Function at 0x140008c50
Capabilities:
Check if file exists
Check os version
Enumerate processes via ntquerysysteminformation
Get hostname
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x578
movaps xmmword [rsp + 0x560], xmm8
movaps xmmword [rsp + 0x550], xmm7
movaps xmmword [rsp + 0x540], xmm6
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x290], xmm0
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
jne 0x140008cc4
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movdqu xmm8, xmmword [rax + 0x68]
jmp 0x140008d10
movaps xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
movdqa xmm8, xmmword [rsp + 0xc0]
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
movdqu xmmword [rax + 0x68], xmm8
movq rax, xmm8
inc rax
mov ecx, dword [0x14002e11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
mov rax, qword [0x14002e110]
test rax, rax
je 0x140008d7a
and eax, 2
xor ecx, ecx
or rax, rcx
je 0x140008d9c
mov rax, qword [0x14002e110]
test rax, rax
je 0x140008d8b
and eax, 0x400
xor ecx, ecx
or rax, rcx
je 0x140008d9c
mov qword [rsp + 0x4d8], 1
mov qword [rsp + 0x4e0], 0
jmp 0x140008daa
call fcn.140021af0
and eax, 2
xor ecx, ecx
or rax, rcx
jne 0x140008d48
jmp 0x140008d9c
call fcn.140021af0
and eax, 0x400
xor ecx, ecx
or rax, rcx
jne 0x140008d60
lea rax, [rsp + 0x4d8]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movabs r14, 0x8000000000000000
mov qword [rsp + 0x490], r14
mov qword [rsp + 0x498], 0
mov qword [rsp + 0x4a0], 1
movaps xmm0, xmmword [rsp + 0x290]
movups xmmword [rsp + 0x4a8], xmm0
mov qword [rsp + 0x448], 0
mov qword [rsp + 0x450], 8
mov qword [rsp + 0x458], 0
movdqu xmm6, xmmword [0x140024a40]
movdqu xmmword [rsp + 0x460], xmm6
movups xmm7, xmmword [0x140024a50]
movups xmmword [rsp + 0x470], xmm7
movdqu xmmword [rsp + 0x480], xmm8
mov word [rsp + 0x508], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e8], xmm0
mov qword [rsp + 0x4f8], 1
mov qword [rsp + 0x500], 0
mov byte [rsp + 0x50a], 0
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
mov qword [rsp + 0x398], rsi
jne 0x140008ea8
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movdqu xmm0, xmmword [rax + 0x68]
jmp 0x140008ef2
movaps xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
movdqa xmm0, xmmword [rsp + 0xc0]
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
movdqu xmmword [rax + 0x68], xmm0
movq rax, xmm0
inc rax
mov ecx, dword [0x14002e11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
movdqa xmmword [rsp + 0x3f0], xmm6
movaps xmmword [rsp + 0x400], xmm7
movdqa xmmword [rsp + 0x410], xmm0
lea rax, [0x140023e50]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x1708fcca626eb4b3
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007d20
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x14002e118]
mov edx, 7
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xda
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x1d
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x2c
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xeb050df1
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x98], 7
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 7
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
jne 0x14000903b
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movdqu xmm0, xmmword [rax + 0x68]
jmp 0x14000908a
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
movdqa xmm0, xmmword [rsp + 0xc0]
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
movdqu xmmword [rax + 0x68], xmm0
movq rax, xmm0
inc rax
mov ecx, dword [0x14002e11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
movdqa xmmword [rsp + 0x1b0], xmm6
movaps xmmword [rsp + 0x1c0], xmm7
movdqa xmmword [rsp + 0x1d0], xmm0
lea rdx, [0x14002a090]
lea rcx, [rsp + 0xc0]
mov r8d, 0x12
call fcn.140019f20
mov rcx, qword [rsp + 0xc0]
cmp rcx, r14
je 0x1400091f6
mov r8, qword [rsp + 0xc8]
mov r10, qword [rsp + 0xd0]
mov r9b, 1
test r10, r10
je 0x1400091c9
cmp r10, 1
jne 0x140009135
movzx eax, byte [r8]
cmp eax, 0x2b
je 0x14000912a
mov r10d, 1
mov r11, r8
cmp eax, 0x2d
jne 0x140009192
mov r10d, 0x100
jmp 0x1400091c9
cmp byte [r8], 0x2b
jne 0x140009189
lea r11, [r8 + 1]
lea rax, [r10 - 1]
cmp r10, 0xa
mov r10, rax
jb 0x140009192
xor esi, esi
mov edi, 0xa
xor eax, eax
nop word cs:[rax + rax]
cmp r10, rsi
je 0x1400091bf
movzx ebx, byte [r11 + rsi]
add ebx, 0xffffffd0
mul edi
jo 0x14000a571
cmp ebx, 0xa
jae 0x14000912a
inc rsi
add eax, ebx
jae 0x140009160
mov r10d, 0x200
jmp 0x1400091c9
mov r11, r8
cmp r10, 9
jae 0x14000914c
xor edx, edx
xor eax, eax
nop word cs:[rax + rax]
movzx esi, byte [r11 + rdx]
add esi, 0xffffffd0
cmp esi, 9
ja 0x14000912a
lea eax, [rax + rax*4]
lea eax, [rsi + rax*2]
inc rdx
cmp r10, rdx
jne 0x1400091a0
shl rax, 0x20
xor r9d, r9d
mov r10, rax
shr r10, 0x24
cmp r10d, 0x55f
setb bl
or bl, r9b
test rcx, rcx
je 0x1400091ee
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test bl, bl
je 0x140009341
lea rdx, [0x14002a07a]
lea rcx, [rsp + 0x360]
mov r8d, 0xb
call fcn.140019f20
cmp qword [rsp + 0x360], r14
je 0x1400099b3
lea rax, [0x1400247e1]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x3bc9a2044ae990fc
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007df0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x14002e118]
mov edx, 0xa
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov ecx, esi
shr ecx, 8
xor cl, 0xa6
xor sil, 0xfc
movabs rdx, 0x8f313d373e1380d3
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x68], 0xa
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0xa
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x2a8], rax
movdqa xmm0, xmmword [rsp + 0x360]
movdqu xmmword [rsp + 0x298], xmm0
mov qword [rsp + 0x290], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x68]
lea r9, [rsp + 0x290]
call fcn.140008940
cmp qword [rsp + 0xc0], 0
je 0x1400099b3
cmp qword [rsp + 0xc8], 0
je 0x140009991
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x1400099b3
lea rdx, [0x14002a07a]
lea rcx, [rsp + 0x290]
mov r8d, 0xb
call fcn.140019f20
mov r12, qword [rsp + 0x290]
cmp r12, r14
jne 0x140009375
mov qword [rsp + 0x360], r14
jmp 0x140009210
mov rdi, qword [rsp + 0x298]
mov rbx, qword [rsp + 0x2a0]
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xd0], 0
mov r11d, 1
xor edx, edx
lea r14, [0x14002a085]
xor ecx, ecx
mov r9d, 1
xor r8d, r8d
mov eax, 1
jmp 0x1400093ed
lea r10, [r9 + r8]
inc r10
mov rax, r10
sub rax, rcx
xor r8d, r8d
lea r11, [r10 + r8]
mov r9, r10
cmp r11, 0xb
jae 0x140009441
lea r10, [r8 + rcx]
cmp r10, 0xa
ja 0x14000ca8d
movzx r10d, byte [r10 + r14]
cmp byte [r11 + r14], r10b
jb 0x1400093d0
jne 0x140009430
inc r8
cmp r8, rax
mov r11, r8
cmove r11, rdx
cmovne r8, rdx
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x1400093e0
lea r10, [r9 + 1]
mov eax, 1
xor r8d, r8d
mov rcx, r9
jmp 0x1400093e0
mov r11d, 1
xor edx, edx
xor r15d, r15d
mov r9d, 1
xor r8d, r8d
mov r13d, 1
jmp 0x14000947d
lea r10, [r9 + r8]
inc r10
mov r13, r10
sub r13, r15
xor r8d, r8d
lea r11, [r10 + r8]
mov r9, r10
cmp r11, 0xb
jae 0x1400094d2
lea r10, [r8 + r15]
cmp r10, 0xa
ja 0x14000ca8d
movzx r10d, byte [r10 + r14]
cmp byte [r11 + r14], r10b
ja 0x140009460
jne 0x1400094c0
inc r8
cmp r8, r13
mov r11, r8
cmove r11, rdx
cmovne r8, rdx
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x140009470
lea r10, [r9 + 1]
mov r13d, 1
xor r8d, r8d
mov r15, r9
jmp 0x140009470
cmp rcx, r15
cmova r15, rcx
cmova r13, rax
cmp r15, 0xb
ja 0x14000ca8d
mov rax, r13
add rax, r15
jb 0x14000ca8d
cmp rax, 0xb
ja 0x14000ca8d
lea rdx, [r14 + r13]
mov rcx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
mov qword [rsp + 0xb0], r12
je 0x14000a35a
mov r10d, 0xb
sub r10, r15
cmp r15, r10
cmova r10, r15
inc r10
movabs rbp, 0x8bc21100800000
mov r13, 0xffffffffffffffff
mov eax, 0xb
mov qword [rsp + 0x58], r10
sub rax, r10
mov qword [rsp + 0x1a8], rax
lea rax, [r15 - 1]
mov qword [rsp + 0x48], rax
mov ecx, 1
mov eax, 1
sub rax, r15
mov qword [rsp + 0xb8], rax
lea rax, [rdi + r15]
dec rax
mov qword [rsp + 0x1a0], rax
mov rax, r15
neg rax
mov qword [rsp + 0x50], rax
xor r12d, r12d
xor edx, edx
mov qword [rsp + 0x60], rdi
lea rax, [rdx + 0xa]
cmp r13, 0xffffffffffffffff
je 0x1400096a0
nop word cs:[rax + rax]
cmp rax, rbx
jae 0x140009919
mov rsi, rdx
jmp 0x1400095d4
add rsi, 0xb
xor r13d, r13d
lea rax, [rsi + 0xa]
cmp rax, rbx
jae 0x140009919
movzx eax, byte [rdi + rax]
bt rbp, rax
jae 0x1400095c0
cmp r15, r13
mov r9, r13
cmova r9, r15
lea rax, [rdi + rsi]
nop dword [rax]
cmp r9, 0xb
jae 0x140009620
mov r8, r9
add r9, rsi
cmp r9, rbx
jae 0x14000ca8d
lea r9, [r8 + 1]
movzx r10d, byte [r8 + r14]
cmp r10b, byte [rax + r8]
je 0x1400095f0
sub rsi, r15
add rsi, r8
inc rsi
jmp 0x1400095c4
mov r8, qword [rsp + 0x48]
nop word cs:[rax + rax]
lea r9, [r8 + 1]
cmp r13, r9
jae 0x140009690
cmp r9, 0xb
ja 0x14000ca8d
lea r9, [rsi + r8]
cmp r9, rbx
jae 0x14000ca8d
movzx r9d, byte [r8 + r14]
lea r10, [r8 - 1]
cmp r9b, byte [rax + r8]
mov r8, r10
je 0x140009630
add rsi, qword [rsp + 0x58]
mov r13, qword [rsp + 0x1a8]
lea rax, [rsi + 0xa]
cmp rax, rbx
jb 0x1400095d4
jmp 0x140009919
xor r13d, r13d
jmp 0x140009810
cmp rax, rbx
jae 0x140009919
mov rsi, rdx
cmp qword [rsp + 0x48], 0xb
jb 0x1400096d1
jmp 0x140009799
add rsi, 0xb
lea rax, [rsi + 0xa]
cmp rax, rbx
jae 0x140009919
movzx eax, byte [rdi + rax]
bt rbp, rax
jae 0x1400096c0
lea r8, [rdi + rsi]
mov r9, r15
mov r13, qword [rsp + 0x48]
nop word [rax + rax]
cmp r9, 0xb
je 0x140009730
mov rax, r9
add r9, rsi
cmp r9, rbx
jae 0x14000ca8d
lea r9, [rax + 1]
movzx r10d, byte [rax + r14]
cmp r10b, byte [r8 + rax]
je 0x1400096f0
add rsi, qword [rsp + 0xb8]
add rsi, rax
jmp 0x1400096c4
mov rax, qword [rsp + 0x1a0]
add rax, rsi
lea r8, [rsi + r13]
xor r9d, r9d
nop word cs:[rax + rax]
cmp qword [rsp + 0x50], r9
je 0x1400097fe
lea r10, [r8 + r9]
cmp r10, rbx
jae 0x14000ca8d
lea r10, [r9 + r13]
movzx r10d, byte [r14 + r10]
lea r11, [r9 - 1]
cmp r10b, byte [rax + r9]
mov r9, r11
je 0x140009750
add rsi, qword [rsp + 0x58]
jmp 0x1400096c4
add rsi, 0xb
lea rax, [rsi + 0xa]
cmp rax, rbx
jae 0x140009919
movzx eax, byte [rdi + rax]
bt rbp, rax
jae 0x140009788
lea r8, [rdi + rsi]
mov r9, r15
nop word [rax + rax]
cmp r9, 0xb
jae 0x1400097ed
mov rax, r9
add r9, rsi
cmp r9, rbx
jae 0x14000ca8d
lea r9, [rax + 1]
movzx r10d, byte [rax + r14]
cmp r10b, byte [r8 + rax]
je 0x1400097b0
add rsi, qword [rsp + 0xb8]
add rsi, rax
lea rax, [rsi + 0xa]
cmp rax, rbx
jb 0x140009799
jmp 0x140009919
mov r13, 0xffffffffffffffff
test r15, r15
je 0x140009810
jmp 0x14000ca8d
mov r13, 0xffffffffffffffff
nop word cs:[rax + rax]
mov rdi, rsi
sub rdi, rdx
mov rax, qword [rsp + 0xc0]
sub rax, r12
cmp rax, rdi
jb 0x1400098a0
add rdx, qword [rsp + 0x60]
add rcx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add r12, rdi
mov qword [rsp + 0xd0], r12
mov rax, qword [rsp + 0xc0]
sub rax, r12
cmp rax, 0xa
jbe 0x1400098e7
add rsi, 0xb
mov rcx, qword [rsp + 0xc8]
movabs rax, 0x2073776f646e6957
mov qword [rcx + r12], rax
mov dword [rcx + r12 + 7], 0x20313120
add r12, 0xb
mov qword [rsp + 0xd0], r12
mov rdx, rsi
mov rdi, qword [rsp + 0x60]
lea rax, [rdx + 0xa]
cmp r13, 0xffffffffffffffff
jne 0x1400095b0
jmp 0x1400096a0
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x248], rdx
mov rdx, r12
mov r8, rdi
call fcn.1400214a0
mov rdx, qword [rsp + 0x248]
mov rcx, qword [rsp + 0xc8]
mov r12, qword [rsp + 0xd0]
jmp 0x140009826
mov qword [rsp + 0x20], 1
mov r8d, 0xb
mov r9d, 1
lea rcx, [rsp + 0xc0]
mov rdx, r12
call fcn.1400214a0
mov r12, qword [rsp + 0xd0]
jmp 0x140009856
lea rsi, [rdi + rdx]
sub rbx, rdx
mov rax, qword [rsp + 0xc0]
sub rax, r12
cmp rax, rbx
jb 0x14000ca37
movabs r14, 0x8000000000000000
mov r15, qword [rsp + 0xb0]
add rcx, r12
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add r12, rbx
mov qword [rsp + 0x370], r12
movdqu xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x360], xmm0
test r15, r15
je 0x140009210
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140009210
cmp qword [rsp + 0xd0], 0
je 0x1400099b3
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [rsp + 0x290], 0
lea r8, [rsp + 0x290]
mov ecx, 5
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x140009a46
mov ebx, dword [rsp + 0x290]
test rbx, rbx
je 0x140009a58
lea rdi, [rbx + rbx]
mov ecx, 8
mov rdx, rdi
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rsi, rax
lea r8, [rsp + 0x290]
mov ecx, 5
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x140009bd2
xor r8d, r8d
nop word cs:[rax + rax]
cmp word [rsi + r8*2], 0
je 0x140009a80
inc r8
add rdi, 0xfffffffffffffffe
jne 0x140009a30
mov r8, rbx
jmp 0x140009a80
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [rsp + 0x290]
test rbx, rbx
jne 0x1400099e3
mov esi, 2
lea r8, [rsp + 0x290]
mov edx, 2
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x140009bec
xor r8d, r8d
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.140005be0
mov rax, qword [rsp + 0xc0]
mov rdi, r14
cmp rax, r14
je 0x140009ab5
movdqu xmm0, xmmword [rsp + 0xc8]
movdqa xmmword [rsp + 0x250], xmm0
mov rdi, rax
test rbx, rbx
je 0x140009acc
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp rdi, r14
je 0x140009bf2
lea rax, [0x1400186b4]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x1411e0b948f544fe
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007db0
mov rsi, qword [rax]
movzx eax, byte [0x14002e118]
mov edx, 8
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
movabs rcx, 0x15e71d362cbd41b3
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x298], rdi
movdqa xmm0, xmmword [rsp + 0x250]
movdqu xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x290], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x68]
lea r9, [rsp + 0x290]
call fcn.140008940
cmp qword [rsp + 0xc0], 0
je 0x140009bf2
cmp qword [rsp + 0xc8], 0
je 0x14000a31a
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x140009bf2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140009bf2
call qword [sym.imp.KERNEL32.dll_GetLastError]
movdqa xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x2b0], xmm2
movdqa xmmword [rsp + 0x2a0], xmm1
movdqa xmmword [rsp + 0x290], xmm0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x3f0]
lea r8, [rsp + 0x98]
lea r9, [rsp + 0x290]
call fcn.140008940
cmp qword [rsp + 0xc0], 0
je 0x140009c94
cmp qword [rsp + 0xc8], 0
je 0x140009c72
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x140009c94
cmp qword [rsp + 0xd0], 0
je 0x140009c94
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x140023bb3]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x83b9eb03f228c170
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007d50
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x14002e118]
mov edx, 9
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
xor bl, 0x8b
movabs rcx, 0x174c640d9bcbe26e
xor rsi, rcx
mov qword [rax], rsi
mov byte [rax + 8], bl
mov qword [rsp + 0x430], 9
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x440], 9
mov qword [rsp + 0x268], 0
mov qword [rsp + 0x270], 1
mov qword [rsp + 0x278], 0
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
jne 0x140009d96
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x68]
mov rbx, qword [rax + 0x70]
jmp 0x140009deb
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
mov rdi, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xc8]
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
mov qword [rax + 0x70], rbx
lea rax, [rdi + 1]
mov ecx, dword [0x14002e11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
movzx eax, byte [0x14002e118]
mov edx, 0x58410
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rsi, rax
add rsi, 0x58000
mov r8d, 0x410
mov rcx, rsi
mov dl, 0xff
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0x3ff
mov qword [rsp + 0x2e0], 0x380
mov qword [rsp + 0x2e8], 0
mov qword [rsp + 0x2f0], rdi
mov qword [rsp + 0x2f8], rbx
mov qword [rsp + 0x290], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x300], xmm0
movdqu xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x298], 8
mov qword [rsp + 0x2a0], 0
mov qword [rsp + 0x2a8], r14
mov dword [rsp + 0x2c0], 0
mov byte [rsp + 0x2c8], 0
mov qword [rsp + 0x320], 0
mov qword [rsp + 0x280], 0x10101
mov byte [rsp + 0x288], 2
movzx eax, byte [0x14002e118]
mov ebp, 0x80000
mov edx, 0x80000
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rdi, rax
lea r15, [rsp + 0x2d0]
mov qword [rsp + 0x228], 0x80000
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 0
xor edx, edx
lea rsi, [rsp + 0x228]
mov r12, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
lea rbx, [rsp + 0xc0]
mov r13, qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov r14d, 0x80000
jmp 0x140009f80
mov rbp, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x238]
mov dword [rsp + 0x1b0], 0
sub rbp, rdx
cmp r14, rbp
ja 0x14000a00f
mov ecx, 5
mov rdx, rdi
mov r8d, r14d
lea r9, [rsp + 0x1b0]
call r12
test eax, eax
jns 0x14000a036
mov ebp, eax
mov qword [rsp + 0xc0], 0
xor ecx, ecx
mov rdx, rbx
call r13
mov rcx, qword [rsp + 0xc0]
and ebp, 0xefffffff
cmp ebp, 0xc0000004
jne 0x14000a2ff
mov eax, dword [rsp + 0x1b0]
mov rdx, r14
add rdx, r14
lea r14d, [rax + 0x2800]
test eax, eax
cmove r14, rdx
test rcx, rcx
je 0x140009f70
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140009f70
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, rsi
mov r8, r14
call fcn.1400214a0
mov rdi, qword [rsp + 0x230]
jmp 0x140009f93
mov qword [rsp + 0x238], r14
mov qword [rsp + 0x3d8], 0
movzx eax, byte [0x14002e118]
mov edx, 0xfa0
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov qword [rsp + 0x250], 0x1f4
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 0
mov rdi, qword [rsp + 0x230]
xor ebx, ebx
lea rsi, [rsp + 0x250]
xor r14d, r14d
movabs rbp, 0x8000000000000000
jmp 0x14000a0cb
lea rcx, [rdi + r14]
mov qword [rax + rbx*8], rcx
inc rbx
mov qword [rsp + 0x260], rbx
add r14, r12
test r12, r12
je 0x14000a0eb
mov r12d, dword [rdi + r14]
cmp rbx, qword [rsp + 0x250]
jne 0x14000a0b0
mov rcx, rsi
call fcn.14001ae70
mov rax, qword [rsp + 0x258]
jmp 0x14000a0b0
mov qword [rsp + 0x3e0], r15
cmp byte [rsp + 0x280], 1
jne 0x14000a313
mov rax, qword [rsp + 0x2a0]
test rax, rax
jne 0x14000acb5
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x380], xmm0
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmmword [rsp + 0x360], xmm0
lea rcx, [rsp + 0x360]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx r13d, word [rsp + 0x360]
mov eax, 0x80000000
xor ecx, ecx
mov r8, rbx
cpuid
xchg rbx, r8
cmp eax, 0x80000004
jb 0x14000a33f
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x48], r13
movzx eax, byte [0x14002e118]
xor r13d, r13d
mov edx, 0x50
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov r8, rax
mov qword [rsp + 0x68], 5
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0
mov ebx, 0x80000000
mov r12d, 0xc
mov edi, 0x80000000
mov r9d, dword [rsp + 0x50]
nop dword [rax]
cmp ebx, r9d
adc edi, 0
mov eax, ebx
xor ecx, ecx
mov rsi, rbx
cpuid
xchg rbx, rsi
mov ebp, ecx
mov r14d, edx
mov r15d, eax
cmp r13, qword [rsp + 0x68]
jne 0x14000a1f5
lea rcx, [rsp + 0x68]
call fcn.14001b060
mov r9d, dword [rsp + 0x50]
mov r8, qword [rsp + 0x70]
inc r13
mov dword [r8 + r12 - 0xc], r15d
mov dword [r8 + r12 - 8], esi
mov dword [r8 + r12 - 4], ebp
mov dword [r8 + r12], r14d
mov qword [rsp + 0x78], r13
cmp ebx, r9d
jae 0x14000a220
add r12, 0x10
mov ebx, edi
cmp edi, r9d
jbe 0x14000a1c0
movzx eax, byte [0x14002e118]
mov edx, 0x30
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rsi, rax
mov qword [rsp + 0x1b0], 0x30
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], 0
cmp r13, 3
jb 0x14000a4f5
mov rdi, qword [rsp + 0x70]
shl r13, 4
add r13, rdi
mov edx, dword [rdi + 0x20]
lea rsi, [rsp + 0x1b0]
mov rcx, rsi
call fcn.14001b110
mov edx, dword [rdi + 0x24]
mov rcx, rsi
call fcn.14001b110
mov edx, dword [rdi + 0x28]
mov rcx, rsi
call fcn.14001b110
add rdi, 0x2c
xor ebx, ebx
nop word cs:[rax + rax]
mov edx, dword [rdi + rbx]
mov rcx, rsi
call fcn.14001b110
cmp rbx, 0x20
je 0x14000a4ba
lea r14, [rdi + rbx]
add r14, 4
cmp r14, r13
je 0x14000a4ba
mov edx, dword [r14]
mov rcx, rsi
call fcn.14001b110
mov edx, dword [r14 + 4]
mov rcx, rsi
call fcn.14001b110
mov edx, dword [r14 + 8]
mov rcx, rsi
call fcn.14001b110
add rbx, 0x10
jmp 0x14000a2b0
test rcx, rcx
je 0x14000bae1
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000bae1
xor eax, eax
jmp 0x14000acb5
cmp qword [rsp + 0xd0], 0
je 0x140009bf2
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
jmp 0x140009be4
mov eax, 1
mov qword [rsp + 0x50], rax
xor r12d, r12d
mov qword [rsp + 0x58], 0
jmp 0x14000a660
mov ecx, 1
xor eax, eax
xor r8d, r8d
mov r9d, 1
xor edx, edx
jmp 0x14000a388
lea r10, [r8 + r9]
inc r10
mov rcx, r10
sub rcx, rdx
xor r8d, r8d
mov r9, r10
cmp rcx, r13
je 0x14000a3f5
lea r10, [r9 + r8]
cmp r10, 0xa
ja 0x14000a3f5
mov r11, r9
not r11
sub r11, r8
cmp r11, 0xfffffffffffffff5
jb 0x14000ca8d
mov esi, 0xa
sub rsi, r8
sub rsi, rdx
cmp rsi, 0xb
jae 0x14000ca8d
lea r10, [r9 + 1]
movzx esi, byte [rsi + r14]
cmp byte [r11 + r14 + 0xb], sil
jb 0x14000a370
jne 0x14000a3e8
inc r8
cmp r8, rcx
mov r11, r8
cmove r11, rax
cmovne r8, rax
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x14000a380
mov ecx, 1
xor r8d, r8d
mov rdx, r9
jmp 0x14000a380
mov ecx, 1
xor eax, eax
xor r8d, r8d
mov r9d, 1
xor edx, edx
jmp 0x14000a428
lea r10, [r8 + r9]
inc r10
mov rcx, r10
sub rcx, rdx
xor r8d, r8d
mov r9, r10
cmp rcx, r13
je 0x14000a495
lea r10, [r9 + r8]
cmp r10, 0xa
ja 0x14000a495
mov r11, r9
not r11
sub r11, r8
cmp r11, 0xfffffffffffffff5
jb 0x14000ca8d
mov esi, 0xa
sub rsi, r8
sub rsi, rdx
cmp rsi, 0xb
jae 0x14000ca8d
lea r10, [r9 + 1]
movzx esi, byte [rsi + r14]
cmp byte [r11 + r14 + 0xb], sil
ja 0x14000a410
jne 0x14000a488
inc r8
cmp r8, rcx
mov r11, r8
cmove r11, rax
cmovne r8, rax
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x14000a420
mov ecx, 1
xor r8d, r8d
mov rdx, r9
jmp 0x14000a420
test r13, r13
je 0x14000a58b
mov eax, r13d
and eax, 3
cmp r13, 4
jae 0x14000a598
mov r10, r13
xor ebp, ebp
xor ecx, ecx
jmp 0x14000a5e0
mov rsi, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1c0]
test rax, rax
je 0x14000a4f5
xor r8d, r8d
mov r13, qword [rsp + 0x48]
nop word [rax + rax]
cmp byte [rsi + r8], 0
je 0x14000ca2c
inc r8
cmp rax, r8
jne 0x14000a4e0
jmp 0x14000a4fc
xor eax, eax
mov r13, qword [rsp + 0x48]
mov r8, rax
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.14000e8e0
test byte [rsp + 0xc0], 1
je 0x14000a52d
mov eax, 1
mov qword [rsp + 0x50], rax
xor r12d, r12d
xor ebx, ebx
jmp 0x14000a622
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
js 0x14000ca8d
mov rdi, qword [rsp + 0xc8]
je 0x14000a60a
movzx eax, byte [0x14002e118]
xor ecx, ecx
mov rdx, rbx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rcx, rax
mov r12, rbx
jmp 0x14000a612
xor r10d, r10d
cmp ebx, 0xa
setb r10b
shl r10d, 8
add r10, 0x100
jmp 0x1400091c9
xor r13d, r13d
xor ebp, ebp
xor r10d, r10d
jmp 0x140009540
mov r10, r13
mov rdx, r13
and rdx, 0xfffffffffffffffc
xor ebp, ebp
xor ecx, ecx
nop word cs:[rax + rax]
movzx r8d, byte [rcx + r14]
movzx r9d, byte [rcx + r14 + 1]
bts rbp, r8
bts rbp, r9
movzx r8d, byte [rcx + r14 + 2]
bts rbp, r8
movzx r8d, byte [rcx + r14 + 3]
bts rbp, r8
add rcx, 4
cmp rdx, rcx
jne 0x14000a5b0
xor r13d, r13d
test rax, rax
je 0x140009540
xor edx, edx
nop
lea r8, [rcx + rdx]
movzx r8d, byte [r14 + r8]
bts rbp, r8
inc rdx
cmp rax, rdx
jne 0x14000a5f0
jmp 0x140009540
mov ecx, 1
xor r12d, r12d
mov qword [rsp + 0x50], rcx
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
cmp qword [rsp + 0x1b0], 0
je 0x14000a63f
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x68], 0
je 0x14000a65b
mov r8, qword [rsp + 0x70]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x58], rbx
xor eax, eax
xor ecx, ecx
mov rbx, rbx
cpuid
xchg rbx, rbx
mov esi, ecx
mov edi, edx
movzx eax, byte [0x14002e118]
mov edx, 0xc
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov qword [rsp + 0x1b0], 0xc
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], 0
lea r14, [rsp + 0x1b0]
mov rcx, r14
mov edx, ebx
call fcn.14001b110
mov rcx, r14
mov edx, edi
call fcn.14001b110
mov rcx, r14
mov edx, esi
call fcn.14001b110
mov rsi, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x1c0]
test r8, r8
je 0x14000a70c
xor eax, eax
nop dword [rax]
cmp byte [rsi + rax], 0
je 0x14000a700
inc rax
cmp r8, rax
jne 0x14000a6f0
jmp 0x14000a70c
cmp rax, r8
mov r8, rax
ja 0x14000ca8d
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.14000e8e0
test byte [rsp + 0xc0], 1
je 0x14000a74b
cmp r13w, 0xe
ja 0x14000a788
shl r13d, 3
lea rax, [0x14002a9f8]
mov r15, qword [r13 + rax]
lea rax, str.Intel_x86MIPSRISC_AlphaPPCSHXARMIntel_Itanium_based_x64RISC_Alpha_x64MSIL_Intel_or_AMD__x64Intel_Itanium_based_x86unknownARM_x64CPU
mov rdi, qword [r13 + rax]
jmp 0x14000a795
mov r15, qword [rsp + 0xd0]
test r15, r15
js 0x14000ca8d
mov rdi, qword [rsp + 0xc8]
je 0x14000a7c8
movzx eax, byte [0x14002e118]
xor ecx, ecx
mov rdx, r15
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rbx, rax
mov r14, r15
jmp 0x14000a7d0
lea rdi, [0x14002a13a]
mov r15d, 7
movzx eax, byte [0x14002e118]
xor ecx, ecx
mov rdx, r15
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rbx, rax
mov rcx, rax
mov rdx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov r14d, 1
jmp 0x14000a7de
mov ebx, 1
xor r14d, r14d
mov rcx, rbx
mov rdx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
cmp qword [rsp + 0x1b0], 0
je 0x14000a7fb
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13d, dword [rsp + 0x380]
test r13, r13
je 0x14000a829
lea rdx, [r13*8]
mov ecx, 8
call fcn.140017130
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x14000a833
jmp 0x14000ca8d
mov eax, 8
mov qword [rsp + 0x48], rax
lea rdi, [r13 + 1]
imul rdx, rdi, 0x70
movzx eax, byte [0x14002e118]
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rsi, rax
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 0
test r13, r13
je 0x14000ab61
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xb0], r13
imul rax, r13, 0x70
mov qword [rsp + 0x1a8], rax
xor r12d, r12d
xor ebp, ebp
jmp 0x14000a934
mov rax, qword [rsp + 0x1f0]
mov qword [rsi + r12 + 0x40], rax
movdqa xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [rsi + r12 + 0x30], xmm3
movdqu xmmword [rsi + r12 + 0x20], xmm2
movdqu xmmword [rsi + r12 + 0x10], xmm1
movdqu xmmword [rsi + r12], xmm0
movabs rax, 0x8000000000000000
mov qword [rsi + r12 + 0x48], rax
mov dword [rsi + r12 + 0x60], 0
mov qword [rsi + r12 + 0x68], rbx
mov qword [rsp + 0xa8], r14
add r12, 0x70
mov rbp, r14
cmp qword [rsp + 0x1a8], r12
je 0x14000ab09
lea r14, [rbp + 1]
mov qword [rsp + 0x3e8], r14
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x420], rax
lea rax, [0x14000e7c0]
mov qword [rsp + 0x428], rax
lea rax, [0x14002a150]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x88], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x68]
call fcn.140005ec0
mov ebx, 1
test r15, r15
je 0x14000a9e0
movzx eax, byte [0x14002e118]
xor ecx, ecx
mov rdx, r15
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rdi, rax
mov r13, r15
jmp 0x14000a9e8
xor r13d, r13d
mov edi, 1
mov rcx, rdi
mov rdx, qword [rsp + 0x60]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], r15
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x14000aa50
movzx eax, byte [0x14002e118]
xor ecx, ecx
mov rdx, rdi
call fcn.140017130
test rax, rax
mov rdx, qword [rsp + 0x50]
je 0x14000ca8d
mov rbx, rax
mov r13, rdi
jmp 0x14000aa58
xor r13d, r13d
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
mov qword [rsp + 0x50], rdx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], rdi
mov rax, qword [rsp + 0x48]
mov rbx, qword [rax + rbp*8]
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1d0], xmm2
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f0], rdi
cmp rbp, qword [rsp + 0x98]
jne 0x14000a8b0
lea rcx, [rsp + 0x98]
call fcn.14001afb0
mov rsi, qword [rsp + 0xa0]
jmp 0x14000a8b0
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
movdqu xmm0, xmmword [rsp + 0x98]
movdqa xmmword [rsp + 0xc0], xmm0
cmp qword [rsp + 0xb0], 0
mov r12, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x1a0]
je 0x14000ab91
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000ab91
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xc8], rax
test r12, r12
movabs rbp, 0x8000000000000000
je 0x14000abb4
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r14, r14
je 0x14000abcb
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x2a0]
test rsi, rsi
je 0x14000ac69
mov rdi, qword [rsp + 0x298]
add rdi, 0x50
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000ac09
add rdi, 0x70
dec rsi
je 0x14000ac69
cmp qword [rdi - 0x50], 0
je 0x14000ac1f
mov r8, qword [rdi - 0x48]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rbx
cmp qword [rdi - 0x38], 0
je 0x14000ac35
mov r8, qword [rdi - 0x30]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rbx
mov rax, qword [rdi - 8]
cmp rax, rbp
je 0x14000ac51
test rax, rax
je 0x14000ac51
mov r8, qword [rdi]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rbx
cmp qword [rdi - 0x20], 0
je 0x14000ac00
mov r8, qword [rdi - 0x18]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rbx
jmp 0x14000ac00
cmp qword [rsp + 0x290], 0
je 0x14000ac8b
mov r8, qword [rsp + 0x298]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x2a0], rax
movdqa xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x2c8], 0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xc0], 0
lea rcx, [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
mov rax, qword [rsp + 0xc0]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x14000acf2
xor edx, edx
jmp 0x14000ad10
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
mov qword [rsp + 0x360], rdx
mov rsi, qword [rsp + 0x260]
mov qword [rsp + 0xd0], rsi
movdqu xmm0, xmmword [rsp + 0x250]
movdqa xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
lea rax, [rsp + 0x3d8]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0xe8], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0xf8], rax
mov rbx, qword [rsp + 0xc0]
cmp rbx, rsi
jb 0x14000ca8d
lea r14, [rsp + 0xd8]
mov rdi, qword [rsp + 0xc8]
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x14000aded
add rax, 0x110
jmp 0x14000adf2
call fcn.1400103d0
mov rax, qword [rax]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rsi, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x1b0]
mov rdx, rsi
xor r8d, r8d
call fcn.14001b860
test rbx, rbx
je 0x14000ae4e
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
sete al
test r8, r8
sete dl
or dl, al
jne 0x14000aea9
dec rcx
xor eax, eax
mov rdx, r8
nop word cs:[rax + rax]
add rax, qword [rdx + 0x10]
sub rcx, 1
jb 0x14000ae93
mov rdx, qword [rdx + 0x18]
test rdx, rdx
jne 0x14000ae80
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x78]
sub rcx, rdx
cmp rax, rcx
ja 0x14000ca05
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
lea r12, [rsp + 0x68]
nop word cs:[rax + rax]
test r8, r8
je 0x14000af7f
mov rsi, qword [r8 + 0x18]
test rsi, rsi
je 0x14000aeda
mov qword [rsi + 0x20], 0
mov r13, qword [r8]
mov rbx, qword [r8 + 8]
mov r14, qword [r8 + 0x10]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
cmp r13, rbp
je 0x14000af7a
mov rax, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
sub rax, r15
cmp rax, r14
jb 0x14000af56
imul rcx, r15, 0x158
add rcx, qword [rsp + 0x70]
imul r8, r14, 0x158
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
add r15, r14
mov qword [rsp + 0x78], r15
mov rcx, rbx
xor edx, edx
call fcn.14001a490
mov r8, rsi
test r13, r13
je 0x14000aec0
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rbx
call rdi
mov r8, rsi
jmp 0x14000aec0
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r12
mov rdx, r15
mov r8, r14
call fcn.1400214a0
mov r15, qword [rsp + 0x78]
jmp 0x14000af0b
test rsi, rsi
jne 0x14000afe6
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x3a0], rax
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x78]
imul rdx, rax, 0x158
add rdx, rcx
mov qword [rsp + 0x240], rdx
mov qword [rsp + 0x390], rcx
mov r13, rcx
test rax, rax
je 0x14000b616
pcmpeqd xmm6, xmm6
mov rbx, qword [rsp + 0x390]
jmp 0x14000b103
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call rdi
mov rsi, rbx
test rbx, rbx
je 0x14000af7f
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x14000aff7
mov qword [rbx + 0x20], 0
mov rcx, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
call fcn.14001a490
cmp qword [rsi], 0
je 0x14000afd0
mov r8, qword [rsi + 8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000afd0
and al, 1
movzx eax, al
sub qword [rsp + 0x2e0], rax
lea rax, [r8 - 0x10]
and rcx, rax
mov byte [r12 + r8], dl
mov byte [r12 + rcx + 0x10], dl
inc qword [rsp + 0x2e8]
neg r8
imul rbx, r8, 0x160
mov qword [r12 + rbx - 0x160], rbp
mov qword [r12 + rbx - 0x158], rsi
lea rcx, [r12 + rbx]
add rcx, 0xfffffffffffffeb0
mov r8d, 0xd8
lea rdx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov qword [r12 + rbx - 0x78], rbp
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [r12 + rbx - 0x70], xmm0
movdqu xmmword [r12 + rbx - 0x60], xmm1
movdqu xmmword [r12 + rbx - 0x50], xmm2
movups xmmword [r12 + rbx - 0x40], xmm3
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [r12 + rbx - 0x30], xmm0
movaps xmm0, xmmword [rsp + 0x200]
movups xmmword [r12 + rbx - 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x210]
movdqu xmmword [r12 + rbx - 0x10], xmm0
movabs rbp, 0x8000000000000000
nop
mov rbx, qword [rsp + 0x50]
cmp rbx, qword [rsp + 0x240]
je 0x14000b7f7
lea r13, [rbx + 0x158]
mov rsi, qword [rbx]
cmp rsi, 2
je 0x14000b616
lea rdx, [rbx + 8]
mov r8d, 0xd8
lea rcx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov rbp, qword [rbx + 0xe0]
movups xmm0, xmmword [rbx + 0xe8]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rbx + 0xf8]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmm0, xmmword [rbx + 0x108]
movaps xmmword [rsp + 0x1d0], xmm0
movups xmm0, xmmword [rbx + 0x118]
movaps xmmword [rsp + 0x1e0], xmm0
movups xmm0, xmmword [rbx + 0x128]
movaps xmmword [rsp + 0x1f0], xmm0
movups xmm0, xmmword [rbx + 0x138]
movaps xmmword [rsp + 0x200], xmm0
movups xmm0, xmmword [rbx + 0x148]
movaps xmmword [rsp + 0x210], xmm0
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x2f8]
mov r8, rbp
call fcn.14001ac20
cmp qword [rsp + 0x2e0], 0
je 0x14000b5f6
mov r12, qword [rsp + 0x2d0]
mov rcx, qword [rsp + 0x2d8]
mov rdx, rax
shr rdx, 0x39
movd xmm0, edx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea r9, [r12 - 0x160]
xor r10d, r10d
xor r11d, r11d
mov qword [rsp + 0x50], r13
and rax, rcx
movdqu xmm1, xmmword [r12 + rax]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r14d, xmm2
test r14d, r14d
je 0x14000b248
nop dword [rax]
tzcnt ebx, r14d
add rbx, rax
and rbx, rcx
neg rbx
imul rbx, rbx, 0x160
cmp rbp, qword [r9 + rbx]
je 0x14000b290
lea ebx, [r14 - 1]
and bx, r14w
mov r14d, ebx
jne 0x14000b220
cmp r11, 1
mov r11d, 1
je 0x14000b26e
pmovmskb r8d, xmm1
xor r11d, r11d
test r8d, r8d
setne r11b
tzcnt r8d, r8d
add r8, rax
and r8, rcx
pcmpeqb xmm1, xmm6
pmovmskb ebx, xmm1
test ebx, ebx
jne 0x14000b5d0
add rax, r10
add rax, 0x10
add r10, 0x10
jmp 0x14000b201
mov r15, qword [r12 + rbx - 0x158]
mov rax, qword [r12 + rbx - 0x148]
mov qword [rsp + 0x3d0], rax
mov rax, qword [r12 + rbx - 0x140]
mov qword [rsp + 0x3c8], rax
mov rax, qword [r12 + rbx - 0x128]
mov qword [rsp + 0x248], rax
mov rax, qword [r12 + rbx - 0x120]
mov qword [rsp + 0xb0], rax
mov r13, qword [r12 + rbx - 0x118]
mov rax, qword [r12 + rbx - 0x110]
mov qword [rsp + 0x1a8], rax
mov rax, qword [r12 + rbx - 0x108]
mov qword [rsp + 0x60], rax
mov r14, qword [r12 + rbx - 0x100]
mov rax, qword [r12 + rbx - 0xf8]
mov qword [rsp + 0x1a0], rax
mov rax, qword [r12 + rbx - 0xf0]
mov qword [rsp + 0x3a8], rax
mov rax, qword [r12 + rbx - 0xd8]
mov qword [rsp + 0xb8], rax
mov rax, qword [r12 + rbx - 0xd0]
mov qword [rsp + 0x3b0], rax
mov rax, qword [r12 + rbx - 0xc0]
mov qword [rsp + 0x58], rax
mov rax, qword [r12 + rbx - 0xb8]
mov qword [rsp + 0x3b8], rax
mov rax, qword [r12 + rbx - 0xa0]
mov qword [rsp + 0x48], rax
mov rax, qword [r12 + rbx - 0x98]
mov qword [rsp + 0x3c0], rax
mov rax, rsi
mov rsi, qword [r12 + rbx - 0x60]
mov qword [r12 + rbx - 0x158], rax
lea rcx, [r12 + rbx]
add rcx, 0xfffffffffffffeb0
mov r8d, 0xd8
lea rdx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov qword [r12 + rbx - 0x78], rbp
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [r12 + rbx - 0x70], xmm0
movdqu xmmword [r12 + rbx - 0x60], xmm1
movdqu xmmword [r12 + rbx - 0x50], xmm2
movups xmmword [r12 + rbx - 0x40], xmm3
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [r12 + rbx - 0x30], xmm0
movaps xmm0, xmmword [rsp + 0x200]
movups xmmword [r12 + rbx - 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x210]
movdqu xmmword [r12 + rbx - 0x10], xmm0
cmp r15, 2
movabs rbp, 0x8000000000000000
je 0x14000b0f0
mov rbx, rsi
cmp qword [rsp + 0x3d0], 0
je 0x14000b44f
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x3c8]
call rdi
test r13, r13
mov r15, qword [rsp + 0x60]
mov r12, qword [rsp + 0xb0]
je 0x14000b490
lea rsi, [r12 + 8]
jmp 0x14000b479
add rsi, 0x20
dec r13
je 0x14000b490
cmp qword [rsi - 8], 0
je 0x14000b470
mov r8, qword [rsi]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000b470
cmp qword [rsp + 0x248], 0
je 0x14000b4a9
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, r12
call rdi
mov rax, qword [rsp + 0x1a0]
shl rax, 1
test rax, rax
jne 0x14000b4d0
mov rax, qword [rsp + 0xb8]
shl rax, 1
test rax, rax
jne 0x14000b4f3
test r14, r14
jne 0x14000b50b
jmp 0x14000b540
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x3a8]
call rdi
mov rax, qword [rsp + 0xb8]
shl rax, 1
test rax, rax
je 0x14000b4c9
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x3b0]
call rdi
test r14, r14
je 0x14000b540
lea rsi, [r15 + 8]
jmp 0x14000b529
add rsi, 0x20
dec r14
je 0x14000b540
cmp qword [rsi - 8], 0
je 0x14000b520
mov r8, qword [rsi]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000b520
cmp qword [rsp + 0x1a8], 0
je 0x14000b559
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, r15
call rdi
mov rax, qword [rsp + 0x58]
shl rax, 1
test rax, rax
jne 0x14000b57d
mov rax, qword [rsp + 0x48]
shl rax, 1
test rax, rax
jne 0x14000b59d
test rbx, rbx
jne 0x14000b5b9
jmp 0x14000b0f0
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x3b8]
call rdi
mov rax, qword [rsp + 0x48]
shl rax, 1
test rax, rax
je 0x14000b573
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x3c0]
call rdi
test rbx, rbx
je 0x14000b0f0
lock dec qword [rbx]
jne 0x14000b0f0
mov rcx, rbx
call fcn.14001ad70
jmp 0x14000b0f0
movzx eax, byte [r12 + r8]
test al, al
js 0x14000b01b
movdqa xmm0, xmmword [r12]
pmovmskb eax, xmm0
tzcnt r8d, eax
movzx eax, byte [r12 + r8]
jmp 0x14000b01b
lea rcx, [rsp + 0x2d0]
lea rdx, [rsp + 0x2f0]
mov rbx, rax
call fcn.140022060
mov rax, rbx
jmp 0x14000b1c5
sub qword [rsp + 0x240], r13
je 0x14000b7f7
mov rax, qword [rsp + 0x240]
shr rax, 3
movabs rsi, 0x82fa0be82fa0be83
imul rsi, rax
xor ebx, ebx
jmp 0x14000b65c
inc rbx
cmp rbx, rsi
je 0x14000b7f7
imul rax, rbx, 0x158
lea r15, [rax + r13]
cmp qword [r13 + rax + 0x10], 0
je 0x14000b67e
mov r8, qword [r15 + 0x18]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov r14, qword [r15 + 0x40]
test r14, r14
je 0x14000b6d0
mov r12, qword [r15 + 0x38]
add r12, 8
jmp 0x14000b6a9
add r12, 0x20
dec r14
je 0x14000b6d0
cmp qword [r12 - 8], 0
je 0x14000b6a0
mov r8, qword [r12]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000b6a0
cmp qword [r15 + 0x30], 0
je 0x14000b6e6
mov r8, qword [r15 + 0x38]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0x60]
cmp rax, rbp
je 0x14000b703
test rax, rax
je 0x14000b703
mov r8, qword [r15 + 0x68]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0x80]
cmp rax, rbp
je 0x14000b726
test rax, rax
je 0x14000b726
mov r8, qword [r15 + 0x88]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov r14, qword [r15 + 0x58]
test r14, r14
je 0x14000b770
mov r12, qword [r15 + 0x50]
add r12, 8
jmp 0x14000b749
add r12, 0x20
dec r14
je 0x14000b770
cmp qword [r12 - 8], 0
je 0x14000b740
mov r8, qword [r12]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000b740
cmp qword [r15 + 0x48], 0
je 0x14000b786
mov r8, qword [r15 + 0x50]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0x98]
cmp rax, rbp
je 0x14000b7a9
test rax, rax
je 0x14000b7a9
mov r8, qword [r15 + 0xa0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0xb8]
cmp rax, rbp
je 0x14000b7cc
test rax, rax
je 0x14000b7cc
mov r8, qword [r15 + 0xc0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0xf8]
test rax, rax
je 0x14000b650
lock dec qword [rax]
jne 0x14000b650
mov rcx, qword [r15 + 0xf8]
call fcn.14001ad70
jmp 0x14000b650
cmp qword [rsp + 0x3a0], 0
je 0x14000b819
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, qword [rsp + 0x390]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x2e8]
test rsi, rsi
je 0x14000bae1
mov rbx, qword [rsp + 0x2d0]
lea r14, [rbx + 0x10]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
pcmpeqd xmm6, xmm6
jmp 0x14000b861
lea eax, [r12 - 1]
and eax, r12d
dec rsi
je 0x14000bae1
test ax, ax
jne 0x14000b88d
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add rbx, 0xffffffffffffea00
add r14, 0x10
cmp eax, 0xffff
je 0x14000b870
not eax
mov r12d, eax
tzcnt eax, r12d
neg rax
imul r13, rax, 0x160
cmp byte [rbx + r13 - 4], 0
mov byte [rbx + r13 - 4], 0
jne 0x14000b850
add r13, rbx
mov rax, qword [rsp + 0x2d0]
mov rcx, rax
sub rcx, r13
sar rcx, 5
movabs rdx, 0x2e8ba2e8ba2e8ba3
imul rcx, rdx
lea rdx, [rcx - 0x10]
and rdx, qword [rsp + 0x2d8]
movdqu xmm0, xmmword [rax + rdx]
pcmpeqb xmm0, xmm6
pmovmskb r8d, xmm0
test r8d, r8d
je 0x14000b8fa
bsr r8w, r8w
xor r8d, 0xf
jmp 0x14000b8ff
mov r8w, 0x10
movdqu xmm0, xmmword [rax + rcx]
pcmpeqb xmm0, xmm6
pmovmskb r9d, xmm0
or r9d, 0x10000
tzcnt r9d, r9d
add r8d, r9d
mov r9b, 0x80
cmp r8w, 0xf
ja 0x14000b931
inc qword [rsp + 0x2e0]
mov r9b, 0xff
mov byte [rax + rcx], r9b
mov byte [rax + rdx + 0x10], r9b
dec qword [rsp + 0x2e8]
cmp qword [r13 - 0x148], 0
je 0x14000b95e
mov r8, qword [r13 - 0x140]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rbp, qword [r13 - 0x118]
test rbp, rbp
je 0x14000b9a0
mov r15, qword [r13 - 0x120]
add r15, 8
jmp 0x14000b989
add r15, 0x20
dec rbp
je 0x14000b9a0
cmp qword [r15 - 8], 0
je 0x14000b980
mov r8, qword [r15]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000b980
cmp qword [r13 - 0x128], 0
je 0x14000b9bc
mov r8, qword [r13 - 0x120]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xf8]
movabs r15, 0x8000000000000000
cmp rax, r15
je 0x14000b9e9
test rax, rax
je 0x14000b9e9
mov r8, qword [r13 - 0xf0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xd8]
cmp rax, r15
je 0x14000ba0c
test rax, rax
je 0x14000ba0c
mov r8, qword [r13 - 0xd0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rbp, qword [r13 - 0x100]
test rbp, rbp
je 0x14000ba50
mov r15, qword [r13 - 0x108]
add r15, 8
jmp 0x14000ba39
add r15, 0x20
dec rbp
je 0x14000ba50
cmp qword [r15 - 8], 0
je 0x14000ba30
mov r8, qword [r15]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
jmp 0x14000ba30
cmp qword [r13 - 0x110], 0
je 0x14000ba6c
mov r8, qword [r13 - 0x108]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xc0]
movabs r15, 0x8000000000000000
cmp rax, r15
je 0x14000ba99
test rax, rax
je 0x14000ba99
mov r8, qword [r13 - 0xb8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xa0]
cmp rax, r15
je 0x14000babc
test rax, rax
je 0x14000babc
mov r8, qword [r13 - 0x98]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0x60]
test rax, rax
je 0x14000b850
lock dec qword [rax]
jne 0x14000b850
mov rcx, qword [r13 - 0x60]
call fcn.14001ad70
jmp 0x14000b850
cmp qword [rsp + 0x228], 0
je 0x14000bb03
mov r8, qword [rsp + 0x230]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbp, qword [rsp + 0x2d0]
mov r14, qword [rsp + 0x2e8]
movdqa xmm0, xmmword [rbp]
pmovmskb esi, xmm0
not esi
lea rdi, [rbp + 0x10]
nop word cs:[rax + rax]
lea rbx, [rsp + 0xc0]
sub r14, 1
jb 0x14000bcdc
test si, si
jne 0x14000bb6d
nop word [rax + rax]
movdqa xmm0, xmmword [rdi]
pmovmskb esi, xmm0
add rbp, 0xffffffffffffea00
add rdi, 0x10
cmp esi, 0xffff
je 0x14000bb50
not esi
mov eax, esi
lea esi, [rax - 1]
and esi, eax
tzcnt eax, eax
neg rax
imul rax, rax, 0x160
lea rcx, [rax + rbp]
add rcx, 0xfffffffffffffea0
mov qword [rsp + 0x98], rcx
mov rdx, qword [rbp + rax - 0x140]
mov r8, qword [rbp + rax - 0x138]
mov rcx, rbx
call fcn.14000e8e0
test byte [rsp + 0xc0], 1
jne 0x14000bb38
movdqu xmm0, xmmword [rsp + 0xc8]
movdqu xmmword [rsp + 0x360], xmm0
lea rax, [rsp + 0x98]
mov qword [rsp + 0x1b0], rax
lea rax, [0x140006ca0]
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0x1c0], rax
lea rax, [0x1400176a0]
mov qword [rsp + 0x1c8], rax
lea rax, [0x140024838]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 3
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 2
lea rcx, [rsp + 0x68]
mov rdx, rbx
call fcn.140005ec0
mov r13, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
mov rax, qword [rsp + 0x268]
mov r12, qword [rsp + 0x278]
sub rax, r12
cmp rax, r15
jb 0x14000bcbf
mov rcx, qword [rsp + 0x270]
add rcx, r12
mov rdx, rbx
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add r12, r15
mov qword [rsp + 0x278], r12
test r13, r13
je 0x14000bb30
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000bb30
lea rcx, [rsp + 0x268]
mov rdx, r12
mov r8, r15
call fcn.140022fc0
mov r12, qword [rsp + 0x278]
jmp 0x14000bc7e
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x1c8], rax
movdqu xmm0, xmmword [rsp + 0x268]
movdqu xmmword [rsp + 0x1b8], xmm0
mov qword [rsp + 0x1b0], 0
mov rsi, qword [rsp + 0x2d8]
test rsi, rsi
movabs r13, 0x8000000000000000
je 0x14000bfb4
mov rdi, qword [rsp + 0x2e8]
test rdi, rdi
je 0x14000bf85
mov rbx, qword [rsp + 0x2d0]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
lea r14, [rbx + 0x10]
jmp 0x14000bd60
lea eax, [r15 - 1]
and eax, r15d
dec rdi
je 0x14000bf85
test ax, ax
jne 0x14000bd8d
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add rbx, 0xffffffffffffea00
add r14, 0x10
cmp eax, 0xffff
je 0x14000bd70
not eax
mov r15d, eax
tzcnt eax, r15d
neg rax
imul rax, rax, 0x160
lea r12, [rbx + rax]
cmp qword [rbx + rax - 0x148], 0
je 0x14000bdc5
mov r8, qword [r12 - 0x140]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [r12 - 0x118]
test r13, r13
je 0x14000be10
mov rbp, qword [r12 - 0x120]
add rbp, 8
jmp 0x14000bde9
add rbp, 0x20
dec r13
je 0x14000be10
cmp qword [rbp - 8], 0
je 0x14000bde0
mov r8, qword [rbp]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000bde0
cmp qword [r12 - 0x128], 0
je 0x14000be32
mov r8, qword [r12 - 0x120]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xf8]
movabs r13, 0x8000000000000000
cmp rax, r13
je 0x14000be65
test rax, rax
je 0x14000be65
mov r8, qword [r12 - 0xf0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xd8]
cmp rax, r13
je 0x14000be8e
test rax, rax
je 0x14000be8e
mov r8, qword [r12 - 0xd0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [r12 - 0x100]
test r13, r13
je 0x14000bee0
mov rbp, qword [r12 - 0x108]
add rbp, 8
jmp 0x14000beb9
add rbp, 0x20
dec r13
je 0x14000bee0
cmp qword [rbp - 8], 0
je 0x14000beb0
mov r8, qword [rbp]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000beb0
cmp qword [r12 - 0x110], 0
je 0x14000bf02
mov r8, qword [r12 - 0x108]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xc0]
movabs r13, 0x8000000000000000
cmp rax, r13
je 0x14000bf35
test rax, rax
je 0x14000bf35
mov r8, qword [r12 - 0xb8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xa0]
cmp rax, r13
je 0x14000bf5e
test rax, rax
je 0x14000bf5e
mov r8, qword [r12 - 0x98]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0x60]
test rax, rax
je 0x14000bd50
lock dec qword [rax]
jne 0x14000bd50
mov rcx, qword [r12 - 0x60]
call fcn.14001ad70
jmp 0x14000bd50
lea rax, [rsi + 1]
mov ecx, 0x160
mul rcx
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x14000bfb4
mov r8, qword [rsp + 0x2d0]
sub r8, rax
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x2a8]
cmp rax, r13
je 0x14000bfdd
test rax, rax
je 0x14000bfdd
mov r8, qword [rsp + 0x2b0]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x2a0]
test rsi, rsi
je 0x14000c079
mov rdi, qword [rsp + 0x298]
add rdi, 0x50
jmp 0x14000c009
add rdi, 0x70
dec rsi
je 0x14000c079
cmp qword [rdi - 0x50], 0
je 0x14000c023
mov r8, qword [rdi - 0x48]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rdi - 0x38], 0
je 0x14000c03d
mov r8, qword [rdi - 0x30]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rdi - 8]
cmp rax, r13
je 0x14000c05d
test rax, rax
je 0x14000c05d
mov r8, qword [rdi]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rdi - 0x20], 0
je 0x14000c000
mov r8, qword [rdi - 0x18]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000c000
cmp qword [rsp + 0x290], 0
je 0x14000c09b
mov r8, qword [rsp + 0x298]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x320]
test rsi, rsi
je 0x14000c270
movdqa xmm0, xmmword [rsi]
pmovmskb eax, xmm0
not eax
lea rdi, [rsi + 0x10]
mov rbx, qword [rsp + 0x338]
mov r14, qword [sym.imp.pdh.dll_PdhRemoveCounter]
jmp 0x14000c0f7
not eax
lea ebp, [rax - 1]
and ebp, eax
tzcnt eax, eax
shl eax, 5
mov rcx, rsi
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
mov eax, ebp
movabs r13, 0x8000000000000000
sub rbx, 1
jb 0x14000c12c
test ax, ax
jne 0x14000c0d2
nop word cs:[rax + rax]
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
add rsi, 0xfffffffffffffe00
add rdi, 0x10
cmp eax, 0xffff
je 0x14000c110
jmp 0x14000c0d0
mov rcx, qword [rsp + 0x358]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x14000c148
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x14000c16c
mov rcx, qword [rsp + 0x350]
lea rax, [rcx + 1]
cmp rax, 2
jae 0x14000c184
mov rsi, qword [rsp + 0x328]
test rsi, rsi
jne 0x14000c19b
jmp 0x14000c270
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x350]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x14000c15a
call qword [sym.imp.pdh.dll_PdhCloseQuery]
mov rsi, qword [rsp + 0x328]
test rsi, rsi
je 0x14000c270
mov rdi, qword [rsp + 0x338]
test rdi, rdi
je 0x14000c23b
mov rbx, qword [rsp + 0x320]
movdqa xmm0, xmmword [rbx]
pmovmskb r15d, xmm0
not r15d
lea r14, [rbx + 0x10]
jmp 0x14000c1e2
dec rdi
lea eax, [r15 - 1]
and eax, r15d
mov r15d, eax
test rdi, rdi
je 0x14000c23b
test r15w, r15w
jne 0x14000c211
nop dword [rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r15d, xmm0
add rbx, 0xfffffffffffffe00
add r14, 0x10
cmp r15d, 0xffff
je 0x14000c1f0
not r15d
tzcnt ecx, r15d
shl ecx, 5
mov rax, rbx
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x14000c1d0
mov r8, qword [rax - 0x18]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000c1d0
movabs rax, 0x7c1f07c1f07c1ef
cmp rsi, rax
je 0x14000c270
shl rsi, 5
mov rax, qword [rsp + 0x320]
neg rsi
lea r8, [rax + rsi]
add r8, 0xffffffffffffffe0
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xc0]
lea rsi, [rsp + 0x3f0]
lea r8, [rsp + 0x430]
lea rdi, [rsp + 0x1b0]
mov rdx, rsi
mov r9, rdi
call fcn.140008940
cmp qword [rsp + 0xc0], 0
je 0x14000c2e2
cmp qword [rsp + 0xc8], 0
je 0x14000c2c0
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x14000c2e2
cmp qword [rsp + 0xd0], 0
je 0x14000c2e2
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqa xmm0, xmmword [rsp + 0x3f0]
movdqa xmm1, xmmword [rsp + 0x400]
movdqa xmm2, xmmword [rsp + 0x410]
movdqa xmmword [rsp + 0x510], xmm0
movdqa xmmword [rsp + 0x520], xmm1
movdqa xmmword [rsp + 0x530], xmm2
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xd0], 0
lea rcx, [rsp + 0x510]
lea rbx, [rsp + 0x448]
lea r8, [rsp + 0xc0]
mov rdx, rbx
call fcn.1400063f0
lea r14, [rsp + 0xc0]
mov r8d, 0xc8
mov rcx, r14
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x290]
mov rdx, r14
call fcn.1400056b0
mov rbx, qword [rsp + 0x290]
cmp rbx, 5
jne 0x14000c584
mov rax, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x110]
mov rbx, qword [rsp + 0x118]
movdqu xmm6, xmmword [rsp + 0x120]
lea rcx, [r13 + 1]
mov qword [rsp + 0x108], rcx
cmp rax, r13
jne 0x14000ca8d
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x14000c400
mov r8, qword [rsp + 0xd8]
lea rax, [rax*8 + 0x17]
and rax, 0xfffffffffffffff0
sub r8, rax
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rsp + 0xd0]
test rdi, rdi
je 0x14000c4f7
mov r14, qword [rsp + 0xc8]
add r14, 0x20
jmp 0x14000c430
add r14, 0xf0
dec rdi
je 0x14000c4f7
cmp qword [r14 + 0xc0], 0
je 0x14000c450
mov r8, qword [r14 + 0xb8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [r14 + 0x28], 0
je 0x14000c46a
mov r8, qword [r14 + 0x20]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [r14 + 0x38], 0
je 0x14000c484
mov r8, qword [r14 + 0x30]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r14 + 0x60]
test rax, rax
je 0x14000c49c
lock dec qword [rax]
jne 0x14000c49c
mov rcx, qword [r14 + 0x60]
call fcn.140008420
mov rax, qword [r14 + 0x68]
test rax, rax
je 0x14000c4b4
lock dec qword [rax]
jne 0x14000c4b4
mov rcx, qword [r14 + 0x68]
call fcn.140008420
cmp qword [r14 + 0x48], 0
je 0x14000c4ce
mov r8, qword [r14 + 0x40]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [r14 + 0x88]
cmp qword [r14], 0
je 0x14000c420
mov r8, qword [r14 + 8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000c420
cmp qword [rsp + 0xc0], 0
je 0x14000c519
mov r8, qword [rsp + 0xc8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x178], 0
je 0x14000c53b
mov r8, qword [rsp + 0x170]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp rsi, r13
jne 0x14000c76b
movzx eax, byte [0x14002e118]
mov edx, 0x18
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov qword [rax], rbx
movdqu xmmword [rax + 8], xmm6
mov rcx, qword [rsp + 0x398]
mov qword [rcx + 8], rax
lea rax, [0x140024710]
mov qword [rcx + 0x10], rax
jmp 0x14000c77c
movdqu xmm6, xmmword [rsp + 0x298]
lea rax, [r13 + 1]
cmp qword [rsp + 0x108], rax
je 0x14000c9ec
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0xc0]
call fcn.1400056b0
cmp dword [rsp + 0x68], 5
je 0x14000c983
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x1c0], rax
movdqu xmm0, xmmword [rsp + 0x68]
movdqa xmmword [rsp + 0x1b0], xmm0
mov qword [rsp + 0x3f0], rdi
lea rax, [0x1400057e0]
mov qword [rsp + 0x3f8], rax
lea rax, [0x140024598]
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], 1
mov qword [rsp + 0x2b0], 0
mov qword [rsp + 0x2a0], rsi
mov qword [rsp + 0x2a8], 1
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x78]
test rsi, rsi
jne 0x14000c74c
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x88]
cmp eax, 1
jne 0x14000ca7f
mov eax, dword [0x14002e11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x80]
test rcx, rcx
jne 0x14000c733
movzx eax, byte [0x14002e118]
mov edx, 0x38
xor ecx, ecx
call fcn.140017130
test rax, rax
je 0x14000ca8d
mov rcx, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 2
mov rax, qword [0x14002e100]
cmp rax, 0xffffffffffffffff
je 0x14000ca8d
lea rdx, [rax + 1]
lock cmpxchg qword [0x14002e100], rdx
jne 0x14000c6d0
mov qword [rcx + 0x28], rdx
mov byte [rcx + 0x30], 0
mov eax, dword [0x14002e11c]
mov r8, qword gs:[0x58]
mov rax, qword [r8 + rax*8]
mov qword [rax + 0x78], rdx
cmp qword [rax + 0x80], 0
jne 0x14000ca8d
mov eax, dword [0x14002e11c]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov qword [rax + 0x80], rcx
lock inc qword [rcx]
jle 0x14000ca8d
mov rsi, qword [rcx + 0x28]
lock dec qword [rcx]
jne 0x14000c74c
call fcn.140017710
mov rax, qword [0x14002e0d0]
cmp rsi, rax
jne 0x14000c7ac
mov eax, dword [0x14002e0d8]
cmp eax, 0xffffffff
je 0x14000ca8d
inc eax
jmp 0x14000c7ca
mov rcx, qword [rsp + 0x398]
mov qword [rcx + 8], rbx
movq qword [rcx + 0x10], xmm6
mov qword [rcx], rsi
movaps xmm6, xmmword [rsp + 0x540]
movaps xmm7, xmmword [rsp + 0x550]
movaps xmm8, xmmword [rsp + 0x560]
add rsp, 0x578
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x14002e0dc], cl
jne 0x14000ca6e
mov qword [0x14002e0d0], rsi
mov eax, 1
mov dword [0x14002e0d8], eax
lea rax, [0x14002e0d0]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x360], rax
mov qword [rsp + 0x368], 0
lea rdx, [0x140029a58]
lea rcx, [rsp + 0x360]
lea r8, [rsp + 0x290]
call fcn.14000cc00
mov rsi, qword [rsp + 0x368]
test al, al
je 0x14000c83f
test rsi, rsi
je 0x14000ca8d
mov rcx, qword [rsp + 0x98]
dec dword [rcx + 8]
jne 0x14000c8c0
jmp 0x14000c8a6
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000c897
mov rdi, qword [rsi - 1]
mov r14, qword [rsi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000c85e
mov rcx, rdi
call rax
dec rsi
cmp qword [r14 + 8], 0
je 0x14000c885
cmp qword [r14 + 0x10], 0x11
jb 0x14000c873
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov rcx, qword [rsp + 0x98]
dec dword [rcx + 8]
jne 0x14000c8c0
mov qword [rcx], 0
xor eax, eax
xchg byte [rcx + 0xc], al
cmp al, 2
jne 0x14000c8c0
add rcx, 0xc
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000c918
mov rdi, qword [rsi - 1]
mov r14, qword [rsi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000c8df
mov rcx, rdi
call rax
dec rsi
cmp qword [r14 + 8], 0
je 0x14000c906
cmp qword [r14 + 0x10], 0x11
jb 0x14000c8f4
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x1b0], 0
jne 0x14000c983
mov rsi, qword [rsp + 0x1b8]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000c983
mov rdi, qword [rsi - 1]
mov r14, qword [rsi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000c94a
mov rcx, rdi
call rax
dec rsi
cmp qword [r14 + 8], 0
je 0x14000c971
cmp qword [r14 + 0x10], 0x11
jb 0x14000c95f
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14002e0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x108]
mov rcx, rax
neg rcx
jo 0x14000c9c5
movabs rcx, 0x8000000000000001
cmp rax, rcx
je 0x14000c9ec
mov esi, 0x20
test rax, rax
je 0x14000c9ca
mov r8, qword [rsp + 0x110]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000c9ca
mov esi, 8
cmp qword [rsp + rsi + 0x108], 0
je 0x14000c9ec
mov r8, qword [rsp + rsi + 0x110]
mov rcx, qword [0x14002e0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, r13
mov rax, qword [rsp + 0xe0]
test rax, rax
jne 0x14000c3da
jmp 0x14000c400
mov qword [rsp + 0x20], 0x158
lea rcx, [rsp + 0x68]
mov r9d, 8
mov rsi, r8
mov r8, rax
call fcn.1400214a0
mov r8, rsi
jmp 0x14000aea9
cmp r8, rax
jbe 0x14000a4ff
jmp 0x14000ca8d
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0xc0]
mov r9d, 1
mov rdx, r12
mov r8, rbx
call fcn.1400214a0
mov rcx, qword [rsp + 0xc8]
mov r12, qword [rsp + 0xd0]
jmp 0x140009934
lea rcx, [0x14002e0dc]
call fcn.1400219a0
jmp 0x14000c7be
test eax, eax
jne 0x14000ca8d
call fcn.140021570
jmp 0x14000c670
ud2