Function at 0x140002310
Capabilities:
Allocate or change rwx memory
Check for debugger via api
Check for peb beingdebugged flag
Check for peb ntglobalflag flag
Check systemkerneldebuggerinformation
Encode data using base64
Encrypt data using speck
Enumerate gui resources
Execute shellcode via indirect call
Execute shellcode via windows callback function
Get number of processors
Get system information on windows
Hash data using sha256
Manually build aes constants
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x898
movdqa xmmword [rsp + 0x880], xmm11
movdqa xmmword [rsp + 0x870], xmm10
movdqa xmmword [rsp + 0x860], xmm9
movdqa xmmword [rsp + 0x850], xmm8
movdqa xmmword [rsp + 0x840], xmm7
movdqa xmmword [rsp + 0x830], xmm6
lea rsi, [rsp + 0x760]
mov rcx, rsi
call fcn.140030040
mov rcx, rsi
call fcn.1400303c0
lea rcx, [rsp + 0x1a0]
call fcn.1400a3360
movabs rsi, 0x8000000000000000
cmp qword [rsp + 0x1a0], rsi
jne 0x1400023d5
mov qword [rsp + 0x150], rsi
lea rcx, [rsp + 0x1a8]
call fcn.140001470
cmp qword [rsp + 0x150], rsi
jne 0x140002403
mov al, 1
mov dword [rsp + 0x3c], eax
mov ecx, 1
xor eax, eax
mov qword [rsp + 0x30], rax
xor r13d, r13d
mov al, 1
mov dword [rsp + 0x50], eax
jmp 0x140003043
movdqu xmm0, xmmword [rsp + 0x1a0]
movdqu xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x160], xmm1
movdqa xmmword [rsp + 0x150], xmm0
cmp qword [rsp + 0x150], rsi
je 0x1400023b5
lea rcx, [rsp + 0x150]
call fcn.1400cbaf0
mov rcx, rax
call fcn.1400b36f0
test rax, rax
je 0x140002475
mov r8, rdx
lea rcx, [rsp + 0x1a0]
mov rdx, rax
call fcn.1400cc1b0
mov rdi, qword [rsp + 0x1a8]
mov r13, qword [rsp + 0x1b0]
test r13, r13
je 0x140002482
js 0x140005981
mov rax, qword [0x1401a9e18]
movzx eax, byte [rax]
mov esi, 1
mov edx, 1
mov rcx, r13
call fcn.140011db0
test rax, rax
je 0x140005983
mov rbx, rax
jmp 0x140002487
mov ecx, 1
xor r13d, r13d
jmp 0x14000251c
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, r13
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x1a0]
lea rax, [rdx*2]
test rax, rax
jne 0x140002501
test r13, r13
je 0x140002514
mov rax, qword [0x1401a9e18]
movzx eax, byte [rax]
mov edx, 1
mov rcx, r13
call fcn.140011db0
test rax, rax
je 0x140005990
mov r14, rax
mov rsi, rax
mov rcx, r14
mov rdx, rbx
mov r8, r13
call sub.msvcrt.dll_memcpy
mov rcx, r14
cmp r13, 8
jb 0x140002fdb
cmp r13, 0x20
jae 0x140002dc9
xor eax, eax
jmp 0x140002e5a
mov r8d, 1
mov rcx, rdi
call fcn.140011dc0
test r13, r13
jne 0x1400024af
xor r13d, r13d
mov ecx, 1
mov al, 1
mov dword [rsp + 0x3c], eax
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x150], rax
setne al
je 0x140003036
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rcx
movdqa xmm0, xmmword [rsp + 0x150]
movdqa xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0xe0], xmm1
movdqa xmmword [rsp + 0xd0], xmm0
lea rcx, [rsp + 0xd0]
call fcn.1400cbaf0
mov r8, rdx
lea rcx, [rsp + 0x170]
mov rdx, rax
call fcn.1400a4460
mov rcx, qword [rsp + 0x170]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1400025b9
lea rcx, [rsp + 0x178]
call fcn.140001470
mov rcx, qword [rsp + 0x40]
jmp 0x140002fa6
mov qword [rsp + 0x48], rcx
mov rbp, qword [rsp + 0x178]
mov r15, qword [rsp + 0x180]
lea rsi, [rsp + 0x698]
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x6c8], xmm0
movdqu xmmword [rsp + 0x6b8], xmm0
movdqu xmmword [rsp + 0x6a8], xmm0
movdqu xmmword [rsp + 0x698], xmm0
mov byte [rsp + 0x6d8], 0
movups xmm0, xmmword [0x1401191f0]
movaps xmmword [rsp + 0x670], xmm0
movdqu xmm0, xmmword [0x140119200]
movdqa xmmword [rsp + 0x680], xmm0
mov qword [rsp + 0x690], 0
cmp r15, 0x40
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], rbp
jae 0x140002655
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call sub.msvcrt.dll_memcpy
mov r14, r15
jmp 0x140002690
mov r8, r15
shr r8, 6
mov qword [rsp + 0x690], r8
lea rcx, [rsp + 0x670]
mov rdx, rbp
call fcn.140017fc0
mov rdx, r15
and rdx, 0xffffffffffffffc0
add rdx, rbp
mov r14d, r15d
and r14d, 0x3f
mov rcx, rsi
mov r8, r14
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x6d8], r14b
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x200], rax
movzx eax, byte [rsp + 0x6d8]
mov byte [rsp + 0x208], al
mov eax, dword [rsp + 0x6d9]
mov dword [rsp + 0x209], eax
movzx eax, word [rsp + 0x6dd]
mov word [rsp + 0x20d], ax
movzx eax, byte [rsp + 0x6df]
mov byte [rsp + 0x20f], al
movdqa xmm0, xmmword [rsp + 0x670]
movdqa xmm1, xmmword [rsp + 0x680]
movaps xmm2, xmmword [rsp + 0x690]
movdqa xmm3, xmmword [rsp + 0x6a0]
movaps xmmword [rsp + 0x1c0], xmm2
movaps xmm2, xmmword [rsp + 0x6c0]
movaps xmmword [rsp + 0x1f0], xmm2
movdqa xmm2, xmmword [rsp + 0x6b0]
movdqa xmmword [rsp + 0x1e0], xmm2
movdqa xmmword [rsp + 0x1d0], xmm3
movdqa xmmword [rsp + 0x1b0], xmm1
movdqa xmmword [rsp + 0x1a0], xmm0
movzx edi, byte [rsp + 0x208]
mov rax, qword [rsp + 0x1c0]
shl rax, 9
mov esi, edi
shl esi, 3
or rsi, rax
mov byte [rsp + rdi + 0x1c8], pe_nt_image_headers64
mov r8, rdi
xor r8, 0x3f
je 0x14000278b
lea rcx, [rsp + rdi]
add rcx, 0x1c9
xor edx, edx
call sub.msvcrt.dll_memset
lea rdx, [rsp + 0x1c8]
bswap rsi
xor edi, 0x38
cmp edi, 7
ja 0x1400027fb
lea rcx, [rsp + 0x1a0]
mov r8d, 1
call fcn.140017fc0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], rsi
lea rcx, [rsp + 0x1a0]
lea rdx, [rsp + 0x70]
mov r8d, 1
call fcn.140017fc0
jmp 0x140002816
mov qword [rsp + 0x200], rsi
lea rcx, [rsp + 0x1a0]
mov r8d, 1
call fcn.140017fc0
pxor xmm0, xmm0
movdqa xmm1, xmmword [rsp + 0x1a0]
movdqa xmm2, xmmword [rsp + 0x1b0]
movdqa xmm3, xmm1
punpckhbw xmm3, xmm0
pshuflw xmm3, xmm3, 0x1b
pshufhw xmm3, xmm3, 0x1b
punpcklbw xmm1, xmm0
pshuflw xmm1, xmm1, 0x1b
pshufhw xmm1, xmm1, 0x1b
packuswb xmm1, xmm3
movdqa xmm3, xmm2
punpckhbw xmm3, xmm0
pshuflw xmm3, xmm3, 0x1b
pshufhw xmm3, xmm3, 0x1b
punpcklbw xmm2, xmm0
pshuflw xmm2, xmm2, 0x1b
pshufhw xmm2, xmm2, 0x1b
packuswb xmm2, xmm3
movdqa xmmword [rsp + 0xf0], xmm1
movdqa xmmword [rsp + 0x100], xmm2
movdqa xmmword [rsp + 0x6a0], xmm0
movdqa xmmword [rsp + 0x690], xmm0
movdqa xmmword [rsp + 0x680], xmm0
movdqa xmmword [rsp + 0x670], xmm0
mov qword [rsp + 0x6c0], 0
movdqa xmm6, xmmword [0x140119060]
movdqa xmmword [rsp + 0x6b0], xmm6
test r15, r15
je 0x140002903
mov edi, 0xffffffff
lea rsi, [rsp + 0x670]
mov rbx, r15
mov r14, rbp
nop
cmp rbx, rdi
mov r12d, 0xffffffff
cmovb r12, rbx
mov rcx, rsi
mov rdx, r14
mov r8, r12
call fcn.140017320
add r14, r12
sub rbx, r12
jne 0x1400028e0
mov rax, qword [rsp + 0x6c0]
mov qword [rsp + 0x1f0], rax
movaps xmm0, xmmword [rsp + 0x6b0]
movaps xmmword [rsp + 0x1e0], xmm0
movdqa xmm0, xmmword [rsp + 0x670]
movdqa xmm1, xmmword [rsp + 0x680]
movdqa xmm2, xmmword [rsp + 0x690]
movdqa xmm3, xmmword [rsp + 0x6a0]
movdqa xmmword [rsp + 0x1d0], xmm3
movdqa xmmword [rsp + 0x1c0], xmm2
movdqa xmmword [rsp + 0x1b0], xmm1
movdqa xmmword [rsp + 0x1a0], xmm0
lea r12, [rsp + 0x750]
lea rdx, [rsp + 0x1a0]
mov rcx, r12
call fcn.140017230
lea rsi, [rsp + 0x690]
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x6c0], xmm0
movdqu xmmword [rsp + 0x6b0], xmm0
movdqu xmmword [rsp + 0x6a0], xmm0
movdqu xmmword [rsp + 0x690], xmm0
mov byte [rsp + 0x6d0], 0
mov qword [rsp + 0x670], 0
movdqu xmmword [rsp + 0x678], xmm6
mov dword [rsp + 0x688], 0xc3d2e1f0
cmp r15, 0x40
jae 0x1400029e9
mov rcx, rsi
mov rdx, rbp
jmp 0x140002a19
lea rcx, [rsp + 0x678]
mov r8, r15
shr r8, 6
mov qword [rsp + 0x670], r8
mov rdx, rbp
call fcn.140015ac0
mov rdx, r15
and rdx, 0xffffffffffffffc0
add rdx, rbp
and r15d, 0x3f
mov rcx, rsi
mov r8, r15
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x6d0], r15b
movups xmm0, xmmword [rsp + 0x670]
movdqu xmm1, xmmword [rsp + 0x680]
movdqu xmm2, xmmword [rsp + 0x690]
movdqu xmm3, xmmword [rsp + 0x6a0]
movaps xmmword [rsp + 0x1a0], xmm0
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x200], rax
movups xmm0, xmmword [rsp + 0x6c0]
movaps xmmword [rsp + 0x1f0], xmm0
movups xmm0, xmmword [rsp + 0x6b0]
movaps xmmword [rsp + 0x1e0], xmm0
movdqa xmmword [rsp + 0x1d0], xmm3
movdqa xmmword [rsp + 0x1c0], xmm2
movdqa xmmword [rsp + 0x1b0], xmm1
movzx esi, al
movzx edi, al
mov rax, qword [rsp + 0x1a0]
shl rax, 9
shl esi, 3
or rsi, rax
mov eax, dword [rsp + 0x1b8]
mov dword [rsp + 0xc0], eax
movdqu xmm0, xmmword [rsp + 0x1a8]
movdqa xmmword [rsp + 0xb0], xmm0
mov byte [rsp + rdi + 0x1c0], pe_nt_image_headers64
mov r8, rdi
xor r8, 0x3f
je 0x140002afa
lea rcx, [rsp + rdi]
add rcx, 0x1c1
xor edx, edx
call sub.msvcrt.dll_memset
lea rdx, [rsp + 0x1c0]
bswap rsi
xor edi, 0x38
cmp edi, 7
ja 0x140002b6a
lea rcx, [rsp + 0xb0]
mov r8d, 1
call fcn.140015ac0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], rsi
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r8d, 1
call fcn.140015ac0
jmp 0x140002b85
mov qword [rsp + 0x1f8], rsi
lea rcx, [rsp + 0xb0]
mov r8d, 1
call fcn.140015ac0
mov eax, dword [rsp + 0xc0]
bswap eax
pxor xmm0, xmm0
movdqa xmm1, xmmword [rsp + 0xb0]
movdqa xmm2, xmm1
punpckhbw xmm2, xmm0
pshuflw xmm2, xmm2, 0x1b
pshufhw xmm2, xmm2, 0x1b
punpcklbw xmm1, xmm0
pshuflw xmm0, xmm1, 0x1b
pshufhw xmm0, xmm0, 0x1b
packuswb xmm0, xmm2
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x80], eax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x670], rax
lea rax, [0x14000c360]
mov qword [rsp + 0x678], rax
lea rsi, [0x140119210]
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 1
mov qword [rsp + 0x1c0], 0
lea r14, [rsp + 0x670]
mov qword [rsp + 0x1b0], r14
mov qword [rsp + 0x1b8], 1
lea rcx, [rsp + 0x188]
lea rdx, [rsp + 0x1a0]
call fcn.1400f4940
mov rbx, qword [rsp + 0x188]
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x58], rax
mov rdi, qword [rsp + 0x198]
mov qword [rsp + 0x670], r12
lea rax, [0x140017c40]
mov qword [rsp + 0x678], rax
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 1
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1b0], r14
mov qword [rsp + 0x1b8], 1
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x1a0]
call fcn.1400f4940
mov r12, rbx
mov rbp, qword [rsp + 0x130]
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x50], rax
mov rbx, qword [rsp + 0x140]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x670], rax
lea rax, [0x14000c440]
mov qword [rsp + 0x678], rax
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 1
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1b0], r14
mov qword [rsp + 0x1b8], 1
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x1a0]
call fcn.1400f4940
mov r14, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
mov r15, qword [rsp + 0x120]
mov r13, qword [rsp + 0x68]
cmp r13, rdi
jne 0x140002d81
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x58]
mov r8, r13
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x140002ec1
cmp r13, rbx
mov rcx, qword [rsp + 0x40]
jne 0x140002da5
mov rdx, qword [rsp + 0x50]
mov r8, r13
call sub.msvcrt.dll_memcmp
mov rcx, qword [rsp + 0x40]
test eax, eax
je 0x140002ecb
cmp r13, r15
jne 0x140002ebd
mov rdx, rsi
mov r8, r13
call sub.msvcrt.dll_memcmp
mov rcx, qword [rsp + 0x40]
test eax, eax
sete dil
jmp 0x140002ece
mov rax, r13
and rax, 0xffffffffffffffe0
xor ecx, ecx
movdqa xmm0, xmmword [section..rdata]
movdqa xmm1, xmmword [0x140119010]
movdqa xmm2, xmmword [0x140119020]
nop word [rax + rax]
movdqu xmm3, xmmword [rsi + rcx]
movdqu xmm4, xmmword [rsi + rcx + 0x10]
movdqa xmm5, xmm3
paddb xmm5, xmm0
movdqa xmm6, xmm4
paddb xmm6, xmm0
movdqa xmm7, xmm5
pminub xmm7, xmm1
pcmpeqb xmm7, xmm5
pand xmm7, xmm2
movdqa xmm5, xmm6
pminub xmm5, xmm1
pcmpeqb xmm5, xmm6
pand xmm5, xmm2
por xmm7, xmm3
por xmm5, xmm4
movdqu xmmword [rsi + rcx], xmm7
movdqu xmmword [rsi + rcx + 0x10], xmm5
add rcx, 0x20
cmp rax, rcx
jne 0x140002df0
cmp r13, rax
je 0x140002fff
test r13b, 0x18
je 0x140002fd5
mov rdx, r13
and rdx, 0xfffffffffffffff8
lea rcx, [r14 + rdx]
movdqa xmm0, xmmword [0x140119030]
movdqa xmm1, xmmword [0x140119040]
movdqa xmm2, xmmword [0x140119050]
nop dword [rax]
movq xmm3, qword [rsi + rax]
movdqa xmm4, xmm3
paddb xmm4, xmm0
movdqa xmm5, xmm4
pmaxub xmm5, xmm1
pcmpeqb xmm5, xmm4
pandn xmm5, xmm2
por xmm5, xmm3
movq qword [rsi + rax], xmm5
add rax, 8
cmp rdx, rax
jne 0x140002e80
cmp r13, rdx
jne 0x140002fdb
jmp 0x140002fff
xor edi, edi
jmp 0x140002ece
mov dil, 1
mov rcx, qword [rsp + 0x40]
jmp 0x140002ece
mov dil, 1
mov rbx, qword [rsp + 0x48]
test r14, r14
je 0x140002eee
mov r8d, 1
mov rcx, rsi
mov rdx, r14
call fcn.140011dc0
mov rcx, qword [rsp + 0x40]
test rbp, rbp
je 0x140002f0b
mov r8d, 1
mov rcx, qword [rsp + 0x50]
mov rdx, rbp
call fcn.140011dc0
mov rcx, qword [rsp + 0x40]
test r12, r12
je 0x140002f28
mov r8d, 1
mov rcx, qword [rsp + 0x58]
mov rdx, r12
call fcn.140011dc0
mov rcx, qword [rsp + 0x40]
test rbx, rbx
mov rax, qword [rsp + 0x60]
je 0x140002f48
mov r8d, 1
mov rcx, rax
mov rdx, rbx
call fcn.140011dc0
mov rcx, qword [rsp + 0x40]
test dil, dil
je 0x140002fa6
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140002f6f
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
mov rdx, qword [rsp + 0xd0]
test rdx, rdx
je 0x140002f8f
mov rcx, qword [rsp + 0xd8]
mov r8d, 1
call fcn.140011dc0
mov al, 1
mov qword [rsp + 0x30], rax
cmp byte [rsp + 0x3c], 0
je 0x1400049ce
jmp 0x1400052eb
mov rdx, qword [rsp + 0xd0]
test rdx, rdx
je 0x140002fcb
mov rcx, qword [rsp + 0xd8]
mov r8d, 1
call fcn.140011dc0
mov rcx, qword [rsp + 0x40]
mov dword [rsp + 0x50], 0
jmp 0x140003043
add rax, r14
mov rcx, rax
add r14, r13
nop
movzx eax, byte [rcx]
lea edx, [rax - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, al
mov byte [rcx], dl
lea rax, [rcx + 1]
mov rcx, rax
cmp rax, r14
jne 0x140002fe0
mov r8d, 1
mov rcx, rbx
mov rdx, r13
call fcn.140011dc0
mov rcx, rsi
mov dword [rsp + 0x3c], 0
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x150], rax
setne al
jne 0x14000253d
mov al, 1
mov dword [rsp + 0x50], eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x68], r13
mov r12, qword [rsp + 0x7b8]
test r12, r12
movabs rsi, 0x8000000000000000
je 0x1400046e9
mov rbp, qword [rsp + 0x7a0]
lea rdi, [rbp + 0x10]
movdqa xmm0, xmmword [rbp]
pmovmskb eax, xmm0
not eax
lea rbx, [rsp + 0x1a0]
movdqa xmm6, xmmword [0x140119030]
movdqa xmm7, xmmword [0x140119040]
movdqa xmm8, xmmword [0x140119050]
movdqa xmm9, xmmword [section..rdata]
movdqa xmm10, xmmword [0x140119010]
movdqa xmm11, xmmword [0x140119020]
mov dword [rsp + 0x48], 0
test ax, ax
je 0x1400030d0
lea esi, [rax - 1]
and esi, eax
jmp 0x1400030f7
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
add rbp, 0xffffffffffffea00
add rdi, 0x10
cmp eax, 0xffff
je 0x1400030d0
mov ecx, 0xfffffffe
sub ecx, eax
not eax
mov esi, eax
and esi, ecx
tzcnt eax, eax
neg rax
imul rax, rax, 0x160
lea rcx, [rax + rbp]
add rcx, 0xfffffffffffffea8
call fcn.140030d70
mov r8, rdx
mov rcx, rbx
mov rdx, rax
call fcn.1400cc1b0
mov r13, qword [rsp + 0x1a8]
mov r15, qword [rsp + 0x1b0]
test r15, r15
je 0x1400031b0
mov rdx, r14
mov r14, r13
mov qword [rsp + 0x58], r12
js 0x140005892
mov rax, qword [0x1401a9e18]
movzx eax, byte [rax]
mov r13d, 1
mov edx, 1
mov rcx, r15
call fcn.140011db0
test rax, rax
je 0x14000588d
mov r12, rax
mov rcx, rax
mov r13, r14
mov r14, r12
mov rdx, r13
mov r8, r15
call sub.msvcrt.dll_memcpy
mov rcx, r12
cmp r15, 8
mov r8, qword [rsp + 0x40]
jb 0x1400032d0
cmp r15, 0x20
jae 0x1400031ec
xor eax, eax
jmp 0x140003270
mov r14d, 1
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x1a0]
lea rax, [rdx*2]
test rax, rax
je 0x14000331d
mov r8d, 1
mov rcx, r13
call fcn.140011dc0
mov r8, qword [rsp + 0x40]
jmp 0x14000331d
movabs rax, 0x8000000000000000
add rax, 0xffffffffffffffe0
and rax, r15
xor ecx, ecx
nop
movdqu xmm0, xmmword [r14 + rcx]
movdqu xmm1, xmmword [r14 + rcx + 0x10]
movdqa xmm2, xmm0
paddb xmm2, xmm9
movdqa xmm3, xmm1
paddb xmm3, xmm9
movdqa xmm4, xmm2
pminub xmm4, xmm10
pcmpeqb xmm4, xmm2
pand xmm4, xmm11
movdqa xmm2, xmm3
pminub xmm2, xmm10
pcmpeqb xmm2, xmm3
pand xmm2, xmm11
por xmm4, xmm0
por xmm2, xmm1
movdqu xmmword [r14 + rcx], xmm4
movdqu xmmword [r14 + rcx + 0x10], xmm2
add rcx, 0x20
cmp rax, rcx
jne 0x140003200
cmp r15, rax
je 0x1400032ff
test r15b, 0x18
je 0x1400032c9
movabs rcx, 0x8000000000000000
lea rdx, [rcx - 8]
and rdx, r15
lea rcx, [r12 + rdx]
nop word cs:[rax + rax]
movq xmm0, qword [r14 + rax]
movdqa xmm1, xmm0
paddb xmm1, xmm6
movdqa xmm2, xmm1
pmaxub xmm2, xmm7
pcmpeqb xmm2, xmm1
pandn xmm2, xmm8
por xmm2, xmm0
movq qword [r14 + rax], xmm2
add rax, 8
cmp rdx, rax
jne 0x140003290
cmp r15, rdx
jne 0x1400032d0
jmp 0x1400032ff
add rax, r12
mov rcx, rax
nop
add r12, r15
nop word cs:[rax + rax]
movzx eax, byte [rcx]
lea edx, [rax - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, al
mov byte [rcx], dl
lea rax, [rcx + 1]
mov rcx, rax
cmp rax, r12
jne 0x1400032e0
mov r12, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x1a0]
lea rax, [rdx*2]
test rax, rax
jne 0x1400031d4
mov r13, qword [rsp + 0x68]
cmp r15, r13
jne 0x140003350
mov rcx, r14
mov rdx, r8
mov r8, r13
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140003350
cmp dword [rsp + 0x48], 0
mov dword [rsp + 0x48], 1
jg 0x1400056b3
nop dword [rax]
lea rax, [0x14010f9ee]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x38023908
mov edx, dword [rsp + 0x1a0]
call fcn.1400091f0
mov rcx, qword [rax]
movabs rdx, 0x5e723d72a96ae19e
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x282f15942252421c
xor rdx, r8
movzx eax, byte [rax + 0x10]
xor al, 0x9a
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov byte [rsp + 0x1b0], al
mov edx, 0x11
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x1401104b3]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x5e060bc5
mov edx, dword [rsp + 0x1a0]
call fcn.140008b10
mov rcx, qword [rax]
movabs rdx, 0xf69b9f5dd34ac508
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x2b7fc145
xor edx, r8d
movzx eax, byte [rax + 0xc]
xor al, 0x2e
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], al
mov edx, 0xd
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010eb2b]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xb5798e6
mov edx, dword [rsp + 0x1a0]
call fcn.140008e70
mov rcx, qword [rax]
movabs rdx, 0x666214a58877003d
xor rcx, rdx
mov eax, dword [rax + 8]
mov edx, 0xba227d1e
xor eax, edx
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], eax
mov edx, 0xc
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010c972]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xa86d34b6
mov edx, dword [rsp + 0x1a0]
call fcn.1400086c0
mov rcx, qword [rax]
movabs rdx, 0xc943a38fb8cb0228
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0xbde65bf31b71bfd6
xor rdx, r8
movzx eax, word [rax + 0x10]
mov r8d, eax
xor r8b, 0x5f
shr eax, 8
xor al, 0x17
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov byte [rsp + 0x1b0], r8b
mov byte [rsp + 0x1b1], al
mov edx, 0x12
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140118666]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xf22ee3ac
mov edx, dword [rsp + 0x1a0]
call fcn.140008a40
mov rcx, qword [rax]
movabs rdx, 0x1b2cf0bdd6d29162
xor rcx, rdx
mov eax, dword [rax + 8]
mov edx, 0x22595620
xor eax, edx
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], eax
mov edx, 0xc
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x1401123c1]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xa08a5461
mov edx, dword [rsp + 0x1a0]
call fcn.140008030
mov rcx, qword [rax]
movabs rdx, 0x4c9dfaa3166b7e17
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xa7
xor r8b, 0x8b
xor dl, 0xf5
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], r8b
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010bb75]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x994e9b47
mov edx, dword [rsp + 0x1a0]
call fcn.140008ec0
mov rcx, qword [rax]
movabs rdx, 0x8f857f82735ed358
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0xb8
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov edx, 9
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010a85d]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xcf7cec19
mov edx, dword [rsp + 0x1a0]
call fcn.1400089a0
mov rcx, qword [rax]
movabs rdx, 0x66bd905368542018
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x4244db08
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xda
shr eax, 8
xor al, 0x44
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], r8b
mov byte [rsp + 0x1ad], al
mov edx, 0xe
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [fcn.140115dec]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x4d2e9fcf
mov edx, dword [rsp + 0x1a0]
call fcn.140008250
mov rcx, qword [rax]
movabs rdx, 0xab11c14295675e54
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0x1e
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov edx, 9
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14011007a]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x3a7ed6b3
mov edx, dword [rsp + 0x1a0]
call fcn.140008ba0
mov rcx, qword [rax]
movabs rdx, 0xc851988a05928bb8
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
xor al, 0x6a
xor dl, 0x54
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], ah
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010e962]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x9a30c3f7
mov edx, dword [rsp + 0x1a0]
call fcn.1400092b0
mov rcx, qword [rax]
movabs rdx, 0x94f88bc630e16524
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0xc6
shr eax, 8
xor al, 0x29
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140109a18]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x7618671d
mov edx, dword [rsp + 0x1a0]
call fcn.140008230
mov rcx, qword [rax]
movabs rdx, 0x3ccb8664c3e1298c
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x87
shr eax, 8
xor al, 0x2c
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x1401108d3]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x9b6ef9d6
mov edx, dword [rsp + 0x1a0]
call fcn.1400082b0
mov ecx, dword [rax]
mov edx, 0x74cf9323
xor ecx, edx
movzx r8d, byte [rax + 6]
movzx eax, word [rax + 4]
mov edx, eax
shr edx, 8
xor al, 0xb6
xor dl, 0xbe
xor r8b, 0xdd
movzx r8d, r8b
mov byte [rsp + 0x1a6], r8b
shl r8, 0x30
movzx edx, dl
shl rdx, 0x28
or rdx, r8
movzx eax, al
shl rax, 0x20
or rax, rdx
mov dword [rsp + 0x1a0], ecx
shr rax, 0x20
mov word [rsp + 0x1a4], ax
mov edx, 7
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x1401113d9]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xcaa07a36
mov edx, dword [rsp + 0x1a0]
call fcn.140008210
mov rax, qword [rax]
movabs rcx, 0x7f60dac24154a02a
xor rax, rcx
mov qword [rsp + 0x1a0], rax
mov edx, 8
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010c6b7]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x5d354edc
mov edx, dword [rsp + 0x1a0]
call fcn.140008be0
mov rax, qword [rax]
movabs rcx, 0x6be9859e2f55c5ae
xor rax, rcx
mov qword [rsp + 0x1a0], rax
mov edx, 8
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010cf30]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x92350086
mov edx, dword [rsp + 0x1a0]
call fcn.140008b70
mov rax, qword [rax]
movabs rcx, 0x75131b9b046ae84a
xor rax, rcx
mov qword [rsp + 0x1a0], rax
mov edx, 8
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140118ffe]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x97b77e61
mov edx, dword [rsp + 0x1a0]
call fcn.140007fc0
mov rcx, qword [rax]
movabs rdx, 0x102a4ed1137c3ae1
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 9
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov edx, 9
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14011253e]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x9c3b6031
mov edx, dword [rsp + 0x1a0]
call fcn.1400081b0
mov rcx, qword [rax]
movabs rdx, 0x4b311a8595c89d10
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x15
shr eax, 8
xor al, 0x58
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140111c04]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x3a666646
mov edx, dword [rsp + 0x1a0]
call fcn.140008c50
mov rcx, qword [rax]
movabs rdx, 0x47f094598900787e
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x64
shr eax, 8
xor al, 0x42
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010e4aa]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x8fffe823
mov edx, dword [rsp + 0x1a0]
call fcn.140009160
mov rcx, qword [rax]
movabs rdx, 0x695f10ea6a5c33bf
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x2b
shr eax, 8
xor al, 0xbc
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140116997]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xbabc8d35
mov edx, dword [rsp + 0x1a0]
call fcn.140008c10
mov rcx, qword [rax]
movabs rdx, 0x8e0a8703bf4f4c6
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x67
shr eax, 8
xor al, 0x76
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140115105]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xf037a7be
mov edx, dword [rsp + 0x1a0]
call fcn.140008c30
mov rcx, qword [rax]
movabs rdx, 0xe5a4359d99230e48
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0xc2035d0a01e326d6
xor rdx, r8
mov eax, dword [rax + 0x10]
mov r8d, 0x9deb72bb
xor eax, r8d
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov dword [rsp + 0x1b0], eax
mov edx, 0x14
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010d0ac]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xee9eaa37
mov edx, dword [rsp + 0x1a0]
call fcn.140008560
mov rcx, qword [rax]
movabs rdx, 0xf99e767e0654a815
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x16
xor r8b, 0x17
xor dl, 0x64
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], r8b
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010cf49]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x7e278d40
mov edx, dword [rsp + 0x1a0]
call fcn.140008970
mov rcx, qword [rax]
movabs rdx, 0x7e0c3b5cf2e36f58
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0xf
shr eax, 8
xor al, 0x3a
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140111040]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xe891d2c6
mov edx, dword [rsp + 0x1a0]
call fcn.140008520
mov rcx, qword [rax]
movabs rdx, 0xfda1d7cd88805b94
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x2c5a9841
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xe8
shr eax, 8
xor al, 0x7a
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], r8b
mov byte [rsp + 0x1ad], al
mov edx, 0xe
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010f42f]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xd42e4337
mov edx, dword [rsp + 0x1a0]
call fcn.140008a80
mov rcx, qword [rax]
movabs rdx, 0xdc24ccf8c92adac1
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xf2c62a85
xor edx, r8d
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x8e
xor r9b, 0xb8
xor r8b, 0x44
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], al
mov byte [rsp + 0x1ad], r9b
mov byte [rsp + 0x1ae], r8b
mov edx, 0xf
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140113f79]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xc301f691
mov edx, dword [rsp + 0x1a0]
call fcn.140008630
mov rcx, qword [rax]
movabs rdx, 0x49a9c2b34f97c32a
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xcc
xor r8b, 0xd3
xor dl, 0xc
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], r8b
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140118bde]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x212fd178
mov edx, dword [rsp + 0x1a0]
call fcn.140008000
mov rcx, qword [rax]
movabs rdx, 0x43f2c6a114ff4879
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x72
xor r8b, 0x8d
xor dl, 0xfb
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], r8b
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140112152]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x7966cead
mov edx, dword [rsp + 0x1a0]
call fcn.140008ee0
mov rcx, qword [rax]
movabs rdx, 0x14426ee9454cd8e1
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xe6
xor r8b, 0x26
xor dl, 0x73
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], r8b
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x1401117db]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x61900f10
mov edx, dword [rsp + 0x1a0]
call fcn.140008ac0
mov rcx, qword [rax]
movabs rdx, 0x320369a0bbbd552c
xor rcx, rdx
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x5b
shr eax, 8
xor al, 0x81
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
mov edx, 0xa
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010eb4a]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x53585b76
mov edx, dword [rsp + 0x1a0]
call fcn.1400084a0
mov rcx, qword [rax]
movabs rdx, 0xc1381f1e78f1e6ca
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x99ac7013
xor edx, r8d
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x44
xor r9b, 0x63
xor r8b, 0x6d
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], al
mov byte [rsp + 0x1ad], r9b
mov byte [rsp + 0x1ae], r8b
mov edx, 0xf
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x1401136c0]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x92106cc5
mov edx, dword [rsp + 0x1a0]
call fcn.1400086a0
mov rcx, qword [rax]
movabs rdx, 0x589553e710fcb07e
xor rcx, rdx
movzx eax, byte [rax + 8]
xor al, 0xf3
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov edx, 9
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140110efa]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x2636a476
mov edx, dword [rsp + 0x1a0]
call fcn.140008a60
mov rcx, qword [rax]
movabs rdx, 0xd901b128e93c66db
xor rcx, rdx
mov eax, dword [rax + 8]
mov edx, 0xbbc11fa
xor eax, edx
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], eax
mov edx, 0xc
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140114f68]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x782ac933
mov edx, dword [rsp + 0x1a0]
call fcn.140008870
mov rcx, qword [rax]
movabs rdx, 0xba2fceead39e7536
xor rcx, rdx
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x73
xor r8b, 0x4d
xor dl, 0xa7
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], al
mov byte [rsp + 0x1a9], r8b
mov byte [rsp + 0x1aa], dl
mov edx, 0xb
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14010c722]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xe2c47a2e
mov edx, dword [rsp + 0x1a0]
call fcn.140008c70
mov rcx, qword [rax]
movabs rdx, 0xabd4a4939e1f05a6
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xd79dbd30
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x8d
shr eax, 8
xor al, 0x28
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], r8b
mov byte [rsp + 0x1ad], al
mov edx, 0xe
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140111d47]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xd424feb6
mov edx, dword [rsp + 0x1a0]
call fcn.140008830
mov rcx, qword [rax]
movabs rdx, 0x620bda07af410152
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x302de2e2
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x9a
shr eax, 8
xor al, 0x7f
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], r8b
mov byte [rsp + 0x1ad], al
mov edx, 0xe
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x140113a69]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xee802499
mov edx, dword [rsp + 0x1a0]
call fcn.140008350
mov rcx, qword [rax]
movabs rdx, 0xb528922fea956805
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0x4ac912b9
xor edx, r8d
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x36
shr eax, 8
xor al, 0xd8
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], r8b
mov byte [rsp + 0x1ad], al
mov edx, 0xe
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
lea rax, [0x14011899d]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xec27fd67
mov edx, dword [rsp + 0x1a0]
call fcn.1400081d0
mov rcx, qword [rax]
movabs rdx, 0x14e7b6442a685e11
xor rcx, rdx
mov edx, dword [rax + 8]
mov r8d, 0xa7c7ad33
xor edx, r8d
movzx eax, byte [rax + 0xc]
xor al, 0x63
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], al
mov edx, 0xd
mov rcx, rbx
mov r8, r14
mov r9, r15
call fcn.140001aa0
test al, al
jne 0x14000498f
test r15, r15
je 0x1400046d4
mov r8d, 1
mov rcx, r14
mov rdx, r15
call fcn.140011dc0
mov eax, esi
dec r12
movabs rsi, 0x8000000000000000
jne 0x1400030c3
lea rcx, [0x140005e30]
xor edx, edx
call sub.user32.dll_EnumWindows
mov qword [rsp + 0x1b0], rsi
mov qword [rsp + 0x1a0], 0
lea rcx, [rsp + 0x670]
lea rdx, [rsp + 0x1a0]
call fcn.14000cd80
cmp qword [rsp + 0x670], 0
je 0x1400058a2
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x120], rax
movdqu xmm0, xmmword [rsp + 0x670]
movdqa xmmword [rsp + 0x110], xmm0
lea rcx, [rsp + 0x670]
call fcn.140030040
lea rcx, [rsp + 0xd0]
call fcn.140025a80
lea rcx, [rsp + 0x670]
call fcn.1400303c0
lea rcx, [rsp + 0xd0]
call fcn.140025bd0
mov r14, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xe0]
shl rax, 5
lea rbp, [rax + rax*4]
lea r15, [rsp + 0x1a0]
mov edi, 0x329b1758
jmp 0x1400047c7
add r14, 0xa0
add rbp, 0xffffffffffffff60
test sil, sil
jne 0x140004a2b
test rbp, rbp
je 0x140004ca5
mov rcx, r14
call fcn.140025970
mov r8, rdx
mov rcx, r15
mov rdx, rax
call fcn.1400cc1b0
mov r12, qword [rsp + 0x1a8]
mov r13, qword [rsp + 0x1b0]
test r13, r13
je 0x140004830
js 0x14000587b
mov rax, qword [0x1401a9e18]
movzx eax, byte [rax]
mov esi, 1
mov edx, 1
mov rcx, r13
call fcn.140011db0
test rax, rax
je 0x140005876
mov rbx, rax
jmp 0x140004835
mov ebx, 1
mov rcx, rbx
mov rdx, r12
mov r8, r13
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x1a0]
lea rax, [rdx*2]
test rax, rax
je 0x140004866
mov r8d, 1
mov rcx, r12
call fcn.140011dc0
lea rax, [0x14010f0c2]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xb5ea5b36
mov edx, dword [rsp + 0x1a0]
call fcn.140008810
mov rcx, qword [rax]
movabs rdx, 0x243b3d9c946d264e
xor rcx, rdx
mov edx, dword [rax + 8]
xor edx, edi
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x60
xor r9b, 0xd3
xor r8b, 0x77
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], al
mov byte [rsp + 0x1ad], r9b
mov byte [rsp + 0x1ae], r8b
mov edx, 0xf
mov rcx, r15
mov r8, rbx
mov r9, r13
call fcn.140001aa0
test al, al
jne 0x140004a15
lea rax, [0x14010bcc0]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xbbdda5a9
mov edx, dword [rsp + 0x1a0]
call fcn.140008de0
mov rcx, qword [rax]
movabs rdx, 0x44c352351ea37840
xor rcx, rdx
mov eax, dword [rax + 8]
mov edx, 0xfe394b97
xor eax, edx
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], eax
mov edx, 0xc
mov rcx, r15
mov r8, rbx
mov r9, r13
call fcn.140001aa0
mov esi, eax
test r13, r13
je 0x1400047b0
mov r8d, 1
mov rcx, rbx
mov rdx, r13
call fcn.140011dc0
jmp 0x1400047b0
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x1400049b1
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
test r15, r15
je 0x1400049c7
mov r8d, 1
mov rcx, r14
mov rdx, r15
call fcn.140011dc0
cmp byte [rsp + 0x3c], 0
jne 0x1400049e1
mov r8d, 1
mov rcx, qword [rsp + 0x40]
mov rdx, r13
call fcn.140011dc0
cmp byte [rsp + 0x30], 0
jne 0x1400052eb
mov rdx, qword [rsp + 0x150]
movabs rax, 0x8000000000000000
cmp rdx, rax
je 0x1400052eb
test rdx, rdx
jne 0x1400052d8
jmp 0x1400052eb
test r13, r13
je 0x140004a2b
mov r8d, 1
mov rcx, rbx
mov rdx, r13
call fcn.140011dc0
lea rcx, [rsp + 0x670]
call fcn.140030450
mov rdi, qword [rsp + 0x678]
imul r15, qword [rsp + 0x680], 0x70
lea rbx, [rsp + 0x1a0]
movabs rbp, 0x62fe8821ea3f4986
movabs r12, 0xe80375cbcca4ca5c
movabs r13, 0x6e36f98b51f08456
nop
test r15, r15
je 0x140004ca5
mov rsi, qword [rdi + 0x38]
mov r14, qword [rdi + 0x40]
lea rax, [0x140118549]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xeb975bec
mov edx, dword [rsp + 0x1a0]
call fcn.140009230
mov rcx, qword [rax]
movabs rdx, 0x3e7ef16f59911d9e
xor rcx, rdx
mov rdx, qword [rax + 8]
xor rdx, rbp
mov r8, qword [rax + 0x10]
xor r8, r12
mov rax, qword [rax + 0x18]
xor rax, r13
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov qword [rsp + 0x1b0], r8
mov qword [rsp + 0x1b8], rax
mov edx, 0x20
mov rcx, rbx
mov r8, rsi
mov r9, r14
call fcn.140001aa0
add rdi, 0x70
add r15, 0xffffffffffffff90
test al, al
je 0x140004a70
mov qword [rsp + 0xb0], 0xffffffff80000001
lea rax, [0x140112c8f]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xe29d8edc
mov edx, dword [rsp + 0x1a0]
call fcn.1400083b0
movabs rdi, 0x8000000000000000
movabs rcx, 0xc025aeca45c1c17d
xor rcx, qword [rax]
movabs rdx, 0x62a872cca6652b4
xor rdx, qword [rax + 8]
mov r8d, 0x8f2aa52b
xor r8d, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
xor al, 0x6c
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdx
mov dword [rsp + 0x80], r8d
mov byte [rsp + 0x84], al
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r8d, 0x15
mov r9d, 0x20019
call fcn.1400119b0
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rdx
test rax, rax
je 0x140004bec
lea rcx, [rsp + 0xf8]
call fcn.140001470
jmp 0x140004c98
mov qword [rsp + 0x170], rdx
lea rax, [0x140118d3a]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x188]
mov rcx, qword [rsp + 0x188]
mov dword [rsp + 0x188], 0xa18fe16b
mov edx, dword [rsp + 0x188]
call fcn.140009090
movabs rcx, 0xe85d364ae58cc959
xor rcx, qword [rax]
movzx eax, byte [rax + 8]
mov qword [rsp + 0x130], rcx
mov byte [rsp + 0x138], al
lea rcx, [rsp + 0x1a0]
lea rdx, [rsp + 0x170]
lea r8, [rsp + 0x130]
mov r9d, 9
call fcn.140011a60
mov rbx, qword [rsp + 0x1a0]
cmp rbx, rdi
jne 0x140005340
lea rcx, [rsp + 0x1a8]
call fcn.140001470
lea rcx, [rsp + 0x170]
call fcn.1400120b0
lea rcx, [rsp + 0xb0]
call fcn.1400120b0
lea rax, [0x14010d922]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x34f67a1d
mov edx, dword [rsp + 0x1a0]
mov r12, qword [rsp + 0x68]
call fcn.140008610
movabs r15, 0x8000000000000000
movabs rcx, 0xd47462beb2befb98
xor rcx, qword [rax]
movzx eax, word [rax + 8]
mov edx, eax
xor dl, 0x4f
shr eax, 8
xor al, 0x5b
mov qword [rsp + 0x1a0], rcx
mov byte [rsp + 0x1a8], dl
mov byte [rsp + 0x1a9], al
lea rcx, [rsp + 0x1a0]
call sub.kernel32.dll_GetModuleHandleA
test rax, rax
je 0x140004e16
mov rsi, rax
lea rax, [0x140115ff0]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x35dc7b13
mov edx, dword [rsp + 0x1a0]
call fcn.140009340
movabs rcx, 0x5147c2c6298c71dd
xor rcx, qword [rax]
mov edx, 0x8af59f69
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x45
shr eax, 8
xor al, 0xdf
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + 0x1a8], edx
mov byte [rsp + 0x1ac], r8b
mov byte [rsp + 0x1ad], al
lea rdx, [rsp + 0x1a0]
mov rcx, rsi
call sub.kernel32.dll_GetProcAddress
test rax, rax
je 0x140004e16
mov rsi, rax
mov dword [rsp + 0x1a0], 0
lea r9, [rsp + 0x1a0]
mov edx, 1
mov rcx, rax
mov r8d, 0x40
call sub.kernel32.dll_VirtualProtect
test eax, eax
je 0x140004df4
mov byte [rsi], 0xc3
jmp 0x140004e16
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004e16
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x140004e41
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004e41
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
mov dword [rsp + 0x1a0], 0
call sub.kernel32.dll_GetCurrentProcess
lea rdx, [rsp + 0x1a0]
mov rcx, rax
call sub.kernel32.dll_CheckRemoteDebuggerPresent
test eax, eax
je 0x140004e91
cmp dword [rsp + 0x1a0], 0
je 0x140004e91
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004e91
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
lea rsi, [rsp + 0x1a0]
mov r8d, 0x4d0
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x1d0], 0x100010
call sub.kernel32.dll_GetCurrentThread
mov rcx, rax
mov rdx, rsi
call sub.kernel32.dll_GetThreadContext
test eax, eax
je 0x140004f16
cmp qword [rsp + 0x1e8], 0
jne 0x140004ef4
cmp qword [rsp + 0x1f0], 0
jne 0x140004ef4
cmp qword [rsp + 0x1f8], 0
jne 0x140004ef4
cmp qword [rsp + 0x200], 0
je 0x140004f16
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004f16
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
test byte [0x7ffe02d4], 3
je 0x140004f42
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004f42
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
mov word [rsp + 0x1a0], 0
lea rdx, [rsp + 0x1a0]
mov ecx, 0x23
mov r8d, 2
xor r9d, r9d
call sub.ntdll.dll_NtQuerySystemInformation
test eax, eax
jne 0x140004fa1
cmp byte [rsp + 0x1a0], 0
je 0x140004fa1
cmp byte [rsp + 0x1a1], 0
jne 0x140004fa1
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004fa1
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
xor rax, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0xbc]
and rax, 0x70
mov rax, rax
test eax, eax
je 0x140004fe1
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004fe1
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
xor rax, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 2]
and rax, 0xff
mov rax, rax
test eax, eax
je 0x140005020
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140005020
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
lea rax, [0x140118493]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x7d944d9d
mov edx, dword [rsp + 0x1a0]
call fcn.1400090b0
movabs rcx, 0xb77ef4df5225c649
xor rcx, qword [rax]
movzx eax, byte [rax + 8]
xor al, 0x8d
mov qword [rsp + 0xf0], rcx
mov byte [rsp + 0xf8], al
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xf0]
mov r8d, 9
call fcn.1400f3e60
cmp qword [rsp + 0x70], r15
jne 0x1400058e3
mov rsi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x80]
mov rcx, rsi
call sub.kernel32.dll_LoadLibraryA
mov rbx, rax
mov byte [rsi], 0
test r14, r14
je 0x1400050cc
mov r8d, 1
mov rcx, rsi
mov rdx, r14
call fcn.140011dc0
test rbx, rbx
je 0x14000521d
lea rax, [0x14010e094]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x8cfca5f1
lea rdi, [rsp + 0x1a0]
mov edx, dword [rsp + 0x1a0]
call fcn.1400080c0
movabs rcx, 0x2bb46b3a55cd5b2e
xor rcx, qword [rax]
movabs rdx, 0xadb7028e7cbc7233
xor rdx, qword [rax + 8]
movabs r8, 0x34732a5df13a6bdd
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0xe1
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], r8
mov byte [rsp + 0x108], al
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xf0]
mov r8d, 0x19
call fcn.1400f3e60
cmp qword [rsp + 0x70], r15
jne 0x140005932
mov r14, qword [rsp + 0x78]
mov r15, qword [rsp + 0x80]
mov rcx, rbx
mov rdx, r14
call sub.kernel32.dll_GetProcAddress
mov rsi, rax
mov byte [r14], 0
test r15, r15
je 0x1400051b9
mov r8d, 1
mov rcx, r14
mov rdx, r15
call fcn.140011dc0
test rsi, rsi
je 0x14000521d
mov dword [rsp + 0x70], 0
mov dword [rsp + 0x1a0], 0
call sub.kernel32.dll_GetCurrentProcess
mov qword [rsp + 0x20], rdi
lea r8, [rsp + 0x70]
mov rcx, rax
mov edx, 7
mov r9d, 4
call rsi
test eax, eax
jne 0x14000521d
cmp dword [rsp + 0x70], 0xffffffff
jne 0x14000521d
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x14000521d
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
lea rcx, [rsp + 0xd0]
call fcn.14000db40
mov rax, qword [rsp + 0xd0]
test rax, rax
je 0x140005252
mov rcx, qword [rsp + 0xd8]
shl rax, 5
lea rdx, [rax + rax*4]
mov r8d, 8
call fcn.140011dc0
lea rcx, [rsp + 0x670]
call fcn.1400015b0
mov rcx, qword [rsp + 0x120]
call sub.kernel32.dll_CloseHandle
mov rax, qword [rsp + 0x110]
lock dec qword [rax]
jne 0x140005287
lea rcx, [rsp + 0x110]
call fcn.1400118b0
mov rax, qword [rsp + 0x118]
lock dec qword [rax]
jne 0x1400052a2
lea rcx, [rsp + 0x118]
call fcn.1400117c0
cmp byte [rsp + 0x3c], 0
jne 0x1400052bc
mov r8d, 1
mov rcx, qword [rsp + 0x40]
mov rdx, r12
call fcn.140011dc0
cmp byte [rsp + 0x30], 0
jne 0x1400052eb
mov rdx, qword [rsp + 0x150]
lea rax, [rdx*2]
test rax, rax
je 0x1400052eb
mov rcx, qword [rsp + 0x158]
mov r8d, 1
call fcn.140011dc0
lea rcx, [rsp + 0x760]
call fcn.1400015b0
movaps xmm6, xmmword [rsp + 0x830]
movaps xmm7, xmmword [rsp + 0x840]
movaps xmm8, xmmword [rsp + 0x850]
movaps xmm9, xmmword [rsp + 0x860]
movaps xmm10, xmmword [rsp + 0x870]
movaps xmm11, xmmword [rsp + 0x880]
add rsp, 0x898
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r14, qword [rsp + 0x1a8]
mov rsi, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x170]
call fcn.1400120b0
lea rcx, [rsp + 0xb0]
call fcn.1400120b0
lea rcx, [rsp + 0xf0]
mov rdx, r14
mov r8, rsi
call fcn.1400a4460
mov rax, qword [rsp + 0xf0]
cmp rax, rdi
jne 0x1400053b6
lea rcx, [rsp + 0xf8]
call fcn.140001470
test rbx, rbx
je 0x140004ca5
mov r8d, 1
mov rcx, r14
mov rdx, rbx
call fcn.140011dc0
jmp 0x140004ca5
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x48], rbx
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x58], rax
mov r14, qword [rsp + 0x100]
lea rax, [0x14010e497]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xa2b076a3
mov edx, dword [rsp + 0x1a0]
call fcn.1400085f0
mov rcx, qword [rax]
mov qword [rsp + 0x740], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x748], rcx
mov rsi, qword [rax + 0x10]
mov r13, qword [rax + 0x18]
mov r12, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov rbx, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rax, qword [0x1401a9e18]
movzx eax, byte [rax]
mov ecx, 0x40
mov edx, 1
call fcn.140011db0
test rax, rax
je 0x1400059a2
mov rbp, rax
movabs rax, 0xbd15a3246a2446db
xor rdi, rax
movabs rax, 0xf92bf20ea864f0f3
xor rbx, rax
movabs rax, 0xd845f1ab39745167
xor r15, rax
movabs rax, 0x192f7abb2be05138
xor r12, rax
movabs rax, 0x42aef8e16d258eb8
xor r13, rax
movabs rax, 0x507298011c703109
xor rsi, rax
movabs rax, 0x36a9f07addd090df
mov rcx, qword [rsp + 0x748]
xor rcx, rax
movabs rax, 0x111878306fe71847
mov rdx, qword [rsp + 0x740]
xor rdx, rax
mov qword [rbp], rdx
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rdi
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], 0
test r14, r14
je 0x1400056c9
mov r12d, 1
xor r15d, r15d
mov rdi, qword [rsp + 0x58]
jmp 0x140005589
add r15, r12
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call sub.msvcrt.dll_memcpy
add rbx, qword [rsp + 0x80]
mov qword [rsp + 0x80], rbx
mov rdx, qword [rsp + 0x1a0]
lea rax, [rdx*2]
test rax, rax
jne 0x14000568a
add rdi, r13
mov r15, rbx
sub r14, r13
je 0x1400056a7
cmp r14, 3
mov r13d, 3
cmovb r13, r14
mov dword [rsp + 0x130], 0
movzx eax, byte [rdi]
shl eax, 0x10
cmp r13, 1
je 0x1400055ca
cmp r13, 2
jne 0x1400055bd
movzx ecx, byte [rdi + 1]
shl ecx, 8
jmp 0x1400055c8
movzx ecx, word [rdi + 1]
rol cx, 8
movzx ecx, cx
or eax, ecx
mov ecx, eax
shr ecx, 0x12
movzx ecx, byte [rbp + rcx]
mov byte [rsp + 0x130], cl
mov ecx, eax
shr ecx, 0xc
and ecx, 0x3f
movzx ecx, byte [rbp + rcx]
mov byte [rsp + 0x131], cl
cmp r14, 1
jne 0x140005601
mov byte [rsp + 0x132], 0x3d
mov cl, 0x3d
jmp 0x140005625
mov ecx, eax
shr ecx, 6
and ecx, 0x3f
movzx ecx, byte [rbp + rcx]
mov byte [rsp + 0x132], cl
mov cl, 0x3d
cmp r14, 2
jbe 0x140005625
and eax, 0x3f
movzx ecx, byte [rbp + rax]
mov byte [rsp + 0x133], cl
mov r8d, 4
lea rcx, [rsp + 0x1a0]
lea rdx, [rsp + 0x130]
call fcn.1400f59a0
mov rsi, qword [rsp + 0x1a8]
mov rbx, qword [rsp + 0x1b0]
mov rax, qword [rsp + 0x70]
sub rax, r15
cmp rax, rbx
jae 0x140005540
lea rcx, [rsp + 0x70]
mov rdx, r15
mov r8, rbx
call fcn.14000ca70
mov r12, qword [rsp + 0x78]
mov r15, qword [rsp + 0x80]
jmp 0x140005540
mov r8d, 1
mov rcx, rsi
call fcn.140011dc0
add rdi, r13
mov r15, rbx
sub r14, r13
jne 0x140005589
mov r15, qword [rsp + 0x70]
mov r14, qword [rsp + 0x78]
jmp 0x1400056d4
call fcn.140005e00
mov r15, r13
test r15, r15
jne 0x1400049b6
jmp 0x1400049c7
xor r15d, r15d
xor ebx, ebx
mov r14d, 1
mov edx, 0x40
mov r8d, 1
mov rcx, rbp
call fcn.140011dc0
lea rax, [0x1401143c7]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x93c48842
mov edx, dword [rsp + 0x1a0]
call fcn.140008f40
movabs rcx, 0x91ef09b2a6fe484
xor rcx, qword [rax]
movabs rdx, 0xd104478f36b298bd
xor rdx, qword [rax + 8]
movabs r8, 0x84393d6a6744e5d5
xor r8, qword [rax + 0x10]
movabs r9, 0x26bcbfe2d111b8a0
xor r9, qword [rax + 0x18]
movabs r10, 0x634ec5899544f02
xor r10, qword [rax + 0x20]
movabs r11, 0x5280f4d4ec4b9167
xor r11, qword [rax + 0x28]
movabs rsi, 0x386970ecf5009f9
xor rsi, qword [rax + 0x30]
movabs rdi, 0x74e051dcfd80c81d
xor rdi, qword [rax + 0x38]
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov qword [rsp + 0x1b0], r8
mov qword [rsp + 0x1b8], r9
mov qword [rsp + 0x1c0], r10
mov qword [rsp + 0x1c8], r11
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1d8], rdi
cmp rbx, 0x40
jae 0x1400057d6
xor edi, edi
jmp 0x1400057f2
lea rcx, [rsp + 0x1a0]
mov r8d, 0x40
mov rdx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
sete dil
mov rsi, qword [rsp + 0x48]
test r15, r15
je 0x14000580d
mov r8d, 1
mov rcx, r14
mov rdx, r15
call fcn.140011dc0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140005827
mov r8d, 1
mov rcx, qword [rsp + 0x58]
call fcn.140011dc0
test rsi, rsi
mov rcx, qword [rsp + 0x148]
je 0x140005842
mov r8d, 1
mov rdx, rsi
call fcn.140011dc0
test dil, dil
je 0x140004ca5
call sub.kernel32.dll_GetCurrentProcessId
mov ecx, eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x140004ca5
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 1
call sub.kernel32.dll_TerminateProcess
jmp 0x140004ca5
mov rbx, r13
jmp 0x14000587d
xor esi, esi
mov rcx, rsi
mov rdx, rbx
call fcn.1400f33e0
jmp 0x1400059b1
mov rdx, r15
jmp 0x140005895
xor r13d, r13d
mov rcx, r13
call fcn.1400f33e0
jmp 0x1400059b1
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0x1a0], rax
lea rax, [0x140119288]
mov qword [rsp + 0x20], rax
lea rcx, str.failed_to_spawn_thread_rustc_eeb90cda1969383f56a2637cbd3037bdf598841clibrary_std_src_threadmod.rs
lea r9, fcn.140001470
lea r8, [rsp + 0x1a0]
mov edx, 0x16
call fcn.140100780
jmp 0x1400059b1
movdqu xmm0, xmmword [rsp + 0x70]
movdqu xmm1, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x1b0], xmm1
movdqa xmmword [rsp + 0x1a0], xmm0
lea rax, str.srcproc_sens.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x140119160]
lea r9, [0x140119140]
lea r8, [rsp + 0x1a0]
mov edx, 0x2b
call fcn.140100780
jmp 0x1400059b1
movdqu xmm0, xmmword [rsp + 0x70]
movdqu xmm1, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x1b0], xmm1
movdqa xmmword [rsp + 0x1a0], xmm0
lea rax, str.srcproc_sens.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x140119160]
lea r9, [0x140119140]
lea r8, [rsp + 0x1a0]
mov edx, 0x2b
call fcn.140100780
jmp 0x1400059b1
xor esi, esi
mov rcx, rsi
mov rdx, r13
call fcn.1400f33e0
jmp 0x1400059b1
mov ecx, 1
mov rsi, r13
mov rdx, r13
call fcn.1400f33e0
jmp 0x1400059b1
mov ecx, 1
mov edx, 0x40
call fcn.1400f33e0
ud2