Function at 0x1400080f0
Capabilities:
Check if file exists
Check os version
Enumerate processes via ntquerysysteminformation
Get hostname
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x578
movaps xmmword [rsp + 0x560], xmm8
movaps xmmword [rsp + 0x550], xmm7
movaps xmmword [rsp + 0x540], xmm6
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x290], xmm0
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
jne 0x140008164
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movdqu xmm8, xmmword [rax + 0x68]
jmp 0x1400081b0
movaps xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
movdqa xmm8, xmmword [rsp + 0xc0]
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
movdqu xmmword [rax + 0x68], xmm8
movq rax, xmm8
inc rax
mov ecx, dword [0x14002d11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
mov rax, qword [0x14002d110]
test rax, rax
je 0x14000821a
and eax, 2
xor ecx, ecx
or rax, rcx
je 0x14000823c
mov rax, qword [0x14002d110]
test rax, rax
je 0x14000822b
and eax, 0x400
xor ecx, ecx
or rax, rcx
je 0x14000823c
mov qword [rsp + 0x4d8], 1
mov qword [rsp + 0x4e0], 0
jmp 0x14000824a
call fcn.1400211f0
and eax, 2
xor ecx, ecx
or rax, rcx
jne 0x1400081e8
jmp 0x14000823c
call fcn.1400211f0
and eax, 0x400
xor ecx, ecx
or rax, rcx
jne 0x140008200
lea rax, [rsp + 0x4d8]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movabs r14, 0x8000000000000000
mov qword [rsp + 0x490], r14
mov qword [rsp + 0x498], 0
mov qword [rsp + 0x4a0], 1
movaps xmm0, xmmword [rsp + 0x290]
movups xmmword [rsp + 0x4a8], xmm0
mov qword [rsp + 0x448], 0
mov qword [rsp + 0x450], 8
mov qword [rsp + 0x458], 0
movdqu xmm6, xmmword [0x1400239f0]
movdqu xmmword [rsp + 0x460], xmm6
movups xmm7, xmmword [0x140023a00]
movups xmmword [rsp + 0x470], xmm7
movdqu xmmword [rsp + 0x480], xmm8
mov word [rsp + 0x508], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e8], xmm0
mov qword [rsp + 0x4f8], 1
mov qword [rsp + 0x500], 0
mov byte [rsp + 0x50a], 0
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
mov qword [rsp + 0x398], rsi
jne 0x140008348
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movdqu xmm0, xmmword [rax + 0x68]
jmp 0x140008392
movaps xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
movdqa xmm0, xmmword [rsp + 0xc0]
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
movdqu xmmword [rax + 0x68], xmm0
movq rax, xmm0
inc rax
mov ecx, dword [0x14002d11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
movdqa xmmword [rsp + 0x3f0], xmm6
movaps xmmword [rsp + 0x400], xmm7
movdqa xmmword [rsp + 0x410], xmm0
lea rax, [0x140022e08]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x1708fcca626eb4b3
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007cb0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x14002d118]
mov edx, 7
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xda
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x1d
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x2c
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xeb050df1
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x98], 7
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 7
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
jne 0x1400084db
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movdqu xmm0, xmmword [rax + 0x68]
jmp 0x14000852a
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
movdqa xmm0, xmmword [rsp + 0xc0]
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
movdqu xmmword [rax + 0x68], xmm0
movq rax, xmm0
inc rax
mov ecx, dword [0x14002d11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
movdqa xmmword [rsp + 0x1b0], xmm6
movaps xmmword [rsp + 0x1c0], xmm7
movdqa xmmword [rsp + 0x1d0], xmm0
lea rdx, [0x140029040]
lea rcx, [rsp + 0xc0]
mov r8d, 0x12
call fcn.140019620
mov rcx, qword [rsp + 0xc0]
cmp rcx, r14
je 0x140008696
mov r8, qword [rsp + 0xc8]
mov r10, qword [rsp + 0xd0]
mov r9b, 1
test r10, r10
je 0x140008669
cmp r10, 1
jne 0x1400085d5
movzx eax, byte [r8]
cmp eax, 0x2b
je 0x1400085ca
mov r10d, 1
mov r11, r8
cmp eax, 0x2d
jne 0x140008632
mov r10d, 0x100
jmp 0x140008669
cmp byte [r8], 0x2b
jne 0x140008629
lea r11, [r8 + 1]
lea rax, [r10 - 1]
cmp r10, 0xa
mov r10, rax
jb 0x140008632
xor esi, esi
mov edi, 0xa
xor eax, eax
nop word cs:[rax + rax]
cmp r10, rsi
je 0x14000865f
movzx ebx, byte [r11 + rsi]
add ebx, 0xffffffd0
mul edi
jo 0x140009a11
cmp ebx, 0xa
jae 0x1400085ca
inc rsi
add eax, ebx
jae 0x140008600
mov r10d, 0x200
jmp 0x140008669
mov r11, r8
cmp r10, 9
jae 0x1400085ec
xor edx, edx
xor eax, eax
nop word cs:[rax + rax]
movzx esi, byte [r11 + rdx]
add esi, 0xffffffd0
cmp esi, 9
ja 0x1400085ca
lea eax, [rax + rax*4]
lea eax, [rsi + rax*2]
inc rdx
cmp r10, rdx
jne 0x140008640
shl rax, 0x20
xor r9d, r9d
mov r10, rax
shr r10, 0x24
cmp r10d, 0x55f
setb bl
or bl, r9b
test rcx, rcx
je 0x14000868e
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test bl, bl
je 0x1400087e1
lea rdx, [0x14002902a]
lea rcx, [rsp + 0x360]
mov r8d, 0xb
call fcn.140019620
cmp qword [rsp + 0x360], r14
je 0x140008e53
lea rax, [0x140023791]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x3bc9a2044ae990fc
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007d80
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x14002d118]
mov edx, 0xa
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov ecx, esi
shr ecx, 8
xor cl, 0xa6
xor sil, 0xfc
movabs rdx, 0x8f313d373e1380d3
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x68], 0xa
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0xa
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x2a8], rax
movdqa xmm0, xmmword [rsp + 0x360]
movdqu xmmword [rsp + 0x298], xmm0
mov qword [rsp + 0x290], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x68]
lea r9, [rsp + 0x290]
call fcn.140007560
cmp qword [rsp + 0xc0], 0
je 0x140008e53
cmp qword [rsp + 0xc8], 0
je 0x140008e31
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x140008e53
lea rdx, [0x14002902a]
lea rcx, [rsp + 0x290]
mov r8d, 0xb
call fcn.140019620
mov r12, qword [rsp + 0x290]
cmp r12, r14
jne 0x140008815
mov qword [rsp + 0x360], r14
jmp 0x1400086b0
mov rdi, qword [rsp + 0x298]
mov rbx, qword [rsp + 0x2a0]
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xd0], 0
mov r11d, 1
xor edx, edx
lea r14, [0x140029035]
xor ecx, ecx
mov r9d, 1
xor r8d, r8d
mov eax, 1
jmp 0x14000888d
lea r10, [r9 + r8]
inc r10
mov rax, r10
sub rax, rcx
xor r8d, r8d
lea r11, [r10 + r8]
mov r9, r10
cmp r11, 0xb
jae 0x1400088e1
lea r10, [r8 + rcx]
cmp r10, 0xa
ja 0x14000bf2d
movzx r10d, byte [r10 + r14]
cmp byte [r11 + r14], r10b
jb 0x140008870
jne 0x1400088d0
inc r8
cmp r8, rax
mov r11, r8
cmove r11, rdx
cmovne r8, rdx
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x140008880
lea r10, [r9 + 1]
mov eax, 1
xor r8d, r8d
mov rcx, r9
jmp 0x140008880
mov r11d, 1
xor edx, edx
xor r15d, r15d
mov r9d, 1
xor r8d, r8d
mov r13d, 1
jmp 0x14000891d
lea r10, [r9 + r8]
inc r10
mov r13, r10
sub r13, r15
xor r8d, r8d
lea r11, [r10 + r8]
mov r9, r10
cmp r11, 0xb
jae 0x140008972
lea r10, [r8 + r15]
cmp r10, 0xa
ja 0x14000bf2d
movzx r10d, byte [r10 + r14]
cmp byte [r11 + r14], r10b
ja 0x140008900
jne 0x140008960
inc r8
cmp r8, r13
mov r11, r8
cmove r11, rdx
cmovne r8, rdx
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x140008910
lea r10, [r9 + 1]
mov r13d, 1
xor r8d, r8d
mov r15, r9
