Function at 0x14018f2c0
Capabilities:
Manipulate console buffer

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3fd0]
mov eax, 0x40d0
call fcn.140344150
sub rsp, rax
mov rax, qword [0x140526598]
xor rax, rsp
mov qword [rbp + 0x3fc0], rax
mov r13, rcx
mov qword [rbp - 0x68], rdx
xor ecx, ecx
lea r12, [rbp - 0x40]
mov edi, ecx
mov dword [rsp + 0x34], ecx
mov edx, 0xffffffff
mov qword [rsp + 0x40], r12
movzx eax, byte [r13 + 0x11c]
mov r15, r9
mov ebx, dword [r13 + 0x118]
movzx esi, byte [r13 + 0x11d]
movzx r14d, byte [r13 + 0x11e]
mov dword [r9], ecx
mov rcx, qword [0x14053c530]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x38], ebx
mov byte [rsp + 0x31], sil
mov byte [rsp + 0x30], r14b
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140190770
xor edx, edx
mov r11d, 0x2000
mov dword [rsp + 0x54], edx
mov eax, edx
mov qword [rsp + 0x60], rdx
mov rcx, qword [rbp - 0x68]
add rax, rax
cmp dword [0x14052d32c], 0
movups xmm0, xmmword [rcx + rax*8]
movups xmmword [rsp + 0x68], xmm0
mov eax, dword [rsp + 0x68]
jne 0x14018f4f4
test eax, eax
je 0x14018f4f4
mov rbx, qword [rsp + 0x70]
mov r9d, eax
mov dword [rsp + 0x28], edx
mov r8, rbx
mov qword [rsp + 0x20], rdx
mov ecx, 0xfde9
xor edx, edx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
test eax, eax
je 0x140190680
lea r12d, [rax*2 + 2]
xor edx, edx
mov eax, edx
mov dword [rsp + 0x3c], r12d
mov esi, 0x2000
cmp r12d, esi
seta al
mov dword [rsp + 0x34], eax
jbe 0x14018f407
mov ecx, r12d
test r12d, r12d
je 0x14018f3fd
call qword [fcn.140369f54]
mov qword [rsp + 0x40], rax
jmp 0x14018f40c
mov rax, rdx
mov qword [rsp + 0x40], rdx
jmp 0x14018f40c
mov rax, qword [rsp + 0x40]
mov r9d, dword [rsp + 0x68]
mov r8, rbx
mov dword [rsp + 0x28], edi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x140190658
mov r12, qword [rsp + 0x40]
xor r14d, r14d
mov esi, r14d
mov r11d, 0x2000
nop dword [rax]
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018f493
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x78]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018f48d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018f450
movzx r14d, byte [rsp + 0x30]
cmp dword [rsp + 0x3c], r11d
jbe 0x14018f4e2
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
movzx esi, byte [rsp + 0x31]
xor edx, edx
mov dword [rsp + 0x34], edx
mov r11d, 0x2000
mov edi, edx
mov dword [rax], ebx
lea rax, [rbp - 0x40]
mov ebx, dword [rsp + 0x38]
mov qword [rsp + 0x40], rax
jmp 0x14018f7a9
mov ebx, dword [rsp + 0x38]
xor edx, edx
movzx esi, byte [rsp + 0x31]
mov edi, edx
jmp 0x14018f7a9
mov dword [rsp + 0x3c], edx
mov ecx, edx
test eax, eax
je 0x14018f7a9
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rsp + 0x70]
mov r10d, dword [rsp + 0x48]
mov eax, ecx
movzx edx, byte [rax + rdx]
movzx eax, dl
test r10b, r10b
jne 0x14018f567
not al
movzx eax, al
bsr r8d, eax
je 0x14018f5a5
cmp r8d, 7
jne 0x14018f53f
movzx r9d, dl
jmp 0x14018f5ab
cmp r8d, 5
ja 0x14018f5a5
mov ecx, 8
movzx eax, dl
sub ecx, r8d
mov r9d, 0xff
sar r9d, cl
mov r10d, 6
and r9d, eax
sub r10b, r8b
jmp 0x14018f581
and al, 0xc0
cmp al, 0x80
jne 0x14018f59a
movzx r9d, dl
mov eax, ebx
and r9d, 0x3f
shl eax, 6
add r10b, 0xff
or r9d, eax
mov ecx, dword [rsp + 0x3c]
mov dword [rsp + 0x38], r9d
mov dword [rsp + 0x48], r10d
test r10b, r10b
jne 0x14018f78d
jmp 0x14018f5b0
dec ecx
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x3c], ecx
mov r9d, 0xfffd
mov dword [rsp + 0x38], r9d
test r14b, r14b
jne 0x14018f5ea
cmp r9d, 0x1b
je 0x14018f5dd
cmp r9d, 0x9b
jne 0x14018f96e
mov r14b, 4
mov byte [r13 + 0x11f], 0
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
mov r14b, 2
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
cmp r14b, 2
jne 0x14018fbff
lea eax, [r9 - 0x1b]
cmp eax, 0x48
ja case.0x14018f61a.28
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x190794]
mov ecx, dword [rdx + rax*4 + 0x190778]
add rcx, rdx
jmp rcx
mov r14b, 4
mov byte [r13 + 0x11f], 0
jmp 0x14018f784
mov r14b, 8
jmp 0x14018f784
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018f683
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x7c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018f67d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018f640
cmp dword [rsp + 0x34], r14d
je 0x14018f6b5
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
lea r12, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
mov edi, r14d
movzx esi, word [reloc.WS2_32.dll_getsockopt]
mov dword [rsp + 0x4c], r14d
cmp dword [r15], r14d
jne 0x14018f77f
mov rcx, qword [r13 + 0x110]
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
test eax, eax
je 0x14018f776
mov rcx, qword [r13 + 0x110]
mov ebx, r14d
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
test eax, eax
je 0x14018f776
nop dword [rax + rax]
mov rcx, qword [r13 + 0x110]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
je 0x14018f776
movsx eax, word [rbp - 0x60]
mov edx, 0x20
movsx r8d, word [rbp - 0x5e]
mov r9d, ebx
mov rcx, qword [r13 + 0x110]
imul r8d, eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterW]
test eax, eax
je 0x14018f76b
mov r8d, dword [rsp + 0x50]
lea rax, [rsp + 0x50]
mov rcx, qword [r13 + 0x110]
mov r9d, ebx
movzx edx, si
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
test eax, eax
jne 0x14018f7d3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
je 0x14018f700
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
movzx esi, byte [rsp + 0x31]
mov byte [rsp + 0x30], r14b
mov ecx, dword [rsp + 0x3c]
mov ebx, dword [rsp + 0x38]
xor edx, edx
inc ecx
mov r11d, 0x2000
mov dword [rsp + 0x3c], ecx
cmp ecx, dword [rsp + 0x68]
jb 0x14018f510
mov ecx, dword [rsp + 0x54]
mov rax, qword [rsp + 0x60]
inc ecx
mov r12, qword [rsp + 0x40]
inc rax
mov dword [rsp + 0x54], ecx
mov qword [rsp + 0x60], rax
cmp ecx, 1
jae 0x140190689
jmp 0x14018f372
movsx eax, word [rbp - 0x60]
mov ecx, r14d
movsx edx, word [rbp - 0x50]
mov dword [0x14052d3b0], eax
movsx eax, word [rbp - 0x54]
sub edx, eax
mov dword [0x14052d3a0], r14d
movsx eax, word [rbp - 0x5a]
inc edx
sub eax, edx
mov dword [0x14052d3a4], edx
inc eax
test eax, eax
jle 0x14018f80d
mov dword [0x14052d3a0], eax
mov ecx, eax
movsx r8d, word [rbp - 0x5e]
lea eax, [rdx + rcx]
cmp eax, r8d
jle 0x14018f825
mov ecx, r8d
sub ecx, edx
mov dword [0x14052d3a0], ecx
test ecx, ecx
jns 0x14018f77f
mov dword [0x14052d3a0], r14d
jmp 0x14018f77f
xor r14d, r14d
mov esi, r14d
nop
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018f882
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x80]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018f87c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018f840
cmp dword [rsp + 0x34], r14d
je 0x14018f8b4
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
lea r12, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
mov r8, r15
mov dl, 1
mov rcx, r13
mov edi, r14d
call fcn.14018f030
jmp 0x14018f77f
xor r14d, r14d
mov esi, r14d
nop
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018f912
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x7c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018f90c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018f8d0
cmp dword [rsp + 0x34], r14d
je 0x14018f944
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
lea r12, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
mov r8, r15
mov dl, 1
mov rcx, r13
mov edi, r14d
call fcn.14018f160
jmp 0x14018f77f
xor r14b, r14b
lea eax, [r9 - 0x40]
mov byte [rsp + 0x30], r14b
cmp eax, 0x1f
jbe case.0x14018f61a.27
cmp r9d, 0xffff
jbe 0x14018f982
mov eax, 0xfffd
mov dword [rsp + 0x38], eax
jmp 0x14018f9a3
cmp r9d, 0xa
je 0x14018fb05
cmp r9d, 0xd
je 0x14018fa5f
cmp r9d, 0xffff
ja case.0x14018f61a.27
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 1
jae 0x14018fa41
xor r14d, r14d
mov esi, r14d
nop dword [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018fa02
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x78]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018f9fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018f9c0
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14018fa3d
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14018fa3f
xor eax, eax
mov edi, eax
mov ebx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x3c]
mov eax, edi
inc edi
xor sil, sil
mov byte [rsp + 0x31], sil
mov word [rbp + rax*2 - 0x40], bx
jmp 0x14018f791
cmp sil, 0xa
je 0x14018fbf1
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 1
jae 0x14018fbe7
xor r14d, r14d
mov esi, r14d
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018fac3
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x70]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018fabd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018fa81
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14018fbde
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14018fbe0
cmp sil, 0xd
je 0x14018fa69
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 2
jae 0x14018fbb6
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], r14d
jne 0x14018fb72
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x74]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14018fb6c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14018fb30
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14018fbad
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14018fbaf
xor eax, eax
mov r9d, dword [rsp + 0x38]
mov edi, eax
mov eax, edi
mov ecx, reloc.WS2_32.dll_listen
inc edi
mov byte [rsp + 0x31], r9b
movzx esi, r9b
mov word [rbp + rax*2 - 0x40], cx
mov ecx, 0xa
mov word [rbp + rdi*2 - 0x40], cx
inc edi
jmp case.0x14018f61a.27
xor eax, eax
mov r9d, dword [rsp + 0x38]
mov edi, eax
mov eax, edi
inc edi
mov word [rbp + rax*2 - 0x40], r9w
movzx esi, r9b
mov byte [rsp + 0x31], r9b
jmp case.0x14018f61a.27
test r14b, 4
je 0x1401905ac
test r14b, 0x10
jne 0x14019058e
lea eax, [r9 - 0x30]
cmp eax, 9
ja 0x14018fcbc
movzx eax, byte [r13 + 0x11f]
mov ebx, dword [rsp + 0x38]
test r14b, 0x20
jne 0x14018fc6f
cmp al, 4
jb 0x14018fc44
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14018f791
or r14b, 0x20
inc al
mov byte [rsp + 0x30], r14b
movzx ecx, al
lea eax, [r9 - 0x30]
mov byte [r13 + 0x11f], cl
mov word [r13 + rcx*2 + 0x11e], ax
mov ecx, dword [rsp + 0x3c]
jmp 0x14018f791
movzx eax, al
lea rdx, [rax*2]
movzx eax, word [rdx + r13 + 0x11e]
lea ecx, [rax + rax*4]
add ecx, ecx
cmp ecx, 0xffff
jbe 0x14018fca2
mov ecx, dword [rsp + 0x3c]
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14018f791
sub cx, 0x30
add cx, r9w
mov word [rdx + r13 + 0x11e], cx
mov ecx, dword [rsp + 0x3c]
jmp 0x14018f791
cmp r9d, 0x3b
jne 0x14018fd10
test r14b, 0x20
je 0x14018fcd6
and r14b, 0xdf
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
movzx eax, byte [r13 + 0x11f]
mov ebx, dword [rsp + 0x38]
cmp al, 4
jb 0x14018fcf4
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14018f791
inc al
movzx eax, al
xor edx, edx
mov byte [r13 + 0x11f], al
mov word [r13 + rax*2 + 0x11e], dx
jmp 0x14018f793
cmp r9d, 0x3f
jne 0x14018fd38
test r14b, 0x20
jne 0x14018fd2a
cmp byte [r13 + 0x11f], 0
je 0x14018f78d
or r14b, 0x10
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
lea eax, [r9 - 0x40]
cmp eax, 0x3e
ja 0x14018fd2a
movzx edx, byte [r13 + 0x11f]
test dl, dl
jne 0x14018fd53
cmp r9d, 0x5b
je 0x14018fd2a
lea eax, [r9 - 0x41]
cmp eax, 0x34
ja case.0x14018fd7b.73
lea r8, [0x140000000]
movzx eax, byte [r8 + rax + 0x190820]
mov ecx, dword [r8 + rax*4 + 0x1907e0]
add rcx, r8
jmp rcx
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14018fd81
cmp dword [rsp + 0x34], 0
je 0x14018fdc4
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14018fddf
movzx r9d, word [r13 + 0x120]
jmp 0x14018fde5
mov r9d, 1
neg r9d
mov r8b, 1
xor edx, edx
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], 1
mov rcx, r13
call fcn.14018e880
movzx esi, byte [rsp + 0x31]
mov ebx, dword [rsp + 0x38]
xor edx, edx
mov ecx, dword [rsp + 0x3c]
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14018f793
xor eax, eax
mov esi, eax
nop
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14018fe20
cmp dword [rsp + 0x34], 0
je 0x14018fe63
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14018fe81
movzx r9d, word [r13 + 0x120]
jmp 0x14018fde8
mov r9d, 1
jmp 0x14018fde8
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14018fe90
cmp dword [rsp + 0x34], 0
je 0x14018fed3
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14018fef7
movzx edx, word [r13 + 0x120]
xor r9d, r9d
mov r8b, 1
jmp 0x14018fded
mov edx, 1
xor r9d, r9d
movzx r8d, dl
jmp 0x14018fded
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14018ff10
cmp dword [rsp + 0x34], 0
je 0x14018ff53
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14018ff79
movzx edx, word [r13 + 0x120]
mov r8b, 1
neg edx
xor r9d, r9d
jmp 0x14018fded
mov edx, 1
mov r8b, 1
neg edx
xor r9d, r9d
jmp 0x14018fded
xor eax, eax
mov esi, eax
nop
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14018ff90
cmp dword [rsp + 0x34], 0
je 0x14018ffd3
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14018fff4
movzx r9d, word [r13 + 0x120]
xor r8d, r8d
jmp 0x14018fdeb
mov r9d, 1
xor r8d, r8d
jmp 0x14018fdeb
xor eax, eax
mov esi, eax
nop word [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x140190010
cmp dword [rsp + 0x34], 0
je 0x140190053
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x140190077
movzx r9d, word [r13 + 0x120]
neg r9d
xor r8d, r8d
jmp 0x14018fdeb
mov r9d, 1
neg r9d
xor r8d, r8d
jmp 0x14018fdeb
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x140190090
cmp dword [rsp + 0x34], 0
je 0x1401900d3
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
cmp byte [r13 + 0x11f], 1
mov edi, ebx
mov dword [rsp + 0x34], ebx
jb 0x140190102
movzx eax, word [r13 + 0x120]
test ax, ax
je 0x140190102
movzx edx, ax
xor r9d, r9d
dec edx
xor r8d, r8d
jmp 0x14018fded
xor r9d, r9d
mov edx, ebx
xor r8d, r8d
jmp 0x14018fded
xor ecx, ecx
mov esi, ecx
nop dword [rax]
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r15], 0
jne 0x140190166
mov eax, esi
lea r9, [rsp + 0x58]
mov qword [rsp + 0x20], rcx
mov r8d, ebx
mov rcx, qword [r13 + 0x110]
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x14019015e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov r11d, 0x2000
xor ecx, ecx
add esi, ebx
cmp esi, edi
jb 0x140190120
cmp dword [rsp + 0x34], 0
je 0x140190184
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
movzx ecx, byte [r13 + 0x11f]
xor ebx, ebx
mov dword [rsp + 0x34], ebx
mov edi, ebx
cmp cl, 1
jb 0x1401901af
movzx eax, word [r13 + 0x120]
test ax, ax
je 0x1401901af
movzx r9d, ax
dec r9d
jmp 0x1401901b2
mov r9d, ebx
cmp cl, 2
jb 0x1401901da
movzx eax, word [r13 + 0x122]
test ax, ax
je 0x1401901da
movzx edx, ax
dec edx
mov qword [rsp + 0x28], r15
xor r8d, r8d
mov byte [rsp + 0x20], bl
jmp 0x14018fdf7
mov qword [rsp + 0x28], r15
mov edx, ebx
mov byte [rsp + 0x20], bl
xor r8d, r8d
jmp 0x14018fdf7
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x1401901f1
cmp dword [rsp + 0x34], 0
je 0x140190234
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x140190269
movzx edx, word [r13 + 0x120]
cmp edx, 2
ja 0x14018fdff
mov r9, r15
mov r8b, 1
mov rcx, r13
call fcn.14018ea00
jmp 0x14018fdff
mov edx, ebx
mov r9, r15
mov r8b, 1
mov rcx, r13
call fcn.14018ea00
jmp 0x14018fdff
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x140190282
cmp dword [rsp + 0x34], 0
je 0x1401902c5
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x1401902fa
movzx edx, word [r13 + 0x120]
cmp edx, 2
ja 0x14018fdff
mov r9, r15
xor r8d, r8d
mov rcx, r13
call fcn.14018ea00
jmp 0x14018fdff
mov edx, ebx
mov r9, r15
xor r8d, r8d
mov rcx, r13
call fcn.14018ea00
jmp 0x14018fdff
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x140190313
cmp dword [rsp + 0x34], 0
je 0x140190356
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor ebx, ebx
mov rdx, r15
mov rcx, r13
mov edi, ebx
call fcn.14018ecc0
mov dword [rsp + 0x34], ebx
jmp 0x14018fdff
xor r14d, r14d
mov esi, r14d
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x140190374
cmp dword [rsp + 0x34], r14d
je 0x1401903b7
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov r8, r15
xor edx, edx
mov rcx, r13
mov edi, r14d
call fcn.14018f030
movzx esi, byte [rsp + 0x31]
xor edx, edx
mov ebx, dword [rsp + 0x38]
xor r14b, r14b
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x34], edx
jmp 0x14018f793
xor eax, eax
mov esi, eax
nop dword [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x1401903f0
cmp dword [rsp + 0x34], 0
je 0x140190433
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor edx, edx
mov edi, edx
mov dword [rsp + 0x34], edx
cmp dword [r15], edx
jne 0x140190471
test dword [r13 + 0x58], 0x4000000
je 0x140190471
movsx r9d, word [r13 + 0x12a]
xor r8d, r8d
movsx edx, word [r13 + 0x128]
mov rcx, r13
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], dil
call fcn.14018e880
xor edx, edx
movzx esi, byte [rsp + 0x31]
