Function at 0x14001e120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword ss:[rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rax, qword [0x140155040]
xor rax, rsp
mov qword [rsp + 0xc0], rax
mov rdx, qword [0x140159188]
mov ecx, 0x10
call fcn.1400601a0
mov rbx, rax
xor r12d, r12d
mov dword [rax], r12d
mov dword [rax + 4], 0x1e
mov edx, 4
mov r8d, 0xf0
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rbx + 8], rax
mov qword [0x140159478], rbx
mov qword [0x1401594e0], r12
mov qword [rsp + 0x20], r12
lea r9, [0x140044320]
mov r8d, 0x65
lea rcx, [0x140113968]
call fcn.140020260
mov qword ds:[rsp + 0x58], rax
mov qword [rsp + 0x20], r12
lea r9, [0x14001bf20]
mov r8d, 0xa7
lea rcx, [0x140113978]
call fcn.140020260
mov r13d, 0x10b
movzx ecx, word [0x14015a530]
mov r15d, 0x20b
cmp cx, r13w
jne 0x14001e21d
mov rcx, qword [0x14015a518]
cmp dword [rcx + 0x74], 0xa
jbe 0x14001e266
cmp dword [rcx + 0xc8], r12d
je 0x14001e266
cmp dword [rcx + 0xcc], r12d
jmp 0x14001e246
nop dword [rax]
cmp cx, r15w
jne 0x14001e266
mov rax, qword [0x14015a518]
cmp dword [rax + 0x84], 0xa
jbe 0x14001e266
cmp dword [rax + 0xd8], r12d
je 0x14001e266
cmp dword [rax + 0xdc], r12d
je 0x14001e266
mov qword [rsp + 0x20], r12
lea r9, [0x14002e200]
mov r8d, 0x6a
lea rcx, str.Load_Config
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x140024c80]
mov r8d, 0x84
lea rcx, [0x1401139a0]
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x14003dfc0]
mov r8d, 0x7f
lea rcx, [0x1401139b8]
call fcn.140020260
lea rdx, [0x14015a500]
lea rcx, [rsp + 0x40]
call fcn.14005a3a0
test eax, eax
js 0x14001e2c7
nop word [rax + rax]
cmp dword [rsp + 0x4c], r12d
jne 0x14001e2e7
lea rdx, [0x14015a500]
lea rcx, [rsp + 0x40]
call fcn.14005aa60
test eax, eax
js 0x14001e305
nop dword [rax]
cmp dword [rsp + 0x4c], r12d
je 0x14001e305
mov qword [rsp + 0x20], r12
lea r9, [0x1400341e0]
mov r8d, 0x66
lea rcx, [0x1401139d0]
call fcn.140020260
xor r8d, r8d
lea rdx, [0x14015a500]
lea rcx, [rsp + 0x60]
call fcn.140059f80
nop dword [rax]
test eax, eax
js 0x14001e3ed
cmp dword [rsp + 0x68], r12d
je 0x14001e3ed
mov edx, 4
mov r8d, 0x10
mov rdi, qword [0x140159238]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov byte [rax], 1
mov edx, 4
mov r8d, 0x80
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 8], rbx
mov edx, 4
mov r8d, 0x68
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov qword [rax + 0x60], rcx
mov qword [rax + 0x30], rsi
mov qword [rsp + 0x20], rax
lea r9, [0x1400321a0]
mov r8d, 0x67
lea rcx, [0x1401139e0]
call fcn.140020260
mov esi, 1
mov r8d, esi
lea rdx, [0x14015a500]
lea rcx, [rsp + 0x60]
call fcn.140059f80
test eax, eax
js 0x14001e4dc
cmp dword [rsp + 0x68], r12d
je 0x14001e4dc
mov edx, 4
mov r8d, 0x10
mov rdi, qword [0x140159238]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov byte [rax], sil
mov qword [rax + 8], rsi
mov edx, 4
mov r8d, 0x80
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 8], rbx
mov edx, 4
mov r8d, 0x68
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov qword [rax + 0x60], rcx
mov qword [rax + 0x30], rsi
mov qword [rsp + 0x20], rax
lea r9, [0x1400321a0]
mov r8d, 0x67
lea rcx, str.Exports_ARM64X
call fcn.140020260
mov esi, 1
cmp word [0x14015a530], r13w
jne 0x14001e50b
mov rax, qword [0x14015a518]
cmp dword [rax + 0x74], 2
jbe 0x14001e555
cmp dword [rax + 0x88], r12d
je 0x14001e555
nop dword [rax]
cmp dword [rax + 0x8c], r12d
jne 0x14001e537
jmp 0x14001e555
cmp word [0x14015a530], r15w
jne 0x14001e555
mov rax, qword [0x14015a518]
cmp dword [rax + 0x84], 2
jbe 0x14001e555
cmp dword [rax + 0x98], r12d
je 0x14001e555
cmp dword [rax + 0x9c], r12d
je 0x14001e555
mov qword [rsp + 0x20], r12
lea r9, [0x1400495c0]
mov r8d, 0x6d
lea rcx, [0x140113a10]
call fcn.140020260
cmp word [0x14015a530], r13w
jne 0x14001e592
mov rax, qword [0x14015a518]
cmp dword [rax + 0x74], 0xe
jbe 0x14001e708
mov r9d, dword ds:[rax + 0xe8]
nop
test r9d, r9d
je 0x14001e708
cmp dword [rax + 0xec], r12d
jmp 0x14001e5d1
cmp word [0x14015a530], r15w
nop word [rax + rax]
jne 0x14001e708
mov rax, qword [0x14015a518]
cmp dword [rax + 0x84], 0xe
jbe 0x14001e708
mov r9d, dword [rax + 0xf8]
test r9d, r9d
je 0x14001e708
cmp dword [rax + 0xfc], r12d
je 0x14001e708
mov edx, r12d
mov r10d, dword [0x14015a520]
test r10d, r10d
je 0x14001e615
mov r11, qword [0x14015a528]
nop dword [rax]
mov eax, edx
lea rcx, [rax + rax*4]
lea r8, [r11 + rcx*8]
mov ecx, dword [r8 + 0xc]
cmp r9d, ecx
jb 0x14001e60e
add ecx, dword [r8 + 0x10]
cmp r9d, ecx
jb 0x14001e618
inc edx
cmp edx, r10d
jb 0x14001e5f0
mov r8, r12
test r8, r8
jne 0x14001e622
mov rdx, r12
jmp 0x14001e63a
mov ecx, dword [r8 + 0x14]
mov eax, dword [r8 + 0xc]
sub rcx, rax
mov edx, r9d
add rcx, qword [0x14015a508]
add rdx, rcx
mov qword [0x140159110], rdx
test rdx, rdx
je 0x14001e708
mov r8d, r12d
mov r9, qword [0x14015a510]
mov rax, qword [0x14015a508]
test dl, 3
je 0x14001e670
mov ecx, 0x80000002
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
lea rcx, [rdx + 0x48]
cmp rcx, rdx
jb 0x14001e686
cmp rdx, rax
jb 0x14001e686
add rax, r9
cmp rcx, rax
jbe 0x14001e6a9
mov ecx, 0xc0000005
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
nop
mov r8d, eax
xor r12d, r12d
mov esi, 1
mov r13d, 0x10b
mov r15d, 0x20b
test r8d, r8d
js 0x14001e708
mov qword [rsp + 0x20], r12
lea r9, [0x14000a1c0]
mov r8d, 0x69
lea rcx, [0x140113a28]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x14000afc0]
mov r8d, 0xa8
lea rcx, [0x140113a30]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x14000b6c0]
mov r8d, 0xac
lea rcx, [0x140113a48]
call fcn.140020260
mov rax, qword [0x14015a518]
mov ecx, 0x4000
test word [rax + 0x5e], cx
je 0x14001e738
mov qword [rsp + 0x20], r12
lea r9, [0x1400017a0]
mov r8d, 0x6b
lea rcx, [0x140113a60]
call fcn.140020260
cmp word [0x14015a530], r13w
jne 0x14001e764
mov rax, qword [0x14015a518]
cmp dword [rax + 0x74], 9
jbe 0x14001e7ae
cmp dword [rax + 0xc0], 0
je 0x14001e7ae
cmp dword ds:[rax + 0xc4], 0
jne 0x14001e790
jmp 0x14001e7ae
cmp word [0x14015a530], r15w
jne 0x14001e7ae
mov rax, qword [0x14015a518]
cmp dword [rax + 0x84], 9
jbe 0x14001e7ae
cmp dword [rax + 0xd0], 0
je 0x14001e7ae
cmp dword [rax + 0xd4], 0
je 0x14001e7ae
mov qword [rsp + 0x20], r12
lea r9, [0x140053960]
mov r8d, 0x75
lea rcx, [0x1401119d8]
call fcn.140020260
mov rax, qword [0x14015a508]
mov ecx, dword ds:[rax + 0x3c]
sub ecx, 0x40
test ecx, 0xffffffbf
je 0x14001e7e6
mov qword [rsp + 0x20], r12
lea r9, [0x140029160]
mov r8d, 0x81
lea rcx, [0x140113a68]
call fcn.140020260
xor bl, bl
xor r14b, r14b
cmp word [0x14015a530], r13w
jne 0x14001e834
mov edx, r13d
lea r9, [rsp + 0x38]
mov r8d, 0xc0
lea rcx, [0x14015a500]
call fcn.140059bc0
test eax, eax
js 0x14001e87f
mov rdx, qword [rsp + 0x38]
mov ecx, dword [rdx]
add rcx, rdx
lea rax, [rdx + 0x48]
cmp rax, rcx
ja 0x14001e87f
cmp dword [rdx + 0x44], 0
je 0x14001e87f
cmp dword [rdx + 0x40], 0
jne 0x14001e888
jmp 0x14001e87f
cmp word [0x14015a530], r15w
jne 0x14001e87f
mov rdx, qword [0x14015a518]
cmp dword [rdx + 0x84], 3
jbe 0x14001e87f
add rdx, 0xa0
cmp dword [rdx], 0
je 0x14001e87f
cmp dword ds:[rdx + 4], 0
je 0x14001e87f
mov bl, 1
lea r8, [rsp + 0x40]
lea rcx, [0x14015a500]
call fcn.140059d20
movzx r14d, r14b
test eax, eax
cmovns r14d, esi
nop
test bl, bl
je 0x14001e948
mov edx, 4
mov r8d, 0x10
mov rdi, qword [0x140159238]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov byte [rax], 1
mov edx, 4
mov r8d, 0x80
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 8], rbx
mov edx, 4
mov r8d, 0x68
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov qword [rax + 0x60], rcx
mov qword [rax + 0x30], rsi
mov qword [rsp + 0x20], rax
lea r9, [0x140022680]
mov r8d, 0x8c
lea rcx, [0x140113a78]
call fcn.140020260
test r14b, r14b
je 0x14001ea13
mov edx, 4
mov r8d, 0x10
mov rdi, qword [0x140159238]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov byte [rax], 1
mov qword [rax + 8], 1
mov edx, 4
mov r8d, 0x80
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 8], rbx
mov edx, 4
mov r8d, 0x68
mov rcx, rdi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov qword [rax + 0x60], rcx
mov qword [rax + 0x30], rsi
mov qword [rsp + 0x20], rax
lea r9, [0x140022680]
mov r8d, 0x8c
lea rcx, str.Exceptions_ARM64X
call fcn.140020260
cmp word [0x14015a530], r13w
jne 0x14001ea3e
mov rax, qword [0x14015a518]
cmp dword [rax + 0x74], 5
jbe 0x14001ea89
cmp dword [rax + 0xa0], 0
je 0x14001ea89
cmp dword [rax + 0xa4], 0
jne 0x14001ea6b
jmp 0x14001ea89
cmp word [0x14015a530], r15w
jne 0x14001ea89
mov rax, qword [0x14015a518]
cmp dword [rax + 0x84], 5
jbe 0x14001ea89
cmp dword ds:[rax + 0xb0], 0
je 0x14001ea89
cmp dword [rax + 0xb4], 0
je 0x14001ea89
mov qword [rsp + 0x20], r12
lea r9, [0x140023300]
mov r8d, 0x8e
lea rcx, [0x140112b88]
call fcn.140020260
xor edx, edx
lea rcx, [0x14015a500]
call fcn.14005daa0
test eax, eax
js 0x14001ec62
mov rbx, qword [0x140159210]
mov edx, 4
mov r8d, 0x40
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
lea r8, str.Dynamic_Relocations
mov rdx, r8
and rdx, 0xfffffffffffffff1
mov rcx, r8
and ecx, 0xf
xorps xmm1, xmm1
je 0x14001eb0e
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
shr eax, cl
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001eb0a
mov edx, ecx
shr rdx, 1
jmp 0x14001eb57
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
jne 0x14001eb49
nop dword [rax]
nop word [rax + rax]
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001eb30
sub rdx, r8
sar rdx, 1
mov eax, ecx
shr rax, 1
add rdx, rax
lea rax, ds:[rdx + rdx]
mov qword [rdi], rax
mov qword [rdi + 8], r8
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0x8e
lea rax, [0x1400182a0]
mov qword [rdi + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movdqa xmm0, xmmword [0x140144710]
movdqu xmmword [rsp + 0x60], xmm0
mov esi, 5
mov dword [rsp + 0x70], esi
mov qword [rsp + 0x88], r8
mov qword [rsp + 0xa0], rdi
lea r9, [rsp + 0x60]
xor r8d, r8d
mov edx, 0x1132
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi + 0x38], rax
mov rbx, qword [0x140159478]
mov eax, dword [rbx + 4]
cmp dword [rbx], eax
jne 0x14001ec54
add eax, eax
mov dword [rbx + 4], eax
mov r8d, eax
shl r8, 3
mov rax, qword [rbx + 8]
test r8, r8
jne 0x14001ec2b
test rax, rax
je 0x14001ec26
mov r8, rax
xor edx, edx
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rax, r12
jmp 0x14001ec50
mov edx, 4
mov rcx, qword [0x140159238]
test rax, rax
je 0x14001ec4a
mov r9, r8
mov r8, rax
call qword [sym.imp.ntdll.dll_RtlReAllocateHeap]
jmp 0x14001ec50
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rbx + 8], rax
mov ecx, dword [rbx]
mov rax, qword [rbx + 8]
mov qword [rax + rcx*8], rdi
inc dword [rbx]
jmp 0x14001ec67
mov esi, 5
lea rcx, [0x14015a500]
call fcn.1400600a0
test eax, eax
je 0x14001ee29
mov rbx, qword [0x140159210]
mov edx, 4
mov r8d, 0x40
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
lea r8, str.Hybrid_Metadata
mov rdx, r8
and rdx, 0xfffffffffffffff1
mov rcx, r8
and ecx, 0xf
xorps xmm1, xmm1
je 0x14001ecea
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
shr eax, cl
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001ece6
mov edx, ecx
shr rdx, 1
jmp 0x14001ed27
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
jne 0x14001ed19
nop
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001ed00
sub rdx, r8
sar rdx, 1
mov eax, ecx
shr rax, 1
add rdx, rax
lea rax, [rdx + rdx]
mov qword [rdi], rax
mov qword [rdi + 8], r8
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0x6a
lea rax, [0x1400062a0]
mov qword [rdi + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movdqa xmm0, xmmword [0x140144710]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], esi
mov qword [rsp + 0x88], r8
mov qword [rsp + 0xa0], rdi
lea r9, [rsp + 0x60]
xor r8d, r8d
mov edx, 0x1132
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi + 0x38], rax
mov rbx, qword [0x140159478]
mov eax, dword [rbx + 4]
cmp dword [rbx], eax
jne 0x14001ee1d
add eax, eax
mov dword [rbx + 4], eax
mov r8d, eax
shl r8, 3
mov rax, qword [rbx + 8]
test r8, r8
jne 0x14001edf0
test rax, rax
je 0x14001edeb
mov r8, rax
xor edx, edx
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rax, r12
jmp 0x14001ee19
mov edx, 4
mov rcx, qword [0x140159238]
test rax, rax
je 0x14001ee13
mov r9, r8
mov r8, rax
call qword [sym.imp.ntdll.dll_RtlReAllocateHeap]
jmp 0x14001ee19
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rbx + 8], rax
mov ecx, dword [rbx]
mov rax, qword [rbx + 8]
mov qword [rax + rcx*8], rdi
inc dword [rbx]
movzx ecx, word [0x14015a530]
mov rax, qword [0x14015a518]
cmp cx, r13w
jne 0x14001ee57
cmp dword [rax + 0x74], 4
jbe 0x14001eea4
cmp dword [rax + 0x98], 0
je 0x14001eea4
cmp dword [rax + 0x9c], 0
jne 0x14001ee78
jmp 0x14001eea4
cmp cx, r15w
jne 0x14001eea4
cmp dword [rax + 0x84], 4
jbe 0x14001eea4
cmp dword [rax + 0xa8], 0
je 0x14001eea4
cmp dword [rax + 0xac], 0
je 0x14001eea4
mov qword [rsp + 0x20], r12
lea r9, [0x14002bcc0]
mov r8d, 0x85
lea rcx, str.Certificates
call fcn.140020260
movzx ecx, word [0x14015a530]
mov rax, qword [0x14015a518]
cmp cx, r13w
jne 0x14001eec4
cmp dword [rax + 0x74], 6
jbe 0x14001ef0c
cmp dword [rax + 0xa8], 0
je 0x14001ef0c
cmp dword [rax + 0xac], 0
jne 0x14001eee5
jmp 0x14001ef0c
cmp cx, r15w
jne 0x14001ef0c
cmp dword [rax + 0x84], 6
jbe 0x14001ef0c
cmp dword [rax + 0xb8], 0
je 0x14001ef0c
cmp dword [rax + 0xbc], 0
je 0x14001ef0c
mov qword ss:[rsp + 0x20], r12
lea r9, [0x14000d760]
mov r8d, 0x83
lea rcx, [0x140113b20]
call fcn.140020260
movzx ecx, word [0x14015a530]
cmp cx, r13w
lea rcx, [0x14015a500]
jne 0x14001ef57
mov edx, r13d
lea r9, [rsp + 0x38]
mov r8d, 0xc0
call fcn.140059bc0
test eax, eax
js 0x14001f149
mov rdx, qword [rsp + 0x38]
mov ecx, dword [rdx]
add rcx, rdx
lea rax, [rdx + 0xa4]
cmp rax, rcx
ja 0x14001f149
cmp dword [rdx + 0xa0], 0
jmp 0x14001ef94
mov edx, r15d
lea r9, [rsp + 0x40]
mov r8d, 0x140
call fcn.140059bc0
test eax, eax
js 0x14001f149
mov rdx, qword [rsp + 0x40]
mov ecx, dword [rdx]
add rcx, rdx
lea rax, [rdx + 0x108]
cmp rax, rcx
ja 0x14001f149
cmp qword [rdx + 0x100], 0
je 0x14001f149
mov rbx, qword [0x140159210]
mov edx, 4
mov r8d, 0x40
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
lea r8, [0x140113b30]
mov rdx, r8
and rdx, 0xfffffffffffffff1
mov rcx, r8
and ecx, 0xf
xorps xmm1, xmm1
je 0x14001f009
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
shr eax, cl
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001f005
mov edx, ecx
shr rdx, 1
jmp 0x14001f047
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
jne 0x14001f039
nop
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001f020
sub rdx, r8
sar rdx, 1
mov eax, ecx
shr rax, 1
add rdx, rax
lea rax, [rdx + rdx]
mov qword [rdi], rax
mov qword [rdi + 8], r8
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xab
lea rax, [0x140055840]
mov qword [rdi + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movdqa xmm0, xmmword [0x140144710]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], esi
mov qword [rsp + 0x88], r8
mov qword [rsp + 0xa0], rdi
lea r9, [rsp + 0x60]
xor r8d, r8d
mov edx, 0x1132
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi + 0x38], rax
mov rbx, qword [0x140159478]
mov eax, dword [rbx + 4]
cmp dword [rbx], eax
jne 0x14001f13d
add eax, eax
mov dword [rbx + 4], eax
mov r8d, eax
shl r8, 3
mov rax, qword [rbx + 8]
test r8, r8
jne 0x14001f110
test rax, rax
je 0x14001f10b
mov r8, rax
xor edx, edx
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rax, r12
jmp 0x14001f139
mov edx, 4
mov rcx, qword [0x140159238]
test rax, rax
je 0x14001f133
mov r9, r8
mov r8, rax
call qword [sym.imp.ntdll.dll_RtlReAllocateHeap]
jmp 0x14001f139
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rbx + 8], rax
mov ecx, dword [rbx]
mov rax, qword [rbx + 8]
mov qword [rax + rcx*8], rdi
inc dword [rbx]
lea rcx, [0x14015a500]
cmp word [0x14015a530], r13w
jne 0x14001f1aa
mov edx, r13d
lea r9, [rsp + 0x38]
mov r8d, 0xc0
call fcn.140059bc0
test eax, eax
js 0x14001f3b8
mov rdx, qword [rsp + 0x38]
mov ecx, dword [rdx]
add rcx, rdx
lea rax, [rdx + 0xac]
cmp rax, rcx
ja 0x14001f3b8
cmp dword [rdx + 0xa4], 0
je 0x14001f3b8
cmp dword [rdx + 0xa8], 0
jne 0x14001f206
jmp 0x14001f3b8
mov edx, r15d
lea r9, [rsp + 0x40]
mov r8d, 0x140
call fcn.140059bc0
nop dword [rax]
test eax, eax
js 0x14001f3b8
mov rdx, qword ds:[rsp + 0x40]
mov ecx, dword [rdx]
add rcx, rdx
lea rax, [rdx + 0x118]
cmp rax, rcx
ja 0x14001f3b8
cmp qword [rdx + 0x108], 0
je 0x14001f3b8
cmp qword ds:[rdx + 0x110], 0
je 0x14001f3b8
mov rbx, qword [0x140159210]
mov edx, 4
mov r8d, 0x40
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
lea r8, [0x140113b58]
mov rdx, r8
and rdx, 0xfffffffffffffff1
mov rcx, r8
and ecx, 0xf
xorps xmm1, xmm1
je 0x14001f276
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
shr eax, cl
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001f272
mov edx, ecx
shr rdx, 1
jmp 0x14001f2b7
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
jne 0x14001f2a9
nop dword [rax + rax]
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x30], ecx
je 0x14001f290
sub rdx, r8
sar rdx, 1
mov eax, ecx
shr rax, 1
add rdx, rax
lea rax, [rdx + rdx]
mov qword [rdi], rax
mov qword [rdi + 8], r8
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0x86
lea rax, [0x14000e360]
mov qword [rdi + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movdqa xmm0, xmmword [0x140144710]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], esi
mov qword [rsp + 0x88], r8
mov qword [rsp + 0xa0], rdi
lea r9, [rsp + 0x60]
xor r8d, r8d
mov edx, 0x1132
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi + 0x38], rax
mov rbx, qword [0x140159478]
mov eax, dword [rbx + 4]
cmp dword [rbx], eax
jne 0x14001f3ac
add eax, eax
mov dword [rbx + 4], eax
mov r8d, eax
shl r8, 3
mov rax, qword [rbx + 8]
test r8, r8
jne 0x14001f382
test rax, rax
je 0x14001f37c
mov r8, rax
xor edx, edx
mov rcx, qword [0x140159238]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rax, r12
jmp 0x14001f3a8
mov edx, 4
mov rcx, qword [0x140159238]
test rax, rax
je 0x14001f3a2
mov r9, r8
mov r8, rax
call qword [sym.imp.ntdll.dll_RtlReAllocateHeap]
nop
jmp 0x14001f3a8
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rbx + 8], rax
mov edx, dword [rbx]
mov rax, qword [rbx + 8]
mov qword [rax + rdx*8], rdi
inc dword [rbx]
lea r9, [rsp + 0x40]
xor r8d, r8d
mov edx, 0xd
lea rcx, [0x14015a500]
call fcn.14005ce20
test eax, eax
js 0x14001f411
mov qword [rsp + 0x20], r12
lea r9, [0x140027780]
mov r8d, 0x87
lea rcx, [0x140111398]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x140028040]
mov r8d, 0x88
lea rcx, [0x140113b78]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x140046440]
mov r8d, 0x6f
lea rcx, [0x140113b80]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x14000d000]
mov r8d, 0x70
lea rcx, [0x1401126f8]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x140050da0]
mov r8d, 0x71
lea rcx, [0x140113b98]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x140017460]
mov r8d, 0x89
lea rcx, [0x140113ba8]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x1400361c0]
mov r8d, 0x72
lea rcx, [0x140113bb8]
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x140045c60]
mov r8d, 0x73
lea rcx, str.Processes
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x140013a80]
mov r8d, 0x8a
lea rcx, [0x140113be0]
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x1400456c0]
mov r8d, 0x7c
lea rcx, [0x140113bf0]
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x14003c380]
mov r8d, 0x6c
lea rcx, [0x140113c00]
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x140052da0]
mov r8d, 0x76
lea rcx, [0x140113c10]
call fcn.140020260
mov qword ss:[rsp + 0x20], r12
lea r9, [0x140054f40]
mov r8d, 0xad
lea rcx, str.Version
call fcn.140020260
call fcn.14007abc0
mov dword [0x1401596fc], eax
cmp eax, 3
jl 0x14001f593
mov qword [rsp + 0x20], r12
lea r9, [0x140005da0]
mov r8d, 0x8e
lea rcx, str.Mappings
call fcn.140020260
mov qword [rsp + 0x20], r12
lea r9, [0x14001da40]
mov r8d, 0xad
lea rcx, [0x140113898]
call fcn.140020260
mov qword [rsp + 0x40], 0x38
lea rax, str.MainWindowPageRestoreEnabled
mov qword [rsp + 0x48], rax
xor eax, eax
lock cmpxchg qword [0x1401591a0], rsi
je 0x14001f5df
lea rcx, [0x1401591a0]
call fcn.140087fe0
lea rcx, [rsp + 0x40]
call fcn.140067da0
mov rbx, rax
test rax, rax
je 0x14001f5fb
cmp dword [rax], 1
jne 0x14001f5fb
mov edi, dword [rax + 0x28]
jmp 0x14001f602
mov rbx, r12
mov edi, dword [rsp + 0x30]
mov rax, rsi
lock cmpxchg qword [0x1401591a0], r12
je 0x14001f61c
lea rcx, [0x1401591a0]
call fcn.140088180
nop dword [rax]
test rbx, rbx
jne 0x14001f631
mov ecx, 0xc0000225
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
test edi, edi
je 0x14001f7cc
mov byte [rsp + 0x34], 0
mov qword [rsp + 0x40], 0x1c
lea rax, str.MainWindowPage
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x40]
call fcn.140067f80
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001f7c5
mov r13d, r12d
mov r8, qword [0x140159478]
cmp dword [r8], 0
jbe 0x14001f77a
nop word [rax + rax]
mov edx, r13d
mov rcx, qword [r8 + 8]
mov rdx, qword [rcx + rdx*8]
mov qword [rsp + 0x38], rdx
mov rcx, qword [rdx]
cmp rcx, qword [rbx]
jne 0x14001f76e
mov rsi, qword ds:[rdx + 8]
mov r14, qword [rbx + 8]
mov rdi, rcx
shr rdi, 4
test rdi, rdi
je 0x14001f6f6
nop word [rax + rax]
movdqu xmm0, xmmword [rsi]
movdqu xmm1, xmmword [r14]
pcmpeqd xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x14001f752
add rsi, 0x10
add r14, 0x10
sub rdi, 1
jne 0x14001f6d0
mov rdi, rcx
shr rdi, 1
and edi, 7
nop
test rdi, rdi
je 0x14001f77d
sub r14, rsi
nop dword [rax + rax]
movzx ecx, word [rsi]
movzx r15d, word [rsi + r14]
cmp cx, r15w
je 0x14001f738
nop
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
movzx ebx, ax
movzx ecx, r15w
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
cmp bx, ax
jne 0x14001f762
add rsi, 2
sub rdi, 1
jne 0x14001f710
mov rdx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
jmp 0x14001f77d
shl rdi, 4
and ecx, 0xf
add rdi, rcx
shr rdi, 1
jmp 0x14001f6ff
mov r8, qword [0x140159478]
mov rbx, qword [rsp + 0x40]
inc r13d
cmp r13d, dword [r8]
jb 0x14001f690
mov rdx, r12
nop dword [rax]
test rdx, rdx
je 0x14001f7ab
mov r9, qword ds:[rdx + 0x38]
mov edx, 0x110b
mov r8d, 9
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x34], 1
lea rcx, [rbx - 0x10]
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14001f7c5
nop
call fcn.1400602c0
cmp byte [rsp + 0x34], 0
jne 0x14001f7ed
mov r9, qword [rsp + 0x58]
mov r9, qword [r9 + 0x38]
mov r8d, 9
mov edx, 0x110b
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1401594e8]
call qword [sym.imp.USER32.dll_SetFocus]
lea rcx, [0x140159480]
call fcn.140057c80
mov rax, qword [0x140159478]
test rax, rax
je 0x14001f81c
cmp dword [rax], 0
je 0x14001f81c
call fcn.1400203e0
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.1400c6a20
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret