Function at 0x14016ac28
Capabilities:
Authenticate hmac
Check if file exists
Contain obfuscated stackstrings
Encode data using xor
Get file attributes
Get file size
Query environment variable
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8d8]
sub rsp, 0x9a0
mov qword [rbp + 0x610], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
xor r12d, r12d
mov r13d, r12d
mov dword [rbp + 0x290], r12d
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
lea r15d, [r12 + 0xf]
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], r12b
mov rdx, r9
lea rcx, [rsp + 0x60]
call fcn.140171318
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2e0], r12
lea eax, [r12 + 7]
mov qword [rbp + 0x2e8], rax
mov word [rbp + 0x2d0], r12w
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x2d0]
call fcn.14015c87c
lea rdx, [rbp + 0x2d0]
lea eax, [r12 + 8]
cmp qword [rbp + 0x2e8], rax
cmovae rdx, qword [rbp + 0x2d0]
lea eax, [r12 + 0x19]
mov dword [rbp + 0x2f0], eax
lea eax, [r12 + 0x4c]
mov word [rbp + 0x2f4], ax
lea eax, [r12 + 0x6a]
mov word [rbp + 0x2f6], ax
lea ecx, [rax + 0x12]
mov word [rbp + 0x2f8], cx
lea r14d, [r12 + 0x6b]
mov word [rbp + 0x2fa], r14w
lea eax, [rcx - 0x33]
mov word [rbp + 0x2fc], ax
mov word [rbp + 0x2fe], r14w
lea eax, [rcx - 6]
mov word [rbp + 0x300], ax
lea eax, [rcx + 3]
mov word [rbp + 0x302], ax
lea eax, [rcx - 0xc]
mov word [rbp + 0x304], ax
lea eax, [rcx - 7]
mov word [rbp + 0x306], ax
mov word [rbp + 0x308], cx
xor eax, eax
mov word [rbp + 0x30a], ax
movzx eax, word [rbp + 0x2f4]
mov r8d, r12d
lea r9d, [r12 + 1]
lea r10d, [r12 + 0xb]
movzx eax, word [rbp + r8*2 + 0x2f4]
mov ecx, dword [rbp + 0x2f0]
xor cx, ax
mov word [rbp + r8*2 + 0x2f4], cx
add r8, r9
cmp r8, r10
jb 0x14016ad78
mov word [rbp + 0x30a], r12w
mov r8d, dword [rbp + 0x2e0]
lea rcx, [rbp + 0x2f4]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov ebx, eax
xor edx, edx
lea r8d, [rdx + 0x18]
lea rcx, [rbp + 0x2f4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov edx, ebx
lea rcx, [rbp + 0x2d0]
call fcn.14015c87c
mov eax, 0x37
mov dword [rbp + 0x398], eax
mov word [rbp + 0x39c], r14w
mov eax, 0x76
mov word [rbp + 0x39e], ax
mov eax, 0x47
mov word [rbp + 0x3a0], ax
mov word [rbp + 0x3a2], ax
lea r10d, [rax + 0x2c]
mov word [rbp + 0x3a4], r10w
lea r11d, [rax + 0xf]
mov word [rbp + 0x3a6], r11w
lea r9d, [rax - 4]
mov word [rbp + 0x3a8], r9w
mov word [rbp + 0x3aa], r11w
mov word [rbp + 0x3ac], r14w
lea eax, [r10 + 8]
mov word [rbp + 0x3ae], ax
lea ebx, [rax - 0x23]
mov word [rbp + 0x3b0], bx
lea edx, [rax - 0x27]
mov word [rbp + 0x3b2], dx
mov word [rbp + 0x3b4], r11w
lea ecx, [rax - 0x20]
mov word [rbp + 0x3b6], cx
mov word [rbp + 0x3b8], r14w
lea eax, [rbx + 0x18]
mov word [rbp + 0x3ba], ax
mov word [rbp + 0x3bc], bx
mov word [rbp + 0x3be], bx
lea eax, [rbx - 8]
mov word [rbp + 0x3c0], ax
mov word [rbp + 0x3c2], cx
lea r8d, [r10 - 0x21]
mov word [rbp + 0x3c4], r8w
mov word [rbp + 0x3c6], r14w
lea eax, [rbx + 0x1c]
mov word [rbp + 0x3c8], ax
lea eax, [rbx + 7]
mov word [rbp + 0x3ca], ax
lea eax, [rbx - 0x13]
mov word [rbp + 0x3cc], ax
mov word [rbp + 0x3ce], bx
lea eax, [rbx + 2]
mov word [rbp + 0x3d0], ax
mov word [rbp + 0x3d2], r8w
mov word [rbp + 0x3d4], r14w
lea eax, [rbx + 0xa]
mov word [rbp + 0x3d6], ax
lea eax, [rbx - 0x14]
mov word [rbp + 0x3d8], ax
mov word [rbp + 0x3da], r8w
lea ebx, [rdx - 0xf]
mov word [rbp + 0x3dc], bx
lea eax, [rdx - 0x3d]
mov word [rbp + 0x3de], ax
mov word [rbp + 0x3e0], r10w
mov word [rbp + 0x3e2], r11w
mov word [rbp + 0x3e4], r9w
mov word [rbp + 0x3e6], r11w
mov word [rbp + 0x3e8], r14w
mov word [rbp + 0x3ea], r10w
mov word [rbp + 0x3ec], r8w
lea eax, [rdx - 3]
mov word [rbp + 0x3ee], ax
mov word [rbp + 0x3f0], r11w
lea r10d, [r11 - 0x14]
mov word [rbp + 0x3f2], r10w
mov word [rbp + 0x3f4], cx
mov word [rbp + 0x3f6], r9w
mov word [rbp + 0x3f8], r14w
lea ecx, [rdx + 0x13]
mov word [rbp + 0x3fa], cx
mov word [rbp + 0x3fc], bx
mov word [rbp + 0x3fe], r8w
mov word [rbp + 0x400], ax
mov word [rbp + 0x402], r8w
mov word [rbp + 0x404], bx
mov word [rbp + 0x406], r8w
lea eax, [rdx + 5]
mov word [rbp + 0x408], ax
mov word [rbp + 0x40a], dx
mov word [rbp + 0x40c], r8w
lea ebx, [rdx - 0x10]
mov word [rbp + 0x40e], bx
xor eax, eax
mov word [rbp + 0x410], ax
movzx eax, word [rbp + 0x39c]
mov rdx, r12
lea r9d, [r11 - 0x1c]
lea r8d, [r11 - 0x55]
movzx eax, word [rbp + rdx*2 + 0x39c]
mov ecx, dword [rbp + 0x398]
xor cx, ax
mov word [rbp + rdx*2 + 0x39c], cx
add rdx, r8
cmp rdx, r9
jb 0x14016b007
mov word [rbp + 0x410], r12w
lea rdx, [rbp + 0x39c]
lea rcx, [rbp + 0x720]
call fcn.1400ac71c
nop
mov r10d, 6
mov dword [rbp], r10d
mov eax, dword [rbp]
mov r14w, 0x5c
xor ax, r14w
mov word [rbp + 4], ax
mov eax, dword [rbp]
lea r8d, [r10 - 5]
add ax, r8w
xor ax, 0x41
mov word [rbp + 6], ax
mov eax, dword [rbp]
add ax, 2
lea edx, [r10 + 0x6a]
xor ax, dx
mov word [rbp + 8], ax
mov eax, dword [rbp]
add ax, 3
xor ax, dx
mov word [rbp + 0xa], ax
mov eax, dword [rbp]
add ax, 4
xor ax, bx
mov word [rbp + 0xc], ax
mov eax, dword [rbp]
add ax, 5
lea r9d, [r10 + 0x5b]
xor ax, r9w
mov word [rbp + 0xe], ax
mov eax, dword [rbp]
add ax, r10w
lea edx, [r10 + 0x6e]
xor ax, dx
mov word [rbp + 0x10], ax
mov eax, dword [rbp]
add ax, 7
xor ax, r9w
mov word [rbp + 0x12], ax
mov eax, dword [rbp]
add ax, 8
xor ax, r14w
mov word [rbp + 0x14], ax
mov eax, dword [rbp]
add ax, 9
xor ax, 0x4c
mov word [rbp + 0x16], ax
mov eax, dword [rbp]
add ax, 0xa
lea r11d, [r10 + 0x69]
xor ax, r11w
mov word [rbp + 0x18], ax
mov eax, dword [rbp]
add ax, 0xb
lea r10d, [r8 + 0x62]
xor ax, r10w
mov word [rbp + 0x1a], ax
mov eax, dword [rbp]
add ax, 0xc
xor ax, r9w
mov word [rbp + 0x1c], ax
mov eax, dword [rbp]
add ax, 0xd
xor ax, 0x6c
mov word [rbp + 0x1e], ax
mov eax, dword [rbp]
add ax, 0xe
xor ax, r14w
mov word [rbp + 0x20], ax
mov eax, dword [rbp]
add ax, r15w
xor ax, 0x4d
mov word [rbp + 0x22], ax
mov eax, dword [rbp]
lea ebx, [rdx - 0x64]
add ax, bx
xor ax, 0x69
mov word [rbp + 0x24], ax
mov eax, dword [rbp]
add ax, 0x11
xor ax, r10w
mov word [rbp + 0x26], ax
mov eax, dword [rbp]
add ax, 0x12
lea ecx, [rdx - 2]
mov qword [rbp + 0x288], rcx
xor ax, cx
mov word [rbp + 0x28], ax
mov eax, dword [rbp]
add ax, 0x13
xor ax, r11w
mov word [rbp + 0x2a], ax
mov eax, dword [rbp]
add ax, 0x14
lea r10d, [r8 + 0x72]
xor ax, r10w
mov word [rbp + 0x2c], ax
mov eax, dword [rbp]
add ax, 0x15
xor ax, r11w
mov word [rbp + 0x2e], ax
mov eax, dword [rbp]
add ax, 0x16
xor ax, 0x66
mov word [rbp + 0x30], ax
mov eax, dword [rbp]
add ax, 0x17
xor ax, dx
mov word [rbp + 0x32], ax
mov eax, dword [rbp]
add ax, 0x18
xor ax, r14w
mov word [rbp + 0x34], ax
mov eax, dword [rbp]
add ax, 0x19
xor ax, 0x45
mov word [rbp + 0x36], ax
mov eax, dword [rbp]
add ax, 0x1a
xor ax, 0x64
mov word [rbp + 0x38], ax
mov eax, dword [rbp]
add ax, 0x1b
xor ax, 0x67
mov word [rbp + 0x3a], ax
mov eax, dword [rbp]
add ax, 0x1c
mov r11w, 0x65
xor ax, r11w
mov word [rbp + 0x3c], ax
mov eax, dword [rbp]
add ax, 0x1d
xor ax, r14w
mov word [rbp + 0x3e], ax
mov eax, dword [rbp]
add ax, 0x1e
xor ax, 0x55
mov word [rbp + 0x40], ax
mov eax, dword [rbp]
lea r14d, [r8 + 0x1e]
add ax, r14w
xor ax, r10w
mov word [rbp + 0x42], ax
mov eax, dword [rbp]
lea ecx, [rdx - 0x54]
add ax, cx
xor ax, r11w
mov word [rbp + 0x44], ax
mov eax, dword [rbp]
add ax, 0x21
xor ax, word [rbp + 0x288]
mov word [rbp + 0x46], ax
mov eax, dword [rbp]
add ax, 0x22
xor ax, cx
mov word [rbp + 0x48], ax
mov eax, dword [rbp]
add ax, 0x23
xor ax, 0x44
mov word [rbp + 0x4a], ax
mov eax, dword [rbp]
add ax, 0x24
xor ax, r9w
mov word [rbp + 0x4c], ax
mov eax, dword [rbp]
add ax, 0x25
xor ax, dx
mov word [rbp + 0x4e], ax
mov eax, dword [rbp]
add ax, 0x26
xor ax, r9w
mov word [rbp + 0x50], ax
mov eax, dword [rbp]
add ax, 0x27
xor ax, 0x5c
mov word [rbp + 0x52], ax
mov eax, dword [rbp]
add ax, 0x28
xor ax, 0x44
mov word [rbp + 0x54], ax
mov eax, dword [rbp]
add ax, 0x29
xor ax, r11w
mov word [rbp + 0x56], ax
mov eax, dword [rbp]
add ax, 0x2a
xor ax, 0x66
mov word [rbp + 0x58], ax
mov eax, dword [rbp]
add ax, 0x2b
xor ax, r9w
mov word [rbp + 0x5a], ax
mov eax, dword [rbp]
lea ecx, [rdx - 0x48]
mov dword [rbp + 0x8e0], ecx
add ax, cx
xor ax, 0x75
mov word [rbp + 0x5c], ax
mov eax, dword [rbp]
add ax, 0x2d
xor ax, 0x6c
mov word [rbp + 0x5e], ax
mov eax, dword [rbp]
add ax, 0x2e
xor ax, dx
mov word [rbp + 0x60], ax
mov eax, dword [rbp]
lea ecx, [rdx - 0x45]
mov dword [rbp + 0x414], ecx
add ax, cx
xor ax, 0x5c
mov word [rbp + 0x62], ax
mov eax, dword [rbp]
add ax, 0x30
xor ax, 0x50
mov word [rbp + 0x64], ax
mov eax, dword [rbp]
add ax, 0x31
lea ecx, [rdx - 2]
xor ax, cx
mov word [rbp + 0x66], ax
mov eax, dword [rbp]
add ax, 0x32
xor ax, r11w
mov word [rbp + 0x68], ax
mov eax, dword [rbp]
lea edx, [rbx + 0x23]
mov qword [rbp + 0x440], rdx
add ax, dx
xor ax, 0x66
mov word [rbp + 0x6a], ax
mov eax, dword [rbp]
lea edx, [rbx + 0x24]
mov qword [rbp + 0x328], rdx
add ax, dx
xor ax, r11w
mov word [rbp + 0x6c], ax
mov eax, dword [rbp]
add ax, 0x35
xor ax, cx
mov word [rbp + 0x6e], ax
mov eax, dword [rbp]
add ax, 0x36
xor ax, r11w
mov word [rbp + 0x70], ax
mov eax, dword [rbp]
add ax, 0x37
xor ax, 0x6e
mov word [rbp + 0x72], ax
mov eax, dword [rbp]
add ax, 0x38
xor ax, 0x63
mov word [rbp + 0x74], ax
mov eax, dword [rbp]
add ax, 0x39
xor ax, r11w
mov word [rbp + 0x76], ax
mov eax, dword [rbp]
add ax, 0x3a
xor ax, r10w
mov word [rbp + 0x78], ax
xor eax, eax
mov word [rbp + 0x7a], ax
movzx eax, word [rbp + 4]
mov rdx, r12
lea r9d, [r8 + 0x3a]
movzx eax, word [rbp + rdx*2 + 4]
mov ecx, dword [rbp]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 4], cx
add rdx, r8
cmp rdx, r9
jb 0x14016b425
mov word [rbp + 0x7a], r12w
lea rdx, [rbp + 4]
lea rcx, [rbp + 0x740]
call fcn.1400ac71c
nop
mov eax, 0x63
mov dword [rbp + 0x1ec], eax
mov eax, dword [rbp + 0x1ec]
mov r11w, 0x5c
xor ax, r11w
mov word [rbp + 0x1f0], ax
mov eax, dword [rbp + 0x1ec]
mov r8d, 1
add ax, r8w
xor ax, 0x41
mov word [rbp + 0x1f2], ax
mov eax, dword [rbp + 0x1ec]
add ax, 2
lea edx, [r8 + 0x6f]
xor ax, dx
mov word [rbp + 0x1f4], ax
mov eax, dword [rbp + 0x1ec]
add ax, 3
xor ax, dx
mov word [rbp + 0x1f6], ax
mov eax, dword [rbp + 0x1ec]
add ax, 4
xor ax, 0x44
mov word [rbp + 0x1f8], ax
mov eax, dword [rbp + 0x1ec]
add ax, 5
lea r10d, [r8 + 0x60]
xor ax, r10w
mov word [rbp + 0x1fa], ax
mov eax, dword [rbp + 0x1ec]
add ax, 6
lea r9d, [r8 + 0x73]
xor ax, r9w
mov word [rbp + 0x1fc], ax
mov eax, dword [rbp + 0x1ec]
add ax, 7
xor ax, r10w
mov word [rbp + 0x1fe], ax
mov eax, dword [rbp + 0x1ec]
add ax, 8
xor ax, r11w
mov word [rbp + 0x200], ax
mov eax, dword [rbp + 0x1ec]
add ax, 9
xor ax, 0x4c
mov word [rbp + 0x202], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0xa
xor ax, 0x6f
mov word [rbp + 0x204], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0xb
xor ax, 0x63
mov word [rbp + 0x206], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0xc
xor ax, r10w
mov word [rbp + 0x208], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0xd
xor ax, 0x6c
mov word [rbp + 0x20a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0xe
xor ax, r11w
mov word [rbp + 0x20c], ax
mov eax, dword [rbp + 0x1ec]
add ax, r15w
xor ax, 0x42
mov word [rbp + 0x20e], ax
mov eax, dword [rbp + 0x1ec]
add ax, bx
lea ecx, [rdx + 2]
xor ax, cx
mov word [rbp + 0x210], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x11
xor ax, r10w
mov word [rbp + 0x212], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x12
xor ax, 0x76
mov word [rbp + 0x214], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x13
xor ax, 0x65
mov word [rbp + 0x216], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x14
xor ax, 0x53
mov word [rbp + 0x218], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x15
xor ax, 0x6f
mov word [rbp + 0x21a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x16
xor ax, 0x66
mov word [rbp + 0x21c], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x17
xor ax, r9w
mov word [rbp + 0x21e], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x18
xor ax, 0x77
mov word [rbp + 0x220], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x19
xor ax, r10w
mov word [rbp + 0x222], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x1a
xor ax, cx
mov word [rbp + 0x224], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x1b
xor ax, 0x65
mov word [rbp + 0x226], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x1c
xor ax, r11w
mov word [rbp + 0x228], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x1d
xor ax, 0x42
mov word [rbp + 0x22a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x1e
xor ax, cx
mov word [rbp + 0x22c], ax
mov eax, dword [rbp + 0x1ec]
add ax, r14w
xor ax, r10w
mov word [rbp + 0x22e], ax
mov eax, dword [rbp + 0x1ec]
lea edx, [rcx - 0x52]
add ax, dx
xor ax, 0x76
mov word [rbp + 0x230], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x21
xor ax, 0x65
mov word [rbp + 0x232], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x22
xor ax, 0x2d
mov word [rbp + 0x234], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x23
xor ax, 0x42
mov word [rbp + 0x236], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x24
xor ax, cx
mov word [rbp + 0x238], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x25
xor ax, 0x6f
mov word [rbp + 0x23a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x26
xor ax, 0x77
mov word [rbp + 0x23c], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x27
lea r11d, [r8 + 0x72]
xor ax, r11w
mov word [rbp + 0x23e], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x28
mov cx, 0x65
xor ax, cx
mov word [rbp + 0x240], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x29
xor ax, word [rbp + 0x288]
mov word [rbp + 0x242], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x2a
xor ax, 0x5c
mov word [rbp + 0x244], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x2b
xor ax, 0x55
mov word [rbp + 0x246], ax
mov eax, dword [rbp + 0x1ec]
add ax, word [rbp + 0x8e0]
xor ax, r11w
mov word [rbp + 0x248], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x2d
xor ax, cx
mov word [rbp + 0x24a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x2e
xor ax, word [rbp + 0x288]
mov word [rbp + 0x24c], ax
mov eax, dword [rbp + 0x1ec]
add ax, word [rbp + 0x414]
xor ax, dx
mov word [rbp + 0x24e], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x30
lea edx, [r8 + 0x43]
xor ax, dx
mov word [rbp + 0x250], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x31
xor ax, r10w
mov word [rbp + 0x252], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x32
xor ax, r9w
mov word [rbp + 0x254], ax
mov eax, dword [rbp + 0x1ec]
add ax, word [rbp + 0x440]
xor ax, r10w
mov word [rbp + 0x256], ax
mov eax, dword [rbp + 0x1ec]
add ax, word [rbp + 0x328]
xor ax, 0x5c
mov word [rbp + 0x258], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x35
xor ax, dx
mov word [rbp + 0x25a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x36
xor ax, cx
mov word [rbp + 0x25c], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x37
xor ax, 0x66
mov word [rbp + 0x25e], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x38
xor ax, r10w
mov word [rbp + 0x260], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x39
xor ax, 0x75
mov word [rbp + 0x262], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x3a
xor ax, 0x6c
mov word [rbp + 0x264], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x3b
xor ax, r9w
mov word [rbp + 0x266], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x3c
xor ax, 0x5c
mov word [rbp + 0x268], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x3d
xor ax, 0x50
mov word [rbp + 0x26a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x3e
lea edx, [r8 + 0x71]
xor ax, dx
mov word [rbp + 0x26c], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x3f
xor ax, cx
mov word [rbp + 0x26e], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x40
xor ax, 0x66
mov word [rbp + 0x270], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x41
xor ax, cx
mov word [rbp + 0x272], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x42
xor ax, dx
mov word [rbp + 0x274], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x43
xor ax, cx
mov word [rbp + 0x276], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x44
xor ax, 0x6e
mov word [rbp + 0x278], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x45
xor ax, 0x63
mov word [rbp + 0x27a], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x46
xor ax, cx
mov word [rbp + 0x27c], ax
mov eax, dword [rbp + 0x1ec]
add ax, 0x47
xor ax, r11w
mov word [rbp + 0x27e], ax
xor eax, eax
mov word [rbp + 0x280], ax
movzx eax, word [rbp + 0x1f0]
mov rdx, r12
movzx eax, word [rbp + rdx*2 + 0x1f0]
mov ecx, dword [rbp + 0x1ec]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x1f0], cx
add rdx, r8
cmp rdx, 0x48
jb 0x14016ba83
mov word [rbp + 0x280], r12w
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x760]
call fcn.1400ac71c
nop
mov dword [rbp + 0x104], 0x59
mov eax, dword [rbp + 0x104]
xor ax, 0x5c
mov word [rbp + 0x108], ax
mov eax, dword [rbp + 0x104]
mov r8d, 1
add ax, r8w
xor ax, 0x41
mov word [rbp + 0x10a], ax
mov eax, dword [rbp + 0x104]
add ax, 2
lea r10d, [r8 + 0x6f]
xor ax, r10w
mov word [rbp + 0x10c], ax
mov eax, dword [rbp + 0x104]
add ax, 3
xor ax, r10w
mov word [rbp + 0x10e], ax
mov eax, dword [rbp + 0x104]
add ax, 4
xor ax, 0x44
mov word [rbp + 0x110], ax
mov eax, dword [rbp + 0x104]
add ax, 5
lea r9d, [r8 + 0x60]
xor ax, r9w
mov word [rbp + 0x112], ax
mov eax, dword [rbp + 0x104]
add ax, 6
lea edx, [r8 + 0x73]
xor ax, dx
mov word [rbp + 0x114], ax
mov eax, dword [rbp + 0x104]
add ax, 7
xor ax, r9w
mov word [rbp + 0x116], ax
mov eax, dword [rbp + 0x104]
add ax, 8
xor ax, 0x5c
mov word [rbp + 0x118], ax
mov eax, dword [rbp + 0x104]
add ax, 9
xor ax, 0x52
mov word [rbp + 0x11a], ax
mov eax, dword [rbp + 0x104]
add ax, 0xa
xor ax, 0x6f
mov word [rbp + 0x11c], ax
mov eax, dword [rbp + 0x104]
add ax, 0xb
xor ax, r9w
mov word [rbp + 0x11e], ax
mov eax, dword [rbp + 0x104]
add ax, 0xc
xor ax, 0x6d
mov word [rbp + 0x120], ax
mov eax, dword [rbp + 0x104]
add ax, 0xd
xor ax, 0x69
mov word [rbp + 0x122], ax
mov eax, dword [rbp + 0x104]
add ax, 0xe
xor ax, 0x6e
mov word [rbp + 0x124], ax
mov eax, dword [rbp + 0x104]
add ax, r15w
xor ax, 0x67
mov word [rbp + 0x126], ax
mov eax, dword [rbp + 0x104]
add ax, bx
xor ax, 0x5c
mov word [rbp + 0x128], ax
mov eax, dword [rbp + 0x104]
add ax, 0x11
xor ax, 0x4f
mov word [rbp + 0x12a], ax
mov eax, dword [rbp + 0x104]
add ax, 0x12
xor ax, r10w
mov word [rbp + 0x12c], ax
mov eax, dword [rbp + 0x104]
add ax, 0x13
mov r10w, 0x65
xor ax, r10w
mov word [rbp + 0x12e], ax
mov eax, dword [rbp + 0x104]
add ax, 0x14
lea r11d, [r8 + 0x71]
xor ax, r11w
mov word [rbp + 0x130], ax
mov eax, dword [rbp + 0x104]
add ax, 0x15
xor ax, r9w
mov word [rbp + 0x132], ax
mov eax, dword [rbp + 0x104]
add ax, 0x16
lea ebx, [rdx - 0x54]
xor ax, bx
mov word [rbp + 0x134], ax
mov eax, dword [rbp + 0x104]
add ax, 0x17
xor ax, 0x53
mov word [rbp + 0x136], ax
mov eax, dword [rbp + 0x104]
add ax, 0x18
xor ax, 0x6f
mov word [rbp + 0x138], ax
mov eax, dword [rbp + 0x104]
add ax, 0x19
xor ax, 0x66
mov word [rbp + 0x13a], ax
mov eax, dword [rbp + 0x104]
add ax, 0x1a
xor ax, dx
mov word [rbp + 0x13c], ax
mov eax, dword [rbp + 0x104]
add ax, 0x1b
xor ax, 0x77
mov word [rbp + 0x13e], ax
mov eax, dword [rbp + 0x104]
add ax, 0x1c
xor ax, r9w
mov word [rbp + 0x140], ax
mov eax, dword [rbp + 0x104]
add ax, 0x1d
xor ax, r11w
mov word [rbp + 0x142], ax
mov eax, dword [rbp + 0x104]
add ax, 0x1e
xor ax, r10w
mov word [rbp + 0x144], ax
mov eax, dword [rbp + 0x104]
add ax, r14w
xor ax, 0x5c
mov word [rbp + 0x146], ax
mov eax, dword [rbp + 0x104]
add ax, bx
xor ax, 0x4f
mov word [rbp + 0x148], ax
mov eax, dword [rbp + 0x104]
add ax, 0x21
xor ax, 0x70
mov word [rbp + 0x14a], ax
mov eax, dword [rbp + 0x104]
add ax, 0x22
xor ax, r10w
mov word [rbp + 0x14c], ax
mov eax, dword [rbp + 0x104]
add ax, 0x23
xor ax, r11w
mov word [rbp + 0x14e], ax
mov eax, dword [rbp + 0x104]
add ax, 0x24
xor ax, r9w
mov word [rbp + 0x150], ax
mov eax, dword [rbp + 0x104]
add ax, 0x25
xor ax, bx
mov word [rbp + 0x152], ax
mov eax, dword [rbp + 0x104]
add ax, 0x26
xor ax, 0x53
mov word [rbp + 0x154], ax
mov eax, dword [rbp + 0x104]
add ax, 0x27
xor ax, dx
mov word [rbp + 0x156], ax
mov eax, dword [rbp + 0x104]
add ax, 0x28
xor ax, r9w
mov word [rbp + 0x158], ax
mov eax, dword [rbp + 0x104]
add ax, 0x29
xor ax, 0x62
mov word [rbp + 0x15a], ax
mov eax, dword [rbp + 0x104]
add ax, 0x2a
xor ax, 0x6c
mov word [rbp + 0x15c], ax
mov eax, dword [rbp + 0x104]
add ax, 0x2b
xor ax, r10w
mov word [rbp + 0x15e], ax
mov eax, dword [rbp + 0x104]
add ax, 0x2c
xor ax, 0x5c
mov word [rbp + 0x160], ax
mov eax, dword [rbp + 0x104]
add ax, 0x2d
xor ax, 0x50
mov word [rbp + 0x162], ax
mov eax, dword [rbp + 0x104]
add ax, 0x2e
xor ax, r11w
mov word [rbp + 0x164], ax
mov eax, dword [rbp + 0x104]
add ax, 0x2f
xor ax, r10w
mov word [rbp + 0x166], ax
mov eax, dword [rbp + 0x104]
add ax, 0x30
xor ax, 0x66
mov word [rbp + 0x168], ax
mov eax, dword [rbp + 0x104]
add ax, 0x31
xor ax, r10w
mov word [rbp + 0x16a], ax
mov eax, dword [rbp + 0x104]
add ax, 0x32
xor ax, r11w
mov word [rbp + 0x16c], ax
mov eax, dword [rbp + 0x104]
add ax, 0x33
xor ax, r10w
mov word [rbp + 0x16e], ax
mov eax, dword [rbp + 0x104]
add ax, 0x34
xor ax, 0x6e
mov word [rbp + 0x170], ax
mov eax, dword [rbp + 0x104]
add ax, 0x35
xor ax, 0x63
mov word [rbp + 0x172], ax
mov eax, dword [rbp + 0x104]
add ax, 0x36
xor ax, r10w
mov word [rbp + 0x174], ax
mov eax, dword [rbp + 0x104]
add ax, 0x37
xor ax, 0x73
mov word [rbp + 0x176], ax
xor eax, eax
mov word [rbp + 0x178], ax
movzx eax, word [rbp + 0x108]
mov rdx, r12
lea r14d, [r8 + 0x37]
movzx eax, word [rbp + rdx*2 + 0x108]
mov ecx, dword [rbp + 0x104]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x108], cx
add rdx, r8
cmp rdx, r14
jb 0x14016bf90
mov word [rbp + 0x178], r12w
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x780]
call fcn.1400ac71c
nop
lea rax, [rbp + 0x720]
mov qword [rbp + 0x5a0], rax
lea rax, [rbp + 0x7a0]
mov qword [rbp + 0x5a8], rax
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x450]
call fcn.140131c84
nop
lea r9, [fcn.1400ac668]
mov r8d, 4
mov rdx, rbx
lea rcx, [rbp + 0x720]
call fcn.14027b064
nop
xor edx, edx
lea r8d, [rdx + 0x72]
lea rcx, [rbp + 0x108]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
mov r8d, 0x92
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x76]
lea rcx, [rbp + 0x39c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov eax, 0x43
mov dword [rbp - 0x74], eax
mov eax, 0x2f
mov byte [rbp - 0x70], al
mov byte [rbp - 0x6f], 0x22
mov byte [rbp - 0x6e], 0x30
lea r14d, [rax + 8]
mov byte [rbp - 0x6d], r14b
mov byte [rbp - 0x6c], 0x1c
mov byte [rbp - 0x6b], bl
mov byte [rbp - 0x6a], 0x2b
mov byte [rbp - 0x69], 0x31
lea eax, [r14 - 0xb]
mov byte [rbp - 0x68], al
mov byte [rbp - 0x67], 0x2e
mov byte [rbp - 0x66], 0x26
mov byte [rbp - 0x65], 0x1c
mov byte [rbp - 0x64], 0x35
mov byte [rbp - 0x63], 0x26
mov byte [rbp - 0x62], 0x31
mov byte [rbp - 0x61], 0x30
mov byte [rbp - 0x60], 0x2a
mov byte [rbp - 0x5f], al
mov byte [rbp - 0x5e], 0x2d
xor eax, eax
mov byte [rbp - 0x5d], al
mov al, byte [rbp - 0x70]
mov rdx, r12
lea esi, [r14 - 0x24]
lea r8d, [r14 - 0x36]
mov al, byte [rbp + rdx - 0x70]
mov ecx, dword [rbp - 0x74]
xor cl, al
mov byte [rbp + rdx - 0x70], cl
add rdx, r8
cmp rdx, rsi
jb 0x14016c0db
mov byte [rbp - 0x5d], r12b
mov qword [rbp + 0x4b0], r12
mov qword [rbp + 0x4c0], r12
mov qword [rbp + 0x4c8], r15
mov byte [rbp + 0x4b0], r12b
lea rax, [rbp - 0x70]
or r14, 0xffffffffffffffff
mov rbx, r14
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14016c11b
lea rcx, [rbp + 0x4b0]
cmp rbx, r15
ja 0x14016c14e
mov qword [rbp + 0x4c0], rbx
mov r8, rbx
lea rdx, [rbp - 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx + 0x4b0], r12b
jmp 0x14016c15b
lea r9, [rbp - 0x70]
mov rdx, rbx
call fcn.1400ada10
nop
mov eax, 0x47
mov dword [rbp - 0x5c], eax
mov byte [rbp - 0x58], 0x2b
mov byte [rbp - 0x57], 0x26
lea edx, [rax - 0x13]
mov byte [rbp - 0x56], dl
lea eax, [rdx - 1]
mov byte [rbp - 0x55], al
lea eax, [rdx - 0x1c]
mov byte [rbp - 0x54], al
mov byte [rbp - 0x53], 0x28
lea ecx, [rdx + 3]
mov byte [rbp - 0x52], cl
mov byte [rbp - 0x51], 0x22
mov byte [rbp - 0x50], 0x35
mov byte [rbp - 0x4f], 0x26
mov byte [rbp - 0x4e], al
mov byte [rbp - 0x4d], 0x31
mov byte [rbp - 0x4c], 0x22
mov byte [rbp - 0x4b], 0x35
mov byte [rbp - 0x4a], dl
mov byte [rbp - 0x49], 0x2e
mov byte [rbp - 0x48], 0x28
mov byte [rbp - 0x47], 0x29
xor eax, eax
mov byte [rbp - 0x46], al
mov al, byte [rbp - 0x58]
mov rdx, r12
lea edi, [rcx - 0x36]
lea esi, [rcx - 0x25]
mov al, byte [rbp + rdx - 0x58]
mov ecx, dword [rbp - 0x5c]
xor cl, al
mov byte [rbp + rdx - 0x58], cl
add rdx, rdi
cmp rdx, rsi
jb 0x14016c1c2
mov byte [rbp - 0x46], r12b
mov qword [rbp + 0x4d0], r12
mov qword [rbp + 0x4e0], r12
mov qword [rbp + 0x4e8], r15
mov byte [rbp + 0x4d0], r12b
lea rax, [rbp - 0x58]
mov rbx, r14
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14016c1fe
lea rcx, [rbp + 0x4d0]
cmp rbx, r15
ja 0x14016c231
mov qword [rbp + 0x4e0], rbx
mov r8, rbx
lea rdx, [rbp - 0x58]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx + 0x4d0], r12b
jmp 0x14016c23e
lea r9, [rbp - 0x58]
mov rdx, rbx
call fcn.1400ada10
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], r12
mov ecx, 0x40
call fcn.14027b028
mov rbx, rax
mov qword [rbp + 0x310], rax
mov qword [rbp + 0x318], rax
lea rcx, [rax + 0x40]
mov qword [rbp + 0x320], rcx
lea rax, [rbp + 0x310]
mov qword [rbp + 0x448], rax
lea r15, [rbp + 0x4b0]
mov qword [rbp + 0x538], rbx
mov qword [rbp + 0x540], rbx
lea rax, [rbp + 0x310]
mov qword [rbp + 0x548], rax
mov edi, 0x20
mov rdx, r15
mov rcx, rbx
call fcn.1400bc09c
add rbx, rdi
mov qword [rbp + 0x540], rbx
add r15, rdi
lea rax, [rbp + 0x4f0]
cmp r15, rax
jne 0x14016c2ac
mov qword [rbp + 0x538], rbx
lea rcx, [rbp + 0x538]
call fcn.1400c6c58
mov qword [rbp + 0x318], rbx
mov qword [rbp + 0x448], r12
lea rcx, [rbp + 0x448]
call fcn.140172360
nop
lea r9, [fcn.1400ac898]
mov r8d, 2
mov rdx, rdi
lea rcx, [rbp + 0x4b0]
call fcn.14027b064
nop
xor edx, edx
lea r8d, [rdx + 0x13]
lea rcx, [rbp - 0x58]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x14]
lea rcx, [rbp - 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov r12, qword [rbp + 0x450]
mov r15, qword [rbp + 0x458]
mov qword [rbp + 0x288], r15
mov r10d, 0x80
lea r8d, [r10 - 2]
cmp r12, r15
je 0x14016c93b
lea ebx, [r10 - 0x78]
lea rdx, [0x1402914b8]
lea rcx, [rbp + 0x618]
call fcn.1400ac71c
nop
lea r8, [rbp + 0x2d0]
cmp qword [rbp + 0x2e8], rbx
cmovae r8, qword [rbp + 0x2d0]
mov r9, qword [rbp + 0x2e0]
mov rcx, rax
call fcn.140172680
mov rbx, rax
xor eax, eax
mov qword [rbp + 0x5b0], rax
mov qword [rbp + 0x5c0], rax
mov qword [rbp + 0x5c8], rax
lea r8d, [rax + 0x20]
mov rdx, rbx
lea rcx, [rbp + 0x5b0]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
xor eax, eax
mov qword [rbx + 0x10], rax
lea ecx, [rax + 7]
mov qword [rbx + 0x18], rcx
mov word [rbx], ax
or r13d, 2
mov dword [rbp + 0x290], r13d
mov r8, r12
lea rdx, [rbp + 0x5b0]
lea rcx, [rbp + 0x468]
call fcn.14015d1ec
nop
lea rcx, [rbp + 0x5b0]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x618]
call fcn.1400ac668
lea rcx, [rbp + 0x468]
mov ebx, 8
cmp qword [rbp + 0x480], rbx
cmovae rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14016c918
test al, 0x10
jne 0x14016c918
lea rcx, [rbp + 0x468]
cmp qword [rbp + 0x480], rbx
cmovae rcx, qword [rbp + 0x468]
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
lea eax, [rbx - 5]
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, eax
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rbp + 0x8e0], rax
cmp rax, r14
je 0x14016c913
and dword [rbp + 0x2a4], 0
lea rdx, [rbp + 0x530]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x2000000
jae 0x14016c90a
xor ecx, ecx
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], cl
mov edx, eax
lea rcx, [rbp - 0x20]
call fcn.140171318
lea rdx, [rbp - 0x20]
mov eax, 0x10
cmp qword [rbp - 8], rax
cmovae rdx, qword [rbp - 0x20]
and qword [rsp + 0x20], 0
lea r9, [rbp + 0x2a4]
mov r8d, dword [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14016c8ba
mov edx, dword [rbp + 0x2a4]
lea rcx, [rbp - 0x20]
call fcn.140171318
mov r15, qword [rbp + 0x310]
mov rax, qword [rbp + 0x318]
mov qword [rbp + 0x328], rax
cmp r15, rax
je 0x14016c8b3
mov r13d, 0x10
mov rax, qword [r15 + 0x10]
mov r9, r15
cmp qword [r15 + 0x18], r13
jb 0x14016c554
mov r9, qword [r15]
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], r13
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
call fcn.1400c5530
mov rbx, rax
cmp rax, r14
je 0x14016c7a6
mov rcx, r15
cmp qword [r15 + 0x18], r13
jb 0x14016c58a
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
lea r13, [rax + 3]
add r13, rbx
lea rcx, [rbp - 0x20]
mov eax, 0x10
cmp qword [rbp - 8], rax
cmovae rcx, qword [rbp - 0x20]
mov eax, 3
mov qword [rsp + 0x20], rax
lea r9, [0x1402914bc]
mov r8, r13
mov rdx, qword [rbp - 0x10]
call fcn.1400c5530
mov rbx, rax
cmp rax, r14
je 0x14016c7a0
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], al
sub rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x40]
call fcn.140171318
lea rdx, [rbp - 0x20]
mov r8d, 0x10
cmp qword [rbp - 8], r8
cmovae rdx, qword [rbp - 0x20]
add rdx, r13
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], r8
cmovae rcx, qword [rbp - 0x40]
mov r8, rbx
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
lea rcx, [rbp - 0x40]
mov eax, 0x10
cmp qword [rbp - 0x28], rax
cmovae rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140171318
mov eax, 0x1b
mov dword [rbp + 0x294], eax
mov eax, 0x5e
mov word [rbp + 0x298], ax
mov eax, 0x7f
mov word [rbp + 0x29a], ax
mov eax, 0x7c
mov word [rbp + 0x29c], ax
mov eax, 0x7e
mov word [rbp + 0x29e], ax
xor eax, eax
mov word [rbp + 0x2a0], ax
movzx eax, word [rbp + 0x298]
xor r13d, r13d
mov edx, r13d
lea edi, [r13 + 1]
lea esi, [rdi + 3]
movzx eax, word [rbp + rdx*2 + 0x298]
mov ecx, dword [rbp + 0x294]
xor cx, ax
mov word [rbp + rdx*2 + 0x298], cx
add rdx, rdi
cmp rdx, rsi
jb 0x14016c69f
mov rdi, qword [rbp + 0x8f0]
mov rsi, qword [rbp + 0x8e8]
mov word [rbp + 0x2a0], r13w
lea rcx, [rbp + 0x298]
mov rax, r14
inc rax
cmp word [rcx + rax*2], r13w
jne 0x14016c6e0
mov rcx, r12
cmp qword [r12 + 0x18], 8
jb 0x14016c6f9
mov rcx, qword [r12]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x298]
xor r8d, r8d
mov rdx, qword [r12 + 0x10]
call fcn.1400ad7d0
mov rbx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rbp + 0x298]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp rbx, r14
jne 0x14016c7bc
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x638]
call fcn.1400bc09c
mov rcx, rax
call fcn.14016e410
test al, al
jne 0x14016d7ff
mov rdx, qword [rbp - 0x28]
mov eax, 0x10
cmp rdx, rax
jb 0x14016c790
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016c78b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016da3b
call fcn.14027b384
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r13b
mov r13d, 0x10
add r15, 0x20
cmp r15, qword [rbp + 0x328]
je 0x14016c8a5
jmp 0x14016c544
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x5d0]
lea rcx, [0x1402cf6a8]
call fcn.14016e4dc
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400bbff0
mov rdx, qword [rbp + 0x5e8]
mov r15d, 0x10
cmp rdx, r15
jb 0x14016c826
inc rdx
mov rcx, qword [rbp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016c821
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016d9c6
call fcn.14027b384
mov qword [rbp + 0x5e0], r13
mov ebx, 0xf
mov qword [rbp + 0x5e8], rbx
mov byte [rbp + 0x5d0], r13b
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], r15
cmovae rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
test rax, rax
jne 0x14016d9cd
mov rdx, qword [rbp - 0x28]
cmp rdx, r15
jb 0x14016c899
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016c894
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016da3b
call fcn.14027b384
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rbx
mov byte [rbp - 0x40], r13b
mov r13d, dword [rbp + 0x290]
mov rbx, qword [rbp + 0x8e0]
mov r15, qword [rbp + 0x288]
mov rdx, qword [rbp - 8]
mov eax, 0x10
cmp rdx, rax
jb 0x14016c8f9
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016c8f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016db35
call fcn.14027b384
xor eax, eax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], al
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 8
lea rcx, [rbp + 0x468]
call fcn.1400ac668
add r12, 0x20
cmp r12, r15
jne 0x14016c368
mov r8d, 0x7e
lea r10d, [r8 + 2]
mov edx, 0x68
mov word [rbp + 0x330], dx
lea eax, [rdx - 0x1b]
mov word [rbp + 0x332], ax
lea eax, [rdx + 0x14]
mov word [rbp + 0x334], ax
mov word [rbp + 0x336], ax
lea r12d, [rdx - 0x18]
mov word [rbp + 0x338], r12w
lea ebx, [rdx + 5]
mov word [rbp + 0x33a], bx
mov word [rbp + 0x33c], r10w
mov word [rbp + 0x33e], bx
mov word [rbp + 0x340], dx
lea r11d, [rdx - 0x10]
mov word [rbp + 0x342], r11w
lea edi, [rdx + 0x13]
mov word [rbp + 0x344], di
lea r15d, [rdx + 7]
mov word [rbp + 0x346], r15w
mov word [rbp + 0x348], bx
lea ecx, [rdx + 0x10]
mov word [rbp + 0x34a], cx
mov word [rbp + 0x34c], dx
lea eax, [rdx - 0x15]
mov word [rbp + 0x34e], ax
mov word [rbp + 0x350], di
mov word [rbp + 0x352], di
lea eax, [rdx + 0xb]
mov word [rbp + 0x354], ax
mov word [rbp + 0x356], cx
lea ecx, [rdx + 9]
mov word [rbp + 0x358], cx
mov word [rbp + 0x35a], dx
lea eax, [rdx - 0x19]
mov word [rbp + 0x35c], ax
lea eax, [rdx + 0xc]
mov word [rbp + 0x35e], ax
mov word [rbp + 0x360], r8w
mov word [rbp + 0x362], di
lea eax, [rdx + 0x11]
mov word [rbp + 0x364], ax
mov word [rbp + 0x366], cx
mov word [rbp + 0x368], dx
lea r9d, [rdx - 7]
mov word [rbp + 0x36a], r9w
lea eax, [rdx + 0x17]
mov word [rbp + 0x36c], ax
mov word [rbp + 0x36e], cx
mov word [rbp + 0x370], r8w
lea r9d, [rdx - 0x3c]
mov word [rbp + 0x372], r9w
mov word [rbp + 0x374], r12w
mov word [rbp + 0x376], bx
mov word [rbp + 0x378], r10w
mov word [rbp + 0x37a], bx
mov word [rbp + 0x37c], dx
mov word [rbp + 0x37e], r11w
mov word [rbp + 0x380], bx
mov word [rbp + 0x382], ax
mov word [rbp + 0x384], r10w
mov word [rbp + 0x386], r9w
lea edx, [rbx - 0xb]
mov word [rbp + 0x388], dx
mov word [rbp + 0x38a], cx
mov word [rbp + 0x38c], r8w
mov word [rbp + 0x38e], ax
lea eax, [rbx + 8]
mov word [rbp + 0x390], ax
mov word [rbp + 0x392], di
lea eax, [rbx + 0xd]
mov word [rbp + 0x394], ax
xor r13d, r13d
mov word [rbp + 0x396], r13w
movzx eax, word [rbp + 0x330]
mov ecx, r13d
lea edi, [rbx - 0x6c]
lea ebx, [rdx - 0x56]
lea r15d, [r12 - 0x1d]
movzx eax, word [rbp + rcx*2 + 0x330]
sub ax, bx
mov word [rbp + rcx*2 + 0x330], ax
add rcx, rdi
cmp rcx, r15
jb 0x14016cb14
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x6a0]
call fcn.1400ac71c
nop
mov r10d, 9
mov dword [rbp + 0x17c], r10d
mov eax, dword [rbp + 0x17c]
mov di, 0x5c
xor ax, di
mov word [rbp + 0x180], ax
mov eax, dword [rbp + 0x17c]
lea r8d, [r10 - 8]
add ax, r8w
xor ax, 0x41
mov word [rbp + 0x182], ax
mov eax, dword [rbp + 0x17c]
add ax, 2
lea edx, [r10 + 0x67]
xor ax, dx
mov word [rbp + 0x184], ax
mov eax, dword [rbp + 0x17c]
add ax, 3
xor ax, dx
mov word [rbp + 0x186], ax
mov eax, dword [rbp + 0x17c]
add ax, 4
lea r12d, [r10 + 0x3b]
xor ax, r12w
mov word [rbp + 0x188], ax
mov eax, dword [rbp + 0x17c]
add ax, 5
lea r9d, [r10 + 0x58]
xor ax, r9w
mov word [rbp + 0x18a], ax
mov eax, dword [rbp + 0x17c]
add ax, 6
lea edx, [r10 + 0x6b]
xor ax, dx
mov word [rbp + 0x18c], ax
mov eax, dword [rbp + 0x17c]
add ax, 7
xor ax, r9w
mov word [rbp + 0x18e], ax
mov eax, dword [rbp + 0x17c]
add ax, 8
xor ax, di
mov word [rbp + 0x190], ax
mov eax, dword [rbp + 0x17c]
add ax, r10w
lea esi, [rdx - 0x28]
xor ax, si
mov word [rbp + 0x192], ax
mov eax, dword [rbp + 0x17c]
add ax, 0xa
lea r15d, [r10 + 0x66]
xor ax, r15w
mov word [rbp + 0x194], ax
mov eax, dword [rbp + 0x17c]
add ax, 0xb
lea r10d, [r8 + 0x62]
xor ax, r10w
mov word [rbp + 0x196], ax
mov eax, dword [rbp + 0x17c]
add ax, bx
xor ax, r9w
mov word [rbp + 0x198], ax
mov eax, dword [rbp + 0x17c]
add ax, 0xd
xor ax, 0x6c
mov word [rbp + 0x19a], ax
mov eax, dword [rbp + 0x17c]
add ax, 0xe
xor ax, di
mov word [rbp + 0x19c], ax
mov eax, dword [rbp + 0x17c]
lea ebx, [rdx - 0x65]
add ax, bx
xor ax, 0x4d
mov word [rbp + 0x19e], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x10
xor ax, 0x69
mov word [rbp + 0x1a0], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x11
xor ax, r10w
mov word [rbp + 0x1a2], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x12
lea r11d, [r8 + 0x71]
xor ax, r11w
mov word [rbp + 0x1a4], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x13
xor ax, r15w
mov word [rbp + 0x1a6], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x14
lea r10d, [r8 + 0x72]
xor ax, r10w
mov word [rbp + 0x1a8], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x15
xor ax, r15w
mov word [rbp + 0x1aa], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x16
xor ax, 0x66
mov word [rbp + 0x1ac], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x17
xor ax, dx
mov word [rbp + 0x1ae], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x18
xor ax, di
mov word [rbp + 0x1b0], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x19
xor ax, 0x45
mov word [rbp + 0x1b2], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x1a
xor ax, 0x64
mov word [rbp + 0x1b4], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x1b
xor ax, 0x67
mov word [rbp + 0x1b6], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x1c
xor ax, 0x65
mov word [rbp + 0x1b8], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x1d
xor ax, di
mov word [rbp + 0x1ba], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x1e
xor ax, 0x55
mov word [rbp + 0x1bc], ax
mov eax, dword [rbp + 0x17c]
lea r15d, [r8 + 0x1e]
add ax, r15w
xor ax, r10w
mov word [rbp + 0x1be], ax
mov eax, dword [rbp + 0x17c]
lea ecx, [rdx - 0x54]
add ax, cx
xor ax, 0x65
mov word [rbp + 0x1c0], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x21
xor ax, r11w
mov word [rbp + 0x1c2], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x22
xor ax, cx
mov word [rbp + 0x1c4], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x23
xor ax, r12w
mov word [rbp + 0x1c6], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x24
xor ax, r9w
mov word [rbp + 0x1c8], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x25
xor ax, dx
mov word [rbp + 0x1ca], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x26
xor ax, r9w
mov word [rbp + 0x1cc], ax
mov eax, dword [rbp + 0x17c]
lea r12d, [r8 + 0x26]
add ax, r12w
xor ax, di
mov word [rbp + 0x1ce], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x28
xor ax, si
mov word [rbp + 0x1d0], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x29
xor ax, r9w
mov word [rbp + 0x1d2], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x2a
xor ax, r10w
mov word [rbp + 0x1d4], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x2b
xor ax, dx
mov word [rbp + 0x1d6], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x2c
xor ax, cx
mov word [rbp + 0x1d8], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x2d
xor ax, 0x56
mov word [rbp + 0x1da], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x2e
xor ax, 0x65
mov word [rbp + 0x1dc], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x2f
xor ax, r11w
mov word [rbp + 0x1de], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x30
xor ax, r10w
mov word [rbp + 0x1e0], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x31
xor ax, 0x69
mov word [rbp + 0x1e2], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x32
xor ax, 0x6f
mov word [rbp + 0x1e4], ax
mov eax, dword [rbp + 0x17c]
add ax, 0x33
xor ax, 0x6e
mov word [rbp + 0x1e6], ax
xor eax, eax
mov word [rbp + 0x1e8], ax
movzx eax, word [rbp + 0x180]
mov rdx, r13
lea esi, [rbx + 0x25]
movzx eax, word [rbp + rdx*2 + 0x180]
mov ecx, dword [rbp + 0x17c]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x180], cx
add rdx, r8
cmp rdx, rsi
jb 0x14016cfcc
mov word [rbp + 0x1e8], r13w
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x6c0]
call fcn.1400ac71c
nop
mov eax, 0x2f
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
xor ax, 0x5c
mov word [rbp + 0x80], ax
mov eax, dword [rbp + 0x7c]
mov r8d, 1
add ax, r8w
lea edi, [r8 + 0x40]
xor ax, di
mov word [rbp + 0x82], ax
mov eax, dword [rbp + 0x7c]
add ax, 2
lea edx, [rdi + 0x2f]
xor ax, dx
mov word [rbp + 0x84], ax
mov eax, dword [rbp + 0x7c]
add ax, 3
xor ax, dx
mov word [rbp + 0x86], ax
mov eax, dword [rbp + 0x7c]
add ax, 4
xor ax, 0x44
mov word [rbp + 0x88], ax
mov eax, dword [rbp + 0x7c]
add ax, 5
lea r9d, [r8 + 0x60]
xor ax, r9w
mov word [rbp + 0x8a], ax
mov eax, dword [rbp + 0x7c]
add ax, 6
lea edx, [rdi + 0x33]
xor ax, dx
mov word [rbp + 0x8c], ax
mov eax, dword [rbp + 0x7c]
add ax, 7
xor ax, r9w
mov word [rbp + 0x8e], ax
mov eax, dword [rbp + 0x7c]
add ax, 8
xor ax, 0x5c
mov word [rbp + 0x90], ax
mov eax, dword [rbp + 0x7c]
add ax, 9
xor ax, 0x4c
mov word [rbp + 0x92], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xa
xor ax, 0x6f
mov word [rbp + 0x94], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xb
xor ax, 0x63
mov word [rbp + 0x96], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xc
xor ax, r9w
mov word [rbp + 0x98], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xd
xor ax, 0x6c
mov word [rbp + 0x9a], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xe
xor ax, 0x5c
mov word [rbp + 0x9c], ax
mov eax, dword [rbp + 0x7c]
add ax, bx
xor ax, 0x42
mov word [rbp + 0x9e], ax
mov eax, dword [rbp + 0x7c]
lea ebx, [rdi - 0x31]
add ax, bx
lea r11d, [r8 + 0x71]
xor ax, r11w
mov word [rbp + 0xa0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x11
xor ax, r9w
mov word [rbp + 0xa2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x12
xor ax, 0x76
mov word [rbp + 0xa4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x13
mov r10w, 0x65
xor ax, r10w
mov word [rbp + 0xa6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x14
xor ax, 0x53
mov word [rbp + 0xa8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x15
xor ax, 0x6f
mov word [rbp + 0xaa], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x16
xor ax, 0x66
mov word [rbp + 0xac], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x17
xor ax, dx
mov word [rbp + 0xae], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x18
xor ax, 0x77
mov word [rbp + 0xb0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x19
xor ax, r9w
mov word [rbp + 0xb2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1a
xor ax, r11w
mov word [rbp + 0xb4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1b
xor ax, r10w
mov word [rbp + 0xb6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1c
xor ax, 0x5c
mov word [rbp + 0xb8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1d
xor ax, 0x42
mov word [rbp + 0xba], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1e
xor ax, r11w
mov word [rbp + 0xbc], ax
mov eax, dword [rbp + 0x7c]
add ax, r15w
xor ax, r9w
mov word [rbp + 0xbe], ax
mov eax, dword [rbp + 0x7c]
lea r15d, [r8 + 0x1f]
add ax, r15w
xor ax, 0x76
mov word [rbp + 0xc0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x21
xor ax, r10w
mov word [rbp + 0xc2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x22
xor ax, 0x2d
mov word [rbp + 0xc4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x23
xor ax, 0x42
mov word [rbp + 0xc6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x24
xor ax, r11w
mov word [rbp + 0xc8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x25
xor ax, 0x6f
mov word [rbp + 0xca], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x26
xor ax, 0x77
mov word [rbp + 0xcc], ax
mov eax, dword [rbp + 0x7c]
add ax, r12w
lea ecx, [rdi + 0x32]
xor ax, cx
mov word [rbp + 0xce], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x28
xor ax, r10w
mov word [rbp + 0xd0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x29
xor ax, r11w
mov word [rbp + 0xd2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x2a
xor ax, 0x5c
mov word [rbp + 0xd4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x2b
xor ax, 0x55
mov word [rbp + 0xd6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x2c
xor ax, cx
mov word [rbp + 0xd8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x2d
xor ax, r10w
mov word [rbp + 0xda], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x2e
xor ax, r11w
mov word [rbp + 0xdc], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x2f
xor ax, r15w
mov word [rbp + 0xde], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x30
xor ax, 0x44
mov word [rbp + 0xe0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x31
xor ax, r9w
mov word [rbp + 0xe2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x32
xor ax, dx
mov word [rbp + 0xe4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x33
xor ax, r9w
mov word [rbp + 0xe6], ax
mov eax, dword [rbp + 0x7c]
add ax, si
xor ax, 0x5c
mov word [rbp + 0xe8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x35
xor ax, 0x4c
mov word [rbp + 0xea], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x36
xor ax, r9w
mov word [rbp + 0xec], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x37
xor ax, cx
mov word [rbp + 0xee], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x38
xor ax, dx
mov word [rbp + 0xf0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x39
xor ax, r15w
mov word [rbp + 0xf2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x3a
xor ax, 0x56
mov word [rbp + 0xf4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x3b
xor ax, r10w
mov word [rbp + 0xf6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x3c
xor ax, r11w
mov word [rbp + 0xf8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x3d
xor ax, cx
mov word [rbp + 0xfa], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x3e
xor ax, 0x69
mov word [rbp + 0xfc], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x3f
xor ax, 0x6f
mov word [rbp + 0xfe], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x40
xor ax, 0x6e
mov word [rbp + 0x100], ax
xor eax, eax
mov word [rbp + 0x102], ax
movzx eax, word [rbp + 0x80]
mov rdx, r13
mov rsi, qword [rbp + 0x8e8]
movzx eax, word [rbp + rdx*2 + 0x80]
mov ecx, dword [rbp + 0x7c]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x80], cx
add rdx, r8
cmp rdx, rdi
jb 0x14016d4d5
mov word [rbp + 0x102], r13w
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x6e0]
call fcn.1400ac71c
nop
lea rax, [rbp + 0x6a0]
mov qword [rbp + 0x590], rax
lea rax, [rbp + 0x700]
mov qword [rbp + 0x598], rax
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x550]
call fcn.140131c84
nop
lea r9, [fcn.1400ac668]
mov r8d, 3
mov rdx, r15
lea rcx, [rbp + 0x6a0]
call fcn.14027b064
nop
xor edx, edx
mov r8d, 0x84
lea rcx, [rbp + 0x80]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x6a]
lea rcx, [rbp + 0x180]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x330]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov r15, qword [rbp + 0x550]
mov r12, qword [rbp + 0x558]
mov rdi, qword [rbp + 0x8f0]
cmp r15, r12
je 0x14016dd0c
lea rdx, [0x1402914b8]
lea rcx, [rbp + 0x658]
call fcn.1400ac71c
nop
lea r8, [rbp + 0x2d0]
mov ecx, 8
cmp qword [rbp + 0x2e8], rcx
cmovae r8, qword [rbp + 0x2d0]
mov r9, qword [rbp + 0x2e0]
mov rcx, rax
call fcn.140172680
mov rbx, rax
mov qword [rbp + 0x568], r13
mov qword [rbp + 0x578], r13
mov qword [rbp + 0x580], r13
mov r8d, 0x20
mov rdx, rax
lea rcx, [rbp + 0x568]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], r13
mov eax, 7
mov qword [rbx + 0x18], rax
mov word [rbx], r13w
mov r8, r15
lea rdx, [rbp + 0x568]
lea rcx, [rbp + 0x4f0]
call fcn.14015d1ec
nop
lea rcx, [rbp + 0x568]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x658]
call fcn.1400ac668
lea rcx, [rbp + 0x4f0]
mov eax, 8
cmp qword [rbp + 0x508], rax
cmovae rcx, qword [rbp + 0x4f0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, 0x10
cmp eax, 0xffffffff
je 0x14016db41
test bl, al
jne 0x14016db41
lea rcx, [rbp + 0x4f0]
lea eax, [rbx - 8]
cmp qword [rbp + 0x508], rax
cmovae rcx, qword [rbp + 0x4f0]
mov qword [rsp + 0x30], r13
lea eax, [rbx + 0x70]
mov dword [rsp + 0x28], eax
lea eax, [rbx - 0xd]
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, eax
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, r14
je 0x14016db3c
mov qword [rbp + 0x2b0], r13
mov qword [rbp + 0x2c0], r13
mov eax, 0xf
mov qword [rbp + 0x2c8], rax
mov byte [rbp + 0x2b0], r13b
mov dword [rbp + 0x2a8], r13d
lea edx, [rax + 0x11]
lea rcx, [rbp + 0x2b0]
call fcn.140171318
lea rdx, [rbp + 0x2b0]
mov eax, 0x10
cmp qword [rbp + 0x2c8], rax
cmovae rdx, qword [rbp + 0x2b0]
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x2a8]
mov r8d, dword [rbp + 0x2c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14016d78e
mov edx, dword [rbp + 0x2a8]
lea rcx, [rbp + 0x2b0]
call fcn.140171318
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x700]
call fcn.1400bc09c
mov rcx, rax
call fcn.14016e410
test al, al
jne 0x14016db56
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x2c8]
mov ebx, 0x10
cmp rdx, rbx
jb 0x14016d7e0
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016d7db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
lea r8d, [rbx + 0xf]
cmp rax, r8
ja 0x14016dd05
call fcn.14027b384
mov qword [rbp + 0x2c0], r13
mov eax, 0xf
mov qword [rbp + 0x2c8], rax
mov byte [rbp + 0x2b0], r13b
jmp 0x14016db41
lea r9, [rbp - 0x40]
mov r14d, 0x10
cmp qword [rbp - 0x28], r14
cmovae r9, qword [rbp - 0x40]
lea r8, [0x1402cdae8]
cmp qword [0x1402cdb00], r14
cmovae r8, qword [0x1402cdae8]
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], r14
cmovae rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
call fcn.1401638cc
mov rcx, qword [rbp + 0x8e0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi], r13
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
lea r8d, [r14 + 0x10]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rsp + 0x70], r13
lea ebx, [r14 - 1]
mov qword [rsp + 0x78], rbx
mov byte [rsp + 0x60], r13b
mov rdx, qword [rbp - 0x28]
mov r15d, 0x1000
cmp rdx, r14
jb 0x14016d8bb
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x14016d8b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016da3b
call fcn.14027b384
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rbx
mov byte [rbp - 0x40], r13b
mov rdx, qword [rbp - 8]
cmp rdx, r14
jb 0x14016d8fd
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, r15
jb 0x14016d8f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016da80
call fcn.14027b384
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], rbx
mov byte [rbp - 0x20], r13b
lea rcx, [rbp + 0x468]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x310]
call fcn.1400bc9e0
nop
lea rcx, [rbp + 0x450]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400ac668
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x14016d975
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r15
jb 0x14016d970
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016dafb
call fcn.14027b384
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbx
mov byte [rsp + 0x60], r13b
mov rdx, qword [rdi + 0x18]
cmp rdx, r14
jb 0x14016d9bd
inc rdx
cmp rdx, r15
mov rcx, qword [rdi]
jb 0x14016d9b8
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
add rdx, 0x27
mov ecx, 0x1f
cmp rax, rcx
ja 0x14016db2e
mov rcx, r8
call fcn.14027b384
mov qword [rdi + 0x18], rbx
jmp 0x14016e3e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [rbp + 0x8e0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi], r13
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
mov r8d, 0x20
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbx
mov byte [rsp + 0x60], r13b
mov rdx, qword [rbp - 0x28]
mov r14d, 0x1000
cmp rdx, r15
jb 0x14016da47
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, r14
jb 0x14016da42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14016da42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rbx
mov byte [rbp - 0x40], r13b
mov rdx, qword [rbp - 8]
cmp rdx, r15
jb 0x14016da8c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, r14
jb 0x14016da87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14016da87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], rbx
mov byte [rbp - 0x20], r13b
lea rcx, [rbp + 0x468]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x310]
call fcn.1400bc9e0
nop
lea rcx, [rbp + 0x450]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400ac668
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jb 0x14016db07
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x14016db02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14016db02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbx
mov byte [rsp + 0x60], r13b
mov rdx, qword [rdi + 0x18]
cmp rdx, r15
jb 0x14016d9bd
inc rdx
cmp rdx, r14
jmp 0x14016d993
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ebx, 0x10
lea rcx, [rbp + 0x4f0]
call fcn.1400ac668
add r15, 0x20
jmp 0x14016d5b1
lea r9, [rbp + 0x2b0]
mov r14d, 0x10
cmp qword [rbp + 0x2c8], r14
cmovae r9, qword [rbp + 0x2b0]
lea r8, [0x1402cdae8]
cmp qword [0x1402cdb00], r14
cmovae r8, qword [0x1402cdae8]
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], r14
cmovae rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
call fcn.1401638cc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi], r13
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
lea r8d, [r14 + 0x10]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rsp + 0x70], r13
lea ebx, [r14 - 1]
mov qword [rsp + 0x78], rbx
mov byte [rsp + 0x60], r13b
mov rdx, qword [rbp + 0x2c8]
mov r15d, 0x1000
cmp rdx, r14
jb 0x14016dc20
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, r15
jb 0x14016dc1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
lea r8d, [r14 + 0xf]
cmp rax, r8
ja 0x14016dd05
call fcn.14027b384
mov qword [rbp + 0x2c0], r13
mov qword [rbp + 0x2c8], rbx
mov byte [rbp + 0x2b0], r13b
lea rcx, [rbp + 0x4f0]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x550]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x310]
call fcn.1400bc9e0
nop
lea rcx, [rbp + 0x450]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400ac668
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, r14
jb 0x14016dcb6
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r15
jb 0x14016dcb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x14016dcb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbx
mov byte [rsp + 0x60], r13b
mov rdx, qword [rdi + 0x18]
cmp rdx, r14
jb 0x14016d9bd
inc rdx
mov rcx, qword [rdi]
cmp rdx, r15
jb 0x14016d9b8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
mov ecx, 0x1f
cmp rax, rcx
jbe 0x14016d9b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x7a0]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x5f0], r13
movdqa xmm0, xmmword [0x140291e00]
movdqu xmmword [rbp + 0x600], xmm0
mov word [rbp + 0x5f0], r13w
mov dword [rbp + 0x418], 0xff
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1402d3c98], eax
jle 0x14016e0d3
lea rcx, [0x1402d3c98]
call fcn.14027b540
cmp dword [0x1402d3c98], r14d
jne 0x14016e0d3
lea rax, [rbp + 0x510]
mov qword [rbp + 0x8e0], rax
mov r8d, 0xc
mov dword [rsp + 0x40], r8d
mov eax, dword [rsp + 0x40]
xor al, 0x4f
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
lea r12d, [r8 - 0xb]
add al, r12b
xor al, 0x62
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
lea edx, [r8 + 0x68]
xor al, dl
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x61
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x69
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, 0x6e
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x55
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor al, 0x73
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, 0x65
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
lea ecx, [rdx - 2]
xor al, cl
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x41
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
lea r9d, [r8 + 0x5b]
xor al, r9b
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, r8b
xor al, 0x65
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x6e
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, dl
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
lea r15d, [r8 + 3]
add al, r15b
xor al, 0x53
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, bl
xor al, dl
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, cl
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x69
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, 0x6e
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, r9b
mov byte [rsp + 0x58], al
xor eax, eax
mov byte [rsp + 0x59], al
mov al, byte [rsp + 0x44]
mov rdx, r13
lea esi, [rcx - 0x5d]
mov al, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x44], cl
add rdx, r12
cmp rdx, rsi
jb 0x14016debd
mov byte [rsp + 0x59], r13b
mov qword [rbp + 0x510], r13
mov qword [rbp + 0x520], r13
mov qword [rbp + 0x528], r15
lea rax, [rsp + 0x44]
mov rbx, r14
mov rsi, qword [rbp + 0x8e8]
inc rbx
cmp byte [rax + rbx], r13b
jne 0x14016defe
lea rcx, [rbp + 0x510]
cmp rbx, r15
ja 0x14016df32
mov qword [rbp + 0x520], rbx
mov r8, rbx
lea rdx, [rsp + 0x44]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx + 0x510], r13b
jmp 0x14016df40
lea r9, [rsp + 0x44]
mov rdx, rbx
call fcn.1400ada10
nop
mov eax, 0x1a
mov dword [rbp - 0x80], eax
mov eax, 0x6f
mov byte [rbp - 0x7c], al
mov byte [rbp - 0x7b], 0x68
mov eax, 0x76
mov byte [rbp - 0x7a], al
mov byte [rbp - 0x79], 0x77
mov eax, 0x75
mov byte [rbp - 0x78], al
mov eax, 0x74
mov byte [rbp - 0x77], al
xor eax, eax
mov byte [rbp - 0x76], al
mov al, byte [rbp - 0x7c]
mov rdx, r13
mov edi, 6
mov al, byte [rbp + rdx - 0x7c]
mov ecx, dword [rbp - 0x80]
xor cl, al
mov byte [rbp + rdx - 0x7c], cl
add rdx, r12
cmp rdx, rdi
jb 0x14016df80
mov byte [rbp - 0x76], r13b
mov qword [rbp + 0x420], r13
mov qword [rbp + 0x430], r13
mov qword [rbp + 0x438], r15
mov byte [rbp + 0x420], r13b
lea rax, [rbp - 0x7c]
mov rbx, r14
mov rdi, qword [rbp + 0x8f0]
inc rbx
cmp byte [rax + rbx], r13b
jne 0x14016dfc3
lea rcx, [rbp + 0x420]
cmp rbx, r15
ja 0x14016dff6
mov qword [rbp + 0x430], rbx
mov r8, rbx
lea rdx, [rbp - 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx + 0x420], r13b
jmp 0x14016e003
lea r9, [rbp - 0x7c]
mov rdx, rbx
call fcn.1400ada10
nop
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x678]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x510]
mov rdx, rax
lea rcx, [0x1402d3ca0]
call fcn.14016fa94
nop
mov rdx, qword [rbp + 0x438]
mov ebx, 0x10
cmp rdx, rbx
jb 0x14016e081
inc rdx
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016e07c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
lea r8d, [rbx + 0xf]
cmp rax, r8
jbe 0x14016e07c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0x430], r13
mov qword [rbp + 0x438], r15
mov byte [rbp + 0x420], r13b
xor edx, edx
lea r8d, [rdx + 7]
lea rcx, [rbp - 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x16]
lea rcx, [rsp + 0x44]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ebd4]
call fcn.14027b36c
nop
lea rcx, [0x1402d3c98]
call fcn.14027b4e0
jmp 0x14016e0d9
mov r15d, 0xf
lea r12, [0x1402d3cb8]
mov rcx, r12
cmp qword [0x1402d3cd0], rbx
cmovae rcx, qword [0x1402d3cb8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x14016e127
mov rcx, r12
cmp qword [0x1402d3cd0], rbx
cmovae rcx, qword [0x1402d3cb8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1402d3cb0], rax
mov r8, rax
mov rdx, r12
call fcn.1400bc1a0
lea r8, [rbp + 0x418]
lea rdx, [rbp + 0x7a0]
xor ecx, ecx
call qword [0x1402d3ca8]
test eax, eax
jne 0x14016e2ea
lea rcx, [rbp + 0x7a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
test rax, rax
je 0x14016e2ea
mov qword [rbp + 0x488], r13
mov qword [rbp + 0x498], r13
mov qword [rbp + 0x4a0], r15
lea rax, [rbp + 0x7a0]
inc r14
cmp byte [rax + r14], r13b
jne 0x14016e177
lea rcx, [rbp + 0x488]
cmp r14, r15
ja 0x14016e1ad
mov qword [rbp + 0x498], r14
mov r8, r14
lea rdx, [rbp + 0x7a0]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x488], r13b
jmp 0x14016e1bc
lea r9, [rbp + 0x7a0]
mov rdx, r14
call fcn.1400ada10
lea rdx, [rbp + 0x488]
lea rcx, [rsp + 0x60]
call fcn.1400bbff0
mov rdx, qword [rbp + 0x4a0]
mov r14d, 0x1000
cmp rdx, rbx
jb 0x14016e217
inc rdx
mov rcx, qword [rbp + 0x488]
mov rax, rcx
cmp rdx, r14
jb 0x14016e212
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x14016e212
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsi], r13
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
mov r8d, 0x20
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], r13b
lea rcx, [rbp + 0x5f0]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x550]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x310]
call fcn.1400bc9e0
nop
lea rcx, [rbp + 0x450]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400ac668
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, rbx
jb 0x14016e2c3
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x14016e2be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
ja 0x14016e38b
call fcn.14027b384
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], r13b
mov rdx, qword [rdi + 0x18]
cmp rdx, rbx
jb 0x14016e3df
inc rdx
cmp rdx, r14
jmp 0x14016e3b9
mov qword [rsi], r13
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
mov r8d, 0x20
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], r15
mov byte [rdi], r13b
lea rcx, [rbp + 0x5f0]
call fcn.1400ac668
nop
lea rcx, [rbp + 0x550]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x310]
call fcn.1400bc9e0
nop
lea rcx, [rbp + 0x450]
call fcn.1400af4c8
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400ac668
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, rbx
jb 0x14016e397
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016e392
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x14016e392
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], r13b
mov rdx, qword [rdi + 0x18]
cmp rdx, rbx
jb 0x14016e3df
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rdi]
jb 0x14016e3da
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
mov ecx, 0x1f
cmp rax, rcx
ja 0x14016e408
mov rcx, r8
call fcn.14027b384
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x10], r13
mov byte [rdi], r13b
mov rax, rsi
mov rbx, qword [rsp + 0x9f8]
add rsp, 0x9a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3