xor r14b, r14b
mov ebx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
jmp 0x14018f793
cmp dl, 1
jne case.0x14018fd7b.73
cmp word [r13 + 0x120], 0x19
jne case.0x14018fd7b.73
xor r14d, r14d
mov esi, r14d
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x1401904b0
cmp dword [rsp + 0x34], r14d
je 0x1401904f3
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
xor edx, edx
mov r8, r15
mov rcx, r13
mov edi, r14d
call fcn.14018f240
movzx esi, byte [rsp + 0x31]
xor edx, edx
mov ebx, dword [rsp + 0x38]
xor r14b, r14b
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x34], edx
jmp 0x14018f793
cmp dl, 1
jne case.0x14018fd7b.73
cmp word [r13 + 0x120], 0x19
jne case.0x14018fd7b.73
xor r14d, r14d
mov esi, r14d
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r15
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r12 + rax*2]
mov r8d, ebx
call fcn.14018e830
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x140190541
cmp dword [rsp + 0x34], r14d
je 0x140190584
mov rcx, r12
call fcn.14018c1f0
lea r12, [rbp - 0x40]
mov qword [rsp + 0x40], r12
mov edx, 1
jmp 0x1401904f5
mov ebx, dword [rsp + 0x38]
lea eax, [r9 - 0x40]
cmp eax, 0x3e
ja 0x14018f791
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14018f791
test r14b, 8
je 0x140190770
test r14b, 0x40
je 0x1401905ff
test r14b, r14b
js 0x1401905f1
cmp r9d, 0x22
jne 0x1401905d5
and r14b, 0xbf
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
mov ebx, dword [rsp + 0x38]
cmp r9d, 0x5c
jne 0x14018f791
or r14b, 0x80
mov byte [rsp + 0x30], r14b
jmp 0x14018f791
and r14b, 0x7f
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
cmp r9d, 7
je 0x14019064b
cmp r9d, 0x5c
jne 0x14019061f
test r14b, 2
jne 0x14019064b
and r14b, 0xfd
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
cmp r9d, 0x1b
jne 0x140190633
or r14b, 2
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
cmp r9d, 0x22
jne 0x140190611
and r14b, 0x3d
or r14b, 0x40
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14018f78d
cmp r12d, esi
jbe 0x14019067b
call fcn.140369a80
mov r12, qword [rsp + 0x40]
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
mov dword [rax], ebx
jmp 0x140190680
mov r12, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
xor r14d, r14d
mov eax, 0x2000
mov esi, r14d
mov ebx, edi
sub ebx, esi
cmp ebx, eax
cmova ebx, eax
cmp dword [r15], r14d
jne 0x1401906d4
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x58]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r12 + rax*2]
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x1401906cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15], eax
mov eax, 0x2000
add esi, ebx
cmp esi, edi
jb 0x140190694
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x1401906fe
call fcn.140369a80
mov rcx, r12
mov ebx, dword [rax]
call qword [fcn.140369ab4]
call fcn.140369a80
mov dword [rax], ebx
mov eax, dword [rsp + 0x48]
xor r8d, r8d
mov byte [r13 + 0x11c], al
mov eax, dword [rsp + 0x38]
mov dword [r13 + 0x118], eax
movzx eax, byte [rsp + 0x31]
lea edx, [r8 + 1]
mov byte [r13 + 0x11d], al
mov byte [r13 + 0x11e], r14b
mov rcx, qword [0x14053c530]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x140190770
mov eax, dword [r15]
neg eax
sbb eax, eax
mov rcx, qword [rbp + 0x3fc0]
xor rcx, rsp
call fcn.140343400
mov rbx, qword [rsp + 0x4120]
add rsp, 0x40d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14036c2ac
int3