Function at 0x140001020
Capabilities:
Identify system language via api
Read .ini file

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e20]
mov eax, 0x2f20
call fcn.140006310
sub rsp, rax
mov qword [rbp - 0x10], 0xfffffffffffffffe
mov qword [rsp + 0x2f58], rbx
mov qword [rsp + 0x2f60], rsi
mov qword [rsp + 0x2f68], rdi
mov rax, qword [0x14000a008]
xor rax, rsp
mov qword [rbp + 0x2e10], rax
mov rsi, rcx
mov qword [rbp - 8], rcx
xor ebx, ebx
mov dword [rsp + 0x40], ebx
mov r8d, 0x104
lea rdx, [rbp + 0x2c00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [rbx + 0x5c]
lea rcx, [rbp + 0x2c00]
call qword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov word [rax], bx
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f2e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x2c00]
lea rdi, [rbx - 1]
cmp rax, 0x10000
jae 0x1400010ee
lea rax, [rbp + 0x2c00]
movzx edx, ax
lea rcx, [rsp + 0x38]
call fcn.140004220
jmp 0x14000111f
lea rcx, [rbp + 0x2c00]
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001100
mov r8d, eax
lea rdx, [rbp + 0x2c00]
lea rcx, [rsp + 0x38]
call fcn.140004430
nop
lea r14, str.config_shellexe.ini
mov rax, rdi
nop dword [rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x140001130
mov r12, r14
mov rbx, qword [rsp + 0x38]
sub r12, rbx
sar r12, 1
mov r15d, dword [rbx - 0x10]
mov dword [rsp + 0x30], r15d
test eax, eax
js 0x140002f23
movsxd rdx, eax
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r13, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r15d
jl 0x140002f23
add r15d, r13d
js 0x140002f23
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r15d
or eax, ecx
jge 0x1400011a6
mov edx, r15d
lea rcx, [rsp + 0x38]
call fcn.140004650
mov rbx, qword [rsp + 0x38]
mov eax, dword [rsp + 0x30]
cmp r12, rax
ja 0x1400011b3
lea r14, [rbx + r12*2]
movsxd rdx, r13d
lea rcx, [rbx + rax*2]
mov r9d, r13d
mov r8, r14
call fcn.1400045c0
lea r12, [rbx - 0x18]
cmp r15d, dword [r12 + 0xc]
jg 0x140002f23
mov dword [r12 + 8], r15d
movsxd rax, r15d
xor ecx, ecx
mov word [rbx + rax*2], cx
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f39
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsi], rax
lea rdx, str.Recover_any_deleted_data_with_EaseUS
cmp rdx, 0x10000
jae 0x14000121d
movzx edx, dx
mov rcx, rsi
call fcn.140004220
jmp 0x140001236
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x140001220
mov r8d, eax
mov rcx, rsi
call fcn.140004430
nop
mov dword [rsp + 0x40], 1
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx ecx, ax
cmp ecx, 0x801
ja 0x140001d42
je case.0x140001284.1025
sub ecx, 0x401
cmp ecx, 0x3d
ja case.0x140001d7f.2053
movsxd rax, ecx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x3084]
mov ecx, dword [rdx + rax*4 + 0x302c]
add rcx, rdx
jmp rcx
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp]
lea r8, [0x140007a70]
lea rdx, str.Danish
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f44
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rax, [rbp]
cmp rax, 0x10000
jae 0x140001302
lea rax, [rbp]
movzx edx, ax
lea rcx, [rsp + 0x30]
call fcn.140004220
jmp 0x14000132c
lea rcx, [rbp]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001310
mov r8d, eax
lea rdx, [rbp]
lea rcx, [rsp + 0x30]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x30]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x14000138e
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001381
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001381
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001378
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x14000138e
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400013a8
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x200]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x200]
lea r8, [0x140007a70]
lea rdx, str.Indonesian
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f4f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x200]
cmp rax, 0x10000
jae 0x140001435
lea rax, [rbp + 0x200]
movzx edx, ax
lea rcx, [rsp + 0x48]
call fcn.140004220
jmp 0x14000145f
lea rcx, [rbp + 0x200]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001440
mov r8d, eax
lea rdx, [rbp + 0x200]
lea rcx, [rsp + 0x48]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x48]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x1400014c1
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400014b4
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x1400014b4
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400014ab
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x1400014c1
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400014db
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x400]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x400]
lea r8, [0x140007a70]
lea rdx, str.Japanese
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f5a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x400]
cmp rax, 0x10000
jae 0x140001568
lea rax, [rbp + 0x400]
movzx edx, ax
lea rcx, [rsp + 0x50]
call fcn.140004220
jmp 0x140001591
lea rcx, [rbp + 0x400]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001572
mov r8d, eax
lea rdx, [rbp + 0x400]
lea rcx, [rsp + 0x50]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x50]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x1400015f3
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400015e6
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x1400015e6
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400015dd
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x1400015f3
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x14000160d
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x600]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x600]
lea r8, [0x140007a70]
lea rdx, str.Korean
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f65
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x600]
cmp rax, 0x10000
jae 0x14000169a
lea rax, [rbp + 0x600]
movzx edx, ax
lea rcx, [rsp + 0x58]
call fcn.140004220
jmp 0x1400016c3
lea rcx, [rbp + 0x600]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400016a4
mov r8d, eax
lea rdx, [rbp + 0x600]
lea rcx, [rsp + 0x58]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x58]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001725
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001718
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001718
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14000170f
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001725
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x14000173f
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x800]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x800]
lea r8, [0x140007a70]
lea rdx, str.Mungarian
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f70
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x800]
cmp rax, 0x10000
jae 0x1400017cc
lea rax, [rbp + 0x800]
movzx edx, ax
lea rcx, [rsp + 0x60]
call fcn.140004220
jmp 0x1400017f5
lea rcx, [rbp + 0x800]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400017d6
mov r8d, eax
lea rdx, [rbp + 0x800]
lea rcx, [rsp + 0x60]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x60]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001857
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x14000184a
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x14000184a
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001841
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001857
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140001871
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xa00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0xa00]
lea r8, [0x140007a70]
lea rdx, str.Polish
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f7b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0xa00]
cmp rax, 0x10000
jae 0x1400018fe
lea rax, [rbp + 0xa00]
movzx edx, ax
lea rcx, [rsp + 0x68]
call fcn.140004220
jmp 0x14000192f
lea rcx, [rbp + 0xa00]
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001910
mov r8d, eax
lea rdx, [rbp + 0xa00]
lea rcx, [rsp + 0x68]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x68]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001991
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001984
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001984
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14000197b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001991
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400019ab
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xc00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0xc00]
lea r8, [0x140007a70]
lea rdx, str.Russian
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f86
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0xc00]
cmp rax, 0x10000
jae 0x140001a38
lea rax, [rbp + 0xc00]
movzx edx, ax
lea rcx, [rsp + 0x70]
call fcn.140004220
jmp 0x140001a61
lea rcx, [rbp + 0xc00]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001a42
mov r8d, eax
lea rdx, [rbp + 0xc00]
lea rcx, [rsp + 0x70]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x70]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001ac3
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001ab6
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001ab6
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001aad
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001ac3
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140001add
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xe00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0xe00]
lea r8, [0x140007a70]
lea rdx, str.Thai
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f91
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0xe00]
cmp rax, 0x10000
jae 0x140001b6a
lea rax, [rbp + 0xe00]
movzx edx, ax
lea rcx, [rsp + 0x78]
call fcn.140004220
jmp 0x140001b93
lea rcx, [rbp + 0xe00]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001b74
mov r8d, eax
lea rdx, [rbp + 0xe00]
lea rcx, [rsp + 0x78]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x78]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001bf5
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001be8
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001be8
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001bdf
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001bf5
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140001c0f
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1000]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1000]
lea r8, [0x140007a70]
lea rdx, str.Turkish
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f9c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rax, [rbp + 0x1000]
cmp rax, 0x10000
jae 0x140001c9a
lea rax, [rbp + 0x1000]
movzx edx, ax
lea rcx, [rbp - 0x80]
call fcn.140004220
jmp 0x140001cc2
lea rcx, [rbp + 0x1000]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001ca4
mov r8d, eax
lea rdx, [rbp + 0x1000]
lea rcx, [rbp - 0x80]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x80]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001d23
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001d16
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001d16
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001d0d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001d23
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140001d3d
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
cmp ecx, 0xc01
ja 0x1400025ce
je case.0x140001284.1025
sub ecx, 0x804
cmp ecx, 0x3a
ja case.0x140001d7f.2053
movsxd rax, ecx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x30f4]
mov ecx, dword [rdx + rax*4 + 0x30c4]
add rcx, rdx
jmp rcx
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1200]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1200]
lea r8, [0x140007a70]
lea rdx, str.Chinese
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fa7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rax, [rbp + 0x1200]
cmp rax, 0x10000
jae 0x140001e07
lea rax, [rbp + 0x1200]
movzx edx, ax
lea rcx, [rbp - 0x78]
call fcn.140004220
jmp 0x140001e2f
lea rcx, [rbp + 0x1200]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001e11
mov r8d, eax
lea rdx, [rbp + 0x1200]
lea rcx, [rbp - 0x78]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x78]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001e90
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001e83
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001e83
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001e7a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001e90
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140001eaa
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1400]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1400]
lea r8, [0x140007a70]
lea rdx, str.Dutch
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fb2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x1400]
cmp rax, 0x10000
jae 0x140001f35
lea rax, [rbp + 0x1400]
movzx edx, ax
lea rcx, [rbp - 0x70]
call fcn.140004220
jmp 0x140001f5e
lea rcx, [rbp + 0x1400]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140001f40
mov r8d, eax
lea rdx, [rbp + 0x1400]
lea rcx, [rbp - 0x70]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x70]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140001fbf
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140001fb2
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140001fb2
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140001fa9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140001fbf
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140001fd9
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1600]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1600]
lea r8, [0x140007a70]
lea rdx, str.Italian
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fbd
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rax, [rbp + 0x1600]
cmp rax, 0x10000
jae 0x140002064
lea rax, [rbp + 0x1600]
movzx edx, ax
lea rcx, [rbp - 0x68]
call fcn.140004220
jmp 0x14000208e
lea rcx, [rbp + 0x1600]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002070
mov r8d, eax
lea rdx, [rbp + 0x1600]
lea rcx, [rbp - 0x68]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x68]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x1400020ef
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400020e2
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x1400020e2
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400020d9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x1400020ef
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002109
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1800]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1800]
lea r8, [0x140007a70]
lea rdx, str.Malay
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fc8
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rax, [rbp + 0x1800]
cmp rax, 0x10000
jae 0x140002194
lea rax, [rbp + 0x1800]
movzx edx, ax
lea rcx, [rbp - 0x60]
call fcn.140004220
jmp 0x1400021be
lea rcx, [rbp + 0x1800]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400021a0
mov r8d, eax
lea rdx, [rbp + 0x1800]
lea rcx, [rbp - 0x60]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x60]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x14000221f
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002212
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002212
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002209
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x14000221f
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002239
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1a00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1a00]
lea r8, [0x140007a70]
lea rdx, str.Norwegian
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fd3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rax, [rbp + 0x1a00]
cmp rax, 0x10000
jae 0x1400022c4
lea rax, [rbp + 0x1a00]
movzx edx, ax
lea rcx, [rbp - 0x58]
call fcn.140004220
jmp 0x1400022ee
lea rcx, [rbp + 0x1a00]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400022d0
mov r8d, eax
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp - 0x58]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x58]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x14000234f
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002342
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002342
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002339
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x14000234f
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002369
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1c00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1c00]
lea r8, [0x140007a70]
lea rdx, str.Portuguesa
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fde
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rax, [rbp + 0x1c00]
cmp rax, 0x10000
jae 0x1400023f4
lea rax, [rbp + 0x1c00]
movzx edx, ax
lea rcx, [rbp - 0x50]
call fcn.140004220
jmp 0x14000241e
lea rcx, [rbp + 0x1c00]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002400
mov r8d, eax
lea rdx, [rbp + 0x1c00]
lea rcx, [rbp - 0x50]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x50]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x14000247f
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002472
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002472
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002469
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x14000247f
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002499
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1e00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x1e00]
lea r8, [0x140007a70]
lea rdx, str.Svenska
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fe9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x1e00]
cmp rax, 0x10000
jae 0x140002524
lea rax, [rbp + 0x1e00]
movzx edx, ax
lea rcx, [rbp - 0x48]
call fcn.140004220
jmp 0x14000254e
lea rcx, [rbp + 0x1e00]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002530
mov r8d, eax
lea rdx, [rbp + 0x1e00]
lea rcx, [rbp - 0x48]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x48]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x1400025af
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400025a2
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x1400025a2
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002599
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x1400025af
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400025c9
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
cmp ecx, 0x200a
ja 0x140002b6b
je case.0x140001d7f.2058
cmp ecx, 0x1407
ja 0x1400029fe
je case.0x140001d7f.2055
cmp ecx, 0x1004
ja 0x140002894
je case.0x140001284.1026
cmp ecx, 0xc0a
ja 0x1400026c1
je case.0x140001d7f.2058
sub ecx, 0xc04
je case.0x140001284.1026
sub ecx, 3
je case.0x140001d7f.2055
cmp ecx, 2
jne case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x2600]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x2600]
lea r8, [0x140007a70]
lea rdx, str.English
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002ff4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
lea rax, [rbp + 0x2600]
cmp rax, 0x10000
jae 0x140002be0
lea rax, [rbp + 0x2600]
movzx edx, ax
lea rcx, [rbp - 0x28]
call fcn.140004220
jmp 0x140002c0e
cmp ecx, 0xc0c
je case.0x140001d7f.2060
cmp ecx, 0x1001
jne case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x2800]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x2800]
lea r8, [0x140007a70]
lea rdx, str.Arabic
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002fff
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x2800]
cmp rax, 0x10000
jae 0x140002cdb
lea rax, [rbp + 0x2800]
movzx edx, ax
lea rcx, [rbp - 0x20]
call fcn.140004220
jmp 0x140002d03
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x2000]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x2000]
lea r8, [0x140007a70]
lea rdx, str.ChineseTrad
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x14000300a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x2000]
cmp rax, 0x10000
jae 0x1400027ec
lea rax, [rbp + 0x2000]
movzx edx, ax
lea rcx, [rbp - 0x40]
call fcn.140004220
jmp 0x140002814
lea rcx, [rbp + 0x2000]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400027f6
mov r8d, eax
lea rdx, [rbp + 0x2000]
lea rcx, [rbp - 0x40]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x40]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140002875
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002868
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002868
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14000285f
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140002875
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x14000288f
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
sub ecx, 0x1007
je case.0x140001d7f.2055
sub ecx, 2
je case.0x140001d7f.2057
sub ecx, 1
je case.0x140001d7f.2058
sub ecx, 2
je case.0x140001d7f.2060
cmp ecx, 0x3f5
je case.0x140001284.1025
jmp case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x2200]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x2200]
lea r8, [0x140007a70]
lea rdx, str.Deutsch
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140003015
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rax, [rbp + 0x2200]
cmp rax, 0x10000
jae 0x14000294e
lea rax, [rbp + 0x2200]
movzx edx, ax
lea rcx, [rbp - 0x38]
call fcn.140004220
jmp 0x14000297e
lea rcx, [rbp + 0x2200]
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002960
mov r8d, eax
lea rdx, [rbp + 0x2200]
lea rcx, [rbp - 0x38]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x38]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x1400029df
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400029d2
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x1400029d2
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400029c9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x1400029df
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400029f9
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
cmp ecx, 0x180a
ja 0x140002b63
je case.0x140001d7f.2058
sub ecx, 0x1409
je case.0x140001d7f.2057
sub ecx, 1
je case.0x140001d7f.2058
sub ecx, 2
je case.0x140001d7f.2060
sub ecx, 0x3f5
jmp 0x140002baf
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x2400]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x2400]
lea r8, [0x140007a70]
lea rdx, str.French
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140003020
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
lea rax, [rbp + 0x2400]
cmp rax, 0x10000
jae 0x140002abb
lea rax, [rbp + 0x2400]
movzx edx, ax
lea rcx, [rbp - 0x30]
call fcn.140004220
jmp 0x140002ae3
lea rcx, [rbp + 0x2400]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002ac5
mov r8d, eax
lea rdx, [rbp + 0x2400]
lea rcx, [rbp - 0x30]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x30]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140002b44
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002b37
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002b37
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002b2e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140002b44
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002b5e
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
sub ecx, 0x1c01
jmp 0x140002b91
cmp ecx, 0x3401
ja 0x140002c8e
je case.0x140001284.1025
cmp ecx, 0x280a
ja 0x140002bc3
je case.0x140001d7f.2058
sub ecx, 0x2401
je case.0x140001284.1025
sub ecx, 8
je case.0x140001d7f.2057
sub ecx, 1
je case.0x140001d7f.2058
sub ecx, 0x3f7
je case.0x140001284.1025
cmp ecx, 8
je case.0x140001d7f.2057
jmp case.0x140001d7f.2053
sub ecx, 0x2c01
je case.0x140001284.1025
sub ecx, 8
je case.0x140001d7f.2057
sub ecx, 1
jmp 0x140002cbb
lea rcx, [rbp + 0x2600]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002bf0
mov r8d, eax
lea rdx, [rbp + 0x2600]
lea rcx, [rbp - 0x28]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x28]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140002c6f
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002c62
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002c62
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002c59
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140002c6f
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002c89
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
cmp ecx, 0x4001
ja 0x140002d83
je case.0x140001284.1025
sub ecx, 0x340a
je case.0x140001d7f.2058
sub ecx, 0x3f7
je case.0x140001284.1025
sub ecx, 9
je case.0x140001d7f.2058
sub ecx, 0x3f7
je case.0x140001284.1025
cmp ecx, 9
je case.0x140001d7f.2058
jmp case.0x140001d7f.2053
lea rcx, [rbp + 0x2800]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002ce5
mov r8d, eax
lea rdx, [rbp + 0x2800]
lea rcx, [rbp - 0x20]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x20]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140002d64
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002d57
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002d57
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002d4e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140002d64
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140002d7e
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp case.0x140001d7f.2053
add ecx, 0xffffbff6
cmp ecx, 0x1000
ja case.0x140001d7f.2053
test ecx, 0x3ff
jne case.0x140001d7f.2053
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x2a00]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
lea r9, [rbp + 0x2a00]
lea r8, [0x140007a70]
lea rdx, str.Spanish
lea rcx, str.language
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140002f18
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
lea rax, [rbp + 0x2a00]
cmp rax, 0x10000
jae 0x140002e27
lea rax, [rbp + 0x2a00]
movzx edx, ax
lea rcx, [rbp - 0x18]
call fcn.140004220
jmp 0x140002e4f
lea rcx, [rbp + 0x2a00]
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002e31
mov r8d, eax
lea rdx, [rbp + 0x2a00]
lea rcx, [rbp - 0x18]
call fcn.140004430
nop
mov rdx, qword [rbp - 0x18]
lea r14, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp r14, rbx
je 0x140002eb0
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140002ea3
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140002ea3
mov rcx, r14
call fcn.1400043b0
mov r15, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140002e9a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
nop
lea rax, [r15 + 0x18]
mov qword [rsi], rax
jmp 0x140002eb0
mov r8d, dword [rdx - 0x10]
mov rcx, rsi
call fcn.140004430
nop
mov eax, edi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg case.0x140001d7f.2053
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
lock xadd dword [r12 + 0x10], edi
sub edi, 1
jg 0x140002ee5
mov rcx, qword [r12]
mov r8, qword [rcx]
mov rdx, r12
call qword [r8 + 8]
nop
mov rax, rsi
mov rcx, qword [rbp + 0x2e10]
xor rcx, rsp
call fcn.140005270
lea r11, [rsp + 0x2f20]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80070057
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3
mov ecx, 0x80004005
call fcn.140004e20
int3