Function at 0x140034360
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x698
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x600], xmm6
mov qword [rbp + 0x5f8], 0xfffffffffffffffe
mov qword [rbp + 0x418], r8
mov rbx, rdx
mov qword [rbp + 0x508], rcx
mov rsi, qword [rdx + 0x60]
movzx eax, byte [rdx + 0x68]
test al, al
mov qword [rbp + 0x5d0], rdx
mov byte [rbp + 0x458], r9b
jne 0x1400343d1
test rsi, rsi
jne 0x1400343d1
mov qword [rbp + 0x3f8], 0
xor r12d, r12d
jmp 0x14003521e
mov qword [rbp + 0x488], 0
mov qword [rbp + 0x498], 0
test al, al
jne 0x1400346da
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x140037ccf
mov qword [rbp + 0x5e0], rsi
lea r14, [rbp - 0x18]
mov qword [rbp + 0x5e8], rax
mov r15, rax
nop word cs:[rax + rax]
cmp word [r15], 0
je 0x1400346bf
mov rsi, r15
mov rcx, 0xfffffffffffffffe
xor r13d, r13d
nop dword [rax + rax]
mov r12, r13
mov rax, rcx
inc r13
cmp word [r15], 0
lea r15, [r15 + 2]
lea rcx, [rcx + 2]
jne 0x140034440
cmp r12, 1
je 0x140034420
test r12, r12
je 0x140037c17
mov rdi, 0xfffffffffffffffc
xor ebx, ebx
cmp word [rsi + rbx*2 + 2], 0x3d
je 0x140034490
inc rbx
add rdi, 0xfffffffffffffffe
add rax, 0xfffffffffffffffe
jne 0x140034470
jmp 0x140034420
lea r8, [rbx + 1]
cmp rbx, r12
jae 0x140037c2f
lea rcx, [rbp + 0x530]
mov rdx, rsi
call fcn.140028140
lea rcx, [rbx + 2]
cmp r12, rcx
jb 0x140037c49
sub r13, rbx
add r13, 0xfffffffffffffffd
sub rsi, rdi
lea rcx, [rbp + 0x4a0]
mov rdx, rsi
mov r8, r13
call fcn.140028140
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x450], rax
movups xmm0, xmmword [rbp + 0x530]
movaps xmmword [rbp + 0x440], xmm0
movzx esi, byte [rbp + 0x548]
lea rcx, [rbp + 0x549]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rbp - 0x30], eax
mov dword [rbp - 0x2d], ecx
movups xmm0, xmmword [rbp + 0x4a0]
movups xmm1, xmmword [rbp + 0x4b0]
movups xmmword [r14 - 1], xmm1
movups xmmword [r14 - 0x11], xmm0
mov eax, dword [rbp - 0x30]
movzx ecx, word [rbp - 0x2c]
movzx edx, byte [rbp - 0x2a]
mov r8, qword [rbp - 0x29]
movzx r9d, byte [rbp - 0x21]
movups xmm0, xmmword [rbp - 0x20]
mov dword [rbp + 0x560], eax
mov word [rbp + 0x564], cx
mov byte [rbp + 0x566], dl
mov qword [rbp + 0x567], r8
mov byte [rbp + 0x56f], r9b
movaps xmmword [rbp + 0x570], xmm0
mov rax, qword [rbp - 0x11]
mov qword [rbp + 0x57f], rax
cmp sil, 2
je 0x1400346bf
mov rax, qword [rbp + 0x450]
mov qword [rbp + 0x520], rax
movaps xmm0, xmmword [rbp + 0x440]
movaps xmmword [rbp + 0x510], xmm0
mov byte [rbp + 0x528], sil
mov eax, dword [rbp + 0x560]
mov ecx, dword [rbp + 0x563]
lea rdx, [rbp + 0x529]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
lea rdi, [rbp + 0x567]
movdqu xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x470], xmm1
movdqa xmmword [rbp + 0x460], xmm0
mov rax, qword [rbp + 0x510]
mov rcx, qword [rbp + 0x520]
add rcx, rax
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x4a8], rcx
mov word [rbp + 0x4b0], 0
lea rbx, [rbp + 0x530]
mov rcx, rbx
lea r12, [rbp + 0x4a0]
mov rdx, r12
call fcn.140038eb0
mov rax, qword [rbp + 0x450]
mov qword [r14 + 0x10], rax
movaps xmm0, xmmword [rbp + 0x440]
movups xmmword [r14], xmm0
mov byte [rbp], sil
mov eax, dword [rbp + 0x560]
mov ecx, dword [rbp + 0x563]
mov dword [r14 + 0x1c], ecx
mov dword [r14 + 0x19], eax
movups xmm0, xmmword [rbp + 0x530]
movaps xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp + 0x540]
mov qword [rbp - 0x20], rax
movdqu xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x4b0], xmm1
movdqa xmmword [rbp + 0x4a0], xmm0
mov byte [rbp + 0x5cf], 0
mov rcx, rbx
lea rdx, [rbp + 0x488]
lea r8, [rbp - 0x30]
mov r9, r12
call fcn.140039850
cmp byte [rbp + 0x548], 2
je 0x140034420
cmp qword [rbp + 0x538], 0
je 0x140034420
mov r8, qword [rbp + 0x530]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140034420
mov rcx, qword [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rbx, qword [rbp + 0x5d0]
mov rsi, qword [rbp + 0x5e0]
mov rax, qword [rbx + 0x50]
mov rdi, qword [rbx + 0x58]
xor r9d, r9d
test rax, rax
setne r9b
cmove rsi, rax
xor r14d, r14d
jmp 0x140034709
xor eax, eax
mov r9, qword [rbp + 0x5e8]
test rsi, rsi
je 0x140034fef
test r9, r9
je 0x140034760
test r14, r14
jne 0x140034760
mov r9d, 1
test rdi, rdi
je 0x14003476a
mov rdx, rdi
and rdx, 7
je 0x14003476f
mov rcx, rdi
and rcx, 0xfffffffffffffff8
mov r14, rax
nop word [rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rdx
jne 0x140034740
cmp rdi, 8
jae 0x140034780
jmp 0x1400347be
test r9, r9
jne 0x1400347c2
jmp 0x140037b9a
mov r14, rax
jmp 0x1400347be
mov r14, rax
mov rcx, rdi
cmp rdi, 8
jb 0x1400347be
nop dword [rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140034780
xor edi, edi
xor eax, eax
movzx ecx, word [r14 + 0x3d2]
mov r12, r14
mov r13, rdi
cmp rdi, rcx
jb 0x14003480a
nop word cs:[rax + rax]
mov rcx, qword [r12 + 0x160]
test rcx, rcx
je 0x140037a70
movzx r13d, word [r12 + 0x3d0]
inc rax
mov r12, rcx
cmp r13w, word [rcx + 0x3d2]
jae 0x1400347e0
test rax, rax
je 0x1400348b0
mov r14, qword [r12 + r13*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x14003489e
lea rdx, [rax - 2]
mov r8, rcx
and r8, 7
je 0x140034855
mov rcx, r8
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rcx
jne 0x140034840
not r8
add rax, r8
mov rcx, rax
cmp rdx, 7
jb 0x14003489e
nop dword [rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140034860
xor edi, edi
jmp 0x1400348b7
lea rdi, [r13 + 1]
mov r14, r12
dec rsi
imul rax, r13, 0x38
lea r15, [r12 + rax]
add r15, 0x168
shl r13, 5
cmp byte [r12 + r13 + 0x18], 2
jne 0x140034930
mov rbx, qword [rbp + 0x488]
mov eax, 0
test rbx, rbx
je 0x140034709
mov r12, rdi
mov r13, r9
mov r9, qword [r15]
mov rax, qword [r15 + 0x10]
mov rdi, qword [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x530]
mov rdx, rbx
mov r8, rdi
call fcn.1400390f0
cmp qword [rbp + 0x530], 0
je 0x140034a63
xor eax, eax
mov r9, r13
mov rdi, r12
jmp 0x140034709
mov qword [rbp + 0x550], rdi
mov rbx, qword [r15 + 0x18]
mov rdi, qword [r15 + 0x28]
test rdi, rdi
mov qword [rbp + 0x5e0], rsi
mov qword [rbp + 0x5e8], r9
je 0x14003499c
js 0x140037c0d
movzx eax, byte [0x141303ad0]
mov rax, qword [0x141303bb8]
test rax, rax
jne 0x140034981
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140037bb7
mov qword [0x141303bb8], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x1400349a1
jmp 0x140037bb7
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140045ab0
movzx eax, byte [r15 + 0x30]
mov qword [rbp + 0x560], rsi
mov qword [rbp + 0x568], rdi
mov qword [rbp + 0x570], rdi
mov byte [rbp + 0x578], al
mov rdx, qword [r15]
mov rdi, qword [r15 + 0x10]
test rdi, rdi
je 0x140034a56
xor esi, esi
mov rax, rdi
shr rax, 0x3e
sete al
jne 0x140037bf2
lea rbx, [rdi + rdi]
mov sil, al
add rsi, rsi
test rbx, rbx
je 0x140034bfc
movzx eax, byte [0x141303ad0]
mov rax, qword [0x141303bb8]
test rax, rax
mov qword [rbp + 0x558], rdx
jne 0x140034a30
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140037be2
mov qword [0x141303bb8], rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r15, rax
mov rdx, qword [rbp + 0x558]
test r15, r15
jne 0x140034c08
jmp 0x140037be2
mov r15d, 2
xor ebx, ebx
jmp 0x140034c08
mov rax, qword [rbp + 0x538]
mov rdx, qword [rbp + 0x540]
mov rcx, qword [rbp + 0x548]
mov byte [rbp + 0x440], 0
test rdx, rdx
je 0x140034d32
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x140034b5e
lea r8, [rdx - 2]
mov r9, rcx
and r9, 7
je 0x140034ace
mov rcx, r9
nop dword [rax]
movzx r10d, word [rax + 0x3d2]
mov rax, qword [rax + r10*8 + 0x3d8]
dec rcx
jne 0x140034ab0
not r9
add rdx, r9
mov rcx, rdx
cmp r8, 7
jb 0x140034b5e
nop dword [rax + rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140034ae0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x468], 0
mov qword [rbp + 0x470], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x460]
lea r8, [rbp + 0x440]
call fcn.140039290
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x4f0], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x4e0], xmm0
movdqu xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x20]
movups xmm2, xmmword [rbp - 0x10]
movups xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x4d0], xmm3
movaps xmmword [rbp + 0x4c0], xmm2
movaps xmmword [rbp + 0x4b0], xmm1
movdqa xmmword [rbp + 0x4a0], xmm0
mov rdx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x38]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x140034d67
mov rcx, rdx
jmp 0x140034d99
mov r15, rsi
test r15, r15
je 0x140037be2
add r12, r13
mov rcx, r15
mov r8, rbx
call fcn.140045ab0
movdqu xmm0, xmmword [rbp + 0x560]
movups xmm1, xmmword [rbp + 0x570]
lea rax, [rbp - 0x18]
movdqu xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], rdi
mov rbx, qword [r12]
mov rdi, qword [r12 + 0x10]
test rdi, rdi
je 0x140034c95
js 0x140037bfc
movzx eax, byte [0x141303ad0]
mov rax, qword [0x141303bb8]
test rax, rax
jne 0x140034c7a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140037bc9
mov qword [0x141303bb8], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x140034c9a
jmp 0x140037bc9
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140045ab0
movzx eax, byte [r12 + 0x18]
mov qword [rbp + 0x560], rsi
mov qword [rbp + 0x568], rdi
mov qword [rbp + 0x570], rdi
mov byte [rbp + 0x578], al
mov byte [rbp + 0x5df], 0
lea rcx, [rbp + 0x4a0]
lea rdx, [rbp + 0x488]
lea r8, [rbp - 0x30]
lea r9, [rbp + 0x560]
call fcn.140039850
cmp byte [rbp + 0x4b8], 2
mov rsi, qword [rbp + 0x5e0]
mov rdi, qword [rbp + 0x550]
je 0x140034700
cmp qword [rbp + 0x4a8], 0
je 0x140034700
mov r8, qword [rbp + 0x4a0]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140034700
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], 0
mov qword [rbp + 0x570], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x560]
lea r8, [rbp + 0x440]
call fcn.140039290
jmp 0x140034e8b
mov r8, qword [rbp + 0x30]
nop dword [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x140034d94
movzx eax, word [rdx + 0x3d0]
inc r8
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x140034d70
jmp 0x140034d99
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rbp + 0x590], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rbp + 0x580], xmm2
movaps xmmword [rbp + 0x570], xmm1
movaps xmmword [rbp + 0x560], xmm0
mov r8, qword [rbp + 0x4d0]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rbp + 0x4a0]
movaps xmm1, xmmword [rbp + 0x4b0]
movaps xmm2, xmmword [rbp + 0x4c0]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rbp + 0x598]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rbp + 0x4d8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x20], rax
movaps xmm0, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x560]
movaps xmm1, xmmword [rbp + 0x570]
movaps xmm2, xmmword [rbp + 0x580]
movaps xmm3, xmmword [rbp + 0x590]
movaps xmmword [rbp], xmm3
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x5b0], rax
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x5a0], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movaps xmm2, xmmword [rbp - 0x10]
movaps xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x590], xmm3
movaps xmmword [rbp + 0x580], xmm2
dec qword [rbp + 0x498]
movaps xmmword [rbp + 0x570], xmm1
movdqa xmmword [rbp + 0x560], xmm0
cmp byte [rbp + 0x440], 0
je 0x140034f1d
test rdi, rdi
je 0x140037c5d
mov rax, qword [rbx + 0x3d8]
mov qword [rbp + 0x488], rax
dec rdi
mov qword [rbp + 0x490], rdi
mov qword [rax + 0x160], 0
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [rbp + 0x590], 2
mov eax, 0
mov r9, r13
mov rdi, r12
je 0x140034709
mov rdi, rsi
mov rsi, qword [rbp + 0x560]
mov rbx, qword [rbp + 0x568]
mov rax, qword [rbp + 0x598]
mov qword [rbp + 0x558], rax
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x550], rax
movzx r15d, byte [rbp + 0x5b0]
cmp qword [rbp + 0x580], 0
je 0x140034f8d
mov r8, qword [rbp + 0x578]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9, r13
test rbx, rbx
je 0x140034fa7
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9, r13
mov eax, 0
cmp r15b, 2
mov rsi, rdi
mov rdi, r12
je 0x140034709
mov eax, 0
cmp qword [rbp + 0x550], 0
je 0x140034709
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9, r13
xor eax, eax
jmp 0x140034709
mov rax, qword [rbp + 0x498]
mov qword [rbp + 0x410], rax
movdqu xmm0, xmmword [rbp + 0x488]
movdqu xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x3f8], 1
movzx eax, byte [0x141303ad0]
mov rcx, qword [0x141303bb8]
test rcx, rcx
jne 0x140035044
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140037c7a
mov rcx, rax
mov qword [0x141303bb8], rax
mov r8d, 4
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140037c7a
mov dword [rax], 0x48544150
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], 4
mov qword [rbp + 0x570], 4
mov byte [rbp + 0x578], 0
mov rcx, rax
add rcx, 4
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x4a8], rcx
mov word [rbp + 0x4b0], 0
lea rcx, [rbp + 0x530]
lea rdx, [rbp + 0x4a0]
call fcn.140038eb0
movups xmm0, xmmword [rbp + 0x560]
movups xmm1, xmmword [rbp + 0x570]
movups xmmword [rbp - 8], xmm1
movups xmmword [rbp - 0x18], xmm0
movdqu xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp - 0x30], xmm0
mov r14, qword [rbp + 0x540]
mov qword [rbp - 0x20], r14
mov rsi, qword [rbp - 0x30]
mov rax, qword [rbp + 0x400]
test rax, rax
je 0x1400351e1
mov rcx, qword [rbp + 0x408]
mov qword [rbp + 0x5e8], rcx
mov r12, qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
lea rcx, [rax + 0x168]
movzx edx, word [rax + 0x3d2]
mov qword [rbp + 0x550], rdx
imul r13, rdx, 0x38
mov qword [rbp + 0x5e0], rax
lea rdi, [rax - 0x10]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
test r13, r13
je 0x140035180
lea r15, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, r14d
call r12
add r13, 0xffffffffffffffc8
add rdi, 0x20
inc rbx
mov rcx, r15
cmp eax, 3
je 0x140035140
cmp eax, 1
jne 0x1400351b3
jmp 0x140035187
mov rbx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x5e8]
sub rax, 1
jb 0x1400356f8
mov qword [rbp + 0x5e8], rax
mov rax, qword [rbp + 0x5e0]
mov rax, qword [rax + rbx*8 + 0x3d8]
jmp 0x14003510d
cmp eax, 2
jne 0x140037b14
cmp qword [rbp + 0x5e0], 0
mov rbx, qword [rbp + 0x5d0]
je 0x140035411
mov r12, qword [rdi - 0x10]
mov rdi, qword [rdi]
cmp qword [rbp - 0x10], 0
jne 0x1400351f2
jmp 0x140035205
xor r12d, r12d
mov rbx, qword [rbp + 0x5d0]
cmp qword [rbp - 0x10], 0
je 0x140035205
mov r8, qword [rbp - 0x18]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp - 0x28], 0
je 0x14003521e
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbx + 0x40]
lea r14, [0x1412f2b20]
test rcx, rcx
je 0x140035276
mov r15, qword [rbx + 0x30]
cmp rcx, 4
jae 0x140035241
lea rdx, [0x14003b100]
jmp 0x14003525a
cmp dword [r15], 0x5c3f5c5c
lea rax, [0x14003b0f0]
lea rdx, [0x14003b100]
cmove rdx, rax
mov qword [rbp + 0x5e0], rcx
movzx esi, byte [rcx + r15 - 1]
mov byte [rbp + 0x5f7], 1
mov ecx, esi
call rdx
test al, al
je 0x1400352de
mov rax, qword [rbp + 0x508]
mov qword [rax], r14
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x3f8], 0
je 0x1400353f6
mov rcx, qword [rbp + 0x400]
test rcx, rcx
je 0x1400353dd
mov rdx, qword [rbp + 0x408]
mov rax, qword [rbp + 0x410]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rcx
mov qword [rbp + 8], rdx
mov ecx, 1
jmp 0x1400353e1
mov rbx, r12
mov r12, qword [rbp + 0x5e0]
cmp r12, 4
jb 0x14003534e
movzx eax, byte [r12 + r15 - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x14003534e
movzx eax, byte [r15 + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14003534e
movzx eax, byte [r15 + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x14003534e
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x140035350
xor eax, eax
lea r11, [r15 + r12]
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x140035424
movzx edx, byte [r15 + rcx]
cmp edx, 0x2f
je 0x14003537b
inc rcx
cmp edx, 0x5c
jne 0x140035360
test al, al
mov qword [rbp + 0x550], r11
je 0x140035503
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp - 0x30]
mov rdx, r15
mov r8, r12
call fcn.140026dc0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
test rcx, rcx
je 0x140035626
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp + 0x510]
lea rdx, [rbp - 0x30]
call fcn.14003b2f0
jmp 0x140035638
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.14003b8c0
movaps xmm6, xmmword [rbp + 0x600]
add rsp, 0x698
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor r12d, r12d
cmp qword [rbp - 0x10], 0
jne 0x1400351f2
jmp 0x140035205
xor r8d, r8d
lea r14, [0x1412f2ab8]
mov rax, r15
jmp 0x14003544c
xor r8d, r8d
test cx, cx
je 0x140035276
mov cx, 1
test r8w, r8w
jne 0x140035440
cmp rax, r11
je 0x1400356c4
movzx r9d, byte [rax]
movzx edx, r9b
test dl, dl
js 0x140035470
inc rax
jmp 0x1400354d2
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1400354c4
movzx edx, byte [rax + 2]
shl r10d, 6
and edx, 0x3f
or edx, r10d
cmp r9b, 0xf0
jb 0x1400354dc
movzx r9d, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl edx, 6
and r9d, 0x3f
or r9d, edx
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1400354d2
jmp 0x1400354ef
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x140035443
add rax, 3
shl r8d, 0xc
or edx, r8d
cmp edx, 0xffff
jbe 0x1400354d2
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x140035443
xor esi, esi
test r12, r12
setns bl
js 0x140037d5d
movzx eax, byte [0x141303ad0]
mov rcx, qword [0x141303bb8]
test rcx, rcx
jne 0x14003553d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140037d43
mov rcx, rax
mov qword [0x141303bb8], rax
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140037d43
mov rdi, rax
mov rcx, rax
mov rdx, r15
mov r8, r12
call fcn.140045ab0
mov qword [rbp + 0x5e8], rdi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r12
mov byte [rbp - 0x18], 0
mov eax, dword [rbp + 0x4a0]
mov ecx, dword [rbp + 0x4a3]
mov dword [rbp - 0x17], eax
mov dword [rbp - 0x14], ecx
lea rdx, [0x1412f2ad0]
lea rcx, [rbp - 0x30]
mov r8d, 4
call fcn.14002d0d0
lea rax, [rbp - 0x17]
mov rdi, qword [rbp - 0x30]
mov r14, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x20]
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rbp + 0x4a0], ecx
mov dword [rbp + 0x4a3], eax
mov qword [rbp + 0x3e0], r14
mov qword [rbp + 0x3d8], rdi
mov byte [rbp + 0x5cd], 1
lea rcx, [rbp + 0x560]
mov rdx, rdi
mov r8, rsi
call fcn.14003b110
mov rbx, qword [rbp + 0x5d0]
cmp qword [rbp + 0x560], 0
je 0x140035644
mov rax, qword [rbp + 0x570]
mov qword [rbp + 0x520], rax
movdqu xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp + 0x510], xmm0
test r14, r14
jne 0x14003578e
jmp 0x1400357a0
mov qword [rbp + 0x518], rax
mov qword [rbp + 0x510], 0
mov rbx, qword [rbp + 0x5d0]
jmp 0x1400357a0
mov qword [rbp + 0x5e8], r14
mov qword [rbp + 0x5e0], rdi
mov rcx, rdi
mov rdx, rsi
call fcn.140033230
test rax, rax
je 0x140035724
cmp rdx, 2
mov r9, qword [rbp + 0x5e0]
jne 0x140035685
movzx r8d, word [rax]
mov ecx, 2
cmp r8d, 0x2e2e
je 0x1400356b5
mov r8, rdx
nop dword [rax + rax]
test r8, r8
je 0x1400356b2
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x140035690
cmp rdx, rcx
jb 0x140037d9f
test r8, r8
cmovne rdx, r8
mov rcx, rdx
add rax, rcx
sub rax, r9
cmp rsi, rax
cmovae rsi, rax
jmp 0x14003572b
cmp r12, 0xf
mov qword [rbp + 0x550], r11
ja 0x140035712
xor eax, eax
mov qword [rbp + 0x558], rax
xor eax, eax
nop dword [rax]
cmp byte [r15 + rax], 0x2e
je 0x14003597b
inc rax
cmp r12, rax
jne 0x1400356e0
jmp 0x140035987
mov rbx, qword [rbp + 0x5d0]
xor r12d, r12d
cmp qword [rbp - 0x10], 0
jne 0x1400351f2
jmp 0x140035205
mov cl, 0x2e
mov rdx, r15
mov r8, r12
call fcn.14001ac20
jmp 0x140035980
mov r9, qword [rbp + 0x5e0]
lea rcx, [rbp - 0x30]
mov rdx, r9
mov r8, rsi
call fcn.140026dc0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
test rcx, rcx
je 0x140035769
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x510]
lea rdx, [rbp - 0x30]
call fcn.14003b2f0
jmp 0x14003577b
mov qword [rbp + 0x518], rax
mov qword [rbp + 0x510], 0
mov rdi, qword [rbp + 0x5e0]
mov r14, qword [rbp + 0x5e8]
test r14, r14
je 0x1400357a0
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0x510]
mov r14, qword [rbp + 0x518]
test r8, r8
je 0x140035276
mov r9, qword [rbp + 0x520]
mov qword [rbp + 0x5e0], r14
cmp r9, 5
mov qword [rbp + 0x5e8], r8
jb case.0x140035810.68
cmp word [r8 + r9*2 - 0xa], 0x2e
jne case.0x140035810.68
cmp word [r8 + r9*2 - 2], 0
jne case.0x140035810.68
movzx eax, word [r8 + r9*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x140035810.68
lea rdx, [0x140038d9c]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [r8 + r9*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x14003582e
movzx ecx, word [r8 + r9*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x14003585e
cmp ax, 0x43
jne case.0x140035810.68
movzx eax, word [r8 + r9*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x140035810.68
movzx eax, word [r8 + r9*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x140035810.68
mov qword [rbp + 0x500], r9
mov qword [rbp + 0x560], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x568], xmm0
mov eax, 0x200
mov ecx, 2
mov qword [rbp + 0x550], rcx
xor edi, edi
xor esi, esi
xor ebx, ebx
cmp rax, 0x201
jb 0x1400358ab
jmp 0x1400358ba
jae 0x140036b45
cmp rax, 0x201
jae 0x1400358ba
mov r15d, 0x200
lea r14, [rbp - 0x30]
mov r12, rax
jmp 0x140035914
sub rax, rbx
sub rsi, rbx
cmp rsi, rax
jae 0x1400358ec
lea rcx, [rbp + 0x560]
mov rdx, rbx
mov r8, rax
call fcn.140054500
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x550], rax
mov rdi, qword [rbp + 0x568]
mov eax, 0xffffffff
cmp rdi, rax
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rbp + 0x570], rbx
mov rsi, rdi
mov r15, rbx
mov r14, qword [rbp + 0x550]
mov r12, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov r13d, eax
test eax, eax
jne 0x14003593d
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140036f42
mov eax, r13d
cmp r12, rax
jne 0x14003589d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140037d6e
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov rax, r12
cmp rax, 0x201
jae 0x1400358ba
jmp 0x1400358ab
mov eax, 1
mov qword [rbp + 0x558], rax
test rbx, rbx
je 0x1400359d0
add rdi, rbx
mov qword [rbp + 0x4a0], rbx
mov qword [rbp + 0x4a8], rdi
mov word [rbp + 0x4b0], 0
mov byte [rbp + 0x4b8], 1
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x4a0]
call fcn.14002c2c0
movzx eax, byte [rbp - 0x18]
cmp al, 2
jne 0x140035cc0
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp + 0x560]
call fcn.14002cd20
cmp byte [rbp + 0x578], 2
jne 0x140035a04
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp + 0x560]
call fcn.140028040
jmp 0x140035adf
mov rcx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x568]
mov qword [rbp + 0x5c0], rax
mov rsi, qword [rbp + 0x570]
mov byte [rbp + 0x5ce], 1
mov qword [rbp + 0x5e8], rcx
mov rdx, rsi
call fcn.140030cf0
cmp rsi, rdx
cmovb rdx, rsi
test rax, rax
cmove rdx, rsi
mov rax, qword [rbp + 0x5e8]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x5c0]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
mov rax, qword [rbp + 0x578]
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x30]
mov rdx, r15
mov r8, qword [rbp + 0x5e0]
call fcn.14002f030
cmp qword [rbp + 0x558], 1
je 0x140035a8f
lea rcx, [rbp - 0x30]
call fcn.140033390
mov rsi, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x4a0]
mov rdx, rsi
call fcn.14003b110
cmp qword [rbp - 0x28], 0
mov rbx, qword [rbp + 0x5d0]
je 0x140035ac6
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0x4a0]
test r8, r8
je 0x140035adf
movdqu xmm6, xmmword [rbp + 0x4a8]
jmp 0x14003607c
mov qword [rbp + 0x5c0], r15
mov qword [rbp + 0x460], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x468], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x5e8], rax
xor r15d, r15d
xor esi, esi
xor r14d, r14d
cmp r8, 0x201
jb 0x140035b3f
jmp 0x140035b50
jae 0x140035c0e
cmp r8, 0x201
jae 0x140035b50
mov r12d, 0x200
lea r13, [rbp - 0x30]
mov rbx, r8
jmp 0x140035ba8
sub r8, r14
sub rsi, r14
cmp rsi, r8
jae 0x140035b7f
lea rcx, [rbp + 0x460]
mov rdx, r14
call fcn.140054500
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x5e8], rax
mov r15, qword [rbp + 0x468]
mov eax, 0xffffffff
cmp r15, rax
mov r14d, 0xffffffff
cmovb r14, r15
mov qword [rbp + 0x470], r14
mov rsi, r15
mov r12, r14
mov r13, qword [rbp + 0x5e8]
mov rbx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r13
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, eax
test eax, eax
jne 0x140035bcf
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140035dce
mov r8d, edi
cmp rbx, r8
jne 0x140035b30
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140037c95
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x140035b50
jmp 0x140035b3f
cmp r12, r8
jb 0x140037d88
lea rcx, [rbp + 0x560]
mov rdx, r13
call fcn.140028140
lea rcx, [rbp + 0x560]
mov rdx, qword [rbp + 0x5c0]
mov r8, qword [rbp + 0x5e0]
call fcn.14002f030
cmp qword [rbp + 0x558], 1
je 0x140035c56
lea rcx, [rbp + 0x560]
call fcn.140033390
mov rdi, qword [rbp + 0x560]
mov r8, qword [rbp + 0x570]
lea rcx, [rbp + 0x530]
mov rdx, rdi
call fcn.14003b110
cmp qword [rbp + 0x568], 0
je 0x140035c8f
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqu xmm0, xmmword [rbp + 0x530]
movdqu xmmword [rbp + 0x4a8], xmm0
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x4b8], rax
mov qword [rbp + 0x4a0], 0
mov sil, 1
jmp 0x140035df0
lea r12, [rbp - 0x17]
lea r13, [rbp + 0x579]
lea rsi, [rbp - 0x30]
lea rdi, [rbp + 0x4a0]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140035cfe
mov byte [rbp + 0x5f7], 1
mov rcx, rsi
mov rdx, rdi
call fcn.14002c2c0
movzx eax, byte [rbp - 0x18]
cmp al, 2
je 0x1400359d0
mov r8, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x140035d21
test rcx, rcx
je 0x140035ce0
mov rcx, qword [0x141303bb8]
xor edx, edx
call rbx
jmp 0x140035ce0
mov r9d, dword [r12]
mov r10d, dword [r12 + 3]
mov dword [r13 + 3], r10d
mov dword [r13], r9d
mov qword [rbp + 0x560], r8
mov qword [rbp + 0x568], rcx
mov qword [rbp + 0x570], rdx
mov byte [rbp + 0x578], al
lea rcx, [rbp + 0x560]
mov rdx, r15
mov r8, qword [rbp + 0x5e0]
call fcn.14002f030
cmp qword [rbp + 0x558], 1
je 0x140035d79
lea rcx, [rbp + 0x560]
call fcn.140033390
mov r14, qword [rbp + 0x560]
mov r8, qword [rbp + 0x570]
mov rcx, rsi
mov rdx, r14
call fcn.14003b110
cmp qword [rbp + 0x568], 0
je 0x140035daa
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, r14
call rbx
mov r8, qword [rbp - 0x30]
test r8, r8
jne 0x1400370e7
mov byte [rbp + 0x5f7], 1
mov rcx, rsi
mov rdx, rdi
call fcn.14002c2c0
jmp 0x140035cf2
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x4a0], 1
xor esi, esi
test r15, r15
je 0x140035e0b
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
mov r15, qword [rbp + 0x5c0]
je 0x140035e27
mov r8, qword [rbp + 0x4a8]
test r8, r8
jne 0x14003606d
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp + 0x4a0]
call fcn.14003b1f0
mov qword [rbp + 0x460], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x468], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x5e8], rax
xor esi, esi
xor r15d, r15d
xor ebx, ebx
cmp r8, 0x201
jb 0x140035e8f
jmp 0x140035ea0
jae 0x140035f5e
cmp r8, 0x201
jae 0x140035ea0
mov r14d, 0x200
lea r13, [rbp - 0x30]
mov r12, r8
jmp 0x140035ef7
sub r8, rbx
sub r15, rbx
cmp r15, r8
jae 0x140035ecf
lea rcx, [rbp + 0x460]
mov rdx, rbx
call fcn.140054500
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x5e8], rax
mov rsi, qword [rbp + 0x468]
mov eax, 0xffffffff
cmp rsi, rax
mov ebx, 0xffffffff
cmovb rbx, rsi
mov qword [rbp + 0x470], rbx
mov r15, rsi
mov r14, rbx
mov r13, qword [rbp + 0x5e8]
mov r12, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r13
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov edi, eax
test eax, eax
jne 0x140035f1f
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140036010
mov r8d, edi
cmp r12, r8
jne 0x140035e80
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140037cb2
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jae 0x140035ea0
jmp 0x140035e8f
cmp r14, r8
jb 0x140037dad
lea rcx, [rbp + 0x560]
mov rdx, r13
call fcn.140028140
mov r8, qword [rbp + 0x5e0]
lea rcx, [rbp + 0x560]
mov r15, qword [rbp + 0x5c0]
mov rdx, r15
call fcn.14002f030
cmp qword [rbp + 0x558], 1
je 0x140035fa9
lea rcx, [rbp + 0x560]
call fcn.140033390
mov rdi, qword [rbp + 0x560]
mov r8, qword [rbp + 0x570]
lea rcx, [rbp + 0x530]
mov rdx, rdi
call fcn.14003b110
cmp qword [rbp + 0x568], 0
je 0x140035fe2
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqu xmm0, xmmword [rbp + 0x530]
movdqu xmmword [rbp + 0x4a8], xmm0
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x4b8], rax
mov qword [rbp + 0x4a0], 0
mov dil, 1
jmp 0x140036039
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x4a0], 1
xor edi, edi
mov r15, qword [rbp + 0x5c0]
test rsi, rsi
je 0x140036054
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test dil, dil
je 0x14003690c
mov r8, qword [rbp + 0x4a8]
test r8, r8
je 0x14003690c
movdqu xmm6, xmmword [rbp + 0x4b0]
mov rbx, qword [rbp + 0x5d0]
movq r14, xmm6
pshufd xmm0, xmm6, 0xee
movq r9, xmm0
mov qword [rbp + 0x5e0], r14
cmp r9, 5
mov qword [rbp + 0x5e8], r8
jae 0x1400357d6
mov rsi, qword [rbx + 0x90]
mov rdi, qword [rbx + 0xa0]
mov bl, byte [rbx + 0xad]
mov qword [rbp + 0x560], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x568], xmm0
lea rcx, [rbp + 0x560]
xor edx, edx
call fcn.1400272f0
mov rax, qword [rbp + 0x560]
mov rcx, qword [rbp + 0x570]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rbp + 0x570], rcx
mov qword [rbp - 0x30], r15
mov rax, qword [rbp + 0x550]
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x560]
lea rdx, [rbp - 0x30]
call fcn.140027140
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x568]
jne 0x140036142
lea rcx, [rbp + 0x560]
call fcn.1400272f0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x560]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rbp + 0x570], rdx
lea rax, [rdi + rdi*4]
lea r15, [rsi + rax*8]
lea r14, [rbp + 0x560]
nop dword [rax + rax]
cmp rsi, r15
je 0x1400361ee
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x568]
jne 0x140036194
mov rcx, r14
call fcn.1400272f0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x560]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rbp + 0x570], rdx
mov rcx, r14
mov rdx, rsi
mov r8d, ebx
call fcn.14003b400
mov rdi, rax
add rsi, 0x28
test rax, rax
je 0x140036170
cmp qword [rbp + 0x568], 0
je 0x14003630c
mov r8, qword [rbp + 0x560]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14003630c
mov rax, qword [rbp + 0x560]
mov rdi, qword [rbp + 0x568]
test rax, rax
je 0x14003630c
mov rdx, qword [rbp + 0x570]
mov r12b, 1
mov dword [rbp + 0x428], 0
mov rcx, qword [rbp + 0x5e0]
mov qword [rbp + 0x550], rcx
mov rcx, qword [rbp + 0x5e8]
mov qword [rbp + 0x558], rcx
mov rbx, qword [rbp + 0x5d0]
mov qword [rbp + 0x488], rax
mov qword [rbp + 0x490], rdi
mov qword [rbp + 0x498], rdx
cmp rdx, rdi
jne 0x140036277
mov byte [rbp + 0x5f3], 1
lea rcx, [rbp + 0x488]
call fcn.1400272f0
mov rax, qword [rbp + 0x488]
mov rdx, qword [rbp + 0x498]
mov word [rax + rdx*2], 0
inc rdx
mov qword [rbp + 0x498], rdx
cmp byte [rbx + 0xac], 0
mov eax, 0x400
mov r15d, 0x608
cmove r15d, eax
or r15d, dword [rbx + 0xa8]
cmp qword [rbp + 0x3f8], 0
mov rdi, qword [rbp + 0x5e0]
je 0x140036350
mov dword [rbp + 0x500], r12d
mov rsi, qword [rbp + 0x410]
mov qword [rbp + 0x450], rsi
movdqu xmm0, xmmword [rbp + 0x400]
movdqa xmmword [rbp + 0x440], xmm0
mov qword [rbp + 0x510], 2
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x518], xmm0
test rsi, rsi
je 0x140036392
mov r14d, 2
xor r12d, r12d
jmp 0x1400363c6
mov rax, qword [rbp + 0x508]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
xor esi, esi
mov rdi, qword [rbp + 0x5e0]
test rdi, rdi
je 0x140036342
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
je 0x140035288
jmp 0x1400353f6
mov r13d, 2
xor eax, eax
mov qword [rbp + 0x5c0], rax
xor r14d, r14d
cmp byte [rbx + 0x88], 2
jne 0x140036c07
xor eax, eax
mov qword [rbp + 0x3f0], rax
mov eax, 2
mov qword [rbp + 0x438], rax
xor eax, eax
mov qword [rbp + 0x4f8], rax
jmp 0x140036d85
mov byte [rbp + 0x5f4], 1
lea rcx, [rbp + 0x510]
xor edx, edx
call fcn.1400272f0
mov r14, qword [rbp + 0x510]
mov r12, qword [rbp + 0x520]
mov word [r14 + r12*2], 0
inc r12
mov qword [rbp + 0x520], r12
mov rax, qword [rbp + 0x440]
mov rcx, qword [rbp + 0x448]
xor edx, edx
test rax, rax
setne dl
cmove rsi, rax
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rax
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rsi
lea rcx, [rbp + 0x530]
lea rdx, [rbp - 0x30]
mov rsi, rdx
call fcn.140033fb0
mov rdx, qword [rbp + 0x530]
test rdx, rdx
je 0x140036b83
mov r9, qword [rbp + 0x540]
imul r10, r9, 0x38
mov rax, qword [rdx + r10 + 0x168]
mov qword [rbp + 0x5c0], rax
mov rax, qword [rdx + r10 + 0x170]
mov qword [rbp + 0x4f8], rax
mov rbx, qword [rdx + r10 + 0x178]
mov r8, qword [rdx + r10 + 0x180]
mov rax, qword [rdx + r10 + 0x188]
mov rcx, qword [rdx + r10 + 0x190]
movzx r11d, byte [rdx + r10 + 0x198]
mov edi, dword [rdx + r10 + 0x19c]
mov dword [rbp + 0x563], edi
mov r10d, dword [rdx + r10 + 0x199]
mov dword [rbp + 0x560], r10d
shl r9, 5
movups xmm0, xmmword [rdx + r9]
movups xmm1, xmmword [rdx + r9 + 0x10]
lea rdx, [rbp + 0x567]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
mov rdx, qword [rbp + 0x57f]
mov qword [rbp + 0x4bf], rdx
mov edx, dword [rbp + 0x560]
movzx r9d, word [rbp + 0x564]
movzx r10d, byte [rbp + 0x566]
mov rdi, qword [rbp + 0x567]
movzx r13d, byte [rbp + 0x56f]
movdqu xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x4b0], xmm0
mov dword [rbp + 0x4a0], edx
mov word [rbp + 0x4a4], r9w
mov byte [rbp + 0x4a6], r10b
mov qword [rbp + 0x4a7], rdi
mov byte [rbp + 0x4af], r13b
cmp r11b, 2
je 0x140036b83
lea rdx, [rbp + 0x4a7]
movdqu xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movaps xmmword [rbp + 0x540], xmm1
movdqa xmmword [rbp + 0x530], xmm0
add rcx, r8
xor r11d, r11d
mov rdx, r8
jmp 0x14003656d
xor r11d, r11d
test r9w, r9w
je 0x1400368ab
mov r9w, 1
test r11w, r11w
jne 0x140036560
cmp rdx, rcx
je 0x14003662a
movzx r13d, byte [rdx]
movzx r10d, r13b
test r10b, r10b
js 0x140036593
inc rdx
jmp 0x1400365f5
mov r11d, r10d
and r11d, 0x1f
movzx edi, byte [rdx + 1]
and edi, 0x3f
cmp r10b, 0xdf
jbe 0x1400365e7
movzx r10d, byte [rdx + 2]
shl edi, 6
and r10d, 0x3f
or r10d, edi
cmp r13b, 0xf0
jb 0x140036600
movzx edi, byte [rdx + 3]
add rdx, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and edi, 0x3f
or edi, r10d
or edi, r11d
mov r10d, edi
cmp r10d, 0xffff
jbe 0x1400365f5
jmp 0x140036614
add rdx, 2
shl r11d, 6
or r11d, edi
mov r10d, r11d
xor r11d, r11d
mov r9d, r10d
jmp 0x140036563
add rdx, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
jbe 0x1400365f5
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140036563
test rax, rax
je 0x14003663e
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x518]
sub rax, r12
cmp rax, rbx
jae 0x14003666d
lea rcx, [rbp + 0x510]
mov rdx, r12
mov r8, rbx
call fcn.140054500
mov r14, qword [rbp + 0x510]
mov r12, qword [rbp + 0x520]
lea r8, [rbx + rbx]
lea rcx, [r14 + r12*2]
mov rdi, qword [rbp + 0x5c0]
mov rdx, rdi
call fcn.140045ab0
add r12, rbx
mov qword [rbp + 0x520], r12
cmp qword [rbp + 0x4f8], 0
je 0x1400366aa
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r12, qword [rbp + 0x518]
jne 0x1400366d7
mov byte [rbp + 0x5f2], 1
lea rcx, [rbp + 0x510]
mov rdx, r12
call fcn.1400272f0
mov r14, qword [rbp + 0x510]
mov r12, qword [rbp + 0x520]
mov word [r14 + r12*2], 0x3d
inc r12
mov qword [rbp + 0x520], r12
mov rbx, qword [rbp + 0x530]
mov r12, qword [rbp + 0x538]
mov rcx, qword [rbp + 0x540]
movzx edx, byte [rbp + 0x548]
lea rax, [rbx + rcx]
xor r11d, r11d
mov r8, rbx
jmp 0x14003671d
xor r11d, r11d
test r9w, r9w
je 0x140036aa6
mov r9w, 1
test r11w, r11w
jne 0x140036710
cmp r8, rax
je 0x1400367d5
movzx r14d, byte [r8]
movzx r10d, r14b
test r10b, r10b
js 0x140036743
inc r8
jmp 0x1400367b4
mov r11d, r10d
and r11d, 0x1f
movzx edi, byte [r8 + 1]
and edi, 0x3f
cmp r10b, 0xdf
jbe 0x140036790
movzx r10d, byte [r8 + 2]
shl edi, 6
and r10d, 0x3f
or r10d, edi
cmp r14b, 0xf0
jb 0x1400367a0
movzx edi, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and edi, 0x3f
or edi, r10d
or edi, r11d
mov r10d, edi
jmp 0x1400367ab
add r8, 2
shl r11d, 6
or r11d, edi
mov r10d, r11d
jmp 0x1400367b4
add r8, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
ja 0x1400367bf
xor r11d, r11d
mov r9d, r10d
jmp 0x140036713
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140036713
cmp dl, 2
je 0x140037b0c
lea r9, [rbp + 0x549]
mov r8d, dword [r9]
mov r9d, dword [r9 + 3]
lea r10, [rbp + 0x567]
mov dword [r10 + 0x15], r9d
mov dword [r10 + 0x12], r8d
mov qword [rbp + 0x560], rbx
mov qword [rbp + 0x568], r12
mov qword [rbp + 0x570], rcx
mov byte [rbp + 0x578], dl
mov qword [rbp + 0x460], rbx
mov qword [rbp + 0x468], rax
mov word [rbp + 0x470], 0
lea rcx, [rbp + 0x510]
lea rdx, [rbp + 0x460]
call fcn.140027140
test r12, r12
je 0x140036857
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x520]
cmp r12, qword [rbp + 0x518]
jne 0x140036884
mov byte [rbp + 0x5f2], 0
lea rcx, [rbp + 0x510]
mov rdx, r12
call fcn.1400272f0
mov r12, qword [rbp + 0x520]
lea rcx, [rbp + 0x530]
mov rdx, rsi
mov r14, qword [rbp + 0x510]
mov word [r14 + r12*2], 0
inc r12
mov qword [rbp + 0x520], r12
jmp 0x140036417
test rax, rax
je 0x1400368bf
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x538], 0
mov rsi, qword [rbp + 0x5c0]
je 0x1400368e6
mov r8, qword [rbp + 0x530]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r14, [0x1412f2ab8]
cmp qword [rbp + 0x4f8], 0
je 0x140036ac4
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rsi
jmp 0x140036abe
mov byte [rbp + 0x5f7], 1
lea rcx, [rbp + 0x4a0]
call fcn.14003b1f0
mov byte [rbp + 0x5f7], 1
lea rdx, [0x1412f1bcc]
lea rcx, [rbp + 0x460]
mov r8d, 4
call fcn.140029fb0
cmp byte [rbp + 0x478], 2
je 0x140036b39
movdqu xmm0, xmmword [rbp + 0x460]
movups xmm1, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x530], xmm0
movaps xmmword [rbp + 0x540], xmm1
mov rcx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x540]
add rax, rcx
mov qword [rbp + 0x5e8], rcx
mov qword [rbp + 0x4a0], rcx
mov qword [rbp + 0x4a8], rax
mov word [rbp + 0x4b0], 0
mov byte [rbp + 0x4b8], 1
lea r13, [rbp - 0x17]
lea r14, [rbp + 0x579]
lea rdi, [rbp - 0x30]
lea rbx, [rbp + 0x4a0]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400369cc
mov rax, qword [rbp - 0x30]
test rax, rax
jne 0x140037a20
mov rcx, rdi
mov rdx, rbx
call fcn.14002c2c0
mov r12, qword [rbp + 0x5e0]
jmp 0x1400369eb
mov rcx, rdi
mov rdx, rbx
call fcn.14002c2c0
movzx eax, byte [rbp - 0x18]
cmp al, 2
je 0x140036b19
mov r8, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x140036a1a
test rcx, rcx
je 0x1400369e0
mov rcx, qword [0x141303bb8]
xor edx, edx
call rsi
jmp 0x1400369e0
mov r9d, dword [r13]
mov r10d, dword [r13 + 3]
mov dword [r14 + 3], r10d
mov dword [r14], r9d
mov qword [rbp + 0x560], r8
mov qword [rbp + 0x568], rcx
mov qword [rbp + 0x570], rdx
mov byte [rbp + 0x578], al
lea rcx, [rbp + 0x560]
mov rdx, r15
mov r8, r12
call fcn.14002f030
cmp qword [rbp + 0x558], 1
je 0x140036a6c
lea rcx, [rbp + 0x560]
call fcn.140033390
mov r12, qword [rbp + 0x560]
mov r8, qword [rbp + 0x570]
mov rcx, rdi
mov rdx, r12
call fcn.14003b110
cmp qword [rbp + 0x568], 0
je 0x1400369bf
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, r12
call rsi
jmp 0x1400369bf
lea r14, [0x1412f2ab8]
test r12, r12
je 0x140036ac4
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rbp + 0x5f4], 0
lea rcx, [rbp - 0x30]
call fcn.14003b8c0
cmp qword [rbp + 0x518], 0
je 0x140036af4
mov r8, qword [rbp + 0x510]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rbp + 0x5e0]
mov r12d, dword [rbp + 0x500]
mov rax, qword [rbp + 0x508]
mov qword [rax], r14
mov qword [rax + 0x10], 2
jmp 0x140037096
cmp qword [rbp + 0x538], 0
je 0x140036b39
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r14, [0x1412f2ae8]
jmp 0x140035276
cmp r15, rax
jb 0x140037dc4
test r13d, r13d
je 0x1400370f0
mov rsi, rax
lea rbx, [rax + rax]
movzx eax, byte [0x141303ad0]
mov edx, 2
mov rcx, rbx
call fcn.1400139f0
test rax, rax
je 0x140037dec
mov r13, rax
jmp 0x1400370fb
mov byte [rbp + 0x5f4], 0
lea rcx, [rbp - 0x30]
call fcn.14003b8c0
mov rbx, qword [rbp + 0x5d0]
cmp r12, qword [rbp + 0x518]
jne 0x140036bc7
mov byte [rbp + 0x5f4], 0
lea rcx, [rbp + 0x510]
mov rdx, r12
call fcn.1400272f0
mov r14, qword [rbp + 0x510]
mov r12, qword [rbp + 0x520]
mov word [r14 + r12*2], 0
mov r13, qword [rbp + 0x510]
test r13, r13
mov rdi, qword [rbp + 0x5e0]
je 0x140036afb
mov rax, qword [rbp + 0x518]
mov qword [rbp + 0x5c0], rax
mov r12d, dword [rbp + 0x500]
cmp byte [rbx + 0x88], 2
je 0x14003636f
mov rax, qword [rbx + 0x70]
mov rcx, qword [rbx + 0x80]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x140036c2a
xor r10d, r10d
test r8w, r8w
je 0x140036ce2
mov r8w, 1
test r10w, r10w
jne 0x140036c1d
cmp rdx, rcx
je 0x140036d07
movzx r11d, byte [rdx]
movzx r9d, r11b
test r9b, r9b
js 0x140036c50
inc rdx
jmp 0x140036cc1
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x140036c9d
movzx r9d, byte [rdx + 2]
shl esi, 6
and r9d, 0x3f
or r9d, esi
cmp r11b, 0xf0
jb 0x140036cad
movzx r11d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r10d
mov r9d, r11d
jmp 0x140036cb8
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x140036cc1
add rdx, 3
shl r10d, 0xc
or r9d, r10d
cmp r9d, 0xffff
ja 0x140036ccc
xor r10d, r10d
mov r8d, r9d
jmp 0x140036c20
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x140036c20
lea rax, [0x1412f2ab8]
mov rcx, qword [rbp + 0x508]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rbx, qword [rbp + 0x5c0]
jmp 0x14003707f
mov qword [rbp + 0x5d0], r13
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x560]
lea rdx, [rbp - 0x30]
call fcn.140038eb0
mov rax, qword [rbp + 0x568]
mov rdx, qword [rbp + 0x570]
cmp rdx, rax
jne 0x140036d59
lea rcx, [rbp + 0x560]
call fcn.1400272f0
mov rax, qword [rbp + 0x568]
mov rdx, qword [rbp + 0x570]
mov qword [rbp + 0x4f8], rax
mov rcx, qword [rbp + 0x560]
mov word [rcx + rdx*2], 0
mov rax, rcx
mov qword [rbp + 0x3f0], rcx
mov qword [rbp + 0x438], rcx
mov r13, qword [rbp + 0x5d0]
mov qword [rbp + 0x5d0], r13
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x530], xmm0
mov qword [rbp + 0x540], 0
lea rdi, [0x141303bc8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x141303b98]
shl rax, 1
mov r13d, r12d
test rax, rax
jne 0x140037845
xor eax, eax
movzx edx, byte [0x141303bd0]
xor ecx, ecx
mov byte [rbp + 0x500], dl
test dl, dl
setne cl
mov qword [rbp + 0x4a8], rdi
mov dword [rbp + 0x430], eax
mov byte [rbp + 0x4b0], al
mov qword [rbp + 0x4a0], rcx
mov qword [rbp + 0x560], 0
mov qword [rbp + 0x570], 0
mov qword [rbp + 0x580], 0
mov rdx, qword [rbx]
mov rdi, qword [rbx + 0x10]
xor eax, eax
cmp rdx, 5
mov r8, rbx
cmove r8, rax
cmp byte [rbp + 0x458], 0
mov ecx, 1
cmovne rcx, qword [rbp + 0x418]
lea r10, [rbp + 0x3e8]
lea r9, [rbp + 0x460]
cmovne r9, r10
add r8, 8
cmp rdx, 5
cmovne rcx, rdx
cmove r8, r9
lea rsi, [rbx + 0x10]
cmp rdi, 5
cmove rsi, rax
mov r12, rbx
mov rbx, qword [rbx + 0x20]
add r12, 0x20
cmp rbx, 5
cmove r12, rax
mov rdx, qword [r8]
lea r9, [rbp + 0x560]
mov r8d, 0xfffffff6
call fcn.14003b990
test rax, rax
je 0x140036ed4
mov rax, qword [rbp + 0x508]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov rdi, qword [rbp + 0x5e0]
mov r12d, r13d
mov r13, qword [rbp + 0x5d0]
mov rbx, qword [rbp + 0x5c0]
movzx esi, byte [rbp + 0x500]
jmp 0x140036fed
mov qword [rbp + 0x458], rdx
add rsi, 8
cmp rdi, 5
cmove rdi, qword [rbp + 0x418]
lea r9, [rbp + 0x570]
lea rax, [rbp + 0x3e8]
cmove rsi, rax
mov rdx, qword [rsi]
mov rcx, rdi
mov r8d, 0xfffffff5
call fcn.14003b990
test rax, rax
mov rdi, qword [rbp + 0x5e0]
je 0x140036f58
mov rax, qword [rbp + 0x508]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov r12d, r13d
mov r13, qword [rbp + 0x5d0]
mov rbx, qword [rbp + 0x5c0]
jmp 0x140036fd9
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
xor r13d, r13d
jmp 0x14003710c
mov qword [rbp + 0x420], rdx
add r12, 8
cmp rbx, 5
mov rcx, qword [rbp + 0x418]
cmovne rcx, rbx
lea r9, [rbp + 0x580]
lea rax, [rbp + 0x3e8]
cmove r12, rax
mov rdx, qword [r12]
mov r8d, 0xfffffff4
call fcn.14003b990
mov rdi, rdx
test rax, rax
mov r12d, r13d
je 0x140037851
mov rax, qword [rbp + 0x508]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
mov r13, qword [rbp + 0x5d0]
mov rbx, qword [rbp + 0x5c0]
mov rsi, qword [rbp + 0x420]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rbp + 0x5e0]
movzx esi, byte [rbp + 0x500]
mov rcx, qword [rbp + 0x458]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x560], 0
je 0x140037004
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x570], 0
je 0x14003701b
mov rcx, qword [rbp + 0x578]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x580], 0
je 0x140037032
mov rcx, qword [rbp + 0x588]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test sil, sil
cmp byte [rbp + 0x430], 0
jne 0x140037052
mov rax, qword [0x141303b98]
shl rax, 1
test rax, rax
jne 0x140037a57
lea rcx, [0x141303bc8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
cmp qword [rbp + 0x4f8], 0
je 0x14003707f
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
je 0x140037096
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x490], 0
je 0x1400370b6
mov r8, qword [rbp + 0x488]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x550], 0
je 0x1400370d6
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov sil, 1
test r12b, r12b
jne 0x1400353f6
jmp 0x140036327
movups xmm6, xmmword [rbp - 0x28]
jmp 0x140036075
mov rsi, rax
mov r13d, 2
xor ebx, ebx
mov rcx, r13
mov rdx, r14
mov r8, rbx
call fcn.140045ab0
mov rax, rsi
test rdi, rdi
mov rbx, qword [rbp + 0x5d0]
je 0x140037134
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x550]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, rsi
test r13, r13
je 0x14003752e
mov qword [rbp + 0x4a0], r13
mov qword [rbp + 0x4a8], rax
mov r14, rax
mov qword [rbp + 0x4b0], rax
lea r12, [0x1412f2b3b]
xor eax, eax
lea rdi, [rbp + 0x4a0]
xor r15d, r15d
jmp 0x1400371ab
mov eax, ebx
mov r8d, 1
sub r8, r15
mov ebx, eax
mov rdx, r14
inc r8
mov rcx, rdi
call fcn.140054500
mov r13, qword [rbp + 0x4a0]
mov eax, ebx
mov rbx, qword [rbp + 0x5d0]
mov rcx, r14
mov word [r13 + r14*2], si
inc rcx
mov r14, rcx
mov qword [rbp + 0x4b0], rcx
test r12, r12
je 0x140037239
test ax, ax
je 0x1400371ce
xor ebx, ebx
mov esi, eax
mov rdx, r14
cmp rdx, qword [rbp + 0x4a8]
jne 0x14003718c
jmp 0x14003729c
lea rcx, [0x1412f2b43]
cmp r12, rcx
je 0x140037239
movzx r8d, byte [r12]
movzx esi, r8b
test sil, sil
js 0x1400371f0
inc r12
jmp 0x14003728a
mov ecx, esi
and ecx, 0x1f
movzx r9d, byte [r12 + 1]
and r9d, 0x3f
cmp sil, 0xdf
jbe 0x140037263
movzx edx, byte [r12 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x140037271
movzx esi, byte [r12 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, ecx
cmp esi, 0x110000
jne 0x14003727e
cmp r15, 1
je 0x1400372f2
mov r15d, 1
xor esi, esi
mov r12d, 0
cmp r14, qword [rbp + 0x4a8]
je 0x14003716c
jmp 0x140037195
add r12, 2
shl ecx, 6
or ecx, r9d
mov esi, ecx
jmp 0x14003728a
add r12, 3
shl ecx, 0xc
or edx, ecx
mov esi, edx
jmp 0x140037282
add r12, 4
cmp esi, 0xffff
ja 0x1400372c2
mov rdx, r14
xor ebx, ebx
cmp rdx, qword [rbp + 0x4a8]
jne 0x14003718c
test r12, r12
je 0x14003716a
lea r8, [0x1412f2b3b]
sub r8, r12
add r8, 0xb
shr r8, 2
sub r8, r15
inc r8
jmp 0x14003717a
lea eax, [rsi + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
mov esi, eax
mov rdx, r14
cmp rdx, qword [rbp + 0x4a8]
jne 0x14003718c
jmp 0x14003729c
mov rax, qword [rbp + 0x4a0]
mov rcx, qword [rbp + 0x4a8]
test rax, rax
je 0x140037531
mov qword [rbp + 0x558], rax
mov qword [rbp + 0x550], rcx
movzx eax, byte [rbx + 0xad]
mov byte [rbp + 0x4f8], al
test al, al
setne byte [rbp + 0x5c0]
lea r14, [0x1412f25af]
mov rax, r14
not rax
add rax, r14
add rax, 0x12
shr rax, 2
cmp rax, 4
mov esi, 3
cmovae rsi, rax
movabs rax, 0x3fffffffffffffff
xor edi, edi
cmp rsi, rax
setne al
je 0x140037dd8
mov dil, al
add rdi, rdi
mov rax, qword [rbx + 0x90]
mov qword [rbp + 0x428], rax
mov rax, qword [rbx + 0xa0]
mov qword [rbp + 0x430], rax
lea rbx, [rsi + rsi + 2]
movzx eax, byte [0x141303ad0]
mov rcx, rbx
mov rdx, rdi
call fcn.1400139f0
test rax, rax
je 0x140037ddf
inc rsi
mov word [rax], 0x63
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], 1
lea r15, [0x1412f25b0]
mov edi, 1
xor r13d, r13d
lea r12, [0x1412f25be]
lea rbx, [rbp - 0x30]
jmp 0x1400373ef
mov word [rax + rdi*2], r13w
inc rdi
mov qword [rbp - 0x20], rdi
mov r13d, esi
test r13w, r13w
je 0x1400373fc
xor esi, esi
jmp 0x1400374bf
cmp r15, r12
je 0x1400374ee
movzx r8d, byte [r15]
movzx r13d, r8b
test r13b, r13b
js 0x14003741c
inc r15
xor esi, esi
jmp 0x1400374bf
mov ecx, r13d
and ecx, 0x1f
movzx r9d, byte [r15 + 1]
and r9d, 0x3f
cmp r13b, 0xdf
jbe 0x140037471
movzx edx, byte [r15 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x140037482
movzx r13d, byte [r15 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r13d, 0x3f
or r13d, edx
or r13d, ecx
cmp r13d, 0x110000
je 0x1400374ee
add r15, 4
jmp 0x14003748e
add r15, 2
shl ecx, 6
or ecx, r9d
mov r13d, ecx
xor esi, esi
jmp 0x1400374bf
add r15, 3
shl ecx, 0xc
or edx, ecx
mov r13d, edx
cmp r13d, 0xffff
jbe 0x1400373f5
lea ecx, [r13 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov esi, r13d
mov r13d, ecx
cmp rdi, qword [rbp - 0x28]
jne 0x1400373e0
mov r8, r14
sub r8, r15
add r8, 0x12
shr r8, 2
inc r8
mov rcx, rbx
mov rdx, rdi
call fcn.140054500
mov rax, qword [rbp - 0x30]
jmp 0x1400373e0
mov rdi, qword [rbp - 0x20]
mov qword [rbp + 0x570], rdi
movdqu xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x560], xmm0
cmp rdi, qword [rbp + 0x568]
jne 0x140037540
lea rcx, [rbp + 0x560]
mov rdx, rdi
call fcn.1400272f0
mov r8, qword [rbp + 0x500]
mov rdi, qword [rbp + 0x570]
jmp 0x140037547
mov rcx, rax
mov rax, qword [rbp + 0x508]
mov qword [rax], rcx
jmp 0x140036316
mov r8, qword [rbp + 0x500]
mov r12, qword [rbp + 0x560]
mov word [r12 + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x570], rdi
lea rax, [r8 + r8]
xor ecx, ecx
lea rbx, [0x1412f25f8]
mov rdx, qword [rbp + 0x5e8]
cmp rax, rcx
je 0x140037588
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x140037573
jmp 0x1400377e1
mov rax, qword [rbp + 0x5e8]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
je 0x1400377e1
lea rbx, [r8 - 1]
xor r14d, r14d
test ax, ax
mov rax, qword [rbp + 0x5e8]
cmove r14, rax
test r14, r14
cmove rbx, r8
cmove r14, rax
mov r15, qword [rbp + 0x568]
mov rax, r15
sub rax, rdi
cmp rax, rbx
jae 0x1400375f8
lea rcx, [rbp + 0x560]
mov rdx, rdi
mov r8, rbx
call fcn.140054500
mov rdi, qword [rbp + 0x570]
mov r12, qword [rbp + 0x560]
mov r15, qword [rbp + 0x568]
lea r8, [rbx + rbx]
lea rcx, [r12 + rdi*2]
mov rdx, r14
call fcn.140045ab0
add rdi, rbx
mov qword [rbp + 0x570], rdi
cmp rdi, r15
jne 0x140037634
lea rcx, [rbp + 0x560]
mov rdx, r15
call fcn.1400272f0
mov r12, qword [rbp + 0x560]
mov rdi, qword [rbp + 0x570]
mov word [r12 + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x570], rdi
mov rax, qword [rbp + 0x430]
lea rax, [rax + rax*4]
mov rsi, qword [rbp + 0x428]
lea r14, [rsi + rax*8]
lea r15, [0x1412f2617]
and r15, 0xfffffffffffffff8
lea r12, [0x1412f2610]
mov rax, r15
sub rax, r12
cmp rax, 0x16
mov r13d, 0x16
cmovb r13, rax
lea rdi, [rbp + 0x560]
cmp rsi, r14
je 0x140037abb
mov rbx, rsi
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x568]
jne 0x1400376b3
mov rcx, rdi
call fcn.1400272f0
mov rdx, qword [rbp + 0x570]
lea rax, [rdx + 1]
mov rcx, qword [rbp + 0x560]
mov word [rcx + rdx*2], 0x20
mov qword [rbp + 0x570], rax
movzx eax, byte [rbp + 0x5c0]
mov r8d, eax
cmp byte [rbp + 0x4f8], 0
jne 0x1400377c3
cmp qword [rbx], 0
movzx eax, byte [rbp + 0x5c0]
mov r8d, eax
jne 0x1400377c3
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x18]
add rcx, rax
cmp rax, rcx
je 0x1400377bb
movzx edx, byte [rax]
test r13, r13
je 0x14003773d
mov r8d, 0
cmp r15, r12
je 0x140037740
xor r8d, r8d
cmp byte [r8 + r12], dl
je 0x1400377c0
inc r8
cmp r13, r8
jne 0x140037720
mov r8, r13
cmp r13, 6
ja 0x14003779a
jmp 0x140037740
xor r8d, r8d
movzx r9d, dl
movabs r10, 0x101010101010101
imul r9, r10
mov r10, qword [r8 + r12]
xor r10, r9
mov r11, r10
not r11
movabs rsi, 0xfefefefefefefeff
add r10, rsi
and r10, r11
movabs r11, 0x8080808080808080
test r10, r11
jne 0x14003779a
xor r9, qword [r8 + r12 + 8]
mov r10, r9
not r10
add r9, rsi
and r9, r10
lea r10, [r8 + 0x10]
test r9, r11
cmove r8, r10
cmp r8, 0x16
je 0x1400377af
cmp byte [r8 + r12], dl
je 0x1400377c0
inc r8
cmp r8, 0x16
jne 0x1400377a0
inc rax
cmp rax, rcx
jne 0x14003770a
xor r8d, r8d
jmp 0x1400377c3
mov r8b, 1
mov rcx, rdi
mov rsi, rbx
mov rdx, rbx
call fcn.14003b400
mov rbx, rax
add rsi, 0x28
test rax, rax
je 0x140037688
cmp qword [rbp + 0x568], 0
je 0x140037801
mov r8, qword [rbp + 0x560]
mov rcx, qword [0x141303bb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x508]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x550], 0
mov rdi, qword [rbp + 0x5e0]
je 0x140037a19
mov rcx, qword [0x141303bb8]
xor esi, esi
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140036327
call fcn.1400545c0
xor al, 1
jmp 0x140036dcc
pxor xmm0, xmm0
movdqu xmmword [rbp + 4], xmm0
movdqu xmmword [rbp - 8], xmm0
movdqu xmmword [rbp - 0x18], xmm0
movdqu xmmword [rbp - 0x28], xmm0
movdqu xmmword [rbp + 0x18], xmm0
movdqu xmmword [rbp + 0x28], xmm0
mov dword [rbp - 0x30], 0x68
test rdi, rdi
mov r13, qword [rbp + 0x5d0]
mov rbx, qword [rbp + 0x5c0]
mov rax, qword [rbp + 0x458]
mov rsi, qword [rbp + 0x420]
jne 0x1400378a5
test rsi, rsi
jne 0x1400378a5
test rax, rax
je 0x1400378b8
mov dword [rbp + 0xc], 0x100
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], rdi
mov rcx, qword [rbp + 0x488]
lea rax, [rbp + 0x530]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x3f0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r15d
mov r15, rcx
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x558]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140037a8d
movups xmm0, xmmword [rbp + 0x560]
movups xmm1, xmmword [rbp + 0x570]
movups xmm2, xmmword [rbp + 0x580]
mov rax, qword [rbp + 0x508]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x530]
movups xmmword [rax], xmm0
mov r14, rsi
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call rsi
mov rcx, r14
call rsi
mov rcx, qword [rbp + 0x458]
call rsi
lea rcx, [rbp + 0x4a0]
call fcn.14003c5a0
cmp qword [rbp + 0x4f8], 0
je 0x14003798e
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
mov rsi, qword [rbp + 0x5e0]
mov rdi, qword [rbp + 0x5e8]
je 0x1400379b3
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x490], 0
je 0x1400379cf
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x550], 0
je 0x1400379ef
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x558]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rsi, rsi
sete al
or r12b, al
cmp r12b, 1
je 0x1400353f6
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400353f6
xor esi, esi
jmp 0x140036327
mov rsi, rax
movdqu xmm6, xmmword [rbp - 0x28]
cmp qword [rbp + 0x538], 0
je 0x140037a48
mov rcx, qword [0x141303bb8]
xor edx, edx
mov r8, qword [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rbp + 0x5d0]
mov r8, rsi
jmp 0x14003607c
call fcn.1400545c0
test al, al
jne 0x140037052
mov byte [0x141303bd0], 1
jmp 0x140037052
lea rcx, [0x1412effb0]
lea r8, [0x1412f0b60]
mov edx, 0x2b
call fcn.1400535f0
jmp 0x140037df9
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x508]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140036fc9
mov rdx, qword [rbp + 0x570]
cmp rdx, qword [rbp + 0x568]
jne 0x140037ade
lea rcx, [rbp + 0x560]
call fcn.1400272f0
mov rdx, qword [rbp + 0x570]
mov rbx, qword [rbp + 0x5d0]
mov rax, qword [rbp + 0x560]
mov word [rax + rdx*2], 0x22
inc rdx
mov rdi, qword [rbp + 0x568]
mov cl, 1
mov dword [rbp + 0x428], ecx
xor r12d, r12d
jmp 0x14003623c
mov r14, rbx
jmp 0x140036ac4
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x530], rax
lea rax, [rbp + 0x530]
mov qword [rbp + 0x4a0], rax
lea rax, [0x14002add0]
mov qword [rbp + 0x4a8], rax
lea rax, [0x1412f2a48]
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], 1
mov qword [rbp + 0x580], 0
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x578], 1
lea rdx, [0x1412f2a80]
lea rcx, [rbp + 0x560]
call fcn.140053430
jmp 0x140037df9
lea rcx, [0x1412effb0]
lea r8, [0x1412f0040]
mov edx, 0x2b
call fcn.1400535f0
jmp 0x140037df9
mov ecx, 1
mov rdx, rdi
call fcn.140053360
jmp 0x140037df9
mov byte [rbp + 0x5df], 1
mov ecx, 1
mov rdx, rdi
call fcn.140053360
jmp 0x140037df9
mov rcx, rsi
mov rdx, rbx
call fcn.140053360
jmp 0x140037df9
call fcn.140013ac0
jmp 0x140037df9
mov byte [rbp + 0x5df], 1
call fcn.140013ac0
jmp 0x140037df9
call fcn.140013ac0
jmp 0x140037df9
lea r8, [0x1412f2808]
mov ecx, 1
xor edx, edx
call fcn.1400534f0
jmp 0x140037df9
lea rax, [0x1412f2820]
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.140053570
jmp 0x140037df9
lea r8, [0x1412f2838]
mov rdx, r12
call fcn.1400534f0
jmp 0x140037df9
lea rcx, [0x1412f07d8]
lea r8, [0x1412f0800]
mov edx, 0x21
call fcn.1400535f0
jmp 0x140037df9
mov byte [rbp + 0x5f7], 1
mov ecx, 1
mov edx, 4
call fcn.140053360
jmp 0x140037df9
lea rcx, [0x1412f08d8]
lea r8, [0x1412f2f78]
mov edx, 0x28
call fcn.1400535f0
jmp 0x140037df9
lea rcx, [0x1412f08d8]
lea r8, [0x1412f2f78]
mov edx, 0x28
call fcn.1400535f0
jmp 0x140037df9
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4a0], rax
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x560], rax
lea rax, [0x14002add0]
mov qword [rbp + 0x568], rax
lea rax, [0x1412f2878]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
mov qword [rbp - 0x10], 0
lea rax, [rbp + 0x560]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 1
lea rdx, [0x1412f2888]
lea rcx, [rbp - 0x30]
call fcn.140053430
jmp 0x140037df9
mov sil, bl
mov byte [rbp + 0x5f7], 1
mov rcx, rsi
mov rdx, r12
call fcn.140053360
jmp 0x140037df9
mov byte [rbp + 0x5f7], 1
call fcn.140013ac0
jmp 0x140037df9
lea rcx, [0x1412f08d8]
lea r8, [0x1412f2f78]
mov edx, 0x28
call fcn.1400535f0
jmp 0x140037df9
lea rax, [0x1412f2f60]
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.140053570
jmp 0x140037df9
lea r8, [0x1412f00d0]
call fcn.1400534f0
jmp 0x140037df9
lea rax, [0x1412f2f60]
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.140053570
jmp 0x140037df9
lea r8, [0x1412f2f60]
mov rcx, rax
mov rdx, r15
call fcn.140053570
jmp 0x140037df9
call fcn.140013ac0
jmp 0x140037df9
mov rcx, rdi
mov rdx, rbx
call fcn.140053360
jmp 0x140037df9
mov ecx, 2
mov rdx, rbx
call fcn.140053360
ud2