Function at 0x140088800
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using base64
Encode data using xor
Enumerate files on windows
Generate random numbers using a mersenne twister
Generate random numbers via winapi
Get common file path
Get file size
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f20]
mov eax, 0x3020
call fcn.1401fcf20
sub rsp, rax
movaps xmmword [rsp + 0x3010], xmm6
movaps xmmword [rsp + 0x3000], xmm7
movaps xmmword [rsp + 0x2ff0], xmm8
mov rsi, rdx
mov rdi, rcx
xor r12d, r12d
mov dword [rbp + 0x4d8], r12d
mov qword [rcx], r12
mov qword [rcx + 8], r12
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], r12
mov qword [rcx + 0x20], r12
mov qword [rcx + 0x28], r12
mov qword [rcx + 0x30], r12
mov qword [rcx + 0x38], r12
mov qword [rcx + 0x40], r12
mov dword [rcx + 0x4c], r12d
mov qword [rcx + 0x50], r12
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x60], r12
mov qword [rcx + 0x68], r12
mov qword [rcx + 0x70], r12
lea rbx, [rcx + 0x78]
mov qword [rsp + 0x40], rbx
mov qword [rbx], r12
mov qword [rbx + 8], r12
mov ecx, 0x98
call fcn.1401fcb6c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
xorps xmm0, xmm0
movups xmmword [rdi + 0x88], xmm0
mov qword [rdi + 0x98], r12
mov qword [rdi + 0xa0], 7
mov word [rdi + 0x88], r12w
movups xmmword [rdi + 0xa8], xmm0
mov qword [rdi + 0xb8], r12
mov qword [rdi + 0xc0], 7
mov word [rdi + 0xa8], r12w
movups xmmword [rdi + 0xc8], xmm0
mov qword [rdi + 0xd8], r12
mov qword [rdi + 0xe0], 7
mov word [rdi + 0xc8], r12w
movups xmmword [rdi + 0xf0], xmm0
mov qword [rdi + 0x100], r12
mov qword [rdi + 0x108], 7
mov word [rdi + 0xf0], r12w
movups xmmword [rdi + 0x110], xmm0
mov qword [rdi + 0x120], r12
mov qword [rdi + 0x128], 7
mov word [rdi + 0x110], r12w
mov qword [rdi + 0x148], r12
mov qword [rdi + 0x150], r12
mov qword [rdi + 0x158], r12
mov qword [rdi + 0x160], r12
mov qword [rdi + 0x168], r12
mov qword [rdi + 0x170], r12
movups xmmword [rdi + 0x178], xmm0
mov qword [rdi + 0x188], r12
mov qword [rdi + 0x190], 7
mov word [rdi + 0x178], r12w
mov qword [rdi + 0x198], r12
mov qword [rdi + 0x1a0], r12
mov qword [rdi + 0x1a8], r12
movups xmmword [rdi + 0x1b0], xmm0
mov qword [rdi + 0x1c0], r12
mov qword [rdi + 0x1c8], 7
mov word [rdi + 0x1b0], r12w
mov qword [rdi + 0x1d0], r12
movups xmmword [rdi + 0x1d8], xmm0
mov qword [rdi + 0x1e8], r12
mov qword [rdi + 0x1f0], 7
mov word [rdi + 0x1d8], r12w
movups xmmword [rdi + 0x1f8], xmm0
mov qword [rdi + 0x208], r12
mov qword [rdi + 0x210], 7
mov word [rdi + 0x1f8], r12w
movups xmmword [rdi + 0x218], xmm0
mov qword [rdi + 0x228], r12
mov qword [rdi + 0x230], 7
mov word [rdi + 0x218], r12w
movups xmmword [rdi + 0x238], xmm0
mov qword [rdi + 0x248], r12
mov qword [rdi + 0x250], 7
mov word [rdi + 0x238], r12w
movups xmmword [rdi + 0x258], xmm0
mov qword [rdi + 0x268], r12
mov qword [rdi + 0x270], 7
mov word [rdi + 0x258], r12w
movups xmmword [rdi + 0x278], xmm0
mov qword [rdi + 0x288], r12
mov qword [rdi + 0x290], 7
mov word [rdi + 0x278], r12w
mov qword [rdi + 0x298], r12
mov qword [rdi + 0x2a0], r12
mov qword [rdi + 0x2a8], r12
mov qword [rdi + 0x2b0], r12
mov qword [rdi + 0x2d8], r12
mov qword [rdi + 0x2e0], r12
mov qword [rdi + 0x2e8], r12
mov qword [rdi + 0x2f0], r12
mov qword [rdi + 0x2f8], r12
mov qword [rdi + 0x300], r12
mov qword [rdi + 0x308], r12
mov qword [rdi + 0x310], r12
mov qword [rdi + 0x318], r12
mov qword [rdi + 0x320], r12
lea r15, [rdi + 0x540]
mov qword [rsp + 0x40], r15
lea rcx, [r15 + 8]
call fcn.14007add0
nop
lea rcx, [r15 + 0x20]
call fcn.14007add0
nop
mov qword [rdi + 0x5a8], rsi
mov qword [rdi + 0x5b0], r12
mov qword [rdi + 0x5b8], r12
lea rcx, [rdi + 0x5d8]
mov rdx, qword [rbp + 0x2f90]
call fcn.14007ac50
nop
mov byte [rdi + 0x5fc], r12b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rdi + 0x600], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov qword [0x140217038], rdi
mov qword [rdi + 0x50], r12
mov rbx, qword [rdi + 0x58]
mov qword [rdi + 0x58], r12
lea r14, [r12 - 1]
test rbx, rbx
je 0x140088bf0
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140088bf0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140088bf0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov eax, dword [rbp + 0x2f80]
mov dword [rdi + 0x538], eax
mov ecx, 0xe8
call fcn.1401fcb6c
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140088c43
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1400035d8]
mov qword [rbx], rax
lea rcx, [rbx + 0x10]
call 0x140076950
jmp 0x140088c46
mov rbx, r12
lea rax, [rbx + 0x10]
mov qword [rdi + 0x318], rax
mov rsi, qword [rdi + 0x320]
mov qword [rdi + 0x320], rbx
test rsi, rsi
je 0x140088c9b
mov eax, r14d
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x140088c9b
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov eax, r14d
lock xadd dword [rsi + 0xc], eax
cmp eax, 1
jne 0x140088c9b
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 8]
mov dword [rdi + 0xe8], r12d
mov rbx, qword [rdi + 0x70]
mov qword [rdi + 0x70], r12
test rbx, rbx
je 0x140088cc8
mov rcx, rbx
call fcn.140189200
mov edx, 0xf8
mov rcx, rbx
call fcn.1401fcba8
mov byte [rdi + 0x328], 0
call fcn.140199500
mov rbx, rax
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x1268]
mov qword [rsp + 0x40], rax
lea rax, [0x1400037e8]
mov qword [rbp + 0x1268], rax
lea rax, [rbp + 0x1268]
mov qword [rbp + 0x12a0], rax
mov rcx, rbx
call fcn.14007eb10
nop
lea r9, [rbp + 0x1268]
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.1401988a0
mov rcx, rbx
call fcn.1401994f0
mov rdx, rax
mov r8d, 0x41015a5c
mov rcx, rbx
call fcn.140199350
movabs rcx, 0x852396afe3269
xor rax, rcx
mov qword [0x140216080], rax
mov rcx, rbx
call fcn.14007eb10
mov rdx, rax
mov r8d, 0xbaab0208
mov rcx, rbx
call fcn.140199350
movabs rcx, 0xc562983199256
xor rax, rcx
mov qword [0x140216090], rax
mov dword [rbp + 0x620], r12d
mov dword [rbp - 0xa], 0xf6f6f6f6
mov dword [rbp - 4], 0xff79ff76
mov dword [rbp], 0xff79ff71
mov byte [rbp - 6], 0xf6
mov dword [rbp + 4], 0xff66
mov rdx, r12
movzx eax, word [rbp + rdx*2 - 4]
movzx ecx, byte [rbp + rdx - 0xa]
add cx, ax
mov word [rbp + rdx*2 - 4], cx
mov byte [rbp + rdx - 0xa], 0
inc rdx
cmp rdx, 5
jb 0x140088da6
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
mov qword [rbp + 0x5d0], r12
mov qword [rbp + 0x5d8], r12
lea rax, [rbp - 4]
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x140088de9
lea rdx, [rbp - 4]
lea rcx, [rbp + 0x5c0]
call fcn.140030c50
nop
mov rax, r12
mov byte [rbp + rax - 4], 0
inc rax
cmp rax, 0xa
jb 0x140088e0c
mov ebx, dword [rdi + 0x538]
lea r9, [rbp + 0x12d2]
nop dword [rax]
sub r9, 2
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub bx, cx
add bx, 0x30
mov word [r9], bx
mov ebx, edx
test edx, edx
jne 0x140088e2f
xorps xmm0, xmm0
movups xmmword [rbp + 0x648], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x658], xmm1
lea rax, [rbp + 0x12d2]
cmp r9, rax
jne 0x140088ea1
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x658], xmm0
mov word [rbp + 0x648], r12w
jmp 0x140088ebe
lea r8, [rbp + 0x12d2]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rbp + 0x648]
call fcn.14007ef10
nop
mov rsi, qword [rbp + 0x658]
lea r9, [rbp + 0x648]
cmp qword [rbp + 0x660], 8
cmovae r9, qword [rbp + 0x648]
mov r14, qword [rbp + 0x5d0]
mov rcx, qword [rbp + 0x5d8]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x140088f35
lea rax, [r14 + rsi]
mov qword [rbp + 0x5d0], rax
lea rbx, [rbp + 0x5c0]
cmp rcx, 8
cmovae rbx, qword [rbp + 0x5c0]
lea rcx, [rbx + r14*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + rsi]
mov word [rbx + rax*2], r12w
jmp 0x140088f52
mov qword [rsp + 0x20], rsi
movzx r8d, byte [rbp + 0x2f60]
mov rdx, rsi
lea rcx, [rbp + 0x5c0]
call fcn.140034ef0
nop
mov rdx, qword [rbp + 0x660]
cmp rdx, 8
jb 0x140088fa7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x648]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140088fa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140088fa2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x658], xmm0
mov word [rbp + 0x648], r12w
lea rcx, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], 8
cmovae rcx, qword [rbp + 0x5c0]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x120089
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14008918b
mov dword [rbp + 8], 0xf6f6f6f6
mov dword [rbp + 0xe], 0xff7cff4f
mov dword [rbp + 0x12], 0xff79ff7c
mov byte [rbp + 0xc], 0xf6
mov dword [rbp + 0x16], 0xff7c
mov rdx, r12
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0xe]
movzx ecx, byte [rbp + rdx + 8]
add cx, ax
mov word [rbp + rdx*2 + 0xe], cx
mov byte [rbp + rdx + 8], 0
inc rdx
cmp rdx, 5
jb 0x14008902d
mov dword [rbp + 0x558], 0xf6f6f6f6
mov dword [rbp + 0x56e], 0xff6bff50
mov dword [rbp + 0x572], 0xff76ff73
mov dword [rbp + 0x55c], 0xf6f6f6f6
mov dword [rbp + 0x576], 0xff6eff6f
mov dword [rbp + 0x57a], 0xff7eff2a
mov dword [rbp + 0x560], 0xf6f6f6f6
mov dword [rbp + 0x57e], 0xff2aff79
mov dword [rbp + 0x582], 0xff79ff76
mov dword [rbp + 0x564], 0xf6f6f6f6
mov dword [rbp + 0x586], 0xff6eff6b
mov dword [rbp + 0x58a], 0xff73ff2a
mov dword [rbp + 0x568], 0xf6f6f6f6
mov dword [rbp + 0x58e], 0xff6bff77
mov dword [rbp + 0x592], 0xff6fff71
xor eax, eax
mov word [rbp + 0x596], ax
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x56e]
movzx ecx, byte [rbp + rdx + 0x558]
add cx, ax
mov word [rbp + rdx*2 + 0x56e], cx
mov byte [rbp + rdx + 0x558], 0
inc rdx
cmp rdx, 0x14
jb 0x140089101
mov r9d, 0x10
lea r8, [rbp + 0xe]
lea rdx, [rbp + 0x56e]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, r12
nop dword [rax + rax]
mov byte [rbp + rax + 0x56e], 0
inc rax
cmp rax, 0x28
jb 0x140089155
mov byte [rbp + r12 + 0xe], 0
inc r12
cmp r12, 0xa
jb 0x14008916a
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov rcx, qword [rdi + 0x318]
mov dword [rcx + 0x80], eax
mov rax, qword [rdi + 0x318]
mov edx, dword [rax + 0x80]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rcx, qword [rdi + 0x318]
mov qword [rcx + 0x78], rax
mov rax, qword [rdi + 0x318]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x620]
mov r8d, dword [rax + 0x80]
mov rdx, qword [rax + 0x78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x5d8]
cmp rdx, 8
jb 0x140089253
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008924e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008924e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
mov qword [rbp + 0x5d0], r12
mov qword [rbp + 0x5d8], 7
mov word [rbp + 0x5c0], r12w
mov dword [rbp + 0x9c0], 1
mov qword [rbp + 0x9c8], r12
mov qword [rbp + 0x9d0], r12
xor r8d, r8d
lea rdx, [rbp + 0x9c0]
lea rcx, [rdi + 0x5b0]
call sub.gdiplus.dll_GdiplusStartup
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp + 0x5a0], xmm0
mov eax, dword [rdi + 0x538]
mov rdx, r12
test eax, eax
je 0x1400896f7
cmp eax, 2
je 0x140089427
mov dword [rbp + 0x1a], 0xf6f6f6f6
mov dword [rbp + 0x20], 0xff7cff4f
mov dword [rbp + 0x24], 0xff79ff7c
mov byte [rbp + 0x1e], 0xf6
mov dword [rbp + 0x28], 0xff7c
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0x20]
movzx ecx, byte [rbp + rdx + 0x1a]
add cx, ax
mov word [rbp + rdx*2 + 0x20], cx
mov byte [rbp + rdx + 0x1a], 0
inc rdx
cmp rdx, 5
jb 0x1400892e9
mov dword [rbp + 0x424], 0xf6f6f6f6
mov dword [rbp + 0x436], 0xff78ff53
mov dword [rbp + 0x43a], 0xff6bff80
mov dword [rbp + 0x428], 0xf6f6f6f6
mov dword [rbp + 0x43e], 0xff73ff76
mov dword [rbp + 0x442], 0xff2aff6e
mov dword [rbp + 0x42c], 0xf6f6f6f6
mov dword [rbp + 0x446], 0xff6bff7a
mov dword [rbp + 0x44a], 0xff6bff7c
mov dword [rbp + 0x430], 0xf6f6f6f6
mov dword [rbp + 0x44e], 0xff6fff77
mov dword [rbp + 0x452], 0xff6fff7e
mov byte [rbp + 0x434], 0xf6
mov dword [rbp + 0x456], 0xff7c
mov rdx, r12
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0x436]
movzx ecx, byte [rbp + rdx + 0x424]
add cx, ax
mov word [rbp + rdx*2 + 0x436], cx
mov byte [rbp + rdx + 0x424], 0
inc rdx
cmp rdx, 0x11
jb 0x14008939d
mov r9d, 0x10
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x436]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, r12
nop dword [rax + rax]
mov byte [rbp + rax + 0x436], 0
inc rax
cmp rax, 0x22
jb 0x1400893f1
mov byte [rbp + r12 + 0x20], 0
inc r12
cmp r12, 0xa
jb 0x140089406
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [r15], 1
mov dword [rdi + 0x578], r12d
mov dword [rbp - 0x1c], 0xf6f6f6f6
mov dword [rbp - 0x16], 0xff53ff5c
mov dword [rbp - 0x12], 0xff55ff50
mov byte [rbp - 0x18], 0xf6
mov dword [rbp - 0xe], 0xff41
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x16]
movzx ecx, byte [rbp + rdx - 0x1c]
add cx, ax
mov word [rbp + rdx*2 - 0x16], cx
mov byte [rbp + rdx - 0x1c], 0
inc rdx
cmp rdx, 5
jb 0x140089459
movups xmm0, xmmword [rbp - 0x1c]
movaps xmmword [rbp + 0x980], xmm0
movzx eax, word [rbp - 0xc]
mov word [rbp + 0x990], ax
lea rdx, [rbp + 0x986]
lea rcx, [rbp + 0xbf8]
call fcn.14007ac50
nop
mov rax, r12
nop dword [rax]
mov byte [rbp + rax + 0x986], 0
inc rax
cmp rax, 0xa
jb 0x1400894ad
lea rcx, [rdi + 0x548]
lea rdx, [rbp + 0xbf8]
call fcn.14007b140
nop
lea rcx, [rbp + 0xbf8]
call fcn.14007b070
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax - 0x16], 0
inc rax
cmp rax, 0xa
jb 0x1400894f1
mov dword [rbp + 0xb4], 0xf6f6f6f6
mov dword [rbp + 0xc6], 0xff7eff72
mov dword [rbp + 0xca], 0xff7aff7e
mov dword [rbp + 0xb8], 0xf6f6f6f6
mov dword [rbp + 0xce], 0xff44ff7d
mov dword [rbp + 0xd2], 0xff39ff39
mov dword [rbp + 0xbc], 0xf6f6f6f6
mov dword [rbp + 0xd6], 0xff73ff7c
mov dword [rbp + 0xda], 0xff75ff70
mov dword [rbp + 0xc0], 0xf6f6f6f6
mov dword [rbp + 0xde], 0xff38ff41
mov dword [rbp + 0xe2], 0xff79ff6d
mov byte [rbp + 0xc4], 0xf6
mov dword [rbp + 0xe6], 0xff77
mov rdx, r12
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0xc6]
movzx ecx, byte [rbp + rdx + 0xb4]
add cx, ax
mov word [rbp + rdx*2 + 0xc6], cx
mov byte [rbp + rdx + 0xb4], 0
inc rdx
cmp rdx, 0x11
jb 0x140089595
movups xmm0, xmmword [rbp + 0xb4]
movaps xmmword [rbp + 0xac0], xmm0
movups xmm1, xmmword [rbp + 0xc4]
movaps xmmword [rbp + 0xad0], xmm1
movups xmm0, xmmword [rbp + 0xd4]
movaps xmmword [rbp + 0xae0], xmm0
mov eax, dword [rbp + 0xe4]
mov dword [rbp + 0xaf0], eax
movzx eax, word [rbp + 0xe8]
mov word [rbp + 0xaf4], ax
lea rdx, [rbp + 0xad2]
lea rcx, [rbp + 0xbe0]
call fcn.14007ac50
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0xad2], 0
inc rax
cmp rax, 0x22
jb 0x140089629
lea rcx, [rdi + 0x560]
lea rdx, [rbp + 0xbe0]
call fcn.14007b140
nop
lea rcx, [rbp + 0xbe0]
call fcn.14007b070
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0xc6], 0
inc rax
cmp rax, 0x22
jb 0x14008966d
mov word [rdi + 0x57c], 0x100
mov byte [rdi + 0x57e], 1
mov dword [rsp + 0x50], 0xff46e146
mov esi, 0xff242f3d
mov dword [rbp - 0x2c], esi
mov dword [rbp - 0x28], esi
mov dword [rbp - 0x24], 0xff555555
mov dword [rbp - 0x20], 0x64ff64ff
mov r14d, 0xffa43bff
mov r15d, 0x16502ff
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x84], 0x96
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x88], 0x1f4
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x8c], 0x190
jmp 0x140089a8f
mov dword [r15], r12d
mov rcx, 0xffffffffffffffff
mov dword [rdi + 0x578], ecx
mov dword [rbp + 0x108], 0xf6f6f6f6
mov dword [rbp + 0x116], 0xff78ff4f
mov dword [rbp + 0x11a], 0xff73ff71
mov dword [rbp + 0x10c], 0xf6f6f6f6
mov dword [rbp + 0x11e], 0xff6fff78
mov dword [rbp + 0x122], 0xff81ff59
mov dword [rbp + 0x110], 0xf6f6f6f6
mov dword [rbp + 0x126], 0xff73ff78
mov dword [rbp + 0x12a], 0xff71ff78
xor eax, eax
mov word [rbp + 0x12e], ax
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0x116]
movzx ecx, byte [rbp + rdx + 0x108]
add cx, ax
mov word [rbp + rdx*2 + 0x116], cx
mov byte [rbp + rdx + 0x108], 0
inc rdx
cmp rdx, 0xc
jb 0x140089771
movups xmm0, xmmword [rbp + 0x108]
movaps xmmword [rbp + 0xc70], xmm0
movups xmm1, xmmword [rbp + 0x118]
movaps xmmword [rbp + 0xc80], xmm1
movsd xmm0, qword [rbp + 0x128]
movsd qword [rbp + 0xc90], xmm0
lea rdx, [rbp + 0xc7e]
lea rcx, [rbp + 0xbc8]
call fcn.14007ac50
nop
mov rax, r12
nop
mov byte [rbp + rax + 0xc7e], 0
inc rax
cmp rax, 0x18
jb 0x1400897e5
lea rcx, [rdi + 0x548]
lea rdx, [rbp + 0xbc8]
call fcn.14007b140
nop
lea rcx, [rbp + 0xbc8]
call fcn.14007b070
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x116], 0
inc rax
cmp rax, 0x18
jb 0x140089829
mov dword [rbp + 0x234], 0xf6f6f6f6
mov dword [rbp + 0x250], 0xff7eff72
mov dword [rbp + 0x254], 0xff7aff7e
mov dword [rbp + 0x238], 0xf6f6f6f6
mov dword [rbp + 0x258], 0xff44ff7d
mov dword [rbp + 0x25c], 0xff39ff39
mov dword [rbp + 0x23c], 0xf6f6f6f6
mov dword [rbp + 0x260], 0xff81ff81
mov dword [rbp + 0x264], 0xff38ff81
mov dword [rbp + 0x240], 0xf6f6f6f6
mov dword [rbp + 0x268], 0xff78ff6f
mov dword [rbp + 0x26c], 0xff73ff71
mov dword [rbp + 0x244], 0xf6f6f6f6
mov dword [rbp + 0x270], 0xff6fff78
mov dword [rbp + 0x274], 0xff81ff79
mov dword [rbp + 0x248], 0xf6f6f6f6
mov dword [rbp + 0x278], 0xff73ff78
mov dword [rbp + 0x27c], 0xff71ff78
mov word [rbp + 0x24c], 0xf6f6
mov dword [rbp + 0x280], 0xff7eff38
mov byte [rbp + 0x24e], 0xf6
mov dword [rbp + 0x284], 0xff79
mov rdx, r12
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0x250]
movzx ecx, byte [rbp + rdx + 0x234]
add cx, ax
mov word [rbp + rdx*2 + 0x250], cx
mov byte [rbp + rdx + 0x234], 0
inc rdx
cmp rdx, 0x1b
jb 0x14008991d
movups xmm0, xmmword [rbp + 0x234]
movaps xmmword [rbp + 0xd80], xmm0
movups xmm1, xmmword [rbp + 0x244]
movaps xmmword [rbp + 0xd90], xmm1
movups xmm0, xmmword [rbp + 0x254]
movaps xmmword [rbp + 0xda0], xmm0
movups xmm1, xmmword [rbp + 0x264]
movaps xmmword [rbp + 0xdb0], xmm1
movups xmm0, xmmword [rbp + 0x274]
movaps xmmword [rbp + 0xdc0], xmm0
mov eax, dword [rbp + 0x284]
mov dword [rbp + 0xdd0], eax
lea rdx, [rbp + 0xd9c]
lea rcx, [rbp + 0xbb0]
call fcn.14007ac50
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0xd9c], 0
inc rax
cmp rax, 0x36
jb 0x1400899c1
lea rcx, [rdi + 0x560]
lea rdx, [rbp + 0xbb0]
call fcn.14007b140
nop
lea rcx, [rbp + 0xbb0]
call fcn.14007b070
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x250], 0
inc rax
cmp rax, 0x36
jb 0x140089a05
mov word [rdi + 0x57c], 1
mov byte [rdi + 0x57e], 0
mov eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rbp - 0x2c], 0xff444444
mov dword [rbp - 0x28], 0xff646464
mov dword [rbp - 0x24], 0xff555555
mov dword [rbp - 0x20], eax
mov esi, 0xff555555
mov r14d, 0xff31c444
mov r15d, 0xff1e7a18
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x84], 0x96
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x88], 0x320
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x8c], 0x258
mov dword [rsp + 0x48], r15d
mov dword [rbp + 0x5b8], r14d
mov dword [rbp + 0x5b0], esi
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x68], 0xff242424
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x6c], 0x27ffffff
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x70], 0x78ffffff
mov rcx, qword [rdi + 0x318]
mov eax, dword [rsp + 0x50]
mov dword [rcx + 0x74], eax
mov eax, dword [rdi + 0x578]
cmp eax, 0xffffffff
je 0x140089af0
mov dword [rdi + 0x48], eax
jmp 0x140089b9f
mov dword [rdi + 0x48], r12d
mov word [rbp + 0x1340], r12w
xor edx, edx
mov r8d, 0xaa
lea rcx, [rbp + 0x1342]
call sub.VCRUNTIME140.dll_memset
mov edx, 0x55
lea rcx, [rbp + 0x1340]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
test eax, eax
je 0x140089b9f
cmp word [rbp + 0x1344], 0x2d
jne 0x140089b9f
movzx eax, word [rbp + 0x1340]
cmp ax, 0x64
jne 0x140089b63
cmp word [rbp + 0x1342], 0x65
jne 0x140089b9f
mov dword [rdi + 0x48], 2
jmp 0x140089b9f
cmp ax, 0x63
jne 0x140089b80
cmp word [rbp + 0x1342], 0x6e
je 0x140089b98
jmp 0x140089b9f
cmp ax, 0x7a
jne 0x140089b9f
cmp word [rbp + 0x1342], 0x68
jne 0x140089b9f
mov dword [rdi + 0x48], 1
mov ecx, dword [rdi + 0x48]
mov qword [rbp + 0x920], rdi
mov qword [rbp + 0x910], rdi
mov qword [rbp + 0x970], rdi
test ecx, ecx
je 0x140089c2d
sub ecx, 1
je 0x140089bfe
cmp ecx, 1
jne 0x140089c2d
lea rbx, [rdi + 0x30]
mov rax, qword [rbx + 8]
cmp qword [rbx], rax
jne 0x140089c82
lea edx, [rcx + 0x53]
mov rcx, rbx
call fcn.140178830
lea rcx, [rbp + 0x920]
call fcn.14009c750
jmp 0x140089c82
lea rbx, [rdi + 0x18]
mov rax, qword [rbx + 8]
cmp qword [rbx], rax
jne 0x140089c82
mov edx, 0x54
mov rcx, rbx
call fcn.140178830
lea rcx, [rbp + 0x970]
call fcn.140136ad0
jmp 0x140089c82
mov rax, qword [rdi]
cmp rax, qword [rdi + 8]
jne 0x140089c7f
mov rcx, qword [rdi + 0x10]
sub rcx, rax
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 0x54
jae 0x140089c73
mov edx, 0x54
mov rcx, rdi
call fcn.1401753d0
lea rcx, [rbp + 0x910]
call fcn.1400f33a0
mov rbx, rdi
mov ecx, 0x1e
mov dword [rsp + 0x60], ecx
mov rdx, qword [rbx]
add rdx, 0x18
lea rcx, [rbp + 0x1238]
call fcn.14007ab50
lea rcx, [rbp + 0x1238]
call fcn.14007b070
cmp qword [0x140216fe0], 0
jne 0x140089d2f
mov ecx, 0x1a8
call fcn.1401fcb6c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140089cdd
mov rcx, rax
call fcn.140029340
jmp 0x140089ce0
mov rax, r12
mov ecx, 0x9e
mov dword [rsp + 0x60], ecx
mov qword [rbp + 0x678], r12
mov rdx, qword [0x140216fe0]
mov qword [0x140216fe0], rax
test rdx, rdx
je 0x140089d2f
lea rcx, [0x140216fe0]
call fcn.14015c930
mov rdx, qword [rbp + 0x678]
test rdx, rdx
je 0x140089d2f
lea rcx, [rbp + 0x678]
call fcn.14015c930
mov dword [rbp + 0x3a0], 0xf6f6f6f6
mov dword [rbp + 0x3ae], 0xff6fff75
mov dword [rbp + 0x3b2], 0xff78ff7c
mov dword [rbp + 0x3a4], 0xf6f6f6f6
mov dword [rbp + 0x3b6], 0xff76ff6f
mov dword [rbp + 0x3ba], 0xff3cff3d
mov dword [rbp + 0x3a8], 0xf6f6f6f6
mov dword [rbp + 0x3be], 0xff6eff38
mov dword [rbp + 0x3c2], 0xff76ff76
xor eax, eax
mov word [rbp + 0x3c6], ax
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x3ae]
movzx ecx, byte [rbp + rdx + 0x3a0]
add cx, ax
mov word [rbp + rdx*2 + 0x3ae], cx
mov byte [rbp + rdx + 0x3a0], 0
inc rdx
cmp rdx, 0xc
jb 0x140089da4
xor r8d, r8d
lea rdx, [rbp + 0x3ae]
mov rcx, qword [rsp + 0x58]
call fcn.14019a5a0
mov qword [rdi + 0x580], rax
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x3ae], 0
inc rax
cmp rax, 0x18
jb 0x140089df8
mov dword [rbp + 0x212], 0xf6f6f6f6
mov dword [rbp + 0x21e], 0xff7dff7f
mov dword [rbp + 0x222], 0xff7cff6f
mov dword [rbp + 0x216], 0xf6f6f6f6
mov dword [rbp + 0x226], 0xff3cff3d
mov dword [rbp + 0x22a], 0xff6eff38
mov word [rbp + 0x21a], 0xf6f6
mov dword [rbp + 0x22e], 0xff76ff76
xor eax, eax
mov word [rbp + 0x232], ax
mov rdx, r12
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0x21e]
movzx ecx, byte [rbp + rdx + 0x212]
add cx, ax
mov word [rbp + rdx*2 + 0x21e], cx
mov byte [rbp + rdx + 0x212], 0
inc rdx
cmp rdx, 0xa
jb 0x140089e6c
xor r8d, r8d
lea rdx, [rbp + 0x21e]
mov rcx, qword [rsp + 0x58]
call fcn.14019a5a0
mov qword [rdi + 0x588], rax
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x21e], 0
inc rax
cmp rax, 0x14
jb 0x140089ec0
mov dword [rbp + 0xea], 0xf6f6f6f6
mov dword [rbp + 0xf4], 0xff6eff71
mov dword [rbp + 0xf8], 0xff3dff73
mov dword [rbp + 0xee], 0xf6f6f6f6
mov dword [rbp + 0xfc], 0xff38ff3c
mov dword [rbp + 0x100], 0xff76ff6e
mov byte [rbp + 0xf2], 0xf6
mov dword [rbp + 0x104], 0xff76
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0xf4]
movzx ecx, byte [rbp + rdx + 0xea]
add cx, ax
mov word [rbp + rdx*2 + 0xf4], cx
mov byte [rbp + rdx + 0xea], 0
inc rdx
cmp rdx, 9
jb 0x140089f34
xor r8d, r8d
lea rdx, [rbp + 0xf4]
mov rcx, qword [rsp + 0x58]
call fcn.14019a5a0
mov qword [rdi + 0x590], rax
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0xf4], 0
inc rax
cmp rax, 0x12
jb 0x140089f88
mov dword [rbp + 0x3c8], 0xf6f6f6f6
mov dword [rbp + 0x3d6], 0xff4eff4b
mov dword [rbp + 0x3da], 0xff4bff60
mov dword [rbp + 0x3cc], 0xf6f6f6f6
mov dword [rbp + 0x3de], 0xff53ff5a
mov dword [rbp + 0x3e2], 0xff3cff3d
mov dword [rbp + 0x3d0], 0xf6f6f6f6
mov dword [rbp + 0x3e6], 0xff6eff38
mov dword [rbp + 0x3ea], 0xff76ff76
xor eax, eax
mov word [rbp + 0x3ee], ax
mov rdx, r12
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x3d6]
movzx ecx, byte [rbp + rdx + 0x3c8]
add cx, ax
mov word [rbp + rdx*2 + 0x3d6], cx
mov byte [rbp + rdx + 0x3c8], 0
inc rdx
cmp rdx, 0xc
jb 0x14008a00c
xor r8d, r8d
lea rdx, [rbp + 0x3d6]
mov rcx, qword [rsp + 0x58]
call fcn.14019a5a0
mov qword [rdi + 0x598], rax
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x3d6], 0
inc rax
cmp rax, 0x18
jb 0x14008a060
mov dword [rbp + 0x1ee], 0xf6f6f6f6
mov dword [rbp + 0x1fa], 0xff6eff71
mov dword [rbp + 0x1fe], 0xff7aff73
mov dword [rbp + 0x1f2], 0xf6f6f6f6
mov dword [rbp + 0x202], 0xff7fff76
mov dword [rbp + 0x206], 0xff38ff7d
mov word [rbp + 0x1f6], 0xf6f6
mov dword [rbp + 0x20a], 0xff76ff6e
mov byte [rbp + 0x1f8], 0xf6
mov dword [rbp + 0x20e], 0xff76
mov rdx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x1fa]
movzx ecx, byte [rbp + rdx + 0x1ee]
add cx, ax
mov word [rbp + rdx*2 + 0x1fa], cx
mov byte [rbp + rdx + 0x1ee], 0
inc rdx
cmp rdx, 0xb
jb 0x14008a0e4
xor r8d, r8d
lea rdx, [rbp + 0x1fa]
mov rcx, qword [rsp + 0x58]
call fcn.14019a5a0
mov qword [rdi + 0x5a0], rax
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x1fa], 0
inc rax
cmp rax, 0x16
jb 0x14008a138
lea rbx, [rdi + 0x2f0]
mov r8, rbx
mov rdx, qword [rdi + 0x580]
mov rcx, qword [rsp + 0x58]
call fcn.1401981a0
mov r8, rbx
mov rdx, qword [rdi + 0x588]
mov rcx, qword [rsp + 0x58]
call fcn.1401981a0
mov rcx, qword [rsp + 0x58]
call fcn.1401994f0
mov rdx, rax
mov r8, rbx
mov rcx, qword [rsp + 0x58]
call fcn.1401981a0
mov r8, rbx
mov rdx, qword [rdi + 0x590]
mov rcx, qword [rsp + 0x58]
call fcn.1401981a0
mov r8, rbx
mov rdx, qword [rdi + 0x598]
mov rcx, qword [rsp + 0x58]
call fcn.1401981a0
mov r8, rbx
mov rdx, qword [rdi + 0x5a0]
mov rcx, qword [rsp + 0x58]
call fcn.1401981a0
cmp byte [rbp + 0x2f78], 0
jne 0x14008b06b
mov ecx, 0x58
call fcn.1401fcb6c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008a207
mov rcx, rax
call fcn.1401ad200
mov rbx, rax
jmp 0x14008a20a
mov rbx, r12
or dword [rsp + 0x60], 0x40
lea rax, [rbp + 0xc10]
lea rcx, [rdi + 0x60]
cmp rcx, rax
je 0x14008a249
mov rax, qword [rcx]
mov qword [rsp + 0x40], rax
mov qword [rcx], rbx
test rax, rax
je 0x14008a26b
mov rcx, rax
call fcn.1401ad310
mov rcx, qword [rsp + 0x40]
jmp 0x14008a25d
test rbx, rbx
je 0x14008a26b
mov rcx, rbx
call fcn.1401ad310
mov rcx, rbx
mov edx, 0x58
call fcn.1401fcba8
lea rcx, [rdi + 0x60]
mov rbx, qword [rcx]
mov dword [rbp + 0x152], 0xf6f6f6f6
mov dword [rbp + 0x160], 0xff6fff6c
mov dword [rbp + 0x164], 0xff6fff7d
mov dword [rbp + 0x156], 0xf6f6f6f6
mov dword [rbp + 0x168], 0xff80ff7c
mov dword [rbp + 0x16c], 0xff6dff73
mov dword [rbp + 0x15a], 0xf6f6f6f6
mov dword [rbp + 0x170], 0xff38ff6f
mov dword [rbp + 0x174], 0xff82ff6f
mov byte [rbp + 0x15e], 0xf6
mov dword [rbp + 0x178], 0xff6f
mov rdx, r12
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x160]
movzx ecx, byte [rbp + rdx + 0x152]
add cx, ax
mov word [rbp + rdx*2 + 0x160], cx
mov byte [rbp + rdx + 0x152], 0
inc rdx
cmp rdx, 0xd
jb 0x14008a2e2
xorps xmm0, xmm0
movups xmmword [rbp + 0x7f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x800], xmm1
lea rcx, [rbp + 0x160]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008a336
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x7f0]
call fcn.140030c50
nop
lea rdx, [rbp + 0x7f0]
mov rcx, rbx
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x808]
cmp r8, 8
jb 0x14008a390
inc r8
mov rdx, qword [rbp + 0x7f0]
lea rcx, [rbp + 0x7f0]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x800], xmm0
mov word [rbp + 0x7f0], r12w
mov rax, r12
nop dword [rax]
mov byte [rbp + rax + 0x160], 0
inc rax
cmp rax, 0x1a
jb 0x14008a3ae
mov rbx, qword [rdi + 0x60]
mov dword [rbp + 0x334], 0xf6f6f6f6
mov dword [rbp + 0x346], 0xff6fff6c
mov dword [rbp + 0x34a], 0xff6fff7d
mov dword [rbp + 0x338], 0xf6f6f6f6
mov dword [rbp + 0x34e], 0xff80ff7c
mov dword [rbp + 0x352], 0xff6dff73
mov dword [rbp + 0x33c], 0xf6f6f6f6
mov dword [rbp + 0x356], 0xff69ff6f
mov dword [rbp + 0x35a], 0xff40ff82
mov dword [rbp + 0x340], 0xf6f6f6f6
mov dword [rbp + 0x35e], 0xff38ff3e
mov dword [rbp + 0x362], 0xff82ff6f
mov byte [rbp + 0x344], 0xf6
mov dword [rbp + 0x366], 0xff6f
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x346]
movzx ecx, byte [rbp + rdx + 0x334]
add cx, ax
mov word [rbp + rdx*2 + 0x346], cx
mov byte [rbp + rdx + 0x334], 0
inc rdx
cmp rdx, 0x11
jb 0x14008a462
xorps xmm0, xmm0
movups xmmword [rbp + 0x710], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x720], xmm1
lea rcx, [rbp + 0x346]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008a4b6
lea rdx, [rbp + 0x346]
lea rcx, [rbp + 0x710]
call fcn.140030c50
nop
lea rdx, [rbp + 0x710]
mov rcx, rbx
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x728]
cmp r8, 8
jb 0x14008a510
inc r8
mov rdx, qword [rbp + 0x710]
lea rcx, [rbp + 0x710]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x720], xmm0
mov word [rbp + 0x710], r12w
mov rax, r12
nop dword [rax]
mov byte [rbp + rax + 0x346], 0
inc rax
cmp rax, 0x22
jb 0x14008a52e
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x80], 0xf6f6f6f6
mov dword [rbp + 0x8a], 0xff7eff7d
mov dword [rbp + 0x8e], 0xff6bff6f
mov dword [rbp + 0x84], 0xf6f6f6f6
mov dword [rbp + 0x92], 0xff38ff77
mov dword [rbp + 0x96], 0xff82ff6f
mov byte [rbp + 0x88], 0xf6
mov dword [rbp + 0x9a], 0xff6f
mov rdx, r12
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x8a]
movzx ecx, byte [rbp + rdx + 0x80]
add cx, ax
mov word [rbp + rdx*2 + 0x8a], cx
mov byte [rbp + rdx + 0x80], 0
inc rdx
cmp rdx, 9
jb 0x14008a5a2
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x700], xmm1
lea rcx, [rbp + 0x8a]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008a5f6
lea rdx, [rbp + 0x8a]
lea rcx, [rbp + 0x6f0]
call fcn.140030c50
nop
lea rdx, [rbp + 0x6f0]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x708]
cmp r8, 8
jb 0x14008a652
inc r8
mov rdx, qword [rbp + 0x6f0]
lea rcx, [rbp + 0x6f0]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x700], xmm0
mov word [rbp + 0x6f0], r12w
mov rax, r12
nop
mov byte [rbp + rax + 0x8a], 0
inc rax
cmp rax, 0x12
jb 0x14008a66e
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x3f0], 0xf6f6f6f6
mov dword [rbp + 0x402], 0xff7eff7d
mov dword [rbp + 0x406], 0xff6bff6f
mov dword [rbp + 0x3f4], 0xf6f6f6f6
mov dword [rbp + 0x40a], 0xff7dff77
mov dword [rbp + 0x40e], 0xff7cff6f
mov dword [rbp + 0x3f8], 0xf6f6f6f6
mov dword [rbp + 0x412], 0xff73ff80
mov dword [rbp + 0x416], 0xff6fff6d
mov dword [rbp + 0x3fc], 0xf6f6f6f6
mov dword [rbp + 0x41a], 0xff6fff38
mov dword [rbp + 0x41e], 0xff6fff82
xor eax, eax
mov word [rbp + 0x422], ax
mov rdx, r12
nop
movzx eax, word [rbp + rdx*2 + 0x402]
movzx ecx, byte [rbp + rdx + 0x3f0]
add cx, ax
mov word [rbp + rdx*2 + 0x402], cx
mov byte [rbp + rdx + 0x3f0], 0
inc rdx
cmp rdx, 0x10
jb 0x14008a712
xorps xmm0, xmm0
movups xmmword [rbp + 0x750], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x760], xmm1
lea rcx, [rbp + 0x402]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008a766
lea rdx, [rbp + 0x402]
lea rcx, [rbp + 0x750]
call fcn.140030c50
nop
lea rdx, [rbp + 0x750]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x768]
cmp r8, 8
jb 0x14008a7c2
inc r8
mov rdx, qword [rbp + 0x750]
lea rcx, [rbp + 0x750]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x760], xmm0
mov word [rbp + 0x750], r12w
mov rax, r12
nop
mov byte [rbp + rax + 0x402], 0
inc rax
cmp rax, 0x20
jb 0x14008a7de
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x45a], 0xf6f6f6f6
mov dword [rbp + 0x46e], 0xff7eff7d
mov dword [rbp + 0x472], 0xff6bff6f
mov dword [rbp + 0x45e], 0xf6f6f6f6
mov dword [rbp + 0x476], 0xff81ff77
mov dword [rbp + 0x47a], 0xff6cff6f
mov dword [rbp + 0x462], 0xf6f6f6f6
mov dword [rbp + 0x47e], 0xff6fff72
mov dword [rbp + 0x482], 0xff7aff76
mov dword [rbp + 0x466], 0xf6f6f6f6
mov dword [rbp + 0x486], 0xff7cff6f
mov dword [rbp + 0x48a], 0xff6fff38
mov word [rbp + 0x46a], 0xf6f6
mov dword [rbp + 0x48e], 0xff6fff82
xor eax, eax
mov word [rbp + 0x492], ax
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x46e]
movzx ecx, byte [rbp + rdx + 0x45a]
add cx, ax
mov word [rbp + rdx*2 + 0x46e], cx
mov byte [rbp + rdx + 0x45a], 0
inc rdx
cmp rdx, 0x12
jb 0x14008a8a2
xorps xmm0, xmm0
movups xmmword [rbp + 0xa00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa10], xmm1
lea rcx, [rbp + 0x46e]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008a8f6
lea rdx, [rbp + 0x46e]
lea rcx, [rbp + 0xa00]
call fcn.140030c50
nop
lea rdx, [rbp + 0xa00]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
lea rcx, [rbp + 0xa00]
call fcn.14002f810
nop
mov rax, r12
mov byte [rbp + rax + 0x46e], 0
inc rax
cmp rax, 0x24
jb 0x14008a93b
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x36a], 0xf6f6f6f6
mov dword [rbp + 0x37c], 0xff6bff6f
mov dword [rbp + 0x380], 0xff83ff7d
mov dword [rbp + 0x36e], 0xf6f6f6f6
mov dword [rbp + 0x384], 0xff78ff6b
mov dword [rbp + 0x388], 0xff73ff7e
mov dword [rbp + 0x372], 0xf6f6f6f6
mov dword [rbp + 0x38c], 0xff72ff6d
mov dword [rbp + 0x390], 0xff6bff6f
mov dword [rbp + 0x376], 0xf6f6f6f6
mov dword [rbp + 0x394], 0xff38ff7e
mov dword [rbp + 0x398], 0xff82ff6f
mov byte [rbp + 0x37a], 0xf6
mov dword [rbp + 0x39c], 0xff6f
mov rdx, r12
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x37c]
movzx ecx, byte [rbp + rdx + 0x36a]
add cx, ax
mov word [rbp + rdx*2 + 0x37c], cx
mov byte [rbp + rdx + 0x36a], 0
inc rdx
cmp rdx, 0x11
jb 0x14008a9ee
xorps xmm0, xmm0
movups xmmword [rbp + 0x830], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x840], xmm1
lea rcx, [rbp + 0x37c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008aa42
lea rdx, [rbp + 0x37c]
lea rcx, [rbp + 0x830]
call fcn.140030c50
nop
lea rdx, [rbp + 0x830]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x848]
cmp r8, 8
jb 0x14008aa9e
inc r8
mov rdx, qword [rbp + 0x830]
lea rcx, [rbp + 0x830]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x840], xmm0
mov word [rbp + 0x830], r12w
mov rax, r12
nop
mov byte [rbp + rax + 0x37c], 0
inc rax
cmp rax, 0x22
jb 0x14008aaba
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x494], 0xf6f6f6f6
mov dword [rbp + 0x4aa], 0xff7aff6f
mov dword [rbp + 0x4ae], 0xff6dff73
mov dword [rbp + 0x498], 0xf6f6f6f6
mov dword [rbp + 0x4b2], 0xff6bff71
mov dword [rbp + 0x4b6], 0xff6fff77
mov dword [rbp + 0x49c], 0xf6f6f6f6
mov dword [rbp + 0x4ba], 0xff76ff7d
mov dword [rbp + 0x4be], 0xff7fff6b
mov dword [rbp + 0x4a0], 0xf6f6f6f6
mov dword [rbp + 0x4c2], 0xff6dff78
mov dword [rbp + 0x4c6], 0xff6fff72
mov dword [rbp + 0x4a4], 0xf6f6f6f6
mov dword [rbp + 0x4ca], 0xff38ff7c
mov dword [rbp + 0x4ce], 0xff82ff6f
mov byte [rbp + 0x4a8], 0xf6
mov dword [rbp + 0x4d2], 0xff6f
mov rdx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x4aa]
movzx ecx, byte [rbp + rdx + 0x494]
add cx, ax
mov word [rbp + rdx*2 + 0x4aa], cx
mov byte [rbp + rdx + 0x494], 0
inc rdx
cmp rdx, 0x15
jb 0x14008ab8e
xorps xmm0, xmm0
movups xmmword [rbp + 0x810], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x820], xmm1
lea rcx, [rbp + 0x4aa]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008abe2
lea rdx, [rbp + 0x4aa]
lea rcx, [rbp + 0x810]
call fcn.140030c50
nop
lea rdx, [rbp + 0x810]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x828]
cmp r8, 8
jb 0x14008ac3e
inc r8
mov rdx, qword [rbp + 0x810]
lea rcx, [rbp + 0x810]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x820], xmm0
mov word [rbp + 0x810], r12w
mov rax, r12
nop
mov byte [rbp + rax + 0x4aa], 0
inc rax
cmp rax, 0x2a
jb 0x14008ac5a
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x288], 0xf6f6f6f6
mov dword [rbp + 0x298], 0xff6bff6c
mov dword [rbp + 0x29c], 0xff7eff7e
mov dword [rbp + 0x28c], 0xf6f6f6f6
mov dword [rbp + 0x2a0], 0xff6fff76
mov dword [rbp + 0x2a4], 0xff78ff38
mov dword [rbp + 0x290], 0xf6f6f6f6
mov dword [rbp + 0x2a8], 0xff7eff6f
mov dword [rbp + 0x2ac], 0xff6fff38
mov word [rbp + 0x294], 0xf6f6
mov dword [rbp + 0x2b0], 0xff6fff82
xor eax, eax
mov word [rbp + 0x2b4], ax
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x298]
movzx ecx, byte [rbp + rdx + 0x288]
add cx, ax
mov word [rbp + rdx*2 + 0x298], cx
mov byte [rbp + rdx + 0x288], 0
inc rdx
cmp rdx, 0xe
jb 0x14008acfe
xorps xmm0, xmm0
movups xmmword [rbp + 0x730], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x740], xmm1
lea rcx, [rbp + 0x298]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008ad52
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0x730]
call fcn.140030c50
nop
lea rdx, [rbp + 0x730]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x748]
cmp r8, 8
jb 0x14008adae
inc r8
mov rdx, qword [rbp + 0x730]
lea rcx, [rbp + 0x730]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x740], xmm0
mov word [rbp + 0x730], r12w
mov rax, r12
nop
mov byte [rbp + rax + 0x298], 0
inc rax
cmp rax, 0x1c
jb 0x14008adca
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x510], 0xf6f6f6f6
mov dword [rbp + 0x528], 0xff6bff6c
mov dword [rbp + 0x52c], 0xff7eff7e
mov dword [rbp + 0x514], 0xf6f6f6f6
mov dword [rbp + 0x530], 0xff6fff76
mov dword [rbp + 0x534], 0xff78ff38
mov dword [rbp + 0x518], 0xf6f6f6f6
mov dword [rbp + 0x538], 0xff7eff6f
mov dword [rbp + 0x53c], 0xff76ff2a
mov dword [rbp + 0x51c], 0xf6f6f6f6
mov dword [rbp + 0x540], 0xff7fff6b
mov dword [rbp + 0x544], 0xff6dff78
mov dword [rbp + 0x520], 0xf6f6f6f6
mov dword [rbp + 0x548], 0xff6fff72
mov dword [rbp + 0x54c], 0xff38ff7c
mov word [rbp + 0x524], 0xf6f6
mov dword [rbp + 0x550], 0xff82ff6f
mov byte [rbp + 0x526], 0xf6
mov dword [rbp + 0x554], 0xff6f
mov rdx, r12
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x528]
movzx ecx, byte [rbp + rdx + 0x510]
add cx, ax
mov word [rbp + rdx*2 + 0x528], cx
mov byte [rbp + rdx + 0x510], 0
inc rdx
cmp rdx, 0x17
jb 0x14008aeae
xorps xmm0, xmm0
movups xmmword [rbp + 0x770], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x780], xmm1
lea rcx, [rbp + 0x528]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008af02
lea rdx, [rbp + 0x528]
lea rcx, [rbp + 0x770]
call fcn.140030c50
nop
lea rdx, [rbp + 0x770]
mov rcx, qword [rsp + 0x40]
call fcn.1401ad6b0
nop
mov r8, qword [rbp + 0x788]
cmp r8, 8
jb 0x14008af5e
inc r8
mov rdx, qword [rbp + 0x770]
lea rcx, [rbp + 0x770]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x780], xmm0
mov word [rbp + 0x770], r12w
mov rax, r12
nop
mov byte [rbp + rax + 0x528], 0
inc rax
cmp rax, 0x2e
jb 0x14008af7a
mov qword [rbp + 0x690], r12
lea rdx, [rbp + 0x690]
mov rcx, qword [rdi + 0x60]
call fcn.1401ad9d0
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov r8d, 0xffffffff
mov dword [rbp + 0x2ee4], r8d
mov dword [rbp + 0x1b64], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x1b64], eax
inc rdx
cmp rdx, 0x270
jb 0x14008afce
mov dword [rbp + 0x1b60], 0x270
mov rax, qword [rbp + 0x690]
mov rdx, qword [rax + 8]
mov rbx, qword [rax]
lea rax, [rbp + 0x1b60]
mov qword [rbp + 0x9e8], rax
mov ecx, 0x40
mov rax, 0xffffffffffffffff
dec rcx
shr rax, 1
cmp rax, r8
ja 0x14008b026
mov qword [rbp + 0x9f8], rax
mov qword [rbp + 0x9f0], rcx
lea r8, [rbp + 0x9e8]
mov rcx, rbx
call fcn.140082a20
mov r8, rdi
lea rdx, [0x140168380]
mov rcx, qword [rsp + 0x58]
call fcn.140198480
jmp 0x14008b091
mov rbx, qword [rdi + 0x60]
mov qword [rdi + 0x60], r12
test rbx, rbx
je 0x14008b091
mov rcx, rbx
call fcn.1401ad310
mov edx, 0x58
mov rcx, rbx
call fcn.1401fcba8
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0x14f0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1740]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x1740]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rbp + 0x9e], 0xf6f6f6f6
mov dword [rbp + 0xa6], 0xff34ff66
mov dword [rbp + 0xaa], 0xff7dff38
mov word [rbp + 0xa2], 0xf6f6
mov dword [rbp + 0xae], 0xff7dff83
xor eax, eax
mov word [rbp + 0xb2], ax
mov rbx, r12
nop dword [rax + rax]
movzx eax, word [rbp + rbx*2 + 0xa6]
movzx ecx, byte [rbp + rbx + 0x9e]
add cx, ax
mov word [rbp + rbx*2 + 0xa6], cx
mov byte [rbp + rbx + 0x9e], 0
inc rbx
cmp rbx, 6
jb 0x14008b10d
lea r8, [rbp + 0xa6]
mov edx, 0x104
lea rcx, [rbp + 0x1740]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov rax, r12
nop dword [rax + rax]
mov byte [rbp + rax + 0xa6], 0
inc rax
cmp rax, 0xc
jb 0x14008b161
lea rdx, [rbp + 0x14f0]
lea rcx, [rbp + 0x1740]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
test rax, rax
je 0x14008b2e8
mov rdi, rax
mov esi, dword [rsp + 0x60]
nop word [rax + rax]
test byte [rbp + 0x14f0], 0x10
jne 0x14008b26b
mov dword [rbp + 0x1ca], 0xf6f6f6f6
mov dword [rbp + 0x1d6], 0xff7eff5d
mov dword [rbp + 0x1da], 0xff76ff6f
mov dword [rbp + 0x1ce], 0xf6f6f6f6
mov dword [rbp + 0x1de], 0xff6bff76
mov dword [rbp + 0x1e2], 0xff38ff7c
mov word [rbp + 0x1d2], 0xf6f6
mov dword [rbp + 0x1e6], 0xff83ff7d
mov byte [rbp + 0x1d4], 0xf6
mov dword [rbp + 0x1ea], 0xff7d
mov rdx, r12
movzx eax, word [rbp + rdx*2 + 0x1d6]
movzx ecx, byte [rbp + rdx + 0x1ca]
add cx, ax
mov word [rbp + rdx*2 + 0x1d6], cx
mov byte [rbp + rdx + 0x1ca], 0
inc rdx
cmp rdx, 0xb
jb 0x14008b215
or esi, 1
lea rdx, [rbp + 0x1d6]
lea rcx, [rbp + 0x151c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14008b26b
mov cl, 1
jmp 0x14008b26d
xor cl, cl
test sil, 1
je 0x14008b299
and esi, 0xfffffffe
mov rax, r12
nop dword [rax]
mov byte [rbp + rax + 0x1d6], 0
inc rax
cmp rax, 0x16
jb 0x14008b284
test cl, cl
je 0x14008b2ae
lea rcx, [rbp + 0x151c]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [rbp + 0x14f0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14008b1a5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdi, qword [rbp + 0x2f60]
mov esi, dword [rbp + 0x5b0]
mov r14d, dword [rbp + 0x5b8]
mov r15d, dword [rsp + 0x48]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rdi + 0x5c8], rax
call fcn.140199500
mov r8, rdi
lea rdx, [0x14015d5b0]
mov rcx, rax
call fcn.140198480
mov qword [rdi + 0x5c0], rax
test rax, rax
jne 0x14008b369
lea r9, [rax - 1]
lea r8d, [rax + 0x30]
lea rdx, [rbp + 0x1208]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
mov rdx, rax
mov rcx, rdi
call fcn.14016d480
nop
lea rcx, [rbp + 0x1208]
call fcn.14007b070
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140199500
mov rbx, rax
call fcn.140199500
mov rcx, rax
call fcn.1401994f0
mov r8d, 0x97fd2398
mov rdx, rax
mov rcx, rbx
call fcn.140199350
movabs rcx, 0x9458972024958
xor rax, rcx
mov qword [rbp + 0x9d8], rax
mov dword [rsp + 0x64], r12d
lea rax, [rsp + 0x64]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x67]
lea rcx, [rbp + 0x9d8]
call fcn.14015c5d0
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x48], eax
cmp eax, 8
jb 0x14008b71d
mov ecx, eax
call fcn.1401fcbb0
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008b405
mov r8d, dword [rsp + 0x48]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14008b40d
mov rbx, r12
mov qword [rsp + 0x40], rbx
mov eax, dword [rsp + 0x64]
mov dword [rbx], eax
lea rax, [rsp + 0x64]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x64]
mov r8, rbx
mov edx, 0x67
lea rcx, [rbp + 0x9d8]
call fcn.14015c5d0
mov ebx, eax
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + 4]
mov dword [rsp + 0x48], eax
call fcn.1401fcba8
test ebx, ebx
js 0x14008b71d
lea rdx, [0x140001688]
lea rcx, [rbp + 0x6d8]
call fcn.14007ac50
nop
mov eax, dword [rsp + 0x48]
bt eax, 0xa
jae 0x14008b4af
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 0x32]
lea rdx, [rbp + 0x1190]
mov rcx, rdi
call fcn.140163dc0
nop
mov rdx, rax
lea rcx, [rbp + 0x6d8]
call fcn.14007b140
nop
lea rcx, [rbp + 0x1190]
call fcn.14007b070
jmp 0x14008b6dc
test al, 2
je 0x14008b4f3
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 0x33]
lea rdx, [rbp + 0x1148]
mov rcx, rdi
call fcn.140163dc0
nop
mov rdx, rax
lea rcx, [rbp + 0x6d8]
call fcn.14007b140
nop
lea rcx, [rbp + 0x1148]
call fcn.14007b070
jmp 0x14008b6dc
test al, al
jns 0x14008b6dc
mov dword [rbp + 0x17c], 0xf6f6f6f6
mov dword [rbp + 0x196], 0xff76ff5a
mov dword [rbp + 0x19a], 0xff6bff6f
mov dword [rbp + 0x180], 0xf6f6f6f6
mov dword [rbp + 0x19e], 0xff6fff7d
mov dword [rbp + 0x1a2], 0xff6eff2a
mov dword [rbp + 0x184], 0xf6f6f6f6
mov dword [rbp + 0x1a6], 0xff7dff73
mov dword [rbp + 0x1aa], 0xff6cff6b
mov dword [rbp + 0x188], 0xf6f6f6f6
mov dword [rbp + 0x1ae], 0xff6fff76
mov dword [rbp + 0x1b2], 0xff6eff2a
mov dword [rbp + 0x18c], 0xf6f6f6f6
mov dword [rbp + 0x1b6], 0xff6cff6f
mov dword [rbp + 0x1ba], 0xff71ff7f
mov dword [rbp + 0x190], 0xf6f6f6f6
mov dword [rbp + 0x1be], 0xff77ff2a
mov dword [rbp + 0x1c2], 0xff6eff79
mov byte [rbp + 0x194], 0xf6
mov dword [rbp + 0x1c6], 0xff6f
mov rdx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x196]
movzx ecx, byte [rbp + rdx + 0x17c]
add cx, ax
mov word [rbp + rdx*2 + 0x196], cx
mov byte [rbp + rdx + 0x17c], 0
inc rdx
cmp rdx, 0x19
jb 0x14008b5cf
movups xmm0, xmmword [rbp + 0x17c]
movaps xmmword [rbp + 0xcb0], xmm0
movups xmm1, xmmword [rbp + 0x18c]
movaps xmmword [rbp + 0xcc0], xmm1
movups xmm0, xmmword [rbp + 0x19c]
movaps xmmword [rbp + 0xcd0], xmm0
movups xmm1, xmmword [rbp + 0x1ac]
movaps xmmword [rbp + 0xce0], xmm1
movsd xmm0, qword [rbp + 0x1bc]
movsd qword [rbp + 0xcf0], xmm0
mov eax, dword [rbp + 0x1c4]
mov dword [rbp + 0xcf8], eax
movzx eax, word [rbp + 0x1c8]
mov word [rbp + 0xcfc], ax
lea rdx, [rbp + 0xcca]
lea rcx, [rbp + 0xb98]
call fcn.14007ac50
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0xcca], 0
inc rax
cmp rax, 0x32
jb 0x14008b683
lea rdx, [rbp + 0xb98]
lea rcx, [rbp + 0x6d8]
call fcn.14007b140
nop
lea rcx, [rbp + 0xb98]
call fcn.14007b070
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x196], 0
inc rax
cmp rax, 0x32
jb 0x14008b6c7
lea rcx, [rbp + 0x6d8]
call fcn.14007b4d0
test rax, rax
je 0x14008b711
lea rcx, [rbp + 0x6d8]
call fcn.14007b3f0
mov rdx, rax
mov rcx, rdi
call fcn.14016d480
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rbp + 0x6d8]
call fcn.14007b070
xorps xmm0, xmm0
movups xmmword [rbp + 0x5f0], xmm0
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp + 0x5f0], eax
mov dword [rbp + 0x5f4], ebx
mov dword [rbp + 0x5f8], ecx
mov dword [rbp + 0x5fc], edx
test ecx, ecx
jns 0x14008bb5a
mov eax, 0x40000000
xor ecx, ecx
cpuid
mov dword [rbp + 0x5f0], eax
mov dword [rbp + 0x5f4], ebx
mov dword [rbp + 0x5f8], ecx
mov dword [rbp + 0x5fc], edx
mov dword [rbp + 0x668], ebx
mov dword [rbp + 0x66c], ecx
mov dword [rbp + 0x670], edx
mov byte [rbp + 0x674], 0
xor edx, edx
lea rcx, [rbp + 0x668]
call fcn.140076530
cmp eax, 0x7c48ab00
jne 0x14008bb5a
mov rsi, 0xffffffffffffffff
mov r9d, esi
lea r8d, [rsi + 2]
lea rdx, [rbp + 0x1220]
mov rcx, rdi
call fcn.140163dc0
nop
mov r9d, esi
lea r8d, [rsi + 0x4a]
lea rdx, [rbp + 0x1130]
mov rcx, rdi
call fcn.140163dc0
nop
lea rcx, [rbp + 0x1130]
call fcn.14007b7e0
mov rbx, rax
lea rcx, [rbp + 0x1220]
call fcn.14007b7e0
mov r9, rbx
mov r8, rax
lea edx, [rsi + 0x35]
mov rcx, rdi
call fcn.14016e6a0
cmp eax, 6
jne 0x14008bb51
mov dword [rbp + 0x2b6], 0xf6f6f6f6
mov dword [rbp + 0x2e0], 0xff6dff6c
mov dword [rbp + 0x2e4], 0xff6fff6e
mov dword [rbp + 0x2ba], 0xf6f6f6f6
mov dword [rbp + 0x2e8], 0xff73ff6e
mov dword [rbp + 0x2ec], 0xff38ff7e
mov dword [rbp + 0x2be], 0xf6f6f6f6
mov dword [rbp + 0x2f0], 0xff82ff6f
mov dword [rbp + 0x2f4], 0xff2aff6f
mov dword [rbp + 0x2c2], 0xf6f6f6f6
mov dword [rbp + 0x2f8], 0xff7dff39
mov dword [rbp + 0x2fc], 0xff7eff6f
mov dword [rbp + 0x2c6], 0xf6f6f6f6
mov dword [rbp + 0x300], 0xff72ff2a
mov dword [rbp + 0x304], 0xff7aff83
mov dword [rbp + 0x2ca], 0xf6f6f6f6
mov dword [rbp + 0x308], 0xff7cff6f
mov dword [rbp + 0x30c], 0xff73ff80
mov dword [rbp + 0x2ce], 0xf6f6f6f6
mov dword [rbp + 0x310], 0xff79ff7d
mov dword [rbp + 0x314], 0xff76ff7c
mov dword [rbp + 0x2d2], 0xf6f6f6f6
mov dword [rbp + 0x318], 0xff7fff6b
mov dword [rbp + 0x31c], 0xff6dff78
mov dword [rbp + 0x2d6], 0xf6f6f6f6
mov dword [rbp + 0x320], 0xff7eff72
mov dword [rbp + 0x324], 0xff7aff83
mov dword [rbp + 0x2da], 0xf6f6f6f6
mov dword [rbp + 0x328], 0xff2aff6f
mov dword [rbp + 0x32c], 0xff70ff79
mov byte [rbp + 0x2de], 0xf6
mov dword [rbp + 0x330], 0xff70
mov rdx, r12
nop
movzx eax, word [rbp + rdx*2 + 0x2e0]
movzx ecx, byte [rbp + rdx + 0x2b6]
add cx, ax
mov word [rbp + rdx*2 + 0x2e0], cx
mov byte [rbp + rdx + 0x2b6], 0
inc rdx
cmp rdx, 0x29
jb 0x14008b94f
movups xmm0, xmmword [rbp + 0x2b6]
movaps xmmword [rbp + 0x1080], xmm0
movups xmm1, xmmword [rbp + 0x2c6]
movaps xmmword [rbp + 0x1090], xmm1
movups xmm0, xmmword [rbp + 0x2d6]
movaps xmmword [rbp + 0x10a0], xmm0
movups xmm1, xmmword [rbp + 0x2e6]
movaps xmmword [rbp + 0x10b0], xmm1
movups xmm0, xmmword [rbp + 0x2f6]
movaps xmmword [rbp + 0x10c0], xmm0
movups xmm1, xmmword [rbp + 0x306]
movaps xmmword [rbp + 0x10d0], xmm1
movups xmm0, xmmword [rbp + 0x316]
movaps xmmword [rbp + 0x10e0], xmm0
movsd xmm1, qword [rbp + 0x326]
movsd qword [rbp + 0x10f0], xmm1
mov eax, dword [rbp + 0x32e]
mov dword [rbp + 0x10f8], eax
movzx eax, word [rbp + 0x332]
mov word [rbp + 0x10fc], ax
lea rdx, [rbp + 0x1080]
lea rcx, [rbp + 0xb18]
call fcn.14007cd90
nop
nop dword [rax]
mov byte [rbp + r12 + 0x2e0], 0
inc r12
cmp r12, 0x52
jb 0x14008ba23
lea rcx, [rbp + 0xb18]
call fcn.14007b7e0
mov rdx, rax
mov rcx, rdi
call fcn.140161a70
mov r9d, esi
mov rcx, rdi
test eax, eax
jne 0x14008bad0
lea r8d, [rax + 0x1b]
lea rdx, [rbp + 0xb60]
call fcn.140163dc0
nop
mov r9d, esi
mov r8d, 0x4a
lea rdx, [rbp + 0xb78]
mov rcx, rdi
call fcn.140163dc0
nop
lea rcx, [rbp + 0xb78]
call fcn.14007b7e0
mov rbx, rax
lea rcx, [rbp + 0xb60]
call fcn.14007b7e0
mov r9, rbx
mov r8, rax
mov edx, 0x40
mov rcx, rdi
call fcn.14016e6a0
nop
lea rcx, [rbp + 0xb78]
call fcn.14007b070
nop
lea rcx, [rbp + 0xb60]
jmp 0x14008bb3f
mov r8d, 1
lea rdx, [rbp + 0xb30]
call fcn.140163dc0
nop
mov r9d, esi
mov r8d, 1
lea rdx, [rbp + 0xb48]
mov rcx, rdi
call fcn.140163dc0
nop
lea rcx, [rbp + 0xb48]
call fcn.14007b7e0
mov rbx, rax
lea rcx, [rbp + 0xb30]
call fcn.14007b7e0
mov r9, rbx
mov r8, rax
mov edx, 0x10
mov rcx, rdi
call fcn.14016e6a0
nop
lea rcx, [rbp + 0xb48]
call fcn.14007b070
nop
lea rcx, [rbp + 0xb30]
call fcn.14007b070
nop
lea rcx, [rbp + 0xb18]
call fcn.14007b070
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rbp + 0x2f70]
lea rcx, [rbp + 0x1318]
call fcn.140087c20
mov rdx, rax
lea rcx, [rdi + 0xc8]
call fcn.140092760
lea rcx, [rbp + 0x1318]
call fcn.14002f810
lea rcx, [rbp + 0x8f0]
call fcn.140086710
mov rdx, rax
lea rcx, [rdi + 0x160]
call fcn.14007d860
mov rbx, qword [rbp + 0x8f0]
test rbx, rbx
je 0x14008bbc8
mov rcx, rbx
call fcn.14017a240
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
mov ecx, 0xa8
call fcn.1401fcb6c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008bbf0
mov rcx, rax
call 0x1401877a0
mov rbx, rax
jmp 0x14008bbf3
mov rbx, r12
lea rax, [rbp + 0xb90]
lea rcx, [rdi + 0x168]
cmp rcx, rax
je 0x14008bc30
mov rax, qword [rcx]
mov qword [rsp + 0x40], rax
mov qword [rcx], rbx
test rax, rax
je 0x14008bc4e
mov rcx, rax
call fcn.140187860
mov rcx, qword [rsp + 0x40]
jmp 0x14008bc44
test rbx, rbx
je 0x14008bc4e
mov rcx, rbx
call fcn.140187860
mov rcx, rbx
mov edx, 0xa8
call fcn.1401fcba8
mov ecx, 0xc0
call fcn.1401fcb6c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008bc76
mov rcx, rax
call fcn.1401870c0
mov rbx, rax
jmp 0x14008bc79
mov rbx, r12
lea rax, [rbp + 0xca0]
lea rcx, [rdi + 0x170]
cmp rcx, rax
je 0x14008bcb6
mov rax, qword [rcx]
mov qword [rsp + 0x40], rax
mov qword [rcx], rbx
test rax, rax
je 0x14008bcd4
mov rcx, rax
call fcn.140187250
mov rcx, qword [rsp + 0x40]
jmp 0x14008bcca
test rbx, rbx
je 0x14008bcd4
mov rcx, rbx
call fcn.140187250
mov rcx, rbx
mov edx, 0xc0
call fcn.1401fcba8
lea rcx, [rbp + 0x8e8]
call fcn.1400867d0
mov rdx, rax
lea rcx, [rdi + 0x198]
call fcn.14007d960
mov rbx, qword [rbp + 0x8e8]
test rbx, rbx
je 0x14008bd14
mov rcx, rbx
call fcn.14017d840
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
lea rcx, [rbp + 0x8e0]
call fcn.140086860
mov rdx, rax
lea rcx, [rdi + 0x1a0]
call fcn.14007da60
mov rbx, qword [rbp + 0x8e0]
test rbx, rbx
je 0x14008bd54
mov rcx, rbx
call fcn.1401843a0
mov edx, 0x128
mov rcx, rbx
call fcn.1401fcba8
lea rcx, [rbp + 0x8c0]
call fcn.1400867d0
mov rdx, rax
lea rcx, [rdi + 0x1a8]
call fcn.14007d960
mov rbx, qword [rbp + 0x8c0]
test rbx, rbx
je 0x14008bd94
mov rcx, rbx
call fcn.14017d840
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
lea rcx, [rbp + 0x8b8]
call fcn.140086860
mov rdx, rax
lea rcx, [rdi + 0x1d0]
call fcn.14007da60
mov rbx, qword [rbp + 0x8b8]
test rbx, rbx
je 0x14008bdd4
mov rcx, rbx
call fcn.1401843a0
mov edx, 0x128
mov rcx, rbx
call fcn.1401fcba8
lea rcx, [rbp + 0x8b0]
call fcn.140086710
mov rdx, rax
lea rcx, [rdi + 0x298]
call fcn.14007d860
mov rbx, qword [rbp + 0x8b0]
test rbx, rbx
je 0x14008be14
mov rcx, rbx
call fcn.14017a240
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
mov ecx, 0xa8
call fcn.1401fcb6c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008be3c
mov rcx, rax
call fcn.14017a9f0
mov rbx, rax
jmp 0x14008be3f
mov rbx, r12
lea rax, [rbp + 0xc68]
lea rcx, [rdi + 0x2a0]
cmp rcx, rax
je 0x14008be7c
mov rax, qword [rcx]
mov qword [rsp + 0x40], rax
mov qword [rcx], rbx
test rax, rax
je 0x14008be9a
mov rcx, rax
call fcn.14017ab00
mov rcx, qword [rsp + 0x40]
jmp 0x14008be90
test rbx, rbx
je 0x14008be9a
mov rcx, rbx
call fcn.14017ab00
mov rcx, rbx
mov edx, 0xa8
call fcn.1401fcba8
lea rcx, [rbp + 0x918]
call fcn.140086710
mov rdx, rax
lea rcx, [rdi + 0x2a8]
call fcn.14007d860
mov rbx, qword [rbp + 0x918]
test rbx, rbx
je 0x14008beda
mov rcx, rbx
call fcn.14017a240
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
lea rcx, [rbp + 0x880]
call fcn.1400867d0
mov rdx, rax
lea rcx, [rdi + 0x2b0]
call fcn.14007d960
mov rbx, qword [rbp + 0x880]
test rbx, rbx
je 0x14008bf1a
mov rcx, rbx
call fcn.14017d840
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
mov rbx, qword [rdi + 0x2d8]
mov qword [rdi + 0x2d8], r12
test rbx, rbx
je 0x14008bf46
mov rcx, rbx
call fcn.14017d840
mov edx, 0xa0
mov rcx, rbx
call fcn.1401fcba8
mov rbx, 0xffffffffffffffff
mov r9d, ebx
lea r8d, [rbx + 0x35]
lea rdx, [rbp + 0x1178]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
mov rdx, rax
lea rcx, [rbp + 0x12f8]
call fcn.140087c20
mov rdx, rax
lea rcx, [rdi + 0x1f8]
call fcn.140092760
lea rcx, [rbp + 0x12f8]
call fcn.14002f810
nop
lea rcx, [rbp + 0x1178]
call fcn.14007b070
mov r9d, ebx
lea r8d, [rbx + 0x36]
lea rdx, [rbp + 0x1160]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x7d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7e0], xmm1
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14008bfe4
mov rdx, rax
lea rcx, [rbp + 0x7d0]
call fcn.140030c50
lea rdx, [rbp + 0x7d0]
lea rcx, [rdi + 0x218]
call fcn.140092760
mov r8, qword [rbp + 0x7e8]
cmp r8, 8
jb 0x14008c03c
inc r8
mov rdx, qword [rbp + 0x7d0]
lea rcx, [rbp + 0x7d0]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x7e0], xmm0
mov word [rbp + 0x7d0], r12w
lea rcx, [rbp + 0x1160]
call fcn.14007b070
mov r9d, ebx
mov r8d, 0x36
lea rdx, [rbp + 0x1250]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x7b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7c0], xmm1
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14008c09c
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.140030c50
lea rdx, [rbp + 0x7b0]
lea rcx, [rdi + 0x238]
call fcn.140092760
mov r8, qword [rbp + 0x7c8]
cmp r8, 8
jb 0x14008c0f4
inc r8
mov rdx, qword [rbp + 0x7b0]
lea rcx, [rbp + 0x7b0]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x7c0], xmm0
mov word [rbp + 0x7b0], r12w
lea rcx, [rbp + 0x1250]
call fcn.14007b070
mov r9d, ebx
mov r8d, 0x37
lea rdx, [rbp + 0x1100]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa30], xmm1
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14008c154
mov rdx, rax
lea rcx, [rbp + 0xa20]
call fcn.140030c50
lea rdx, [rbp + 0xa20]
lea rcx, [rdi + 0x258]
call fcn.140092760
lea rcx, [rbp + 0xa20]
call fcn.14002f810
nop
lea rcx, [rbp + 0x1100]
call fcn.14007b070
mov r9d, ebx
mov r8d, 0x38
lea rdx, [rbp + 0x1118]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x790], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7a0], xmm1
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14008c1d8
mov rdx, rax
lea rcx, [rbp + 0x790]
call fcn.140030c50
lea rdx, [rbp + 0x790]
lea rcx, [rdi + 0x278]
call fcn.140092760
mov r8, qword [rbp + 0x7a8]
cmp r8, 8
jb 0x14008c230
inc r8
mov rdx, qword [rbp + 0x790]
lea rcx, [rbp + 0x790]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x7a0], xmm0
mov word [rbp + 0x790], r12w
lea rcx, [rbp + 0x1118]
call fcn.14007b070
mov r9d, ebx
mov r8d, 0x45
lea rdx, [rbp + 0x600]
mov rcx, rdi
call fcn.140163dc0
nop
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14008c280
add rbx, 2
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov qword [rsp + 0x40], rax
mov rcx, rax
call fcn.1401fcbb0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14008c2d9
mov r8, qword [rsp + 0x40]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x48]
jmp 0x14008c2dc
mov rax, r12
mov qword [rdi + 0x140], rax
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
mov r8, rax
mov rdx, rbx
mov rcx, qword [rdi + 0x140]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rbx, 0xffffffffffffffff
mov r9d, ebx
lea r8d, [rbx + 0x34]
lea rdx, [rbp + 0xb00]
mov rcx, rdi
call fcn.140163dc0
nop
lea rcx, [rbp + 0xb00]
call fcn.14007b3f0
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14008c32f
mov rdx, rax
lea rcx, [rdi + 0x178]
call fcn.140175fe0
mov r9d, ebx
mov r8d, 0x3b
lea rdx, [rbp + 0x11a8]
mov rcx, rdi
call fcn.140163dc0
nop
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.14007b140
nop
lea rcx, [rbp + 0x11a8]
call fcn.14007b070
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14008c38f
add rbx, 2
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov qword [rsp + 0x40], rax
mov rcx, rax
call fcn.1401fcbb0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14008c3e8
mov r8, qword [rsp + 0x40]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x48]
jmp 0x14008c3eb
mov rax, r12
mov qword [rdi + 0x2b8], rax
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
mov r8, rax
mov rdx, rbx
mov rcx, qword [rdi + 0x2b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 0x3d]
lea rdx, [rbp + 0x11c0]
mov rcx, rdi
call fcn.140163dc0
nop
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.14007b140
nop
lea rcx, [rbp + 0x11c0]
call fcn.14007b070
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
mov rcx, 0xffffffffffffffff
mov rbx, rcx
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14008c45e
add rbx, 2
mov eax, 2
mul rbx
cmovo rax, rcx
mov qword [rsp + 0x40], rax
mov rcx, rax
call fcn.1401fcbb0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14008c4b0
mov r8, qword [rsp + 0x40]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x48]
jmp 0x14008c4b3
mov rax, r12
mov qword [rdi + 0x2c0], rax
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
mov r8, rax
mov rdx, rbx
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 0x4e]
lea rdx, [rbp + 0x11d8]
mov rcx, rdi
call fcn.140163dc0
nop
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.14007b140
nop
lea rcx, [rbp + 0x11d8]
call fcn.14007b070
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
mov rcx, 0xffffffffffffffff
mov rbx, rcx
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14008c526
add rbx, 2
mov eax, 2
mul rbx
cmovo rax, rcx
mov qword [rsp + 0x40], rax
mov rcx, rax
call fcn.1401fcbb0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14008c578
mov r8, qword [rsp + 0x40]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x48]
jmp 0x14008c57b
mov rax, r12
mov qword [rdi + 0x2c8], rax
lea rcx, [rbp + 0x600]
call fcn.14007b3f0
mov r8, rax
mov rdx, rbx
mov rcx, qword [rdi + 0x2c8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov qword [rdi + 0x2d0], r12
lea rax, [0x140003818]
mov qword [rbp + 0xa40], rax
lea rax, [rbp + 0xa40]
mov qword [rbp + 0xa78], rax
mov eax, dword [rdi + 0x538]
test eax, eax
jne 0x14008cec2
mov dword [rbp + 0x68], 0xf6f6f6f6
mov dword [rbp + 0x70], 0xff6fff60
mov dword [rbp + 0x74], 0xff6eff7c
mov word [rbp + 0x6c], 0xf6f6
mov dword [rbp + 0x78], 0xff78ff6b
mov byte [rbp + 0x6e], 0xf6
mov dword [rbp + 0x7c], 0xff6b
mov rdx, r12
movzx eax, word [rbp + rdx*2 + 0x70]
movzx ecx, byte [rbp + rdx + 0x68]
add cx, ax
mov word [rbp + rdx*2 + 0x70], cx
mov byte [rbp + rdx + 0x68], 0
inc rdx
cmp rdx, 7
jb 0x14008c602
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0xc58]
call fcn.140086520
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140092a50
lea rcx, [rbp + 0xc58]
call fcn.1400907c0
nop
mov rax, r12
nop
mov byte [rbp + rax + 0x70], 0
inc rax
cmp rax, 0xe
jb 0x14008c654
mov dword [rbp + 0x3e], 0xf6f6f6f6
mov dword [rbp + 0x44], 0xff7cff4b
mov dword [rbp + 0x48], 0xff6bff73
mov byte [rbp + 0x42], 0xf6
mov dword [rbp + 0x4c], 0xff76
mov rdx, r12
movzx eax, word [rbp + rdx*2 + 0x44]
movzx ecx, byte [rbp + rdx + 0x3e]
add cx, ax
mov word [rbp + rdx*2 + 0x44], cx
mov byte [rbp + rdx + 0x3e], 0
inc rdx
cmp rdx, 5
jb 0x14008c689
lea rdx, [rbp + 0x3e]
lea rcx, [rbp + 0xc48]
call fcn.140086360
mov rdx, rax
lea rcx, [rbp + 0x5a0]
call fcn.140092a50
lea rcx, [rbp + 0xc48]
call fcn.1400907c0
nop
nop dword [rax]
mov byte [rbp + r12 + 0x44], 0
inc r12
cmp r12, 0xa
jb 0x14008c6dc
movss xmm6, dword [0x140003208]
mov dword [rsp + 0x68], 0x41200000
mov rdx, qword [rdi + 0x140]
mov rcx, qword [rdi + 0x160]
call fcn.14017a9d0
mov edx, 1
mov rcx, rax
call fcn.14017a9c0
mov rcx, rax
mov rax, qword [rdi + 0x318]
mov eax, dword [rax + 0x88]
cdq
sub eax, edx
sar eax, 1
lea edx, [rax - 0x28]
mov r8d, 0x19
call fcn.14017d670
mov edx, 0x50
lea r8d, [rdx - 0x37]
mov rcx, rax
call fcn.14017d4a0
lea rcx, [0x140003848]
mov qword [rbp + 0xf80], rcx
lea rdx, [0x14015dec0]
mov qword [rbp + 0xf88], rdx
lea rcx, [rbp + 0xf80]
mov qword [rbp + 0xfb8], rcx
lea rdx, [rbp + 0xf80]
mov rcx, rax
call fcn.14017cbc0
mov edx, 0x64
mov rcx, qword [rdi + 0x168]
call fcn.140187c70
mov rbx, rax
mov rcx, qword [rdi + 0x318]
mov eax, dword [rcx + 0x8c]
sub eax, dword [rcx + 0x84]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0x32]
mov eax, dword [rcx + 0x88]
cdq
sub eax, edx
sar eax, 1
lea edx, [rax - 0x32]
mov rcx, rbx
call fcn.14017d670
mov edx, 0x64
mov r8d, edx
mov rcx, rax
call fcn.14017d4a0
mov edx, 1
mov rcx, qword [rdi + 0x198]
call fcn.14017db20
lea rcx, [rdi + 0x178]
cmp qword [rcx + 0x18], 8
jb 0x14008c808
mov rcx, qword [rcx]
mov rdx, rcx
mov rcx, rax
call fcn.14017db00
mov edx, 0x78ffffff
mov rcx, rax
call fcn.14017a9c0
mov r13, rax
mov rbx, qword [rdi + 0x168]
mov rcx, rbx
call fcn.14017d0c0
mov r12d, eax
mov rcx, rbx
call fcn.14017d080
lea r8d, [rax + 0x1e]
add r8d, r12d
xor edx, edx
mov rcx, r13
call fcn.14017d670
mov rcx, qword [rdi + 0x318]
mov r8d, 0x14
mov edx, dword [rcx + 0x88]
mov rcx, rax
call fcn.14017d4a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x8d0], xmm0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008c886
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x8d0], xmm0
lea rdx, [rbp + 0x8d0]
mov rcx, rax
call fcn.14017d4c0
movss xmm7, dword [0x140003a24]
movaps xmm1, xmm7
mov rcx, rax
call fcn.14017d620
xor edx, edx
mov rcx, qword [rdi + 0x1a0]
call fcn.140186ca0
lea rdx, [0x140003878]
mov qword [rbp + 0xfc0], rdx
mov qword [rbp + 0xfc8], rdi
lea rcx, [rbp + 0xfc0]
mov qword [rbp + 0xff8], rcx
lea rdx, [rbp + 0xfc0]
mov rcx, rax
call fcn.14017cbc0
mov edx, 0xa
lea r8d, [rdx + 0x5a]
mov rcx, rax
call fcn.14017d670
mov rcx, qword [rdi + 0x318]
mov r8d, dword [rcx + 0x8c]
sub r8d, dword [rcx + 0x84]
sub r8d, 0xd7
mov edx, dword [rcx + 0x88]
movd xmm0, edx
cvtdq2pd xmm0, xmm0
movsd xmm8, qword [0x140003a10]
divsd xmm0, xmm8
cvttsd2si ecx, xmm0
sub edx, ecx
sub edx, 0x28
mov rcx, rax
call fcn.14017d4a0
mov rcx, rax
call fcn.14017d0f0
xor r8d, r8d
lea rdx, [0x140001688]
lea rbx, [rdi + 0x1b0]
mov rcx, rbx
call fcn.140175fe0
mov edx, 1
mov rcx, qword [rdi + 0x1a8]
call fcn.14017db20
mov edx, dword [rsp + 0x50]
mov rcx, rax
call fcn.14017a9c0
cmp qword [rbx + 0x18], 8
jb 0x14008c99b
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14017db00
xor edx, edx
lea r8d, [rdx + 0x3c]
mov rcx, rax
call fcn.14017d670
mov rcx, qword [rdi + 0x318]
mov r8d, 0x1e
mov edx, dword [rcx + 0x88]
mov rcx, rax
call fcn.14017d4a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x900], xmm0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008c9ec
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x900], xmm0
lea rdx, [rbp + 0x900]
mov rcx, rax
call fcn.14017d4c0
movaps xmm1, xmm7
mov rcx, rax
call fcn.14017d620
mov rcx, rax
call fcn.14017d0f0
xor edx, edx
mov rcx, qword [rdi + 0x1d0]
call fcn.140186c90
xor edx, edx
mov rcx, rax
call fcn.140186c70
xor edx, edx
mov rcx, rax
call fcn.140186ca0
mov rcx, qword [rdi + 0x318]
mov edx, dword [rcx + 0x88]
movd xmm0, edx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm8
cvttsd2si ecx, xmm0
sub edx, ecx
sub edx, 0x14
mov r8d, 0x64
mov rcx, rax
call fcn.14017d670
mov rcx, qword [rdi + 0x318]
mov r8d, dword [rcx + 0x8c]
sub r8d, dword [rcx + 0x84]
sub r8d, 0xd7
movd xmm0, dword [rcx + 0x88]
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x140003a48]
cvttsd2si ecx, xmm0
mov edx, 0xa
sub edx, ecx
mov rcx, rax
call fcn.14017d4a0
mov rcx, rax
call fcn.14017d0f0
mov rdx, qword [rdi + 0x2c0]
mov rcx, qword [rdi + 0x2a0]
call fcn.14017b700
mov edx, 1
mov rcx, rax
call fcn.14017b6a0
mov edx, 1
mov rcx, rax
call fcn.14017b6e0
mov rbx, rax
mov rcx, qword [rdi + 0x1d0]
call fcn.14017d0d0
mov r8d, 0x19
mov edx, eax
mov rcx, rbx
call fcn.14017d4a0
mov r13, rax
mov rbx, qword [rdi + 0x1a0]
mov rcx, rbx
call fcn.14017d0c0
mov r12d, eax
mov rcx, rbx
call fcn.14017d080
lea ebx, [rax + r12]
mov rcx, qword [rdi + 0x1d0]
call fcn.14017d0b0
lea r8d, [rbx + 0xf]
mov edx, eax
mov rcx, r13
call fcn.14017d670
lea rcx, [0x140003848]
mov qword [rbp + 0x1000], rcx
lea rcx, [0x140164400]
mov qword [rbp + 0x1008], rcx
lea rcx, [rbp + 0x1000]
mov qword [rbp + 0x1038], rcx
lea rdx, [rbp + 0x1000]
mov rcx, rax
call fcn.14017cbc0
mov rcx, rax
call fcn.14017d0f0
mov rdx, qword [rdi + 0x2c8]
mov rcx, qword [rdi + 0x2a8]
call fcn.14017a9d0
mov edx, 1
mov rcx, rax
call fcn.14017a9c0
mov r13, rax
mov rbx, qword [rdi + 0x2a0]
mov rcx, rbx
call fcn.14017d0c0
mov r12d, eax
mov rcx, rbx
call fcn.14017d080
lea r8d, [r12 + 0xf]
add r8d, eax
mov edx, 0xa
mov rcx, r13
call fcn.14017d670
mov rbx, rax
mov rcx, qword [rdi + 0x1a0]
call fcn.14017d0d0
mov r8d, 0x19
mov edx, eax
mov rcx, rbx
call fcn.14017d4a0
lea rcx, [0x1400038a8]
mov qword [rbp + 0x1040], rcx
mov qword [rbp + 0x1048], rdi
lea rcx, [rbp + 0x1040]
mov qword [rbp + 0x1078], rcx
lea rdx, [rbp + 0x1040]
mov rcx, rax
call fcn.14017cbc0
mov rcx, rax
call fcn.14017d0f0
mov rdx, qword [rdi + 0x2b8]
mov rcx, qword [rdi + 0x298]
call fcn.14017a9d0
mov edx, 1
mov rcx, rax
call fcn.14017a9c0
mov r13, rax
mov rbx, qword [rdi + 0x1a0]
mov rcx, rbx
call fcn.14017d0c0
mov r12d, eax
mov rcx, rbx
call fcn.14017d080
lea r8d, [r12 + 0xf]
add r8d, eax
mov edx, 0xa
mov rcx, r13
call fcn.14017d670
mov rbx, rax
mov rcx, qword [rdi + 0x1a0]
call fcn.14017d0d0
mov r8d, 0x19
mov edx, eax
mov rcx, rbx
call fcn.14017d4a0
lea rdx, [0x1400038d8]
mov qword [rbp + 0xf00], rdx
mov qword [rbp + 0xf08], rdi
lea rcx, [rbp + 0xf00]
mov qword [rbp + 0xf38], rcx
lea rdx, [rbp + 0xf00]
mov rcx, rax
call fcn.14017cbc0
mov rcx, rax
call fcn.14017d0f0
lea rdx, [0x140001688]
mov rcx, qword [rdi + 0x2b0]
call fcn.14017db00
mov r13, rax
mov rbx, qword [rdi + 0x2a0]
mov rcx, rbx
call fcn.14017d0c0
mov r12d, eax
mov rcx, rbx
call fcn.14017d080
lea ebx, [rax + r12]
mov rcx, qword [rdi + 0x2a0]
call fcn.14017d0b0
lea r8d, [rbx + 0xf]
mov edx, eax
mov rcx, r13
call fcn.14017d670
mov rbx, rax
mov rcx, qword [rdi + 0x1d0]
call fcn.14017d0d0
mov r8d, 0x19
mov edx, eax
mov rcx, rbx
call fcn.14017d4a0
mov rcx, rax
call fcn.14017d0f0
xor edx, edx
mov rcx, rdi
call fcn.140170880
cmp byte [rbp + 0x2f88], 0
je 0x14008ce57
lea rcx, [rbp + 0x888]
call fcn.1400867d0
mov rdx, rax
lea rcx, [rdi + 0x2d8]
call fcn.14007d960
lea rcx, [rbp + 0x888]
call 0x140090dc0
lea rdx, [0x140001688]
mov rcx, qword [rdi + 0x2d8]
call fcn.14017db00
xor edx, edx
mov rcx, rax
call fcn.14017db20
mov edx, dword [rsp + 0x50]
mov rcx, rax
call fcn.14017a9c0
mov edx, dword [rsp + 0x50]
mov rcx, rax
call fcn.14017d480
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x930], xmm0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008cddc
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x930], xmm0
lea rdx, [rbp + 0x930]
mov rcx, rax
call fcn.14017d4c0
movss xmm1, dword [0x140003a1c]
mov rcx, rax
call fcn.14017d620
mov rcx, qword [rdi + 0x318]
mov r8d, dword [rcx + 0x8c]
sub r8d, dword [rcx + 0x90]
sub r8d, 0xc8
mov edx, 0x14
mov rcx, rax
call fcn.14017d670
mov rcx, qword [rdi + 0x318]
mov edx, dword [rcx + 0x88]
sub edx, 0xa
mov r8d, 0x14
mov rcx, rax
call fcn.14017d4a0
mov rcx, rax
call fcn.14017d690
mov rdx, qword [rdi + 0x318]
add rdx, 0x98
lea rax, [0x140003938]
mov qword [rbp + 0xd00], rax
lea rax, [rbp + 0xd00]
mov qword [rbp + 0xd38], rax
lea rcx, [rbp + 0xd00]
call fcn.1401793a0
mov rcx, qword [rbp + 0xd38]
test rcx, rcx
je 0x14008dba1
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [rbp + 0xd00]
cmp rcx, rdx
setne dl
call rax
xor r12d, r12d
mov qword [rbp + 0xd38], r12
jmp 0x14008dba4
cmp eax, 2
jne 0x14008db94
lea ecx, [rax + 0x1e]
call fcn.1401fcb6c
mov rcx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008cf0f
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1400035f8]
mov qword [rcx], rax
mov qword [rcx + 0x10], r12
mov dword [rcx + 0x18], r12d
jmp 0x14008cf12
mov rcx, r12
lea rax, [rcx + 0x10]
mov qword [rbp + 0x940], rax
mov qword [rbp + 0x948], rcx
lea rdx, [rbp + 0x940]
lea rcx, [rsp + 0x70]
call fcn.140092a50
mov rcx, qword [rbp + 0x948]
test rcx, rcx
je 0x14008cf4a
call fcn.140173910
movss xmm8, dword [0x140003a20]
mov dword [rsp + 0x68], 0x41500000
movaps xmm6, xmm8
mov dword [rbp + 0x4dc], 0xf6f6f6f6
mov dword [rbp + 0x4ee], 0xff79ff76
mov dword [rbp + 0x4f2], 0xff79ff71
mov dword [rbp + 0x4e0], 0xf6f6f6f6
mov dword [rbp + 0x4f6], 0xff80ff66
mov dword [rbp + 0x4fa], 0xff7dff73
mov dword [rbp + 0x4e4], 0xf6f6f6f6
mov dword [rbp + 0x4fe], 0xff7eff73
mov dword [rbp + 0x502], 0xff7cff79
mov dword [rbp + 0x4e8], 0xf6f6f6f6
mov dword [rbp + 0x506], 0xff7eff38
mov dword [rbp + 0x50a], 0xff70ff7e
xor eax, eax
mov word [rbp + 0x50e], ax
mov rdx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x4ee]
movzx ecx, byte [rbp + rdx + 0x4dc]
add cx, ax
mov word [rbp + rdx*2 + 0x4ee], cx
mov byte [rbp + rdx + 0x4dc], 0
inc rdx
cmp rdx, 0x10
jb 0x14008cfef
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 1
mov r8d, edx
lea rcx, [rbp + 0x4ee]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov rcx, r12
nop dword [rax]
mov byte [rbp + rcx + 0x4ee], 0
inc rcx
cmp rcx, 0x20
jb 0x14008d053
test rbx, rbx
je 0x14008d2f3
mov dword [rbp + 0x4d8], r12d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48], eax
mov edx, eax
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x14008d0bf
mov rcx, rdi
call fcn.14016dd70
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x4d8]
mov r8d, dword [rsp + 0x48]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x18
call sub.gdiplus.dll_GdipAlloc
mov rbx, rax
test rax, rax
je 0x14008d119
lea rcx, [rax + 8]
lea rax, [0x140003368]
mov qword [rbx], rax
mov qword [rcx], r12
call sub.gdiplus.dll_GdipNewPrivateFontCollection
mov dword [rbx + 0x10], eax
jmp 0x14008d11c
mov rbx, r12
mov qword [rbp + 0x618], rbx
mov rdx, r12
mov rax, r12
test rbx, rbx
je 0x14008d180
mov ecx, 0x18
call fcn.1401fcb6c
mov qword [rbp + 0x618], rax
test rax, rax
je 0x14008d173
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rcx, [0x1400036a8]
mov qword [rax], rcx
mov qword [rax + 0x10], rbx
jmp 0x14008d176
mov rax, r12
mov rdx, rbx
mov qword [rbp + 0x618], r12
mov qword [rdi + 0x2e0], rdx
mov rcx, qword [rdi + 0x2e8]
mov qword [rdi + 0x2e8], rax
test rcx, rcx
je 0x14008d1a4
call fcn.140173910
nop
mov rcx, qword [rbp + 0x618]
test rcx, rcx
je 0x14008d1c1
mov rax, qword [rcx]
mov rax, qword [rax]
mov edx, 1
call rax
mov rbx, qword [rdi + 0x2e0]
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rbx + 8]
call sub.gdiplus.dll_GdipPrivateAddMemoryFont
mov dword [rbx + 0x10], eax
mov dword [rbp - 0x30], r12d
mov rbx, qword [rdi + 0x2e0]
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x70]
mov qword [rbp + 0x5b8], rax
test rax, rax
je 0x14008d2a7
mov ecx, 8
call fcn.1401fcbb0
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x14008d225
mov eax, 3
jmp 0x14008d2ac
lea r9, [rbp - 0x30]
mov r8, rax
mov edx, 1
mov rcx, qword [rbx + 8]
call sub.gdiplus.dll_GdipGetFontCollectionFamilyList
mov qword [rbp + 0x5b0], rax
test eax, eax
jne 0x14008d291
mov ebx, r12d
cmp dword [rbp - 0x30], r12d
jle 0x14008d28c
mov rdi, qword [rsp + 0x48]
mov r13, qword [rbp + 0x5b8]
nop
movsxd rdx, ebx
shl rdx, 4
add rdx, r13
mov rcx, qword [rdi]
call sub.gdiplus.dll_GdipCloneFontFamily
inc ebx
lea rdi, [rdi + 8]
cmp ebx, dword [rbp - 0x30]
jl 0x14008d264
mov rdi, qword [rbp + 0x2f60]
mov rbx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
call fcn.1401fcba8
mov rax, qword [rbp + 0x5b0]
jmp 0x14008d2ac
mov eax, 2
mov dword [rbx + 0x10], eax
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x14008d2c6
lock inc dword [rdx + 8]
mov rdx, qword [rsp + 0x78]
mov rax, qword [rsp + 0x70]
mov qword [rbp + 0x5a0], rax
mov rcx, qword [rbp + 0x5a8]
mov qword [rbp + 0x5a8], rdx
test rcx, rcx
je 0x14008d42d
call fcn.140173910
jmp 0x14008d42d
mov dword [rbp + 0x50], 0xf6f6f6f6
mov dword [rbp + 0x58], 0xff6fff60
mov dword [rbp + 0x5c], 0xff6eff7c
mov word [rbp + 0x54], 0xf6f6
mov dword [rbp + 0x60], 0xff78ff6b
mov byte [rbp + 0x56], 0xf6
mov dword [rbp + 0x64], 0xff6b
mov rdx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x58]
movzx ecx, byte [rbp + rdx + 0x50]
add cx, ax
mov word [rbp + rdx*2 + 0x58], cx
mov byte [rbp + rdx + 0x50], 0
inc rdx
cmp rdx, 7
jb 0x14008d32f
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xc38]
call fcn.140086520
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140092a50
lea rcx, [rbp + 0xc38]
call fcn.1400907c0
nop
mov rax, r12
nop dword [rax]
mov byte [rbp + rax + 0x58], 0
inc rax
cmp rax, 0xe
jb 0x14008d383
mov dword [rbp + 0x2c], 0xf6f6f6f6
mov dword [rbp + 0x32], 0xff7cff4b
mov dword [rbp + 0x36], 0xff6bff73
mov byte [rbp + 0x30], 0xf6
mov dword [rbp + 0x3a], 0xff76
mov rdx, r12
movzx eax, word [rbp + rdx*2 + 0x32]
movzx ecx, byte [rbp + rdx + 0x2c]
add cx, ax
mov word [rbp + rdx*2 + 0x32], cx
mov byte [rbp + rdx + 0x2c], 0
inc rdx
cmp rdx, 5
jb 0x14008d3b8
lea rdx, [rbp + 0x2c]
lea rcx, [rbp + 0xc28]
call fcn.140086360
mov rdx, rax
lea rcx, [rbp + 0x5a0]
call fcn.140092a50
lea rcx, [rbp + 0xc28]
call fcn.1400907c0
nop
mov rax, r12
mov byte [rbp + rax + 0x32], 0
inc rax
cmp rax, 0xa
jb 0x14008d40b
movss xmm6, dword [0x140003208]
mov dword [rsp + 0x68], 0x41200000
mov dword [rbp + 0x130], 0xf6f6f6f6
mov dword [rbp + 0x13c], 0xff2aff48
mov dword [rbp + 0x140], 0xff7dff5f
mov dword [rbp + 0x134], 0xf6f6f6f6
mov dword [rbp + 0x144], 0xff7cff6f
mov dword [rbp + 0x148], 0xff6bff78
mov word [rbp + 0x138], 0xf6f6
mov dword [rbp + 0x14c], 0xff6fff77
xor eax, eax
mov word [rbp + 0x150], ax
mov rdx, r12
nop dword [rax]
movzx eax, word [rbp + rdx*2 + 0x13c]
movzx ecx, byte [rbp + rdx + 0x130]
add cx, ax
mov word [rbp + rdx*2 + 0x13c], cx
mov byte [rbp + rdx + 0x130], 0
inc rdx
cmp rdx, 0xa
jb 0x14008d48f
lea rcx, [rbp + 0x13c]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rcx + r8*2], 0
jne 0x14008d4d3
lea rbx, [rdi + 0x1b0]
lea rdx, [rbp + 0x13c]
mov rcx, rbx
call fcn.140175fe0
nop
mov rax, r12
nop word [rax + rax]
mov byte [rbp + rax + 0x13c], 0
inc rax
cmp rax, 0x14
jb 0x14008d507
cmp qword [rbx + 0x18], 8
jb 0x14008d52a
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, qword [rdi + 0x1a8]
call fcn.14017db00
mov edx, 0x19
lea r8d, [rdx - 0x28]
mov rcx, qword [rdi + 0x1a8]
call fcn.14017d670
mov edx, 0xc8
mov r8d, 0x14
mov rcx, qword [rdi + 0x1a8]
call fcn.14017d4a0
mov rcx, qword [rdi + 0x1a8]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x950], xmm0
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14008d589
lock inc dword [rax + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x950], xmm0
lea rdx, [rbp + 0x950]
call fcn.14017d4c0
movaps xmm1, xmm8
mov rcx, qword [rdi + 0x1a8]
call fcn.14017d620
mov rax, qword [rdi + 0x318]
movd xmm0, dword [rax + 0x8c]
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x140003a28]
movss xmm7, dword [0x140003a34]
subss xmm0, xmm7
cvttss2si r8d, xmm0
mov edx, 0x19
mov rcx, qword [rdi + 0x198]
call fcn.14017d670
mov rax, qword [rdi + 0x318]
mov edx, dword [rax + 0x88]
sub edx, 0x19
mov r8d, 0x14
mov rcx, qword [rdi + 0x198]
call fcn.14017d4a0
mov rcx, qword [rdi + 0x198]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x8a0], xmm0
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14008d634
lock inc dword [rax + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x8a0], xmm0
lea rdx, [rbp + 0x8a0]
call fcn.14017d4c0
movaps xmm1, xmm8
mov rcx, qword [rdi + 0x198]
call fcn.14017d620
lea rdx, [rdi + 0x178]
cmp qword [rdx + 0x18], 8
jb 0x14008d672
mov rdx, qword [rdx]
mov rcx, qword [rdi + 0x198]
call fcn.14017db00
mov edx, 0x67
lea r8d, [rdx - 4]
mov rcx, qword [rdi + 0x1a0]
call fcn.14017d670
mov edx, 0x114
mov r8d, 0x50
mov rcx, qword [rdi + 0x1a0]
call fcn.14017d4a0
mov rcx, qword [rdi + 0x1a0]
lea rdx, [0x140003878]
mov qword [rbp + 0xf40], rdx
mov qword [rbp + 0xf48], rdi
lea rax, [rbp + 0xf40]
mov qword [rbp + 0xf78], rax
lea rdx, [rbp + 0xf40]
call fcn.14017cbc0
mov rcx, qword [rdi + 0x1a0]
call fcn.14017d0f0
mov rax, qword [rdi + 0x318]
movd xmm0, dword [rax + 0x8c]
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x140003a30]
subss xmm0, xmm7
cvttss2si r8d, xmm0
mov edx, 0x1b
mov rcx, qword [rdi + 0x170]
call fcn.14017d670
mov rax, qword [rdi + 0x318]
movd xmm0, dword [rax + 0x88]
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x140003a2c]
cvttss2si edx, xmm0
mov r8d, 4
mov rcx, qword [rdi + 0x170]
call fcn.14017d4a0
mov dl, 1
mov rcx, qword [rdi + 0x170]
call fcn.140187770
mov edx, 0x32
mov rcx, qword [rdi + 0x170]
call fcn.140187780
mov ecx, 4
call fcn.1401fcbb0
test rax, rax
je 0x14008d78b
xor ecx, ecx
mov dword [rax], ecx
jmp 0x14008d78e
mov rax, r12
mov qword [rdi + 0x140], rax
mov ecx, 0x78
mov word [rax], cx
mov rdx, qword [rdi + 0x140]
mov rcx, qword [rdi + 0x160]
call fcn.14017a9d0
mov rax, qword [rdi + 0x318]
movd xmm0, dword [rax + 0x88]
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x140003a38]
cvttss2si edx, xmm0
mov r8d, 0xffffffde
mov rcx, qword [rdi + 0x160]
call fcn.14017d670
mov edx, 0x1e
lea r8d, [rdx - 0x10]
mov rcx, qword [rdi + 0x160]
call fcn.14017d4a0
mov edx, 3
mov rcx, qword [rdi + 0x160]
call fcn.14017a9c0
mov rcx, qword [rdi + 0x160]
lea rax, [0x140003848]
mov qword [rbp + 0xde0], rax
lea rdx, [0x14015dec0]
mov qword [rbp + 0xde8], rdx
lea rax, [rbp + 0xde0]
mov qword [rbp + 0xe18], rax
lea rdx, [rbp + 0xde0]
call fcn.14017cbc0
lea rcx, [0x1400034f8]
call fcn.140dd1755
nop
mov qword [rdi + 0x2b8], rax
mov rdx, rax
mov rcx, qword [rdi + 0x298]
call fcn.14017a9d0
mov edx, 0x134
lea r8d, [rdx - 0x80]
mov rcx, qword [rdi + 0x298]
call fcn.14017d670
mov edx, 0x46
lea r8d, [rdx - 0x32]
mov rcx, qword [rdi + 0x298]
call fcn.14017d4a0
mov edx, 3
mov rcx, qword [rdi + 0x298]
call fcn.14017a9c0
mov rcx, qword [rdi + 0x298]
lea rdx, [0x1400038d8]
mov qword [rbp + 0xec0], rdx
mov qword [rbp + 0xec8], rdi
lea rax, [rbp + 0xec0]
mov qword [rbp + 0xef8], rax
lea rdx, [rbp + 0xec0]
call fcn.14017cbc0
mov rcx, qword [rdi + 0x298]
call fcn.14017d0f0
mov ecx, 0xb0
call fcn.1401fcb6c
mov r13, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008d92b
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x140003618]
mov qword [r13], rax
lea rcx, [r13 + 0x10]
call fcn.14017d7a0
jmp 0x14008d92e
mov r13, r12
lea rbx, [r13 + 0x10]
mov qword [rbp + 0x5e0], rbx
mov qword [rbp + 0x5e8], r13
lea rcx, [0x140003508]
call fcn.140dd1755
nop
mov rdx, rax
mov rcx, rbx
call fcn.14017db00
mov edx, 0x7a
lea r8d, [rdx - 0x28]
mov rcx, qword [rbp + 0x5e0]
call fcn.14017d670
mov edx, 0xc8
mov r8d, 0x14
mov rcx, qword [rbp + 0x5e0]
call fcn.14017d4a0
mov rcx, qword [rbp + 0x5e0]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x960], xmm0
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14008d9a8
lock inc dword [rax + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x960], xmm0
lea rdx, [rbp + 0x960]
call fcn.14017d4c0
movss xmm1, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x5e0]
call fcn.14017d620
lea rcx, [rdi + 0x148]
mov rax, qword [rbp + 0x5e8]
test rax, rax
je 0x14008d9ee
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x680], xmm0
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x14008da35
mov rax, qword [rbp + 0x680]
mov qword [rdx], rax
mov rax, qword [rbp + 0x688]
mov qword [rdx + 8], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x680], xmm0
add qword [rcx + 8], 0x10
jmp 0x14008da42
lea r8, [rbp + 0x680]
call fcn.140080b40
nop
mov rcx, qword [rbp + 0x688]
test rcx, rcx
je 0x14008da57
call fcn.140173910
mov rcx, qword [rdi + 0x1d0]
call fcn.14017d0f0
mov rdx, qword [rdi + 0x318]
add rdx, 0x98
lea rax, [0x140003968]
mov qword [rbp + 0xd40], rax
lea rax, [rbp + 0xd40]
mov qword [rbp + 0xd78], rax
lea rcx, [rbp + 0xd40]
call fcn.1401793a0
mov rcx, qword [rbp + 0xd78]
test rcx, rcx
je 0x14008dac6
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [rbp + 0xd40]
cmp rcx, rdx
setne dl
call rax
mov qword [rbp + 0xd78], r12
lea rax, [0x140003998]
mov qword [rbp + 0xa80], rax
mov qword [rbp + 0xa88], rdi
lea rax, [rbp + 0xa80]
mov qword [rbp + 0xab8], rax
mov qword [rbp + 0xeb8], r12
lea rdx, [rbp + 0xa80]
lea rcx, [rbp + 0xe80]
call fcn.140175660
lea rdx, [rbp + 0xa40]
lea rcx, [rbp + 0xa80]
call fcn.140175660
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xa40]
call fcn.140175660
mov rcx, qword [rbp + 0xeb8]
test rcx, rcx
je 0x14008db56
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [rbp + 0xe80]
cmp rcx, rdx
setne dl
call rax
mov qword [rbp + 0xeb8], r12
mov rcx, qword [rbp + 0xab8]
test rcx, rcx
je 0x14008db83
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [rbp + 0xa80]
cmp rcx, rdx
setne dl
call rax
mov qword [rbp + 0xab8], r12
lea rcx, [rbp + 0x5e0]
call fcn.140090910
jmp 0x14008dba4
movss xmm6, dword [rbp + 0x2f60]
jmp 0x14008dba4
xor r12d, r12d
lea rax, [rbp - 0x2c]
mov qword [rbp + 0x6a0], rax
lea rax, [rbp - 0x28]
mov qword [rbp + 0x6a8], rax
lea rax, [rbp - 0x24]
mov qword [rbp + 0x6b0], rax
lea rax, [rbp - 0x20]
mov qword [rbp + 0x6b8], rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0x6c0], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x6c8], rax
lea rax, [rsp + 0x68]
mov qword [rbp + 0x6d0], rax
mov rdx, qword [rdi + 0x160]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x168]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x170]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x198]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x1a0]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x1a8]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x1d0]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x298]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x2a0]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x2a8]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rdx, qword [rdi + 0x2b0]
lea rcx, [rbp + 0x6a0]
call fcn.14015c4d0
mov rbx, qword [rdi + 0x148]
mov r13, qword [rdi + 0x150]
cmp rbx, r13
je 0x14008dd79
nop
mov edx, dword [rbp - 0x2c]
mov rcx, qword [rbx]
call fcn.14017d410
mov edx, dword [rbp - 0x28]
mov rcx, rax
call fcn.14017d450
mov edx, dword [rbp - 0x24]
mov rcx, rax
call fcn.14017d430
mov edx, dword [rbp - 0x20]
mov rcx, rax
call fcn.14017d460
mov edx, dword [rsp + 0x50]
mov rcx, rax
call fcn.14017d480
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x870], xmm0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008dd33
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x870], xmm0
lea rdx, [rbp + 0x870]
mov rcx, rax
call fcn.14017d4c0
movss xmm1, dword [rsp + 0x68]
mov rcx, rax
call fcn.14017d620
mov rdx, qword [rbx]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
add rbx, 0x10
cmp rbx, r13
jne 0x14008dcde
mov edx, r14d
mov rcx, qword [rdi + 0x170]
call fcn.140187730
mov edx, r15d
mov rcx, qword [rdi + 0x170]
call fcn.140187750
mov edx, esi
mov rcx, qword [rdi + 0x1a0]
call fcn.140186c50
mov edx, esi
mov rcx, qword [rdi + 0x1d0]
call fcn.140186c50
mov rcx, qword [rdi + 0x1a0]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x890], xmm0
mov rax, qword [rbp + 0x5a8]
test rax, rax
je 0x14008ddd9
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x890], xmm0
lea rdx, [rbp + 0x890]
call fcn.14017d4c0
movaps xmm1, xmm6
mov rcx, qword [rdi + 0x1a0]
call fcn.14017d620
mov rcx, qword [rdi + 0x1d0]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x850], xmm0
mov rax, qword [rbp + 0x5a8]
test rax, rax
je 0x14008de29
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x850], xmm0
lea rdx, [rbp + 0x850]
call fcn.14017d4c0
movaps xmm1, xmm6
mov rcx, qword [rdi + 0x1d0]
call fcn.14017d620
mov rdx, qword [rdi + 0x160]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x168]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x170]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x198]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x1a0]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x1a8]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x298]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov rdx, qword [rdi + 0x2d8]
test rdx, rdx
je 0x14008def4
mov rcx, qword [rdi + 0x318]
call fcn.140077150
cmp byte [rdi + 0x57c], 0
je 0x14008df14
mov rdx, qword [rdi + 0x1d0]
mov rcx, qword [rdi + 0x318]
call fcn.140077150
mov r8, rdi
lea rdx, [0x140168230]
mov rcx, qword [rsp + 0x58]
call fcn.140198480
mov qword [rdi + 0x5f0], rax
mov rcx, rdi
call fcn.14016ebb0
mov rbx, 0xffffffffffffffff
mov r13, qword [rbp + 0x2f70]
inc rbx
cmp word [r13 + rbx*2], 0
jne 0x14008df45
add rbx, rbx
lea r14, [rbx + 0xf]
and r14, 0xfffffffffffffff0
lea rcx, [r14 + 0x12]
call fcn.1401fcbb0
mov rsi, rax
test rax, rax
je 0x14008df88
lea r8, [r14 + 0x12]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14008df8b
mov rsi, r12
mov dword [rsp + 0x20], 0xf0000000
mov r9d, 1
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x698]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x14008dfc1
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8, rsi
mov edx, 0x10
mov rcx, qword [rbp + 0x698]
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
xor edx, edx
mov rcx, qword [rbp + 0x698]
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov dword [rbp - 0x80], 0xf6f6f6f6
mov dword [rbp - 0x5f], 0x56403e51
mov dword [rbp - 0x7c], 0xf6f6f6f6
mov dword [rbp - 0x5b], 0x6c5a406e
mov dword [rbp - 0x78], 0xf6f6f6f6
mov dword [rbp - 0x57], 0x3e6f746d
mov dword [rbp - 0x74], 0xf6f6f6f6
mov dword [rbp - 0x53], 0x5a645043
mov dword [rbp - 0x70], 0xf6f6f6f6
mov dword [rbp - 0x4f], 0x7c545b7e
mov dword [rbp - 0x6c], 0xf6f6f6f6
mov dword [rbp - 0x4b], 0x417c3e50
mov dword [rbp - 0x68], 0xf6f6f6f6
mov dword [rbp - 0x47], 0x4e645762
mov dword [rbp - 0x64], 0xf6f6f6f6
mov dword [rbp - 0x43], 0x62517551
xor eax, eax
mov byte [rbp - 0x3f], al
mov rdx, r12
nop dword [rax]
movzx eax, byte [rbp + rdx - 0x5f]
movzx ecx, byte [rbp + rdx - 0x80]
add cl, al
mov byte [rbp + rdx - 0x5f], cl
mov byte [rbp + rdx - 0x80], 0
inc rdx
cmp rdx, 0x20
jb 0x14008e061
mov r8, rbx
mov rdx, r13
lea rcx, [rsi + 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp + 0x860], eax
mov dword [rbp + 0x864], ebx
mov dword [rbp + 0x868], ecx
mov dword [rbp + 0x86c], edx
bt ecx, 0x19
jae 0x14008e0f8
lea rcx, [rbp + 0x1950]
call fcn.1400278a0
mov r8, rsi
lea rdx, [rbp - 0x5f]
lea rcx, [rbp + 0x1950]
call fcn.140027bd0
lea r9, [rsi + 0x10]
mov r8d, r14d
lea rdx, [rsi + 0x10]
lea rcx, [rbp + 0x1950]
call fcn.140027aa0
jmp 0x14008e132
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x13f0]
call sub.VCRUNTIME140.dll_memset
mov r8, rsi
lea rdx, [rbp - 0x5f]
lea rcx, [rbp + 0x13f0]
call fcn.140026250
mov r8d, r14d
lea rdx, [rsi + 0x10]
lea rcx, [rbp + 0x13f0]
call fcn.140026130
mov rax, r12
nop dword [rax]
mov byte [rbp + rax - 0x5f], 0
inc rax
cmp rax, 0x20
jb 0x14008e13c
lea r8d, [r14 + 0x10]
mov rdx, rsi
lea rcx, [rbp + 0xe20]
call fcn.140073dd0
nop
lea rdx, [rbp + 0xe20]
lea rcx, [rbp + 0x9a0]
call fcn.1401fc680
nop
lea rdx, [rbp + 0x9a0]
cmp qword [rbp + 0x9b8], 0x10
cmovae rdx, qword [rbp + 0x9a0]
mov r8, qword [rbp + 0x9b0]
add r8, rdx
lea rdx, [rbp + 0x9a0]
cmp qword [rbp + 0x9b8], 0x10
cmovae rdx, qword [rbp + 0x9a0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x628], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x638], xmm1
cmp rdx, r8
jne 0x14008e1e9
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x638], xmm0
mov word [rbp + 0x628], r12w
jmp 0x14008e1fc
mov r9, r8
sub r9, rdx
lea rcx, [rbp + 0x628]
call fcn.14007f0c0
nop
lea rsi, [rbp + 0x628]
cmp qword [rbp + 0x640], 8
cmovae rsi, qword [rbp + 0x628]
mov r14d, dword [rdi + 0x48]
mov ecx, 0x170
call fcn.1401fcb6c
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14008e272
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x140003638]
mov qword [rbx], rax
lea rcx, [rbx + 0x10]
mov qword [rsp + 0x20], rsi
mov r9d, r14d
mov r8d, dword [rdi + 0x540]
mov edx, 0x32
call fcn.14004b000
jmp 0x14008e275
mov rbx, r12
lea rax, [rbx + 0x10]
mov qword [rdi + 0x308], rax
mov rcx, qword [rdi + 0x310]
mov qword [rdi + 0x310], rbx
test rcx, rcx
je 0x14008e29c
call fcn.140173910
lea rdx, [rbp + 0xc18]
mov rcx, qword [rdi + 0x308]
call fcn.14004fef0
nop
mov rcx, qword [rax]
call fcn.1401940c0
mov esi, eax
mov rcx, qword [rbp + 0xc20]
test rcx, rcx
je 0x14008e2cf
call fcn.140173910
test esi, esi
je 0x14008e34c
mov r8d, esi
lea rdx, [rbp + 0x12d8]
mov rcx, rdi
call fcn.1401640e0
nop
mov rcx, rax
call fcn.140176380
mov rbx, rax
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 0x40]
lea rdx, [rbp + 0x11f0]
mov rcx, rdi
call fcn.140163dc0
nop
mov rcx, rax
call fcn.14007b3f0
mov r9, rbx
mov r8d, esi
mov rdx, rax
mov rcx, rdi
call fcn.14016d480
nop
lea rcx, [rbp + 0x11f0]
call fcn.14007b070
nop
lea rcx, [rbp + 0x12d8]
call fcn.140029b70
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rdi + 0x308]
lea rax, [0x140003908]
mov qword [rbp + 0xe40], rax
mov qword [rbp + 0xe48], rdi
lea rax, [rbp + 0xe40]
mov qword [rbp + 0xe78], rax
lea rdx, [rbp + 0xe40]
call fcn.14004fc10
mov rcx, qword [rbp + 0xa78]
test rcx, rcx
je 0x14008e490
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov r8, qword [rbp + 0x640]
cmp r8, 8
jb 0x14008e3c0
inc r8
mov rdx, qword [rbp + 0x628]
lea rcx, [rbp + 0x628]
call fcn.1400543b0
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rbp + 0x638], xmm0
mov word [rbp + 0x628], r12w
lea rcx, [rbp + 0x9a0]
call fcn.14004c600
nop
lea rcx, [rbp + 0xe20]
call fcn.14004c600
nop
mov rcx, qword [rbp + 0xa78]
test rcx, rcx
je 0x14008e41f
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [rbp + 0xa40]
cmp rcx, rdx
setne dl
call rax
mov qword [rbp + 0xa78], r12
lea rcx, [rbp + 0xb00]
call fcn.14007b070
nop
lea rcx, [rbp + 0x600]
call fcn.14007b070
nop
mov rcx, qword [rbp + 0x5a8]
test rcx, rcx
je 0x14008e44f
call fcn.140173910
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008e463
call fcn.140173910
nop
mov rax, rdi
lea r11, [rsp + 0x3020]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call sub.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_
nop
int3