Function at 0x14004edb3
Capabilities:
Authenticate hmac
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2a8
movdqa xmmword [rsp + 0x290], xmm15
movdqa xmmword [rsp + 0x280], xmm14
movdqa xmmword [rsp + 0x270], xmm13
movdqa xmmword [rsp + 0x260], xmm12
movdqa xmmword [rsp + 0x250], xmm11
movdqa xmmword [rsp + 0x240], xmm10
movdqa xmmword [rsp + 0x230], xmm9
movdqa xmmword [rsp + 0x220], xmm8
movdqa xmmword [rsp + 0x210], xmm7
movaps xmmword [rsp + 0x200], xmm6
mov rdi, r8
mov rbx, rdx
mov r14, rcx
mov r15, qword [rcx]
call fcn.1400570ac
mov ebp, 1
test rbx, rbx
je 0x14004eef8
cmp byte [r15 + 0x61], 0
jne 0x14004eef8
cmp dword [r14 + 0x30], 0
jne 0x14004eef8
mov rsi, rax
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x170], xmm0
cmp byte [rdi], 8
ja 0x14004eea9
mov rdx, qword [rbx + 0x48]
test rdx, rdx
je 0x14004ee9d
mov rcx, r15
call fcn.140033cbe
mov qword [rbx + 0x48], 0
and byte [rbx + 0xc], 0xfe
mov rcx, r14
mov rdx, rbx
xor r8d, r8d
call fcn.14005c04b
mov ebp, 1
cmp dword [r14 + 0x30], 0
jne 0x14004eece
cmp byte [r15 + 0x61], 0
je 0x14004ef66
mov rdx, qword [rsp + 0x190]
test rdx, rdx
je 0x14004eee3
mov rcx, r15
call fcn.14002e981
mov rdx, qword [rsp + 0x1a0]
test rdx, rdx
je 0x14004eef8
mov rcx, r15
call fcn.14002e981
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x200]
movaps xmm7, xmmword [rsp + 0x210]
movaps xmm8, xmmword [rsp + 0x220]
movaps xmm9, xmmword [rsp + 0x230]
movaps xmm10, xmmword [rsp + 0x240]
movaps xmm11, xmmword [rsp + 0x250]
movaps xmm12, xmmword [rsp + 0x260]
movaps xmm13, xmmword [rsp + 0x270]
movaps xmm14, xmmword [rsp + 0x280]
movaps xmm15, xmmword [rsp + 0x290]
add rsp, 0x2a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0xc8], rdi
cmp byte [rdi], 9
jne 0x14004f0ea
cmp byte [r14 + 0x1c], 0
jne 0x14004f0ea
mov rbp, qword [r14]
mov rdi, qword [r14 + 0x10]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
mov rcx, qword [rcx + 0x50]
test rcx, rcx
jne 0x14004ef9d
mov r13, qword [rax]
mov byte [r14 + 0x1c], 1
mov r15, qword [rbp + 0x30]
mov edx, dword [r13]
mov rcx, rdi
call fcn.14006551b
cmp dword [r13], 0
jle 0x14004f0ea
lea rsi, [r13 + 0x18]
xor r12d, r12d
xor ebx, ebx
mov rdx, qword [rsi - 8]
test rdx, rdx
je 0x14004f003
mov rax, qword [rdi]
cmp byte [rax + 0x61], 0
jne 0x14004f0d2
mov rcx, qword [rdi + 0x98]
add rcx, r12
mov qword [rsp + 0x20], 0xffffffffffffffff
jmp 0x14004f0c4
test r15b, 0x44
je 0x14004f069
mov rax, qword [rsi - 0x10]
cmp byte [rax], 0x9e
jne 0x14004f069
movzx ecx, word [rax + 0x30]
mov rax, qword [rax + 0x40]
test cx, cx
jns 0x14004f02f
movzx ecx, word [rax + 0x44]
lea r9, str.xecn_n
test cx, cx
js 0x14004f03e
mov rdx, qword [rax + 8]
movzx ecx, cx
shl rcx, 5
mov r9, qword [rdx + rcx]
test r15b, 4
jne 0x14004f090
mov rax, qword [rdi]
cmp byte [rax + 0x61], 0
jne 0x14004f0d2
mov rcx, qword [rdi + 0x98]
add rcx, r12
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rdx, r9
jmp 0x14004f0c4
mov rdx, qword [rsi]
test rdx, rdx
je 0x14004f07b
mov rcx, rbp
call fcn.14002b228
jmp 0x14004f0a2
lea r8d, [rbx + 1]
mov rcx, rbp
lea rdx, [0x14014d57d]
call fcn.14002e66a
jmp 0x14004f0a2
mov r8, qword [rax]
mov rcx, rbp
lea rdx, [0x14014cda9]
call fcn.14002e66a
mov rcx, qword [rdi]
cmp byte [rcx + 0x61], 0
jne 0x14004f0d2
mov rcx, qword [rdi + 0x98]
add rcx, r12
lea rdx, [0x1400264c6]
mov qword [rsp + 0x20], rdx
mov rdx, rax
mov r8d, 0xffffffff
mov r9b, 1
call fcn.14002a9cf
inc rbx
movsxd rax, dword [r13]
add r12, 0x38
add rsi, 0x28
cmp rbx, rax
jl 0x14004efd5
mov r9, qword [rsp + 0x60]
cmp qword [r9 + 0x70], 0
mov r15, qword [rsp + 0x58]
mov qword [rsp + 0x48], r14
je 0x14004f53f
cmp qword [r9 + 0x50], 0
jne 0x14004f53f
mov rcx, r14
mov rsi, r9
call fcn.1400570ac
mov rdi, rax
mov r15, qword [r14]
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x68], rax
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x78], rax
mov rax, qword [rsi + 0x38]
mov qword [rsp + 0x90], rax
mov rax, qword [rsi + 0x40]
mov qword [rsp + 0xa0], rax
mov rbx, qword [rsi + 0x70]
xorps xmm6, xmm6
movups xmmword [rsi + 0x38], xmm6
movups xmmword [rsi + 0x28], xmm6
mov rdx, qword [rbx + 8]
mov rcx, r15
xor r8d, r8d
call fcn.14005ad1d
mov qword [rsp + 0x50], rbx
mov r8, qword [rbx + 0x10]
mov rcx, r14
mov rdx, rax
call fcn.1400655b7
mov r13, rsi
mov rbx, rax
test rax, rax
je 0x14004f1c1
mov rdx, qword [r13 + 0x48]
test rdx, rdx
je 0x14004f1c1
mov rcx, rbx
mov r8d, 0xffffffff
call fcn.14005a6e1
mov r13, rsi
test eax, eax
jne 0x14004f1c1
mov rdx, qword [r13 + 0x48]
test rdx, rdx
je 0x14004f1b9
mov rcx, r15
call fcn.140033cbe
mov r13, rsi
mov qword [r13 + 0x48], 0
mov qword [rsp + 0xb0], rbx
mov eax, dword [r14 + 0x34]
lea ecx, [rax + 1]
mov dword [r14 + 0x34], ecx
mov r12, qword [rsp + 0x50]
mov dword [r12 + 0x48], eax
mov rdx, qword [r13]
lea rsi, [rsp + 0xf0]
movups xmmword [rsi + 0x18], xmm6
lea rbx, [rsp + 0x1d0]
movups xmmword [rbx + 0x10], xmm6
mov qword [rbx], r12
mov rbp, qword [rsp + 0x68]
mov qword [rbx + 8], rbp
mov qword [rsi], r14
lea rax, [0x140065650]
mov qword [rsi + 8], rax
lea rax, [0x140065775]
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x28], rbx
mov rcx, rsi
call fcn.14005a1a4
mov rax, qword [rbx + 0x10]
mov rdx, qword [r13 + 0x48]
movups xmmword [rsi + 0x18], xmm6
mov qword [rbx + 0x18], 0
mov qword [rbx + 0x10], rax
mov qword [rbx], r12
mov qword [rbx + 8], rbp
mov qword [rsi], r14
lea rax, [0x140065650]
mov qword [rsi + 8], rax
lea rax, [0x140065775]
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x28], rbx
lea rcx, [rsp + 0xf0]
call fcn.14005a1a4
mov rdx, qword [rbx + 0x10]
test rdx, rdx
mov ecx, 0
je 0x14004f284
mov ecx, dword [rdx]
mov rax, qword [rsp + 0x60]
mov r13, rax
lea rsi, [rax + 0x28]
mov rbx, qword [rsp + 0x50]
mov dword [rbx + 0x68], ecx
mov r8, qword [rbx + 8]
mov r14, qword [rsp + 0x48]
mov rcx, r14
call fcn.1400655b7
mov r8, qword [rbx + 0x10]
mov rcx, r14
mov rdx, rax
call fcn.1400655b7
mov r12, rax
mov eax, 0
test r12, r12
je 0x14004f2c9
mov eax, dword [r12]
mov dword [rbx + 0x6c], eax
mov rax, qword [rbx + 0x60]
mov r8, qword [rax + 0x20]
mov rcx, r14
mov rdx, r12
call fcn.1400655b7
mov r12, rax
mov rdx, qword [rbx + 0x38]
test rdx, rdx
je 0x14004f30a
mov rcx, r15
xor r8d, r8d
xor r9d, r9d
call fcn.14005a759
mov rcx, r14
mov rdx, r12
mov r8, rax
call fcn.14005355c
mov r12, rax
mov eax, dword [r14 + 0x38]
inc eax
mov dword [r14 + 0x38], eax
mov dword [rbx + 0x4c], eax
mov eax, dword [r14 + 0x38]
inc eax
mov dword [r14 + 0x38], eax
mov dword [rbx + 0x50], eax
mov r9d, dword [rbx + 0x4c]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, reloc.WLDAP32.dll_Ordinal_73
xor r8d, r8d
call fcn.1400571db
mov rbx, qword [rbx + 0x30]
test rbx, rbx
jne 0x14004f2bb
test r12, r12
jne 0x14004f379
lea r8, [0x14011fd10]
mov rcx, r15
mov edx, Ordinal_145
xor r9d, r9d
call fcn.14005370c
mov rcx, r14
xor edx, edx
mov r8, rax
call fcn.14005355c
mov r12, rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov rcx, r14
mov rdx, r12
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x78]
call fcn.140053263
mov rbp, rax
xor ebx, ebx
mov rcx, r14
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.1400539c8
mov qword [rsi], rax
test rax, rax
je 0x14004f41c
mov qword [rsp + 0x68], rbp
mov qword [rax + 0x30], rbp
mov rdx, qword [rsi]
mov rcx, r14
call fcn.14005d63d
mov rbx, qword [rsi]
mov rsi, qword [rbx + 0x30]
mov rcx, qword [r14]
test rcx, rcx
je 0x14004f43b
cmp byte [rcx + 0x61], 0
jne 0x14004f492
mov edx, Ordinal_113
call fcn.14002ea2a
jmp 0x14004f445
test rbp, rbp
je 0x14004f524
mov rcx, r15
mov rdx, rbp
mov r8d, 1
call fcn.140033e77
jmp 0x14004f524
mov ecx, Ordinal_113
call fcn.140026322
mov rbp, rax
test rax, rax
je 0x14004f492
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x60], xmm0
movdqu xmmword [rbp + 0x50], xmm0
movdqu xmmword [rbp + 0x40], xmm0
movdqu xmmword [rbp + 0x30], xmm0
movdqu xmmword [rbp + 0x20], xmm0
movdqu xmmword [rbp + 0x10], xmm0
movdqu xmmword [rbp], xmm0
mov qword [rbx + 0x28], rbp
mov dword [rbp + 0x3c], 1
mov rdx, qword [rbx + 0x20]
test rdx, rdx
je 0x14004f4a1
mov rcx, qword [r14]
call fcn.14002b228
jmp 0x14004f4b4
mov qword [rbx + 0x28], 0
mov ebx, 7
jmp 0x14004f502
mov r8d, dword [rsi + 0x18]
mov rcx, qword [r14]
lea rdx, str.ceraeubiO5e
call fcn.14002e66a
mov qword [rbp], rax
mov rax, rsi
mov rsi, qword [rsi + 0x50]
test rsi, rsi
jne 0x14004f4b8
lea r9, [rbp + 8]
lea r8, [rbp + 0x46]
mov rdx, qword [rax]
mov rcx, r14
call fcn.14005c112
mov word [rbp + 0x44], 0xffff
mov word [rbp + 0x48], Ordinal_203
or byte [rbp + 0x40], 2
mov rdx, qword [rsp + 0x68]
or byte [rdx + 0xc], 0x40
and byte [r13 + 0xc], 0xf7
xor ebx, ebx
mov rcx, r14
xor r8d, r8d
call fcn.14005c04b
mov r9d, dword [r12]
mov rax, qword [rsp + 0x50]
mov r8d, dword [rax + 0x48]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, reloc.WLDAP32.dll_Ordinal_113
call fcn.1400571db
test ebx, ebx
jne 0x140051040
mov r9, r13
cmp byte [r15 + 0x61], 0
mov r15, qword [rsp + 0x58]
jne 0x140051045
mov rbp, qword [r9 + 0x28]
mov eax, dword [r9 + 0xc]
shr eax, 3
and eax, 1
mov dword [rsp + 0xa0], eax
xorps xmm6, xmm6
movups xmmword [rsp + 0x158], xmm6
movups xmmword [rsp + 0x148], xmm6
mov qword [rsp + 0x168], 0
mov rax, qword [r9 + 0x48]
mov qword [rsp + 0x140], rax
cmp qword [r9 + 0x50], 0
je 0x14004fb3f
mov rbx, qword [rsp + 0x70]
mov eax, dword [rbp]
cmp eax, 2
mov qword [rsp + 0x78], rbp
jl 0x14004f69c
cmp word [r15 + 0x5c], 0
js 0x14004f6a4
lea rdi, [rsp + 0x1d8]
mov qword [rdi - 8], r14
xorps xmm6, xmm6
lea rsi, [rsp + 0x1d0]
xor ebx, ebx
lea r14, [0x140065dc9]
lea r12, [0x140065e73]
lea r15, [rsp + 0xf0]
mov rbp, qword [rsp + 0x60]
movups xmmword [rdi], xmm6
mov rdx, qword [rbp + 0x30]
mov rcx, rsi
call fcn.140065c65
cmp dword [rsp + 0x1d8], 0
je 0x14004f677
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0x100], xmm6
mov qword [rsp + 0x110], rbx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], r14
mov qword [rsp + 0x100], r12
mov qword [rsp + 0x108], rbx
mov dword [rsp + 0x110], 0
mov qword [rsp + 0x118], rsi
mov rdx, qword [rbp + 0x30]
test rdx, rdx
je 0x14004f65a
mov rcx, r15
call fcn.140059ed2
mov rdx, qword [rsp + 0x1e0]
test rdx, rdx
je 0x14004f677
mov rax, qword [rsp + 0x1d0]
mov rcx, qword [rax]
call fcn.14002e981
cmp dword [rsp + 0x1dc], 0
jne 0x14004f5e0
mov rbp, qword [rsp + 0x78]
mov eax, dword [rbp]
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x70]
test eax, eax
jle 0x14004fabd
lea rax, [rbp + 0x4c]
mov qword [rsp + 0x90], rax
lea rsi, [rsp + 0x1d0]
xorps xmm6, xmm6
xor r13d, r13d
imul rdi, r13, 0x70
mov r12, qword [rbp + rdi + 0x30]
test r12, r12
je 0x14004faad
mov dword [rsp + 0x1d0], 0
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
call fcn.14005deba
mov eax, dword [rsp + 0x1d0]
add dword [r14 + 0x100], eax
test byte [r15 + 0x5d], 0x10
jne 0x14004f724
mov eax, dword [rbp + rdi + 0x44]
mov r9d, dword [rbp + rdi + 0x4c]
shr eax, 5
and eax, 1
mov rcx, qword [rsp + 0x60]
mov r8, qword [rcx + 0x30]
mov dword [rsp + 0x20], eax
mov rcx, r14
mov rdx, r12
call fcn.1400612dd
mov rax, qword [r14 + 0x138]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + rdi + 0x18]
mov qword [r14 + 0x138], rax
test r13, r13
je 0x14004f971
mov r9d, dword [r14 + 0x38]
inc r9d
mov dword [r14 + 0x38], r9d
mov dword [rbp + rdi + 0x3c], r9d
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x68], 0
mov rcx, rbx
mov edx, Ordinal_73
xor r8d, r8d
call fcn.1400571db
mov esi, eax
lea eax, [rsi + 1]
mov dword [rbp + rdi + 0x38], eax
test byte [rbp + rdi + 0x48], 8
jne 0x14004f7a4
mov dword [rsp + 0x20], 0
mov rcx, rbx
mov edx, 0x12
xor r8d, r8d
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x68], eax
test r13, r13
je 0x14004f889
mov rax, qword [rsp + 0x78]
lea rbx, [rax + rdi]
add rbx, 8
mov rbp, qword [rsp + 0x90]
mov r15, qword [rbp - 0x1c]
test r15, r15
je 0x14004f7fc
test byte [rbp - 4], 0x10
jne 0x14004f7fc
mov r14, qword [rbp - 0x34]
test r14, r14
je 0x14004f7fc
mov rdx, qword [rbx + 8]
mov rcx, qword [rbp - 0x3c]
test rcx, rcx
je 0x14004f7f3
test rdx, rdx
je 0x14004f7fc
call fcn.1400283c9
jmp 0x14004f7f8
neg rdx
sbb eax, eax
test eax, eax
je 0x14004f80e
lea rax, [rbp + 0x70]
add rbp, 0x2c
cmp rbp, rbx
mov rbp, rax
jb 0x14004f7c2
jmp 0x14004f889
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x14004f7fc
mov rcx, r14
call fcn.1400283c9
test eax, eax
jne 0x14004f7fc
mov rax, qword [rbx + 0x28]
mov ecx, dword [rax + 0x18]
cmp ecx, dword [r15 + 0x18]
jne 0x14004f7fc
mov r8, qword [r15 + 0x30]
mov rdx, qword [rax + 0x30]
xor ecx, ecx
mov r9d, 0xffffffff
call fcn.14005a2ad
test eax, eax
jne 0x14004f7fc
mov r9d, dword [rbp]
mov r14, qword [rsp + 0x78]
mov r8d, dword [r14 + rdi + 0x4c]
mov dword [rsp + 0x20], 0
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
mov edx, Ordinal_113
call fcn.1400571db
mov rax, qword [rbp - 0x1c]
mov rbp, r14
movzx eax, word [rax + 0xa]
mov word [r12 + 0xa], ax
mov r14, qword [rsp + 0x48]
jmp 0x14004f8cf
mov rbp, qword [rsp + 0x78]
mov eax, dword [rbp + rdi + 0x4c]
mov byte [rsp + 0xf0], reloc.WLDAP32.dll_Ordinal_12
mov dword [rsp + 0xf4], eax
lea rax, [rsp + 0xf8]
movups xmmword [rax], xmm6
mov r14, qword [rsp + 0x48]
mov rcx, r14
mov rdx, r12
lea r8, [rsp + 0xf0]
call fcn.14004edb3
movzx eax, word [r12 + 0xa]
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rbp + rdi + 0x28]
mov word [rcx + 0x48], ax
mov edx, dword [rsp + 0x68]
test edx, edx
mov r15, qword [rsp + 0x58]
je 0x14004f918
mov eax, dword [rbx + 0x90]
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], 0
lea rcx, [0x140177e98]
jne 0x14004f915
lea ecx, [rax - 1]
test edx, edx
cmovns ecx, edx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbx + 0x88]
mov dword [rcx + 8], eax
lea rax, [rdi + rbp]
add rax, 0x3c
mov r8d, dword [rax]
mov dword [rsp + 0x20], 0
mov rcx, rbx
mov edx, Ordinal_69
xor r9d, r9d
call fcn.1400571db
test esi, esi
jns 0x14004f947
mov esi, dword [rbx + 0x90]
dec esi
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], 0
lea rcx, [0x140177e98]
jne 0x14004f969
movsxd rcx, esi
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbx + 0x88]
mov dword [rcx + 4], eax
jmp 0x14004fa5b
cmp dword [rbp], 1
je 0x14004f984
test byte [rbp + 0xb4], 0xa
je 0x14004f745
mov esi, dword [rbx + 0x90]
lea edi, [rsi + 1]
mov r8d, dword [r14 + 0x38]
inc r8d
mov dword [r14 + 0x38], r8d
mov dword [rbp + 0x3c], r8d
mov dword [rsp + 0x20], edi
mov rcx, rbx
mov edx, reloc.WLDAP32.dll_Ordinal_13
xor r9d, r9d
call fcn.1400571db
mov dword [rbp + 0x38], edi
mov eax, dword [rbp + 0x3c]
mov byte [rsp + 0xf0], reloc.WLDAP32.dll_Ordinal_13
mov dword [rsp + 0xf4], eax
lea rax, [rsp + 0xf8]
movups xmmword [rax], xmm6
mov rcx, r14
mov rdx, r12
lea r8, [rsp + 0xf0]
call fcn.14004edb3
movzx eax, word [r12 + 0xa]
mov rcx, qword [rbp + 0x28]
mov word [rcx + 0x48], ax
or byte [rbp + 0x48], 0x10
mov eax, dword [rsp + 0xf8]
mov dword [rbp + 0x40], eax
mov r8d, dword [rbp + 0x3c]
xor edi, edi
mov dword [rsp + 0x20], edi
mov rcx, rbx
mov edx, Ordinal_69
xor r9d, r9d
call fcn.1400571db
mov rax, qword [rbx + 0x18]
mov byte [rax + 0x1f], 0
mov rax, qword [rbx + 0x18]
mov dword [rax + 0x28], edi
mov eax, dword [rbx + 0x90]
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], 0
lea rcx, [0x140177e98]
jne 0x14004fa58
lea ecx, [rax - 1]
test esi, esi
cmovns ecx, esi
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbx + 0x88]
mov dword [rcx + 8], eax
mov byte [r14 + 0x1f], 0
mov dword [r14 + 0x28], 0
cmp byte [r15 + 0x61], 0
lea rsi, [rsp + 0x1d0]
jne 0x140051045
mov dword [rsp + 0x1d0], 0
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
call fcn.14005deba
mov eax, dword [rsp + 0x1d0]
sub dword [r14 + 0x100], eax
mov rax, qword [rsp + 0x50]
mov qword [r14 + 0x138], rax
inc r13
movsxd rax, dword [rbp]
cmp r13, rax
jl 0x14004f6be
mov r13, qword [rsp + 0x60]
mov rbp, qword [r13]
mov rax, qword [r13 + 0x30]
mov qword [rsp + 0x68], rax
mov rax, qword [r13 + 0x38]
mov qword [rsp + 0x50], rax
mov r12, qword [r13 + 0x40]
mov eax, dword [r13 + 0xc]
mov ecx, eax
and cl, 1
mov byte [rsp + reloc.WLDAP32.dll_Ordinal_304], cl
and eax, 9
cmp eax, 1
jne 0x1400504a1
mov rcx, qword [rsp + 0x140]
mov rdx, rbp
mov r8d, 0xffffffff
call fcn.14005a6e1
test eax, eax
mov rdi, qword [rsp + 0xc8]
jne 0x1400504a9
and byte [r13 + 0xc], 0xfe
mov rcx, r15
mov rdx, rbp
xor r8d, r8d
call fcn.14005ad1d
mov qword [rsp + 0x50], rax
mov qword [r13 + 0x38], rax
jmp 0x1400504a9
lea rax, [r9 + 0x48]
mov qword [rsp + 0x68], rax
movdqa xmm10, xmmword [reloc.OLEAUT32.dll_SysReAllocString]
movdqa xmm9, xmmword [0x1401200e0]
movdqa xmm12, xmmword [0x1401200f0]
pcmpeqd xmm15, xmm15
movdqa xmm13, xmmword [reloc.OLEAUT32.dll_VariantClear]
xor edi, edi
mov rbx, qword [rsp + 0x70]
cmp edi, dword [rbp]
jge 0x14004f58f
movsxd rax, edi
imul rbx, rax, 0x70
mov r12, qword [rbp + rbx + 0x28]
mov rsi, qword [rbp + rbx + 0x30]
test byte [rbp + rbx + 0x44], 8
je 0x14004fc27
mov eax, dword [rbp + rbx + 0x4c]
mov rdx, qword [r9 + 0x30]
lea rcx, [0x1400657a5]
mov qword [rsp + 0xf8], rcx
mov byte [rsp + 0x114], 0
lea rcx, [rsp + 0x100]
movups xmmword [rcx], xmm6
mov dword [rsp + 0x118], eax
test rdx, rdx
je 0x14004fc27
lea rcx, [rsp + 0xf0]
mov r15, r9
mov r13, rbx
mov dword [rsp + 0x50], edi
call fcn.140059ed2
mov edi, dword [rsp + 0x50]
mov r9, r15
cmp byte [rsp + 0x114], 0
je 0x14004fc27
mov rax, qword [rsp + 0x58]
test byte [rax + 0x5d], 0x20
jne 0x14004fc27
lea rax, [rbx + rbp]
add rax, 0x44
and byte [rax], 0xd7
mov edx, dword [rax + 8]
mov rcx, qword [r9 + 0x30]
call fcn.14006125d
mov edi, dword [rsp + 0x50]
mov rbx, r13
mov r9, r15
test rsi, rsi
je 0x14004fcb1
movsx r8d, word [r12 + 0x46]
mov rax, qword [rsi]
mov eax, dword [rax]
cmp eax, r8d
jne 0x14005065a
test byte [rsi + 0xc], 8
jne 0x14004fcb1
test edi, edi
jne 0x14004fc5c
cmp qword [rsi + 0x48], 0
je 0x14004fc5c
test byte [r9 + 0xe], 4
jne 0x14004fcd1
mov rbp, qword [r14]
test byte [rbp + 0x5c], 1
jne 0x14004fc7c
cmp qword [r9 + 0x70], 0
jne 0x14004fc7c
mov rsi, qword [r9 + 0x28]
mov r15, qword [rsi + rbx + 0x30]
cmp qword [r15 + 0x70], 0
je 0x14004fce7
mov eax, edi
mov r15, qword [rsp + 0x58]
cmp byte [r15 + 0x61], 0
mov rcx, qword [rsp + 0xc8]
jne 0x140051045
mov rbp, qword [r9 + 0x28]
cmp byte [rcx], 9
jb 0x14004fcb3
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx]
mov qword [rsp + 0x140], rcx
jmp 0x14004fcb3
mov eax, edi
inc eax
cmp qword [r9 + 0x50], 0
mov edi, eax
mov r15, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x70]
je 0x14004fb78
jmp 0x14004f58f
xor eax, eax
cmp dword [rbp], 1
je 0x14004fcb3
test byte [rbp + 0xb4], 0xa
jne 0x14004fcb3
jmp 0x14004fc5c
mov eax, dword [rsi + rbx + 0x4c]
mov rcx, qword [r15 + 0x28]
mov rdx, qword [r15 + 0x60]
test rdx, rdx
je 0x14004fd1f
cmp qword [r9 + 0x60], 0
jne 0x14004fc7c
cmp qword [rdx + 0x18], 0
jne 0x14004fc7c
mov r8d, dword [r9 + 0xc]
bt r8d, 8
jb 0x14004fc7c
jmp 0x14004fd23
mov r8d, dword [r9 + 0xc]
mov ecx, dword [rcx]
test ecx, ecx
je 0x14004fc7c
mov r10d, dword [r15 + 0xc]
test r10b, 1
jne 0x14004fed2
mov qword [rsp + 0x90], r15
mov dword [rsp + 0x50], edi
mov qword [rsp + 0xb0], rbx
mov dword [rsp + 0x88], eax
mov qword [rsp + 0x78], rbp
test rdx, rdx
je 0x14004fd77
cmp dword [rsp + 0xa0], 0
jne 0x14004feba
cmp dword [rsi], 1
jg 0x14004feba
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rbx]
test rdi, rdi
je 0x14004fd97
mov rax, qword [rsp + 0x90]
cmp qword [rax + 0x48], 0
jne 0x14004feba
cmp dword [rsp + 0xa0], 0
je 0x14004fdb4
mov rax, qword [rsp + 0x90]
cmp qword [rax + 0x48], 0
jne 0x14004feba
test rdx, rdx
je 0x14004fdd3
test r8b, 1
jne 0x14004feba
mov rdx, qword [rsp + 0x60]
cmp qword [rdx + 0x30], 0
jne 0x14004feba
bt r10d, 0xd
jb 0x14004feba
mov rax, qword [rsp + 0xb0]
mov al, byte [rsi + rax + 0x44]
mov dword [rsp + 0xb8], 0
mov byte [rsp + 0xa8], al
test al, 0x20
je 0x14004fe22
cmp dword [rsp + 0xa0], 0
jne 0x14004feba
mov dword [rsp + 0xb8], 1
cmp ecx, 1
jg 0x14004feba
mov rax, qword [rsp + 0xb0]
lea r15, [rsi + rax]
add r15, 0x30
mov rax, qword [rsp + 0x90]
mov r13, qword [rax + 0x50]
test r13, r13
je 0x14004ffa4
and r8d, 1
or r8d, dword [rsp + 0xa0]
jne 0x14004feba
mov rax, qword [rsp + 0x90]
cmp qword [rax + 0x48], 0
jne 0x14004feba
cmp dword [rsi], 1
jne 0x14004feba
cmp qword [rsp + 0x90], 0
je 0x14004fede
mov rax, qword [rsp + 0x90]
test byte [rax + 0xc], 9
jne 0x14004feba
mov rax, qword [rsp + 0x90]
mov rax, qword [rax + 0x50]
test rax, rax
je 0x14004fea1
mov rcx, qword [rsp + 0x90]
cmp byte [rcx + 8], 0x81
jne 0x14004feba
mov rcx, qword [rsp + 0x90]
mov rcx, qword [rcx + 0x28]
cmp dword [rcx], 0
mov qword [rsp + 0x90], rax
jg 0x14004fe69
mov eax, dword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x48]
mov r9, qword [rsp + 0x60]
jmp 0x14004fc83
mov eax, edi
mov r14, qword [rsp + 0x48]
jmp 0x14004fc7e
test rdi, rdi
je 0x14004ff04
mov eax, dword [rdi]
test eax, eax
jle 0x14004ff04
shl rax, 3
lea rax, [rax + rax*4]
xor ecx, ecx
cmp word [rdi + rcx + 0x28], 0
je 0x14004feba
add rcx, 0x28
cmp rax, rcx
jne 0x14004fef3
mov rax, qword [rsp + 0x60]
mov r14, qword [rax + 0x50]
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rbx + 0x60]
xor eax, eax
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x60], rax
mov rax, qword [rsp + 0x68]
movups xmmword [rax], xmm6
mov rcx, qword [rsp + 0x78]
mov rdx, rbx
xor r8d, r8d
call fcn.14005aa62
mov qword [rbx + 0x60], rbp
mov qword [rbx + 0x48], rdi
mov qword [rbx + 0x28], rsi
mov byte [rbx + 8], 0x81
test rax, rax
je 0x14004ff65
mov qword [rax + 0x50], r14
test r14, r14
je 0x14004ff5a
mov qword [r14 + 0x58], rax
mov rcx, qword [rsp + 0x60]
mov qword [rax + 0x58], rcx
jmp 0x14004ff68
mov rax, r14
mov rcx, qword [rsp + 0x60]
mov qword [rcx + 0x50], rax
mov rcx, qword [rsp + 0x78]
cmp byte [rcx + 0x61], 0
jne 0x14005047d
mov r13, qword [r13 + 0x50]
test r13, r13
je 0x14004ff99
mov rcx, qword [rsp + 0x68]
mov rdi, qword [rcx]
mov r14, rax
jmp 0x14004ff0d
mov rax, qword [r15]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xb0]
mov rdx, qword [rsi + rax + 0x10]
test rdx, rdx
je 0x14004ffc0
mov rcx, qword [rsp + 0x78]
call fcn.14002e981
mov rax, qword [rsp + 0xb0]
add rax, rsi
add rax, 0x18
mov rdx, qword [rax]
test rdx, rdx
je 0x14004ffe1
mov rcx, qword [rsp + 0x78]
call fcn.14002e981
mov rax, qword [rsp + 0xb0]
mov rdx, qword [rsi + rax + 0x20]
test rdx, rdx
je 0x14004fffd
mov rcx, qword [rsp + 0x78]
call fcn.14002e981
mov rax, qword [rsp + 0xb0]
add rax, rsi
add rax, 0x10
xor ecx, ecx
mov qword [r15], rcx
mov qword [rax + 0x10], rcx
movups xmmword [rax], xmm6
mov rax, qword [rax + 0x18]
test rax, rax
je 0x14005005d
mov ecx, dword [rax + 0x3c]
cmp ecx, 1
jne 0x140050042
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rdx + 0x140]
mov qword [rax + 0x68], rcx
mov qword [rdx + 0x140], rax
jmp 0x140050047
dec ecx
mov dword [rax + 0x3c], ecx
mov rax, qword [rsp + 0xb0]
add rax, rsi
add rax, 0x28
mov qword [rax], 0
mov rax, qword [rsp + 0xb0]
add rax, rsi
add rax, 0x44
mov qword [rsp + 0x98], rax
inc dword [rsp + 0x50]
mov esi, 0xffffffff
mov rbp, qword [rsp + 0x60]
mov r15, qword [rsp + 0x90]
mov r13, qword [r15 + 0x28]
mov r14d, dword [r13]
mov qword [rsp + 0xc0], rbp
mov rax, qword [rbp + 0x28]
test rax, rax
je 0x1400500b9
mov r12, rax
mov rax, qword [rsp + 0x98]
mov al, byte [rax]
mov dword [rsp + 0x80], eax
jmp 0x1400500ee
mov rcx, qword [rsp + 0x48]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.1400539c8
mov r12, rax
test rax, rax
mov rax, qword [rsp + 0xc0]
je 0x14005045a
mov qword [rax + 0x28], r12
mov dword [rsp + 0x80], 0
cmp r14d, 2
jl 0x140050124
lea r8d, [r14 - 1]
mov rcx, qword [rsp + 0x48]
mov rdx, r12
mov r9d, dword [rsp + 0x50]
call fcn.140065801
mov r12, rax
test rax, rax
mov rax, qword [rsp + 0xc0]
je 0x14005045a
mov qword [rax + 0x28], r12
jmp 0x14005012a
cmp r14d, 1
jne 0x140050192
mov rax, qword [rsp + 0xb0]
lea rbp, [r12 + rax]
mov ebx, 8
lea rdi, [rbx + rbp]
mov rdx, qword [rbp + rbx + 0x50]
mov rcx, qword [rsp + 0x78]
call fcn.1400340d8
lea rsi, [rbx + r13]
mov ecx, reloc.WLDAP32.dll_Ordinal_14
rep movsq qword [rdi], qword [rsi]
mov esi, dword [r13 + rbx + 0x44]
movups xmmword [r13 + rbx], xmm6
movups xmmword [r13 + rbx + 0x10], xmm6
movups xmmword [r13 + rbx + 0x20], xmm6
movups xmmword [r13 + rbx + 0x30], xmm6
movups xmmword [r13 + rbx + 0x50], xmm6
movups xmmword [r13 + rbx + 0x60], xmm6
movups xmmword [r13 + rbx + 0x40], xmm6
add rbx, 0x70
dec r14
jne 0x14005013b
mov rax, qword [rsp + 0xb0]
mov ecx, dword [rsp + 0x80]
mov byte [r12 + rax + 0x44], cl
mov rcx, r15
mov rax, qword [r15 + 0x48]
test rax, rax
je 0x140050396
mov edx, dword [rax]
test edx, edx
jle 0x14005037f
lea rcx, [rdx + 7]
and rcx, 0xfffffffffffffff8
dec rdx
movq xmm0, rdx
pshufd xmm14, xmm0, 0x44
lea rdx, [rax + 0x140]
movdqa xmm11, xmm9
movdqa xmm2, xmm10
movdqa xmm3, xmmword [0x1401200c0]
movdqa xmm4, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmm5, xmm14
pxor xmm5, xmm12
movdqa xmm0, xmm11
pxor xmm0, xmm12
movdqa xmm7, xmm0
pcmpgtd xmm7, xmm5
pcmpeqd xmm0, xmm5
pshufd xmm8, xmm0, 0xf5
pand xmm8, xmm7
pshufd xmm0, xmm7, 0xf5
por xmm0, xmm8
movd ebp, xmm0
not ebp
test bpl, 1
je 0x140050241
mov word [rdx - 0x118], 0
pxor xmm0, xmm15
psrldq xmm0, 6
movd ebp, xmm0
shr ebp, 0x10
test bpl, 1
je 0x140050261
mov word [rdx - 0xf0], 0
movdqa xmm0, xmm2
pxor xmm0, xmm12
movdqa xmm7, xmm0
pcmpgtd xmm7, xmm5
pcmpeqd xmm0, xmm5
pshufd xmm1, xmm0, 0xf5
pand xmm1, xmm7
pshufd xmm0, xmm7, 0xf5
por xmm0, xmm1
pxor xmm0, xmm15
pextrw ebp, xmm0, 0
test bpl, 1
je 0x1400502a1
mov word [rdx - 0xc8], 0
pextrw ebp, xmm0, 4
test bpl, 1
je 0x1400502b5
mov word [rdx - 0xa0], 0
movdqa xmm0, xmm3
pxor xmm0, xmm12
movdqa xmm1, xmm0
pcmpgtd xmm1, xmm5
pcmpeqd xmm0, xmm5
pshufd xmm7, xmm0, 0xf5
pand xmm7, xmm1
pshufd xmm0, xmm1, 0xf5
por xmm0, xmm7
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmm15
pextrw ebp, xmm1, 4
test bpl, 1
je 0x1400502f7
mov word [rdx - 0x78], 0
pxor xmm0, xmm15
pextrw ebp, xmm0, 4
test bpl, 1
je 0x14005030d
mov word [rdx - 0x50], 0
movdqa xmm0, xmm4
pxor xmm0, xmm12
movdqa xmm1, xmm0
pcmpgtd xmm1, xmm5
pcmpeqd xmm0, xmm5
pshufd xmm5, xmm0, 0xf5
pand xmm5, xmm1
pshufd xmm0, xmm1, 0xf5
por xmm0, xmm5
pxor xmm0, xmm15
pextrw ebp, xmm0, 0
test bpl, 1
je 0x14005034a
mov word [rdx - 0x28], 0
pextrw ebp, xmm0, 4
test bpl, 1
je 0x14005035a
mov word [rdx], 0
paddq xmm11, xmm13
paddq xmm2, xmm13
paddq xmm3, xmm13
paddq xmm4, xmm13
add rdx, 0x140
add rcx, 0xfffffffffffffff8
jne 0x1400501f7
mov rcx, qword [rsp + 0xc0]
mov qword [rcx + 0x48], rax
mov rcx, r15
mov qword [r15 + 0x48], 0
mov rdi, qword [rcx + 0x30]
mov qword [rcx + 0x30], 0
test byte [rsp + 0xa8], 0x20
je 0x1400503b6
mov rcx, rdi
mov edx, esi
call fcn.14005db2b
mov rbp, qword [rsp + 0xc0]
mov r8, qword [rbp + 0x30]
mov rbx, qword [rsp + 0x78]
mov rcx, rbx
mov rdx, rdi
call fcn.14005db9a
mov qword [rbp + 0x30], rax
cmp byte [rbx + 0x61], 0
jne 0x14005042a
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xf0], rax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], esi
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0x100], eax
mov rax, qword [r15]
mov qword [rsp + 0x108], rax
lea rcx, [rsp + 0xf0]
mov rdx, rbp
xor r8d, r8d
call fcn.140065920
mov eax, dword [r15 + 0xc]
and eax, 1
or dword [rbp + 0xc], eax
mov rax, qword [r15 + 0x60]
test rax, rax
je 0x140050449
mov qword [rbp + 0x60], rax
mov qword [r15 + 0x60], 0
mov rbp, qword [rbp + 0x50]
mov r15, qword [r15 + 0x50]
test rbp, rbp
jne 0x14005008a
cmp qword [rsp + 0x90], 0
je 0x14005047d
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x90]
mov r8d, 1
call fcn.140033e77
mov eax, 0xffffffff
mov r14, qword [rsp + 0x48]
cmp dword [r14 + 0x30], 0
mov r15, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
je 0x14004fc83
jmp 0x140051045
mov rdi, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0x140]
test rdx, rdx
je 0x140050523
mov r9d, dword [rbp]
mov rcx, r14
xor r8d, r8d
call fcn.140061441
mov rbx, rax
mov r8d, dword [r14 + 0x34]
lea eax, [r8 + 1]
mov dword [r14 + 0x34], eax
mov dword [rsp + 0x14c], r8d
mov rax, qword [rsp + 0x140]
mov eax, dword [rax]
mov ecx, dword [rbp]
lea r9d, [rax + rcx + 1]
mov dword [rsp + 0x20], 0
mov rcx, qword [rsp + 0x70]
mov edx, reloc.WLDAP32.dll_Ordinal_113
call fcn.1400571db
mov esi, eax
mov rcx, qword [rsp + 0x70]
mov edx, eax
mov r8, rbx
mov rbx, qword [rsp + 0x70]
mov r9d, 0xfffffff7
call fcn.140059198
jmp 0x140050528
mov esi, 0xffffffff
mov dword [rsp + 0x158], esi
cmp byte [rdi], 0xc
jne 0x140050551
mov r9d, dword [rbp]
mov r8d, dword [rdi + 4]
mov dword [rsp + 0x20], 0
mov rcx, rbx
mov edx, reloc.WLDAP32.dll_Ordinal_113
call fcn.1400571db
mov eax, dword [r14 + 0x44]
dec eax
mov dword [rsp + 0xb0], eax
mov dword [r14 + 0x44], eax
test byte [r13 + 0xd], 0x40
jne 0x140050570
mov word [r13 + 0xa], 0x140
mov rdi, qword [r13 + 0x60]
mov eax, dword [r13 + 0x10]
test rdi, rdi
mov qword [rsp + 0x90], rbp
mov qword [rsp + 0xc0], r12
je 0x14005071f
test eax, eax
jne 0x14005071f
mov ebp, dword [r14 + 0x38]
inc ebp
mov dword [r14 + 0x38], ebp
mov dword [r13 + 0x10], ebp
mov rcx, r14
call fcn.1400570ac
mov r12, rax
mov rcx, qword [rdi + 0x10]
lea rdx, [rsp + 0xf0]
call fcn.14005b984
test eax, eax
je 0x140050621
mov esi, dword [rsp + 0xf0]
mov dword [rsp + 0x20], 0
mov rcx, r12
mov edx, Ordinal_73
mov r8d, esi
mov r9d, ebp
call fcn.1400571db
test rsi, rsi
je 0x140050680
test esi, esi
js 0x1400506a0
movzx ebx, word [r13 + 0xa]
mov rcx, rsi
call fcn.14003ed77
cmp bx, ax
mov r15, qword [rsp + 0x58]
jle 0x1400506a0
mov word [r13 + 0xa], ax
or byte [r13 + 0xd], 0x40
jmp 0x1400506a0
mov rdx, qword [rdi + 0x10]
mov rcx, r14
mov r8d, ebp
call fcn.140057176
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, r12
mov edx, 0xf
mov r8d, ebp
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, r12
mov edx, 0x14
mov r8d, ebp
jmp 0x140050693
mov r9, qword [r12]
mov dword [rsp + 0x20], eax
lea rdx, [0x14014da00]
mov rcx, r14
call fcn.1400307ff
mov ebp, 1
mov r15, qword [rsp + 0x58]
jmp 0x14004eece
mov dword [rsp + 0x20], 0
mov rcx, r12
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9d, dword [rsp + 0xb0]
call fcn.1400571db
cmp qword [rdi + 0x18], 0
je 0x140050706
mov esi, dword [r14 + 0x38]
mov rbx, r15
lea r15d, [rsi + 1]
mov dword [r14 + 0x38], r15d
mov dword [r13 + 0x14], r15d
inc dword [r14 + 0x38]
mov rdx, qword [rdi + 0x18]
mov rcx, r14
mov r8d, r15d
call fcn.140057176
mov dword [rsp + 0x20], 0
mov rcx, r12
mov edx, 0xf
mov r8d, r15d
xor r9d, r9d
call fcn.1400571db
add esi, 2
mov dword [rsp + 0x20], r15d
mov r15, rbx
mov rcx, r12
mov edx, 0x98
mov r8d, ebp
mov r9d, esi
call fcn.1400571db
mov eax, dword [r13 + 0x10]
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x90]
mov r12, qword [rsp + 0xc0]
test eax, eax
jne 0x14005075a
mov eax, dword [rsp + 0x158]
test eax, eax
js 0x14005075a
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], 0
je 0x140050740
lea rax, [0x140177e98]
jmp 0x14005074f
lea rax, [rax + rax*2]
shl rax, 3
add rax, qword [rbx + 0x88]
mov byte [rax], 0x72
or byte [rsp + 0x164], 1
test byte [r13 + 0xc], 1
jne 0x140050768
xor eax, eax
jmp 0x1400507f4
mov eax, dword [r14 + 0x34]
lea ecx, [rax + 1]
mov dword [r14 + 0x34], ecx
mov dword [rsp + 0x134], eax
mov rdx, qword [r13]
mov rcx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.140061441
mov rdi, rax
mov r8d, dword [rsp + 0x134]
mov dword [rsp + 0x20], 0
mov rcx, qword [rsp + 0x70]
mov edx, reloc.WLDAP32.dll_Ordinal_113
xor r9d, r9d
call fcn.1400571db
mov esi, eax
mov rcx, qword [rsp + 0x70]
mov edx, eax
mov r8, rdi
mov rbx, qword [rsp + 0x70]
mov r9d, 0xfffffff7
call fcn.140059198
mov dword [rsp + 0x138], esi
mov ecx, dword [rbx + 0x90]
mov al, 3
test ecx, ecx
jle 0x1400507f4
mov rdx, qword [rbx + 0x88]
dec ecx
lea rcx, [rcx + rcx*2]
mov word [rdx + rcx*8 + 2], 8
mov byte [rsp + 0x131], al
cmp dword [rsp + 0xa0], 0
jne 0x140050ab6
cmp qword [rsp + 0x50], 0
jne 0x140050ab6
xor eax, eax
cmp byte [rsp + reloc.WLDAP32.dll_Ordinal_304], 0
setne al
mov ecx, 0x4000
and ecx, dword [r13 + 0xc]
shl eax, 8
or ecx, eax
mov dword [rsp + 0x50], ecx
mov r12, qword [r13 + 0x70]
test r12, r12
je 0x1400509fc
mov rcx, r14
call fcn.1400570ac
mov rbp, rax
mov rdx, qword [r12 + 8]
xor eax, eax
mov ecx, 0
test rdx, rdx
je 0x14005085f
mov ecx, dword [rdx]
mov rdx, qword [r12 + 0x10]
test rdx, rdx
je 0x14005086b
mov eax, dword [rdx]
add eax, ecx
je 0x14005089c
mov ecx, dword [r14 + 0x38]
inc ecx
mov dword [r12 + 0x5c], ecx
add dword [r14 + 0x38], eax
mov r9d, dword [r12 + 0x5c]
add eax, r9d
dec eax
mov dword [rsp + 0x20], eax
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_73
xor r8d, r8d
call fcn.1400571db
lea rdi, [0x14014da64]
lea rbx, [0x14014da6e]
mov r15, r12
xor r13d, r13d
mov rax, qword [r15 + 0x40]
test byte [rax + 5], 0x10
je 0x1400508c5
cmp byte [r15 + 0x19], 0x5a
jne 0x140050955
mov rax, qword [rax + 0x38]
cmp rax, rdi
je 0x140050919
cmp rax, rbx
je 0x140050919
lea rcx, [0x14014da7a]
cmp rax, rcx
je 0x1400508ef
lea rcx, [0x14014da7f]
cmp rax, rcx
jne 0x1400509ef
mov r8d, dword [r14 + 0x34]
lea eax, [r8 + 1]
mov dword [r14 + 0x34], eax
mov dword [r15 + 0x54], r8d
mov r9d, dword [r12 + 0x48]
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, Ordinal_113
jmp 0x1400509ea
mov eax, dword [r14 + 0x38]
inc eax
mov dword [r15 + 0x58], eax
mov eax, dword [r14 + 0x34]
lea ecx, [rax + 1]
mov dword [r14 + 0x34], ecx
mov dword [r15 + 0x54], eax
add dword [r14 + 0x38], 2
mov r9d, dword [r12 + 0x48]
mov r8d, dword [r15 + 0x54]
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, Ordinal_113
jmp 0x1400509ea
mov rax, qword [r15 + 0x60]
mov rdx, qword [rax + 0x20]
mov rcx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.140061441
mov rsi, rax
mov eax, dword [r14 + 0x34]
lea ecx, [rax + 1]
mov dword [r14 + 0x34], ecx
mov dword [r15 + 0x54], eax
mov eax, dword [r14 + 0x38]
inc eax
mov dword [r15 + 0x58], eax
add dword [r14 + 0x38], 3
test rsi, rsi
je 0x1400509a6
mov rax, qword [r15 + 0x40]
mov rax, qword [rax + 0x38]
cmp byte [rax + 1], 0x69
jne 0x1400509a6
mov rax, qword [rsi + 0x18]
mov byte [rax], 1
mov r8d, dword [r15 + 0x54]
mov dword [rsp + 0x20], r13d
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_113
mov r9d, 2
call fcn.1400571db
mov rcx, rbp
mov rdx, rsi
mov r8d, 0xfffffff7
call fcn.140058624
mov r9d, dword [r15 + 0x58]
inc r9d
mov dword [rsp + 0x20], r13d
mov rcx, rbp
mov edx, Ordinal_73
xor r8d, r8d
call fcn.1400571db
mov r15, qword [r15 + 0x30]
test r15, r15
jne 0x1400508b0
mov r13, qword [rsp + 0x60]
movsx eax, word [r13 + 0xa]
mov rcx, qword [r13]
mov r9, qword [rsp + 0x140]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x50]
mov word [rsp + 0x28], ax
mov qword [rsp + 0x20], rcx
mov rcx, r14
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x68]
call fcn.1400614cb
test rax, rax
mov r15, qword [rsp + 0x58]
mov ebp, 1
je 0x14004eece
mov rsi, rax
movzx eax, word [rax + 0x60]
cmp ax, word [r13 + 0xa]
jge 0x140050a5c
mov word [r13 + 0xa], ax
cmp byte [rsp + reloc.WLDAP32.dll_Ordinal_304], 0
mov rbp, qword [rsp + 0x70]
je 0x140050a79
mov al, byte [rsi + 0x47]
test al, al
je 0x140050a79
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x140]
test rax, rax
je 0x14005106f
movsx ecx, byte [rsi + 0x43]
mov dword [rsp + 0x148], ecx
cmp byte [rsi + 0x48], 0
je 0x14005104f
movzx edx, byte [rsi + 0x42]
imul rdx, rdx, 0x58
add rdx, rsi
add rdx, 0x350
jmp 0x140051056
cmp qword [rsp + 0x50], 0
je 0x140050b15
mov rax, qword [r13]
mov ecx, dword [rax]
test ecx, ecx
jle 0x140050ade
add rax, 0x2a
inc ecx
mov word [rax], 0
add rax, 0x28
dec ecx
cmp ecx, 1
jg 0x140050ace
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
test eax, eax
jle 0x140050b04
mov rcx, qword [rsp + 0x50]
add rcx, 0x2a
inc eax
mov word [rcx], 0
add rcx, 0x28
dec eax
cmp eax, 1
jg 0x140050af4
cmp word [r13 + 0xa], 0x43
jl 0x140050b1c
mov word [r13 + 0xa], Ordinal_69
jmp 0x140050b1c
mov word [r13 + 0xa], 0
mov rdx, qword [rsp + 0x140]
mov rsi, qword [rsp + 0x50]
mov rcx, rsi
mov r8d, 0xffffffff
call fcn.14005a6e1
mov dword [rsp + 0x88], eax
mov eax, dword [r14 + 0x44]
dec eax
mov dword [rsp + 0x80], eax
mov dword [r14 + 0x44], eax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x118], xmm0
movdqu xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0xf0], r14
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xf8], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x100], rax
mov ecx, dword [r14 + 0x38]
mov rdi, rsi
inc ecx
mov dword [rax + 0x10], ecx
test rsi, rsi
je 0x140050b9f
mov eax, dword [rdi]
jmp 0x140050ba1
xor eax, eax
mov dword [rsp + 0x17c], eax
mov qword [rsp + 0x188], rdi
lea rsi, [rsp + 0xf0]
mov rcx, rsi
mov rdx, rbp
call fcn.140065075
mov rdx, qword [rsp + 0x140]
mov rcx, rsi
call fcn.140065075
test r12, r12
je 0x140050c80
test rdi, rdi
je 0x140050c3d
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], 0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x1d0], rax
lea rax, [0x14006ba1c]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1f8], r13
mov rdx, qword [r13 + 0x40]
test rdx, rdx
je 0x140050c34
lea rcx, [rsp + 0x1d0]
call fcn.140059ed2
mov rax, qword [r13 + 0x30]
mov qword [rsp + 0x68], rax
lea rax, [0x14006bbc7]
lea rcx, [rsp + 0x1d0]
mov qword [rcx + 8], rax
lea rax, [0x14006be5b]
mov qword [rcx + 0x10], rax
lea rax, [0x14006be61]
mov qword [rcx + 0x18], rax
mov dword [rcx + 0x20], 0
mov qword [rcx + 0x28], rsi
mov qword [rcx], 0
mov rdx, r12
call fcn.140059ed2
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0x19c], eax
cmp qword [r13 + 0x38], 0
mov rcx, qword [rsp + 0x48]
jne 0x140050d0f
cmp qword [r13 + 0x40], 0
jne 0x140050d0f
cmp dword [rsp + 0x1a8], 1
jne 0x140050d0f
mov rax, qword [rsp + 0x1a0]
mov rax, qword [rax]
mov rsi, qword [rax + 0x20]
test rsi, rsi
je 0x1400519f4
cmp dword [rsi], 1
jne 0x1400519f4
mov rbp, qword [rax + 8]
lea rdx, [0x14014dc48]
mov rcx, rbp
call fcn.1400283c9
test eax, eax
je 0x1400526bc
lea rdx, str.IE_
mov rcx, rbp
call fcn.1400283c9
test eax, eax
je 0x1400527b8
xor eax, eax
mov qword [rsp + 0xa0], rax
xor edi, edi
jmp 0x1400527e9
xor eax, eax
mov qword [rsp + 0xa0], rax
xor r12d, r12d
mov eax, dword [rsp + 0x1a8]
test eax, eax
jle 0x140050d8b
lea rsi, [rsp + 0xf0]
movzx ecx, word [rsi + 0x28]
xor ebx, ebx
xor ebp, ebp
or ecx, 8
mov word [rsp + 0x118], cx
mov rax, qword [rsp + 0x1a0]
mov rax, qword [rax + rbx]
mov rdx, qword [rax + 0x20]
mov rcx, rsi
call fcn.140065075
movzx ecx, word [rsp + 0x118]
and ecx, 0xfffffff7
mov word [rsp + 0x118], cx
inc rbp
movsxd rax, dword [rsp + 0x1a8]
add rbx, 0x18
cmp rbp, rax
jl 0x140050d37
mov r15, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov ebp, dword [rcx + 0x38]
mov dword [rsp + 0x184], ebp
cmp byte [r15 + 0x61], 0
je 0x140050db3
mov ebp, 1
mov r15, qword [rsp + 0x58]
mov rbx, qword [rsp + 0xa0]
jmp 0x14005319d
mov r15, qword [rsp + 0x50]
test r15, r15
je 0x1400515e9
xor esi, esi
cmp dword [rsp + 0x88], 0
sete sil
mov rdi, qword [rsp + 0x48]
mov eax, dword [rdi + 0x34]
lea ecx, [rax + 1]
mov dword [rdi + 0x34], ecx
mov dword [rsp + 0x174], eax
mov r9d, dword [rsp + 0x198]
xor r12d, r12d
mov rcx, rdi
mov rdx, r15
xor r8d, r8d
call fcn.140061441
mov rbx, rax
mov r8d, dword [rsp + 0x174]
mov r9d, dword [rsp + 0x17c]
mov dword [rsp + 0x20], r12d
mov rbp, qword [rsp + 0x70]
mov rcx, rbp
mov edx, 0x72
call fcn.1400571db
mov rcx, rbp
mov dword [rsp + 0xec], eax
mov edx, eax
mov qword [rsp + 0x1c8], rbx
mov r8, rbx
mov r9d, 0xfffffff7
call fcn.140059198
mov eax, dword [rdi + 0x38]
mov ecx, dword [rdi + 0x44]
lea r9d, [rax + 2]
lea ebx, [rax + 4]
mov dword [rdi + 0x38], ebx
mov qword [rsp + 0x98], rcx
lea r13d, [rcx - 2]
mov dword [rdi + 0x44], r13d
lea r14d, [rax + 5]
mov ecx, dword [r15]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xe0], rcx
add eax, ecx
add eax, 4
mov dword [rdi + 0x38], eax
add eax, dword [r15]
mov dword [rdi + 0x38], eax
mov dword [rsp + 0x20], r12d
mov rcx, rbp
mov edx, Ordinal_73
xor r8d, r8d
mov dword [rsp + 0xd0], r9d
call fcn.1400571db
mov eax, dword [r15]
add eax, ebx
mov dword [rsp + 0x20], eax
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_73
xor r8d, r8d
mov dword [rsp + 0x1c0], r14d
mov r9d, r14d
call fcn.1400571db
mov dword [rsp + 0x20], r12d
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_12
mov dword [rsp + 0xb8], ebx
mov r8d, ebx
mov dword [rsp + 0xd8], r13d
mov r9d, r13d
call fcn.1400571db
shl esi, 9
or esi, 0x40
mov dword [rsp + 0x30], r12d
mov word [rsp + 0x28], si
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x68]
mov r9, r15
call fcn.1400614cb
test rax, rax
je 0x140050d9c
mov r13, rax
movsx ecx, byte [rax + 0x43]
mov rax, qword [rsp + 0x50]
mov r15d, dword [rax]
mov esi, 0
mov dword [rsp + 0x68], ecx
cmp r15d, ecx
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0xe0]
je 0x140051c3c
mov eax, dword [rsp + 0x198]
mov edi, r15d
test eax, eax
jle 0x140050f93
mov rcx, qword [rsp + 0x190]
shl rax, 5
xor edx, edx
mov ebp, r15d
mov edi, r15d
xor ebx, ebx
cmp dword [rcx + rdx + 0x10], ebp
setge bl
add edi, ebx
add ebp, ebx
add rdx, 0x20
cmp rax, rdx
jne 0x140050f7d
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov edx, edi
call fcn.140058a67
mov r12d, eax
mov byte [rsp + 0x20], 0
mov rcx, rsi
mov rdx, qword [rsp + 0x50]
mov r8d, eax
xor r9d, r9d
call fcn.140058ab2
mov eax, dword [rsp + 0x198]
test eax, eax
jle 0x140051018
mov ebx, 0x10
xor esi, esi
mov ebp, r15d
mov rcx, qword [rsp + 0x190]
cmp dword [rcx + rbx], ebp
jl 0x140051009
lea eax, [r12 + rbp]
mov r9d, dword [rcx + rbx - 4]
mov r8d, dword [rcx + rbx - 8]
mov rdx, qword [rcx + rbx - 0x10]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x70]
call fcn.1400592c7
inc ebp
mov eax, dword [rsp + 0x198]
inc rsi
movsxd rcx, eax
add rbx, 0x20
cmp rsi, rcx
jl 0x140050fd2
mov r14, r12
mov rbp, qword [rsp + 0x48]
mov al, byte [rbp + 0x1f]
test al, al
je 0x140051b15
dec al
mov byte [rbp + 0x1f], al
movzx eax, al
mov r12d, dword [rbp + rax*4 + 0xb4]
jmp 0x140051b20
mov r15, qword [rsp + 0x58]
mov ebp, 1
jmp 0x14004eece
mov rdx, rsi
add rdx, 0x34
mov edx, dword [rdx]
mov dword [rsp + 0x160], edx
cmp dword [rax], ecx
jne 0x140051082
mov qword [rsp + 0x140], 0
mov edx, dword [rsp + 0x158]
test edx, edx
js 0x140051082
mov rcx, rbp
call fcn.140060fed
test r12, r12
je 0x1400514df
mov qword [rsp + 0x88], rsi
mov eax, dword [r14 + 0x38]
mov edi, dword [r14 + 0x44]
lea ecx, [rdi - 1]
mov dword [rsp + 0x78], ecx
lea r8d, [rdi - 2]
add edi, 0xfffffffd
mov dword [r14 + 0x44], edi
inc eax
mov dword [rsp + 0x68], eax
mov dword [r14 + 0x38], eax
mov r14, qword [r13 + 0x70]
mov al, byte [r14 + 0x19]
cmp byte [r14 + 0x18], 0x4b
mov qword [rsp + 0x50], r14
mov qword [rsp + 0xa0], rdi
mov dword [rsp + 0xc0], r8d
jne 0x140051524
cmp al, 0x5a
jne 0x1400510f5
cmp byte [r14 + 0x1a], 0x55
jne 0x1400510f5
cmp qword [r14 + 0x10], 0
jne 0x14005156b
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.1400570ac
mov rbp, rax
mov edi, dword [rbx + 0x34]
lea r14d, [rdi + 1]
lea eax, [rdi + 2]
mov dword [rbx + 0x34], eax
xor r15d, r15d
lea rax, [rsp + 0xf0]
mov dword [rax], r15d
mov ecx, dword [rbx + 0x38]
mov r12d, dword [rbx + 0x44]
lea r9d, [rcx + 1]
lea esi, [r12 - 1]
add r12d, 0xfffffffe
mov dword [rbx + 0x44], r12d
lea edx, [rcx + 2]
mov dword [rsp + 0xa8], edx
add ecx, 3
mov qword [rsp + 0x98], rcx
mov dword [rbx + 0x38], ecx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov rcx, rbx
mov rdx, r13
mov r13, rdi
mov r8, qword [rsp + 0x88]
mov dword [rsp + 0xb8], r9d
call fcn.14006a4ab
mov dword [rsp + 0x20], r15d
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0xd0], eax
mov rcx, rbp
mov edx, esi
call fcn.1400588d8
mov r9d, dword [rbp + 0x90]
add r9d, 3
mov dword [rsp + 0x20], r15d
mov rcx, rbp
mov edx, 0x12
xor r8d, r8d
call fcn.1400571db
mov rax, qword [rsp + 0x50]
mov r9d, dword [rax + 0x48]
mov dword [rsp + 0x20], r15d
mov rcx, rbp
mov edx, Ordinal_113
mov r8d, r13d
call fcn.1400571db
mov rax, qword [rsp + 0x50]
mov r9d, dword [rax + 0x48]
mov dword [rsp + 0x20], r15d
mov r15d, dword [rsp + 0xa8]
mov rcx, rbp
mov edx, Ordinal_113
mov dword [rsp + 0x80], r14d
mov r8d, r14d
mov rdi, qword [rsp + 0x50]
call fcn.1400571db
mov rdx, qword [rdi + 0x20]
test rdx, rdx
je 0x140051233
mov rcx, rbx
mov r8d, r15d
call fcn.140057176
mov rcx, rbx
mov edx, r15d
xor r8d, r8d
call fcn.14006a679
mov rdx, qword [rdi + 0x28]
test rdx, rdx
mov rbx, qword [rsp + 0x98]
je 0x1400512cb
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov r8d, ebx
call fcn.140057176
mov rcx, rsi
mov edx, ebx
mov r8d, 1
call fcn.14006a679
cmp qword [rdi + 0x28], 0
je 0x1400512cb
cmp byte [rdi + 0x19], 0x56
jne 0x1400512cb
mov r9d, dword [rbp + 0x90]
add r9d, 2
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_54
mov r8d, r15d
call fcn.1400571db
mov r8d, dword [rsp + 0xf0]
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, Ordinal_79
mov r9d, r15d
call fcn.1400571db
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, 0x64
mov r8d, r15d
mov r9d, ebx
call fcn.1400571db
cmp qword [rdi + 0x20], 0
mov qword [rsp + 0x88], r12
je 0x140051346
cmp byte [rdi + 0x1a], 0x58
jne 0x140051346
mov r9d, dword [rbp + 0x90]
add r9d, 3
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, Ordinal_54
mov r8d, r15d
call fcn.1400571db
mov esi, dword [rsp + 0xf0]
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, Ordinal_79
mov r8d, esi
mov r9d, r15d
call fcn.1400571db
mov dword [rsp + 0x20], ebx
mov rbx, qword [rsp + 0x98]
mov r12, qword [rsp + 0x88]
mov rcx, rbp
mov edx, Ordinal_79
mov r8d, esi
mov r9d, ebx
call fcn.1400571db
mov rcx, qword [rsp + 0x48]
mov rdx, rdi
call fcn.14006a780
mov dword [rsp + 0x98], eax
mov r8d, dword [rdi + 0x48]
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
mov r9d, r12d
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
mov r8d, r13d
mov r9d, r12d
call fcn.1400571db
mov eax, dword [rbp + 0x90]
test eax, eax
jle 0x1400513a9
mov rcx, qword [rbp + 0x88]
dec eax
lea rax, [rax + rax*2]
mov word [rcx + rax*8 + 2], 1
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
mov r8d, dword [rsp + 0x80]
mov r9d, r12d
call fcn.1400571db
mov r15d, dword [rbp + 0x90]
test r15d, r15d
jle 0x1400513f1
mov rax, qword [rbp + 0x88]
dec r15d
lea rcx, [r15 + r15*2]
mov word [rax + rcx*8 + 2], 1
mov r15d, dword [rbp + 0x90]
mov qword [rsp + 0xd8], r13
xor esi, esi
cmp byte [rdi + 0x1a], 0x58
mov r9d, r15d
mov r14d, 0
jne 0x14005142f
mov dword [rsp + 0x20], 1
mov rcx, rbp
mov edx, 0x38
mov r8d, ebx
xor r9d, r9d
call fcn.1400571db
mov r14d, eax
mov r9d, dword [rbp + 0x90]
mov r12, rbx
add r9d, 2
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 5
mov ebx, dword [rsp + 0x80]
mov r8d, ebx
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
xor r9d, r9d
call fcn.1400571db
mov edi, eax
mov r13d, dword [rsp + 0xf0]
mov dword [rsp + 0x28], r13d
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdx, rsi
mov r8d, ebx
xor r9d, r9d
call fcn.14006a8a9
cmp byte [rsi + 0x1a], 0x5a
jne 0x140051635
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9d, r15d
call fcn.1400571db
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x140051a05
lea rcx, [0x140177e98]
jmp 0x140051a1f
mov eax, dword [rsi + 0x34]
mov ecx, dword [rsi + 0x38]
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], eax
mov r12, qword [rsp + 0xc8]
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x140]
lea r9, [rsp + reloc.WLDAP32.dll_Ordinal_304]
mov rcx, r14
mov rdx, r13
call fcn.140063ea4
mov rcx, rsi
call fcn.1400648ab
xor ebx, ebx
jmp 0x140052c0d
cmp al, 0x55
jne 0x14005156b
cmp byte [r14 + 0x1a], 0x5a
jne 0x14005156b
mov rcx, qword [rsp + 0x48]
call fcn.1400570ac
mov rbp, rax
mov rax, qword [r14 + 0x10]
test rax, rax
mov qword [rsp + 0xb8], rax
je 0x140051655
mov ecx, dword [rax]
cmp byte [r14 + 0x19], 0x55
jne 0x140051657
cmp byte [r14 + 0x1a], 0x5a
sete al
jmp 0x140051659
lea rax, [0x14014da7f]
lea rcx, [0x14014da7a]
lea rdx, [0x14014da64]
lea rbp, [0x14014da6e]
mov rbx, r14
mov rsi, qword [rbx + 0x40]
test byte [rsi + 6], 2
jne 0x14005152f
mov rsi, qword [rsi + 0x38]
cmp rsi, rax
je 0x14005152f
cmp rsi, rcx
je 0x14005152f
cmp rsi, rdx
je 0x14005152f
cmp rsi, rbp
je 0x14005152f
mov rbx, qword [rbx + 0x30]
test rbx, rbx
jne 0x14005158a
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
call fcn.1400570ac
mov rbp, rax
mov rax, qword [r13 + 0x28]
mov rcx, qword [rax + 0x28]
movsx r12d, word [rcx + 0x46]
mov ecx, dword [rsi + 0x38]
cmp byte [r14 + 0x1a], 0x5a
je 0x140051a81
mov rdx, qword [r14 + 0x10]
jmp 0x140051a83
cmp dword [rsp + 0x19c], 0
je 0x1400518ca
xor r15d, r15d
mov ecx, 0
test eax, eax
jle 0x14005189a
mov rdx, qword [rsp + 0x1a0]
mov ebx, eax
add rdx, 8
xor ecx, ecx
mov rsi, qword [rdx]
test byte [rsi + 4], 0x20
jne 0x14005189a
inc rcx
add rdx, 0x18
cmp rbx, rcx
jne 0x140051617
jmp 0x14005189e
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x140051a31
lea rcx, [0x140177e98]
jmp 0x140051a4b
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x80], rax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x1c0], rax
mov rbx, qword [rsp + 0x48]
mov esi, dword [rbx + 0x44]
lea r15d, [rsi - 1]
mov r12d, dword [rbx + 0x34]
mov edx, dword [rbx + 0x38]
lea r9d, [rdx + rcx]
inc r9d
add esi, 0xfffffffe
mov dword [rbx + 0x44], esi
lea eax, [r12 + 1]
mov dword [rbx + 0x34], eax
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xd0], rdx
lea r13d, [rdx + rcx + 2]
mov dword [rbx + 0x38], r13d
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov rcx, rbx
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x88]
mov dword [rsp + 0xa8], r9d
call fcn.14006a4ab
xor edi, edi
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x1c8], eax
mov rcx, rbp
mov edx, esi
call fcn.1400588d8
mov r9d, dword [rbp + 0x90]
add r9d, 2
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, 0x12
xor r8d, r8d
call fcn.1400571db
mov r9d, dword [r14 + 0x48]
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, Ordinal_113
mov r8d, r12d
call fcn.1400571db
mov rcx, rbx
mov ebx, r15d
mov rdx, r14
call fcn.14006a780
mov esi, eax
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, Ordinal_73
xor r8d, r8d
mov dword [rsp + 0x88], r13d
mov r9d, r13d
call fcn.1400571db
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
mov r8d, r12d
mov r9d, r15d
call fcn.1400571db
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
mov r9d, r15d
call fcn.1400571db
mov r13, qword [rsp + 0x80]
test r13b, r13b
je 0x1400517ff
mov r15d, dword [rbp + 0x90]
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], esi
mov rcx, qword [rsp + 0x48]
mov rdx, r14
mov r8d, r12d
xor r9d, r9d
call fcn.14006a8a9
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, 5
mov r8d, r12d
mov r9d, r15d
call fcn.1400571db
mov dword [rsp + 0x20], edi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
mov r8d, r12d
mov r9d, ebx
call fcn.1400571db
mov dword [rsp + 0xd8], esi
mov eax, dword [rbp + 0x90]
mov dword [rsp + 0x98], eax
mov rsi, qword [rsp + 0xb8]
test rsi, rsi
mov r15, qword [rsp + 0x58]
je 0x140052598
mov cl, byte [r14 + 0x19]
mov dl, byte [r14 + 0x1a]
cmp dl, 0x55
setne r8b
cmp cl, 0x55
sete al
cmp dl, 0x55
je 0x14005184c
cmp cl, 0x55
jne 0x140052598
or al, r8b
xor edx, edx
cmp byte [r14 + 0x18], 0x59
mov edi, 0
jne 0x140052513
mov byte [rsp + 0x1b8], al
mov rdx, rsi
mov qword [rsp + 0x80], r13
mov dword [rsp + 0xec], ebx
mov r15d, dword [r14 + 0x68]
mov rax, qword [rsp + 0x1c0]
test rax, rax
je 0x140052418
mov r13d, dword [rax]
add r15d, r13d
jmp 0x14005241b
cmp ecx, eax
jne 0x1400518cd
inc ebp
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x38], ebp
mov dword [rsp + 0x20], 0
mov rcx, qword [rsp + 0x70]
mov edx, Ordinal_73
xor r8d, r8d
mov r9d, ebp
call fcn.1400571db
mov r15d, ebp
jmp 0x1400518cd
xor r15d, r15d
lea rdx, [rsp + 0x170]
mov r14, qword [rsp + 0x48]
mov rcx, r14
call fcn.14006543e
mov word [rsp + 0x28], r12w
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x20], 0
mov rcx, r14
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0xa0]
call fcn.1400614cb
test rax, rax
je 0x140050d9c
mov rdi, rax
lea r8, [rsp + 0x170]
mov rcx, r14
mov edx, r15d
call fcn.140065104
test r15d, r15d
je 0x140051957
mov dword [rsp + 0x20], 0
mov rcx, qword [rsp + 0x70]
mov edx, Ordinal_73
mov r8d, 1
mov r9d, r15d
call fcn.1400571db
cmp byte [rdi + 0x43], 0
mov r12, qword [rsp + 0xc8]
jle 0x140051983
mov r9d, dword [rdi + 0x38]
mov dword [rsp + 0x20], 0
mov rcx, qword [rsp + 0x70]
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
call fcn.1400571db
mov rcx, rdi
call fcn.1400648ab
lea rdx, [rsp + 0x170]
mov rcx, r14
call fcn.1400653cf
mov qword [rsp + 0x140], 0
mov rcx, r14
mov rdx, qword [rsp + 0xc0]
mov esi, dword [rsp + 0x80]
mov r8d, esi
mov r9d, 0x10
call fcn.140058eb8
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r12
mov rcx, r14
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call fcn.140063ea4
mov r15, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x70]
jmp 0x1400520c6
xor eax, eax
mov qword [rsp + 0xa0], rax
xor edi, edi
jmp 0x1400527f8
lea ecx, [rax - 1]
test edi, edi
cmovns ecx, edi
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov r8, r12
mov dword [rcx + 8], eax
mov r15d, dword [rbp + 0x90]
jmp 0x1400520fc
lea ecx, [rax - 1]
test edi, edi
cmovns ecx, edi
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov r8, r12
mov dword [rcx + 8], eax
mov rax, qword [rsp + 0x50]
mov al, byte [rax + 0x1a]
cmp al, 0x58
jne 0x140052104
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x1400520dd
lea rcx, [0x140177e98]
jmp 0x1400520f9
xor edx, edx
mov qword [rsp + 0x80], rdx
mov esi, dword [rax + 0x4c]
lea edi, [rcx + 1]
mov rbx, qword [r14 + 8]
mov qword [rsp + 0xa8], rcx
lea eax, [r12 + rcx]
add eax, 2
mov rcx, qword [rsp + 0x48]
mov dword [rcx + 0x38], eax
test r12d, r12d
jle 0x140051ad7
xor r15d, r15d
lea eax, [rdi + r15]
mov dword [rsp + 0x20], eax
mov rcx, rbp
mov edx, 0x5a
mov r8d, esi
mov r9d, r15d
call fcn.1400571db
inc r15d
cmp r12d, r15d
jne 0x140051ab4
mov rax, rbx
or rax, qword [rsp + 0x80]
je 0x140052a36
test rbx, rbx
je 0x1400523e1
mov rdx, rbx
mov r13d, dword [rbx]
cmp qword [rsp + 0x80], 0
je 0x1400526c6
mov rax, qword [rsp + 0x80]
mov eax, dword [rax]
jmp 0x1400526c8
mov r12d, dword [rbp + 0x38]
inc r12d
mov dword [rbp + 0x38], r12d
mov dword [rsp + 0x20], r12d
mov rsi, qword [rsp + 0x70]
mov rcx, rsi
mov edx, Ordinal_96
mov r8d, r14d
mov r9d, edi
call fcn.1400571db
mov r8d, dword [rsp + 0x174]
mov dword [rsp + 0x20], 0
mov rcx, rsi
mov edx, Ordinal_133
mov r9d, r12d
call fcn.1400571db
test r12d, r12d
mov rbx, qword [rsp + 0x58]
je 0x140051b7f
movzx eax, byte [rbp + 0x1f]
cmp rax, 7
ja 0x140051b7f
lea ecx, [rax + 1]
mov byte [rbp + 0x1f], cl
mov dword [rbp + rax*4 + 0xb4], r12d
cmp edi, 1
jne 0x140051ba3
test r14d, r14d
je 0x140051baf
movzx eax, byte [rbp + 0x1f]
cmp rax, 7
ja 0x140051baf
lea ecx, [rax + 1]
mov byte [rbp + 0x1f], cl
mov dword [rbp + rax*4 + 0xb4], r14d
jmp 0x140051baf
cmp dword [rbp + 0x28], edi
jge 0x140051baf
mov dword [rbp + 0x28], edi
mov dword [rbp + 0x2c], r14d
mov rcx, r13
call fcn.1400648ab
mov r12d, dword [rbp + 0x34]
lea eax, [r12 + 1]
mov dword [rbp + 0x34], eax
mov dword [rsp + 0x178], r12d
mov al, byte [rbp + 0x1f]
test al, al
je 0x140051be3
dec al
mov byte [rbp + 0x1f], al
movzx eax, al
mov esi, dword [rbp + rax*4 + 0xb4]
jmp 0x140051beb
mov esi, dword [rbp + 0x38]
inc esi
mov dword [rbp + 0x38], esi
mov r14, qword [rsp + 0xe0]
mov dword [rsp + 0x20], edi
mov rdi, qword [rsp + 0x70]
mov rcx, rdi
mov edx, 0x74
mov r8d, r12d
mov r9d, esi
call fcn.1400571db
mov r8d, dword [rsp + 0x174]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, Ordinal_36
mov r9d, dword [rsp + 0x80]
call fcn.1400571db
mov byte [rsp + 0x171], 1
cmp dword [rsp + 0x88], 0
mov qword [rsp + 0x1b8], r13
jne 0x140051c83
test byte [rbx + 0x5c], 4
jne 0x140051c83
cmp r15d, dword [rsp + 0x68]
jne 0x140051c66
cmp byte [r13 + 0x44], 0
je 0x140052801
mov qword [rsp + 0x140], 0
mov edx, dword [rsp + 0x158]
mov rcx, qword [rsp + 0x70]
call fcn.140060fed
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx + 0x90]
mov dword [rsp + 0x88], eax
cmp r15d, dword [rsp + 0x68]
mov r13, qword [rsp + 0x48]
je 0x140051cbb
mov r8d, dword [rsp + 0x174]
mov dword [rsp + 0x20], r12d
mov edx, Ordinal_127
mov r9d, esi
call fcn.1400571db
mov rbp, qword [rsp + 0x50]
mov eax, dword [rbp]
test eax, eax
jle 0x140051d28
mov rax, qword [rsp + 0xa8]
lea esi, [r14 + rax]
add esi, 5
lea rbx, [rbp + 8]
xor edi, edi
cmp r15d, dword [rsp + 0x68]
jne 0x140051cfc
mov byte [rsp + 0x170], 1
lea r8d, [rsi + rdi]
mov rdx, qword [rbx]
mov rcx, r13
call fcn.140057176
jmp 0x140051d18
lea eax, [rsi + rdi]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x70]
mov edx, 0x5a
mov r8d, r12d
mov r9d, edi
call fcn.1400571db
inc rdi
movsxd rax, dword [rbp]
add rbx, 0x28
cmp rdi, rax
jl 0x140051cdc
mov rcx, qword [rsp + 0xa8]
lea edx, [rcx + 3]
mov dword [rsp + 0x78], edx
mov rdx, qword [rsp + 0x98]
dec edx
mov qword [rsp + 0x98], rdx
lea edi, [r14 + rcx]
add edi, 5
mov rbx, qword [rsp + 0x1c8]
test rbx, rbx
je 0x140051d62
inc dword [rbx]
mov eax, dword [rbp]
mov rcx, qword [rsp + 0xa8]
inc ecx
mov qword [rsp + 0xa8], rcx
mov dword [rsp + 0x20], eax
mov rsi, qword [rsp + 0x70]
mov rcx, rsi
mov edx, Ordinal_88
mov r14d, dword [rsp + 0x1c0]
mov r8d, r14d
mov r9d, edi
call fcn.1400571db
mov rcx, rsi
mov edx, eax
mov r8, rbx
mov r9d, 0xfffffff7
call fcn.140059198
mov ebx, dword [rsi + 0x90]
lea r8d, [rbx + 1]
mov dword [rsp + 0x20], r8d
xor r12d, r12d
mov rcx, rsi
mov edx, 0x11
xor r9d, r9d
call fcn.1400571db
mov eax, dword [rbp]
mov rcx, qword [r13 + 0x10]
mov dword [rsp + 0x20], eax
mov edx, reloc.WLDAP32.dll_Ordinal_77
mov r8d, edi
mov r9d, r14d
call fcn.1400571db
mov dword [rsp + 0x20], r12d
mov rcx, rsi
mov edx, reloc.WLDAP32.dll_Ordinal_12
mov r8d, dword [rsp + 0x78]
mov r14, qword [rsp + 0x98]
mov r9d, r14d
call fcn.1400571db
mov dword [rsp + 0x20], r12d
mov rcx, rsi
mov edx, 0x38
mov r8d, dword [rsp + 0xd0]
mov ebp, dword [rsp + 0x80]
mov r9d, ebp
call fcn.1400571db
mov dword [rsp + 0x20], r12d
mov rcx, rsi
mov edx, reloc.WLDAP32.dll_Ordinal_12
mov r8d, dword [rsp + 0xb8]
mov r9d, dword [rsp + 0xd8]
call fcn.1400571db
mov eax, dword [rsi + 0x90]
mov rcx, qword [rsi]
cmp byte [rcx + 0x61], 0
je 0x140051e68
lea rcx, [0x140177e98]
jmp 0x140051e87
lea ecx, [rax - 1]
test ebx, ebx
cmovns ecx, ebx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
mov rdx, qword [rsp + 0x70]
add rcx, qword [rdx + 0x88]
mov dword [rcx + 8], eax
lea r8, [rsp + 0x170]
mov rcx, r13
mov rdi, qword [rsp + 0xa8]
mov edx, edi
call fcn.140065104
mov dword [rsp + 0x20], 0
mov rsi, qword [rsp + 0x70]
mov rcx, rsi
mov edx, Ordinal_73
mov r8d, 1
mov r9d, edi
call fcn.1400571db
cmp r15d, dword [rsp + 0x68]
jne 0x140051eec
mov rcx, qword [rsp + 0x1b8]
call fcn.1400648ab
mov rcx, rsi
mov edx, dword [rsp + 0xec]
call fcn.140060fed
jmp 0x140051f11
mov r8d, dword [rsp + 0x174]
mov dword [rsp + 0x20], 0
mov rcx, rsi
mov edx, 3
mov r9d, dword [rsp + 0x88]
call fcn.1400571db
mov r13, qword [rsp + 0x60]
xor edi, edi
mov dword [rsp + 0x20], edi
mov rcx, rsi
mov edx, reloc.WLDAP32.dll_Ordinal_12
mov r12d, dword [rsp + 0x78]
mov r8d, r12d
mov r9d, r14d
call fcn.1400571db
mov dword [rsp + 0x20], edi
mov rcx, rsi
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9d, ebp
call fcn.1400571db
mov rax, qword [rsp + 0x70]
mov esi, ebp
mov eax, dword [rax + 0x90]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x20], edi
mov rcx, qword [rsp + 0x70]
mov edx, Ordinal_73
mov r8d, 1
mov r9d, dword [rsp + 0xd0]
call fcn.1400571db
mov dword [rsp + 0x20], edi
mov rcx, qword [rsp + 0x70]
mov edx, Ordinal_69
mov r8d, r12d
xor r9d, r9d
call fcn.1400571db
mov rcx, qword [rsp + 0x70]
mov edx, r14d
call fcn.1400588d8
mov rax, qword [rsp + 0x70]
mov ebx, dword [rax + 0x90]
lea r9d, [rbx + 2]
mov dword [rsp + 0x20], edi
mov rcx, qword [rsp + 0x70]
mov edx, 0x38
mov r15, qword [rsp + 0xa8]
mov r8d, r15d
call fcn.1400571db
mov dword [rsp + 0x20], edi
mov rcx, qword [rsp + 0x70]
mov edx, Ordinal_69
mov r8d, r12d
xor r9d, r9d
call fcn.1400571db
lea rdx, [rsp + 0x170]
mov r14, qword [rsp + 0x48]
mov rcx, r14
call fcn.1400653cf
inc ebx
mov rcx, r14
mov rdx, qword [rsp + 0xc0]
mov r8d, ebx
mov r9d, 0x10
call fcn.140058eb8
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x70]
mov dword [rsp + 0x28], ebx
mov rbx, rax
mov rbp, qword [rsp + 0xc8]
mov qword [rsp + 0x20], rbp
lea r8, [rsp + 0x140]
lea r9, [rsp + reloc.WLDAP32.dll_Ordinal_304]
mov rcx, r14
mov rdx, r13
call fcn.140063ea4
mov dword [rsp + 0x20], edi
mov rcx, rbx
mov edx, Ordinal_69
mov r8d, r12d
mov r12, rbp
xor r9d, r9d
call fcn.1400571db
mov rcx, rbx
mov edx, dword [rsp + 0xd8]
call fcn.1400588d8
mov rcx, r14
lea rdx, [rsp + 0x170]
call fcn.14006543e
mov dword [rsp + 0x20], edi
mov rcx, rbx
mov edx, Ordinal_73
xor r8d, r8d
mov r9d, r15d
call fcn.1400571db
mov dword [rsp + 0x20], edi
mov rcx, rbx
mov edx, Ordinal_69
mov r8d, dword [rsp + 0xb8]
xor r9d, r9d
call fcn.1400571db
mov r15, qword [rsp + 0x58]
mov rcx, rbx
mov edx, esi
call fcn.1400588d8
mov rbx, qword [rsp + 0xa0]
jmp 0x140052c0d
lea ecx, [rax - 1]
test r14d, r14d
cmovns ecx, r14d
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
mov rax, qword [rsp + 0x50]
mov al, byte [rax + 0x1a]
cmp al, 0x56
jne 0x140052123
mov dword [rsp + 0x20], 1
mov rcx, rbp
mov edx, 0x38
xor r9d, r9d
call fcn.1400571db
mov r14d, eax
mov dword [rsp + 0x80], r14d
xor r14d, r14d
mov rbx, qword [rsp + 0x50]
cmp byte [rbx + 0x19], 0x56
mov edi, 0
jne 0x140052160
mov dword [rsp + 0x20], 1
mov rcx, rbp
mov edx, 0x38
mov r8d, dword [rsp + 0xa8]
xor r9d, r9d
call fcn.1400571db
mov edi, eax
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov rdx, rbx
xor r8d, r8d
call fcn.14006ad3b
mov rcx, rsi
mov rdx, rbx
mov r8d, dword [rsp + 0x68]
mov r9d, dword [rsp + 0x78]
call fcn.14006aef4
mov r9d, dword [rbp + 0x90]
add r9d, 2
mov r8d, dword [rbx + 0x48]
mov dword [rsp + 0x20], r14d
mov rcx, rbp
mov edx, 5
call fcn.1400571db
mov dword [rsp + 0x20], r14d
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9, qword [rsp + 0x88]
call fcn.1400571db
mov al, byte [rbx + 0x19]
cmp al, 0x56
mov r12, qword [rsp + 0xc8]
jne 0x14005220e
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x1400521ee
lea rcx, [0x140177e98]
jmp 0x140052208
lea ecx, [rax - 1]
test edi, edi
cmovns ecx, edi
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
mov al, byte [rbx + 0x19]
add al, 0xab
cmp al, 3
ja 0x1400522ee
cmp al, 2
je 0x1400522ee
mov rax, qword [rsp + 0x48]
mov edi, dword [rax + 0x44]
dec edi
mov dword [rax + 0x44], edi
mov al, byte [rbx + 0x19]
cmp al, 0x58
jne 0x140052257
mov dword [rsp + 0x20], 1
mov rcx, rbp
mov edx, 0x38
mov r8d, dword [rsp + 0xa8]
mov r9d, edi
call fcn.1400571db
mov al, byte [rbx + 0x19]
mov r9d, dword [rbp + 0x90]
cmp al, 0x56
jne 0x14005229b
add r9d, 2
xor r14d, r14d
mov dword [rsp + 0x20], r14d
mov rcx, rbp
mov edx, 5
mov rsi, qword [rsp + 0xd8]
mov r8d, esi
call fcn.1400571db
mov dword [rsp + 0x20], r14d
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9d, edi
jmp 0x1400522b9
inc r9d
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, 5
mov rsi, qword [rsp + 0xd8]
mov r8d, esi
call fcn.1400571db
mov dword [rsp + 0x28], r13d
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x48]
mov rdx, rbx
mov r8d, esi
mov r9d, 1
call fcn.14006a8a9
mov rcx, rbp
mov edx, edi
call fcn.1400588d8
cmp byte [rbx + 0x1a], 0x56
mov r13, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x88]
jne 0x14005233e
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x14005231a
lea rcx, [0x140177e98]
jmp 0x14005233b
lea ecx, [rax - 1]
mov edx, dword [rsp + 0x80]
test edx, edx
cmovns ecx, edx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9d, r15d
call fcn.1400571db
mov rcx, rbp
mov edx, edi
call fcn.1400588d8
mov r8d, dword [rbx + 0x48]
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_140
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_69
mov r8d, dword [rsp + 0xb8]
xor r9d, r9d
call fcn.1400571db
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x1400523ae
lea rcx, [0x140177e98]
jmp 0x1400523cf
lea ecx, [rax - 1]
mov edx, dword [rsp + 0xd0]
test edx, edx
cmovns ecx, edx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x58]
mov dword [rcx + 8], eax
jmp 0x140052b7b
cmp qword [rsp + 0x80], 0
je 0x140052926
mov rax, qword [rsp + 0x80]
mov eax, dword [rax]
mov qword [rsp + 0xb8], rax
xor r13d, r13d
xor r14d, r14d
mov dword [rsp + 0x98], 0
jmp 0x14005277b
xor r13d, r13d
mov rax, qword [rsp + 0xd0]
inc eax
mov qword [rsp + 0xd0], rax
mov r14, qword [rsp + 0x50]
add r13d, dword [r14 + 0x5c]
mov rcx, qword [rsp + 0x48]
xor r8d, r8d
xor r9d, r9d
call fcn.140061441
mov rdi, rax
cmp dword [rsp + 0xe0], 0
jle 0x140052487
mov rax, qword [rsp + 0xd0]
mov esi, eax
mov rax, qword [rsp + 0xe0]
mov ebx, eax
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 0x5a
mov r8d, r12d
mov r9d, r15d
call fcn.1400571db
inc r15d
inc esi
dec ebx
jne 0x140052467
mov rbx, qword [rsp + 0xe0]
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, Ordinal_88
mov r15, qword [rsp + 0xd0]
mov r8d, r15d
mov r9d, r13d
call fcn.1400571db
mov esi, eax
mov rcx, rbp
mov rdx, rdi
mov r8d, 0xfffffff7
call fcn.140058624
add esi, 2
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 0x11
mov r8d, esi
xor r9d, r9d
call fcn.1400571db
mov edi, eax
dec ebx
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, Ordinal_79
mov r8d, r15d
mov r9d, r13d
call fcn.1400571db
mov r15, qword [rsp + 0x58]
mov ebx, dword [rsp + 0xec]
mov r13, qword [rsp + 0x80]
mov al, byte [rsp + 0x1b8]
xor edx, edx
mov ecx, 0
test al, al
je 0x14005252a
mov edx, dword [rsp + 0xf0]
mov ecx, dword [rsp + 0xd8]
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], ecx
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x48]
mov rdx, r14
mov r8d, dword [rsp + 0x88]
mov r9d, dword [rsp + 0x68]
call fcn.14006b2a8
test edi, edi
je 0x140052598
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x140052571
lea rcx, [0x140177e98]
jmp 0x14005258b
lea ecx, [rax - 1]
test edi, edi
cmovns ecx, edi
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x50]
test r13b, r13b
jne 0x1400525c6
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x48]
mov rdx, r14
mov r8d, r12d
xor r9d, r9d
call fcn.14006a8a9
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 0x53
mov edi, dword [rsp + 0x88]
mov r8d, edi
mov r9d, 1
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 5
mov r8d, r12d
mov r9d, dword [rsp + 0x98]
call fcn.1400571db
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x48]
mov rdx, r14
mov r8d, edi
mov r9d, dword [rsp + 0x68]
call fcn.14006b2a8
mov rcx, rbp
mov edx, ebx
call fcn.1400588d8
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_140
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_69
mov r8d, dword [rsp + 0xa8]
xor r9d, r9d
call fcn.1400571db
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
mov r13, qword [rsp + 0x60]
je 0x140052686
lea rcx, [0x140177e98]
jmp 0x1400526a7
lea ecx, [rax - 1]
mov edx, dword [rsp + 0x1c8]
test edx, edx
cmovns ecx, edx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov r12, qword [rsp + 0xc8]
mov dword [rcx + 8], eax
mov r14, qword [rsp + 0x48]
jmp 0x140052b7b
mov dil, 1
xor ebp, ebp
jmp 0x1400527be
xor eax, eax
mov qword [rsp + 0xb8], rax
mov rbx, qword [rsp + 0x50]
mov esi, dword [rbx + 0x68]
add esi, edi
mov r14, qword [rsp + 0x48]
mov rcx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.140061441
mov r15, rax
mov r9d, dword [rbx + 0x5c]
mov dword [rsp + 0x20], r13d
mov rcx, rbp
mov edx, Ordinal_88
mov r8d, esi
call fcn.1400571db
mov esi, eax
mov rcx, rbp
mov rdx, r15
mov r8d, 0xfffffff7
call fcn.140058624
add esi, 2
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 0x11
mov r8d, esi
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x98], eax
mov rcx, r14
mov rdx, rbx
mov r8d, 1
call fcn.14006ad3b
cmp qword [rsp + 0x80], 0
je 0x14005293e
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
xor r9d, r9d
call fcn.1400571db
mov r14d, eax
lea esi, [rdi + r13]
mov rbx, qword [rsp + 0x50]
add esi, dword [rbx + 0x68]
mov r15d, dword [rbx + 0x5c]
add r15d, r13d
cmp dword [rsp + 0x98], 0
je 0x140052846
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x14005281d
lea rcx, [0x140177e98]
jmp 0x14005283e
mov bpl, 1
mov dil, 2
xor eax, eax
mov qword [rsp + 0xa0], rax
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
xor r8d, r8d
call fcn.14005ad1d
test rax, rax
je 0x1400527e9
mov byte [rax + 0x20], bpl
mov qword [rsp + 0xa0], rax
mov r15, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x60]
movzx r12d, dil
jmp 0x140050d1c
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x90]
mov dword [rsp + 0x88], eax
mov r13, qword [rsp + 0x48]
jmp 0x140051cbb
lea ecx, [rax - 1]
mov edx, dword [rsp + 0x98]
test edx, edx
cmovns ecx, edx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
mov rbx, qword [rsp + 0x50]
mov dword [rsp + 0x98], 0
cmp byte [rbx + 0x18], 0x59
jne 0x1400528cf
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x80]
xor r8d, r8d
xor r9d, r9d
call fcn.140061441
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x20], eax
mov rcx, rbp
mov edx, Ordinal_88
mov r8d, esi
mov r9d, r15d
call fcn.1400571db
mov esi, eax
mov rcx, rbp
mov rdx, qword [rsp + 0x80]
mov r8d, 0xfffffff7
call fcn.140058624
add esi, 2
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 0x11
mov r8d, esi
xor r9d, r9d
call fcn.1400571db
mov dword [rsp + 0x98], eax
xor r8d, r8d
cmp byte [rbx + 0x19], 0x55
sete r8b
mov rcx, qword [rsp + 0x48]
mov rdx, rbx
call fcn.14006ad3b
test r14d, r14d
je 0x14005293e
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x140052905
lea rcx, [0x140177e98]
jmp 0x140052921
lea ecx, [rax - 1]
test r14d, r14d
cmovns ecx, r14d
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
jmp 0x14005293e
xor r13d, r13d
xor eax, eax
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x98], 0
mov r9d, dword [rbp + 0x90]
add r9d, 3
mov r14, qword [rsp + 0x50]
mov r8d, dword [r14 + 0x48]
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_12
mov r8d, dword [rsp + 0x68]
mov r9d, dword [rsp + 0x78]
call fcn.1400571db
mov r9d, dword [rbp + 0x90]
dec r9d
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, 5
call fcn.1400571db
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_140
xor r9d, r9d
call fcn.1400571db
mov rax, qword [rsp + 0xb8]
add eax, r13d
dec eax
mov r9d, dword [r14 + 0x5c]
mov r8d, dword [r14 + 0x68]
add r8d, edi
mov dword [rsp + 0x20], eax
mov rcx, rbp
mov edx, Ordinal_79
call fcn.1400571db
cmp dword [rsp + 0x98], 0
mov r13, qword [rsp + 0x60]
je 0x140052a36
mov eax, dword [rbp + 0x90]
mov rcx, qword [rbp]
cmp byte [rcx + 0x61], 0
je 0x140052a08
lea rcx, [0x140177e98]
jmp 0x140052a29
lea ecx, [rax - 1]
mov edx, dword [rsp + 0x98]
test edx, edx
cmovns ecx, edx
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rbp + 0x88]
mov dword [rcx + 8], eax
mov r13, qword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov rax, qword [rsp + 0xa8]
lea esi, [rax + r12]
inc esi
lea r15d, [rax + r12 + 2]
mov dword [rsp + 0x20], edi
mov dword [rsp + 0x28], 0
mov rcx, qword [rsp + 0x48]
mov rdx, r14
mov r8d, 0xffffffff
xor r9d, r9d
call fcn.14006a8a9
mov r9d, dword [r14 + 0x68]
test r9d, r9d
jle 0x140052a8c
mov ebx, esi
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_96
mov r8d, edi
call fcn.1400571db
jmp 0x140052abb
mov dword [rsp + 0x20], 0
mov rcx, rbp
mov edx, Ordinal_77
xor r8d, r8d
mov ebx, esi
mov r9d, esi
call fcn.1400571db
lea rdx, [0x1401202e0]
mov rcx, rbp
xor r8d, r8d
call fcn.140058624
mov r12, qword [rsp + 0xc8]
mov r8d, dword [r14 + 0x48]
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, Ordinal_122
mov r9d, r15d
call fcn.1400571db
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], r15d
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_122
mov r9d, ebx
call fcn.1400571db
mov rcx, qword [rsp + 0x88]
call fcn.1400648ab
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
mov rdx, r14
mov r8d, 1
call fcn.14006ad3b
mov r9d, dword [rbp + 0x90]
add r9d, 3
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_36
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov edx, reloc.WLDAP32.dll_Ordinal_12
mov r8d, dword [rsp + 0x68]
mov r9d, dword [rsp + 0x78]
call fcn.1400571db
mov r9d, dword [rbp + 0x90]
dec r9d
mov r8d, dword [r14 + 0x48]
mov dword [rsp + 0x20], esi
mov rcx, rbp
mov r14, rdi
mov edx, 5
call fcn.1400571db
mov r15, qword [rsp + 0x58]
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov rbp, qword [rsp + 0x70]
mov rcx, rbp
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov rsi, qword [rsp + 0xa0]
mov r9d, esi
call fcn.1400571db
mov rcx, rbp
mov edx, dword [rsp + 0x78]
call fcn.1400588d8
lea r8, [rsp + 0x140]
mov dword [r8 + 0x20], ebx
mov dword [rsp + 0x30], esi
mov edi, dword [rsp + 0xc0]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r12
lea r9, [rsp + reloc.WLDAP32.dll_Ordinal_304]
mov rcx, r14
mov rdx, r13
call fcn.140063ea4
mov rcx, rbp
mov edx, edi
call fcn.1400588d8
mov dword [rsp + 0x20], ebx
mov rcx, rbp
mov edx, Ordinal_69
mov r8d, dword [rsp + 0x68]
xor r9d, r9d
call fcn.1400571db
mov rcx, rbp
mov edx, esi
call fcn.1400588d8
mov rdi, qword [rsp + 0x140]
test rdi, rdi
je 0x140053181
mov qword [rsp + 0xa0], rbx
mov rax, qword [rsp + 0x90]
mov ebp, dword [rax]
mov r15, qword [r14 + 0x10]
mov rcx, r12
mov r12d, dword [rsp + 0x15c]
mov eax, dword [r14 + 0x44]
dec eax
mov dword [rsp + 0xc0], eax
mov dword [r14 + 0x44], eax
mov al, byte [rcx]
mov rbx, rcx
mov ecx, dword [rcx + 4]
mov dword [rsp + 0x98], ecx
mov r13, qword [r13]
mov r9d, dword [rsp + 0x154]
test r9d, r9d
mov byte [rsp + 0x50], al
je 0x140052cb9
mov r8d, dword [rsp + 0x150]
xor esi, esi
mov dword [rsp + 0x20], esi
mov rcx, r15
mov edx, reloc.WLDAP32.dll_Ordinal_12
call fcn.1400571db
mov dword [rsp + 0x20], esi
mov rcx, r15
mov edx, reloc.Cabinet.dll_FCIAddFile
xor r8d, r8d
mov r9d, r12d
call fcn.1400571db
mov edx, dword [rsp + 0x154]
mov rcx, r15
call fcn.1400588d8
mov al, byte [rsp + 0x50]
mov dword [rsp + 0x78], r12d
mov esi, dword [rsp + 0x14c]
cmp al, 0xd
mov qword [rsp + 0x68], rbp
ja 0x140052db4
movzx edx, al
mov ecx, 0x2600
bt rcx, rdx
jae 0x140052db4
mov eax, dword [rbx + 8]
mov qword [rsp + 0x88], rax
xor ebp, ebp
mov edi, dword [rdi]
sub edi, dword [rsp + 0x148]
test byte [rsp + 0x164], 1
mov dword [rsp + 0x90], esi
mov dword [rsp + 0x80], ebp
jne 0x140052d73
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, Ordinal_36
mov r8d, esi
mov r9d, dword [rsp + 0x78]
call fcn.1400571db
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x60]
mov r8d, dword [rax + 0x14]
mov ebx, 1
test r8d, r8d
jle 0x140052d66
mov dword [rsp + 0x20], 1
mov rcx, r15
mov edx, 0x38
mov r9d, dword [rsp + 0xc0]
call fcn.1400571db
mov r12d, esi
mov rbp, qword [rsp + 0x68]
jmp 0x140052ede
mov r12d, dword [r14 + 0x34]
mov esi, dword [r14 + 0x38]
inc esi
mov dword [r14 + 0x38], esi
lea eax, [r12 + 1]
mov dword [r14 + 0x34], eax
cmp dword [rsp + 0x154], 0
je 0x140052e0a
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, 0x12
xor r8d, r8d
xor r9d, r9d
call fcn.1400571db
mov r14d, eax
jmp 0x140052e0d
mov cl, byte [r14 + 0x1f]
test cl, cl
je 0x1400531b6
lea r8d, [rcx - 1]
mov byte [r14 + 0x1f], r8b
movzx edx, r8b
mov ebp, dword [r14 + rdx*4 + 0xb4]
mov edx, eax
and dl, 0xfd
cmp dl, 0xc
jne 0x1400531c8
test r8b, r8b
je 0x1400531e2
add cl, 0xfe
mov byte [r14 + 0x1f], cl
movzx eax, cl
mov eax, dword [r14 + rax*4 + 0xb4]
mov qword [rsp + 0x88], rax
jmp 0x1400531f4
xor r14d, r14d
mov rbp, qword [rsp + 0x68]
lea eax, [rdi + rbp]
inc eax
mov dword [rsp + 0x20], eax
mov rcx, r15
mov edx, 0x74
mov r8d, r12d
mov r9d, esi
call fcn.1400571db
test r14d, r14d
je 0x140052e6b
mov eax, dword [r15 + 0x90]
mov rcx, qword [r15]
cmp byte [rcx + 0x61], 0
je 0x140052e4c
lea rcx, [0x140177e98]
jmp 0x140052e68
lea ecx, [rax - 1]
test r14d, r14d
cmovns ecx, r14d
movsxd rcx, ecx
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [r15 + 0x88]
mov dword [rcx + 8], eax
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, Ordinal_36
mov r8d, dword [rsp + 0x90]
mov r9d, dword [rsp + 0x78]
call fcn.1400571db
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x60]
mov r8d, dword [rax + 0x14]
test r8d, r8d
jle 0x140052ebf
mov dword [rsp + 0x20], 1
mov rcx, r15
mov edx, 0x38
mov r9d, dword [rsp + 0xc0]
call fcn.1400571db
mov dword [rsp + 0x20], r12d
mov rcx, r15
mov edx, Ordinal_127
mov r8d, dword [rsp + 0x90]
mov r9d, esi
call fcn.1400571db
xor ebx, ebx
add ebx, edi
mov qword [rsp + 0x60], rbx
test ebp, ebp
jle 0x140052f72
mov rax, qword [rsp + 0x60]
lea ebx, [rax - 1]
mov esi, dword [rsp + 0x68]
lea rax, [rsi*8]
lea rax, [rax + rax*4]
xor ecx, ecx
cmp word [r13 + rcx + 0x28], 1
adc ebx, 0
add rcx, 0x28
cmp rax, rcx
jne 0x140052f07
mov rax, qword [rsp + 0x88]
lea r14d, [rax - 1]
lea rax, [rsi + rsi*4]
lea rdi, [rax*8]
add rdi, r13
lea rbp, [rsi - 1]
movzx eax, word [rdi]
lea r9d, [rax - 1]
xor ecx, ecx
test eax, eax
sete cl
cmove r9d, ebx
sub ebx, ecx
lea eax, [r14 + rsi]
mov dword [rsp + 0x20], eax
mov rcx, r15
mov edx, 0x5a
mov r8d, r12d
call fcn.1400571db
add rdi, 0xffffffffffffffd8
cmp rsi, 1
mov rsi, rbp
jg 0x140052f35
mov edi, dword [rsp + 0xa8]
inc edi
mov al, byte [rsp + 0x50]
cmp al, 9
je 0x140053035
cmp al, 0xe
mov r14, qword [rsp + 0x48]
mov rbx, qword [rsp + 0xa0]
mov esi, dword [rsp + 0x78]
mov r13, qword [rsp + 0x88]
je 0x140052fac
cmp al, 0xc
jne 0x140053086
mov dword [rsp + 0x20], r13d
mov rcx, r15
mov edx, 0x5a
mov r8d, r12d
mov r9, qword [rsp + 0x60]
call fcn.1400571db
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, Ordinal_122
mov ebp, esi
mov esi, edi
mov edi, dword [rsp + 0x98]
mov r8d, edi
mov r12d, dword [rsp + 0x80]
mov r9d, r12d
call fcn.1400571db
mov dword [rsp + 0x20], r12d
mov rcx, r15
mov edx, reloc.WLDAP32.dll_Ordinal_122
mov r8d, edi
mov edi, esi
mov esi, ebp
mov r9d, r13d
call fcn.1400571db
mov eax, dword [r15 + 0x90]
test eax, eax
jle 0x1400530b2
mov rcx, qword [r15 + 0x88]
dec eax
lea rax, [rax + rax*2]
mov word [rcx + rax*8 + 2], 8
jmp 0x1400530b2
mov rax, qword [rsp + 0xc8]
mov r8d, dword [rax + 8]
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, 0x51
mov r9, qword [rsp + 0x68]
call fcn.1400571db
mov r12d, dword [rsp + 0x80]
test r12d, r12d
mov r14, qword [rsp + 0x48]
mov rbx, qword [rsp + 0xa0]
mov esi, dword [rsp + 0x78]
mov r13, qword [rsp + 0x88]
jne 0x1400530c9
jmp 0x140053112
mov rax, qword [rsp + 0xc8]
mov r8d, dword [rax + 4]
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, reloc.WLDAP32.dll_Ordinal_14
xor r9d, r9d
call fcn.1400571db
mov r12d, dword [rsp + 0x80]
test r12d, r12d
mov al, byte [rsp + 0x50]
je 0x140053112
cmp al, 0xb
jne 0x1400530c9
mov rax, qword [rsp + 0x68]
cmp eax, 1
jne 0x1400530ea
test r13d, r13d
je 0x1400530f8
movzx eax, byte [r14 + 0x1f]
cmp rax, 7
ja 0x1400530f8
lea ecx, [rax + 1]
mov byte [r14 + 0x1f], cl
mov dword [r14 + rax*4 + 0xb4], r13d
jmp 0x1400530f8
cmp dword [r14 + 0x28], eax
jge 0x1400530f8
mov dword [r14 + 0x28], eax
mov dword [r14 + 0x2c], r13d
movzx eax, byte [r14 + 0x1f]
cmp rax, 7
ja 0x140053112
lea ecx, [rax + 1]
mov byte [r14 + 0x1f], cl
mov dword [r14 + rax*4 + 0xb4], r12d
mov rcx, r15
mov edx, dword [rsp + 0xc0]
call fcn.1400588d8
xor eax, eax
test byte [rsp + 0x164], 1
sete al
lea edx, [rax + rax + 3]
mov dword [rsp + 0x20], 0
mov rcx, r15
mov r8d, dword [rsp + 0x90]
mov r9d, edi
call fcn.1400571db
mov r8d, dword [rsp + 0x150]
test r8d, r8d
je 0x140053172
mov dword [rsp + 0x20], 0
mov rcx, r15
mov edx, Ordinal_69
xor r9d, r9d
call fcn.1400571db
mov rcx, r15
mov edx, esi
call fcn.1400588d8
mov r15, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x70]
mov edx, dword [rsp + 0xb0]
call fcn.1400588d8
xor ebp, ebp
cmp dword [r14 + 0x30], 0
setg bpl
test rbx, rbx
je 0x14004eece
mov rcx, r15
mov rdx, rbx
call fcn.140033cbe
jmp 0x14004eece
mov ecx, dword [r14 + 0x38]
inc ecx
mov dword [r14 + 0x38], ecx
and al, 0xfd
mov ebp, ecx
cmp al, 0xc
je 0x1400531e6
mov rcx, r14
mov rdx, qword [rsp + 0x68]
call fcn.140058a67
mov qword [rsp + 0x88], rax
jmp 0x140052cf1
mov ecx, dword [r14 + 0x38]
inc ecx
mov qword [rsp + 0x88], rcx
mov dword [r14 + 0x38], ecx
xor eax, eax
mov qword [rsp + 0x68], rax
jmp 0x140052cf1