Function at 0x14000a190
Capabilities:
Check for time delay via queryperformancecounter
Encrypt data using aes mixcolumns step
Encrypt data using salsa20 or chacha

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb78
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xae0], xmm12
movaps xmmword [rbp + 0xad0], xmm11
movaps xmmword [rbp + 0xac0], xmm10
movaps xmmword [rbp + 0xab0], xmm9
movaps xmmword [rbp + 0xaa0], xmm8
movaps xmmword [rbp + 0xa90], xmm7
movaps xmmword [rbp + 0xa80], xmm6
and rsp, 0xffffffffffffffe0
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14000d23d
mov rsi, qword [rsp + 0x340]
mov rcx, qword [0x1400ec9c8]
test rcx, rcx
jne 0x14000a255
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000d23d
mov rcx, qword [rsp + 0x340]
mov qword [0x1400ec9c8], rcx
test rcx, rcx
je 0x14000d243
mov rax, rsi
or rax, rcx
shr rax, 0x20
je 0x14000a26b
mov rax, rsi
xor edx, edx
div rcx
jmp 0x14000a271
mov eax, esi
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x14000a295
xor edx, edx
div rcx
mov rsi, rax
jmp 0x14000a29b
xor edx, edx
div ecx
mov esi, eax
add rsi, r8
mov rax, rsi
shr rax, 9
movabs r15, 0x44b82fa09b5a53
mul r15
mov rdi, rdx
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
test rax, rax
je 0x14000a336
mov rbx, rax
mov qword [rsp + 0x340], 0xffffffffeb236c80
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x340]
mov rcx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x14000a32d
mov rcx, rbx
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r14d, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r14d, 0xffffffff
jne 0x14000a341
jmp 0x14000a336
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x88b8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14000d23d
mov rbx, qword [rsp + 0x340]
mov rcx, qword [0x1400ec9c8]
test rcx, rcx
jne 0x14000a3b1
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000d23d
mov rcx, qword [rsp + 0x340]
mov qword [0x1400ec9c8], rcx
test rcx, rcx
je 0x14000d243
mov rax, rbx
or rax, rcx
shr rax, 0x20
je 0x14000a3c7
mov rax, rbx
xor edx, edx
div rcx
jmp 0x14000a3cd
mov eax, ebx
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x14000a3f1
xor edx, edx
div rcx
mov rbx, rax
jmp 0x14000a3f7
xor edx, edx
div ecx
mov ebx, eax
add rbx, r8
mov rax, rbx
shr rax, 9
mul r15
mov r14, rdx
mov r8, qword [0x1400ec9c8]
test r8, r8
jne 0x14000a44d
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000d23d
mov r8, qword [rsp + 0x340]
mov qword [0x1400ec9c8], r8
test r8, r8
je 0x14000d243
shr rdi, 0xb
imul rax, rdi, 0x3b9aca00
sub rsi, rax
shr r14, 0xb
imul rax, r14, 0x3b9aca00
sub rbx, rax
cmp r8, 0x3b9aca00
ja 0x14000a47e
mov eax, 0x3b9aca00
xor edx, edx
div r8d
jmp 0x14000a480
xor eax, eax
lea ecx, [rax - 0x3b9aca00]
xor edx, edx
cmp r8, 2
setb r8b
cmovae ecx, eax
xor r10d, r10d
mov rax, r14
sub rax, rdi
setne r10b
mov r9d, 0xff
cmovbe r9d, r10d
test r9b, r9b
jne 0x14000a4bc
cmp rbx, rsi
setne r9b
ja 0x14000a564
cmp r9b, 1
jne 0x14000a564
cmp r14, rdi
ja 0x14000d243
mov r9, rdi
sub r9, r14
cmp rbx, rsi
jbe 0x14000a4fb
test r9, r9
je 0x14000d243
dec r9
lea r10d, [rsi + 0x3b9aca00]
sub r10d, ebx
cmp r10d, 0x3b9aca00
jae 0x14000a50a
jmp 0x14000a52f
mov r10d, esi
sub r10d, ebx
cmp r10d, 0x3b9aca00
jb 0x14000a52f
mov r11d, r10d
shr r11d, 9
imul r11, r11, 0x44b83
shr r11, 0x27
add r9, r11
jb 0x14000d243
imul r11d, r11d, 0x3b9aca00
sub r10d, r11d
mov dl, r8b
xor r8d, r8d
cmp r9, rdx
setne r8b
mov edx, 0xff
cmovb r8d, edx
xor r9d, r9d
cmp r10d, ecx
setne r9b
cmovb r9d, edx
test r8b, r8b
cmovne r9d, r8d
cmp r9b, 1
jne 0x14000d245
cmp r14, rdi
jb 0x14000d245
cmp rbx, rsi
jae 0x14000a584
test rax, rax
je 0x14000d245
dec rax
add ebx, 0x3b9aca00
sub ebx, esi
cmp ebx, 0x3b9aca00
jb 0x14000a5a5
shr ebx, 9
imul rcx, rbx, 0x44b83
shr rcx, 0x27
add rax, rcx
jb 0x14000d243
cmp rax, 0x19
jb 0x14000d245
lea rcx, [rsp + 0x340]
call fcn.14003b020
cmp byte [rsp + 0x340], 0x12
jne 0x14000d243
call fcn.140006d80
lea rcx, [rsp + 0x640]
call fcn.1400262e0
mov rdi, qword [rsp + 0x650]
test rdi, rdi
js 0x14000d243
mov r12, qword [rsp + 0x648]
je 0x14000a615
movzx eax, byte [0x1400ec9e8]
xor ecx, ecx
mov rdx, rdi
call fcn.140033a00
mov rbx, rax
test rax, rax
jne 0x14000a61a
jmp 0x14000d243
mov ebx, 1
movabs r15, 0x8000000000000001
mov rcx, rbx
mov rdx, r12
mov r8, rdi
call fcn.14003f740
movzx eax, byte [rsp + 0x658]
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xf0], rdi
mov byte [rsp + 0xf8], al
lea rax, [0x1400ccea4]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0x8109f16f
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.140006240
movabs rcx, 0x2a3faaa1bb92ad91
xor rcx, qword [rax]
mov edx, 0x32174794
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x26
shr eax, 8
xor al, 0xf6
mov qword [rsp + 0x340], rcx
mov dword [rsp + 0x348], edx
mov byte [rsp + 0x34c], r8b
mov byte [rsp + 0x34d], al
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x340]
mov r8d, 0xe
call fcn.140027160
mov r14, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
lea rcx, [rsp + 0x8a0]
mov rdx, r14
mov r8, rdi
xor r9d, r9d
call fcn.1400288e0
cmp dword [rsp + 0x8a0], 2
jne 0x14000c7e0
mov rbx, qword [rsp + 0x8a8]
movabs rax, 0xffffffff00000003
and rax, rbx
movabs rcx, 0x78000000002
cmp rax, rcx
jne 0x14000a801
lea rcx, [rsp + 0x340]
mov rdx, r14
mov r8, rdi
mov r9d, 0x200000
call fcn.1400288e0
cmp dword [rsp + 0x340], 2
jne 0x14000a7d6
mov rdi, qword [rsp + 0x348]
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000a801
mov r14, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14000a79b
mov rcx, r14
call rax
dec rdi
cmp qword [rsi + 8], 0
je 0x14000a7c2
cmp qword [rsi + 0x10], 0x11
jb 0x14000a7b0
mov r14, qword [r14 - 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000a801
movq xmm0, qword [rsp + 0x38c]
pshufd xmm0, xmm0, 0x50
movdqa xmm1, xmmword [0x14004f090]
pand xmm0, xmm1
pcmpeqd xmm0, xmm1
movmskpd eax, xmm0
cmp eax, 3
jne 0x14000c7e0
mov eax, ebx
and eax, 3
cmp eax, 1
jne 0x14000a859
mov rdi, qword [rbx - 1]
mov rsi, qword [rbx + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14000a820
mov rcx, rdi
call rax
dec rbx
cmp qword [rsi + 8], 0
je 0x14000a847
cmp qword [rsi + 0x10], 0x11
jb 0x14000a835
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400da718]
mov rcx, rax
shr rcx, 8
mov byte [rsp + 0x340], al
mov rdx, rax
shr rdx, 0x38
mov byte [rsp + 0x347], dl
shr rax, 0x28
mov word [rsp + 0x345], ax
mov dword [rsp + 0x341], ecx
mov qword [rsp + 0x348], 0x20
lea rax, [0x1400da738]
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], 0x20
mov qword [rsp + 0x360], 1
mov qword [rsp + 0x368], 0
mov qword [rsp + 0x370], 1
mov qword [rsp + 0x378], 0
movapd xmm0, xmmword [0x14004f0a0]
movupd xmmword [rsp + 0x380], xmm0
mov word [rsp + 0x390], 0x213
movabs rax, 0x4c0000004c00
mov qword [rsp + 0x398], rax
mov dword [rsp + 0x3a0], 0x1300
lea rsi, [rsp + 0x8a0]
lea rdx, [rsp + 0x340]
mov rcx, rsi
call fcn.14000db60
mov r9, qword [rsp + 0x8a0]
lea rax, [r15 - 1]
cmp r9, rax
je 0x14000b01a
movzx eax, byte [rsp + 0x8a8]
movzx ecx, byte [rsp + 0x8af]
shl ecx, 0x10
movzx edx, word [rsp + 0x8ad]
or edx, ecx
mov r8d, dword [rsp + 0x8a9]
shl rdx, 0x28
shl r8, 8
or r8, rdx
or r8, rax
cmp qword [rsp + 0x8b0], 0x20
jne 0x14000b006
mov qword [rsp + 0x108], r9
mov qword [rsp + 0x2d8], r12
movzx eax, byte [r8]
mov byte [rsp + 0x65], al
movzx ecx, byte [r8 + 1]
movzx edx, byte [r8 + 2]
movzx r9d, byte [r8 + 3]
mov byte [rsp + 0xa8], r9b
movzx r9d, byte [r8 + 4]
movzx r10d, byte [r8 + 5]
movzx r11d, byte [r8 + 6]
movzx ebx, byte [r8 + 7]
movzx esi, byte [r8 + 8]
movzx edi, byte [r8 + 9]
movzx r15d, byte [r8 + 0xa]
movzx r12d, byte [r8 + 0xb]
movzx r13d, byte [r8 + 0xc]
movzx r14d, byte [r8 + 0xd]
movzx eax, byte [r8 + 0xe]
mov byte [rsp + 0xd8], al
movzx eax, byte [r8 + 0xf]
mov byte [rsp + 0xd0], al
movzx eax, byte [r8 + 0x10]
mov byte [rsp + 0xa4], al
movzx eax, byte [r8 + 0x11]
mov byte [rsp + 0xa0], al
movzx eax, byte [r8 + 0x12]
mov byte [rsp + 0x9c], al
movzx eax, byte [r8 + 0x13]
mov byte [rsp + 0x98], al
movzx eax, byte [r8 + 0x14]
mov byte [rsp + 0x70], al
movzx eax, byte [r8 + 0x15]
mov byte [rsp + 0x6f], al
movzx eax, byte [r8 + 0x16]
mov byte [rsp + 0x6e], al
movzx eax, byte [r8 + 0x17]
mov byte [rsp + 0x6d], al
movzx eax, byte [r8 + 0x18]
mov byte [rsp + 0x6c], al
movzx eax, byte [r8 + 0x19]
mov byte [rsp + 0x6b], al
movzx eax, byte [r8 + 0x1a]
mov byte [rsp + 0x6a], al
movzx eax, byte [r8 + 0x1b]
mov byte [rsp + 0x69], al
movzx eax, byte [r8 + 0x1c]
mov byte [rsp + 0x68], al
movzx eax, byte [r8 + 0x1d]
mov byte [rsp + 0x67], al
movzx eax, byte [r8 + 0x1e]
mov byte [rsp + 0x66], al
mov qword [rsp + 0x100], r8
movzx r8d, byte [r8 + 0x1f]
movzx eax, byte [rsp + 0x65]
mov byte [rsp + 0x90], al
mov byte [rsp + 0x8f], cl
mov byte [rsp + 0x8e], dl
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x8d], al
mov byte [rsp + 0x8c], r9b
mov byte [rsp + 0x8b], r10b
mov byte [rsp + 0x8a], r11b
mov byte [rsp + 0x89], bl
mov byte [rsp + 0x88], sil
mov byte [rsp + 0x87], dil
mov byte [rsp + 0x86], r15b
mov byte [rsp + 0x85], r12b
mov byte [rsp + 0x84], r13b
mov byte [rsp + 0x83], r14b
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x82], al
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x81], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x80], al
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x7f], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x7e], al
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x6d]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x6b]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x6a]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x69]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0x72], al
mov byte [rsp + 0x71], r8b
movzx eax, byte [0x1400ec9e8]
mov edx, 0x8b010
xor ecx, ecx
call fcn.140033a00
test rax, rax
je 0x14000d243
lea rdx, [0x14004f708]
mov r8d, 0x8b010
mov qword [rsp + 0xd8], rax
mov rcx, rax
call fcn.14003f740
movzx ebx, byte [rsp + 0x90]
movzx esi, byte [rsp + 0x8f]
movzx edi, byte [rsp + 0x8e]
movzx r15d, byte [rsp + 0x8d]
movzx r12d, byte [rsp + 0x8c]
movzx r13d, byte [rsp + 0x8b]
movzx ecx, byte [rsp + 0x8a]
movzx edx, byte [rsp + 0x89]
movzx r8d, byte [rsp + 0x88]
movzx r9d, byte [rsp + 0x87]
movzx r10d, byte [rsp + 0x86]
movzx r11d, byte [rsp + 0x85]
movzx r14d, byte [rsp + 0x84]
movzx eax, byte [rsp + 0x83]
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0x82]
mov byte [rsp + 0xd0], al
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0x7f]
mov byte [rsp + 0x9c], al
movzx eax, byte [rsp + 0x7e]
mov byte [rsp + 0x98], al
movzx eax, byte [rsp + 0x7d]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x7c]
mov byte [rsp + 0x6f], al
movzx eax, byte [rsp + 0x7b]
mov byte [rsp + 0x6e], al
movzx eax, byte [rsp + 0x7a]
mov byte [rsp + 0x6d], al
movzx eax, byte [rsp + 0x79]
mov byte [rsp + 0x6c], al
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x6b], al
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x6a], al
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x69], al
movzx eax, byte [rsp + 0x75]
mov byte [rsp + 0x68], al
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0x73]
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x72]
mov byte [rsp + 0x65], al
movzx eax, byte [rsp + 0x71]
mov byte [rsp + 0x97], al
movzx eax, byte [section..data]
cmp al, 0xff
je 0x14000b18b
xorps xmm8, xmm8
movaps xmmword [rsp + 0x180], xmm8
movaps xmmword [rsp + 0x170], xmm8
movaps xmmword [rsp + 0x160], xmm8
movaps xmmword [rsp + 0x150], xmm8
movups xmm0, xmmword [str.expand_32_byte_k]
movaps xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x120], bl
mov byte [rsp + 0x121], sil
mov byte [rsp + 0x122], dil
mov byte [rsp + 0x123], r15b
mov byte [rsp + 0x124], r12b
mov byte [rsp + 0x125], r13b
mov byte [rsp + 0x126], cl
mov byte [rsp + 0x127], dl
mov byte [rsp + 0x128], r8b
mov byte [rsp + 0x129], r9b
mov byte [rsp + 0x12a], r10b
mov byte [rsp + 0x12b], r11b
mov byte [rsp + 0x12c], r14b
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x12d], al
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x12e], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x12f], al
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x130], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x131], al
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x132], al
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x133], al
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x134], al
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0x135], al
movzx eax, byte [rsp + 0x6d]
mov byte [rsp + 0x136], al
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x137], al
movzx eax, byte [rsp + 0x6b]
mov byte [rsp + 0x138], al
movzx eax, byte [rsp + 0x6a]
mov byte [rsp + 0x139], al
movzx eax, byte [rsp + 0x69]
mov byte [rsp + 0x13a], al
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x13b], al
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x13c], al
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0x13d], al
movzx eax, byte [rsp + 0x65]
mov byte [rsp + 0x13e], al
movzx eax, byte [rsp + 0x97]
mov byte [rsp + 0x13f], al
mov dword [rsp + 0x140], 0
movabs rax, 0xfb8a42552aa25564
mov qword [rsp + 0x144], rax
mov dword [rsp + 0x14c], 0xfee5a606
mov byte [rsp + 0x190], 0
movaps xmmword [rsp + 0xc0], xmm8
movaps xmmword [rsp + 0xb0], xmm8
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0xb0]
mov r8d, 0x20
call fcn.14001c9b0
movzx eax, byte [0x1400ec001]
cmp al, 1
je 0x14000b204
movzx eax, al
cmp eax, 0xff
je 0x14000b1f7
xorps xmm0, xmm0
movaps xmmword [rsp + 0x220], xmm0
mov dword [rsp + 0x230], 0
mov edi, 0x3ffffff
and edi, dword [rsp + 0xb0]
mov ebx, dword [rsp + 0xb3]
mov r15d, dword [rsp + 0xb6]
shr ebx, 2
and ebx, 0x3ffff03
shr r15d, 4
and r15d, 0x3ffc0ff
mov r13d, dword [rsp + 0xb9]
shr r13d, 6
and r13d, 0x3f03fff
mov r12d, dword [rsp + 0xbc]
shr r12d, 8
and r12d, 0xfffff
mov eax, dword [rsp + 0xc0]
movsd xmm8, qword [rsp + 0xc4]
mov ecx, dword [rsp + 0xcc]
mov dword [rsp + 0xd0], ecx
mov qword [rsp + 0xa8], rax
mov esi, eax
shr esi, 8
jmp 0x14000b968
test r9, r9
je 0x14000b01a
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400cfa1c]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0xa9d5404b
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.140006280
movabs rcx, 0xfe2711f14726a264
xor rcx, qword [rax]
movabs rdx, 0xa19d3b279f3ec05d
xor rdx, qword [rax + 8]
mov r8d, 0xd9c2d33b
xor r8d, dword [rax + 0x10]
movzx r9d, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
mov r10d, eax
shr r10d, 8
xor al, 0xc9
xor r10b, 0xaf
xor r9b, 0x1b
mov qword [rsp + 0x8a0], rcx
mov qword [rsp + 0x8a8], rdx
mov dword [rsp + 0x8b0], r8d
mov byte [rsp + 0x8b4], al
mov byte [rsp + 0x8b5], r10b
mov byte [rsp + 0x8b6], r9b
mov qword [rsp + 0x660], rsi
mov qword [rsp + 0x668], 0x17
lea rax, [rsp + 0x660]
mov qword [rsp + 0x110], rax
lea rax, [0x140004560]
mov qword [rsp + 0x118], rax
lea rax, [0x14004f698]
mov qword [rsp + 0x340], rax
mov qword [rsp + 0x348], 2
mov qword [rsp + 0x360], 0
lea rax, [rsp + 0x110]
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], 1
lea rcx, [rsp + 0x340]
call fcn.1400291c0
cmp qword [rsp + 0xe0], 0
je 0x14000b16b
mov r8, qword [rsp + 0xe8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x640], 0
je 0x14000d1e4
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, r12
jmp 0x14000d1de
mov byte [rsp + 0x96], cl
mov byte [rsp + 0x95], dl
mov byte [rsp + 0x94], r8b
mov byte [rsp + 0x93], r9b
mov byte [rsp + 0x92], r10b
mov byte [rsp + 0x91], r11b
call fcn.14004a820
movzx r11d, byte [rsp + 0x91]
movzx r10d, byte [rsp + 0x92]
movzx r9d, byte [rsp + 0x93]
movzx r8d, byte [rsp + 0x94]
movzx edx, byte [rsp + 0x95]
movzx ecx, byte [rsp + 0x96]
jmp 0x14000ad5b
call fcn.14004af20
test al, al
je 0x14000af6a
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0xb0]
call fcn.14001ff10
movaps xmm6, xmmword [rsp + 0x8a0]
movaps xmm7, xmmword [rsp + 0x8b0]
movaps xmm0, xmmword [rsp + 0x8c0]
movdqa xmm1, xmmword [rsp + 0x8d0]
movaps xmmword [rsp + 0x7e0], xmm0
movdqa xmmword [rsp + 0x7f0], xmm1
movaps xmm0, xmmword [rsp + 0x8e0]
movaps xmmword [rsp + 0x800], xmm0
movaps xmm0, xmmword [rsp + 0x8f0]
movaps xmmword [rsp + 0x810], xmm0
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0x7e0]
mov r8, rdx
call fcn.14001e040
movaps xmm11, xmmword [rsp + 0x8a0]
movaps xmm12, xmmword [rsp + 0x8b0]
movaps xmm9, xmmword [rsp + 0x8c0]
movaps xmm10, xmmword [rsp + 0x8d0]
mov qword [rsp + 0x20], 0x3ffffff
lea r12, [rsp + 0x840]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, r12
mov rdx, 0xffffffffffffffff
call fcn.14001e6a0
movaps xmmword [rsp + 0x830], xmm12
movaps xmmword [rsp + 0x820], xmm11
lea r15, [rsp + 0x220]
lea rdx, [rsp + 0x820]
mov rcx, r15
mov r8, r12
call fcn.14001e9f0
mov qword [rsp + 0x20], 0x1a
lea r12, [rsp + 0x880]
mov edx, 0x40
mov r8d, 0x1a
mov r9d, 0x1a
mov rcx, r12
call fcn.14001e6a0
movaps xmmword [rsp + 0x870], xmm12
movaps xmmword [rsp + 0x860], xmm11
lea r13, [rsp + 0x7c0]
lea rdx, [rsp + 0x860]
mov rcx, r13
mov r8, r12
call fcn.14001ff90
lea r12, [rsp + 0x200]
mov rcx, r12
mov rdx, r13
call fcn.14001ea10
lea rcx, [rsp + 0x660]
mov rdx, r15
mov r8, r12
call fcn.14001e710
movaps xmm11, xmmword [rsp + 0x660]
movaps xmm12, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x290], xmm12
movaps xmmword [rsp + 0x280], xmm11
lea r15, [rsp + 0x240]
lea rdx, [rsp + 0x280]
mov rcx, r15
call fcn.14001ffb0
lea r12, [rsp + 0x2e0]
mov rcx, r12
mov rdx, r15
call fcn.14001ea10
movaps xmmword [rsp + 0x790], xmm10
movaps xmmword [rsp + 0x780], xmm9
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x780]
mov r8, r12
call fcn.14001e710
movaps xmm9, xmmword [rsp + 0x660]
movaps xmm10, xmmword [rsp + 0x670]
mov qword [rsp + 0x20], 0xffffffffffffffff
lea r12, [rsp + 0x660]
mov edx, 0x3ffffff
mov rcx, r12
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffffffff
call fcn.14001e6a0
movaps xmmword [rsp + 0x1b0], xmm12
movaps xmmword [rsp + 0x1a0], xmm11
lea r15, [rsp + 0x620]
lea rdx, [rsp + 0x1a0]
mov rcx, r15
mov r8, r12
call fcn.14001e9f0
mov qword [rsp + 0x20], 0x1a
lea r12, [rsp + 0x200]
mov edx, 0x40
mov r8d, 0x40
mov r9d, 0x40
mov rcx, r12
call fcn.14001e6a0
movaps xmmword [rsp + 0x230], xmm10
movaps xmmword [rsp + 0x220], xmm9
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x220]
mov r8, r12
call fcn.14001ff90
movaps xmm11, xmmword [rsp + 0x660]
movaps xmm12, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x290], xmm12
movaps xmmword [rsp + 0x280], xmm11
lea r12, [rsp + 0x780]
lea r8, [rsp + 0x280]
mov rcx, r12
mov rdx, r15
call fcn.14001e710
movaps xmmword [rsp + 0x250], xmm12
movaps xmmword [rsp + 0x240], xmm11
lea r15, [rsp + 0x2e0]
lea rdx, [rsp + 0x240]
mov rcx, r15
call fcn.14001ffd0
lea rcx, [rsp + 0x660]
mov rdx, r12
mov r8, r15
call fcn.14001e710
movaps xmm11, xmmword [rsp + 0x660]
movaps xmm12, xmmword [rsp + 0x670]
mov qword [rsp + 0x20], 0x3ffffff
mov qword [rsp + 0xa8], 0
lea r12, [rsp + 0x660]
mov rcx, r12
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.14001e6a0
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm9
lea r15, [rsp + 0x7c0]
lea rdx, [rsp + 0x1a0]
mov rcx, r15
mov r8, r12
call fcn.14001e9f0
mov qword [rsp + 0x20], 0x3ffffff
lea r13, [rsp + 0x860]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, r13
mov rdx, 0xffffffffffffffff
call fcn.14001e6a0
movaps xmmword [rsp + 0x850], xmm12
movaps xmmword [rsp + 0x840], xmm11
lea r12, [rsp + 0x620]
lea rdx, [rsp + 0x840]
mov rcx, r12
mov r8, r13
call fcn.14001e9f0
mov qword [rsp + 0x20], 0x1a
lea r13, [rsp + 0x220]
mov edx, 0x40
mov r8d, 0x1a
mov r9d, 0x1a
mov rcx, r13
call fcn.14001e6a0
movaps xmmword [rsp + 0x890], xmm12
movaps xmmword [rsp + 0x880], xmm11
lea rbx, [rsp + 0x200]
lea rdx, [rsp + 0x880]
mov rcx, rbx
mov r8, r13
call fcn.14001ff90
lea r13, [rsp + 0x280]
mov rcx, r13
mov rdx, rbx
call fcn.14001ea10
lea rcx, [rsp + 0x660]
mov rdx, r12
mov r8, r13
call fcn.14001e710
movaps xmm9, xmmword [rsp + 0x660]
movaps xmm10, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x250], xmm10
movaps xmmword [rsp + 0x240], xmm9
lea rbx, [rsp + 0x780]
lea rdx, [rsp + 0x240]
mov rcx, rbx
call fcn.14001ffb0
lea r13, [rsp + 0x2e0]
mov rcx, r13
mov rdx, rbx
call fcn.14001ea10
lea r12, [rsp + 0x820]
mov rcx, r12
mov rdx, r15
mov r8, r13
call fcn.14001e710
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rbx, [rsp + 0x660]
mov edx, 0x3ffffff
mov rcx, rbx
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffffffff
call fcn.14001e6a0
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm9
lea r13, [rsp + 0xae0]
lea rdx, [rsp + 0x1a0]
mov rcx, r13
mov r8, rbx
call fcn.14001e9f0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x28], 6
mov dword [rsp + 0x20], 0
lea rbx, [rsp + 0x240]
mov rcx, rbx
xor edx, edx
mov r8d, 6
mov r9d, 4
call fcn.14001dfb0
lea r15, [rsp + 0x1a0]
mov rcx, r15
mov rdx, r13
mov r8, rbx
call fcn.14001dff0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x28], 6
mov dword [rsp + 0x20], 0
lea rbx, [rsp + 0x780]
mov rcx, rbx
xor edx, edx
mov r8d, 6
mov r9d, 4
call fcn.14001dfb0
lea r13, [rsp + 0x660]
mov rcx, r13
mov rdx, r12
mov r8, rbx
call fcn.14001dff0
lea rcx, [rsp + 0x2e0]
mov rdx, r15
mov r8, r13
call fcn.14001fff0
movaps xmm9, xmmword [rsp + 0x2e0]
movaps xmm10, xmmword [rsp + 0x2f0]
movaps xmmword [rsp + 0x210], xmm10
movaps xmmword [rsp + 0x200], xmm9
lea rbx, [rsp + 0x280]
lea rdx, [rsp + 0x200]
mov rcx, rbx
call fcn.14001df90
movaps xmmword [rsp + 0x630], xmm10
movaps xmmword [rsp + 0x620], xmm9
lea r15, [rsp + 0x240]
lea rdx, [rsp + 0x620]
mov rcx, r15
mov r8, rbx
call fcn.14001df70
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea rbx, [rsp + 0x2e0]
mov rcx, rbx
mov edx, 4
mov r8d, 3
mov r9d, 2
call fcn.14001dfb0
lea rcx, [rsp + 0x8a0]
mov rdx, r15
mov r8, rbx
call fcn.14001dff0
movaps xmm11, xmmword [rsp + 0x8a0]
movaps xmm12, xmmword [rsp + 0x8b0]
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm9
movaps xmmword [rsp + 0x670], xmm12
movaps xmmword [rsp + 0x660], xmm11
lea rcx, [rsp + 0x780]
lea rdx, [rsp + 0x1a0]
lea r8, [rsp + 0x660]
call fcn.14001e010
movaps xmmword [rsp + 0x8b0], xmm12
movaps xmmword [rsp + 0x8a0], xmm11
lea rcx, [rsp + 0x7a0]
lea rdx, [rsp + 0x8a0]
call fcn.14001e030
movaps xmmword [rsp + 0x1a0], xmm8
movaps xmmword [rsp + 0x1b0], xmm8
movaps xmmword [rsp + 0x1c0], xmm8
movaps xmmword [rsp + 0x1d0], xmm8
movups xmmword [rsp + 0x1d9], xmm8
mov r14, qword [rsp + 0xd8]
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x7d0], eax
movaps xmm0, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0x7c0], xmm0
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x8a0]
mov r8d, 0x108
call fcn.14003f740
movaps xmm0, xmmword [rsp + 0x7e0]
movaps xmm1, xmmword [rsp + 0x7f0]
movaps xmm2, xmmword [rsp + 0x800]
movaps xmm3, xmmword [rsp + 0x810]
