Function at 0x1400c4980
Capabilities:
Create process on windows
Enumerate gui resources
Query environment variable

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x270]
sub rsp, 0x370
mov qword [rbp - 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x3b8], rbx
mov rax, qword [0x14047b0a0]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov rsi, r9
mov r15d, r8d
mov r13, rdx
mov qword [rsp + 0x70], rdx
mov rdi, rcx
mov r12, qword [rbp + 0x2d0]
mov r14, qword [rbp + 0x2d8]
mov ebx, 1
mov dword [rsp + 0x40], ebx
cmp dword [rbp + 0x2e0], 0
jne 0x1400c5948
xor r8d, r8d
cmp r15d, ebx
jne 0x1400c4a33
mov dword [rsp + 0x40], r8d
call fcn.1400d61e0
xor edx, edx
mov rcx, rdi
call fcn.1400d6260
mov byte [rdi + 0xa94], bl
mov rcx, rdi
call fcn.1400c8880
xor r8d, r8d
cmp dword [rsp + 0x40], r8d
mov qword [r14], r8
je 0x1400c5920
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 2
jne 0x1400c4a4d
mov dword [rsp + 0x40], r8d
mov byte [rcx + 0xa94], r8b
mov qword [r14], r8
jmp 0x1400c5920
cmp r15d, 5
jne 0x1400c4a7a
call fcn.1400d2420
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1400c61c0
xor r8d, r8d
mov dword [rsp + 0x40], r8d
mov qword [r14], r8
jmp 0x1400c5920
cmp r15d, 3
jne 0x1400c4aa4
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.1400c61c0
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x205
jne 0x1400c4ad4
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r12
call fcn.1400c62f0
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0xbec
jne 0x1400c4afd
mov r9, r12
mov r8, rsi
call fcn.1400c6750
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x100
jne 0x1400c4b2d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r8, rsi
call fcn.1400c6bb0
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x104
jne 0x1400c4b5d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r8, rsi
call fcn.1400c75e0
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x102
jne 0x1400c4b8d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r8, rsi
call fcn.1400c7880
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x113
jne 0x1400c4c4d
mov rax, rsi
sub rax, 0x7d0
je 0x1400c4bf4
cmp rax, rbx
je 0x1400c4bb4
mov dword [rsp + 0x40], r8d
jmp 0x1400c4c38
mov ebx, dword [rcx + 0x88]
shl ebx, 0x10
or ebx, 0x7d1
mov rcx, qword [rcx + 0xb8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400c4be3
mov edx, ebx
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_KillTimer]
mov ebx, 1
mov edx, ebx
mov rcx, rdi
call fcn.1400d3e80
jmp 0x1400c4c35
mov ebx, dword [rcx + 0x88]
shl ebx, 0x10
or ebx, 0x7d0
mov rcx, qword [rcx + 0xb8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400c4c23
mov edx, ebx
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_KillTimer]
mov edx, 2
mov rcx, rdi
call fcn.1400d3e80
mov ebx, 1
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], 0
je 0x1400c5920
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x308
jne 0x1400c4c76
mov r9, r12
mov r8, rsi
call fcn.1400c7d70
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x2e0
jne 0x1400c4cac
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, rsi
mov edx, r15d
call fcn.1400c7f30
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x20a
jne 0x1400c4ce2
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, rsi
mov edx, r15d
call fcn.1400c8510
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0xa3
jne 0x1400c4d2c
mov dword [rsp + 0x40], r8d
mov r9, r12
mov r8, rsi
mov edx, 0x82d
mov ecx, dword [rcx + 0xa90]
call fcn.140125f60
