Function at 0x566590
Capabilities:
Link many functions at runtime

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd28
movdqa xmmword [rsp + 0xd10], xmm15
movdqa xmmword [rsp + 0xd00], xmm14
movdqa xmmword [rsp + 0xcf0], xmm13
movaps xmmword [rsp + 0xce0], xmm12
movdqa xmmword [rsp + 0xcd0], xmm11
movaps xmmword [rsp + 0xcc0], xmm10
movaps xmmword [rsp + 0xcb0], xmm9
movaps xmmword [rsp + 0xca0], xmm8
movaps xmmword [rsp + 0xc90], xmm7
movaps xmmword [rsp + 0xc80], xmm6
mov qword [rsp + 0x788], rcx
mov qword [rsp + 0x198], 8
xorps xmm6, xmm6
movups xmmword [rsp + 0x1a0], xmm6
movdqa xmm7, xmmword [0x00871260]
movdqa xmm8, xmmword [0x00871270]
movdqa xmm9, xmmword [0x00871280]
movdqa xmm10, xmmword [0x008712a0]
movdqa xmm12, xmmword [0x00871250]
mov ecx, 0x822ac7f5
lea r13, [rsp + 0x1c0]
lea r12, [rsp + 0x450]
lea r14, [rsp + 0x60]
xor esi, esi
cmp ecx, 0x822ac7f5
mov dword [rsp + 0x14c], ecx
je 0x5666a0
cmp ecx, 0x9fcd5834
je 0x566710
cmp ecx, 0x62bfa7fc
je 0x56f427
xor ecx, esi
jmp 0x566666
mov rsi, qword [rsp + 0x1a8]
test rsi, rsi
je 0x56b230
mov rdi, qword [rsp + 0x198]
add rdi, 0x20
jmp 0x5666cd
add rdi, 0x30
dec rsi
je 0x56b230
cmp qword [rdi - 0x18], 0
je 0x5666ed
mov r8, qword [rdi - 0x20]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [rsp + 0x14c]
cmp qword [rdi], 0
je 0x5666c0
mov r8, qword [rdi - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [rsp + 0x14c]
jmp 0x5666c0
lea rax, [0x009014e3]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x633671699ca5218d
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577a20
mov rcx, qword [rax]
movabs rdx, 0x216aa2e0bf853202
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x1b
xor r8b, 0x97
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xe5
mov qword [rsp + 0x450], rcx
mov word [rsp + 0x458], r8w
mov byte [rsp + 0x45a], dl
mov r8d, 0xb
mov rcx, r13
mov rdx, r12
call fcn.005a5310
movzx eax, byte [rsp + 0x1d8]
cmp al, 2
je 0x56f910
mov rcx, qword [rsp + 0x1c0]
mov qword [rsp + 0x440], rcx
mov r9, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1d0]
test al, al
mov qword [rsp + 0x790], rsi
mov qword [rsp + 0x6d0], r9
je 0x56b27b
lea rax, [0x009053d6]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xdb5896c21d75010e
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005775a0
mov ecx, dword [rax]
movzx edx, byte [rax + 6]
movzx eax, word [rax + 4]
mov r8d, eax
shr r8d, 8
xor al, 0x79
xor r8b, 0x33
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0x61
movzx eax, dl
mov byte [rsp + 0x1c6], al
shl rax, 0x30
movzx edx, r8w
shl rdx, 0x20
or rdx, rax
xor ecx, 0xbee7520a
mov dword [rsp + 0x1c0], ecx
shr rdx, 0x20
mov word [rsp + 0x1c4], dx
mov qword [rsp + 0x20], 7
lea rcx, [rsp + 0x7c0]
mov rdx, qword [rsp + 0x440]
mov r8, rsi
mov r9, r13
call fcn.005ab350
mov eax, 0x913b985c
xor esi, esi
jmp 0x5668cf
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov esi, 0x9571534
mov eax, dword [rsp + 0x17c]
xor eax, esi
cmp eax, 0x913b985c
je 0x566a10
cmp eax, 0x986c8d68
je 0x5668f0
cmp eax, 0x8446da9e
jne 0x5668cd
jmp 0x56b317
mov dword [rsp + 0x17c], eax
mov rdi, qword [rsp + 0x7c0]
mov rsi, qword [rsp + 0x7d0]
lea rax, [0x009010d5]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xbdca7846e0d2badd
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005781a0
movq xmm13, qword [rax]
movq xmm15, qword [rax + 8]
movq xmm14, qword [rax + 0x10]
movq xmm11, qword [rax + 0x18]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56697c
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f664
mov qword [0x009bf100], rax
mov r8d, 0x20
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f664
mov rbx, rax
punpcklqdq xmm14, xmm11
pxor xmm14, xmm9
punpcklqdq xmm13, xmm15
pxor xmm13, xmm8
movdqu xmmword [rax], xmm13
movdqu xmmword [rax + 0x10], xmm14
test rsi, rsi
je 0x5688a5
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x5669ee
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ed
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x5688ab
jmp 0x56f5ed
mov dword [rsp + 0x17c], eax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x566a3f
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f675
mov qword [0x009bf100], rax
mov r8d, 0x110
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f675
mov r15, rax
lea rax, [0x0090575a]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xbfdeb1f3d265338a
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577860
mov rcx, qword [rax]
movabs rdx, 0x37b95a7c9eca4e7e
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0xe7
shr eax, 8
xor al, 0x54
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
mov qword [rsp + 0x748], rcx
mov word [rsp + 0x750], ax
lea rax, [0x009041ad]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x6b8a0f4f630e43b8
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005787c0
mov rcx, qword [rax]
movabs rdx, 0x9e6cd0810a5e45d3
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x5f
xor r8b, 0xa5
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xe2
mov qword [rsp + 0x6d8], rcx
mov word [rsp + 0x6e0], r8w
mov byte [rsp + 0x6e2], dl
lea rax, [0x00908e21]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xaae36b5cadbd834e
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578580
mov rcx, qword [rax]
movabs rdx, 0x53f49277b0807f25
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0xea
mov qword [rsp + 0x718], rcx
mov byte [rsp + 0x720], al
lea rax, [0x0090640b]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xb6356ef3e209693e
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577570
mov rcx, qword [rax]
movabs rdx, 0xac2f57bba442b5a0
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0x37
mov qword [rsp + 0x728], rcx
mov byte [rsp + 0x730], al
lea rax, [0x0090c54f]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x6a91913f1eb5a941
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578b30
mov rcx, qword [rax]
movabs rdx, 0xbe5336bd7be44c2d
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x1f
shr eax, 8
xor al, 0xa5
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
mov qword [rsp + 0x758], rcx
mov word [rsp + 0x760], ax
lea rax, [0x009007d5]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x5fd2553a70dbbbd8
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005779f0
mov rcx, qword [rax]
movabs rdx, 0x29e8276419b0438
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xde
xor r8b, 0x48
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xd5
mov qword [rsp + 0x6e8], rcx
mov word [rsp + 0x6f0], r8w
mov byte [rsp + 0x6f2], dl
lea rax, [0x0090916b]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xd7d28f52dbddb344
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005784a0
mov rcx, qword [rax]
movabs rdx, 0xe4416e4c8ee966d5
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xf899db88
xor edx, r8d
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0xfc
xor r9b, 0xf5
movzx eax, al
movzx r9d, r9b
shl r9d, 8
or r9d, eax
not r8b
mov qword [rsp + 0xa8], rcx
mov dword [rsp + 0xb0], edx
mov word [rsp + 0xb4], r9w
mov byte [rsp + 0xb6], r8b
lea rax, [0x00901658]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x29f4320a67b14d9b
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577c10
mov rcx, qword [rax]
movabs rdx, 0xfc227a3f3c47696a
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0x2d
mov qword [rsp + 0x738], rcx
mov byte [rsp + 0x740], al
lea rax, [0x0090c8b4]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x631f6f65de2583d1
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005778d0
mov rcx, qword [rax]
movabs rdx, 0x5561ea30d9e48846
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x43
xor r8b, 0x1a
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xdc
mov qword [rsp + 0x6f8], rcx
mov word [rsp + 0x700], r8w
mov byte [rsp + 0x702], dl
lea rax, [0x00901857]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xa6682ea8f7f3fd2c
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005771f0
mov rcx, qword [rax]
movabs rdx, 0xc73cf6da761c3d40
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 9
xor r8b, 0xdf
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0x14
mov qword [rsp + 0x708], rcx
mov word [rsp + 0x710], r8w
mov byte [rsp + 0x712], dl
lea rax, [0x00904bfb]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xc4c4844a6fc2444e
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578440
mov rcx, qword [rax]
movabs rdx, 0x64ba789389260244
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x29b365895ea9a5a7
xor rdx, r8
mov r8d, dword [rax + 0x10]
mov r9d, 0xe54e8608
xor r8d, r9d
movzx eax, word [rax + 0x14]
mov r9d, eax
xor r9b, 0x2f
shr eax, 8
xor al, 5
movzx r9d, r9b
movzx eax, al
shl eax, 8
or eax, r9d
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rdx
mov dword [rsp + 0x160], r8d
mov word [rsp + 0x164], ax
lea rax, [0x00907369]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xc0eca06967e5fb75
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577fe0
mov rcx, qword [rax]
movabs rdx, 0xae37cbd8986e3f1e
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0xbe
shr eax, 8
xor al, 0xef
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
mov qword [rsp + 0x768], rcx
mov word [rsp + 0x770], ax
lea rax, [0x008fe7b3]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xdd706d31061b58d0
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577e60
mov rax, qword [rax]
movabs rcx, 0x29d34139b20b6dc0
xor rax, rcx
mov qword [rsp + 0x7b8], rax
lea rax, [0x0090006b]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xe5e795708fe08311
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578550
mov rcx, qword [rax]
movabs rdx, 0x1d61b40a151961db
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0xba
shr eax, 8
xor al, 0xde
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
mov qword [rsp + 0x778], rcx
mov word [rsp + 0x780], ax
lea rax, [0x0090ae05]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x66ce7cf42ea8b731
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578960
mov rcx, qword [rax]
movabs rdx, 0xcaf9bee5125ed24e
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x97
xor r8b, 0x6e
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0x89
mov qword [rsp + 0xc8], rcx
mov word [rsp + 0xd0], r8w
mov byte [rsp + 0xd2], dl
lea rax, [0x008ff2db]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xce86d2bb98304192
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578350
mov rcx, qword [rax]
movabs rdx, 0x67636471a967c68a
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0xd556573376457167
xor rdx, r8
mov r8d, dword [rax + 0x10]
mov r9d, 0xe9b7258b
xor r8d, r9d
movzx eax, word [rax + 0x14]
mov r9d, eax
xor r9b, 8
shr eax, 8
xor al, 0x22
movzx r9d, r9b
movzx eax, al
shl eax, 8
or eax, r9d
mov qword [rsp + 0x690], rcx
mov qword [rsp + 0x698], rdx
mov dword [rsp + 0x6a0], r8d
mov word [rsp + 0x6a4], ax
lea rax, [0x00909811]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x8791c32816848d1b
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577770
mov rcx, qword [rax]
movabs rdx, 0xcee503e8e0704a77
xor rcx, rdx
mov rdx, qword [rax + 8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x60], rcx
movabs rcx, 0x5ad889c9bd9ea024
xor rdx, rcx
movabs rcx, 0xe0d5384037d00b19
xor rax, rcx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x748]
mov qword [r15], rax
mov qword [r15 + 8], 0xa
lea rax, [rsp + 0x6d8]
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xb
lea rax, [rsp + 0x718]
mov qword [r15 + 0x20], rax
mov qword [r15 + 0x28], 9
lea rax, [rsp + 0x728]
mov qword [r15 + 0x30], rax
mov qword [r15 + 0x38], 9
lea rax, [rsp + 0x758]
mov qword [r15 + 0x40], rax
mov qword [r15 + 0x48], 0xa
lea rax, [rsp + 0x6e8]
mov qword [r15 + 0x50], rax
mov qword [r15 + 0x58], 0xb
lea rax, [rsp + 0xa8]
mov qword [r15 + 0x60], rax
mov qword [r15 + 0x68], 0xf
lea rax, [rsp + 0x738]
mov qword [r15 + 0x70], rax
mov qword [r15 + 0x78], 9
lea rax, [rsp + 0x6f8]
mov qword [r15 + 0x80], rax
mov qword [r15 + 0x88], 0xb
lea rax, [rsp + 0x708]
mov qword [r15 + 0x90], rax
mov qword [r15 + 0x98], 0xb
lea rax, [rsp + 0x150]
mov qword [r15 + 0xa0], rax
mov qword [r15 + 0xa8], 0x16
lea rax, [rsp + 0x768]
mov qword [r15 + 0xb0], rax
mov qword [r15 + 0xb8], 0xa
lea rax, [rsp + 0x7b8]
mov qword [r15 + 0xc0], rax
mov qword [r15 + 0xc8], 8
lea rax, [rsp + 0x778]
mov qword [r15 + 0xd0], rax
mov qword [r15 + 0xd8], 0xa
lea rax, [rsp + 0xc8]
mov qword [r15 + 0xe0], rax
mov qword [r15 + 0xe8], 0xb
lea rax, [rsp + 0x690]
mov qword [r15 + 0xf0], rax
mov qword [r15 + 0xf8], 0x16
mov qword [r15 + 0x100], r14
mov qword [r15 + 0x108], 0x18
lea rax, [0x00867449]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x7f582ad838f91615
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005788f0
mov rax, qword [rax]
movabs rcx, 0xf7edfcc0a3a56320
xor rax, rcx
mov qword [rsp + 0x7e0], rax
mov r8d, 8
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f729
mov rdi, qword [rsp + 0x458]
mov rbx, qword [rsp + 0x460]
mov rcx, rdi
call sub.KERNEL32.dll_LoadLibraryA
mov rsi, rax
mov byte [rdi], 0
test rbx, rbx
je 0x567484
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x00870feb]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x48b20ecd069940c8
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005782f0
movq xmm0, qword [rax]
movq xmm1, qword [rax + 8]
punpcklqdq xmm0, xmm1
pxor xmm0, xmm7
movdqa xmmword [rsp + 0x7e0], xmm0
mov r8d, 0x10
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f755
mov rdi, qword [rsp + 0x458]
mov rbx, qword [rsp + 0x460]
mov rcx, rsi
mov rdx, rdi
call sub.KERNEL32.dll_GetProcAddress
mov qword [rsp + 0x1b8], rax
mov byte [rdi], 0
test rbx, rbx
je 0x567535
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0086bb3a]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x83518dfc76fc53fb
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578b50
mov rcx, qword [rax]
movabs rdx, 0x9f806aed5d11948d
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x9524a50bc96df3e3
xor rdx, r8
mov rax, qword [rax + 0x10]
movabs r8, 0x4aa26499313d7ce9
xor rax, r8
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov qword [rsp + 0x7f0], rax
mov r8d, 0x18
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f781
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov rcx, rsi
mov rdx, rbx
call sub.KERNEL32.dll_GetProcAddress
mov rdi, rax
mov byte [rbx], 0
test r14, r14
je 0x567611
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0086d634]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x60a7d4a95b5b7947
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577810
mov rcx, qword [rax]
movabs rdx, 0x583624ff9353b5e8
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x998dfcb
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x9b
shr eax, 8
xor al, 0x69
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x7e0], rcx
mov dword [rsp + 0x7e8], edx
mov word [rsp + 0x7ec], ax
mov r8d, 0xe
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f7ad
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov rcx, rsi
mov rdx, rbx
call sub.KERNEL32.dll_GetProcAddress
mov byte [rbx], 0
test r14, r14
je 0x5676f0
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0086ba11]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xb29f6f460fc60d7f
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005778a0
mov rcx, qword [rax]
movabs rdx, 0xde8e09af54331be8
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xe8c72832
xor edx, r8d
movzx eax, byte [rax + 0xc]
xor al, 0x92
mov qword [rsp + 0x7e0], rcx
mov dword [rsp + 0x7e8], edx
mov byte [rsp + 0x7ec], al
mov r8d, 0xd
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f7d6
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov rcx, rsi
mov rdx, rbx
call sub.KERNEL32.dll_GetProcAddress
mov rbp, rax
mov byte [rbx], 0
test r14, r14
je 0x5677ba
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0086eca3]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xc91dcac5daa5a42d
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005783e0
mov rcx, qword [rax]
movabs rdx, 0xbd62504831a8ab2e
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x5d
xor r8b, 0x54
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xe
mov qword [rsp + 0x7e0], rcx
mov word [rsp + 0x7e8], r8w
mov byte [rsp + 0x7ea], dl
mov r8d, 0xb
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f7ff
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov rcx, rsi
mov rdx, rbx
call sub.KERNEL32.dll_GetProcAddress
mov qword [rsp + 0x180], rax
mov byte [rbx], 0
test r14, r14
je 0x56789f
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0086bede]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x29753dc1b33dbba9
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577ac0
mov rcx, qword [rax]
movabs rdx, 0xa763c414b967b134
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x64
xor r8b, 0x57
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xc4
mov qword [rsp + 0x7e0], rcx
mov word [rsp + 0x7e8], r8w
mov byte [rsp + 0x7ea], dl
mov r8d, 0xb
mov rcx, r12
lea rdx, [rsp + 0x7e0]
call fcn.0044e1a0
cmp qword [rsp + 0x450], 0
jne 0x56f828
mov rbx, qword [rsp + 0x458]
mov r14, qword [rsp + 0x460]
mov rcx, rsi
mov rdx, rbx
call sub.KERNEL32.dll_GetProcAddress
mov qword [rsp + 0xd8], rax
mov byte [rbx], 0
test r14, r14
je 0x567984
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov ecx, 2
xor edx, edx
call rdi
cmp rax, 0xffffffffffffffff
lea r14, [rsp + 0x60]
je 0x5668b0
mov rbx, rax
mov qword [rsp + 0x7a0], rax
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0x7a8], rbp
jmp 0x5679d0
mov rbp, qword [rsp + 0x7a8]
mov rbx, qword [rsp + 0x7a0]
xor edi, edi
mov r8d, 0x130
mov rcx, r13
xor edx, edx
call sub.msvcrt.dll_memset
mov esi, 0xf0562fc2
xor eax, eax
jmp 0x5679ff
mov rcx, rbx
mov rdx, r13
call rbp
mov edi, 0x2f3c52cf
xor esi, edi
cmp esi, 0xf0562fc2
je 0x567a20
cmp esi, 0x2c7bb43f
je 0x5679f0
cmp esi, 0x347e6f0
je 0x567a40
xor esi, edi
jmp 0x5679ff
mov dword [rsp + 0x1c0], 0x130
mov edi, 0xdc2d9bfd
xor esi, edi
jmp 0x5679ff
test eax, eax
je 0x5668b0
mov eax, dword [rsp + 0x1c8]
mov dword [rsp + 0x188], eax
mov r8d, 0x104
lea rcx, [rsp + 0x460]
lea rdx, [rsp + 0x1ec]
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xe0], 1
lea rax, [rsp + 0xe2]
movups xmmword [rax + 6], xmm6
mov qword [rsp + 0x7e8], 0
mov edx, 1
mov r8d, 0x104
lea rcx, [rsp + 0xa60]
lea r9, [rsp + 0x7e0]
call fcn.00555220
cmp qword [rsp + 0xa60], 0
mov rcx, qword [rsp + 0xa68]
lea rsi, [rsp + 0xe0]
je 0x567af0
mov r14d, 1
movabs rax, 0x8000000000000001
cmp rcx, rax
je 0x567b07
jmp 0x56f53a
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], 0x104
mov r14, rcx
mov edi, 0x10
xor ebx, ebx
jmp 0x567b7e
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rsi
mov r14, rcx
lea rsi, [rsp + 0xe0]
nop dword [rax + rax]
movzx eax, bpl
movzx eax, ax
mov ecx, eax
shr ecx, 6
or ecx, 0xc0
and eax, 0x3f
or eax, 0x80
movzx eax, ax
shl eax, 8
movzx ecx, cx
or ecx, eax
mov word [r14 + rbx], cx
mov rbx, qword [rsp + 0xf0]
add rbx, 2
mov qword [rsp + 0xf0], rbx
inc rdi
cmp rdi, 0x114
je 0x567c90
movzx ebp, byte [rsp + rdi + 0x450]
test bpl, bpl
js 0x567bd0
cmp rbx, qword [rsp + 0xe8]
jne 0x567bb0
mov rcx, rsi
mov rdx, rbx
call fcn.005553c0
mov r14, qword [rsp + 0xe0]
mov rbx, qword [rsp + 0xf0]
mov byte [r14 + rbx], bpl
inc rbx
mov qword [rsp + 0xf0], rbx
inc rdi
cmp rdi, 0x114
jne 0x567b7e
jmp 0x567c90
mov rax, qword [rsp + 0xe8]
mov rcx, rax
sub rcx, rbx
cmp rcx, 1
ja 0x567b30
mov rsi, rbx
add rsi, 2
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rsi
cmova rsi, rcx
cmp rsi, 9
mov ecx, 8
cmovb rsi, rcx
test rax, rax
je 0x567c29
mov qword [rsp + 0x7e0], r14
mov qword [rsp + 0x7f0], rax
mov eax, 1
jmp 0x567c2b
xor eax, eax
mov rdx, rsi
not rdx
shr rdx, 0x3f
mov qword [rsp + 0x7e8], rax
lea rcx, [rsp + 0xa60]
mov r8, rsi
lea r9, [rsp + 0x7e0]
call fcn.00555220
cmp qword [rsp + 0xa60], 0
mov rcx, qword [rsp + 0xa68]
je 0x567b10
movabs rax, 0x8000000000000001
cmp rcx, rax
lea rsi, [rsp + 0xe0]
je 0x567b30
jmp 0x56f53a
mov rbp, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x448], rax
lea rcx, [rbp + 7]
and rcx, 0xfffffffffffffff8
sub rcx, rbp
sete al
cmp rcx, rbx
cmovae rcx, rbx
mov qword [rsp + 0x38], rcx
test rcx, rcx
sete cl
lea rdx, [rbx - 0x10]
mov qword [rsp + 0x430], rdx
or cl, al
mov byte [rsp + 0x1b0], cl
lea rax, [rbp + 0x11]
mov qword [rsp + 0x688], rax
lea rax, [rbp + 0x21]
mov qword [rsp + 0x680], rax
lea rax, [rbp + 0x31]
mov qword [rsp + 0x678], rax
lea rax, [rbp + 1]
mov qword [rsp + 0x7b0], rax
xor eax, eax
lea r14, [rsp + 0x60]
jmp 0x567d9c
mov qword [rsp + 0x20], rsi
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call fcn.004559e0
lea rcx, [rsp + 0x7e0]
mov rdx, r12
call fcn.0040bf50
cmp qword [rsp + 0x7e0], 0
je 0x567d82
nop word [rax + rax]
mov ecx, 1
xor edx, edx
mov r8d, dword [rsp + 0x188]
call qword [rsp + 0x180]
mov rsi, rax
mov rcx, rax
mov edx, 1
call qword [rsp + 0x1b8]
mov rcx, rsi
call qword [rsp + 0xd8]
mov rax, qword [rsp + 0x48]
inc rax
cmp rax, 0x11
mov r15, qword [rsp + 0xc0]
je 0x568880
mov qword [rsp + 0x48], rax
shl rax, 4
mov rsi, qword [r15 + rax + 8]
test rsi, rsi
je 0x567d50
mov rcx, qword [rsp + 0xc0]
mov r9, qword [rcx + rax]
cmp rsi, rbx
mov qword [rsp + 0x40], r9
jae 0x567e00
cmp rsi, 1
jne 0x567e1f
movzx eax, byte [r9]
cmp rbx, 0xf
ja 0x567e71
xor ecx, ecx
nop dword [rax + rax]
cmp byte [rbp + rcx], al
je 0x567d50
inc rcx
cmp rbx, rcx
jne 0x567de0
jmp 0x567d82
jne 0x567d82
mov rcx, qword [rsp + 0x40]
mov rdx, rbp
mov r8, rbx
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x567d82
jmp 0x567d50
cmp rsi, 0x21
jae 0x567d19
movzx edx, byte [r9]
cmp rsi, 2
jne 0x567eee
mov rcx, rbp
mov r15, rbx
cmp rbx, 0x11
jb 0x567f50
movzx eax, dl
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
mov rcx, qword [rsp + 0x40]
movzx r11d, byte [rcx + 1]
mov r10d, 1
jmp 0x568001
cmp byte [rsp + 0x1b0], 0
je 0x567f79
xor ecx, ecx
movabs r11, 0xfefefefefefefeff
movabs rsi, 0x8080808080808080
mov rdi, qword [rsp + 0x430]
mov rdx, rax
movabs r8, 0x101010101010101
imul rdx, r8
nop
mov r8, qword [rbp + rcx]
xor r8, rdx
lea r9, [r8 + r11]
not r8
and r8, r9
mov r9, qword [rbp + rcx + 8]
xor r9, rdx
lea r10, [r9 + r11]
not r9
and r9, r10
or r9, r8
test r9, rsi
jne 0x567fc1
add rcx, 0x10
cmp rcx, rdi
jbe 0x567eb0
jmp 0x567fc1
mov rcx, rsi
sub rcx, 4
mov eax, 0
cmovae rax, rcx
mov rcx, rsi
nop word cs:[rax + rax]
cmp rax, rcx
jae 0x567d19
lea r10, [rcx - 1]
cmp r10, rsi
jae 0x56f413
movzx r11d, byte [r9 + rcx - 1]
mov rcx, r10
cmp r11b, dl
je 0x567f10
lea rax, [rsi + 0xf]
mov rcx, rbp
mov r15, rbx
cmp rax, rbx
jbe 0x567fe7
nop word [rax + rax]
cmp r15, rsi
jb 0x567d82
dec r15
lea rdi, [rcx + 1]
mov rdx, qword [rsp + 0x40]
mov r8, rsi
call sub.msvcrt.dll_memcmp
mov rcx, rdi
test eax, eax
jne 0x567f50
jmp 0x567d50
xor ecx, ecx
nop dword [rax + rax]
cmp byte [rbp + rcx], al
je 0x567d50
inc rcx
cmp qword [rsp + 0x38], rcx
jne 0x567f80
mov rdx, qword [rsp + 0x38]
mov rcx, rdx
mov rdi, qword [rsp + 0x430]
cmp rdx, rdi
movabs r11, 0xfefefefefefefeff
movabs rsi, 0x8080808080808080
jbe 0x567e9d
cmp rcx, rbx
je 0x567d82
nop word [rax + rax]
cmp byte [rbp + rcx], al
je 0x567d50
inc rcx
cmp rbx, rcx
jne 0x567fd0
jmp 0x567d82
movzx eax, dl
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x58], r10
lea r8, [rsi - 1]
movzx eax, r11b
movd xmm1, eax
punpcklbw xmm1, xmm1
pshuflw xmm1, xmm1, 0
pshufd xmm1, xmm1, 0
lea r14, [rcx + 1]
lea rcx, [rsi + 0x3f]
mov rax, rcx
mov qword [rsp + 0x438], rcx
cmp rcx, rbx
jae 0x568581
lea r12, [rsi - 5]
lea rax, [rsi + rbp]
add rax, 0xfffffffffffffffb
mov qword [rsp + 0x50], rax
xor r13d, r13d
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x140], rbp
xor r10d, r10d
nop dword [rax + rax]
mov rax, rbp
add rax, r13
movdqu xmm2, xmmword [rbp + r13]
mov rcx, qword [rsp + 0x58]
movdqu xmm3, xmmword [rcx + rax]
pcmpeqb xmm2, xmm0
pcmpeqb xmm3, xmm1
pand xmm3, xmm2
pmovmskb r11d, xmm3
test r11d, r11d
je 0x5681b6
test r10b, 1
je 0x5680d0
xor r15d, r15d
jmp 0x5681af
cmp r8, 3
ja 0x568120
tzcnt ecx, r11d
mov rax, rcx
add rax, qword [rsp + 0x140]
mov edx, 1
mov r15, qword [rsp + 0x40]
cmp rsi, rdx
je 0x5681ac
movzx r9d, byte [rax + rdx]
lea rdi, [rdx + 1]
cmp r9b, byte [r15 + rdx]
mov rdx, rdi
je 0x5680f0
mov ax, 0xfffe
rol ax, cl
xor r15d, r15d
and r11w, ax
jne 0x5680d6
jmp 0x5681af
mov r9, r13
or r9, 1
test r12, r12
jg 0x568171
mov eax, dword [r14 + r12]
tzcnt ecx, r11d
lea rdx, [r9 + rcx]
mov rdi, qword [rsp + 0x50]
cmp dword [rdi + rdx], eax
sete r15b
je 0x5681af
mov dx, 0xfffe
rol dx, cl
and r11w, dx
jne 0x568130
jmp 0x5681af
mov ax, 0xfffe
rol ax, cl
and r11w, ax
je 0x5680c7
tzcnt ecx, r11d
mov r15, rcx
add r15, r9
add r15, rbp
lea rax, [r15 + r12]
mov rdx, r14
nop word cs:[rax + rax]
mov edi, dword [r15]
cmp edi, dword [rdx]
jne 0x568160
add r15, 4
add rdx, 4
cmp r15, rax
jb 0x568190
mov eax, dword [rax]
cmp eax, dword [r14 + r12]
jne 0x568160
mov r15b, 1
or r10b, r15b
and r10b, 1
mov rax, r13
or rax, 0x10
lea rcx, [rax + rbp]
movdqu xmm2, xmmword [rbp + rax]
mov rdx, qword [rsp + 0x58]
movdqu xmm3, xmmword [rdx + rcx]
pcmpeqb xmm2, xmm0
pcmpeqb xmm3, xmm1
pand xmm3, xmm2
pmovmskb r11d, xmm3
mov rax, r13
or rax, 0x20
lea rcx, [rax + rbp]
movdqu xmm4, xmmword [rbp + rax]
movdqu xmm5, xmmword [rdx + rcx]
mov rax, r13
or rax, 0x30
lea rcx, [rax + rbp]
movdqu xmm2, xmmword [rbp + rax]
movdqu xmm3, xmmword [rdx + rcx]
test r11w, r11w
je 0x568316
test r10b, 1
je 0x568230
xor r15d, r15d
jmp 0x56830f
cmp r8, 3
ja 0x568280
tzcnt ecx, r11d
mov rax, rcx
add rax, qword [rsp + 0x130]
xor edx, edx
nop dword [rax + rax]
cmp r8, rdx
je 0x56830c
movzx r9d, byte [rax + rdx]
lea r15, [rdx + 1]
cmp r9b, byte [r14 + rdx]
mov rdx, r15
je 0x568250
mov ax, 0xfffe
rol ax, cl
xor r15d, r15d
and r11w, ax
jne 0x568236
jmp 0x56830f
mov r9, r13
or r9, 0x11
test r12, r12
jg 0x5682d1
mov eax, dword [r14 + r12]
tzcnt ecx, r11d
lea rdx, [r9 + rcx]
mov rdi, qword [rsp + 0x50]
cmp dword [rdi + rdx], eax
sete r15b
je 0x56830f
mov dx, 0xfffe
rol dx, cl
and r11w, dx
jne 0x568290
jmp 0x56830f
mov ax, 0xfffe
rol ax, cl
and r11w, ax
je 0x56821e
tzcnt ecx, r11d
mov r15, rcx
add r15, r9
add r15, rbp
lea rax, [r15 + r12]
mov rdx, r14
nop word cs:[rax + rax]
mov edi, dword [r15]
cmp edi, dword [rdx]
jne 0x5682c0
add r15, 4
add rdx, 4
cmp r15, rax
jb 0x5682f0
mov eax, dword [rax]
cmp eax, dword [r14 + r12]
jne 0x5682c0
mov r15b, 1
or r10b, r15b
and r10b, 1
pcmpeqb xmm4, xmm0
pcmpeqb xmm5, xmm1
pand xmm5, xmm4
pmovmskb r11d, xmm5
test r11w, r11w
je 0x568426
test r10b, 1
je 0x568340
xor r15d, r15d
jmp 0x56841f
cmp r8, 3
ja 0x568390
tzcnt ecx, r11d
mov rax, rcx
add rax, qword [rsp + 0x138]
xor edx, edx
nop dword [rax + rax]
cmp r8, rdx
je 0x56841c
movzx r9d, byte [rax + rdx]
lea rdi, [rdx + 1]
cmp r9b, byte [r14 + rdx]
mov rdx, rdi
je 0x568360
mov ax, 0xfffe
rol ax, cl
xor r15d, r15d
and r11w, ax
jne 0x568346
jmp 0x56841f
mov r9, r13
or r9, 0x21
test r12, r12
jg 0x5683e1
mov eax, dword [r14 + r12]
tzcnt ecx, r11d
lea rdx, [r9 + rcx]
mov rdi, qword [rsp + 0x50]
cmp dword [rdi + rdx], eax
sete r15b
je 0x56841f
mov dx, 0xfffe
rol dx, cl
and r11w, dx
jne 0x5683a0
jmp 0x56841f
mov ax, 0xfffe
rol ax, cl
and r11w, ax
je 0x568337
tzcnt ecx, r11d
mov r15, rcx
add r15, r9
add r15, rbp
lea rax, [r15 + r12]
mov rdx, r14
nop word cs:[rax + rax]
mov edi, dword [r15]
cmp edi, dword [rdx]
jne 0x5683d0
add r15, 4
add rdx, 4
cmp r15, rax
jb 0x568400
mov eax, dword [rax]
cmp eax, dword [r14 + r12]
jne 0x5683d0
mov r15b, 1
or r10b, r15b
and r10b, 1
pcmpeqb xmm2, xmm0
pcmpeqb xmm3, xmm1
pand xmm3, xmm2
pmovmskb r11d, xmm3
test r11w, r11w
je 0x568536
test r10b, 1
je 0x568450
xor r15d, r15d
jmp 0x56852f
cmp r8, 3
ja 0x5684a0
tzcnt ecx, r11d
mov rax, rcx
add rax, qword [rsp + 0x190]
xor edx, edx
nop dword [rax + rax]
cmp r8, rdx
je 0x56852c
movzx r9d, byte [rax + rdx]
lea rdi, [rdx + 1]
cmp r9b, byte [r14 + rdx]
mov rdx, rdi
je 0x568470
mov ax, 0xfffe
rol ax, cl
xor r15d, r15d
and r11w, ax
jne 0x568456
jmp 0x56852f
mov r9, r13
or r9, 0x31
test r12, r12
jg 0x5684f1
mov eax, dword [r14 + r12]
tzcnt ecx, r11d
lea rdx, [r9 + rcx]
mov rdi, qword [rsp + 0x50]
cmp dword [rdi + rdx], eax
sete r15b
je 0x56852f
mov dx, 0xfffe
rol dx, cl
and r11w, dx
jne 0x5684b0
jmp 0x56852f
mov ax, 0xfffe
rol ax, cl
and r11w, ax
je 0x568447
tzcnt ecx, r11d
mov r15, rcx
add r15, r9
add r15, rbp
lea rax, [r15 + r12]
mov rdx, r14
nop word cs:[rax + rax]
mov edi, dword [r15]
cmp edi, dword [rdx]
jne 0x5684e0
add r15, 4
add rdx, 4
cmp r15, rax
jb 0x568510
mov eax, dword [rax]
cmp eax, dword [r14 + r12]
jne 0x5684e0
mov r15b, 1
or r10b, r15b
and r10b, 1
mov rax, qword [rsp + 0x438]
add rax, r13
add rax, 0x40
add r13, 0x40
cmp rax, rbx
jae 0x568587
mov eax, r10d
and al, 1
add qword [rsp + 0x140], 0x40
add qword [rsp + 0x130], 0x40
add qword [rsp + 0x138], 0x40
add qword [rsp + 0x190], 0x40
test al, al
je 0x568090
jmp 0x568587
xor r10d, r10d
xor r13d, r13d
lea rax, [rsi + r13]
add rax, 0xf
mov r11d, r10d
and r11b, 1
cmp rax, rbx
jae 0x568734
test r11b, r11b
lea r12, [rsp + 0x450]
jne 0x56873c
lea rdi, [rsi + 0xf]
lea r15, [rsi - 5]
lea rax, [rsi + rbp]
add rax, 0xfffffffffffffffb
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x7b0]
lea r9, [rax + r13]
mov qword [rsp + 0x40], rdi
mov rax, rbp
add rax, r13
movdqu xmm2, xmmword [rbp + r13]
mov rcx, qword [rsp + 0x58]
movdqu xmm3, xmmword [rcx + rax]
pcmpeqb xmm2, xmm0
pcmpeqb xmm3, xmm1
pand xmm3, xmm2
pmovmskb r11d, xmm3
test r11d, r11d
je 0x5686ff
cmp rsi, 4
ja 0x568650
tzcnt ecx, r11d
mov rax, rcx
add rax, r9
xor edx, edx
nop word [rax + rax]
cmp r8, rdx
je 0x568726
movzx r10d, byte [rax + rdx]
lea rdi, [rdx + 1]
cmp r10b, byte [r14 + rdx]
mov rdx, rdi
je 0x568620
mov ax, 0xfffe
rol ax, cl
and r11w, ax
jne 0x56860d
xor r10d, r10d
jmp 0x5686fa
lea r10, [r13 + 1]
test r15, r15
jg 0x5686af
mov eax, dword [r14 + r15]
nop dword [rax]
tzcnt ecx, r11d
lea rdx, [r10 + rcx]
mov r12, qword [rsp + 0x50]
cmp dword [r12 + rdx], eax
je 0x56872e
mov dx, 0xfffe
rol dx, cl
and r11w, dx
jne 0x568660
xor r10d, r10d
lea r12, [rsp + 0x450]
jmp 0x5686ff
mov ax, 0xfffe
mov ecx, edi
rol ax, cl
and r11w, ax
je 0x5686ef
tzcnt edi, r11d
mov rcx, rdi
add rcx, r10
add rcx, rbp
lea rax, [rcx + r15]
mov rdx, r14
nop word cs:[rax + rax]
mov r12d, dword [rcx]
cmp r12d, dword [rdx]
jne 0x5686a0
add rcx, 4
add rdx, 4
cmp rcx, rax
jb 0x5686d0
mov eax, dword [rax]
cmp eax, dword [r14 + r15]
jne 0x5686a0
jmp 0x56872e
xor r10d, r10d
lea r12, [rsp + 0x450]
mov rdi, qword [rsp + 0x40]
lea rax, [rdi + r13]
add rax, 0x10
mov r11d, r10d
and r11b, 1
cmp rax, rbx
jae 0x56873c
add r13, 0x10
add r9, 0x10
test r11b, r11b
je 0x5685d6
jmp 0x56873c
mov r10b, 1
mov r11b, 1
jmp 0x56873c
mov r10b, 1
mov r11b, 1
lea r12, [rsp + 0x450]
mov r9, rbx
sub r9, r8
lea rax, [r9 + rbp]
movdqu xmm2, xmmword [r9 + rbp - 0x10]
mov rcx, qword [rsp + 0x58]
movdqu xmm3, xmmword [rcx + rax - 0x10]
pcmpeqb xmm2, xmm0
pcmpeqb xmm3, xmm1
pand xmm3, xmm2
pmovmskb eax, xmm3
test eax, eax
lea r13, [rsp + 0x1c0]
je 0x56886a
test r11b, r11b
je 0x568784
xor esi, esi
jmp 0x568860
add r9, 0xfffffffffffffff1
cmp rsi, 4
ja 0x5687ce
tzcnt ecx, eax
mov rdx, rcx
add rdx, r9
add rdx, rbp
xor r10d, r10d
nop
cmp r8, r10
je 0x56885d
movzx esi, byte [rdx + r10]
lea rdi, [r10 + 1]
cmp sil, byte [r14 + r10]
mov r10, rdi
je 0x5687a0
mov dx, 0xfffe
rol dx, cl
xor esi, esi
and ax, dx
jne 0x56878e
jmp 0x568860
add rsi, 0xfffffffffffffffb
test rsi, rsi
jg 0x568820
lea r8, [rsi + rbp]
mov edx, dword [r14 + rsi]
nop
tzcnt ecx, eax
lea r10, [r9 + rcx]
cmp dword [r8 + r10], edx
sete sil
je 0x568860
mov r10w, 0xfffe
rol r10w, cl
and ax, r10w
jne 0x5687e0
jmp 0x568860
mov dx, 0xfffe
rol dx, cl
and ax, dx
je 0x56877d
tzcnt ecx, eax
mov r8, rcx
add r8, r9
add r8, rbp
lea r10, [r8 + rsi]
mov rdx, r14
nop word cs:[rax + rax]
mov edi, dword [r8]
cmp edi, dword [rdx]
jne 0x568810
add r8, 4
add rdx, 4
cmp r8, r10
jb 0x568840
mov edx, dword [r10]
cmp edx, dword [r14 + rsi]
jne 0x568810
mov sil, 1
test r11b, r11b
setne r10b
or r10b, sil
test r10b, 1
lea r14, [rsp + 0x60]
jne 0x567d50
jmp 0x567d82
cmp qword [rsp + 0x448], 0
je 0x5679c0
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
jmp 0x5679c0
mov r14d, 1
mov rcx, r14
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1c8], rsi
mov qword [rsp + 0x1d0], rsi
mov byte [rsp + 0x1d8], 0
mov r8d, 0x20
mov rcx, r13
mov rdx, rbx
call case.0x5a7113.102
mov rsi, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0xd8], rax
mov rdi, qword [rsp + 0x1d0]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, r12
mov qword [rsp + 0x130], rsi
mov rdx, rsi
mov qword [rsp + 0x140], rdi
mov r8, rdi
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
lea r14, [rsp + 0x60]
jne 0x5689ff
mov rsi, qword [rsp + 0x458]
mov eax, esi
and eax, 3
cmp rax, 2
jb 0x568ac0
cmp eax, 2
jne 0x568ac0
mov rax, rsi
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x568ac0
mov qword [rsp + 0x7e0], rsi
mov rcx, r13
mov rdx, qword [rsp + 0x130]
mov r8, qword [rsp + 0x140]
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x1c0], 2
jne 0x5689d4
lea rcx, [rsp + 0x1c8]
call fcn.00584cb0
jmp 0x568ac0
test byte [rsp + 0x201], 4
je 0x5689f2
mov eax, dword [rsp + 0x204]
mov ecx, 0x20000000
and eax, ecx
jne 0x568ac0
lea rcx, [rsp + 0x7e0]
call fcn.00584cb0
mov rcx, r12
mov rdx, qword [rsp + 0x130]
mov r8, qword [rsp + 0x140]
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
jne 0x568b2d
mov rsi, qword [rsp + 0x458]
mov eax, esi
and eax, 3
cmp rax, 2
jb 0x568ac0
cmp eax, 2
jne 0x568ac0
mov rax, rsi
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x568ac0
mov qword [rsp + 0x7e0], rsi
mov rcx, r13
mov rdx, qword [rsp + 0x130]
mov r8, qword [rsp + 0x140]
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x1c0], 2
jne 0x568aa6
lea rcx, [rsp + 0x1c8]
call fcn.00584cb0
jmp 0x568ac0
test byte [rsp + 0x201], 4
je 0x568b20
mov eax, dword [rsp + 0x204]
mov ecx, 0x20000000
and eax, ecx
je 0x568b20
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x56b1f5
test rax, rax
je 0x56b1f5
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x568b0c
cmp qword [rbx + 0x10], 0x11
jb 0x568afb
mov rdi, qword [rdi - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
dec rsi
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
jmp 0x56b1f0
lea rcx, [rsp + 0x7e0]
call fcn.00584cb0
mov qword [rsp + 0xa8], 8
lea rax, [rsp + 0xb0]
movups xmmword [rax], xmm6
mov rcx, r13
mov rdx, qword [rsp + 0x130]
mov r8, qword [rsp + 0x140]
call fcn.005b06f0
mov ebx, dword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1c0]
cmp ebx, 2
je 0x56f890
mov rdi, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1d4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1d0]
movups xmm0, xmmword [rax + 0xc]
movups xmm1, xmmword [rax + 0x1c]
movaps xmmword [rsp + 0x7e0], xmm0
movaps xmmword [rsp + 0x7f0], xmm1
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x800], eax
mov r14, qword [rsp + 0x200]
movq xmm13, r14
mov ebp, r14d
shr ebp, 0x10
movzx r15d, word [rsp + 0x204]
mov r8d, 0x21e
mov rcx, r12
lea rdx, [rsp + 0x206]
call sub.msvcrt.dll_memcpy
movdqa xmm0, xmmword [rsp + 0x7e0]
movdqa xmm1, xmmword [rsp + 0x7f0]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmmword [rsp + 0x160], xmm1
mov eax, dword [rsp + 0x800]
mov dword [rsp + 0x170], eax
mov r8d, 0x21e
lea rcx, [rsp + 0xa60]
mov rdx, r12
call sub.msvcrt.dll_memcpy
cmp r14w, 0x2e
sete al
test ebp, ebp
sete cl
xor ebp, 0x2e
mov word [rsp + 0x50], r15w
or bp, r15w
sete bpl
or bpl, cl
and bpl, al
jmp 0x568c6a
xor ebx, ebx
lea r12, [rsp + 0x450]
cmp ebx, 1
setne al
or al, bpl
je 0x568d60
mov r8d, 0x250
mov rcx, r13
xor edx, edx
call sub.msvcrt.dll_memset
mov rcx, rdi
mov rdx, r13
call sub.KERNEL32.dll_FindNextFileW
test eax, eax
lea r14, [rsp + 0x60]
jne 0x568cc3
jmp 0x569461
mov rcx, rdi
mov rdx, r13
call sub.KERNEL32.dll_FindNextFileW
test eax, eax
je 0x569461
cmp word [rsp + 0x1ec], 0x2e
jne 0x568cf0
movzx eax, word [rsp + 0x1ee]
test ax, ax
je 0x568cb0
cmp ax, 0x2e
jne 0x568cf0
cmp word [rsp + 0x1f0], 0
je 0x568cb0
nop dword [rax]
lock inc qword [rsi]
jle 0x56f640
mov rbx, qword [rsp + 0x1c0]
lea rax, [rsp + 0x1c8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm1
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x80], eax
movd xmm14, dword [rsp + 0x1ec]
movzx r14d, word [rsp + 0x1f0]
mov r8d, 0x21e
mov rcx, r12
lea rdx, [rsp + 0x1f2]
call sub.msvcrt.dll_memcpy
xor r15d, r15d
jmp 0x568dbf
lock inc qword [rsi]
jle 0x56f640
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x80], eax
movaps xmm0, xmmword [rsp + 0x150]
movaps xmm1, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
mov r8d, 0x21e
mov rcx, r12
lea rdx, [rsp + 0xa60]
call sub.msvcrt.dll_memcpy
test rsi, rsi
sete r15b
movdqa xmm14, xmm13
movzx r14d, word [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x100], eax
movaps xmm0, xmmword [rsp + 0x60]
movaps xmm1, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0xf0], xmm1
movaps xmmword [rsp + 0xe0], xmm0
mov r8d, 0x21e
mov rcx, r13
mov rdx, r12
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x690], xmm0
movaps xmmword [rsp + 0x6a0], xmm1
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x6b0], eax
mov r8d, 0x21e
lea r12, [rsp + 0x7e0]
mov rcx, r12
mov rdx, r13
call sub.msvcrt.dll_memcpy
test r15b, r15b
jne 0x56f8fc
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], rbx
mov eax, dword [rsp + 0x6b0]
lea rcx, [rsp + 0x1d0]
mov dword [rcx + 0x20], eax
movdqa xmm0, xmmword [rsp + 0x690]
movdqa xmm1, xmmword [rsp + 0x6a0]
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmmword [rcx], xmm0
movd dword [rsp + 0x1f4], xmm14
mov word [rsp + 0x1f8], r14w
mov r8d, 0x21e
lea rcx, [rsp + 0x1fa]
mov rdx, r12
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x60]
mov rdx, r13
call fcn.005a7560
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x70]
lea rcx, [rsp + 0xe0]
mov rdx, r14
mov r8, rbx
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0xe0], 2
jne 0x568f70
mov r12, qword [rsp + 0xe8]
mov eax, r12d
and eax, 3
cmp rax, 2
jb 0x5691d0
cmp eax, 2
jne 0x5691d0
mov rax, r12
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x5691d0
mov qword [rsp + 0xc8], r12
lea rcx, [rsp + 0x450]
mov rdx, r14
mov r8, rbx
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
jne 0x56919d
lea rcx, [rsp + 0x458]
call fcn.00584cb0
jmp 0x5691c0
mov r15d, dword [rsp + 0x120]
mov r13d, dword [rsp + 0x124]
test r15d, 0x400
sete al
test r13d, 0x20000000
sete cl
or cl, al
cmp cl, 1
lea r13, [rsp + 0x1c0]
jne 0x569422
and r15d, 0x10
je 0x569422
lea rax, [0x0090a0dc]
mov qword [rsp + 0x450], rax
lea r12, [rsp + 0x450]
mov rcx, qword [rsp + 0x450]
movabs rax, 0x72da1b63a5886e9c
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578180
mov rcx, qword [rax]
movabs rdx, 0xd4b937b9bace7e1f
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xbb83bd5e
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xa
shr eax, 8
xor al, 0x72
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0xe0], rcx
mov dword [rsp + 0xe8], edx
mov word [rsp + 0xec], ax
test rbx, rbx
je 0x56908c
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x569072
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5cf
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x569092
jmp 0x56f5cf
mov r15d, 1
mov rcx, r15
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x450], r15
mov qword [rsp + 0x458], rbx
mov qword [rsp + 0x460], rbx
mov byte [rsp + 0x468], 0
mov r8d, 0xe
mov rcx, r12
lea r12, [rsp + 0xe0]
mov rdx, r12
call case.0x5a7113.102
mov r15, qword [rsp + 0x450]
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0xc0], rax
mov r13, qword [rsp + 0x460]
mov rcx, r12
mov rdx, r15
mov r8, r13
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0xe0], 2
jne 0x5692dc
mov r12, qword [rsp + 0xe8]
mov eax, r12d
and eax, 3
cmp rax, 2
jb 0x56925e
cmp eax, 2
jne 0x56925e
mov rax, r12
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x56925e
mov qword [rsp + 0xc8], r12
lea rcx, [rsp + 0x450]
mov rdx, r15
mov r8, r13
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
jne 0x569240
lea rcx, [rsp + 0x458]
call fcn.00584cb0
jmp 0x56925e
mov r15d, dword [rsp + 0x490]
mov r13d, dword [rsp + 0x494]
test r15d, 0x400
je 0x56922e
mov eax, r13d
and eax, 0x20000000
je 0x56922e
lea r13, [rsp + 0x1c0]
nop dword [rax + rax]
mov eax, r12d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x569422
test rax, rax
je 0x569422
lea r15, [r12 - 1]
mov rbx, qword [r12 - 1]
mov r14, qword [r12 + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x569411
cmp qword [r14 + 0x10], 0x11
jb 0x569218
mov rbx, qword [rbx - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
jmp 0x569411
lea rcx, [rsp + 0xc8]
call fcn.00584cb0
jmp 0x568f80
test byte [rsp + 0x491], 4
je 0x5692cf
mov eax, dword [rsp + 0x494]
mov ecx, 0x20000000
and eax, ecx
je 0x5692cf
mov eax, r12d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
lea r13, [rsp + 0x1c0]
jb 0x569406
test rax, rax
je 0x569406
mov rbx, qword [r12 - 1]
mov r14, qword [r12 + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x5692b6
cmp qword [r14 + 0x10], 0x11
jb 0x5692a5
mov rbx, qword [rbx - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
dec r12
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
jmp 0x569406
lea rcx, [rsp + 0xc8]
call fcn.00584cb0
lea r13, [rsp + 0x1c0]
mov rcx, r14
mov rdx, rbx
call fcn.005aaf10
test rax, rax
je 0x569406
mov r8, rdx
lea rcx, [rsp + 0x450]
mov rdx, rax
call fcn.005ab960
mov rbx, qword [rsp + 0x450]
mov rax, qword [rsp + 0x458]
test rbx, rbx
mov r12, rbx
cmove r12, rax
mov r14, qword [rsp + 0x460]
test r14, r14
mov qword [rsp + 0x40], rax
je 0x56937f
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x569365
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5de
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapAlloc
mov r13, rax
test rax, rax
jne 0x569385
jmp 0x56f5de
mov r13d, 1
mov rcx, r13
mov rdx, r12
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0xb8]
cmp rdx, qword [rsp + 0xb0]
jne 0x5693ba
lea rcx, [rsp + 0xa8]
call fcn.0041e090
mov rdx, qword [rsp + 0xb8]
lea rax, [rdx + 1]
mov rcx, qword [rsp + 0xa8]
lea rdx, [rdx + rdx*2]
mov qword [rcx + rdx*8], r13
mov qword [rcx + rdx*8 + 8], r14
mov qword [rcx + rdx*8 + 0x10], r14
mov qword [rsp + 0xb8], rax
test rbx, rbx
je 0x5693fe
cmp qword [rsp + 0x40], 0
je 0x5693fe
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea r13, [rsp + 0x1c0]
cmp qword [rsp + 0xc0], 0
je 0x569422
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x68], 0
je 0x56943d
mov r8, qword [rsp + 0x60]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x1c0]
lock dec qword [rax]
jne 0x568c60
mov rcx, qword [rsp + 0x1c0]
call fcn.0057aaf0
jmp 0x568c60
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x12
jne 0x56f8a4
mov rcx, rdi
call sub.KERNEL32.dll_FindClose
lock dec qword [rsi]
jne 0x569485
mov rcx, rsi
call fcn.0057aaf0
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x438], rax
mov rcx, qword [rsp + 0xb8]
lea rax, [rcx + rcx*2]
lea rax, [rdx + rax*8]
mov qword [rsp + 0x1b8], rax
mov rax, rdx
mov qword [rsp + 0x1b0], rdx
mov rdi, rdx
test rcx, rcx
jne 0x569541
mov r8, qword [rsp + 0x1b8]
mov rax, r8
sub rax, rdi
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp r8, rdi
je 0x56b1d4
mov rsi, rdx
shr rsi, 4
add rdi, 8
jmp 0x56950d
add rdi, 0x18
dec rsi
je 0x56b1d4
cmp qword [rdi], 0
je 0x569500
mov r8, qword [rdi - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x569500
mov rax, rsi
cmp rsi, qword [rsp + 0x1b8]
je 0x56b1d4
lea rdi, [rax + 0x18]
mov rbx, qword [rax]
test rbx, rbx
je 0x5694c8
mov r15, qword [rax + 8]
mov rsi, qword [rax + 0x10]
mov r14, qword [rsp + 0x140]
test r14, r14
mov qword [rsp + 0x190], rdi
je 0x5695c0
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56959c
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5de
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapAlloc
mov rdi, rax
test rax, rax
jne 0x5695c5
jmp 0x56f5de
mov edi, 1
mov rcx, rdi
mov rdx, qword [rsp + 0x130]
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1c8], r14
mov qword [rsp + 0x1d0], r14
mov byte [rsp + 0x1d8], 0
mov rcx, r13
mov rdx, rbx
mov r8, rsi
call case.0x5a7113.102
mov rdi, qword [rsp + 0x1c0]
mov r14, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1d0]
test r15, r15
je 0x569634
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x00907359]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x3230a078cc59fa93
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577410
mov rcx, qword [rax]
movabs rdx, 0x925492a53ff6e3c2
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x66605
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xa6
shr eax, 8
xor al, 0xac
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x450], rcx
mov dword [rsp + 0x458], edx
mov word [rsp + 0x45c], ax
test rsi, rsi
je 0x569710
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x5696ed
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ed
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x569715
jmp 0x56f5ed
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rbx
mov qword [rsp + 0x1c8], rsi
mov qword [rsp + 0x1d0], rsi
mov byte [rsp + 0x1d8], 0
mov r8d, 0xe
mov rcx, r13
mov rdx, r12
call case.0x5a7113.102
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x138], rax
mov rsi, qword [rsp + 0x1d0]
test r14, r14
je 0x56978f
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, r12
mov rdx, qword [rsp + 0x38]
mov r8, rsi
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
lea r14, [rsp + 0x60]
jne 0x569840
mov rdi, qword [rsp + 0x458]
mov eax, edi
and eax, 3
cmp rax, 2
jb 0x56aec0
cmp eax, 2
jne 0x56aec0
mov rax, rdi
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x56aec0
mov qword [rsp + 0x7e0], rdi
mov rcx, r13
mov rdx, qword [rsp + 0x38]
mov r8, rsi
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x1c0], 2
jne 0x56ae97
lea rcx, [rsp + 0x1c8]
call fcn.00584cb0
jmp 0x56aec0
mov qword [rsp + 0x48], rsi
mov ebx, 0xcd50d06
xor eax, eax
mov edi, 1
pxor xmm13, xmm13
mov rsi, r12
jmp 0x569893
movq xmm0, rdi
movsd xmm13, xmm0
mov rdi, rcx
mov r12, rsi
nop dword [rax + rax]
mov qword [rdi + r15], r14
mov dword [rdi + r15 + 8], ebp
add r15, 0xc
movq xmm0, r15
punpcklqdq xmm13, xmm0
mov eax, 0xc1a2b89f
lea r14, [rsp + 0x60]
xor ebx, eax
cmp ebx, 0xcd50d06
je 0x569980
cmp ebx, 0x502a1dfa
je 0x5698c0
cmp ebx, 0x9188a565
je 0x569b30
xor ebx, eax
jmp 0x569893
lea rax, [0x00909d44]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x7f13d0b9dd6922cc
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578cb0
mov r14, qword [rax]
movabs rcx, 0x8e1f6d8a901ad1da
xor r14, rcx
mov ebp, dword [rax + 8]
mov eax, 0x166d97fd
xor ebp, eax
pshufd xmm0, xmm13, 0xee
movq r15, xmm0
movq rax, xmm13
mov rcx, rax
sub rcx, r15
cmp rcx, 0xb
ja 0x569870
mov r12, rdi
mov rdi, r15
add rdi, 0xc
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
cmp rdi, 9
jae 0x569956
mov edi, 8
test rax, rax
je 0x569a1f
mov qword [rsp + 0x1c0], r12
mov qword [rsp + 0x1d0], rax
mov eax, 1
jmp 0x569a21
lea rax, [0x0090c6fb]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x41350bc6476e31ee
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.005776f0
mov r15d, dword [rax]
movzx ebp, byte [rax + 4]
pshufd xmm0, xmm13, 0xee
movq r14, xmm0
movq rax, xmm13
mov rcx, rax
sub rcx, r14
cmp rcx, 4
ja 0x569ae0
mov r12, rdi
mov rdi, r14
add rdi, 5
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
cmp rdi, 9
jae 0x569a03
mov edi, 8
test rax, rax
je 0x569a76
mov qword [rsp + 0x1c0], r12
mov qword [rsp + 0x1d0], rax
mov eax, 1
jmp 0x569a78
xor eax, eax
mov rdx, rdi
not rdx
shr rdx, 0x3f
mov qword [rsp + 0x1c8], rax
mov rcx, rsi
mov r8, rdi
mov r9, r13
call fcn.00555220
cmp qword [rsp + 0x450], 0
mov rcx, qword [rsp + 0x458]
je 0x56985b
movabs rax, 0x8000000000000001
cmp rcx, rax
mov rdi, r12
mov r12, rsi
je 0x569870
jmp 0x56f54e
xor eax, eax
mov rdx, rdi
not rdx
shr rdx, 0x3f
mov qword [rsp + 0x1c8], rax
mov rcx, rsi
mov r8, rdi
mov r9, r13
call fcn.00555220
cmp qword [rsp + 0x450], 0
mov rcx, qword [rsp + 0x458]
je 0x569ac5
movabs rax, 0x8000000000000001
cmp rcx, rax
mov rdi, r12
mov r12, rsi
je 0x569ae0
jmp 0x56f54e
movq xmm0, rdi
movsd xmm13, xmm0
mov rdi, rcx
mov r12, rsi
nop word cs:[rax + rax]
mov eax, 0x8d34d4e0
xor r15, rax
xor bpl, 0xb4
movzx eax, bpl
shl rax, 0x20
or rax, r15
mov dword [rdi + r14], eax
shr rax, 0x20
mov byte [rdi + r14 + 4], al
add r14, 5
movq xmm0, r14
punpcklqdq xmm13, xmm0
mov eax, 0x5cff10fc
lea r14, [rsp + 0x60]
xor ebx, eax
jmp 0x569893
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
sub rcx, 0xf
mov eax, 0
cmovae rax, rcx
test rsi, rsi
mov qword [rsp + 0x180], rdi
je 0x569d40
mov rdx, qword [rsp + 0x38]
lea rcx, [rdx + 7]
and rcx, 0xfffffffffffffff8
sub rcx, rdx
xor edx, edx
nop dword [rax + rax]
mov r8, qword [rsp + 0x38]
movzx r8d, byte [r8 + rdx]
test r8b, r8b
js 0x569bf0
mov r8d, ecx
sub r8d, edx
test r8b, 7
jne 0x569d2b
jmp 0x569ba4
add rdx, 0x10
cmp rdx, rax
jae 0x569bc6
mov r9, qword [rsp + 0x38]
mov r8, qword [r9 + rdx + 8]
or r8, qword [r9 + rdx]
movabs r9, 0x8080808080808080
test r8, r9
je 0x569ba0
cmp rdx, rsi
jae 0x569d2e
nop
mov r8, qword [rsp + 0x38]
cmp byte [r8 + rdx], 0
js 0x569d2e
inc rdx
cmp rsi, rdx
jne 0x569bd0
jmp 0x569d40
lea r9, [0x009127d4]
movzx r9d, byte [r8 + r9]
cmp r9d, 4
je 0x569c57
cmp r9d, 3
je 0x569c23
cmp r9d, 2
jne 0x569e1c
inc rdx
cmp rdx, rsi
jb 0x569d1b
jmp 0x569e1c
lea r9, [rdx + 1]
cmp r9, rsi
jae 0x569e1c
mov r10, qword [rsp + 0x38]
movzx r9d, byte [r10 + r9]
cmp r8, 0xe0
je 0x569c8b
cmp r8d, 0xed
jne 0x569c9a
cmp r9b, 0x9f
jle 0x569cbc
jmp 0x569e1c
lea r9, [rdx + 1]
cmp r9, rsi
jae 0x569e1c
mov r10, qword [rsp + 0x38]
movzx r9d, byte [r10 + r9]
cmp r8, 0xf0
je 0x569cca
cmp r8d, 0xf4
jne 0x569cd9
cmp r9b, 0x8f
jle 0x569cf1
jmp 0x569e1c
and r9b, 0xe0
cmp r9b, 0xa0
je 0x569cbc
jmp 0x569e1c
lea r10d, [r8 + 0x1f]
cmp r10b, 0xc
jb 0x569cb2
and r8b, 0xfe
cmp r8b, 0xee
jne 0x569e1c
cmp r9b, 0xc0
jge 0x569e1c
add rdx, 2
cmp rdx, rsi
jb 0x569d1b
jmp 0x569e1c
add r9b, 0x70
cmp r9b, 0x30
jb 0x569cf1
jmp 0x569e1c
add r8b, 0xf
cmp r8b, 2
ja 0x569e1c
cmp r9b, 0xc0
jge 0x569e1c
lea r8, [rdx + 2]
cmp r8, rsi
jae 0x569e1c
mov r9, qword [rsp + 0x38]
cmp byte [r9 + r8], 0xbf
jg 0x569e1c
add rdx, 3
cmp rdx, rsi
jae 0x569e1c
mov r8, qword [rsp + 0x38]
cmp byte [r8 + rdx], 0xbf
jg 0x569e1c
inc rdx
cmp rdx, rsi
jb 0x569b70
nop word [rax + rax]
mov rcx, r12
mov rdx, qword [rsp + 0x38]
mov r8, rsi
call fcn.0044e1a0
mov rbx, qword [rsp + 0x450]
mov rdi, qword [rsp + 0x458]
mov rsi, qword [rsp + 0x460]
test rbx, rbx
je 0x569d7c
mov rcx, qword [rsp + 0x468]
mov al, 5
jmp 0x569e92
mov rcx, r12
mov rdx, rdi
mov r8, rsi
mov r9d, 1
call fcn.00527b40
cmp byte [rsp + 0x450], 0x13
jne 0x569f05
lea rdx, [rsp + 0x458]
mov rax, qword [rdx + 0x10]
lea rcx, [rsp + 0x1d0]
mov qword [rcx + 0x50], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx + 0x40], xmm0
lea rax, [rsp + 0x1f0]
movups xmmword [rax], xmm6
mov qword [rsp + 0x1c8], 0
movups xmm0, xmmword [0x009368f0]
movups xmmword [rcx + 0x10], xmm0
movups xmm0, xmmword [0x009368e0]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x200], 0x10
mov qword [rsp + 0x208], 0
xor eax, eax
mov qword [rsp + 0x1c0], rax
mov byte [rdi], 0
test rsi, rsi
jne 0x569f57
jmp 0x569f70
test rsi, rsi
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x569e4d
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ed
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5ed
mov rbx, rax
mov rcx, rax
mov rdx, qword [rsp + 0x38]
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x798]
and rcx, 0xffffffffffffff00
mov al, 7
mov qword [rsp + 0x798], rcx
mov rdi, rsi
mov edx, dword [rsp + 0xa60]
mov r8d, dword [rsp + 0xa63]
lea r9, [rsp + 0x1d0]
mov dword [r9 - 4], r8d
mov dword [r9 - 7], edx
mov qword [rsp + 0x1e0], rsi
mov qword [rsp + 0x1e8], rcx
mov rcx, qword [rsp + 0x7f0]
lea rdx, [rsp + 0x1f0]
mov qword [rdx + 0x10], rcx
movups xmm0, xmmword [rsp + 0x7e0]
movups xmmword [rdx], xmm0
mov byte [rsp + 0x1c8], al
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rdi
mov qword [rsp + 0x1c0], 1
jmp 0x569f79
movups xmm0, xmmword [rsp + 0x450]
movdqu xmm1, xmmword [rsp + 0x460]
movdqu xmm2, xmmword [rsp + 0x470]
movdqu xmm3, xmmword [rsp + 0x480]
lea rax, [rsp + 0x1c8]
movdqu xmmword [rax + 0x30], xmm3
movdqu xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov eax, 1
mov qword [rsp + 0x1c0], rax
mov byte [rdi], 0
test rsi, rsi
je 0x569f70
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x1c0]
test rax, rax
je 0x56a0dd
lea rax, [0x00900fd9]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xc7a05217c1328372
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577ae0
mov rdi, qword [rax]
movabs rcx, 0x5e1f12658da0192
xor rdi, rcx
mov rbx, qword [rax + 8]
movabs rcx, 0xe8ebc8b04360b444
xor rbx, rcx
mov r14, qword [rax + 0x10]
movabs rcx, 0xf0f48030ae4d898e
xor r14, rcx
movzx ebp, word [rax + 0x18]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56a00d
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f58b
mov qword [0x009bf100], rax
mov r8d, 0x1a
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f58b
mov rsi, rax
mov eax, ebp
xor al, 0x69
shr ebp, 8
xor bpl, 0xb9
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rdi
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], r14
movd eax, xmm0
mov word [rsi + 0x18], ax
lea rcx, [rsp + 0x1c8]
call fcn.0056fc90
mov edi, 0x1a
mov r14d, 0x1a
mov rdx, qword [rsp + 0x1a8]
cmp rdx, qword [rsp + 0x1a0]
jne 0x56a096
lea rcx, [rsp + 0x198]
call fcn.005001e0
mov rdx, qword [rsp + 0x1a8]
mov rax, qword [rsp + 0x198]
lea rcx, [rdx + rdx*2]
shl rcx, 4
mov r8, qword [rsp + 0x180]
mov qword [rax + rcx], r8
movdqu xmmword [rax + rcx + 8], xmm13
mov qword [rax + rcx + 0x18], rsi
mov qword [rax + rcx + 0x20], r14
mov qword [rax + rcx + 0x28], rdi
inc rdx
mov qword [rsp + 0x1a8], rdx
lea r14, [rsp + 0x60]
jmp 0x56af20
lea rax, [rsp + 0x1c8]
movups xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x4a0], xmm0
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x490], xmm0
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movdqu xmm3, xmmword [rax + 0x30]
movdqa xmmword [rsp + 0x480], xmm3
movdqa xmmword [rsp + 0x470], xmm2
movdqa xmmword [rsp + 0x460], xmm1
movaps xmmword [rsp + 0x450], xmm0
lea rax, [0x009048ed]
mov qword [rsp + 0xe0], rax
lea rdi, [rsp + 0xe0]
mov rcx, qword [rsp + 0xe0]
movabs rax, 0x63bf204e1b221005
mov qword [rsp + 0xe0], rax
mov rdx, qword [rsp + 0xe0]
call fcn.00577be0
mov rcx, qword [rax]
movabs rdx, 0x5972a7df877b56ec
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x8d270b8cbca1627b
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x3298d8f3e6810947
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0xfeb7937a19532a30
xor r9, r10
mov r10, qword [rax + 0x20]
movabs r11, 0xfe23b20a97c277d6
xor r10, r11
movzx eax, byte [rax + 0x28]
xor al, 0x5b
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov qword [rsp + 0x7f0], r8
mov qword [rsp + 0x7f8], r9
mov qword [rsp + 0x800], r10
mov byte [rsp + 0x808], al
cmp qword [rsp + 0x490], 0
jne 0x56f9eb
mov qword [rsp + 0x490], 0xffffffffffffffff
mov qword [rsp + 0x60], 0
mov qword [rsp + 0xe0], 0
mov rsi, qword [rsp + 0x4a0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r14
mov rcx, rsi
lea rdi, [rsp + 0x7e0]
mov rdx, rdi
mov r8d, 0x29
xor r9d, r9d
call fcn.00830170
test eax, eax
jne 0x56afd8
mov rax, qword [rsp + 0xe0]
mov rcx, rax
sub rcx, rdi
mov rdx, rdi
neg rdx
add rdx, rax
add rdx, 0xffffffffffffffd7
cmp rdx, 0xffffffffffffffd8
mov edx, 0
cmovae rdx, rcx
test rax, rax
cmove rdx, rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xa60], r12
lea rcx, [rsp + 0xa68]
movups xmmword [rcx], xmm6
movups xmmword [rcx + 0x18], xmm6
inc qword [rsp + 0x490]
mov qword [rsp + 0xa98], rax
mov qword [rsp + 0xaa0], rdx
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movdqu xmm2, xmmword [rcx + 0x20]
movdqu xmm3, xmmword [rcx + 0x30]
lea rax, [rsp + 0x7e8]
movdqu xmmword [rax + 0x30], xmm3
movdqu xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0x7e0], r12
mov rcx, qword [rsp + 0x818]
call fcn.00823060
test eax, eax
jne 0x56f9f9
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xa8], 8
lea rax, [rsp + 0xb0]
movups xmmword [rax], xmm6
mov ebx, 0x294ea395
xor eax, eax
jmp 0x56a36e
mov qword [rsp + 0xa8], 8
lea rax, [rsp + 0xb0]
movups xmmword [rax], xmm6
mov eax, 0x1ac21fe4
xor ebx, eax
cmp ebx, 0x294ea395
je 0x56abd0
cmp ebx, 0x338cbc71
je 0x56a3a0
cmp ebx, 0x620faa61
je 0x56ad5a
xor ebx, eax
jmp 0x56a36e
mov dword [rsp + 0x188], ebx
nop word [rax + rax]
mov rsi, qword [rsp + 0xc8]
test rsi, rsi
je 0x56ac64
mov rcx, qword [rsi + 0x38]
call fcn.00833a40
cmp eax, 0x64
jne 0x56ac4a
mov qword [rsp + 0xd0], rsi
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x698], rax
mov byte [rsp + 0x690], 0x13
mov esi, 0x6684e4fd
xor eax, eax
mov qword [rsp + 0x40], rax
mov r15d, 1
xor r12d, r12d
xor eax, eax
mov qword [rsp + 0xc0], rax
xor ebp, ebp
mov eax, 1
mov qword [rsp + 0x50], rax
xor ebx, ebx
xor r13d, r13d
mov qword [rsp + 0x48], rax
xor edi, edi
jmp 0x56a440
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
xor esi, edi
cmp esi, 0x6684e4fc
jg 0x56a4b0
cmp esi, 0xfc8218a9
je 0x56a510
cmp esi, 0x389425bd
jne 0x56a43e
mov rdx, qword [rsp + 0xd0]
mov r8d, 2
mov rcx, r14
call fcn.0040c390
cmp byte [rsp + 0x60], 0x13
jne 0x56f4b2
mov r8, r15
mov r15, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
mov edi, 0x44ae69f7
cmp qword [rsp + 0x40], 0
mov qword [rsp + 0x40], rax
jne 0x56a430
jmp 0x56a43e
cmp esi, 0x6684e4fd
jne 0x56a56b
mov rdx, qword [rsp + 0xd0]
mov rcx, r14
xor r8d, r8d
call fcn.0040c390
cmp byte [rsp + 0x60], 0x13
jne 0x56f4b2
mov r8, qword [rsp + 0x48]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov edi, 0x9a06fc54
mov qword [rsp + 0x48], rax
test rbx, rbx
mov rbx, rcx
jne 0x56a430
jmp 0x56a43e
mov rdx, qword [rsp + 0xd0]
mov r8d, 1
mov rcx, r14
call fcn.0040c390
cmp byte [rsp + 0x60], 0x13
jne 0x56f4b2
mov r8, qword [rsp + 0x50]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov edi, 0xc4163d14
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0xc0], 0
mov qword [rsp + 0xc0], rcx
jne 0x56a430
jmp 0x56a43e
cmp esi, 0x7c3a4c4a
jne 0x56a43e
test r13, r13
je 0x56ab4e
test rbp, rbp
je 0x56ab4e
test r12, r12
je 0x56ab4e
mov qword [rsp + 0x150], 1
lea rax, [rsp + 0x158]
movups xmmword [rax], xmm6
xor esi, esi
mov edi, 0xea86349c
mov r14d, 1
xor eax, eax
mov qword [rsp + 0x58], rbx
jmp 0x56a5d0
cmp edi, 0x662e64bc
je 0x56aaf0
xor edi, eax
nop dword [rax]
cmp edi, 0xea86349b
jle 0x56a670
cmp edi, 0x662e64bb
jg 0x56a6f2
cmp edi, 0xea86349c
je 0x56a7a7
cmp edi, 0x13772762
jne 0x56a5cb
mov rax, qword [rsp + 0x158]
mov rcx, rax
sub rcx, rsi
cmp rcx, r13
jae 0x56a995
mov rbx, rsi
add rbx, r13
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rbx
cmova rbx, rcx
cmp rbx, 9
mov ecx, 8
cmovb rbx, rcx
test rax, rax
je 0x56a931
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xf0], rax
mov eax, 1
jmp 0x56a933
cmp edi, 0x8370129e
je 0x56a7ee
cmp edi, 0xd40678d8
je 0x56a854
cmp edi, 0xe64af395
jne 0x56a5cb
mov rax, qword [rsp + 0x158]
mov rcx, rax
sub rcx, rsi
cmp rcx, r12
jae 0x56aac0
mov rbx, rsi
add rbx, r12
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rbx
cmova rbx, rcx
cmp rbx, 9
mov ecx, 8
cmovb rbx, rcx
test rax, rax
je 0x56aa59
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0xf0], rax
mov eax, 1
jmp 0x56aa5b
cmp edi, 0x7f09e3e0
jne 0x56a5bf
lea rax, [0x00905c4f]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0xe0]
mov rcx, qword [rsp + 0xe0]
movabs rdx, 0xef6aeb0f36256102
mov qword [rsp + 0xe0], rdx
mov rdx, qword [rsp + 0xe0]
call fcn.00577960
movq xmm14, qword [rax]
movq xmm15, qword [rax + 8]
mov rax, qword [rsp + 0x158]
mov rcx, rax
sub rcx, rsi
cmp rcx, 0xf
ja 0x56a909
mov rbx, rsi
add rbx, 0x10
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rbx
cmova rbx, rcx
cmp rbx, 9
mov ecx, 8
cmovb rbx, rcx
test rax, rax
je 0x56a8a2
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0xf0], rax
mov eax, 1
jmp 0x56a8a4
cmp qword [rsp + 0x158], 0
je 0x56a7c3
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x150], 1
lea rax, [rsp + 0x158]
movups xmmword [rax], xmm6
mov eax, 0xf9f113fe
mov r14d, 1
xor esi, esi
xor edi, eax
jmp 0x56a5d0
mov rax, qword [rsp + 0x158]
mov rcx, rax
sub rcx, rsi
cmp rcx, rbp
jae 0x56aa29
mov rbx, rsi
add rbx, rbp
jb 0x56f527
lea rcx, [rax + rax]
cmp rcx, rbx
cmova rbx, rcx
cmp rbx, 9
mov ecx, 8
cmovb rbx, rcx
test rax, rax
je 0x56a9c5
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xf0], rax
mov eax, 1
jmp 0x56a9c7
cmp rsi, qword [rsp + 0x158]
jne 0x56a87e
lea rcx, [rsp + 0x150]
mov rdx, rsi
call fcn.005553c0
mov r14, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x160]
mov byte [r14 + rsi], 9
mov rsi, qword [rsp + 0x160]
inc rsi
mov qword [rsp + 0x160], rsi
mov eax, 0x324c8b4d
xor edi, eax
jmp 0x56a5d0
xor eax, eax
mov rdx, rbx
not rdx
shr rdx, 0x3f
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0x60]
mov r8, rbx
lea r9, [rsp + 0xe0]
call fcn.00555220
cmp qword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x68]
je 0x56a8f1
movabs rax, 0x8000000000000001
cmp rcx, rax
mov rbx, qword [rsp + 0x58]
je 0x56a909
jmp 0x56f522
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rbx
mov r14, rcx
mov rbx, qword [rsp + 0x58]
punpcklqdq xmm14, xmm15
pxor xmm14, xmm10
movdqu xmmword [r14 + rsi], xmm14
add rsi, 0x10
mov qword [rsp + 0x160], rsi
mov eax, 0xfc79f17e
xor edi, eax
jmp 0x56a5d0
xor eax, eax
lea rcx, [rsp + 0x60]
mov rdx, rbx
not rdx
shr rdx, 0x3f
mov qword [rsp + 0xe8], rax
mov r8, rbx
lea r9, [rsp + 0xe0]
call fcn.00555220
cmp qword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x68]
je 0x56a980
movabs rax, 0x8000000000000001
cmp rcx, rax
mov rbx, qword [rsp + 0x58]
je 0x56a995
jmp 0x56f522
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rbx
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x150]
lea rcx, [r14 + rsi]
mov rdx, qword [rsp + 0x48]
mov r8, r13
call sub.msvcrt.dll_memcpy
add rsi, r13
mov qword [rsp + 0x160], rsi
mov eax, 0x6c7ec482
xor edi, eax
jmp 0x56a5d0
xor eax, eax
lea rcx, [rsp + 0x60]
mov rdx, rbx
not rdx
shr rdx, 0x3f
mov qword [rsp + 0xe8], rax
mov r8, rbx
lea r9, [rsp + 0xe0]
call fcn.00555220
cmp qword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x68]
je 0x56aa14
movabs rax, 0x8000000000000001
cmp rcx, rax
mov rbx, qword [rsp + 0x58]
je 0x56aa29
jmp 0x56f522
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rbx
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x150]
lea rcx, [r14 + rsi]
mov rdx, qword [rsp + 0x50]
mov r8, rbp
call sub.msvcrt.dll_memcpy
add rsi, rbp
mov qword [rsp + 0x160], rsi
mov eax, 0x57766a46
xor edi, eax
jmp 0x56a5d0
xor eax, eax
mov rdx, rbx
not rdx
shr rdx, 0x3f
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0x60]
mov r8, rbx
lea r9, [rsp + 0xe0]
call fcn.00555220
cmp qword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x68]
je 0x56aaa8
movabs rax, 0x8000000000000001
cmp rcx, rax
mov rbx, qword [rsp + 0x58]
je 0x56aac0
jmp 0x56f522
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rbx
mov r14, rcx
mov rbx, qword [rsp + 0x58]
lea rcx, [r14 + rsi]
mov rdx, r15
mov r8, r12
call sub.msvcrt.dll_memcpy
add rsi, r12
mov qword [rsp + 0x160], rsi
mov eax, 0x80649729
xor edi, eax
jmp 0x56a5d0
mov rdx, qword [rsp + 0xb8]
cmp rdx, qword [rsp + 0xb0]
jne 0x56ab17
lea rcx, [rsp + 0xa8]
call fcn.0041e090
mov rdx, qword [rsp + 0xb8]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0xa8]
lea rcx, [rdx + rdx*2]
mov r8, qword [rsp + 0x160]
mov qword [rax + rcx*8 + 0x10], r8
movdqu xmm0, xmmword [rsp + 0x150]
movdqu xmmword [rax + rcx*8], xmm0
inc rdx
mov qword [rsp + 0xb8], rdx
cmp qword [rsp + 0x40], 0
je 0x56ab67
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0xc0], 0
lea r13, [rsp + 0x1c0]
lea r12, [rsp + 0x450]
je 0x56ab95
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x50]
call sub.KERNEL32.dll_HeapFree
test rbx, rbx
je 0x56abad
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x48]
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x690], 0x13
je 0x56a3b0
lea rcx, [rsp + 0x690]
call fcn.0056fc90
jmp 0x56a3b0
mov rsi, qword [rsp + 0xb8]
test rsi, rsi
je 0x56ac20
mov rdi, qword [rsp + 0xa8]
add rdi, 8
jmp 0x56abf9
add rdi, 0x18
dec rsi
je 0x56ac20
cmp qword [rdi], 0
je 0x56abf0
mov r8, qword [rdi - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x56abf0
cmp qword [rsp + 0xb0], 0
je 0x56a350
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x56a350
cmp eax, 0x65
jne 0x56ac83
mov qword [rsp + 0xc8], 0
mov rcx, qword [rsi + 0x38]
call fcn.00831020
mov qword [rsp + 0xd0], 0
mov eax, 0x51831610
mov ebx, dword [rsp + 0x188]
xor ebx, eax
jmp 0x56a36e
mov rdi, qword [rsi]
mov rcx, qword [rdi + 0x40]
movabs rdx, 0x8000000000000001
add rdx, 0xfffffffffffffffe
cmp rcx, rdx
jae 0x56f6ec
lea rdx, [rcx + 1]
mov qword [rdi + 0x40], rdx
test eax, eax
je 0x56f6fa
mov rdx, qword [rdi + 0x50]
lea rcx, [rsp + 0xe0]
mov r8d, eax
call fcn.005276d0
movzx ebx, byte [rsp + 0xe0]
dec qword [rdi + 0x40]
cmp bl, 0x13
je 0x56f6fe
movzx edi, byte [rsp + 0xe1]
lea rax, [rsp + 0xe2]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movdqu xmm3, xmmword [rax + 0x2e]
lea rax, [rsp + 0x692]
movdqu xmmword [rax + 0x2e], xmm3
movdqu xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0xc8], 0
mov rcx, qword [rsi + 0x38]
call fcn.00831020
mov qword [rsp + 0xd0], 0
mov byte [rsp + 0x690], bl
mov byte [rsp + 0x691], dil
lea rcx, [rsp + 0x690]
call fcn.0056fc90
jmp 0x56ac70
mov qword [rsp + 0xe0], 1
lea rax, [rsp + 0xe2]
movups xmmword [rax + 6], xmm6
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x56af51
mov r15, qword [rsp + 0xa8]
lea rax, [rax + rax*2]
lea r12, [r15 + rax*8]
mov esi, 1
xor edi, edi
jmp 0x56adc0
mov rsi, qword [rsp + 0xe0]
mov byte [rsi + rdi], 0xa
inc rdi
mov qword [rsp + 0xf0], rdi
add r15, 0x18
cmp r15, r12
je 0x56ae3c
mov r14, qword [r15]
mov rbx, qword [r15 + 0x10]
mov rax, qword [rsp + 0xe8]
sub rax, rdi
cmp rax, rbx
jb 0x56ae17
add rsi, rdi
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
add rdi, rbx
mov qword [rsp + 0xf0], rdi
cmp rdi, qword [rsp + 0xe8]
jne 0x56ada0
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call fcn.005553c0
mov rdi, qword [rsp + 0xf0]
jmp 0x56ada0
lea rcx, [rsp + 0xe0]
mov rdx, rdi
mov r8, rbx
call fcn.004097c0
mov rsi, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf0]
jmp 0x56add7
mov r14, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xb8]
test rbx, rbx
je 0x56afc3
mov r15, qword [rsp + 0xa8]
add r15, 8
lea r12, [rsp + 0x450]
jmp 0x56ae7d
add r15, 0x18
dec rbx
je 0x56af5b
cmp qword [r15], 0
je 0x56ae70
mov r8, qword [r15 - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x56ae70
test byte [rsp + 0x201], 4
je 0x56afac
mov eax, dword [rsp + 0x204]
mov ecx, 0x20000000
and eax, ecx
je 0x56afac
nop dword [rax]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x56af20
test rax, rax
je 0x56af20
mov rsi, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x56af04
cmp qword [rbx + 0x10], 0x11
jb 0x56aef3
mov rsi, qword [rsi - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
dec rdi
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
nop dword [rax + rax]
mov rax, qword [rsp + 0x138]
test rax, rax
mov rsi, qword [rsp + 0x190]
je 0x569530
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x38]
call sub.KERNEL32.dll_HeapFree
jmp 0x569530
mov esi, 1
xor r14d, r14d
xor edi, edi
cmp qword [rsp + 0xb0], 0
je 0x56af7c
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xc8]
test rax, rax
je 0x56af92
mov rcx, qword [rax + 0x38]
call fcn.00831020
lea rcx, [rsp + 0x7e0]
call fcn.0056fd70
mov rcx, r12
call fcn.0056feb0
jmp 0x56a06f
mov qword [rsp + 0x48], rsi
lea rcx, [rsp + 0x7e0]
call fcn.00584cb0
jmp 0x569845
lea r12, [rsp + 0x450]
cmp qword [rsp + 0xb0], 0
jne 0x56af66
jmp 0x56af7c
mov qword [rsp + 0x20], 0x29
lea rcx, [rsp + 0xa68]
mov rdx, rsi
mov r8d, eax
mov r9, rdi
call fcn.00527730
inc qword [rsp + 0x490]
mov qword [rsp + 0xa60], 0
lea rax, [0x00904e10]
mov qword [rsp + 0x7e0], rax
mov rcx, qword [rsp + 0x7e0]
movabs rax, 0x252c847b2eeffd5b
mov qword [rsp + 0x7e0], rax
mov rdx, qword [rsp + 0x7e0]
call fcn.00577930
mov rsi, qword [rax]
movabs rax, 0x788c2058728c754a
xor rsi, rax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b079
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56faca
mov qword [0x009bf100], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56faca
mov rbx, rax
mov qword [rax], rsi
lea rax, [0x0090d811]
mov qword [rsp + 0x7e0], rax
lea rax, [rsp + 0x7e0]
mov rcx, qword [rsp + 0x7e0]
movabs rdx, 0x709597ee0250c9b1
mov qword [rsp + 0x7e0], rdx
mov rdx, qword [rsp + 0x7e0]
call fcn.005777a0
mov rdi, qword [rax]
movabs rcx, 0x9ec2ab60b59ed0a5
xor rdi, rcx
mov r14, qword [rax + 8]
movabs rcx, 0xf2c70bc9be771857
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0x24762826647a60d6
xor r15, rcx
movzx ebp, word [rax + 0x18]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b134
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f58b
mov qword [0x009bf100], rax
mov r8d, 0x1a
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f58b
mov rsi, rax
mov eax, ebp
xor al, 0x7f
shr ebp, 8
xor bpl, 0x8b
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rdi
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r15
movd eax, xmm0
mov word [rsi + 0x18], ax
lea rcx, [rsp + 0xa68]
call fcn.0056fc90
mov rcx, r12
call fcn.0056feb0
movq rax, xmm13
mov edi, 0x1a
test rax, rax
je 0x56b1b8
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x180]
call sub.KERNEL32.dll_HeapFree
mov r14d, 0x1a
mov qword [rsp + 0x180], rbx
movdqa xmm13, xmmword [0x00871290]
jmp 0x56a06f
cmp qword [rsp + 0x438], 0
je 0x56b1f5
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x1b0]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xd8]
mov esi, 0x1c2a57f6
test rax, rax
je 0x5668c6
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x130]
call sub.KERNEL32.dll_HeapFree
jmp 0x5668c6
cmp qword [rsp + 0x1a0], 0
je 0x56b258
mov r8, qword [rsp + 0x198]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [rsp + 0x14c]
mov qword [rsp + 0x198], 8
lea rax, [rsp + 0x1a0]
movups xmmword [rax], xmm6
mov esi, 0x1de79fc1
xor ecx, esi
jmp 0x566666
test rsi, rsi
je 0x5667ed
mov rdx, qword [rsp + 0x440]
lea rax, [rdx + rsi]
jmp 0x56b2ac
add rdx, 2
cmp rcx, rax
cmovne rcx, rdx
nop dword [rax]
mov rdx, rcx
cmp rcx, rax
je 0x5667ed
lea rcx, [rdx + 1]
movzx r8d, byte [rdx]
test r8b, r8b
jns 0x56b2a0
cmp r8b, 0xe0
jb 0x56b292
cmp r8b, 0xed
jne 0x56b2ee
cmp rcx, rax
je 0x5667ed
lea rcx, [rdx + 2]
cmp rcx, rax
je 0x5667ed
cmp byte [rdx + 1], 0x9f
ja 0x56fa1c
add rdx, 3
mov rcx, rdx
jmp 0x56b2a0
add rdx, 2
cmp rcx, rax
cmove rdx, rcx
xor ecx, ecx
cmp rdx, rax
setne cl
add rcx, rdx
cmp r8b, 0xf0
jb 0x56b2a0
xor edx, edx
cmp rcx, rax
setne dl
add rcx, rdx
jmp 0x56b2a0
mov qword [rsp + 0x1c0], 8
lea rax, [rsp + 0x1c8]
movups xmmword [rax], xmm6
mov edi, 0xe2371a86
xor ecx, ecx
xor eax, eax
jmp 0x56b37d
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xadd5540d
mov edx, 0xc
nop word [rax + rax]
mov qword [rcx + 8], rdx
mov qword [rcx + 0x10], rdx
mov rcx, qword [rsp + 0x1d0]
inc rcx
mov qword [rsp + 0x1d0], rcx
xor edi, eax
cmp edi, 0xe022e382
jg 0x56b4d0
cmp edi, 0xaee43811
jg 0x56b600
cmp edi, 0x90de85f9
jle 0x56b8b1
cmp edi, 0xab01c7bb
jg 0x56bd39
cmp edi, 0x90de85fa
je 0x56c3ef
cmp edi, 0xa823f129
jne 0x56b37b
lea rax, [0x009001f4]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x85d1f982fcc7baf7
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577ed0
mov rbx, qword [rax]
movabs rcx, 0x38c8f8a48461c237
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0xdc51020a
xor ebp, ecx
movzx r14d, word [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b43e
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f59c
mov qword [0x009bf100], rax
mov r8d, 0xe
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f59c
mov rsi, rax
mov eax, r14d
xor al, 0x42
shr r14d, 8
xor r14b, 0xbc
movzx eax, al
movzx ecx, r14b
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov dword [rsi + 8], ebp
movd eax, xmm0
mov word [rsi + 0xc], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56b4a7
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xc1b02162
mov edx, 0xe
jmp 0x56b360
cmp edi, 0x24dfcf4a
jg 0x56b760
cmp edi, 0xf6f18c8c
jle 0x56bafa
cmp edi, 0x14ee62a2
jg 0x56bf84
cmp edi, 0xf6f18c8d
je 0x56c8c6
cmp edi, 0x432f83e
jne 0x56b37b
lea rax, [0x0090bb38]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x12791bdf2be334eb
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005784d0
mov rbx, qword [rax]
movabs rcx, 0x1a89b2fbc925917
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0x4b633b69
xor ebp, ecx
movzx r14d, byte [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b589
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ad
mov qword [0x009bf100], rax
mov r8d, 0xd
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5ad
mov rsi, rax
xor r14b, 0xae
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov byte [rax + 0xc], r14b
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56b5d5
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x44a22c13
mov edx, 0xd
jmp 0x56b360
cmp edi, 0xb8c9eb22
jle 0x56b9ce
cmp edi, 0xd751ecdb
jg 0x56be7b
cmp edi, 0xb8c9eb23
je 0x56c4c8
cmp edi, 0xce1b6115
jne 0x56b37b
lea rax, [0x00905f72]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x36d96341f83c3e8b
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577b10
mov rbx, qword [rax]
movabs rcx, 0x8da4b6273c990083
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x5afdcaf5776b2977
xor r14, rcx
movzx ebp, byte [rax + 0x12]
movzx r15d, word [rax + 0x10]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b6b8
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5fc
mov qword [0x009bf100], rax
mov r8d, 0x13
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5fc
mov rsi, rax
mov eax, r15d
shr eax, 8
xor r15b, 0xa4
xor al, 0x7f
movzx ecx, r15b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 0xc0
mov qword [rsi], rbx
mov qword [rsi + 8], r14
movd eax, xmm0
mov word [rsi + 0x10], ax
mov byte [rsi + 0x12], bpl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56b729
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xe6ae1d0e
mov edx, 0x13
jmp 0x56b360
cmp edi, 0x4090d42c
jle 0x56bc24
cmp edi, 0x6993d04a
jg 0x56c0cb
cmp edi, 0x4090d42d
je 0x56c9d4
cmp edi, 0x63831707
jne 0x56b37b
lea rax, [0x00907b30]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x1c384f734ed4e7e8
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005772a0
mov rbx, qword [rax]
movabs rcx, 0xd7ce948e4dee383a
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x8242331baeb59201
xor r14, rcx
movzx ebp, byte [rax + 0x12]
movzx r15d, word [rax + 0x10]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b818
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5fc
mov qword [0x009bf100], rax
mov r8d, 0x13
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5fc
mov rsi, rax
mov eax, r15d
shr eax, 8
xor r15b, 0x6b
xor al, 0x10
movzx ecx, r15b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 7
mov qword [rsi], rbx
mov qword [rsi + 8], r14
movd eax, xmm0
mov word [rsi + 0x10], ax
mov byte [rsi + 0x12], bpl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56b889
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xd6e67349
mov edx, 0x13
jmp 0x56b360
cmp edi, 0x8420a2b6
jg 0x56c1a8
cmp edi, 0x829aed36
je 0x56c2dc
cmp edi, 0x840e5fe6
jne 0x56b37b
lea rax, [0x0090a39d]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x1f5f9e6e4f6dc8b
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577840
mov rbx, qword [rax]
movabs rcx, 0xe427b9a4a40aa576
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x2f5b338f7175358d
xor r14, rcx
mov ebp, dword [rax + 0x10]
mov eax, 0x6c74145a
xor ebp, eax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56b95e
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5be
mov qword [0x009bf100], rax
mov r8d, 0x14
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5be
mov rsi, rax
mov qword [rax], rbx
mov qword [rax + 8], r14
mov dword [rax + 0x10], ebp
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56b9a6
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x72ffd36b
mov edx, 0x14
jmp 0x56b360
cmp edi, 0xaee43812
je 0x56c5a2
cmp edi, 0xb04428b2
je 0x56cac5
cmp edi, 0xb565644e
jne 0x56b37b
lea rax, [0x0090ccf4]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x89492867ff8fb81c
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005785f0
mov r14, qword [rax]
movabs rcx, 0x33a8f5d7c55d3e9
xor r14, rcx
movzx ebx, byte [rax + 0xa]
movzx ebp, word [rax + 8]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56ba68
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f61e
mov qword [0x009bf100], rax
mov r8d, 0xb
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f61e
mov rsi, rax
mov eax, ebp
shr eax, 8
xor bpl, 0x95
xor al, 0xc0
movzx ecx, bpl
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bl, 0xf1
mov qword [rsi], r14
movd eax, xmm0
mov word [rsi + 8], ax
mov byte [rsi + 0xa], bl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56bad2
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xc5625cfd
mov edx, 0xb
jmp 0x56b360
cmp edi, 0xe022e383
je 0x56cbbe
cmp edi, 0xe2371a86
je 0x56ccbf
cmp edi, 0xeb3c5ac5
jne 0x56b37b
lea rax, [0x008fffaf]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xb513e8180899e
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005779c0
mov rbx, qword [rax]
movabs rcx, 0xf95ef274c75ec36d
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x94acdbb5c51c5e7c
xor r14, rcx
mov ebp, dword [rax + 0x10]
mov ecx, 0xf495f758
xor ebp, ecx
movzx r15d, byte [rax + 0x14]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56bbac
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f686
mov qword [0x009bf100], rax
mov r8d, 0x15
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f686
mov rsi, rax
xor r15b, 0x87
mov qword [rax], rbx
mov qword [rax + 8], r14
mov dword [rax + 0x10], ebp
mov byte [rax + 0x14], r15b
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56bbfc
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x45d862d7
mov edx, 0x15
jmp 0x56b360
cmp edi, 0x24dfcf4b
je 0x56cdf3
cmp edi, 0x28b57c1b
je 0x56cf1b
cmp edi, 0x3ba73e00
jne 0x56b37b
lea rax, [0x008fee06]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x587c1da128d89e4d
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005785d0
mov rbx, qword [rax]
movabs rcx, 0xd9fb5375c9ffb64e
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0xc120fd5f
xor ebp, ecx
movzx r14d, byte [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56bcc5
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ad
mov qword [0x009bf100], rax
mov r8d, 0xd
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5ad
mov rsi, rax
xor r14b, 0x5a
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov byte [rax + 0xc], r14b
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56bd11
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xd09b64c5
mov edx, 0xd
jmp 0x56b360
cmp edi, 0xab01c7bc
je 0x56c6b0
cmp edi, 0xaded41dc
jne 0x56b37b
lea rax, [0x0090b3d2]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x58710aa61e442205
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578160
mov rbx, qword [rax]
movabs rcx, 0x8d2dc92dffd86176
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x8f26b0aab5061609
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0xf4420a127f485a53
xor r15, rcx
mov r12, qword [rax + 0x18]
movabs rcx, 0xfe5567be150202d2
xor r12, rcx
movzx ebp, byte [rax + 0x20]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56bdf6
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f697
mov qword [0x009bf100], rax
mov r8d, 0x21
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f697
mov rsi, rax
xor bpl, 0xf
mov qword [rax], rbx
mov qword [rax + 8], r14
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r12
mov byte [rax + 0x20], bpl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56be4b
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r12, [rsp + 0x450]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x89328e97
mov edx, 0x21
jmp 0x56b360
cmp edi, 0xd751ecdc
je 0x56c7be
cmp edi, 0xddd26cbe
jne 0x56b37b
lea rax, [0x0090d96e]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xa1c608c61eb19000
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578780
mov rbx, qword [rax]
movabs rcx, 0xdfd32d730f800856
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0xf5df19ed
xor ebp, ecx
movzx r14d, byte [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56bf10
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ad
mov qword [0x009bf100], rax
mov r8d, 0xd
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5ad
mov rsi, rax
xor r14b, 0x1c
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov byte [rax + 0xc], r14b
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56bf5c
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x3df08f3d
mov edx, 0xd
jmp 0x56b360
cmp edi, 0x14ee62a3
je 0x56d01c
cmp edi, 0x1f506c7e
jne 0x56b37b
lea rax, [0x00901410]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xdee630ec0aeb03fc
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577600
mov rbx, qword [rax]
movabs rcx, 0xbfb2926b1fef2e1d
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0xa9740032520f1614
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0xef30ef090738c5eb
xor r15, rcx
mov r12d, dword [rax + 0x18]
mov ecx, 0xa8e77a41
xor r12d, ecx
movzx ebp, byte [rax + 0x1e]
movzx r13d, word [rax + 0x1c]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c041
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f6a8
mov qword [0x009bf100], rax
mov r8d, 0x1f
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f6a8
mov rsi, rax
mov eax, r13d
shr eax, 8
xor r13b, 0x56
xor al, 0x4b
movzx ecx, r13b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 0x40
mov qword [rsi], rbx
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r15
mov dword [rsi + 0x18], r12d
movd eax, xmm0
mov word [rsi + 0x1c], ax
mov byte [rsi + 0x1e], bpl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56d23d
lea r13, [rsp + 0x1c0]
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
jmp 0x56d245
cmp edi, 0x6993d04b
je 0x56d115
cmp edi, 0x700738b3
jne 0x56b37b
lea rax, [0x00904491]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x27ac7022252f5e9f
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578ba0
mov rbx, qword [rax]
movabs rcx, 0x6af5a90e73324d8f
xor rbx, rcx
mov ebp, dword [rax + 8]
mov eax, 0x2554da64
xor ebp, eax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c15b
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f60d
mov qword [0x009bf100], rax
mov r8d, 0xc
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f60d
mov rsi, rax
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56b339
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
jmp 0x56b339
cmp edi, 0x8d2a8090
jne 0x56d2ad
lea rax, [0x00902bf8]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x51b7c9da2ccce966
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577e10
mov rbx, qword [rax]
movabs rcx, 0xcadca64821db2d72
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x18184d409ca4a102
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0x1416af8d27b8f698
xor r15, rcx
movzx ebp, word [rax + 0x18]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c248
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f58b
mov qword [0x009bf100], rax
mov r8d, 0x1a
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f58b
mov rsi, rax
mov eax, ebp
xor al, 0xbe
shr ebp, 8
add bpl, 0x80
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r15
movd eax, xmm0
mov word [rsi + 0x18], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c2b4
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x99c4e233
mov edx, 0x1a
jmp 0x56b360
lea rax, [0x00906d26]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x3063c5b1390277dc
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005787f0
mov rbx, qword [rax]
movabs rcx, 0xa5f7160ba63ae617
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x9cd1dbf7a1fce790
xor r14, rcx
movzx ebp, word [rax + 0x10]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c35f
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f6b9
mov qword [0x009bf100], rax
mov r8d, 0x12
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f6b9
mov rsi, rax
mov eax, ebp
xor al, 0x20
shr ebp, 8
xor bpl, 0x6c
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov qword [rsi + 8], r14
movd eax, xmm0
mov word [rsi + 0x10], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c3c7
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x3a530615
mov edx, 0x12
jmp 0x56b360
lea rax, [0x0090ce57]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x759fa6fb97fbff35
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578270
movq xmm13, qword [rax]
movq xmm14, qword [rax + 8]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c458
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f6ca
mov qword [0x009bf100], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f6ca
mov rsi, rax
punpcklqdq xmm13, xmm14
pxor xmm13, xmm12
movdqu xmmword [rax], xmm13
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c4a5
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x38fd74d3
mov edx, 0x10
jmp 0x56b360
lea rax, [0x009099cf]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xa9fae31ca3497b02
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577740
mov rbx, qword [rax]
movabs rcx, 0x4fe344b6e556f7a7
xor rbx, rcx
mov ebp, dword [rax + 8]
mov eax, 0xc9c7768c
xor ebp, eax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c540
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f60d
mov qword [0x009bf100], rax
mov r8d, 0xc
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f60d
mov rsi, rax
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c584
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xdb4afc24
jmp 0x56b352
lea rax, [0x009031db]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xbdf2be5401a9afb9
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577d10
mov rbx, qword [rax]
movabs rcx, 0x2e3d2406677d438
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0x6dd62cb5
xor ebp, ecx
movzx r14d, word [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c61f
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f59c
mov qword [0x009bf100], rax
mov r8d, 0xe
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f59c
mov rsi, rax
mov eax, r14d
xor al, 0x35
shr r14d, 8
xor r14b, 0xca
movzx eax, al
movzx ecx, r14b
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov dword [rsi + 8], ebp
movd eax, xmm0
mov word [rsi + 0xc], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c688
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x1ea010a0
mov edx, 0xe
jmp 0x56b360
lea rax, [0x0090b96c]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x43e4b7384337eb3c
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005788b0
mov rbx, qword [rax]
movabs rcx, 0x4aaa1b4040ae7452
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0x3181eb81
xor ebp, ecx
movzx r14d, word [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c72d
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f59c
mov qword [0x009bf100], rax
mov r8d, 0xe
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f59c
mov rsi, rax
mov eax, r14d
xor al, 0xd9
shr r14d, 8
xor r14b, 0x72
movzx eax, al
movzx ecx, r14b
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov dword [rsi + 8], ebp
movd eax, xmm0
mov word [rsi + 0xc], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c796
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x90a6f9bc
mov edx, 0xe
jmp 0x56b360
lea rax, [0x009060b4]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x9bbc04da92bffc8c
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577d40
mov r14, qword [rax]
movabs rcx, 0x81de54ea3c9e7863
xor r14, rcx
movzx ebx, byte [rax + 0xa]
movzx ebp, word [rax + 8]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c834
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f61e
mov qword [0x009bf100], rax
mov r8d, 0xb
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f61e
mov rsi, rax
mov eax, ebp
shr eax, 8
xor bpl, 0x2b
xor al, 0x18
movzx ecx, bpl
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bl, 0x25
mov qword [rsi], r14
movd eax, xmm0
mov word [rsi + 8], ax
mov byte [rsi + 0xa], bl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c89e
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xd36314e2
mov edx, 0xb
jmp 0x56b360
lea rax, [0x009056d8]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xd8604224d223ca87
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577f80
mov rbx, qword [rax]
movabs rcx, 0x3b4c4e6f8809a192
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0xe2bf12cf
xor ebp, ecx
movzx r14d, word [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56c943
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f59c
mov qword [0x009bf100], rax
mov r8d, 0xe
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f59c
mov rsi, rax
mov eax, r14d
xor al, 0x3c
shr r14d, 8
xor r14b, 0xa5
movzx eax, al
movzx ecx, r14b
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov dword [rsi + 8], ebp
movd eax, xmm0
mov word [rsi + 0xc], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56c9ac
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x7bdb0c1d
mov edx, 0xe
jmp 0x56b360
lea rax, [0x00909893]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xfa0950fb3b929da5
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577520
mov rbx, qword [rax]
movabs rcx, 0x3d0ac2755198554d
xor rbx, rcx
mov ebp, dword [rax + 8]
mov ecx, 0xcdce4a37
xor ebp, ecx
movzx r14d, byte [rax + 0xc]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56ca51
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5ad
mov qword [0x009bf100], rax
mov r8d, 0xd
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5ad
mov rsi, rax
xor r14b, 0x13
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov byte [rax + 0xc], r14b
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56ca9d
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xc20a391b
mov edx, 0xd
jmp 0x56b360
lea rax, [0x009097da]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xabd3391e91a471af
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578500
mov rbx, qword [rax]
movabs rcx, 0x162b3e1e0a35bb73
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0xbf2af1684cf01baa
xor r14, rcx
mov ebp, dword [rax + 0x10]
mov eax, 0xc1f7bc8b
xor ebp, eax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56cb4e
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5be
mov qword [0x009bf100], rax
mov r8d, 0x14
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5be
mov rsi, rax
mov qword [rax], rbx
mov qword [rax + 8], r14
mov dword [rax + 0x10], ebp
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56cb96
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x344a7754
mov edx, 0x14
jmp 0x56b360
lea rax, [0x00904ff8]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xd4ab2ba0db6207f0
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005780a0
mov rbx, qword [rax]
movabs rcx, 0xdee3fdaf3eb04fe9
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0xb3c584f38b9fed84
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rax, 0xbf6d02e468274e9e
xor r15, rax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56cc4e
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f62f
mov qword [0x009bf100], rax
mov r8d, 0x18
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f62f
mov rsi, rax
mov qword [rax], rbx
mov qword [rax + 8], r14
mov qword [rax + 0x10], r15
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56cc97
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x4b23243f
mov edx, 0x18
jmp 0x56b360
lea rax, [0x00901e5f]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x70dd0832dd18ab8f
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578850
mov rbx, qword [rax]
movabs rcx, 0x8fb08b54a76a2067
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0xa3cc51c14592c319
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0xe9471d821778c25b
xor r15, rcx
mov r12, qword [rax + 0x18]
movabs rcx, 0x40063cea541c47d9
xor r12, rcx
movzx ebp, byte [rax + 0x22]
movzx r13d, word [rax + 0x20]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56cd69
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f6db
mov qword [0x009bf100], rax
mov r8d, 0x23
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f6db
mov rsi, rax
mov eax, r13d
shr eax, 8
xor r13b, 0xc7
xor al, 0xdb
movzx ecx, r13b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 0xfc
mov qword [rsi], rbx
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r12
movd eax, xmm0
mov word [rsi + 0x20], ax
mov byte [rsi + 0x22], bpl
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56d275
lea r13, [rsp + 0x1c0]
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
jmp 0x56d27d
lea rax, [0x00904a39]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x8b466c327af5a6b2
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578aa0
mov rbx, qword [rax]
movabs rcx, 0x621b5f0d0c9a2e00
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x4563195d36a585f0
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0x2d2b78e2ef5de559
xor r15, rcx
movzx ebp, word [rax + 0x18]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56ce87
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f58b
mov qword [0x009bf100], rax
mov r8d, 0x1a
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f58b
mov rsi, rax
mov eax, ebp
xor al, 0xd9
shr ebp, 8
xor bpl, 0x26
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r15
movd eax, xmm0
mov word [rsi + 0x18], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56cef3
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xb4014ab1
mov edx, 0x1a
jmp 0x56b360
lea rax, [0x009035c7]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x5b9a784bf4f62f70
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577cd0
mov rbx, qword [rax]
movabs rcx, 0x4ee579c443d766c3
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0xb3d8b8dada6cac6a
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rax, 0x82b067fd3cb6fddb
xor r15, rax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56cfab
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f62f
mov qword [0x009bf100], rax
mov r8d, 0x18
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f62f
mov rsi, rax
mov qword [rax], rbx
mov qword [rax + 8], r14
mov qword [rax + 0x10], r15
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56cff4
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x85583dc7
mov edx, 0x18
jmp 0x56b360
lea rax, [0x008ff06a]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x3b9e0eef5a3482a7
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00578c40
mov rbx, qword [rax]
movabs rcx, 0x3652fa119ae498cf
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x7bf717644b0d3db9
xor r14, rcx
mov ebp, dword [rax + 0x10]
mov eax, 0xba60a6c9
xor ebp, eax
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56d0a5
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5be
mov qword [0x009bf100], rax
mov r8d, 0x14
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f5be
mov rsi, rax
mov qword [rax], rbx
mov qword [rax + 8], r14
mov dword [rax + 0x10], ebp
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56d0ed
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0x90cec014
mov edx, 0x14
jmp 0x56b360
lea rax, [0x0090b975]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x70b8d6344816e7ba
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005782c0
mov rbx, qword [rax]
movabs rcx, 0xb115e96da1b4eef8
xor rbx, rcx
mov r14, qword [rax + 8]
movabs rcx, 0x5c60055c8b31a151
xor r14, rcx
mov r15, qword [rax + 0x10]
movabs rcx, 0x9b81a2e7c5becc19
xor r15, rcx
movzx ebp, word [rax + 0x18]
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56d1a9
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f58b
mov qword [0x009bf100], rax
mov r8d, 0x1a
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x56f58b
mov rsi, rax
mov eax, ebp
xor al, 0x29
shr ebp, 8
xor bpl, 0xb4
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [rsi], rbx
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r15
movd eax, xmm0
mov word [rsi + 0x18], ax
mov rdx, qword [rsp + 0x1d0]
cmp rdx, qword [rsp + 0x1c8]
jne 0x56d215
mov rcx, r13
call fcn.0041e090
mov rdx, qword [rsp + 0x1d0]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xbec23c97
mov edx, 0x1a
jmp 0x56b360
lea r13, [rsp + 0x1c0]
lea r12, [rsp + 0x450]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xd14b0d6b
mov edx, 0x1f
jmp 0x56b360
lea r13, [rsp + 0x1c0]
lea r12, [rsp + 0x450]
lea r14, [rsp + 0x60]
mov rax, qword [rsp + 0x1c0]
lea rdx, [rdx + rdx*2]
lea rcx, [rax + rdx*8]
mov qword [rax + rdx*8], rsi
mov eax, 0xfd6776f8
mov edx, 0x23
jmp 0x56b360
cmp edi, 0x8420a2b7
jne 0x56b37b
mov rdx, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x680], rax
lea rax, [rcx + rcx*2]
lea rax, [rdx + rax*8]
mov qword [rsp + 0x430], rax
mov rax, rdx
mov qword [rsp + 0x678], rdx
mov r8, rdx
test rcx, rcx
jne 0x56d321
jmp 0x56f32a
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rcx, qword [rsp + 0x430]
lea r13, [rsp + 0x1c0]
je 0x56f38f
lea rcx, [rax + 0x18]
mov qword [rsp + 0xd8], rcx
mov rsi, qword [rax]
test rsi, rsi
je 0x56f322
mov r12, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov r14, qword [rsp + 0x7c0]
mov rbx, qword [rsp + 0x7d0]
test rbx, rbx
je 0x56d3a0
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56d384
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5cf
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x56d3a6
jmp 0x56f5cf
mov r15d, 1
mov rcx, r15
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], r15
mov qword [rsp + 0x1c8], rbx
mov qword [rsp + 0x1d0], rbx
mov byte [rsp + 0x1d8], 0
mov rcx, r13
mov rdx, rsi
mov r8, rdi
call case.0x5a7113.102
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x438], rax
mov rdi, qword [rsp + 0x1d0]
test r12, r12
lea r14, [rsp + 0x60]
je 0x56d425
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
lea r12, [rsp + 0x450]
je 0x56d480
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56d460
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f57c
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
jne 0x56d485
jmp 0x56f57c
mov eax, 1
mov r13, rax
mov rcx, rax
mov rsi, qword [rsp + 0x138]
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x1c0]
mov rdx, rsi
mov qword [rsp + 0x40], rdi
mov r8, rdi
call fcn.005ab960
mov rsi, qword [rsp + 0x1c0]
mov r15, qword [rsp + 0x1c8]
test rsi, rsi
mov rdi, rsi
cmove rdi, r15
sete bpl
mov rbx, qword [rsp + 0x1d0]
lea rax, [0x0090734d]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0xb630da82fea8459f
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005786b0
mov rcx, qword [rax]
movabs rdx, 0x7129f4525c81a275
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xbbd1e3e3
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x95
shr eax, 8
xor al, 0xc6
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x450], rcx
mov dword [rsp + 0x458], edx
mov word [rsp + 0x45c], ax
mov rcx, r12
mov rdx, rdi
mov r8, rbx
call fcn.005703b0
test r15, r15
sete cl
or cl, bpl
test al, al
je 0x56d5b0
test cl, cl
jne 0x56d592
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x40]
mov rdi, rax
mov qword [rsp + 0x1b0], rax
mov r15, r13
jmp 0x56d67d
test cl, cl
jne 0x56d5c5
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x00901551]
mov qword [rsp + 0x1c0], rax
lea rsi, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xe435ded125c4ef96
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577e40
mov rcx, qword [rax]
movabs rdx, 0x1484d60fafe76ab7
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0x8d
mov qword [rsp + 0x450], rcx
mov byte [rsp + 0x458], al
mov qword [rsp + 0x20], 9
mov rcx, rsi
mov rdx, r13
mov rdi, qword [rsp + 0x40]
mov r8, rdi
mov r9, r12
call fcn.005ab350
test rdi, rdi
je 0x56d65d
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov r15, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x1b0], rax
mov rdi, qword [rsp + 0x1d0]
lea r13, [rsp + 0x7e0]
mov rcx, r12
mov rdx, r15
mov r8, rdi
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
jne 0x56d7a0
mov rsi, qword [rsp + 0x458]
mov eax, esi
and eax, 3
cmp rax, 2
jb 0x56d730
cmp eax, 2
jne 0x56d730
mov rax, rsi
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x56d730
mov qword [rsp + 0x7e0], rsi
lea rcx, [rsp + 0x1c0]
mov rdx, r15
mov r8, rdi
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x1c0], 2
jne 0x56d715
lea rcx, [rsp + 0x1c8]
call fcn.00584cb0
jmp 0x56d730
test byte [rsp + 0x201], 4
je 0x56d798
mov eax, dword [rsp + 0x204]
mov ecx, 0x20000000
and eax, ecx
je 0x56d798
nop
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
mov r13, qword [rsp + 0x138]
jb 0x56f2e1
test rax, rax
je 0x56f2e1
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x56d784
cmp qword [rbx + 0x10], 0x11
jb 0x56d773
mov rdi, qword [rdi - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
dec rsi
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
jmp 0x56f2dc
mov rcx, r13
call fcn.00584cb0
mov qword [rsp + 0xa8], 8
lea rax, [rsp + 0xb0]
movups xmmword [rax], xmm6
lea rcx, [rsp + 0x1c0]
mov rdx, r15
mov qword [rsp + 0xc0], rdi
mov r8, rdi
call fcn.005b06f0
mov ebx, dword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1c0]
cmp ebx, 2
je 0x56f917
mov rdi, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1d4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x1d0]
movups xmm0, xmmword [rax + 0xc]
movups xmm1, xmmword [rax + 0x1c]
movaps xmmword [rsp + 0x7e0], xmm0
movaps xmmword [rsp + 0x7f0], xmm1
mov eax, dword [rax + 0x2c]
mov dword [rsp + 0x800], eax
mov r14, qword [rsp + 0x200]
movq xmm13, r14
mov ebp, r14d
shr ebp, 0x10
movzx r13d, word [rsp + 0x204]
mov r8d, 0x21e
mov rcx, r12
lea rdx, [rsp + 0x206]
call sub.msvcrt.dll_memcpy
movdqa xmm0, xmmword [rsp + 0x7e0]
movdqa xmm1, xmmword [rsp + 0x7f0]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmmword [rsp + 0x160], xmm1
mov eax, dword [rsp + 0x800]
mov dword [rsp + 0x170], eax
mov r8d, 0x21e
lea rcx, [rsp + 0xa60]
mov rdx, r12
call sub.msvcrt.dll_memcpy
cmp r14w, 0x2e
sete al
test ebp, ebp
sete cl
xor ebp, 0x2e
mov word [rsp + 0x58], r13w
or bp, r13w
sete dl
or dl, cl
and dl, al
mov byte [rsp + 0x48], dl
mov qword [rsp + 0x130], r15
lea r13, [rsp + 0x7e0]
jmp 0x56d8e2
xor ebx, ebx
cmp ebx, 1
setne al
or al, byte [rsp + 0x48]
je 0x56d9f0
mov r8d, 0x250
lea rbx, [rsp + 0x1c0]
mov rcx, rbx
xor edx, edx
call sub.msvcrt.dll_memset
mov rcx, rdi
mov rdx, rbx
call sub.KERNEL32.dll_FindNextFileW
test eax, eax
lea r14, [rsp + 0x60]
mov rbx, qword [rsp + 0x40]
jne 0x56d948
jmp 0x56e0d0
mov rcx, rdi
lea rdx, [rsp + 0x1c0]
call sub.KERNEL32.dll_FindNextFileW
test eax, eax
je 0x56e0d0
cmp word [rsp + 0x1ec], 0x2e
jne 0x56d980
movzx eax, word [rsp + 0x1ee]
test ax, ax
je 0x56d930
cmp ax, 0x2e
jne 0x56d980
cmp word [rsp + 0x1f0], 0
je 0x56d930
nop word cs:[rax + rax]
lock inc qword [rsi]
jle 0x56f640
mov r15, qword [rsp + 0x1c0]
lea rax, [rsp + 0x1c8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm1
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x80], eax
movd xmm14, dword [rsp + 0x1ec]
movzx ebx, word [rsp + 0x1f0]
mov r8d, 0x21e
mov rcx, r12
lea rdx, [rsp + 0x1f2]
call sub.msvcrt.dll_memcpy
xor ebp, ebp
jmp 0x56da4e
lock inc qword [rsi]
jle 0x56f640
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x80], eax
movaps xmm0, xmmword [rsp + 0x150]
movaps xmm1, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
mov r8d, 0x21e
mov rcx, r12
lea rdx, [rsp + 0xa60]
call sub.msvcrt.dll_memcpy
test rsi, rsi
sete bpl
movdqa xmm14, xmm13
movzx ebx, word [rsp + 0x58]
mov r15, qword [rsp + 0x50]
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x100], eax
movaps xmm0, xmmword [rsp + 0x60]
movaps xmm1, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0xf0], xmm1
movaps xmmword [rsp + 0xe0], xmm0
mov r8d, 0x21e
lea r14, [rsp + 0x1c0]
mov rcx, r14
mov rdx, r12
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x690], xmm0
movaps xmmword [rsp + 0x6a0], xmm1
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x6b0], eax
mov r8d, 0x21e
mov rcx, r13
mov rdx, r14
call sub.msvcrt.dll_memcpy
test bpl, bpl
jne 0x56f9a6
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], r15
mov eax, dword [rsp + 0x6b0]
lea rcx, [rsp + 0x1d0]
mov dword [rcx + 0x20], eax
movdqa xmm0, xmmword [rsp + 0x690]
movdqa xmm1, xmmword [rsp + 0x6a0]
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmmword [rcx], xmm0
movd dword [rsp + 0x1f4], xmm14
mov word [rsp + 0x1f8], bx
mov r8d, 0x21e
lea rcx, [rsp + 0x1fa]
mov rdx, r13
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x60]
mov rdx, r14
call fcn.005a7560
mov r12, qword [rsp + 0x60]
mov r15, qword [rsp + 0x70]
lea rcx, [rsp + 0xe0]
mov rdx, r12
mov r8, r15
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0xe0], 2
jne 0x56dc00
mov rbx, qword [rsp + 0xe8]
mov eax, ebx
and eax, 3
cmp rax, 2
jb 0x56de30
cmp eax, 2
jne 0x56de30
mov rax, rbx
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x56de30
mov qword [rsp + 0xc8], rbx
lea rcx, [rsp + 0x450]
mov rdx, r12
mov r8, r15
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
jne 0x56de0e
lea rcx, [rsp + 0x458]
call fcn.00584cb0
jmp 0x56de30
mov ebp, dword [rsp + 0x120]
mov r14d, dword [rsp + 0x124]
test ebp, 0x400
sete al
test r14d, 0x20000000
sete cl
or cl, al
cmp cl, 1
jne 0x56e079
and ebp, 0x10
je 0x56e079
lea rax, [0x00902b11]
mov qword [rsp + 0x450], rax
lea rax, [rsp + 0x450]
mov rcx, qword [rsp + 0x450]
movabs rdx, 0x43d3d38ff625540b
mov qword [rsp + 0x450], rdx
mov rdx, qword [rsp + 0x450]
call fcn.00578a70
mov rcx, qword [rax]
movabs rdx, 0xc9fcfc965e2667f
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x3a
shr eax, 8
xor al, 0x3a
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
mov qword [rsp + 0xe0], rcx
mov word [rsp + 0xe8], ax
test r15, r15
je 0x56dcfa
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56dce0
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f9dc
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x56dcff
jmp 0x56f9dc
mov ebx, 1
mov rcx, rbx
mov rdx, r12
mov r8, r15
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x450], rbx
mov qword [rsp + 0x458], r15
mov qword [rsp + 0x460], r15
mov byte [rsp + 0x468], 0
mov r8d, 0xa
lea rcx, [rsp + 0x450]
lea r14, [rsp + 0xe0]
mov rdx, r14
call case.0x5a7113.102
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x458]
mov qword [rsp + 0x38], rcx
mov rbx, qword [rsp + 0x460]
mov rcx, r14
mov r14, rax
mov rdx, rax
mov r8, rbx
xor r9d, r9d
call fcn.005a86f0
cmp dword [rsp + 0xe0], 2
jne 0x56df37
mov rbp, qword [rsp + 0xe8]
mov eax, ebp
and eax, 3
cmp rax, 2
jb 0x56debe
cmp eax, 2
jne 0x56debe
mov rax, rbp
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x78000000000
cmp rax, rcx
jne 0x56debe
mov qword [rsp + 0xc8], rbp
lea rcx, [rsp + 0x450]
mov rdx, r14
mov r8, rbx
mov r9d, 0x200000
call fcn.005a86f0
cmp dword [rsp + 0x450], 2
jne 0x56dea4
lea rcx, [rsp + 0x458]
call fcn.00584cb0
jmp 0x56debe
mov ebp, dword [rsp + 0x490]
mov r14d, dword [rsp + 0x494]
test ebp, 0x400
je 0x56de92
mov eax, r14d
and eax, 0x20000000
je 0x56de92
nop
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x56e079
test rax, rax
je 0x56e079
lea r15, [rbx - 1]
mov r12, qword [rbx - 1]
mov rbx, qword [rbx + 7]
mov rcx, r12
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x56de81
cmp qword [rbx + 0x10], 0x11
jb 0x56de70
mov r12, qword [r12 - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
jmp 0x56e074
lea rcx, [rsp + 0xc8]
call fcn.00584cb0
jmp 0x56dc0f
test byte [rsp + 0x491], 4
je 0x56df2a
mov eax, dword [rsp + 0x494]
mov ecx, 0x20000000
and eax, ecx
je 0x56df2a
mov eax, ebp
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x56e060
test rax, rax
je 0x56e060
mov r15, r14
mov rbx, qword [rbp - 1]
mov r14, qword [rbp + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x56df0e
cmp qword [r14 + 0x10], 0x11
jb 0x56defd
mov rbx, qword [rbx - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
dec rbp
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
mov r14, r15
jmp 0x56e060
lea rcx, [rsp + 0xc8]
call fcn.00584cb0
mov rcx, r12
mov rdx, r15
call fcn.005aaf10
test rax, rax
je 0x56e060
mov r8, rdx
lea rcx, [rsp + 0x450]
mov rdx, rax
call fcn.005ab960
mov r15, qword [rsp + 0x450]
mov rax, qword [rsp + 0x458]
test r15, r15
mov rbp, r15
cmove rbp, rax
mov r12, qword [rsp + 0x460]
test r12, r12
mov qword [rsp + 0x188], rax
je 0x56dfd5
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56dfbb
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56fabb
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x56dfda
jmp 0x56fabb
mov ebx, 1
mov rcx, rbx
mov rdx, rbp
mov r8, r12
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0xb8]
cmp rdx, qword [rsp + 0xb0]
jne 0x56e00f
lea rcx, [rsp + 0xa8]
call fcn.0041e090
mov rdx, qword [rsp + 0xb8]
lea rax, [rdx + 1]
mov rcx, qword [rsp + 0xa8]
lea rdx, [rdx + rdx*2]
mov qword [rcx + rdx*8], rbx
mov qword [rcx + rdx*8 + 8], r12
mov qword [rcx + rdx*8 + 0x10], r12
mov qword [rsp + 0xb8], rax
test r15, r15
je 0x56e060
cmp qword [rsp + 0x188], 0
je 0x56e060
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
nop word cs:[rax + rax]
cmp qword [rsp + 0x38], 0
je 0x56e079
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x68], 0
je 0x56e094
mov r8, qword [rsp + 0x60]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x1c0]
lock dec qword [rax]
lea r12, [rsp + 0x450]
mov r15, qword [rsp + 0x130]
jne 0x56d8e0
mov rcx, qword [rsp + 0x1c0]
call fcn.0057aaf0
jmp 0x56d8e0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x12
jne 0x56f94d
mov rcx, rdi
call sub.KERNEL32.dll_FindClose
lock dec qword [rsi]
mov r13, qword [rsp + 0x138]
jne 0x56e0fc
mov rcx, rsi
call fcn.0057aaf0
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x688], rax
mov rax, qword [rsp + 0xb8]
lea rcx, [rax + rax*2]
lea rcx, [rdx + rcx*8]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x448], rdx
mov rbp, rdx
test rax, rax
je 0x56f260
mov rax, rbx
sub rax, 0xf
mov ecx, 0
cmovae rcx, rax
mov qword [rsp + 0x1b8], rcx
lea rax, [r13 + 7]
and rax, 0xfffffffffffffff8
sub rax, r13
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x448]
mov rdi, qword [rsp + 0xc0]
jmp 0x56e196
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rcx, qword [rsp + 0x140]
je 0x56f2c0
lea rbp, [rax + 0x18]
mov rcx, qword [rax]
mov qword [rsp + 0x50], rcx
test rcx, rcx
je 0x56f260
mov qword [rsp + 0x38], rbp
mov rbx, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov ebp, 1
mov esi, 1
test r14, r14
je 0x56e20e
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e1f5
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5de
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
je 0x56f5de
mov rcx, rsi
mov rdx, qword [rsp + 0x50]
mov r8, r14
call sub.msvcrt.dll_memcpy
test rdi, rdi
je 0x56e26a
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e251
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f57c
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov rbp, rax
test rax, rax
je 0x56f57c
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x188], rbx
mov rcx, rbp
mov rdx, r15
mov r8, rdi
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x1c0]
mov rdx, r15
mov r8, rdi
call fcn.005ab960
mov r15, qword [rsp + 0x1c0]
mov r12, qword [rsp + 0x1c8]
test r15, r15
mov rdi, r15
cmove rdi, r12
sete r14b
mov rbx, qword [rsp + 0x1d0]
lea rax, [0x00908a63]
mov qword [rsp + 0x450], rax
lea r13, [rsp + 0x450]
mov rcx, qword [rsp + 0x450]
movabs rax, 0x17b8320fb01ab308
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.00577c60
mov rcx, qword [rax]
movabs rdx, 0xf1589a664f52811e
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xa09146ec
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x8a
shr eax, 8
xor al, 0xdb
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x450], rcx
mov dword [rsp + 0x458], edx
mov word [rsp + 0x45c], ax
mov rcx, r13
mov rdx, rdi
mov r8, rbx
call fcn.005703b0
test r12, r12
sete cl
or cl, r14b
test al, al
je 0x56e490
test cl, cl
lea r13, [rsp + 0x7e0]
jne 0x56e388
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xc0]
mov rdi, rax
mov qword [rsp + 0x190], rax
cmp qword [rsp + 0x48], 0
lea r12, [rsp + 0x450]
lea r14, [rsp + 0x60]
je 0x56e3c1
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0090a0ea]
mov qword [rsp + 0x1c0], rax
lea rax, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1c0]
movabs rdx, 0xc1a42072359811c0
mov qword [rsp + 0x1c0], rdx
mov rdx, qword [rsp + 0x1c0]
call fcn.005783b0
mov rcx, qword [rax]
movabs rdx, 0x91d589104d262f74
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0xb
shr eax, 8
xor al, 0xb4
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
mov qword [rsp + 0x450], rcx
mov word [rsp + 0x458], ax
test rdi, rdi
je 0x56e510
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e46f
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f57c
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x56e515
jmp 0x56f57c
test cl, cl
jne 0x56e4a5
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0xc0]
test rbx, rbx
lea r12, [rsp + 0x450]
lea r14, [rsp + 0x60]
je 0x56ecbe
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e4eb
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5cf
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapAlloc
mov rdi, rax
test rax, rax
jne 0x56ecc3
jmp 0x56f5cf
mov esi, 1
mov rcx, rsi
mov rdx, rbp
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], rdi
mov qword [rsp + 0x1d0], rdi
mov byte [rsp + 0x1d8], 0
mov r8d, 0xa
lea rsi, [rsp + 0x1c0]
mov rcx, rsi
mov rdx, r12
call case.0x5a7113.102
movdqu xmm0, xmmword [rsp + 0x1c0]
movdqu xmm1, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0xa10], xmm1
movdqa xmmword [rsp + 0xa00], xmm0
lea rax, [0x0090aa1e]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xbc1cc0ae1c11bca7
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00578330
mov ecx, dword [rax]
movzx edx, byte [rax + 6]
movzx eax, word [rax + 4]
mov r8d, eax
shr r8d, 8
xor al, 0x27
xor r8b, 0x6d
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xf7
movzx eax, dl
mov byte [rsp + 0x7e6], al
shl rax, 0x30
movzx edx, r8w
shl rdx, 0x20
or rdx, rax
xor ecx, 0x8281ae61
shr rdx, 0x20
mov dword [rsp + 0x7e0], ecx
mov word [rsp + 0x7e4], dx
test rdi, rdi
je 0x56e660
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e63d
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f57c
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x56e665
jmp 0x56f57c
mov esi, 1
mov rcx, rsi
mov qword [rsp + 0x58], rbp
mov rdx, rbp
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], rdi
mov qword [rsp + 0x1d0], rdi
mov byte [rsp + 0x1d8], 0
mov r8d, 7
lea rbx, [rsp + 0x1c0]
mov rcx, rbx
mov rdx, r13
call case.0x5a7113.102
mov rsi, qword [rsp + 0x1c0]
mov r15, qword [rsp + 0x1c8]
mov rbp, qword [rsp + 0x1d0]
lea rax, [0x008ff2b1]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x5b59b7313427f0bd
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.00577300
mov ecx, dword [rax]
movzx edx, byte [rax + 6]
movzx eax, word [rax + 4]
mov r8d, eax
shr r8d, 8
xor al, 0x74
xor r8b, 0x94
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0x8e
movzx eax, dl
mov byte [rsp + 0x456], al
shl rax, 0x30
movzx edx, r8w
shl rdx, 0x20
or rdx, rax
xor ecx, 0xc25e294f
mov dword [rsp + 0x450], ecx
shr rdx, 0x20
mov word [rsp + 0x454], dx
test rbp, rbp
mov r13, qword [rsp + 0x138]
je 0x56e7b0
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e794
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f644
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x56e7b5
jmp 0x56f644
mov ebx, 1
mov rcx, rbx
mov rdx, rsi
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rbx
mov qword [rsp + 0x1c8], rbp
mov qword [rsp + 0x1d0], rbp
mov byte [rsp + 0x1d8], 0
mov r8d, 7
lea rcx, [rsp + 0x1c0]
mov rdx, r12
call case.0x5a7113.102
movdqu xmm0, xmmword [rsp + 0x1c0]
movdqu xmm1, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0xa30], xmm1
movdqa xmmword [rsp + 0xa20], xmm0
test r15, r15
mov rbx, qword [rsp + 0x40]
je 0x56e838
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x0090740e]
mov qword [rsp + 0x1c0], rax
lea rax, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1c0]
movabs rdx, 0x5270adcd3c748b02
mov qword [rsp + 0x1c0], rdx
mov rdx, qword [rsp + 0x1c0]
call fcn.00578010
mov rax, qword [rax]
movabs rcx, 0xe682970b3bef52b7
xor rax, rcx
mov qword [rsp + 0x450], rax
test rdi, rdi
mov r15, qword [rsp + 0x130]
je 0x56e8e0
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56e8c3
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f57c
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x56e8e5
jmp 0x56f57c
mov esi, 1
mov rcx, rsi
mov rdx, qword [rsp + 0x58]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], rdi
mov qword [rsp + 0x1d0], rdi
mov byte [rsp + 0x1d8], 0
mov r8d, 8
lea rcx, [rsp + 0x1c0]
mov rdx, r12
call case.0x5a7113.102
movdqu xmm0, xmmword [rsp + 0x1c0]
movdqu xmm1, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0xa50], xmm1
movdqa xmmword [rsp + 0xa40], xmm0
test rbx, rbx
movabs r9, 0x8080808080808080
mov r10, qword [rsp + 0x1b8]
mov r11, qword [rsp + 0x180]
je 0x56eb70
xor eax, eax
jmp 0x56e98c
inc rax
cmp rax, rbx
jae 0x56eb20
movzx ecx, byte [r13 + rax]
test cl, cl
js 0x56e9f0
mov ecx, r11d
sub ecx, eax
test cl, 7
jne 0x56e980
jmp 0x56e9b4
add rax, 0x10
cmp rax, r10
jae 0x56e9c8
mov rcx, qword [r13 + rax + 8]
or rcx, qword [r13 + rax]
test rcx, r9
je 0x56e9b0
cmp rax, rbx
jae 0x56e983
nop dword [rax]
cmp byte [r13 + rax], 0
js 0x56e983
inc rax
cmp rbx, rax
jne 0x56e9d0
jmp 0x56eb20
lea rdx, [0x009127d4]
movzx edx, byte [rcx + rdx]
cmp edx, 4
je 0x56ea16
cmp edx, 3
je 0x56ea44
cmp edx, 2
jne 0x56f562
inc rax
jmp 0x56eaff
lea rdx, [rax + 1]
cmp rdx, rbx
jae 0x56f562
movzx edx, byte [r13 + rdx]
cmp rcx, 0xf0
je 0x56ea76
cmp ecx, 0xf4
jne 0x56ea90
cmp dl, 0x8f
jle 0x56eaa5
jmp 0x56f562
lea rdx, [rax + 1]
cmp rdx, rbx
jae 0x56f562
movzx edx, byte [r13 + rdx]
cmp rcx, 0xe0
je 0x56ea83
cmp ecx, 0xed
jne 0x56eadc
cmp dl, 0x9f
jle 0x56eafb
jmp 0x56f562
add dl, 0x70
cmp dl, 0x30
jb 0x56eaa5
jmp 0x56f562
and dl, 0xe0
cmp dl, 0xa0
je 0x56eafb
jmp 0x56f562
add cl, 0xf
cmp cl, 2
ja 0x56f562
cmp dl, 0xc0
jge 0x56f562
lea rcx, [rax + 2]
cmp rcx, rbx
jae 0x56f562
cmp byte [r13 + rcx], 0xbf
jg 0x56f562
add rax, 3
cmp rax, rbx
jae 0x56f562
cmp byte [r13 + rax], 0xc0
jl 0x56e980
jmp 0x56f562
lea r8d, [rcx + 0x1f]
cmp r8b, 0xc
jb 0x56eaf2
and cl, 0xfe
cmp cl, 0xee
jne 0x56f562
cmp dl, 0xc0
jge 0x56f562
add rax, 2
cmp rax, rbx
jae 0x56f562
cmp byte [r13 + rax], 0xbf
jle 0x56e980
jmp 0x56f562
test rbx, rbx
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56eb51
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5cf
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x56eb75
jmp 0x56f5cf
mov esi, 1
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x1c0]
mov rdx, rsi
mov r8, rbx
lea r9, [0x00911700]
call fcn.004559e0
mov qword [rsp + 0x228], 0
mov qword [rsp + 0x230], rbx
mov word [rsp + 0x238], 1
xor ebx, ebx
nop word cs:[rax + rax]
mov rbp, qword [rsp + 0x208]
mov rcx, r12
lea rdx, [rsp + 0x1c0]
call fcn.0040bf50
cmp qword [rsp + 0x450], 0
je 0x56ec30
mov rdi, qword [rsp + 0x458]
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x228]
add rbp, rcx
sub rdi, rcx
mov qword [rsp + 0x228], rax
cmp byte [rsp + 0x239], 0
mov rbx, rbp
je 0x56ebd0
jmp 0x56ec46
cmp byte [rsp + 0x239], 0
je 0x56ec9b
mov rbp, rbx
test rbx, rbx
je 0x56f876
test rdi, rdi
je 0x56ed90
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56ec7d
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f57c
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x56ed95
jmp 0x56f57c
cmp byte [rsp + 0x238], 0
je 0x56ed5b
mov rbp, qword [rsp + 0x228]
mov rax, qword [rsp + 0x230]
jmp 0x56ed74
mov edi, 1
mov rcx, rdi
mov rdx, rbp
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1c8], rbx
mov qword [rsp + 0x1d0], rbx
mov byte [rsp + 0x1d8], 0
lea rcx, [rsp + 0x1c0]
mov rdx, rsi
mov r15, qword [rsp + 0x48]
mov r8, r15
call case.0x5a7113.102
mov r13, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x190], rax
mov rdi, qword [rsp + 0x1d0]
test r15, r15
je 0x56ed3f
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, rbp
test rbx, rbx
mov rbp, r13
lea r13, [rsp + 0x7e0]
jne 0x56e3b0
jmp 0x56e3c1
mov rbp, qword [rsp + 0x228]
mov rax, qword [rsp + 0x230]
cmp rax, rbp
je 0x56ec3a
sub rax, rbp
add rbp, qword [rsp + 0x208]
mov rdi, rax
test rdi, rdi
jne 0x56ec4f
nop dword [rax + rax]
mov ebx, 1
mov rcx, rbx
mov rdx, rbp
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xa60], rbx
mov qword [rsp + 0xa68], rdi
mov qword [rsp + 0xa70], rdi
cmp qword [rsp + 0x40], 0
je 0x56edd4
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0xc0]
je 0x56ee30
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56ee12
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f653
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, qword [rsp + 0x48]
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x56ee35
jmp 0x56f653
mov esi, 1
mov rbp, r15
mov rcx, rsi
mov rdx, qword [rsp + 0x50]
mov r15, qword [rsp + 0x48]
mov r8, r15
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0xa68]
mov rdi, qword [rsp + 0xa70]
sub rax, rdi
cmp rax, r15
jb 0x56f1fb
mov rcx, qword [rsp + 0xa60]
add rcx, rdi
mov rdx, rsi
mov r8, r15
call sub.msvcrt.dll_memcpy
add rdi, r15
mov qword [rsp + 0xa70], rdi
test r15, r15
je 0x56eea0
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x7f0], rax
movdqu xmm0, xmmword [rsp + 0xa60]
movdqa xmmword [rsp + 0x7e0], xmm0
lea rax, [0x0090a2da]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
movabs rax, 0x25169de20f1c946e
mov qword [rsp + 0x450], rax
mov rdx, qword [rsp + 0x450]
call fcn.005771c0
mov rcx, qword [rax]
movabs rdx, 0xb731f6bbae80f5c7
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x48
xor r8b, 0x9b
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0x3c
mov qword [rsp + 0xe0], rcx
mov word [rsp + 0xe8], r8w
mov byte [rsp + 0xea], dl
test rbx, rbx
mov r15, rbp
je 0x56efa0
js 0x56f527
movzx eax, byte [0x009bf181]
mov rax, qword [0x009bf100]
test rax, rax
jne 0x56ef7c
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x56f5cf
mov qword [0x009bf100], rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x56efa5
jmp 0x56f5cf
mov esi, 1
mov rcx, rsi
mov rdx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x450], rsi
mov qword [rsp + 0x458], rbx
mov qword [rsp + 0x460], rbx
mov byte [rsp + 0x468], 0
mov r8d, 0xb
mov rcx, r12
lea rdx, [rsp + 0xe0]
call case.0x5a7113.102
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
lea rcx, [rsp + 0x1d0]
movups xmmword [rcx + 0x78], xmm1
movups xmmword [rcx + 0x68], xmm0
movaps xmm0, xmmword [rsp + 0x7e0]
movaps xmmword [rsp + 0x1c0], xmm0
mov rax, qword [rsp + 0x7f0]
mov qword [rsp + 0x1d0], rax
movaps xmm0, xmmword [rsp + 0xa20]
movaps xmm1, xmmword [rsp + 0xa30]
movups xmmword [rcx + 0x18], xmm1
movups xmmword [rcx + 8], xmm0
movaps xmm0, xmmword [rsp + 0xa00]
movaps xmm1, xmmword [rsp + 0xa10]
movups xmmword [rcx + 0x38], xmm1
movups xmmword [rcx + 0x28], xmm0
movdqa xmm0, xmmword [rsp + 0xa40]
movdqa xmm1, xmmword [rsp + 0xa50]
movdqu xmmword [rcx + 0x58], xmm1
movdqu xmmword [rcx + 0x48], xmm0
mov rcx, r12
lea rdx, [rsp + 0x1c0]
call fcn.005707d0
mov rsi, qword [rsp + 0x450]
mov rdi, qword [rsp + 0x460]
mov rax, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1a8]
sub rax, rbx
cmp rax, rdi
jb 0x56f23c
lea rcx, [rbx + rbx*2]
shl rcx, 4
add rcx, qword [rsp + 0x198]
mov rax, rdi
shl rax, 4
lea r8, [rax + rax*2]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
add rbx, rdi
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x460], 0
cmp qword [rsp + 0x458], 0
je 0x56f107
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x1c8], 0
mov rdi, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0x188]
je 0x56f138
mov r8, qword [rsp + 0x1c0]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x1e0], 0
je 0x56f159
mov r8, qword [rsp + 0x1d8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x200], 0
je 0x56f17a
mov r8, qword [rsp + 0x1f8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x220], 0
je 0x56f19b
mov r8, qword [rsp + 0x218]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x240], 0
je 0x56f1bc
mov r8, qword [rsp + 0x238]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x190], 0
je 0x56f1da
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
test rsi, rsi
je 0x56e180
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x50]
call sub.KERNEL32.dll_HeapFree
jmp 0x56e180
lea rcx, [rsp + 0xa60]
mov rdx, rdi
mov r8, r15
call fcn.004097c0
mov rdi, qword [rsp + 0xa70]
mov rcx, qword [rsp + 0xa60]
add rcx, rdi
mov rdx, rsi
mov r8, r15
call sub.msvcrt.dll_memcpy
add rdi, r15
mov qword [rsp + 0xa70], rdi
jmp 0x56ee8f
lea rcx, [rsp + 0x198]
mov rdx, rbx
mov r8, rdi
call fcn.004ff920
mov rbx, qword [rsp + 0x1a8]
jmp 0x56f0b1
mov r8, qword [rsp + 0x140]
mov rax, r8
sub rax, rbp
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp r8, rbp
je 0x56f2c0
mov rsi, rdx
shr rsi, 4
add rbp, 8
jmp 0x56f299
add rbp, 0x18
dec rsi
je 0x56f2c0
cmp qword [rbp], 0
je 0x56f290
mov r8, qword [rbp - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x56f290
cmp qword [rsp + 0x688], 0
je 0x56f2e1
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x448]
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x1b0], 0
je 0x56f2fd
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x438], 0
je 0x56d300
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
jmp 0x56d300
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0x430]
mov rax, r9
sub rax, r8
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp r9, r8
je 0x56f38f
mov rsi, rdx
shr rsi, 4
add r8, 8
jmp 0x56f36c
add rax, 0x18
dec rsi
mov r8, rax
je 0x56f38f
cmp qword [r8], 0
mov rax, r8
je 0x56f360
mov r8, qword [rax - 8]
mov rcx, qword [0x009bf100]
xor edx, edx
mov rdi, rax
call sub.KERNEL32.dll_HeapFree
mov rax, rdi
jmp 0x56f360
cmp qword [rsp + 0x680], 0
je 0x56f3b0
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x678]
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x7c8], 0
je 0x56f3d1
mov r8, qword [rsp + 0x7c0]
mov rcx, qword [0x009bf100]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov esi, 0xfd72ffc8
cmp qword [rsp + 0x6d0], 0
je 0x56f405
mov rcx, qword [0x009bf100]
xor edx, edx
mov r8, qword [rsp + 0x440]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [rsp + 0x14c]
xor ecx, esi
jmp 0x566666
mov ecx, dword [rsp + 0x14c]
xor ecx, esi
jmp 0x566666
lea r8, str._rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_src_strpattern.rs
mov rcx, r10
mov rdx, rsi
call fcn.0044f190
ud2
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x788]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x198]
movups xmmword [rcx], xmm0
movaps xmm6, xmmword [rsp + 0xc80]
movaps xmm7, xmmword [rsp + 0xc90]
movaps xmm8, xmmword [rsp + 0xca0]
movaps xmm9, xmmword [rsp + 0xcb0]
movaps xmm10, xmmword [rsp + 0xcc0]
movaps xmm11, xmmword [rsp + 0xcd0]
movaps xmm12, xmmword [rsp + 0xce0]
movaps xmm13, xmmword [rsp + 0xcf0]
movaps xmm14, xmmword [rsp + 0xd00]
movaps xmm15, xmmword [rsp + 0xd10]
add rsp, 0xd28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movdqu xmm0, xmmword [rsp + 0x60]
movdqu xmm1, xmmword [rsp + 0x70]
movdqu xmm2, xmmword [rsp + 0x80]
movdqu xmm3, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x110], xmm3
movdqa xmmword [rsp + 0x100], xmm2
movdqa xmmword [rsp + 0xf0], xmm1
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.src_builder_generics.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, fcn.0056fc90
lea r8, [rsp + 0xe0]
mov edx, 0x2b
call fcn.00451990
ud2
test rcx, rcx
jne 0x56f52e
call fcn.0044df90
ud2
mov rdx, qword [rsp + 0x70]
call fcn.0044dfd0
ud2
test rcx, rcx
je 0x56f527
mov rdx, qword [rsp + 0xa70]
call fcn.0044dfd0
ud2
test rcx, rcx
je 0x56f527
mov rdx, qword [rsp + 0x460]
call fcn.0044dfd0
ud2
lea rcx, str.called__Option::unwrap____on_a__None__value_root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_untrusted_0.9.0_src_reader.rsinternal_error:_entered_unreachable_code_root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rustls_webpki_0.101.7_src_calendar.rs
lea r8, str.src_builder_generics.rs
mov edx, 0x2b
call fcn.0044fe30
ud2
mov ecx, 1
mov rdx, rdi
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x1a
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0xe
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0xd
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x14
call fcn.0044dfd0
ud2
mov ecx, 1
mov rdx, rbx
call fcn.0044dfd0
ud2
mov ecx, 1
mov rdx, r14
call fcn.0044dfd0
ud2
mov ecx, 1
mov rdx, rsi
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x13
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0xc
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0xb
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x18
call fcn.0044dfd0
ud2
ud2
mov ecx, 1
mov rdx, rbp
call fcn.0044dfd0
ud2
mov ecx, 1
mov rdx, qword [rsp + 0x48]
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x20
call fcn.0044dfd0
ud2
mov ecx, 8
mov edx, 0x110
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x15
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x21
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x1f
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x12
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x10
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 0x23
call fcn.0044dfd0
ud2
lea rcx, [0x0090ddb0]
call fcn.004505e0
ud2
mov qword [rdi + 0x40], rcx
lea rax, str._root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rusqlite_0.30.0_src_statement.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x0090d7fa]
lea r9, [0x0090d828]
lea r8, [rsp + 0x60]
mov edx, 0x2e
call fcn.00451990
ud2
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
jmp 0x56f84f
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
jmp 0x56f84f
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
jmp 0x56f84f
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
jmp 0x56f84f
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
jmp 0x56f84f
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
jmp 0x56f84f
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
lea rax, str.src_win.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x00876028]
lea r8, [rsp + 0x1c0]
mov edx, 0x2b
call fcn.00451990
ud2
lea rcx, str.called__Option::unwrap____on_a__None__value_root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_untrusted_0.9.0_src_reader.rsinternal_error:_entered_unreachable_code_root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rustls_webpki_0.101.7_src_calendar.rs
lea r8, str.src_builder_generics.rs
mov edx, 0x2b
call fcn.0044fe30
ud2
mov qword [rsp + 0x1c0], rsi
lea rax, str.src_builder_generics.rs
jmp 0x56f926
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x690], xmm0
movaps xmmword [rsp + 0x6a0], xmm1
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x6b0], eax
lea rcx, [rsp + 0x7e0]
lea rdx, [rsp + 0x1c0]
mov r8d, 0x21e
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x450], rbx
lea rax, str.src_builder_generics.rs
jmp 0x56f9b5
mov al, 2
jmp 0x56fa3a
mov qword [rsp + 0x1c0], rsi
lea rax, str.src_builder_generics.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x0090d868]
lea r8, [rsp + 0x1c0]
mov edx, 0x2b
call fcn.00451990
ud2
call sub.KERNEL32.dll_GetLastError
mov r15d, eax
shl r15, 0x20
or r15, 2
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x690], xmm0
movaps xmmword [rsp + 0x6a0], xmm1
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x6b0], eax
lea rcx, [rsp + 0x7e0]
lea rdx, [rsp + 0x1c0]
mov r8d, 0x21e
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x450], r15
lea rax, str.src_builder_generics.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x0090d868]
lea r8, [rsp + 0x450]
mov edx, 0x2b
call fcn.00451990
ud2
mov ecx, 1
mov rdx, r15
call fcn.0044dfd0
ud2
lea rcx, [0x0090ddc8]
call fcn.00450580
ud2
cdqe
mov byte [rsp + 0xe0], 0x11
mov qword [rsp + 0xe8], 0
mov qword [rsp + 0xf0], rax
jmp 0x56f4f4
lea rcx, [rsp + 0x1d0]
mov eax, dword [rcx + 9]
mov ecx, dword [rcx + 0xc]
mov dword [rsp + 0x7e3], ecx
mov dword [rsp + 0x7e0], eax
xor eax, eax
mov rcx, qword [rsp + 0x440]
mov qword [rsp + 0x1c0], rcx
mov rcx, qword [rsp + 0x6d0]
mov qword [rsp + 0x1c8], rcx
mov rcx, qword [rsp + 0x790]
mov qword [rsp + 0x1d0], rcx
mov byte [rsp + 0x1d8], al
mov eax, dword [rsp + 0x7e0]
mov ecx, dword [rsp + 0x7e3]
mov dword [rsp + 0x1d9], eax
mov dword [rsp + 0x1dc], ecx
lea rax, str.src_builder_generics.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x0090d888]
lea r8, [rsp + 0x1c0]
mov edx, 0x2b
call fcn.00451990
ud2
mov ecx, 1
mov rdx, r12
call fcn.0044dfd0
ud2
mov ecx, 1
mov edx, 8
call fcn.0044dfd0
ud2