Function at 0x140002d60
Capabilities:
Authenticate hmac
Encode data using base64
Set registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x10928
call fcn.14010fc20
sub rsp, rax
movdqa xmmword [rsp + 0x10910], xmm7
movaps xmmword [rsp + 0x10900], xmm6
mov ecx, 5
xor edx, edx
call fcn.140089e40
lea rax, [0x1401b838a]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x5afde6535ea62dbe
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095660
movabs rcx, 0x1383c37d5f8af891
xor rcx, qword [rax]
movabs rdx, 0x15eb1066166687eb
xor rdx, qword [rax + 8]
movabs r8, 0xdfb6f04b8b1a9935
xor r8, qword [rax + 0x10]
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov qword [rsp + 0x640], r8
lea rdi, [rsp + 0x248]
lea rbx, [rsp + 0x630]
mov r8d, 0x18
mov rcx, rdi
mov rdx, rbx
call fcn.1400d5650
lea rsi, [rsp + 0x900]
mov rcx, rsi
mov rdx, rdi
call fcn.1400bec90
mov rcx, rsi
call fcn.140001d70
lea rax, [0x1401b4ef0]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x56b1214d40e143f3
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094dc0
mov r13, qword [rax]
mov r12, qword [rax + 8]
mov r15, qword [rax + 0x10]
mov r14d, dword [rax + 0x18]
movzx ebp, byte [rax + 0x1c]
movzx eax, byte [0x140259141]
mov edx, 0x1d
xor ecx, ecx
call fcn.14008b700
test rax, rax
jne 0x140002ecc
ud2
mov rsi, rax
xor bpl, 0x87
xor r14d, 0xbb5d76a3
movabs rax, 0x74b437e74618fbb0
xor r15, rax
movabs rax, 0xcd846da8c6f0b0dd
xor r12, rax
movabs rax, 0xd92d65b072b593d7
xor r13, rax
mov qword [rsi], r13
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r15
mov dword [rsi + 0x18], r14d
mov byte [rsi + 0x1c], bpl
lea rcx, [rsp + 0x900]
mov r8d, 0x1d
mov rdx, rsi
call fcn.140093010
cmp dword [rsp + 0x900], 2
jne 0x140004e05
mov rax, qword [rsp + 0x908]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140002f9d
test rcx, rcx
je 0x140002f9d
lea r14, [rax - 1]
mov r15, qword [rax - 1]
mov r12, qword [rax + 7]
mov rcx, r15
call qword [r12]
cmp qword [r12 + 8], 0
je 0x140002f8c
cmp qword [r12 + 0x10], 0x11
jb 0x140002f7b
mov r15, qword [r15 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x900], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x908], xmm0
mov dword [rsp + 0x918], 7
mov qword [rsp + 0x91c], 0
mov word [rsp + 0x924], 0
mov byte [rsp + 0x921], 1
mov byte [rsp + 0x924], 1
mov byte [rsp + 0x923], 1
lea r8, [rsp + 0x900]
mov edx, 0x1d
mov rcx, rsi
call fcn.140092af0
mov r14, rax
mov rsi, rdx
lea rax, [0x1401b5adf]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7b013ad4dcde078e
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400951f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test r14, r14
jne case.0x14000934f.0
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rax, [0x1401b1f42]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x5f5e3637a20afe5e
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094970
mov rsi, qword [rax]
movzx ebp, word [rax + 8]
movzx r14d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r14d, 0x10
or ebp, r14d
mov ecx, ebp
shr ecx, 0x10
xor cl, 0xb4
mov edx, ebp
xor dl, 0x49
shr ebp, 8
xor bpl, 0xc
movzx edx, dl
movzx r8d, bpl
shl r8d, 8
or r8d, edx
movabs rdx, 0x55564f31388b4504
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov rbp, rax
mov byte [rax + 0xa], cl
lea rax, [0x1401bb7c4]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd0fb1325a07b03ff
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095430
mov r14, qword [rax]
mov r15, qword [rax + 8]
movzx esi, byte [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
xor sil, 0xa2
movabs rcx, 0x56c7fa6540e0029c
xor r14, rcx
movabs rcx, 0xb469d49f98eadaa0
xor r15, rcx
mov qword [rax], r14
mov qword [rax + 8], r15
mov r13, rax
mov byte [rax + 0x10], sil
lea rax, [0x1401b8465]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xaf28dd302d87e215
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400955c0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xfd
mov edx, r14d
xor dl, 0x33
shr r14d, 8
xor r14b, 0xeb
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0x836b9971e022cfbb
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov r12, rax
mov byte [rax + 0xa], cl
lea rax, [0x1401b2b2e]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xccb8469e24358be
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095990
mov esi, dword [rax]
movzx r14d, word [rax + 4]
movzx r15d, byte [rax + 6]
movzx eax, byte [0x140259141]
mov edx, 7
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xd5
mov edx, r14d
xor dl, 0xdf
shr r14d, 8
xor r14b, 0xd9
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
xor esi, 0x5e40bab4
mov dword [rax], esi
mov word [rax + 4], r8w
mov qword [rsp + 0x58], rax
mov byte [rax + 6], cl
lea rax, [0x1401b2883]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xc77c9ca8db0d5e91
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095100
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xf8
mov edx, r14d
xor dl, 0x36
shr r14d, 8
xor r14b, 0x10
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0xca33b1621b5abb7
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0x78], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401bbdd0]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xfbfc13325140612c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400949d0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xde
mov edx, r14d
xor dl, 0xfb
shr r14d, 8
xor r14b, 0x6f
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0xcdccb16b51727f46
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0xe0], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401ae90f]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xa2991da5b2d69caf
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095330
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov ecx, r14d
xor cl, 0xdc
shr r14d, 8
xor r14b, 0x36
movzx edx, r14b
shl edx, 8
movzx ecx, cl
or ecx, edx
movabs rdx, 0x84da3cfee439f646
xor rsi, rdx
mov qword [rax], rsi
mov qword [rsp + 0x80], rax
mov word [rax + 8], cx
lea rax, [0x1401bb4a5]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xc5af0535160d44b0
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400950d0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0x3f
mov edx, r14d
xor dl, 0x15
shr r14d, 8
xor r14b, 0xfb
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0x15eff8ce37e264b4
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0xd8], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401ba3e8]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x46d5b0d770ec3667
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095730
mov rsi, qword [rax]
movzx eax, byte [0x140259141]
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
movabs rcx, 0x44ca42fbaab337b9
xor rsi, rcx
mov qword [rsp + 0xd0], rax
mov qword [rax], rsi
lea rax, [0x1401bc545]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd0d7046a04e328f7
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094c80
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xea
mov edx, r14d
xor dl, 0xe8
shr r14d, 8
xor r14b, 0xd2
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0xf3f29fef41954a63
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0xc8], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401b2011]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x97a4a96db8574bf1
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094cb0
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
xor sil, 0xaf
xor r14d, 0x3c27cd84
movabs rcx, 0x99dc45b186f073d4
xor r15, rcx
mov qword [rax], r15
mov dword [rax + 8], r14d
mov qword [rsp + 0xc0], rax
mov byte [rax + 0xc], sil
lea rax, [0x1401b52d3]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd90468d885176347
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095830
mov r14, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xc
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xb0], rax
test rax, rax
je case.0x14000934f.0
xor esi, 0xdeae2882
movabs rax, 0xff0aa516a169d246
xor r14, rax
mov rax, qword [rsp + 0xb0]
mov qword [rax], r14
mov dword [rax + 8], esi
lea rax, [0x1401bc0c1]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x138310e52a73feeb
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095a10
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xa8], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0x97
xor r14d, 0x609e347
movabs rax, 0x47296212bd947180
xor r15, rax
mov rax, qword [rsp + 0xa8]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401b95a9]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1c5a062303b215d4
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095860
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xa0], rax
test rax, rax
je case.0x14000934f.0
mov eax, r14d
xor al, 0x14
shr r14d, 8
xor r14b, 0xce
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xd461e826094b6621
xor rsi, rcx
mov rcx, qword [rsp + 0xa0]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b6cee]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xc9f592e4d2bb0db7
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095530
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov esi, dword [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x14
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x98], rax
test rax, rax
je case.0x14000934f.0
xor esi, 0x3bc616a6
movabs rax, 0x12472150f0dc9a97
xor r14, rax
movabs rax, 0xb8a15df8625656b8
xor r15, rax
mov rax, qword [rsp + 0x98]
mov qword [rax], r15
mov qword [rax + 8], r14
mov dword [rax + 0x10], esi
lea rax, [0x1401b1549]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x3add394929baf205
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400957d0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x90], rax
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov eax, r14d
shr eax, 0x10
xor al, 0x8a
mov ecx, r14d
xor cl, 4
shr r14d, 8
xor r14b, 0x64
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x7215580ebc534b52
xor rsi, rcx
mov rcx, qword [rsp + 0x90]
mov qword [rcx], rsi
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401ba1f3]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x59829e0d6dc65f37
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094ac0
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x138], rax
test rax, rax
je case.0x14000934f.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [section..rdata]
mov rax, qword [rsp + 0x138]
movdqu xmmword [rax], xmm1
lea rax, [0x1401ba371]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xcc4f5e55b85ed973
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095590
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x130], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0x76
xor r14d, 0x9753f987
movabs rax, 0xd752795b329ccbc9
xor r15, rax
mov rax, qword [rsp + 0x130]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401af888]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1fe76d18dfd3bf4d
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095260
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x128], rax
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or r14d, r15d
mov eax, r14d
shr eax, 0x10
xor al, 0xa9
mov ecx, r14d
xor cl, 0x38
shr r14d, 8
xor r14b, 0x47
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x480e0478814a2949
xor rsi, rcx
mov rcx, qword [rsp + 0x128]
mov qword [rcx], rsi
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401b253c]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xdced97a074ffac0c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094ec0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x120], rax
test rax, rax
je case.0x14000934f.0
mov eax, r14d
xor al, 0xe2
shr r14d, 8
xor r14b, 0xca
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xc932f56dfe6b65a2
xor rsi, rcx
mov rcx, qword [rsp + 0x120]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b2859]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6e5b7c3c08050927
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400958f0
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x118], rax
test rax, rax
je case.0x14000934f.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [0x1401b6010]
mov rax, qword [rsp + 0x118]
movdqu xmmword [rax], xmm1
lea rax, [0x1401b8785]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xec9f058a19c878fc
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095b10
mov r14, qword [rax]
mov r15, qword [rax + 8]
movzx esi, byte [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x110], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0xbd
movabs rax, 0x7cc6ece81c145a46
xor r14, rax
movabs rax, 0x9aa2c51d8a2c34e5
xor r15, rax
mov rax, qword [rsp + 0x110]
mov qword [rax], r14
mov qword [rax + 8], r15
mov byte [rax + 0x10], sil
lea rax, [0x1401b8021]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xceb259798f30d63e
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095ab0
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov r15d, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx r14d, byte [rax + 0xe]
movzx eax, byte [0x140259141]
mov edx, 0xf
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x108], rax
test rax, rax
je case.0x14000934f.0
shl r14d, 0x10
or esi, r14d
mov eax, esi
shr eax, 0x10
xor al, 2
mov ecx, esi
xor cl, 0xd0
shr esi, 8
xor sil, 0xba
movzx ecx, cl
movzx edx, sil
shl edx, 8
or edx, ecx
xor r15d, 0x4a91fa3b
movabs rcx, 0x7ebe4aae3b39c69b
mov r8, qword [rsp + 0x60]
xor r8, rcx
mov rcx, qword [rsp + 0x108]
mov qword [rcx], r8
mov dword [rcx + 8], r15d
mov word [rcx + 0xc], dx
mov byte [rcx + 0xe], al
lea rax, [0x1401b3a7e]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x37ee496d20cafb95
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095970
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x100], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0xdd
xor r14d, 0xb37567bc
movabs rax, 0xdfdb3c1063f2a5b2
xor r15, rax
mov rax, qword [rsp + 0x100]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401bd76d]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x41c36da8116e7e3c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400954d0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xf8], rax
test rax, rax
je case.0x14000934f.0
mov eax, r14d
xor al, 0x53
shr r14d, 8
xor r14b, 0xbd
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xbf1a8c79016025b2
xor rsi, rcx
mov rcx, qword [rsp + 0xf8]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b019d]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xa38e24ae4e063d2c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094d00
mov r14, qword [rax]
mov r15, qword [rax + 8]
movzx esi, byte [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x158], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0x93
movabs rax, 0x7ac8a29d675324d9
xor r14, rax
movabs rax, 0x8cf6b3b3bdfd8fd0
xor r15, rax
mov rax, qword [rsp + 0x158]
mov qword [rax], r14
mov qword [rax + 8], r15
mov byte [rax + 0x10], sil
lea rax, [0x1401b466c]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd1ff33bd152a79f9
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094880
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x150], rax
test rax, rax
je case.0x14000934f.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [0x1401b6020]
mov rax, qword [rsp + 0x150]
movdqu xmmword [rax], xmm1
lea rax, [0x1401bcdff]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7805c6e8e61210a7
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400953d0
mov rsi, qword [rax]
mov r15, qword [rax + 8]
movzx r14d, word [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x12
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x148], rax
test rax, rax
je case.0x14000934f.0
mov eax, r14d
xor al, 0xae
shr r14d, 8
xor r14b, 0xcd
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x15a6e174c5ab8576
xor rsi, rcx
movabs rcx, 0x31265d2ff888b3b0
xor r15, rcx
mov rcx, qword [rsp + 0x148]
mov qword [rcx], rsi
mov qword [rcx + 8], r15
mov word [rcx + 0x10], ax
lea rax, [0x1401b6539]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6847696be2586932
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094f50
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x1b0], rax
test rax, rax
je case.0x14000934f.0
mov eax, r14d
xor al, 0xf4
shr r14d, 8
xor r14b, 0xfd
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x49f2bc498c93cb99
xor rsi, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401ba303]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6dcb5539947e193a
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094f20
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x1a8], rax
test rax, rax
je case.0x14000934f.0
mov eax, r14d
xor al, 0xbd
shr r14d, 8
xor r14b, 0x8a
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x3973af51a8bd8df0
xor rsi, rcx
mov rcx, qword [rsp + 0x1a8]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b98af]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xdab2751adb8f01e4
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094d60
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
movzx r14d, word [rax + 8]
movzx esi, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x1a0], rax
test rax, rax
je case.0x14000934f.0
shl esi, 0x10
or r14d, esi
mov eax, r14d
shr eax, 0x10
xor al, 0x4f
mov ecx, r14d
xor cl, 0xe
shr r14d, 8
xor r14b, 0xd1
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x191604055339c56f
mov r8, qword [rsp + 0x60]
xor r8, rcx
mov rcx, qword [rsp + 0x1a0]
mov qword [rcx], r8
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401b73a4]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xb239b1271ba67198
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095480
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x198], rax
test rax, rax
je case.0x14000934f.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [0x1401b6030]
mov rax, qword [rsp + 0x198]
movdqu xmmword [rax], xmm1
lea rax, [0x1401b1ba7]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xde6ac0025175944d
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095b40
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x190], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0x2a
xor r14d, 0x70dc688c
movabs rax, 0xc4b3d636a36ad403
xor r15, rax
mov rax, qword [rsp + 0x190]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401bb003]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x352c881db7f523a4
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094b80
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
movzx r14d, word [rax + 8]
movzx esi, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x188], rax
test rax, rax
je case.0x14000934f.0
shl esi, 0x10
or r14d, esi
mov eax, r14d
shr eax, 0x10
xor al, 0xb7
mov ecx, r14d
xor cl, 0x88
shr r14d, 8
xor r14b, 0x6e
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x64b7949acbbe8227
mov r8, qword [rsp + 0x60]
xor r8, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], r8
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401ae74c]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xb020a65d5c5c4cb6
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095060
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x180], rax
test rax, rax
je case.0x14000934f.0
xor sil, 0xdb
xor r14d, 0x27596cda
movabs rax, 0xc7990c9fd749b3e5
xor r15, rax
mov rax, qword [rsp + 0x180]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401b4112]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xf1644c264838d70f
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095090
mov rcx, qword [rax]
mov qword [rsp + 0xb8], rcx
mov ecx, dword [rax + 8]
mov dword [rsp + 0x60], ecx
movzx esi, word [rax + 0xc]
movzx r14d, byte [rax + 0xe]
movzx eax, byte [0x140259141]
mov edx, 0xf
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x178], rax
test rax, rax
je case.0x14000934f.0
shl r14d, 0x10
or esi, r14d
mov eax, esi
shr eax, 0x10
xor al, 0x9f
mov ecx, esi
xor cl, 0xd0
shr esi, 8
xor sil, 0x3f
movzx ecx, cl
movzx edx, sil
shl edx, 8
or edx, ecx
mov r8d, dword [rsp + 0x60]
xor r8d, 0x53137be7
movabs rcx, 0x4961c38f96fb9cdf
mov r9, qword [rsp + 0xb8]
xor r9, rcx
mov rcx, qword [rsp + 0x178]
mov qword [rcx], r9
mov dword [rcx + 8], r8d
mov word [rcx + 0xc], dx
mov byte [rcx + 0xe], al
movzx eax, byte [0x140259141]
mov edx, 0x240
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x60], rax
test rax, rax
je case.0x14000934f.0
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rbp
mov qword [rcx + 8], 0xb
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], 0x11
mov qword [rcx + 0x20], r12
mov qword [rcx + 0x28], 0xb
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], 7
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xb
mov rax, qword [rsp + 0xe0]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xb
mov rax, qword [rsp + 0x80]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xa
mov rax, qword [rsp + 0xd8]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xb
mov rax, qword [rsp + 0xd0]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 8
mov rax, qword [rsp + 0xc8]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0xb
mov rax, qword [rsp + 0xc0]
mov qword [rcx + 0xa0], rax
mov qword [rcx + 0xa8], 0xd
mov rax, qword [rsp + 0xb0]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xc
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xd
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 0xa
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 0x14
mov rax, qword [rsp + 0x90]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 0xb
mov rax, qword [rsp + 0x138]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0x10
mov rax, qword [rsp + 0x130]
mov qword [rcx + 0x110], rax
mov qword [rcx + 0x118], 0xd
mov rax, qword [rsp + 0x128]
mov qword [rcx + 0x120], rax
mov qword [rcx + 0x128], 0xb
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xa
mov rax, qword [rsp + 0x118]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 0x10
mov rax, qword [rsp + 0x110]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 0x11
mov rax, qword [rsp + 0x108]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 0xf
mov rax, qword [rsp + 0x100]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xd
mov rax, qword [rsp + 0xf8]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xa
mov rax, qword [rsp + 0x158]
mov qword [rcx + 0x190], rax
mov qword [rcx + 0x198], 0x11
mov rax, qword [rsp + 0x150]
mov qword [rcx + 0x1a0], rax
mov qword [rcx + 0x1a8], 0x10
mov rax, qword [rsp + 0x148]
mov qword [rcx + 0x1b0], rax
mov qword [rcx + 0x1b8], 0x12
mov rax, qword [rsp + 0x1b0]
mov qword [rcx + 0x1c0], rax
mov qword [rcx + 0x1c8], 0xa
mov rax, qword [rsp + 0x1a8]
mov qword [rcx + 0x1d0], rax
mov qword [rcx + 0x1d8], 0xa
mov rax, qword [rsp + 0x1a0]
mov qword [rcx + 0x1e0], rax
mov qword [rcx + 0x1e8], 0xb
mov rax, qword [rsp + 0x198]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], 0x10
mov rax, qword [rsp + 0x190]
mov qword [rcx + 0x200], rax
mov qword [rcx + 0x208], 0xd
mov rax, qword [rsp + 0x188]
mov qword [rcx + 0x210], rax
mov qword [rcx + 0x218], 0xb
mov rax, qword [rsp + 0x180]
mov qword [rcx + 0x220], rax
mov qword [rcx + 0x228], 0xd
mov rax, qword [rsp + 0x178]
mov qword [rcx + 0x230], rax
mov qword [rcx + 0x238], 0xf
lea rax, [0x1401b9690]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x9cc5f657c1110a3b
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094b40
movabs rcx, 0x74f915d28f7399b0
xor rcx, qword [rax]
movabs rdx, 0x4de6740c9e2ca093
xor rdx, qword [rax + 8]
movabs r8, 0x348a33f2ef91025f
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x88
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov qword [rsp + 0x640], r8
mov byte [rsp + 0x648], al
lea rax, [0x1401b2dbf]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x728d343c531675d
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095750
mov rcx, qword [rax]
mov qword [rsp + 0x80], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x78], rcx
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x58], rcx
mov rbp, qword [rax + 0x20]
mov r13, qword [rax + 0x28]
mov r12, qword [rax + 0x30]
mov r15, qword [rax + 0x38]
mov r14, qword [rax + 0x40]
movzx esi, byte [rax + 0x48]
movzx eax, byte [0x140259141]
mov edx, 0x49
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
xor sil, 0x2f
movabs rcx, 0x7467db489e718522
xor r14, rcx
movabs rcx, 0x1be6c810a7c4f69b
xor r15, rcx
movabs rcx, 0xfc53dc557b9e4f6
xor r12, rcx
movabs rcx, 0xeb2be93071eabc05
xor r13, rcx
movabs rcx, 0x6c2af1aa32163689
xor rbp, rcx
movabs rcx, 0xd9368746792b389a
mov rdx, qword [rsp + 0x58]
xor rdx, rcx
movabs rcx, 0xd02c0b7b3a96d8dd
mov r8, qword [rsp + 0x78]
xor r8, rcx
movabs rcx, 0xf8f68335e09c23e5
mov r9, qword [rsp + 0xe0]
xor r9, rcx
movabs rcx, 0xf13eb85f3a9d8a54
