Function at 0x140004710
Capabilities:
Create thread
Encode data using xor
Encrypt data using speck
Execute anti-debugging instructions
Find taskbar
Link many functions at runtime
Parse pe header
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x19e0]
mov eax, 0x1ae0
call fcn.14000d8b0
sub rsp, rax
mov qword [rbp + 0x240], 0xfffffffffffffffe
mov qword [rsp + 0x1b10], rbx
mov qword [rsp + 0x1b18], rsi
mov qword [rsp + 0x1b20], rdi
mov rax, qword [0x14005b3e8]
xor rax, rsp
mov qword [rbp + 0x19d0], rax
mov edx, 0xc
lea rcx, str._Crashed
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
nop dword [rax + rax]
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
nop dword [rax + rax]
xor r13d, r13d
mov dword [rbp + 0x4c], r13d
lea rdx, [0x14004c9b0]
lea rcx, [rbp + 0x1370]
call fcn.140006864
lea rax, [0x14004a0e8]
mov qword [rbp + 0x1370], rax
lea rcx, [rbp + 0x1370]
call fcn.140006290
lea ebx, [r13 + 1]
mov r15d, 0x80004005
cmp byte [0x14005c049], r13b
jne 0x140004831
mov qword [rbp + 0x248], r13
mov r12d, r13d
mov dword [rbp + 0x50], r13d
mov dword [rbp + 0x54], r13d
mov dword [rbp + 0x58], r13d
mov qword [rbp + 0x40], r13
mov dword [rbp + 0x5c], r13d
jmp 0x14001c1f8
xor r13d, r13d
cmp edi, 4
jne 0x140028eb5
mov rax, qword [rbp + 0x248]
test rax, rax
je 0x140028ec0
mov ecx, dword [rax]
mov dword [rbp + 0x4c], ecx
lea rcx, [rbp + 0x248]
call fcn.140009b34
test r12d, r12d
js 0x140028ed3
cmp dword [rbp + 0x4c], 0
je 0x140028ec8
mov byte [0x14005bd70], 0
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_SetProcessShutdownParameters]
nop dword [rax + rax]
lea rdi, section..rdata
mov qword [rbp + 0x5c0], rdi
mov qword [rbp + 0x5c8], r13
lea rcx, [rbp + 0xf10]
call fcn.140004660
lea rcx, [rbp + 0xf90]
call fcn.140004660
mov byte [rbp + 0xc10], 0
mov byte [rbp + 0xc11], 0
mov byte [rbp + 0xc12], 0
mov byte [rbp + 0xc13], 0
mov byte [rbp + 0xc14], 0
mov byte [rbp + 0xc15], 0xf
mov dword [rsp + 0x20], ebx
mov r9d, 2
mov r8d, r9d
lea rdx, [rbp + 0xc10]
lea rcx, [rbp + 0x1010]
call fcn.1400054a0
mov dword [rsp + 0x60], 0x5596e9d6
mov dword [rsp + 0x58], 0x77116514
mov dword [rsp + 0x50], 0xec877a02
mov dword [rsp + 0x48], 0xf9dd46d4
mov dword [rsp + 0x40], 0x98c2b4b2
mov dword [rsp + 0x38], 0x9bf2c075
mov dword [rsp + 0x30], 0x750bcfb9
mov dword [rsp + 0x28], 0x59934ace
mov dword [rsp + 0x20], 0x400
mov r9d, 3
lea r8d, [r9 + 7]
lea rdx, [rbp + 0xc10]
lea rcx, [rbp + 0x1090]
call fcn.1400054a0
lea rdx, [rbp + 0xf90]
lea rcx, [rbp + 0xf10]
call fcn.140005ea0
test al, al
je 0x140029106
lea rdx, [rbp + 0xf10]
lea rcx, [rbp + 0x5c0]
call fcn.140005d5c
lea rdx, [rbp + 0xf90]
lea rcx, [rbp + 0x5c0]
call fcn.140005be4
lea rcx, [rbp + 0x770]
call fcn.140005868
lea rcx, [rbp + 0x1110]
call fcn.140004304
mov rdx, rax
mov r8d, 0x15
lea rcx, [rbp + 0x770]
call fcn.140004330
lea rcx, [rbp + 0x1110]
call fcn.140005690
lea rcx, [rbp + 0x1190]
call fcn.14000445c
mov rdx, rax
mov r8d, 0xb
lea rcx, [rbp + 0x770]
call fcn.140005180
lea rcx, [rbp + 0x1190]
call fcn.140005690
lea rcx, [rbp + 0x1210]
call fcn.14000448c
mov rdx, rax
mov r8d, 0xb
lea rcx, [rbp + 0x770]
call fcn.140005180
lea rcx, [rbp + 0x1210]
call fcn.140005690
mov r8d, 0xb
lea rdx, [rbp + 0xf10]
lea rcx, [rbp + 0x770]
call fcn.140005180
mov r8d, 0xb
lea rdx, [rbp + 0x1010]
lea rcx, [rbp + 0x770]
call fcn.140005180
mov r8d, 0xb
lea rdx, [rbp + 0x1090]
lea rcx, [rbp + 0x770]
call fcn.140005180
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0x5c0]
call fcn.1400058fc
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 - 1]
mov rcx, qword [rbp + 0x5c8]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeSecurity]
nop dword [rax + rax]
mov r15d, eax
test eax, eax
js 0x1400290ca
lea rax, [rbp + 0x5a8]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionTouchKeyboard
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
nop dword [rax + rax]
test eax, eax
jg 0x140028edf
js 0x140004b44
mov dword [rbp + 0x214], r13d
mov dword [rbp + 0x218], 4
lea rax, [rbp + 0x218]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x214]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DelayStart
mov rcx, qword [rbp + 0x5a8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jle 0x140004b2b
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x140028eee
mov rcx, qword [rbp + 0x5a8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
nop dword [rax + rax]
lea rax, [0x14005c048]
mov qword [rsp + 0x20], rax
lea r9, [0x14005bc4c]
lea r8, [0x14005c049]
lea rcx, [rbp + 0x14b0]
call fcn.140006230
mov qword [rbp + 0x238], r13
lea rax, [rbp + 0x238]
mov qword [rsp + 0x20], rax
lea r9, [0x14004c910]
mov r8d, ebx
xor edx, edx
lea rcx, [0x14004d338]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
test eax, eax
js 0x140004bb9
mov rcx, qword [rbp + 0x238]
mov rax, qword [rcx]
mov r8, rbx
mov edx, ebx
mov rax, qword [rax + 0x18]
call qword [case.0x1400380cf.0]
call fcn.140006908
mov byte [0x14005bc4c], al
call fcn.1400041ec
test eax, eax
jne 0x140028f20
xor bl, bl
cmp byte [0x14005bc4c], 0
jne 0x140004bf0
test bl, bl
jne 0x140028f27
cmp byte [0x14005c048], bl
jne 0x140028f27
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
nop dword [rax + rax]
mov qword [0x14005bd80], rax
lea rcx, [rbp + 0x21c]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140002e70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__beginthreadex]
nop dword [rax + rax]
mov r12, rax
mov ecx, 0x43
call qword [sym.imp.USER32.dll_GetSystemMetrics]
nop dword [rax + rax]
mov qword [rbp + 0x348], r13
test eax, eax
jne 0x140028f33
xor r14b, r14b
xor sil, sil
test bl, bl
jne 0x140028f36
mov eax, 1
mov rdi, qword [0x14005bdb0]
mov rdx, qword [0x14005bdb8]
cmp rdi, rdx
jae 0x140004ca6
test eax, eax
js 0x140004ce5
mov rcx, qword [rdi]
test rcx, rcx
je 0x140004c99
call fcn.14000571c
mov rdx, qword [0x14005bdb8]
add rdi, 8
cmp rdi, rdx
jb 0x140004c81
test eax, eax
js 0x140004ce5
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoResumeClassObjects]
nop dword [rax + rax]
test eax, eax
js 0x140004ce5
mov sil, 1
lea rax, [rbp + 0x348]
mov qword [rsp + 0x20], rax
lea r9, [0x14004c8b0]
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [0x14004c900]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
lea rdi, section..rdata
mov qword [rbp + 0x3a0], r13
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x20], rax
lea r9, [0x14004c8f0]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x14004c8e0]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
test eax, eax
js 0x140004deb
mov qword [rbp + 0x438], r13
lea r8, [rbp + 0x438]
lea rdx, [0x14004d358]
lea rcx, [0x14002cc00]
call fcn.140008b40
test eax, eax
js 0x140004daf
mov qword [rbp + 0x4f0], r13
mov rcx, qword [rbp + 0x438]
mov rax, qword [rcx]
lea r8, [rbp + 0x4f0]
lea rdx, [0x14004c8a0]
mov rax, qword [rax]
call qword [case.0x1400380cf.0]
test eax, eax
js 0x140004da2
mov rcx, qword [rbp + 0x3a0]
mov rax, qword [rcx]
lea r9, [0x14005c044]
lea r8, [0x14004c8a0]
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rax + 0x18]
call qword [case.0x1400380cf.0]
nop
lea rcx, [rbp + 0x4f0]
call fcn.140003484
nop
mov rdx, qword [rbp + 0x348]
test rdx, rdx
je 0x140004dde
mov rcx, qword [rbp + 0x3a0]
mov rax, qword [rcx]
lea r9, [0x14005c040]
lea r8, [0x14004c8b0]
mov rax, qword [rax + 0x18]
call qword [case.0x1400380cf.0]
nop
lea rcx, [rbp + 0x438]
call fcn.140003484
nop
mov rcx, qword [0x14005bd80]
test rcx, rcx
je 0x140004e0a
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
nop dword [rax + rax]
mov qword [0x14005bd80], r13
test bl, bl
jne 0x140004e3d
xor edx, edx
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowW]
nop dword [rax + rax]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x593
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
nop dword [rax + rax]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_GetMessageW]
nop dword [rax + rax]
test eax, eax
jg 0x140028f3e
jmp 0x140028f83
xor eax, eax
lock cmpxchg dword [0x14005c480], ebx
jne 0x14001c1f8
lea r14, [0x14005c0a0]
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x14001ca86
mov dword [rbp - 0x28], r13d
mov dword [rbp - 0x48], r13d
mov dword [rsp + 0x74], r13d
mov qword [rbp + 0x250], r13
mov ecx, 0x338
call fcn.140009d20
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14001c77c
mov esi, r13d
mov dword [rbp - 0x20], 0xffffffff
mov r11d, r13d
mov r10d, r13d
lea r14, [rax + 7]
lea r13, [0x14004d8c2]
mov r12d, 0x67
mov ebx, dword [rbp - 0x20]
movzx r9d, byte [r13 - 2]
shl r9d, 8
movzx eax, byte [r13 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 1]
or r9d, eax
movzx r8d, byte [r13 + 2]
shl r8d, 8
movzx eax, byte [r13 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea r13, [r13 + 8]
xor r11d, r10d
xor r11d, 0xac987321
mov edi, r11d
lea eax, [r11 + 0x54969fa2]
rol eax, 5
rol r11d, 0xa
imul eax, eax, 0x137f
add r11d, eax
xor r10d, r11d
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
mov eax, edi
shr eax, 0xd
imul ecx, edi, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, edi
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor r10d, ecx
xor r11d, ebx
mov byte [r14 - 4], r10b
ror r10d, 8
mov byte [r14], r11b
ror r11d, 8
mov byte [r14 - 5], r10b
ror r10d, 8
mov byte [r14 - 1], r11b
ror r11d, 8
mov byte [r14 - 6], r10b
ror r10d, 8
mov byte [r14 - 2], r11b
ror r11d, 8
mov byte [r14 - 7], r10b
mov byte [r14 - 3], r11b
ror r10d, 8
ror r11d, 8
mov esi, r9d
mov ebx, r8d
lea r14, [r14 + 8]
sub r12, 1
jne 0x14001c268
xor r13d, r13d
mov eax, r13d
xorps xmm1, xmm1
xorps xmm2, xmm2
mov r12d, eax
mov rbx, qword [rbp - 0x70]
mov esi, eax
movdqu xmm0, xmmword [rbx + rax]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rbx + rax + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x14001c568
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14001c5e1
xor cl, byte [rax + rbx]
inc rax
cmp rax, 0x338
jb 0x14001c5d3
movzx eax, cl
cmp rax, qword [0x14004dbf8]
jne 0x14001c755
mov qword [rbp + 0x250], rbx
mov qword [rbp + 0x258], 0x338
mov byte [rbx + 0x337], sil
xor edx, edx
lea r8d, [rdx + 0x60]
lea r14, [0x14005c0a0]
mov rcx, r14
call sub.msvcrt.dll_memset
cmp byte [rbx], sil
je 0x14001c78d
mov rdx, rbx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rbx + rax*2], r12w
jne 0x14001c632
lea rbx, [rbx + rax*2]
mov eax, dword [rsp + 0x74]
lea rcx, [rax + rax*2]
lea rdi, [r14 + rcx*8]
mov r8, rdi
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14001c77c
mov esi, r13d
mov rax, qword [rdi]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x14001c67d
mov esi, 0xc000007b
jmp 0x14001c6dc
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x14001c690
mov esi, 0xc000007b
jmp 0x14001c6dc
add rcx, qword [rdi]
cmp rcx, qword [rdi]
jae 0x14001c69f
mov esi, 0xc000007b
jmp 0x14001c6dc
cmp dword [rcx], 0x4550
je 0x14001c6ae
mov esi, 0xc000007b
jmp 0x14001c6dc
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14001c6cb
mov esi, 0xc000000d
jmp 0x14001c6dc
mov rax, qword [rcx + 0x88]
mov qword [rdi + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [rdi + 8], eax
mov r13d, dword [rbx + 2]
add rbx, 6
xor eax, eax
mov r14d, eax
test r13d, r13d
je 0x14001c73c
mov rdx, rbx
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r12b
jne 0x14001c6f8
inc rbx
add rbx, rax
test esi, esi
js 0x14001c731
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14001c783
mov ecx, dword [rbp - 0x28]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
inc dword [rbp - 0x28]
inc r14d
cmp r14d, r13d
jb 0x14001c6ee
inc dword [rsp + 0x74]
cmp byte [rbx], r12b
mov r13, r12
lea r14, [0x14005c0a0]
jne 0x14001c628
jmp 0x14001c786
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
lea r14, [0x14005c0a0]
mov esi, 0xc000007a
jmp 0x14001c78d
xor r13d, r13d
lea r14, [0x14005c0a0]
cmp qword [rbp + 0x250], 0
je 0x14001c7bb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x250]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test esi, esi
jns 0x14001ca7b
mov rdi, r14
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c7df
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rbx, 1
jne 0x14001c7cb
xor edx, edx
lea r8d, [rbx + 0x60]
mov rcx, r14
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r13
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
mov ebx, 1
jmp 0x14001ca8e
mov eax, dword [0x14005bea8]
mov ebx, 1
inc eax
mov dword [0x14005bea8], eax
mov eax, r13d
xchg dword [0x14005c480], eax
mov qword [rbp + 0x260], r13
mov qword [rbp + 0x268], r13
mov esi, r13d
mov edi, r13d
mov rax, qword gs:[0x60]
cmp dword [rax + 0x2c0], 0
je 0x14001cd43
mov rax, qword [0x14005b110]
call qword [case.0x1400380cf.0]
mov r14, rax
test rax, rax
jne 0x14001cb01
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x14001caf1
movzx edi, ax
or edi, 0x80070000
test edi, edi
js 0x14001cd4d
mov edi, r15d
jmp 0x14001cd4d
mov qword [rbp + 0x270], r13
mov r9d, r13d
mov rbx, r13
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov edx, 2
mov rcx, r14
mov rax, qword [0x14005b130]
call qword [case.0x1400380cf.0]
test eax, eax
jne 0x14001cb87
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14001cb6d
test rbx, rbx
jne 0x14001cb77
mov ecx, dword [rbp + 0x60]
call fcn.140009d20
mov rbx, rax
test rax, rax
je 0x14001cb66
mov qword [rbp + 0x270], rax
mov r9d, dword [rbp + 0x60]
jmp 0x14001cb0e
mov edi, 0x8007000e
jmp 0x14001cb8e
test eax, eax
je 0x14001cb77
jg 0x14001cb7c
mov edi, eax
jmp 0x14001cb95
mov edi, r15d
jmp 0x14001cb95
movzx edi, ax
or edi, 0x80070000
jmp 0x14001cb95
mov qword [rbp + 0x260], rbx
mov qword [rbp + 0x270], r13
lea rcx, [rbp + 0x270]
call fcn.14000964c
test edi, edi
js 0x14001cd48
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
nop dword [rax + rax]
mov ecx, eax
mov rax, qword [0x14005b128]
call qword [case.0x1400380cf.0]
mov r14, rax
test rax, rax
jne 0x14001cbfc
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x14001cbe7
movzx edi, ax
or edi, 0x80070000
mov ebx, 1
test edi, edi
js 0x14001cd4d
mov edi, r15d
jmp 0x14001cd4d
mov qword [rbp + 0x278], r13
mov edi, r13d
mov r9d, r13d
mov rbx, r13
lea rax, [rbp + 0x64]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov edx, 2
mov rcx, r14
mov rax, qword [0x14005b130]
call qword [case.0x1400380cf.0]
test eax, eax
jne 0x14001cc85
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14001cc6b
test rbx, rbx
jne 0x14001cc75
mov ecx, dword [rbp + 0x64]
call fcn.140009d20
mov rbx, rax
test rax, rax
je 0x14001cc64
mov qword [rbp + 0x278], rax
mov r9d, dword [rbp + 0x64]
jmp 0x14001cc0c
mov edi, 0x8007000e
jmp 0x14001cc8c
test eax, eax
je 0x14001cc75
jg 0x14001cc7a
mov edi, eax
jmp 0x14001cc93
mov edi, r15d
jmp 0x14001cc93
movzx edi, ax
or edi, 0x80070000
jmp 0x14001cc93
mov qword [rbp + 0x268], rbx
mov qword [rbp + 0x278], r13
lea rcx, [rbp + 0x278]
call fcn.14000964c
test edi, edi
js 0x14001cd48
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x14001cd3e
lea rdx, str.WinSta0
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14001cd3e
mov rcx, qword [rbp + 0x268]
test rcx, rcx
je 0x14001cd3e
lea rdx, str.Default
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14001cd3e
xor eax, eax
mov dword [rbp + 0x38], eax
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
nop dword [rax + rax]
mov rcx, rax
mov r9d, 4
lea r8, [rbp + 0x38]
lea edx, [r9 + 7]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_GetProcessMitigationPolicy]
nop dword [rax + rax]
test eax, eax
jne 0x14001cd30
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x14001cbe7
jmp 0x14001cbde
test byte [rbp + 0x38], 0xf
mov ebx, 1
cmove esi, ebx
jmp 0x14001cd43
mov ebx, 1
mov dword [rbp + 0x5c], esi
jmp 0x14001cd4d
mov ebx, 1
lea rcx, [rbp + 0x268]
call fcn.14000964c
lea rcx, [rbp + 0x260]
call fcn.14000964c
mov eax, dword [rbp + 0x5c]
test edi, edi
cmovs eax, r13d
mov dword [rbp + 0x5c], eax
mov edx, 4
lea ecx, [rdx + 0x3c]
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140009b64
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x14001cdac
mov r13d, 0x8007000e
xor r14d, r14d
jmp 0x140028b56
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov qword [rbp + 0x5f8], r13
mov dword [rbp + 0x68], r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x600], xmm0
mov dword [rbp + 0x6c], r13d
lea rax, [0x14005b4d0]
mov qword [rbp + 0x280], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
lea rdx, [0x14005b410]
test rax, rax
je 0x140020425
mov rax, qword [rbp + 0x280]
movups xmm0, xmmword [rax]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r14 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r14 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r14 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r14 + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [r14 + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [r14 + 0x90], xmm1
mov qword [rbp - 0x70], r14
mov qword [rbp + 0x288], rdx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140020425
mov rax, qword [rbp + 0x288]
mov rcx, qword [rax]
mov qword [rdx], rcx
mov qword [rbp - 0x68], rdx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x290], rax
lea r8, [rbp + 0x70]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, dword [rbp + 0x74]
test eax, eax
cmovns r9d, dword [rbp + 0x70]
mov dword [rbp + 0x74], r9d
js 0x14002042f
lea r8, [rbp + 0x78]
mov edx, 0xa0
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, r9d
test eax, eax
cmovns edi, dword [rbp + 0x78]
mov dword [rbp + 0x74], edi
js 0x14002042f
lea eax, [rdi + r9]
mov r10d, 0xffffffff
cmp eax, r9d
cmovae r10d, eax
mov r13d, 0x10000000
mov r11d, 0xd0000095
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002040e
lea r8, [rbp + 0x7c]
mov edx, 8
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x7c]
mov dword [rbp + 0x74], edi
js 0x14002042f
lea eax, [rdi + r10]
mov r9d, 0xffffffff
cmp eax, r10d
cmovae r9d, eax
mov r13d, 0x10000000
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002040e
lea r8, [rbp + 0x80]
mov edx, 8
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x80]
mov dword [rbp + 0x74], edi
js 0x14002042f
lea eax, [rdi + r9]
mov r11d, 0xffffffff
cmp eax, r9d
cmovae r11d, eax
mov ecx, 0xd0000095
mov r13d, 0x10000000
cmovb r13d, ecx
mov dword [rbp - 0x20], r13d
jb 0x14002040e
lea r8, [rbp + 0x298]
call fcn.14000d760
test eax, eax
jns 0x14001d024
mov r13d, 0xc000003e
jmp 0x14002042b
mov rax, qword [rbp + 0x298]
inc rax
mov qword [rbp + 0x298], rax
lea edx, [rax + rax]
lea r8, [rbp + 0x84]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x84]
mov dword [rbp + 0x74], edi
js 0x14002042f
lea eax, [rdi + r11]
mov r10d, 0xffffffff
cmp eax, r11d
cmovae r10d, eax
mov ecx, 0xd0000095
mov r13d, 0x10000000
cmovb r13d, ecx
mov dword [rbp - 0x20], r13d
jb 0x14002040e
lea r8, [rbp + 0x88]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x88]
mov dword [rbp + 0x74], edi
js 0x14002042f
lea eax, [rdi + r10]
mov r9d, 0xffffffff
cmp eax, r10d
cmovae r9d, eax
mov r13d, 0x10000000
mov r11d, 0xd0000095
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002040e
lea r8, [rbp + 0x8c]
mov edx, ecx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x8c]
mov dword [rbp + 0x74], edi
js 0x14002042f
lea eax, [rdi + r9]
mov ecx, 0xffffffff
cmp eax, r9d
cmovae ecx, eax
mov r13d, 0x10000000
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002040e
mov dword [rbp + 0x5f4], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r9, rax
test rax, rax
je 0x140020425
mov qword [rbp + 0x5f8], rax
xor r10d, r10d
mov edi, r10d
mov dword [rbp + 0x5f0], r10d
mov dword [rbp + 0x90], r10d
lea r8, [rbp + 0x618]
lea edx, [r10 + 4]
mov rcx, rax
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov eax, r10d
test r13d, r13d
js 0x14002042f
mov ecx, dword [rbp + 0x5f4]
add rcx, r9
lea rax, [r9 + 8]
cmp rax, rcx
jbe 0x14001d1be
mov r13d, 0xc0000023
jmp 0x14002042b
mov dword [r9], 4
mov ecx, dword [rbp + 0x90]
mov rax, qword [rbp + 0x618]
mov dword [rax], ecx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
mov eax, edi
test r13d, r13d
js 0x14002042f
cmp qword [rbp + 0x5f8], r10
jne 0x14001d260
lea r8, [rbp + 0x98]
mov edx, 0xa0
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0x9c]
test eax, eax
cmovns edx, dword [rbp + 0x98]
mov dword [rbp + 0x9c], edx
js 0x14001d3a2
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d3a2
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d3ab
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2a0], r9
mov r11d, r10d
test eax, eax
je 0x14001d2dc
mov r10d, dword [rbp + 0x9c]
lea r8, [rbp + 0xa0]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xa0]
mov dword [rbp + 0x9c], r10d
js 0x14001d3a2
mov edx, r10d
lea r8, [rbp + 0x2a0]
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d3a2
inc r11d
mov r9, qword [rbp + 0x2a0]
cmp r11d, edi
jb 0x14001d27c
lea r8, [rbp + 0x5b8]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d3a2
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 0xa4]
cmp rax, rcx
jbe 0x14001d322
mov r13d, 0xc0000023
jmp 0x14002042b
mov dword [r9], 0xa0
mov rax, qword [rbp + 0x5b8]
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x14002042f
cmp qword [rbp + 0x5f8], 0
jne 0x14001d420
lea r8, [rbp + 0xa4]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xa8]
test eax, eax
cmovns edx, dword [rbp + 0xa4]
mov dword [rbp + 0xa8], edx
js 0x14001d506
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d506
inc edi
mov dword [rbp + 0x5f0], edi
xor r14d, r14d
jmp 0x14001d512
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2a8], r9
xor r14d, r14d
mov r11d, r14d
test edi, edi
je 0x14001d49b
mov r10d, dword [rbp + 0xa8]
lea r8, [rbp + 0xac]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xac]
mov dword [rbp + 0xa8], r10d
js 0x14001d509
mov edx, r10d
lea r8, [rbp + 0x2a8]
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d509
inc r11d
mov r9, qword [rbp + 0x2a8]
cmp r11d, edi
jb 0x14001d43f
lea r8, [rbp + 0x5e8]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d509
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
jbe 0x14001d4de
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov dword [r9], 8
mov rcx, qword [rbp - 0x80]
mov rcx, qword [rcx]
mov rax, qword [rbp + 0x5e8]
mov qword [rax], rcx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d509
xor r14d, r14d
test r13d, r13d
js 0x140020432
mov rax, qword [rbp + 0x290]
mov qword [rbp + 0x2b0], rax
cmp qword [rbp + 0x5f8], 0
jne 0x14001d592
lea r8, [rbp + 0xb0]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xb4]
test eax, eax
cmovns edx, dword [rbp + 0xb0]
mov dword [rbp + 0xb4], edx
js 0x14001d673
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d673
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d67c
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2b8], r9
mov r11d, r14d
test edi, edi
je 0x14001d60a
mov r10d, dword [rbp + 0xb4]
lea r8, [rbp + 0xb8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xb8]
mov dword [rbp + 0xb4], r10d
js 0x14001d673
mov edx, r10d
lea r8, [rbp + 0x2b8]
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d673
inc r11d
mov r9, qword [rbp + 0x2b8]
cmp r11d, edi
jb 0x14001d5ae
lea r8, [rbp + 0x648]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d673
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
jbe 0x14001d64d
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov dword [r9], 8
mov rcx, qword [rbp + 0x2b0]
mov rax, qword [rbp + 0x648]
mov qword [rax], rcx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x140020432
lea r8, [rbp + 0x2c0]
call fcn.14000d760
test eax, eax
jns 0x14001d69b
mov r13d, 0xc000003e
mov dword [rbp - 0x20], r13d
jmp 0x140020432
lea r8, [rbp + 0x2c0]
mov edx, 1
mov rcx, qword [rbp + 0x2c0]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d83a
mov eax, dword [rbp + 0x2c0]
lea r11d, [rax + rax]
test r11d, r11d
je 0x14001d830
cmp qword [rbp + 0x5f8], 0
jne 0x14001d74d
lea r8, [rbp + 0xbc]
mov edx, r11d
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xc0]
test eax, eax
cmovns edx, dword [rbp + 0xbc]
mov dword [rbp + 0xc0], edx
js 0x14001d83a
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d83a
inc edi
mov dword [rbp + 0x5f0], edi
mov r13d, r14d
mov dword [rbp - 0x20], r14d
jmp 0x14001d83a
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2c8], r9
test edi, edi
je 0x14001d7c2
mov r10d, dword [rbp + 0xc0]
lea r8, [rbp + 0xc4]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xc4]
mov dword [rbp + 0xc0], r10d
js 0x14001d82b
mov edx, r10d
lea r8, [rbp + 0x2c8]
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d82b
inc r14d
mov r9, qword [rbp + 0x2c8]
cmp r14d, edi
jb 0x14001d766
lea r8, [rbp + 0x658]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d82b
mov r8d, r11d
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r11 + 4]
add rax, r9
cmp rax, rcx
jbe 0x14001d807
mov r13d, 0xc0000023
xor r14d, r14d
jmp 0x14001d836
mov dword [r9], r11d
lea rdx, str.TabletPCInputPanel_EnableTIP
mov rcx, qword [rbp + 0x658]
call sub.msvcrt.dll_memcpy
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
xor r14d, r14d
jmp 0x14001d83a
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
test r13d, r13d
js 0x140020432
mov eax, dword [rbp + 0x5c]
mov dword [rbp + 0xc8], eax
cmp qword [rbp + 0x5f8], 0
jne 0x14001d8bd
lea r8, [rbp + 0xd0]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xd4]
test eax, eax
cmovns edx, dword [rbp + 0xd0]
mov dword [rbp + 0xd4], edx
js 0x14001d99c
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d99c
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d9a5
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2d0], r9
mov r11d, r14d
test edi, edi
je 0x14001d935
mov r10d, dword [rbp + 0xd4]
lea r8, [rbp + 0xd8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xd8]
mov dword [rbp + 0xd4], r10d
js 0x14001d99c
mov edx, r10d
lea r8, [rbp + 0x2d0]
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d99c
inc r11d
mov r9, qword [rbp + 0x2d0]
cmp r11d, edi
jb 0x14001d8d9
lea r8, [rbp + 0x668]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d99c
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 8]
cmp rax, rcx
jbe 0x14001d978
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov dword [r9], 4
mov ecx, dword [rbp + 0xc8]
mov rax, qword [rbp + 0x668]
mov dword [rax], ecx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x140020432
mov dword [rbp + 0xe0], 4
cmp qword [rbp + 0x5f8], 0
jne 0x14001da20
lea r8, [rbp + 0xe8]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xec]
test eax, eax
cmovns edx, dword [rbp + 0xe8]
mov dword [rbp + 0xec], edx
js 0x14001daff
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001daff
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001db08
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2d8], r9
mov r11d, r14d
test edi, edi
je 0x14001da98
mov r10d, dword [rbp + 0xec]
lea r8, [rbp + 0xf0]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xf0]
mov dword [rbp + 0xec], r10d
js 0x14001daff
mov edx, r10d
lea r8, [rbp + 0x2d8]
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001daff
inc r11d
mov r9, qword [rbp + 0x2d8]
cmp r11d, edi
jb 0x14001da3c
lea r8, [rbp + 0x678]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001daff
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 8]
cmp rax, rcx
jbe 0x14001dadb
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov dword [r9], 4
mov ecx, dword [rbp + 0xe0]
mov rax, qword [rbp + 0x678]
mov dword [rax], ecx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x140020432
lea r8, [rbp + 0xf4]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r10d, dword [rbp + 0xf8]
test eax, eax
cmovns r10d, dword [rbp + 0xf4]
mov dword [rbp + 0xf8], r10d
js 0x14001dcd9
mov dword [rbp + 0xfc], r10d
lea r8, [rbp + 0x100]
mov edx, 8
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, r10d
test eax, eax
cmovns r9d, dword [rbp + 0x100]
mov dword [rbp + 0xf8], r9d
js 0x14001dcd9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, r10d
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dcd9
lea r8, [rbp + 0x104]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x104]
mov dword [rbp + 0xf8], r9d
js 0x14001dcd9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dcd9
lea r8, [rbp + 0x108]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x108]
mov dword [rbp + 0xf8], r9d
js 0x14001dcd9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dcd9
lea r8, [rbp + 0x10c]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x10c]
mov dword [rbp + 0xf8], r9d
js 0x14001dcd9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dcd9
lea r8, [rbp + 0x48]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x48]
mov dword [rbp + 0xf8], r9d
js 0x14001dcd9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, dword [rbp + 0x48]
test eax, eax
cmovns r9d, dword [rbp + 0xfc]
jmp 0x14001dcdd
mov r9d, dword [rbp + 0x48]
mov dword [rsp + 0x74], r9d
test r13d, r13d
js 0x140020432
mov qword [rbp - 0x80], r14
xor eax, eax
mov qword [rbp + 0x478], rax
mov r11d, eax
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x48], eax
mov qword [rbp - 8], rax
mov dword [rbp + 0x110], eax
mov qword [rbp + 0x28], rax
mov r10d, eax
mov qword [rbp - 0x40], rax
mov dword [rbp + 0x114], eax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x470], rax
mov dword [rbp + 0x118], 8
lea r8, [rbp + 0x118]
mov edx, dword [rbp + 0x5f4]
lea ecx, [r10 + 8]
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001de6e
mov eax, dword [rbp + 0x118]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x14001dd74
mov r13d, 0xc0000095
jmp 0x14001de6e
mov dword [rbp + 0x118], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14001ddb2
mov r13d, 0xc0000017
jmp 0x14001de5c
mov qword [rbp + 0x460], rdi
mov eax, dword [rbp + 0x5f0]
mov dword [rdi], eax
lea r8, [rbp + 0x460]
mov edx, 4
mov rcx, rdi
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001de3c
mov rcx, qword [rbp + 0x460]
mov eax, dword [rbp + 0x5f4]
mov dword [rcx], eax
lea r8, [rbp + 0x460]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001de3c
mov ecx, dword [rbp + 0x118]
mov rax, qword [rbp + 0x470]
mov qword [rcx + rdi - 8], rax
mov r8d, dword [rbp + 0x5f4]
mov rdx, qword [rbp + 0x5f8]
mov rcx, qword [rbp + 0x460]
call sub.msvcrt.dll_memcpy
mov qword [rbp - 0x80], rdi
mov r14d, dword [rbp + 0x118]
jmp 0x14001de5c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r11, r10
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fbcb
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov qword [rbp - 0x78], rax
mov r13, qword [rbp - 0x80]
test r13, r13
jne 0x14001dea0
mov r13d, 0xc000000d
jmp 0x14001e777
mov r14d, r14d
mov qword [rbp + 0x10], r14
test r14, r14
je 0x14001e65a
lea rax, [r14 + 8]
mov qword [rbp + 0x30], rax
mov rcx, rax
call fcn.140009d20
mov r8, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x14001e648
xor al, al
mov dword [rbp - 0x20], eax
xor edx, edx
mov ecx, edx
test r14, r14
je 0x14001df70
cmp r14, 0x20
jb 0x14001df5c
mov edx, r14d
and rdx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
movdqu xmm0, xmmword [rcx + r13]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rcx + r13 + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rcx, 0x20
cmp rcx, rdx
jb 0x14001def5
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
mov dword [rbp - 0x20], eax
xor edx, edx
cmp rcx, r14
jae 0x14001df70
xor al, byte [rcx + r13]
inc rcx
cmp rcx, r14
jb 0x14001df61
mov dword [rbp - 0x20], eax
mov qword [rbp + 0xc28], rbx
mov rdi, r13
mov r11, r8
mov r9d, edx
mov r10d, 0xffffffff
mov dword [rbp - 0x28], edx
mov dword [rsp + 0x78], edx
mov rax, r14
and eax, 7
je 0x14001e562
mov r10d, edx
mov dword [rbp - 0x28], edx
mov r13d, edx
mov dword [rsp + 0x78], edx
test eax, eax
je 0x14001dfe4
mov r8d, 0x38
movzx edx, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x14001dfc7
lea ecx, [r8 - 0x20]
shl edx, cl
or r13d, edx
jmp 0x14001dfcf
mov ecx, r8d
shl edx, cl
or r10d, edx
inc r9d
sub r8d, 8
cmp r9d, eax
jl 0x14001dfb0
mov dword [rsp + 0x78], r13d
mov dword [rbp - 0x28], r10d
mov r9d, r13d
xor r9d, 0xb17a307a
xor r10d, 0x42f6b18d
mov ecx, r9d
mov edx, r10d
xor r13d, r13d
mov r8d, r13d
test eax, eax
jne 0x14001e00a
mov rdx, r11
jmp 0x14001e03e
lea r13, [r11 + 1]
mov qword [rbp - 0x58], r13
cmp r8d, 4
jge 0x14001e020
rol ecx, 8
mov r13d, ecx
jmp 0x14001e026
rol edx, 8
mov r13d, edx
mov byte [r11], r13b
inc r8d
mov r13, qword [rbp - 0x58]
mov r11, r13
cmp r8d, eax
jl 0x14001e00a
mov rdx, r13
xor r13d, r13d
cmp eax, 4
jbe 0x14001e544
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r8, qword [rbp + 8]
mov r13, r14
shr r13, 3
test r13, r13
je 0x14001e39a
mov r11d, dword [rbp + 0xc2c]
mov eax, r11d
shr eax, 0x10
mov dword [rsp + 0x70], eax
movzx eax, bx
mov dword [rbp - 0x10], eax
movzx eax, bx
mov dword [rbp - 0x60], eax
movzx eax, r11w
mov dword [rbp - 0x50], eax
mov eax, r11d
xor eax, ebx
add rdx, 7
mov qword [rbp - 0x18], rdx
lea rcx, [rdi + 2]
mov esi, dword [rsp + 0x70]
mov r12d, dword [rbp - 0x28]
mov r14d, dword [rsp + 0x78]
mov r15d, eax
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r10d, edi
add rcx, 8
mov qword [rbp - 0x58], rcx
mov eax, r10d
sub eax, dword [rbp - 0x60]
xor eax, r11d
xor eax, r8d
xor r9d, eax
mov edx, r11d
xor edx, r9d
ror edx, 0xf
mov ecx, r9d
ror ecx, 7
movzx eax, word [rbp + 0xc2a]
imul eax, edx
add ecx, eax
xor r10d, ecx
lea edx, [r10 + rbx]
ror edx, 9
mov ecx, r10d
ror ecx, 0xa
mov eax, dword [rbp - 0x50]
imul eax, edx
sub eax, ecx
xor r9d, eax
mov edx, r9d
xor edx, dword [rbp - 0x50]
rol edx, 4
mov ecx, r9d
rol ecx, 5
mov eax, esi
imul eax, edx
add ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, ebx
mov eax, r11d
sub eax, ecx
xor r9d, eax
mov ecx, r9d
sub ecx, dword [rbp - 0x10]
movzx edx, word [rbp + 0xc2a]
imul ecx, edx
mov eax, r9d
shr eax, 6
sub ecx, eax
xor r10d, ecx
mov eax, r10d
ror eax, 0xf
xor eax, dword [rbp - 0x50]
imul eax, dword [rbp - 0x10]
xor r9d, eax
mov eax, r9d
not eax
ror eax, 3
add eax, esi
imul eax, dword [rbp - 0x50]
xor r10d, eax
mov eax, r10d
sub eax, r11d
sub eax, dword [rbp - 0x60]
xor r9d, eax
mov ecx, r9d
ror ecx, 0xa
mov eax, r9d
xor eax, esi
imul eax, edx
xor ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, dword [rbp - 0x10]
rol edx, 6
mov ecx, r10d
ror ecx, 3
mov eax, dword [rbp - 0x50]
imul eax, edx
xor ecx, eax
xor r9d, ecx
mov eax, r9d
ror eax, 0xf
sub eax, esi
imul eax, dword [rbp - 0x10]
xor r10d, eax
mov ecx, r10d
xor ecx, esi
imul ecx, dword [rbp - 0x60]
mov eax, r10d
shr eax, 1
xor ecx, eax
xor r9d, ecx
mov eax, r10d
sub eax, dword [rbp - 0x50]
rol eax, 3
mov ecx, dword [rbp - 0x60]
imul ecx, eax
mov eax, r10d
shr eax, 0xf
xor ecx, eax
xor r9d, ecx
mov ecx, r9d
sub ecx, dword [rbp - 0x50]
movzx eax, word [rbp + 0xc2a]
imul ecx, eax
mov eax, r9d
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
mov edx, ebx
sub edx, r10d
ror edx, 9
mov ecx, r10d
ror ecx, 0xb
mov eax, dword [rbp - 0x50]
imul eax, edx
xor ecx, eax
xor r9d, ecx
mov eax, r9d
sub eax, esi
sub eax, ebx
xor r10d, eax
mov ecx, r10d
ror ecx, 7
movzx eax, word [rbp + 0xc2a]
xor eax, r10d
imul eax, dword [rbp - 0x60]
sub eax, ecx
xor r9d, eax
mov edx, esi
xor edx, r9d
rol edx, 4
mov ecx, r9d
ror ecx, 0x10
movzx eax, word [rbp + 0xc2a]
imul eax, edx
sub eax, ecx
xor r10d, eax
mov edx, ebx
sub edx, r10d
ror edx, 0xa
mov ecx, r10d
ror ecx, 4
mov eax, dword [rbp - 0x50]
imul eax, edx
add ecx, eax
xor r9d, ecx
mov edx, r9d
sub edx, ebx
ror edx, 4
mov ecx, r9d
ror ecx, 9
mov eax, esi
imul eax, edx
xor ecx, eax
xor r10d, ecx
mov edx, r11d
xor edx, r10d
rol edx, 8
mov ecx, r10d
rol ecx, 2
mov eax, dword [rbp - 0x60]
imul eax, edx
sub eax, ecx
xor r9d, eax
mov edx, r11d
sub edx, r9d
ror edx, 0xb
mov ecx, r9d
ror ecx, 0xc
movzx eax, word [rbp + 0xc2a]
imul eax, edx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
movzx eax, word [rbp + 0xc2a]
xor ecx, eax
imul ecx, dword [rbp - 0x50]
mov eax, r10d
shr eax, 8
xor ecx, eax
xor r9d, ecx
xor r10d, r9d
xor r10d, r15d
xor r9d, r14d
xor r10d, r12d
mov rax, qword [rbp - 0x18]
mov byte [rax - 4], r9b
ror r9d, 8
mov byte [rax], r10b
ror r10d, 8
mov byte [rax - 5], r9b
ror r9d, 8
mov byte [rax - 1], r10b
ror r10d, 8
mov byte [rax - 6], r9b
ror r9d, 8
mov byte [rax - 2], r10b
ror r10d, 8
mov byte [rax - 7], r9b
mov byte [rax - 3], r10b
ror r9d, 8
ror r10d, 8
mov r14d, r8d
mov r12d, edi
add rax, 8
mov qword [rbp - 0x18], rax
sub r13, 1
mov rcx, qword [rbp - 0x58]
jne 0x14001e0b0
movabs rsi, 0x7f1137fab69605e
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r14, qword [rbp + 0x10]
mov r8, qword [rbp + 8]
movzx eax, byte [rbp - 0x20]
mov qword [r8 + r14], rax
mov qword [rbp + 0x2e0], r8
mov r14, qword [rbp + 0x30]
mov qword [rbp + 0x230], r14
lea rax, [0x14005b4c0]
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 0x2f8], 8
lea r13, [0x14005b420]
mov qword [rbp + 0x300], r13
mov qword [rbp + 0x308], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x14001e619
mov r14d, r14d
mov dword [rax], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r14d
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001e56a
mov qword [rdi + 8], rax
mov r8d, r14d
mov rdx, qword [rbp + 8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rdi + 0x10], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001e56a
mov qword [rdi + 0x18], rax
movups xmm0, xmmword [r13]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r13 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r13 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r13 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r13 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r13 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r13 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r13 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rdi + 0x20], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001e56a
mov qword [rdi + 0x28], rax
xor edx, edx
mov r13d, edx
mov rcx, qword [0x14005b4c0]
mov qword [rax], rcx
mov r14, rdi
jmp 0x14001e625
mov r10d, r13d
jae 0x14001e057
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r9d, cl
shl r9d, cl
jmp 0x14001e057
mov rdx, r8
jmp 0x14001e05b
mov r14, qword [rdi + 8]
test r14, r14
je 0x14001e59c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r13d, r13d
mov qword [rdi + 8], r13
jmp 0x14001e59f
xor r13d, r13d
mov r14, qword [rdi + 0x18]
test r14, r14
je 0x14001e5cc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x18], r13
mov r14, qword [rdi + 0x28]
test r14, r14
je 0x14001e5f9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x28], r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r14, qword [rbp - 0x78]
mov r13d, 0xc0000017
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10, qword [rbp - 0x40]
mov r11, r10
test r13d, r13d
js 0x14001e664
mov qword [rbp + 0x478], r14
mov r14, rdx
jmp 0x14001e664
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10, qword [rbp - 0x40]
mov r11, r10
mov r13d, 0xc0000001
mov r14, qword [rbp - 0x78]
mov rax, qword [rbp + 0x2e0]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x14001e6af
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10d, eax
mov r11d, eax
test r14, r14
je 0x14001e777
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001e6e7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001e716
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001e745
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10, qword [rbp - 0x40]
mov r11, r10
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fbcb
mov r14, qword [rbp + 0x478]
mov dword [rbp + 0x11c], 4
lea r8, [rbp + 0x11c]
mov edx, dword [r14]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001e83f
lea r8, [rbp + 0x11c]
mov edx, ecx
mov ecx, dword [rbp + 0x11c]
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001e83f
lea r8, [rbp + 0x11c]
mov edx, dword [r14 + 0x10]
mov ecx, dword [rbp + 0x11c]
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001e83f
lea r8, [rbp + 0x11c]
mov edx, 4
mov ecx, dword [rbp + 0x11c]
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001e83f
lea r8, [rbp + 0x11c]
mov edx, dword [r14 + 0x20]
mov ecx, dword [rbp + 0x11c]
call fcn.14000d71c
mov r13d, eax
mov eax, dword [rbp + 0x120]
test r13d, r13d
cmovns eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
jmp 0x14001e845
mov eax, dword [rbp + 0x120]
test r13d, r13d
js 0x14001e9e2
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x14001e88a
mov r13d, 0xc0000017
jmp 0x14001e9d0
mov qword [rbp + 0x310], rcx
mov eax, dword [r14]
mov dword [rcx], eax
lea r8, [rbp + 0x310]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001e9af
mov r8d, dword [r14]
mov rdx, qword [r14 + 8]
mov rcx, qword [rbp + 0x310]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14]
lea r8, [rbp + 0x310]
mov rcx, qword [rbp + 0x310]
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001e9af
mov eax, dword [r14 + 0x10]
mov rcx, qword [rbp + 0x310]
mov dword [rcx], eax
lea r8, [rbp + 0x310]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001e9af
mov r8d, dword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov rcx, qword [rbp + 0x310]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x10]
lea r8, [rbp + 0x310]
mov rcx, qword [rbp + 0x310]
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001e9af
mov eax, dword [r14 + 0x20]
mov rcx, qword [rbp + 0x310]
mov dword [rcx], eax
lea r8, [rbp + 0x310]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001e9af
mov r8d, dword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
mov rcx, qword [rbp + 0x310]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x20]
lea r8, [rbp + 0x310]
mov rcx, qword [rbp + 0x310]
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001e9af
mov r11, qword [rbp - 0x18]
mov qword [rbp - 0x38], r11
mov eax, dword [rbp + 0x120]
mov dword [rbp - 0x48], eax
mov r10, qword [rbp - 0x40]
jmp 0x14001e9d7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov r11, r10
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fbcb
xor eax, eax
mov qword [rbp + 0x318], rax
mov r11d, eax
mov dword [rbp + 0x124], eax
mov qword [rbp + 0x320], rax
mov r14d, eax
mov dword [rbp + 0x128], eax
mov dword [rbp + 0x12c], 8
lea r8, [rbp + 0x12c]
mov edx, r9d
lea ecx, [rax + 8]
call fcn.14000d71c
mov r13d, eax
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001eb98
mov eax, dword [rbp + 0x12c]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x14001ea69
mov r13d, 0xc0000095
mov dword [rbp - 0x20], r13d
mov r9d, dword [rbp + 0x130]
jmp 0x14001ea9e
mov dword [rbp + 0x134], ecx
lea r8, [rbp + 0x134]
mov edx, 8
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, dword [rbp + 0x130]
test eax, eax
cmovns r9d, dword [rbp + 0x134]
mov dword [rbp + 0x130], r9d
test r13d, r13d
js 0x14001fbc5
cmp qword [rbp + 0x5f8], r11
jne 0x14001eabf
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x14001eb98
cmp edi, 1
ja 0x14001ead3
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x14001eb98
mov rcx, qword [rbp + 0x5f8]
mov qword [rbp + 0x328], rcx
xor eax, eax
mov r10d, eax
mov eax, dword [rcx]
mov dword [rbp - 0x58], eax
lea r8, [rbp + 0x328]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001eb7f
mov edx, dword [rbp - 0x58]
lea r8, [rbp + 0x328]
mov rcx, qword [rbp + 0x328]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001eb7f
inc r10d
mov rcx, qword [rbp + 0x328]
cmp r10d, 1
jb 0x14001eae6
mov r10d, dword [rcx]
lea r8, [rbp + 0x328]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001eb7f
mov r11d, r10d
mov dword [rbp + 0x124], r10d
mov rax, qword [rbp + 0x328]
test r10d, r10d
mov rdx, r14
cmove rax, rdx
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x318], rax
jmp 0x14001eb81
xor edx, edx
test r13d, r13d
js 0x14001eb95
cmp edi, 2
ja 0x14001ebe2
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
mov r10, r14
test r13d, r13d
js 0x14001fbc5
mov edi, dword [rbp + 0x110]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x14001ed81
mov r13d, 0xd0000017
mov rdi, qword [rbp - 8]
jmp 0x14001ed8e
mov rcx, qword [rbp + 0x5f8]
mov qword [rbp + 0x330], rcx
mov edi, edx
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec84
mov edx, r10d
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec84
inc edi
mov rcx, qword [rbp + 0x330]
cmp edi, 2
jb 0x14001ebf2
mov edi, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec84
mov r14d, edi
mov dword [rbp + 0x128], edi
mov rax, qword [rbp + 0x330]
test edi, edi
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x320], rax
test r13d, r13d
js 0x14001ed78
mov dword [rbp + 0x138], 4
lea r8, [rbp + 0x138]
mov edx, r9d
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ed4a
lea r8, [rbp + 0x138]
mov edx, ecx
mov ecx, dword [rbp + 0x138]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ed4a
lea r8, [rbp + 0x138]
mov edx, r11d
mov ecx, dword [rbp + 0x138]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ed4a
lea r8, [rbp + 0x138]
mov edx, 4
mov ecx, dword [rbp + 0x138]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ed4a
lea r8, [rbp + 0x138]
mov edx, r14d
mov ecx, dword [rbp + 0x138]
call fcn.14000d71c
mov r13d, eax
mov dword [rbp - 0x20], eax
mov eax, dword [rbp + 0x13c]
test r13d, r13d
cmovns eax, dword [rbp + 0x138]
mov dword [rbp + 0x13c], eax
jmp 0x14001ed50
mov eax, dword [rbp + 0x13c]
test r13d, r13d
js 0x14001ed78
cmp eax, 0x400000
jbe 0x14001ed72
mov r13d, 0x8000ffff
mov dword [rbp - 0x20], r13d
mov rdi, qword [rbp - 8]
mov r10, rdi
jmp 0x14001fbe3
mov dword [rbp + 0x110], eax
mov r10, qword [rbp - 0x40]
jmp 0x14001eb98
mov rdi, rax
mov qword [rbp - 8], rax
mov r13d, 0x10000000
mov dword [rbp - 0x20], r13d
mov r11, qword [rbp - 0x38]
test r13d, r13d
js 0x14001edaa
test r11, r11
jne 0x14001edb3
mov r13d, 0x80070057
mov dword [rbp - 0x20], r13d
mov r10, qword [rbp - 0x40]
jmp 0x14001fbe7
test rdi, rdi
jne 0x14001edcb
mov r13d, 0x80070057
mov dword [rbp - 0x20], r13d
mov r10, qword [rbp - 0x40]
jmp 0x14001fbe7
mov qword [rbp + 0x700], r11
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0x710], eax
mov qword [rbp + 0x708], rdi
mov eax, dword [rbp + 0x110]
mov dword [rbp + 0x714], eax
xor r14d, r14d
mov dword [rbp + 0x718], r14d
lea r8, [rbp + 0x338]
lea rdx, [0x14004d280]
lea ecx, [r14 + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14001ee77
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
jle 0x14001ee3f
movzx r13d, ax
or r13d, 0x80070000
mov dword [rbp - 0x20], r13d
mov edx, dword [rbp + 0x110]
test r13d, r13d
js 0x14001eee7
mov r13d, r15d
mov dword [rbp - 0x20], r15d
test r13d, r13d
js 0x14001eefe
cmp edx, 4
jae 0x14001ef06
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f327
lea rdx, [0x14004dee0]
mov rcx, qword [rbp + 0x338]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
jne 0x14001eeae
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
jle 0x14001ee3f
jmp 0x14001ee30
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0x700]
lea ecx, [r8 + 0x66]
call qword [case.0x1400380cf.0]
mov r13d, eax
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
mov edx, dword [rbp + 0x110]
cmovge edx, dword [rbp + 0x714]
mov dword [rbp + 0x110], edx
cmp r13d, 0xd0000023
jne 0x14001ee55
mov r13d, 0x8007007a
mov dword [rbp - 0x20], r13d
mov r10, r14
jmp 0x14001fbe3
mov r9d, dword [rdi]
mov dword [rbp - 0x58], r9d
lea rcx, [rdi + 4]
cmp rcx, rdi
jb 0x14001f3e7
lea eax, [rdx - 4]
cmp eax, r9d
jae 0x14001ef32
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f327
mov qword [rbp - 0x18], r9
lea rdi, [r9 + rcx]
cmp rdi, rcx
jb 0x14001f3d7
lea ecx, [r9 + 4]
cmp ecx, 4
jb 0x14001f3d7
mov eax, edx
sub eax, ecx
cmp eax, 4
jae 0x14001ef69
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f323
mov r13d, dword [rdi]
lea r8, [rdi + 4]
mov qword [rbp + 8], r8
cmp r8, rdi
jb 0x14001f3d7
lea edi, [rcx + 4]
cmp edi, ecx
jb 0x14001f3d7
mov eax, edx
sub eax, edi
cmp eax, r13d
jae 0x14001efa1
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f323
lea rcx, [r8 + r13]
cmp rcx, r8
jb 0x14001f3d7
lea r8d, [rdi + r13]
cmp r8d, edi
jb 0x14001f3d7
mov eax, edx
sub eax, r8d
cmp eax, 4
jae 0x14001efd5
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f323
mov edi, dword [rcx]
mov dword [rbp - 0x50], edi
lea rax, [rcx + 4]
mov qword [rbp + 0x30], rax
cmp rax, rcx
jb 0x14001f3d7
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x14001f3d7
mov eax, edx
sub eax, ecx
cmp eax, edi
jae 0x14001f010
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f323
lea r8d, [rdi + rcx]
cmp r8d, ecx
jb 0x14001f3d7
cmp edx, r8d
je 0x14001f032
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f323
lea ecx, [rdi + r13]
add ecx, r9d
add rcx, 0xc
mov eax, edx
cmp rcx, rax
je 0x14001f054
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f323
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14001f08d
xor edx, edx
mov r13d, 0xc0000017
jmp 0x14001f256
mov rax, qword [rbp - 8]
add rax, 4
je 0x14001f0e5
mov eax, dword [rbp - 0x58]
mov dword [rdi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x14001f192
mov qword [rdi + 8], rax
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 8]
add rdx, 4
call sub.msvcrt.dll_memcpy
xor edx, edx
jmp 0x14001f0ed
xor edx, edx
mov dword [rdi], edx
mov qword [rdi + 8], rdx
cmp qword [rbp + 8], r14
je 0x14001f136
mov dword [rdi + 0x10], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001f192
mov qword [rdi + 0x18], rax
mov r8, r13
mov rdx, qword [rbp + 8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor edx, edx
jmp 0x14001f13d
mov dword [rdi + 0x10], edx
mov qword [rdi + 0x18], rdx
cmp qword [rbp + 0x30], r14
je 0x14001f249
mov eax, dword [rbp - 0x50]
mov dword [rdi + 0x20], eax
mov r13d, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r13d
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001f192
mov qword [rdi + 0x28], rax
mov r8d, r13d
mov rdx, qword [rbp + 0x30]
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor edx, edx
jmp 0x14001f250
mov r13, qword [rdi + 8]
test r13, r13
je 0x14001f1c1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 8], rax
mov r13, qword [rdi + 0x18]
test r13, r13
je 0x14001f1f0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x18], rax
mov r13, qword [rdi + 0x28]
test r13, r13
je 0x14001f21f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r13d, 0xc0000017
jmp 0x14001f256
mov dword [rdi + 0x20], edx
mov qword [rdi + 0x28], rdx
mov r14, rdi
mov r13d, edx
test r13d, r13d
js 0x14001f267
mov rax, r14
mov qword [rbp + 0x28], rax
jmp 0x14001f323
test r14, r14
je 0x14001f31f
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001f29f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001f2ce
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001f2fd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov rax, qword [rbp + 0x28]
mov rdi, qword [rbp - 8]
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fbdf
mov rdi, rdx
mov qword [rbp + 0x340], rdx
test rax, rax
je 0x14001fbd1
mov r13, qword [rax + 8]
mov qword [rbp - 0x18], r13
test r13, r13
je 0x14001fbd1
mov eax, dword [rax]
test eax, eax
je 0x14001fbd1
mov r14d, eax
add r14, 0xfffffffffffffff8
mov qword [rbp + 8], r14
mov rcx, r14
call fcn.140009d20
mov r8, rax
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14001f8b8
xor cl, cl
mov dword [rbp - 0x58], ecx
mov qword [rbp + 0xc30], rsi
mov rdi, r13
mov r13, rax
mov rdx, r14
and edx, 7
je 0x14001f880
xor eax, eax
mov r11d, eax
mov dword [rbp - 0x50], eax
mov r10d, eax
mov dword [rbp - 0x60], eax
mov r9d, eax
test edx, edx
je 0x14001f413
lea r8d, [rax + 0x38]
movzx eax, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x14001f3f7
lea ecx, [r8 - 0x20]
shl eax, cl
or r10d, eax
jmp 0x14001f3ff
mov r13d, 0xc0000095
mov rax, r14
xor edx, edx
jmp 0x14001f323
mov r13d, 0xc0000095
mov rax, r14
xor edx, edx
jmp 0x14001f327
mov ecx, r8d
shl eax, cl
or r11d, eax
inc r9d
sub r8d, 8
cmp r9d, edx
jl 0x14001f3c0
mov dword [rbp - 0x60], r10d
mov dword [rbp - 0x50], r11d
xor r10d, 0x92f65a5
xor r11d, 0x699a899c
mov eax, r10d
mov ecx, r11d
xor r9d, r9d
mov r8d, r9d
test edx, edx
je 0x14001f463
lea r9, [r13 + 1]
mov qword [rbp + 0x10], r9
cmp r8d, 4
jge 0x14001f447
rol eax, 8
mov r9d, eax
jmp 0x14001f44d
rol ecx, 8
mov r9d, ecx
mov byte [r13], r9b
inc r8d
mov r9, qword [rbp + 0x10]
mov r13, r9
cmp r8d, edx
jl 0x14001f431
xor r9d, r9d
cmp edx, 4
jbe 0x14001f862
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov r8, qword [rbp + 0x30]
mov ecx, dword [rbp - 0x58]
xor edx, edx
mov rax, r14
shr rax, 3
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14001f79f
mov ebx, dword [rbp + 0xc34]
mov eax, ebx
shr eax, 0x10
mov dword [rbp - 0x10], eax
movzx edx, bx
mov dword [rsp + 0x70], edx
mov eax, ebx
xor eax, esi
mov dword [rsp + 0x78], eax
movzx eax, si
mov dword [rbp - 0x20], eax
add r13, 7
mov qword [rbp - 0x78], r13
lea rcx, [rdi + 2]
mov r13, qword [rbp + 0x10]
mov r12d, dword [rbp - 0x10]
mov r14d, dword [rbp - 0x50]
mov r15d, dword [rbp - 0x60]
movzx r9d, byte [rcx - 2]
shl r9d, 8
movzx eax, byte [rcx - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx + 1]
or r9d, eax
movzx r8d, byte [rcx + 2]
shl r8d, 8
movzx eax, byte [rcx + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
add rcx, 8
mov qword [rbp + 0x10], rcx
mov edi, ebx
xor edi, r11d
xor edi, r10d
xor edi, esi
mov ecx, edi
sub ecx, esi
rol ecx, 5
mov eax, edi
rol eax, 0xa
imul ecx, edx
add eax, ecx
xor r10d, eax
lea ecx, [rbx + r10]
ror ecx, 9
mov eax, r10d
rol eax, 2
movzx r11d, word [rbp + 0xc32]
imul ecx, r11d
sub ecx, eax
xor edi, ecx
mov ecx, edi
sub ecx, edx
imul ecx, dword [rbp - 0x20]
mov eax, edi
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, r11d
rol edx, 6
mov ecx, r10d
rol ecx, 2
mov eax, r12d
imul eax, edx
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, esi
mov eax, ebx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 6
mov eax, r10d
xor eax, dword [rsp + 0x70]
imul eax, r11d
xor ecx, eax
xor edi, ecx
lea ecx, [rbx + rdi]
ror ecx, 0xf
mov edx, edi
rol edx, 2
mov eax, dword [rbp - 0x20]
imul eax, ecx
add edx, eax
xor r10d, edx
mov edx, r10d
sub edx, esi
ror edx, 0xe
mov ecx, r10d
rol ecx, 8
mov eax, r12d
imul eax, edx
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, esi
ror ecx, 0xc
mov eax, edi
ror eax, 0xa
mov edx, dword [rsp + 0x70]
imul ecx, edx
xor eax, ecx
xor r10d, eax
mov ecx, r12d
xor ecx, r10d
imul ecx, r11d
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, dword [rbp - 0x20]
imul eax, r12d
xor r10d, eax
mov r11d, r10d
sub r11d, r12d
xor r11d, edi
xor r11d, esi
mov ecx, r12d
xor ecx, r11d
rol ecx, 2
imul ecx, edx
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, ebx
ror ecx, 6
mov eax, r10d
rol eax, 7
movzx edi, word [rbp + 0xc32]
imul ecx, edi
add eax, ecx
xor r11d, eax
mov ecx, r11d
ror ecx, 9
mov eax, r11d
xor eax, edx
imul eax, dword [rbp - 0x20]
add ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, edi
rol edx, 5
mov ecx, r10d
rol ecx, 7
mov eax, r12d
imul eax, edx
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, dword [rsp + 0x78]
mov eax, r10d
ror eax, 3
sub eax, edi
imul eax, dword [rsp + 0x70]
xor r11d, eax
mov edx, r11d
sub edx, ebx
ror edx, 1
mov ecx, r11d
ror ecx, 6
mov eax, dword [rbp - 0x20]
imul eax, edx
sub eax, ecx
xor r10d, eax
lea ecx, [r10 + rsi]
rol ecx, 3
mov eax, r10d
rol eax, 0xe
imul ecx, r12d
add eax, ecx
xor r11d, eax
lea ecx, [r11 + rsi]
rol ecx, 0xf
mov eax, r11d
ror eax, 0xe
mov edx, dword [rsp + 0x70]
imul ecx, edx
sub ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, dword [rbp - 0x20]
imul ecx, edi
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov ecx, ebx
xor ecx, r11d
rol ecx, 4
mov eax, r11d
rol eax, 2
imul ecx, dword [rbp - 0x20]
xor eax, ecx
xor eax, r15d
xor r10d, eax
xor r11d, r14d
mov rax, qword [rbp - 0x78]
mov byte [rax - 4], r10b
ror r10d, 8
mov byte [rax], r11b
ror r11d, 8
mov byte [rax - 5], r10b
ror r10d, 8
mov byte [rax - 1], r11b
ror r11d, 8
mov byte [rax - 6], r10b
ror r10d, 8
mov byte [rax - 2], r11b
ror r11d, 8
mov byte [rax - 7], r10b
mov byte [rax - 3], r11b
ror r10d, 8
ror r11d, 8
mov r15d, r9d
mov r14d, r8d
add rax, 8
mov qword [rbp - 0x78], rax
sub r13, 1
mov rcx, qword [rbp + 0x10]
jne 0x14001f4d8
movabs rbx, 0xc81ecb17b1b54a58
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r14, qword [rbp + 8]
mov r8, qword [rbp + 0x30]
mov ecx, dword [rbp - 0x58]
xor edx, edx
mov rax, rdx
test r14, r14
je 0x14001f831
cmp r14, 0x20
jb 0x14001f820
mov rcx, r14
and rcx, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax + r8]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + r8 + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, rcx
jb 0x14001f7be
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, r14
jae 0x14001f831
xor cl, byte [rax + r8]
inc rax
cmp rax, r14
jb 0x14001f825
movzx eax, cl
mov rcx, qword [rbp - 0x18]
cmp rax, qword [r14 + rcx]
jne 0x14001f897
mov qword [rbp + 0x350], r14
mov r10, r8
mov qword [rbp - 0x40], r8
mov dword [rbp + 0x114], r14d
mov r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jmp 0x14001f8fd
mov r11d, r9d
jae 0x14001f47c
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
jmp 0x14001f47c
xor edx, edx
mov dword [rbp - 0x60], edx
mov dword [rbp - 0x50], 0xffffffff
mov r11d, edx
mov r10d, edx
jmp 0x14001f485
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x30]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov rdi, qword [rbp + 0x340]
mov r13d, 0xd0000001
mov dword [rbp - 0x20], r13d
test rdi, rdi
je 0x14001f8f2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r10, qword [rbp - 0x40]
mov r14d, dword [rbp + 0x114]
test r13d, r13d
js 0x14001fbc5
mov dword [rbp + 0x140], edx
mov qword [rbp + 0x358], r10
cmp r14d, 4
jb 0x14001fbb6
mov r9d, dword [r10]
mov dword [rbp - 0x58], r9d
lea r8, [rbp + 0x358]
mov edx, 4
mov rcx, r10
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001fbbc
lea r8, [rbp + 0x140]
mov edx, 4
xor ecx, ecx
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001fbbc
mov eax, r14d
mov edi, dword [rbp + 0x140]
sub eax, edi
cmp eax, 4
jb 0x14001fbb6
mov rcx, qword [rbp + 0x358]
mov r11d, dword [rcx]
lea r8, [rbp + 0x358]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001fbbc
lea r8, [rbp + 0x140]
mov edx, 4
mov ecx, edi
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001fbbc
mov eax, r14d
mov ecx, dword [rbp + 0x140]
sub eax, ecx
cmp eax, r11d
jb 0x14001fbb6
lea r8, [rbp + 0x140]
mov edx, r11d
call fcn.14000d71c
mov r13d, eax
test eax, eax
js 0x14001fbbc
mov edi, r14d
mov edx, r11d
mov qword [rbp - 0x18], rdx
lea rcx, [r10 + rdi]
mov r14, qword [rbp + 0x358]
lea rax, [r14 + r11]
cmp rcx, rax
jb 0x14001fbb6
mov rax, r10
sub rax, r14
sub rax, rdx
add rax, rdi
cmp rax, 8
jae 0x14001fbb6
xor ecx, ecx
mov edi, ecx
mov qword [rbp + 8], rcx
mov r13d, ecx
mov eax, ecx
mov dword [rbp - 0x50], ecx
test r14, r14
je 0x14001fb30
mov rdi, r14
lea r8, [rbp + 0x360]
mov rcx, r14
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001fba8
mov r10, qword [rbp + 0x360]
cmp r14, r10
jae 0x14001fb08
mov r9d, dword [rbp + 0x144]
lea r8, [rbp + 0x368]
mov edx, 4
mov rcx, rdi
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001fb1f
cmp qword [rbp + 0x368], r10
ja 0x14001faf9
lea r8, [rbp + 0x148]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14000d71c
mov r13d, eax
test eax, eax
cmovns r9d, dword [rbp + 0x148]
mov dword [rbp + 0x144], r9d
js 0x14001fb1f
mov edx, r9d
lea r8, [rbp + 0x370]
mov rcx, rdi
call fcn.14000d73c
mov r13d, eax
test eax, eax
js 0x14001fb1f
mov rdi, qword [rbp + 0x370]
cmp rdi, r10
ja 0x14001faf9
mov eax, dword [rbp - 0x50]
inc eax
mov dword [rbp - 0x50], eax
cmp rdi, r10
jb 0x14001fa6c
mov r9d, dword [rbp - 0x58]
jmp 0x14001fb0b
mov r13d, 0xc000000d
mov r10, qword [rbp - 0x40]
jmp 0x14001fbbc
mov eax, dword [rbp - 0x50]
cmp rdi, r10
mov r10, qword [rbp - 0x40]
je 0x14001fb29
mov r13d, 0xc000000d
jmp 0x14001fbbc
mov r9d, dword [rbp - 0x58]
mov r10, qword [rbp - 0x40]
jmp 0x14001fba8
mov rdx, r11
mov rdi, qword [rbp + 8]
test r11d, r11d
je 0x14001fb7d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov r9d, dword [rbp - 0x58]
mov r10, qword [rbp - 0x40]
test rax, rax
jne 0x14001fb71
mov r13d, 0xc0000017
jmp 0x14001fba8
xor eax, eax
mov r13d, eax
mov rdx, qword [rbp - 0x18]
mov eax, dword [rbp - 0x50]
test r14, r14
je 0x14001fb9b
mov r8, rdx
mov rdx, r14
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov eax, dword [rbp - 0x50]
mov r9d, dword [rbp - 0x58]
mov r10, qword [rbp - 0x40]
mov qword [rbp + 0x608], rdi
mov dword [rbp + 0x600], eax
test r13d, r13d
js 0x14001fbbc
cmp r9d, dword [rbp + 0x600]
je 0x14001fbbc
mov r13d, 0xc000003e
bts r13d, 0x1c
mov dword [rbp - 0x20], r13d
mov rdi, qword [rbp - 8]
jmp 0x14001fbe3
mov rdi, qword [rbp - 8]
jmp 0x14001fbe7
mov r13d, 0xd000000d
mov rdi, qword [rbp - 8]
mov dword [rbp - 0x20], r13d
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x38]
mov r14, qword [rbp - 0x80]
test r14, r14
je 0x14001fc18
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x38]
mov r14, qword [rbp + 0x478]
test r14, r14
je 0x14001fcea
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001fc57
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001fc86
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001fcb5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x478], rax
mov rdi, qword [rbp - 8]
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x38]
test r11, r11
je 0x14001fd14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x38]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
test rdi, rdi
je 0x14001fd3d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov r14, qword [rbp + 0x28]
test r14, r14
je 0x14001fdfb
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001fd79
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001fda8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001fdd7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
test r10, r10
je 0x14001fe21
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x40]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r13d, r13d
js 0x14002042f
cmp dword [rbp + 0x600], 1
jae 0x14001fe3e
mov r13d, 0xc004d501
jmp 0x14002042b
cmp qword [rbp + 0x608], 0
je 0x14001fee5
cmp dword [rbp + 0x600], 0
jbe 0x14001fee5
mov rdi, qword [rbp + 0x608]
mov qword [rbp + 0x378], rdi
mov r9d, dword [rdi]
lea r8, [rbp + 0x378]
mov edx, 4
mov rcx, rdi
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001feb3
mov dword [rbp + 0x14c], r9d
mov rax, qword [rbp + 0x378]
test r9d, r9d
mov r14d, 0
cmove rax, r14
mov qword [rbp + 0x378], rax
mov qword [rbp + 0x380], rax
jmp 0x14001fec4
mov r9d, dword [rbp + 0x14c]
mov rax, qword [rbp + 0x380]
xor r14d, r14d
test r13d, r13d
js 0x14001fef2
cmp r9d, 4
je 0x14001fede
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov eax, dword [rax]
mov dword [rbp + 0x6c], eax
jmp 0x14001fef5
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
xor r14d, r14d
mov eax, dword [rbp + 0x6c]
test r13d, r13d
js 0x140020432
cmp eax, 0xd0000023
jne 0x14001ff0e
mov dword [rbp + 0x6c], 0x8007007a
jmp 0x14001ff23
cmp eax, 0x8007007a
je 0x14001ff23
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020432
cmp dword [rbp + 0x600], 6
je 0x14001ff3b
mov r13d, 0xc004d501
mov dword [rbp - 0x20], r13d
jmp 0x140020432
cmp qword [rbp + 0x608], 0
jne 0x14001ff54
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x140020025
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x388], rcx
mov edi, r14d
mov r9d, dword [rcx]
lea r8, [rbp + 0x388]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fff1
mov edx, r9d
lea r8, [rbp + 0x388]
mov rcx, qword [rbp + 0x388]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fff1
inc edi
mov rcx, qword [rbp + 0x388]
cmp edi, 1
jb 0x14001ff65
mov edi, dword [rcx]
lea r8, [rbp + 0x388]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fff1
mov dword [rbp + 0x150], edi
mov rax, qword [rbp + 0x388]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x390], rax
jmp 0x14001fffe
mov edi, dword [rbp + 0x150]
mov rax, qword [rbp + 0x390]
test r13d, r13d
js 0x140020432
cmp edi, 8
je 0x14002001b
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov rax, qword [rax]
mov qword [rbp + 0x398], rax
test r13d, r13d
js 0x140020432
cmp qword [rbp + 0x608], 0
jne 0x140020047
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x140020116
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x2e8], rcx
mov edi, r14d
mov r9d, dword [rcx]
lea r8, [rbp + 0x2e8]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400200e4
mov edx, r9d
lea r8, [rbp + 0x2e8]
mov rcx, qword [rbp + 0x2e8]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400200e4
inc edi
mov rcx, qword [rbp + 0x2e8]
cmp edi, 2
jb 0x140020058
mov edi, dword [rcx]
lea r8, [rbp + 0x2e8]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400200e4
mov dword [rbp + 0x154], edi
mov rax, qword [rbp + 0x2e8]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x2e8], rax
mov qword [rbp + 0x3a8], rax
jmp 0x1400200f1
mov edi, dword [rbp + 0x154]
mov rax, qword [rbp + 0x3a8]
test r13d, r13d
js 0x140020432
cmp edi, 4
je 0x14002010e
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov eax, dword [rax]
mov dword [rbp + 0x158], eax
test r13d, r13d
js 0x140020432
cmp qword [rbp + 0x608], 0
jne 0x140020138
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x3b0], rcx
mov edi, r14d
mov r9d, dword [rcx]
lea r8, [rbp + 0x3b0]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400201d8
mov edx, r9d
lea r8, [rbp + 0x3b0]
mov rcx, qword [rbp + 0x3b0]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400201d8
inc edi
mov rcx, qword [rbp + 0x3b0]
cmp edi, 3
jb 0x140020149
mov r11d, dword [rcx]
lea r8, [rbp + 0x3b0]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400201d8
mov dword [rbp + 0x15c], r11d
mov r9, qword [rbp + 0x3b0]
test r11d, r11d
cmove r9, r14
mov qword [rbp + 0x3b0], r9
mov qword [rbp + 0x3b8], r9
jmp 0x1400201e6
mov r11d, dword [rbp + 0x15c]
mov r9, qword [rbp + 0x3b8]
test r13d, r13d
js 0x140020432
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x3c0], rcx
mov edi, r14d
mov r10d, dword [rcx]
lea r8, [rbp + 0x3c0]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14002028c
mov edx, r10d
lea r8, [rbp + 0x3c0]
mov rcx, qword [rbp + 0x3c0]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14002028c
inc edi
mov rcx, qword [rbp + 0x3c0]
cmp edi, 4
jb 0x140020200
mov edi, dword [rcx]
lea r8, [rbp + 0x3c0]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14002028c
mov dword [rbp + 0x160], edi
mov rax, qword [rbp + 0x3c0]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x3c8], rax
jmp 0x140020299
mov edi, dword [rbp + 0x160]
mov rax, qword [rbp + 0x3c8]
test r13d, r13d
js 0x1400202be
cmp edi, 4
je 0x1400202b2
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov r10d, dword [rax]
mov dword [rbp + 0x164], r10d
jmp 0x1400202c5
mov r10d, dword [rbp + 0x164]
test r13d, r13d
js 0x140020432
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x3d0], rcx
mov edi, r14d
mov r14d, dword [rcx]
lea r8, [rbp + 0x3d0]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020371
mov edx, r14d
lea r8, [rbp + 0x3d0]
mov rcx, qword [rbp + 0x3d0]
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020371
inc edi
mov rcx, qword [rbp + 0x3d0]
cmp edi, 5
jb 0x1400202df
mov edi, dword [rcx]
lea r8, [rbp + 0x3d0]
mov edx, 4
call fcn.14000d73c
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020371
mov dword [rbp + 0x168], edi
mov rax, qword [rbp + 0x3d0]
test edi, edi
mov r14d, 0
cmove rax, r14
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x3d8], rax
jmp 0x140020381
mov edi, dword [rbp + 0x168]
mov rax, qword [rbp + 0x3d8]
xor r14d, r14d
test r13d, r13d
js 0x1400203a1
cmp edi, 4
je 0x14002039a
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov ecx, dword [rax]
mov dword [rbp + 0x68], ecx
jmp 0x1400203a4
mov ecx, dword [rbp + 0x68]
test r13d, r13d
js 0x140020432
mov rax, qword [rbp + 0x398]
cmp qword [rbp + 0x290], rax
je 0x1400203c9
mov r13d, 0xc004d501
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov dword [rbp + 0x58], r10d
mov dword [rbp + 0x5c], ecx
mov eax, dword [rbp + 0x158]
mov dword [rbp + 0x54], eax
cmp r10d, 4
jbe 0x1400203eb
mov r13d, 0x8007007a
mov dword [rbp - 0x20], r13d
jmp 0x140020432
cmp r11d, 4
jbe 0x1400203fd
mov r13d, 0x8007007a
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov r8d, r11d
mov rdx, r9
mov rcx, qword [rbp - 0x30]
call sub.msvcrt.dll_memcpy
jmp 0x140020411
xor r14d, r14d
test r13d, r13d
js 0x140020432
mov eax, dword [rbp + 0x6c]
test eax, eax
cmovne r13d, eax
mov dword [rbp - 0x20], r13d
jmp 0x140020432
mov r13d, 0xc0000017
mov dword [rbp - 0x20], r13d
xor r14d, r14d
mov dword [rbp + 0x5f4], r14d
mov dword [rbp + 0x5f0], r14d
mov rdi, qword [rbp + 0x5f8]
test rdi, rdi
je 0x140020473
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x5f8], r14
mov dword [rbp + 0x604], r14d
mov dword [rbp + 0x600], r14d
mov rdi, qword [rbp + 0x608]
test rdi, rdi
je 0x1400204b4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x608], r14
mov rdi, qword [rbp - 0x70]
test rdi, rdi
je 0x1400204dd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x68]
test rdi, rdi
je 0x140020506
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r13d, r13d
js 0x140028b51
mov eax, dword [rbp + 0x5c]
test eax, eax
je 0x14002661e
mov qword [rbp + 0x3e0], r14
mov dword [0x14005bd08], eax
mov r8d, 0x104
lea rdx, [rbp + 0x17c0]
lea rcx, [0x140000000]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
nop dword [rax + rax]
test eax, eax
je 0x140026216
cmp eax, 0x104
jne 0x14002056b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
je 0x140026216
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x14002059c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140026216
mov rax, qword [0x14005b098]
call qword [case.0x1400380cf.0]
mov qword [0x14005bea0], rax
mov edi, dword [0x14005bd08]
mov dword [rbp - 0x58], edi
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rbp + 0xba0]
call sub.msvcrt.dll_memset
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
mov ecx, 1
mov dword [rbp + 0x16c], ecx
mov qword [rbp + 8], r14
mov qword [rbp + 0x30], r14
xor eax, eax
movups xmmword [rbp + 0xdb8], xmm0
movups xmmword [rbp + 0xdc8], xmm0
mov qword [rbp + 0xdd8], rax
mov dword [rbp + 0xde0], eax
mov qword [rbp + 0x10], r14
xor eax, eax
lock cmpxchg dword [0x14005c480], ecx
jne 0x140020609
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x140020edf
mov dword [rbp - 0x50], r14d
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x10], r14d
mov qword [rbp + 0x3e8], r14
mov ecx, 0x338
call fcn.140009d20
mov r14, rax
test rax, rax
je 0x140020bbe
xor eax, eax
mov r12d, eax
mov edi, 0xffffffff
mov r11d, eax
mov r10d, eax
lea rsi, [r14 + 7]
lea rbx, [0x14004d8c2]
lea r13d, [rax + 0x67]
movzx r9d, byte [rbx - 2]
shl r9d, 8
movzx eax, byte [rbx - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rbx]
or r9d, eax
shl r9d, 8
movzx eax, byte [rbx + 1]
or r9d, eax
movzx r8d, byte [rbx + 2]
shl r8d, 8
movzx eax, byte [rbx + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea rbx, [rbx + 8]
xor r11d, r10d
xor r11d, 0xac987321
lea eax, [r11 + 0x54969fa2]
rol eax, 5
mov ecx, r11d
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r11d, eax
mov eax, r11d
shr eax, 0xd
imul ecx, r11d, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 0xf
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r11d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, r11d
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, ecx
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r12d
xor r10d, ecx
xor r11d, edi
mov byte [rsi - 4], r10b
ror r10d, 8
mov byte [rsi], r11b
ror r11d, 8
mov byte [rsi - 5], r10b
ror r10d, 8
mov byte [rsi - 1], r11b
ror r11d, 8
mov byte [rsi - 6], r10b
ror r10d, 8
mov byte [rsi - 2], r11b
ror r11d, 8
mov byte [rsi - 7], r10b
mov byte [rsi - 3], r11b
ror r10d, 8
ror r11d, 8
mov r12d, r9d
mov edi, r8d
lea rsi, [rsi + 8]
sub r13, 1
jne 0x14002066b
xor eax, eax
xorps xmm2, xmm2
xorps xmm1, xmm1
mov edi, dword [rbp - 0x58]
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
movdqu xmm0, xmmword [r14 + rax]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [r14 + rax + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140020980
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x1400209fc
xor cl, byte [rax + r14]
inc rax
cmp rax, 0x338
jb 0x1400209ed
movzx eax, cl
cmp rax, qword [0x14004dbf8]
jne 0x140020b9e
mov qword [rbp + 0x3e8], r14
mov qword [rbp + 0x3f0], 0x338
mov byte [r14 + 0x337], r12b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
cmp byte [r14], r12b
je 0x140020bc8
mov rdx, r14
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [r14 + rax*2], r12w
jne 0x140020a4a
lea r14, [r14 + rax*2]
mov eax, dword [rbp - 0x10]
lea rcx, [rax + rax*2]
lea rax, [0x14005c0a0]
lea r8, [rax + rcx*8]
mov qword [rbp - 0x78], r8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140020bbe
xor r9d, r9d
mov ecx, r9d
mov dword [rbp - 0x60], ecx
mov r8, qword [rbp - 0x78]
mov rax, qword [r8]
mov edx, 0x5a4d
cmp word [rax], dx
je 0x140020aa9
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020b19
movsxd rdx, dword [rax + 0x3c]
cmp edx, 0x10000000
jb 0x140020abf
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020b19
add rdx, qword [r8]
cmp rdx, qword [r8]
jae 0x140020ad1
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020b19
cmp dword [rdx], 0x4550
je 0x140020ae3
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020b19
movzx eax, word [rdx + 0x18]
mov r10d, 0x10b
sub ax, r10w
mov r10d, 0xfeff
test r10w, ax
je 0x140020b07
mov ecx, 0xc000000d
mov dword [rbp - 0x60], ecx
jmp 0x140020b19
mov rax, qword [rdx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rdx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rsp + 0x70], eax
add r14, 6
mov edx, r9d
mov dword [rsp + 0x78], edx
test eax, eax
je 0x140020b90
mov r9, r14
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], r12b
jne 0x140020b3a
inc r14
add r14, rax
test ecx, ecx
js 0x140020b81
mov rdx, r9
mov rcx, qword [r8]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140020bc8
mov ecx, dword [rbp - 0x50]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
mov ecx, dword [rbp - 0x60]
mov r8, qword [rbp - 0x78]
mov edx, dword [rsp + 0x78]
inc dword [rbp - 0x50]
inc edx
mov dword [rsp + 0x78], edx
cmp edx, dword [rsp + 0x70]
jb 0x140020b30
inc dword [rbp - 0x10]
cmp byte [r14], r12b
jne 0x140020a40
jmp 0x140020bcb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, 0xc000007a
mov dword [rbp - 0x60], ecx
jmp 0x140020bcb
mov ecx, dword [rbp - 0x60]
cmp qword [rbp + 0x3e8], 0
je 0x140020bfc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x3e8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, dword [rbp - 0x60]
test ecx, ecx
jns 0x140020ed2
lea r14, [0x14005c0a0]
mov eax, 4
mov qword [rbp - 0x78], rax
mov rcx, qword [r14]
test rcx, rcx
je 0x140020c2c
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp - 0x78]
add r14, 0x18
sub rax, 1
mov qword [rbp - 0x78], rax
jne 0x140020c14
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
xor r14d, r14d
mov qword [0x14005b0d0], r14
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
lea ecx, [r14 + 1]
jmp 0x140020ee7
mov eax, dword [0x14005bea8]
xor r14d, r14d
lea ecx, [r14 + 1]
inc eax
mov dword [0x14005bea8], eax
mov eax, r14d
xchg dword [0x14005c480], eax
mov dword [rbp - 0x50], r14d
mov dword [rbp - 0x60], r14d
mov qword [rbp + 0x3f8], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x30], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
xor eax, eax
lock cmpxchg dword [0x14005c480], ecx
jne 0x140020f15
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x1400217f2
mov dword [rbp - 0x10], r14d
mov dword [rsp + 0x70], r14d
mov dword [rsp + 0x78], r14d
mov qword [rbp + 0x400], r14
mov ecx, 0x338
call fcn.140009d20
mov r14, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400214d6
xor eax, eax
mov edi, eax
mov dword [rsp + 0x74], 0xffffffff
mov ebx, eax
mov r11d, eax
lea rsi, [r14 + 7]
lea r12, [0x14004d8c2]
lea r13d, [rax + 0x67]
mov r14d, dword [rsp + 0x74]
movzx r10d, byte [r12 - 2]
shl r10d, 8
movzx eax, byte [r12 - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [r12]
or r10d, eax
shl r10d, 8
movzx eax, byte [r12 + 1]
or r10d, eax
movzx r9d, byte [r12 + 2]
shl r9d, 8
movzx eax, byte [r12 + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [r12 + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [r12 + 5]
or r9d, eax
xor r11d, r10d
xor ebx, r9d
lea r12, [r12 + 8]
xor ebx, r11d
xor ebx, 0xac987321
mov r8d, ebx
lea eax, [rbx + 0x54969fa2]
rol eax, 5
rol ebx, 0xa
imul eax, eax, 0x137f
add ebx, eax
xor r11d, ebx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r8d, eax
mov eax, r8d
shr eax, 0xd
imul ecx, r8d, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r8d, eax
mov ecx, r8d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r11d, eax
mov edx, r11d
ror edx, 6
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r8d, edx
lea eax, [r8 + 0x7f1137f]
ror eax, 0xf
mov ecx, r8d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
mov ecx, r11d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r8d, eax
mov eax, r8d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r8d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor r8d, ecx
mov eax, r8d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea ebx, [r11 - 0x7f1]
xor ebx, r8d
xor ebx, 0xab69605e
mov eax, ebx
xor eax, 0x7f1
rol eax, 2
mov ecx, ebx
shr ecx, 2
imul eax, eax, 0x137f
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor ebx, ecx
mov edx, ebx
ror edx, 9
mov eax, ebx
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor ebx, ecx
xor r11d, ebx
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor ebx, ecx
lea eax, [rbx - 0x7f1137f]
ror eax, 1
mov ecx, ebx
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r11d, eax
lea eax, [r11 - 0x54969fa2]
rol eax, 3
mov ecx, r11d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor ebx, ecx
lea eax, [rbx - 0x54969fa2]
rol eax, 0xf
mov ecx, ebx
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x7f1137f
rol eax, 4
mov ecx, ebx
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, edi
xor r11d, ecx
xor ebx, r14d
mov byte [rsi - 4], r11b
ror r11d, 8
mov byte [rsi], bl
ror ebx, 8
mov byte [rsi - 5], r11b
ror r11d, 8
mov byte [rsi - 1], bl
ror ebx, 8
mov byte [rsi - 6], r11b
ror r11d, 8
mov byte [rsi - 2], bl
ror ebx, 8
mov byte [rsi - 7], r11b
mov byte [rsi - 3], bl
ror r11d, 8
ror ebx, 8
mov edi, r10d
mov r14d, r9d
lea rsi, [rsi + 8]
sub r13, 1
jne 0x140020f83
xor eax, eax
xorps xmm1, xmm1
xorps xmm2, xmm2
mov edi, dword [rbp - 0x58]
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
mov r14, qword [rbp - 0x70]
movdqu xmm0, xmmword [rax + r14]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + r14 + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140021291
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14002130d
xor cl, byte [rax + r14]
inc rax
cmp rax, 0x338
jb 0x1400212fe
movzx eax, cl
cmp rax, qword [0x14004dbf8]
jne 0x1400214b6
mov qword [rbp + 0x400], r14
mov qword [rbp + 0x408], 0x338
mov byte [r14 + 0x337], r12b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
cmp byte [r14], r12b
je 0x1400214e1
mov rdx, r14
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [r14 + rax*2], r12w
jne 0x14002135b
lea r14, [r14 + rax*2]
mov eax, dword [rsp + 0x78]
lea rcx, [rax + rax*2]
lea rax, [0x14005c0a0]
lea r8, [rax + rcx*8]
mov qword [rbp - 0x70], r8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x1400214d6
xor r9d, r9d
mov ecx, r9d
mov dword [rsp + 0x70], ecx
mov r8, qword [rbp - 0x70]
mov rax, qword [r8]
mov edx, 0x5a4d
cmp word [rax], dx
je 0x1400213bd
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021431
movsxd rdx, dword [rax + 0x3c]
cmp edx, 0x10000000
jb 0x1400213d4
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021431
add rdx, qword [r8]
cmp rdx, qword [r8]
jae 0x1400213e7
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021431
cmp dword [rdx], 0x4550
je 0x1400213fa
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021431
movzx eax, word [rdx + 0x18]
mov r10d, 0x10b
sub ax, r10w
mov r10d, 0xfeff
test r10w, ax
je 0x14002141f
mov ecx, 0xc000000d
mov dword [rsp + 0x70], ecx
jmp 0x140021431
mov rax, qword [rdx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rdx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rbp - 0x58], eax
add r14, 6
mov edx, r9d
mov dword [rsp + 0x74], edx
test eax, eax
je 0x1400214a7
mov r9, r14
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], r12b
jne 0x140021451
inc r14
add r14, rax
test ecx, ecx
js 0x140021499
mov rdx, r9
mov rcx, qword [r8]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1400214e1
mov ecx, dword [rbp - 0x10]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
mov ecx, dword [rsp + 0x70]
mov r8, qword [rbp - 0x70]
mov edx, dword [rsp + 0x74]
inc dword [rbp - 0x10]
inc edx
mov dword [rsp + 0x74], edx
cmp edx, dword [rbp - 0x58]
jb 0x140021447
inc dword [rsp + 0x78]
cmp byte [r14], r12b
jne 0x140021351
jmp 0x1400214e5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, 0xc000007a
mov dword [rsp + 0x70], ecx
jmp 0x1400214e5
mov ecx, dword [rsp + 0x70]
cmp qword [rbp + 0x400], 0
je 0x140021517
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x400]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, dword [rsp + 0x70]
test ecx, ecx
jns 0x1400217e9
lea r14, [0x14005c0a0]
mov eax, 4
mov qword [rbp - 0x70], rax
mov rcx, qword [r14]
test rcx, rcx
je 0x140021547
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
add r14, 0x18
sub rax, 1
mov qword [rbp - 0x70], rax
jne 0x14002152f
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
xor r14d, r14d
mov qword [0x14005b0d0], r14
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
jmp 0x1400217fa
mov eax, dword [0x14005bea8]
xor r14d, r14d
inc eax
mov dword [0x14005bea8], eax
mov eax, r14d
xchg dword [0x14005c480], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
mov eax, edi
and eax, 0xf
mov dword [rbp - 0x58], eax
mov eax, edi
shr eax, 4
and ax, 0xf
mov word [rbp + 0x1700], ax
mov eax, edi
shr eax, 8
and ax, 0xf
mov word [rbp + 0x1702], ax
shr edi, 0xc
and di, 0xf
mov word [rbp + 0x1704], di
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x10], 0xffffff
test rax, rax
jne 0x140021899
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140021888
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400233e0
mov r14d, r15d
jmp 0x1400233e0
mov rdi, r14
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], r14
mov qword [rbp + 0x420], r14
mov qword [rbp + 0x428], r14
mov qword [rbp + 0x430], r14
mov qword [rbp + 0x228], r14
xor eax, eax
mov dword [rbp + 0x170], eax
lea r9, [rbp + 0x170]
xor r8d, r8d
lea rdx, [rbp - 0x24]
lea ecx, [rax + 8]
mov rax, qword [0x14005b0a0]
call qword [case.0x1400380cf.0]
test eax, eax
jne 0x14002191f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x14002190e
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140021a85
mov r14d, r15d
jmp 0x140021a85
mov ecx, dword [rbp + 0x170]
add rcx, rcx
call fcn.140009d20
mov qword [rbp - 0x68], rax
lea rcx, [rbp + 0x430]
call fcn.140046b64
mov rax, qword [rbp - 0x68]
test rax, rax
jne 0x140021958
mov qword [rbp + 0x430], rax
mov r14d, 0x8007000e
jmp 0x140021a85
mov qword [rbp + 0x430], rax
mov ecx, dword [rbp - 0x24]
inc ecx
shl rcx, 2
call fcn.140009d20
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x228]
call fcn.140046b64
mov rax, qword [rbp - 0x80]
test rax, rax
jne 0x140021998
mov qword [rbp + 0x228], rax
mov r14d, 0x8007000e
jmp 0x140021a85
mov qword [rbp + 0x228], rax
lea r9, [rbp + 0x170]
mov r8, qword [rbp - 0x68]
lea rdx, [rbp - 0x24]
mov ecx, 8
mov rax, qword [0x14005b0a0]
call qword [case.0x1400380cf.0]
test eax, eax
jne 0x1400219f3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x1400219e2
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140021a85
mov r14d, r15d
jmp 0x140021a85
mov rax, qword [rbp - 0x80]
xor ecx, ecx
cmp dword [rbp - 0x24], ecx
jbe 0x140021a62
mov rdi, qword [rbp - 0x68]
mov rsi, rax
mov ebx, ecx
xor edx, edx
mov rcx, rdi
mov rax, qword [0x14005b0b0]
call qword [case.0x1400380cf.0]
mov dword [rsi], eax
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rdi + rax*2], 0
jne 0x140021a22
lea rdi, [rdi + rax*2]
add rdi, 2
add rsi, 4
inc ebx
cmp ebx, dword [rbp - 0x24]
jb 0x140021a07
mov qword [rbp + 0x228], rsi
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov rax, qword [rbp + 0x228]
mov dword [rax], 0x409
xor eax, eax
mov qword [rbp + 0x228], rax
mov rdi, qword [rbp - 0x80]
mov qword [rbp + 0x410], rdi
mov eax, dword [rbp - 0x24]
inc eax
mov dword [rsp + 0x70], eax
lea rcx, [rbp + 0x228]
call fcn.140046b64
lea rcx, [rbp + 0x430]
call fcn.140046b64
test r14d, r14d
js 0x1400228e0
xor r14d, r14d
mov ecx, r14d
mov dword [rsp + 0x78], ecx
mov r10d, r14d
lea r11, [0x1400535d0]
cmp dword [rsp + 0x70], ecx
jbe 0x140021af3
mov r9d, r14d
mov edx, r14d
mov r8, r11
mov eax, dword [r8]
cmp dword [r9 + rdi], eax
je 0x140021aed
inc edx
add r8, 4
cmp edx, 0x26
jb 0x140021ac9
inc r10d
add r9, 4
cmp r10d, dword [rsp + 0x70]
jb 0x140021ac3
jmp 0x140021af3
mov ecx, edx
mov dword [rsp + 0x78], edx
mov edi, ecx
mov dword [rsp + 0x70], r14d
xor r9d, r9d
lea r8d, [r9 + 0x55]
lea rdx, [rbp + 0x1710]
mov ecx, dword [r11 + rdi*4]
mov rax, qword [0x14005b0a8]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x140021b5d
mov r9d, 0x10
lea r8, [rbp + 0xc88]
lea edx, [r9 + 0x48]
lea rcx, [rbp + 0x1710]
mov rax, qword [0x14005b090]
call qword [case.0x1400380cf.0]
test eax, eax
jle 0x140021b5d
mov r14d, dword [rbp + 0xc94]
shr r14d, 0x1b
and r14d, 1
mov dword [rsp + 0x70], r14d
xor r14d, r14d
lea rcx, str.Segoe_UI_Light
mov qword [rbp + 0x1660], rcx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x140021b72
lea rcx, [rcx + rax*2]
add rcx, 2
mov qword [rbp + 0x1668], rcx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x140021b93
lea rcx, [rcx + rax*2]
add rcx, 2
mov qword [rbp + 0x1670], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021bb4
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x1678], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021bd3
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x1680], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021bf2
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x1688], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021c11
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x1690], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021c30
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x1698], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021c4f
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16a0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021c6e
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16a8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021c8d
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16b0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021cac
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16b8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021ccb
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16c0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021cea
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16c8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021d09
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16d0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021d28
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16d8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021d47
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16e0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021d66
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16e8], rdx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rdx + rax*2], 0
jne 0x140021d85
add rdx, 2
lea rax, [rdx + rax*2]
mov qword [rbp + 0x16f0], rax
lea rcx, [rdi + rdi*2]
lea rdx, [0x140000000]
movzx eax, byte [rcx + rdx + 0x4ff10]
mov rax, qword [rbp + rax*8 + 0x1660]
mov qword [rbp - 0x78], rax
movzx eax, byte [rcx + rdx + 0x4ff11]
mov rax, qword [rbp + rax*8 + 0x1660]
mov qword [rbp - 0x40], rax
movzx eax, byte [rcx + rdx + 0x4ff12]
mov rax, qword [rbp + rax*8 + 0x1660]
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x74], r14d
mov ecx, 0x1c90
call fcn.140009d20
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140021e09
mov r14d, 0x8007000e
jmp 0x1400228e0
xor ecx, ecx
mov r13d, ecx
mov r14d, 0xffffffff
mov r11d, ecx
mov r10d, ecx
lea rbx, [rax + 7]
lea rsi, [0x140051932]
mov r12d, 0x392
movzx r9d, byte [rsi - 2]
shl r9d, 8
movzx eax, byte [rsi - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rsi]
or r9d, eax
shl r9d, 8
movzx eax, byte [rsi + 1]
or r9d, eax
movzx r8d, byte [rsi + 2]
shl r8d, 8
movzx eax, byte [rsi + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rsi + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rsi + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea rsi, [rsi + 8]
xor r11d, r10d
xor r11d, 0xac987321
mov edi, r11d
lea eax, [r11 + 0x54969fa2]
rol eax, 5
rol r11d, 0xa
imul eax, eax, 0x137f
add r11d, eax
xor r10d, r11d
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
mov eax, edi
shr eax, 0xd
imul ecx, edi, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, edi
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r13d
xor r10d, ecx
xor r11d, r14d
mov byte [rbx - 4], r10b
ror r10d, 8
mov byte [rbx], r11b
ror r11d, 8
mov byte [rbx - 5], r10b
ror r10d, 8
mov byte [rbx - 1], r11b
ror r11d, 8
mov byte [rbx - 6], r10b
ror r10d, 8
mov byte [rbx - 2], r11b
ror r11d, 8
mov byte [rbx - 7], r10b
mov byte [rbx - 3], r11b
ror r10d, 8
ror r11d, 8
mov r13d, r9d
mov r14d, r8d
lea rbx, [rbx + 8]
sub r12, 1
jne 0x140021e2b
xor eax, eax
xorps xmm1, xmm1
xorps xmm2, xmm2
mov rdi, qword [rbp - 0x68]
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rsp + 0x74]
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + rdi + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x1c80
jb 0x14002213c
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x1c90
jae 0x1400221b5
xor cl, byte [rax + rdi]
inc rax
cmp rax, 0x1c90
jb 0x1400221a7
movzx eax, cl
cmp rax, qword [0x1400535c0]
je 0x1400221e9
mov r14d, 0xc004d501
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x1400221fb
mov qword [rbp + 0x418], rdi
mov qword [rbp + 0x420], 0x1c90
test r14d, r14d
js 0x1400228e0
mov rdi, qword [rbp + 0x418]
lea rax, [rbp + 0x15f0]
mov r8d, 6
mov ecx, dword [rsp + 0x78]
test ecx, ecx
jne 0x140022223
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002222a
inc rdi
add rdi, rdx
cmp ecx, 1
jne 0x140022241
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022248
inc rdi
add rdi, rdx
cmp ecx, 2
jne 0x14002225f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022266
inc rdi
add rdi, rdx
cmp ecx, 3
jne 0x14002227d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022284
inc rdi
add rdi, rdx
cmp ecx, 4
jne 0x14002229b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222a2
inc rdi
add rdi, rdx
cmp ecx, 5
jne 0x1400222b9
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222c0
inc rdi
add rdi, rdx
cmp ecx, 6
jne 0x1400222d7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222de
inc rdi
add rdi, rdx
cmp ecx, 7
jne 0x1400222f5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222fc
inc rdi
add rdi, rdx
cmp ecx, 8
jne 0x140022313
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002231a
inc rdi
add rdi, rdx
cmp ecx, 9
jne 0x140022331
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022338
inc rdi
add rdi, rdx
cmp ecx, 0xa
jne 0x14002234f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022356
inc rdi
add rdi, rdx
cmp ecx, 0xb
jne 0x14002236d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022374
inc rdi
add rdi, rdx
cmp ecx, 0xc
jne 0x14002238b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022392
inc rdi
add rdi, rdx
cmp ecx, 0xd
jne 0x1400223a9
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400223b0
inc rdi
add rdi, rdx
cmp ecx, 0xe
jne 0x1400223c7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400223ce
inc rdi
add rdi, rdx
cmp ecx, 0xf
jne 0x1400223e5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400223ec
inc rdi
add rdi, rdx
cmp ecx, 0x10
jne 0x140022403
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002240a
inc rdi
add rdi, rdx
cmp ecx, 0x11
jne 0x140022421
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022428
inc rdi
add rdi, rdx
cmp ecx, 0x12
jne 0x14002243f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022446
inc rdi
add rdi, rdx
cmp ecx, 0x13
jne 0x14002245d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022464
inc rdi
add rdi, rdx
cmp ecx, 0x14
jne 0x14002247b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022482
inc rdi
add rdi, rdx
cmp ecx, 0x15
jne 0x140022499
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224a0
inc rdi
add rdi, rdx
cmp ecx, 0x16
jne 0x1400224b7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224be
inc rdi
add rdi, rdx
cmp ecx, 0x17
jne 0x1400224d5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224dc
inc rdi
add rdi, rdx
cmp ecx, 0x18
jne 0x1400224f3
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224fa
inc rdi
add rdi, rdx
cmp ecx, 0x19
jne 0x140022511
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022518
inc rdi
add rdi, rdx
cmp ecx, 0x1a
jne 0x14002252f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022536
inc rdi
add rdi, rdx
cmp ecx, 0x1b
jne 0x14002254d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022554
inc rdi
add rdi, rdx
cmp ecx, 0x1c
jne 0x14002256b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022572
inc rdi
add rdi, rdx
cmp ecx, 0x1d
jne 0x140022589
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022590
inc rdi
add rdi, rdx
cmp ecx, 0x1e
jne 0x1400225a7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400225ae
inc rdi
add rdi, rdx
cmp ecx, 0x1f
jne 0x1400225c5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400225cc
inc rdi
add rdi, rdx
cmp ecx, 0x20
jne 0x1400225e3
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400225ea
inc rdi
add rdi, rdx
cmp ecx, 0x21
jne 0x140022601
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022608
inc rdi
add rdi, rdx
cmp ecx, 0x22
jne 0x14002261f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022626
inc rdi
add rdi, rdx
cmp ecx, 0x23
jne 0x14002263d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022644
inc rdi
add rdi, rdx
cmp ecx, 0x24
jne 0x14002265b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022662
inc rdi
add rdi, rdx
cmp ecx, 0x25
jne 0x140022679
mov rdi, qword [rbp + 0x418]
test rdi, rdi
je 0x1400228f7
xor eax, eax
mov rcx, qword [rbp + 0x420]
rep stosb byte [rdi], al
lea rcx, [rbp + 0x428]
call fcn.140046b64
lea rcx, [rbp + 0x418]
call fcn.140046b64
lea rcx, [rbp + 0x410]
call fcn.140046b64
test r14d, r14d
js 0x1400233cd
mov rax, qword [rbp + 0x3f8]
mov rcx, qword [rax]
mov qword [rbp + 0xba8], rcx
mov rcx, qword [rax + 8]
mov qword [rbp + 0xbb0], rcx
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0xbb8], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a0], xmm0
xor eax, eax
mov edi, eax
mov r14d, eax
mov dword [rbp + 0x6a0], 0x10
xor r9d, r9d
lea r8, [rbp + 0x6a0]
xor edx, edx
lea ecx, [rax + 0x42]
mov rax, qword [0x14005b168]
call qword [case.0x1400380cf.0]
test eax, eax
jne 0x1400229ae
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x1400229a4
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400229b7
mov r14d, r15d
jmp 0x1400229b7
mov edi, dword [rbp + 0x6a4]
and edi, 1
mov dword [rbp + 0xba4], edi
test r14d, r14d
js 0x1400233cd
mov r14d, dword [rbp - 0x58]
mov ecx, r14d
mov eax, 0x2a
mov dword [rsp + 0x70], eax
sub ecx, 1
je 0x1400229ff
sub ecx, 1
je 0x1400229ef
cmp ecx, 1
jne 0x140022a09
mov eax, 0xe1
mov dword [rbp - 0x60], eax
jmp 0x140022a06
mov dword [rbp - 0x50], 0xf
mov dword [rbp - 0x60], 0xb
jmp 0x140022a09
mov dword [rbp - 0x60], 0xb
mov dword [rbp - 0x50], eax
mov edi, 0x60
mov dword [rsp + 0x78], edi
xor edx, edx
lea r8d, [rdi + 0x7c]
lea rcx, [rbp + 0x1290]
call sub.msvcrt.dll_memset
mov eax, 0xdc
mov word [rbp + 0x12d4], ax
lea r8, [rbp + 0x1290]
mov edx, 0xffffffff
xor ecx, ecx
mov rax, qword [0x14005b0e0]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x140022a7d
movzx edi, word [rbp + 0x1336]
mov eax, dword [rbp + 0x133c]
mov dword [rbp + 0x698], eax
mov eax, dword [rbp + 0x1340]
mov dword [rbp + 0x69c], eax
cmp edi, 0x60
mov eax, 0x60
cmovb edi, eax
mov dword [rsp + 0x78], edi
mov rax, qword [rbp - 0x78]
cmp r14d, 1
cmovne rax, qword [rbp - 0x30]
mov qword [rbp - 0x68], rax
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0xe50]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x140022af4
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022ae3
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400233cd
mov r14d, r15d
jmp 0x140022b95
mov r8d, 0x48
mov edx, edi
mov ecx, dword [rbp - 0x50]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
neg eax
mov dword [rbp + 0xe50], eax
mov dword [rbp + 0xe60], 0x190
mov byte [rbp + 0xe6a], 5
mov r8, qword [rbp - 0x68]
mov edx, 0x20
lea rcx, [rbp + 0xe6c]
call fcn.140002dc0
lea rcx, [rbp + 0xe50]
mov rax, qword [0x14005b020]
call qword [case.0x1400380cf.0]
test rax, rax
jne 0x140022b7b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022b71
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140022b82
mov r14d, r15d
jmp 0x140022b82
mov qword [rbp + 0xbc0], rax
mov rdx, qword [rbp - 0x80]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x1400233cd
cmp dword [rbp - 0x58], 1
mov rax, qword [rbp - 0x78]
cmovne rax, qword [rbp - 0x30]
mov qword [rbp - 0x78], rax
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0xeb0]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x140022c15
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022c04
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400233cd
mov r14d, r15d
jmp 0x140022cb6
mov r8d, 0x48
mov edx, edi
mov ecx, dword [rbp - 0x60]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
neg eax
mov dword [rbp + 0xeb0], eax
mov dword [rbp + 0xec0], 0x190
mov byte [rbp + 0xeca], 5
mov r8, qword [rbp - 0x78]
mov edx, 0x20
lea rcx, [rbp + 0xecc]
call fcn.140002dc0
lea rcx, [rbp + 0xeb0]
mov rax, qword [0x14005b020]
call qword [case.0x1400380cf.0]
test rax, rax
jne 0x140022c9c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022c92
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140022ca3
mov r14d, r15d
jmp 0x140022ca3
mov qword [rbp + 0xbc8], rax
mov rdx, qword [rbp - 0x30]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x1400233cd
xor r9d, r9d
mov ecx, r9d
mov edi, r9d
mov r8d, dword [rbp - 0x58]
mov edx, r8d
sub edx, 1
je 0x140022cde
sub edx, 1
je 0x140022d14
cmp edx, 1
jne 0x140022cea
mov ecx, dword [rbp + 0x698]
mov edi, dword [rbp + 0x69c]
mov dword [rbp + 0x688], ecx
mov dword [rbp + 0x68c], edi
cmp r8d, 1
je 0x140022d3c
lea eax, [r8 - 2]
cmp eax, 1
ja 0x140022d26
mov edx, r9d
mov dword [rsp + 0x70], r9d
mov dword [rsp + 0x74], r9d
jmp 0x140022d49
mov eax, dword [rbp + 0x698]
cdq
and edx, 3
lea ecx, [rdx + rax]
sar ecx, 2
jmp 0x140022cea
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x74], eax
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp - 0x24]
mov edx, dword [rbp - 0x24]
jmp 0x140022d4c
mov edx, 0x96
mov dword [rsp + 0x74], 0x20
mov eax, r9d
mov dword [rbp - 0x50], edx
mov dword [rbp - 0x60], eax
sub ecx, edx
sub ecx, eax
mov dword [rbp - 0x48], ecx
mov dword [rbp + 0xbf4], ecx
mov dword [rbp + 0xbe4], ecx
mov rdi, qword [rbp + 0xba8]
mov r14d, r9d
mov rdx, qword [rbp + 0xbc0]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc50
lea r9, [rbp + 0xbdc]
lea r8d, [rax - 1]
mov rdx, rdi
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
test eax, eax
cmove r14d, r15d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140022dde
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x1400233cd
mov rdi, qword [rbp + 0xbb0]
xor eax, eax
mov r14d, eax
mov rdx, qword [rbp + 0xbc8]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc50
lea r9, [rbp + 0xbec]
lea r8d, [rax - 1]
mov rdx, rdi
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
test eax, eax
cmove r14d, r15d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140022e62
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x1400233cd
mov eax, dword [rbp - 0x58]
add eax, 0xfffffffe
mov ecx, dword [rbp + 0xbe4]
cmp eax, 1
ja 0x140022e89
mov edi, dword [rbp + 0xbf4]
cmp ecx, edi
cmovg edi, ecx
jmp 0x140022e8c
mov edi, dword [rbp - 0x48]
mov r8d, dword [rsp + 0x70]
mov rax, qword [0x14005b150]
cmp dword [rbp + 0xba0], 0
je 0x140022ec6
mov r14d, dword [rbp - 0x60]
mov edx, r14d
sub edx, ecx
add edx, edi
lea rcx, [rbp + 0xbdc]
call qword [case.0x1400380cf.0]
sub r14d, dword [rbp + 0xbf4]
lea edx, [rdi + r14]
jmp 0x140022ed9
mov edx, dword [rbp - 0x50]
lea rcx, [rbp + 0xbdc]
call qword [case.0x1400380cf.0]
mov edx, dword [rbp - 0x50]
mov r8d, dword [rsp + 0x74]
add r8d, dword [rbp + 0xbe8]
lea rcx, [rbp + 0xbec]
mov rax, qword [0x14005b150]
call qword [case.0x1400380cf.0]
mov ecx, dword [rbp - 0x58]
lea eax, [rcx - 2]
cmp eax, 1
jbe 0x1400231c8
cmp ecx, 1
jne 0x1400231e4
mov dword [rbp + 0xbd8], 0xffffff
xor edx, edx
lea r8d, [rcx + 0x5b]
lea rcx, [rbp + 0xdf0]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x140022f81
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022f70
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400233cd
mov r14d, r15d
jmp 0x140023025
mov r8d, 0x48
mov edx, dword [rsp + 0x78]
lea ecx, [r8 - 0x3d]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
neg eax
mov dword [rbp + 0xdf0], eax
mov dword [rbp + 0xe00], 0x190
mov byte [rbp + 0xe0a], 5
mov r8, qword [rbp - 0x40]
mov edx, 0x20
lea rcx, [rbp + 0xe0c]
call fcn.140002dc0
lea rcx, [rbp + 0xdf0]
mov rax, qword [0x14005b020]
call qword [case.0x1400380cf.0]
test rax, rax
jne 0x14002300b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140023001
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140023012
mov r14d, r15d
jmp 0x140023012
mov qword [rbp + 0xbd0], rax
mov rdx, qword [rbp - 0x78]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x1400233cd
mov dword [rbp + 0xc04], edi
mov rdi, qword [rbp + 0xbb8]
xor eax, eax
mov r14d, eax
mov rdx, qword [rbp + 0xbd0]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x460
lea r9, [rbp + 0xbfc]
lea r8d, [rax - 1]
mov rdx, rdi
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
test eax, eax
cmove r14d, r15d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x1400230af
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x1400233cd
mov eax, dword [rbp + 0xc04]
add eax, 0x18
mov ecx, 0x5a
cmp eax, ecx
cmovl eax, ecx
mov dword [rbp + 0xc04], eax
mov eax, 0x20
mov dword [rbp + 0xc08], eax
mov r14d, 0x60
mov r8d, r14d
mov edi, dword [rsp + 0x78]
mov edx, edi
mov ecx, dword [rbp + 0xbfc]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
mov dword [rbp + 0xbfc], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rbp + 0xc00]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
mov dword [rbp + 0xc00], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rbp + 0xc04]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
mov dword [rbp + 0xc04], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rbp + 0xc08]
mov rax, qword [0x14005b0b8]
call qword [case.0x1400380cf.0]
mov dword [rbp + 0xc08], eax
mov r8d, dword [rbp + 0xbf8]
lea rcx, [rbp + 0xbfc]
mov rax, qword [0x14005b150]
add r8d, 0x24
cmp dword [rbp + 0xba0], 0
je 0x14002319e
mov edx, dword [rbp + 0xbdc]
cmp edx, dword [rbp + 0xbec]
cmovge edx, dword [rbp + 0xbec]
call qword [case.0x1400380cf.0]
mov ecx, dword [rbp - 0x58]
jmp 0x1400231e4
mov edx, dword [rbp + 0xbe4]
cmp edx, dword [rbp + 0xbf4]
cmovle edx, dword [rbp + 0xbf4]
sub edx, dword [rbp + 0xc04]
add edx, dword [rbp + 0xbfc]
call qword [case.0x1400380cf.0]
mov ecx, dword [rbp - 0x58]
jmp 0x1400231e4
mov dword [rbp + 0x688], edi
mov eax, dword [rbp + 0xbf8]
mov dword [rbp + 0x68c], eax
mov dword [rbp + 0xbd8], 0xffa8a8a8
mov eax, dword [rbp + 0xba0]
mov dword [rbp - 0x50], eax
mov r14d, dword [rbp + 0x68c]
mov edi, dword [rbp + 0x688]
sub ecx, 1
je 0x1400233b6
sub ecx, 1
je 0x1400232c7
cmp ecx, 1
jne 0x1400233ca
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xcd0], xmm0
movups xmmword [rbp + 0xce0], xmm0
mov qword [rbp + 0xcf0], rax
mov edx, ecx
xor ecx, ecx
mov rax, qword [0x14005b148]
call qword [case.0x1400380cf.0]
mov dword [rbp + 0xcd0], 0x28
lea rdx, [rbp + 0xcd0]
mov rcx, rax
mov rax, qword [0x14005b108]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x1400233ca
lea rdx, [rbp + 0xce4]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x1400380cf.0]
lea rdx, [rbp + 0xcec]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x1400380cf.0]
mov eax, dword [rbp + 0xcec]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rbp + 0xcec]
shr rcx, 0x20
sub ecx, r14d
imul ecx, ecx, 0x32
jmp 0x140023397
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xca8], xmm0
movups xmmword [rbp + 0xcb8], xmm0
mov qword [rbp + 0xcc8], rax
lea edx, [rax + 1]
xor ecx, ecx
mov rax, qword [0x14005b148]
call qword [case.0x1400380cf.0]
mov dword [rbp + 0xca8], 0x28
lea rdx, [rbp + 0xca8]
mov rcx, rax
mov rax, qword [0x14005b108]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x1400233ca
lea rdx, [rbp + 0xcbc]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x1400380cf.0]
lea rdx, [rbp + 0xcc4]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x1400380cf.0]
mov eax, dword [rbp + 0xcc4]
cmp dword [rbp - 0x50], 0
je 0x140023370
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0xcbc]
jmp 0x140023386
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp + 0xcc4]
shr rax, 0x20
sub eax, r14d
imul ecx, eax, 0x5f
mov dword [rbp + 0x680], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0x684], edx
jmp 0x1400233ca
mov dword [rbp + 0x680], 0
mov dword [rbp + 0x684], 0
xor r14d, r14d
mov rdx, qword [rbp - 0x70]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x1400380cf.0]
mov ecx, 1
xor eax, eax
lock cmpxchg dword [0x14005c480], ecx
jne 0x1400233e5
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x1400236d6
sub eax, ecx
mov dword [0x14005bea8], eax
jne 0x1400236d6
lea rdi, [0x14005c0a0]
mov eax, 4
mov qword [rbp - 0x78], rax
mov rcx, qword [rdi]
test rcx, rcx
je 0x140023435
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp - 0x78]
add rdi, 0x18
sub rax, 1
mov qword [rbp - 0x78], rax
jne 0x14002341d
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], 0
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
xor eax, eax
xchg dword [0x14005c480], eax
lea rcx, [rbp + 0x3f8]
call fcn.140046b64
test r14d, r14d
js 0x140025153
mov rdi, qword [rbp + 0x680]
mov qword [rbp + 0x440], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x820]
call sub.msvcrt.dll_memset
mov edx, 7
lea r14d, [rdx - 6]
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b050]
call qword [case.0x1400380cf.0]
test rax, rax
je 0x140023777
lea r8, [rbp + 0x820]
lea edx, [r14 + 0x67]
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x140023777
cmp word [rbp + 0x832], 0x20
jne 0x140023777
cmp qword [rbp + 0x838], 0
je 0x140023777
cmp dword [rbp + 0x824], 0
jle 0x140023777
cmp dword [rbp + 0x828], 0
jg 0x14002377c
xor eax, eax
mov r14d, eax
mov dword [rbp + 0x16c], r14d
test r14d, r14d
jne 0x14002388c
cmp dword [rbp - 0x58], 1
je 0x14002388c
mov edi, dword [rbp - 0x58]
xor r14d, r14d
mov edx, 1
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b080]
call qword [case.0x1400380cf.0]
mov dword [rbp - 0x50], eax
mov eax, 0x810
mov ecx, 0x20812
cmp dword [rbp + 0xba0], 0
cmovne eax, ecx
mov dword [rbp - 0x60], eax
cmp dword [rbp + 0x16c], 0
je 0x14002433b
mov eax, dword [rbp + 0xba4]
mov dword [rsp + 0x70], eax
mov rax, qword [rbp + 0xbc0]
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp + 0xba8]
mov qword [rbp - 0x40], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x890]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x900]
call sub.msvcrt.dll_memset
mov qword [rbp - 0x30], r14
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x74], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xcf8], xmm0
movups xmmword [rbp + 0xd08], xmm0
mov qword [rbp + 0xd18], rax
mov dword [rbp + 0xd20], eax
movups xmmword [rbp + 0xc78], xmm0
test rdi, rdi
je 0x140025138
lea edx, [rax + 7]
mov rdi, qword [rbp - 0x18]
mov rcx, rdi
mov rax, qword [0x14005b050]
call qword [case.0x1400380cf.0]
test rax, rax
jne 0x1400238fe
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025138
mov r8d, dword [rbp + 0x444]
mov edx, edi
lea rcx, [rbp + 0xbdc]
mov rax, qword [0x14005b150]
call qword [case.0x1400380cf.0]
mov r8d, dword [rbp + 0x444]
mov edx, edi
lea rcx, [rbp + 0xbec]
mov rax, qword [0x14005b150]
call qword [case.0x1400380cf.0]
mov edi, dword [rbp - 0x58]
cmp edi, 1
jne 0x140023799
mov ecx, 0xb26720
cmp dword [rbp + 0xba4], 0
mov r14d, 0
cmovne ecx, r14d
mov rax, qword [0x14005b028]
call qword [case.0x1400380cf.0]
mov qword [rbp + 0x10], rax
jmp 0x14002379c
lea r8, [rbp + 0x890]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x14002393d
mov rax, qword [rbp + 0x8a8]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp + 0x894]
mov dword [rsp + 0x78], eax
mov eax, dword [rbp + 0x898]
mov dword [rsp + 0x74], eax
mov rcx, rdi
mov rax, qword [0x14005b010]
call qword [case.0x1400380cf.0]
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x14002396a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025138
mov ecx, dword [rbp + 0xbe8]
sub ecx, dword [rbp + 0xbe0]
mov eax, dword [rbp + 0xbe4]
sub eax, dword [rbp + 0xbdc]
mov qword [rbp + 0x448], r14
mov dword [rbp - 0x48], r14d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd08], xmm0
xor edx, edx
mov qword [rbp + 0xd18], rdx
mov dword [rbp + 0xd20], edx
mov dword [rbp + 0xcf8], 0x28
mov dword [rbp + 0xcfc], eax
neg ecx
mov dword [rbp + 0xd00], ecx
mov eax, 1
mov word [rbp + 0xd04], ax
mov eax, 0x20
mov word [rbp + 0xd06], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x448]
xor r8d, r8d
lea rdx, [rbp + 0xcf8]
mov rcx, rdi
mov rax, qword [0x14005b018]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140023a39
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140023a28
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140023dac
mov r14d, r15d
jmp 0x140023dac
lea r8, [rbp + 0x900]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0x918]
mov qword [rbp - 0x80], rcx
mov eax, dword [rbp + 0xbe4]
sub eax, dword [rbp + 0xbdc]
mov dword [rbp + 0xc80], eax
mov eax, dword [rbp + 0xbe8]
sub eax, dword [rbp + 0xbe0]
mov dword [rbp + 0xc84], eax
mov rdx, qword [rbp - 0x68]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x1400380cf.0]
mov rdx, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x1400380cf.0]
mov r8, rax
lea rdx, [rbp + 0xc78]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x1400380cf.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc78]
mov r8d, 0xffffffff
mov rdx, qword [rbp - 0x40]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
cmp dword [rbp - 0x58], 1
jne 0x140023b51
cmp dword [rsp + 0x70], 0
je 0x140023b47
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x1400380cf.0]
mov dword [rsp + 0x70], eax
jmp 0x140023b59
mov dword [rsp + 0x70], 0xffffff
jmp 0x140023b59
mov dword [rsp + 0x70], 0xffa8a8a8
mov eax, dword [rbp + 0xbdc]
mov edx, eax
neg edx
test eax, eax
mov ecx, 0
cmovns edx, ecx
mov r9d, ecx
cmovns r9d, eax
mov eax, dword [rbp + 0xbe0]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, ecx
mov r11d, ecx
cmovns r11d, eax
mov ecx, dword [rbp + 0xc80]
sub ecx, edx
mov eax, dword [rsp + 0x78]
sub eax, r9d
cmp ecx, eax
cmovge ecx, eax
mov dword [rbp - 0x28], ecx
mov r10d, dword [rbp + 0xc84]
sub r10d, r8d
mov eax, dword [rsp + 0x74]
sub eax, r11d
cmp r10d, eax
cmovge r10d, eax
test ecx, ecx
jle 0x140023d7f
test r10d, r10d
jle 0x140023d7f
movsxd rbx, dword [rbp + 0xc80]
mov eax, ebx
imul eax, r8d
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x80]
lea rdi, [rax + rcx*4]
mov qword [rbp - 0x40], rdi
movsxd rdx, dword [rsp + 0x78]
mov eax, edx
imul eax, r11d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rax, [rax + rcx*4]
mov qword [rbp - 0x30], rax
xor r14d, r14d
mov dword [rsp + 0x78], r14d
mov rcx, rbx
shl rcx, 2
mov qword [rbp - 0x80], rcx
mov rcx, rdx
shl rcx, 2
mov esi, dword [rbp - 0x28]
mov ebx, dword [rsp + 0x70]
mov r12, qword [rbp - 0x80]
mov r13, rcx
mov r8d, r14d
mov dword [rsp + 0x74], r14d
lea r9, [rdi + 2]
mov r11, rax
sub r11, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140023d1e
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, bl
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rsp + 0x71]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rsp + 0x72]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
mov r8d, dword [rsp + 0x74]
add r9, 4
inc r8d
mov dword [rsp + 0x74], r8d
cmp r8d, esi
jl 0x140023c49
mov rdi, qword [rbp - 0x40]
add rdi, r12
mov qword [rbp - 0x40], rdi
mov rax, qword [rbp - 0x30]
add rax, r13
mov qword [rbp - 0x30], rax
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
cmp ecx, r10d
jl 0x140023c37
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r14d
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rbp - 0x48]
mov rdi, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140023dac
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x14002439b
mov eax, dword [rbp + 0xba4]
mov dword [rsp + 0x70], eax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp + 0xbb0]
mov qword [rbp - 0x40], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x970]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x7b0]
call sub.msvcrt.dll_memset
xor r14d, r14d
mov qword [rbp - 0x30], r14
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x74], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd28], xmm0
movups xmmword [rbp + 0xd38], xmm0
mov qword [rbp + 0xd48], rax
mov dword [rbp + 0xd50], eax
movups xmmword [rbp + 0xc58], xmm0
test rdi, rdi
je 0x140025138
lea edx, [rax + 7]
mov rdi, qword [rbp - 0x18]
mov rcx, rdi
mov rax, qword [0x14005b050]
call qword [case.0x1400380cf.0]
test rax, rax
jne 0x140023e77
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025138
lea r8, [rbp + 0x970]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x140023eb6
mov rax, qword [rbp + 0x988]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp + 0x974]
mov dword [rsp + 0x78], eax
mov eax, dword [rbp + 0x978]
mov dword [rsp + 0x74], eax
mov rcx, rdi
mov rax, qword [0x14005b010]
call qword [case.0x1400380cf.0]
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x140023ee3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025138
mov ecx, dword [rbp + 0xbf8]
sub ecx, dword [rbp + 0xbf0]
mov eax, dword [rbp + 0xbf4]
sub eax, dword [rbp + 0xbec]
mov qword [rbp + 0x450], r14
mov dword [rbp - 0x48], r14d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd38], xmm0
xor edx, edx
mov qword [rbp + 0xd48], rdx
mov dword [rbp + 0xd50], edx
mov dword [rbp + 0xd28], 0x28
mov dword [rbp + 0xd2c], eax
neg ecx
mov dword [rbp + 0xd30], ecx
mov eax, 1
mov word [rbp + 0xd34], ax
mov eax, 0x20
mov word [rbp + 0xd36], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x450]
xor r8d, r8d
lea rdx, [rbp + 0xd28]
mov rcx, rdi
mov rax, qword [0x14005b018]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140023fb2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140023fa1
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x14002431a
mov r14d, r15d
jmp 0x14002431a
lea r8, [rbp + 0x7b0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0x7c8]
mov qword [rbp - 0x80], rcx
mov eax, dword [rbp + 0xbf4]
sub eax, dword [rbp + 0xbec]
mov dword [rbp + 0xc60], eax
mov eax, dword [rbp + 0xbf8]
sub eax, dword [rbp + 0xbf0]
mov dword [rbp + 0xc64], eax
mov rdx, qword [rbp - 0x68]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x1400380cf.0]
mov rdx, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x1400380cf.0]
mov r8, rax
lea rdx, [rbp + 0xc58]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x1400380cf.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc58]
mov r8d, 0xffffffff
mov rdx, qword [rbp - 0x40]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
cmp dword [rbp - 0x58], 1
jne 0x1400240c5
cmp dword [rsp + 0x70], r14d
je 0x1400240bc
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x1400380cf.0]
jmp 0x1400240ca
mov dword [rbp - 0x58], 0xffffff
jmp 0x1400240d0
mov eax, 0xffa8a8a8
mov dword [rbp - 0x58], eax
mov dword [rbp - 0x10], eax
mov eax, dword [rbp + 0xbec]
mov edx, eax
neg edx
test eax, eax
mov rcx, r14
cmovns edx, ecx
mov r9d, ecx
cmovns r9d, eax
mov eax, dword [rbp + 0xbf0]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, ecx
mov r11d, ecx
cmovns r11d, eax
mov ecx, dword [rbp + 0xc60]
sub ecx, edx
mov eax, dword [rsp + 0x78]
sub eax, r9d
cmp ecx, eax
cmovge ecx, eax
mov dword [rbp - 0x60], ecx
mov r10d, dword [rbp + 0xc64]
sub r10d, r8d
mov eax, dword [rsp + 0x74]
sub eax, r11d
cmp r10d, eax
cmovge r10d, eax
test ecx, ecx
jle 0x1400242ed
test r10d, r10d
jle 0x1400242ed
movsxd rsi, dword [rbp + 0xc60]
mov eax, esi
imul eax, r8d
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x80]
lea rdi, [rax + rcx*4]
mov qword [rbp - 0x40], rdi
movsxd rdx, dword [rsp + 0x78]
mov eax, edx
imul eax, r11d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rax, [rax + rcx*4]
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x70], r14d
mov rcx, rsi
shl rcx, 2
mov qword [rbp - 0x80], rcx
mov rcx, rdx
shl rcx, 2
mov esi, dword [rbp - 0x60]
mov rbx, qword [rbp - 0x80]
mov r12, rcx
mov r13d, dword [rbp - 0x10]
mov r8d, r14d
mov dword [rbp - 0x60], r14d
lea r9, [rdi + 2]
mov r11, rax
sub r11, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14002428d
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, r13b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x57]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rbp - 0x56]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
mov r8d, dword [rbp - 0x60]
add r9, 4
inc r8d
mov dword [rbp - 0x60], r8d
cmp r8d, esi
jl 0x1400241ba
mov rdi, qword [rbp - 0x40]
add rdi, rbx
mov qword [rbp - 0x40], rdi
mov rax, qword [rbp - 0x30]
add rax, r12
mov qword [rbp - 0x30], rax
mov ecx, dword [rsp + 0x70]
inc ecx
mov dword [rsp + 0x70], ecx
cmp ecx, r10d
jl 0x1400241a9
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r14d
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rbp - 0x48]
mov rdi, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x14002431a
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x14002439b
mov rdi, qword [rbp + 8]
xor r14d, r14d
jmp 0x1400250e1
cmp dword [rbp + 0xba4], 0
jne 0x14002434b
cmp edi, 1
mov al, 0xc0
jne 0x14002434d
mov al, 0xff
mov byte [rsp + 0x70], 0
mov byte [rsp + 0x71], 0
mov byte [rsp + 0x72], al
mov byte [rsp + 0x73], 1
mov dword [rbp + 0x6d0], r14d
xor eax, eax
mov dword [rbp + 0x6d4], eax
mov dword [rbp + 0x6e0], eax
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b010]
call qword [case.0x1400380cf.0]
mov qword [rbp + 8], rax
test rax, rax
jne 0x1400243a3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
jmp 0x140025138
cmp edi, 1
jne 0x14002447a
mov r8d, dword [rbp + 0xbe4]
mov eax, r8d
mov r9d, dword [rbp + 0xbdc]
sub eax, r9d
mov r10d, dword [rbp + 0xbf4]
mov ecx, r10d
mov r11d, dword [rbp + 0xbec]
sub ecx, r11d
cmp ecx, eax
cmovle ecx, eax
mov dword [rsp + 0x78], ecx
mov eax, dword [rbp + 0xbf8]
sub eax, dword [rbp + 0xbe0]
mov dword [rsp + 0x74], eax
xor eax, eax
mov edi, eax
mov edx, eax
cmp dword [rbp + 0xba0], eax
je 0x14002441e
mov r14d, ecx
sub r14d, r8d
add r14d, r9d
mov dword [rbp + 0x6d0], r14d
mov eax, ecx
sub eax, r10d
add eax, r11d
mov dword [rbp + 0x6e0], eax
mov edi, r14d
mov edx, eax
sub edi, r9d
add edi, r8d
mov dword [rbp + 0x6d8], edi
mov eax, dword [rbp + 0xbe8]
sub eax, dword [rbp + 0xbe0]
mov dword [rbp - 0x48], eax
mov dword [rbp + 0x6dc], eax
sub edx, r11d
add edx, r10d
mov dword [rbp - 0x28], edx
mov dword [rbp + 0x6e8], edx
mov edx, dword [rbp + 0xbf0]
sub edx, dword [rbp + 0xbe0]
mov dword [rbp + 0x28], edx
mov dword [rbp + 0x6e4], edx
sub edx, dword [rbp + 0xbf0]
add edx, dword [rbp + 0xbf8]
mov dword [rbp - 8], edx
mov dword [rbp + 0x6ec], edx
jmp 0x1400244db
mov ecx, dword [rbp + 0x688]
mov dword [rsp + 0x78], ecx
mov eax, dword [rbp + 0x68c]
mov dword [rsp + 0x74], eax
movups xmm0, xmmword [rbp + 0xbdc]
movups xmmword [rbp + 0x6d0], xmm0
movups xmm1, xmmword [rbp + 0xbec]
movups xmmword [rbp + 0x6e0], xmm1
mov eax, dword [rbp + 0x6dc]
mov dword [rbp - 0x48], eax
mov edi, dword [rbp + 0x6d8]
mov r14d, dword [rbp + 0x6d0]
mov eax, dword [rbp + 0x6ec]
mov dword [rbp - 8], eax
mov eax, dword [rbp + 0x6e8]
mov dword [rbp - 0x28], eax
mov eax, dword [rbp + 0x6e4]
mov dword [rbp + 0x28], eax
xor edx, edx
mov qword [rbp + 0x458], rdx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xdc8], xmm0
mov qword [rbp + 0xdd8], rdx
mov dword [rbp + 0xde0], edx
mov dword [rbp + 0xdb8], 0x28
mov dword [rbp + 0xdbc], ecx
mov eax, dword [rsp + 0x74]
neg eax
mov dword [rbp + 0xdc0], eax
mov eax, 1
mov word [rbp + 0xdc4], ax
mov eax, 0x20
mov word [rbp + 0xdc6], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x458]
xor r8d, r8d
lea rdx, [rbp + 0xdb8]
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b018]
call qword [case.0x1400380cf.0]
mov qword [rbp + 0x30], rax
test rax, rax
jne 0x14002457c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rdi, qword [rbp + 8]
xor r14d, r14d
jmp 0x140025123
mov rdx, rax
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
cmp dword [rbp - 0x58], 1
jne 0x1400245d9
mov r8, qword [rbp + 0x10]
test r8, r8
je 0x1400245d9
xor eax, eax
mov dword [rbp + 0xc48], eax
mov dword [rbp + 0xc4c], eax
mov eax, dword [rsp + 0x78]
mov dword [rbp + 0xc50], eax
mov eax, dword [rsp + 0x74]
mov dword [rbp + 0xc54], eax
lea rdx, [rbp + 0xc48]
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b0e8]
call qword [case.0x1400380cf.0]
mov eax, dword [rbp + 0xba4]
mov dword [rbp - 0x38], eax
mov rax, qword [rbp + 0xbc0]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp + 0xba8]
mov qword [rbp - 0x40], rax
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x9e0]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xa50]
call sub.msvcrt.dll_memset
xor ecx, ecx
mov qword [rbp - 0x30], rcx
mov dword [rbp - 0x80], ecx
mov dword [rbp - 0x68], ecx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd58], xmm0
movups xmmword [rbp + 0xd68], xmm0
mov qword [rbp + 0xd78], rax
mov dword [rbp + 0xd80], eax
movups xmmword [rbp + 0xc68], xmm0
cmp qword [rbp - 0x40], rax
je 0x140025103
lea edx, [rcx + 7]
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b050]
call qword [case.0x1400380cf.0]
test rax, rax
je 0x1400250f7
lea r8, [rbp + 0x9e0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x1400246b3
mov rax, qword [rbp + 0x9f8]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp + 0x9e4]
mov dword [rbp - 0x80], eax
mov eax, dword [rbp + 0x9e8]
mov dword [rbp - 0x68], eax
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b010]
call qword [case.0x1400380cf.0]
mov rcx, rax
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400250f7
mov eax, dword [rbp - 0x48]
sub eax, dword [rbp + 0x6d4]
mov dword [rbp - 0x48], eax
sub edi, r14d
xor edx, edx
mov qword [rbp + 0x468], rdx
mov dword [rbp - 0x70], edx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd68], xmm0
mov qword [rbp + 0xd78], rdx
mov dword [rbp + 0xd80], edx
mov dword [rbp + 0xd58], 0x28
mov dword [rbp + 0xd5c], edi
neg eax
mov dword [rbp + 0xd60], eax
mov eax, 1
mov word [rbp + 0xd64], ax
mov eax, 0x20
mov word [rbp + 0xd66], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x468]
xor r8d, r8d
lea rdx, [rbp + 0xd58]
mov rax, qword [0x14005b018]
call qword [case.0x1400380cf.0]
mov qword [rbp], rax
test rax, rax
jne 0x14002479a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [rbp - 0x70], eax
test eax, eax
jle 0x140024787
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x70], eax
test eax, eax
mov rdi, qword [rbp + 0x20]
js 0x140024ae1
mov dword [rbp - 0x70], r15d
jmp 0x140024ae1
lea r8, [rbp + 0xa50]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0xa68]
mov qword [rbp + 0x18], rcx
mov dword [rbp + 0xc70], edi
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0xc74], eax
mov rdx, qword [rbp]
mov rdi, qword [rbp + 0x20]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x1400380cf.0]
mov rdx, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x1400380cf.0]
mov r8, rax
lea rdx, [rbp + 0xc68]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x1400380cf.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc68]
mov r8d, 0xffffffff
mov rdx, qword [rbp - 0x40]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
cmp dword [rbp - 0x58], 1
jne 0x14002489e
cmp dword [rbp - 0x38], 0
je 0x140024895
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x1400380cf.0]
mov dword [rbp - 0x38], eax
jmp 0x1400248a5
mov dword [rbp - 0x38], 0xffffff
jmp 0x1400248a5
mov dword [rbp - 0x38], 0xffa8a8a8
mov edx, r14d
neg edx
test r14d, r14d
mov r9d, 0
cmovns edx, r9d
mov r8d, r9d
cmovns r8d, r14d
mov eax, dword [rbp + 0x6d4]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r9d
cmovns r9d, eax
mov r14d, dword [rbp + 0xc70]
sub r14d, edx
movsxd r10, dword [rbp - 0x80]
mov eax, r10d
sub eax, r8d
cmp r14d, eax
cmovge r14d, eax
mov r11d, dword [rbp + 0xc74]
sub r11d, ecx
mov eax, dword [rbp - 0x68]
sub eax, r9d
cmp r11d, eax
cmovge r11d, eax
test r14d, r14d
jle 0x140024ab4
test r11d, r11d
jle 0x140024ab4
movsxd rsi, dword [rbp + 0xc70]
mov eax, esi
imul eax, ecx
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp + 0x18]
lea rdi, [rax + rcx*4]
mov qword [rbp + 0x18], rdi
mov eax, r10d
imul eax, r9d
movsxd rcx, eax
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rax, [rax + rcx*4]
mov qword [rbp - 0x40], rax
xor r13d, r13d
mov dword [rbp - 0x68], r13d
mov rcx, rsi
shl rcx, 2
mov qword [rbp - 0x30], rcx
mov rcx, r10
shl rcx, 2
mov esi, dword [rbp - 0x38]
mov rbx, qword [rbp - 0x30]
mov r12, rcx
mov r8d, r13d
mov dword [rbp - 0x80], r13d
lea r9, [rdi + 2]
mov r10, rax
sub r10, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140024a5a
movzx edi, byte [r10 + r9]
movzx r8d, dl
movzx ecx, sil
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
movzx ecx, byte [rbp - 0x37]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
movzx ecx, byte [rbp - 0x36]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
mov r8d, dword [rbp - 0x80]
add r9, 4
inc r8d
mov dword [rbp - 0x80], r8d
cmp r8d, r14d
jl 0x140024987
mov rdi, qword [rbp + 0x18]
add rdi, rbx
mov qword [rbp + 0x18], rdi
mov rax, qword [rbp - 0x40]
add rax, r12
mov qword [rbp - 0x40], rax
mov ecx, dword [rbp - 0x68]
inc ecx
mov dword [rbp - 0x68], ecx
cmp ecx, r11d
jl 0x140024976
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r13d
mov r13d, dword [rbp - 0x20]
mov rdi, qword [rbp + 0x20]
mov rcx, qword [rbp]
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140024ae1
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x1400380cf.0]
cmp dword [rbp - 0x70], 0
jl 0x140025103
mov eax, dword [rbp + 0xba4]
mov dword [rbp - 0x70], eax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp + 0x18], rax
mov rdi, qword [rbp + 0xbb0]
mov qword [rbp], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xac0]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xb30]
call sub.msvcrt.dll_memset
xor r14d, r14d
mov qword [rbp + 0x20], r14
mov dword [rbp - 0x68], r14d
mov dword [rbp - 0x80], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd88], xmm0
movups xmmword [rbp + 0xd98], xmm0
mov qword [rbp + 0xda8], rax
mov dword [rbp + 0xdb0], eax
movups xmmword [rbp + 0xc38], xmm0
test rdi, rdi
je 0x140025106
lea edx, [rax + 7]
mov rdi, qword [rbp + 8]
mov rcx, rdi
mov rax, qword [0x14005b050]
call qword [case.0x1400380cf.0]
test rax, rax
jne 0x140024baa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14002510a
lea r8, [rbp + 0xac0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
test eax, eax
je 0x140024be7
mov rax, qword [rbp + 0xad8]
mov qword [rbp + 0x20], rax
mov eax, dword [rbp + 0xac4]
mov dword [rbp - 0x68], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp - 0x80], eax
mov rcx, rdi
mov rax, qword [0x14005b010]
call qword [case.0x1400380cf.0]
mov rcx, rax
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x140024c14
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14002510a
mov eax, dword [rbp - 8]
sub eax, dword [rbp + 0x28]
mov dword [rbp - 8], eax
mov edi, dword [rbp - 0x28]
sub edi, dword [rbp + 0x6e0]
mov qword [rbp + 0x480], r14
mov dword [rbp - 0x38], r14d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd98], xmm0
xor edx, edx
mov qword [rbp + 0xda8], rdx
mov dword [rbp + 0xdb0], edx
mov dword [rbp + 0xd88], 0x28
mov dword [rbp + 0xd8c], edi
neg eax
mov dword [rbp + 0xd90], eax
mov eax, 1
mov word [rbp + 0xd94], ax
mov eax, 0x20
mov word [rbp + 0xd96], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x480]
xor r8d, r8d
lea rdx, [rbp + 0xd88]
mov rax, qword [0x14005b018]
call qword [case.0x1400380cf.0]
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x140024cde
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140024cc9
movzx r14d, ax
or r14d, 0x80070000
mov rdi, qword [rbp - 0x78]
test r14d, r14d
js 0x14002502b
mov r14d, r15d
jmp 0x14002502b
lea r8, [rbp + 0xb30]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x1400380cf.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0xb48]
mov qword [rbp - 0x30], rcx
mov dword [rbp + 0xc40], edi
mov eax, dword [rbp - 8]
mov dword [rbp + 0xc44], eax
mov rdx, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x1400380cf.0]
mov rdx, qword [rbp + 0x18]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov qword [rbp + 0x18], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x1400380cf.0]
mov r8, rax
lea rdx, [rbp + 0xc38]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x1400380cf.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc38]
mov r8d, 0xffffffff
mov rdx, qword [rbp]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x1400380cf.0]
cmp dword [rbp - 0x58], 1
jne 0x140024ddf
cmp dword [rbp - 0x70], r14d
je 0x140024dd6
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x1400380cf.0]
jmp 0x140024de4
mov dword [rbp - 0x70], 0xffffff
jmp 0x140024dea
mov eax, 0xffa8a8a8
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x10], eax
mov eax, dword [rbp + 0x6e0]
mov edx, eax
neg edx
test eax, eax
mov rcx, r14
cmovns edx, ecx
mov r9d, ecx
cmovns r9d, eax
mov eax, dword [rbp + 0x28]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, ecx
mov r11d, ecx
cmovns r11d, eax
mov ecx, dword [rbp + 0xc40]
sub ecx, edx
mov eax, dword [rbp - 0x68]
sub eax, r9d
cmp ecx, eax
cmovge ecx, eax
mov dword [rbp - 8], ecx
mov r10d, dword [rbp + 0xc44]
sub r10d, r8d
mov eax, dword [rbp - 0x80]
sub eax, r11d
cmp r10d, eax
cmovge r10d, eax
test ecx, ecx
jle 0x140024ffe
test r10d, r10d
jle 0x140024ffe
movsxd rbx, dword [rbp + 0xc40]
mov eax, ebx
imul eax, r8d
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rdi, [rax + rcx*4]
mov qword [rbp], rdi
movsxd rdx, dword [rbp - 0x68]
mov eax, edx
imul eax, r11d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rbp + 0x20]
lea rax, [rax + rcx*4]
mov qword [rbp + 0x20], rax
mov dword [rbp - 0x68], r14d
mov rcx, rbx
shl rcx, 2
mov qword [rbp - 0x30], rcx
mov rcx, rdx
shl rcx, 2
mov ebx, dword [rbp - 8]
mov rsi, qword [rbp - 0x30]
mov r13, rcx
mov r12d, dword [rbp - 0x10]
mov r8d, r14d
mov dword [rbp - 0x80], r14d
lea r9, [rdi + 2]
mov r11, rax
sub r11, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140024fa0
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, r12b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x6f]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rbp - 0x6e]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
mov r8d, dword [rbp - 0x80]
add r9, 4
inc r8d
mov dword [rbp - 0x80], r8d
cmp r8d, ebx
jl 0x140024ecd
mov rdi, qword [rbp]
add rdi, rsi
mov qword [rbp], rdi
mov rax, qword [rbp + 0x20]
add rax, r13
mov qword [rbp + 0x20], rax
mov ecx, dword [rbp - 0x68]
inc ecx
mov dword [rbp - 0x68], ecx
cmp ecx, r10d
jl 0x140024ebc
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r14d
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rbp - 0x38]
mov rdi, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x40]
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x14002502b
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x1400380cf.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x1400380cf.0]
test r14d, r14d
js 0x140025103
xor r14d, r14d
mov rdi, qword [rbp + 8]
cmp dword [rbp - 0x58], 1
jne 0x140025095
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rdi
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x78]
mov r8d, dword [rbp + 0xbe0]
mov edx, dword [rbp + 0xbdc]
mov rcx, qword [rbp - 0x18]
mov rax, qword [section..data]
call qword [case.0x1400380cf.0]
jmp 0x1400250e1
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x50], ecx
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x48], ecx
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], ecx
mov r9d, eax
mov r8d, dword [rbp + 0x684]
mov edx, dword [rbp + 0x680]
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b040]
call qword [case.0x1400380cf.0]
mov edx, dword [rbp - 0x50]
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b080]
call qword [case.0x1400380cf.0]
jmp 0x14002510a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
mov rdi, qword [rbp + 8]
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x140025123
mov rcx, rax
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
test rdi, rdi
je 0x140025138
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x1400380cf.0]
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x140025156
mov rcx, rax
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
jmp 0x140025156
xor r14d, r14d
mov rax, qword [rbp + 0xba8]
test rax, rax
je 0x1400251b5
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x140025169
lea rcx, [rcx*2 + 2]
mov rdi, qword [rbp + 0xba8]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0xba8]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0xba8], r14
mov rax, qword [rbp + 0xbb0]
test rax, rax
je 0x140025214
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x1400251c8
lea rcx, [rcx*2 + 2]
mov rdi, qword [rbp + 0xbb0]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0xbb0]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0xbb0], r14
mov rdi, qword [rbp + 0xbb8]
test rdi, rdi
je 0x14002526c
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rdi + rcx*2], 0
jne 0x140025227
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0xbb8]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0xbb8], r14
mov rcx, qword [rbp + 0xbc0]
test rcx, rcx
je 0x14002528c
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov qword [rbp + 0xbc0], r14
mov rcx, qword [rbp + 0xbc8]
test rcx, rcx
je 0x1400252ac
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov qword [rbp + 0xbc8], r14
mov rcx, qword [rbp + 0xbd0]
test rcx, rcx
je 0x1400252cc
mov rax, qword [0x14005b038]
call qword [case.0x1400380cf.0]
mov qword [rbp + 0xbd0], r14
mov edi, 1
xor eax, eax
lock cmpxchg dword [0x14005c480], edi
jne 0x1400252d1
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x1400255b7
sub eax, edi
mov dword [0x14005bea8], eax
jne 0x1400255b7
lea rdi, [0x14005c0a0]
mov r14d, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14002531a
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, 1
jne 0x140025306
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
lea edi, [r14 + 1]
mov eax, r14d
xchg dword [0x14005c480], eax
mov eax, dword [0x14005bd08]
mov dword [rbp - 0x70], eax
mov rax, qword [0x14005b098]
call qword [case.0x1400380cf.0]
sub eax, dword [0x14005bea0]
mov qword [rbp + 0x18], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1628], xmm0
movups xmmword [rbp + 0x1638], xmm0
movups xmmword [rbp + 0x1648], xmm0
mov qword [rbp + 0x1658], rax
xor eax, eax
lock cmpxchg dword [0x14005c480], edi
jne 0x140025601
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x140025ea4
mov dword [rbp - 0x68], r14d
mov dword [rbp - 0x80], r14d
mov dword [rbp - 0x38], r14d
mov qword [rbp + 0x488], r14
mov ecx, 0x338
call fcn.140009d20
mov r14, rax
mov qword [rbp], rax
test rax, rax
je 0x140025b9c
xor eax, eax
mov esi, eax
mov r12d, 0xffffffff
mov r11d, eax
mov r10d, eax
lea rbx, [r14 + 7]
lea r13, [0x14004d8c2]
lea r14d, [rax + 0x67]
movzx r9d, byte [r13 - 2]
shl r9d, 8
movzx eax, byte [r13 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 1]
or r9d, eax
movzx r8d, byte [r13 + 2]
shl r8d, 8
movzx eax, byte [r13 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea r13, [r13 + 8]
mov edi, r10d
xor edi, r11d
xor edi, 0xac987321
lea eax, [rdi + 0x54969fa2]
rol eax, 5
mov ecx, edi
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
imul ecx, edi, 0x605e
mov eax, edi
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, edi
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, ecx
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor r10d, ecx
xor r11d, r12d
mov byte [rbx - 4], r10b
ror r10d, 8
mov byte [rbx], r11b
ror r11d, 8
mov byte [rbx - 5], r10b
ror r10d, 8
mov byte [rbx - 1], r11b
ror r11d, 8
mov byte [rbx - 6], r10b
ror r10d, 8
mov byte [rbx - 2], r11b
ror r11d, 8
mov byte [rbx - 7], r10b
mov byte [rbx - 3], r11b
ror r10d, 8
ror r11d, 8
mov esi, r9d
mov r12d, r8d
lea rbx, [rbx + 8]
sub r14, 1
jne 0x140025667
xor eax, eax
xorps xmm2, xmm2
xorps xmm1, xmm1
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
mov r14, qword [rbp]
movdqu xmm0, xmmword [r14 + rax]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [r14 + rax + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140025977
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x1400259f3
xor cl, byte [rax + r14]
inc rax
cmp rax, 0x338
jb 0x1400259e4
movzx eax, cl
cmp rax, qword [0x14004dbf8]
jne 0x140025b7c
mov qword [rbp + 0x488], r14
mov qword [rbp + 0x490], 0x338
mov byte [r14 + 0x337], r12b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rdi, [0x14005c0a0]
mov rcx, rdi
call sub.msvcrt.dll_memset
cmp byte [r14], r12b
jne 0x140025a45
mov edi, dword [rbp - 0x80]
jmp 0x140025ba1
lea rdi, [0x14005c0a0]
mov rdx, r14
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [r14 + rax*2], r12w
jne 0x140025a4f
lea r14, [r14 + rax*2]
mov eax, dword [rbp - 0x38]
lea rcx, [rax + rax*2]
lea r8, [rdi + rcx*8]
mov qword [rbp], r8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140025b9c
xor edx, edx
mov edi, edx
mov r8, qword [rbp]
mov rax, qword [r8]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x140025a9f
mov edi, 0xc000007b
jmp 0x140025b03
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x140025ab2
mov edi, 0xc000007b
jmp 0x140025b03
add rcx, qword [r8]
cmp rcx, qword [r8]
jae 0x140025ac1
mov edi, 0xc000007b
jmp 0x140025b03
cmp dword [rcx], 0x4550
je 0x140025ad0
mov edi, 0xc000007b
jmp 0x140025b03
movzx eax, word [rcx + 0x18]
mov r9d, 0x10b
sub ax, r9w
mov r9d, 0xfeff
test r9w, ax
je 0x140025af1
mov edi, 0xc000000d
jmp 0x140025b03
mov rax, qword [rcx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rbp - 0x80], eax
add r14, 6
mov ecx, edx
mov dword [rbp - 8], edx
test eax, eax
je 0x140025b6e
mov rdx, r14
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], r12b
jne 0x140025b21
inc r14
add r14, rax
test edi, edi
js 0x140025b61
mov rcx, qword [r8]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140025ba1
mov ecx, dword [rbp - 0x68]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
mov r8, qword [rbp]
mov ecx, dword [rbp - 8]
inc dword [rbp - 0x68]
inc ecx
mov dword [rbp - 8], ecx
cmp ecx, dword [rbp - 0x80]
jb 0x140025b17
inc dword [rbp - 0x38]
cmp byte [r14], r12b
jne 0x140025a3e
jmp 0x140025ba1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov edi, 0xc000007a
cmp qword [rbp + 0x488], 0
je 0x140025bcf
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x488]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test edi, edi
jns 0x140025e97
lea rdi, [0x14005c0a0]
mov r14d, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025bf8
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, 1
jne 0x140025be4
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
lea edi, [r14 + 1]
jmp 0x140025eac
mov eax, dword [0x14005bea8]
xor r14d, r14d
lea edi, [r14 + 1]
inc eax
mov dword [0x14005bea8], eax
mov eax, r14d
xchg dword [0x14005c480], eax
mov rcx, qword [rbp + 0x18]
mov dword [rbp + 0x1628], ecx
mov dword [rbp + 0x1620], edi
mov dword [rbp + 0x1638], 0x9966f291
mov dword [rbp + 0x1630], edi
mov dword [rbp + 0x1648], edi
mov dword [rbp + 0x1640], edi
mov eax, dword [rbp - 0x70]
mov dword [rbp + 0x1658], eax
mov dword [rbp + 0x1650], edi
lea r9, [rbp + 0x1620]
mov edx, 0x2021
xor ecx, ecx
lea r8d, [rcx + 4]
mov rax, qword [0x14005b0d0]
call qword [case.0x1400380cf.0]
xor eax, eax
lock cmpxchg dword [0x14005c480], edi
jne 0x140025f0f
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x1400261f2
sub eax, 1
mov dword [0x14005bea8], eax
jne 0x1400261f2
lea rdi, [0x14005c0a0]
mov r14d, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025f59
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, 1
jne 0x140025f45
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
mov eax, r14d
xchg dword [0x14005c480], eax
mov rdx, qword [rbp - 0x18]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x1400380cf.0]
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x30], rax
lea rcx, [rbp + 0x3e0]
call fcn.140046b34
cmp dword [rbp + 0x5c], 0
je 0x14002661e
mov qword [rbp + 0x18], r14
mov qword [rbp], r14
mov qword [rbp + 0x6f8], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x6c0], xmm0
lea rax, [0x14005b4d0]
mov qword [rbp + 0x498], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
je 0x140026547
mov rcx, qword [rbp + 0x498]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rax + 0x90], xmm1
mov qword [rbp + 0x18], rax
lea rax, [0x14005b410]
mov qword [rbp + 0x4a0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140026547
mov rcx, qword [rbp + 0x4a0]
mov rdx, qword [rcx]
mov qword [rax], rdx
mov qword [rbp], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x4a8], rax
xor eax, eax
mov dword [rbp + 0x174], eax
lea r8, [rbp + 0x178]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
test eax, eax
js 0x140026547
lea r8, [rbp + 0x174]
mov edx, dword [rbp + 0x178]
xor ecx, ecx
call fcn.14000d71c
or eax, 0x10000000
jl 0x140026547
lea r8, [rbp + 0x17c]
mov edx, 0xa0
mov ecx, 4
call fcn.14000d71c
test eax, eax
js 0x140026547
lea r8, [rbp + 0x174]
mov edx, dword [rbp + 0x17c]
mov ecx, dword [rbp + 0x174]
call fcn.14000d71c
or eax, 0x10000000
jl 0x140026547
lea r8, [rbp + 0x180]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d71c
test eax, eax
js 0x140026547
lea r8, [rbp + 0x174]
mov edx, dword [rbp + 0x180]
mov ecx, dword [rbp + 0x174]
call fcn.14000d71c
or eax, 0x10000000
jl 0x140026547
lea r8, [rbp + 0x184]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d71c
test eax, eax
js 0x140026547
mov edx, dword [rbp + 0x184]
mov dword [rbp + 0x188], edx
lea r8, [rbp + 0x174]
mov ecx, dword [rbp + 0x174]
call fcn.14000d71c
or eax, 0x10000000
jl 0x140026547
mov eax, dword [rbp + 0x174]
mov dword [rbp + 0x6f4], eax
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x140026547
mov qword [rbp + 0x6f8], rax
xor r9d, r9d
mov dword [rbp + 0x6f0], r9d
mov dword [rbp + 0x190], 4
lea r8, [rbp + 0x638]
lea edx, [r9 + 4]
mov rcx, rax
call fcn.14000d73c
test eax, eax
js 0x140026547
mov ecx, dword [rbp + 0x6f4]
add rcx, rdi
lea rax, [rdi + 8]
cmp rax, rcx
ja 0x140026547
mov dword [rdi], 4
mov ecx, dword [rbp + 0x190]
mov rax, qword [rbp + 0x638]
mov dword [rax], ecx
mov r10d, dword [rbp + 0x6f0]
inc r10d
mov dword [rbp + 0x6f0], r10d
cmp qword [rbp + 0x6f8], r9
jne 0x140026643
lea r8, [rbp + 0x198]
mov edx, 0xa0
lea ecx, [r9 + 4]
call fcn.14000d71c
test eax, eax
js 0x140026547
mov edx, dword [rbp + 0x198]
mov dword [rbp + 0x19c], edx
lea r8, [rbp + 0x6f4]
mov ecx, dword [rbp + 0x6f4]
call fcn.14000d71c
test eax, eax
jns 0x14002674f
xor r14d, r14d
mov dword [rbp + 0x6f4], r14d
mov dword [rbp + 0x6f0], r14d
mov rdi, qword [rbp + 0x6f8]
test rdi, rdi
je 0x14002658b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x6f8], r14
mov dword [rbp + 0x6c4], r14d
mov dword [rbp + 0x6c0], r14d
mov rdi, qword [rbp + 0x6c8]
test rdi, rdi
je 0x1400265cc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x6c8], r14
mov rdi, qword [rbp + 0x18]
test rdi, rdi
je 0x1400265f5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp]
test rdi, rdi
je 0x14002661e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [rbp + 0x58]
mov dword [rbp + 0x210], eax
mov edi, dword [rbp + 0x54]
mov qword [rbp + 0x40], r14
mov rax, qword [rbp - 0x30]
mov qword [rbp + 0x248], rax
mov ebx, 1
jmp 0x140028b59
mov rdi, qword [rbp + 0x6f8]
mov qword [rbp + 0x4b0], rdi
test r10d, r10d
je 0x1400266a5
lea r8, [rbp + 0x1a0]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14000d71c
test eax, eax
js 0x140026547
mov eax, dword [rbp + 0x1a0]
mov dword [rbp + 0x19c], eax
mov edx, eax
lea r8, [rbp + 0x4b0]
mov rcx, rdi
call fcn.14000d73c
test eax, eax
js 0x140026547
inc r9d
mov rdi, qword [rbp + 0x4b0]
cmp r9d, r10d
jb 0x140026656
lea r8, [rbp + 0x6b8]
mov edx, 4
mov rcx, rdi
call fcn.14000d73c
test eax, eax
js 0x140026547
mov ecx, dword [rbp + 0x6f4]
add rcx, qword [rbp + 0x6f8]
lea rax, [rdi + 0xa4]
cmp rax, rcx
ja 0x140026547
mov dword [rdi], 0xa0
mov rax, qword [rbp + 0x6b8]
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov edi, dword [rbp + 0x6f0]
inc edi
mov dword [rbp + 0x6f0], edi
cmp qword [rbp + 0x6f8], 0
jne 0x1400267b9
lea r8, [rbp + 0x1a4]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d71c
test eax, eax
js 0x140026547
mov edx, dword [rbp + 0x1a4]
mov dword [rbp + 0x1a8], edx
lea r8, [rbp + 0x6f4]
mov ecx, dword [rbp + 0x6f4]
call fcn.14000d71c
test eax, eax
js 0x140026547
mov edi, dword [rbp + 0x6f0]
inc edi
xor r14d, r14d
jmp 0x140026877
mov r9, qword [rbp + 0x6f8]
mov qword [rbp + 0x4b8], r9
xor r14d, r14d
mov r10d, r14d
test edi, edi
je 0x140026821
lea r8, [rbp + 0x1ac]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
test eax, eax
js 0x14002654a
mov eax, dword [rbp + 0x1ac]
mov dword [rbp + 0x1a8], eax
mov edx, eax
lea r8, [rbp + 0x4b8]
mov rcx, r9
call fcn.14000d73c
test eax, eax
js 0x14002654a
inc r10d
mov r9, qword [rbp + 0x4b8]
cmp r10d, edi
jb 0x1400267d1
lea r8, [rbp + 0x628]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
test eax, eax
js 0x14002654a
mov ecx, dword [rbp + 0x6f4]
add rcx, qword [rbp + 0x6f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
ja 0x14002654a
mov dword [r9], 8
mov rcx, qword [rbp + 0x20]
mov rcx, qword [rcx]
mov rax, qword [rbp + 0x628]
mov qword [rax], rcx
mov edi, dword [rbp + 0x6f0]
inc edi
mov dword [rbp + 0x6f0], edi
mov rax, qword [rbp + 0x4a8]
mov qword [rbp + 0x4c0], rax
cmp qword [rbp + 0x6f8], 0
jne 0x1400268dc
lea r8, [rbp + 0x1b0]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d71c
test eax, eax
js 0x14002654a
mov edx, dword [rbp + 0x1b0]
mov dword [rbp + 0x1b4], edx
lea r8, [rbp + 0x6f4]
mov ecx, dword [rbp + 0x6f4]
call fcn.14000d71c
test eax, eax
jns 0x14002698f
jmp 0x14002654a
mov r9, qword [rbp + 0x6f8]
mov qword [rbp + 0x4c8], r9
mov r10d, r14d
test edi, edi
je 0x140026941
lea r8, [rbp + 0x1b8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
test eax, eax
js 0x14002654a
mov eax, dword [rbp + 0x1b8]
mov dword [rbp + 0x1b4], eax
mov edx, eax
lea r8, [rbp + 0x4c8]
mov rcx, r9
call fcn.14000d73c
test eax, eax
js 0x14002654a
inc r10d
mov r9, qword [rbp + 0x4c8]
cmp r10d, edi
jb 0x1400268f1
lea r8, [rbp + 0x5d8]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
test eax, eax
js 0x14002654a
mov ecx, dword [rbp + 0x6f4]
add rcx, qword [rbp + 0x6f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
ja 0x14002654a
mov dword [r9], 8
mov rcx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x5d8]
mov qword [rax], rcx
inc dword [rbp + 0x6f0]
lea r8, [rbp + 0x1bc]
mov edx, 4
mov ecx, edx
call fcn.14000d71c
test eax, eax
js 0x14002654a
mov edi, dword [rbp + 0x1bc]
mov dword [rbp + 0x1c0], edi
lea r8, [rbp + 0x1c4]
mov edx, 8
call fcn.14000d71c
test eax, eax
js 0x14002654a
mov edx, dword [rbp + 0x1c4]
mov dword [rbp + 0x1c8], edx
lea r8, [rbp + 0x1c0]
mov ecx, edi
call fcn.14000d71c
test eax, eax
js 0x14002654a
mov r10d, dword [rbp + 0x1c0]
mov dword [rbp - 0x70], r10d
mov qword [rbp + 0x20], r14
mov r9d, r14d
mov dword [rbp - 0x68], r14d
mov qword [rbp + 0x4d0], r14
mov qword [rbp - 0x18], r14
mov dword [rbp - 0x80], r14d
mov r11, r14
mov qword [rbp + 8], r14
mov dword [rbp + 0x1cc], r14d
mov qword [rbp + 0x30], r14
xor eax, eax
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x1d0], eax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x4d8], rax
mov dword [rbp + 0x1d4], 8
lea r8, [rbp + 0x1d4]
mov edx, dword [rbp + 0x6f4]
mov ecx, 8
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x140026b85
mov eax, dword [rbp + 0x1d4]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x140026a90
mov edi, 0xc0000095
jmp 0x140026b85
mov dword [rbp + 0x1d4], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
jne 0x140026acd
mov edi, 0xc0000017
jmp 0x140026b76
mov qword [rbp + 0x4e0], r14
mov eax, dword [rbp + 0x6f0]
mov dword [r14], eax
lea r8, [rbp + 0x4e0]
mov edx, 4
mov rcx, r14
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140026b56
mov rcx, qword [rbp + 0x4e0]
mov eax, dword [rbp + 0x6f4]
mov dword [rcx], eax
lea r8, [rbp + 0x4e0]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140026b56
mov ecx, dword [rbp + 0x1d4]
mov rax, qword [rbp + 0x4d8]
mov qword [rcx + r14 - 8], rax
mov r8d, dword [rbp + 0x6f4]
mov rdx, qword [rbp + 0x6f8]
mov rcx, qword [rbp + 0x4e0]
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0x20], r14
mov r9d, dword [rbp + 0x1d4]
jmp 0x140026b7a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r9d, dword [rbp - 0x68]
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
or edi, 0x10000000
jl 0x1400287c6
xor eax, eax
mov qword [rbp + 0x4e8], rax
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp + 0x20]
test rdi, rdi
jne 0x140026bb4
mov edi, 0xc000000d
xor r9d, r9d
jmp 0x14002742b
mov r14d, r9d
mov qword [rbp - 0x40], r14
test r9d, r9d
je 0x140027315
lea rcx, [r14 + 8]
call fcn.140009d20
mov rdx, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14002730d
xor al, al
mov dword [rbp - 0x68], eax
xor r8d, r8d
mov ecx, r8d
test r14, r14
je 0x140026c7e
cmp r14, 0x20
jb 0x140026c6b
mov edx, r14d
and rdx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
movdqu xmm0, xmmword [rcx + rdi]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rcx + rdi + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rcx, 0x20
cmp rcx, rdx
jb 0x140026c04
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
mov dword [rbp - 0x68], eax
mov rdx, qword [rbp + 0x40]
cmp rcx, r14
jae 0x140026c7e
xor al, byte [rcx + rdi]
inc rcx
cmp rcx, r14
jb 0x140026c70
mov dword [rbp - 0x68], eax
mov qword [rbp + 0xc20], rbx
mov r11, rdx
mov r10d, r8d
mov r9d, 0xffffffff
mov dword [rbp - 0x38], r8d
mov dword [rbp - 8], r8d
mov rax, r14
and eax, 7
je 0x140026d80
mov dword [rbp - 0x38], r8d
mov ecx, r8d
mov dword [rbp - 8], ecx
mov r9d, r8d
test eax, eax
je 0x140026cf6
mov r8d, 0x38
movzx edx, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x140026cd8
lea ecx, [r8 - 0x20]
shl edx, cl
mov ecx, dword [rbp - 8]
or ecx, edx
mov dword [rbp - 8], ecx
jmp 0x140026ce3
mov ecx, r8d
shl edx, cl
or r10d, edx
mov ecx, dword [rbp - 8]
inc r9d
sub r8d, 8
cmp r9d, eax
jl 0x140026cbc
mov dword [rbp - 0x38], r10d
xor r8d, r8d
mov r10d, ecx
xor r10d, 0xb17a307a
mov r9d, dword [rbp - 0x38]
xor r9d, 0x42f6b18d
mov ecx, r10d
mov edx, r9d
test eax, eax
je 0x140026d4b
lea rsi, [r11 + 1]
mov qword [rbp + 0x28], rsi
cmp r8d, 4
jge 0x140026d2a
rol ecx, 8
mov esi, ecx
jmp 0x140026d2f
rol edx, 8
mov esi, edx
mov byte [r11], sil
inc r8d
mov rsi, qword [rbp + 0x28]
mov r11, rsi
cmp r8d, eax
jl 0x140026d15
movabs rsi, 0x7f1137fab69605e
cmp eax, 4
jbe 0x140026d62
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r9d, cl
shl r9d, cl
jmp 0x140026d7c
xor ecx, ecx
mov r9d, ecx
cmp eax, 4
jae 0x140026d7c
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rdx, qword [rbp + 0x40]
mov rax, r14
shr rax, 3
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140027098
mov edx, dword [rbp + 0xc24]
mov esi, edx
shr esi, 0x10
movzx eax, bx
mov dword [rbp + 0x28], eax
movzx eax, bx
mov dword [rbp - 0x58], eax
movzx eax, word [rbp + 0xc22]
mov dword [rbp - 0x50], eax
movzx eax, dx
lea r15, [r11 + 7]
lea rcx, [rdi + 2]
mov r11, qword [rbp - 0x10]
mov r12d, dword [rbp - 0x38]
mov r14d, dword [rbp - 8]
mov r13d, eax
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r9d, edi
add rcx, 8
mov qword [rbp - 0x38], rcx
mov eax, r9d
sub eax, dword [rbp - 0x58]
xor eax, r8d
xor r10d, eax
xor r10d, edx
mov ecx, r10d
xor ecx, edx
ror ecx, 0xf
mov eax, r10d
ror eax, 7
imul ecx, dword [rbp - 0x50]
add eax, ecx
xor r9d, eax
lea ecx, [r9 + rbx]
ror ecx, 9
mov eax, r9d
ror eax, 0xa
imul ecx, r13d
sub ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, r13d
rol ecx, 4
mov eax, r10d
rol eax, 5
imul ecx, esi
add eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, ebx
mov eax, edx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
sub ecx, dword [rbp + 0x28]
movzx eax, word [rbp + 0xc22]
imul ecx, eax
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r9d, ecx
mov eax, r9d
ror eax, 0xf
xor eax, r13d
imul eax, dword [rbp + 0x28]
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, esi
imul eax, r13d
xor r9d, eax
mov eax, r9d
sub eax, dword [rbp - 0x58]
sub eax, edx
xor r10d, eax
mov ecx, r10d
ror ecx, 0xa
mov eax, r10d
xor eax, esi
imul eax, dword [rbp - 0x50]
xor ecx, eax
xor r9d, ecx
mov ecx, r9d
xor ecx, dword [rbp + 0x28]
rol ecx, 6
mov eax, r9d
ror eax, 3
imul ecx, r13d
xor eax, ecx
xor r10d, eax
mov eax, r10d
ror eax, 0xf
sub eax, esi
imul eax, dword [rbp + 0x28]
xor r9d, eax
mov ecx, r9d
xor ecx, esi
imul ecx, dword [rbp - 0x58]
mov eax, r9d
shr eax, 1
xor ecx, eax
xor r10d, ecx
mov ecx, r9d
sub ecx, r13d
rol ecx, 3
imul ecx, dword [rbp - 0x58]
mov eax, r9d
shr eax, 0xf
xor ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, r13d
movzx eax, word [rbp + 0xc22]
imul ecx, eax
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r9d, ecx
mov ecx, ebx
sub ecx, r9d
ror ecx, 9
mov eax, r9d
ror eax, 0xb
imul ecx, r13d
xor eax, ecx
xor r10d, eax
mov eax, r10d
sub eax, ebx
sub eax, esi
xor r9d, eax
mov ecx, r9d
ror ecx, 7
mov eax, r9d
xor eax, dword [rbp - 0x50]
imul eax, dword [rbp - 0x58]
sub eax, ecx
xor r10d, eax
mov ecx, r10d
xor ecx, esi
rol ecx, 4
mov eax, r10d
ror eax, 0x10
imul ecx, dword [rbp - 0x50]
sub ecx, eax
xor r9d, ecx
mov ecx, ebx
sub ecx, r9d
ror ecx, 0xa
mov eax, r9d
ror eax, 4
imul ecx, r13d
add eax, ecx
xor r10d, eax
mov ecx, r10d
sub ecx, ebx
ror ecx, 4
mov eax, r10d
ror eax, 9
imul ecx, esi
xor eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, edx
rol ecx, 8
mov eax, r9d
rol eax, 2
imul ecx, dword [rbp - 0x58]
sub ecx, eax
xor r10d, ecx
sub edx, r10d
ror edx, 0xb
mov ecx, r10d
ror ecx, 0xc
movzx eax, word [rbp + 0xc22]
imul eax, edx
sub eax, ecx
xor r9d, eax
mov ecx, r9d
movzx eax, word [rbp + 0xc22]
xor ecx, eax
imul ecx, r13d
mov eax, r9d
shr eax, 8
xor ecx, eax
xor r10d, ecx
xor r9d, r10d
mov edx, dword [rbp + 0xc24]
xor r9d, edx
xor r9d, ebx
xor r10d, r14d
xor r9d, r12d
mov byte [r15 - 4], r10b
ror r10d, 8
mov byte [r15], r9b
ror r9d, 8
mov byte [r15 - 5], r10b
ror r10d, 8
mov byte [r15 - 1], r9b
ror r9d, 8
mov byte [r15 - 6], r10b
ror r10d, 8
mov byte [r15 - 2], r9b
ror r9d, 8
mov byte [r15 - 7], r10b
mov byte [r15 - 3], r9b
ror r10d, 8
ror r9d, 8
mov r14d, r8d
mov r12d, edi
lea r15, [r15 + 8]
sub r11, 1
mov rcx, qword [rbp - 0x38]
jne 0x140026dcf
movabs rsi, 0x7f1137fab69605e
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r13d, dword [rbp - 0x20]
mov r14, qword [rbp - 0x40]
mov rdx, qword [rbp + 0x40]
movzx eax, byte [rbp - 0x68]
mov qword [rdx + r14], rax
mov qword [rbp + 0x4e8], rdx
lea rdi, [r14 + 8]
mov qword [rbp + 0x4f8], rdi
lea rax, [0x14005b4c0]
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], 8
lea r14, [0x14005b420]
mov qword [rbp + 0x510], r14
mov qword [rbp + 0x518], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
je 0x1400272ea
mov edi, edi
mov dword [rax], edi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002723b
mov qword [rbx + 8], rax
mov r8d, edi
mov rdx, qword [rbp + 0x40]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rbx + 0x10], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002723b
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rbx + 0x20], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002723b
mov qword [rbx + 0x28], rax
xor edx, edx
mov edi, edx
mov rcx, qword [0x14005b4c0]
mov qword [rax], rcx
jmp 0x1400272f5
mov rdi, qword [rbx + 8]
test rdi, rdi
je 0x14002726d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r14d, r14d
mov qword [rbx + 8], r14
jmp 0x140027270
xor r14d, r14d
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x14002729d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbx + 0x18], r14
mov rdi, qword [rbx + 0x28]
test rdi, rdi
je 0x1400272ca
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbx + 0x28], r14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov rbx, qword [rbp - 0x78]
mov edi, 0xc0000017
mov r10d, dword [rbp - 0x70]
mov r11, qword [rbp + 8]
test edi, edi
js 0x14002731e
mov qword [rbp + 0x4d0], rbx
mov rbx, rdx
jmp 0x14002731e
mov r10d, dword [rbp - 0x70]
mov r11, qword [rbp + 8]
mov edi, 0xc0000001
mov rbx, qword [rbp - 0x78]
mov r14, qword [rbp + 0x4e8]
test r14, r14
je 0x14002735e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r9d, r9d
mov qword [rbp + 0x4e8], r9
mov r10d, dword [rbp - 0x70]
mov r11, qword [rbp + 8]
jmp 0x140027361
xor r9d, r9d
test rbx, rbx
je 0x140027427
mov r14, qword [rbx + 8]
test r14, r14
je 0x140027399
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 8], rax
mov r14, qword [rbx + 0x18]
test r14, r14
je 0x1400273c8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x18], rax
mov r14, qword [rbx + 0x28]
test r14, r14
je 0x1400273f7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
xor r9d, r9d
jmp 0x14002742b
mov r14, qword [rbp + 0x30]
or edi, 0x10000000
jl 0x1400287c6
mov rbx, qword [rbp + 0x4d0]
mov dword [rbp + 0x1d8], 4
lea r8, [rbp + 0x1d8]
mov edx, dword [rbx]
mov ecx, 4
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400274e5
lea r8, [rbp + 0x1d8]
mov edx, ecx
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400274e5
lea r8, [rbp + 0x1d8]
mov edx, dword [rbx + 0x10]
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400274e5
lea r8, [rbp + 0x1d8]
mov edx, 4
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400274e5
lea r8, [rbp + 0x1d8]
mov edx, dword [rbx + 0x20]
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d71c
mov edi, eax
mov eax, dword [rbp + 0x1dc]
test edi, edi
cmovns eax, dword [rbp + 0x1d8]
mov dword [rbp + 0x1dc], eax
jmp 0x1400274eb
mov eax, dword [rbp + 0x1dc]
test edi, edi
js 0x14002768b
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
jne 0x14002755d
mov edi, 0xc0000017
jmp 0x140027547
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
mov rcx, r14
xor r9d, r9d
jmp 0x14002768f
mov qword [rbp + 0x520], r14
mov eax, dword [rbx]
mov dword [r14], eax
lea r8, [rbp + 0x520]
mov edx, 4
mov rcx, r14
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027527
mov r8d, dword [rbx]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbp + 0x520]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx]
lea r8, [rbp + 0x520]
mov rcx, qword [rbp + 0x520]
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027527
mov eax, dword [rbx + 0x10]
mov rcx, qword [rbp + 0x520]
mov dword [rcx], eax
lea r8, [rbp + 0x520]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027527
mov r8d, dword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbp + 0x520]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx + 0x10]
lea r8, [rbp + 0x520]
mov rcx, qword [rbp + 0x520]
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027527
mov eax, dword [rbx + 0x20]
mov rcx, qword [rbp + 0x520]
mov dword [rcx], eax
lea r8, [rbp + 0x520]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027527
mov r8d, dword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, qword [rbp + 0x520]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx + 0x20]
lea r8, [rbp + 0x520]
mov rcx, qword [rbp + 0x520]
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027527
mov rcx, r14
mov qword [rbp - 0x18], rcx
mov eax, dword [rbp + 0x1dc]
mov dword [rbp - 0x80], eax
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
xor r9d, r9d
jmp 0x14002768f
mov rcx, qword [rbp - 0x18]
or edi, 0x10000000
jl 0x1400279fc
mov qword [rbp + 0x528], r9
mov r11d, r9d
mov dword [rbp + 0x1e0], r9d
mov qword [rbp + 0x530], r9
mov ebx, r9d
mov dword [rbp + 0x1e4], ebx
mov dword [rbp + 0x1e8], 8
lea r8, [rbp + 0x1e8]
mov edx, r10d
mov ecx, 8
call fcn.14000d71c
mov edi, eax
or edi, 0x10000000
jl 0x14002781f
mov eax, dword [rbp + 0x1e8]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x140027707
mov edi, 0xc0000095
mov r9d, dword [rbp + 0x1ec]
jmp 0x140027738
mov dword [rbp + 0x1f0], ecx
lea r8, [rbp + 0x1f0]
mov edx, 8
call fcn.14000d71c
mov edi, eax
mov r9d, dword [rbp + 0x1ec]
test eax, eax
cmovns r9d, dword [rbp + 0x1f0]
mov dword [rbp + 0x1ec], r9d
test edi, edi
js 0x1400287c2
cmp qword [rbp + 0x6f8], 0
jne 0x140027754
mov edi, 0xc000000d
jmp 0x14002781f
cmp dword [rbp + 0x6f0], 1
ja 0x140027767
mov edi, 0xc000000d
jmp 0x14002781f
mov rcx, qword [rbp + 0x6f8]
mov qword [rbp + 0x538], rcx
xor eax, eax
mov r10d, eax
mov r14d, dword [rcx]
lea r8, [rbp + 0x538]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027807
mov edx, r14d
lea r8, [rbp + 0x538]
mov rcx, qword [rbp + 0x538]
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027807
inc r10d
mov rcx, qword [rbp + 0x538]
cmp r10d, 1
jb 0x14002777a
mov r10d, dword [rcx]
lea r8, [rbp + 0x538]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027807
mov r11d, r10d
mov dword [rbp + 0x1e0], r10d
mov rax, qword [rbp + 0x538]
test r10d, r10d
mov edx, 0
cmove rax, rdx
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x528], rax
jmp 0x140027809
xor edx, edx
test edi, edi
js 0x14002781b
cmp dword [rbp + 0x6f0], 2
ja 0x140027867
mov edi, 0xc000000d
mov r14, qword [rbp + 0x30]
test edi, edi
js 0x1400287c2
mov edi, dword [rbp + 0x1cc]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x1400279de
mov edi, 0xd0000017
mov r11, qword [rbp + 8]
jmp 0x1400279ea
mov rcx, qword [rbp + 0x6f8]
mov qword [rbp + 0x540], rcx
mov r10d, edx
mov r14d, dword [rcx]
lea r8, [rbp + 0x540]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027902
mov edx, r14d
lea r8, [rbp + 0x540]
mov rcx, qword [rbp + 0x540]
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027902
inc r10d
mov rcx, qword [rbp + 0x540]
cmp r10d, 2
jb 0x140027878
mov r10d, dword [rcx]
lea r8, [rbp + 0x540]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140027902
mov ebx, r10d
mov dword [rbp + 0x1e4], ebx
mov rax, qword [rbp + 0x540]
test r10d, r10d
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x540], rax
mov qword [rbp + 0x530], rax
test edi, edi
js 0x14002781b
mov dword [rbp + 0x1f4], 4
lea r8, [rbp + 0x1f4]
mov edx, r9d
mov ecx, 4
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400279ad
lea r8, [rbp + 0x1f4]
mov edx, ecx
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400279ad
lea r8, [rbp + 0x1f4]
mov edx, r11d
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400279ad
lea r8, [rbp + 0x1f4]
mov edx, 4
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x1400279ad
lea r8, [rbp + 0x1f4]
mov edx, ebx
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d71c
mov edi, eax
mov eax, dword [rbp + 0x1f8]
test edi, edi
cmovns eax, dword [rbp + 0x1f4]
mov dword [rbp + 0x1f8], eax
jmp 0x1400279b3
mov eax, dword [rbp + 0x1f8]
test edi, edi
js 0x14002781b
mov r14, qword [rbp + 0x30]
cmp eax, 0x400000
jbe 0x1400279d3
mov edi, 0x8000ffff
mov r11, r14
jmp 0x1400287c6
mov dword [rbp + 0x1cc], eax
jmp 0x14002781f
mov r11, rax
mov qword [rbp + 8], rax
mov edi, 0x10000000
mov rcx, qword [rbp - 0x18]
test edi, edi
js 0x1400279fc
test rcx, rcx
jne 0x140027a05
mov edi, 0x80070057
mov rsi, qword [rbp + 0x10]
jmp 0x1400287ce
test r11, r11
jne 0x140027a18
mov edi, 0x80070057
mov rsi, qword [rbp + 0x10]
jmp 0x1400287ce
mov qword [rbp + 0x720], rcx
mov eax, dword [rbp - 0x80]
mov dword [rbp + 0x730], eax
mov qword [rbp + 0x728], r11
mov eax, dword [rbp + 0x1cc]
mov dword [rbp + 0x734], eax
xor ebx, ebx
mov dword [rbp + 0x738], ebx
lea r8, [rbp + 0x548]
lea rdx, [0x14004d280]
lea ecx, [rbx + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140027acf
lea rdx, [0x14004dee0]
mov rcx, qword [rbp + 0x548]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140027acf
xor r9d, r9d
lea r8d, [rbx + 0x20]
lea rdx, [rbp + 0x720]
lea ecx, [r8 + 0x66]
call qword [case.0x1400380cf.0]
mov edi, eax
or edi, 0x10000000
mov edx, dword [rbp + 0x1cc]
cmovge edx, dword [rbp + 0x734]
mov dword [rbp + 0x1cc], edx
cmp edi, 0xd0000023
jne 0x140027af7
mov edi, 0x8007007a
mov r11, qword [rbp + 8]
mov rsi, rbx
jmp 0x1400287ca
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x140027aea
movzx edi, ax
or edi, 0x80070000
mov edx, dword [rbp + 0x1cc]
test edi, edi
js 0x140027ab6
mov edi, r15d
test edi, edi
js 0x140027ac3
mov r11, qword [rbp + 8]
cmp edx, 4
jae 0x140027b10
mov edi, 0xc000003e
xor edx, edx
jmp 0x140027f28
mov edi, dword [r11]
mov dword [rbp - 0x70], edi
lea rcx, [r11 + 4]
cmp rcx, r11
jb 0x140027f14
lea eax, [rdx - 4]
cmp eax, edi
jae 0x140027b36
mov edi, 0xc000003e
xor edx, edx
jmp 0x140027f28
mov qword [rbp - 0x78], rdi
lea r9, [rdi + rcx]
mov qword [rbp - 0x40], r9
cmp r9, rcx
jb 0x140027f14
lea r8d, [rdi + 4]
cmp r8d, 4
jb 0x140027f14
mov eax, edx
sub eax, r8d
cmp eax, 4
jae 0x140027b6f
mov edi, 0xc000003e
xor edx, edx
jmp 0x140027f28
mov r14d, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x140027f0d
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x140027f0d
mov eax, edx
sub eax, r9d
cmp eax, r14d
jb 0x140027f1d
lea r8, [rcx + r14]
cmp r8, rcx
jb 0x140027f0d
lea r10d, [r9 + r14]
cmp r10d, r9d
jb 0x140027f0d
mov eax, edx
sub eax, r10d
cmp eax, 4
jb 0x140027f1d
mov ecx, dword [r8]
mov dword [rbp - 0x68], ecx
lea rax, [r8 + 4]
mov qword [rbp + 0x40], rax
cmp rax, r8
jb 0x140027f0d
lea r8d, [r10 + 4]
cmp r8d, r10d
jb 0x140027f0d
mov eax, edx
sub eax, r8d
cmp eax, ecx
jb 0x140027f1d
lea r9d, [r8 + rcx]
cmp r9d, r8d
jb 0x140027f0d
cmp edx, r9d
jne 0x140027f1d
lea eax, [r14 + rdi]
add ecx, eax
add rcx, 0xc
mov eax, edx
cmp rcx, rax
jne 0x140027f1d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov r11, qword [rbp + 8]
test rax, rax
jne 0x140027c5a
mov edi, 0xc0000017
xor edx, edx
jmp 0x140027e41
lea rax, [r11 + 4]
test rax, rax
je 0x140027cb5
mov eax, dword [rbp - 0x70]
mov dword [rdi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x78]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x140027d7b
mov qword [rdi + 8], rax
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp + 8]
add rdx, 4
call sub.msvcrt.dll_memcpy
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027cbd
xor edx, edx
mov dword [rdi], edx
mov qword [rdi + 8], rdx
mov rax, qword [rbp - 0x40]
add rax, 4
je 0x140027d16
mov dword [rdi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x140027d7b
mov qword [rdi + 0x18], rax
mov r8, r14
mov rdx, qword [rbp - 0x40]
add rdx, 4
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027d1d
mov dword [rdi + 0x10], edx
mov qword [rdi + 0x18], rdx
mov r14, qword [rbp + 0x40]
test r14, r14
je 0x140027e35
mov eax, dword [rbp - 0x68]
mov dword [rdi + 0x20], eax
mov qword [rbp - 0x78], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x78]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x140027d7b
mov qword [rdi + 0x28], rax
mov r8, qword [rbp - 0x78]
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027e3c
mov r14, qword [rdi + 8]
test r14, r14
je 0x140027daa
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 8], rax
mov r14, qword [rdi + 0x18]
test r14, r14
je 0x140027dd9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x18], rax
mov r14, qword [rdi + 0x28]
test r14, r14
je 0x140027e08
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov edi, 0xc0000017
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027e41
mov dword [rdi + 0x20], edx
mov qword [rdi + 0x28], rdx
mov rbx, rdi
mov edi, edx
test edi, edi
js 0x140027e51
mov r14, rbx
mov qword [rbp + 0x30], rbx
jmp 0x140027f28
test rbx, rbx
je 0x140027f24
mov r14, qword [rbx + 8]
test r14, r14
je 0x140027e89
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 8], rax
mov r14, qword [rbx + 0x18]
test r14, r14
je 0x140027eb8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x18], rax
mov r14, qword [rbx + 0x28]
test r14, r14
je 0x140027ee7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
jmp 0x140027f22
mov edi, 0xc0000095
jmp 0x140027f22
mov edi, 0xc0000095
xor edx, edx
jmp 0x140027f28
mov edi, 0xc000003e
xor edx, edx
mov r14, qword [rbp + 0x30]
or edi, 0x10000000
jl 0x1400287c6
mov rbx, rdx
mov qword [rbp + 0x550], rdx
test r14, r14
jne 0x140027f4d
mov edi, 0xd000000d
jmp 0x1400287c6
mov rdi, qword [r14 + 8]
mov qword [rbp - 0x78], rdi
test rdi, rdi
jne 0x140027f64
mov edi, 0xd000000d
jmp 0x1400287c6
mov eax, dword [r14]
test eax, eax
jne 0x140027f75
mov edi, 0xd000000d
jmp 0x1400287c6
lea rbx, [rax - 8]
mov qword [rbp - 0x40], rbx
mov rcx, rbx
call fcn.140009d20
mov r14, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400284b2
xor cl, cl
mov dword [rbp - 0x70], ecx
mov qword [rbp + 0xc18], rsi
mov r8, rax
mov rdx, rbx
and edx, 7
je 0x14002847b
xor eax, eax
mov r10d, eax
mov dword [rbp - 0x68], eax
mov r11d, eax
mov dword [rbp - 0x80], eax
mov r9d, eax
test edx, edx
je 0x140028002
lea esi, [rax + 0x38]
movzx eax, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x140027fde
lea ecx, [rsi - 0x20]
shl eax, cl
or r11d, eax
jmp 0x140027fe5
mov ecx, esi
shl eax, cl
or r10d, eax
inc r9d
sub esi, 8
cmp r9d, edx
jl 0x140027fc8
mov dword [rbp - 0x80], r11d
mov dword [rbp - 0x68], r10d
movabs rsi, 0x7f1137fab69605e
mov r9d, r11d
xor r9d, 0x92f65a5
xor r10d, 0x699a899c
mov eax, r9d
mov ecx, r10d
xor r11d, r11d
test edx, edx
je 0x140028056
lea rsi, [r8 + 1]
mov qword [rbp - 0x38], rsi
cmp r11d, 4
jge 0x140028035
rol eax, 8
mov esi, eax
jmp 0x14002803a
rol ecx, 8
mov esi, ecx
mov byte [r8], sil
inc r11d
mov rsi, qword [rbp - 0x38]
mov r8, rsi
cmp r11d, edx
jl 0x140028020
movabs rsi, 0x7f1137fab69605e
cmp edx, 4
jbe 0x140028458
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov ecx, dword [rbp - 0x70]
xor edx, edx
mov rax, rbx
shr rax, 3
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140028393
mov r11d, dword [rbp + 0xc1c]
mov eax, r11d
shr eax, 0x10
mov dword [rbp - 0x38], eax
movzx eax, r11w
mov dword [rbp - 8], eax
movzx eax, si
mov dword [rbp + 0x28], eax
movzx eax, word [rbp + 0xc1a]
mov dword [rbp - 0x58], eax
lea r13, [r8 + 7]
lea rcx, [rdi + 2]
mov r14d, dword [rbp - 0x38]
mov rbx, qword [rbp - 0x50]
mov r12d, dword [rbp - 0x68]
mov r15d, dword [rbp - 0x80]
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r9d, r8d
xor r10d, edi
add rcx, 8
mov qword [rbp - 0x68], rcx
xor r10d, r9d
xor r10d, r11d
xor r10d, esi
mov edx, r10d
mov eax, r10d
sub eax, esi
rol eax, 5
rol r10d, 0xa
imul eax, dword [rbp - 8]
add r10d, eax
xor r9d, r10d
lea ecx, [r9 + r11]
ror ecx, 9
mov eax, r9d
rol eax, 2
movzx r10d, word [rbp + 0xc1a]
imul ecx, r10d
sub ecx, eax
xor edx, ecx
mov ecx, edx
mov r10d, dword [rbp - 8]
sub ecx, r10d
imul ecx, dword [rbp + 0x28]
mov eax, edx
shr eax, 0xd
sub ecx, eax
xor r9d, ecx
mov ecx, r9d
movzx eax, word [rbp + 0xc1a]
xor ecx, eax
rol ecx, 6
mov eax, r9d
rol eax, 2
imul ecx, r14d
sub ecx, eax
xor edx, ecx
mov ecx, edx
xor ecx, esi
mov eax, r11d
sub eax, ecx
xor r9d, eax
mov ecx, r9d
ror ecx, 6
mov eax, r9d
xor eax, r10d
imul eax, dword [rbp - 0x58]
xor ecx, eax
xor edx, ecx
lea ecx, [rdx + r11]
ror ecx, 0xf
mov eax, edx
rol eax, 2
imul ecx, dword [rbp + 0x28]
add eax, ecx
xor r9d, eax
mov ecx, r9d
sub ecx, esi
ror ecx, 0xe
mov eax, r9d
rol eax, 8
imul ecx, r14d
sub ecx, eax
xor edx, ecx
mov ecx, edx
xor ecx, esi
ror ecx, 0xc
mov eax, edx
ror eax, 0xa
imul ecx, r10d
xor eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, r14d
movzx eax, word [rbp + 0xc1a]
imul ecx, eax
mov eax, r9d
shr eax, 0xa
xor ecx, eax
xor edx, ecx
mov eax, edx
not eax
ror eax, 5
add eax, dword [rbp + 0x28]
imul eax, r14d
xor r9d, eax
mov r10d, r9d
sub r10d, r14d
xor r10d, edx
xor r10d, esi
mov ecx, r10d
xor ecx, r14d
rol ecx, 2
mov edx, dword [rbp - 8]
imul ecx, edx
mov eax, r10d
shr eax, 2
add ecx, eax
xor r9d, ecx
mov ecx, r9d
sub ecx, r11d
ror ecx, 6
mov eax, r9d
rol eax, 7
imul ecx, dword [rbp - 0x58]
add eax, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 9
mov eax, r10d
xor eax, edx
imul eax, dword [rbp + 0x28]
add ecx, eax
xor r9d, ecx
mov ecx, r9d
movzx eax, word [rbp + 0xc1a]
xor ecx, eax
rol ecx, 5
mov eax, r9d
rol eax, 7
imul ecx, r14d
add eax, ecx
xor r10d, eax
xor r9d, r10d
xor r9d, r11d
xor r9d, esi
mov eax, r9d
ror eax, 3
movzx ecx, word [rbp + 0xc1a]
sub eax, ecx
imul eax, edx
xor r10d, eax
mov ecx, r10d
sub ecx, r11d
ror ecx, 1
mov eax, r10d
ror eax, 6
imul ecx, dword [rbp + 0x28]
sub ecx, eax
xor r9d, ecx
lea ecx, [r9 + rsi]
rol ecx, 3
mov eax, r9d
rol eax, 0xe
imul ecx, r14d
add eax, ecx
xor r10d, eax
lea ecx, [r10 + rsi]
rol ecx, 0xf
mov eax, r10d
ror eax, 0xe
imul ecx, edx
sub ecx, eax
xor r9d, ecx
mov ecx, dword [rbp + 0x28]
xor ecx, r9d
movzx eax, word [rbp + 0xc1a]
imul ecx, eax
mov eax, r9d
shr eax, 3
xor ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, r11d
rol ecx, 4
mov eax, r10d
rol eax, 2
imul ecx, dword [rbp + 0x28]
xor eax, ecx
xor eax, r15d
xor r9d, eax
xor r10d, r12d
mov byte [r13 - 4], r9b
ror r9d, 8
mov byte [r13], r10b
ror r10d, 8
mov byte [r13 - 5], r9b
ror r9d, 8
mov byte [r13 - 1], r10b
ror r10d, 8
mov byte [r13 - 6], r9b
ror r9d, 8
mov byte [r13 - 2], r10b
ror r10d, 8
mov byte [r13 - 7], r9b
mov byte [r13 - 3], r10b
ror r9d, 8
ror r10d, 8
mov r15d, r8d
mov r12d, edi
lea r13, [r13 + 8]
sub rbx, 1
mov rcx, qword [rbp - 0x68]
jne 0x1400280c7
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r13d, dword [rbp - 0x20]
mov rbx, qword [rbp - 0x40]
mov r14, qword [rbp + 0x40]
mov ecx, dword [rbp - 0x70]
xor edx, edx
mov rax, rdx
test rbx, rbx
je 0x140028425
cmp rbx, 0x20
jb 0x140028414
mov rcx, rbx
and rcx, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax + r14]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + r14 + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, rcx
jb 0x1400283b2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, rbx
jae 0x140028425
xor cl, byte [rax + r14]
inc rax
cmp rax, rbx
jb 0x140028419
movzx eax, cl
mov rcx, qword [rbp - 0x78]
cmp rax, qword [rbx + rcx]
jne 0x140028492
mov qword [rbp + 0x558], rbx
mov rsi, r14
mov qword [rbp + 0x10], r14
mov dword [rbp + 0x1d0], ebx
mov edi, 0x10000000
mov r14, qword [rbp + 0x30]
mov r11, qword [rbp + 8]
jmp 0x1400284fd
xor eax, eax
mov r10d, eax
cmp edx, 4
jae 0x14002806f
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r9d, cl
shl r9d, cl
jmp 0x14002806f
xor edx, edx
mov dword [rbp - 0x80], edx
mov dword [rbp - 0x68], 0xffffffff
mov r10d, edx
mov r9d, edx
jmp 0x140028074
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r11, qword [rbp + 8]
mov r14, qword [rbp + 0x30]
mov rbx, qword [rbp + 0x550]
mov edi, 0xd0000001
test rbx, rbx
je 0x1400284f3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
xor edx, edx
mov rsi, qword [rbp + 0x10]
mov ebx, dword [rbp + 0x1d0]
test edi, edi
js 0x1400287ca
mov dword [rbp + 0x1fc], edx
mov qword [rbp + 0x560], rsi
cmp ebx, 4
jae 0x140028521
mov edi, 0xc000003e
jmp 0x140028761
mov r11d, dword [rsi]
mov dword [rbp - 0x70], r11d
lea r8, [rbp + 0x560]
mov edx, 4
mov rcx, rsi
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x14002875d
lea r8, [rbp + 0x1fc]
mov edx, 4
xor ecx, ecx
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x14002875d
mov eax, ebx
mov r9d, dword [rbp + 0x1fc]
sub eax, r9d
cmp eax, 4
jae 0x14002857e
mov edi, 0xc000003e
jmp 0x14002875d
mov rcx, qword [rbp + 0x560]
mov r10d, dword [rcx]
lea r8, [rbp + 0x560]
mov edx, 4
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x14002875d
lea r8, [rbp + 0x1fc]
mov edx, 4
mov ecx, r9d
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x14002875d
mov eax, ebx
mov ecx, dword [rbp + 0x1fc]
sub eax, ecx
cmp eax, r10d
jae 0x1400285da
mov edi, 0xc000003e
jmp 0x14002875d
lea r8, [rbp + 0x1fc]
mov edx, r10d
call fcn.14000d71c
mov edi, eax
test eax, eax
js 0x14002875d
mov edx, ebx
mov rsi, r10
mov rdi, qword [rbp + 0x10]
lea rcx, [rdi + rdx]
mov rbx, qword [rbp + 0x560]
lea rax, [rbx + r10]
cmp rcx, rax
jb 0x1400287bb
mov rax, rdi
sub rax, rbx
sub rax, r10
add rax, rdx
cmp rax, 8
jae 0x1400287bb
xor eax, eax
mov r14d, eax
mov edi, eax
mov dword [rbp - 0x80], eax
test rbx, rbx
je 0x140028715
mov r9, rbx
lea r8, [rbp + 0x568]
mov rdx, r10
mov rcx, rbx
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x14002879b
mov r11, qword [rbp + 0x568]
cmp rbx, r11
jae 0x140028709
mov r10d, dword [rbp + 0x200]
lea r8, [rbp + 0x570]
mov edx, 4
mov rcx, r9
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140028767
cmp qword [rbp + 0x570], r11
ja 0x140028750
lea r8, [rbp + 0x220]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d71c
mov edi, eax
test eax, eax
cmovns r10d, dword [rbp + 0x220]
mov dword [rbp + 0x200], r10d
js 0x140028767
mov edx, r10d
lea r8, [rbp + 0x578]
mov rcx, r9
call fcn.14000d73c
mov edi, eax
test eax, eax
js 0x140028767
mov r9, qword [rbp + 0x578]
cmp r9, r11
ja 0x140028750
mov eax, dword [rbp - 0x80]
inc eax
mov dword [rbp - 0x80], eax
cmp r9, r11
jb 0x140028673
mov r10d, esi
jmp 0x14002870c
mov eax, r14d
cmp r9, r11
jne 0x140028750
mov r11d, dword [rbp - 0x70]
test r10d, r10d
je 0x140028774
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
mov r11d, dword [rbp - 0x70]
test rax, rax
jne 0x14002876d
mov edi, 0xc0000017
jmp 0x14002879b
mov edi, 0xc000000d
mov r14, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x10]
mov r11, qword [rbp + 8]
bts edi, 0x1c
jmp 0x1400287ca
mov r11d, dword [rbp - 0x70]
jmp 0x14002879b
xor eax, eax
mov edi, eax
mov eax, dword [rbp - 0x80]
test rbx, rbx
je 0x14002878e
mov r8, rsi
mov rdx, rbx
mov rcx, r14
call sub.msvcrt.dll_memcpy
mov eax, dword [rbp - 0x80]
mov r11d, dword [rbp - 0x70]
mov qword [rbp + 0x6c8], r14
mov dword [rbp + 0x6c0], eax
test edi, edi
js 0x140028755
mov r14, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x10]
cmp r11d, dword [rbp + 0x6c0]
mov r11, qword [rbp + 8]
je 0x140028761
mov edi, 0xc000003e
jmp 0x140028761
mov edi, 0xc000003e
jmp 0x140028759
mov r11, qword [rbp + 8]
mov rsi, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x18]
mov rbx, qword [rbp + 0x20]
test rbx, rbx
je 0x1400287ff
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
mov rcx, qword [rbp - 0x18]
mov rbx, qword [rbp + 0x4d0]
test rbx, rbx
je 0x1400288d1
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x14002883e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 8], rax
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x14002886d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x18], rax
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x14002889c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x4d0], rax
mov r11, qword [rbp + 8]
mov rsi, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1400288fb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
test r11, r11
je 0x140028921
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r14, r14
je 0x1400289d7
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x140028959
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rbx, qword [r14 + 0x18]
test rbx, rbx
je 0x140028988
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x1400289b7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test rsi, rsi
je 0x1400289fc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test edi, edi
js 0x140026547
mov r10d, dword [rbp + 0x6c0]
cmp r10d, 1
jb 0x140026547
mov rdi, qword [rbp + 0x6c8]
test rdi, rdi
je 0x140026547
test r10d, r10d
je 0x140026547
mov qword [rbp + 0x580], rdi
mov r9d, dword [rdi]
lea r8, [rbp + 0x580]
mov edx, 4
mov rcx, rdi
call fcn.14000d73c
test eax, eax
js 0x140026547
mov dword [rbp + 0x204], r9d
mov rax, qword [rbp + 0x580]
test r9d, r9d
mov r14d, 0
cmove rax, r14
mov qword [rbp + 0x580], rax
mov qword [rbp + 0x588], rax
cmp r9d, 4
jne 0x14002654a
mov eax, dword [rax]
mov dword [rbp + 0x208], eax
test eax, eax
js 0x14002654a
cmp r10d, 1
jbe 0x14002654a
mov qword [rbp + 0x590], rdi
mov r9d, r14d
lea r8, [rbp + 0x590]
mov edx, 4
mov rcx, rdi
call fcn.14000d73c
test eax, eax
js 0x14002654a
mov edx, dword [rdi]
lea r8, [rbp + 0x590]
mov rcx, qword [rbp + 0x590]
call fcn.14000d73c
test eax, eax
js 0x14002654a
inc r9d
cmp r9d, 1
jae 0x140028af6
mov rdi, qword [rbp + 0x590]
jmp 0x140028aab
mov rcx, qword [rbp + 0x590]
mov edi, dword [rcx]
lea r8, [rbp + 0x590]
mov edx, 4
call fcn.14000d73c
test eax, eax
js 0x14002654a
mov dword [rbp + 0x20c], edi
mov rax, qword [rbp + 0x590]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x590], rax
mov qword [rbp + 0x598], rax
cmp edi, 8
jne 0x14002654a
mov rax, qword [rax]
mov qword [rbp + 0x5a0], rax
jmp 0x14002654a
mov ebx, 1
mov edi, dword [rbp + 0x38]
xor eax, eax
lock cmpxchg dword [0x14005c480], ebx
jne 0x140028b59
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x140028e3e
sub eax, 1
mov dword [0x14005bea8], eax
jne 0x140028e3e
lea rbx, [0x14005c0a0]
mov esi, 4
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028ba2
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rbx, 0x18
sub rsi, 1
jne 0x140028b8e
xor edx, edx
lea r8d, [rsi + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x140046b10]
mov qword [section..data], rax
lea rax, [0x140046b10]
mov qword [0x14005b008], rax
lea rax, [0x140046b10]
mov qword [0x14005b010], rax
lea rax, [0x140046b10]
mov qword [0x14005b018], rax
lea rax, [0x140046b10]
mov qword [0x14005b020], rax
lea rax, [0x140046b10]
mov qword [0x14005b028], rax
lea rax, [0x140046b10]
mov qword [0x14005b030], rax
lea rax, [0x140046b10]
mov qword [0x14005b038], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b040], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b048], rax
lea rax, [0x140046b10]
mov qword [0x14005b050], rax
lea rax, [0x140046b10]
mov qword [0x14005b058], rax
lea rax, [0x140046b10]
mov qword [0x14005b060], rax
lea rax, [0x140046b10]
mov qword [0x14005b068], rax
lea rax, [0x140046b10]
mov qword [0x14005b070], rax
lea rax, [0x140046b10]
mov qword [0x14005b078], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b080], rax
lea rax, [0x140046b10]
mov qword [0x14005b088], rax
lea rax, [0x140046b10]
mov qword [0x14005b090], rax
lea rax, [0x140046b10]
mov qword [0x14005b098], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0a8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a580]
mov qword [0x14005b0b8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a3a0]
mov qword [0x14005b0d8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0e8], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f0], rax
lea rax, [0x140046b10]
mov qword [0x14005b0f8], rax
lea rax, [0x140046b10]
mov qword [0x14005b100], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b108], rax
lea rax, [0x140046b10]
mov qword [0x14005b110], rax
lea rax, [0x140046b10]
mov qword [0x14005b118], rax
lea rax, [0x140046b10]
mov qword [0x14005b120], rax
lea rax, [0x140046b10]
mov qword [0x14005b128], rax
lea rax, [0x140046b10]
mov qword [0x14005b130], rax
lea rax, [0x140046b10]
mov qword [0x14005b138], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b140], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b148], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b150], rax
lea rax, [0x14000a3a0]
mov qword [0x14005b158], rax
lea rax, [0x140046b10]
mov qword [0x14005b160], rax
lea rax, [0x140046b10]
mov qword [0x14005b168], rax
lea ebx, [rsi + 1]
mov eax, r14d
xchg dword [0x14005c480], eax
lea rcx, [rbp + 0x40]
call fcn.140009b34
test r13d, r13d
jns 0x1400047f1
cmp r13d, 0xd0000034
jne 0x140028e6a
mov r12d, 0xc004f012
jmp 0x140028ead
cmp r13d, 0xd00000e5
je 0x140028ea7
cmp r13d, 0xc004d501
je 0x140028ea7
cmp r13d, 0xd000003e
jne 0x140028e8d
mov r12d, 0xc004f028
jmp 0x140028ead
mov r12d, r13d
cmp r13d, 0x8007007a
jne 0x140028ead
mov r12d, 0xc004f01e
xor r13d, r13d
jmp 0x140004812
mov r12d, 0xc004f027
xor r13d, r13d
jmp 0x140004812
mov r12d, 0xc004f01e
jmp 0x140004812
mov rax, r13
jmp 0x14000480d
mov r15d, 0x80070005
jmp 0x140029149
mov byte [0x14005c049], 1
jmp 0x140004831
movzx eax, ax
or eax, 0x80070000
test eax, eax
jmp 0x140004ad2
cmp dword [rbp + 0x214], 2
jb 0x140004b31
xor r9d, r9d
lea r8, str.TabTip_MessageBox__
lea rdx, str.TabTip_has_just_called_CoInitializeSecurity.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop dword [rax + rax]
nop
jmp 0x140004b31
mov bl, 1
jmp 0x140004bd3
mov byte [0x14005c049], 1
jmp 0x140004bf0
mov r14b, 1
xor sil, sil
jmp 0x140004cec
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_TranslateMessage]
nop dword [rax + rax]
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_DispatchMessageW]
nop dword [rax + rax]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_GetMessageW]
nop dword [rax + rax]
test eax, eax
jg 0x140028f3e
lea rcx, [0x14005c108]
call fcn.14003b650
lea rcx, [0x14005c188]
call fcn.14003b650
test sil, sil
je 0x140028fa5
call fcn.14002c5f4
mov byte [rsp + 0x28], bl
movzx edx, r14b
lea rcx, [rbp + 0x14b0]
call fcn.140031c7c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x12]
mov ecx, dword [rbp + 0x21c]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
nop dword [rax + rax]
mov edx, 0xffffffff
mov rcx, r12
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x3a0]
test rcx, rcx
je 0x14002905a
mov edx, dword [0x14005c044]
test edx, edx
je 0x140029013
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x1400380cf.0]
mov rcx, qword [rbp + 0x3a0]
mov edx, dword [0x14005c040]
test edx, edx
je 0x14002905a
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x1400380cf.0]
xor edx, edx
mov rcx, qword [rbp + 0x348]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoDisconnectObject]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x348]
mov qword [rbp + 0x348], r13
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [case.0x1400380cf.0]
mov rcx, r12
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [0x14005bd88]
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_UnregisterWait]
nop dword [rax + rax]
nop
lea rcx, [rbp + 0x3a0]
call fcn.140003484
nop
lea rcx, [rbp + 0x348]
call fcn.140003484
nop
lea rcx, [rbp + 0x238]
call fcn.140003484
nop
lea rax, [0x14004a100]
mov qword [rbp + 0x14b0], rax
lea rcx, [rbp + 0x14b0]
call fcn.14002d224
lea rcx, [rbp + 0x14b0]
call fcn.14002b288
test r15d, r15d
jne 0x1400290df
mov eax, 0x16
cmp byte [0x14005c5c8], r15b
cmovne r15d, eax
mov edx, r15d
lea rcx, [rbp + 0x1370]
call fcn.140031b70
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
nop dword [rax + rax]
lea rcx, [rbp + 0x770]
call fcn.14000581c
lea rcx, [rbp + 0x1090]
call fcn.140005690
lea rcx, [rbp + 0x1010]
call fcn.140005690
lea rcx, [rbp + 0xf90]
call fcn.140005690
lea rcx, [rbp + 0xf10]
call fcn.140005690
mov qword [rbp + 0x5c0], rdi
lea rcx, [rbp + 0x5c0]
call fcn.140009ba0
lea rax, [0x14004a0e8]
mov qword [rbp + 0x1370], rax
lea rcx, [rbp + 0x1370]
call fcn.14002d224
lea rcx, [rbp + 0x1370]
call fcn.14002b288
mov eax, r15d
mov rcx, qword [rbp + 0x19d0]
xor rcx, rsp
call fcn.14000aea0
lea r11, [rsp + 0x1ae0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret