Function at 0x1400017d0
Capabilities:
Authenticate hmac
Check for time delay via queryperformancecounter

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x127c8
call fcn.1400116e0
sub rsp, rax
movdqa xmmword [rsp + 0x127b0], xmm11
movdqa xmmword [rsp + 0x127a0], xmm10
movdqa xmmword [rsp + 0x12790], xmm9
movdqa xmmword [rsp + 0x12780], xmm8
movdqa xmmword [rsp + 0x12770], xmm7
movdqa xmmword [rsp + 0x12760], xmm6
mov qword [rsp + 0x2760], 0
lea rcx, [rsp + 0x2760]
call sub.kernel32.dll_QueryPerformanceCounter
test eax, eax
je 0x1400082ab
mov rsi, qword [rsp + 0x2760]
mov rcx, qword [0x140206100]
test rcx, rcx
jne 0x140001891
mov qword [rsp + 0x2760], 0
lea rcx, [rsp + 0x2760]
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1400082ab
mov rcx, qword [rsp + 0x2760]
mov qword [0x140206100], rcx
test rcx, rcx
je case.0x14000468d.0
mov rax, rsi
or rax, rcx
shr rax, 0x20
je 0x1400018a7
mov rax, rsi
xor edx, edx
div rcx
jmp 0x1400018ad
mov eax, esi
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1400018d1
xor edx, edx
div rcx
mov rsi, rax
jmp 0x1400018d7
xor edx, edx
div ecx
mov esi, eax
add rsi, r8
mov rax, rsi
shr rax, 9
movabs r14, 0x44b82fa09b5a53
mul r14
mov rdi, rdx
mov ecx, 0x23
call fcn.1400e1880
mov qword [rsp + 0x2760], 0
lea rcx, [rsp + 0x2760]
call sub.kernel32.dll_QueryPerformanceCounter
test eax, eax
je 0x1400082ab
mov rbx, qword [rsp + 0x2760]
mov rcx, qword [0x140206100]
test rcx, rcx
jne 0x140001969
mov qword [rsp + 0x2760], 0
lea rcx, [rsp + 0x2760]
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1400082ab
mov rcx, qword [rsp + 0x2760]
mov qword [0x140206100], rcx
test rcx, rcx
je case.0x14000468d.0
shr rdi, 0xb
imul r8d, edi, 0x3b9aca00
mov rax, rbx
or rax, rcx
shr rax, 0x20
je 0x14000198a
mov rax, rbx
xor edx, edx
div rcx
jmp 0x140001990
mov eax, ebx
xor edx, edx
div ecx
sub esi, r8d
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1400019b7
xor edx, edx
div rcx
mov rcx, rax
jmp 0x1400019bd
xor edx, edx
div ecx
mov ecx, eax
add rcx, r8
mov rax, rcx
shr rax, 9
mul r14
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov qword [rsp + 0x760], rdx
mov dword [rsp + 0x768], ecx
mov qword [rsp + 0x2760], rdi
mov dword [rsp + 0x2768], esi
lea rcx, [rsp + 0x760]
lea rdx, [rsp + 0x2760]
call fcn.1400eadc0
cmp edx, 0x3b9aca00
je 0x1400082b2
cmp rax, 0x19
jb 0x1400082b2
lea rsi, [rsp + 0x2760]
mov rcx, rsi
call fcn.140114b00
cmp byte [rsp + 0x2760], 0x11
jne case.0x14000468d.0
call fcn.1400ed220
test al, al
jne 0x140006d72
mov ecx, 5
call fcn.1400e1880
lea rax, [0x1401901d2]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xa990891bf0a59d51
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0980
movabs rcx, 0xae2bd1ad00d16605
xor rcx, qword [rax]
movabs rdx, 0xbe0b0cb257dd6fe2
xor rdx, qword [rax + 8]
movabs r8, 0xb17f0bcf2c394cfc
xor r8, qword [rax + 0x10]
mov r9d, 0x50deba4c
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0x67
xor r11b, 0x49
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0x78
mov qword [rsp + 0x760], rcx
mov qword [rsp + 0x768], rdx
mov qword [rsp + 0x770], r8
mov dword [rsp + 0x778], r9d
mov word [rsp + 0x77c], r11w
mov byte [rsp + 0x77e], r10b
lea rsi, [rsp + 0x2760]
lea rdx, [rsp + 0x760]
mov r8d, 0x1f
mov rcx, rsi
call fcn.1400de0f0
cmp dword [rsp + 0x2760], 2
jne 0x1400082b2
mov rax, qword [rsp + 0x2768]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140001ba4
test rcx, rcx
je 0x140001ba4
lea rdi, [rax - 1]
mov rbx, qword [rax - 1]
mov r14, qword [rax + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140001b93
cmp qword [r14 + 0x10], 0x11
jb 0x140001b82
mov rbx, qword [rbx - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
lea rax, [0x14019a3c1]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xecc0a297ba2002e2
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0e50
movabs rcx, 0xba5689cf1ff99a74
xor rcx, qword [rax]
movabs rdx, 0x1983cad0684d378
xor rdx, qword [rax + 8]
movabs r8, 0x5606f8b8c7be6acb
xor r8, qword [rax + 0x10]
mov r9d, 0xab263a30
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
movzx r11d, al
shr eax, 8
xor al, 0x8c
movzx eax, al
shl eax, 8
or eax, r11d
xor r10b, 0x61
mov qword [rsp + 0x760], rcx
mov qword [rsp + 0x768], rdx
mov qword [rsp + 0x770], r8
mov dword [rsp + 0x778], r9d
mov word [rsp + 0x77c], ax
mov byte [rsp + 0x77e], r10b
mov dword [rsp + 0x2760], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x2768], xmm0
mov dword [rsp + 0x2778], 7
mov qword [rsp + 0x277c], 0
mov word [rsp + 0x2784], 0
mov byte [rsp + 0x2781], 1
mov byte [rsp + 0x2784], 1
mov byte [rsp + 0x2783], 1
lea r12, [rsp + 0x760]
lea rdi, [rsp + 0x2760]
mov edx, 0x1f
mov rcx, r12
mov r8, rdi
call fcn.1400ddbf0
mov r14, rax
mov rbx, rdx
lea rax, [0x14019b1b2]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x8e5db9981709d5fb
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0da0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test r14, r14
jne case.0x14000468d.0
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov ecx, 5
call fcn.1400e1880
lea rax, [0x140196a2b]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x976cc701e62ab3fd
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0950
movabs rsi, 0x34c1d05716b9f2c7
xor rsi, qword [rax]
mov edi, 0xd7add172
xor edi, dword [rax + 8]
movzx ebx, word [rax + 0xc]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140001db0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0xe
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
movabs r8, 0x8000000000000001
mov ecx, ebx
xor cl, 0xd3
shr ebx, 8
xor bl, 0x51
movzx ecx, cl
movzx edx, bl
shl edx, 8
or edx, ecx
movd xmm0, edx
mov qword [rax], rsi
mov dword [rax + 8], edi
movd ecx, xmm0
mov word [rax + 0xc], cx
mov qword [rsp + 0x2760], 0xe
mov qword [rsp + 0x2768], rax
mov qword [rsp + 0x2770], 0xe
mov byte [rsp + 0x2778], 0
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2788], 8
mov qword [rsp + 0x2790], 0
mov qword [rsp + 0x27e8], 0
mov qword [rsp + 0x27f8], 0
mov word [rsp + 0x2800], 0
lea rax, [r8 - 1]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x2798], rax
mov dword [rsp + 0x2820], 0
mov word [rsp + 0x2824], 0
mov dword [rsp + 0x27b8], 6
mov dword [rsp + 0x27c8], 6
mov dword [rsp + 0x27d8], 6
mov qword [rsp + 0x2808], 0
mov qword [rsp + 0x2818], 0
lea rax, [0x14019c86a]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0x889de596bbf46b90
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f08d0
movabs rsi, 0x6651e408b54fe1b4
xor rsi, qword [rax]
mov edi, 0xc9e560
xor edi, dword [rax + 8]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140001f3b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0xc
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov r14, rax
lea r13, [rsp + 0x2780]
mov qword [rax], rsi
mov dword [rax + 8], edi
mov rcx, r13
xor edx, edx
call fcn.1400db4c0
mov r15, qword [rsp + 0x2788]
mov rbx, qword [rsp + 0x2790]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 0xc
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 0xc
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2790], rbx
lea rax, [0x140194acb]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0xf93d506dc46e8d6a
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0d30
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140002017
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 6
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov r14, rax
mov eax, edi
xor al, 0x9d
shr edi, 8
xor dil, 0x49
movzx eax, al
movzx ecx, dil
shl ecx, 8
or ecx, eax
shl rcx, 0x20
mov eax, 0xe3823c3f
xor rax, rsi
or rax, rcx
mov dword [r14], eax
shr rax, 0x20
mov word [r14 + 4], ax
cmp rbx, qword [rsp + 0x2780]
jne 0x140002087
mov rcx, r13
mov rdx, rbx
call fcn.1400db4c0
mov r15, qword [rsp + 0x2788]
mov rbx, qword [rsp + 0x2790]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 6
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 6
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2790], rbx
lea rax, [0x140197d26]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0xb5495df2073816a0
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0a10
movabs rsi, 0x46738b0b1b87f4e6
xor rsi, qword [rax]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140002129
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov r14, rax
mov qword [rax], rsi
cmp rbx, qword [rsp + 0x2780]
jne 0x140002162
mov rcx, r13
mov rdx, rbx
call fcn.1400db4c0
mov rbx, qword [rsp + 0x2790]
mov r15, qword [rsp + 0x2788]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 8
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 8
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2790], rbx
lea rax, [0x1401930fd]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0x9d2da464dd4c4d21
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0a60
movabs rcx, 0x8919172f86497a4f
xor rcx, qword [rax]
mov qword [rsp + 0x38], rcx
movabs r13, 0xa5a1140ad468f8f1
xor r13, qword [rax + 8]
movabs rbp, 0xc88edbc66322e4da
xor rbp, qword [rax + 0x10]
mov esi, 0x6d34559d
xor esi, dword [rax + 0x18]
movzx edi, byte [rax + 0x1e]
movzx r12d, word [rax + 0x1c]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x14000223e
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x1f
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov r14, rax
mov eax, r12d
shr eax, 8
xor r12b, 0x9e
xor al, 0x4d
movzx ecx, r12b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor dil, 0x77
mov rax, qword [rsp + 0x38]
mov qword [r14], rax
mov qword [r14 + 8], r13
mov qword [r14 + 0x10], rbp
mov dword [r14 + 0x18], esi
movd eax, xmm0
mov word [r14 + 0x1c], ax
mov byte [r14 + 0x1e], dil
cmp rbx, qword [rsp + 0x2780]
jne 0x1400022cf
lea r13, [rsp + 0x2780]
mov rcx, r13
mov rdx, rbx
call fcn.1400db4c0
mov r15, qword [rsp + 0x2788]
mov rbx, qword [rsp + 0x2790]
lea rdx, [rsp + 0x760]
jmp 0x1400022df
lea rdx, [rsp + 0x760]
lea r13, [rsp + 0x2780]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 0x1f
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 0x1f
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2790], rbx
lea rax, [0x1401915b1]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0x1983dd7218ea90cf
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0c50
movabs rdi, 0x8fbd6944713aa36f
xor rdi, qword [rax]
mov r14d, 0x702af9ce
xor r14d, dword [rax + 8]
movzx ebp, byte [rax + 0xe]
movzx r12d, word [rax + 0xc]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140002394
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0xf
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov rsi, rax
mov eax, r12d
shr eax, 8
xor r12b, 0xa7
xor al, 0xe6
movzx ecx, r12b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 0x76
mov qword [rsi], rdi
mov dword [rsi + 8], r14d
movd eax, xmm0
mov word [rsi + 0xc], ax
mov byte [rsi + 0xe], bpl
cmp rbx, qword [rsp + 0x2780]
jne 0x140002405
mov rcx, r13
mov rdx, rbx
call fcn.1400db4c0
mov r15, qword [rsp + 0x2788]
mov rbx, qword [rsp + 0x2790]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 0xf
mov qword [r15 + rax*8 + 0x10], rsi
mov qword [r15 + rax*8 + 0x18], 0xf
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2790], rbx
mov dword [rsp + 0x2820], 0x8000000
lea rcx, [rsp + 0x760]
lea rdx, [rsp + 0x2760]
call fcn.1400e1c60
lea rax, [0x140196d88]
mov qword [rsp + 0x1b8], rax
lea r15, [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b8]
movabs rax, 0x2af3953e46420007
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
call fcn.1400f0900
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
mov rbp, qword [rsp + 0x760]
cmp rbp, 2
je case.0x14000468d.0
mov rbx, qword [rsp + 0x768]
mov r13, qword [rsp + 0x770]
mov rdi, qword [rsp + 0x778]
mov r12, qword [rsp + 0x780]
mov rsi, qword [rsp + 0x788]
mov rcx, qword [rsp + 0x790]
mov r14, qword [rsp + 0x798]
call sub.kernel32.dll_CloseHandle
mov rcx, r14
call sub.kernel32.dll_CloseHandle
test rbp, rbp
je 0x140002506
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
test r13, r13
je 0x140002513
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
test r12, r12
je 0x140002520
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
lea rsi, [rsp + 0x2760]
mov rcx, rsi
call fcn.140001450
lea rax, [0x14018ee06]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x46d9ba4d58276399
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0ce0
movabs rsi, 0x34ad0132d1759e2a
xor rsi, qword [rax]
movabs rdi, 0x624c865b05ea6597
xor rdi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400025b0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x11
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
xor bl, 0x18
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x570], 0x11
mov qword [rsp + 0x578], rax
mov qword [rsp + 0x580], 0x11
lea rax, [rsp + 0x570]
mov qword [rsp + 0x1b8], rax
lea rax, [0x1400017b0]
mov qword [rsp + 0x1c0], rax
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0x2760], rax
mov qword [rsp + 0x2768], 2
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2770], r15
mov qword [rsp + 0x2778], 1
lea r13, [rsp + 0x760]
lea rsi, [rsp + 0x2760]
mov rcx, r13
mov rdx, rsi
call fcn.1400093b0
mov r14, qword [rsp + 0x760]
mov rax, qword [rsp + 0x768]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0x490], rax
lea rax, [0x14019b5fc]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x39546c91d7f33eeb
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f05e0
movabs rcx, 0xd496981edb6db53b
xor rcx, qword [rax]
movabs rdx, 0x1383821ef53e2154
xor rdx, qword [rax + 8]
movabs r8, 0x937d825a1bce0c3e
xor r8, qword [rax + 0x10]
movabs r9, 0xc28c968945ecabe1
xor r9, qword [rax + 0x18]
movabs r10, 0xc67a81945bee4a47
xor r10, qword [rax + 0x20]
mov qword [rsp + 0x4d0], rcx
mov qword [rsp + 0x4d8], rdx
mov qword [rsp + 0x4e0], r8
mov qword [rsp + 0x4e8], r9
mov qword [rsp + 0x4f0], r10
lea rsi, [rsp + 0x2760]
mov rcx, rsi
call fcn.1400bb490
lea rcx, [rsp + 0x1b8]
mov rdx, rsi
call fcn.1400ba920
mov rbx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1c8]
cmp eax, 0x3b9aca01
mov qword [rsp + 0x588], r14
jne 0x14000278d
mov qword [rsp + 0x6a8], rbx
mov qword [rsp + 0x6a0], 3
mov bl, 1
jmp 0x140002b7c
mov rsi, qword [rsp + 0x1c0]
movq xmm6, rax
mov qword [rsp + 0x5f0], rbx
mov qword [rsp + 0x5f8], rsi
movq qword [rsp + 0x600], xmm6
lea rcx, [rsp + 0x6a0]
lea rdx, [rsp + 0x4d0]
mov r8d, 0x28
call fcn.1400a4da0
mov rax, qword [rsp + 0x70]
cmp qword [rsp + 0x6a0], rax
jne 0x1400027f7
mov rax, qword [rsp + 0x6a8]
mov qword [rsp + 0x2768], rax
mov eax, 2
jmp 0x14000297a
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x27b0], xmm0
mov dword [rsp + 0x2851], 0
mov dword [rsp + 0x2854], 0
movups xmm1, xmmword [rsp + 0x6a0]
movups xmm2, xmmword [rsp + 0x6b0]
movups xmm3, xmmword [rsp + 0x6c0]
movups xmm4, xmmword [rsp + 0x6d0]
movups xmmword [rsp + 0x1be], xmm1
movups xmmword [rsp + 0x1ce], xmm2
movups xmmword [rsp + 0x1de], xmm3
movups xmmword [rsp + 0x1ee], xmm4
movups xmm1, xmmword [rsp + 0x6e0]
movups xmmword [rsp + 0x1fe], xmm1
mov rax, qword [rsp + 0x6f0]
mov qword [rsp + 0x20e], rax
mov qword [rsp + 0x2788], 0
mov qword [rsp + 0x27a0], 0
mov qword [rsp + 0x27a8], 8
mov qword [rsp + 0x27c0], 8
mov qword [rsp + 0x27c8], 0
mov qword [rsp + 0x27d0], 2
mov qword [rsp + 0x27d8], 0
mov word [rsp + 0x27e0], 0
mov rax, qword [rsp + 0x206]
mov qword [rsp + 0x2830], rax
mov rax, qword [rsp + 0x20e]
mov qword [rsp + 0x2838], rax
movups xmm1, xmmword [rsp + 0x1f8]
movups xmmword [rsp + 0x2822], xmm1
movups xmm1, xmmword [rsp + 0x1b8]
movups xmm2, xmmword [rsp + 0x1c8]
movups xmm3, xmmword [rsp + 0x1d8]
movups xmm4, xmmword [rsp + 0x1e8]
movups xmmword [rsp + 0x2812], xmm4
movups xmmword [rsp + 0x2802], xmm3
movups xmmword [rsp + 0x27f2], xmm2
movups xmmword [rsp + 0x27e2], xmm1
mov dword [rsp + 0x2848], 0x3b9aca00
mov byte [rsp + 0x2850], 1
movdqu xmmword [rsp + 0x2858], xmm0
mov byte [rsp + 0x2868], 2
mov qword [rsp + 0x2870], 2
xor eax, eax
mov qword [rsp + 0x2760], rax
lock inc qword [rbx]
jle case.0x14000468d.0
movd eax, xmm6
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1c0], rsi
mov dword [rsp + 0x1c8], eax
lea rdi, [rsp + 0x760]
lea rsi, [rsp + 0x1b8]
lea r8, [rsp + 0x2760]
mov rcx, rdi
mov rdx, rsi
call fcn.1400bb920
lea rcx, [rsp + 0x6a0]
mov rdx, rdi
call fcn.1400bc560
lock dec qword [rbx]
jne 0x1400029ed
lea rcx, [rsp + 0x5f0]
call fcn.1400f3400
mov bl, 1
cmp qword [rsp + 0x6a0], 3
je 0x140002b7c
lea rcx, [rsp + 0x2760]
lea rdx, [rsp + 0x6a0]
mov r8d, 0xc0
call sub.msvcrt.dll_memcpy
mov dword [rsp + 0x760], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x768], xmm0
mov dword [rsp + 0x778], 7
mov qword [rsp + 0x77c], 0
mov word [rsp + 0x784], 0
mov byte [rsp + 0x781], 1
mov byte [rsp + 0x784], 1
mov byte [rsp + 0x783], 1
lea r14, [rsp + 0x760]
mov rcx, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x490]
mov r8, r14
call fcn.1400ddbf0
mov r15, rax
mov rdi, rdx
lea rax, [0x140196078]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0xf9915fdd2be087e1
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0d10
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test r15, r15
jne case.0x14000468d.0
mov qword [rsp + 0x4d0], rdi
lea rcx, [rsp + 0x760]
lea rdx, [rsp + 0x2760]
lea r8, [rsp + 0x4d0]
call fcn.1400f96f0
lea rax, [0x140193e6f]
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x1b8]
movabs rax, 0xa306579cbcd00740
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
call fcn.1400f06c0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
cmp qword [rsp + 0x760], 0
jne case.0x14000468d.0
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x2760]
call fcn.140001560
xor ebx, ebx
mov dword [rsp + 0x2760], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x2768], xmm0
mov dword [rsp + 0x2778], 7
mov qword [rsp + 0x277c], 0
mov word [rsp + 0x2784], 0
mov byte [rsp + 0x2780], 1
lea rsi, [rsp + 0x2760]
mov rcx, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x490]
mov r8, rsi
call fcn.1400ddbf0
mov rdi, rax
mov r12, rdx
lea rax, [0x140190ad0]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xf8ee84b6f93730cc
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f07b0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
test rdi, rdi
jne case.0x14000468d.0
mov dword [rsp + 0x4cc], ebx
mov qword [rsp + 0xe8], r12
mov qword [rsp + 0x2760], 0
lea rbp, [rsp + 0x2760]
mov rcx, r12
xor edx, edx
mov r8, rbp
mov r9d, 2
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140002ca3
mov rsi, qword [rsp + 0x2760]
xor ebx, ebx
mov rax, rsi
sub rax, 0x10015
cmovae rbx, rax
mov r14d, 1
cmp rsi, 0x16
jae 0x140002cba
lea rdi, [0x1401ce9c8]
mov r15d, 0x12
jmp 0x140002de4
call sub.kernel32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
xor r14d, r14d
jmp 0x140002de4
add rsi, 0xffffffffffffffea
lea rdi, [0x1401ce9a4]
lea r13, [rsp + 0x2760]
lea rbp, [rsp + 0xe8]
mov r15d, 0x24
nop dword [rax + rax]
cmp rsi, rbx
jb 0x140002dd4
mov qword [rsp + 0x2760], 0
mov rcx, r12
mov rdx, rsi
mov r8, r13
xor r9d, r9d
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140002dc2
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbp
mov rdx, r13
call fcn.1400f58b0
test rax, rax
jne 0x140002d47
cmp dword [rsp + 0x2760], 0x6054b50
je 0x140002d52
add rsi, 0xffffffffffffffff
jb 0x140002ce0
jmp 0x140002dd4
xor r14d, r14d
mov rdi, rax
jmp 0x140002dd4
mov qword [rsp + 0x2760], 0
lea r8, [rsp + 0x2760]
mov edx, 0x10
mov rcx, r12
mov r9d, 1
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140002dc2
xor r14d, r14d
lea rcx, [rsp + 0x2760]
mov rdx, r12
xor r8d, r8d
mov r9, rsi
call fcn.1400eb9b0
cmp qword [rsp + 0x2760], 0
mov rbx, qword [rsp + 0x2768]
lea r13, [rsp + 0x760]
lea rbp, [rsp + 0x2760]
je 0x140006dba
mov rdi, rbx
jmp 0x140002de4
call sub.kernel32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
xor r14d, r14d
lea r13, [rsp + 0x760]
lea rbp, [rsp + 0x2760]
mov rcx, r12
call sub.kernel32.dll_CloseHandle
lea rax, [0x140193342]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x95b4c11dc02c9c23
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0e20
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
cmp r14, 4
jne case.0x14000468d.0
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], r15
mov rax, qword [rdi + 0x20]
mov eax, dword [rdi + 0x20]
mov eax, dword [rdi + 0x20]
mov qword [rsp + 0x5a8], rax
test rax, rax
je 0x140005aaf
lea rax, [rsp + 0x198]
mov qword [rsp + 0x130], rax
pxor xmm6, xmm6
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x180], rax
xor ecx, ecx
cwde
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rsi], ah
add dword [rax], eax
add byte [rsi + 0xf], ah
out dx, eax
test byte [rax - 0x77], 0x84
and al, 0x88
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rax*4], ah
add dword [rax], eax
add byte [rcx], dh
leave
jmp 0x140002ec9
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
xor ah, byte [rax]
add byte [rcx], dh
ror byte [rcx - 0x77], cl
invalid
mov rcx, qword [rsp + 0x2e0]
call fcn.140183470
nop word cs:[rax + rax]
mov rcx, qword [rsp + 0x5c0]
inc rcx
cmp rcx, qword [rsp + 0x5a8]
je 0x140005aaf
mov rax, qword [rsp + 0x190]
cmp qword [rax + 0x20], rcx
mov qword [rsp + 0x5c0], rcx
jbe 0x140002f20
mov rdi, qword [rax + 0x18]
imul rbx, rcx, 0xb0
mov eax, 0x21
mov esi, 2
cmp byte [rdi + rbx + 0xa6], 0
je 0x140002f34
lea rcx, [0x1401ce93e]
mov qword [rsp + 0xb0], rcx
jmp 0x1400030a0
mov esi, 3
xor eax, eax
mov qword [rsp + 0xb0], rax
jmp 0x1400030a0
mov rdx, qword [rdi + rbx + 0x80]
mov qword [rsp + 0x2760], 0
mov rcx, qword [rsp + 0x198]
mov r8, rbp
xor r9d, r9d
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140003081
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, qword [rsp + 0x130]
mov rdx, rbp
call fcn.1400f58b0
test rax, rax
je 0x140002f98
xor esi, esi
mov qword [rsp + 0xb0], rax
jmp 0x140003098
cmp dword [rsp + 0x2760], 0x4034b50
jne 0x140005985
mov qword [rsp + 0x2760], 0
mov rcx, qword [rsp + 0x198]
mov edx, 0x16
mov r8, rbp
mov r9d, 1
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140003081
mov word [rsp + 0x2760], 0
mov r8d, 2
mov r15, qword [rsp + 0x130]
mov rcx, r15
mov rdx, rbp
call fcn.1400f58b0
test rax, rax
jne 0x140002f89
movzx r14d, word [rsp + 0x2760]
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, r15
mov rdx, rbp
call fcn.1400f58b0
test rax, rax
jne 0x140002f89
lea rax, [rdi + rbx]
add rax, 0x80
movzx ecx, word [rsp + 0x2760]
mov rax, qword [rax]
add rcx, r14
lea r9, [rax + rcx]
add r9, 0x1e
mov qword [rdi + rbx + 0x90], r9
mov rdx, qword [rsp + 0x198]
mov rcx, rbp
xor r8d, r8d
call fcn.1400eb9b0
cmp qword [rsp + 0x2760], 0
je 0x1400059b0
mov rax, qword [rsp + 0x2768]
jmp 0x14000308e
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xb0], rax
xor esi, esi
mov rax, qword [rsp + 0xf8]
mov edi, 6
mov bl, 1
mov r14, rax
mov qword [rsp + 0x5b8], rsi
mov rsi, qword [rsp + 0x130]
lea rax, [0x140191d53]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xc2e20df772652ec1
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0d50
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test bl, bl
jne case.0x14000468d.0
mov qword [rsp + 0x1b8], rdi
mov rax, qword [rsp + 0x5b8]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x590], r14
mov qword [rsp + 0x1d0], r14
mov r8d, 0x120
lea rcx, [rsp + 0x1d8]
mov rdx, rbp
call sub.msvcrt.dll_memcpy
movabs rax, 0x8000000000000001
lea r15, [rax - 1]
mov qword [rsp + 0x2f8], r15
mov r14, qword [rsp + 0x598]
mov qword [rsp + 0x300], r14
mov r8d, 0xa0
lea rcx, [rsp + 0x308]
lea rbx, [rsp + 0x5f0]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x3a8], 0
mov eax, dword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x1a3]
lea rdi, [rsp + 0x2f8]
mov dword [rdi + 0xb1], eax
mov dword [rdi + 0xb4], ecx
mov qword [rsp + 0x3b0], rsi
lea rax, [0x1401cea28]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x3c0], rax
mov r8d, 0xc8
lea rcx, [rsp + 0x3c8]
mov rdx, r13
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [r14 + 8]
movdqu xmmword [rsp + 0x5f0], xmm0
lea rax, [rsp + 0x570]
mov qword [rsp + 0x760], rax
lea rax, [0x1400017b0]
mov qword [rsp + 0x768], rax
mov qword [rsp + 0x770], rbx
lea rax, [0x1400f6ac0]
mov qword [rsp + 0x778], rax
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0x2760], rax
mov qword [rsp + 0x2768], 2
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2770], r13
mov qword [rsp + 0x2778], 2
lea rcx, [rsp + 0x4d0]
mov rdx, rbp
call fcn.1400093b0
mov rax, rdi
mov qword [rsp + 0x498], r15
cmp qword [rsp + 0x2f8], r15
jne 0x1400032b0
mov rax, qword [rsp + 0x300]
mov r11, qword [rsp + 0x4d0]
mov rdi, qword [rsp + 0x4d8]
mov r8, qword [rsp + 0x4e0]
mov r9, qword [rax + 0x10]
test r9, r9
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x5c8], r11
je 0x140003490
mov r10, qword [rax + 8]
movzx eax, byte [r10 + r9 - 1]
test al, al
jns 0x140003342
movzx ecx, byte [r10 + r9 - 2]
cmp cl, 0xc0
jge 0x14000331f
movzx edx, byte [r10 + r9 - 3]
cmp dl, 0xc0
jge 0x140003324
movzx r9d, byte [r10 + r9 - 4]
and r9d, 7
shl r9d, 6
and edx, 0x3f
or edx, r9d
jmp 0x140003327
and ecx, 0x1f
jmp 0x14000332f
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and eax, 0x3f
or eax, ecx
cmp eax, 0x110000
je 0x140003490
cmp eax, 0x2f
je 0x140003350
cmp eax, 0x5c
jne 0x140003490
mov byte [rsp + 0x2760], 1
mov rcx, rbp
mov rdx, rdi
call fcn.1400eba10
mov rsi, rax
lea rax, [0x14019095e]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xa046d88b7edaf08b
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0cb0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov ecx, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
test rsi, rsi
jne case.0x14000468d.0
cmp qword [rsp + 0x5c8], 0
je 0x1400033db
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x498]
cmp qword [rsp + 0x2f8], rax
je 0x140005690
mov r8d, 0x10000
mov rcx, rbp
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x1b8]
test rax, rax
je 0x1400053dd
movzx r15d, byte [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1f0]
mov r14, qword [rsp + 0x1f8]
mov qword [rsp + 0x1b8], 0
dec rax
lea rcx, [0x140196078]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movdqu xmm7, xmmword [rsp + 0x1c0]
movzx eax, byte [rsp + 0x1d7]
shl eax, 0x10
movzx ecx, word [rsp + 0x1d5]
or ecx, eax
mov ebx, dword [rsp + 0x1d1]
shl rcx, 0x28
shl rbx, 8
or rbx, rcx
or rbx, r15
jmp 0x14000559e
mov dword [rsp + 0x2760], 0
lea rax, [rsp + 0x2768]
movdqu xmmword [rax], xmm6
mov dword [rsp + 0x2778], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x2781], 1
mov word [rsp + 0x2783], 0x101
mov qword [rsp + 0x5b0], rdi
mov rcx, rdi
mov rdx, r8
mov r8, rbp
call fcn.1400ddbf0
mov rdi, rax
mov rsi, rdx
lea rax, [0x14019c725]
sbb dword [rax], eax
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xbd60aeac79f68ac
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f06a0
jl 0x1400034f3
invalid
add byte [rax - 0x75], cl
or byte [rax - 0x75], cl
or byte [rax - 0x75], cl
adc byte [rbx - 0x49f0e7b8], cl
invalid
invalid
movzx eax, word [rax + 0x1c]
sbb al, 0x48
test edi, edi
jl 0x1400034f3
invalid
sbb al, 0x48
test edi, edi
jne case.0x14000468d.0
mov qword [rsp + 0x160], rsi
xor esi, esi
cmp rsi, 0x2001
jb 0x14000357c
jmp case.0x14000468d.0
mov esi, 0x2000
cmp byte [rdi + 0x10], 0x23
jne case.0x140004705.2
cmp rsi, 0x2001
jae case.0x14000468d.0
mov r8d, 0x2000
sub r8, rsi
lea rcx, [rsp + rsi]
add rcx, 0x760
xor edx, edx
call sub.msvcrt.dll_memset
mov rbp, qword [rsp + 0x1b8]
test rbp, rbp
je 0x1400035c0
lea rcx, [0x140196028]
movsxd rax, dword [rcx + rbp*4]
add rax, rcx
jmp rax
movzx r8d, byte [rsp + 0x3a8]
mov byte [rsp + 0x3a8], 3
cmp r8, 3
je case.0x14000468d.0
movzx edi, byte [rsp + 0x3a9]
mov rax, qword [rsp + 0x300]
lea rcx, [rax + 0x98]
mov rdx, qword [rsp + 0x498]
cmp qword [rsp + 0x2f8], rdx
lea rdx, [rsp + 0x390]
cmovne rcx, rdx
lea rdx, [rsp + 0x2f8]
cmovne rax, rdx
movzx ecx, word [rcx]
mov qword [rsp + 0x108], r8
cmp r8b, 2
mov r15d, 0
cmove r15d, edi
cmp rcx, 4
lea rbp, [rsp + 0x2760]
ja case.0x14000468d.0
mov edx, dword [rsp + 0x3aa]
movzx r12d, word [rsp + 0x3ae]
shl r12, 0x20
or r12, rdx
movdqu xmm11, xmmword [rsp + 0x3b0]
mov r11, qword [rsp + 0x3c0]
mov rsi, qword [rsp + 0x3c8]
mov rdx, qword [rsp + 0x3d0]
mov qword [rsp + 0x88], rdx
movdqu xmm8, xmmword [rsp + 0x3d8]
mov r8, qword [rsp + 0x3e8]
mov rdx, qword [rsp + 0x3f0]
mov qword [rsp + 0x70], rdx
mov rdx, qword [rsp + 0x3f8]
mov qword [rsp + 0x98], rdx
movdqu xmm7, xmmword [rsp + 0x400]
mov r9, qword [rsp + 0x410]
mov edx, dword [rsp + 0x418]
mov dword [rsp + 0xa8], edx
movzx edx, byte [rsp + 0x41f]
shl edx, 0x10
movzx ebx, word [rsp + 0x41d]
or ebx, edx
movzx edx, byte [rsp + 0x447]
shl edx, 0x10
movzx r14d, word [rsp + 0x445]
or r14d, edx
movzx edx, byte [rsp + 0x46f]
shl edx, 0x10
movzx r13d, word [rsp + 0x46d]
or r13d, edx
movzx edx, byte [rsp + 0x41c]
mov byte [rsp + 0xc0], dl
movdqu xmm10, xmmword [rsp + 0x428]
movzx edx, byte [rsp + 0x444]
mov byte [rsp + 0xc8], dl
movdqu xmm9, xmmword [rsp + 0x450]
mov r10d, dword [rax + 0x9c]
lea rdx, section..rdata
movsxd rax, dword [rdx + rcx*4]
add rax, rdx
movzx ecx, byte [rsp + 0x46c]
mov byte [rsp + 0xa0], cl
mov rcx, qword [rsp + 0x420]
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rsp + 0x438]
mov qword [rsp + 0x110], rcx
mov ecx, dword [rsp + 0x440]
mov dword [rsp + 0x118], ecx
mov rcx, qword [rsp + 0x448]
mov qword [rsp + 0x120], rcx
mov rcx, qword [rsp + 0x460]
mov qword [rsp + 0x90], rcx
mov ecx, dword [rsp + 0x468]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0x470]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x478]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rsp + 0x480]
mov rdx, qword [rsp + 0x488]
jmp rax
mov rax, qword [0x140206130]
test rax, rax
je 0x1400051e7
movq qword [rsp + 0xd8], xmm11
pshufd xmm0, xmm11, 0xee
movq qword [rsp + 0x100], xmm0
mov ebp, 2
test al, 2
jne 0x140003de3
xor eax, eax
jmp 0x140003df9
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r8
mov rax, qword [0x140206128]
test rax, rax
jne 0x140003879
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov r8d, 0x8000
mov rcx, rax
mov edx, 8
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov rsi, rax
mov r8d, 0xa8e0
mov rcx, rbp
xor edx, edx
call sub.msvcrt.dll_memset
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x1400038d0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov r8d, 0xab08
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov r8d, 0xa8e0
mov rcx, rax
mov rdx, rbp
mov rbp, rax
call sub.msvcrt.dll_memcpy
mov rcx, rbp
add rcx, 0xa8e0
movdqu xmmword [rbp + 0xaaf0], xmm6
mov r8d, 0x20a
xor edx, edx
call sub.msvcrt.dll_memset
mov qword [rsp + 0x4b8], rbp
mov dword [rbp + 0xab00], 0x10201
mov byte [rsp + 0x2764], 0
mov dword [rsp + 0x2760], 0
mov rax, qword [0x140206130]
test rax, rax
je 0x14000523b
xor ecx, ecx
test al, 2
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov edx, dword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
je 0x140003980
mov rcx, qword [0x140206130]
test rcx, rcx
je 0x1400052f9
shr ecx, 0xa
and ecx, 1
mov qword [rsp + 0xb8], rcx
movzx eax, byte [rsp + 0x2764]
mov byte [rsp + 0x4d4], al
mov eax, r15d
mov byte [rsp + 0x37], r15b
mov rax, rsi
shr rax, 0x20
mov rcx, rsi
shr rcx, 0x28
mov qword [rsp + 0x188], rcx
mov ecx, dword [rsp + 0x2760]
mov dword [rsp + 0x4d0], ecx
movq qword [rsp + 0xd8], xmm11
pshufd xmm0, xmm11, 0xee
movq qword [rsp + 0x100], xmm0
mov ecx, 0x8000
mov qword [rsp + 0x4b0], rcx
mov ebp, 3
xor ecx, ecx
mov qword [rsp + 0x4c0], rcx
mov dword [rsp + 0x12c], edx
mov r15d, eax
mov r10d, esi
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x88], rax
xor eax, eax
mov qword [rsp + 0x4a8], rax
xor eax, eax
mov qword [rsp + 0x4a0], rax
xor eax, eax
mov qword [rsp + 0x180], rax
mov rdx, qword [rsp + 0x60]
jmp 0x1400040d6
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r8
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140003aab
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov r8d, 0x2000
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov rsi, rax
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140003aef
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov r8d, 0x50
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov rbp, rax
movdqu xmmword [rax + 0x40], xmm6
movdqu xmmword [rax + 0x30], xmm6
movdqu xmmword [rax + 0x20], xmm6
movdqu xmmword [rax + 0x10], xmm6
movdqu xmmword [rax], xmm6
mov rcx, rax
xor edx, edx
xor r8d, r8d
call fcn.14011a180
test eax, eax
jne case.0x14000468d.0
mov rax, qword [0x140206130]
test rax, rax
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
je 0x14000526c
xor edx, edx
test al, 2
je 0x140003b77
mov rdx, qword [0x140206130]
test rdx, rdx
je 0x140005339
shr edx, 0xa
and edx, 1
mov qword [rsp + 0xb8], rdx
mov qword [rsp + 0x4c0], rbp
shl rdi, 8
add rdi, qword [rsp + 0x108]
shl r12, 0x10
or r12, rdi
mov eax, dword [rsp + 0x2760]
mov dword [rsp + 0x4d0], eax
movzx eax, byte [rsp + 0x2764]
mov byte [rsp + 0x4d4], al
mov eax, r15d
mov byte [rsp + 0x37], r15b
movzx eax, byte [rsp + 0xa0]
mov r15d, eax
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0xc8], al
mov rbp, qword [rsp + 0x70]
mov rax, rbp
shr rax, 0x20
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x98]
mov edi, esi
shr edi, 8
mov qword [rsp + 0x140], r12
mov r12, rsi
shr r12, 0x10
mov dword [rsp + 0x12c], ecx
mov r10d, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x118]
mov dword [rsp + 0x78], ecx
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x118], ecx
mov ecx, ebp
shr rbp, 0x28
mov edx, r13d
mov qword [rsp + 0x188], rdx
mov r13d, r14d
mov r14d, ebx
mov ebx, ebp
pshufd xmm0, xmm9, 0xee
movq qword [rsp + 0x138], xmm9
movdqa xmm9, xmm10
movdqa xmm10, xmm7
movdqa xmm7, xmm8
mov qword [rsp + 0x108], rsi
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x4b8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x98], rax
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0xa8], ecx
mov qword [rsp + 0x110], r9
mov r9, r8
mov r8, r11
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x4a0], rax
movdqa xmm8, xmm11
movq qword [rsp + 0x88], xmm0
mov eax, 0x2000
mov qword [rsp + 0xd8], rax
mov ebp, 4
mov eax, 0
mov qword [rsp + 0x80], rax
mov eax, 0
mov qword [rsp + 0x100], rax
xor r11d, r11d
jmp 0x1400040ce
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r8
call fcn.14016ac80
mov rbp, rax
test rax, rax
je 0x140003e33
js case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140003dc4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapAlloc
mov qword [rsp + 0x100], rax
test rax, rax
jne 0x140003e40
jmp case.0x14000468d.0
mov rax, qword [0x140206130]
test rax, rax
je 0x1400052a1
shr eax, 0xa
and eax, 1
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x80], rsi
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x88], rcx
jmp 0x1400040d6
mov eax, 1
mov qword [rsp + 0x100], rax
mov qword [rsp + 0xd8], rbp
mov qword [rsp + 0x80], rsi
call fcn.14016b8a0
test rax, rax
je case.0x14000468d.0
mov rbp, rax
mov rcx, rax
call fcn.1401847b0
mov rcx, rbp
lea rdx, str.corrupt_deflate_stream
xor r8d, r8d
call fcn.14016a060
mov rsi, rax
mov rcx, rax
call fcn.140184dd0
test eax, eax
jne 0x1400080e8
movzx eax, byte [rsp + 0x4d4]
mov byte [rsp + 0x2764], al
mov eax, dword [rsp + 0x4d0]
mov dword [rsp + 0x2760], eax
mov rax, qword [0x140206130]
test rax, rax
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
je 0x140005245
xor edx, edx
test al, 2
je 0x140003eea
mov rdx, qword [0x140206130]
test rdx, rdx
je 0x140005319
shr edx, 0xa
and edx, 1
mov qword [rsp + 0xb8], rdx
mov qword [rsp + 0x4c0], rbp
shl rdi, 8
add rdi, qword [rsp + 0x108]
shl r12, 0x10
or r12, rdi
mov eax, dword [rsp + 0x2760]
mov dword [rsp + 0x4d0], eax
movzx eax, byte [rsp + 0x2764]
mov byte [rsp + 0x4d4], al
mov eax, r15d
mov byte [rsp + 0x37], r15b
movzx eax, byte [rsp + 0xa0]
mov r15d, eax
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0xc8], al
mov rsi, qword [rsp + 0x70]
mov rax, rsi
shr rax, 0x20
mov byte [rsp + 0xc0], al
pshufd xmm0, xmm9, 0xee
movq qword [rsp + 0x138], xmm9
movdqa xmm9, xmm10
movdqa xmm10, xmm7
movdqa xmm7, xmm8
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x100]
mov edi, ebp
shr edi, 8
mov qword [rsp + 0x140], r12
mov r12, rbp
shr r12, 0x10
mov dword [rsp + 0x12c], ecx
mov r10d, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x118]
mov dword [rsp + 0x78], ecx
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x118], ecx
mov ecx, esi
shr rsi, 0x28
mov edx, r13d
mov qword [rsp + 0x188], rdx
mov r13d, r14d
mov r14d, ebx
mov ebx, esi
mov edx, ebp
mov qword [rsp + 0x108], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x4b8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x98], rax
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0xa8], ecx
mov qword [rsp + 0x110], r9
mov r9, r8
mov r8, r11
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x4a0], rax
movdqa xmm8, xmm11
movq qword [rsp + 0x88], xmm0
mov ebp, 5
xor eax, eax
mov qword [rsp + 0x80], rax
mov eax, 0
mov qword [rsp + 0x100], rax
xor r11d, r11d
xor eax, eax
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1b8]
cmp rax, 4
ja case.default.0x1400040f6
lea rcx, [0x140196014]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x1d0], 2
jb case.0x1400040f6.0
mov rcx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x1f8]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x58], r9
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x60], rdx
call qword [rsi]
mov rdx, qword [rsp + 0x60]
mov r11, qword [rsp + 0x40]
mov r10d, dword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
cmp qword [rsi + 8], 0
je case.0x1400040f6.0
cmp qword [rsi + 0x10], 0x11
jae 0x1400042cb
mov r8, qword [rsp + 0x68]
jmp 0x14000433f
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r8
cmp qword [rsp + 0x1d8], 0
je 0x1400041a9
mov r8, qword [rsp + 0x1d0]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp byte [rsp + 0x1f8], 2
jb 0x1400042ed
mov rcx, qword [rsp + 0x218]
mov rsi, qword [rsp + 0x220]
mov qword [rsp + 0x68], rcx
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400042ed
cmp qword [rsi + 0x10], 0x11
jae 0x1400042d6
mov r8, qword [rsp + 0x68]
jmp 0x1400042df
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r8
cmp byte [rsp + 0x1d0], 2
jb 0x140004316
mov rcx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x1f8]
mov qword [rsp + 0x68], rcx
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140004316
cmp qword [rsi + 0x10], 0x11
jae 0x1400042ff
mov r8, qword [rsp + 0x68]
jmp 0x140004308
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r8
cmp qword [rsp + 0x1d8], 0
je 0x140004286
mov r8, qword [rsp + 0x1d0]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp byte [rsp + 0x1f8], 2
jb 0x140004361
mov rcx, qword [rsp + 0x218]
mov rsi, qword [rsp + 0x220]
mov qword [rsp + 0x68], rcx
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140004361
cmp qword [rsi + 0x10], 0x11
jae 0x14000434a
mov r8, qword [rsp + 0x68]
jmp 0x140004353
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 - 8]
jmp 0x14000433f
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 - 8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x2e0]
call fcn.140183470
jmp 0x140004382
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 - 8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x2c0], 0
je 0x140004337
mov r8, qword [rsp + 0x2b8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x2d8]
mov rcx, qword [0x140206128]
xor edx, edx
jmp 0x14000437d
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 - 8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x2e0]
mov rcx, rsi
call fcn.14011a100
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov r10d, dword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x1b8], rbp
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x1c0], eax
mov dword [rsp + 0x1c4], 0
mov qword [rsp + 0x1c8], 0
mov rax, qword [rsp + 0x108]
mov byte [rsp + 0x1d0], al
mov byte [rsp + 0x1d1], dil
mov dword [rsp + 0x1d2], r12d
shr r12, 0x20
mov word [rsp + 0x1d6], r12w
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], r11
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1f8], rax
movdqu xmmword [rsp + 0x200], xmm8
mov qword [rsp + 0x210], r8
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x220], rax
movdqu xmmword [rsp + 0x228], xmm7
mov qword [rsp + 0x238], r9
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x240], eax
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x244], al
mov word [rsp + 0x245], bx
shr ebx, 0x10
mov byte [rsp + 0x247], bl
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x248], rax
movdqu xmmword [rsp + 0x250], xmm10
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x260], rax
mov eax, dword [rsp + 0x118]
mov dword [rsp + 0x268], eax
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x26c], al
mov word [rsp + 0x26d], r14w
shr r14d, 0x10
mov byte [rsp + 0x26f], r14b
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x270], rax
movdqu xmmword [rsp + 0x278], xmm9
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x288], rax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x290], eax
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x294], al
mov word [rsp + 0x295], r13w
shr r13d, 0x10
mov byte [rsp + 0x297], r13b
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x2b0], rdx
mov dword [rsp + 0x2b8], r10d
mov byte [rsp + 0x2bc], r15b
mov rax, qword [rsp + 0x188]
mov word [rsp + 0x2bd], ax
shr eax, 0x10
mov byte [rsp + 0x2bf], al
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x2e0], rax
mov word [rsp + 0x2e8], 0
mov rax, qword [rsp + 0x180]
mov byte [rsp + 0x2ea], al
movzx eax, byte [rsp + 0x4d4]
lea rcx, [rsp + 0x2f8]
mov byte [rcx - 9], al
mov eax, dword [rsp + 0x4d0]
mov dword [rcx - 0xd], eax
mov eax, dword [rsp + 0x12c]
mov dword [rsp + 0x2f0], eax
movzx eax, byte [rsp + 0x37]
mov byte [rsp + 0x2f4], al
movzx eax, word [rsp + 0x2760]
mov word [rcx - 3], ax
movzx eax, byte [rsp + 0x2762]
mov byte [rcx - 1], al
lea r13, [rsp + 0x760]
lea rcx, [0x140196028]
movsxd rax, dword [rcx + rbp*4]
add rax, rcx
jmp rax
mov rsi, qword [rsp + 0x1d0]
test rsi, rsi
lea rbp, [rsp + 0x2760]
je 0x140004c28
cmp rsi, 0x2000
mov r9d, 0x2000
cmovb r9, rsi
mov rdx, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1c8]
mov rcx, rbp
mov r8, r13
call qword [rax + 0x18]
cmp qword [rsp + 0x2760], 0
mov rdi, qword [rsp + 0x2768]
je 0x140005081
test rdi, rdi
je 0x140005364
mov eax, edi
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x2f0]
cmp eax, dword [rsp + 0x1c4]
sete bl
cmp byte [rsp + 0x2f4], 0
setne r14b
movzx eax, byte [rsp + 0x2e8]
cmp rax, 2
lea rbp, [rsp + 0x2760]
je 0x140004759
cmp eax, 1
jne 0x140004d16
cmp byte [rsp + 0x2ea], 0
je 0x1400050f5
mov byte [rsp + 0x2e8], 2
or bl, r14b
je 0x14000502d
xor r12d, r12d
jmp 0x140004c8f
mov esi, dword [rsp + 0x1c4]
mov edi, dword [rsp + 0x2b8]
movzx ebx, byte [rsp + 0x2bc]
mov r9d, 0x2000
lea rbp, [rsp + 0x2760]
mov rcx, rbp
lea rdx, [rsp + 0x1d0]
mov r8, r13
call fcn.1401151b0
cmp qword [rsp + 0x2760], 0
je case.default.0x1400047cb
mov rdi, qword [rsp + 0x2768]
mov eax, edi
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x2f0]
cmp eax, dword [rsp + 0x1c4]
sete al
cmp byte [rsp + 0x2f4], 0
setne bl
or bl, al
mov rsi, qword [rsp + 0x2c8]
mov rdi, qword [rsp + 0x2d0]
lea rbp, [rsp + 0x2760]
nop word cs:[rax + rax]
cmp rsi, rdi
jne 0x140004870
mov r8, qword [rsp + 0x2b8]
mov r9, qword [rsp + 0x2c0]
mov rcx, rbp
lea rdx, [rsp + 0x1d0]
call fcn.1401151b0
cmp qword [rsp + 0x2760], 0
mov rdi, qword [rsp + 0x2768]
jne 0x1400046e9
mov qword [rsp + 0x2d0], rdi
mov qword [rsp + 0x2c8], 0
xor esi, esi
jmp 0x140004876
ja case.0x14000468d.0
cmp rdi, qword [rsp + 0x2c0]
ja case.0x14000468d.0
mov rdx, qword [rsp + 0x2b8]
add rdx, rsi
mov r8, rdi
sub r8, rsi
sete al
mov r15, qword [rsp + 0x2e0]
mov r14, qword [rsp + 0x2e8]
shl al, 2
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], 0x2000
lea rcx, [rsp + 0x2d8]
mov r9, r13
call fcn.14001ddc0
mov r12, qword [rsp + 0x2e8]
mov rdx, qword [rsp + 0x2d0]
mov rcx, qword [rsp + 0x2e0]
sub rcx, r15
add rcx, qword [rsp + 0x2c8]
cmp rcx, rdx
cmovae rcx, rdx
mov qword [rsp + 0x2c8], rcx
cmp eax, 2
jne 0x140004cec
shr rax, 0x20
test al, al
je 0x140004913
movzx eax, al
cmp eax, 1
jne 0x140004927
cmp rdi, rsi
je 0x140004927
mov rdi, rdx
mov rsi, rcx
cmp r12, r14
je 0x140004810
sub r12, r14
sete al
not bl
test bl, al
je 0x140004c82
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x1401f2152]
call fcn.140116170
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x2f0]
cmp eax, dword [rsp + 0x1c4]
sete al
cmp byte [rsp + 0x2f4], 0
setne bl
or bl, al
lea rbp, [rsp + 0x2760]
jmp 0x1400049a1
mov byte [rsp + 0x2e8], 1
sub r12, r14
jne 0x140004c72
cmp byte [rsp + 0x2e8], 0
je 0x1400049b9
cmp byte [rsp + 0x2e9], 0
je 0x140004c6f
mov r12, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1e8]
mov rdi, rcx
sub rdi, rax
jbe 0x140004a00
test r12, r12
je 0x1400046e9
add r12, rax
cmp byte [rsp + 0x2e8], 0
jne 0x140004a92
mov rsi, qword [rsp + 0x2e0]
jmp 0x140004b4d
mov rsi, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1f0]
mov r8, rsi
sub r8, rcx
jb case.0x14000468d.0
add rcx, r12
xor edx, edx
call sub.msvcrt.dll_memset
mov rcx, rbp
lea rdx, [rsp + 0x1f8]
mov r8, r12
mov r9, rsi
call fcn.1401151b0
cmp qword [rsp + 0x2760], 0
mov rdi, qword [rsp + 0x2768]
je 0x140004a5c
test rdi, rdi
jne 0x140005149
xor edi, edi
jmp 0x140004a63
cmp rsi, rdi
cmovbe rsi, rdi
mov qword [rsp + 0x1e0], 0
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], rsi
xor eax, eax
mov rcx, rdi
cmp byte [rsp + 0x2e8], 0
je 0x1400049f3
cmp byte [rsp + 0x2e9], 0
je case.0x14000468d.0
cmp rcx, rax
je 0x140004c6f
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140004ad1
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov r8d, 0x50
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov rsi, rax
movdqu xmmword [rax + 0x40], xmm6
movdqu xmmword [rax + 0x30], xmm6
movdqu xmmword [rax + 0x20], xmm6
movdqu xmmword [rax + 0x10], xmm6
movdqu xmmword [rax], xmm6
mov rcx, rax
xor edx, edx
xor r8d, r8d
call fcn.14011a180
test eax, eax
jne case.0x14000468d.0
mov rcx, qword [rsp + 0x2e0]
call fcn.14011a100
mov r8, qword [rsp + 0x2e0]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0x2e0], rsi
mov byte [rsp + 0x2e8], 0
mov r15, qword [rsi + 0xc]
mov r14, qword [rsi + 0x24]
mov eax, 0xffffffff
cmp rdi, rax
cmovb rax, rdi
mov qword [rsi], r12
mov dword [rsi + 8], eax
mov qword [rsi + 0x18], r13
mov dword [rsi + 0x20], 0x2000
mov rcx, rsi
call fcn.140119080
add eax, 5
cmp eax, 9
ja case.0x14000468d.0
add byte [rax], al
mov dl, 1
lea rcx, [0x140196040]
movsxd rax, dword [rcx + rax*4]
add byte [rax + 0x63], cl
add al, 0x81
add rax, rcx
add eax, ecx
jmp rax
mov cl, 2
jmp 0x140004bb4
mov cl, 1
jmp 0x140004bb4
xor eax, eax
xor ecx, ecx
jmp 0x140004bb6
xor eax, eax
xor ecx, ecx
jmp 0x140004bb8
mov cl, 5
xor eax, eax
jmp 0x140004bb8
mov cl, 3
xor eax, eax
xor edx, edx
mov r10, qword [rsp + 0x1e8]
mov r8, qword [rsp + 0x2e0]
mov r9, qword [r8 + 0xc]
mov r12, qword [r8 + 0x24]
mov r8, r9
sub r8, r15
mov r11, qword [rsp + 0x1e0]
add r11, r8
cmp r11, r10
cmovae r11, r10
mov qword [rsp + 0x1e0], r11
test dl, dl
je 0x1400050da
test al, al
jne 0x140004990
cmp r12, r14
jne 0x140004998
invalid
dec dword [rbp + 0x39]
stc
cmp r9, r15
jne 0x140004998
cmp r8, rdi
jne 0x140004998
jmp 0x14000511f
mov cl, 4
mov al, 1
mov dl, 1
jmp 0x140004bb8
xor r12d, r12d
jmp 0x140004cce
mov r12, qword [rsp + 0x2768]
cmp edi, esi
je 0x140004c82
test bl, bl
jne 0x140004c82
test r12, r12
jne 0x140004c82
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x1401f2152]
call fcn.140116170
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor r12d, r12d
test r12, r12
sete al
not bl
test bl, al
jne 0x140005057
cmp r12, 0x2001
jae case.0x14000468d.0
add qword [rsp + 0x1c8], r12
cmp dword [rsp + 0x1c0], 0
je 0x140004cb5
mov ecx, dword [rsp + 0x1c4]
mov rdx, r13
mov r8, r12
call fcn.14001db60
jmp 0x140004cc7
mov ecx, dword [rsp + 0x1c4]
mov rdx, r13
mov r8, r12
call fcn.14001d6f0
mov dword [rsp + 0x1c4], eax
cmp r12, 0x2001
mov esi, 0x2000
cmovae rsi, r12
test r12, r12
jne 0x1400050b9
jmp 0x140005364
mov r8d, 0x16
mov cl, 0x14
lea rdx, str.corrupt_deflate_stream
call fcn.140116170
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0x5f0], rax
lea rax, [rsp + 0x5f8]
movdqu xmmword [rax], xmm6
mov qword [rsp + 0x4d0], r13
mov qword [rsp + 0x4d8], 0x2000
mov qword [rsp + 0x4e0], 0
mov rdx, qword [rsp + 0x2e0]
mov rcx, rbp
lea r8, [rsp + 0x5f0]
lea r9, [rsp + 0x4d0]
call fcn.1401163a0
cmp qword [rsp + 0x2760], 0
mov rdi, qword [rsp + 0x2768]
jne 0x1400046e9
test rdi, rdi
jne 0x140004da7
mov byte [rsp + 0x2ea], 1
cmp byte [rsp + 0x2e9], 0
je 0x140004da7
mov byte [rsp + 0x2e8], 2
mov r12, qword [rsp + 0x4e0]
mov rax, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1e8]
add rax, qword [rsp + 0x600]
cmp rax, rcx
cmovae rax, rcx
mov qword [rsp + 0x1e0], rax
test r12, r12
jne 0x140004c82
movzx edx, byte [rsp + 0x2e8]
test rdx, rdx
jne 0x140005293
mov rdi, rcx
mov rsi, qword [rsp + 0x1d0]
sub rdi, rax
jbe 0x140004e20
test rsi, rsi
je 0x1400046e9
add rsi, rax
cmp rcx, rax
je 0x140004ea9
jmp 0x140004ed0
mov r12, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1f0]
mov r8, r12
sub r8, rcx
jb case.0x14000468d.0
add rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov rcx, rbp
lea rdx, [rsp + 0x1f8]
mov r8, rsi
mov r9, r12
call fcn.1401151b0
cmp qword [rsp + 0x2760], 0
mov rdi, qword [rsp + 0x2768]
je 0x140004e7c
test rdi, rdi
jne 0x140005149
xor edi, edi
jmp 0x140004e83
cmp r12, rdi
cmovbe r12, rdi
mov qword [rsp + 0x1e0], 0
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], r12
xor eax, eax
mov rcx, rdi
cmp rcx, rax
jne 0x140004ed0
mov byte [rsp + 0x2e8], 1
movzx edx, byte [rsp + 0x2e8]
test rdx, rdx
je 0x140004df0
jmp 0x140005293
mov qword [rsp + 0x5f0], rsi
mov qword [rsp + 0x5f8], rdi
mov qword [rsp + 0x600], 0
mov qword [rsp + 0x4d0], r13
mov qword [rsp + 0x4d8], 0x2000
mov qword [rsp + 0x4e0], 0
cmp byte [rsp + 0x2ea], 0
je 0x140004d51
mov rcx, qword [rsp + 0x2e0]
mov edx, 1
call fcn.14016a8c0
mov r12, rax
mov rcx, rax
call fcn.140184dd0
mov esi, eax
test eax, eax
je 0x14000500c
mov rcx, r12
call fcn.140183c50
mov rdi, rax
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rcx, rbp
mov rdx, rdi
mov r8, rax
call fcn.140014600
cmp qword [rsp + 0x2760], 0
jne case.0x14000468d.0
mov r12, qword [rsp + 0x2768]
mov rdi, qword [rsp + 0x2770]
test rdi, rdi
je 0x140004fce
js case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140004fb4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov rbp, rax
test rax, rax
jne 0x140004fd3
jmp case.0x14000468d.0
mov ebp, 1
mov rcx, rbp
mov rdx, r12
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x2760], rdi
mov qword [rsp + 0x2768], rbp
mov qword [rsp + 0x2770], rdi
lea rbp, [rsp + 0x2760]
mov rcx, rbp
call fcn.140116500
mov r12, rax
test esi, esi
mov edi, 0
cmovne rdi, r12
test rdi, rdi
jne 0x1400046e9
mov byte [rsp + 0x2ea], 0
jmp 0x140004d51
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x1401f2152]
call fcn.140116170
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x1401f2152]
call fcn.140116170
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
sub rsi, rdi
jb case.0x14000468d.0
mov qword [rsp + 0x1d0], rsi
mov rsi, rdi
mov r12, rdi
cmp rdi, 0x2001
mov eax, 0x2000
cmovb rsi, rax
jae case.0x14000468d.0
nop
test r12, r12
je 0x140005364
lea rcx, [rsp + 0x160]
mov rdx, r13
mov r8, r12
call fcn.1400f5ae0
test rax, rax
je 0x14000356f
jmp case.0x140004705.2
call fcn.140116290
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov r8d, 0x10
mov cl, 0x25
lea rdx, [0x1401f274a]
call fcn.140116170
mov rdi, rax
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov r8d, 0x2a
mov eax, 0x2a
mov cl, 0x25
lea rdx, str.decompression_not_finished_but_EOF_reached
call fcn.140116170
mov rdi, rax
and eax, 3
add ecx, dword [rax - 0x73]
or eax, 0x190f28
add ecx, dword [rax - 0x73]
or eax, 0x190f28
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, edi
and eax, 3
lea rcx, [0x140196068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rdi + 0xf], 0x23
jne case.0x140004705.2
mov rsi, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14000519a
cmp qword [rbx + 0x10], 0x11
jb 0x140005189
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
dec rdi
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
clc
clc
call sub.kernel32.dll_HeapFree
mov esi, 0x2000
cmp rsi, 0x2001
jb 0x14000357c
jmp case.0x14000468d.0
shr rdi, 0x20
mov esi, 0x2000
cmp edi, 0x23
je 0x14000356f
jmp case.0x140004705.2
mov qword [rsp + 0x80], rsi
mov rsi, r8
mov qword [rsp + 0x58], r9
mov ebp, r10d
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0xd0], rcx
call fcn.1400ecde0
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0x60]
mov r11, qword [rsp + 0x40]
mov r10d, ebp
mov r9, qword [rsp + 0x58]
mov r8, rsi
mov rsi, qword [rsp + 0x80]
jmp 0x140003802
call fcn.1400ecde0
jmp 0x140003951
call fcn.1400ecde0
mov r11, qword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
xor edx, edx
test al, 2
jne 0x140003ed4
jmp 0x140003eea
call fcn.1400ecde0
mov r11, qword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
xor edx, edx
test al, 2
jne 0x140003b61
jmp 0x140003b77
cmp edx, 1
je 0x140004743
jmp 0x140004759
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x80], rsi
mov rsi, r9
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0xd0], rcx
call fcn.1400ecde0
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0x60]
mov r11, qword [rsp + 0x40]
mov r10d, dword [rsp + 0x48]
mov r9, rsi
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x50]
jmp 0x140003df3
call fcn.1400ecde0
mov r11, qword [rsp + 0x40]
mov edx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
mov rcx, rax
jmp 0x14000397a
call fcn.1400ecde0
mov r11, qword [rsp + 0x40]
pop rsp
and al, 0x40
pop rsp
and al, 0x40
mov ecx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
mov rdx, rax
jmp 0x140003ee4
invalid
invalid
call fcn.1400ecde0
mov r11, qword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
mov rdx, rax
jmp 0x140003b71
xor esi, esi
jmp 0x140005367
mov sil, 1
lea rax, [0x14018eb1e]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x556b82b51c52b2c2
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0a90
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, word [rax + 0x14]
test sil, sil
mov rdi, qword [rsp + 0x5b0]
je case.0x14000468d.0
mov rcx, qword [rsp + 0x160]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x5c8], 0
jne 0x1400033ca
jmp 0x1400033db
movzx eax, byte [rsp + 0x3a8]
add byte [rax], al
mov rsi, qword [rsp + 0x3c8]
mov rdi, qword [rsp + 0x3d0]
mov byte [rsp + 0x3a8], 3
test byte [rax + rbp*4], ah
add eax, dword [rax]
add byte [rbx], al
test byte [rax + rbp*4], ah
add eax, dword [rax]
add byte [rbx], al
cmp al, 3
je case.0x14000468d.0
movdqu xmm7, xmmword [rsp + 0x3b0]
mov rbx, qword [rsp + 0x3c0]
cmp al, 2
jb 0x14000559e
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
jne 0x140005582
jmp 0x14000559e
movdqu xmm7, xmmword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x1e8]
jmp 0x140005493
mov esp, 0x1d824
add byte [rax - 0x75], cl
pushfq
and al, 0xe8
add dword [rax], eax
add bl, ch
movdqu xmm7, xmmword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x1e8]
mov rdi, qword [rsp + 0x2b8]
mov r8, qword [rsp + 0x2d8]
mov r12, qword [rsp + 0x2c0]
add byte [rax - 0x75], cl
or eax, 0x200cb2
add byte [rax - 0x75], cl
or eax, 0x200cb2
xor edx, edx
call sub.kernel32.dll_HeapFree
test r12, r12
je 0x140005493
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
or al, 0x20
add byte [rcx], dh
ror byte [rcx - 0x77], cl
clc
call sub.kernel32.dll_HeapFree
cmp r15b, 2
jb 0x14000559e
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x14000559e
cmp qword [r14 + 0x10], 0x11
jae 0x140005589
jmp 0x14000558d
cmp qword [rdi + 0x10], 0x11
jb 0x14000558d
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
movq rsi, xmm7
pshufd xmm0, xmm7, 0xee
movq rdi, xmm0
nop dword [rax]
test rbx, rbx
je 0x1400055f7
cmp rbx, 0x10000
mov r9d, 0x10000
cmovb r9, rbx
mov rcx, r13
mov rdx, rsi
mov r8, rbp
call qword [rdi + 0x18]
cmp qword [rsp + 0x760], 0
jne case.0x14000468d.0
mov rax, qword [rsp + 0x768]
sub rbx, rax
jb case.0x14000468d.0
test rax, rax
jne 0x1400055b0
mov rax, qword [rsp + 0x2f8]
cmp rax, qword [rsp + 0x498]
je 0x140005690
test rax, rax
je 0x140005628
mov r8, qword [rsp + 0x300]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x310], 0
je 0x140005649
mov r8, qword [rsp + 0x318]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x328], 0
je 0x14000566a
mov r8, qword [rsp + 0x330]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x340], 0
je 0x140005690
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
nop dword [rax + rax]
movzx eax, byte [rsp + 0x3a8]
cmp al, 3
je 0x1400056e0
cmp al, 2
jb 0x1400056e0
mov rsi, qword [rsp + 0x3c8]
mov rdi, qword [rsp + 0x3d0]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
cmp dword [rdi + 8], 0
cmp dword [rdi + 8], 0
je 0x1400056e0
cmp qword [rdi + 0x10], 0x11
jb 0x1400056c7
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
nop dword [rax + rax]
add byte [rax], al
add byte [rax], al
mov rax, qword [rsp + 0x1b8]
cmp rax, 4
ja case.default.0x140005700
lea rcx, [0x14019608c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x1d0], 2
jb case.0x140005700.0
mov rsi, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x1f8]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
or byte [rax], al
or byte [rax], al
je case.0x140005700.0
cmp qword [rdi + 0x10], 0x11
jb 0x14000573b
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
jmp 0x14000583a
cmp byte [rsp + 0x1d0], 2
jb 0x14000578e
invalid
cmp byte [rax - 0x75], cl
mov ah, 0x24
lock add dword [rax], eax
add byte [rax - 0x75], cl
mov esp, 0x1f824
add byte [rax - 0x77], cl
int1
mov rsi, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x1f8]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
jg 0x140005777
invalid
je 0x14000578e
jg 0x140005777
add byte [rsp + rbx + 0x48], dh
cmp dword [rdi + 0x10], 0x11
cmp qword [rdi + 0x10], 0x11
jb 0x14000577d
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x2c0], 0
add byte [rax], al
je 0x1400057af
mov r8, qword [rsp + 0x2b8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x2d8]
jmp 0x140005831
cmp qword [rsp + 0x1d8], 0
je 0x1400057da
mov r8, qword [rsp + 0x1d0]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp byte [rsp + 0x1f8], 2
jb 0x14000581c
mov rsi, qword [rsp + 0x218]
mov rdi, qword [rsp + 0x220]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14000581c
cmp qword [rdi + 0x10], 0x11
jb 0x14000580b
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x2e0]
call fcn.14011a100
mov r8, qword [rsp + 0x2e0]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x140005700.0
cmp qword [rsp + 0x1d8], 0
je 0x140005865
mov r8, qword [rsp + 0x1d0]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp byte [rsp + 0x1f8], 2
jb 0x140002e99
invalid
invalid
invalid
invalid
invalid
mov rsi, qword [rsp + 0x218]
mov rdi, qword [rsp + 0x220]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140002e99
cmp qword [rdi + 0x10], 0x11
jb 0x140002e88
adc dword [rdi], ecx
invalid
mov rsi, qword [rsi - 8]
jmp 0x140002e88
mov esi, 1
mov eax, 0x19
mov qword [rsp + 0xf8], rax
lea rax, str.Invalid_local_file_headerInvalid_Central_Directory_headerArchive_header_is_too_largeAES_encryption_without_AES_extra_data_field
mov qword [rsp + 0xb0], rax
mov eax, 0x19
jmp 0x1400030a0
mov rax, qword [rdi + rbx + 0x70]
mov qword [rsp + 0xf8], rax
mov eax, 0x20
cmp word [rdi + rbx + 0x98], 5
jne 0x1400059e1
lea rcx, [0x1401f20b9]
mov qword [rsp + 0xb0], rcx
jmp 0x1400030a0
cmp byte [rdi + rbx + 0xa5], 2
jne case.0x14000468d.0
add rdi, rbx
mov r8d, 0xa0
lea rsi, [rsp + 0x4d0]
mov rcx, rsi
lea rbx, [rsp + 0x5f0]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x1a3]
mov dword [rsp + 0x160], eax
mov dword [rsp + 0x163], ecx
mov r8d, 0xc8
mov rcx, rbp
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov r8d, 0xa0
mov rcx, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
mov dword [rsp + 0x1a0], eax
mov dword [rsp + 0x1a3], ecx
mov r8d, 0xc8
mov rcx, r13
mov rdx, rbp
call sub.msvcrt.dll_memcpy
xor ebx, ebx
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x5a0], rax
mov qword [rsp + 0x598], rdi
xor edi, edi
mov rsi, qword [rsp + 0x130]
mov r14, qword [rsp + 0x590]
jmp 0x1400030ba
mov rcx, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x490]
call fcn.1400de030
mov rsi, rax
lea rax, [0x140192d10]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x4cad9c2c20282275
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0ae0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rsi, rsi
jne case.0x14000468d.0
mov ecx, 5
call fcn.1400e1880
lea rax, [0x14019d7f9]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x9d9369a1c8aa26c
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0670
movabs rsi, 0x27c57e896ec50c0b
xor rsi, qword [rax]
movabs rdi, 0x1aa87bc68a974ae3
xor rdi, qword [rax + 8]
movabs rbx, 0xd6362223afc694ee
xor rbx, qword [rax + 0x10]
movabs r14, 0x1f3eec825c3b285a
xor r14, qword [rax + 0x18]
movabs r15, 0x4aa49c9997777775
xor r15, qword [rax + 0x20]
movabs r12, 0xfd73e6a0ffcdd042
xor r12, qword [rax + 0x28]
mov ebp, 0xb5536813
xor ebp, dword [rax + 0x30]
movzx r13d, word [rax + 0x34]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140005be3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x36
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov ecx, r13d
xor cl, 0x5b
shr r13d, 8
xor r13b, 0xe3
movzx ecx, cl
movzx edx, r13b
shl edx, 8
or edx, ecx
movd xmm0, edx
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r12
mov dword [rax + 0x30], ebp
movd ecx, xmm0
mov word [rax + 0x34], cx
mov qword [rsp + 0x2760], 0x36
mov qword [rsp + 0x2768], rax
mov qword [rsp + 0x2770], 0x36
mov byte [rsp + 0x2778], 0
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2788], 8
mov qword [rsp + 0x2790], 0
mov qword [rsp + 0x27e8], 0
mov qword [rsp + 0x27f8], 0
mov word [rsp + 0x2800], 0
movabs rax, 0x8000000000000001
dec rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x2798], rax
mov word [rsp + 0x2824], 0
mov dword [rsp + 0x27b8], 6
mov dword [rsp + 0x27c8], 6
mov dword [rsp + 0x27d8], 6
mov qword [rsp + 0x2808], 0
mov qword [rsp + 0x2818], 0
mov dword [rsp + 0x2820], 0x8000000
lea rbp, [rsp + 0x760]
lea rdx, [rsp + 0x2760]
mov rcx, rbp
call fcn.1400e1c60
lea rax, [0x1401900b1]
mov qword [rsp + 0x1b8], rax
lea rdx, [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b8]
movabs rax, 0x8bc9004141c0cc5b
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
call fcn.1400f0bf0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov r13, qword [rsp + 0x760]
cmp r13, 2
je case.0x14000468d.0
mov r14, qword [rsp + 0x768]
mov r12, qword [rsp + 0x770]
mov rbx, qword [rsp + 0x778]
mov rsi, qword [rsp + 0x780]
mov rdi, qword [rsp + 0x788]
mov rcx, qword [rsp + 0x790]
mov r15, qword [rsp + 0x798]
call sub.kernel32.dll_CloseHandle
mov rcx, r15
call sub.kernel32.dll_CloseHandle
test r13, r13
je 0x140005ddc
mov rcx, r14
call sub.kernel32.dll_CloseHandle
test r12, r12
je 0x140005de9
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
test rsi, rsi
je 0x140005df6
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
lea rdi, [rsp + 0x2760]
mov rcx, rdi
call fcn.140001450
mov ecx, 0x3c
call fcn.1400e1880
lea rax, [0x1401922c7]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xd8b0ea92c3e8d3bc
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0c20
movabs rcx, 0xa70a893a6f7901db
xor rcx, qword [rax]
movabs rdx, 0xe0a4727b339bf7ac
xor rdx, qword [rax + 8]
movabs r8, 0x21dacde5b38f84ce
xor r8, qword [rax + 0x10]
movabs r9, 0xc01429d174ac6b16
xor r9, qword [rax + 0x18]
movabs r10, 0x9be33eabe0eb4386
xor r10, qword [rax + 0x20]
movabs r11, 0xb8a13ce27af236b0
xor r11, qword [rax + 0x28]
mov esi, 0x789b5cfc
xor esi, dword [rax + 0x30]
movzx eax, word [rax + 0x34]
mov ebx, eax
xor bl, 0xbe
shr eax, 8
xor al, 0x7a
movzx edi, bl
movzx eax, al
shl eax, 8
or eax, edi
mov qword [rsp + 0x2760], rcx
mov qword [rsp + 0x2768], rdx
mov qword [rsp + 0x2770], r8
mov qword [rsp + 0x2778], r9
mov qword [rsp + 0x2780], r10
mov qword [rsp + 0x2788], r11
mov dword [rsp + 0x2790], esi
mov word [rsp + 0x2794], ax
lea rsi, [rsp + 0x2760]
mov edx, 0x36
mov rcx, rsi
call fcn.1400de030
mov rbx, rax
lea rax, [0x14019d62b]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0xeb180f0ae9392a64
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f09e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
test rbx, rbx
jne case.0x14000468d.0
lea rax, [0x14019914b]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x4a4192ecef662d82
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0560
movabs rcx, 0x8717711a680a68d2
xor rcx, qword [rax]
movabs rdx, 0xf99ff9424fb4b580
xor rdx, qword [rax + 8]
mov r8d, 0xd040f939
xor r8d, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
xor al, 0xca
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov dword [rsp + 0x1b0], r8d
mov byte [rsp + 0x1b4], al
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x5d0], rax
mov qword [rsp + 0x5d8], 0x15
lea rax, [0x14019aea8]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xe7888e36bb1ee733
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0dc0
movabs rcx, 0x913af350c13b81d0
xor rcx, qword [rax]
mov qword [rsp + 0x70], rcx
movabs r14, 0xe39a052625420bf8
xor r14, qword [rax + 8]
movabs r15, 0xd77f3b16c4ec0399
xor r15, qword [rax + 0x10]
movabs r12, 0x77f2b8e933a18018
xor r12, qword [rax + 0x18]
movabs r13, 0x20d0a0e43d1e9b5e
xor r13, qword [rax + 0x20]
movabs rbp, 0xc27a13abad4b6ac2
xor rbp, qword [rax + 0x28]
mov edi, 0x81e9462c
xor edi, dword [rax + 0x30]
movzx esi, byte [rax + 0x36]
movzx ebx, word [rax + 0x34]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x1400060c8
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x37
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov ecx, ebx
shr ecx, 8
xor bl, 0xfa
xor cl, 0xc5
movzx edx, bl
movzx ecx, cl
shl ecx, 8
or ecx, edx
movd xmm0, ecx
xor sil, 0xbe
mov rcx, qword [rsp + 0x70]
mov qword [rax], rcx
mov qword [rax + 8], r14
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], rbp
mov dword [rax + 0x30], edi
movd ecx, xmm0
mov word [rax + 0x34], cx
mov byte [rax + 0x36], sil
mov qword [rsp + 0x5f0], 0x37
mov qword [rsp + 0x5f8], rax
mov qword [rsp + 0x600], 0x37
lea rax, [0x140193aeb]
mov qword [rsp + 0x2760], rax
lea rdx, [rsp + 0x2760]
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x944507c80bc92474
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0c80
mov edi, dword [rax]
movzx esi, byte [rax + 6]
movzx ebx, word [rax + 4]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
je 0x1400061ac
lea r14, [rsp + 0x760]
jmp 0x1400061cc
call sub.kernel32.dll_GetProcessHeap
test rax, rax
lea r14, [rsp + 0x760]
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 7
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov ecx, ebx
shr ecx, 8
xor bl, 0x76
xor cl, 0xd3
movzx edx, bl
movzx ecx, cl
shl ecx, 8
or ecx, edx
xor sil, 2
movzx edx, sil
shl rdx, 0x30
movzx ecx, cx
shl rcx, 0x20
or rcx, rdx
mov edx, 0x99744dd1
xor rdx, rdi
or rdx, rcx
mov dword [rax], edx
mov rcx, rdx
shr rcx, 0x30
mov byte [rax + 6], cl
shr rdx, 0x20
mov word [rax + 4], dx
mov qword [rsp + 0x2760], 7
mov qword [rsp + 0x2768], rax
mov qword [rsp + 0x2770], 7
mov byte [rsp + 0x2778], 0
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2788], 8
mov qword [rsp + 0x2790], 0
mov qword [rsp + 0x27e8], 0
mov qword [rsp + 0x27f8], 0
mov word [rsp + 0x2800], 0
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x2798], rax
mov word [rsp + 0x2824], 0
mov dword [rsp + 0x27b8], 6
mov dword [rsp + 0x27c8], 6
mov dword [rsp + 0x27d8], 6
mov qword [rsp + 0x2808], 0
mov qword [rsp + 0x2818], 0
mov dword [rsp + 0x2820], 0x8000000
lea rax, [0x140196586]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0x357b6b7f1fb056b1
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0b70
movzx esi, word [rax]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x14000635a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 2
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov rdi, rax
lea rbx, [rsp + 0x2780]
mov eax, esi
xor al, 0x14
shr esi, 8
xor sil, 0x98
movzx eax, al
movzx ecx, sil
shl ecx, 8
or ecx, eax
movd xmm0, ecx
movd eax, xmm0
mov word [rdi], ax
mov rcx, rbx
xor edx, edx
call fcn.1400db4c0
mov rax, qword [rsp + 0x2788]
mov rcx, qword [rsp + 0x2790]
lea rdx, [rcx + rcx*4]
mov qword [rax + rdx*8], 0
mov qword [rax + rdx*8 + 8], 2
mov qword [rax + rdx*8 + 0x10], rdi
mov qword [rax + rdx*8 + 0x18], 2
mov byte [rax + rdx*8 + 0x20], 0
inc rcx
mov qword [rsp + 0x2790], rcx
lea rax, [0x140195bbb]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0x34cdce3dd7e9d85a
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0720
movabs rcx, 0xce42c44821bcd09f
xor rcx, qword [rax]
movabs rdx, 0x5f92b4f84fba6a8d
xor rdx, qword [rax + 8]
mov r8d, 0x28bbbfbe
xor r8d, dword [rax + 0x10]
mov qword [rsp + 0x148], rcx
mov qword [rsp + 0x150], rdx
mov dword [rsp + 0x158], r8d
lea rax, [rsp + 0x148]
mov qword [rsp + 0x5e0], rax
mov qword [rsp + 0x5e8], 0x14
lea rax, [0x14019a9e4]
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x760]
movabs rax, 0x996d4667975d24b9
mov qword [rsp + 0x760], rax
mov rdx, qword [rsp + 0x760]
call fcn.1400f0610
movabs rcx, 0xe419635c2e2087b7
xor rcx, qword [rax]
movabs rdx, 0xe00b4368c6226bc5
xor rdx, qword [rax + 8]
mov r8d, 0x84a6ec3b
xor r8d, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
xor al, 0xcb
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x168], rdx
mov dword [rsp + 0x170], r8d
mov byte [rsp + 0x174], al
lea rax, [rsp + 0x160]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], 0x15
lea rax, [rsp + 0x5e0]
mov qword [rsp + 0x760], rax
lea rdi, [0x1400f6ac0]
mov qword [rsp + 0x768], rdi
lea rax, [rsp + 0x5f0]
mov qword [rsp + 0x770], rax
lea rax, [0x1400017b0]
mov qword [rsp + 0x778], rax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x780], rax
mov qword [rsp + 0x788], rdi
lea rax, [rsp + 0x5d0]
mov qword [rsp + 0x790], rax
mov qword [rsp + 0x798], rdi
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], 5
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x1c8], r14
mov qword [rsp + 0x1d0], 4
lea rcx, [rsp + 0x4d0]
lea rsi, [rsp + 0x1b8]
mov rdx, rsi
call fcn.1400093b0
mov r14, qword [rsp + 0x4d8]
mov r15, qword [rsp + 0x4e0]
test r15, r15
je 0x140006633
js case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x14000661c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapAlloc
mov r12, rax
test rax, rax
jne 0x140006639
jmp case.0x14000468d.0
mov r12d, 1
mov rcx, r12
mov rdx, r14
mov r8, r15
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x2790]
cmp rdx, qword [rsp + 0x2780]
jne 0x140006669
mov rcx, rbx
call fcn.1400db4c0
mov rdx, qword [rsp + 0x2790]
mov rax, qword [rsp + 0x2788]
lea rcx, [rdx + rdx*4]
mov qword [rax + rcx*8], 0
mov qword [rax + rcx*8 + 8], r15
mov qword [rax + rcx*8 + 0x10], r12
mov qword [rax + rcx*8 + 0x18], r15
mov byte [rax + rcx*8 + 0x20], 0
inc rdx
mov qword [rsp + 0x2790], rdx
cmp qword [rsp + 0x4d0], 0
je 0x1400066b8
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov rbx, rdi
lea rcx, [rsp + 0x760]
lea rdx, [rsp + 0x2760]
call fcn.1400e1c60
lea rax, [0x14019ba4a]
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x1b8]
movabs rax, 0xdc954725da454153
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
call fcn.1400f0b40
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
mov rbp, qword [rsp + 0x760]
cmp rbp, 2
je case.0x14000468d.0
mov r12, qword [rsp + 0x768]
mov rdi, qword [rsp + 0x770]
mov r15, qword [rsp + 0x778]
mov rsi, qword [rsp + 0x780]
mov r14, qword [rsp + 0x788]
mov rcx, qword [rsp + 0x790]
mov r13, qword [rsp + 0x798]
call sub.kernel32.dll_CloseHandle
mov rcx, r13
call sub.kernel32.dll_CloseHandle
test rbp, rbp
je 0x14000677c
mov rcx, r12
call sub.kernel32.dll_CloseHandle
test rdi, rdi
mov r12, rbx
lea rbx, [rsp + 0x4d0]
je 0x140006794
mov rcx, r15
call sub.kernel32.dll_CloseHandle
test rsi, rsi
je 0x1400067a1
mov rcx, r14
call sub.kernel32.dll_CloseHandle
lea r14, [rsp + 0x2760]
mov rcx, r14
call fcn.140001450
cmp qword [rsp + 0x5f0], 0
je 0x1400067d2
mov r8, qword [rsp + 0x5f8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
lea rax, [0x14019b84d]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x3b95369041a70f13
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0bb0
movabs rcx, 0x44aae78db58cf792
xor rcx, qword [rax]
mov edx, 0x13323fa0
xor edx, dword [rax + 8]
mov qword [rsp + 0x4d0], rcx
mov dword [rsp + 0x4d8], edx
mov qword [rsp + 0x760], rbx
mov qword [rsp + 0x768], 0xc
lea r15, [rsp + 0x760]
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x1c0], r12
lea rsi, str.corrupt_deflate_stream
mov qword [rsp + 0x2760], rsi
mov qword [rsp + 0x2768], 2
mov qword [rsp + 0x2780], 0
lea rdi, [rsp + 0x1b8]
mov qword [rsp + 0x2770], rdi
mov qword [rsp + 0x2778], 1
lea r14, [rsp + 0x2760]
mov rcx, r14
call fcn.1400ea730
lea rax, [0x14019675e]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0xdeb87e2c184b2c8b
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0e80
movabs rcx, 0x9bac63627d1b093c
xor rcx, qword [rax]
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xc2
xor r8b, 0x38
movzx eax, al
movzx r8d, r8b
shl r8d, 8
or r8d, eax
xor dl, 0xc5
mov qword [rsp + 0x4d0], rcx
mov word [rsp + 0x4d8], r8w
mov byte [rsp + 0x4da], dl
mov qword [rsp + 0x760], rbx
mov qword [rsp + 0x768], 0xb
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x1c0], r12
mov qword [rsp + 0x2760], rsi
mov qword [rsp + 0x2768], 2
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2770], rdi
mov qword [rsp + 0x2778], 1
lea rdi, [rsp + 0x2760]
mov rcx, rdi
call fcn.1400ea730
lea rax, [0x14019a60e]
mov qword [rsp + 0x2760], rax
mov rcx, qword [rsp + 0x2760]
movabs rax, 0x90e17ce2e810d62a
mov qword [rsp + 0x2760], rax
mov rdx, qword [rsp + 0x2760]
call fcn.1400f0d80
movabs rcx, 0x827ee2d88452f4ba
xor rcx, qword [rax]
mov qword [rsp + 0x70], rcx
movabs rbx, 0x95aaef0c9a9c748a
xor rbx, qword [rax + 8]
movabs r14, 0x118a07fcc12a6e09
xor r14, qword [rax + 0x10]
movabs r15, 0x91273fde7fc04786
xor r15, qword [rax + 0x18]
movabs r12, 0xc55a6619ad4452b0
xor r12, qword [rax + 0x20]
movabs r13, 0xa741a56ebab95875
xor r13, qword [rax + 0x28]
mov esi, 0xee69bf98
xor esi, dword [rax + 0x30]
movzx ebp, byte [rax + 0x36]
movzx edi, word [rax + 0x34]
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140006a5d
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
mov r8d, 0x37
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov ecx, edi
shr ecx, 8
xor dil, 0xf5
xor cl, 0xb9
movzx edx, dil
movzx ecx, cl
shl ecx, 8
or ecx, edx
movd xmm0, ecx
xor bpl, 0xc0
mov rcx, qword [rsp + 0x70]
mov qword [rax], rcx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
mov dword [rax + 0x30], esi
movd ecx, xmm0
mov word [rax + 0x34], cx
mov byte [rax + 0x36], bpl
mov qword [rsp + 0x2760], 0x37
mov qword [rsp + 0x2768], rax
mov qword [rsp + 0x2770], 0x37
mov byte [rsp + 0x2778], 0
mov qword [rsp + 0x2780], 0
mov qword [rsp + 0x2788], 8
mov qword [rsp + 0x2790], 0
mov qword [rsp + 0x27e8], 0
mov qword [rsp + 0x27f8], 0
mov word [rsp + 0x2800], 0
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x2798], rax
mov word [rsp + 0x2824], 0
mov dword [rsp + 0x27b8], 6
mov dword [rsp + 0x27c8], 6
mov dword [rsp + 0x27d8], 6
mov qword [rsp + 0x2808], 0
mov qword [rsp + 0x2818], 0
mov dword [rsp + 0x2820], 0x8000000
lea rcx, [rsp + 0x760]
lea rdx, [rsp + 0x2760]
call fcn.1400e1c60
lea rax, [0x14019c2e1]
mov qword [rsp + 0x1b8], rax
lea rdx, [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b8]
movabs rax, 0x6210ba009eb63950
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
call fcn.1400f0640
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r13, qword [rsp + 0x760]
cmp r13, 2
je case.0x14000468d.0
mov rbx, qword [rsp + 0x768]
mov r12, qword [rsp + 0x770]
mov rdi, qword [rsp + 0x778]
mov r15, qword [rsp + 0x780]
mov rsi, qword [rsp + 0x788]
mov rcx, qword [rsp + 0x790]
mov r14, qword [rsp + 0x798]
call sub.kernel32.dll_CloseHandle
mov rcx, r14
call sub.kernel32.dll_CloseHandle
test r13, r13
je 0x140006c4d
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
test r12, r12
je 0x140006c5a
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
test r15, r15
mov r14, qword [rsp + 0x588]
je 0x140006c6f
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x2760]
call fcn.140001450
mov rcx, qword [rsp + 0x198]
call sub.kernel32.dll_CloseHandle
mov rax, qword [rsp + 0x190]
lock dec qword [rax]
jne 0x140006ca4
mov rcx, qword [rsp + 0x190]
call fcn.1400f45b0
cmp dword [rsp + 0x6a0], 3
jne 0x140006d1f
mov rsi, qword [rsp + 0x6a8]
mov rdi, qword [rsi + 0x58]
test rdi, rdi
je 0x140006ceb
mov rbx, qword [rsi + 0x60]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140006ceb
cmp qword [rbx + 0x10], 0x11
jb 0x140006cda
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsi]
cmp rax, qword [rsp + 0x38]
je 0x140006d0c
test rax, rax
je 0x140006d0c
mov r8, qword [rsi + 8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
jmp 0x140006d36
cmp byte [rsp + 0x4cc], 0
je 0x140006d36
lea rcx, [rsp + 0x6a0]
call fcn.140001560
test r14, r14
je 0x140006d51
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x178]
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x570], 0
je 0x140006d72
mov r8, qword [rsp + 0x578]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
movaps xmm6, xmmword [rsp + 0x12760]
movaps xmm7, xmmword [rsp + 0x12770]
movaps xmm8, xmmword [rsp + 0x12780]
movaps xmm9, xmmword [rsp + 0x12790]
movaps xmm10, xmmword [rsp + 0x127a0]
movaps xmm11, xmmword [rsp + 0x127b0]
add rsp, 0x127c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x2760]
lea rdx, [rsp + 0xe8]
call fcn.1400f9040
mov r9, qword [rsp + 0x2760]
cmp r9, qword [rsp + 0x70]
jne 0x140006dfb
mov r14, qword [rsp + 0x2768]
mov rdi, qword [rsp + 0x2770]
mov r15, qword [rsp + 0x2778]
jmp 0x140002de4
mov r8, qword [rsp + 0x2768]
mov r10, qword [rsp + 0x2770]
mov rbp, qword [rsp + 0x2778]
mov r13, qword [rsp + 0x2780]
mov r11, rbp
shr r11, 0x20
cmp r13w, 0xffff
sete cl
mov eax, r13d
shr eax, 0x10
cmp eax, 0xffff
sete dl
or dl, cl
mov rcx, r13
not rcx
shr rcx, 0x20
test cx, cx
sete cl
or cl, dl
mov rdx, r13
shr rdx, 0x30
cmp edx, 0xffff
setae dl
cmp ebp, 0xffffffff
sete sil
or sil, dl
or sil, cl
mov r14d, 2
lea rdi, [0x1401ce8e0]
mov r15d, 0x2f
jne 0x140006e8e
cmp r11d, 0xffffffff
je 0x140006e8e
cmp r13w, ax
jne 0x140007073
mov qword [rsp + 0x90], r11
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x38], r8
mov rdx, 0xffffffffffffffd6
mov qword [rsp + 0x120], r10
sub rdx, r10
mov qword [rsp + 0x2760], 0
lea r8, [rsp + 0x2760]
mov rcx, r12
mov r9d, 2
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140006f18
mov dword [rsp + 0x2760], 0
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x2760]
mov r8d, 4
call fcn.1400f58b0
test rax, rax
je 0x140006f22
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x78]
xor r14d, r14d
mov rdi, rax
jmp 0x140007073
call sub.kernel32.dll_GetLastError
jmp 0x14000704f
cmp dword [rsp + 0x2760], 0x7064b50
jne 0x14000704f
mov dword [rsp + 0x2760], 0
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x2760]
mov r8d, 4
call fcn.1400f58b0
test rax, rax
jne 0x140006f03
mov ebp, dword [rsp + 0x2760]
mov qword [rsp + 0x2760], 0
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x2760]
mov r8d, 8
call fcn.1400f58b0
test rax, rax
jne 0x140006f03
mov r12, qword [rsp + 0x2760]
mov dword [rsp + 0x2760], 0
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x2760]
mov r8d, 4
call fcn.1400f58b0
test rax, rax
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x78]
jne 0x140006f0d
cmp dword [rsp + 0x90], 0xffffffff
sete al
movzx ecx, r13w
cmp ebp, ecx
sete cl
or cl, al
or sil, cl
je 0x1400081fe
cmp rbx, 0x3c
jb 0x140008250
lea r9, [rbx - 0x3c]
lea rcx, [rsp + 0x2760]
lea rdx, [rsp + 0xe8]
mov r8, r12
call fcn.1400f9280
cmp qword [rsp + 0x2760], 0
je 0x1400082b7
mov r14, qword [rsp + 0x2768]
mov rdi, qword [rsp + 0x2770]
mov r15, qword [rsp + 0x2778]
lea rbp, [rsp + 0x2760]
jmp 0x14000801d
mov eax, ebp
mov r14d, 1
lea rdi, str.Invalid_central_directory_size_or_offsetSupport_for_multi_disk_files_is_not_implementedFile_cannot_contain_ZIP64_central_directory_endPassword_required_to_decrypt_fileCould_not_seek_to_start_of_central_directoryIWbemClassWrapperinnerWQLCould_not_find_central_directory_endInvalid_zip_headerInvalid_digital_signature_headerCould_not_find_ZIP64_central_directory_end
mov r15d, 0x28
cmp rax, rbx
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x78]
jbe 0x1400070a3
lea rbp, [rsp + 0x2760]
test r9, r9
je 0x14000708e
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r12, qword [rsp + 0xe8]
lea r13, [rsp + 0x760]
jmp 0x140002de4
mov r12, rbx
sub r12, rax
mov rsi, r12
sub rsi, qword [rsp + 0x90]
lea rbp, [rsp + 0x2760]
jb 0x14000707b
shr r13, 0x20
movzx ebp, r13w
xor edi, edi
cmp rbp, rbx
cmovbe rdi, rbp
test rdi, rdi
je 0x14000712a
movabs rax, 0xba2e8ba2e8ba2e
cmp rdi, rax
ja case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140007112
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
imul r8, rdi, 0xb0
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
jne 0x14000712f
jmp case.0x14000468d.0
mov eax, 8
mov qword [rsp + 0x148], rdi
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0
xor ecx, ecx
call fcn.1400ea100
test rax, rax
je case.0x14000468d.0
movdqu xmm6, xmmword [rax]
inc qword [rax]
test rdi, rdi
mov qword [rsp + 0x118], rsi
je 0x140007188
cmp rdi, 7
ja 0x14000719a
xor eax, eax
cmp rdi, 4
setae al
lea rsi, [rax*4 + 4]
jmp 0x1400071ef
xor r15d, r15d
lea r14, [0x1401cebf0]
xor r13d, r13d
jmp 0x14000728b
shl rdi, 3
mov esi, 1
cmp rdi, 0xe
jb 0x1400071ef
movabs rcx, 0x2492492492492493
mov rax, rdi
mul rcx
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 2
dec rdi
bsr rcx, rdi
not ecx
mov rsi, 0xffffffffffffffff
shr rsi, cl
movabs rax, 0x7fffffffffffffe
cmp rsi, rax
ja case.0x14000468d.0
inc rsi
mov rbx, rsi
shl rbx, 5
lea rdi, [rsi + 0x10]
mov r14, rbx
add r14, rdi
jb case.0x14000468d.0
movabs rax, 0x8000000000000001
add rax, 0xffffffffffffffef
cmp r14, rax
ja case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140007248
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14000468d.0
mov r14, rax
lea r13, [rsi - 1]
mov rax, rsi
shr rax, 3
mov r15, rsi
and r15, 0xfffffffffffffff8
sub r15, rax
cmp rsi, 9
cmovb r15, r13
add r14, rbx
mov rcx, r14
mov dl, 0xff
mov r8, rdi
call sub.msvcrt.dll_memset
mov qword [rsp + 0x4d0], r14
mov qword [rsp + 0x4d8], r13
mov qword [rsp + 0x4e0], r15
mov qword [rsp + 0x4e8], 0
movdqu xmmword [rsp + 0x4f0], xmm6
mov qword [rsp + 0x2760], 0
mov rcx, qword [rsp + 0xe8]
lea r8, [rsp + 0x2760]
mov rdx, r12
xor r9d, r9d
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x140007ecf
test rbp, rbp
je 0x14000802c
lea rsi, [rsp + 0x2760]
lea rbx, [rsp + 0xe8]
pcmpeqd xmm6, xmm6
xor eax, eax
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x108], rbp
mov qword [rsp + 0x2760], 0
mov rcx, qword [rsp + 0xe8]
xor edx, edx
mov r8, rsi
mov r9d, 1
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x14000820b
mov r12, qword [rsp + 0x2760]
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
cmp dword [rsp + 0x2760], 0x2014b50
jne 0x14000821f
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx r13d, word [rsp + 0x2760]
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx r14d, word [rsp + 0x2760]
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx eax, word [rsp + 0x2760]
mov word [rsp + 0xa8], ax
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx eax, word [rsp + 0x2760]
mov dword [rsp + 0xc8], eax
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx eax, word [rsp + 0x2760]
mov dword [rsp + 0xc0], eax
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov eax, dword [rsp + 0x2760]
mov dword [rsp + 0xa0], eax
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov qword [rsp + 0xe0], r12
mov dword [rsp + 0x98], r14d
mov eax, dword [rsp + 0x2760]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov eax, dword [rsp + 0x2760]
mov qword [rsp + 0x58], rax
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx r14d, word [rsp + 0x2760]
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx r12d, word [rsp + 0x2760]
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
movzx ebp, word [rsp + 0x2760]
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov word [rsp + 0x2760], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov eax, dword [rsp + 0x2760]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x2760], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f58b0
test rax, rax
jne 0x140007f01
mov eax, dword [rsp + 0x2760]
mov qword [rsp + 0x48], rax
mov rcx, r14
mov dl, 1
call fcn.1400f4880
mov qword [rsp + 0x90], rax
mov rcx, rbx
mov rbx, rdx
mov r8, r14
call fcn.1400f58b0
test rax, rax
je 0x14000769c
mov rdi, rax
xor r14d, r14d
jmp 0x140007ad5
mov rcx, r12
mov dl, 1
call fcn.1400f4880
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0x88], rdx
mov r8, r12
call fcn.1400f58b0
test rax, rax
je 0x1400076d3
mov rdi, rax
xor r14d, r14d
jmp 0x140007ab7
mov rcx, rbp
mov dl, 1
call fcn.1400f4880
mov qword [rsp + 0xd8], rax
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0xb8], rdx
mov r8, rbp
call fcn.1400f58b0
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140007714
mov rdi, qword [rsp + 0x68]
xor r14d, r14d
jmp 0x140007a8a
test dword [rsp + 0x98], 0x800
jne 0x140007781
lea rsi, [rsp + 0x2760]
mov rcx, rsi
mov rdx, rbx
mov r8, r14
call fcn.1400f7260
lea rcx, [rsp + 0x1a0]
mov rdx, rsi
call fcn.140115a90
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x2760], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x2768], rax
mov qword [rsp + 0x2770], rbp
lea rcx, [rsp + 0x160]
mov rdx, rsi
call fcn.140115a90
jmp 0x1400077ca
lea rsi, [rsp + 0x2760]
mov rcx, rsi
mov rdx, rbx
mov r8, r14
call fcn.140008ba0
lea rcx, [rsp + 0x1a0]
mov rdx, rsi
call fcn.1400f55f0
mov rcx, rsi
mov rdx, qword [rsp + 0xb8]
mov r8, rbp
call fcn.140008ba0
lea rcx, [rsp + 0x160]
mov rdx, rsi
call fcn.1400f55f0
movzx edx, word [rsp + 0xa8]
mov eax, r13d
shr eax, 8
cmp al, 3
sete cl
mov r8b, 4
sub r8b, cl
test al, al
movzx ecx, r8b
mov eax, 0
cmove ecx, eax
mov ax, 5
cmp edx, 0xb
jle 0x14000780f
cmp edx, 0xc
je 0x14000781e
cmp edx, 0x5d
je 0x140007824
cmp edx, 0x63
jne 0x14000782c
mov ax, 3
jmp 0x14000782c
test edx, edx
je 0x14000782a
cmp edx, 8
jne 0x14000782c
mov ax, 1
jmp 0x14000782c
mov ax, 2
jmp 0x14000782c
mov ax, 4
jmp 0x14000782c
xor eax, eax
mov rdx, qword [rsp + 0x1b0]
mov qword [rsp + 0x2770], rdx
movups xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0x2760], xmm0
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x2778], rdx
mov qword [rsp + 0x2780], rbx
mov qword [rsp + 0x2788], r14
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x2790], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0x2798], rdx
mov qword [rsp + 0x27a0], r12
mov rdx, qword [rsp + 0x170]
lea r8, [rsp + 0x27a8]
mov qword [r8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x160]
movdqu xmmword [r8], xmm0
mov byte [rsp + 0x2809], cl
mov byte [rsp + 0x280a], r13b
mov edx, dword [rsp + 0x98]
mov ecx, edx
and cl, 1
mov byte [rsp + 0x2806], cl
mov ecx, edx
shr cl, 3
and cl, 1
mov byte [rsp + 0x2807], cl
mov word [rsp + 0x27f8], ax
mov edx, dword [rsp + 0xc0]
movzx eax, dx
movzx ecx, word [rsp + 0xa8]
mov word [rsp + 0x27fa], cx
mov ecx, eax
shr ecx, 9
add ecx, 0x7bc
mov dword [rsp + 0x27c0], 0
mov word [rsp + 0x27c8], cx
mov ecx, edx
shr ecx, 5
and cl, 0xf
mov byte [rsp + 0x27ca], cl
mov edx, dword [rsp + 0xc8]
movzx ecx, dx
and al, 0x1f
mov byte [rsp + 0x27cb], al
mov eax, ecx
shr eax, 0xb
mov byte [rsp + 0x27cc], al
mov eax, edx
shr eax, 5
and al, 0x3f
mov byte [rsp + 0x27cd], al
add cl, cl
and cl, 0x3e
mov byte [rsp + 0x27ce], cl
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x27fc], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x27d0], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x27d8], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x27e0], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x27e8], rax
mov qword [rsp + 0x27f0], 0
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x2800], eax
mov byte [rsp + 0x2808], 0
mov byte [rsp + 0x2805], 2
lea rcx, [rsp + 0x5f0]
lea rdx, [rsp + 0x2760]
call fcn.140115750
mov r14, qword [rsp + 0x5f0]
test r14, r14
je 0x140007a12
cmp r14d, 4
je 0x140007a1f
mov rdi, qword [rsp + 0x5f8]
mov r15, qword [rsp + 0x600]
jmp 0x140007a6c
mov rcx, qword [rsp + 0x5f8]
call fcn.1400f9530
cmp word [rsp + 0x27f8], 3
mov r14d, 1
jne 0x140007a49
mov r15d, 0x2b
cmp byte [rsp + 0x2805], 2
jne 0x140007a49
lea rdi, [0x1401cead4]
jmp 0x140007a6c
mov rax, qword [rsp + 0x27e0]
mov r15d, 0x1b
lea rdi, [0x1401ceab9]
add rax, qword [rsp + 0x118]
jae 0x140007e5f
lea rcx, [rsp + 0x2760]
call fcn.1400f95a0
test dword [rsp + 0x98], 0x800
je 0x140007f07
cmp qword [rsp + 0xd8], 0
je 0x140007aab
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0xb8]
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x68], 0
je 0x140007f07
cmp qword [rsp + 0x60], 0
je 0x140007ad5
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x88]
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x70]
cmp qword [rsp + 0x90], 0
je 0x140007f07
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0x98], rsi
cmp rsi, qword [rsp + 0x70]
je 0x140007f07
mov r8d, 0x90
lea rcx, [rsp + 0x1b8]
lea rdx, [rsp + 0x760]
call sub.msvcrt.dll_memcpy
test rdi, rdi
je 0x140007b75
js case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140007b5b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov qword [0x140206128], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x140007b7a
jmp case.0x14000468d.0
mov esi, 1
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [rsp + 0x4f0]
movaps xmmword [rsp + 0x690], xmm0
lea rcx, [rsp + 0x690]
mov qword [rsp + 0x90], rsi
mov rdx, rsi
mov r8, rdi
call fcn.1400f4710
mov r13, rax
cmp qword [rsp + 0x4e0], 0
je 0x140007e45
inc qword [rsp + 0x110]
mov rbp, qword [rsp + 0x4d0]
mov r12, qword [rsp + 0x4d8]
mov rax, r13
shr rax, 0x39
mov qword [rsp + 0xe0], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0xc8], rax
xor eax, eax
mov qword [rsp + 0xa8], rax
and r13, r12
movdqu xmm8, xmmword [rbp + r13]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb esi, xmm0
test si, si
je 0x140007c79
mov eax, esi
lea esi, [rax - 1]
and esi, eax
tzcnt eax, eax
add rax, r13
and rax, r12
shl rax, 5
mov rbx, rbp
sub rbx, rax
cmp rdi, qword [rbx - 0x10]
jne 0x140007c39
mov rdx, qword [rbx - 0x18]
mov rcx, qword [rsp + 0x90]
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140007c39
jmp 0x140007ce1
cmp qword [rsp + 0xa8], 1
mov ecx, 1
je 0x140007ca7
pmovmskb eax, xmm8
xor ecx, ecx
test eax, eax
setne cl
tzcnt eax, eax
add rax, r13
and rax, r12
mov qword [rsp + 0xa0], rax
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140007da4
mov qword [rsp + 0xa8], rcx
mov rax, qword [rsp + 0xc8]
add r13, rax
add r13, 0x10
add rax, 0x10
mov qword [rsp + 0xc8], rax
jmp 0x140007c22
mov rsi, qword [rsp + 0xc0]
mov qword [rbx - 8], rsi
test rdi, rdi
je 0x140007d08
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x90]
call sub.kernel32.dll_HeapFree
cmp rsi, qword [rsp + 0x148]
jne 0x140007d2a
lea rcx, [rsp + 0x148]
mov rdx, rsi
call fcn.1400f4910
mov rsi, qword [rsp + 0x158]
mov rax, qword [rsp + 0x150]
imul rcx, rsi, 0xb0
mov rdx, qword [rsp + 0x98]
mov qword [rax + rcx], rdx
mov qword [rax + rcx + 8], r14
mov qword [rax + rcx + 0x10], rdi
mov qword [rax + rcx + 0x18], r15
add rcx, rax
add rcx, 0x20
mov r8d, 0x90
lea rdx, [rsp + 0x1b8]
call sub.msvcrt.dll_memcpy
inc rsi
mov qword [rsp + 0x158], rsi
mov rbp, qword [rsp + 0x108]
cmp qword [rsp + 0x110], rbp
lea rsi, [rsp + 0x2760]
lea rbx, [rsp + 0xe8]
jne 0x140007316
jmp 0x14000802c
mov rax, qword [rsp + 0xa0]
movzx eax, byte [rbp + rax]
test al, al
js 0x140007dcf
movdqa xmm0, xmmword [rbp]
pmovmskb eax, xmm0
tzcnt eax, eax
mov qword [rsp + 0xa0], rax
movzx eax, byte [rbp + rax]
and al, 1
movzx eax, al
sub qword [rsp + 0x4e0], rax
mov rcx, qword [rsp + 0xa0]
lea rax, [rcx - 0x10]
and r12, rax
mov rax, qword [rsp + 0xe0]
mov byte [rbp + rcx], al
mov byte [r12 + rbp + 0x10], al
inc qword [rsp + 0x4e8]
shl rcx, 5
mov rax, rbp
sub rax, rcx
neg rcx
mov qword [rbp + rcx - 0x20], rdi
mov rcx, qword [rsp + 0x90]
mov qword [rax - 0x18], rcx
mov qword [rax - 0x10], rdi
mov rsi, qword [rsp + 0xc0]
mov qword [rax - 8], rsi
cmp rsi, qword [rsp + 0x148]
je 0x140007d12
jmp 0x140007d2a
lea rcx, [rsp + 0x4d0]
lea rdx, [rsp + 0x4f0]
call fcn.1400f1cd0
jmp 0x140007bd5
mov qword [rsp + 0x27e0], rax
mov rsi, qword [rsp + 0x2760]
mov r14, qword [rsp + 0x2768]
mov rdi, qword [rsp + 0x2770]
mov r15, qword [rsp + 0x2778]
mov r8d, 0x90
lea rcx, [rsp + 0x760]
lea rdx, [rsp + 0x2780]
call sub.msvcrt.dll_memcpy
test dword [rsp + 0x98], 0x800
je 0x140007afa
mov rbx, qword [rsp + 0xb8]
cmp qword [rsp + 0xd8], 0
jne 0x140007ae9
jmp 0x140007afa
call sub.kernel32.dll_GetLastError
mov r14d, 1
lea rdi, [0x1401ce95f]
mov r15d, 0x2c
lea rbp, [rsp + 0x2760]
mov rsi, qword [rsp + 0x4d8]
test rsi, rsi
jne 0x140007f20
jmp 0x140007fe9
mov rdi, rax
xor r14d, r14d
lea rbp, [rsp + 0x2760]
mov rsi, qword [rsp + 0x4d8]
test rsi, rsi
je 0x140007fe9
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0x70], rax
mov rbx, qword [rsp + 0x4e8]
test rbx, rbx
je 0x140007fb7
mov rbp, qword [rsp + 0x70]
movdqa xmm0, xmmword [rbp]
pmovmskb r12d, xmm0
not r12d
lea r13, [rbp + 0x10]
jmp 0x140007f65
dec rbx
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
test rbx, rbx
je 0x140007fb7
test r12w, r12w
jne 0x140007f8d
movdqa xmm0, xmmword [r13]
pmovmskb r12d, xmm0
add rbp, 0xfffffffffffffe00
add r13, 0x10
cmp r12d, 0xffff
je 0x140007f6b
not r12d
tzcnt ecx, r12d
shl rcx, 5
mov rax, rbp
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x140007f52
mov r8, qword [rax - 0x18]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140007f52
mov rax, rsi
shl rax, 5
add rsi, rax
cmp rsi, 0xffffffffffffffcf
lea rbp, [rsp + 0x2760]
je 0x140007fe9
mov r8, qword [rsp + 0x70]
sub r8, rax
add r8, 0xffffffffffffffe0
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r12, qword [rsp + 0x150]
mov rdx, qword [rsp + 0x158]
mov rcx, r12
call fcn.1400f72e0
cmp qword [rsp + 0x148], 0
je 0x14000801d
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, r12
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x78]
jmp 0x14000707b
movzx eax, byte [0x140206138]
mov ecx, 0x78
mov edx, 8
call fcn.140008560
test rax, rax
je case.0x14000468d.0
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmm0, xmmword [rsp + 0x148]
movups xmmword [rax + 0x10], xmm0
mov rax, qword [rsp + 0x158]
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x78]
mov qword [rdi + 0x28], rax
mov rax, qword [rsp + 0x38]
mov qword [rdi + 0x30], rax
mov rax, qword [rsp + 0x120]
mov qword [rdi + 0x38], rax
movdqu xmm0, xmmword [rsp + 0x4d0]
movups xmm1, xmmword [rsp + 0x4e0]
movups xmm2, xmmword [rsp + 0x4f0]
movdqu xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
movups xmmword [rdi + 0x60], xmm2
mov rax, qword [rsp + 0x118]
mov qword [rdi + 0x70], rax
mov r15, qword [rsp + 0xe8]
mov r14d, 4
lea r13, [rsp + 0x760]
lea rbp, [rsp + 0x2760]
jmp 0x140002dec
mov rcx, rsi
call fcn.140183c50
mov rsi, rax
mov rcx, rax
call sub.msvcrt.dll_strlen
lea rcx, [rsp + 0x2760]
mov rdx, rsi
mov r8, rax
call fcn.140014600
cmp qword [rsp + 0x2760], 0
jne case.0x14000468d.0
mov rbx, qword [rsp + 0x2768]
mov rsi, qword [rsp + 0x2770]
mov r15d, 1
test rsi, rsi
jne 0x14000826a
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x2760], rsi
mov qword [rsp + 0x2768], r15
mov qword [rsp + 0x2770], rsi
lea rcx, [rsp + 0x2760]
call fcn.140116500
mov rcx, rbp
call fcn.140183470
cmp qword [rsp + 0xd8], 0
je 0x140008198
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x100]
call sub.kernel32.dll_HeapFree
cmp byte [rsp + 0x108], 2
jb case.0x14000468d.0
mov rcx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
call qword [rsi]
cmp qword [rsi + 8], 0
je case.0x14000468d.0
mov rax, qword [rsp + 0x88]
cmp qword [rax + 0x10], 0x11
jb 0x1400081e6
mov rax, qword [rsp + 0x80]
mov rax, qword [rax - 8]
mov qword [rsp + 0x80], rax
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x80]
call sub.kernel32.dll_HeapFree
ud2
lea rbp, [rsp + 0x2760]
jmp 0x14000801d
call sub.kernel32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
jmp 0x140007f04
mov r14d, 1
mov r15d, 0x20
lea rdi, [0x1401cea99]
lea rbp, [rsp + 0x2760]
mov rsi, qword [rsp + 0x4d8]
test rsi, rsi
jne 0x140007f20
jmp 0x140007fe9
lea rdi, [0x1401ce90f]
mov r14d, 1
lea rbp, [rsp + 0x2760]
jmp 0x14000801d
js case.0x14000468d.0
movzx eax, byte [0x140206138]
mov rcx, qword [0x140206128]
test rcx, rcx
jne 0x140008293
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14000468d.0
mov rcx, rax
mov qword [0x140206128], rax
invalid
invalid
invalid
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x14000813c
ud2
call sub.kernel32.dll_GetLastError
ud2
call fcn.1400e5e40
mov eax, dword [rsp + 0x2788]
cmp eax, dword [rsp + 0x278c]
lea rbp, [rsp + 0x2760]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x78]
jne 0x14000707b
mov rax, qword [rsp + 0x2798]
mov r12, qword [rsp + 0x2780]
add r12, rax
jae 0x14000830a
lea rdi, str.Invalid_central_directory_size_or_offsetSupport_for_multi_disk_files_is_not_implementedFile_cannot_contain_ZIP64_central_directory_endPassword_required_to_decrypt_fileCould_not_seek_to_start_of_central_directoryIWbemClassWrapperinnerWQLCould_not_find_central_directory_endInvalid_zip_headerInvalid_digital_signature_headerCould_not_find_ZIP64_central_directory_end
mov r15d, 0x28
mov r14d, 1
jmp 0x14000801d
mov rsi, rax
mov rbp, qword [rsp + 0x2770]
jmp 0x1400070c6