, 7
je 0x140030d27
call fcn.140055a3c
cmp r14d, ebx
je 0x140030d27
cmp qword [0x14010c540], rbx
je 0x140030d27
cmp qword [0x14010c548], rbx
je 0x140030d27
lea rcx, [0x14010ce50]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r14, qword [rsp + 0x1250]
mov al, byte [r14 + 0x12]
test al, 2
jne 0x140030d18
mov ecx, 1
movzx r13d, bl
test cl, al
cmove r13d, ecx
or al, 3
xor ecx, ecx
mov byte [r14 + 0x12], al
or r13b, 2
call qword [0x14010c540]
jmp 0x140030d2f
lea rcx, [0x14010ce50]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x140030d2f
mov r14, qword [rsp + 0x1250]
cmp byte [rsp + 0x324], bl
je 0x140030d40
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [rsp + 0x327], bl
je 0x140030e4b
cmp byte [rsp + 0x322], 0x40
mov ebp, 1
mov qword [rsp + 0x378], rbx
mov byte [rsp + 0x325], bpl
mov word [rsp + 0x1260], bx
jne 0x140030da8
mov rdx, qword [rsp + 0x348]
cmp rdx, rbx
je 0x140030db2
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0x378]
mov r9, rax
mov r8, rax
call fcn.140057090
mov r11, qword [rsp + 0x378]
mov qword [rsp + 0x348], r11
cmp qword [rsp + 0x348], rbx
jne 0x140030dc2
lea rax, [rsp + 0x1260]
mov qword [rsp + 0x348], rax
mov rdi, qword [0x14010bd40]
xor edx, edx
mov rcx, r14
call fcn.14001854c
mov r14d, 5
cmp r12, rbx
je 0x140030e11
lea r8d, [r14 + 0xd]
lea rcx, str.InstallHinfSection
mov rdx, r12
call fcn.140050a6c
cmp al, bl
je 0x140030e11
cmp word [r12 + 0x24], bx
je 0x140030e0b
mov word [r12 + 0x24], bp
cmp word [r12 + 0x26], bx
jne 0x140030e11
mov r14, rbx
mov rdi, rbx
mov r12, qword [rsp + 0x1250]
mov rcx, qword [r12 + 0x40]
call fcn.14004f8d0
mov r8, qword [rsp + 0x348]
mov r9, r14
mov rcx, rax
mov rdx, rdi
call rsi
lea rcx, [rsp + 0x378]
mov rbp, rax
call fcn.14004f564
jmp 0x140031b78
mov r14d, 1
cmp dword [rsp + 0x1260], r14d
jne 0x140031aad
cmp edi, 0x64
setbe al
mov byte [rsp + 0x325], al
cmp edi, 0x10
ja 0x1400310a0
cmp edi, 8
ja 0x140030f91
je 0x140031c76
cmp edi, ebx
je 0x140030f8a
sub edi, r14d
je 0x140031b54
sub edi, r14d
je 0x140031b40
sub edi, r14d
je 0x140031b24
sub edi, r14d
je 0x140031b00
sub edi, r14d
je 0x140030f56
sub edi, r14d
je 0x140030f15
sub edi, r14d
jne 0x140031b61
mov rax, qword [rsp + 0x420]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x418]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x410]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
call rsi
jmp 0x140031b5e
mov eax, 9
sub edi, eax
je 0x140031c0e
sub edi, r14d
je 0x140031d12
sub edi, r14d
je 0x14003204d
sub edi, r14d
je 0x140031fbe
sub edi, r14d
je 0x140031f22
sub edi, r14d
je 0x140031e79
sub edi, r14d
je 0x140031dc3
sub edi, r14d
jne 0x140031b61
mov rax, qword [rsp + 0x468]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
cmp edi, 0x14
jbe 0x1400320f3
cmp edi, 0x1e
ja 0x140031255
mov rax, qword [rsp + 0x4d8]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x3f8]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x4c8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
cmp edi, 0x28
ja 0x1400314a1
mov rax, qword [rsp + 0x528]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x520]
mov rdx, qword [rsp + 0x3f8]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x518]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x4f8]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x4d8]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
cmp edi, 0x64
ja 0x140031b61
mov rax, qword [rsp + 0x708]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0x700]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x6f8]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x6f0]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0x6e8]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x6e0]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x6d8]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0x6c8]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0x6c0]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x6a8]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x6a0]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x698]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x670]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0x668]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x658]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0x650]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0x648]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x638]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x630]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x628]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x620]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x618]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0x610]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x608]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x600]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x5f8]
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x5e8]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x5e0]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x5d8]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x5d0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x5c8]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x5c0]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x5b8]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x5b0]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x5a8]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x598]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x590]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x588]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x578]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x570]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x568]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x558]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x548]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x538]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x530]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x528]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x4f8]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x4d8]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x480]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
cmp edi, 0x14
setbe al
mov byte [rsp + 0x325], al
cmp edi, 0xa
ja 0x140031d87
je 0x140031d12
mov r14d, 5
cmp edi, r14d
ja 0x140031be8
je 0x140031bb7
cmp edi, ebx
je 0x140031b6b
mov r14d, 1
sub edi, r14d
je 0x140031b54
sub edi, r14d
je 0x140031b40
sub edi, r14d
je 0x140031b24
sub edi, r14d
jne 0x140031b61
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
call rsi
jmp 0x140031b5e
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
call rsi
jmp 0x140031b5e
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
call rsi
jmp 0x140031b5e
mov rcx, qword [rsp + 0x3f0]
call rsi
mov rbp, rax
mov r12, qword [rsp + 0x1250]
jmp 0x140031b7e
call rsi
mov rbp, rax
mov r12, qword [rsp + 0x1250]
mov r14d, 1
mov dil, byte [rsp + 0x324]
mov qword [rsp + 0x370], rbp
cmp dil, bl
je 0x1400324bd
cmp dil, 2
jne 0x1400324ad
cmp ebp, r14d
jne 0x14003249f
mov qword [rsp + 0x370], rbx
jmp 0x1400324bd
mov rax, qword [rsp + 0x410]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b6d
sub edi, 6
je 0x140031cd1
mov r14d, 1
sub edi, r14d
je 0x140030ec7
sub edi, r14d
je 0x140031c76
sub edi, r14d
jne 0x140031b61
mov rax, qword [rsp + 0x430]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x428]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x418]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b6d
mov rax, qword [rsp + 0x438]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
cmp edi, 0x10
ja 0x1400320cf
je 0x140030fdd
sub edi, 0xb
je 0x14003204d
sub edi, r14d
je 0x140031fbe
sub edi, r14d
je 0x140031f22
sub edi, r14d
je 0x140031e79
sub edi, r14d
jne 0x140031b61
mov rax, qword [rsp + 0x460]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x458]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x450]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x448]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x440]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
sub edi, 0x11
je 0x1400323cc
sub edi, r14d
je 0x1400322e9
sub edi, r14d
je 0x1400321f6
sub edi, r14d
jne 0x140031b61
mov rax, qword [rsp + 0x488]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x480]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x480]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x478]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
mov rax, qword [rsp + 0x470]
mov r9, qword [rsp + 0x408]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x20], rax
call rsi
jmp 0x140031b5e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
cmove eax, r14d
jmp 0x1400324b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, eax
mov qword [rsp + 0x370], rax
cmp byte [rsp + 0x326], bl
jle 0x1400324dd
cmp byte [rsp + 0x354], bl
jg 0x1400324dd
cmp r15, rbx
je 0x1400324dd
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp r13b, bl
je 0x1400324fd
call qword [0x14010c548]
lea rcx, [0x14010ce50]
not r13b
and byte [r12 + 0x12], r13b
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [rsp + 0x323]
cmp al, bl
jg 0x14003251c
mov rcx, qword [rsp + 0x3a8]
call fcn.1400177e0
mov al, byte [rsp + 0x323]
cmp qword [rsp + 0x388], rbx
je 0x14003252a
cmp al, bl
jg 0x14003252f
call fcn.14001aecc
lea rcx, [rsp + 0x3a8]
call fcn.14004f564
mov dil, byte [rsp + 0x321]
mov r12b, byte [rsp + 0x325]
jmp 0x14002fb3b
add r8, 2
lea rcx, [rsp + 0x790]
mov rdx, rbp
call fcn.1400c16ec
neg byte [rsp + 0x324]
sbb rax, rax
and rax, qword [rsp + 0x370]
mov rdi, rax
mov qword [rsp + 0x370], rax
jmp 0x140032592
mov rdi, qword [rsp + 0x370]
mov r13d, 0x2a
mov rcx, qword [rsp + 0x368]
cmp rcx, rbx
je 0x1400325a4
call fcn.1400159ac
mov rdx, qword [rsp + 0x398]
cmp word [rdx], bx
je 0x1400325cc
cmp r13w, word [rdx]
je 0x1400325cc
mov rcx, qword [rsp + 0x1250]
lea r8, [rsp + 0x790]
call fcn.140056790
cmp dword [rsp + 0x3a0], ebx
jge 0x140032611
mov rsi, qword [rsp + 0x3b8]
mov edi, 1
mov rax, qword [rsp + rsi*8 + 0xec0]
cmp rax, rbx
je 0x140032604
lea rcx, [rsp + 0x3c0]
mov qword [rsp + 0x3c0], rax
call fcn.14004f564
add rsi, rdi
js 0x1400325e2
mov rdi, qword [rsp + 0x370]
lea rcx, [rsp + 0x368]
call fcn.14004f564
lea rcx, [rsp + 0x3d0]
call fcn.140028ab8
lea rcx, [rsp + 0x788]
call fcn.14004f564
lea rcx, [rsp + 0x398]
call fcn.14004f564
lea rcx, [rsp + 0x3c8]
call fcn.14004f564
mov rax, rdi
jmp 0x1400326ab
lea rcx, [rsp + 0x368]
call fcn.14004f564
lea rcx, [rsp + 0x3d0]
call fcn.140028ab8
lea rcx, [rsp + 0x788]
call fcn.14004f564
lea rcx, [rsp + 0x398]
call fcn.14004f564
lea rcx, [rsp + 0x3c8]
call fcn.14004f564
neg byte [rsp + 0x329]
sbb rax, rax
not rax
and rax, 0xffffffff80070057
mov rbx, qword [rsp + 0x1268]
add rsp, 0x1210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret