Function at 0x14004c520
Capabilities:
Access peb ldr_data
Check for time delay via gettickcount
Check os version
Empty recycle bin quietly
Empty the recycle bin
Find taskbar
Move file
Print debug messages
Set environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x9c8]
sub rsp, 0xa88
mov qword [rbp + 0xe8], 0xfffffffffffffffe
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
mov r12, r8
lea rbx, [rbp + 0x18]
test r9, r9
cmovne rbx, r9
mov qword [rbp - 0x78], rbx
xor eax, eax
mov qword [rbx], rax
mov r15, qword [0x1401101f0]
mov qword [rbp - 0x50], r15
mov ebx, dword gs:[0x48]
mov dword [rbp + 0x10], ebx
mov r14, rcx
mov qword [rsp + 0x60], rcx
lea edi, [rax + 1]
test rcx, rcx
je case.0x14004c996.109
xorps xmm8, xmm8
mov r13d, dword [rbp + 0x9d0]
movzx eax, byte [rbp + 0x9d0]
mov dword [rbp - 0x6c], eax
cmp dword [0x140117c64], 0
je 0x14004c5f8
cmp qword [0x140117c48], 0
je 0x14004c5e1
mov rcx, qword [0x140117c38]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor esi, esi
mov qword [0x140117c48], rsi
jmp 0x14004c5e3
xor esi, esi
call qword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x140117c64], esi
mov qword [0x140117c38], rsi
jmp 0x14004c5fa
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov ecx, eax
sub ecx, dword [0x140117bb4]
mov rax, qword [0x1401101f0]
cmp ecx, dword [rax + 0x118]
jbe 0x14004c65a
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x118]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14004c64b
cmp dword [0x140116f80], ebx
jne 0x14004c64b
mov edx, edi
mov ecx, 0xffffffff
call fcn.140001b10
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov dword [0x140117bb4], eax
cmp byte [r15 + 0x12c], 0
jne 0x14004c692
cmp byte [r15 + 0x12e], 0
jne 0x14004c692
mov eax, dword [0x140117ba8]
cmp eax, 0xffffffff
jle 0x14004c692
mov ecx, dword [r15 + 0x38]
cmp ecx, eax
jle 0x14004c68b
mov byte [r15 + 0x12c], 1
jmp 0x14004c692
lea eax, [rcx + 1]
mov dword [r15 + 0x38], eax
mov rax, qword [r15]
mov rdx, qword [0x140117ba0]
cmp rax, 0xffffffffffffffff
jle 0x14004c6a7
cmp rdx, rax
jge 0x14004c6bc
mov eax, dword [r15 + 0x34]
cmp eax, 0xffffffff
jle 0x14004c6cf
sub r8d, dword [0x140117bb0]
cmp r8d, eax
jb 0x14004c6cf
mov edx, edi
mov ecx, 0xa
call fcn.140001b10
mov rdx, qword [0x140117ba0]
cmp byte [r15 + 0x138], 0
je 0x14004c712
nop dword [rax]
cmp dword [0x140116f80], ebx
jne 0x14004c6f6
mov edx, edi
mov ecx, 0x8000012f
call fcn.140001b10
jmp 0x14004c701
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [r15 + 0x138], 0
jne 0x14004c6e0
mov rdx, qword [0x140117ba0]
mov qword [0x140117680], r14
cmp byte [r15 + 0x139], 0
je 0x14004c771
movsxd rax, dword [0x140114ae0]
lea rbx, [0x140000000]
mov qword [rbx + rax*8 + 0x115130], r14
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
movsxd rdx, dword [0x140114ae0]
mov rax, rdx
mov dword [rbx + rdx*4 + 0x114af0], ecx
inc edx
cmp edx, 0x190
mov ebx, 0
cmovge edx, ebx
mov dword [0x140114ae0], edx
mov rdx, qword [0x140117ba0]
jmp 0x14004c773
xor ebx, ebx
cmp qword [0x140112970], 0xffffffffffffffff
je 0x14004c792
cmp byte [r14], 0x6b
je 0x14004c792
mov rdx, r14
call fcn.140008240
mov rdx, qword [0x140117ba0]
movzx eax, byte [r14]
cmp al, 1
je 0x14004c7c7
cmp al, 0x6b
je 0x14004c7c7
cmp al, 0x74
je 0x14004c7c7
xor r9d, r9d
lea r8, [r9 - 1]
mov rdx, r12
mov rcx, r14
call fcn.140090110
mov r13d, eax
cmp eax, 1
jne 0x14004c940
mov rdx, qword [0x140117ba0]
movzx esi, byte [r14]
lea eax, [rsi - 9]
cmp al, 0x17
ja 0x14004c967
inc rdx
mov qword [0x140117ba0], rdx
mov rcx, r14
call fcn.1400524b0
cmp eax, 3
jne 0x14004c890
mov rax, qword [r14 + 0x20]
cmp byte [rax], 0x77
jne 0x14004c829
nop word [rax + rax]
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 2
mov rcx, qword [rax + 0x20]
call fcn.14004c520
mov r13d, eax
mov rax, qword [r14 + 0x20]
mov rcx, qword [rsp + 0x70]
cmp rcx, rax
je 0x14004c800
jmp 0x14004c846
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 3
mov rcx, rax
call fcn.14004c520
mov r13d, eax
mov rcx, qword [rsp + 0x70]
cmp rcx, r14
je 0x140051b96
cmp dword [rbp + 0x9d8], 3
je 0x140051bb8
cmp r13d, 1
jne 0x140051bb8
test rcx, rcx
jne 0x14004c916
mov r14, qword [r14 + 0x28]
mov qword [rsp + 0x60], r14
cmp byte [r14], 0x21
jne 0x140051b96
mov r14, qword [r14 + 0x28]
mov qword [rsp + 0x60], r14
jmp 0x140051b96
mov r14, qword [r14 + 0x28]
mov qword [rsp + 0x60], r14
cmp byte [r14], 0x21
jne 0x14004c931
mov rax, qword [r14 + 0x20]
cmp byte [rax], 0x77
jne 0x14004c8d9
nop dword [rax]
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 2
mov rcx, qword [rax + 0x20]
call fcn.14004c520
mov r13d, eax
mov rax, qword [r14 + 0x20]
mov rcx, qword [rsp + 0x70]
cmp rcx, rax
je 0x14004c8b0
jmp 0x14004c8f6
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 3
mov rcx, rax
call fcn.14004c520
mov r13d, eax
mov rcx, qword [rsp + 0x70]
cmp dword [rbp + 0x9d8], 3
je 0x140051bc7
cmp r13d, 1
jne 0x140051bc7
test rcx, rcx
je 0x14004dc0c
mov rax, qword [r14 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x140051bac
mov r14, rcx
mov qword [rsp + 0x60], rcx
jmp 0x140051b96
cmp dword [rbp + 0x9d8], 3
jne 0x140051b96
mov eax, edi
lea r11, [rsp + 0xa88]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movzx eax, sil
add eax, 0xffffffa0
lea r8, [0x140000000]
cmp eax, 0x82
ja case.0x14004c996.114
cdqe
movzx eax, byte [r8 + rax + 0x51fb8]
mov ecx, dword [r8 + rax*4 + 0x51f6c]
add rcx, r8
jmp rcx
mov rcx, r14
call fcn.1400524b0
cmp eax, 3
je 0x140051bd6
cmp dword [rbp + 0x9d8], 3
je 0x14004c9dd
mov r14, qword [r14 + 0x20]
mov qword [rsp + 0x60], r14
jmp 0x140051b96
mov rcx, r14
call fcn.1400524b0
cmp eax, 3
jne 0x14004c9a9
mov rax, qword [r14 + 0x28]
test rax, rax
je 0x14004c9dd
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rax
mov eax, 6
jmp 0x14004c940
inc rdx
mov qword [0x140117ba0], rdx
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x14004ca16
mov qword [rbp - 0x28], rbx
xor esi, esi
mov edi, esi
cmp qword [r14 + 0x10], 1
sete dil
jne 0x14004caf3
jmp 0x14004cada
mov rdi, qword [0x140115e50]
test rdi, rdi
je 0x140051bf4
cmp word [rdi], 0
je 0x140051bf4
mov rbx, qword [0x140117630]
test rbx, rbx
je 0x140051bf4
mov rdx, rdi
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004ca57
mov rbx, qword [rbx + 0x20]
jmp 0x14004ca37
mov rax, qword [rbx + 0x10]
mov rcx, qword [rax + 0x30]
test rcx, rcx
jne 0x14004ca68
xor esi, esi
jmp 0x14004ca9c
mov rax, qword [r14 + 0x30]
test rax, rax
je 0x14004ca7f
cmp rcx, rax
je 0x14004ca64
mov rax, qword [rax + 0x30]
test rax, rax
jne 0x14004ca71
lea r9, [0x1400da7a4]
xor r8d, r8d
lea rdx, str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov rcx, r14
call fcn.1400571b0
xor esi, esi
mov ebx, esi
mov qword [rbp - 0x28], rbx
test rbx, rbx
je 0x140051c09
cmp qword [r15 + 0xd8], 0
je 0x14004caf1
mov rax, qword [rbx + 0x10]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x14004cad5
cmp qword [rcx + 0x10], 1
jne 0x14004cacc
cmp byte [rcx], 0x77
je 0x14004caf1
mov rcx, qword [rcx + 0x30]
test rcx, rcx
jne 0x14004cac0
mov edi, 1
mov rax, qword [r15 + 0xd8]
mov qword [r15 + 0xe0], rax
mov qword [r15 + 0xd8], rsi
jmp 0x14004caf3
mov edi, esi
mov rcx, rbx
call fcn.1400018c0
mov r13d, eax
test edi, edi
je 0x14004cb17
mov rax, qword [r15 + 0xe0]
mov qword [r15 + 0xd8], rax
mov qword [r15 + 0xe0], rsi
test r13d, 0xfffffff7
je 0x140051bbf
cmp dword [rbp + 0x9d8], 3
jne case.0x14004c996.106
cmp r13d, 7
mov eax, 1
cmove r13d, eax
mov eax, r13d
jmp 0x14004c940
inc rdx
mov qword [0x140117ba0], rdx
mov rbx, qword [r14 + 0x28]
mov qword [rbp - 0x28], rbx
test rbx, rbx
jne 0x14004cbf4
mov rdi, qword [0x140115e50]
test rdi, rdi
je 0x140051bf4
cmp word [rdi], bx
je 0x140051bf4
mov rbx, qword [0x140117630]
test rbx, rbx
je 0x140051bf4
mov rdx, rdi
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004cba1
mov rbx, qword [rbx + 0x20]
jmp 0x14004cb81
mov rax, qword [rbx + 0x10]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x14004cbe2
mov rax, qword [r14 + 0x30]
test rax, rax
je 0x14004cbc5
cmp rcx, rax
je 0x14004cbe2
mov rax, qword [rax + 0x30]
test rax, rax
jne 0x14004cbb7
lea r9, [0x1400da7a4]
xor r8d, r8d
lea rdx, str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov rcx, r14
call fcn.1400571b0
xor edx, edx
mov ebx, edx
mov qword [rbp - 0x28], rbx
test rbx, rbx
je 0x140051c09
mov edi, 1
mov qword [r15 + 0xe8], rbx
cmp dword [rbp + 0x9d8], 3
je 0x140051c10
mov rcx, qword [rbx + 0x10]
mov rax, qword [rcx + 0x30]
cmp qword [r14 + 0x30], rax
jne 0x140051c10
mov r14, rcx
mov qword [rsp + 0x60], rcx
jmp 0x140051b96
inc rdx
mov qword [0x140117ba0], rdx
mov rsi, qword [rbp + 0x9d0]
mov rbx, qword [rsi + 0x10]
test rbx, rbx
jne 0x14004cc98
mov rdi, qword [0x140115e50]
cmp word [rdi], bx
jne 0x14004cc5e
mov ebx, 1
mov r13d, ebx
xor edx, edx
mov edi, edx
jmp 0x14004cd88
mov rbx, qword [0x140116fd0]
test rbx, rbx
je 0x14004cc8a
nop word [rax + rax]
mov rdx, rdi
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004cc93
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14004cc70
xor edx, edx
mov ebx, edx
lea edi, [rdx + 1]
jmp 0x14004cc9a
mov edi, 1
xor edx, edx
mov r13d, edi
mov edi, edx
test rbx, rbx
je 0x14004cd83
mov rcx, qword [0x140115e58]
cmp word [rcx], 0
je 0x14004ccca
lea rdx, [0x1400f1dac]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004ccca
mov dl, 1
jmp 0x14004cccc
xor edx, edx
lea r9, [rbp - 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.1400c2970
mov edi, eax
mov rdx, qword [rbp - 0x28]
test rdx, rdx
je 0x14004cd83
mov rax, qword [rdx + 0x10]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x14004cd0f
mov rax, qword [r14 + 0x30]
test rax, rax
je 0x140051c20
cmp rcx, rax
je 0x14004cd0f
mov rax, qword [rax + 0x30]
jmp 0x14004ccfb
mov rax, qword [r15 + 0xd8]
test rax, rax
je 0x14004cd4c
test rcx, rcx
je 0x14004cd35
cmp qword [rcx + 0x10], 1
jne 0x14004cd2c
cmp byte [rcx], 0x77
je 0x14004cd4c
mov rcx, qword [rcx + 0x30]
test rcx, rcx
jne 0x14004cd20
mov ebx, 1
mov qword [r15 + 0xe0], rax
xor eax, eax
mov qword [r15 + 0xd8], rax
jmp 0x14004cd50
xor eax, eax
mov ebx, eax
mov rcx, rdx
call fcn.1400018c0
mov r13d, eax
test ebx, ebx
je 0x14004cd76
mov rax, qword [r15 + 0xe0]
mov qword [r15 + 0xd8], rax
xor eax, eax
mov qword [r15 + 0xe0], rax
test r13d, 0xfffffff7
je 0x140051bbf
mov ebx, 1
test edi, edi
sete dl
mov rcx, rsi
call fcn.140056d90
cmp dword [rbp + 0x9d8], 3
jne case.0x14004c996.106
cmp r13d, 7
cmove r13d, ebx
mov eax, r13d
jmp 0x14004c940
mov r14, qword [r14 + 0x10]
mov rax, r14
sub rax, 1
je 0x14004ce49
sub rax, 3
je 0x14004cdf0
cmp rax, 5
jne 0x14004cef8
xor r9d, r9d
xor r8d, r8d
mov edx, edi
mov rcx, qword [0x140115e58]
call fcn.1400304f0
mov qword [rbp - 0x38], rax
jmp 0x14004cf11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.1400304f0
mov qword [rbp - 0x38], rax
mov rcx, qword [0x140115e60]
call fcn.140033620
mov edx, eax
mov dword [rbp - 0x68], eax
mov rax, qword [0x140115e68]
cmp word [rax], 0x31
jne 0x14004ce31
cmp word [rax + 2], 0
mov byte [rbp - 0x6c], 1
je 0x14004ce35
mov byte [rbp - 0x6c], 0
test edx, edx
je 0x140051c40
mov rcx, qword [0x140115e60]
jmp 0x14004cfed
mov rbx, qword [rsp + 0x60]
movzx ecx, byte [rbx + 1]
test ecx, ecx
je 0x14004cef0
cmp ecx, 1
mov rcx, qword [0x140115e50]
je 0x14004ceaa
lea rdx, str.Read
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004ce80
lea r14d, [rax + 5]
jmp 0x14004cf11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.1400304f0
mov qword [rbp - 0x38], rax
xor esi, esi
mov r14d, esi
cmp rax, rsi
setne r14b
add r14, 3
jmp 0x14004cefd
xor esi, esi
mov dword [rsp + 0x20], esi
mov r9d, edi
mov r8d, edi
mov edx, edi
call fcn.1400ba160
test eax, eax
je 0x14004cec7
lea r14d, [rsi + 2]
jmp 0x14004cf11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.1400304f0
mov qword [rbp - 0x38], rax
mov r14, rsi
cmp rax, 0
setne r14b
add r14, 3
jmp 0x14004cefd
mov r14d, 2
jmp 0x14004cefd
mov rbx, qword [rsp + 0x60]
cmp r14, 3
je 0x14004cfb9
cmp r14, 4
je 0x14004ce08
lea rax, [r14 - 9]
cmp rax, 1
ja 0x14004ce3d
mov rsi, qword [0x140115e60]
xor r15d, r15d
mov edi, r15d
nop dword [rax]
movzx ebx, word [rsi]
test ebx, 0xffffff80
jne 0x14004cf4f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14004cf4f
and ebx, 0xffffffdf
add rsi, 2
cmp ebx, 0x56
ja case.0x14004cf74.1
movsxd rax, ebx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x52054]
mov ecx, dword [rdx + rax*4 + 0x5203c]
add rcx, rdx
jmp rcx
or edi, 1
jmp case.0x14004cf74.9
or edi, 2
jmp case.0x14004cf74.9
or edi, 4
jmp case.0x14004cf74.9
mov eax, edi
mov edx, edi
or edx, 1
and al, 3
cmovne edx, edi
jmp 0x14004cf96
mov edx, r15d
mov dword [rbp - 0x68], edx
mov eax, edx
shr eax, 2
and al, 1
mov dword [rbp - 0x6c], eax
mov edi, 1
je 0x14004ce35
and edx, 0xfffffffb
mov dword [rbp - 0x68], edx
jmp 0x14004ce35
mov rcx, qword [0x140115e58]
call fcn.140033620
mov dword [rbp - 0x68], eax
cmp eax, 0
je 0x140051c74
mov rcx, qword [0x140115e60]
cmp word [rcx], 0x31
jne 0x14004cfe9
cmp word [rcx + 2], 0
mov byte [rbp - 0x6c], 1
je 0x14004cfed
mov byte [rbp - 0x6c], 0
mov byte [rbp + 0x9e8], 0
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov r8, qword [rsp + 0x60]
mov rsi, qword [r8 + 0x28]
mov r15, rsi
movzx eax, byte [rsi]
cmp al, 0x6c
jne 0x14004d012
mov r15, qword [rsi + 0x20]
cmovne rsi, rbx
mov r9, qword [rbp - 0x50]
mov r12, qword [r9 + 8]
mov qword [rsp + 0x78], r12
mov rax, qword [r9 + 0x10]
mov qword [rbp + 0xa0], rax
mov rax, qword [r9 + 0x18]
mov qword [rbp + 0xa8], rax
mov rax, qword [r9 + 0x20]
mov qword [rbp + 0x18], rax
mov rax, qword [r9 + 0x28]
mov qword [rbp - 0x60], rax
cmp r14, 8
je 0x14004d053
mov qword [r9 + 8], rdi
lea rax, [r14 - 2]
cmp rax, 8
ja case.default.0x14004d073
lea r10, [0x140000000]
mov eax, dword [r10 + rax*4 + 0x520ac]
add rax, r10
jmp rax
cmp byte [r8 + 1], bl
jbe 0x14004d092
xor edx, edx
mov rcx, r8
call fcn.140048130
mov rdi, rax
xor r14b, r14b
mov r8, qword [rsp + 0x60]
jmp 0x14004d098
mov rdi, rbx
mov r14b, 1
mov rbx, qword [0x1401101f0]
mov qword [rbp - 0x18], rbx
test r14b, r14b
jne 0x14004d0b2
cmp qword [rbx + 8], rdi
jg 0x14004d204
mov rcx, qword [r8 + 0x20]
cmp byte [rcx], 0x77
jne 0x14004d101
mov r12, qword [rsp + 0x60]
mov rbx, qword [rbp + 0x9e0]
nop word [rax + rax]
lea r9, [rbp - 8]
mov r8, rbx
mov edx, 2
mov rcx, qword [rcx + 0x20]
call fcn.14004c520
mov r13d, eax
mov rcx, qword [r12 + 0x20]
mov rax, qword [rbp - 8]
cmp rax, rcx
je 0x14004d0d0
mov rbx, qword [rbp - 0x18]
mov r12, qword [rsp + 0x78]
jmp 0x14004d11d
lea r9, [rbp - 8]
mov r8, qword [rbp + 0x9e0]
mov edx, 3
call fcn.14004c520
mov r13d, eax
mov rax, qword [rbp - 8]
test rax, rax
je 0x14004d142
cmp r13d, 6
jne 0x14004d214
cmp rax, qword [rsp + 0x60]
je 0x14004d14e
mov qword [rsp + 0x70], rax
mov r14, qword [rsp + 0x60]
jmp 0x14004d682
cmp r13d, 1
je 0x14004d14e
cmp r13d, 6
jne 0x14004d138
test rsi, rsi
je 0x14004d1f6
mov qword [0x140117680], rsi
mov rax, qword [0x1401101f0]
cmp byte [rax + 0x139], 0
je 0x14004d1af
movsxd rax, dword [0x140114ae0]
lea r13, [0x140000000]
mov qword [r13 + rax*8 + 0x115130], rsi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movsxd rdx, dword [0x140114ae0]
mov dword [r13 + rdx*4 + 0x114af0], eax
inc edx
cmp edx, 0x190
mov eax, 0
cmovge edx, eax
mov dword [0x140114ae0], edx
cmp qword [0x140112970], 0xffffffffffffffff
je 0x14004d1c1
mov rdx, rsi
call fcn.140008240
xor r9d, r9d
xor edx, edx
lea r8, [r9 - 1]
mov rcx, rsi
call fcn.140090110
mov r13d, eax
cmp eax, 1
jne 0x14004d138
lea r13d, [rax + 4]
mov rcx, qword [0x140115e50]
call fcn.1400835a0
test eax, eax
jne 0x14004d138
inc qword [rbx + 8]
mov r8, qword [rsp + 0x60]
jmp 0x14004d0a3
mov r13d, 1
mov r14, qword [rsp + 0x60]
jmp 0x14004d682
cmp rax, qword [rsp + 0x60]
jne 0x14004d133
mov byte [rbp + 0x9e8], 1
mov r14, qword [rsp + 0x60]
jmp 0x14004d682
mov rbx, qword [0x1401101f0]
mov r14, r8
nop word [rax + rax]
mov qword [0x140117680], r14
cmp qword [0x140112970], 0xffffffffffffffff
je 0x14004d259
mov rdx, r14
call fcn.140008240
xor r9d, r9d
xor edx, edx
lea r8, [r9 - 1]
mov rcx, r14
call fcn.140090110
mov r13d, eax
cmp eax, 1
jne 0x14004d682
mov rcx, qword [0x140115e50]
call fcn.1400835a0
test eax, eax
je 0x14004d375
mov rcx, qword [r14 + 0x20]
cmp byte [rcx], 0x77
jne 0x14004d2cc
mov r12, qword [rbp + 0x9e0]
nop word [rax + rax]
lea r9, [rbp]
mov r8, r12
mov edx, 2
mov rcx, qword [rcx + 0x20]
call fcn.14004c520
mov r13d, eax
mov rcx, qword [r14 + 0x20]
mov rax, qword [rbp]
cmp rax, rcx
je 0x14004d2a0
mov r12, qword [rsp + 0x78]
jmp 0x14004d2e8
lea r9, [rbp]
mov r8, qword [rbp + 0x9e0]
mov edx, 3
call fcn.14004c520
mov r13d, eax
mov rax, qword [rbp]
test rax, rax
je 0x14004d302
cmp r13d, 6
jne 0x14004d364
cmp rax, r14
je 0x14004d312
mov qword [rsp + 0x70], rax
jmp 0x14004d682
cmp r13d, 1
je 0x14004d312
cmp r13d, 6
jne 0x14004d682
cmp byte [rbx + 0x139], 0
je 0x14004d35b
movsxd rax, dword [0x140114ae0]
lea rsi, [0x140000000]
mov qword [rsi + rax*8 + 0x115130], r14
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movsxd rdx, dword [0x140114ae0]
mov dword [rsi + rdx*4 + 0x114af0], eax
inc edx
cmp edx, 0x190
mov eax, 0
cmovge edx, eax
mov dword [0x140114ae0], edx
inc qword [rbx + 8]
jmp 0x14004d240
cmp rax, r14
jne 0x14004d2f8
mov byte [rbp + 0x9e8], 1
jmp 0x14004d682
mov r13d, edi
jmp 0x14004d682
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x70]
lea r8, [rbp + 0x9e8]
mov rdx, qword [rbp + 0x9e0]
mov r14, qword [rsp + 0x60]
mov rcx, r14
call fcn.140053f60
mov r13d, eax
jmp 0x14004d682
lea rdx, [0x1400f8168]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x70]
lea r8, [rbp + 0x9e8]
mov rdx, qword [rbp + 0x9e0]
mov r14, qword [rsp + 0x60]
mov rcx, r14
test eax, eax
je 0x14004d3e8
call fcn.140055120
mov r13d, eax
jmp 0x14004d682
call fcn.140055550
mov r13d, eax
jmp 0x14004d682
lea rax, vtable.TextStream.0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rbx
mov dword [rbp + 0x60], ebx
mov dword [rbp + 0x64], 0xffffffff
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov ecx, dword [0x140117e08]
cmp ecx, 0xffffffff
je 0x14004d441
mov dword [rbp + 0x64], ecx
lea rdx, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetCPInfo]
movzx ecx, byte [rbp + 0x6e]
test eax, eax
cmove ecx, ebx
mov byte [rbp + 0x6e], cl
mov r9, qword [rbp - 0x50]
lea rax, vtable.TextFile.0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x90], 0xffffffffffffffff
mov rdx, qword [0x140115e58]
cmp word [rdx], 0
je 0x14004d4fd
mov r9d, dword [r9 + 0x13c]
btr r9d, 0x1f
mov r8d, 0x30c
lea rcx, [rbp + 0x50]
call fcn.1400b7b90
test al, al
je 0x14004d4fd
mov rax, qword [0x140115e60]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x70]
lea r8, [rbp + 0x9e8]
mov rdx, qword [rbp + 0x9e0]
mov r14, qword [rsp + 0x60]
mov rcx, r14
call fcn.1400559d0
mov r13d, eax
mov r8d, dword [rbp + 0x5c]
test r8d, r8d
je 0x14004d4ec
cmp qword [rbp + 0x80], 0
jne 0x14004d4ec
mov rdx, qword [rbp + 0x88]
lea rcx, [rbp + 0x50]
mov rax, qword [rbp + 0x50]
call qword [rax + 0x20]
mov dword [rbp + 0x5c], ebx
mov word [rbp + 0x7c], bx
lea rcx, [rbp + 0x50]
mov rax, qword [rbp + 0x50]
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x14004d505
mov r13d, edi
mov r14, qword [rsp + 0x60]
lea rcx, [rbp + 0x50]
call fcn.140005920
jmp 0x14004d682
mov rbx, qword [0x140115e58]
cmp r14, 3
cmove rbx, qword [0x140115e50]
mov dword [rbp - 0x18], edi
mov ecx, 0x204a0
call fcn.1400d6cc4
mov rdi, rax
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rdi + 0x20468], rax
mov qword [rdi + 0x20488], rax
lea r9, [rbp - 0x18]
mov r8, rdi
mov rdx, rbx
mov r14, qword [rsp + 0x60]
mov rcx, r14
call fcn.1400543a0
test al, al
je 0x14004d59e
mov qword [rsp + 0x38], rdi
mov eax, dword [rbp - 0x6c]
mov byte [rsp + 0x30], al
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x70]
lea r8, [rbp + 0x9e8]
mov rdx, qword [rbp + 0x9e0]
mov rcx, r14
call fcn.1400545f0
mov r13d, eax
jmp 0x14004d5a2
mov r13d, dword [rbp - 0x18]
cmp qword [rdi + 0x20488], 0
je 0x14004d5b9
mov rcx, qword [rdi + 0x20460]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rdi + 0x20468]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, 0x204a0
mov rcx, rdi
call fcn.1400d6c90
jmp 0x14004d682
lea r9, [rbp - 0x80]
cmp r14, 4
jne 0x14004d603
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.1400304f0
mov rbx, rax
mov rax, qword [0x140115e58]
mov qword [rbp + 0x20], rax
jmp 0x14004d61c
lea r8, [rbp + 0x20]
mov edx, edi
mov rcx, qword [0x140115e58]
call fcn.1400304f0
mov rbx, rax
mov rax, qword [rbp + 0x20]
mov r14, qword [rsp + 0x60]
test rbx, rbx
je 0x14004d375
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x38], rax
mov eax, dword [rbp - 0x6c]
mov byte [rsp + 0x30], al
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x70]
lea r8, [rbp + 0x9e8]
mov rdx, qword [rbp + 0x9e0]
mov rcx, r14
call fcn.140054b10
mov r13d, eax
cmp byte [rbp - 0x80], 0
je 0x14004d682
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14004d682
mov r14, r8
mov rcx, qword [rbp - 0x50]
mov qword [rcx + 8], r12
mov rax, qword [rbp + 0xa0]
mov qword [rcx + 0x10], rax
mov rax, qword [rbp + 0xa8]
mov qword [rcx + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rcx + 0x20], rax
mov rax, qword [rbp - 0x60]
mov qword [rcx + 0x28], rax
test r13d, r13d
je 0x140051bbf
lea eax, [r13 - 7]
cmp eax, 1
jbe 0x140051bbf
cmp byte [rbp + 0x9e8], 0
jne 0x140051b8c
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14004d6fc
mov rax, qword [r14 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x140051c60
mov r14, rcx
mov qword [rsp + 0x60], rcx
mov r15, qword [rbp - 0x50]
jmp 0x140051b8f
cmp dword [rbp + 0x9d8], 3
je 0x140051cf7
mov r14, r15
mov qword [rsp + 0x60], r15
mov r15, qword [rbp - 0x50]
jmp 0x140051b8f
mov r14d, dword [r15 + 0x140]
cmp sil, 0x72
jne 0x14004d78c
mov rcx, qword [0x140115db0]
mov rbx, qword [r15 + 0x148]
xor eax, eax
mov qword [r15 + 0x148], rax
test rcx, rcx
je 0x14004d74d
mov rdx, rbx
call fcn.1400be820
mov edi, eax
cmp dword [rbx + 0x10], 6
jne 0x14004d75c
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14004d76b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, SafeArrayAllocDescriptor
mov rcx, rbx
call fcn.1400d6c90
test edi, edi
je 0x140051c09
mov rbx, qword [rsp + 0x60]
mov edi, 1
jmp 0x14004d7b1
mov ecx, r14d
or ecx, 1
mov dword [r15 + 0x140], ecx
mov rbx, qword [rsp + 0x60]
mov rax, qword [rbx + 0x28]
cmp byte [rax], 0x73
je 0x14004d7b1
or ecx, 2
mov dword [r15 + 0x140], ecx
xor eax, eax
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 0x20]
cmp byte [rax], 0x77
jne 0x14004d7ea
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 2
mov rcx, qword [rax + 0x20]
call fcn.14004c520
mov r13d, eax
mov rax, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x70]
cmp rcx, rax
je 0x14004d7c1
jmp 0x14004d807
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 3
mov rcx, rax
call fcn.14004c520
mov r13d, eax
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rbx + 0x28]
mov qword [rsp + 0x60], rbx
cmp sil, 0x71
jne 0x14004d876
mov dword [r15 + 0x140], r14d
xor dl, dl
mov r14, rbx
movzx eax, byte [rbx]
cmp al, 0x72
jne 0x14004d848
mov dl, 1
cmp qword [r15 + 0x148], 0
jne 0x140051b96
mov rax, qword [rbx + 0x28]
mov r14, rax
mov qword [rsp + 0x60], rax
movzx eax, byte [rax]
cmp al, 0x73
je 0x14004d88c
test dl, dl
jne 0x14004d93b
cmp qword [r15 + 0x148], 0
je 0x14004d93b
lea rcx, [r15 + 0x148]
call fcn.140057f00
mov r13d, edi
jmp 0x14004d936
cmp sil, 0x72
jne 0x14004d940
mov r14, rbx
cmp byte [rbx], 0x73
jne 0x14004d940
cmp r13d, 1
jne 0x14004d89b
test rcx, rcx
je 0x140051b96
mov rbx, qword [r15 + 0x148]
xor eax, eax
mov qword [r15 + 0x148], rax
mov rsi, qword [0x140114ad8]
mov r14, qword [0x140114ad0]
mov qword [0x140114ad8], rax
mov qword [0x140114ad0], rax
lea r9, [rbp + 0xb0]
xor r8d, r8d
lea edx, [rax + 3]
mov rcx, qword [rsp + 0x60]
call fcn.14004c520
mov edi, eax
test rsi, rsi
je 0x14004d918
mov rcx, qword [0x140114ad8]
test rcx, rcx
je 0x14004d90a
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp qword [0x140114ad0], 0x400000
jbe 0x14004d90a
dec dword [0x140114acc]
mov qword [0x140114ad8], rsi
mov qword [0x140114ad0], r14
cmp edi, 1
jne 0x140051c92
cmp qword [rbp + 0xb0], 0
jne 0x140051c92
mov qword [r15 + 0x148], rbx
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
cmp dword [rbp + 0x9d8], 3
je 0x140051bb8
cmp r13d, 1
jne 0x140051bb8
test rcx, rcx
je 0x140051b85
mov rax, qword [rbx + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x140051cf0
mov r14, rcx
mov qword [rsp + 0x60], rcx
jmp 0x140051b96
mov r15, rbx
mov rax, qword [0x140114ad8]
mov qword [rbp - 0x48], rax
mov rax, qword [0x140114ad0]
mov qword [rbp - 0x40], rax
mov qword [0x140114ad8], rbx
mov qword [0x140114ad0], rbx
mov qword [rbp + 0x40], rbx
cmp qword [r14 + 0x10], 0
jne 0x14004d9b9
mov dword [rbp + 0x38], 0x41
mov r13d, edi
jmp 0x14004da07
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x48]
lea r8, [rbp + 0x28]
xor edx, edx
mov rcx, r14
call fcn.14008f920
mov r13d, eax
cmp eax, 1
jne 0x14004db4a
cmp dword [rbp + 0x38], 0
jne 0x14004da07
mov rcx, qword [rbp - 0x48]
cmp qword [rbp + 0x28], rcx
jne 0x14004da07
mov qword [rbp + 0x40], rcx
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0xb8], rax
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
mov rax, qword [r14 + 0x20]
mov rsi, qword [rax + 0x20]
cmp byte [rsi], 0x76
jne 0x14004db01
nop dword [rax + rax]
mov r14d, dword [rsi + 0x10]
test r14d, r14d
jne 0x14004da32
mov r15, qword [rsi + 0x20]
jmp 0x14004dae5
mov edi, ebx
test r14d, r14d
jle 0x14004dae5
nop dword [rax]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x48]
lea r8, [rbp + 0xc8]
mov edx, edi
mov rcx, rsi
call fcn.14008f920
mov r13d, eax
cmp eax, 1
jne 0x14004dadd
cmp dword [rbp + 0xd8], 0
jne 0x14004da80
mov dword [rbp + 0xd8], 5
mov qword [rbp + 0xd0], rbx
cmp dword [rbp + 0x38], 0x41
jne 0x14004da99
mov edx, 0x41
lea rcx, [rbp + 0xc8]
call fcn.1400838a0
jmp 0x14004daa9
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x28]
call fcn.140084470
mov ebx, eax
cmp dword [rbp + 0xd8], 6
jne 0x14004dac1
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
test ebx, ebx
jne 0x14004dad7
inc edi
cmp edi, r14d
mov ebx, 0
jl 0x14004da40
jmp 0x14004dae5
mov r15, qword [rsi + 0x20]
jmp 0x14004dae0
mov r15, rbx
cmp edi, r14d
jl 0x14004daf5
mov rsi, qword [rsi + 0x28]
cmp byte [rsi], 0x76
jne 0x14004daf5
xor ebx, ebx
jmp 0x14004da20
mov r14, qword [rsp + 0x60]
mov edi, 1
xor ebx, ebx
cmp dword [rbp + 0x38], 6
jne 0x14004db11
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
cmp qword [rbp + 0x40], 0
je 0x14004db4a
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14004db37
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp qword [rbp - 0x40], 0x400000
jbe 0x14004db37
dec dword [0x140114acc]
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0xb8]
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x48], 0
je 0x14004db8c
mov rcx, qword [0x140114ad8]
test rcx, rcx
je 0x14004db76
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp qword [0x140114ad0], 0x400000
jbe 0x14004db76
dec dword [0x140114acc]
mov rax, qword [rbp - 0x48]
mov qword [0x140114ad8], rax
mov rax, qword [rbp - 0x40]
mov qword [0x140114ad0], rax
test r15, r15
je 0x14004dbb0
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 2
mov rcx, r15
call fcn.14004c520
mov r13d, eax
mov rcx, qword [rsp + 0x70]
jmp 0x14004dbb8
mov rcx, rbx
mov qword [rsp + 0x70], rbx
cmp r13d, 1
jne 0x140051bb8
cmp dword [rbp + 0x9d8], 3
je 0x140051bb8
test rcx, rcx
je 0x14004dbf3
mov rax, qword [r14 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x140051bac
mov r14, rcx
mov qword [rsp + 0x60], rcx
mov r15, qword [rbp - 0x50]
jmp 0x140051b96
mov r14, qword [r14 + 0x28]
mov qword [rsp + 0x60], r14
mov r15, qword [rbp - 0x50]
jmp 0x140051b96
cmp qword [r14 + 0x10], 1
jne 0x14004dc1a
mov r14, qword [r14 + 0x28]
mov qword [rsp + 0x60], r14
jmp 0x140051b96
lea r9, [rsp + 0x70]
mov r8, r12
mov edx, 2
mov rcx, qword [r14 + 0x20]
call fcn.14004c520
mov r13d, eax
mov rcx, qword [rsp + 0x70]
cmp rcx, r14
je 0x140051b96
cmp dword [rbp + 0x9d8], 3
je 0x140051d01
cmp eax, 1
jne 0x140051d01
test rcx, rcx
je 0x14004dc0c
mov rax, qword [rcx + 0x30]
cmp qword [r14 + 0x30], rax
jmp 0x14004c91e
inc rdx
mov qword [0x140117ba0], rdx
mov rsi, qword [0x140115db0]
mov qword [rsp + 0x78], rsi
mov r15, qword [0x1401101f0]
mov ebx, dword gs:[0x48]
movzx r10d, byte [r14]
lea eax, [r10 - 1]
cmp eax, 0xe3
ja case.0x14004dcae.8
cdqe
mov ecx, dword [r8 + rax*4 + 0x520d0]
add rcx, r8
jmp rcx
mov rcx, r14
call fcn.1400675f0
jmp 0x140051b4c
mov r10, qword [0x140115e58]
cmp byte [r14 + 1], 1
jbe 0x14004dd3f
mov rax, qword [r14 + 8]
cmp byte [rax + 0x21], 0
jne case.0x14004dcae.3
mov rdx, qword [rax + 0x38]
test rdx, rdx
je 0x14004dcf5
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, qword [rdx]
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov rdx, qword [0x140115db8]
test rdx, rdx
je 0x14004dd3f
cmp word [r10], 0
jne 0x14004dd3f
movzx eax, byte [rdx + 0x23]
test al, al
jne 0x14004dd18
mov rax, qword [rdx + 0x10]
movzx eax, byte [rax + 0x23]
movzx ecx, al
sub ecx, 1
je 0x14004dd32
cmp ecx, 2
jne 0x14004dd3f
mov rcx, rsi
call fcn.1400be920
jmp 0x140051b4c
mov rcx, rsi
call fcn.1400be6a0
jmp 0x140051b4c
mov byte [rsp + 0x20], 1
xor r9d, r9d
lea r8, [r9 - 1]
mov rdx, r10
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
mov rax, qword [r14 + 8]
cmp qword [rax + 0x38], 0
je 0x14004dd7c
cmp byte [rax + 0x21], 0
jne 0x14004dd7c
mov r12d, edi
mov ebx, edi
xor r13d, r13d
mov r15d, r13d
jmp 0x14004df1d
xor ecx, ecx
mov r12d, ecx
mov rbx, qword [0x140115e58]
mov r15, qword [0x140115db8]
test r15, r15
je 0x14004ddc4
cmp word [rbx], cx
jne 0x14004ddc4
movzx eax, byte [r15 + 0x23]
test al, al
jne 0x14004ddaa
mov rax, qword [r15 + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x14004ddc4
test r15, r15
je 0x14004ddc7
mov edx, edi
mov rcx, r15
call fcn.14002f9f0
mov ebx, eax
jmp 0x14004df1a
mov r15, rcx
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004ddd6
cmp ax, 9
jne 0x14004dddc
add rbx, 2
jmp 0x14004ddc7
test ax, ax
je 0x14004df18
cmp ax, 0x2d
je 0x14004ddf1
cmp ax, 0x2b
jne 0x14004ddfb
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14004de34
movzx eax, word [rbx + 2]
sub ax, 0x58
mov edx, 0xffdf
test dx, ax
jne 0x14004de34
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14004de32
add rbx, 4
mov r13d, 1
mov edi, r13d
xor ecx, ecx
jmp 0x14004de3d
xor ecx, ecx
mov rdi, rcx
mov r13d, 1
mov esi, ecx
mov r14d, ecx
movzx eax, word [rbx]
cmp eax, 0x20
je 0x14004dea6
nop word [rax + rax]
cmp eax, 9
je 0x14004dea4
test eax, eax
je 0x14004def2
cmp eax, 0x2e
jne 0x14004de70
test esi, esi
jne 0x14004debb
test rdi, rdi
jne 0x14004debb
mov esi, r13d
jmp 0x14004de98
test rdi, rdi
je 0x14004de8d
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor edx, edx
mov ecx, edx
test eax, eax
sete cl
test ecx, ecx
jne 0x14004ded3
jmp 0x14004de95
add eax, 0xffffffd0
cmp eax, 9
ja 0x14004ded1
mov r14d, r13d
add rbx, 2
movzx eax, word [rbx]
cmp eax, 0x20
jne 0x14004de50
xor ecx, ecx
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004deb5
cmp ax, 9
jne 0x14004def4
add rbx, 2
jmp 0x14004dea6
xor r13d, r13d
mov ebx, r13d
mov rsi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
lea edi, [r13 + 1]
jmp 0x14004df1d
xor edx, edx
mov ebx, edx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004deeb
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004df1a
xor ecx, ecx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004df13
mov ebx, ecx
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004df1a
mov rsi, qword [rsp + 0x78]
mov ebx, ecx
xor r13d, r13d
mov edx, edi
mov rcx, rsi
call fcn.14002f9f0
mov edi, eax
mov rax, qword [0x140115e60]
movzx ecx, word [rax]
test cx, cx
je 0x14004e0e7
call fcn.140016470
movzx edx, ax
lea rcx, str.SMHD
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14004e0e7
test ebx, ebx
jne 0x14004df67
lea r13d, [rbx + 1]
jmp 0x140051b64
test r12d, r12d
je 0x14004df7e
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rcx]
jmp 0x14004df9e
test r15, r15
je 0x14004df8f
xor edx, edx
mov rcx, r15
call fcn.14002fb30
jmp 0x14004df9b
mov rcx, qword [0x140115e58]
call fcn.14002f9b0
movaps xmm6, xmm0
xor r8d, r8d
mov edi, 1
mov edx, edi
mov rcx, rsi
call fcn.1400017c0
cmp word [rax], 0
je 0x14004e00a
xor r8d, r8d
mov edx, edi
mov rcx, rsi
call fcn.1400017c0
xor r8d, r8d
lea rdx, [rbp + 0xf8]
mov rcx, rax
call fcn.1400b9d20
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xf8]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
jne 0x14004e028
mov byte [rsp + 0x20], dil
xor r9d, r9d
lea r8, [rdi - 2]
lea rdx, [0x1400da7a4]
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov rax, qword [0x140115e60]
movzx ecx, word [rax]
call fcn.140016470
movzx eax, ax
cmp eax, 0x44
je 0x14004e06c
cmp eax, 0x48
je 0x14004e062
cmp eax, 0x4d
je 0x14004e058
cmp eax, 0x53
jne 0x14004e074
mulsd xmm6, qword [0x1400ff500]
jmp 0x14004e074
mulsd xmm6, qword [0x1400ff510]
jmp 0x14004e074
mulsd xmm6, qword [0x1400ff520]
jmp 0x14004e074
mulsd xmm6, qword [0x1400ff528]
mov rax, qword [rbp - 0x20]
cvttsd2si rcx, xmm6
add rax, rcx
mov dword [rbp - 0x20], eax
shr rax, 0x20
mov dword [rbp - 0x1c], eax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x60], rax
lea rdx, [rbp + 0x108]
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x14004e0bc
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x150]
call fcn.1400ba000
jmp 0x14004e0cb
mov word [rbp + 0x150], r13w
lea rax, [rbp + 0x150]
mov byte [rsp + 0x20], dil
xor r9d, r9d
lea r8, [r9 - 1]
mov rdx, rax
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
cmp ebx, 2
je 0x14004e147
cmp edi, 2
je 0x14004e147
test r12d, r12d
je 0x14004e103
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
mov rbx, qword [rcx]
jmp 0x14004e123
test r15, r15
je 0x14004e114
xor edx, edx
mov rcx, r15
call fcn.14002fa90
jmp 0x14004e120
mov rcx, qword [0x140115e58]
call fcn.140005710
mov rbx, rax
xor edx, edx
mov rcx, rsi
call fcn.14002fa90
lea rdx, [rbx + rax]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rsi
call fcn.1400015d0
mov r13d, 1
jmp 0x140051b64
test r12d, r12d
je 0x14004e15e
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rcx]
jmp 0x14004e17e
test r15, r15
je 0x14004e16f
xor edx, edx
mov rcx, r15
call fcn.14002fb30
jmp 0x14004e17b
mov rcx, qword [0x140115e58]
call fcn.14002f9b0
movaps xmm6, xmm0
xor edx, edx
mov rcx, rsi
call fcn.14002fb30
addsd xmm0, xmm6
movsd qword [rbp - 0x60], xmm0
mov r8b, 0x28
mov rdx, qword [rbp - 0x60]
mov rcx, rsi
call fcn.1400015d0
mov r13d, 1
jmp 0x140051b64
mov rax, qword [0x140115e60]
movzx ecx, word [rax]
test cx, cx
je 0x14004e2de
call fcn.140016470
movzx edx, ax
lea rcx, str.SMHD
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14004e2de
mov rbx, qword [0x140115e58]
mov rcx, qword [0x140115db8]
test rcx, rcx
je 0x14004e21b
cmp word [rbx], 0
jne 0x14004e21b
movzx eax, byte [rcx + 0x23]
test al, al
jne 0x14004e205
mov rax, qword [rcx + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x14004e21b
test rcx, rcx
je 0x14004e21b
xor r8d, r8d
mov edx, edi
call fcn.1400017c0
mov rbx, rax
xor r8d, r8d
mov edx, edi
mov rcx, rsi
call fcn.1400017c0
mov rdx, rax
lea r8, [rbp - 0x70]
mov rcx, rbx
call fcn.1400ba060
mov rbx, rax
cmp byte [rbp - 0x70], 0
je 0x14004e260
mov byte [rsp + 0x20], 1
xor r9d, r9d
lea r8, [r9 - 1]
lea rdx, [0x1400da7a4]
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
mov rax, qword [0x140115e60]
movzx ecx, word [rax]
call fcn.140016470
movzx eax, ax
cmp eax, 0x44
je 0x14004e2ad
cmp eax, 0x48
je 0x14004e297
cmp eax, 0x4d
jne 0x14004e2cb
movabs rax, 0x8888888888888889
imul rbx
add rbx, rdx
sar rbx, 5
jmp 0x14004e2c1
movabs rax, 0x48d159e26af37c05
imul rbx
mov rbx, rdx
sar rbx, 0xa
jmp 0x14004e2c1
movabs rax, 0x1845c8a0ce512957
imul rbx
mov rbx, rdx
sar rbx, 0xd
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rbx
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov rax, qword [r14 + 8]
cmp qword [rax + 0x38], 0
je 0x14004e2fe
cmp byte [rax + 0x21], 0
jne 0x14004e2fe
mov r12d, edi
mov ebx, edi
xor eax, eax
mov r15d, eax
jmp 0x14004e4a1
xor ecx, ecx
mov r12d, ecx
mov rbx, qword [0x140115e58]
mov r15, qword [0x140115db8]
test r15, r15
je 0x14004e346
cmp word [rbx], cx
jne 0x14004e346
movzx eax, byte [r15 + 0x23]
test al, al
jne 0x14004e32c
mov rax, qword [r15 + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x14004e346
test r15, r15
je 0x14004e350
mov edx, edi
mov rcx, r15
call fcn.14002f9f0
mov ebx, eax
jmp 0x14004e4a1
mov r15, rcx
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004e35f
cmp ax, 9
jne 0x14004e365
add rbx, 2
jmp 0x14004e350
test ax, ax
je 0x14004e49f
cmp ax, 0x2d
je 0x14004e37a
cmp ax, 0x2b
jne 0x14004e384
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14004e3bd
movzx eax, word [rbx + 2]
sub ax, 0x58
mov edx, 0xffdf
test dx, ax
jne 0x14004e3bd
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14004e3bb
add rbx, 4
mov r13d, 1
mov edi, r13d
xor ecx, ecx
jmp 0x14004e3c6
xor ecx, ecx
mov rdi, rcx
mov r13d, 1
mov esi, ecx
mov r14d, ecx
movzx eax, word [rbx]
cmp eax, 0x20
je 0x14004e430
cmp eax, 9
je 0x14004e427
test eax, eax
je 0x14004e479
cmp eax, 0x2e
jne 0x14004e3f3
test esi, esi
jne 0x14004e445
test rdi, rdi
jne 0x14004e445
mov esi, r13d
jmp 0x14004e41b
test rdi, rdi
je 0x14004e410
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor edx, edx
mov ecx, edx
test eax, eax
sete cl
test ecx, ecx
jne 0x14004e45a
jmp 0x14004e418
add eax, 0xffffffd0
cmp eax, 9
ja 0x14004e458
mov r14d, r13d
add rbx, 2
movzx eax, word [rbx]
cmp eax, 0x20
jne 0x14004e3d3
xor ecx, ecx
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004e43f
cmp ax, 9
jne 0x14004e47b
add rbx, 2
jmp 0x14004e430
xor eax, eax
mov ebx, eax
mov rsi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
lea edi, [rax + 1]
jmp 0x14004e4a1
xor edx, edx
mov ebx, edx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004e472
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004e4a1
xor ecx, ecx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004e49a
mov ebx, ecx
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004e4a1
mov rsi, qword [rsp + 0x78]
mov ebx, ecx
mov edx, edi
mov rcx, rsi
call fcn.14002f9f0
cmp ebx, 2
je 0x14004e507
cmp eax, 2
je 0x14004e507
test r12d, r12d
je 0x14004e4c7
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
mov rbx, qword [rcx]
jmp 0x14004e4e7
test r15, r15
je 0x14004e4d8
xor edx, edx
mov rcx, r15
call fcn.14002fa90
jmp 0x14004e4e4
mov rcx, qword [0x140115e58]
call fcn.140005710
mov rbx, rax
xor edx, edx
mov rcx, rsi
call fcn.14002fa90
sub rax, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rax
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
test r12d, r12d
je 0x14004e51e
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rcx]
jmp 0x14004e53e
test r15, r15
je 0x14004e52f
xor edx, edx
mov rcx, r15
call fcn.14002fb30
jmp 0x14004e53b
mov rcx, qword [0x140115e58]
call fcn.14002f9b0
movaps xmm6, xmm0
xor edx, edx
mov rcx, rsi
call fcn.14002fb30
subsd xmm0, xmm6
movsd qword [rbp - 0x60], xmm0
mov r8b, 0x28
mov rdx, qword [rbp - 0x60]
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov rax, qword [r14 + 8]
cmp qword [rax + 0x38], 0
je 0x14004e585
cmp byte [rax + 0x21], 0
jne 0x14004e585
mov r12d, edi
mov ebx, edi
xor eax, eax
mov r15d, eax
jmp 0x14004e721
xor ecx, ecx
mov r12d, ecx
mov rbx, qword [0x140115e58]
mov r15, qword [0x140115db8]
test r15, r15
je 0x14004e5cd
cmp word [rbx], cx
jne 0x14004e5cd
movzx eax, byte [r15 + 0x23]
test al, al
jne 0x14004e5b3
mov rax, qword [r15 + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x14004e5cd
test r15, r15
je 0x14004e5d0
mov edx, edi
mov rcx, r15
call fcn.14002f9f0
mov ebx, eax
jmp 0x14004e721
mov r15, rcx
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004e5df
cmp ax, 9
jne 0x14004e5e5
add rbx, 2
jmp 0x14004e5d0
test ax, ax
je 0x14004e71f
cmp ax, 0x2d
je 0x14004e5fa
cmp ax, 0x2b
jne 0x14004e604
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14004e63d
movzx eax, word [rbx + 2]
sub ax, 0x58
mov edx, 0xffdf
test dx, ax
jne 0x14004e63d
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14004e63b
add rbx, 4
mov r13d, 1
mov edi, r13d
xor ecx, ecx
jmp 0x14004e646
xor ecx, ecx
mov rdi, rcx
mov r13d, 1
mov esi, ecx
mov r14d, ecx
movzx eax, word [rbx]
cmp eax, 0x20
je 0x14004e6b0
cmp eax, 9
je 0x14004e6a7
test eax, eax
je 0x14004e6f9
cmp eax, 0x2e
jne 0x14004e673
test esi, esi
jne 0x14004e6c5
test rdi, rdi
jne 0x14004e6c5
mov esi, r13d
jmp 0x14004e69b
test rdi, rdi
je 0x14004e690
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor edx, edx
mov ecx, edx
test eax, eax
sete cl
test ecx, ecx
jne 0x14004e6da
jmp 0x14004e698
add eax, 0xffffffd0
cmp eax, 9
ja 0x14004e6d8
mov r14d, r13d
add rbx, 2
movzx eax, word [rbx]
cmp eax, 0x20
jne 0x14004e653
xor ecx, ecx
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004e6bf
cmp ax, 9
jne 0x14004e6fb
add rbx, 2
jmp 0x14004e6b0
xor eax, eax
mov ebx, eax
mov rsi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
lea edi, [rax + 1]
jmp 0x14004e721
xor edx, edx
mov ebx, edx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004e6f2
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004e721
xor ecx, ecx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004e71a
mov ebx, ecx
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004e721
mov rsi, qword [rsp + 0x78]
mov ebx, ecx
mov edx, edi
mov rcx, rsi
call fcn.14002f9f0
cmp ebx, 2
je 0x14004e788
cmp eax, 2
je 0x14004e788
test r12d, r12d
je 0x14004e747
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
mov rbx, qword [rcx]
jmp 0x14004e767
test r15, r15
je 0x14004e758
xor edx, edx
mov rcx, r15
call fcn.14002fa90
jmp 0x14004e764
mov rcx, qword [0x140115e58]
call fcn.140005710
mov rbx, rax
xor edx, edx
mov rcx, rsi
call fcn.14002fa90
imul rax, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rax
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
test r12d, r12d
je 0x14004e79f
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rcx]
jmp 0x14004e7bf
test r15, r15
je 0x14004e7b0
xor edx, edx
mov rcx, r15
call fcn.14002fb30
jmp 0x14004e7bc
mov rcx, qword [0x140115e58]
call fcn.14002f9b0
movaps xmm6, xmm0
xor edx, edx
mov rcx, rsi
call fcn.14002fb30
mulsd xmm0, xmm6
movsd qword [rbp - 0x60], xmm0
mov r8b, 0x28
mov rdx, qword [rbp - 0x60]
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov rax, qword [r14 + 8]
cmp qword [rax + 0x38], 0
je 0x14004e806
cmp byte [rax + 0x21], 0
jne 0x14004e806
mov r12d, edi
mov ebx, edi
xor eax, eax
mov r15d, eax
jmp 0x14004e9a1
xor ecx, ecx
mov r12d, ecx
mov rbx, qword [0x140115e58]
mov r15, qword [0x140115db8]
test r15, r15
je 0x14004e84e
cmp word [rbx], cx
jne 0x14004e84e
movzx eax, byte [r15 + 0x23]
test al, al
jne 0x14004e834
mov rax, qword [r15 + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x14004e84e
test r15, r15
je 0x14004e851
mov edx, edi
mov rcx, r15
call fcn.14002f9f0
mov ebx, eax
jmp 0x14004e9a1
mov r15, rcx
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004e860
cmp ax, 9
jne 0x14004e866
add rbx, 2
jmp 0x14004e851
test ax, ax
je 0x14004e99f
cmp ax, 0x2d
je 0x14004e87b
cmp ax, 0x2b
jne 0x14004e885
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14004e8be
movzx eax, word [rbx + 2]
sub ax, 0x58
mov edx, 0xffdf
test dx, ax
jne 0x14004e8be
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14004e8bc
add rbx, 4
mov r13d, 1
mov edi, r13d
xor ecx, ecx
jmp 0x14004e8c7
xor ecx, ecx
mov rdi, rcx
mov r13d, 1
mov esi, ecx
mov r14d, ecx
movzx eax, word [rbx]
cmp eax, 0x20
je 0x14004e930
cmp eax, 9
je 0x14004e928
test eax, eax
je 0x14004e979
cmp eax, 0x2e
jne 0x14004e8f4
test esi, esi
jne 0x14004e945
test rdi, rdi
jne 0x14004e945
mov esi, r13d
jmp 0x14004e91c
test rdi, rdi
je 0x14004e911
movzx ecx, ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor edx, edx
mov ecx, edx
test eax, eax
sete cl
test ecx, ecx
jne 0x14004e95a
jmp 0x14004e919
add eax, 0xffffffd0
cmp eax, 9
ja 0x14004e958
mov r14d, r13d
add rbx, 2
movzx eax, word [rbx]
cmp eax, 0x20
jne 0x14004e8d4
xor ecx, ecx
nop word [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14004e93f
cmp ax, 9
jne 0x14004e97b
add rbx, 2
jmp 0x14004e930
xor eax, eax
mov ebx, eax
mov rsi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
lea edi, [rax + 1]
jmp 0x14004e9a1
xor edx, edx
mov ebx, edx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004e972
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004e9a1
xor ecx, ecx
mov edi, 1
test r14d, r14d
mov r14, qword [rsp + 0x60]
je 0x14004e99a
mov ebx, ecx
test esi, esi
setne bl
inc ebx
mov rsi, qword [rsp + 0x78]
jmp 0x14004e9a1
mov rsi, qword [rsp + 0x78]
mov ebx, ecx
mov edx, edi
mov rcx, rsi
call fcn.14002f9f0
cmp ebx, 2
je 0x14004ea26
cmp eax, 2
je 0x14004ea26
test r12d, r12d
je 0x14004e9c7
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
mov rbx, qword [rcx]
jmp 0x14004e9e7
test r15, r15
je 0x14004e9d8
xor edx, edx
mov rcx, r15
call fcn.14002fa90
jmp 0x14004e9e4
mov rcx, qword [0x140115e58]
call fcn.140005710
mov rbx, rax
mov rcx, rsi
test rbx, rbx
jne 0x14004ea07
mov byte [rsp + 0x20], 1
xor r9d, r9d
xor edx, edx
lea r8, [rbx - 1]
call fcn.1400befb0
jmp 0x140051b4c
xor edx, edx
call fcn.14002fa90
cqo
idiv rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rax
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
test r12d, r12d
je 0x14004ea3d
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x38]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rcx]
jmp 0x14004ea5d
test r15, r15
je 0x14004ea4e
xor edx, edx
mov rcx, r15
call fcn.14002fb30
jmp 0x14004ea5a
mov rcx, qword [0x140115e58]
call fcn.14002f9b0
movaps xmm6, xmm0
ucomisd xmm6, xmm8
jp 0x14004ea81
jne 0x14004ea81
mov byte [rsp + 0x20], 1
xor r9d, r9d
xor edx, edx
lea r8, [r9 - 1]
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
xor edx, edx
mov rcx, rsi
call fcn.14002fb30
divsd xmm0, xmm6
movsd qword [rbp - 0x60], xmm0
mov r8b, 0x28
mov rdx, qword [rbp - 0x60]
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov edx, 2
mov rcx, r14
call fcn.140048130
mov rbx, rax
test eax, eax
jns 0x14004eac2
xor eax, eax
mov ebx, eax
jmp 0x14004ead1
mov edx, edi
mov rcx, r14
call fcn.1400480b0
cmp ebx, eax
cmovg ebx, eax
movsxd r8, ebx
mov byte [rsp + 0x20], 1
xor r9d, r9d
mov rdx, qword [0x140115e58]
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
mov edx, 2
mov rcx, r14
call fcn.140048130
xor edx, edx
mov ebx, edx
test eax, eax
cmovns ebx, eax
mov edx, edi
mov rcx, r14
call fcn.1400480b0
mov rcx, rax
cmp rbx, rax
cmova ebx, eax
movsxd r8, ebx
sub rcx, r8
mov rax, qword [0x140115e58]
lea rdx, [rax + rcx*2]
mov byte [rsp + 0x20], 1
xor r9d, r9d
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
cmp byte [r14 + 1], 4
jb 0x14004eb6e
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 0x68]
cmp word [rcx], 0
je 0x14004eb6e
mov edx, 3
mov rcx, r14
call fcn.140048130
mov rdi, rax
cmp eax, 1
jge 0x14004eb73
jmp 0x14004ea66
mov edi, 0x7fffffff
mov edx, 2
mov rcx, r14
call fcn.140048130
mov rbx, rax
mov rax, qword [0x140115e70]
movzx ecx, word [rax]
call fcn.140016470
cmp ax, 0x4c
jne 0x14004ebb6
cmp ebx, 1
jl 0x14004ea66
mov ecx, 1
mov eax, ecx
sub eax, edi
add ebx, eax
cmp ebx, ecx
jge 0x14004ebc1
dec edi
add edi, ebx
jmp 0x14004ebbb
mov ecx, 1
cmp ebx, 1
cmovl ebx, ecx
mov edx, ecx
mov rcx, r14
call fcn.1400480b0
mov r8, rax
mov eax, ebx
mov byte [rsp + 0x20], 1
cmp r8, rax
jb 0x14004ea6b
lea eax, [rbx - 1]
movsxd rcx, eax
sub r8, rcx
movsxd rcx, ebx
mov rax, qword [0x140115e58]
sub rax, 2
lea rdx, [rax + rcx*2]
mov eax, edi
cmp rax, r8
cmovbe r8d, edi
movsxd r8, r8d
xor r9d, r9d
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
mov edx, 2
mov rcx, r14
call fcn.140048130
xor edx, edx
mov ebx, edx
test eax, eax
cmovns ebx, eax
mov edx, edi
mov rcx, r14
call fcn.1400480b0
mov r8, rax
cmp rbx, rax
cmova ebx, eax
movsxd rcx, ebx
mov rax, qword [0x140115e58]
lea rdx, [rax + rcx*2]
sub r8, rcx
mov byte [rsp + 0x20], 1
xor r9d, r9d
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
mov edx, 2
mov rcx, r14
call fcn.140048130
xor edx, edx
mov ebx, edx
test eax, eax
cmovns ebx, eax
mov edx, edi
mov rcx, r14
call fcn.1400480b0
mov r8, rax
cmp rbx, rax
cmova ebx, eax
movsxd rax, ebx
sub r8, rax
mov byte [rsp + 0x20], 1
xor r9d, r9d
mov rdx, qword [0x140115e58]
mov rcx, rsi
call fcn.1400befb0
jmp 0x140051b4c
mov r8d, edi
mov edx, edi
mov rcx, rsi
call fcn.1400017c0
mov rbx, rax
cmp rax, qword [0x140115e58]
jne 0x14004ecdc
movzx eax, byte [rsi + 0x23]
test al, al
jne 0x14004ecd8
mov rax, qword [rsi + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
je 0x14004ed40
mov edx, edi
mov rcx, r14
call fcn.1400480b0
mov r8, rax
mov byte [rsp + 0x20], 1
xor r9d, r9d
xor edx, edx
mov rcx, rsi
call fcn.1400befb0
cmp eax, 1
jne case.0x14004dcae.8
xor r8d, r8d
mov edx, edi
mov rcx, rsi
call fcn.1400017c0
mov rbx, rax
mov rcx, qword [0x140115e58]
mov rdx, rax
sub rdx, rcx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
test ax, ax
jne 0x14004ed30
mov rax, qword [0x140115e60]
movzx ecx, word [rax]
test cx, cx
je 0x14004ed7f
call fcn.140016470
cmp ax, 0x54
jne 0x14004ed7f
mov rax, qword [0x140115e60]
cmp word [rax + 2], 0
jne 0x14004ed7f
mov rcx, rbx
call fcn.14002f610
xor edx, edx
mov rcx, rsi
call fcn.14002fe10
jmp 0x140051b4c
mov rcx, rbx
cmp byte [r14], 0x31
jne 0x14004ed9d
call qword [sym.imp.USER32.dll_CharLowerW]
xor edx, edx
mov rcx, rsi
call fcn.14002fe10
jmp 0x140051b4c
call qword [sym.imp.USER32.dll_CharUpperW]
xor edx, edx
mov rcx, rsi
call fcn.14002fe10
jmp 0x140051b4c
mov rbx, qword [0x140115db8]
test rbx, rbx
je 0x14004ee32
cmp byte [rbx + 0x23], 0
jne 0x14004edce
mov rax, qword [rbx + 0x10]
movzx ecx, byte [rax + 0x21]
jmp 0x14004edd2
movzx ecx, byte [rbx + 0x21]
test cl, 1
je 0x14004ee32
cmp byte [rbx + 0x23], 0
jne 0x14004ede1
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 1
jne 0x14004ee12
test byte [rbx + 0x21], 8
je 0x14004edf5
mov rcx, rbx
call fcn.140001670
lea rax, [rbx + 0x10]
mov rax, qword [rax]
shr rax, 1
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rax
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
lea rax, [0x1401195c0]
mov rax, qword [rax]
shr rax, 1
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rax
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov edx, edi
mov rcx, r14
call fcn.1400480b0
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, rax
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov rsi, qword [0x140115e68]
mov dword [rbp - 0x30], 0xffffffff
movzx ecx, word [rsi]
test cx, cx
je 0x14004ee9b
call fcn.140016470
movzx edx, ax
lea rcx, [0x1400f824c]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14004ee9b
lea rcx, [rsi + 2]
cmp word [rcx], 0
je 0x14004ee9b
call fcn.14001c140
mov r12d, eax
test eax, eax
jle 0x14004efb2
jmp 0x14004ee9e
mov r12d, edi
mov r14, qword [0x140115e60]
cmp word [r14], 0
jne 0x14004eeb5
xor eax, eax
mov ebx, eax
jmp 0x14004efb6
mov r13, qword [0x140115e58]
mov edx, 4
mov rcx, qword [rsp + 0x60]
call fcn.140048130
xor edx, edx
mov ebx, edx
test eax, eax
cmovns ebx, eax
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.1400480b0
mov rdi, rax
cmp ebx, eax
jge 0x14004efad
movzx ecx, word [rsi]
cmp cx, 0x31
je 0x14004ef73
call fcn.140016470
cmp ax, 0x52
je 0x14004ef73
mov edx, 2
mov rcx, qword [rsp + 0x60]
call fcn.1400480b0
mov rsi, rax
mov edi, 1
movsxd rax, ebx
lea rcx, [rax*2]
add rcx, r13
nop word [rax + rax]
mov rax, qword [0x1401101f0]
movzx edx, byte [rax + 0x132]
test dl, dl
jne 0x14004ef4c
mov rdx, r14
call fcn.1400ba7d0
jmp 0x14004ef61
cmp dl, 2
mov rdx, r14
jne 0x14004ef5b
call fcn.1400baa70
jmp 0x14004ef61
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
je 0x14004efad
cmp edi, r12d
je 0x14004ef94
inc edi
lea rcx, [rax + rsi*2]
jmp 0x14004ef30
movzx r9d, byte [r15 + 0x132]
movsxd rax, ebx
sub rdi, rax
mov dword [rsp + 0x20], r12d
mov r8, r14
mov rdx, rdi
mov rcx, r13
call fcn.1400ba590
mov edi, 1
test rax, rax
je 0x14004efb2
sub rax, r13
mov rdx, rax
sar rdx, 1
mov qword [rbp - 0x30], rdx
jmp 0x14004efb2
mov edi, 1
mov rbx, qword [rbp - 0x30]
lea rdx, [0x1400da884]
test ebx, ebx
lea rax, [0x1400f11dc]
cmovs rdx, rax
mov byte [rsp + 0x20], 1
xor r9d, r9d
lea r8, [r9 - 1]
mov rcx, qword [0x140113a28]
call fcn.1400befb0
movsxd rdx, ebx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, qword [rsp + 0x78]
call fcn.1400015d0
jmp case.0x14004dcae.3
mov rcx, r14
call fcn.140067b00
jmp 0x140051b4c
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14005b210
jmp 0x140051b4c
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140067db0
jmp 0x140051b4c
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140068980
jmp 0x140051b4c
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140069170
jmp 0x140051b4c
mov edx, 7
mov rcx, r14
call fcn.140048130
mov r15, rax
mov edx, 6
mov rcx, r14
call fcn.140048130
mov r14, rax
mov edx, 5
mov r12, qword [rsp + 0x60]
mov rcx, r12
call fcn.140048130
mov rsi, rax
mov edx, 4
mov rcx, r12
call fcn.140048130
mov rdi, rax
mov edx, 3
mov rcx, r12
call fcn.140048130
mov rbx, rax
mov edx, 2
mov rcx, r12
call fcn.140048130
mov rdx, rax
mov byte [rsp + 0x40], 0
mov rax, qword [0x140115e90]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], esi
mov r9d, edi
mov r8d, ebx
mov rcx, r12
call fcn.140062870
jmp 0x140051b4c
mov edx, 5
mov rcx, r14
call fcn.140048130
mov rsi, rax
mov edx, 4
mov rcx, r14
call fcn.140048130
mov rdi, rax
mov edx, 3
mov rcx, r14
call fcn.140048130
mov rbx, rax
mov edx, 2
mov rcx, r14
call fcn.140048130
mov rdx, rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, edi
mov r8d, ebx
mov rcx, r14
call fcn.1400633e0
jmp 0x140051b4c
mov edx, 2
mov rcx, r14
call fcn.140048130
mov rbx, rax
mov edx, edi
mov rcx, r14
call fcn.140048130
mov rdx, rax
mov r9, qword [0x140115e68]
mov r8d, ebx
mov rcx, r14
call fcn.140085710
jmp 0x140051b4c
xor eax, eax
mov edx, eax
cmp r10b, 0x42
sete dl
xor r9d, r9d
mov r8d, dword [r15 + 0x114]
mov rcx, qword [0x140115e50]
call fcn.14001c680
jmp case.0x14004dcae.3
mov r8d, edi
cmp dword [r15 + 0x114], 3
mov eax, 3
cmove r8d, eax
xor r9d, r9d
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.14001c680
jmp case.0x14004dcae.3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov rcx, qword [0x140115e50]
call fcn.14001c680
jmp case.0x14004dcae.3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.14001c680
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e50]
call fcn.14001eca0
jmp 0x140051b4c
lea rbx, [0x1400da7a4]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
movzx ecx, r10b
call fcn.14001f170
jmp 0x140051b4c
mov rax, qword [0x140115e78]
mov qword [rsp + 0x48], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x30], rax
lea rax, [0x1400da7a4]
mov qword [rsp + 0x28], rax
jmp 0x14004f281
lea rbx, [0x1400da7a4]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov rax, qword [0x140115e68]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9, qword [0x140115e58]
mov r8, qword [0x140115e50]
mov rdx, rbx
movzx ecx, r10b
call fcn.14001f170
jmp 0x140051b4c
mov edx, 4
mov rcx, r14
call fcn.140048130
mov rdx, rax
mov rcx, r14
call fcn.140066910
jmp 0x140051b4c
cmp r10b, 0x7a
sete al
xor ecx, ecx
mov dword [rsp + 0x38], ecx
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], al
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r15
call fcn.1400bfec0
test rax, rax
je case.0x14004dcae.3
mov rax, qword [0x1401101f0]
cmp dword [rax + 0x74], 0xffffffff
jle case.0x14004dcae.3
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x140116f80], eax
mov rax, qword [0x1401101f0]
mov ecx, dword [rax + 0x74]
je 0x14004f3d2
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x14004dcae.3
mov edx, edi
call fcn.140001b10
jmp case.0x14004dcae.3
mov r8d, 9
lea rdx, str.ahk_group
mov rcx, qword [0x140115e50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov rdx, qword [0x140115e68]
mov r8, qword [0x140115e58]
test eax, eax
jne 0x14004f419
cmp word [r8], ax
jne 0x14004f419
cmp word [rdx], ax
jne 0x14004f419
mov bl, 1
jmp 0x14004f41b
xor bl, bl
mov esi, reloc.OLEAUT32.dll_SafeArrayLock
test bl, bl
mov eax, 0
cmovne esi, eax
movzx eax, byte [r14]
add al, 0x7a
cmp al, 1
mov rax, qword [0x140115e60]
ja 0x14004f479
cmp word [rax], 0
je 0x14004f472
mov edx, 2
mov rcx, r14
call fcn.140048210
mulsd xmm0, qword [0x1400ff4c8]
cvttsd2si esi, xmm0
test esi, esi
mov eax, 0x1f4
cmove esi, eax
mov rdx, qword [0x140115e68]
mov r8, qword [0x140115e58]
mov rax, qword [0x140115e70]
cmp word [rax], 0
jne 0x14004f4ed
test bl, bl
je 0x14004f4ed
mov rax, qword [0x140115e50]
lea rdi, [rax + 0x12]
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14004f49f
cmp ax, 9
jne 0x14004f4a5
add rdi, 2
jmp 0x14004f490
test ax, ax
je 0x14004f4e8
mov rbx, qword [0x140116fd0]
test rbx, rbx
je 0x14004f4e8
nop word [rax + rax]
mov rdx, rdi
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004f523
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14004f4c0
mov rdx, qword [0x140115e68]
mov r8, qword [0x140115e58]
mov edi, 1
movzx ecx, byte [r14]
lea eax, [rcx + 0x7a]
cmp al, 1
jbe 0x14004f537
mov qword [rsp + 0x28], rdx
mov rax, qword [0x140115e60]
mov qword [rsp + 0x20], rax
mov r9, r8
mov r8, qword [0x140115e50]
movzx edx, cl
mov rcx, r14
call fcn.14005d3f0
jmp 0x140051b4c
mov r8d, esi
movzx edx, byte [r14]
mov rcx, rbx
call fcn.1400c2710
jmp 0x140051b4c
cmp cl, 0x87
sete al
mov byte [rsp + 0x30], al
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r9d, esi
mov rdx, qword [0x140115e50]
mov rcx, r15
call fcn.1400c02b0
test rax, rax
je case.0x14004dcae.3
mov rax, qword [0x1401101f0]
cmp dword [rax + 0x74], 0xffffffff
jle case.0x14004dcae.3
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x140116f80], eax
mov rax, qword [0x1401101f0]
mov ecx, dword [rax + 0x74]
je 0x14004f3d2
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x14004dcae.3
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140061f60
jmp 0x140051b4c
mov rdx, qword [0x140115e58]
mov rcx, qword [0x140115e50]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
sete dl
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x3a98
mov dword [rsp + 0x20], edi
lea r9, str.Environment
xor r8d, r8d
lea edx, [r8 + 0x1a]
mov ecx, 0xffff
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
sete dl
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.1400874b0
jmp 0x140051b4c
mov r8d, 0xffffffff
lea rdx, [0x140117bb8]
mov rcx, qword [0x140115e50]
call fcn.1400b78a0
mov r8d, 0xffffffff
lea rdx, [0x140117bd0]
mov rcx, qword [0x140115e58]
call fcn.1400b78a0
mov r8d, 0xffffffff
lea rdx, [0x140117be8]
mov rcx, qword [0x140115e60]
call fcn.1400b78a0
jmp case.0x14004dcae.3
lea rdx, str.UseErrorLevel
mov rcx, qword [0x140115e60]
call fcn.1400ba7d0
test rax, rax
setne bl
xor edx, edx
mov eax, edx
cmp byte [r14 + 1], 3
cmova rax, qword [0x140115dc8]
movzx ecx, bl
xor cl, 1
mov qword [rsp + 0x48], rax
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x38], bl
mov qword [rsp + 0x30], rdx
mov rax, qword [0x140115e60]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], cl
mov r9, qword [0x140115e58]
xor r8d, r8d
mov rdx, qword [0x140115e50]
lea rcx, [0x140116fb0]
call fcn.140058970
mov r13d, eax
test bl, bl
je 0x140051b4f
lea rdx, str.ERROR
test eax, eax
lea rax, [0x1400da884]
cmovne rdx, rax
mov byte [rsp + 0x20], 1
xor r9d, r9d
lea r8, [r9 - 1]
mov rcx, qword [0x140113a28]
call fcn.1400befb0
jmp 0x140051b4c
mov rcx, r14
call fcn.14005d530
jmp 0x140051b4c
mov rcx, r14
cmp byte [r14 + 1], 2
jbe 0x14004f7ac
mov rax, qword [0x140115e88]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
call fcn.14005dee0
jmp 0x140051b4c
lea rbx, [0x1400da7a4]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov rax, qword [0x140115e58]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e50]
mov r8, rbx
mov rdx, rbx
call fcn.14005dee0
jmp 0x140051b4c
mov rax, qword [0x140115ea0]
mov qword [rsp + 0x58], rax
mov rax, qword [0x140115e98]
mov qword [rsp + 0x50], rax
mov rax, qword [0x140115e90]
mov qword [rsp + 0x48], rax
mov rax, qword [0x140115e88]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140085cd0
jmp 0x140051b4c
xor eax, eax
cmp r10b, 0x47
sete al
mov dword [rsp + 0x38], eax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005e090
jmp 0x140051b4c
xor r8d, r8d
mov dl, 1
mov rcx, qword [0x140115e68]
call fcn.14001c180
mov ebx, eax
test al, al
jne 0x14004f8e9
mov r9, qword [0x140115e68]
lea rdx, str.Parameter_4_invalid.
jmp 0x140051b41
mov rax, qword [0x140115e70]
cmp word [rax], 0
je 0x14004f908
mov edx, 4
mov rcx, r14
call fcn.140048130
mov rcx, rax
jmp 0x14004f90a
mov ecx, edi
mov rax, qword [0x140115e88]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e60]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e58]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e50]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e78]
mov r8d, ecx
movzx edx, bl
mov rcx, r14
call fcn.14005e190
jmp 0x140051b4c
mov rax, qword [0x140115e90]
mov qword [rsp + 0x48], rax
mov rax, qword [0x140115e88]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005e890
jmp 0x140051b4c
mov rax, qword [0x140115e90]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e88]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e80]
mov r8, qword [0x140115e78]
mov rdx, qword [0x140115e70]
mov rcx, r14
call fcn.14005eb20
jmp 0x140051b4c
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14005ece0
jmp 0x140051b4c
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005ef20
jmp 0x140051b4c
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005f0b0
jmp 0x140051b4c
mov rax, qword [0x140115e78]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14005f210
jmp 0x140051b4c
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140086080
jmp 0x140051b4c
mov rax, qword [0x140115e88]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140086990
jmp 0x140051b4c
mov rax, qword [0x140115e78]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14005fbd0
jmp 0x140051b4c
mov rax, qword [0x140115e88]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005fc70
jmp 0x140051b4c
cmp r10b, 0x94
sete dl
mov rcx, r14
call fcn.14005fde0
jmp 0x140051b4c
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140060170
jmp 0x140051b4c
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140060800
jmp 0x140051b4c
mov rcx, r14
cmp byte [r14 + 1], 1
jbe 0x14004fcd3
mov rax, qword [0x140115e70]
mov rbx, qword [0x140115e60]
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
jmp 0x14004fcea
mov rbx, qword [0x140115e50]
lea rax, [0x1400da7a4]
mov r9, rax
mov r8, rax
mov rdx, rax
mov qword [rsp + 0x20], rax
call fcn.14006ec50
test rax, rax
je case.0x14004dcae.3
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
jmp case.0x14004dcae.3
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140060d40
jmp 0x140051b4c
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140060ee0
jmp 0x140051b4c
mov rax, qword [0x140115e78]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140061030
jmp 0x140051b4c
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140061a60
jmp 0x140051b4c
mov rax, qword [0x140115e88]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e80]
mov r8, qword [0x140115e78]
mov rdx, qword [0x140115e70]
mov rcx, r14
call fcn.140061db0
jmp 0x140051b4c
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140062080
jmp 0x140051b4c
xor edx, edx
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowW]
mov rcx, rax
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x1a3
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14004f56d
xor edx, edx
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowW]
mov rcx, rax
xor r9d, r9d
mov edx, 0x111
mov r8d, OleCreatePictureIndirect
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14004f56d
mov rax, qword [r14 + 0x10]
test rax, rax
jne 0x14004fea3
mov rdx, qword [0x140115e50]
cmp word [rdx], ax
je 0x14004fea3
lea rcx, [0x140116fb0]
call fcn.14003d480
test rax, rax
jne 0x14004fea3
lea rdx, str.Target_label_does_not_exist.
jmp 0x140051b3a
mov qword [0x140117b10], rax
jmp case.0x14004dcae.3
xor eax, eax
cmp byte [r14 + 1], 1
cmova rax, qword [0x140115db8]
mov qword [rsp + 0x20], rax
mov r9, qword [r14 + 0x10]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, qword [0x140115e50]
call fcn.140017700
jmp 0x140051b4c
mov rbx, qword [r14 + 0x10]
test rbx, rbx
jne 0x14004ff8c
xor r9d, r9d
mov r8, qword [0x140115db0]
mov rdx, qword [0x140115e50]
lea rcx, [0x140116fb0]
call fcn.14003d4f0
mov rbx, rax
test rax, rax
jne 0x14004ff8c
mov r9, qword [0x140115e50]
cmp word [r9], ax
je 0x14004ff31
lea rdx, str.Target_label_does_not_exist.
jmp 0x140051b41
cmp byte [r14 + 1], 0
jbe 0x14004ff59
mov rax, qword [r14 + 8]
mov rcx, qword [rax + 8]
cmp word [rcx], 0
je 0x14004ff59
lea r9, [0x1400da7a4]
lea rdx, str.Parameter_1_invalid.
jmp 0x140051b41
mov rbx, qword [r15 + 0xe8]
test rbx, rbx
jne 0x14004ff8c
mov rbx, qword [r15 + 0xf0]
test rbx, rbx
je 0x14004ff79
mov rbx, qword [rbx]
test rbx, rbx
jne 0x14004ff8c
lea r9, [0x1400da7a4]
lea rdx, str.Parameter_1_must_not_be_blank_in_this_case.
jmp 0x140051b41
xor esi, esi
mov dword [rsp + 0x20], esi
mov r9d, edi
mov r8d, edi
mov edx, edi
mov rcx, qword [0x140115e58]
call fcn.1400ba160
test eax, eax
jne 0x14004fffd
xor edx, edx
mov rcx, qword [0x140115e58]
call fcn.140016540
mov ecx, eax
test eax, eax
jne 0x14004ffff
lea rdx, str.Delete
mov rcx, qword [0x140115e58]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004ffea
mov rdx, rbx
lea rcx, [0x140116fb0]
call fcn.14003d350
jmp case.0x14004dcae.3
mov r9, qword [0x140115e58]
lea rdx, str.Parameter_2_invalid.
jmp 0x140051b41
mov ecx, esi
lea eax, [rcx - 1]
mov r9, qword [0x140115e60]
cmp eax, 1
ja 0x140050038
cmp ecx, 1
sete al
mov byte [rsp + 0x28], sil
mov byte [rsp + 0x20], al
lea r8, [0x1400da7a4]
mov rdx, rbx
lea rcx, [0x140116fb0]
call fcn.14003d120
jmp case.0x14004dcae.3
mov r8, qword [0x140115e58]
cmp word [r8], si
jne 0x14005004f
cmp word [r9], si
je 0x14005004f
mov al, 1
jmp 0x140050051
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], 1
mov rdx, rbx
lea rcx, [0x140116fb0]
call fcn.14003d120
jmp case.0x14004dcae.3
mov ebx, reloc.WSOCK32.dll_recv
mov rcx, qword [0x140115e50]
cmp word [rcx], 0
je 0x1400500a2
lea rdx, [0x1400f8294]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400500a2
xor edx, edx
mov rcx, r14
call fcn.140048130
mov rbx, rax
test eax, eax
je 0x1400500a4
mov al, 1
mov byte [r15 + 0x12e], al
test al, al
je 0x1400500d2
mov dword [r15 + 0x118], ebx
mov byte [r15 + 0x12c], 0
mov qword [r15], 0xffffffffffffffff
mov dword [r15 + 0x34], 0xffffffff
jmp case.0x14004dcae.3
mov dword [r15 + 0x118], 5
mov byte [r15 + 0x12c], 1
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e50]
call fcn.140032840
mov ecx, eax
sub ecx, 1
je 0x14005018d
sub ecx, 1
je 0x140050147
cmp ecx, 1
jne case.0x14004dcae.3
mov rax, qword [0x140115e58]
cmp word [rax], 0
je 0x140050139
mov edx, edi
mov rcx, r14
call fcn.140048130
test rax, rax
jne 0x140050139
mov al, 1
mov byte [r15 + 0x12d], al
jmp case.0x14004dcae.3
xor al, al
mov byte [r15 + 0x12d], al
jmp case.0x14004dcae.3
mov rax, qword [0x140115e58]
cmp word [rax], 0
je 0x140050164
mov edx, edi
mov rcx, r14
call fcn.140048130
mov dword [0x140117bac], eax
mov rax, qword [0x140115e60]
cmp word [rax], 0
je case.0x14004dcae.3
mov edx, 2
mov rcx, r14
call fcn.140048130
mov dword [0x140117ba8], eax
jmp case.0x14004dcae.3
mov edx, edi
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x3c], eax
jmp case.0x14004dcae.3
mov rbx, qword [r14 + 0x10]
test rbx, rbx
jne 0x1400501cb
mov r8b, 1
mov rdx, qword [0x140115e50]
lea rcx, [0x140116fb0]
call fcn.140049290
mov rbx, rax
test rax, rax
je case.0x14004dcae.8
mov rdx, qword [0x140115e68]
cmp word [rdx], 0
je 0x140050209
mov rax, qword [r14 + 0x28]
test rax, rax
jne 0x140050205
lea rcx, [0x140116fb0]
call fcn.14003d480
test rax, rax
jne 0x140050205
mov r9, qword [0x140115e68]
lea rdx, str.Target_label_does_not_exist.
jmp 0x140051b41
mov qword [rbx + 0x20], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e70]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, rbx
call fcn.1400c2440
jmp 0x140051b4c
mov rbx, qword [r14 + 0x10]
test rbx, rbx
jne 0x140050289
mov rdi, qword [0x140115e50]
cmp word [rdi], bx
je 0x14005027a
mov rbx, qword [0x140116fd0]
test rbx, rbx
je 0x14005027a
nop dword [rax + rax]
mov rdx, rdi
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140050284
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x140050260
mov edi, 1
jmp case.0x14004dcae.3
mov edi, 1
mov rcx, qword [0x140115e58]
cmp word [rcx], 0
je 0x1400502b6
lea rdx, [0x1400f1dac]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400502b6
mov dl, 1
mov rcx, rbx
call fcn.1400c2b80
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, rbx
call fcn.1400c2b80
jmp case.0x14004dcae.3
mov rbx, qword [r14 + 0x10]
test rbx, rbx
jne 0x140050317
mov rdi, qword [0x140115e50]
cmp word [rdi], bx
je 0x14005027a
mov rbx, qword [0x140116fd0]
test rbx, rbx
je 0x14005027a
nop word [rax + rax]
mov rdx, rdi
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140050312
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x1400502f0
lea edi, [rbx + 1]
jmp case.0x14004dcae.3
mov edi, 1
mov rcx, qword [0x140115e58]
cmp word [rcx], 0
je 0x140050374
lea rdx, [0x1400f5770]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140050347
xor r8d, r8d
mov dl, 0x86
mov rcx, rbx
call fcn.1400c2710
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e58]
cmp word [rcx], 0
je 0x140050374
lea rdx, [0x1400f1dac]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140050374
mov dl, 1
mov rcx, rbx
call fcn.1400c2800
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, rbx
call fcn.1400c2800
jmp case.0x14004dcae.3
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140069b70
jmp 0x140051b4c
mov edx, edi
test rsi, rsi
jne 0x1400503ba
mov rcx, r14
call fcn.140048130
mov rcx, rax
call fcn.14002f340
jmp case.0x14004dcae.3
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov r9d, edi
xor r8d, r8d
mov rcx, qword [0x140115e58]
call fcn.1400ba160
cmp eax, 2
je 0x14005047f
mov dword [rsp + 0x20], ebx
mov r9d, edi
xor r8d, r8d
mov edx, edi
mov rcx, qword [0x140115e60]
call fcn.1400ba160
cmp eax, 2
je 0x14005047f
mov rax, qword [0x140115e58]
cmp word [rax], bx
je 0x140050417
mov edx, edi
mov rcx, r14
call fcn.140048130
mov rsi, rax
jmp 0x140050419
mov esi, ebx
mov rax, qword [0x140115e60]
cmp word [rax], bx
je 0x140050437
mov edx, 2
mov rcx, r14
call fcn.140048130
mov rdi, rax
jmp 0x14005043c
mov edi, 0x7fffffff
mov ebx, edi
cmp esi, edi
cmovle ebx, esi
call fcn.14002f4d0
mov edx, eax
cmp esi, edi
cmovle esi, edi
movsxd rcx, esi
movsxd rax, ebx
sub rcx, rax
inc rcx
mov eax, edx
cqo
idiv rcx
add edx, ebx
movsxd rdx, edx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, qword [rsp + 0x78]
call fcn.1400015d0
mov r13d, 1
jmp 0x140051b64
mov rax, qword [0x140115e58]
cmp word [rax], bx
je 0x14005049a
mov edx, edi
mov rcx, r14
call fcn.140048210
movaps xmm7, xmm0
jmp 0x14005049e
movaps xmm7, xmm8
mov rax, qword [0x140115e60]
cmp word [rax], bx
je 0x1400504bc
mov edx, 2
mov rcx, r14
call fcn.140048210
movaps xmm6, xmm0
jmp 0x1400504c4
movsd xmm6, qword [0x1400ff518]
comisd xmm7, xmm6
jbe 0x1400504d3
movaps xmm0, xmm7
movaps xmm7, xmm6
movaps xmm6, xmm0
call fcn.14002f530
subsd xmm6, xmm7
mulsd xmm0, xmm6
addsd xmm0, xmm7
movsd qword [rbp - 0x60], xmm0
mov r8b, 0x28
mov rdx, qword [rbp - 0x60]
mov rcx, rsi
call fcn.1400015d0
jmp case.0x14004dcae.3
mov r8b, 1
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140069cb0
jmp 0x140051b4c
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140069e20
jmp 0x140051b4c
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14006a140
jmp 0x140051b4c
mov rdx, qword [0x140115e50]
cmp r10b, 0x9f
mov eax, 0
cmove rdx, rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rcx, r14
call fcn.14006a850
jmp 0x140051b4c
mov rax, qword [0x140115e58]
cmp word [rax], 0
je 0x1400505ac
mov edx, edi
mov rcx, r14
call fcn.140048130
lea ecx, [rax - 1]
movzx r10d, byte [r14]
jmp 0x1400505b0
xor eax, eax
mov ecx, eax
movsxd rax, ecx
xor edx, edx
mov r8d, edx
test ecx, ecx
cmovns r8, rax
mov rcx, r14
cmp r10b, 0xa1
jne 0x1400505d4
mov rdx, r8
call fcn.14006b9c0
jmp 0x140051b4c
mov rdx, qword [0x140115e50]
call fcn.14006baf0
jmp 0x140051b4c
mov rax, qword [0x140115e58]
cmp word [rax], 0
je 0x14005060b
mov edx, edi
mov rcx, r14
call fcn.140048130
mov rbx, rax
test eax, eax
mov eax, 0x96
cmovs ebx, eax
jmp 0x140050610
mov ebx, 0x96
mov rax, qword [0x140115e50]
cmp word [rax], 0
je 0x140050636
xor edx, edx
mov rcx, r14
call fcn.140048130
mov edx, ebx
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Beep]
jmp case.0x14004dcae.3
mov eax, 0x20b
mov edx, ebx
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Beep]
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e58]
cmp word [rcx], 0
je 0x14005066f
lea rdx, str.wait
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140050697
mov rcx, qword [0x140115e58]
lea rdx, [0x1400f11dc]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140050697
xor r8d, r8d
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14006bcb0
jmp 0x140051b4c
mov r8b, 1
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14006bcb0
jmp 0x140051b4c
cmp byte [r14 + 1], 2
jae 0x1400506bb
mov r9, qword [r15 + 0x20]
jmp 0x1400506c0
xor eax, eax
mov r9d, eax
mov r8, qword [0x140115e50]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14006d650
jmp 0x140051b4c
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14006ca50
jmp 0x140051b4c
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14006d300
jmp 0x140051b4c
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14006da60
jmp 0x140051b4c
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140088350
jmp 0x140051b4c
mov rax, qword [0x140115e50]
xor edx, edx
cmp word [rax], dx
cmovne rdx, rax
xor ecx, ecx
lea r8d, [rcx + 7]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
test eax, eax
setne dl
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14006db40
jmp 0x140051b4c
lea rbx, [r15 + 0x40]
mov edx, 2
mov rcx, r14
call fcn.140048130
cmp eax, 1
sete r8b
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov rdx, qword [0x140115e58]
mov rcx, qword [0x140115e50]
call fcn.140088a60
test eax, eax
jne 0x140050810
mov byte [rsp + 0x20], 1
xor r9d, r9d
lea r8, [r9 - 1]
lea rdx, [0x1400da884]
mov rcx, qword [0x140113a28]
call fcn.1400befb0
jmp 0x140051b4c
lea rbx, [r15 + 0x40]
mov edx, 2
mov rcx, r14
call fcn.140048130
cmp eax, 1
sete r8b
mov qword [rsp + 0x20], rbx
mov r9b, 1
mov rdx, qword [0x140115e58]
mov rcx, qword [0x140115e50]
call fcn.140088a60
mov edx, eax
mov rcx, r14
call fcn.140056e70
jmp 0x140051b4c
mov edx, 2
mov rcx, r14
call fcn.140048130
xor edx, edx
mov r8d, edx
cmp eax, 1
sete r8b
xor r9d, r9d
mov rdx, qword [0x140115e58]
mov rcx, qword [0x140115e50]
call fcn.140088670
test al, al
sete dl
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov rax, qword [0x140115e60]
movzx ecx, word [rax]
call fcn.140016470
cmp ax, 0x52
jne 0x14005089b
mov rdx, qword [0x140115e58]
mov rcx, qword [0x140115e50]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
sete dl
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov edx, 2
mov rcx, r14
call fcn.140048130
mov r8, rax
mov r9b, 1
jmp 0x14005083b
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.14006c910
test al, al
sete bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov rax, qword [0x1401101f0]
mov dword [rax + 0x40], ecx
movzx edx, bl
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov rax, qword [0x140115e50]
cmp word [rax], 0
je 0x140050921
mov edx, edi
mov rcx, r14
call fcn.140048130
cmp eax, 1
sete dl
mov rcx, qword [0x140115e50]
call fcn.140088940
test al, al
je 0x140050921
xor edx, edx
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov dl, 1
mov rcx, r14
call fcn.140056d90
jmp 0x140051b4c
mov rdx, qword [0x140115e58]
cmp word [rdx], 0
jne 0x140050961
mov rdx, qword [r15 + 0x10]
test rdx, rdx
je 0x14005095a
add rdx, 0x250
mov rcx, r14
call fcn.14006ddf0
jmp 0x140051b4c
lea rdx, [0x1400da7a4]
mov rcx, r14
call fcn.14006ddf0
jmp 0x140051b4c
mov rdi, qword [0x140115e58]
cmp word [rdi], 0
jne 0x140050994
mov rdi, qword [r15 + 0x10]
test rdi, rdi
je 0x14005098d
add rdi, 0x250
jmp 0x140050994
lea rdi, [0x1400da7a4]
mov edx, 3
mov rcx, r14
call fcn.140048130
cmp eax, 1
sete bl
mov rcx, qword [0x140115e60]
call fcn.140033620
mov r9d, eax
mov byte [rsp + 0x20], bl
mov r8, rdi
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14006ded0
jmp 0x140051b4c
mov rdx, qword [0x140115e58]
cmp word [rdx], 0
jne 0x1400509f7
mov rdx, qword [r15 + 0x10]
test rdx, rdx
je 0x1400509f0
add rdx, 0x250
jmp 0x1400509f7
lea rdx, [0x1400da7a4]
mov rax, qword [0x140115e60]
movzx r8d, word [rax]
mov rcx, r14
call fcn.14006e5e0
jmp 0x140051b4c
mov rdi, qword [0x140115e58]
cmp word [rdi], 0
jne 0x140050a35
mov rdi, qword [r15 + 0x10]
test rdi, rdi
je 0x140050a2e
add rdi, 0x250
jmp 0x140050a35
lea rdi, [0x1400da7a4]
mov edx, 4
mov rcx, r14
call fcn.140048130
cmp eax, 1
sete bl
mov rcx, qword [0x140115e68]
call fcn.140033620
mov byte [rsp + 0x28], bl
mov dword [rsp + 0x20], eax
mov rax, qword [0x140115e60]
movzx r9d, word [rax]
mov r8, rdi
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14006e790
jmp 0x140051b4c
mov rdx, qword [0x140115e58]
cmp word [rdx], 0
jne 0x140050ab6
mov rdx, qword [r15 + 0x10]
test rdx, rdx
je 0x140050aaf
add rdx, 0x250
mov r8, qword [0x140115e60]
mov rcx, r14
call fcn.14006e980
jmp 0x140051b4c
lea rdx, [0x1400da7a4]
mov r8, qword [0x140115e60]
mov rcx, r14
call fcn.14006e980
jmp 0x140051b4c
mov rdx, qword [0x140115e58]
cmp word [rdx], 0
jne 0x140050afb
mov rdx, qword [r15 + 0x10]
test rdx, rdx
je 0x140050af4
add rdx, 0x250
mov rcx, r14
call fcn.140088480
jmp 0x140051b4c
lea rdx, [0x1400da7a4]
mov rcx, r14
call fcn.140088480
jmp 0x140051b4c
mov rcx, qword [0x140115e50]
call fcn.14006bf00
xor eax, eax
mov r13d, eax
cmp qword [r15 + 0x148], rax
sete r13b
jmp 0x140051b4f
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.14006c050
jmp 0x140051b4c
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140087920
jmp 0x140051b4c
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140087cb0
jmp 0x140051b4c
mov rax, qword [0x140115e90]
mov qword [rsp + 0x48], rax
mov rax, qword [0x140115e88]
mov qword [rsp + 0x40], rax
mov rax, qword [0x140115e80]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.1400880c0
jmp 0x140051b4c
xor edx, edx
lea ecx, [rdx + 4]
call fcn.140065950
jmp 0x140051b4c
mov edx, 7
mov rcx, qword [0x140115e50]
call fcn.140016540
mov ecx, eax
cmp eax, 7
jne 0x140050c2c
xor edx, edx
mov ecx, edi
call fcn.140065950
jmp 0x140051b4c
cmp byte [r15 + 0x139], 0
je 0x140050c6c
mov eax, dword [0x140114ae0]
test eax, eax
jle 0x140050c4a
dec eax
mov dword [0x140114ae0], eax
jmp 0x140050c59
mov dword [0x140114ae0], 0x18f
mov eax, 0x18f
cdqe
xor edx, edx
lea r10, [0x140000000]
mov qword [r10 + rax*8 + 0x115130], rdx
cmp ecx, 1
sete al
mov byte [r15 + 0x139], al
jmp case.0x14004dcae.3
xor edx, edx
lea ecx, [rdx + 2]
call fcn.140065950
jmp 0x140051b4c
xor edx, edx
lea ecx, [rdx + 3]
call fcn.140065950
jmp 0x140051b4c
lea rcx, [r15 + 0x68]
call fcn.1400916e0
xor edi, edi
test rax, rax
je 0x140050cbd
mov rax, qword [0x1401101f0]
mov rcx, qword [rax + 0x68]
mov rbx, qword [rcx + 8]
jmp 0x140050cc0
mov rbx, rdi
movzx eax, byte [r14 + 1]
test al, al
jne 0x140050cde
movaps xmm3, xmm8
xor r8d, r8d
mov edx, 0x10000
lea rcx, str.Press_OK_to_continue.
jmp 0x140050d25
cmp al, 1
jne 0x140050cf7
movaps xmm3, xmm8
xor r8d, r8d
mov edx, 0x10000
mov rcx, qword [0x140115e50]
jmp 0x140050d25
mov edx, 3
mov rcx, r14
call fcn.140048210
movaps xmm6, xmm0
xor edx, edx
mov rcx, r14
call fcn.140048130
mov rdx, rax
movaps xmm3, xmm6
mov r8, qword [0x140115e58]
mov rcx, qword [0x140115e60]
mov qword [rsp + 0x20], rbx
call fcn.1400c1280
mov ebx, eax
test eax, eax
jne 0x140050d46
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
je case.default.0x14005125e
mov r13d, edi
test ebx, ebx
setne r13b
jmp 0x140051b4f
mov rax, qword [0x140115e88]
cmp word [rax], 0
je 0x140050d73
mov edx, 7
mov rcx, r14
call fcn.140048130
mov r15, rax
jmp 0x140050d79
mov r15d, 0x80000000
mov rax, qword [0x140115e80]
cmp word [rax], 0
je 0x140050d98
mov edx, 6
mov rcx, r14
call fcn.140048130
mov r14, rax
jmp 0x140050d9e
mov r14d, 0x80000000
mov rax, qword [0x140115e78]
mov rbx, qword [rsp + 0x60]
cmp word [rax], 0
je 0x140050dc2
mov edx, 5
mov rcx, rbx
call fcn.140048130
mov rsi, rax
jmp 0x140050dc7
mov esi, 0x80000000
mov rax, qword [0x140115e70]
cmp word [rax], 0
je 0x140050de6
mov edx, 4
mov rcx, rbx
call fcn.140048130
mov rdi, rax
jmp 0x140050deb
mov edi, 0x80000000
mov edx, 9
mov rcx, rbx
call fcn.140048210
movaps xmm6, xmm0
mov rax, qword [0x140115e90]
movzx ecx, word [rax]
call fcn.140016470
cmp ax, 0x4c
sete bl
mov rax, qword [0x140115e68]
movzx ecx, word [rax]
call fcn.140016470
cmp ax, 0x48
sete r9b
mov rax, qword [0x140115ea0]
mov qword [rsp + 0x50], rax
movsd qword [rsp + 0x48], xmm6
mov byte [rsp + 0x40], bl
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], edi
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, qword [rsp + 0x78]
call fcn.140065b00
jmp 0x140051b4c
mov rax, qword [0x140115e58]
cmp word [rax], 0
je 0x140050e89
mov edx, edi
mov rcx, r14
call fcn.140048130
mov rbx, rax
jmp 0x140050e8d
xor eax, eax
mov ebx, eax
mov rax, qword [0x140115e50]
cmp word [rax], 0
je 0x140050ea9
xor edx, edx
mov rcx, r14
call fcn.140048130
mov rcx, rax
jmp 0x140050eae
mov ecx, 0xc8
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8d, ebx
mov edx, ecx
mov rcx, r14
call fcn.140085960
jmp 0x140051b4c
mov rcx, qword [0x1401149e0]
test rcx, rcx
je 0x140050ef6
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140050ef6
mov rcx, qword [0x1401149e0]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor eax, eax
mov qword [0x1401149e0], rax
jmp case.0x14004dcae.3
mov byte [rsp + 0x38], 0
lea rax, [0x1400da7a4]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140059600
jmp 0x140051b4c
mov byte [rsp + 0x38], 1
mov rax, qword [0x140115e50]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140059600
jmp 0x140051b4c
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005ad20
jmp 0x140051b4c
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.14005b0f0
jmp 0x140051b4c
mov rcx, r14
call fcn.14005c2f0
jmp 0x140051b4c
mov rcx, qword [0x140115e58]
call fcn.140033870
movzx ebx, ax
mov rcx, qword [0x140115e50]
call fcn.140033900
movzx ecx, ax
mov eax, 3
shl ax, cl
not ax
and ax, word [r15 + 0x130]
shl bx, cl
or ax, bx
mov word [r15 + 0x130], ax
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, r14
call fcn.140048130
mov byte [r15 + 0x12f], al
cmp al, 0x64
jbe case.0x14004dcae.3
mov byte [r15 + 0x12f], 2
jmp case.0x14004dcae.3
mov edx, dword [r15 + 0x114]
mov rcx, qword [0x140115e50]
call fcn.140033550
mov dword [r15 + 0x114], eax
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, r14
call fcn.140048130
mov rcx, rax
cmp eax, 0x64
setbe al
test al, al
je case.0x14004dcae.3
mov byte [r15 + 0x136], cl
jmp case.0x14004dcae.3
lea rdx, str.Play
mov rcx, qword [0x140115e60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov rax, qword [0x140115e50]
jne 0x140051110
cmp word [rax], 0
je 0x1400510e9
xor edx, edx
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x80], eax
mov rax, qword [0x140115e58]
cmp word [rax], 0
je case.0x14004dcae.3
mov edx, edi
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x88], eax
jmp case.0x14004dcae.3
cmp word [rax], 0
je 0x140051124
xor edx, edx
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x7c], eax
mov rax, qword [0x140115e58]
cmp word [rax], 0
je case.0x14004dcae.3
mov edx, edi
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x84], eax
jmp case.0x14004dcae.3
lea rdx, str.Play
mov rcx, qword [0x140115e58]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor edx, edx
mov rcx, r14
test eax, eax
jne 0x140051179
call fcn.140048130
mov dword [r15 + 0x90], eax
jmp case.0x14004dcae.3
call fcn.140048130
mov dword [r15 + 0x8c], eax
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x74], eax
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, r14
call fcn.140048130
mov dword [r15 + 0x78], eax
jmp case.0x14004dcae.3
lea rdx, [0x1400f2184]
mov rcx, qword [0x140115e50]
call fcn.1400ba7d0
xor edx, edx
mov rcx, r14
test rax, rax
je 0x1400511e2
mov qword [r15], 0xffffffffffffffff
call fcn.140048130
mov dword [r15 + 0x34], eax
jmp case.0x14004dcae.3
mov dword [r15 + 0x34], 0xffffffff
call fcn.140048130
mov qword [r15], rax
test rax, rax
jne case.0x14004dcae.3
mov qword [r15], 0xa
jmp case.0x14004dcae.3
mov edx, 7
mov rcx, qword [0x140115e50]
call fcn.140016540
cmp eax, 7
je case.0x14004dcae.3
cmp eax, 1
sete al
mov byte [r15 + 0x133], al
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e50]
call fcn.140031620
dec eax
cmp eax, 5
ja case.default.0x14005125e
cdqe
lea r10, [0x140000000]
mov ecx, dword [r10 + rax*4 + 0x52460]
add rcx, r10
jmp rcx
mov dword [r15 + 0x30], edi
jmp case.0x14004dcae.3
mov dword [r15 + 0x30], 2
jmp case.0x14004dcae.3
mov dword [r15 + 0x30], 4
jmp case.0x14004dcae.3
mov eax, 3
mov dword [r15 + 0x30], eax
jmp case.0x14004dcae.3
mov byte [r15 + 0x129], 1
jmp case.0x14004dcae.3
mov byte [r15 + 0x129], 0
jmp case.0x14004dcae.3
mov r8d, 5
lea rdx, str.Float
mov rcx, qword [0x140115e50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140051399
mov edx, edi
mov rcx, r14
call fcn.1400480b0
cmp rax, 0x1e
jae case.0x14004dcae.3
mov edx, edi
mov rcx, r14
call fcn.140048130
mov rdi, rax
mov edx, 0x2e
mov rcx, qword [0x140115e58]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov rbx, rax
test rax, rax
je 0x140051315
lea rcx, [rax + 2]
call fcn.140005710
xor ecx, ecx
jmp 0x140051319
xor ecx, ecx
mov eax, ecx
add rax, 2
add rax, rdi
cmp rax, 0xff
jle 0x140051333
mov r13d, 1
jmp 0x140051b64
mov dword [rsp + 0x20], ecx
mov edi, 1
mov r9d, edi
mov r8d, edi
mov edx, edi
mov rcx, qword [0x140115e58]
call fcn.1400ba160
lea rcx, [0x1400da7a4]
mov rdx, rcx
test eax, eax
lea rax, [0x1400f82cc]
cmovne rdx, rax
lea r9, [0x1400f6aa4]
test rbx, rbx
cmovne r9, rcx
lea rcx, [r15 + 0x94]
mov qword [rsp + 0x20], rdx
mov r8, qword [0x140115e58]
lea rdx, [0x1400f82d0]
call fcn.140006ca0
jmp case.0x14004dcae.3
mov r8d, 7
lea rdx, str.Integer
mov rcx, qword [0x140115e50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x14004dcae.3
mov rcx, qword [0x140115e58]
movzx eax, word [rcx]
cmp eax, 0x44
je 0x1400513ec
cmp eax, 0x48
je 0x1400513dd
cmp eax, 0x64
je 0x1400513ec
cmp eax, 0x68
jne case.0x14004dcae.3
movzx eax, byte [rcx]
mov byte [r15 + 0x135], al
jmp case.0x14004dcae.3
mov byte [r15 + 0x135], 0x44
jmp case.0x14004dcae.3
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140066d10
jmp 0x140051b4c
xor eax, eax
mov edx, eax
cmp byte [r14 + 1], 4
cmova rdx, qword [0x140115dd0]
cmp byte [r14 + 1], 3
cmova rax, qword [0x140115dc8]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rax
mov rax, qword [0x140115e78]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140115e70]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
lea rcx, [0x140116fb0]
call fcn.1400a4870
jmp 0x140051b4c
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
lea rcx, [0x140116fb0]
call fcn.140091770
jmp 0x140051b4c
xor eax, eax
cmp byte [r14 + 1], 2
cmova rax, qword [0x140115dc0]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.140092370
jmp 0x140051b4c
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.140093670
jmp 0x140051b4c
mov rbx, qword [0x140115e50]
xor edx, edx
mov rcx, rbx
call fcn.140016600
mov ecx, eax
test eax, eax
jne 0x140051545
lea rdx, str.Permit
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor edx, edx
mov ecx, edx
test eax, eax
mov eax, 6
cmove ecx, eax
test ecx, ecx
je case.default.0x14005125e
sub ecx, 1
je 0x140051578
sub ecx, 1
je 0x140051561
sub ecx, 3
je 0x140051585
cmp ecx, 2
jmp 0x14005157f
cmp byte [0x140113b30], 0
je case.0x14004dcae.3
call fcn.140056a30
jmp case.0x14004dcae.3
cmp byte [0x140113b30], 0
jne case.0x14004dcae.3
call fcn.140056a30
jmp case.0x14004dcae.3
mov edx, edi
mov rcx, r14
call fcn.140048130
test eax, eax
setne bl
xor edx, edx
mov rcx, qword [0x140115e50]
call fcn.140016600
mov edx, eax
movzx r8d, bl
mov rcx, r14
call fcn.140056a90
jmp 0x140051b4c
mov edx, 7
mov rcx, qword [0x140115e50]
call fcn.140016540
cmp eax, 7
je case.0x14004dcae.3
cmp eax, 1
sete al
mov byte [r15 + 0x134], al
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e50]
call fcn.1400333d0
mov byte [r15 + 0x132], al
cmp al, 4
jne case.0x14004dcae.3
mov byte [r15 + 0x132], 0
jmp case.0x14004dcae.3
mov edx, 7
mov rcx, qword [0x140115e50]
call fcn.140016540
cmp eax, 7
je case.0x14004dcae.3
cmp eax, 1
sete al
mov byte [r15 + 0x12a], al
jmp case.0x14004dcae.3
mov edx, 7
mov rcx, qword [0x140115e50]
call fcn.140016540
cmp eax, 7
je case.0x14004dcae.3
cmp eax, 1
sete al
mov byte [r15 + 0x12b], al
jmp case.0x14004dcae.3
mov rcx, qword [0x140115e50]
call fcn.140033470
mov edx, eax
dec eax
cmp eax, 0xc
ja case.0x14004dcae.3
cdqe
lea r10, [0x140000000]
mov ecx, dword [r10 + rax*4 + 0x52478]
add rcx, r10
jmp rcx
mov ecx, edi
call qword [sym.imp.USER32.dll_BlockInput]
mov byte [0x140113b32], 1
jmp case.0x14004dcae.3
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
mov byte [0x140113b32], 0
jmp case.0x14004dcae.3
mov dword [reloc.WSOCK32.dll_inet_ntoa], edx
jmp case.0x14004dcae.3
mov byte [0x140113b31], 1
call fcn.140018fb0
jmp case.0x14004dcae.3
mov byte [0x140113b31], 0
jmp case.0x14004dcae.3
mov r8, qword [0x140115e50]
lea rdx, [0x140110aac]
mov cl, 0x90
call fcn.14006eb70
jmp 0x140051b4c
mov r8, qword [0x140115e50]
lea rdx, [0x14011020c]
mov cl, reloc.OLEAUT32.dll_SafeArrayLock
call fcn.14006eb70
jmp 0x140051b4c
mov r8, qword [0x140115e50]
lea rdx, [0x140110208]
mov cl, 0x91
call fcn.14006eb70
jmp 0x140051b4c
lea rcx, [0x140116fb0]
call fcn.140035b50
jmp case.0x14004dcae.3
mov dl, 1
lea rcx, [0x140116fb0]
call fcn.140035d80
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, r14
call fcn.140048130
cmp dword [0x140116f80], ebx
je 0x140051780
cmp eax, 0xffffffff
jle 0x140051780
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x14004dcae.3
mov edx, edi
mov ecx, eax
call fcn.140001b10
jmp case.0x14004dcae.3
mov rax, qword [0x140115e70]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e68]
mov r8, qword [0x140115e60]
mov rdx, qword [0x140115e58]
mov rcx, r14
call fcn.1400b0fb0
jmp 0x140051b4c
mov rax, qword [0x140115e68]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140115e60]
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.1400b1100
jmp 0x140051b4c
mov r9, qword [0x140115e60]
cmp byte [r14 + 1], 3
mov eax, 0
cmovb r9, rax
mov r8, qword [0x140115e58]
mov rdx, qword [0x140115e50]
mov rcx, r14
call fcn.1400b1390
jmp 0x140051b4c
cmp byte [r14 + 1], 2
jae 0x140051846
mov rdx, qword [r15 + 0x18]
test rdx, rdx
je 0x140051846
lea r9, [rdx + 0x810]
lea r8, [rdx + 0x10]
mov rdx, qword [rdx + 8]
mov rcx, r14
call fcn.1400b1420
jmp 0x140051b4c
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x58]
mov edx, 2
mov rcx, qword [0x140115e58]
call fcn.1400304f0
mov rbx, rax
mov r8, qword [rbp - 0x58]
test r8, r8
jne 0x140051880
mov r8, qword [0x140115e60]
mov qword [rbp - 0x58], r8
mov r9, qword [0x140115e68]
jmp 0x140051887
mov r9, qword [0x140115e60]
mov rdx, rbx
mov rcx, r14
call fcn.1400b1420
mov r13d, eax
cmp byte [rsp + 0x68], 0
je 0x140051b4f
test rbx, rbx
je 0x140051b4f
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140051b4f
cmp byte [r14 + 1], 2
jae 0x1400518fa
mov rdx, qword [r15 + 0x18]
test rdx, rdx
je 0x1400518fa
lea rcx, [rdx + 0x810]
lea r9, [rdx + 0x10]
mov rax, qword [0x140115e50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r8, qword [rdx + 8]
mov edx, dword [rdx + 0x1010]
mov rcx, r14
call fcn.1400b1860
jmp 0x140051b4c
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x58]
mov edx, 2
mov rcx, qword [0x140115e58]
call fcn.1400304f0
mov rdi, rax
mov rbx, qword [rbp - 0x58]
test rbx, rbx
jne 0x14005193b
mov rbx, qword [0x140115e60]
mov qword [rbp - 0x58], rbx
mov rsi, qword [0x140115e68]
mov r14, qword [0x140115e70]
jmp 0x140051949
mov rsi, qword [0x140115e60]
mov r14, qword [0x140115e68]
mov rcx, qword [0x140115e50]
call fcn.140030750
mov edx, eax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rbx
mov r8, rdi
mov rcx, qword [rsp + 0x60]
call fcn.1400b1860
mov r13d, eax
cmp byte [rsp + 0x68], 0
je 0x140051b4f
test rdi, rdi
je 0x140051b4f
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140051b4f
cmp byte [r14 + 1], 1
jae 0x140051a22
mov rdx, qword [r15 + 0x18]
test rdx, rdx
je 0x140051a22
cmp dword [rdx + 0x1010], 0xfffffffe
jne 0x140051a02
lea r9, [rdx + 0x10]
cmp word [r9], 0
je 0x1400519f4
lea rax, [rdx + 0x810]
mov qword [rsp + 0x20], rax
lea r8, str._s_s
mov edx, 0x400
lea rcx, [rbp + 0x150]
call fcn.1400ba350
lea r8, [rbp + 0x150]
mov rdx, qword [r15 + 0x18]
xor eax, eax
mov r9d, eax
jmp 0x140051a0d
lea r8, [rdx + 0x810]
xor eax, eax
mov r9d, eax
jmp 0x140051a0d
lea r8, [rdx + 0x10]
lea r9, [rdx + 0x810]
mov qword [rbp - 0x58], r8
mov rdx, qword [rdx + 8]
mov rcx, r14
call fcn.1400b1d40
jmp 0x140051b4c
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x58]
mov edx, 2
mov rcx, qword [0x140115e50]
call fcn.1400304f0
mov rsi, rax
mov rdi, qword [rbp - 0x58]
test rdi, rdi
jne 0x140051a5c
mov rdi, qword [0x140115e58]
mov qword [rbp - 0x58], rdi
mov rbx, qword [0x140115e60]
jmp 0x140051a63
mov rbx, qword [0x140115e58]
cmp word [rbx], 0
jne 0x140051a70
xor eax, eax
mov r9d, eax
jmp 0x140051a8d
lea rdx, str.ahk_default
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea r9, [0x1400da7a4]
test eax, eax
cmovne r9, rbx
mov r8, rdi
mov rdx, rsi
mov rcx, r14
call fcn.1400b1d40
mov r13d, eax
cmp byte [rsp + 0x68], 0
je 0x140051b4f
test rsi, rsi
je 0x140051b4f
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140051b4f
mov rcx, qword [0x140115e50]
call fcn.140030800
cmp eax, 0xffffffff
je case.default.0x14005125e
mov dword [r15 + 0x110], eax
jmp case.0x14004dcae.3
mov rdx, qword [0x140115e50]
lea rcx, [0x140112950]
call fcn.14000c8d0
test al, al
jne case.0x14004dcae.3
mov rcx, qword [0x140115e50]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp case.0x14004dcae.3
xor edx, edx
mov rcx, r14
call fcn.140048130
mov rcx, rax
call fcn.1400890e0
xor edx, edx
mov r13d, edx
test al, al
setne r13b
jmp 0x140051b4f
mov rcx, qword [0x140115e50]
call fcn.140033b60
cmp eax, 0xffffffff
jne 0x140051b5a
lea rdx, str.Parameter_1_invalid.
mov r9, qword [0x140115e50]
xor r8d, r8d
mov rcx, r14
call fcn.1400571b0
mov r13d, eax
test r13d, r13d
je 0x140051f62
jmp 0x140051b64
mov dword [r15 + 0x13c], eax
mov r13d, edi
cmp dword [rbp + 0x9d8], 3
je 0x140051f62
mov r14, qword [rsp + 0x60]
mov r14, qword [r14 + 0x20]
mov qword [rsp + 0x60], r14
mov r15, qword [rbp - 0x50]
jmp 0x140051b8f
mov r14, qword [rsp + 0x60]
jmp 0x140051b96
mov r15, rcx
mov r12, qword [rbp + 0x9e0]
mov edi, 1
test r14, r14
je case.0x14004c996.109
mov ebx, dword [rbp + 0x10]
jmp 0x14004c5b6
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rcx
jmp case.0x14004c996.109
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rcx
mov eax, r13d
jmp 0x14004c940
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rcx
mov eax, r13d
jmp 0x14004c940
mov rcx, qword [r14 + 0x28]
test rcx, rcx
je 0x140051bea
mov rcx, qword [rcx + 0x28]
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rcx
mov eax, 5
jmp 0x14004c940
mov r9, rdi
xor r8d, r8d
lea rdx, str.Target_label_does_not_exist.
mov rcx, r14
call fcn.1400571b0
xor eax, eax
jmp 0x14004c940
mov rax, qword [rbx + 0x10]
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rax
jmp case.0x14004c996.109
lea r9, [0x1400da7a4]
xor r8d, r8d
lea rdx, str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov rcx, r14
call fcn.1400571b0
xor eax, eax
jmp 0x14004c940
mov r9, qword [0x140115e60]
xor r8d, r8d
lea rdx, str.Parameter_3_invalid.
mov rcx, qword [rsp + 0x60]
call fcn.1400571b0
jmp 0x14004c940
mov rax, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rax
mov eax, r13d
jmp 0x14004c940
mov r9, qword [0x140115e58]
xor r8d, r8d
lea rdx, str.Parameter_2_invalid.
mov rcx, rbx
call fcn.1400571b0
jmp 0x14004c940
test rbx, rbx
je 0x140051cc2
cmp dword [rbx + 0x10], 6
jne 0x140051ca6
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140051cb5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, SafeArrayAllocDescriptor
mov rcx, rbx
call fcn.1400d6c90
test edi, 0xfffffff7
je case.0x14004c996.109
lea r9, [0x1400da7a4]
xor r8d, r8d
lea rdx, str.Jumps_cannot_exit_a_FINALLY_block.
mov rcx, qword [0x140117680]
call fcn.1400571b0
jmp 0x14004c940
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rcx
mov eax, 1
jmp 0x14004c940
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rcx
jmp 0x14004c940
test r12, r12
je 0x140051d79
cmp dword [r12 + 0x10], 0
jne 0x140051d79
mov rcx, qword [0x140115db0]
test rcx, rcx
je 0x140051d69
cmp byte [rcx + 0x23], 0
jne 0x140051d32
mov rax, qword [rcx + 0x10]
jmp 0x140051d35
mov rax, rcx
test byte [rax + 0x21], 2
je 0x140051d69
mov rdx, r12
call fcn.140007530
cmp dword [r12 + 0x10], 6
jne 0x140051d79
mov rcx, qword [r12]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_htonl]
cmp dword [rbp + 0x9d8], 1
mov eax, 7
cmovne edi, eax
jmp case.0x14004c996.109
mov dword [r12 + 0x10], ebx
mov rax, qword [0x140115e50]
mov qword [r12], rax
cmp dword [rbp + 0x9d8], 1
mov eax, 7
cmovne edi, eax
jmp case.0x14004c996.109
mov rax, qword [r14 + 0x28]
test rax, rax
je 0x140051bea
mov rdx, qword [rbp - 0x78]
mov qword [rdx], rax
jmp case.0x14004c996.109
cmp byte [r14 + 1], 0
jne 0x140051dcb
lea r9, [0x1400da7a4]
xor r8d, r8d
lea rdx, str.An_exception_was_thrown.
mov rcx, r14
call fcn.140056cc0
jmp 0x14004c940
mov ecx, SafeArrayAllocDescriptor
call fcn.1400d6cc4
mov rbx, rax
mov qword [rbp + 0x9d0], rax
mov rcx, qword [0x140114ad8]
mov qword [rbp - 0x10], rcx
mov rcx, qword [0x140114ad0]
mov qword [rbp + 8], rcx
xor esi, esi
mov qword [0x140114ad8], rsi
mov qword [0x140114ad0], rsi
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
mov r8, rbx
xor edx, edx
mov rcx, r14
call fcn.14008f920
mov edi, eax
mov rcx, qword [rbp - 0x10]
cmp eax, 1
jne 0x140051e4a
cmp dword [rbx + 0x10], esi
jne 0x140051e4a
cmp qword [rbx], rcx
jne 0x140051e4a
mov qword [rbx + 0x18], rcx
cmp qword [rbp + 8], 0x400000
jbe 0x140051ea8
dec dword [0x140114acc]
jmp 0x140051ea8
test rcx, rcx
je 0x140051e8d
mov rax, qword [0x140114ad8]
test rax, rax
je 0x140051e7b
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x10]
cmp qword [0x140114ad0], 0x400000
jbe 0x140051e7b
dec dword [0x140114acc]
mov qword [0x140114ad8], rcx
mov rax, qword [rbp + 8]
mov qword [0x140114ad0], rax
cmp edi, 1
je 0x140051ea4
mov edx, SafeArrayAllocDescriptor
mov rcx, rbx
call fcn.1400d6c90
jmp case.0x14004c996.109
mov qword [rbx + 0x18], rsi
mov qword [r15 + 0x148], rbx
test byte [r15 + 0x140], 2
jne 0x140051c09
mov rcx, r14
call fcn.1400578f0
xor eax, eax
jmp 0x14004c940
cmp byte [0x140113a67], 1
je 0x140051f05
cmp word [0x140114a8c], 0
jne 0x140051f05
cmp dword [0x140114a70], 0
jne 0x140051f05
cmp qword [0x140113a80], 0
jne 0x140051f05
cmp qword [0x140113a78], 0
jne 0x140051f05
cmp byte [0x140113a65], 0
je case.0x14004c996.113
mov eax, 8
jmp 0x14004c940
xor edx, edx
mov rcx, r14
call fcn.140048130
mov r8, rax
mov edx, 6
lea rcx, [0x140116fb0]
call fcn.140035eb0
jmp 0x14004c940
cmp dword [rbp + 0x9d8], 2
je case.0x14004c996.109
lea r9, [0x1400da7a4]
xor r8d, r8d
lea rdx, str.A__return__must_be_encountered_prior_to_this___.
mov rcx, r14
call fcn.1400571b0
jmp 0x14004c940
xor eax, eax
mov r13d, eax
mov eax, r13d
jmp 0x14004c940