Function at 0x14009e6a0
Capabilities:
Manipulate console buffer

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3fd0]
mov eax, 0x40d0
call fcn.1400ccd80
sub rsp, rax
mov rax, qword [0x1402151f8]
xor rax, rsp
mov qword [rbp + 0x3fc0], rax
mov r13, rcx
mov qword [rbp - 0x68], rdx
xor ecx, ecx
mov dword [rsp + 0x4c], r8d
mov edi, ecx
mov dword [rsp + 0x34], ecx
lea r15, [rbp - 0x40]
mov edx, 0xffffffff
movzx eax, byte [r13 + 0x11c]
mov r12, r9
mov ebx, dword [r13 + 0x118]
movzx esi, byte [r13 + 0x11d]
movzx r14d, byte [r13 + 0x11e]
mov dword [r9], ecx
mov rcx, qword [0x140257080]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x38], ebx
mov byte [rsp + 0x31], sil
mov byte [rsp + 0x30], r14b
mov qword [rsp + 0x40], r15
call qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
test eax, eax
jne 0x14009fb9f
xor r8d, r8d
mov r11d, 0x2000
mov dword [rsp + 0x58], r8d
cmp dword [rsp + 0x4c], edi
jbe 0x14009fab5
mov edx, dword [rsp + 0x4c]
mov eax, r8d
mov qword [rsp + 0x60], rax
nop dword [rax + rax]
mov rcx, qword [rbp - 0x68]
add rax, rax
cmp dword [0x14021670c], 0
movups xmm0, xmmword [rcx + rax*8]
movups xmmword [rsp + 0x68], xmm0
mov eax, dword [rsp + 0x68]
jne 0x14009e8fb
test eax, eax
je 0x14009e8fb
mov rbx, qword [rsp + 0x70]
mov r9d, eax
mov dword [rsp + 0x28], r8d
xor edx, edx
mov qword [rsp + 0x20], r8
mov ecx, 0xfde9
mov r8, rbx
call qword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
mov edi, eax
test eax, eax
je 0x14009faab
lea r15d, [rax*2 + 2]
xor edx, edx
mov eax, edx
mov dword [rsp + 0x3c], r15d
mov esi, 0x2000
cmp r15d, esi
seta al
mov dword [rsp + 0x34], eax
jbe 0x14009e806
mov ecx, r15d
test r15d, r15d
je 0x14009e7fc
call qword [fcn.1400edbe8]
mov qword [rsp + 0x40], rax
jmp 0x14009e80b
mov rax, rdx
mov qword [rsp + 0x40], rdx
jmp 0x14009e80b
mov rax, qword [rsp + 0x40]
mov r9d, dword [rsp + 0x68]
mov r8, rbx
mov dword [rsp + 0x28], edi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
test eax, eax
je 0x14009fa83
mov r15, qword [rsp + 0x40]
xor r14d, r14d
mov esi, r14d
mov r11d, 0x2000
nop dword [rax]
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009e895
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x78]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009e88f
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009e850
movzx r14d, byte [rsp + 0x30]
cmp dword [rsp + 0x3c], r11d
jbe 0x14009e8e7
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
movzx esi, byte [rsp + 0x31]
xor r8d, r8d
mov dword [rsp + 0x34], r8d
mov r11d, 0x2000
mov edi, r8d
mov dword [rax], ebx
lea rax, [rbp - 0x40]
mov ebx, dword [rsp + 0x38]
mov qword [rsp + 0x40], rax
jmp 0x14009fa5a
mov ebx, dword [rsp + 0x38]
xor r8d, r8d
movzx esi, byte [rsp + 0x31]
mov edi, r8d
jmp 0x14009fa5a
mov ecx, r8d
mov dword [rsp + 0x3c], ecx
test eax, eax
je 0x14009fa5e
nop word [rax + rax]
mov rdx, qword [rsp + 0x70]
mov r10d, dword [rsp + 0x48]
mov eax, ecx
movzx edx, byte [rax + rdx]
movzx eax, dl
test r10b, r10b
jne 0x14009e96a
not al
movzx eax, al
bsr r8d, eax
je 0x14009e9a8
cmp r8d, 7
jne 0x14009e93f
movzx r9d, dl
jmp 0x14009e9ae
cmp r8d, 5
ja 0x14009e9a8
mov ecx, 8
movzx eax, dl
sub ecx, r8d
mov r9d, 0xff
sar r9d, cl
mov r10d, 6
and r9d, eax
sub r10b, r8b
xor r8d, r8d
jmp 0x14009e984
and al, 0xc0
cmp al, 0x80
jne 0x14009e99d
movzx r9d, dl
mov eax, ebx
and r9d, 0x3f
shl eax, 6
add r10b, 0xff
or r9d, eax
mov ecx, dword [rsp + 0x3c]
mov dword [rsp + 0x38], r9d
mov dword [rsp + 0x48], r10d
test r10b, r10b
jne 0x14009fa40
jmp 0x14009e9b3
dec ecx
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x3c], ecx
mov r9d, 0xfffd
mov dword [rsp + 0x38], r9d
test r14b, r14b
jne 0x14009e9e3
cmp r9d, 0x1b
je 0x14009e9db
cmp r9d, 0x9b
jne 0x14009ed4e
mov r14b, 4
mov byte [r13 + 0x11f], 0
jmp 0x14009fa38
mov r14b, 2
jmp 0x14009fa38
cmp r14b, 2
jne 0x14009eff9
lea eax, [r9 - 0x1b]
cmp eax, 0x48
ja case.0x14009ea13.28
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x9fbc4]
mov ecx, dword [rdx + rax*4 + 0x9fba8]
add rcx, rdx
jmp rcx
mov r14b, 4
mov byte [r13 + 0x11f], 0
mov byte [rsp + 0x30], r14b
mov ecx, dword [rsp + 0x3c]
jmp 0x14009fa3d
mov ecx, dword [rsp + 0x3c]
mov r14b, 8
jmp 0x14009fa38
xor r14d, r14d
mov esi, r14d
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009ea85
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x7c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009ea7f
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009ea40
cmp dword [rsp + 0x34], r14d
je 0x14009eab7
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
lea r15, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r15
mov dword [rax], ebx
mov edi, r14d
movzx esi, word [reloc.WS2_32.dll_getsockopt]
mov dword [rsp + 0x50], r14d
cmp dword [r12], r14d
jne 0x14009eb80
mov rcx, qword [r13 + 0x110]
movzx edx, si
call qword [sym.imp.KERNEL32.DLL_SetConsoleTextAttribute]
test eax, eax
je 0x14009eb76
mov rcx, qword [r13 + 0x110]
mov ebx, r14d
mov edx, ebx
call qword [sym.imp.KERNEL32.DLL_SetConsoleCursorPosition]
test eax, eax
je 0x14009eb76
nop
mov rcx, qword [r13 + 0x110]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.DLL_GetConsoleScreenBufferInfo]
test eax, eax
je 0x14009eb76
movsx eax, word [rbp - 0x60]
mov edx, 0x20
movsx r8d, word [rbp - 0x5e]
mov r9d, ebx
mov rcx, qword [r13 + 0x110]
imul r8d, eax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.DLL_FillConsoleOutputCharacterW]
test eax, eax
je 0x14009eb6b
mov r8d, dword [rsp + 0x54]
lea rax, [rsp + 0x54]
mov rcx, qword [r13 + 0x110]
mov r9d, ebx
movzx edx, si
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.DLL_FillConsoleOutputAttribute]
test eax, eax
jne 0x14009eb8e
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x57
je 0x14009eb00
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
movzx esi, byte [rsp + 0x31]
mov ecx, dword [rsp + 0x3c]
jmp 0x14009fa38
movsx eax, word [rbp - 0x60]
mov ecx, r14d
movsx edx, word [rbp - 0x50]
mov dword [0x14021688c], eax
movsx eax, word [rbp - 0x54]
sub edx, eax
mov dword [0x14021679c], r14d
movsx eax, word [rbp - 0x5a]
inc edx
sub eax, edx
mov dword [0x1402167c4], edx
inc eax
test eax, eax
jle 0x14009ebc8
mov dword [0x14021679c], eax
mov ecx, eax
movsx r8d, word [rbp - 0x5e]
lea eax, [rdx + rcx]
cmp eax, r8d
jle 0x14009ebe0
mov ecx, r8d
sub ecx, edx
mov dword [0x14021679c], ecx
test ecx, ecx
jns 0x14009eb80
movzx esi, byte [rsp + 0x31]
mov ecx, dword [rsp + 0x3c]
mov dword [0x14021679c], r14d
jmp 0x14009fa38
xor r14d, r14d
mov esi, r14d
nop
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009ec44
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x80]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009ec3e
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009ec00
cmp dword [rsp + 0x34], r14d
je 0x14009ec76
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
lea r15, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r15
mov dword [rax], ebx
mov r8, r12
mov dl, 1
mov rcx, r13
mov edi, r14d
call fcn.14009e410
mov ecx, dword [rsp + 0x3c]
movzx esi, byte [rsp + 0x31]
jmp 0x14009fa38
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009ece4
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x7c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009ecde
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009eca0
cmp dword [rsp + 0x34], r14d
je 0x14009ed16
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
lea r15, [rbp - 0x40]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x40], r15
mov dword [rax], ebx
mov r8, r12
mov dl, 1
mov rcx, r13
mov edi, r14d
call fcn.14009e540
mov ecx, dword [rsp + 0x3c]
movzx esi, byte [rsp + 0x31]
jmp 0x14009fa38
xor r14b, r14b
lea eax, [r9 - 0x40]
mov byte [rsp + 0x30], r14b
cmp eax, 0x1f
ja 0x14009ed4e
mov ecx, dword [rsp + 0x3c]
jmp 0x14009fa3d
cmp r9d, 0xffff
jbe 0x14009ed62
mov eax, 0xfffd
mov dword [rsp + 0x38], eax
jmp 0x14009ed83
cmp r9d, 0xa
je 0x14009eef6
cmp r9d, 0xd
je 0x14009ee44
cmp r9d, 0xffff
ja case.0x14009ea13.27
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 1
jae 0x14009ee23
xor r14d, r14d
mov esi, r14d
nop dword [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009ede4
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x78]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009edde
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009eda0
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14009ee1f
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14009ee21
xor eax, eax
mov edi, eax
mov ebx, dword [rsp + 0x38]
xor sil, sil
mov ecx, dword [rsp + 0x3c]
mov eax, edi
inc edi
mov byte [rsp + 0x31], sil
xor r8d, r8d
mov word [rbp + rax*2 - 0x40], bx
jmp 0x14009fa44
cmp sil, 0xa
je 0x14009efe7
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 1
jae 0x14009efdd
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009eeb4
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x70]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009eeae
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009ee70
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14009efd4
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14009efd6
cmp sil, 0xd
je 0x14009ee4e
mov eax, edi
mov rcx, r11
sub rcx, rax
cmp rcx, 2
jae 0x14009efa8
xor r14d, r14d
mov esi, r14d
nop dword [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], r14d
jne 0x14009ef64
mov rcx, qword [r13 + 0x110]
lea r9, [rbp - 0x74]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009ef5e
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009ef20
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14009ef9f
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
mov dword [rax], ebx
xor eax, eax
mov dword [rsp + 0x34], eax
jmp 0x14009efa1
xor eax, eax
mov r9d, dword [rsp + 0x38]
mov edi, eax
mov eax, edi
mov ecx, reloc.WS2_32.dll_listen
inc edi
mov byte [rsp + 0x31], r9b
movzx esi, r9b
mov word [rbp + rax*2 - 0x40], cx
mov ecx, 0xa
mov word [rbp + rdi*2 - 0x40], cx
inc edi
mov ecx, dword [rsp + 0x3c]
jmp 0x14009fa3d
xor eax, eax
mov r9d, dword [rsp + 0x38]
mov edi, eax
mov eax, edi
inc edi
mov word [rbp + rax*2 - 0x40], r9w
mov ecx, dword [rsp + 0x3c]
movzx esi, r9b
mov byte [rsp + 0x31], r9b
jmp 0x14009fa3d
test r14b, 4
je 0x14009f9be
test r14b, 0x10
jne 0x14009f99d
lea eax, [r9 - 0x30]
cmp eax, 9
ja 0x14009f0c2
movzx eax, byte [r13 + 0x11f]
mov ebx, dword [rsp + 0x38]
test r14b, 0x20
jne 0x14009f06f
cmp al, 4
jb 0x14009f041
or r14b, 0x10
mov byte [rsp + 0x30], r14b
xor r8d, r8d
jmp 0x14009fa44
inc al
or r14b, 0x20
movzx ecx, al
xor r8d, r8d
mov byte [r13 + 0x11f], cl
lea eax, [r9 - 0x30]
mov byte [rsp + 0x30], r14b
mov word [r13 + rcx*2 + 0x11e], ax
mov ecx, dword [rsp + 0x3c]
jmp 0x14009fa44
movzx eax, al
lea rdx, [rax*2]
movzx eax, word [rdx + r13 + 0x11e]
lea ecx, [rax + rax*4]
add ecx, ecx
cmp ecx, 0xffff
jbe 0x14009f0a5
mov ecx, dword [rsp + 0x3c]
or r14b, 0x10
mov byte [rsp + 0x30], r14b
xor r8d, r8d
jmp 0x14009fa44
sub cx, 0x30
add cx, r9w
mov word [rdx + r13 + 0x11e], cx
xor r8d, r8d
mov ecx, dword [rsp + 0x3c]
jmp 0x14009fa44
cmp r9d, 0x3b
jne 0x14009f115
test r14b, 0x20
je 0x14009f0d7
and r14b, 0xdf
jmp 0x14009fa38
movzx eax, byte [r13 + 0x11f]
mov ebx, dword [rsp + 0x38]
cmp al, 4
jb 0x14009f0f8
or r14b, 0x10
mov byte [rsp + 0x30], r14b
xor r8d, r8d
jmp 0x14009fa44
inc al
movzx eax, al
xor r8d, r8d
mov byte [r13 + 0x11f], al
mov word [r13 + rax*2 + 0x11e], r8w
jmp 0x14009fa44
cmp r9d, 0x3f
jne 0x14009f138
test r14b, 0x20
jne 0x14009f12f
cmp byte [r13 + 0x11f], 0
je 0x14009fa3d
or r14b, 0x10
jmp 0x14009fa38
lea eax, [r9 - 0x40]
cmp eax, 0x3e
ja 0x14009f12f
movzx edx, byte [r13 + 0x11f]
test dl, dl
jne 0x14009f153
cmp r9d, 0x5b
je 0x14009f12f
lea eax, [r9 - 0x41]
cmp eax, 0x34
ja case.0x14009f17b.73
lea r8, [0x140000000]
movzx eax, byte [r8 + rax + 0x9fc50]
mov ecx, dword [r8 + rax*4 + 0x9fc10]
add rcx, r8
jmp rcx
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f181
cmp dword [rsp + 0x34], 0
je 0x14009f1c4
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f1df
movzx r9d, word [r13 + 0x120]
jmp 0x14009f1e5
mov r9d, 1
neg r9d
mov r8b, 1
xor edx, edx
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], 1
mov rcx, r13
call fcn.14009dc60
movzx esi, byte [rsp + 0x31]
mov ecx, dword [rsp + 0x3c]
xor r8d, r8d
xor r14b, r14b
mov byte [rsp + 0x30], r14b
jmp 0x14009fa40
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f220
cmp dword [rsp + 0x34], 0
je 0x14009f263
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f281
movzx r9d, word [r13 + 0x120]
jmp 0x14009f1e8
mov r9d, 1
jmp 0x14009f1e8
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f290
cmp dword [rsp + 0x34], 0
je 0x14009f2d3
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f2f7
movzx edx, word [r13 + 0x120]
xor r9d, r9d
mov r8b, 1
jmp 0x14009f1ed
mov edx, 1
xor r9d, r9d
movzx r8d, dl
jmp 0x14009f1ed
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f310
cmp dword [rsp + 0x34], 0
je 0x14009f353
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f379
movzx edx, word [r13 + 0x120]
mov r8b, 1
neg edx
xor r9d, r9d
jmp 0x14009f1ed
mov edx, 1
mov r8b, 1
neg edx
xor r9d, r9d
jmp 0x14009f1ed
xor eax, eax
mov esi, eax
nop
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f390
cmp dword [rsp + 0x34], 0
je 0x14009f3d3
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f3f4
movzx r9d, word [r13 + 0x120]
xor r8d, r8d
jmp 0x14009f1eb
mov r9d, 1
xor r8d, r8d
jmp 0x14009f1eb
xor eax, eax
mov esi, eax
nop word [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f410
cmp dword [rsp + 0x34], 0
je 0x14009f453
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f477
movzx r9d, word [r13 + 0x120]
neg r9d
xor r8d, r8d
jmp 0x14009f1eb
mov r9d, 1
neg r9d
xor r8d, r8d
jmp 0x14009f1eb
xor eax, eax
mov esi, eax
nop dword [rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f490
cmp dword [rsp + 0x34], 0
je 0x14009f4d3
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
cmp byte [r13 + 0x11f], 1
mov edi, ebx
mov dword [rsp + 0x34], ebx
jb 0x14009f502
movzx eax, word [r13 + 0x120]
test ax, ax
je 0x14009f502
movzx edx, ax
xor r9d, r9d
dec edx
xor r8d, r8d
jmp 0x14009f1ed
xor r9d, r9d
mov edx, ebx
xor r8d, r8d
jmp 0x14009f1ed
xor ecx, ecx
mov esi, ecx
nop dword [rax]
nop word [rax + rax]
mov ebx, edi
sub ebx, esi
cmp ebx, r11d
cmova ebx, r11d
cmp dword [r12], 0
jne 0x14009f568
mov eax, esi
lea r9, [rsp + 0x5c]
mov qword [rsp + 0x20], rcx
mov r8d, ebx
mov rcx, qword [r13 + 0x110]
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009f560
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov r11d, 0x2000
xor ecx, ecx
add esi, ebx
cmp esi, edi
jb 0x14009f520
cmp dword [rsp + 0x34], 0
je 0x14009f586
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
movzx ecx, byte [r13 + 0x11f]
xor ebx, ebx
mov dword [rsp + 0x34], ebx
mov edi, ebx
cmp cl, 1
jb 0x14009f5b1
movzx eax, word [r13 + 0x120]
test ax, ax
je 0x14009f5b1
movzx r9d, ax
dec r9d
jmp 0x14009f5b4
mov r9d, ebx
cmp cl, 2
jb 0x14009f5dc
movzx eax, word [r13 + 0x122]
test ax, ax
je 0x14009f5dc
movzx edx, ax
dec edx
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov byte [rsp + 0x20], bl
jmp 0x14009f1f7
mov qword [rsp + 0x28], r12
mov edx, ebx
mov byte [rsp + 0x20], bl
xor r8d, r8d
jmp 0x14009f1f7
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f5f3
cmp dword [rsp + 0x34], 0
je 0x14009f636
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f66b
movzx edx, word [r13 + 0x120]
cmp edx, 2
ja 0x14009f1ff
mov r9, r12
mov r8b, 1
mov rcx, r13
call fcn.14009dde0
jmp 0x14009f1ff
mov edx, ebx
mov r9, r12
mov r8b, 1
mov rcx, r13
call fcn.14009dde0
jmp 0x14009f1ff
xor eax, eax
mov esi, eax
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f684
cmp dword [rsp + 0x34], 0
je 0x14009f6c7
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
cmp byte [r13 + 0x11f], bl
je 0x14009f6fc
movzx edx, word [r13 + 0x120]
cmp edx, 2
ja 0x14009f1ff
mov r9, r12
xor r8d, r8d
mov rcx, r13
call fcn.14009dde0
jmp 0x14009f1ff
mov edx, ebx
mov r9, r12
xor r8d, r8d
mov rcx, r13
call fcn.14009dde0
jmp 0x14009f1ff
xor eax, eax
mov esi, eax
nop word [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f720
cmp dword [rsp + 0x34], 0
je 0x14009f763
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor ebx, ebx
mov rdx, r12
mov rcx, r13
mov edi, ebx
call fcn.14009e0a0
mov dword [rsp + 0x34], ebx
jmp 0x14009f1ff
xor r14d, r14d
mov esi, r14d
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f781
cmp dword [rsp + 0x34], r14d
je 0x14009f7c4
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
mov r8, r12
xor edx, edx
mov rcx, r13
mov edi, r14d
call fcn.14009e410
movzx esi, byte [rsp + 0x31]
xor r8d, r8d
mov ecx, dword [rsp + 0x3c]
xor r14b, r14b
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x34], r8d
jmp 0x14009fa40
xor eax, eax
mov esi, eax
nop word [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f800
cmp dword [rsp + 0x34], 0
je 0x14009f843
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor r8d, r8d
mov edi, r8d
mov dword [rsp + 0x34], r8d
cmp dword [r12], r8d
jne 0x14009f883
test dword [r13 + 0x58], 0x4000000
je 0x14009f883
movsx r9d, word [r13 + 0x12a]
mov rcx, r13
movsx edx, word [r13 + 0x128]
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
call fcn.14009dc60
xor r8d, r8d
movzx esi, byte [rsp + 0x31]
xor r14b, r14b
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x30], r14b
jmp 0x14009fa40
cmp dl, 1
jne case.0x14009f17b.73
cmp word [r13 + 0x120], 0x19
jne case.0x14009f17b.73
xor r14d, r14d
mov esi, r14d
nop word [rax + rax]
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f8c0
cmp dword [rsp + 0x34], r14d
je 0x14009f903
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
xor edx, edx
mov r8, r12
mov rcx, r13
mov edi, r14d
call fcn.14009e620
movzx esi, byte [rsp + 0x31]
xor r8d, r8d
mov ecx, dword [rsp + 0x3c]
xor r14b, r14b
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x34], r8d
jmp 0x14009fa40
cmp dl, 1
jne case.0x14009f17b.73
cmp word [r13 + 0x120], 0x19
jne case.0x14009f17b.73
xor r14d, r14d
mov esi, r14d
nop
mov eax, esi
mov ebx, edi
sub ebx, esi
mov r9, r12
cmp ebx, r11d
mov rcx, r13
cmova ebx, r11d
lea rdx, [r15 + rax*2]
mov r8d, ebx
call fcn.14009dc10
add esi, ebx
mov r11d, 0x2000
cmp esi, edi
jb 0x14009f950
cmp dword [rsp + 0x34], r14d
je 0x14009f993
mov rcx, r15
call fcn.1400a0380
lea r15, [rbp - 0x40]
mov qword [rsp + 0x40], r15
mov edx, 1
jmp 0x14009f905
mov ebx, dword [rsp + 0x38]
lea eax, [r9 - 0x40]
cmp eax, 0x3e
ja 0x14009f039
xor r14b, r14b
mov byte [rsp + 0x30], r14b
xor r8d, r8d
jmp 0x14009fa44
test r14b, 8
je 0x14009fb9f
test r14b, 0x40
je 0x14009fa01
test r14b, r14b
js 0x14009f9fb
cmp r9d, 0x22
jne 0x14009f9df
and r14b, 0xbf
jmp 0x14009fa38
mov ebx, dword [rsp + 0x38]
cmp r9d, 0x5c
jne 0x14009f039
or r14b, 0x80
mov byte [rsp + 0x30], r14b
xor r8d, r8d
jmp 0x14009fa44
and r14b, 0x7f
jmp 0x14009fa38
cmp r9d, 7
je 0x14009fa35
cmp r9d, 0x5c
jne 0x14009fa19
test r14b, 2
jne 0x14009fa35
and r14b, 0xfd
jmp 0x14009fa38
cmp r9d, 0x1b
jne 0x14009fa25
or r14b, 2
jmp 0x14009fa38
cmp r9d, 0x22
jne 0x14009fa13
and r14b, 0x3d
or r14b, 0x40
jmp 0x14009fa38
xor r14b, r14b
mov byte [rsp + 0x30], r14b
xor r8d, r8d
mov ebx, dword [rsp + 0x38]
inc ecx
mov r11d, 0x2000
mov dword [rsp + 0x3c], ecx
cmp ecx, dword [rsp + 0x68]
jb 0x14009e910
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x60]
inc ecx
mov r15, qword [rsp + 0x40]
inc rax
mov dword [rsp + 0x58], ecx
mov qword [rsp + 0x60], rax
cmp ecx, edx
jae 0x14009fab5
jmp 0x14009e770
cmp r15d, esi
jbe 0x14009faa6
call fcn.1400f51e4
mov r15, qword [rsp + 0x40]
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
mov dword [rax], ebx
jmp 0x14009faab
mov r15, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
xor r14d, r14d
mov eax, 0x2000
mov esi, r14d
mov ebx, edi
sub ebx, esi
cmp ebx, eax
cmova ebx, eax
cmp dword [r12], r14d
jne 0x14009fb02
mov rcx, qword [r13 + 0x110]
lea r9, [rsp + 0x5c]
mov eax, esi
mov r8d, ebx
mov qword [rsp + 0x20], r14
lea rdx, [r15 + rax*2]
call qword [sym.imp.KERNEL32.DLL_WriteConsoleW]
test eax, eax
jne 0x14009fafd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [r12], eax
mov eax, 0x2000
add esi, ebx
cmp esi, edi
jb 0x14009fac0
cmp dword [rsp + 0x34], r14d
movzx r14d, byte [rsp + 0x30]
je 0x14009fb2c
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
mov dword [rax], ebx
mov eax, dword [rsp + 0x48]
xor r8d, r8d
mov byte [r13 + 0x11c], al
mov eax, dword [rsp + 0x38]
mov dword [r13 + 0x118], eax
movzx eax, byte [rsp + 0x31]
lea edx, [r8 + 1]
mov byte [r13 + 0x11d], al
mov byte [r13 + 0x11e], r14b
mov rcx, qword [0x140257080]
call qword [sym.imp.KERNEL32.DLL_ReleaseSemaphore]
test eax, eax
je 0x14009fb9f
mov eax, dword [r12]
neg eax
sbb eax, eax
mov rcx, qword [rbp + 0x3fc0]
xor rcx, rsp
call fcn.1400cc030
mov rbx, qword [rsp + 0x4120]
add rsp, 0x40d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400f4acc
int3