mov ecx, dword [rsp + 0x40]
cmp rax, 0xffffffff80004004
cmove ecx, ebx
mov dword [rsp + 0x40], ecx
xor r8d, r8d
mov qword [r14], r8
test ecx, ecx
je 0x1400c5920
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x20b
jne 0x1400c4d90
mov rax, rsi
shr rax, 0x10
cmp ax, bx
jne 0x1400c4c38
mov rax, qword [rcx + 0xa28]
test rax, rax
je 0x1400c4d66
mov eax, dword [rax + 0x84]
add eax, 0xfffffffc
cmp eax, ebx
ja 0x1400c4d66
mov eax, dword [rcx + 0x88]
jmp 0x1400c4d6e
call fcn.1400d6130
xor r8d, r8d
test eax, eax
je 0x1400c4c38
xor r9d, r9d
mov edx, VarUI4FromDisp
mov r8d, 0x1770
mov ecx, eax
call fcn.140125f60
jmp 0x1400c4c35
cmp r15d, 0x111
jne 0x1400c552b
mov ecx, 0x2710
movzx eax, si
sub ax, cx
cmp ax, 8
ja 0x1400c4ddc
mov rdx, rsi
shr rdx, 0x10
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9, r12
movzx r8d, si
mov rcx, rdi
call fcn.1400ca010
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
jne 0x1400c4a2c
mov ecx, 0x2719
movzx eax, si
sub ax, cx
cmp ax, 4
ja 0x1400c4e1f
mov dword [rsp + 0x40], ebx
mov rdx, rsi
shr rdx, 0x10
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9, r12
movzx r8d, si
mov rcx, rdi
call fcn.1400ca500
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
jne 0x1400c4a2c
mov r8d, 0x2721
cmp r8w, si
jne 0x1400c4e52
mov dword [rsp + 0x40], ebx
mov r9d, dword [rdi + 0x30]
mov edx, VarUI4FromDisp
mov ecx, dword [rdi + 0xa90]
call fcn.140126000
xor eax, eax
mov qword [r14], rax
cmp dword [rsp + 0x40], eax
jne 0x1400c4a2c
mov ecx, 0x2722
movzx eax, si
sub ax, cx
cmp ax, bx
ja 0x1400c4e83
mov dword [rsp + 0x40], ebx
mov r9, r12
movzx r8d, si
mov rcx, rdi
call fcn.1400cb6d0
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
jne 0x1400c4a2c
mov ecx, 0x2724
movzx eax, si
sub ax, cx
cmp ax, 7
ja 0x1400c4eb5
mov dword [rsp + 0x40], ebx
mov r9, r12
movzx r8d, si
mov rcx, rdi
call fcn.1400cb920
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
jne 0x1400c4a2c
mov r8d, 0x272c
movzx eax, si
sub ax, r8w
cmp ax, 2
ja 0x1400c4f25
mov dword [rsp + 0x40], ebx
xor eax, eax
mov edx, eax
movzx ecx, si
sub ecx, r8d
je 0x1400c4ef4
sub ecx, ebx
je 0x1400c4eec
cmp ecx, ebx
jne 0x1400c4efa
mov rcx, rdi
call fcn.140132940
mov edx, eax
jmp 0x1400c4efa
mov edx, dword [rdi + 0x8c]
jmp 0x1400c4efa
mov edx, dword [rdi + 0x88]
movzx r9d, si
mov r8d, edx
mov edx, 0xbd5
mov ecx, dword [rdi + 0xa90]
call fcn.140126000
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
je 0x1400c4f28
mov eax, ebx
jmp 0x1400c594a
xor r8d, r8d
mov edx, 0x272f
movzx eax, si
sub ax, dx
cmp ax, bx
ja 0x1400c4ff6
mov dword [rsp + 0x40], ebx
mov ebx, r8d
mov dword [rsp + 0x44], ebx
movzx ecx, si
sub ecx, edx
je 0x1400c4f5f
cmp ecx, 1
jne 0x1400c4fca
mov rcx, rdi
call fcn.140132940
mov ebx, eax
jmp 0x1400c4fca
mov rcx, rdi
call fcn.140132940
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.1400d5910
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x1400c4f85
mov eax, dword [rax + 0x25c]
mov dword [rsp + 0x44], eax
mov r13, qword [rbp - 0x58]
test r13, r13
je 0x1400c4fc1
mov rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [r13 + 8], eax
cmp eax, 1
jne 0x1400c4fc1
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
lock xadd dword [r13 + 0xc], ebx
cmp ebx, 1
jne 0x1400c4fc1
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov ebx, dword [rsp + 0x44]
mov r13, qword [rsp + 0x70]
movzx r9d, si
mov r8d, ebx
mov edx, 0xbe6
mov ecx, dword [rdi + 0xa90]
call fcn.140126000
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
jne 0x1400c5196
lea ebx, [r8 + 1]
mov eax, 0x2731
cmp ax, si
jne 0x1400c5034
mov dword [rsp + 0x40], ebx
mov r8d, eax
mov rdx, rsi
shr rdx, 0x10
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9, r12
mov rcx, rdi
call fcn.1400cbc10
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
jne 0x1400c4a2c
xor r8d, r8d
mov eax, 0x2732
cmp ax, si
jne 0x1400c50a4
mov dword [rsp + 0x40], ebx
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x50]
call fcn.1402dd440
mov r8d, 0x104
lea rdx, [rbp + 0x50]
lea rcx, str._windir__system32_rundll32.exe
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [rsp + 0x28], 5
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, str.shell32.dll_Control_RunDLL_desk.cpl__0
lea r8, [rbp + 0x50]
lea rdx, [0x1403ff888]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
jne 0x1400c4a2c
mov ecx, 0x2733
movzx eax, si
sub ax, cx
cmp ax, 1
ja 0x1400c50e7
mov dword [rsp + 0x40], ebx
mov r9, r8
cmp si, cx
sete r9b
xor r8d, r8d
mov edx, 0xc0f
mov ecx, dword [rdi + 0xa90]
call fcn.140125f60
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
jne 0x1400c4a2c
mov eax, 0x2735
cmp ax, si
jne 0x1400c51a0
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x48], 0xffff8000
mov dword [rsp + 0x4c], 0xffff8000
lea rbx, [rdi + 0xa58]
mov dword [rbp - 0x78], 1
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x74], rax
lea rdx, [rbp - 0x78]
mov rcx, rbx
call fcn.1400df660
lea r9, [rax + 0x1c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x30]
mov rcx, rbx
call fcn.1400df690
mov edx, 0x7d1
lea r8d, [rdx - 1]
mov rcx, rdi
call fcn.14012c0c0
xor eax, eax
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea rcx, [0x140136380]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400c5189
xor r9d, r9d
mov edx, VarUI4FromDisp
mov r8d, 0x701b
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
je 0x1400c51a7
mov eax, 1
jmp 0x1400c594a
lea rbx, [rdi + 0xa58]
mov eax, 0x2736
cmp ax, si
jne 0x1400c5257
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x58], 0xffff8000
mov dword [rsp + 0x5c], 0xffff8000
mov dword [rbp - 0x6c], 1
mov rax, qword [rsp + 0x58]
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x6c]
mov rcx, rbx
call fcn.1400df660
lea r9, [rax + 0x1c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.1400df690
mov edx, 0x7d1
lea r8d, [rdx - 1]
mov rcx, rdi
call fcn.14012c0c0
xor eax, eax
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x140136380]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400c5246
xor r9d, r9d
mov edx, VarUI4FromDisp
mov r8d, 0x7020
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
jne 0x1400c5196
mov edx, 0x3e8
cmp dx, si
jne 0x1400c52f6
mov dword [rsp + 0x40], 1
mov rax, qword [rdi + 0xa28]
test rax, rax
je 0x1400c52aa
mov ecx, dword [rax + 0x84]
lea eax, [rcx - 2]
test eax, 0xfffffffc
jne 0x1400c52aa
cmp ecx, 3
je 0x1400c52aa
mov ecx, dword [rdi + 0x25c]
test ecx, ecx
je 0x1400c52aa
mov r9, r12
mov r8d, edx
mov edx, VarUI4FromDisp
call fcn.140125f60
jmp 0x1400c52e7
movsx eax, r12w
mov dword [rsp + 0x68], eax
mov rax, r12
shr rax, 0x10
cwde
mov dword [rsp + 0x6c], eax
mov rax, qword [rdi]
mov rbx, qword [rax + 0x48]
mov qword [rsp + 0x78], r8
mov qword [rbp - 0x80], r8
call fcn.1400800c0
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call rbx
xor eax, eax
mov qword [r14], rax
cmp dword [rsp + 0x40], eax
jne 0x1400c5196
mov eax, 0x3eb
cmp ax, si
jne 0x1400c5340
mov dword [rsp + 0x40], 1
cmp byte [rdi + 0xc1], 0
sete cl
mov rax, qword [rdi + 0xa28]
mov byte [rax + 0x80], cl
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbed
mov ecx, dword [rdi + 0xa90]
call fcn.140126000
xor r8d, r8d
mov dword [rsp + 0x40], r8d
mov qword [r14], r8
mov eax, 0x3ea
cmp ax, si
jne 0x1400c5376
mov dword [rsp + 0x40], 1
xor r9d, r9d
mov edx, VarUI4FromDisp
mov r8d, 0x272b
mov ecx, dword [rdi + 0xa90]
call fcn.140125f60
xor r8d, r8d
mov dword [rsp + 0x40], r8d
mov qword [r14], r8
mov r8d, 0x1771
cmp r8w, si
jne 0x1400c5420
mov dword [rsp + 0x40], 1
mov rcx, qword [rdi + 0xa28]
test rcx, rcx
je 0x1400c53bf
mov eax, dword [rcx + 0x84]
cmp eax, 4
je 0x1400c53aa
cmp eax, 5
jne 0x1400c53bf
xor r9d, r9d
mov edx, VarUI4FromDisp
mov ecx, dword [rdi + 0x25c]
call fcn.140125f60
jmp 0x1400c540f
mov dword [rbp - 0x40], reloc.WS2_32.dll_WSASetLastError
mov dword [rbp - 0x3c], ILClone
lea rbx, [0x1403ff228]
mov qword [rbp - 0x30], rbx
call fcn.140084eb0
mov qword [rbp], rax
mov rax, qword [rdi + 0xb8]
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x10], 1
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
xor eax, eax
mov qword [rbp - 0x28], rax
mov qword [rbp - 8], rax
lea rcx, [rbp - 0x40]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
jne 0x1400c5196
mov r8d, 0x1770
cmp r8w, si
jne 0x1400c5492
mov dword [rsp + 0x40], 1
mov rax, qword [rdi + 0xa28]
test rax, rax
je 0x1400c547c
mov ecx, dword [rax + 0x84]
cmp ecx, 4
jne 0x1400c5460
xor r9d, r9d
mov edx, VarUI4FromDisp
mov ecx, dword [rdi + 0x25c]
call fcn.140125f60
jmp 0x1400c547c
cmp ecx, 5
jne 0x1400c547c
mov r9d, dword [rdi + 0x25c]
mov edx, VarUI4FromDisp
mov ecx, dword [rdi + 0xa90]
call fcn.140126000
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
je 0x1400c5495
lea eax, [r8 + 1]
jmp 0x1400c594a
xor r8d, r8d
mov edx, 0x3ed
cmp dx, si
jne 0x1400c5920
mov dword [rsp + 0x40], r8d
mov rax, qword [rdi + 0xa28]
test rax, rax
je 0x1400c54e5
mov ecx, dword [rax + 0x84]
lea eax, [rcx - 2]
test eax, 0xfffffffc
jne 0x1400c54e5
cmp ecx, 3
je 0x1400c54e5
mov ecx, dword [rdi + 0x25c]
test ecx, ecx
je 0x1400c54e5
mov r9, r12
mov r8d, edx
mov edx, VarUI4FromDisp
call fcn.140125f60
jmp 0x1400c5511
xor edx, edx
lea rax, [rsp + 0x40]
xor r9d, r9d
mov rcx, rdi
mov qword [rsp + 0x20], rax
cmp byte [rdi + 0x940], r9b
mov r8d, 0x2714
jne 0x1400c550c
mov r8d, 0x2710
call fcn.1400ca010
xor r8d, r8d
mov qword [r14], r8
cmp dword [rsp + 0x40], r8d
je 0x1400c5920
lea eax, [r8 + 1]
jmp 0x1400c594a
cmp r15d, 0x809
jne 0x1400c558c
mov dword [rsp + 0x40], r8d
test rsi, rsi
je 0x1400c4c38
cmp qword [r9], r8
jne 0x1400c5553
mov rax, qword [r9 + 0x10]
mov dword [rax], r8d
jmp 0x1400c4c38
test byte [r9 + 8], 2
mov eax, r8d
setne al
inc eax
mov dword [rcx + 0xa98], eax
mov eax, dword [r9 + 0x18]
mov dword [rsp + 0x28], eax
mov rax, qword [r9 + 0x10]
mov qword [rsp + 0x20], rax
mov r9, qword [r9 + 0x1c]
mov r8d, dword [rsi + 8]
mov rdx, qword [rsi]
call fcn.1400d7740
jmp 0x1400c4c35
cmp r15d, 0x80c
jne 0x1400c55ed
test rsi, rsi
je 0x1400c4c38
mov rdx, qword [r9]
test rdx, rdx
jne 0x1400c55b2
mov rax, qword [r9 + 0x10]
mov dword [rax], r8d
jmp 0x1400c4c38
mov eax, dword [r9 + 0x18]
mov dword [rsp + 0x28], eax
mov rax, qword [r9 + 0x10]
mov qword [rsp + 0x20], rax
mov r9, qword [r9 + 0x1c]
mov r8d, dword [rsi + 8]
call fcn.1400d7740
mov ecx, dword [rsp + 0x40]
cmp rax, 0xffffffff80004005
mov r8d, 0
cmove ecx, r8d
mov dword [rsp + 0x40], ecx
jmp 0x1400c4c38
cmp r15d, 0x80b
jne 0x1400c5648
mov dword [rsp + 0x40], r8d
cmp byte [rcx + 0xac0], r8b
je 0x1400c563b
mov rcx, qword [rcx + 0xab0]
test rcx, rcx
je 0x1400c563b
cmp byte [rdi + 0xab8], r8b
je 0x1400c563b
mov rax, qword [rcx]
call qword [rax + Ordinal_41]
cmp byte [rdi + 0xac0], 0
je 0x1400c563b
lea rcx, [rdi + 0xaa0]
call fcn.1400d82d0
mov byte [rdi + 0xac0], 0
mov rcx, rdi
call fcn.1400d8640
jmp 0x1400c4a1b
cmp r15d, 0x80d
jne 0x1400c5678
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r8, rsi
call fcn.1400d2810
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x81b
jne 0x1400c569e
mov r9, r12
call fcn.1400d3fc0
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x81c
jne 0x1400c56c4
mov r9, r12
call fcn.1400d4310
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x82a
jne 0x1400c56ed
mov r9, r12
mov r8, rsi
call fcn.1400d4570
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x82b
jne 0x1400c5716
mov r9, r12
mov r8, rsi
call fcn.1400d4b30
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x831
jne 0x1400c5748
mov rcx, qword [rcx + 0xa28]
movzx eax, byte [rdi + 0x9c]
mov byte [rcx + 0x60], al
xor r9d, r9d
mov edx, 0xbed
mov ecx, dword [rdi + 0xa90]
call fcn.140126000
jmp 0x1400c4a1b
cmp r15d, 0x808
jne 0x1400c5863
mov dword [rsp + 0x40], r8d
test r12, r12
je 0x1400c5859
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [r12 + rbx*2], r8w
jne 0x1400c5770
mov r8, rbx
mov rcx, qword [rcx + 0xa28]
add rcx, 0x10
mov rdx, r12
call fcn.14007ece0
mov rax, qword [rdi + 0xa28]
cmp rsi, 0x830
jne 0x1400c57e2
test rax, rax
je 0x1400c5852
mov eax, dword [rax + 0x84]
cmp eax, 2
jne 0x1400c57c6
mov rax, qword [rdi + 0x7b8]
sub rax, qword [rdi + 0x7b0]
sar rax, 4
cmp eax, 1
jne 0x1400c5852
mov rcx, rdi
call fcn.140132940
mov edx, 0x824
lea r8d, [rdx + 0xc]
jmp 0x1400c5848
test rax, rax
je 0x1400c581d
mov eax, dword [rax + 0x84]
cmp eax, 2
jne 0x1400c5818
mov rax, qword [rdi + 0x7b8]
sub rax, qword [rdi + 0x7b0]
sar rax, 4
cmp eax, 1
jne 0x1400c581d
xor r8d, r8d
mov ebx, eax
cmp dword [rsp + 0x40], r8d
jmp 0x1400c4a23
cmp eax, 1
je 0x1400c5852
mov rcx, rdi
call fcn.1400d5bd0
mov ebx, eax
mov r9, r12
mov r8, rsi
mov edx, 0x808
mov ecx, eax
call fcn.140125f60
mov ecx, ebx
call fcn.140125b60
mov r8, rsi
mov edx, 0x825
mov r9, r12
mov ecx, eax
call fcn.140125f60
xor r8d, r8d
lea ebx, [r8 + 1]
cmp dword [rsp + 0x40], 0
jmp 0x1400c4a23
cmp r15d, 0x80f
jne 0x1400c5893
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r8, rsi
call fcn.1400d5090
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
je 0x1400c591d
mov eax, ebx
jmp 0x1400c594a
cmp r15d, 0x82c
jne 0x1400c58db
mov ecx, r8d
mov dword [rsp + 0x40], ecx
mov rax, qword [rdi + 0xa28]
cmp dword [rax + 0x84], 2
jne 0x1400c58d4
mov r8d, dword [rdi + 0x88]
xor r9d, r9d
mov edx, 0xbf4
mov ecx, dword [rdi + 0xa90]
call fcn.140125f60
mov ecx, dword [rsp + 0x40]
xor r8d, r8d
test ecx, ecx
jmp 0x1400c4a23
cmp r15d, 0x82e
jne 0x1400c58fe
mov dword [rsp + 0x40], r8d
call fcn.1400d61e0
movzx edx, bl
mov rcx, rdi
call fcn.1400d6260
jmp 0x1400c4a1b
cmp r15d, 0x82f
jne 0x1400c5920
mov r8, rsi
call fcn.1400d5760
mov qword [r14], rax
cmp dword [rsp + 0x40], 0
jne 0x1400c4a2c
xor r8d, r8d
mov dword [rsp + 0x30], r8d
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r12
mov r9, rsi
mov r8d, r15d
mov rdx, r13
mov rcx, rdi
call fcn.1400c3e30
test eax, eax
jne 0x1400c5196
xor eax, eax
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.1401aed20
mov rbx, qword [rsp + 0x3b8]
add rsp, 0x370
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret