Function at 0x100862a4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4f8
mov qword [rsp + 0x3d0], 0xfffffffffffffffe
mov r14, r9
mov rdi, rdx
mov r12, qword [rsp + 0x580]
mov rax, qword [r12 + 0x20]
mov ecx, 1
xor esi, esi
cmp rax, rsi
cmove rax, rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x98], rsi
mov rbx, qword [rsp + 0x578]
mov rax, qword [rbx]
lea r8, [rsp + 0x98]
lea rdx, [0x10147f40]
mov rcx, rbx
call qword [rax]
mov qword [rsp + 0xa0], rsi
mov rax, qword [rbx]
lea r8, [rsp + 0xa0]
lea rdx, [0x10147fb0]
mov rcx, rbx
call qword [rax]
mov r11, qword [rsp + 0x550]
xor ecx, ecx
cmp r11, rcx
je 0x1008635e
mov r9, qword [r11 + 0x168]
jmp 0x10086361
mov r9, rcx
cmp r9, rcx
jbe 0x100863c5
cmp byte [r12 + 0x32], cl
jne 0x100863c5
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rdx, qword [rsp + 0x570]
mov rcx, rdi
call fcn.10085240
mov ebx, eax
xor ecx, ecx
cmp eax, ecx
je 0x100863bd
mov rcx, qword [rsp + 0xa0]
xor edi, edi
cmp rcx, rdi
je 0x100863a3
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x100863b6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x1008acde
mov r11, qword [rsp + 0x550]
mov rsi, rcx
mov qword [rsp + 0x158], rcx
mov r10, rcx
mov qword [rsp + 0x160], rcx
mov r15, rcx
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0xa8], cl
mov rdi, rcx
mov qword [rsp + 0x130], rcx
mov dword [rsp + 0x138], ecx
mov dword [rsp + 0x13c], ecx
mov rbp, rcx
mov qword [rsp + 0xb0], rcx
mov r13d, ecx
mov dword [rsp + 0xb8], ecx
mov dword [rsp + 0xbc], ecx
mov bl, cl
mov byte [rsp + 0x91], cl
mov al, byte [r12 + 0x10]
mov byte [rsp + 0x90], al
cmp al, cl
je 0x100864cc
mov rax, qword [r12]
mov r8d, ecx
mov r9d, dword [rax + 8]
cmp r9d, ecx
jbe 0x100864cc
mov rdx, qword [rax]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov eax, 0xffffffff
cmp rcx, rax
ja 0x100864b1
mov eax, 0x3030205
cmp ecx, eax
ja 0x10086491
cmp ecx, eax
je 0x100864bf
sub ecx, 3
je 0x100864bf
sub ecx, 0x202ff
je 0x100864bf
sub ecx, 2
je 0x100864bf
sub ecx, 0x300fdff
je 0x100864bf
cmp ecx, 0x18
je 0x100864bf
jmp 0x100864b1
cmp ecx, 0x3030401
je 0x100864bf
cmp ecx, 0x3030501
je 0x100864bf
cmp ecx, 0x3030701
je 0x100864bf
cmp ecx, 0x3030805
je 0x100864bf
inc r8d
add rdx, 8
cmp r8d, r9d
jae 0x100864ca
jmp 0x10086452
xor ecx, ecx
mov byte [rsp + 0x90], cl
jmp 0x100864cc
xor ecx, ecx
cmp r11, rcx
je 0x10086aea
mov ebx, dword [r11 + 0x90]
xor ecx, ecx
call sub.msvcrt.dll_free
xor r12d, r12d
mov qword [rsp + 0x158], r12
mov rcx, rbx
shl rcx, 2
call fcn.10003f74
mov rsi, rax
mov qword [rsp + 0x158], rax
mov ecx, r12d
mov r11, qword [rsp + 0x550]
cmp dword [r11 + 0x90], r12d
jbe 0x10086536
lea r9d, [r12 + 1]
mov dword [rax], 0xffffffff
add ecx, r9d
add rax, 4
cmp ecx, dword [r11 + 0x90]
jb 0x1008651e
jmp 0x1008653c
mov r9d, 1
xor ecx, ecx
mov edx, ecx
cmp dword [r14 + 8], ecx
jbe 0x10086569
mov r8, rcx
mov rax, qword [r14]
mov rcx, qword [r8 + rax]
cmp dword [rcx], 0xffffffff
je 0x1008655a
mov eax, dword [rcx]
mov dword [rsi + rax*4], edx
add edx, r9d
add r8, 8
cmp edx, dword [r14 + 8]
jb 0x10086549
xor ecx, ecx
mov r14d, ecx
mov dword [rsp + 0xc0], ecx
mov r12, rcx
mov qword [rsp + 0x150], rcx
cmp dword [r11 + 4], ecx
jbe 0x10086acb
mov r10d, ecx
mov ebx, ecx
mov rax, qword [r11 + 0x30]
mov edi, dword [rax + r12*4]
mov r15, rcx
mov rax, qword [r11 + 0x198]
movsxd r8, dword [rax + r12*4]
mov rax, r8
cmp edi, ecx
jbe 0x100869de
mov rdx, r8
shl rdx, 4
lea r9, [rsi + r8*4]
cmp r8d, dword [r11 + 0x90]
jae 0x10086a32
mov r11, qword [r11 + 0x88]
cmp byte [rdx + r11 + 0xc], cl
je 0x10086606
mov eax, 1
add r10d, eax
cmp dword [r9], ecx
jl 0x10086606
mov ecx, dword [r9]
mov rax, qword [rsp + 0x558]
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
xor eax, eax
cmp byte [rcx + 0x3c], al
jne 0x10086604
inc ebx
add r15, qword [rdx + r11]
xor ecx, ecx
jmp 0x10086606
xor ecx, ecx
inc r8d
add rdx, 0x10
add r9, 4
cmp r10d, edi
mov r11, qword [rsp + 0x550]
jb 0x100865b9
cmp ebx, ecx
je 0x100869d0
mov dword [rsp + 0x168], r14d
mov dword [rsp + 0x16c], ebx
mov qword [rsp + 0x1a8], rcx
mov dword [rsp + 0x1b0], ecx
mov qword [rsp + 0x1b8], rcx
mov dword [rsp + 0x1c0], ecx
mov qword [rsp + 0x1c8], rcx
mov dword [rsp + 0x1d0], ecx
lea r8, [rsp + 0x1a8]
mov edx, r14d
mov r14, r11
mov rcx, r11
call fcn.1007ecf8
mov r11, qword [r14 + 0x50]
movzx r10d, byte [r12 + r11]
mov dword [rsp + 0x1d8], r10d
xor r11d, r11d
mov ecx, r11d
mov r9, qword [rsp + 0x1a8]
mov edx, dword [rsp + 0x1b0]
cmp edx, r11d
jbe 0x100866c5
mov rax, r9
lea r8d, [r11 + 1]
cmp qword [rax], 0x6f10701
je 0x100866c0
add ecx, r8d
add rax, 0x20
cmp ecx, edx
jb 0x100866aa
jmp 0x100866c5
mov r14b, r8b
jmp 0x100866c8
mov r14b, r11b
cmp ebx, edi
sete dil
mov byte [rsp + 0xac], dil
cmp byte [rsp + 0x90], r11b
jne 0x100866ef
cmp dil, r11b
jne 0x100866ef
mov r8b, r11b
mov ebx, 1
jmp 0x100866f7
mov ebx, 1
mov r8b, bl
mov dword [rsp + 0x140], r11d
mov dword [rsp + 0x144], r11d
mov ecx, r11d
cmp edx, r11d
jbe 0x1008672b
mov rax, r9
cmp qword [rax], 0x6f10701
je 0x10086727
add ecx, ebx
add rax, 0x20
cmp ecx, edx
jb 0x10086712
jmp 0x1008672b
mov al, bl
jmp 0x1008672e
mov al, r11b
mov byte [rsp + 0x148], al
cmp r8b, r11b
je 0x10086817
mov rcx, r10
shl rcx, 5
add rcx, r9
mov rax, qword [rcx]
cmp rax, 3
jne 0x1008677b
cmp qword [rcx + 0x10], rbx
jne 0x10086817
mov rax, qword [rcx + 8]
movzx ecx, byte [rax]
add ecx, ebx
mov dword [rsp + 0x144], ecx
mov dword [rsp + 0x140], 3
jmp 0x10086817
mov edx, 0x3030103
sub rax, rdx
je 0x100867b3
sub rax, 0x18
je 0x100867b3
sub rax, 0xea
je 0x100867b3
sub rax, 0x1fc
je 0x100867b3
sub rax, 0x100
je 0x100867b3
sub rax, 0x200
je 0x100867b3
cmp rax, 0x104
jne 0x10086817
mov ecx, dword [rcx]
cmp ecx, 0x303011b
cmove ecx, edx
mov dword [rsp + 0x140], ecx
cmp ecx, 0x3030401
jne 0x100867da
mov dword [rsp + 0x144], 0x10
jmp 0x10086817
cmp ecx, 0x3030501
je 0x1008680c
cmp ecx, 0x3030205
je 0x1008680c
cmp ecx, 0x3030805
je 0x1008680c
mov eax, r11d
cmp ecx, 0x3030701
mov ecx, 2
cmove eax, ecx
mov dword [rsp + 0x144], eax
jmp 0x10086817
mov dword [rsp + 0x144], 4
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x130]
call fcn.10085698
mov ebx, eax
cmp eax, r13d
jb 0x100868bb
xor edi, edi
lea r12d, [rdi + 1]
lea rcx, [rsp + 0xb0]
call fcn.100034ac
mov ecx, 0x20
call fcn.10003f74
mov r11, rax
cmp rax, rdi
je 0x10086871
mov qword [rax], rdi
mov dword [rax + 8], edi
mov dword [rax + 0xc], edi
mov qword [rax + 0x10], rdi
mov dword [rax + 0x18], edi
mov dword [rax + 0x1c], edi
jmp 0x10086874
mov r11, rdi
mov r13d, dword [rsp + 0xb8]
mov rax, r13
add r13d, r12d
mov dword [rsp + 0xb8], r13d
mov rsi, qword [rsp + 0xb0]
mov qword [rsi + rax*8], r11
cmp ebx, r13d
jae 0x1008683d
mov rsi, qword [rsp + 0x158]
mov rbp, qword [rsp + 0xb0]
mov r12, qword [rsp + 0x150]
mov dil, byte [rsp + 0xac]
mov rbx, qword [rbp + rbx*8]
lea rcx, [rbx + 0x10]
call fcn.100034ac
mov ecx, dword [rbx + 0x18]
lea eax, [rcx + 1]
mov dword [rbx + 0x18], eax
mov rdx, rcx
mov rcx, qword [rbx + 0x10]
mov rax, qword [rsp + 0x168]
mov qword [rcx + rdx*8], rax
xor ebx, ebx
cmp dil, bl
je 0x10086917
mov rax, qword [rsp + 0x550]
mov r8, qword [rax + 8]
mov rcx, qword [rax + 0x48]
mov eax, dword [rcx + r12*4]
mov ecx, dword [rcx + r12*4 + 4]
mov rdx, qword [r8 + rcx*8]
sub rdx, qword [r8 + rax*8]
add qword [rsp + 0x160], rdx
jmp 0x10086959
mov ecx, 1
mov byte [rsp + 0x91], cl
add qword [rsp + 0x160], r15
mov rax, qword [rsp + 0x1a0]
cmp rax, r15
cmovb rax, r15
mov qword [rsp + 0x1a0], rax
mov eax, dword [rsp + 0xa8]
movzx eax, al
cmp r14b, bl
cmovne eax, ecx
mov dword [rsp + 0xa8], eax
mov rcx, qword [rsp + 0x1c8]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x1b8]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x1a8]
cmp rcx, rbx
je 0x100869b8
lea rbx, [rcx - 8]
lea r9, [fcn.100d11c8]
mov r8d, dword [rbx]
mov edx, 0x20
call fcn.10130b60
mov rcx, rbx
call sub.msvcrt.dll_free
mov r14d, dword [rsp + 0xc0]
mov r11, qword [rsp + 0x550]
xor ecx, ecx
lea r9d, [rcx + 1]
jmp 0x100869de
mov r14d, dword [rsp + 0xc0]
mov r11, qword [rsp + 0x550]
xor ecx, ecx
lea r9d, [rcx + 1]
jmp 0x100869de
mov r11, qword [rsp + 0x550]
mov r9d, 1
add r14d, r9d
mov dword [rsp + 0xc0], r14d
add r12, r9
mov qword [rsp + 0x150], r12
cmp r14d, dword [r11 + 4]
jb 0x10086588
mov rdi, qword [rsp + 0x130]
mov r15, qword [rsp + 0x1a0]
mov bl, byte [rsp + 0x91]
mov r12, qword [rsp + 0x580]
mov r14, qword [rsp + 0x558]
mov r10, qword [rsp + 0x160]
jmp 0x10086aea
movsxd rax, r13d
cmp r13d, ecx
je 0x10086a78
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rcx
je 0x10086a73
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
xor ecx, ecx
mov eax, 0xffffffff
cmp r13d, ecx
jne 0x10086a44
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
xor ebx, ebx
cmp rcx, rbx
je 0x10086aae
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbx
je 0x10086ac1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
mov bl, byte [rsp + 0x91]
mov r12, qword [rsp + 0x580]
mov r14, qword [rsp + 0x558]
mov r10, qword [rsp + 0x160]
mov rax, rcx
mov qword [rsp + 0x1f8], rcx
mov edx, 1
cmp qword [rsp + 0x290], rdx
jbe 0x10086b10
cmp qword [r12 + 0x28], rcx
je 0x10086b10
mov r9b, dl
jmp 0x10086b13
mov r9b, cl
mov r8d, ecx
cmp dword [r14 + 8], ecx
jbe 0x10086b74
mov rdx, qword [r14]
xor r11d, r11d
lea esi, [r11 + 1]
mov rcx, qword [rdx]
cmp byte [rcx + 0x3c], r11b
je 0x10086b57
mov rcx, qword [rcx + 0x20]
add r10, rcx
cmp r9b, r11b
je 0x10086b48
add rax, rcx
mov qword [rsp + 0x1f8], rax
jmp 0x10086b57
cmp rax, rcx
cmovb rax, rcx
mov qword [rsp + 0x1f8], rax
add r8d, esi
add rdx, 8
cmp r8d, dword [r14 + 8]
jb 0x10086b26
mov qword [rsp + 0x160], r10
mov rsi, qword [rsp + 0x158]
cmp rax, r15
cmovb rax, r15
mov qword [rsp + 0x1f8], rax
mov r15, qword [rsp + 0x578]
mov rax, qword [r15]
mov rdx, r10
mov rcx, r15
call qword [rax + 0x18]
mov r14d, eax
xor eax, eax
cmp r14d, eax
je 0x10086c37
movsxd rax, r13d
xor r15d, r15d
cmp r13d, r15d
je 0x10086bed
lea r12, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r12, 8
mov rbx, qword [r12]
cmp rbx, r15
je 0x10086be8
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x10086bba
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x10086c1c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x10086c2f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r14d
jmp 0x1008acde
mov ecx, 0x48
call fcn.10003f74
mov qword [rsp + 0x1e0], rax
xor ecx, ecx
cmp rax, rcx
je 0x10086c67
mov rcx, rax
call fcn.1000b8fc
mov r14, rax
mov qword [rsp + 0x178], rax
xor ecx, ecx
jmp 0x10086c72
mov r14, rcx
mov qword [rsp + 0x178], rcx
mov qword [rsp + 0x3d8], r14
cmp r14, rcx
je 0x10086c89
mov rax, qword [r14]
mov rcx, r14
call qword [rax + VariantCopy]
nop
mov r8b, 1
mov rdx, r15
mov rcx, r14
call fcn.1000b7f0
xor eax, eax
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rax
mov dl, byte [r12 + 0x33]
lea rcx, [rsp + 0x2b0]
call fcn.10085854
nop
xor edx, edx
cmp byte [r12 + 0x33], dl
je 0x10086dd0
cmp bl, dl
je 0x10086dd0
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x3b0], rax
lea rcx, [rsp + 0x2b0]
call fcn.1000c8c4
xor edx, edx
cmp eax, edx
je 0x10086dd0
movzx ebx, ax
or ebx, 0x80070000
cmp eax, edx
cmovle ebx, eax
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
xor r15d, r15d
cmp r14, r15
je 0x10086d41
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x10086d87
lea r14, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r14, 8
mov r12, qword [r14]
cmp r12, r15
je 0x10086d82
mov rcx, qword [r12 + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [r12]
call sub.msvcrt.dll_free
mov rcx, r12
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x10086d53
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x10086db6
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x10086dc9
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebx
jmp 0x1008acde
mov rbx, rdx
mov qword [rsp + 0x1a8], rdx
mov r15, rdx
mov qword [rsp + 0x1b0], rdx
mov qword [rsp + 0x1b8], rdx
mov r8d, 1
mov byte [rsp + 0x1c0], r8b
mov byte [rsp + 0x1c1], dl
mov byte [rsp + 0x1c2], dl
cmp dword [r12 + 0x14], edx
jne 0x10086e28
mov byte [rsp + 0x1c0], dl
mov byte [rsp + 0x1c1], dl
mov byte [rsp + 0x1c2], dl
jmp 0x10086e7b
mov rbx, qword [rsp + 0x98]
cmp rbx, rdx
je 0x10086e44
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
xor edx, edx
lea r8d, [rdx + 1]
mov qword [rsp + 0x1a8], rbx
mov ecx, dword [r12 + 0x14]
cmp ecx, edx
jle 0x10086e7b
mov byte [rsp + 0x1c0], r8b
cmp ecx, 7
jl 0x10086e7b
mov byte [rsp + 0x1c1], r8b
movzx eax, dl
cmp ecx, 9
cmovge eax, r8d
mov byte [rsp + 0x1c2], al
mov rax, qword [r12]
mov qword [rsp + 0x208], rax
mov r12d, edx
mov rax, qword [rsp + 0x558]
cmp dword [rax + 8], edx
jbe 0x10087120
mov rdi, rdx
mov qword [rsp + 0x168], rdx
mov rax, qword [rax]
mov r8, qword [rdi + rax]
cmp byte [r8 + 0x3c], dl
je 0x10086ff3
cmp byte [r8 + 0x3f], dl
jne 0x10086ff3
cmp byte [r8 + 0x3e], dl
jne 0x10086ff3
cmp qword [r8 + 0x20], rdx
je 0x10086ff3
mov dword [rsp + 0x190], edx
mov dword [rsp + 0x194], edx
mov byte [rsp + 0x198], dl
cmp byte [rsp + 0x90], dl
je 0x10086f19
lea r9, [rsp + 0x190]
mov edx, r12d
lea rcx, [rsp + 0x1a8]
call fcn.10084354
mov r15d, eax
xor eax, eax
cmp r15d, eax
jne 0x10087031
mov rax, qword [rsp + 0x208]
mov al, byte [rax + 0x39]
mov byte [rsp + 0x198], al
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x130]
call fcn.10085698
mov ebx, eax
cmp eax, r13d
jb 0x10086fd4
xor r14d, r14d
lea edi, [r14 + 1]
lea rcx, [rsp + 0xb0]
call fcn.100034ac
mov ecx, 0x20
call fcn.10003f74
mov r11, rax
cmp rax, r14
je 0x10086f8a
mov qword [rax], r14
mov dword [rax + 8], r14d
mov dword [rax + 0xc], r14d
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r14d
mov dword [rax + 0x1c], r14d
jmp 0x10086f8d
mov r11, r14
mov r13d, dword [rsp + 0xb8]
mov rax, r13
add r13d, edi
mov dword [rsp + 0xb8], r13d
mov rsi, qword [rsp + 0xb0]
mov qword [rsi + rax*8], r11
cmp ebx, r13d
jae 0x10086f52
mov rsi, qword [rsp + 0x158]
mov r14, qword [rsp + 0x178]
mov rbp, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0x168]
mov rbx, qword [rbp + rbx*8]
mov rcx, rbx
call fcn.10026690
mov ecx, dword [rbx + 8]
lea eax, [rcx + 1]
mov dword [rbx + 8], eax
mov rax, qword [rbx]
mov dword [rax + rcx*4], r12d
xor edx, edx
inc r12d
add rdi, 8
mov qword [rsp + 0x168], rdi
mov rax, qword [rsp + 0x558]
cmp r12d, dword [rax + 8]
jb 0x10086ea6
mov r15, qword [rsp + 0x1b0]
mov rbx, qword [rsp + 0x1a8]
mov rdi, qword [rsp + 0x130]
jmp 0x10087120
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x1a8]
xor r12d, r12d
cmp rcx, r12
je 0x10087055
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
cmp r14, r12
je 0x1008708d
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x100870d1
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x100870cc
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x1008709f
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x10087105
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x10087118
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x1008acde
mov rcx, r15
call sub.msvcrt.dll_free
xor r15d, r15d
cmp rbx, r15
je 0x10087139
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov qword [rsp + 0x228], r15
mov rbx, r15
mov qword [rsp + 0x1e8], r15
cmp byte [rsp + 0xa8], r15b
je 0x1008742d
mov ecx, 0x20
call fcn.10003f74
mov r12, rax
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x1e0], rax
cmp rax, r15
je 0x10087197
mov dword [rax + 8], r15d
lea rax, [0x10149810]
mov qword [r12], rax
lea rcx, [r12 + 0x10]
call fcn.10002780
jmp 0x100871a2
mov r12, r15
mov qword [rsp + 0x228], r15
cmp r12, r15
je 0x100871b1
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rbx, r12
mov qword [rsp + 0x1e8], r12
cmp r12, r15
je 0x100871cb
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0x3a8]
cmp rcx, r15
je 0x100871de
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x3a8], r12
mov rax, qword [rsp + 0x580]
mov rdx, qword [rax]
cmp byte [rdx + 0x39], r15b
je 0x1008720a
add rdx, 0x40
lea rcx, [r12 + 0x10]
call fcn.1000294c
jmp 0x1008742d
mov rcx, qword [rsp + 0x588]
cmp rcx, r15
jne 0x100872f4
cmp r12, r15
je 0x1008722b
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
cmp r14, r15
je 0x10087263
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x100872a8
lea r12, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r12, 8
mov rbx, qword [r12]
cmp rbx, r15
je 0x100872a3
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x10087275
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x100872d7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x100872ea
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004001
jmp 0x1008acde
mov qword [rsp + 0xe8], r15
mov rax, qword [rcx]
lea rdx, [rsp + 0xe8]
call qword [rax + 0x18]
mov r15d, eax
xor ecx, ecx
cmp eax, ecx
je 0x10087402
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
xor ebx, ebx
cmp r12, rbx
je 0x10087338
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
cmp r14, rbx
je 0x10087370
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100873b8
lea r12, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r12, 8
mov rbx, qword [r12]
cmp rbx, r14
je 0x100873b3
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x10087385
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x100873e7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x100873fa
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x1008acde
mov rax, qword [rsp + 0xe8]
cmp rax, rcx
je 0x10087424
lea rcx, [r12 + 0x10]
mov rdx, rax
call fcn.100028e4
mov rax, qword [rsp + 0xe8]
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor r8d, r8d
mov rdx, qword [rsp + 0x570]
mov r12, qword [rsp + 0x560]
mov rcx, r12
call fcn.10081d7c
mov r15d, eax
xor eax, eax
cmp r15d, eax
je 0x10087531
cmp rbx, rax
je 0x10087465
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
xor eax, eax
cmp r14, rax
je 0x1008749f
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100874e7
lea r12, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r12, 8
mov rbx, qword [r12]
cmp rbx, r14
je 0x100874e2
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100874b4
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10087516
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10087529
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x1008acde
mov rcx, r12
call fcn.10081900
mov r15d, eax
xor r8d, r8d
cmp eax, r8d
je 0x10087623
cmp rbx, r8
je 0x10087557
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
xor eax, eax
cmp r14, rax
je 0x10087591
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100875d9
lea r12, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r12, 8
mov rbx, qword [r12]
cmp rbx, r14
je 0x100875d4
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100875a6
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10087608
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x1008761b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x1008acde
mov r12, r8
mov qword [rsp + 0x180], r8
mov edi, r8d
mov dword [rsp + 0x188], r8d
mov dword [rsp + 0x18c], r8d
mov r15d, r8d
mov rdx, qword [rsp + 0x558]
cmp dword [rdx + 8], r8d
jbe 0x100876fb
mov rsi, r8
mov r14, qword [rsp + 0x550]
mov ebp, 1
mov rax, qword [rdx]
mov rcx, qword [rsi + rax]
cmp byte [rcx + 0x3c], r8b
je 0x10087687
cmp byte [rcx + 0x3f], r8b
jne 0x1008769f
cmp byte [rcx + 0x3e], r8b
jne 0x1008769f
cmp qword [rcx + 0x20], r8
jne 0x100876d6
jmp 0x1008769f
cmp dword [rcx], 0xffffffff
je 0x1008769f
mov ecx, dword [rcx]
add rcx, rcx
mov rax, qword [r14 + 0x88]
cmp byte [rax + rcx*8 + 0xc], r8b
jne 0x100876d6
lea rcx, [rsp + 0x180]
call fcn.10026690
mov edi, dword [rsp + 0x188]
mov rax, rdi
add edi, ebp
mov dword [rsp + 0x188], edi
mov r12, qword [rsp + 0x180]
mov dword [r12 + rax*4], r15d
mov rdx, qword [rsp + 0x558]
xor r8d, r8d
add r15d, ebp
add rsi, 8
cmp r15d, dword [rdx + 8]
jb 0x10087666
mov rsi, qword [rsp + 0x158]
mov r14, qword [rsp + 0x178]
mov rbp, qword [rsp + 0xb0]
mov r8, rdx
lea rdx, [0x10085418]
lea rcx, [rsp + 0x180]
call fcn.10084e94
xor eax, eax
cmp edi, eax
jbe 0x10087829
mov r15, r12
mov esi, edi
mov rbx, qword [rsp + 0x568]
mov rbp, qword [rsp + 0x550]
mov r13, qword [rsp + 0x558]
xor r14d, r14d
lea r12d, [rax + 1]
mov ecx, dword [r15]
mov rax, qword [r13]
mov rdi, qword [rax + rcx*8]
lea rcx, [rsp + 0x190]
call fcn.10002780
nop
cmp byte [rdi + 0x3d], r14b
je 0x10087792
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x218]
mov rcx, rdi
call fcn.10083b3c
mov byte [rsp + 0x226], r14b
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x190]
call fcn.1000294c
jmp 0x100877be
lea r9, [rsp + 0x1a8]
lea r8, [rsp + 0x218]
mov edx, dword [rdi]
mov rcx, rbp
call fcn.10084c84
lea r8, [rsp + 0x190]
mov edx, dword [rdi]
mov rcx, rbp
call fcn.1007e1a8
lea r9, [rsp + 0x190]
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x218]
mov rcx, rbx
call fcn.100828ec
nop
mov rcx, qword [rsp + 0x190]
call sub.msvcrt.dll_free
add r15, 4
sub rsi, r12
jne 0x10087740
mov rbx, qword [rsp + 0x1e8]
mov rsi, qword [rsp + 0x158]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x178]
mov rbp, qword [rsp + 0xb0]
mov r12, qword [rsp + 0x180]
mov rcx, r12
call sub.msvcrt.dll_free
xor r12d, r12d
mov qword [r14 + 0x28], r12
mov eax, r12d
mov edi, dword [rsp + 0x138]
cmp edi, r12d
jbe 0x10087866
mov r15, qword [rsp + 0x130]
lea rcx, [r15 + 0xc]
lea edx, [r12 + 1]
mov dword [rcx], eax
add eax, edx
add rcx, 0x10
cmp eax, edi
jb 0x10087858
jmp 0x1008786e
mov r15, qword [rsp + 0x130]
lea rcx, [rsp + 0x130]
call fcn.10084f10
mov dword [rsp + 0x200], r12d
mov rax, r12
mov qword [rsp + 0x208], r12
cmp edi, r12d
jbe 0x1008aae3
mov rdi, rax
shl rdi, 4
add rdi, r15
mov r12, qword [rsp + 0x580]
mov rdx, qword [r12]
lea rcx, [rsp + 0x240]
call fcn.100861b8
nop
xor eax, eax
cmp byte [r12 + 0x11], al
je 0x100878d0
cmp byte [r12 + 0x33], al
je 0x100878d0
mov r8b, 1
jmp 0x100878d3
mov r8b, al
mov rdx, rdi
lea rcx, [rsp + 0x240]
call fcn.10085f88
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x1008904f
xor r12d, r12d
cmp byte [rdi + 8], r12b
je 0x10087930
cmp byte [rsp + 0x279], r12b
jne 0x1008794c
mov rax, qword [rsp + 0x228]
cmp rax, r12
je 0x10087922
lea rdx, [rax + 0x10]
lea rcx, [rsp + 0x280]
call fcn.1000294c
mov eax, 1
mov byte [rsp + 0x279], al
jmp 0x1008794c
mov byte [rsp + 0x279], r12b
mov dword [rsp + 0x288], r12d
mov rax, qword [rsp + 0x280]
mov word [rax], r12w
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x3e0]
call fcn.10076d1c
nop
mov eax, dword [rdi + 0xc]
mov rax, qword [rbp + rax*8]
mov qword [rsp + 0x1f0], rax
mov dword [rsp + 0xe0], r12d
mov rdx, r12
mov qword [rsp + 0x150], r12
cmp dword [rax + 0x18], r12d
jbe 0x1008878b
mov r10, qword [rsp + 0x550]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1e0], rcx
mov r8d, dword [rcx + rdx*8]
mov dword [rsp + 0xc0], r8d
mov rax, qword [r10 + 0x30]
mov rbp, r8
mov qword [rsp + 0x118], r8
mov edi, dword [rax + r8*4]
mov dword [rsp + 0xc4], edi
cmp dword [rcx + rdx*8 + 4], edi
jne 0x10087c6c
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x10087a82
mov rax, qword [rcx]
mov edx, 2
lea r9d, [rdx + 1]
call qword [rax + 0x20]
mov r12d, eax
xor edi, edi
cmp eax, edi
jne 0x10089132
mov ecx, edi
mov r10, qword [rsp + 0x550]
mov rax, qword [r10 + 0x198]
movsxd rbp, dword [rax + rbp*4]
mov rdi, rbp
xor edx, edx
cmp dword [rsp + 0xc4], edx
jbe 0x10087a82
shl rdi, 4
mov rax, qword [r10 + 0x88]
cmp byte [rdi + rax + 0xc], dl
je 0x10087a73
mov edx, 1
add ecx, edx
mov dword [rsp + 0xc8], ecx
mov rcx, qword [rsp + 0x98]
mov rax, qword [rcx]
lea r9d, [rdx + 2]
mov r8d, ebp
call qword [rax + 0x20]
mov r12d, eax
xor edx, edx
cmp eax, edx
jne 0x10089235
mov ecx, dword [rsp + 0xc8]
mov r10, qword [rsp + 0x550]
inc ebp
add rdi, 0x10
cmp ecx, dword [rsp + 0xc4]
jb 0x10087a27
mov r8, qword [r10 + 8]
mov rdx, qword [r10 + 0x48]
mov ebp, dword [rsp + 0xc0]
lea eax, [rbp + 1]
mov qword [rsp + 0xd8], rax
mov ecx, dword [rdx + rax*4]
mov eax, dword [rdx + rbp*4]
mov rdi, qword [r8 + rcx*8]
sub rdi, qword [r8 + rax*8]
mov eax, dword [rdx + rbp*4]
mov r8, qword [r8 + rax*8]
add r8, qword [r10 + 0x178]
mov qword [rsp + 0x20], r14
mov r9, rdi
mov rax, qword [rsp + 0x560]
mov rdx, qword [rax + 0x80]
mov rcx, qword [rsp + 0x548]
call fcn.10085240
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x10089338
add qword [r14 + 0x28], rdi
mov rdi, qword [rsp + 0x568]
lea rcx, [rdi + 0x70]
call fcn.100034ac
mov ecx, 0x30
call fcn.10003f74
mov r12, rax
xor eax, eax
cmp r12, rax
je 0x10087b32
mov qword [r12], rax
mov dword [r12 + 8], eax
mov qword [r12 + 0x10], rax
mov dword [r12 + 0x18], eax
mov qword [r12 + 0x20], rax
mov dword [r12 + 0x28], eax
jmp 0x10087b35
mov r12, rax
mov ecx, dword [rdi + 0x78]
lea eax, [rcx + 1]
mov dword [rdi + 0x78], eax
mov rax, qword [rdi + 0x70]
mov qword [rax + rcx*8], r12
mov r8, r12
mov edx, ebp
mov rdi, qword [rsp + 0x550]
mov rcx, rdi
call fcn.1007ecf8
mov r11, qword [rdi + 0x48]
xor edx, edx
movsxd rcx, dword [r11 + rbp*4]
cmp dword [r12 + 0x28], edx
jbe 0x10087be3
mov rsi, qword [rsp + 0x568]
shl rcx, 3
mov r15d, edx
mov r14, rdi
lea r13d, [rdx + 1]
mov rax, qword [r14 + 8]
lea rbp, [rcx + 8]
mov rdi, qword [rax + rbp]
sub rdi, qword [rcx + rax]
lea rcx, [rsi + 0x40]
call fcn.100034ac
mov r11d, dword [rsi + 0x48]
lea eax, [r11 + 1]
mov dword [rsi + 0x48], eax
mov rax, qword [rsi + 0x40]
mov qword [rax + r11*8], rdi
add r15d, r13d
mov rcx, rbp
cmp r15d, dword [r12 + 0x28]
jb 0x10087b82
mov rsi, qword [rsp + 0x158]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x178]
mov r15, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x550]
mov rax, qword [rdi + 0x40]
mov rcx, qword [rsp + 0x118]
mov ebp, dword [rax + rcx*4]
mov rcx, qword [rsp + 0xd8]
mov eax, dword [rax + rcx*4]
cmp rbp, rax
jae 0x10088528
mov r12, qword [rsp + 0x568]
mov r15, rax
mov r14, qword [rsp + 0x550]
mov ebx, 1
mov rax, qword [r14 + 0x38]
mov rdi, qword [rax + rbp*8]
lea rcx, [r12 + 0x30]
call fcn.100034ac
mov r11d, dword [r12 + 0x38]
lea eax, [r11 + 1]
mov dword [r12 + 0x38], eax
mov rax, qword [r12 + 0x30]
mov qword [rax + r11*8], rdi
add rbp, rbx
cmp rbp, r15
jb 0x10087c1e
mov rbx, qword [rsp + 0x1e8]
mov r14, qword [rsp + 0x178]
mov r15, qword [rsp + 0x130]
jmp 0x10088528
mov qword [rsp + 0x120], r12
mov dword [rsp + 0x128], r12d
mov dword [rsp + 0x12c], r12d
mov edx, r12d
mov dword [rsp + 0xa8], r12d
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x10087ccb
mov rax, qword [rcx]
mov edx, 2
lea r9d, [rdx + 2]
call qword [rax + 0x20]
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x1008943b
mov edx, dword [rsp + 0xa8]
mov r10, qword [rsp + 0x550]
xor r12d, r12d
mov qword [rsp + 0xe8], r12
mov rax, qword [r10 + 0x198]
movsxd rcx, dword [rax + rbp*4]
cmp edi, r12d
jbe 0x10087dd7
mov rdi, rcx
shl rdi, 4
lea r12, [rsi + rcx*4]
mov ebx, dword [rsp + 0xc4]
mov r13, qword [rsp + 0x558]
xor r8d, r8d
lea r9d, [r8 + 1]
mov bpl, r8b
mov rax, qword [r10 + 0x88]
mov qword [rsp + 0xd8], rax
cmp byte [rdi + rax + 0xc], r8b
je 0x10087d49
add edx, r9d
mov dword [rsp + 0xa8], edx
cmp dword [r12], r8d
jl 0x10087d49
mov ecx, dword [r12]
mov rax, qword [r13]
mov rdx, qword [rax + rcx*8]
movzx ebp, r8b
cmp byte [rdx + 0x3c], r8b
cmove ebp, r9d
lea rcx, [rsp + 0x120]
call fcn.100d66ec
mov r11d, dword [rsp + 0x128]
mov rcx, r11
mov r9d, 1
add r11d, r9d
mov dword [rsp + 0x128], r11d
mov rax, qword [rsp + 0x120]
mov byte [rcx + rax], bpl
xor r8d, r8d
cmp bpl, r8b
je 0x10087da5
mov rax, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe8]
add r8, qword [rdi + rax]
mov qword [rsp + 0xe8], r8
xor r8d, r8d
add rdi, 0x10
add r12, 4
mov edx, dword [rsp + 0xa8]
cmp edx, ebx
mov r10, qword [rsp + 0x550]
jb 0x10087d08
mov rbx, qword [rsp + 0x1e8]
mov r13d, dword [rsp + 0xb8]
xor r12d, r12d
mov rax, qword [rsp + 0x568]
mov eax, dword [rax + 0x48]
mov dword [rsp + 0xa8], eax
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0x170], r12
mov ecx, 0x38
call fcn.10003f74
mov rdi, rax
cmp rax, r12
je 0x10087e2a
mov dword [rax + 0x10], r12d
lea rax, [0x10149850]
mov qword [rdi], rax
lea rax, [0x10149830]
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], r12
jmp 0x10087e2d
mov rdi, r12
mov qword [rsp + 0x2a8], rdi
cmp rdi, r12
je 0x10087e44
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
nop
mov rax, qword [rsp + 0x580]
cmp byte [rax + 0x33], r12b
je 0x10087f68
mov rax, qword [rsp + 0x380]
lea rcx, [rax + 8]
neg rax
sbb rbp, rbp
and rbp, rcx
mov qword [rsp + 0xd8], rbp
mov qword [rsp + 0x210], r12
lea r8, [rsp + 0x210]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf0]
call fcn.1000bc64
lea rcx, [rsp + 0xf0]
call fcn.1000b998
mov r12d, eax
xor ebp, ebp
cmp eax, ebp
jne 0x1008954c
mov r12, qword [rsp + 0x380]
mov rbp, qword [rsp + 0x210]
xor eax, eax
cmp rbp, rax
je 0x10087ed5
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [r12 + 0x48]
cmp rcx, rax
je 0x10087ee5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r12 + 0x48], rbp
mov rbp, qword [rsp + 0x548]
xor r12d, r12d
cmp rbp, r12
je 0x10087f04
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0x378]
cmp rcx, r12
je 0x10087f17
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x378], rbp
mov rcx, qword [rsp + 0x550]
mov rax, qword [rcx + 0x178]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], rcx
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x3a0], eax
mov rcx, qword [rsp + 0x210]
cmp rcx, r12
je 0x1008813e
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1008813e
mov ecx, 0x60
call fcn.10003f74
mov rbp, rax
mov qword [rsp + 0x170], rax
mov qword [rsp + 0xd8], rax
cmp rax, r12
je 0x10087fb9
mov qword [rax + 0x30], r12
mov qword [rax + 0x38], r12
mov dword [rax + 0x40], r12d
lea rax, [0x10149890]
mov qword [rbp], rax
mov qword [rbp + 0x50], r12
mov dword [rbp + 0x58], r12d
mov ecx, 0x10000
call fcn.10003f74
mov qword [rbp + 0x48], rax
jmp 0x10087fc4
mov rbp, r12
mov qword [rsp + 0x170], r12
mov dword [rbp + 0x58], r12d
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0xd0]
cmp rcx, r12
je 0x10087fe5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xd0], rbp
add rbp, 8
mov qword [rsp + 0xd8], rbp
mov byte [rsp + 0x90], r12b
mov byte [rsp + 0xac], r12b
lea rcx, [rsp + 0x218]
call fcn.10002780
nop
mov qword [rsp + 0x1a0], r12
mov byte [rsp + 0x91], r12b
mov qword [rsp + 0x88], r12
mov eax, 1
mov dword [rsp + 0x80], eax
mov byte [rsp + 0x78], r12b
lea rax, [rsp + 0x218]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0xac]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rbx
lea rax, [rsp + 0x91]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x20], rax
mov r9, qword [rax + 0x178]
mov r8, qword [rsp + 0x548]
mov rdx, qword [rsp + 0x540]
lea rcx, [rsp + 0x2d8]
call fcn.10072470
mov r12d, eax
xor ebp, ebp
cmp eax, ebp
jne 0x10089695
mov rbp, qword [rsp + 0x1a0]
xor r12d, r12d
cmp rbp, r12
je 0x100897ec
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov r12, qword [rsp + 0x170]
mov rcx, qword [r12 + 0x50]
xor eax, eax
cmp rcx, rax
je 0x10088118
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
mov qword [r12 + 0x50], rbp
mov rcx, qword [rsp + 0x1a0]
cmp rcx, rax
je 0x10088131
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x218]
call sub.msvcrt.dll_free
mov r12, qword [rsp + 0xd8]
mov rax, qword [rsp + 0x550]
mov qword [r12 + 0x20], rax
mov rbp, qword [rsp + 0x98]
xor eax, eax
cmp rbp, rax
je 0x1008816e
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [r12 + 0x28]
cmp rcx, rax
je 0x10088180
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
mov qword [r12 + 0x28], rbp
mov rbp, qword [rsp + 0xa0]
cmp rbp, rax
je 0x1008819e
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [r12 + 0x30]
cmp rcx, rax
je 0x100881ae
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r12 + 0x30], rbp
mov rbp, qword [rsp + 0x550]
mov rax, qword [rbp + 0x198]
mov rcx, qword [rsp + 0x118]
mov eax, dword [rax + rcx*4]
mov dword [rsp + 0xc8], eax
mov dword [r12 + 0x18], eax
lea rax, [rsp + 0x120]
mov qword [r12 + 0x10], rax
xor eax, eax
mov dword [r12 + 0x1c], eax
mov byte [r12 + 1], al
mov rcx, r12
call fcn.100847b8
mov r12d, eax
xor ecx, ecx
cmp eax, ecx
jne 0x1008992b
mov qword [rdi + 0x30], rbp
mov rbp, qword [rsp + 0xd0]
mov eax, dword [rsp + 0xc8]
mov dword [rdi + 0x28], eax
lea rax, [rsp + 0x120]
mov qword [rdi + 0x20], rax
cmp rbp, rcx
je 0x10088238
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rdi + 0x18]
xor eax, eax
cmp rcx, rax
je 0x10088249
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x18], rbp
mov rax, qword [rsp + 0x580]
xor ebp, ebp
cmp byte [rax + 0x33], bpl
je 0x10088272
lea rcx, [rsp + 0x2b0]
call fcn.1000c924
cmp eax, ebp
jne 0x10089a5f
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x560]
mov r12, qword [rax + 0x80]
mov rbp, qword [rsp + 0x568]
lea rcx, [rbp + 0x70]
call fcn.100034ac
mov ecx, 0x30
call fcn.10003f74
mov r11, rax
xor eax, eax
cmp r11, rax
je 0x100882cf
mov qword [r11], rax
mov dword [r11 + 8], eax
mov qword [r11 + 0x10], rax
mov dword [r11 + 0x18], eax
mov qword [r11 + 0x20], rax
mov dword [r11 + 0x28], eax
jmp 0x100882d2
mov r11, rax
mov ecx, dword [rbp + 0x78]
lea eax, [rcx + 1]
mov dword [rbp + 0x78], eax
mov rax, qword [rbp + 0x70]
mov qword [rax + rcx*8], r11
mov rax, rbp
lea rcx, [rbp + 0x40]
add rax, 0x30
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r12
lea rcx, [rsp + 0x230]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r11
lea r9, [rsp + 0x1f8]
mov r8, rdi
mov rdx, qword [rsp + 0x540]
lea rcx, [rsp + 0x3e0]
call fcn.10075d60
mov r12d, eax
cmp eax, 0x20000002
je 0x10089ba0
mov rax, qword [rsp + 0x580]
xor r8d, r8d
cmp byte [rax + 0x33], r8b
je 0x10088442
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
xor ebp, ebp
mov rdi, rbp
mov qword [rsp + 0x2a8], rbp
mov rcx, qword [rsp + 0xd0]
cmp rcx, rbp
je 0x10088388
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xd0], rbp
mov rcx, qword [rsp + 0x2c0]
call fcn.10127890
xor r8d, r8d
cmp eax, r8d
jne 0x10089ccf
mov ebp, dword [rsp + 0x374]
lea r11d, [r8 + 1]
cmp ebp, r11d
je 0x100883bb
cmp byte [rsp + 0x370], r8b
je 0x10088418
mov rcx, qword [rsp + 0xa0]
cmp rcx, r8
je 0x1008840f
mov rax, qword [rsp + 0x550]
mov rdx, qword [rax + 0x198]
mov r10, qword [rcx]
mov eax, ebp
neg eax
sbb r9d, r9d
and r9d, 0xfffffffc
add r9d, 6
mov rax, qword [rsp + 0x118]
mov r8d, dword [rdx + rax*4]
mov edx, r11d
call qword [r10 + 0x28]
mov dword [rsp + 0xc8], eax
xor r8d, r8d
cmp eax, r8d
jne 0x10089e03
cmp ebp, r8d
jne 0x10089ed8
cmp ebp, r8d
jne 0x10089fab
cmp r12d, r8d
jne 0x1008a340
mov rdx, qword [rsp + 0xe8]
cmp qword [rsp + 0x110], rdx
jne 0x10089044
jmp 0x10088474
mov rax, qword [rsp + 0x170]
mov ebp, dword [rax + 0x58]
mov eax, 1
cmp ebp, eax
je 0x1008a07b
cmp ebp, r8d
jne 0x1008a266
cmp r12d, r8d
jne 0x1008a340
mov rdx, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0xd8]
mov rax, qword [rbp + 0x10]
mov ecx, dword [rbp + 0x1c]
sub ecx, dword [rax + 8]
neg ecx
sbb ebp, ebp
mov r12d, 0x80004005
and ebp, r12d
jne 0x1008a422
cmp qword [rsp + 0x230], rdx
jne 0x1008a503
cmp rdi, r8
je 0x100884b8
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r8d, r8d
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x100884cb
mov rax, qword [rcx]
call qword [rax + 0x10]
movsxd r8, dword [rsp + 0xa8]
mov rdx, r8
mov r9, qword [rsp + 0x568]
cmp r8d, dword [r9 + 0x48]
jae 0x1008850f
shl rdx, 3
mov r15d, 1
mov rax, qword [r9 + 0x40]
mov rcx, qword [rdx + rax]
add qword [r14 + 0x38], rcx
add r8d, r15d
add rdx, 8
cmp r8d, dword [r9 + 0x48]
jb 0x100884ee
mov r15, qword [rsp + 0x130]
mov rax, qword [rsp + 0x230]
add qword [r14 + 0x30], rax
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
mov rdi, qword [rsp + 0x568]
mov rax, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x150]
mov ebp, dword [rax + rcx*8 + 4]
lea rcx, [rdi + 0x20]
call fcn.10026690
mov ecx, dword [rdi + 0x28]
lea eax, [rcx + 1]
mov dword [rdi + 0x28], eax
mov rax, qword [rdi + 0x20]
mov dword [rax + rcx*4], ebp
xor r9d, r9d
mov r8d, r9d
mov r10, qword [rsp + 0x550]
mov rax, qword [r10 + 0x198]
mov rcx, qword [rsp + 0x118]
movsxd r12, dword [rax + rcx*4]
cmp dword [rsp + 0xc4], r9d
jbe 0x10088749
mov rbp, r12
shl rbp, 4
lea rdx, [rsi + r12*4]
mov qword [rsp + 0xd8], rdx
mov r15d, dword [rsp + 0xc4]
mov rbx, rdi
mov r13, qword [rsp + 0x558]
mov rax, qword [r10 + 0x88]
cmp byte [rax + rbp + 0xc], r9b
je 0x1008870d
inc r8d
mov dword [rsp + 0xc8], r8d
cmp dword [rdx], r9d
jl 0x1008870d
mov ecx, dword [rdx]
mov rax, qword [r13]
mov rdi, qword [rax + rcx*8]
cmp byte [rdi + 0x3c], r9b
jne 0x1008870d
lea rcx, [rsp + 0x298]
call fcn.10002780
nop
lea r9, [rsp + 0x1a8]
lea r8, [rsp + 0x3c0]
mov edx, r12d
mov rcx, qword [rsp + 0x550]
call fcn.10084c84
xor r14d, r14d
cmp byte [rdi + 0x3d], r14b
je 0x100886ac
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x1c8], eax
mov al, byte [rdi + 0x40]
mov byte [rsp + 0x1d0], al
mov rax, qword [rdi + 8]
mov qword [rsp + 0x1a8], rax
mov al, byte [rdi + 0x41]
mov byte [rsp + 0x1cc], al
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x1b0], rax
mov al, byte [rdi + 0x42]
mov byte [rsp + 0x1cd], al
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x1b8], rax
mov al, byte [rdi + 0x43]
mov byte [rsp + 0x1ce], al
mov al, byte [rdi + 0x3e]
mov byte [rsp + 0x1d1], al
mov byte [rsp + 0x1cf], r14b
mov al, byte [rdi + 0x3f]
mov byte [rsp + 0x3cd], al
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x298]
call fcn.1000294c
jmp 0x100886c4
lea r8, [rsp + 0x298]
mov edx, r12d
mov rcx, qword [rsp + 0x550]
call fcn.1007e1a8
lea r9, [rsp + 0x298]
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x3c0]
mov rcx, rbx
call fcn.100828ec
nop
mov rcx, qword [rsp + 0x298]
call sub.msvcrt.dll_free
mov rdx, qword [rsp + 0xd8]
mov r8d, dword [rsp + 0xc8]
mov r10, qword [rsp + 0x550]
xor r9d, r9d
inc r12d
add rbp, 0x10
add rdx, 4
mov qword [rsp + 0xd8], rdx
cmp r8d, r15d
jb 0x100885b2
mov rbx, qword [rsp + 0x1e8]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x178]
mov r15, qword [rsp + 0x130]
mov r9d, dword [rsp + 0xe0]
mov r8d, 1
add r9d, r8d
mov dword [rsp + 0xe0], r9d
mov rdx, qword [rsp + 0x150]
add rdx, r8
mov qword [rsp + 0x150], rdx
mov rax, qword [rsp + 0x1f0]
cmp r9d, dword [rax + 0x18]
lea r12d, [r8 - 1]
jb 0x10087997
mov edi, dword [rax + 8]
mov dword [rsp + 0xa8], edi
cmp edi, r12d
jne 0x100887ba
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
jmp 0x10088ffe
mov qword [rsp + 0x140], r12
mov dword [rsp + 0x148], r12d
mov dword [rsp + 0x14c], r12d
mov edx, edi
lea rcx, [rsp + 0x140]
call fcn.10085604
mov rax, qword [rsp + 0x580]
mov r12b, byte [rax + 0x31]
xor eax, eax
cmp edi, eax
jbe 0x10088889
mov rbp, rax
mov rdi, qword [rsp + 0x140]
mov r15d, dword [rsp + 0xa8]
mov rsi, qword [rsp + 0x1f0]
mov r13, qword [rsp + 0x558]
lea r14d, [rax + 1]
mov rdx, qword [rsi]
mov ecx, dword [rdx + rbp]
mov rax, qword [r13]
mov r9b, r12b
mov r8, qword [rax + rcx*8]
mov edx, dword [rdx + rbp]
lea rcx, [rsp + 0x1a8]
call fcn.100839b4
mov rcx, qword [rax]
mov qword [rdi], rcx
mov rcx, qword [rax + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rax + 0x10]
mov qword [rdi + 0x10], rax
add rbp, 4
add rdi, 0x18
sub r15, r14
jne 0x1008881e
mov rsi, qword [rsp + 0x158]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x178]
mov r15, qword [rsp + 0x130]
mov edi, dword [rsp + 0xa8]
mov byte [rsp + 0xe4], r12b
lea r8, [rsp + 0xe4]
lea rdx, [0x100841c8]
lea rcx, [rsp + 0x140]
call fcn.10084f80
mov ebp, edi
xor r8d, r8d
mov rdi, r8
mov qword [rsp + 0x1f0], r8
cmp rbp, r8
je 0x100888dc
mov rcx, rbp
shl rcx, 2
call fcn.10003f74
mov rdi, rax
mov qword [rsp + 0x1f0], rax
xor r8d, r8d
mov r12d, dword [rsp + 0xa8]
cmp r12d, r8d
jbe 0x10088911
mov rcx, rdi
mov rdx, qword [rsp + 0x140]
add rdx, 8
mov r9d, 1
mov eax, dword [rdx]
mov dword [rcx], eax
add rdx, 0x18
add rcx, 4
sub rbp, r9
jne 0x100888fe
jmp 0x10088917
mov r9d, 1
mov eax, r8d
mov dword [rsp + 0xc0], r8d
mov rbp, r8
mov qword [rsp + 0xe8], r8
cmp r12d, r8d
jbe 0x10088fcc
jmp 0x1008893f
xor r8d, r8d
lea r9d, [r8 + 1]
mov rdx, r8
mov qword [rsp + 0x118], r8
mov r15d, r8d
mov dword [rsp + 0xc4], r8d
mov qword [rsp + 0x170], r8
cmp eax, r12d
jae 0x10088a89
lea rsi, [rdi + rbp*4]
mov rbx, r8
mov r14d, dword [rsp + 0xc0]
mov rdi, qword [rsp + 0x580]
mov r13, qword [rsp + 0x558]
mov eax, r15d
cmp rax, qword [rsp + 0x290]
jae 0x10088a5c
mov ecx, dword [rsi]
mov rax, qword [r13]
mov r12, qword [rax + rcx*8]
add rdx, qword [r12 + 0x20]
mov qword [rsp + 0x118], rdx
cmp rdx, qword [rdi + 0x28]
ja 0x10088a5c
cmp byte [rdi + 0x30], r8b
je 0x10088a2c
lea rcx, [r12 + 0x28]
call fcn.10002cac
mov ebp, eax
mov dx, 0x2e
lea rcx, [r12 + 0x28]
call fcn.10002c74
cmp eax, ebp
jg 0x100889e2
mov eax, dword [r12 + 0x30]
jmp 0x100889e4
inc eax
mov ecx, eax
mov rax, qword [r12 + 0x28]
lea rcx, [rax + rcx*2]
mov r15d, dword [rsp + 0xc4]
xor r8d, r8d
cmp r15d, r8d
jne 0x10088a10
mov rbx, rcx
mov rdx, qword [rsp + 0x118]
lea r9d, [r8 + 1]
jmp 0x10088a2c
mov rdx, rbx
call fcn.10001a60
xor r8d, r8d
cmp al, r8b
je 0x10088a56
mov rdx, qword [rsp + 0x118]
lea r9d, [r8 + 1]
add r15d, r9d
mov dword [rsp + 0xc4], r15d
add qword [rsp + 0x170], r9
add rsi, 4
lea eax, [r15 + r14]
cmp eax, dword [rsp + 0xa8]
jb 0x10088985
jmp 0x10088a5c
mov r9d, 1
cmp r15d, r9d
mov rbx, qword [rsp + 0x1e8]
mov rdi, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x158]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x178]
jae 0x10088a9e
mov r12d, r9d
mov dword [rsp + 0xc4], r9d
mov qword [rsp + 0x170], r9
jmp 0x10088aa6
mov r12d, dword [rsp + 0xc4]
mov rcx, r14
call fcn.1000b7e4
mov ebp, eax
xor r15d, r15d
cmp eax, r15d
jne 0x1008a5e5
mov ecx, pe_nt_image_headers64
call fcn.10003f74
cmp rax, r15
je 0x10088ad6
mov rcx, rax
call fcn.10083f9c
mov r15, rax
mov qword [rsp + 0x1e0], r15
xor eax, eax
cmp r15, rax
je 0x10088aef
mov rax, qword [r15]
mov rcx, r15
call qword [rax + VariantCopy]
nop
mov rcx, qword [rsp + 0x580]
mov al, byte [rcx + 0x34]
mov byte [r15 + 0xe8], al
mov al, byte [rcx + 0x35]
mov byte [r15 + 0xe9], al
mov al, byte [rcx + 0x36]
mov byte [r15 + 0xea], al
mov al, byte [rcx + 0x37]
mov byte [r15 + 0xeb], al
mov eax, dword [rsp + 0xc0]
lea r8, [rdi + rax*4]
mov r9d, r12d
mov rdx, qword [rsp + 0x578]
mov rcx, r15
call fcn.10078304
mov rdx, qword [rsp + 0x568]
mov eax, dword [rdx + 0x48]
mov dword [rsp + 0xe0], eax
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 0x168], rcx
mov rax, qword [rsp + 0x560]
mov rbp, qword [rax + 0x80]
lea r12, [rdx + 0x30]
lea rcx, [rdx + 0x70]
call fcn.10082a88
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x568]
add rcx, 0x40
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rbp
lea rcx, [rsp + 0x168]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1f8]
mov r8, r15
mov rdx, qword [rsp + 0x540]
lea rcx, [rsp + 0x3e0]
call fcn.10075d60
mov ebp, eax
xor r12d, r12d
cmp eax, r12d
jne 0x1008a6ad
mov eax, dword [r15 + 0x70]
cmp eax, dword [r15 + 0x54]
jne 0x1008a77f
mov r8, r12
movsxd rcx, dword [rsp + 0xe0]
mov r9, qword [rsp + 0x568]
cmp ecx, dword [r9 + 0x48]
jae 0x10088c1e
mov rax, qword [r9 + 0x40]
lea rdx, [rax + rcx*8]
lea eax, [r12 + 1]
add r8, qword [rdx]
add ecx, eax
add rdx, 8
cmp ecx, dword [r9 + 0x48]
jb 0x10088c0f
add qword [r14 + 0x38], r8
mov rax, qword [rsp + 0x168]
add qword [r14 + 0x30], rax
mov dword [rsp + 0xe0], r12d
mov qword [rsp + 0x118], r12
mov rcx, r12
mov qword [rsp + 0xd8], r12
mov dword [rsp + 0xc8], r12d
mov r12d, dword [rsp + 0xc4]
xor ebp, ebp
cmp r12d, ebp
jbe 0x10088f0b
mov qword [rsp + 0x150], rbp
mov r12, rbp
mov rax, qword [rsp + 0xe8]
lea rcx, [rdi + rax*4]
mov qword [rsp + 0xd0], rcx
mov ecx, dword [rcx]
mov rax, qword [rsp + 0x558]
mov rax, qword [rax]
mov rbp, qword [rax + rcx*8]
lea rcx, [rsp + 0x190]
call fcn.10002780
nop
xor eax, eax
cmp byte [rbp + 0x3d], al
je 0x10088cd4
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x180]
mov rcx, rbp
call fcn.10083b3c
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x190]
call fcn.1000294c
jmp 0x10088d0c
lea r9, [rsp + 0x1a8]
lea r8, [rsp + 0x180]
mov edx, dword [rbp]
mov rcx, qword [rsp + 0x550]
call fcn.10084c84
lea r8, [rsp + 0x190]
mov edx, dword [rbp]
mov rcx, qword [rsp + 0x550]
call fcn.1007e1a8
xor r8d, r8d
cmp byte [rsp + 0x1d1], r8b
jne 0x1008a854
cmp byte [rsp + 0x18d], r8b
jne 0x1008a854
mov edx, dword [rsp + 0xc8]
mov rax, qword [r15 + 0x68]
cmp byte [rdx + rax], r8b
jne 0x10088d6a
mov rax, qword [rsp + 0x118]
add rax, qword [rbp + 0x20]
mov qword [rsp + 0x118], rax
mov rcx, qword [rsp + 0x190]
call sub.msvcrt.dll_free
mov rbp, qword [rsp + 0x150]
jmp 0x10088ea8
mov rax, qword [r15 + 0x78]
mov rbp, qword [rsp + 0x150]
mov ecx, dword [rax + rbp]
mov dword [rsp + 0x188], ecx
mov rax, qword [r15 + 0x88]
mov rcx, qword [r12 + rax]
mov qword [rsp + 0x180], rcx
add qword [rsp + 0xd8], rcx
cmp rcx, r8
je 0x10088dc0
mov r9d, 1
mov byte [rsp + 0x18e], r9b
mov byte [rsp + 0x18c], r9b
add dword [rsp + 0xe0], r9d
jmp 0x10088dd6
mov byte [rsp + 0x18e], r8b
mov byte [rsp + 0x18c], r8b
mov r9d, 1
mov rax, qword [r15 + 0xd8]
cmp byte [rdx + rax], r8b
je 0x10088e75
cmp byte [r15 + 0xe8], r8b
je 0x10088e0b
mov byte [rsp + 0x1cc], r9b
mov rax, qword [r15 + 0x98]
mov rcx, qword [r12 + rax]
mov qword [rsp + 0x1a8], rcx
cmp byte [r15 + 0xe9], r8b
je 0x10088e2f
mov byte [rsp + 0x1cd], r9b
mov rax, qword [r15 + 0xa8]
mov rcx, qword [r12 + rax]
mov qword [rsp + 0x1b0], rcx
cmp byte [r15 + 0xea], r8b
je 0x10088e53
mov byte [rsp + 0x1ce], r9b
mov rax, qword [r15 + 0xb8]
mov rcx, qword [r12 + rax]
mov qword [rsp + 0x1b8], rcx
cmp byte [r15 + 0xeb], r8b
je 0x10088e75
mov byte [rsp + 0x1d0], r9b
mov rax, qword [r15 + 0xc8]
mov ecx, dword [rax + rbp]
mov dword [rsp + 0x1c8], ecx
lea r9, [rsp + 0x190]
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x180]
mov rcx, qword [rsp + 0x568]
call fcn.100828ec
nop
mov rcx, qword [rsp + 0x190]
call sub.msvcrt.dll_free
mov eax, dword [rsp + 0xc8]
inc eax
mov dword [rsp + 0xc8], eax
add r12, 8
add rbp, 4
mov qword [rsp + 0x150], rbp
mov rcx, qword [rsp + 0xd0]
add rcx, 4
mov qword [rsp + 0xd0], rcx
cmp eax, dword [rsp + 0xc4]
jb 0x10088c83
mov rax, qword [rsp + 0x168]
mov r12d, dword [rsp + 0xc4]
mov rcx, qword [rsp + 0xd8]
mov r9, qword [rsp + 0x568]
xor ebp, ebp
cmp rcx, rax
jne 0x1008a939
lea rbp, [r9 + 0x20]
mov rcx, rbp
call fcn.10026690
mov ecx, dword [rbp + 8]
lea eax, [rcx + 1]
mov dword [rbp + 8], eax
mov rax, qword [rbp]
mov edx, dword [rsp + 0xe0]
mov dword [rax + rcx*4], edx
add dword [rsp + 0xc0], r12d
mov rcx, qword [rsp + 0x170]
mov rbp, qword [rsp + 0xe8]
add rbp, rcx
mov qword [rsp + 0xe8], rbp
mov rax, qword [rsp + 0x118]
xor r12d, r12d
cmp rax, r12
je 0x10088fa3
mov rdx, qword [rsp + 0x160]
cmp rdx, rax
jb 0x10088fa3
sub rdx, rax
mov qword [rsp + 0x160], rdx
mov rcx, qword [rsp + 0x578]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ebp, eax
cmp eax, r12d
jne 0x1008aa0e
mov rbp, qword [rsp + 0xe8]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
mov r12d, dword [rsp + 0xa8]
mov eax, dword [rsp + 0xc0]
cmp eax, r12d
jb 0x10088938
mov r15, qword [rsp + 0x130]
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
mov r12d, dword [rsp + 0x200]
mov ecx, 1
add r12d, ecx
mov dword [rsp + 0x200], r12d
mov rax, qword [rsp + 0x208]
add rax, rcx
mov qword [rsp + 0x208], rax
cmp r12d, dword [rsp + 0x138]
jae 0x1008aae0
mov rbp, qword [rsp + 0xb0]
jmp 0x10087897
mov r12d, 0x80004005
jmp 0x1008a340
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor eax, eax
cmp rbx, rax
je 0x1008906e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100890e8
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x100890e3
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100890b6
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10089117
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x1008912a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rdi
je 0x1008915d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, edi
je 0x100891e3
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
xor r14d, r14d
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x100891da
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100891ad
xor edi, edi
jmp 0x100891eb
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x1008921a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x1008922d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor eax, eax
cmp rbx, rax
je 0x10089262
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100892e6
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x100892df
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100892b2
jmp 0x100892ee
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x1008931d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10089330
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor eax, eax
cmp rbx, rax
je 0x10089365
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100893e9
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x100893e2
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100893b5
jmp 0x100893f1
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10089420
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10089433
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor eax, eax
cmp rbx, rax
je 0x10089476
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x100894fa
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x100894f3
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100894c6
jmp 0x10089502
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10089531
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10089544
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
mov rcx, qword [rsp + 0x210]
cmp rcx, rbp
je 0x10089560
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
cmp rdi, rbp
je 0x1008956f
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
cmp rcx, rbp
je 0x10089583
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rbp
je 0x100895bc
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x10089640
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
xor r14d, r14d
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x10089639
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x1008960c
jmp 0x1008964b
mov rbp, qword [rsp + 0xb0]
xor r14d, r14d
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x1008967a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x1008968d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
mov rcx, qword [rsp + 0x1a0]
cmp rcx, rbp
je 0x100896a9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x218]
call sub.msvcrt.dll_free
nop
cmp rdi, rbp
je 0x100896c6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
cmp rcx, rbp
je 0x100896da
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rbp
je 0x10089713
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x10089797
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
xor r14d, r14d
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x10089790
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x10089763
jmp 0x100897a2
mov rbp, qword [rsp + 0xb0]
xor r14d, r14d
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x100897d1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x100897e4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
mov rcx, qword [rsp + 0x218]
call sub.msvcrt.dll_free
nop
cmp rdi, r12
je 0x10089809
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
cmp rcx, r12
je 0x1008981d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x10089856
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x100898d7
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x100898d0
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x100898a3
jmp 0x100898df
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008990e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x10089921
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
cmp rdi, rcx
je 0x1008993a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
xor edi, edi
cmp rcx, rdi
je 0x10089950
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rdi
je 0x10089989
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x10089a0d
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x10089a06
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x100899d9
jmp 0x10089a15
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10089a44
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10089a57
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
movzx r12d, ax
or r12d, 0x80070000
cmp eax, ebp
cmovle r12d, eax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
cmp rcx, rbp
je 0x10089a8e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rbp
je 0x10089ac7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x10089b4b
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
xor r14d, r14d
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x10089b44
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x10089b17
jmp 0x10089b56
mov rbp, qword [rsp + 0xb0]
xor r14d, r14d
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10089b85
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10089b98
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, r12d
jmp 0x1008acde
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
xor r12d, r12d
cmp rcx, r12
je 0x10089bc1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x10089bfa
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x10089c7b
mov rbp, qword [rsp + 0xb0]
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x10089c74
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x10089c47
jmp 0x10089c83
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x10089cb2
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x10089cc5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
movzx edi, ax
or edi, 0x80070000
cmp eax, r8d
cmovle edi, eax
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x10089cf2
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor eax, eax
cmp rbx, rax
je 0x10089d2d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x10089db2
mov rbp, qword [rsp + 0xb0]
lea r12, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub r12, 8
mov rbx, qword [r12]
cmp rbx, r14
je 0x10089dab
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x10089d7d
jmp 0x10089dba
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x10089de9
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10089dfc
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, edi
jmp 0x1008acde
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x10089e17
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor edi, edi
cmp rbx, rdi
je 0x10089e52
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x10089eb9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x10089ecc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0xc8]
jmp 0x1008acde
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x10089eec
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor edi, edi
cmp rbx, rdi
je 0x10089f27
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x10089f8e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x10089fa1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x10089fbf
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor edi, edi
cmp rbx, rdi
je 0x10089ffa
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x1008a061
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x1008a074
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x1008acde
mov rcx, qword [rsp + 0xa0]
cmp rcx, r8
je 0x1008a188
mov rax, qword [rcx]
mov edx, 2
mov r9d, edx
mov r8d, dword [rsp + 0xc0]
call qword [rax + 0x28]
mov ebp, eax
xor r12d, r12d
cmp eax, r12d
je 0x1008a18b
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
cmp rcx, r12
je 0x1008a0ce
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x1008a107
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008a16e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008a181
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x1008acde
xor r12d, r12d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
cmp rcx, r12
je 0x1008a1a9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x1008a1e2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008a249
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008a25c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd0]
xor edi, edi
cmp rcx, rdi
je 0x1008a286
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rdi
je 0x1008a2bf
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x1008a326
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x1008a339
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x1008acde
cmp rdi, r8
je 0x1008a351
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r8d, r8d
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x1008a365
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor edi, edi
cmp rbx, rdi
je 0x1008a3a0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x1008a407
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x1008a41a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
cmp rdi, r8
je 0x1008a433
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r8d, r8d
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x1008a447
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor edi, edi
cmp rbx, rdi
je 0x1008a482
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x1008a4e9
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x1008a4fc
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x1008acde
cmp rdi, r8
je 0x1008a514
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r8d, r8d
mov rcx, qword [rsp + 0xd0]
cmp rcx, r8
je 0x1008a528
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor edi, edi
cmp rbx, rdi
je 0x1008a563
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x1008a5ca
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x1008a5dd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x1008acde
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r15
je 0x1008a627
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x1008a693
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x1008a6a6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x1008acde
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x1008a6f9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008a765
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008a778
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x1008acde
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x1008a7cb
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008a837
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008a84a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
mov rcx, qword [rsp + 0x190]
call sub.msvcrt.dll_free
nop
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
xor ebp, ebp
cmp rbx, rbp
je 0x1008a8b0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbp
je 0x1008a91c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x1008a92f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, rbp
je 0x1008a985
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbp
je 0x1008a9f1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x1008aa04
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x1008acde
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.100753f4
nop
lea rcx, [rsp + 0x240]
call fcn.1007534c
nop
cmp rbx, r12
je 0x1008aa5a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008aac6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008aad9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x1008acde
xor r12d, r12d
mov rcx, r14
call fcn.1000b7e4
mov edi, eax
cmp eax, r12d
je 0x1008ab86
cmp rbx, r12
je 0x1008ab05
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008ab6c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008ab7f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x1008acde
mov rcx, qword [rsp + 0x568]
call fcn.10085048
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008ac53
mov rax, qword [rcx]
mov r9d, 7
mov r8d, 0xffffffff
xor edx, edx
call qword [rax + 0x20]
mov edi, eax
cmp eax, r12d
je 0x1008ac53
cmp rbx, r12
je 0x1008abd2
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008ac39
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008ac4c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x1008acde
cmp rbx, r12
je 0x1008ac62
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.100859f4
nop
lea rcx, [rsp + 0xf8]
call fcn.10127840
lea rcx, [rsp + 0xf0]
call fcn.10127840
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.1005a0c0
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1008acc9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x1008acdc
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
add rsp, 0x4f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret