Function at 0x100130004
Capabilities:
Encode data using base64
Get disk size
Get system information on windows

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2b0
mov qword [rsp + 0x190], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov dword [rsp + 0x90], r9d
mov rdi, r8
mov rbx, rdx
mov rbp, rcx
mov qword [rsp + 0xf8], rcx
mov r15, qword [rsp + 0x310]
mov qword [rsp + 0x290], r15
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x108], rax
mov r13, qword [rsp + 0x330]
mov qword [rsp + 0xa8], r13
xor esi, esi
mov r14d, esi
mov dword [rsp + 0x88], esi
lea rax, [0x1001653b8]
mov rcx, qword [0x1001653b8]
cmp rcx, rax
je 0x1001300d2
test byte [rcx + 0x1c], 1
je 0x1001300d2
cmp byte [rcx + 0x19], 4
jb 0x1001300d2
lea edx, [rsi + 0x24]
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7b8
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x100], rsi
mov dword [rsp + 0xc0], esi
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0xd8], rsi
mov dword [rsp + 0x98], esi
mov r12, rsi
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0xb8], esi
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x60], sil
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rsi
mov dword [rsp + 0x130], 0x11
mov eax, 0xffffffff
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rsi
mov dword [rsp + 0x150], esi
mov dword [rsp + 0x154], 0xa
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rsi
movss xmm0, dword [0x100017c30]
movss dword [rsp + 0x134], xmm0
movss xmm1, dword [0x100017c2c]
movss dword [rsp + 0x138], xmm1
movss xmm0, dword [0x100017c28]
movss dword [rsp + 0x13c], xmm0
lea rcx, [rsp + 0x120]
call fcn.100043bd0
nop
mov rcx, r13
call fcn.10012c8fc
movdqu xmm5, xmmword [rbx]
movdqu xmmword [r13], xmm5
mov ebx, 0x98
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rsi, rax
xor eax, eax
cmp rsi, rax
jne 0x10013022d
mov edi, 0x8007000e
mov rbp, rax
mov r13, r12
mov r15, r12
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r8, rbx
xor edx, edx
mov rcx, rsi
call sub.msvcrt.dll_memset
mov rdx, rsi
mov rcx, rdi
call fcn.10014573c
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132ac1
lea rdx, [r13 + 0x10]
xor r8d, r8d
mov rcx, qword [rsi]
call fcn.10009b4ec
mov edi, eax
xor edx, edx
cmp eax, edx
jl 0x100132aab
mov eax, dword [rsi + 8]
mov dword [r13 + 0x1c], eax
mov al, byte [rsi + 0x6b]
mov byte [r13 + 0x73], al
mov eax, dword [rsi + 0x70]
mov dword [r13 + 0x74], eax
mov al, byte [rsi + 0x74]
mov byte [r13 + 0x78], al
mov eax, dword [rsi + 0x90]
mov dword [r13 + 0x88], eax
mov rcx, qword [rsi + 0x10]
cmp rcx, rdx
jne 0x1001302bc
mov edi, 0x8078000c
mov rbp, rdx
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
lea rdx, [r13 + 0x20]
xor r8d, r8d
call fcn.10009b4ec
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132a95
lea ecx, [rax + 0x20]
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor edi, edi
cmp rax, rdi
je 0x1001302f2
mov rcx, rax
call fcn.10010ecb4
mov qword [rsp + 0x70], rax
jmp 0x1001302fa
mov rax, rdi
mov qword [rsp + 0x70], rax
cmp rax, rdi
jne 0x10013031f
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
cmp qword [rsi + 0x50], rdi
je 0x1001307f6
cmp qword [rsi + 0x58], rdi
je 0x1001307f6
cmp qword [rsi + 0x60], rdi
je 0x1001307f6
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x10013037c
test byte [rcx + 0x1c], 1
je 0x10013037c
cmp byte [rcx + 0x19], 4
jb 0x10013037c
mov edx, 0x25
mov r9d, dword [rsi + 0x48]
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rcx, qword [0x1001653b8]
cmp qword [rsi + 0x50], rdi
je 0x10013079e
cmp qword [rsi + 0x58], rdi
je 0x10013079e
cmp qword [rsi + 0x60], rdi
je 0x10013079e
cmp qword [rsi + 0x80], rdi
je 0x1001303c2
lea r8, [0x1000145c8]
mov edx, 0x2e6
lea rcx, [0x100014530]
call fcn.100099ad8
mov rcx, qword [0x1001653b8]
cmp dword [rsi + 0x78], edi
je 0x1001303e6
lea r8, [0x1000145f0]
mov edx, 0x2e7
lea rcx, [0x100014530]
call fcn.100099ad8
mov rcx, qword [0x1001653b8]
cmp qword [rsi + 0x80], rdi
jne 0x100130746
cmp dword [rsi + 0x78], edi
jne 0x100130746
mov rax, qword [rbp]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x98]
mov rcx, rbp
call qword [rax + 0x40]
mov edi, eax
xor r13d, r13d
cmp eax, r13d
jl 0x100132a7d
mov ebp, dword [rsi + 0x48]
mov dword [rsp + 0xc8], ebp
mov dword [rsp + 0xb8], ebp
mov rax, rbp
imul rax, rax, 0x78
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x100130466
mov edi, 0x80070216
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov r12, rax
mov qword [rsp + 0x80], rax
cmp rax, r13
jne 0x1001304a0
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
xor r11d, r11d
cmp dword [rsi + 0x48], r11d
jbe 0x100130ac6
mov r15, r11
mov r8d, dword [rsp + 0x98]
mov ebp, r11d
cmp r8d, r11d
jbe 0x10013066b
mov r12d, r13d
mov r9d, r13d
shl r9, 4
add r9, qword [rsi + 0x50]
mov eax, ebp
imul rax, rax, 0x78
add rax, qword [rsp + 0xd8]
mov rdx, qword [rax]
cmp rdx, qword [r9]
jne 0x100130504
mov rdx, qword [rax + 8]
cmp rdx, qword [r9 + 8]
jne 0x100130504
mov eax, r11d
jmp 0x100130509
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, r11d
je 0x10013051a
inc ebp
cmp ebp, r8d
jb 0x1001304df
jmp 0x10013066b
mov rax, qword [0x1001653b8]
lea rcx, [0x1001653b8]
cmp rax, rcx
je 0x100130579
test byte [rax + 0x1c], 1
je 0x100130579
cmp byte [rax + 0x19], 4
jb 0x100130579
mov rdx, r9
lea rcx, [rsp + 0xa0]
call fcn.1000440b4
or r14d, 1
mov r9, qword [rax]
mov rax, qword [rsi + 0x60]
movzx ecx, byte [r12 + rax]
mov edx, 0x28
mov dword [rsp + 0x20], ecx
lea r8, [0x100002ea0]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
test r14b, 1
je 0x100130591
and r14d, 0xfffffffe
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rbx, r12
imul rbx, rbx, 0x78
mov rcx, qword [rsp + 0x80]
add rbx, rcx
mov ecx, ebp
imul rcx, rcx, 0x78
add rcx, qword [rsp + 0xd8]
mov rdx, rbx
call fcn.100145114
mov edi, eax
xor r11d, r11d
cmp eax, r11d
jl 0x1001327aa
mov qword [rsp + 0x188], rbx
mov rax, qword [rsi + 0x60]
mov cl, byte [r12 + rax]
mov byte [rbx + 0x54], cl
cmp cl, r11b
je 0x100130663
mov dword [rsp + 0x88], r11d
mov r9b, byte [rbx + 0x58]
and r9b, 1
mov r8d, dword [rbx + 0x58]
shr r8d, 9
and r8b, 1
lea rax, [rsp + 0x88]
mov qword [rsp + 0x30], rax
mov eax, dword [rbx + 0x68]
mov dword [rsp + 0x28], eax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x20], rax
mov dl, byte [rsi + 0x74]
mov cl, byte [rsi + 0x6c]
call fcn.100112eb0
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132787
mov eax, dword [rsp + 0x88]
or dword [rbx + 0x58], eax
mov ecx, dword [rbx + 0x58]
mov rax, qword [rsi + 0x58]
mov dword [r15 + rax], ecx
lea rcx, [rsp + 0x188]
call fcn.100113080
mov edi, eax
xor r11d, r11d
cmp eax, r11d
jl 0x100132764
mov r8d, dword [rsp + 0x98]
cmp ebp, r8d
je 0x1001306ac
inc r13d
add r15, 4
cmp r13d, dword [rsi + 0x48]
jb 0x1001304c5
mov r15, qword [rsp + 0x290]
mov r13, qword [rsp + 0xa8]
mov ebp, dword [rsp + 0xc8]
mov r12, qword [rsp + 0x80]
lea r14, [0x1001653b8]
jmp 0x100130ad5
mov edi, 0x80780089
mov rax, qword [0x1001653b8]
lea rcx, [0x1001653b8]
cmp rax, rcx
je 0x10013070b
test byte [rax + 0x1c], 1
je 0x10013070b
cmp byte [rax + 0x19], 2
jb 0x10013070b
mov edx, r13d
shl rdx, 4
add rdx, qword [rsi + 0x50]
lea rcx, [rsp + 0x290]
call fcn.1000440b4
or r14d, 2
mov edx, 0x29
mov r9, qword [rax]
lea r8, [0x100002ea0]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001da24
test r14b, 2
je 0x100132741
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov edi, 0x80070057
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132962
test byte [rcx + 0x1c], 1
je 0x10013298a
cmp byte [rcx + 0x19], 2
jb 0x100132976
mov edx, 0x27
mov r9d, 0x80070057
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov edi, 0x80004003
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132926
test byte [rcx + 0x1c], 1
je 0x10013294e
cmp byte [rcx + 0x19], 2
jb 0x10013293a
mov edx, 0x26
mov r9d, 0x80004003
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x10013082e
test byte [rcx + 0x1c], 1
je 0x10013082e
cmp byte [rcx + 0x19], 4
jb 0x10013082e
mov edx, 0x2a
mov r9d, dword [rsi + 0x78]
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rax, qword [rbp]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x98]
mov rcx, rbp
call qword [rax + 0x40]
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132a6c
mov dword [rsp + 0x88], eax
mov rax, qword [rbp]
lea rdx, [rsp + 0x88]
mov rcx, rbp
call qword [rax + 0x190]
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132a5b
xor r12d, r12d
mov rcx, r12
cmp dword [rsi + 8], 4
je 0x10013088c
mov rcx, qword [rsi + 0x10]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x48], r12b
mov byte [rsp + 0x40], r12b
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x38], eax
mov al, byte [rsi + 0x74]
mov byte [rsp + 0x30], al
mov al, byte [rsi + 0x6c]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], rcx
mov r9, qword [rsi + 0x80]
mov r8d, dword [rsi + 0x78]
mov rdx, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x98]
call fcn.100111a88
mov edi, eax
cmp eax, r12d
jl 0x10013244a
mov ebp, dword [rsp + 0xb8]
mov dword [rsp + 0xc8], ebp
mov dword [rsi + 0x48], ebp
mov rdi, rbp
mov rax, rbp
shl rax, 4
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x10013093e
mov edi, 0x80070216
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsi + 0x50], rax
cmp rax, r12
jne 0x100130972
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov eax, dword [rsi + 0x48]
shl rax, 2
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x1001309b1
mov edi, 0x80070216
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsi + 0x58], rax
cmp rax, r12
jne 0x1001309e5
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov eax, dword [rsi + 0x48]
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x100130a20
mov edi, 0x80070216
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbx, rax
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsi + 0x60], rax
cmp rax, r12
jne 0x100130a56
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
xor r11d, r11d
cmp ebp, r11d
jbe 0x100130abc
mov r8, r11
mov r9, r11
mov r10, r11
mov r12, qword [rsp + 0x80]
lea rdx, [r12 + 0x58]
mov rcx, qword [rsi + 0x60]
mov al, byte [rdx - 4]
mov byte [r10 + rcx], al
mov rax, qword [rsi + 0x50]
movdqu xmm0, xmmword [rdx - 0x58]
movdqu xmmword [r9 + rax], xmm0
mov rcx, qword [rsi + 0x58]
mov eax, dword [rdx]
mov dword [r8 + rcx], eax
inc r10
add r9, 0x10
add rdx, 0x78
add r8, 4
sub rdi, 1
jne 0x100130a81
jmp 0x100130ad5
mov r12, qword [rsp + 0x80]
jmp 0x100130ad5
mov r13, qword [rsp + 0xa8]
lea r14, [0x1001653b8]
mov eax, r11d
cmp ebp, r11d
jbe 0x100130af1
lea rcx, [r12 + 0x54]
cmp byte [rcx], r11b
jne 0x100130af1
inc eax
add rcx, 0x78
cmp eax, ebp
jb 0x100130ae2
cmp eax, ebp
jne 0x100130b4d
mov edi, 0x80780010
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x1001328ea
test byte [rcx + 0x1c], 1
je 0x100132912
cmp byte [rcx + 0x19], 2
jb 0x1001328fe
mov edx, 0x2b
mov r9d, 0x80780010
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
cmp dword [rsi + 0x18], r11d
jne 0x100130b6c
mov edi, 0x8078005e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov ecx, dword [rsi + 8]
call fcn.1000a31e8
bt eax, 8
jb 0x100130b99
cmp dword [rsi + 0x18], 1
jbe 0x100130b99
mov edi, 0x80780060
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov eax, dword [rsi + 0x18]
mov dword [r13 + 0x28], eax
xor edi, edi
cmp qword [rsi + 0x20], rdi
jne 0x100130bc1
mov edi, 0x80004003
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov eax, dword [rsi + 0x18]
lea rcx, [rax + rax*4]
shl rcx, 3
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rcx, rax
mov qword [r13 + 0x30], rax
cmp rax, rdi
jne 0x100130bf7
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov eax, dword [rsi + 0x18]
lea r8, [rax + rax*4]
shl r8, 3
xor edx, edx
call sub.msvcrt.dll_memset
cmp dword [rsi + 8], 4
jne 0x100130d8d
mov bl, 1
mov dl, bl
mov r14, qword [rsp + 0x108]
mov rcx, r14
call fcn.10010ad48
mov edi, eax
xor r15d, r15d
cmp eax, r15d
jl 0x100132a40
mov byte [rsp + 0x60], r15b
lea r8, [rsp + 0x60]
mov dl, bl
mov rcx, qword [rsi + 0x10]
call fcn.100099cf4
mov edi, eax
cmp eax, r15d
jge 0x100130cab
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001328ae
test byte [rcx + 0x1c], bl
je 0x1001328d6
cmp byte [rcx + 0x19], 2
jb 0x1001328c2
lea edx, [r15 + 0x2c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsi + 0x10]
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rcx, r14
call fcn.10010aed8
cmp byte [rsp + 0x60], r15b
jne 0x100130cda
mov edi, 0x8078000c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
cmp dword [rsi + 0x18], 1
je 0x100130cf8
lea r8, [0x100014610]
mov edx, 0x3dd
lea rcx, [0x100014530]
call fcn.100099ad8
mov rcx, qword [rsi + 0x20]
xor r8d, r8d
mov rdx, qword [r13 + 0x30]
mov rcx, qword [rcx]
call fcn.10009b4ec
mov edi, eax
cmp eax, r15d
jl 0x100132a25
mov rdx, qword [r13 + 0x30]
add rdx, 8
mov rcx, qword [rsi + 0x20]
xor r8d, r8d
mov rcx, qword [rcx + 8]
call fcn.10009b4ec
mov edi, eax
cmp eax, r15d
jl 0x100132a0a
mov rax, qword [r13 + 0x30]
mov qword [rax + 0x10], r15
mov rax, qword [r13 + 0x30]
mov word [rax + 0x18], r15w
mov rax, qword [r13 + 0x30]
mov qword [rax + 0x20], r15
lea rdx, [r13 + 0x38]
xor r8d, r8d
mov rcx, qword [rsi + 0x28]
call fcn.10009b4ec
mov edi, eax
cmp eax, r15d
jl 0x1001329ef
lea rdx, [r13 + 0x40]
xor r8d, r8d
mov rcx, qword [rsi + 0x30]
call fcn.10009b4ec
mov edi, eax
cmp eax, r15d
jl 0x1001329d4
jmp 0x1001311be
mov r13b, dil
cmp byte [rsi + 0x74], dil
je 0x100130da9
cmp dword [rsi + 0x78], edi
jne 0x100130da9
cmp byte [rsi + 0x6c], dil
jne 0x100130da9
call fcn.10012ddd4
mov r13b, al
mov r12d, edi
cmp dword [rsi + 0x18], edi
jbe 0x100131049
mov rbp, rdi
mov r14d, dword [rsp + 0x90]
xor eax, eax
cmp r12d, eax
jbe 0x100130dee
mov rbx, rax
mov rcx, qword [rsi + 0x20]
mov rdx, qword [rcx + rbp]
mov rcx, qword [rcx + rbx]
call sub.msvcrt.dll__wcsicmp
test eax, eax
je 0x100130fc8
inc edi
add rbx, 0x18
cmp edi, r12d
jb 0x100130dca
mov rcx, qword [rsi + 0x20]
lea rdx, [rsp + 0x290]
mov rcx, qword [rcx + rbp]
call fcn.10009c4a0
xor edi, edi
cmp eax, edi
jl 0x100131021
mov ebx, edi
cmp dword [rsi + 0x48], edi
jbe 0x100130ef1
mov r9, qword [0x1001653b8]
lea rax, [rsp + 0x290]
lea rcx, [0x100001fe0]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x100130e44
mov rdx, qword [rax + 8]
cmp rdx, qword [rcx + 8]
jne 0x100130e44
mov eax, edi
jmp 0x100130e49
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100130e6c
lea r8, [0x100014630]
mov edx, 0x420
lea rcx, [0x100014530]
call fcn.100099ad8
mov r9, qword [0x1001653b8]
mov ecx, ebx
mov rax, qword [rsi + 0x60]
cmp byte [rcx + rax], 1
jne 0x100130ee6
shl rcx, 4
add rcx, qword [rsi + 0x50]
lea rax, [rsp + 0x290]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x100130e9e
mov rdx, qword [rax + 8]
cmp rdx, qword [rcx + 8]
jne 0x100130e9e
mov eax, edi
jmp 0x100130ea3
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100130ee6
cmp r13b, dil
je 0x100130ff0
lea rax, [0x1001653b8]
cmp r9, rax
je 0x100130ee6
test byte [r9 + 0x1c], 1
je 0x100130ee6
cmp byte [r9 + 0x19], 4
jb 0x100130ee6
mov edx, 0x2d
lea r8, [0x100002ea0]
mov rcx, qword [r9 + 0x10]
call fcn.10001c7b8
mov r9, qword [0x1001653b8]
inc ebx
cmp ebx, dword [rsi + 0x48]
jb 0x100130e1f
mov rcx, qword [rsi + 0x20]
mov r8, r15
mov edx, r14d
mov rcx, qword [rcx + rbp]
call fcn.100123d60
mov ecx, 0xffffffff
cmp eax, ecx
je 0x100130f41
mov ecx, r12d
lea rdx, [rcx + rcx*4]
mov rcx, qword [rsp + 0xa8]
mov rcx, qword [rcx + 0x30]
lea rdx, [rcx + rdx*8]
mov eax, eax
lea rcx, [rax + rax*4]
lea rcx, [r15 + rcx*8]
call fcn.10012c638
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x10013271e
jmp 0x100130fb4
mov rax, qword [rsp + 0x68]
cmp rax, rdi
je 0x100130f59
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x68], rdi
mov rax, qword [rsi + 0x20]
lea r8, [rsp + 0x68]
lea rdx, [0x100002954]
mov rcx, qword [rax + rbp]
call fcn.10009b5b0
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x10013116f
mov eax, r12d
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax + 0x30]
lea r8, [rax + rcx*8]
mov rdx, qword [rsi + 0x20]
mov rdx, qword [rdx + rbp + 8]
mov rcx, qword [rsp + 0x68]
call fcn.10012f2d4
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x1001326fb
inc r12d
add rbp, 0x18
cmp r12d, dword [rsi + 0x18]
jae 0x100131018
xor edi, edi
jmp 0x100130dc0
mov edi, 0x8078005f
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov edi, 0x80780040
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov ebp, dword [rsp + 0xc8]
jmp 0x100131051
mov edi, 0x8078000c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r14d, dword [rsp + 0x90]
mov r8, r15
mov edx, r14d
mov rcx, qword [rsi + 0x10]
call fcn.100123d60
mov ecx, 0xffffffff
cmp eax, ecx
jne 0x100131192
mov rax, qword [rsp + 0x68]
xor r15d, r15d
cmp rax, r15
je 0x100131088
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x68], r15
lea r8, [rsp + 0x68]
lea rdx, [0x100002954]
mov rcx, qword [rsi + 0x10]
call fcn.10009b5b0
mov edi, eax
cmp eax, r15d
jl 0x10013116f
lea rdx, [rsp + 0x90]
mov r13, qword [rsp + 0x68]
mov rcx, r13
call fcn.10011b704
mov edi, eax
cmp eax, r15d
jge 0x100131122
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001326b6
test byte [rcx + 0x1c], 1
je 0x1001326e4
cmp byte [rcx + 0x19], 2
jb 0x1001326cd
mov edx, 0x2e
mov dword [rsp + 0x20], eax
mov r9, r13
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov eax, dword [rsp + 0x90]
cmp eax, dword [rsi + 8]
je 0x100131151
mov edi, 0x80780011
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
cmp eax, 2
je 0x10013115b
cmp eax, 3
jne 0x1001311ab
mov bl, 1
mov r13, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x108]
jmp 0x1001311be
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov bl, byte [rsp + 0x60]
mov r13, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x108]
xor r15d, r15d
jmp 0x1001311be
mov bl, r15b
mov r13, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x108]
lea rdx, [r13 + 0x48]
xor r8d, r8d
mov rcx, qword [rsi + 0x40]
call fcn.10009b4ec
mov edi, eax
cmp eax, r15d
jl 0x100132813
cmp bl, r15b
je 0x1001312ef
lea rax, [rsp + 0x180]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe8]
mov r8, rsi
mov rdx, r14
mov rcx, qword [rsp + 0xf8]
call fcn.10012f9e0
mov edi, eax
cmp eax, r15d
jge 0x10013128a
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132662
test byte [rcx + 0x1c], 1
je 0x10013269a
cmp byte [rcx + 0x19], 2
jb 0x10013267e
mov edx, 0x2f
mov r9d, eax
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001312f6
test byte [rcx + 0x1c], 1
je 0x1001312f6
cmp byte [rcx + 0x19], 4
jb 0x1001312f6
mov edx, 0x30
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xe8]
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10012f08c
jmp 0x1001312f6
lea r14, [0x1001653b8]
mov eax, dword [rsi + 0x48]
mov dword [r13 + 0x50], eax
cmp dword [rsi + 8], 1
je 0x10013130d
cmp dword [rsi + 8], 5
jne 0x10013139b
mov ecx, r15d
cmp ebp, r15d
jbe 0x100131391
mov r12, qword [rsp + 0x80]
lea rax, [r12 + 0x58]
cmp byte [rax - 4], r15b
je 0x10013132d
test byte [rax], 8
je 0x100131339
inc ecx
add rax, 0x78
cmp ecx, ebp
jae 0x1001313a3
jmp 0x100131322
mov edi, 0x80780141
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x100132872
test byte [rcx + 0x1c], 1
je 0x10013289a
cmp byte [rcx + 0x19], 2
jb 0x100132886
mov edx, 0x31
mov r9d, 0x80780141
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
jmp 0x1001313a3
mov r12, qword [rsp + 0x80]
mov ecx, dword [rsi + 0x48]
imul rcx, rcx, 0x78
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [r13 + 0x58], rax
cmp rax, r15
jne 0x1001313d2
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r8d, dword [rsi + 0x48]
imul r8, r8, 0x78
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov ecx, r15d
mov dword [rsp + 0x88], ecx
cmp dword [rsi + 0x48], r15d
jbe 0x100132422
mov rax, r15
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x90], r15
mov qword [rsp + 0xe8], r15
mov r14d, ecx
mov r12d, ecx
add r12, r12
mov rbp, qword [rsi + 0x50]
lea r13, [rbp + r12*8]
mov rdi, qword [rsi + 0x58]
mov r15d, dword [rdi + rax]
mov rax, qword [rsi + 0x60]
mov al, byte [r14 + rax]
mov byte [rsp + 0x60], al
xor eax, eax
mov ebx, eax
cmp ecx, eax
jbe 0x100131470
mov ecx, ebx
shl rcx, 4
add rcx, rbp
mov r9d, r15d
mov r8, r13
mov edx, dword [rdi]
call fcn.10009cac0
test al, al
jne 0x10013187e
inc ebx
add rdi, 4
cmp ebx, dword [rsp + 0x88]
jb 0x100131441
xor eax, eax
mov rcx, qword [rsp + 0xb0]
cmp rcx, rax
je 0x10013148d
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov qword [rsp + 0xb0], rax
mov r9b, 1
lea r8, [rsp + 0xb0]
mov edx, r15d
mov rcx, r13
call fcn.10009c5ec
mov edi, eax
xor edx, edx
cmp eax, edx
jl 0x1001323ff
mov rax, qword [rsi + 0x58]
mov rcx, qword [rsp + 0xa0]
mov r13d, dword [rcx + rax]
mov rax, qword [rsi + 0x50]
lea rbp, [rax + r12*8]
cmp rbp, rdx
jne 0x1001314e6
lea r8, [0x1000134d0]
mov edx, 0x394
lea rcx, [0x100013450]
call fcn.100099ad8
xor edx, edx
mov ebx, edx
mov r12d, dword [rsp + 0x318]
cmp r12d, edx
jbe 0x1001315a7
mov rax, qword [rsp + 0x178]
lea rdi, [rax + 0x10]
mov ecx, ebx
imul rcx, rcx, 0x78
add rcx, rax
mov r9d, r13d
mov r8, rbp
mov edx, dword [rdi]
call fcn.10009cac0
test al, al
jne 0x100131534
inc ebx
add rdi, 0x78
cmp ebx, r12d
mov rax, qword [rsp + 0x178]
jb 0x100131505
jmp 0x1001315a7
mov eax, 0xffffffff
cmp ebx, eax
je 0x1001315a7
imul r14, r14, 0x78
mov r13, qword [rsp + 0xa8]
add r14, qword [r13 + 0x58]
mov ecx, ebx
imul rcx, rcx, 0x78
mov rax, qword [rsp + 0x178]
add rcx, rax
mov rdx, r14
call fcn.10012c6fc
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x10013263f
mov rax, qword [r13 + 0x58]
mov bl, byte [rsp + 0x60]
mov r12, qword [rsp + 0x90]
mov byte [r12 + rax + 0x28], bl
mov rax, qword [r13 + 0x58]
mov dword [r12 + rax + 0x10], r15d
mov r14, qword [rsp + 0xb0]
xor r15d, r15d
lea rbp, [0x1001653b8]
jmp 0x100131667
imul r14, r14, 0x78
mov r13, qword [rsp + 0xa8]
add r14, qword [r13 + 0x58]
mov r9, r14
mov bl, byte [rsp + 0x60]
mov r8b, bl
mov edx, r15d
mov r14, qword [rsp + 0xb0]
mov rcx, r14
call fcn.10012f5d8
mov edi, eax
xor r15d, r15d
cmp eax, r15d
jge 0x100131658
cmp bl, r15b
jne 0x10013261c
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x100131621
test byte [rcx + 0x1c], 1
je 0x100131621
cmp byte [rcx + 0x19], 3
jb 0x100131621
lea edx, [r15 + 0x32]
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov rax, qword [rsi + 0x50]
mov rcx, qword [r13 + 0x58]
mov rdx, qword [rsp + 0xe8]
movdqu xmm0, xmmword [rax + rdx]
mov r12, qword [rsp + 0x90]
movdqu xmmword [r12 + rcx], xmm0
mov rax, qword [r13 + 0x58]
mov byte [r12 + rax + 0x28], r15b
mov rax, qword [r13 + 0x58]
mov byte [r12 + rax + 0x29], r15b
jmp 0x100131667
mov r12, qword [rsp + 0x90]
lea rbp, [0x1001653b8]
cmp bl, r15b
je 0x100131830
mov byte [rsp + 0x60], r15b
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.10011f638
cmp eax, r15d
jge 0x1001316bd
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x1001316c8
test byte [rcx + 0x1c], 1
je 0x1001316c8
cmp byte [rcx + 0x19], 3
jb 0x1001316c8
mov edx, 0x33
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
jmp 0x1001316c8
cmp byte [rsp + 0x60], r15b
jne 0x1001318c9
lea r8, [rsp + 0x78]
lea rdx, [0x100002954]
mov rcx, r14
call fcn.10009b5b0
mov edi, eax
cmp eax, r15d
jl 0x1001318a6
mov rax, qword [rsi + 0x58]
mov rcx, qword [rsp + 0xa0]
test byte [rcx + rax], 8
je 0x10013181e
mov rbx, r15
mov rbp, r15
lea r9, [rsp + 0x188]
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x290]
mov r15, qword [rsp + 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xor ecx, ecx
cmp eax, ecx
jne 0x10013173d
mov rcx, r15
call fcn.100134ad4
mov edi, eax
xor ecx, ecx
jmp 0x10013174f
mov rbx, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0x290]
mov edi, ecx
cmp edi, ecx
jl 0x1001325fe
lea rdx, [rsp + 0xe0]
mov rcx, r15
call fcn.100134c14
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x1001325e0
mov rcx, qword [rsp + 0x100]
xor edi, edi
cmp rcx, rdi
je 0x100131790
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x100], rdi
lea rdx, [rsp + 0x100]
mov rcx, r14
call fcn.100134eb4
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1001317fd
test byte [rcx + 0x1c], 1
je 0x1001317fd
cmp byte [rcx + 0x19], 4
jb 0x1001317fd
mov r9, r14
mov rax, qword [rsp + 0x100]
cmp rax, rdi
cmovne r9, rax
mov edx, 0x35
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbx
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10012f214
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor r15d, r15d
mov qword [rsp + 0x78], r15
add qword [rsp + 0xd0], rbx
add qword [rsp + 0x110], rbp
mov edx, dword [rsp + 0xc0]
inc edx
mov dword [rsp + 0xc0], edx
jmp 0x100131837
mov edx, dword [rsp + 0xc0]
mov ecx, dword [rsp + 0x88]
inc ecx
mov dword [rsp + 0x88], ecx
add qword [rsp + 0xe8], 0x10
add r12, 0x78
mov qword [rsp + 0x90], r12
mov rax, qword [rsp + 0xa0]
add rax, 4
mov qword [rsp + 0xa0], rax
cmp ecx, dword [rsi + 0x48]
jae 0x100131921
jmp 0x100131413
mov edi, 0x80780013
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x1001318f9
test byte [rcx + 0x1c], 1
je 0x1001318f9
cmp byte [rcx + 0x19], 2
jb 0x1001318f9
mov edx, 0x34
mov r9, r14
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001da24
mov edi, 0x8078015f
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
cmp edx, r15d
je 0x100132422
mov r9b, 1
xor r8d, r8d
mov edx, dword [r13 + 0x50]
mov rcx, qword [r13 + 0x58]
call fcn.10011d718
mov edi, eax
cmp eax, r15d
jl 0x1001327f0
cmp byte [rsi + 0x6c], r15b
jne 0x100131958
cmp byte [rsi + 0x74], r15b
je 0x100131b72
mov r12d, r15d
cmp dword [r13 + 0x50], r15d
jbe 0x100131b72
mov rbp, r15
mov byte [rsp + 0x60], r15b
mov rax, qword [r13 + 0x58]
mov ebx, dword [rax + rbp + 0x10]
cmp byte [rax + rbp + 0x28], r15b
je 0x100131a61
bt ebx, 9
jae 0x100131a61
test bl, 1
jne 0x100131a61
cmp r14, r15
je 0x1001319a9
mov rcx, r14
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xb0], r15
mov ecx, r12d
imul rcx, rcx, 0x78
add rcx, qword [r13 + 0x58]
xor r9d, r9d
lea r8, [rsp + 0xb0]
mov edx, ebx
call fcn.10009c5ec
mov edi, eax
cmp eax, r15d
jl 0x100131b4f
lea rdx, [rsp + 0x60]
mov r14, qword [rsp + 0xb0]
mov rcx, r14
call fcn.1001191b0
cmp eax, r15d
jge 0x100131a36
mov rcx, qword [0x1001653b8]
lea rdx, [0x1001653b8]
cmp rcx, rdx
je 0x100131a2d
test byte [rcx + 0x1c], 1
je 0x100131a2d
cmp byte [rcx + 0x19], 3
jb 0x100131a2d
mov edx, 0x36
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov rcx, qword [0x1001653b8]
mov al, r15b
mov byte [rsp + 0x60], al
jmp 0x100131a41
mov rcx, qword [0x1001653b8]
mov al, byte [rsp + 0x60]
cmp al, r15b
je 0x100131a61
cmp byte [rsi + 0x6c], r15b
jne 0x100131ae3
cmp byte [rsi + 0x74], r15b
je 0x100131a61
test bl, 2
jne 0x100131a61
bt ebx, 0xa
jae 0x100131a77
inc r12d
add rbp, 0x78
cmp r12d, dword [r13 + 0x50]
jae 0x100131b72
jmp 0x100131968
mov edi, 0x8078015a
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x10013250e
test byte [rcx + 0x1c], 1
je 0x100132554
cmp byte [rcx + 0x19], 2
jb 0x100132531
mov edx, 0x38
mov dword [rsp + 0x20], 0x8078015a
mov r9, r14
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov edi, 0x8078014f
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100132577
test byte [rcx + 0x1c], 1
je 0x1001325bd
cmp byte [rcx + 0x19], 2
jb 0x10013259a
mov edx, 0x37
mov dword [rsp + 0x20], 0x8078014f
mov r9, r14
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12d, r15d
mov r14d, dword [rsp + 0xc8]
cmp r14d, r15d
jbe 0x100131d12
mov rbx, qword [rsp + 0x80]
cmp byte [rbx + 0x54], r15b
je 0x100131cce
test byte [rbx + 0x58], 1
jne 0x100131cce
mov ebp, 0x20
mov rcx, rbp
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rdi, rax
cmp rax, r15
je 0x100131cea
mov r8, rbp
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
movdqu xmm5, xmmword [rbx]
movdqu xmmword [rsp + 0x290], xmm5
mov rdx, rdi
lea rcx, [rsp + 0x290]
call fcn.100119a20
mov ebp, eax
cmp eax, r15d
jge 0x100131c52
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100131c3f
test byte [rcx + 0x1c], 1
je 0x100131c3f
cmp byte [rcx + 0x19], 3
jb 0x100131c3f
mov rdx, rbx
lea rcx, [rsp + 0x1c8]
call fcn.10009b2bc
mov edx, 0x39
mov dword [rsp + 0x20], ebp
mov r9, rax
lea r8, [0x100002ea0]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov rcx, rdi
call fcn.100145b04
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x100131cce
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x90]
lea r8, [rsp + 0x88]
mov rdx, rbx
lea rcx, [rsp + 0x120]
call fcn.10013312c
cmp rax, r15
jne 0x100131cca
cmp qword [rsp + 0x120], r15
jne 0x100131caa
mov r8b, 1
mov edx, dword [rsp + 0x130]
lea rcx, [rsp + 0x120]
call fcn.1000b7b28
cmp al, r15b
je 0x100131cdf
mov r9d, dword [rsp + 0x90]
mov r8d, dword [rsp + 0x88]
mov rdx, rbx
lea rcx, [rsp + 0x120]
call fcn.1000b7dd4
mov qword [rax + 0x10], rdi
inc r12d
add rbx, 0x78
cmp r12d, r14d
jae 0x100131d12
jmp 0x100131b8e
mov ecx, 0x8007000e
call fcn.100019658
int3
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
lea rcx, [rsp + 0x120]
call fcn.100132e8c
mov qword [rsp + 0xc0], rax
cmp rax, r15
je 0x100131e2b
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x120]
call fcn.100132ee4
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x290], xmm0
mov rbx, qword [rax + 0x10]
cmp byte [rbx], r15b
je 0x100131d8e
lea rdx, [rbx + 4]
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x90]
lea r8, [rsp + 0x88]
lea rcx, [rsp + 0x120]
call fcn.10013312c
cmp rax, r15
jne 0x100131d9e
cmp qword [rsp + 0xc0], r15
je 0x100131e2b
jmp 0x100131d30
mov rax, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rax, r14
je 0x100131e0a
test byte [rax + 0x1c], 1
je 0x100131e0a
cmp byte [rax + 0x19], 2
jb 0x100131e0a
lea rdx, [rbx + 4]
lea rcx, [rsp + 0x1c8]
call fcn.10009b2bc
mov rbx, rax
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x22c]
call fcn.10009b2bc
mov edx, 0x3a
mov qword [rsp + 0x20], rbx
mov r9, rax
lea r8, [0x100002ea0]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001df38
mov edi, 0x80780159
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbx, r15
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0x60], r15b
lea rcx, [rsp + 0x60]
call fcn.1000a2a08
mov edi, eax
cmp eax, r15d
jl 0x1001327cd
cmp dword [rsi + 8], 2
je 0x100131e60
cmp dword [rsi + 8], 3
jne 0x100131f6f
cmp byte [rsp + 0x60], r15b
jne 0x100131f65
mov rbp, qword [rsp + 0xf0]
cmp rbp, r15
jbe 0x100131f77
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x68]
call fcn.100128fd4
mov edi, eax
cmp eax, r15d
jge 0x100131ef4
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001324ba
test byte [rcx + 0x1c], 1
je 0x1001324f2
cmp byte [rcx + 0x19], 2
jb 0x1001324d6
mov edx, 0x3b
mov r9d, eax
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r10, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp r10, rdi
je 0x100131f48
test byte [r10 + 0x1c], 1
je 0x100131f3e
cmp byte [r10 + 0x19], 4
jb 0x100131f3e
mov edx, 0x3c
mov rbx, qword [rsp + 0xa0]
mov r9, rbx
lea r8, [0x100002ea0]
mov rcx, qword [r10 + 0x10]
call fcn.10001d680
mov r10, qword [0x1001653b8]
jmp 0x100131f85
mov rbx, qword [rsp + 0xa0]
jmp 0x100131f85
mov rbx, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
jmp 0x10013200f
mov rbp, qword [rsp + 0xf0]
jmp 0x100131f77
mov rbp, qword [rsp + 0xf0]
mov r10, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp r10, rdi
je 0x100131fdb
test byte [r10 + 0x1c], 1
je 0x100131fff
cmp byte [r10 + 0x19], 4
jb 0x100131fed
mov edx, 0x3d
mov r12, qword [rsp + 0xe0]
mov qword [rsp + 0x28], r12
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x20], rax
mov rdi, qword [rsp + 0xd0]
mov r9, rdi
lea r8, [0x100002ea0]
mov rcx, qword [r10 + 0x10]
call fcn.10012f02c
mov r10, qword [0x1001653b8]
jmp 0x10013200f
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
jmp 0x10013200f
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
jmp 0x10013200f
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
cmp rbp, r15
jbe 0x1001320a9
mov rcx, rdi
sub rcx, r12
mov r8, qword [rsp + 0x110]
sub rcx, r8
mov r15, qword [rsp + 0x170]
lea rax, [rbx + r15]
add rax, rbp
cmp rcx, rax
jbe 0x1001320b1
lea r14, [0x1001653b8]
cmp r10, r14
je 0x100132088
test byte [r10 + 0x1c], 1
je 0x100132088
cmp byte [r10 + 0x19], 2
jb 0x100132088
mov edx, 0x3e
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r8
mov r9, rdi
lea r8, [0x100002ea0]
mov rcx, qword [r10 + 0x10]
call fcn.10012f0f4
mov edi, 0x80780048
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r15, qword [rsp + 0x170]
xor eax, eax
mov dword [rsp + 0x90], eax
lea r9, [rsp + 0x90]
xor r8d, r8d
lea rdx, [0x100014650]
lea rcx, [0x100014690]
call fcn.1000a42c8
mov edi, eax
xor eax, eax
cmp edi, eax
jge 0x10013213d
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132466
test byte [rcx + 0x1c], 1
je 0x10013249e
cmp byte [rcx + 0x19], 2
jb 0x100132482
lea edx, [rax + 0x3f]
mov r9d, edi
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
cmp rbp, rax
jbe 0x1001321f6
cmp dword [rsp + 0x90], eax
jne 0x1001321f6
mov r10, qword [rsp + 0x180]
mov rcx, r10
sub rcx, r12
mov r8, qword [rsp + 0x110]
sub rcx, r8
mov r9, qword [rsp + 0xd0]
add rcx, r9
lea rax, [rbx + r15]
add rax, rbp
cmp rcx, rax
jbe 0x1001321f6
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001321d5
test byte [rcx + 0x1c], 1
je 0x1001321d5
cmp byte [rcx + 0x19], 2
jb 0x1001321d5
mov edx, 0x40
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r8
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10012f17c
mov edi, 0x80780152
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov dword [rsp + 0x90], 1
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r12, qword [rsp + 0x80]
mov r9, r12
mov r8d, r14d
mov rdx, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x98]
call fcn.100058194
mov edi, eax
xor r15d, r15d
cmp eax, r15d
jge 0x100132290
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132836
test byte [rcx + 0x1c], 1
je 0x10013285e
cmp byte [rcx + 0x19], 2
jb 0x10013284a
lea edx, [r15 + 0x41]
mov r9d, eax
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r9d, dword [rsp + 0x90]
mov dword [r13 + 0x18], r9d
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1001322d0
test byte [rcx + 0x1c], 1
je 0x1001322d0
cmp byte [rcx + 0x19], 4
jb 0x1001322d0
mov edx, 0x42
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov ecx, dword [rsi + 8]
call fcn.1000a31e8
test al, 0x10
jne 0x100132308
cmp byte [rsi + 0x68], r15b
jne 0x1001322e8
cmp byte [rsi + 0x69], r15b
je 0x100132308
mov edi, 0x80780037
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
movzx eax, word [rsi + 0x68]
mov word [r13 + 0x60], ax
lea rcx, [r13 + 0x62]
call fcn.1000a2a08
mov edi, eax
cmp eax, r15d
jl 0x1001329b9
lea rcx, [r13 + 0x68]
call fcn.1000a06f0
mov edi, eax
cmp eax, r15d
jl 0x10013299e
lea rcx, [rsp + 0x198]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx r11d, word [rsp + 0x198]
mov word [r13 + 0x70], r11w
mov al, byte [rsi + 0x6a]
mov byte [r13 + 0x72], al
cmp r14d, r15d
jne 0x100132379
lea r8, [0x1000146b0]
mov edx, 0x672
lea rcx, [0x100014530]
call fcn.100099ad8
cmp r12, r15
jne 0x100132396
lea r8, [0x1000146c0]
mov edx, 0x673
lea rcx, [0x100014530]
call fcn.100099ad8
mov rcx, qword [r13 + 0x80]
cmp rcx, r15
je 0x1001323af
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [r13 + 0x80], r15
mov al, byte [rsi + 0x6c]
mov byte [rsp + 0x20], al
mov r9b, byte [rsi + 0x74]
mov r8, r12
mov edx, r14d
mov rbp, qword [rsp + 0x70]
mov rcx, rbp
call fcn.10010ecec
mov edi, eax
cmp eax, r15d
jl 0x100132ad7
lea rdx, [r13 + 0x80]
mov rcx, rbp
call fcn.100110f34
mov edi, eax
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov edi, 0x80780014
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132ae8
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, rax
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, rdx
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov rbp, rax
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132ae8
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
mov rcx, qword [rsp + 0x108]
call fcn.10010aed8
lea rcx, [rsp + 0x120]
call fcn.100132e8c
mov qword [rsp + 0xc0], rax
test rax, rax
je 0x100132b4f
xor ebp, ebp
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x120]
call fcn.100132ee4
mov rbx, qword [rax + 0x10]
mov rcx, rbx
call fcn.100145b04
cmp rbx, rbp
je 0x100132b40
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp qword [rsp + 0xc0], rbp
jne 0x100132b11
mov rbp, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xb0]
xor eax, eax
cmp rcx, rax
je 0x100132b64
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x100132b7a
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
cmp r13, rax
je 0x100132b8a
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor r13d, r13d
cmp r15, r13
je 0x100132b9b
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp qword [rsp + 0xd8], r13
je 0x100132bba
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xd8]
call fcn.1001449c4
cmp r12, r13
je 0x100132bd4
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x80]
call fcn.1001449c4
cmp rsi, r13
je 0x100132bea
mov rcx, rsi
call fcn.100144b7c
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp rbp, r13
je 0x100132c19
mov rcx, qword [rbp]
cmp rcx, r13
je 0x100132c02
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rbp], r13
mov rcx, qword [rbp + 8]
cmp rcx, r13
je 0x100132c11
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, rbp
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp edi, r13d
jge 0x100132c5b
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x100132c4e
test byte [rcx + 0x1c], 1
je 0x100132c4e
cmp byte [rcx + 0x19], 2
jb 0x100132c4e
mov edx, 0x43
mov r9d, edi
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rcx, qword [rsp + 0xa8]
call fcn.10012c8fc
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x100132c89
test byte [rcx + 0x1c], 1
je 0x100132c89
cmp byte [rcx + 0x19], 4
jb 0x100132c89
mov edx, 0x44
lea r8, [0x100002ea0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7b8
nop
mov ebp, dword [rsp + 0x150]
inc ebp
mov dword [rsp + 0x150], ebp
mov rcx, qword [rsp + 0x120]
cmp rcx, r13
je 0x100132dd1
mov r14d, r13d
mov eax, dword [rsp + 0x130]
cmp eax, r13d
jbe 0x100132dd1
mov r15, r13
mov rsi, qword [rsp + 0x158]
mov r12, qword [rsp + 0x128]
xor ebx, ebx
mov r13, qword [rcx + r15]
cmp r13, rbx
je 0x100132dbc
mov rdx, r13
lea rcx, [r13 + 0x18]
mov r13, qword [rcx]
mov rax, qword [rsp + 0x160]
mov qword [rcx], rax
mov qword [rsp + 0x160], rdx
cmp r12, rbx
ja 0x100132d19
lea r8, [0x100005be8]
mov edx, 0xa14
lea rcx, [0x100005a08]
call fcn.100099ad8
dec r12
mov qword [rsp + 0x128], r12
cmp r12, qword [rsp + 0x148]
jae 0x100132d68
cmp ebp, ebx
jne 0x100132d68
mov rdx, r12
lea rcx, [rsp + 0x120]
call fcn.1000b7d50
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.1000b7c38
mov rsi, qword [rsp + 0x158]
mov ebp, dword [rsp + 0x150]
mov r12, qword [rsp + 0x128]
cmp r12, rbx
jne 0x100132da4
mov qword [rsp + 0x160], rbx
cmp rsi, rbx
je 0x100132da4
xor ebp, ebp
mov rbx, qword [rsi]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_free]
mov rsi, rbx
cmp rbx, rbp
jne 0x100132d7c
mov rsi, rbp
mov qword [rsp + 0x158], rbp
mov ebp, dword [rsp + 0x150]
xor ebx, ebx
cmp r13, rbx
jne 0x100132cdf
mov eax, dword [rsp + 0x130]
mov rcx, qword [rsp + 0x120]
inc r14d
add r15, 8
cmp r14d, eax
jb 0x100132cd2
xor r13d, r13d
jmp 0x100132dd9
mov rsi, qword [rsp + 0x158]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], r13
cmp ebp, r13d
jne 0x100132e23
xor edx, edx
lea rcx, [rsp + 0x120]
call fcn.1000b7d50
mov edx, eax
xor r8d, r8d
lea rcx, [rsp + 0x120]
call fcn.1000b7b28
mov rsi, qword [rsp + 0x158]
mov ebp, dword [rsp + 0x150]
cmp rsi, r13
je 0x100132e3c
mov rbx, qword [rsi]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_free]
mov rsi, rbx
cmp rbx, r13
jne 0x100132e28
cmp ebp, r13d
ja 0x100132e59
lea r8, [0x100005bd0]
mov edx, 0x8d3
lea rcx, [0x100005a08]
call fcn.100099ad8
mov eax, edi
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.10014e480
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret