Function at 0x140049370
Capabilities:
Resolve function by parsing pe exports
Resolve path using msvcrt

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2530]
mov eax, 0x2630
call fcn.14005e1f0
sub rsp, rax
mov rax, qword [0x1401f7030]
xor rax, rsp
mov qword [rbp + 0x2520], rax
mov dil, r8b
mov byte [rsp + 0x60], r8b
mov rbx, rdx
mov qword [rbp - 0x68], rdx
mov r13, rcx
mov qword [rbp - 0x80], rcx
mov rax, qword [str.SetupPhase]
mov qword [rbp + 0x58], rax
lea rcx, str.ProcessLinkerSwitches
mov qword [str.SetupPhase], rcx
mov r14, qword [r13 + 0xf28]
mov qword [rbp - 0x48], r14
xor eax, eax
test r8b, r8b
je 0x1400493f5
mov rcx, r13
call fcn.140048fec
mov qword [rbp - 0x48], rax
xor eax, eax
mov byte [rbp - 0x78], al
lea rdx, [rbp + 0x2100]
mov rcx, rbx
call fcn.1400b1c08
mov qword [rsp + 0x58], rax
xor ecx, ecx
mov dword [rbp - 0x4c], ecx
mov rsi, qword [0x1401fa990]
mov qword [rbp - 0x60], rsi
cmp qword [0x1401fa9a0], rcx
jbe 0x14004967a
lea r15, [rsi + 8]
mov qword [rsp + 0x68], r15
mov rdx, qword [r15]
mov rcx, rax
call fcn.140049160
mov rsi, rax
xor eax, eax
mov r12d, eax
mov qword [rsp + 0x50], rax
mov rcx, qword [r15]
call fcn.1400492f0
mov r14, rax
mov qword [rsp + 0x78], rax
xor eax, eax
test dil, dil
je 0x140049d04
lea rdx, [0x1401a3528]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a0e23
test dil, dil
je 0x140049d27
lea rdx, str.alternatename
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140049a0f
test dil, dil
je 0x140049da4
lea rdx, str.arm64xcrossdebug
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1077
test dil, dil
je 0x140049e1b
lea rdx, str.arm64xfastforward
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a10ad
test dil, dil
je 0x140049e50
lea rdx, str.arm64xsameaddress
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1280
test dil, dil
je 0x140049ecd
lea rdx, str.assemblymodule
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1638
test dil, dil
je 0x140049f32
lea rdx, str.base
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1883
test dil, dil
je 0x140049f7f
lea rdx, str.clrloaderoptimization
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1f0c
lea rdx, str.clrnetcore
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1fec
test dil, dil
je 0x14004a044
lea rdx, str.clrthreadattribute
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a21e7
test dil, dil
je 0x14004a0a9
lea rdx, str.coffsecttopdbstrm
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2313
test dil, dil
je 0x14004a0c6
lea rdx, str.defaultlib
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400496af
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rbx, qword [r15]
test dword [r13 + 0x154], 0x100000
jne 0x14004960e
lea rdx, [r13 + 0xf00]
xor r8d, r8d
lea rcx, [rbx + 0x16]
call fcn.140049014
test dil, dil
je 0x1400a27ff
mov r12, rsi
mov rcx, qword [r12]
call fcn.1400b1c10
mov ebx, dword [rbp - 0x4c]
inc ebx
mov dword [rbp - 0x4c], ebx
mov rsi, qword [rbp - 0x60]
mov rsi, qword [rsi + 0x18]
mov qword [rbp - 0x60], rsi
xor r14d, r14d
mov rdi, qword [rsp + 0x78]
cmp byte [rsp + 0x60], r14b
je 0x140049e09
mov rcx, rdi
call fcn.14004935c
mov eax, ebx
cmp rax, qword [0x1401fa9a0]
jae 0x140049670
mov dil, byte [rsp + 0x60]
mov rax, qword [rsp + 0x58]
mov rbx, qword [rbp - 0x68]
jmp 0x140049429
cmp byte [rbp - 0x78], r14b
jne 0x1400a7622
mov rax, qword [rbp + 0x58]
mov qword [str.SetupPhase], rax
mov rcx, qword [rbp + 0x2520]
xor rcx, rsp
call fcn.14005a600
mov rbx, qword [rsp + 0x2688]
add rsp, 0x2630
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test dil, dil
je 0x14004a193
lea rdx, str.didatownsection
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a299b
lea rdx, str.disallowlib
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140049ad6
test dil, dil
je 0x14004a1f8
lea rdx, [0x1401a3350]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a29b7
test dil, dil
je 0x14004a215
lea rdx, str.editandcontinue
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2bd9
test dil, dil
je 0x14004a27a
lea rdx, str.encpadsize
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2d4f
lea rdx, str.entry
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004aab8
test dil, dil
je 0x14004a30f
lea rdx, str.export
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004b058
mov rcx, qword [rsi]
test dil, dil
je 0x1400497f0
lea rdx, str.failifmismatch
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400498dd
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049617
lea rbx, [rsi + 0x18]
mov rdi, qword [rbp - 0x68]
mov r8, qword [rbx - 8]
test r8, r8
je 0x1400a14ab
mov r9, qword [rbx]
test r9, r9
je 0x1400a14ab
mov rdx, rdi
mov rcx, qword [0x1401fab30]
call fcn.140048468
inc r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jae 0x140049617
jmp 0x1400497b5
lea rdx, str.exportpadmin
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a30b2
lea rdx, str.fastfail
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a30fd
lea rdx, [0x1401a4b78]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a315c
lea rdx, str.filealign
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a317b
lea rdx, str.fixed
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a31d5
lea rdx, str.force
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3233
lea rdx, str.forcewinmdversion12
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a333a
lea rdx, str.fullbuild
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3353
lea rdx, str.functionpadmin
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3361
lea rdx, str.guard
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a33a4
lea rdx, str.guardsym
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140049c2c
lea rdx, str.heap
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a37aa
test dil, dil
je 0x14004a374
lea rdx, str.hybriddefupgrade
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a390f
test dil, dil
je 0x14004a391
lea rdx, str.icfsection
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a39c2
test dil, dil
je 0x14004a3c6
lea rdx, str.include
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049b0e
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rbx, qword [r15]
add rbx, 0x10
xor r8d, r8d
mov rdx, rbx
mov r12, qword [rbp - 0x48]
mov rcx, r12
call fcn.14002ac90
mov rdi, rax
bts dword [rax], 0x17
xor eax, eax
mov r15b, byte [rsp + 0x60]
cmp byte [0x1401fa4b8], al
jne 0x14004b3c8
mov rdx, qword [r13 + 0x290]
mov rcx, rdi
call 0x1400500ec
test rax, rax
je 0x140049ab2
mov rcx, r13
call fcn.14005e2a4
test al, al
jne 0x1400a3d7b
or qword [r13 + 0x278], rax
jmp 0x140049617
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x10]
mov r14b, byte [rsp + 0x60]
mov rdx, r12
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a673f
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400a14ab
call fcn.14002ad20
mov rbx, rax
mov rcx, qword [rdi + 8]
call fcn.14002ad20
mov rcx, qword [rbp - 0x48]
mov cl, byte [rcx + 0xb0]
mov byte [rsp + 0x20], cl
mov r9b, r14b
mov r8, rax
mov rdx, rbx
mov rcx, r13
call fcn.140044d34
inc r12
mov qword [rsp + 0x50], r12
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x140049a25
xor eax, eax
mov dil, al
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
cmp qword [rsi + 8], rax
ja 0x1400a7432
mov r12, qword [rsp + 0x68]
test dil, dil
je 0x140049617
jmp 0x14004b3bf
mov ecx, 0x10
call fcn.1400b1c28
mov qword [rax], rdi
mov rcx, qword [r13 + 0x290]
mov qword [rax + 8], rcx
mov qword [r13 + 0x290], rax
jmp 0x1400499c7
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
test dword [r13 + 0x154], 0x100000
jne 0x140049617
lea rdx, [r13 + 0xf00]
mov rcx, qword [r15]
add rcx, 0x18
mov r8, rbx
call fcn.140050e70
jmp 0x140049617
lea rdx, [0x1401a3ea8]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3e58
lea rdx, str.incremental
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3eab
lea rdx, str.inferasanlibs
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3fe2
test dil, dil
je 0x14004a473
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov eax, 2
cmp qword [rsi + 8], rax
jne 0x1400a14ab
mov rdi, qword [r15]
add rdi, 0x12
lea edx, [rax + 0x2a]
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
mov r14, rax
xor eax, eax
test r14, r14
je 0x1400a14ab
cmp word [r14 + 4], ax
jne 0x1400a14ab
mov rcx, r14
sub rcx, rdi
sar rcx, 1
lea rbx, [rcx + rcx]
lea rcx, [rbx + 2]
call fcn.1400b1c28
mov r15, rax
mov r8, rbx
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
xor edi, edi
mov word [r15 + rbx], di
mov rcx, r15
call fcn.14002ad20
mov rbx, rax
cmp word [r14 + 2], 0x53
jne 0x1400a14ab
mov rcx, rax
call fcn.140045bf8
mov qword [rbp + 0x30], rax
lea rcx, [r13 + 0x11a8]
lea rdx, [rbp + 0x30]
call fcn.140052250
test eax, eax
je 0x1400a379f
and dword [r13 + 0x1270], 0xffffff5f
or dword [r13 + 0x1270], 0x50
mov rcx, r15
call fcn.14004935c
mov rcx, rbx
call fcn.14004935c
jmp 0x140049617
mov r8, qword [rsi]
movzx edx, word [r8]
sub edx, 0x3f
jne 0x140049d1a
movzx edx, word [r8 + 2]
movzx ecx, ax
sub edx, ecx
test edx, edx
jne 0x140049465
jmp 0x1400a0e18
lea rdx, str.allowbind
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a0ee6
lea rdx, str.allowbadrvaforfirstsection
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a0f4b
lea rdx, str.allowimagesizeover2gb
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a0f7b
lea rdx, str.allowisolation
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a0f85
lea rdx, str.allpdata
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049486
jmp 0x1400a0fef
lea rdx, str.appcontainer
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004b492
lea rdx, str.arm64hazardexist
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a104a
lea rdx, str.arm64hazardfree
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1057
lea rdx, str.arm64xaggressiverwdatafold
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400494a7
jmp 0x1400a1067
cmp qword [0x1401fa508], r14
je 0x14004964a
jmp 0x1400a749c
lea rdx, str.arm64xcrossresolve
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1087
lea rdx, str.arm64xemulatorbuild
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400494c8
jmp 0x1400a109d
lea rdx, str.arm64xfoldrwdata
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a11e5
lea rdx, str.arm64xhack
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a11f5
lea rdx, str.arm64xnewchameleonlibfmt
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1205
lea rdx, str.arm64xnomergeimports
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1260
lea rdx, str.arm64xnoreorderobjs
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400494e9
jmp 0x1400a1270
lea rdx, str.armhazardexist
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a13d6
lea rdx, str.armhazardfree
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a13e3
lea rdx, str.assemblydebug
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a13f3
lea rdx, str.assemblylinkresource
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004950a
jmp 0x1400a1453
lea rdx, str.assemblymodulemap
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a16b7
lea rdx, str.assemblyresource
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1732
lea rdx, [0x1401a464c]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004952b
jmp 0x1400a1865
lea rdx, str.baserelocclustering
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1b62
lea rdx, str.brepro
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1bdd
lea rdx, str.cetcompat
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1bed
lea rdx, str.cetcompatstrict
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1c49
lea rdx, str.cetdynamicapisinproc
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1ca5
lea rdx, str.cetipvalidationrelaxed
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1d00
lea rdx, str.cgthreads
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1d5b
lea rdx, str.clrimagetype
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004954c
jmp 0x1400a1e2c
lea rdx, str.clrrvaentry
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2008
lea rdx, str.clrsignhash
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a206a
lea rdx, str.clrsupportlasterror
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2130
lea rdx, str.clrsupportlasterrordll
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049585
jmp 0x1400a21c9
lea rdx, str.clrunmanagedcodecheck
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400495a6
jmp 0x1400a22ae
lea rdx, str.cvtres
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2421
lea rdx, str.cxxmodulestrongownership
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2476
lea rdx, [0x1401a4644]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a24d8
mov r8d, 2
lea rdx, [0x1401a4654]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov rcx, qword [rsi]
xor edx, edx
test eax, eax
je 0x1400a24f6
lea rdx, str.debug
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004b517
lea rdx, str.debugtype
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2684
lea rdx, str.defArm64Native
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2725
lea rdx, [0x1401a4760]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400495c7
jmp 0x1400a27bd
lea rdx, str.delay
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2852
lea rdx, str.delayload
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a28ce
lea rdx, str.delaysign
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a28f4
lea rdx, str.dependentloadflag
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400496b8
jmp 0x1400a2956
lea rdx, str.discardtrack
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400496f1
jmp 0x1400a29a9
lea rdx, str.dllrename
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2a16
lea rdx, str.driver
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2a76
lea rdx, str.dynamicbase
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004b552
lea rdx, str.dynamicvaluefixupsym
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049712
jmp 0x1400a2b45
lea rdx, str.emitasx64image
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2bef
lea rdx, str.emitasx64imagewithaa64
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2bff
lea rdx, str.emitpogophaseinfo
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2c17
lea rdx, str.emittoolversioninfo
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2c32
lea rdx, str.emitvolatilemetadata
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2c8f
lea rdx, str.enclave
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049733
jmp 0x1400a2cf2
lea rdx, str.errorreport
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2ec2
lea rdx, [0x1401a4b70]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a2fa7
lea rdx, str.expectedoutputsize
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3004
lea rdx, str.experimental
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14004976c
jmp 0x1400a3047
lea rdx, str.highentropyva
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049916
jmp 0x1400a38a4
lea rdx, str.hybridexportthunks
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a391c
lea rdx, str.hybriduseguestmachine
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140049937
jmp 0x1400a3977
lea rdx, str.idlout
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3a38
lea rdx, str.ignore
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3b34
lea rdx, str.ignoreidl
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3b8a
lea rdx, [0x1401a4b68]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3ba2
lea rdx, str.iltcgwarningoff
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a3bc6
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0xc
call fcn.14002ad20
mov r14, rax
xor eax, eax
test dil, dil
jne 0x1400a2d86
cmp byte [0x1401fa4b8], al
jne 0x1400a2e8e
mov qword [0x1401fa9b8], r14
mov qword [r13 + 0x288], r14
btr dword [r13 + 0x154], 0x15
or qword [r13 + 0x278], 8
jmp 0x140049617
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
test dil, dil
je 0x14004b075
cmp byte [0x1401fcba1], al
jne 0x140049617
mov rbx, qword [r15]
add rbx, 0xe
mov eax, dword [0x1401fa544]
cmp eax, 5
je 0x1400a307c
cmp eax, 6
jne 0x140049617
xor eax, eax
test dil, dil
je 0x1400a309f
cmp byte [0x1401fac64], al
jne 0x140049617
lea rcx, [rbp + 0x2100]
mov rax, qword [rsp + 0x58]
cmp rax, rcx
je 0x14004b578
xor ecx, ecx
mov byte [rsp + 0x20], cl
mov r9, rax
lea rdx, [0x1401fa9d0]
mov r8, rbx
mov rcx, qword [rbp - 0x68]
call fcn.14004fe7c
jmp 0x140049617
mov r12, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
jmp 0x14004961a
test r15b, r15b
jne 0x1400499c7
jmp 0x1400499af
mov rax, r8
jmp 0x140049a90
mov eax, 0x1000
or word [r13 + 0xa6], ax
xor eax, eax
cmp qword [rsi + 8], rax
ja 0x1400a0ffc
movabs rax, 0x400000000
or qword [r13 + 0x278], rax
mov r12, r15
jmp 0x14004b3bf
mov rax, r12
jmp 0x140049a95
mov eax, 3
mov dword [r13 + 0x194], eax
xor eax, eax
cmp dword [r13 + 0x150], eax
jl 0x140049617
cmp qword [rsi + 8], rax
ja 0x1400a2540
movabs rax, 0x1000000000
or qword [r13 + 0x278], rax
jmp 0x14004b3ba
mov eax, 0x40
or word [r13 + 0xa6], ax
xor eax, eax
cmp qword [rsi + 8], rax
ja 0x1400a2af7
or qword [r13 + 0x278], 4
jmp 0x14004b4bc
lea rcx, [rbp + 0x2100]
call fcn.1400492f0
mov qword [rsp + 0x58], rax
jmp 0x14004b0c0
call fcn.140118d2c
nop
jmp 0x140049465
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
lea r12d, [rax + 1]
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov r9d, dword [rsp + 0x70]
test r9d, r9d
je 0x1400a0eac
lea eax, [r9 - 1]
test r9d, eax
jne 0x1400a0eac
or qword [r13 + 0x278], r12
mov eax, dword [rsp + 0x70]
mov dword [r13 + 0x80], eax
jmp 0x1400a0e78
mov dil, r12b
jmp 0x1400a0ea4
mov rax, r12
jmp 0x140049a90
lea r8, str.ALIGN
jmp 0x1400a0ebc
lea r8, str.FILEALIGN
mov edx, 0xfcb
mov rbx, qword [rsp + 0x58]
jmp 0x1400a0ed4
mov rcx, rbx
call fcn.1400ebbc8
xor eax, eax
mov dil, al
jmp 0x14004b50f
mov eax, 0xf7ff
and word [r13 + 0xa6], ax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a0f0a
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0x800
or word [r13 + 0xa6], ax
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a0f08
jmp 0x14004b4bc
mov r8d, 2
or dword [r13 + 0x150], r8d
jmp 0x1400a0f67
xor eax, eax
jmp 0x1400a0f73
mov dil, al
jmp 0x140049a90
or dword [r13 + 0x150], 4
jmp 0x1400a0f67
mov eax, 0xfdff
and word [r13 + 0xa6], ax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a0fe1
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a0fa5
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0x200
or word [r13 + 0xa6], ax
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a0fa3
bts qword [r13 + 0x278], 0x1a
jmp 0x14004b4bc
or dword [r13 + 0x150], 8
jmp 0x1400a0f67
lea rbx, [rsi + 0x18]
mov edi, 1
jmp 0x1400a1009
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0xefff
and word [r13 + 0xa6], ax
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1007
jmp 0x14004b4ab
xor eax, eax
mov byte [0x1401fcab1], al
jmp 0x1400a0f73
mov eax, 1
mov byte [0x1401fcab1], al
jmp 0x1400a0f67
mov eax, 1
mov byte [0x1401fce92], al
jmp 0x1400a0f67
mov eax, 1
mov byte [0x1401fce96], al
jmp 0x1400a0f67
mov ecx, 1
mov byte [0x1401fab4d], cl
mov byte [0x1401fce93], cl
jmp 0x1400a0f67
mov eax, 1
mov byte [0x1401fce50], al
jmp 0x1400a0f67
mov rcx, r13
call fcn.14005e2a4
test al, al
je 0x140049a86
mov rcx, qword [rbp - 0x48]
call fcn.1400ebd64
test al, al
je 0x140049a86
mov eax, 2
cmp qword [rsi + 8], rax
jne 0x1400a14ab
lea rbx, [rsi + 0x18]
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
mov rcx, qword [rbx]
call fcn.140118048
test al, al
jne 0x1400a14ab
inc r12
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a10e1
mov rdi, qword [rsi + 0x28]
mov rdx, qword [rsi + 0x18]
lea rcx, [rbp + 0x110]
call fcn.140117c88
nop
lea rcx, [rbp + 0x110]
call fcn.140118f2c
test al, al
jne 0x1400a74c1
lea rdx, str.EXP
lea rcx, [rbp + 0x1a0]
call fcn.1400223b4
nop
lea r8, [rbp + 0x110]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140117c2c
nop
lea rcx, [rbp + 0x1a0]
call fcn.1400232b0
mov rbx, qword [r13 + 0xf28]
lea rcx, [rbp + 0x160]
call fcn.140118edc
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.14002ac90
mov rbx, rax
bts dword [rax], 0x17
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [r13 + 0xf28]
call fcn.14002ac90
bts dword [rax], 0x17
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x60]
lea rcx, [0x1401fc750]
call fcn.140118f38
nop
lea rcx, [rbp + 0x160]
call fcn.1400232b0
nop
lea rcx, [rbp + 0x110]
call fcn.1400232b0
nop
jmp 0x140049a86
mov eax, 1
mov byte [0x1401fcab0], al
jmp 0x1400a0f67
mov eax, 1
mov byte [0x1401fab4e], al
jmp 0x1400a0f67
xor eax, eax
mov byte [0x1401fcb98], al
cmp qword [rsi + 8], rax
jbe 0x140049a88
lea rbx, [rsi + 0x18]
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
lea ecx, [rax + 1]
mov byte [0x1401fcb98], cl
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
lea eax, [rcx - 1]
jb 0x1400a121b
jmp 0x140049a88
mov eax, 1
mov byte [0x1401fce93], al
jmp 0x1400a0f67
mov eax, 1
mov byte [0x1401fce94], al
jmp 0x1400a0f67
mov rcx, r13
call fcn.14005e2a4
test al, al
je 0x140049501
mov rcx, qword [rbp - 0x48]
call fcn.1400ebd64
test al, al
je 0x140049501
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049a88
lea r12, [rsi + 0x18]
cmp qword [r12 - 8], rax
jne 0x1400a14ab
mov r14, qword [r12]
mov rcx, r14
call fcn.140118048
test al, al
jne 0x1400a14ab
xor r8d, r8d
mov rdx, r14
mov rcx, qword [r13 + 0xf30]
call fcn.14002ac90
mov r15, rax
bts dword [rax], 0x17
mov rdx, r14
lea rcx, [rbp + 0x130]
call fcn.140117c88
nop
lea rcx, [rbp + 0x130]
call fcn.140118f2c
test al, al
jne 0x1400a74ca
mov rbx, qword [r13 + 0xf28]
lea rcx, [rbp + 0x130]
call fcn.140118edc
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.14002ac90
mov rdi, rax
bts dword [rax], 0x17
xor r8d, r8d
mov rdx, r14
mov rcx, qword [r13 + 0xf28]
call fcn.14002ac90
mov rbx, rax
bts dword [rax], 0x17
mov r9, rax
mov r8, rdi
mov rdx, qword [rbp - 0x68]
mov rcx, r13
call fcn.140132430
mov r9, rdi
mov r8, rbx
mov rdx, qword [rbp - 0x68]
mov rcx, r13
call fcn.140132430
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp + 0x90]
lea rcx, [0x1401fc738]
call fcn.140118f64
nop
lea rcx, [rbp + 0x130]
call fcn.1400232b0
mov rax, qword [rsp + 0x50]
inc rax
mov qword [rsp + 0x50], rax
add r12, 0x10
cmp rax, qword [rsi + 8]
mov eax, 0
jb 0x1400a12b1
jmp 0x140049a88
xor eax, eax
mov byte [0x1401f8650], al
jmp 0x1400a0f73
mov eax, 1
mov byte [0x1401f8650], al
jmp 0x1400a0f67
mov eax, 0x20
or dword [r13 + 0x150], eax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a1445
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a1412
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, str.disable
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
and dword [r13 + 0x150], 0xffffffdf
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1410
bts qword [r13 + 0x278], 0x19
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov r15, qword [rsi + 0x18]
lea edx, [rax + 1]
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a1478
mov r14, qword [rsi + 0x28]
jmp 0x1400a147d
xor eax, eax
mov r14d, eax
mov edx, 2
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a14c3
mov rcx, qword [rsi + 0x38]
mov rbx, rcx
test rcx, rcx
je 0x1400a14c7
lea rdx, str.private
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a14c7
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
mov edx, 0x45d
mov rcx, qword [rsp + 0x58]
call fcn.14005e3e8
int3
xor eax, eax
mov ebx, eax
test r14, r14
jne 0x1400a154a
mov ecx, pe_nt_image_headers64
mov qword [rsp + 0x40], rcx
lea rax, [rbp + 0x10c0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x12c0]
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wsplitpath_s]
lea rax, [rbp + 0x10c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x12c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x104
lea rcx, [rbp + 0x18c0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmakepath_s]
lea rcx, [rbp + 0x18c0]
call fcn.140031148
mov r14, rax
test rbx, rbx
setne r8b
mov rdx, r14
mov rcx, r15
call fcn.1400c7d94
call fcn.14000fa58
test al, al
je 0x1400a1629
mov rcx, qword [rsp + 0x78]
call fcn.14004935c
xor eax, eax
mov qword [rsp + 0x78], rax
mov rdi, r14
test rbx, rbx
je 0x1400a15c3
or rbx, 0xffffffffffffffff
inc rbx
cmp word [r14 + rbx*2], ax
jne 0x1400a1586
add rbx, 9
mov rcx, rbx
call fcn.1400b9ad4
mov rdi, rax
mov r8, r14
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, str._private
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
xor eax, eax
lea rdx, str._assemblylinkresource:
jmp 0x1400a1606
add rbx, 9
mov rcx, rbx
call fcn.1400b9ad4
mov rdi, rax
mov r8, r14
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, str._private
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
xor eax, eax
lea rdx, str._assemblyresource:
mov byte [rsp + 0x28], al
xor r8d, r8d
mov r9, rdi
mov byte [rsp + 0x20], al
mov rcx, r15
call fcn.1401115b0
cmp rdi, r14
je 0x1400a1629
mov rcx, rdi
call fcn.14004935c
xor eax, eax
mov dil, al
mov eax, 3
jmp 0x140049a90
xor edx, edx
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a673f
mov rbx, qword [r15]
add rbx, 0x1e
mov rcx, rbx
call fcn.1400c7e68
call fcn.14000fa58
test al, al
je 0x1400a16a9
mov rcx, r14
call fcn.14004935c
xor eax, eax
mov qword [rsp + 0x78], rax
mov rcx, rbx
test dil, dil
je 0x1400a168f
call fcn.1400cb818
mov rcx, rax
xor eax, eax
mov r8, rbx
lea rdx, str._assemblymodulemap:
jmp 0x1400a1699
xor r8d, r8d
lea rdx, str._assemblymodule:
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], al
xor r9d, r9d
call fcn.1401115b0
mov qword [rsp + 0x50], 1
jmp 0x140049a86
xor edx, edx
mov rcx, rsi
call fcn.1400541f0
xor edi, edi
test al, al
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0x24
call fcn.1400492f0
mov rbx, rax
lea edx, [rdi + 0x3d]
mov rcx, rax
call sub.VCRUNTIME140.dll_wcschr
test rax, rax
je 0x1400a14ab
cmp rax, rbx
je 0x1400a14ab
lea rdx, [rax + 2]
cmp word [rdx], di
je 0x1400a14ab
mov word [rax], di
mov rcx, rbx
call fcn.1400c7ed0
xor eax, eax
cmp qword [0x1401fa508], rax
je 0x140049617
mov rcx, r14
call fcn.14004935c
xor eax, eax
mov qword [rsp + 0x78], rax
jmp 0x140049617
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov r15, qword [rsi + 0x18]
lea edx, [rax + 1]
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a1757
mov r14, qword [rsi + 0x28]
jmp 0x1400a175c
xor eax, eax
mov r14d, eax
mov edx, 2
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a178f
mov rcx, qword [rsi + 0x38]
mov rbx, rcx
test rcx, rcx
je 0x1400a1793
lea rdx, str.private
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a1793
jmp 0x1400a14ab
xor eax, eax
mov ebx, eax
test r14, r14
jne 0x1400a1816
mov ecx, pe_nt_image_headers64
mov qword [rsp + 0x40], rcx
lea rax, [rbp + 0x14c0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x16c0]
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wsplitpath_s]
lea rax, [rbp + 0x14c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x16c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x104
lea rcx, [rbp + 0x1ad0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmakepath_s]
lea rcx, [rbp + 0x1ad0]
call fcn.140031148
mov r14, rax
test rbx, rbx
setne r8b
mov rdx, r14
mov rcx, r15
call fcn.1400c7f6c
call fcn.14000fa58
test al, al
je 0x1400a1629
mov rcx, qword [rsp + 0x78]
call fcn.14004935c
xor eax, eax
mov qword [rsp + 0x78], rax
mov rdi, r14
test rbx, rbx
je 0x1400a15ff
or rbx, 0xffffffffffffffff
inc rbx
cmp word [r14 + rbx*2], ax
jne 0x1400a1856
jmp 0x1400a15cc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 6
call fcn.14011ddb0
nop
jmp 0x140049617
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400a673f
mov r15d, 0x40
test byte [r13 + 0x150], r15b
je 0x1400a18a8
test dil, dil
jne 0x140049617
mov rax, qword [rsi + 0x18]
cmp word [rax], r15w
jne 0x1400a1ada
mov r12d, 1
mov edx, r12d
mov rcx, rsi
call fcn.1400541f0
test al, al
je 0x1400a673f
mov rcx, qword [rsi + 0x18]
add rcx, 2
xor r8d, r8d
lea rdx, str..txt
call fcn.1400481ac
mov rdi, rax
call fcn.14000fa58
test al, al
je 0x1400a192a
mov rcx, r14
call fcn.14004935c
xor eax, eax
mov qword [rsp + 0x78], rax
mov edx, eax
mov r9d, eax
cmp byte [rsp + 0x60], al
jne 0x1400a1917
lea rdx, str._base:_
mov r9, qword [rsi + 0x28]
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], al
xor r8d, r8d
mov rcx, rdi
call fcn.1401115b0
mov r8d, 0x20
lea rdx, str.rt_ccsunicode
mov rcx, rdi
call fcn.14000a280
mov r15, rax
xor eax, eax
test r15, r15
je 0x1400a7503
mov r14d, eax
mov r8, r15
mov edx, 0x104
lea rcx, [rbp + 0x8b0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
xor ebx, ebx
test rax, rax
je 0x1400a1a98
lea rcx, [rbp + 0x8b0]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], bx
jne 0x1400a197b
mov ecx, 0xa
cmp word [rbp + rax*2 + 0x8ae], cx
jne 0x1400a19af
lea rax, [rax*2 - 2]
cmp rax, 0x208
jae 0x1400a74db
mov word [rbp + rax + 0x8b0], bx
mov edx, 0x3b
lea rcx, [rbp + 0x8b0]
call sub.VCRUNTIME140.dll_wcschr
test rax, rax
je 0x1400a19c8
mov word [rax], bx
lea r8, [rbp - 0x18]
lea rdx, [0x1401bd778]
lea rcx, [rbp + 0x8b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcstok_s]
test rax, rax
je 0x1400a1a8f
mov rdx, qword [rsi + 0x28]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1400a1a8f
lea r8, [rbp - 0x18]
lea rdx, [0x1401bd778]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcstok_s]
mov rbx, rax
test rax, rax
je 0x1400a74f2
lea r8, [rbp + 0x18]
lea rdx, str._I64i
mov rcx, rax
call fcn.140058760
mov r14d, eax
cmp eax, r12d
jne 0x1400a74f2
mov rcx, qword [rbp + 0x18]
mov qword [r13 + 0x78], rcx
lea r8, [rbp - 0x18]
lea rdx, [0x1401bd778]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcstok_s]
mov rbx, rax
test rax, rax
je 0x1400a1a98
lea r8, [0x1401f8658]
lea rdx, [0x1401ca1b8]
mov rcx, rax
call fcn.140058760
cmp eax, r12d
jne 0x1400a74e1
mov eax, 0x80000000
cmp dword [0x1401f8658], eax
ja 0x1400a6586
test r14d, r14d
je 0x1400a1950
mov rcx, r15
call fcn.14000a1a8
test r14d, r14d
je 0x1400a1ab3
mov eax, 0x40
or dword [r13 + 0x150], eax
jmp 0x1400a1ac4
mov r8, qword [rsi + 0x28]
mov edx, 0x1066
mov rcx, rdi
call fcn.1400ebbc8
mov rcx, rdi
call fcn.14004935c
mov qword [rsp + 0x50], 2
jmp 0x140049a86
sub rcx, 1
je 0x1400a1b37
cmp rcx, 1
jne 0x1400a7516
lea r8, [r13 + 0x78]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b54
test al, al
je 0x1400a6586
lea r8, [0x1401f8658]
mov edx, 1
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov qword [rsp + 0x50], 2
mov eax, 0x80000000
cmp dword [0x1401f8658], eax
jbe 0x1400a1b56
jmp 0x1400a6586
lea r8, [r13 + 0x78]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b54
test al, al
je 0x1400a6586
mov qword [rsp + 0x50], 1
or dword [r13 + 0x150], r15d
jmp 0x140049a86
mov eax, 0x80
or dword [r13 + 0x150], eax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a1bc0
lea rbx, [rsi + 0x18]
jmp 0x1400a1b7e
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 7
lea ecx, [rax + 1]
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1b7c
jmp 0x1400a1bd5
mov ecx, 1
jmp 0x1400a1bd5
mov ecx, 1
bts qword [r13 + 0x278], 0x1e
mov dil, cl
jmp 0x140049a8b
mov eax, 1
mov byte [0x1401fa9b0], al
jmp 0x1400a0f67
mov edi, 1
or dword [r13 + 0xf58], edi
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
jmp 0x1400a1c0d
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
and dword [r13 + 0xf58], 0xfffffffe
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1c0b
jmp 0x14004b4bc
mov edi, 2
or dword [r13 + 0xf58], edi
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049617
lea rbx, [rsi + 0x18]
jmp 0x1400a1c69
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
and dword [r13 + 0xf58], 0xfffffffd
inc r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1c67
jmp 0x140049617
or dword [r13 + 0xf58], 8
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049617
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a1cc4
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
and dword [r13 + 0xf58], 0xfffffff7
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1cc2
jmp 0x140049617
or dword [r13 + 0xf58], 4
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049617
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a1d1f
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
and dword [r13 + 0xf58], 0xfffffffb
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1d1d
jmp 0x140049617
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov r9d, dword [rsp + 0x70]
lea eax, [r9 - 1]
mov ecx, 0x3f
cmp eax, ecx
ja 0x1400a1e02
movups xmm0, xmmword [str._cgthreads]
movaps xmmword [rbp + 0x210], xmm0
mov eax, dword [0x1401bd4b0]
mov dword [rbp + 0x220], eax
movzx eax, word [0x1401bd4b4]
mov word [rbp + 0x224], ax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x226], xmm0
movups xmmword [rbp + 0x236], xmm0
mov qword [rbp + 0x246], rax
mov word [rbp + 0x24e], ax
mov r8, qword [r15]
add r8, 0x14
lea edx, [rcx - 0x1f]
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
lea rcx, [rbp + 0x210]
call fcn.14011dce4
nop
jmp 0x14004b4bc
mov dword [rsp + 0x28], 4
mov eax, 0x40
mov dword [rsp + 0x20], eax
lea r8, str.CGTHREADS
mov edx, 0x10af
xor ecx, ecx
call fcn.1400ebbc8
nop
jmp 0x14004b4bc
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x18]
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, [0x1401ca1c0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a1e6c
lea ecx, [rax + 1]
mov dword [r13 + 0x15c], ecx
jmp 0x1400a1edc
lea rdx, str.pure
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a1e87
mov eax, 2
jmp 0x1400a1ea0
lea rdx, [0x1401baf58]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a1eae
mov eax, 3
mov dword [r13 + 0x15c], eax
mov ecx, 1
jmp 0x1400a1edc
lea rdx, str.safe32bitpreferred
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 3
mov dword [r13 + 0x15c], eax
lea ecx, [rax - 2]
or dword [r13 + 0x150], ecx
add r12, rcx
mov qword [rsp + 0x50], r12
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1e3d
mov eax, 0x1000
or dword [r13 + 0x1270], eax
bts qword [r13 + 0x278], 0x1b
jmp 0x1400a1bd5
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x18]
mov r14b, byte [rsp + 0x60]
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, [0x1401ca1f0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a1f4c
mov eax, 1
jmp 0x1400a1f9c
lea rdx, [0x1401ca1f8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a1f67
mov eax, 2
jmp 0x1400a1f9c
lea rdx, [0x1401ca200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a1f82
mov eax, 3
jmp 0x1400a1f9c
lea rdx, str.none
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
xor eax, eax
test r14b, r14b
je 0x1400a1fc5
mov ecx, dword [r13 + 0x160]
cmp ecx, 0xffffffff
je 0x1400a1fc5
cmp ecx, eax
je 0x1400a1fc5
mov r8, qword [r15]
mov edx, 0x1099
mov rcx, qword [rsp + 0x58]
call fcn.1400ebbc8
jmp 0x1400a1fcc
mov dword [r13 + 0x160], eax
mov ecx, 1
add r12, rcx
mov qword [rsp + 0x50], r12
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a1f22
jmp 0x1400a1bd5
mov eax, 0x200
or dword [r13 + 0x150], eax
mov eax, 1
mov byte [0x1401fcafc], al
jmp 0x1400a0f67
mov eax, 0x800
or dword [r13 + 0x150], eax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049a88
lea rbx, [rsi + 0x18]
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor ecx, ecx
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0xb
inc r12
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
mov eax, ecx
jb 0x1400a2024
jmp 0x140049a88
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x18]
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, str.sha1
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a20ab
mov dword [r13 + 0x1c0], 0x8004
jmp 0x1400a2110
lea rdx, str.sha256
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a20cc
mov dword [r13 + 0x1c0], 0x800c
jmp 0x1400a2110
lea rdx, str.sha384
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a20ed
mov dword [r13 + 0x1c0], 0x800d
jmp 0x1400a2110
lea rdx, str.sha512
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov dword [r13 + 0x1c0], 0x800e
mov ecx, 1
add r12, rcx
mov qword [rsp + 0x50], r12
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a207b
jmp 0x1400a1bd5
mov eax, dword [r13 + 0x150]
btr eax, 0xd
mov ecx, 0x1000
or eax, ecx
mov dword [r13 + 0x150], eax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a1bc0
lea rbx, [rsi + 0x18]
jmp 0x1400a215d
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
mov rdi, qword [rbx]
lea rdx, str.systemdll
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a218c
mov eax, 0x2000
or dword [r13 + 0x150], eax
jmp 0x1400a21ad
lea rdx, [0x1401bd46c]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0xc
mov ecx, 1
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a215b
jmp 0x1400a1bd5
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0x2e
call fcn.1400c8040
nop
jmp 0x140049617
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x18]
mov r14b, byte [rsp + 0x60]
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, [0x1401ca260]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2227
mov eax, 2
jmp 0x1400a225f
lea rdx, [0x1401ca268]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2242
mov eax, 3
jmp 0x1400a225f
lea rdx, str.none
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 1
test r14b, r14b
je 0x1400a2287
mov ecx, dword [r13 + 0x164]
test ecx, ecx
je 0x1400a2287
cmp ecx, eax
je 0x1400a2287
mov r8, qword [r15]
mov edx, 0x1099
mov rcx, qword [rsp + 0x58]
call fcn.1400ebbc8
jmp 0x1400a228e
mov dword [r13 + 0x164], eax
mov ecx, 1
add r12, rcx
mov qword [rsp + 0x50], r12
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a21fd
jmp 0x1400a1bd5
mov eax, 0x400
or dword [r13 + 0x150], eax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a1bc7
lea rbx, [rsi + 0x18]
jmp 0x1400a22ce
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0xa
lea ecx, [rax + 1]
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a22cc
jmp 0x1400a1bcc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rbx, qword [r15]
add rbx, 0x24
lea edx, [rax + 0x3d]
mov rcx, rbx
call sub.VCRUNTIME140.dll_wcschr
xor ecx, ecx
test rax, rax
je 0x1400a14ab
cmp rax, rbx
je 0x1400a14ab
lea rdi, [rax + 2]
cmp word [rdi], cx
je 0x1400a14ab
mov word [rax], cx
mov rcx, rbx
call fcn.14002ad20
mov rbx, rax
mov rcx, rdi
call fcn.14002ad20
mov rdi, rax
lea r8, [rbp - 0x58]
mov rdx, rbx
lea rcx, [0x1401fadd0]
call fcn.1400c0ab4
xor ebx, ebx
test eax, eax
je 0x1400a239b
lea r8, [rbp - 0x28]
mov rdx, rdi
lea rcx, [0x1401fadd0]
call fcn.1400c0ab4
test eax, eax
jne 0x1400a23a0
call fcn.1400eb820
mov ecx, 0x38
call fcn.1400b1c28
mov qword [rbp], rax
test rax, rax
je 0x1400a23de
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov dword [rax + 0x10], ebx
mov word [rax + 0x18], bx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
lea rcx, [0x1401f84b0]
mov qword [rax + 0x30], rcx
mov ecx, 0x1000
mov dword [rax + 0x14], ecx
jmp 0x1400a23e1
mov rax, rbx
mov qword [rbp + 0x20], rax
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0xc0]
lea rcx, [0x1401f77a0]
call fcn.140118528
lea r9, [rbp + 0x20]
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0xd8]
lea rcx, [0x1401f7990]
call fcn.140118558
nop
jmp 0x140049617
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rbx, [rsi + 0x18]
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, str.folddups
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
lea ecx, [rax + 1]
mov byte [0x1401fcdd8], cl
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2432
jmp 0x1400a1bd5
mov eax, 0x4000
or dword [r13 + 0x150], eax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049a88
lea rbx, [rsi + 0x18]
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor ecx, ecx
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0xe
inc r12
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
mov eax, ecx
jb 0x1400a2492
jmp 0x140049a88
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 6
call fcn.14011dce4
nop
jmp 0x140049617
add rcx, 4
xor eax, eax
cmp word [rcx], ax
je 0x1400a2538
call fcn.140007d80
jmp 0x1400a2510
mov word [r13 + 0x1c8], ax
xor eax, eax
jmp 0x1400a2538
mov dil, al
jmp 0x1400a0ea4
lea rdi, [rsi + 0x18]
mov r15d, 1
jmp 0x1400a254e
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, str.forcefull
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a258c
mov eax, 3
mov dword [r13 + 0x194], eax
mov eax, 0x80000000
or dword [r13 + 0x150], eax
jmp 0x1400a266e
lea rdx, str.full
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a25a7
mov eax, 3
jmp 0x1400a25fd
lea rdx, str.fastlink
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a25e0
lea rdx, str.mini
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a25e7
movabs rax, 0x4000000000
or qword [r13 + 0x278], rax
mov eax, 2
jmp 0x1400a25fd
lea rdx, str.none
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2606
xor eax, eax
mov dword [r13 + 0x194], eax
jmp 0x1400a266e
lea rdx, str.lazy
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2623
mov dword [r13 + 0x194], r15d
jmp 0x1400a266e
lea rdx, str.vc120
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a264a
mov eax, 3
mov dword [r13 + 0x194], eax
mov eax, 0x4000
jmp 0x1400a2667
lea rdx, str.ctypes
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0x800
or dword [r13 + 0x158], eax
add r12, r15
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a254c
jmp 0x14004b53c
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x18]
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, [0x1401ca308]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a26c5
mov eax, 1
or dword [0x1401fcd58], eax
jmp 0x1400a270f
lea rdx, [0x1401a1570]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a26e6
mov eax, 2
or dword [0x1401fcd58], eax
jmp 0x1400a270a
lea rdx, [0x1401a1440]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0x8000
or dword [r13 + 0x150], eax
mov eax, 1
add r12, rax
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2695
jmp 0x14004b3ba
xor eax, eax
cmp qword [rsi + 8], rax
je 0x140049617
mov rax, qword [r15]
add rax, 0x1e
mov qword [0x1401fce48], rax
call fcn.14000fa58
test al, al
je 0x140049617
mov rcx, r14
call fcn.14004935c
lea rdx, str._defArm64Native:
mov rcx, qword [0x1401fce48]
jmp 0x1400a277a
xor eax, eax
mov byte [rsp + 0x28], al
mov qword [rsp + 0x78], rax
mov byte [rsp + 0x20], al
jmp 0x1400a27ac
xor r9d, r9d
xor r8d, r8d
call fcn.1401115b0
nop
jmp 0x140049617
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rax, qword [r15]
add rax, 8
mov qword [0x1401fcb70], rax
call fcn.14000fa58
test al, al
je 0x140049617
mov rcx, r14
call fcn.14004935c
lea rdx, str._def:
mov rcx, qword [0x1401fcb70]
jmp 0x1400a277a
call fcn.14000fa58
xor r15d, r15d
test al, al
je 0x140049617
mov rcx, r14
call fcn.14004935c
mov qword [rsp + 0x78], r15
lea r8, [rbp - 0x6c]
lea rdx, str..lib
lea rcx, [rbx + 0x16]
call fcn.1400481ac
xor ebx, ebx
cmp byte [rbp - 0x6c], bl
je 0x140049617
mov byte [rsp + 0x28], bl
mov byte [rsp + 0x20], bl
lea rdx, str._defaultlib:
mov rcx, rax
jmp 0x1400a27ac
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400a673f
lea rbx, [rsi + 0x18]
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
mov rdi, qword [rbx]
lea rdx, str.nobind
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2891
btr dword [r13 + 0x150], 0x10
jmp 0x1400a28b2
lea rdx, str.unload
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
bts dword [r13 + 0x150], 0x12
mov ecx, 1
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2863
jmp 0x1400a1bd5
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0x14
call fcn.14010e158
bts qword [r13 + 0x278], 0x15
jmp 0x140049617
bts dword [r13 + 0x150], 0x11
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a2948
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a2910
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0x11
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a290e
bts qword [r13 + 0x278], 0x16
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
lea r12d, [rax + 1]
cmp qword [rsi + 8], r12
jne 0x1400a14ab
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov eax, dword [rsp + 0x70]
test eax, 0xffff0000
jne 0x1400a6586
jmp 0x1400a2508
bts dword [r13 + 0x150], 0x13
jmp 0x1400a0f67
bts dword [r13 + 0x150], 0x14
jmp 0x1400a0f67
mov eax, 0x2000
or word [r13 + 0x5a], ax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a29d8
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, str.system
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0x1000
or word [r13 + 0x5a], ax
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a29d6
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0x14
call fcn.140031148
mov rbx, rax
mov edx, 0x3d
mov rcx, rax
call sub.VCRUNTIME140.dll_wcschr
xor r15d, r15d
test rax, rax
je 0x1400a14ab
cmp rax, rbx
je 0x1400a14ab
lea r9, [rax + 2]
cmp word [r9], r15w
je 0x1400a14ab
mov word [rax], r15w
lea rdx, [r13 + 0x12b0]
mov byte [rsp + 0x20], r15b
jmp 0x14004b0d0
bts dword [r13 + 0x150], 0x15
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
jmp 0x1400a2a93
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
mov rdi, qword [rbx]
lea rdx, str.uponly
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2ac0
mov eax, 0x4000
or word [r13 + 0x5a], ax
jmp 0x1400a2ae5
lea rdx, [0x1401ca350]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0x2000
or word [r13 + 0xa6], ax
inc r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2a91
jmp 0x14004b3ba
lea rbx, [rsi + 0x18]
mov edi, 1
jmp 0x1400a2b04
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0xffbf
and word [r13 + 0xa6], ax
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2b02
jmp 0x14004b56b
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov eax, 1
cmp qword [rsi + 8], rax
jne 0x1400a14ab
mov rbx, qword [r15]
add rbx, 0x2a
lea edx, [rax + 0x3c]
mov rcx, rbx
call sub.VCRUNTIME140.dll_wcschr
lea rcx, [rax + 2]
xor r15d, r15d
test rax, rax
je 0x1400a14ab
cmp rax, rbx
je 0x1400a14ab
cmp word [rcx], r15w
je 0x1400a14ab
mov word [rax], r15w
lea rdx, [rbp + 0x28]
call fcn.1400586b0
test al, al
je 0x1400a14ab
mov byte [rsp + 0x20], r15b
xor r9d, r9d
mov r8, rbx
lea rdx, [0x1401fcab8]
mov rcx, qword [rbp - 0x68]
call fcn.14004fe7c
mov rcx, qword [rbp + 0x28]
mov rax, qword [0x1401fcac0]
mov qword [rax + 0x28], rcx
jmp 0x140049617
mov r8b, dil
mov rdx, qword [rsp + 0x58]
mov rcx, r13
call fcn.1401187a8
nop
jmp 0x140049617
mov eax, 1
mov byte [0x1401fce81], al
jmp 0x140049617
mov edi, 1
mov byte [0x1401fce81], dil
mov byte [0x1401fce80], dil
jmp 0x140049617
mov eax, dword [r13 + 0x150]
btr eax, 0x18
bts eax, 0x19
mov dword [r13 + 0x150], eax
jmp 0x1400a0f67
bts dword [r13 + 0x150], 0x1a
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x140049617
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a2c52
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0x1a
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2c50
jmp 0x140049617
bts dword [r13 + 0x150], 0x1b
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a2ce3
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a2cab
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0x1b
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2ca9
movabs rax, 0x40000000000
jmp 0x140049a03
bts dword [r13 + 0x150], 0x1d
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a2d12
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0x1d
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2d10
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov eax, dword [rsp + 0x70]
mov dword [0x1401fcfb0], eax
mov eax, 2
jmp 0x140049a03
mov rcx, rbx
test dword [r13 + 0x154], 0x200000
je 0x1400a2e10
lea r9, str.NOENTRY
mov r8, qword [r15]
mov edx, 0x10a2
call fcn.140124b74
jmp 0x1400a2e08
add rdi, 7
lea rcx, [rdi + rdi]
call fcn.1400b1c28
mov rbx, rax
lea r8, str.ENTRY:
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov r8, r15
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov r9, rbx
mov r12, qword [rsp + 0x68]
mov r8, qword [r12]
mov edx, 0x10a2
mov rcx, qword [rbp - 0x68]
call fcn.140124b74
mov rcx, rbx
call fcn.14004935c
mov rcx, r15
call fcn.14004935c
mov rcx, r14
jmp 0x140049cfa
call fcn.140118cec
test al, al
je 0x1400a2e3b
test byte [r13 + 0x278], 8
je 0x1400a2e87
mov r8d, dword [rbx + 0x4c]
test r8d, r8d
je 0x1400a2e3b
mov edx, 0x1096
mov rcx, rbx
call fcn.140124b74
jmp 0x1400a2e08
test byte [r13 + 0x278], 8
je 0x1400a2e87
test byte [r13 + 0x280], 8
jne 0x1400a2e87
mov rdx, r14
mov rcx, qword [0x1401fa9b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
test eax, eax
je 0x1400a2e08
mov rcx, qword [0x1401fa9b8]
call fcn.140046110
mov r15, rax
or rdi, 0xffffffffffffffff
xor eax, eax
inc rdi
cmp word [r15 + rdi*2], ax
jne 0x1400a2e78
jmp 0x1400a2dac
xor eax, eax
jmp 0x14004aade
test dil, dil
je 0x14004aaea
mov rcx, r14
call fcn.140045bf8
mov qword [0x1401fa9b8], rax
or qword [r13 + 0x280], 8
mov rcx, r14
call fcn.14004935c
mov r14, qword [0x1401fa9b8]
jmp 0x14004aaf1
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rdi, [rsi + 0x18]
lea r14d, [rax + 1]
jmp 0x1400a2eda
xor eax, eax
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, str.none
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2eff
xor eax, eax
jmp 0x1400a2f50
lea rdx, str.prompt
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2f1c
mov dword [0x1401f9b74], r14d
jmp 0x1400a2f91
lea rdx, str.queue
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2f37
mov eax, 2
jmp 0x1400a2f50
lea rdx, str.send
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2f58
mov eax, 3
mov dword [0x1401f9b74], eax
jmp 0x1400a2f91
lea rdx, str.test
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a2f72
mov byte [rbp - 0x78], r14b
jmp 0x1400a2f91
lea rdx, str.internal
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov byte [0x1401fce1d], r14b
add r12, r14
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2ed8
jmp 0x14004b3ba
bts dword [r13 + 0x150], 0x16
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a2fc7
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0x16
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a2fc5
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rax, qword [rsi + 0x18]
xor ebx, ebx
cmp word [rax], bx
je 0x1400a303c
lea r8, [0x1401f8640]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
jne 0x1400a303c
jmp 0x1400a6586
mov r12d, 1
jmp 0x1400a0e78
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
lea rdx, str.deterministic
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
lea r12d, [rax + 1]
mov byte [0x1401fa9b0], r12b
jmp 0x1400a0e78
mov r9, qword [rbp - 0x68]
mov r8d, 1
mov rdx, qword [0x1401fa408]
mov rdx, qword [rdx + 8]
mov rcx, rbx
call fcn.1400034b4
nop
jmp 0x140049617
mov byte [rsp + 0x20], al
xor r9d, r9d
lea rdx, [0x1401fc550]
jmp 0x14004b0d0
movabs rax, 0x2000000000
or qword [r13 + 0x278], rax
xor eax, eax
mov dil, al
cmp qword [rsi + 8], rax
je 0x140049a90
lea r12d, [rax + 1]
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov eax, dword [rsp + 0x70]
mov dword [r13 + 0x168], eax
jmp 0x1400a0e78
mov ecx, 1
mov byte [0x1401fcbb2], cl
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a1bd5
lea rbx, [rsi + 0x18]
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
xor eax, eax
mov byte [0x1401fcbb2], al
lea ecx, [rax + 1]
add r12, rcx
mov qword [rsp + 0x50], r12
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a3118
jmp 0x1400a1bd5
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rax, qword [r15]
add rax, 6
mov qword [0x1401faeb0], rax
jmp 0x140049617
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
lea r12d, [rax + 1]
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov r9d, dword [rsp + 0x70]
test r9d, r9d
je 0x1400a0eb5
lea eax, [r9 - 1]
test r9d, eax
jne 0x1400a0eb5
mov dword [r13 + 0x84], r9d
lea eax, [r12 + 0xf]
or qword [r13 + 0x278], rax
jmp 0x1400a0e78
bts dword [r13 + 0x150], 0x1e
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a3229
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a31f1
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
btr dword [r13 + 0x150], 0x1e
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a31ef
mov eax, 0x20
jmp 0x14004b4b5
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a3317
lea rdi, [rsi + 0x18]
lea r15d, [rax + 1]
cmp qword [rdi - 8], rax
jne 0x1400a14ab
mov rbx, qword [rdi]
lea rdx, str.guardehcont
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor r14d, r14d
test eax, eax
jne 0x1400a327b
lea eax, [r14 + 0x10]
or dword [r13 + 0x1a8], eax
jmp 0x1400a3304
lea rdx, str.multiple
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a329d
mov eax, 2
or dword [r13 + 0x1a8], eax
jmp 0x1400a32ff
lea rdx, [0x1401a4058]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a32bb
or dword [r13 + 0x1a8], 4
jmp 0x1400a32ff
lea rdx, str.pgorepro
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a32e0
mov byte [0x1401fac60], r15b
or dword [r13 + 0x1a8], 8
jmp 0x1400a32ff
lea rdx, str.unresolved
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
or dword [r13 + 0x1a8], r15d
mov eax, 0x10
add r12, r15
add rdi, rax
cmp r12, qword [rsi + 8]
mov rax, r14
jb 0x1400a3247
mov r12, qword [rsp + 0x68]
cmp dword [r13 + 0x1a8], eax
jne 0x14004b3bf
mov eax, 3
mov dword [r13 + 0x1a8], eax
jmp 0x14004b3bf
mov eax, 1
mov byte [0x1401fa520], al
xor eax, eax
mov qword [0x1401fcae8], rax
jmp 0x1400a0f73
btr dword [r13 + 0x154], 0x1f
jmp 0x1400a0f67
bts qword [r13 + 0x278], 0x1d
xor eax, eax
mov dil, al
cmp qword [rsi + 8], rax
je 0x140049a90
lea r12d, [rax + 1]
lea r8, [rsp + 0x70]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b68
test al, al
je 0x1400a6586
mov eax, dword [rsp + 0x70]
mov dword [r13 + 0x16c], eax
jmp 0x1400a0e78
mov rax, qword [rsi + 8]
xor ebx, ebx
test rax, rax
je 0x1400a673f
lea rdi, [rsi + 0x18]
mov rbx, qword [rdi]
lea rdx, [0x1401bd46c]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3419
xor eax, eax
mov dword [r13 + 0x1ac], eax
xor ebx, ebx
inc r12
add rdi, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a33b7
movzx ecx, word [r13 + 0xa6]
movzx eax, cx
mov edx, 0x4000
or ax, dx
mov edx, 0xbfff
and cx, dx
cmp dword [r13 + 0x1ac], ebx
cmovne cx, ax
mov word [r13 + 0xa6], cx
jmp 0x14004b4bc
lea rdx, str.addrtakeniat
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3442
mov eax, 0x200
jmp 0x1400a3439
or dword [r13 + 0x1ac], eax
jmp 0x1400a33d7
lea rdx, str.noaddrtakeniat
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400a33d7
lea rdx, str.delayloadsignret
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3479
lea ebx, [rax + 1]
or dword [r13 + 0x154], ebx
jmp 0x1400a33d7
lea rdx, str.nodelayloadsignret
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a349a
and dword [r13 + 0x154], 0xfffffffe
jmp 0x1400a33d7
lea rdx, str.delayloadsignretnopunwind
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a34bf
mov eax, 2
or dword [r13 + 0x154], eax
jmp 0x1400a33d7
lea rdx, str.nodelayloadsignretnopunwind
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a34e0
and dword [r13 + 0x154], 0xfffffffd
jmp 0x1400a33d7
lea rdx, str.ehcont
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a34fe
mov eax, 0x1000
jmp 0x1400a3439
lea rdx, str.noehcont
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3520
btr dword [r13 + 0x1ac], 0xc
jmp 0x1400a33d7
lea rdx, str.export
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3543
lea ebx, [rax + 1]
or dword [r13 + 0x1ac], ebx
jmp 0x1400a33d7
lea rdx, str.noexport
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3564
and dword [r13 + 0x1ac], 0xfffffffe
jmp 0x1400a33d7
lea rdx, str.exportsuppress
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a3588
or dword [r13 + 0x1ac], 0xe0
jmp 0x1400a33d7
lea rdx, str.noexportsuppress
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a35ac
and dword [r13 + 0x1ac], 0xffffff1f
jmp 0x1400a33d7
lea rdx, str.exportsuppressinfo
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a35d0
call fcn.1400eb820
nop
jmp 0x140049cdc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
test dil, dil
je 0x1400a37d2
cmp dword [r13 + 0x1b8], eax
je 0x1400a37d2
mov qword [rsp + 0x50], 2
jmp 0x140049a88
mov rax, qword [rsi + 0x18]
xor edi, edi
cmp word [rax], di
je 0x1400a37f6
lea r8, [r13 + 0xb8]
xor edx, edx
mov rcx, rsi
call fcn.1400c3b54
test al, al
je 0x1400a6586
mov r8d, 2
cmp qword [rsi + 8], r8
jb 0x1400a3832
lea r12d, [r8 - 1]
mov bl, r12b
lea r8, [r13 + 0xc0]
mov edx, r12d
mov rcx, rsi
call fcn.1400c3b54
test al, al
je 0x1400a6586
lea r9d, [r12 + 2]
mov eax, r9d
lea r8d, [r12 + 1]
jmp 0x1400a383e
mov bl, dil
mov eax, 1
lea r9d, [rax + 2]
mov dword [r13 + 0x1b8], eax
mov rcx, qword [r13 + 0xc0]
test r9b, cl
je 0x1400a3859
and rcx, 0xfffffffffffffffc
add rcx, 4
mov qword [r13 + 0xc0], rcx
mov rax, qword [r13 + 0xb8]
test r9b, al
je 0x1400a3874
and rax, 0xfffffffffffffffc
add rax, 4
mov qword [r13 + 0xb8], rax
cmp rax, rcx
jae 0x1400a389a
xor eax, eax
test bl, bl
jne 0x1400a7532
mov qword [r13 + 0xb8], rcx
mov dword [r13 + 0x1b8], r8d
jmp 0x1400a389c
xor eax, eax
mov dil, al
jmp 0x14004b48a
mov eax, 0x20
or word [r13 + 0xa6], ax
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x1400a3900
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a38c4
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
mov eax, 0xffdf
and word [r13 + 0xa6], ax
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a38c2
movabs rax, 0x200000000
jmp 0x14004b4b5
or dword [r13 + 0x154], 4
jmp 0x1400a0f67
or dword [r13 + 0x154], 8
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a393b
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
and dword [r13 + 0x154], 0xfffffff7
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a3939
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b4bc
lea rbx, [rsi + 0x18]
lea edi, [rax + 1]
jmp 0x1400a398e
xor eax, eax
cmp qword [rbx - 8], rax
jne 0x1400a14ab
lea rdx, [0x1401bd46c]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400a14ab
add r12, rdi
add rbx, 0x10
cmp r12, qword [rsi + 8]
jb 0x1400a398c
jmp 0x14004b4bc
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0x16
call fcn.14002ad20
lea r8, [rbp + 8]
mov rdx, rax
lea rcx, [0x1401fae30]
jmp 0x1400a39fe
lea r8, [rbp + 0xc]
mov rdx, rbx
mov rcx, rax
call fcn.1400c0ab4
jmp 0x1400a3a25
test eax, eax
jne 0x140049617
call fcn.1400eb820
nop
jmp 0x140049617
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0xe
mov qword [0x1401fae98], rcx
cmp qword [0x1401fa508], rax
je 0x140049617
mov eax, pe_nt_image_headers64
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x38], rax
mov eax, 0x200
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x450]
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wsplitpath_s]
mov rcx, r14
call fcn.14004935c
lea rdx, [rbp + 0x450]
or rdi, 0xffffffffffffffff
mov rcx, rdi
xor eax, eax
inc rcx
cmp word [rdx + rcx*2], ax
jne 0x1400a3ab8
lea rdx, [rbp + 0x250]
mov rax, rdi
xor r15d, r15d
inc rax
cmp word [rdx + rax*2], r15w
jne 0x1400a3ace
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
cmp qword [r13 + 0x1350], rax
jne 0x140049617
lea ecx, [rax + 0x38]
call fcn.1400c2628
mov qword [rbp + 0x80], rax
xor ebx, ebx
test rax, rax
je 0x1400a3b72
mov eax, 0x10
jmp 0x1400a3b96
or dword [r13 + 0x154], eax
jmp 0x1400a0f67
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
xor eax, eax
cmp qword [rsi + 8], rax
je 0x1400a673f
mov rcx, qword [r15]
add rcx, 0x26
call fcn.14002ad20
mov rbx, rax
mov rax, qword [0x1401fca98]
xor r15d, r15d
test rax, rax
jne 0x1400a39f4
lea ecx, [rax + 0x60]
call fcn.1400b1c28
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400a39ea
mov r14b, byte [0x1401fac71]
mov r15b, byte [0x1401fcad0]
mov eax, 1
mov byte [0x1401fac71], al
mov byte [0x1401fcad0], al
xor eax, eax
cmp qword [rsi + 8], rax
jbe 0x14004b3ba
lea rdi, [rsi + 0x18]
jmp 0x1400a3ede
xor eax, eax
movabs r14, 0x20000000000
test dil, dil
je 0x1400a4000
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
mov edx, 0x47b
mov rcx, qword [rsp + 0x58]
call fcn.14005e3e8
int3
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
mov edx, 0x47a
mov rcx, qword [rsp + 0x58]
call fcn.14005e3e8
int3
mov r12, qword [rsp + 0x68]
mov r8, qword [r12]
mov edx, 0xfd8
mov rcx, rbx
call fcn.1400ebbc8
nop
jmp 0x140049aa4
test rdi, rdi
je 0x14004964a
mov r8, rdi
lea rdx, str.___s__r_n
mov rcx, qword [0x1401fa988]
call fcn.1400ebc1c
nop
jmp 0x14004964a
lea rcx, [rbp + 0x110]
jmp 0x1400a74d1
lea rcx, [rbp + 0x130]
call fcn.1400232b0
jmp 0x1400a14ab
call fcn.14005a730
int3
mov r8, rbx
mov edx, 0x457
mov rcx, rdi
call fcn.14005e3e8
int3
mov r8, rbx
mov edx, 0x457
mov rcx, rdi
call fcn.14005e3e8
int3
mov r8, rdi
mov edx, 0x450
mov rcx, qword [rsp + 0x58]
call fcn.14005e3e8
int3
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
add r8, 0xa
mov edx, 0x457
mov rcx, qword [rsp + 0x58]
call fcn.14005e3e8
int3
lea r8, str._HEAP
mov edx, 0x4cd
xor ecx, ecx
call fcn.14005e3e8
int3
mov byte [0], r14b
jmp 0x14004967a