Function at 0x7fff25d5eed0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x7fff25fcfe70]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
xor r14d, r14d
mov dword [rbp - 0x74], r9d
mov r15, rcx
mov dword [rbp - 0x78], r14d
mov rbx, r8
mov dword [rsp + 0x58], r14d
mov esi, edx
mov qword [rbp - 0x60], rbx
and esi, 0xff00ffff
mov word [rsp + 0x64], r14w
mov eax, dword [r15]
mov r11d, 1
mov dword [rbp - 0x68], eax
mov r8d, r11d
mov eax, edx
mov ecx, r14d
and eax, 0xff0000
mov edi, r14d
movzx r13d, r14w
mov r12d, r14d
cmove esi, edx
test esi, esi
js 0x7fff25d5f328
mov rax, qword gs:[0x30]
mov ecx, dword [rax + 0x179c]
test ecx, ecx
jne 0x7fff25d5f513
mov eax, dword [0x7fff25fcfe84]
cmp eax, 0xffffffff
je 0x7fff25d60aaf
test eax, eax
je 0x7fff25d5f332
mov rax, qword [0x7fff25fd1b08]
mov ecx, dword [rax + 0x678]
mov eax, dword [0x7fff25fd21b0]
cmp eax, ecx
jne 0x7fff25d60e44
movzx eax, word [0x7fff25fd21b6]
lea r14, [0x7fff25fd1b20]
test ax, ax
jne 0x7fff25d60e51
mov r11d, 1
mov r8d, r11d
movzx r13d, word [rsp + 0x64]
xor edx, edx
cmp r15, qword [r14 + 0x10]
mov ecx, edx
sete cl
mov rax, qword [r15 + 0x38]
mov r14d, esi
mov r10, qword [r15 + 0x28]
and r14d, 0x20000000
mov r9, qword [r15 + 0x20]
mov qword [rbp - 0x80], rax
mov rax, qword [r15 + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x68], r9
bt esi, 0x1c
jb 0x7fff25de1166
and esi, 0xfffffff
mov word [rbp - 0x50], dx
cmp esi, 0x7a
je 0x7fff25d5f109
cmp esi, 0x1004
je 0x7fff25d5f2d0
cmp esi, 0x666
ja 0x7fff25d5f3a9
je 0x7fff25de2223
lea eax, [rsi - 1]
cmp eax, 0x80
ja case.0x7fff25d5f3d5.4100
lea rdx, [0x7fff25d40000]
mov eax, dword [rdx + rax*4 + 0x2134c]
add rax, rdx
jmp rax
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de2097
test ecx, ecx
je 0x7fff25de2097
call fcn.7fff25d617c0
mov rdi, rax
cmp word [rax + 0x694], 3
je 0x7fff25d5f09b
lea rcx, [0x7fff25fd2830]
call qword [sym.imp.ntdll.dll_RtlAcquireSRWLockExclusive]
nop dword [rax + rax]
cmp dword [rdi + 0x640], 1
jne 0x7fff25d61086
xor r11d, r11d
lea rdx, [rdi + 0x41a]
mov r9d, 0xffff
test rdx, rdx
je 0x7fff25de2039
movzx eax, word [rdx]
cmp ax, r9w
je 0x7fff25de2039
lea r8, [rax - 0x55]
mov esi, 0x56
lea rax, [rbp - 0x50]
mov r10d, r11d
sub rdx, rax
lea rcx, [rbp - 0x50]
lea rax, [r8 + rsi]
test rax, rax
je 0x7fff25d5f137
movzx eax, word [rdx + rcx]
test ax, ax
je 0x7fff25d5f137
mov word [rcx], ax
add rcx, 2
sub rsi, 1
jne 0x7fff25d5f0e5
jmp 0x7fff25de202a
mov r8d, 3
cmp dword [r15 + 0x40], r8d
jb 0x7fff25d612c1
mov eax, dword [r9 + 4]
lea rdi, [r10 + rax*2]
mov esi, r11d
mov edx, r12d
xor r15d, r15d
mov r10, qword [rsp + 0x58]
mov r11d, 2
jmp 0x7fff25d5f1a5
test rsi, rsi
je 0x7fff25de202a
mov esi, dword [rsp + 0x60]
mov word [rcx], r11w
test r10d, r10d
js 0x7fff25de2039
cmp word [rdi + 0x694], 3
je 0x7fff25d5f174
lea rcx, [0x7fff25fd2830]
call qword [sym.imp.ntdll.dll_RtlReleaseSRWLockExclusive]
nop dword [rax + rax]
mov r9d, 0xffff
cmp word [rbp - 0x4e], r12w
je 0x7fff25de2043
cmp word [rbp - 0x50], r9w
je 0x7fff25de2043
lea rdi, [rbp - 0x50]
mov edx, r12d
mov r11d, 2
xor r15d, r15d
mov r10, qword [rsp + 0x58]
mov r8d, 3
mov r9d, 0x30
test r14d, r14d
jne 0x7fff25d5f298
lea eax, [rsi - 2]
test eax, 0xfffffffd
je 0x7fff25d5f441
test esi, esi
je 0x7fff25d5f5ee
movzx r10d, word [rdi]
add rdi, 2
movsxd rcx, dword [rbp - 0x74]
lea r9d, [r10 + 1]
test ecx, ecx
je 0x7fff25d5f26a
cmp ecx, r9d
jl 0x7fff25de269d
lea eax, [r9 - 1]
mov r8d, r15d
movsxd rdx, eax
lea rax, [rcx - 1]
cmp rax, 0x7ffffffe
ja 0x7fff25de2678
test r8d, r8d
js 0x7fff25d612cf
cmp rdx, 0x7ffffffe
ja 0x7fff25de2683
mov r8d, r15d
test rcx, rcx
je 0x7fff25de268e
sub rdx, rcx
sub rdi, rbx
nop dword [rax]
lea rax, [rdx + rcx]
test rax, rax
je 0x7fff25d5f254
movzx eax, word [rdi + rbx]
test ax, ax
je 0x7fff25d5f254
mov word [rbx], ax
add rbx, 2
sub rcx, 1
jne 0x7fff25d5f230
jmp 0x7fff25de268e
test rcx, rcx
je 0x7fff25de268e
mov word [rbx], r15w
test r8d, r8d
js 0x7fff25de2687
mov eax, r9d
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.7fff25dce640
mov rbx, qword [rsp + 0x648]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test edx, edx
je case.0x7fff25d5f3d5.4100
mov ecx, dword [rbp - 0x74]
cmp ecx, 2
jl 0x7fff25de2642
cmp esi, 1
je 0x7fff25de264e
cmp esi, 2
jne 0x7fff25d5f2be
movzx r12d, r13w
mov word [rbx], r12w
mov eax, r11d
shr r12d, 0x10
mov word [rbx + 2], r12w
jmp 0x7fff25d5f26d
movzx eax, word [r9 + 0x6e]
mov r11d, 2
mov r15d, 0xfde9
mov dword [rsp + 0x60], r11d
mov edx, 0xa
mov esi, r11d
mov dword [rsp + 0x50], edx
movzx r13d, ax
cmp ax, r15w
je 0x7fff25d60e26
mov esi, eax
cmp eax, 3
jbe 0x7fff25de2635
cmp eax, 0x2a
je 0x7fff25de2635
cmp eax, dword [0x7fff25fd1b00]
jne 0x7fff25d60d67
mov esi, r11d
jmp 0x7fff25d5f197
mov r8d, r14d
xor edx, edx
jmp 0x7fff25d5efd0
mov rax, qword [0x7fff25fd1b20]
lea r14, [0x7fff25fd1b20]
cmp byte [0x7fff25fd0c70], dil
mov qword [rbp - 0x80], rax
jne 0x7fff25d5efb6
test rax, rax
je 0x7fff25d60b6c
mov rax, qword [0x7fff25fd1b28]
test rax, rax
je 0x7fff25d60abf
mov rcx, qword [0x7fff25fd1b28]
xor r8d, r8d
xor edx, edx
call sym.KERNELBASE.dll_WaitForSingleObjectEx
test eax, eax
je 0x7fff25d60abf
mov r13d, 1
movzx eax, word [0x7fff25fd21b6]
test ax, ax
je 0x7fff25d5efb6
mov edx, r13d
mov rcx, r14
call fcn.7fff25d59598
jmp 0x7fff25d5efb6
cmp esi, 0x1001
jbe 0x7fff25d5fd11
add esi, 0xffffeffe
cmp esi, 0x12
ja case.0x7fff25d5f3d5.4100
lea rdx, [0x7fff25d40000]
mov eax, dword [rdx + rsi*4 + 0x21550]
add rax, rdx
jmp rax
mov edx, 0xa
mov dword [rsp + 0x50], edx
test r8d, r8d
je 0x7fff25d60bc3
test ecx, ecx
je 0x7fff25d60bc3
lea esi, [rdx - 6]
call fcn.7fff25d617c0
movzx ecx, word [rax + 0x4f0]
lea eax, [rcx - 1]
cmp ax, 0x17
ja 0x7fff25d60b87
mov edx, 0xffff
cmp cx, dx
je 0x7fff25d60b87
lea eax, [rcx - 0xd]
cmp ax, 8
jbe 0x7fff25d60b87
cmp ecx, 0x18
je 0x7fff25d60b87
mov edx, dword [rsp + 0x50]
mov r12d, ecx
jmp 0x7fff25d5f191
cmp edx, 0x10
je 0x7fff25d6029e
cmp esi, 2
jne 0x7fff25d5f453
movzx r12d, r13w
mov ecx, r12d
mov r9d, r11d
cmp r12d, 0xa
jge 0x7fff25d5f650
mov ecx, dword [rbp - 0x74]
test ecx, ecx
je 0x7fff25d5f26a
cmp ecx, r9d
jl 0x7fff25de269d
movsxd rax, r9d
mov word [rbx + rax*2 - 2], r15w
cmp r9d, 2
jne 0x7fff25d5f607
add r12w, 0x30
mov eax, r11d
mov word [rbx], r12w
jmp 0x7fff25d5f26d
mov dword [rsp + 0x50], 0xa
mov dword [rsp + 0x60], 2
test r8d, r8d
je 0x7fff25de20b1
mov eax, 0x20
mov r9d, 0x56
lea r8, [rbp - 0x50]
mov edx, eax
mov rcx, r15
call sym.KERNELBASE.dll_GetLocaleInfoHelper
test eax, eax
je 0x7fff25de20bb
lea rdi, [rbp - 0x50]
mov rcx, rdi
call fcn.7fff25d5b7f4
mov esi, dword [rsp + 0x60]
xor r15d, r15d
mov r10, qword [rsp + 0x58]
mov edx, 0xffff
cmp ax, dx
movzx r13d, ax
mov edx, dword [rsp + 0x50]
mov r11d, esi
lea r8d, [r15 + 3]
lea r9d, [r15 + 0x30]
jne 0x7fff25d5f1ab
jmp 0x7fff25de20c7
sub ecx, r11d
je 0x7fff25d6064d
cmp ecx, r11d
jne 0x7fff25d5efbf
xor ecx, ecx
call fcn.7fff25d5b270
mov r14, rax
jmp 0x7fff25d5efb6
mov eax, dword [r9 + 0xcc]
test eax, eax
jne 0x7fff25de2118
mov eax, dword [r9 + 0xc4]
test eax, eax
je 0x7fff25de2126
lea rcx, [rax + rsi*2]
mov eax, dword [r10 + rcx*2 - 0xde]
lea rdi, [r10 + rax*2]
mov esi, r11d
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0xd0]
test eax, eax
jne 0x7fff25de212e
mov eax, dword [r9 + 0xc8]
test eax, eax
je 0x7fff25de213c
lea rcx, [rax + rsi*2]
mov eax, dword [r10 + rcx*2 - 0x10e]
lea rdi, [r10 + rax*2]
mov esi, r11d
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0xc0]
test eax, eax
je 0x7fff25de20d8
lea rcx, [rax + rsi*2]
mov eax, dword [r10 + rcx*2 - 0xbe]
lea rdi, [r10 + rax*2]
mov esi, r11d
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0xbc]
test eax, eax
je 0x7fff25de20d0
lea rcx, [rax + rsi*2]
mov eax, dword [r10 + rcx*2 - 0xa2]
lea rdi, [r10 + rax*2]
mov esi, r11d
jmp 0x7fff25d5f18e
test r10d, r10d
jne 0x7fff25d5f1d2