jmp 0x140008910
cmp rcx, r15
cmova r15, rcx
cmova r13, rax
cmp r15, 0xb
ja 0x14000bf2d
mov rax, r13
add rax, r15
jb 0x14000bf2d
cmp rax, 0xb
ja 0x14000bf2d
lea rdx, [r14 + r13]
mov rcx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
mov qword [rsp + 0xb0], r12
je 0x1400097fa
mov r10d, 0xb
sub r10, r15
cmp r15, r10
cmova r10, r15
inc r10
movabs rbp, 0x8bc21100800000
mov r13, 0xffffffffffffffff
mov eax, 0xb
mov qword [rsp + 0x58], r10
sub rax, r10
mov qword [rsp + 0x1a8], rax
lea rax, [r15 - 1]
mov qword [rsp + 0x48], rax
mov ecx, 1
mov eax, 1
sub rax, r15
mov qword [rsp + 0xb8], rax
lea rax, [rdi + r15]
dec rax
mov qword [rsp + 0x1a0], rax
mov rax, r15
neg rax
mov qword [rsp + 0x50], rax
xor r12d, r12d
xor edx, edx
mov qword [rsp + 0x60], rdi
lea rax, [rdx + 0xa]
cmp r13, 0xffffffffffffffff
je 0x140008b40
nop word cs:[rax + rax]
cmp rax, rbx
jae 0x140008db9
mov rsi, rdx
jmp 0x140008a74
add rsi, 0xb
xor r13d, r13d
lea rax, [rsi + 0xa]
cmp rax, rbx
jae 0x140008db9
movzx eax, byte [rdi + rax]
bt rbp, rax
jae 0x140008a60
cmp r15, r13
mov r9, r13
cmova r9, r15
lea rax, [rdi + rsi]
nop dword [rax]
cmp r9, 0xb
jae 0x140008ac0
mov r8, r9
add r9, rsi
cmp r9, rbx
jae 0x14000bf2d
lea r9, [r8 + 1]
movzx r10d, byte [r8 + r14]
cmp r10b, byte [rax + r8]
je 0x140008a90
sub rsi, r15
add rsi, r8
inc rsi
jmp 0x140008a64
mov r8, qword [rsp + 0x48]
nop word cs:[rax + rax]
lea r9, [r8 + 1]
cmp r13, r9
jae 0x140008b30
cmp r9, 0xb
ja 0x14000bf2d
lea r9, [rsi + r8]
cmp r9, rbx
jae 0x14000bf2d
movzx r9d, byte [r8 + r14]
lea r10, [r8 - 1]
cmp r9b, byte [rax + r8]
mov r8, r10
je 0x140008ad0
add rsi, qword [rsp + 0x58]
mov r13, qword [rsp + 0x1a8]
lea rax, [rsi + 0xa]
cmp rax, rbx
jb 0x140008a74
jmp 0x140008db9
xor r13d, r13d
jmp 0x140008cb0
cmp rax, rbx
jae 0x140008db9
mov rsi, rdx
cmp qword [rsp + 0x48], 0xb
jb 0x140008b71
jmp 0x140008c39
add rsi, 0xb
lea rax, [rsi + 0xa]
cmp rax, rbx
jae 0x140008db9
movzx eax, byte [rdi + rax]
bt rbp, rax
jae 0x140008b60
lea r8, [rdi + rsi]
mov r9, r15
mov r13, qword [rsp + 0x48]
nop word [rax + rax]
cmp r9, 0xb
je 0x140008bd0
mov rax, r9
add r9, rsi
cmp r9, rbx
jae 0x14000bf2d
lea r9, [rax + 1]
movzx r10d, byte [rax + r14]
cmp r10b, byte [r8 + rax]
je 0x140008b90
add rsi, qword [rsp + 0xb8]
add rsi, rax
jmp 0x140008b64
mov rax, qword [rsp + 0x1a0]
add rax, rsi
lea r8, [rsi + r13]
xor r9d, r9d
nop word cs:[rax + rax]
cmp qword [rsp + 0x50], r9
je 0x140008c9e
lea r10, [r8 + r9]
cmp r10, rbx
jae 0x14000bf2d
lea r10, [r9 + r13]
movzx r10d, byte [r14 + r10]
lea r11, [r9 - 1]
cmp r10b, byte [rax + r9]
mov r9, r11
je 0x140008bf0
add rsi, qword [rsp + 0x58]
jmp 0x140008b64
add rsi, 0xb
lea rax, [rsi + 0xa]
cmp rax, rbx
jae 0x140008db9
movzx eax, byte [rdi + rax]
bt rbp, rax
jae 0x140008c28
lea r8, [rdi + rsi]
mov r9, r15
nop word [rax + rax]
cmp r9, 0xb
jae 0x140008c8d
mov rax, r9
add r9, rsi
cmp r9, rbx
jae 0x14000bf2d
lea r9, [rax + 1]
movzx r10d, byte [rax + r14]
cmp r10b, byte [r8 + rax]
je 0x140008c50
add rsi, qword [rsp + 0xb8]
add rsi, rax
lea rax, [rsi + 0xa]
cmp rax, rbx
jb 0x140008c39
jmp 0x140008db9
mov r13, 0xffffffffffffffff
test r15, r15
je 0x140008cb0
jmp 0x14000bf2d
mov r13, 0xffffffffffffffff
nop word cs:[rax + rax]
mov rdi, rsi
sub rdi, rdx
mov rax, qword [rsp + 0xc0]
sub rax, r12
cmp rax, rdi
jb 0x140008d40
add rdx, qword [rsp + 0x60]
add rcx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add r12, rdi
mov qword [rsp + 0xd0], r12
mov rax, qword [rsp + 0xc0]
sub rax, r12
cmp rax, 0xa
jbe 0x140008d87
add rsi, 0xb
mov rcx, qword [rsp + 0xc8]
movabs rax, 0x2073776f646e6957
mov qword [rcx + r12], rax
mov dword [rcx + r12 + 7], 0x20313120
add r12, 0xb
mov qword [rsp + 0xd0], r12
mov rdx, rsi
mov rdi, qword [rsp + 0x60]
lea rax, [rdx + 0xa]
cmp r13, 0xffffffffffffffff
jne 0x140008a50
jmp 0x140008b40
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x248], rdx
mov rdx, r12
mov r8, rdi
call fcn.140020ba0
mov rdx, qword [rsp + 0x248]
mov rcx, qword [rsp + 0xc8]
mov r12, qword [rsp + 0xd0]
jmp 0x140008cc6
mov qword [rsp + 0x20], 1
mov r8d, 0xb
mov r9d, 1
lea rcx, [rsp + 0xc0]
mov rdx, r12
call fcn.140020ba0
mov r12, qword [rsp + 0xd0]
jmp 0x140008cf6
lea rsi, [rdi + rdx]
sub rbx, rdx
mov rax, qword [rsp + 0xc0]
sub rax, r12
cmp rax, rbx
jb 0x14000bed7
movabs r14, 0x8000000000000000
mov r15, qword [rsp + 0xb0]
add rcx, r12
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add r12, rbx
mov qword [rsp + 0x370], r12
movdqu xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x360], xmm0
test r15, r15
je 0x1400086b0
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400086b0
cmp qword [rsp + 0xd0], 0
je 0x140008e53
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [rsp + 0x290], 0
lea r8, [rsp + 0x290]
mov ecx, 5
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x140008ee6
mov ebx, dword [rsp + 0x290]
test rbx, rbx
je 0x140008ef8
lea rdi, [rbx + rbx]
mov ecx, 8
mov rdx, rdi
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rsi, rax
lea r8, [rsp + 0x290]
mov ecx, 5
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x140009072
xor r8d, r8d
nop word cs:[rax + rax]
cmp word [rsi + r8*2], 0
je 0x140008f20
inc r8
add rdi, 0xfffffffffffffffe
jne 0x140008ed0
mov r8, rbx
jmp 0x140008f20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [rsp + 0x290]
test rbx, rbx
jne 0x140008e83
mov esi, 2
lea r8, [rsp + 0x290]
mov edx, 2
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x14000908c
xor r8d, r8d
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.140005be0
mov rax, qword [rsp + 0xc0]
mov rdi, r14
cmp rax, r14
je 0x140008f55
movdqu xmm0, xmmword [rsp + 0xc8]
movdqa xmmword [rsp + 0x250], xmm0
mov rdi, rax
test rbx, rbx
je 0x140008f6c
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp rdi, r14
je 0x140009092
lea rax, [0x140017664]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x1411e0b948f544fe
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007d40
mov rsi, qword [rax]
movzx eax, byte [0x14002d118]
mov edx, 8
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
movabs rcx, 0x15e71d362cbd41b3
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x298], rdi
movdqa xmm0, xmmword [rsp + 0x250]
movdqu xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x290], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x68]
lea r9, [rsp + 0x290]
call fcn.140007560
cmp qword [rsp + 0xc0], 0
je 0x140009092
cmp qword [rsp + 0xc8], 0
je 0x1400097ba
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x140009092
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140009092
call qword [sym.imp.KERNEL32.dll_GetLastError]
movdqa xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x2b0], xmm2
movdqa xmmword [rsp + 0x2a0], xmm1
movdqa xmmword [rsp + 0x290], xmm0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x3f0]
lea r8, [rsp + 0x98]
lea r9, [rsp + 0x290]
call fcn.140007560
cmp qword [rsp + 0xc0], 0
je 0x140009134
cmp qword [rsp + 0xc8], 0
je 0x140009112
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x140009134
cmp qword [rsp + 0xd0], 0
je 0x140009134
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x140022b6b]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, qword [rsp + 0xc0]
movabs rax, 0x83b9eb03f228c170
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0xc0]
call fcn.140007ce0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x14002d118]
mov edx, 9
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
xor bl, 0x8b
movabs rcx, 0x174c640d9bcbe26e
xor rsi, rcx
mov qword [rax], rsi
mov byte [rax + 8], bl
mov qword [rsp + 0x430], 9
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x440], 9
mov qword [rsp + 0x268], 0
mov qword [rsp + 0x270], 1
mov qword [rsp + 0x278], 0
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp dword [rax + 0x60], 1
jne 0x140009236
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x68]
mov rbx, qword [rax + 0x70]
jmp 0x14000928b
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
mov rdi, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xc8]
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x60], 1
mov qword [rax + 0x70], rbx
lea rax, [rdi + 1]
mov ecx, dword [0x14002d11c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], rax
movzx eax, byte [0x14002d118]
mov edx, 0x58410
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rsi, rax
add rsi, 0x58000
mov r8d, 0x410
mov rcx, rsi
mov dl, 0xff
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0x2d8], 0x3ff
mov qword [rsp + 0x2e0], 0x380
mov qword [rsp + 0x2e8], 0
mov qword [rsp + 0x2f0], rdi
mov qword [rsp + 0x2f8], rbx
mov qword [rsp + 0x290], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x300], xmm0
movdqu xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x298], 8
mov qword [rsp + 0x2a0], 0
mov qword [rsp + 0x2a8], r14
mov dword [rsp + 0x2c0], 0
mov byte [rsp + 0x2c8], 0
mov qword [rsp + 0x320], 0
mov qword [rsp + 0x280], 0x10101
mov byte [rsp + 0x288], 2
movzx eax, byte [0x14002d118]
mov ebp, 0x80000
mov edx, 0x80000
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rdi, rax
lea r15, [rsp + 0x2d0]
mov qword [rsp + 0x228], 0x80000
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 0
xor edx, edx
lea rsi, [rsp + 0x228]
mov r12, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
lea rbx, [rsp + 0xc0]
mov r13, qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov r14d, 0x80000
jmp 0x140009420
mov rbp, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x238]
mov dword [rsp + 0x1b0], 0
sub rbp, rdx
cmp r14, rbp
ja 0x1400094af
mov ecx, 5
mov rdx, rdi
mov r8d, r14d
lea r9, [rsp + 0x1b0]
call r12
test eax, eax
jns 0x1400094d6
mov ebp, eax
mov qword [rsp + 0xc0], 0
xor ecx, ecx
mov rdx, rbx
call r13
mov rcx, qword [rsp + 0xc0]
and ebp, 0xefffffff
cmp ebp, 0xc0000004
jne 0x14000979f
mov eax, dword [rsp + 0x1b0]
mov rdx, r14
add rdx, r14
lea r14d, [rax + 0x2800]
test eax, eax
cmove r14, rdx
test rcx, rcx
je 0x140009410
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140009410
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, rsi
mov r8, r14
call fcn.140020ba0
mov rdi, qword [rsp + 0x230]
jmp 0x140009433
mov qword [rsp + 0x238], r14
mov qword [rsp + 0x3d8], 0
movzx eax, byte [0x14002d118]
mov edx, 0xfa0
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov qword [rsp + 0x250], 0x1f4
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 0
mov rdi, qword [rsp + 0x230]
xor ebx, ebx
lea rsi, [rsp + 0x250]
xor r14d, r14d
movabs rbp, 0x8000000000000000
jmp 0x14000956b
lea rcx, [rdi + r14]
mov qword [rax + rbx*8], rcx
inc rbx
mov qword [rsp + 0x260], rbx
add r14, r12
test r12, r12
je 0x14000958b
mov r12d, dword [rdi + r14]
cmp rbx, qword [rsp + 0x250]
jne 0x140009550
mov rcx, rsi
call fcn.14001a570
mov rax, qword [rsp + 0x258]
jmp 0x140009550
mov qword [rsp + 0x3e0], r15
cmp byte [rsp + 0x280], 1
jne 0x1400097b3
mov rax, qword [rsp + 0x2a0]
test rax, rax
jne 0x14000a155
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x380], xmm0
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmmword [rsp + 0x360], xmm0
lea rcx, [rsp + 0x360]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx r13d, word [rsp + 0x360]
mov eax, 0x80000000
xor ecx, ecx
mov r8, rbx
cpuid
xchg rbx, r8
cmp eax, 0x80000004
jb 0x1400097df
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x48], r13
movzx eax, byte [0x14002d118]
xor r13d, r13d
mov edx, 0x50
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov r8, rax
mov qword [rsp + 0x68], 5
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0
mov ebx, 0x80000000
mov r12d, 0xc
mov edi, 0x80000000
mov r9d, dword [rsp + 0x50]
nop dword [rax]
cmp ebx, r9d
adc edi, 0
mov eax, ebx
xor ecx, ecx
mov rsi, rbx
cpuid
xchg rbx, rsi
mov ebp, ecx
mov r14d, edx
mov r15d, eax
cmp r13, qword [rsp + 0x68]
jne 0x140009695
lea rcx, [rsp + 0x68]
call fcn.14001a760
mov r9d, dword [rsp + 0x50]
mov r8, qword [rsp + 0x70]
inc r13
mov dword [r8 + r12 - 0xc], r15d
mov dword [r8 + r12 - 8], esi
mov dword [r8 + r12 - 4], ebp
mov dword [r8 + r12], r14d
mov qword [rsp + 0x78], r13
cmp ebx, r9d
jae 0x1400096c0
add r12, 0x10
mov ebx, edi
cmp edi, r9d
jbe 0x140009660
movzx eax, byte [0x14002d118]
mov edx, 0x30
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rsi, rax
mov qword [rsp + 0x1b0], 0x30
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], 0
cmp r13, 3
jb 0x140009995
mov rdi, qword [rsp + 0x70]
shl r13, 4
add r13, rdi
mov edx, dword [rdi + 0x20]
lea rsi, [rsp + 0x1b0]
mov rcx, rsi
call fcn.14001a810
mov edx, dword [rdi + 0x24]
mov rcx, rsi
call fcn.14001a810
mov edx, dword [rdi + 0x28]
mov rcx, rsi
call fcn.14001a810
add rdi, 0x2c
xor ebx, ebx
nop word cs:[rax + rax]
mov edx, dword [rdi + rbx]
mov rcx, rsi
call fcn.14001a810
cmp rbx, 0x20
je 0x14000995a
lea r14, [rdi + rbx]
add r14, 4
cmp r14, r13
je 0x14000995a
mov edx, dword [r14]
mov rcx, rsi
call fcn.14001a810
mov edx, dword [r14 + 4]
mov rcx, rsi
call fcn.14001a810
mov edx, dword [r14 + 8]
mov rcx, rsi
call fcn.14001a810
add rbx, 0x10
jmp 0x140009750
test rcx, rcx
je 0x14000af81
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000af81
xor eax, eax
jmp 0x14000a155
cmp qword [rsp + 0xd0], 0
je 0x140009092
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
jmp 0x140009084
mov eax, 1
mov qword [rsp + 0x50], rax
xor r12d, r12d
mov qword [rsp + 0x58], 0
jmp 0x140009b00
mov ecx, 1
xor eax, eax
xor r8d, r8d
mov r9d, 1
xor edx, edx
jmp 0x140009828
lea r10, [r8 + r9]
inc r10
mov rcx, r10
sub rcx, rdx
xor r8d, r8d
mov r9, r10
cmp rcx, r13
je 0x140009895
lea r10, [r9 + r8]
cmp r10, 0xa
ja 0x140009895
mov r11, r9
not r11
sub r11, r8
cmp r11, 0xfffffffffffffff5
jb 0x14000bf2d
mov esi, 0xa
sub rsi, r8
sub rsi, rdx
cmp rsi, 0xb
jae 0x14000bf2d
lea r10, [r9 + 1]
movzx esi, byte [rsi + r14]
cmp byte [r11 + r14 + 0xb], sil
jb 0x140009810
jne 0x140009888
inc r8
cmp r8, rcx
mov r11, r8
cmove r11, rax
cmovne r8, rax
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x140009820
mov ecx, 1
xor r8d, r8d
mov rdx, r9
jmp 0x140009820
mov ecx, 1
xor eax, eax
xor r8d, r8d
mov r9d, 1
xor edx, edx
jmp 0x1400098c8
lea r10, [r8 + r9]
inc r10
mov rcx, r10
sub rcx, rdx
xor r8d, r8d
mov r9, r10
cmp rcx, r13
je 0x140009935
lea r10, [r9 + r8]
cmp r10, 0xa
ja 0x140009935
mov r11, r9
not r11
sub r11, r8
cmp r11, 0xfffffffffffffff5
jb 0x14000bf2d
mov esi, 0xa
sub rsi, r8
sub rsi, rdx
cmp rsi, 0xb
jae 0x14000bf2d
lea r10, [r9 + 1]
movzx esi, byte [rsi + r14]
cmp byte [r11 + r14 + 0xb], sil
ja 0x1400098b0
jne 0x140009928
inc r8
cmp r8, rcx
mov r11, r8
cmove r11, rax
cmovne r8, rax
mov r10, r8
add r10, r9
mov r8, r11
jmp 0x1400098c0
mov ecx, 1
xor r8d, r8d
mov rdx, r9
jmp 0x1400098c0
test r13, r13
je 0x140009a2b
mov eax, r13d
and eax, 3
cmp r13, 4
jae 0x140009a38
mov r10, r13
xor ebp, ebp
xor ecx, ecx
jmp 0x140009a80
mov rsi, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1c0]
test rax, rax
je 0x140009995
xor r8d, r8d
mov r13, qword [rsp + 0x48]
nop word [rax + rax]
cmp byte [rsi + r8], 0
je 0x14000becc
inc r8
cmp rax, r8
jne 0x140009980
jmp 0x14000999c
xor eax, eax
mov r13, qword [rsp + 0x48]
mov r8, rax
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.14000dfe0
test byte [rsp + 0xc0], 1
je 0x1400099cd
mov eax, 1
mov qword [rsp + 0x50], rax
xor r12d, r12d
xor ebx, ebx
jmp 0x140009ac2
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
js 0x14000bf2d
mov rdi, qword [rsp + 0xc8]
je 0x140009aaa
movzx eax, byte [0x14002d118]
xor ecx, ecx
mov rdx, rbx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rcx, rax
mov r12, rbx
jmp 0x140009ab2
xor r10d, r10d
cmp ebx, 0xa
setb r10b
shl r10d, 8
add r10, 0x100
jmp 0x140008669
xor r13d, r13d
xor ebp, ebp
xor r10d, r10d
jmp 0x1400089e0
mov r10, r13
mov rdx, r13
and rdx, 0xfffffffffffffffc
xor ebp, ebp
xor ecx, ecx
nop word cs:[rax + rax]
movzx r8d, byte [rcx + r14]
movzx r9d, byte [rcx + r14 + 1]
bts rbp, r8
bts rbp, r9
movzx r8d, byte [rcx + r14 + 2]
bts rbp, r8
movzx r8d, byte [rcx + r14 + 3]
bts rbp, r8
add rcx, 4
cmp rdx, rcx
jne 0x140009a50
xor r13d, r13d
test rax, rax
je 0x1400089e0
xor edx, edx
nop
lea r8, [rcx + rdx]
movzx r8d, byte [r14 + r8]
bts rbp, r8
inc rdx
cmp rax, rdx
jne 0x140009a90
jmp 0x1400089e0
mov ecx, 1
xor r12d, r12d
mov qword [rsp + 0x50], rcx
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
cmp qword [rsp + 0x1b0], 0
je 0x140009adf
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x68], 0
je 0x140009afb
mov r8, qword [rsp + 0x70]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x58], rbx
xor eax, eax
xor ecx, ecx
mov rbx, rbx
cpuid
xchg rbx, rbx
mov esi, ecx
mov edi, edx
movzx eax, byte [0x14002d118]
mov edx, 0xc
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov qword [rsp + 0x1b0], 0xc
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], 0
lea r14, [rsp + 0x1b0]
mov rcx, r14
mov edx, ebx
call fcn.14001a810
mov rcx, r14
mov edx, edi
call fcn.14001a810
mov rcx, r14
mov edx, esi
call fcn.14001a810
mov rsi, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x1c0]
test r8, r8
je 0x140009bac
xor eax, eax
nop dword [rax]
cmp byte [rsi + rax], 0
je 0x140009ba0
inc rax
cmp r8, rax
jne 0x140009b90
jmp 0x140009bac
cmp rax, r8
mov r8, rax
ja 0x14000bf2d
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.14000dfe0
test byte [rsp + 0xc0], 1
je 0x140009beb
cmp r13w, 0xe
ja 0x140009c28
shl r13d, 3
lea rax, [0x1400299a8]
mov r15, qword [r13 + rax]
lea rax, str.Intel_x86MIPSRISC_AlphaPPCSHXARMIntel_Itanium_based_x64RISC_Alpha_x64MSIL_Intel_or_AMD__x64Intel_Itanium_based_x86unknownARM_x64CPU
mov rdi, qword [r13 + rax]
jmp 0x140009c35
mov r15, qword [rsp + 0xd0]
test r15, r15
js 0x14000bf2d
mov rdi, qword [rsp + 0xc8]
je 0x140009c68
movzx eax, byte [0x14002d118]
xor ecx, ecx
mov rdx, r15
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rbx, rax
mov r14, r15
jmp 0x140009c70
lea rdi, [0x1400290ea]
mov r15d, 7
movzx eax, byte [0x14002d118]
xor ecx, ecx
mov rdx, r15
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rbx, rax
mov rcx, rax
mov rdx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov r14d, 1
jmp 0x140009c7e
mov ebx, 1
xor r14d, r14d
mov rcx, rbx
mov rdx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
cmp qword [rsp + 0x1b0], 0
je 0x140009c9b
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13d, dword [rsp + 0x380]
test r13, r13
je 0x140009cc9
lea rdx, [r13*8]
mov ecx, 8
call fcn.140016930
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x140009cd3
jmp 0x14000bf2d
mov eax, 8
mov qword [rsp + 0x48], rax
lea rdi, [r13 + 1]
imul rdx, rdi, 0x70
movzx eax, byte [0x14002d118]
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rsi, rax
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 0
test r13, r13
je 0x14000a001
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xb0], r13
imul rax, r13, 0x70
mov qword [rsp + 0x1a8], rax
xor r12d, r12d
xor ebp, ebp
jmp 0x140009dd4
mov rax, qword [rsp + 0x1f0]
mov qword [rsi + r12 + 0x40], rax
movdqa xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [rsi + r12 + 0x30], xmm3
movdqu xmmword [rsi + r12 + 0x20], xmm2
movdqu xmmword [rsi + r12 + 0x10], xmm1
movdqu xmmword [rsi + r12], xmm0
movabs rax, 0x8000000000000000
mov qword [rsi + r12 + 0x48], rax
mov dword [rsi + r12 + 0x60], 0
mov qword [rsi + r12 + 0x68], rbx
mov qword [rsp + 0xa8], r14
add r12, 0x70
mov rbp, r14
cmp qword [rsp + 0x1a8], r12
je 0x140009fa9
lea r14, [rbp + 1]
mov qword [rsp + 0x3e8], r14
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x420], rax
lea rax, [0x14000dec0]
mov qword [rsp + 0x428], rax
lea rax, [0x140029100]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x88], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x68]
call fcn.140005ec0
mov ebx, 1
test r15, r15
je 0x140009e80
movzx eax, byte [0x14002d118]
xor ecx, ecx
mov rdx, r15
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rdi, rax
mov r13, r15
jmp 0x140009e88
xor r13d, r13d
mov edi, 1
mov rcx, rdi
mov rdx, qword [rsp + 0x60]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], r15
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x140009ef0
movzx eax, byte [0x14002d118]
xor ecx, ecx
mov rdx, rdi
call fcn.140016930
test rax, rax
mov rdx, qword [rsp + 0x50]
je 0x14000bf2d
mov rbx, rax
mov r13, rdi
jmp 0x140009ef8
xor r13d, r13d
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
mov qword [rsp + 0x50], rdx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], rdi
mov rax, qword [rsp + 0x48]
mov rbx, qword [rax + rbp*8]
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1d0], xmm2
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f0], rdi
cmp rbp, qword [rsp + 0x98]
jne 0x140009d50
lea rcx, [rsp + 0x98]
call fcn.14001a6b0
mov rsi, qword [rsp + 0xa0]
jmp 0x140009d50
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
movdqu xmm0, xmmword [rsp + 0x98]
movdqa xmmword [rsp + 0xc0], xmm0
cmp qword [rsp + 0xb0], 0
mov r12, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x1a0]
je 0x14000a031
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000a031
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xc8], rax
test r12, r12
movabs rbp, 0x8000000000000000
je 0x14000a054
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r14, r14
je 0x14000a06b
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x2a0]
test rsi, rsi
je 0x14000a109
mov rdi, qword [rsp + 0x298]
add rdi, 0x50
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000a0a9
add rdi, 0x70
dec rsi
je 0x14000a109
cmp qword [rdi - 0x50], 0
je 0x14000a0bf
mov r8, qword [rdi - 0x48]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rbx
cmp qword [rdi - 0x38], 0
je 0x14000a0d5
mov r8, qword [rdi - 0x30]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rbx
mov rax, qword [rdi - 8]
cmp rax, rbp
je 0x14000a0f1
test rax, rax
je 0x14000a0f1
mov r8, qword [rdi]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rbx
cmp qword [rdi - 0x20], 0
je 0x14000a0a0
mov r8, qword [rdi - 0x18]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rbx
jmp 0x14000a0a0
cmp qword [rsp + 0x290], 0
je 0x14000a12b
mov r8, qword [rsp + 0x298]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x2a0], rax
movdqa xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x2c8], 0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xc0], 0
lea rcx, [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
mov rax, qword [rsp + 0xc0]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x14000a192
xor edx, edx
jmp 0x14000a1b0
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
mov qword [rsp + 0x360], rdx
mov rsi, qword [rsp + 0x260]
mov qword [rsp + 0xd0], rsi
movdqu xmm0, xmmword [rsp + 0x250]
movdqa xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
lea rax, [rsp + 0x3d8]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0xe8], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0xf8], rax
mov rbx, qword [rsp + 0xc0]
cmp rbx, rsi
jb 0x14000bf2d
lea r14, [rsp + 0xd8]
mov rdi, qword [rsp + 0xc8]
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x14000a28d
add rax, 0x110
jmp 0x14000a292
call fcn.14000fad0
mov rax, qword [rax]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rsi, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x1b0]
mov rdx, rsi
xor r8d, r8d
call fcn.14001af60
test rbx, rbx
je 0x14000a2ee
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
sete al
test r8, r8
sete dl
or dl, al
jne 0x14000a349
dec rcx
xor eax, eax
mov rdx, r8
nop word cs:[rax + rax]
add rax, qword [rdx + 0x10]
sub rcx, 1
jb 0x14000a333
mov rdx, qword [rdx + 0x18]
test rdx, rdx
jne 0x14000a320
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x78]
sub rcx, rdx
cmp rax, rcx
ja 0x14000bea5
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
lea r12, [rsp + 0x68]
nop word cs:[rax + rax]
test r8, r8
je 0x14000a41f
mov rsi, qword [r8 + 0x18]
test rsi, rsi
je 0x14000a37a
mov qword [rsi + 0x20], 0
mov r13, qword [r8]
mov rbx, qword [r8 + 8]
mov r14, qword [r8 + 0x10]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
cmp r13, rbp
je 0x14000a41a
mov rax, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
sub rax, r15
cmp rax, r14
jb 0x14000a3f6
imul rcx, r15, 0x158
add rcx, qword [rsp + 0x70]
imul r8, r14, 0x158
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
add r15, r14
mov qword [rsp + 0x78], r15
mov rcx, rbx
xor edx, edx
call fcn.140019b90
mov r8, rsi
test r13, r13
je 0x14000a360
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rbx
call rdi
mov r8, rsi
jmp 0x14000a360
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r12
mov rdx, r15
mov r8, r14
call fcn.140020ba0
mov r15, qword [rsp + 0x78]
jmp 0x14000a3ab
test rsi, rsi
jne 0x14000a486
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x3a0], rax
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x78]
imul rdx, rax, 0x158
add rdx, rcx
mov qword [rsp + 0x240], rdx
mov qword [rsp + 0x390], rcx
mov r13, rcx
test rax, rax
je 0x14000aab6
pcmpeqd xmm6, xmm6
mov rbx, qword [rsp + 0x390]
jmp 0x14000a5a3
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call rdi
mov rsi, rbx
test rbx, rbx
je 0x14000a41f
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x14000a497
mov qword [rbx + 0x20], 0
mov rcx, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
call fcn.140019b90
cmp qword [rsi], 0
je 0x14000a470
mov r8, qword [rsi + 8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000a470
and al, 1
movzx eax, al
sub qword [rsp + 0x2e0], rax
lea rax, [r8 - 0x10]
and rcx, rax
mov byte [r12 + r8], dl
mov byte [r12 + rcx + 0x10], dl
inc qword [rsp + 0x2e8]
neg r8
imul rbx, r8, 0x160
mov qword [r12 + rbx - 0x160], rbp
mov qword [r12 + rbx - 0x158], rsi
lea rcx, [r12 + rbx]
add rcx, 0xfffffffffffffeb0
mov r8d, 0xd8
lea rdx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov qword [r12 + rbx - 0x78], rbp
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [r12 + rbx - 0x70], xmm0
movdqu xmmword [r12 + rbx - 0x60], xmm1
movdqu xmmword [r12 + rbx - 0x50], xmm2
movups xmmword [r12 + rbx - 0x40], xmm3
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [r12 + rbx - 0x30], xmm0
movaps xmm0, xmmword [rsp + 0x200]
movups xmmword [r12 + rbx - 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x210]
movdqu xmmword [r12 + rbx - 0x10], xmm0
movabs rbp, 0x8000000000000000
nop
mov rbx, qword [rsp + 0x50]
cmp rbx, qword [rsp + 0x240]
je 0x14000ac97
lea r13, [rbx + 0x158]
mov rsi, qword [rbx]
cmp rsi, 2
je 0x14000aab6
lea rdx, [rbx + 8]
mov r8d, 0xd8
lea rcx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov rbp, qword [rbx + 0xe0]
movups xmm0, xmmword [rbx + 0xe8]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rbx + 0xf8]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmm0, xmmword [rbx + 0x108]
movaps xmmword [rsp + 0x1d0], xmm0
movups xmm0, xmmword [rbx + 0x118]
movaps xmmword [rsp + 0x1e0], xmm0
movups xmm0, xmmword [rbx + 0x128]
movaps xmmword [rsp + 0x1f0], xmm0
movups xmm0, xmmword [rbx + 0x138]
movaps xmmword [rsp + 0x200], xmm0
movups xmm0, xmmword [rbx + 0x148]
movaps xmmword [rsp + 0x210], xmm0
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x2f8]
mov r8, rbp
call fcn.14001a320
cmp qword [rsp + 0x2e0], 0
je 0x14000aa96
mov r12, qword [rsp + 0x2d0]
mov rcx, qword [rsp + 0x2d8]
mov rdx, rax
shr rdx, 0x39
movd xmm0, edx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea r9, [r12 - 0x160]
xor r10d, r10d
xor r11d, r11d
mov qword [rsp + 0x50], r13
and rax, rcx
movdqu xmm1, xmmword [r12 + rax]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r14d, xmm2
test r14d, r14d
je 0x14000a6e8
nop dword [rax]
tzcnt ebx, r14d
add rbx, rax
and rbx, rcx
neg rbx
imul rbx, rbx, 0x160
cmp rbp, qword [r9 + rbx]
je 0x14000a730
lea ebx, [r14 - 1]
and bx, r14w
mov r14d, ebx
jne 0x14000a6c0
cmp r11, 1
mov r11d, 1
je 0x14000a70e
pmovmskb r8d, xmm1
xor r11d, r11d
test r8d, r8d
setne r11b
tzcnt r8d, r8d
add r8, rax
and r8, rcx
pcmpeqb xmm1, xmm6
pmovmskb ebx, xmm1
test ebx, ebx
jne 0x14000aa70
add rax, r10
add rax, 0x10
add r10, 0x10
jmp 0x14000a6a1
mov r15, qword [r12 + rbx - 0x158]
mov rax, qword [r12 + rbx - 0x148]
mov qword [rsp + 0x3d0], rax
mov rax, qword [r12 + rbx - 0x140]
mov qword [rsp + 0x3c8], rax
mov rax, qword [r12 + rbx - 0x128]
mov qword [rsp + 0x248], rax
mov rax, qword [r12 + rbx - 0x120]
mov qword [rsp + 0xb0], rax
mov r13, qword [r12 + rbx - 0x118]
mov rax, qword [r12 + rbx - 0x110]
mov qword [rsp + 0x1a8], rax
mov rax, qword [r12 + rbx - 0x108]
mov qword [rsp + 0x60], rax
mov r14, qword [r12 + rbx - 0x100]
mov rax, qword [r12 + rbx - 0xf8]
mov qword [rsp + 0x1a0], rax
mov rax, qword [r12 + rbx - 0xf0]
mov qword [rsp + 0x3a8], rax
mov rax, qword [r12 + rbx - 0xd8]
mov qword [rsp + 0xb8], rax
mov rax, qword [r12 + rbx - 0xd0]
mov qword [rsp + 0x3b0], rax
mov rax, qword [r12 + rbx - 0xc0]
mov qword [rsp + 0x58], rax
mov rax, qword [r12 + rbx - 0xb8]
mov qword [rsp + 0x3b8], rax
mov rax, qword [r12 + rbx - 0xa0]
mov qword [rsp + 0x48], rax
mov rax, qword [r12 + rbx - 0x98]
mov qword [rsp + 0x3c0], rax
mov rax, rsi
mov rsi, qword [r12 + rbx - 0x60]
mov qword [r12 + rbx - 0x158], rax
lea rcx, [r12 + rbx]
add rcx, 0xfffffffffffffeb0
mov r8d, 0xd8
lea rdx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov qword [r12 + rbx - 0x78], rbp
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmm1, xmmword [rsp + 0x1c0]
movdqa xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [r12 + rbx - 0x70], xmm0
movdqu xmmword [r12 + rbx - 0x60], xmm1
movdqu xmmword [r12 + rbx - 0x50], xmm2
movups xmmword [r12 + rbx - 0x40], xmm3
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [r12 + rbx - 0x30], xmm0
movaps xmm0, xmmword [rsp + 0x200]
movups xmmword [r12 + rbx - 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x210]
movdqu xmmword [r12 + rbx - 0x10], xmm0
cmp r15, 2
movabs rbp, 0x8000000000000000
je 0x14000a590
mov rbx, rsi
cmp qword [rsp + 0x3d0], 0
je 0x14000a8ef
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x3c8]
call rdi
test r13, r13
mov r15, qword [rsp + 0x60]
mov r12, qword [rsp + 0xb0]
je 0x14000a930
lea rsi, [r12 + 8]
jmp 0x14000a919
add rsi, 0x20
dec r13
je 0x14000a930
cmp qword [rsi - 8], 0
je 0x14000a910
mov r8, qword [rsi]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000a910
cmp qword [rsp + 0x248], 0
je 0x14000a949
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, r12
call rdi
mov rax, qword [rsp + 0x1a0]
shl rax, 1
test rax, rax
jne 0x14000a970
mov rax, qword [rsp + 0xb8]
shl rax, 1
test rax, rax
jne 0x14000a993
test r14, r14
jne 0x14000a9ab
jmp 0x14000a9e0
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x3a8]
call rdi
mov rax, qword [rsp + 0xb8]
shl rax, 1
test rax, rax
je 0x14000a969
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x3b0]
call rdi
test r14, r14
je 0x14000a9e0
lea rsi, [r15 + 8]
jmp 0x14000a9c9
add rsi, 0x20
dec r14
je 0x14000a9e0
cmp qword [rsi - 8], 0
je 0x14000a9c0
mov r8, qword [rsi]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000a9c0
cmp qword [rsp + 0x1a8], 0
je 0x14000a9f9
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, r15
call rdi
mov rax, qword [rsp + 0x58]
shl rax, 1
test rax, rax
jne 0x14000aa1d
mov rax, qword [rsp + 0x48]
shl rax, 1
test rax, rax
jne 0x14000aa3d
test rbx, rbx
jne 0x14000aa59
jmp 0x14000a590
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x3b8]
call rdi
mov rax, qword [rsp + 0x48]
shl rax, 1
test rax, rax
je 0x14000aa13
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x3c0]
call rdi
test rbx, rbx
je 0x14000a590
lock dec qword [rbx]
jne 0x14000a590
mov rcx, rbx
call fcn.14001a470
jmp 0x14000a590
movzx eax, byte [r12 + r8]
test al, al
js 0x14000a4bb
movdqa xmm0, xmmword [r12]
pmovmskb eax, xmm0
tzcnt r8d, eax
movzx eax, byte [r12 + r8]
jmp 0x14000a4bb
lea rcx, [rsp + 0x2d0]
lea rdx, [rsp + 0x2f0]
mov rbx, rax
call fcn.140021760
mov rax, rbx
jmp 0x14000a665
sub qword [rsp + 0x240], r13
je 0x14000ac97
mov rax, qword [rsp + 0x240]
shr rax, 3
movabs rsi, 0x82fa0be82fa0be83
imul rsi, rax
xor ebx, ebx
jmp 0x14000aafc
inc rbx
cmp rbx, rsi
je 0x14000ac97
imul rax, rbx, 0x158
lea r15, [rax + r13]
cmp qword [r13 + rax + 0x10], 0
je 0x14000ab1e
mov r8, qword [r15 + 0x18]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov r14, qword [r15 + 0x40]
test r14, r14
je 0x14000ab70
mov r12, qword [r15 + 0x38]
add r12, 8
jmp 0x14000ab49
add r12, 0x20
dec r14
je 0x14000ab70
cmp qword [r12 - 8], 0
je 0x14000ab40
mov r8, qword [r12]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000ab40
cmp qword [r15 + 0x30], 0
je 0x14000ab86
mov r8, qword [r15 + 0x38]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0x60]
cmp rax, rbp
je 0x14000aba3
test rax, rax
je 0x14000aba3
mov r8, qword [r15 + 0x68]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0x80]
cmp rax, rbp
je 0x14000abc6
test rax, rax
je 0x14000abc6
mov r8, qword [r15 + 0x88]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov r14, qword [r15 + 0x58]
test r14, r14
je 0x14000ac10
mov r12, qword [r15 + 0x50]
add r12, 8
jmp 0x14000abe9
add r12, 0x20
dec r14
je 0x14000ac10
cmp qword [r12 - 8], 0
je 0x14000abe0
mov r8, qword [r12]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000abe0
cmp qword [r15 + 0x48], 0
je 0x14000ac26
mov r8, qword [r15 + 0x50]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0x98]
cmp rax, rbp
je 0x14000ac49
test rax, rax
je 0x14000ac49
mov r8, qword [r15 + 0xa0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0xb8]
cmp rax, rbp
je 0x14000ac6c
test rax, rax
je 0x14000ac6c
mov r8, qword [r15 + 0xc0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r15 + 0xf8]
test rax, rax
je 0x14000aaf0
lock dec qword [rax]
jne 0x14000aaf0
mov rcx, qword [r15 + 0xf8]
call fcn.14001a470
jmp 0x14000aaf0
cmp qword [rsp + 0x3a0], 0
je 0x14000acb9
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, qword [rsp + 0x390]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x2e8]
test rsi, rsi
je 0x14000af81
mov rbx, qword [rsp + 0x2d0]
lea r14, [rbx + 0x10]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
pcmpeqd xmm6, xmm6
jmp 0x14000ad01
lea eax, [r12 - 1]
and eax, r12d
dec rsi
je 0x14000af81
test ax, ax
jne 0x14000ad2d
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add rbx, 0xffffffffffffea00
add r14, 0x10
cmp eax, 0xffff
je 0x14000ad10
not eax
mov r12d, eax
tzcnt eax, r12d
neg rax
imul r13, rax, 0x160
cmp byte [rbx + r13 - 4], 0
mov byte [rbx + r13 - 4], 0
jne 0x14000acf0
add r13, rbx
mov rax, qword [rsp + 0x2d0]
mov rcx, rax
sub rcx, r13
sar rcx, 5
movabs rdx, 0x2e8ba2e8ba2e8ba3
imul rcx, rdx
lea rdx, [rcx - 0x10]
and rdx, qword [rsp + 0x2d8]
movdqu xmm0, xmmword [rax + rdx]
pcmpeqb xmm0, xmm6
pmovmskb r8d, xmm0
test r8d, r8d
je 0x14000ad9a
bsr r8w, r8w
xor r8d, 0xf
jmp 0x14000ad9f
mov r8w, 0x10
movdqu xmm0, xmmword [rax + rcx]
pcmpeqb xmm0, xmm6
pmovmskb r9d, xmm0
or r9d, 0x10000
tzcnt r9d, r9d
add r8d, r9d
mov r9b, 0x80
cmp r8w, 0xf
ja 0x14000add1
inc qword [rsp + 0x2e0]
mov r9b, 0xff
mov byte [rax + rcx], r9b
mov byte [rax + rdx + 0x10], r9b
dec qword [rsp + 0x2e8]
cmp qword [r13 - 0x148], 0
je 0x14000adfe
mov r8, qword [r13 - 0x140]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rbp, qword [r13 - 0x118]
test rbp, rbp
je 0x14000ae40
mov r15, qword [r13 - 0x120]
add r15, 8
jmp 0x14000ae29
add r15, 0x20
dec rbp
je 0x14000ae40
cmp qword [r15 - 8], 0
je 0x14000ae20
mov r8, qword [r15]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000ae20
cmp qword [r13 - 0x128], 0
je 0x14000ae5c
mov r8, qword [r13 - 0x120]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xf8]
movabs r15, 0x8000000000000000
cmp rax, r15
je 0x14000ae89
test rax, rax
je 0x14000ae89
mov r8, qword [r13 - 0xf0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xd8]
cmp rax, r15
je 0x14000aeac
test rax, rax
je 0x14000aeac
mov r8, qword [r13 - 0xd0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rbp, qword [r13 - 0x100]
test rbp, rbp
je 0x14000aef0
mov r15, qword [r13 - 0x108]
add r15, 8
jmp 0x14000aed9
add r15, 0x20
dec rbp
je 0x14000aef0
cmp qword [r15 - 8], 0
je 0x14000aed0
mov r8, qword [r15]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
jmp 0x14000aed0
cmp qword [r13 - 0x110], 0
je 0x14000af0c
mov r8, qword [r13 - 0x108]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xc0]
movabs r15, 0x8000000000000000
cmp rax, r15
je 0x14000af39
test rax, rax
je 0x14000af39
mov r8, qword [r13 - 0xb8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0xa0]
cmp rax, r15
je 0x14000af5c
test rax, rax
je 0x14000af5c
mov r8, qword [r13 - 0x98]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call rdi
mov rax, qword [r13 - 0x60]
test rax, rax
je 0x14000acf0
lock dec qword [rax]
jne 0x14000acf0
mov rcx, qword [r13 - 0x60]
call fcn.14001a470
jmp 0x14000acf0
cmp qword [rsp + 0x228], 0
je 0x14000afa3
mov r8, qword [rsp + 0x230]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbp, qword [rsp + 0x2d0]
mov r14, qword [rsp + 0x2e8]
movdqa xmm0, xmmword [rbp]
pmovmskb esi, xmm0
not esi
lea rdi, [rbp + 0x10]
nop word cs:[rax + rax]
lea rbx, [rsp + 0xc0]
sub r14, 1
jb 0x14000b17c
test si, si
jne 0x14000b00d
nop word [rax + rax]
movdqa xmm0, xmmword [rdi]
pmovmskb esi, xmm0
add rbp, 0xffffffffffffea00
add rdi, 0x10
cmp esi, 0xffff
je 0x14000aff0
not esi
mov eax, esi
lea esi, [rax - 1]
and esi, eax
tzcnt eax, eax
neg rax
imul rax, rax, 0x160
lea rcx, [rax + rbp]
add rcx, 0xfffffffffffffea0
mov qword [rsp + 0x98], rcx
mov rdx, qword [rbp + rax - 0x140]
mov r8, qword [rbp + rax - 0x138]
mov rcx, rbx
call fcn.14000dfe0
test byte [rsp + 0xc0], 1
jne 0x14000afd8
movdqu xmm0, xmmword [rsp + 0xc8]
movdqu xmmword [rsp + 0x360], xmm0
lea rax, [rsp + 0x98]
mov qword [rsp + 0x1b0], rax
lea rax, [0x140006c20]
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0x1c0], rax
lea rax, [0x140016da0]
mov qword [rsp + 0x1c8], rax
lea rax, [0x1400239a0]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 3
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 2
lea rcx, [rsp + 0x68]
mov rdx, rbx
call fcn.140005ec0
mov r13, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
mov rax, qword [rsp + 0x268]
mov r12, qword [rsp + 0x278]
sub rax, r12
cmp rax, r15
jb 0x14000b15f
mov rcx, qword [rsp + 0x270]
add rcx, r12
mov rdx, rbx
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add r12, r15
mov qword [rsp + 0x278], r12
test r13, r13
je 0x14000afd0
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000afd0
lea rcx, [rsp + 0x268]
mov rdx, r12
mov r8, r15
call fcn.1400226c0
mov r12, qword [rsp + 0x278]
jmp 0x14000b11e
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x1c8], rax
movdqu xmm0, xmmword [rsp + 0x268]
movdqu xmmword [rsp + 0x1b8], xmm0
mov qword [rsp + 0x1b0], 0
mov rsi, qword [rsp + 0x2d8]
test rsi, rsi
movabs r13, 0x8000000000000000
je 0x14000b454
mov rdi, qword [rsp + 0x2e8]
test rdi, rdi
je 0x14000b425
mov rbx, qword [rsp + 0x2d0]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
lea r14, [rbx + 0x10]
jmp 0x14000b200
lea eax, [r15 - 1]
and eax, r15d
dec rdi
je 0x14000b425
test ax, ax
jne 0x14000b22d
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add rbx, 0xffffffffffffea00
add r14, 0x10
cmp eax, 0xffff
je 0x14000b210
not eax
mov r15d, eax
tzcnt eax, r15d
neg rax
imul rax, rax, 0x160
lea r12, [rbx + rax]
cmp qword [rbx + rax - 0x148], 0
je 0x14000b265
mov r8, qword [r12 - 0x140]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [r12 - 0x118]
test r13, r13
je 0x14000b2b0
mov rbp, qword [r12 - 0x120]
add rbp, 8
jmp 0x14000b289
add rbp, 0x20
dec r13
je 0x14000b2b0
cmp qword [rbp - 8], 0
je 0x14000b280
mov r8, qword [rbp]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000b280
cmp qword [r12 - 0x128], 0
je 0x14000b2d2
mov r8, qword [r12 - 0x120]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xf8]
movabs r13, 0x8000000000000000
cmp rax, r13
je 0x14000b305
test rax, rax
je 0x14000b305
mov r8, qword [r12 - 0xf0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xd8]
cmp rax, r13
je 0x14000b32e
test rax, rax
je 0x14000b32e
mov r8, qword [r12 - 0xd0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [r12 - 0x100]
test r13, r13
je 0x14000b380
mov rbp, qword [r12 - 0x108]
add rbp, 8
jmp 0x14000b359
add rbp, 0x20
dec r13
je 0x14000b380
cmp qword [rbp - 8], 0
je 0x14000b350
mov r8, qword [rbp]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000b350
cmp qword [r12 - 0x110], 0
je 0x14000b3a2
mov r8, qword [r12 - 0x108]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xc0]
movabs r13, 0x8000000000000000
cmp rax, r13
je 0x14000b3d5
test rax, rax
je 0x14000b3d5
mov r8, qword [r12 - 0xb8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0xa0]
cmp rax, r13
je 0x14000b3fe
test rax, rax
je 0x14000b3fe
mov r8, qword [r12 - 0x98]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r12 - 0x60]
test rax, rax
je 0x14000b1f0
lock dec qword [rax]
jne 0x14000b1f0
mov rcx, qword [r12 - 0x60]
call fcn.14001a470
jmp 0x14000b1f0
lea rax, [rsi + 1]
mov ecx, 0x160
mul rcx
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x14000b454
mov r8, qword [rsp + 0x2d0]
sub r8, rax
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x2a8]
cmp rax, r13
je 0x14000b47d
test rax, rax
je 0x14000b47d
mov r8, qword [rsp + 0x2b0]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x2a0]
test rsi, rsi
je 0x14000b519
mov rdi, qword [rsp + 0x298]
add rdi, 0x50
jmp 0x14000b4a9
add rdi, 0x70
dec rsi
je 0x14000b519
cmp qword [rdi - 0x50], 0
je 0x14000b4c3
mov r8, qword [rdi - 0x48]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rdi - 0x38], 0
je 0x14000b4dd
mov r8, qword [rdi - 0x30]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rdi - 8]
cmp rax, r13
je 0x14000b4fd
test rax, rax
je 0x14000b4fd
mov r8, qword [rdi]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rdi - 0x20], 0
je 0x14000b4a0
mov r8, qword [rdi - 0x18]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000b4a0
cmp qword [rsp + 0x290], 0
je 0x14000b53b
mov r8, qword [rsp + 0x298]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x320]
test rsi, rsi
je 0x14000b710
movdqa xmm0, xmmword [rsi]
pmovmskb eax, xmm0
not eax
lea rdi, [rsi + 0x10]
mov rbx, qword [rsp + 0x338]
mov r14, qword [sym.imp.pdh.dll_PdhRemoveCounter]
jmp 0x14000b597
not eax
lea ebp, [rax - 1]
and ebp, eax
tzcnt eax, eax
shl eax, 5
mov rcx, rsi
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
mov eax, ebp
movabs r13, 0x8000000000000000
sub rbx, 1
jb 0x14000b5cc
test ax, ax
jne 0x14000b572
nop word cs:[rax + rax]
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
add rsi, 0xfffffffffffffe00
add rdi, 0x10
cmp eax, 0xffff
je 0x14000b5b0
jmp 0x14000b570
mov rcx, qword [rsp + 0x358]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x14000b5e8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x14000b60c
mov rcx, qword [rsp + 0x350]
lea rax, [rcx + 1]
cmp rax, 2
jae 0x14000b624
mov rsi, qword [rsp + 0x328]
test rsi, rsi
jne 0x14000b63b
jmp 0x14000b710
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x350]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x14000b5fa
call qword [sym.imp.pdh.dll_PdhCloseQuery]
mov rsi, qword [rsp + 0x328]
test rsi, rsi
je 0x14000b710
mov rdi, qword [rsp + 0x338]
test rdi, rdi
je 0x14000b6db
mov rbx, qword [rsp + 0x320]
movdqa xmm0, xmmword [rbx]
pmovmskb r15d, xmm0
not r15d
lea r14, [rbx + 0x10]
jmp 0x14000b682
dec rdi
lea eax, [r15 - 1]
and eax, r15d
mov r15d, eax
test rdi, rdi
je 0x14000b6db
test r15w, r15w
jne 0x14000b6b1
nop dword [rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r15d, xmm0
add rbx, 0xfffffffffffffe00
add r14, 0x10
cmp r15d, 0xffff
je 0x14000b690
not r15d
tzcnt ecx, r15d
shl ecx, 5
mov rax, rbx
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x14000b670
mov r8, qword [rax - 0x18]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000b670
movabs rax, 0x7c1f07c1f07c1ef
cmp rsi, rax
je 0x14000b710
shl rsi, 5
mov rax, qword [rsp + 0x320]
neg rsi
lea r8, [rax + rsi]
add r8, 0xffffffffffffffe0
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xc0]
lea rsi, [rsp + 0x3f0]
lea r8, [rsp + 0x430]
lea rdi, [rsp + 0x1b0]
mov rdx, rsi
mov r9, rdi
call fcn.140007560
cmp qword [rsp + 0xc0], 0
je 0x14000b782
cmp qword [rsp + 0xc8], 0
je 0x14000b760
lea rcx, [rsp + 0xc8]
call fcn.1400061e0
jmp 0x14000b782
cmp qword [rsp + 0xd0], 0
je 0x14000b782
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqa xmm0, xmmword [rsp + 0x3f0]
movdqa xmm1, xmmword [rsp + 0x400]
movdqa xmm2, xmmword [rsp + 0x410]
movdqa xmmword [rsp + 0x510], xmm0
movdqa xmmword [rsp + 0x520], xmm1
movdqa xmmword [rsp + 0x530], xmm2
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xd0], 0
lea rcx, [rsp + 0x510]
lea rbx, [rsp + 0x448]
lea r8, [rsp + 0xc0]
mov rdx, rbx
call fcn.140006580
lea r14, [rsp + 0xc0]
mov r8d, 0xc8
mov rcx, r14
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x290]
mov rdx, r14
call fcn.1400056b0
mov rbx, qword [rsp + 0x290]
cmp rbx, 5
jne 0x14000ba24
mov rax, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x110]
mov rbx, qword [rsp + 0x118]
movdqu xmm6, xmmword [rsp + 0x120]
lea rcx, [r13 + 1]
mov qword [rsp + 0x108], rcx
cmp rax, r13
jne 0x14000bf2d
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x14000b8a0
mov r8, qword [rsp + 0xd8]
lea rax, [rax*8 + 0x17]
and rax, 0xfffffffffffffff0
sub r8, rax
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rsp + 0xd0]
test rdi, rdi
je 0x14000b997
mov r14, qword [rsp + 0xc8]
add r14, 0x20
jmp 0x14000b8d0
add r14, 0xf0
dec rdi
je 0x14000b997
cmp qword [r14 + 0xc0], 0
je 0x14000b8f0
mov r8, qword [r14 + 0xb8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [r14 + 0x28], 0
je 0x14000b90a
mov r8, qword [r14 + 0x20]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [r14 + 0x38], 0
je 0x14000b924
mov r8, qword [r14 + 0x30]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [r14 + 0x60]
test rax, rax
je 0x14000b93c
lock dec qword [rax]
jne 0x14000b93c
mov rcx, qword [r14 + 0x60]
call fcn.140007510
mov rax, qword [r14 + 0x68]
test rax, rax
je 0x14000b954
lock dec qword [rax]
jne 0x14000b954
mov rcx, qword [r14 + 0x68]
call fcn.140007510
cmp qword [r14 + 0x48], 0
je 0x14000b96e
mov r8, qword [r14 + 0x40]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [r14 + 0x88]
cmp qword [r14], 0
je 0x14000b8c0
mov r8, qword [r14 + 8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000b8c0
cmp qword [rsp + 0xc0], 0
je 0x14000b9b9
mov r8, qword [rsp + 0xc8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x178], 0
je 0x14000b9db
mov r8, qword [rsp + 0x170]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp rsi, r13
jne 0x14000bc0b
movzx eax, byte [0x14002d118]
mov edx, 0x18
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov qword [rax], rbx
movdqu xmmword [rax + 8], xmm6
mov rcx, qword [rsp + 0x398]
mov qword [rcx + 8], rax
lea rax, [0x140023718]
mov qword [rcx + 0x10], rax
jmp 0x14000bc1c
movdqu xmm6, xmmword [rsp + 0x298]
lea rax, [r13 + 1]
cmp qword [rsp + 0x108], rax
je 0x14000be8c
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0xc0]
call fcn.1400056b0
cmp dword [rsp + 0x68], 5
je 0x14000be23
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x1c0], rax
movdqu xmm0, xmmword [rsp + 0x68]
movdqa xmmword [rsp + 0x1b0], xmm0
mov qword [rsp + 0x3f0], rdi
lea rax, [0x1400057e0]
mov qword [rsp + 0x3f8], rax
lea rax, [0x140023578]
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], 1
mov qword [rsp + 0x2b0], 0
mov qword [rsp + 0x2a0], rsi
mov qword [rsp + 0x2a8], 1
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x78]
test rsi, rsi
jne 0x14000bbec
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x88]
cmp eax, 1
jne 0x14000bf1f
mov eax, dword [0x14002d11c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x80]
test rcx, rcx
jne 0x14000bbd3
movzx eax, byte [0x14002d118]
mov edx, 0x38
xor ecx, ecx
call fcn.140016930
test rax, rax
je 0x14000bf2d
mov rcx, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 2
mov rax, qword [0x14002d100]
cmp rax, 0xffffffffffffffff
je 0x14000bf2d
lea rdx, [rax + 1]
lock cmpxchg qword [0x14002d100], rdx
jne 0x14000bb70
mov qword [rcx + 0x28], rdx
mov byte [rcx + 0x30], 0
mov eax, dword [0x14002d11c]
mov r8, qword gs:[0x58]
mov rax, qword [r8 + rax*8]
mov qword [rax + 0x78], rdx
cmp qword [rax + 0x80], 0
jne 0x14000bf2d
mov eax, dword [0x14002d11c]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov qword [rax + 0x80], rcx
lock inc qword [rcx]
jle 0x14000bf2d
mov rsi, qword [rcx + 0x28]
lock dec qword [rcx]
jne 0x14000bbec
call fcn.140016e10
mov rax, qword [0x14002d0d0]
cmp rsi, rax
jne 0x14000bc4c
mov eax, dword [0x14002d0d8]
cmp eax, 0xffffffff
je 0x14000bf2d
inc eax
jmp 0x14000bc6a
mov rcx, qword [rsp + 0x398]
mov qword [rcx + 8], rbx
movq qword [rcx + 0x10], xmm6
mov qword [rcx], rsi
movaps xmm6, xmmword [rsp + 0x540]
movaps xmm7, xmmword [rsp + 0x550]
movaps xmm8, xmmword [rsp + 0x560]
add rsp, 0x578
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x14002d0dc], cl
jne 0x14000bf0e
mov qword [0x14002d0d0], rsi
mov eax, 1
mov dword [0x14002d0d8], eax
lea rax, [0x14002d0d0]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x360], rax
mov qword [rsp + 0x368], 0
lea rdx, [0x140028a20]
lea rcx, [rsp + 0x360]
lea r8, [rsp + 0x290]
call fcn.14000c300
mov rsi, qword [rsp + 0x368]
test al, al
je 0x14000bcdf
test rsi, rsi
je 0x14000bf2d
mov rcx, qword [rsp + 0x98]
dec dword [rcx + 8]
jne 0x14000bd60
jmp 0x14000bd46
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000bd37
mov rdi, qword [rsi - 1]
mov r14, qword [rsi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000bcfe
mov rcx, rdi
call rax
dec rsi
cmp qword [r14 + 8], 0
je 0x14000bd25
cmp qword [r14 + 0x10], 0x11
jb 0x14000bd13
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov rcx, qword [rsp + 0x98]
dec dword [rcx + 8]
jne 0x14000bd60
mov qword [rcx], 0
xor eax, eax
xchg byte [rcx + 0xc], al
cmp al, 2
jne 0x14000bd60
add rcx, 0xc
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000bdb8
mov rdi, qword [rsi - 1]
mov r14, qword [rsi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000bd7f
mov rcx, rdi
call rax
dec rsi
cmp qword [r14 + 8], 0
je 0x14000bda6
cmp qword [r14 + 0x10], 0x11
jb 0x14000bd94
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x1b0], 0
jne 0x14000be23
mov rsi, qword [rsp + 0x1b8]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000be23
mov rdi, qword [rsi - 1]
mov r14, qword [rsi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000bdea
mov rcx, rdi
call rax
dec rsi
cmp qword [r14 + 8], 0
je 0x14000be11
cmp qword [r14 + 0x10], 0x11
jb 0x14000bdff
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14002d0f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x108]
mov rcx, rax
neg rcx
jo 0x14000be65
movabs rcx, 0x8000000000000001
cmp rax, rcx
je 0x14000be8c
mov esi, 0x20
test rax, rax
je 0x14000be6a
mov r8, qword [rsp + 0x110]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000be6a
mov esi, 8
cmp qword [rsp + rsi + 0x108], 0
je 0x14000be8c
mov r8, qword [rsp + rsi + 0x110]
mov rcx, qword [0x14002d0f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, r13
mov rax, qword [rsp + 0xe0]
test rax, rax
jne 0x14000b87a
jmp 0x14000b8a0
mov qword [rsp + 0x20], 0x158
lea rcx, [rsp + 0x68]
mov r9d, 8
mov rsi, r8
mov r8, rax
call fcn.140020ba0
mov r8, rsi
jmp 0x14000a349
cmp r8, rax
jbe 0x14000999f
jmp 0x14000bf2d
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0xc0]
mov r9d, 1
mov rdx, r12
mov r8, rbx
call fcn.140020ba0
mov rcx, qword [rsp + 0xc8]
mov r12, qword [rsp + 0xd0]
jmp 0x140008dd4
lea rcx, [0x14002d0dc]
call fcn.1400210a0
jmp 0x14000bc5e
test eax, eax
jne 0x14000bf2d
call fcn.140020c70
jmp 0x14000bb10
ud2