Function at 0x1400edcc4
Capabilities:
Encode data using xor
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x140451b38]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov rbx, r8
lea rcx, [rbp + 0x110]
mov rsi, rdx
mov r8d, 0x82
xor edx, edx
call sub.msvcrt.dll_memset
and qword [rbp + 0x60], 0
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.140077d3c
mov edi, eax
test eax, eax
jns 0x1400edd31
mov ecx, eax
call fcn.14007ac40
jmp 0x1400f09ba
cmp dword [rbp + 0x40], 0
je 0x1400f09ba
mov rax, qword [rsi]
mov rbx, qword [rax + 0x30]
mov rax, qword [0x1403d25b8]
mov rcx, rbx
call rax
mov rax, rbx
lea r8, [rbp + 0xd0]
lea rdx, str.SppBindingSkuId
mov rcx, rsi
call rax
mov edi, eax
test eax, eax
js 0x1400edd25
cmp dword [rbp + 0xd8], 2
je 0x1400edd7c
mov edi, 0x8007070c
mov ecx, edi
jmp 0x1400edd27
mov rcx, qword [rbp + 0xe0]
lea r8, [rbp + 0x60]
lea rdx, str.SppPkeyBindingPid4
call fcn.1400f186c
mov edi, eax
test eax, eax
js 0x1400edd25
mov rax, qword [rbp + 0x60]
lea r9, [rbp + 0x110]
lea r8, [rbp + 0x44]
xor edx, edx
mov rcx, qword [rax + 0x10]
add rcx, 0x378
mov dword [rbp + 0x44], 0x41
call fcn.1401acef0
mov edi, eax
test eax, eax
js 0x1400edd25
xor esi, esi
xor edi, edi
and qword [rsp + 0x50], rsi
xorps xmm0, xmm0
and dword [rbp + 0x48], esi
movups xmmword [rbp + 0x18], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r13d, [rdi + 8]
mov r8d, 0xa0
mov rcx, rax
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400ede83
mov rdi, rax
lea edx, [r13 + 0x78]
lea rax, [0x140000000]
lea rax, [rax + 0x451c50]
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdi + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdi + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdi + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdi + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdi + 0x60], xmm0
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rdi + rdx - 0x10], xmm0
movups xmm1, xmmword [rax + rdx]
movups xmmword [rdi + rdx], xmm1
movups xmm0, xmmword [rax + rdx + 0x10]
movups xmmword [rdi + rdx + 0x10], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, r13d
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
jne 0x1400ede8d
mov ebx, 0xc0000017
jmp 0x1400f0924
mov rsi, rax
mov rax, qword [0x140451b90]
mov qword [rsi], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov r12, rax
xor ecx, ecx
mov r15d, 0xc0000095
neg cl
sbb ebx, ebx
and ebx, r15d
add ebx, 0x10000000
js 0x1400f0924
mov r14d, r13d
mov dword [rbp + 0x28], r13d
lea r8, [rbp + 0x58]
mov edx, 0x7fffffff
lea rcx, [rbp + 0x110]
call fcn.1400faf48
test eax, eax
jns 0x1400edef0
and qword [rbp + 0x58], 0
mov ebx, 0xc000003e
jmp 0x1400f0924
mov rax, qword [rbp + 0x58]
inc rax
mov qword [rbp + 0x58], rax
lea ecx, [rax*2 + 4]
cmp ecx, 4
jb 0x1400edf11
mov r14d, ecx
mov dword [rbp + 0x28], ecx
xor ebx, ebx
jmp 0x1400edf14
mov ebx, r15d
mov r15d, 0xa0
test ebx, ebx
js 0x1400f0924
or ecx, 0xffffffff
lea edx, [r15 + 0x2c]
lea eax, [r14 + rdx]
mov dword [rbp + 0x10], ecx
cmp eax, edx
mov r14d, ecx
cmovae r14d, eax
sbb ebx, ebx
and ebx, 0xc0000095
add ebx, 0x10000000
cmp eax, edx
jb 0x1400f0918
lea r8, [rbp + 0x50]
mov edx, 0x7fffffff
lea rcx, [0x1403dd418]
call fcn.1400faf48
test eax, eax
jns 0x1400edf72
and qword [rbp + 0x50], 0
jmp 0x1400edee6
mov rax, qword [rbp + 0x50]
mov r9d, 0xc0000095
inc rax
mov qword [rbp + 0x50], rax
lea ecx, [rax*2 + 4]
cmp ecx, 4
jb 0x1400edf93
xor ebx, ebx
jmp 0x1400edf99
mov ecx, dword [rbp + 0x28]
mov ebx, r9d
test ebx, ebx
js 0x1400f0924
lea eax, [rcx + r14]
or r8d, 0xffffffff
cmp eax, r14d
mov edx, r8d
mov r10d, 0x10000000
cmovae edx, eax
sbb ebx, ebx
and ebx, r9d
add ebx, r10d
cmp eax, r14d
jb 0x1400f0918
lea eax, [rdx + 4]
mov ecx, r8d
cmp eax, edx
cmovae ecx, eax
sbb ebx, ebx
and ebx, r9d
add ebx, r10d
cmp eax, edx
jb 0x1400f0918
lea eax, [rcx + 8]
mov edx, r8d
cmp eax, ecx
cmovae edx, eax
sbb ebx, ebx
and ebx, r9d
add ebx, r10d
cmp eax, ecx
jb 0x1400f0918
mov dword [rsp + 0x4c], edx
mov ebx, edx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, ebx
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400ede83
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov dword [rsp + 0x48], ecx
test rax, rax
jne 0x1400ee062
mov eax, dword [rsp + 0x4c]
lea r8d, [rax + 8]
cmp r8d, eax
jb 0x1400f090a
inc ecx
mov dword [rsp + 0x4c], r8d
mov dword [rsp + 0x48], ecx
mov r14, r12
mov qword [rsp + 0x70], r12
mov ebx, r13d
mov rax, rsi
mov rdx, rdi
jmp 0x1400ee0d0
mov rdx, qword [rsp + 0x50]
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x1400f090a
mov ecx, dword [rsp + 0x4c]
lea rax, [rdx + 8]
add rcx, rdx
cmp rax, rcx
jbe 0x1400ee08e
mov ebx, 0xc0000023
jmp 0x1400f0924
mov dword [rdx], 4
mov dword [r8], 0x6d
mov ecx, dword [rsp + 0x48]
inc ecx
mov dword [rsp + 0x48], ecx
mov qword [rsp + 0x70], r12
mov r14, r12
mov ebx, r13d
mov rax, rsi
mov rdx, rdi
test rdi, rdi
jne 0x1400ee0cb
test r15d, r15d
jne 0x1400ef365
mov r8d, dword [rsp + 0x4c]
jmp 0x1400ee0d9
mov r8d, dword [rsp + 0x4c]
test r15d, r15d
je 0x1400ef365
cmp qword [rsp + 0x50], 0
jne 0x1400ee10c
add r15d, 4
cmp r15d, 4
jb 0x1400f090a
mov rsi, rax
mov rdi, rdx
lea r12d, [r8 + r15]
cmp r12d, r8d
jb 0x1400f090a
mov dword [rsp + 0x4c], r12d
jmp 0x1400ee192
mov rdx, qword [rsp + 0x50]
xor r9d, r9d
test ecx, ecx
je 0x1400ee140
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400f090a
mov r10d, eax
add r10, rdx
cmp r10, rdx
jb 0x1400f090a
inc r9d
mov rdx, r10
cmp r9d, ecx
jb 0x1400ee118
lea r10, [rdx + 4]
mov qword [rsp + 0x70], r12
mov r14, r12
mov ebx, r13d
cmp r10, rdx
jb 0x1400f090a
mov r9d, r15d
mov ecx, r8d
add rcx, qword [rsp + 0x50]
lea rax, [r9 + 4]
add rax, rdx
cmp rax, rcx
ja 0x1400ee084
mov dword [rdx], r15d
test rdi, rdi
je 0x1400ee189
mov r8d, r9d
mov rdx, rdi
mov rcx, r10
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsp + 0x48]
mov r12d, dword [rsp + 0x4c]
inc ecx
mov dword [rsp + 0x48], ecx
test rsi, rsi
jne 0x1400ee1a6
test ebx, ebx
je 0x1400ee1ae
jmp 0x1400ef365
test ebx, ebx
je 0x1400ef365
cmp qword [rsp + 0x50], 0
jne 0x1400ee1d9
add ebx, 4
cmp ebx, 4
jb 0x1400f090a
lea r9d, [r12 + rbx]
cmp r9d, r12d
jb 0x1400f090a
mov dword [rsp + 0x4c], r9d
jmp 0x1400ee267
mov r15, qword [rsp + 0x50]
xor edx, edx
test ecx, ecx
je 0x1400ee21e
mov eax, dword [r15]
add eax, 4
cmp eax, 4
jb 0x1400ee28c
mov r8d, eax
add r8, r15
cmp r8, r15
jb 0x1400f090a
inc edx
mov r15, r8
cmp edx, ecx
jb 0x1400ee1e4
lea rdx, [0x14045477c]
lea rcx, [0x140440c20]
call fcn.1400f3d28
lea r9, [r15 + 4]
mov qword [rsp + 0x70], r14
cmp r9, r15
jb 0x1400f090a
mov r8d, ebx
mov ecx, r12d
add rcx, qword [rsp + 0x50]
lea rax, [r8 + 4]
add rax, r15
cmp rax, rcx
ja 0x1400ee084
mov dword [r15], ebx
test rsi, rsi
je 0x1400ee25e
mov rdx, rsi
mov rcx, r9
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsp + 0x48]
mov r9d, dword [rsp + 0x4c]
inc ecx
mov dword [rsp + 0x48], ecx
cmp qword [rsp + 0x50], 0
jne 0x1400ee2a9
lea r8d, [r9 + 0xc]
cmp r8d, r9d
jb 0x1400f090a
mov dword [rsp + 0x4c], r8d
jmp 0x1400ee313
lea rdx, [0x1404520d0]
mov ebx, 0xc0000095
lea rcx, [0x140433568]
call fcn.1400f4dac
jmp 0x1400f0924
mov rdx, qword [rsp + 0x50]
xor r8d, r8d
test ecx, ecx
je 0x1400ee2dd
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400f090a
mov r10d, eax
add r10, rdx
cmp r10, rdx
jb 0x1400f090a
inc r8d
mov rdx, r10
cmp r8d, ecx
jb 0x1400ee2b5
lea r8, [rdx + 4]
mov qword [rsp + 0x70], r14
cmp r8, rdx
jb 0x1400f090a
mov ecx, r9d
lea rax, [rdx + 0xc]
add rcx, qword [rsp + 0x50]
cmp rax, rcx
ja 0x1400ee084
mov dword [rdx], r13d
mov qword [r8], r14
mov ecx, dword [rsp + 0x48]
mov r8d, dword [rsp + 0x4c]
inc ecx
mov dword [rsp + 0x48], ecx
xor ebx, ebx
cmp qword [rsp + 0x50], rbx
jne 0x1400ee34e
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x1400f090a
inc ecx
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x48], ecx
lea rdx, [0x14045a330]
lea rcx, [0x14042cc98]
call fcn.1400f3670
jmp 0x1400ee3ba
mov rdx, qword [rsp + 0x50]
mov r9d, ebx
test ecx, ecx
je 0x1400ee382
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400f090a
mov r10d, eax
add r10, rdx
cmp r10, rdx
jb 0x1400f090a
inc r9d
mov rdx, r10
cmp r9d, ecx
jb 0x1400ee35a
lea r9, [rdx + 4]
mov qword [rsp + 0x70], r14
cmp r9, rdx
jb 0x1400f090a
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rsp + 0x50]
cmp rax, rcx
ja 0x1400ee084
mov dword [rdx], 4
mov dword [r9], 3
inc dword [rsp + 0x48]
lea r8, [rbp + 0x30]
mov edx, 0x7fffffff
lea rcx, [rbp + 0x110]
mov r13, rdi
call fcn.1400faf48
test eax, eax
jns 0x1400ee3df
mov qword [rbp + 0x30], rbx
jmp 0x1400edee6
mov rax, qword [rbp + 0x30]
lea rdx, [rax + 1]
cmp rdx, rax
jb 0x1400f0911
mov r12d, 0xc0000023
mov qword [rbp + 0x30], rdx
lea r8d, [rdx + rdx]
mov rcx, rsi
lea r15d, [r12 - 0x16]
test r8d, r8d
je 0x1400ee4e9
cmp qword [rsp + 0x50], rbx
jne 0x1400ee457
add r8d, 4
cmp r8d, 4
jb 0x1400ee44d
mov eax, dword [rsp + 0x4c]
mov qword [rsp + 0x70], r14
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x1400ee43e
inc dword [rsp + 0x48]
mov dword [rsp + 0x4c], ecx
jmp 0x1400ee4f1
or dword [rsp + 0x4c], 0xffffffff
mov ebx, 0xc0000095
jmp 0x1400ee4f1
mov ebx, 0xc0000095
jmp 0x1400ee4ec
mov r11d, dword [rsp + 0x48]
mov r10d, ebx
mov rdx, qword [rsp + 0x50]
test r11d, r11d
je 0x1400ee49c
mov r9, r14
mov eax, dword [rdx]
mov r14, r9
add eax, 4
mov qword [rsp + 0x70], r9
mov rsi, rcx
mov rdi, r13
cmp eax, 4
jb 0x1400ee4c2
mov ecx, eax
add rcx, rdx
cmp rcx, rdx
jb 0x1400ee4c2
inc r10d
mov rdx, rcx
mov rcx, rsi
cmp r10d, r11d
jb 0x1400ee46c
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x1400ee443
mov ecx, dword [rsp + 0x4c]
lea rax, [r8 + 4]
add rcx, qword [rsp + 0x50]
add rax, rdx
mov r10d, r8d
cmp rax, rcx
jbe 0x1400ee4ce
mov ebx, r12d
jmp 0x1400ee4ec
mov ebx, 0xc0000095
mov qword [rsp + 0x70], r9
jmp 0x1400ee4f1
mov dword [rdx], r8d
mov rcx, r9
mov r8, r10
lea rdx, [rbp + 0x110]
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x48]
jmp 0x1400ee4ec
mov ebx, r15d
mov qword [rsp + 0x70], r14
test ebx, ebx
js 0x1400f0924
lea r8, [rbp + 0x38]
mov edx, 0x7fffffff
lea rcx, [0x1403dd418]
call fcn.1400faf48
test eax, eax
jns 0x1400ee51c
and qword [rbp + 0x38], 0
jmp 0x1400edee6
mov rax, qword [rbp + 0x38]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x1400f0905
lea r8d, [rcx + rcx]
mov qword [rbp + 0x38], rcx
test r8d, r8d
je 0x1400ee667
cmp qword [rsp + 0x50], 0
jne 0x1400ee592
add r8d, 4
cmp r8d, 4
jb 0x1400ee588
mov eax, dword [rsp + 0x4c]
mov r15d, dword [rsp + 0x48]
mov qword [rsp + 0x70], r14
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x1400ee579
inc r15d
mov dword [rsp + 0x4c], ecx
mov dword [rsp + 0x48], r15d
xor ebx, ebx
jmp 0x1400ee674
or dword [rsp + 0x4c], 0xffffffff
mov ebx, 0xc0000095
jmp 0x1400ee674
mov ebx, 0xc0000095
jmp 0x1400ee66a
mov r15d, dword [rsp + 0x48]
xor r11d, r11d
mov rdx, qword [rsp + 0x50]
test r15d, r15d
je 0x1400ee5dd
mov rcx, rdi
mov r9, rsi
mov r10, r14
mov eax, dword [rdx]
mov r14, r10
add eax, 4
mov qword [rsp + 0x70], r10
mov rsi, r9
mov rdi, rcx
cmp eax, 4
jb 0x1400ee60a
mov ecx, eax
add rcx, rdx
cmp rcx, rdx
jb 0x1400ee60a
inc r11d
mov rdx, rcx
mov rcx, rdi
cmp r11d, r15d
jb 0x1400ee5ad
lea r13, [rdx + 4]
cmp r13, rdx
jb 0x1400ee57e
mov ecx, dword [rsp + 0x4c]
xor ebx, ebx
add rcx, qword [rsp + 0x50]
mov eax, r8d
mov qword [rsp + 0x30], rax
add rax, 4
add rax, rdx
cmp rax, rcx
jbe 0x1400ee616
mov ebx, r12d
jmp 0x1400ee66f
mov ebx, 0xc0000095
mov qword [rsp + 0x70], r10
jmp 0x1400ee674
mov dword [rdx], r8d
lea rcx, [0x14043507c]
lea rdx, [0x1404523e8]
call fcn.1400f4a68
mov r8, qword [rsp + 0x30]
lea rdx, [0x1403dd418]
mov rcx, r13
call sub.msvcrt.dll_memcpy
mov r15d, dword [rsp + 0x48]
lea rdx, [0x140453a38]
inc r15d
mov qword [rsp + 0x70], r14
lea rcx, [0x140439a58]
mov dword [rsp + 0x48], r15d
call fcn.1400f4080
jmp 0x1400ee674
mov ebx, r15d
mov r15d, dword [rsp + 0x48]
mov qword [rsp + 0x70], r14
mov r8, rsi
mov rdx, rdi
test ebx, ebx
js 0x1400f0924
xor ebx, ebx
cmp qword [rsp + 0x50], rbx
jne 0x1400ee6a0
mov eax, dword [rsp + 0x4c]
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x1400f090a
mov dword [rsp + 0x4c], ecx
jmp 0x1400ee710
mov rcx, qword [rsp + 0x50]
mov r9d, ebx
test r15d, r15d
je 0x1400ee6dd
mov eax, dword [rcx]
mov rsi, r8
add eax, 4
mov rdi, rdx
cmp eax, 4
jb 0x1400f090a
mov edx, eax
add rdx, rcx
cmp rdx, rcx
jb 0x1400f090a
inc r9d
mov rcx, rdx
mov rdx, rdi
cmp r9d, r15d
jb 0x1400ee6ad
lea rdx, [rcx + 4]
mov qword [rsp + 0x70], r14
cmp rdx, rcx
jb 0x1400f090a
mov eax, dword [rsp + 0x4c]
add rax, qword [rsp + 0x50]
cmp rdx, rax
jbe 0x1400ee705
mov ebx, r12d
jmp 0x1400f0924
mov dword [rcx], ebx
mov r15d, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
inc r15d
mov dword [rsp + 0x48], r15d
cmp qword [rsp + 0x50], rbx
jne 0x1400ee73b
lea r8d, [rcx + 8]
cmp r8d, ecx
jb 0x1400f090a
inc r15d
mov dword [rsp + 0x4c], r8d
mov dword [rsp + 0x48], r15d
jmp 0x1400ee7aa
mov rdx, qword [rsp + 0x50]
mov r8d, ebx
test r15d, r15d
je 0x1400ee770
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400f090a
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x1400f090a
inc r8d
mov rdx, r9
cmp r8d, r15d
jb 0x1400ee748
lea r8, [rdx + 4]
mov qword [rsp + 0x70], r14
cmp r8, rdx
jb 0x1400f090a
add rcx, qword [rsp + 0x50]
lea rax, [rdx + 8]
cmp rax, rcx
ja 0x1400ee6fd
mov dword [rdx], 4
mov dword [r8], 2
inc dword [rsp + 0x48]
mov r8d, dword [rsp + 0x4c]
xor edx, edx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x28], rdx
mov r12, rbx
mov qword [rbp - 0x58], rdx
mov r13, rbx
mov qword [rbp - 0x40], rdx
mov qword [rsp + 0x20], rbx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp - 0x60], rax
add r8d, 8
cmp r8d, 8
jb 0x1400f08fe
lea rdx, [r8 + 7]
and edx, 0xfffffff8
cmp edx, r8d
jb 0x1400f08fe
mov r15d, edx
lea rdx, [0x14045b2c0]
lea rcx, [0x140436e50]
call fcn.1400f50fc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, r15d
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x78], rax
mov rcx, rax
test rax, rax
jne 0x1400ee838
mov ebx, 0xd0000017
jmp 0x1400f0924
mov eax, dword [rsp + 0x48]
lea rdx, [rcx + 4]
mov qword [rbp - 0x38], rsi
mov r8, rsi
mov qword [rbp - 0x10], rdi
mov r9, rdi
mov dword [rcx], eax
cmp rdx, rcx
jb 0x1400ee957
mov eax, dword [rsp + 0x4c]
mov dword [rdx], eax
lea rax, [rdx + 4]
cmp rax, rdx
jb 0x1400ee95c
mov rdx, qword [rbp - 0x60]
mov qword [r15 + rcx - 8], rdx
mov rcx, rax
mov r8d, dword [rsp + 0x4c]
mov rdx, qword [rsp + 0x50]
call sub.msvcrt.dll_memcpy
and qword [rsp + 0x38], rbx
mov rax, r15
mov r12, qword [rsp + 0x78]
mov qword [rsp + 0x68], r12
mov qword [rbp - 0x80], r15
test eax, eax
je 0x1400f07d9
add rax, 8
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [r15 + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x78], rax
mov rcx, rax
test rax, rax
je 0x1400f07d9
xor dl, dl
xor eax, eax
mov byte [rsp + 0x5c], dl
test r15, r15
je 0x1400ee8f0
xor dl, byte [rax + r12]
inc rax
cmp rax, r15
jb 0x1400ee8e0
mov byte [rsp + 0x5c], dl
xor r11d, r11d
mov qword [rbp], rcx
and dword [rbp + 8], r11d
or ebx, 0xffffffff
and dword [rsp + 0x40], r11d
mov r8, r15
movabs rax, 0xa564595855b292c4
mov r9, r12
mov qword [rbp + 0xf0], rax
lea r10d, [r11 + 0x38]
mov dword [rbp + 0x14], r10d
and r8d, 7
je 0x1400eea75
xor ecx, ecx
xor ebx, ebx
mov dword [rbp - 0x70], ecx
test r8d, r8d
je 0x1400eea4f
mov r13d, r10d
movzx r10d, byte [r9]
inc r9
cmp ecx, 4
jae 0x1400ee98f
lea ecx, [r13 - 0x20]
shl r10d, cl
or r11d, r10d
jmp 0x1400ee998
mov qword [rsp + 0x78], rcx
mov r15d, 0xc0000095
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
or r15d, 0x10000000
jl 0x1400ef1d5
mov ebx, 0xd000000d
jmp 0x1400f0924
mov ecx, r13d
shl r10d, cl
or ebx, r10d
mov ecx, dword [rbp - 0x70]
sub r13d, 8
inc ecx
mov dword [rbp + 8], ebx
mov dword [rsp + 0x40], r11d
mov dword [rbp - 0x70], ecx
cmp ecx, r8d
jl 0x1400ee93f
mov rax, qword [rbp]
xor r11d, 0x7aded6ad
xor ebx, 0xd8c57f5b
mov qword [rbp - 0x48], r9
xor r15d, r15d
mov qword [rbp - 0x10], rdi
mov r13d, r15d
mov qword [rsp + 0x68], r12
mov ecx, r11d
mov qword [rbp - 0x38], rsi
mov r10d, ebx
mov qword [rsp + 0x70], r14
lea r9, [rax + 1]
mov qword [rsp + 0x30], r9
cmp r15d, 4
jge 0x1400ee9fb
rol ecx, 8
mov r9d, ecx
jmp 0x1400eea02
rol r10d, 8
mov r9d, r10d
mov byte [rax], r9b
inc r15d
mov r9, qword [rsp + 0x30]
mov rax, r9
cmp r15d, r8d
jl 0x1400ee9e4
mov r15, qword [rbp - 0x80]
mov rcx, r9
mov r9, qword [rbp - 0x48]
movabs rax, 0xa564595855b292c4
mov qword [rbp], rcx
cmp r8d, 4
jbe 0x1400eea45
mov ecx, 8
sub ecx, r8d
shl ecx, 3
shr ebx, cl
shl ebx, cl
jmp 0x1400eea71
xor ebx, ebx
cmp r8d, 4
jae 0x1400eea75
jmp 0x1400eea60
xor r10d, r10d
mov dword [rbp + 8], ecx
mov dword [rsp + 0x40], r10d
mov r11d, 0x7aded6ad
mov ecx, 4
sub ecx, r8d
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov rcx, qword [rbp]
mov r8, r15
shr r8, 3
mov qword [rsp + 0x30], r8
test r8, r8
je 0x1400eee06
mov r8d, dword [rbp + 0xf4]
lea rsi, [rcx + 7]
mov r13, qword [rsp + 0x30]
lea rdi, [r9 + 2]
mov r15d, dword [rbp + 0xf4]
mov r12d, dword [rbp + 8]
mov r14d, dword [rsp + 0x40]
movzx edx, ax
mov dword [rbp - 8], edx
movzx edx, word [rbp + 0xf2]
mov dword [rbp - 0x70], edx
movzx edx, word [rbp + 0xf6]
mov dword [rbp], edx
movzx edx, r8w
xor r8d, eax
mov dword [rbp - 0x18], edx
mov edx, r8d
movzx ecx, byte [rdi - 1]
movzx r10d, byte [rdi - 2]
movzx r9d, byte [rdi + 2]
shl r10d, 8
or r10d, ecx
shl r9d, 8
movzx ecx, byte [rdi]
lea rdi, [rdi + 8]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [rdi - 7]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [rdi - 5]
or r9d, ecx
movzx ecx, byte [rdi - 4]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdi - 3]
shl r9d, 8
or r9d, ecx
xor ebx, r9d
mov r8d, ebx
mov ecx, ebx
sub r8d, r15d
ror ecx, 5
ror r8d, 0xb
imul r8d, dword [rbp - 8]
xor r8d, ecx
movzx ecx, word [rbp + 0xf2]
xor r8d, r10d
xor r11d, r8d
mov r8d, r11d
sub r8d, r15d
ror r8d, 2
imul r8d, ecx
mov ecx, r11d
ror ecx, 1
add r8d, ecx
xor ebx, r8d
mov ecx, ebx
mov r8d, ebx
xor ecx, dword [rbp]
imul ecx, dword [rbp - 0x18]
ror r8d, 9
xor r8d, ecx
movzx ecx, word [rbp + 0xf2]
xor r11d, r8d
mov r8d, r11d
xor r8d, ecx
movzx ecx, word [rbp + 0xf6]
rol r8d, 4
imul r8d, ecx
mov ecx, r11d
rol ecx, 2
sub r8d, ecx
xor ebx, r8d
mov ecx, ebx
ror ecx, 8
lea r8d, [rbx + r15]
rol r8d, 0xc
imul r8d, dword [rbp - 8]
sub r8d, ecx
movzx ecx, word [rbp + 0xf2]
xor r11d, r8d
mov r8d, r15d
sub r8d, r11d
rol r8d, 0xf
imul r8d, ecx
mov ecx, r11d
ror ecx, 1
sub r8d, ecx
xor ebx, r8d
mov r8d, ebx
mov ecx, ebx
xor r8d, dword [rbp - 8]
rol r8d, 4
imul r8d, dword [rbp - 0x18]
shr ecx, 0xf
add r8d, ecx
xor r11d, r8d
movzx ecx, word [rbp + 0xf6]
mov r8d, r11d
sub r8d, dword [rbp - 8]
imul r8d, ecx
mov ecx, r11d
shr ecx, 2
sub r8d, ecx
xor ebx, r8d
mov ecx, ebx
sub ecx, r15d
sub ecx, dword [rbp - 8]
xor r11d, ecx
mov ecx, r11d
not ecx
ror ecx, 0xe
add ecx, dword [rbp - 0x70]
imul ecx, dword [rbp - 8]
xor ebx, ecx
movzx ecx, word [rbp + 0xf6]
mov r8d, ebx
xor r8d, ecx
mov ecx, ebx
rol r8d, 3
imul r8d, dword [rbp - 0x18]
ror ecx, 9
xor r8d, ecx
mov ecx, eax
xor r11d, r8d
mov r8d, r11d
xor r8d, r15d
sub ecx, r8d
xor ebx, ecx
mov r8d, ebx
mov ecx, ebx
sub r8d, dword [rbp - 0x18]
rol r8d, 3
imul r8d, dword [rbp - 8]
shr ecx, 0xf
xor r8d, ecx
movzx ecx, word [rbp + 0xf2]
xor r11d, r8d
mov r8d, r11d
sub r8d, dword [rbp - 0x18]
imul r8d, ecx
mov ecx, r11d
shr ecx, 0xd
sub r8d, ecx
xor ebx, r8d
mov r8d, eax
sub r8d, ebx
mov ecx, ebx
ror r8d, 9
imul r8d, dword [rbp - 0x18]
ror ecx, 0xb
xor r8d, ecx
xor r11d, r8d
movzx r8d, word [rbp + 0xf6]
mov ecx, r11d
sub ecx, eax
sub ecx, r8d
xor ebx, ecx
mov ecx, ebx
mov r8d, ebx
xor ecx, dword [rbp - 0x70]
imul ecx, dword [rbp - 8]
ror r8d, 7
sub ecx, r8d
xor r11d, ecx
movzx ecx, word [rbp + 0xf6]
mov r8d, r11d
xor r8d, ecx
movzx ecx, word [rbp + 0xf2]
rol r8d, 4
imul r8d, ecx
mov ecx, r11d
ror ecx, 0x10
sub r8d, ecx
xor ebx, r8d
mov r8d, eax
sub r8d, ebx
ror r8d, 0xa
imul r8d, dword [rbp - 0x18]
mov ecx, ebx
ror ecx, 4
add r8d, ecx
movzx ecx, word [rbp + 0xf6]
xor r11d, r8d
mov r8d, r11d
sub r8d, eax
ror r8d, 4
imul r8d, ecx
mov ecx, r11d
ror ecx, 9
xor r8d, ecx
xor ebx, r8d
mov r8d, r15d
xor r8d, ebx
mov ecx, ebx
rol r8d, 8
imul r8d, dword [rbp - 8]
rol ecx, 2
sub r8d, ecx
movzx ecx, word [rbp + 0xf2]
xor r11d, r8d
mov r8d, r15d
sub r8d, r11d
ror r8d, 0xb
imul r8d, ecx
mov ecx, r11d
ror ecx, 0xc
sub r8d, ecx
xor ebx, r8d
movzx r8d, word [rbp + 0xf2]
xor r8d, ebx
mov ecx, ebx
imul r8d, dword [rbp - 0x18]
xor ebx, edx
shr ecx, 8
xor r8d, ecx
xor r11d, r8d
xor ebx, r11d
xor r11d, r14d
mov byte [rsi - 4], r11b
xor ebx, r12d
mov byte [rsi], bl
mov r14d, r10d
ror r11d, 8
mov r12d, r9d
mov byte [rsi - 5], r11b
lea rsi, [rsi + 8]
ror ebx, 8
mov byte [rsi - 9], bl
ror r11d, 8
mov byte [rsi - 0xe], r11b
ror ebx, 8
mov byte [rsi - 0xa], bl
ror r11d, 8
ror ebx, 8
mov byte [rsi - 0xf], r11b
mov byte [rsi - 0xb], bl
ror ebx, 8
ror r11d, 8
sub r13, 1
jne 0x1400eead5
mov dl, byte [rsp + 0x5c]
mov rdi, qword [rbp - 0x10]
mov rsi, qword [rbp - 0x38]
mov r14, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r13, qword [rsp + 0x60]
mov r15, qword [rbp - 0x80]
mov rcx, qword [rsp + 0x78]
movzx eax, dl
mov qword [rcx + r15], rax
mov qword [rbp + 0xb0], 8
mov qword [rbp + 0xb8], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x60], rax
mov r15, rax
test rax, rax
jne 0x1400eee5d
mov ebx, 0xc0000017
mov dword [rbp - 0x70], ebx
mov r15d, ebx
jmp 0x1400ef05b
mov ebx, dword [rbp - 0x78]
mov dword [rax], ebx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, 0xc0000017
mov dword [rbp - 0x70], ebx
test rax, rax
je 0x1400eef77
mov qword [r15 + 8], rax
mov r8, qword [rbp - 0x78]
mov rcx, rax
mov rdx, qword [rsp + 0x78]
mov r8d, r8d
mov qword [rsp + 0x60], r15
call sub.msvcrt.dll_memcpy
mov qword [rbp - 0x80], rdi
mov dword [r15 + 0x10], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400eef77
mov qword [r15 + 0x18], rax
mov rcx, rax
mov edx, 0x80
lea rax, [0x140000000]
lea rax, [rax + 0x451ba0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [r15 + 0x20], 8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov eax, 8
mov r8d, eax
mov edx, eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
jne 0x1400ef035
mov rdi, r15
mov qword [rsp + 0x60], r15
mov rdi, qword [rbp - 0x80]
mov r15d, ebx
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400eefb7
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x60]
and qword [rax + 8], 0
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400eefe5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x60]
and qword [rax + 0x18], 0
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400ef013
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x60]
and qword [rax + 0x28], 0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
test r15d, r15d
js 0x1400ef05b
jmp 0x1400ef052
mov qword [r15 + 0x28], rax
mov rdx, qword [rsp + 0x60]
xor r15d, r15d
mov rax, qword [0x140451c40]
mov rcx, qword [rdx + 0x28]
mov qword [rcx], rax
mov rax, rdx
and qword [rsp + 0x38], 0
mov r13, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
mov r10, r14
mov r11, rsi
test rax, rax
je 0x1400ef12b
mov rcx, qword [rax + 8]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400ef0b3
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
and qword [rax + 8], 0
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400ef0e1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
and qword [rax + 0x18], 0
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400ef10f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
and qword [rax + 0x28], 0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x38]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, r14
mov r11, rsi
or r15d, 0x10000000
jl 0x1400ef1d0
lea rax, [r13 + 0x20]
mov r15, r13
mov qword [rbp - 0x50], rax
mov eax, dword [rax]
mov dword [rbp - 0x20], eax
lea rax, [r13 + 0x10]
mov qword [rbp - 0x80], rax
mov eax, dword [rax]
mov dword [rbp], eax
mov eax, dword [r13]
add eax, 4
cmp eax, 4
jb 0x1400f07ce
lea edx, [rax + 4]
mov r14, r10
mov rsi, r11
cmp edx, eax
jb 0x1400f07ce
mov ecx, dword [rbp]
add ecx, edx
cmp ecx, edx
jb 0x1400f07ce
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400f07ce
mov ecx, dword [rbp - 0x20]
add ecx, eax
cmp ecx, eax
jb 0x1400f07ce
mov eax, ecx
mov qword [rbp - 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rbp - 0x28]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
jne 0x1400ef36f
mov r15d, 0xd0000017
mov rbx, qword [rsp + 0x20]
test r12, r12
je 0x1400ef1ee
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r13, r13
je 0x1400ef26d
mov r12, qword [r13 + 8]
test r12, r12
je 0x1400ef215
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [r13 + 8], 0
mov r12, qword [r13 + 0x18]
test r12, r12
je 0x1400ef237
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [r13 + 0x18], 0
mov r12, qword [r13 + 0x28]
test r12, r12
je 0x1400ef259
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [r13 + 0x28], 0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
je 0x1400ef286
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x28]
test rbx, rbx
je 0x1400ef2a4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x1400ef327
mov r12, qword [rbx + 8]
test r12, r12
je 0x1400ef2cf
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rbx + 8], 0
mov r12, qword [rbx + 0x18]
test r12, r12
je 0x1400ef2f1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rbx + 0x18], 0
mov r12, qword [rbx + 0x28]
test r12, r12
je 0x1400ef313
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rbx + 0x28], 0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x1400ef344
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, r15d
test r15d, r15d
js 0x1400f0924
cmp dword [rbp + 0x18], 3
jne 0x1400f0887
cmp qword [rbp + 0x20], 0
jne 0x1400f07e4
mov ebx, 0xc000000d
jmp 0x1400f0924
mov eax, dword [r15]
mov rdx, r14
mov dword [rcx], eax
mov r8, rsi
lea rax, [rcx + 4]
mov r9, r12
mov qword [rsp + 0x30], rax
mov r10, rdi
mov r11, r13
cmp rax, rcx
jb 0x1400ef446
mov r8d, dword [r15]
mov rcx, rax
mov rdx, qword [r15 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r15]
add rcx, qword [rsp + 0x30]
cmp rcx, qword [rsp + 0x30]
jb 0x1400ef43a
mov rdx, qword [rbp - 0x80]
mov eax, dword [rdx]
mov dword [rcx], eax
lea rax, [rcx + 4]
mov qword [rsp + 0x30], rax
cmp rax, rcx
jb 0x1400ef43a
mov r8d, dword [rdx]
mov rcx, rax
mov rdx, qword [r15 + 0x18]
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rbp - 0x80]
mov ecx, dword [rcx]
add rcx, rdx
mov qword [rsp + 0x30], rcx
cmp rcx, rdx
jb 0x1400ef43a
mov rdx, qword [rbp - 0x50]
mov eax, dword [rdx]
mov dword [rcx], eax
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x1400ef43a
mov r8d, dword [rdx]
mov rcx, rax
mov rdx, qword [r15 + 0x28]
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbp - 0x50]
mov eax, dword [rcx]
mov rcx, qword [rsp + 0x30]
add rcx, 4
add rax, rcx
cmp rax, rcx
jb 0x1400ef44b
mov rcx, qword [rsp + 0x68]
mov eax, dword [rbp - 0x28]
mov qword [rsp + 0x20], rcx
jmp 0x1400ef47b
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x68], rax
jmp 0x1400ef44b
mov qword [rsp + 0x68], rcx
mov r15d, 0xc0000095
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
or r15d, 0x10000000
jl 0x1400ef1d0
mov rcx, qword [rsp + 0x20]
mov eax, ecx
cmp qword [rsp + 0x50], 0
jne 0x1400ef48e
mov r15d, 0xc000000d
jmp 0x1400ef1d0
cmp dword [rsp + 0x48], 1
jbe 0x1400ef483
mov rdx, qword [rsp + 0x50]
xor r8d, r8d
lea r9, [rdx + 4]
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x20], rcx
mov r11, rsi
cmp r9, rdx
jb 0x1400f07b0
mov edx, dword [rdx]
add rdx, r9
cmp rdx, r9
jb 0x1400f07a5
inc r8d
cmp r8d, 1
jb 0x1400ef49d
mov eax, dword [rdx]
mov dword [rbp + 8], eax
lea rax, [rdx + 4]
cmp rax, rdx
jb 0x1400f07a5
mov rax, rcx
cmp qword [rsp + 0x50], 0
je 0x1400ef4f1
cmp dword [rsp + 0x48], 2
ja 0x1400ef4fc
mov r15d, 0xc000000d
jmp 0x1400ef7c4
mov rdx, qword [rsp + 0x50]
mov r8, r13
and dword [rsp + 0x40], 0
mov r9, rdi
mov r10, r12
mov qword [rsp + 0x30], r14
mov r15, r14
mov ecx, dword [rsp + 0x58]
mov r14, r15
mov r15d, dword [rbp + 8]
mov rsi, r11
mov dword [rbp + 8], r15d
mov r12, r10
lea r15, [rdx + 4]
mov dword [rsp + 0x58], ecx
mov rcx, rax
mov rdi, r9
mov r13, r8
cmp r15, rdx
jb 0x1400f0792
mov edx, dword [rdx]
add rdx, r15
cmp rdx, r15
jb 0x1400f0784
inc dword [rsp + 0x40]
mov r15, r14
cmp dword [rsp + 0x40], 2
mov qword [rsp + 0x30], r14
jb 0x1400ef517
mov r8d, dword [rdx]
lea rax, [rdx + 4]
cmp rax, rdx
jb 0x1400f07a5
mov eax, dword [rbp + 8]
add eax, 0x40
cmp eax, 0x40
jb 0x1400f07a5
lea edx, [rax + 4]
cmp edx, eax
jb 0x1400f07a5
lea eax, [r8 + rdx]
cmp eax, edx
jb 0x1400f07a5
cmp eax, 0x400000
jbe 0x1400ef5af
mov r15d, 0x8000ffff
jmp 0x1400ef7c4
mov r15d, eax
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x20], rcx
mov qword [rbp - 0x38], r11
mov qword [rbp - 0x30], rcx
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x38], r13
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, r15d
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400ef1ca
mov rdx, rax
mov qword [rsp + 0x28], rax
mov rsi, qword [rbp - 0x30]
test rsi, rsi
jne 0x1400ef61d
mov r15d, 0x80070057
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
mov rsi, qword [rbp - 0x38]
jmp 0x1400ef1d0
mov eax, dword [rsp + 0x58]
lea r8, [rbp + 0x78]
and dword [rbp + 0xa0], 0
mov ecx, 1
mov qword [rbp + 0x90], rdx
lea rdx, [0x1403d9ef8]
mov qword [rbp + 0x88], rsi
mov dword [rbp + 0x98], eax
mov dword [rbp + 0x9c], r15d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
test eax, eax
jne 0x1400ef6b1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsp + 0x78]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
mov eax, 0x80004005
test r15d, r15d
cmovns r15d, eax
mov qword [rsp + 0x20], rsi
cmp r15d, 0xd0000023
jne 0x1400ef719
mov rcx, qword [rsp + 0x28]
mov r15d, 0x8007007a
mov rdi, qword [rsp + 0x60]
mov qword [rsp + 0x28], rcx
jmp 0x1400ef614
mov rcx, qword [rbp + 0x78]
lea rdx, [0x1403e42c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1400ef65d
mov rax, qword [0x1403d25b8]
mov rcx, rdi
call rax
xor r9d, r9d
lea rdx, [rbp + 0x88]
mov rax, rdi
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call rax
mov r8, qword [rsp + 0x78]
mov r15d, eax
or r15d, 0x10000000
jl 0x1400ef685
mov r8d, dword [rbp + 0x9c]
mov r10, r14
mov r11, qword [rbp - 0x38]
mov rax, r12
mov r9, qword [rsp + 0x60]
mov rcx, r13
jmp 0x1400ef73e
mov r9, qword [rsp + 0x60]
mov rcx, r13
mov r11, qword [rbp - 0x38]
mov rdi, r9
mov rsi, r11
mov rax, r12
mov r10, r14
test r15d, r15d
js 0x1400ef1d0
mov rsi, qword [rbp - 0x30]
and qword [rbp - 0x80], 0
mov r12, rax
mov r14, r10
cmp r8d, 4
jae 0x1400ef774
mov rcx, qword [rsp + 0x28]
mov r15d, 0xd000003e
mov r13, qword [rsp + 0x38]
mov rdi, r9
mov qword [rsp + 0x20], rsi
mov rsi, r11
mov qword [rsp + 0x28], rcx
jmp 0x1400ef1d0
mov rdx, qword [rsp + 0x28]
mov qword [rsp + 0x28], rdx
mov r15d, dword [rdx]
lea rdi, [rdx + 4]
mov dword [rsp + 0x58], r15d
mov qword [rbp - 0x28], rdi
cmp rdi, rdx
jb 0x1400f076d
mov r9, qword [rbp - 0x30]
lea eax, [r8 - 4]
mov rdi, qword [rsp + 0x60]
mov rsi, r11
mov r13, qword [rsp + 0x38]
mov rcx, r9
cmp eax, r15d
jae 0x1400ef7cc
mov r12, qword [rsp + 0x68]
mov qword [rsp + 0x28], rdx
mov r15d, 0xd000003e
mov rbx, rcx
jmp 0x1400ef1d5
mov rdx, r15
mov qword [rbp - 0x48], rdx
add rdx, qword [rbp - 0x28]
cmp rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], rdx
mov rdx, qword [rsp + 0x28]
jb 0x1400f0755
lea r10d, [r15 + 4]
cmp r10d, 4
jb 0x1400f0745
mov eax, r8d
sub eax, r10d
cmp eax, 4
jb 0x1400ef7be
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x28], rdx
mov r11d, dword [rax]
lea r9, [rax + 4]
mov dword [rbp - 0x20], r11d
cmp r9, rax
jb 0x1400f073a
lea eax, [r10 + 4]
mov dword [rsp + 0x40], eax
cmp eax, r10d
jb 0x1400f0745
mov eax, r8d
sub eax, dword [rsp + 0x40]
cmp eax, r11d
jb 0x1400ef7be
lea r10, [r11 + r9]
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x28], rdx
cmp r10, r9
jb 0x1400f073a
mov eax, dword [rsp + 0x40]
lea r15d, [r11 + rax]
cmp r15d, eax
jb 0x1400f0745
mov eax, r8d
sub eax, r15d
cmp eax, 4
jb 0x1400ef7be
mov r10d, dword [r10]
lea rax, [r9 + r11]
lea r9, [rax + 4]
mov dword [rbp + 8], r10d
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x28], rdx
cmp r9, rax
jb 0x1400f073a
lea eax, [r15 + 4]
mov dword [rsp + 0x40], eax
cmp eax, r15d
jb 0x1400f0714
mov eax, r8d
mov qword [rbp - 0x78], rcx
sub eax, dword [rsp + 0x40]
mov qword [rbp - 0x18], rdx
cmp eax, r10d
jb 0x1400ef7be
mov eax, dword [rsp + 0x40]
lea r15d, [rax + r10]
mov dword [rbp], r15d
cmp r15d, eax
mov r15d, dword [rsp + 0x58]
jb 0x1400f0745
mov rdx, rsi
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x70], r14
mov qword [rbp - 0x38], rsi
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x68], r12
mov qword [rbp - 0x10], rdi
mov qword [rsp + 0x60], r13
cmp r8d, dword [rbp]
je 0x1400ef911
mov qword [rsp + 0x28], rax
jmp 0x1400ef7be
lea ecx, [r11 + r15]
mov eax, r8d
add ecx, r10d
add rcx, 0xc
cmp rcx, rax
je 0x1400ef93c
mov r15d, 0xd000003e
mov rax, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x78]
mov qword [rsp + 0x28], rax
jmp 0x1400ef1d5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdx, rax
mov qword [rbp + 0xf0], rax
xor eax, eax
test rdx, rdx
jne 0x1400ef96d
mov r15d, 0xd0000017
jmp 0x1400ef92a
mov r15d, eax
cmp qword [rbp - 0x28], rax
je 0x1400ef9c6
mov qword [rsp + 0x28], rdx
mov rbx, rcx
lea rdx, [0x14045a938]
mov r15d, 0xd0000095
lea rcx, [0x14043fc90]
call fcn.1400f50fc
jmp 0x1400ef1d5
mov r15d, 0xd0000095
jmp 0x1400ef7c4
mov r15d, 0xd0000095
mov qword [rsp + 0x28], rdx
jmp 0x1400ef7c4
mov r12, qword [rsp + 0x68]
mov r15d, 0xd0000095
mov qword [rsp + 0x28], rdx
mov rbx, r9
jmp 0x1400ef1d5
mov rbx, rsi
mov r15d, 0xd0000095
mov rsi, r11
mov r13, rcx
mov rdi, r9
jmp 0x1400ef1d5
mov r15d, 0xc0000095
mov rbx, rax
jmp 0x1400ef1d5
mov r14, qword [rsp + 0x30]
mov r15d, 0xc0000095
mov rbx, rax
jmp 0x1400ef1d5
mov r15d, 0xc0000095
jmp 0x1400ef7c4
lea rdx, [0x14045a7b0]
mov r15d, 0xc0000095
lea rcx, [0x140436474]
call fcn.1400f4710
jmp 0x1400ef1d0
mov r15d, 0xd0000095
jmp 0x1400ef1d0
mov r15d, 0xd0000001
jmp 0x1400ef1da
mov r15, qword [rbp + 0x20]
lea rax, [r15 + 4]
cmp rax, r15
jb 0x1400f090a
xor edx, edx
cmp dword [r15], edx
cmovne rdx, rax
cmp dword [r15], 4
mov rcx, rsi
mov rax, rdi
jne 0x1400ee084
mov ebx, dword [rdx]
test ebx, ebx
js 0x1400f0924
test r15, r15
je 0x1400ef365
xor r8d, r8d
lea rdx, [r15 + 4]
mov rsi, rcx
mov rdi, rax
cmp rdx, r15
jb 0x1400f090a
mov r15d, dword [r15]
add r15, rdx
cmp r15, rdx
jb 0x1400f090a
inc r8d
cmp r8d, 1
jb 0x1400f0824
lea rdx, [0x140457470]
lea rcx, [0x140429ebc]
call fcn.1400f3318
lea rcx, [r15 + 4]
cmp rcx, r15
jb 0x1400f090a
xor eax, eax
cmp dword [r15], eax
cmovne rax, rcx
cmp dword [r15], 8
jne 0x1400ee084
cmp r14, qword [rax]
je 0x1400f0891
mov ebx, 0xc004d501
jmp 0x1400f0924
cmp qword [rbp + 0x20], 0
je 0x1400ef365
mov rax, qword [rbp + 0x20]
xor r9d, r9d
mov rdx, rdi
mov r8, rsi
lea r10, [rax + 4]
mov rsi, r8
mov rdi, rdx
mov ecx, ebx
cmp r10, rax
jb 0x1400f090a
mov eax, dword [rax]
add rax, r10
cmp rax, r10
jb 0x1400f090a
inc r9d
cmp r9d, 2
jb 0x1400f08a9
mov r8d, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x1400f090a
xor eax, eax
test r8d, r8d
cmovne rax, rdx
xor ebx, ebx
cmp r8d, 0x10
je 0x1400f08f1
mov ebx, 0x8007000d
jmp 0x1400f0924
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0xf8], xmm0
jmp 0x1400f091f
mov ebx, 0xd0000095
jmp 0x1400f0924
or qword [rbp + 0x38], 0xffffffffffffffff
mov ebx, 0xc0000095
jmp 0x1400f0924
or qword [rbp + 0x30], 0xffffffffffffffff
jmp 0x1400f090a
test ebx, ebx
js 0x1400f0924
mov ecx, dword [rbp + 0x48]
test ecx, ecx
cmovne ebx, ecx
and dword [rsp + 0x4c], 0
and dword [rsp + 0x48], 0
mov r14, qword [rsp + 0x50]
test r14, r14
je 0x1400f0952
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rsp + 0x50], 0
and dword [rbp + 0x1c], 0
and dword [rbp + 0x18], 0
mov r15, qword [rbp + 0x20]
test r15, r15
je 0x1400f097c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rbp + 0x20], 0
test rdi, rdi
je 0x1400f0995
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rsi, rsi
je 0x1400f09ae
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edi, edi
mov eax, 0xc004f034
test ebx, ebx
cmovs edi, eax
mov ecx, edi
call fcn.14007ace8
lea rcx, [rbp + 0x60]
call fcn.14006d98c
mov eax, edi
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.140388a50
mov rbx, qword [rsp + 0x2f0]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret