Function at 0x1401aabd0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1d0
mov qword [rbp - 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140415a10]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r14, rcx
mov rax, qword [rcx]
lea rdx, [rbp + 0x30]
call qword [rax + 0x70]
nop
lea rcx, [rbp + 0x30]
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov qword [r14 + 0xb0], rax
mov rax, qword [r14 + 0xa8]
movzx r15d, byte [rax + 0x20]
mov r12b, 1
movzx r13d, r12b
mov byte [rsp + 0x71], r12b
mov byte [rsp + 0x72], r12b
mov byte [rsp + 0x60], r12b
mov byte [rsp + 0x70], r12b
xor esi, esi
mov qword [rbp - 0x68], rsi
lea edx, [rsi + 6]
lea rcx, [rbp - 0x70]
call fcn.1401fcb40
mov eax, dword [rbp - 0x68]
inc eax
movsxd rdx, eax
lea r9d, [rsi + 6]
lea r8, [0x140353a40]
mov rcx, qword [rbp - 0x70]
call fcn.1402ba94c
lea edx, [rsi + 6]
lea rcx, [rbp - 0x70]
call fcn.1401fde50
nop
mov rdi, qword [0x140416ee8]
lea rax, [0x140346ce0]
test rdi, rdi
jne 0x1401aacb3
mov ebx, esi
mov qword [rbp - 0x78], rsi
jmp 0x1401aacd2
or rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x1401aacc0
mov qword [rbp - 0x78], rsi
test ebx, ebx
jne 0x1401aacd8
mov qword [rbp - 0x80], rax
jmp 0x1401aacfa
mov edx, ebx
lea rcx, [rbp - 0x80]
call fcn.1401fcb40
movsxd r9, ebx
mov eax, dword [rbp - 0x78]
inc eax
movsxd rdx, eax
mov r8, rdi
mov rcx, qword [rbp - 0x80]
call fcn.1402ba94c
mov edx, ebx
lea rcx, [rbp - 0x80]
call fcn.1401fde50
nop
xor ecx, ecx
call fcn.1400f1cf0
mov rdi, rax
test rax, rax
je 0x1401aaffb
lea rax, [0x140346ce0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.AutoUpload
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aad79
cmp dword [rsp + 0x68], ebx
setne r15b
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.NoCompression
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aadc8
cmp dword [rsp + 0x68], ebx
sete r12b
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.NoSSL
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aae17
cmp dword [rsp + 0x68], ebx
sete r13b
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.NoRestorePoint
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aae69
cmp dword [rsp + 0x68], ebx
sete al
mov byte [rsp + 0x71], al
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.NoRemnantScan
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aaebb
cmp dword [rsp + 0x68], ebx
sete cl
mov byte [rsp + 0x72], cl
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.NoCookieScan
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aaf0d
cmp dword [rsp + 0x68], ebx
sete al
mov byte [rsp + 0x60], al
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.NoPUPScan
mov rcx, qword [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x1401aaf5f
cmp dword [rsp + 0x68], ebx
sete al
mov byte [rsp + 0x70], al
lea r8, [rsp + 0x30]
lea rdx, str.PUPAction
mov rcx, rdi
call fcn.1400d8ae0
test al, al
je 0x1401aafc9
xor r8d, r8d
lea rdx, [0x14034b9b4]
lea rcx, [rsp + 0x30]
call fcn.1401ff2c0
test al, al
je 0x1401aafc9
mov edx, 6
lea rcx, [rbp - 0x70]
call fcn.1401fcb40
mov eax, dword [rbp - 0x68]
inc eax
movsxd rdx, eax
mov r9d, 6
lea r8, str.ignore
mov rcx, qword [rbp - 0x70]
call fcn.1402ba94c
mov edx, 6
lea rcx, [rbp - 0x70]
call fcn.1401fde50
lea r8, [rbp - 0x80]
lea rdx, str.Language
mov rcx, rdi
call fcn.1400d8ae0
mov rax, qword [rdi]
mov edx, 1
mov rcx, rdi
call qword [rax]
nop
cmp dword [rsp + 0x38], 0
jle 0x1401aaffb
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov ecx, 0xb0
call fcn.1402b6dbc
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401ab01c
mov rcx, rax
call fcn.14020ad90
mov rcx, rax
jmp 0x1401ab01f
mov rcx, rsi
mov qword [r14 + 0xb8], rcx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x2e
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x296
mov dword [rsp + 0x54], 0x118
mov rcx, qword [r14 + 0xb8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
movss xmm6, dword [0x140372250]
mulss xmm2, xmm6
movss xmm7, dword [0x140372184]
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xb8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ab0bb
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xb8]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x11
lea r8, str.Captions_Settings
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ab156
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ab167
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
lea rdi, vtable.Core::Windows::Forms::CheckBox.0
test rax, rax
je 0x1401ab196
mov rcx, rax
call fcn.140205320
mov qword [rbx], rdi
mov word [rbx + 0xb0], 1
jmp 0x1401ab199
mov rbx, rsi
mov qword [r14 + 0xd0], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x16
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xd0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xd0]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ab228
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xd0]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x11
lea r8, str.Labels_AutoUpload
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xd0]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ab2c3
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ab2d4
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
test r15b, r15b
je 0x1401ab2ea
mov rax, qword [r14 + 0xa8]
cmp byte [rax + 0x21], 0
jne 0x1401ab2ea
mov al, 1
jmp 0x1401ab2ec
xor al, al
mov rcx, qword [r14 + 0xd0]
mov byte [rcx + 0xb1], al
cmp qword [rcx + 8], 0
je 0x1401ab321
mov rbx, rsi
test al, al
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [r14 + 0xa8]
mov rcx, qword [r14 + 0xd0]
mov r8, qword [rcx]
cmp byte [rax + 0x21], 0
sete dl
call qword [r8 + 0x60]
mov rcx, qword [r14 + 0xd0]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
lea rcx, vtable.DelegateCall_Member_class_HitmanPro35::UI::SettingsPane__class_Core::Windows::Forms::Control____ptr64__class_Core::EventArgs____ptr64_.0
lea rdx, [0x1401af730]
test rax, rax
je 0x1401ab37c
mov qword [rax], rcx
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdx
jmp 0x1401ab37f
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401ab3c1
mov rcx, rax
call fcn.140205320
lea r15, vtable.Core::Windows::Forms::CheckBox.0
mov qword [rbx], r15
mov word [rbx + 0xb0], 1
jmp 0x1401ab3cb
mov rbx, rsi
lea r15, vtable.Core::Windows::Forms::CheckBox.0
mov qword [r14 + 0xc8], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x30
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xc8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xc8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ab45a
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xc8]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x15
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x15
lea r8, str.Labels_UseCompression
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x15
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xc8]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ab4f5
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ab506
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0xc8]
mov byte [rcx + 0xb1], r12b
cmp qword [rcx + 8], 0
je 0x1401ab53d
mov rbx, rsi
test r12b, r12b
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0xc8]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
lea r12, vtable.DelegateCall_Member_class_HitmanPro35::UI::SettingsPane__class_Core::Windows::Forms::Control____ptr64__class_Core::EventArgs____ptr64_.0
test rax, rax
je 0x1401ab57c
mov qword [rax], r12
mov qword [rax + 8], r14
lea rcx, [0x1401af730]
mov qword [rax + 0x10], rcx
jmp 0x1401ab57f
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401ab5ba
mov rcx, rax
call fcn.140205320
mov qword [rbx], r15
mov word [rbx + 0xb0], 1
jmp 0x1401ab5bd
mov rbx, rsi
mov qword [r14 + 0xc0], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x4a
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xc0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xc0]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ab64c
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xc0]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0xd
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0xd
lea r8, str.Labels_UseSSL
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0xd
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xc0]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ab6e7
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ab6f8
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0xc0]
mov byte [rcx + 0xb1], r13b
cmp qword [rcx + 8], 0
je 0x1401ab72f
mov rbx, rsi
test r13b, r13b
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0xc0]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
lea r13, [0x1401af730]
test rax, rax
je 0x1401ab767
mov qword [rax], r12
mov qword [rax + 8], r14
mov qword [rax + 0x10], r13
jmp 0x1401ab76a
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401ab7a5
mov rcx, rax
call fcn.140205320
mov qword [rbx], r15
mov word [rbx + 0xb0], 1
jmp 0x1401ab7a8
mov rbx, rsi
mov qword [r14 + 0xd8], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x64
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x21c
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xd8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xd8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ab837
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xd8]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x16
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x16
lea r8, str.Labels_UseRestorePoint
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x16
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xd8]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ab8d2
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ab8e3
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0xd8]
movzx eax, byte [rsp + 0x71]
mov byte [rcx + 0xb1], al
cmp qword [rcx + 8], 0
je 0x1401ab91d
mov rbx, rsi
test al, al
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0xd8]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x1401ab94e
mov qword [rax], r12
mov qword [rax + 8], r14
mov qword [rax + 0x10], r13
jmp 0x1401ab951
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401ab98c
mov rcx, rax
call fcn.140205320
mov qword [rbx], r15
mov word [rbx + 0xb0], 1
jmp 0x1401ab98f
mov rbx, rsi
mov qword [r14 + 0x108], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x7e
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0x108]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0x108]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401aba1e
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0x108]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x1a
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x1a
lea r8, str.Labels_AuthenticodeSuspect
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x1a
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0x108]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401abab9
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401abaca
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0x108]
mov byte [rcx + 0xb1], 1
cmp qword [rcx + 8], 0
je 0x1401abaf9
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov edx, 0xf1
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0x108]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x60]
mov rcx, qword [r14 + 0x108]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x1401abb39
mov qword [rax], r12
mov qword [rax + 8], r14
mov qword [rax + 0x10], r13
jmp 0x1401abb3c
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401abb77
mov rcx, rax
call fcn.140205320
mov qword [rbx], r15
mov word [rbx + 0xb0], 1
jmp 0x1401abb7a
mov rbx, rsi
mov qword [r14 + 0xe0], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x98
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xe0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xe0]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401abc09
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xe0]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x12
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x12
lea r8, str.Labels_RemnantScan
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x12
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xe0]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401abca4
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401abcb5
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0xe0]
movzx r12d, byte [rsp + 0x72]
mov byte [rcx + 0xb1], r12b
cmp qword [rcx + 8], 0
je 0x1401abcf2
mov rbx, rsi
test r12b, r12b
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0xe0]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x1401abd31
lea r13, vtable.DelegateCall_Member_class_HitmanPro35::UI::SettingsPane__class_Core::Windows::Forms::Control____ptr64__class_Core::EventArgs____ptr64_.0
mov qword [rax], r13
mov qword [rax + 8], r14
lea rcx, [0x1401af730]
mov qword [rax + 0x10], rcx
jmp 0x1401abd34
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401abd6f
mov rcx, rax
call fcn.140205320
mov qword [rbx], r15
mov word [rbx + 0xb0], 1
jmp 0x1401abd72
mov rbx, rsi
mov qword [r14 + 0xe8], rbx
mov dword [rsp + 0x50], 0x26
mov dword [rsp + 0x54], 0xb2
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xe8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xe8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401abe01
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xe8]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0xe
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0xe
lea r8, str.Labels_PUPScan
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0xe
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xe8]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401abe9c
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401abead
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0xe8]
movzx r13d, byte [rsp + 0x70]
mov byte [rcx + 0xb1], r13b
cmp qword [rcx + 8], 0
je 0x1401abeea
mov rbx, rsi
test r13b, r13b
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0xe8]
mov rax, qword [rcx]
movzx edx, r12b
call qword [rax + 0x60]
mov rcx, qword [r14 + 0xe8]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
lea rdi, vtable.DelegateCall_Member_class_HitmanPro35::UI::SettingsPane__class_Core::Windows::Forms::Control____ptr64__class_Core::EventArgs____ptr64_.0
test rax, rax
je 0x1401abf3a
mov qword [rax], rdi
mov qword [rax + 8], r14
lea rcx, [0x1401af730]
mov qword [rax + 0x10], rcx
jmp 0x1401abf3d
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0xb0
call fcn.1402b6dbc
test rax, rax
je 0x1401abf6c
mov rcx, rax
call fcn.140200240
mov r15, rax
jmp 0x1401abf6f
mov r15, rsi
mov dword [rsp + 0x50], 0x36
mov dword [rsp + 0x54], 0xcc
mov rax, qword [r15]
lea rdx, [rsp + 0x50]
mov rcx, r15
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x68
mov dword [rsp + 0x54], 0x18
mov rax, qword [r15]
lea rdx, [rsp + 0x50]
mov rcx, r15
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov r8, qword [r15]
mov rdx, rax
mov rcx, r15
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401abfef
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r15]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, r15
call qword [rbx + 0x88]
mov dword [r15 + 0xa0], 0x10
mov qword [rsp + 0x38], rsi
mov edx, 0x10
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x10
lea r8, str.Labels_PUPAction
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x10
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, r15
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ac08a
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ac09b
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov ecx, 0xe8
call fcn.1402b6dbc
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401ac0bc
mov rcx, rax
call fcn.14020d7f0
mov rcx, rax
jmp 0x1401ac0bf
mov rcx, rsi
mov qword [r14 + 0xf0], rcx
mov dword [rsp + 0x50], 0x9e
mov dword [rsp + 0x54], 0xcc
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x58
mov dword [rsp + 0x54], 0x64
mov rcx, qword [r14 + 0xf0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xf0]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ac14b
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xf0]
mov ecx, 0x18
call fcn.1402b6dbc
lea rcx, [0x1401afaa0]
test rax, rax
je 0x1401ac175
mov qword [rax], rdi
mov qword [rax + 8], r14
mov qword [rax + 0x10], rcx
jmp 0x1401ac178
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0xc8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov qword [rsp + 0x48], rsi
mov edx, 0xe
lea rcx, [rsp + 0x40]
call fcn.1401fcb40
mov eax, dword [rsp + 0x48]
inc eax
movsxd rdx, eax
mov r9d, 0xe
lea r8, str.Actions_Ignore
mov rcx, qword [rsp + 0x40]
call fcn.1402ba94c
mov edx, 0xe
lea rcx, [rsp + 0x40]
call fcn.1401fde50
nop
mov qword [rsp + 0x38], rsi
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 6
lea r8, str.ignore
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400f4800
nop
mov rcx, qword [r14 + 0xf0]
mov r8, rax
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 0xa8]
call fcn.14016ccc0
nop
cmp dword [rsp + 0x58], 0
jle 0x1401ac254
mov rcx, qword [rsp + 0x50]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ac266
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ac277
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
mov qword [rsp + 0x48], rsi
mov edx, 0xe
lea rcx, [rsp + 0x40]
call fcn.1401fcb40
mov eax, dword [rsp + 0x48]
inc eax
movsxd rdx, eax
mov r9d, 0xe
lea r8, str.Actions_Delete
mov rcx, qword [rsp + 0x40]
call fcn.1402ba94c
mov edx, 0xe
lea rcx, [rsp + 0x40]
call fcn.1401fde50
nop
mov qword [rsp + 0x38], rsi
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 6
lea r8, [0x140353a40]
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400f4800
nop
mov rcx, qword [r14 + 0xf0]
mov r8, rax
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 0xa8]
call fcn.14016ccc0
nop
cmp dword [rsp + 0x58], 0
jle 0x1401ac33d
mov rcx, qword [rsp + 0x50]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ac34f
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ac360
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
mov rdi, qword [r14 + 0xf0]
or ebx, 0xffffffff
lea rdx, [rbp - 0x70]
mov rcx, qword [rdi + 0xa8]
call fcn.14020d6b0
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x1401ac388
mov ebx, dword [rax]
cmp qword [rdi + 8], 0
je 0x1401ac3cf
movsxd rbx, ebx
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0x14e
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, vtable.Core::EventArgs.0
mov qword [rsp + 0x50], rax
lea rcx, [rdi + 0xb8]
lea r8, [rsp + 0x50]
mov rdx, rdi
call fcn.140003280
nop
test r13b, r13b
je 0x1401ac3dd
test r12b, r12b
je 0x1401ac3dd
mov dl, 1
jmp 0x1401ac3df
xor edx, edx
mov rcx, qword [r14 + 0xf0]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401ac41b
mov rcx, rax
call fcn.140205320
lea r13, vtable.Core::Windows::Forms::CheckBox.0
mov qword [rbx], r13
mov word [rbx + 0xb0], 1
jmp 0x1401ac425
mov rbx, rsi
lea r13, vtable.Core::Windows::Forms::CheckBox.0
mov qword [r14 + 0xf8], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0xe6
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x100
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0xf8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0xf8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ac4b4
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0xf8]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x11
lea r8, str.Labels_CookieScan
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0xf8]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ac54f
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ac560
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0xf8]
movzx eax, byte [rsp + 0x60]
mov byte [rcx + 0xb1], al
cmp qword [rcx + 8], 0
je 0x1401ac59a
mov rbx, rsi
test al, al
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0xf8]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
lea r12, vtable.DelegateCall_Member_class_HitmanPro35::UI::SettingsPane__class_Core::Windows::Forms::Control____ptr64__class_Core::EventArgs____ptr64_.0
test rax, rax
je 0x1401ac5d9
mov qword [rax], r12
mov qword [rax + 8], r14
lea rcx, [0x1401af730]
mov qword [rax + 0x10], rcx
jmp 0x1401ac5dc
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov ecx, 0x100
call fcn.1402b6dbc
test rax, rax
je 0x1401ac60b
mov rcx, rax
call fcn.14020b4a0
mov rcx, rax
jmp 0x1401ac60e
mov rcx, rsi
mov qword [r14 + 0x100], rcx
mov dword [rsp + 0x50], 0x196
mov dword [rsp + 0x54], 0x100
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x100
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0x100]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0x100]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ac69a
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0x100]
mov rdi, qword [rbx]
mov edx, 0xc37d00
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x14
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x14
lea r8, str.Labels_ResetSettings
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x14
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0x100]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ac735
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ac746
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rax, qword [r14 + 0x100]
mov dword [rax + 0xa0], 0x40
mov rcx, qword [r14 + 0x100]
mov rax, qword [rcx]
mov dl, 1
call qword [rax + 0xd0]
mov rcx, qword [r14 + 0x100]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x1401ac7a1
mov qword [rax], r12
mov qword [rax + 8], r14
lea rcx, [0x1401af600]
mov qword [rax + 0x10], rcx
jmp 0x1401ac7a4
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov rax, qword [r14 + 0xd0]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac7fa
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xc8]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac83d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xc0]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac880
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xd8]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac8c3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0x108]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac906
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xe0]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac949
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xe8]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac98c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x50], r15
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ac9c8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xf0]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401aca0b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0xf8]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401aca4e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [r14 + 0x100]
mov qword [rsp + 0x50], rax
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401aca91
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, 0xc8
call fcn.1402b6dbc
test rax, rax
je 0x1401acaad
mov rcx, rax
call fcn.14020e060
mov rbx, rax
jmp 0x1401acab0
mov rbx, rsi
mov qword [rsp + 0x38], rsi
mov edx, 0xc
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0xc
lea r8, str.ToolTip_LZMA
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0xc
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0xc8]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401acb29
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401acb3a
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x38], rsi
mov edx, 0xb
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0xb
lea r8, str.ToolTip_SSL
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0xb
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0xc0]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401acbb3
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401acbc4
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x38], rsi
mov edx, 0x14
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x14
lea r8, str.ToolTip_RestorePoint
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x14
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0xd8]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401acc3d
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401acc4e
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x38], rsi
mov edx, 0x14
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x14
lea r8, str.ToolTip_Authenticode
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x14
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0x108]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401accc7
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401accd8
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x38], rsi
mov edx, 0x13
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x13
lea r8, str.ToolTip_RemnantScan
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x13
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0xe0]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401acd51
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401acd62
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x38], rsi
mov edx, 0xf
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0xf
lea r8, str.ToolTip_PUPScan
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0xf
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0xe8]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401acddb
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401acdec
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x38], rsi
mov edx, 0x12
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x12
lea r8, str.ToolTip_CookieScan
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x12
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov r8, rax
mov rdx, qword [r14 + 0xf8]
mov rcx, rbx
call fcn.14020e330
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ace65
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ace76
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov qword [rsp + 0x50], rbx
mov rcx, qword [r14 + 0xb8]
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401aceb2
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, 0xb0
call fcn.1402b6dbc
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401aced3
mov rcx, rax
call fcn.14020ad90
mov r12, rax
jmp 0x1401aced6
mov r12, rsi
mov qword [rsp + 0x78], r12
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x146
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov rcx, r12
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x296
mov dword [rsp + 0x54], 0x40
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov rcx, r12
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov r8, qword [r12]
mov rdx, rax
mov rcx, r12
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401acf5e
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r12]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, r12
call qword [rbx + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x18
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x18
lea r8, str.Labels_ExploitMitigation
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x18
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, r12
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401acfef
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ad000
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
call fcn.140114200
movzx r15d, al
mov ecx, 0xb8
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401ad031
mov rcx, rax
call fcn.140205320
mov qword [rbx], r13
mov word [rbx + 0xb0], 1
jmp 0x1401ad034
mov rbx, rsi
mov qword [r14 + 0x110], rbx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x16
mov rax, qword [rbx]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x280
mov dword [rsp + 0x54], 0x18
mov rcx, qword [r14 + 0x110]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0x110]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ad0c3
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0x110]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x11
lea r8, str.Labels_LnkProtect
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x11
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0x110]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ad15e
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ad16f
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov rcx, qword [r14 + 0x110]
mov byte [rcx + 0xb1], r15b
cmp qword [rcx + 8], 0
je 0x1401ad1a6
mov rbx, rsi
test r15b, r15b
setne bl
mov rax, qword [rcx]
call qword [rax]
mov rcx, rax
xor r9d, r9d
mov r8, rbx
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0x110]
add rcx, 0x78
xor edx, edx
call fcn.140002a60
mov rbx, rax
mov ecx, 0x18
call fcn.1402b6dbc
lea r13, vtable.DelegateCall_Member_class_HitmanPro35::UI::SettingsPane__class_Core::Windows::Forms::Control____ptr64__class_Core::EventArgs____ptr64_.0
test rax, rax
je 0x1401ad1e5
mov qword [rax], r13
mov qword [rax + 8], r14
lea rcx, [0x1401af730]
mov qword [rax + 0x10], rcx
jmp 0x1401ad1e8
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
call fcn.140111e90
test al, al
je 0x1401ad23a
test r15b, r15b
jne 0x1401ad236
mov eax, dword [0x140419494]
cmp eax, 0xffffffff
jne 0x1401ad232
mov byte [rsp + 0x60], r15b
lea rcx, [rsp + 0x60]
call fcn.140114710
mov eax, esi
cmp byte [rsp + 0x60], al
setne al
mov dword [0x140419494], eax
test eax, eax
je 0x1401ad23a
mov dl, 1
jmp 0x1401ad23c
xor edx, edx
mov rcx, qword [r14 + 0x110]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rax, qword [r14 + 0x110]
mov qword [rsp + 0x50], rax
mov rcx, r12
call fcn.1401f9110
mov rbx, rax
lea rcx, [rax + 0x10]
mov r8, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [r8]
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
cmp qword [rax + 8], 0
je 0x1401ad288
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, 0xb0
call fcn.1402b6dbc
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401ad2a9
mov rcx, rax
call fcn.14020ad90
mov rcx, rax
jmp 0x1401ad2ac
mov rcx, rsi
mov qword [r14 + 0x118], rcx
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x19a
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x296
mov dword [rsp + 0x54], 0x32
mov rcx, qword [r14 + 0x118]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0x118]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ad338
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0x118]
mov rdi, qword [rbx]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, rbx
call qword [rdi + 0x88]
mov qword [rsp + 0x38], rsi
mov edx, 0x16
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0x16
lea r8, str.Labels_DisplayLanguage
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0x16
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, qword [r14 + 0x118]
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ad3d3
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ad3e4
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov ecx, 0xb0
call fcn.1402b6dbc
test rax, rax
je 0x1401ad400
mov rcx, rax
call fcn.140200240
mov r12, rax
jmp 0x1401ad403
mov r12, rsi
mov dword [rsp + 0x50], 0x15
mov dword [rsp + 0x54], 0x16
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov rcx, r12
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x43
mov dword [rsp + 0x54], 0x18
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov rcx, r12
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov r8, qword [r12]
mov rdx, rax
mov rcx, r12
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ad486
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r12]
mov edx, 0x585858
lea rcx, [rsp + 0x50]
call fcn.140003760
mov rdx, rax
mov rcx, r12
call qword [rbx + 0x88]
mov dword [r12 + 0xa0], 0x10
mov qword [rsp + 0x38], rsi
mov edx, 0xf
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 0xf
lea r8, str.Labels_Language
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 0xf
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1400f4800
nop
mov rdx, rax
mov rcx, r12
call fcn.1401f9c60
nop
cmp dword [rsp + 0x48], 0
jle 0x1401ad523
mov rcx, qword [rsp + 0x40]
call fcn.1402b7350
nop
cmp dword [rsp + 0x38], 0
jle 0x1401ad534
mov rcx, qword [rsp + 0x30]
call fcn.1402b7350
mov ecx, 0xe8
call fcn.1402b6dbc
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401ad555
mov rcx, rax
call fcn.14020d7f0
mov rcx, rax
jmp 0x1401ad558
mov rcx, rsi
mov qword [r14 + 0x120], rcx
mov dword [rsp + 0x50], 0x71
mov dword [rsp + 0x54], 0x16
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xa0]
mov dword [rsp + 0x50], 0x88
mov dword [rsp + 0x54], 0x64
mov rcx, qword [r14 + 0x120]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0xc0]
movd xmm2, dword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm6
divss xmm2, xmm7
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.1400037a0
nop
mov rcx, qword [r14 + 0x120]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x78]
nop
cmp dword [rbp + 0x28], 0
jle 0x1401ad5e4
mov rcx, qword [rbp + 0x20]
call fcn.1402b7350
mov rbx, qword [r14 + 0x120]
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x1401ad60e
mov qword [rax], r13
mov qword [rax + 8], r14
lea rcx, [0x1401afaa0]
mov qword [rax + 0x10], rcx
jmp 0x1401ad611
mov rax, rsi
mov qword [rsp + 0x50], rax
lea rcx, [rbx + 0xc8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax]
mov qword [rsp + 0x38], rsi
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1401fcb40
mov eax, dword [rsp + 0x38]
inc eax
movsxd rdx, eax
mov r9d, 6
lea r8, str.Arabic
mov rcx, qword [rsp + 0x30]
call fcn.1402ba94c
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1401fde50
nop
mov qword [rsp + 0x48], rsi
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.1401fcb40
mov eax, dword [rsp + 0x48]
inc eax
movsxd rdx, eax
mov r9d, 2
lea r8, [0x14035e888]
mov rcx, qword [rsp + 0x40]
call fcn.1402ba94c
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.1401fde50
nop
mov rax, qword [r14 + 0x120]
mov r13, qword [rax + 0xa8]
mov ecx, 0x28
call fcn.1402b6dbc
mov r15, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1401ad765