Function at 0x1400b6af0
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x8f8
movdqa xmmword [rsp + 0x8e0], xmm12
movdqa xmmword [rsp + 0x8d0], xmm11
movdqa xmmword [rsp + 0x8c0], xmm10
movdqa xmmword [rsp + 0x8b0], xmm9
movaps xmmword [rsp + 0x8a0], xmm8
movaps xmmword [rsp + 0x890], xmm7
movdqa xmmword [rsp + 0x880], xmm6
mov rdi, r8
mov r13, rdx
mov qword [rsp + 0x158], rcx
mov rcx, qword [rdx + 0x130]
test rcx, rcx
je 0x1400b6b6f
mov rdx, rdi
call fcn.1401018c0
test al, al
je 0x1400b98ba
lea rax, [r13 + 0x20]
mov qword [rsp + 0x268], rax
lea rax, [r13 + 0x88]
mov qword [rsp + 0x170], rax
lea rax, [r13 + 0xf8]
mov qword [rsp + 0x178], rax
lea rax, [r13 + 0xfb]
mov qword [rsp + 0x368], rax
lea rax, [r13 + 0x28]
mov qword [rsp + 0x30], rax
lea rax, [0x1401cbf20]
lea rcx, str.corrupt_deflate_stream
xorps xmm7, xmm7
movaps xmm8, xmmword [0x14019a020]
movq xmm0, rcx
movq xmm9, rax
punpcklqdq xmm9, xmm0
movdqa xmm10, xmmword [str.uespemosarenegylmodnarodsetybdet7]
movdqa xmm11, xmmword [0x14019a050]
lea rax, [0x1401cc1b8]
movq xmm0, rax
movdqa xmm6, xmmword [0x14019a030]
punpcklqdq xmm6, xmm0
lea rax, [r13 + 0xc8]
mov qword [rsp + 0x160], rax
lea rax, [r13 + 0xe0]
mov qword [rsp + 0x580], rax
lea rax, [r13 + 0x50]
mov qword [rsp + 0x588], rax
lea r12, [rsp + 0x438]
lea rbp, [rsp + 0x50]
lea r15, [rsp + 0x270]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x378], rdi
mov rdx, qword [r13 + 0x118]
mov rax, qword [r13 + 0x120]
mov rcx, r12
mov r8, rdi
call qword [rax + 0x18]
mov rax, qword [rsp + 0x438]
cmp rax, 3
je 0x1400b6e00
cmp eax, 4
je 0x1400b9acf
mov r8d, 0xa0
lea rcx, [rsp + 0x7e0]
mov rdx, r12
call sub.msvcrt.dll_memcpy
movzx eax, word [rsp + 0x848]
lea ecx, [rax - 0x12d]
cmp ecx, 3
jae 0x1400b6eae
cmp qword [r13], 0
je 0x1400b6cd1
mov rax, qword [r13 + 8]
test rax, rax
je 0x1400b6cd1
mov rdx, qword [r13 + 0x10]
mov r8, qword [r13 + 0x18]
mov rcx, qword [rsp + 0x268]
call qword [rax + 0x10]
mov qword [r13], 0
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401cc020]
call fcn.1400943e0
cmp byte [rsp + 0x70], 2
je 0x1400b6d0b
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401cc040]
call fcn.1400943e0
cmp byte [rsp + 0x70], 2
je 0x1400b6d3d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401cc060]
call fcn.1400943e0
cmp byte [rsp + 0x70], 2
je 0x1400b6d6f
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401cc080]
call fcn.1400943e0
cmp byte [rsp + 0x70], 2
je 0x1400b6da1
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x178]
movzx eax, byte [rax]
mov ecx, eax
or ecx, 4
cmp ecx, 5
je 0x1400b6ed0
cmp al, 0xa
jb 0x1400b6ddd
cmp qword [r13 + 0x108], 0
je 0x1400b6ddd
mov r8, qword [r13 + 0x100]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x178]
movabs rcx, 0x101010101010101
mov qword [rax + 0x10], rcx
movups xmmword [rax], xmm8
jmp 0x1400b6ed0
mov rbx, qword [rsp + 0x440]
mov qword [rsp + 0x5a8], rbx
mov rsi, qword [rbx]
test rsi, rsi
je 0x1400b9b45
mov rax, qword [rbx + 8]
mov rcx, rsi
call qword [rax + 0x38]
movabs rcx, 0x7b0662effaaa8bb8
xor rdx, rcx
movabs rcx, 0xca421721ce7acd33
xor rax, rcx
or rax, rdx
jne 0x1400b9b45
cmp byte [rsi], 1
jne 0x1400b9b45
cmp byte [rsi + 1], 2
jne 0x1400b9b45
cmp dword [rsi + 4], 0
jne 0x1400b9b45
cmp qword [r13], 0
je 0x1400b719d
mov rax, qword [r13 + 8]
test rax, rax
je 0x1400b9b45
mov r8, qword [r13 + 0x10]
mov r9, qword [r13 + 0x18]
lea rcx, [rsp + 0x500]
mov rdx, qword [rsp + 0x268]
call qword [rax]
mov rax, qword [r13 + 0x128]
cmp rax, 1
jbe 0x1400b71d7
jmp 0x1400b9b38
add eax, 0xfffffecd
cmp eax, 2
jae 0x1400b9d88
cmp qword [r13], 0
je 0x1400b6ed0
cmp qword [r13 + 8], 0
je 0x1400b9d88
nop
movups xmm0, xmmword [0x1401cc0b0]
movaps xmmword [rsp + 0x60], xmm0
movdqu xmm0, xmmword [0x1401cc0a0]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x7e0]
mov rdx, rbp
call fcn.140094070
mov rsi, rax
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x1400b6f19
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
test rsi, rsi
je 0x1400b9d88
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
mov rcx, r15
call fcn.140014600
cmp qword [rsp + 0x270], 0
jne 0x1400b9d88
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x280]
mov qword [rsp + 0x270], 0
mov qword [rsp + 0x280], 0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x290], rax
mov rcx, rbp
mov rdx, r15
call fcn.140104db0
mov r15, qword [rsp + 0x50]
movabs rax, 0x8000000000000000
cmp r15, rax
je 0x1400b9d88
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
lea rax, [rsp + 0x68]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x190], xmm1
movaps xmmword [rsp + 0x1a0], xmm2
movaps xmmword [rsp + 0x1b0], xmm3
mov rcx, r12
mov rdx, rbx
mov r8, r14
call fcn.14000a190
mov rcx, rbp
mov rdx, r12
call fcn.14002f530
cmp byte [rsp + 0x50], 3
je 0x1400b9ab5
movups xmm0, xmmword [rsp + 0x50]
movdqu xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x270], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x2c0], rax
movdqu xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x2b0], xmm0
movaps xmmword [rsp + 0x2a0], xmm3
movaps xmmword [rsp + 0x290], xmm2
movdqa xmmword [rsp + 0x280], xmm1
movzx eax, byte [rsp + 0x270]
cmp al, 3
je 0x1400b9ab5
cmp al, 2
jb 0x1400b709c
mov rsi, qword [rsp + 0x278]
lea rcx, [rsi + 0x18]
mov rax, qword [rsi]
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x280]
mov rdx, qword [rsp + 0x288]
mov r8, qword [rsp + 0x290]
lea rcx, [rsp + 0x298]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x2a0]
mov rdx, qword [rsp + 0x2a8]
mov r8, qword [rsp + 0x2b0]
lea rcx, [rsp + 0x2b8]
call qword [rax + 0x10]
movdqa xmm0, xmmword [rsp + 0x180]
movdqa xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movaps xmm3, xmmword [rsp + 0x1b0]
movaps xmmword [rsp + 0x3c0], xmm3
movaps xmmword [rsp + 0x3b0], xmm2
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmmword [rsp + 0x390], xmm0
lea rax, [rsp + 0x450]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0x438], r15
mov qword [rsp + 0x440], rbx
mov qword [rsp + 0x448], r14
mov rax, qword [r13 + 0x110]
cmp byte [rax + 0x1b8], 0
lea r15, [rsp + 0x270]
je 0x1400b7620
mov r8d, dword [rsp + 0x464]
test r8, r8
je 0x1400b72c1
cmp r14, r8
jbe 0x1400b729e
cmp byte [rbx + r8], 0xbf
jg 0x1400b72a4
jmp case.default.0x1400b7295
lea rax, [0x1401cbf20]
mov qword [rsp + 0x500], rax
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0x508], rax
lea rax, [rsp + 0x510]
movups xmmword [rax], xmm7
mov rax, qword [r13 + 0x128]
cmp rax, 1
ja 0x1400b9b38
inc rax
mov qword [r13 + 0x128], rax
mov rdx, qword [r13 + 0x90]
mov r8, qword [r13 + 0x98]
lea rsi, [rsp + 0x390]
mov rcx, rsi
call fcn.14000a190
mov rcx, rbp
mov rdx, rsi
call fcn.14002f530
cmp byte [rsp + 0x50], 3
je case.default.0x1400b7295
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x570], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x560], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x550], xmm3
movaps xmmword [rsp + 0x540], xmm2
movaps xmmword [rsp + 0x530], xmm1
movaps xmmword [rsp + 0x520], xmm0
movaps xmmword [rsp + 0x600], xmm7
movaps xmmword [rsp + 0x610], xmm7
mov rax, qword [rsp + 0x178]
movzx eax, byte [rax]
lea rcx, [0x14019a060]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor ecx, ecx
jmp 0x1400b7b50
jne case.default.0x1400b7295
cmp r8d, 4
jne 0x1400b72c1
mov rcx, rbx
lea rdx, str.httphttpswswssftpfile__file:__
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x1400b8207
mov ebx, dword [r13 + 0xb4]
mov rsi, qword [r13 + 0x90]
mov r14, qword [r13 + 0x98]
test r14, r14
je 0x1400b7323
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x1400b7309
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov qword [0x140206128], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapAlloc
mov rbp, rax
test rax, rax
jne 0x1400b7328
jmp case.default.0x1400b7295
mov ebp, 1
mov rcx, rbp
mov rdx, rsi
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], r14
mov rax, qword [rsp + 0x160]
movups xmm0, xmmword [rax]
lea rcx, [rsp + 0x68]
movups xmmword [rcx + 0x28], xmm0
movzx eax, byte [rax + 0x10]
mov byte [rcx + 0x38], al
mov eax, dword [r13 + 0xb0]
movdqu xmm0, xmmword [r13 + 0xa0]
mov dword [rsp + 0x7c], ebx
mov dword [rsp + 0x78], eax
movdqu xmm1, xmmword [r13 + 0xb8]
movdqu xmmword [rsp + 0x80], xmm1
movdqu xmmword [rsp + 0x68], xmm0
lea rdi, [rsp + 0x50]
mov rcx, rdi
lea rdx, str.corrupt_deflate_stream
call fcn.140106660
mov rcx, rdi
call fcn.1401064c0
cmp dword [rsp + 0x70], 0
mov rax, qword [rsp + 0x60]
je 0x1400b73c2
mov r8d, dword [rsp + 0x74]
cmp rax, r8
jae 0x1400b73c7
mov r8, rax
jmp 0x1400b73e6
test r8, r8
je 0x1400b73e1
cmp rax, r8
jbe 0x1400b73e1
mov rax, qword [rsp + 0x58]
cmp byte [rax + r8], 0xbf
jle case.default.0x1400b7295
mov qword [rsp + 0x60], r8
mov dword [rsp + 0x70], 0
mov eax, dword [rsp + 0x7c]
mov rbx, qword [rsp + 0x58]
mov rcx, r8
inc eax
je 0x1400b7417
mov rcx, r8
sub rcx, rax
jbe 0x1400b7411
cmp byte [rbx + rax], 0xbf
jg 0x1400b7417
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
test rcx, rcx
je 0x1400b742c
cmp byte [rbx + rax], 0x2f
sete al
test al, al
je 0x1400b7436
jmp 0x1400b7510
xor eax, eax
test al, al
jne 0x1400b7510
cmp dword [rsp + 0x68], 0
jne 0x1400b7510
mov rcx, r8
test r8, r8
je 0x1400b74f5
lea rcx, [rbx + r8]
xor eax, eax
nop word cs:[rax + rax]
movzx edx, byte [rcx - 1]
test dl, dl
js 0x1400b7470
dec rcx
jmp 0x1400b74cf
movzx r9d, byte [rcx - 2]
cmp r9b, 0xc0
jge 0x1400b74a0
movzx r10d, byte [rcx - 3]
cmp r10b, 0xc0
jge 0x1400b74aa
movzx r11d, byte [rcx - 4]
add rcx, 0xfffffffffffffffc
and r11d, 7
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
jmp 0x1400b74b2
add rcx, 0xfffffffffffffffe
and r9d, 0x1f
jmp 0x1400b74bd
add rcx, 0xfffffffffffffffd
and r10d, 0xf
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp edx, 0x110000
je 0x1400b74dc
cmp edx, 0x20
jne 0x1400b74dc
inc rax
cmp rbx, rcx
jne 0x1400b7460
mov rcx, r8
sub rcx, rax
jb 0x1400b7510
je 0x1400b74f5
cmp r8, rcx
jbe 0x1400b74f5
cmp byte [rbx + rcx], 0xbf
jle case.default.0x1400b7295
cmp r8, rcx
jb 0x1400b7510
mov qword [rsp + 0x60], rcx
mov r8, rcx
nop word cs:[rax + rax]
xor eax, eax
nop word cs:[rax + rax]
cmp r8, rax
je 0x1400b755a
movzx r9d, byte [rbx + rax]
cmp r9b, 0x20
setae cl
cmp r9b, 0x7f
setne dl
inc rax
cmp r9b, 9
je 0x1400b7520
and cl, dl
jne 0x1400b7520
mov byte [rsp + 0x1a0], 2
mov sil, 2
cmp qword [rsp + 0x50], 0
jne 0x1400b75a9
jmp 0x1400b75ba
mov rcx, r15
mov rdx, rbx
call fcn.14000a190
mov byte [rsp + 0x290], 0
movdqu xmm0, xmmword [rsp + 0x270]
movdqu xmm1, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x190], xmm1
mov rsi, qword [rsp + 0x290]
mov qword [rsp + 0x1a0], rsi
cmp qword [rsp + 0x50], 0
je 0x1400b75ba
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
cmp sil, 2
je 0x1400b7620
movups xmm0, xmmword [0x1401cc0d0]
movaps xmmword [rsp + 0x280], xmm0
movdqu xmm0, xmmword [0x1401cc0c0]
movdqa xmmword [rsp + 0x270], xmm0
mov rcx, rdi
mov rdx, qword [rsp + 0x30]
mov r8, r15
lea r9, [rsp + 0x180]
call fcn.1400b5e40
cmp byte [rsp + 0x70], 2
je 0x1400b7620
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
nop word cs:[rax + rax]
mov rbx, qword [r13 + 0x90]
mov rsi, qword [r13 + 0x98]
test rsi, rsi
je 0x1400b767b
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x1400b7661
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov qword [0x140206128], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x1400b7681
jmp case.default.0x1400b7295
mov r14d, 1
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm12, xmmword [r13 + 0xb4]
mov rcx, qword [rsp + 0x160]
movzx eax, byte [rcx + 0x10]
mov byte [rsp + 0x5c0], al
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x5b0], xmm0
movzx r15d, word [r13 + 0xb0]
movzx r10d, word [r13 + 0xb2]
mov r8d, dword [r13 + 0xc4]
mov r12d, dword [r13 + 0xa0]
mov ebp, dword [r13 + 0xa4]
mov edi, dword [r13 + 0xa8]
mov ebx, dword [r13 + 0xac]
mov rdx, qword [r13 + 0xf0]
cmp rdx, qword [r13 + 0xe0]
jne 0x1400b7723
mov rcx, qword [rsp + 0x580]
mov dword [rsp + 0x40], r8d
mov word [rsp + 0x28], r10w
call fcn.14004b2c0
movzx r10d, word [rsp + 0x28]
mov r8d, dword [rsp + 0x40]
mov rdx, qword [r13 + 0xf0]
mov rax, qword [r13 + 0xe8]
imul rcx, rdx, 0x58
mov qword [rax + rcx], rsi
mov qword [rax + rcx + 8], r14
mov qword [rax + rcx + 0x10], rsi
mov dword [rax + rcx + 0x18], r12d
mov dword [rax + rcx + 0x1c], ebp
mov dword [rax + rcx + 0x20], edi
mov dword [rax + rcx + 0x24], ebx
mov word [rax + rcx + 0x28], r15w
mov word [rax + rcx + 0x2a], r10w
movdqu xmmword [rax + rcx + 0x2c], xmm12
mov dword [rax + rcx + 0x3c], r8d
movdqa xmm0, xmmword [rsp + 0x5b0]
movdqu xmmword [rax + rcx + 0x40], xmm0
movzx edx, byte [rsp + 0x5c0]
mov byte [rax + rcx + 0x50], dl
mov rdx, qword [r13 + 0xe8]
mov rax, qword [r13 + 0xf0]
inc rax
mov qword [r13 + 0xf0], rax
mov rcx, qword [r13 + 0x110]
mov r8, qword [rcx + 0x188]
test r8, r8
je 0x1400b77d0
cmp r8d, 1
lea rdi, [rsp + 0x50]
jne 0x1400b9d67
cmp qword [rcx + 0x190], rax
ja 0x1400b7828
jmp 0x1400ba0c3
movzx r8d, word [rsp + 0x848]
lea r9, [rsp + 0x438]
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rax
mov word [rsp + 0x68], r8w
mov rdx, qword [rcx + 0x190]
mov rax, qword [rcx + 0x198]
lea rcx, [rsp + 0x270]
lea rdi, [rsp + 0x50]
mov r8, rdi
call qword [rax + 0x28]
mov rax, qword [rsp + 0x270]
test rax, rax
jne 0x1400b9d5d
mov esi, dword [rsp + 0x464]
test rsi, rsi
je 0x1400b9a4d
mov r14, qword [rsp + 0x440]
mov rbx, qword [rsp + 0x448]
cmp rbx, rsi
jbe 0x1400b7859
cmp byte [r14 + rsi], 0xbf
jg 0x1400b785f
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
cmp esi, 4
jne 0x1400b787a
mov rcx, r14
lea rdx, str.httphttpswswssftpfile__file:__
mov r8, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x1400b78b4
cmp rbx, rsi
jbe 0x1400b788b
cmp byte [r14 + rsi], 0xbf
jg 0x1400b7891
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
cmp esi, 5
jne 0x1400b9a4d
mov rcx, r14
lea rdx, [0x1401f1ad8]
mov r8, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400b9a4d
mov rax, qword [r13 + 0x110]
cmp byte [rax + 0x1ba], 0
je 0x1400b78fe
cmp rbx, rsi
jbe 0x1400b78d5
cmp byte [r14 + rsi], 0xbf
jg 0x1400b78db
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
cmp esi, 5
jne 0x1400b9ae3
mov rcx, r14
lea rdx, [0x1401f1ad8]
mov r8, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400b9ae3
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x438]
movups xmm1, xmmword [rsp + 0x448]
movups xmm2, xmmword [rsp + 0x458]
movups xmm3, xmmword [rsp + 0x468]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
mov rax, qword [rsp + 0x170]
cmp qword [rax], 0
je 0x1400b7978
mov r8, qword [r13 + 0x90]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x170]
mov qword [rcx + 0x50], rax
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rcx + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov rax, qword [rsp + 0x30]
movups xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x1d0], xmm0
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x1b0], xmm3
movaps xmmword [rsp + 0x1a0], xmm2
movdqa xmmword [rsp + 0x190], xmm1
movaps xmmword [rsp + 0x180], xmm0
mov qword [r13 + 0x28], 0
mov qword [r13 + 0x40], 0
mov qword [r13 + 0x48], 8
mov rax, qword [rsp + 0x588]
movups xmmword [rax], xmm7
mov r14, qword [r13 + 0xe8]
mov rax, qword [r13 + 0xf0]
lea rdx, [rax - 1]
mov qword [r13 + 0x60], 8
mov qword [r13 + 0x68], 0
mov qword [r13 + 0x70], 2
mov qword [r13 + 0x78], 0
mov word [r13 + 0x80], 0
sub rax, 1
jb 0x1400b8def
mov rcx, qword [rsp + 0x160]
cmp byte [rcx], 0
je 0x1400b7ac9
mov r9d, dword [r13 + 0xbc]
mov r8d, dword [r13 + 0xc0]
cmp r9d, r8d
ja case.default.0x1400b7295
mov rcx, qword [r13 + 0x90]
mov r10, qword [r13 + 0x98]
test r9, r9
je 0x1400b8115
cmp r10, r9
jbe 0x1400b810f
cmp byte [rcx + r9], 0xc0
jge 0x1400b8115
jmp case.default.0x1400b7295
xor ecx, ecx
jmp 0x1400b8137
mov cl, 1
jmp 0x1400b7b50
mov cl, 2
jmp 0x1400b7b50
mov cl, 3
jmp 0x1400b7b50
movzx r10d, byte [rsp + 0x394]
mov byte [rsp + 0x54], r10b
mov r10d, dword [rsp + 0x390]
mov dword [rsp + 0x50], r10d
mov qword [rsp + 0x180], 0
mov r10, qword [rsp + 0x5c2]
mov r11, qword [rsp + 0x5c8]
lea rsi, [rsp + 0x18a]
mov qword [rsi + 6], r11
mov qword [rsi], r10
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], 8
movaps xmm0, xmmword [rsp + 0x610]
movups xmmword [rsi + 0x1e], xmm0
mov qword [rsp + 0x1b8], 8
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1c8], 2
mov qword [rsp + 0x1d0], 0
mov word [rsp + 0x1d8], 0
movzx r10d, word [rsp + 0x38e]
mov word [rsi + 0x54], r10w
mov r10d, dword [rsp + 0x38a]
mov dword [rsi + 0x50], r10d
mov byte [rsp + 0x1e0], 0
mov r10, qword [rsp + 0x5d1]
mov r11, qword [rsp + 0x5d8]
mov qword [rsi + 0x5e], r11
mov qword [rsi + 0x57], r10
lea r11, [0x1401b8638]
mov qword [rsp + 0x1f0], r11
lea r10, str.corrupt_deflate_stream
mov qword [rsp + 0x1f8], r10
movaps xmm0, xmmword [rsp + 0x600]
movups xmmword [rsi + 0x76], xmm0
mov qword [rsp + 0x210], r11
lea r10, [0x1401c9ef4]
mov qword [rsp + 0x218], r10
mov qword [rsp + 0x220], 1
mov qword [rsp + 0x228], 0
mov word [rsp + 0x230], 0xffff
movzx r10d, word [rsp + 0x388]
mov word [rsi + 0xac], r10w
mov r10d, dword [rsp + 0x384]
mov dword [rsi + 0xa8], r10d
mov byte [rsp + 0x238], cl
mov byte [rsp + 0x239], r8b
mov byte [rsp + 0x23a], r9b
movzx ecx, byte [rsp + 0x54]
mov byte [rsi + 0xb5], cl
mov ecx, dword [rsp + 0x50]
mov dword [rsi + 0xb1], ecx
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], rdx
mov qword [rsp + 0x250], 0
mov byte [rsp + 0x258], 2
mov eax, dword [rsp + 0x4d9]
mov ecx, dword [rsp + 0x4dc]
mov dword [rsi + 0xd2], ecx
mov dword [rsi + 0xcf], eax
mov rax, qword [rsp + 0x570]
mov qword [rsp + 0xa0], rax
movaps xmm0, xmmword [rsp + 0x560]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0x520]
movaps xmm1, xmmword [rsp + 0x530]
movaps xmm2, xmmword [rsp + 0x540]
movaps xmm3, xmmword [rsp + 0x550]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
mov rcx, r15
lea rdx, [rsp + 0x180]
mov r8, rbp
call fcn.1400b6710
movups xmm0, xmmword [rsp + 0x500]
movups xmm1, xmmword [rsp + 0x510]
movaps xmmword [rsp + 0x4f0], xmm1
movaps xmmword [rsp + 0x4e0], xmm0
cmp dword [rsp + 0x270], 3
je 0x1400ba54c
lea rcx, [rsp + 0x27a]
mov rax, qword [rcx]
mov rcx, qword [rcx + 6]
mov qword [rsp + 0x358], rax
mov qword [rsp + 0x35e], rcx
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x5a0], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x168], rax
mov rbx, qword [rsp + 0x298]
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x40], rax
mov r13, qword [rsp + 0x2b0]
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x590], rax
mov r15, qword [rsp + 0x2c0]
mov r8d, 0x88
mov rcx, rbp
lea rdx, [rsp + 0x2c8]
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x500]
movdqu xmm1, xmmword [rsp + 0x510]
lea rsi, [rsp + 0x68]
movups xmmword [rsi + 0x70], xmm0
movdqu xmmword [rsi + 0x80], xmm1
mov r8d, 0xa8
lea rcx, [rsp + 0x390]
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov r14, qword [rsp + 0x48]
movzx edi, word [r14 + 0x80]
mov rcx, qword [r14 + 0x70]
mov rdx, qword [r14 + 0x78]
call fcn.1400d5ab0
mov rbp, rax
mov r12, rdx
mov rdx, qword [r14 + 0x48]
mov r8, qword [r14 + 0x50]
mov rcx, rsi
call fcn.14006f250
mov rdx, qword [r14 + 0x60]
mov r8, qword [r14 + 0x68]
lea rcx, [rsp + 0x80]
call fcn.14006f4c0
movdqu xmm0, xmmword [r14 + 0x28]
mov word [rsp + 0xa8], di
mov rax, qword [r14 + 0x38]
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r12
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
test r15, r15
je 0x1400b7f0f
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x590]
call sub.kernel32.dll_HeapFree
test rbx, rbx
lea r12, [rsp + 0x438]
lea rbp, [rsp + 0x50]
lea r15, [rsp + 0x270]
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x168]
je 0x1400b7f80
lea rsi, [r14 + 0x30]
jmp 0x1400b7f5b
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x68
dec rbx
je 0x1400b7f80
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1400b7f40
lea rcx, [rsi + 0x28]
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
call qword [rax + 0x10]
jmp 0x1400b7f40
cmp qword [rsp + 0x5a0], 0
je 0x1400b7f9c
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x1400b7fcb
lea rsi, [rdi + 0x38]
nop word cs:[rax + rax]
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x48
dec r13
jne 0x1400b7fb0
cmp qword [rsp + 0x28], 0
je 0x1400b7fe4
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x58]
lea r9, [rsp + 0x68]
mov rdx, qword [r9 - 0xe]
mov r8, qword [r9 - 8]
mov qword [rsp + 0x358], rdx
mov qword [rsp + 0x35e], r8
movdqu xmm0, xmmword [rsp + 0x68]
movdqu xmm1, xmmword [rsp + 0x88]
movups xmm2, xmmword [rsp + 0x98]
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x390], rdx
movups xmm3, xmmword [rsp + 0x78]
mov r13, qword [rsp + 0x48]
mov rsi, qword [r13 + 0x110]
add rsi, 0x10
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], cx
mov rax, qword [rsp + 0x358]
mov rcx, qword [rsp + 0x35e]
mov qword [r9 - 8], rcx
mov qword [r9 - 0xe], rax
movdqu xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm3
movdqu xmmword [rsp + 0x88], xmm1
movups xmmword [rsp + 0x98], xmm2
mov r8d, 0xa8
lea rcx, [rsp + 0xa8]
lea rdx, [rsp + 0x390]
call sub.msvcrt.dll_memcpy
mov rcx, rsi
mov rdx, rbp
call fcn.140080c20
mov rsi, rax
mov rbx, rdx
mov r14, qword [r13 + 0x118]
mov rdi, qword [r13 + 0x120]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b80e7
cmp qword [rdi + 0x10], 0x11
jb 0x1400b80d6
mov r14, qword [r14 - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov qword [r13 + 0x118], rsi
mov qword [r13 + 0x120], rbx
lea rcx, [rsp + 0x5a8]
call fcn.14003d350
mov rdi, qword [rsp + 0x378]
jmp 0x1400b6c4f
jne case.default.0x1400b7295
test r8, r8
je 0x1400b8131
cmp r10, r8
jbe 0x1400b812b
cmp byte [rcx + r8], 0xbf
jg 0x1400b8131
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
add rcx, r9
sub r8, r9
imul r15, rdx, 0x58
add r15, r14
imul r12, rax, 0x58
cmp byte [r14 + r12 + 0x40], 0
je 0x1400b817b
mov r9d, dword [r14 + r12 + 0x34]
mov eax, dword [r14 + r12 + 0x38]
cmp r9d, eax
ja case.default.0x1400b7295
mov rdx, qword [r15 + 8]
mov r10, qword [r15 + 0x10]
test r9, r9
je 0x1400b8193
cmp r10, r9
jbe 0x1400b818d
cmp byte [rdx + r9], 0xc0
jge 0x1400b8193
jmp case.default.0x1400b7295
xor edx, edx
test rcx, rcx
jne 0x1400b81b9
test rdx, rdx
jne 0x1400b8306
jmp 0x1400b81d8
jne case.default.0x1400b7295
test rax, rax
je 0x1400b81ae
cmp r10, rax
jbe 0x1400b81a8
cmp byte [rdx + rax], 0xbf
jg 0x1400b81ae
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
add rdx, r9
sub rax, r9
test rcx, rcx
je 0x1400b8182
test rdx, rdx
je 0x1400b8306
cmp r8, rax
jne 0x1400b8306
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400b8306
cmp word [r13 + 0xb0], 0
je 0x1400b8231
movzx esi, word [r13 + 0xb2]
mov bx, 1
cmp word [r14 + r12 + 0x28], 0
je 0x1400b82bb
movzx edx, word [r14 + r12 + 0x2a]
jmp 0x1400b82ec
mov ebx, dword [r13 + 0xb4]
mov rsi, qword [r13 + 0x90]
mov r14, qword [r13 + 0x98]
test rbx, rbx
je 0x1400b8258
cmp r14, rbx
jbe 0x1400b825f
cmp byte [rsi + rbx], 0xbf
jg 0x1400b8265
jmp case.default.0x1400b7295
mov edx, dword [r13 + 0xb4]
mov rcx, qword [r13 + 0x90]
test rdx, rdx
je 0x1400b8298
cmp qword [r13 + 0x98], rdx
jbe 0x1400b8292
cmp byte [rcx + rdx], 0xbf
jg 0x1400b8298
jmp case.default.0x1400b7295
xor ebx, ebx
jmp 0x1400b72d6
jne case.default.0x1400b7295
cmp ebx, 5
jne 0x1400b72d6
mov rcx, rsi
lea rdx, [0x1401f1ad8]
mov r8, rbx
call sub.msvcrt.dll_memcmp
mov ebx, 5
test eax, eax
jne 0x1400b72d6
jmp 0x1400b7620
jne case.default.0x1400b7295
call fcn.140106ad0
mov ebx, eax
mov esi, edx
cmp word [r14 + r12 + 0x28], 0
je 0x1400b82bb
test bx, bx
je 0x1400b8306
movzx edx, word [r14 + r12 + 0x2a]
mov bx, 1
jmp 0x1400b82ec
mov edx, dword [r14 + r12 + 0x2c]
mov rcx, qword [r15 + 8]
test rdx, rdx
je 0x1400b82e0
cmp qword [r15 + 0x10], rdx
jbe 0x1400b82da
cmp byte [rcx + rdx], 0xbf
jg 0x1400b82e0
jmp case.default.0x1400b7295
jne case.default.0x1400b7295
call fcn.140106ad0
test bx, bx
je 0x1400b82fd
mov ebx, eax
cmp bx, 1
jne 0x1400b8306
cmp si, dx
je 0x1400b8def
jmp 0x1400b8306
test ax, ax
je 0x1400b8def
movups xmm0, xmmword [0x1401cc130]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401cc120]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
lea rsi, [rsp + 0x270]
mov r8, rsi
call fcn.1400941b0
cmp byte [rsp + 0x70], 2
je 0x1400b835d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
movups xmm0, xmmword [0x1401cc220]
movaps xmmword [rsp + 0x280], xmm0
movdqu xmm0, xmmword [0x1401cc210]
movdqa xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
mov r8, rsi
call fcn.1400941b0
cmp byte [rsp + 0x70], 2
je 0x1400b83ae
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
lea rax, [0x1401cbcd8]
mov qword [rsp + 0x20], rax
mov r8d, 7
mov rcx, rdi
lea rdx, str.cookie2
mov r9, rsi
call fcn.14002ff50
movzx ebp, byte [rsp + 0x60]
cmp ebp, 3
jne 0x1400b83e6
lea rdi, [rsp + 0x50]
jmp 0x1400b8d51
mov rdi, qword [rsp + 0x1a8]
test rdi, rdi
je 0x1400b8d3f
mov rdx, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
cmp dword [rsp + 0x180], 2
mov qword [rsp + 0x28], rdx
jne 0x1400b84ba
movdqu xmm0, xmmword [rsp + 0x188]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmm10
movdqa xmmword [rsp + 0x50], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmm11
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x70], xmm0
lea rax, [rsp + 0x80]
movaps xmmword [rax], xmm7
mov qword [rax + 0x10], 0
xor eax, eax
cmp ebp, 2
setne al
mov qword [rsp + 0x520], rax
mov r8d, 8
lea rsi, [rsp + 0x50]
mov rcx, rsi
lea r14, [rsp + 0x520]
mov rdx, r14
call fcn.140092ca0
cmp ebp, 2
lea rbx, [0x1401cbcd8]
mov r15, rdi
jne 0x1400b8519
movzx eax, byte [rsp + 0x28]
mov qword [rsp + 0x520], rax
mov r8d, 8
mov rcx, rsi
mov rdx, r14
call fcn.140092ca0
jmp 0x1400b85d9
xor ecx, ecx
cmp ebp, 2
setne cl
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs rbx, 0x1efac7090aef4a21
imul rcx, rbx
cmp ebp, 2
jne 0x1400b8534
movzx eax, dl
xor ecx, eax
imul ebx, ecx
and ebx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ebx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
jmp 0x1400b8715
test ebp, ebp
mov rdx, qword [rsp + 0x28]
je 0x1400b859a
lea rcx, [rsp + 0x50]
mov r8, r13
call fcn.140092ca0
jmp 0x1400b85d9
lea rax, [rdx + r13]
test ebp, ebp
lea r10, [0x1401cbcd8]
movabs r11, 0x100000001b3
mov qword [rsp + 0x40], r13
je 0x1400b879c
test r13, r13
je 0x1400b87d7
mov r8, r13
and r8, 7
je 0x1400b8b94
mov rdx, qword [rsp + 0x28]
nop word cs:[rax + rax]
movzx ebx, byte [rdx]
inc rdx
xor rbx, rcx
imul rbx, r11
mov rcx, rbx
dec r8
jne 0x1400b8580
jmp 0x1400b8b9c
test r13, r13
lea rdi, [rsp + 0x50]
je 0x1400b85d9
mov r12, rdx
xor esi, esi
nop dword [rax]
movzx eax, byte [r12 + rsi]
movzx eax, byte [rax + rbx]
mov byte [rsp + 0x520], al
mov r8d, 1
mov rcx, rdi
mov rdx, r14
call fcn.140092ca0
inc rsi
cmp r13, rsi
jne 0x1400b85b0
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x60]
mov r9, qword [rsp + 0x80]
shl r9, 0x38
or r9, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add r8, rax
rol rax, 0xd
xor rcx, r9
xor rax, r8
rol r8, 0x20
mov rdx, qword [rsp + 0x58]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, r8
xor rax, rdx
rol rdx, 0x20
xor r8, r9
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
add rdx, rcx
shl rcx, 0x10
xor rcx, rdx
shr rcx, 0x2b
add rdx, rax
shr rax, 0x2f
xor rax, rcx
mov rbx, rdx
shr rbx, 0x20
xor rbx, rdx
xor rbx, rax
mov rdi, r15
and ebx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ebx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
test ebp, ebp
je 0x1400b8c3a
cmp ebp, 2
mov rdx, qword [rsp + 0x28]
jne 0x1400b8808
xor ecx, ecx
jmp 0x1400b8730
inc rcx
inc rbp
mov rax, rbp
nop word cs:[rax + rax]
mov rbp, rax
mov eax, 0
cmp rbp, r12
jae 0x1400b8730
movzx r15d, word [r13 + rbp*4]
cmp r15, 0xffff
je 0x1400b8d3f
movzx eax, word [r13 + rbp*4 + 2]
mov r9d, esi
and r9d, eax
mov r8d, ebp
sub r8d, r9d
mov r9d, esi
and r9d, r8d
cmp rcx, r9
ja 0x1400b8d3f
cmp ax, bx
jne 0x1400b8719
cmp rdi, r15
jbe case.default.0x1400b7295
imul rax, r15, 0x68
cmp qword [r10 + rax + 0x40], 0
jne 0x1400b8719
add rax, r10
add rax, 0x40
cmp byte [rax + 8], dl
jne 0x1400b8719
jmp 0x1400b88b3
test r13, r13
je 0x1400b8c0e
mov r8, r13
and r8, 3
je 0x1400b9859
mov rdx, qword [rsp + 0x28]
movzx r9d, byte [rdx]
movzx ebx, byte [r9 + r10]
xor rbx, rcx
imul rbx, r11
inc rdx
mov rcx, rbx
dec r8
jne 0x1400b87b7
jmp 0x1400b9861
and ecx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ecx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
mov ebx, ecx
mov rdx, qword [rsp + 0x28]
xor r14d, r14d
mov qword [rsp + 0x168], rdi
jmp 0x1400b8820
inc r14
inc rbp
mov rax, rbp
nop
mov rbp, rax
mov eax, 0
cmp rbp, r12
jae 0x1400b8820
movzx r15d, word [r13 + rbp*4]
cmp r15, 0xffff
je 0x1400b8d3f
movzx eax, word [r13 + rbp*4 + 2]
mov ecx, esi
and ecx, eax
mov r8d, ebp
sub r8d, ecx
mov ecx, esi
and ecx, r8d
cmp r14, rcx
ja 0x1400b8d3f
cmp ax, bx
jne 0x1400b8815
cmp rdi, r15
jbe case.default.0x1400b7295
imul rax, r15, 0x68
cmp qword [r10 + rax + 0x40], 0
je 0x1400b8815
add rax, r10
add rax, 0x40
mov rcx, qword [rsp + 0x40]
cmp qword [rax + 0x10], rcx
jne 0x1400b8815
mov rcx, qword [rax + 8]
mov r8, qword [rsp + 0x40]
mov rdi, r10
call sub.msvcrt.dll_memcmp
mov r10, rdi
mov rdi, qword [rsp + 0x168]
mov rdx, qword [rsp + 0x28]
test eax, eax
jne 0x1400b8815
cmp r15, rdi
mov r13, qword [rsp + 0x48]
jae case.default.0x1400b7295
imul rsi, r15, 0x68
cmp qword [r10 + rsi], 0
je 0x1400b88e8
add r10, rsi
mov rdx, qword [r10 + 8]
lea rcx, [rsp + 0x180]
call fcn.140093d10
mov r12, qword [rsp + 0x1d0]
cmp r12, rbp
jbe case.default.0x1400b7295
mov rax, qword [rsp + 0x1c8]
mov dword [rax + rbp*4], 0xffff
mov rcx, qword [rsp + 0x1a8]
cmp rcx, r15
jbe case.default.0x1400b7295
mov r8, qword [rsp + 0x1a0]
lea rdx, [r8 + rsi]
movups xmm0, xmmword [r8 + rsi]
movups xmm1, xmmword [r8 + rsi + 0x10]
movups xmm2, xmmword [r8 + rsi + 0x20]
movups xmm3, xmmword [r8 + rsi + 0x30]
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x80], xmm3
movups xmm0, xmmword [r8 + rsi + 0x40]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [r8 + rsi + 0x50]
movaps xmmword [rsp + 0xa0], xmm0
mov r9, qword [r8 + rsi + 0x60]
mov qword [rsp + 0xb0], r9
dec rcx
imul r9, rcx, 0x68
mov r10, qword [r8 + r9 + 0x60]
movdqu xmm0, xmmword [r8 + r9 + 0x50]
movdqu xmm1, xmmword [r8 + r9 + 0x40]
movups xmm2, xmmword [r8 + r9]
movups xmm3, xmmword [r8 + r9 + 0x10]
movups xmm4, xmmword [r8 + r9 + 0x20]
movups xmm5, xmmword [r8 + r9 + 0x30]
movups xmmword [r8 + rsi], xmm2
movups xmmword [r8 + rsi + 0x10], xmm3
movups xmmword [r8 + rsi + 0x20], xmm4
movups xmmword [r8 + rsi + 0x30], xmm5
movdqu xmmword [r8 + rsi + 0x40], xmm1
movdqu xmmword [r8 + rsi + 0x50], xmm0
mov qword [r8 + rsi + 0x60], r10
mov qword [rsp + 0x1a8], rcx
cmp rcx, r15
mov r9d, 0
cmovbe rdx, r9
jbe 0x1400b8a93
movzx r8d, word [r8 + rsi + 0x60]
movzx r9d, word [rsp + 0x1d8]
and r9w, r8w
movzx r11d, r9w
jmp 0x1400b8a10
inc r10
mov r11, r10
nop dword [rax]
mov r10, r11
mov r11d, 0
cmp r10, r12
jae 0x1400b8a10
movzx r11d, word [rax + r10*4]
cmp r11, 0xffff
cmovne r9, r11
je 0x1400b8a03
cmp r9, rcx
jb 0x1400b8a03
mov word [rax + r10*4], r15w
mov word [rax + r10*4 + 2], r8w
cmp qword [rdx], 0
je 0x1400b8a93
mov r10, qword [rdx + 8]
mov r8, qword [rsp + 0x1c0]
cmp r10, r8
jae case.default.0x1400b7295
mov r9, qword [rdx + 0x10]
mov rdx, qword [rsp + 0x1b8]
lea r10, [r10 + r10*8]
mov qword [rdx + r10*8], 0
mov qword [rdx + r10*8 + 8], r15
cmp r9, r8
jae case.default.0x1400b7295
lea r8, [r9 + r9*8]
mov qword [rdx + r8*8 + 0x10], 0
mov qword [rdx + r8*8 + 0x18], r15
test rcx, rcx
lea rsi, [rsp + 0x270]
je 0x1400b8b05
lea r8, [rbp + 1]
movzx ecx, word [rsp + 0x1d8]
nop dword [rax]
mov rdx, r8
mov r8d, 0
cmp rdx, r12
jae 0x1400b8ab0
movzx r8d, word [rax + rdx*4]
cmp r8w, 0xffff
je 0x1400b8b05
movzx r9d, word [rax + rdx*4 + 2]
mov r10d, ecx
and r10d, r9d
mov r11d, edx
sub r11d, r10d
test r11d, ecx
je 0x1400b8b05
cmp rbp, r12
jae case.default.0x1400b7295
mov word [rax + rbp*4], r8w
mov word [rax + rbp*4 + 2], r9w
mov dword [rax + rdx*4], 0xffff
lea r8, [rdx + 1]
mov rbp, rdx
jmp 0x1400b8ab0
lea rcx, [rsp + 0x68]
mov rax, qword [rcx + 0x20]
mov qword [rsp + 0x3b0], rax
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmmword [rsp + 0x390], xmm0
mov rax, qword [rsp + 0x90]
test rax, rax
je 0x1400b8b59
mov rdx, qword [rsp + 0x98]
mov r8, qword [rsp + 0xa0]
lea rcx, [rsp + 0xa8]
call qword [rax + 0x10]
cmp byte [rsp + 0x3b0], 2
lea rdi, [rsp + 0x50]
je 0x1400b8d51
mov rax, qword [rsp + 0x390]
mov rdx, qword [rsp + 0x398]
mov r8, qword [rsp + 0x3a0]
lea rcx, [rsp + 0x3a8]
call qword [rax + 0x10]
jmp 0x1400b8d51
mov rbx, rcx
mov rdx, qword [rsp + 0x28]
cmp r13, 8
jb 0x1400b86d5
movzx ecx, byte [rdx]
xor rcx, rbx
imul rcx, r11
movzx r8d, byte [rdx + 1]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 2]
xor rcx, r8
imul rcx, r11
movzx r8d, byte [rdx + 3]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 4]
xor rcx, r8
imul rcx, r11
movzx r8d, byte [rdx + 5]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 6]
xor rcx, r8
imul rcx, r11
movzx ebx, byte [rdx + 7]
add rdx, 8
xor rbx, rcx
imul rbx, r11
cmp rdx, rax
jne 0x1400b8ba6
jmp 0x1400b86d5
and ecx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ecx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
mov ebx, ecx
mov r11, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x40]
dec rcx
xor edx, edx
mov rbp, rax
jmp 0x1400b8c56
inc rdx
inc rbp
mov rax, rbp
nop dword [rax]
mov rbp, rax
mov eax, 0
cmp rbp, r12
jae 0x1400b8c60
movzx r15d, word [r13 + rbp*4]
cmp r15, 0xffff
je 0x1400b8d3f
movzx eax, word [r13 + rbp*4 + 2]
mov r8d, esi
and r8d, eax
mov r9d, ebp
sub r9d, r8d
mov r8d, esi
and r8d, r9d
cmp rdx, r8
ja 0x1400b8d3f
cmp ax, bx
jne 0x1400b8c50
cmp rdi, r15
jbe case.default.0x1400b7295
imul rax, r15, 0x68
cmp qword [r10 + rax + 0x40], 0
je 0x1400b8c50
add rax, r10
add rax, 0x40
mov r8, qword [rsp + 0x40]
cmp qword [rax + 0x10], r8
jne 0x1400b8c50
cmp qword [rsp + 0x40], 0
je 0x1400b88b3
mov rax, qword [rax + 8]
movzx r8d, byte [r11]
lea r9, [0x1401cbcd8]
movzx r8d, byte [r8 + r9]
cmp r8b, byte [rax]
jne 0x1400b8c50
xor r8d, r8d
nop dword [rax]
cmp rcx, r8
je 0x1400b88b3
movzx r9d, byte [r11 + r8 + 1]
mov r14, r10
lea r10, [0x1401cbcd8]
movzx r10d, byte [r9 + r10]
lea r9, [r8 + 1]
cmp r10b, byte [rax + r8 + 1]
mov r10, r14
mov r8, r9
je 0x1400b8d00
cmp r9, qword [rsp + 0x40]
jb 0x1400b8c50
jmp 0x1400b88b3
mov r13, qword [rsp + 0x48]
lea rdi, [rsp + 0x50]
lea rsi, [rsp + 0x270]
movups xmm0, xmmword [0x1401cc010]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401cc000]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
mov r8, rsi
call fcn.1400941b0
cmp byte [rsp + 0x70], 2
je 0x1400b8da0
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
movups xmm0, xmmword [0x1401cc248]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401cc238]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
mov r8, rsi
call fcn.1400941b0
cmp byte [rsp + 0x70], 2
je 0x1400b8def
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rdx, qword [r13 + 0x90]
mov r8, qword [r13 + 0x98]
lea rsi, [rsp + 0x270]
mov rcx, rsi
call fcn.14000a190
mov rcx, rdi
mov rdx, rsi
call fcn.14002f530
cmp byte [rsp + 0x50], 3
je case.default.0x1400b7295
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x3e0], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x3d0], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x3c0], xmm3
movaps xmmword [rsp + 0x3b0], xmm2
movaps xmmword [rsp + 0x3a0], xmm1
movaps xmmword [rsp + 0x390], xmm0
cmp qword [r13], 0
mov rsi, qword [rsp + 0x598]
je 0x1400b8ec0
mov rax, qword [r13 + 8]
test rax, rax
je 0x1400b8ec0
mov r8, qword [r13 + 0x10]
mov r9, qword [r13 + 0x18]
mov rcx, rdi
mov rdx, qword [rsp + 0x268]
call qword [rax]
movdqa xmm12, xmmword [rsp + 0x50]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
jmp 0x1400b8eca
xor ebx, ebx
xor r14d, r14d
movdqa xmm12, xmm9
movaps xmmword [rsp + 0x5e0], xmm7
movaps xmmword [rsp + 0x5f0], xmm7
mov rax, qword [rsp + 0x178]
movzx eax, byte [rax]
lea rcx, [0x14019a08c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor eax, eax
jmp 0x1400b8fb0
movzx ecx, byte [rsp + 0x274]
mov byte [rsp + 0x54], cl
mov ecx, dword [rsp + 0x270]
mov dword [rsp + 0x50], ecx
mov qword [rsp + 0x620], 0
mov qword [rsp + 0x638], 0
mov qword [rsp + 0x640], 8
movaps xmm0, xmmword [rsp + 0x5f0]
lea rdx, [rsp + 0x6db]
movups xmmword [rdx - 0x93], xmm0
mov qword [rsp + 0x658], 8
mov qword [rsp + 0x660], 0
mov qword [rsp + 0x668], 2
mov qword [rsp + 0x670], 0
mov word [rsp + 0x678], 0
mov byte [rsp + 0x680], 0
lea r8, [0x1401b8638]
mov qword [rsp + 0x690], r8
lea rcx, str.corrupt_deflate_stream
mov qword [rsp + 0x698], rcx
movaps xmm0, xmmword [rsp + 0x5e0]
movups xmmword [rdx - 0x3b], xmm0
mov qword [rsp + 0x6b0], r8
lea rcx, [0x1401c9ef4]
mov qword [rsp + 0x6b8], rcx
mov qword [rsp + 0x6c0], 1
mov qword [rsp + 0x6c8], 0
mov word [rsp + 0x6d0], 0xffff
mov byte [rsp + 0x6d8], al
movzx eax, byte [rsp + 0x3f]
mov byte [rsp + 0x6d9], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x6da], al
movzx eax, byte [rsp + 0x54]
mov byte [rdx + 4], al
mov eax, dword [rsp + 0x50]
mov dword [rdx], eax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x6e0], rax
mov qword [rsp + 0x6e8], rsi
mov qword [rsp + 0x6f0], 0
mov byte [rsp + 0x6f8], 2
movzx eax, byte [rsp + 0x390]
test rax, rax
mov qword [rsp + 0x598], rsi
je 0x1400b9128
cmp eax, 1
jne 0x1400b912c
mov bpl, 1
movzx r15d, byte [rsp + 0x391]
jmp 0x1400b91a0
xor ebp, ebp
jmp 0x1400b91a0
mov r15, qword [rsp + 0x398]
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x1400b915c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov qword [0x140206128], rax
mov r8d, 0x20
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rsi, rax
lea rdx, [r15 + 0x18]
mov rax, qword [r15]
mov r8, qword [r15 + 8]
mov r9, qword [r15 + 0x10]
mov rcx, rdi
call qword [rax]
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov bpl, 2
mov rax, qword [rsp + 0x3a0]
mov r8, qword [rsp + 0x3a8]
mov r9, qword [rsp + 0x3b0]
lea rcx, [rsp + 0x280]
lea rdx, [rsp + 0x3b8]
call qword [rax]
mov rax, qword [rsp + 0x3c0]
mov r8, qword [rsp + 0x3c8]
mov r9, qword [rsp + 0x3d0]
lea rcx, [rsp + 0x2a0]
lea rdx, [rsp + 0x3d8]
call qword [rax]
movzx eax, word [rsp + 0x3e0]
mov byte [rsp + 0x270], bpl
mov byte [rsp + 0x271], r15b
mov qword [rsp + 0x278], rsi
mov word [rsp + 0x2c0], ax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x280]
movups xmm1, xmmword [rsp + 0x290]
movups xmm2, xmmword [rsp + 0x2a0]
movups xmm3, xmmword [rsp + 0x2b0]
movaps xmmword [rsp + 0x90], xmm3
movaps xmmword [rsp + 0x80], xmm2
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
movzx eax, byte [rsp + 0x270]
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x271]
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x272]
mov dword [rsp + 0x52], eax
movzx eax, word [rsp + 0x276]
mov word [rsp + 0x56], ax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x700]
lea rdx, [rsp + 0x620]
lea rdi, [rsp + 0x50]
mov r8, rdi
call fcn.1400b6710
movdqa xmmword [rsp + 0x520], xmm12
mov qword [rsp + 0x530], rbx
mov qword [rsp + 0x538], r14
cmp dword [rsp + 0x700], 3
je 0x1400ba55b
lea rcx, [rsp + 0x70a]
mov rax, qword [rcx]
mov rcx, qword [rcx + 6]
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e6], rcx
mov rax, qword [rsp + 0x718]
mov qword [rsp + 0x28], rax
mov rsi, qword [rsp + 0x720]
mov rbx, qword [rsp + 0x728]
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x738]
mov r13, qword [rsp + 0x740]
mov rax, qword [rsp + 0x748]
mov qword [rsp + 0x168], rax
mov r15, qword [rsp + 0x750]
mov r8d, 0x88
mov rcx, rdi
lea rdx, [rsp + 0x758]
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x520]
movdqa xmm1, xmmword [rsp + 0x530]
lea rax, [rsp + 0x68]
movups xmmword [rax + 0x70], xmm0
movdqu xmmword [rax + 0x80], xmm1
mov r8d, 0xa8
lea rcx, [rsp + 0x270]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
movzx edi, word [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1c8]
mov rdx, qword [rsp + 0x1d0]
call fcn.1400d5ab0
mov r12, rax
mov rbp, rdx
mov rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a8]
lea rcx, [rsp + 0x68]
call fcn.14006f250
mov rdx, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x80]
call fcn.14006f4c0
movdqa xmm0, xmmword [rsp + 0x180]
mov word [rsp + 0xa8], di
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], rbp
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
test r15, r15
je 0x1400b9450
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x168]
call sub.kernel32.dll_HeapFree
test rbx, rbx
lea r12, [rsp + 0x438]
lea rbp, [rsp + 0x50]
lea r15, [rsp + 0x270]
mov rdi, r14
mov r14, rsi
je 0x1400b94c0
lea rsi, [r14 + 0x30]
jmp 0x1400b949b
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x68
dec rbx
je 0x1400b94c0
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1400b9480
lea rcx, [rsi + 0x28]
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
call qword [rax + 0x10]
jmp 0x1400b9480
cmp qword [rsp + 0x28], 0
je 0x1400b94d9
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x1400b950b
lea rsi, [rdi + 0x38]
nop word cs:[rax + rax]
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x48
dec r13
jne 0x1400b94f0
cmp qword [rsp + 0x40], 0
je 0x1400b9524
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x58]
lea r9, [rsp + 0x68]
mov rdx, qword [r9 - 0xe]
mov r8, qword [r9 - 8]
mov qword [rsp + 0x4e0], rdx
mov qword [rsp + 0x4e6], r8
movups xmm2, xmmword [rsp + 0x68]
movdqu xmm0, xmmword [rsp + 0x88]
movdqu xmm1, xmmword [rsp + 0x98]
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x270], rdx
movups xmm3, xmmword [rsp + 0x78]
movaps xmm4, xmmword [rsp + 0x180]
mov r13, qword [rsp + 0x48]
movups xmm5, xmmword [r13 + 0x28]
movups xmmword [r13 + 0x28], xmm4
movaps xmmword [rsp + 0x180], xmm5
movaps xmm4, xmmword [rsp + 0x190]
movups xmm5, xmmword [r13 + 0x38]
movups xmmword [r13 + 0x38], xmm4
movaps xmmword [rsp + 0x190], xmm5
movaps xmm4, xmmword [rsp + 0x1a0]
movups xmm5, xmmword [r13 + 0x48]
movups xmmword [r13 + 0x48], xmm4
movaps xmmword [rsp + 0x1a0], xmm5
movaps xmm4, xmmword [rsp + 0x1b0]
movups xmm5, xmmword [r13 + 0x58]
movups xmmword [r13 + 0x58], xmm4
movaps xmmword [rsp + 0x1b0], xmm5
movaps xmm4, xmmword [rsp + 0x1c0]
movups xmm5, xmmword [r13 + 0x68]
movups xmmword [r13 + 0x68], xmm4
movaps xmmword [rsp + 0x1c0], xmm5
movaps xmm4, xmmword [rsp + 0x1d0]
movups xmm5, xmmword [r13 + 0x78]
movups xmmword [r13 + 0x78], xmm4
movaps xmmword [rsp + 0x1d0], xmm5
mov rsi, qword [r13 + 0x110]
add rsi, 0x10
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], cx
mov rax, qword [rsp + 0x4e0]
mov rcx, qword [rsp + 0x4e6]
mov qword [r9 - 8], rcx
mov qword [r9 - 0xe], rax
movups xmmword [rsp + 0x68], xmm2
movups xmmword [rsp + 0x78], xmm3
movdqu xmmword [rsp + 0x88], xmm0
movdqu xmmword [rsp + 0x98], xmm1
mov r8d, 0xa8
lea rcx, [rsp + 0xa8]
mov rdx, r15
call sub.msvcrt.dll_memcpy
mov rcx, rsi
mov rdx, rbp
call fcn.140080c20
mov rsi, rax
mov rbx, rdx
mov r14, qword [r13 + 0x118]
mov rdi, qword [r13 + 0x120]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b96be
cmp qword [rdi + 0x10], 0x11
jb 0x1400b96ad
mov r14, qword [r14 - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov qword [r13 + 0x118], rsi
mov qword [r13 + 0x120], rbx
cmp byte [rsp + 0x390], 2
jb 0x1400b9701
mov rsi, qword [rsp + 0x398]
lea rcx, [rsi + 0x18]
mov rax, qword [rsi]
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x3a8]
mov r8, qword [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x3c0]
mov rdx, qword [rsp + 0x3c8]
mov r8, qword [rsp + 0x3d0]
lea rcx, [rsp + 0x3d8]
call qword [rax + 0x10]
cmp qword [rsp + 0x1d0], 0
mov rdi, qword [rsp + 0x378]
je 0x1400b9770
mov r8, qword [rsp + 0x1c8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x1a8]
test r14, r14
je 0x1400b97d0
lea rbx, [rsi + 0x30]
jmp 0x1400b97ab
mov rax, qword [rbx - 0x18]
mov rdx, qword [rbx - 0x10]
mov r8, qword [rbx - 8]
mov rcx, rbx
call qword [rax + 0x10]
add rbx, 0x68
dec r14
je 0x1400b97d0
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x1400b9790
lea rcx, [rbx + 0x28]
mov rdx, qword [rbx + 0x18]
mov r8, qword [rbx + 0x20]
call qword [rax + 0x10]
jmp 0x1400b9790
cmp qword [rsp + 0x198], 0
je 0x1400b97ec
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x1b8]
mov r14, qword [rsp + 0x1c0]
test r14, r14
je 0x1400b982b
lea rbx, [rsi + 0x38]
nop word cs:[rax + rax]
mov rax, qword [rbx - 0x18]
mov rdx, qword [rbx - 0x10]
mov r8, qword [rbx - 8]
mov rcx, rbx
call qword [rax + 0x10]
add rbx, 0x48
dec r14
jne 0x1400b9810
cmp qword [rsp + 0x1b0], 0
je 0x1400b9847
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0x7e0]
call fcn.1400ba570
jmp 0x1400b6c4f
mov rdx, qword [rsp + 0x28]
mov rbx, rcx
cmp r13, 4
jb 0x1400b86d5
movzx ecx, byte [rdx]
movzx ecx, byte [rcx + r10]
xor rcx, rbx
imul rcx, r11
movzx r8d, byte [rdx + 1]
movzx r8d, byte [r8 + r10]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 2]
movzx ecx, byte [rcx + r10]
xor rcx, r8
imul rcx, r11
movzx r8d, byte [rdx + 3]
movzx ebx, byte [r8 + r10]
xor rbx, rcx
imul rbx, r11
add rdx, 4
cmp rdx, rax
jne 0x1400b986b
jmp 0x1400b86d5
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b98e5
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rbx, rax
movabs rax, 0x8000000000000000
mov qword [rbx], rax
mov qword [rbx + 0x58], 1
lea rax, [0x1401cc6a0]
mov qword [rbx + 0x60], rax
mov word [rbx + 0x68], 1
mov r15, qword [r13 + 0x90]
mov rsi, qword [r13 + 0x98]
test rsi, rsi
je 0x1400b997f
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9968
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x1400b9985
jmp case.default.0x1400b7295
mov r14d, 1
mov rcx, r14
mov rdx, r15
mov r8, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm6, xmmword [r13 + 0xb4]
movups xmm0, xmmword [r13 + 0xc8]
movzx eax, byte [r13 + 0xd8]
mov byte [rsp + 0x60], al
movaps xmmword [rsp + 0x50], xmm0
movzx r8d, word [r13 + 0xb0]
mov rax, r13
movzx r13d, word [r13 + 0xb2]
mov edx, dword [rax + 0xc4]
mov r12d, dword [rax + 0xa0]
mov ebp, dword [rax + 0xa4]
mov r15d, dword [rax + 0xa8]
mov edi, dword [rax + 0xac]
mov rax, qword [rbx]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1400b9a25
test rax, rax
je 0x1400b9a25
mov word [rsp + 0x48], r8w
mov r8, qword [rbx + 8]
mov rcx, qword [0x140206128]
mov dword [rsp + 0x30], edx
xor edx, edx
call sub.kernel32.dll_HeapFree
movzx r8d, word [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], rsi
mov dword [rbx + 0x18], r12d
mov dword [rbx + 0x1c], ebp
mov dword [rbx + 0x20], r15d
mov dword [rbx + 0x24], edi
mov word [rbx + 0x28], r8w
mov word [rbx + 0x2a], r13w
jmp 0x1400b9d16
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x438]
movdqu xmm1, xmmword [rsp + 0x448]
movups xmm2, xmmword [rsp + 0x458]
movups xmm3, xmmword [rsp + 0x468]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movdqa xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.1400b0570
jmp 0x1400ba392
test r15, r15
je 0x1400b9d88
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rbx
jmp 0x1400b9d83
mov rax, qword [rsp + 0x158]
mov qword [rax], 4
jmp 0x1400ba3b2
test rbx, rbx
je 0x1400ba126
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9b1d
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov rdi, rax
test rax, rax
jne 0x1400ba12b
jmp case.default.0x1400b7295
lea rcx, [rsp + 0x500]
call fcn.140072240
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9b70
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rsi, rax
mov qword [rax], rbx
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9bb7
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rbx, rax
movabs rax, 0x8000000000000000
mov qword [rbx], rax
mov qword [rbx + 0x58], rsi
lea rax, str._N_f_
mov qword [rbx + 0x60], rax
mov word [rbx + 0x68], 1
mov r14, qword [r13 + 0x90]
mov rsi, qword [r13 + 0x98]
test rsi, rsi
je 0x1400b9c4d
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9c36
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x1400b9c53
jmp case.default.0x1400b7295
mov r15d, 1
mov rcx, r15
mov rdx, r14
mov r8, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm6, xmmword [r13 + 0xb4]
mov rcx, qword [rsp + 0x160]
movzx eax, byte [rcx + 0x10]
mov byte [rsp + 0x60], al
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x50], xmm0
movzx r8d, word [r13 + 0xb0]
movzx r12d, word [r13 + 0xb2]
mov edx, dword [r13 + 0xc4]
mov rax, r13
mov r13d, dword [r13 + 0xa0]
mov ebp, dword [rax + 0xa4]
mov r14d, dword [rax + 0xa8]
mov edi, dword [rax + 0xac]
mov rax, qword [rbx]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1400b9cf3
test rax, rax
je 0x1400b9cf3
mov word [rsp + 0x48], r8w
mov r8, qword [rbx + 8]
mov rcx, qword [0x140206128]
mov dword [rsp + 0x30], edx
xor edx, edx
call sub.kernel32.dll_HeapFree
movzx r8d, word [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov qword [rbx], rsi
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], rsi
mov dword [rbx + 0x18], r13d
mov dword [rbx + 0x1c], ebp
mov dword [rbx + 0x20], r14d
mov dword [rbx + 0x24], edi
mov word [rbx + 0x28], r8w
mov word [rbx + 0x2a], r12w
movdqu xmmword [rbx + 0x2c], xmm6
mov dword [rbx + 0x3c], edx
movdqa xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rbx + 0x40], xmm0
movzx eax, byte [rsp + 0x60]
mov byte [rbx + 0x50], al
mov eax, dword [rsp + 0x270]
mov ecx, dword [rsp + 0x273]
mov dword [rbx + 0x51], eax
mov dword [rbx + 0x54], ecx
mov rax, qword [rsp + 0x158]
mov qword [rax], 3
mov qword [rax + 8], rbx
jmp 0x1400ba3b2
cmp rax, 1
jne 0x1400ba0ba
cmp qword [rsp + 0x438], 0
je 0x1400b9d88
mov r8, qword [rsp + 0x440]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x7e0]
mov r8d, 0xa0
call sub.msvcrt.dll_memcpy
mov rsi, qword [r13 + 0x90]
mov rbx, qword [r13 + 0x98]
test rbx, rbx
je 0x1400b9dfb
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9de4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x1400b9e01
jmp case.default.0x1400b7295
mov r14d, 1
mov rcx, r14
mov rdx, rsi
mov r8, rbx
call sub.msvcrt.dll_memcpy
movups xmm6, xmmword [r13 + 0xb4]
mov rax, qword [rsp + 0x160]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x390], xmm0
movzx eax, byte [rax + 0x10]
mov byte [rsp + 0x3a0], al
movzx eax, word [r13 + 0xb0]
mov word [rsp + 0x48], ax
movzx eax, word [r13 + 0xb2]
mov word [rsp + 0x170], ax
mov eax, dword [r13 + 0xc4]
mov dword [rsp + 0x30], eax
mov r15d, dword [r13 + 0xa0]
mov ebp, dword [r13 + 0xa4]
mov r12d, dword [r13 + 0xa8]
mov rax, r13
mov r13d, dword [r13 + 0xac]
mov rdi, qword [rax + 0x130]
mov qword [rax + 0x130], 0
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x2d0], xmm0
movups xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x2c0], xmm0
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x2b0], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x2a0], xmm3
movaps xmmword [rsp + 0x290], xmm2
movaps xmmword [rsp + 0x280], xmm1
movaps xmmword [rsp + 0x270], xmm0
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x180], xmm0
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x190], xmm0
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1a0], xmm0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9f50
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x30
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rsi, rax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400b9fb7
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x58
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov qword [rax], rbx
mov qword [rax + 8], r14
mov qword [rax + 0x10], rbx
mov dword [rax + 0x18], r15d
mov dword [rax + 0x1c], ebp
mov dword [rax + 0x20], r12d
mov dword [rax + 0x24], r13d
movzx ecx, word [rsp + 0x48]
mov word [rax + 0x28], cx
movzx ecx, word [rsp + 0x170]
mov word [rax + 0x2a], cx
movups xmmword [rax + 0x2c], xmm6
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x3c], ecx
movzx ecx, byte [rsp + 0x3a0]
mov byte [rax + 0x50], cl
movaps xmm0, xmmword [rsp + 0x390]
movups xmmword [rax + 0x40], xmm0
mov ecx, dword [rsp + 0x438]
mov edx, dword [rsp + 0x43b]
mov dword [rax + 0x54], edx
mov dword [rax + 0x51], ecx
movaps xmm0, xmmword [rsp + 0x270]
movaps xmm1, xmmword [rsp + 0x280]
movaps xmm2, xmmword [rsp + 0x290]
movaps xmm3, xmmword [rsp + 0x2a0]
mov rdx, qword [rsp + 0x158]
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm2
movups xmmword [rdx + 0x30], xmm3
movaps xmm0, xmmword [rsp + 0x2b0]
movups xmmword [rdx + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x2c0]
movups xmmword [rdx + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x2d0]
movups xmmword [rdx + 0x60], xmm0
mov qword [rdx + 0x70], 0
mov qword [rdx + 0x78], rsi
lea rcx, [0x1401caa98]
mov qword [rdx + 0x80], rcx
mov qword [rdx + 0x88], rdi
mov qword [rdx + 0x90], rax
jmp 0x1400ba3b2
movdqu xmm6, xmmword [rsp + 0x278]
mov r14, qword [r13 + 0x90]
mov rbx, qword [r13 + 0x98]
test rbx, rbx
je 0x1400ba403
js case.default.0x1400b7295
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400ba10b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x1400ba408
jmp case.default.0x1400b7295
mov edi, 1
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
movdqu xmm6, xmmword [rsp + 0x464]
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [rsp + 0x488]
mov byte [rsp + 0x60], al
movzx eax, word [rsp + 0x460]
mov word [rsp + 0x48], ax
movzx r15d, word [rsp + 0x462]
mov eax, dword [rsp + 0x474]
mov dword [rsp + 0x30], eax
mov r12d, dword [rsp + 0x450]
mov r13d, dword [rsp + 0x454]
mov ebp, dword [rsp + 0x458]
mov r14d, dword [rsp + 0x45c]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400ba1c6
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rsi, rax
mov qword [rax + 0x58], 1
lea rax, [0x1401cc538]
mov qword [rsi + 0x60], rax
mov word [rsi + 0x68], 0
mov qword [rsi], rbx
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], r12d
mov dword [rsi + 0x1c], r13d
mov dword [rsi + 0x20], ebp
mov dword [rsi + 0x24], r14d
movzx eax, word [rsp + 0x48]
mov word [rsi + 0x28], ax
mov word [rsi + 0x2a], r15w
movdqu xmmword [rsi + 0x2c], xmm6
mov eax, dword [rsp + 0x30]
mov dword [rsi + 0x3c], eax
movzx eax, byte [rsp + 0x60]
mov byte [rsi + 0x50], al
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi + 0x40], xmm0
mov eax, dword [rsp + 0x270]
mov ecx, dword [rsp + 0x273]
mov dword [rsi + 0x54], ecx
mov dword [rsi + 0x51], eax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x438]
movups xmm1, xmmword [rsp + 0x448]
movups xmm2, xmmword [rsp + 0x458]
movups xmm3, xmmword [rsp + 0x468]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400ba2d3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
mov rdi, rax
mov qword [rax], rsi
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400ba31a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
mov qword [rax + 0x58], rdi
lea rcx, [0x1401cc808]
mov qword [rax + 0x60], rcx
mov word [rax + 0x68], 2
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movups xmmword [rax], xmm0
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x30], xmm3
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rax + 0x40], xmm0
mov rcx, qword [rsp + 0xa0]
mov qword [rax + 0x50], rcx
mov rcx, qword [rsp + 0x158]
mov qword [rcx], 3
mov qword [rcx + 8], rax
lea rcx, [rsp + 0x7e0]
call fcn.1400ba570
movaps xmm6, xmmword [rsp + 0x880]
movaps xmm7, xmmword [rsp + 0x890]
movaps xmm8, xmmword [rsp + 0x8a0]
movaps xmm9, xmmword [rsp + 0x8b0]
movaps xmm10, xmmword [rsp + 0x8c0]
movaps xmm11, xmmword [rsp + 0x8d0]
movaps xmm12, xmmword [rsp + 0x8e0]
add rsp, 0x8f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov esi, 1
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
movups xmm7, xmmword [r13 + 0xb4]
mov rax, qword [rsp + 0x160]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [rax + 0x10]
mov byte [rsp + 0x60], al
movzx r14d, word [r13 + 0xb0]
movzx r15d, word [r13 + 0xb2]
mov eax, dword [r13 + 0xc4]
mov dword [rsp + 0x30], eax
mov r12d, dword [r13 + 0xa0]
mov rax, r13
mov r13d, dword [r13 + 0xa4]
mov ebp, dword [rax + 0xa8]
mov edi, dword [rax + 0xac]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400ba499
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x1400b7295
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x1400b7295
movdqu xmmword [rax + 0x58], xmm6
mov word [rax + 0x68], 2
mov qword [rax], rbx
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rbx
mov dword [rax + 0x18], r12d
mov dword [rax + 0x1c], r13d
mov dword [rax + 0x20], ebp
mov dword [rax + 0x24], edi
mov word [rax + 0x28], r14w
mov word [rax + 0x2a], r15w
movups xmmword [rax + 0x2c], xmm7
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x3c], ecx
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rax + 0x40], xmm0
movzx ecx, byte [rsp + 0x60]
mov byte [rax + 0x50], cl
mov ecx, dword [rsp + 0x270]
mov edx, dword [rsp + 0x273]
mov dword [rax + 0x51], ecx
mov dword [rax + 0x54], edx
mov rcx, qword [rsp + 0x158]
mov qword [rcx], 3
mov qword [rcx + 8], rax
cmp qword [rsp + 0x438], 0
je 0x1400ba3a5
mov r8, qword [rsp + 0x440]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x1400ba3a5
ud2
lea rcx, [rsp + 0x4e0]
call fcn.140072240
ud2
lea rcx, [rsp + 0x520]
call fcn.140072240
ud2