movaps xmmword [rsp + 0x240], xmm0
movaps xmmword [rsp + 0x250], xmm1
movaps xmmword [rsp + 0x260], xmm2
movaps xmmword [rsp + 0x270], xmm3
movaps xmm0, xmmword [rsp + 0x780]
movaps xmm1, xmmword [rsp + 0x790]
movaps xmm2, xmmword [rsp + 0x7a0]
movaps xmm3, xmmword [rsp + 0x7b0]
movaps xmmword [rsp + 0x280], xmm0
movaps xmmword [rsp + 0x290], xmm1
movaps xmmword [rsp + 0x2a0], xmm2
movaps xmmword [rsp + 0x2b0], xmm3
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmm1, xmmword [rsp + 0x1b0]
movaps xmm2, xmmword [rsp + 0x1c0]
movaps xmm3, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x2e0], xmm0
movaps xmmword [rsp + 0x2f0], xmm1
movaps xmmword [rsp + 0x300], xmm2
movaps xmmword [rsp + 0x310], xmm3
movups xmm0, xmmword [rsp + 0x1d9]
movups xmmword [rsp + 0x319], xmm0
mov rax, qword [rsp + 0x62f]
mov qword [rsp + 0x20f], rax
movups xmm0, xmmword [rsp + 0x620]
movaps xmmword [rsp + 0x200], xmm0
mov byte [rsp + 0xb0], 0
mov byte [rsp + 0xb1], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 0
mov byte [rsp + 0xb4], 0
mov byte [rsp + 0xb5], 0
mov byte [rsp + 0xb6], 0
mov byte [rsp + 0xb7], 0
mov byte [rsp + 0xb8], 0
mov byte [rsp + 0xb9], 0
mov byte [rsp + 0xba], 0
mov byte [rsp + 0xbb], 0
mov byte [rsp + 0xbc], 0
mov byte [rsp + 0xbd], 0
mov byte [rsp + 0xbe], 0
mov byte [rsp + 0xbf], 0
mov byte [rsp + 0xc0], 0
mov byte [rsp + 0xc1], 0
mov byte [rsp + 0xc2], 0
mov byte [rsp + 0xc3], 0
mov byte [rsp + 0xc4], 0
mov byte [rsp + 0xc5], 0
mov byte [rsp + 0xc6], 0
mov byte [rsp + 0xc7], 0
mov byte [rsp + 0xc8], 0
mov byte [rsp + 0xc9], 0
mov byte [rsp + 0xca], 0
mov byte [rsp + 0xcb], 0
mov byte [rsp + 0xcc], 0
mov byte [rsp + 0xcd], 0
mov byte [rsp + 0xce], 0
mov byte [rsp + 0xcf], 0
mov dword [rsp + 0x140], 1
mov byte [rsp + 0x190], 0
lea rcx, [rsp + 0x580]
lea rdx, [rsp + 0x110]
mov r8d, 0x84
call fcn.14003f740
mov rax, qword [rsp + 0xa8]
mov byte [rsp + 0x340], al
mov eax, esi
shr eax, 0x10
mov byte [rsp + 0x343], al
mov word [rsp + 0x341], si
movlps qword [rsp + 0x344], xmm8
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x34c], eax
mov dword [rsp + 0x350], edi
mov dword [rsp + 0x354], ebx
mov dword [rsp + 0x358], r15d
mov dword [rsp + 0x35c], r13d
mov dword [rsp + 0x360], r12d
movaps xmm0, xmmword [rsp + 0x7c0]
movups xmmword [rsp + 0x364], xmm0
mov eax, dword [rsp + 0x7d0]
mov dword [rsp + 0x374], eax
lea rcx, [rsp + 0x378]
mov r8d, 0x108
lea rdx, [rsp + 0x660]
call fcn.14003f740
movaps xmmword [rsp + 0x490], xmm7
movaps xmmword [rsp + 0x480], xmm6
movaps xmm0, xmmword [rsp + 0x240]
movaps xmm1, xmmword [rsp + 0x250]
movaps xmm2, xmmword [rsp + 0x260]
movaps xmm3, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x4a0], xmm0
movaps xmmword [rsp + 0x4b0], xmm1
movaps xmmword [rsp + 0x4c0], xmm2
movaps xmmword [rsp + 0x4d0], xmm3
movaps xmm0, xmmword [rsp + 0x280]
movaps xmm1, xmmword [rsp + 0x290]
movaps xmm2, xmmword [rsp + 0x2a0]
movaps xmm3, xmmword [rsp + 0x2b0]
movaps xmmword [rsp + 0x4e0], xmm0
movaps xmmword [rsp + 0x4f0], xmm1
movaps xmmword [rsp + 0x500], xmm2
movaps xmmword [rsp + 0x510], xmm3
movups xmm0, xmmword [rsp + 0x319]
movups xmmword [rsp + 0x559], xmm0
movaps xmm0, xmmword [rsp + 0x2e0]
movdqa xmm1, xmmword [rsp + 0x2f0]
movaps xmm2, xmmword [rsp + 0x300]
movaps xmm3, xmmword [rsp + 0x310]
movaps xmmword [rsp + 0x550], xmm3
movaps xmmword [rsp + 0x540], xmm2
movdqa xmmword [rsp + 0x530], xmm1
movaps xmmword [rsp + 0x520], xmm0
mov rax, qword [rsp + 0x20f]
mov qword [rsp + 0x578], rax
movapd xmm0, xmmword [rsp + 0x200]
movupd xmmword [rsp + 0x569], xmm0
movzx eax, byte [0x1400ec001]
movzx eax, byte [0x1400ec001]
cmp al, 1
jne 0x14000bdeb
mov esi, 0x8b000
lea r12, [rsp + 0x340]
mov r13, r14
jmp 0x14000bda5
mov rcx, r12
mov rdx, r13
call fcn.14001fc30
add r13, 0x40
add rsi, 0xffffffffffffffc0
je 0x14000be19
cmp qword [rsp + 0x560], 0
je 0x14000bd90
mov rcx, r12
mov rdx, r13
call fcn.14001f600
lea rdx, [r13 + 0x10]
mov rcx, r12
call fcn.14001f600
lea rdx, [r13 + 0x20]
mov rcx, r12
call fcn.14001f600
lea rdx, [r13 + 0x30]
mov rcx, r12
call fcn.14001f600
add r13, 0x40
add rsi, 0xffffffffffffffc0
jne 0x14000bda5
jmp 0x14000be19
xor esi, esi
lea r15, [rsp + 0x340]
nop word cs:[rax + rax]
lea rdx, [r14 + rsi]
add rsi, 0x10
mov rcx, r15
call fcn.14001fcf0
cmp rsi, 0x8b000
jne 0x14000be00
mov qword [rsp + 0x8a0], 0
mov qword [rsp + 0x8a8], 0x8b000
movzx eax, byte [0x1400ec001]
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0x8a0]
cmp al, 1
jne 0x14000be53
call fcn.14001f600
jmp 0x14000be58
call fcn.14001fcf0
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0x340]
mov r8d, 0x240
call fcn.14003f740
movzx eax, byte [0x1400ec001]
cmp al, 1
jne 0x14000bf39
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x8a0]
call fcn.14001ea20
movzx eax, byte [rsp + 0x660]
movzx edi, byte [rsp + 0x661]
movzx r13d, byte [rsp + 0x662]
movzx esi, byte [rsp + 0x663]
movzx r12d, byte [rsp + 0x664]
movzx ecx, byte [rsp + 0x665]
mov dword [rsp + 0x98], ecx
movzx ecx, byte [rsp + 0x666]
mov dword [rsp + 0x9c], ecx
movzx ecx, byte [rsp + 0x667]
mov dword [rsp + 0xa0], ecx
movzx r15d, byte [rsp + 0x668]
movzx ecx, byte [rsp + 0x669]
mov dword [rsp + 0xa4], ecx
movzx ecx, byte [rsp + 0x66a]
mov dword [rsp + 0xd0], ecx
movzx ecx, byte [rsp + 0x66b]
mov dword [rsp + 0xd8], ecx
movzx ecx, byte [rsp + 0x66c]
mov qword [rsp + 0xa8], rcx
jmp 0x14000c110
mov r11d, dword [rsp + 0x8c8]
mov ecx, r11d
shr ecx, 0x1a
and r11d, 0x3ffffff
add ecx, dword [rsp + 0x8cc]
mov edx, ecx
shr edx, 0x1a
and ecx, 0x3ffffff
add edx, dword [rsp + 0x8d0]
mov eax, edx
shr eax, 0x1a
add eax, dword [rsp + 0x8d4]
and edx, 0x3ffffff
mov r9d, eax
shr r9d, 0x1a
mov r8d, eax
and r8d, 0x3ffffff
lea r10d, [r9 + r9*4]
add r10d, dword [rsp + 0x8c4]
mov r9d, r10d
shr r9d, 0x1a
add r9d, r11d
and r10d, 0x3ffffff
lea edi, [r10 + 5]
mov r11d, edi
shr r11d, 0x1a
add r11d, r9d
mov esi, r11d
shr esi, 0x1a
add esi, ecx
mov r13, r14
mov r14d, esi
shr r14d, 0x1a
add r14d, edx
mov r15d, r14d
shr r15d, 0x1a
lea ebx, [r15 + r8]
add ebx, 0xfc000000
add r15d, r8d
mov r8d, ebx
sar r8d, 0x1f
shr ebx, 0x1f
dec ebx
mov r12d, ebx
and r12d, 0x3ffffff
and edi, r12d
and r11d, r12d
and esi, r12d
and r12d, r14d
mov r14, r13
and ebx, r15d
and r10d, r8d
or r10d, edi
and r9d, r8d
or r9d, r11d
and ecx, r8d
or ecx, esi
and edx, r8d
or edx, r12d
and r8d, eax
or r8d, ebx
mov eax, r9d
shl eax, 0x1a
or eax, r10d
shr r9d, 6
mov r10d, ecx
shl r10d, 0x14
or r10d, r9d
shr ecx, 0xc
mov r9d, edx
shl r9d, 0xe
or r9d, ecx
shr edx, 0x12
shl r8d, 8
or r8d, edx
add eax, dword [rsp + 0x8a0]
mov r12d, dword [rsp + 0x8a4]
adc r12, r10
mov ecx, dword [rsp + 0x8a8]
add rcx, r9
mov r15, r12
shr r15, 0x20
add r15, rcx
mov ecx, dword [rsp + 0x8ac]
add rcx, r8
mov rdx, r15
shr rdx, 0x20
add rdx, rcx
mov dword [rsp + 0x660], eax
mov dword [rsp + 0x664], r12d
mov dword [rsp + 0x668], r15d
mov qword [rsp + 0xa8], rdx
mov dword [rsp + 0x66c], edx
mov edi, eax
shr edi, 8
mov r13d, eax
shr r13d, 0x10
mov esi, eax
shr esi, 0x18
mov ecx, r12d
shr ecx, 8
mov dword [rsp + 0x98], ecx
mov ecx, r12d
shr ecx, 0x10
mov dword [rsp + 0x9c], ecx
mov ecx, r12d
shr ecx, 0x18
mov dword [rsp + 0xa0], ecx
mov ecx, r15d
shr ecx, 8
mov dword [rsp + 0xa4], ecx
mov ecx, r15d
shr ecx, 0x10
mov dword [rsp + 0xd0], ecx
mov ecx, r15d
shr ecx, 0x18
mov dword [rsp + 0xd8], ecx
cmp al, byte [r14 + 0x8b000]
sete cl
call fcn.14001df60
mov ebx, eax
cmp dil, byte [r14 + 0x8b001]
sete cl
call fcn.14001df60
and bl, al
cmp r13b, byte [r14 + 0x8b002]
sete cl
call fcn.14001df60
mov r13d, eax
cmp sil, byte [r14 + 0x8b003]
sete cl
call fcn.14001df60
and r13b, al
and r13b, bl
cmp r12b, byte [r14 + 0x8b004]
sete cl
call fcn.14001df60
mov r12d, eax
mov eax, dword [rsp + 0x98]
cmp al, byte [r14 + 0x8b005]
sete cl
call fcn.14001df60
and r12b, al
and r12b, r13b
mov eax, dword [rsp + 0x9c]
cmp al, byte [r14 + 0x8b006]
sete cl
call fcn.14001df60
mov r13d, eax
mov eax, dword [rsp + 0xa0]
cmp al, byte [r14 + 0x8b007]
sete cl
call fcn.14001df60
and r13b, al
cmp r15b, byte [r14 + 0x8b008]
sete cl
call fcn.14001df60
and r13b, al
and r13b, r12b
mov eax, dword [rsp + 0xa4]
cmp al, byte [r14 + 0x8b009]
sete cl
call fcn.14001df60
mov r15d, eax
mov eax, dword [rsp + 0xd0]
cmp al, byte [r14 + 0x8b00a]
sete cl
call fcn.14001df60
and r15b, al
and r15b, r13b
mov eax, dword [rsp + 0xd8]
cmp al, byte [r14 + 0x8b00b]
sete cl
call fcn.14001df60
mov r12d, eax
mov rax, qword [rsp + 0xa8]
cmp al, byte [r14 + 0x8b00c]
sete cl
call fcn.14001df60
and r12b, al
and r12b, r15b
movzx eax, byte [rsp + 0x66d]
cmp al, byte [r14 + 0x8b00d]
sete cl
call fcn.14001df60
mov ebx, eax
movzx eax, byte [rsp + 0x66e]
cmp al, byte [r14 + 0x8b00e]
sete cl
call fcn.14001df60
and bl, al
movzx eax, byte [rsp + 0x66f]
cmp al, byte [r14 + 0x8b00f]
sete cl
call fcn.14001df60
and bl, al
and bl, r12b
and bl, 1
mov ecx, ebx
call fcn.14001df60
test al, al
je 0x14000c4aa
mov r8d, 0x8b000
lea rcx, [rsp + 0x580]
mov rdx, r14
call fcn.14001c9b0
lea rcx, [rsp + 0x340]
call fcn.14001d100
mov byte [rsp + 0x90], 0
mov byte [rsp + 0x8f], 0
mov byte [rsp + 0x8e], 0
mov byte [rsp + 0x8d], 0
mov byte [rsp + 0x8c], 0
mov byte [rsp + 0x8b], 0
mov byte [rsp + 0x8a], 0
mov byte [rsp + 0x89], 0
mov byte [rsp + 0x88], 0
mov byte [rsp + 0x87], 0
mov byte [rsp + 0x86], 0
mov byte [rsp + 0x85], 0
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x83], 0
mov byte [rsp + 0x82], 0
mov byte [rsp + 0x81], 0
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x7f], 0
mov byte [rsp + 0x7e], 0
mov byte [rsp + 0x7d], 0
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x7b], 0
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x79], 0
mov byte [rsp + 0x78], 0
mov byte [rsp + 0x77], 0
mov byte [rsp + 0x76], 0
mov byte [rsp + 0x75], 0
mov byte [rsp + 0x74], 0
mov byte [rsp + 0x73], 0
mov byte [rsp + 0x72], 0
mov byte [rsp + 0x71], 0
cmp qword [rsp + 0x108], 0
je 0x14000c3b1
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, qword [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x8a0]
call fcn.1400262e0
mov rbx, qword [rsp + 0x8a8]
mov rsi, qword [rsp + 0x8b0]
lea rax, [0x1400d68bb]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0xfb9e9bad
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.1400062d0
movabs rcx, 0xcb677c234ed4746f
xor rcx, qword [rax]
movabs rdx, 0xe01e7652b882c412
xor rdx, qword [rax + 8]
movabs r8, 0x6678f213f4500638
xor r8, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
mov r9d, eax
xor r9b, 0xce
shr eax, 8
xor al, 0x6f
mov qword [rsp + 0x660], rcx
mov qword [rsp + 0x668], rdx
mov qword [rsp + 0x670], r8
mov byte [rsp + 0x678], r9b
mov byte [rsp + 0x679], al
test rsi, rsi
movabs r15, 0x8000000000000001
js 0x14000d243
mov r12, r14
je 0x14000c5c8
movzx eax, byte [0x1400ec9e8]
xor ecx, ecx
mov rdx, rsi
call fcn.140033a00
mov r14, rax
test rax, rax
jne 0x14000c5ce
jmp 0x14000d243
lea rcx, [rsp + 0x340]
call fcn.14001d100
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rsp + 0x90], 0
mov byte [rsp + 0x8f], 0
mov byte [rsp + 0x8e], 0
mov byte [rsp + 0x8d], 0
mov byte [rsp + 0x8c], 0
mov byte [rsp + 0x8b], 0
mov byte [rsp + 0x8a], 0
mov byte [rsp + 0x89], 0
mov byte [rsp + 0x88], 0
mov byte [rsp + 0x87], 0
mov byte [rsp + 0x86], 0
mov byte [rsp + 0x85], 0
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x83], 0
mov byte [rsp + 0x82], 0
mov byte [rsp + 0x81], 0
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x7f], 0
mov byte [rsp + 0x7e], 0
mov byte [rsp + 0x7d], 0
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x7b], 0
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x79], 0
mov byte [rsp + 0x78], 0
mov byte [rsp + 0x77], 0
mov byte [rsp + 0x76], 0
mov byte [rsp + 0x75], 0
mov byte [rsp + 0x74], 0
mov byte [rsp + 0x73], 0
mov byte [rsp + 0x72], 0
mov byte [rsp + 0x71], 0
cmp qword [rsp + 0x108], 0
mov r12, qword [rsp + 0x2d8]
lea rsi, [rsp + 0x8a0]
mov r8, qword [rsp + 0x100]
jne 0x14000b00b
jmp 0x14000b01a
mov r14d, 1
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.14003f740
mov qword [rsp + 0x340], rsi
mov qword [rsp + 0x348], r14
mov qword [rsp + 0x350], rsi
mov byte [rsp + 0x358], 0
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0x660]
mov r8d, 0x1a
call fcn.140027160
mov rbx, qword [rsp + 0x348]
mov rsi, qword [rsp + 0x350]
mov rdi, qword [rsp + 0x340]
lea rax, [0x1400d5f6a]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0xd51c7cfe
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.140006370
movabs rcx, 0x81cb781fab2feca2
xor rcx, qword [rax]
movabs rdx, 0x6d1355f037d5001b
xor rdx, qword [rax + 8]
mov qword [rsp + 0x340], rcx
mov qword [rsp + 0x348], rdx
lea r8, [rsp + 0x340]
mov r9d, 0x10
mov rcx, rbx
mov rdx, rsi
call fcn.140026fe0
mov rsi, rax
test rdi, rdi
je 0x14000c6cb
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, esi
and eax, 3
cmp eax, 1
mov r14, r12
jne 0x14000c726
mov rbx, qword [rsi - 1]
mov rdi, qword [rsi + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000c6ed
mov rcx, rbx
call rax
dec rsi
cmp qword [rdi + 8], 0
je 0x14000c714
cmp qword [rdi + 0x10], 0x11
jb 0x14000c702
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x8a0], 0
je 0x14000c748
mov r8, qword [rsp + 0x8a8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0xf0]
mov r9d, 0x8b000
mov r8, r14
call fcn.140026fe0
mov rsi, rax
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400d928e]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0x274ea979
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.1400060e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
test rsi, rsi
jne 0x14000d243
mov r14, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
test rdi, rdi
js 0x14000d243
je 0x14000c809
movzx eax, byte [0x1400ec9e8]
xor ecx, ecx
mov rdx, rdi
call fcn.140033a00
mov rsi, rax
test rax, rax
jne 0x14000c80e
jmp 0x14000d243
mov esi, 1
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call fcn.14003f740
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rdi
mov byte [rsp + 0x358], 0
mov qword [rsp + 0x360], 0
mov qword [rsp + 0x368], 8
mov qword [rsp + 0x370], 0
mov qword [rsp + 0x3c8], 0
mov qword [rsp + 0x3d8], 0
mov word [rsp + 0x3e0], 0
dec r15
mov qword [rsp + 0x378], r15
mov word [rsp + 0x400], 0
mov word [rsp + 0x408], 0
mov dword [rsp + 0x398], 6
mov dword [rsp + 0x3a8], 6
mov dword [rsp + 0x3b8], 6
mov qword [rsp + 0x3e8], 0
mov qword [rsp + 0x3f8], 0
mov dword [rsp + 0x404], 0x8000000
mov dword [rsp + 0x660], 0
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0x340]
lea r8, [rsp + 0x660]
call fcn.140029820
mov rsi, qword [rsp + 0x8a0]
mov r14, qword [rsp + 0x8b0]
cmp r14, 2
jne 0x14000c98c
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000ca21
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000c946
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000c96d
cmp qword [rbx + 0x10], 0x11
jb 0x14000c95b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rsp + 0x340]
jmp 0x14000ca21
mov r12, qword [rsp + 0x8a8]
mov r15, qword [rsp + 0x8b8]
mov rbx, qword [rsp + 0x8c0]
mov rax, qword [rsp + 0x8c8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x8d8]
mov qword [rsp + 0xd8], rax
mov r13, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call r13
mov rcx, r12
call r13
test r14, r14
je 0x14000c9f5
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x14000ca08
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0xa8], 0
je 0x14000ca21
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rdi, rdi
je 0x14000ca3d
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x368]
mov rdi, qword [rsp + 0x370]
test rdi, rdi
je 0x14000ca81
lea rbx, [rsi + 0x10]
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000ca69
add rbx, 0x28
dec rdi
je 0x14000ca81
cmp qword [rbx - 8], 0
je 0x14000ca60
mov r8, qword [rbx]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call r14
jmp 0x14000ca60
cmp qword [rsp + 0x360], 0
je 0x14000ca9e
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rsp + 0x3c8]
test r8, r8
je 0x14000ce04
mov rbx, qword [rsp + 0x3d0]
mov rsi, qword [rsp + 0x3d8]
test rsi, rsi
je 0x14000cd3a
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, r8
xor r8d, r8d
jmp 0x14000caef
mov r12d, 0
dec rsi
je 0x14000cdae
test r8, r8
je 0x14000cb10
movzx eax, word [r8 + 0x3d2]
cmp rbx, rax
jae 0x14000cbc0
mov r15, rbx
mov r14, r8
jmp 0x14000cbf3
test rbx, rbx
je 0x14000cb44
mov rcx, rbx
mov rax, rbx
and rcx, 7
je 0x14000cb49
and rax, 0xfffffffffffffff8
mov r8, r12
nop dword [rax + rax]
mov r8, qword [r8 + 0x3d8]
dec rcx
jne 0x14000cb30
cmp rbx, 8
jae 0x14000cb60
jmp 0x14000cb9e
mov r8, r12
jmp 0x14000cb9e
mov r8, r12
cmp rbx, 8
jb 0x14000cb9e
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r8, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000cb60
xor ebx, ebx
xor r12d, r12d
movzx eax, word [r8 + 0x3d2]
cmp rbx, rax
jb 0x14000cb05
nop word cs:[rax + rax]
mov r14, qword [r8 + 0x160]
test r14, r14
je 0x14000d22e
inc r12
movzx r15d, word [r8 + 0x3d0]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call rdi
mov r8, r14
cmp r15w, word [r14 + 0x3d2]
jae 0x14000cbc0
test r12, r12
je 0x14000cd10
mov r8, qword [r14 + r15*8 + 0x3e0]
mov rax, r12
dec rax
je 0x14000cc7e
mov rcx, rax
and rcx, 7
je 0x14000cc35
mov rax, rcx
nop dword [rax + rax]
mov r8, qword [r8 + 0x3d8]
dec rax
jne 0x14000cc20
not rcx
add rcx, r12
mov rax, rcx
add r12, 0xfffffffffffffffe
cmp r12, 7
jb 0x14000cc7e
nop
mov rcx, qword [r8 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r8, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000cc40
xor ebx, ebx
imul rax, r15, 0x38
lea r12, [r14 + rax]
add r12, 0x168
cmp qword [r14 + rax + 0x168], 0
je 0x14000ccb3
mov rax, qword [r12 + 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r13, r8
mov r8, rax
call rdi
mov r8, r13
cmp qword [r12 + 0x20], 0
je 0x14000ccd4
mov rax, qword [r12 + 0x28]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r12, r8
mov r8, rax
call rdi
mov r8, r12
shl r15, 5
mov rax, qword [r14 + r15]
shl rax, 1
test rax, rax
je 0x14000cae0
add r14, r15
mov rax, qword [r14 + 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r14, r8
mov r8, rax
call rdi
mov r8, r14
jmp 0x14000cae0
lea rbx, [r15 + 1]
mov r8, r14
imul rax, r15, 0x38
lea r12, [r14 + rax]
add r12, 0x168
cmp qword [r14 + rax + 0x168], 0
jne 0x14000cc9a
jmp 0x14000ccb3
test rbx, rbx
je 0x14000cdae
mov rcx, rbx
mov rax, rbx
and rcx, 7
je 0x14000cd5c
and rax, 0xfffffffffffffff8
nop
mov r8, qword [r8 + 0x3d8]
dec rcx
jne 0x14000cd50
cmp rbx, 8
jb 0x14000cdae
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r8, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000cd70
mov rax, qword [r8 + 0x160]
test rax, rax
je 0x14000cdef
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov rsi, rax
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call rdi
mov rax, qword [rsi + 0x160]
mov r8, rsi
test rax, rax
jne 0x14000cdd0
jmp 0x14000cdf2
mov rsi, r8
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x378]
shl rax, 1
test rax, rax
jne 0x14000ce22
mov eax, dword [rsp + 0x398]
cmp eax, 4
jb 0x14000ce58
jmp 0x14000ce45
mov r8, qword [rsp + 0x380]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [rsp + 0x398]
cmp eax, 4
jb 0x14000ce58
cmp eax, 6
je 0x14000ce58
mov rcx, qword [rsp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x3a8]
cmp eax, 4
jb 0x14000ce77
cmp eax, 6
je 0x14000ce77
mov rcx, qword [rsp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x3b8]
cmp eax, 4
jb 0x14000ce96
cmp eax, 6
je 0x14000ce96
mov rcx, qword [rsp + 0x3c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rsp + 0x3e8]
test r8, r8
je 0x14000d1a0
mov r14, qword [rsp + 0x3f0]
mov rdi, qword [rsp + 0x3f8]
test rdi, rdi
je 0x14000d0e7
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, r8
xor r8d, r8d
jmp 0x14000cef6
mov r15, r8
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rsi
call rbx
mov r8, r15
mov esi, 0
dec rdi
je 0x14000d15e
test r8, r8
je 0x14000cf20
movzx eax, word [r8 + 0x16a]
cmp r14, rax
jae 0x14000cfd0
mov r12, r14
mov r15, r8
jmp 0x14000cfff
test r14, r14
je 0x14000cf54
mov rcx, r14
mov rax, r14
and rcx, 7
je 0x14000cf59
and rax, 0xfffffffffffffff8
mov r8, rsi
nop dword [rax + rax]
mov r8, qword [r8 + 0x170]
dec rcx
jne 0x14000cf40
cmp r14, 8
jae 0x14000cf70
jmp 0x14000cfae
mov r8, rsi
jmp 0x14000cfae
mov r8, rsi
cmp r14, 8
jb 0x14000cfae
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r8, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000cf70
xor r14d, r14d
xor esi, esi
movzx eax, word [r8 + 0x16a]
cmp r14, rax
jb 0x14000cf0c
nop word cs:[rax + rax]
mov r15, qword [r8]
test r15, r15
je 0x14000d22e
inc rsi
movzx r12d, word [r8 + 0x168]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call rbx
mov r8, r15
cmp r12w, word [r15 + 0x16a]
jae 0x14000cfd0
test rsi, rsi
je 0x14000d0a0
mov r8, qword [r15 + r12*8 + 0x178]
mov rax, rsi
dec rax
je 0x14000d08e
mov rcx, rax
and rcx, 7
je 0x14000d045
mov rax, rcx
nop word cs:[rax + rax]
mov r8, qword [r8 + 0x170]
dec rax
jne 0x14000d030
not rcx
add rcx, rsi
mov rax, rcx
add rsi, 0xfffffffffffffffe
cmp rsi, 7
jb 0x14000d08e
nop
mov rcx, qword [r8 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r8, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000d050
xor r14d, r14d
jmp 0x14000d0a8
lea r14, [r12 + 1]
mov r8, r15
lea rax, [r12 + r12*2]
mov rsi, qword [r15 + rax*8 + 0x60]
mov r15, qword [r15 + rax*8 + 0x68]
mov rax, qword [r15]
test rax, rax
je 0x14000d0c9
mov rcx, rsi
mov r12, r8
call rax
mov r8, r12
cmp qword [r15 + 8], 0
je 0x14000cee8
cmp qword [r15 + 0x10], 0x11
jae 0x14000ced0
mov r15, r8
jmp 0x14000ced7
test r14, r14
je 0x14000d15e
mov rcx, r14
mov rax, r14
and rcx, 7
je 0x14000d10c
and rax, 0xfffffffffffffff8
nop dword [rax]
mov r8, qword [r8 + 0x170]
dec rcx
jne 0x14000d100
cmp r14, 8
jb 0x14000d15e
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r8, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000d120
mov rax, qword [r8]
test rax, rax
je 0x14000d18b
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov rsi, rax
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call rdi
mov rax, qword [rsi]
mov r8, rsi
test rax, rax
jne 0x14000d170
jmp 0x14000d18e
mov rsi, r8
mov rcx, qword [0x1400ec9d0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0xe0], 0
je 0x14000d1c2
mov r8, qword [rsp + 0xe8]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x640], 0
je 0x14000d1e4
mov r8, qword [rsp + 0x648]
mov rcx, qword [0x1400ec9d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
movaps xmm6, xmmword [rbp + 0xa80]
movaps xmm7, xmmword [rbp + 0xa90]
movaps xmm8, xmmword [rbp + 0xaa0]
movaps xmm9, xmmword [rbp + 0xab0]
movaps xmm10, xmmword [rbp + 0xac0]
movaps xmm11, xmmword [rbp + 0xad0]
movaps xmm12, xmmword [rbp + 0xae0]
lea rsp, [rbp + 0xaf8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov edx, 8
mov rcx, r8
call fcn.14000db40
ud2
call qword [sym.imp.KERNEL32.dll_GetLastError]
ud2
call fcn.140033990
int3