mov r10, qword [rsp + 0x80]
xor r10, rcx
mov qword [rax], r10
mov qword [rax + 8], r9
mov qword [rax + 0x10], r8
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], r13
mov qword [rax + 0x30], r12
mov qword [rax + 0x38], r15
mov qword [rax + 0x40], r14
mov byte [rax + 0x48], sil
mov qword [rsp + 0x860], 0x49
mov qword [rsp + 0x868], rax
mov qword [rsp + 0x870], 0x49
xor r14d, r14d
jmp 0x140004e20
call fcn.14001a360
call fcn.140092960
add r14, 0x10
cmp r14, 0x240
je 0x1400050e2
mov rax, qword [rsp + 0x60]
add rax, r14
mov qword [rsp + 0x748], rax
lea rax, [rsp + 0x860]
mov qword [rsp + 0x248], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x250], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x258], rax
lea rax, [0x14009d910]
mov qword [rsp + 0x260], rax
lea rax, [0x1401be200]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x910], rdi
mov qword [rsp + 0x918], 2
mov qword [rsp + 0x520], 0
mov qword [rsp + 0x528], 1
mov qword [rsp + 0x530], 0
lea rcx, [rsp + 0x520]
lea rdx, [0x1401bea08]
lea r8, [rsp + 0x900]
call fcn.14000c7a0
test al, al
jne case.0x14000934f.0
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x528]
mov rax, qword [rsp + 0x530]
add rax, r15
mov qword [rsp + 0x900], r15
mov qword [rsp + 0x908], rax
mov word [rsp + 0x910], 0
mov dword [rsp + 0x918], 1
mov rcx, rdi
lea r12, [rsp + 0x900]
mov rdx, r12
call fcn.14009a6e0
mov qword [rsp + 0x900], 0
mov dword [rsp + 0x520], 0
mov rsi, qword [rsp + 0x250]
lea rax, [rsp + 0x520]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebp, eax
test eax, eax
je 0x140004fbb
mov r13, rbp
shl r13, 0x20
or r13, 2
jmp 0x140004fc3
mov r13, qword [rsp + 0x900]
cmp qword [rsp + 0x248], 0
je 0x140004fdf
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [0x140259141]
test ebp, ebp
jne 0x140005107
mov edx, 4
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rbp, rax
mov dword [rax], 0x41888887
mov qword [rsp + 0x900], rbx
lea rax, [rsp + 0x649]
mov qword [rsp + 0x908], rax
mov word [rsp + 0x910], 0
mov dword [rsp + 0x918], 1
mov rcx, rdi
lea rdx, [rsp + 0x900]
call fcn.14009a6e0
mov r12, qword [rsp + 0x250]
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], 4
mov rcx, r13
mov rdx, r12
xor r8d, r8d
mov r9d, 4
call sub.ADVAPI32.dll_RegSetValueExW
mov esi, eax
cmp qword [rsp + 0x248], 0
je 0x140005090
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
test esi, esi
jne 0x140005148
movabs rax, 0xffffffff7fffffff
cmp r13, rax
ja 0x1400050c0
mov rcx, r13
call sub.ADVAPI32.dll_RegCloseKey
cmp qword [rsp + 0x58], 0
je 0x140004e0f
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
jmp 0x140004e0f
cmp qword [rsp + 0x860], 0
je 0x14000521f
mov r8, qword [rsp + 0x868]
mov rcx, qword [0x1402590e0]
xor edx, edx
jmp 0x14000521a
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov r14, rax
mov qword [rax], r13
cmp qword [rsp + 0x58], 0
je 0x14000518d
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x860], 0
jne 0x140005198
jmp 0x1400051ae
movzx eax, byte [0x140259141]
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov r14, rax
shl rsi, 0x20
or rsi, 2
mov qword [rax], rsi
movabs rax, 0xffffffff7fffffff
cmp r13, rax
jbe 0x140007243
cmp qword [rsp + 0x58], 0
jne 0x14000512a
cmp qword [rsp + 0x860], 0
je 0x1400051ae
mov r8, qword [rsp + 0x868]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [r14]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x14000520e
test rcx, rcx
je 0x14000520e
lea rsi, [rax - 1]
mov r15, qword [rax - 1]
mov r12, qword [rax + 7]
mov rcx, r15
call qword [r12]
cmp qword [r12 + 8], 0
je 0x1400051fd
cmp qword [r12 + 0x10], 0x11
jb 0x1400051ec
mov r15, qword [r15 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401b18cd]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7e80b2a4baf4def8
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094a50
mov r14, qword [rax]
mov esi, dword [rax + 8]
movzx ebp, word [rax + 0xc]
movzx r15d, byte [rax + 0xe]
movzx eax, byte [0x140259141]
xor r13d, r13d
mov edx, 0xf
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl r15d, 0x10
or ebp, r15d
mov ecx, ebp
shr ecx, 0x10
xor cl, 8
mov edx, ebp
xor dl, 0xd8
shr ebp, 8
xor bpl, 0x4b
movzx edx, dl
movzx r8d, bpl
shl r8d, 8
or r8d, edx
xor esi, 0x357d39f9
movabs rdx, 0x3aff2d71cd4dba52
xor r14, rdx
mov qword [rax], r14
mov dword [rax + 8], esi
mov word [rax + 0xc], r8w
mov byte [rax + 0xe], cl
mov qword [rsp + 0x748], 0xf
mov qword [rsp + 0x750], rax
mov qword [rsp + 0x758], 0xf
lea rax, [rsp + 0x748]
mov qword [rsp + 0x630], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x638], rax
lea rax, [0x1401be1b8]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x910], rbx
mov qword [rsp + 0x918], 1
lea r15, [rsp + 0x900]
mov rcx, rdi
mov rdx, r15
call fcn.14000ba20
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x5f0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x5e8], rax
mov r14d, 0xa
jmp 0x1400053b9
cmp qword [rsp + 0x6c0], 0
je 0x1400053b3
mov r8, qword [rsp + 0x6c8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
inc r13d
add r14, r14
lea rax, [0x1401aeded]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1095e10fbbd8a6f3
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.1400948b0
mov rcx, qword [rax]
movabs rdx, 0xaa776ae86714ae8a
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x19ac91a1a26366dd
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0xc0478052f88679cd
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0x862ccb6039f6d6f4
xor r9, r10
mov r10d, dword [rax + 0x20]
mov r11d, 0xf7585cc0
xor r10d, r11d
movzx r11d, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
mov esi, eax
shr esi, 8
xor al, 0xa0
xor sil, 0x76
movzx eax, al
movzx esi, sil
shl esi, 8
or esi, eax
xor r11b, 0xc4
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov qword [rsp + 0x260], r9
mov dword [rsp + 0x268], r10d
mov word [rsp + 0x26c], si
mov byte [rsp + 0x26e], r11b
mov r8d, 0x27
mov rcx, r15
mov rdx, rdi
call fcn.1400d5650
mov rcx, rbx
mov rdx, r15
call fcn.1400bec90
mov r12, qword [rsp + 0x630]
movabs rax, 0x8000000000000001
cmp r12, rax
je 0x1400059fa
cmp r13d, 4
je 0x140005cdf
lea rax, [0x1401aeba4]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0xeee6fff6f44c86cc
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140095240
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
movzx r10d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov r11d, eax
shr r11d, 8
xor al, 0x3d
xor r11b, 0x43
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
movabs rax, 0x2d9796f95f144630
xor rcx, rax
mov qword [rsp + 0x248], rcx
movabs rax, 0x4982a99b3653f2fd
xor rdx, rax
mov qword [rsp + 0x250], rdx
movabs rax, 0x2dc2abd8a893fa3
xor r8, rax
mov qword [rsp + 0x258], r8
movabs rax, 0x6d839fa676f2e678
xor r9, rax
mov qword [rsp + 0x260], r9
mov word [rsp + 0x268], r11w
xor r10b, 0x9d
mov byte [rsp + 0x26a], r10b
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x23
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbc00]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x910], rax
mov qword [rsp + 0x918], 1
mov rcx, r15
call fcn.140081090
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.KERNEL32.dll_CreateWaitableTimerExW
test rax, rax
je 0x1400056a9
mov rsi, rax
test r14, r14
js 0x1400056a1
imul rax, r14, 0xffffffffff676980
mov qword [rsp + 0x900], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rsi
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetWaitableTimer
test eax, eax
je 0x1400056a1
mov rcx, rsi
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov ebp, eax
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
cmp ebp, 0xffffffff
jne 0x1400056c1
jmp 0x1400056a9
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
imul rcx, r14, 0x3e8
mov eax, 0xffffffff
cmp rcx, rax
cmovae rcx, rax
call sub.KERNEL32.dll_Sleep
movabs rax, 0x8000000000000000
cmp r12, rax
je 0x140005771
movabs rax, 0x8000000000000001
cmp r12, rax
jne 0x140005818
cmp qword [rsp + 0x638], 0
je 0x140005708
mov r8, qword [rsp + 0x640]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x690], 0
je 0x140005729
mov r8, qword [rsp + 0x698]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6b8]
test rsi, rsi
je 0x14000589c
mov r12, qword [rsp + 0x6b0]
add r12, 8
jmp 0x140005755
add r12, 0x20
dec rsi
je 0x14000589c
cmp qword [r12 - 8], 0
je 0x140005748
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140005748
mov rax, qword [rsp + 0x638]
movabs rcx, 0x8000000000000001
lea rsi, [rcx - 1]
cmp rax, rsi
je 0x1400057a7
test rax, rax
je 0x1400057a7
mov r8, qword [rsp + 0x640]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x650]
cmp rax, rsi
je 0x1400057cf
test rax, rax
je 0x1400057cf
mov r8, qword [rsp + 0x658]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6a8]
test rsi, rsi
je 0x1400053b3
mov r12, qword [rsp + 0x6b0]
mov rcx, rsi
call qword [r12]
cmp qword [r12 + 8], 0
je 0x1400053b3
cmp qword [r12 + 0x10], 0x11
jb 0x140005807
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
jmp 0x1400053ae
test r12, r12
je 0x140005833
mov r8, qword [rsp + 0x638]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x688], 0
je 0x140005854
mov r8, qword [rsp + 0x690]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6b0]
test rsi, rsi
je 0x140005941
mov r12, qword [rsp + 0x6a8]
add r12, 8
jmp 0x140005880
add r12, 0x20
dec rsi
je 0x140005941
cmp qword [r12 - 8], 0
je 0x140005873
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140005873
cmp qword [rsp + 0x6a8], 0
je 0x1400058bd
mov r8, qword [rsp + 0x6b0]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x718]
mov r12, qword [rsp + 0x720]
mov rcx, rsi
call qword [r12]
cmp qword [r12 + 8], 0
je 0x1400058f9
cmp qword [r12 + 0x10], 0x11
jb 0x1400058e8
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6d0]
test rsi, rsi
je 0x140005392
mov r12, qword [rsp + 0x6c8]
add r12, 8
jmp 0x140005925
add r12, 0x58
dec rsi
je 0x140005392
cmp qword [r12 - 8], 0
je 0x140005918
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140005918
cmp qword [rsp + 0x6a0], 0
je 0x140005962
mov r8, qword [rsp + 0x6a8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x710]
mov r12, qword [rsp + 0x718]
mov rcx, rsi
call qword [r12]
cmp qword [r12 + 8], 0
je 0x14000599e
cmp qword [r12 + 0x10], 0x11
jb 0x14000598d
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6c8]
test rsi, rsi
je 0x1400059de
mov r12, qword [rsp + 0x6c0]
add r12, 8
jmp 0x1400059c2
add r12, 0x58
dec rsi
je 0x1400059de
cmp qword [r12 - 8], 0
je 0x1400059b9
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400059b9
cmp qword [rsp + 0x6b8], 0
je 0x1400053b3
mov r8, qword [rsp + 0x6c0]
jmp 0x1400053a5
mov dword [rsp + 0x900], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x908], xmm0
mov dword [rsp + 0x918], 7
mov qword [rsp + 0x91c], 0
mov word [rsp + 0x924], 0
mov byte [rsp + 0x921], 1
mov byte [rsp + 0x924], 1
mov byte [rsp + 0x923], 1
lea r8, [rsp + 0x900]
mov rcx, qword [rsp + 0x5f0]
mov rdx, qword [rsp + 0x5e8]
call fcn.140092af0
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401b9919]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x59789f596de3e805
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095a40
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test rdi, rdi
jne case.0x14000934f.0
mov qword [rsp + 0x740], rsi
lea rcx, [rsp + 0x638]
call fcn.1400b6a80
mov rdi, rax
mov rbx, rdx
lea rcx, [rsp + 0x900]
lea r9, [rsp + 0x740]
mov rdx, rax
mov r8, rbx
call fcn.14009dc90
lea rax, [0x1401bac3e]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x98a13d3b335fd405
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.1400959e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
cmp qword [rsp + 0x900], 0
jne case.0x14000934f.0
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140005b9c
cmp qword [rbx + 0x10], 0x11
jb 0x140005b8b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x5f0]
mov rdx, qword [rsp + 0x5e8]
call fcn.14009b7b0
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401aefa8]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x41b867205bde68bd
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400953a0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
test rdi, rdi
jne case.0x14000934f.0
lea rcx, [rsp + 0x900]
mov rdx, rsi
call fcn.14009f300
lea rax, [0x1401bafab]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x11c6b9301cbd89a9
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140094de0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
cmp dword [rsp + 0x900], 4
jne case.0x14000934f.0
mov rax, qword [rsp + 0x908]
mov rcx, qword [rsp + 0x910]
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rcx
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x760], rax
test rax, rax
jne 0x14000725c
lea rcx, [rsp + 0x208]
call fcn.140001d40
mov rcx, qword [rsp + 0x740]
call sub.KERNEL32.dll_CloseHandle
jmp 0x140005e56
lea rax, [0x1401bc51e]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xea3d864041d9fd14
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095460
movabs rcx, 0x32dac03d248bfe3b
xor rcx, qword [rax]
movabs rdx, 0x1caef71b3177ff33
xor rdx, qword [rax + 8]
movabs r8, 0x55dc08dd8bf3319d
xor r8, qword [rax + 0x10]
movabs r9, 0x6c914cf64c3f957e
xor r9, qword [rax + 0x18]
movabs r10, 0xb6f29109e4fa6051
xor r10, qword [rax + 0x20]
movzx r11d, byte [rax + 0x2a]
movzx eax, word [rax + 0x28]
mov esi, eax
shr esi, 8
xor al, 0x60
xor sil, 0xaf
movzx eax, al
movzx esi, sil
shl esi, 8
or esi, eax
xor r11b, 0xab
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov qword [rsp + 0x260], r9
mov qword [rsp + 0x268], r10
mov word [rsp + 0x270], si
mov byte [rsp + 0x272], r11b
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x2b
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbc00]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x910], rax
mov qword [rsp + 0x918], 1
lea rcx, [rsp + 0x900]
call fcn.140081090
lea rcx, [rsp + 0x630]
call fcn.140001d70
mov rcx, qword [rsp + 0x5f0]
mov rdx, qword [rsp + 0x5e8]
call fcn.140092f40
mov rsi, rax
lea rax, [0x1401b6f59]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x9332cd6a72f6beb9
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095a90
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rsi, rsi
jne case.0x14000934f.0
lea rax, [0x1401b9f13]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6a9d7887086e57ef
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094e10
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov edi, dword [rax + 0x20]
movzx eax, byte [0x140259141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rsi, rax
xor edi, 0xa9e43f3b
movabs rax, 0x4c2db823a0fe0c9
xor rbx, rax
movabs rax, 0x4b9108abcd194370
xor r14, rax
movabs rax, 0x2ff293b284784b79
xor r15, rax
movabs rax, 0x4adc05615d3f56b5
xor r12, rax
mov qword [rsi], r12
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], rbx
mov dword [rsi + 0x20], edi
movzx eax, byte [0x140259141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rdi, rax
mov eax, dword [rsi + 0x20]
mov dword [rdi + 0x20], eax
movdqu xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmmword [rdi + 0x10], xmm1
movdqu xmmword [rdi], xmm0
movzx eax, byte [0x140259141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov ecx, dword [rdi + 0x20]
mov dword [rax + 0x20], ecx
movups xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [rsp + 0x900], 0x24
mov qword [rsp + 0x908], rax
mov qword [rsp + 0x910], 0x24
mov byte [rsp + 0x918], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
mov dword [rsp + 0x919], eax
mov dword [rsp + 0x91c], ecx
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x928], 8
mov qword [rsp + 0x930], 0
movabs rax, 0x8000000000000001
lea rax, [rax - 1]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x938], rax
movdqu xmm0, xmmword [rsp + 0x248]
movdqu xmmword [rsp + 0x940], xmm0
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x950], rax
mov dword [rsp + 0x958], 6
mov eax, dword [rsp + 0x638]
mov dword [rsp + 0x964], eax
mov rax, qword [rsp + 0x630]
mov qword [rsp + 0x95c], rax
mov dword [rsp + 0x968], 6
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x96c], rax
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x974], eax
mov dword [rsp + 0x978], 6
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x97c], rax
mov eax, dword [rsp + 0x868]
mov dword [rsp + 0x984], eax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x988], xmm0
movdqu xmmword [rsp + 0x992], xmm0
movzx eax, word [rsp + 0x20c]
mov word [rsp + 0x9a6], ax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x9a2], eax
movdqu xmmword [rsp + 0x9b6], xmm0
movdqu xmmword [rsp + 0x9a8], xmm0
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x9c0], 0x8000000
lea rcx, [rsp + 0x248]
lea rdx, [rsp + 0x900]
call fcn.14008fc50
lea rax, [0x1401b7040]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0xbaf0f93d27154e13
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.140095700
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov rbp, qword [rsp + 0x248]
cmp rbp, 2
je case.0x14000934f.0
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
mov rbx, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov rdi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x278]
mov r15, qword [rsp + 0x280]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
jne 0x14000a04e
test r12, r12
jne 0x14000a05f
test r14, r14
je 0x140006261
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov ecx, 0x78
xor edx, edx
call fcn.140089e40
mov edx, 0x24
mov rcx, rsi
call fcn.140092f40
mov rdi, rax
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
je 0x1400062fb
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400062fb
test rax, rax
je 0x1400062fb
mov rsi, rdi
dec rsi
mov rbx, qword [rdi - 1]
mov rdi, qword [rdi + 7]
mov rcx, rbx
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400062ea
cmp qword [rdi + 0x10], 0x11
jb 0x1400062d9
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401bbb30]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xeffef00385e49e8c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095ae0
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rsi, qword [rax + 0x20]
movzx ebp, word [rax + 0x28]
movzx eax, byte [0x140259141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rdi, rax
mov eax, ebp
xor al, 0x6c
shr ebp, 8
not bpl
movzx ecx, bpl
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x237f2147cbd588c1
xor rsi, rcx
movabs rcx, 0x6178627af111e38a
xor rbx, rcx
movabs rcx, 0xb603fe2956810409
xor r14, rcx
movabs rcx, 0x5b22483bc9f370a8
xor r15, rcx
movabs rcx, 0x19b609ede008bbf6
xor r12, rcx
mov qword [rdi], r12
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], rbx
mov qword [rdi + 0x20], rsi
mov word [rdi + 0x28], ax
movzx eax, byte [0x140259141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rsi, rax
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x1a]
movdqu xmmword [rax + 0x1a], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
movzx eax, byte [0x140259141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
movups xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmm2, xmmword [rsi + 0x1a]
movdqu xmmword [rax + 0x1a], xmm2
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [rsp + 0x900], 0x2a
mov qword [rsp + 0x908], rax
mov qword [rsp + 0x910], 0x2a
mov byte [rsp + 0x918], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
mov dword [rsp + 0x919], eax
mov dword [rsp + 0x91c], ecx
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x928], 8
mov qword [rsp + 0x930], 0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x938], rax
movdqu xmm0, xmmword [rsp + 0x248]
movdqu xmmword [rsp + 0x940], xmm0
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x950], rax
mov dword [rsp + 0x958], 6
mov eax, dword [rsp + 0x638]
mov dword [rsp + 0x964], eax
mov rax, qword [rsp + 0x630]
mov qword [rsp + 0x95c], rax
mov dword [rsp + 0x968], 6
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x96c], rax
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x974], eax
mov dword [rsp + 0x978], 6
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x97c], rax
mov eax, dword [rsp + 0x868]
mov dword [rsp + 0x984], eax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x988], xmm0
movdqu xmmword [rsp + 0x992], xmm0
movzx eax, word [rsp + 0x20c]
mov word [rsp + 0x9a6], ax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x9a2], eax
movdqu xmmword [rsp + 0x9b6], xmm0
movdqu xmmword [rsp + 0x9a8], xmm0
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x9c0], 0x8000000
lea rcx, [rsp + 0x248]
lea rdx, [rsp + 0x900]
call fcn.14008fc50
lea rax, [0x1401b0369]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x5034e85d97b04d0c
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.140095560
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov r13, qword [rsp + 0x248]
cmp r13, 2
je case.0x14000934f.0
mov rbx, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x278]
mov r15, qword [rsp + 0x280]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r13, r13
jne 0x14000a075
test r12, r12
jne 0x14000a086
test r14, r14
je 0x1400066ae
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov ecx, 0xf
xor edx, edx
call fcn.140089e40
lea rax, [0x1401b5624]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xe4ac6a3f0848ee44
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094940
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov esi, dword [rax + 0x28]
movzx eax, byte [0x140259141]
mov edx, 0x2c
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
xor esi, 0x2894898f
movabs rcx, 0x78389165f42ded03
xor rdi, rcx
movabs rcx, 0x38d0f229586b8748
xor rbx, rcx
movabs rcx, 0xfc290059b1f0da23
xor r14, rcx
movabs rcx, 0x1fb0d0929823bd12
xor r15, rcx
movabs rcx, 0xc073cbd6abd6f3c1
xor r12, rcx
mov qword [rax], r12
mov qword [rax + 8], r15
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
mov dword [rax + 0x28], esi
lea rsi, [rsp + 0x248]
mov r8d, 0x2c
mov rcx, rsi
mov rdx, rax
call fcn.14000b530
lea rdi, [rsp + 0x900]
mov rcx, rdi
mov rdx, rsi
call fcn.14009bc60
mov dword [rsp + 0x9c0], 0x8000000
lea rcx, [rsp + 0x248]
mov rdx, rdi
call fcn.14008fc50
lea rax, [0x1401bc02d]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x39b889986cb915ef
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.1400951c0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r13, qword [rsp + 0x248]
cmp r13, 2
je case.0x14000934f.0
mov rbx, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x278]
mov r15, qword [rsp + 0x280]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r13, r13
jne 0x14000a09c
test r12, r12
jne 0x14000a0ad
test r14, r14
je 0x1400068ae
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov ecx, 0xf
xor edx, edx
call fcn.140089e40
lea rax, [0x1401bae5f]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1acd7d2be71661ae
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094d30
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x140259141]
mov edx, 7
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xd
mov edx, edi
xor dl, 0x6e
shr edi, 8
xor dil, 0xb7
movzx edx, dl
movzx r8d, dil
shl r8d, 8
or r8d, edx
xor esi, 0xdef73e36
mov dword [rax], esi
mov word [rax + 4], r8w
mov byte [rax + 6], cl
lea rsi, [rsp + 0x248]
mov r8d, 7
mov rcx, rsi
mov rdx, rax
call fcn.14000b530
lea rbx, [rsp + 0x900]
mov rcx, rbx
mov rdx, rsi
call fcn.14009bc60
mov dword [rsp + 0x9c0], 0x8000000
lea rax, [0x1401b09a5]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0xeb37dc4888bbd10c
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140094d90
movzx eax, word [rax]
mov ecx, eax
xor cl, 0x5f
shr eax, 8
xor al, 0x7c
movzx ecx, cl
movzx eax, al
shl eax, 8
or eax, ecx
mov word [rsp + 0x860], ax
lea rdx, [rsp + 0x860]
mov r8d, 2
mov rcx, rbx
call fcn.14009bbc0
lea rax, [0x1401b3e25]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x188e190828714402
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140095290
movabs rcx, 0x38610b5806e1313
xor rcx, qword [rax]
movabs rdx, 0xa6545745f38adfdd
xor rdx, qword [rax + 8]
movabs r8, 0xce918a4cbb20c27b
xor r8, qword [rax + 0x10]
movabs r9, 0x40b755f104d6c1a0
xor r9, qword [rax + 0x18]
movabs r10, 0xd010bce6eb2d3e55
xor r10, qword [rax + 0x20]
movabs r11, 0xe4186d35360ffb20
xor r11, qword [rax + 0x28]
movabs rsi, 0x316ac954de6984aa
xor rsi, qword [rax + 0x30]
movabs rdi, 0xdc12c36c604fd3f4
xor rdi, qword [rax + 0x38]
mov ebp, 0xb9f2b33
xor ebp, dword [rax + 0x40]
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov qword [rsp + 0x260], r9
mov qword [rsp + 0x268], r10
mov qword [rsp + 0x270], r11
mov qword [rsp + 0x278], rsi
mov qword [rsp + 0x280], rdi
mov dword [rsp + 0x288], ebp
lea rdx, [rsp + 0x248]
mov r8d, 0x44
mov rcx, rbx
call fcn.14009bbc0
lea rdi, [rsp + 0x630]
mov rcx, rdi
mov rdx, rbx
call fcn.14008fc50
lea rax, [0x1401bb41d]
mov qword [rsp + 0x520], rax
lea rax, [rsp + 0x520]
mov rcx, qword [rsp + 0x520]
movabs rax, 0x717a1ab826811ad
mov qword [rsp + 0x520], rax
lea rax, [rsp + 0x520]
mov rdx, qword [rsp + 0x520]
call fcn.1400949a0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r12, qword [rsp + 0x630]
cmp r12, 2
je case.0x14000934f.0
mov r15, qword [rsp + 0x638]
mov r14, qword [rsp + 0x640]
mov rbp, qword [rsp + 0x648]
mov rsi, qword [rsp + 0x650]
mov rbx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0x660]
mov r13, qword [rsp + 0x668]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test r12, r12
jne 0x14000a0c3
test r14, r14
jne 0x14000a0d4
test rsi, rsi
je 0x140006c15
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov r14d, 0xa
xor r12d, r12d
mov ecx, 0xa
xor edx, edx
call fcn.140089e40
lea r15, [rsp + 0x248]
mov esi, 0xffffffff
jmp 0x140006c5a
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
inc r12d
add r14, r14
lea rax, [0x1401b194b]
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x248]
movabs rax, 0xb47fef364b4f5c6d
mov qword [rsp + 0x248], rax
mov rdx, qword [rsp + 0x248]
call fcn.140095940
mov rcx, qword [rax]
movabs rdx, 0x64e10a75c9d1ea94
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x5b9b6d63f05e9ce2
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x34a56c25f0d5d978
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0x75bd4e7cbd119615
xor r9, r10
mov r10d, dword [rax + 0x20]
mov r11d, 0x5226a8e5
xor r10d, r11d
movzx r11d, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
mov ebx, eax
shr ebx, 8
xor al, 0x78
xor bl, 0x24
movzx eax, al
movzx ebx, bl
shl ebx, 8
or ebx, eax
xor r11b, 0x73
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov qword [rsp + 0x640], r8
mov qword [rsp + 0x648], r9
mov dword [rsp + 0x650], r10d
mov word [rsp + 0x654], bx
mov byte [rsp + 0x656], r11b
mov r8d, 0x27
mov rcx, r15
mov rdx, rdi
call fcn.1400d5650
lea rcx, [rsp + 0x900]
mov rdx, r15
call fcn.1400bec90
mov rbx, qword [rsp + 0x900]
movabs rax, 0x8000000000000001
cmp rbx, rax
je 0x14000a0ea
cmp r12d, 4
je 0x14000a304
lea rax, [0x1401ba683]
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x248]
movabs rax, 0x92daf1ba56938d18
mov qword [rsp + 0x248], rax
mov rdx, qword [rsp + 0x248]
call fcn.140094f80
mov rcx, qword [rax]
movabs rdx, 0x4a67259518511ef2
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x3c49d0d9746f8d1f
xor rdx, r8
mov eax, dword [rax + 0x10]
mov r8d, 0xcc0c8df0
xor eax, r8d
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov dword [rsp + 0x640], eax
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x14
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbc00]
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], 2
mov qword [rsp + 0x268], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 1
mov rcx, r15
call fcn.140081090
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.KERNEL32.dll_CreateWaitableTimerExW
test rax, rax
je 0x140006ef5
mov r13, rax
test r14, r14
js 0x140006eed
imul rax, r14, 0xffffffffff676980
mov qword [rsp + 0x248], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, r13
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetWaitableTimer
test eax, eax
je 0x140006eed
mov rcx, r13
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov ebp, eax
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
cmp ebp, 0xffffffff
jne 0x140006f08
jmp 0x140006ef5
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
imul rcx, r14, 0x3e8
cmp rcx, rsi
cmovae rcx, rsi
call sub.KERNEL32.dll_Sleep
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x140006fb7
movabs rax, 0x8000000000000001
cmp rbx, rax
jne 0x140007050
cmp qword [rsp + 0x908], 0
je 0x140006f4f
mov r8, qword [rsp + 0x910]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x960], 0
je 0x140006f70
mov r8, qword [rsp + 0x968]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x988]
test rbx, rbx
je 0x1400070d3
mov r13, qword [rsp + 0x980]
add r13, 8
jmp 0x140006f9c
add r13, 0x20
dec rbx
je 0x1400070d3
cmp qword [r13 - 8], 0
je 0x140006f8f
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140006f8f
mov rax, qword [rsp + 0x908]
cmp rax, qword [rsp + 0x58]
je 0x140006fe1
test rax, rax
je 0x140006fe1
mov r8, qword [rsp + 0x910]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x920]
cmp rax, qword [rsp + 0x58]
je 0x14000700b
test rax, rax
je 0x14000700b
mov r8, qword [rsp + 0x928]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x978]
test r13, r13
je 0x140006c54
mov rbx, qword [rsp + 0x980]
mov rcx, r13
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140006c54
cmp qword [rbx + 0x10], 0x11
jb 0x14000703f
mov r13, qword [r13 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
jmp 0x140006c4f
test rbx, rbx
je 0x14000706b
mov r8, qword [rsp + 0x908]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x958], 0
je 0x14000708c
mov r8, qword [rsp + 0x960]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x980]
test rbx, rbx
je 0x140007173
mov r13, qword [rsp + 0x978]
add r13, 8
jmp 0x1400070b8
add r13, 0x20
dec rbx
je 0x140007173
cmp qword [r13 - 8], 0
je 0x1400070ab
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400070ab
cmp qword [rsp + 0x978], 0
je 0x1400070f4
mov r8, qword [rsp + 0x980]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x9e8]
mov rbx, qword [rsp + 0x9f0]
mov rcx, r13
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14000712c
cmp qword [rbx + 0x10], 0x11
jb 0x14000711b
mov r13, qword [r13 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x9a0]
test rbx, rbx
je 0x14000720b
mov r13, qword [rsp + 0x998]
add r13, 8
jmp 0x140007158
add r13, 0x58
dec rbx
je 0x14000720b
cmp qword [r13 - 8], 0
je 0x14000714b
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14000714b
cmp qword [rsp + 0x970], 0
je 0x140007194
mov r8, qword [rsp + 0x978]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x9e0]
mov rbx, qword [rsp + 0x9e8]
mov rcx, r13
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400071cc
cmp qword [rbx + 0x10], 0x11
jb 0x1400071bb
mov r13, qword [r13 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x998]
test rbx, rbx
je 0x140007227
mov r13, qword [rsp + 0x990]
add r13, 8
jmp 0x1400071f0
add r13, 0x58
dec rbx
je 0x140007227
cmp qword [r13 - 8], 0
je 0x1400071e7
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400071e7
cmp qword [rsp + 0x990], 0
je 0x140006c54
mov r8, qword [rsp + 0x998]
jmp 0x140006c46
cmp qword [rsp + 0x988], 0
je 0x140006c54
mov r8, qword [rsp + 0x990]
jmp 0x140006c46
mov rcx, r13
call sub.ADVAPI32.dll_RegCloseKey
cmp qword [rsp + 0x58], 0
je 0x14000518d
jmp 0x14000512a
lea rax, [rsp + 0x210]
mov qword [rsp + 0x218], rax
xorps xmm6, xmm6
push rdi
test byte [rax - 0x77], 0x84
and al, 0xf0
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rbp], ah
add al, byte [rax]
add byte [rcx], dh
ror byte [rax - 0x77], 0x84
and al, 0x20
and byte [rdx], al
add byte [rax], al
push rdi
test byte [rax - 0x77], 0x84
and al, 0xf0
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rbp], ah
add al, byte [rax]
add byte [rcx], dh
ror byte [rax - 0x77], 0x84
and al, 0x20
and byte [rdx], al
add byte [rax], al
jmp 0x1400072cd
mov rcx, qword [0x1402590e0]
and byte [rdx], al
add byte [rax], al
jmp 0x1400072cd
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x370]
call fcn.140181c30
mov rcx, qword [rsp + 0x220]
inc rcx
mov rax, rcx
mov qword [rsp + 0x220], rcx
cmp rcx, qword [rsp + 0x760]
je 0x140005cc0
mov rax, qword [rsp + 0x208]
mov esi, 3
mov rcx, qword [rsp + 0x220]
cmp qword [rax + 0x20], rcx
jbe 0x140007320
mov rdi, qword [rax + 0x18]
imul rbx, qword [rsp + 0x220], 0xb0
mov esi, 2
mov ecx, 0x21
cmp byte [rdi + rbx + 0xa6], 0
je 0x140007325
lea rax, [0x1401dc336]
mov qword [rsp + 0x140], rax
jmp 0x1400074e4
jmp 0x1400074e4
mov rdx, qword [rdi + rbx + 0x80]
mov qword [rsp + 0x520], 0
mov rcx, qword [rsp + 0x210]
lea r8, [rsp + 0x520]
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400074c5
mov dword [rsp + 0x520], 0
mov r8d, 4
mov rcx, qword [rsp + 0x218]
lea rdx, [rsp + 0x520]
call fcn.14009b850
test rax, rax
je 0x140007399
mov rcx, qword [rsp + 0x170]
mov qword [rsp + 0x140], rax
jmp 0x1400074e2
cmp dword [rsp + 0x520], 0x4034b50
jne 0x140009fa1
mov qword [rsp + 0x520], 0
mov rcx, qword [rsp + 0x210]
mov edx, 0x16
lea r8, [rsp + 0x520]
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400074c5
mov word [rsp + 0x520], 0
mov r8d, 2
mov rcx, qword [rsp + 0x218]
lea rdx, [rsp + 0x520]
call fcn.14009b850
test rax, rax
jne 0x140007384
movzx r14d, word [rsp + 0x520]
mov word [rsp + 0x520], 0
mov r8d, 2
mov rcx, qword [rsp + 0x218]
lea rdx, [rsp + 0x520]
call fcn.14009b850
test rax, rax
jne 0x140007384
lea rax, [rdi + rbx]
add rax, 0x80
movzx ecx, word [rsp + 0x520]
mov rax, qword [rax]
add rcx, r14
lea rdx, [rax + rcx]
add rdx, 0x1e
mov qword [rdi + rbx + 0x90], rdx
mov qword [rsp + 0x520], 0
mov rcx, qword [rsp + 0x210]
lea r8, [rsp + 0x520]
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400074c5
mov rax, qword [rdi + rbx + 0x70]
mov qword [rsp + 0x170], rax
mov ecx, 0x20
cmp word [rdi + rbx + 0x98], 5
jne 0x140009fcc
lea rax, [0x140216441]
mov qword [rsp + 0x140], rax
jmp 0x1400074e4
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x170]
xor esi, esi
mov edi, 6
mov bl, 1
mov qword [rsp + 0x850], rcx
mov qword [rsp + 0x848], rsi
lea rax, [0x1401bae48]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rdx, 0xf1a667763a8a05e1
mov qword [rsp + 0x900], rdx
mov rdx, qword [rsp + 0x900]
call fcn.140095780
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test bl, bl
jne case.0x14000934f.0
mov qword [rsp + 0x248], rdi
mov rax, qword [rsp + 0x848]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x850]
mov qword [rsp + 0x260], rax
mov r8d, 0x120
lea rcx, [rsp + 0x268]
lea rdi, [rsp + 0x900]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
movabs rax, 0x8000000000000001
dec rax
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x388], rax
mov r14, qword [rsp + 0x768]
mov qword [rsp + 0x390], r14
mov r8d, 0xa0
lea rcx, [rsp + 0x398]
lea rbx, [rsp + 0x860]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x438], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
lea rdx, [rsp + 0x388]
mov dword [rdx + 0xb1], eax
mov dword [rdx + 0xb4], ecx
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x440], rax
lea rax, [0x1401dbe98]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0x450], rax
mov r8d, 0xc8
lea rcx, [rsp + 0x458]
lea rsi, [rsp + 0x520]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [r14 + 8]
movdqu xmmword [rsp + 0x160], xmm0
lea rax, [rsp + 0x748]
mov qword [rsp + 0x520], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x528], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x530], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x538], rax
lea rax, [0x1401be1e0]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x910], rsi
mov qword [rsp + 0x918], 2
mov qword [rsp + 0x860], 0
mov qword [rsp + 0x868], 1
mov qword [rsp + 0x870], 0
mov rcx, rbx
lea rdx, [0x1401bea08]
mov r8, rdi
call fcn.14000c7a0
test al, al
jne case.0x14000934f.0
lea rax, [rsp + 0x388]
mov rcx, qword [rsp + 0x230]
cmp qword [rsp + 0x388], rcx
jne 0x140007753
mov rax, qword [rsp + 0x390]
mov rcx, qword [rsp + 0x860]
mov qword [rsp + 0x858], rcx
mov rcx, qword [rsp + 0x868]
mov qword [rsp + 0x5f8], rcx
mov r8, qword [rsp + 0x870]
mov r9, qword [rax + 0x10]
test r9, r9
je 0x140007869
mov r10, qword [rax + 8]
movzx eax, byte [r10 + r9 - 1]
test al, al
jns 0x1400077da
movzx ecx, byte [r10 + r9 - 2]
cmp cl, 0xc0
jge 0x1400077c2
movzx edx, byte [r10 + r9 - 3]
cmp dl, 0xc0
jge 0x1400077c7
movzx r9d, byte [r10 + r9 - 4]
and r9d, 7
shl r9d, 6
and edx, 0x3f
or edx, r9d
jmp 0x1400077ca
and ecx, 0x1f
jmp 0x1400077d2
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and eax, 0x3f
or eax, ecx
cmp eax, 0x2f
je 0x1400077e8
cmp eax, 0x5c
jne 0x140007869
mov byte [rsp + 0x900], 1
lea rdi, [rsp + 0x900]
mov rcx, rdi
mov rdx, qword [rsp + 0x5f8]
call fcn.1400880f0
mov rsi, rax
lea rax, [0x1401afff6]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0x781e4ef9e61011e3
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140094fb0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov ecx, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
test rsi, rsi
je 0x140009946
jmp case.0x14000934f.0
mov dword [rsp + 0x900], 0
lea rax, [rsp + 0x908]
movups xmmword [rax], xmm6
mov dword [rsp + 0x918], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x921], 1
mov word [rsp + 0x923], 0x101
mov rcx, qword [rsp + 0x5f8]
mov rdx, r8
lea rbx, [rsp + 0x900]
mov r8, rbx
call fcn.140092af0
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401af163]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0x3679859fbaed44b8
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140094ce0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov bh, 0x40
sbb al, 0x48
test edi, edi
mov bh, 0x40
sbb al, 0x48
test edi, edi
jne case.0x14000934f.0
mov qword [rsp + 0x860], rsi
xor ecx, ecx
jmp 0x14000793b
mov ecx, 0x2000
cmp byte [rdi + 0x10], 0x23
jne case.0x14000979c.2
mov r8d, 0x2000
sub r8, rcx
add rcx, rsp
add rcx, 0x900
xor edx, edx
call sub.msvcrt.dll_memset
mov rdi, qword [rsp + 0x248]
test rdi, rdi
jne 0x140009341
movzx eax, byte [rsp + 0x438]
mov byte [rsp + 0x438], 3
mov byte [rsp + 0x58], al
cmp al, 3
je case.0x14000934f.0
movzx r8d, byte [rsp + 0x439]
mov rax, qword [rsp + 0x390]
lea rcx, [rax + 0x98]
mov rdx, qword [rsp + 0x230]
cmp qword [rsp + 0x388], rdx
lea rdx, [rsp + 0x420]
cmovne rcx, rdx
lea rdx, [rsp + 0x388]
cmovne rax, rdx
movzx ecx, word [rcx]
cmp byte [rsp + 0x58], 2
mov edx, 0
mov dword [rsp + 0x1b0], r8d
cmove edx, r8d
mov dword [rsp + 0x78], edx
cmp rcx, 4
ja case.0x14000934f.0
mov edx, dword [rsp + 0x43a]
movzx r14d, word [rsp + 0x43e]
shl r14, 0x20
or r14, rdx
mov rdx, qword [rsp + 0x440]
mov qword [rsp + 0x90], rdx
mov rdx, qword [rsp + 0x448]
mov qword [rsp + 0x80], rdx
mov rdx, qword [rsp + 0x450]
mov qword [rsp + 0x198], rdx
movzx edx, byte [rsp + 0x45f]
shl edx, 0x10
movzx r8d, word [rsp + 0x45d]
or r8d, edx
mov qword [rsp + 0x150], r8
movzx r10d, byte [rsp + 0x460]
movzx r9d, byte [rsp + 0x461]
mov edx, dword [rsp + 0x462]
movzx ebx, word [rsp + 0x466]
shl rbx, 0x20
or rbx, rdx
movzx edx, byte [rsp + 0x484]
mov byte [rsp + 0x128], dl
movzx edx, byte [rsp + 0x487]
shl edx, 0x10
movzx r13d, word [rsp + 0x485]
or r13d, edx
movzx edx, byte [rsp + 0x4ac]
mov byte [rsp + 0x130], dl
movzx edx, byte [rsp + 0x4af]
shl edx, 0x10
movzx r8d, word [rsp + 0x4ad]
or r8d, edx
mov dword [rsp + 0x138], r8d
movzx edx, byte [rsp + 0x4d7]
shl edx, 0x10
movzx r15d, word [rsp + 0x4d5]
or r15d, edx
movzx edx, byte [rsp + 0x4ff]
shl edx, 0x10
movzx r12d, word [rsp + 0x4fd]
or r12d, edx
movzx edx, byte [rsp + 0x4d4]
mov byte [rsp + 0x1a8], dl
movzx edx, byte [rsp + 0x4fc]
mov byte [rsp + 0x56], dl
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0xe0], eax
lea rdx, [0x1401b6060]
movsxd rax, dword [rdx + rcx*4]
add rax, rdx
mov ecx, dword [rsp + 0x458]
mov qword [rsp + 0x158], rcx
movzx ecx, byte [rsp + 0x45c]
mov qword [rsp + 0x148], rcx
mov byte [rsp + 0x178], r10b
movzx ebp, r10b
mov byte [rsp + 0x180], r9b
movzx esi, r9b
mov rcx, qword [rsp + 0x468]
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x470]
mov qword [rsp + 0xa0], rcx
mov rcx, qword [rsp + 0x478]
mov qword [rsp + 0x108], rcx
mov ecx, dword [rsp + 0x480]
mov dword [rsp + 0x100], ecx
mov rcx, qword [rsp + 0x488]
mov qword [rsp + 0xf8], rcx
mov rcx, qword [rsp + 0x490]
mov qword [rsp + 0xb0], rcx
mov rcx, qword [rsp + 0x498]
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0x4a0]
mov qword [rsp + 0x110], rcx
mov ecx, dword [rsp + 0x4a8]
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0x4b0]
mov qword [rsp + 0x120], rcx
mov rcx, qword [rsp + 0x4b8]
mov qword [rsp + 0xd0], rcx
mov rcx, qword [rsp + 0x4c0]
mov qword [rsp + 0xd8], rcx
mov rcx, qword [rsp + 0x4c8]
mov qword [rsp + 0x118], rcx
mov ecx, dword [rsp + 0x4d0]
mov dword [rsp + 0x1a0], ecx
mov rcx, qword [rsp + 0x4d8]
mov qword [rsp + 0x190], rcx
mov rcx, qword [rsp + 0x4e0]
mov qword [rsp + 0xa8], rcx
mov rcx, qword [rsp + 0x4e8]
mov qword [rsp + 0xc0], rcx
mov rcx, qword [rsp + 0x4f0]
mov qword [rsp + 0x188], rcx
mov ecx, dword [rsp + 0x4f8]
mov dword [rsp + 0xec], ecx
mov rcx, qword [rsp + 0x500]
mov qword [rsp + 0x1d8], rcx
mov rcx, qword [rsp + 0x508]
mov qword [rsp + 0x1e0], rcx
mov rcx, qword [rsp + 0x510]
mov qword [rsp + 0x1e8], rcx
mov rcx, qword [rsp + 0x518]
mov qword [rsp + 0x1d0], rcx
jmp rax
mov rax, qword [0x140259138]
test rax, rax
je 0x14000987b
mov edi, 2
xor ecx, ecx
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140007d11
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098b5
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
mov rbp, r14
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x6c], eax
movzx eax, byte [rsp + 0x56]
mov byte [rsp + 0x55], al
mov dword [rsp + 0x68], r12d
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0xc0], rax
jmp 0x140008d98
mov edx, 0x8000
mov ecx, 8
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rdi, rax
movzx eax, byte [0x140259141]
mov edx, 0xab08
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x240], rax
test rax, rax
je case.0x14000934f.0
mov rsi, qword [rsp + 0x240]
movups xmmword [rsi + 0xaaf0], xmm6
mov r8d, 0xaaea
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsi + 0xab00], 0x10201
mov dword [rsp + 0x520], 0
mov byte [rsp + 0x524], 0
mov rax, qword [0x140259138]
test rax, rax
je 0x140009885
xor ecx, ecx
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140007ecc
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098bf
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x160], eax
movzx eax, byte [rsp + 0x524]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x57], al
mov rax, rdi
shr rax, 0x20
mov rcx, rdi
shr rcx, 0x28
mov qword [rsp + 0x228], rcx
mov rbp, r14
mov ecx, dword [rsp + 0xec]
mov dword [rsp + 0x6c], ecx
movzx ecx, byte [rsp + 0x56]
mov byte [rsp + 0x55], cl
mov dword [rsp + 0x68], r12d
mov rcx, qword [rsp + 0x1d8]
mov qword [rsp + 0x1c0], rcx
mov rcx, qword [rsp + 0x1d0]
mov qword [rsp + 0x1b8], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0xb8], rcx
mov ecx, dword [rsp + 0xe0]
mov dword [rsp + 0x1cc], ecx
mov dword [rsp + 0x78], eax
mov eax, edi
mov dword [rsp + 0xe0], edi
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0xc0], rax
mov edi, 3
mov eax, 0x8000
mov qword [rsp + 0x600], rax
xor eax, eax
mov qword [rsp + 0x1f0], rax
xor eax, eax
mov qword [rsp + 0x238], rax
xor eax, eax
mov qword [rsp + 0x200], rax
xor eax, eax
mov qword [rsp + 0x1f8], rax
jmp 0x140008d98
movzx eax, byte [0x140259141]
mov edx, 0x2000
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x14000934f.0
mov rdi, rax
movzx eax, byte [0x140259141]
mov edx, 0x50
xor ecx, ecx
call fcn.14008b700
mov rcx, rax
mov qword [rsp + 0x238], rax
test rax, rax
je case.0x14000934f.0
mov rcx, qword [rsp + 0x238]
movups xmmword [rcx + 0x40], xmm6
movups xmmword [rcx + 0x30], xmm6
movups xmmword [rcx + 0x20], xmm6
movups xmmword [rcx + 0x10], xmm6
movups xmmword [rcx], xmm6
xor edx, edx
xor r8d, r8d
call fcn.140118960
test eax, eax
jne case.0x14000934f.0
mov rax, qword [0x140259138]
test rax, rax
je 0x1400098a1
xor ecx, ecx
mov qword [rsp + 0xf0], rcx
mov ecx, 0
mov qword [rsp + 0x88], rcx
test al, 2
je 0x14000811c
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098c9
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
shl esi, 8
or rsi, rbp
shl rbx, 0x10
or rbx, rsi
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x160], eax
movzx eax, byte [rsp + 0x524]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x1b0]
mov byte [rsp + 0x180], al
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x55], al
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x1a8], al
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0x148]
mov byte [rsp + 0x128], al
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x57], al
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x120], rax
mov eax, edi
shr eax, 8
movzx ecx, byte [rsp + 0x58]
mov byte [rsp + 0x178], cl
mov ecx, edi
mov byte [rsp + 0x58], dil
mov rbp, rdi
shr rbp, 0x10
mov ecx, dword [rsp + 0x1a0]
mov dword [rsp + 0x6c], ecx
mov dword [rsp + 0x68], r15d
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x1b8], rcx
mov rcx, qword [rsp + 0x1d0]
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0xf8], rbx
mov rbx, r14
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x1a0], ecx
mov r15d, dword [rsp + 0x138]
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 0x188], rcx
mov ecx, dword [rsp + 0x100]
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0x1d8]
mov qword [rsp + 0x600], rcx
mov ecx, r12d
mov qword [rsp + 0x228], rcx
mov dword [rsp + 0x138], r13d
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x118], rcx
mov dword [rsp + 0x1b0], eax
mov rax, qword [rsp + 0x158]
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x1cc], eax
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0xe0], eax
mov rax, qword [rsp + 0x150]
mov r13d, eax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f8], rax
movzx eax, byte [rsp + 0x56]
mov dword [rsp + 0x78], eax
mov edi, 4
mov eax, 0x2000
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x1f0], rax
mov eax, 0
mov qword [rsp + 0x158], rax
xor eax, eax
mov qword [rsp + 0x148], rax
xor eax, eax
mov qword [rsp + 0x150], rax
xor eax, eax
mov qword [rsp + 0x198], rax
jmp 0x140008d98
call fcn.140169460
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x140008390
js case.0x14000934f.0
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, qword [rsp + 0xb8]
call fcn.14008b700
mov qword [rsp + 0xf0], rax
test rax, rax
jne 0x14000839d
jmp case.0x14000934f.0
mov eax, 1
mov qword [rsp + 0xf0], rax
call fcn.14016a080
mov qword [rsp + 0x88], rax
test rax, rax
je case.0x14000934f.0
shl esi, 8
or rsi, rbp
shl rbx, 0x10
or rbx, rsi
mov rsi, qword [rsp + 0x88]
mov rcx, rsi
call fcn.140182f70
xor eax, eax
mov qword [rsp + 0x1f0], rax
mov rcx, rsi
lea rdx, [0x140216a78]
xor r8d, r8d
call fcn.140168840
mov rsi, rax
mov rcx, rax
call fcn.140183590
test eax, eax
je 0x1400088a4
mov ebp, eax
mov rcx, rsi
call fcn.140182410
mov r13, rax
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdi, rax
mov rcx, rax
sub rcx, 0xf
mov eax, 0
cmovae rax, rcx
test rdi, rdi
je 0x140008604
lea rcx, [r13 + 7]
and rcx, 0xfffffffffffffff8
sub rcx, r13
xor edx, edx
jmp 0x14000844b
inc rdx
cmp rdx, rdi
jae 0x1400085db
movzx r8d, byte [r13 + rdx]
test r8b, r8b
js 0x1400084a0
mov r8d, ecx
sub r8d, edx
test r8b, 7
jne 0x14000843f
jmp 0x140008468
add rdx, 0x10
cmp rdx, rax
jae 0x140008486
mov r8, qword [r13 + rdx + 8]
or r8, qword [r13 + rdx]
movabs r9, 0x8080808080808080
test r8, r9
je 0x140008464
cmp rdx, rdi
jae 0x140008442
cmp byte [r13 + rdx], 0
js 0x140008442
inc rdx
cmp rdi, rdx
jne 0x14000848b
jmp 0x1400085db
lea r9, [0x1401dae78]
movzx r9d, byte [r8 + r9]
cmp r9d, 4
je 0x1400084ca
cmp r9d, 3
je 0x1400084fa
cmp r9d, 2
jne case.0x14000934f.0
inc rdx
jmp 0x1400085c1
lea r9, [rdx + 1]
cmp r9, rdi
jae case.0x14000934f.0
movzx r9d, byte [r13 + r9]
cmp r8, 0xf0
je 0x14000852e
cmp r8d, 0xf4
jne 0x14000853d
cmp r9b, 0x8f
jle 0x140008555
jmp case.0x14000934f.0
lea r9, [rdx + 1]
cmp r9, rdi
jae case.0x14000934f.0
movzx r9d, byte [r13 + r9]
cmp r8, 0xe0
je 0x14000858c
cmp r8d, 0xed
jne 0x14000859b
cmp r9b, 0x9f
jle 0x1400085bd
jmp case.0x14000934f.0
add r9b, 0x70
cmp r9b, 0x30
jb 0x140008555
jmp case.0x14000934f.0
add r8b, 0xf
cmp r8b, 2
ja case.0x14000934f.0
cmp r9b, 0xc0
jge case.0x14000934f.0
lea r8, [rdx + 2]
cmp r8, rdi
jae case.0x14000934f.0
cmp byte [r13 + r8], 0xbf
jg case.0x14000934f.0
add rdx, 3
cmp rdx, rdi
jae case.0x14000934f.0
cmp byte [r13 + rdx], 0xc0
jl 0x14000843f
jmp case.0x14000934f.0
and r9b, 0xe0
cmp r9b, 0xa0
je 0x1400085bd
jmp case.0x14000934f.0
lea r10d, [r8 + 0x1f]
cmp r10b, 0xc
jb 0x1400085b3
and r8b, 0xfe
cmp r8b, 0xee
jne case.0x14000934f.0
cmp r9b, 0xc0
jge case.0x14000934f.0
add rdx, 2
cmp rdx, rdi
jae case.0x14000934f.0
cmp byte [r13 + rdx], 0xbf
jle 0x14000843f
jmp case.0x14000934f.0
test rdi, rdi
je 0x140008604
js case.0x14000934f.0
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, rdi
call fcn.14008b700
mov rsi, rax
test rax, rax
jne 0x140008609
jmp case.0x14000934f.0
mov esi, 1
mov rcx, rsi
mov rdx, r13
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], rsi
mov qword [rsp + 0x530], rdi
lea rcx, [rsp + 0x520]
call fcn.1400ee900
mov rdi, rax
mov rcx, qword [rsp + 0x88]
call fcn.140181c30
cmp qword [rsp + 0xb8], 0
je 0x14000866d
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0xf0]
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x58], 2
jb 0x1400086bf
movzx eax, byte [rsp + 0x148]
shl rax, 0x20
mov rcx, qword [rsp + 0x150]
shl rcx, 0x28
add rcx, qword [rsp + 0x158]
or rcx, rax
mov rsi, rcx
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400086bf
cmp qword [rbx + 0x10], 0x11
jb 0x1400086ae
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test ebp, ebp
jne case.0x14000934f.0
mov rax, qword [rsp + 0x7a0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x7a8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x7b0]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x7b8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x7c0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x7c8]
mov qword [rsp + 0x120], rax
mov eax, dword [rsp + 0x618]
mov dword [rsp + 0x138], eax
movzx eax, byte [rsp + 0x73]
mov byte [rsp + 0x130], al
mov eax, dword [rsp + 0x61c]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x7d8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x7e0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x7e8]
mov qword [rsp + 0xf8], rax
mov r13d, dword [rsp + 0x620]
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x128], al
mov eax, dword [rsp + 0x624]
mov dword [rsp + 0x100], eax
mov rax, qword [rsp + 0x7f0]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x7f8]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x90], rax
mov rbx, qword [rsp + 0x808]
movzx eax, byte [rsp + 0x75]
mov byte [rsp + 0x180], al
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x178], al
mov rax, qword [rsp + 0x810]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x818]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x820]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x830]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x838]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x1c0], rax
mov eax, dword [rsp + 0x628]
mov dword [rsp + 0x68], eax
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x55], al
mov qword [rsp + 0xf0], rdi
mov eax, dword [rsp + 0x62c]
mov dword [rsp + 0x6c], eax
mov al, 2
mov qword [rsp + 0x1f0], rax
jmp 0x140008a44
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0x148]
mov byte [rsp + 0x128], al
mov eax, dword [rsp + 0x1b0]
mov byte [rsp + 0x180], al
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x778], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x780], rax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x608], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x60c], eax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x138], r13d
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0xf8], rbx
mov rax, qword [rsp + 0x150]
mov r13d, eax
mov rax, qword [rsp + 0x158]
mov dword [rsp + 0x100], eax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x108], rax
mov rbx, r14
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x178], al
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x1c0], rax
mov dword [rsp + 0x68], r15d
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x788], rax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0x6c], eax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x790], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x798], rax
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x614], eax
movzx eax, byte [rsp + 0x56]
mov byte [rsp + 0x71], al
mov dword [rsp + 0x610], r12d
movzx eax, byte [rsp + 0x164]
mov byte [rsp + 0x524], al
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x520], eax
mov rax, qword [0x140259138]
test rax, rax
je 0x1400098ab
xor ecx, ecx
mov qword [rsp + 0x158], rcx
mov ecx, 0
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140008aad
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098d3
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0xf0]
mov eax, ecx
shr eax, 8
mov dword [rsp + 0x1b0], eax
mov rbp, rcx
shr rbp, 0x10
movzx eax, byte [rsp + 0x524]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x160], eax
mov edi, 5
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x62c], eax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x628], eax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x788]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x790]
mov qword [rsp + 0x240], rax
mov eax, dword [rsp + 0x60c]
mov dword [rsp + 0x1a0], eax
movzx eax, byte [rsp + 0x72]
mov byte [rsp + 0x1a8], al
mov eax, ecx
mov byte [rsp + 0x58], cl
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x1cc], eax
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x180]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x73], al
mov r15d, dword [rsp + 0x608]
mov rax, qword [rsp + 0x780]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x778]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x798]
mov qword [rsp + 0x600], rax
mov eax, dword [rsp + 0x610]
mov qword [rsp + 0x228], rax
movzx eax, byte [rsp + 0x71]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x614]
mov dword [rsp + 0xe0], eax
mov eax, 0
mov qword [rsp + 0x148], rax
mov eax, 0
mov qword [rsp + 0x150], rax
mov eax, 0
mov qword [rsp + 0xf0], rax
mov eax, 0
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x820], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x818], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x810], rax
mov qword [rsp + 0x808], rbx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x7f8], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x7f0], rax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x624], eax
mov dword [rsp + 0x620], r13d
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x7e8], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x7e0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x7d0], rax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x61c], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x618], eax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x7c8], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x7c0], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x7b8], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x7b0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x7a8], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x7a0], rax
mov rax, qword [rsp + 0x248]
cmp rax, 4
ja case.default.0x140008db4
lea rcx, [0x1401b6074]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x260], 2
jb case.0x140008db4.0
mov rsi, qword [rsp + 0x280]
mov r14, qword [rsp + 0x288]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je case.0x140008db4.0
cmp qword [r14 + 0x10], 0x11
jb 0x140008f5d
mov rsi, qword [rsi - 8]
jmp 0x140008f5d
cmp qword [rsp + 0x268], 0
je 0x140008e1a
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
jb 0x140008e5d
mov rsi, qword [rsp + 0x2a8]
mov r14, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140008e5d
cmp qword [r14 + 0x10], 0x11
jb 0x140008e4c
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x370]
call fcn.140181c30
jmp case.0x140008db4.0
cmp byte [rsp + 0x260], 2
jb 0x140008eb2
mov rsi, qword [rsp + 0x280]
mov r14, qword [rsp + 0x288]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140008eb2
cmp qword [r14 + 0x10], 0x11
jb 0x140008ea1
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x350], 0
je 0x140008ed3
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x368]
mov rcx, qword [0x1402590e0]
xor edx, edx
jmp 0x140008f69
cmp qword [rsp + 0x268], 0
je 0x140008f0a
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
jb 0x140008f4d
mov rsi, qword [rsp + 0x2a8]
mov r14, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140008f4d
cmp qword [r14 + 0x10], 0x11
jb case.default.0x14000934f
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x370]
mov rcx, rsi
call fcn.1401188e0
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x248], rdi
mov rax, qword [rsp + 0x88]
mov dword [rsp + 0x250], eax
mov dword [rsp + 0x254], 0
mov qword [rsp + 0x258], 0
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x260], al
mov eax, dword [rsp + 0x1b0]
mov byte [rsp + 0x261], al
mov dword [rsp + 0x262], ebp
shr rbp, 0x20
mov word [rsp + 0x266], bp
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x158]
mov dword [rsp + 0x280], eax
mov rax, qword [rsp + 0x148]
mov byte [rsp + 0x284], al
mov rax, qword [rsp + 0x150]
mov word [rsp + 0x285], ax
shr eax, 0x10
mov byte [rsp + 0x287], al
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x288], al
movzx eax, byte [rsp + 0x180]
mov byte [rsp + 0x289], al
mov dword [rsp + 0x28a], ebx
shr rbx, 0x20
mov word [rsp + 0x28e], bx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x2a0], rax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x2a8], eax
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x2ac], al
mov word [rsp + 0x2ad], r13w
shr r13d, 0x10
mov byte [rsp + 0x2af], r13b
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x2c8], rax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x2d0], eax
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x2d4], al
mov eax, dword [rsp + 0x138]
mov word [rsp + 0x2d5], ax
shr eax, 0x10
mov byte [rsp + 0x2d7], al
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x2f0], rax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0x2f8], eax
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x2fc], al
mov word [rsp + 0x2fd], r15w
shr r15d, 0x10
mov byte [rsp + 0x2ff], r15b
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x318], rax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x320], eax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x324], al
mov ebp, dword [rsp + 0x68]
mov word [rsp + 0x325], bp
shr ebp, 0x10
mov byte [rsp + 0x327], bpl
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x340], rax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x348], eax
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x34c], al
mov rax, qword [rsp + 0x228]
mov word [rsp + 0x34d], ax
shr eax, 0x10
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0x600]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x370], rax
mov word [rsp + 0x378], 0
mov rax, qword [rsp + 0x1f0]
mov byte [rsp + 0x37a], al
movzx eax, byte [rsp + 0x164]
lea rcx, [rsp + 0x388]
mov byte [rcx - 9], al
mov eax, dword [rsp + 0x160]
mov dword [rcx - 0xd], eax
mov eax, dword [rsp + 0x1cc]
mov dword [rsp + 0x380], eax
movzx eax, byte [rsp + 0x57]
mov byte [rsp + 0x384], al
movzx eax, word [rsp + 0x520]
mov word [rcx - 3], ax
movzx eax, byte [rsp + 0x522]
mov byte [rcx - 1], al
lea rcx, [0x1401b6088]
movsxd rax, dword [rcx + rdi*4]
add rax, rcx
jmp rax
mov rsi, qword [rsp + 0x260]
test rsi, rsi
je 0x1400098e1
cmp rsi, 0x2000
mov r9d, 0x2000
cmovb r9, rsi
mov rdx, qword [rsp + 0x250]
mov rax, qword [rsp + 0x258]
lea rcx, [rsp + 0x520]
lea r8, [rsp + 0x900]
call qword [rax + 0x18]
cmp qword [rsp + 0x520], 0
je case.default.0x1400093c0
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x348]
cmp eax, dword [rsp + 0x254]
jne 0x14000952d
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ecdd0
cmp qword [rsp + 0x520], 0
jne 0x140009567
jmp 0x1400094e6
mov eax, dword [rsp + 0x380]
cmp eax, dword [rsp + 0x254]
jne 0x140009584
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400edad0
cmp qword [rsp + 0x520], 0
jne 0x1400095be
jmp 0x1400094e6
mov eax, dword [rsp + 0x380]
cmp eax, dword [rsp + 0x254]
jne 0x1400095db
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ee560
cmp qword [rsp + 0x520], 0
jne 0x140009615
jmp 0x1400094e6
mov eax, dword [rsp + 0x380]
cmp eax, dword [rsp + 0x254]
jne 0x140009632
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ed6e0
cmp qword [rsp + 0x520], 0
jne 0x14000966c
mov rdi, qword [rsp + 0x528]
cmp rdi, 0x2001
jae case.0x14000934f.0
add qword [rsp + 0x258], rdi
cmp dword [rsp + 0x250], 0
je 0x1400096e1
mov ecx, dword [rsp + 0x254]
lea rdx, [rsp + 0x900]
mov r8, rdi
call fcn.140018c00
jmp 0x1400096f8
movzx ebx, byte [rsp + 0x34c]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ecdd0
cmp qword [rsp + 0x520], 0
je case.default.0x140009582
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x384]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400edad0
cmp qword [rsp + 0x520], 0
je case.default.0x1400095d9
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x384]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ee560
cmp qword [rsp + 0x520], 0
je case.default.0x140009630
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x384]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ed6e0
cmp qword [rsp + 0x520], 0
je case.default.0x140009687
mov rdi, qword [rsp + 0x528]
mov eax, edi
add eax, 0xf8890000
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rdi + 0xf], 0x23
jne case.0x14000979c.2
mov rsi, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400096c3
cmp qword [rbx + 0x10], 0x11
jb 0x1400096b2
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
dec rdi
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov ecx, 0x2000
jmp 0x14000793b
mov ecx, dword [rsp + 0x254]
lea rdx, [rsp + 0x900]
mov r8, rdi
call fcn.1400187b0
mov dword [rsp + 0x254], eax
jmp 0x140009727
mov rdi, qword [rsp + 0x528]
sub rsi, rdi
jb case.0x14000934f.0
mov qword [rsp + 0x260], rsi
cmp rdi, 0x2001
jae case.0x14000934f.0
test rdi, rdi
je 0x1400098e1
lea rcx, [rsp + 0x860]
lea rdx, [rsp + 0x900]
mov r8, rdi
call fcn.14009ba90
mov ecx, 0x2000
test rax, rax
je 0x14000793b
jmp case.0x14000979c.2
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094ee
test rdi, rdi
jne 0x1400094ee
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400edde0
mov rdi, rax
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094ee
test rdi, rdi
jne 0x1400094ee
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400edde0
mov rdi, rax
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094ee
test rdi, rdi
jne 0x1400094ee
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400edde0
mov rdi, rax
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094ee
test rdi, rdi
jne 0x1400094ee
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400edde0
invalid
add byte [rax - 0x77], cl
mov dword [rbx - 0x72b7fc20], 0x1ac8420d
add byte [rax + 0x63], cl
add al, 0x81
add rax, rcx
jmp rax
invalid
shr rdi, 0x20
mov ecx, 0x2000
cmp edi, 0x23
je 0x14000793b
jmp case.0x14000979c.2
call fcn.140094430
jmp 0x140007cdd
call fcn.140094430
xor ecx, ecx
mov qword [rsp + 0x88], rcx
test al, 2
jne 0x140007eab
jmp 0x140007ecc
call fcn.140094430
jmp 0x1400080e0
call fcn.140094430
jmp 0x140008a71
call fcn.140094430
jmp 0x140007d03
call fcn.140094430
jmp 0x140007ebe
cmc
in eax, 0xff
invalid
cmc
in eax, 0xff
invalid
call fcn.140094430
jmp 0x14000810e
call fcn.140094430
jmp 0x140008a9f
xor esi, esi
jmp 0x1400098e4
mov sil, 1
lea rax, [0x1401aefbd]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rdx, 0x22220698ec6cb87c
mov qword [rsp + 0x900], rdx
mov rdx, qword [rsp + 0x900]
call fcn.1400953f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, word [rax + 0x14]
test sil, sil
je case.0x14000934f.0
mov rcx, qword [rsp + 0x860]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x858], 0
je 0x140009967
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0x5f8]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x230]
cmp qword [rsp + 0x388], rax
je 0x140009d96
mov r8d, 0x10000
lea rcx, [rsp + 0x900]
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x248]
test rax, rax
je 0x140009a10
movzx r12d, byte [rsp + 0x260]
mov rdi, qword [rsp + 0x280]
add byte [rbx + rcx*4 - 0x44], cl
and al, 0x88
add al, byte [rax]
add byte [rax - 0x39], cl
test byte [rax + rcx*2], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
invalid
add byte [rbx + rcx*4 - 0x44], cl
and al, 0x88
add al, byte [rax]
add byte [rax - 0x39], cl
test byte [rax + rcx*2], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
enter 0xffffffffffff8d48, 0xd
invalid
invalid
invalid
loop 0x140009992
lea rcx, [0x1401b60b0]
sbb al, byte [rax]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movdqu xmm7, xmmword [rsp + 0x250]
movzx eax, byte [rsp + 0x267]
shl eax, 0x10
movzx ecx, word [rsp + 0x265]
or ecx, eax
mov r14d, dword [rsp + 0x261]
shl rcx, 0x28
shl r14, 8
or r14, rcx
or r14, r12
jmp 0x140009ca6
movzx eax, byte [rsp + 0x438]
mov rsi, qword [rsp + 0x458]
mov rdi, qword [rsp + 0x460]
mov byte [rsp + 0x438], 3
cmp al, 3
je case.0x14000934f.0
movdqu xmm7, xmmword [rsp + 0x440]
mov r14, qword [rsp + 0x450]
cmp al, 2
jb 0x140009ca6
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
add byte [rdi], cl
test byte [rbp + 2], al
add byte [rax], al
add byte [rdi], cl
test byte [rbp + 2], al
add byte [rax], al
cmp qword [rdi + 0x10], 0x11
jb 0x140009a6c
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
mov ecx, dword [0x1402590e0]
add byte [rcx], dh
ror byte [rcx - 0x77], cl
invalid
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
jmp 0x140009ca6
movdqu xmm7, xmmword [rsp + 0x268]
mov r14, qword [rsp + 0x278]
jmp 0x140009ae2
mov esp, 0x26824
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x78
add al, byte [rax]
add bl, ch
movdqu xmm7, xmmword [rsp + 0x268]
mov r14, qword [rsp + 0x278]
mov rsi, qword [rsp + 0x348]
mov r8, qword [rsp + 0x368]
mov rbx, qword [rsp + 0x350]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test rbx, rbx
je 0x140009ae2
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp r12b, 2
jb 0x140009ca6
mov rcx, rdi
call qword [r15]
cmp qword [r15 + 8], 0
add byte [rdi], cl
invalid
invalid
add dword [rax], eax
invalid
add byte [rdi], cl
test byte [rcx + 0x49000001], ch
cmp dword [rdi + 0x10], 0x11
cmp qword [r15 + 0x10], 0x11
jb 0x140009b08
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
add byte [rcx], dh
ror byte [rcx - 0x77], cl
clc
call sub.KERNEL32.dll_HeapFree
jmp 0x140009ca6
jb 0x140009bed
mov rax, qword [rsp + 0x58]
mov rax, qword [rax - 8]
mov qword [rsp + 0x58], rax
mov rcx, qword [0x1402590e0]
xor edx, edx
ror byte [rbx + rcx*4 + 0x44], cl
and al, 0x58
ror byte [rbx + rcx*4 + 0x44], cl
and al, 0x58
call sub.KERNEL32.dll_HeapFree
jmp 0x140009ca6
movq rsi, xmm7
pshufd xmm0, xmm7, 0xee
movq rdi, xmm0
test r14, r14
je 0x140009d06
cmp r14, 0x10000
mov r9d, 0x10000
cmovb r9, r14
lea rcx, [rsp + 0x520]
mov rdx, rsi
lea r8, [rsp + 0x900]
call qword [rdi + 0x18]
cmp qword [rsp + 0x520], 0
jne case.0x14000934f.0
mov rax, qword [rsp + 0x528]
sub r14, rax
jb case.0x14000934f.0
test rax, rax
jne 0x140009cb5
mov rax, qword [rsp + 0x388]
cmp rax, qword [rsp + 0x230]
je 0x140009d96
test rax, rax
je 0x140009d33
mov r8, qword [rsp + 0x390]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x3a0], 0
je 0x140009d54
mov r8, qword [rsp + 0x3a8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x3b8], 0
je 0x140009d75
mov r8, qword [rsp + 0x3c0]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x3d0], 0
je 0x140009d96
mov r8, qword [rsp + 0x3d8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [rsp + 0x438]
cmp al, 3
je 0x140009dde
cmp al, 2
jb 0x140009dde
mov rsi, qword [rsp + 0x458]
mov rdi, qword [rsp + 0x460]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140009dde
cmp qword [rdi + 0x10], 0x11
jb 0x140009dcd
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
invalid
call sub.KERNEL32.dll_HeapFree
invalid
mov rax, qword [rsp + 0x248]
cmp rax, 4
ja case.default.0x140009dfa
lea rcx, [0x1401b60c4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x260], 2
jb case.0x140009dfa.0
mov rsi, qword [rsp + 0x280]
mov rdi, qword [rsp + 0x288]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je case.0x140009dfa.0
cmp qword [rdi + 0x10], 0x11
jb 0x140009e35
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
jmp 0x140009f97
cmp qword [rsp + 0x268], 0
je 0x140009e67
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
add byte [rdx], al
jb 0x14000729c
mov rsi, qword [rsp + 0x2a8]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14000729c
cmp qword [rdi + 0x10], 0x11
jb 0x14000728b
mov rsi, qword [rsi - 8]
jmp 0x14000728b
cmp byte [rsp + 0x260], 2
jb 0x140009eeb
mov rsi, qword [rsp + 0x280]
mov rdi, qword [rsp + 0x288]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140009eeb
cmp qword [rdi + 0x10], 0x11
jb case.0x1400099d5.19
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x350], 0
add byte [rax], al
je 0x140009f0c
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x368]
jmp 0x140009f8e
cmp qword [rsp + 0x268], 0
je 0x140009f37
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
jb 0x140009f79
mov rsi, qword [rsp + 0x2a8]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140009f79
cmp qword [rdi + 0x10], 0x11
jb 0x140009f68
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x370]
call fcn.1401188e0
mov r8, qword [rsp + 0x370]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x140009dfa.0
mov esi, 1
mov eax, 0x19
mov qword [rsp + 0x170], rax
mov ecx, 0x19
lea rax, str.Invalid_local_file_headerInvalid_Central_Directory_headerAES_encryption_without_AES_extra_data_fieldArchive_header_is_too_largeCould_not_find_central_directory_endInvalid_zip_headerInvalid_digital_signature_headerCould_not_find_ZIP64_central_directory_endWQLIWbemClassWrapper
mov qword [rsp + 0x140], rax
jmp 0x1400074e4
cmp byte [rdi + rbx + 0xa5], 2
jne case.0x14000934f.0
add rdi, rbx
mov eax, dword [rsp + 0x860]
mov ecx, dword [rsp + 0x863]
mov dword [rsp + 0x163], ecx
mov dword [rsp + 0x160], eax
mov r8d, 0xc8
lea rcx, [rsp + 0x520]
lea rsi, [rsp + 0x900]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov r8d, 0xa0
lea rcx, [rsp + 0x860]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
xor ebx, ebx
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x770], rax
mov qword [rsp + 0x768], rdi
xor edi, edi
jmp 0x1400074fb
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x140006254
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x140006259
jmp 0x140006261
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x1400066a1
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x1400066a6
jmp 0x1400066ae
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x1400068a1
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x1400068a6
jmp 0x1400068ae
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r14, r14
je 0x140006c08
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
test rsi, rsi
jne 0x140006c0d
jmp 0x140006c15
lea rax, [0x1401afe58]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0xd9b68d893a7a06cf
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.1400948e0
movabs rcx, 0x9a24521eeb9463e
xor rcx, qword [rax]
movabs rdx, 0x41af2d7b61cef1e2
xor rdx, qword [rax + 8]
movabs r8, 0x1a171e7b2403f01b
xor r8, qword [rax + 0x10]
mov r9d, 0xc2d85077
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0x9c
xor r11b, 0x57
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0xc
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov dword [rsp + 0x260], r9d
mov word [rsp + 0x264], r11w
mov byte [rsp + 0x266], r10b
lea rcx, [rsp + 0x248]
call fcn.14009b800
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401bd3f3]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x3a2ebeaaeb52f3b7
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.140095220
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
test rdi, rdi
jne case.0x14000934f.0
mov qword [rsp + 0x520], rsi
lea rcx, [rsp + 0x908]
call fcn.1400b6a80
mov rsi, rax
mov rdi, rdx
lea rcx, [rsp + 0x248]
lea r9, [rsp + 0x520]
mov rdx, rax
mov r8, rdi
call fcn.14009dc90
lea rax, [0x1401af434]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x493a29a424326462
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.140095130
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
cmp qword [rsp + 0x248], 0
jne case.0x14000934f.0
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14000a2f2
cmp qword [rdi + 0x10], 0x11
jb 0x14000a2e1
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x520]
call sub.KERNEL32.dll_CloseHandle
jmp 0x14000a417
lea rax, [0x1401bc3f7]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x46651257dcdeb890
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.1400952d0
movq xmm0, qword [rax]
movq xmm1, qword [rax + 8]
punpcklqdq xmm0, xmm1
pxor xmm0, xmmword [0x1401b6040]
movq xmm1, qword [rax + 0x10]
movq xmm2, qword [rax + 0x18]
punpcklqdq xmm1, xmm2
pxor xmm1, xmmword [0x1401b6050]
movdqu xmmword [rsp + 0x630], xmm0
movdqu xmmword [rsp + 0x640], xmm1
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x20
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbc00]
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], 2
mov qword [rsp + 0x268], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 1
lea rcx, [rsp + 0x248]
call fcn.140081090
lea rcx, [rsp + 0x900]
call fcn.140001d70
lea rax, [0x1401b7638]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xf7381ebd226acc16
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095690
mov ecx, 0x238827e2
xor ecx, dword [rax]
mov dword [rsp + 0x900], ecx
lea rcx, [rsp + 0x900]
call fcn.14000a480
call fcn.14000abf0
int3