mov rcx, rdi
call fcn.7fff25d5cc8c
mov r10d, eax
jmp 0x7fff25d5f1d2
lea eax, [r9 - 2]
movsxd r10, eax
test eax, eax
js 0x7fff25d5f26a
mov eax, 0xcccccccd
mul r12d
shr edx, 3
movzx ecx, dx
shl cx, 2
lea r8d, [rcx + rdx]
add r8w, r8w
sub r12w, r8w
add r12w, 0x30
mov word [rbx + r10*2], r12w
sub r10, 1
mov r12d, edx
jns 0x7fff25d5f616
jmp 0x7fff25d5f26a
mov eax, 0x66666667
inc r9d
imul ecx
mov ecx, edx
sar ecx, 2
mov eax, ecx
shr eax, 0x1f
add ecx, eax
cmp ecx, 0xa
jge 0x7fff25d5f650
jmp 0x7fff25d5f463
mov rdi, qword [r15 + 0x18]
xor r15d, r15d
mov esi, r15d
mov edx, r15d
mov r11d, 2
jmp 0x7fff25d5f19a
test dword [r15 + 0x44], 0x20000
jne 0x7fff25de12fd
mov eax, dword [r9 + 0x84]
mov esi, r11d
lea rdi, [r10 + rax*2]
mov r11d, 2
mov edx, r12d
jmp 0x7fff25d5f197
test dword [r15 + 0x44], 0x10000
mov edx, 0xa
mov dword [rsp + 0x50], edx
lea esi, [rdx - 8]
jne 0x7fff25de215f
cmp dword [r15 + 0x40], 3
jb 0x7fff25de2178
movzx r13d, word [r9 + 0xe2]
cmp r13w, 3
ja 0x7fff25de2178
xor r15d, r15d
mov r11d, esi
jmp 0x7fff25d5f19a
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d60fa0
test ecx, ecx
je 0x7fff25d60fa0
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor r8d, r8d
mov edx, 0x2be
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de1bed
mov esi, dword [rsp + 0x60]
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
test dword [r15 + 0x44], 0x20000
mov r8d, 3
jne 0x7fff25de12df
mov eax, dword [r9 + 0x80]
mov esi, r11d
mov edx, r12d
lea r11d, [r8 - 1]
xor r15d, r15d
lea rdi, [r10 + rax*2]
mov r10, qword [rsp + 0x58]
jmp 0x7fff25d5f1a5
test dword [r15 + 0x44], 0x40000
jne 0x7fff25de1475
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0x9c]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d610f8
test ecx, ecx
je 0x7fff25d610f8
mov esi, 0x56
lea r9, [rbp - 0x50]
xor edx, edx
mov rcx, r15
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rsi
lea r8d, [rsi + 0x6a]
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de161d
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d610eb
test ecx, ecx
je 0x7fff25d610eb
mov esi, 0x56
lea r9, [rbp - 0x50]
xor edx, edx
mov rcx, r15
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rsi
lea r8d, [rsi + 0x60]
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de160e
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov edx, dword [r9 + 0xc0]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov esi, r11d
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d60f93
test ecx, ecx
je 0x7fff25d60f93
xor eax, eax
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], eax
mov esi, 0x56
xor edx, edx
mov qword [rsp + 0x20], rsi
mov r8d, 0x29e
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de1b94
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de1b87
test ecx, ecx
je 0x7fff25de1b87
xor eax, eax
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], eax
mov esi, 0x56
xor edx, edx
mov qword [rsp + 0x20], rsi
mov r8d, 0x27e
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de1b7d
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d60bf3
test ecx, ecx
je 0x7fff25d60bf3
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x13a
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de246f
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d611b3
test ecx, ecx
je 0x7fff25d611b3
xor edx, edx
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], edx
mov esi, 0x56
mov r8d, 0x4bc
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25d611b3
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d611e2
test ecx, ecx
je 0x7fff25d611e2
xor edx, edx
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], edx
mov esi, 0x56
mov r8d, 0xf8
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de171d
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d611ef
test ecx, ecx
je 0x7fff25d611ef
xor edx, edx
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], edx
mov esi, 0x56
mov r8d, 0x102
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de172c
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d612aa
test ecx, ecx
je 0x7fff25d612aa
xor edx, edx
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], edx
mov esi, 0x56
mov r8d, 0x12e
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de17db
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de17ce
test ecx, ecx
je 0x7fff25de17ce
xor edx, edx
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], edx
mov esi, 0x56
mov r8d, 0x122
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de17c4
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov edx, dword [r9 + 0xbc]
jmp 0x7fff25d5f848
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25d5fb32
test ecx, ecx
je 0x7fff25d5fb32
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor r8d, r8d
mov edx, 0x4da
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
jne 0x7fff25de16d5
test dword [r15 + 0x44], 0x40000
jne 0x7fff25de16de
xor r15d, r15d
mov rax, qword [rsp + 0x78]
mov edx, r12d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0xa0]
lea rdi, [rcx + rax*2]
mov r11d, 2
jmp 0x7fff25d5f19a
test r8d, r8d
je 0x7fff25d61105
test ecx, ecx
je 0x7fff25d61105
mov esi, 0x56
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rcx, r15
lea r8d, [rsi + 0x74]
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de162c
mov r10, qword [rsp + 0x58]
lea r9d, [rsi - 0x26]
xor r15d, r15d
mov esi, 1
lea rdi, [rbp - 0x50]
mov edx, r12d
lea r8d, [rsi + 2]
lea r11d, [rsi + 1]
jmp 0x7fff25d5f1ab
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25de242f
test ecx, ecx
je 0x7fff25de242f
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b0
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de2423
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, esi
ja 0x7fff25de241c
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de242a
mov rdi, qword [r15 + 0x10]
mov esi, r12d
jmp 0x7fff25d5f18e
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d5fc9b
test ecx, ecx
je 0x7fff25d5fc9b
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b2
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de175b
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 9
ja 0x7fff25de1754
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
mov rax, qword [rsp + 0x78]
movzx r13d, word [rax + 0x10]
jmp 0x7fff25d5f197
mov dword [rsp + 0x60], r11d
test r8d, r8d
je 0x7fff25d611fc
test ecx, ecx
je 0x7fff25d611fc
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x10c
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de173b
mov r10, qword [rsp + 0x58]
lea r9d, [rsi - 0x26]
xor r15d, r15d
mov esi, dword [rsp + 0x60]
lea rdi, [rbp - 0x50]
mov r8d, 3
mov edx, r12d
lea r11d, [r8 - 1]
jmp 0x7fff25d5f1ab
jne 0x7fff25de226f
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de1219
mov eax, dword [r9 + 0x88]
mov esi, r11d
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de1c35
test ecx, ecx
je 0x7fff25de1c35
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x360
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de2514
mov esi, dword [rsp + 0x60]
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de2288
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0x90]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f18e
xor edx, edx
test r8d, r8d
je 0x7fff25de199f
test ecx, ecx
je 0x7fff25de199f
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
mov r8d, 0x13a
mov rcx, r15
mov qword [rsp + 0x20], rsi
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de1995
lea rcx, [rbp - 0x50]
movzx r10d, word [rcx]
lea rdi, [0x7fff25f08a60]
add rcx, 2
test r10d, r10d
je 0x7fff25de19ef
movabs r9, 0x82100000001
movzx edx, word [rcx]
lea eax, [rdx - 0x48]
cmp ax, 0x2b
ja 0x7fff25de19b6
movzx eax, ax
bt r9, rax
jae 0x7fff25de19b6
add rcx, 2
dec r10d
movzx r13d, dx
test r10d, r10d
jle 0x7fff25de19ef
cmp word [rcx], dx
je 0x7fff25de19f7
test r10d, r10d
jle 0x7fff25de19ef
mov rdx, rcx
test rcx, rcx
je 0x7fff25de19ef
movzx r8d, word [rcx]
lea eax, [r8 - 0x48]
cmp ax, 0x2b
ja 0x7fff25d5fef9
movzx eax, ax
bt r9, rax
jae 0x7fff25d5fef9
test r10d, r10d
jle 0x7fff25de19ef
lea r10, [rbp - 0x50]
cmp rdx, rcx
jae 0x7fff25d5fec1
mov r9d, 0x27
mov r8d, r12d
xor ebx, ebx
lea r11d, [r9 - 0x26]
movzx eax, word [rdx]
cmp ax, r9w
je 0x7fff25de1a35
mov word [r10], ax
add r10, 2
add rdx, 2
cmp rdx, rcx
jb 0x7fff25d5fe9f
mov rbx, qword [rbp - 0x60]
xor r15d, r15d
lea rax, [rbp - 0x50]
mov word [r10], r15w
lea rdi, [rbp - 0x50]
sub r10, rax
sar r10, 1
mov r8d, 3
mov esi, r15d
mov edx, r12d
lea r9d, [r8 + 0x2d]
lea r11d, [r8 - 1]
cmp word [rdi], r12w
jne 0x7fff25d5f1ab
jmp 0x7fff25de1a6b
cmp r8w, 0x27
je 0x7fff25de1a09
add rcx, 2
dec r10d
test r10d, r10d
jg 0x7fff25d5fe63
jmp 0x7fff25de19ef
movzx eax, word [r9 + 0x70]
mov r15d, 0xfde9
mov dword [rsp + 0x50], 0xa
mov esi, 2
movzx r13d, ax
cmp ax, r15w
je 0x7fff25de15c1
mov ecx, eax
call sym.KERNELBASE.dll_IsValidCodePage
mov edx, dword [rsp + 0x50]
mov r8d, 3
mov r10, qword [rsp + 0x58]
mov r11d, esi
lea r9d, [r8 + 0x2d]
test eax, eax
je 0x7fff25de15df
xor r15d, r15d
jmp 0x7fff25d5f1ab
mov dword [rsp + 0x50], 0xa
mov esi, 2
test r8d, r8d
je 0x7fff25de189c
test ecx, ecx
je 0x7fff25de189c
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b4
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de1897
movzx ecx, word [rsp + 0x64]
mov edx, 0xffff
cmp ecx, 3
ja 0x7fff25de1890
mov eax, ecx
cmp ax, dx
je 0x7fff25de1897
mov edx, 0xfffd
xor r15d, r15d
mov r11d, 1
dec cx
test dx, cx
movzx r13d, r15w
mov edx, dword [rsp + 0x50]
cmovne r13w, r11w
mov r11d, esi
jmp 0x7fff25d5f19a
mov dword [rsp + 0x50], 0xa
mov esi, 2
test r8d, r8d
je 0x7fff25de17f6
test ecx, ecx
je 0x7fff25de17f6
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b6
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de17f1
movzx eax, word [rsp + 0x64]
mov edx, 0xffff
cmp eax, 0xf
ja 0x7fff25de17ea
mov ecx, eax
cmp cx, dx
je 0x7fff25de17f1
movzx ecx, ax
test ecx, ecx
jne 0x7fff25de1800
mov edx, dword [rsp + 0x50]
mov r8d, 3
mov r10, qword [rsp + 0x58]
movzx r13d, r8w
xor r15d, r15d
mov r11d, esi
jmp 0x7fff25d5f1a5
mov dword [rsp + 0x50], 0xa
mov esi, 2
test r8d, r8d
je 0x7fff25de1861
test ecx, ecx
je 0x7fff25de1861
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b6
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de185c
movzx eax, word [rsp + 0x64]
mov edx, 0xffff
cmp eax, 0xf
ja 0x7fff25de1855
mov ecx, eax
cmp cx, dx
je 0x7fff25de185c
movzx ecx, ax
test ecx, ecx
jne 0x7fff25de186b
mov edx, dword [rsp + 0x50]
xor r15d, r15d
movzx r13d, r15w
mov r11d, esi
jmp 0x7fff25d5f19a
mov dword [rsp + 0x50], 0xa
mov esi, 2
test r8d, r8d
je 0x7fff25de18b2
test ecx, ecx
je 0x7fff25de18b2
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b4
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de18ad
movzx ecx, word [rsp + 0x64]
mov edx, 0xffff
cmp ecx, 3
ja 0x7fff25de18a6
mov eax, ecx
cmp ax, dx
je 0x7fff25de18ad
mov edx, dword [rsp + 0x50]
xor r15d, r15d
mov r11d, 1
cmp cx, si
movzx r13d, r15w
cmovae r13w, r11w
mov r11d, esi
jmp 0x7fff25d5f19a
mov dword [rsp + 0x50], 0xa
mov esi, 2
test r8d, r8d
je 0x7fff25de18c8
test ecx, ecx
je 0x7fff25de18c8
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b6
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de18c3
movzx eax, word [rsp + 0x64]
mov edx, 0xffff
cmp eax, 0xf
ja 0x7fff25de18bc
mov ecx, eax
cmp cx, dx
je 0x7fff25de18c3
movzx ecx, ax
cmp ecx, 4
jae 0x7fff25de18d2
mov eax, 1
xor r15d, r15d
mov edx, dword [rsp + 0x50]
movzx r13d, ax
mov r11d, esi
jmp 0x7fff25d5f19a
mov dword [rsp + 0x50], 0xa
mov esi, 2
test r8d, r8d
je 0x7fff25de1902
test ecx, ecx
je 0x7fff25de1902
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b6
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de18fd
movzx eax, word [rsp + 0x64]
mov edx, 0xffff
cmp eax, 0xf
ja 0x7fff25de18f6
mov ecx, eax
cmp cx, dx
je 0x7fff25de18fd
mov edx, dword [rsp + 0x50]
cmp ax, 8
mov r13d, 1
mov r15, rdi
cmovb r13w, di
mov r11d, esi
jmp 0x7fff25d5f19a
mov r13d, dword [r15 + 0x44]
shr r13d, 4
and r13w, 1
mov edx, 0xa
mov r11d, 2
jmp 0x7fff25d5f320
mov rax, qword [r15 + 0x60]
mov r9d, 0xc00
mov r8d, 0xfbff
mov edx, 0x10
movzx r13d, word [rax]
movzx eax, r13w
sub ax, r9w
test r8w, ax
jne 0x7fff25d60267
jmp 0x7fff25de116f
mov ecx, dword [rbp - 0x74]
test ecx, ecx
je 0x7fff25d602e6
cmp ecx, 5
jl 0x7fff25de269d
mov word [rbx + 8], r15w
mov edx, 0x57
add rbx, 6
movzx ecx, r13w
lea rbx, [rbx - 2]
and cx, 0xf
movzx eax, dx
cmp cx, 0xa
cmovb ax, r9w
shr r13w, 4
add ax, cx
sub r8d, 1
mov word [rbx + 2], ax
jns 0x7fff25d602bc
mov eax, 5
jmp 0x7fff25d5f26d
test r8d, r8d
je 0x7fff25de1a73
test ecx, ecx
je 0x7fff25de1a73
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x13a
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de1a7a
lea rdi, [rbp - 0x50]
mov edx, 0xa
lea rcx, [rbp - 0x50]
lea r13d, [rdx - 9]
lea r11d, [rdx - 8]
cmp rdi, rcx
jne 0x7fff25de1a9b
mov r10d, esi
movzx eax, word [rdi]
test ax, ax
je 0x7fff25d60d23
cmp ax, 0x68
je 0x7fff25d60383
cmp ax, 0x48
je 0x7fff25d60d23
cmp ax, 0x27
je 0x7fff25de1ab1
add rdi, r11
dec r10d
test r10d, r10d
jg 0x7fff25d6034d
jmp 0x7fff25d60d23
xor r15d, r15d
mov esi, r11d
movzx r13d, r15w
jmp 0x7fff25d5f19f
mov dword [rsp + 0x50], 0xa
mov dword [rsp + 0x60], 2
test r8d, r8d
je 0x7fff25de1d5e
mov edx, 0x1f
mov r9d, 0x56
lea r8, [rbp - 0x50]
mov rcx, r15
call sym.KERNELBASE.dll_GetLocaleInfoHelper
test eax, eax
je 0x7fff25de1d68
lea rdi, [rbp - 0x50]
mov rcx, rdi
call fcn.7fff25d5b7f4
mov esi, dword [rsp + 0x60]
xor r15d, r15d
mov r10, qword [rsp + 0x58]
mov edx, 0xffff
cmp ax, dx
movzx r13d, ax
mov edx, dword [rsp + 0x50]
mov r11d, esi
lea r8d, [r15 + 3]
lea r9d, [r15 + 0x30]
jne 0x7fff25d5f1ab
jmp 0x7fff25de1d74
test r8d, r8d
je 0x7fff25de1c7a
mov edx, 0x1f
mov r9d, 0x56
lea r8, [rbp - 0x50]
mov rcx, r15
call sym.KERNELBASE.dll_GetLocaleInfoHelper
mov r10d, eax
test eax, eax
je 0x7fff25de1c84
lea rdx, [rbp - 0x50]
movzx eax, word [0x7fff25f08a60]
lea rdi, [0x7fff25f08a60]
movzx ecx, ax
test r10d, r10d
jle 0x7fff25de1cd6
movabs r11, 0x100000800001
movzx r8d, word [rdx]
lea ecx, [r8 - 0x4d]
cmp cx, 0x2c
ja 0x7fff25de1c96
movzx ecx, cx
bt r11, rcx
jae 0x7fff25de1c96
add rdx, 2
dec r10d
movzx r13d, r8w
test r10d, r10d
jle 0x7fff25d60494
cmp word [rdx], r8w
je 0x7fff25de1cde
movzx ecx, ax
test r10d, r10d
jle 0x7fff25de1cd6
mov r8, rdx
test rdx, rdx
je 0x7fff25de1cd6
movzx r9d, word [rdx]
lea ecx, [r9 - 0x4d]
cmp cx, 0x2c
ja 0x7fff25d60562
movzx ecx, cx
bt r11, rcx
jae 0x7fff25d60562
movzx ecx, ax
test r10d, r10d
jle 0x7fff25de1cd6
mov rax, rdx
sub rax, r8
and rax, 0xfffffffffffffffe
cmp rax, 0x18
jg 0x7fff25de1cd6
lea rcx, [rbp - 0x50]
cmp r8, rdx
jae 0x7fff25d60525
mov r9d, 0x27
mov r10d, r12d
xor ebx, ebx
lea r11d, [r9 - 0x26]
movzx eax, word [r8]
cmp ax, r9w
je 0x7fff25de1d1c
mov word [rcx], ax
add rcx, 2
add r8, 2
cmp r8, rdx
jb 0x7fff25d60503
mov rbx, qword [rbp - 0x60]
xor r15d, r15d
lea rax, [rbp - 0x50]
mov word [rcx], r15w
lea rdi, [rbp - 0x50]
sub rcx, rax
mov eax, 0x5e74
sar rcx, 1
mov r10d, ecx
movzx ecx, word [rbp - 0x50]
cmp cx, ax
je 0x7fff25de1d52
mov eax, 0xb144
cmp cx, ax
jne 0x7fff25d5fed6
jmp 0x7fff25de1d52
cmp r9w, 0x27
je 0x7fff25de1cf0
add rdx, 2
dec r10d
test r10d, r10d
jg 0x7fff25d604ac
jmp 0x7fff25de1cd3
mov dword [rsp + 0x50], 0xa
test r8d, r8d
je 0x7fff25de1d87
test ecx, ecx
je 0x7fff25de1d87
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor r8d, r8d
mov edx, 0x2be
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de1d7d
lea rdi, [rbp - 0x50]
movzx eax, word [rdi]
mov r11d, 2
mov esi, r11d
mov r13d, 1
add rdi, rsi
mov r10d, eax
test eax, eax
je 0x7fff25de1dc3
nop word [rax + rax]
movzx eax, word [rdi]
cmp ax, 0x79
je 0x7fff25d60613
cmp ax, 0x27
je 0x7fff25de1d9e
add rdi, rsi
dec r10d
test r10d, r10d
jg 0x7fff25d605f0
jmp 0x7fff25de1dc3
xor r15d, r15d
add rdi, rsi
dec r10d
mov eax, r15d
test r10d, r10d
jle 0x7fff25de1dcf
cmp word [rdi], 0x79
jne 0x7fff25d6063b
inc eax
add rdi, rsi
dec r10d
test r10d, r10d
jg 0x7fff25d60628
cmp eax, r13d
jle 0x7fff25de1dcf
mov edx, dword [rsp + 0x50]
jmp 0x7fff25d5f19f
mov ecx, r11d
call fcn.7fff25d5b270
mov r14, rax
mov rax, qword gs:[0x30]
mov dword [rax + 0x179c], 2
jmp 0x7fff25d5efb6
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de167f
test ecx, ecx
je 0x7fff25de167f
xor edx, edx
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], edx
mov esi, 0x56
mov r8d, 0xe0
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de1675
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d6119f
test ecx, ecx
je 0x7fff25d6119f
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4aa
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de164c
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 9
ja 0x7fff25de1645
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de1653
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d61296
test ecx, ecx
je 0x7fff25d61296
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b4
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de176e
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 3
ja 0x7fff25de1767
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de1775
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d612a0
test ecx, ecx
je 0x7fff25d612a0
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b6
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de1786
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 0xf
ja 0x7fff25de177f
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de178d
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d612b7
test ecx, ecx
je 0x7fff25d612b7
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4ae
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de240b
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 4
ja 0x7fff25de2404
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de2412
test r14d, r14d
jne case.0x7fff25d5f3d5.4100
mov ecx, dword [rbp - 0x74]
test ecx, ecx
je 0x7fff25d608b2
cmp ecx, 0x10
jl 0x7fff25de269d
mov eax, dword [r9 + 0xac]
test eax, eax
je 0x7fff25de2144
lea rdx, [r10 + rax*2]
add rdx, 2
mov r8d, 0x20
mov rcx, rbx
call sub.ntdll.dll_memmove
mov eax, 0x10
jmp 0x7fff25d5f26d
mov dword [rsp + 0x50], 0xa
mov r11d, 2
mov esi, r11d
test r8d, r8d
je 0x7fff25de257e
test ecx, ecx
je 0x7fff25de257e
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4b8
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de2573
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 6
ja 0x7fff25de2565
mov eax, r13d
mov r11d, esi
cmp ax, dx
je 0x7fff25de256c
mov edx, dword [rsp + 0x50]
jmp 0x7fff25d5f197
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25de25ca
test ecx, ecx
je 0x7fff25de25ca
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4ba
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de25be
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, esi
ja 0x7fff25de25b7
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de25c5
mov eax, dword [r9 + 0xf4]
mov esi, r11d
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
lea rdi, [0x7fff25f07d7c]
xor r15d, r15d
mov esi, r15d
mov edx, r15d
jmp 0x7fff25d5fb59
mov eax, dword [r9 + 0xf8]
mov esi, r11d
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0xfc]
mov esi, r11d
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0x100]
mov esi, r11d
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
movzx r13d, word [r9 + 0xdc]
mov edx, 0xa
lea r11d, [rdx - 8]
jmp 0x7fff25d5f320
movzx r13d, word [r9 + 0xde]
mov edx, 0xa
lea r11d, [rdx - 8]
jmp 0x7fff25d5f320
xor edx, edx
test dword [r15 + 0x44], 0x10000
movzx r13d, dx
mov edx, 0xa
cmovne r13w, r11w
lea r11d, [rdx - 8]
jmp 0x7fff25d5f320
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d611a9
test ecx, ecx
je 0x7fff25d611a9
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4ac
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de1664
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 1
ja 0x7fff25de165d
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de166b
call fcn.7fff25db22a4
mov r11d, 1
jmp 0x7fff25d5ef7c
mov r13d, 1
lea rcx, [0x7fff25fd2830]
mov word [0x7fff25fd21b6], r13w
call qword [sym.imp.ntdll.dll_RtlAcquireSRWLockExclusive]
nop dword [rax + rax]
mov rax, qword [0x7fff25fd1b28]
test rax, rax
jne 0x7fff25d60b02
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.KERNELBASE.dll_CreateEventW
mov qword [0x7fff25fd1b28], rax
mov rax, qword [0x7fff25fd1b28]
test rax, rax
je 0x7fff25d60b54
mov rdx, qword [0x7fff25fd1b28]
xor eax, eax
mov rcx, qword [rbp - 0x80]
xor r9d, r9d
mov byte [rsp + 0x48], r13b
xor r8d, r8d
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], rax
lea rax, [0x7fff25fd1af0]
mov byte [rsp + 0x30], r13b
mov dword [rsp + 0x28], 0x10000005
mov qword [rsp + 0x20], rax
call qword [sym.imp.ntdll.dll_NtNotifyChangeKey]
nop dword [rax + rax]
lea rcx, [0x7fff25fd2830]
call qword [sym.imp.ntdll.dll_RtlReleaseSRWLockExclusive]
nop dword [rax + rax]
jmp 0x7fff25d5f389
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.7fff25d59138
cmp qword [rbp - 0x80], rdi
jne 0x7fff25d5f35a
jmp 0x7fff25d5f383
mov rax, qword [r15 + 0x20]
mov r8d, 3
mov edx, dword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
mov ecx, dword [rax + 0x7c]
lea r9d, [r8 + 0x2d]
mov rax, qword [r15 + 0x28]
lea r11d, [r8 - 1]
inc ecx
xor r15d, r15d
movzx ecx, word [rax + rcx*2]
test cx, cx
je 0x7fff25de252a
mov r12d, ecx
jmp 0x7fff25d5f1ab
mov eax, dword [r9 + 0x7c]
mov r11d, 2
inc eax
movzx r13d, word [r10 + rax*2]
jmp 0x7fff25d5f320
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de1337
mov eax, dword [r9 + 0x12c]
jmp 0x7fff25d5f69d
mov edx, dword [r9 + 0x58]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
test r8d, r8d
je 0x7fff25de1aed
test ecx, ecx
je 0x7fff25de1aed
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x13a
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de1af4
lea rdi, [rbp - 0x50]
mov edx, 0xa
lea rcx, [rbp - 0x50]
lea r11d, [rdx - 8]
cmp rdi, rcx
jne 0x7fff25de1b15
mov r10d, esi
mov r8d, 0xffdf
movzx ecx, word [rdi]
test cx, cx
je 0x7fff25d60d23
lea eax, [rcx - 0x48]
test r8w, ax
je 0x7fff25d60d2e
cmp cx, 0x27
je 0x7fff25de1b2b
add rdi, r11
dec r10d
test r10d, r10d
jg 0x7fff25d60c6c
jmp 0x7fff25de1b67
test r8d, r8d
je 0x7fff25de247e
test ecx, ecx
je 0x7fff25de247e
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x13a
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de2485
lea rdi, [rbp - 0x50]
mov edx, 0xa
lea rcx, [rbp - 0x50]
lea r11d, [rdx - 8]
cmp rdi, rcx
jne 0x7fff25de24a6
mov r10d, esi
movabs r9, 0x82100000001
movzx ecx, word [rdi]
test cx, cx
je 0x7fff25d60d23
cmp cx, 0x74
je 0x7fff25de2503
lea eax, [rcx - 0x48]
cmp ax, 0x2b
ja 0x7fff25d60d4d
bt r9, rax
jae 0x7fff25d60d4d
mov esi, r11d
xor r15d, r15d
jmp 0x7fff25d5f19f
mov r8d, 3
xor r15d, r15d
mov esi, r11d
lea r9d, [r8 + 0x2d]
cmp word [rdi + 2], cx
jne 0x7fff25d5f1ab
jmp 0x7fff25de1b72
cmp cx, 0x27
je 0x7fff25de24bc
add rdi, r11
dec r10d
test r10d, r10d
jg 0x7fff25d60d02
jmp 0x7fff25de24f8
cmp esi, dword [0x7fff25fd1b04]
je 0x7fff25d5f320
add eax, 0xffff0218
cmp eax, 1
jbe 0x7fff25d5f320
mov ecx, esi
call fcn.7fff25d83eac
cmp eax, 1
jne 0x7fff25d60e61
mov esi, dword [rsp + 0x60]
mov r11d, esi
mov edx, dword [rsp + 0x50]
jmp 0x7fff25d5f197
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25de139e
test ecx, ecx
je 0x7fff25de139e
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4a4
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de1397
movzx r13d, word [rsp + 0x64]
mov eax, 0x3e7
mov edx, 0xffff
cmp r13w, ax
ja 0x7fff25de1390
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de139e
mov eax, dword [r9 + 0x114]
mov esi, r11d
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
call fcn.7fff25dcb9e8
xor edx, edx
mov r11d, esi
movzx r13d, dx
test eax, eax
mov edx, dword [rsp + 0x50]
cmovne r13w, r15w
jmp 0x7fff25d5f197
mov word [0x7fff25fd21b6], r11w
jmp 0x7fff25d5ef9f
mov edx, r11d
mov rcx, r14
call fcn.7fff25d59598
jmp 0x7fff25d5efb6
mov r8d, 0x40
lea rdx, [rbp + 0x60]
mov ecx, esi
call sym.KERNELBASE.dll_GetCPFileNameFromRegistry
test eax, eax
je 0x7fff25de262b
mov edx, 0x200
lea rcx, [rbp + 0xe0]
call sym.KERNELBASE.dll_GetSystemDirectoryW
test eax, eax
je 0x7fff25de262b
mov ecx, 0x200
lea rax, [rbp + 0xe0]
nop
cmp word [rax], di
je 0x7fff25d60eb4
add rax, 2
sub rcx, 1
jne 0x7fff25d60ea0
jmp 0x7fff25de262b
test rcx, rcx
je 0x7fff25de262b
xor r8d, r8d
lea rdx, [rbp + 0xe0]
mov eax, 0x200
lea r9, [0x7fff25f08a88]
sub rax, rcx
mov r10d, r8d
lea rdx, [rdx + rax*2]
mov eax, 0x7ffffffe
sub r9, rdx
test rax, rax
je 0x7fff25d60f3a
movzx r8d, word [r9 + rdx]
test r8w, r8w
je 0x7fff25d60f3a
mov word [rdx], r8w
dec rax
add rdx, 2
sub rcx, 1
jne 0x7fff25d60ee5
jmp 0x7fff25de261c
mov edx, dword [r9 + 0xcc]
test edx, edx
jne 0x7fff25de25d4
mov edx, dword [r9 + 0xc4]
mov r8d, 0xc
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov esi, r11d
jmp 0x7fff25d5f18e
test rcx, rcx
je 0x7fff25de261c
xor eax, eax
mov word [rdx], ax
test r10d, r10d
js 0x7fff25de262b
lea r8, [rbp + 0x60]
mov edx, 0x200
lea rcx, [rbp + 0xe0]
call fcn.7fff25d84900
test eax, eax
js 0x7fff25de262b
lea rcx, [rbp + 0xe0]
call sym.KERNELBASE.dll_GetFileAttributesW
mov edx, dword [rsp + 0x50]
cmp eax, 0xffffffff
je 0x7fff25de262f
mov esi, dword [rsp + 0x60]
mov r11d, esi
jmp 0x7fff25d5f197
mov eax, dword [r9 + 0x50]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov edx, dword [r9 + 0x5c]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de1214
mov eax, dword [r9 + 0x8c]
jmp 0x7fff25d5f69d
cmp word [0x7fff25fd2478], di
je 0x7fff25d610da
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de125c
movzx ecx, word [r15 + 0x48]
mov eax, 0x1000
cmp cx, ax
je 0x7fff25de127a
xor r9d, r9d
lea rdx, [rbp - 0x50]
lea r8d, [r9 + 0x56]
call sym.KERNELBASE.dll_GetStringTableEntry
mov r10d, eax
mov qword [rsp + 0x58], r10
test eax, eax
je 0x7fff25de127a
xor r15d, r15d
lea rdi, [rbp - 0x50]
mov esi, r12d
mov edx, r12d
lea r11d, [r15 + 2]
jmp 0x7fff25d5f19f
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de15f5
test ecx, ecx
je 0x7fff25de15f5
mov esi, 0x56
lea r9, [rbp - 0x50]
xor edx, edx
mov rcx, r15
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rsi
lea r8d, [rsi + 0x56]
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de15eb
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
xor eax, eax
lea rcx, [rbp - 0x70]
mov edx, 0x20019
mov qword [rbp - 0x70], rax
call fcn.7fff25d72aac
test eax, eax
je 0x7fff25de201d
mov rdx, qword [rbp - 0x70]
lea rcx, [rdi + 0x18]
mov r8d, 1
call fcn.7fff25d591d8
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x7fff25d5f0a8
call qword [sym.imp.ntdll.dll_NtClose]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x70], r11
jmp 0x7fff25d5f0ab
call sym.KERNELBASE.dll_GetSystemDefaultUILanguage
mov word [0x7fff25fd2478], ax
jmp 0x7fff25d60fe1
mov eax, dword [r9 + 0x30]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0x34]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0x24]
movzx ecx, word [r10 + rax*2]
lea r9, [r10 + rax*2]
cmp ecx, 0x27
jae 0x7fff25de269d
xor r15d, r15d
mov r10d, r15d
mov qword [rsp + 0x58], r10
lea edx, [r15 + 0x3b]
cmp r15w, cx
jae 0x7fff25d6116f
mov r11d, r10d
movsxd rax, r11d
movzx r8d, word [r9 + rax*2 + 2]
test r8w, r8w
je 0x7fff25de163b
movsxd rax, r10d
add r8w, 0x30
inc r11d
add r10d, 2
mov qword [rsp + 0x58], r11
mov word [rbp + rax*2 - 0x4e], r8w
mov word [rbp + rax*2 - 0x50], dx
cmp r11d, ecx
jl 0x7fff25d61133
mov r10, qword [rsp + 0x58]
mov r9d, 0x30
cmp r10d, ecx
jne 0x7fff25d6118c
lea eax, [r10 + r10]
inc r10d
movsxd rcx, eax
mov dword [rbp + rcx*2 - 0x50], 0x30003b
movzx eax, r10w
add ax, ax
dec ax
mov word [rbp - 0x50], ax
jmp 0x7fff25d5fbaa
movzx r13d, word [r9 + 0xc]
jmp 0x7fff25d5f197
movzx r13d, word [r9 + 0x16]
jmp 0x7fff25d5f197
test dword [r15 + 0x44], 0x40000
jne 0x7fff25de1696
xor r15d, r15d
mov rax, qword [rsp + 0x78]
mov edx, r12d
mov rcx, qword [rbp - 0x80]
mov r11d, 2
mov eax, dword [rax + 0x38]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f19a
mov eax, dword [r9 + 0x3c]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0x40]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov eax, dword [r9 + 0x28]
movzx ecx, word [r10 + rax*2]
lea r9, [r10 + rax*2]
cmp ecx, 0x27
jae 0x7fff25de269d
xor r15d, r15d
mov r10d, r15d
mov qword [rsp + 0x58], r10
lea edx, [r15 + 0x3b]
cmp r15w, cx
jae 0x7fff25d61266
mov r11d, r10d
movsxd rax, r11d
movzx r8d, word [r9 + rax*2 + 2]
test r8w, r8w
je 0x7fff25de174a
movsxd rax, r10d
add r8w, 0x30
inc r11d
add r10d, 2
mov qword [rsp + 0x58], r11
mov word [rbp + rax*2 - 0x4e], r8w
mov word [rbp + rax*2 - 0x50], dx
cmp r11d, ecx
jl 0x7fff25d6122a
mov r10, qword [rsp + 0x58]
mov r9d, 0x30
cmp r10d, ecx
jne 0x7fff25d61283
lea eax, [r10 + r10]
inc r10d
movsxd rcx, eax
mov dword [rbp + rcx*2 - 0x50], 0x30003b
movzx eax, r10w
add ax, ax
dec ax
mov word [rbp - 0x50], ax
jmp 0x7fff25d5fcf7
movzx r13d, word [r9 + 0x12]
jmp 0x7fff25d5f197
movzx r13d, word [r9 + 0x14]
jmp 0x7fff25d5f197
mov eax, dword [r9 + 0x48]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
movzx r13d, word [r9 + 0xe]
jmp 0x7fff25d5f197
mov esi, edx
lea rdi, str.dflt
jmp 0x7fff25d5f124
test rcx, rcx
je 0x7fff25d5f261
jmp 0x7fff25d5f25d
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25d61339
test ecx, ecx
je 0x7fff25d61339
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4a6
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de1602
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
cmp r13d, 1
ja 0x7fff25d61348
mov eax, r13d
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
mov rax, qword [rsp + 0x78]
movzx r13d, word [rax + 0x20]
jmp 0x7fff25d5f197
mov eax, edx
jmp 0x7fff25d61329
mov dword [rbp - 0x78], r11d
jmp 0x7fff25d5f007
mov r13d, r9d
test ecx, ecx
jne 0x7fff25d60267
mov r13d, 0x1000
jmp 0x7fff25d60267
mov rax, qword [r15 + 0x60]
xor r15d, r15d
mov esi, r15d
mov edx, r15d
mov rdi, qword [rax + 0x18]
lea r11d, [r15 + 2]
jmp 0x7fff25d5f19a
cmp word [0x7fff25fd2478], di
jne 0x7fff25de11ba
call sym.KERNELBASE.dll_GetSystemDefaultUILanguage
mov word [0x7fff25fd2478], ax
mov r11d, 1
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de1214
movzx ecx, word [r15 + 0x48]
mov eax, 0x1000
cmp cx, ax
je 0x7fff25de11f5
mov r9d, r11d
lea rdx, [rbp - 0x50]
mov r8d, 0x56
call sym.KERNELBASE.dll_GetStringTableEntry
mov r10d, eax
mov qword [rsp + 0x58], r10
test eax, eax
jne 0x7fff25d61022
call sym.KERNELBASE.dll_GetUserDefaultUILanguage
mov ecx, 0x3ff
and ax, cx
mov rcx, qword [r15 + 0x20]
cmp ax, 9
je 0x7fff25de123a
mov eax, dword [rcx + 0x8c]
jmp 0x7fff25de1248
mov r9d, r11d
jmp 0x7fff25de121c
xor r9d, r9d
mov r8, r15
lea rcx, [rbp - 0x50]
call fcn.7fff25e0eef4
jmp 0x7fff25de1231
mov dword [rbp - 0x48], 0x3b
lea rdi, [rbp - 0x50]
jmp 0x7fff25d609ae
mov eax, dword [rcx + 0x88]
jmp 0x7fff25de1248
mov eax, dword [rcx + 0x90]
mov ecx, eax
mov esi, 1
mov rax, qword [r15 + 0x28]
lea rdi, [rax + rcx*2]
jmp 0x7fff25d5f18e
mov r9d, 1
jmp 0x7fff25de1267
mov r9d, r11d
mov r8, r15
lea rcx, [rbp - 0x50]
mov edx, 0x56
call fcn.7fff25e0f0d8
jmp 0x7fff25de1231
mov rcx, r15
call sym.KERNELBASE.dll_GetFallbackDisplayName
mov esi, 1
mov rdi, rax
mov edx, r12d
lea r11d, [rsi + 1]
jmp 0x7fff25d5f197
test dword [r15 + 0x44], 0x10000
je 0x7fff25de12a5
xor r9d, r9d
jmp 0x7fff25de1267
mov eax, dword [r9 + 0xec]
jmp 0x7fff25d5f69d
test dword [r15 + 0x44], 0x10000
jne 0x7fff25de1264
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov edx, r12d
mov r11d, 2
mov eax, dword [rax + 0xf0]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f197
lea rdi, [0x7fff25f9cd10]
jmp 0x7fff25de12ef
lea rdi, str.dddd__MMMM_dd
xor r15d, r15d
mov esi, r15d
mov edx, r15d
jmp 0x7fff25d5f12a
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25e0f6d4
jmp 0x7fff25de1231
test dword [r15 + 0x44], 0x20000
je 0x7fff25de132b
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25e0f6d4
jmp 0x7fff25de1231
mov eax, dword [r9 + 0xb0]
jmp 0x7fff25d5f69d
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25e0f880
test eax, eax
jne 0x7fff25de122a
mov r9, qword [rsp + 0x68]
lea r11d, [rax + 1]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d60be7
mov eax, dword [r9 + 0x128]
jmp 0x7fff25d5f69d
cmp dword [r15 + 0x40], 7
mov r8d, 3
jae 0x7fff25de1384
lea rdi, str.k0_Windows_US
jmp 0x7fff25de12ef
mov eax, dword [r9 + 0x144]
jmp 0x7fff25d5f11d
mov eax, edx
jmp 0x7fff25d60dfe
mov edx, dword [rsp + 0x50]
mov r11d, esi
test dword [r15 + 0x44], 0x40000
je 0x7fff25de13eb
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25db97ec
test eax, eax
je 0x7fff25de13e4
lea rcx, [rbp - 0x50]
call fcn.7fff25e1b910
test rax, rax
je case.0x7fff25de181f.4
movzx r13d, word [rax + 0x4e]
test r13w, r13w
jne 0x7fff25de13d8
mov r13d, 1
mov edx, dword [rsp + 0x50]
mov r11d, esi
jmp 0x7fff25d5f197
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov rax, qword [rsp + 0x78]
movzx r13d, word [rax + 0x1e]
jmp 0x7fff25d5f197
test dword [r15 + 0x44], 0x10000
je 0x7fff25de1418
mov r9d, r11d
lea rcx, [rbp - 0x50]
mov r8, r15
call fcn.7fff25e0f304
jmp 0x7fff25de1231
mov eax, 0x1000
cmp word [r15 + 0x48], ax
je 0x7fff25de144f
mov rax, qword [r15 + 0x60]
lea rdx, [rbp - 0x50]
mov r9d, 2
movzx ecx, word [rax + 0x48]
lea r8d, [r9 + 0x54]
call sym.KERNELBASE.dll_GetStringTableEntry
mov r10d, eax
mov qword [rsp + 0x58], r10
test eax, eax
jne 0x7fff25d61022
call sym.KERNELBASE.dll_GetUserDefaultUILanguage
mov ecx, 0x3ff
and ax, cx
mov rcx, qword [r15 + 0x30]
cmp ax, 9
je 0x7fff25de1242
mov eax, dword [rcx + 0x94]
jmp 0x7fff25de1248
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25db97ec
jmp 0x7fff25de1231
test dword [r15 + 0x44], 0x40000
je 0x7fff25de14b3
lea rcx, [rbp - 0x50]
call fcn.7fff25e1b910
lea rdi, [rax + 0x44]
test rax, rax
jne 0x7fff25d609ae
lea rdi, [0x7fff25f9cd10]
jmp 0x7fff25d609ae
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0xb4]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f18e
test dword [r15 + 0x44], 0x10000
je 0x7fff25de14ec
mov r9d, r11d
lea rcx, [rbp - 0x50]
mov r8, r15
call fcn.7fff25e0f304
jmp 0x7fff25de1231
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0x94]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f18e
test dword [r15 + 0x44], 0x40000
mov edx, 0xa
mov dword [rsp + 0x50], edx
lea esi, [rdx - 6]
je 0x7fff25de156b
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25db97ec
test eax, eax
je 0x7fff25de1567
lea rcx, [rbp - 0x50]
call fcn.7fff25e1b910
mov edx, dword [rsp + 0x50]
lea r8d, [rsi - 1]
mov r10, qword [rsp + 0x58]
lea r9d, [rsi + 0x2c]
xor r15d, r15d
lea r11d, [rsi - 2]
test rax, rax
jne 0x7fff25de155f
mov r12d, 0x989e
jmp 0x7fff25d5f1ab
mov r12d, dword [rax]
jmp 0x7fff25d5f1ab
mov edx, dword [rsp + 0x50]
cmp dword [r15 + 0x40], 5
mov r8d, 3
mov rax, qword [rsp + 0x78]
mov r10, qword [rsp + 0x58]
lea r9d, [r8 + 0x2d]
lea r11d, [r8 - 1]
jae 0x7fff25de1597
movzx r12d, word [rax + 0x76]
xor r15d, r15d
jmp 0x7fff25d5f1ab
mov r12d, dword [rax + 0x134]
jmp 0x7fff25d5ff64
movzx r13d, word [r9 + 0x6c]
mov edx, 0x10
jmp 0x7fff25d60267
mov rax, qword [rsp + 0x78]
movzx r13d, word [rax + 0x1e]
jmp 0x7fff25d60262
call fcn.7fff25dcb9e8
mov edx, dword [rsp + 0x50]
test eax, eax
mov r13d, 1
mov r11d, esi
cmovne r13w, r15w
jmp 0x7fff25d5f197
movzx r13d, r15w
xor r15d, r15d
jmp 0x7fff25d5f1ab
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov eax, dword [r9 + 0x2c]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov edx, dword [rsp + 0x50]
mov r11d, esi
jmp 0x7fff25d61339
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d610eb
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d610f8
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d61105
mov ecx, 0xffffffff
jmp 0x7fff25d6116a
mov eax, edx
jmp 0x7fff25d60718
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
jmp 0x7fff25d6119f
mov eax, edx
jmp 0x7fff25d60a9a
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
jmp 0x7fff25d611a9
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
lea r8, [rbp - 0x50]
mov rdx, r10
mov rcx, r9
call fcn.7fff25e0e438
mov rdi, rax
jmp 0x7fff25d5f18e
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25db97ec
test eax, eax
je 0x7fff25d611c1
lea rcx, [rbp - 0x50]
call fcn.7fff25e1b910
xor r15d, r15d
test rax, rax
je 0x7fff25d611c4
lea rdi, [rax + 0x58]
mov esi, r15d
test rdi, rdi
jne 0x7fff25d5f67a
jmp 0x7fff25d611c4
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x50]
call fcn.7fff25db97ec
test eax, eax
je 0x7fff25d5fb40
lea rcx, [rbp - 0x50]
call fcn.7fff25e1b910
xor r15d, r15d
test rax, rax
je 0x7fff25d5fb43
lea rdi, [rax + 0x50]
mov esi, r15d
test rdi, rdi
jne 0x7fff25d5f67a
jmp 0x7fff25d5fb43
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d611e2
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d611ef
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d611fc
mov ecx, 0xffffffff
jmp 0x7fff25d61261
mov eax, edx
jmp 0x7fff25d5fc8b
mov edx, dword [rsp + 0x50]
mov r11d, esi
jmp 0x7fff25d5fc9b
mov eax, edx
jmp 0x7fff25d60785
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
jmp 0x7fff25d61296
mov eax, edx
jmp 0x7fff25d607f2
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
jmp 0x7fff25d612a0
cmp dword [r15 + 0x40], 7
mov r11d, 2
mov esi, r11d
mov edx, 0xa
jae 0x7fff25de17b3
movzx eax, word [r9 + 0x14]
jmp 0x7fff25de17bb
movzx eax, word [r9 + 0xe0]
movzx r13d, ax
jmp 0x7fff25d5f197
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov eax, dword [r9 + 0x44]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d612aa
mov ecx, edx
jmp 0x7fff25d6003e
mov r9, qword [rsp + 0x68]
movzx eax, word [r9 + 0x14]
jmp 0x7fff25d60047
dec ecx
cmp ecx, 0xd
ja case.0x7fff25de181f.4
movsxd rax, ecx
lea rdx, [0x7fff25d40000]
mov ecx, dword [rdx + rax*4 + 0xa26ae]
add rcx, rdx
jmp rcx
movzx r13d, si
jmp 0x7fff25de183b
call fcn.7fff25dcb9e8
test eax, eax
movzx r13d, si
cmovne r13w, r15w
mov r11d, esi
jmp 0x7fff25d6091f
mov edx, dword [rsp + 0x50]
mov r13d, 4
mov r11d, esi
jmp 0x7fff25d5f197
mov ecx, edx
jmp 0x7fff25d600c0
mov r9, qword [rsp + 0x68]
movzx eax, word [r9 + 0x14]
jmp 0x7fff25d600c9
dec ecx
cmp ecx, 0xe
ja case.0x7fff25de181f.4
movsxd rax, ecx
lea rdx, [0x7fff25d40000]
mov ecx, dword [rdx + rax*4 + 0xa26e6]
add rcx, rdx
jmp rcx
mov eax, edx
jmp 0x7fff25d5ffbc
mov r9, qword [rsp + 0x68]
movzx ecx, word [r9 + 0x12]
jmp 0x7fff25d5ffc5
mov eax, edx
jmp 0x7fff25d60137
mov r9, qword [rsp + 0x68]
movzx ecx, word [r9 + 0x12]
jmp 0x7fff25d60140
mov ecx, edx
jmp 0x7fff25d601b1
mov r9, qword [rsp + 0x68]
movzx eax, word [r9 + 0x14]
jmp 0x7fff25d601ba
cmp ecx, 8
jbe 0x7fff25de18ea
cmp ecx, 0xa
je 0x7fff25de18ea
cmp ecx, 0xd
je 0x7fff25de18ea
cmp ecx, 0xf
jne 0x7fff25d601c6
xor r15d, r15d
movzx eax, r15w
jmp 0x7fff25d601ce
mov ecx, edx
jmp 0x7fff25d6022e
mov r9, qword [rsp + 0x68]
movzx eax, word [r9 + 0x14]
jmp 0x7fff25d60237
mov edx, dword [r9 + 0x68]
xor r8d, r8d
mov rcx, r10
mov esi, r11d
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov dword [rsp + 0x60], r11d
mov esi, r11d
test r8d, r8d
je 0x7fff25de1978
test ecx, ecx
je 0x7fff25de1978
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor edx, edx
mov r8d, 0x1dc
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
mov esi, dword [rsp + 0x60]
test eax, eax
je 0x7fff25de196e
lea rdi, [rbp - 0x50]
jmp 0x7fff25d5f18e
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x118]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x58]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rcx, rax
jmp 0x7fff25d5fdf2
cmp dx, 0x27
jne 0x7fff25de19df
add rcx, 2
dec r10d
test r10d, r10d
jle 0x7fff25de19dd
cmp word [rcx], 0x27
je 0x7fff25de19da
add rcx, 2
dec r10d
test r10d, r10d
jg 0x7fff25de19c8
test r10d, r10d
je 0x7fff25de19ef
add rcx, 2
dec r10d
test r10d, r10d
jg 0x7fff25d5fe14
xor r15d, r15d
jmp 0x7fff25d5fed6
add rcx, 2
dec r10d
test r10d, r10d
jg 0x7fff25d5fe45
jmp 0x7fff25de19ef
add rcx, 2
dec r10d
test r10d, r10d
jle 0x7fff25de1a2a
cmp word [rcx], 0x27
je 0x7fff25de1a27
add rcx, 2
dec r10d
test r10d, r10d
jg 0x7fff25de1a15
test r10d, r10d
je 0x7fff25d5fe7e
jmp 0x7fff25d5ff04
test r8d, r8d
je 0x7fff25de1a63
lea rax, [rcx - 2]
cmp rdx, rax
jae 0x7fff25de1a5b
cmp word [rdx + 2], r9w
jne 0x7fff25de1a5b
mov word [r10], r9w
add r10, 2
add rdx, 2
jmp 0x7fff25d5feb4
mov r8d, ebx
jmp 0x7fff25d5feb4
mov r8d, r11d
jmp 0x7fff25d5feb4
mov r10d, r15d
jmp 0x7fff25d5f1ab
mov esi, 0x56
jmp 0x7fff25de1a84
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x58]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
jmp 0x7fff25d60330
movzx eax, word [rdi]
add rdi, r11
mov r10d, eax
test eax, eax
je 0x7fff25d60d23
jmp 0x7fff25d6034d
add rdi, r11
dec r10d
test r10d, r10d
jle 0x7fff25de1ad8
movzx eax, word [rdi]
test ax, ax
je 0x7fff25de1ad5
cmp ax, 0x27
je 0x7fff25de1ad5
add rdi, r11
dec r10d
test r10d, r10d
jg 0x7fff25de1abc
test r10d, r10d
je 0x7fff25d60d23
cmp word [rdi], r12w
je 0x7fff25d60d23
jmp 0x7fff25d60373
mov esi, 0x56
jmp 0x7fff25de1afe
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x58]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
jmp 0x7fff25d60c4d
movzx eax, word [rdi]
add rdi, r11
mov r10d, eax
test eax, eax
je 0x7fff25d60d23
jmp 0x7fff25d60c66
add rdi, r11
dec r10d
test r10d, r10d
jle 0x7fff25de1b52
movzx eax, word [rdi]
test ax, ax
je 0x7fff25de1b4f
cmp ax, 0x27
je 0x7fff25de1b4f
add rdi, r11
dec r10d
test r10d, r10d
jg 0x7fff25de1b36
test r10d, r10d
je 0x7fff25d60d23
cmp word [rdi], r12w
je 0x7fff25d60d23
jmp 0x7fff25d60c8f
mov esi, r11d
xor r15d, r15d
jmp 0x7fff25d5f19f
mov r13d, 1
jmp 0x7fff25d5f1ab
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov eax, dword [r9 + 0x4c]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d60f93
cmp dword [r15 + 0x40], 6
mov r8d, 3
jae 0x7fff25de1bbc
lea rdi, [0x7fff25f9cd40]
jmp 0x7fff25de12ef
mov eax, dword [r9 + 0x138]
jmp 0x7fff25d5f11d
cmp dword [r15 + 0x40], 6
mov r8d, 3
jae 0x7fff25de1be1
lea rdi, [0x7fff25f9cd44]
jmp 0x7fff25de12ef
mov eax, dword [r9 + 0x13c]
jmp 0x7fff25d5f11d
mov rcx, r15
call fcn.7fff25e0f950
cmp eax, 1
jne 0x7fff25de1c4f
mov rax, qword [rsp + 0x68]
mov edx, dword [rax + 0x5c]
jmp 0x7fff25de1c0c
mov rax, qword [rsp + 0x68]
mov edx, dword [rax + 0x64]
mov rcx, qword [rsp + 0x70]
jmp 0x7fff25de1c27
mov edx, eax
mov rcx, r15
call sym.KERNELBASE.dll_GetCalendar
mov rcx, qword [0x7fff25fd2200]
mov edx, dword [rax + 8]
xor r8d, r8d
call fcn.7fff25d5a748
mov esi, dword [rsp + 0x60]
jmp 0x7fff25de1c44
mov edx, dword [r9 + 0x64]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov edx, eax
mov rcx, r15
call sym.KERNELBASE.dll_GetCalendar
mov rcx, qword [0x7fff25fd2200]
xor r8d, r8d
mov edx, dword [rax + 4]
call fcn.7fff25d5a748
mov esi, dword [rsp + 0x60]
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov edx, 0x8000001f
jmp 0x7fff25d60416
lea rdx, [0x7fff25f9cd48]
mov r10d, 6
jmp 0x7fff25d60437
cmp r8w, 0x27
jne 0x7fff25de1cc3
add rdx, 2
dec r10d
test r10d, r10d
jle 0x7fff25de1cbb
cmp word [rdx], 0x27
je 0x7fff25de1cbb
add rdx, 2
dec r10d
test r10d, r10d
jg 0x7fff25de1ca9
movzx ecx, ax
test r10d, r10d
je 0x7fff25de1cd6
add rdx, 2
dec r10d
test r10d, r10d
jg 0x7fff25d6045b
movzx ecx, ax
xor r15d, r15d
jmp 0x7fff25d6054f
add rdx, 2
dec r10d
test r10d, r10d
jg 0x7fff25d6048a
jmp 0x7fff25de1cd3
add rdx, 2
dec r10d
test r10d, r10d
jle 0x7fff25de1d11
cmp word [rdx], 0x27
je 0x7fff25de1d0e
add rdx, 2
dec r10d
test r10d, r10d
jg 0x7fff25de1cfc
test r10d, r10d
je 0x7fff25d604cb
jmp 0x7fff25d6056d
test r10d, r10d
je 0x7fff25de1d4a
lea rax, [rdx - 2]
cmp r8, rax
jae 0x7fff25de1d42
cmp word [r8 + 2], r9w
jne 0x7fff25de1d42
mov word [rcx], r9w
add rcx, 2
add r8, 2
jmp 0x7fff25d60518
mov r10d, ebx
jmp 0x7fff25d60518
mov r10d, r11d
jmp 0x7fff25d60518
lea rdi, [0x7fff25f9c1b8]
jmp 0x7fff25d5fed6
mov edx, 0x8000001f
jmp 0x7fff25d603b0
lea rdi, str.y_M_d
jmp 0x7fff25d603ce
movzx r13d, r15w
jmp 0x7fff25d5f1ab
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x5c]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
jmp 0x7fff25d605ca
add rdi, rsi
dec r10d
test r10d, r10d
jle 0x7fff25de1dbd
cmp word [rdi], 0x27
je 0x7fff25de1dba
add rdi, rsi
dec r10d
test r10d, r10d
jg 0x7fff25de1da9
test r10d, r10d
jne 0x7fff25d60603
mov edx, dword [rsp + 0x50]
xor r15d, r15d
jmp 0x7fff25d5f19f
movzx r13d, r15w
jmp 0x7fff25d60644
mov dword [rsp + 0x50], 0xa
test r8d, r8d
je 0x7fff25de1e24
test ecx, ecx
je 0x7fff25de1e24
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
mov esi, 0x56
xor r8d, r8d
mov edx, 0x2be
mov qword [rsp + 0x20], rsi
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
lea r11d, [rsi - 0x55]
test eax, eax
je 0x7fff25de1e1a
lea rdi, [rbp - 0x50]
jmp 0x7fff25de1e36
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x5c]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
movzx eax, word [rdi]
movzx r13d, r11w
mov r11d, 2
xor r15d, r15d
mov esi, r11d
mov r10d, eax
add rdi, rsi
test eax, eax
je 0x7fff25d60644
movzx eax, word [rdi]
cmp ax, 0x64
jne 0x7fff25de1e98
add rdi, rsi
dec r10d
mov eax, r15d
test r10d, r10d
jle 0x7fff25de1dcf
cmp word [rdi], 0x64
jne 0x7fff25de1e85
inc eax
add rdi, rsi
dec r10d
test r10d, r10d
jg 0x7fff25de1e72
test eax, eax
je 0x7fff25de1dcf
cmp eax, 1
je 0x7fff25d60644
jmp 0x7fff25de1ec9
cmp ax, 0x27
jne 0x7fff25de1ec3
add rdi, rsi
dec r10d
test r10d, r10d
jle 0x7fff25de1ebd
cmp word [rdi], 0x27
je 0x7fff25de1eba
add rdi, rsi
dec r10d
test r10d, r10d
jg 0x7fff25de1ea9
test r10d, r10d
je 0x7fff25d60644
add rdi, rsi
dec r10d
test r10d, r10d
jg 0x7fff25de1e57
jmp 0x7fff25d60644
mov dword [rsp + 0x50], 0xa
mov esi, 0x56
test r8d, r8d
je 0x7fff25de1f84
test ecx, ecx
je 0x7fff25de1f84
mov dword [rsp + 0x28], r11d
lea r9, [rbp - 0x50]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
mov edx, 0x2be
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideString
test eax, eax
je 0x7fff25de1f74
lea rdi, [rbp - 0x50]
lea r13d, [rsi - 0x55]
mov r10d, esi
xor r15d, r15d
movzx eax, word [rdi]
test ax, ax
je 0x7fff25de200b
cmp ax, 0x4d
jne 0x7fff25de1fbe
add rdi, 2
dec r10d
mov eax, r15d
test r10d, r10d
jle 0x7fff25de2007
cmp word [rdi], 0x4d
jne 0x7fff25de1f5e
inc eax
add rdi, 2
dec r10d
test r10d, r10d
jg 0x7fff25de1f4a
test eax, eax
je 0x7fff25de2007
cmp eax, 1
jne 0x7fff25de1ffc
jmp 0x7fff25de200b
mov r9, qword [rsp + 0x68]
mov r11d, 1
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x5c]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
movzx r13d, r11w
lea rax, [rbp - 0x50]
cmp rdi, rax
je 0x7fff25de1f1b
movzx eax, word [rdi]
add rdi, 2
mov r10d, eax
test eax, eax
jne 0x7fff25de1f1e
xor r15d, r15d
jmp 0x7fff25de200b
cmp ax, 0x27
jne 0x7fff25de1ff5
add rdi, 2
dec r10d
test r10d, r10d
jle 0x7fff25de1fed
movzx eax, word [rdi]
test ax, ax
je 0x7fff25de1fea
cmp ax, 0x27
je 0x7fff25de1fea
add rdi, 2
dec r10d
test r10d, r10d
jg 0x7fff25de1fd0
test r10d, r10d
je 0x7fff25de200b
cmp word [rdi], r12w
je 0x7fff25de200b
add rdi, 2
dec r10d
test r10d, r10d
jg 0x7fff25de1f21
jmp 0x7fff25de200b
movzx r13d, r15w
mov edx, dword [rsp + 0x50]
mov r11d, 2
mov esi, r11d
jmp 0x7fff25d5f19f
xor eax, eax
mov edx, eax
mov qword [rbp - 0x70], rax
jmp 0x7fff25d610a6
sub rcx, 2
mov r10d, 0x8007007a
jmp 0x7fff25d5f140
mov word [rbp - 0x50], r9w
jmp 0x7fff25d5f151
mov rcx, r15
call fcn.7fff25e0f950
cmp eax, 1
jne 0x7fff25de2070
mov rax, qword [rsp + 0x68]
xor r8d, r8d
mov rcx, qword [rsp + 0x70]
mov edx, dword [rax + 0x60]
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov edx, eax
mov rcx, r15
call sym.KERNELBASE.dll_GetCalendar
mov rcx, qword [0x7fff25fd2200]
xor r8d, r8d
mov edx, dword [rax + 0xc]
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov edx, dword [r9 + 0x60]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov edx, r8d
jmp 0x7fff25d5f191
mov eax, 0x80000020
jmp 0x7fff25d5f4b9
lea rdi, str.d_M_y
jmp 0x7fff25d5f4d9
movzx r13d, r15w
jmp 0x7fff25d5f1ab
mov rdi, r10
jmp 0x7fff25d5f5e6
mov rdi, r10
jmp 0x7fff25d5f5bf
lea r8d, [rsi - 0x5f]
mov eax, 0x24924925
mul r8d
mov eax, r8d
mov rcx, r10
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [r9 + 0x11c]
shr eax, 2
imul eax, eax, 7
sub r8d, eax
call fcn.7fff25d5a748
mov rdi, rax
mov esi, r11d
jmp 0x7fff25d5f18e
cmp dword [rbp - 0x78], edi
jne 0x7fff25d5f54a
jmp 0x7fff25d5f543
mov rdi, r10
jmp 0x7fff25d5f562
cmp dword [rbp - 0x78], edi
jne 0x7fff25d5f580
jmp 0x7fff25d5f579
mov rdi, r10
jmp 0x7fff25d5f598
mov rdx, qword [r15 + 0x60]
mov rax, qword [rdx + 0x20]
mov ecx, dword [rax + 0xac]
mov rax, qword [rdx + 0x28]
lea rdx, [rax + rcx*2]
jmp 0x7fff25d608a0
mov rcx, qword [r15 + 8]
call fcn.7fff25e0ecb4
mov edx, dword [rsp + 0x50]
movzx r13d, ax
xor r15d, r15d
jmp 0x7fff25d5f6ed
xor r15d, r15d
cmp word [r9 + 0xe2], di
mov r13d, r15d
cmovl r13w, r11w
jmp 0x7fff25d5f6ed
mov esi, r11d
test r8d, r8d
je 0x7fff25de21ae
test ecx, ecx
je 0x7fff25de21ae
mov rcx, r15
call fcn.7fff25e0f950
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
cmp dword [r15 + 0x40], 6
jae 0x7fff25de21c5
mov eax, dword [r9 + 0x104]
lea rdi, [r10 + rax*2]
jmp 0x7fff25d5f18e
mov edx, dword [r9 + 0x140]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
nop
jmp 0x7fff25d5f856
test r8d, r8d
je 0x7fff25de2206
test ecx, ecx
je 0x7fff25de2206
mov rcx, r15
call fcn.7fff25e0f950
mov rcx, r15
call fcn.7fff25e0f950
mov r9, qword [rsp + 0x68]
mov r11d, 1
mov r10, qword [rsp + 0x70]
cmp dword [r15 + 0x40], 4
mov r8d, 3
jb 0x7fff25de12e8
mov eax, dword [r9 + 0x130]
jmp 0x7fff25d5f11d
movzx ecx, word [r9 + 0x6e]
jmp 0x7fff25de222f
movzx ecx, word [r9 + 0x70]
mov dword [rsp + 0x50], 0xa
movzx r13d, cx
mov esi, 2
call sym.KERNELBASE.dll_IsValidCodePage
mov edx, dword [rsp + 0x50]
lea r8d, [rsi + 1]
mov r10, qword [rsp + 0x58]
lea r9d, [rsi + 0x2e]
xor r15d, r15d
mov r11d, esi
test eax, eax
jne 0x7fff25d5f1ab
mov r13d, 0xfde9
jmp 0x7fff25d5f1ab
cmp esi, 0x999
je 0x7fff25de222a
mov ecx, 0x3ec
call sub.ntdll.dll_RtlSetLastWin32Error
xor eax, eax
jmp 0x7fff25d5f26d
xor r9d, r9d
lea rcx, [rbp - 0x50]
mov r8, r15
call fcn.7fff25e0f304
jmp 0x7fff25de1231
movzx ecx, word [r15 + 0x48]
mov eax, 0x1000
mov esi, 0x56
cmp cx, ax
je 0x7fff25de22d7
mov r9d, dword [rbp - 0x68]
lea rdx, [rbp - 0x50]
shr r9d, 0x10
mov r8d, esi
and r9d, 0xf
add r9d, 7
call sym.KERNELBASE.dll_GetStringTableEntry
mov r10d, eax
test eax, eax
jne 0x7fff25d61022
mov r9d, 7
lea rdx, [rbp - 0x50]
mov r8d, esi
xor ecx, ecx
call sym.KERNELBASE.dll_GetStringTableEntry
mov r10d, eax
test eax, eax
jne 0x7fff25d61022
lea ecx, [rax + 0x57]
call sub.ntdll.dll_RtlSetLastWin32Error
xor eax, eax
jmp 0x7fff25d5f26d
movzx eax, word [r9 + 0x72]
mov r15d, 0xfde9
mov dword [rsp + 0x50], 0xa
mov esi, 2
movzx r13d, ax
cmp ax, r15w
jne 0x7fff25d5ff3f
jmp 0x7fff25de182b
movzx r15d, word [r9 + 0x74]
mov esi, 2
mov ecx, r15d
mov dword [rsp + 0x50], 0xa
movzx r13d, r15w
call sym.KERNELBASE.dll_IsValidCodePage
test eax, eax
jne 0x7fff25de2364
mov edx, dword [rsp + 0x50]
mov r13d, 0xfde9
mov r11d, esi
jmp 0x7fff25d5f197
cmp r15d, 0x25
jne 0x7fff25de13d8
test r14d, r14d
jne 0x7fff25de2382
lea rdi, [0x7fff25f9cd38]
xor r15d, r15d
jmp 0x7fff25d5f5f7
mov edx, dword [rsp + 0x50]
mov r11d, esi
jmp 0x7fff25d5f2a0
mov edx, 0xa
mov r11d, 2
mov dword [rsp + 0x50], edx
mov esi, r11d
test r8d, r8d
je 0x7fff25de23f5
test ecx, ecx
je 0x7fff25de23f5
lea r9, [rsp + 0x64]
xor edx, edx
mov r8d, 0x4a8
mov rcx, r15
call sym.KERNELBASE.dll_GetUserOverrideWord
test eax, eax
je 0x7fff25de23ee
movzx r13d, word [rsp + 0x64]
mov edx, 0xffff
lea eax, [r13 - 1]
cmp ax, 0x75
mov eax, r13d
jbe 0x7fff25de23dc
mov eax, edx
cmp ax, dx
mov r11d, esi
mov edx, dword [rsp + 0x50]
jne 0x7fff25d5f197
jmp 0x7fff25de23f5
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov rax, qword [rsp + 0x78]
movzx r13d, word [rax + 0x78]
jmp 0x7fff25d5f197
mov eax, edx
jmp 0x7fff25d6085f
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
jmp 0x7fff25d612b7
mov eax, edx
jmp 0x7fff25d5fc1a
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
movzx r13d, word [r9 + 0x22]
jmp 0x7fff25d5f197
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0xa4]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f18e
mov rax, qword [rsp + 0x78]
mov esi, r11d
mov rcx, qword [rbp - 0x80]
mov eax, dword [rax + 0xa8]
lea rdi, [rcx + rax*2]
jmp 0x7fff25d5f18e
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
jmp 0x7fff25d60bf3
mov esi, 0x56
jmp 0x7fff25de248f
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov edx, dword [r9 + 0x58]
xor r8d, r8d
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
jmp 0x7fff25d60cdf
movzx eax, word [rdi]
add rdi, r11
mov r10d, eax
test eax, eax
je 0x7fff25d60d23
jmp 0x7fff25d60cf8
add rdi, r11
dec r10d
test r10d, r10d
jle 0x7fff25de24e3
movzx eax, word [rdi]
test ax, ax
je 0x7fff25de24e0
cmp ax, 0x27
je 0x7fff25de24e0
add rdi, r11
dec r10d
test r10d, r10d
jg 0x7fff25de24c7
test r10d, r10d
je 0x7fff25d60d23
cmp word [rdi], r12w
je 0x7fff25d60d23
jmp 0x7fff25d60d57
mov esi, r11d
xor r15d, r15d
jmp 0x7fff25d5f19f
mov r13d, 1
mov esi, r11d
xor r15d, r15d
jmp 0x7fff25d5f19f
mov rcx, r15
call fcn.7fff25e0f950
cmp eax, 1
jne 0x7fff25de1c13
jmp 0x7fff25de1c04
mov r12d, 1
jmp 0x7fff25d5f1ab
mov ecx, dword [r9 + 0x7c]
mov edx, 0xa
xor r15d, r15d
lea esi, [rdx - 8]
cmp r11w, word [r10 + rcx*2]
jb 0x7fff25de2551
movzx eax, r15w
jmp 0x7fff25de2559
lea eax, [rcx + 2]
movzx eax, word [r10 + rax*2]
movzx r13d, ax
mov r11d, esi
jmp 0x7fff25d5f19a
mov eax, edx
jmp 0x7fff25d60913
mov r9, qword [rsp + 0x68]
jmp 0x7fff25de2583
mov r9, qword [rsp + 0x68]
mov r11d, 2
mov edx, 0xffff
movzx eax, word [r9 + 0x1a]
mov r8d, 3
mov r10, qword [rsp + 0x58]
dec ax
xor r15d, r15d
movzx r13d, ax
cmp ax, dx
mov edx, dword [rsp + 0x50]
lea r9d, [r8 + 0x2d]
jne 0x7fff25d5f1ab
lea r13d, [r8 + 3]
jmp 0x7fff25d5f1ab
mov eax, edx
jmp 0x7fff25d6097f
mov edx, dword [rsp + 0x50]
mov r11d, esi
mov r9, qword [rsp + 0x68]
movzx r13d, word [r9 + 0x1c]
jmp 0x7fff25d5f197
cmp dword [rbp - 0x78], edi
jne 0x7fff25d60f21
jmp 0x7fff25d60f1a
mov edx, dword [r9 + 0xd0]
xor r15d, r15d
test edx, edx
mov eax, r15d
cmovne eax, dword [rbp - 0x78]
test eax, eax
jne 0x7fff25de2600
mov edx, dword [r9 + 0xc8]
mov r8d, 0xc
mov rcx, r10
call fcn.7fff25d5a748
mov rdi, rax
mov esi, r11d
mov edx, r12d
jmp 0x7fff25d5fb59
sub rdx, 2
mov r10d, 0x8007007a
jmp 0x7fff25d60f43
mov edx, dword [rsp + 0x50]
mov r11d, 2
mov esi, dword [rsp + 0x60]
movzx r13d, r15w
jmp 0x7fff25d5f197
test ecx, ecx
jne 0x7fff25de269d
mov eax, r11d
jmp 0x7fff25d5f26d
lea rcx, [rdi + 2]
mov r8d, 0xffffffff
lea r9, [rbp - 0x64]
call fcn.7fff25d80b28
test eax, eax
je case.0x7fff25d5f3d5.4100
mov r12d, dword [rbp - 0x64]
mov r11d, 2
jmp 0x7fff25d5f2be
mov r8d, 0x80070057
jmp 0x7fff25d5f205
mov word [rbx], r15w
xor eax, eax
jmp 0x7fff25d5f26d
sub rbx, 2
mov r8d, 0x8007007a
jmp 0x7fff25d5f25d
mov ecx, 0x7a
call sub.ntdll.dll_RtlSetLastWin32Error
xor eax, eax
jmp 0x7fff25d5f26d