Function at 0x1001300a8
Capabilities:
Encode data using base64
Get disk size
Get system information on windows

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2b0
mov qword [rsp + 0x190], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov dword [rsp + 0x90], r9d
mov rdi, r8
mov rbx, rdx
mov rbp, rcx
mov qword [rsp + 0xf8], rcx
mov r15, qword [rsp + 0x310]
mov qword [rsp + 0x290], r15
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x108], rax
mov r13, qword [rsp + 0x330]
mov qword [rsp + 0xa8], r13
xor esi, esi
mov r14d, esi
mov dword [rsp + 0x88], esi
lea rax, [0x1001653b8]
mov rcx, qword [0x1001653b8]
cmp rcx, rax
je 0x100130176
test byte [rcx + 0x1c], 1
je 0x100130176
cmp byte [rcx + 0x19], 4
jb 0x100130176
lea edx, [rsi + 0x24]
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x100], rsi
mov dword [rsp + 0xc0], esi
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0xd8], rsi
mov dword [rsp + 0x98], esi
mov r12, rsi
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0xb8], esi
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x60], sil
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rsi
mov dword [rsp + 0x130], 0x11
mov eax, 0xffffffff
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rsi
mov dword [rsp + 0x150], esi
mov dword [rsp + 0x154], 0xa
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rsi
movss xmm0, dword [0x1000178b0]
movss dword [rsp + 0x134], xmm0
movss xmm1, dword [0x1000178ac]
movss dword [rsp + 0x138], xmm1
movss xmm0, dword [0x1000178a8]
movss dword [rsp + 0x13c], xmm0
lea rcx, [rsp + 0x120]
call fcn.1000ae7d8
nop
mov rcx, r13
call fcn.10012c9a0
movdqu xmm5, xmmword [rbx]
movdqu xmmword [r13], xmm5
mov ebx, 0x98
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rsi, rax
xor eax, eax
cmp rsi, rax
jne 0x1001302d1
mov edi, 0x8007000e
mov rbp, rax
mov r13, r12
mov r15, r12
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r8, rbx
xor edx, edx
mov rcx, rsi
call sub.msvcrt.dll_memset
mov rdx, rsi
mov rcx, rdi
call fcn.100145894
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132b65
lea rdx, [r13 + 0x10]
xor r8d, r8d
mov rcx, qword [rsi]
call fcn.10009bac4
mov edi, eax
xor edx, edx
cmp eax, edx
jl 0x100132b4f
mov eax, dword [rsi + 8]
mov dword [r13 + 0x1c], eax
mov al, byte [rsi + 0x6b]
mov byte [r13 + 0x73], al
mov eax, dword [rsi + 0x70]
mov dword [r13 + 0x74], eax
mov al, byte [rsi + 0x74]
mov byte [r13 + 0x78], al
mov eax, dword [rsi + 0x90]
mov dword [r13 + 0x88], eax
mov rcx, qword [rsi + 0x10]
cmp rcx, rdx
jne 0x100130360
mov edi, 0x8078000c
mov rbp, rdx
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
lea rdx, [r13 + 0x20]
xor r8d, r8d
call fcn.10009bac4
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132b39
lea ecx, [rax + 0x20]
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor edi, edi
cmp rax, rdi
je 0x100130396
mov rcx, rax
call fcn.10010f160
mov qword [rsp + 0x70], rax
jmp 0x10013039e
mov rax, rdi
mov qword [rsp + 0x70], rax
cmp rax, rdi
jne 0x1001303c3
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
cmp qword [rsi + 0x50], rdi
je 0x10013089a
cmp qword [rsi + 0x58], rdi
je 0x10013089a
cmp qword [rsi + 0x60], rdi
je 0x10013089a
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100130420
test byte [rcx + 0x1c], 1
je 0x100130420
cmp byte [rcx + 0x19], 4
jb 0x100130420
mov edx, 0x25
mov r9d, dword [rsi + 0x48]
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rcx, qword [0x1001653b8]
cmp qword [rsi + 0x50], rdi
je 0x100130842
cmp qword [rsi + 0x58], rdi
je 0x100130842
cmp qword [rsi + 0x60], rdi
je 0x100130842
cmp qword [rsi + 0x80], rdi
je 0x100130466
lea r8, [0x100014538]
mov edx, 0x2e6
lea rcx, [0x1000144a0]
call fcn.10009a050
mov rcx, qword [0x1001653b8]
cmp dword [rsi + 0x78], edi
je 0x10013048a
lea r8, [0x100014560]
mov edx, 0x2e7
lea rcx, [0x1000144a0]
call fcn.10009a050
mov rcx, qword [0x1001653b8]
cmp qword [rsi + 0x80], rdi
jne 0x1001307ea
cmp dword [rsi + 0x78], edi
jne 0x1001307ea
mov rax, qword [rbp]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x98]
mov rcx, rbp
call qword [rax + 0x40]
mov edi, eax
xor r13d, r13d
cmp eax, r13d
jl 0x100132b21
mov ebp, dword [rsi + 0x48]
mov dword [rsp + 0xc8], ebp
mov dword [rsp + 0xb8], ebp
mov rax, rbp
imul rax, rax, 0x78
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x10013050a
mov edi, 0x80070216
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov r12, rax
mov qword [rsp + 0x80], rax
cmp rax, r13
jne 0x100130544
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
xor r11d, r11d
cmp dword [rsi + 0x48], r11d
jbe 0x100130b6a
mov r15, r11
mov r8d, dword [rsp + 0x98]
mov ebp, r11d
cmp r8d, r11d
jbe 0x10013070f
mov r12d, r13d
mov r9d, r13d
shl r9, 4
add r9, qword [rsi + 0x50]
mov eax, ebp
imul rax, rax, 0x78
add rax, qword [rsp + 0xd8]
mov rdx, qword [rax]
cmp rdx, qword [r9]
jne 0x1001305a8
mov rdx, qword [rax + 8]
cmp rdx, qword [r9 + 8]
jne 0x1001305a8
mov eax, r11d
jmp 0x1001305ad
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, r11d
je 0x1001305be
inc ebp
cmp ebp, r8d
jb 0x100130583
jmp 0x10013070f
mov rax, qword [0x1001653b8]
lea rcx, [0x1001653b8]
cmp rax, rcx
je 0x10013061d
test byte [rax + 0x1c], 1
je 0x10013061d
cmp byte [rax + 0x19], 4
jb 0x10013061d
mov rdx, r9
lea rcx, [rsp + 0xa0]
call fcn.100044104
or r14d, 1
mov r9, qword [rax]
mov rax, qword [rsi + 0x60]
movzx ecx, byte [r12 + rax]
mov edx, 0x28
mov dword [rsp + 0x20], ecx
lea r8, [0x100002e60]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
test r14b, 1
je 0x100130635
and r14d, 0xfffffffe
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rbx, r12
imul rbx, rbx, 0x78
mov rcx, qword [rsp + 0x80]
add rbx, rcx
mov ecx, ebp
imul rcx, rcx, 0x78
add rcx, qword [rsp + 0xd8]
mov rdx, rbx
call fcn.100145360
mov edi, eax
xor r11d, r11d
cmp eax, r11d
jl 0x10013284e
mov qword [rsp + 0x188], rbx
mov rax, qword [rsi + 0x60]
mov cl, byte [r12 + rax]
mov byte [rbx + 0x54], cl
cmp cl, r11b
je 0x100130707
mov dword [rsp + 0x88], r11d
mov r9b, byte [rbx + 0x58]
and r9b, 1
mov r8d, dword [rbx + 0x58]
shr r8d, 9
and r8b, 1
lea rax, [rsp + 0x88]
mov qword [rsp + 0x30], rax
mov eax, dword [rbx + 0x68]
mov dword [rsp + 0x28], eax
mov rax, qword [rbx + 0x70]
mov qword [rsp + 0x20], rax
mov dl, byte [rsi + 0x74]
mov cl, byte [rsi + 0x6c]
call fcn.10011335c
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x10013282b
mov eax, dword [rsp + 0x88]
or dword [rbx + 0x58], eax
mov ecx, dword [rbx + 0x58]
mov rax, qword [rsi + 0x58]
mov dword [r15 + rax], ecx
lea rcx, [rsp + 0x188]
call fcn.10011352c
mov edi, eax
xor r11d, r11d
cmp eax, r11d
jl 0x100132808
mov r8d, dword [rsp + 0x98]
cmp ebp, r8d
je 0x100130750
inc r13d
add r15, 4
cmp r13d, dword [rsi + 0x48]
jb 0x100130569
mov r15, qword [rsp + 0x290]
mov r13, qword [rsp + 0xa8]
mov ebp, dword [rsp + 0xc8]
mov r12, qword [rsp + 0x80]
lea r14, [0x1001653b8]
jmp 0x100130b79
mov edi, 0x80780089
mov rax, qword [0x1001653b8]
lea rcx, [0x1001653b8]
cmp rax, rcx
je 0x1001307af
test byte [rax + 0x1c], 1
je 0x1001307af
cmp byte [rax + 0x19], 2
jb 0x1001307af
mov edx, r13d
shl rdx, 4
add rdx, qword [rsi + 0x50]
lea rcx, [rsp + 0x290]
call fcn.100044104
or r14d, 2
mov edx, 0x29
mov r9, qword [rax]
lea r8, [0x100002e60]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001db08
test r14b, 2
je 0x1001327e5
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov edi, 0x80070057
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132a06
test byte [rcx + 0x1c], 1
je 0x100132a2e
cmp byte [rcx + 0x19], 2
jb 0x100132a1a
mov edx, 0x27
mov r9d, 0x80070057
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov edi, 0x80004003
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001329ca
test byte [rcx + 0x1c], 1
je 0x1001329f2
cmp byte [rcx + 0x19], 2
jb 0x1001329de
mov edx, 0x26
mov r9d, 0x80004003
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001308d2
test byte [rcx + 0x1c], 1
je 0x1001308d2
cmp byte [rcx + 0x19], 4
jb 0x1001308d2
mov edx, 0x2a
mov r9d, dword [rsi + 0x78]
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rax, qword [rbp]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x98]
mov rcx, rbp
call qword [rax + 0x40]
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132b10
mov dword [rsp + 0x88], eax
mov rax, qword [rbp]
lea rdx, [rsp + 0x88]
mov rcx, rbp
call qword [rax + 0x190]
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132aff
xor r12d, r12d
mov rcx, r12
cmp dword [rsi + 8], 4
je 0x100130930
mov rcx, qword [rsi + 0x10]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x48], r12b
mov byte [rsp + 0x40], r12b
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x38], eax
mov al, byte [rsi + 0x74]
mov byte [rsp + 0x30], al
mov al, byte [rsi + 0x6c]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], rcx
mov r9, qword [rsi + 0x80]
mov r8d, dword [rsi + 0x78]
mov rdx, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x98]
call fcn.100111f34
mov edi, eax
cmp eax, r12d
jl 0x1001324ee
mov ebp, dword [rsp + 0xb8]
mov dword [rsp + 0xc8], ebp
mov dword [rsi + 0x48], ebp
mov rdi, rbp
mov rax, rbp
shl rax, 4
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x1001309e2
mov edi, 0x80070216
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsi + 0x50], rax
cmp rax, r12
jne 0x100130a16
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov eax, dword [rsi + 0x48]
shl rax, 2
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x100130a55
mov edi, 0x80070216
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsi + 0x58], rax
cmp rax, r12
jne 0x100130a89
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov eax, dword [rsi + 0x48]
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x100130ac4
mov edi, 0x80070216
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbx, rax
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsi + 0x60], rax
cmp rax, r12
jne 0x100130afa
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
xor r11d, r11d
cmp ebp, r11d
jbe 0x100130b60
mov r8, r11
mov r9, r11
mov r10, r11
mov r12, qword [rsp + 0x80]
lea rdx, [r12 + 0x58]
mov rcx, qword [rsi + 0x60]
mov al, byte [rdx - 4]
mov byte [r10 + rcx], al
mov rax, qword [rsi + 0x50]
movdqu xmm0, xmmword [rdx - 0x58]
movdqu xmmword [r9 + rax], xmm0
mov rcx, qword [rsi + 0x58]
mov eax, dword [rdx]
mov dword [r8 + rcx], eax
inc r10
add r9, 0x10
add rdx, 0x78
add r8, 4
sub rdi, 1
jne 0x100130b25
jmp 0x100130b79
mov r12, qword [rsp + 0x80]
jmp 0x100130b79
mov r13, qword [rsp + 0xa8]
lea r14, [0x1001653b8]
mov eax, r11d
cmp ebp, r11d
jbe 0x100130b95
lea rcx, [r12 + 0x54]
cmp byte [rcx], r11b
jne 0x100130b95
inc eax
add rcx, 0x78
cmp eax, ebp
jb 0x100130b86
cmp eax, ebp
jne 0x100130bf1
mov edi, 0x80780010
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x10013298e
test byte [rcx + 0x1c], 1
je 0x1001329b6
cmp byte [rcx + 0x19], 2
jb 0x1001329a2
mov edx, 0x2b
mov r9d, 0x80780010
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
cmp dword [rsi + 0x18], r11d
jne 0x100130c10
mov edi, 0x8078005e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov ecx, dword [rsi + 8]
call fcn.1000a35bc
bt eax, 8
jb 0x100130c3d
cmp dword [rsi + 0x18], 1
jbe 0x100130c3d
mov edi, 0x80780060
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov eax, dword [rsi + 0x18]
mov dword [r13 + 0x28], eax
xor edi, edi
cmp qword [rsi + 0x20], rdi
jne 0x100130c65
mov edi, 0x80004003
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov eax, dword [rsi + 0x18]
lea rcx, [rax + rax*4]
shl rcx, 3
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rcx, rax
mov qword [r13 + 0x30], rax
cmp rax, rdi
jne 0x100130c9b
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov eax, dword [rsi + 0x18]
lea r8, [rax + rax*4]
shl r8, 3
xor edx, edx
call sub.msvcrt.dll_memset
cmp dword [rsi + 8], 4
jne 0x100130e31
mov bl, 1
mov dl, bl
mov r14, qword [rsp + 0x108]
mov rcx, r14
call fcn.10010b1d8
mov edi, eax
xor r15d, r15d
cmp eax, r15d
jl 0x100132ae4
mov byte [rsp + 0x60], r15b
lea r8, [rsp + 0x60]
mov dl, bl
mov rcx, qword [rsi + 0x10]
call fcn.10009a26c
mov edi, eax
cmp eax, r15d
jge 0x100130d4f
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132952
test byte [rcx + 0x1c], bl
je 0x10013297a
cmp byte [rcx + 0x19], 2
jb 0x100132966
lea edx, [r15 + 0x2c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsi + 0x10]
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rcx, r14
call fcn.10010b368
cmp byte [rsp + 0x60], r15b
jne 0x100130d7e
mov edi, 0x8078000c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
cmp dword [rsi + 0x18], 1
je 0x100130d9c
lea r8, [0x100014580]
mov edx, 0x3dd
lea rcx, [0x1000144a0]
call fcn.10009a050
mov rcx, qword [rsi + 0x20]
xor r8d, r8d
mov rdx, qword [r13 + 0x30]
mov rcx, qword [rcx]
call fcn.10009bac4
mov edi, eax
cmp eax, r15d
jl 0x100132ac9
mov rdx, qword [r13 + 0x30]
add rdx, 8
mov rcx, qword [rsi + 0x20]
xor r8d, r8d
mov rcx, qword [rcx + 8]
call fcn.10009bac4
mov edi, eax
cmp eax, r15d
jl 0x100132aae
mov rax, qword [r13 + 0x30]
mov qword [rax + 0x10], r15
mov rax, qword [r13 + 0x30]
mov word [rax + 0x18], r15w
mov rax, qword [r13 + 0x30]
mov qword [rax + 0x20], r15
lea rdx, [r13 + 0x38]
xor r8d, r8d
mov rcx, qword [rsi + 0x28]
call fcn.10009bac4
mov edi, eax
cmp eax, r15d
jl 0x100132a93
lea rdx, [r13 + 0x40]
xor r8d, r8d
mov rcx, qword [rsi + 0x30]
call fcn.10009bac4
mov edi, eax
cmp eax, r15d
jl 0x100132a78
jmp 0x100131262
mov r13b, dil
cmp byte [rsi + 0x74], dil
je 0x100130e4d
cmp dword [rsi + 0x78], edi
jne 0x100130e4d
cmp byte [rsi + 0x6c], dil
jne 0x100130e4d
call fcn.10012de78
mov r13b, al
mov r12d, edi
cmp dword [rsi + 0x18], edi
jbe 0x1001310ed
mov rbp, rdi
mov r14d, dword [rsp + 0x90]
xor eax, eax
cmp r12d, eax
jbe 0x100130e92
mov rbx, rax
mov rcx, qword [rsi + 0x20]
mov rdx, qword [rcx + rbp]
mov rcx, qword [rcx + rbx]
call sub.msvcrt.dll__wcsicmp
test eax, eax
je 0x10013106c
inc edi
add rbx, 0x18
cmp edi, r12d
jb 0x100130e6e
mov rcx, qword [rsi + 0x20]
lea rdx, [rsp + 0x290]
mov rcx, qword [rcx + rbp]
call fcn.10009ca78
xor edi, edi
cmp eax, edi
jl 0x1001310c5
mov ebx, edi
cmp dword [rsi + 0x48], edi
jbe 0x100130f95
mov r9, qword [0x1001653b8]
lea rax, [rsp + 0x290]
lea rcx, [0x10000f0f8]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x100130ee8
mov rdx, qword [rax + 8]
cmp rdx, qword [rcx + 8]
jne 0x100130ee8
mov eax, edi
jmp 0x100130eed
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100130f10
lea r8, [0x1000145a0]
mov edx, 0x420
lea rcx, [0x1000144a0]
call fcn.10009a050
mov r9, qword [0x1001653b8]
mov ecx, ebx
mov rax, qword [rsi + 0x60]
cmp byte [rcx + rax], 1
jne 0x100130f8a
shl rcx, 4
add rcx, qword [rsi + 0x50]
lea rax, [rsp + 0x290]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x100130f42
mov rdx, qword [rax + 8]
cmp rdx, qword [rcx + 8]
jne 0x100130f42
mov eax, edi
jmp 0x100130f47
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100130f8a
cmp r13b, dil
je 0x100131094
lea rax, [0x1001653b8]
cmp r9, rax
je 0x100130f8a
test byte [r9 + 0x1c], 1
je 0x100130f8a
cmp byte [r9 + 0x19], 4
jb 0x100130f8a
mov edx, 0x2d
lea r8, [0x100002e60]
mov rcx, qword [r9 + 0x10]
call fcn.10001c854
mov r9, qword [0x1001653b8]
inc ebx
cmp ebx, dword [rsi + 0x48]
jb 0x100130ec3
mov rcx, qword [rsi + 0x20]
mov r8, r15
mov edx, r14d
mov rcx, qword [rcx + rbp]
call fcn.100123e04
mov ecx, 0xffffffff
cmp eax, ecx
je 0x100130fe5
mov ecx, r12d
lea rdx, [rcx + rcx*4]
mov rcx, qword [rsp + 0xa8]
mov rcx, qword [rcx + 0x30]
lea rdx, [rcx + rdx*8]
mov eax, eax
lea rcx, [rax + rax*4]
lea rcx, [r15 + rcx*8]
call fcn.10012c6dc
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x1001327c2
jmp 0x100131058
mov rax, qword [rsp + 0x68]
cmp rax, rdi
je 0x100130ffd
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x68], rdi
mov rax, qword [rsi + 0x20]
lea r8, [rsp + 0x68]
lea rdx, [0x100002934]
mov rcx, qword [rax + rbp]
call fcn.10009bb88
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100131213
mov eax, r12d
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax + 0x30]
lea r8, [rax + rcx*8]
mov rdx, qword [rsi + 0x20]
mov rdx, qword [rdx + rbp + 8]
mov rcx, qword [rsp + 0x68]
call fcn.10012f378
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x10013279f
inc r12d
add rbp, 0x18
cmp r12d, dword [rsi + 0x18]
jae 0x1001310bc
xor edi, edi
jmp 0x100130e64
mov edi, 0x8078005f
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov edi, 0x80780040
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov ebp, dword [rsp + 0xc8]
jmp 0x1001310f5
mov edi, 0x8078000c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r14d, dword [rsp + 0x90]
mov r8, r15
mov edx, r14d
mov rcx, qword [rsi + 0x10]
call fcn.100123e04
mov ecx, 0xffffffff
cmp eax, ecx
jne 0x100131236
mov rax, qword [rsp + 0x68]
xor r15d, r15d
cmp rax, r15
je 0x10013112c
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x68], r15
lea r8, [rsp + 0x68]
lea rdx, [0x100002934]
mov rcx, qword [rsi + 0x10]
call fcn.10009bb88
mov edi, eax
cmp eax, r15d
jl 0x100131213
lea rdx, [rsp + 0x90]
mov r13, qword [rsp + 0x68]
mov rcx, r13
call fcn.10011b7a8
mov edi, eax
cmp eax, r15d
jge 0x1001311c6
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x10013275a
test byte [rcx + 0x1c], 1
je 0x100132788
cmp byte [rcx + 0x19], 2
jb 0x100132771
mov edx, 0x2e
mov dword [rsp + 0x20], eax
mov r9, r13
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov eax, dword [rsp + 0x90]
cmp eax, dword [rsi + 8]
je 0x1001311f5
mov edi, 0x80780011
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
cmp eax, 2
je 0x1001311ff
cmp eax, 3
jne 0x10013124f
mov bl, 1
mov r13, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x108]
jmp 0x100131262
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov bl, byte [rsp + 0x60]
mov r13, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x108]
xor r15d, r15d
jmp 0x100131262
mov bl, r15b
mov r13, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x108]
lea rdx, [r13 + 0x48]
xor r8d, r8d
mov rcx, qword [rsi + 0x40]
call fcn.10009bac4
mov edi, eax
cmp eax, r15d
jl 0x1001328b7
cmp bl, r15b
je 0x100131393
lea rax, [rsp + 0x180]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe8]
mov r8, rsi
mov rdx, r14
mov rcx, qword [rsp + 0xf8]
call fcn.10012fa84
mov edi, eax
cmp eax, r15d
jge 0x10013132e
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132706
test byte [rcx + 0x1c], 1
je 0x10013273e
cmp byte [rcx + 0x19], 2
jb 0x100132722
mov edx, 0x2f
mov r9d, eax
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x10013139a
test byte [rcx + 0x1c], 1
je 0x10013139a
cmp byte [rcx + 0x19], 4
jb 0x10013139a
mov edx, 0x30
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xe8]
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10012f130
jmp 0x10013139a
lea r14, [0x1001653b8]
mov eax, dword [rsi + 0x48]
mov dword [r13 + 0x50], eax
cmp dword [rsi + 8], 1
je 0x1001313b1
cmp dword [rsi + 8], 5
jne 0x10013143f
mov ecx, r15d
cmp ebp, r15d
jbe 0x100131435
mov r12, qword [rsp + 0x80]
lea rax, [r12 + 0x58]
cmp byte [rax - 4], r15b
je 0x1001313d1
test byte [rax], 8
je 0x1001313dd
inc ecx
add rax, 0x78
cmp ecx, ebp
jae 0x100131447
jmp 0x1001313c6
mov edi, 0x80780141
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x100132916
test byte [rcx + 0x1c], 1
je 0x10013293e
cmp byte [rcx + 0x19], 2
jb 0x10013292a
mov edx, 0x31
mov r9d, 0x80780141
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
jmp 0x100131447
mov r12, qword [rsp + 0x80]
mov ecx, dword [rsi + 0x48]
imul rcx, rcx, 0x78
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [r13 + 0x58], rax
cmp rax, r15
jne 0x100131476
mov edi, 0x8007000e
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r8d, dword [rsi + 0x48]
imul r8, r8, 0x78
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov ecx, r15d
mov dword [rsp + 0x88], ecx
cmp dword [rsi + 0x48], r15d
jbe 0x1001324c6
mov rax, r15
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x90], r15
mov qword [rsp + 0xe8], r15
mov r14d, ecx
mov r12d, ecx
add r12, r12
mov rbp, qword [rsi + 0x50]
lea r13, [rbp + r12*8]
mov rdi, qword [rsi + 0x58]
mov r15d, dword [rdi + rax]
mov rax, qword [rsi + 0x60]
mov al, byte [r14 + rax]
mov byte [rsp + 0x60], al
xor eax, eax
mov ebx, eax
cmp ecx, eax
jbe 0x100131514
mov ecx, ebx
shl rcx, 4
add rcx, rbp
mov r9d, r15d
mov r8, r13
mov edx, dword [rdi]
call fcn.10009d098
test al, al
jne 0x100131922
inc ebx
add rdi, 4
cmp ebx, dword [rsp + 0x88]
jb 0x1001314e5
xor eax, eax
mov rcx, qword [rsp + 0xb0]
cmp rcx, rax
je 0x100131531
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov qword [rsp + 0xb0], rax
mov r9b, 1
lea r8, [rsp + 0xb0]
mov edx, r15d
mov rcx, r13
call fcn.10009cbc4
mov edi, eax
xor edx, edx
cmp eax, edx
jl 0x1001324a3
mov rax, qword [rsi + 0x58]
mov rcx, qword [rsp + 0xa0]
mov r13d, dword [rcx + rax]
mov rax, qword [rsi + 0x50]
lea rbp, [rax + r12*8]
cmp rbp, rdx
jne 0x10013158a
lea r8, [0x100013440]
mov edx, 0x394
lea rcx, [0x1000133c0]
call fcn.10009a050
xor edx, edx
mov ebx, edx
mov r12d, dword [rsp + 0x318]
cmp r12d, edx
jbe 0x10013164b
mov rax, qword [rsp + 0x178]
lea rdi, [rax + 0x10]
mov ecx, ebx
imul rcx, rcx, 0x78
add rcx, rax
mov r9d, r13d
mov r8, rbp
mov edx, dword [rdi]
call fcn.10009d098
test al, al
jne 0x1001315d8
inc ebx
add rdi, 0x78
cmp ebx, r12d
mov rax, qword [rsp + 0x178]
jb 0x1001315a9
jmp 0x10013164b
mov eax, 0xffffffff
cmp ebx, eax
je 0x10013164b
imul r14, r14, 0x78
mov r13, qword [rsp + 0xa8]
add r14, qword [r13 + 0x58]
mov ecx, ebx
imul rcx, rcx, 0x78
mov rax, qword [rsp + 0x178]
add rcx, rax
mov rdx, r14
call fcn.10012c7a0
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x1001326e3
mov rax, qword [r13 + 0x58]
mov bl, byte [rsp + 0x60]
mov r12, qword [rsp + 0x90]
mov byte [r12 + rax + 0x28], bl
mov rax, qword [r13 + 0x58]
mov dword [r12 + rax + 0x10], r15d
mov r14, qword [rsp + 0xb0]
xor r15d, r15d
lea rbp, [0x1001653b8]
jmp 0x10013170b
imul r14, r14, 0x78
mov r13, qword [rsp + 0xa8]
add r14, qword [r13 + 0x58]
mov r9, r14
mov bl, byte [rsp + 0x60]
mov r8b, bl
mov edx, r15d
mov r14, qword [rsp + 0xb0]
mov rcx, r14
call fcn.10012f67c
mov edi, eax
xor r15d, r15d
cmp eax, r15d
jge 0x1001316fc
cmp bl, r15b
jne 0x1001326c0
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x1001316c5
test byte [rcx + 0x1c], 1
je 0x1001316c5
cmp byte [rcx + 0x19], 3
jb 0x1001316c5
lea edx, [r15 + 0x32]
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rax, qword [rsi + 0x50]
mov rcx, qword [r13 + 0x58]
mov rdx, qword [rsp + 0xe8]
movdqu xmm0, xmmword [rax + rdx]
mov r12, qword [rsp + 0x90]
movdqu xmmword [r12 + rcx], xmm0
mov rax, qword [r13 + 0x58]
mov byte [r12 + rax + 0x28], r15b
mov rax, qword [r13 + 0x58]
mov byte [r12 + rax + 0x29], r15b
jmp 0x10013170b
mov r12, qword [rsp + 0x90]
lea rbp, [0x1001653b8]
cmp bl, r15b
je 0x1001318d4
mov byte [rsp + 0x60], r15b
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.10011f6dc
cmp eax, r15d
jge 0x100131761
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x10013176c
test byte [rcx + 0x1c], 1
je 0x10013176c
cmp byte [rcx + 0x19], 3
jb 0x10013176c
mov edx, 0x33
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
jmp 0x10013176c
cmp byte [rsp + 0x60], r15b
jne 0x10013196d
lea r8, [rsp + 0x78]
lea rdx, [0x100002934]
mov rcx, r14
call fcn.10009bb88
mov edi, eax
cmp eax, r15d
jl 0x10013194a
mov rax, qword [rsi + 0x58]
mov rcx, qword [rsp + 0xa0]
test byte [rcx + rax], 8
je 0x1001318c2
mov rbx, r15
mov rbp, r15
lea r9, [rsp + 0x188]
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x290]
mov r15, qword [rsp + 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xor ecx, ecx
cmp eax, ecx
jne 0x1001317e1
mov rcx, r15
call fcn.100134b20
mov edi, eax
xor ecx, ecx
jmp 0x1001317f3
mov rbx, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0x290]
mov edi, ecx
cmp edi, ecx
jl 0x1001326a2
lea rdx, [rsp + 0xe0]
mov rcx, r15
call fcn.100134c60
mov edi, eax
xor eax, eax
cmp edi, eax
jl 0x100132684
mov rcx, qword [rsp + 0x100]
xor edi, edi
cmp rcx, rdi
je 0x100131834
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x100], rdi
lea rdx, [rsp + 0x100]
mov rcx, r14
call fcn.100134f00
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1001318a1
test byte [rcx + 0x1c], 1
je 0x1001318a1
cmp byte [rcx + 0x19], 4
jb 0x1001318a1
mov r9, r14
mov rax, qword [rsp + 0x100]
cmp rax, rdi
cmovne r9, rax
mov edx, 0x35
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbx
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10012f2b8
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor r15d, r15d
mov qword [rsp + 0x78], r15
add qword [rsp + 0xd0], rbx
add qword [rsp + 0x110], rbp
mov edx, dword [rsp + 0xc0]
inc edx
mov dword [rsp + 0xc0], edx
jmp 0x1001318db
mov edx, dword [rsp + 0xc0]
mov ecx, dword [rsp + 0x88]
inc ecx
mov dword [rsp + 0x88], ecx
add qword [rsp + 0xe8], 0x10
add r12, 0x78
mov qword [rsp + 0x90], r12
mov rax, qword [rsp + 0xa0]
add rax, 4
mov qword [rsp + 0xa0], rax
cmp ecx, dword [rsi + 0x48]
jae 0x1001319c5
jmp 0x1001314b7
mov edi, 0x80780013
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x10013199d
test byte [rcx + 0x1c], 1
je 0x10013199d
cmp byte [rcx + 0x19], 2
jb 0x10013199d
mov edx, 0x34
mov r9, r14
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001db08
mov edi, 0x8078015f
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
cmp edx, r15d
je 0x1001324c6
mov r9b, 1
xor r8d, r8d
mov edx, dword [r13 + 0x50]
mov rcx, qword [r13 + 0x58]
call fcn.10011d7bc
mov edi, eax
cmp eax, r15d
jl 0x100132894
cmp byte [rsi + 0x6c], r15b
jne 0x1001319fc
cmp byte [rsi + 0x74], r15b
je 0x100131c16
mov r12d, r15d
cmp dword [r13 + 0x50], r15d
jbe 0x100131c16
mov rbp, r15
mov byte [rsp + 0x60], r15b
mov rax, qword [r13 + 0x58]
mov ebx, dword [rax + rbp + 0x10]
cmp byte [rax + rbp + 0x28], r15b
je 0x100131b05
bt ebx, 9
jae 0x100131b05
test bl, 1
jne 0x100131b05
cmp r14, r15
je 0x100131a4d
mov rcx, r14
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xb0], r15
mov ecx, r12d
imul rcx, rcx, 0x78
add rcx, qword [r13 + 0x58]
xor r9d, r9d
lea r8, [rsp + 0xb0]
mov edx, ebx
call fcn.10009cbc4
mov edi, eax
cmp eax, r15d
jl 0x100131bf3
lea rdx, [rsp + 0x60]
mov r14, qword [rsp + 0xb0]
mov rcx, r14
call fcn.100119854
cmp eax, r15d
jge 0x100131ada
mov rcx, qword [0x1001653b8]
lea rdx, [0x1001653b8]
cmp rcx, rdx
je 0x100131ad1
test byte [rcx + 0x1c], 1
je 0x100131ad1
cmp byte [rcx + 0x19], 3
jb 0x100131ad1
mov edx, 0x36
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
mov al, r15b
mov byte [rsp + 0x60], al
jmp 0x100131ae5
mov rcx, qword [0x1001653b8]
mov al, byte [rsp + 0x60]
cmp al, r15b
je 0x100131b05
cmp byte [rsi + 0x6c], r15b
jne 0x100131b87
cmp byte [rsi + 0x74], r15b
je 0x100131b05
test bl, 2
jne 0x100131b05
bt ebx, 0xa
jae 0x100131b1b
inc r12d
add rbp, 0x78
cmp r12d, dword [r13 + 0x50]
jae 0x100131c16
jmp 0x100131a0c
mov edi, 0x8078015a
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1001325b2
test byte [rcx + 0x1c], 1
je 0x1001325f8
cmp byte [rcx + 0x19], 2
jb 0x1001325d5
mov edx, 0x38
mov dword [rsp + 0x20], 0x8078015a
mov r9, r14
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov edi, 0x8078014f
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x10013261b
test byte [rcx + 0x1c], 1
je 0x100132661
cmp byte [rcx + 0x19], 2
jb 0x10013263e
mov edx, 0x37
mov dword [rsp + 0x20], 0x8078014f
mov r9, r14
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12d, r15d
mov r14d, dword [rsp + 0xc8]
cmp r14d, r15d
jbe 0x100131db6
mov rbx, qword [rsp + 0x80]
cmp byte [rbx + 0x54], r15b
je 0x100131d72
test byte [rbx + 0x58], 1
jne 0x100131d72
mov ebp, 0x20
mov rcx, rbp
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rdi, rax
cmp rax, r15
je 0x100131d8e
mov r8, rbp
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
movdqu xmm5, xmmword [rbx]
movdqu xmmword [rsp + 0x290], xmm5
mov rdx, rdi
lea rcx, [rsp + 0x290]
call fcn.10011a0c4
mov ebp, eax
cmp eax, r15d
jge 0x100131cf6
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100131ce3
test byte [rcx + 0x1c], 1
je 0x100131ce3
cmp byte [rcx + 0x19], 3
jb 0x100131ce3
mov rdx, rbx
lea rcx, [rsp + 0x1c8]
call fcn.10009b894
mov edx, 0x39
mov dword [rsp + 0x20], ebp
mov r9, rax
lea r8, [0x100002e60]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, rdi
call fcn.100145c5c
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x100131d72
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x90]
lea r8, [rsp + 0x88]
mov rdx, rbx
lea rcx, [rsp + 0x120]
call fcn.100116b20
cmp rax, r15
jne 0x100131d6e
cmp qword [rsp + 0x120], r15
jne 0x100131d4e
mov r8b, 1
mov edx, dword [rsp + 0x130]
lea rcx, [rsp + 0x120]
call fcn.1000b7c74
cmp al, r15b
je 0x100131d83
mov r9d, dword [rsp + 0x90]
mov r8d, dword [rsp + 0x88]
mov rdx, rbx
lea rcx, [rsp + 0x120]
call fcn.100116c8c
mov qword [rax + 0x10], rdi
inc r12d
add rbx, 0x78
cmp r12d, r14d
jae 0x100131db6
jmp 0x100131c32
mov ecx, 0x8007000e
call fcn.1000196c8
int3
mov edi, 0x8007000e
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
lea rcx, [rsp + 0x120]
call fcn.100116928
mov qword [rsp + 0xc0], rax
cmp rax, r15
je 0x100131ecf
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x120]
call fcn.100132f30
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x290], xmm0
mov rbx, qword [rax + 0x10]
cmp byte [rbx], r15b
je 0x100131e32
lea rdx, [rbx + 4]
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x90]
lea r8, [rsp + 0x88]
lea rcx, [rsp + 0x120]
call fcn.100116b20
cmp rax, r15
jne 0x100131e42
cmp qword [rsp + 0xc0], r15
je 0x100131ecf
jmp 0x100131dd4
mov rax, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rax, r14
je 0x100131eae
test byte [rax + 0x1c], 1
je 0x100131eae
cmp byte [rax + 0x19], 2
jb 0x100131eae
lea rdx, [rbx + 4]
lea rcx, [rsp + 0x1c8]
call fcn.10009b894
mov rbx, rax
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x22c]
call fcn.10009b894
mov edx, 0x3a
mov qword [rsp + 0x20], rbx
mov r9, rax
lea r8, [0x100002e60]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001df74
mov edi, 0x80780159
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbx, r15
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0x60], r15b
lea rcx, [rsp + 0x60]
call fcn.1000a2fe4
mov edi, eax
cmp eax, r15d
jl 0x100132871
cmp dword [rsi + 8], 2
je 0x100131f04
cmp dword [rsi + 8], 3
jne 0x100132013
cmp byte [rsp + 0x60], r15b
jne 0x100132009
mov rbp, qword [rsp + 0xf0]
cmp rbp, r15
jbe 0x10013201b
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x68]
call fcn.100129078
mov edi, eax
cmp eax, r15d
jge 0x100131f98
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x10013255e
test byte [rcx + 0x1c], 1
je 0x100132596
cmp byte [rcx + 0x19], 2
jb 0x10013257a
mov edx, 0x3b
mov r9d, eax
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r10, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp r10, rdi
je 0x100131fec
test byte [r10 + 0x1c], 1
je 0x100131fe2
cmp byte [r10 + 0x19], 4
jb 0x100131fe2
mov edx, 0x3c
mov rbx, qword [rsp + 0xa0]
mov r9, rbx
lea r8, [0x100002e60]
mov rcx, qword [r10 + 0x10]
call fcn.10001d71c
mov r10, qword [0x1001653b8]
jmp 0x100132029
mov rbx, qword [rsp + 0xa0]
jmp 0x100132029
mov rbx, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
jmp 0x1001320b3
mov rbp, qword [rsp + 0xf0]
jmp 0x10013201b
mov rbp, qword [rsp + 0xf0]
mov r10, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp r10, rdi
je 0x10013207f
test byte [r10 + 0x1c], 1
je 0x1001320a3
cmp byte [r10 + 0x19], 4
jb 0x100132091
mov edx, 0x3d
mov r12, qword [rsp + 0xe0]
mov qword [rsp + 0x28], r12
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x20], rax
mov rdi, qword [rsp + 0xd0]
mov r9, rdi
lea r8, [0x100002e60]
mov rcx, qword [r10 + 0x10]
call fcn.10012f0d0
mov r10, qword [0x1001653b8]
jmp 0x1001320b3
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
jmp 0x1001320b3
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
jmp 0x1001320b3
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
cmp rbp, r15
jbe 0x10013214d
mov rcx, rdi
sub rcx, r12
mov r8, qword [rsp + 0x110]
sub rcx, r8
mov r15, qword [rsp + 0x170]
lea rax, [rbx + r15]
add rax, rbp
cmp rcx, rax
jbe 0x100132155
lea r14, [0x1001653b8]
cmp r10, r14
je 0x10013212c
test byte [r10 + 0x1c], 1
je 0x10013212c
cmp byte [r10 + 0x19], 2
jb 0x10013212c
mov edx, 0x3e
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r8
mov r9, rdi
lea r8, [0x100002e60]
mov rcx, qword [r10 + 0x10]
call fcn.10012f198
mov edi, 0x80780048
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r15, qword [rsp + 0x170]
xor eax, eax
mov dword [rsp + 0x90], eax
lea r9, [rsp + 0x90]
xor r8d, r8d
lea rdx, [0x1000145c0]
lea rcx, [0x100014600]
call fcn.1000a469c
mov edi, eax
xor eax, eax
cmp edi, eax
jge 0x1001321e1
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x10013250a
test byte [rcx + 0x1c], 1
je 0x100132542
cmp byte [rcx + 0x19], 2
jb 0x100132526
lea edx, [rax + 0x3f]
mov r9d, edi
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
cmp rbp, rax
jbe 0x10013229a
cmp dword [rsp + 0x90], eax
jne 0x10013229a
mov r10, qword [rsp + 0x180]
mov rcx, r10
sub rcx, r12
mov r8, qword [rsp + 0x110]
sub rcx, r8
mov r9, qword [rsp + 0xd0]
add rcx, r9
lea rax, [rbx + r15]
add rax, rbp
cmp rcx, rax
jbe 0x10013229a
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x100132279
test byte [rcx + 0x1c], 1
je 0x100132279
cmp byte [rcx + 0x19], 2
jb 0x100132279
mov edx, 0x40
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r8
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10012f220
mov edi, 0x80780152
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov dword [rsp + 0x90], 1
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r12, qword [rsp + 0x80]
mov r9, r12
mov r8d, r14d
mov rdx, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x98]
call fcn.100058444
mov edi, eax
xor r15d, r15d
cmp eax, r15d
jge 0x100132334
mov rcx, qword [0x1001653b8]
lea r14, [0x1001653b8]
cmp rcx, r14
je 0x1001328da
test byte [rcx + 0x1c], 1
je 0x100132902
cmp byte [rcx + 0x19], 2
jb 0x1001328ee
lea edx, [r15 + 0x41]
mov r9d, eax
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r9d, dword [rsp + 0x90]
mov dword [r13 + 0x18], r9d
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100132374
test byte [rcx + 0x1c], 1
je 0x100132374
cmp byte [rcx + 0x19], 4
jb 0x100132374
mov edx, 0x42
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov ecx, dword [rsi + 8]
call fcn.1000a35bc
test al, 0x10
jne 0x1001323ac
cmp byte [rsi + 0x68], r15b
jne 0x10013238c
cmp byte [rsi + 0x69], r15b
je 0x1001323ac
mov edi, 0x80780037
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
movzx eax, word [rsi + 0x68]
mov word [r13 + 0x60], ax
lea rcx, [r13 + 0x62]
call fcn.1000a2fe4
mov edi, eax
cmp eax, r15d
jl 0x100132a5d
lea rcx, [r13 + 0x68]
call fcn.1000a0ccc
mov edi, eax
cmp eax, r15d
jl 0x100132a42
lea rcx, [rsp + 0x198]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx r11d, word [rsp + 0x198]
mov word [r13 + 0x70], r11w
mov al, byte [rsi + 0x6a]
mov byte [r13 + 0x72], al
cmp r14d, r15d
jne 0x10013241d
lea r8, [0x100014620]
mov edx, 0x672
lea rcx, [0x1000144a0]
call fcn.10009a050
cmp r12, r15
jne 0x10013243a
lea r8, [0x100014630]
mov edx, 0x673
lea rcx, [0x1000144a0]
call fcn.10009a050
mov rcx, qword [r13 + 0x80]
cmp rcx, r15
je 0x100132453
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [r13 + 0x80], r15
mov al, byte [rsi + 0x6c]
mov byte [rsp + 0x20], al
mov r9b, byte [rsi + 0x74]
mov r8, r12
mov edx, r14d
mov rbp, qword [rsp + 0x70]
mov rcx, rbp
call fcn.10010f198
mov edi, eax
cmp eax, r15d
jl 0x100132b7b
lea rdx, [r13 + 0x80]
mov rcx, rbp
call fcn.1001113e0
mov edi, eax
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov edi, 0x80780014
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r12, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x100132b8c
mov rbp, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, rax
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, rdx
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov rbp, rax
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
jmp 0x100132b8c
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea r14, [0x1001653b8]
mov rcx, qword [rsp + 0x108]
call fcn.10010b368
lea rcx, [rsp + 0x120]
call fcn.100116928
mov qword [rsp + 0xc0], rax
test rax, rax
je 0x100132bf3
xor ebp, ebp
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x120]
call fcn.100132f30
mov rbx, qword [rax + 0x10]
mov rcx, rbx
call fcn.100145c5c
cmp rbx, rbp
je 0x100132be4
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp qword [rsp + 0xc0], rbp
jne 0x100132bb5
mov rbp, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xb0]
xor eax, eax
cmp rcx, rax
je 0x100132c08
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x100132c1e
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
cmp r13, rax
je 0x100132c2e
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor r13d, r13d
cmp r15, r13
je 0x100132c3f
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp qword [rsp + 0xd8], r13
je 0x100132c5e
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xd8]
call fcn.100144c10
cmp r12, r13
je 0x100132c78
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x80]
call fcn.100144c10
cmp rsi, r13
je 0x100132c8e
mov rcx, rsi
call fcn.100144dc8
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp rbp, r13
je 0x100132cbd
mov rcx, qword [rbp]
cmp rcx, r13
je 0x100132ca6
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rbp], r13
mov rcx, qword [rbp + 8]
cmp rcx, r13
je 0x100132cb5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, rbp
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp edi, r13d
jge 0x100132cff
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x100132cf2
test byte [rcx + 0x1c], 1
je 0x100132cf2
cmp byte [rcx + 0x19], 2
jb 0x100132cf2
mov edx, 0x43
mov r9d, edi
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rcx, qword [rsp + 0xa8]
call fcn.10012c9a0
mov rcx, qword [0x1001653b8]
cmp rcx, r14
je 0x100132d2d
test byte [rcx + 0x1c], 1
je 0x100132d2d
cmp byte [rcx + 0x19], 4
jb 0x100132d2d
mov edx, 0x44
lea r8, [0x100002e60]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
nop
mov ebp, dword [rsp + 0x150]
inc ebp
mov dword [rsp + 0x150], ebp
mov rcx, qword [rsp + 0x120]
cmp rcx, r13
je 0x100132e75
mov r14d, r13d
mov eax, dword [rsp + 0x130]
cmp eax, r13d
jbe 0x100132e75
mov r15, r13
mov rsi, qword [rsp + 0x158]
mov r12, qword [rsp + 0x128]
xor ebx, ebx
mov r13, qword [rcx + r15]
cmp r13, rbx
je 0x100132e60
mov rdx, r13
lea rcx, [r13 + 0x18]
mov r13, qword [rcx]
mov rax, qword [rsp + 0x160]
mov qword [rcx], rax
mov qword [rsp + 0x160], rdx
cmp r12, rbx
ja 0x100132dbd
lea r8, [0x100005b78]
mov edx, 0xa14
lea rcx, [0x1000059a0]
call fcn.10009a050
dec r12
mov qword [rsp + 0x128], r12
cmp r12, qword [rsp + 0x148]
jae 0x100132e0c
cmp ebp, ebx
jne 0x100132e0c
mov rdx, r12
lea rcx, [rsp + 0x120]
call fcn.100133178
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.1000b7d84
mov rsi, qword [rsp + 0x158]
mov ebp, dword [rsp + 0x150]
mov r12, qword [rsp + 0x128]
cmp r12, rbx
jne 0x100132e48
mov qword [rsp + 0x160], rbx
cmp rsi, rbx
je 0x100132e48
xor ebp, ebp
mov rbx, qword [rsi]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_free]
mov rsi, rbx
cmp rbx, rbp
jne 0x100132e20
mov rsi, rbp
mov qword [rsp + 0x158], rbp
mov ebp, dword [rsp + 0x150]
xor ebx, ebx
cmp r13, rbx
jne 0x100132d83
mov eax, dword [rsp + 0x130]
mov rcx, qword [rsp + 0x120]
inc r14d
add r15, 8
cmp r14d, eax
jb 0x100132d76
xor r13d, r13d
jmp 0x100132e7d
mov rsi, qword [rsp + 0x158]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], r13
cmp ebp, r13d
jne 0x100132ec7
xor edx, edx
lea rcx, [rsp + 0x120]
call fcn.100133178
mov edx, eax
xor r8d, r8d
lea rcx, [rsp + 0x120]
call fcn.1000b7c74
mov rsi, qword [rsp + 0x158]
mov ebp, dword [rsp + 0x150]
cmp rsi, r13
je 0x100132ee0
mov rbx, qword [rsi]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_free]
mov rsi, rbx
cmp rbx, r13
jne 0x100132ecc
cmp ebp, r13d
ja 0x100132efd
lea r8, [0x100005b60]
mov edx, 0x8d3
lea rcx, [0x1000059a0]
call fcn.10009a050
mov eax, edi
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.10014e600
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret