Function at 0x1401f69f0
Capabilities:
Get file attributes
Get session user name
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x498
movaps xmmword [rsp + 0x480], xmm7
movaps xmmword [rsp + 0x470], xmm6
mov r15, rcx
mov rbx, qword [rcx + 0x638]
test rbx, rbx
jne 0x1401f6aa6
mov ecx, 0x2a8
call fcn.1401a9d88
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x1402a0c90]
movups xmmword [rax + 0x30], xmm0
lea rcx, [rax + 0x40]
lea rdi, [rax + 0x1e8]
mov r8d, 0x1a4
xor edx, edx
call fcn.1401e5d50
mov r8d, 0xc0
mov rcx, rdi
xor edx, edx
call fcn.1401e5d50
mov rcx, rbx
call fcn.1401fa2c0
mov rdi, qword [r15 + 0x638]
mov qword [r15 + 0x638], rbx
test rdi, rdi
je 0x1401f6aa6
mov rcx, rdi
call fcn.1400955c0
mov rcx, rdi
call fcn.1401a9dc4
mov rbx, qword [r15 + 0x638]
cmp byte [rbx + 0x217], 0
js 0x1401f6acb
lea rax, [rbx + 0x200]
mov byte [rbx + 0x217], 0
jmp 0x1401f6add
mov rcx, qword [r15 + 0x628]
jmp 0x1401f6bb3
mov qword [rbx + 0x208], 0
mov rax, qword [rbx + 0x200]
mov byte [rax], 0
lea rdi, [rsp + 0x1c0]
mov rcx, rdi
call fcn.14020e0f0
movabs rax, 0x431bde82d7b634db
imul qword [rdi]
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x12
add rdx, rax
lea rdi, [rsp + 0x1c0]
mov rcx, rdi
call fcn.1400aa5b0
lea rsi, [rbx + 0x1e8]
cmp byte [rbx + 0x1ff], 0
jns 0x1401f6b33
mov rcx, qword [rsi]
call fcn.1401a9dc4
mov rax, qword [rsp + 0x1d0]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsi], xmm0
mov rcx, rbx
call fcn.1401f4a90
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], 0
mov rcx, qword [0x1402ecb00]
movsx rax, byte [rcx + 0x5f]
test rax, rax
jns 0x1401f6b7e
mov rax, qword [rcx + 0x50]
test rax, rax
je 0x1401f6d75
lea rdx, [rsp + 0x1a0]
mov rcx, r15
call fcn.1401fc070
test al, al
je 0x1401f6e90
movsx rax, byte [r15 + 0x637]
test rax, rax
js 0x1401f6abf
mov rcx, rax
test rcx, rcx
jne 0x1401f6cf5
mov r8d, 0x208
mov rcx, rdi
mov dl, 0xaa
call fcn.1401e5d50
lea rdx, [rsp + 0x120]
mov dword [rdx], 0x104
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
lea rbx, [0x14029ebca]
cmovne rbx, rdi
mov rcx, rbx
call fcn.1401aa1e8
mov r14, rax
movabs rax, 0x7ffffffffffffff8
cmp r14, rax
jae 0x1401fa1cf
cmp r14, 0xa
jbe 0x1401f6d45
mov rax, r14
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov esi, Ordinal_14
cmovne rsi, rcx
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov rcx, rax
mov qword [rsp + 0xa0], rax
bts rsi, 0x3f
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa8], r14
lea rsi, [rcx + r14*2]
cmp rbx, rcx
setb al
cmp rbx, rsi
setae dl
or dl, al
je 0x1401f7e03
test r14, r14
je 0x1401f6c8d
add r14, r14
mov rdx, rbx
mov r8, r14
call fcn.1401e56b0
lea rbx, [r15 + 0x620]
mov word [rsi], 0
lea rcx, [rsp + 0x1c0]
lea rdx, [rsp + 0xa0]
call fcn.14009b970
cmp byte [r15 + 0x637], 0
jns 0x1401f6cc0
mov rcx, qword [rbx]
call fcn.1401a9dc4
mov rax, qword [rsp + 0x1d0]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rbx], xmm0
cmp byte [rsp + 0xb7], 0
jns 0x1401f6cee
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
mov al, byte [r15 + 0x637]
test al, al
js 0x1401f6d3c
movzx eax, al
test rax, rax
jne 0x1401f6f81
cmp byte [rsp + 0x1b7], 0
mov al, byte [0x1402ec817]
js 0x1401f9be1
test al, al
js 0x1401f6f40
mov rax, qword [0x1402ec810]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [0x1402ec800]
jmp 0x1401f6e88
mov rax, qword [r15 + 0x628]
jmp 0x1401f6cfc
lea rcx, [rsp + 0xa0]
mov byte [rcx + 0x17], r14b
jmp 0x1401f6c62
mov rdx, qword [rsp + 0x320]
mov r8, qword [rsp + 0x328]
lea rcx, [rsp + 0xa0]
call fcn.140118510
jmp 0x1401f6deb
lea rcx, [rsp + 0x200]
movaps xmmword [rcx - 0x20], xmm0
movaps xmmword [rcx - 0x30], xmm0
movaps xmmword [rcx - 0x40], xmm0
movaps xmm0, xmmword [0x1402a0c90]
movaps xmmword [rcx - 0x10], xmm0
lea rbx, [rsp + 0x3a8]
mov r8d, 0x1a4
xor edx, edx
call fcn.1401e5d50
mov r8d, 0xc0
mov rcx, rbx
xor edx, edx
call fcn.1401e5d50
lea rcx, [rsp + 0x1c0]
call fcn.1401fa2c0
cmp byte [rbx - 0x71], 0
js 0x1401f6d56
lea rax, [rsp + 0x320]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xb0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xa0], xmm0
mov rax, qword [0x1402ecb00]
lea rsi, [rax + 0x48]
cmp byte [rax + 0x5f], 0
jns 0x1401f6e04
mov rcx, qword [rsi]
call fcn.1401a9dc4
mov rax, qword [rsp + 0xb0]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0xb7], al
mov byte [rsp + 0xa0], al
lea rcx, [rsp + 0x1c0]
call fcn.1400955c0
mov rcx, qword [0x1402ecb00]
movsx rax, byte [rcx + 0x5f]
test rax, rax
jns 0x1401f6e4d
mov rax, qword [rcx + 0x50]
test rax, rax
jne 0x1401f6b87
cmp byte [rsp + 0x1b7], 0
mov al, byte [0x1402ec7ff]
js 0x1401f6f50
test al, al
js 0x1401f6f20
mov rax, qword [0x1402ec7f8]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [0x1402ec7e8]
movaps xmmword [rsp + 0x1a0], xmm0
xorps xmm0, xmm0
lea r9, [rsp + 0xa0]
movaps xmmword [r9], xmm0
xor eax, eax
mov qword [r9 + 0x10], rax
mov qword [rsp + 0x1d0], rax
movaps xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x20], rdi
lea r8, [rsp + 0x1a0]
xor ecx, ecx
mov edx, 0x65
call fcn.140098460
cmp byte [rsp + 0x1d7], 0
jns 0x1401f6ee5
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
cmp byte [rsp + 0x1b7], 0
jns 0x1401f6efc
mov rcx, qword [rsp + 0x1a0]
call fcn.1401a9dc4
movaps xmm6, xmmword [rsp + 0x470]
movaps xmm7, xmmword [rsp + 0x480]
add rsp, 0x498
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r8, qword [0x1402ec7f0]
mov rdx, qword [0x1402ec7e8]
lea rcx, [rsp + 0x1a0]
call fcn.140114360
jmp 0x1401f6e90
mov r8, qword [0x1402ec808]
mov rdx, qword [0x1402ec800]
jmp 0x1401f6f2e
test al, al
js 0x1401f6f61
movzx r8d, al
lea rdx, [0x1402ec7e8]
jmp 0x1401f6f6f
mov r8, qword [0x1402ec7f0]
mov rdx, qword [0x1402ec7e8]
lea rcx, [rsp + 0x1a0]
call fcn.140114450
jmp 0x1401f6e90
mov rdi, qword [r15 + 0x638]
test rdi, rdi
jne 0x1401f7011
mov ecx, 0x2a8
call fcn.1401a9d88
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x1402a0c90]
movups xmmword [rax + 0x30], xmm0
lea rcx, [rax + 0x40]
lea rbx, [rax + 0x1e8]
mov r8d, 0x1a4
xor edx, edx
call fcn.1401e5d50
mov r8d, 0xc0
mov rcx, rbx
xor edx, edx
call fcn.1401e5d50
mov rcx, rdi
call fcn.1401fa2c0
mov rbx, qword [r15 + 0x638]
mov qword [r15 + 0x638], rdi
test rbx, rbx
je 0x1401f7011
mov rcx, rbx
call fcn.1400955c0
mov rcx, rbx
call fcn.1401a9dc4
mov rdi, qword [r15 + 0x638]
movsx rax, byte [rdi + 0x1bf]
test rax, rax
jns 0x1401f7025
mov rax, qword [rdi + 0x1b0]
test rax, rax
sete byte [r15 + 0x618]
mov rsi, qword [0x1402ecb00]
lea rdx, [rsp + 0x1c0]
mov rcx, r15
mov r8d, 2
call fcn.14009f2e0
mov rcx, rsi
add rsi, 0xa0
cmp byte [rcx + 0xb7], 0
mov qword [rsp + 0xf8], rcx
jns 0x1401f7078
mov rcx, qword [rsi]
call fcn.1401a9dc4
mov rcx, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x1d0]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsi], xmm0
movsx rax, byte [rcx + 0xb7]
test rax, rax
jns 0x1401f70a3
mov rax, qword [rcx + 0xa8]
test rax, rax
setne byte [rcx + 0x98]
lea rdx, [rsp + 0x1c0]
mov rcx, r15
mov r8d, 1
call fcn.14009f2e0
mov rcx, qword [rsp + 0xf8]
lea rsi, [rcx + 0x80]
cmp byte [rcx + 0x97], 0
jns 0x1401f70eb
mov rcx, qword [rsi]
call fcn.1401a9dc4
mov rcx, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x1d0]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsi], xmm0
movsx rax, byte [rcx + 0x97]
test rax, rax
jns 0x1401f7116
mov rax, qword [rcx + 0x88]
test rax, rax
setne byte [rcx + 0x7c]
lea rdi, [rsp + 0x1c0]
mov rcx, r15
mov rdx, rdi
mov r8d, 3
call fcn.14009f2e0
movsx rax, byte [rdi + 0x17]
mov rcx, rax
test rax, rax
jns 0x1401f714b
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
mov rcx, qword [rsp + 0xf8]
setne byte [rcx + 0xb8]
test rax, rax
jns 0x1401f716f
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
lea rdi, [rsp + 0x1c0]
mov rcx, r15
mov rdx, rdi
mov r8d, 4
call fcn.14009f2e0
movsx rax, byte [rdi + 0x17]
mov rcx, rax
test rax, rax
jns 0x1401f719d
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
mov rcx, qword [rsp + 0xf8]
setne byte [rcx + 0xb9]
test rax, rax
jns 0x1401f71c1
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
lea rdi, [rsp + 0x1c0]
mov rcx, r15
mov rdx, rdi
mov r8d, 5
call fcn.14009f2e0
movsx rax, byte [rdi + 0x17]
mov rcx, rax
test rax, rax
jns 0x1401f71ef
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
mov rcx, qword [rsp + 0xf8]
setne byte [rcx + 0xba]
test rax, rax
jns 0x1401f7213
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
lea rsi, [rsp + 0x1c0]
mov rcx, r15
mov rdx, rsi
mov r8d, 6
call fcn.14009f2e0
movsx rax, byte [rsi + 0x17]
mov rcx, rax
test rax, rax
jns 0x1401f7241
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
mov rcx, qword [rsp + 0xf8]
setne byte [rcx + 0xbb]
test rax, rax
jns 0x1401f7265
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
mov rcx, r15
xor edx, edx
mov r8d, 1
call fcn.14009fac0
mov rsi, qword [rsp + 0xf8]
mov byte [rsi + 0xbc], al
mov rcx, r15
mov dl, 1
mov r8d, 1
call fcn.14009fac0
mov byte [rsi + 0xbd], al
mov rax, qword [r15 + 0x588]
cmp rax, qword [r15 + 0x590]
mov qword [rsp + 0x198], r15
je 0x1401f72e6
xor edi, edi
movaps xmm6, xmmword [0x140299a90]
xorps xmm7, xmm7
lea r12, [rsp + 0x40]
jmp 0x1401f878a
mov rax, qword [rsp + 0xf8]
mov dword [rax + 0xc0], edi
cmp byte [rsp + 0x57], 0
jns 0x1401f72e6
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
mov rax, qword [r15 + 0x5a0]
cmp rax, qword [r15 + 0x5a8]
je 0x1401f7359
lea rbx, [rsp + 0x1d8]
movaps xmm6, xmmword [0x140299a90]
lea r13, [rsp + 0x1c0]
movabs rdi, 0xaaaaaaaaaaaaaaab
xorps xmm7, xmm7
xor r14d, r14d
jmp 0x1401f92e7
mov rax, qword [rsp + 0xf8]
mov dword [rax + 0xc4], r14d
test cl, cl
jns 0x1401f7342
mov rcx, qword [rsp + 0x1d8]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f7359
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
lea rcx, [rsp + 0xa0]
movabs rsi, 0xaaaaaaaaaaaaaaaa
mov qword [rcx + 0x50], rsi
movaps xmm6, xmmword [0x140299a90]
movaps xmmword [rcx + 0x40], xmm6
movaps xmmword [rcx + 0x30], xmm6
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.1402056f0
lea rdi, [rsp + 0x130]
movaps xmmword [rdi], xmm6
movaps xmmword [rdi - 0x10], xmm6
mov qword [rdi + 0x10], rsi
mov qword [rdi], 0
mov dword [rdi - 8], 0xaaaaaa00
mov rcx, rdi
xor edx, edx
call fcn.1401f1ee0
xorps xmm7, xmm7
movups xmmword [rdi + 8], xmm7
lea rcx, [rsp + 0xc8]
lea rdx, [rsp + 0x120]
call fcn.1401fb7b0
test al, al
je 0x1401f74c5
movaps xmmword [rsp + 0x60], xmm7
mov qword [rsp + 0x70], 0
lea rcx, [rsp + 0x120]
lea rbx, [rsp + 0x1c0]
mov rdx, rbx
call fcn.1401f19f0
mov r12, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rsp + 0x150], rax
cmp r12, rax
je 0x1401f7441
xorps xmm7, xmm7
movabs r13, 0x7ffffffffffffff8
jmp 0x1401f81ec
mov r12, qword [rsp + 0x1c0]
mov r15, qword [rsp + 0x198]
lea rbx, [rsp + 0x1c0]
test r12, r12
jne 0x1401f9b44
mov rdi, qword [rsp + 0x60]
cmp rdi, qword [rsp + 0x68]
je 0x1401f74bc
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1c0], xmm0
xor eax, eax
mov qword [rsp + 0x1d0], rax
lea rdi, [rsp + 0x40]
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm0
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x60]
xor ecx, ecx
mov edx, 0x6b
mov r8, rdi
call fcn.140098460
cmp byte [rdi + 0x17], 0
jns 0x1401f74a0
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f74b7
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
mov rdi, qword [rsp + 0x60]
test rdi, rdi
jne 0x1401f9b97
mov rdi, qword [r15 + 0x638]
test rdi, rdi
jne 0x1401f7555
mov ecx, 0x2a8
call fcn.1401a9d88
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x1402a0c90]
movups xmmword [rax + 0x30], xmm0
lea rcx, [rax + 0x40]
lea rbx, [rax + 0x1e8]
mov r8d, 0x1a4
xor edx, edx
call fcn.1401e5d50
mov r8d, 0xc0
mov rcx, rbx
xor edx, edx
call fcn.1401e5d50
mov rcx, rdi
call fcn.1401fa2c0
mov rbx, qword [r15 + 0x638]
mov qword [r15 + 0x638], rdi
test rbx, rbx
je 0x1401f7555
mov rcx, rbx
call fcn.1400955c0
mov rcx, rbx
call fcn.1401a9dc4
mov rdi, qword [r15 + 0x638]
movsx rax, byte [rsp + 0xf7]
mov rcx, rax
test rax, rax
jns 0x1401f756e
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1401f7731
test al, al
js 0x1401f7585
lea rbx, [rsp + 0xe0]
jmp 0x1401f758d
mov rbx, qword [rsp + 0xe0]
test rbx, rbx
je 0x1401f7e03
mov rcx, rbx
call fcn.1401ce1a0
movabs r13, 0x7ffffffffffffff8
cmp rax, r13
jae 0x1401fa2a3
mov r14, rax
cmp rax, 0x16
ja 0x1401f9cc9
lea rcx, [rsp + 0x1c0]
mov byte [rcx + 0x17], r14b
lea rsi, [rcx + r14]
cmp rbx, rcx
jb 0x1401f75dc
cmp rbx, rsi
jb 0x1401f7e03
test r14, r14
je 0x1401f75ec
mov rdx, rbx
mov r8, r14
call fcn.1401e56b0
mov byte [rsi], 0
lea r14, [rsp + 0x1c0]
mov rcx, r14
xor edx, edx
mov r8d, 0xa
call fcn.1402253f0
mov rbx, rax
cmp byte [r14 + 0x17], 0
jns 0x1401f761e
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
test rbx, rbx
jle 0x1401f7731
lea rbp, [rdi + 0x218]
cmp byte [rdi + 0x22f], 0
mov r15, rbp
jns 0x1401f7647
mov r15, qword [rbp]
test r15, r15
je 0x1401f7e03
mov rcx, r15
call fcn.1401ce1a0
cmp rax, r13
jae 0x1401fa2a3
mov r12, rax
cmp rax, 0x16
ja 0x1401f9d0f
mov byte [rsp + 0x1d7], r12b
lea rsi, [r14 + r12]
cmp r15, r14
jb 0x1401f767f
cmp r15, rsi
jb 0x1401f7e03
test r12, r12
je 0x1401f7692
mov rcx, r14
mov rdx, r15
mov r8, r12
call fcn.1401e56b0
mov byte [rsi], 0
lea r15, [rsp + 0x1c0]
mov rcx, r15
xor edx, edx
mov r8d, 0xa
call fcn.1402253f0
mov r14, rax
cmp byte [r15 + 0x17], 0
jns 0x1401f76c4
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
cmp rbx, r14
je 0x1401f7731
lea rsi, [rdi + 0x230]
cmp byte [rdi + 0x247], 0
jns 0x1401f76e1
mov rcx, qword [rsi]
call fcn.1401a9dc4
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
lea rcx, [rsp + 0x1c0]
mov rdx, rbx
call fcn.1400aa5b0
cmp byte [rdi + 0x22f], 0
jns 0x1401f7711
mov rcx, qword [rbp]
call fcn.1401a9dc4
mov rax, qword [rsp + 0x1d0]
mov qword [rbp + 0x10], rax
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rbp], xmm0
mov rcx, rdi
call fcn.1401f4a90
cmp byte [rsp + 0xa0], 1
mov r13, qword [rsp + 0x198]
jne 0x1401f78eb
cmp byte [rsp + 0xa1], 1
jne 0x1401f7766
mov rax, qword [0x1402ecb00]
mov dl, byte [rax + 0xbc]
mov rcx, r13
call fcn.14009c250
cmp byte [rsp + 0xa2], 0
jne 0x1401f777e
cmp byte [rsp + 0xa3], 1
jne 0x1401f7870
mov rcx, r13
call fcn.140206a80
mov ebx, eax
xor eax, eax
lea rsi, [rsp + 0x40]
mov qword [rsi + 0x10], rax
xorps xmm0, xmm0
movaps xmmword [rsi], xmm0
lea r15, [rsp + 0x60]
mov qword [r15 + 0x10], rax
movaps xmmword [r15], xmm0
lea r12, [r13 + 0x438]
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.14009bb40
mov qword [rsp + 0x20], rsi
lea r14, [rsp + 0x1c0]
mov rcx, r14
mov rdx, rdi
mov r8, r12
mov r9, r15
call fcn.140099f10
cmp byte [r14 + 0x17], 0
jns 0x1401f77ea
mov r14, qword [rsp + 0x1c0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebp, eax
cmp byte [rsp + 0x1d7], 0
jns 0x1401f780c
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
cmp byte [rsp + 0x97], 0
jns 0x1401f7823
mov rcx, qword [rsp + 0x80]
call fcn.1401a9dc4
cmp byte [rsp + 0x77], 0
jns 0x1401f7834
mov rcx, qword [rsp + 0x60]
call fcn.1401a9dc4
cmp byte [rsp + 0x57], 0
jns 0x1401f7845
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
test bpl, 0x10
jne 0x1401f7870
mov al, byte [rsp + 0xa3]
test bl, bl
je 0x1401f9d55
test al, al
jne 0x1401fa0e7
cmp byte [rsp + 0xa2], 1
je 0x1401f9f43
cmp byte [rsp + 0xa4], 1
jne 0x1401f7899
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0xb9], 1
jne 0x1401f7899
mov dl, byte [rsp + 0xa5]
mov rcx, r13
call fcn.140206be0
cmp byte [rsp + 0xa6], 1
jne 0x1401f78c2
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0xb8], 1
jne 0x1401f78c2
mov dl, byte [rsp + 0xa7]
mov rcx, r13
call fcn.140207fc0
cmp byte [rsp + 0xa8], 1
jne 0x1401f78eb
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0xbb], 1
jne 0x1401f78eb
mov dl, byte [rsp + 0xa9]
mov rcx, r13
call fcn.140209620
mov rdx, qword [0x1402ecb00]
lea rcx, [0x14029ee6e]
cmp byte [rdx + 0x7c], 0
lea rax, [0x14029ee79]
mov r8, rax
cmovne r8, rcx
lea r9, [rsp + 0x1c1]
mov byte [r9 + 0x16], 1
lea r10, [rsp + 0x1c0]
cmp r8, r10
setb r10b
cmp r8, r9
setae r9b
or r9b, r10b
je 0x1401f7e03
mov r8b, byte [r8]
lea r9, [rsp + 0x1d8]
mov byte [r9 - 0x18], r8b
mov byte [r9 - 0x17], 0
cmp byte [rdx + 0xba], 0
mov r8, rax
cmovne r8, rcx
mov byte [r9 + 0x17], 1
lea r10, [rsp + 0x1d9]
cmp r8, r9
setb r9b
cmp r8, r10
setae r10b
or r10b, r9b
je 0x1401f7e03
mov r8b, byte [r8]
lea r9, [rsp + 0x1f0]
mov byte [r9 - 0x18], r8b
mov byte [r9 - 0x17], 0
cmp byte [rdx + 0xb9], 0
mov r8, rax
cmovne r8, rcx
mov byte [r9 + 0x17], 1
lea r10, [rsp + 0x1f1]
cmp r8, r9
setb r9b
cmp r8, r10
setae r10b
or r10b, r9b
je 0x1401f7e03
mov r8b, byte [r8]
lea r9, [rsp + 0x208]
mov byte [r9 - 0x18], r8b
mov byte [r9 - 0x17], 0
cmp byte [rdx + 0xb8], 0
mov r8, rax
cmovne r8, rcx
mov byte [r9 + 0x17], 1
lea r10, [rsp + 0x209]
cmp r8, r9
setb r9b
cmp r8, r10
setae r10b
or r10b, r9b
je 0x1401f7e03
mov r8b, byte [r8]
lea r9, [rsp + 0x220]
mov byte [r9 - 0x18], r8b
mov byte [r9 - 0x17], 0
cmp byte [rdx + 0xbb], 0
mov r8, rax
cmovne r8, rcx
mov byte [r9 + 0x17], 1
lea r10, [rsp + 0x221]
cmp r8, r9
setb r9b
cmp r8, r10
setae r10b
or r10b, r9b
je 0x1401f7e03
mov r8b, byte [r8]
lea r9, [rsp + 0x238]
mov byte [r9 - 0x18], r8b
mov byte [r9 - 0x17], 0
cmp byte [rdx + 0x98], 0
mov rdx, rax
cmovne rdx, rcx
mov byte [r9 + 0x17], 1
lea r8, [rsp + 0x239]
cmp rdx, r9
setb r9b
cmp rdx, r8
setae r8b
or r8b, r9b
je 0x1401f7e03
mov dl, byte [rdx]
lea r8, [rsp + 0x250]
cmp byte [rsp + 0xa0], 0
mov byte [r8 - 0x18], dl
mov rdx, rax
cmovne rdx, rcx
mov byte [r8 - 0x17], 0
mov byte [r8 + 0x17], 1
lea r9, [rsp + 0x251]
cmp rdx, r8
setb r8b
cmp rdx, r9
setae r9b
or r9b, r8b
je 0x1401f7e03
mov dl, byte [rdx]
lea r8, [rsp + 0x268]
cmp byte [rsp + 0xa1], 0
mov byte [r8 - 0x18], dl
mov rdx, rax
cmovne rdx, rcx
mov byte [r8 - 0x17], 0
mov byte [r8 + 0x17], 1
lea r9, [rsp + 0x269]
cmp rdx, r8
setb r8b
cmp rdx, r9
setae r9b
or r9b, r8b
je 0x1401f7e03
mov dl, byte [rdx]
lea r8, [rsp + 0x280]
cmp byte [rsp + 0xa2], 0
mov byte [r8 - 0x18], dl
mov rdx, rax
cmovne rdx, rcx
mov byte [r8 - 0x17], 0
mov byte [r8 + 0x17], 1
lea r9, [rsp + 0x281]
cmp rdx, r8
setb r8b
cmp rdx, r9
setae r9b
or r9b, r8b
je 0x1401f7e03
mov dl, byte [rdx]
lea r8, [rsp + 0x298]
mov byte [r8 - 0x18], dl
cmp byte [rsp + 0xa3], 0
cmovne rax, rcx
mov byte [r8 - 0x17], 0
mov byte [r8 + 0x17], 1
lea rcx, [rsp + 0x299]
cmp rax, r8
setb dl
cmp rax, rcx
setae cl
or cl, dl
je 0x1401f7e03
mov al, byte [rax]
mov byte [rsp + 0x298], al
mov byte [rsp + 0x299], 0
mov ecx, 0xf0
call fcn.1401a9d88
mov rsi, rax
mov qword [rsp + 0x80], rax
add rax, 0xf0
mov qword [rsp + 0x90], rax
xor eax, eax
jmp 0x1401f7c03
lea rax, [rsp + rbx]
add rax, 0x1c0
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
lea rax, [rbx + 0x18]
cmp rax, 0xf0
je 0x1401f7c33
mov rcx, rsi
add rcx, rax
je 0x1401f7e03
mov rbx, rax
cmp byte [rsp + rax + 0x1d7], 0
jns 0x1401f7bdf
mov rdx, qword [rsp + rbx + 0x1c0]
mov r8, qword [rsp + rbx + 0x1c8]
call fcn.140118510
jmp 0x1401f7bf7
add rax, rsi
lea r9, [rsp + 0x80]
mov qword [r9 + 8], rax
xor eax, eax
lea rcx, [rsp + 0x40]
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movaps xmmword [rcx], xmm0
lea rdi, [rsp + 0x60]
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm0
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov edx, 0x66
mov r8, rdi
call fcn.140098460
cmp byte [rdi + 0x17], 0
jns 0x1401f7c83
mov rcx, qword [rsp + 0x60]
call fcn.1401a9dc4
cmp byte [rsp + 0x57], 0
jns 0x1401f7c94
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
test rsi, rsi
jne 0x1401f7dd9
cmp byte [rsp + 0x2af], 0
jns 0x1401f7cb4
mov rcx, qword [rsp + 0x298]
call fcn.1401a9dc4
cmp byte [rsp + 0x297], 0
jns 0x1401f7ccb
mov rcx, qword [rsp + 0x280]
call fcn.1401a9dc4
cmp byte [rsp + 0x27f], 0
jns 0x1401f7ce2
mov rcx, qword [rsp + 0x268]
call fcn.1401a9dc4
cmp byte [rsp + 0x267], 0
jns 0x1401f7cf9
mov rcx, qword [rsp + 0x250]
call fcn.1401a9dc4
cmp byte [rsp + 0x24f], 0
jns 0x1401f7d10
mov rcx, qword [rsp + 0x238]
call fcn.1401a9dc4
cmp byte [rsp + 0x237], 0
jns 0x1401f7d27
mov rcx, qword [rsp + 0x220]
call fcn.1401a9dc4
cmp byte [rsp + 0x21f], 0
jns 0x1401f7d3e
mov rcx, qword [rsp + 0x208]
call fcn.1401a9dc4
cmp byte [rsp + 0x207], 0
jns 0x1401f7d55
mov rcx, qword [rsp + 0x1f0]
call fcn.1401a9dc4
cmp byte [rsp + 0x1ef], 0
jns 0x1401f7d6c
mov rcx, qword [rsp + 0x1d8]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f7d83
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
lea rcx, [rsp + 0x120]
call fcn.1401efc20
cmp byte [rsp + 0xf7], 0
jns 0x1401f7da7
mov rcx, qword [rsp + 0xe0]
call fcn.1401a9dc4
cmp byte [rsp + 0xdf], 0
jns 0x1401f7dbe
mov rcx, qword [rsp + 0xc8]
call fcn.1401a9dc4
cmp byte [rsp + 0xc7], 0
jns 0x1401f6ee5
mov rcx, qword [rsp + 0xb0]
jmp 0x1401f6ee0
mov rax, rsi
add rax, rbx
je 0x1401f7e03
cmp byte [rsi + rbx + 0x17], 0
js 0x1401f9c88
add rbx, 0xffffffffffffffe8
cmp rbx, 0xffffffffffffffe8
jne 0x1401f7dd9
mov rcx, rsi
call fcn.1401a9dc4
jmp 0x1401f7c9d
ud2
mov byte [rsp + 0x177], dil
lea rax, [rsp + 0x160]
jmp 0x1401f7e91
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x170], rcx
movaps xmmword [rsp + 0x160], xmm6
mov r15, rbx
test al, al
jns 0x1401f7e3b
mov r15, qword [rbx]
cmp rdi, r13
jae 0x1401fa207
cmp rdi, 0xa
jbe 0x1401f7e05
mov rax, rdi
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0x160], rax
bts rsi, 0x3f
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x168], rdi
xor ecx, ecx
movsx edx, byte [r15 + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp rdi, rcx
jne 0x1401f7e93
mov word [rax + rcx*2], 0
jmp 0x1401f7eee
movaps xmmword [rsp + 0x100], xmm7
mov qword [rsp + 0x110], 0
movsx rax, byte [rbx + 0x17]
mov rdi, rax
test rax, rax
jns 0x1401f7ed1
mov rdi, qword [rbx + 8]
test rdi, rdi
jne 0x1401f7e17
movaps xmmword [rsp + 0x160], xmm7
mov qword [rsp + 0x170], 0
movsx rax, byte [r12 + 0x17]
mov rdi, rax
test rax, rax
jns 0x1401f7f01
mov rdi, qword [r12 + 8]
test rdi, rdi
je 0x1401f7fed
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x190], rcx
movaps xmmword [rsp + 0x180], xmm6
mov r15, r12
test al, al
jns 0x1401f7f2f
mov r15, qword [r12]
cmp rdi, r13
jae 0x1401fa214
cmp rdi, 0xa
jbe 0x1401f7fdb
mov rax, rdi
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0x180], rax
bts rsi, 0x3f
mov qword [rsp + 0x190], rsi
mov qword [rsp + 0x188], rdi
xor ecx, ecx
movsx edx, byte [r15 + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp rdi, rcx
jne 0x1401f7f8b
mov word [rax + rcx*2], 0
mov sil, byte [rsp + 0x197]
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x160]
lea r8, [rsp + 0x100]
call fcn.14009c0b0
test sil, sil
jns 0x1401f801e
mov rcx, qword [rsp + 0x180]
call fcn.1401a9dc4
jmp 0x1401f801e
mov byte [rsp + 0x197], dil
lea rax, [rsp + 0x180]
jmp 0x1401f7f89
movaps xmmword [rsp + 0x180], xmm7
mov qword [rsp + 0x190], 0
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x160]
lea r8, [rsp + 0x100]
call fcn.14009c0b0
cmp byte [rsp + 0x177], 0
jns 0x1401f8035
mov rcx, qword [rsp + 0x160]
call fcn.1401a9dc4
cmp byte [rsp + 0x117], 0
jns 0x1401f804c
mov rcx, qword [rsp + 0x100]
call fcn.1401a9dc4
mov rdi, qword [rsp + 0x68]
cmp rdi, qword [rsp + 0x70]
jae 0x1401f808c
test rdi, rdi
je 0x1401f7e03
cmp byte [rbx + 0x17], 0
js 0x1401f8077
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
jmp 0x1401f8086
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
mov rcx, rdi
call fcn.140118510
add rdi, 0x18
jmp 0x1401f809c
lea rcx, [rsp + 0x60]
mov rdx, rbx
call fcn.140196b60
mov rdi, rax
mov qword [rsp + 0x68], rdi
cmp byte [rsp + 0x97], 0
jns 0x1401f80b8
mov rcx, qword [rsp + 0x80]
call fcn.1401a9dc4
add rbx, 0x18
cmp rbx, rbp
je 0x1401f81d0
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x90], rax
movaps xmmword [rsp + 0x80], xmm6
mov rcx, r14
mov rdx, rbx
call fcn.1401f1960
mov rcx, rax
lea rdx, [rsp + 0x80]
call fcn.1401f0520
movsx rax, byte [rsp + 0x97]
mov rdi, rax
test rax, rax
jns 0x1401f8113
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x1401f7eac
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x110], rcx
movaps xmmword [rsp + 0x100], xmm6
lea r15, [rsp + 0x80]
test al, al
jns 0x1401f814a
mov r15, qword [rsp + 0x80]
cmp rdi, r13
jae 0x1401fa1dc
cmp rdi, 0xa
jbe 0x1401f81be
mov rax, rdi
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0x100], rax
bts rsi, 0x3f
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x108], rdi
xor ecx, ecx
movsx edx, byte [r15 + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp rdi, rcx
jne 0x1401f81a2
mov word [rax + rcx*2], 0
jmp 0x1401f7ec0
mov byte [rsp + 0x117], dil
lea rax, [rsp + 0x100]
jmp 0x1401f81a0
mov rbx, qword [rsp + 0x40]
test rbx, rbx
jne 0x1401f8237
add r12, 0x18
cmp r12, qword [rsp + 0x150]
je 0x1401f7429
movsx r8, byte [r12 + 0x17]
mov rdx, r12
test r8, r8
jns 0x1401f8203
mov rdx, qword [r12]
mov r8, qword [r12 + 8]
add r8, rdx
lea rcx, [rsp + 0x120]
call fcn.1401f1540
mov r14, rax
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.1401f19f0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
cmp rbx, rbp
je 0x1401f81d5
jmp 0x1401f80c5
mov rsi, qword [rsp + 0x48]
mov rcx, rbx
cmp rbx, rsi
je 0x1401f8268
add rsi, 0xffffffffffffffe8
test rsi, rsi
je 0x1401f7e03
cmp byte [rsi + 0x17], 0
js 0x1401f8277
lea rax, [rsi - 0x18]
cmp rsi, rbx
mov rsi, rax
jne 0x1401f8248
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x48], rbx
call fcn.1401a9dc4
jmp 0x1401f81da
mov rcx, qword [rsi]
call fcn.1401a9dc4
jmp 0x1401f8257
mov rbp, rdx
add rbp, rsi
je 0x1401f8ac8
xor r11d, r11d
movzx r15d, word [rbp + r11*2]
cmp r15w, word [r10 + r11*2]
jne 0x1401f82ea
inc r11
cmp r8, r11
jne 0x1401f8290
cmp rbp, qword [rsp + 0x158]
lea r15, [0x1402a0d5e]
je 0x1401f8ac8
sub rbp, rbx
mov rdx, rbp
add rdx, 2
je 0x1401f8ac8
sar rbp, 1
cmp rbp, r9
ja 0x1401fa22e
cmp r8, 0xffffffffffffffff
lea r12, [rsp + 0x40]
jne 0x1401f8617
jmp 0x1401fa238
mov rbp, qword [rsp + 0x150]
sub rbp, rdx
add rdx, rsi
add rdx, 2
sub rbp, rsi
sar rbp, 1
cmp rbp, r8
lea r15, [0x1402a0d5e]
jge 0x1401f8aa1
jmp 0x1401f8ac8
mov r13, rbx
add r13, rsi
je 0x1401f8d7c
xor r11d, r11d
movzx r15d, word [r13 + r11*2]
cmp r15w, word [r10 + r11*2]
jne 0x1401f837c
inc r11
cmp r8, r11
jne 0x1401f8326
cmp r13, qword [rsp + 0x158]
lea r15, [0x1402a0d5e]
je 0x1401f8d7c
sub r13, rdx
mov rdx, r13
add rdx, 2
je 0x1401f8d7c
sar r13, 1
cmp r13, r9
ja 0x1401fa22e
cmp r8, 0xffffffffffffffff
lea rsi, [rsp + 0x40]
jne 0x1401f83d6
jmp 0x1401fa25b
mov r13, qword [rsp + 0x150]
sub r13, rbx
add rbx, rsi
add rbx, 2
sub r13, rsi
sar r13, 1
cmp r13, r8
lea r15, [0x1402a0d5e]
jge 0x1401f8d55
jmp 0x1401f8d7c
mov byte [rsp + 0xb7], r12b
lea rcx, [rsp + 0xa0]
jmp 0x1401f85cc
mov byte [rsp + 0xb7], r12b
lea rax, [rsp + 0xa0]
jmp 0x1401f84af
xor r13d, r13d
mov rcx, rsi
mov rdx, r13
call fcn.1401199d0
mov r8d, 0x20a
lea rcx, [rsp + 0x1c0]
mov dl, 0xaa
call fcn.1401e5d50
mov qword [rsp + 0x60], 0x104
movsx rax, byte [0x1402ebd97]
mov r12, rax
test rax, rax
jns 0x1401f8416
mov r12, qword [0x1402ebd88]
test r12, r12
je 0x1401f84e3
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xb0], rcx
movaps xmmword [rsp + 0xa0], xmm6
lea rbx, [0x1402ebd80]
test al, al
jns 0x1401f844b
mov rbx, qword [0x1402ebd80]
movabs rax, 0x7ffffffffffffff8
cmp r12, rax
jae 0x1401fa1cf
cmp r12, 0xa
jbe 0x1401f83be
mov rax, r12
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0xa0], rax
bts rsi, 0x3f
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa8], r12
xor ecx, ecx
movsx edx, byte [rbx + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r12, rcx
jne 0x1401f84b1
mov word [rax + rcx*2], 0
cmp byte [rsp + 0xb7], 0
lea r9, [rsp + 0xa0]
jns 0x1401f84ff
mov r9, qword [rsp + 0xa0]
jmp 0x1401f84ff
movaps xmmword [rsp + 0xa0], xmm7
mov qword [rsp + 0xb0], 0
lea r9, [rsp + 0xa0]
mov r8d, 0x105
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x1c0]
call fcn.1401c0c74
test eax, eax
sete bl
cmp qword [rsp + 0x60], 0
setne sil
cmp byte [rsp + 0xb7], 0
jns 0x1401f853d
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
and bl, sil
je 0x1401f86b7
mov rax, qword [rsp + 0x60]
mov word [rsp + rax*2 + 0x1c0], 0
lea rcx, [rsp + 0x1c0]
call fcn.1401aa1e8
mov r12, rax
movabs rax, 0x7ffffffffffffff8
cmp r12, rax
jae 0x1401fa1cf
cmp r12, 0xa
jbe 0x1401f83a9
mov rax, r12
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov rcx, rax
mov qword [rsp + 0xa0], rax
bts rsi, 0x3f
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa8], r12
lea rsi, [rcx + r12*2]
lea rdx, [rsp + 0x1c0]
cmp rdx, rcx
setb al
cmp rdx, rsi
setae dl
or dl, al
je 0x1401f7e03
test r12, r12
je 0x1401f8604
add r12, r12
lea rdx, [rsp + 0x1c0]
mov r8, r12
call fcn.1401e56b0
mov word [rsi], 0
mov al, byte [rsp + 0xb7]
jmp 0x1401f86cb
xor ebp, ebp
mov rcx, r12
mov rdx, rbp
call fcn.1401199d0
lea rsi, [rsp + 0x1c0]
mov rcx, rsi
call fcn.14009bc10
movsx r9, byte [rsp + 0x1d7]
test r9, r9
jns 0x1401f8650
mov r9, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1c0]
mov rcx, r12
mov rdx, rbp
mov r8, rsi
call fcn.1400522b0
cmp byte [rsp + 0x1d7], 0
jns 0x1401f8718
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
jmp 0x1401f8718
movaps xmmword [rsp + 0xa0], xmm7
mov qword [rsp + 0xb0], 0
jmp 0x1401f890c
movaps xmmword [rsp + 0x40], xmm7
mov qword [rsp + 0x50], 0
jmp 0x1401f883d
mov byte [rsp + 0x57], r14b
mov rax, r12
jmp 0x1401f8824
mov byte [rsp + 0xb7], 0
mov word [rsp + 0xa0], 0
xor eax, eax
lea r12, [rsp + 0x40]
test al, al
movzx r9d, al
cmovs r9, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xa0]
lea rax, [rsp + 0xa0]
cmovns r8, rax
mov rcx, r12
mov rdx, r13
call fcn.1400522b0
cmp byte [rsp + 0xb7], 0
jns 0x1401f8715
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
mov r13, rbp
test r14b, r14b
jns 0x1401f8725
mov rcx, r13
call fcn.1401a9dc4
cmp byte [rsp + 0x57], 0
mov rcx, r12
jns 0x1401f8734
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
mov r15, qword [rsp + 0x198]
je 0x1401f72c7
cmp byte [rsp + 0x57], 0
jns 0x1401f875b
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
inc rdi
mov rax, qword [r15 + 0x588]
mov rcx, qword [r15 + 0x590]
sub rcx, rax
sar rcx, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rcx, rdx
cmp rdi, rcx
jae 0x1401f72e6
lea rcx, [rdi + rdi*2]
movabs rdx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x50], rdx
movaps xmmword [rsp + 0x40], xmm6
movsx rdx, byte [rax + rcx*8 + 0x17]
mov r14, rdx
test rdx, rdx
jns 0x1401f87b5
mov r14, qword [rax + rcx*8 + 8]
test r14, r14
je 0x1401f8697
lea r15, [rax + rcx*8]
test dl, dl
jns 0x1401f87c9
mov r15, qword [r15]
movabs rax, 0x7ffffffffffffff8
cmp r14, rax
jae 0x1401fa1e9
cmp r14, 0xa
jbe 0x1401f86aa
mov rax, r14
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0x40], rax
bts rsi, 0x3f
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], r14
xor ecx, ecx
movsx edx, byte [r15 + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r14, rcx
jne 0x1401f8826
mov word [rax + rcx*2], 0
movsx rax, byte [0x1402ebd67]
mov r14, rax
test rax, rax
lea r15, [0x1402a0d5e]
jns 0x1401f885b
mov r14, qword [0x1402ebd58]
test r14, r14
je 0x1401f867e
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xb0], rcx
movaps xmmword [rsp + 0xa0], xmm6
lea rbx, [0x1402ebd50]
test al, al
jns 0x1401f8890
mov rbx, qword [0x1402ebd50]
movabs rax, 0x7ffffffffffffff8
cmp r14, rax
jae 0x1401fa1cf
cmp r14, 0xa
jbe 0x1401f91d4
mov rax, r14
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0xa0], rax
bts rsi, 0x3f
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa8], r14
xor ecx, ecx
movsx edx, byte [rbx + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r14, rcx
jne 0x1401f88f6
mov word [rax + rcx*2], 0
mov r9d, 1
lea rcx, [rsp + 0xa0]
xor edx, edx
mov r8, r15
call fcn.1400522b0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1d0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
movsx rax, byte [rsp + 0x1d7]
test rax, rax
jns 0x1401f9a3d
mov rdx, qword [rsp + 0x1d0]
movabs rax, 0x7fffffffffffffff
and rdx, rax
dec rdx
mov rax, qword [rsp + 0x1c8]
cmp rdx, rax
je 0x1401f9a52
mov rcx, qword [rsp + 0x1c0]
lea rdx, [rcx + rax*2]
lea r8, [rcx + rax*2]
add r8, 2
cmp rdx, r15
seta r9b
cmp r8, r15
setbe r8b
or r8b, r9b
je 0x1401f7e03
mov word [rdx], Ordinal_41
lea rdx, [rax + 1]
cmp byte [rsp + 0x1d7], 0
jns 0x1401f9a89
mov qword [rsp + 0x1c8], rdx
mov word [rcx + rax*2 + 2], 0
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x130], rax
movaps xmm0, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0x120], xmm0
movaps xmmword [rsp + 0x1c0], xmm7
mov qword [rsp + 0x1d0], 0
cmp byte [rsp + 0xb7], 0
jns 0x1401f8a1d
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
movsx r14, byte [rsp + 0x137]
test r14, r14
mov r8, r14
cmovs r8, qword [rsp + 0x128]
mov r13, qword [rsp + 0x120]
lea r10, [rsp + 0x120]
cmovs r10, r13
movsx rcx, byte [rsp + 0x57]
test rcx, rcx
mov rax, qword [rsp + 0x40]
mov rbx, r12
cmovs rbx, rax
test r8, r8
je 0x1401f8615
mov r9, rcx
test cl, cl
jns 0x1401f8a73
mov r9, qword [rsp + 0x48]
cmp r9, r8
jl 0x1401f8ac8
lea rdx, [r9 + r9]
lea r11, [rbx + r9*2]
mov qword [rsp + 0x158], r11
movzx r12d, word [r10]
add rdx, rbx
add rdx, 0xfffffffffffffffe
mov qword [rsp + 0x150], rdx
mov rbp, r9
mov rdx, rbx
mov r11, rbp
sub r11, r8
inc r11
je 0x1401f8ac8
inc rbp
xor esi, esi
cmp word [rdx + rsi], r12w
je 0x1401f8281
add rsi, 2
dec rbp
cmp r8, rbp
jne 0x1401f8ab1
movsx rax, byte [0x1402ebd97]
mov r12, rax
test rax, rax
jns 0x1401f8adf
mov r12, qword [0x1402ebd88]
test r12, r12
je 0x1401f9a24
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xb0], rcx
movaps xmmword [rsp + 0xa0], xmm6
lea rbx, [0x1402ebd80]
test al, al
jns 0x1401f8b14
mov rbx, qword [0x1402ebd80]
movabs rax, 0x7ffffffffffffff8
cmp r12, rax
jae 0x1401fa1cf
cmp r12, 0xa
jbe 0x1401f9a0f
mov rax, r12
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0xa0], rax
bts rsi, 0x3f
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa8], r12
xor ecx, ecx
movsx edx, byte [rbx + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r12, rcx
jne 0x1401f8b7a
mov word [rax + rcx*2], 0
mov r9d, 1
lea rcx, [rsp + 0xa0]
xor edx, edx
mov r8, r15
call fcn.1400522b0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1d0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
movsx rax, byte [rsp + 0x1d7]
test rax, rax
lea rsi, [rsp + 0x40]
jns 0x1401f9a98
mov rdx, qword [rsp + 0x1d0]
movabs rax, 0x7fffffffffffffff
and rdx, rax
dec rdx
mov rax, qword [rsp + 0x1c8]
cmp rdx, rax
je 0x1401f9aad
mov rcx, qword [rsp + 0x1c0]
lea rdx, [rcx + rax*2]
lea r8, [rcx + rax*2]
add r8, 2
cmp rdx, r15
seta r9b
cmp r8, r15
setbe r8b
or r8b, r9b
je 0x1401f7e03
mov word [rdx], Ordinal_41
lea rdx, [rax + 1]
cmp byte [rsp + 0x1d7], 0
jns 0x1401f9b35
mov qword [rsp + 0x1c8], rdx
mov word [rcx + rax*2 + 2], 0
mov rbp, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x1c8]
mov rax, qword [rcx]
mov qword [rsp + 0x60], rax
mov rax, qword [rcx + 7]
mov qword [rsp + 0x67], rax
test r14b, r14b
mov r14b, byte [rsp + 0x1d7]
movaps xmmword [rsp + 0x1c0], xmm7
mov qword [rsp + 0x1d0], 0
js 0x1401f9ae4
mov qword [rsp + 0x120], rbp
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x67]
lea rdx, [rsp + 0x128]
mov qword [rdx + 7], rcx
mov qword [rdx], rax
mov byte [rsp + 0x137], r14b
cmp byte [rsp + 0xb7], 0
jns 0x1401f8ce1
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
movzx r8d, r14b
test r14b, r14b
cmovs r8, qword [rsp + 0x128]
lea r10, [rsp + 0x120]
cmovs r10, rbp
movsx rcx, byte [rsp + 0x57]
test rcx, rcx
mov rax, qword [rsp + 0x40]
mov rdx, rsi
cmovs rdx, rax
test r8, r8
je 0x1401f83d3
mov r9, rcx
test cl, cl
jns 0x1401f8d27
mov r9, qword [rsp + 0x48]
cmp r9, r8
jl 0x1401f8d7c
lea r11, [r9 + r9]
lea rsi, [rdx + r9*2]
mov qword [rsp + 0x158], rsi
movzx r12d, word [r10]
add r11, rdx
add r11, 0xfffffffffffffffe
mov qword [rsp + 0x150], r11
mov r13, r9
mov rbx, rdx
mov r11, r13
sub r11, r8
inc r11
je 0x1401f8d7c
inc r13
xor esi, esi
cmp word [rbx + rsi], r12w
je 0x1401f8317
add rsi, 2
dec r13
cmp r8, r13
jne 0x1401f8d65
movsx rax, byte [0x1402ebd7f]
mov r12, rax
test rax, rax
jns 0x1401f8d93
mov r12, qword [0x1402ebd70]
test r12, r12
je 0x1401f918d
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xb0], rcx
movaps xmmword [rsp + 0xa0], xmm6
lea rbx, [0x1402ebd68]
test al, al
jns 0x1401f8dc8
mov rbx, qword [0x1402ebd68]
movabs rax, 0x7ffffffffffffff8
cmp r12, rax
jae 0x1401fa1cf
cmp r12, 0xa
jbe 0x1401f91a6
mov rax, r12
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0xa0], rax
bts rsi, 0x3f
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa8], r12
xor ecx, ecx
movsx edx, byte [rbx + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r12, rcx
jne 0x1401f8e2e
mov word [rax + rcx*2], 0
mov r9d, 1
lea rcx, [rsp + 0xa0]
xor edx, edx
mov r8, r15
call fcn.1400522b0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1d0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
movsx rax, byte [rsp + 0x1d7]
test rax, rax
lea r12, [rsp + 0x40]
jns 0x1401f9087
mov rdx, qword [rsp + 0x1d0]
movabs rax, 0x7fffffffffffffff
and rdx, rax
dec rdx
mov rax, qword [rsp + 0x1c8]
cmp rdx, rax
je 0x1401f909c
mov rcx, qword [rsp + 0x1c0]
lea rdx, [rcx + rax*2]
lea r8, [rcx + rax*2]
add r8, 2
cmp rdx, r15
seta r9b
cmp r8, r15
setbe r8b
or r8b, r9b
je 0x1401f7e03
mov word [rdx], Ordinal_41
lea rdx, [rax + 1]
cmp byte [rsp + 0x1d7], 0
jns 0x1401f91bb
mov qword [rsp + 0x1c8], rdx
mov word [rcx + rax*2 + 2], 0
mov r13, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x1c8]
mov rax, qword [rcx]
mov qword [rsp + 0x60], rax
mov rax, qword [rcx + 7]
mov qword [rsp + 0x67], rax
test r14b, r14b
mov r14b, byte [rsp + 0x1d7]
movaps xmmword [rsp + 0x1c0], xmm7
mov qword [rsp + 0x1d0], 0
js 0x1401f9036
mov qword [rsp + 0x120], r13
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x67]
lea rdx, [rsp + 0x128]
mov qword [rdx + 7], rcx
mov qword [rdx], rax
mov byte [rsp + 0x137], r14b
cmp byte [rsp + 0xb7], 0
jns 0x1401f8f95
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
movzx r8d, r14b
test r14b, r14b
cmovs r8, qword [rsp + 0x128]
lea r9, [rsp + 0x120]
cmovs r9, r13
movsx rcx, byte [rsp + 0x57]
test rcx, rcx
mov rax, qword [rsp + 0x40]
mov rdx, r12
cmovs rdx, rax
test r8, r8
je 0x1401f90d3
mov r10, rcx
test cl, cl
jns 0x1401f8fdb
mov r10, qword [rsp + 0x48]
cmp r10, r8
jl 0x1401f8718
lea r11, [r10 + r10]
lea rbp, [rdx + r10*2]
movzx r15d, word [r9]
add r11, rdx
add r11, 0xfffffffffffffffe
mov qword [rsp + 0x150], r11
mov rsi, r10
mov rbx, rdx
mov r11, rsi
sub r11, r8
inc r11
je 0x1401f8718
inc rsi
xor r11d, r11d
cmp word [rbx + r11], r15w
je 0x1401f90f5
add r11, 2
dec rsi
cmp r8, rsi
jne 0x1401f901a
jmp 0x1401f8718
mov rcx, rbp
call fcn.1401a9dc4
mov qword [rsp + 0x120], r13
mov rax, qword [rsp + 0x60]
cmp byte [rsp + 0x1d7], 0
mov rcx, qword [rsp + 0x67]
lea rdx, [rsp + 0x128]
mov qword [rdx + 7], rcx
mov qword [rdx], rax
mov byte [rsp + 0x137], r14b
jns 0x1401f8f7e
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
jmp 0x1401f8f7e
lea rcx, [rsp + 0x1c0]
cmp al, 0xa
jne 0x1401f8ec6
mov edx, 0xa
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov r8d, 1
lea rcx, [rsp + 0x1c0]
mov r9, rdx
call fcn.14014d400
jmp 0x1401f8f0f
xor ebp, ebp
mov rcx, r12
mov rdx, rbp
call fcn.1401199d0
lea rsi, [rsp + 0x1c0]
mov rcx, rsi
call fcn.1400a0270
jmp 0x1401f8632
mov qword [rsp + 0x158], rbp
mov rbp, rbx
add rbp, r11
je 0x1401f8718
xor esi, esi
movzx r12d, word [rbp + rsi*2]
cmp r12w, word [r9 + rsi*2]
jne 0x1401f915a
inc rsi
cmp r8, rsi
jne 0x1401f910b
cmp rbp, qword [rsp + 0x158]
je 0x1401f91ca
sub rbp, rdx
mov rdx, rbp
add rdx, 2
lea r12, [rsp + 0x40]
je 0x1401f8718
sar rbp, 1
cmp rbp, r10
ja 0x1401fa22e
cmp r8, 0xffffffffffffffff
jne 0x1401f90d5
jmp 0x1401fa280
mov rsi, qword [rsp + 0x150]
sub rsi, rbx
add rbx, r11
add rbx, 2
sub rsi, r11
sar rsi, 1
cmp rsi, r8
lea r12, [rsp + 0x40]
mov rbp, qword [rsp + 0x158]
jge 0x1401f9005
jmp 0x1401f8718
movaps xmmword [rsp + 0xa0], xmm7
mov qword [rsp + 0xb0], 0
jmp 0x1401f8e44
mov byte [rsp + 0xb7], r12b
lea rax, [rsp + 0xa0]
jmp 0x1401f8e2c
and dl, 0x7f
mov byte [rsp + 0x1d7], dl
jmp 0x1401f8f08
lea r12, [rsp + 0x40]
jmp 0x1401f8718
mov byte [rsp + 0xb7], r14b
lea rax, [rsp + 0xa0]
jmp 0x1401f88f4
xor ebp, ebp
jmp 0x1401f91f6
xor ebp, ebp
mov al, byte [rsp + 0x117]
test al, al
jns 0x1401f9207
mov rcx, qword [rsp + 0x100]
call fcn.1401a9dc4
cmp byte [rsp + 0x97], 0
jns 0x1401f921e
mov rcx, qword [rsp + 0x80]
call fcn.1401a9dc4
mov r13b, byte [rsp + 0x77]
jmp 0x1401f9250
mov rdx, qword [rsi]
mov r8, qword [rsi + 8]
mov rcx, r13
call fcn.140118510
jmp 0x1401f932d
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
mov rcx, rbx
call fcn.140118510
jmp 0x1401f9349
xor ebp, ebp
test r13b, r13b
jns 0x1401f925f
mov rcx, qword [rsp + 0x60]
call fcn.1401a9dc4
cmp byte [rsp + 0x57], 0
mov r15, qword [rsp + 0x198]
lea r13, [rsp + 0x1c0]
jns 0x1401f9280
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
mov cl, byte [rsp + 0x1ef]
test bpl, bpl
jne 0x1401f7322
movabs rdi, 0xaaaaaaaaaaaaaaab
test cl, cl
jns 0x1401f92ab
mov rcx, qword [rsp + 0x1d8]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f92c2
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
inc r14
mov rax, qword [r15 + 0x5a0]
mov rcx, qword [r15 + 0x5a8]
sub rcx, rax
sar rcx, 4
imul rcx, rdi
cmp r14, rcx
jae 0x1401f7359
lea rcx, [r14 + r14*2]
shl rcx, 4
lea rsi, [rax + rcx]
movaps xmmword [rsp + 0x1e0], xmm6
movaps xmmword [rsp + 0x1d0], xmm6
movaps xmmword [rsp + 0x1c0], xmm6
cmp byte [rax + rcx + 0x17], 0
js 0x1401f9225
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x1d0], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x1c0], xmm0
cmp byte [rsi + 0x2f], 0
js 0x1401f9239
add rsi, 0x18
mov rax, qword [rsi + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsi]
movups xmmword [rbx], xmm0
movsx rax, byte [rsp + 0x1d7]
mov rdx, rax
test rax, rax
jns 0x1401f9362
mov rdx, qword [rsp + 0x1c8]
mov cl, byte [rsp + 0x1ef]
cmp rdx, 6
jb 0x1401f929a
test cl, cl
js 0x1401f937c
movzx edx, cl
jmp 0x1401f9384
mov rdx, qword [rsp + 0x1e0]
test rdx, rdx
je 0x1401f929a
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x50], rcx
movaps xmmword [rsp + 0x40], xmm6
mov rcx, r13
test al, al
jns 0x1401f93b0
mov rcx, qword [rsp + 0x1c0]
mov byte [rsp + 0xb7], 4
lea rax, [rsp + 0xa0]
cmp rcx, rax
setb al
lea rdx, [rsp + 0xa4]
cmp rcx, rdx
setae dl
or dl, al
je 0x1401f7e03
mov eax, dword [rcx]
mov dword [rsp + 0xa0], eax
mov byte [rsp + 0xa4], 0
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x50], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x40], eax
mov al, byte [rsp + 0xa4]
mov byte [rsp + 0x44], al
mov rax, qword [rsp + 0xa5]
mov qword [rsp + 0x45], rax
movzx eax, word [rsp + 0xad]
mov word [rsp + 0x4d], ax
mov al, byte [rsp + 0xaf]
mov byte [rsp + 0x4f], al
movsx rsi, byte [rsp + 0x57]
lea rdi, [rsp + 0x40]
test rsi, rsi
jns 0x1401f944f
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x1401f9484
xor r15d, r15d
movsx ecx, byte [rdi + r15]
call fcn.1401aa108
mov byte [rdi + r15], al
inc r15
cmp rsi, r15
jne 0x1401f9457
cmp byte [rsp + 0xb7], 0
jns 0x1401f9484
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x70], rax
movaps xmmword [rsp + 0x60], xmm6
movsx rax, byte [rsp + 0x1d7]
mov r12, rax
test rax, rax
jns 0x1401f94b1
mov r12, qword [rsp + 0x1c8]
cmp r12, 4
jbe 0x1401fa1f3
test al, al
jns 0x1401f94c7
mov r13, qword [rsp + 0x1c0]
add r12, 0xfffffffffffffffb
movabs rax, 0x7ffffffffffffff8
cmp r12, rax
jae 0x1401fa1fd
cmp r12, 0x16
ja 0x1401f9543
mov byte [rsp + 0x77], r12b
lea rcx, [rsp + 0x60]
add r13, 5
lea rsi, [rcx + r12]
cmp r13, rcx
jb 0x1401f9504
cmp r13, rsi
jb 0x1401f7e03
test r12, r12
je 0x1401f9514
mov rdx, r13
mov r8, r12
call fcn.1401e56b0
mov byte [rsi], 0
movsx rax, byte [rsp + 0x57]
mov r8, rax
test rax, rax
jns 0x1401f952a
mov r8, qword [rsp + 0x48]
mov r13b, byte [rsp + 0x77]
test r8, r8
je 0x1401f924e
test r13b, r13b
js 0x1401f957f
movzx r12d, r13b
jmp 0x1401f9584
mov rax, r12
or rax, 7
lea rbp, [rax + 1]
cmp rax, 0x17
mov eax, Ordinal_26
cmove rbp, rax
mov rcx, rbp
call fcn.1401a9d88
mov rcx, rax
mov qword [rsp + 0x60], rax
bts rbp, 0x3f
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x68], r12
jmp 0x1401f94ee
mov r12, qword [rsp + 0x68]
test r12, r12
je 0x1401f924e
movsx r9, byte [0x1402ec907]
mov rcx, r9
test r9, r9
jns 0x1401f95a4
mov rcx, qword [0x1402ec8f8]
cmp rcx, r8
je 0x1401f95f0
xor ebp, ebp
jmp 0x1401f961c
movaps xmmword [rsp + 0x80], xmm7
mov qword [rsp + 0x90], 0
jmp 0x1401f96e3
mov byte [rsp + 0x97], r15b
lea rax, [rsp + 0x80]
jmp 0x1401f96cb
mov byte [rsp + 0x117], r12b
lea rax, [rsp + 0x100]
jmp 0x1401f9770
lea rdx, [rsp + 0x40]
test al, al
jns 0x1401f95fe
mov rdx, qword [rsp + 0x40]
lea rcx, [0x1402ec8f0]
test r9b, r9b
jns 0x1401f9611
mov rcx, qword [0x1402ec8f0]
call fcn.1401e5500
test eax, eax
sete bpl
movsx rax, byte [rsp + 0x1ef]
mov r15, rax
test rax, rax
jns 0x1401f9635
mov r15, qword [rsp + 0x1e0]
test r15, r15
je 0x1401f95ad
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x90], rcx
movaps xmmword [rsp + 0x80], xmm6
mov rdi, rbx
test al, al
jns 0x1401f9667
mov rdi, qword [rsp + 0x1d8]
movabs rax, 0x7ffffffffffffff8
cmp r15, rax
jae 0x1401fa221
cmp r15, 0xa
jbe 0x1401f95c6
mov rax, r15
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0x80], rax
bts rsi, 0x3f
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x88], r15
xor ecx, ecx
movsx edx, byte [rdi + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r15, rcx
jne 0x1401f96cd
mov word [rax + rcx*2], 0
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x110], rax
movaps xmmword [rsp + 0x100], xmm6
lea rdi, [rsp + 0x60]
test r13b, r13b
jns 0x1401f970c
mov rdi, qword [rsp + 0x60]
movabs rax, 0x7ffffffffffffff8
cmp r12, rax
jae 0x1401fa1dc
cmp r12, 0xa
jbe 0x1401f95db
mov rax, r12
or rax, 3
lea rsi, [rax + 1]
cmp rax, 0xb
mov eax, Ordinal_14
cmove rsi, rax
test rsi, rsi
js 0x1401fa1ca
lea rcx, [rsi + rsi]
call fcn.1401a9d88
mov qword [rsp + 0x100], rax
bts rsi, 0x3f
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x108], r12
xor ecx, ecx
movsx edx, byte [rdi + rcx]
mov word [rax + rcx*2], dx
inc rcx
cmp r12, rcx
jne 0x1401f9772
mov word [rax + rcx*2], 0
mov r8, qword [rsp + 0x108]
movsx rax, byte [rsp + 0x117]
test rax, rax
mov rcx, rax
cmovs rcx, r8
test rcx, rcx
je 0x1401f91e9
movsx rcx, byte [rsp + 0x97]
test rcx, rcx
jns 0x1401f97c2
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x1401f91ed
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xb0], rcx
movaps xmmword [rsp + 0xa0], xmm6
test al, al
js 0x1401f98df
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xb0], rax
movaps xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0xa0], xmm0
lea rsi, [rsp + 0xa0]
mov al, byte [rsp + 0xb7]
test al, al
mov rdx, qword [rsp + 0xa0]
mov rcx, rsi
cmovs rcx, rdx
cmp word [rcx], 0x5c
jne 0x1401f9852
mov r8d, 1
mov rcx, rsi
xor edx, edx
call fcn.1401199d0
mov al, byte [rsp + 0xb7]
mov rdx, qword [rsp + 0xa0]
test al, al
cmovns rdx, rsi
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x160], rax
movzx eax, bpl
mov rcx, 0xffffffff80000002
sub rcx, rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r12d, r12d
xor r8d, r8d
mov r9d, 1
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1401f98fc
xor r15d, r15d
xor r13d, r13d
cmp byte [rsp + 0xb7], 0
jns 0x1401f98b8
mov rcx, qword [rsp + 0xa0]
call fcn.1401a9dc4
test r13b, r13b
movzx eax, r13b
cmovns r15, rax
test r15, r15
setne bpl
test al, al
jns 0x1401f91ef
mov rcx, r12
call fcn.1401a9dc4
jmp 0x1401f91ef
mov rdx, qword [rsp + 0x100]
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.14015b370
jmp 0x1401f9815
mov dword [rsp + 0x180], 0
cmp byte [rsp + 0x97], 0
lea rdx, [rsp + 0x80]
jns 0x1401f9921
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x160]
lea rax, [rsp + 0x180]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x1401f9965
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r12d, r12d
jmp 0x1401f989e
movaps xmmword [rsp + 0x120], xmm7
mov qword [rsp + 0x130], 0
mov edx, dword [rsp + 0x180]
lea rax, [rsp + 0x120]
cmp rdx, 2
jae 0x1401f9c96
cmp byte [rsp + 0x97], 0
lea rdx, [rsp + 0x80]
jns 0x1401f99ac
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x160]
lea r8, [rsp + 0x180]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebp, eax
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r13b, byte [rsp + 0x137]
test ebp, ebp
je 0x1401f9c08
test r13b, r13b
jns 0x1401f9a04
mov rcx, qword [rsp + 0x120]
call fcn.1401a9dc4
xor r13d, r13d
xor r12d, r12d
jmp 0x1401f98a1
mov byte [rsp + 0xb7], r12b
lea rax, [rsp + 0xa0]
jmp 0x1401f8b78
movaps xmmword [rsp + 0xa0], xmm7
mov qword [rsp + 0xb0], 0
jmp 0x1401f8b90
lea rcx, [rsp + 0x1c0]
cmp al, 0xa
jne 0x1401f8989
mov edx, 0xa
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov r8d, 1
lea rcx, [rsp + 0x1c0]
mov r9, rdx
call fcn.14014d400
jmp 0x1401f89d2
and dl, 0x7f
mov byte [rsp + 0x1d7], dl
jmp 0x1401f89cb
lea rcx, [rsp + 0x1c0]
cmp al, 0xa
jne 0x1401f8c12
mov edx, 0xa
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov r8d, 1
lea rcx, [rsp + 0x1c0]
mov r9, rdx
call fcn.14014d400
jmp 0x1401f8c5b
mov rcx, r13
call fcn.1401a9dc4
mov qword [rsp + 0x120], rbp
mov rax, qword [rsp + 0x60]
cmp byte [rsp + 0x1d7], 0
mov rcx, qword [rsp + 0x67]
lea rdx, [rsp + 0x128]
mov qword [rdx + 7], rcx
mov qword [rdx], rax
mov byte [rsp + 0x137], r14b
jns 0x1401f8cca
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
jmp 0x1401f8cca
and dl, 0x7f
mov byte [rsp + 0x1d7], dl
jmp 0x1401f8c54
mov rsi, qword [rsp + 0x1c8]
mov rcx, r12
cmp r12, rsi
je 0x1401f9b7b
add rsi, 0xffffffffffffffe8
test rsi, rsi
je 0x1401f7e03
cmp byte [rsi + 0x17], 0
js 0x1401f9b8d
lea rax, [rsi - 0x18]
cmp rsi, r12
mov rsi, rax
jne 0x1401f9b58
mov rcx, qword [rsp + 0x1c0]
mov qword [rsp + 0x1c8], r12
call fcn.1401a9dc4
jmp 0x1401f744a
mov rcx, qword [rsi]
call fcn.1401a9dc4
jmp 0x1401f9b67
mov rsi, qword [rsp + 0x68]
mov rcx, rdi
cmp rdi, rsi
je 0x1401f9bc8
add rsi, 0xffffffffffffffe8
test rsi, rsi
je 0x1401f7e03
cmp byte [rsi + 0x17], 0
js 0x1401f9bd7
lea rax, [rsi - 0x18]
cmp rsi, rdi
mov rsi, rax
jne 0x1401f9ba8
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x68], rdi
call fcn.1401a9dc4
jmp 0x1401f74c5
mov rcx, qword [rsi]
call fcn.1401a9dc4
jmp 0x1401f9bb7
test al, al
js 0x1401f9bf5
movzx r8d, al
lea rdx, [0x1402ec800]
jmp 0x1401f6f6f
mov r8, qword [0x1402ec808]
mov rdx, qword [0x1402ec800]
jmp 0x1401f6f6f
movzx eax, r13b
test r13b, r13b
mov r12, qword [rsp + 0x120]
mov r15, qword [rsp + 0x128]
cmovs rax, r15
test rax, rax
je 0x1401f98a1
test r13b, r13b
lea rcx, [rsp + 0x120]
cmovs rcx, r12
cmp word [rcx + rax*2 - 2], 0
jne 0x1401f98a1
lea rdx, [rax - 1]
test r13b, r13b
js 0x1401f9c7e
and dl, 0x7f
mov byte [rsp + 0x137], dl
mov word [rcx + rax*2 - 2], 0
mov r12, qword [rsp + 0x120]
mov r15, qword [rsp + 0x128]
mov r13b, byte [rsp + 0x137]
jmp 0x1401f98a1
mov qword [rsp + 0x128], rdx
jmp 0x1401f9c5a
mov rcx, qword [rsi + rbx]
call fcn.1401a9dc4
jmp 0x1401f7dec
shr edx, 1
lea rsi, [rsp + 0x120]
mov rcx, rsi
xor r8d, r8d
call fcn.140180fd0
cmp byte [rsp + 0x137], 0
mov rax, rsi
jns 0x1401f9992
mov rax, qword [rsp + 0x120]
jmp 0x1401f9992
mov rax, r14
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r15d, Ordinal_26
cmovne r15, rcx
mov rcx, r15
call fcn.1401a9d88
mov rcx, rax
mov qword [rsp + 0x1c0], rax
bts r15, 0x3f
mov qword [rsp + 0x1d0], r15
mov qword [rsp + 0x1c8], r14
jmp 0x1401f75ca
mov rax, r12
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r13d, Ordinal_26
cmovne r13, rcx
mov rcx, r13
call fcn.1401a9d88
mov r14, rax
mov qword [rsp + 0x1c0], rax
bts r13, 0x3f
mov qword [rsp + 0x1d0], r13
mov qword [rsp + 0x1c8], r12
jmp 0x1401f766d
test al, al
je 0x1401f9e3e
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0x98], 1
jne 0x1401f9e3e
cmp dword [rax + 0x78], 2
jne 0x1401f9e3e
mov rcx, r13
mov dl, 1
mov r8d, 2
call fcn.14009fac0
test al, al
jne 0x1401f9e3e
lea rdx, [r13 + 0x1b0]
mov rcx, r13
call fcn.1400a0e90
lea rdi, [rsp + 0x1c0]
mov qword [rdi], 0x11e1a300
mov rcx, rdi
call fcn.1402263f0
mov r8d, 0xa0
add r8, qword [0x1402ecb00]
mov rcx, r13
mov edx, 2
call fcn.1400a1bb0
xor eax, eax
lea r9, [rsp + 0x60]
mov qword [r9 + 0x10], rax
xorps xmm0, xmm0
movaps xmmword [r9], xmm0
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm0
lea rbx, [rsp + 0x40]
mov qword [rbx + 0x10], rax
movaps xmmword [rbx], xmm0
mov qword [rsp + 0x20], rdi
mov ecx, 2
mov edx, 0x6f
mov r8, rbx
call fcn.140098460
cmp byte [rbx + 0x17], 0
jns 0x1401f9e1f
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f9e36
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
mov r13, qword [rsp + 0x198]
cmp byte [rsp + 0xa2], 1
jne 0x1401f7870
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0x7c], 1
jne 0x1401f7870
mov rcx, r13
mov dl, 1
mov r8d, 1
call fcn.14009fac0
test al, al
jne 0x1401f7870
mov rcx, r13
xor edx, edx
mov r8d, 1
call fcn.14009fac0
mov ebx, eax
lea rdx, [r13 + 0x138]
mov rcx, r13
call fcn.1400a0e90
lea rdi, [rsp + 0x1c0]
mov qword [rdi], 0x11e1a300
mov rcx, rdi
call fcn.1402263f0
mov r8, qword [0x1402ecb00]
sub r8, 0xffffffffffffff80
mov rcx, r13
test bl, bl
jne 0x1401f9ec9
mov rdx, r8
call fcn.1400a2b60
jmp 0x1401f9ed3
mov edx, 1
call fcn.1400a1bb0
xorps xmm0, xmm0
lea r9, [rsp + 0x60]
movaps xmmword [r9], xmm0
xor eax, eax
mov qword [r9 + 0x10], rax
mov qword [rsp + 0x1d0], rax
movaps xmmword [rsp + 0x1c0], xmm0
lea rbx, [rsp + 0x40]
mov qword [rbx + 0x10], rax
movaps xmmword [rbx], xmm0
mov qword [rsp + 0x20], rdi
mov ecx, 1
mov edx, 0x6f
mov r8, rbx
call fcn.140098460
cmp byte [rbx + 0x17], 0
jns 0x1401f9f28
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f7870
mov rcx, qword [rsp + 0x1c0]
jmp 0x1401fa0d3
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0x7c], 1
jne 0x1401f7870
mov rcx, r13
xor edx, edx
mov r8d, 1
call fcn.14009fac0
test al, al
je 0x1401f9f8b
lea rdx, [r13 + 0x138]
mov rcx, r13
call fcn.1400a0e90
lea rcx, [rsp + 0x1c0]
mov qword [rcx], 0x11e1a300
call fcn.1402263f0
mov rdx, qword [0x1402ecb00]
sub rdx, 0xffffffffffffff80
mov rcx, r13
call fcn.1400a2b60
lea rbx, [rsp + 0x1c0]
mov qword [rbx], 0x5f5e100
mov rcx, rbx
call fcn.1402263f0
mov rcx, r13
mov dl, 1
mov r8d, 1
call fcn.14009fac0
lea rdx, [0x14029ee6e]
lea rcx, [0x14029ee79]
test al, al
cmovne rcx, rdx
lea rax, [rsp + 0x81]
mov byte [rax + 0x16], 1
cmp rcx, rdi
setb dl
cmp rcx, rax
setae al
or al, dl
je 0x1401f7e03
mov al, byte [rcx]
mov byte [rsp + 0x80], al
mov byte [rsp + 0x81], 0
mov ecx, Ordinal_26
call fcn.1401a9d88
mov rdi, rax
mov qword [rsp + 0x60], rax
add rax, 0x18
mov qword [rsp + 0x70], rax
test rdi, rdi
je 0x1401f7e03
mov rcx, qword [rsp + 0x90]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rsp + 0x80]
movups xmmword [rdi], xmm0
lea r9, [rsp + 0x60]
mov qword [r9 + 8], rax
xor eax, eax
mov qword [rsp + 0x1d0], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1c0], xmm0
lea r14, [rsp + 0x40]
mov qword [r14 + 0x10], rax
movaps xmmword [r14], xmm0
mov qword [rsp + 0x20], rbx
mov ecx, 1
mov edx, 0x6e
mov r8, r14
call fcn.140098460
cmp byte [r14 + 0x17], 0
jns 0x1401fa098
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401fa0af
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
cmp byte [rdi + 0x17], 0
js 0x1401fa0dd
mov rcx, rdi
call fcn.1401a9dc4
cmp byte [rsp + 0x97], 0
jns 0x1401f7870
mov rcx, qword [rsp + 0x80]
call fcn.1401a9dc4
jmp 0x1401f7870
mov rcx, qword [rdi]
call fcn.1401a9dc4
jmp 0x1401fa0b5
mov rax, qword [0x1402ecb00]
cmp byte [rax + 0x98], 1
jne 0x1401f7862
cmp dword [rax + 0x78], 2
jne 0x1401f7862
mov rcx, r13
xor edx, edx
mov r8d, 2
call fcn.14009fac0
test al, al
je 0x1401fa13c
lea rdx, [r13 + 0x1b0]
mov rcx, r13
call fcn.1400a0e90
lea rcx, [rsp + 0x1c0]
mov qword [rcx], 0x11e1a300
call fcn.1402263f0
mov r8d, 0xa0
add r8, qword [0x1402ecb00]
mov rcx, r13
mov edx, 2
call fcn.1400a1bb0
xor eax, eax
lea r9, [rsp + 0x60]
mov qword [r9 + 0x10], rax
xorps xmm0, xmm0
movaps xmmword [r9], xmm0
lea rcx, [rsp + 0x1c0]
mov qword [rcx + 0x10], rax
movaps xmmword [rcx], xmm0
lea rbx, [rsp + 0x40]
mov qword [rbx + 0x10], rax
movaps xmmword [rbx], xmm0
mov qword [rsp + 0x20], rcx
mov ecx, 2
mov edx, 0x6e
mov r8, rbx
call fcn.140098460
cmp byte [rbx + 0x17], 0
jns 0x1401fa1aa
mov rcx, qword [rsp + 0x40]
call fcn.1401a9dc4
cmp byte [rsp + 0x1d7], 0
jns 0x1401f7862
mov rcx, qword [rsp + 0x1c0]
call fcn.1401a9dc4
jmp 0x1401f7862
call fcn.1401e9820
lea rcx, [rsp + 0xa0]
call fcn.1401e97e0
lea rcx, [rsp + 0x100]
call fcn.1401e97e0
lea rcx, [rsp + 0x40]
call fcn.1401e97e0
lea rcx, [rsp + 0x60]
call fcn.1401e9840
lea rcx, [rsp + 0x60]
call fcn.1401e97e0
lea rcx, [rsp + 0x160]
call fcn.1401e97e0
lea rcx, [rsp + 0x180]
call fcn.1401e97e0
lea rcx, [rsp + 0x80]
call fcn.1401e97e0
lea rcx, [rsp + 0x40]
call fcn.1401e9840
test cl, cl
js 0x1401fa254
mov eax, ebp
and al, 0x7f
mov byte [rsp + 0x57], al
lea rax, [rsp + 0x40]
mov word [rax + rbp*2], 0
jmp 0x1401f8622
mov qword [rsp + 0x48], rbp
jmp 0x1401fa249
test cl, cl
js 0x1401fa279
mov eax, r13d
and al, 0x7f
mov byte [rsp + 0x57], al
lea rax, [rsp + 0x40]
mov word [rax + r13*2], 0
jmp 0x1401f83e1
mov qword [rsp + 0x48], r13
jmp 0x1401fa26d
test cl, cl
js 0x1401fa29c
mov eax, ebp
and al, 0x7f
mov byte [rsp + 0x57], al
lea rax, [rsp + 0x40]
mov word [rax + rbp*2], 0
jmp 0x1401f90e0
mov qword [rsp + 0x48], rbp
jmp 0x1401fa291
lea rcx, [rsp + 0x1c0]
call fcn.1401e97e0
int3